diff options
| author | Ard Biesheuvel <ard.biesheuvel@linaro.org> | 2014-06-16 11:02:15 +0100 |
|---|---|---|
| committer | Mark Brown <broonie@linaro.org> | 2014-07-22 23:53:48 +0100 |
| commit | bb10d32172035890026456899f12980448459536 (patch) | |
| tree | 77cef90d22b08c9b492b15a526e62db93b99d72d | |
| parent | a07005b41a14fa9cf5aea62a346a7e8db1f4fb3c (diff) | |
arm64/crypto: fix data corruption bug in GHASH algorithm
This fixes a bug in the GHASH algorithm resulting in the calculated hash to be
incorrect if the input is presented in chunks whose size is not a multiple of
16 bytes.
Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Fixes: fdd2389457b2 ("arm64/crypto: GHASH secure hash using ARMv8 Crypto Extensions")
Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
(cherry picked from commit 6aa8b209f5ef3610d470c519ddd6e6b47e9f6248)
Signed-off-by: Mark Brown <broonie@linaro.org>
| -rw-r--r-- | arch/arm64/crypto/ghash-ce-glue.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/arch/arm64/crypto/ghash-ce-glue.c b/arch/arm64/crypto/ghash-ce-glue.c index b92baf3f68c7..ef6aa69c4e0c 100644 --- a/arch/arm64/crypto/ghash-ce-glue.c +++ b/arch/arm64/crypto/ghash-ce-glue.c @@ -72,6 +72,7 @@ static int ghash_update(struct shash_desc *desc, const u8 *src, partial ? ctx->buf : NULL); kernel_neon_end(); src += blocks * GHASH_BLOCK_SIZE; + partial = 0; } if (len) memcpy(ctx->buf + partial, src, len); |