Tianjia Zhang a8d18fb4d1 net/tls: Fix authentication failure in CCM mode ... commit 5961060692f8b17cd2080620a3d27b95d2ae05ca upstream. When the TLS cipher suite uses CCM mode, including AES CCM and SM4 CCM, the first byte of the B0 block is flags, and the real IV starts from the second byte. The XOR operation of the IV and rec_seq should be skip this byte, that is, add the iv_offset. Fixes: f295b3ae9f ("net/tls: Add support of AES128-CCM based ciphers") Signed-off-by: Tianjia Zhang <tianjia.zhang@linux.alibaba.com> Cc: Vakul Garg <vakul.garg@nxp.com> Cc: stable@vger.kernel.org # v5.2+ Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2021-12-08 09:03:29 +01:00
..
Kconfig
Makefile
tls_device_fallback.c	net/tls: Fix use-after-free after the TLS device goes down and up	2021-06-10 13:39:18 +02:00
tls_device.c	net/tls: Fix use-after-free after the TLS device goes down and up	2021-06-10 13:39:18 +02:00
tls_main.c	tls: fix replacing proto_ops	2021-12-01 09:19:07 +01:00
tls_proc.c	net: fix proc_fs init handling in af_packet and tls	2021-02-23 15:53:23 +01:00
tls_sw.c	net/tls: Fix authentication failure in CCM mode	2021-12-08 09:03:29 +01:00
tls_toe.c
trace.c
trace.h