mirror of
git://nv-tegra.nvidia.com/linux-nv-oot.git
synced 2025-12-22 09:11:26 +03:00
crypto: tegra: Do not use IV for AES ECB
It may happen that the variable req->iv may have stale values or zero sized buffer by default and may end up getting used during encryption/decryption. This in turn may corrupt the results or break the operation. Ensure not use IV for algorithms like AES ECB where IV is not expected. Bug 4883011 Change-Id: I309ad26f99fe54005ff71b270b3b115dc62ac168 Signed-off-by: Akhil R <akhilrajeev@nvidia.com> Reviewed-on: https://git-master.nvidia.com/r/c/linux-nv-oot/+/3330469 Reviewed-by: svcacv <svcacv@nvidia.com> Reviewed-by: Laxman Dewangan <ldewangan@nvidia.com> GVS: buildbot_gerritrpt <buildbot_gerritrpt@nvidia.com>
This commit is contained in:
@@ -326,7 +326,7 @@ static int tegra_aes_do_one_req(struct crypto_engine *engine, void *areq)
|
||||
goto key2_free;
|
||||
}
|
||||
|
||||
rctx->iv = (u32 *)req->iv;
|
||||
rctx->iv = (ctx->alg == SE_ALG_ECB) ? NULL : (u32 *)req->iv;
|
||||
rctx->len = req->cryptlen;
|
||||
|
||||
/* Pad input to AES Block size */
|
||||
|
||||
Reference in New Issue
Block a user