| commit | 79960943fdc114fd4583c9ab164b5c89da7aa601 | [log] [tgz] |
|---|---|---|
| author | David Gstir <david@sigma-star.at> | Sun Nov 15 17:14:42 2015 +0100 |
| committer | Herbert Xu <herbert@gondor.apana.org.au> | Mon Nov 16 21:39:24 2015 +0800 |
| tree | eee34426e869bbc88d47c233f490808dc38ffa02 | |
| parent | cb8affb55c7e64816f3effcd9b2fc3268c016fac [diff] |
crypto: talitos - Fix timing leak in ESP ICV verification Using non-constant time memcmp() makes the verification of the authentication tag in the decrypt path vulnerable to timing attacks. Fix this by using crypto_memneq() instead. Cc: stable@vger.kernel.org Signed-off-by: David Gstir <david@sigma-star.at> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>