Hi Tadeusz,
>> SSL/TLS is prone to this implementation issue and many user-space libraries
>> got this wrong. It would be good to see >>some numbers to back-up the claim
>> of timing differences as not being an issue for this one.
>It is hard to get the implementation right when the protocol
Hi Cristian,
On 03/08/2016 12:20 AM, Cristian Stoica wrote:
> There is also a follow-up in the next paragraph:
>
> "That pretty much sums up the new attack: the side-channel defenses that were
> hoped to be sufficient were found not to be (again). So the answer, this time
> I believe, is to
7, 2016 4:31 PM
To: Cristian Stoica; herb...@gondor.apana.org.au
Cc: linux-crypto@vger.kernel.org; linux-ker...@vger.kernel.org;
da...@davemloft.net
Subject: Re: [PATCH 1/3] crypto: authenc - add TLS type encryption
Hi Cristian,
On 03/07/2016 01:05 AM, Cristian Stoica wrote:
> Hi Tadeusz
This patch adds a new authentication mode for TLS type encryption.
During encrypt it generates auth data + padding and then the
plaintext || authdata || padding is encrypted.
This requires the user to provide extra space for the cipher text.
The required space can be calculated as
outlen = assoc
