crypto: nx - Fix timing leak in GCM and CCM decryption

Browse source

Using non-constant time memcmp() makes the verification of the authentication
tag in the decrypt path vulnerable to timing attacks. Fix this by using
crypto_memneq() instead.

Cc: stable@vger.kernel.org
Signed-off-by: David Gstir <david@sigma-star.at>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>

...

This commit is contained in:

David Gstir 2015-11-15 17:14:41 +01:00 • committed by Herbert Xu

parent 8005c49d9a

commit cb8affb55c

2 changed files with 3 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

drivers/crypto/nx/nx-aes-ccm.c

View file

3

drivers/crypto/nx/nx-aes-gcm.c

View file