Fixed CTR mode on openssl not generating an empty counter. This wasn'…

…t broken cryptographically, but from an API perspective didn't meet the contract. (#147)
awslabs · Apr 20, 2023 · 55e478b · 55e478b
1 parent d6332a8
commit 55e478b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/source/unix/openssl_aes.c b/source/unix/openssl_aes.c
@@ -290,7 +290,7 @@ struct aws_symmetric_cipher *aws_aes_ctr_256_new_impl(
     } else {
         aws_byte_buf_init(&cipher->cipher_base.iv, allocator, AWS_AES_256_CIPHER_BLOCK_SIZE);
         aws_symmetric_cipher_generate_initialization_vector(
-            AWS_AES_256_CIPHER_BLOCK_SIZE, false, &cipher->cipher_base.iv);
+            AWS_AES_256_CIPHER_BLOCK_SIZE, true, &cipher->cipher_base.iv);
     }
 
     /* EVP_CIPHER_CTX_init() will be called inside EVP_CIPHER_CTX_new(). */