tree b7be75458c9a91301f24110eea1de9db3186d377
parent d625dfd80595a76324dea1452ceb9cfbcaee8e3e
author Han-Wen Nienhuys <hanwen@google.com> 1499344296 +0200
committer Han-Wen Nienhuys <hanwen@google.com> 1499354845 +0000

ssh: allow up to 255 bytes of padding in AES-GCM

The writing side would generate a maximum of 19 bytes of padding, so
the reading side erroneously checked this. However, RFC 5647 specifies
255 as the maximum amount of padding for AES-GCM.

Fixes golang/go#18953.

Change-Id: I416b0023c6e4cbd91a6a1b4214a03f1663b77248
Reviewed-on: https://go-review.googlesource.com/47590
Reviewed-by: Adam Langley <agl@golang.org>
Run-TryBot: Adam Langley <agl@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>