lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-10-23 01:52:40 +03:00
Code Activity

Return PSA_ERROR_INVALID_PADDING in constant time

Browse Source 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
This commit is contained in:
Gilles Peskine
2025-07-27 21:29:40 +02:00
parent d179dc80a5
commit e74b42832e
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
library/psa_crypto_cipher.c
View File

@@ -13,6 +13,7 @@
#include "psa_crypto_cipher.h" #include "psa_crypto_cipher.h"
#include "psa_crypto_core.h" #include "psa_crypto_core.h"
#include "psa_crypto_random_impl.h" #include "psa_crypto_random_impl.h"
#include "constant_time_internal.h"
#include "mbedtls/cipher.h" #include "mbedtls/cipher.h"
#include "mbedtls/error.h" #include "mbedtls/error.h"
@@ -583,8 +584,9 @@ exit:
mbedtls_platform_zeroize(temp_output_buffer, mbedtls_platform_zeroize(temp_output_buffer,
sizeof(temp_output_buffer)); sizeof(temp_output_buffer));
if (status == PSA_SUCCESS && invalid_padding) { if (status == PSA_SUCCESS) {
status = PSA_ERROR_INVALID_PADDING; status = mbedtls_ct_size_if_else_0(invalid_padding,
PSA_ERROR_INVALID_PADDING);
} }
return status; return status;
} }