intel / intel-ipsec-mb

Intel(R) Multi-Buffer Crypto for IPSec
BSD 3-Clause "New" or "Revised" License
288 stars 87 forks source link

AES-ECB JOB check misses decryption key pointer #100

Closed tkanteck closed 2 years ago

tkanteck commented 2 years ago

JOB structure check for AES-ECB only validates encryption key pointer field. However, on decrypt direction decrypt key pointer field is used. Consequently, if JOB is set up incorrectly for decryption then such error will not be caught.

To fix this, depending on the cipher direction, encrypt or decryption key pointer field should be checked.