denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ikev2: AES-CMAC-PRF-128 only uses the first 64 bits of each nonce

Browse Source 
References #2377.
This commit is contained in:
Tobias Brunner
2017-07-27 13:09:26 +02:00
parent ed926a73df
commit 791cfe82a1
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ikev2/keymat_v2.c
+5 -2
View File
@@ -342,10 +342,13 @@ METHOD(keymat_v2_t, derive_ike_keys, bool,
* the nonces. */ * the nonces. */
switch (alg) switch (alg)
{ {
case PRF_AES128_CMAC:
/* while variable keys may be used according to RFC 4615, RFC 7296
* explicitly limits the key size to 128 bit for this application */
case PRF_AES128_XCBC: case PRF_AES128_XCBC:
/* while rfc4434 defines variable keys for AES-XCBC, rfc3664 does /* while RFC 4434 defines variable keys for AES-XCBC, RFC 3664 does
* not and therefore fixed key semantics apply to XCBC for key * not and therefore fixed key semantics apply to XCBC for key
* derivation. */ * derivation, which is also reinforced by RFC 7296 */
case PRF_CAMELLIA128_XCBC: case PRF_CAMELLIA128_XCBC:
/* draft-kanno-ipsecme-camellia-xcbc refers to rfc 4434, we /* draft-kanno-ipsecme-camellia-xcbc refers to rfc 4434, we
* assume fixed key length. */ * assume fixed key length. */