BTW aadenc should be unsigned, otherwise VC generates a warning:
unsigned int aadenc = 2;

Peter-Michael

On Dec 20, 2009 at 10:55 PM, Peter Waltenberg wrote:

> I'll post a full patch at some point - but in the interim.
> This isn't so much a bug as something I forgot to go back and fix when I 
> coded it
originally.
> CCM will fail with AAD > 0xff00 bytes as I forgot to add the formatting bytes 
> for the
larger AAD's.
> Note that it still hasn't been tested with AAD's > 2^32 bytes .
> 
> With normal use of CCM this was probably harmless, as it's typically used 
> with small
packets.
> 
> --- aes_ccm.c
> +++ aes_ccm.c
> @@ -180,7 +180,8 @@
> ...
> -    unsigned int i,j;
> +    unsigned int i,j,k;
> +    int aadenc = 2;
> ...

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to