You've already forked opencryptoki
mirror of
https://github.com/opencryptoki/opencryptoki.git
synced 2026-10-24 05:39:17 +03:00
The EP11 host library does not necessarily report the required output length when an encrypt or decrypt update call fails with CKR_BUFFER_TOO_SMALL. In this case, report an upper bound of the output length of the update operation: Less than one block of data can be buffered by a previous update, thus the output is at most the input length rounded up to a multiple of the block size. A length already reported by the EP11 library (larger than the passed one) is kept. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com>