denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

xcbc: Reset XCBC state in set_key()

Browse Source 
If some partial data has been appended, a truncated key gets invalid if it
is calculated from the pending state.
This commit is contained in:
Martin Willi
2015-03-27 15:53:52 +01:00
parent bfb029c82a
commit eedd92b53b
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/plugins/xcbc/xcbc.c
+4
View File
@@ -219,6 +219,10 @@ METHOD(mac_t, set_key, bool,
{ {
chunk_t iv, k1, lengthened; chunk_t iv, k1, lengthened;
memset(this->e, 0, this->b);
this->remaining_bytes = 0;
this->zero = TRUE;
/* we support variable keys from RFC4434 */ /* we support variable keys from RFC4434 */
if (key.len == this->b) if (key.len == this->b)
{ {