gcm128.c: fix AAD-only case with AAD length not divisible by 16.

PR: 2859
Submitted by: John Foley
(backport from HEAD)
This commit is contained in:
Dr. Stephen Henson
2012-10-14 12:29:25 +00:00
parent 82607b291f
commit 799602e489

View File

@@ -1403,7 +1403,7 @@ int CRYPTO_gcm128_finish(GCM128_CONTEXT *ctx,const unsigned char *tag,
void (*gcm_gmult_p)(u64 Xi[2],const u128 Htable[16]) = ctx->gmult;
#endif
if (ctx->mres)
if (ctx->mres || ctx->ares)
GCM_MUL(ctx,Xi);
if (is_endian.little) {