diff options
| author | Jack Lloyd <[email protected]> | 2016-05-23 11:40:11 -0400 |
|---|---|---|
| committer | Jack Lloyd <[email protected]> | 2016-05-23 11:40:11 -0400 |
| commit | 4f04a39d104a65d55762b6d03cf7ec21aac02ffa (patch) | |
| tree | 15d7e446b44c932c938c4367c6f2facb8a63a0af /src/lib/cert/x509/x509self.h | |
| parent | e4829225d91fd712ad70bb61f291b268f8d0d0d0 (diff) | |
Fix GCM counter increment
GCM is defined as having a 32-bit counter, but CTR_BE incremented the
counter across the entire block. This caused incorrect results if
a very large message (2**39 bits) was processed, or if the GHASH
derived nonce ended up having a counter field near to 2**32
Thanks to Juraj Somorovsky for the bug report and repro.
Diffstat (limited to 'src/lib/cert/x509/x509self.h')
0 files changed, 0 insertions, 0 deletions