Krishna Yenduri wrote: > mark powers wrote: >> Could kcf_get_mech_provider() and kcf_get_hardware_provider() be >> modified to check key length? >> > > I agree. It is cleaner and fits in well with the goal of these routines.
Just to clarify - are you okay with introducing new argument for kcf_get_mech_provider() and kcf_get_hardware_provider() which would pass key pointer and 2 new arguments for kcf_get_dual_provider() which would pass encr_key and mac_key pointers ? Keep in mind that not all callers of those 2 functions work with keying material. v.
