-
-
Notifications
You must be signed in to change notification settings - Fork 11.2k
master branch: EVP_PKEY_new_mac_key fails with 0-length key #13089
Copy link
Copy link
Closed
Labels
backlog fixThe issue was closed as part of the backlog reduction initiative.The issue was closed as part of the backlog reduction initiative.branch: 3.0Applies to openssl-3.0 branchApplies to openssl-3.0 branchbranch: 3.1Applies to openssl-3.1 (EOL)Applies to openssl-3.1 (EOL)branch: 3.2Applies to openssl-3.2 (EOL)Applies to openssl-3.2 (EOL)branch: masterApplies to master branchApplies to master branchhelp wantedresolved: wont fixThe issue has been confirmed but won't be fixedThe issue has been confirmed but won't be fixedseverity: regressionThe issue/pr is a regression from previous released versionThe issue/pr is a regression from previous released versiontriaged: bugThe issue/pr is/fixes a bugThe issue/pr is/fixes a bug
Metadata
Metadata
Assignees
Labels
backlog fixThe issue was closed as part of the backlog reduction initiative.The issue was closed as part of the backlog reduction initiative.branch: 3.0Applies to openssl-3.0 branchApplies to openssl-3.0 branchbranch: 3.1Applies to openssl-3.1 (EOL)Applies to openssl-3.1 (EOL)branch: 3.2Applies to openssl-3.2 (EOL)Applies to openssl-3.2 (EOL)branch: masterApplies to master branchApplies to master branchhelp wantedresolved: wont fixThe issue has been confirmed but won't be fixedThe issue has been confirmed but won't be fixedseverity: regressionThe issue/pr is a regression from previous released versionThe issue/pr is a regression from previous released versiontriaged: bugThe issue/pr is/fixes a bugThe issue/pr is/fixes a bug
The following function call returns
NULLon the current master branch.OpenSSL 1.1.1 versions (and also 3.0.0 alpha6) returned a valid
EVP_PKEY*pointer.I think this was an unintentional change during the provider refactor.
Using empty keys is not really useful, I'm not sure how this affects others, we found this issue with our tests that tried to use empty keys as well.
Full test code to reproduce:
Output of the sample program on master branch:
Output when using OpenSSL 1.1.1h or 3.0.0-alpha6: