From be47ecf5e22a45028b5a5291512a114664e10018 Mon Sep 17 00:00:00 2001 From: Przemyslaw Stekiel Date: Mon, 31 Jan 2022 13:53:11 +0100 Subject: [PATCH] mbedtls_ssl_get_record_expansion: use same condidion set as for non-psa build Signed-off-by: Przemyslaw Stekiel --- library/ssl_msg.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/library/ssl_msg.c b/library/ssl_msg.c index 1d9b012119..adb82b4baa 100644 --- a/library/ssl_msg.c +++ b/library/ssl_msg.c @@ -5096,7 +5096,10 @@ int mbedtls_ssl_get_record_expansion( const mbedtls_ssl_context *ssl ) #if defined(MBEDTLS_USE_PSA_CRYPTO) - if ( transform->psa_alg == PSA_ALG_IS_AEAD( transform->psa_alg ) || + if ( transform->psa_alg == PSA_ALG_GCM || + transform->psa_alg == PSA_ALG_CCM || + transform->psa_alg == PSA_ALG_AEAD_WITH_SHORTENED_TAG( PSA_ALG_CCM, 8 ) || + transform->psa_alg == PSA_ALG_CHACHA20_POLY1305 || transform->psa_alg == MBEDTLS_SSL_NULL_CIPHER ) { transform_expansion = transform->minlen;