tls/device: Convert tls_device_sendpage() to use MSG_SPLICE_PAGES
[platform/kernel/linux-rpi.git] / crypto / tcrypt.c
1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3  * Quick & dirty crypto testing module.
4  *
5  * This will only exist until we have a better testing mechanism
6  * (e.g. a char device).
7  *
8  * Copyright (c) 2002 James Morris <jmorris@intercode.com.au>
9  * Copyright (c) 2002 Jean-Francois Dive <jef@linuxbe.org>
10  * Copyright (c) 2007 Nokia Siemens Networks
11  *
12  * Updated RFC4106 AES-GCM testing.
13  *    Authors: Aidan O'Mahony (aidan.o.mahony@intel.com)
14  *             Adrian Hoban <adrian.hoban@intel.com>
15  *             Gabriele Paoloni <gabriele.paoloni@intel.com>
16  *             Tadeusz Struk (tadeusz.struk@intel.com)
17  *             Copyright (c) 2010, Intel Corporation.
18  */
19
20 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
21
22 #include <crypto/aead.h>
23 #include <crypto/hash.h>
24 #include <crypto/skcipher.h>
25 #include <linux/err.h>
26 #include <linux/fips.h>
27 #include <linux/init.h>
28 #include <linux/interrupt.h>
29 #include <linux/jiffies.h>
30 #include <linux/kernel.h>
31 #include <linux/module.h>
32 #include <linux/moduleparam.h>
33 #include <linux/scatterlist.h>
34 #include <linux/slab.h>
35 #include <linux/string.h>
36 #include <linux/timex.h>
37
38 #include "internal.h"
39 #include "tcrypt.h"
40
41 /*
42  * Need slab memory for testing (size in number of pages).
43  */
44 #define TVMEMSIZE       4
45
46 /*
47 * Used by test_cipher_speed()
48 */
49 #define ENCRYPT 1
50 #define DECRYPT 0
51
52 #define MAX_DIGEST_SIZE         64
53
54 /*
55  * return a string with the driver name
56  */
57 #define get_driver_name(tfm_type, tfm) crypto_tfm_alg_driver_name(tfm_type ## _tfm(tfm))
58
59 /*
60  * Used by test_cipher_speed()
61  */
62 static unsigned int sec;
63
64 static char *alg;
65 static u32 type;
66 static u32 mask;
67 static int mode;
68 static u32 num_mb = 8;
69 static unsigned int klen;
70 static char *tvmem[TVMEMSIZE];
71
72 static const int block_sizes[] = { 16, 64, 128, 256, 1024, 1420, 4096, 0 };
73 static const int aead_sizes[] = { 16, 64, 256, 512, 1024, 1420, 4096, 8192, 0 };
74
75 #define XBUFSIZE 8
76 #define MAX_IVLEN 32
77
78 static int testmgr_alloc_buf(char *buf[XBUFSIZE])
79 {
80         int i;
81
82         for (i = 0; i < XBUFSIZE; i++) {
83                 buf[i] = (void *)__get_free_page(GFP_KERNEL);
84                 if (!buf[i])
85                         goto err_free_buf;
86         }
87
88         return 0;
89
90 err_free_buf:
91         while (i-- > 0)
92                 free_page((unsigned long)buf[i]);
93
94         return -ENOMEM;
95 }
96
97 static void testmgr_free_buf(char *buf[XBUFSIZE])
98 {
99         int i;
100
101         for (i = 0; i < XBUFSIZE; i++)
102                 free_page((unsigned long)buf[i]);
103 }
104
105 static void sg_init_aead(struct scatterlist *sg, char *xbuf[XBUFSIZE],
106                          unsigned int buflen, const void *assoc,
107                          unsigned int aad_size)
108 {
109         int np = (buflen + PAGE_SIZE - 1)/PAGE_SIZE;
110         int k, rem;
111
112         if (np > XBUFSIZE) {
113                 rem = PAGE_SIZE;
114                 np = XBUFSIZE;
115         } else {
116                 rem = buflen % PAGE_SIZE;
117         }
118
119         sg_init_table(sg, np + 1);
120
121         sg_set_buf(&sg[0], assoc, aad_size);
122
123         if (rem)
124                 np--;
125         for (k = 0; k < np; k++)
126                 sg_set_buf(&sg[k + 1], xbuf[k], PAGE_SIZE);
127
128         if (rem)
129                 sg_set_buf(&sg[k + 1], xbuf[k], rem);
130 }
131
132 static inline int do_one_aead_op(struct aead_request *req, int ret)
133 {
134         struct crypto_wait *wait = req->base.data;
135
136         return crypto_wait_req(ret, wait);
137 }
138
139 struct test_mb_aead_data {
140         struct scatterlist sg[XBUFSIZE];
141         struct scatterlist sgout[XBUFSIZE];
142         struct aead_request *req;
143         struct crypto_wait wait;
144         char *xbuf[XBUFSIZE];
145         char *xoutbuf[XBUFSIZE];
146         char *axbuf[XBUFSIZE];
147 };
148
149 static int do_mult_aead_op(struct test_mb_aead_data *data, int enc,
150                                 u32 num_mb, int *rc)
151 {
152         int i, err = 0;
153
154         /* Fire up a bunch of concurrent requests */
155         for (i = 0; i < num_mb; i++) {
156                 if (enc == ENCRYPT)
157                         rc[i] = crypto_aead_encrypt(data[i].req);
158                 else
159                         rc[i] = crypto_aead_decrypt(data[i].req);
160         }
161
162         /* Wait for all requests to finish */
163         for (i = 0; i < num_mb; i++) {
164                 rc[i] = crypto_wait_req(rc[i], &data[i].wait);
165
166                 if (rc[i]) {
167                         pr_info("concurrent request %d error %d\n", i, rc[i]);
168                         err = rc[i];
169                 }
170         }
171
172         return err;
173 }
174
175 static int test_mb_aead_jiffies(struct test_mb_aead_data *data, int enc,
176                                 int blen, int secs, u32 num_mb)
177 {
178         unsigned long start, end;
179         int bcount;
180         int ret = 0;
181         int *rc;
182
183         rc = kcalloc(num_mb, sizeof(*rc), GFP_KERNEL);
184         if (!rc)
185                 return -ENOMEM;
186
187         for (start = jiffies, end = start + secs * HZ, bcount = 0;
188              time_before(jiffies, end); bcount++) {
189                 ret = do_mult_aead_op(data, enc, num_mb, rc);
190                 if (ret)
191                         goto out;
192         }
193
194         pr_cont("%d operations in %d seconds (%llu bytes)\n",
195                 bcount * num_mb, secs, (u64)bcount * blen * num_mb);
196
197 out:
198         kfree(rc);
199         return ret;
200 }
201
202 static int test_mb_aead_cycles(struct test_mb_aead_data *data, int enc,
203                                int blen, u32 num_mb)
204 {
205         unsigned long cycles = 0;
206         int ret = 0;
207         int i;
208         int *rc;
209
210         rc = kcalloc(num_mb, sizeof(*rc), GFP_KERNEL);
211         if (!rc)
212                 return -ENOMEM;
213
214         /* Warm-up run. */
215         for (i = 0; i < 4; i++) {
216                 ret = do_mult_aead_op(data, enc, num_mb, rc);
217                 if (ret)
218                         goto out;
219         }
220
221         /* The real thing. */
222         for (i = 0; i < 8; i++) {
223                 cycles_t start, end;
224
225                 start = get_cycles();
226                 ret = do_mult_aead_op(data, enc, num_mb, rc);
227                 end = get_cycles();
228
229                 if (ret)
230                         goto out;
231
232                 cycles += end - start;
233         }
234
235         pr_cont("1 operation in %lu cycles (%d bytes)\n",
236                 (cycles + 4) / (8 * num_mb), blen);
237
238 out:
239         kfree(rc);
240         return ret;
241 }
242
243 static void test_mb_aead_speed(const char *algo, int enc, int secs,
244                                struct aead_speed_template *template,
245                                unsigned int tcount, u8 authsize,
246                                unsigned int aad_size, u8 *keysize, u32 num_mb)
247 {
248         struct test_mb_aead_data *data;
249         struct crypto_aead *tfm;
250         unsigned int i, j, iv_len;
251         const int *b_size;
252         const char *key;
253         const char *e;
254         void *assoc;
255         char *iv;
256         int ret;
257
258
259         if (aad_size >= PAGE_SIZE) {
260                 pr_err("associate data length (%u) too big\n", aad_size);
261                 return;
262         }
263
264         iv = kzalloc(MAX_IVLEN, GFP_KERNEL);
265         if (!iv)
266                 return;
267
268         if (enc == ENCRYPT)
269                 e = "encryption";
270         else
271                 e = "decryption";
272
273         data = kcalloc(num_mb, sizeof(*data), GFP_KERNEL);
274         if (!data)
275                 goto out_free_iv;
276
277         tfm = crypto_alloc_aead(algo, 0, 0);
278         if (IS_ERR(tfm)) {
279                 pr_err("failed to load transform for %s: %ld\n",
280                         algo, PTR_ERR(tfm));
281                 goto out_free_data;
282         }
283
284         ret = crypto_aead_setauthsize(tfm, authsize);
285         if (ret) {
286                 pr_err("alg: aead: Failed to setauthsize for %s: %d\n", algo,
287                        ret);
288                 goto out_free_tfm;
289         }
290
291         for (i = 0; i < num_mb; ++i)
292                 if (testmgr_alloc_buf(data[i].xbuf)) {
293                         while (i--)
294                                 testmgr_free_buf(data[i].xbuf);
295                         goto out_free_tfm;
296                 }
297
298         for (i = 0; i < num_mb; ++i)
299                 if (testmgr_alloc_buf(data[i].axbuf)) {
300                         while (i--)
301                                 testmgr_free_buf(data[i].axbuf);
302                         goto out_free_xbuf;
303                 }
304
305         for (i = 0; i < num_mb; ++i)
306                 if (testmgr_alloc_buf(data[i].xoutbuf)) {
307                         while (i--)
308                                 testmgr_free_buf(data[i].xoutbuf);
309                         goto out_free_axbuf;
310                 }
311
312         for (i = 0; i < num_mb; ++i) {
313                 data[i].req = aead_request_alloc(tfm, GFP_KERNEL);
314                 if (!data[i].req) {
315                         pr_err("alg: aead: Failed to allocate request for %s\n",
316                                algo);
317                         while (i--)
318                                 aead_request_free(data[i].req);
319                         goto out_free_xoutbuf;
320                 }
321         }
322
323         for (i = 0; i < num_mb; ++i) {
324                 crypto_init_wait(&data[i].wait);
325                 aead_request_set_callback(data[i].req,
326                                           CRYPTO_TFM_REQ_MAY_BACKLOG,
327                                           crypto_req_done, &data[i].wait);
328         }
329
330         pr_info("testing speed of multibuffer %s (%s) %s\n", algo,
331                 get_driver_name(crypto_aead, tfm), e);
332
333         i = 0;
334         do {
335                 b_size = aead_sizes;
336                 do {
337                         int bs = round_up(*b_size, crypto_aead_blocksize(tfm));
338
339                         if (bs + authsize > XBUFSIZE * PAGE_SIZE) {
340                                 pr_err("template (%u) too big for buffer (%lu)\n",
341                                        authsize + bs,
342                                        XBUFSIZE * PAGE_SIZE);
343                                 goto out;
344                         }
345
346                         pr_info("test %u (%d bit key, %d byte blocks): ", i,
347                                 *keysize * 8, bs);
348
349                         /* Set up tfm global state, i.e. the key */
350
351                         memset(tvmem[0], 0xff, PAGE_SIZE);
352                         key = tvmem[0];
353                         for (j = 0; j < tcount; j++) {
354                                 if (template[j].klen == *keysize) {
355                                         key = template[j].key;
356                                         break;
357                                 }
358                         }
359
360                         crypto_aead_clear_flags(tfm, ~0);
361
362                         ret = crypto_aead_setkey(tfm, key, *keysize);
363                         if (ret) {
364                                 pr_err("setkey() failed flags=%x\n",
365                                        crypto_aead_get_flags(tfm));
366                                 goto out;
367                         }
368
369                         iv_len = crypto_aead_ivsize(tfm);
370                         if (iv_len)
371                                 memset(iv, 0xff, iv_len);
372
373                         /* Now setup per request stuff, i.e. buffers */
374
375                         for (j = 0; j < num_mb; ++j) {
376                                 struct test_mb_aead_data *cur = &data[j];
377
378                                 assoc = cur->axbuf[0];
379                                 memset(assoc, 0xff, aad_size);
380
381                                 sg_init_aead(cur->sg, cur->xbuf,
382                                              bs + (enc ? 0 : authsize),
383                                              assoc, aad_size);
384
385                                 sg_init_aead(cur->sgout, cur->xoutbuf,
386                                              bs + (enc ? authsize : 0),
387                                              assoc, aad_size);
388
389                                 aead_request_set_ad(cur->req, aad_size);
390
391                                 if (!enc) {
392
393                                         aead_request_set_crypt(cur->req,
394                                                                cur->sgout,
395                                                                cur->sg,
396                                                                bs, iv);
397                                         ret = crypto_aead_encrypt(cur->req);
398                                         ret = do_one_aead_op(cur->req, ret);
399
400                                         if (ret) {
401                                                 pr_err("calculating auth failed (%d)\n",
402                                                        ret);
403                                                 break;
404                                         }
405                                 }
406
407                                 aead_request_set_crypt(cur->req, cur->sg,
408                                                        cur->sgout, bs +
409                                                        (enc ? 0 : authsize),
410                                                        iv);
411
412                         }
413
414                         if (secs) {
415                                 ret = test_mb_aead_jiffies(data, enc, bs,
416                                                            secs, num_mb);
417                                 cond_resched();
418                         } else {
419                                 ret = test_mb_aead_cycles(data, enc, bs,
420                                                           num_mb);
421                         }
422
423                         if (ret) {
424                                 pr_err("%s() failed return code=%d\n", e, ret);
425                                 break;
426                         }
427                         b_size++;
428                         i++;
429                 } while (*b_size);
430                 keysize++;
431         } while (*keysize);
432
433 out:
434         for (i = 0; i < num_mb; ++i)
435                 aead_request_free(data[i].req);
436 out_free_xoutbuf:
437         for (i = 0; i < num_mb; ++i)
438                 testmgr_free_buf(data[i].xoutbuf);
439 out_free_axbuf:
440         for (i = 0; i < num_mb; ++i)
441                 testmgr_free_buf(data[i].axbuf);
442 out_free_xbuf:
443         for (i = 0; i < num_mb; ++i)
444                 testmgr_free_buf(data[i].xbuf);
445 out_free_tfm:
446         crypto_free_aead(tfm);
447 out_free_data:
448         kfree(data);
449 out_free_iv:
450         kfree(iv);
451 }
452
453 static int test_aead_jiffies(struct aead_request *req, int enc,
454                                 int blen, int secs)
455 {
456         unsigned long start, end;
457         int bcount;
458         int ret;
459
460         for (start = jiffies, end = start + secs * HZ, bcount = 0;
461              time_before(jiffies, end); bcount++) {
462                 if (enc)
463                         ret = do_one_aead_op(req, crypto_aead_encrypt(req));
464                 else
465                         ret = do_one_aead_op(req, crypto_aead_decrypt(req));
466
467                 if (ret)
468                         return ret;
469         }
470
471         pr_cont("%d operations in %d seconds (%llu bytes)\n",
472                 bcount, secs, (u64)bcount * blen);
473         return 0;
474 }
475
476 static int test_aead_cycles(struct aead_request *req, int enc, int blen)
477 {
478         unsigned long cycles = 0;
479         int ret = 0;
480         int i;
481
482         /* Warm-up run. */
483         for (i = 0; i < 4; i++) {
484                 if (enc)
485                         ret = do_one_aead_op(req, crypto_aead_encrypt(req));
486                 else
487                         ret = do_one_aead_op(req, crypto_aead_decrypt(req));
488
489                 if (ret)
490                         goto out;
491         }
492
493         /* The real thing. */
494         for (i = 0; i < 8; i++) {
495                 cycles_t start, end;
496
497                 start = get_cycles();
498                 if (enc)
499                         ret = do_one_aead_op(req, crypto_aead_encrypt(req));
500                 else
501                         ret = do_one_aead_op(req, crypto_aead_decrypt(req));
502                 end = get_cycles();
503
504                 if (ret)
505                         goto out;
506
507                 cycles += end - start;
508         }
509
510 out:
511         if (ret == 0)
512                 pr_cont("1 operation in %lu cycles (%d bytes)\n",
513                         (cycles + 4) / 8, blen);
514
515         return ret;
516 }
517
518 static void test_aead_speed(const char *algo, int enc, unsigned int secs,
519                             struct aead_speed_template *template,
520                             unsigned int tcount, u8 authsize,
521                             unsigned int aad_size, u8 *keysize)
522 {
523         unsigned int i, j;
524         struct crypto_aead *tfm;
525         int ret = -ENOMEM;
526         const char *key;
527         struct aead_request *req;
528         struct scatterlist *sg;
529         struct scatterlist *sgout;
530         const char *e;
531         void *assoc;
532         char *iv;
533         char *xbuf[XBUFSIZE];
534         char *xoutbuf[XBUFSIZE];
535         char *axbuf[XBUFSIZE];
536         const int *b_size;
537         unsigned int iv_len;
538         struct crypto_wait wait;
539
540         iv = kzalloc(MAX_IVLEN, GFP_KERNEL);
541         if (!iv)
542                 return;
543
544         if (aad_size >= PAGE_SIZE) {
545                 pr_err("associate data length (%u) too big\n", aad_size);
546                 goto out_noxbuf;
547         }
548
549         if (enc == ENCRYPT)
550                 e = "encryption";
551         else
552                 e = "decryption";
553
554         if (testmgr_alloc_buf(xbuf))
555                 goto out_noxbuf;
556         if (testmgr_alloc_buf(axbuf))
557                 goto out_noaxbuf;
558         if (testmgr_alloc_buf(xoutbuf))
559                 goto out_nooutbuf;
560
561         sg = kmalloc(sizeof(*sg) * 9 * 2, GFP_KERNEL);
562         if (!sg)
563                 goto out_nosg;
564         sgout = &sg[9];
565
566         tfm = crypto_alloc_aead(algo, 0, 0);
567         if (IS_ERR(tfm)) {
568                 pr_err("alg: aead: Failed to load transform for %s: %ld\n", algo,
569                        PTR_ERR(tfm));
570                 goto out_notfm;
571         }
572
573         ret = crypto_aead_setauthsize(tfm, authsize);
574         if (ret) {
575                 pr_err("alg: aead: Failed to setauthsize for %s: %d\n", algo,
576                        ret);
577                 goto out_noreq;
578         }
579
580         crypto_init_wait(&wait);
581         pr_info("testing speed of %s (%s) %s\n", algo,
582                 get_driver_name(crypto_aead, tfm), e);
583
584         req = aead_request_alloc(tfm, GFP_KERNEL);
585         if (!req) {
586                 pr_err("alg: aead: Failed to allocate request for %s\n",
587                        algo);
588                 goto out_noreq;
589         }
590
591         aead_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
592                                   crypto_req_done, &wait);
593
594         i = 0;
595         do {
596                 b_size = aead_sizes;
597                 do {
598                         u32 bs = round_up(*b_size, crypto_aead_blocksize(tfm));
599
600                         assoc = axbuf[0];
601                         memset(assoc, 0xff, aad_size);
602
603                         if ((*keysize + bs) > TVMEMSIZE * PAGE_SIZE) {
604                                 pr_err("template (%u) too big for tvmem (%lu)\n",
605                                        *keysize + bs,
606                                         TVMEMSIZE * PAGE_SIZE);
607                                 goto out;
608                         }
609
610                         key = tvmem[0];
611                         for (j = 0; j < tcount; j++) {
612                                 if (template[j].klen == *keysize) {
613                                         key = template[j].key;
614                                         break;
615                                 }
616                         }
617
618                         ret = crypto_aead_setkey(tfm, key, *keysize);
619                         if (ret) {
620                                 pr_err("setkey() failed flags=%x: %d\n",
621                                         crypto_aead_get_flags(tfm), ret);
622                                 goto out;
623                         }
624
625                         iv_len = crypto_aead_ivsize(tfm);
626                         if (iv_len)
627                                 memset(iv, 0xff, iv_len);
628
629                         crypto_aead_clear_flags(tfm, ~0);
630                         pr_info("test %u (%d bit key, %d byte blocks): ",
631                                 i, *keysize * 8, bs);
632
633                         memset(tvmem[0], 0xff, PAGE_SIZE);
634
635                         sg_init_aead(sg, xbuf, bs + (enc ? 0 : authsize),
636                                      assoc, aad_size);
637
638                         sg_init_aead(sgout, xoutbuf,
639                                      bs + (enc ? authsize : 0), assoc,
640                                      aad_size);
641
642                         aead_request_set_ad(req, aad_size);
643
644                         if (!enc) {
645
646                                 /*
647                                  * For decryption we need a proper auth so
648                                  * we do the encryption path once with buffers
649                                  * reversed (input <-> output) to calculate it
650                                  */
651                                 aead_request_set_crypt(req, sgout, sg,
652                                                        bs, iv);
653                                 ret = do_one_aead_op(req,
654                                                      crypto_aead_encrypt(req));
655
656                                 if (ret) {
657                                         pr_err("calculating auth failed (%d)\n",
658                                                ret);
659                                         break;
660                                 }
661                         }
662
663                         aead_request_set_crypt(req, sg, sgout,
664                                                bs + (enc ? 0 : authsize),
665                                                iv);
666
667                         if (secs) {
668                                 ret = test_aead_jiffies(req, enc, bs,
669                                                         secs);
670                                 cond_resched();
671                         } else {
672                                 ret = test_aead_cycles(req, enc, bs);
673                         }
674
675                         if (ret) {
676                                 pr_err("%s() failed return code=%d\n", e, ret);
677                                 break;
678                         }
679                         b_size++;
680                         i++;
681                 } while (*b_size);
682                 keysize++;
683         } while (*keysize);
684
685 out:
686         aead_request_free(req);
687 out_noreq:
688         crypto_free_aead(tfm);
689 out_notfm:
690         kfree(sg);
691 out_nosg:
692         testmgr_free_buf(xoutbuf);
693 out_nooutbuf:
694         testmgr_free_buf(axbuf);
695 out_noaxbuf:
696         testmgr_free_buf(xbuf);
697 out_noxbuf:
698         kfree(iv);
699 }
700
701 static void test_hash_sg_init(struct scatterlist *sg)
702 {
703         int i;
704
705         sg_init_table(sg, TVMEMSIZE);
706         for (i = 0; i < TVMEMSIZE; i++) {
707                 sg_set_buf(sg + i, tvmem[i], PAGE_SIZE);
708                 memset(tvmem[i], 0xff, PAGE_SIZE);
709         }
710 }
711
712 static inline int do_one_ahash_op(struct ahash_request *req, int ret)
713 {
714         struct crypto_wait *wait = req->base.data;
715
716         return crypto_wait_req(ret, wait);
717 }
718
719 static int test_ahash_jiffies_digest(struct ahash_request *req, int blen,
720                                      char *out, int secs)
721 {
722         unsigned long start, end;
723         int bcount;
724         int ret;
725
726         for (start = jiffies, end = start + secs * HZ, bcount = 0;
727              time_before(jiffies, end); bcount++) {
728                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
729                 if (ret)
730                         return ret;
731         }
732
733         pr_cont("%6u opers/sec, %9lu bytes/sec\n",
734                 bcount / secs, ((long)bcount * blen) / secs);
735
736         return 0;
737 }
738
739 static int test_ahash_jiffies(struct ahash_request *req, int blen,
740                               int plen, char *out, int secs)
741 {
742         unsigned long start, end;
743         int bcount, pcount;
744         int ret;
745
746         if (plen == blen)
747                 return test_ahash_jiffies_digest(req, blen, out, secs);
748
749         for (start = jiffies, end = start + secs * HZ, bcount = 0;
750              time_before(jiffies, end); bcount++) {
751                 ret = do_one_ahash_op(req, crypto_ahash_init(req));
752                 if (ret)
753                         return ret;
754                 for (pcount = 0; pcount < blen; pcount += plen) {
755                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
756                         if (ret)
757                                 return ret;
758                 }
759                 /* we assume there is enough space in 'out' for the result */
760                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
761                 if (ret)
762                         return ret;
763         }
764
765         pr_cont("%6u opers/sec, %9lu bytes/sec\n",
766                 bcount / secs, ((long)bcount * blen) / secs);
767
768         return 0;
769 }
770
771 static int test_ahash_cycles_digest(struct ahash_request *req, int blen,
772                                     char *out)
773 {
774         unsigned long cycles = 0;
775         int ret, i;
776
777         /* Warm-up run. */
778         for (i = 0; i < 4; i++) {
779                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
780                 if (ret)
781                         goto out;
782         }
783
784         /* The real thing. */
785         for (i = 0; i < 8; i++) {
786                 cycles_t start, end;
787
788                 start = get_cycles();
789
790                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
791                 if (ret)
792                         goto out;
793
794                 end = get_cycles();
795
796                 cycles += end - start;
797         }
798
799 out:
800         if (ret)
801                 return ret;
802
803         pr_cont("%6lu cycles/operation, %4lu cycles/byte\n",
804                 cycles / 8, cycles / (8 * blen));
805
806         return 0;
807 }
808
809 static int test_ahash_cycles(struct ahash_request *req, int blen,
810                              int plen, char *out)
811 {
812         unsigned long cycles = 0;
813         int i, pcount, ret;
814
815         if (plen == blen)
816                 return test_ahash_cycles_digest(req, blen, out);
817
818         /* Warm-up run. */
819         for (i = 0; i < 4; i++) {
820                 ret = do_one_ahash_op(req, crypto_ahash_init(req));
821                 if (ret)
822                         goto out;
823                 for (pcount = 0; pcount < blen; pcount += plen) {
824                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
825                         if (ret)
826                                 goto out;
827                 }
828                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
829                 if (ret)
830                         goto out;
831         }
832
833         /* The real thing. */
834         for (i = 0; i < 8; i++) {
835                 cycles_t start, end;
836
837                 start = get_cycles();
838
839                 ret = do_one_ahash_op(req, crypto_ahash_init(req));
840                 if (ret)
841                         goto out;
842                 for (pcount = 0; pcount < blen; pcount += plen) {
843                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
844                         if (ret)
845                                 goto out;
846                 }
847                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
848                 if (ret)
849                         goto out;
850
851                 end = get_cycles();
852
853                 cycles += end - start;
854         }
855
856 out:
857         if (ret)
858                 return ret;
859
860         pr_cont("%6lu cycles/operation, %4lu cycles/byte\n",
861                 cycles / 8, cycles / (8 * blen));
862
863         return 0;
864 }
865
866 static void test_ahash_speed_common(const char *algo, unsigned int secs,
867                                     struct hash_speed *speed, unsigned mask)
868 {
869         struct scatterlist sg[TVMEMSIZE];
870         struct crypto_wait wait;
871         struct ahash_request *req;
872         struct crypto_ahash *tfm;
873         char *output;
874         int i, ret;
875
876         tfm = crypto_alloc_ahash(algo, 0, mask);
877         if (IS_ERR(tfm)) {
878                 pr_err("failed to load transform for %s: %ld\n",
879                        algo, PTR_ERR(tfm));
880                 return;
881         }
882
883         pr_info("testing speed of async %s (%s)\n", algo,
884                 get_driver_name(crypto_ahash, tfm));
885
886         if (crypto_ahash_digestsize(tfm) > MAX_DIGEST_SIZE) {
887                 pr_err("digestsize(%u) > %d\n", crypto_ahash_digestsize(tfm),
888                        MAX_DIGEST_SIZE);
889                 goto out;
890         }
891
892         test_hash_sg_init(sg);
893         req = ahash_request_alloc(tfm, GFP_KERNEL);
894         if (!req) {
895                 pr_err("ahash request allocation failure\n");
896                 goto out;
897         }
898
899         crypto_init_wait(&wait);
900         ahash_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
901                                    crypto_req_done, &wait);
902
903         output = kmalloc(MAX_DIGEST_SIZE, GFP_KERNEL);
904         if (!output)
905                 goto out_nomem;
906
907         for (i = 0; speed[i].blen != 0; i++) {
908                 if (speed[i].blen > TVMEMSIZE * PAGE_SIZE) {
909                         pr_err("template (%u) too big for tvmem (%lu)\n",
910                                speed[i].blen, TVMEMSIZE * PAGE_SIZE);
911                         break;
912                 }
913
914                 if (klen)
915                         crypto_ahash_setkey(tfm, tvmem[0], klen);
916
917                 pr_info("test%3u "
918                         "(%5u byte blocks,%5u bytes per update,%4u updates): ",
919                         i, speed[i].blen, speed[i].plen, speed[i].blen / speed[i].plen);
920
921                 ahash_request_set_crypt(req, sg, output, speed[i].plen);
922
923                 if (secs) {
924                         ret = test_ahash_jiffies(req, speed[i].blen,
925                                                  speed[i].plen, output, secs);
926                         cond_resched();
927                 } else {
928                         ret = test_ahash_cycles(req, speed[i].blen,
929                                                 speed[i].plen, output);
930                 }
931
932                 if (ret) {
933                         pr_err("hashing failed ret=%d\n", ret);
934                         break;
935                 }
936         }
937
938         kfree(output);
939
940 out_nomem:
941         ahash_request_free(req);
942
943 out:
944         crypto_free_ahash(tfm);
945 }
946
947 static void test_ahash_speed(const char *algo, unsigned int secs,
948                              struct hash_speed *speed)
949 {
950         return test_ahash_speed_common(algo, secs, speed, 0);
951 }
952
953 static void test_hash_speed(const char *algo, unsigned int secs,
954                             struct hash_speed *speed)
955 {
956         return test_ahash_speed_common(algo, secs, speed, CRYPTO_ALG_ASYNC);
957 }
958
959 struct test_mb_skcipher_data {
960         struct scatterlist sg[XBUFSIZE];
961         struct skcipher_request *req;
962         struct crypto_wait wait;
963         char *xbuf[XBUFSIZE];
964 };
965
966 static int do_mult_acipher_op(struct test_mb_skcipher_data *data, int enc,
967                                 u32 num_mb, int *rc)
968 {
969         int i, err = 0;
970
971         /* Fire up a bunch of concurrent requests */
972         for (i = 0; i < num_mb; i++) {
973                 if (enc == ENCRYPT)
974                         rc[i] = crypto_skcipher_encrypt(data[i].req);
975                 else
976                         rc[i] = crypto_skcipher_decrypt(data[i].req);
977         }
978
979         /* Wait for all requests to finish */
980         for (i = 0; i < num_mb; i++) {
981                 rc[i] = crypto_wait_req(rc[i], &data[i].wait);
982
983                 if (rc[i]) {
984                         pr_info("concurrent request %d error %d\n", i, rc[i]);
985                         err = rc[i];
986                 }
987         }
988
989         return err;
990 }
991
992 static int test_mb_acipher_jiffies(struct test_mb_skcipher_data *data, int enc,
993                                 int blen, int secs, u32 num_mb)
994 {
995         unsigned long start, end;
996         int bcount;
997         int ret = 0;
998         int *rc;
999
1000         rc = kcalloc(num_mb, sizeof(*rc), GFP_KERNEL);
1001         if (!rc)
1002                 return -ENOMEM;
1003
1004         for (start = jiffies, end = start + secs * HZ, bcount = 0;
1005              time_before(jiffies, end); bcount++) {
1006                 ret = do_mult_acipher_op(data, enc, num_mb, rc);
1007                 if (ret)
1008                         goto out;
1009         }
1010
1011         pr_cont("%d operations in %d seconds (%llu bytes)\n",
1012                 bcount * num_mb, secs, (u64)bcount * blen * num_mb);
1013
1014 out:
1015         kfree(rc);
1016         return ret;
1017 }
1018
1019 static int test_mb_acipher_cycles(struct test_mb_skcipher_data *data, int enc,
1020                                int blen, u32 num_mb)
1021 {
1022         unsigned long cycles = 0;
1023         int ret = 0;
1024         int i;
1025         int *rc;
1026
1027         rc = kcalloc(num_mb, sizeof(*rc), GFP_KERNEL);
1028         if (!rc)
1029                 return -ENOMEM;
1030
1031         /* Warm-up run. */
1032         for (i = 0; i < 4; i++) {
1033                 ret = do_mult_acipher_op(data, enc, num_mb, rc);
1034                 if (ret)
1035                         goto out;
1036         }
1037
1038         /* The real thing. */
1039         for (i = 0; i < 8; i++) {
1040                 cycles_t start, end;
1041
1042                 start = get_cycles();
1043                 ret = do_mult_acipher_op(data, enc, num_mb, rc);
1044                 end = get_cycles();
1045
1046                 if (ret)
1047                         goto out;
1048
1049                 cycles += end - start;
1050         }
1051
1052         pr_cont("1 operation in %lu cycles (%d bytes)\n",
1053                 (cycles + 4) / (8 * num_mb), blen);
1054
1055 out:
1056         kfree(rc);
1057         return ret;
1058 }
1059
1060 static void test_mb_skcipher_speed(const char *algo, int enc, int secs,
1061                                    struct cipher_speed_template *template,
1062                                    unsigned int tcount, u8 *keysize, u32 num_mb)
1063 {
1064         struct test_mb_skcipher_data *data;
1065         struct crypto_skcipher *tfm;
1066         unsigned int i, j, iv_len;
1067         const int *b_size;
1068         const char *key;
1069         const char *e;
1070         char iv[128];
1071         int ret;
1072
1073         if (enc == ENCRYPT)
1074                 e = "encryption";
1075         else
1076                 e = "decryption";
1077
1078         data = kcalloc(num_mb, sizeof(*data), GFP_KERNEL);
1079         if (!data)
1080                 return;
1081
1082         tfm = crypto_alloc_skcipher(algo, 0, 0);
1083         if (IS_ERR(tfm)) {
1084                 pr_err("failed to load transform for %s: %ld\n",
1085                         algo, PTR_ERR(tfm));
1086                 goto out_free_data;
1087         }
1088
1089         for (i = 0; i < num_mb; ++i)
1090                 if (testmgr_alloc_buf(data[i].xbuf)) {
1091                         while (i--)
1092                                 testmgr_free_buf(data[i].xbuf);
1093                         goto out_free_tfm;
1094                 }
1095
1096         for (i = 0; i < num_mb; ++i) {
1097                 data[i].req = skcipher_request_alloc(tfm, GFP_KERNEL);
1098                 if (!data[i].req) {
1099                         pr_err("alg: skcipher: Failed to allocate request for %s\n",
1100                                algo);
1101                         while (i--)
1102                                 skcipher_request_free(data[i].req);
1103                         goto out_free_xbuf;
1104                 }
1105         }
1106
1107         for (i = 0; i < num_mb; ++i) {
1108                 skcipher_request_set_callback(data[i].req,
1109                                               CRYPTO_TFM_REQ_MAY_BACKLOG,
1110                                               crypto_req_done, &data[i].wait);
1111                 crypto_init_wait(&data[i].wait);
1112         }
1113
1114         pr_info("testing speed of multibuffer %s (%s) %s\n", algo,
1115                 get_driver_name(crypto_skcipher, tfm), e);
1116
1117         i = 0;
1118         do {
1119                 b_size = block_sizes;
1120                 do {
1121                         u32 bs = round_up(*b_size, crypto_skcipher_blocksize(tfm));
1122
1123                         if (bs > XBUFSIZE * PAGE_SIZE) {
1124                                 pr_err("template (%u) too big for buffer (%lu)\n",
1125                                        bs, XBUFSIZE * PAGE_SIZE);
1126                                 goto out;
1127                         }
1128
1129                         pr_info("test %u (%d bit key, %d byte blocks): ", i,
1130                                 *keysize * 8, bs);
1131
1132                         /* Set up tfm global state, i.e. the key */
1133
1134                         memset(tvmem[0], 0xff, PAGE_SIZE);
1135                         key = tvmem[0];
1136                         for (j = 0; j < tcount; j++) {
1137                                 if (template[j].klen == *keysize) {
1138                                         key = template[j].key;
1139                                         break;
1140                                 }
1141                         }
1142
1143                         crypto_skcipher_clear_flags(tfm, ~0);
1144
1145                         ret = crypto_skcipher_setkey(tfm, key, *keysize);
1146                         if (ret) {
1147                                 pr_err("setkey() failed flags=%x\n",
1148                                        crypto_skcipher_get_flags(tfm));
1149                                 goto out;
1150                         }
1151
1152                         iv_len = crypto_skcipher_ivsize(tfm);
1153                         if (iv_len)
1154                                 memset(&iv, 0xff, iv_len);
1155
1156                         /* Now setup per request stuff, i.e. buffers */
1157
1158                         for (j = 0; j < num_mb; ++j) {
1159                                 struct test_mb_skcipher_data *cur = &data[j];
1160                                 unsigned int k = bs;
1161                                 unsigned int pages = DIV_ROUND_UP(k, PAGE_SIZE);
1162                                 unsigned int p = 0;
1163
1164                                 sg_init_table(cur->sg, pages);
1165
1166                                 while (k > PAGE_SIZE) {
1167                                         sg_set_buf(cur->sg + p, cur->xbuf[p],
1168                                                    PAGE_SIZE);
1169                                         memset(cur->xbuf[p], 0xff, PAGE_SIZE);
1170                                         p++;
1171                                         k -= PAGE_SIZE;
1172                                 }
1173
1174                                 sg_set_buf(cur->sg + p, cur->xbuf[p], k);
1175                                 memset(cur->xbuf[p], 0xff, k);
1176
1177                                 skcipher_request_set_crypt(cur->req, cur->sg,
1178                                                            cur->sg, bs, iv);
1179                         }
1180
1181                         if (secs) {
1182                                 ret = test_mb_acipher_jiffies(data, enc,
1183                                                               bs, secs,
1184                                                               num_mb);
1185                                 cond_resched();
1186                         } else {
1187                                 ret = test_mb_acipher_cycles(data, enc,
1188                                                              bs, num_mb);
1189                         }
1190
1191                         if (ret) {
1192                                 pr_err("%s() failed flags=%x\n", e,
1193                                        crypto_skcipher_get_flags(tfm));
1194                                 break;
1195                         }
1196                         b_size++;
1197                         i++;
1198                 } while (*b_size);
1199                 keysize++;
1200         } while (*keysize);
1201
1202 out:
1203         for (i = 0; i < num_mb; ++i)
1204                 skcipher_request_free(data[i].req);
1205 out_free_xbuf:
1206         for (i = 0; i < num_mb; ++i)
1207                 testmgr_free_buf(data[i].xbuf);
1208 out_free_tfm:
1209         crypto_free_skcipher(tfm);
1210 out_free_data:
1211         kfree(data);
1212 }
1213
1214 static inline int do_one_acipher_op(struct skcipher_request *req, int ret)
1215 {
1216         struct crypto_wait *wait = req->base.data;
1217
1218         return crypto_wait_req(ret, wait);
1219 }
1220
1221 static int test_acipher_jiffies(struct skcipher_request *req, int enc,
1222                                 int blen, int secs)
1223 {
1224         unsigned long start, end;
1225         int bcount;
1226         int ret;
1227
1228         for (start = jiffies, end = start + secs * HZ, bcount = 0;
1229              time_before(jiffies, end); bcount++) {
1230                 if (enc)
1231                         ret = do_one_acipher_op(req,
1232                                                 crypto_skcipher_encrypt(req));
1233                 else
1234                         ret = do_one_acipher_op(req,
1235                                                 crypto_skcipher_decrypt(req));
1236
1237                 if (ret)
1238                         return ret;
1239         }
1240
1241         pr_cont("%d operations in %d seconds (%llu bytes)\n",
1242                 bcount, secs, (u64)bcount * blen);
1243         return 0;
1244 }
1245
1246 static int test_acipher_cycles(struct skcipher_request *req, int enc,
1247                                int blen)
1248 {
1249         unsigned long cycles = 0;
1250         int ret = 0;
1251         int i;
1252
1253         /* Warm-up run. */
1254         for (i = 0; i < 4; i++) {
1255                 if (enc)
1256                         ret = do_one_acipher_op(req,
1257                                                 crypto_skcipher_encrypt(req));
1258                 else
1259                         ret = do_one_acipher_op(req,
1260                                                 crypto_skcipher_decrypt(req));
1261
1262                 if (ret)
1263                         goto out;
1264         }
1265
1266         /* The real thing. */
1267         for (i = 0; i < 8; i++) {
1268                 cycles_t start, end;
1269
1270                 start = get_cycles();
1271                 if (enc)
1272                         ret = do_one_acipher_op(req,
1273                                                 crypto_skcipher_encrypt(req));
1274                 else
1275                         ret = do_one_acipher_op(req,
1276                                                 crypto_skcipher_decrypt(req));
1277                 end = get_cycles();
1278
1279                 if (ret)
1280                         goto out;
1281
1282                 cycles += end - start;
1283         }
1284
1285 out:
1286         if (ret == 0)
1287                 pr_cont("1 operation in %lu cycles (%d bytes)\n",
1288                         (cycles + 4) / 8, blen);
1289
1290         return ret;
1291 }
1292
1293 static void test_skcipher_speed(const char *algo, int enc, unsigned int secs,
1294                                 struct cipher_speed_template *template,
1295                                 unsigned int tcount, u8 *keysize, bool async)
1296 {
1297         unsigned int ret, i, j, k, iv_len;
1298         struct crypto_wait wait;
1299         const char *key;
1300         char iv[128];
1301         struct skcipher_request *req;
1302         struct crypto_skcipher *tfm;
1303         const int *b_size;
1304         const char *e;
1305
1306         if (enc == ENCRYPT)
1307                 e = "encryption";
1308         else
1309                 e = "decryption";
1310
1311         crypto_init_wait(&wait);
1312
1313         tfm = crypto_alloc_skcipher(algo, 0, async ? 0 : CRYPTO_ALG_ASYNC);
1314
1315         if (IS_ERR(tfm)) {
1316                 pr_err("failed to load transform for %s: %ld\n", algo,
1317                        PTR_ERR(tfm));
1318                 return;
1319         }
1320
1321         pr_info("testing speed of %s %s (%s) %s\n", async ? "async" : "sync",
1322                 algo, get_driver_name(crypto_skcipher, tfm), e);
1323
1324         req = skcipher_request_alloc(tfm, GFP_KERNEL);
1325         if (!req) {
1326                 pr_err("skcipher: Failed to allocate request for %s\n", algo);
1327                 goto out;
1328         }
1329
1330         skcipher_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
1331                                       crypto_req_done, &wait);
1332
1333         i = 0;
1334         do {
1335                 b_size = block_sizes;
1336
1337                 do {
1338                         u32 bs = round_up(*b_size, crypto_skcipher_blocksize(tfm));
1339                         struct scatterlist sg[TVMEMSIZE];
1340
1341                         if ((*keysize + bs) > TVMEMSIZE * PAGE_SIZE) {
1342                                 pr_err("template (%u) too big for "
1343                                        "tvmem (%lu)\n", *keysize + bs,
1344                                        TVMEMSIZE * PAGE_SIZE);
1345                                 goto out_free_req;
1346                         }
1347
1348                         pr_info("test %u (%d bit key, %d byte blocks): ", i,
1349                                 *keysize * 8, bs);
1350
1351                         memset(tvmem[0], 0xff, PAGE_SIZE);
1352
1353                         /* set key, plain text and IV */
1354                         key = tvmem[0];
1355                         for (j = 0; j < tcount; j++) {
1356                                 if (template[j].klen == *keysize) {
1357                                         key = template[j].key;
1358                                         break;
1359                                 }
1360                         }
1361
1362                         crypto_skcipher_clear_flags(tfm, ~0);
1363
1364                         ret = crypto_skcipher_setkey(tfm, key, *keysize);
1365                         if (ret) {
1366                                 pr_err("setkey() failed flags=%x\n",
1367                                         crypto_skcipher_get_flags(tfm));
1368                                 goto out_free_req;
1369                         }
1370
1371                         k = *keysize + bs;
1372                         sg_init_table(sg, DIV_ROUND_UP(k, PAGE_SIZE));
1373
1374                         if (k > PAGE_SIZE) {
1375                                 sg_set_buf(sg, tvmem[0] + *keysize,
1376                                    PAGE_SIZE - *keysize);
1377                                 k -= PAGE_SIZE;
1378                                 j = 1;
1379                                 while (k > PAGE_SIZE) {
1380                                         sg_set_buf(sg + j, tvmem[j], PAGE_SIZE);
1381                                         memset(tvmem[j], 0xff, PAGE_SIZE);
1382                                         j++;
1383                                         k -= PAGE_SIZE;
1384                                 }
1385                                 sg_set_buf(sg + j, tvmem[j], k);
1386                                 memset(tvmem[j], 0xff, k);
1387                         } else {
1388                                 sg_set_buf(sg, tvmem[0] + *keysize, bs);
1389                         }
1390
1391                         iv_len = crypto_skcipher_ivsize(tfm);
1392                         if (iv_len)
1393                                 memset(&iv, 0xff, iv_len);
1394
1395                         skcipher_request_set_crypt(req, sg, sg, bs, iv);
1396
1397                         if (secs) {
1398                                 ret = test_acipher_jiffies(req, enc,
1399                                                            bs, secs);
1400                                 cond_resched();
1401                         } else {
1402                                 ret = test_acipher_cycles(req, enc,
1403                                                           bs);
1404                         }
1405
1406                         if (ret) {
1407                                 pr_err("%s() failed flags=%x\n", e,
1408                                        crypto_skcipher_get_flags(tfm));
1409                                 break;
1410                         }
1411                         b_size++;
1412                         i++;
1413                 } while (*b_size);
1414                 keysize++;
1415         } while (*keysize);
1416
1417 out_free_req:
1418         skcipher_request_free(req);
1419 out:
1420         crypto_free_skcipher(tfm);
1421 }
1422
1423 static void test_acipher_speed(const char *algo, int enc, unsigned int secs,
1424                                struct cipher_speed_template *template,
1425                                unsigned int tcount, u8 *keysize)
1426 {
1427         return test_skcipher_speed(algo, enc, secs, template, tcount, keysize,
1428                                    true);
1429 }
1430
1431 static void test_cipher_speed(const char *algo, int enc, unsigned int secs,
1432                               struct cipher_speed_template *template,
1433                               unsigned int tcount, u8 *keysize)
1434 {
1435         return test_skcipher_speed(algo, enc, secs, template, tcount, keysize,
1436                                    false);
1437 }
1438
1439 static inline int tcrypt_test(const char *alg)
1440 {
1441         int ret;
1442
1443         pr_debug("testing %s\n", alg);
1444
1445         ret = alg_test(alg, alg, 0, 0);
1446         /* non-fips algs return -EINVAL or -ECANCELED in fips mode */
1447         if (fips_enabled && (ret == -EINVAL || ret == -ECANCELED))
1448                 ret = 0;
1449         return ret;
1450 }
1451
1452 static int do_test(const char *alg, u32 type, u32 mask, int m, u32 num_mb)
1453 {
1454         int i;
1455         int ret = 0;
1456
1457         switch (m) {
1458         case 0:
1459                 if (alg) {
1460                         if (!crypto_has_alg(alg, type,
1461                                             mask ?: CRYPTO_ALG_TYPE_MASK))
1462                                 ret = -ENOENT;
1463                         break;
1464                 }
1465
1466                 for (i = 1; i < 200; i++)
1467                         ret = min(ret, do_test(NULL, 0, 0, i, num_mb));
1468                 break;
1469
1470         case 1:
1471                 ret = min(ret, tcrypt_test("md5"));
1472                 break;
1473
1474         case 2:
1475                 ret = min(ret, tcrypt_test("sha1"));
1476                 break;
1477
1478         case 3:
1479                 ret = min(ret, tcrypt_test("ecb(des)"));
1480                 ret = min(ret, tcrypt_test("cbc(des)"));
1481                 ret = min(ret, tcrypt_test("ctr(des)"));
1482                 break;
1483
1484         case 4:
1485                 ret = min(ret, tcrypt_test("ecb(des3_ede)"));
1486                 ret = min(ret, tcrypt_test("cbc(des3_ede)"));
1487                 ret = min(ret, tcrypt_test("ctr(des3_ede)"));
1488                 break;
1489
1490         case 5:
1491                 ret = min(ret, tcrypt_test("md4"));
1492                 break;
1493
1494         case 6:
1495                 ret = min(ret, tcrypt_test("sha256"));
1496                 break;
1497
1498         case 7:
1499                 ret = min(ret, tcrypt_test("ecb(blowfish)"));
1500                 ret = min(ret, tcrypt_test("cbc(blowfish)"));
1501                 ret = min(ret, tcrypt_test("ctr(blowfish)"));
1502                 break;
1503
1504         case 8:
1505                 ret = min(ret, tcrypt_test("ecb(twofish)"));
1506                 ret = min(ret, tcrypt_test("cbc(twofish)"));
1507                 ret = min(ret, tcrypt_test("ctr(twofish)"));
1508                 ret = min(ret, tcrypt_test("lrw(twofish)"));
1509                 ret = min(ret, tcrypt_test("xts(twofish)"));
1510                 break;
1511
1512         case 9:
1513                 ret = min(ret, tcrypt_test("ecb(serpent)"));
1514                 ret = min(ret, tcrypt_test("cbc(serpent)"));
1515                 ret = min(ret, tcrypt_test("ctr(serpent)"));
1516                 ret = min(ret, tcrypt_test("lrw(serpent)"));
1517                 ret = min(ret, tcrypt_test("xts(serpent)"));
1518                 break;
1519
1520         case 10:
1521                 ret = min(ret, tcrypt_test("ecb(aes)"));
1522                 ret = min(ret, tcrypt_test("cbc(aes)"));
1523                 ret = min(ret, tcrypt_test("lrw(aes)"));
1524                 ret = min(ret, tcrypt_test("xts(aes)"));
1525                 ret = min(ret, tcrypt_test("ctr(aes)"));
1526                 ret = min(ret, tcrypt_test("rfc3686(ctr(aes))"));
1527                 ret = min(ret, tcrypt_test("ofb(aes)"));
1528                 ret = min(ret, tcrypt_test("cfb(aes)"));
1529                 ret = min(ret, tcrypt_test("xctr(aes)"));
1530                 break;
1531
1532         case 11:
1533                 ret = min(ret, tcrypt_test("sha384"));
1534                 break;
1535
1536         case 12:
1537                 ret = min(ret, tcrypt_test("sha512"));
1538                 break;
1539
1540         case 13:
1541                 ret = min(ret, tcrypt_test("deflate"));
1542                 break;
1543
1544         case 14:
1545                 ret = min(ret, tcrypt_test("ecb(cast5)"));
1546                 ret = min(ret, tcrypt_test("cbc(cast5)"));
1547                 ret = min(ret, tcrypt_test("ctr(cast5)"));
1548                 break;
1549
1550         case 15:
1551                 ret = min(ret, tcrypt_test("ecb(cast6)"));
1552                 ret = min(ret, tcrypt_test("cbc(cast6)"));
1553                 ret = min(ret, tcrypt_test("ctr(cast6)"));
1554                 ret = min(ret, tcrypt_test("lrw(cast6)"));
1555                 ret = min(ret, tcrypt_test("xts(cast6)"));
1556                 break;
1557
1558         case 16:
1559                 ret = min(ret, tcrypt_test("ecb(arc4)"));
1560                 break;
1561
1562         case 17:
1563                 ret = min(ret, tcrypt_test("michael_mic"));
1564                 break;
1565
1566         case 18:
1567                 ret = min(ret, tcrypt_test("crc32c"));
1568                 break;
1569
1570         case 19:
1571                 ret = min(ret, tcrypt_test("ecb(tea)"));
1572                 break;
1573
1574         case 20:
1575                 ret = min(ret, tcrypt_test("ecb(xtea)"));
1576                 break;
1577
1578         case 21:
1579                 ret = min(ret, tcrypt_test("ecb(khazad)"));
1580                 break;
1581
1582         case 22:
1583                 ret = min(ret, tcrypt_test("wp512"));
1584                 break;
1585
1586         case 23:
1587                 ret = min(ret, tcrypt_test("wp384"));
1588                 break;
1589
1590         case 24:
1591                 ret = min(ret, tcrypt_test("wp256"));
1592                 break;
1593
1594         case 26:
1595                 ret = min(ret, tcrypt_test("ecb(anubis)"));
1596                 ret = min(ret, tcrypt_test("cbc(anubis)"));
1597                 break;
1598
1599         case 30:
1600                 ret = min(ret, tcrypt_test("ecb(xeta)"));
1601                 break;
1602
1603         case 31:
1604                 ret = min(ret, tcrypt_test("pcbc(fcrypt)"));
1605                 break;
1606
1607         case 32:
1608                 ret = min(ret, tcrypt_test("ecb(camellia)"));
1609                 ret = min(ret, tcrypt_test("cbc(camellia)"));
1610                 ret = min(ret, tcrypt_test("ctr(camellia)"));
1611                 ret = min(ret, tcrypt_test("lrw(camellia)"));
1612                 ret = min(ret, tcrypt_test("xts(camellia)"));
1613                 break;
1614
1615         case 33:
1616                 ret = min(ret, tcrypt_test("sha224"));
1617                 break;
1618
1619         case 35:
1620                 ret = min(ret, tcrypt_test("gcm(aes)"));
1621                 break;
1622
1623         case 36:
1624                 ret = min(ret, tcrypt_test("lzo"));
1625                 break;
1626
1627         case 37:
1628                 ret = min(ret, tcrypt_test("ccm(aes)"));
1629                 break;
1630
1631         case 38:
1632                 ret = min(ret, tcrypt_test("cts(cbc(aes))"));
1633                 break;
1634
1635         case 39:
1636                 ret = min(ret, tcrypt_test("xxhash64"));
1637                 break;
1638
1639         case 40:
1640                 ret = min(ret, tcrypt_test("rmd160"));
1641                 break;
1642
1643         case 42:
1644                 ret = min(ret, tcrypt_test("blake2b-512"));
1645                 break;
1646
1647         case 43:
1648                 ret = min(ret, tcrypt_test("ecb(seed)"));
1649                 break;
1650
1651         case 45:
1652                 ret = min(ret, tcrypt_test("rfc4309(ccm(aes))"));
1653                 break;
1654
1655         case 46:
1656                 ret = min(ret, tcrypt_test("ghash"));
1657                 break;
1658
1659         case 47:
1660                 ret = min(ret, tcrypt_test("crct10dif"));
1661                 break;
1662
1663         case 48:
1664                 ret = min(ret, tcrypt_test("sha3-224"));
1665                 break;
1666
1667         case 49:
1668                 ret = min(ret, tcrypt_test("sha3-256"));
1669                 break;
1670
1671         case 50:
1672                 ret = min(ret, tcrypt_test("sha3-384"));
1673                 break;
1674
1675         case 51:
1676                 ret = min(ret, tcrypt_test("sha3-512"));
1677                 break;
1678
1679         case 52:
1680                 ret = min(ret, tcrypt_test("sm3"));
1681                 break;
1682
1683         case 53:
1684                 ret = min(ret, tcrypt_test("streebog256"));
1685                 break;
1686
1687         case 54:
1688                 ret = min(ret, tcrypt_test("streebog512"));
1689                 break;
1690
1691         case 55:
1692                 ret = min(ret, tcrypt_test("gcm(sm4)"));
1693                 break;
1694
1695         case 56:
1696                 ret = min(ret, tcrypt_test("ccm(sm4)"));
1697                 break;
1698
1699         case 57:
1700                 ret = min(ret, tcrypt_test("polyval"));
1701                 break;
1702
1703         case 58:
1704                 ret = min(ret, tcrypt_test("gcm(aria)"));
1705                 break;
1706
1707         case 59:
1708                 ret = min(ret, tcrypt_test("cts(cbc(sm4))"));
1709                 break;
1710
1711         case 100:
1712                 ret = min(ret, tcrypt_test("hmac(md5)"));
1713                 break;
1714
1715         case 101:
1716                 ret = min(ret, tcrypt_test("hmac(sha1)"));
1717                 break;
1718
1719         case 102:
1720                 ret = min(ret, tcrypt_test("hmac(sha256)"));
1721                 break;
1722
1723         case 103:
1724                 ret = min(ret, tcrypt_test("hmac(sha384)"));
1725                 break;
1726
1727         case 104:
1728                 ret = min(ret, tcrypt_test("hmac(sha512)"));
1729                 break;
1730
1731         case 105:
1732                 ret = min(ret, tcrypt_test("hmac(sha224)"));
1733                 break;
1734
1735         case 106:
1736                 ret = min(ret, tcrypt_test("xcbc(aes)"));
1737                 break;
1738
1739         case 108:
1740                 ret = min(ret, tcrypt_test("hmac(rmd160)"));
1741                 break;
1742
1743         case 109:
1744                 ret = min(ret, tcrypt_test("vmac64(aes)"));
1745                 break;
1746
1747         case 111:
1748                 ret = min(ret, tcrypt_test("hmac(sha3-224)"));
1749                 break;
1750
1751         case 112:
1752                 ret = min(ret, tcrypt_test("hmac(sha3-256)"));
1753                 break;
1754
1755         case 113:
1756                 ret = min(ret, tcrypt_test("hmac(sha3-384)"));
1757                 break;
1758
1759         case 114:
1760                 ret = min(ret, tcrypt_test("hmac(sha3-512)"));
1761                 break;
1762
1763         case 115:
1764                 ret = min(ret, tcrypt_test("hmac(streebog256)"));
1765                 break;
1766
1767         case 116:
1768                 ret = min(ret, tcrypt_test("hmac(streebog512)"));
1769                 break;
1770
1771         case 150:
1772                 ret = min(ret, tcrypt_test("ansi_cprng"));
1773                 break;
1774
1775         case 151:
1776                 ret = min(ret, tcrypt_test("rfc4106(gcm(aes))"));
1777                 break;
1778
1779         case 152:
1780                 ret = min(ret, tcrypt_test("rfc4543(gcm(aes))"));
1781                 break;
1782
1783         case 153:
1784                 ret = min(ret, tcrypt_test("cmac(aes)"));
1785                 break;
1786
1787         case 154:
1788                 ret = min(ret, tcrypt_test("cmac(des3_ede)"));
1789                 break;
1790
1791         case 155:
1792                 ret = min(ret, tcrypt_test("authenc(hmac(sha1),cbc(aes))"));
1793                 break;
1794
1795         case 156:
1796                 ret = min(ret, tcrypt_test("authenc(hmac(md5),ecb(cipher_null))"));
1797                 break;
1798
1799         case 157:
1800                 ret = min(ret, tcrypt_test("authenc(hmac(sha1),ecb(cipher_null))"));
1801                 break;
1802
1803         case 158:
1804                 ret = min(ret, tcrypt_test("cbcmac(sm4)"));
1805                 break;
1806
1807         case 159:
1808                 ret = min(ret, tcrypt_test("cmac(sm4)"));
1809                 break;
1810
1811         case 160:
1812                 ret = min(ret, tcrypt_test("xcbc(sm4)"));
1813                 break;
1814
1815         case 181:
1816                 ret = min(ret, tcrypt_test("authenc(hmac(sha1),cbc(des))"));
1817                 break;
1818         case 182:
1819                 ret = min(ret, tcrypt_test("authenc(hmac(sha1),cbc(des3_ede))"));
1820                 break;
1821         case 183:
1822                 ret = min(ret, tcrypt_test("authenc(hmac(sha224),cbc(des))"));
1823                 break;
1824         case 184:
1825                 ret = min(ret, tcrypt_test("authenc(hmac(sha224),cbc(des3_ede))"));
1826                 break;
1827         case 185:
1828                 ret = min(ret, tcrypt_test("authenc(hmac(sha256),cbc(des))"));
1829                 break;
1830         case 186:
1831                 ret = min(ret, tcrypt_test("authenc(hmac(sha256),cbc(des3_ede))"));
1832                 break;
1833         case 187:
1834                 ret = min(ret, tcrypt_test("authenc(hmac(sha384),cbc(des))"));
1835                 break;
1836         case 188:
1837                 ret = min(ret, tcrypt_test("authenc(hmac(sha384),cbc(des3_ede))"));
1838                 break;
1839         case 189:
1840                 ret = min(ret, tcrypt_test("authenc(hmac(sha512),cbc(des))"));
1841                 break;
1842         case 190:
1843                 ret = min(ret, tcrypt_test("authenc(hmac(sha512),cbc(des3_ede))"));
1844                 break;
1845         case 191:
1846                 ret = min(ret, tcrypt_test("ecb(sm4)"));
1847                 ret = min(ret, tcrypt_test("cbc(sm4)"));
1848                 ret = min(ret, tcrypt_test("cfb(sm4)"));
1849                 ret = min(ret, tcrypt_test("ctr(sm4)"));
1850                 ret = min(ret, tcrypt_test("xts(sm4)"));
1851                 break;
1852         case 192:
1853                 ret = min(ret, tcrypt_test("ecb(aria)"));
1854                 ret = min(ret, tcrypt_test("cbc(aria)"));
1855                 ret = min(ret, tcrypt_test("cfb(aria)"));
1856                 ret = min(ret, tcrypt_test("ctr(aria)"));
1857                 break;
1858         case 200:
1859                 test_cipher_speed("ecb(aes)", ENCRYPT, sec, NULL, 0,
1860                                 speed_template_16_24_32);
1861                 test_cipher_speed("ecb(aes)", DECRYPT, sec, NULL, 0,
1862                                 speed_template_16_24_32);
1863                 test_cipher_speed("cbc(aes)", ENCRYPT, sec, NULL, 0,
1864                                 speed_template_16_24_32);
1865                 test_cipher_speed("cbc(aes)", DECRYPT, sec, NULL, 0,
1866                                 speed_template_16_24_32);
1867                 test_cipher_speed("lrw(aes)", ENCRYPT, sec, NULL, 0,
1868                                 speed_template_32_40_48);
1869                 test_cipher_speed("lrw(aes)", DECRYPT, sec, NULL, 0,
1870                                 speed_template_32_40_48);
1871                 test_cipher_speed("xts(aes)", ENCRYPT, sec, NULL, 0,
1872                                 speed_template_32_64);
1873                 test_cipher_speed("xts(aes)", DECRYPT, sec, NULL, 0,
1874                                 speed_template_32_64);
1875                 test_cipher_speed("cts(cbc(aes))", ENCRYPT, sec, NULL, 0,
1876                                 speed_template_16_24_32);
1877                 test_cipher_speed("cts(cbc(aes))", DECRYPT, sec, NULL, 0,
1878                                 speed_template_16_24_32);
1879                 test_cipher_speed("ctr(aes)", ENCRYPT, sec, NULL, 0,
1880                                 speed_template_16_24_32);
1881                 test_cipher_speed("ctr(aes)", DECRYPT, sec, NULL, 0,
1882                                 speed_template_16_24_32);
1883                 test_cipher_speed("cfb(aes)", ENCRYPT, sec, NULL, 0,
1884                                 speed_template_16_24_32);
1885                 test_cipher_speed("cfb(aes)", DECRYPT, sec, NULL, 0,
1886                                 speed_template_16_24_32);
1887                 break;
1888
1889         case 201:
1890                 test_cipher_speed("ecb(des3_ede)", ENCRYPT, sec,
1891                                 des3_speed_template, DES3_SPEED_VECTORS,
1892                                 speed_template_24);
1893                 test_cipher_speed("ecb(des3_ede)", DECRYPT, sec,
1894                                 des3_speed_template, DES3_SPEED_VECTORS,
1895                                 speed_template_24);
1896                 test_cipher_speed("cbc(des3_ede)", ENCRYPT, sec,
1897                                 des3_speed_template, DES3_SPEED_VECTORS,
1898                                 speed_template_24);
1899                 test_cipher_speed("cbc(des3_ede)", DECRYPT, sec,
1900                                 des3_speed_template, DES3_SPEED_VECTORS,
1901                                 speed_template_24);
1902                 test_cipher_speed("ctr(des3_ede)", ENCRYPT, sec,
1903                                 des3_speed_template, DES3_SPEED_VECTORS,
1904                                 speed_template_24);
1905                 test_cipher_speed("ctr(des3_ede)", DECRYPT, sec,
1906                                 des3_speed_template, DES3_SPEED_VECTORS,
1907                                 speed_template_24);
1908                 break;
1909
1910         case 202:
1911                 test_cipher_speed("ecb(twofish)", ENCRYPT, sec, NULL, 0,
1912                                 speed_template_16_24_32);
1913                 test_cipher_speed("ecb(twofish)", DECRYPT, sec, NULL, 0,
1914                                 speed_template_16_24_32);
1915                 test_cipher_speed("cbc(twofish)", ENCRYPT, sec, NULL, 0,
1916                                 speed_template_16_24_32);
1917                 test_cipher_speed("cbc(twofish)", DECRYPT, sec, NULL, 0,
1918                                 speed_template_16_24_32);
1919                 test_cipher_speed("ctr(twofish)", ENCRYPT, sec, NULL, 0,
1920                                 speed_template_16_24_32);
1921                 test_cipher_speed("ctr(twofish)", DECRYPT, sec, NULL, 0,
1922                                 speed_template_16_24_32);
1923                 test_cipher_speed("lrw(twofish)", ENCRYPT, sec, NULL, 0,
1924                                 speed_template_32_40_48);
1925                 test_cipher_speed("lrw(twofish)", DECRYPT, sec, NULL, 0,
1926                                 speed_template_32_40_48);
1927                 test_cipher_speed("xts(twofish)", ENCRYPT, sec, NULL, 0,
1928                                 speed_template_32_48_64);
1929                 test_cipher_speed("xts(twofish)", DECRYPT, sec, NULL, 0,
1930                                 speed_template_32_48_64);
1931                 break;
1932
1933         case 203:
1934                 test_cipher_speed("ecb(blowfish)", ENCRYPT, sec, NULL, 0,
1935                                   speed_template_8_32);
1936                 test_cipher_speed("ecb(blowfish)", DECRYPT, sec, NULL, 0,
1937                                   speed_template_8_32);
1938                 test_cipher_speed("cbc(blowfish)", ENCRYPT, sec, NULL, 0,
1939                                   speed_template_8_32);
1940                 test_cipher_speed("cbc(blowfish)", DECRYPT, sec, NULL, 0,
1941                                   speed_template_8_32);
1942                 test_cipher_speed("ctr(blowfish)", ENCRYPT, sec, NULL, 0,
1943                                   speed_template_8_32);
1944                 test_cipher_speed("ctr(blowfish)", DECRYPT, sec, NULL, 0,
1945                                   speed_template_8_32);
1946                 break;
1947
1948         case 204:
1949                 test_cipher_speed("ecb(des)", ENCRYPT, sec, NULL, 0,
1950                                   speed_template_8);
1951                 test_cipher_speed("ecb(des)", DECRYPT, sec, NULL, 0,
1952                                   speed_template_8);
1953                 test_cipher_speed("cbc(des)", ENCRYPT, sec, NULL, 0,
1954                                   speed_template_8);
1955                 test_cipher_speed("cbc(des)", DECRYPT, sec, NULL, 0,
1956                                   speed_template_8);
1957                 break;
1958
1959         case 205:
1960                 test_cipher_speed("ecb(camellia)", ENCRYPT, sec, NULL, 0,
1961                                 speed_template_16_24_32);
1962                 test_cipher_speed("ecb(camellia)", DECRYPT, sec, NULL, 0,
1963                                 speed_template_16_24_32);
1964                 test_cipher_speed("cbc(camellia)", ENCRYPT, sec, NULL, 0,
1965                                 speed_template_16_24_32);
1966                 test_cipher_speed("cbc(camellia)", DECRYPT, sec, NULL, 0,
1967                                 speed_template_16_24_32);
1968                 test_cipher_speed("ctr(camellia)", ENCRYPT, sec, NULL, 0,
1969                                 speed_template_16_24_32);
1970                 test_cipher_speed("ctr(camellia)", DECRYPT, sec, NULL, 0,
1971                                 speed_template_16_24_32);
1972                 test_cipher_speed("lrw(camellia)", ENCRYPT, sec, NULL, 0,
1973                                 speed_template_32_40_48);
1974                 test_cipher_speed("lrw(camellia)", DECRYPT, sec, NULL, 0,
1975                                 speed_template_32_40_48);
1976                 test_cipher_speed("xts(camellia)", ENCRYPT, sec, NULL, 0,
1977                                 speed_template_32_48_64);
1978                 test_cipher_speed("xts(camellia)", DECRYPT, sec, NULL, 0,
1979                                 speed_template_32_48_64);
1980                 break;
1981
1982         case 207:
1983                 test_cipher_speed("ecb(serpent)", ENCRYPT, sec, NULL, 0,
1984                                   speed_template_16_32);
1985                 test_cipher_speed("ecb(serpent)", DECRYPT, sec, NULL, 0,
1986                                   speed_template_16_32);
1987                 test_cipher_speed("cbc(serpent)", ENCRYPT, sec, NULL, 0,
1988                                   speed_template_16_32);
1989                 test_cipher_speed("cbc(serpent)", DECRYPT, sec, NULL, 0,
1990                                   speed_template_16_32);
1991                 test_cipher_speed("ctr(serpent)", ENCRYPT, sec, NULL, 0,
1992                                   speed_template_16_32);
1993                 test_cipher_speed("ctr(serpent)", DECRYPT, sec, NULL, 0,
1994                                   speed_template_16_32);
1995                 test_cipher_speed("lrw(serpent)", ENCRYPT, sec, NULL, 0,
1996                                   speed_template_32_48);
1997                 test_cipher_speed("lrw(serpent)", DECRYPT, sec, NULL, 0,
1998                                   speed_template_32_48);
1999                 test_cipher_speed("xts(serpent)", ENCRYPT, sec, NULL, 0,
2000                                   speed_template_32_64);
2001                 test_cipher_speed("xts(serpent)", DECRYPT, sec, NULL, 0,
2002                                   speed_template_32_64);
2003                 break;
2004
2005         case 208:
2006                 test_cipher_speed("ecb(arc4)", ENCRYPT, sec, NULL, 0,
2007                                   speed_template_8);
2008                 break;
2009
2010         case 209:
2011                 test_cipher_speed("ecb(cast5)", ENCRYPT, sec, NULL, 0,
2012                                   speed_template_8_16);
2013                 test_cipher_speed("ecb(cast5)", DECRYPT, sec, NULL, 0,
2014                                   speed_template_8_16);
2015                 test_cipher_speed("cbc(cast5)", ENCRYPT, sec, NULL, 0,
2016                                   speed_template_8_16);
2017                 test_cipher_speed("cbc(cast5)", DECRYPT, sec, NULL, 0,
2018                                   speed_template_8_16);
2019                 test_cipher_speed("ctr(cast5)", ENCRYPT, sec, NULL, 0,
2020                                   speed_template_8_16);
2021                 test_cipher_speed("ctr(cast5)", DECRYPT, sec, NULL, 0,
2022                                   speed_template_8_16);
2023                 break;
2024
2025         case 210:
2026                 test_cipher_speed("ecb(cast6)", ENCRYPT, sec, NULL, 0,
2027                                   speed_template_16_32);
2028                 test_cipher_speed("ecb(cast6)", DECRYPT, sec, NULL, 0,
2029                                   speed_template_16_32);
2030                 test_cipher_speed("cbc(cast6)", ENCRYPT, sec, NULL, 0,
2031                                   speed_template_16_32);
2032                 test_cipher_speed("cbc(cast6)", DECRYPT, sec, NULL, 0,
2033                                   speed_template_16_32);
2034                 test_cipher_speed("ctr(cast6)", ENCRYPT, sec, NULL, 0,
2035                                   speed_template_16_32);
2036                 test_cipher_speed("ctr(cast6)", DECRYPT, sec, NULL, 0,
2037                                   speed_template_16_32);
2038                 test_cipher_speed("lrw(cast6)", ENCRYPT, sec, NULL, 0,
2039                                   speed_template_32_48);
2040                 test_cipher_speed("lrw(cast6)", DECRYPT, sec, NULL, 0,
2041                                   speed_template_32_48);
2042                 test_cipher_speed("xts(cast6)", ENCRYPT, sec, NULL, 0,
2043                                   speed_template_32_64);
2044                 test_cipher_speed("xts(cast6)", DECRYPT, sec, NULL, 0,
2045                                   speed_template_32_64);
2046                 break;
2047
2048         case 211:
2049                 test_aead_speed("rfc4106(gcm(aes))", ENCRYPT, sec,
2050                                 NULL, 0, 16, 16, aead_speed_template_20_28_36);
2051                 test_aead_speed("gcm(aes)", ENCRYPT, sec,
2052                                 NULL, 0, 16, 8, speed_template_16_24_32);
2053                 test_aead_speed("rfc4106(gcm(aes))", DECRYPT, sec,
2054                                 NULL, 0, 16, 16, aead_speed_template_20_28_36);
2055                 test_aead_speed("gcm(aes)", DECRYPT, sec,
2056                                 NULL, 0, 16, 8, speed_template_16_24_32);
2057                 break;
2058
2059         case 212:
2060                 test_aead_speed("rfc4309(ccm(aes))", ENCRYPT, sec,
2061                                 NULL, 0, 16, 16, aead_speed_template_19);
2062                 test_aead_speed("rfc4309(ccm(aes))", DECRYPT, sec,
2063                                 NULL, 0, 16, 16, aead_speed_template_19);
2064                 break;
2065
2066         case 213:
2067                 test_aead_speed("rfc7539esp(chacha20,poly1305)", ENCRYPT, sec,
2068                                 NULL, 0, 16, 8, aead_speed_template_36);
2069                 test_aead_speed("rfc7539esp(chacha20,poly1305)", DECRYPT, sec,
2070                                 NULL, 0, 16, 8, aead_speed_template_36);
2071                 break;
2072
2073         case 214:
2074                 test_cipher_speed("chacha20", ENCRYPT, sec, NULL, 0,
2075                                   speed_template_32);
2076                 break;
2077
2078         case 215:
2079                 test_mb_aead_speed("rfc4106(gcm(aes))", ENCRYPT, sec, NULL,
2080                                    0, 16, 16, aead_speed_template_20_28_36, num_mb);
2081                 test_mb_aead_speed("gcm(aes)", ENCRYPT, sec, NULL, 0, 16, 8,
2082                                    speed_template_16_24_32, num_mb);
2083                 test_mb_aead_speed("rfc4106(gcm(aes))", DECRYPT, sec, NULL,
2084                                    0, 16, 16, aead_speed_template_20_28_36, num_mb);
2085                 test_mb_aead_speed("gcm(aes)", DECRYPT, sec, NULL, 0, 16, 8,
2086                                    speed_template_16_24_32, num_mb);
2087                 break;
2088
2089         case 216:
2090                 test_mb_aead_speed("rfc4309(ccm(aes))", ENCRYPT, sec, NULL, 0,
2091                                    16, 16, aead_speed_template_19, num_mb);
2092                 test_mb_aead_speed("rfc4309(ccm(aes))", DECRYPT, sec, NULL, 0,
2093                                    16, 16, aead_speed_template_19, num_mb);
2094                 break;
2095
2096         case 217:
2097                 test_mb_aead_speed("rfc7539esp(chacha20,poly1305)", ENCRYPT,
2098                                    sec, NULL, 0, 16, 8, aead_speed_template_36,
2099                                    num_mb);
2100                 test_mb_aead_speed("rfc7539esp(chacha20,poly1305)", DECRYPT,
2101                                    sec, NULL, 0, 16, 8, aead_speed_template_36,
2102                                    num_mb);
2103                 break;
2104
2105         case 218:
2106                 test_cipher_speed("ecb(sm4)", ENCRYPT, sec, NULL, 0,
2107                                 speed_template_16);
2108                 test_cipher_speed("ecb(sm4)", DECRYPT, sec, NULL, 0,
2109                                 speed_template_16);
2110                 test_cipher_speed("cbc(sm4)", ENCRYPT, sec, NULL, 0,
2111                                 speed_template_16);
2112                 test_cipher_speed("cbc(sm4)", DECRYPT, sec, NULL, 0,
2113                                 speed_template_16);
2114                 test_cipher_speed("cts(cbc(sm4))", ENCRYPT, sec, NULL, 0,
2115                                 speed_template_16);
2116                 test_cipher_speed("cts(cbc(sm4))", DECRYPT, sec, NULL, 0,
2117                                 speed_template_16);
2118                 test_cipher_speed("cfb(sm4)", ENCRYPT, sec, NULL, 0,
2119                                 speed_template_16);
2120                 test_cipher_speed("cfb(sm4)", DECRYPT, sec, NULL, 0,
2121                                 speed_template_16);
2122                 test_cipher_speed("ctr(sm4)", ENCRYPT, sec, NULL, 0,
2123                                 speed_template_16);
2124                 test_cipher_speed("ctr(sm4)", DECRYPT, sec, NULL, 0,
2125                                 speed_template_16);
2126                 test_cipher_speed("xts(sm4)", ENCRYPT, sec, NULL, 0,
2127                                 speed_template_32);
2128                 test_cipher_speed("xts(sm4)", DECRYPT, sec, NULL, 0,
2129                                 speed_template_32);
2130                 break;
2131
2132         case 219:
2133                 test_cipher_speed("adiantum(xchacha12,aes)", ENCRYPT, sec, NULL,
2134                                   0, speed_template_32);
2135                 test_cipher_speed("adiantum(xchacha12,aes)", DECRYPT, sec, NULL,
2136                                   0, speed_template_32);
2137                 test_cipher_speed("adiantum(xchacha20,aes)", ENCRYPT, sec, NULL,
2138                                   0, speed_template_32);
2139                 test_cipher_speed("adiantum(xchacha20,aes)", DECRYPT, sec, NULL,
2140                                   0, speed_template_32);
2141                 break;
2142
2143         case 220:
2144                 test_acipher_speed("essiv(cbc(aes),sha256)",
2145                                   ENCRYPT, sec, NULL, 0,
2146                                   speed_template_16_24_32);
2147                 test_acipher_speed("essiv(cbc(aes),sha256)",
2148                                   DECRYPT, sec, NULL, 0,
2149                                   speed_template_16_24_32);
2150                 break;
2151
2152         case 221:
2153                 test_aead_speed("aegis128", ENCRYPT, sec,
2154                                 NULL, 0, 16, 8, speed_template_16);
2155                 test_aead_speed("aegis128", DECRYPT, sec,
2156                                 NULL, 0, 16, 8, speed_template_16);
2157                 break;
2158
2159         case 222:
2160                 test_aead_speed("gcm(sm4)", ENCRYPT, sec,
2161                                 NULL, 0, 16, 8, speed_template_16);
2162                 test_aead_speed("gcm(sm4)", DECRYPT, sec,
2163                                 NULL, 0, 16, 8, speed_template_16);
2164                 break;
2165
2166         case 223:
2167                 test_aead_speed("rfc4309(ccm(sm4))", ENCRYPT, sec,
2168                                 NULL, 0, 16, 16, aead_speed_template_19);
2169                 test_aead_speed("rfc4309(ccm(sm4))", DECRYPT, sec,
2170                                 NULL, 0, 16, 16, aead_speed_template_19);
2171                 break;
2172
2173         case 224:
2174                 test_mb_aead_speed("gcm(sm4)", ENCRYPT, sec, NULL, 0, 16, 8,
2175                                    speed_template_16, num_mb);
2176                 test_mb_aead_speed("gcm(sm4)", DECRYPT, sec, NULL, 0, 16, 8,
2177                                    speed_template_16, num_mb);
2178                 break;
2179
2180         case 225:
2181                 test_mb_aead_speed("rfc4309(ccm(sm4))", ENCRYPT, sec, NULL, 0,
2182                                    16, 16, aead_speed_template_19, num_mb);
2183                 test_mb_aead_speed("rfc4309(ccm(sm4))", DECRYPT, sec, NULL, 0,
2184                                    16, 16, aead_speed_template_19, num_mb);
2185                 break;
2186
2187         case 226:
2188                 test_cipher_speed("hctr2(aes)", ENCRYPT, sec, NULL,
2189                                   0, speed_template_32);
2190                 break;
2191
2192         case 227:
2193                 test_cipher_speed("ecb(aria)", ENCRYPT, sec, NULL, 0,
2194                                   speed_template_16_24_32);
2195                 test_cipher_speed("ecb(aria)", DECRYPT, sec, NULL, 0,
2196                                   speed_template_16_24_32);
2197                 test_cipher_speed("cbc(aria)", ENCRYPT, sec, NULL, 0,
2198                                   speed_template_16_24_32);
2199                 test_cipher_speed("cbc(aria)", DECRYPT, sec, NULL, 0,
2200                                   speed_template_16_24_32);
2201                 test_cipher_speed("cfb(aria)", ENCRYPT, sec, NULL, 0,
2202                                   speed_template_16_24_32);
2203                 test_cipher_speed("cfb(aria)", DECRYPT, sec, NULL, 0,
2204                                   speed_template_16_24_32);
2205                 test_cipher_speed("ctr(aria)", ENCRYPT, sec, NULL, 0,
2206                                   speed_template_16_24_32);
2207                 test_cipher_speed("ctr(aria)", DECRYPT, sec, NULL, 0,
2208                                   speed_template_16_24_32);
2209                 break;
2210
2211         case 228:
2212                 test_aead_speed("gcm(aria)", ENCRYPT, sec,
2213                                 NULL, 0, 16, 8, speed_template_16_24_32);
2214                 test_aead_speed("gcm(aria)", DECRYPT, sec,
2215                                 NULL, 0, 16, 8, speed_template_16_24_32);
2216                 break;
2217
2218         case 229:
2219                 test_mb_aead_speed("gcm(aria)", ENCRYPT, sec, NULL, 0, 16, 8,
2220                                    speed_template_16, num_mb);
2221                 test_mb_aead_speed("gcm(aria)", DECRYPT, sec, NULL, 0, 16, 8,
2222                                    speed_template_16, num_mb);
2223                 break;
2224
2225         case 300:
2226                 if (alg) {
2227                         test_hash_speed(alg, sec, generic_hash_speed_template);
2228                         break;
2229                 }
2230                 fallthrough;
2231         case 301:
2232                 test_hash_speed("md4", sec, generic_hash_speed_template);
2233                 if (mode > 300 && mode < 400) break;
2234                 fallthrough;
2235         case 302:
2236                 test_hash_speed("md5", sec, generic_hash_speed_template);
2237                 if (mode > 300 && mode < 400) break;
2238                 fallthrough;
2239         case 303:
2240                 test_hash_speed("sha1", sec, generic_hash_speed_template);
2241                 if (mode > 300 && mode < 400) break;
2242                 fallthrough;
2243         case 304:
2244                 test_hash_speed("sha256", sec, generic_hash_speed_template);
2245                 if (mode > 300 && mode < 400) break;
2246                 fallthrough;
2247         case 305:
2248                 test_hash_speed("sha384", sec, generic_hash_speed_template);
2249                 if (mode > 300 && mode < 400) break;
2250                 fallthrough;
2251         case 306:
2252                 test_hash_speed("sha512", sec, generic_hash_speed_template);
2253                 if (mode > 300 && mode < 400) break;
2254                 fallthrough;
2255         case 307:
2256                 test_hash_speed("wp256", sec, generic_hash_speed_template);
2257                 if (mode > 300 && mode < 400) break;
2258                 fallthrough;
2259         case 308:
2260                 test_hash_speed("wp384", sec, generic_hash_speed_template);
2261                 if (mode > 300 && mode < 400) break;
2262                 fallthrough;
2263         case 309:
2264                 test_hash_speed("wp512", sec, generic_hash_speed_template);
2265                 if (mode > 300 && mode < 400) break;
2266                 fallthrough;
2267         case 313:
2268                 test_hash_speed("sha224", sec, generic_hash_speed_template);
2269                 if (mode > 300 && mode < 400) break;
2270                 fallthrough;
2271         case 314:
2272                 test_hash_speed("xxhash64", sec, generic_hash_speed_template);
2273                 if (mode > 300 && mode < 400) break;
2274                 fallthrough;
2275         case 315:
2276                 test_hash_speed("rmd160", sec, generic_hash_speed_template);
2277                 if (mode > 300 && mode < 400) break;
2278                 fallthrough;
2279         case 317:
2280                 test_hash_speed("blake2b-512", sec, generic_hash_speed_template);
2281                 if (mode > 300 && mode < 400) break;
2282                 fallthrough;
2283         case 318:
2284                 klen = 16;
2285                 test_hash_speed("ghash", sec, generic_hash_speed_template);
2286                 if (mode > 300 && mode < 400) break;
2287                 fallthrough;
2288         case 319:
2289                 test_hash_speed("crc32c", sec, generic_hash_speed_template);
2290                 if (mode > 300 && mode < 400) break;
2291                 fallthrough;
2292         case 320:
2293                 test_hash_speed("crct10dif", sec, generic_hash_speed_template);
2294                 if (mode > 300 && mode < 400) break;
2295                 fallthrough;
2296         case 321:
2297                 test_hash_speed("poly1305", sec, poly1305_speed_template);
2298                 if (mode > 300 && mode < 400) break;
2299                 fallthrough;
2300         case 322:
2301                 test_hash_speed("sha3-224", sec, generic_hash_speed_template);
2302                 if (mode > 300 && mode < 400) break;
2303                 fallthrough;
2304         case 323:
2305                 test_hash_speed("sha3-256", sec, generic_hash_speed_template);
2306                 if (mode > 300 && mode < 400) break;
2307                 fallthrough;
2308         case 324:
2309                 test_hash_speed("sha3-384", sec, generic_hash_speed_template);
2310                 if (mode > 300 && mode < 400) break;
2311                 fallthrough;
2312         case 325:
2313                 test_hash_speed("sha3-512", sec, generic_hash_speed_template);
2314                 if (mode > 300 && mode < 400) break;
2315                 fallthrough;
2316         case 326:
2317                 test_hash_speed("sm3", sec, generic_hash_speed_template);
2318                 if (mode > 300 && mode < 400) break;
2319                 fallthrough;
2320         case 327:
2321                 test_hash_speed("streebog256", sec,
2322                                 generic_hash_speed_template);
2323                 if (mode > 300 && mode < 400) break;
2324                 fallthrough;
2325         case 328:
2326                 test_hash_speed("streebog512", sec,
2327                                 generic_hash_speed_template);
2328                 if (mode > 300 && mode < 400) break;
2329                 fallthrough;
2330         case 399:
2331                 break;
2332
2333         case 400:
2334                 if (alg) {
2335                         test_ahash_speed(alg, sec, generic_hash_speed_template);
2336                         break;
2337                 }
2338                 fallthrough;
2339         case 401:
2340                 test_ahash_speed("md4", sec, generic_hash_speed_template);
2341                 if (mode > 400 && mode < 500) break;
2342                 fallthrough;
2343         case 402:
2344                 test_ahash_speed("md5", sec, generic_hash_speed_template);
2345                 if (mode > 400 && mode < 500) break;
2346                 fallthrough;
2347         case 403:
2348                 test_ahash_speed("sha1", sec, generic_hash_speed_template);
2349                 if (mode > 400 && mode < 500) break;
2350                 fallthrough;
2351         case 404:
2352                 test_ahash_speed("sha256", sec, generic_hash_speed_template);
2353                 if (mode > 400 && mode < 500) break;
2354                 fallthrough;
2355         case 405:
2356                 test_ahash_speed("sha384", sec, generic_hash_speed_template);
2357                 if (mode > 400 && mode < 500) break;
2358                 fallthrough;
2359         case 406:
2360                 test_ahash_speed("sha512", sec, generic_hash_speed_template);
2361                 if (mode > 400 && mode < 500) break;
2362                 fallthrough;
2363         case 407:
2364                 test_ahash_speed("wp256", sec, generic_hash_speed_template);
2365                 if (mode > 400 && mode < 500) break;
2366                 fallthrough;
2367         case 408:
2368                 test_ahash_speed("wp384", sec, generic_hash_speed_template);
2369                 if (mode > 400 && mode < 500) break;
2370                 fallthrough;
2371         case 409:
2372                 test_ahash_speed("wp512", sec, generic_hash_speed_template);
2373                 if (mode > 400 && mode < 500) break;
2374                 fallthrough;
2375         case 413:
2376                 test_ahash_speed("sha224", sec, generic_hash_speed_template);
2377                 if (mode > 400 && mode < 500) break;
2378                 fallthrough;
2379         case 414:
2380                 test_ahash_speed("xxhash64", sec, generic_hash_speed_template);
2381                 if (mode > 400 && mode < 500) break;
2382                 fallthrough;
2383         case 415:
2384                 test_ahash_speed("rmd160", sec, generic_hash_speed_template);
2385                 if (mode > 400 && mode < 500) break;
2386                 fallthrough;
2387         case 417:
2388                 test_ahash_speed("blake2b-512", sec, generic_hash_speed_template);
2389                 if (mode > 400 && mode < 500) break;
2390                 fallthrough;
2391         case 418:
2392                 test_ahash_speed("sha3-224", sec, generic_hash_speed_template);
2393                 if (mode > 400 && mode < 500) break;
2394                 fallthrough;
2395         case 419:
2396                 test_ahash_speed("sha3-256", sec, generic_hash_speed_template);
2397                 if (mode > 400 && mode < 500) break;
2398                 fallthrough;
2399         case 420:
2400                 test_ahash_speed("sha3-384", sec, generic_hash_speed_template);
2401                 if (mode > 400 && mode < 500) break;
2402                 fallthrough;
2403         case 421:
2404                 test_ahash_speed("sha3-512", sec, generic_hash_speed_template);
2405                 if (mode > 400 && mode < 500) break;
2406                 fallthrough;
2407         case 422:
2408                 test_ahash_speed("sm3", sec, generic_hash_speed_template);
2409                 if (mode > 400 && mode < 500) break;
2410                 fallthrough;
2411         case 499:
2412                 break;
2413
2414         case 500:
2415                 test_acipher_speed("ecb(aes)", ENCRYPT, sec, NULL, 0,
2416                                    speed_template_16_24_32);
2417                 test_acipher_speed("ecb(aes)", DECRYPT, sec, NULL, 0,
2418                                    speed_template_16_24_32);
2419                 test_acipher_speed("cbc(aes)", ENCRYPT, sec, NULL, 0,
2420                                    speed_template_16_24_32);
2421                 test_acipher_speed("cbc(aes)", DECRYPT, sec, NULL, 0,
2422                                    speed_template_16_24_32);
2423                 test_acipher_speed("lrw(aes)", ENCRYPT, sec, NULL, 0,
2424                                    speed_template_32_40_48);
2425                 test_acipher_speed("lrw(aes)", DECRYPT, sec, NULL, 0,
2426                                    speed_template_32_40_48);
2427                 test_acipher_speed("xts(aes)", ENCRYPT, sec, NULL, 0,
2428                                    speed_template_32_64);
2429                 test_acipher_speed("xts(aes)", DECRYPT, sec, NULL, 0,
2430                                    speed_template_32_64);
2431                 test_acipher_speed("cts(cbc(aes))", ENCRYPT, sec, NULL, 0,
2432                                    speed_template_16_24_32);
2433                 test_acipher_speed("cts(cbc(aes))", DECRYPT, sec, NULL, 0,
2434                                    speed_template_16_24_32);
2435                 test_acipher_speed("ctr(aes)", ENCRYPT, sec, NULL, 0,
2436                                    speed_template_16_24_32);
2437                 test_acipher_speed("ctr(aes)", DECRYPT, sec, NULL, 0,
2438                                    speed_template_16_24_32);
2439                 test_acipher_speed("cfb(aes)", ENCRYPT, sec, NULL, 0,
2440                                    speed_template_16_24_32);
2441                 test_acipher_speed("cfb(aes)", DECRYPT, sec, NULL, 0,
2442                                    speed_template_16_24_32);
2443                 test_acipher_speed("ofb(aes)", ENCRYPT, sec, NULL, 0,
2444                                    speed_template_16_24_32);
2445                 test_acipher_speed("ofb(aes)", DECRYPT, sec, NULL, 0,
2446                                    speed_template_16_24_32);
2447                 test_acipher_speed("rfc3686(ctr(aes))", ENCRYPT, sec, NULL, 0,
2448                                    speed_template_20_28_36);
2449                 test_acipher_speed("rfc3686(ctr(aes))", DECRYPT, sec, NULL, 0,
2450                                    speed_template_20_28_36);
2451                 break;
2452
2453         case 501:
2454                 test_acipher_speed("ecb(des3_ede)", ENCRYPT, sec,
2455                                    des3_speed_template, DES3_SPEED_VECTORS,
2456                                    speed_template_24);
2457                 test_acipher_speed("ecb(des3_ede)", DECRYPT, sec,
2458                                    des3_speed_template, DES3_SPEED_VECTORS,
2459                                    speed_template_24);
2460                 test_acipher_speed("cbc(des3_ede)", ENCRYPT, sec,
2461                                    des3_speed_template, DES3_SPEED_VECTORS,
2462                                    speed_template_24);
2463                 test_acipher_speed("cbc(des3_ede)", DECRYPT, sec,
2464                                    des3_speed_template, DES3_SPEED_VECTORS,
2465                                    speed_template_24);
2466                 test_acipher_speed("cfb(des3_ede)", ENCRYPT, sec,
2467                                    des3_speed_template, DES3_SPEED_VECTORS,
2468                                    speed_template_24);
2469                 test_acipher_speed("cfb(des3_ede)", DECRYPT, sec,
2470                                    des3_speed_template, DES3_SPEED_VECTORS,
2471                                    speed_template_24);
2472                 test_acipher_speed("ofb(des3_ede)", ENCRYPT, sec,
2473                                    des3_speed_template, DES3_SPEED_VECTORS,
2474                                    speed_template_24);
2475                 test_acipher_speed("ofb(des3_ede)", DECRYPT, sec,
2476                                    des3_speed_template, DES3_SPEED_VECTORS,
2477                                    speed_template_24);
2478                 break;
2479
2480         case 502:
2481                 test_acipher_speed("ecb(des)", ENCRYPT, sec, NULL, 0,
2482                                    speed_template_8);
2483                 test_acipher_speed("ecb(des)", DECRYPT, sec, NULL, 0,
2484                                    speed_template_8);
2485                 test_acipher_speed("cbc(des)", ENCRYPT, sec, NULL, 0,
2486                                    speed_template_8);
2487                 test_acipher_speed("cbc(des)", DECRYPT, sec, NULL, 0,
2488                                    speed_template_8);
2489                 test_acipher_speed("cfb(des)", ENCRYPT, sec, NULL, 0,
2490                                    speed_template_8);
2491                 test_acipher_speed("cfb(des)", DECRYPT, sec, NULL, 0,
2492                                    speed_template_8);
2493                 test_acipher_speed("ofb(des)", ENCRYPT, sec, NULL, 0,
2494                                    speed_template_8);
2495                 test_acipher_speed("ofb(des)", DECRYPT, sec, NULL, 0,
2496                                    speed_template_8);
2497                 break;
2498
2499         case 503:
2500                 test_acipher_speed("ecb(serpent)", ENCRYPT, sec, NULL, 0,
2501                                    speed_template_16_32);
2502                 test_acipher_speed("ecb(serpent)", DECRYPT, sec, NULL, 0,
2503                                    speed_template_16_32);
2504                 test_acipher_speed("cbc(serpent)", ENCRYPT, sec, NULL, 0,
2505                                    speed_template_16_32);
2506                 test_acipher_speed("cbc(serpent)", DECRYPT, sec, NULL, 0,
2507                                    speed_template_16_32);
2508                 test_acipher_speed("ctr(serpent)", ENCRYPT, sec, NULL, 0,
2509                                    speed_template_16_32);
2510                 test_acipher_speed("ctr(serpent)", DECRYPT, sec, NULL, 0,
2511                                    speed_template_16_32);
2512                 test_acipher_speed("lrw(serpent)", ENCRYPT, sec, NULL, 0,
2513                                    speed_template_32_48);
2514                 test_acipher_speed("lrw(serpent)", DECRYPT, sec, NULL, 0,
2515                                    speed_template_32_48);
2516                 test_acipher_speed("xts(serpent)", ENCRYPT, sec, NULL, 0,
2517                                    speed_template_32_64);
2518                 test_acipher_speed("xts(serpent)", DECRYPT, sec, NULL, 0,
2519                                    speed_template_32_64);
2520                 break;
2521
2522         case 504:
2523                 test_acipher_speed("ecb(twofish)", ENCRYPT, sec, NULL, 0,
2524                                    speed_template_16_24_32);
2525                 test_acipher_speed("ecb(twofish)", DECRYPT, sec, NULL, 0,
2526                                    speed_template_16_24_32);
2527                 test_acipher_speed("cbc(twofish)", ENCRYPT, sec, NULL, 0,
2528                                    speed_template_16_24_32);
2529                 test_acipher_speed("cbc(twofish)", DECRYPT, sec, NULL, 0,
2530                                    speed_template_16_24_32);
2531                 test_acipher_speed("ctr(twofish)", ENCRYPT, sec, NULL, 0,
2532                                    speed_template_16_24_32);
2533                 test_acipher_speed("ctr(twofish)", DECRYPT, sec, NULL, 0,
2534                                    speed_template_16_24_32);
2535                 test_acipher_speed("lrw(twofish)", ENCRYPT, sec, NULL, 0,
2536                                    speed_template_32_40_48);
2537                 test_acipher_speed("lrw(twofish)", DECRYPT, sec, NULL, 0,
2538                                    speed_template_32_40_48);
2539                 test_acipher_speed("xts(twofish)", ENCRYPT, sec, NULL, 0,
2540                                    speed_template_32_48_64);
2541                 test_acipher_speed("xts(twofish)", DECRYPT, sec, NULL, 0,
2542                                    speed_template_32_48_64);
2543                 break;
2544
2545         case 505:
2546                 test_acipher_speed("ecb(arc4)", ENCRYPT, sec, NULL, 0,
2547                                    speed_template_8);
2548                 break;
2549
2550         case 506:
2551                 test_acipher_speed("ecb(cast5)", ENCRYPT, sec, NULL, 0,
2552                                    speed_template_8_16);
2553                 test_acipher_speed("ecb(cast5)", DECRYPT, sec, NULL, 0,
2554                                    speed_template_8_16);
2555                 test_acipher_speed("cbc(cast5)", ENCRYPT, sec, NULL, 0,
2556                                    speed_template_8_16);
2557                 test_acipher_speed("cbc(cast5)", DECRYPT, sec, NULL, 0,
2558                                    speed_template_8_16);
2559                 test_acipher_speed("ctr(cast5)", ENCRYPT, sec, NULL, 0,
2560                                    speed_template_8_16);
2561                 test_acipher_speed("ctr(cast5)", DECRYPT, sec, NULL, 0,
2562                                    speed_template_8_16);
2563                 break;
2564
2565         case 507:
2566                 test_acipher_speed("ecb(cast6)", ENCRYPT, sec, NULL, 0,
2567                                    speed_template_16_32);
2568                 test_acipher_speed("ecb(cast6)", DECRYPT, sec, NULL, 0,
2569                                    speed_template_16_32);
2570                 test_acipher_speed("cbc(cast6)", ENCRYPT, sec, NULL, 0,
2571                                    speed_template_16_32);
2572                 test_acipher_speed("cbc(cast6)", DECRYPT, sec, NULL, 0,
2573                                    speed_template_16_32);
2574                 test_acipher_speed("ctr(cast6)", ENCRYPT, sec, NULL, 0,
2575                                    speed_template_16_32);
2576                 test_acipher_speed("ctr(cast6)", DECRYPT, sec, NULL, 0,
2577                                    speed_template_16_32);
2578                 test_acipher_speed("lrw(cast6)", ENCRYPT, sec, NULL, 0,
2579                                    speed_template_32_48);
2580                 test_acipher_speed("lrw(cast6)", DECRYPT, sec, NULL, 0,
2581                                    speed_template_32_48);
2582                 test_acipher_speed("xts(cast6)", ENCRYPT, sec, NULL, 0,
2583                                    speed_template_32_64);
2584                 test_acipher_speed("xts(cast6)", DECRYPT, sec, NULL, 0,
2585                                    speed_template_32_64);
2586                 break;
2587
2588         case 508:
2589                 test_acipher_speed("ecb(camellia)", ENCRYPT, sec, NULL, 0,
2590                                    speed_template_16_32);
2591                 test_acipher_speed("ecb(camellia)", DECRYPT, sec, NULL, 0,
2592                                    speed_template_16_32);
2593                 test_acipher_speed("cbc(camellia)", ENCRYPT, sec, NULL, 0,
2594                                    speed_template_16_32);
2595                 test_acipher_speed("cbc(camellia)", DECRYPT, sec, NULL, 0,
2596                                    speed_template_16_32);
2597                 test_acipher_speed("ctr(camellia)", ENCRYPT, sec, NULL, 0,
2598                                    speed_template_16_32);
2599                 test_acipher_speed("ctr(camellia)", DECRYPT, sec, NULL, 0,
2600                                    speed_template_16_32);
2601                 test_acipher_speed("lrw(camellia)", ENCRYPT, sec, NULL, 0,
2602                                    speed_template_32_48);
2603                 test_acipher_speed("lrw(camellia)", DECRYPT, sec, NULL, 0,
2604                                    speed_template_32_48);
2605                 test_acipher_speed("xts(camellia)", ENCRYPT, sec, NULL, 0,
2606                                    speed_template_32_64);
2607                 test_acipher_speed("xts(camellia)", DECRYPT, sec, NULL, 0,
2608                                    speed_template_32_64);
2609                 break;
2610
2611         case 509:
2612                 test_acipher_speed("ecb(blowfish)", ENCRYPT, sec, NULL, 0,
2613                                    speed_template_8_32);
2614                 test_acipher_speed("ecb(blowfish)", DECRYPT, sec, NULL, 0,
2615                                    speed_template_8_32);
2616                 test_acipher_speed("cbc(blowfish)", ENCRYPT, sec, NULL, 0,
2617                                    speed_template_8_32);
2618                 test_acipher_speed("cbc(blowfish)", DECRYPT, sec, NULL, 0,
2619                                    speed_template_8_32);
2620                 test_acipher_speed("ctr(blowfish)", ENCRYPT, sec, NULL, 0,
2621                                    speed_template_8_32);
2622                 test_acipher_speed("ctr(blowfish)", DECRYPT, sec, NULL, 0,
2623                                    speed_template_8_32);
2624                 break;
2625
2626         case 518:
2627                 test_acipher_speed("ecb(sm4)", ENCRYPT, sec, NULL, 0,
2628                                 speed_template_16);
2629                 test_acipher_speed("ecb(sm4)", DECRYPT, sec, NULL, 0,
2630                                 speed_template_16);
2631                 test_acipher_speed("cbc(sm4)", ENCRYPT, sec, NULL, 0,
2632                                 speed_template_16);
2633                 test_acipher_speed("cbc(sm4)", DECRYPT, sec, NULL, 0,
2634                                 speed_template_16);
2635                 test_acipher_speed("cfb(sm4)", ENCRYPT, sec, NULL, 0,
2636                                 speed_template_16);
2637                 test_acipher_speed("cfb(sm4)", DECRYPT, sec, NULL, 0,
2638                                 speed_template_16);
2639                 test_acipher_speed("ctr(sm4)", ENCRYPT, sec, NULL, 0,
2640                                 speed_template_16);
2641                 test_acipher_speed("ctr(sm4)", DECRYPT, sec, NULL, 0,
2642                                 speed_template_16);
2643                 test_acipher_speed("xts(sm4)", ENCRYPT, sec, NULL, 0,
2644                                 speed_template_32);
2645                 test_acipher_speed("xts(sm4)", DECRYPT, sec, NULL, 0,
2646                                 speed_template_32);
2647                 break;
2648
2649         case 519:
2650                 test_acipher_speed("ecb(aria)", ENCRYPT, sec, NULL, 0,
2651                                    speed_template_16_24_32);
2652                 test_acipher_speed("ecb(aria)", DECRYPT, sec, NULL, 0,
2653                                    speed_template_16_24_32);
2654                 test_acipher_speed("ctr(aria)", ENCRYPT, sec, NULL, 0,
2655                                    speed_template_16_24_32);
2656                 test_acipher_speed("ctr(aria)", DECRYPT, sec, NULL, 0,
2657                                    speed_template_16_24_32);
2658                 break;
2659
2660         case 600:
2661                 test_mb_skcipher_speed("ecb(aes)", ENCRYPT, sec, NULL, 0,
2662                                        speed_template_16_24_32, num_mb);
2663                 test_mb_skcipher_speed("ecb(aes)", DECRYPT, sec, NULL, 0,
2664                                        speed_template_16_24_32, num_mb);
2665                 test_mb_skcipher_speed("cbc(aes)", ENCRYPT, sec, NULL, 0,
2666                                        speed_template_16_24_32, num_mb);
2667                 test_mb_skcipher_speed("cbc(aes)", DECRYPT, sec, NULL, 0,
2668                                        speed_template_16_24_32, num_mb);
2669                 test_mb_skcipher_speed("lrw(aes)", ENCRYPT, sec, NULL, 0,
2670                                        speed_template_32_40_48, num_mb);
2671                 test_mb_skcipher_speed("lrw(aes)", DECRYPT, sec, NULL, 0,
2672                                        speed_template_32_40_48, num_mb);
2673                 test_mb_skcipher_speed("xts(aes)", ENCRYPT, sec, NULL, 0,
2674                                        speed_template_32_64, num_mb);
2675                 test_mb_skcipher_speed("xts(aes)", DECRYPT, sec, NULL, 0,
2676                                        speed_template_32_64, num_mb);
2677                 test_mb_skcipher_speed("cts(cbc(aes))", ENCRYPT, sec, NULL, 0,
2678                                        speed_template_16_24_32, num_mb);
2679                 test_mb_skcipher_speed("cts(cbc(aes))", DECRYPT, sec, NULL, 0,
2680                                        speed_template_16_24_32, num_mb);
2681                 test_mb_skcipher_speed("ctr(aes)", ENCRYPT, sec, NULL, 0,
2682                                        speed_template_16_24_32, num_mb);
2683                 test_mb_skcipher_speed("ctr(aes)", DECRYPT, sec, NULL, 0,
2684                                        speed_template_16_24_32, num_mb);
2685                 test_mb_skcipher_speed("cfb(aes)", ENCRYPT, sec, NULL, 0,
2686                                        speed_template_16_24_32, num_mb);
2687                 test_mb_skcipher_speed("cfb(aes)", DECRYPT, sec, NULL, 0,
2688                                        speed_template_16_24_32, num_mb);
2689                 test_mb_skcipher_speed("ofb(aes)", ENCRYPT, sec, NULL, 0,
2690                                        speed_template_16_24_32, num_mb);
2691                 test_mb_skcipher_speed("ofb(aes)", DECRYPT, sec, NULL, 0,
2692                                        speed_template_16_24_32, num_mb);
2693                 test_mb_skcipher_speed("rfc3686(ctr(aes))", ENCRYPT, sec, NULL,
2694                                        0, speed_template_20_28_36, num_mb);
2695                 test_mb_skcipher_speed("rfc3686(ctr(aes))", DECRYPT, sec, NULL,
2696                                        0, speed_template_20_28_36, num_mb);
2697                 break;
2698
2699         case 601:
2700                 test_mb_skcipher_speed("ecb(des3_ede)", ENCRYPT, sec,
2701                                        des3_speed_template, DES3_SPEED_VECTORS,
2702                                        speed_template_24, num_mb);
2703                 test_mb_skcipher_speed("ecb(des3_ede)", DECRYPT, sec,
2704                                        des3_speed_template, DES3_SPEED_VECTORS,
2705                                        speed_template_24, num_mb);
2706                 test_mb_skcipher_speed("cbc(des3_ede)", ENCRYPT, sec,
2707                                        des3_speed_template, DES3_SPEED_VECTORS,
2708                                        speed_template_24, num_mb);
2709                 test_mb_skcipher_speed("cbc(des3_ede)", DECRYPT, sec,
2710                                        des3_speed_template, DES3_SPEED_VECTORS,
2711                                        speed_template_24, num_mb);
2712                 test_mb_skcipher_speed("cfb(des3_ede)", ENCRYPT, sec,
2713                                        des3_speed_template, DES3_SPEED_VECTORS,
2714                                        speed_template_24, num_mb);
2715                 test_mb_skcipher_speed("cfb(des3_ede)", DECRYPT, sec,
2716                                        des3_speed_template, DES3_SPEED_VECTORS,
2717                                        speed_template_24, num_mb);
2718                 test_mb_skcipher_speed("ofb(des3_ede)", ENCRYPT, sec,
2719                                        des3_speed_template, DES3_SPEED_VECTORS,
2720                                        speed_template_24, num_mb);
2721                 test_mb_skcipher_speed("ofb(des3_ede)", DECRYPT, sec,
2722                                        des3_speed_template, DES3_SPEED_VECTORS,
2723                                        speed_template_24, num_mb);
2724                 break;
2725
2726         case 602:
2727                 test_mb_skcipher_speed("ecb(des)", ENCRYPT, sec, NULL, 0,
2728                                        speed_template_8, num_mb);
2729                 test_mb_skcipher_speed("ecb(des)", DECRYPT, sec, NULL, 0,
2730                                        speed_template_8, num_mb);
2731                 test_mb_skcipher_speed("cbc(des)", ENCRYPT, sec, NULL, 0,
2732                                        speed_template_8, num_mb);
2733                 test_mb_skcipher_speed("cbc(des)", DECRYPT, sec, NULL, 0,
2734                                        speed_template_8, num_mb);
2735                 test_mb_skcipher_speed("cfb(des)", ENCRYPT, sec, NULL, 0,
2736                                        speed_template_8, num_mb);
2737                 test_mb_skcipher_speed("cfb(des)", DECRYPT, sec, NULL, 0,
2738                                        speed_template_8, num_mb);
2739                 test_mb_skcipher_speed("ofb(des)", ENCRYPT, sec, NULL, 0,
2740                                        speed_template_8, num_mb);
2741                 test_mb_skcipher_speed("ofb(des)", DECRYPT, sec, NULL, 0,
2742                                        speed_template_8, num_mb);
2743                 break;
2744
2745         case 603:
2746                 test_mb_skcipher_speed("ecb(serpent)", ENCRYPT, sec, NULL, 0,
2747                                        speed_template_16_32, num_mb);
2748                 test_mb_skcipher_speed("ecb(serpent)", DECRYPT, sec, NULL, 0,
2749                                        speed_template_16_32, num_mb);
2750                 test_mb_skcipher_speed("cbc(serpent)", ENCRYPT, sec, NULL, 0,
2751                                        speed_template_16_32, num_mb);
2752                 test_mb_skcipher_speed("cbc(serpent)", DECRYPT, sec, NULL, 0,
2753                                        speed_template_16_32, num_mb);
2754                 test_mb_skcipher_speed("ctr(serpent)", ENCRYPT, sec, NULL, 0,
2755                                        speed_template_16_32, num_mb);
2756                 test_mb_skcipher_speed("ctr(serpent)", DECRYPT, sec, NULL, 0,
2757                                        speed_template_16_32, num_mb);
2758                 test_mb_skcipher_speed("lrw(serpent)", ENCRYPT, sec, NULL, 0,
2759                                        speed_template_32_48, num_mb);
2760                 test_mb_skcipher_speed("lrw(serpent)", DECRYPT, sec, NULL, 0,
2761                                        speed_template_32_48, num_mb);
2762                 test_mb_skcipher_speed("xts(serpent)", ENCRYPT, sec, NULL, 0,
2763                                        speed_template_32_64, num_mb);
2764                 test_mb_skcipher_speed("xts(serpent)", DECRYPT, sec, NULL, 0,
2765                                        speed_template_32_64, num_mb);
2766                 break;
2767
2768         case 604:
2769                 test_mb_skcipher_speed("ecb(twofish)", ENCRYPT, sec, NULL, 0,
2770                                        speed_template_16_24_32, num_mb);
2771                 test_mb_skcipher_speed("ecb(twofish)", DECRYPT, sec, NULL, 0,
2772                                        speed_template_16_24_32, num_mb);
2773                 test_mb_skcipher_speed("cbc(twofish)", ENCRYPT, sec, NULL, 0,
2774                                        speed_template_16_24_32, num_mb);
2775                 test_mb_skcipher_speed("cbc(twofish)", DECRYPT, sec, NULL, 0,
2776                                        speed_template_16_24_32, num_mb);
2777                 test_mb_skcipher_speed("ctr(twofish)", ENCRYPT, sec, NULL, 0,
2778                                        speed_template_16_24_32, num_mb);
2779                 test_mb_skcipher_speed("ctr(twofish)", DECRYPT, sec, NULL, 0,
2780                                        speed_template_16_24_32, num_mb);
2781                 test_mb_skcipher_speed("lrw(twofish)", ENCRYPT, sec, NULL, 0,
2782                                        speed_template_32_40_48, num_mb);
2783                 test_mb_skcipher_speed("lrw(twofish)", DECRYPT, sec, NULL, 0,
2784                                        speed_template_32_40_48, num_mb);
2785                 test_mb_skcipher_speed("xts(twofish)", ENCRYPT, sec, NULL, 0,
2786                                        speed_template_32_48_64, num_mb);
2787                 test_mb_skcipher_speed("xts(twofish)", DECRYPT, sec, NULL, 0,
2788                                        speed_template_32_48_64, num_mb);
2789                 break;
2790
2791         case 605:
2792                 test_mb_skcipher_speed("ecb(arc4)", ENCRYPT, sec, NULL, 0,
2793                                        speed_template_8, num_mb);
2794                 break;
2795
2796         case 606:
2797                 test_mb_skcipher_speed("ecb(cast5)", ENCRYPT, sec, NULL, 0,
2798                                        speed_template_8_16, num_mb);
2799                 test_mb_skcipher_speed("ecb(cast5)", DECRYPT, sec, NULL, 0,
2800                                        speed_template_8_16, num_mb);
2801                 test_mb_skcipher_speed("cbc(cast5)", ENCRYPT, sec, NULL, 0,
2802                                        speed_template_8_16, num_mb);
2803                 test_mb_skcipher_speed("cbc(cast5)", DECRYPT, sec, NULL, 0,
2804                                        speed_template_8_16, num_mb);
2805                 test_mb_skcipher_speed("ctr(cast5)", ENCRYPT, sec, NULL, 0,
2806                                        speed_template_8_16, num_mb);
2807                 test_mb_skcipher_speed("ctr(cast5)", DECRYPT, sec, NULL, 0,
2808                                        speed_template_8_16, num_mb);
2809                 break;
2810
2811         case 607:
2812                 test_mb_skcipher_speed("ecb(cast6)", ENCRYPT, sec, NULL, 0,
2813                                        speed_template_16_32, num_mb);
2814                 test_mb_skcipher_speed("ecb(cast6)", DECRYPT, sec, NULL, 0,
2815                                        speed_template_16_32, num_mb);
2816                 test_mb_skcipher_speed("cbc(cast6)", ENCRYPT, sec, NULL, 0,
2817                                        speed_template_16_32, num_mb);
2818                 test_mb_skcipher_speed("cbc(cast6)", DECRYPT, sec, NULL, 0,
2819                                        speed_template_16_32, num_mb);
2820                 test_mb_skcipher_speed("ctr(cast6)", ENCRYPT, sec, NULL, 0,
2821                                        speed_template_16_32, num_mb);
2822                 test_mb_skcipher_speed("ctr(cast6)", DECRYPT, sec, NULL, 0,
2823                                        speed_template_16_32, num_mb);
2824                 test_mb_skcipher_speed("lrw(cast6)", ENCRYPT, sec, NULL, 0,
2825                                        speed_template_32_48, num_mb);
2826                 test_mb_skcipher_speed("lrw(cast6)", DECRYPT, sec, NULL, 0,
2827                                        speed_template_32_48, num_mb);
2828                 test_mb_skcipher_speed("xts(cast6)", ENCRYPT, sec, NULL, 0,
2829                                        speed_template_32_64, num_mb);
2830                 test_mb_skcipher_speed("xts(cast6)", DECRYPT, sec, NULL, 0,
2831                                        speed_template_32_64, num_mb);
2832                 break;
2833
2834         case 608:
2835                 test_mb_skcipher_speed("ecb(camellia)", ENCRYPT, sec, NULL, 0,
2836                                        speed_template_16_32, num_mb);
2837                 test_mb_skcipher_speed("ecb(camellia)", DECRYPT, sec, NULL, 0,
2838                                        speed_template_16_32, num_mb);
2839                 test_mb_skcipher_speed("cbc(camellia)", ENCRYPT, sec, NULL, 0,
2840                                        speed_template_16_32, num_mb);
2841                 test_mb_skcipher_speed("cbc(camellia)", DECRYPT, sec, NULL, 0,
2842                                        speed_template_16_32, num_mb);
2843                 test_mb_skcipher_speed("ctr(camellia)", ENCRYPT, sec, NULL, 0,
2844                                        speed_template_16_32, num_mb);
2845                 test_mb_skcipher_speed("ctr(camellia)", DECRYPT, sec, NULL, 0,
2846                                        speed_template_16_32, num_mb);
2847                 test_mb_skcipher_speed("lrw(camellia)", ENCRYPT, sec, NULL, 0,
2848                                        speed_template_32_48, num_mb);
2849                 test_mb_skcipher_speed("lrw(camellia)", DECRYPT, sec, NULL, 0,
2850                                        speed_template_32_48, num_mb);
2851                 test_mb_skcipher_speed("xts(camellia)", ENCRYPT, sec, NULL, 0,
2852                                        speed_template_32_64, num_mb);
2853                 test_mb_skcipher_speed("xts(camellia)", DECRYPT, sec, NULL, 0,
2854                                        speed_template_32_64, num_mb);
2855                 break;
2856
2857         case 609:
2858                 test_mb_skcipher_speed("ecb(blowfish)", ENCRYPT, sec, NULL, 0,
2859                                        speed_template_8_32, num_mb);
2860                 test_mb_skcipher_speed("ecb(blowfish)", DECRYPT, sec, NULL, 0,
2861                                        speed_template_8_32, num_mb);
2862                 test_mb_skcipher_speed("cbc(blowfish)", ENCRYPT, sec, NULL, 0,
2863                                        speed_template_8_32, num_mb);
2864                 test_mb_skcipher_speed("cbc(blowfish)", DECRYPT, sec, NULL, 0,
2865                                        speed_template_8_32, num_mb);
2866                 test_mb_skcipher_speed("ctr(blowfish)", ENCRYPT, sec, NULL, 0,
2867                                        speed_template_8_32, num_mb);
2868                 test_mb_skcipher_speed("ctr(blowfish)", DECRYPT, sec, NULL, 0,
2869                                        speed_template_8_32, num_mb);
2870                 break;
2871
2872         case 610:
2873                 test_mb_skcipher_speed("ecb(aria)", ENCRYPT, sec, NULL, 0,
2874                                        speed_template_16_32, num_mb);
2875                 test_mb_skcipher_speed("ecb(aria)", DECRYPT, sec, NULL, 0,
2876                                        speed_template_16_32, num_mb);
2877                 test_mb_skcipher_speed("ctr(aria)", ENCRYPT, sec, NULL, 0,
2878                                        speed_template_16_32, num_mb);
2879                 test_mb_skcipher_speed("ctr(aria)", DECRYPT, sec, NULL, 0,
2880                                        speed_template_16_32, num_mb);
2881                 break;
2882
2883         }
2884
2885         return ret;
2886 }
2887
2888 static int __init tcrypt_mod_init(void)
2889 {
2890         int err = -ENOMEM;
2891         int i;
2892
2893         for (i = 0; i < TVMEMSIZE; i++) {
2894                 tvmem[i] = (void *)__get_free_page(GFP_KERNEL);
2895                 if (!tvmem[i])
2896                         goto err_free_tv;
2897         }
2898
2899         err = do_test(alg, type, mask, mode, num_mb);
2900
2901         if (err) {
2902                 pr_err("one or more tests failed!\n");
2903                 goto err_free_tv;
2904         } else {
2905                 pr_debug("all tests passed\n");
2906         }
2907
2908         /* We intentionaly return -EAGAIN to prevent keeping the module,
2909          * unless we're running in fips mode. It does all its work from
2910          * init() and doesn't offer any runtime functionality, but in
2911          * the fips case, checking for a successful load is helpful.
2912          * => we don't need it in the memory, do we?
2913          *                                        -- mludvig
2914          */
2915         if (!fips_enabled)
2916                 err = -EAGAIN;
2917
2918 err_free_tv:
2919         for (i = 0; i < TVMEMSIZE && tvmem[i]; i++)
2920                 free_page((unsigned long)tvmem[i]);
2921
2922         return err;
2923 }
2924
2925 /*
2926  * If an init function is provided, an exit function must also be provided
2927  * to allow module unload.
2928  */
2929 static void __exit tcrypt_mod_fini(void) { }
2930
2931 late_initcall(tcrypt_mod_init);
2932 module_exit(tcrypt_mod_fini);
2933
2934 module_param(alg, charp, 0);
2935 module_param(type, uint, 0);
2936 module_param(mask, uint, 0);
2937 module_param(mode, int, 0);
2938 module_param(sec, uint, 0);
2939 MODULE_PARM_DESC(sec, "Length in seconds of speed tests "
2940                       "(defaults to zero which uses CPU cycles instead)");
2941 module_param(num_mb, uint, 0000);
2942 MODULE_PARM_DESC(num_mb, "Number of concurrent requests to be used in mb speed tests (defaults to 8)");
2943 module_param(klen, uint, 0);
2944 MODULE_PARM_DESC(klen, "Key length (defaults to 0)");
2945
2946 MODULE_LICENSE("GPL");
2947 MODULE_DESCRIPTION("Quick & dirty crypto testing module");
2948 MODULE_AUTHOR("James Morris <jmorris@intercode.com.au>");