| commit | cb8affb55c7e64816f3effcd9b2fc3268c016fac | [log] [tgz] |
|---|---|---|
| author | David Gstir <david@sigma-star.at> | Sun Nov 15 17:14:41 2015 +0100 |
| committer | Herbert Xu <herbert@gondor.apana.org.au> | Mon Nov 16 21:39:23 2015 +0800 |
| tree | a4db924f12ad7421f71ca0ca10a374b4eb814267 | |
| parent | 8005c49d9aea74d382f474ce11afbbc7d7130bec [diff] |
crypto: nx - Fix timing leak in GCM and CCM decryption Using non-constant time memcmp() makes the verification of the authentication tag in the decrypt path vulnerable to timing attacks. Fix this by using crypto_memneq() instead. Cc: stable@vger.kernel.org Signed-off-by: David Gstir <david@sigma-star.at> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>