linux.git/crypto/testmgr.c, branch v4.6-rc2

crypto: testmgr - allow rfc3686 aes-ctr variants in fips mode.

2016-02-27T19:26:31+00:00

RFC 3686 CTR in various authenc methods.

rfc3686(ctr(aes)) is already marked fips compliant,
so these should be fine.

Signed-off-by: Marcus Meissner 
Acked-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: testmgr - mark authenticated ctr(aes) also as FIPS able

2016-02-16T20:07:40+00:00

(2nd try that adds missing , to build.)

Signed-off-by: Marcus Meissner 
Signed-off-by: Herbert Xu

crypto: testmgr - mark more algorithms as FIPS compliant

2016-02-06T07:43:20+00:00

Some more authenc() wrapped algorithms are FIPS compliant, tag
them as such.

Signed-off-by: Marcus Meissner 
Acked-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: testmgr - fix out of bound read in __test_aead()

2016-02-06T07:33:29+00:00

__test_aead() reads MAX_IVLEN bytes from template[i].iv, but the
actual length of the initialisation vector can be shorter.
The length of the IV is already calculated earlier in the
function. Let's just reuses that. Also the IV length is currently
calculated several time for no reason. Let's fix that too.
This fix an out-of-bound error detected by KASan.

Signed-off-by: Jerome Marchand 
Signed-off-by: Herbert Xu

crypto: testmgr - Add a test case for import()/export()

2016-02-06T07:33:27+00:00

Modify __test_hash() so that hash import/export can be tested
from within the kernel. The test is unconditionally done when
a struct hash_testvec has its .np > 1.

v3: make the test unconditional
v2: Leverage template[i].np as suggested by Tim Chen

Signed-off-by: Rui Wang 
Signed-off-by: Herbert Xu

crypto: compress - remove unused pcomp interface

2016-01-27T12:36:24+00:00

It is unused now, so remove it.

Signed-off-by: Joonsoo Kim 
Signed-off-by: Herbert Xu

crypto: ansi_cprng - ANSI X9.31 DRNG is not allowed in FIPS 140-2

2016-01-25T14:38:59+00:00

As per update of the FIPS 140-2 Annex C supported by SP800-131A, the
ANSI X9.31 DRNG is not an allowed cipher in FIPS mode any more.

CC: Neil Horman 
Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: keywrap - add testmgr support

2015-10-15T13:05:08+00:00

The testmanager code for symmetric ciphers is extended to allow
verification of the IV after a cipher operation.

In addition, test vectors for kw(aes) for encryption and decryption are
added.

Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: testmgr - test IV value after a cipher operation

2015-10-15T13:05:01+00:00

The crypto drivers are supposed to update the IV passed to the crypto
request before calling the completion callback.
Test for the IV value before considering the test as successful.

Signed-off-by: Boris Brezillon 
Signed-off-by: Herbert Xu

crypto: akcipher - Changes to asymmetric key API

2015-10-14T14:23:16+00:00

Setkey function has been split into set_priv_key and set_pub_key.
Akcipher requests takes sgl for src and dst instead of void *.
Users of the API i.e. two existing RSA implementation and
test mgr code have been updated accordingly.

Signed-off-by: Tadeusz Struk 
Signed-off-by: Herbert Xu