netdev - Re: [PATCH 1/2] crypto: add CMAC support to CryptoAPI

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date:	Mon, 8 Apr 2013 08:20:52 -0500
From:	Steve French <smfrench@...il.com>
To:	Shirish Pargaonkar <shirishpargaonkar@...il.com>,
	jussi.kivilinna@....fi,
	Steffen Klassert <steffen.klassert@...unet.com>,
	Network Development <netdev@...r.kernel.org>,
	Tom St Denis <tstdenis@...iptictech.com>,
	Herbert Xu <herbert@...dor.apana.org.au>,
	"David S. Miller" <davem@...emloft.net>
Subject: Re: [PATCH 1/2] crypto: add CMAC support to CryptoAPI

This does look promising - AES_CMAC in the crypto libs would be very
helpful for SMB3 for cifs.ko (for the common cases when packet signing
is required, or network file system encryption is turned on for a
share).  Presumably with Windows 8 and Windows 2012 and some very
current NAS these are required.  Apparently AES_CMAC also is much
faster than the algorithms used in previous network file system
dialect levels as well, so will help performance, not just be more
secure.

This general crypto patch is much larger than the cifs.ko specific
patch I had been working on but perhaps it is because of optional
features.


> ---------- Forwarded message ----------
> From: Jussi Kivilinna <jussi.kivilinna@....fi>
> Date: Mon, Apr 8, 2013 at 2:48 AM
> Subject: [PATCH 1/2] crypto: add CMAC support to CryptoAPI
> To: linux-crypto@...r.kernel.org
> Cc: Steffen Klassert <steffen.klassert@...unet.com>, netdev@...r.kernel.org, Tom St Denis <tstdenis@...iptictech.com>, Herbert Xu <herbert@...dor.apana.org.au>, "David S. Miller" <davem@...emloft.net>
>
>
> Patch adds support for NIST recommended block cipher mode CMAC to CryptoAPI.
>
> This work is based on Tom St Denis' earlier patch,
>  http://marc.info/?l=linux-crypto-vger&m=135877306305466&w=2
>
> Cc: Tom St Denis <tstdenis@...iptictech.com>
> Signed-off-by: Jussi Kivilinna <jussi.kivilinna@....fi>
> ---
>  crypto/Kconfig   |   11 ++
>  crypto/Makefile  |    1
>  crypto/cmac.c    |  315 ++++++++++++++++++++++++++++++++++++++++++++++++++++++
>  crypto/tcrypt.c  |   11 ++
>  crypto/testmgr.c |   18 +++
>  crypto/testmgr.h |  125 +++++++++++++++++++++
>  6 files changed, 480 insertions(+), 1 deletion(-)
>  create mode 100644 crypto/cmac.c
>
> diff --git a/crypto/Kconfig b/crypto/Kconfig
> index 6cc27f1..c1142f3 100644
> --- a/crypto/Kconfig
> +++ b/crypto/Kconfig
> @@ -283,6 +283,17 @@ config CRYPTO_XTS
>
>  comment "Hash modes"
>
> +config CRYPTO_CMAC
> +       tristate "CMAC support"
> +       select CRYPTO_HASH
> +       select CRYPTO_MANAGER
> +       help
> +         Cipher-based Message Authentication Code (CMAC) specified by
> +         The National Institute of Standards and Technology (NIST).
> +
> +         https://tools.ietf.org/html/rfc4493
> +         http://csrc.nist.gov/publications/nistpubs/800-38B/SP_800-38B.pdf
>



--
Thanks,

Steve
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html