summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorappro <appro>2005-01-18 00:24:55 +0000
committerappro <appro>2005-01-18 00:24:55 +0000
commit5a11c62448d2c1b50a35415d2411b703eeff4a50 (patch)
treef0d2cc337a0f9f59a9fb256687a2f896feb2c9c0
parent96e2ba15ae73efe3cf9c9606a5ea51642b8d5379 (diff)
downloadopenssl-5a11c62448d2c1b50a35415d2411b703eeff4a50.tar.gz
Don't zap AES CBC IV, when decrypting truncated content in place.
-rw-r--r--crypto/aes/aes_cbc.c6
1 files changed, 4 insertions, 2 deletions
diff --git a/crypto/aes/aes_cbc.c b/crypto/aes/aes_cbc.c
index f909aaf47..d2ba6bcdb 100644
--- a/crypto/aes/aes_cbc.c
+++ b/crypto/aes/aes_cbc.c
@@ -120,9 +120,11 @@ void AES_cbc_encrypt(const unsigned char *in, unsigned char *out,
}
if (len) {
memcpy(tmp, in, AES_BLOCK_SIZE);
- AES_decrypt(tmp, tmp, key);
+ AES_decrypt(tmp, out, key);
for(n=0; n < len; ++n)
- out[n] = tmp[n] ^ ivec[n];
+ out[n] ^= ivec[n];
+ for(n=len; n < AES_BLOCK_SIZE; ++n)
+ out[n] = tmp[n];
memcpy(ivec, tmp, AES_BLOCK_SIZE);
}
}