mirrors/linux
2
0
Fork 0
mirror of https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git synced 2026-09-13 20:44:04 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
56707afb92fee371c0f2e04332c9aa03cdb89793
linux/crypto
History
Anastasia Tishchenko 27b536a2ec crypto: ecc - Fix carry overflow in vli multiplication 
The carry flag calculation fails when r01.m_high is saturated
(0xFFFFFFFFFFFFFFFF) and addition of lower bits overflows.

The condition (r01.m_high < product.m_high) doesn't handle the case
where r01.m_high == product.m_high and an additional carry exists
from lower-bit overflow.

When commit 3c4b23901a ("crypto: ecdh - Add ECDH software support")
introduced crypto/ecc.c, it split the muladd() function in the
micro-ecc library into separate mul_64_64() and add_128_128() helpers.
It seems the check got lost in translation.

Add proper handling for this boundary by accounting for the carry
from the lower addition.

Fixes: 3c4b23901a ("crypto: ecdh - Add ECDH software support")
Signed-off-by: Anastasia Tishchenko <sv3iry@gmail.com>
Cc: stable@vger.kernel.org # v4.8+
Reviewed-by: Lukas Wunner <lukas@wunner.de>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
2026-05-22 20:25:29 +08:00
..
asymmetric_keys
crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents
2026-05-07 16:10:03 +08:00
async_tx
async_xor: use xor_gen
2026-04-02 23:36:21 -07:00
krb5
crypto: krb5 - filter out async aead implementations at alloc
2026-05-15 18:08:49 +08:00
842.c
crypto: comp - Use same definition of context alloc and free ops
2025-09-20 20:21:03 +08:00
acompress.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
adiantum.c
crypto: adiantum - Drop support for asynchronous xchacha ciphers
2026-01-12 11:07:50 -08:00
aead.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
aegis128-core.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
aegis128-neon-inner.c
crypto: aegis128-neon - add header for internal prototypes
2023-05-24 18:12:33 +08:00
aegis128-neon.c
crypto: aegis128-neon - Move to more abstract 'ksimd' guard API
2025-11-12 09:52:01 +01:00
aegis-neon.h
crypto: aegis128-neon - add header for internal prototypes
2023-05-24 18:12:33 +08:00
aegis.h
crypto: aegis - Switch from crypto_ft_tab[] to aes_enc_tab[]
2026-01-12 11:39:58 -08:00
aes.c
crypto: aes - Add cmac, xcbc, and cbcmac algorithms using library
2026-03-09 13:27:20 -07:00
af_alg.c
crypto: af_alg - Cap AEAD AD length to 0x80000000
2026-05-15 18:08:37 +08:00
ahash.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
akcipher.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
algapi.c
Merge tag 'locking-core-2026-02-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2026-02-10 12:28:44 -08:00
algboss.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
algif_aead.c
crypto: af_alg - Remove zero-copy support from skcipher and aead
2026-05-15 18:08:37 +08:00
algif_hash.c
crypto: af_alg - zero initialize memory allocated via sock_kmalloc
2025-10-17 16:03:57 +08:00
algif_rng.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
algif_skcipher.c
crypto: af_alg - limit RX SG extraction by receive buffer budget
2026-04-03 08:54:14 +08:00
anubis.c
crypto: anubis - simplify return statement in anubis_mod_init
2025-09-20 20:21:04 +08:00
api.c
Convert 'alloc_obj' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00
arc4.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
aria_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
authenc.c
crypto: authenc - Correctly pass EINPROGRESS back up to the caller
2025-10-17 16:03:58 +08:00
authencesn.c
crypto: authencesn - Use memcpy_from/to_sglist
2026-05-07 16:10:03 +08:00
blake2b.c
crypto: blake2b - Reimplement using library API
2025-10-29 22:04:24 -07:00
blowfish_common.c
crypto: blowfish - fix typo in comment
2026-01-23 13:48:44 +08:00
blowfish_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
bpf_crypto_skcipher.c
crypto: bpf - Add MODULE_DESCRIPTION for skcipher
2025-03-02 15:19:43 +08:00
camellia_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
cast5_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
cast6_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
cast_common.c
crypto: Add missing MODULE_DESCRIPTION() macros
2024-05-31 17:34:56 +08:00
cbc.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
ccm.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
chacha20poly1305.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
chacha.c
crypto: chacha - register only "-lib" drivers
2025-08-29 09:50:19 -07:00
cipher.c
module: Convert symbol namespace to string literal
2024-12-02 11:34:44 -08:00
cmac.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
compress.h
crypto: acomp - Move stream management into scomp layer
2025-03-15 16:21:22 +08:00
crc32.c
crypto/crc32[c]: register only "-lib" drivers
2025-06-30 09:31:56 -07:00
crc32c.c
crypto: crc32c - Remove another outdated comment
2026-03-17 09:29:22 -07:00
cryptd.c
crypto: cryptd - Remove unused functions
2026-03-27 18:52:44 +09:00
crypto_engine.c
Merge tag 'locking-core-2026-02-08' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2026-02-10 12:28:44 -08:00
crypto_null.c
crypto: crypto_null - Drop unused cipher_null crypto_alg
2026-05-07 16:10:01 +08:00
crypto_user.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
ctr.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
cts.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
deflate.c
crypto: deflate - fix spurious -ENOSPC
2026-03-26 18:10:58 +09:00
des_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
df_sp80090a.c
crypto: drbg - Eliminate use of 'drbg_string' and lists
2026-05-07 16:10:01 +08:00
dh_helper.c
…
dh.c
crypto: dh - Use crypto_stdrng_get_bytes()
2026-04-03 08:56:11 +08:00
drbg.c
crypto: drbg - Remove support for "prediction resistance"
2026-05-15 18:08:47 +08:00
ecb.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
ecc_curve_defs.h
crypto: ecc - Add NIST P521 curve parameters
2024-04-12 15:07:52 +08:00
ecc.c
crypto: ecc - Fix carry overflow in vli multiplication
2026-05-22 20:25:29 +08:00
ecdh_helper.c
…
ecdh.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
ecdsa-p1363.c
crypto: ecdsa - Fix NIST P521 key size reported by KEYCTL_PKEY_QUERY
2025-04-16 15:16:21 +08:00
ecdsa-x962.c
crypto: ecdsa - Fix NIST P521 key size reported by KEYCTL_PKEY_QUERY
2025-04-16 15:16:21 +08:00
ecdsa.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
ecdsasignature.asn1
…
echainiv.c
crypto: geniv - use memcpy_sglist() instead of null skcipher
2025-05-12 13:32:53 +08:00
ecrdsa_defs.h
crypto: ecc - Add nbits field to ecc_curve structure
2024-04-12 15:07:52 +08:00
ecrdsa_params.asn1
…
ecrdsa_pub_key.asn1
…
ecrdsa.c
crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve
2026-05-07 16:10:03 +08:00
essiv.c
crypto: essiv - Check ssize for decryption and in-place encryption
2025-10-09 15:02:35 +08:00
fcrypt.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
fips.c
crypto: fips - annotate fips_enable() with __init to free init memory after boot
2025-12-19 14:47:47 +08:00
gcm.c
crypto: gcm - Use GHASH library instead of crypto_ahash
2026-03-23 16:44:29 -07:00
geniv.c
crypto: geniv - Remove unused spinlock from struct aead_geniv_ctx
2026-04-12 16:47:09 +08:00
hash.h
crypto: remove CONFIG_CRYPTO_STATS
2024-04-02 10:49:38 +08:00
hctr2.c
lib/crypto: gf128hash: Rename polyval module to gf128hash
2026-03-23 13:15:13 -07:00
hmac.c
crypto: hmac - Add ahash support
2025-05-19 13:48:20 +08:00
internal.h
crypto: Enable context analysis
2026-01-05 16:43:36 +01:00
jitterentropy-kcapi.c
Merge tag 'v7.1-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2026-04-15 15:22:26 -07:00
jitterentropy-testing.c
crypto: jitter - output full sample from test interface
2024-10-19 08:44:30 +08:00
jitterentropy.c
crypto: jitterentropy - fix URL
2026-05-15 18:08:36 +08:00
jitterentropy.h
crypto: jitterentropy - Use SHA-3 library
2026-03-09 13:27:21 -07:00
Kconfig
crypto: af_alg - Document the deprecation of AF_ALG
2026-05-07 16:10:03 +08:00
kdf_sp800108.c
crypto: testmgr - replace CRYPTO_MANAGER_DISABLE_TESTS with CRYPTO_SELFTESTS
2025-05-12 13:33:14 +08:00
khazad.c
crypto: khazad - simplify return statement in khazad_mod_init
2025-12-29 08:48:35 +08:00
kpp.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
krb5enc.c
crypto: krb5enc - fix async decrypt skipping hash verification
2026-04-20 16:18:58 +08:00
lrw.c
crypto: Fix several spelling mistakes in comments
2026-03-22 11:17:59 +09:00
lskcipher.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
lz4.c
crypto: comp - Use same definition of context alloc and free ops
2025-09-20 20:21:03 +08:00
lz4hc.c
crypto: comp - Use same definition of context alloc and free ops
2025-09-20 20:21:03 +08:00
lzo-rle.c
crypto: comp - Use same definition of context alloc and free ops
2025-09-20 20:21:03 +08:00
lzo.c
crypto: comp - Use same definition of context alloc and free ops
2025-09-20 20:21:03 +08:00
Makefile
crypto: ecc - Unbreak the build on arm with CONFIG_KASAN_STACK=y
2026-05-15 18:08:47 +08:00
md4.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
md5.c
crypto: md5 - Implement export_core() and import_core()
2025-09-08 09:47:38 -07:00
mldsa.c
crypto: Add ML-DSA crypto_sig support
2026-01-21 22:32:50 +00:00
pcbc.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
pcrypt.c
crypto: pcrypt - Fix handling of MAY_BACKLOG requests
2026-04-16 17:29:40 +08:00
proc.c
crypto: Enable context analysis
2026-01-05 16:43:36 +01:00
ripemd.h
…
rmd160.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
rng.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
rsa_helper.c
…
rsa-pkcs1pad.c
crypto: rsassa-pkcs1 - Migrate to sig_alg backend
2024-10-05 13:22:04 +08:00
rsa.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
rsaprivkey.asn1
treewide: Add SPDX identifier to IETF ASN.1 modules
2023-10-27 18:04:28 +08:00
rsapubkey.asn1
treewide: Add SPDX identifier to IETF ASN.1 modules
2023-10-27 18:04:28 +08:00
rsassa-pkcs1.c
crypto: ecdsa - Fix NIST P521 key size reported by KEYCTL_PKEY_QUERY
2025-04-16 15:16:21 +08:00
scatterwalk.c
Revert "crypto: scatterwalk - Move skcipher walk and use it for memcpy_sglist"
2025-11-22 10:04:50 +08:00
scompress.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
seed.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
seqiv.c
crypto: seqiv - Do not use req->iv after crypto_aead_encrypt
2025-12-19 14:47:06 +08:00
serpent_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
sha1.c
crypto: sha1 - Implement export_core() and import_core()
2025-09-02 19:02:35 -07:00
sha3.c
crypto: sha3 - Reimplement using library API
2025-11-05 20:30:51 -08:00
sha256.c
crypto: sha256 - Implement export_core() and import_core()
2025-09-02 19:02:37 -07:00
sha512.c
crypto: sha512 - Implement export_core() and import_core()
2025-09-02 19:02:39 -07:00
shash.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
sig.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
simd.c
crypto: simd - Remove unused skcipher support
2026-03-22 11:17:59 +09:00
skcipher.c
crypto: api - use designated initializers for report structs
2026-05-15 18:08:48 +08:00
skcipher.h
crypto: remove CONFIG_CRYPTO_STATS
2024-04-02 10:49:38 +08:00
sm3.c
crypto: sm3 - Replace with wrapper around library
2026-03-23 17:50:59 -07:00
sm4_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
sm4.c
move asm/unaligned.h to linux/unaligned.h
2024-10-02 17:23:23 -04:00
streebog_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
tcrypt.c
Merge tag 'v7.1-p1' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2026-04-15 15:22:26 -07:00
tcrypt.h
crypto: tcrypt - Remove unused poly1305 support
2025-11-22 10:04:50 +08:00
tea.c
crypto: Fix several spelling mistakes in comments
2026-03-22 11:17:59 +09:00
testmgr.c
crypto: drbg - Remove support for "prediction resistance"
2026-05-15 18:08:47 +08:00
testmgr.h
crypto: drbg - Remove support for "prediction resistance"
2026-05-15 18:08:47 +08:00
twofish_common.c
…
twofish_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
wp512.c
crypto: wp512 - Use API partial block handling
2025-06-23 16:56:56 +08:00
xcbc.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
xctr.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
xts.c
crypto: Fix several spelling mistakes in comments
2026-03-22 11:17:59 +09:00
xxhash_generic.c
Revert "crypto: run initcalls for generic implementations earlier"
2025-05-05 18:20:44 +08:00
zstd.c
Convert 'alloc_flex' family to use the new default GFP_KERNEL argument
2026-02-21 17:09:51 -08:00