crypto: vmac - require a block cipher with 128-bit block size
authorEric Biggers <ebiggers@google.com>
Mon, 18 Jun 2018 17:22:37 +0000 (10:22 -0700)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 17 Aug 2018 19:01:10 +0000 (21:01 +0200)
commitef70d14553ed93bb074ecf0c5136076f7481c9a4
tree46804d99b7c0304b1223e64a285c996517f983bf
parente73828389b1c3a8c4ba17f0fc58604a3b8d88af1
crypto: vmac - require a block cipher with 128-bit block size

commit 73bf20ef3df262026c3470241ae4ac8196943ffa upstream.

The VMAC template assumes the block cipher has a 128-bit block size, but
it failed to check for that.  Thus it was possible to instantiate it
using a 64-bit block size cipher, e.g. "vmac(cast5)", causing
uninitialized memory to be used.

Add the needed check when instantiating the template.

Fixes: f1939f7c5645 ("crypto: vmac - New hash algorithm for intel_txt support")
Cc: <stable@vger.kernel.org> # v2.6.32+
Signed-off-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
crypto/vmac.c