tleonhardt / practical_cryptography_engineering Goto Github PK

In the file nacl_encrypt_file.c you have the following code:

ret = crypto_secretbox_easy(ciphertext, message, message_len, nonce, key);
    if ( ret != 0)
    {   // The only way I can see for this function to fail is if the message length is too large (> 2^64 - 16)
        printf(" failed.  Message length = %lld\n", message_len);
    }

However, this only works to encrypt a file, if, and only if, it fits in the computer memory inside the variable messsage. Take a look at the explanation in the Quick start page of Libsodium. So, with crypto_secretbox_easy the limit is not 2^64 - 16, but the memory size of message.
The best way to encrypt a file, regardless of its size, is with crypto_secretstream* functions (see the file encryption code example on Libsodium docs).

I'm getting the below error code
mbedtls_gcm_setkey failed to set the key for AES cipher - returned -0x61 (MBEDTLS_ERR_CIPHER_ALLOC_FAILED)

In my project, I'm calling mbedtls_gcm_setkey, passed initialized gcm context which calls "mbedtls_cipher_setup"

Inside the "mbedtls_cipher_setup " API...
if( NULL == ( ctx->cipher_ctx = cipher_info->base->ctx_alloc_func() ) )
return( MBEDTLS_ERR_CIPHER_ALLOC_FAILED );

It fails here, I don't see ctx_alloc_func references in the repo, am i missing something?