From: Tobias Brunner <tobias@strongswan.org>
Date: Wed, 26 Aug 2020 10:18:06 +0000 (+0200)
Subject: tls-crypto: Use correct key length for ChaCha20/Poly1305
X-Git-Tag: 5.9.2rc1~23^2~99
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=b7ea969b32416445671a2ce0b4e374511f87e230;p=thirdparty%2Fstrongswan.git

tls-crypto: Use correct key length for ChaCha20/Poly1305
---

diff --git a/src/libtls/tls_crypto.c b/src/libtls/tls_crypto.c
index 6b46513933..a48393f380 100644
--- a/src/libtls/tls_crypto.c
+++ b/src/libtls/tls_crypto.c
@@ -494,7 +494,7 @@ static suite_algs_t suite_algs[] = {
 	{ TLS_CHACHA20_POLY1305_SHA256,
 		KEY_ANY, MODP_NONE,
 		HASH_SHA256, PRF_UNDEFINED,
-		AUTH_HMAC_SHA2_256_256, ENCR_CHACHA20_POLY1305, 16,
+		AUTH_HMAC_SHA2_256_256, ENCR_CHACHA20_POLY1305, 32,
 		TLS_1_3,
 	},
 	{ TLS_AES_128_CCM_SHA256,