[Bug 1860574] Re: [UBUNTU 20.04] zkey: Fix display of clear key size for XTS keys

[Frank Heimes]

** Also affects: ubuntu-z-systems
   Importance: Undecided
       Status: New

** Package changed: linux (Ubuntu) => s390-tools (Ubuntu)

** Changed in: ubuntu-z-systems
   Importance: Undecided => High

** Changed in: ubuntu-z-systems
       Status: New => Triaged

** Changed in: ubuntu-z-systems
     Assignee: (unassigned) => Canonical Foundations Team (canonical-foundations)

** Also affects: s390-tools (Ubuntu Bionic)
   Importance: Undecided
       Status: New

** Also affects: s390-tools (Ubuntu Focal)
   Importance: Undecided
     Assignee: Skipper Bug Screeners (skipper-screen-team)
       Status: New

** Also affects: s390-tools (Ubuntu Eoan)
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to s390-tools in Ubuntu.
https://bugs.launchpad.net/bugs/1860574

Title:
  [UBUNTU 20.04] zkey: Fix display of clear key size for XTS keys

Status in Ubuntu on IBM z Systems:
  Triaged
Status in s390-tools package in Ubuntu:
  New
Status in s390-tools source package in Bionic:
  New
Status in s390-tools source package in Eoan:
  New
Status in s390-tools source package in Focal:
  New

Bug description:
  Description:   zkey: Fix display of clear key size for XTS keys
  Symptom:       The 'zkey list' command shows bogus values for the
                 keys 'Clear key size' for XTS keys of type CCA-AESDATA
                 or CCA-AESCIPHER.
  Problem:       XTS keys consist of 2 keys concatenated to each other.
                 To calculate the clear key size, the clear key size of
                 both keys must be added. The code does not address the
                 second key correctly, and thus reads the clear key size
                 of the second key from an invalid memory location. This
                 results in bogus values reported as clear key size.
                 This bug has been introduced with feature "Cipher
                 key support" with commit 298fab68fee8 "zkey: Preparations 
                 for introducing a new key type".
  Solution:      Correct the addressing of the second key.
  Reproduction:  Generate an XTS key of type CCA-AESDATA or CCA-AESCIPHER
                 and then run 'zkey list'.

  Upstream commit:
  https://github.com/ibm-s390-tools/s390-tools/commit/e7f446432b92b293e758099842843cfb1f18fa97

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu-z-systems/+bug/1860574/+subscriptions