kernel.git/crypto/drbg.c, branch linux-3.19.y

crypto: drbg - use memzero_explicit() for clearing sensitive data

2014-11-27T14:26:18Z

Compiler dead store optimization can sometimes remove final calls to memset() used to clear sensitive data at the end of a function. Replace trailing memset() calls with memzero_explicit() to preclude unwanted removal. Signed-off-by: Nickolaus Woodruff Signed-off-by: Herbert Xu

crypto: drbg - use MODULE_ALIAS_CRYPTO

2014-11-26T12:06:30Z

Use the crypto- prefix for the DRBG implementations. Signed-off-by: Stephan Mueller Signed-off-by: Herbert Xu

crypto: drbg - add MODULE_ALIAS for all DRBG types

2014-11-10T14:09:00Z

The kernel module drbg.ko is currently not loaded automatically when a DRBG is requested by a consumer. This is due to missing MODULE_ALIAS flags for each of the implemented DRBG types. This patch adds aliases for each of the 22 defined DRBGs. Signed-off-by: Stephan Mueller Signed-off-by: Herbert Xu

crypto: drbg - use crypto_inc

2014-10-24T14:49:36Z

The DRBG internal buffer addition function is replaced with crypto_inc when a buffer is to be incremented by one. The function drbg_add_buf is moved to the CONFIG_CRYPTO_DRBG_HASH ifdef area as it is now only needed for the Hash DRBG. Signed-off-by: Stephan Mueller Signed-off-by: Herbert Xu

Merge git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

2014-09-05T08:11:43Z

Merging the crypto tree for 3.17 in order to resolve the conflict on the 32-bit DRBG overflow fix.

crypto: drbg - remove check for uninitialized DRBG handle

2014-09-05T07:56:43Z

The drbg_healthcheck() contained a test to call the DRBG with an uninitialized DRBG cipher handle. As this is an inappropriate use of the kernel crypto API to try to generate random numbers before initialization, checks verifying for an initialized DRBG have been removed in previous patches. Now, the drbg_healthcheck test must also be removed. Changes V2: Added patch marker to email subject line. Signed-off-by: Stephan Mueller Signed-off-by: Herbert Xu

crypto: drbg - fix sparse warning for cpu_to_be[32|64]

2014-08-26T07:33:28Z

The sparse tool complained that the cpu_to_be[32|64] functions return __be[32|64] instead of __u32 or __u64. The patch replaces the __u32 and __u64 with __be32 and __be64. Reported-by: kbuild test robot Signed-off-by: Stephan Mueller Signed-off-by: Herbert Xu

crypto: drbg - remove unnecessary sanity check for shadow state

2014-08-25T12:34:14Z

During creation of the DRBG shadow state, it is ensured that the DRBG state structure is already allocated. Thus, a sanity check for verifying that the structure is allocated is removed. Signed-off-by: Stephan Mueller Signed-off-by: Herbert Xu

crypto: drbg - remove configuration of fixed values

2014-08-25T12:34:12Z

SP800-90A mandates several hard-coded values. The old drbg_cores allows the setting of these values per DRBG implementation. However, due to the hard requirement of SP800-90A, these values are now returned globally for each DRBG. The ability to set such values per DRBG is therefore removed. Signed-off-by: Stephan Mueller Signed-off-by: Herbert Xu

crypto: drbg - remove unnecessary sanity checks

2014-08-25T12:34:11Z

The drbg_make_shadow function contains sanity checks which are not needed as the function is invoked at times where it is ensured that the checked-for variables are available. Signed-off-by: Stephan Mueller Signed-off-by: Herbert Xu