]> git.ipfire.org Git - thirdparty/openssl.git/commit
projects / thirdparty / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7e21ddb) | patch
Fix EVP_DecryptFinal_ex() for ChaCha20-Poly1305.
authorDaniel Kubec <kubec@openssl.org>
Sat, 27 Sep 2025 22:24:18 +0000 (00:24 +0200)
committerTomas Mraz <tomas@openssl.org>
Thu, 2 Oct 2025 08:07:32 +0000 (10:07 +0200)
commit6387ec6d492caffa4c9bc137f1cb6c171366c7c7
treebe165d4acf15506a271f1b2045eba618db705ca6tree | snapshot
parent7e21ddb05e4a5fb8f2e50d9359c76fd6f3897ab6commit | diff
Fix EVP_DecryptFinal_ex() for ChaCha20-Poly1305.

When using the ChaCha20-Poly1305 algorithm, the final interface
returns success without setting the authentication tag, whereas
the AES-GCM algorithm correctly returns failure in such cases.

Fixes #28137

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28683)
providers/implementations/ciphers/cipher_chacha20_poly1305.c.in diff | blob | blame | history
test/evp_extra_test.c diff | blob | blame | history
Mirror of https://github.com/openssl/openssl.git