Re: Cleaning up usage of CMAC_xxx

2020-06-11 Thread Richard Levitte
On Thu, 11 Jun 2020 02:49:04 +0200, Hal Murray wrote: > CMAC_* have been DEPRECATED for 3.0.0 > > CHANGES.md suggests using EVP_MAC_xxx. Mostly, that seems reasonable, but > there is one loose end. > > CMAC_Init includes a key and cipher. What's the equivalent in EVP_MAC_xxx? > > ---

Re: Cleaning up usage of CMAC_xxx

2020-06-11 Thread Hal Murray
levi...@openssl.org said: > In 1.1.1 and earlier, there is a different idea, using EVP_PKEY routines to > "sign" with a MAC. We have a EVP_PKEY to EVP_MAC bridge in 3.0.0 to bridge > the gap. Thanks, but... The EVP_PKEY seems to assume a public/private key environment. The man page for EVP_

Probably memory leak on handshake when KTLS enabled

2020-06-11 Thread Xinzhe Wang
When KTLS is enabled, multiple client's handshake will lead to unexpected eof while reading and data corrupt(possible memory leak). Tested OpenSSL version: master, 3.0.0-alpha1 Kernel version: 5.4.43-1-MANJARO Reproduce step(using docker): sudo modprobe tls git clone https://github.com/openssl/op