diff mbox series

[2/3] swupdate_decrypt_mbedtls: set padding mode

Message ID 20241226141004.379196-3-oss@braunwarth.dev
State Changes Requested
Headers show
Series Mbed TLS fixes | expand

Commit Message

Daniel Braunwarth Dec. 26, 2024, 2:10 p.m. UTC 
Mbed TLS enforces a mbedtls_cipher_set_padding_mode() call since version
3.5.0.

Signed-off-by: Daniel Braunwarth <oss@braunwarth.dev>
---
 corelib/swupdate_decrypt_mbedtls.c | 8 ++++++++
 1 file changed, 8 insertions(+)
diff mbox series

Patch

diff --git a/corelib/swupdate_decrypt_mbedtls.c b/corelib/swupdate_decrypt_mbedtls.c
index cccbe8d..8a7a265 100644
--- a/corelib/swupdate_decrypt_mbedtls.c
+++ b/corelib/swupdate_decrypt_mbedtls.c
@@ -62,6 +62,14 @@  struct swupdate_digest *swupdate_DECRYPT_init(unsigned char *key, char keylen, u
 		goto fail;
 	}
 
+#ifdef MBEDTLS_CIPHER_MODE_WITH_PADDING
+	error = mbedtls_cipher_set_padding_mode(&dgst->mbedtls_cipher_context, MBEDTLS_PADDING_PKCS7);
+	if (error) {
+		ERROR("mbedtls_cipher_set_padding_mode: %d", error);
+		goto fail;
+	}
+#endif
+
 	error = mbedtls_cipher_set_iv(&dgst->mbedtls_cipher_context, iv, 16);
 	if (error) {
 		ERROR("mbedtls_cipher_set_iv: %d", error);