Page MenuHomeFreeBSD

Use G_ELI_IVKEYLEN as the size of IV in the user test code.
ClosedPublic

Authored by jhb on Jan 13 2022, 9:28 PM.
Tags
None
Referenced Files
F149945582: D33885.diff
Sat, Mar 28, 7:12 AM
Unknown Object (File)
Tue, Mar 24, 8:49 AM
Unknown Object (File)
Fri, Mar 13, 1:35 PM
Unknown Object (File)
Fri, Mar 13, 1:30 PM
Unknown Object (File)
Tue, Mar 10, 2:20 PM
Unknown Object (File)
Feb 25 2026, 4:15 PM
Unknown Object (File)
Feb 25 2026, 9:08 AM
Unknown Object (File)
Feb 14 2026, 11:24 PM
Subscribers

Details

Summary

IVs are not the size of keys as a general case. Most often they are
the size of a single block.

Sponsored by: The FreeBSD Foundation

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

jhb requested review of this revision.Jan 13 2022, 9:28 PM

Do you need a kassert G_ELI_IVKEYLEN >= keysize?

This revision is now accepted and ready to land.Jan 13 2022, 9:51 PM
In D33885#766236, @imp wrote:

Do you need a kassert G_ELI_IVKEYLEN >= keysize?

No, the entire point is that IV sizes have no relation to key sizes. For the ciphers involved in fact, the key sizes are generally larger than the IVs (e.g. 8 byte IV for AES-XTS vs a 256/512 bit key).