Page MenuHomeFreeBSD

Truncate HMAC output only if requested by the client
ClosedPublic

Authored by bsz_semihalf.com on May 5 2016, 10:17 AM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Nov 6, 6:50 PM
Unknown Object (File)
Mon, Nov 3, 1:55 AM
Unknown Object (File)
Sun, Nov 2, 5:57 AM
Unknown Object (File)
Sun, Oct 26, 9:56 AM
Unknown Object (File)
Sun, Oct 26, 7:36 AM
Unknown Object (File)
Tue, Oct 21, 11:56 PM
Unknown Object (File)
Mon, Oct 20, 10:05 PM
Unknown Object (File)
Mon, Oct 20, 10:05 PM
Subscribers

Details

Summary

The output of HMAC was previously truncated to 12 bytes. This was only
correct in case of one particular crypto client - the new version of IPSEC.
Fix by taking into account the cri_mlen field in cryptoini session request
filled in by the client.

Submitted by: Michal Stanek <mst@semihalf.com
Obtained from: Semihalf
Sponsored by: Stormshield
Differential revision:
Reviewed by:

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

bsz_semihalf.com retitled this revision from to Truncate HMAC output only if requested by the client.
bsz_semihalf.com updated this object.
bsz_semihalf.com edited the test plan for this revision. (Show Details)
bsz_semihalf.com added reviewers: ian, ARM.
bsz_semihalf.com set the repository for this revision to rS FreeBSD src repository - subversion.
This revision was automatically updated to reflect the committed changes.