lkml.org 
[lkml]   [2018]   [Nov]   [5]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
From
Date
SubjectRe: [PATCH] crypto: cts: document NIST standard status
On 5 November 2018 at 13:05, Gilad Ben-Yossef <gilad@benyossef.com> wrote:
> cts(cbc(aes)) as used in the kernel has been added to NIST
> standard as CBC-CS3. Document it as such.
>
> Signed-off-by: Gilad Ben-Yossef <gilad@benyossef.com>
> Suggested-by: Stephan Mueller <smueller@chronox.de>

Acked-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>

> ---
> crypto/Kconfig | 7 +++++--
> 1 file changed, 5 insertions(+), 2 deletions(-)
>
> diff --git a/crypto/Kconfig b/crypto/Kconfig
> index f7a235d..9176023 100644
> --- a/crypto/Kconfig
> +++ b/crypto/Kconfig
> @@ -430,11 +430,14 @@ config CRYPTO_CTS
> help
> CTS: Cipher Text Stealing
> This is the Cipher Text Stealing mode as described by
> - Section 8 of rfc2040 and referenced by rfc3962.
> - (rfc3962 includes errata information in its Appendix A)
> + Section 8 of rfc2040 and referenced by rfc3962
> + (rfc3962 includes errata information in its Appendix A) or
> + CBC-CS3 as defined by NIST in Sp800-38A addendum from Oct 2010.
> This mode is required for Kerberos gss mechanism support
> for AES encryption.
>
> + See: https://csrc.nist.gov/publications/detail/sp/800-38a/addendum/final
> +
> config CRYPTO_ECB
> tristate "ECB support"
> select CRYPTO_BLKCIPHER
> --
> 2.7.4
>

\
 
 \ /
  Last update: 2018-11-05 13:15    [W:0.054 / U:4.940 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site