]> git.baikalelectronics.ru Git - kernel.git/commit
crypto: ecdh - check validity of Z before export
authorStephan Müller <smueller@chronox.de>
Mon, 20 Jul 2020 17:07:48 +0000 (19:07 +0200)
committerHerbert Xu <herbert@gondor.apana.org.au>
Fri, 31 Jul 2020 08:08:58 +0000 (18:08 +1000)
commitd7671ca9b12b9a8d8c74ec4e45daadfeafd12eef
treeccf050a858e5391e96a11fc5c25c7d4d29a0d7c0
parent2da6f548351200ad53229387d863d9862a42a134
crypto: ecdh - check validity of Z before export

SP800-56A rev3 section 5.7.1.2 step 2 mandates that the validity of the
calculated shared secret is verified before the data is returned to the
caller. Thus, the export function and the validity check functions are
reversed. In addition, the sensitive variables of priv and rand_z are
zeroized.

Signed-off-by: Stephan Mueller <smueller@chronox.de>
Reviewed-by: Vitaly Chikunov <vt@altlinux.org>
Acked-by: Neil Horman <nhorman@redhat.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto/ecc.c