Re: [PATCH v2 2/2] s390/crypto: Explicit scrub temp buffer in PAES ctr mode algorithm
Finn Callies <[email protected]>
| Newsgroups | org.kernel.vger.linux-s390,org.kernel.vger.linux-crypto |
|---|---|
| Message-ID | <[email protected]> |
On 05.08.26 17:54, Harald Freudenberger wrote:
> In function ctr_paes_do_crypt() there is a buffer used to process
> remaining bytes < AES_BLOCK_SIZE. This buffer was not scrubbed and
> thus could lead to expose of unwanted data.
>
> On exit of the function unconditionally scrub this buffer to avoid
> exposure of maybe sensitive data.
>
> Fixes: 6cd87cb5ef6c ("s390/crypto: Rework protected key AES for true asynch support")
> Signed-off-by: Harald Freudenberger <[email protected]>
> Cc: [email protected] # 6.16+
> ---
> arch/s390/crypto/paes_s390.c | 1 +
> 1 file changed, 1 insertion(+)
[ snip ]
LGTM
Reviewed-by: Finn Callies <[email protected]>