⬢ DragonFlyBSD Kernel Audit
DF-2367 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
{
  "finding_id": "DF-2367",
  "verdict": "reproduced",
  "impact": "leak",
  "confidence": "likely",
  "reproduce": {
    "build": "guest, as root, from this directory: sh build.sh (nativekernel build + installkernel, builds /root/rijnh); reboot",
    "run": "sh run_idx.sh (5 full 160-index traces + 24x8 idxr1 matrix + T-table kernel addresses + timing probe); results in dmesg tag RIJNH:",
    "expected": "flipping key byte0 00->80 flips round-1 index[0] 00->80 exactly (and Te0 cache line 0 -> line 8); flipping key byte15 flips index[3]; 40/40 clean idxr1 samples satisfy all 16 index==key^pt identities; KAT control 16/16 PASS; timing probe shows overlapping per-op times (honest negative for aggregate timing)"
  },
  "kernel_refs": [
    "sys/crypto/rijndael/rijndael-alg-fst.c:56",
    "sys/crypto/rijndael/rijndael-alg-fst.c:953",
    "sys/crypto/rijndael/rijndael-alg-fst.c:1013",
    "sys/crypto/rijndael/rijndael-alg-fst.c:1132",
    "sys/netproto/802_11/wlan_ccmp/ieee80211_crypto_ccmp.c:399",
    "sys/crypto/cryptoapi/cryptoapi.c:314"
  ],
  "artifacts": [
    "README.md",
    "VERDICT.md",
    "rijndael_harness.c",
    "rijndael_twin_tables.h",
    "rijnh.c",
    "build.sh",
    "run_idx.sh",
    "build_baseline.log",
    "idx_dmesg.txt",
    "idx_run.out",
    "idx_analysis.txt",
    "idx_analysis2.txt",
    "leak_sample.txt",
    "ttables.txt",
    "kat_baseline_dmesg.txt",
    "checkvec.log",
    "checkvec.py",
    "env.txt",
    "verdict.json",
    "manifest.json"
  ]
}