Commit fbe1a850 authored by Ondrej Mosnacek's avatar Ondrej Mosnacek Committed by Herbert Xu

crypto: lrw - Fix out-of bounds access on counter overflow

When the LRW block counter overflows, the current implementation returns
128 as the index to the precomputed multiplication table, which has 128
entries. This patch fixes it to return the correct value (127).

Fixes: 64470f1b ("[CRYPTO] lrw: Liskov Rivest Wagner, a tweakable narrow block cipher mode")
Cc: <> # 2.6.20+
Reported-by: default avatarEric Biggers <>
Signed-off-by: default avatarOndrej Mosnacek <>
Signed-off-by: default avatarHerbert Xu <>
parent 331351f8
......@@ -143,7 +143,12 @@ static inline int get_index128(be128 *block)
return x + ffz(val);
return x;
* If we get here, then x == 128 and we are incrementing the counter
* from all ones to all zeros. This means we must return index 127, i.e.
* the one corresponding to key2*{ 1,...,1 }.
return 127;
static int post_crypt(struct skcipher_request *req)
Markdown is supported
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment