From beb6a1d6fd05cebe620cb93f30b3246836d7016b Mon Sep 17 00:00:00 2001 From: Ingo Franzki Date: Fri, 17 Jul 2020 11:41:27 +0200 Subject: [PATCH] zkey: Do not check secure key for C-XLATE flag MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The C-XLATE flag determines if the secure key can be used with the CCA Cipher Text Translate2 verb. Cipher Text Translate2 deciphers encrypted data under one key and re-enciphers it under another key without having the data appear in the clear outside the cryptographic coprocessor. Since this is not a security risk, the check can be removed. Signed-off-by: Ingo Franzki Signed-off-by: Jan Höppner --- zkey/pkey.c | 4 ---- 1 file changed, 4 deletions(-) diff --git a/zkey/pkey.c b/zkey/pkey.c index e2aec9e8..bec0fb75 100644 --- a/zkey/pkey.c +++ b/zkey/pkey.c @@ -1773,10 +1773,6 @@ int check_aes_cipher_key(const u8 *key, size_t key_size) "decryption\n"); mismatch = true; } - if (cipherkey->kuf1 & 0x2000) { - printf("INFO: The secure key can be used for data translate\n"); - mismatch = true; - } if (cipherkey->kuf1 & 0x1000) { printf("WARNING: The secure key can only be used in UDXs\n"); mismatch = true;