Truncated hmac check

2023-03-24 16:43:34 +01:00 · 2023-03-24 16:43:34 +01:00 · 94cf845c05
parent 7791b8ff4d
commit 94cf845c05
1 changed files with 6 additions and 0 deletions
--- a/wolfssl/wolfcrypt/settings.h
+++ b/wolfssl/wolfcrypt/settings.h
@ -2965,6 +2965,12 @@ extern void uITRON4_free(void *p) ;
 #error "Dynamic session cache currently does not support persistent session cache."
 #endif

+#ifdef WOLFSSL_HARDEN_TLS
+    #ifdef HAVE_TRUNCATED_HMAC
+        #error "Truncated HMAC Extension not allowed https://www.rfc-editor.org/rfc/rfc9325#section-4.6"
+    #endif
+#endif
+
 #ifdef __cplusplus
    }   /* extern "C" */
 #endif