AES-CMAC128 security bugfix

sslab-gatech / opensgx

OpenSGX

Other

288 stars 80 forks source link

AES-CMAC128 security bugfix #35

Closed sam1013 closed 7 years ago

sam1013 commented 8 years ago

IV does not remain constant zero using polarssl function aes_crypt_cbc All blocks except last two cancel out due to double XOR! Now using aes_crypt_ecb instead.

sam1013 commented 8 years ago

Hey, it is a little bit tedious to have three copies of polarssl sources, namely under libsgx, user and qemu. At least the first two could be merged. Or could you consider symlinks?

Best, Sammey

jonhoo commented 8 years ago

Related to #26