tree da87c46aee2a6b3c89123a078dfe1e9d0d1fa0c0
parent f4e4cca43c9937758a8b73506ebe4b65beaa9def
author Rudolf Polzer <rpolzer@google.com> 1779879680 -0700
committer boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com <boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com> 1779958698 -0700

Fix limits for AES-GCM-SIV.

We can't have the counter wrap, so the limit is 2^32 AES blocks, or
2^36 bytes.

The openv path has previously allowed for an extra block; this was
wrong, as in our code, the tag is considered separate.

Change-Id: I730028350e86aadda826b4c55f15e7326a6a6964
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/95930
Commit-Queue: Rudolf Polzer <rpolzer@google.com>
Reviewed-by: David Benjamin <davidben@google.com>