HomeFreeBSD

geliboot: Use the correct IV length for AES-XTS.

Description

geliboot: Use the correct IV length for AES-XTS.

  • Use AES_XTS_IV_LEN instead of the key length as the IV length.
  • Use G_ELI_IVKEYLEN as the size of the zeroed iv[] array in g_eli_crypto_cipher() to match geli_io().

PR: 261172
Reported by: Malcolm Matalka <mmatalka@gmail.com>, mikael
Reviewed by: markj
Sponsored by: FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D33884

(cherry picked from commit c7721958ffa1aa81064b74b884e81efbe11d7fe4)

Details

Provenance
jhbAuthored on Jan 14 2022, 1:19 AM
impCommitted on Jan 24 2023, 9:49 PM
Reviewer
markj
Differential Revision
D33884: geliboot: Use the correct IV length for AES-XTS.
Parents
rG622ab2c48340: mips: remove saf1761
Branches
Unknown
Tags
Unknown