Herbert Xu 2426cdb3f4 crypto: echainiv - Replace chaining with multiplication ...

commit 53a5d5ddccf849dbc27a8c1bba0b43c3a45fb792 upstream.

The current implementation uses a global per-cpu array to store
data which are used to derive the next IV.  This is insecure as
the attacker may change the stored data.

This patch removes all traces of chaining and replaces it with
multiplication of the salt and the sequence number.

Fixes: a10f554fa7e0 ("crypto: echainiv - Add encrypted chain IV...")
Reported-by: Mathias Krause <minipli@googlemail.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2016-09-30 10:18:34 +02:00

..

asymmetric_keys

crypto: public_key: select CRYPTO_AKCIPHER

2016-06-24 10:18:19 -07:00

async_tx

async_tx: use GFP_NOWAIT rather than GFP_IO

2016-01-07 11:06:18 +05:30

.gitignore

crypto: rsa - add .gitignore for crypto/*.-asn1.[ch] files

2015-06-25 23:29:24 +08:00

842.c

crypto: 842 - change 842 alg to use software

2015-05-11 15:06:43 +08:00

ablk_helper.c

crypto: cryptd - process CRYPTO_ALG_INTERNAL

2015-03-31 21:21:04 +08:00

ablkcipher.c

crypto: skcipher - Copy iv from desc even for 0-len walks

2015-12-09 20:16:22 +08:00

aead.c

crypto: aead - Remove CRYPTO_ALG_AEAD_NEW flag

2015-08-17 16:53:53 +08:00

aes_generic.c

crypto: add missing crypto module aliases

2015-01-13 22:29:11 +11:00

af_alg.c

crypto: af_alg - Forbid bind(2) when nokey child sockets are present

2016-02-17 12:31:04 -08:00

ahash.c

crypto: hash - Fix page length clamping in hash walk

2016-05-18 17:06:45 -07:00

akcipher.c

crypto: akcipher - Don't #include crypto/public_key.h as the contents aren't used

2015-10-20 22:14:01 +08:00

algapi.c

crypto: api - Only abort operations on fatal signal

2015-10-20 21:59:25 +08:00

algboss.c

crypto: algboss - Remove reference to nivaead

2015-08-17 16:53:41 +08:00

algif_aead.c

net: rename SOCK_ASYNC_NOSPACE and SOCK_ASYNC_WAITDATA

2015-12-01 15:45:05 -05:00

algif_hash.c

crypto: algif_hash - wait for crypto_ahash_init() to complete

2016-02-17 12:31:04 -08:00

algif_rng.c

crypto: algif_rng - Remove obsolete const-removal cast

2015-04-22 09:30:21 +08:00

algif_skcipher.c

crypto: algif_skcipher - Do not set MAY_BACKLOG on the async path

2016-02-17 12:31:05 -08:00

ansi_cprng.c

crypto: ansi_cprng - Convert to new rng interface

2015-04-22 09:30:18 +08:00

anubis.c

crypto: prefix module autoloading with "crypto-"

2014-11-24 22:43:57 +08:00

api.c

crypto: api - Only abort operations on fatal signal

2015-10-20 21:59:25 +08:00

arc4.c

crypto: prefix module autoloading with "crypto-"

2014-11-24 22:43:57 +08:00

authenc.c

crypto: aead - Remove CRYPTO_ALG_AEAD_NEW flag

2015-08-17 16:53:53 +08:00

authencesn.c

crypto: aead - Remove CRYPTO_ALG_AEAD_NEW flag

2015-08-17 16:53:53 +08:00

blkcipher.c

crypto: skcipher - Fix blkcipher walk OOM crash

2016-09-30 10:18:34 +02:00

blowfish_common.c

crypto: blowfish - split generic and common c code

2011-09-22 21:25:25 +10:00

blowfish_generic.c

crypto: add missing crypto module aliases

2015-01-13 22:29:11 +11:00

camellia_generic.c

crypto: add missing crypto module aliases

2015-01-13 22:29:11 +11:00

cast5_generic.c

crypto: add missing crypto module aliases

2015-01-13 22:29:11 +11:00

cast6_generic.c

crypto: add missing crypto module aliases

2015-01-13 22:29:11 +11:00

cast_common.c

crypto: make tables used from assembler __visible

2013-08-14 20:42:03 +10:00

cbc.c

crypto: include crypto- module prefix in template

2014-11-26 20:06:30 +08:00

ccm.c

crypto: replace scatterwalk_sg_chain with sg_chain

2015-08-17 08:12:54 -06:00

chacha20_generic.c

crypto: chacha20 - Export common ChaCha20 helpers

2015-07-17 21:20:21 +08:00

chacha20poly1305.c

crypto: aead - Remove CRYPTO_ALG_AEAD_NEW flag

2015-08-17 16:53:53 +08:00

chainiv.c

crypto: chainiv - Offer normal cipher functionality without RNG

2015-06-22 15:49:28 +08:00

cipher.c

crypto: cipher - Fix checkpatch errors

2010-02-16 20:31:37 +08:00

cmac.c

crypto: include crypto- module prefix in template

2014-11-26 20:06:30 +08:00

compress.c

crypto: compress - Fix checkpatch errors

2010-02-16 20:31:04 +08:00

crc32.c

crypto: prefix module autoloading with "crypto-"

2014-11-24 22:43:57 +08:00

crc32c_generic.c

crypto: crc32c - Fix crc32c soft dependency

2016-02-17 12:31:04 -08:00

crct10dif_common.c

crypto: crct10dif - Add fallback for broken initrds

2013-09-12 15:31:34 +10:00

crct10dif_generic.c

crypto: add missing crypto module aliases

2015-01-13 22:29:11 +11:00

cryptd.c

crypto: cryptd - initialize child shash_desc on import

2016-09-24 10:07:41 +02:00

crypto_null.c

crypto: null - Add default null skcipher

2015-05-22 11:25:55 +08:00

crypto_user.c

crypto: user - re-add size check for CRYPTO_MSG_GETALG

2016-07-11 09:31:12 -07:00

crypto_wq.c

crypto: crypto_wq - Fix late crypto work queue initialization

2014-03-21 21:54:28 +08:00

ctr.c

crypto: include crypto- module prefix in template

2014-11-26 20:06:30 +08:00

cts.c

crypto: cts - Weed out non-CBC algorithms

2015-01-20 14:44:15 +11:00

deflate.c

crypto: prefix module autoloading with "crypto-"

2014-11-24 22:43:57 +08:00

des_generic.c

crypto: add missing crypto module aliases

2015-01-13 22:29:11 +11:00

drbg.c

crypto: drbg - report backend_cra_name when allocation fails

2015-06-11 21:55:28 +08:00

ecb.c

crypto: include crypto- module prefix in template

2014-11-26 20:06:30 +08:00

echainiv.c

crypto: echainiv - Replace chaining with multiplication

2016-09-30 10:18:34 +02:00

eseqiv.c

crypto: eseqiv - Offer normal cipher functionality without RNG

2015-06-22 15:49:28 +08:00

fcrypt.c

crypto: prefix module autoloading with "crypto-"

2014-11-24 22:43:57 +08:00

fips.c

crypto: fips - Move fips_enabled sysctl into fips.c

2015-04-23 14:18:09 +08:00

gcm.c

crypto: gcm - Filter out async ghash if necessary

2016-08-16 09:30:50 +02:00

gf128mul.c

crypto: gf128mul - fix call to memset()

2011-07-08 17:21:21 +08:00

ghash-generic.c

crypto: add missing crypto module aliases

2015-01-13 22:29:11 +11:00

hash_info.c

crypto: provide single place for hash algo information

2013-10-25 17:14:03 -04:00

hmac.c

crypto: include crypto- module prefix in template

2014-11-26 20:06:30 +08:00

internal.h

crypto: api - Remove linux/fips.h from internal.h

2015-04-23 14:18:10 +08:00

jitterentropy-kcapi.c

crypto: jitterentropy - remove unnecessary information from a comment

2015-10-14 22:23:16 +08:00

jitterentropy.c

crypto: jitterentropy - Delete unnecessary checks before the function call "kzfree"

2015-06-25 23:18:33 +08:00

Kconfig

crypto: keywrap - enable compilation

2015-10-15 21:05:06 +08:00

keywrap.c

crypto: keywrap - memzero the correct memory

2016-04-12 09:08:45 -07:00

khazad.c

crypto: prefix module autoloading with "crypto-"

2014-11-24 22:43:57 +08:00

lrw.c

crypto: include crypto- module prefix in template

2014-11-26 20:06:30 +08:00

lz4.c

crypto: prefix module autoloading with "crypto-"

2014-11-24 22:43:57 +08:00

lz4hc.c

crypto: prefix module autoloading with "crypto-"

2014-11-24 22:43:57 +08:00

lzo.c

crypto: prefix module autoloading with "crypto-"

2014-11-24 22:43:57 +08:00

Makefile

crypto: keywrap - enable compilation

2015-10-15 21:05:06 +08:00

mcryptd.c

crypto: mcryptd - process CRYPTO_ALG_INTERNAL

2015-03-31 21:21:13 +08:00

md4.c

crypto: prefix module autoloading with "crypto-"

2014-11-24 22:43:57 +08:00

md5.c

crypto: md5 - use md5 IV MD5_HX instead of their raw value

2015-05-18 12:20:18 +08:00

memneq.c

crypto: memneq - fix for archs without efficient unaligned access

2013-12-09 20:09:12 +08:00

michael_mic.c

crypto: prefix module autoloading with "crypto-"

2014-11-24 22:43:57 +08:00

pcbc.c

crypto: include crypto- module prefix in template

2014-11-26 20:06:30 +08:00

pcompress.c

crypto: pcomp - Use crypto_alg_extsize helper

2015-04-21 10:19:55 +08:00

pcrypt.c

crypto: aead - Remove CRYPTO_ALG_AEAD_NEW flag

2015-08-17 16:53:53 +08:00

poly1305_generic.c

crypto: poly1305 - Export common Poly1305 helpers

2015-07-17 21:20:26 +08:00

proc.c

crypto: fips - Move fips_enabled sysctl into fips.c

2015-04-23 14:18:09 +08:00

ripemd.h

…

rmd128.c

crypto: prefix module autoloading with "crypto-"

2014-11-24 22:43:57 +08:00

rmd160.c

crypto: prefix module autoloading with "crypto-"

2014-11-24 22:43:57 +08:00

rmd256.c

crypto: prefix module autoloading with "crypto-"

2014-11-24 22:43:57 +08:00

rmd320.c

crypto: prefix module autoloading with "crypto-"

2014-11-24 22:43:57 +08:00

rng.c

crypto: rng - Do not free default RNG when it becomes unused

2015-06-22 15:49:18 +08:00

rsa_helper.c

crypto: akcipher - Changes to asymmetric key API

2015-10-14 22:23:16 +08:00

rsa.c

crypto: akcipher - Changes to asymmetric key API

2015-10-14 22:23:16 +08:00

rsaprivkey.asn1

crypto: akcipher - Changes to asymmetric key API

2015-10-14 22:23:16 +08:00

rsapubkey.asn1

crypto: akcipher - Changes to asymmetric key API

2015-10-14 22:23:16 +08:00

salsa20_generic.c

crypto: add missing crypto module aliases

2015-01-13 22:29:11 +11:00

scatterwalk.c

crypto: scatterwalk - Fix test in scatterwalk_done

2016-08-16 09:30:50 +02:00

seed.c

crypto: prefix module autoloading with "crypto-"

2014-11-24 22:43:57 +08:00

seqiv.c

crypto: seqiv - Use generic geniv init/exit helpers

2015-08-17 16:53:46 +08:00

serpent_generic.c

crypto: add missing crypto module aliases

2015-01-13 22:29:11 +11:00

sha1_generic.c

crypto: sha1-generic - move to generic glue implementation

2015-04-10 21:39:40 +08:00

sha256_generic.c

crypto: sha256-generic - move to generic glue implementation

2015-04-10 21:39:41 +08:00

sha512_generic.c

crypto: sha512-generic - move to generic glue implementation

2015-04-10 21:39:41 +08:00

shash.c

crypto: shash - Fix has_key setting

2016-02-17 12:31:04 -08:00

skcipher.c

crypto: skcipher - Add crypto_skcipher_has_setkey

2016-02-17 12:31:03 -08:00

tcrypt.c

crypto: tcrypt - avoid mapping from module image addresses

2015-09-21 22:00:36 +08:00

tcrypt.h

crypto: tcrypt - Add ChaCha20/Poly1305 speed tests

2015-07-17 21:20:20 +08:00

tea.c

crypto: add missing crypto module aliases

2015-01-13 22:29:11 +11:00

testmgr.c

crypto: testmgr - Use kmalloc memory for RSA input

2016-05-18 17:06:45 -07:00

testmgr.h

crypto: keywrap - add testmgr support

2015-10-15 21:05:08 +08:00

tgr192.c

crypto: add missing crypto module aliases

2015-01-13 22:29:11 +11:00

twofish_common.c

crypto: twofish-x86_64-3way - add lrw support

2011-11-09 11:53:32 +08:00

twofish_generic.c

crypto: add missing crypto module aliases

2015-01-13 22:29:11 +11:00

vmac.c

crypto: include crypto- module prefix in template

2014-11-26 20:06:30 +08:00

wp512.c

crypto: add missing crypto module aliases

2015-01-13 22:29:11 +11:00

xcbc.c

crypto: include crypto- module prefix in template

2014-11-26 20:06:30 +08:00

xor.c

add further __init annotations to crypto/xor.c

2012-10-11 13:42:32 +11:00

xts.c

crypto: include crypto- module prefix in template

2014-11-26 20:06:30 +08:00

zlib.c

crypto: pcomp - Constify (de)compression parameters

2015-05-01 11:16:37 +08:00