Page MenuHomeFreeBSD

Truncate HMAC output only if requested by the client
ClosedPublic

Authored by bsz_semihalf.com on May 5 2016, 10:17 AM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Aug 14, 6:35 AM
Unknown Object (File)
Wed, Aug 12, 12:47 PM
Unknown Object (File)
Tue, Aug 11, 8:17 PM
Unknown Object (File)
Mon, Aug 10, 5:47 PM
Unknown Object (File)
Mon, Aug 10, 1:03 AM
Unknown Object (File)
Tue, Aug 4, 5:24 AM
Unknown Object (File)
Tue, Aug 4, 1:56 AM
Unknown Object (File)
Mon, Aug 3, 1:40 AM
Subscribers

Details

Summary

The output of HMAC was previously truncated to 12 bytes. This was only
correct in case of one particular crypto client - the new version of IPSEC.
Fix by taking into account the cri_mlen field in cryptoini session request
filled in by the client.

Submitted by: Michal Stanek <mst@semihalf.com
Obtained from: Semihalf
Sponsored by: Stormshield
Differential revision:
Reviewed by:

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

bsz_semihalf.com retitled this revision from to Truncate HMAC output only if requested by the client.
bsz_semihalf.com updated this object.
bsz_semihalf.com edited the test plan for this revision. (Show Details)
bsz_semihalf.com added reviewers: ian, ARM.
bsz_semihalf.com set the repository for this revision to rS FreeBSD src repository - subversion.
This revision was automatically updated to reflect the committed changes.