mirror of https://github.com/openssl/openssl.git
dc5afb7e87
On the first squeeze call, when finishing the absorb process, also set
the NIP flag, if we are still in XOF_STATE_INIT state. When MSA 12 is
available, the state buffer A has not been zeroed during initialization,
thus we must also pass the NIP flag here. This situation can happen
when a squeeze is performed without a preceding absorb (i.e. a SHAKE
of the empty message).
Add a test that performs a squeeze without a preceding absorb and check
if the result is correct.
Fixes:
|
||
|---|---|---|
| .. | ||
| blake2_impl.h | ||
| blake2_prov.c | ||
| blake2b_prov.c | ||
| blake2s_prov.c | ||
| build.info | ||
| digestcommon.c | ||
| md2_prov.c | ||
| md4_prov.c | ||
| md5_prov.c | ||
| md5_sha1_prov.c | ||
| mdc2_prov.c | ||
| null_prov.c | ||
| ripemd_prov.c | ||
| sha2_prov.c | ||
| sha3_prov.c | ||
| sm3_prov.c | ||
| wp_prov.c | ||