Received-SPF: pass (google.com: domain of linux-crypto+bounces-4031-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.80.249 as permitted sender) client-ip=147.75.80.249;
Precedence: bulk
Mime-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset=UTF-8
Date: Sat, 04 May 2024 02:49:58 +0300
Message-Id: <D10EUK2TUF57.1E87NSEA2ZYU@kernel.org>
Cc: "Lukas Wunner" <lukas@wunner.de>, "Stefan Berger"
 <stefanb@linux.ibm.com>, <keyrings@vger.kernel.org>,
 <linux-crypto@vger.kernel.org>, <davem@davemloft.net>,
 <linux-kernel@vger.kernel.org>
Subject: Re: [PATCH] crypto: ecc - Protect ecc_digits_from_bytes from
 reading too many bytes
From: "Jarkko Sakkinen" <jarkko@kernel.org>
To: "Herbert Xu" <herbert@gondor.apana.org.au>
References: <20240426225553.3038070-1-stefanb@linux.ibm.com>
 <D0W3MTR0CY08.Q2UIYE4N274L@kernel.org> <Zi8UXS1MD5V58dnN@wunner.de>
 <D0WIZTMRKHSJ.1Z4ZV54DLVWAB@kernel.org>
 <ZjS83WIPglXiUH3n@gondor.apana.org.au>
In-Reply-To: <ZjS83WIPglXiUH3n@gondor.apana.org.au>

On Fri May 3, 2024 at 1:30 PM EEST, Herbert Xu wrote:
> On Mon, Apr 29, 2024 at 01:14:15PM +0300, Jarkko Sakkinen wrote:
> >=20
> > Yeah, sure, that would be even better, or even memzero_explicit()?
>
> memzero_explicit should only be used for stack memory.

BTW, is this in kernel documentation? It's a guideline really
and would be nice to have reminder, that's all.

BR, Jarkko