linux-stable.git/crypto/testmgr.c, branch v4.7

Merge branch 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6

2016-05-17T16:33:39+00:00

Pull crypto update from Herbert Xu:
"API:

- Crypto self tests can now be disabled at boot/run time.
- Add async support to algif_aead.

Algorithms:

- A large number of fixes to MPI from Nicolai Stange.
- Performance improvement for HMAC DRBG.

Drivers:

- Use generic crypto engine in omap-des.
- Merge ppc4xx-rng and crypto4xx drivers.
- Fix lockups in sun4i-ss driver by disabling IRQs.
- Add DMA engine support to ccp.
- Reenable talitos hash algorithms.
- Add support for Hisilicon SoC RNG.
- Add basic crypto driver for the MXC SCC.

Others:

- Do not allocate crypto hash tfm in NORECLAIM context in ecryptfs"

* 'linus' of git://git.kernel.org/pub/scm/linux/kernel/git/herbert/crypto-2.6: (77 commits)
crypto: qat - change the adf_ctl_stop_devices to void
crypto: caam - fix caam_jr_alloc() ret code
crypto: vmx - comply with ABIs that specify vrsave as reserved.
crypto: testmgr - Add a flag allowing the self-tests to be disabled at runtime.
crypto: ccp - constify ccp_actions structure
crypto: marvell/cesa - Use dma_pool_zalloc
crypto: qat - make adf_vf_isr.c dependant on IOV config
crypto: qat - Fix typo in comments
lib: asn1_decoder - add MODULE_LICENSE("GPL")
crypto: omap-sham - Use dma_request_chan() for requesting DMA channel
crypto: omap-des - Use dma_request_chan() for requesting DMA channel
crypto: omap-aes - Use dma_request_chan() for requesting DMA channel
crypto: omap-des - Integrate with the crypto engine framework
crypto: s5p-sss - fix incorrect usage of scatterlists api
crypto: s5p-sss - Fix missed interrupts when working with 8 kB blocks
crypto: s5p-sss - Use common BIT macro
crypto: mxc-scc - fix unwinding in mxc_scc_crypto_register()
crypto: mxc-scc - signedness bugs in mxc_scc_ablkcipher_req_init()
crypto: talitos - fix ahash algorithms registration
crypto: ccp - Ensure all dependencies are specified
...

crypto: testmgr - Use kmalloc memory for RSA input

2016-05-09T08:47:53+00:00

As akcipher uses an SG interface, you must not use vmalloc memory
as input for it.  This patch fixes testmgr to copy the vmalloc
test vectors to kmalloc memory before running the test.

This patch also removes a superfluous sg_virt call in do_test_rsa.

Cc: 
Reported-by: Anatoly Pugachev 
Signed-off-by: Herbert Xu

crypto: testmgr - Add a flag allowing the self-tests to be disabled at runtime.

2016-05-05T06:36:53+00:00

Running self-tests for a short-lived KVM VM takes 28ms on my laptop.
This commit adds a flag 'cryptomgr.notests' which allows them to be
disabled.

However if fips=1 as well, we ignore this flag as FIPS mode mandates
that the self-tests are run.

Signed-off-by: Richard W.M. Jones 
Signed-off-by: Herbert Xu

crypto: testmgr - allow rfc3686 aes-ctr variants in fips mode.

2016-02-27T19:26:31+00:00

RFC 3686 CTR in various authenc methods.

rfc3686(ctr(aes)) is already marked fips compliant,
so these should be fine.

Signed-off-by: Marcus Meissner 
Acked-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: testmgr - mark authenticated ctr(aes) also as FIPS able

2016-02-16T20:07:40+00:00

(2nd try that adds missing , to build.)

Signed-off-by: Marcus Meissner 
Signed-off-by: Herbert Xu

crypto: testmgr - mark more algorithms as FIPS compliant

2016-02-06T07:43:20+00:00

Some more authenc() wrapped algorithms are FIPS compliant, tag
them as such.

Signed-off-by: Marcus Meissner 
Acked-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: testmgr - fix out of bound read in __test_aead()

2016-02-06T07:33:29+00:00

__test_aead() reads MAX_IVLEN bytes from template[i].iv, but the
actual length of the initialisation vector can be shorter.
The length of the IV is already calculated earlier in the
function. Let's just reuses that. Also the IV length is currently
calculated several time for no reason. Let's fix that too.
This fix an out-of-bound error detected by KASan.

Signed-off-by: Jerome Marchand 
Signed-off-by: Herbert Xu

crypto: testmgr - Add a test case for import()/export()

2016-02-06T07:33:27+00:00

Modify __test_hash() so that hash import/export can be tested
from within the kernel. The test is unconditionally done when
a struct hash_testvec has its .np > 1.

v3: make the test unconditional
v2: Leverage template[i].np as suggested by Tim Chen

Signed-off-by: Rui Wang 
Signed-off-by: Herbert Xu

crypto: compress - remove unused pcomp interface

2016-01-27T12:36:24+00:00

It is unused now, so remove it.

Signed-off-by: Joonsoo Kim 
Signed-off-by: Herbert Xu

crypto: ansi_cprng - ANSI X9.31 DRNG is not allowed in FIPS 140-2

2016-01-25T14:38:59+00:00

As per update of the FIPS 140-2 Annex C supported by SP800-131A, the
ANSI X9.31 DRNG is not an allowed cipher in FIPS mode any more.

CC: Neil Horman 
Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu