From: Ingo Franzki Date: Wed, 8 Jan 2025 15:00:33 +0000 (+0100) Subject: speed: Pass IV to EVP_CipherInit_ex for -evp runs with non-AEAD ciphers X-Git-Tag: openssl-3.1.8~23 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=97d7337fb54f052550d26576ae433e9981ce14a6;p=thirdparty%2Fopenssl.git speed: Pass IV to EVP_CipherInit_ex for -evp runs with non-AEAD ciphers Some (non-AEAD) ciphers require an IV to be used. Always pass a (dummy) IV when setting the key. It is ignored by ciphers that do not use an IV. Commit 607a46d003f472d4bce646f3df6e85725094d68a corrected the use of AEAD ciphers, but removed the IV from being passed to EVP_CipherInit_ex() for non-AEAD ciphers. Fixes: https://github.com/openssl/openssl/commit/607a46d003f472d4bce646f3df6e85725094d68a Signed-off-by: Ingo Franzki Reviewed-by: Dmitry Belyavskiy Reviewed-by: Hugo Landau Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26346) (cherry picked from commit b8028d489037033a6eaa02b11755e5be0e688523) --- diff --git a/apps/speed.c b/apps/speed.c index 337bb2190ec..6846ae91aca 100644 --- a/apps/speed.c +++ b/apps/speed.c @@ -2424,7 +2424,7 @@ skip_hmac: if (!ae_mode) { if (!EVP_CipherInit_ex(loopargs[k].ctx, NULL, NULL, - loopargs[k].key, NULL, -1)) { + loopargs[k].key, iv, -1)) { BIO_printf(bio_err, "\nFailed to set the key\n"); ERR_print_errors(bio_err); exit(1);