David Benjamin 03c6fa4426 AES-GCM is not defined for empty nonces. ... It shouldn't have been defined for variable-length nonces at all, but so it goes. EVP_CIPHER rejected this by way of EVP_CTRL_GCM_SET_IVLEN comparing <= 0, but the EVP_AEAD API did not. I've done the test in a separate file on the assumption that aead_test will become GTest shortly, at which point it will be easy to stick extra tests into the same file as the FileTest ones. Thanks to Daniel Bleichenbacher and Thanh Bui of Project Wycheproof for the report. Change-Id: Ic4616b39a1d7fe74a1f14fb58cccec2ce7c4f2f3 Reviewed-on: https://boringssl-review.googlesource.com/16544 Reviewed-by: Adam Langley <agl@google.com>		2017-05-23 22:36:06 +00:00
..
asm
test	Add AES-GCM-SIV tests for counter wrapping.	2017-05-15 16:08:46 +00:00
aead_extra_test.cc	AES-GCM is not defined for empty nonces.	2017-05-23 22:36:06 +00:00
aead_test.cc
cipher_extra.c
cipher_test.cc
CMakeLists.txt
derive_key.c
e_aesctrhmac.c
e_aesgcmsiv.c
e_chacha20poly1305.c
e_null.c
e_rc2.c
e_rc4.c
e_ssl3.c
e_tls.c
internal.h
tls_cbc.c