mirror of
git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
synced 2025-09-18 22:14:16 +00:00
dec0ed6c1b
The NX CGM implementation doesn't support zero length messages and the current implementation has two flaws: - When the input data length is zero, it ignores the associated data. - Even when both lengths are zero, it uses the Crypto API to encrypt a zeroed block using ctr(aes) and because of this it allocates a new transformation and sets the key for this new tfm. Both operations are intended to be used only in user context, while the cryptographic operations can be called in both user and softirq contexts. This patch replaces the nested Crypto API use and adds two special cases: - When input data and associated data lengths are zero: it uses NX ECB mode to emulate the encryption of a zeroed block using ctr(aes). - When input data is zero and associated data is available: it uses NX GMAC mode to calculate the associated data MAC. Reviewed-by: Joy Latten <jmlatten@linux.vnet.ibm.com> Signed-off-by: Marcelo Cerri <mhcerri@linux.vnet.ibm.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> |
||
|---|---|---|
| .. | ||
| Kconfig | ||
| Makefile | ||
| nx-842.c | ||
| nx-aes-cbc.c | ||
| nx-aes-ccm.c | ||
| nx-aes-ctr.c | ||
| nx-aes-ecb.c | ||
| nx-aes-gcm.c | ||
| nx-aes-xcbc.c | ||
| nx-sha256.c | ||
| nx-sha512.c | ||
| nx.c | ||
| nx.h | ||
| nx_csbcpb.h | ||
| nx_debugfs.c | ||