Patch 1 fixes the HMAC comparison in the thunderbolt driver to be constant-time. Patch 2 simplifies the HMAC computation in the thunderbolt driver by using the library API instead of crypto_shash. Note that this depends on the HMAC-SHA256 library API that was merged for v6.17-rc1. Eric Biggers (2): thunderbolt: Compare HMAC values in constant time thunderbolt: Use HMAC-SHA256 library instead of crypto_shash drivers/thunderbolt/Kconfig | 4 ++-- drivers/thunderbolt/domain.c | 45 ++++++------------------------------ 2 files changed, 9 insertions(+), 40 deletions(-) base-commit: d6084bb815c453de27af8071a23163a711586a6c -- 2.50.1
