• R
    crypto: ccm - preserve the IV buffer · 441f99c9
    Romain Izard 提交于
    The IV buffer used during CCM operations is used twice, during both the
    hashing step and the ciphering step.
    
    When using a hardware accelerator that updates the contents of the IV
    buffer at the end of ciphering operations, the value will be modified.
    In the decryption case, the subsequent setup of the hashing algorithm
    will interpret the updated IV instead of the original value, which can
    lead to out-of-bounds writes.
    
    Reuse the idata buffer, only used in the hashing step, to preserve the
    IV's value during the ciphering step in the decryption case.
    Signed-off-by: NRomain Izard <romain.izard.pro@gmail.com>
    Reviewed-by: NTudor Ambarus <tudor.ambarus@microchip.com>
    Cc: <stable@vger.kernel.org>
    Signed-off-by: NHerbert Xu <herbert@gondor.apana.org.au>
    441f99c9
ccm.c 25.5 KB