[openssl/openssl] 4bf858: [providers/implementations/ciphers] GCM-SIV: rejec...

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 4bf85819b7cba298108ea03f3e2aa067f20ded72
      https://github.com/openssl/openssl/commit/4bf85819b7cba298108ea03f3e2aa067f20ded72
  Author: Billy Brumley <[email protected]>
  Date:   2026-07-20 (Mon, 20 Jul 2026)

  Changed paths:
    M doc/man7/EVP_CIPHER-AES.pod
    M providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c
    M test/evp_extra_test.c

  Log Message:
  -----------
  [providers/implementations/ciphers] GCM-SIV: reject out-of-order update calls

For GCM-SIV:

1. AAD must precede the payload
2. the payload must be single shot

(2) was already happening, this change moves from a silent fail to
an explicit error message for multiple update calls on the payload.

For (1), this change unifies the logic for (2) one level up in the wrapper.
So the code previously allowed (1), and now errors out after this change.

Follow-up to #31906

Assisted-by: Claude:claude-opus-4-8

Reviewed-by: Nikola Pajkovsky <[email protected]>
Reviewed-by: Daniel Kubec <[email protected]>
Reviewed-by: Bob Beck <[email protected]>
MergeDate: Mon Jul 20 06:56:04 2026
(Merged from https://github.com/openssl/openssl/pull/31940)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/caf635-4bf858%40github.com.