tree 89bb395d744fae1282d1c22df882564a484de81c
parent e324de004a78ad01a973b7deac1abd350d5c18ce
author David Benjamin <davidben@google.com> 1495557658 -0400
committer Adam Langley <agl@google.com> 1495578966 +0000

AES-GCM is not defined for empty nonces.

It shouldn't have been defined for variable-length nonces at all, but so
it goes. EVP_CIPHER rejected this by way of EVP_CTRL_GCM_SET_IVLEN
comparing <= 0, but the EVP_AEAD API did not.

I've done the test in a separate file on the assumption that aead_test
will become GTest shortly, at which point it will be easy to stick extra
tests into the same file as the FileTest ones.

Thanks to Daniel Bleichenbacher and Thanh Bui of Project Wycheproof for
the report.

Change-Id: Ic4616b39a1d7fe74a1f14fb58cccec2ce7c4f2f3
Reviewed-on: https://boringssl-review.googlesource.com/16544
Reviewed-by: Adam Langley <agl@google.com>