intel / intel-ipsec-mb

Intel(R) Multi-Buffer Crypto for IPSec
BSD 3-Clause "New" or "Revised" License
288 stars 87 forks source link

Incorrect ZUC initialization when 23-byte IV is used #102

Closed pablodelara closed 2 years ago

pablodelara commented 2 years ago

When using 23-byte IVs on ZUC-256, the IV is not expanded correctly into 25 bytes, used in all implementations, making the ZUC initialization to fail. There was a 23-byte vector in the test, but its IV was all 0xff's, so it was expanding correctly, but when the IV is completely random, the expansion is incorrect.