Allow AES XTS decryption using duplicate keys.
authorPauli <paul.dale@oracle.com>
Mon, 24 Jun 2019 07:54:47 +0000 (17:54 +1000)
committerPauli <paul.dale@oracle.com>
Mon, 24 Jun 2019 07:54:47 +0000 (17:54 +1000)
commit2c840201e57e27fa9f1b26a970270a91813e32fe
treef966233a5443b70d86e6c47a4d7681c3306e96f0
parent3bbec1afed1c65b6f7f645b27808b070e6e7a509
Allow AES XTS decryption using duplicate keys.

This feature is enabled by default outside of FIPS builds
which ban such actions completely.

Encryption is always disallowed and will generate an error.

Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/9112)
crypto/evp/e_aes.c
test/recipes/30-test_evp_data/evpciph.txt