Page MenuHomeFreeBSD

GMAC: Reset initial hash value and counter in AES_GMAC_Reinit().
ClosedPublic

Authored by jhb on Dec 7 2021, 12:35 AM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, May 16, 2:25 AM
Unknown Object (File)
Thu, May 2, 7:25 PM
Unknown Object (File)
Thu, May 2, 7:25 PM
Unknown Object (File)
Thu, May 2, 7:25 PM
Unknown Object (File)
Sat, Apr 27, 7:12 AM
Unknown Object (File)
Apr 15 2024, 11:20 AM
Unknown Object (File)
Apr 4 2024, 5:28 AM
Unknown Object (File)
Jan 17 2024, 7:31 AM
Subscribers

Details

Summary

Previously, these values were only cleared in AES_GMAC_Init(), so a
second set of operations could reuse the final hash as the initial
hash. Currently this bug does not trigger in cryptosoft as existing
GMAC and GCM operations always use an on-stack auth context
initialized from a template context.

Sponsored by: The FreeBSD Foundation

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
No Lint Coverage
Unit
No Test Coverage
Build Status
Buildable 43206
Build 40094: arc lint + arc unit