Re: PROBLEM: AES cryptoloop corruption under recent -mm kernels

From: Pasi Kärkkäinen
Date: Sun Feb 01 2004 - 12:20:51 EST


On Thu, Jan 15, 2004 at 01:16:21PM -0500, James Morris wrote:
> On Thu, 15 Jan 2004, Jari Ruusu wrote:
>
> > Jim,
> > If you want your data secure, you need to re-encrypt your data anyway.
> > Mainline loop crypto implementation has exploitable vulnerability that is
> > equivalent to back door.
>
> What exactly is this vulnerability?
>

http://www.tcs.hut.fi/~mjos/doc/herring061103.pdf

That PDF by Markku-Juhani O. Saarinen discusses about these vulnerabilities,
and has one solution to them.

-- Pasi Kärkkäinen

^
. .
Linux
/ - \
Choice.of.the
.Next.Generation.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/