boringssl/crypto/cipher/test
David Benjamin 14e18ca257 Fix AES-GCM-SIV on large inputs.
This was noticed by observing we had one line of missing test coverage
in polyval.c. CRYPTO_POLYVAL_update_blocks acts 32 blocks at a time and
all existing test vectors are smaller than that.

Test vector obtained by just picking random values and seeing what our
existing implementation did if I modified CRYPTO_POLYVAL_update_blocks
to consume many more blocks at a time. Then I fixed the bug and ensured
the answer was still the same.

Change-Id: Ib7002dbc10952229ff42a17132c30d0e290d4be5
Reviewed-on: https://boringssl-review.googlesource.com/13041
Commit-Queue: David Benjamin <davidben@google.com>
Reviewed-by: Adam Langley <agl@google.com>
2017-01-04 01:45:31 +00:00
..
aes_128_cbc_sha1_ssl3_tests.txt
aes_128_cbc_sha1_tls_implicit_iv_tests.txt
aes_128_cbc_sha1_tls_tests.txt
aes_128_cbc_sha256_tls_tests.txt
aes_128_ctr_hmac_sha256.txt
aes_128_gcm_siv_tests.txt Fix AES-GCM-SIV on large inputs. 2017-01-04 01:45:31 +00:00
aes_128_gcm_tests.txt
aes_256_cbc_sha1_ssl3_tests.txt
aes_256_cbc_sha1_tls_implicit_iv_tests.txt
aes_256_cbc_sha1_tls_tests.txt
aes_256_cbc_sha256_tls_tests.txt
aes_256_cbc_sha384_tls_tests.txt
aes_256_ctr_hmac_sha256.txt
aes_256_gcm_siv_tests.txt Fix AES-GCM-SIV on large inputs. 2017-01-04 01:45:31 +00:00
aes_256_gcm_tests.txt
chacha20_poly1305_old_tests.txt
chacha20_poly1305_tests.txt
cipher_tests.txt Import a test vector from upstream. 2016-12-14 17:48:36 +00:00
des_ede3_cbc_sha1_ssl3_tests.txt
des_ede3_cbc_sha1_tls_implicit_iv_tests.txt
des_ede3_cbc_sha1_tls_tests.txt
make_all_legacy_aead_tests.sh Remove RC4 from TLS for real. 2016-09-16 03:06:36 +00:00
make_legacy_aead_tests.go Remove RC4 from TLS for real. 2016-09-16 03:06:36 +00:00