Fix length check for maximum length of aes-gcm payload

opencryptoki / openssl-ibmca

OpenSSL engine and provider for libica.

Apache License 2.0

6 stars 15 forks source link

Fix length check for maximum length of aes-gcm payload #62

Closed p-steuer closed 4 years ago

p-steuer commented 4 years ago

ibmca_aes_gcm is expected to return 0 on failure and 1 on success (like most openssl functions). However, in case the length check fails -1 was returned, indicating success.

p-steuer commented 4 years ago

We can keep that in mind. However, with the engine only being relevant for the use of clear key adapter functionality and engines to be replaced by providers with the next openssl release anyway, i would not spent too much time here.