2 * Algorithm testing framework and tests.
4 * Copyright (c) 2002 James Morris <jmorris@intercode.com.au>
5 * Copyright (c) 2002 Jean-Francois Dive <jef@linuxbe.org>
6 * Copyright (c) 2007 Nokia Siemens Networks
7 * Copyright (c) 2008 Herbert Xu <herbert@gondor.apana.org.au>
9 * Updated RFC4106 AES-GCM testing.
10 * Authors: Aidan O'Mahony (aidan.o.mahony@intel.com)
11 * Adrian Hoban <adrian.hoban@intel.com>
12 * Gabriele Paoloni <gabriele.paoloni@intel.com>
13 * Tadeusz Struk (tadeusz.struk@intel.com)
14 * Copyright (c) 2010, Intel Corporation.
16 * This program is free software; you can redistribute it and/or modify it
17 * under the terms of the GNU General Public License as published by the Free
18 * Software Foundation; either version 2 of the License, or (at your option)
23 #include <crypto/hash.h>
24 #include <linux/err.h>
25 #include <linux/module.h>
26 #include <linux/scatterlist.h>
27 #include <linux/slab.h>
28 #include <linux/string.h>
29 #include <crypto/rng.h>
30 #include <crypto/drbg.h>
34 #ifdef CONFIG_CRYPTO_MANAGER_DISABLE_TESTS
37 int alg_test(const char *driver, const char *alg, u32 type, u32 mask)
47 * Need slab memory for testing (size in number of pages).
52 * Indexes into the xbuf to simulate cross-page access.
64 * Used by test_cipher()
69 struct tcrypt_result {
70 struct completion completion;
74 struct aead_test_suite {
76 struct aead_testvec *vecs;
81 struct cipher_test_suite {
83 struct cipher_testvec *vecs;
88 struct comp_test_suite {
90 struct comp_testvec *vecs;
95 struct pcomp_test_suite {
97 struct pcomp_testvec *vecs;
102 struct hash_test_suite {
103 struct hash_testvec *vecs;
107 struct cprng_test_suite {
108 struct cprng_testvec *vecs;
112 struct drbg_test_suite {
113 struct drbg_testvec *vecs;
117 struct alg_test_desc {
119 int (*test)(const struct alg_test_desc *desc, const char *driver,
121 int fips_allowed; /* set if alg is allowed in fips mode */
124 struct aead_test_suite aead;
125 struct cipher_test_suite cipher;
126 struct comp_test_suite comp;
127 struct pcomp_test_suite pcomp;
128 struct hash_test_suite hash;
129 struct cprng_test_suite cprng;
130 struct drbg_test_suite drbg;
134 static unsigned int IDX[8] = { IDX1, IDX2, IDX3, IDX4, IDX5, IDX6, IDX7, IDX8 };
136 static void hexdump(unsigned char *buf, unsigned int len)
138 print_hex_dump(KERN_CONT, "", DUMP_PREFIX_OFFSET,
143 static void tcrypt_complete(struct crypto_async_request *req, int err)
145 struct tcrypt_result *res = req->data;
147 if (err == -EINPROGRESS)
151 complete(&res->completion);
154 static int testmgr_alloc_buf(char *buf[XBUFSIZE])
158 for (i = 0; i < XBUFSIZE; i++) {
159 buf[i] = (void *)__get_free_page(GFP_KERNEL);
168 free_page((unsigned long)buf[i]);
173 static void testmgr_free_buf(char *buf[XBUFSIZE])
177 for (i = 0; i < XBUFSIZE; i++)
178 free_page((unsigned long)buf[i]);
181 static int do_one_async_hash_op(struct ahash_request *req,
182 struct tcrypt_result *tr,
185 if (ret == -EINPROGRESS || ret == -EBUSY) {
186 ret = wait_for_completion_interruptible(&tr->completion);
189 reinit_completion(&tr->completion);
194 static int __test_hash(struct crypto_ahash *tfm, struct hash_testvec *template,
195 unsigned int tcount, bool use_digest,
196 const int align_offset)
198 const char *algo = crypto_tfm_alg_driver_name(crypto_ahash_tfm(tfm));
199 unsigned int i, j, k, temp;
200 struct scatterlist sg[8];
202 struct ahash_request *req;
203 struct tcrypt_result tresult;
205 char *xbuf[XBUFSIZE];
208 if (testmgr_alloc_buf(xbuf))
211 init_completion(&tresult.completion);
213 req = ahash_request_alloc(tfm, GFP_KERNEL);
215 printk(KERN_ERR "alg: hash: Failed to allocate request for "
219 ahash_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
220 tcrypt_complete, &tresult);
223 for (i = 0; i < tcount; i++) {
228 if (WARN_ON(align_offset + template[i].psize > PAGE_SIZE))
232 memset(result, 0, 64);
235 hash_buff += align_offset;
237 memcpy(hash_buff, template[i].plaintext, template[i].psize);
238 sg_init_one(&sg[0], hash_buff, template[i].psize);
240 if (template[i].ksize) {
241 crypto_ahash_clear_flags(tfm, ~0);
242 ret = crypto_ahash_setkey(tfm, template[i].key,
245 printk(KERN_ERR "alg: hash: setkey failed on "
246 "test %d for %s: ret=%d\n", j, algo,
252 ahash_request_set_crypt(req, sg, result, template[i].psize);
254 ret = do_one_async_hash_op(req, &tresult,
255 crypto_ahash_digest(req));
257 pr_err("alg: hash: digest failed on test %d "
258 "for %s: ret=%d\n", j, algo, -ret);
262 ret = do_one_async_hash_op(req, &tresult,
263 crypto_ahash_init(req));
265 pr_err("alt: hash: init failed on test %d "
266 "for %s: ret=%d\n", j, algo, -ret);
269 ret = do_one_async_hash_op(req, &tresult,
270 crypto_ahash_update(req));
272 pr_err("alt: hash: update failed on test %d "
273 "for %s: ret=%d\n", j, algo, -ret);
276 ret = do_one_async_hash_op(req, &tresult,
277 crypto_ahash_final(req));
279 pr_err("alt: hash: final failed on test %d "
280 "for %s: ret=%d\n", j, algo, -ret);
285 if (memcmp(result, template[i].digest,
286 crypto_ahash_digestsize(tfm))) {
287 printk(KERN_ERR "alg: hash: Test %d failed for %s\n",
289 hexdump(result, crypto_ahash_digestsize(tfm));
296 for (i = 0; i < tcount; i++) {
297 /* alignment tests are only done with continuous buffers */
298 if (align_offset != 0)
301 if (template[i].np) {
303 memset(result, 0, 64);
306 sg_init_table(sg, template[i].np);
308 for (k = 0; k < template[i].np; k++) {
309 if (WARN_ON(offset_in_page(IDX[k]) +
310 template[i].tap[k] > PAGE_SIZE))
313 memcpy(xbuf[IDX[k] >> PAGE_SHIFT] +
314 offset_in_page(IDX[k]),
315 template[i].plaintext + temp,
318 temp += template[i].tap[k];
321 if (template[i].ksize) {
322 crypto_ahash_clear_flags(tfm, ~0);
323 ret = crypto_ahash_setkey(tfm, template[i].key,
327 printk(KERN_ERR "alg: hash: setkey "
328 "failed on chunking test %d "
329 "for %s: ret=%d\n", j, algo,
335 ahash_request_set_crypt(req, sg, result,
337 ret = crypto_ahash_digest(req);
343 ret = wait_for_completion_interruptible(
344 &tresult.completion);
345 if (!ret && !(ret = tresult.err)) {
346 reinit_completion(&tresult.completion);
351 printk(KERN_ERR "alg: hash: digest failed "
352 "on chunking test %d for %s: "
353 "ret=%d\n", j, algo, -ret);
357 if (memcmp(result, template[i].digest,
358 crypto_ahash_digestsize(tfm))) {
359 printk(KERN_ERR "alg: hash: Chunking test %d "
360 "failed for %s\n", j, algo);
361 hexdump(result, crypto_ahash_digestsize(tfm));
371 ahash_request_free(req);
373 testmgr_free_buf(xbuf);
378 static int test_hash(struct crypto_ahash *tfm, struct hash_testvec *template,
379 unsigned int tcount, bool use_digest)
381 unsigned int alignmask;
384 ret = __test_hash(tfm, template, tcount, use_digest, 0);
388 /* test unaligned buffers, check with one byte offset */
389 ret = __test_hash(tfm, template, tcount, use_digest, 1);
393 alignmask = crypto_tfm_alg_alignmask(&tfm->base);
395 /* Check if alignment mask for tfm is correctly set. */
396 ret = __test_hash(tfm, template, tcount, use_digest,
405 static int __test_aead(struct crypto_aead *tfm, int enc,
406 struct aead_testvec *template, unsigned int tcount,
407 const bool diff_dst, const int align_offset)
409 const char *algo = crypto_tfm_alg_driver_name(crypto_aead_tfm(tfm));
410 unsigned int i, j, k, n, temp;
414 struct aead_request *req;
415 struct scatterlist *sg;
416 struct scatterlist *asg;
417 struct scatterlist *sgout;
419 struct tcrypt_result result;
420 unsigned int authsize;
425 char *xbuf[XBUFSIZE];
426 char *xoutbuf[XBUFSIZE];
427 char *axbuf[XBUFSIZE];
429 iv = kzalloc(MAX_IVLEN, GFP_KERNEL);
432 if (testmgr_alloc_buf(xbuf))
434 if (testmgr_alloc_buf(axbuf))
436 if (diff_dst && testmgr_alloc_buf(xoutbuf))
439 /* avoid "the frame size is larger than 1024 bytes" compiler warning */
440 sg = kmalloc(sizeof(*sg) * 8 * (diff_dst ? 3 : 2), GFP_KERNEL);
456 init_completion(&result.completion);
458 req = aead_request_alloc(tfm, GFP_KERNEL);
460 pr_err("alg: aead%s: Failed to allocate request for %s\n",
465 aead_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
466 tcrypt_complete, &result);
468 for (i = 0, j = 0; i < tcount; i++) {
469 if (!template[i].np) {
472 /* some templates have no input data but they will
476 input += align_offset;
480 if (WARN_ON(align_offset + template[i].ilen >
481 PAGE_SIZE || template[i].alen > PAGE_SIZE))
484 memcpy(input, template[i].input, template[i].ilen);
485 memcpy(assoc, template[i].assoc, template[i].alen);
487 memcpy(iv, template[i].iv, MAX_IVLEN);
489 memset(iv, 0, MAX_IVLEN);
491 crypto_aead_clear_flags(tfm, ~0);
493 crypto_aead_set_flags(
494 tfm, CRYPTO_TFM_REQ_WEAK_KEY);
496 key = template[i].key;
498 ret = crypto_aead_setkey(tfm, key,
500 if (!ret == template[i].fail) {
501 pr_err("alg: aead%s: setkey failed on test %d for %s: flags=%x\n",
502 d, j, algo, crypto_aead_get_flags(tfm));
507 authsize = abs(template[i].rlen - template[i].ilen);
508 ret = crypto_aead_setauthsize(tfm, authsize);
510 pr_err("alg: aead%s: Failed to set authsize to %u on test %d for %s\n",
511 d, authsize, j, algo);
517 output += align_offset;
518 sg_init_one(&sg[0], input, template[i].ilen);
519 sg_init_one(&sgout[0], output,
522 sg_init_one(&sg[0], input,
524 (enc ? authsize : 0));
528 sg_init_one(&asg[0], assoc, template[i].alen);
530 aead_request_set_crypt(req, sg, (diff_dst) ? sgout : sg,
531 template[i].ilen, iv);
533 aead_request_set_assoc(req, asg, template[i].alen);
536 crypto_aead_encrypt(req) :
537 crypto_aead_decrypt(req);
541 if (template[i].novrfy) {
542 /* verification was supposed to fail */
543 pr_err("alg: aead%s: %s failed on test %d for %s: ret was 0, expected -EBADMSG\n",
545 /* so really, we got a bad message */
552 ret = wait_for_completion_interruptible(
554 if (!ret && !(ret = result.err)) {
555 reinit_completion(&result.completion);
559 if (template[i].novrfy)
560 /* verification failure was expected */
564 pr_err("alg: aead%s: %s failed on test %d for %s: ret=%d\n",
565 d, e, j, algo, -ret);
570 if (memcmp(q, template[i].result, template[i].rlen)) {
571 pr_err("alg: aead%s: Test %d failed on %s for %s\n",
573 hexdump(q, template[i].rlen);
580 for (i = 0, j = 0; i < tcount; i++) {
581 /* alignment tests are only done with continuous buffers */
582 if (align_offset != 0)
585 if (template[i].np) {
589 memcpy(iv, template[i].iv, MAX_IVLEN);
591 memset(iv, 0, MAX_IVLEN);
593 crypto_aead_clear_flags(tfm, ~0);
595 crypto_aead_set_flags(
596 tfm, CRYPTO_TFM_REQ_WEAK_KEY);
597 key = template[i].key;
599 ret = crypto_aead_setkey(tfm, key, template[i].klen);
600 if (!ret == template[i].fail) {
601 pr_err("alg: aead%s: setkey failed on chunk test %d for %s: flags=%x\n",
602 d, j, algo, crypto_aead_get_flags(tfm));
607 authsize = abs(template[i].rlen - template[i].ilen);
610 sg_init_table(sg, template[i].np);
612 sg_init_table(sgout, template[i].np);
613 for (k = 0, temp = 0; k < template[i].np; k++) {
614 if (WARN_ON(offset_in_page(IDX[k]) +
615 template[i].tap[k] > PAGE_SIZE))
618 q = xbuf[IDX[k] >> PAGE_SHIFT] +
619 offset_in_page(IDX[k]);
621 memcpy(q, template[i].input + temp,
624 sg_set_buf(&sg[k], q, template[i].tap[k]);
627 q = xoutbuf[IDX[k] >> PAGE_SHIFT] +
628 offset_in_page(IDX[k]);
630 memset(q, 0, template[i].tap[k]);
632 sg_set_buf(&sgout[k], q,
636 n = template[i].tap[k];
637 if (k == template[i].np - 1 && enc)
639 if (offset_in_page(q) + n < PAGE_SIZE)
642 temp += template[i].tap[k];
645 ret = crypto_aead_setauthsize(tfm, authsize);
647 pr_err("alg: aead%s: Failed to set authsize to %u on chunk test %d for %s\n",
648 d, authsize, j, algo);
653 if (WARN_ON(sg[k - 1].offset +
654 sg[k - 1].length + authsize >
661 sgout[k - 1].length += authsize;
663 sg[k - 1].length += authsize;
666 sg_init_table(asg, template[i].anp);
668 for (k = 0, temp = 0; k < template[i].anp; k++) {
669 if (WARN_ON(offset_in_page(IDX[k]) +
670 template[i].atap[k] > PAGE_SIZE))
673 memcpy(axbuf[IDX[k] >> PAGE_SHIFT] +
674 offset_in_page(IDX[k]),
675 template[i].assoc + temp,
676 template[i].atap[k]),
677 template[i].atap[k]);
678 temp += template[i].atap[k];
681 aead_request_set_crypt(req, sg, (diff_dst) ? sgout : sg,
685 aead_request_set_assoc(req, asg, template[i].alen);
688 crypto_aead_encrypt(req) :
689 crypto_aead_decrypt(req);
693 if (template[i].novrfy) {
694 /* verification was supposed to fail */
695 pr_err("alg: aead%s: %s failed on chunk test %d for %s: ret was 0, expected -EBADMSG\n",
697 /* so really, we got a bad message */
704 ret = wait_for_completion_interruptible(
706 if (!ret && !(ret = result.err)) {
707 reinit_completion(&result.completion);
711 if (template[i].novrfy)
712 /* verification failure was expected */
716 pr_err("alg: aead%s: %s failed on chunk test %d for %s: ret=%d\n",
717 d, e, j, algo, -ret);
722 for (k = 0, temp = 0; k < template[i].np; k++) {
724 q = xoutbuf[IDX[k] >> PAGE_SHIFT] +
725 offset_in_page(IDX[k]);
727 q = xbuf[IDX[k] >> PAGE_SHIFT] +
728 offset_in_page(IDX[k]);
730 n = template[i].tap[k];
731 if (k == template[i].np - 1)
732 n += enc ? authsize : -authsize;
734 if (memcmp(q, template[i].result + temp, n)) {
735 pr_err("alg: aead%s: Chunk test %d failed on %s at page %u for %s\n",
742 if (k == template[i].np - 1 && !enc) {
744 memcmp(q, template[i].input +
750 for (n = 0; offset_in_page(q + n) &&
755 pr_err("alg: aead%s: Result buffer corruption in chunk test %d on %s at page %u for %s: %u bytes:\n",
756 d, j, e, k, algo, n);
761 temp += template[i].tap[k];
769 aead_request_free(req);
773 testmgr_free_buf(xoutbuf);
775 testmgr_free_buf(axbuf);
777 testmgr_free_buf(xbuf);
783 static int test_aead(struct crypto_aead *tfm, int enc,
784 struct aead_testvec *template, unsigned int tcount)
786 unsigned int alignmask;
789 /* test 'dst == src' case */
790 ret = __test_aead(tfm, enc, template, tcount, false, 0);
794 /* test 'dst != src' case */
795 ret = __test_aead(tfm, enc, template, tcount, true, 0);
799 /* test unaligned buffers, check with one byte offset */
800 ret = __test_aead(tfm, enc, template, tcount, true, 1);
804 alignmask = crypto_tfm_alg_alignmask(&tfm->base);
806 /* Check if alignment mask for tfm is correctly set. */
807 ret = __test_aead(tfm, enc, template, tcount, true,
816 static int test_cipher(struct crypto_cipher *tfm, int enc,
817 struct cipher_testvec *template, unsigned int tcount)
819 const char *algo = crypto_tfm_alg_driver_name(crypto_cipher_tfm(tfm));
820 unsigned int i, j, k;
824 char *xbuf[XBUFSIZE];
827 if (testmgr_alloc_buf(xbuf))
836 for (i = 0; i < tcount; i++) {
843 if (WARN_ON(template[i].ilen > PAGE_SIZE))
847 memcpy(data, template[i].input, template[i].ilen);
849 crypto_cipher_clear_flags(tfm, ~0);
851 crypto_cipher_set_flags(tfm, CRYPTO_TFM_REQ_WEAK_KEY);
853 ret = crypto_cipher_setkey(tfm, template[i].key,
855 if (!ret == template[i].fail) {
856 printk(KERN_ERR "alg: cipher: setkey failed "
857 "on test %d for %s: flags=%x\n", j,
858 algo, crypto_cipher_get_flags(tfm));
863 for (k = 0; k < template[i].ilen;
864 k += crypto_cipher_blocksize(tfm)) {
866 crypto_cipher_encrypt_one(tfm, data + k,
869 crypto_cipher_decrypt_one(tfm, data + k,
874 if (memcmp(q, template[i].result, template[i].rlen)) {
875 printk(KERN_ERR "alg: cipher: Test %d failed "
876 "on %s for %s\n", j, e, algo);
877 hexdump(q, template[i].rlen);
886 testmgr_free_buf(xbuf);
891 static int __test_skcipher(struct crypto_ablkcipher *tfm, int enc,
892 struct cipher_testvec *template, unsigned int tcount,
893 const bool diff_dst, const int align_offset)
896 crypto_tfm_alg_driver_name(crypto_ablkcipher_tfm(tfm));
897 unsigned int i, j, k, n, temp;
899 struct ablkcipher_request *req;
900 struct scatterlist sg[8];
901 struct scatterlist sgout[8];
903 struct tcrypt_result result;
906 char *xbuf[XBUFSIZE];
907 char *xoutbuf[XBUFSIZE];
910 if (testmgr_alloc_buf(xbuf))
913 if (diff_dst && testmgr_alloc_buf(xoutbuf))
926 init_completion(&result.completion);
928 req = ablkcipher_request_alloc(tfm, GFP_KERNEL);
930 pr_err("alg: skcipher%s: Failed to allocate request for %s\n",
935 ablkcipher_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
936 tcrypt_complete, &result);
939 for (i = 0; i < tcount; i++) {
941 memcpy(iv, template[i].iv, MAX_IVLEN);
943 memset(iv, 0, MAX_IVLEN);
945 if (!(template[i].np) || (template[i].also_non_np)) {
949 if (WARN_ON(align_offset + template[i].ilen >
954 data += align_offset;
955 memcpy(data, template[i].input, template[i].ilen);
957 crypto_ablkcipher_clear_flags(tfm, ~0);
959 crypto_ablkcipher_set_flags(
960 tfm, CRYPTO_TFM_REQ_WEAK_KEY);
962 ret = crypto_ablkcipher_setkey(tfm, template[i].key,
964 if (!ret == template[i].fail) {
965 pr_err("alg: skcipher%s: setkey failed on test %d for %s: flags=%x\n",
967 crypto_ablkcipher_get_flags(tfm));
972 sg_init_one(&sg[0], data, template[i].ilen);
975 data += align_offset;
976 sg_init_one(&sgout[0], data, template[i].ilen);
979 ablkcipher_request_set_crypt(req, sg,
980 (diff_dst) ? sgout : sg,
981 template[i].ilen, iv);
983 crypto_ablkcipher_encrypt(req) :
984 crypto_ablkcipher_decrypt(req);
991 ret = wait_for_completion_interruptible(
993 if (!ret && !((ret = result.err))) {
994 reinit_completion(&result.completion);
999 pr_err("alg: skcipher%s: %s failed on test %d for %s: ret=%d\n",
1000 d, e, j, algo, -ret);
1005 if (memcmp(q, template[i].result, template[i].rlen)) {
1006 pr_err("alg: skcipher%s: Test %d failed on %s for %s\n",
1008 hexdump(q, template[i].rlen);
1016 for (i = 0; i < tcount; i++) {
1017 /* alignment tests are only done with continuous buffers */
1018 if (align_offset != 0)
1022 memcpy(iv, template[i].iv, MAX_IVLEN);
1024 memset(iv, 0, MAX_IVLEN);
1026 if (template[i].np) {
1029 crypto_ablkcipher_clear_flags(tfm, ~0);
1031 crypto_ablkcipher_set_flags(
1032 tfm, CRYPTO_TFM_REQ_WEAK_KEY);
1034 ret = crypto_ablkcipher_setkey(tfm, template[i].key,
1036 if (!ret == template[i].fail) {
1037 pr_err("alg: skcipher%s: setkey failed on chunk test %d for %s: flags=%x\n",
1039 crypto_ablkcipher_get_flags(tfm));
1046 sg_init_table(sg, template[i].np);
1048 sg_init_table(sgout, template[i].np);
1049 for (k = 0; k < template[i].np; k++) {
1050 if (WARN_ON(offset_in_page(IDX[k]) +
1051 template[i].tap[k] > PAGE_SIZE))
1054 q = xbuf[IDX[k] >> PAGE_SHIFT] +
1055 offset_in_page(IDX[k]);
1057 memcpy(q, template[i].input + temp,
1058 template[i].tap[k]);
1060 if (offset_in_page(q) + template[i].tap[k] <
1062 q[template[i].tap[k]] = 0;
1064 sg_set_buf(&sg[k], q, template[i].tap[k]);
1066 q = xoutbuf[IDX[k] >> PAGE_SHIFT] +
1067 offset_in_page(IDX[k]);
1069 sg_set_buf(&sgout[k], q,
1070 template[i].tap[k]);
1072 memset(q, 0, template[i].tap[k]);
1073 if (offset_in_page(q) +
1074 template[i].tap[k] < PAGE_SIZE)
1075 q[template[i].tap[k]] = 0;
1078 temp += template[i].tap[k];
1081 ablkcipher_request_set_crypt(req, sg,
1082 (diff_dst) ? sgout : sg,
1083 template[i].ilen, iv);
1086 crypto_ablkcipher_encrypt(req) :
1087 crypto_ablkcipher_decrypt(req);
1094 ret = wait_for_completion_interruptible(
1095 &result.completion);
1096 if (!ret && !((ret = result.err))) {
1097 reinit_completion(&result.completion);
1102 pr_err("alg: skcipher%s: %s failed on chunk test %d for %s: ret=%d\n",
1103 d, e, j, algo, -ret);
1109 for (k = 0; k < template[i].np; k++) {
1111 q = xoutbuf[IDX[k] >> PAGE_SHIFT] +
1112 offset_in_page(IDX[k]);
1114 q = xbuf[IDX[k] >> PAGE_SHIFT] +
1115 offset_in_page(IDX[k]);
1117 if (memcmp(q, template[i].result + temp,
1118 template[i].tap[k])) {
1119 pr_err("alg: skcipher%s: Chunk test %d failed on %s at page %u for %s\n",
1121 hexdump(q, template[i].tap[k]);
1125 q += template[i].tap[k];
1126 for (n = 0; offset_in_page(q + n) && q[n]; n++)
1129 pr_err("alg: skcipher%s: Result buffer corruption in chunk test %d on %s at page %u for %s: %u bytes:\n",
1130 d, j, e, k, algo, n);
1134 temp += template[i].tap[k];
1142 ablkcipher_request_free(req);
1144 testmgr_free_buf(xoutbuf);
1146 testmgr_free_buf(xbuf);
1151 static int test_skcipher(struct crypto_ablkcipher *tfm, int enc,
1152 struct cipher_testvec *template, unsigned int tcount)
1154 unsigned int alignmask;
1157 /* test 'dst == src' case */
1158 ret = __test_skcipher(tfm, enc, template, tcount, false, 0);
1162 /* test 'dst != src' case */
1163 ret = __test_skcipher(tfm, enc, template, tcount, true, 0);
1167 /* test unaligned buffers, check with one byte offset */
1168 ret = __test_skcipher(tfm, enc, template, tcount, true, 1);
1172 alignmask = crypto_tfm_alg_alignmask(&tfm->base);
1174 /* Check if alignment mask for tfm is correctly set. */
1175 ret = __test_skcipher(tfm, enc, template, tcount, true,
1184 static int test_comp(struct crypto_comp *tfm, struct comp_testvec *ctemplate,
1185 struct comp_testvec *dtemplate, int ctcount, int dtcount)
1187 const char *algo = crypto_tfm_alg_driver_name(crypto_comp_tfm(tfm));
1189 char result[COMP_BUF_SIZE];
1192 for (i = 0; i < ctcount; i++) {
1194 unsigned int dlen = COMP_BUF_SIZE;
1196 memset(result, 0, sizeof (result));
1198 ilen = ctemplate[i].inlen;
1199 ret = crypto_comp_compress(tfm, ctemplate[i].input,
1200 ilen, result, &dlen);
1202 printk(KERN_ERR "alg: comp: compression failed "
1203 "on test %d for %s: ret=%d\n", i + 1, algo,
1208 if (dlen != ctemplate[i].outlen) {
1209 printk(KERN_ERR "alg: comp: Compression test %d "
1210 "failed for %s: output len = %d\n", i + 1, algo,
1216 if (memcmp(result, ctemplate[i].output, dlen)) {
1217 printk(KERN_ERR "alg: comp: Compression test %d "
1218 "failed for %s\n", i + 1, algo);
1219 hexdump(result, dlen);
1225 for (i = 0; i < dtcount; i++) {
1227 unsigned int dlen = COMP_BUF_SIZE;
1229 memset(result, 0, sizeof (result));
1231 ilen = dtemplate[i].inlen;
1232 ret = crypto_comp_decompress(tfm, dtemplate[i].input,
1233 ilen, result, &dlen);
1235 printk(KERN_ERR "alg: comp: decompression failed "
1236 "on test %d for %s: ret=%d\n", i + 1, algo,
1241 if (dlen != dtemplate[i].outlen) {
1242 printk(KERN_ERR "alg: comp: Decompression test %d "
1243 "failed for %s: output len = %d\n", i + 1, algo,
1249 if (memcmp(result, dtemplate[i].output, dlen)) {
1250 printk(KERN_ERR "alg: comp: Decompression test %d "
1251 "failed for %s\n", i + 1, algo);
1252 hexdump(result, dlen);
1264 static int test_pcomp(struct crypto_pcomp *tfm,
1265 struct pcomp_testvec *ctemplate,
1266 struct pcomp_testvec *dtemplate, int ctcount,
1269 const char *algo = crypto_tfm_alg_driver_name(crypto_pcomp_tfm(tfm));
1271 char result[COMP_BUF_SIZE];
1274 for (i = 0; i < ctcount; i++) {
1275 struct comp_request req;
1276 unsigned int produced = 0;
1278 res = crypto_compress_setup(tfm, ctemplate[i].params,
1279 ctemplate[i].paramsize);
1281 pr_err("alg: pcomp: compression setup failed on test "
1282 "%d for %s: error=%d\n", i + 1, algo, res);
1286 res = crypto_compress_init(tfm);
1288 pr_err("alg: pcomp: compression init failed on test "
1289 "%d for %s: error=%d\n", i + 1, algo, res);
1293 memset(result, 0, sizeof(result));
1295 req.next_in = ctemplate[i].input;
1296 req.avail_in = ctemplate[i].inlen / 2;
1297 req.next_out = result;
1298 req.avail_out = ctemplate[i].outlen / 2;
1300 res = crypto_compress_update(tfm, &req);
1301 if (res < 0 && (res != -EAGAIN || req.avail_in)) {
1302 pr_err("alg: pcomp: compression update failed on test "
1303 "%d for %s: error=%d\n", i + 1, algo, res);
1309 /* Add remaining input data */
1310 req.avail_in += (ctemplate[i].inlen + 1) / 2;
1312 res = crypto_compress_update(tfm, &req);
1313 if (res < 0 && (res != -EAGAIN || req.avail_in)) {
1314 pr_err("alg: pcomp: compression update failed on test "
1315 "%d for %s: error=%d\n", i + 1, algo, res);
1321 /* Provide remaining output space */
1322 req.avail_out += COMP_BUF_SIZE - ctemplate[i].outlen / 2;
1324 res = crypto_compress_final(tfm, &req);
1326 pr_err("alg: pcomp: compression final failed on test "
1327 "%d for %s: error=%d\n", i + 1, algo, res);
1332 if (COMP_BUF_SIZE - req.avail_out != ctemplate[i].outlen) {
1333 pr_err("alg: comp: Compression test %d failed for %s: "
1334 "output len = %d (expected %d)\n", i + 1, algo,
1335 COMP_BUF_SIZE - req.avail_out,
1336 ctemplate[i].outlen);
1340 if (produced != ctemplate[i].outlen) {
1341 pr_err("alg: comp: Compression test %d failed for %s: "
1342 "returned len = %u (expected %d)\n", i + 1,
1343 algo, produced, ctemplate[i].outlen);
1347 if (memcmp(result, ctemplate[i].output, ctemplate[i].outlen)) {
1348 pr_err("alg: pcomp: Compression test %d failed for "
1349 "%s\n", i + 1, algo);
1350 hexdump(result, ctemplate[i].outlen);
1355 for (i = 0; i < dtcount; i++) {
1356 struct comp_request req;
1357 unsigned int produced = 0;
1359 res = crypto_decompress_setup(tfm, dtemplate[i].params,
1360 dtemplate[i].paramsize);
1362 pr_err("alg: pcomp: decompression setup failed on "
1363 "test %d for %s: error=%d\n", i + 1, algo, res);
1367 res = crypto_decompress_init(tfm);
1369 pr_err("alg: pcomp: decompression init failed on test "
1370 "%d for %s: error=%d\n", i + 1, algo, res);
1374 memset(result, 0, sizeof(result));
1376 req.next_in = dtemplate[i].input;
1377 req.avail_in = dtemplate[i].inlen / 2;
1378 req.next_out = result;
1379 req.avail_out = dtemplate[i].outlen / 2;
1381 res = crypto_decompress_update(tfm, &req);
1382 if (res < 0 && (res != -EAGAIN || req.avail_in)) {
1383 pr_err("alg: pcomp: decompression update failed on "
1384 "test %d for %s: error=%d\n", i + 1, algo, res);
1390 /* Add remaining input data */
1391 req.avail_in += (dtemplate[i].inlen + 1) / 2;
1393 res = crypto_decompress_update(tfm, &req);
1394 if (res < 0 && (res != -EAGAIN || req.avail_in)) {
1395 pr_err("alg: pcomp: decompression update failed on "
1396 "test %d for %s: error=%d\n", i + 1, algo, res);
1402 /* Provide remaining output space */
1403 req.avail_out += COMP_BUF_SIZE - dtemplate[i].outlen / 2;
1405 res = crypto_decompress_final(tfm, &req);
1406 if (res < 0 && (res != -EAGAIN || req.avail_in)) {
1407 pr_err("alg: pcomp: decompression final failed on "
1408 "test %d for %s: error=%d\n", i + 1, algo, res);
1414 if (COMP_BUF_SIZE - req.avail_out != dtemplate[i].outlen) {
1415 pr_err("alg: comp: Decompression test %d failed for "
1416 "%s: output len = %d (expected %d)\n", i + 1,
1417 algo, COMP_BUF_SIZE - req.avail_out,
1418 dtemplate[i].outlen);
1422 if (produced != dtemplate[i].outlen) {
1423 pr_err("alg: comp: Decompression test %d failed for "
1424 "%s: returned len = %u (expected %d)\n", i + 1,
1425 algo, produced, dtemplate[i].outlen);
1429 if (memcmp(result, dtemplate[i].output, dtemplate[i].outlen)) {
1430 pr_err("alg: pcomp: Decompression test %d failed for "
1431 "%s\n", i + 1, algo);
1432 hexdump(result, dtemplate[i].outlen);
1441 static int test_cprng(struct crypto_rng *tfm, struct cprng_testvec *template,
1442 unsigned int tcount)
1444 const char *algo = crypto_tfm_alg_driver_name(crypto_rng_tfm(tfm));
1445 int err = 0, i, j, seedsize;
1449 seedsize = crypto_rng_seedsize(tfm);
1451 seed = kmalloc(seedsize, GFP_KERNEL);
1453 printk(KERN_ERR "alg: cprng: Failed to allocate seed space "
1458 for (i = 0; i < tcount; i++) {
1459 memset(result, 0, 32);
1461 memcpy(seed, template[i].v, template[i].vlen);
1462 memcpy(seed + template[i].vlen, template[i].key,
1464 memcpy(seed + template[i].vlen + template[i].klen,
1465 template[i].dt, template[i].dtlen);
1467 err = crypto_rng_reset(tfm, seed, seedsize);
1469 printk(KERN_ERR "alg: cprng: Failed to reset rng "
1474 for (j = 0; j < template[i].loops; j++) {
1475 err = crypto_rng_get_bytes(tfm, result,
1477 if (err != template[i].rlen) {
1478 printk(KERN_ERR "alg: cprng: Failed to obtain "
1479 "the correct amount of random data for "
1480 "%s (requested %d, got %d)\n", algo,
1481 template[i].rlen, err);
1486 err = memcmp(result, template[i].result,
1489 printk(KERN_ERR "alg: cprng: Test %d failed for %s\n",
1491 hexdump(result, template[i].rlen);
1502 static int alg_test_aead(const struct alg_test_desc *desc, const char *driver,
1505 struct crypto_aead *tfm;
1508 tfm = crypto_alloc_aead(driver, type, mask);
1510 printk(KERN_ERR "alg: aead: Failed to load transform for %s: "
1511 "%ld\n", driver, PTR_ERR(tfm));
1512 return PTR_ERR(tfm);
1515 if (desc->suite.aead.enc.vecs) {
1516 err = test_aead(tfm, ENCRYPT, desc->suite.aead.enc.vecs,
1517 desc->suite.aead.enc.count);
1522 if (!err && desc->suite.aead.dec.vecs)
1523 err = test_aead(tfm, DECRYPT, desc->suite.aead.dec.vecs,
1524 desc->suite.aead.dec.count);
1527 crypto_free_aead(tfm);
1531 static int alg_test_cipher(const struct alg_test_desc *desc,
1532 const char *driver, u32 type, u32 mask)
1534 struct crypto_cipher *tfm;
1537 tfm = crypto_alloc_cipher(driver, type, mask);
1539 printk(KERN_ERR "alg: cipher: Failed to load transform for "
1540 "%s: %ld\n", driver, PTR_ERR(tfm));
1541 return PTR_ERR(tfm);
1544 if (desc->suite.cipher.enc.vecs) {
1545 err = test_cipher(tfm, ENCRYPT, desc->suite.cipher.enc.vecs,
1546 desc->suite.cipher.enc.count);
1551 if (desc->suite.cipher.dec.vecs)
1552 err = test_cipher(tfm, DECRYPT, desc->suite.cipher.dec.vecs,
1553 desc->suite.cipher.dec.count);
1556 crypto_free_cipher(tfm);
1560 static int alg_test_skcipher(const struct alg_test_desc *desc,
1561 const char *driver, u32 type, u32 mask)
1563 struct crypto_ablkcipher *tfm;
1566 tfm = crypto_alloc_ablkcipher(driver, type, mask);
1568 printk(KERN_ERR "alg: skcipher: Failed to load transform for "
1569 "%s: %ld\n", driver, PTR_ERR(tfm));
1570 return PTR_ERR(tfm);
1573 if (desc->suite.cipher.enc.vecs) {
1574 err = test_skcipher(tfm, ENCRYPT, desc->suite.cipher.enc.vecs,
1575 desc->suite.cipher.enc.count);
1580 if (desc->suite.cipher.dec.vecs)
1581 err = test_skcipher(tfm, DECRYPT, desc->suite.cipher.dec.vecs,
1582 desc->suite.cipher.dec.count);
1585 crypto_free_ablkcipher(tfm);
1589 static int alg_test_comp(const struct alg_test_desc *desc, const char *driver,
1592 struct crypto_comp *tfm;
1595 tfm = crypto_alloc_comp(driver, type, mask);
1597 printk(KERN_ERR "alg: comp: Failed to load transform for %s: "
1598 "%ld\n", driver, PTR_ERR(tfm));
1599 return PTR_ERR(tfm);
1602 err = test_comp(tfm, desc->suite.comp.comp.vecs,
1603 desc->suite.comp.decomp.vecs,
1604 desc->suite.comp.comp.count,
1605 desc->suite.comp.decomp.count);
1607 crypto_free_comp(tfm);
1611 static int alg_test_pcomp(const struct alg_test_desc *desc, const char *driver,
1614 struct crypto_pcomp *tfm;
1617 tfm = crypto_alloc_pcomp(driver, type, mask);
1619 pr_err("alg: pcomp: Failed to load transform for %s: %ld\n",
1620 driver, PTR_ERR(tfm));
1621 return PTR_ERR(tfm);
1624 err = test_pcomp(tfm, desc->suite.pcomp.comp.vecs,
1625 desc->suite.pcomp.decomp.vecs,
1626 desc->suite.pcomp.comp.count,
1627 desc->suite.pcomp.decomp.count);
1629 crypto_free_pcomp(tfm);
1633 static int alg_test_hash(const struct alg_test_desc *desc, const char *driver,
1636 struct crypto_ahash *tfm;
1639 tfm = crypto_alloc_ahash(driver, type, mask);
1641 printk(KERN_ERR "alg: hash: Failed to load transform for %s: "
1642 "%ld\n", driver, PTR_ERR(tfm));
1643 return PTR_ERR(tfm);
1646 err = test_hash(tfm, desc->suite.hash.vecs,
1647 desc->suite.hash.count, true);
1649 err = test_hash(tfm, desc->suite.hash.vecs,
1650 desc->suite.hash.count, false);
1652 crypto_free_ahash(tfm);
1656 static int alg_test_crc32c(const struct alg_test_desc *desc,
1657 const char *driver, u32 type, u32 mask)
1659 struct crypto_shash *tfm;
1663 err = alg_test_hash(desc, driver, type, mask);
1667 tfm = crypto_alloc_shash(driver, type, mask);
1669 printk(KERN_ERR "alg: crc32c: Failed to load transform for %s: "
1670 "%ld\n", driver, PTR_ERR(tfm));
1677 struct shash_desc shash;
1678 char ctx[crypto_shash_descsize(tfm)];
1681 sdesc.shash.tfm = tfm;
1682 sdesc.shash.flags = 0;
1684 *(u32 *)sdesc.ctx = le32_to_cpu(420553207);
1685 err = crypto_shash_final(&sdesc.shash, (u8 *)&val);
1687 printk(KERN_ERR "alg: crc32c: Operation failed for "
1688 "%s: %d\n", driver, err);
1692 if (val != ~420553207) {
1693 printk(KERN_ERR "alg: crc32c: Test failed for %s: "
1694 "%d\n", driver, val);
1699 crypto_free_shash(tfm);
1705 static int alg_test_cprng(const struct alg_test_desc *desc, const char *driver,
1708 struct crypto_rng *rng;
1711 rng = crypto_alloc_rng(driver, type, mask);
1713 printk(KERN_ERR "alg: cprng: Failed to load transform for %s: "
1714 "%ld\n", driver, PTR_ERR(rng));
1715 return PTR_ERR(rng);
1718 err = test_cprng(rng, desc->suite.cprng.vecs, desc->suite.cprng.count);
1720 crypto_free_rng(rng);
1726 static int drbg_cavs_test(struct drbg_testvec *test, int pr,
1727 const char *driver, u32 type, u32 mask)
1730 struct crypto_rng *drng;
1731 struct drbg_test_data test_data;
1732 struct drbg_string addtl, pers, testentropy;
1733 unsigned char *buf = kzalloc(test->expectedlen, GFP_KERNEL);
1738 drng = crypto_alloc_rng(driver, type, mask);
1740 printk(KERN_ERR "alg: drbg: could not allocate DRNG handle for"
1746 test_data.testentropy = &testentropy;
1747 drbg_string_fill(&testentropy, test->entropy, test->entropylen);
1748 drbg_string_fill(&pers, test->pers, test->perslen);
1749 ret = crypto_drbg_reset_test(drng, &pers, &test_data);
1751 printk(KERN_ERR "alg: drbg: Failed to reset rng\n");
1755 drbg_string_fill(&addtl, test->addtla, test->addtllen);
1757 drbg_string_fill(&testentropy, test->entpra, test->entprlen);
1758 ret = crypto_drbg_get_bytes_addtl_test(drng,
1759 buf, test->expectedlen, &addtl, &test_data);
1761 ret = crypto_drbg_get_bytes_addtl(drng,
1762 buf, test->expectedlen, &addtl);
1765 printk(KERN_ERR "alg: drbg: could not obtain random data for"
1766 "driver %s\n", driver);
1770 drbg_string_fill(&addtl, test->addtlb, test->addtllen);
1772 drbg_string_fill(&testentropy, test->entprb, test->entprlen);
1773 ret = crypto_drbg_get_bytes_addtl_test(drng,
1774 buf, test->expectedlen, &addtl, &test_data);
1776 ret = crypto_drbg_get_bytes_addtl(drng,
1777 buf, test->expectedlen, &addtl);
1780 printk(KERN_ERR "alg: drbg: could not obtain random data for"
1781 "driver %s\n", driver);
1785 ret = memcmp(test->expected, buf, test->expectedlen);
1788 crypto_free_rng(drng);
1794 static int alg_test_drbg(const struct alg_test_desc *desc, const char *driver,
1800 struct drbg_testvec *template = desc->suite.drbg.vecs;
1801 unsigned int tcount = desc->suite.drbg.count;
1803 if (0 == memcmp(driver, "drbg_pr_", 8))
1806 for (i = 0; i < tcount; i++) {
1807 err = drbg_cavs_test(&template[i], pr, driver, type, mask);
1809 printk(KERN_ERR "alg: drbg: Test %d failed for %s\n",
1819 static int alg_test_null(const struct alg_test_desc *desc,
1820 const char *driver, u32 type, u32 mask)
1825 /* Please keep this list sorted by algorithm name. */
1826 static const struct alg_test_desc alg_test_descs[] = {
1828 .alg = "__cbc-cast5-avx",
1829 .test = alg_test_null,
1831 .alg = "__cbc-cast6-avx",
1832 .test = alg_test_null,
1834 .alg = "__cbc-serpent-avx",
1835 .test = alg_test_null,
1837 .alg = "__cbc-serpent-avx2",
1838 .test = alg_test_null,
1840 .alg = "__cbc-serpent-sse2",
1841 .test = alg_test_null,
1843 .alg = "__cbc-twofish-avx",
1844 .test = alg_test_null,
1846 .alg = "__driver-cbc-aes-aesni",
1847 .test = alg_test_null,
1850 .alg = "__driver-cbc-camellia-aesni",
1851 .test = alg_test_null,
1853 .alg = "__driver-cbc-camellia-aesni-avx2",
1854 .test = alg_test_null,
1856 .alg = "__driver-cbc-cast5-avx",
1857 .test = alg_test_null,
1859 .alg = "__driver-cbc-cast6-avx",
1860 .test = alg_test_null,
1862 .alg = "__driver-cbc-serpent-avx",
1863 .test = alg_test_null,
1865 .alg = "__driver-cbc-serpent-avx2",
1866 .test = alg_test_null,
1868 .alg = "__driver-cbc-serpent-sse2",
1869 .test = alg_test_null,
1871 .alg = "__driver-cbc-twofish-avx",
1872 .test = alg_test_null,
1874 .alg = "__driver-ecb-aes-aesni",
1875 .test = alg_test_null,
1878 .alg = "__driver-ecb-camellia-aesni",
1879 .test = alg_test_null,
1881 .alg = "__driver-ecb-camellia-aesni-avx2",
1882 .test = alg_test_null,
1884 .alg = "__driver-ecb-cast5-avx",
1885 .test = alg_test_null,
1887 .alg = "__driver-ecb-cast6-avx",
1888 .test = alg_test_null,
1890 .alg = "__driver-ecb-serpent-avx",
1891 .test = alg_test_null,
1893 .alg = "__driver-ecb-serpent-avx2",
1894 .test = alg_test_null,
1896 .alg = "__driver-ecb-serpent-sse2",
1897 .test = alg_test_null,
1899 .alg = "__driver-ecb-twofish-avx",
1900 .test = alg_test_null,
1902 .alg = "__ghash-pclmulqdqni",
1903 .test = alg_test_null,
1906 .alg = "ansi_cprng",
1907 .test = alg_test_cprng,
1911 .vecs = ansi_cprng_aes_tv_template,
1912 .count = ANSI_CPRNG_AES_TEST_VECTORS
1916 .alg = "authenc(hmac(md5),ecb(cipher_null))",
1917 .test = alg_test_aead,
1922 .vecs = hmac_md5_ecb_cipher_null_enc_tv_template,
1923 .count = HMAC_MD5_ECB_CIPHER_NULL_ENC_TEST_VECTORS
1926 .vecs = hmac_md5_ecb_cipher_null_dec_tv_template,
1927 .count = HMAC_MD5_ECB_CIPHER_NULL_DEC_TEST_VECTORS
1932 .alg = "authenc(hmac(sha1),cbc(aes))",
1933 .test = alg_test_aead,
1939 hmac_sha1_aes_cbc_enc_tv_temp,
1941 HMAC_SHA1_AES_CBC_ENC_TEST_VEC
1946 .alg = "authenc(hmac(sha1),cbc(des))",
1947 .test = alg_test_aead,
1953 hmac_sha1_des_cbc_enc_tv_temp,
1955 HMAC_SHA1_DES_CBC_ENC_TEST_VEC
1960 .alg = "authenc(hmac(sha1),cbc(des3_ede))",
1961 .test = alg_test_aead,
1967 hmac_sha1_des3_ede_cbc_enc_tv_temp,
1969 HMAC_SHA1_DES3_EDE_CBC_ENC_TEST_VEC
1974 .alg = "authenc(hmac(sha1),ecb(cipher_null))",
1975 .test = alg_test_aead,
1981 hmac_sha1_ecb_cipher_null_enc_tv_temp,
1983 HMAC_SHA1_ECB_CIPHER_NULL_ENC_TEST_VEC
1987 hmac_sha1_ecb_cipher_null_dec_tv_temp,
1989 HMAC_SHA1_ECB_CIPHER_NULL_DEC_TEST_VEC
1994 .alg = "authenc(hmac(sha224),cbc(des))",
1995 .test = alg_test_aead,
2001 hmac_sha224_des_cbc_enc_tv_temp,
2003 HMAC_SHA224_DES_CBC_ENC_TEST_VEC
2008 .alg = "authenc(hmac(sha224),cbc(des3_ede))",
2009 .test = alg_test_aead,
2015 hmac_sha224_des3_ede_cbc_enc_tv_temp,
2017 HMAC_SHA224_DES3_EDE_CBC_ENC_TEST_VEC
2022 .alg = "authenc(hmac(sha256),cbc(aes))",
2023 .test = alg_test_aead,
2029 hmac_sha256_aes_cbc_enc_tv_temp,
2031 HMAC_SHA256_AES_CBC_ENC_TEST_VEC
2036 .alg = "authenc(hmac(sha256),cbc(des))",
2037 .test = alg_test_aead,
2043 hmac_sha256_des_cbc_enc_tv_temp,
2045 HMAC_SHA256_DES_CBC_ENC_TEST_VEC
2050 .alg = "authenc(hmac(sha256),cbc(des3_ede))",
2051 .test = alg_test_aead,
2057 hmac_sha256_des3_ede_cbc_enc_tv_temp,
2059 HMAC_SHA256_DES3_EDE_CBC_ENC_TEST_VEC
2064 .alg = "authenc(hmac(sha384),cbc(des))",
2065 .test = alg_test_aead,
2071 hmac_sha384_des_cbc_enc_tv_temp,
2073 HMAC_SHA384_DES_CBC_ENC_TEST_VEC
2078 .alg = "authenc(hmac(sha384),cbc(des3_ede))",
2079 .test = alg_test_aead,
2085 hmac_sha384_des3_ede_cbc_enc_tv_temp,
2087 HMAC_SHA384_DES3_EDE_CBC_ENC_TEST_VEC
2092 .alg = "authenc(hmac(sha512),cbc(aes))",
2093 .test = alg_test_aead,
2099 hmac_sha512_aes_cbc_enc_tv_temp,
2101 HMAC_SHA512_AES_CBC_ENC_TEST_VEC
2106 .alg = "authenc(hmac(sha512),cbc(des))",
2107 .test = alg_test_aead,
2113 hmac_sha512_des_cbc_enc_tv_temp,
2115 HMAC_SHA512_DES_CBC_ENC_TEST_VEC
2120 .alg = "authenc(hmac(sha512),cbc(des3_ede))",
2121 .test = alg_test_aead,
2127 hmac_sha512_des3_ede_cbc_enc_tv_temp,
2129 HMAC_SHA512_DES3_EDE_CBC_ENC_TEST_VEC
2135 .test = alg_test_skcipher,
2140 .vecs = aes_cbc_enc_tv_template,
2141 .count = AES_CBC_ENC_TEST_VECTORS
2144 .vecs = aes_cbc_dec_tv_template,
2145 .count = AES_CBC_DEC_TEST_VECTORS
2150 .alg = "cbc(anubis)",
2151 .test = alg_test_skcipher,
2155 .vecs = anubis_cbc_enc_tv_template,
2156 .count = ANUBIS_CBC_ENC_TEST_VECTORS
2159 .vecs = anubis_cbc_dec_tv_template,
2160 .count = ANUBIS_CBC_DEC_TEST_VECTORS
2165 .alg = "cbc(blowfish)",
2166 .test = alg_test_skcipher,
2170 .vecs = bf_cbc_enc_tv_template,
2171 .count = BF_CBC_ENC_TEST_VECTORS
2174 .vecs = bf_cbc_dec_tv_template,
2175 .count = BF_CBC_DEC_TEST_VECTORS
2180 .alg = "cbc(camellia)",
2181 .test = alg_test_skcipher,
2185 .vecs = camellia_cbc_enc_tv_template,
2186 .count = CAMELLIA_CBC_ENC_TEST_VECTORS
2189 .vecs = camellia_cbc_dec_tv_template,
2190 .count = CAMELLIA_CBC_DEC_TEST_VECTORS
2195 .alg = "cbc(cast5)",
2196 .test = alg_test_skcipher,
2200 .vecs = cast5_cbc_enc_tv_template,
2201 .count = CAST5_CBC_ENC_TEST_VECTORS
2204 .vecs = cast5_cbc_dec_tv_template,
2205 .count = CAST5_CBC_DEC_TEST_VECTORS
2210 .alg = "cbc(cast6)",
2211 .test = alg_test_skcipher,
2215 .vecs = cast6_cbc_enc_tv_template,
2216 .count = CAST6_CBC_ENC_TEST_VECTORS
2219 .vecs = cast6_cbc_dec_tv_template,
2220 .count = CAST6_CBC_DEC_TEST_VECTORS
2226 .test = alg_test_skcipher,
2230 .vecs = des_cbc_enc_tv_template,
2231 .count = DES_CBC_ENC_TEST_VECTORS
2234 .vecs = des_cbc_dec_tv_template,
2235 .count = DES_CBC_DEC_TEST_VECTORS
2240 .alg = "cbc(des3_ede)",
2241 .test = alg_test_skcipher,
2246 .vecs = des3_ede_cbc_enc_tv_template,
2247 .count = DES3_EDE_CBC_ENC_TEST_VECTORS
2250 .vecs = des3_ede_cbc_dec_tv_template,
2251 .count = DES3_EDE_CBC_DEC_TEST_VECTORS
2256 .alg = "cbc(serpent)",
2257 .test = alg_test_skcipher,
2261 .vecs = serpent_cbc_enc_tv_template,
2262 .count = SERPENT_CBC_ENC_TEST_VECTORS
2265 .vecs = serpent_cbc_dec_tv_template,
2266 .count = SERPENT_CBC_DEC_TEST_VECTORS
2271 .alg = "cbc(twofish)",
2272 .test = alg_test_skcipher,
2276 .vecs = tf_cbc_enc_tv_template,
2277 .count = TF_CBC_ENC_TEST_VECTORS
2280 .vecs = tf_cbc_dec_tv_template,
2281 .count = TF_CBC_DEC_TEST_VECTORS
2287 .test = alg_test_aead,
2292 .vecs = aes_ccm_enc_tv_template,
2293 .count = AES_CCM_ENC_TEST_VECTORS
2296 .vecs = aes_ccm_dec_tv_template,
2297 .count = AES_CCM_DEC_TEST_VECTORS
2303 .test = alg_test_hash,
2306 .vecs = aes_cmac128_tv_template,
2307 .count = CMAC_AES_TEST_VECTORS
2311 .alg = "cmac(des3_ede)",
2312 .test = alg_test_hash,
2315 .vecs = des3_ede_cmac64_tv_template,
2316 .count = CMAC_DES3_EDE_TEST_VECTORS
2320 .alg = "compress_null",
2321 .test = alg_test_null,
2324 .test = alg_test_crc32c,
2328 .vecs = crc32c_tv_template,
2329 .count = CRC32C_TEST_VECTORS
2334 .test = alg_test_hash,
2338 .vecs = crct10dif_tv_template,
2339 .count = CRCT10DIF_TEST_VECTORS
2343 .alg = "cryptd(__driver-cbc-aes-aesni)",
2344 .test = alg_test_null,
2347 .alg = "cryptd(__driver-cbc-camellia-aesni)",
2348 .test = alg_test_null,
2350 .alg = "cryptd(__driver-cbc-camellia-aesni-avx2)",
2351 .test = alg_test_null,
2353 .alg = "cryptd(__driver-cbc-serpent-avx2)",
2354 .test = alg_test_null,
2356 .alg = "cryptd(__driver-ecb-aes-aesni)",
2357 .test = alg_test_null,
2360 .alg = "cryptd(__driver-ecb-camellia-aesni)",
2361 .test = alg_test_null,
2363 .alg = "cryptd(__driver-ecb-camellia-aesni-avx2)",
2364 .test = alg_test_null,
2366 .alg = "cryptd(__driver-ecb-cast5-avx)",
2367 .test = alg_test_null,
2369 .alg = "cryptd(__driver-ecb-cast6-avx)",
2370 .test = alg_test_null,
2372 .alg = "cryptd(__driver-ecb-serpent-avx)",
2373 .test = alg_test_null,
2375 .alg = "cryptd(__driver-ecb-serpent-avx2)",
2376 .test = alg_test_null,
2378 .alg = "cryptd(__driver-ecb-serpent-sse2)",
2379 .test = alg_test_null,
2381 .alg = "cryptd(__driver-ecb-twofish-avx)",
2382 .test = alg_test_null,
2384 .alg = "cryptd(__driver-gcm-aes-aesni)",
2385 .test = alg_test_null,
2388 .alg = "cryptd(__ghash-pclmulqdqni)",
2389 .test = alg_test_null,
2393 .test = alg_test_skcipher,
2398 .vecs = aes_ctr_enc_tv_template,
2399 .count = AES_CTR_ENC_TEST_VECTORS
2402 .vecs = aes_ctr_dec_tv_template,
2403 .count = AES_CTR_DEC_TEST_VECTORS
2408 .alg = "ctr(blowfish)",
2409 .test = alg_test_skcipher,
2413 .vecs = bf_ctr_enc_tv_template,
2414 .count = BF_CTR_ENC_TEST_VECTORS
2417 .vecs = bf_ctr_dec_tv_template,
2418 .count = BF_CTR_DEC_TEST_VECTORS
2423 .alg = "ctr(camellia)",
2424 .test = alg_test_skcipher,
2428 .vecs = camellia_ctr_enc_tv_template,
2429 .count = CAMELLIA_CTR_ENC_TEST_VECTORS
2432 .vecs = camellia_ctr_dec_tv_template,
2433 .count = CAMELLIA_CTR_DEC_TEST_VECTORS
2438 .alg = "ctr(cast5)",
2439 .test = alg_test_skcipher,
2443 .vecs = cast5_ctr_enc_tv_template,
2444 .count = CAST5_CTR_ENC_TEST_VECTORS
2447 .vecs = cast5_ctr_dec_tv_template,
2448 .count = CAST5_CTR_DEC_TEST_VECTORS
2453 .alg = "ctr(cast6)",
2454 .test = alg_test_skcipher,
2458 .vecs = cast6_ctr_enc_tv_template,
2459 .count = CAST6_CTR_ENC_TEST_VECTORS
2462 .vecs = cast6_ctr_dec_tv_template,
2463 .count = CAST6_CTR_DEC_TEST_VECTORS
2469 .test = alg_test_skcipher,
2473 .vecs = des_ctr_enc_tv_template,
2474 .count = DES_CTR_ENC_TEST_VECTORS
2477 .vecs = des_ctr_dec_tv_template,
2478 .count = DES_CTR_DEC_TEST_VECTORS
2483 .alg = "ctr(des3_ede)",
2484 .test = alg_test_skcipher,
2488 .vecs = des3_ede_ctr_enc_tv_template,
2489 .count = DES3_EDE_CTR_ENC_TEST_VECTORS
2492 .vecs = des3_ede_ctr_dec_tv_template,
2493 .count = DES3_EDE_CTR_DEC_TEST_VECTORS
2498 .alg = "ctr(serpent)",
2499 .test = alg_test_skcipher,
2503 .vecs = serpent_ctr_enc_tv_template,
2504 .count = SERPENT_CTR_ENC_TEST_VECTORS
2507 .vecs = serpent_ctr_dec_tv_template,
2508 .count = SERPENT_CTR_DEC_TEST_VECTORS
2513 .alg = "ctr(twofish)",
2514 .test = alg_test_skcipher,
2518 .vecs = tf_ctr_enc_tv_template,
2519 .count = TF_CTR_ENC_TEST_VECTORS
2522 .vecs = tf_ctr_dec_tv_template,
2523 .count = TF_CTR_DEC_TEST_VECTORS
2528 .alg = "cts(cbc(aes))",
2529 .test = alg_test_skcipher,
2533 .vecs = cts_mode_enc_tv_template,
2534 .count = CTS_MODE_ENC_TEST_VECTORS
2537 .vecs = cts_mode_dec_tv_template,
2538 .count = CTS_MODE_DEC_TEST_VECTORS
2544 .test = alg_test_comp,
2549 .vecs = deflate_comp_tv_template,
2550 .count = DEFLATE_COMP_TEST_VECTORS
2553 .vecs = deflate_decomp_tv_template,
2554 .count = DEFLATE_DECOMP_TEST_VECTORS
2559 .alg = "digest_null",
2560 .test = alg_test_null,
2562 .alg = "drbg_nopr_ctr_aes128",
2563 .test = alg_test_drbg,
2567 .vecs = drbg_nopr_ctr_aes128_tv_template,
2568 .count = ARRAY_SIZE(drbg_nopr_ctr_aes128_tv_template)
2572 .alg = "drbg_nopr_ctr_aes192",
2573 .test = alg_test_drbg,
2577 .vecs = drbg_nopr_ctr_aes192_tv_template,
2578 .count = ARRAY_SIZE(drbg_nopr_ctr_aes192_tv_template)
2582 .alg = "drbg_nopr_ctr_aes256",
2583 .test = alg_test_drbg,
2587 .vecs = drbg_nopr_ctr_aes256_tv_template,
2588 .count = ARRAY_SIZE(drbg_nopr_ctr_aes256_tv_template)
2593 * There is no need to specifically test the DRBG with every
2594 * backend cipher -- covered by drbg_nopr_hmac_sha256 test
2596 .alg = "drbg_nopr_hmac_sha1",
2598 .test = alg_test_null,
2600 .alg = "drbg_nopr_hmac_sha256",
2601 .test = alg_test_drbg,
2605 .vecs = drbg_nopr_hmac_sha256_tv_template,
2607 ARRAY_SIZE(drbg_nopr_hmac_sha256_tv_template)
2611 /* covered by drbg_nopr_hmac_sha256 test */
2612 .alg = "drbg_nopr_hmac_sha384",
2614 .test = alg_test_null,
2616 .alg = "drbg_nopr_hmac_sha512",
2617 .test = alg_test_null,
2620 .alg = "drbg_nopr_sha1",
2622 .test = alg_test_null,
2624 .alg = "drbg_nopr_sha256",
2625 .test = alg_test_drbg,
2629 .vecs = drbg_nopr_sha256_tv_template,
2630 .count = ARRAY_SIZE(drbg_nopr_sha256_tv_template)
2634 /* covered by drbg_nopr_sha256 test */
2635 .alg = "drbg_nopr_sha384",
2637 .test = alg_test_null,
2639 .alg = "drbg_nopr_sha512",
2641 .test = alg_test_null,
2643 .alg = "drbg_pr_ctr_aes128",
2644 .test = alg_test_drbg,
2648 .vecs = drbg_pr_ctr_aes128_tv_template,
2649 .count = ARRAY_SIZE(drbg_pr_ctr_aes128_tv_template)
2653 /* covered by drbg_pr_ctr_aes128 test */
2654 .alg = "drbg_pr_ctr_aes192",
2656 .test = alg_test_null,
2658 .alg = "drbg_pr_ctr_aes256",
2660 .test = alg_test_null,
2662 .alg = "drbg_pr_hmac_sha1",
2664 .test = alg_test_null,
2666 .alg = "drbg_pr_hmac_sha256",
2667 .test = alg_test_drbg,
2671 .vecs = drbg_pr_hmac_sha256_tv_template,
2672 .count = ARRAY_SIZE(drbg_pr_hmac_sha256_tv_template)
2676 /* covered by drbg_pr_hmac_sha256 test */
2677 .alg = "drbg_pr_hmac_sha384",
2679 .test = alg_test_null,
2681 .alg = "drbg_pr_hmac_sha512",
2682 .test = alg_test_null,
2685 .alg = "drbg_pr_sha1",
2687 .test = alg_test_null,
2689 .alg = "drbg_pr_sha256",
2690 .test = alg_test_drbg,
2694 .vecs = drbg_pr_sha256_tv_template,
2695 .count = ARRAY_SIZE(drbg_pr_sha256_tv_template)
2699 /* covered by drbg_pr_sha256 test */
2700 .alg = "drbg_pr_sha384",
2702 .test = alg_test_null,
2704 .alg = "drbg_pr_sha512",
2706 .test = alg_test_null,
2708 .alg = "ecb(__aes-aesni)",
2709 .test = alg_test_null,
2713 .test = alg_test_skcipher,
2718 .vecs = aes_enc_tv_template,
2719 .count = AES_ENC_TEST_VECTORS
2722 .vecs = aes_dec_tv_template,
2723 .count = AES_DEC_TEST_VECTORS
2728 .alg = "ecb(anubis)",
2729 .test = alg_test_skcipher,
2733 .vecs = anubis_enc_tv_template,
2734 .count = ANUBIS_ENC_TEST_VECTORS
2737 .vecs = anubis_dec_tv_template,
2738 .count = ANUBIS_DEC_TEST_VECTORS
2744 .test = alg_test_skcipher,
2748 .vecs = arc4_enc_tv_template,
2749 .count = ARC4_ENC_TEST_VECTORS
2752 .vecs = arc4_dec_tv_template,
2753 .count = ARC4_DEC_TEST_VECTORS
2758 .alg = "ecb(blowfish)",
2759 .test = alg_test_skcipher,
2763 .vecs = bf_enc_tv_template,
2764 .count = BF_ENC_TEST_VECTORS
2767 .vecs = bf_dec_tv_template,
2768 .count = BF_DEC_TEST_VECTORS
2773 .alg = "ecb(camellia)",
2774 .test = alg_test_skcipher,
2778 .vecs = camellia_enc_tv_template,
2779 .count = CAMELLIA_ENC_TEST_VECTORS
2782 .vecs = camellia_dec_tv_template,
2783 .count = CAMELLIA_DEC_TEST_VECTORS
2788 .alg = "ecb(cast5)",
2789 .test = alg_test_skcipher,
2793 .vecs = cast5_enc_tv_template,
2794 .count = CAST5_ENC_TEST_VECTORS
2797 .vecs = cast5_dec_tv_template,
2798 .count = CAST5_DEC_TEST_VECTORS
2803 .alg = "ecb(cast6)",
2804 .test = alg_test_skcipher,
2808 .vecs = cast6_enc_tv_template,
2809 .count = CAST6_ENC_TEST_VECTORS
2812 .vecs = cast6_dec_tv_template,
2813 .count = CAST6_DEC_TEST_VECTORS
2818 .alg = "ecb(cipher_null)",
2819 .test = alg_test_null,
2822 .test = alg_test_skcipher,
2827 .vecs = des_enc_tv_template,
2828 .count = DES_ENC_TEST_VECTORS
2831 .vecs = des_dec_tv_template,
2832 .count = DES_DEC_TEST_VECTORS
2837 .alg = "ecb(des3_ede)",
2838 .test = alg_test_skcipher,
2843 .vecs = des3_ede_enc_tv_template,
2844 .count = DES3_EDE_ENC_TEST_VECTORS
2847 .vecs = des3_ede_dec_tv_template,
2848 .count = DES3_EDE_DEC_TEST_VECTORS
2853 .alg = "ecb(fcrypt)",
2854 .test = alg_test_skcipher,
2858 .vecs = fcrypt_pcbc_enc_tv_template,
2862 .vecs = fcrypt_pcbc_dec_tv_template,
2868 .alg = "ecb(khazad)",
2869 .test = alg_test_skcipher,
2873 .vecs = khazad_enc_tv_template,
2874 .count = KHAZAD_ENC_TEST_VECTORS
2877 .vecs = khazad_dec_tv_template,
2878 .count = KHAZAD_DEC_TEST_VECTORS
2884 .test = alg_test_skcipher,
2888 .vecs = seed_enc_tv_template,
2889 .count = SEED_ENC_TEST_VECTORS
2892 .vecs = seed_dec_tv_template,
2893 .count = SEED_DEC_TEST_VECTORS
2898 .alg = "ecb(serpent)",
2899 .test = alg_test_skcipher,
2903 .vecs = serpent_enc_tv_template,
2904 .count = SERPENT_ENC_TEST_VECTORS
2907 .vecs = serpent_dec_tv_template,
2908 .count = SERPENT_DEC_TEST_VECTORS
2914 .test = alg_test_skcipher,
2918 .vecs = tea_enc_tv_template,
2919 .count = TEA_ENC_TEST_VECTORS
2922 .vecs = tea_dec_tv_template,
2923 .count = TEA_DEC_TEST_VECTORS
2928 .alg = "ecb(tnepres)",
2929 .test = alg_test_skcipher,
2933 .vecs = tnepres_enc_tv_template,
2934 .count = TNEPRES_ENC_TEST_VECTORS
2937 .vecs = tnepres_dec_tv_template,
2938 .count = TNEPRES_DEC_TEST_VECTORS
2943 .alg = "ecb(twofish)",
2944 .test = alg_test_skcipher,
2948 .vecs = tf_enc_tv_template,
2949 .count = TF_ENC_TEST_VECTORS
2952 .vecs = tf_dec_tv_template,
2953 .count = TF_DEC_TEST_VECTORS
2959 .test = alg_test_skcipher,
2963 .vecs = xeta_enc_tv_template,
2964 .count = XETA_ENC_TEST_VECTORS
2967 .vecs = xeta_dec_tv_template,
2968 .count = XETA_DEC_TEST_VECTORS
2974 .test = alg_test_skcipher,
2978 .vecs = xtea_enc_tv_template,
2979 .count = XTEA_ENC_TEST_VECTORS
2982 .vecs = xtea_dec_tv_template,
2983 .count = XTEA_DEC_TEST_VECTORS
2989 .test = alg_test_aead,
2994 .vecs = aes_gcm_enc_tv_template,
2995 .count = AES_GCM_ENC_TEST_VECTORS
2998 .vecs = aes_gcm_dec_tv_template,
2999 .count = AES_GCM_DEC_TEST_VECTORS
3005 .test = alg_test_hash,
3009 .vecs = ghash_tv_template,
3010 .count = GHASH_TEST_VECTORS
3014 .alg = "hmac(crc32)",
3015 .test = alg_test_hash,
3018 .vecs = bfin_crc_tv_template,
3019 .count = BFIN_CRC_TEST_VECTORS
3024 .test = alg_test_hash,
3027 .vecs = hmac_md5_tv_template,
3028 .count = HMAC_MD5_TEST_VECTORS
3032 .alg = "hmac(rmd128)",
3033 .test = alg_test_hash,
3036 .vecs = hmac_rmd128_tv_template,
3037 .count = HMAC_RMD128_TEST_VECTORS
3041 .alg = "hmac(rmd160)",
3042 .test = alg_test_hash,
3045 .vecs = hmac_rmd160_tv_template,
3046 .count = HMAC_RMD160_TEST_VECTORS
3050 .alg = "hmac(sha1)",
3051 .test = alg_test_hash,
3055 .vecs = hmac_sha1_tv_template,
3056 .count = HMAC_SHA1_TEST_VECTORS
3060 .alg = "hmac(sha224)",
3061 .test = alg_test_hash,
3065 .vecs = hmac_sha224_tv_template,
3066 .count = HMAC_SHA224_TEST_VECTORS
3070 .alg = "hmac(sha256)",
3071 .test = alg_test_hash,
3075 .vecs = hmac_sha256_tv_template,
3076 .count = HMAC_SHA256_TEST_VECTORS
3080 .alg = "hmac(sha384)",
3081 .test = alg_test_hash,
3085 .vecs = hmac_sha384_tv_template,
3086 .count = HMAC_SHA384_TEST_VECTORS
3090 .alg = "hmac(sha512)",
3091 .test = alg_test_hash,
3095 .vecs = hmac_sha512_tv_template,
3096 .count = HMAC_SHA512_TEST_VECTORS
3101 .test = alg_test_skcipher,
3105 .vecs = aes_lrw_enc_tv_template,
3106 .count = AES_LRW_ENC_TEST_VECTORS
3109 .vecs = aes_lrw_dec_tv_template,
3110 .count = AES_LRW_DEC_TEST_VECTORS
3115 .alg = "lrw(camellia)",
3116 .test = alg_test_skcipher,
3120 .vecs = camellia_lrw_enc_tv_template,
3121 .count = CAMELLIA_LRW_ENC_TEST_VECTORS
3124 .vecs = camellia_lrw_dec_tv_template,
3125 .count = CAMELLIA_LRW_DEC_TEST_VECTORS
3130 .alg = "lrw(cast6)",
3131 .test = alg_test_skcipher,
3135 .vecs = cast6_lrw_enc_tv_template,
3136 .count = CAST6_LRW_ENC_TEST_VECTORS
3139 .vecs = cast6_lrw_dec_tv_template,
3140 .count = CAST6_LRW_DEC_TEST_VECTORS
3145 .alg = "lrw(serpent)",
3146 .test = alg_test_skcipher,
3150 .vecs = serpent_lrw_enc_tv_template,
3151 .count = SERPENT_LRW_ENC_TEST_VECTORS
3154 .vecs = serpent_lrw_dec_tv_template,
3155 .count = SERPENT_LRW_DEC_TEST_VECTORS
3160 .alg = "lrw(twofish)",
3161 .test = alg_test_skcipher,
3165 .vecs = tf_lrw_enc_tv_template,
3166 .count = TF_LRW_ENC_TEST_VECTORS
3169 .vecs = tf_lrw_dec_tv_template,
3170 .count = TF_LRW_DEC_TEST_VECTORS
3176 .test = alg_test_comp,
3181 .vecs = lzo_comp_tv_template,
3182 .count = LZO_COMP_TEST_VECTORS
3185 .vecs = lzo_decomp_tv_template,
3186 .count = LZO_DECOMP_TEST_VECTORS
3192 .test = alg_test_hash,
3195 .vecs = md4_tv_template,
3196 .count = MD4_TEST_VECTORS
3201 .test = alg_test_hash,
3204 .vecs = md5_tv_template,
3205 .count = MD5_TEST_VECTORS
3209 .alg = "michael_mic",
3210 .test = alg_test_hash,
3213 .vecs = michael_mic_tv_template,
3214 .count = MICHAEL_MIC_TEST_VECTORS
3219 .test = alg_test_skcipher,
3224 .vecs = aes_ofb_enc_tv_template,
3225 .count = AES_OFB_ENC_TEST_VECTORS
3228 .vecs = aes_ofb_dec_tv_template,
3229 .count = AES_OFB_DEC_TEST_VECTORS
3234 .alg = "pcbc(fcrypt)",
3235 .test = alg_test_skcipher,
3239 .vecs = fcrypt_pcbc_enc_tv_template,
3240 .count = FCRYPT_ENC_TEST_VECTORS
3243 .vecs = fcrypt_pcbc_dec_tv_template,
3244 .count = FCRYPT_DEC_TEST_VECTORS
3249 .alg = "rfc3686(ctr(aes))",
3250 .test = alg_test_skcipher,
3255 .vecs = aes_ctr_rfc3686_enc_tv_template,
3256 .count = AES_CTR_3686_ENC_TEST_VECTORS
3259 .vecs = aes_ctr_rfc3686_dec_tv_template,
3260 .count = AES_CTR_3686_DEC_TEST_VECTORS
3265 .alg = "rfc4106(gcm(aes))",
3266 .test = alg_test_aead,
3270 .vecs = aes_gcm_rfc4106_enc_tv_template,
3271 .count = AES_GCM_4106_ENC_TEST_VECTORS
3274 .vecs = aes_gcm_rfc4106_dec_tv_template,
3275 .count = AES_GCM_4106_DEC_TEST_VECTORS
3280 .alg = "rfc4309(ccm(aes))",
3281 .test = alg_test_aead,
3286 .vecs = aes_ccm_rfc4309_enc_tv_template,
3287 .count = AES_CCM_4309_ENC_TEST_VECTORS
3290 .vecs = aes_ccm_rfc4309_dec_tv_template,
3291 .count = AES_CCM_4309_DEC_TEST_VECTORS
3296 .alg = "rfc4543(gcm(aes))",
3297 .test = alg_test_aead,
3301 .vecs = aes_gcm_rfc4543_enc_tv_template,
3302 .count = AES_GCM_4543_ENC_TEST_VECTORS
3305 .vecs = aes_gcm_rfc4543_dec_tv_template,
3306 .count = AES_GCM_4543_DEC_TEST_VECTORS
3312 .test = alg_test_hash,
3315 .vecs = rmd128_tv_template,
3316 .count = RMD128_TEST_VECTORS
3321 .test = alg_test_hash,
3324 .vecs = rmd160_tv_template,
3325 .count = RMD160_TEST_VECTORS
3330 .test = alg_test_hash,
3333 .vecs = rmd256_tv_template,
3334 .count = RMD256_TEST_VECTORS
3339 .test = alg_test_hash,
3342 .vecs = rmd320_tv_template,
3343 .count = RMD320_TEST_VECTORS
3348 .test = alg_test_skcipher,
3352 .vecs = salsa20_stream_enc_tv_template,
3353 .count = SALSA20_STREAM_ENC_TEST_VECTORS
3359 .test = alg_test_hash,
3363 .vecs = sha1_tv_template,
3364 .count = SHA1_TEST_VECTORS
3369 .test = alg_test_hash,
3373 .vecs = sha224_tv_template,
3374 .count = SHA224_TEST_VECTORS
3379 .test = alg_test_hash,
3383 .vecs = sha256_tv_template,
3384 .count = SHA256_TEST_VECTORS
3389 .test = alg_test_hash,
3393 .vecs = sha384_tv_template,
3394 .count = SHA384_TEST_VECTORS
3399 .test = alg_test_hash,
3403 .vecs = sha512_tv_template,
3404 .count = SHA512_TEST_VECTORS
3409 .test = alg_test_hash,
3412 .vecs = tgr128_tv_template,
3413 .count = TGR128_TEST_VECTORS
3418 .test = alg_test_hash,
3421 .vecs = tgr160_tv_template,
3422 .count = TGR160_TEST_VECTORS
3427 .test = alg_test_hash,
3430 .vecs = tgr192_tv_template,
3431 .count = TGR192_TEST_VECTORS
3436 .test = alg_test_hash,
3439 .vecs = aes_vmac128_tv_template,
3440 .count = VMAC_AES_TEST_VECTORS
3445 .test = alg_test_hash,
3448 .vecs = wp256_tv_template,
3449 .count = WP256_TEST_VECTORS
3454 .test = alg_test_hash,
3457 .vecs = wp384_tv_template,
3458 .count = WP384_TEST_VECTORS
3463 .test = alg_test_hash,
3466 .vecs = wp512_tv_template,
3467 .count = WP512_TEST_VECTORS
3472 .test = alg_test_hash,
3475 .vecs = aes_xcbc128_tv_template,
3476 .count = XCBC_AES_TEST_VECTORS
3481 .test = alg_test_skcipher,
3486 .vecs = aes_xts_enc_tv_template,
3487 .count = AES_XTS_ENC_TEST_VECTORS
3490 .vecs = aes_xts_dec_tv_template,
3491 .count = AES_XTS_DEC_TEST_VECTORS
3496 .alg = "xts(camellia)",
3497 .test = alg_test_skcipher,
3501 .vecs = camellia_xts_enc_tv_template,
3502 .count = CAMELLIA_XTS_ENC_TEST_VECTORS
3505 .vecs = camellia_xts_dec_tv_template,
3506 .count = CAMELLIA_XTS_DEC_TEST_VECTORS
3511 .alg = "xts(cast6)",
3512 .test = alg_test_skcipher,
3516 .vecs = cast6_xts_enc_tv_template,
3517 .count = CAST6_XTS_ENC_TEST_VECTORS
3520 .vecs = cast6_xts_dec_tv_template,
3521 .count = CAST6_XTS_DEC_TEST_VECTORS
3526 .alg = "xts(serpent)",
3527 .test = alg_test_skcipher,
3531 .vecs = serpent_xts_enc_tv_template,
3532 .count = SERPENT_XTS_ENC_TEST_VECTORS
3535 .vecs = serpent_xts_dec_tv_template,
3536 .count = SERPENT_XTS_DEC_TEST_VECTORS
3541 .alg = "xts(twofish)",
3542 .test = alg_test_skcipher,
3546 .vecs = tf_xts_enc_tv_template,
3547 .count = TF_XTS_ENC_TEST_VECTORS
3550 .vecs = tf_xts_dec_tv_template,
3551 .count = TF_XTS_DEC_TEST_VECTORS
3557 .test = alg_test_pcomp,
3562 .vecs = zlib_comp_tv_template,
3563 .count = ZLIB_COMP_TEST_VECTORS
3566 .vecs = zlib_decomp_tv_template,
3567 .count = ZLIB_DECOMP_TEST_VECTORS
3574 static bool alg_test_descs_checked;
3576 static void alg_test_descs_check_order(void)
3580 /* only check once */
3581 if (alg_test_descs_checked)
3584 alg_test_descs_checked = true;
3586 for (i = 1; i < ARRAY_SIZE(alg_test_descs); i++) {
3587 int diff = strcmp(alg_test_descs[i - 1].alg,
3588 alg_test_descs[i].alg);
3590 if (WARN_ON(diff > 0)) {
3591 pr_warn("testmgr: alg_test_descs entries in wrong order: '%s' before '%s'\n",
3592 alg_test_descs[i - 1].alg,
3593 alg_test_descs[i].alg);
3596 if (WARN_ON(diff == 0)) {
3597 pr_warn("testmgr: duplicate alg_test_descs entry: '%s'\n",
3598 alg_test_descs[i].alg);
3603 static int alg_find_test(const char *alg)
3606 int end = ARRAY_SIZE(alg_test_descs);
3608 while (start < end) {
3609 int i = (start + end) / 2;
3610 int diff = strcmp(alg_test_descs[i].alg, alg);
3628 int alg_test(const char *driver, const char *alg, u32 type, u32 mask)
3634 alg_test_descs_check_order();
3636 if ((type & CRYPTO_ALG_TYPE_MASK) == CRYPTO_ALG_TYPE_CIPHER) {
3637 char nalg[CRYPTO_MAX_ALG_NAME];
3639 if (snprintf(nalg, sizeof(nalg), "ecb(%s)", alg) >=
3641 return -ENAMETOOLONG;
3643 i = alg_find_test(nalg);
3647 if (fips_enabled && !alg_test_descs[i].fips_allowed)
3650 rc = alg_test_cipher(alg_test_descs + i, driver, type, mask);
3654 i = alg_find_test(alg);
3655 j = alg_find_test(driver);
3659 if (fips_enabled && ((i >= 0 && !alg_test_descs[i].fips_allowed) ||
3660 (j >= 0 && !alg_test_descs[j].fips_allowed)))
3665 rc |= alg_test_descs[i].test(alg_test_descs + i, driver,
3667 if (j >= 0 && j != i)
3668 rc |= alg_test_descs[j].test(alg_test_descs + j, driver,
3672 if (fips_enabled && rc)
3673 panic("%s: %s alg self test failed in fips mode!\n", driver, alg);
3675 if (fips_enabled && !rc)
3676 pr_info(KERN_INFO "alg: self-tests for %s (%s) passed\n",
3682 printk(KERN_INFO "alg: No test for %s (%s)\n", alg, driver);
3688 #endif /* CONFIG_CRYPTO_MANAGER_DISABLE_TESTS */
3690 EXPORT_SYMBOL_GPL(alg_test);