Steffen Eiden c6d74eebfb pvimg: Fix hash comparison in SeHdrAadV2::contains_hash ...

Ensure both sides of the hash comparison use the same slice length
by explicitly slicing both the keyslot hash and the input hash to
UV_KEY_HASH_SIZE. Previously, only the keyslot hash was sliced while
comparing against the full input hash reference, which could lead to
incorrect comparisons if the input hash length differs.

This makes the comparison more explicit and ensures we're always
comparing equal-length hashes. This is useful if one hash is a subset of
another, e.g. a sha512 hash truncated to 32 bytes.

Fixes: 89577c2f8c ("pvimg: Use hybrid keys")
Reviewed-by: Marc Hartmayer <marc@linux.ibm.com>
Signed-off-by: Steffen Eiden <seiden@linux.ibm.com>

2026-07-31 09:51:14 +02:00

..

cmd

rust/utils: Replace get_verified_hkds with get_verified_hkds_new

2026-07-28 11:00:01 +02:00

pv_utils

pvimg: Fix hash comparison in SeHdrAadV2::contains_hash

2026-07-31 09:51:14 +02:00

se_img_comps

rust: Fix all cargo clippy findings

2026-06-25 14:14:43 +02:00

cli.rs

pvimg: Use hybrid keys

2026-07-28 11:00:00 +02:00

cmd.rs

pvimg: Use hybrid keys

2026-07-28 11:00:00 +02:00

lib.rs

pvimg: Use hybrid keys

2026-07-28 11:00:00 +02:00

main.rs

rust: Run rustfmt with some experimental options

2026-06-22 16:43:02 +02:00

pv_utils.rs

pvimg: Use hybrid keys

2026-07-28 11:00:00 +02:00

se_img_comps.rs

rust: Run rustfmt with some experimental options

2026-06-22 16:43:02 +02:00

se_img.rs

pv: Require matching versions of request and HKD

2026-07-28 11:00:01 +02:00