Re: [PATCH] crypto: chacha20poly1305 - validate the digest size

2017-12-22 Thread Herbert Xu
On Mon, Dec 11, 2017 at 12:15:17PM -0800, Eric Biggers wrote: > From: Eric Biggers > > If the rfc7539 template was instantiated with a hash algorithm with > digest size larger than 16 bytes (POLY1305_DIGEST_SIZE), then the digest > overran the 'tag' buffer in 'struct chachapoly_req_ctx', corrupti

[PATCH] crypto: chacha20poly1305 - validate the digest size

2017-12-11 Thread Eric Biggers
From: Eric Biggers If the rfc7539 template was instantiated with a hash algorithm with digest size larger than 16 bytes (POLY1305_DIGEST_SIZE), then the digest overran the 'tag' buffer in 'struct chachapoly_req_ctx', corrupting the subsequent memory, including 'cryptlen'. This caused a crash dur