Allow AES XTS decryption using duplicate keys.
authorPauli <paul.dale@oracle.com>
Mon, 24 Jun 2019 07:54:47 +0000 (17:54 +1000)
committerPauli <paul.dale@oracle.com>
Mon, 24 Jun 2019 07:58:57 +0000 (17:58 +1000)
commit2a5f63c9a61be7582620c4b5da202bb3fd7e4138
tree261a6df0b66ce2ec4fc9107ece8b3cde064b4bce
parent1075139ca2b16229435c623fffbd58973d3970a7
Allow AES XTS decryption using duplicate keys.

This feature is enabled by default outside of FIPS builds
which ban such actions completely.

Encryption is always disallowed and will generate an error.

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/9112)

(cherry picked from commit 2c840201e57e27fa9f1b26a970270a91813e32fe)
crypto/err/openssl.txt
crypto/evp/e_aes.c
crypto/evp/evp_err.c
include/openssl/evperr.h
test/recipes/30-test_evp_data/evpciph.txt