Messages in this thread | | | Date | Sun, 31 May 2009 10:38:18 -0400 | From | Rik van Riel <> | Subject | Re: [PATCH] Use kzfree in crypto API context initialization and key/iv handling |
| |
Larry H. wrote: > [PATCH] Use kzfree in crypto API context initialization and key/iv handling > > This patch replaces the kfree() calls within the crypto API (algorithms, > key setup and handling, etc) with kzfree(), to enforce sanitization of > the allocated memory. > > This prevents such information from persisting on memory and eventually > leak to other kernel users or during coldboot attacks. > > This patch replaces kfree() for context (algorithm meta-data) structures > too. Those are initialized or released once, and remain in use during the > lifetime of the cipher/algorithm instance, therefore no performance impact > exists for those specific changes. > > This patch doesn't affect fastpaths. > > Signed-off-by: Larry Highsmith <research@subreption.com>
Acked-by: Rik van Riel <riel@redhat.com>
-- All rights reversed.
| |