diff options
| author | Herbert Xu <herbert@gondor.apana.org.au> | 2016-09-07 13:42:08 +0300 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2016-09-30 11:18:34 +0300 |
| commit | 2426cdb3f4a33704f1a8f9ee167f82ef5be516ba (patch) | |
| tree | 7a318092ca3d039669b083801bba4e986d32e875 /Makefile | |
| parent | 1c95a8a481efa5716b847b75f9c8b26f65844362 (diff) | |
| download | linux-2426cdb3f4a33704f1a8f9ee167f82ef5be516ba.tar.xz | |
crypto: echainiv - Replace chaining with multiplication
commit 53a5d5ddccf849dbc27a8c1bba0b43c3a45fb792 upstream.
The current implementation uses a global per-cpu array to store
data which are used to derive the next IV. This is insecure as
the attacker may change the stored data.
This patch removes all traces of chaining and replaces it with
multiplication of the salt and the sequence number.
Fixes: a10f554fa7e0 ("crypto: echainiv - Add encrypted chain IV...")
Reported-by: Mathias Krause <minipli@googlemail.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'Makefile')
0 files changed, 0 insertions, 0 deletions