On Tue, Aug 16, 2005 at 03:53:26PM -0400, Mike Tancsa wrote: +> >Ok, I committed a fix to HEAD. +> >Here is the patch: +> > http://people.freebsd.org/~pjd/patches/rijndael.patch +> +> +> Perhaps a lame question, but would it be possible to craft such a packet from the outside world to send as a DoS ? No, you need to be able to setup wrong key locally. Is local DoS possible? Here answer is more complex and short version is "I believe it is not.". Long version: The bug is in kernel rijndael software code. You cannot setup wrong key via crypto(4), because you can use it only if crypto hardware is available. Another method to configure software crypto from userland is setkey(8), but you need uid 0 for this. -- Pawel Jakub Dawidek http://www.wheel.pl pjd_at_FreeBSD.org http://www.FreeBSD.org FreeBSD committer Am I Evil? Yes, I Am!
This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:38:41 UTC