Page MenuHomeFreeBSD

ossl: Fix some bugs in the fallback AES-GCM implementation
ClosedPublic

Authored by markj on Nov 29 2023, 8:15 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sat, Jan 10, 8:05 PM
Unknown Object (File)
Mon, Dec 29, 5:45 AM
Unknown Object (File)
Thu, Dec 25, 11:12 AM
Unknown Object (File)
Wed, Dec 24, 7:23 AM
Unknown Object (File)
Fri, Dec 19, 1:28 PM
Unknown Object (File)
Fri, Dec 19, 1:28 PM
Unknown Object (File)
Fri, Dec 19, 12:20 AM
Unknown Object (File)
Dec 6 2025, 9:40 PM
Subscribers

Details

Summary

gcm_*_aesni() are used when the AVX512 implementation is not available.
Fix two bugs which manifest when handling operations spanning multiple
segments:

  • Avoid underflow when the length of the input is smaller than the residual.
  • In gcm_decrypt_aesni(), ensure that we begin the operation at the right offset into the input and output buffers.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable