mirrors/wolfssl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix calls to AesGcmDecrypt and AesCcmDecrypt

Browse Source
This commit is contained in:
John Safranek 2014-04-08 16:35:26 -07:00
parent b59b3d7c36
commit 52503c713c
1 changed files with 75 additions and 67 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
src/internal.c
View File

@ -4295,14 +4295,18 @@ static INLINE int Decrypt(CYASSL* ssl, byte* plain, const byte* input,
#ifdef BUILD_AESGCM
case cyassl_aes_gcm:
{
if (AEAD_EXP_IV_SZ + ssl->specs.aead_mac_size > sz) {
return INCOMPLETE_DATA;
}
else {
byte additional[AES_BLOCK_SIZE];
byte nonce[AEAD_NONCE_SZ];
XMEMSET(additional, 0, AES_BLOCK_SIZE);
/* sequence number field is 64-bits, we only use 32-bits */
c32toa(GetSEQIncrement(ssl, 1), additional + AEAD_SEQ_OFFSET);
c32toa(GetSEQIncrement(ssl, 1),
additional + AEAD_SEQ_OFFSET);
additional[AEAD_TYPE_OFFSET] = ssl->curRL.type;
additional[AEAD_VMAJ_OFFSET] = ssl->curRL.pvMajor;
@ -4331,14 +4335,18 @@ static INLINE int Decrypt(CYASSL* ssl, byte* plain, const byte* input,
#ifdef HAVE_AESCCM
case cyassl_aes_ccm:
{
if (AEAD_EXP_IV_SZ + ssl->specs.aead_mac_size > sz) {
return INCOMPLETE_DATA;
}
else {
byte additional[AES_BLOCK_SIZE];
byte nonce[AEAD_NONCE_SZ];
XMEMSET(additional, 0, AES_BLOCK_SIZE);
/* sequence number field is 64-bits, we only use 32-bits */
c32toa(GetSEQIncrement(ssl, 1), additional + AEAD_SEQ_OFFSET);
c32toa(GetSEQIncrement(ssl, 1),
additional + AEAD_SEQ_OFFSET);
#ifdef CYASSL_DTLS
if (ssl->options.dtls)