mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2025-03-28 08:37:25 +00:00
bugfix: if the len of iv is not 96-bit, y0 can be calculated incorrectly
An initialization vector IV can have any number of bits between 1 and 2^64. So it should be filled to the lower 64-bit in the last step when computing ghash. Signed-off-by: openluopworld <luopengxq@gmail.com>
This commit is contained in:
parent
6c8183f0c9
commit
08fd463ee4
@ -278,8 +278,7 @@ int mbedtls_gcm_starts( mbedtls_gcm_context *ctx,
|
||||
else
|
||||
{
|
||||
memset( work_buf, 0x00, 16 );
|
||||
MBEDTLS_PUT_UINT32_BE( iv_len >> 29, work_buf, 8 );
|
||||
MBEDTLS_PUT_UINT32_BE( iv_len << 3, work_buf, 12 );
|
||||
MBEDTLS_PUT_UINT64_BE( iv_len * 8, work_buf, 8 );
|
||||
|
||||
p = iv;
|
||||
while( iv_len > 0 )
|
||||
|
Loading…
x
Reference in New Issue
Block a user