Files
linux-stable-mirror/include/uapi/linux
Nathan Huckleberry 6b2a51ff03 fscrypt: Add HCTR2 support for filename encryption
HCTR2 is a tweakable, length-preserving encryption mode that is intended
for use on CPUs with dedicated crypto instructions.  HCTR2 has the
property that a bitflip in the plaintext changes the entire ciphertext.
This property fixes a known weakness with filename encryption: when two
filenames in the same directory share a prefix of >= 16 bytes, with
AES-CTS-CBC their encrypted filenames share a common substring, leaking
information.  HCTR2 does not have this problem.

More information on HCTR2 can be found here: "Length-preserving
encryption with HCTR2": https://eprint.iacr.org/2021/1441.pdf

Signed-off-by: Nathan Huckleberry <nhuck@google.com>
Reviewed-by: Ard Biesheuvel <ardb@kernel.org>
Acked-by: Eric Biggers <ebiggers@google.com>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
2022-06-10 16:40:18 +08:00
..
2022-02-21 19:33:05 +00:00
2022-04-19 13:13:47 +01:00
2021-11-01 13:36:08 +00:00
2022-06-03 20:09:27 +08:00
2022-05-23 14:31:28 -07:00
2021-11-26 16:48:59 +01:00
2022-06-03 20:09:27 +08:00
2022-04-04 08:55:23 +02:00
2022-03-11 08:28:05 -08:00
2021-11-15 07:53:10 -08:00
2022-03-01 18:29:27 -08:00
2022-06-03 20:09:27 +08:00
2022-05-04 22:50:01 +02:00
2022-05-31 12:44:29 -04:00