Page MenuHomeFreeBSD

Truncate HMAC output only if requested by the client
ClosedPublic

Authored by bsz_semihalf.com on May 5 2016, 10:17 AM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, May 4, 3:44 PM
Unknown Object (File)
Thu, Apr 30, 11:37 AM
Unknown Object (File)
Thu, Apr 30, 9:31 AM
Unknown Object (File)
Thu, Apr 30, 7:02 AM
Unknown Object (File)
Fri, Apr 24, 2:18 PM
Unknown Object (File)
Thu, Apr 23, 9:05 AM
Unknown Object (File)
Thu, Apr 23, 2:05 AM
Unknown Object (File)
Apr 17 2026, 4:25 AM
Subscribers

Details

Summary

The output of HMAC was previously truncated to 12 bytes. This was only
correct in case of one particular crypto client - the new version of IPSEC.
Fix by taking into account the cri_mlen field in cryptoini session request
filled in by the client.

Submitted by: Michal Stanek <mst@semihalf.com
Obtained from: Semihalf
Sponsored by: Stormshield
Differential revision:
Reviewed by:

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

bsz_semihalf.com retitled this revision from to Truncate HMAC output only if requested by the client.
bsz_semihalf.com updated this object.
bsz_semihalf.com edited the test plan for this revision. (Show Details)
bsz_semihalf.com added reviewers: ian, ARM.
bsz_semihalf.com set the repository for this revision to rS FreeBSD src repository - subversion.
This revision was automatically updated to reflect the committed changes.