A+


On Sat, Dec 21, 2013 at 4:21 PM, Paul Kehrer <notifications@github.com>wrote:

> In cryptography/hazmat/backends/openssl/backend.py:
>
> > @@ -319,9 +319,9 @@ def __init__(self, backend, cipher, mode, operation):
> >              )
> >              assert res != 0
> >              if operation == self._DECRYPT:
> > -                if not mode.tag:
> > -                    raise ValueError("Authentication tag must be supplied "
> > -                                     "when decrypting")
> > +                if not mode.tag or len(mode.tag) < 4:
> > +                    raise ValueError("Authentication tag must be provided "
> > +                                     "and 4 bytes or longer when decrypting")
>
> [image: unpossible]<https://github-camo.global.ssl.fastly.net/fa9f8af6a676069981e6d504e6ad48d4d1894317/687474703a2f2f6769667374756d626c722e636f6d2f696d616765732f6d652d6661696c2d656e676c6973682d74686174732d756e706f737369626c655f3630352e676966>
>
> —
> Reply to this email directly or view it on GitHub<https://github.com/pyca/cryptography/pull/327/files#r8518832>
> .
>



-- 
"I disapprove of what you say, but I will defend to the death your right to
say it." -- Evelyn Beatrice Hall (summarizing Voltaire)
"The people's good is the highest law." -- Cicero
GPG Key fingerprint: 125F 5C67 DFE9 4084