]> git.baikalelectronics.ru Git - kernel.git/commit
dm crypt: rewrite (wipe) key in crypto layer using random data
authorOndrej Kozina <okozina@redhat.com>
Mon, 24 Apr 2017 12:21:53 +0000 (14:21 +0200)
committerMike Snitzer <snitzer@redhat.com>
Mon, 24 Apr 2017 19:16:03 +0000 (15:16 -0400)
commitf2daf3603e81cbf537941bbfc98e1d8320c517b2
tree5d9078d5e48ffa2f6bbcd9b3382bcfe909c159b9
parenta1e598e41ebe8a5f6cfe106061bbc48fb273392d
dm crypt: rewrite (wipe) key in crypto layer using random data

The message "key wipe" used to wipe real key stored in crypto layer by
rewriting it with zeroes.  Since commit 79aa9d2 ("crypto: xts -
consolidate sanity check for keys") this no longer works in FIPS mode
for XTS.

While running in FIPS mode the crypto key part has to differ from the
tweak key.

Fixes: 79aa9d2 ("crypto: xts - consolidate sanity check for keys")
Cc: stable@vger.kernel.org
Signed-off-by: Ondrej Kozina <okozina@redhat.com>
Signed-off-by: Mike Snitzer <snitzer@redhat.com>
drivers/md/dm-crypt.c