Page MenuHomeFreeBSD

crypto: Support multiple nonce lengths for AES-CCM.
ClosedPublic

Authored by jhb on Sep 24 2021, 6:04 PM.
Tags
None
Referenced Files
F133339518: D32111.id95645.diff
Sat, Oct 25, 1:13 AM
Unknown Object (File)
Thu, Oct 23, 2:29 AM
Unknown Object (File)
Fri, Oct 17, 9:32 AM
Unknown Object (File)
Sun, Oct 12, 5:32 PM
Unknown Object (File)
Sun, Oct 12, 1:23 PM
Unknown Object (File)
Sun, Oct 12, 8:42 AM
Unknown Object (File)
Sun, Oct 12, 6:12 AM
Unknown Object (File)
Sun, Oct 12, 1:33 AM
Subscribers

Details

Summary

Permit nonces of lengths 7 through 13 in the OCF framework and the
cryptosoft driver. A helper function (ccm_max_payload_length) can be
used in OCF drivers to reject CCM requests which are too large for the
specified nonce length.

Sponsored by: Chelsio Communications, The FreeBSD Foundation

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
No Lint Coverage
Unit
No Test Coverage
Build Status
Buildable 41712
Build 38601: arc lint + arc unit

Event Timeline

The cryptosoft changes were tested both by cryptocheck and the updated crypotest.py at the end of the series that tested all the AES-CCM KAT vectors. Note that the KAT vectors also required later fixes for truncated tags, however, cryptocheck was able to verify variable nonce lengths with a 16 byte tag.

This revision is now accepted and ready to land.Sep 24 2021, 7:33 PM