Make nonce length check return error where it can
Signed-off-by: Paul Elliott <paul.elliott@arm.com>
diff --git a/library/psa_crypto_aead.c b/library/psa_crypto_aead.c
index 033dc82..46eb1c9 100644
--- a/library/psa_crypto_aead.c
+++ b/library/psa_crypto_aead.c
@@ -195,12 +195,10 @@
}
tag = ciphertext + plaintext_length;
- if( mbedtls_aead_check_nonce_length( &operation, nonce_length )
- != PSA_SUCCESS )
- {
- status = PSA_ERROR_NOT_SUPPORTED;
+ status = mbedtls_aead_check_nonce_length( &operation, nonce_length );
+
+ if( status != PSA_SUCCESS )
goto exit;
- }
#if defined(MBEDTLS_PSA_BUILTIN_ALG_CCM)
if( operation.alg == PSA_ALG_CCM )
@@ -310,12 +308,10 @@
if( status != PSA_SUCCESS )
goto exit;
- if( mbedtls_aead_check_nonce_length( &operation, nonce_length )
- != PSA_SUCCESS )
- {
- status = PSA_ERROR_NOT_SUPPORTED;
+ status = mbedtls_aead_check_nonce_length( &operation, nonce_length );
+
+ if( status != PSA_SUCCESS )
goto exit;
- }
#if defined(MBEDTLS_PSA_BUILTIN_ALG_CCM)
if( operation.alg == PSA_ALG_CCM )