Vladimir Kotal wrote:
> Krishna Yenduri wrote:
>> mark powers wrote:
>>> Could kcf_get_mech_provider() and kcf_get_hardware_provider() be 
>>> modified to check key length?
>>>
>>
>> I agree. It is cleaner and fits in well with the goal of these routines.
>
> Just to clarify - are you okay with introducing new argument for 
> kcf_get_mech_provider() and kcf_get_hardware_provider() which would 
> pass key pointer and 2 new arguments for kcf_get_dual_provider() which 
> would pass encr_key and mac_key pointers ?

I'm okay with it.

>
> Keep in mind that not all callers of those 2 functions work with 
> keying material.

and that would be the case of digest.

>
>
> v.


Reply via email to