Page MenuHomeFreeBSD

GMAC: Reset initial hash value and counter in AES_GMAC_Reinit().
ClosedPublic

Authored by jhb on Dec 7 2021, 12:35 AM.
Tags
None
Referenced Files
Unknown Object (File)
Sat, Oct 26, 5:12 AM
Unknown Object (File)
Oct 14 2024, 12:36 PM
Unknown Object (File)
Oct 1 2024, 4:18 AM
Unknown Object (File)
Sep 27 2024, 9:25 PM
Unknown Object (File)
Sep 27 2024, 7:30 PM
Unknown Object (File)
Sep 24 2024, 3:15 AM
Unknown Object (File)
Sep 24 2024, 3:15 AM
Unknown Object (File)
Sep 17 2024, 2:52 AM
Subscribers

Details

Summary

Previously, these values were only cleared in AES_GMAC_Init(), so a
second set of operations could reuse the final hash as the initial
hash. Currently this bug does not trigger in cryptosoft as existing
GMAC and GCM operations always use an on-stack auth context
initialized from a template context.

Sponsored by: The FreeBSD Foundation

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable