IncrementalXChaCha20Poly1305.cs: Prevent rekey after final chunk.

samuel-lucas6 · Sep 30, 2023 · 56a9c41 · 56a9c41
1 parent 416423b
commit 56a9c41
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/src/Geralt/Crypto/IncrementalXChaCha20Poly1305.cs b/src/Geralt/Crypto/IncrementalXChaCha20Poly1305.cs
@@ -77,6 +77,7 @@ public unsafe ChunkFlag Pull(Span<byte> plaintextChunk, ReadOnlySpan<byte> ciphe
 
     public void Rekey()
     {
+        if (_finalized) { throw new InvalidOperationException("Cannot rekey after the final chunk."); }
         crypto_secretstream_xchacha20poly1305_rekey(ref _state);
     }