hamza.kesraoui/sst-linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
sst-linux/crypto
History
Hailey Mothershead 28c8d27484 crypto: aead,cipher - zeroize key buffer after use 
[ Upstream commit 23e4099bdc3c8381992f9eb975c79196d6755210 ]

I.G 9.7.B for FIPS 140-3 specifies that variables temporarily holding
cryptographic information should be zeroized once they are no longer
needed. Accomplish this by using kfree_sensitive for buffers that
previously held the private key.

Signed-off-by: Hailey Mothershead <hailmo@amazon.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-07-11 12:47:05 +02:00
..
asymmetric_keys
KEYS: asymmetric: Add missing dependencies of FIPS_SIGNATURE_SELFTEST
2024-06-12 11:02:58 +02:00
async_tx
treewide: use get_random_bytes() when possible
2022-10-11 17:42:58 -06:00
842.c
…
acompress.c
…
adiantum.c
…
aead.c
crypto: aead,cipher - zeroize key buffer after use
2024-07-11 12:47:05 +02:00
aegis128-core.c
…
aegis128-neon-inner.c
…
aegis128-neon.c
…
aegis.h
…
aes_generic.c
…
aes_ti.c
…
af_alg.c
crypto: af_alg - Disallow multiple in-flight AIO requests
2024-01-25 15:27:21 -08:00
ahash.c
…
akcipher.c
crypto: akcipher - default implementation for setting a private key
2022-09-09 16:18:33 +08:00
algapi.c
Revert "crypto: api - Disallow identical driver names"
2024-05-02 16:29:27 +02:00
algboss.c
…
algif_aead.c
…
algif_hash.c
af_alg_make_sg(): switch to advancing variant of iov_iter_get_pages()
2022-08-08 22:37:23 -04:00
algif_rng.c
…
algif_skcipher.c
…
ansi_cprng.c
…
anubis.c
…
api.c
crypto: core - move from strlcpy with unused retval to strscpy
2022-08-26 18:50:38 +08:00
arc4.c
…
aria_generic.c
crypto: aria - prepare generic module for optimized implementations
2022-09-24 16:14:44 +08:00
authenc.c
crypto: authenc - Fix sleep in atomic context in decrypt_tail
2022-01-31 11:21:44 +11:00
authencesn.c
…
blake2b_generic.c
…
blowfish_common.c
…
blowfish_generic.c
…
camellia_generic.c
…
cast5_generic.c
…
cast6_generic.c
…
cast_common.c
…
cbc.c
…
ccm.c
…
cfb.c
crypto: cleanup comments
2022-03-03 10:49:20 +12:00
chacha20poly1305.c
…
chacha_generic.c
…
cipher.c
crypto: aead,cipher - zeroize key buffer after use
2024-07-11 12:47:05 +02:00
cmac.c
…
compress.c
…
crc32_generic.c
…
crc32c_generic.c
…
crc64_rocksoft_generic.c
crypto: add rocksoft 64b crc guard tag framework
2022-03-07 12:48:35 -07:00
crct10dif_common.c
…
crct10dif_generic.c
…
cryptd.c
crypto: cryptd - Use request context instead of stack for sub-request
2022-12-31 13:32:33 +01:00
crypto_engine.c
crypto: engine - fix crypto_queue backlog handling
2023-05-17 11:53:40 +02:00
crypto_null.c
…
crypto_user_base.c
…
crypto_user_stat.c
…
ctr.c
…
cts.c
…
curve25519-generic.c
crypto: add __init/__exit annotations to init/exit funcs
2022-09-24 16:14:43 +08:00
deflate.c
…
des_generic.c
…
dh_helper.c
crypto: dh - split out deserialization code from crypto_dh_decode()
2022-03-03 10:47:50 +12:00
dh.c
crypto: add __init/__exit annotations to init/exit funcs
2022-09-24 16:14:43 +08:00
drbg.c
crypto: drbg - Only fail when jent is unavailable in FIPS mode
2023-05-11 23:03:21 +09:00
ecb.c
…
ecc_curve_defs.h
…
ecc.c
…
ecdh_helper.c
…
ecdh.c
crypto: ecdh - explicitly zeroize private_key
2024-07-05 09:31:49 +02:00
ecdsa.c
crypto: ecdsa - Fix module auto-load on add-key
2024-06-16 13:41:37 +02:00
ecdsasignature.asn1
…
echainiv.c
…
ecrdsa_defs.h
…
ecrdsa_params.asn1
…
ecrdsa_pub_key.asn1
…
ecrdsa.c
crypto: ecrdsa - Fix module auto-load on add_key
2024-06-16 13:41:37 +02:00
essiv.c
crypto: essiv - Handle EBUSY correctly
2023-03-10 09:32:56 +01:00
fcrypt.c
…
fips.c
crypto: fips - make proc files report fips module name and version
2022-07-15 16:43:22 +08:00
gcm.c
…
geniv.c
…
gf128mul.c
…
ghash-generic.c
…
hash_info.c
…
hctr2.c
crypto: hctr2 - Add HCTR2 support
2022-06-10 16:40:17 +08:00
hmac.c
crypto: hmac - disallow keys < 112 bits in FIPS mode
2022-02-11 20:22:01 +11:00
internal.h
…
jitterentropy-kcapi.c
crypto: jitter - permanent and intermittent health errors
2023-05-24 17:32:38 +01:00
jitterentropy.c
crypto: jitter - correct health test during initialization
2023-07-19 16:21:42 +02:00
jitterentropy.h
crypto: jitter - permanent and intermittent health errors
2023-05-24 17:32:38 +01:00
Kconfig
crypto: jitter - fix CRYPTO_JITTERENTROPY help text
2024-03-26 18:20:50 -04:00
kdf_sp800108.c
…
keywrap.c
…
khazad.c
…
kpp.c
crypto: add crypto_has_kpp()
2022-08-02 17:14:47 -06:00
lrw.c
crypto: lrw,xts - Replace strlcpy with strscpy
2023-09-23 11:11:01 +02:00
lz4.c
…
lz4hc.c
…
lzo-rle.c
…
lzo.c
…
Makefile
crypto: aria - prepare generic module for optimized implementations
2022-09-24 16:14:44 +08:00
md4.c
…
md5.c
…
michael_mic.c
…
nhpoly1305.c
…
ofb.c
…
pcbc.c
…
pcrypt.c
crypto: pcrypt - Fix hungtask for PADATA_RESET
2023-11-28 17:06:58 +00:00
poly1305_generic.c
…
polyval-generic.c
crypto: x86/polyval - Add PCLMULQDQ accelerated implementation of POLYVAL
2022-06-10 16:40:17 +08:00
proc.c
…
ripemd.h
…
rmd160.c
…
rng.c
…
rsa_helper.c
…
rsa-pkcs1pad.c
crypto: rsa-pkcs1pad - Use helper to set reqsize
2023-09-13 09:42:26 +02:00
rsa.c
crypto: add __init/__exit annotations to init/exit funcs
2022-09-24 16:14:43 +08:00
rsaprivkey.asn1
…
rsapubkey.asn1
…
scatterwalk.c
…
scompress.c
crypto: scomp - fix req->dst buffer overflow
2024-01-25 15:27:23 -08:00
seed.c
…
seqiv.c
crypto: seqiv - Handle EBUSY correctly
2023-03-10 09:32:56 +01:00
serpent_generic.c
…
sha1_generic.c
…
sha3_generic.c
…
sha256_generic.c
…
sha512_generic.c
…
shash.c
crypto: add crypto_has_shash()
2022-08-02 17:14:47 -06:00
simd.c
…
skcipher.c
…
sm2.c
crypto: add __init/__exit annotations to init/exit funcs
2022-09-24 16:14:43 +08:00
sm2signature.asn1
…
sm3_generic.c
crypto: sm3 - make dependent on sm3 library
2022-01-28 16:51:11 +11:00
sm3.c
crypto: sm3,sm4 - move into crypto directory
2022-04-08 16:11:48 +08:00
sm4_generic.c
…
sm4.c
crypto: sm4 - export sm4 constant arrays
2022-04-08 16:12:46 +08:00
streebog_generic.c
…
tcrypt.c
crypto: tcrypt - Fix multibuffer skcipher speed test mem leak
2022-12-31 13:32:34 +01:00
tcrypt.h
…
tea.c
…
testmgr.c
crypto: testmgr - fix RNG performance in fuzz tests
2023-05-24 17:32:53 +01:00
testmgr.h
crypto: testmgr - some more fixes to RSA test vectors
2022-07-22 16:22:04 +08:00
twofish_common.c
crypto: twofish - Fix comment typo
2022-07-22 16:22:04 +08:00
twofish_generic.c
…
vmac.c
…
wp512.c
…
xcbc.c
…
xctr.c
crypto: xctr - Add XCTR support
2022-06-10 16:40:16 +08:00
xor.c
…
xts.c
crypto: lrw,xts - Replace strlcpy with strscpy
2023-09-23 11:11:01 +02:00
xxhash_generic.c
…
zstd.c
…