boringssl/crypto/modes
Brian Smith b4e3e694e8 Use correct counter after invoking stitched AES-NI GCM code.
Commit a3d9528e9e has a bug that could
cause counters to be reused if |$avx=2| were set in the AES-NI AES-GCM
assembly code, if the EVP interface were used with certain coding
patterns, as demonstrated by the test cases added in
a5ee83f67e.

This changes the encryption code in the same way the decryption code
was changed in a3d9528e9e.

This doesn't have any effect currently since the AES-NI AES-GCM code
has |$avx=0| now, so |aesni_gcm_encrypt| doesn't change the counter.

Change-Id: Iba69cb4d2043d1ea57c6538b398246af28cba006
Reviewed-on: https://boringssl-review.googlesource.com/7193
Reviewed-by: Adam Langley <agl@google.com>
2016-02-26 01:02:40 +00:00
..
asm Unify AEAD and EVP code paths for AES-GCM. 2016-02-23 23:13:31 +00:00
cbc.c Fix the shared builders by exporting GCM symbols. 2015-10-26 23:26:40 +00:00
cfb.c Fix the shared builders by exporting GCM symbols. 2015-10-26 23:26:40 +00:00
CMakeLists.txt Add a run_tests target to run all tests. 2015-10-26 20:33:44 +00:00
ctr.c Fix trivial -Wcast-qual violations. 2016-01-21 21:06:02 +00:00
gcm_test.c Fix the shared builders by exporting GCM symbols. 2015-10-26 23:26:40 +00:00
gcm.c Use correct counter after invoking stitched AES-NI GCM code. 2016-02-26 01:02:40 +00:00
internal.h Remove unused |ccm128_context| in crypto/modes/internal.h. 2016-02-24 21:08:21 +00:00
ofb.c Fix the shared builders by exporting GCM symbols. 2015-10-26 23:26:40 +00:00