Decryption when using CIPHER_HASH order does not produce right output

intel / intel-ipsec-mb

Intel(R) Multi-Buffer Crypto for IPSec

BSD 3-Clause "New" or "Revised" License

289 stars 87 forks source link

Decryption when using CIPHER_HASH order does not produce right output #33

Closed pablodelara closed 5 years ago

pablodelara commented 5 years ago

When flushing a job decrypting before hashing (where hash operation is not completed, but decryption operation is), the buffer is again decrypted, producing an incorrect output.

Currently, the unit tests do not expose this issue, as this combination is not tested (chain_order = CIPHER_HASH, cipher_direction = DECRYPT, hash_alg != NULL_HASH). New tests will be added, testing this and other chained operation combinations.

tkanteck commented 5 years ago

The patch fixes the reported issue