Commit 62dc7ed6 authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Override flag for XTS length limit.

parent b3a45e7d

crypto/evp/e_aes.c

+2 −1
Original line number Diff line number Diff line
@@ -519,7 +519,8 @@ static int aes_xts(EVP_CIPHER_CTX *ctx, unsigned char *out, 
		return -1;

#ifdef OPENSSL_FIPS

	/* Requirement of SP800-38E */

	if (FIPS_mode() && len > (1L<<20)*16)

	if (FIPS_mode() && !(ctx->flags & EVP_CIPH_FLAG_NON_FIPS_ALLOW) &&

			(len > (1L<<20)*16))

		{

		EVPerr(EVP_F_AES_XTS, EVP_R_TOO_LARGE);

		return -1;