more corresponds (59d5b439) · Commits · Public Repositories / Rust Openssl

openssl/src/aes.rs

+6 −0

Original line number	Diff line number	Diff line
		@@ -60,6 +60,7 @@ use std::mem::MaybeUninit;
		use std::ptr;

		use crate::symm::Mode;
		use openssl_macros::corresponds;

		/// Provides Error handling for parsing keys.
		#[derive(Debug)]
		@@ -74,6 +75,7 @@ impl AesKey {
		/// # Failure
		///
		/// Returns an error if the key is not 128, 192, or 256 bits.
		#[corresponds(AES_set_encrypt_key)]
		pub fn new_encrypt(key: &[u8]) -> Result<AesKey, KeyError> {
		unsafe {
		assert!(key.len() <= c_int::max_value() as usize / 8);
		@@ -97,6 +99,7 @@ impl AesKey {
		/// # Failure
		///
		/// Returns an error if the key is not 128, 192, or 256 bits.
		#[corresponds(AES_set_decrypt_key)]
		pub fn new_decrypt(key: &[u8]) -> Result<AesKey, KeyError> {
		unsafe {
		assert!(key.len() <= c_int::max_value() as usize / 8);
		@@ -135,6 +138,7 @@ impl AesKey {
		///
		/// Panics if `in_` is not the same length as `out`, if that length is not a multiple of 16, or if
		/// `iv` is not at least 32 bytes.
		#[corresponds(AES_ige_encrypt)]
		pub fn aes_ige(in_: &[u8], out: &mut [u8], key: &AesKey, iv: &mut [u8], mode: Mode) {
		unsafe {
		assert!(in_.len() == out.len());
		@@ -169,6 +173,7 @@ pub fn aes_ige(in_: &[u8], out: &mut [u8], key: &AesKey, iv: &mut [u8], mode: Mo
		///
		/// Panics if either `out` or `in_` do not have sizes that are a multiple of 8, or if
		/// `out` is not 8 bytes longer than `in_`
		#[corresponds(AES_wrap_key)]
		pub fn wrap_key(
		key: &AesKey,
		iv: Option<[u8; 8]>,
		@@ -207,6 +212,7 @@ pub fn wrap_key(
		///
		/// Panics if either `out` or `in_` do not have sizes that are a multiple of 8, or
		/// if `in_` is not 8 bytes longer than `out`
		#[corresponds(AES_unwrap_key)]
		pub fn unwrap_key(
		key: &AesKey,
		iv: Option<[u8; 8]>,

openssl/src/asn1.rs

+22 −47

Original line number	Diff line number	Diff line
		@@ -41,6 +41,7 @@ use crate::error::ErrorStack;
		use crate::nid::Nid;
		use crate::string::OpensslString;
		use crate::{cvt, cvt_p};
		use openssl_macros::corresponds;

		foreign_type_and_impl_send_sync! {
		type CType = ffi::ASN1_GENERALIZEDTIME;
		@@ -196,10 +197,7 @@ foreign_type_and_impl_send_sync! {

		impl Asn1TimeRef {
		/// Find difference between two times
		///
		/// This corresponds to [`ASN1_TIME_diff`].
		///
		/// [`ASN1_TIME_diff`]: https://www.openssl.org/docs/man1.1.0/crypto/ASN1_TIME_diff.html
		#[corresponds(ASN1_TIME_diff)]
		#[cfg(ossl102)]
		pub fn diff(&self, compare: &Self) -> Result<TimeDiff, ErrorStack> {
		let mut days = 0;
		@@ -215,12 +213,7 @@ impl Asn1TimeRef {
		}

		/// Compare two times
		///
		/// This corresponds to [`ASN1_TIME_compare`] but is implemented using [`diff`] so that it is
		/// also supported on older versions of OpenSSL.
		///
		/// [`ASN1_TIME_compare`]: https://www.openssl.org/docs/man1.1.1/man3/ASN1_TIME_compare.html
		/// [`diff`]: struct.Asn1TimeRef.html#method.diff
		#[corresponds(ASN1_TIME_compare)]
		#[cfg(ossl102)]
		pub fn compare(&self, other: &Self) -> Result<Ordering, ErrorStack> {
		let d = self.diff(other)?;
		@@ -306,6 +299,7 @@ impl fmt::Debug for Asn1TimeRef {
		}

		impl Asn1Time {
		#[corresponds(ASN1_TIME_new)]
		fn new() -> Result<Asn1Time, ErrorStack> {
		ffi::init();

		@@ -315,6 +309,7 @@ impl Asn1Time {
		}
		}

		#[corresponds(X509_gmtime_adj)]
		fn from_period(period: c_long) -> Result<Asn1Time, ErrorStack> {
		ffi::init();

		@@ -330,6 +325,7 @@ impl Asn1Time {
		}

		/// Creates a new time from the specified `time_t` value
		#[corresponds(ASN1_TIME_set)]
		pub fn from_unix(time: time_t) -> Result<Asn1Time, ErrorStack> {
		ffi::init();

		@@ -340,10 +336,7 @@ impl Asn1Time {
		}

		/// Creates a new time corresponding to the specified ASN1 time string.
		///
		/// This corresponds to [`ASN1_TIME_set_string`].
		///
		/// [`ASN1_TIME_set_string`]: https://www.openssl.org/docs/manmaster/man3/ASN1_TIME_set_string.html
		#[corresponds(ASN1_TIME_set_string)]
		#[allow(clippy::should_implement_trait)]
		pub fn from_str(s: &str) -> Result<Asn1Time, ErrorStack> {
		unsafe {
		@@ -358,11 +351,8 @@ impl Asn1Time {

		/// Creates a new time corresponding to the specified X509 time string.
		///
		/// This corresponds to [`ASN1_TIME_set_string_X509`].
		///
		/// Requires OpenSSL 1.1.1 or newer.
		///
		/// [`ASN1_TIME_set_string_X509`]: https://www.openssl.org/docs/manmaster/man3/ASN1_TIME_set_string.html
		#[corresponds(ASN1_TIME_set_string_X509)]
		#[cfg(ossl111)]
		pub fn from_str_x509(s: &str) -> Result<Asn1Time, ErrorStack> {
		unsafe {
		@@ -435,9 +425,7 @@ foreign_type_and_impl_send_sync! {
		///
		/// [ASN1_STRING-to_UTF8]: https://www.openssl.org/docs/man1.1.0/crypto/ASN1_STRING_to_UTF8.html
		pub struct Asn1String;
		/// Reference to [`Asn1String`]
		///
		/// [`Asn1String`]: struct.Asn1String.html
		/// A reference to an [`Asn1String`].
		pub struct Asn1StringRef;
		}

		@@ -447,6 +435,7 @@ impl Asn1StringRef {
		/// ASN.1 strings may utilize UTF-16, ASCII, BMP, or UTF8. This is important to
		/// consume the string in a meaningful way without knowing the underlying
		/// format.
		#[corresponds(ASN1_STRING_to_UTF8)]
		pub fn as_utf8(&self) -> Result<OpensslString, ErrorStack> {
		unsafe {
		let mut ptr = ptr::null_mut();
		@@ -465,11 +454,13 @@ impl Asn1StringRef {
		/// strings in rust, it is preferable to use [`as_utf8`]
		///
		/// [`as_utf8`]: struct.Asn1String.html#method.as_utf8
		#[corresponds(ASN1_STRING_get0_data)]
		pub fn as_slice(&self) -> &[u8] {
		unsafe { slice::from_raw_parts(ASN1_STRING_get0_data(self.as_ptr()), self.len()) }
		}

		/// Returns the number of bytes in the string.
		#[corresponds(ASN1_STRING_length)]
		pub fn len(&self) -> usize {
		unsafe { ffi::ASN1_STRING_length(self.as_ptr()) as usize }
		}
		@@ -503,9 +494,7 @@ foreign_type_and_impl_send_sync! {
		/// [`bn`]: ../bn/index.html
		/// [`ASN1_INTEGER_set`]: https://www.openssl.org/docs/man1.1.0/crypto/ASN1_INTEGER_set.html
		pub struct Asn1Integer;
		/// Reference to [`Asn1Integer`]
		///
		/// [`Asn1Integer`]: struct.Asn1Integer.html
		/// A reference to an [`Asn1Integer`].
		pub struct Asn1IntegerRef;
		}

		@@ -530,10 +519,7 @@ impl Asn1IntegerRef {
		}

		/// Converts the integer to a `BigNum`.
		///
		/// This corresponds to [`ASN1_INTEGER_to_BN`].
		///
		/// [`ASN1_INTEGER_to_BN`]: https://www.openssl.org/docs/man1.1.0/crypto/ASN1_INTEGER_get.html
		#[corresponds(ASN1_INTEGER_to_BN)]
		pub fn to_bn(&self) -> Result<BigNum, ErrorStack> {
		unsafe {
		cvt_p(ffi::ASN1_INTEGER_to_BN(self.as_ptr(), ptr::null_mut()))
		@@ -544,10 +530,8 @@ impl Asn1IntegerRef {
		/// Sets the ASN.1 value to the value of a signed 32-bit integer, for larger numbers
		/// see [`bn`].
		///
		/// OpenSSL documentation at [`ASN1_INTEGER_set`]
		///
		/// [`bn`]: ../bn/struct.BigNumRef.html#method.to_asn1_integer
		/// [`ASN1_INTEGER_set`]: https://www.openssl.org/docs/man1.1.0/crypto/ASN1_INTEGER_set.html
		#[corresponds(ASN1_INTEGER_set)]
		pub fn set(&mut self, value: i32) -> Result<(), ErrorStack> {
		unsafe { cvt(ffi::ASN1_INTEGER_set(self.as_ptr(), value as c_long)).map(\|_\| ()) }
		}
		@@ -563,19 +547,19 @@ foreign_type_and_impl_send_sync! {
		///
		/// [`x509`]: ../x509/struct.X509.html#method.signature
		pub struct Asn1BitString;
		/// Reference to [`Asn1BitString`]
		///
		/// [`Asn1BitString`]: struct.Asn1BitString.html
		/// A reference to an [`Asn1BitString`].
		pub struct Asn1BitStringRef;
		}

		impl Asn1BitStringRef {
		/// Returns the Asn1BitString as a slice.
		#[corresponds(ASN1_STRING_get0_data)]
		pub fn as_slice(&self) -> &[u8] {
		unsafe { slice::from_raw_parts(ASN1_STRING_get0_data(self.as_ptr() as *mut _), self.len()) }
		}

		/// Returns the number of bytes in the string.
		#[corresponds(ASN1_STRING_length)]
		pub fn len(&self) -> usize {
		unsafe { ffi::ASN1_STRING_length(self.as_ptr() as *const _) as usize }
		}
		@@ -604,19 +588,13 @@ foreign_type_and_impl_send_sync! {
		/// [`nid::COMMONNAME`]: ../nid/constant.COMMONNAME.html
		/// [`OBJ_nid2obj`]: https://www.openssl.org/docs/man1.1.0/crypto/OBJ_obj2nid.html
		pub struct Asn1Object;
		/// Reference to [`Asn1Object`]
		///
		/// [`Asn1Object`]: struct.Asn1Object.html
		/// A reference to an [`Asn1Object`].
		pub struct Asn1ObjectRef;
		}

		impl Asn1Object {
		/// Constructs an ASN.1 Object Identifier from a string representation of
		/// the OID.
		///
		/// This corresponds to [`OBJ_txt2obj`].
		///
		/// [`OBJ_txt2obj`]: https://www.openssl.org/docs/man1.1.0/man3/OBJ_txt2obj.html
		/// Constructs an ASN.1 Object Identifier from a string representation of the OID.
		#[corresponds(OBJ_txt2obj)]
		#[allow(clippy::should_implement_trait)]
		pub fn from_str(txt: &str) -> Result<Asn1Object, ErrorStack> {
		unsafe {
		@@ -630,11 +608,8 @@ impl Asn1Object {
		/// Return the OID as an DER encoded array of bytes. This is the ASN.1
		/// value, not including tag or length.
		///
		/// This corresponds to [`OBJ_get0_data`].
		///
		/// Requires OpenSSL 1.1.1 or newer.
		///
		/// [`OBJ_get0_data`]: https://www.openssl.org/docs/man1.1.0/man3/OBJ_get0_data.html
		#[corresponds(OBJ_get0_data)]
		#[cfg(ossl111)]
		pub fn as_slice(&self) -> &[u8] {
		unsafe {

openssl/src/base64.rs

+3 −8

Original line number	Diff line number	Diff line
		@@ -2,16 +2,14 @@
		use crate::cvt_n;
		use crate::error::ErrorStack;
		use libc::c_int;
		use openssl_macros::corresponds;

		/// Encodes a slice of bytes to a base64 string.
		///
		/// This corresponds to [`EVP_EncodeBlock`].
		///
		/// # Panics
		///
		/// Panics if the input length or computed output length overflow a signed C integer.
		///
		/// [`EVP_EncodeBlock`]: https://www.openssl.org/docs/man1.1.1/man3/EVP_DecodeBlock.html
		#[corresponds(EVP_EncodeBlock)]
		pub fn encode_block(src: &[u8]) -> String {
		assert!(src.len() <= c_int::max_value() as usize);
		let src_len = src.len() as c_int;
		@@ -32,13 +30,10 @@ pub fn encode_block(src: &[u8]) -> String {

		/// Decodes a base64-encoded string to bytes.
		///
		/// This corresponds to [`EVP_DecodeBlock`].
		///
		/// # Panics
		///
		/// Panics if the input length or computed output length overflow a signed C integer.
		///
		/// [`EVP_DecodeBlock`]: https://www.openssl.org/docs/man1.1.1/man3/EVP_DecodeBlock.html
		#[corresponds(EVP_DecodeBlock)]
		pub fn decode_block(src: &str) -> Result<Vec<u8>, ErrorStack> {
		let src = src.trim();

openssl/src/bn.rs

+67 −199

File changed.

Preview size limit exceeded, changes collapsed.

openssl/src/cipher_ctx.rs

+20 −72

Original line number	Diff line number	Diff line
		@@ -57,6 +57,7 @@ use crate::{cvt, cvt_p};
		use cfg_if::cfg_if;
		use foreign_types::{ForeignType, ForeignTypeRef};
		use libc::{c_int, c_uchar};
		use openssl_macros::corresponds;
		use std::convert::TryFrom;
		use std::ptr;

		@@ -80,10 +81,7 @@ foreign_type_and_impl_send_sync! {

		impl CipherCtx {
		/// Creates a new context.
		///
		/// This corresponds to [`EVP_CIPHER_CTX_new`].
		///
		/// [`EVP_CIPHER_CTX_new`]: https://www.openssl.org/docs/manmaster/man3/EVP_CIPHER_CTX_new.html
		#[corresponds(EVP_CIPHER_CTX_new)]
		pub fn new() -> Result<Self, ErrorStack> {
		ffi::init();

		@@ -105,10 +103,7 @@ impl CipherCtxRef {
		///
		/// Panics if the key buffer is smaller than the key size of the cipher, the IV buffer is smaller than the IV size
		/// of the cipher, or if a key or IV is provided before a cipher.
		///
		/// This corresponds to [`EVP_EncryptInit_ex`].
		///
		/// [`EVP_EncryptInit_ex`]: https://www.openssl.org/docs/manmaster/man3/EVP_EncryptInit_ex.html
		#[corresponds(EVP_EncryptInit_ex)]
		pub fn encrypt_init(
		&mut self,
		type_: Option<&CipherRef>,
		@@ -128,10 +123,7 @@ impl CipherCtxRef {
		///
		/// Panics if the key buffer is smaller than the key size of the cipher, the IV buffer is smaller than the IV size
		/// of the cipher, or if a key or IV is provided before a cipher.
		///
		/// This corresponds to [`EVP_EncryptInit_ex`].
		///
		/// [`EVP_EncryptInit_ex`]: https://www.openssl.org/docs/manmaster/man3/EVP_EncryptInit_ex.html
		#[corresponds(EVP_DecryptInit_ex)]
		pub fn decrypt_init(
		&mut self,
		type_: Option<&CipherRef>,
		@@ -189,10 +181,7 @@ impl CipherCtxRef {
		///
		/// Panics if `pub_keys` is not the same size as `encrypted_keys`, the IV buffer is smaller than the cipher's IV
		/// size, or if an IV is provided before the cipher.
		///
		/// This corresponds to [`EVP_SealInit`].
		///
		/// [`EVP_SealInit`]: https://www.openssl.org/docs/manmaster/man3/EVP_SealInit.html.
		#[corresponds(EVP_SealInit)]
		pub fn seal_init<T>(
		&mut self,
		type_: Option<&CipherRef>,
		@@ -248,10 +237,7 @@ impl CipherCtxRef {
		///
		/// Panics if the IV buffer is smaller than the cipher's required IV size or if the IV is provided before the
		/// cipher.
		///
		/// This corresponds to [`EVP_OpenInit`].
		///
		/// [`EVP_OpenInit`]: https://www.openssl.org/docs/manmaster/man3/EVP_OpenInit.html
		#[corresponds(EVP_OpenInit)]
		pub fn open_init<T>(
		&mut self,
		type_: Option<&CipherRef>,
		@@ -295,10 +281,7 @@ impl CipherCtxRef {
		/// # Panics
		///
		/// Panics if the context has not been initialized with a cipher.
		///
		/// This corresponds to [`EVP_CIPHER_CTX_block_size`].
		///
		/// [`EVP_CIPHER_CTX_block_size`]: https://www.openssl.org/docs/manmaster/man3/EVP_CIPHER_block_size.html
		#[corresponds(EVP_CIPHER_CTX_block_size)]
		pub fn block_size(&self) -> usize {
		self.assert_cipher();

		@@ -310,10 +293,7 @@ impl CipherCtxRef {
		/// # Panics
		///
		/// Panics if the context has not been initialized with a cipher.
		///
		/// This corresponds to [`EVP_CIPHER_CTX_key_length`].
		///
		/// [`EVP_CIPHER_CTX_key_length`]: https://www.openssl.org/docs/manmaster/man3/EVP_CIPHER_key_length.html
		#[corresponds(EVP_CIPHER_CTX_key_length)]
		pub fn key_length(&self) -> usize {
		self.assert_cipher();

		@@ -330,6 +310,7 @@ impl CipherCtxRef {
		/// This corresponds to [`EVP_CIPHER_CTX_rand_key`].
		///
		/// [`EVP_CIPHER_CTX_rand_key`]: https://www.openssl.org/docs/manmaster/man3/EVP_CIPHER_CTX_rand_key.html
		#[corresponds(EVP_CIPHER_CTX_rand_key)]
		pub fn rand_key(&self, buf: &mut [u8]) -> Result<(), ErrorStack> {
		assert!(buf.len() >= self.key_length());

		@@ -350,10 +331,7 @@ impl CipherCtxRef {
		/// # Panics
		///
		/// Panics if the context has not been initialized with a cipher.
		///
		/// This corresponds to [`EVP_CIPHER_CTX_set_key_length`].
		///
		/// [`EVP_CIPHER_CTX_set_key_length`]: https://www.openssl.org/docs/manmaster/man3/EVP_CIPHER_set_key_length.html
		#[corresponds(EVP_CIPHER_CTX_set_key_length)]
		pub fn set_key_length(&mut self, len: usize) -> Result<(), ErrorStack> {
		self.assert_cipher();

		@@ -373,10 +351,7 @@ impl CipherCtxRef {
		/// # Panics
		///
		/// Panics if the context has not been initialized with a cipher.
		///
		/// This corresponds to [`EVP_CIPHER_CTX_iv_length`].
		///
		/// [`EVP_CIPHER_CTX_iv_length`]: https://www.openssl.org/docs/manmaster/man3/EVP_CIPHER_CTX_iv_length.html
		#[corresponds(EVP_CIPHER_CTX_iv_length)]
		pub fn iv_length(&self) -> usize {
		self.assert_cipher();

		@@ -390,10 +365,7 @@ impl CipherCtxRef {
		/// # Panics
		///
		/// Panics if the context has not been initialized with a cipher.
		///
		/// This corresponds to [`EVP_CIPHER_CTX_ctrl`] with `EVP_CTRL_AEAD_SET_IVLEN`.
		///
		/// [`EVP_CIPHER_CTX_ctrl`]: https://www.openssl.org/docs/manmaster/man3/EVP_CIPHER_CTX_ctrl.html
		#[corresponds(EVP_CIHPER_CTX_ctrl)]
		pub fn set_iv_length(&mut self, len: usize) -> Result<(), ErrorStack> {
		self.assert_cipher();

		@@ -419,11 +391,8 @@ impl CipherCtxRef {
		///
		/// Panics if the context has not been initialized with a cipher.
		///
		/// This corresponds to [`EVP_CIPHER_CTX_tag_length`].
		///
		/// Requires OpenSSL 3.0.0 or newer.
		///
		/// [`EVP_CIPHER_CTX_tag_length`]: https://www.openssl.org/docs/manmaster/man3/EVP_CIPHER_CTX_tag_length.html
		#[corresponds(EVP_CIPHER_CTX_get_tag_length)]
		#[cfg(ossl300)]
		pub fn tag_length(&self) -> usize {
		self.assert_cipher();
		@@ -437,10 +406,7 @@ impl CipherCtxRef {
		///
		/// The size of the buffer indicates the size of the tag. While some ciphers support a range of tag sizes, it is
		/// recommended to pick the maximum size.
		///
		/// This corresponds to [`EVP_CIPHER_CTX_ctrl`] with `EVP_CTRL_AEAD_GET_TAG`.
		///
		/// [`EVP_CIPHER_CTX_ctrl`]: https://www.openssl.org/docs/manmaster/man3/EVP_CIPHER_CTX_ctrl.html
		#[corresponds(EVP_CIPHER_CTX_ctrl)]
		pub fn tag(&self, tag: &mut [u8]) -> Result<(), ErrorStack> {
		let len = c_int::try_from(tag.len()).unwrap();

		@@ -459,10 +425,7 @@ impl CipherCtxRef {
		/// Sets the length of the generated authentication tag.
		///
		/// This must be called when encrypting with a cipher in CCM mode to use a tag size other than the default.
		///
		/// This corresponds to [`EVP_CIPHER_CTX_ctrl`] with `EVP_CTRL_AEAD_SET_TAG`.
		///
		/// [`EVP_CIPHER_CTX_ctrl`]: https://www.openssl.org/docs/manmaster/man3/EVP_CIPHER_CTX_ctrl.html
		#[corresponds(EVP_CIPHER_CTX_ctrl)]
		pub fn set_tag_length(&mut self, len: usize) -> Result<(), ErrorStack> {
		let len = c_int::try_from(len).unwrap();

		@@ -479,10 +442,7 @@ impl CipherCtxRef {
		}

		/// Sets the authentication tag for verification during decryption.
		///
		/// This corresponds to [`EVP_CIPHER_CTX_ctrl`] with `EVP_CTRL_AEAD_SET_TAG`.
		///
		/// [`EVP_CIPHER_CTX_ctrl`]: https://www.openssl.org/docs/manmaster/man3/EVP_CIPHER_CTX_ctrl.html
		#[corresponds(EVP_CIPHER_CTX_ctrl)]
		pub fn set_tag(&mut self, tag: &[u8]) -> Result<(), ErrorStack> {
		let len = c_int::try_from(tag.len()).unwrap();

		@@ -501,10 +461,7 @@ impl CipherCtxRef {
		/// Enables or disables padding.
		///
		/// If padding is disabled, the plaintext must be an exact multiple of the cipher's block size.
		///
		/// This corresponds to [`EVP_CIPHER_CTX_set_padding`].
		///
		/// [`EVP_CIPHER_CTX_set_padding`]: https://www.openssl.org/docs/manmaster/man3/EVP_CIPHER_CTX_set_padding.html
		#[corresponds(EVP_CIPHER_CTX_set_padding)]
		pub fn set_padding(&mut self, padding: bool) {
		unsafe {
		ffi::EVP_CIPHER_CTX_set_padding(self.as_ptr(), padding as c_int);
		@@ -514,10 +471,7 @@ impl CipherCtxRef {
		/// Sets the total length of plaintext data.
		///
		/// This is required for ciphers operating in CCM mode.
		///
		/// This corresponds to [`EVP_CipherUpdate`].
		///
		/// [`EVP_CipherUpdate`]: https://www.openssl.org/docs/manmaster/man3/EVP_CipherUpdate.html
		#[corresponds(EVP_CipherUpdate)]
		pub fn set_data_len(&mut self, len: usize) -> Result<(), ErrorStack> {
		let len = c_int::try_from(len).unwrap();

		@@ -543,10 +497,7 @@ impl CipherCtxRef {
		/// # Panics
		///
		/// Panics if `output.len()` is less than `input.len()` plus the cipher's block size.
		///
		/// This corresponds to [`EVP_CipherUpdate`].
		///
		/// [`EVP_CipherUpdate`]: https://www.openssl.org/docs/manmaster/man3/EVP_CipherUpdate.html
		#[corresponds(EVP_CipherUpdate)]
		pub fn cipher_update(
		&mut self,
		input: &[u8],
		@@ -599,10 +550,7 @@ impl CipherCtxRef {
		/// # Panics
		///
		/// Panics if `output` is smaller than the cipher's block size.
		///
		/// This corresponds to [`EVP_CipherFinal`].
		///
		/// [`EVP_CipherFinal`]: https://www.openssl.org/docs/manmaster/man3/EVP_CipherFinal.html
		#[corresponds(EVP_CipherFinal)]
		pub fn cipher_final(&mut self, output: &mut [u8]) -> Result<usize, ErrorStack> {
		let block_size = self.block_size();
		if block_size > 1 {