Re: [PATCH] security/keys: rewrite all of big_key crypto

From	"Jason A. Donenfeld" <Jason@zx2c4.com>
Newsgroups	linux.kernel
Subject	Re: [PATCH] security/keys: rewrite all of big_key crypto
Date	2017-06-06 21:20 +0200
Message-ID	<tPsbg-4vm-13@gated-at.bofh.it> (permalink)
References	<tPqVR-3xj-47@gated-at.bofh.it> <tPsbg-4vm-15@gated-at.bofh.it> <tPsbg-4vm-17@gated-at.bofh.it> <tPsbg-4vm-19@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On Tue, Jun 6, 2017 at 8:45 PM, David Howells <dhowells@redhat.com> wrote:
> Jason A. Donenfeld <Jason@zx2c4.com> wrote:
>
>> Thank you! Perfect instructions, I'll play around with this and make
>> sure it works.
>
> Don't forget that it's bimodal.  You need to give it sufficient data to
> trigger storage in swappable space.

Somewhat incredibly, it works perfectly.

First I tried the instructions you noted, and things worked, both for
big files and small ones.

Then I modified the source to print to dmesg the data buffer and the
key before and after the encryption/decryption function. I verified
with a small python script that indeed standard aes-gcm is being used
successfully.

Thus, pending Ted's approval of the new random API, this patch should
be ready for merging.

Regards,
Jason

Back to linux.kernel | Previous | Next | Find similar | Unroll thread

Thread

Re: [PATCH] security/keys: rewrite all of big_key crypto "Jason A. Donenfeld" <Jason@zx2c4.com> - 2017-06-06 21:20 +0200

csiph-web