Set tag to 'impossible' value on failure to encrypt
Signed-off-by: Paul Elliott <paul.elliott@arm.com>
diff --git a/library/psa_crypto.c b/library/psa_crypto.c
index fb74a0d..0b64781 100644
--- a/library/psa_crypto.c
+++ b/library/psa_crypto.c
@@ -3626,6 +3626,11 @@
exit:
+ /* In case the operation fails and the user fails to check for failure or
+ * the zero tag size, make sure the tag is set to something impossible. */
+ if( status != PSA_SUCCESS )
+ memset(tag, '!', tag_size);
+
psa_aead_abort( operation );
return( status );