iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
fd2f50397c
linux/crypto
History
Hailey Mothershead 28c8d27484 crypto: aead,cipher - zeroize key buffer after use 
[ Upstream commit 23e4099bdc3c8381992f9eb975c79196d6755210 ]

I.G 9.7.B for FIPS 140-3 specifies that variables temporarily holding
cryptographic information should be zeroized once they are no longer
needed. Accomplish this by using kfree_sensitive for buffers that
previously held the private key.

Signed-off-by: Hailey Mothershead <hailmo@amazon.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-07-11 12:47:05 +02:00
..
asymmetric_keys
KEYS: asymmetric: Add missing dependencies of FIPS_SIGNATURE_SELFTEST
2024-06-12 11:02:58 +02:00
async_tx
treewide: use get_random_bytes() when possible
2022-10-11 17:42:58 -06:00
842.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 157
2019-05-30 11:26:37 -07:00
acompress.c
crypto: api - permit users to specify numa node of acomp hardware
2020-07-09 18:25:23 +10:00
adiantum.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
aead.c
crypto: aead,cipher - zeroize key buffer after use
2024-07-11 12:47:05 +02:00
aegis128-core.c
crypto: aegis128 - Move simd prototypes into aegis.h
2021-03-19 21:59:45 +11:00
aegis128-neon-inner.c
crypto: aegis128/neon - move final tag check to SIMD domain
2020-11-27 17:13:40 +11:00
aegis128-neon.c
crypto: aegis128 - Move simd prototypes into aegis.h
2021-03-19 21:59:45 +11:00
aegis.h
crypto: aegis128 - Move simd prototypes into aegis.h
2021-03-19 21:59:45 +11:00
aes_generic.c
crypto: remove CRYPTO_TFM_RES_BAD_KEY_LEN
2020-01-09 11:30:53 +08:00
aes_ti.c
crypto: aes - create AES library based on the fixed time AES code
2019-07-26 14:55:33 +10:00
af_alg.c
crypto: af_alg - Disallow multiple in-flight AIO requests
2024-01-25 15:27:21 -08:00
ahash.c
crypto: ahash - Add init_tfm/exit_tfm
2020-08-28 16:58:28 +10:00
akcipher.c
crypto: akcipher - default implementation for setting a private key
2022-09-09 16:18:33 +08:00
algapi.c
Revert "crypto: api - Disallow identical driver names"
2024-05-02 16:29:27 +02:00
algboss.c
exit: Rename module_put_and_exit to module_put_and_kthread_exit
2021-12-13 12:04:45 -06:00
algif_aead.c
crypto: algif_aead - Do not set MAY_BACKLOG on the async path
2020-08-21 14:45:27 +10:00
algif_hash.c
af_alg_make_sg(): switch to advancing variant of iov_iter_get_pages()
2022-08-08 22:37:23 -04:00
algif_rng.c
crypto: af_alg - add extra parameters for DRBG interface
2020-09-25 17:48:52 +10:00
algif_skcipher.c
crypto: algif_skcipher - EBUSY on aio should be an error
2020-08-21 14:45:26 +10:00
ansi_cprng.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
anubis.c
crypto: remove CRYPTO_TFM_RES_BAD_KEY_LEN
2020-01-09 11:30:53 +08:00
api.c
crypto: core - move from strlcpy with unused retval to strscpy
2022-08-26 18:50:38 +08:00
arc4.c
crypto: arc4 - mark ecb(arc4) skcipher as obsolete
2020-09-11 14:39:16 +10:00
aria_generic.c
crypto: aria - prepare generic module for optimized implementations
2022-09-24 16:14:44 +08:00
authenc.c
crypto: authenc - Fix sleep in atomic context in decrypt_tail
2022-01-31 11:21:44 +11:00
authencesn.c
crypto: algapi - use common mechanism for inheriting flags
2020-07-16 21:49:08 +10:00
blake2b_generic.c
crypto: blake2b - update file comment
2021-01-03 08:41:39 +11:00
blowfish_common.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
blowfish_generic.c
crypto: blowfish - use unaligned accessors instead of alignmask
2021-02-10 17:55:56 +11:00
camellia_generic.c
crypto: camellia - use unaligned accessors instead of alignmask
2021-02-10 17:55:56 +11:00
cast5_generic.c
crypto: cast5 - use unaligned accessors instead of alignmask
2021-02-10 17:55:56 +11:00
cast6_generic.c
crypto: cast6 - use unaligned accessors instead of alignmask
2021-02-10 17:55:56 +11:00
cast_common.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 44
2019-05-24 17:27:12 +02:00
cbc.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
ccm.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
cfb.c
crypto: cleanup comments
2022-03-03 10:49:20 +12:00
chacha20poly1305.c
crypto: algapi - use common mechanism for inheriting flags
2020-07-16 21:49:08 +10:00
chacha_generic.c
crypto: chacha_generic - remove unnecessary setkey() functions
2019-11-22 18:48:39 +08:00
cipher.c
crypto: aead,cipher - zeroize key buffer after use
2024-07-11 12:47:05 +02:00
cmac.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
compress.c
crypto: compress - remove crt_u.compress (struct compress_tfm)
2019-12-11 16:37:01 +08:00
crc32_generic.c
crypto: crc32-generic - Use SPDX-License-Identifier
2021-04-16 21:24:27 +10:00
crc32c_generic.c
crypto: crc32c_generic - delete and fix duplicated words
2020-08-21 14:45:25 +10:00
crc64_rocksoft_generic.c
crypto: add rocksoft 64b crc guard tag framework
2022-03-07 12:48:35 -07:00
crct10dif_common.c
…
crct10dif_generic.c
crypto: crct10dif_generic - fix duplicated words
2020-08-21 14:45:25 +10:00
cryptd.c
crypto: cryptd - Use request context instead of stack for sub-request
2022-12-31 13:32:33 +01:00
crypto_engine.c
crypto: engine - fix crypto_queue backlog handling
2023-05-17 11:53:40 +02:00
crypto_null.c
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2019-07-08 20:57:08 -07:00
crypto_user_base.c
crypto: algapi - make unregistration functions return void
2019-12-20 14:58:35 +08:00
crypto_user_stat.c
crypto: skcipher - remove the "blkcipher" algorithm type
2019-11-01 13:38:32 +08:00
ctr.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
cts.c
crypto: algapi - use common mechanism for inheriting flags
2020-07-16 21:49:08 +10:00
curve25519-generic.c
crypto: add __init/__exit annotations to init/exit funcs
2022-09-24 16:14:43 +08:00
deflate.c
mm, treewide: rename kzfree() to kfree_sensitive()
2020-08-07 11:33:22 -07:00
des_generic.c
crypto: remove CRYPTO_TFM_RES_WEAK_KEY
2020-01-09 11:30:53 +08:00
dh_helper.c
crypto: dh - split out deserialization code from crypto_dh_decode()
2022-03-03 10:47:50 +12:00
dh.c
crypto: add __init/__exit annotations to init/exit funcs
2022-09-24 16:14:43 +08:00
drbg.c
crypto: drbg - Only fail when jent is unavailable in FIPS mode
2023-05-11 23:03:21 +09:00
ecb.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
ecc_curve_defs.h
Merge branch 'ecc'
2021-03-26 19:55:55 +11:00
ecc.c
crypto: ecc - Export additional helper functions
2021-10-29 21:04:03 +08:00
ecdh_helper.c
crypto: ecdh - move curve_id of ECDH from the key to algorithm name
2021-03-13 00:04:03 +11:00
ecdh.c
crypto: ecdh - explicitly zeroize private_key
2024-07-05 09:31:49 +02:00
ecdsa.c
crypto: ecdsa - Fix module auto-load on add-key
2024-06-16 13:41:37 +02:00
ecdsasignature.asn1
crypto: ecdsa - Add support for ECDSA signature verification
2021-03-26 19:41:58 +11:00
echainiv.c
crypto: geniv - remove unneeded arguments from aead_geniv_alloc()
2020-07-16 21:49:07 +10:00
ecrdsa_defs.h
crypto: ecc - Move ecc.h to include/crypto/internal
2021-10-29 21:04:03 +08:00
ecrdsa_params.asn1
crypto: ecrdsa - add EC-RDSA (GOST 34.10) algorithm
2019-04-18 22:15:02 +08:00
ecrdsa_pub_key.asn1
crypto: ecrdsa - add EC-RDSA (GOST 34.10) algorithm
2019-04-18 22:15:02 +08:00
ecrdsa.c
crypto: ecrdsa - Fix module auto-load on add_key
2024-06-16 13:41:37 +02:00
essiv.c
crypto: essiv - Handle EBUSY correctly
2023-03-10 09:32:56 +01:00
fcrypt.c
crypto: fcrypt - Remove 'do while(0)' loop for single statement macro
2021-04-02 18:28:13 +11:00
fips.c
crypto: fips - make proc files report fips module name and version
2022-07-15 16:43:22 +08:00
gcm.c
mm, treewide: rename kzfree() to kfree_sensitive()
2020-08-07 11:33:22 -07:00
geniv.c
crypto: algapi - use common mechanism for inheriting flags
2020-07-16 21:49:08 +10:00
gf128mul.c
mm, treewide: rename kzfree() to kfree_sensitive()
2020-08-07 11:33:22 -07:00
ghash-generic.c
crypto: remove CRYPTO_TFM_RES_BAD_KEY_LEN
2020-01-09 11:30:53 +08:00
hash_info.c
crypto: rename sm3-256 to sm3 in hash_algo_name
2020-02-18 07:35:49 -05:00
hctr2.c
crypto: hctr2 - Add HCTR2 support
2022-06-10 16:40:17 +08:00
hmac.c
crypto: hmac - disallow keys < 112 bits in FIPS mode
2022-02-11 20:22:01 +11:00
internal.h
crypto: api - Fix built-in testing dependency failures
2021-09-24 16:03:05 +08:00
jitterentropy-kcapi.c
crypto: jitter - permanent and intermittent health errors
2023-05-24 17:32:38 +01:00
jitterentropy.c
crypto: jitter - correct health test during initialization
2023-07-19 16:21:42 +02:00
jitterentropy.h
crypto: jitter - permanent and intermittent health errors
2023-05-24 17:32:38 +01:00
Kconfig
crypto: jitter - fix CRYPTO_JITTERENTROPY help text
2024-03-26 18:20:50 -04:00
kdf_sp800108.c
crypto: kdf - add SP800-108 counter key derivation function
2021-11-26 16:25:17 +11:00
keywrap.c
crypto: keywrap - Remove else after break statement
2021-04-02 18:28:13 +11:00
khazad.c
crypto: khazad,wp512 - remove leading spaces before tabs
2021-05-28 15:11:44 +08:00
kpp.c
crypto: add crypto_has_kpp()
2022-08-02 17:14:47 -06:00
lrw.c
crypto: lrw,xts - Replace strlcpy with strscpy
2023-09-23 11:11:01 +02:00
lz4.c
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2019-07-08 20:57:08 -07:00
lz4hc.c
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2019-07-08 20:57:08 -07:00
lzo-rle.c
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2019-07-08 20:57:08 -07:00
lzo.c
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2019-07-08 20:57:08 -07:00
Makefile
crypto: aria - prepare generic module for optimized implementations
2022-09-24 16:14:44 +08:00
md4.c
crypto: make all generic algorithms set cra_driver_name
2019-06-13 14:31:39 +08:00
md5.c
crypto: md5 - remove unused macros
2020-02-28 08:43:21 +08:00
michael_mic.c
crypto: michael_mic - fix broken misalignment handling
2021-02-10 17:55:55 +11:00
nhpoly1305.c
crypto: poly1305 - add new 32 and 64-bit generic versions
2020-01-16 15:18:12 +08:00
ofb.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
pcbc.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
pcrypt.c
crypto: pcrypt - Fix hungtask for PADATA_RESET
2023-11-28 17:06:58 +00:00
poly1305_generic.c
crypto: poly1305 - add new 32 and 64-bit generic versions
2020-01-16 15:18:12 +08:00
polyval-generic.c
crypto: x86/polyval - Add PCLMULQDQ accelerated implementation of POLYVAL
2022-06-10 16:40:17 +08:00
proc.c
crypto: proc - Removing some useless only space lines
2020-09-25 17:48:15 +10:00
ripemd.h
crypto: rmd320 - remove RIPE-MD 320 hash algorithm
2021-01-29 16:07:04 +11:00
rmd160.c
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2019-07-08 20:57:08 -07:00
rng.c
crypto: rng - fix crypto_rng_reset() refcounting when !CRYPTO_STATS
2021-04-02 18:28:12 +11:00
rsa_helper.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
rsa-pkcs1pad.c
crypto: rsa-pkcs1pad - Use helper to set reqsize
2023-09-13 09:42:26 +02:00
rsa.c
crypto: add __init/__exit annotations to init/exit funcs
2022-09-24 16:14:43 +08:00
rsaprivkey.asn1
…
rsapubkey.asn1
…
scatterwalk.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
scompress.c
crypto: scomp - fix req->dst buffer overflow
2024-01-25 15:27:23 -08:00
seed.c
crypto: seed - remove trailing semicolon in macro definition
2020-12-04 18:13:16 +11:00
seqiv.c
crypto: seqiv - Handle EBUSY correctly
2023-03-10 09:32:56 +01:00
serpent_generic.c
crypto: serpent - Fix sparse byte order warnings
2021-03-07 15:13:15 +11:00
sha1_generic.c
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
sha3_generic.c
crypto: Replace HTTP links with HTTPS ones
2020-07-23 17:34:20 +10:00
sha256_generic.c
crypto: sha256 - remove duplicate generic hash init function
2021-12-31 18:10:54 +11:00
sha512_generic.c
crypto: sha512 - remove imaginary and mystifying clearing of variables
2021-08-27 16:30:19 +08:00
shash.c
crypto: add crypto_has_shash()
2022-08-02 17:14:47 -06:00
simd.c
crypto: algapi - use common mechanism for inheriting flags
2020-07-16 21:49:08 +10:00
skcipher.c
crypto: skcipher - in_irq() cleanup
2021-08-21 15:44:58 +08:00
sm2.c
crypto: add __init/__exit annotations to init/exit funcs
2022-09-24 16:14:43 +08:00
sm2signature.asn1
crypto: sm2 - introduce OSCCA SM2 asymmetric cipher algorithm
2020-09-25 17:48:54 +10:00
sm3_generic.c
crypto: sm3 - make dependent on sm3 library
2022-01-28 16:51:11 +11:00
sm3.c
crypto: sm3,sm4 - move into crypto directory
2022-04-08 16:11:48 +08:00
sm4_generic.c
crypto: arm64/sm4-ce - Make dependent on sm4 library instead of sm4-generic
2021-07-30 10:58:30 +08:00
sm4.c
crypto: sm4 - export sm4 constant arrays
2022-04-08 16:12:46 +08:00
streebog_generic.c
crypto: streebog - remove two unused variables
2019-08-15 21:52:14 +10:00
tcrypt.c
crypto: tcrypt - Fix multibuffer skcipher speed test mem leak
2022-12-31 13:32:34 +01:00
tcrypt.h
crypto: tcrypt - Add support for hash speed testing with keys
2020-08-21 14:45:27 +10:00
tea.c
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2019-07-08 20:57:08 -07:00
testmgr.c
crypto: testmgr - fix RNG performance in fuzz tests
2023-05-24 17:32:53 +01:00
testmgr.h
crypto: testmgr - some more fixes to RSA test vectors
2022-07-22 16:22:04 +08:00
twofish_common.c
crypto: twofish - Fix comment typo
2022-07-22 16:22:04 +08:00
twofish_generic.c
crypto: twofish - use unaligned accessors instead of alignmask
2021-02-10 17:55:57 +11:00
vmac.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
wp512.c
crypto: wp512 - correct a non-kernel-doc comment
2021-08-12 19:32:17 +08:00
xcbc.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
xctr.c
crypto: xctr - Add XCTR support
2022-06-10 16:40:16 +08:00
xor.c
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2021-02-21 17:23:56 -08:00
xts.c
crypto: lrw,xts - Replace strlcpy with strscpy
2023-09-23 11:11:01 +02:00
xxhash_generic.c
crypto: remove CRYPTO_TFM_RES_BAD_KEY_LEN
2020-01-09 11:30:53 +08:00
zstd.c
lib: zstd: Add kernel-specific API
2021-11-08 16:55:21 -08:00