diff options
| author | David C.C.M. Gall <david.ccm.gall@googlemail.com> | 2026-08-07 18:13:52 +0200 |
|---|---|---|
| committer | Herbert Xu <herbert@gondor.apana.org.au> | 2026-08-15 11:28:36 +1000 |
| commit | 353b3a85136f2a0cf3e872acf8ad6c1dec0b7a8e (patch) | |
| tree | 2fd80bac0e3c78d3170fb15644b807ab62678f99 /tools/perf/scripts/python/task-analyzer.py | |
| parent | 7064af16d2b418d61571dba9bb0116a547ade124 (diff) | |
crypto: keembay - use crypto_memneq() to compare GCM AEAD tags
Use crypto_memneq() for constant-time comparison.
The GCM path in keembay-ocs-aes-core.c verifes the received
authentication tag with memcmp(), which returns early on the first
mismatched byte. This leaks valid-prefix length and allows for valid
tag forgery which violates the INT-CTXT guarantee of AEAD.
Assisted-by: gregkh_clanker_t1000
Signed-off-by: David C.C.M. Gall <david.ccm.gall@googlemail.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to 'tools/perf/scripts/python/task-analyzer.py')
0 files changed, 0 insertions, 0 deletions