linux/drivers/crypto/nx
David Gstir cb8affb55c crypto: nx - Fix timing leak in GCM and CCM decryption
Using non-constant time memcmp() makes the verification of the authentication
tag in the decrypt path vulnerable to timing attacks. Fix this by using
crypto_memneq() instead.

Cc: stable@vger.kernel.org
Signed-off-by: David Gstir <david@sigma-star.at>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
2015-11-16 21:39:23 +08:00
..
Kconfig crypto: nx - merge nx-compress and nx-compress-crypto 2015-07-23 18:14:31 +08:00
Makefile crypto: nx - make platform drivers directly register with crypto 2015-07-23 18:14:33 +08:00
nx_csbcpb.h
nx_debugfs.c
nx-842-powernv.c crypto: 842 - Add CRC and validation support 2015-10-14 22:23:17 +08:00
nx-842-pseries.c crypto: 842 - Add CRC and validation support 2015-10-14 22:23:17 +08:00
nx-842.c crypto: nx - make platform drivers directly register with crypto 2015-07-23 18:14:33 +08:00
nx-842.h crypto: nx - make platform drivers directly register with crypto 2015-07-23 18:14:33 +08:00
nx-aes-cbc.c
nx-aes-ccm.c crypto: nx - Fix timing leak in GCM and CCM decryption 2015-11-16 21:39:23 +08:00
nx-aes-ctr.c crypto: nx - Removing CTR mode from NX driver 2015-08-10 23:22:22 +08:00
nx-aes-ecb.c
nx-aes-gcm.c crypto: nx - Fix timing leak in GCM and CCM decryption 2015-11-16 21:39:23 +08:00
nx-aes-xcbc.c
nx-sha256.c crypto: nx - respect sg limit bounds when building sg lists for SHA 2015-08-11 22:02:57 +08:00
nx-sha512.c crypto: nx - respect sg limit bounds when building sg lists for SHA 2015-08-11 22:02:57 +08:00
nx.c crypto: nx - Removing CTR mode from NX driver 2015-08-10 23:22:22 +08:00
nx.h crypto: nx - Add forward declaration for struct crypto_aead 2015-08-17 19:49:13 +08:00