fixup! tls13_enc: using SN instead of nid

siemens · Dec 6, 2023 · e1abc7e · e1abc7e
1 parent a0ebae4
commit e1abc7e
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/ssl/tls13_enc.c b/ssl/tls13_enc.c
@@ -391,9 +391,17 @@ static int derive_secret_key_and_iv(SSL_CONNECTION *s, const EVP_MD *md,
             *taglen = EVP_GCM_TLS_TAG_LEN;
         } else if (strcmp(EVP_CIPHER_get0_name(ciph), SN_enull_hmac_sha256)
                    == 0) {
+            /*
+             * SN_enull_hmac_sha256 must be consistent
+             * with PROV_NAMES_ENULL_HMAC_SHA256
+             */
             *taglen = EVP_HMACSHA256_TLS_TAG_LEN;
         } else if (strcmp(EVP_CIPHER_get0_name(ciph), SN_enull_hmac_sha384)
                    == 0) {
+            /*
+             * SN_enull_hmac_sha384 must be consistent
+             * with PROV_NAMES_ENULL_HMAC_SHA384
+             */
             *taglen = EVP_HMACSHA384_TLS_TAG_LEN;
         } else {
             /* CHACHA20P-POLY1305 */