[openssl-dev] [openssl.org #4161] Bug : aes-128-ccm cipher mode not working

[Stephen Henson via RT]

On Mon Nov 30 15:25:01 2015, prashantd at ryussi.com wrote:
> Hi,
>
> We are trying to generate CMAC authentication code using EVP_aes_128_ccm
> mode. The CMAC_Final function returning the single byte hash code which
> suppose to return 16-byte hash code.
>
> We tried same algorithm with EVP_aes_128_cbc mode which is returning
> 16-byte hash code but we have specific requirement for EVP_aes_128_ccm mode.
>

CCM mode is not compatible with CMAC.

It doesn't make a lot of sense because CCM mode has a MAC built in. To use that
you need to set up the cipher correctly. See the documentation,
demos/evp/aesccm.c and the wiki for more details.

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org