Go to file
Rob Norris fea534d1d0 gcm_avx_init: zero the ghash state after hashing the IV
IVs != 96 bits get hashed with GHASH to bring them to 96 bits. Any call
to GHASH will mix the ghash state in gcm_ghash. This is expected to be
zero at first use in an encrypt or decrypt operation, so it needs to be
zeroed after using GHASH in setup.

gcm_init() does this, but gcm_avx_init() zeroed it before setup, not
after, resulting in incorrect encrypt/decrypt results when using AVX GCM
with an IV != 96 bits.

OpenZFS _always_ uses a 96 bit IV (ZIO_DATA_IV_LEN) so this will never
have been hit in any real-world use, which is extremely fortunate, as we
would have incorrectly-encrypted data on-disk. Still, as long as we have
this code here we should make sure it's correct.

Thanks-to: Joel Low <joel@joelsplace.sg>
Sponsored-by: https://despairlabs.com/sponsor/
Signed-off-by: Rob Norris <robn@despairlabs.com>
Reviewed-by: Tony Hutter <hutter2@llnl.gov>
Reviewed-by: Tino Reichardt <milky-zfs@mcmilk.de>
Reviewed-by: Attila Fülöp <attila@fueloep.org>
2025-04-16 09:59:45 -07:00
.github runners: Fix tarball build for zfs-qemu-packages workflow (#17158) 2025-04-16 09:59:45 -07:00
cmd Fixed zfs_notify_email for programs like sendmail 2025-04-16 09:59:45 -07:00
config config: fix ZFS_LINUX_TEST_RESULT_SYMBOL with --enable-linux-builtin 2025-04-16 09:59:45 -07:00
contrib debian: Add libtirpc-dev dependency (#17220) 2025-04-16 09:59:45 -07:00
etc SPDX: license tags: MIT 2025-04-16 09:59:44 -07:00
include Fix FDT rollback to not overwrite unnecessary fields (#17205) 2025-04-16 09:59:45 -07:00
lib Fix memory leaks in pool properties handling 2025-04-16 09:59:45 -07:00
man Disambiguate reference to kibibytes, not kilobytes 2025-04-16 09:59:45 -07:00
module gcm_avx_init: zero the ghash state after hashing the IV 2025-04-16 09:59:45 -07:00
rpm Support for cross-compiling kernel modules 2025-01-05 17:31:26 -08:00
scripts ZTS: Fix zpool_status_features_001_pos local test (#17174) 2025-04-16 09:59:45 -07:00
tests Multiple printf() size fixes (#17199) 2025-04-16 09:59:45 -07:00
udev SPDX: license tags: CDDL-1.0 2025-04-16 09:59:44 -07:00
.cirrus.yml Update FreeBSD CI images 2025-04-02 17:05:31 -07:00
.editorconfig Add an .editorconfig; document git whitespace settings 2020-01-27 13:32:52 -08:00
.gitignore Packaging: Auto-generate changelog during configure (#15528) 2023-11-16 08:58:47 -08:00
.gitmodules .gitmodules: link to openzfs github repository 2021-04-12 09:37:23 -07:00
.mailmap AUTHORS: refresh with recent new contributors 2025-04-02 17:03:01 -07:00
AUTHORS AUTHORS: refresh with recent new contributors 2025-04-02 17:03:01 -07:00
autogen.sh Ubuntu 22.04 integration: ShellCheck 2022-11-18 11:24:48 -08:00
CODE_OF_CONDUCT.md Documentation corrections 2022-12-22 11:34:28 -08:00
configure.ac SPDX: license tags: CDDL-1.0 2025-04-16 09:59:44 -07:00
copy-builtin copy-builtin: add hooks with sed/>> 2022-05-10 10:17:43 -07:00
COPYRIGHT Fix typos 2020-06-09 21:24:09 -07:00
LICENSE Update build system and packaging 2018-05-29 16:00:33 -07:00
Makefile.am spdxcheck: program to check SPDX license tags 2025-04-16 09:59:45 -07:00
META Linux 6.14 compat: META (#17098) (#17172) 2025-04-02 16:56:33 -07:00
NEWS Fix NEWS file 2020-08-26 21:44:41 -07:00
NOTICE Update build system and packaging 2018-05-29 16:00:33 -07:00
README.md FreeBSD: remove support for FreeBSD < 13.0-RELEASE (#16372) 2024-08-05 16:56:45 -07:00
RELEASES.md Update RELEASES.md LTS release to 2.2 2025-02-25 22:27:10 +05:00
TEST Remove CI builder customization from TEST 2020-03-16 10:46:03 -07:00
zfs.release.in Move zfs.release generation to configure step 2012-07-12 12:22:51 -07:00

img

OpenZFS is an advanced file system and volume manager which was originally developed for Solaris and is now maintained by the OpenZFS community. This repository contains the code for running OpenZFS on Linux and FreeBSD.

codecov coverity

Official Resources

Installation

Full documentation for installing OpenZFS on your favorite operating system can be found at the Getting Started Page.

Contribute & Develop

We have a separate document with contribution guidelines.

We have a Code of Conduct.

Release

OpenZFS is released under a CDDL license. For more details see the NOTICE, LICENSE and COPYRIGHT files; UCRL-CODE-235197

Supported Kernels

  • The META file contains the officially recognized supported Linux kernel versions.
  • Supported FreeBSD versions are any supported branches and releases starting from 13.0-RELEASE.