linux-stable.git/crypto/testmgr.c, branch linux-4.6.y

crypto: testmgr - Use kmalloc memory for RSA input

2016-05-09T08:47:53+00:00

As akcipher uses an SG interface, you must not use vmalloc memory
as input for it.  This patch fixes testmgr to copy the vmalloc
test vectors to kmalloc memory before running the test.

This patch also removes a superfluous sg_virt call in do_test_rsa.

Cc: 
Reported-by: Anatoly Pugachev 
Signed-off-by: Herbert Xu

crypto: testmgr - allow rfc3686 aes-ctr variants in fips mode.

2016-02-27T19:26:31+00:00

RFC 3686 CTR in various authenc methods.

rfc3686(ctr(aes)) is already marked fips compliant,
so these should be fine.

Signed-off-by: Marcus Meissner 
Acked-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: testmgr - mark authenticated ctr(aes) also as FIPS able

2016-02-16T20:07:40+00:00

(2nd try that adds missing , to build.)

Signed-off-by: Marcus Meissner 
Signed-off-by: Herbert Xu

crypto: testmgr - mark more algorithms as FIPS compliant

2016-02-06T07:43:20+00:00

Some more authenc() wrapped algorithms are FIPS compliant, tag
them as such.

Signed-off-by: Marcus Meissner 
Acked-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: testmgr - fix out of bound read in __test_aead()

2016-02-06T07:33:29+00:00

__test_aead() reads MAX_IVLEN bytes from template[i].iv, but the
actual length of the initialisation vector can be shorter.
The length of the IV is already calculated earlier in the
function. Let's just reuses that. Also the IV length is currently
calculated several time for no reason. Let's fix that too.
This fix an out-of-bound error detected by KASan.

Signed-off-by: Jerome Marchand 
Signed-off-by: Herbert Xu

crypto: testmgr - Add a test case for import()/export()

2016-02-06T07:33:27+00:00

Modify __test_hash() so that hash import/export can be tested
from within the kernel. The test is unconditionally done when
a struct hash_testvec has its .np > 1.

v3: make the test unconditional
v2: Leverage template[i].np as suggested by Tim Chen

Signed-off-by: Rui Wang 
Signed-off-by: Herbert Xu

crypto: compress - remove unused pcomp interface

2016-01-27T12:36:24+00:00

It is unused now, so remove it.

Signed-off-by: Joonsoo Kim 
Signed-off-by: Herbert Xu

crypto: ansi_cprng - ANSI X9.31 DRNG is not allowed in FIPS 140-2

2016-01-25T14:38:59+00:00

As per update of the FIPS 140-2 Annex C supported by SP800-131A, the
ANSI X9.31 DRNG is not an allowed cipher in FIPS mode any more.

CC: Neil Horman 
Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: keywrap - add testmgr support

2015-10-15T13:05:08+00:00

The testmanager code for symmetric ciphers is extended to allow
verification of the IV after a cipher operation.

In addition, test vectors for kw(aes) for encryption and decryption are
added.

Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: testmgr - test IV value after a cipher operation

2015-10-15T13:05:01+00:00

The crypto drivers are supposed to update the IV passed to the crypto
request before calling the completion callback.
Test for the IV value before considering the test as successful.

Signed-off-by: Boris Brezillon 
Signed-off-by: Herbert Xu