Page MenuHomeFreeBSD

ossl: Fix some bugs in the fallback AES-GCM implementation
ClosedPublic

Authored by markj on Nov 29 2023, 8:15 PM.
Tags
None
Referenced Files
F148369521: D42838.id.diff
Tue, Mar 17, 10:15 AM
Unknown Object (File)
Mon, Mar 16, 8:58 AM
Unknown Object (File)
Mon, Mar 16, 3:07 AM
Unknown Object (File)
Mon, Mar 9, 7:35 PM
Unknown Object (File)
Mon, Feb 23, 7:24 AM
Unknown Object (File)
Feb 8 2026, 11:40 AM
Unknown Object (File)
Jan 24 2026, 12:41 PM
Unknown Object (File)
Jan 10 2026, 8:05 PM
Subscribers

Details

Summary

gcm_*_aesni() are used when the AVX512 implementation is not available.
Fix two bugs which manifest when handling operations spanning multiple
segments:

  • Avoid underflow when the length of the input is smaller than the residual.
  • In gcm_decrypt_aesni(), ensure that we begin the operation at the right offset into the input and output buffers.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable