Diffusion GnuPG 122803bf1ac9

gpg: Make sure a DECRYPTION_OKAY is never issued for a bad OCB tag.
122803bf1ac9
Actions

Tags

None

Subscribers

None

Description

gpg: Make sure a DECRYPTION_OKAY is never issued for a bad OCB tag.

* g10/mainproc.c (proc_encrypted): Force a decryption failure if any
error has been seen.
* g10/decrypt-data.c (aead_checktag): Issue an ERROR line.

Note that gpg in any case returns a failure exit code but due to
double forking GPGME would not see it.

GnuPG-bug-id: T7042

Details

Provenance

Authored on Mar 14 2024, 9:41 PM

Parents

rGc27534de9553: gpg-check-pattern: Consider an empty pattern file as valid

Branches

Unknown

Tags

Unknown

Tasks

T7042: AEAD mode does not properly handle modified cipher text

Event Timeline

• werner committed rG122803bf1ac9: gpg: Make sure a DECRYPTION_OKAY is never issued for a bad OCB tag. (authored by • werner).Mar 14 2024, 9:51 PM

• werner added a task: T7042: AEAD mode does not properly handle modified cipher text.

• werner mentioned this in rGe8598390beca: gpg: Avoid wrong decryption_failed for signed+OCB msg w/o pubkey..Sep 19 2024, 10:01 AM

Changes (2)

Path

Size

g10/

rG122803bf1ac9

g10/decrypt-data.c

Loading...

g10/mainproc.c

Loading...