[openssl/openssl] 54686a: AEAD: reject late AAD in ChaCha20-Poly1305 after p...
"'Daniel Kubec' via openssl-commits" <[email protected]>
| Newsgroups | gmane.comp.encryption.openssl.cvs |
|---|---|
| Message-ID | <openssl/openssl/push/refs/heads/openssl-3.5/[email protected]> |
Branch: refs/heads/openssl-3.5
Home: https://github.com/openssl/openssl
Commit: 54686a9dc99c9ebadfbf2397f3ed52264226f0c0
https://github.com/openssl/openssl/commit/54686a9dc99c9ebadfbf2397f3ed52264226f0c0
Author: Daniel Kubec <[email protected]>
Date: 2026-06-25 (Thu, 25 Jun 2026)
Changed paths:
M providers/implementations/ciphers/cipher_chacha20_poly1305_hw.c
M test/evp_extra_test.c
Log Message:
-----------
AEAD: reject late AAD in ChaCha20-Poly1305 after plaintext update
Align behavior with AES GCM, which already rejects this misuse with a hard
error, by tracking whether plaintext processing has started and returning an
error if AAD is supplied afterwards.
Fixes #31188
Reviewed-by: Tomas Mraz <[email protected]>
Reviewed-by: Bob Beck <[email protected]>
MergeDate: Thu Jun 25 07:02:29 2026
(Merged from https://github.com/openssl/openssl/pull/31673)
To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications
--
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/openssl-3.5/5898e2-54686a%40github.com.