]> git.ipfire.org Git - thirdparty/hostap.git/commit
OpenSSL: Extend key_block size determination to support GCM/CCM ciphers
authorJouni Malinen <j@w1.fi>
Mon, 23 Dec 2019 16:58:43 +0000 (18:58 +0200)
committerJouni Malinen <j@w1.fi>
Mon, 23 Dec 2019 18:02:45 +0000 (20:02 +0200)
commitb2e2a8588dc916269580576a99add668ea603a53
tree05f9ff60fcd1b860cf25de2766a0e8a372f405b0
parentf94e677d331e3464ef62eb54b333998bd07030c4
OpenSSL: Extend key_block size determination to support GCM/CCM ciphers

These ciphers do not use a separate MAC algorithm, so digest nid will be
NID_undef. In addition, the fixed_iv_length needs to be set to 4 which
is the implicit part of the IV from PRF. This is needed to fix EAP-FAST
key derivation for cases where GCM/CCM ciphers are used for TLS.

Signed-off-by: Jouni Malinen <j@w1.fi>
src/crypto/tls_openssl.c