2 * Algorithm testing framework and tests.
4 * Copyright (c) 2002 James Morris <jmorris@intercode.com.au>
5 * Copyright (c) 2002 Jean-Francois Dive <jef@linuxbe.org>
6 * Copyright (c) 2007 Nokia Siemens Networks
7 * Copyright (c) 2008 Herbert Xu <herbert@gondor.apana.org.au>
9 * Updated RFC4106 AES-GCM testing.
10 * Authors: Aidan O'Mahony (aidan.o.mahony@intel.com)
11 * Adrian Hoban <adrian.hoban@intel.com>
12 * Gabriele Paoloni <gabriele.paoloni@intel.com>
13 * Tadeusz Struk (tadeusz.struk@intel.com)
14 * Copyright (c) 2010, Intel Corporation.
16 * This program is free software; you can redistribute it and/or modify it
17 * under the terms of the GNU General Public License as published by the Free
18 * Software Foundation; either version 2 of the License, or (at your option)
23 #include <crypto/hash.h>
24 #include <linux/err.h>
25 #include <linux/module.h>
26 #include <linux/scatterlist.h>
27 #include <linux/slab.h>
28 #include <linux/string.h>
29 #include <crypto/rng.h>
30 #include <crypto/drbg.h>
34 #ifdef CONFIG_CRYPTO_MANAGER_DISABLE_TESTS
37 int alg_test(const char *driver
, const char *alg
, u32 type
, u32 mask
)
47 * Need slab memory for testing (size in number of pages).
52 * Indexes into the xbuf to simulate cross-page access.
64 * Used by test_cipher()
69 struct tcrypt_result
{
70 struct completion completion
;
74 struct aead_test_suite
{
76 struct aead_testvec
*vecs
;
81 struct cipher_test_suite
{
83 struct cipher_testvec
*vecs
;
88 struct comp_test_suite
{
90 struct comp_testvec
*vecs
;
95 struct pcomp_test_suite
{
97 struct pcomp_testvec
*vecs
;
102 struct hash_test_suite
{
103 struct hash_testvec
*vecs
;
107 struct cprng_test_suite
{
108 struct cprng_testvec
*vecs
;
112 struct drbg_test_suite
{
113 struct drbg_testvec
*vecs
;
117 struct alg_test_desc
{
119 int (*test
)(const struct alg_test_desc
*desc
, const char *driver
,
121 int fips_allowed
; /* set if alg is allowed in fips mode */
124 struct aead_test_suite aead
;
125 struct cipher_test_suite cipher
;
126 struct comp_test_suite comp
;
127 struct pcomp_test_suite pcomp
;
128 struct hash_test_suite hash
;
129 struct cprng_test_suite cprng
;
130 struct drbg_test_suite drbg
;
134 static unsigned int IDX
[8] = { IDX1
, IDX2
, IDX3
, IDX4
, IDX5
, IDX6
, IDX7
, IDX8
};
136 static void hexdump(unsigned char *buf
, unsigned int len
)
138 print_hex_dump(KERN_CONT
, "", DUMP_PREFIX_OFFSET
,
143 static void tcrypt_complete(struct crypto_async_request
*req
, int err
)
145 struct tcrypt_result
*res
= req
->data
;
147 if (err
== -EINPROGRESS
)
151 complete(&res
->completion
);
154 static int testmgr_alloc_buf(char *buf
[XBUFSIZE
])
158 for (i
= 0; i
< XBUFSIZE
; i
++) {
159 buf
[i
] = (void *)__get_free_page(GFP_KERNEL
);
168 free_page((unsigned long)buf
[i
]);
173 static void testmgr_free_buf(char *buf
[XBUFSIZE
])
177 for (i
= 0; i
< XBUFSIZE
; i
++)
178 free_page((unsigned long)buf
[i
]);
181 static int do_one_async_hash_op(struct ahash_request
*req
,
182 struct tcrypt_result
*tr
,
185 if (ret
== -EINPROGRESS
|| ret
== -EBUSY
) {
186 ret
= wait_for_completion_interruptible(&tr
->completion
);
189 reinit_completion(&tr
->completion
);
194 static int __test_hash(struct crypto_ahash
*tfm
, struct hash_testvec
*template,
195 unsigned int tcount
, bool use_digest
,
196 const int align_offset
)
198 const char *algo
= crypto_tfm_alg_driver_name(crypto_ahash_tfm(tfm
));
199 unsigned int i
, j
, k
, temp
;
200 struct scatterlist sg
[8];
203 struct ahash_request
*req
;
204 struct tcrypt_result tresult
;
206 char *xbuf
[XBUFSIZE
];
209 result
= kmalloc(MAX_DIGEST_SIZE
, GFP_KERNEL
);
212 key
= kmalloc(MAX_KEYLEN
, GFP_KERNEL
);
215 if (testmgr_alloc_buf(xbuf
))
218 init_completion(&tresult
.completion
);
220 req
= ahash_request_alloc(tfm
, GFP_KERNEL
);
222 printk(KERN_ERR
"alg: hash: Failed to allocate request for "
226 ahash_request_set_callback(req
, CRYPTO_TFM_REQ_MAY_BACKLOG
,
227 tcrypt_complete
, &tresult
);
230 for (i
= 0; i
< tcount
; i
++) {
235 if (WARN_ON(align_offset
+ template[i
].psize
> PAGE_SIZE
))
239 memset(result
, 0, MAX_DIGEST_SIZE
);
242 hash_buff
+= align_offset
;
244 memcpy(hash_buff
, template[i
].plaintext
, template[i
].psize
);
245 sg_init_one(&sg
[0], hash_buff
, template[i
].psize
);
247 if (template[i
].ksize
) {
248 crypto_ahash_clear_flags(tfm
, ~0);
249 if (template[i
].ksize
> MAX_KEYLEN
) {
250 pr_err("alg: hash: setkey failed on test %d for %s: key size %d > %d\n",
251 j
, algo
, template[i
].ksize
, MAX_KEYLEN
);
255 memcpy(key
, template[i
].key
, template[i
].ksize
);
256 ret
= crypto_ahash_setkey(tfm
, key
, template[i
].ksize
);
258 printk(KERN_ERR
"alg: hash: setkey failed on "
259 "test %d for %s: ret=%d\n", j
, algo
,
265 ahash_request_set_crypt(req
, sg
, result
, template[i
].psize
);
267 ret
= do_one_async_hash_op(req
, &tresult
,
268 crypto_ahash_digest(req
));
270 pr_err("alg: hash: digest failed on test %d "
271 "for %s: ret=%d\n", j
, algo
, -ret
);
275 ret
= do_one_async_hash_op(req
, &tresult
,
276 crypto_ahash_init(req
));
278 pr_err("alt: hash: init failed on test %d "
279 "for %s: ret=%d\n", j
, algo
, -ret
);
282 ret
= do_one_async_hash_op(req
, &tresult
,
283 crypto_ahash_update(req
));
285 pr_err("alt: hash: update failed on test %d "
286 "for %s: ret=%d\n", j
, algo
, -ret
);
289 ret
= do_one_async_hash_op(req
, &tresult
,
290 crypto_ahash_final(req
));
292 pr_err("alt: hash: final failed on test %d "
293 "for %s: ret=%d\n", j
, algo
, -ret
);
298 if (memcmp(result
, template[i
].digest
,
299 crypto_ahash_digestsize(tfm
))) {
300 printk(KERN_ERR
"alg: hash: Test %d failed for %s\n",
302 hexdump(result
, crypto_ahash_digestsize(tfm
));
309 for (i
= 0; i
< tcount
; i
++) {
310 /* alignment tests are only done with continuous buffers */
311 if (align_offset
!= 0)
318 memset(result
, 0, MAX_DIGEST_SIZE
);
321 sg_init_table(sg
, template[i
].np
);
323 for (k
= 0; k
< template[i
].np
; k
++) {
324 if (WARN_ON(offset_in_page(IDX
[k
]) +
325 template[i
].tap
[k
] > PAGE_SIZE
))
328 memcpy(xbuf
[IDX
[k
] >> PAGE_SHIFT
] +
329 offset_in_page(IDX
[k
]),
330 template[i
].plaintext
+ temp
,
333 temp
+= template[i
].tap
[k
];
336 if (template[i
].ksize
) {
337 if (template[i
].ksize
> MAX_KEYLEN
) {
338 pr_err("alg: hash: setkey failed on test %d for %s: key size %d > %d\n",
339 j
, algo
, template[i
].ksize
, MAX_KEYLEN
);
343 crypto_ahash_clear_flags(tfm
, ~0);
344 memcpy(key
, template[i
].key
, template[i
].ksize
);
345 ret
= crypto_ahash_setkey(tfm
, key
, template[i
].ksize
);
348 printk(KERN_ERR
"alg: hash: setkey "
349 "failed on chunking test %d "
350 "for %s: ret=%d\n", j
, algo
, -ret
);
355 ahash_request_set_crypt(req
, sg
, result
, template[i
].psize
);
356 ret
= crypto_ahash_digest(req
);
362 ret
= wait_for_completion_interruptible(
363 &tresult
.completion
);
364 if (!ret
&& !(ret
= tresult
.err
)) {
365 reinit_completion(&tresult
.completion
);
370 printk(KERN_ERR
"alg: hash: digest failed "
371 "on chunking test %d for %s: "
372 "ret=%d\n", j
, algo
, -ret
);
376 if (memcmp(result
, template[i
].digest
,
377 crypto_ahash_digestsize(tfm
))) {
378 printk(KERN_ERR
"alg: hash: Chunking test %d "
379 "failed for %s\n", j
, algo
);
380 hexdump(result
, crypto_ahash_digestsize(tfm
));
389 ahash_request_free(req
);
391 testmgr_free_buf(xbuf
);
398 static int test_hash(struct crypto_ahash
*tfm
, struct hash_testvec
*template,
399 unsigned int tcount
, bool use_digest
)
401 unsigned int alignmask
;
404 ret
= __test_hash(tfm
, template, tcount
, use_digest
, 0);
408 /* test unaligned buffers, check with one byte offset */
409 ret
= __test_hash(tfm
, template, tcount
, use_digest
, 1);
413 alignmask
= crypto_tfm_alg_alignmask(&tfm
->base
);
415 /* Check if alignment mask for tfm is correctly set. */
416 ret
= __test_hash(tfm
, template, tcount
, use_digest
,
425 static int __test_aead(struct crypto_aead
*tfm
, int enc
,
426 struct aead_testvec
*template, unsigned int tcount
,
427 const bool diff_dst
, const int align_offset
)
429 const char *algo
= crypto_tfm_alg_driver_name(crypto_aead_tfm(tfm
));
430 unsigned int i
, j
, k
, n
, temp
;
434 struct aead_request
*req
;
435 struct scatterlist
*sg
;
436 struct scatterlist
*asg
;
437 struct scatterlist
*sgout
;
439 struct tcrypt_result result
;
440 unsigned int authsize
;
445 char *xbuf
[XBUFSIZE
];
446 char *xoutbuf
[XBUFSIZE
];
447 char *axbuf
[XBUFSIZE
];
449 iv
= kzalloc(MAX_IVLEN
, GFP_KERNEL
);
452 key
= kmalloc(MAX_KEYLEN
, GFP_KERNEL
);
455 if (testmgr_alloc_buf(xbuf
))
457 if (testmgr_alloc_buf(axbuf
))
459 if (diff_dst
&& testmgr_alloc_buf(xoutbuf
))
462 /* avoid "the frame size is larger than 1024 bytes" compiler warning */
463 sg
= kmalloc(sizeof(*sg
) * 8 * (diff_dst
? 3 : 2), GFP_KERNEL
);
479 init_completion(&result
.completion
);
481 req
= aead_request_alloc(tfm
, GFP_KERNEL
);
483 pr_err("alg: aead%s: Failed to allocate request for %s\n",
488 aead_request_set_callback(req
, CRYPTO_TFM_REQ_MAY_BACKLOG
,
489 tcrypt_complete
, &result
);
491 for (i
= 0, j
= 0; i
< tcount
; i
++) {
497 /* some templates have no input data but they will
501 input
+= align_offset
;
505 if (WARN_ON(align_offset
+ template[i
].ilen
>
506 PAGE_SIZE
|| template[i
].alen
> PAGE_SIZE
))
509 memcpy(input
, template[i
].input
, template[i
].ilen
);
510 memcpy(assoc
, template[i
].assoc
, template[i
].alen
);
512 memcpy(iv
, template[i
].iv
, MAX_IVLEN
);
514 memset(iv
, 0, MAX_IVLEN
);
516 crypto_aead_clear_flags(tfm
, ~0);
518 crypto_aead_set_flags(tfm
, CRYPTO_TFM_REQ_WEAK_KEY
);
520 if (template[i
].klen
> MAX_KEYLEN
) {
521 pr_err("alg: aead%s: setkey failed on test %d for %s: key size %d > %d\n",
522 d
, j
, algo
, template[i
].klen
,
527 memcpy(key
, template[i
].key
, template[i
].klen
);
529 ret
= crypto_aead_setkey(tfm
, key
, template[i
].klen
);
530 if (!ret
== template[i
].fail
) {
531 pr_err("alg: aead%s: setkey failed on test %d for %s: flags=%x\n",
532 d
, j
, algo
, crypto_aead_get_flags(tfm
));
537 authsize
= abs(template[i
].rlen
- template[i
].ilen
);
538 ret
= crypto_aead_setauthsize(tfm
, authsize
);
540 pr_err("alg: aead%s: Failed to set authsize to %u on test %d for %s\n",
541 d
, authsize
, j
, algo
);
547 output
+= align_offset
;
548 sg_init_one(&sg
[0], input
, template[i
].ilen
);
549 sg_init_one(&sgout
[0], output
, template[i
].rlen
);
551 sg_init_one(&sg
[0], input
,
552 template[i
].ilen
+ (enc
? authsize
: 0));
556 sg_init_one(&asg
[0], assoc
, template[i
].alen
);
558 aead_request_set_crypt(req
, sg
, (diff_dst
) ? sgout
: sg
,
559 template[i
].ilen
, iv
);
561 aead_request_set_assoc(req
, asg
, template[i
].alen
);
563 ret
= enc
? crypto_aead_encrypt(req
) : crypto_aead_decrypt(req
);
567 if (template[i
].novrfy
) {
568 /* verification was supposed to fail */
569 pr_err("alg: aead%s: %s failed on test %d for %s: ret was 0, expected -EBADMSG\n",
571 /* so really, we got a bad message */
578 ret
= wait_for_completion_interruptible(
580 if (!ret
&& !(ret
= result
.err
)) {
581 reinit_completion(&result
.completion
);
585 if (template[i
].novrfy
)
586 /* verification failure was expected */
590 pr_err("alg: aead%s: %s failed on test %d for %s: ret=%d\n",
591 d
, e
, j
, algo
, -ret
);
596 if (memcmp(q
, template[i
].result
, template[i
].rlen
)) {
597 pr_err("alg: aead%s: Test %d failed on %s for %s\n",
599 hexdump(q
, template[i
].rlen
);
605 for (i
= 0, j
= 0; i
< tcount
; i
++) {
606 /* alignment tests are only done with continuous buffers */
607 if (align_offset
!= 0)
616 memcpy(iv
, template[i
].iv
, MAX_IVLEN
);
618 memset(iv
, 0, MAX_IVLEN
);
620 crypto_aead_clear_flags(tfm
, ~0);
622 crypto_aead_set_flags(tfm
, CRYPTO_TFM_REQ_WEAK_KEY
);
623 if (template[i
].klen
> MAX_KEYLEN
) {
624 pr_err("alg: aead%s: setkey failed on test %d for %s: key size %d > %d\n",
625 d
, j
, algo
, template[i
].klen
, MAX_KEYLEN
);
629 memcpy(key
, template[i
].key
, template[i
].klen
);
631 ret
= crypto_aead_setkey(tfm
, key
, template[i
].klen
);
632 if (!ret
== template[i
].fail
) {
633 pr_err("alg: aead%s: setkey failed on chunk test %d for %s: flags=%x\n",
634 d
, j
, algo
, crypto_aead_get_flags(tfm
));
639 authsize
= abs(template[i
].rlen
- template[i
].ilen
);
642 sg_init_table(sg
, template[i
].np
);
644 sg_init_table(sgout
, template[i
].np
);
645 for (k
= 0, temp
= 0; k
< template[i
].np
; k
++) {
646 if (WARN_ON(offset_in_page(IDX
[k
]) +
647 template[i
].tap
[k
] > PAGE_SIZE
))
650 q
= xbuf
[IDX
[k
] >> PAGE_SHIFT
] + offset_in_page(IDX
[k
]);
651 memcpy(q
, template[i
].input
+ temp
, template[i
].tap
[k
]);
652 sg_set_buf(&sg
[k
], q
, template[i
].tap
[k
]);
655 q
= xoutbuf
[IDX
[k
] >> PAGE_SHIFT
] +
656 offset_in_page(IDX
[k
]);
658 memset(q
, 0, template[i
].tap
[k
]);
660 sg_set_buf(&sgout
[k
], q
, template[i
].tap
[k
]);
663 n
= template[i
].tap
[k
];
664 if (k
== template[i
].np
- 1 && enc
)
666 if (offset_in_page(q
) + n
< PAGE_SIZE
)
669 temp
+= template[i
].tap
[k
];
672 ret
= crypto_aead_setauthsize(tfm
, authsize
);
674 pr_err("alg: aead%s: Failed to set authsize to %u on chunk test %d for %s\n",
675 d
, authsize
, j
, algo
);
680 if (WARN_ON(sg
[k
- 1].offset
+
681 sg
[k
- 1].length
+ authsize
>
688 sgout
[k
- 1].length
+= authsize
;
690 sg
[k
- 1].length
+= authsize
;
693 sg_init_table(asg
, template[i
].anp
);
695 for (k
= 0, temp
= 0; k
< template[i
].anp
; k
++) {
696 if (WARN_ON(offset_in_page(IDX
[k
]) +
697 template[i
].atap
[k
] > PAGE_SIZE
))
700 memcpy(axbuf
[IDX
[k
] >> PAGE_SHIFT
] +
701 offset_in_page(IDX
[k
]),
702 template[i
].assoc
+ temp
,
703 template[i
].atap
[k
]),
704 template[i
].atap
[k
]);
705 temp
+= template[i
].atap
[k
];
708 aead_request_set_crypt(req
, sg
, (diff_dst
) ? sgout
: sg
,
712 aead_request_set_assoc(req
, asg
, template[i
].alen
);
714 ret
= enc
? crypto_aead_encrypt(req
) : crypto_aead_decrypt(req
);
718 if (template[i
].novrfy
) {
719 /* verification was supposed to fail */
720 pr_err("alg: aead%s: %s failed on chunk test %d for %s: ret was 0, expected -EBADMSG\n",
722 /* so really, we got a bad message */
729 ret
= wait_for_completion_interruptible(
731 if (!ret
&& !(ret
= result
.err
)) {
732 reinit_completion(&result
.completion
);
736 if (template[i
].novrfy
)
737 /* verification failure was expected */
741 pr_err("alg: aead%s: %s failed on chunk test %d for %s: ret=%d\n",
742 d
, e
, j
, algo
, -ret
);
747 for (k
= 0, temp
= 0; k
< template[i
].np
; k
++) {
749 q
= xoutbuf
[IDX
[k
] >> PAGE_SHIFT
] +
750 offset_in_page(IDX
[k
]);
752 q
= xbuf
[IDX
[k
] >> PAGE_SHIFT
] +
753 offset_in_page(IDX
[k
]);
755 n
= template[i
].tap
[k
];
756 if (k
== template[i
].np
- 1)
757 n
+= enc
? authsize
: -authsize
;
759 if (memcmp(q
, template[i
].result
+ temp
, n
)) {
760 pr_err("alg: aead%s: Chunk test %d failed on %s at page %u for %s\n",
767 if (k
== template[i
].np
- 1 && !enc
) {
769 memcmp(q
, template[i
].input
+
775 for (n
= 0; offset_in_page(q
+ n
) && q
[n
]; n
++)
779 pr_err("alg: aead%s: Result buffer corruption in chunk test %d on %s at page %u for %s: %u bytes:\n",
780 d
, j
, e
, k
, algo
, n
);
785 temp
+= template[i
].tap
[k
];
792 aead_request_free(req
);
796 testmgr_free_buf(xoutbuf
);
798 testmgr_free_buf(axbuf
);
800 testmgr_free_buf(xbuf
);
807 static int test_aead(struct crypto_aead
*tfm
, int enc
,
808 struct aead_testvec
*template, unsigned int tcount
)
810 unsigned int alignmask
;
813 /* test 'dst == src' case */
814 ret
= __test_aead(tfm
, enc
, template, tcount
, false, 0);
818 /* test 'dst != src' case */
819 ret
= __test_aead(tfm
, enc
, template, tcount
, true, 0);
823 /* test unaligned buffers, check with one byte offset */
824 ret
= __test_aead(tfm
, enc
, template, tcount
, true, 1);
828 alignmask
= crypto_tfm_alg_alignmask(&tfm
->base
);
830 /* Check if alignment mask for tfm is correctly set. */
831 ret
= __test_aead(tfm
, enc
, template, tcount
, true,
840 static int test_cipher(struct crypto_cipher
*tfm
, int enc
,
841 struct cipher_testvec
*template, unsigned int tcount
)
843 const char *algo
= crypto_tfm_alg_driver_name(crypto_cipher_tfm(tfm
));
844 unsigned int i
, j
, k
;
848 char *xbuf
[XBUFSIZE
];
851 if (testmgr_alloc_buf(xbuf
))
860 for (i
= 0; i
< tcount
; i
++) {
867 if (WARN_ON(template[i
].ilen
> PAGE_SIZE
))
871 memcpy(data
, template[i
].input
, template[i
].ilen
);
873 crypto_cipher_clear_flags(tfm
, ~0);
875 crypto_cipher_set_flags(tfm
, CRYPTO_TFM_REQ_WEAK_KEY
);
877 ret
= crypto_cipher_setkey(tfm
, template[i
].key
,
879 if (!ret
== template[i
].fail
) {
880 printk(KERN_ERR
"alg: cipher: setkey failed "
881 "on test %d for %s: flags=%x\n", j
,
882 algo
, crypto_cipher_get_flags(tfm
));
887 for (k
= 0; k
< template[i
].ilen
;
888 k
+= crypto_cipher_blocksize(tfm
)) {
890 crypto_cipher_encrypt_one(tfm
, data
+ k
,
893 crypto_cipher_decrypt_one(tfm
, data
+ k
,
898 if (memcmp(q
, template[i
].result
, template[i
].rlen
)) {
899 printk(KERN_ERR
"alg: cipher: Test %d failed "
900 "on %s for %s\n", j
, e
, algo
);
901 hexdump(q
, template[i
].rlen
);
910 testmgr_free_buf(xbuf
);
915 static int __test_skcipher(struct crypto_ablkcipher
*tfm
, int enc
,
916 struct cipher_testvec
*template, unsigned int tcount
,
917 const bool diff_dst
, const int align_offset
)
920 crypto_tfm_alg_driver_name(crypto_ablkcipher_tfm(tfm
));
921 unsigned int i
, j
, k
, n
, temp
;
923 struct ablkcipher_request
*req
;
924 struct scatterlist sg
[8];
925 struct scatterlist sgout
[8];
927 struct tcrypt_result result
;
930 char *xbuf
[XBUFSIZE
];
931 char *xoutbuf
[XBUFSIZE
];
934 if (testmgr_alloc_buf(xbuf
))
937 if (diff_dst
&& testmgr_alloc_buf(xoutbuf
))
950 init_completion(&result
.completion
);
952 req
= ablkcipher_request_alloc(tfm
, GFP_KERNEL
);
954 pr_err("alg: skcipher%s: Failed to allocate request for %s\n",
959 ablkcipher_request_set_callback(req
, CRYPTO_TFM_REQ_MAY_BACKLOG
,
960 tcrypt_complete
, &result
);
963 for (i
= 0; i
< tcount
; i
++) {
965 memcpy(iv
, template[i
].iv
, MAX_IVLEN
);
967 memset(iv
, 0, MAX_IVLEN
);
969 if (!(template[i
].np
) || (template[i
].also_non_np
)) {
973 if (WARN_ON(align_offset
+ template[i
].ilen
>
978 data
+= align_offset
;
979 memcpy(data
, template[i
].input
, template[i
].ilen
);
981 crypto_ablkcipher_clear_flags(tfm
, ~0);
983 crypto_ablkcipher_set_flags(
984 tfm
, CRYPTO_TFM_REQ_WEAK_KEY
);
986 ret
= crypto_ablkcipher_setkey(tfm
, template[i
].key
,
988 if (!ret
== template[i
].fail
) {
989 pr_err("alg: skcipher%s: setkey failed on test %d for %s: flags=%x\n",
991 crypto_ablkcipher_get_flags(tfm
));
996 sg_init_one(&sg
[0], data
, template[i
].ilen
);
999 data
+= align_offset
;
1000 sg_init_one(&sgout
[0], data
, template[i
].ilen
);
1003 ablkcipher_request_set_crypt(req
, sg
,
1004 (diff_dst
) ? sgout
: sg
,
1005 template[i
].ilen
, iv
);
1007 crypto_ablkcipher_encrypt(req
) :
1008 crypto_ablkcipher_decrypt(req
);
1015 ret
= wait_for_completion_interruptible(
1016 &result
.completion
);
1017 if (!ret
&& !((ret
= result
.err
))) {
1018 reinit_completion(&result
.completion
);
1023 pr_err("alg: skcipher%s: %s failed on test %d for %s: ret=%d\n",
1024 d
, e
, j
, algo
, -ret
);
1029 if (memcmp(q
, template[i
].result
, template[i
].rlen
)) {
1030 pr_err("alg: skcipher%s: Test %d failed on %s for %s\n",
1032 hexdump(q
, template[i
].rlen
);
1040 for (i
= 0; i
< tcount
; i
++) {
1041 /* alignment tests are only done with continuous buffers */
1042 if (align_offset
!= 0)
1046 memcpy(iv
, template[i
].iv
, MAX_IVLEN
);
1048 memset(iv
, 0, MAX_IVLEN
);
1050 if (template[i
].np
) {
1053 crypto_ablkcipher_clear_flags(tfm
, ~0);
1055 crypto_ablkcipher_set_flags(
1056 tfm
, CRYPTO_TFM_REQ_WEAK_KEY
);
1058 ret
= crypto_ablkcipher_setkey(tfm
, template[i
].key
,
1060 if (!ret
== template[i
].fail
) {
1061 pr_err("alg: skcipher%s: setkey failed on chunk test %d for %s: flags=%x\n",
1063 crypto_ablkcipher_get_flags(tfm
));
1070 sg_init_table(sg
, template[i
].np
);
1072 sg_init_table(sgout
, template[i
].np
);
1073 for (k
= 0; k
< template[i
].np
; k
++) {
1074 if (WARN_ON(offset_in_page(IDX
[k
]) +
1075 template[i
].tap
[k
] > PAGE_SIZE
))
1078 q
= xbuf
[IDX
[k
] >> PAGE_SHIFT
] +
1079 offset_in_page(IDX
[k
]);
1081 memcpy(q
, template[i
].input
+ temp
,
1082 template[i
].tap
[k
]);
1084 if (offset_in_page(q
) + template[i
].tap
[k
] <
1086 q
[template[i
].tap
[k
]] = 0;
1088 sg_set_buf(&sg
[k
], q
, template[i
].tap
[k
]);
1090 q
= xoutbuf
[IDX
[k
] >> PAGE_SHIFT
] +
1091 offset_in_page(IDX
[k
]);
1093 sg_set_buf(&sgout
[k
], q
,
1094 template[i
].tap
[k
]);
1096 memset(q
, 0, template[i
].tap
[k
]);
1097 if (offset_in_page(q
) +
1098 template[i
].tap
[k
] < PAGE_SIZE
)
1099 q
[template[i
].tap
[k
]] = 0;
1102 temp
+= template[i
].tap
[k
];
1105 ablkcipher_request_set_crypt(req
, sg
,
1106 (diff_dst
) ? sgout
: sg
,
1107 template[i
].ilen
, iv
);
1110 crypto_ablkcipher_encrypt(req
) :
1111 crypto_ablkcipher_decrypt(req
);
1118 ret
= wait_for_completion_interruptible(
1119 &result
.completion
);
1120 if (!ret
&& !((ret
= result
.err
))) {
1121 reinit_completion(&result
.completion
);
1126 pr_err("alg: skcipher%s: %s failed on chunk test %d for %s: ret=%d\n",
1127 d
, e
, j
, algo
, -ret
);
1133 for (k
= 0; k
< template[i
].np
; k
++) {
1135 q
= xoutbuf
[IDX
[k
] >> PAGE_SHIFT
] +
1136 offset_in_page(IDX
[k
]);
1138 q
= xbuf
[IDX
[k
] >> PAGE_SHIFT
] +
1139 offset_in_page(IDX
[k
]);
1141 if (memcmp(q
, template[i
].result
+ temp
,
1142 template[i
].tap
[k
])) {
1143 pr_err("alg: skcipher%s: Chunk test %d failed on %s at page %u for %s\n",
1145 hexdump(q
, template[i
].tap
[k
]);
1149 q
+= template[i
].tap
[k
];
1150 for (n
= 0; offset_in_page(q
+ n
) && q
[n
]; n
++)
1153 pr_err("alg: skcipher%s: Result buffer corruption in chunk test %d on %s at page %u for %s: %u bytes:\n",
1154 d
, j
, e
, k
, algo
, n
);
1158 temp
+= template[i
].tap
[k
];
1166 ablkcipher_request_free(req
);
1168 testmgr_free_buf(xoutbuf
);
1170 testmgr_free_buf(xbuf
);
1175 static int test_skcipher(struct crypto_ablkcipher
*tfm
, int enc
,
1176 struct cipher_testvec
*template, unsigned int tcount
)
1178 unsigned int alignmask
;
1181 /* test 'dst == src' case */
1182 ret
= __test_skcipher(tfm
, enc
, template, tcount
, false, 0);
1186 /* test 'dst != src' case */
1187 ret
= __test_skcipher(tfm
, enc
, template, tcount
, true, 0);
1191 /* test unaligned buffers, check with one byte offset */
1192 ret
= __test_skcipher(tfm
, enc
, template, tcount
, true, 1);
1196 alignmask
= crypto_tfm_alg_alignmask(&tfm
->base
);
1198 /* Check if alignment mask for tfm is correctly set. */
1199 ret
= __test_skcipher(tfm
, enc
, template, tcount
, true,
1208 static int test_comp(struct crypto_comp
*tfm
, struct comp_testvec
*ctemplate
,
1209 struct comp_testvec
*dtemplate
, int ctcount
, int dtcount
)
1211 const char *algo
= crypto_tfm_alg_driver_name(crypto_comp_tfm(tfm
));
1213 char result
[COMP_BUF_SIZE
];
1216 for (i
= 0; i
< ctcount
; i
++) {
1218 unsigned int dlen
= COMP_BUF_SIZE
;
1220 memset(result
, 0, sizeof (result
));
1222 ilen
= ctemplate
[i
].inlen
;
1223 ret
= crypto_comp_compress(tfm
, ctemplate
[i
].input
,
1224 ilen
, result
, &dlen
);
1226 printk(KERN_ERR
"alg: comp: compression failed "
1227 "on test %d for %s: ret=%d\n", i
+ 1, algo
,
1232 if (dlen
!= ctemplate
[i
].outlen
) {
1233 printk(KERN_ERR
"alg: comp: Compression test %d "
1234 "failed for %s: output len = %d\n", i
+ 1, algo
,
1240 if (memcmp(result
, ctemplate
[i
].output
, dlen
)) {
1241 printk(KERN_ERR
"alg: comp: Compression test %d "
1242 "failed for %s\n", i
+ 1, algo
);
1243 hexdump(result
, dlen
);
1249 for (i
= 0; i
< dtcount
; i
++) {
1251 unsigned int dlen
= COMP_BUF_SIZE
;
1253 memset(result
, 0, sizeof (result
));
1255 ilen
= dtemplate
[i
].inlen
;
1256 ret
= crypto_comp_decompress(tfm
, dtemplate
[i
].input
,
1257 ilen
, result
, &dlen
);
1259 printk(KERN_ERR
"alg: comp: decompression failed "
1260 "on test %d for %s: ret=%d\n", i
+ 1, algo
,
1265 if (dlen
!= dtemplate
[i
].outlen
) {
1266 printk(KERN_ERR
"alg: comp: Decompression test %d "
1267 "failed for %s: output len = %d\n", i
+ 1, algo
,
1273 if (memcmp(result
, dtemplate
[i
].output
, dlen
)) {
1274 printk(KERN_ERR
"alg: comp: Decompression test %d "
1275 "failed for %s\n", i
+ 1, algo
);
1276 hexdump(result
, dlen
);
1288 static int test_pcomp(struct crypto_pcomp
*tfm
,
1289 struct pcomp_testvec
*ctemplate
,
1290 struct pcomp_testvec
*dtemplate
, int ctcount
,
1293 const char *algo
= crypto_tfm_alg_driver_name(crypto_pcomp_tfm(tfm
));
1295 char result
[COMP_BUF_SIZE
];
1298 for (i
= 0; i
< ctcount
; i
++) {
1299 struct comp_request req
;
1300 unsigned int produced
= 0;
1302 res
= crypto_compress_setup(tfm
, ctemplate
[i
].params
,
1303 ctemplate
[i
].paramsize
);
1305 pr_err("alg: pcomp: compression setup failed on test "
1306 "%d for %s: error=%d\n", i
+ 1, algo
, res
);
1310 res
= crypto_compress_init(tfm
);
1312 pr_err("alg: pcomp: compression init failed on test "
1313 "%d for %s: error=%d\n", i
+ 1, algo
, res
);
1317 memset(result
, 0, sizeof(result
));
1319 req
.next_in
= ctemplate
[i
].input
;
1320 req
.avail_in
= ctemplate
[i
].inlen
/ 2;
1321 req
.next_out
= result
;
1322 req
.avail_out
= ctemplate
[i
].outlen
/ 2;
1324 res
= crypto_compress_update(tfm
, &req
);
1325 if (res
< 0 && (res
!= -EAGAIN
|| req
.avail_in
)) {
1326 pr_err("alg: pcomp: compression update failed on test "
1327 "%d for %s: error=%d\n", i
+ 1, algo
, res
);
1333 /* Add remaining input data */
1334 req
.avail_in
+= (ctemplate
[i
].inlen
+ 1) / 2;
1336 res
= crypto_compress_update(tfm
, &req
);
1337 if (res
< 0 && (res
!= -EAGAIN
|| req
.avail_in
)) {
1338 pr_err("alg: pcomp: compression update failed on test "
1339 "%d for %s: error=%d\n", i
+ 1, algo
, res
);
1345 /* Provide remaining output space */
1346 req
.avail_out
+= COMP_BUF_SIZE
- ctemplate
[i
].outlen
/ 2;
1348 res
= crypto_compress_final(tfm
, &req
);
1350 pr_err("alg: pcomp: compression final failed on test "
1351 "%d for %s: error=%d\n", i
+ 1, algo
, res
);
1356 if (COMP_BUF_SIZE
- req
.avail_out
!= ctemplate
[i
].outlen
) {
1357 pr_err("alg: comp: Compression test %d failed for %s: "
1358 "output len = %d (expected %d)\n", i
+ 1, algo
,
1359 COMP_BUF_SIZE
- req
.avail_out
,
1360 ctemplate
[i
].outlen
);
1364 if (produced
!= ctemplate
[i
].outlen
) {
1365 pr_err("alg: comp: Compression test %d failed for %s: "
1366 "returned len = %u (expected %d)\n", i
+ 1,
1367 algo
, produced
, ctemplate
[i
].outlen
);
1371 if (memcmp(result
, ctemplate
[i
].output
, ctemplate
[i
].outlen
)) {
1372 pr_err("alg: pcomp: Compression test %d failed for "
1373 "%s\n", i
+ 1, algo
);
1374 hexdump(result
, ctemplate
[i
].outlen
);
1379 for (i
= 0; i
< dtcount
; i
++) {
1380 struct comp_request req
;
1381 unsigned int produced
= 0;
1383 res
= crypto_decompress_setup(tfm
, dtemplate
[i
].params
,
1384 dtemplate
[i
].paramsize
);
1386 pr_err("alg: pcomp: decompression setup failed on "
1387 "test %d for %s: error=%d\n", i
+ 1, algo
, res
);
1391 res
= crypto_decompress_init(tfm
);
1393 pr_err("alg: pcomp: decompression init failed on test "
1394 "%d for %s: error=%d\n", i
+ 1, algo
, res
);
1398 memset(result
, 0, sizeof(result
));
1400 req
.next_in
= dtemplate
[i
].input
;
1401 req
.avail_in
= dtemplate
[i
].inlen
/ 2;
1402 req
.next_out
= result
;
1403 req
.avail_out
= dtemplate
[i
].outlen
/ 2;
1405 res
= crypto_decompress_update(tfm
, &req
);
1406 if (res
< 0 && (res
!= -EAGAIN
|| req
.avail_in
)) {
1407 pr_err("alg: pcomp: decompression update failed on "
1408 "test %d for %s: error=%d\n", i
+ 1, algo
, res
);
1414 /* Add remaining input data */
1415 req
.avail_in
+= (dtemplate
[i
].inlen
+ 1) / 2;
1417 res
= crypto_decompress_update(tfm
, &req
);
1418 if (res
< 0 && (res
!= -EAGAIN
|| req
.avail_in
)) {
1419 pr_err("alg: pcomp: decompression update failed on "
1420 "test %d for %s: error=%d\n", i
+ 1, algo
, res
);
1426 /* Provide remaining output space */
1427 req
.avail_out
+= COMP_BUF_SIZE
- dtemplate
[i
].outlen
/ 2;
1429 res
= crypto_decompress_final(tfm
, &req
);
1430 if (res
< 0 && (res
!= -EAGAIN
|| req
.avail_in
)) {
1431 pr_err("alg: pcomp: decompression final failed on "
1432 "test %d for %s: error=%d\n", i
+ 1, algo
, res
);
1438 if (COMP_BUF_SIZE
- req
.avail_out
!= dtemplate
[i
].outlen
) {
1439 pr_err("alg: comp: Decompression test %d failed for "
1440 "%s: output len = %d (expected %d)\n", i
+ 1,
1441 algo
, COMP_BUF_SIZE
- req
.avail_out
,
1442 dtemplate
[i
].outlen
);
1446 if (produced
!= dtemplate
[i
].outlen
) {
1447 pr_err("alg: comp: Decompression test %d failed for "
1448 "%s: returned len = %u (expected %d)\n", i
+ 1,
1449 algo
, produced
, dtemplate
[i
].outlen
);
1453 if (memcmp(result
, dtemplate
[i
].output
, dtemplate
[i
].outlen
)) {
1454 pr_err("alg: pcomp: Decompression test %d failed for "
1455 "%s\n", i
+ 1, algo
);
1456 hexdump(result
, dtemplate
[i
].outlen
);
1465 static int test_cprng(struct crypto_rng
*tfm
, struct cprng_testvec
*template,
1466 unsigned int tcount
)
1468 const char *algo
= crypto_tfm_alg_driver_name(crypto_rng_tfm(tfm
));
1469 int err
= 0, i
, j
, seedsize
;
1473 seedsize
= crypto_rng_seedsize(tfm
);
1475 seed
= kmalloc(seedsize
, GFP_KERNEL
);
1477 printk(KERN_ERR
"alg: cprng: Failed to allocate seed space "
1482 for (i
= 0; i
< tcount
; i
++) {
1483 memset(result
, 0, 32);
1485 memcpy(seed
, template[i
].v
, template[i
].vlen
);
1486 memcpy(seed
+ template[i
].vlen
, template[i
].key
,
1488 memcpy(seed
+ template[i
].vlen
+ template[i
].klen
,
1489 template[i
].dt
, template[i
].dtlen
);
1491 err
= crypto_rng_reset(tfm
, seed
, seedsize
);
1493 printk(KERN_ERR
"alg: cprng: Failed to reset rng "
1498 for (j
= 0; j
< template[i
].loops
; j
++) {
1499 err
= crypto_rng_get_bytes(tfm
, result
,
1501 if (err
!= template[i
].rlen
) {
1502 printk(KERN_ERR
"alg: cprng: Failed to obtain "
1503 "the correct amount of random data for "
1504 "%s (requested %d, got %d)\n", algo
,
1505 template[i
].rlen
, err
);
1510 err
= memcmp(result
, template[i
].result
,
1513 printk(KERN_ERR
"alg: cprng: Test %d failed for %s\n",
1515 hexdump(result
, template[i
].rlen
);
1526 static int alg_test_aead(const struct alg_test_desc
*desc
, const char *driver
,
1529 struct crypto_aead
*tfm
;
1532 tfm
= crypto_alloc_aead(driver
, type
, mask
);
1534 printk(KERN_ERR
"alg: aead: Failed to load transform for %s: "
1535 "%ld\n", driver
, PTR_ERR(tfm
));
1536 return PTR_ERR(tfm
);
1539 if (desc
->suite
.aead
.enc
.vecs
) {
1540 err
= test_aead(tfm
, ENCRYPT
, desc
->suite
.aead
.enc
.vecs
,
1541 desc
->suite
.aead
.enc
.count
);
1546 if (!err
&& desc
->suite
.aead
.dec
.vecs
)
1547 err
= test_aead(tfm
, DECRYPT
, desc
->suite
.aead
.dec
.vecs
,
1548 desc
->suite
.aead
.dec
.count
);
1551 crypto_free_aead(tfm
);
1555 static int alg_test_cipher(const struct alg_test_desc
*desc
,
1556 const char *driver
, u32 type
, u32 mask
)
1558 struct crypto_cipher
*tfm
;
1561 tfm
= crypto_alloc_cipher(driver
, type
, mask
);
1563 printk(KERN_ERR
"alg: cipher: Failed to load transform for "
1564 "%s: %ld\n", driver
, PTR_ERR(tfm
));
1565 return PTR_ERR(tfm
);
1568 if (desc
->suite
.cipher
.enc
.vecs
) {
1569 err
= test_cipher(tfm
, ENCRYPT
, desc
->suite
.cipher
.enc
.vecs
,
1570 desc
->suite
.cipher
.enc
.count
);
1575 if (desc
->suite
.cipher
.dec
.vecs
)
1576 err
= test_cipher(tfm
, DECRYPT
, desc
->suite
.cipher
.dec
.vecs
,
1577 desc
->suite
.cipher
.dec
.count
);
1580 crypto_free_cipher(tfm
);
1584 static int alg_test_skcipher(const struct alg_test_desc
*desc
,
1585 const char *driver
, u32 type
, u32 mask
)
1587 struct crypto_ablkcipher
*tfm
;
1590 tfm
= crypto_alloc_ablkcipher(driver
, type
, mask
);
1592 printk(KERN_ERR
"alg: skcipher: Failed to load transform for "
1593 "%s: %ld\n", driver
, PTR_ERR(tfm
));
1594 return PTR_ERR(tfm
);
1597 if (desc
->suite
.cipher
.enc
.vecs
) {
1598 err
= test_skcipher(tfm
, ENCRYPT
, desc
->suite
.cipher
.enc
.vecs
,
1599 desc
->suite
.cipher
.enc
.count
);
1604 if (desc
->suite
.cipher
.dec
.vecs
)
1605 err
= test_skcipher(tfm
, DECRYPT
, desc
->suite
.cipher
.dec
.vecs
,
1606 desc
->suite
.cipher
.dec
.count
);
1609 crypto_free_ablkcipher(tfm
);
1613 static int alg_test_comp(const struct alg_test_desc
*desc
, const char *driver
,
1616 struct crypto_comp
*tfm
;
1619 tfm
= crypto_alloc_comp(driver
, type
, mask
);
1621 printk(KERN_ERR
"alg: comp: Failed to load transform for %s: "
1622 "%ld\n", driver
, PTR_ERR(tfm
));
1623 return PTR_ERR(tfm
);
1626 err
= test_comp(tfm
, desc
->suite
.comp
.comp
.vecs
,
1627 desc
->suite
.comp
.decomp
.vecs
,
1628 desc
->suite
.comp
.comp
.count
,
1629 desc
->suite
.comp
.decomp
.count
);
1631 crypto_free_comp(tfm
);
1635 static int alg_test_pcomp(const struct alg_test_desc
*desc
, const char *driver
,
1638 struct crypto_pcomp
*tfm
;
1641 tfm
= crypto_alloc_pcomp(driver
, type
, mask
);
1643 pr_err("alg: pcomp: Failed to load transform for %s: %ld\n",
1644 driver
, PTR_ERR(tfm
));
1645 return PTR_ERR(tfm
);
1648 err
= test_pcomp(tfm
, desc
->suite
.pcomp
.comp
.vecs
,
1649 desc
->suite
.pcomp
.decomp
.vecs
,
1650 desc
->suite
.pcomp
.comp
.count
,
1651 desc
->suite
.pcomp
.decomp
.count
);
1653 crypto_free_pcomp(tfm
);
1657 static int alg_test_hash(const struct alg_test_desc
*desc
, const char *driver
,
1660 struct crypto_ahash
*tfm
;
1663 tfm
= crypto_alloc_ahash(driver
, type
, mask
);
1665 printk(KERN_ERR
"alg: hash: Failed to load transform for %s: "
1666 "%ld\n", driver
, PTR_ERR(tfm
));
1667 return PTR_ERR(tfm
);
1670 err
= test_hash(tfm
, desc
->suite
.hash
.vecs
,
1671 desc
->suite
.hash
.count
, true);
1673 err
= test_hash(tfm
, desc
->suite
.hash
.vecs
,
1674 desc
->suite
.hash
.count
, false);
1676 crypto_free_ahash(tfm
);
1680 static int alg_test_crc32c(const struct alg_test_desc
*desc
,
1681 const char *driver
, u32 type
, u32 mask
)
1683 struct crypto_shash
*tfm
;
1687 err
= alg_test_hash(desc
, driver
, type
, mask
);
1691 tfm
= crypto_alloc_shash(driver
, type
, mask
);
1693 printk(KERN_ERR
"alg: crc32c: Failed to load transform for %s: "
1694 "%ld\n", driver
, PTR_ERR(tfm
));
1701 struct shash_desc shash
;
1702 char ctx
[crypto_shash_descsize(tfm
)];
1705 sdesc
.shash
.tfm
= tfm
;
1706 sdesc
.shash
.flags
= 0;
1708 *(u32
*)sdesc
.ctx
= le32_to_cpu(420553207);
1709 err
= crypto_shash_final(&sdesc
.shash
, (u8
*)&val
);
1711 printk(KERN_ERR
"alg: crc32c: Operation failed for "
1712 "%s: %d\n", driver
, err
);
1716 if (val
!= ~420553207) {
1717 printk(KERN_ERR
"alg: crc32c: Test failed for %s: "
1718 "%d\n", driver
, val
);
1723 crypto_free_shash(tfm
);
1729 static int alg_test_cprng(const struct alg_test_desc
*desc
, const char *driver
,
1732 struct crypto_rng
*rng
;
1735 rng
= crypto_alloc_rng(driver
, type
, mask
);
1737 printk(KERN_ERR
"alg: cprng: Failed to load transform for %s: "
1738 "%ld\n", driver
, PTR_ERR(rng
));
1739 return PTR_ERR(rng
);
1742 err
= test_cprng(rng
, desc
->suite
.cprng
.vecs
, desc
->suite
.cprng
.count
);
1744 crypto_free_rng(rng
);
1750 static int drbg_cavs_test(struct drbg_testvec
*test
, int pr
,
1751 const char *driver
, u32 type
, u32 mask
)
1754 struct crypto_rng
*drng
;
1755 struct drbg_test_data test_data
;
1756 struct drbg_string addtl
, pers
, testentropy
;
1757 unsigned char *buf
= kzalloc(test
->expectedlen
, GFP_KERNEL
);
1762 drng
= crypto_alloc_rng(driver
, type
, mask
);
1764 printk(KERN_ERR
"alg: drbg: could not allocate DRNG handle for "
1770 test_data
.testentropy
= &testentropy
;
1771 drbg_string_fill(&testentropy
, test
->entropy
, test
->entropylen
);
1772 drbg_string_fill(&pers
, test
->pers
, test
->perslen
);
1773 ret
= crypto_drbg_reset_test(drng
, &pers
, &test_data
);
1775 printk(KERN_ERR
"alg: drbg: Failed to reset rng\n");
1779 drbg_string_fill(&addtl
, test
->addtla
, test
->addtllen
);
1781 drbg_string_fill(&testentropy
, test
->entpra
, test
->entprlen
);
1782 ret
= crypto_drbg_get_bytes_addtl_test(drng
,
1783 buf
, test
->expectedlen
, &addtl
, &test_data
);
1785 ret
= crypto_drbg_get_bytes_addtl(drng
,
1786 buf
, test
->expectedlen
, &addtl
);
1789 printk(KERN_ERR
"alg: drbg: could not obtain random data for "
1790 "driver %s\n", driver
);
1794 drbg_string_fill(&addtl
, test
->addtlb
, test
->addtllen
);
1796 drbg_string_fill(&testentropy
, test
->entprb
, test
->entprlen
);
1797 ret
= crypto_drbg_get_bytes_addtl_test(drng
,
1798 buf
, test
->expectedlen
, &addtl
, &test_data
);
1800 ret
= crypto_drbg_get_bytes_addtl(drng
,
1801 buf
, test
->expectedlen
, &addtl
);
1804 printk(KERN_ERR
"alg: drbg: could not obtain random data for "
1805 "driver %s\n", driver
);
1809 ret
= memcmp(test
->expected
, buf
, test
->expectedlen
);
1812 crypto_free_rng(drng
);
1818 static int alg_test_drbg(const struct alg_test_desc
*desc
, const char *driver
,
1824 struct drbg_testvec
*template = desc
->suite
.drbg
.vecs
;
1825 unsigned int tcount
= desc
->suite
.drbg
.count
;
1827 if (0 == memcmp(driver
, "drbg_pr_", 8))
1830 for (i
= 0; i
< tcount
; i
++) {
1831 err
= drbg_cavs_test(&template[i
], pr
, driver
, type
, mask
);
1833 printk(KERN_ERR
"alg: drbg: Test %d failed for %s\n",
1843 static int alg_test_null(const struct alg_test_desc
*desc
,
1844 const char *driver
, u32 type
, u32 mask
)
1849 /* Please keep this list sorted by algorithm name. */
1850 static const struct alg_test_desc alg_test_descs
[] = {
1852 .alg
= "__cbc-cast5-avx",
1853 .test
= alg_test_null
,
1855 .alg
= "__cbc-cast6-avx",
1856 .test
= alg_test_null
,
1858 .alg
= "__cbc-serpent-avx",
1859 .test
= alg_test_null
,
1861 .alg
= "__cbc-serpent-avx2",
1862 .test
= alg_test_null
,
1864 .alg
= "__cbc-serpent-sse2",
1865 .test
= alg_test_null
,
1867 .alg
= "__cbc-twofish-avx",
1868 .test
= alg_test_null
,
1870 .alg
= "__driver-cbc-aes-aesni",
1871 .test
= alg_test_null
,
1874 .alg
= "__driver-cbc-camellia-aesni",
1875 .test
= alg_test_null
,
1877 .alg
= "__driver-cbc-camellia-aesni-avx2",
1878 .test
= alg_test_null
,
1880 .alg
= "__driver-cbc-cast5-avx",
1881 .test
= alg_test_null
,
1883 .alg
= "__driver-cbc-cast6-avx",
1884 .test
= alg_test_null
,
1886 .alg
= "__driver-cbc-serpent-avx",
1887 .test
= alg_test_null
,
1889 .alg
= "__driver-cbc-serpent-avx2",
1890 .test
= alg_test_null
,
1892 .alg
= "__driver-cbc-serpent-sse2",
1893 .test
= alg_test_null
,
1895 .alg
= "__driver-cbc-twofish-avx",
1896 .test
= alg_test_null
,
1898 .alg
= "__driver-ecb-aes-aesni",
1899 .test
= alg_test_null
,
1902 .alg
= "__driver-ecb-camellia-aesni",
1903 .test
= alg_test_null
,
1905 .alg
= "__driver-ecb-camellia-aesni-avx2",
1906 .test
= alg_test_null
,
1908 .alg
= "__driver-ecb-cast5-avx",
1909 .test
= alg_test_null
,
1911 .alg
= "__driver-ecb-cast6-avx",
1912 .test
= alg_test_null
,
1914 .alg
= "__driver-ecb-serpent-avx",
1915 .test
= alg_test_null
,
1917 .alg
= "__driver-ecb-serpent-avx2",
1918 .test
= alg_test_null
,
1920 .alg
= "__driver-ecb-serpent-sse2",
1921 .test
= alg_test_null
,
1923 .alg
= "__driver-ecb-twofish-avx",
1924 .test
= alg_test_null
,
1926 .alg
= "__ghash-pclmulqdqni",
1927 .test
= alg_test_null
,
1930 .alg
= "ansi_cprng",
1931 .test
= alg_test_cprng
,
1935 .vecs
= ansi_cprng_aes_tv_template
,
1936 .count
= ANSI_CPRNG_AES_TEST_VECTORS
1940 .alg
= "authenc(hmac(md5),ecb(cipher_null))",
1941 .test
= alg_test_aead
,
1946 .vecs
= hmac_md5_ecb_cipher_null_enc_tv_template
,
1947 .count
= HMAC_MD5_ECB_CIPHER_NULL_ENC_TEST_VECTORS
1950 .vecs
= hmac_md5_ecb_cipher_null_dec_tv_template
,
1951 .count
= HMAC_MD5_ECB_CIPHER_NULL_DEC_TEST_VECTORS
1956 .alg
= "authenc(hmac(sha1),cbc(aes))",
1957 .test
= alg_test_aead
,
1963 hmac_sha1_aes_cbc_enc_tv_temp
,
1965 HMAC_SHA1_AES_CBC_ENC_TEST_VEC
1970 .alg
= "authenc(hmac(sha1),cbc(des))",
1971 .test
= alg_test_aead
,
1977 hmac_sha1_des_cbc_enc_tv_temp
,
1979 HMAC_SHA1_DES_CBC_ENC_TEST_VEC
1984 .alg
= "authenc(hmac(sha1),cbc(des3_ede))",
1985 .test
= alg_test_aead
,
1991 hmac_sha1_des3_ede_cbc_enc_tv_temp
,
1993 HMAC_SHA1_DES3_EDE_CBC_ENC_TEST_VEC
1998 .alg
= "authenc(hmac(sha1),ecb(cipher_null))",
1999 .test
= alg_test_aead
,
2005 hmac_sha1_ecb_cipher_null_enc_tv_temp
,
2007 HMAC_SHA1_ECB_CIPHER_NULL_ENC_TEST_VEC
2011 hmac_sha1_ecb_cipher_null_dec_tv_temp
,
2013 HMAC_SHA1_ECB_CIPHER_NULL_DEC_TEST_VEC
2018 .alg
= "authenc(hmac(sha224),cbc(des))",
2019 .test
= alg_test_aead
,
2025 hmac_sha224_des_cbc_enc_tv_temp
,
2027 HMAC_SHA224_DES_CBC_ENC_TEST_VEC
2032 .alg
= "authenc(hmac(sha224),cbc(des3_ede))",
2033 .test
= alg_test_aead
,
2039 hmac_sha224_des3_ede_cbc_enc_tv_temp
,
2041 HMAC_SHA224_DES3_EDE_CBC_ENC_TEST_VEC
2046 .alg
= "authenc(hmac(sha256),cbc(aes))",
2047 .test
= alg_test_aead
,
2053 hmac_sha256_aes_cbc_enc_tv_temp
,
2055 HMAC_SHA256_AES_CBC_ENC_TEST_VEC
2060 .alg
= "authenc(hmac(sha256),cbc(des))",
2061 .test
= alg_test_aead
,
2067 hmac_sha256_des_cbc_enc_tv_temp
,
2069 HMAC_SHA256_DES_CBC_ENC_TEST_VEC
2074 .alg
= "authenc(hmac(sha256),cbc(des3_ede))",
2075 .test
= alg_test_aead
,
2081 hmac_sha256_des3_ede_cbc_enc_tv_temp
,
2083 HMAC_SHA256_DES3_EDE_CBC_ENC_TEST_VEC
2088 .alg
= "authenc(hmac(sha384),cbc(des))",
2089 .test
= alg_test_aead
,
2095 hmac_sha384_des_cbc_enc_tv_temp
,
2097 HMAC_SHA384_DES_CBC_ENC_TEST_VEC
2102 .alg
= "authenc(hmac(sha384),cbc(des3_ede))",
2103 .test
= alg_test_aead
,
2109 hmac_sha384_des3_ede_cbc_enc_tv_temp
,
2111 HMAC_SHA384_DES3_EDE_CBC_ENC_TEST_VEC
2116 .alg
= "authenc(hmac(sha512),cbc(aes))",
2117 .test
= alg_test_aead
,
2123 hmac_sha512_aes_cbc_enc_tv_temp
,
2125 HMAC_SHA512_AES_CBC_ENC_TEST_VEC
2130 .alg
= "authenc(hmac(sha512),cbc(des))",
2131 .test
= alg_test_aead
,
2137 hmac_sha512_des_cbc_enc_tv_temp
,
2139 HMAC_SHA512_DES_CBC_ENC_TEST_VEC
2144 .alg
= "authenc(hmac(sha512),cbc(des3_ede))",
2145 .test
= alg_test_aead
,
2151 hmac_sha512_des3_ede_cbc_enc_tv_temp
,
2153 HMAC_SHA512_DES3_EDE_CBC_ENC_TEST_VEC
2159 .test
= alg_test_skcipher
,
2164 .vecs
= aes_cbc_enc_tv_template
,
2165 .count
= AES_CBC_ENC_TEST_VECTORS
2168 .vecs
= aes_cbc_dec_tv_template
,
2169 .count
= AES_CBC_DEC_TEST_VECTORS
2174 .alg
= "cbc(anubis)",
2175 .test
= alg_test_skcipher
,
2179 .vecs
= anubis_cbc_enc_tv_template
,
2180 .count
= ANUBIS_CBC_ENC_TEST_VECTORS
2183 .vecs
= anubis_cbc_dec_tv_template
,
2184 .count
= ANUBIS_CBC_DEC_TEST_VECTORS
2189 .alg
= "cbc(blowfish)",
2190 .test
= alg_test_skcipher
,
2194 .vecs
= bf_cbc_enc_tv_template
,
2195 .count
= BF_CBC_ENC_TEST_VECTORS
2198 .vecs
= bf_cbc_dec_tv_template
,
2199 .count
= BF_CBC_DEC_TEST_VECTORS
2204 .alg
= "cbc(camellia)",
2205 .test
= alg_test_skcipher
,
2209 .vecs
= camellia_cbc_enc_tv_template
,
2210 .count
= CAMELLIA_CBC_ENC_TEST_VECTORS
2213 .vecs
= camellia_cbc_dec_tv_template
,
2214 .count
= CAMELLIA_CBC_DEC_TEST_VECTORS
2219 .alg
= "cbc(cast5)",
2220 .test
= alg_test_skcipher
,
2224 .vecs
= cast5_cbc_enc_tv_template
,
2225 .count
= CAST5_CBC_ENC_TEST_VECTORS
2228 .vecs
= cast5_cbc_dec_tv_template
,
2229 .count
= CAST5_CBC_DEC_TEST_VECTORS
2234 .alg
= "cbc(cast6)",
2235 .test
= alg_test_skcipher
,
2239 .vecs
= cast6_cbc_enc_tv_template
,
2240 .count
= CAST6_CBC_ENC_TEST_VECTORS
2243 .vecs
= cast6_cbc_dec_tv_template
,
2244 .count
= CAST6_CBC_DEC_TEST_VECTORS
2250 .test
= alg_test_skcipher
,
2254 .vecs
= des_cbc_enc_tv_template
,
2255 .count
= DES_CBC_ENC_TEST_VECTORS
2258 .vecs
= des_cbc_dec_tv_template
,
2259 .count
= DES_CBC_DEC_TEST_VECTORS
2264 .alg
= "cbc(des3_ede)",
2265 .test
= alg_test_skcipher
,
2270 .vecs
= des3_ede_cbc_enc_tv_template
,
2271 .count
= DES3_EDE_CBC_ENC_TEST_VECTORS
2274 .vecs
= des3_ede_cbc_dec_tv_template
,
2275 .count
= DES3_EDE_CBC_DEC_TEST_VECTORS
2280 .alg
= "cbc(serpent)",
2281 .test
= alg_test_skcipher
,
2285 .vecs
= serpent_cbc_enc_tv_template
,
2286 .count
= SERPENT_CBC_ENC_TEST_VECTORS
2289 .vecs
= serpent_cbc_dec_tv_template
,
2290 .count
= SERPENT_CBC_DEC_TEST_VECTORS
2295 .alg
= "cbc(twofish)",
2296 .test
= alg_test_skcipher
,
2300 .vecs
= tf_cbc_enc_tv_template
,
2301 .count
= TF_CBC_ENC_TEST_VECTORS
2304 .vecs
= tf_cbc_dec_tv_template
,
2305 .count
= TF_CBC_DEC_TEST_VECTORS
2311 .test
= alg_test_aead
,
2316 .vecs
= aes_ccm_enc_tv_template
,
2317 .count
= AES_CCM_ENC_TEST_VECTORS
2320 .vecs
= aes_ccm_dec_tv_template
,
2321 .count
= AES_CCM_DEC_TEST_VECTORS
2327 .test
= alg_test_hash
,
2330 .vecs
= aes_cmac128_tv_template
,
2331 .count
= CMAC_AES_TEST_VECTORS
2335 .alg
= "cmac(des3_ede)",
2336 .test
= alg_test_hash
,
2339 .vecs
= des3_ede_cmac64_tv_template
,
2340 .count
= CMAC_DES3_EDE_TEST_VECTORS
2344 .alg
= "compress_null",
2345 .test
= alg_test_null
,
2348 .test
= alg_test_crc32c
,
2352 .vecs
= crc32c_tv_template
,
2353 .count
= CRC32C_TEST_VECTORS
2358 .test
= alg_test_hash
,
2362 .vecs
= crct10dif_tv_template
,
2363 .count
= CRCT10DIF_TEST_VECTORS
2367 .alg
= "cryptd(__driver-cbc-aes-aesni)",
2368 .test
= alg_test_null
,
2371 .alg
= "cryptd(__driver-cbc-camellia-aesni)",
2372 .test
= alg_test_null
,
2374 .alg
= "cryptd(__driver-cbc-camellia-aesni-avx2)",
2375 .test
= alg_test_null
,
2377 .alg
= "cryptd(__driver-cbc-serpent-avx2)",
2378 .test
= alg_test_null
,
2380 .alg
= "cryptd(__driver-ecb-aes-aesni)",
2381 .test
= alg_test_null
,
2384 .alg
= "cryptd(__driver-ecb-camellia-aesni)",
2385 .test
= alg_test_null
,
2387 .alg
= "cryptd(__driver-ecb-camellia-aesni-avx2)",
2388 .test
= alg_test_null
,
2390 .alg
= "cryptd(__driver-ecb-cast5-avx)",
2391 .test
= alg_test_null
,
2393 .alg
= "cryptd(__driver-ecb-cast6-avx)",
2394 .test
= alg_test_null
,
2396 .alg
= "cryptd(__driver-ecb-serpent-avx)",
2397 .test
= alg_test_null
,
2399 .alg
= "cryptd(__driver-ecb-serpent-avx2)",
2400 .test
= alg_test_null
,
2402 .alg
= "cryptd(__driver-ecb-serpent-sse2)",
2403 .test
= alg_test_null
,
2405 .alg
= "cryptd(__driver-ecb-twofish-avx)",
2406 .test
= alg_test_null
,
2408 .alg
= "cryptd(__driver-gcm-aes-aesni)",
2409 .test
= alg_test_null
,
2412 .alg
= "cryptd(__ghash-pclmulqdqni)",
2413 .test
= alg_test_null
,
2417 .test
= alg_test_skcipher
,
2422 .vecs
= aes_ctr_enc_tv_template
,
2423 .count
= AES_CTR_ENC_TEST_VECTORS
2426 .vecs
= aes_ctr_dec_tv_template
,
2427 .count
= AES_CTR_DEC_TEST_VECTORS
2432 .alg
= "ctr(blowfish)",
2433 .test
= alg_test_skcipher
,
2437 .vecs
= bf_ctr_enc_tv_template
,
2438 .count
= BF_CTR_ENC_TEST_VECTORS
2441 .vecs
= bf_ctr_dec_tv_template
,
2442 .count
= BF_CTR_DEC_TEST_VECTORS
2447 .alg
= "ctr(camellia)",
2448 .test
= alg_test_skcipher
,
2452 .vecs
= camellia_ctr_enc_tv_template
,
2453 .count
= CAMELLIA_CTR_ENC_TEST_VECTORS
2456 .vecs
= camellia_ctr_dec_tv_template
,
2457 .count
= CAMELLIA_CTR_DEC_TEST_VECTORS
2462 .alg
= "ctr(cast5)",
2463 .test
= alg_test_skcipher
,
2467 .vecs
= cast5_ctr_enc_tv_template
,
2468 .count
= CAST5_CTR_ENC_TEST_VECTORS
2471 .vecs
= cast5_ctr_dec_tv_template
,
2472 .count
= CAST5_CTR_DEC_TEST_VECTORS
2477 .alg
= "ctr(cast6)",
2478 .test
= alg_test_skcipher
,
2482 .vecs
= cast6_ctr_enc_tv_template
,
2483 .count
= CAST6_CTR_ENC_TEST_VECTORS
2486 .vecs
= cast6_ctr_dec_tv_template
,
2487 .count
= CAST6_CTR_DEC_TEST_VECTORS
2493 .test
= alg_test_skcipher
,
2497 .vecs
= des_ctr_enc_tv_template
,
2498 .count
= DES_CTR_ENC_TEST_VECTORS
2501 .vecs
= des_ctr_dec_tv_template
,
2502 .count
= DES_CTR_DEC_TEST_VECTORS
2507 .alg
= "ctr(des3_ede)",
2508 .test
= alg_test_skcipher
,
2512 .vecs
= des3_ede_ctr_enc_tv_template
,
2513 .count
= DES3_EDE_CTR_ENC_TEST_VECTORS
2516 .vecs
= des3_ede_ctr_dec_tv_template
,
2517 .count
= DES3_EDE_CTR_DEC_TEST_VECTORS
2522 .alg
= "ctr(serpent)",
2523 .test
= alg_test_skcipher
,
2527 .vecs
= serpent_ctr_enc_tv_template
,
2528 .count
= SERPENT_CTR_ENC_TEST_VECTORS
2531 .vecs
= serpent_ctr_dec_tv_template
,
2532 .count
= SERPENT_CTR_DEC_TEST_VECTORS
2537 .alg
= "ctr(twofish)",
2538 .test
= alg_test_skcipher
,
2542 .vecs
= tf_ctr_enc_tv_template
,
2543 .count
= TF_CTR_ENC_TEST_VECTORS
2546 .vecs
= tf_ctr_dec_tv_template
,
2547 .count
= TF_CTR_DEC_TEST_VECTORS
2552 .alg
= "cts(cbc(aes))",
2553 .test
= alg_test_skcipher
,
2557 .vecs
= cts_mode_enc_tv_template
,
2558 .count
= CTS_MODE_ENC_TEST_VECTORS
2561 .vecs
= cts_mode_dec_tv_template
,
2562 .count
= CTS_MODE_DEC_TEST_VECTORS
2568 .test
= alg_test_comp
,
2573 .vecs
= deflate_comp_tv_template
,
2574 .count
= DEFLATE_COMP_TEST_VECTORS
2577 .vecs
= deflate_decomp_tv_template
,
2578 .count
= DEFLATE_DECOMP_TEST_VECTORS
2583 .alg
= "digest_null",
2584 .test
= alg_test_null
,
2586 .alg
= "drbg_nopr_ctr_aes128",
2587 .test
= alg_test_drbg
,
2591 .vecs
= drbg_nopr_ctr_aes128_tv_template
,
2592 .count
= ARRAY_SIZE(drbg_nopr_ctr_aes128_tv_template
)
2596 .alg
= "drbg_nopr_ctr_aes192",
2597 .test
= alg_test_drbg
,
2601 .vecs
= drbg_nopr_ctr_aes192_tv_template
,
2602 .count
= ARRAY_SIZE(drbg_nopr_ctr_aes192_tv_template
)
2606 .alg
= "drbg_nopr_ctr_aes256",
2607 .test
= alg_test_drbg
,
2611 .vecs
= drbg_nopr_ctr_aes256_tv_template
,
2612 .count
= ARRAY_SIZE(drbg_nopr_ctr_aes256_tv_template
)
2617 * There is no need to specifically test the DRBG with every
2618 * backend cipher -- covered by drbg_nopr_hmac_sha256 test
2620 .alg
= "drbg_nopr_hmac_sha1",
2622 .test
= alg_test_null
,
2624 .alg
= "drbg_nopr_hmac_sha256",
2625 .test
= alg_test_drbg
,
2629 .vecs
= drbg_nopr_hmac_sha256_tv_template
,
2631 ARRAY_SIZE(drbg_nopr_hmac_sha256_tv_template
)
2635 /* covered by drbg_nopr_hmac_sha256 test */
2636 .alg
= "drbg_nopr_hmac_sha384",
2638 .test
= alg_test_null
,
2640 .alg
= "drbg_nopr_hmac_sha512",
2641 .test
= alg_test_null
,
2644 .alg
= "drbg_nopr_sha1",
2646 .test
= alg_test_null
,
2648 .alg
= "drbg_nopr_sha256",
2649 .test
= alg_test_drbg
,
2653 .vecs
= drbg_nopr_sha256_tv_template
,
2654 .count
= ARRAY_SIZE(drbg_nopr_sha256_tv_template
)
2658 /* covered by drbg_nopr_sha256 test */
2659 .alg
= "drbg_nopr_sha384",
2661 .test
= alg_test_null
,
2663 .alg
= "drbg_nopr_sha512",
2665 .test
= alg_test_null
,
2667 .alg
= "drbg_pr_ctr_aes128",
2668 .test
= alg_test_drbg
,
2672 .vecs
= drbg_pr_ctr_aes128_tv_template
,
2673 .count
= ARRAY_SIZE(drbg_pr_ctr_aes128_tv_template
)
2677 /* covered by drbg_pr_ctr_aes128 test */
2678 .alg
= "drbg_pr_ctr_aes192",
2680 .test
= alg_test_null
,
2682 .alg
= "drbg_pr_ctr_aes256",
2684 .test
= alg_test_null
,
2686 .alg
= "drbg_pr_hmac_sha1",
2688 .test
= alg_test_null
,
2690 .alg
= "drbg_pr_hmac_sha256",
2691 .test
= alg_test_drbg
,
2695 .vecs
= drbg_pr_hmac_sha256_tv_template
,
2696 .count
= ARRAY_SIZE(drbg_pr_hmac_sha256_tv_template
)
2700 /* covered by drbg_pr_hmac_sha256 test */
2701 .alg
= "drbg_pr_hmac_sha384",
2703 .test
= alg_test_null
,
2705 .alg
= "drbg_pr_hmac_sha512",
2706 .test
= alg_test_null
,
2709 .alg
= "drbg_pr_sha1",
2711 .test
= alg_test_null
,
2713 .alg
= "drbg_pr_sha256",
2714 .test
= alg_test_drbg
,
2718 .vecs
= drbg_pr_sha256_tv_template
,
2719 .count
= ARRAY_SIZE(drbg_pr_sha256_tv_template
)
2723 /* covered by drbg_pr_sha256 test */
2724 .alg
= "drbg_pr_sha384",
2726 .test
= alg_test_null
,
2728 .alg
= "drbg_pr_sha512",
2730 .test
= alg_test_null
,
2732 .alg
= "ecb(__aes-aesni)",
2733 .test
= alg_test_null
,
2737 .test
= alg_test_skcipher
,
2742 .vecs
= aes_enc_tv_template
,
2743 .count
= AES_ENC_TEST_VECTORS
2746 .vecs
= aes_dec_tv_template
,
2747 .count
= AES_DEC_TEST_VECTORS
2752 .alg
= "ecb(anubis)",
2753 .test
= alg_test_skcipher
,
2757 .vecs
= anubis_enc_tv_template
,
2758 .count
= ANUBIS_ENC_TEST_VECTORS
2761 .vecs
= anubis_dec_tv_template
,
2762 .count
= ANUBIS_DEC_TEST_VECTORS
2768 .test
= alg_test_skcipher
,
2772 .vecs
= arc4_enc_tv_template
,
2773 .count
= ARC4_ENC_TEST_VECTORS
2776 .vecs
= arc4_dec_tv_template
,
2777 .count
= ARC4_DEC_TEST_VECTORS
2782 .alg
= "ecb(blowfish)",
2783 .test
= alg_test_skcipher
,
2787 .vecs
= bf_enc_tv_template
,
2788 .count
= BF_ENC_TEST_VECTORS
2791 .vecs
= bf_dec_tv_template
,
2792 .count
= BF_DEC_TEST_VECTORS
2797 .alg
= "ecb(camellia)",
2798 .test
= alg_test_skcipher
,
2802 .vecs
= camellia_enc_tv_template
,
2803 .count
= CAMELLIA_ENC_TEST_VECTORS
2806 .vecs
= camellia_dec_tv_template
,
2807 .count
= CAMELLIA_DEC_TEST_VECTORS
2812 .alg
= "ecb(cast5)",
2813 .test
= alg_test_skcipher
,
2817 .vecs
= cast5_enc_tv_template
,
2818 .count
= CAST5_ENC_TEST_VECTORS
2821 .vecs
= cast5_dec_tv_template
,
2822 .count
= CAST5_DEC_TEST_VECTORS
2827 .alg
= "ecb(cast6)",
2828 .test
= alg_test_skcipher
,
2832 .vecs
= cast6_enc_tv_template
,
2833 .count
= CAST6_ENC_TEST_VECTORS
2836 .vecs
= cast6_dec_tv_template
,
2837 .count
= CAST6_DEC_TEST_VECTORS
2842 .alg
= "ecb(cipher_null)",
2843 .test
= alg_test_null
,
2846 .test
= alg_test_skcipher
,
2851 .vecs
= des_enc_tv_template
,
2852 .count
= DES_ENC_TEST_VECTORS
2855 .vecs
= des_dec_tv_template
,
2856 .count
= DES_DEC_TEST_VECTORS
2861 .alg
= "ecb(des3_ede)",
2862 .test
= alg_test_skcipher
,
2867 .vecs
= des3_ede_enc_tv_template
,
2868 .count
= DES3_EDE_ENC_TEST_VECTORS
2871 .vecs
= des3_ede_dec_tv_template
,
2872 .count
= DES3_EDE_DEC_TEST_VECTORS
2877 .alg
= "ecb(fcrypt)",
2878 .test
= alg_test_skcipher
,
2882 .vecs
= fcrypt_pcbc_enc_tv_template
,
2886 .vecs
= fcrypt_pcbc_dec_tv_template
,
2892 .alg
= "ecb(khazad)",
2893 .test
= alg_test_skcipher
,
2897 .vecs
= khazad_enc_tv_template
,
2898 .count
= KHAZAD_ENC_TEST_VECTORS
2901 .vecs
= khazad_dec_tv_template
,
2902 .count
= KHAZAD_DEC_TEST_VECTORS
2908 .test
= alg_test_skcipher
,
2912 .vecs
= seed_enc_tv_template
,
2913 .count
= SEED_ENC_TEST_VECTORS
2916 .vecs
= seed_dec_tv_template
,
2917 .count
= SEED_DEC_TEST_VECTORS
2922 .alg
= "ecb(serpent)",
2923 .test
= alg_test_skcipher
,
2927 .vecs
= serpent_enc_tv_template
,
2928 .count
= SERPENT_ENC_TEST_VECTORS
2931 .vecs
= serpent_dec_tv_template
,
2932 .count
= SERPENT_DEC_TEST_VECTORS
2938 .test
= alg_test_skcipher
,
2942 .vecs
= tea_enc_tv_template
,
2943 .count
= TEA_ENC_TEST_VECTORS
2946 .vecs
= tea_dec_tv_template
,
2947 .count
= TEA_DEC_TEST_VECTORS
2952 .alg
= "ecb(tnepres)",
2953 .test
= alg_test_skcipher
,
2957 .vecs
= tnepres_enc_tv_template
,
2958 .count
= TNEPRES_ENC_TEST_VECTORS
2961 .vecs
= tnepres_dec_tv_template
,
2962 .count
= TNEPRES_DEC_TEST_VECTORS
2967 .alg
= "ecb(twofish)",
2968 .test
= alg_test_skcipher
,
2972 .vecs
= tf_enc_tv_template
,
2973 .count
= TF_ENC_TEST_VECTORS
2976 .vecs
= tf_dec_tv_template
,
2977 .count
= TF_DEC_TEST_VECTORS
2983 .test
= alg_test_skcipher
,
2987 .vecs
= xeta_enc_tv_template
,
2988 .count
= XETA_ENC_TEST_VECTORS
2991 .vecs
= xeta_dec_tv_template
,
2992 .count
= XETA_DEC_TEST_VECTORS
2998 .test
= alg_test_skcipher
,
3002 .vecs
= xtea_enc_tv_template
,
3003 .count
= XTEA_ENC_TEST_VECTORS
3006 .vecs
= xtea_dec_tv_template
,
3007 .count
= XTEA_DEC_TEST_VECTORS
3013 .test
= alg_test_aead
,
3018 .vecs
= aes_gcm_enc_tv_template
,
3019 .count
= AES_GCM_ENC_TEST_VECTORS
3022 .vecs
= aes_gcm_dec_tv_template
,
3023 .count
= AES_GCM_DEC_TEST_VECTORS
3029 .test
= alg_test_hash
,
3033 .vecs
= ghash_tv_template
,
3034 .count
= GHASH_TEST_VECTORS
3038 .alg
= "hmac(crc32)",
3039 .test
= alg_test_hash
,
3042 .vecs
= bfin_crc_tv_template
,
3043 .count
= BFIN_CRC_TEST_VECTORS
3048 .test
= alg_test_hash
,
3051 .vecs
= hmac_md5_tv_template
,
3052 .count
= HMAC_MD5_TEST_VECTORS
3056 .alg
= "hmac(rmd128)",
3057 .test
= alg_test_hash
,
3060 .vecs
= hmac_rmd128_tv_template
,
3061 .count
= HMAC_RMD128_TEST_VECTORS
3065 .alg
= "hmac(rmd160)",
3066 .test
= alg_test_hash
,
3069 .vecs
= hmac_rmd160_tv_template
,
3070 .count
= HMAC_RMD160_TEST_VECTORS
3074 .alg
= "hmac(sha1)",
3075 .test
= alg_test_hash
,
3079 .vecs
= hmac_sha1_tv_template
,
3080 .count
= HMAC_SHA1_TEST_VECTORS
3084 .alg
= "hmac(sha224)",
3085 .test
= alg_test_hash
,
3089 .vecs
= hmac_sha224_tv_template
,
3090 .count
= HMAC_SHA224_TEST_VECTORS
3094 .alg
= "hmac(sha256)",
3095 .test
= alg_test_hash
,
3099 .vecs
= hmac_sha256_tv_template
,
3100 .count
= HMAC_SHA256_TEST_VECTORS
3104 .alg
= "hmac(sha384)",
3105 .test
= alg_test_hash
,
3109 .vecs
= hmac_sha384_tv_template
,
3110 .count
= HMAC_SHA384_TEST_VECTORS
3114 .alg
= "hmac(sha512)",
3115 .test
= alg_test_hash
,
3119 .vecs
= hmac_sha512_tv_template
,
3120 .count
= HMAC_SHA512_TEST_VECTORS
3125 .test
= alg_test_skcipher
,
3129 .vecs
= aes_lrw_enc_tv_template
,
3130 .count
= AES_LRW_ENC_TEST_VECTORS
3133 .vecs
= aes_lrw_dec_tv_template
,
3134 .count
= AES_LRW_DEC_TEST_VECTORS
3139 .alg
= "lrw(camellia)",
3140 .test
= alg_test_skcipher
,
3144 .vecs
= camellia_lrw_enc_tv_template
,
3145 .count
= CAMELLIA_LRW_ENC_TEST_VECTORS
3148 .vecs
= camellia_lrw_dec_tv_template
,
3149 .count
= CAMELLIA_LRW_DEC_TEST_VECTORS
3154 .alg
= "lrw(cast6)",
3155 .test
= alg_test_skcipher
,
3159 .vecs
= cast6_lrw_enc_tv_template
,
3160 .count
= CAST6_LRW_ENC_TEST_VECTORS
3163 .vecs
= cast6_lrw_dec_tv_template
,
3164 .count
= CAST6_LRW_DEC_TEST_VECTORS
3169 .alg
= "lrw(serpent)",
3170 .test
= alg_test_skcipher
,
3174 .vecs
= serpent_lrw_enc_tv_template
,
3175 .count
= SERPENT_LRW_ENC_TEST_VECTORS
3178 .vecs
= serpent_lrw_dec_tv_template
,
3179 .count
= SERPENT_LRW_DEC_TEST_VECTORS
3184 .alg
= "lrw(twofish)",
3185 .test
= alg_test_skcipher
,
3189 .vecs
= tf_lrw_enc_tv_template
,
3190 .count
= TF_LRW_ENC_TEST_VECTORS
3193 .vecs
= tf_lrw_dec_tv_template
,
3194 .count
= TF_LRW_DEC_TEST_VECTORS
3200 .test
= alg_test_comp
,
3205 .vecs
= lzo_comp_tv_template
,
3206 .count
= LZO_COMP_TEST_VECTORS
3209 .vecs
= lzo_decomp_tv_template
,
3210 .count
= LZO_DECOMP_TEST_VECTORS
3216 .test
= alg_test_hash
,
3219 .vecs
= md4_tv_template
,
3220 .count
= MD4_TEST_VECTORS
3225 .test
= alg_test_hash
,
3228 .vecs
= md5_tv_template
,
3229 .count
= MD5_TEST_VECTORS
3233 .alg
= "michael_mic",
3234 .test
= alg_test_hash
,
3237 .vecs
= michael_mic_tv_template
,
3238 .count
= MICHAEL_MIC_TEST_VECTORS
3243 .test
= alg_test_skcipher
,
3248 .vecs
= aes_ofb_enc_tv_template
,
3249 .count
= AES_OFB_ENC_TEST_VECTORS
3252 .vecs
= aes_ofb_dec_tv_template
,
3253 .count
= AES_OFB_DEC_TEST_VECTORS
3258 .alg
= "pcbc(fcrypt)",
3259 .test
= alg_test_skcipher
,
3263 .vecs
= fcrypt_pcbc_enc_tv_template
,
3264 .count
= FCRYPT_ENC_TEST_VECTORS
3267 .vecs
= fcrypt_pcbc_dec_tv_template
,
3268 .count
= FCRYPT_DEC_TEST_VECTORS
3273 .alg
= "rfc3686(ctr(aes))",
3274 .test
= alg_test_skcipher
,
3279 .vecs
= aes_ctr_rfc3686_enc_tv_template
,
3280 .count
= AES_CTR_3686_ENC_TEST_VECTORS
3283 .vecs
= aes_ctr_rfc3686_dec_tv_template
,
3284 .count
= AES_CTR_3686_DEC_TEST_VECTORS
3289 .alg
= "rfc4106(gcm(aes))",
3290 .test
= alg_test_aead
,
3294 .vecs
= aes_gcm_rfc4106_enc_tv_template
,
3295 .count
= AES_GCM_4106_ENC_TEST_VECTORS
3298 .vecs
= aes_gcm_rfc4106_dec_tv_template
,
3299 .count
= AES_GCM_4106_DEC_TEST_VECTORS
3304 .alg
= "rfc4309(ccm(aes))",
3305 .test
= alg_test_aead
,
3310 .vecs
= aes_ccm_rfc4309_enc_tv_template
,
3311 .count
= AES_CCM_4309_ENC_TEST_VECTORS
3314 .vecs
= aes_ccm_rfc4309_dec_tv_template
,
3315 .count
= AES_CCM_4309_DEC_TEST_VECTORS
3320 .alg
= "rfc4543(gcm(aes))",
3321 .test
= alg_test_aead
,
3325 .vecs
= aes_gcm_rfc4543_enc_tv_template
,
3326 .count
= AES_GCM_4543_ENC_TEST_VECTORS
3329 .vecs
= aes_gcm_rfc4543_dec_tv_template
,
3330 .count
= AES_GCM_4543_DEC_TEST_VECTORS
3336 .test
= alg_test_hash
,
3339 .vecs
= rmd128_tv_template
,
3340 .count
= RMD128_TEST_VECTORS
3345 .test
= alg_test_hash
,
3348 .vecs
= rmd160_tv_template
,
3349 .count
= RMD160_TEST_VECTORS
3354 .test
= alg_test_hash
,
3357 .vecs
= rmd256_tv_template
,
3358 .count
= RMD256_TEST_VECTORS
3363 .test
= alg_test_hash
,
3366 .vecs
= rmd320_tv_template
,
3367 .count
= RMD320_TEST_VECTORS
3372 .test
= alg_test_skcipher
,
3376 .vecs
= salsa20_stream_enc_tv_template
,
3377 .count
= SALSA20_STREAM_ENC_TEST_VECTORS
3383 .test
= alg_test_hash
,
3387 .vecs
= sha1_tv_template
,
3388 .count
= SHA1_TEST_VECTORS
3393 .test
= alg_test_hash
,
3397 .vecs
= sha224_tv_template
,
3398 .count
= SHA224_TEST_VECTORS
3403 .test
= alg_test_hash
,
3407 .vecs
= sha256_tv_template
,
3408 .count
= SHA256_TEST_VECTORS
3413 .test
= alg_test_hash
,
3417 .vecs
= sha384_tv_template
,
3418 .count
= SHA384_TEST_VECTORS
3423 .test
= alg_test_hash
,
3427 .vecs
= sha512_tv_template
,
3428 .count
= SHA512_TEST_VECTORS
3433 .test
= alg_test_hash
,
3436 .vecs
= tgr128_tv_template
,
3437 .count
= TGR128_TEST_VECTORS
3442 .test
= alg_test_hash
,
3445 .vecs
= tgr160_tv_template
,
3446 .count
= TGR160_TEST_VECTORS
3451 .test
= alg_test_hash
,
3454 .vecs
= tgr192_tv_template
,
3455 .count
= TGR192_TEST_VECTORS
3460 .test
= alg_test_hash
,
3463 .vecs
= aes_vmac128_tv_template
,
3464 .count
= VMAC_AES_TEST_VECTORS
3469 .test
= alg_test_hash
,
3472 .vecs
= wp256_tv_template
,
3473 .count
= WP256_TEST_VECTORS
3478 .test
= alg_test_hash
,
3481 .vecs
= wp384_tv_template
,
3482 .count
= WP384_TEST_VECTORS
3487 .test
= alg_test_hash
,
3490 .vecs
= wp512_tv_template
,
3491 .count
= WP512_TEST_VECTORS
3496 .test
= alg_test_hash
,
3499 .vecs
= aes_xcbc128_tv_template
,
3500 .count
= XCBC_AES_TEST_VECTORS
3505 .test
= alg_test_skcipher
,
3510 .vecs
= aes_xts_enc_tv_template
,
3511 .count
= AES_XTS_ENC_TEST_VECTORS
3514 .vecs
= aes_xts_dec_tv_template
,
3515 .count
= AES_XTS_DEC_TEST_VECTORS
3520 .alg
= "xts(camellia)",
3521 .test
= alg_test_skcipher
,
3525 .vecs
= camellia_xts_enc_tv_template
,
3526 .count
= CAMELLIA_XTS_ENC_TEST_VECTORS
3529 .vecs
= camellia_xts_dec_tv_template
,
3530 .count
= CAMELLIA_XTS_DEC_TEST_VECTORS
3535 .alg
= "xts(cast6)",
3536 .test
= alg_test_skcipher
,
3540 .vecs
= cast6_xts_enc_tv_template
,
3541 .count
= CAST6_XTS_ENC_TEST_VECTORS
3544 .vecs
= cast6_xts_dec_tv_template
,
3545 .count
= CAST6_XTS_DEC_TEST_VECTORS
3550 .alg
= "xts(serpent)",
3551 .test
= alg_test_skcipher
,
3555 .vecs
= serpent_xts_enc_tv_template
,
3556 .count
= SERPENT_XTS_ENC_TEST_VECTORS
3559 .vecs
= serpent_xts_dec_tv_template
,
3560 .count
= SERPENT_XTS_DEC_TEST_VECTORS
3565 .alg
= "xts(twofish)",
3566 .test
= alg_test_skcipher
,
3570 .vecs
= tf_xts_enc_tv_template
,
3571 .count
= TF_XTS_ENC_TEST_VECTORS
3574 .vecs
= tf_xts_dec_tv_template
,
3575 .count
= TF_XTS_DEC_TEST_VECTORS
3581 .test
= alg_test_pcomp
,
3586 .vecs
= zlib_comp_tv_template
,
3587 .count
= ZLIB_COMP_TEST_VECTORS
3590 .vecs
= zlib_decomp_tv_template
,
3591 .count
= ZLIB_DECOMP_TEST_VECTORS
3598 static bool alg_test_descs_checked
;
3600 static void alg_test_descs_check_order(void)
3604 /* only check once */
3605 if (alg_test_descs_checked
)
3608 alg_test_descs_checked
= true;
3610 for (i
= 1; i
< ARRAY_SIZE(alg_test_descs
); i
++) {
3611 int diff
= strcmp(alg_test_descs
[i
- 1].alg
,
3612 alg_test_descs
[i
].alg
);
3614 if (WARN_ON(diff
> 0)) {
3615 pr_warn("testmgr: alg_test_descs entries in wrong order: '%s' before '%s'\n",
3616 alg_test_descs
[i
- 1].alg
,
3617 alg_test_descs
[i
].alg
);
3620 if (WARN_ON(diff
== 0)) {
3621 pr_warn("testmgr: duplicate alg_test_descs entry: '%s'\n",
3622 alg_test_descs
[i
].alg
);
3627 static int alg_find_test(const char *alg
)
3630 int end
= ARRAY_SIZE(alg_test_descs
);
3632 while (start
< end
) {
3633 int i
= (start
+ end
) / 2;
3634 int diff
= strcmp(alg_test_descs
[i
].alg
, alg
);
3652 int alg_test(const char *driver
, const char *alg
, u32 type
, u32 mask
)
3658 alg_test_descs_check_order();
3660 if ((type
& CRYPTO_ALG_TYPE_MASK
) == CRYPTO_ALG_TYPE_CIPHER
) {
3661 char nalg
[CRYPTO_MAX_ALG_NAME
];
3663 if (snprintf(nalg
, sizeof(nalg
), "ecb(%s)", alg
) >=
3665 return -ENAMETOOLONG
;
3667 i
= alg_find_test(nalg
);
3671 if (fips_enabled
&& !alg_test_descs
[i
].fips_allowed
)
3674 rc
= alg_test_cipher(alg_test_descs
+ i
, driver
, type
, mask
);
3678 i
= alg_find_test(alg
);
3679 j
= alg_find_test(driver
);
3683 if (fips_enabled
&& ((i
>= 0 && !alg_test_descs
[i
].fips_allowed
) ||
3684 (j
>= 0 && !alg_test_descs
[j
].fips_allowed
)))
3689 rc
|= alg_test_descs
[i
].test(alg_test_descs
+ i
, driver
,
3691 if (j
>= 0 && j
!= i
)
3692 rc
|= alg_test_descs
[j
].test(alg_test_descs
+ j
, driver
,
3696 if (fips_enabled
&& rc
)
3697 panic("%s: %s alg self test failed in fips mode!\n", driver
, alg
);
3699 if (fips_enabled
&& !rc
)
3700 pr_info(KERN_INFO
"alg: self-tests for %s (%s) passed\n",
3706 printk(KERN_INFO
"alg: No test for %s (%s)\n", alg
, driver
);
3712 #endif /* CONFIG_CRYPTO_MANAGER_DISABLE_TESTS */
3714 EXPORT_SYMBOL_GPL(alg_test
);