From 27450aca7d51adaac40978db276c61028e275280 Mon Sep 17 00:00:00 2001 From: toddouska Date: Fri, 2 Oct 2015 11:24:32 -0700 Subject: [PATCH] increment explicit iv and zero nonce even on GCM/CCM failure --- src/internal.c | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/src/internal.c b/src/internal.c index bda99c84a..9321a840e 100644 --- a/src/internal.c +++ b/src/internal.c @@ -5857,8 +5857,7 @@ static INLINE int Encrypt(WOLFSSL* ssl, byte* out, const byte* input, word16 sz) out + sz - ssl->specs.aead_mac_size, ssl->specs.aead_mac_size, additional, AEAD_AUTH_DATA_SZ); - if (ret == 0) - AeadIncrementExpIV(ssl); + AeadIncrementExpIV(ssl); ForceZero(nonce, AEAD_NONCE_SZ); } break; @@ -5902,8 +5901,6 @@ static INLINE int Encrypt(WOLFSSL* ssl, byte* out, const byte* input, word16 sz) out + sz - ssl->specs.aead_mac_size, ssl->specs.aead_mac_size, additional, AEAD_AUTH_DATA_SZ); - if (ret != 0) - return ret; AeadIncrementExpIV(ssl); ForceZero(nonce, AEAD_NONCE_SZ); }