Page MenuHomeFreeBSD

cryptodev: Permit CIOCCRYPT for AEAD ciphers.
ClosedPublic

Authored by jhb on Sep 24 2021, 6:04 PM.
Tags
None
Referenced Files
Unknown Object (File)
Mon, Oct 21, 2:53 PM
Unknown Object (File)
Oct 12 2024, 11:05 AM
Unknown Object (File)
Oct 5 2024, 3:41 AM
Unknown Object (File)
Oct 4 2024, 8:50 AM
Unknown Object (File)
Oct 3 2024, 7:49 AM
Unknown Object (File)
Sep 27 2024, 5:33 PM
Unknown Object (File)
Sep 23 2024, 3:00 PM
Unknown Object (File)
Sep 17 2024, 9:08 PM
Subscribers

Details

Summary

A request without AAD for an AEAD cipher can be submitted via
CIOCCRYPT rather than CIOCCRYPTAEAD.

Sponsored by: The FreeBSD Foundation

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
No Lint Coverage
Unit
No Test Coverage
Build Status
Buildable 41906
Build 38794: arc lint + arc unit

Event Timeline

This was triggered by cryptotest.py since it uses CIOCCRYPT for requests without AAD and some of the AES-CCM tests use empty AAD.

crp_sanity() asserts that for AEAD requests the IV must be in a separate buffer, i.e., CRYPTO_F_IV_SEPARATE is set. cryptodev_aead() ensures this, but cryptodev_op() does not.

Mmm, true. I will add a test that rejects AEAD requests without a separate IV.

  • Reject AEAD requests without an explicit IV.
This revision is now accepted and ready to land.Oct 1 2021, 9:41 PM
This revision was automatically updated to reflect the committed changes.