arm64/crypto: fix data corruption bug in GHASH algorithm
authorArd Biesheuvel <ard.biesheuvel@linaro.org>
Mon, 16 Jun 2014 10:02:15 +0000 (11:02 +0100)
committerJP Abgrall <jpa@google.com>
Thu, 28 Aug 2014 17:22:25 +0000 (10:22 -0700)
commit0680e92ef3a88e4168aee4cf1b95130373f25b25
tree78f1b3edfba6d8ec6b05777422b514cb4b8281ee
parenta3025a1a97c04833415b658283702e37648a7b7e
arm64/crypto: fix data corruption bug in GHASH algorithm

This fixes a bug in the GHASH algorithm resulting in the calculated hash to be
incorrect if the input is presented in chunks whose size is not a multiple of
16 bytes.

Signed-off-by: Ard Biesheuvel <ard.biesheuvel@linaro.org>
Fixes: fdd2389457b2 ("arm64/crypto: GHASH secure hash using ARMv8 Crypto Extensions")
Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>
arch/arm64/crypto/ghash-ce-glue.c