openssl/providers
Matt Caswell 33219939c7 Fix the RC4-MD5 cipher
A copy&paste error meant that the RC4-MD5 cipher (used in TLS) used the TLS
AAD data as the MAC key.

CVE-2022-1434

Fixes #18112

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Matt Caswell <matt@openssl.org>
2022-05-03 10:46:49 +01:00
..
common str[n]casecmp => OPENSSL_strncasecmp 2022-04-22 11:34:41 +02:00
fips Prefer GNU library initialization mechanism over platform one 2022-04-27 10:08:19 +02:00
implementations Fix the RC4-MD5 cipher 2022-05-03 10:46:49 +01:00
baseprov.c Update copyright year 2021-04-08 13:04:41 +01:00
build.info Avoid duplicating prov_running.o in libdefault and libcrypto 2021-06-14 09:18:41 +10:00
decoders.inc prov: tag SM2 encoders and decoders as non-FIPS 2021-06-16 14:42:38 +01:00
defltprov.c Add null digest implementation to the default provider 2021-11-15 09:25:42 +01:00
encoders.inc ENCODER PROV: Add encoders with EncryptedPrivateKeyInfo output 2021-09-05 21:34:51 +02:00
fips-sources.checksums make update 2021-07-29 15:50:27 +01:00
fips.checksum make update 2021-07-29 15:50:27 +01:00
fips.module.sources make update 2021-07-29 15:50:27 +01:00
legacyprov.c LEGACY PROV: Reimplement the ERR building blocks in upcall terms 2022-01-21 14:44:16 +01:00
nullprov.c
prov_running.c
stores.inc