On Wed, Mar 08, 2023 at 10:05:14AM +0100, Linus Walleij wrote: > > So for Ux500 at least I suppose it would be best to inhibit .import and > .export when using HMAC with long keys unless I can figure out exactly > what the issue is here. I wonder if that is possible? > Or do I have to remove it from the HMAC algos altogether? If the hardware is buggered it's not a big deal if it's just HMAC. Because any HMAC hash can easily be broken down into three underlying hash operations. But let me digest your new information first, and see if we can figure out a way to get it to work. If not then we could just disable hmac (unless we can get confirmation from stm32 hardware we should just disable it for everything in stm32) and I'll fix the generic hmac to actually work with hardware drivers. Thanks, -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
