⬢ DragonFlyBSD Kernel Audit
DF-3562 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
{
  "finding_id": "DF-3562",
  "file": "sys/crypto/serpent/serpent.c",
  "batch": [
    "sys/crypto/serpent/serpent.c",
    "sys/crypto/twofish/twofish.c",
    "sys/crypto/rijndael/rijndael-api-fst.c",
    "sys/crypto/chachapoly.c"
  ],
  "verdict": "reproduced",
  "impact": "none",
  "confidence": "certain",
  "reproduce": {
    "build": "cd findings/poc/DF-3562 && scp -r . guest:/tmp/ && on guest: cd /tmp/DF-3562 && ./build.sh",
    "run": "cd /tmp/DF-3562 && ./run.sh",
    "expected": "serpent 6349 checks/0 fails; serpoob 3/3 fault demos; twofish 15018/0; rijndael-api 208/0 (+DF-0968 canary PASS, DF-0969 6/6 confirmations); chachapoly 22/0; exit 0. Fix validation: apply fix.diff to a /usr/src copy, rebuild, serpoob -> 0/3, KATs 6349/0."
  },
  "kernel_refs": [
    "sys/crypto/serpent/serpent.c:451-474",
    "sys/crypto/cryptoapi/cryptoapi.c:826-839",
    "sys/crypto/cryptoapi/cryptoapi.c:928-943"
  ],
  "artifacts": [
    "README.md",
    "VERDICT.md",
    "verdict.json",
    "manifest.json",
    "build.sh",
    "run.sh",
    "serpoob.c",
    "fix.diff",
    "build.log",
    "run.log",
    "env.txt",
    "fix_build.log",
    "fix_run.log",
    "wg_e2e.log",
    "verification/serpent/serptest.c",
    "verification/serpent/kats_serpent.txt",
    "verification/twofish/twotest.c",
    "verification/rijndael-api/rijnapitest.c",
    "verification/chachapoly/cptest.c",
    "verification/chachapoly/shim_systm.h",
    "verification/chachapoly/shim_mbuf.h",
    "verification/chachapoly/prep.sh"
  ]
}