Commit 7e98d95f authored by Dr. Stephen Henson's avatar Dr. Stephen Henson
Browse files

Don't require tag before ciphertext in AESGCM mode 

(cherry picked from commit 964eaad7)
parent b0ee17ad

crypto/evp/e_aes.c

+2 −2
Original line number Diff line number Diff line
@@ -956,8 +956,6 @@ static int aes_gcm_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, 


	if (!gctx->iv_set)

		return -1;

	if (!ctx->encrypt && gctx->taglen < 0)

		return -1;

	if (in)

		{

		if (out == NULL)
@@ -999,6 +997,8 @@ static int aes_gcm_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out, 
		{

		if (!ctx->encrypt)

			{

			if (gctx->taglen < 0)

				return -1;

			if (CRYPTO_gcm128_finish(&gctx->gcm,

					ctx->buf, gctx->taglen) != 0)

				return -1;