From 7b1e15ac4e45ce4d6989f7be859f7337fa4a44ca Mon Sep 17 00:00:00 2001
From: Martin Willi <martin@revosec.ch>
Date: Wed, 14 Dec 2011 17:34:57 +0100
Subject: [PATCH] Fixed IKEv1 prf+ keymat expansion beyond 320 bits

---
 src/libstrongswan/crypto/prf_plus.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/libstrongswan/crypto/prf_plus.c b/src/libstrongswan/crypto/prf_plus.c
index 29f61197d..0f06ede83 100644
--- a/src/libstrongswan/crypto/prf_plus.c
+++ b/src/libstrongswan/crypto/prf_plus.c
@@ -72,12 +72,12 @@ METHOD(prf_plus_t, get_bytes, void,
 				this->prf->get_bytes(this->prf, this->seed, NULL);
 				this->prf->get_bytes(this->prf, chunk_from_thing(this->counter),
 									 this->buffer.ptr);
+				this->counter++;
 			}
 			else
 			{
 				this->prf->get_bytes(this->prf, this->seed, this->buffer.ptr);
 			}
-			this->counter++;
 			this->used = 0;
 		}
 		round = min(length, this->buffer.len - this->used);