]> git.proxmox.com Git - mirror_ubuntu-jammy-kernel.git/commit
crypto: aegis128 - wipe plaintext and tag if decryption fails
authorArd Biesheuvel <ardb@kernel.org>
Tue, 17 Nov 2020 13:32:11 +0000 (14:32 +0100)
committerHerbert Xu <herbert@gondor.apana.org.au>
Fri, 27 Nov 2020 06:13:39 +0000 (17:13 +1100)
commit02685906d3afa4f7c72d86cf99242e3b08078865
treeb7f7dc34b6fb06cd27e8e42f43d809065c7f163c
parent732b764099f651a088fd931d7b8121b6aa84e62e
crypto: aegis128 - wipe plaintext and tag if decryption fails

The AEGIS spec mentions explicitly that the security guarantees hold
only if the resulting plaintext and tag of a failed decryption are
withheld. So ensure that we abide by this.

While at it, drop the unused struct aead_request *req parameter from
crypto_aegis128_process_crypt().

Reviewed-by: Ondrej Mosnacek <omosnacek@gmail.com>
Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto/aegis128-core.c