[openssl-users] additional data (MAC'ed only) over TLS connection?

Dr. Stephen Henson steve at openssl.org
Mon Aug 15 11:56:22 UTC 2016

On Mon, Aug 15, 2016, Thomas Knauth wrote:

> Hi list,
> the EVP_EncryptUpdate function has the option to pass data that is
> only MAC'ed but not encrypted. Is there some similar provision in the
> BIO interface? I have a use case, where I'd like to "inject"
> pre-encrypted/pre-mac'ed data into a TLS stream. Any suggestion on a
> low-effort way to do this?

In the BIO interface as such, no.

However you can retrieve the EVP_CIPHER_CTX associated with the BIO and handle
things that way.

Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org

More information about the openssl-users mailing list