diff options
| author | Thomas Huth <thuth@redhat.com> | 2026-08-10 11:30:05 +0200 |
|---|---|---|
| committer | Herbert Xu <herbert@gondor.apana.org.au> | 2026-09-04 19:48:47 +1000 |
| commit | e1df9bb6dc67c8d846ce3559a8f65256835a35d5 (patch) | |
| tree | aa5c1d828d2867d9fe075664b23092a9b6fa04b3 /scripts/Makefile.thinlto | |
| parent | 001c53ae358ba864b1ce5de85751cff3617b5f84 (diff) | |
| download | linux-next-e1df9bb6dc67c8d846ce3559a8f65256835a35d5.tar.gz linux-next-e1df9bb6dc67c8d846ce3559a8f65256835a35d5.zip | |
crypto: eip93 - Simplify the check for a valid AES key
eip93_aead_setkey() currently uses aes_expandkey() to check for a valid
AES key, but then does not use the crypto_aes_ctx afterwards anymore,
i.e. this is just a wasteful way of checking the key length, and thus
aes_check_keylen() should be used instead.
This also fixes a potential leak of sensitive data via the stack, since
this function forgot to zeroize crypto_aes_ctx before returning to the
caller.
Suggested-by: Antoine Tenart <atenart@kernel.org>
Signed-off-by: Thomas Huth <thuth@redhat.com>
Reviewed-by: Antoine Tenart <atenart@kernel.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Diffstat (limited to 'scripts/Makefile.thinlto')
0 files changed, 0 insertions, 0 deletions