wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-01-30 19:32:16 +01:00
Code Issues Packages Projects Releases Wiki Activity

Check keyLen matches cipher in wolfSSL_CMAC_Init.

Browse Source 
Fixes ZD15607.
This commit is contained in:
jordan
2023-02-12 18:26:40 -06:00
parent 55a7e24cfe
commit 909aa86d2d
2 changed files with 15 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
src/ssl.c
View File

@@ -28567,6 +28567,13 @@ int wolfSSL_CMAC_Init(WOLFSSL_CMAC_CTX* ctx, const void *key, size_t keyLen,
ret = WOLFSSL_FAILURE;
}
if (ret == WOLFSSL_SUCCESS) {
/* Check input keyLen matches input cipher. */
if ((int) keyLen != wolfSSL_EVP_Cipher_key_length(cipher)) {
ret = WOLFSSL_FAILURE;
}
}
if (ret == WOLFSSL_SUCCESS) {
ret = wc_InitCmac((Cmac*)ctx->internal, (const byte*)key,
(word32)keyLen, WC_CMAC_AES, NULL);