Patch 1 fixes the HMAC comparison in the tpm driver to be constant-time. Patch 2 simplifies the HMAC computation in the tpm driver by using the library API instead of an open-coded HMAC implementation. Note that this depends on the HMAC library API that was merged for v6.17-rc1. Eric Biggers (2): tpm: Compare HMAC values in constant time tpm: Use HMAC-SHA256 library instead of open-coded HMAC drivers/char/tpm/Kconfig | 1 + drivers/char/tpm/tpm2-sessions.c | 104 +++++++++---------------------- 2 files changed, 31 insertions(+), 74 deletions(-) base-commit: d6084bb815c453de27af8071a23163a711586a6c -- 2.50.1
