]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
crypto: Support multiple nonce lengths for AES-CCM.
authorJohn Baldwin <jhb@FreeBSD.org>
Wed, 6 Oct 2021 21:08:47 +0000 (14:08 -0700)
committerJohn Baldwin <jhb@FreeBSD.org>
Wed, 6 Oct 2021 21:08:47 +0000 (14:08 -0700)
commitae18720d2792287c9ec658404f1a3173014d4979
treeda65ec60155a00af807ef15a57f5ab24166a9397
parentbcb0fd6accc095295765b08b02f5f3b07ea62536
crypto: Support multiple nonce lengths for AES-CCM.

Permit nonces of lengths 7 through 13 in the OCF framework and the
cryptosoft driver.  A helper function (ccm_max_payload_length) can be
used in OCF drivers to reject CCM requests which are too large for the
specified nonce length.

Reviewed by: sef
Sponsored by: Chelsio Communications, The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D32111
share/man/man7/crypto.7
sys/opencrypto/crypto.c
sys/opencrypto/cryptodev.h
sys/opencrypto/cryptosoft.c
sys/opencrypto/xform_aes_icm.c