Fixed IKEv1 prf+ keymat expansion beyond 320 bits

diff --git a/src/libstrongswan/crypto/prf_plus.c b/src/libstrongswan/crypto/prf_plus.c
index 29f61197deaebc79f20bbc54ccdf4db79995cc7b..0f06ede834ff7ed9c42392d25097d029d4f6e423 100644 (file)
--- a/src/libstrongswan/crypto/prf_plus.c
+++ b/src/libstrongswan/crypto/prf_plus.c
@@ -72,12 +72,12 @@ METHOD(prf_plus_t, get_bytes, void,
                                this->prf->get_bytes(this->prf, this->seed, NULL);
                                this->prf->get_bytes(this->prf, chunk_from_thing(this->counter),
                                                                         this->buffer.ptr);
+                               this->counter++;
                        }
                        else
                        {
                                this->prf->get_bytes(this->prf, this->seed, this->buffer.ptr);
                        }
-                       this->counter++;
                        this->used = 0;
                }
                round = min(length, this->buffer.len - this->used);