wireguard: add flag to check hmac for decryption
Type: fix Originally the decryption doesn't check the hmac for chacha20-poly1305. This patch fixes the problem by adding flag to crypto op to check hmac. Signed-off-by: Gabriel Oginski <gabrielx.oginski@intel.com> Change-Id: I63e06fc011b288b1c9dc1b96a92923f224ef656b
This commit is contained in:
committed by
Fan Zhang
parent
3ea8c5c453
commit
078d258034
@@ -518,6 +518,7 @@ chacha20poly1305_calc (vlib_main_t * vm,
|
||||
{
|
||||
op->tag = src + src_len - NOISE_AUTHTAG_LEN;
|
||||
src_len -= NOISE_AUTHTAG_LEN;
|
||||
op->flags |= VNET_CRYPTO_OP_FLAG_HMAC_CHECK;
|
||||
}
|
||||
else
|
||||
op->tag = tag_;
|
||||
|
||||
Reference in New Issue
Block a user