Whamcloud - gitweb
LU-3289 gss: Fix for SK bulk HMACs 91/21491/4
authorJeremy Filizetti <jeremy.filizetti@gmail.com>
Tue, 19 Jul 2016 00:06:32 +0000 (20:06 -0400)
committerOleg Drokin <oleg.drokin@intel.com>
Thu, 11 Aug 2016 05:51:51 +0000 (05:51 +0000)
commitf0e2fc455895e6fd780be34fe79a2a198fd1651f
treeb21b609f9e99fc1f7eb2b35905ee55c11cbc1021
parent12391888815a4ac57eac474d8b08215408735fd1
LU-3289 gss: Fix for SK bulk HMACs

The original patches for SK failed to provide integrity for bulk RPCs.
It was missing the iov for the encrypted pages and only verifying the
zeroed header portion.  In addition bulk handling in SK needs to
account for the fact that all kiovs in the bulk descriptor are
populated so the HMAC must limit the bytes to the number specified
in bd_nob as encryption happens before the integrity calculation.

Signed-off-by: Jeremy Filizetti <jeremy.filizetti@gmail.com>
Change-Id: I4bb2c62eff2a1c9391c0f2c8409db36257480d4e
Reviewed-on: http://review.whamcloud.com/21491
Reviewed-by: John L. Hammond <john.hammond@intel.com>
Tested-by: Jenkins
Tested-by: Maloo <hpdd-maloo@intel.com>
Reviewed-by: Sebastien Buisson <sbuisson@ddn.com>
Reviewed-by: Oleg Drokin <oleg.drokin@intel.com>
lustre/ptlrpc/gss/gss_sk_mech.c
lustre/utils/gss/sk_utils.c