]> www.infradead.org Git - users/dwmw2/linux.git/commit
crypto: talitos - fix IPsec cipher in length
authorLEROY Christophe <christophe.leroy@c-s.fr>
Thu, 22 Mar 2018 09:57:01 +0000 (10:57 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sun, 8 Apr 2018 12:29:50 +0000 (14:29 +0200)
commit60da13207fe9eb2f2990eb8bd98d51c665631dcd
tree6a98cfbad4ce6d707b98850f95f574e5fa0b95b7
parent1637d9655c6ac93929512229f6074d9c61c0299b
crypto: talitos - fix IPsec cipher in length

commit 2b1227301a8e4729409694e323b72c064c47cb6b upstream.

For SEC 2.x+, cipher in length must contain only the ciphertext length.
In case of using hardware ICV checking, the ICV length is provided via
the "extent" field of the descriptor pointer.

Cc: <stable@vger.kernel.org> # 4.8+
Fixes: 549bd8bc5987 ("crypto: talitos - Implement AEAD for SEC1 using HMAC_SNOOP_NO_AFEU")
Reported-by: Horia Geantă <horia.geanta@nxp.com>
Signed-off-by: Christophe Leroy <christophe.leroy@c-s.fr>
Tested-by: Horia Geantă <horia.geanta@nxp.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/crypto/talitos.c