openssl/providers
Matt Caswell 33219939c7 Fix the RC4-MD5 cipher
A copy&paste error meant that the RC4-MD5 cipher (used in TLS) used the TLS
AAD data as the MAC key.

CVE-2022-1434

Fixes #18112

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Matt Caswell <matt@openssl.org>
2022-05-03 10:46:49 +01:00
..
common str[n]casecmp => OPENSSL_strncasecmp 2022-04-22 11:34:41 +02:00
fips Prefer GNU library initialization mechanism over platform one 2022-04-27 10:08:19 +02:00
implementations Fix the RC4-MD5 cipher 2022-05-03 10:46:49 +01:00
baseprov.c
build.info
decoders.inc
defltprov.c Add null digest implementation to the default provider 2021-11-15 09:25:42 +01:00
encoders.inc ENCODER PROV: Add encoders with EncryptedPrivateKeyInfo output 2021-09-05 21:34:51 +02:00
fips-sources.checksums
fips.checksum
fips.module.sources
legacyprov.c LEGACY PROV: Reimplement the ERR building blocks in upcall terms 2022-01-21 14:44:16 +01:00
nullprov.c
prov_running.c
stores.inc