Page MenuHomeFreeBSD

geliboot: Use the correct IV length for AES-XTS.
ClosedPublic

Authored by jhb on Jan 13 2022, 9:28 PM.
Tags
None
Referenced Files
F105522021: D33884.id101427.diff
Tue, Dec 17, 5:43 AM
Unknown Object (File)
Mon, Nov 25, 9:12 AM
Unknown Object (File)
Sat, Nov 23, 2:17 AM
Unknown Object (File)
Nov 14 2024, 12:40 AM
Unknown Object (File)
Nov 2 2024, 7:25 AM
Unknown Object (File)
Nov 2 2024, 7:25 AM
Unknown Object (File)
Nov 2 2024, 7:25 AM
Unknown Object (File)
Nov 2 2024, 7:04 AM

Details

Summary
  • Use AES_XTS_IV_LEN instead of the key length as the IV length.
  • Use G_ELI_IVKEYLEN as the size of the zeroed iv[] array in g_eli_crypto_cipher() to match geli_io().

PR: 261172
Sponsored by: FreeBSD Foundation

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable