Page MenuHomeFreeBSD

aesni: Avoid modifying session keys in hmac_update()
ClosedPublic

Authored by markj on Apr 27 2021, 12:19 AM.
Tags
None
Referenced Files
Unknown Object (File)
Fri, Apr 25, 4:30 PM
Unknown Object (File)
Sat, Apr 19, 5:00 AM
Unknown Object (File)
Sat, Apr 19, 3:59 AM
Unknown Object (File)
Fri, Apr 18, 11:13 PM
Unknown Object (File)
Fri, Apr 18, 10:39 PM
Unknown Object (File)
Mar 29 2025, 7:44 PM
Unknown Object (File)
Mar 15 2025, 4:03 AM
Unknown Object (File)
Mar 12 2025, 3:05 AM
Subscribers
None

Details

Summary

Otherwise aesni_process() is not thread-safe for AES+SHA-HMAC
transforms, since hmac_update() updates the caller-supplied key directly
to create the derived key. Use a buffer on the stack to store a copy of
the key used for computing inner and outer digests.

Note that this applies to stable/12 only.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

markj created this revision.
This revision is now accepted and ready to land.Apr 27 2021, 2:09 PM