Stop using composite EVP_CIPHER AEADs.
authorjsing <jsing@openbsd.org>
Mon, 3 Sep 2018 18:00:50 +0000 (18:00 +0000)
committerjsing <jsing@openbsd.org>
Mon, 3 Sep 2018 18:00:50 +0000 (18:00 +0000)
commitafdb8869f62d7da4563c8c86a64052f26282aa0f
tree03a84d973a0e7431fc2885c1e2e7bdeb87a1b1aa
parentb061161e6a861a29b8a1bc1e69b7e4b9e1fabda7
Stop using composite EVP_CIPHER AEADs.

The composite AEADs are "stitched" mode ciphers, that are only supported on
some architectures/CPUs and are designed to be faster than a separate
EVP_CIPHER and EVP_MD implementation. The three AEADs are used for less
than ideal cipher suites (if you have hardware support that these use
there are better cipher suite options), plus continuing to support AEADs
via EVP_CIPHER is creating additional code complexity.

ok inoguchi@ tb@
lib/libssl/ssl_ciph.c