2 * Quick & dirty crypto testing module.
4 * This will only exist until we have a better testing mechanism
5 * (e.g. a char device).
7 * Copyright (c) 2002 James Morris <jmorris@intercode.com.au>
8 * Copyright (c) 2002 Jean-Francois Dive <jef@linuxbe.org>
9 * Copyright (c) 2007 Nokia Siemens Networks
11 * Updated RFC4106 AES-GCM testing.
12 * Authors: Aidan O'Mahony (aidan.o.mahony@intel.com)
13 * Adrian Hoban <adrian.hoban@intel.com>
14 * Gabriele Paoloni <gabriele.paoloni@intel.com>
15 * Tadeusz Struk (tadeusz.struk@intel.com)
16 * Copyright (c) 2010, Intel Corporation.
18 * This program is free software; you can redistribute it and/or modify it
19 * under the terms of the GNU General Public License as published by the Free
20 * Software Foundation; either version 2 of the License, or (at your option)
25 #include <crypto/hash.h>
26 #include <linux/err.h>
27 #include <linux/init.h>
28 #include <linux/gfp.h>
29 #include <linux/module.h>
30 #include <linux/scatterlist.h>
31 #include <linux/string.h>
32 #include <linux/moduleparam.h>
33 #include <linux/jiffies.h>
34 #include <linux/timex.h>
35 #include <linux/interrupt.h>
40 * Need slab memory for testing (size in number of pages).
45 * Used by test_cipher_speed()
51 * Used by test_cipher_speed()
53 static unsigned int sec;
55 static char *alg = NULL;
59 static char *tvmem[TVMEMSIZE];
61 static char *check[] = {
62 "des", "md5", "des3_ede", "rot13", "sha1", "sha224", "sha256",
63 "blowfish", "twofish", "serpent", "sha384", "sha512", "md4", "aes",
64 "cast6", "arc4", "michael_mic", "deflate", "crc32c", "tea", "xtea",
65 "khazad", "wp512", "wp384", "wp256", "tnepres", "xeta", "fcrypt",
66 "camellia", "seed", "salsa20", "rmd128", "rmd160", "rmd256", "rmd320",
67 "lzo", "cts", "zlib", NULL
70 static int test_cipher_jiffies(struct blkcipher_desc *desc, int enc,
71 struct scatterlist *sg, int blen, int sec)
73 unsigned long start, end;
77 for (start = jiffies, end = start + sec * HZ, bcount = 0;
78 time_before(jiffies, end); bcount++) {
80 ret = crypto_blkcipher_encrypt(desc, sg, sg, blen);
82 ret = crypto_blkcipher_decrypt(desc, sg, sg, blen);
88 printk("%d operations in %d seconds (%ld bytes)\n",
89 bcount, sec, (long)bcount * blen);
93 static int test_cipher_cycles(struct blkcipher_desc *desc, int enc,
94 struct scatterlist *sg, int blen)
96 unsigned long cycles = 0;
104 for (i = 0; i < 4; i++) {
106 ret = crypto_blkcipher_encrypt(desc, sg, sg, blen);
108 ret = crypto_blkcipher_decrypt(desc, sg, sg, blen);
114 /* The real thing. */
115 for (i = 0; i < 8; i++) {
118 start = get_cycles();
120 ret = crypto_blkcipher_encrypt(desc, sg, sg, blen);
122 ret = crypto_blkcipher_decrypt(desc, sg, sg, blen);
128 cycles += end - start;
136 printk("1 operation in %lu cycles (%d bytes)\n",
137 (cycles + 4) / 8, blen);
142 static u32 block_sizes[] = { 16, 64, 256, 1024, 8192, 0 };
144 static void test_cipher_speed(const char *algo, int enc, unsigned int sec,
145 struct cipher_speed_template *template,
146 unsigned int tcount, u8 *keysize)
148 unsigned int ret, i, j, iv_len;
151 struct crypto_blkcipher *tfm;
152 struct blkcipher_desc desc;
161 printk("\ntesting speed of %s %s\n", algo, e);
163 tfm = crypto_alloc_blkcipher(algo, 0, CRYPTO_ALG_ASYNC);
166 printk("failed to load transform for %s: %ld\n", algo,
176 b_size = block_sizes;
178 struct scatterlist sg[TVMEMSIZE];
180 if ((*keysize + *b_size) > TVMEMSIZE * PAGE_SIZE) {
181 printk("template (%u) too big for "
182 "tvmem (%lu)\n", *keysize + *b_size,
183 TVMEMSIZE * PAGE_SIZE);
187 printk("test %u (%d bit key, %d byte blocks): ", i,
188 *keysize * 8, *b_size);
190 memset(tvmem[0], 0xff, PAGE_SIZE);
192 /* set key, plain text and IV */
194 for (j = 0; j < tcount; j++) {
195 if (template[j].klen == *keysize) {
196 key = template[j].key;
201 ret = crypto_blkcipher_setkey(tfm, key, *keysize);
203 printk("setkey() failed flags=%x\n",
204 crypto_blkcipher_get_flags(tfm));
208 sg_init_table(sg, TVMEMSIZE);
209 sg_set_buf(sg, tvmem[0] + *keysize,
210 PAGE_SIZE - *keysize);
211 for (j = 1; j < TVMEMSIZE; j++) {
212 sg_set_buf(sg + j, tvmem[j], PAGE_SIZE);
213 memset (tvmem[j], 0xff, PAGE_SIZE);
216 iv_len = crypto_blkcipher_ivsize(tfm);
218 memset(&iv, 0xff, iv_len);
219 crypto_blkcipher_set_iv(tfm, iv, iv_len);
223 ret = test_cipher_jiffies(&desc, enc, sg,
226 ret = test_cipher_cycles(&desc, enc, sg,
230 printk("%s() failed flags=%x\n", e, desc.flags);
240 crypto_free_blkcipher(tfm);
243 static int test_hash_jiffies_digest(struct hash_desc *desc,
244 struct scatterlist *sg, int blen,
247 unsigned long start, end;
251 for (start = jiffies, end = start + sec * HZ, bcount = 0;
252 time_before(jiffies, end); bcount++) {
253 ret = crypto_hash_digest(desc, sg, blen, out);
258 printk("%6u opers/sec, %9lu bytes/sec\n",
259 bcount / sec, ((long)bcount * blen) / sec);
264 static int test_hash_jiffies(struct hash_desc *desc, struct scatterlist *sg,
265 int blen, int plen, char *out, int sec)
267 unsigned long start, end;
272 return test_hash_jiffies_digest(desc, sg, blen, out, sec);
274 for (start = jiffies, end = start + sec * HZ, bcount = 0;
275 time_before(jiffies, end); bcount++) {
276 ret = crypto_hash_init(desc);
279 for (pcount = 0; pcount < blen; pcount += plen) {
280 ret = crypto_hash_update(desc, sg, plen);
284 /* we assume there is enough space in 'out' for the result */
285 ret = crypto_hash_final(desc, out);
290 printk("%6u opers/sec, %9lu bytes/sec\n",
291 bcount / sec, ((long)bcount * blen) / sec);
296 static int test_hash_cycles_digest(struct hash_desc *desc,
297 struct scatterlist *sg, int blen, char *out)
299 unsigned long cycles = 0;
307 for (i = 0; i < 4; i++) {
308 ret = crypto_hash_digest(desc, sg, blen, out);
313 /* The real thing. */
314 for (i = 0; i < 8; i++) {
317 start = get_cycles();
319 ret = crypto_hash_digest(desc, sg, blen, out);
325 cycles += end - start;
335 printk("%6lu cycles/operation, %4lu cycles/byte\n",
336 cycles / 8, cycles / (8 * blen));
341 static int test_hash_cycles(struct hash_desc *desc, struct scatterlist *sg,
342 int blen, int plen, char *out)
344 unsigned long cycles = 0;
349 return test_hash_cycles_digest(desc, sg, blen, out);
355 for (i = 0; i < 4; i++) {
356 ret = crypto_hash_init(desc);
359 for (pcount = 0; pcount < blen; pcount += plen) {
360 ret = crypto_hash_update(desc, sg, plen);
364 ret = crypto_hash_final(desc, out);
369 /* The real thing. */
370 for (i = 0; i < 8; i++) {
373 start = get_cycles();
375 ret = crypto_hash_init(desc);
378 for (pcount = 0; pcount < blen; pcount += plen) {
379 ret = crypto_hash_update(desc, sg, plen);
383 ret = crypto_hash_final(desc, out);
389 cycles += end - start;
399 printk("%6lu cycles/operation, %4lu cycles/byte\n",
400 cycles / 8, cycles / (8 * blen));
405 static void test_hash_sg_init(struct scatterlist *sg)
409 sg_init_table(sg, TVMEMSIZE);
410 for (i = 0; i < TVMEMSIZE; i++) {
411 sg_set_buf(sg + i, tvmem[i], PAGE_SIZE);
412 memset(tvmem[i], 0xff, PAGE_SIZE);
416 static void test_hash_speed(const char *algo, unsigned int sec,
417 struct hash_speed *speed)
419 struct scatterlist sg[TVMEMSIZE];
420 struct crypto_hash *tfm;
421 struct hash_desc desc;
422 static char output[1024];
426 printk(KERN_INFO "\ntesting speed of %s\n", algo);
428 tfm = crypto_alloc_hash(algo, 0, CRYPTO_ALG_ASYNC);
431 printk(KERN_ERR "failed to load transform for %s: %ld\n", algo,
439 if (crypto_hash_digestsize(tfm) > sizeof(output)) {
440 printk(KERN_ERR "digestsize(%u) > outputbuffer(%zu)\n",
441 crypto_hash_digestsize(tfm), sizeof(output));
445 test_hash_sg_init(sg);
446 for (i = 0; speed[i].blen != 0; i++) {
447 if (speed[i].blen > TVMEMSIZE * PAGE_SIZE) {
449 "template (%u) too big for tvmem (%lu)\n",
450 speed[i].blen, TVMEMSIZE * PAGE_SIZE);
455 crypto_hash_setkey(tfm, tvmem[0], speed[i].klen);
457 printk(KERN_INFO "test%3u "
458 "(%5u byte blocks,%5u bytes per update,%4u updates): ",
459 i, speed[i].blen, speed[i].plen, speed[i].blen / speed[i].plen);
462 ret = test_hash_jiffies(&desc, sg, speed[i].blen,
463 speed[i].plen, output, sec);
465 ret = test_hash_cycles(&desc, sg, speed[i].blen,
466 speed[i].plen, output);
469 printk(KERN_ERR "hashing failed ret=%d\n", ret);
475 crypto_free_hash(tfm);
478 struct tcrypt_result {
479 struct completion completion;
483 static void tcrypt_complete(struct crypto_async_request *req, int err)
485 struct tcrypt_result *res = req->data;
487 if (err == -EINPROGRESS)
491 complete(&res->completion);
494 static inline int do_one_ahash_op(struct ahash_request *req, int ret)
496 if (ret == -EINPROGRESS || ret == -EBUSY) {
497 struct tcrypt_result *tr = req->base.data;
499 ret = wait_for_completion_interruptible(&tr->completion);
502 INIT_COMPLETION(tr->completion);
507 static int test_ahash_jiffies_digest(struct ahash_request *req, int blen,
510 unsigned long start, end;
514 for (start = jiffies, end = start + sec * HZ, bcount = 0;
515 time_before(jiffies, end); bcount++) {
516 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
521 printk("%6u opers/sec, %9lu bytes/sec\n",
522 bcount / sec, ((long)bcount * blen) / sec);
527 static int test_ahash_jiffies(struct ahash_request *req, int blen,
528 int plen, char *out, int sec)
530 unsigned long start, end;
535 return test_ahash_jiffies_digest(req, blen, out, sec);
537 for (start = jiffies, end = start + sec * HZ, bcount = 0;
538 time_before(jiffies, end); bcount++) {
539 ret = crypto_ahash_init(req);
542 for (pcount = 0; pcount < blen; pcount += plen) {
543 ret = do_one_ahash_op(req, crypto_ahash_update(req));
547 /* we assume there is enough space in 'out' for the result */
548 ret = do_one_ahash_op(req, crypto_ahash_final(req));
553 pr_cont("%6u opers/sec, %9lu bytes/sec\n",
554 bcount / sec, ((long)bcount * blen) / sec);
559 static int test_ahash_cycles_digest(struct ahash_request *req, int blen,
562 unsigned long cycles = 0;
566 for (i = 0; i < 4; i++) {
567 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
572 /* The real thing. */
573 for (i = 0; i < 8; i++) {
576 start = get_cycles();
578 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
584 cycles += end - start;
591 pr_cont("%6lu cycles/operation, %4lu cycles/byte\n",
592 cycles / 8, cycles / (8 * blen));
597 static int test_ahash_cycles(struct ahash_request *req, int blen,
600 unsigned long cycles = 0;
604 return test_ahash_cycles_digest(req, blen, out);
607 for (i = 0; i < 4; i++) {
608 ret = crypto_ahash_init(req);
611 for (pcount = 0; pcount < blen; pcount += plen) {
612 ret = do_one_ahash_op(req, crypto_ahash_update(req));
616 ret = do_one_ahash_op(req, crypto_ahash_final(req));
621 /* The real thing. */
622 for (i = 0; i < 8; i++) {
625 start = get_cycles();
627 ret = crypto_ahash_init(req);
630 for (pcount = 0; pcount < blen; pcount += plen) {
631 ret = do_one_ahash_op(req, crypto_ahash_update(req));
635 ret = do_one_ahash_op(req, crypto_ahash_final(req));
641 cycles += end - start;
648 pr_cont("%6lu cycles/operation, %4lu cycles/byte\n",
649 cycles / 8, cycles / (8 * blen));
654 static void test_ahash_speed(const char *algo, unsigned int sec,
655 struct hash_speed *speed)
657 struct scatterlist sg[TVMEMSIZE];
658 struct tcrypt_result tresult;
659 struct ahash_request *req;
660 struct crypto_ahash *tfm;
661 static char output[1024];
664 printk(KERN_INFO "\ntesting speed of async %s\n", algo);
666 tfm = crypto_alloc_ahash(algo, 0, 0);
668 pr_err("failed to load transform for %s: %ld\n",
673 if (crypto_ahash_digestsize(tfm) > sizeof(output)) {
674 pr_err("digestsize(%u) > outputbuffer(%zu)\n",
675 crypto_ahash_digestsize(tfm), sizeof(output));
679 test_hash_sg_init(sg);
680 req = ahash_request_alloc(tfm, GFP_KERNEL);
682 pr_err("ahash request allocation failure\n");
686 init_completion(&tresult.completion);
687 ahash_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
688 tcrypt_complete, &tresult);
690 for (i = 0; speed[i].blen != 0; i++) {
691 if (speed[i].blen > TVMEMSIZE * PAGE_SIZE) {
692 pr_err("template (%u) too big for tvmem (%lu)\n",
693 speed[i].blen, TVMEMSIZE * PAGE_SIZE);
698 "(%5u byte blocks,%5u bytes per update,%4u updates): ",
699 i, speed[i].blen, speed[i].plen, speed[i].blen / speed[i].plen);
701 ahash_request_set_crypt(req, sg, output, speed[i].plen);
704 ret = test_ahash_jiffies(req, speed[i].blen,
705 speed[i].plen, output, sec);
707 ret = test_ahash_cycles(req, speed[i].blen,
708 speed[i].plen, output);
711 pr_err("hashing failed ret=%d\n", ret);
716 ahash_request_free(req);
719 crypto_free_ahash(tfm);
722 static inline int do_one_acipher_op(struct ablkcipher_request *req, int ret)
724 if (ret == -EINPROGRESS || ret == -EBUSY) {
725 struct tcrypt_result *tr = req->base.data;
727 ret = wait_for_completion_interruptible(&tr->completion);
730 INIT_COMPLETION(tr->completion);
736 static int test_acipher_jiffies(struct ablkcipher_request *req, int enc,
739 unsigned long start, end;
743 for (start = jiffies, end = start + sec * HZ, bcount = 0;
744 time_before(jiffies, end); bcount++) {
746 ret = do_one_acipher_op(req,
747 crypto_ablkcipher_encrypt(req));
749 ret = do_one_acipher_op(req,
750 crypto_ablkcipher_decrypt(req));
756 pr_cont("%d operations in %d seconds (%ld bytes)\n",
757 bcount, sec, (long)bcount * blen);
761 static int test_acipher_cycles(struct ablkcipher_request *req, int enc,
764 unsigned long cycles = 0;
769 for (i = 0; i < 4; i++) {
771 ret = do_one_acipher_op(req,
772 crypto_ablkcipher_encrypt(req));
774 ret = do_one_acipher_op(req,
775 crypto_ablkcipher_decrypt(req));
781 /* The real thing. */
782 for (i = 0; i < 8; i++) {
785 start = get_cycles();
787 ret = do_one_acipher_op(req,
788 crypto_ablkcipher_encrypt(req));
790 ret = do_one_acipher_op(req,
791 crypto_ablkcipher_decrypt(req));
797 cycles += end - start;
802 pr_cont("1 operation in %lu cycles (%d bytes)\n",
803 (cycles + 4) / 8, blen);
808 static void test_acipher_speed(const char *algo, int enc, unsigned int sec,
809 struct cipher_speed_template *template,
810 unsigned int tcount, u8 *keysize)
812 unsigned int ret, i, j, iv_len;
813 struct tcrypt_result tresult;
816 struct ablkcipher_request *req;
817 struct crypto_ablkcipher *tfm;
826 pr_info("\ntesting speed of async %s %s\n", algo, e);
828 init_completion(&tresult.completion);
830 tfm = crypto_alloc_ablkcipher(algo, 0, 0);
833 pr_err("failed to load transform for %s: %ld\n", algo,
838 req = ablkcipher_request_alloc(tfm, GFP_KERNEL);
840 pr_err("tcrypt: skcipher: Failed to allocate request for %s\n",
845 ablkcipher_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
846 tcrypt_complete, &tresult);
850 b_size = block_sizes;
853 struct scatterlist sg[TVMEMSIZE];
855 if ((*keysize + *b_size) > TVMEMSIZE * PAGE_SIZE) {
856 pr_err("template (%u) too big for "
857 "tvmem (%lu)\n", *keysize + *b_size,
858 TVMEMSIZE * PAGE_SIZE);
862 pr_info("test %u (%d bit key, %d byte blocks): ", i,
863 *keysize * 8, *b_size);
865 memset(tvmem[0], 0xff, PAGE_SIZE);
867 /* set key, plain text and IV */
869 for (j = 0; j < tcount; j++) {
870 if (template[j].klen == *keysize) {
871 key = template[j].key;
876 crypto_ablkcipher_clear_flags(tfm, ~0);
878 ret = crypto_ablkcipher_setkey(tfm, key, *keysize);
880 pr_err("setkey() failed flags=%x\n",
881 crypto_ablkcipher_get_flags(tfm));
885 sg_init_table(sg, TVMEMSIZE);
886 sg_set_buf(sg, tvmem[0] + *keysize,
887 PAGE_SIZE - *keysize);
888 for (j = 1; j < TVMEMSIZE; j++) {
889 sg_set_buf(sg + j, tvmem[j], PAGE_SIZE);
890 memset(tvmem[j], 0xff, PAGE_SIZE);
893 iv_len = crypto_ablkcipher_ivsize(tfm);
895 memset(&iv, 0xff, iv_len);
897 ablkcipher_request_set_crypt(req, sg, sg, *b_size, iv);
900 ret = test_acipher_jiffies(req, enc,
903 ret = test_acipher_cycles(req, enc,
907 pr_err("%s() failed flags=%x\n", e,
908 crypto_ablkcipher_get_flags(tfm));
918 ablkcipher_request_free(req);
920 crypto_free_ablkcipher(tfm);
923 static void test_available(void)
928 printk("alg %s ", *name);
929 printk(crypto_has_alg(*name, 0, 0) ?
930 "found\n" : "not found\n");
935 static inline int tcrypt_test(const char *alg)
939 ret = alg_test(alg, alg, 0, 0);
940 /* non-fips algs return -EINVAL in fips mode */
941 if (fips_enabled && ret == -EINVAL)
946 static int do_test(int m)
953 for (i = 1; i < 200; i++)
958 ret += tcrypt_test("md5");
962 ret += tcrypt_test("sha1");
966 ret += tcrypt_test("ecb(des)");
967 ret += tcrypt_test("cbc(des)");
971 ret += tcrypt_test("ecb(des3_ede)");
972 ret += tcrypt_test("cbc(des3_ede)");
976 ret += tcrypt_test("md4");
980 ret += tcrypt_test("sha256");
984 ret += tcrypt_test("ecb(blowfish)");
985 ret += tcrypt_test("cbc(blowfish)");
986 ret += tcrypt_test("ctr(blowfish)");
990 ret += tcrypt_test("ecb(twofish)");
991 ret += tcrypt_test("cbc(twofish)");
992 ret += tcrypt_test("ctr(twofish)");
993 ret += tcrypt_test("lrw(twofish)");
994 ret += tcrypt_test("xts(twofish)");
998 ret += tcrypt_test("ecb(serpent)");
999 ret += tcrypt_test("cbc(serpent)");
1000 ret += tcrypt_test("ctr(serpent)");
1001 ret += tcrypt_test("lrw(serpent)");
1002 ret += tcrypt_test("xts(serpent)");
1006 ret += tcrypt_test("ecb(aes)");
1007 ret += tcrypt_test("cbc(aes)");
1008 ret += tcrypt_test("lrw(aes)");
1009 ret += tcrypt_test("xts(aes)");
1010 ret += tcrypt_test("ctr(aes)");
1011 ret += tcrypt_test("rfc3686(ctr(aes))");
1015 ret += tcrypt_test("sha384");
1019 ret += tcrypt_test("sha512");
1023 ret += tcrypt_test("deflate");
1027 ret += tcrypt_test("ecb(cast5)");
1031 ret += tcrypt_test("ecb(cast6)");
1035 ret += tcrypt_test("ecb(arc4)");
1039 ret += tcrypt_test("michael_mic");
1043 ret += tcrypt_test("crc32c");
1047 ret += tcrypt_test("ecb(tea)");
1051 ret += tcrypt_test("ecb(xtea)");
1055 ret += tcrypt_test("ecb(khazad)");
1059 ret += tcrypt_test("wp512");
1063 ret += tcrypt_test("wp384");
1067 ret += tcrypt_test("wp256");
1071 ret += tcrypt_test("ecb(tnepres)");
1075 ret += tcrypt_test("ecb(anubis)");
1076 ret += tcrypt_test("cbc(anubis)");
1080 ret += tcrypt_test("tgr192");
1085 ret += tcrypt_test("tgr160");
1089 ret += tcrypt_test("tgr128");
1093 ret += tcrypt_test("ecb(xeta)");
1097 ret += tcrypt_test("pcbc(fcrypt)");
1101 ret += tcrypt_test("ecb(camellia)");
1102 ret += tcrypt_test("cbc(camellia)");
1105 ret += tcrypt_test("sha224");
1109 ret += tcrypt_test("salsa20");
1113 ret += tcrypt_test("gcm(aes)");
1117 ret += tcrypt_test("lzo");
1121 ret += tcrypt_test("ccm(aes)");
1125 ret += tcrypt_test("cts(cbc(aes))");
1129 ret += tcrypt_test("rmd128");
1133 ret += tcrypt_test("rmd160");
1137 ret += tcrypt_test("rmd256");
1141 ret += tcrypt_test("rmd320");
1145 ret += tcrypt_test("ecb(seed)");
1149 ret += tcrypt_test("zlib");
1153 ret += tcrypt_test("rfc4309(ccm(aes))");
1157 ret += tcrypt_test("hmac(md5)");
1161 ret += tcrypt_test("hmac(sha1)");
1165 ret += tcrypt_test("hmac(sha256)");
1169 ret += tcrypt_test("hmac(sha384)");
1173 ret += tcrypt_test("hmac(sha512)");
1177 ret += tcrypt_test("hmac(sha224)");
1181 ret += tcrypt_test("xcbc(aes)");
1185 ret += tcrypt_test("hmac(rmd128)");
1189 ret += tcrypt_test("hmac(rmd160)");
1193 ret += tcrypt_test("vmac(aes)");
1197 ret += tcrypt_test("ansi_cprng");
1201 ret += tcrypt_test("rfc4106(gcm(aes))");
1205 test_cipher_speed("ecb(aes)", ENCRYPT, sec, NULL, 0,
1206 speed_template_16_24_32);
1207 test_cipher_speed("ecb(aes)", DECRYPT, sec, NULL, 0,
1208 speed_template_16_24_32);
1209 test_cipher_speed("cbc(aes)", ENCRYPT, sec, NULL, 0,
1210 speed_template_16_24_32);
1211 test_cipher_speed("cbc(aes)", DECRYPT, sec, NULL, 0,
1212 speed_template_16_24_32);
1213 test_cipher_speed("lrw(aes)", ENCRYPT, sec, NULL, 0,
1214 speed_template_32_40_48);
1215 test_cipher_speed("lrw(aes)", DECRYPT, sec, NULL, 0,
1216 speed_template_32_40_48);
1217 test_cipher_speed("xts(aes)", ENCRYPT, sec, NULL, 0,
1218 speed_template_32_48_64);
1219 test_cipher_speed("xts(aes)", DECRYPT, sec, NULL, 0,
1220 speed_template_32_48_64);
1221 test_cipher_speed("ctr(aes)", ENCRYPT, sec, NULL, 0,
1222 speed_template_16_24_32);
1223 test_cipher_speed("ctr(aes)", DECRYPT, sec, NULL, 0,
1224 speed_template_16_24_32);
1228 test_cipher_speed("ecb(des3_ede)", ENCRYPT, sec,
1229 des3_speed_template, DES3_SPEED_VECTORS,
1231 test_cipher_speed("ecb(des3_ede)", DECRYPT, sec,
1232 des3_speed_template, DES3_SPEED_VECTORS,
1234 test_cipher_speed("cbc(des3_ede)", ENCRYPT, sec,
1235 des3_speed_template, DES3_SPEED_VECTORS,
1237 test_cipher_speed("cbc(des3_ede)", DECRYPT, sec,
1238 des3_speed_template, DES3_SPEED_VECTORS,
1243 test_cipher_speed("ecb(twofish)", ENCRYPT, sec, NULL, 0,
1244 speed_template_16_24_32);
1245 test_cipher_speed("ecb(twofish)", DECRYPT, sec, NULL, 0,
1246 speed_template_16_24_32);
1247 test_cipher_speed("cbc(twofish)", ENCRYPT, sec, NULL, 0,
1248 speed_template_16_24_32);
1249 test_cipher_speed("cbc(twofish)", DECRYPT, sec, NULL, 0,
1250 speed_template_16_24_32);
1251 test_cipher_speed("ctr(twofish)", ENCRYPT, sec, NULL, 0,
1252 speed_template_16_24_32);
1253 test_cipher_speed("ctr(twofish)", DECRYPT, sec, NULL, 0,
1254 speed_template_16_24_32);
1255 test_cipher_speed("lrw(twofish)", ENCRYPT, sec, NULL, 0,
1256 speed_template_32_40_48);
1257 test_cipher_speed("lrw(twofish)", DECRYPT, sec, NULL, 0,
1258 speed_template_32_40_48);
1259 test_cipher_speed("xts(twofish)", ENCRYPT, sec, NULL, 0,
1260 speed_template_32_48_64);
1261 test_cipher_speed("xts(twofish)", DECRYPT, sec, NULL, 0,
1262 speed_template_32_48_64);
1266 test_cipher_speed("ecb(blowfish)", ENCRYPT, sec, NULL, 0,
1267 speed_template_8_32);
1268 test_cipher_speed("ecb(blowfish)", DECRYPT, sec, NULL, 0,
1269 speed_template_8_32);
1270 test_cipher_speed("cbc(blowfish)", ENCRYPT, sec, NULL, 0,
1271 speed_template_8_32);
1272 test_cipher_speed("cbc(blowfish)", DECRYPT, sec, NULL, 0,
1273 speed_template_8_32);
1274 test_cipher_speed("ctr(blowfish)", ENCRYPT, sec, NULL, 0,
1275 speed_template_8_32);
1276 test_cipher_speed("ctr(blowfish)", DECRYPT, sec, NULL, 0,
1277 speed_template_8_32);
1281 test_cipher_speed("ecb(des)", ENCRYPT, sec, NULL, 0,
1283 test_cipher_speed("ecb(des)", DECRYPT, sec, NULL, 0,
1285 test_cipher_speed("cbc(des)", ENCRYPT, sec, NULL, 0,
1287 test_cipher_speed("cbc(des)", DECRYPT, sec, NULL, 0,
1292 test_cipher_speed("ecb(camellia)", ENCRYPT, sec, NULL, 0,
1293 speed_template_16_24_32);
1294 test_cipher_speed("ecb(camellia)", DECRYPT, sec, NULL, 0,
1295 speed_template_16_24_32);
1296 test_cipher_speed("cbc(camellia)", ENCRYPT, sec, NULL, 0,
1297 speed_template_16_24_32);
1298 test_cipher_speed("cbc(camellia)", DECRYPT, sec, NULL, 0,
1299 speed_template_16_24_32);
1300 test_cipher_speed("ctr(camellia)", ENCRYPT, sec, NULL, 0,
1301 speed_template_16_24_32);
1302 test_cipher_speed("ctr(camellia)", DECRYPT, sec, NULL, 0,
1303 speed_template_16_24_32);
1304 test_cipher_speed("lrw(camellia)", ENCRYPT, sec, NULL, 0,
1305 speed_template_32_40_48);
1306 test_cipher_speed("lrw(camellia)", DECRYPT, sec, NULL, 0,
1307 speed_template_32_40_48);
1308 test_cipher_speed("xts(camellia)", ENCRYPT, sec, NULL, 0,
1309 speed_template_32_48_64);
1310 test_cipher_speed("xts(camellia)", DECRYPT, sec, NULL, 0,
1311 speed_template_32_48_64);
1315 test_cipher_speed("salsa20", ENCRYPT, sec, NULL, 0,
1316 speed_template_16_32);
1320 test_cipher_speed("ecb(serpent)", ENCRYPT, sec, NULL, 0,
1321 speed_template_16_32);
1322 test_cipher_speed("ecb(serpent)", DECRYPT, sec, NULL, 0,
1323 speed_template_16_32);
1324 test_cipher_speed("cbc(serpent)", ENCRYPT, sec, NULL, 0,
1325 speed_template_16_32);
1326 test_cipher_speed("cbc(serpent)", DECRYPT, sec, NULL, 0,
1327 speed_template_16_32);
1328 test_cipher_speed("ctr(serpent)", ENCRYPT, sec, NULL, 0,
1329 speed_template_16_32);
1330 test_cipher_speed("ctr(serpent)", DECRYPT, sec, NULL, 0,
1331 speed_template_16_32);
1332 test_cipher_speed("lrw(serpent)", ENCRYPT, sec, NULL, 0,
1333 speed_template_32_48);
1334 test_cipher_speed("lrw(serpent)", DECRYPT, sec, NULL, 0,
1335 speed_template_32_48);
1336 test_cipher_speed("xts(serpent)", ENCRYPT, sec, NULL, 0,
1337 speed_template_32_64);
1338 test_cipher_speed("xts(serpent)", DECRYPT, sec, NULL, 0,
1339 speed_template_32_64);
1346 test_hash_speed("md4", sec, generic_hash_speed_template);
1347 if (mode > 300 && mode < 400) break;
1350 test_hash_speed("md5", sec, generic_hash_speed_template);
1351 if (mode > 300 && mode < 400) break;
1354 test_hash_speed("sha1", sec, generic_hash_speed_template);
1355 if (mode > 300 && mode < 400) break;
1358 test_hash_speed("sha256", sec, generic_hash_speed_template);
1359 if (mode > 300 && mode < 400) break;
1362 test_hash_speed("sha384", sec, generic_hash_speed_template);
1363 if (mode > 300 && mode < 400) break;
1366 test_hash_speed("sha512", sec, generic_hash_speed_template);
1367 if (mode > 300 && mode < 400) break;
1370 test_hash_speed("wp256", sec, generic_hash_speed_template);
1371 if (mode > 300 && mode < 400) break;
1374 test_hash_speed("wp384", sec, generic_hash_speed_template);
1375 if (mode > 300 && mode < 400) break;
1378 test_hash_speed("wp512", sec, generic_hash_speed_template);
1379 if (mode > 300 && mode < 400) break;
1382 test_hash_speed("tgr128", sec, generic_hash_speed_template);
1383 if (mode > 300 && mode < 400) break;
1386 test_hash_speed("tgr160", sec, generic_hash_speed_template);
1387 if (mode > 300 && mode < 400) break;
1390 test_hash_speed("tgr192", sec, generic_hash_speed_template);
1391 if (mode > 300 && mode < 400) break;
1394 test_hash_speed("sha224", sec, generic_hash_speed_template);
1395 if (mode > 300 && mode < 400) break;
1398 test_hash_speed("rmd128", sec, generic_hash_speed_template);
1399 if (mode > 300 && mode < 400) break;
1402 test_hash_speed("rmd160", sec, generic_hash_speed_template);
1403 if (mode > 300 && mode < 400) break;
1406 test_hash_speed("rmd256", sec, generic_hash_speed_template);
1407 if (mode > 300 && mode < 400) break;
1410 test_hash_speed("rmd320", sec, generic_hash_speed_template);
1411 if (mode > 300 && mode < 400) break;
1414 test_hash_speed("ghash-generic", sec, hash_speed_template_16);
1415 if (mode > 300 && mode < 400) break;
1424 test_ahash_speed("md4", sec, generic_hash_speed_template);
1425 if (mode > 400 && mode < 500) break;
1428 test_ahash_speed("md5", sec, generic_hash_speed_template);
1429 if (mode > 400 && mode < 500) break;
1432 test_ahash_speed("sha1", sec, generic_hash_speed_template);
1433 if (mode > 400 && mode < 500) break;
1436 test_ahash_speed("sha256", sec, generic_hash_speed_template);
1437 if (mode > 400 && mode < 500) break;
1440 test_ahash_speed("sha384", sec, generic_hash_speed_template);
1441 if (mode > 400 && mode < 500) break;
1444 test_ahash_speed("sha512", sec, generic_hash_speed_template);
1445 if (mode > 400 && mode < 500) break;
1448 test_ahash_speed("wp256", sec, generic_hash_speed_template);
1449 if (mode > 400 && mode < 500) break;
1452 test_ahash_speed("wp384", sec, generic_hash_speed_template);
1453 if (mode > 400 && mode < 500) break;
1456 test_ahash_speed("wp512", sec, generic_hash_speed_template);
1457 if (mode > 400 && mode < 500) break;
1460 test_ahash_speed("tgr128", sec, generic_hash_speed_template);
1461 if (mode > 400 && mode < 500) break;
1464 test_ahash_speed("tgr160", sec, generic_hash_speed_template);
1465 if (mode > 400 && mode < 500) break;
1468 test_ahash_speed("tgr192", sec, generic_hash_speed_template);
1469 if (mode > 400 && mode < 500) break;
1472 test_ahash_speed("sha224", sec, generic_hash_speed_template);
1473 if (mode > 400 && mode < 500) break;
1476 test_ahash_speed("rmd128", sec, generic_hash_speed_template);
1477 if (mode > 400 && mode < 500) break;
1480 test_ahash_speed("rmd160", sec, generic_hash_speed_template);
1481 if (mode > 400 && mode < 500) break;
1484 test_ahash_speed("rmd256", sec, generic_hash_speed_template);
1485 if (mode > 400 && mode < 500) break;
1488 test_ahash_speed("rmd320", sec, generic_hash_speed_template);
1489 if (mode > 400 && mode < 500) break;
1495 test_acipher_speed("ecb(aes)", ENCRYPT, sec, NULL, 0,
1496 speed_template_16_24_32);
1497 test_acipher_speed("ecb(aes)", DECRYPT, sec, NULL, 0,
1498 speed_template_16_24_32);
1499 test_acipher_speed("cbc(aes)", ENCRYPT, sec, NULL, 0,
1500 speed_template_16_24_32);
1501 test_acipher_speed("cbc(aes)", DECRYPT, sec, NULL, 0,
1502 speed_template_16_24_32);
1503 test_acipher_speed("lrw(aes)", ENCRYPT, sec, NULL, 0,
1504 speed_template_32_40_48);
1505 test_acipher_speed("lrw(aes)", DECRYPT, sec, NULL, 0,
1506 speed_template_32_40_48);
1507 test_acipher_speed("xts(aes)", ENCRYPT, sec, NULL, 0,
1508 speed_template_32_48_64);
1509 test_acipher_speed("xts(aes)", DECRYPT, sec, NULL, 0,
1510 speed_template_32_48_64);
1511 test_acipher_speed("ctr(aes)", ENCRYPT, sec, NULL, 0,
1512 speed_template_16_24_32);
1513 test_acipher_speed("ctr(aes)", DECRYPT, sec, NULL, 0,
1514 speed_template_16_24_32);
1518 test_acipher_speed("ecb(des3_ede)", ENCRYPT, sec,
1519 des3_speed_template, DES3_SPEED_VECTORS,
1521 test_acipher_speed("ecb(des3_ede)", DECRYPT, sec,
1522 des3_speed_template, DES3_SPEED_VECTORS,
1524 test_acipher_speed("cbc(des3_ede)", ENCRYPT, sec,
1525 des3_speed_template, DES3_SPEED_VECTORS,
1527 test_acipher_speed("cbc(des3_ede)", DECRYPT, sec,
1528 des3_speed_template, DES3_SPEED_VECTORS,
1533 test_acipher_speed("ecb(des)", ENCRYPT, sec, NULL, 0,
1535 test_acipher_speed("ecb(des)", DECRYPT, sec, NULL, 0,
1537 test_acipher_speed("cbc(des)", ENCRYPT, sec, NULL, 0,
1539 test_acipher_speed("cbc(des)", DECRYPT, sec, NULL, 0,
1544 test_acipher_speed("ecb(serpent)", ENCRYPT, sec, NULL, 0,
1545 speed_template_16_32);
1546 test_acipher_speed("ecb(serpent)", DECRYPT, sec, NULL, 0,
1547 speed_template_16_32);
1548 test_acipher_speed("cbc(serpent)", ENCRYPT, sec, NULL, 0,
1549 speed_template_16_32);
1550 test_acipher_speed("cbc(serpent)", DECRYPT, sec, NULL, 0,
1551 speed_template_16_32);
1552 test_acipher_speed("ctr(serpent)", ENCRYPT, sec, NULL, 0,
1553 speed_template_16_32);
1554 test_acipher_speed("ctr(serpent)", DECRYPT, sec, NULL, 0,
1555 speed_template_16_32);
1556 test_acipher_speed("lrw(serpent)", ENCRYPT, sec, NULL, 0,
1557 speed_template_32_48);
1558 test_acipher_speed("lrw(serpent)", DECRYPT, sec, NULL, 0,
1559 speed_template_32_48);
1560 test_acipher_speed("xts(serpent)", ENCRYPT, sec, NULL, 0,
1561 speed_template_32_64);
1562 test_acipher_speed("xts(serpent)", DECRYPT, sec, NULL, 0,
1563 speed_template_32_64);
1574 static int do_alg_test(const char *alg, u32 type, u32 mask)
1576 return crypto_has_alg(alg, type, mask ?: CRYPTO_ALG_TYPE_MASK) ?
1580 static int __init tcrypt_mod_init(void)
1585 for (i = 0; i < TVMEMSIZE; i++) {
1586 tvmem[i] = (void *)__get_free_page(GFP_KERNEL);
1592 err = do_alg_test(alg, type, mask);
1594 err = do_test(mode);
1597 printk(KERN_ERR "tcrypt: one or more tests failed!\n");
1601 /* We intentionaly return -EAGAIN to prevent keeping the module,
1602 * unless we're running in fips mode. It does all its work from
1603 * init() and doesn't offer any runtime functionality, but in
1604 * the fips case, checking for a successful load is helpful.
1605 * => we don't need it in the memory, do we?
1612 for (i = 0; i < TVMEMSIZE && tvmem[i]; i++)
1613 free_page((unsigned long)tvmem[i]);
1619 * If an init function is provided, an exit function must also be provided
1620 * to allow module unload.
1622 static void __exit tcrypt_mod_fini(void) { }
1624 module_init(tcrypt_mod_init);
1625 module_exit(tcrypt_mod_fini);
1627 module_param(alg, charp, 0);
1628 module_param(type, uint, 0);
1629 module_param(mask, uint, 0);
1630 module_param(mode, int, 0);
1631 module_param(sec, uint, 0);
1632 MODULE_PARM_DESC(sec, "Length in seconds of speed tests "
1633 "(defaults to zero which uses CPU cycles instead)");
1635 MODULE_LICENSE("GPL");
1636 MODULE_DESCRIPTION("Quick & dirty crypto testing module");
1637 MODULE_AUTHOR("James Morris <jmorris@intercode.com.au>");