d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

geliboot: Use the multi-block functions for AES-XTS.

Browse Source 
Reviewed by:	markj
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D33530
This commit is contained in:
John Baldwin 2022-01-11 14:18:12 -08:00
parent d7f0b3ce6d
commit b156362338
1 changed files with 5 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
stand/libsa/geli/geliboot_crypto.c
View File

@ -42,7 +42,7 @@ geliboot_crypt(u_int algo, geli_op_t enc, u_char *data, size_t datasize,
cipherInstance cipher;
struct aes_xts_ctx xtsctx, *ctxp;
size_t xts_len;
int err, blks, i;
int err, blks;
switch (algo) {
case CRYPTO_AES_CBC:
@ -85,16 +85,12 @@ geliboot_crypt(u_int algo, geli_op_t enc, u_char *data, size_t datasize,
switch (enc) {
case GELI_DECRYPT:
for (i = 0; i < datasize; i += AES_XTS_BLOCKSIZE) {
enc_xform_aes_xts.decrypt(ctxp, data + i,
data + i);
}
enc_xform_aes_xts.decrypt_multi(ctxp, data, data,
datasize);
break;
case GELI_ENCRYPT:
for (i = 0; i < datasize; i += AES_XTS_BLOCKSIZE) {
enc_xform_aes_xts.encrypt(ctxp, data + i,
data + i);
}
enc_xform_aes_xts.encrypt_multi(ctxp, data, data,
datasize);
break;
}
break;