[U-Boot] aes: Allow non-zero initialization vector

Tom Rini trini at konsulko.com
Mon Jan 29 20:20:46 UTC 2018


On Wed, Jan 03, 2018 at 03:43:56PM +0300, Андрей Мозжухин wrote:

> AES encryption in CBC mode, in most cases, must be used with random
> initialization vector. Using the same key and initialization vector several
> times is weak and must be avoided.
> 
> Added iv parameter to the aes_cbc_encrypt_blocks and aes_cbc_decrypt_blocks
> functions for passing initialization vector.
> 
> Command 'aes' now also require the initialization vector parameter.
> 
> Signed-off-by: Andrey Mozzhuhin <amozzhuhin at yandex.ru>

Applied to u-boot/master, thanks!

-- 
Tom
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: not available
URL: <http://lists.denx.de/pipermail/u-boot/attachments/20180129/eba38214/attachment.sig>


More information about the U-Boot mailing list