From mboxrd@z Thu Jan 1 00:00:00 1970 From: Sabrina Dubroca Subject: [PATCH net 0/3] tls: don't leave keys in kernel memory Date: Wed, 5 Sep 2018 15:21:42 +0200 Message-ID: Cc: Sabrina Dubroca , Aviad Yehezkel , Boris Pismenny , Dave Watson , Ilya Lesokhin To: netdev@vger.kernel.org Return-path: Received: from mx3-rdu2.redhat.com ([66.187.233.73]:59978 "EHLO mx1.redhat.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1726008AbeIERv6 (ORCPT ); Wed, 5 Sep 2018 13:51:58 -0400 Sender: netdev-owner@vger.kernel.org List-ID: There are a few places where the RX/TX key for a TLS socket is copied to kernel memory. This series clears those memory areas when they're no longer needed. Sabrina Dubroca (3): tls: don't copy the key out of tls12_crypto_info_aes_gcm_128 tls: clear key material from kernel memory when do_tls_setsockopt_conf fails tls: zero the crypto information from tls_context before freeing include/net/tls.h | 1 + net/tls/tls_main.c | 16 +++++++++++++--- net/tls/tls_sw.c | 5 +---- 3 files changed, 15 insertions(+), 7 deletions(-) -- 2.18.0