Mbed-TLS/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2026-10-11 11:27:24 +00:00
Code Issues Packages Projects Releases Wiki Activity

ssl_tls.c: Use ETM status only in CBC mode case

Browse Source 
Signed-off-by: Ronald Cron <[email protected]>
This commit is contained in:
Ronald Cron
2022-03-25 16:50:18 +01:00
parent 862902dd57
commit fb39f15fa1
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
library/ssl_tls.c
+3 -3
View File
@@ -7450,9 +7450,9 @@ static int ssl_tls12_populate_transform( mbedtls_ssl_transform *transform,
goto end; goto end;
} }
if( ( transform->psa_alg == MBEDTLS_SSL_NULL_CIPHER || if( ( transform->psa_alg == MBEDTLS_SSL_NULL_CIPHER ) ||
transform->psa_alg == PSA_ALG_CBC_NO_PADDING ) && ( ( transform->psa_alg == PSA_ALG_CBC_NO_PADDING ) &&
transform->encrypt_then_mac == MBEDTLS_SSL_ETM_DISABLED ) ( transform->encrypt_then_mac == MBEDTLS_SSL_ETM_DISABLED ) ) )
/* mbedtls_ct_hmac() requires the key to be exportable */ /* mbedtls_ct_hmac() requires the key to be exportable */
psa_set_key_usage_flags( &attributes, PSA_KEY_USAGE_EXPORT | psa_set_key_usage_flags( &attributes, PSA_KEY_USAGE_EXPORT |
PSA_KEY_USAGE_VERIFY_HASH ); PSA_KEY_USAGE_VERIFY_HASH );