crypto: echainiv - Replace chaining with multiplication
authorHerbert Xu <herbert@gondor.apana.org.au>
Wed, 7 Sep 2016 10:42:08 +0000 (18:42 +0800)
committerHerbert Xu <herbert@gondor.apana.org.au>
Tue, 13 Sep 2016 10:44:57 +0000 (18:44 +0800)
commit53a5d5ddccf849dbc27a8c1bba0b43c3a45fb792
tree95635f9a1b03ca963f3758a4ffbcf5f4f94cc515
parent0bd2223594a4dcddc1e34b15774a3a4776f7749e
crypto: echainiv - Replace chaining with multiplication

The current implementation uses a global per-cpu array to store
data which are used to derive the next IV.  This is insecure as
the attacker may change the stored data.

This patch removes all traces of chaining and replaces it with
multiplication of the salt and the sequence number.

Fixes: a10f554fa7e0 ("crypto: echainiv - Add encrypted chain IV...")
Cc: stable@vger.kernel.org
Reported-by: Mathias Krause <minipli@googlemail.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
crypto/echainiv.c