Page MenuHomeFreeBSD

ktls: Add padding tests for AES-CBC MTE cipher suites.
ClosedPublic

Authored by jhb on Nov 5 2021, 12:00 AM.
Tags
None
Referenced Files
F83955325: D32840.diff
Fri, May 17, 8:56 AM
Unknown Object (File)
Mar 18 2024, 2:11 AM
Unknown Object (File)
Jan 16 2024, 6:40 PM
Unknown Object (File)
Dec 31 2023, 10:35 PM
Unknown Object (File)
Dec 20 2023, 4:59 AM
Unknown Object (File)
Dec 13 2023, 6:21 AM
Unknown Object (File)
Nov 24 2023, 10:23 AM
Unknown Object (File)
Nov 19 2023, 8:19 AM
Subscribers

Details

Summary

For each AES-CBC MTE cipher suite, test sending records with 1 to 16
bytes of payload. This ensures that all of the potential padding
values are covered.

Sponsored by: Netflix

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 42590
Build 39478: arc lint + arc unit

Event Timeline

jhb requested review of this revision.Nov 5 2021, 12:00 AM
markj added inline comments.
tests/sys/kern/ktls_test.c
1104

Does it make sense to test a message of length 0? I'm not sure if empty records are permitted (though ISTR they are used in TLS 1.0).

This revision is now accepted and ready to land.Nov 13 2021, 2:35 AM
jhb marked an inline comment as done.Nov 15 2021, 7:20 PM
jhb added inline comments.
tests/sys/kern/ktls_test.c
1104

I did that in a followup set of tests for TLS 1.0. :)

This revision was automatically updated to reflect the committed changes.
jhb marked an inline comment as done.