HomeFreeBSD

geliboot: Use the correct IV length for AES-XTS.

Description

geliboot: Use the correct IV length for AES-XTS.

  • Use AES_XTS_IV_LEN instead of the key length as the IV length.
  • Use G_ELI_IVKEYLEN as the size of the zeroed iv[] array in g_eli_crypto_cipher() to match geli_io().

PR: 261172
Reported by: Malcolm Matalka <mmatalka@gmail.com>, mikael
Reviewed by: markj
Sponsored by: FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D33884

Details

Provenance
jhbAuthored on Jan 14 2022, 1:19 AM
Reviewer
markj
Differential Revision
D33884: geliboot: Use the correct IV length for AES-XTS.
Parents
rGbe887b3e6cde: Move struct freebsd4_ucontext to sys/i386/include/ucontext.h.
Branches
Unknown
Tags
Unknown