07 Dec, 2016

1 commit

• 48a992727   crypto: mcryptd - Check mcryptd algorithm compatibility ... Browse Code »

  Algorithms not compatible with mcryptd could be spawned by mcryptd
  with a direct crypto_alloc_tfm invocation using a "mcryptd(alg)" name
  construct. This causes mcryptd to crash the kernel if an arbitrary
  "alg" is incompatible and not intended to be used with mcryptd. It is
  an issue if AF_ALG tries to spawn mcryptd(alg) to expose it externally.
  But such algorithms must be used internally and not be exposed.

  We added a check to enforce that only internal algorithms are allowed
  with mcryptd at the time mcryptd is spawning an algorithm.

  Link: http://marc.info/?l=linux-crypto-vger&m=148063683310477&w=2
  Cc: stable@vger.kernel.org
  Reported-by: Mikulas Patocka
  Signed-off-by: Tim Chen
  Signed-off-by: Herbert Xu

  Tim

  2016-12-07 19:55:37 +0800  

13 Sep, 2016

1 commit

• 36e09e1f8   crypto: squash lines for simple wrapper functions ... Browse Code »

  Remove unneeded variables and assignments.

  Signed-off-by: Masahiro Yamada
  Signed-off-by: Herbert Xu

  Masahiro Yamada

  2016-09-13 20:27:26 +0800  

23 Jun, 2016

1 commit

• 331bf739c   crypto: sha1-mb - async implementation for sha1-mb ... Browse Code »

  Herbert wants the sha1-mb algorithm to have an async implementation:
  https://lkml.org/lkml/2016/4/5/286.
  Currently, sha1-mb uses an async interface for the outer algorithm
  and a sync interface for the inner algorithm. This patch introduces
  a async interface for even the inner algorithm.

  Signed-off-by: Megha Dey
  Signed-off-by: Tim Chen
  Signed-off-by: Herbert Xu

  Megha Dey

  2016-06-23 18:29:55 +0800  

30 Jan, 2016

1 commit

• ddef48242   crypto: mcryptd - Fix load failure ... Browse Code »

  mcryptd_create_hash() fails by returning -EINVAL, causing any
  driver using mcryptd to fail to load. It is because it needs
  to set its statesize properly.

  Signed-off-by: Rui Wang
  Signed-off-by: Herbert Xu

  Wang, Rui Y

  2016-01-30 22:11:20 +0800  

23 Nov, 2015

1 commit

• 08346170d   crypto: mcryptd - use list_first_entry_or_null() ... Browse Code »

  Simplify mcryptd_opportunistic_flush() with list_first_entry_or_null().

  Signed-off-by: Geliang Tang
  Signed-off-by: Herbert Xu

  Geliang Tang

  2015-11-23 20:55:51 +0800  

31 Mar, 2015

1 commit

• f52bbf55d   crypto: mcryptd - process CRYPTO_ALG_INTERNAL ... Browse Code »

  The mcryptd is used as a wrapper around internal ciphers. Therefore,
  the mcryptd must process the internal cipher by marking mcryptd as
  internal if the underlying cipher is an internal cipher.

  Signed-off-by: Stephan Mueller
  Signed-off-by: Herbert Xu

  Stephan Mueller

  2015-03-31 21:21:13 +0800  

26 Nov, 2014

1 commit

• 4943ba16b   crypto: include crypto- module prefix in template ... Browse Code »

  This adds the module loading prefix "crypto-" to the template lookup
  as well.

  For example, attempting to load 'vfat(blowfish)' via AF_ALG now correctly
  includes the "crypto-" prefix at every level, correctly rejecting "vfat":

  net-pf-38
  algif-hash
  crypto-vfat(blowfish)
  crypto-vfat(blowfish)-all
  crypto-vfat

  Reported-by: Mathias Krause
  Signed-off-by: Kees Cook
  Acked-by: Mathias Krause
  Signed-off-by: Herbert Xu

  Kees Cook

  2014-11-26 20:06:30 +0800  

26 Aug, 2014

1 commit

• 1f6e97f68   crypto: mcryptd - mcryptd_flist can be static ... Browse Code »

  CC: Tim Chen
  CC: Herbert Xu
  Signed-off-by: Fengguang Wu
  Signed-off-by: Herbert Xu

  Fengguang Wu

  2014-08-26 14:40:39 +0800  

25 Aug, 2014

1 commit

• 1e65b81a9   crypto: sha-mb - multibuffer crypto infrastructure ... Browse Code »

  This patch introduces the multi-buffer crypto daemon which is responsible
  for submitting crypto jobs in a work queue to the responsible multi-buffer
  crypto algorithm. The idea of the multi-buffer algorihtm is to put
  data streams from multiple jobs in a wide (AVX2) register and then
  take advantage of SIMD instructions to do crypto computation on several
  buffers simultaneously.

  The multi-buffer crypto daemon is also responsbile for flushing the
  remaining buffers to complete the computation if no new buffers arrive
  for a while.

  Signed-off-by: Tim Chen
  Signed-off-by: Herbert Xu

  Tim Chen

  2014-08-25 20:32:25 +0800