linux-stable.git/crypto/drbg.c, branch linux-4.1.y

crypto: rng - RNGs must return 0 in success case

2015-03-09T10:06:18+00:00

Change the RNGs to always return 0 in success case.

This patch ensures that seqiv.c works with RNGs other than krng. seqiv
expects that any return code other than 0 is an error. Without the
patch, rfc4106(gcm(aes)) will not work when using a DRBG or an ANSI
X9.31 RNG.

Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: drbg - remove superflowous memsets

2015-03-04T09:13:29+00:00

The DRBG code contains memset(0) calls to initialize a varaible
that are not necessary as the variable is always overwritten by
the processing.

This patch increases the CTR and Hash DRBGs by about 5%.

Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: drbg - use single block cipher API

2015-03-04T09:13:29+00:00

The CTR DRBG only encrypts one single block at a time. Thus, use the
single block crypto API to avoid additional overhead from the block
chaining modes.

With the patch, the speed of the DRBG increases between 30% and 40%.

The DRBG still passes the CTR DRBG CAVS test.

Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu

Revert "crypto: drbg - use memzero_explicit() for clearing sensitive data"

2015-01-04T23:44:09+00:00

    
This reverts commit 421d82f5b3e75f94e31875e37d45cdf6a557c120.

None of the data zeroed are on the stack so the compiler cannot
optimise them away.
    
Signed-off-by: Herbert Xu

crypto: drbg - panic on continuous self test error

2014-12-22T12:02:37+00:00

This patch adds a panic if the FIPS 140-2 self test error failed.
Note, that entire code is only executed with fips_enabled (i.e. when the
kernel is booted with fips=1. It is therefore not executed for 99.9% of
all user base.

As mathematically such failure cannot occur, this panic should never be
triggered. But to comply with NISTs current requirements, an endless
loop must be replaced with the panic.

When the new version of FIPS 140 will be released, this entire
continuous self test function will be ripped out as it will not be
needed any more.

This patch is functionally equivalent as implemented in ansi_cprng.c and drivers/char/random.c.

Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: drbg - use memzero_explicit() for clearing sensitive data

2014-11-27T14:26:18+00:00

Compiler dead store optimization can sometimes remove final calls
to memset() used to clear sensitive data at the end of a function.
Replace trailing memset() calls with memzero_explicit() to
preclude unwanted removal.

Signed-off-by: Nickolaus Woodruff 
Signed-off-by: Herbert Xu

crypto: drbg - use MODULE_ALIAS_CRYPTO

2014-11-26T12:06:30+00:00

Use the crypto- prefix for the DRBG implementations.

Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: drbg - add MODULE_ALIAS for all DRBG types

2014-11-10T14:09:00+00:00

The kernel module drbg.ko is currently not loaded automatically when a
DRBG is requested by a consumer. This is due to missing MODULE_ALIAS
flags for each of the implemented DRBG types.

This patch adds aliases for each of the 22 defined DRBGs.

Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: drbg - use crypto_inc

2014-10-24T14:49:36+00:00

The DRBG internal buffer addition function is replaced with crypto_inc when
a buffer is to be incremented by one.

The function drbg_add_buf is moved to the CONFIG_CRYPTO_DRBG_HASH ifdef
area as it is now only needed for the Hash DRBG.

Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu

Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

2014-09-05T08:11:43+00:00

Merging the crypto tree for 3.17 in order to resolve the conflict
on the 32-bit DRBG overflow fix.