1 files changed, 7 insertions, 1 deletions

diff --git a/crypto/ghash-generic.c b/crypto/ghash-generic.c
index 6425b9cd718e..dad9e1f91a78 100644
--- a/crypto/ghash-generic.c
+++ b/crypto/ghash-generic.c
@@ -31,6 +31,7 @@ static int ghash_setkey(struct crypto_shash *tfm,
                         const u8 *key, unsigned int keylen)
 {
         struct ghash_ctx *ctx = crypto_shash_ctx(tfm);
+        be128 k;
 
         if (keylen != GHASH_BLOCK_SIZE) {
                 crypto_shash_set_flags(tfm, CRYPTO_TFM_RES_BAD_KEY_LEN);
@@ -39,7 +40,12 @@ static int ghash_setkey(struct crypto_shash *tfm,
 
         if (ctx->gf128)
                 gf128mul_free_4k(ctx->gf128);
-        ctx->gf128 = gf128mul_init_4k_lle((be128 *)key);
+
+        BUILD_BUG_ON(sizeof(k) != GHASH_BLOCK_SIZE);
+        memcpy(&k, key, GHASH_BLOCK_SIZE); /* avoid violating alignment rules */
+        ctx->gf128 = gf128mul_init_4k_lle(&k);
+        memzero_explicit(&k, GHASH_BLOCK_SIZE);
+
         if (!ctx->gf128)
                 return -ENOMEM;