Eric Biggers b2d409493f KEYS: trusted_tpm1: Compare HMAC values in constant time ...

[ Upstream commit eed0e3d305530066b4fc5370107cff8ef1a0d229 ]

To prevent timing attacks, HMAC value comparison needs to be constant
time.  Replace the memcmp() with the correct function, crypto_memneq().

[For the Fixes commit I used the commit that introduced the memcmp().
It predates the introduction of crypto_memneq(), but it was still a bug
at the time even though a helper function didn't exist yet.]

Fixes: d00a1c72f7 ("keys: add new trusted key-type")
Cc: stable@vger.kernel.org
Signed-off-by: Eric Biggers <ebiggers@kernel.org>
Reviewed-by: Jarkko Sakkinen <jarkko@kernel.org>
Signed-off-by: Jarkko Sakkinen <jarkko@kernel.org>
[ changed include from crypto/utils.h to crypto/algapi.h ]
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>

2025-11-17 10:36:44 +01:00

..

encrypted-keys

…

big_key.c

…

compat_dh.c

…

compat.c

…

dh.c

…

gc.c

…

internal.h

…

Kconfig

…

key.c

…

keyctl.c

…

keyring.c

…

Makefile

…

permission.c

…

persistent.c

…

proc.c

…

process_keys.c

…

request_key_auth.c

…

request_key.c

…

sysctl.c

…

trusted.c

…

trusted.h

…

user_defined.c

…