Diffusion GnuPG 82b39fe25470

gpg: Make sure a DECRYPTION_OKAY is never issued for a bad OCB tag.
82b39fe25470
Actions

Tags

None

Subscribers

None

Description

gpg: Make sure a DECRYPTION_OKAY is never issued for a bad OCB tag.

* g10/mainproc.c (proc_encrypted): Force a decryption failure if any
error has been seen.
* g10/decrypt-data.c (aead_checktag): Issue an ERROR line.

Note that gpg in any case returns a failure exit code but due to
double forking GPGME would not see it.

GnuPG-bug-id: T7042

Details

Provenance

Authored on Mar 14 2024, 9:41 PM

Parents

rG509d0f76cedd: gpg-check-pattern: Consider an empty pattern file as valid

Branches

Unknown

Tags

Unknown

Tasks

T7042: AEAD mode does not properly handle modified cipher text

Event Timeline

• werner committed rG82b39fe25470: gpg: Make sure a DECRYPTION_OKAY is never issued for a bad OCB tag. (authored by • werner).Mar 14 2024, 9:53 PM

• werner added a task: T7042: AEAD mode does not properly handle modified cipher text.

• werner mentioned this in rG9e8e48e00b85: gpg: Avoid wrong decryption_failed for signed+OCB msg w/o pubkey..Sep 19 2024, 9:59 AM

Changes (2)

Path

Size

g10/

rG82b39fe25470

g10/decrypt-data.c

Loading...

g10/mainproc.c

Loading...