David Howells
7650cb80e4
X.509: Handle midnight alternative notation in GeneralizedTime
...
The ASN.1 GeneralizedTime object carries an ISO 8601 format date and time.
The time is permitted to show midnight as 00:00 or 24:00 (the latter being
equivalent of 00:00 of the following day).
The permitted value is checked in x509_decode_time() but the actual
handling is left to mktime64().
Without this patch, certain X.509 certificates will be rejected and could
lead to an unbootable kernel.
Note that with this patch we also permit any 24:mm:ss time and extend this
to UTCTime, which whilst not strictly correct don't permit much leeway in
fiddling date strings.
Reported-by: Rudolf Polzer <rpolzer@google.com>
Signed-off-by: David Howells <dhowells@redhat.com>
Acked-by: Arnd Bergmann <arnd@arndb.de>
cc: David Woodhouse <David.Woodhouse@intel.com>
cc: John Stultz <john.stultz@linaro.org>
2016-02-29 14:29:40 +00:00
..
asymmetric_keys
X.509: Handle midnight alternative notation in GeneralizedTime
2016-02-29 14:29:40 +00:00
async_tx
async_tx: use GFP_NOWAIT rather than GFP_IO
2016-01-07 11:06:18 +05:30
.gitignore
crypto: rsa - add .gitignore for crypto/*.-asn1.[ch] files
2015-06-25 23:29:24 +08:00
842.c
crypto: 842 - change 842 alg to use software
2015-05-11 15:06:43 +08:00
ablk_helper.c
crypto: cryptd - process CRYPTO_ALG_INTERNAL
2015-03-31 21:21:04 +08:00
ablkcipher.c
crypto: skcipher - Copy iv from desc even for 0-len walks
2015-12-09 20:16:22 +08:00
aead.c
crypto: aead - Remove CRYPTO_ALG_AEAD_NEW flag
2015-08-17 16:53:53 +08:00
aes_generic.c
crypto: add missing crypto module aliases
2015-01-13 22:29:11 +11:00
af_alg.c
crypto: af_alg - Forbid bind(2) when nokey child sockets are present
2016-01-18 18:16:33 +08:00
ahash.c
crypto: hash - Add crypto_ahash_has_setkey
2016-01-18 18:16:11 +08:00
akcipher.c
crypto: akcipher - add akcipher declarations needed by templates.
2015-12-09 20:03:57 +08:00
algapi.c
crypto: api - use list_first_entry_or_null and list_next_entry
2015-11-23 20:55:50 +08:00
algboss.c
crypto: algboss - Remove reference to nivaead
2015-08-17 16:53:41 +08:00
algif_aead.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
2016-01-12 18:57:02 -08:00
algif_hash.c
crypto: algif_hash - wait for crypto_ahash_init() to complete
2016-01-30 22:05:15 +08:00
algif_rng.c
crypto: algif_rng - Remove obsolete const-removal cast
2015-04-22 09:30:21 +08:00
algif_skcipher.c
Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6
2016-01-22 11:58:43 -08:00
ansi_cprng.c
crypto: ansi_cprng - Convert to new rng interface
2015-04-22 09:30:18 +08:00
anubis.c
crypto: prefix module autoloading with "crypto-"
2014-11-24 22:43:57 +08:00
api.c
crypto: api - Only abort operations on fatal signal
2015-10-20 21:59:25 +08:00
arc4.c
crypto: prefix module autoloading with "crypto-"
2014-11-24 22:43:57 +08:00
authenc.c
crypto: aead - Remove CRYPTO_ALG_AEAD_NEW flag
2015-08-17 16:53:53 +08:00
authencesn.c
crypto: aead - Remove CRYPTO_ALG_AEAD_NEW flag
2015-08-17 16:53:53 +08:00
blkcipher.c
crypto: skcipher - Copy iv from desc even for 0-len walks
2015-12-09 20:16:22 +08:00
blowfish_common.c
blowfish_generic.c
crypto: add missing crypto module aliases
2015-01-13 22:29:11 +11:00
camellia_generic.c
crypto: add missing crypto module aliases
2015-01-13 22:29:11 +11:00
cast5_generic.c
crypto: add missing crypto module aliases
2015-01-13 22:29:11 +11:00
cast6_generic.c
crypto: add missing crypto module aliases
2015-01-13 22:29:11 +11:00
cast_common.c
cbc.c
crypto: include crypto- module prefix in template
2014-11-26 20:06:30 +08:00
ccm.c
crypto: replace scatterwalk_sg_chain with sg_chain
2015-08-17 08:12:54 -06:00
chacha20_generic.c
crypto: chacha20 - Export common ChaCha20 helpers
2015-07-17 21:20:21 +08:00
chacha20poly1305.c
crypto: chacha20poly1305 - Skip encryption/decryption for 0-len
2015-12-09 20:16:04 +08:00
chainiv.c
crypto: chainiv - Offer normal cipher functionality without RNG
2015-06-22 15:49:28 +08:00
cipher.c
cmac.c
crypto: include crypto- module prefix in template
2014-11-26 20:06:30 +08:00
compress.c
crc32.c
crypto: prefix module autoloading with "crypto-"
2014-11-24 22:43:57 +08:00
crc32c_generic.c
crypto: crc32c - Fix crc32c soft dependency
2016-01-19 15:52:10 +08:00
crct10dif_common.c
crct10dif_generic.c
crypto: add missing crypto module aliases
2015-01-13 22:29:11 +11:00
cryptd.c
crypto: cryptd - Assign statesize properly
2015-12-04 22:29:53 +08:00
crypto_null.c
crypto: null - Add default null skcipher
2015-05-22 11:25:55 +08:00
crypto_user.c
crypto: api - Only abort operations on fatal signal
2015-10-20 21:59:25 +08:00
crypto_wq.c
ctr.c
crypto: include crypto- module prefix in template
2014-11-26 20:06:30 +08:00
cts.c
crypto: cts - Weed out non-CBC algorithms
2015-01-20 14:44:15 +11:00
deflate.c
crypto: prefix module autoloading with "crypto-"
2014-11-24 22:43:57 +08:00
des_generic.c
crypto: add missing crypto module aliases
2015-01-13 22:29:11 +11:00
drbg.c
crypto: drbg - constify drbg_state_ops structures
2015-12-10 22:39:44 +08:00
ecb.c
crypto: include crypto- module prefix in template
2014-11-26 20:06:30 +08:00
echainiv.c
crypto: echainiv - Use generic geniv init/exit helpers
2015-08-17 16:53:46 +08:00
eseqiv.c
crypto: eseqiv - Offer normal cipher functionality without RNG
2015-06-22 15:49:28 +08:00
fcrypt.c
crypto: prefix module autoloading with "crypto-"
2014-11-24 22:43:57 +08:00
fips.c
crypto: fips - Move fips_enabled sysctl into fips.c
2015-04-23 14:18:09 +08:00
gcm.c
Merge branch 'for-4.3/sg' of git://git.kernel.dk/linux-block
2015-09-02 13:22:38 -07:00
gf128mul.c
ghash-generic.c
crypto: add missing crypto module aliases
2015-01-13 22:29:11 +11:00
hash_info.c
keys, trusted: select hash algorithm for TPM2 chips
2015-12-20 15:27:12 +02:00
hmac.c
crypto: include crypto- module prefix in template
2014-11-26 20:06:30 +08:00
internal.h
crypto: api - Remove linux/fips.h from internal.h
2015-04-23 14:18:10 +08:00
jitterentropy-kcapi.c
crypto: jitterentropy - remove unnecessary information from a comment
2015-10-14 22:23:16 +08:00
jitterentropy.c
crypto: jitterentropy - Delete unnecessary checks before the function call "kzfree"
2015-06-25 23:18:33 +08:00
Kconfig
crypto: ghash,poly1305 - select CRYPTO_HASH where needed
2016-01-26 22:27:31 +08:00
keywrap.c
crypto: keywrap - add key wrapping block chaining mode
2015-10-15 21:05:04 +08:00
khazad.c
crypto: prefix module autoloading with "crypto-"
2014-11-24 22:43:57 +08:00
lrw.c
crypto: include crypto- module prefix in template
2014-11-26 20:06:30 +08:00
lz4.c
crypto: prefix module autoloading with "crypto-"
2014-11-24 22:43:57 +08:00
lz4hc.c
crypto: prefix module autoloading with "crypto-"
2014-11-24 22:43:57 +08:00
lzo.c
crypto: prefix module autoloading with "crypto-"
2014-11-24 22:43:57 +08:00
Makefile
crypto: rsa - RSA padding algorithm
2015-12-09 20:03:57 +08:00
mcryptd.c
crypto: mcryptd - use list_first_entry_or_null()
2015-11-23 20:55:51 +08:00
md4.c
crypto: prefix module autoloading with "crypto-"
2014-11-24 22:43:57 +08:00
md5.c
crypto: hash - add zero length message hash for shax and md5
2015-12-22 20:43:35 +08:00
memneq.c
michael_mic.c
crypto: prefix module autoloading with "crypto-"
2014-11-24 22:43:57 +08:00
pcbc.c
crypto: include crypto- module prefix in template
2014-11-26 20:06:30 +08:00
pcompress.c
crypto: pcomp - Use crypto_alg_extsize helper
2015-04-21 10:19:55 +08:00
pcrypt.c
crypto: aead - Remove CRYPTO_ALG_AEAD_NEW flag
2015-08-17 16:53:53 +08:00
poly1305_generic.c
crypto: poly1305 - Export common Poly1305 helpers
2015-07-17 21:20:26 +08:00
proc.c
crypto: fips - Move fips_enabled sysctl into fips.c
2015-04-23 14:18:09 +08:00
ripemd.h
rmd128.c
crypto: prefix module autoloading with "crypto-"
2014-11-24 22:43:57 +08:00
rmd160.c
crypto: prefix module autoloading with "crypto-"
2014-11-24 22:43:57 +08:00
rmd256.c
crypto: prefix module autoloading with "crypto-"
2014-11-24 22:43:57 +08:00
rmd320.c
crypto: prefix module autoloading with "crypto-"
2014-11-24 22:43:57 +08:00
rng.c
crypto: rng - Do not free default RNG when it becomes unused
2015-06-22 15:49:18 +08:00
rsa-pkcs1pad.c
crypto: rsa-pkcs1pad - don't allocate buffer on stack
2015-12-22 20:43:24 +08:00
rsa.c
crypto: rsa - RSA padding algorithm
2015-12-09 20:03:57 +08:00
rsa_helper.c
crypto: akcipher - Changes to asymmetric key API
2015-10-14 22:23:16 +08:00
rsaprivkey.asn1
crypto: akcipher - Changes to asymmetric key API
2015-10-14 22:23:16 +08:00
rsapubkey.asn1
crypto: akcipher - Changes to asymmetric key API
2015-10-14 22:23:16 +08:00
salsa20_generic.c
crypto: add missing crypto module aliases
2015-01-13 22:29:11 +11:00
scatterwalk.c
crypto: scatterwalk - Hide PageSlab call to optimise away flush_dcache_page
2015-06-03 10:51:25 +08:00
seed.c
crypto: prefix module autoloading with "crypto-"
2014-11-24 22:43:57 +08:00
seqiv.c
crypto: seqiv - Use generic geniv init/exit helpers
2015-08-17 16:53:46 +08:00
serpent_generic.c
crypto: add missing crypto module aliases
2015-01-13 22:29:11 +11:00
sha1_generic.c
crypto: hash - add zero length message hash for shax and md5
2015-12-22 20:43:35 +08:00
sha256_generic.c
crypto: hash - add zero length message hash for shax and md5
2015-12-22 20:43:35 +08:00
sha512_generic.c
crypto: sha512-generic - move to generic glue implementation
2015-04-10 21:39:41 +08:00
shash.c
crypto: shash - Fix has_key setting
2016-01-27 20:25:13 +08:00
skcipher.c
crypto: skcipher - Add crypto_skcipher_has_setkey
2016-01-18 18:16:12 +08:00
tcrypt.c
crypto: tcrypt - fix keysize argument of test_aead_speed for gcm(aes)
2015-11-23 20:55:52 +08:00
tcrypt.h
crypto: tcrypt - Add ChaCha20/Poly1305 speed tests
2015-07-17 21:20:20 +08:00
tea.c
crypto: add missing crypto module aliases
2015-01-13 22:29:11 +11:00
testmgr.c
crypto: keywrap - add testmgr support
2015-10-15 21:05:08 +08:00
testmgr.h
crypto: keywrap - add testmgr support
2015-10-15 21:05:08 +08:00
tgr192.c
crypto: add missing crypto module aliases
2015-01-13 22:29:11 +11:00
twofish_common.c
twofish_generic.c
crypto: add missing crypto module aliases
2015-01-13 22:29:11 +11:00
vmac.c
crypto: include crypto- module prefix in template
2014-11-26 20:06:30 +08:00
wp512.c
crypto: add missing crypto module aliases
2015-01-13 22:29:11 +11:00
xcbc.c
crypto: include crypto- module prefix in template
2014-11-26 20:06:30 +08:00
xor.c
xts.c
crypto: include crypto- module prefix in template
2014-11-26 20:06:30 +08:00
zlib.c
crypto: pcomp - Constify (de)compression parameters
2015-05-01 11:16:37 +08:00