linux-stable.git/crypto/drbg.c, branch linux-4.0.y

Revert "crypto: drbg - use memzero_explicit() for clearing sensitive data"

2015-01-04T23:44:09+00:00

    
This reverts commit 421d82f5b3e75f94e31875e37d45cdf6a557c120.

None of the data zeroed are on the stack so the compiler cannot
optimise them away.
    
Signed-off-by: Herbert Xu

crypto: drbg - panic on continuous self test error

2014-12-22T12:02:37+00:00

This patch adds a panic if the FIPS 140-2 self test error failed.
Note, that entire code is only executed with fips_enabled (i.e. when the
kernel is booted with fips=1. It is therefore not executed for 99.9% of
all user base.

As mathematically such failure cannot occur, this panic should never be
triggered. But to comply with NISTs current requirements, an endless
loop must be replaced with the panic.

When the new version of FIPS 140 will be released, this entire
continuous self test function will be ripped out as it will not be
needed any more.

This patch is functionally equivalent as implemented in ansi_cprng.c and drivers/char/random.c.

Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: drbg - use memzero_explicit() for clearing sensitive data

2014-11-27T14:26:18+00:00

Compiler dead store optimization can sometimes remove final calls
to memset() used to clear sensitive data at the end of a function.
Replace trailing memset() calls with memzero_explicit() to
preclude unwanted removal.

Signed-off-by: Nickolaus Woodruff 
Signed-off-by: Herbert Xu

crypto: drbg - use MODULE_ALIAS_CRYPTO

2014-11-26T12:06:30+00:00

Use the crypto- prefix for the DRBG implementations.

Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: drbg - add MODULE_ALIAS for all DRBG types

2014-11-10T14:09:00+00:00

The kernel module drbg.ko is currently not loaded automatically when a
DRBG is requested by a consumer. This is due to missing MODULE_ALIAS
flags for each of the implemented DRBG types.

This patch adds aliases for each of the 22 defined DRBGs.

Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: drbg - use crypto_inc

2014-10-24T14:49:36+00:00

The DRBG internal buffer addition function is replaced with crypto_inc when
a buffer is to be incremented by one.

The function drbg_add_buf is moved to the CONFIG_CRYPTO_DRBG_HASH ifdef
area as it is now only needed for the Hash DRBG.

Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu

Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

2014-09-05T08:11:43+00:00

Merging the crypto tree for 3.17 in order to resolve the conflict
on the 32-bit DRBG overflow fix.

crypto: drbg - remove check for uninitialized DRBG handle

2014-09-05T07:56:43+00:00

The drbg_healthcheck() contained a test to call the DRBG with an
uninitialized DRBG cipher handle. As this is an inappropriate use of the
kernel crypto API to try to generate random numbers before
initialization, checks verifying for an initialized DRBG have been
removed in previous patches.

Now, the drbg_healthcheck test must also be removed.

Changes V2: Added patch marker to email subject line.

Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: drbg - fix sparse warning for cpu_to_be[32|64]

2014-08-26T07:33:28+00:00

The sparse tool complained that the cpu_to_be[32|64] functions return
__be[32|64] instead of __u32 or __u64. The patch replaces the __u32 and
__u64 with __be32 and __be64.

Reported-by: kbuild test robot 
Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: drbg - remove unnecessary sanity check for shadow state

2014-08-25T12:34:14+00:00

During creation of the DRBG shadow state, it is ensured that the DRBG
state structure is already allocated. Thus, a sanity check for verifying
that the structure is allocated is removed.

Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu