eden-emu/mbedtls
14
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Reject block cipher modes that are not implemented in Mbed TLS

Browse source 
Mbed TLS doesn't support certain block cipher mode combinations. This
limitation should probably be lifted, but for now, test them as unsupported.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
This commit is contained in:
Gilles Peskine 2022-03-19 10:49:43 +01:00
parent e3a0890e4f
commit 7095d47749
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
scripts/mbedtls_dev/crypto_knowledge.py
View file

@ -230,6 +230,9 @@ class KeyType:
alg.head in frozenset.union(BLOCK_MAC_MODES,
BLOCK_CIPHER_MODES,
BLOCK_AEAD_MODES):
if alg.head in ['CMAC', 'OFB'] and \
self.head in ['ARIA', 'CAMELLIA']:
return False # not implemented in Mbed TLS
return True
if self.head == 'CHACHA20' and alg.head == 'CHACHA20_POLY1305':
return True