Page MenuHomeFreeBSD

aesni: Avoid modifying session keys in hmac_update()
ClosedPublic

Authored by markj on Apr 27 2021, 12:19 AM.
Tags
None
Referenced Files
Unknown Object (File)
Sat, Mar 29, 7:44 PM
Unknown Object (File)
Sat, Mar 15, 4:03 AM
Unknown Object (File)
Wed, Mar 12, 3:05 AM
Unknown Object (File)
Feb 11 2025, 3:44 AM
Unknown Object (File)
Feb 7 2025, 9:29 AM
Unknown Object (File)
Feb 4 2025, 5:57 PM
Unknown Object (File)
Feb 4 2025, 5:54 PM
Unknown Object (File)
Jan 28 2025, 3:30 PM
Subscribers
None

Details

Summary

Otherwise aesni_process() is not thread-safe for AES+SHA-HMAC
transforms, since hmac_update() updates the caller-supplied key directly
to create the derived key. Use a buffer on the stack to store a copy of
the key used for computing inner and outer digests.

Note that this applies to stable/12 only.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

markj created this revision.
This revision is now accepted and ready to land.Apr 27 2021, 2:09 PM