crypto: stm32 - Forbid 2-key 3DES in FIPS mode (beebb714) · Commits · 戴 / test

This patch forbids the use of 2-key 3DES (K1 == K3) in FIPS mode. Signed-off-by:

drivers/crypto/stm32/stm32-cryp.c

+11 −4

Original line number	Diff line number	Diff line
		@@ -762,9 +762,16 @@ static int stm32_cryp_des_setkey(struct crypto_ablkcipher tfm, const u8 key,
		static int stm32_cryp_tdes_setkey(struct crypto_ablkcipher tfm, const u8 key,
		unsigned int keylen)
		{
		if (keylen != (3 * DES_KEY_SIZE))
		return -EINVAL;
		else
		u32 flags;
		int err;

		flags = crypto_ablkcipher_get_flags(tfm);
		err = __des3_verify_key(&flags, key);
		if (unlikely(err)) {
		crypto_ablkcipher_set_flags(tfm, flags);
		return err;
		}

		return stm32_cryp_setkey(tfm, key, keylen);
		}