tree 217be5881dc9a21bbdc95c918373abcb54ce09b4
parent 9eb78b4dabfd86f6df078af1ecf1a6c574fcc2c6
author Hanno Becker <hanno.becker@arm.com> 1533285607 +0100
committer Hanno Becker <hanno.becker@arm.com> 1534497141 +0100

Fix mbedtls_ssl_get_record_expansion() for CBC modes

`mbedtls_ssl_get_record_expansion()` is supposed to return the maximum
difference between the size of a protected record and the size of the
encapsulated plaintext.

Previously, it did not correctly estimate the maximum record expansion
in case of CBC ciphersuites in (D)TLS versions 1.1 and higher, in which
case the ciphertext is prefixed by an explicit IV.

This commit fixes this bug. Fixes #1914.