Mark Atwood a7cc526747 Fix AES-EAX to allow empty plaintext ...

The one-shot wc_AesEaxEncryptAuth/wc_AesEaxDecryptAuth and the
incremental wc_AesEaxEncryptUpdate/wc_AesEaxDecryptUpdate functions
unconditionally required non-NULL out/in/authIn pointers, returning
BAD_FUNC_ARG even when the corresponding length was 0.

EAX mode with empty plaintext is a valid authentication-only operation
that produces just an authentication tag (OMAC over nonce and AAD).
This is permitted by the EAX specification (Bellare, Rogaway, Wagner
2004) and exercised by Wycheproof test vectors.

Fix: gate NULL pointer checks on the corresponding length being > 0.
In the incremental Update functions, skip the AES-CTR and CMAC
ciphertext update when inSz is 0 to avoid passing NULL to
wc_AesCtrEncrypt (which also rejects NULL unconditionally).

2026-06-03 16:48:37 -07:00

..

benchmark

Merge pull request #10072 from night1rider/extend-cmac-api-id-label

2026-04-13 08:15:46 -07:00

src

Fix AES-EAX to allow empty plaintext

2026-06-03 16:48:37 -07:00

test

Merge pull request #10009 from night1rider/SHE-update

2026-04-16 16:49:00 -06:00