commit 9450dc7b6fde548885f70d8c477d2c411142d3ee
author Przemek Stekiel <przemyslaw.stekiel@mobica.com> Tue Sep 27 13:36:12 2022 +0200
committer Przemek Stekiel <przemyslaw.stekiel@mobica.com> Wed Oct 05 11:38:25 2022 +0200
tree 64a8b2e492b6be15dc55afebdec80ce6245a867e
parent e53527063b465d4bd546a084dea0ac5917c0f35d

Fix guards for mbedtls_ct_size_mask() and mbedtls_ct_memcpy_if_eq()

Both functions are used when MBEDTLS_SSL_SOME_SUITES_USE_MAC is defined not MBEDTLS_SSL_SOME_SUITES_USE_TLS_CBC.

Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>

library/constant_time_internal.h

diff --git a/library/constant_time_internal.h b/library/constant_time_internal.h
index a550b38..8874729 100644
--- a/library/constant_time_internal.h
+++ b/library/constant_time_internal.h
@@ -196,7 +196,7 @@
 
 #endif /* MBEDTLS_BASE64_C */
 
-#if defined(MBEDTLS_SSL_SOME_SUITES_USE_TLS_CBC)
+#if defined(MBEDTLS_SSL_SOME_SUITES_USE_MAC)
 
 /** Conditional memcpy without branches.
  *
@@ -292,7 +292,7 @@
                      size_t max_data_len,
                      unsigned char *output );
 
-#endif /* MBEDTLS_SSL_SOME_SUITES_USE_TLS_CBC */
+#endif /* MBEDTLS_SSL_SOME_SUITES_USE_MAC */
 
 #if defined(MBEDTLS_PKCS1_V15) && defined(MBEDTLS_RSA_C) && !defined(MBEDTLS_RSA_ALT)