Skip to content

Commit cba33db

Browse files
holger-denglerhcahca
authored andcommitted
s390/paes: fix PKEY_TYPE_EP11_AES handling for secure keyblobs
Commit 'fa6999e326fe ("s390/pkey: support CCA and EP11 secure ECC private keys")' introduced PKEY_TYPE_EP11_AES securekey blobs as a supplement to the PKEY_TYPE_EP11 (which won't work in environments with session-bound keys). This new keyblobs has a different maximum size, so fix paes crypto module to accept also these larger keyblobs. Fixes: fa6999e ("s390/pkey: support CCA and EP11 secure ECC private keys") Signed-off-by: Holger Dengler <[email protected]> Reviewed-by: Ingo Franzki <[email protected]> Signed-off-by: Heiko Carstens <[email protected]>
1 parent b9352e4 commit cba33db

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

arch/s390/crypto/paes_s390.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@
3535
* and padding is also possible, the limits need to be generous.
3636
*/
3737
#define PAES_MIN_KEYSIZE 16
38-
#define PAES_MAX_KEYSIZE 320
38+
#define PAES_MAX_KEYSIZE MAXEP11AESKEYBLOBSIZE
3939

4040
static u8 *ctrblk;
4141
static DEFINE_MUTEX(ctrblk_lock);

0 commit comments

Comments
 (0)