On Wed, Apr 22, 2015 at 04:11:08PM +0200, Stephan Mueller wrote: > > One more issue to consider: the key wrapping is an authenticated encryption / > decryption. Thus, decryption can return EBADMSG, a feature a normal blkcipher > does not do. We currently have a givdecrypt function that's completely unused. You could easily use that to do the check and then return EBADMSG and zero the output. Cheers, -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html