Limit the number of AES-GCM keys allowed in TLS. A new error is raised if this
authorPauli <paul.dale@oracle.com>
Tue, 11 Sep 2018 23:25:20 +0000 (09:25 +1000)
committerPauli <paul.dale@oracle.com>
Tue, 11 Sep 2018 23:25:20 +0000 (09:25 +1000)
commitd6b345708f8f8a04fdb5ca2e58a953b7fec461e1
treed79bb30287965724938fceeaaea0323cd33715d6
parentf88b9b79152b48541b780dfd30bb34e1c7a91e1b
Limit the number of AES-GCM keys allowed in TLS.  A new error is raised if this
limit is ever reached.

This is a FIPS 140-2 requirement from IG A.5 "Key/IV Pair Uniqueness
Requirements from SP 800-38D".

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/7129)
crypto/err/openssl.txt
crypto/evp/e_aes.c
crypto/evp/evp_err.c
include/openssl/evperr.h