Ard Biesheuvel 520af5da66 crypto: lib/aesgcm - Provide minimal library implementation ... Implement a minimal library version of AES-GCM based on the existing library implementations of AES and multiplication in GF(2^128). Using these primitives, GCM can be implemented in a straight-forward manner. GCM has a couple of sharp edges, i.e., the amount of input data processed with the same initialization vector (IV) should be capped to protect the counter from 32-bit rollover (or carry), and the size of the authentication tag should be fixed for a given key. [0] The former concern is addressed trivially, given that the function call API uses 32-bit signed types for the input lengths. It is still up to the caller to avoid IV reuse in general, but this is not something we can police at the implementation level. As for the latter concern, let's make the authentication tag size part of the key schedule, and only permit it to be configured as part of the key expansion routine. Note that table based AES implementations are susceptible to known plaintext timing attacks on the encryption key. The AES library already attempts to mitigate this to some extent, but given that the counter mode encryption used by GCM operates exclusively on known plaintext by construction (the IV and therefore the initial counter value are known to an attacker), let's take some extra care to mitigate this, by calling the AES library with interrupts disabled. [0] https://nvlpubs.nist.gov/nistpubs/legacy/sp/nistspecialpublication800-38d.pdf Link: https://lore.kernel.org/all/c6fb9b25-a4b6-2e4a-2dd1-63adda055a49@amd.com/ Signed-off-by: Ard Biesheuvel <ardb@kernel.org> Tested-by: Nikunj A Dadhania <nikunj@amd.com> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>		2022-11-11 18:14:59 +08:00
..
842
crypto	crypto: lib/aesgcm - Provide minimal library implementation	2022-11-11 18:14:59 +08:00
dim
fonts
kunit	kunit: remove format func from struct kunit_assert, get it to 0 bytes	2022-10-07 10:16:38 -06:00
livepatch
lz4
lzo
math
mpi	Updates to various subsystems which I help look after. lib, ocfs2,	2022-08-07 10:03:24 -07:00
pldmfw
raid6
reed_solomon	treewide: use get_random_u32() when possible	2022-10-11 17:42:58 -06:00
test_fortify
vdso
xz
zlib_deflate
zlib_dfltcc
zlib_inflate
zstd	zstd: Fixing mixed module-builtin objects	2022-10-03 03:52:58 +09:00
.gitignore
argv_split.c
ashldi3.c
ashrdi3.c
asn1_decoder.c
asn1_encoder.c
assoc_array.c
atomic64_test.c
atomic64.c
audit.c
base64.c
bcd.c
bch.c
bitfield_kunit.c
bitmap.c	lib/bitmap: remove bitmap_ord_to_pos	2022-09-26 12:19:12 -07:00
bitrev.c
bootconfig-data.S
bootconfig.c
bsearch.c
btree.c
bucket_locks.c
bug.c
build_OID_registry
buildid.c
bust_spinlocks.c	kernel/panic: Drop unblank_screen call	2022-09-01 16:55:35 +02:00
check_signature.c
checksum.c
clz_ctz.c
clz_tab.c
cmdline_kunit.c	treewide: use get_random_{u8,u16}() when possible, part 1	2022-10-11 17:42:58 -06:00
cmdline.c	lib/cmdline: avoid page fault in next_arg	2022-09-11 21:55:06 -07:00
cmpdi2.c
compat_audit.c
cpu_rmap.c
cpumask_kunit.c	lib/test_cpumask: Add for_each_cpu_and(not) tests	2022-10-06 05:57:36 -07:00
cpumask.c	lib/find_bit: add find_next{,_and}_bit_wrap	2022-10-01 10:22:57 -07:00
crc4.c
crc7.c
crc8.c
crc16.c
crc32.c
crc32defs.h
crc32test.c
crc64-rocksoft.c
crc64.c
crc-ccitt.c
crc-itu-t.c
crc-t10dif.c
ctype.c
debug_info.c
debug_locks.c
debugobjects.c
dec_and_lock.c
decompress_bunzip2.c
decompress_inflate.c
decompress_unlz4.c
decompress_unlzma.c
decompress_unlzo.c
decompress_unxz.c
decompress_unzstd.c
decompress.c
devmem_is_allowed.c
devres.c	devres: remove devm_ioremap_np	2022-09-01 18:04:43 +02:00
digsig.c
dump_stack.c
dynamic_debug.c	dyndbg: add drm.debug style (drm/parameters/debug) bitmap support	2022-09-07 17:04:49 +02:00
dynamic_queue_limits.c
earlycpio.c	lib: move from strlcpy with unused retval to strscpy	2022-09-11 21:55:10 -07:00
errname.c
error-inject.c
errseq.c
extable.c
fault-inject-usercopy.c
fault-inject.c	treewide: use prandom_u32_max() when possible, part 1	2022-10-11 17:42:55 -06:00
fdt_addresses.c
fdt_empty_tree.c
fdt_ro.c
fdt_rw.c
fdt_strerror.c
fdt_sw.c
fdt_wip.c
fdt.c
find_bit_benchmark.c	treewide: use prandom_u32_max() when possible, part 1	2022-10-11 17:42:55 -06:00
find_bit.c	lib/find_bit: Introduce find_next_andnot_bit()	2022-10-06 05:57:36 -07:00
flex_proportions.c	flex_proportions: Disable preemption entering the write section.	2022-09-19 14:35:08 +02:00
fortify_kunit.c	fortify: Adjust KUnit test for modular build	2022-09-14 07:04:15 -07:00
gen_crc32table.c
gen_crc64table.c
genalloc.c
generic-radix-tree.c
glob.c
globtest.c
hexdump.c
hweight.c
idr.c
inflate.c
interval_tree_test.c
interval_tree.c
iomap_copy.c
iomap.c	kmsan: add iomap support	2022-10-03 14:03:21 -07:00
iommu-helper.c
iov_iter.c	instrumented.h: allow instrumenting both sides of copy_from_user()	2022-10-03 14:03:18 -07:00
irq_poll.c
irq_regs.c
is_signed_type_kunit.c	lib: Improve the is_signed_type() kunit test	2022-09-07 16:37:27 -07:00
is_single_threaded.c
kasprintf.c
Kconfig	This update includes the following changes:	2022-10-10 13:04:25 -07:00
Kconfig.debug	Kbuild fixes for v6.1	2022-10-16 11:12:22 -07:00
Kconfig.kasan	kasan: drop CONFIG_KASAN_TAGS_IDENTIFY	2022-10-03 14:02:57 -07:00
Kconfig.kcsan
Kconfig.kfence
Kconfig.kgdb	parisc: Convert PDC console to an early console	2022-10-11 12:01:24 +02:00
Kconfig.kmsan	kmsan: add tests for KMSAN	2022-10-03 14:03:22 -07:00
Kconfig.ubsan
kfifo.c
klist.c
kobject_uevent.c
kobject.c	treewide: use prandom_u32_max() when possible, part 1	2022-10-11 17:42:55 -06:00
kstrtox.c
kstrtox.h
libcrc32c.c
linear_ranges.c
list_debug.c
list_sort.c
list-test.c
llist.c	llist: use try_cmpxchg in llist_add_batch and llist_del_first	2022-09-11 21:55:06 -07:00
locking-selftest-hardirq.h
locking-selftest-mutex.h
locking-selftest-rlock-hardirq.h
locking-selftest-rlock-softirq.h
locking-selftest-rlock.h
locking-selftest-rsem.h
locking-selftest-rtmutex.h
locking-selftest-softirq.h
locking-selftest-spin-hardirq.h
locking-selftest-spin-softirq.h
locking-selftest-spin.h
locking-selftest-wlock-hardirq.h
locking-selftest-wlock-softirq.h
locking-selftest-wlock.h
locking-selftest-wsem.h
locking-selftest.c
lockref.c
logic_iomem.c
logic_pio.c
lru_cache.c
lshrdi3.c
Makefile	- Yu Zhao's Multi-Gen LRU patches are here. They've been under test in	2022-10-10 17:53:04 -07:00
maple_tree.c	Maple Tree: add new data structure	2022-09-26 19:46:13 -07:00
memcat_p.c
memcpy_kunit.c	kunit/memcpy: Avoid pathological compile-time string size	2022-09-07 16:37:48 -07:00
memory-notifier-error-inject.c
memregion.c
memweight.c
muldi3.c
net_utils.c
netdev-notifier-error-inject.c
nlattr.c	netlink: introduce NLA_POLICY_MAX_BE	2022-09-07 12:33:43 +01:00
nmi_backtrace.c
notifier-error-inject.c
notifier-error-inject.h
objagg.c
of-reconfig-notifier-error-inject.c
oid_registry.c
once.c	once: rename _SLOW to _SLEEPABLE	2022-10-03 17:34:32 -07:00
overflow_kunit.c	linux-kselftest-kunit-6.1-rc1	2022-10-06 12:57:55 -07:00
packing.c
parman.c
parser.c
pci_iomap.c
percpu_counter.c
percpu_test.c
percpu-refcount.c
plist.c
pm-notifier-error-inject.c
polynomial.c
radix-tree.c
random32.c	treewide: use get_random_bytes() when possible	2022-10-11 17:42:58 -06:00
ratelimit.c	ratelimit: Fix data-races in ___ratelimit().	2022-08-24 13:46:57 +01:00
rbtree_test.c
rbtree.c
ref_tracker.c
refcount.c
rhashtable.c
sbitmap.c	treewide: use prandom_u32_max() when possible, part 2	2022-10-11 17:42:58 -06:00
scatterlist.c
seq_buf.c
sg_pool.c	lib/sg_pool: change module_init(sg_pool_init) to subsys_initcall	2022-09-23 16:46:19 +02:00
sg_split.c
show_mem.c	mm: reduce noise in show_mem for lowmem allocations	2022-09-26 19:46:29 -07:00
siphash.c
slub_kunit.c
smp_processor_id.c
sort.c
stackdepot.c	stackdepot: reserve 5 extra bits in depot_stack_handle_t	2022-10-03 14:03:18 -07:00
stackinit_kunit.c	lib: stackinit: update reference to kunit-tool	2022-09-30 13:21:22 -06:00
stmp_device.c
string_helpers.c	lib/string_helpers: Introduce parse_int_array_user()	2022-09-05 14:51:46 +01:00
string.c	kmsan: disable strscpy() optimization under KMSAN	2022-10-03 14:03:22 -07:00
strncpy_from_user.c
strnlen_user.c
syscall.c
test_bitmap.c	lib/bitmap: add tests for for_each() loops	2022-10-01 10:22:58 -07:00
test_bitops.c
test_bits.c
test_blackhole_dev.c
test_bpf.c
test_debug_virtual.c
test_dynamic_debug.c	dyndbg: test DECLARE_DYNDBG_CLASSMAP, sysfs nodes	2022-09-07 17:04:49 +02:00
test_firmware.c
test_fprobe.c	treewide: use get_random_u32() when possible	2022-10-11 17:42:58 -06:00
test_fpu.c
test_free_pages.c
test_hash.c
test_hexdump.c	treewide: use prandom_u32_max() when possible, part 1	2022-10-11 17:42:55 -06:00
test_hmm_uapi.h	hmm-tests: add test for migrate_device_range()	2022-10-12 18:51:50 -07:00
test_hmm.c	hmm-tests: add test for migrate_device_range()	2022-10-12 18:51:50 -07:00
test_ida.c
test_kmod.c
test_kprobes.c	treewide: use get_random_u32() when possible	2022-10-11 17:42:58 -06:00
test_linear_ranges.c
test_list_sort.c	treewide: use prandom_u32_max() when possible, part 1	2022-10-11 17:42:55 -06:00
test_lockup.c
test_maple_tree.c	lib/test_maple_tree: add testing for maple tree	2022-09-26 19:46:14 -07:00
test_memcat_p.c
test_meminit.c	lib/test_meminit: add checks for the allocation functions	2022-10-12 18:51:49 -07:00
test_min_heap.c	treewide: use get_random_u32() when possible	2022-10-11 17:42:58 -06:00
test_module.c
test_objagg.c	treewide: use get_random_bytes() when possible	2022-10-11 17:42:58 -06:00
test_parman.c
test_printf.c
test_ref_tracker.c
test_rhashtable.c	treewide: use get_random_u32() when possible	2022-10-11 17:42:58 -06:00
test_scanf.c
test_siphash.c
test_sort.c
test_static_key_base.c
test_static_keys.c
test_string.c
test_strscpy.c
test_sysctl.c
test_ubsan.c
test_user_copy.c
test_uuid.c
test_vmalloc.c	treewide: use get_random_{u8,u16}() when possible, part 2	2022-10-11 17:42:58 -06:00
test_xarray.c
test-kstrtox.c
test-string_helpers.c	treewide: use prandom_u32_max() when possible, part 1	2022-10-11 17:42:55 -06:00
textsearch.c
timerqueue.c
trace_readwrite.c
ts_bm.c
ts_fsm.c
ts_kmp.c
ubsan.c
ubsan.h
ucmpdi2.c
ucs2_string.c
usercopy.c	instrumented.h: allow instrumenting both sides of copy_from_user()	2022-10-03 14:03:18 -07:00
uuid.c	treewide: use get_random_bytes() when possible	2022-10-11 17:42:58 -06:00
vsprintf.c	printk changes for 6.1	2022-10-10 11:24:19 -07:00
win_minmax.c
xarray.c
xxhash.c