Re: Crypto Fixes for 2.6.27

From: Herbert Xu
Date: Sun Sep 14 2008 - 17:35:41 EST


Hi Linus:

This push fixes a security problem in the talitos driver which
was added after 2.6.26. When triggered talitos may cause two
IPsec packets to be generated with the same IV which weakens
the protection offered by encryption. This only affects talitos
users obviously.

Please pull from

git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6.git

or

master.kernel.org:/pub/scm/linux/kernel/git/herbert/crypto-2.6.git


Kim Phillips (1):
crypto: talitos - Avoid consecutive packets going out with same IV

drivers/crypto/talitos.c | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)

Thanks,
--
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/