diff options
| author | David C.C.M. Gall <david.ccm.gall@googlemail.com> | 2026-08-07 18:22:00 +0200 |
|---|---|---|
| committer | Herbert Xu <herbert@gondor.apana.org.au> | 2026-08-15 11:28:36 +1000 |
| commit | ff2ac77a034e03b64e2ba34f775097427dfa5547 (patch) | |
| tree | 1314fe35e90f0ff18390ba26b052edd25263a6ad /tools/perf/scripts/python | |
| parent | 353b3a85136f2a0cf3e872acf8ad6c1dec0b7a8e (diff) | |
crypto: keembay - use crypto_memneq() to compare CCM AEAD tags
Use crypto_memneq() for constant-time comparison.
The CCM path in ocs-aes.c verifes the received authentication tag with
memcmp(), which returns early on the first mismatched byte. This leaks
valid-prefix length and allows for valid tag forgery which violates the
INT-CTXT guarantee of AEAD.
Assisted-by: gregkh_clanker_t1000
Signed-off-by: David C.C.M. Gall <david.ccm.gall@googlemail.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions