Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1752751AbdI1KfX (ORCPT ); Thu, 28 Sep 2017 06:35:23 -0400 Received: from orcrist.hmeau.com ([104.223.48.154]:47598 "EHLO deadmen.hmeau.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752671AbdI1KfU (ORCPT ); Thu, 28 Sep 2017 06:35:20 -0400 Date: Thu, 28 Sep 2017 18:34:51 +0800 From: Herbert Xu To: James Morris Cc: Eric Biggers , David Howells , Eric Biggers , "Jason A. Donenfeld" , Michael Halcrow , keyrings@vger.kernel.org, linux-security-module@vger.kernel.org, linux-crypto@vger.kernel.org, linux-kernel@vger.kernel.org Subject: Re: [GIT PULL] KEYS: Fixes and crypto fixes Message-ID: <20170928103451.GC8118@gondor.apana.org.au> References: <28036.1506547164@warthog.procyon.org.uk> <20170928001529.GA120911@gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.23 (2014-03-12) Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1883 Lines: 43 On Thu, Sep 28, 2017 at 12:08:36PM +1000, James Morris wrote: > On Wed, 27 Sep 2017, Eric Biggers wrote: > > > On Thu, Sep 28, 2017 at 09:14:58AM +1000, James Morris wrote: > > > On Wed, 27 Sep 2017, David Howells wrote: > > > > > > > (2) Fixing big_key to use safe crypto from Jason A. Donenfeld. > > > > > > > > > > I'm concerned about the lack of crypto review mentioned by Jason -- I > > > wonder if we can get this rewrite any more review from crypto folk. > > > > > > Also, are there any tests for this code? If not, it would be good to make > > > some. > > > > > > > There is a test for the big_key key type in the keyutils test suite. I also > > manually tested Jason's change. And as far as I can tell there isn't actually a > > whole lot to test besides adding a big_key larger than BIG_KEY_FILE_THRESHOLD > > bytes, reading it back, and verifying that the data is unchanged --- since that > > covers the code that was changed. An earlier version of the patch produced a > > warning with CONFIG_DEBUG_SG=y since it put the aead_request on the stack, but > > that's been fixed. > > > > Ok, thanks a lot. > > > It would be great if someone else would comment on the crypto too, but for what > > it's worth I'm satisfied with the crypto changes. GCM is a much better choice > > than ECB as long as we don't repeat (key, IV) pairs --- which we don't. And in > > any case ECB mode makes no sense in this context; you'd need a *very* good > > reason to actually choose to encrypt something with ECB mode. Unfortunately it > > tends to be a favorite of people who don't understand encryption modes... > > Adding Herbert. I think Jason's patch is definitely an improvement over the status quo. Cheers, -- Email: Herbert Xu Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt