crypto: xts - consolidate sanity check for keys

Browse source

The patch centralizes the XTS key check logic into the service function
xts_check_key which is invoked from the different XTS implementations.
With this, the XTS implementations in ARM, ARM64, PPC and S390 have now
a sanity check for the XTS keys similar to the other arches.

In addition, this service function received a check to ensure that the
key != the tweak key which is mandated by FIPS 140-2 IG A.9. As the
check is not present in the standards defining XTS, it is only enforced
in FIPS mode of the kernel.

Signed-off-by: Stephan Mueller <smueller@chronox.de>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>

...

This commit is contained in:

Stephan Mueller 2016-02-09 15:37:47 +01:00 • committed by Herbert Xu

parent 730d02e276

commit 28856a9e52

13 changed files with 71 additions and 53 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

4

arch/arm/crypto/aes-ce-glue.c

View file

5

arch/arm/crypto/aesbs-glue.c

View file

4

arch/arm64/crypto/aes-glue.c

View file

5

arch/powerpc/crypto/aes-spe-glue.c

View file

5

arch/s390/crypto/aes_s390.c

View file

11

arch/x86/crypto/aesni-intel_glue.c

View file

10

arch/x86/crypto/camellia_glue.c

View file

10

arch/x86/crypto/cast6_avx_glue.c

View file

11

arch/x86/crypto/serpent_avx_glue.c

View file

11

arch/x86/crypto/serpent_sse2_glue.c

View file

10

arch/x86/crypto/twofish_glue_3way.c

View file

11

crypto/xts.c

View file

27

include/crypto/xts.h

View file