commit 0cdde2d1072fe9ee735cd0efb15dcc80683d86e3
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Wed Jul 09 18:03:10 2014 +0200
committer Manuel Pégourié-Gonnard <mpg@elzevir.fr> Wed Jul 09 18:03:10 2014 +0200
tree bb407509efff816cc96369cd36d6dc2ca2175a9e
parent a16e7f24f074e77a701399b5faaa1bc5975055eb

Fix minlen for GCM suites

library/ssl_tls.c

diff --git a/library/ssl_tls.c b/library/ssl_tls.c
index bda170d..103dc1f 100644
--- a/library/ssl_tls.c
+++ b/library/ssl_tls.c
@@ -452,14 +452,14 @@
 #if defined(POLARSSL_GCM_C)
         case TLS_RSA_WITH_AES_128_GCM_SHA256:
         case TLS_DHE_RSA_WITH_AES_128_GCM_SHA256:
-            transform->keylen = 16; transform->minlen = 1;
+            transform->keylen = 16; transform->minlen = 24;
             transform->ivlen  = 12; transform->maclen = 0;
             transform->fixed_ivlen = 4;
             break;
 
         case TLS_RSA_WITH_AES_256_GCM_SHA384:
         case TLS_DHE_RSA_WITH_AES_256_GCM_SHA384:
-            transform->keylen = 32; transform->minlen = 1;
+            transform->keylen = 32; transform->minlen = 24;
             transform->ivlen  = 12; transform->maclen = 0;
             transform->fixed_ivlen = 4;
             break;