Page MenuHomeFreeBSD
Differential D33884

geliboot: Use the correct IV length for AES-XTS.
ClosedPublic
Actions

Authored by jhb on Jan 13 2022, 9:28 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sat, Dec 6, 10:30 PM
Unknown Object (File)
Fri, Nov 28, 10:42 PM
Unknown Object (File)
Tue, Nov 25, 8:50 PM
Unknown Object (File)
Fri, Nov 21, 2:04 AM
Unknown Object (File)
Nov 4 2025, 1:33 AM
Unknown Object (File)
Oct 31 2025, 7:01 AM
Unknown Object (File)
Oct 28 2025, 8:40 PM
Unknown Object (File)
Oct 28 2025, 5:11 AM
View All Files
Subscribers
dab
imp
kevans
mikael

Details

Reviewers
markj
allanjude
manu
Commits
rG673910f3b8c4: geliboot: Use the correct IV length for AES-XTS.
rGc7721958ffa1: geliboot: Use the correct IV length for AES-XTS.
Summary
  • Use AES_XTS_IV_LEN instead of the key length as the IV length.
  • Use G_ELI_IVKEYLEN as the size of the zeroed iv[] array in g_eli_crypto_cipher() to match geli_io().

PR: 261172
Sponsored by: FreeBSD Foundation

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Revision Contents
Changeset List

PathSize
stand/
libsa/
geli/
2 lines
9 lines
2 lines

Diff 101442

View Options

stand/libsa/geli/geliboot.c

Loading...
View Options

stand/libsa/geli/geliboot_crypto.c

Loading...
View Options

stand/libsa/geli/geliboot_internal.h

Loading...