[openssl/openssl] 5741d2: Check the tag on EVP_Cipher() finalize: Poly1305 a...
"'Billy Brumley' via openssl-commits" <[email protected]>
| Newsgroups | gmane.comp.encryption.openssl.cvs |
|---|---|
| Message-ID | <openssl/openssl/push/refs/heads/master/[email protected]> |
Branch: refs/heads/master
Home: https://github.com/openssl/openssl
Commit: 5741d29a5f356e05262cd0936a472a9961398d53
https://github.com/openssl/openssl/commit/5741d29a5f356e05262cd0936a472a9961398d53
Author: Billy Brumley <[email protected]>
Date: 2026-08-07 (Fri, 07 Aug 2026)
Changed paths:
M providers/implementations/ciphers/cipher_aes_gcm_siv_hw.c
M providers/implementations/ciphers/cipher_aes_ocb.c
M providers/implementations/ciphers/cipher_chacha20_poly1305.c
M test/evp_extra_test.c
Log Message:
-----------
Check the tag on EVP_Cipher() finalize: Poly1305 and OCB AEADs
At the EVP level, for AEADs EVP_Cipher(ctx, out, NULL, 0) performs
finalization. For consistency across AEADs (GCM, etc.), on decrypt it
must check the tag. OCB and ChaCha20-Poly1305 took an early exit on the
empty message (with or without AAD) and returned success without
checking, so a forged tag (with or without AAD) was accepted before this
change.
Follow-up to #31555
Assisted-by: Claude:claude-opus-4-8
Reviewed-by: Frederik Wedel-Heinen <[email protected]>
Reviewed-by: Dmitry Belyavskiy <[email protected]>
MergeDate: Fri Aug 7 13:34:35 2026
(Merged from https://github.com/openssl/openssl/pull/32173)
To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications
--
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/e6cc3e-5741d2%40github.com.