]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
dm crypt: rewrite (wipe) key in crypto layer using random data
authorOndrej Kozina <okozina@redhat.com>
Mon, 24 Apr 2017 12:21:53 +0000 (14:21 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sat, 20 May 2017 12:49:43 +0000 (14:49 +0200)
commitf38faf569e923b121d666e59c61ebfe14e9c51cb
tree19ac057534e1ba848d48864906231a66fac4ba72
parent6ab60d2b26dd94a7918bd1da902c2b9bea18ba10
dm crypt: rewrite (wipe) key in crypto layer using random data

commit c82feeec9a014b72c4ffea36648cfb6f81cc1b73 upstream.

The message "key wipe" used to wipe real key stored in crypto layer by
rewriting it with zeroes.  Since commit 28856a9 ("crypto: xts -
consolidate sanity check for keys") this no longer works in FIPS mode
for XTS.

While running in FIPS mode the crypto key part has to differ from the
tweak key.

Fixes: 28856a9 ("crypto: xts - consolidate sanity check for keys")
Signed-off-by: Ondrej Kozina <okozina@redhat.com>
Signed-off-by: Mike Snitzer <snitzer@redhat.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/md/dm-crypt.c