CKM: Don't use IV less than 12 bytes for TZ Backend

Change-Id: I19b51a312e6ac29bb09f927a10db4571acca470a

diff --git a/src/ckm/unprivileged/encryption-decryption.cpp b/src/ckm/unprivileged/encryption-decryption.cpp
index 1073ca1871c8f3afac1c0ca76da707b43426edc9..3da42d26f13de0937edc6b216ef1d68c89333160 100644 (file)
--- a/src/ckm/unprivileged/encryption-decryption.cpp
+++ b/src/ckm/unprivileged/encryption-decryption.cpp
@@ -842,8 +842,11 @@ void testGcmDifferentIvSizes(const Algo& algo)
     // add AES GCM key
     KeyAliasPair aliases = getKey(algo, PRIMARY);
 
+#ifndef TZ_BACKEND
+    // TZ Backend doesn't support IV with less than 12.
     testGcmIvSize(IV1,   aliases);
     testGcmIvSize(IV11,  aliases);
+#endif
     testGcmIvSize(IV12,  aliases);
     testGcmIvSize(IV17,  aliases);
     testGcmIvSize(IV128, aliases);