tree 7f8061f36239d96522edeb42d76a321488aadd0f
parent bcdd8bcfcf7401bcfbecec5785049a214e1baa49
author Gilles Peskine <Gilles.Peskine@arm.com> 1574930732 +0100
committer Simon Butcher <simon.butcher@arm.com> 1584113764 +0000

Catch AES failure in mbedtls_ctr_drbg_random

The functions mbedtls_ctr_drbg_random() and
mbedtls_ctr_drbg_random_with_add() could return 0 if an AES function
failed. This could only happen with alternative AES
implementations (the built-in implementation of the AES functions
involved never fail), typically due to a failure in a hardware
accelerator.

Bug reported and fix proposed by Johan Uppman Bruce and Christoffer
Lauri, Sectra.