diff options
| author | Eric Biggers <ebiggers@google.com> | 2019-01-31 23:51:36 -0800 |
|---|---|---|
| committer | Herbert Xu <herbert@gondor.apana.org.au> | 2019-02-08 15:30:08 +0800 |
| commit | 0f533e67d26f228ea5dfdacc8a4bdeb487af5208 (patch) | |
| tree | 2124e65bceaf4d859803284f4e98f99beceee967 /crypto/morus1280.c | |
| parent | 42e95d1f10dcf8b18b1d7f52f7068985b3dc5b79 (diff) | |
crypto: aegis - fix handling chunked inputs
The generic AEGIS implementations all fail the improved AEAD tests
because they produce the wrong result with some data layouts. The issue
is that they assume that if the skcipher_walk API gives 'nbytes' not
aligned to the walksize (a.k.a. walk.stride), then it is the end of the
data. In fact, this can happen before the end. Fix them.
Fixes: f606a88e5823 ("crypto: aegis - Add generic AEGIS AEAD implementations")
Cc: <stable@vger.kernel.org> # v4.18+
Cc: Ondrej Mosnacek <omosnace@redhat.com>
Signed-off-by: Eric Biggers <ebiggers@google.com>
Reviewed-by: Ondrej Mosnacek <omosnace@redhat.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to 'crypto/morus1280.c')
0 files changed, 0 insertions, 0 deletions