user/sven/linux.git/crypto/echainiv.c, branch v4.14.331

crypto: echainiv - Replace chaining with multiplication

2016-09-13T10:44:57Z

The current implementation uses a global per-cpu array to store data which are used to derive the next IV. This is insecure as the attacker may change the stored data. This patch removes all traces of chaining and replaces it with multiplication of the salt and the sequence number. Fixes: a10f554fa7e0 ("crypto: echainiv - Add encrypted chain IV...") Cc: stable@vger.kernel.org Reported-by: Mathias Krause Signed-off-by: Herbert Xu

crypto: echainiv - Use skcipher

2016-07-18T09:35:42Z

This patch replaces use of the obsolete blkcipher with skcipher. Signed-off-by: Herbert Xu

crypto: echainiv - Use generic geniv init/exit helpers

2015-08-17T08:53:46Z

This patch replaces the echainiv init/exit handlers with the generic geniv helpers. Signed-off-by: Herbert Xu

crypto: echainiv - Remove AEAD compatibility code

2015-08-17T08:53:43Z

Now that we no longer have any legacy AEAD implementations the compatibility code path can no longer be triggered. This patch removes it. Signed-off-by: Herbert Xu

crypto: echainiv - Fix encryption convention

2015-07-14T06:56:46Z

This patch fixes a bug where we were incorrectly including the IV in the AD during encryption. The IV must remain in the plain text for it to be encrypted. During decryption there is no need to copy the IV to dst because it's now part of the AD. This patch removes an unncessary check on authsize which would be performed by the underlying decrypt call. Finally this patch makes use of the type-safe init/exit functions. Signed-off-by: Herbert Xu

crypto: echainiv - Only hold RNG during initialisation

2015-06-22T07:49:29Z

This patch changes the RNG allocation so that we only hold a reference to the RNG during initialisation. Signed-off-by: Herbert Xu

crypto: echainiv - Move IV seeding into init function

2015-06-04T07:05:00Z

We currently do the IV seeding on the first givencrypt call in order to conserve entropy. However, this does not work with DRBG which cannot be called from interrupt context. In fact, with DRBG we don't need to conserve entropy anyway. So this patch moves the seeding into the init function. Signed-off-by: Herbert Xu

crypto: echainiv - Fix IV size in context size calculation

2015-05-28T03:23:18Z

This patch fixes a bug in the context size calculation where we were still referring to the old cra_aead. Signed-off-by: Herbert Xu

crypto: echainiv - Use common IV generation code

2015-05-28T03:23:18Z

This patch makes use of the new common IV generation code. Signed-off-by: Herbert Xu

crypto: echainiv - Copy AD along with plain text

2015-05-28T03:23:18Z

As the AD does not necessarily exist in the destination buffer it must be copied along with the plain text. Signed-off-by: Herbert Xu