Messages in this thread Patch in this message | | | From | Stephan Mueller <> | Subject | [PATCH v2] crypto: AEAD: add check for presence of auth tag | Date | Mon, 05 Jan 2015 12:21:45 +0100 |
| |
The AEAD decryption operation requires the authentication tag to be present as part of the cipher text buffer. The added check verifies that the caller provides a cipher text with at least the authentication tag.
Signed-off-by: Stephan Mueller <smueller@chronox.de> --- include/linux/crypto.h | 3 +++ 1 file changed, 3 insertions(+)
diff --git a/include/linux/crypto.h b/include/linux/crypto.h index 9c8776d..9099834 100644 --- a/include/linux/crypto.h +++ b/include/linux/crypto.h @@ -1412,6 +1412,9 @@ static inline int crypto_aead_encrypt(struct aead_request *req) */ static inline int crypto_aead_decrypt(struct aead_request *req) { + if (req->cryptlen < crypto_aead_authsize(crypto_aead_reqtfm(req))) + return -EINVAL; + return crypto_aead_crt(crypto_aead_reqtfm(req))->decrypt(req); } -- 2.1.0
| |