Groups > linux.kernel > #1619491

crypto_memneq not backported to 3.10

From	"Jason A. Donenfeld" <Jason@zx2c4.com>
Newsgroups	linux.kernel
Subject	crypto_memneq not backported to 3.10
Date	2017-04-09 15:10 +0200
Message-ID	<tukLn-3bS-1@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

Hey Willy,

Linux 3.10 is inexplicably missing crypto_memneq, making all crypto
mac comparisons use non constant-time comparisons. Bad news bears.

3.12 got these backported with
d68e944a8fcb2c6212b38064771c9f5af7b0b92c,
afe5a791d374e50a06ada7f4eda4e921e1b77996, and possibly others. I'd
suggest following suit, since many people are relying on this kernel
to do safe crypto.

Thanks,
Jason

Back to linux.kernel | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

crypto_memneq not backported to 3.10 "Jason A. Donenfeld" <Jason@zx2c4.com> - 2017-04-09 15:10 +0200
  Re: crypto_memneq not backported to 3.10 Willy Tarreau <w@1wt.eu> - 2017-04-09 15:30 +0200

csiph-web