linux.git/crypto/xcbc.c, branch v5.1

crypto: xcbc - Remove VLA usage

2018-09-04T03:35:03+00:00

In the quest to remove all stack VLA usage from the kernel[1], this uses
the maximum blocksize and adds a sanity check. For xcbc, the blocksize
must always be 16, so use that, since it's already being enforced during
instantiation.

[1] https://lkml.kernel.org/r/CA+55aFzCG-zNmZwX4A2FQpadafLfEzK6CC=qPXydAacU1RqZWA@mail.gmail.com

Signed-off-by: Kees Cook 
Signed-off-by: Herbert Xu

crypto: replace FSF address with web source in license notices

2017-11-29T06:33:25+00:00

A few years ago the FSF moved and "59 Temple Place" is wrong. Having this
still in our source files feels old and unmaintained.

Let's take the license statement serious and not confuse users.

As https://www.gnu.org/licenses/gpl-howto.html suggests, we replace the
postal address with "".

Signed-off-by: Martin Kepplinger 
Signed-off-by: Herbert Xu

crypto: include crypto- module prefix in template

2014-11-26T12:06:30+00:00

This adds the module loading prefix "crypto-" to the template lookup
as well.

For example, attempting to load 'vfat(blowfish)' via AF_ALG now correctly
includes the "crypto-" prefix at every level, correctly rejecting "vfat":

	net-pf-38
	algif-hash
	crypto-vfat(blowfish)
	crypto-vfat(blowfish)-all
	crypto-vfat

Reported-by: Mathias Krause 
Signed-off-by: Kees Cook 
Acked-by: Mathias Krause 
Signed-off-by: Herbert Xu

crypto: add module.h to those files that are explicitly using it

2011-10-31T23:31:11+00:00

Part of the include cleanups means that the implicit
inclusion of module.h via device.h is going away.  So
fix things up in advance.

Signed-off-by: Paul Gortmaker

crypto: xcbc - Fix alignment calculation of xcbc_tfm_ctx

2009-08-20T07:58:04+00:00

The alignment calculation of xcbc_tfm_ctx uses alg->cra_alignmask
and not alg->cra_alignmask + 1 as it should. This led to frequent
crashes during the selftest of xcbc(aes-asm) on x86_64
machines. This patch fixes this. Also we use the alignmask
of xcbc and not the alignmask of the underlying algorithm
for the alignmnent calculation in xcbc_create now.

Signed-off-by: Steffen Klassert 
Signed-off-by: Herbert Xu

crypto: xcbc - Fix shash conversion

2009-07-22T06:38:10+00:00

Although xcbc was converted to shash, it didn't obey the new
requirement that all hash state must be stored in the descriptor
rather than the transform.

This patch fixes this issue and also optimises away the rekeying
by precomputing K2 and K3 within setkey.

Signed-off-by: Herbert Xu

crypto: xcbc - Use crypto_xor

2009-07-22T06:38:10+00:00

This patch replaces the local xor function with the generic
crypto_xor function.

Signed-off-by: Herbert Xu

crypto: xcbc - Fix incorrect error value when creating instance

2009-07-15T08:53:33+00:00

If shash_alloc_instance() fails, we return the wrong error value.
This patch fixes it.

Signed-off-by: Herbert Xu

crypto: xcbc - Switch to shash

2009-07-14T04:58:06+00:00

This patch converts the xcbc algorithm to the new shash type.

Signed-off-by: Herbert Xu

[CRYPTO] xcbc: Fix crash when ipsec uses xcbc-mac with big data chunk

2008-04-02T06:36:09+00:00

The kernel crashes when ipsec passes a udp packet of about 14XX bytes
of data to aes-xcbc-mac.

It seems the first xxxx bytes of the data are in first sg entry,
and remaining xx bytes are in next sg entry. But we don't 
check next sg entry to see if we need to go look the page up.

I noticed in hmac.c, we do a scatterwalk_sg_next(), to do this check
and possible lookup, thus xcbc.c needs to use this routine too.

A 15-hour run of an ipsec stress test sending streams of tcp and
udp packets of various sizes,  using this patch and 
aes-xcbc-mac completed successfully, so hopefully this fixes the
problem.
 
Signed-off-by: Joy Latten 
Signed-off-by: Herbert Xu