Diffusion GnuPG 50e81ad38d2b

gpg: Make sure a DECRYPTION_OKAY is never issued for a bad OCB tag.
50e81ad38d2b
Actions

Tags

None

Subscribers

None

Description

gpg: Make sure a DECRYPTION_OKAY is never issued for a bad OCB tag.

* g10/mainproc.c (proc_encrypted): Force a decryption failure if any
error has been seen.
* g10/decrypt-data.c (aead_checktag): Issue an ERROR line.

Note that gpg in any case returns a failure exit code but due to
double forking GPGME would not see it.

GnuPG-bug-id: T7042

Details

Provenance

Authored on Mar 14 2024, 9:41 PM

Parents

rGf78501c54532: gpg: new list-option store-x509-notations.

Branches

Unknown

Tags

Unknown

Tasks

T7042: AEAD mode does not properly handle modified cipher text

Event Timeline

• werner committed rG50e81ad38d2b: gpg: Make sure a DECRYPTION_OKAY is never issued for a bad OCB tag. (authored by • werner).Mar 14 2024, 9:41 PM

• werner added a task: T7042: AEAD mode does not properly handle modified cipher text.

• werner mentioned this in T7042: AEAD mode does not properly handle modified cipher text.Sep 19 2024, 9:51 AM

• werner mentioned this in rG2770efa75b76: gpg: Avoid wrong decryption_failed for signed+OCB msg w/o pubkey..Sep 19 2024, 10:13 AM

Changes (2)

Path

Size

g10/

rG50e81ad38d2b

g10/decrypt-data.c

Loading...

g10/mainproc.c

Loading...