1
0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-10-23 01:52:40 +03:00

Return PSA_ERROR_INVALID_PADDING in constant time

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
This commit is contained in:
Gilles Peskine
2025-07-27 21:29:40 +02:00
parent d179dc80a5
commit e74b42832e

View File

@@ -13,6 +13,7 @@
#include "psa_crypto_cipher.h"
#include "psa_crypto_core.h"
#include "psa_crypto_random_impl.h"
#include "constant_time_internal.h"
#include "mbedtls/cipher.h"
#include "mbedtls/error.h"
@@ -583,8 +584,9 @@ exit:
mbedtls_platform_zeroize(temp_output_buffer,
sizeof(temp_output_buffer));
if (status == PSA_SUCCESS && invalid_padding) {
status = PSA_ERROR_INVALID_PADDING;
if (status == PSA_SUCCESS) {
status = mbedtls_ct_size_if_else_0(invalid_padding,
PSA_ERROR_INVALID_PADDING);
}
return status;
}