Re: [PATCH 0/2] thunderbolt: HMAC fix and cleanup

From: Mika Westerberg
Date: Mon Aug 11 2025 - 01:59:01 EST


On Thu, Jul 31, 2025 at 12:25:43PM -0700, Eric Biggers wrote:
> Patch 1 fixes the HMAC comparison in the thunderbolt driver to be
> constant-time.
>
> Patch 2 simplifies the HMAC computation in the thunderbolt driver by
> using the library API instead of crypto_shash. Note that this depends
> on the HMAC-SHA256 library API that was merged for v6.17-rc1.
>
> Eric Biggers (2):
> thunderbolt: Compare HMAC values in constant time
> thunderbolt: Use HMAC-SHA256 library instead of crypto_shash

Both applied to thunderbolt.git/next, thanks!