linux.git/crypto/testmgr.c, branch v2.6.31

crypto: testmgr - Allow hash test vectors longer than a page

2009-06-02T04:05:02+00:00

As it stands we will each test hash vector both linearly and as
a scatter list if applicable.  This means that we cannot have
vectors longer than a page, even with scatter lists.

This patch fixes this by skipping test vectors with np != 0 when
testing linearly.

Signed-off-by: Herbert Xu

crypto: testmgr - Check all test vector lengths

2009-06-02T04:05:00+00:00

As we cannot guarantee the availability of contiguous pages at
run-time, all test vectors must either fit within a page, or use
scatter lists.  In some cases vectors were not checked as to
whether they fit inside a page.  This patch adds all the missing
checks.

Signed-off-by: Herbert Xu

crypto: compress - Return produced bytes in crypto_{,de}compress_{update,final}

2009-06-02T04:04:56+00:00

If crypto_{,de}compress_{update,final}() succeed, return the actual number of
bytes produced instead of zero, so their users don't have to calculate that
theirselves.

Signed-off-by: Geert Uytterhoeven 
Signed-off-by: Herbert Xu

crypto: testmgr - Skip algs not flagged fips_allowed in fips mode

2009-06-02T04:04:49+00:00

Because all fips-allowed algorithms must be self-tested before they
can be used, they will all have entries in testmgr.c's alg_test_descs[].
Skip self-tests for any algs not flagged as fips_approved and return
-EINVAL when in fips mode.

Signed-off-by: Jarod Wilson 
Acked-by: Neil Horman 
Signed-off-by: Herbert Xu

crypto: testmgr - Mark algs allowed in fips mode

2009-06-02T04:04:48+00:00

Set the fips_allowed flag in testmgr.c's alg_test_descs[] for algs
that are allowed to be used when in fips mode.

One caveat: des isn't actually allowed anymore, but des (and thus also
ecb(des)) has to be permitted, because disallowing them results in
des3_ede being unable to properly register (see des module init func).

Also, crc32 isn't technically on the fips approved list, but I think
it gets used in various places that necessitate it being allowed.

This list is based on
http://csrc.nist.gov/groups/STM/cavp/index.html

Important note: allowed/approved here does NOT mean "validated", just
that its an alg that *could* be validated.

Signed-off-by: Jarod Wilson 
Acked-by: Neil Horman 
Signed-off-by: Herbert Xu

crypto: testmgr - Add ctr(aes) test vectors

2009-06-02T04:04:46+00:00

Now with multi-block test vectors, all from SP800-38A, Appendix F.5.
Also added ctr(aes) to case 10 in tcrypt.

Signed-off-by: Jarod Wilson 
Signed-off-by: Herbert Xu

crypto: testmgr - Dynamically allocate xbuf and axbuf

2009-06-02T04:04:45+00:00

We currently allocate temporary memory that is used for testing
statically.  This renders the testing engine non-reentrant. As
algorithms may nest, i.e., one may construct another in order to
carry out a part of its operation, this is unacceptable.  For
example, it has been reported that an AEAD implementation allocates
a cipher in its setkey function, which causes it to fail during
testing as the temporary memory is overwritten.

This patch replaces the static memory with dynamically allocated
buffers.  We need a maximum of 16 pages so this slightly increases
the chances of an algorithm failing due to memory shortage.
However, as testing usually occurs at registration, this shouldn't
be a big problem.

Reported-by: Shasi Pulijala 
Signed-off-by: Herbert Xu

crypto: testmgr - Print self-test pass notices in fips mode

2009-06-02T04:04:43+00:00

According to our FIPS CAVS testing lab guru, when we're in fips mode,
we must print out notices of successful self-test completion for
every alg to be compliant.

New and improved v2, without strncmp crap. Doesn't need to touch a flag
though, due to not moving the notest label around anymore.

Applies atop '[PATCH v2] crypto: catch base cipher self-test failures
in fips mode'.

Personally, I wouldn't mind seeing this info printed out regardless of
whether or not we're in fips mode, I think its useful info, but will
stick with only in fips mode for now.

Signed-off-by: Jarod Wilson 
Signed-off-by: Herbert Xu

crypto: testmgr - Catch base cipher self-test failures in fips mode

2009-06-02T04:04:42+00:00

Signed-off-by: Jarod Wilson 
Signed-off-by: Herbert Xu

crypto: testmgr - Add ansi_cprng test vectors

2009-06-02T04:04:40+00:00

Add ANSI X9.31 Continuous Pseudo-Random Number Generator (AES mode),
aka 'ansi_cprng' test vectors, taken from Appendix B.2.9 and B.2.10
of the NIST RNGVS document, found here:
    http://csrc.nist.gov/groups/STM/cavp/documents/rng/RNGVS.pdf

Successfully tested against both the cryptodev-2.6 tree and a Red
Hat Enterprise Linux 5.4 kernel, via 'modprobe tcrypt mode=150'.

The selection of 150 was semi-arbitrary, didn't seem like it should
go any place in particular, so I started a new range for rng tests.

Signed-off-by: Jarod Wilson 
Acked-by: Neil Horman 
Signed-off-by: Herbert Xu