CVSROOT:        /cvs
Module name:    src
Changes by:     js...@cvs.openbsd.org   2025/09/08 06:46:38

Modified files:
        lib/libcrypto/aes: aes.c aes_core.c 

Log message:
Validate AES_set_{encrypt,decrypt}_key() inputs at API boundary.

Every aes_set_{encrypt,decrypt}_key_internal() implementation is currently
required to check the inputs and return appropriate error codes. Pull the
input validation up to the API boundary, setting key->rounds at the same
time. Additionally, call aes_set_encrypt_key_internal() directly from
aes_set_decrypt_key_internal(), rather than going back through the public
API.

ok tb@

Reply via email to