Disabled XTS mode in enc utility as it is not supported
authorMatt Caswell <matt@openssl.org>
Sun, 13 Jul 2014 22:28:13 +0000 (23:28 +0100)
committerMatt Caswell <matt@openssl.org>
Wed, 16 Jul 2014 20:01:38 +0000 (21:01 +0100)
PR#3442

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
(cherry picked from commit 2097a17c576f2395a10b05f14490688bc5f45a07)

apps/enc.c

index c6a211ba87fd6429c3ed1b445610ca8c62770676..c8cb021224e6d9b801b83522f9d47c575564bb3a 100644 (file)
@@ -339,6 +339,12 @@ bad:
                goto end;
                }
 
+       if (cipher && (EVP_CIPHER_mode(cipher) == EVP_CIPH_XTS_MODE))
+               {
+               BIO_printf(bio_err, "Ciphers in XTS mode are not supported by the enc utility\n");
+               goto end;
+               }
+
        if (md && (dgst=EVP_get_digestbyname(md)) == NULL)
                {
                BIO_printf(bio_err,"%s is an unsupported message digest type\n",md);