[PATCH] crypto/openssl: fix SM2 encryption output length
Sun Yuechi
sunyuechi at iscas.ac.cn
Mon Oct 26 15:16:52 CET 2026
SM2 encryption passed a zero output length to EVP_PKEY_encrypt(),
which OpenSSL 3.6.3 and later reject as "buffer too small".
Query the required length first, as the RSA path does.
Fixes: 3b7d638fb11f ("crypto/openssl: support asymmetric SM2")
Cc: stable at dpdk.org
Signed-off-by: Sun Yuechi <sunyuechi at iscas.ac.cn>
---
drivers/crypto/openssl/rte_openssl_pmd.c | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/drivers/crypto/openssl/rte_openssl_pmd.c b/drivers/crypto/openssl/rte_openssl_pmd.c
index 1b33470c8f..8791186fec 100644
--- a/drivers/crypto/openssl/rte_openssl_pmd.c
+++ b/drivers/crypto/openssl/rte_openssl_pmd.c
@@ -2791,6 +2791,10 @@ process_openssl_sm2_op_evp(struct rte_crypto_op *cop,
if (!EVP_PKEY_CTX_set_params(cctx, eparams))
goto err_sm2;
+ if (!EVP_PKEY_encrypt(cctx, NULL, &output_len,
+ op->sm2.message.data, op->sm2.message.length))
+ goto err_sm2;
+
if (!EVP_PKEY_encrypt(cctx, op->sm2.cipher.data, &output_len,
op->sm2.message.data,
op->sm2.message.length))
--
2.56.0
More information about the dev
mailing list