linux-toradex.git/crypto/testmgr.c, branch v4.4.151

crypto: testmgr - fix out of bound read in __test_aead()

2017-05-03T04:19:48+00:00

commit abfa7f4357e3640fdee87dfc276fd0f379fb5ae6 upstream.

__test_aead() reads MAX_IVLEN bytes from template[i].iv, but the
actual length of the initialisation vector can be shorter.
The length of the IV is already calculated earlier in the
function. Let's just reuses that. Also the IV length is currently
calculated several time for no reason. Let's fix that too.
This fix an out-of-bound error detected by KASan.

Signed-off-by: Jerome Marchand 
Signed-off-by: Herbert Xu 
Cc: Julia Lawall 
Signed-off-by: Greg Kroah-Hartman

crypto: testmgr - Use kmalloc memory for RSA input

2016-05-19T00:06:45+00:00

commit df27b26f04ed388ff4cc2b5d8cfdb5d97678816f upstream.

As akcipher uses an SG interface, you must not use vmalloc memory
as input for it.  This patch fixes testmgr to copy the vmalloc
test vectors to kmalloc memory before running the test.

This patch also removes a superfluous sg_virt call in do_test_rsa.

Reported-by: Anatoly Pugachev 
Signed-off-by: Herbert Xu 
Signed-off-by: Greg Kroah-Hartman

crypto: keywrap - add testmgr support

2015-10-15T13:05:08+00:00

The testmanager code for symmetric ciphers is extended to allow
verification of the IV after a cipher operation.

In addition, test vectors for kw(aes) for encryption and decryption are
added.

Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: testmgr - test IV value after a cipher operation

2015-10-15T13:05:01+00:00

The crypto drivers are supposed to update the IV passed to the crypto
request before calling the completion callback.
Test for the IV value before considering the test as successful.

Signed-off-by: Boris Brezillon 
Signed-off-by: Herbert Xu

crypto: akcipher - Changes to asymmetric key API

2015-10-14T14:23:16+00:00

Setkey function has been split into set_priv_key and set_pub_key.
Akcipher requests takes sgl for src and dst instead of void *.
Users of the API i.e. two existing RSA implementation and
test mgr code have been updated accordingly.

Signed-off-by: Tadeusz Struk 
Signed-off-by: Herbert Xu

crypto: testmgr - Disable fips-allowed for authenc() and des() ciphers

2015-10-01T13:56:57+00:00

No authenc() ciphers are FIPS approved, nor is ecb(des).
After the end of 2015, ansi_cprng will also be non-approved.

Signed-off-by: John Haxby 
Acked-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: testmgr - don't copy from source IV too much

2015-09-11T14:09:43+00:00

While the destination buffer 'iv' is MAX_IVLEN size,
the source 'template[i].iv' could be smaller, thus
memcpy may read read invalid memory.
Use crypto_skcipher_ivsize() to get real ivsize
and pass it to memcpy.

Signed-off-by: Andrey Ryabinin 
Signed-off-by: Herbert Xu

crypto: testmgr - Use new skcipher interface

2015-08-21T14:21:20+00:00

This patch replaces uses of blkcipher and ablkcipher with the
new skcipher interface.

Signed-off-by: Herbert Xu

crypto: cmac - allow usage in FIPS mode

2015-08-19T14:59:48+00:00

CMAC is an approved cipher in FIPS 140-2. The patch allows the use
of CMAC with TDES and AES in FIPS mode.

Signed-off-by: Stephan Mueller 
Signed-off-by: Herbert Xu

crypto: testmgr - Reenable authenc tests

2015-08-04T12:45:34+00:00

Now that all implementations of authenc have been converted we can
reenable the tests.

Signed-off-by: Herbert Xu