From 699a75c2110b0437605f462976efe3c78620d180 Mon Sep 17 00:00:00 2001 From: Sean Parkinson Date: Fri, 18 Jun 2021 12:14:34 +1000 Subject: [PATCH] PKCS #11: Use C_Decrypt instead of C_DecryptUpdate Some PKCS #11 devices need final called (implicit in C_Decrypt). --- wolfcrypt/src/wc_pkcs11.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/wolfcrypt/src/wc_pkcs11.c b/wolfcrypt/src/wc_pkcs11.c index b8b4ede04..97ec4e16d 100644 --- a/wolfcrypt/src/wc_pkcs11.c +++ b/wolfcrypt/src/wc_pkcs11.c @@ -3266,12 +3266,12 @@ static int Pkcs11AesCbcDecrypt(Pkcs11Session* session, wc_CryptoInfo* info) } if (ret == 0) { outLen = info->cipher.aescbc.sz; - rv = session->func->C_DecryptUpdate(session->handle, + rv = session->func->C_Decrypt(session->handle, (CK_BYTE_PTR)info->cipher.aescbc.in, info->cipher.aescbc.sz, info->cipher.aescbc.out, &outLen); - PKCS11_RV("C_DecryptUpdate", rv); + PKCS11_RV("C_Decrypt", rv); if (rv != CKR_OK) { ret = WC_HW_E; }