diff options
| author |   Herbert Xu <herbert@gondor.apana.org.au> | 2016-09-07 18:42:08 +0800 |
|---|---|---|
| committer | Herbert Xu <herbert@gondor.apana.org.au> | 2016-09-13 18:44:57 +0800 |
| commit | 53a5d5ddccf849dbc27a8c1bba0b43c3a45fb792 (patch) | |
| tree | 95635f9a1b03ca963f3758a4ffbcf5f4f94cc515 /crypto/blkcipher.c | |
| parent | crypto: cryptd - initialize child shash_desc on import (diff) | |
| download | linux-dev-53a5d5ddccf849dbc27a8c1bba0b43c3a45fb792.tar.xz linux-dev-53a5d5ddccf849dbc27a8c1bba0b43c3a45fb792.zip | |
crypto: echainiv - Replace chaining with multiplication
The current implementation uses a global per-cpu array to store
data which are used to derive the next IV. This is insecure as
the attacker may change the stored data.
This patch removes all traces of chaining and replaces it with
multiplication of the salt and the sequence number.
Fixes: a10f554fa7e0 ("crypto: echainiv - Add encrypted chain IV...")
Cc: stable@vger.kernel.org
Reported-by: Mathias Krause <minipli@googlemail.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to 'crypto/blkcipher.c')
0 files changed, 0 insertions, 0 deletions