Bug #8221: 2 AES-128-GCM (probably same in AES-256-GCM) bug?

• Status: Closed
• Assignee: -
• Target version: -
• ruby -v: 2.1.0
• Backport: 2.2: WONTFIX, 2.3: DONE, 2.4: DONTNEED

[nov (nov matake)]

1. OpenSSL::Cipher::AES.new(128, :GDM) doesn't work

2. You can't set iv before key

Sample code here.
https://gist.github.com/nov/5311749

[naruse (Yui NARUSE)]

• Tracker changed from Backport to Bug
• Project changed from Backport200 to Ruby master
• Status changed from Open to Assigned
• Assignee set to MartinBosslet (Martin Bosslet)

[nobu (Nobuyoshi Nakada)]

• ruby -v set to 2.1.0

=begin
Is this related to ((URL:https://s3.amazonaws.com/archive.travis-ci.org/jobs/6783150/log.txt))?

4. Error:
   test_aes_gcm_wrong_tag(OpenSSL::TestCipher):
   OpenSSL::Cipher::CipherError: unable to set GCM tag
   /home/travis/build/ruby/ruby/test/openssl/test_cipher.rb:190:in auth_tag=' /home/travis/build/ruby/ruby/test/openssl/test_cipher.rb:190:in test_aes_gcm_wrong_tag'
   =end

[naruse (Yui NARUSE)]

• Category set to ext/openssl
• Target version set to 2.1.0

[naruse (Yui NARUSE)]

• Assignee changed from MartinBosslet (Martin Bosslet) to 7150

[naruse (Yui NARUSE)]

http://rbci.lakewood.privs.net/ruby-trunk/log/20130726T230003Z.log.html.gz also relates this

[hsbt (Hiroshi SHIBATA)]

• Target version changed from 2.1.0 to 2.2.0

[rhenium (Kazuki Yamaguchi)]

• Status changed from Assigned to Closed
• Backport set to 2.1: UNKNOWN, 2.2: REQUIRED, 2.3: REQUIRED

Fixed by the following commits at ruby/openssl.

1. AES-GCM ciphers does not have uppercase short name

   https://github.com/ruby/openssl/commit/2ed10db12deb114066443b4a0f1ffd49a8f612b2

2. The ordering issue of key and IV

   https://github.com/ruby/openssl/commit/8108e0a6db133f3375608303fdd2083eb5115062

[usa (Usaku NAKAMURA)]

• Backport changed from 2.1: UNKNOWN, 2.2: REQUIRED, 2.3: REQUIRED to 2.2: WONTFIX, 2.3: DONE, 2.4: DONTNEED