crypto/tcrypt.c

   1 /*
   2  * Quick & dirty crypto testing module.
   3  *
   4  * This will only exist until we have a better testing mechanism
   5  * (e.g. a char device).
   6  *
   7  * Copyright (c) 2002 James Morris <jmorris@intercode.com.au>
   8  * Copyright (c) 2002 Jean-Francois Dive <jef@linuxbe.org>
   9  * Copyright (c) 2007 Nokia Siemens Networks
  10  *
  11  * Updated RFC4106 AES-GCM testing.
  12  *    Authors: Aidan O'Mahony (aidan.o.mahony@intel.com)
  13  *             Adrian Hoban <adrian.hoban@intel.com>
  14  *             Gabriele Paoloni <gabriele.paoloni@intel.com>
  15  *             Tadeusz Struk (tadeusz.struk@intel.com)
  16  *             Copyright (c) 2010, Intel Corporation.
  17  *
  18  * This program is free software; you can redistribute it and/or modify it
  19  * under the terms of the GNU General Public License as published by the Free
  20  * Software Foundation; either version 2 of the License, or (at your option)
  21  * any later version.
  22  *
  23  */
  24
  25 #include <crypto/hash.h>
  26 #include <linux/err.h>
  27 #include <linux/init.h>
  28 #include <linux/gfp.h>
  29 #include <linux/module.h>
  30 #include <linux/scatterlist.h>
  31 #include <linux/string.h>
  32 #include <linux/moduleparam.h>
  33 #include <linux/jiffies.h>
  34 #include <linux/timex.h>
  35 #include <linux/interrupt.h>
  36 #include "tcrypt.h"
  37 #include "internal.h"
  38
  39 /*
  40  * Need slab memory for testing (size in number of pages).
  41  */
  42 #define TVMEMSIZE       4
  43
  44 /*
  45 * Used by test_cipher_speed()
  46 */
  47 #define ENCRYPT 1
  48 #define DECRYPT 0
  49
  50 /*
  51  * Used by test_cipher_speed()
  52  */
  53 static unsigned int sec;
  54
  55 static char *alg = NULL;
  56 static u32 type;
  57 static u32 mask;
  58 static int mode;
  59 static char *tvmem[TVMEMSIZE];
  60
  61 static char *check[] = {
  62         "des", "md5", "des3_ede", "rot13", "sha1", "sha224", "sha256",
  63         "blowfish", "twofish", "serpent", "sha384", "sha512", "md4", "aes",
  64         "cast6", "arc4", "michael_mic", "deflate", "crc32c", "tea", "xtea",
  65         "khazad", "wp512", "wp384", "wp256", "tnepres", "xeta",  "fcrypt",
  66         "camellia", "seed", "salsa20", "rmd128", "rmd160", "rmd256", "rmd320",
  67         "lzo", "cts", "zlib", NULL
  68 };
  69
  70 static int test_cipher_jiffies(struct blkcipher_desc *desc, int enc,
  71                                struct scatterlist *sg, int blen, int sec)
  72 {
  73         unsigned long start, end;
  74         int bcount;
  75         int ret;
  76
  77         for (start = jiffies, end = start + sec * HZ, bcount = 0;
  78              time_before(jiffies, end); bcount++) {
  79                 if (enc)
  80                         ret = crypto_blkcipher_encrypt(desc, sg, sg, blen);
  81                 else
  82                         ret = crypto_blkcipher_decrypt(desc, sg, sg, blen);
  83
  84                 if (ret)
  85                         return ret;
  86         }
  87
  88         printk("%d operations in %d seconds (%ld bytes)\n",
  89                bcount, sec, (long)bcount * blen);
  90         return 0;
  91 }
  92
  93 static int test_cipher_cycles(struct blkcipher_desc *desc, int enc,
  94                               struct scatterlist *sg, int blen)
  95 {
  96         unsigned long cycles = 0;
  97         int ret = 0;
  98         int i;
  99
 100         local_bh_disable();
 101         local_irq_disable();
 102
 103         /* Warm-up run. */
 104         for (i = 0; i < 4; i++) {
 105                 if (enc)
 106                         ret = crypto_blkcipher_encrypt(desc, sg, sg, blen);
 107                 else
 108                         ret = crypto_blkcipher_decrypt(desc, sg, sg, blen);
 109
 110                 if (ret)
 111                         goto out;
 112         }
 113
 114         /* The real thing. */
 115         for (i = 0; i < 8; i++) {
 116                 cycles_t start, end;
 117
 118                 start = get_cycles();
 119                 if (enc)
 120                         ret = crypto_blkcipher_encrypt(desc, sg, sg, blen);
 121                 else
 122                         ret = crypto_blkcipher_decrypt(desc, sg, sg, blen);
 123                 end = get_cycles();
 124
 125                 if (ret)
 126                         goto out;
 127
 128                 cycles += end - start;
 129         }
 130
 131 out:
 132         local_irq_enable();
 133         local_bh_enable();
 134
 135         if (ret == 0)
 136                 printk("1 operation in %lu cycles (%d bytes)\n",
 137                        (cycles + 4) / 8, blen);
 138
 139         return ret;
 140 }
 141
 142 static u32 block_sizes[] = { 16, 64, 256, 1024, 8192, 0 };
 143
 144 static void test_cipher_speed(const char *algo, int enc, unsigned int sec,
 145                               struct cipher_speed_template *template,
 146                               unsigned int tcount, u8 *keysize)
 147 {
 148         unsigned int ret, i, j, iv_len;
 149         const char *key;
 150         char iv[128];
 151         struct crypto_blkcipher *tfm;
 152         struct blkcipher_desc desc;
 153         const char *e;
 154         u32 *b_size;
 155
 156         if (enc == ENCRYPT)
 157                 e = "encryption";
 158         else
 159                 e = "decryption";
 160
 161         printk("\ntesting speed of %s %s\n", algo, e);
 162
 163         tfm = crypto_alloc_blkcipher(algo, 0, CRYPTO_ALG_ASYNC);
 164
 165         if (IS_ERR(tfm)) {
 166                 printk("failed to load transform for %s: %ld\n", algo,
 167                        PTR_ERR(tfm));
 168                 return;
 169         }
 170         desc.tfm = tfm;
 171         desc.flags = 0;
 172
 173         i = 0;
 174         do {
 175
 176                 b_size = block_sizes;
 177                 do {
 178                         struct scatterlist sg[TVMEMSIZE];
 179
 180                         if ((*keysize + *b_size) > TVMEMSIZE * PAGE_SIZE) {
 181                                 printk("template (%u) too big for "
 182                                        "tvmem (%lu)\n", *keysize + *b_size,
 183                                        TVMEMSIZE * PAGE_SIZE);
 184                                 goto out;
 185                         }
 186
 187                         printk("test %u (%d bit key, %d byte blocks): ", i,
 188                                         *keysize * 8, *b_size);
 189
 190                         memset(tvmem[0], 0xff, PAGE_SIZE);
 191
 192                         /* set key, plain text and IV */
 193                         key = tvmem[0];
 194                         for (j = 0; j < tcount; j++) {
 195                                 if (template[j].klen == *keysize) {
 196                                         key = template[j].key;
 197                                         break;
 198                                 }
 199                         }
 200
 201                         ret = crypto_blkcipher_setkey(tfm, key, *keysize);
 202                         if (ret) {
 203                                 printk("setkey() failed flags=%x\n",
 204                                                 crypto_blkcipher_get_flags(tfm));
 205                                 goto out;
 206                         }
 207
 208                         sg_init_table(sg, TVMEMSIZE);
 209                         sg_set_buf(sg, tvmem[0] + *keysize,
 210                                    PAGE_SIZE - *keysize);
 211                         for (j = 1; j < TVMEMSIZE; j++) {
 212                                 sg_set_buf(sg + j, tvmem[j], PAGE_SIZE);
 213                                 memset (tvmem[j], 0xff, PAGE_SIZE);
 214                         }
 215
 216                         iv_len = crypto_blkcipher_ivsize(tfm);
 217                         if (iv_len) {
 218                                 memset(&iv, 0xff, iv_len);
 219                                 crypto_blkcipher_set_iv(tfm, iv, iv_len);
 220                         }
 221
 222                         if (sec)
 223                                 ret = test_cipher_jiffies(&desc, enc, sg,
 224                                                           *b_size, sec);
 225                         else
 226                                 ret = test_cipher_cycles(&desc, enc, sg,
 227                                                          *b_size);
 228
 229                         if (ret) {
 230                                 printk("%s() failed flags=%x\n", e, desc.flags);
 231                                 break;
 232                         }
 233                         b_size++;
 234                         i++;
 235                 } while (*b_size);
 236                 keysize++;
 237         } while (*keysize);
 238
 239 out:
 240         crypto_free_blkcipher(tfm);
 241 }
 242
 243 static int test_hash_jiffies_digest(struct hash_desc *desc,
 244                                     struct scatterlist *sg, int blen,
 245                                     char *out, int sec)
 246 {
 247         unsigned long start, end;
 248         int bcount;
 249         int ret;
 250
 251         for (start = jiffies, end = start + sec * HZ, bcount = 0;
 252              time_before(jiffies, end); bcount++) {
 253                 ret = crypto_hash_digest(desc, sg, blen, out);
 254                 if (ret)
 255                         return ret;
 256         }
 257
 258         printk("%6u opers/sec, %9lu bytes/sec\n",
 259                bcount / sec, ((long)bcount * blen) / sec);
 260
 261         return 0;
 262 }
 263
 264 static int test_hash_jiffies(struct hash_desc *desc, struct scatterlist *sg,
 265                              int blen, int plen, char *out, int sec)
 266 {
 267         unsigned long start, end;
 268         int bcount, pcount;
 269         int ret;
 270
 271         if (plen == blen)
 272                 return test_hash_jiffies_digest(desc, sg, blen, out, sec);
 273
 274         for (start = jiffies, end = start + sec * HZ, bcount = 0;
 275              time_before(jiffies, end); bcount++) {
 276                 ret = crypto_hash_init(desc);
 277                 if (ret)
 278                         return ret;
 279                 for (pcount = 0; pcount < blen; pcount += plen) {
 280                         ret = crypto_hash_update(desc, sg, plen);
 281                         if (ret)
 282                                 return ret;
 283                 }
 284                 /* we assume there is enough space in 'out' for the result */
 285                 ret = crypto_hash_final(desc, out);
 286                 if (ret)
 287                         return ret;
 288         }
 289
 290         printk("%6u opers/sec, %9lu bytes/sec\n",
 291                bcount / sec, ((long)bcount * blen) / sec);
 292
 293         return 0;
 294 }
 295
 296 static int test_hash_cycles_digest(struct hash_desc *desc,
 297                                    struct scatterlist *sg, int blen, char *out)
 298 {
 299         unsigned long cycles = 0;
 300         int i;
 301         int ret;
 302
 303         local_bh_disable();
 304         local_irq_disable();
 305
 306         /* Warm-up run. */
 307         for (i = 0; i < 4; i++) {
 308                 ret = crypto_hash_digest(desc, sg, blen, out);
 309                 if (ret)
 310                         goto out;
 311         }
 312
 313         /* The real thing. */
 314         for (i = 0; i < 8; i++) {
 315                 cycles_t start, end;
 316
 317                 start = get_cycles();
 318
 319                 ret = crypto_hash_digest(desc, sg, blen, out);
 320                 if (ret)
 321                         goto out;
 322
 323                 end = get_cycles();
 324
 325                 cycles += end - start;
 326         }
 327
 328 out:
 329         local_irq_enable();
 330         local_bh_enable();
 331
 332         if (ret)
 333                 return ret;
 334
 335         printk("%6lu cycles/operation, %4lu cycles/byte\n",
 336                cycles / 8, cycles / (8 * blen));
 337
 338         return 0;
 339 }
 340
 341 static int test_hash_cycles(struct hash_desc *desc, struct scatterlist *sg,
 342                             int blen, int plen, char *out)
 343 {
 344         unsigned long cycles = 0;
 345         int i, pcount;
 346         int ret;
 347
 348         if (plen == blen)
 349                 return test_hash_cycles_digest(desc, sg, blen, out);
 350
 351         local_bh_disable();
 352         local_irq_disable();
 353
 354         /* Warm-up run. */
 355         for (i = 0; i < 4; i++) {
 356                 ret = crypto_hash_init(desc);
 357                 if (ret)
 358                         goto out;
 359                 for (pcount = 0; pcount < blen; pcount += plen) {
 360                         ret = crypto_hash_update(desc, sg, plen);
 361                         if (ret)
 362                                 goto out;
 363                 }
 364                 ret = crypto_hash_final(desc, out);
 365                 if (ret)
 366                         goto out;
 367         }
 368
 369         /* The real thing. */
 370         for (i = 0; i < 8; i++) {
 371                 cycles_t start, end;
 372
 373                 start = get_cycles();
 374
 375                 ret = crypto_hash_init(desc);
 376                 if (ret)
 377                         goto out;
 378                 for (pcount = 0; pcount < blen; pcount += plen) {
 379                         ret = crypto_hash_update(desc, sg, plen);
 380                         if (ret)
 381                                 goto out;
 382                 }
 383                 ret = crypto_hash_final(desc, out);
 384                 if (ret)
 385                         goto out;
 386
 387                 end = get_cycles();
 388
 389                 cycles += end - start;
 390         }
 391
 392 out:
 393         local_irq_enable();
 394         local_bh_enable();
 395
 396         if (ret)
 397                 return ret;
 398
 399         printk("%6lu cycles/operation, %4lu cycles/byte\n",
 400                cycles / 8, cycles / (8 * blen));
 401
 402         return 0;
 403 }
 404
 405 static void test_hash_sg_init(struct scatterlist *sg)
 406 {
 407         int i;
 408
 409         sg_init_table(sg, TVMEMSIZE);
 410         for (i = 0; i < TVMEMSIZE; i++) {
 411                 sg_set_buf(sg + i, tvmem[i], PAGE_SIZE);
 412                 memset(tvmem[i], 0xff, PAGE_SIZE);
 413         }
 414 }
 415
 416 static void test_hash_speed(const char *algo, unsigned int sec,
 417                             struct hash_speed *speed)
 418 {
 419         struct scatterlist sg[TVMEMSIZE];
 420         struct crypto_hash *tfm;
 421         struct hash_desc desc;
 422         static char output[1024];
 423         int i;
 424         int ret;
 425
 426         printk(KERN_INFO "\ntesting speed of %s\n", algo);
 427
 428         tfm = crypto_alloc_hash(algo, 0, CRYPTO_ALG_ASYNC);
 429
 430         if (IS_ERR(tfm)) {
 431                 printk(KERN_ERR "failed to load transform for %s: %ld\n", algo,
 432                        PTR_ERR(tfm));
 433                 return;
 434         }
 435
 436         desc.tfm = tfm;
 437         desc.flags = 0;
 438
 439         if (crypto_hash_digestsize(tfm) > sizeof(output)) {
 440                 printk(KERN_ERR "digestsize(%u) > outputbuffer(%zu)\n",
 441                        crypto_hash_digestsize(tfm), sizeof(output));
 442                 goto out;
 443         }
 444
 445         test_hash_sg_init(sg);
 446         for (i = 0; speed[i].blen != 0; i++) {
 447                 if (speed[i].blen > TVMEMSIZE * PAGE_SIZE) {
 448                         printk(KERN_ERR
 449                                "template (%u) too big for tvmem (%lu)\n",
 450                                speed[i].blen, TVMEMSIZE * PAGE_SIZE);
 451                         goto out;
 452                 }
 453
 454                 if (speed[i].klen)
 455                         crypto_hash_setkey(tfm, tvmem[0], speed[i].klen);
 456
 457                 printk(KERN_INFO "test%3u "
 458                        "(%5u byte blocks,%5u bytes per update,%4u updates): ",
 459                        i, speed[i].blen, speed[i].plen, speed[i].blen / speed[i].plen);
 460
 461                 if (sec)
 462                         ret = test_hash_jiffies(&desc, sg, speed[i].blen,
 463                                                 speed[i].plen, output, sec);
 464                 else
 465                         ret = test_hash_cycles(&desc, sg, speed[i].blen,
 466                                                speed[i].plen, output);
 467
 468                 if (ret) {
 469                         printk(KERN_ERR "hashing failed ret=%d\n", ret);
 470                         break;
 471                 }
 472         }
 473
 474 out:
 475         crypto_free_hash(tfm);
 476 }
 477
 478 struct tcrypt_result {
 479         struct completion completion;
 480         int err;
 481 };
 482
 483 static void tcrypt_complete(struct crypto_async_request *req, int err)
 484 {
 485         struct tcrypt_result *res = req->data;
 486
 487         if (err == -EINPROGRESS)
 488                 return;
 489
 490         res->err = err;
 491         complete(&res->completion);
 492 }
 493
 494 static inline int do_one_ahash_op(struct ahash_request *req, int ret)
 495 {
 496         if (ret == -EINPROGRESS || ret == -EBUSY) {
 497                 struct tcrypt_result *tr = req->base.data;
 498
 499                 ret = wait_for_completion_interruptible(&tr->completion);
 500                 if (!ret)
 501                         ret = tr->err;
 502                 INIT_COMPLETION(tr->completion);
 503         }
 504         return ret;
 505 }
 506
 507 static int test_ahash_jiffies_digest(struct ahash_request *req, int blen,
 508                                      char *out, int sec)
 509 {
 510         unsigned long start, end;
 511         int bcount;
 512         int ret;
 513
 514         for (start = jiffies, end = start + sec * HZ, bcount = 0;
 515              time_before(jiffies, end); bcount++) {
 516                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
 517                 if (ret)
 518                         return ret;
 519         }
 520
 521         printk("%6u opers/sec, %9lu bytes/sec\n",
 522                bcount / sec, ((long)bcount * blen) / sec);
 523
 524         return 0;
 525 }
 526
 527 static int test_ahash_jiffies(struct ahash_request *req, int blen,
 528                               int plen, char *out, int sec)
 529 {
 530         unsigned long start, end;
 531         int bcount, pcount;
 532         int ret;
 533
 534         if (plen == blen)
 535                 return test_ahash_jiffies_digest(req, blen, out, sec);
 536
 537         for (start = jiffies, end = start + sec * HZ, bcount = 0;
 538              time_before(jiffies, end); bcount++) {
 539                 ret = crypto_ahash_init(req);
 540                 if (ret)
 541                         return ret;
 542                 for (pcount = 0; pcount < blen; pcount += plen) {
 543                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
 544                         if (ret)
 545                                 return ret;
 546                 }
 547                 /* we assume there is enough space in 'out' for the result */
 548                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
 549                 if (ret)
 550                         return ret;
 551         }
 552
 553         pr_cont("%6u opers/sec, %9lu bytes/sec\n",
 554                 bcount / sec, ((long)bcount * blen) / sec);
 555
 556         return 0;
 557 }
 558
 559 static int test_ahash_cycles_digest(struct ahash_request *req, int blen,
 560                                     char *out)
 561 {
 562         unsigned long cycles = 0;
 563         int ret, i;
 564
 565         /* Warm-up run. */
 566         for (i = 0; i < 4; i++) {
 567                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
 568                 if (ret)
 569                         goto out;
 570         }
 571
 572         /* The real thing. */
 573         for (i = 0; i < 8; i++) {
 574                 cycles_t start, end;
 575
 576                 start = get_cycles();
 577
 578                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
 579                 if (ret)
 580                         goto out;
 581
 582                 end = get_cycles();
 583
 584                 cycles += end - start;
 585         }
 586
 587 out:
 588         if (ret)
 589                 return ret;
 590
 591         pr_cont("%6lu cycles/operation, %4lu cycles/byte\n",
 592                 cycles / 8, cycles / (8 * blen));
 593
 594         return 0;
 595 }
 596
 597 static int test_ahash_cycles(struct ahash_request *req, int blen,
 598                              int plen, char *out)
 599 {
 600         unsigned long cycles = 0;
 601         int i, pcount, ret;
 602
 603         if (plen == blen)
 604                 return test_ahash_cycles_digest(req, blen, out);
 605
 606         /* Warm-up run. */
 607         for (i = 0; i < 4; i++) {
 608                 ret = crypto_ahash_init(req);
 609                 if (ret)
 610                         goto out;
 611                 for (pcount = 0; pcount < blen; pcount += plen) {
 612                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
 613                         if (ret)
 614                                 goto out;
 615                 }
 616                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
 617                 if (ret)
 618                         goto out;
 619         }
 620
 621         /* The real thing. */
 622         for (i = 0; i < 8; i++) {
 623                 cycles_t start, end;
 624
 625                 start = get_cycles();
 626
 627                 ret = crypto_ahash_init(req);
 628                 if (ret)
 629                         goto out;
 630                 for (pcount = 0; pcount < blen; pcount += plen) {
 631                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
 632                         if (ret)
 633                                 goto out;
 634                 }
 635                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
 636                 if (ret)
 637                         goto out;
 638
 639                 end = get_cycles();
 640
 641                 cycles += end - start;
 642         }
 643
 644 out:
 645         if (ret)
 646                 return ret;
 647
 648         pr_cont("%6lu cycles/operation, %4lu cycles/byte\n",
 649                 cycles / 8, cycles / (8 * blen));
 650
 651         return 0;
 652 }
 653
 654 static void test_ahash_speed(const char *algo, unsigned int sec,
 655                              struct hash_speed *speed)
 656 {
 657         struct scatterlist sg[TVMEMSIZE];
 658         struct tcrypt_result tresult;
 659         struct ahash_request *req;
 660         struct crypto_ahash *tfm;
 661         static char output[1024];
 662         int i, ret;
 663
 664         printk(KERN_INFO "\ntesting speed of async %s\n", algo);
 665
 666         tfm = crypto_alloc_ahash(algo, 0, 0);
 667         if (IS_ERR(tfm)) {
 668                 pr_err("failed to load transform for %s: %ld\n",
 669                        algo, PTR_ERR(tfm));
 670                 return;
 671         }
 672
 673         if (crypto_ahash_digestsize(tfm) > sizeof(output)) {
 674                 pr_err("digestsize(%u) > outputbuffer(%zu)\n",
 675                        crypto_ahash_digestsize(tfm), sizeof(output));
 676                 goto out;
 677         }
 678
 679         test_hash_sg_init(sg);
 680         req = ahash_request_alloc(tfm, GFP_KERNEL);
 681         if (!req) {
 682                 pr_err("ahash request allocation failure\n");
 683                 goto out;
 684         }
 685
 686         init_completion(&tresult.completion);
 687         ahash_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
 688                                    tcrypt_complete, &tresult);
 689
 690         for (i = 0; speed[i].blen != 0; i++) {
 691                 if (speed[i].blen > TVMEMSIZE * PAGE_SIZE) {
 692                         pr_err("template (%u) too big for tvmem (%lu)\n",
 693                                speed[i].blen, TVMEMSIZE * PAGE_SIZE);
 694                         break;
 695                 }
 696
 697                 pr_info("test%3u "
 698                         "(%5u byte blocks,%5u bytes per update,%4u updates): ",
 699                         i, speed[i].blen, speed[i].plen, speed[i].blen / speed[i].plen);
 700
 701                 ahash_request_set_crypt(req, sg, output, speed[i].plen);
 702
 703                 if (sec)
 704                         ret = test_ahash_jiffies(req, speed[i].blen,
 705                                                  speed[i].plen, output, sec);
 706                 else
 707                         ret = test_ahash_cycles(req, speed[i].blen,
 708                                                 speed[i].plen, output);
 709
 710                 if (ret) {
 711                         pr_err("hashing failed ret=%d\n", ret);
 712                         break;
 713                 }
 714         }
 715
 716         ahash_request_free(req);
 717
 718 out:
 719         crypto_free_ahash(tfm);
 720 }
 721
 722 static void test_available(void)
 723 {
 724         char **name = check;
 725
 726         while (*name) {
 727                 printk("alg %s ", *name);
 728                 printk(crypto_has_alg(*name, 0, 0) ?
 729                        "found\n" : "not found\n");
 730                 name++;
 731         }
 732 }
 733
 734 static inline int tcrypt_test(const char *alg)
 735 {
 736         int ret;
 737
 738         ret = alg_test(alg, alg, 0, 0);
 739         /* non-fips algs return -EINVAL in fips mode */
 740         if (fips_enabled && ret == -EINVAL)
 741                 ret = 0;
 742         return ret;
 743 }
 744
 745 static int do_test(int m)
 746 {
 747         int i;
 748         int ret = 0;
 749
 750         switch (m) {
 751         case 0:
 752                 for (i = 1; i < 200; i++)
 753                         ret += do_test(i);
 754                 break;
 755
 756         case 1:
 757                 ret += tcrypt_test("md5");
 758                 break;
 759
 760         case 2:
 761                 ret += tcrypt_test("sha1");
 762                 break;
 763
 764         case 3:
 765                 ret += tcrypt_test("ecb(des)");
 766                 ret += tcrypt_test("cbc(des)");
 767                 break;
 768
 769         case 4:
 770                 ret += tcrypt_test("ecb(des3_ede)");
 771                 ret += tcrypt_test("cbc(des3_ede)");
 772                 break;
 773
 774         case 5:
 775                 ret += tcrypt_test("md4");
 776                 break;
 777
 778         case 6:
 779                 ret += tcrypt_test("sha256");
 780                 break;
 781
 782         case 7:
 783                 ret += tcrypt_test("ecb(blowfish)");
 784                 ret += tcrypt_test("cbc(blowfish)");
 785                 ret += tcrypt_test("ctr(blowfish)");
 786                 break;
 787
 788         case 8:
 789                 ret += tcrypt_test("ecb(twofish)");
 790                 ret += tcrypt_test("cbc(twofish)");
 791                 break;
 792
 793         case 9:
 794                 ret += tcrypt_test("ecb(serpent)");
 795                 break;
 796
 797         case 10:
 798                 ret += tcrypt_test("ecb(aes)");
 799                 ret += tcrypt_test("cbc(aes)");
 800                 ret += tcrypt_test("lrw(aes)");
 801                 ret += tcrypt_test("xts(aes)");
 802                 ret += tcrypt_test("ctr(aes)");
 803                 ret += tcrypt_test("rfc3686(ctr(aes))");
 804                 break;
 805
 806         case 11:
 807                 ret += tcrypt_test("sha384");
 808                 break;
 809
 810         case 12:
 811                 ret += tcrypt_test("sha512");
 812                 break;
 813
 814         case 13:
 815                 ret += tcrypt_test("deflate");
 816                 break;
 817
 818         case 14:
 819                 ret += tcrypt_test("ecb(cast5)");
 820                 break;
 821
 822         case 15:
 823                 ret += tcrypt_test("ecb(cast6)");
 824                 break;
 825
 826         case 16:
 827                 ret += tcrypt_test("ecb(arc4)");
 828                 break;
 829
 830         case 17:
 831                 ret += tcrypt_test("michael_mic");
 832                 break;
 833
 834         case 18:
 835                 ret += tcrypt_test("crc32c");
 836                 break;
 837
 838         case 19:
 839                 ret += tcrypt_test("ecb(tea)");
 840                 break;
 841
 842         case 20:
 843                 ret += tcrypt_test("ecb(xtea)");
 844                 break;
 845
 846         case 21:
 847                 ret += tcrypt_test("ecb(khazad)");
 848                 break;
 849
 850         case 22:
 851                 ret += tcrypt_test("wp512");
 852                 break;
 853
 854         case 23:
 855                 ret += tcrypt_test("wp384");
 856                 break;
 857
 858         case 24:
 859                 ret += tcrypt_test("wp256");
 860                 break;
 861
 862         case 25:
 863                 ret += tcrypt_test("ecb(tnepres)");
 864                 break;
 865
 866         case 26:
 867                 ret += tcrypt_test("ecb(anubis)");
 868                 ret += tcrypt_test("cbc(anubis)");
 869                 break;
 870
 871         case 27:
 872                 ret += tcrypt_test("tgr192");
 873                 break;
 874
 875         case 28:
 876
 877                 ret += tcrypt_test("tgr160");
 878                 break;
 879
 880         case 29:
 881                 ret += tcrypt_test("tgr128");
 882                 break;
 883
 884         case 30:
 885                 ret += tcrypt_test("ecb(xeta)");
 886                 break;
 887
 888         case 31:
 889                 ret += tcrypt_test("pcbc(fcrypt)");
 890                 break;
 891
 892         case 32:
 893                 ret += tcrypt_test("ecb(camellia)");
 894                 ret += tcrypt_test("cbc(camellia)");
 895                 break;
 896         case 33:
 897                 ret += tcrypt_test("sha224");
 898                 break;
 899
 900         case 34:
 901                 ret += tcrypt_test("salsa20");
 902                 break;
 903
 904         case 35:
 905                 ret += tcrypt_test("gcm(aes)");
 906                 break;
 907
 908         case 36:
 909                 ret += tcrypt_test("lzo");
 910                 break;
 911
 912         case 37:
 913                 ret += tcrypt_test("ccm(aes)");
 914                 break;
 915
 916         case 38:
 917                 ret += tcrypt_test("cts(cbc(aes))");
 918                 break;
 919
 920         case 39:
 921                 ret += tcrypt_test("rmd128");
 922                 break;
 923
 924         case 40:
 925                 ret += tcrypt_test("rmd160");
 926                 break;
 927
 928         case 41:
 929                 ret += tcrypt_test("rmd256");
 930                 break;
 931
 932         case 42:
 933                 ret += tcrypt_test("rmd320");
 934                 break;
 935
 936         case 43:
 937                 ret += tcrypt_test("ecb(seed)");
 938                 break;
 939
 940         case 44:
 941                 ret += tcrypt_test("zlib");
 942                 break;
 943
 944         case 45:
 945                 ret += tcrypt_test("rfc4309(ccm(aes))");
 946                 break;
 947
 948         case 100:
 949                 ret += tcrypt_test("hmac(md5)");
 950                 break;
 951
 952         case 101:
 953                 ret += tcrypt_test("hmac(sha1)");
 954                 break;
 955
 956         case 102:
 957                 ret += tcrypt_test("hmac(sha256)");
 958                 break;
 959
 960         case 103:
 961                 ret += tcrypt_test("hmac(sha384)");
 962                 break;
 963
 964         case 104:
 965                 ret += tcrypt_test("hmac(sha512)");
 966                 break;
 967
 968         case 105:
 969                 ret += tcrypt_test("hmac(sha224)");
 970                 break;
 971
 972         case 106:
 973                 ret += tcrypt_test("xcbc(aes)");
 974                 break;
 975
 976         case 107:
 977                 ret += tcrypt_test("hmac(rmd128)");
 978                 break;
 979
 980         case 108:
 981                 ret += tcrypt_test("hmac(rmd160)");
 982                 break;
 983
 984         case 109:
 985                 ret += tcrypt_test("vmac(aes)");
 986                 break;
 987
 988         case 150:
 989                 ret += tcrypt_test("ansi_cprng");
 990                 break;
 991
 992         case 151:
 993                 ret += tcrypt_test("rfc4106(gcm(aes))");
 994                 break;
 995
 996         case 200:
 997                 test_cipher_speed("ecb(aes)", ENCRYPT, sec, NULL, 0,
 998                                 speed_template_16_24_32);
 999                 test_cipher_speed("ecb(aes)", DECRYPT, sec, NULL, 0,
1000                                 speed_template_16_24_32);
1001                 test_cipher_speed("cbc(aes)", ENCRYPT, sec, NULL, 0,
1002                                 speed_template_16_24_32);
1003                 test_cipher_speed("cbc(aes)", DECRYPT, sec, NULL, 0,
1004                                 speed_template_16_24_32);
1005                 test_cipher_speed("lrw(aes)", ENCRYPT, sec, NULL, 0,
1006                                 speed_template_32_40_48);
1007                 test_cipher_speed("lrw(aes)", DECRYPT, sec, NULL, 0,
1008                                 speed_template_32_40_48);
1009                 test_cipher_speed("xts(aes)", ENCRYPT, sec, NULL, 0,
1010                                 speed_template_32_48_64);
1011                 test_cipher_speed("xts(aes)", DECRYPT, sec, NULL, 0,
1012                                 speed_template_32_48_64);
1013                 test_cipher_speed("ctr(aes)", ENCRYPT, sec, NULL, 0,
1014                                 speed_template_16_24_32);
1015                 test_cipher_speed("ctr(aes)", DECRYPT, sec, NULL, 0,
1016                                 speed_template_16_24_32);
1017                 break;
1018
1019         case 201:
1020                 test_cipher_speed("ecb(des3_ede)", ENCRYPT, sec,
1021                                 des3_speed_template, DES3_SPEED_VECTORS,
1022                                 speed_template_24);
1023                 test_cipher_speed("ecb(des3_ede)", DECRYPT, sec,
1024                                 des3_speed_template, DES3_SPEED_VECTORS,
1025                                 speed_template_24);
1026                 test_cipher_speed("cbc(des3_ede)", ENCRYPT, sec,
1027                                 des3_speed_template, DES3_SPEED_VECTORS,
1028                                 speed_template_24);
1029                 test_cipher_speed("cbc(des3_ede)", DECRYPT, sec,
1030                                 des3_speed_template, DES3_SPEED_VECTORS,
1031                                 speed_template_24);
1032                 break;
1033
1034         case 202:
1035                 test_cipher_speed("ecb(twofish)", ENCRYPT, sec, NULL, 0,
1036                                 speed_template_16_24_32);
1037                 test_cipher_speed("ecb(twofish)", DECRYPT, sec, NULL, 0,
1038                                 speed_template_16_24_32);
1039                 test_cipher_speed("cbc(twofish)", ENCRYPT, sec, NULL, 0,
1040                                 speed_template_16_24_32);
1041                 test_cipher_speed("cbc(twofish)", DECRYPT, sec, NULL, 0,
1042                                 speed_template_16_24_32);
1043                 test_cipher_speed("ctr(twofish)", ENCRYPT, sec, NULL, 0,
1044                                 speed_template_16_24_32);
1045                 test_cipher_speed("ctr(twofish)", DECRYPT, sec, NULL, 0,
1046                                 speed_template_16_24_32);
1047                 break;
1048
1049         case 203:
1050                 test_cipher_speed("ecb(blowfish)", ENCRYPT, sec, NULL, 0,
1051                                   speed_template_8_32);
1052                 test_cipher_speed("ecb(blowfish)", DECRYPT, sec, NULL, 0,
1053                                   speed_template_8_32);
1054                 test_cipher_speed("cbc(blowfish)", ENCRYPT, sec, NULL, 0,
1055                                   speed_template_8_32);
1056                 test_cipher_speed("cbc(blowfish)", DECRYPT, sec, NULL, 0,
1057                                   speed_template_8_32);
1058                 test_cipher_speed("ctr(blowfish)", ENCRYPT, sec, NULL, 0,
1059                                   speed_template_8_32);
1060                 test_cipher_speed("ctr(blowfish)", DECRYPT, sec, NULL, 0,
1061                                   speed_template_8_32);
1062                 break;
1063
1064         case 204:
1065                 test_cipher_speed("ecb(des)", ENCRYPT, sec, NULL, 0,
1066                                   speed_template_8);
1067                 test_cipher_speed("ecb(des)", DECRYPT, sec, NULL, 0,
1068                                   speed_template_8);
1069                 test_cipher_speed("cbc(des)", ENCRYPT, sec, NULL, 0,
1070                                   speed_template_8);
1071                 test_cipher_speed("cbc(des)", DECRYPT, sec, NULL, 0,
1072                                   speed_template_8);
1073                 break;
1074
1075         case 205:
1076                 test_cipher_speed("ecb(camellia)", ENCRYPT, sec, NULL, 0,
1077                                 speed_template_16_24_32);
1078                 test_cipher_speed("ecb(camellia)", DECRYPT, sec, NULL, 0,
1079                                 speed_template_16_24_32);
1080                 test_cipher_speed("cbc(camellia)", ENCRYPT, sec, NULL, 0,
1081                                 speed_template_16_24_32);
1082                 test_cipher_speed("cbc(camellia)", DECRYPT, sec, NULL, 0,
1083                                 speed_template_16_24_32);
1084                 break;
1085
1086         case 206:
1087                 test_cipher_speed("salsa20", ENCRYPT, sec, NULL, 0,
1088                                   speed_template_16_32);
1089                 break;
1090
1091         case 300:
1092                 /* fall through */
1093
1094         case 301:
1095                 test_hash_speed("md4", sec, generic_hash_speed_template);
1096                 if (mode > 300 && mode < 400) break;
1097
1098         case 302:
1099                 test_hash_speed("md5", sec, generic_hash_speed_template);
1100                 if (mode > 300 && mode < 400) break;
1101
1102         case 303:
1103                 test_hash_speed("sha1", sec, generic_hash_speed_template);
1104                 if (mode > 300 && mode < 400) break;
1105
1106         case 304:
1107                 test_hash_speed("sha256", sec, generic_hash_speed_template);
1108                 if (mode > 300 && mode < 400) break;
1109
1110         case 305:
1111                 test_hash_speed("sha384", sec, generic_hash_speed_template);
1112                 if (mode > 300 && mode < 400) break;
1113
1114         case 306:
1115                 test_hash_speed("sha512", sec, generic_hash_speed_template);
1116                 if (mode > 300 && mode < 400) break;
1117
1118         case 307:
1119                 test_hash_speed("wp256", sec, generic_hash_speed_template);
1120                 if (mode > 300 && mode < 400) break;
1121
1122         case 308:
1123                 test_hash_speed("wp384", sec, generic_hash_speed_template);
1124                 if (mode > 300 && mode < 400) break;
1125
1126         case 309:
1127                 test_hash_speed("wp512", sec, generic_hash_speed_template);
1128                 if (mode > 300 && mode < 400) break;
1129
1130         case 310:
1131                 test_hash_speed("tgr128", sec, generic_hash_speed_template);
1132                 if (mode > 300 && mode < 400) break;
1133
1134         case 311:
1135                 test_hash_speed("tgr160", sec, generic_hash_speed_template);
1136                 if (mode > 300 && mode < 400) break;
1137
1138         case 312:
1139                 test_hash_speed("tgr192", sec, generic_hash_speed_template);
1140                 if (mode > 300 && mode < 400) break;
1141
1142         case 313:
1143                 test_hash_speed("sha224", sec, generic_hash_speed_template);
1144                 if (mode > 300 && mode < 400) break;
1145
1146         case 314:
1147                 test_hash_speed("rmd128", sec, generic_hash_speed_template);
1148                 if (mode > 300 && mode < 400) break;
1149
1150         case 315:
1151                 test_hash_speed("rmd160", sec, generic_hash_speed_template);
1152                 if (mode > 300 && mode < 400) break;
1153
1154         case 316:
1155                 test_hash_speed("rmd256", sec, generic_hash_speed_template);
1156                 if (mode > 300 && mode < 400) break;
1157
1158         case 317:
1159                 test_hash_speed("rmd320", sec, generic_hash_speed_template);
1160                 if (mode > 300 && mode < 400) break;
1161
1162         case 318:
1163                 test_hash_speed("ghash-generic", sec, hash_speed_template_16);
1164                 if (mode > 300 && mode < 400) break;
1165
1166         case 399:
1167                 break;
1168
1169         case 400:
1170                 /* fall through */
1171
1172         case 401:
1173                 test_ahash_speed("md4", sec, generic_hash_speed_template);
1174                 if (mode > 400 && mode < 500) break;
1175
1176         case 402:
1177                 test_ahash_speed("md5", sec, generic_hash_speed_template);
1178                 if (mode > 400 && mode < 500) break;
1179
1180         case 403:
1181                 test_ahash_speed("sha1", sec, generic_hash_speed_template);
1182                 if (mode > 400 && mode < 500) break;
1183
1184         case 404:
1185                 test_ahash_speed("sha256", sec, generic_hash_speed_template);
1186                 if (mode > 400 && mode < 500) break;
1187
1188         case 405:
1189                 test_ahash_speed("sha384", sec, generic_hash_speed_template);
1190                 if (mode > 400 && mode < 500) break;
1191
1192         case 406:
1193                 test_ahash_speed("sha512", sec, generic_hash_speed_template);
1194                 if (mode > 400 && mode < 500) break;
1195
1196         case 407:
1197                 test_ahash_speed("wp256", sec, generic_hash_speed_template);
1198                 if (mode > 400 && mode < 500) break;
1199
1200         case 408:
1201                 test_ahash_speed("wp384", sec, generic_hash_speed_template);
1202                 if (mode > 400 && mode < 500) break;
1203
1204         case 409:
1205                 test_ahash_speed("wp512", sec, generic_hash_speed_template);
1206                 if (mode > 400 && mode < 500) break;
1207
1208         case 410:
1209                 test_ahash_speed("tgr128", sec, generic_hash_speed_template);
1210                 if (mode > 400 && mode < 500) break;
1211
1212         case 411:
1213                 test_ahash_speed("tgr160", sec, generic_hash_speed_template);
1214                 if (mode > 400 && mode < 500) break;
1215
1216         case 412:
1217                 test_ahash_speed("tgr192", sec, generic_hash_speed_template);
1218                 if (mode > 400 && mode < 500) break;
1219
1220         case 413:
1221                 test_ahash_speed("sha224", sec, generic_hash_speed_template);
1222                 if (mode > 400 && mode < 500) break;
1223
1224         case 414:
1225                 test_ahash_speed("rmd128", sec, generic_hash_speed_template);
1226                 if (mode > 400 && mode < 500) break;
1227
1228         case 415:
1229                 test_ahash_speed("rmd160", sec, generic_hash_speed_template);
1230                 if (mode > 400 && mode < 500) break;
1231
1232         case 416:
1233                 test_ahash_speed("rmd256", sec, generic_hash_speed_template);
1234                 if (mode > 400 && mode < 500) break;
1235
1236         case 417:
1237                 test_ahash_speed("rmd320", sec, generic_hash_speed_template);
1238                 if (mode > 400 && mode < 500) break;
1239
1240         case 499:
1241                 break;
1242
1243         case 1000:
1244                 test_available();
1245                 break;
1246         }
1247
1248         return ret;
1249 }
1250
1251 static int do_alg_test(const char *alg, u32 type, u32 mask)
1252 {
1253         return crypto_has_alg(alg, type, mask ?: CRYPTO_ALG_TYPE_MASK) ?
1254                0 : -ENOENT;
1255 }
1256
1257 static int __init tcrypt_mod_init(void)
1258 {
1259         int err = -ENOMEM;
1260         int i;
1261
1262         for (i = 0; i < TVMEMSIZE; i++) {
1263                 tvmem[i] = (void *)__get_free_page(GFP_KERNEL);
1264                 if (!tvmem[i])
1265                         goto err_free_tv;
1266         }
1267
1268         if (alg)
1269                 err = do_alg_test(alg, type, mask);
1270         else
1271                 err = do_test(mode);
1272
1273         if (err) {
1274                 printk(KERN_ERR "tcrypt: one or more tests failed!\n");
1275                 goto err_free_tv;
1276         }
1277
1278         /* We intentionaly return -EAGAIN to prevent keeping the module,
1279          * unless we're running in fips mode. It does all its work from
1280          * init() and doesn't offer any runtime functionality, but in
1281          * the fips case, checking for a successful load is helpful.
1282          * => we don't need it in the memory, do we?
1283          *                                        -- mludvig
1284          */
1285         if (!fips_enabled)
1286                 err = -EAGAIN;
1287
1288 err_free_tv:
1289         for (i = 0; i < TVMEMSIZE && tvmem[i]; i++)
1290                 free_page((unsigned long)tvmem[i]);
1291
1292         return err;
1293 }
1294
1295 /*
1296  * If an init function is provided, an exit function must also be provided
1297  * to allow module unload.
1298  */
1299 static void __exit tcrypt_mod_fini(void) { }
1300
1301 module_init(tcrypt_mod_init);
1302 module_exit(tcrypt_mod_fini);
1303
1304 module_param(alg, charp, 0);
1305 module_param(type, uint, 0);
1306 module_param(mask, uint, 0);
1307 module_param(mode, int, 0);
1308 module_param(sec, uint, 0);
1309 MODULE_PARM_DESC(sec, "Length in seconds of speed tests "
1310                       "(defaults to zero which uses CPU cycles instead)");
1311
1312 MODULE_LICENSE("GPL");
1313 MODULE_DESCRIPTION("Quick & dirty crypto testing module");
1314 MODULE_AUTHOR("James Morris <jmorris@intercode.com.au>");