wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/ssl
History
Matt Caswell f1fd279cce Send bad_record_mac instead of decryption_failed 
The decryption failed alert was deprecated a long time ago. It can
provide an attacker too much information to be able to distinguish between
MAC failures and decryption failures and can lead to oracle attacks.
Instead we should always use the bad_record_mac alert for these issues.
This fixes one instance that still exists. It does not represent a
security issue in this case because it is only ever sent if the record is
publicly invalid, i.e. we have detected it is invalid without using any
secret material.

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/10093)

(cherry picked from commit 37133290832ac2d1389926eba7325125fdacbe8d)
2019-10-07 08:25:42 +01:00
..
record Send bad_record_mac instead of decryption_failed 2019-10-07 08:25:42 +01:00
statem 'init_buf' memory can be freed when DTLS is used over SCTP (not over UDP). 2019-10-03 15:18:49 +02:00
bio_ssl.c Reorganize local header files 2019-09-27 23:58:06 +02:00
build.info Move ssl/t1_ext.c to ssl/statem/extensions_cust.c 2017-04-07 13:41:04 +01:00
d1_lib.c Reorganize local header files 2019-09-27 23:58:06 +02:00
d1_msg.c Reorganize local header files 2019-09-27 23:58:06 +02:00
d1_srtp.c Reorganize local header files 2019-09-27 23:58:06 +02:00
methods.c Reorganize local header files 2019-09-27 23:58:06 +02:00
packet.c Reorganize local header files 2019-09-27 23:58:06 +02:00
packet_local.h Fix header file include guard names 2019-09-27 23:58:12 +02:00
pqueue.c Reorganize local header files 2019-09-27 23:58:06 +02:00
s3_cbc.c Reorganize local header files 2019-09-27 23:58:06 +02:00
s3_enc.c Reorganize local header files 2019-09-27 23:58:06 +02:00
s3_lib.c Reorganize local header files 2019-09-27 23:58:06 +02:00
s3_msg.c Reorganize local header files 2019-09-27 23:58:06 +02:00
ssl_asn1.c Reorganize local header files 2019-09-27 23:58:06 +02:00
ssl_cert.c Reorganize local header files 2019-09-27 23:58:06 +02:00
ssl_cert_table.h Update copyright year 2018-03-20 13:08:46 +00:00
ssl_ciph.c Reorganize local header files 2019-09-27 23:58:06 +02:00
ssl_conf.c Reorganize local header files 2019-09-27 23:58:06 +02:00
ssl_err.c Don't interleave handshake and other record types in TLSv1.3 2019-02-19 09:37:29 +00:00
ssl_init.c Reorganize local header files 2019-09-27 23:58:06 +02:00
ssl_lib.c Reorganize local header files 2019-09-27 23:58:06 +02:00
ssl_local.h Fix header file include guard names 2019-09-27 23:58:12 +02:00
ssl_mcnf.c Reorganize local header files 2019-09-27 23:58:06 +02:00
ssl_rsa.c Reorganize local header files 2019-09-27 23:58:06 +02:00
ssl_sess.c Reorganize local header files 2019-09-27 23:58:06 +02:00
ssl_stat.c Reorganize local header files 2019-09-27 23:58:06 +02:00
ssl_txt.c Reorganize local header files 2019-09-27 23:58:06 +02:00
ssl_utst.c Reorganize local header files 2019-09-27 23:58:06 +02:00
t1_enc.c Reorganize local header files 2019-09-27 23:58:06 +02:00
t1_lib.c Reorganize local header files 2019-09-27 23:58:06 +02:00
t1_trce.c Do not print extensions in Certificate message for TLS1.2 and lower 2019-10-03 10:30:57 +10:00
tls13_enc.c Reorganize local header files 2019-09-27 23:58:06 +02:00
tls_srp.c Reorganize local header files 2019-09-27 23:58:06 +02:00