Daniel Axtens <dja@xxxxxxxxxx> writes: > The original assembly imported from OpenSSL has two copy-paste > errors in handling CTR mode. When dealing with a 2 or 3 block tail, > the code branches to the CBC decryption exit path, rather than to > the CTR exit path. > > This leads to corruption of the IV, which leads to subsequent blocks > being corrupted. > > This can be detected with libkcapi test suite, which is available at > https://github.com/smuellerDD/libkcapi > > Reported-by: Ondrej Mosnáček <omosnacek@xxxxxxxxx> > Fixes: 5c380d623ed3 ("crypto: vmx - Add support for VMS instructions by ASM") > Cc: stable@xxxxxxxxxxxxxxx > Signed-off-by: Daniel Axtens <dja@xxxxxxxxxx> Thanks, this fixes kcapi-enc-test.sh for me. Tested-by: Michael Ellerman <mpe@xxxxxxxxxxxxxx> cheers
