mtd-utils.git/ubifs-utils/mkfs.ubifs/crypto.c, branch v2.3.1

ubifs-utils: Split common source files from mkfs.ubifs

2024-11-11T09:32:45+00:00

Split common source files into common dir from mkfs.ubifs, this is a preparation for importing libubifs(from linux kernel) to replace current UBIFS libs. Signed-off-by: Zhihao Cheng Signed-off-by: David Oberhollenzer

mkfs.ubifs: don't leak temporary buffers

2019-11-10T14:29:59+00:00

Signed-off-by: David Oberhollenzer

mkfs.ubifs: fscrypt: bail from encrypt_block if gen_essiv_salt fails

2019-11-10T13:22:53+00:00

What originally cought my attention was that gen_essiv_salt has a size_t return type and error paths that return -1 on failure. Further investigation revealed that the error value is never checked for. The encrypt_block function doesn't use the return value in any way and simply continues onward. Furthermore, the gen_essiv_salt function has an error case that emits an error message but returns success state. This patch modifes gen_essiv_salt to return an error status in all error branches, changes the return type to ssize_t and adds a check to encrypt_block if gen_essiv_salt fails. Signed-off-by: David Oberhollenzer

mkfs.ubifs: Fix IV selection

2018-11-09T13:24:39+00:00

We need to check for AES being in 128-cbc mode and not 256-cbc. fscrypt supports only 128-cbc and 256-xts so far. Signed-off-by: Richard Weinberger Tested-by: Heiko Schocher Signed-off-by: David Oberhollenzer

mkfs.ubifs: Move RAND_poll to crypto.c

2018-11-01T11:42:25+00:00

Signed-off-by: Richard Weinberger Signed-off-by: David Oberhollenzer

mkfs.ubifs: Compute encryption key descriptor automatically

2018-11-01T11:42:01+00:00

...if none is given. To be compatible with fscryptctl. Signed-off-by: Richard Weinberger Signed-off-by: David Oberhollenzer

mkfs.ubifs: Fixup AES-XTS mode

2018-11-01T11:41:54+00:00

In XTS mode we don't need ESSIV, just use the block number as tweak. Also apply EVP_EncryptFinal(). Signed-off-by: Richard Weinberger Signed-off-by: David Oberhollenzer

mkfs.ubifs: Use correct sizes for keys and hash lengths

2018-11-01T11:41:42+00:00

This works currently by chance since the sizes match, but that might change with different cipher setups. Signed-off-by: Richard Weinberger Signed-off-by: David Oberhollenzer

mkfs.ubifs: Enable Cipher selection

2018-11-01T11:41:34+00:00

No longer hard code AES-128-CBC, we support AES-256-XTS too. Signed-off-by: Richard Weinberger Signed-off-by: David Oberhollenzer

mkfs.ubifs: Correctly use iv lengths in aes-cts mode

2018-11-01T11:41:25+00:00

The key length can be very long, for example in xts mode. So we have to use the right sizes for block and iv lengths. Signed-off-by: Richard Weinberger Signed-off-by: David Oberhollenzer