tree 4a06aace49834e676124a7d32cf34c7d787ae5c0
parent 07d1078cdceb42669d2f867cf19d44d08404adf4
author Hanno Becker <hanno.becker@arm.com> 1515169462 +0000
committer Hanno Becker <hanno.becker@arm.com> 1515169462 +0000

Compute outgoing MAC in temporary buffer for MAC-then-Encrypt

A previous commit changed the record encryption function
`ssl_encrypt_buf` to compute the MAC in a temporary buffer
and copying the relevant part of it (which is strictly smaller
if the truncated HMAC extension is used) to the outgoing message
buffer. However, the change was only made in case Encrypt-Then-MAC
was enabled, but not in case of MAC-Then-Encrypt. While this
doesn't constitute a problem, for the sake of uniformity this
commit changes `ssl_encrypt_buf` to compute the MAC in a temporary
buffer in this case, too.