iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
fe0f92fd5320b393e44ca210805e653ea90cc982
linux/crypto
History
Hailey Mothershead 28c8d27484 crypto: aead,cipher - zeroize key buffer after use 
[ Upstream commit 23e4099bdc ]

I.G 9.7.B for FIPS 140-3 specifies that variables temporarily holding
cryptographic information should be zeroized once they are no longer
needed. Accomplish this by using kfree_sensitive for buffers that
previously held the private key.

Signed-off-by: Hailey Mothershead <hailmo@amazon.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-07-11 12:47:05 +02:00
..
asymmetric_keys
KEYS: asymmetric: Add missing dependencies of FIPS_SIGNATURE_SELFTEST
2024-06-12 11:02:58 +02:00
async_tx
treewide: use get_random_bytes() when possible
2022-10-11 17:42:58 -06:00
842.c
…
acompress.c
…
adiantum.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
aead.c
crypto: aead,cipher - zeroize key buffer after use
2024-07-11 12:47:05 +02:00
aegis128-core.c
crypto: aegis128 - Move simd prototypes into aegis.h
2021-03-19 21:59:45 +11:00
aegis128-neon-inner.c
crypto: aegis128/neon - move final tag check to SIMD domain
2020-11-27 17:13:40 +11:00
aegis128-neon.c
crypto: aegis128 - Move simd prototypes into aegis.h
2021-03-19 21:59:45 +11:00
aegis.h
crypto: aegis128 - Move simd prototypes into aegis.h
2021-03-19 21:59:45 +11:00
aes_generic.c
…
aes_ti.c
…
af_alg.c
crypto: af_alg - Disallow multiple in-flight AIO requests
2024-01-25 15:27:21 -08:00
ahash.c
crypto: ahash - Add init_tfm/exit_tfm
2020-08-28 16:58:28 +10:00
akcipher.c
crypto: akcipher - default implementation for setting a private key
2022-09-09 16:18:33 +08:00
algapi.c
Revert "crypto: api - Disallow identical driver names"
2024-05-02 16:29:27 +02:00
algboss.c
exit: Rename module_put_and_exit to module_put_and_kthread_exit
2021-12-13 12:04:45 -06:00
algif_aead.c
crypto: algif_aead - Do not set MAY_BACKLOG on the async path
2020-08-21 14:45:27 +10:00
algif_hash.c
af_alg_make_sg(): switch to advancing variant of iov_iter_get_pages()
2022-08-08 22:37:23 -04:00
algif_rng.c
crypto: af_alg - add extra parameters for DRBG interface
2020-09-25 17:48:52 +10:00
algif_skcipher.c
crypto: algif_skcipher - EBUSY on aio should be an error
2020-08-21 14:45:26 +10:00
ansi_cprng.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
anubis.c
…
api.c
crypto: core - move from strlcpy with unused retval to strscpy
2022-08-26 18:50:38 +08:00
arc4.c
crypto: arc4 - mark ecb(arc4) skcipher as obsolete
2020-09-11 14:39:16 +10:00
aria_generic.c
crypto: aria - prepare generic module for optimized implementations
2022-09-24 16:14:44 +08:00
authenc.c
crypto: authenc - Fix sleep in atomic context in decrypt_tail
2022-01-31 11:21:44 +11:00
authencesn.c
…
blake2b_generic.c
crypto: blake2b - update file comment
2021-01-03 08:41:39 +11:00
blowfish_common.c
…
blowfish_generic.c
crypto: blowfish - use unaligned accessors instead of alignmask
2021-02-10 17:55:56 +11:00
camellia_generic.c
crypto: camellia - use unaligned accessors instead of alignmask
2021-02-10 17:55:56 +11:00
cast5_generic.c
crypto: cast5 - use unaligned accessors instead of alignmask
2021-02-10 17:55:56 +11:00
cast6_generic.c
crypto: cast6 - use unaligned accessors instead of alignmask
2021-02-10 17:55:56 +11:00
cast_common.c
…
cbc.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
ccm.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
cfb.c
crypto: cleanup comments
2022-03-03 10:49:20 +12:00
chacha20poly1305.c
…
chacha_generic.c
…
cipher.c
crypto: aead,cipher - zeroize key buffer after use
2024-07-11 12:47:05 +02:00
cmac.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
compress.c
…
crc32_generic.c
crypto: crc32-generic - Use SPDX-License-Identifier
2021-04-16 21:24:27 +10:00
crc32c_generic.c
crypto: crc32c_generic - delete and fix duplicated words
2020-08-21 14:45:25 +10:00
crc64_rocksoft_generic.c
crypto: add rocksoft 64b crc guard tag framework
2022-03-07 12:48:35 -07:00
crct10dif_common.c
…
crct10dif_generic.c
crypto: crct10dif_generic - fix duplicated words
2020-08-21 14:45:25 +10:00
cryptd.c
crypto: cryptd - Use request context instead of stack for sub-request
2022-12-31 13:32:33 +01:00
crypto_engine.c
crypto: engine - fix crypto_queue backlog handling
2023-05-17 11:53:40 +02:00
crypto_null.c
…
crypto_user_base.c
…
crypto_user_stat.c
…
ctr.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
cts.c
…
curve25519-generic.c
crypto: add __init/__exit annotations to init/exit funcs
2022-09-24 16:14:43 +08:00
deflate.c
…
des_generic.c
…
dh_helper.c
crypto: dh - split out deserialization code from crypto_dh_decode()
2022-03-03 10:47:50 +12:00
dh.c
crypto: add __init/__exit annotations to init/exit funcs
2022-09-24 16:14:43 +08:00
drbg.c
crypto: drbg - Only fail when jent is unavailable in FIPS mode
2023-05-11 23:03:21 +09:00
ecb.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
ecc_curve_defs.h
Merge branch 'ecc'
2021-03-26 19:55:55 +11:00
ecc.c
crypto: ecc - Export additional helper functions
2021-10-29 21:04:03 +08:00
ecdh_helper.c
crypto: ecdh - move curve_id of ECDH from the key to algorithm name
2021-03-13 00:04:03 +11:00
ecdh.c
crypto: ecdh - explicitly zeroize private_key
2024-07-05 09:31:49 +02:00
ecdsa.c
crypto: ecdsa - Fix module auto-load on add-key
2024-06-16 13:41:37 +02:00
ecdsasignature.asn1
crypto: ecdsa - Add support for ECDSA signature verification
2021-03-26 19:41:58 +11:00
echainiv.c
…
ecrdsa_defs.h
crypto: ecc - Move ecc.h to include/crypto/internal
2021-10-29 21:04:03 +08:00
ecrdsa_params.asn1
…
ecrdsa_pub_key.asn1
…
ecrdsa.c
crypto: ecrdsa - Fix module auto-load on add_key
2024-06-16 13:41:37 +02:00
essiv.c
crypto: essiv - Handle EBUSY correctly
2023-03-10 09:32:56 +01:00
fcrypt.c
crypto: fcrypt - Remove 'do while(0)' loop for single statement macro
2021-04-02 18:28:13 +11:00
fips.c
crypto: fips - make proc files report fips module name and version
2022-07-15 16:43:22 +08:00
gcm.c
…
geniv.c
…
gf128mul.c
…
ghash-generic.c
…
hash_info.c
…
hctr2.c
crypto: hctr2 - Add HCTR2 support
2022-06-10 16:40:17 +08:00
hmac.c
crypto: hmac - disallow keys < 112 bits in FIPS mode
2022-02-11 20:22:01 +11:00
internal.h
crypto: api - Fix built-in testing dependency failures
2021-09-24 16:03:05 +08:00
jitterentropy-kcapi.c
crypto: jitter - permanent and intermittent health errors
2023-05-24 17:32:38 +01:00
jitterentropy.c
crypto: jitter - correct health test during initialization
2023-07-19 16:21:42 +02:00
jitterentropy.h
crypto: jitter - permanent and intermittent health errors
2023-05-24 17:32:38 +01:00
Kconfig
crypto: jitter - fix CRYPTO_JITTERENTROPY help text
2024-03-26 18:20:50 -04:00
kdf_sp800108.c
crypto: kdf - add SP800-108 counter key derivation function
2021-11-26 16:25:17 +11:00
keywrap.c
crypto: keywrap - Remove else after break statement
2021-04-02 18:28:13 +11:00
khazad.c
crypto: khazad,wp512 - remove leading spaces before tabs
2021-05-28 15:11:44 +08:00
kpp.c
crypto: add crypto_has_kpp()
2022-08-02 17:14:47 -06:00
lrw.c
crypto: lrw,xts - Replace strlcpy with strscpy
2023-09-23 11:11:01 +02:00
lz4.c
…
lz4hc.c
…
lzo-rle.c
…
lzo.c
…
Makefile
crypto: aria - prepare generic module for optimized implementations
2022-09-24 16:14:44 +08:00
md4.c
…
md5.c
…
michael_mic.c
crypto: michael_mic - fix broken misalignment handling
2021-02-10 17:55:55 +11:00
nhpoly1305.c
…
ofb.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
pcbc.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
pcrypt.c
crypto: pcrypt - Fix hungtask for PADATA_RESET
2023-11-28 17:06:58 +00:00
poly1305_generic.c
…
polyval-generic.c
crypto: x86/polyval - Add PCLMULQDQ accelerated implementation of POLYVAL
2022-06-10 16:40:17 +08:00
proc.c
crypto: proc - Removing some useless only space lines
2020-09-25 17:48:15 +10:00
ripemd.h
crypto: rmd320 - remove RIPE-MD 320 hash algorithm
2021-01-29 16:07:04 +11:00
rmd160.c
…
rng.c
crypto: rng - fix crypto_rng_reset() refcounting when !CRYPTO_STATS
2021-04-02 18:28:12 +11:00
rsa_helper.c
…
rsa-pkcs1pad.c
crypto: rsa-pkcs1pad - Use helper to set reqsize
2023-09-13 09:42:26 +02:00
rsa.c
crypto: add __init/__exit annotations to init/exit funcs
2022-09-24 16:14:43 +08:00
rsaprivkey.asn1
…
rsapubkey.asn1
…
scatterwalk.c
…
scompress.c
crypto: scomp - fix req->dst buffer overflow
2024-01-25 15:27:23 -08:00
seed.c
crypto: seed - remove trailing semicolon in macro definition
2020-12-04 18:13:16 +11:00
seqiv.c
crypto: seqiv - Handle EBUSY correctly
2023-03-10 09:32:56 +01:00
serpent_generic.c
crypto: serpent - Fix sparse byte order warnings
2021-03-07 15:13:15 +11:00
sha1_generic.c
crypto: sha - split sha.h into sha1.h and sha2.h
2020-11-20 14:45:33 +11:00
sha3_generic.c
…
sha256_generic.c
crypto: sha256 - remove duplicate generic hash init function
2021-12-31 18:10:54 +11:00
sha512_generic.c
crypto: sha512 - remove imaginary and mystifying clearing of variables
2021-08-27 16:30:19 +08:00
shash.c
crypto: add crypto_has_shash()
2022-08-02 17:14:47 -06:00
simd.c
…
skcipher.c
crypto: skcipher - in_irq() cleanup
2021-08-21 15:44:58 +08:00
sm2.c
crypto: add __init/__exit annotations to init/exit funcs
2022-09-24 16:14:43 +08:00
sm2signature.asn1
crypto: sm2 - introduce OSCCA SM2 asymmetric cipher algorithm
2020-09-25 17:48:54 +10:00
sm3_generic.c
crypto: sm3 - make dependent on sm3 library
2022-01-28 16:51:11 +11:00
sm3.c
crypto: sm3,sm4 - move into crypto directory
2022-04-08 16:11:48 +08:00
sm4_generic.c
crypto: arm64/sm4-ce - Make dependent on sm4 library instead of sm4-generic
2021-07-30 10:58:30 +08:00
sm4.c
crypto: sm4 - export sm4 constant arrays
2022-04-08 16:12:46 +08:00
streebog_generic.c
…
tcrypt.c
crypto: tcrypt - Fix multibuffer skcipher speed test mem leak
2022-12-31 13:32:34 +01:00
tcrypt.h
crypto: tcrypt - Add support for hash speed testing with keys
2020-08-21 14:45:27 +10:00
tea.c
…
testmgr.c
crypto: testmgr - fix RNG performance in fuzz tests
2023-05-24 17:32:53 +01:00
testmgr.h
crypto: testmgr - some more fixes to RSA test vectors
2022-07-22 16:22:04 +08:00
twofish_common.c
crypto: twofish - Fix comment typo
2022-07-22 16:22:04 +08:00
twofish_generic.c
crypto: twofish - use unaligned accessors instead of alignmask
2021-02-10 17:55:57 +11:00
vmac.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
wp512.c
crypto: wp512 - correct a non-kernel-doc comment
2021-08-12 19:32:17 +08:00
xcbc.c
crypto: remove cipher routines from public crypto API
2021-01-03 08:41:35 +11:00
xctr.c
crypto: xctr - Add XCTR support
2022-06-10 16:40:16 +08:00
xor.c
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2021-02-21 17:23:56 -08:00
xts.c
crypto: lrw,xts - Replace strlcpy with strscpy
2023-09-23 11:11:01 +02:00
xxhash_generic.c
…
zstd.c
lib: zstd: Add kernel-specific API
2021-11-08 16:55:21 -08:00