Re: [openssl-users] openssl cms -decrypt failing due to malloc(3) failure

[Viktor Dukhovni]

> On Aug 1, 2018, at 9:31 AM, Michael Wojcik <michael.woj...@microfocus.com> 
> wrote:
> 
> CMS with an AEAD mode (such as AES128-GCM) ought to avoid the 
> integrity-protection issue for the encrypted content, but not for the other 
> parts of the message, I assume. (I'm no CMS expert so I may be missing 
> something there.) And, of course, both sender and recipient would have to 
> support that algorithm.

Not if you make it streaming.  A streaming implementing will emit almost
the entirety of the decrypted message before checking integrity at the
end and finding out that some part of it (already output) was wrong.

-- 
        Viktor.

-- 
openssl-users mailing list
To unsubscribe: https://mta.openssl.org/mailman/listinfo/openssl-users