wireguard: add flag to check hmac for decryption

Type: fix

Originally the decryption doesn't check the hmac for chacha20-poly1305.

This patch fixes the problem by adding flag to crypto op to check hmac.

Signed-off-by: Gabriel Oginski <gabrielx.oginski@intel.com>
Change-Id: I63e06fc011b288b1c9dc1b96a92923f224ef656b
This commit is contained in:
Gabriel Oginski
2021-08-12 14:04:03 +01:00
committed by Fan Zhang
parent 3ea8c5c453
commit 078d258034
+1
View File
@@ -518,6 +518,7 @@ chacha20poly1305_calc (vlib_main_t * vm,
{
op->tag = src + src_len - NOISE_AUTHTAG_LEN;
src_len -= NOISE_AUTHTAG_LEN;
op->flags |= VNET_CRYPTO_OP_FLAG_HMAC_CHECK;
}
else
op->tag = tag_;