[Openvpn-devel] [PATCH applied] Re: OpenSSL: avoid resetting the HMAC key on every packet

Gert Doering <[email protected]>
Newsgroups net.sourceforge.lists.openvpn-devel
Message-ID <[email protected]>
So this is basically an optimization, avoiding needless rounds of work
in the library for the always-the-same HMAC key - introducing an #ifdef
because it was broken in OpenSSL 3.0.0-3.0.2.  Meh, but still a good
change (even if we tell people "for performance, go DCO" this is not yet
available everywhere).

Your patch has been applied to the master and release/2.7 branch
(filed under "crypto library compatibility" and "optimization with
minor code impact", as it's not really a "bugfix").

commit 3568e9d8cca78be9577cb7220d9bb9419894d207 (master)
commit e04e93a339d33b3e52b11eae4b9f83cb29f20fa3 (release/2.7)
Author: Gleb Pesin
Date:   Thu Aug 13 18:32:33 2026 +0200

     OpenSSL: avoid resetting the HMAC key on every packet

     Signed-off-by: Arne Schwabe <[email protected]>
     Acked-by: Arne Schwabe <[email protected]>
     Acked-by: Razvan Cojocaru <[email protected]>
     Gerrit URL: https://gerrit.openvpn.net/c/openvpn/+/1840
     Message-Id: <[email protected]>
     Signed-off-by: Gert Doering <[email protected]>


--
kind regards,

Gert Doering



_______________________________________________
Openvpn-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.