Use IV length of a crypter instead of block size for IV calculations

[strongswan.git] / src / libtls / tls_crypto.c

diff --git a/src/libtls/tls_crypto.c b/src/libtls/tls_crypto.c
index b8eb87b..5668f13 100644 (file)
--- a/src/libtls/tls_crypto.c
+++ b/src/libtls/tls_crypto.c
@@ -772,7 +772,7 @@ METHOD(tls_crypto_t, derive_secrets, void,
                eks = this->crypter_out->get_key_size(this->crypter_out);
                if (this->tls->get_version(this->tls) < TLS_1_1)
                {
                eks = this->crypter_out->get_key_size(this->crypter_out);
                if (this->tls->get_version(this->tls) < TLS_1_1)
                {

-                       ivs = this->crypter_out->get_block_size(this->crypter_out);
+                       ivs = this->crypter_out->get_iv_size(this->crypter_out);

                }
        }
        seed = chunk_cata("cc", server_random, client_random);
                }
        }
        seed = chunk_cata("cc", server_random, client_random);