mirror of
https://mirrors.bfsu.edu.cn/git/linux.git
synced 2024-11-29 07:04:10 +08:00
03d66cfa2a
Rewrite the skcipher API example, changing it to encrypt a buffer with AES-256-XTS. This addresses various problems with the previous example: - It requests a specific driver "cbc-aes-aesni", which is unusual. Normally users ask for "cbc(aes)", not a specific driver. - It encrypts only a single AES block. For the reader, that doesn't clearly distinguish the "skcipher" API from the "cipher" API. - Showing how to encrypt something with bare CBC is arguably a poor choice of example, as it doesn't follow modern crypto trends. Now, usually authenticated encryption is recommended, in which case the user would use the AEAD API, not skcipher. Disk encryption is still a legitimate use for skcipher, but for that usually XTS is recommended. - Many other bugs and poor coding practices, such as not setting CRYPTO_TFM_REQ_MAY_SLEEP, unnecessarily allocating a heap buffer for the IV, unnecessary NULL checks, using a pointless wrapper struct, and forgetting to set an error code in one case. Signed-off-by: Eric Biggers <ebiggers@google.com> Acked-by: Ard Biesheuvel <ard.biesheuvel@linaro.org> Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> |
||
|---|---|---|
| .. | ||
| api-aead.rst | ||
| api-akcipher.rst | ||
| api-digest.rst | ||
| api-intro.txt | ||
| api-kpp.rst | ||
| api-rng.rst | ||
| api-samples.rst | ||
| api-skcipher.rst | ||
| api.rst | ||
| architecture.rst | ||
| asymmetric-keys.txt | ||
| async-tx-api.txt | ||
| conf.py | ||
| crypto_engine.rst | ||
| descore-readme.txt | ||
| devel-algos.rst | ||
| index.rst | ||
| intro.rst | ||
| userspace-if.rst | ||