linux-toradex.git/crypto/testmgr.c, branch v2.6.32.4

crypto: vmac - New hash algorithm for intel_txt support

2009-09-02T10:05:22+00:00

This patch adds VMAC (a fast MAC) support into crypto framework.

Signed-off-by: Shane Wang 
Signed-off-by: Joseph Cihula 
Signed-off-by: Herbert Xu

crypto: testmgr - Allow implementation-specific tests

2009-07-02T08:32:12+00:00

This patch adds the support for testing specific implementations.
This should only be used in very specific situations.  Right now
this means specific implementations of random number generators.

Signed-off-by: Herbert Xu

crypto: testmgr - Remove hash size check

2009-06-24T05:48:13+00:00

Until hash test vectors grow longer than 256 bytes, the only
purpose of the check is to generate a gcc warning.

Signed-off-by: Herbert Xu

crypto: testmgr - Allow hash test vectors longer than a page

2009-06-02T04:05:02+00:00

As it stands we will each test hash vector both linearly and as
a scatter list if applicable.  This means that we cannot have
vectors longer than a page, even with scatter lists.

This patch fixes this by skipping test vectors with np != 0 when
testing linearly.

Signed-off-by: Herbert Xu

crypto: testmgr - Check all test vector lengths

2009-06-02T04:05:00+00:00

As we cannot guarantee the availability of contiguous pages at
run-time, all test vectors must either fit within a page, or use
scatter lists.  In some cases vectors were not checked as to
whether they fit inside a page.  This patch adds all the missing
checks.

Signed-off-by: Herbert Xu

crypto: compress - Return produced bytes in crypto_{,de}compress_{update,final}

2009-06-02T04:04:56+00:00

If crypto_{,de}compress_{update,final}() succeed, return the actual number of
bytes produced instead of zero, so their users don't have to calculate that
theirselves.

Signed-off-by: Geert Uytterhoeven 
Signed-off-by: Herbert Xu

crypto: testmgr - Skip algs not flagged fips_allowed in fips mode

2009-06-02T04:04:49+00:00

Because all fips-allowed algorithms must be self-tested before they
can be used, they will all have entries in testmgr.c's alg_test_descs[].
Skip self-tests for any algs not flagged as fips_approved and return
-EINVAL when in fips mode.

Signed-off-by: Jarod Wilson 
Acked-by: Neil Horman 
Signed-off-by: Herbert Xu

crypto: testmgr - Mark algs allowed in fips mode

2009-06-02T04:04:48+00:00

Set the fips_allowed flag in testmgr.c's alg_test_descs[] for algs
that are allowed to be used when in fips mode.

One caveat: des isn't actually allowed anymore, but des (and thus also
ecb(des)) has to be permitted, because disallowing them results in
des3_ede being unable to properly register (see des module init func).

Also, crc32 isn't technically on the fips approved list, but I think
it gets used in various places that necessitate it being allowed.

This list is based on
http://csrc.nist.gov/groups/STM/cavp/index.html

Important note: allowed/approved here does NOT mean "validated", just
that its an alg that *could* be validated.

Signed-off-by: Jarod Wilson 
Acked-by: Neil Horman 
Signed-off-by: Herbert Xu

crypto: testmgr - Add ctr(aes) test vectors

2009-06-02T04:04:46+00:00

Now with multi-block test vectors, all from SP800-38A, Appendix F.5.
Also added ctr(aes) to case 10 in tcrypt.

Signed-off-by: Jarod Wilson 
Signed-off-by: Herbert Xu

crypto: testmgr - Dynamically allocate xbuf and axbuf

2009-06-02T04:04:45+00:00

We currently allocate temporary memory that is used for testing
statically.  This renders the testing engine non-reentrant. As
algorithms may nest, i.e., one may construct another in order to
carry out a part of its operation, this is unacceptable.  For
example, it has been reported that an AEAD implementation allocates
a cipher in its setkey function, which causes it to fail during
testing as the temporary memory is overwritten.

This patch replaces the static memory with dynamically allocated
buffers.  We need a maximum of 16 pages so this slightly increases
the chances of an algorithm failing due to memory shortage.
However, as testing usually occurs at registration, this shouldn't
be a big problem.

Reported-by: Shasi Pulijala 
Signed-off-by: Herbert Xu