tree 886864f00125363efaabddf8ec262e4b428f8895
parent 942cfea65f86e839a127dba2a3e286738ff4e47c
author Hanno Becker <hanno.becker@arm.com> 1533285607 +0100
committer Hanno Becker <hanno.becker@arm.com> 1534497088 +0100

Fix mbedtls_ssl_get_record_expansion() for CBC modes

`mbedtls_ssl_get_record_expansion()` is supposed to return the maximum
difference between the size of a protected record and the size of the
encapsulated plaintext.

Previously, it did not correctly estimate the maximum record expansion
in case of CBC ciphersuites in (D)TLS versions 1.1 and higher, in which
case the ciphertext is prefixed by an explicit IV.

This commit fixes this bug. Fixes #1914.