Page MenuHomeFreeBSD

cryptodev: Permit CIOCCRYPT for AEAD ciphers.
ClosedPublic

Authored by jhb on Sep 24 2021, 6:04 PM.
Tags
None
Referenced Files
F143895660: D32108.id96377.diff
Sun, Feb 1, 3:49 PM
Unknown Object (File)
Sat, Jan 31, 11:42 AM
Unknown Object (File)
Wed, Jan 28, 2:10 PM
Unknown Object (File)
Sun, Jan 25, 6:36 AM
Unknown Object (File)
Fri, Jan 23, 9:22 AM
Unknown Object (File)
Wed, Jan 14, 9:19 PM
Unknown Object (File)
Dec 22 2025, 2:44 PM
Unknown Object (File)
Dec 5 2025, 1:02 AM
Subscribers

Details

Summary

A request without AAD for an AEAD cipher can be submitted via
CIOCCRYPT rather than CIOCCRYPTAEAD.

Sponsored by: The FreeBSD Foundation

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

This was triggered by cryptotest.py since it uses CIOCCRYPT for requests without AAD and some of the AES-CCM tests use empty AAD.

crp_sanity() asserts that for AEAD requests the IV must be in a separate buffer, i.e., CRYPTO_F_IV_SEPARATE is set. cryptodev_aead() ensures this, but cryptodev_op() does not.

Mmm, true. I will add a test that rejects AEAD requests without a separate IV.

  • Reject AEAD requests without an explicit IV.
This revision is now accepted and ready to land.Oct 1 2021, 9:41 PM
This revision was automatically updated to reflect the committed changes.