tree e6605709ac475658010eda6c495e80f53f1dcad0
parent 6ee1f4f40b5100ef2744866a727bb4b9ef8ea39e
author Matt Caswell <matt@openssl.org> 1650014579 +0100
committer Matt Caswell <matt@openssl.org> 1651571209 +0100

Fix the RC4-MD5 cipher

A copy&paste error meant that the RC4-MD5 cipher (used in TLS) used the TLS
AAD data as the MAC key.

CVE-2022-1434

Fixes #18112

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Matt Caswell <matt@openssl.org>