]> git.ipfire.org Git - thirdparty/openssl.git/commit
projects / thirdparty / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f88b9b7) | patch
Limit the number of AES-GCM keys allowed in TLS. A new error is raised if this
authorPauli <paul.dale@oracle.com>
Tue, 11 Sep 2018 23:25:20 +0000 (09:25 +1000)
committerPauli <paul.dale@oracle.com>
Tue, 11 Sep 2018 23:25:20 +0000 (09:25 +1000)
commitd6b345708f8f8a04fdb5ca2e58a953b7fec461e1
treed79bb30287965724938fceeaaea0323cd33715d6tree
parentf88b9b79152b48541b780dfd30bb34e1c7a91e1bcommit | diff
Limit the number of AES-GCM keys allowed in TLS.  A new error is raised if this
limit is ever reached.

This is a FIPS 140-2 requirement from IG A.5 "Key/IV Pair Uniqueness
Requirements from SP 800-38D".

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/7129)
crypto/err/openssl.txt diff | blob | blame | history
crypto/evp/e_aes.c diff | blob | blame | history
crypto/evp/evp_err.c diff | blob | blame | history
include/openssl/evperr.h diff | blob | blame | history
Mirror of https://github.com/openssl/openssl.git