Commit 70803637be for strongswan.org

commit 70803637bee002b24c6b828f3df52d696d13ddaf
Author: Tobias Brunner <tobias@strongswan.org>
Date:   Mon Nov 2 09:25:10 2026 +0100

    openssl: Validate key size for DES-ECB

diff --git a/src/libstrongswan/plugins/openssl/openssl_crypter.c b/src/libstrongswan/plugins/openssl/openssl_crypter.c
index 53352a83e7..c4c6e41991 100644
--- a/src/libstrongswan/plugins/openssl/openssl_crypter.c
+++ b/src/libstrongswan/plugins/openssl/openssl_crypter.c
@@ -353,6 +353,11 @@ openssl_crypter_t *openssl_crypter_create(encryption_algorithm_t algo,
 			break;
 #ifndef OPENSSL_NO_DES
 		case ENCR_DES_ECB:
+			if (key_size && key_size != 8)
+			{
+				free(this);
+				return NULL;
+			}
 			key_size = 8;
 			this->cipher = EVP_des_ecb();
 			break;