linux-stable.git/crypto/tcrypt.c, branch v4.19.78

crypto: testmgr - add AES-CFB tests

2019-01-09T16:38:44+00:00

commit 7da66670775d201f633577f5b15a4bbeebaaa2b0 upstream.

Add AES128/192/256-CFB testvectors from NIST SP800-38A.

Signed-off-by: Dmitry Eremin-Solenikov 
Cc: stable@vger.kernel.org
Signed-off-by: Dmitry Eremin-Solenikov 
Signed-off-by: Herbert Xu 
Signed-off-by: Greg Kroah-Hartman

crypto: tcrypt - fix ghash-generic speed test

2018-11-13T19:08:45+00:00

commit 331351f89c36bf7d03561a28b6f64fa10a9f6f3a upstream.

ghash is a keyed hash algorithm, thus setkey needs to be called.
Otherwise the following error occurs:
$ modprobe tcrypt mode=318 sec=1
testing speed of async ghash-generic (ghash-generic)
tcrypt: test  0 (   16 byte blocks,   16 bytes per update,   1 updates):
tcrypt: hashing failed ret=-126

Cc:  # 4.6+
Fixes: 0660511c0bee ("crypto: tcrypt - Use ahash")
Tested-by: Franck Lenormand 
Signed-off-by: Horia Geantă 
Acked-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu 
Signed-off-by: Greg Kroah-Hartman

crypto: tcrypt - reschedule during speed tests

2018-08-03T10:06:02+00:00

Avoid RCU stalls in the case of non-preemptible kernel and lengthy
speed tests by rescheduling when advancing from one block size
to another.

Signed-off-by: Horia Geantă 
Signed-off-by: Herbert Xu

crypto: vmac - remove insecure version with hardcoded nonce

2018-07-01T13:00:44+00:00

Remove the original version of the VMAC template that had the nonce
hardcoded to 0 and produced a digest with the wrong endianness.  I'm
unsure whether this had users or not (there are no explicit in-kernel
references to it), but given that the hardcoded nonce made it wildly
insecure unless a unique key was used for each message, let's try
removing it and see if anyone complains.

Leave the new "vmac64" template that requires the nonce to be explicitly
specified as the first 16 bytes of data and uses the correct endianness
for the digest.

Signed-off-by: Eric Biggers 
Signed-off-by: Herbert Xu

crypto: testmgr - remove bfin_crc "hmac(crc32)" test vectors

2018-05-26T16:12:10+00:00

The Blackfin CRC driver was removed by commit 9678a8dc53c1 ("crypto:
bfin_crc - remove blackfin CRC driver"), but it was forgotten to remove
the corresponding "hmac(crc32)" test vectors.  I see no point in keeping
them since nothing else appears to implement or use "hmac(crc32)", which
isn't an algorithm that makes sense anyway because HMAC is meant to be
used with a cryptographically secure hash function, which CRC's are not.

Thus, remove the unneeded test vectors.

Signed-off-by: Eric Biggers 
Signed-off-by: Herbert Xu

crypto: tcrypt - Remove VLA usage

2018-05-05T06:52:53+00:00

In the quest to remove all stack VLA usage from the kernel[1], this
allocates the return code buffers before starting jiffie timers, rather
than using stack space for the array. Additionally cleans up some exit
paths and make sure that the num_mb module_param() is used only once
per execution to avoid possible races in the value changing.

[1] https://lkml.kernel.org/r/CA+55aFzCG-zNmZwX4A2FQpadafLfEzK6CC=qPXydAacU1RqZWA@mail.gmail.com

Signed-off-by: Kees Cook 
Signed-off-by: Herbert Xu

crypto: testmgr - introduce SM4 tests

2018-03-16T15:35:50+00:00

Add testmgr tests for the newly introduced SM4 ECB symmetric cipher.

Signed-off-by: Gilad Ben-Yossef 
Signed-off-by: Herbert Xu

crypto: tcrypt - free xoutbuf instead of axbuf

2018-01-12T12:03:07+00:00

There seems to be a cut-n-paste bug with the name of the buffer being
free'd, xoutbuf should be used instead of axbuf.

Detected by CoverityScan, CID#1463420 ("Copy-paste error")

Fixes: 427988d981c4 ("crypto: tcrypt - add multibuf aead speed test")
Signed-off-by: Colin Ian King 
Signed-off-by: Herbert Xu

crypto: tcrypt - fix spelling mistake: "bufufer"-> "buffer"

2018-01-12T12:03:06+00:00

Trivial fix to spelling mistakes in pr_err error message text.

Signed-off-by: Colin Ian King 
Signed-off-by: Herbert Xu

crypto: tcrypt - add multibuf aead speed test

2017-12-28T06:56:42+00:00

The performance of some aead tfm providers is affected by
the amount of parallelism possible with the processing.

Introduce an async aead concurrent multiple buffer
processing speed test to be able to test performance of such
tfm providers.

Signed-off-by: Gilad Ben-Yossef 
Signed-off-by: Herbert Xu