2 * Quick & dirty crypto testing module.
4 * This will only exist until we have a better testing mechanism
5 * (e.g. a char device).
7 * Copyright (c) 2002 James Morris <jmorris@intercode.com.au>
8 * Copyright (c) 2002 Jean-Francois Dive <jef@linuxbe.org>
9 * Copyright (c) 2007 Nokia Siemens Networks
11 * Updated RFC4106 AES-GCM testing.
12 * Authors: Aidan O'Mahony (aidan.o.mahony@intel.com)
13 * Adrian Hoban <adrian.hoban@intel.com>
14 * Gabriele Paoloni <gabriele.paoloni@intel.com>
15 * Tadeusz Struk (tadeusz.struk@intel.com)
16 * Copyright (c) 2010, Intel Corporation.
18 * This program is free software; you can redistribute it and/or modify it
19 * under the terms of the GNU General Public License as published by the Free
20 * Software Foundation; either version 2 of the License, or (at your option)
25 #include <crypto/hash.h>
26 #include <linux/err.h>
27 #include <linux/init.h>
28 #include <linux/gfp.h>
29 #include <linux/module.h>
30 #include <linux/scatterlist.h>
31 #include <linux/string.h>
32 #include <linux/moduleparam.h>
33 #include <linux/jiffies.h>
34 #include <linux/timex.h>
35 #include <linux/interrupt.h>
40 * Need slab memory for testing (size in number of pages).
45 * Used by test_cipher_speed()
51 * Used by test_cipher_speed()
53 static unsigned int sec;
55 static char *alg = NULL;
59 static char *tvmem[TVMEMSIZE];
61 static char *check[] = {
62 "des", "md5", "des3_ede", "rot13", "sha1", "sha224", "sha256",
63 "blowfish", "twofish", "serpent", "sha384", "sha512", "md4", "aes",
64 "cast6", "arc4", "michael_mic", "deflate", "crc32c", "tea", "xtea",
65 "khazad", "wp512", "wp384", "wp256", "tnepres", "xeta", "fcrypt",
66 "camellia", "seed", "salsa20", "rmd128", "rmd160", "rmd256", "rmd320",
67 "lzo", "cts", "zlib", NULL
70 static int test_cipher_jiffies(struct blkcipher_desc *desc, int enc,
71 struct scatterlist *sg, int blen, int sec)
73 unsigned long start, end;
77 for (start = jiffies, end = start + sec * HZ, bcount = 0;
78 time_before(jiffies, end); bcount++) {
80 ret = crypto_blkcipher_encrypt(desc, sg, sg, blen);
82 ret = crypto_blkcipher_decrypt(desc, sg, sg, blen);
88 printk("%d operations in %d seconds (%ld bytes)\n",
89 bcount, sec, (long)bcount * blen);
93 static int test_cipher_cycles(struct blkcipher_desc *desc, int enc,
94 struct scatterlist *sg, int blen)
96 unsigned long cycles = 0;
103 for (i = 0; i < 4; i++) {
105 ret = crypto_blkcipher_encrypt(desc, sg, sg, blen);
107 ret = crypto_blkcipher_decrypt(desc, sg, sg, blen);
113 /* The real thing. */
114 for (i = 0; i < 8; i++) {
117 start = get_cycles();
119 ret = crypto_blkcipher_encrypt(desc, sg, sg, blen);
121 ret = crypto_blkcipher_decrypt(desc, sg, sg, blen);
127 cycles += end - start;
134 printk("1 operation in %lu cycles (%d bytes)\n",
135 (cycles + 4) / 8, blen);
140 static u32 block_sizes[] = { 16, 64, 256, 1024, 8192, 0 };
142 static void test_cipher_speed(const char *algo, int enc, unsigned int sec,
143 struct cipher_speed_template *template,
144 unsigned int tcount, u8 *keysize)
146 unsigned int ret, i, j, iv_len;
149 struct crypto_blkcipher *tfm;
150 struct blkcipher_desc desc;
159 printk("\ntesting speed of %s %s\n", algo, e);
161 tfm = crypto_alloc_blkcipher(algo, 0, CRYPTO_ALG_ASYNC);
164 printk("failed to load transform for %s: %ld\n", algo,
174 b_size = block_sizes;
176 struct scatterlist sg[TVMEMSIZE];
178 if ((*keysize + *b_size) > TVMEMSIZE * PAGE_SIZE) {
179 printk("template (%u) too big for "
180 "tvmem (%lu)\n", *keysize + *b_size,
181 TVMEMSIZE * PAGE_SIZE);
185 printk("test %u (%d bit key, %d byte blocks): ", i,
186 *keysize * 8, *b_size);
188 memset(tvmem[0], 0xff, PAGE_SIZE);
190 /* set key, plain text and IV */
192 for (j = 0; j < tcount; j++) {
193 if (template[j].klen == *keysize) {
194 key = template[j].key;
199 ret = crypto_blkcipher_setkey(tfm, key, *keysize);
201 printk("setkey() failed flags=%x\n",
202 crypto_blkcipher_get_flags(tfm));
206 sg_init_table(sg, TVMEMSIZE);
207 sg_set_buf(sg, tvmem[0] + *keysize,
208 PAGE_SIZE - *keysize);
209 for (j = 1; j < TVMEMSIZE; j++) {
210 sg_set_buf(sg + j, tvmem[j], PAGE_SIZE);
211 memset (tvmem[j], 0xff, PAGE_SIZE);
214 iv_len = crypto_blkcipher_ivsize(tfm);
216 memset(&iv, 0xff, iv_len);
217 crypto_blkcipher_set_iv(tfm, iv, iv_len);
221 ret = test_cipher_jiffies(&desc, enc, sg,
224 ret = test_cipher_cycles(&desc, enc, sg,
228 printk("%s() failed flags=%x\n", e, desc.flags);
238 crypto_free_blkcipher(tfm);
241 static int test_hash_jiffies_digest(struct hash_desc *desc,
242 struct scatterlist *sg, int blen,
245 unsigned long start, end;
249 for (start = jiffies, end = start + sec * HZ, bcount = 0;
250 time_before(jiffies, end); bcount++) {
251 ret = crypto_hash_digest(desc, sg, blen, out);
256 printk("%6u opers/sec, %9lu bytes/sec\n",
257 bcount / sec, ((long)bcount * blen) / sec);
262 static int test_hash_jiffies(struct hash_desc *desc, struct scatterlist *sg,
263 int blen, int plen, char *out, int sec)
265 unsigned long start, end;
270 return test_hash_jiffies_digest(desc, sg, blen, out, sec);
272 for (start = jiffies, end = start + sec * HZ, bcount = 0;
273 time_before(jiffies, end); bcount++) {
274 ret = crypto_hash_init(desc);
277 for (pcount = 0; pcount < blen; pcount += plen) {
278 ret = crypto_hash_update(desc, sg, plen);
282 /* we assume there is enough space in 'out' for the result */
283 ret = crypto_hash_final(desc, out);
288 printk("%6u opers/sec, %9lu bytes/sec\n",
289 bcount / sec, ((long)bcount * blen) / sec);
294 static int test_hash_cycles_digest(struct hash_desc *desc,
295 struct scatterlist *sg, int blen, char *out)
297 unsigned long cycles = 0;
304 for (i = 0; i < 4; i++) {
305 ret = crypto_hash_digest(desc, sg, blen, out);
310 /* The real thing. */
311 for (i = 0; i < 8; i++) {
314 start = get_cycles();
316 ret = crypto_hash_digest(desc, sg, blen, out);
322 cycles += end - start;
331 printk("%6lu cycles/operation, %4lu cycles/byte\n",
332 cycles / 8, cycles / (8 * blen));
337 static int test_hash_cycles(struct hash_desc *desc, struct scatterlist *sg,
338 int blen, int plen, char *out)
340 unsigned long cycles = 0;
345 return test_hash_cycles_digest(desc, sg, blen, out);
350 for (i = 0; i < 4; i++) {
351 ret = crypto_hash_init(desc);
354 for (pcount = 0; pcount < blen; pcount += plen) {
355 ret = crypto_hash_update(desc, sg, plen);
359 ret = crypto_hash_final(desc, out);
364 /* The real thing. */
365 for (i = 0; i < 8; i++) {
368 start = get_cycles();
370 ret = crypto_hash_init(desc);
373 for (pcount = 0; pcount < blen; pcount += plen) {
374 ret = crypto_hash_update(desc, sg, plen);
378 ret = crypto_hash_final(desc, out);
384 cycles += end - start;
393 printk("%6lu cycles/operation, %4lu cycles/byte\n",
394 cycles / 8, cycles / (8 * blen));
399 static void test_hash_sg_init(struct scatterlist *sg)
403 sg_init_table(sg, TVMEMSIZE);
404 for (i = 0; i < TVMEMSIZE; i++) {
405 sg_set_buf(sg + i, tvmem[i], PAGE_SIZE);
406 memset(tvmem[i], 0xff, PAGE_SIZE);
410 static void test_hash_speed(const char *algo, unsigned int sec,
411 struct hash_speed *speed)
413 struct scatterlist sg[TVMEMSIZE];
414 struct crypto_hash *tfm;
415 struct hash_desc desc;
416 static char output[1024];
420 printk(KERN_INFO "\ntesting speed of %s\n", algo);
422 tfm = crypto_alloc_hash(algo, 0, CRYPTO_ALG_ASYNC);
425 printk(KERN_ERR "failed to load transform for %s: %ld\n", algo,
433 if (crypto_hash_digestsize(tfm) > sizeof(output)) {
434 printk(KERN_ERR "digestsize(%u) > outputbuffer(%zu)\n",
435 crypto_hash_digestsize(tfm), sizeof(output));
439 test_hash_sg_init(sg);
440 for (i = 0; speed[i].blen != 0; i++) {
441 if (speed[i].blen > TVMEMSIZE * PAGE_SIZE) {
443 "template (%u) too big for tvmem (%lu)\n",
444 speed[i].blen, TVMEMSIZE * PAGE_SIZE);
449 crypto_hash_setkey(tfm, tvmem[0], speed[i].klen);
451 printk(KERN_INFO "test%3u "
452 "(%5u byte blocks,%5u bytes per update,%4u updates): ",
453 i, speed[i].blen, speed[i].plen, speed[i].blen / speed[i].plen);
456 ret = test_hash_jiffies(&desc, sg, speed[i].blen,
457 speed[i].plen, output, sec);
459 ret = test_hash_cycles(&desc, sg, speed[i].blen,
460 speed[i].plen, output);
463 printk(KERN_ERR "hashing failed ret=%d\n", ret);
469 crypto_free_hash(tfm);
472 struct tcrypt_result {
473 struct completion completion;
477 static void tcrypt_complete(struct crypto_async_request *req, int err)
479 struct tcrypt_result *res = req->data;
481 if (err == -EINPROGRESS)
485 complete(&res->completion);
488 static inline int do_one_ahash_op(struct ahash_request *req, int ret)
490 if (ret == -EINPROGRESS || ret == -EBUSY) {
491 struct tcrypt_result *tr = req->base.data;
493 ret = wait_for_completion_interruptible(&tr->completion);
496 INIT_COMPLETION(tr->completion);
501 static int test_ahash_jiffies_digest(struct ahash_request *req, int blen,
504 unsigned long start, end;
508 for (start = jiffies, end = start + sec * HZ, bcount = 0;
509 time_before(jiffies, end); bcount++) {
510 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
515 printk("%6u opers/sec, %9lu bytes/sec\n",
516 bcount / sec, ((long)bcount * blen) / sec);
521 static int test_ahash_jiffies(struct ahash_request *req, int blen,
522 int plen, char *out, int sec)
524 unsigned long start, end;
529 return test_ahash_jiffies_digest(req, blen, out, sec);
531 for (start = jiffies, end = start + sec * HZ, bcount = 0;
532 time_before(jiffies, end); bcount++) {
533 ret = crypto_ahash_init(req);
536 for (pcount = 0; pcount < blen; pcount += plen) {
537 ret = do_one_ahash_op(req, crypto_ahash_update(req));
541 /* we assume there is enough space in 'out' for the result */
542 ret = do_one_ahash_op(req, crypto_ahash_final(req));
547 pr_cont("%6u opers/sec, %9lu bytes/sec\n",
548 bcount / sec, ((long)bcount * blen) / sec);
553 static int test_ahash_cycles_digest(struct ahash_request *req, int blen,
556 unsigned long cycles = 0;
560 for (i = 0; i < 4; i++) {
561 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
566 /* The real thing. */
567 for (i = 0; i < 8; i++) {
570 start = get_cycles();
572 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
578 cycles += end - start;
585 pr_cont("%6lu cycles/operation, %4lu cycles/byte\n",
586 cycles / 8, cycles / (8 * blen));
591 static int test_ahash_cycles(struct ahash_request *req, int blen,
594 unsigned long cycles = 0;
598 return test_ahash_cycles_digest(req, blen, out);
601 for (i = 0; i < 4; i++) {
602 ret = crypto_ahash_init(req);
605 for (pcount = 0; pcount < blen; pcount += plen) {
606 ret = do_one_ahash_op(req, crypto_ahash_update(req));
610 ret = do_one_ahash_op(req, crypto_ahash_final(req));
615 /* The real thing. */
616 for (i = 0; i < 8; i++) {
619 start = get_cycles();
621 ret = crypto_ahash_init(req);
624 for (pcount = 0; pcount < blen; pcount += plen) {
625 ret = do_one_ahash_op(req, crypto_ahash_update(req));
629 ret = do_one_ahash_op(req, crypto_ahash_final(req));
635 cycles += end - start;
642 pr_cont("%6lu cycles/operation, %4lu cycles/byte\n",
643 cycles / 8, cycles / (8 * blen));
648 static void test_ahash_speed(const char *algo, unsigned int sec,
649 struct hash_speed *speed)
651 struct scatterlist sg[TVMEMSIZE];
652 struct tcrypt_result tresult;
653 struct ahash_request *req;
654 struct crypto_ahash *tfm;
655 static char output[1024];
658 printk(KERN_INFO "\ntesting speed of async %s\n", algo);
660 tfm = crypto_alloc_ahash(algo, 0, 0);
662 pr_err("failed to load transform for %s: %ld\n",
667 if (crypto_ahash_digestsize(tfm) > sizeof(output)) {
668 pr_err("digestsize(%u) > outputbuffer(%zu)\n",
669 crypto_ahash_digestsize(tfm), sizeof(output));
673 test_hash_sg_init(sg);
674 req = ahash_request_alloc(tfm, GFP_KERNEL);
676 pr_err("ahash request allocation failure\n");
680 init_completion(&tresult.completion);
681 ahash_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
682 tcrypt_complete, &tresult);
684 for (i = 0; speed[i].blen != 0; i++) {
685 if (speed[i].blen > TVMEMSIZE * PAGE_SIZE) {
686 pr_err("template (%u) too big for tvmem (%lu)\n",
687 speed[i].blen, TVMEMSIZE * PAGE_SIZE);
692 "(%5u byte blocks,%5u bytes per update,%4u updates): ",
693 i, speed[i].blen, speed[i].plen, speed[i].blen / speed[i].plen);
695 ahash_request_set_crypt(req, sg, output, speed[i].plen);
698 ret = test_ahash_jiffies(req, speed[i].blen,
699 speed[i].plen, output, sec);
701 ret = test_ahash_cycles(req, speed[i].blen,
702 speed[i].plen, output);
705 pr_err("hashing failed ret=%d\n", ret);
710 ahash_request_free(req);
713 crypto_free_ahash(tfm);
716 static inline int do_one_acipher_op(struct ablkcipher_request *req, int ret)
718 if (ret == -EINPROGRESS || ret == -EBUSY) {
719 struct tcrypt_result *tr = req->base.data;
721 ret = wait_for_completion_interruptible(&tr->completion);
724 INIT_COMPLETION(tr->completion);
730 static int test_acipher_jiffies(struct ablkcipher_request *req, int enc,
733 unsigned long start, end;
737 for (start = jiffies, end = start + sec * HZ, bcount = 0;
738 time_before(jiffies, end); bcount++) {
740 ret = do_one_acipher_op(req,
741 crypto_ablkcipher_encrypt(req));
743 ret = do_one_acipher_op(req,
744 crypto_ablkcipher_decrypt(req));
750 pr_cont("%d operations in %d seconds (%ld bytes)\n",
751 bcount, sec, (long)bcount * blen);
755 static int test_acipher_cycles(struct ablkcipher_request *req, int enc,
758 unsigned long cycles = 0;
763 for (i = 0; i < 4; i++) {
765 ret = do_one_acipher_op(req,
766 crypto_ablkcipher_encrypt(req));
768 ret = do_one_acipher_op(req,
769 crypto_ablkcipher_decrypt(req));
775 /* The real thing. */
776 for (i = 0; i < 8; i++) {
779 start = get_cycles();
781 ret = do_one_acipher_op(req,
782 crypto_ablkcipher_encrypt(req));
784 ret = do_one_acipher_op(req,
785 crypto_ablkcipher_decrypt(req));
791 cycles += end - start;
796 pr_cont("1 operation in %lu cycles (%d bytes)\n",
797 (cycles + 4) / 8, blen);
802 static void test_acipher_speed(const char *algo, int enc, unsigned int sec,
803 struct cipher_speed_template *template,
804 unsigned int tcount, u8 *keysize)
806 unsigned int ret, i, j, k, iv_len;
807 struct tcrypt_result tresult;
810 struct ablkcipher_request *req;
811 struct crypto_ablkcipher *tfm;
820 pr_info("\ntesting speed of async %s %s\n", algo, e);
822 init_completion(&tresult.completion);
824 tfm = crypto_alloc_ablkcipher(algo, 0, 0);
827 pr_err("failed to load transform for %s: %ld\n", algo,
832 req = ablkcipher_request_alloc(tfm, GFP_KERNEL);
834 pr_err("tcrypt: skcipher: Failed to allocate request for %s\n",
839 ablkcipher_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
840 tcrypt_complete, &tresult);
844 b_size = block_sizes;
847 struct scatterlist sg[TVMEMSIZE];
849 if ((*keysize + *b_size) > TVMEMSIZE * PAGE_SIZE) {
850 pr_err("template (%u) too big for "
851 "tvmem (%lu)\n", *keysize + *b_size,
852 TVMEMSIZE * PAGE_SIZE);
856 pr_info("test %u (%d bit key, %d byte blocks): ", i,
857 *keysize * 8, *b_size);
859 memset(tvmem[0], 0xff, PAGE_SIZE);
861 /* set key, plain text and IV */
863 for (j = 0; j < tcount; j++) {
864 if (template[j].klen == *keysize) {
865 key = template[j].key;
870 crypto_ablkcipher_clear_flags(tfm, ~0);
872 ret = crypto_ablkcipher_setkey(tfm, key, *keysize);
874 pr_err("setkey() failed flags=%x\n",
875 crypto_ablkcipher_get_flags(tfm));
879 sg_init_table(sg, TVMEMSIZE);
881 k = *keysize + *b_size;
883 sg_set_buf(sg, tvmem[0] + *keysize,
884 PAGE_SIZE - *keysize);
887 while (k > PAGE_SIZE) {
888 sg_set_buf(sg + j, tvmem[j], PAGE_SIZE);
889 memset(tvmem[j], 0xff, PAGE_SIZE);
893 sg_set_buf(sg + j, tvmem[j], k);
894 memset(tvmem[j], 0xff, k);
896 sg_set_buf(sg, tvmem[0] + *keysize, *b_size);
899 iv_len = crypto_ablkcipher_ivsize(tfm);
901 memset(&iv, 0xff, iv_len);
903 ablkcipher_request_set_crypt(req, sg, sg, *b_size, iv);
906 ret = test_acipher_jiffies(req, enc,
909 ret = test_acipher_cycles(req, enc,
913 pr_err("%s() failed flags=%x\n", e,
914 crypto_ablkcipher_get_flags(tfm));
924 ablkcipher_request_free(req);
926 crypto_free_ablkcipher(tfm);
929 static void test_available(void)
934 printk("alg %s ", *name);
935 printk(crypto_has_alg(*name, 0, 0) ?
936 "found\n" : "not found\n");
941 static inline int tcrypt_test(const char *alg)
945 ret = alg_test(alg, alg, 0, 0);
946 /* non-fips algs return -EINVAL in fips mode */
947 if (fips_enabled && ret == -EINVAL)
952 static int do_test(int m)
959 for (i = 1; i < 200; i++)
964 ret += tcrypt_test("md5");
968 ret += tcrypt_test("sha1");
972 ret += tcrypt_test("ecb(des)");
973 ret += tcrypt_test("cbc(des)");
974 ret += tcrypt_test("ctr(des)");
978 ret += tcrypt_test("ecb(des3_ede)");
979 ret += tcrypt_test("cbc(des3_ede)");
980 ret += tcrypt_test("ctr(des3_ede)");
984 ret += tcrypt_test("md4");
988 ret += tcrypt_test("sha256");
992 ret += tcrypt_test("ecb(blowfish)");
993 ret += tcrypt_test("cbc(blowfish)");
994 ret += tcrypt_test("ctr(blowfish)");
998 ret += tcrypt_test("ecb(twofish)");
999 ret += tcrypt_test("cbc(twofish)");
1000 ret += tcrypt_test("ctr(twofish)");
1001 ret += tcrypt_test("lrw(twofish)");
1002 ret += tcrypt_test("xts(twofish)");
1006 ret += tcrypt_test("ecb(serpent)");
1007 ret += tcrypt_test("cbc(serpent)");
1008 ret += tcrypt_test("ctr(serpent)");
1009 ret += tcrypt_test("lrw(serpent)");
1010 ret += tcrypt_test("xts(serpent)");
1014 ret += tcrypt_test("ecb(aes)");
1015 ret += tcrypt_test("cbc(aes)");
1016 ret += tcrypt_test("lrw(aes)");
1017 ret += tcrypt_test("xts(aes)");
1018 ret += tcrypt_test("ctr(aes)");
1019 ret += tcrypt_test("rfc3686(ctr(aes))");
1023 ret += tcrypt_test("sha384");
1027 ret += tcrypt_test("sha512");
1031 ret += tcrypt_test("deflate");
1035 ret += tcrypt_test("ecb(cast5)");
1036 ret += tcrypt_test("cbc(cast5)");
1037 ret += tcrypt_test("ctr(cast5)");
1041 ret += tcrypt_test("ecb(cast6)");
1042 ret += tcrypt_test("cbc(cast6)");
1043 ret += tcrypt_test("ctr(cast6)");
1044 ret += tcrypt_test("lrw(cast6)");
1045 ret += tcrypt_test("xts(cast6)");
1049 ret += tcrypt_test("ecb(arc4)");
1053 ret += tcrypt_test("michael_mic");
1057 ret += tcrypt_test("crc32c");
1061 ret += tcrypt_test("ecb(tea)");
1065 ret += tcrypt_test("ecb(xtea)");
1069 ret += tcrypt_test("ecb(khazad)");
1073 ret += tcrypt_test("wp512");
1077 ret += tcrypt_test("wp384");
1081 ret += tcrypt_test("wp256");
1085 ret += tcrypt_test("ecb(tnepres)");
1089 ret += tcrypt_test("ecb(anubis)");
1090 ret += tcrypt_test("cbc(anubis)");
1094 ret += tcrypt_test("tgr192");
1099 ret += tcrypt_test("tgr160");
1103 ret += tcrypt_test("tgr128");
1107 ret += tcrypt_test("ecb(xeta)");
1111 ret += tcrypt_test("pcbc(fcrypt)");
1115 ret += tcrypt_test("ecb(camellia)");
1116 ret += tcrypt_test("cbc(camellia)");
1117 ret += tcrypt_test("ctr(camellia)");
1118 ret += tcrypt_test("lrw(camellia)");
1119 ret += tcrypt_test("xts(camellia)");
1122 ret += tcrypt_test("sha224");
1126 ret += tcrypt_test("salsa20");
1130 ret += tcrypt_test("gcm(aes)");
1134 ret += tcrypt_test("lzo");
1138 ret += tcrypt_test("ccm(aes)");
1142 ret += tcrypt_test("cts(cbc(aes))");
1146 ret += tcrypt_test("rmd128");
1150 ret += tcrypt_test("rmd160");
1154 ret += tcrypt_test("rmd256");
1158 ret += tcrypt_test("rmd320");
1162 ret += tcrypt_test("ecb(seed)");
1166 ret += tcrypt_test("zlib");
1170 ret += tcrypt_test("rfc4309(ccm(aes))");
1174 ret += tcrypt_test("ghash");
1178 ret += tcrypt_test("hmac(md5)");
1182 ret += tcrypt_test("hmac(sha1)");
1186 ret += tcrypt_test("hmac(sha256)");
1190 ret += tcrypt_test("hmac(sha384)");
1194 ret += tcrypt_test("hmac(sha512)");
1198 ret += tcrypt_test("hmac(sha224)");
1202 ret += tcrypt_test("xcbc(aes)");
1206 ret += tcrypt_test("hmac(rmd128)");
1210 ret += tcrypt_test("hmac(rmd160)");
1214 ret += tcrypt_test("vmac(aes)");
1217 ret += tcrypt_test("hmac(crc32)");
1221 ret += tcrypt_test("ansi_cprng");
1225 ret += tcrypt_test("rfc4106(gcm(aes))");
1229 test_cipher_speed("ecb(aes)", ENCRYPT, sec, NULL, 0,
1230 speed_template_16_24_32);
1231 test_cipher_speed("ecb(aes)", DECRYPT, sec, NULL, 0,
1232 speed_template_16_24_32);
1233 test_cipher_speed("cbc(aes)", ENCRYPT, sec, NULL, 0,
1234 speed_template_16_24_32);
1235 test_cipher_speed("cbc(aes)", DECRYPT, sec, NULL, 0,
1236 speed_template_16_24_32);
1237 test_cipher_speed("lrw(aes)", ENCRYPT, sec, NULL, 0,
1238 speed_template_32_40_48);
1239 test_cipher_speed("lrw(aes)", DECRYPT, sec, NULL, 0,
1240 speed_template_32_40_48);
1241 test_cipher_speed("xts(aes)", ENCRYPT, sec, NULL, 0,
1242 speed_template_32_48_64);
1243 test_cipher_speed("xts(aes)", DECRYPT, sec, NULL, 0,
1244 speed_template_32_48_64);
1245 test_cipher_speed("ctr(aes)", ENCRYPT, sec, NULL, 0,
1246 speed_template_16_24_32);
1247 test_cipher_speed("ctr(aes)", DECRYPT, sec, NULL, 0,
1248 speed_template_16_24_32);
1252 test_cipher_speed("ecb(des3_ede)", ENCRYPT, sec,
1253 des3_speed_template, DES3_SPEED_VECTORS,
1255 test_cipher_speed("ecb(des3_ede)", DECRYPT, sec,
1256 des3_speed_template, DES3_SPEED_VECTORS,
1258 test_cipher_speed("cbc(des3_ede)", ENCRYPT, sec,
1259 des3_speed_template, DES3_SPEED_VECTORS,
1261 test_cipher_speed("cbc(des3_ede)", DECRYPT, sec,
1262 des3_speed_template, DES3_SPEED_VECTORS,
1267 test_cipher_speed("ecb(twofish)", ENCRYPT, sec, NULL, 0,
1268 speed_template_16_24_32);
1269 test_cipher_speed("ecb(twofish)", DECRYPT, sec, NULL, 0,
1270 speed_template_16_24_32);
1271 test_cipher_speed("cbc(twofish)", ENCRYPT, sec, NULL, 0,
1272 speed_template_16_24_32);
1273 test_cipher_speed("cbc(twofish)", DECRYPT, sec, NULL, 0,
1274 speed_template_16_24_32);
1275 test_cipher_speed("ctr(twofish)", ENCRYPT, sec, NULL, 0,
1276 speed_template_16_24_32);
1277 test_cipher_speed("ctr(twofish)", DECRYPT, sec, NULL, 0,
1278 speed_template_16_24_32);
1279 test_cipher_speed("lrw(twofish)", ENCRYPT, sec, NULL, 0,
1280 speed_template_32_40_48);
1281 test_cipher_speed("lrw(twofish)", DECRYPT, sec, NULL, 0,
1282 speed_template_32_40_48);
1283 test_cipher_speed("xts(twofish)", ENCRYPT, sec, NULL, 0,
1284 speed_template_32_48_64);
1285 test_cipher_speed("xts(twofish)", DECRYPT, sec, NULL, 0,
1286 speed_template_32_48_64);
1290 test_cipher_speed("ecb(blowfish)", ENCRYPT, sec, NULL, 0,
1291 speed_template_8_32);
1292 test_cipher_speed("ecb(blowfish)", DECRYPT, sec, NULL, 0,
1293 speed_template_8_32);
1294 test_cipher_speed("cbc(blowfish)", ENCRYPT, sec, NULL, 0,
1295 speed_template_8_32);
1296 test_cipher_speed("cbc(blowfish)", DECRYPT, sec, NULL, 0,
1297 speed_template_8_32);
1298 test_cipher_speed("ctr(blowfish)", ENCRYPT, sec, NULL, 0,
1299 speed_template_8_32);
1300 test_cipher_speed("ctr(blowfish)", DECRYPT, sec, NULL, 0,
1301 speed_template_8_32);
1305 test_cipher_speed("ecb(des)", ENCRYPT, sec, NULL, 0,
1307 test_cipher_speed("ecb(des)", DECRYPT, sec, NULL, 0,
1309 test_cipher_speed("cbc(des)", ENCRYPT, sec, NULL, 0,
1311 test_cipher_speed("cbc(des)", DECRYPT, sec, NULL, 0,
1316 test_cipher_speed("ecb(camellia)", ENCRYPT, sec, NULL, 0,
1317 speed_template_16_24_32);
1318 test_cipher_speed("ecb(camellia)", DECRYPT, sec, NULL, 0,
1319 speed_template_16_24_32);
1320 test_cipher_speed("cbc(camellia)", ENCRYPT, sec, NULL, 0,
1321 speed_template_16_24_32);
1322 test_cipher_speed("cbc(camellia)", DECRYPT, sec, NULL, 0,
1323 speed_template_16_24_32);
1324 test_cipher_speed("ctr(camellia)", ENCRYPT, sec, NULL, 0,
1325 speed_template_16_24_32);
1326 test_cipher_speed("ctr(camellia)", DECRYPT, sec, NULL, 0,
1327 speed_template_16_24_32);
1328 test_cipher_speed("lrw(camellia)", ENCRYPT, sec, NULL, 0,
1329 speed_template_32_40_48);
1330 test_cipher_speed("lrw(camellia)", DECRYPT, sec, NULL, 0,
1331 speed_template_32_40_48);
1332 test_cipher_speed("xts(camellia)", ENCRYPT, sec, NULL, 0,
1333 speed_template_32_48_64);
1334 test_cipher_speed("xts(camellia)", DECRYPT, sec, NULL, 0,
1335 speed_template_32_48_64);
1339 test_cipher_speed("salsa20", ENCRYPT, sec, NULL, 0,
1340 speed_template_16_32);
1344 test_cipher_speed("ecb(serpent)", ENCRYPT, sec, NULL, 0,
1345 speed_template_16_32);
1346 test_cipher_speed("ecb(serpent)", DECRYPT, sec, NULL, 0,
1347 speed_template_16_32);
1348 test_cipher_speed("cbc(serpent)", ENCRYPT, sec, NULL, 0,
1349 speed_template_16_32);
1350 test_cipher_speed("cbc(serpent)", DECRYPT, sec, NULL, 0,
1351 speed_template_16_32);
1352 test_cipher_speed("ctr(serpent)", ENCRYPT, sec, NULL, 0,
1353 speed_template_16_32);
1354 test_cipher_speed("ctr(serpent)", DECRYPT, sec, NULL, 0,
1355 speed_template_16_32);
1356 test_cipher_speed("lrw(serpent)", ENCRYPT, sec, NULL, 0,
1357 speed_template_32_48);
1358 test_cipher_speed("lrw(serpent)", DECRYPT, sec, NULL, 0,
1359 speed_template_32_48);
1360 test_cipher_speed("xts(serpent)", ENCRYPT, sec, NULL, 0,
1361 speed_template_32_64);
1362 test_cipher_speed("xts(serpent)", DECRYPT, sec, NULL, 0,
1363 speed_template_32_64);
1367 test_cipher_speed("ecb(arc4)", ENCRYPT, sec, NULL, 0,
1372 test_cipher_speed("ecb(cast5)", ENCRYPT, sec, NULL, 0,
1373 speed_template_8_16);
1374 test_cipher_speed("ecb(cast5)", DECRYPT, sec, NULL, 0,
1375 speed_template_8_16);
1376 test_cipher_speed("cbc(cast5)", ENCRYPT, sec, NULL, 0,
1377 speed_template_8_16);
1378 test_cipher_speed("cbc(cast5)", DECRYPT, sec, NULL, 0,
1379 speed_template_8_16);
1380 test_cipher_speed("ctr(cast5)", ENCRYPT, sec, NULL, 0,
1381 speed_template_8_16);
1382 test_cipher_speed("ctr(cast5)", DECRYPT, sec, NULL, 0,
1383 speed_template_8_16);
1387 test_cipher_speed("ecb(cast6)", ENCRYPT, sec, NULL, 0,
1388 speed_template_16_32);
1389 test_cipher_speed("ecb(cast6)", DECRYPT, sec, NULL, 0,
1390 speed_template_16_32);
1391 test_cipher_speed("cbc(cast6)", ENCRYPT, sec, NULL, 0,
1392 speed_template_16_32);
1393 test_cipher_speed("cbc(cast6)", DECRYPT, sec, NULL, 0,
1394 speed_template_16_32);
1395 test_cipher_speed("ctr(cast6)", ENCRYPT, sec, NULL, 0,
1396 speed_template_16_32);
1397 test_cipher_speed("ctr(cast6)", DECRYPT, sec, NULL, 0,
1398 speed_template_16_32);
1399 test_cipher_speed("lrw(cast6)", ENCRYPT, sec, NULL, 0,
1400 speed_template_32_48);
1401 test_cipher_speed("lrw(cast6)", DECRYPT, sec, NULL, 0,
1402 speed_template_32_48);
1403 test_cipher_speed("xts(cast6)", ENCRYPT, sec, NULL, 0,
1404 speed_template_32_64);
1405 test_cipher_speed("xts(cast6)", DECRYPT, sec, NULL, 0,
1406 speed_template_32_64);
1413 test_hash_speed("md4", sec, generic_hash_speed_template);
1414 if (mode > 300 && mode < 400) break;
1417 test_hash_speed("md5", sec, generic_hash_speed_template);
1418 if (mode > 300 && mode < 400) break;
1421 test_hash_speed("sha1", sec, generic_hash_speed_template);
1422 if (mode > 300 && mode < 400) break;
1425 test_hash_speed("sha256", sec, generic_hash_speed_template);
1426 if (mode > 300 && mode < 400) break;
1429 test_hash_speed("sha384", sec, generic_hash_speed_template);
1430 if (mode > 300 && mode < 400) break;
1433 test_hash_speed("sha512", sec, generic_hash_speed_template);
1434 if (mode > 300 && mode < 400) break;
1437 test_hash_speed("wp256", sec, generic_hash_speed_template);
1438 if (mode > 300 && mode < 400) break;
1441 test_hash_speed("wp384", sec, generic_hash_speed_template);
1442 if (mode > 300 && mode < 400) break;
1445 test_hash_speed("wp512", sec, generic_hash_speed_template);
1446 if (mode > 300 && mode < 400) break;
1449 test_hash_speed("tgr128", sec, generic_hash_speed_template);
1450 if (mode > 300 && mode < 400) break;
1453 test_hash_speed("tgr160", sec, generic_hash_speed_template);
1454 if (mode > 300 && mode < 400) break;
1457 test_hash_speed("tgr192", sec, generic_hash_speed_template);
1458 if (mode > 300 && mode < 400) break;
1461 test_hash_speed("sha224", sec, generic_hash_speed_template);
1462 if (mode > 300 && mode < 400) break;
1465 test_hash_speed("rmd128", sec, generic_hash_speed_template);
1466 if (mode > 300 && mode < 400) break;
1469 test_hash_speed("rmd160", sec, generic_hash_speed_template);
1470 if (mode > 300 && mode < 400) break;
1473 test_hash_speed("rmd256", sec, generic_hash_speed_template);
1474 if (mode > 300 && mode < 400) break;
1477 test_hash_speed("rmd320", sec, generic_hash_speed_template);
1478 if (mode > 300 && mode < 400) break;
1481 test_hash_speed("ghash-generic", sec, hash_speed_template_16);
1482 if (mode > 300 && mode < 400) break;
1485 test_hash_speed("crc32c", sec, generic_hash_speed_template);
1486 if (mode > 300 && mode < 400) break;
1495 test_ahash_speed("md4", sec, generic_hash_speed_template);
1496 if (mode > 400 && mode < 500) break;
1499 test_ahash_speed("md5", sec, generic_hash_speed_template);
1500 if (mode > 400 && mode < 500) break;
1503 test_ahash_speed("sha1", sec, generic_hash_speed_template);
1504 if (mode > 400 && mode < 500) break;
1507 test_ahash_speed("sha256", sec, generic_hash_speed_template);
1508 if (mode > 400 && mode < 500) break;
1511 test_ahash_speed("sha384", sec, generic_hash_speed_template);
1512 if (mode > 400 && mode < 500) break;
1515 test_ahash_speed("sha512", sec, generic_hash_speed_template);
1516 if (mode > 400 && mode < 500) break;
1519 test_ahash_speed("wp256", sec, generic_hash_speed_template);
1520 if (mode > 400 && mode < 500) break;
1523 test_ahash_speed("wp384", sec, generic_hash_speed_template);
1524 if (mode > 400 && mode < 500) break;
1527 test_ahash_speed("wp512", sec, generic_hash_speed_template);
1528 if (mode > 400 && mode < 500) break;
1531 test_ahash_speed("tgr128", sec, generic_hash_speed_template);
1532 if (mode > 400 && mode < 500) break;
1535 test_ahash_speed("tgr160", sec, generic_hash_speed_template);
1536 if (mode > 400 && mode < 500) break;
1539 test_ahash_speed("tgr192", sec, generic_hash_speed_template);
1540 if (mode > 400 && mode < 500) break;
1543 test_ahash_speed("sha224", sec, generic_hash_speed_template);
1544 if (mode > 400 && mode < 500) break;
1547 test_ahash_speed("rmd128", sec, generic_hash_speed_template);
1548 if (mode > 400 && mode < 500) break;
1551 test_ahash_speed("rmd160", sec, generic_hash_speed_template);
1552 if (mode > 400 && mode < 500) break;
1555 test_ahash_speed("rmd256", sec, generic_hash_speed_template);
1556 if (mode > 400 && mode < 500) break;
1559 test_ahash_speed("rmd320", sec, generic_hash_speed_template);
1560 if (mode > 400 && mode < 500) break;
1566 test_acipher_speed("ecb(aes)", ENCRYPT, sec, NULL, 0,
1567 speed_template_16_24_32);
1568 test_acipher_speed("ecb(aes)", DECRYPT, sec, NULL, 0,
1569 speed_template_16_24_32);
1570 test_acipher_speed("cbc(aes)", ENCRYPT, sec, NULL, 0,
1571 speed_template_16_24_32);
1572 test_acipher_speed("cbc(aes)", DECRYPT, sec, NULL, 0,
1573 speed_template_16_24_32);
1574 test_acipher_speed("lrw(aes)", ENCRYPT, sec, NULL, 0,
1575 speed_template_32_40_48);
1576 test_acipher_speed("lrw(aes)", DECRYPT, sec, NULL, 0,
1577 speed_template_32_40_48);
1578 test_acipher_speed("xts(aes)", ENCRYPT, sec, NULL, 0,
1579 speed_template_32_48_64);
1580 test_acipher_speed("xts(aes)", DECRYPT, sec, NULL, 0,
1581 speed_template_32_48_64);
1582 test_acipher_speed("ctr(aes)", ENCRYPT, sec, NULL, 0,
1583 speed_template_16_24_32);
1584 test_acipher_speed("ctr(aes)", DECRYPT, sec, NULL, 0,
1585 speed_template_16_24_32);
1586 test_acipher_speed("cfb(aes)", ENCRYPT, sec, NULL, 0,
1587 speed_template_16_24_32);
1588 test_acipher_speed("cfb(aes)", DECRYPT, sec, NULL, 0,
1589 speed_template_16_24_32);
1590 test_acipher_speed("ofb(aes)", ENCRYPT, sec, NULL, 0,
1591 speed_template_16_24_32);
1592 test_acipher_speed("ofb(aes)", DECRYPT, sec, NULL, 0,
1593 speed_template_16_24_32);
1597 test_acipher_speed("ecb(des3_ede)", ENCRYPT, sec,
1598 des3_speed_template, DES3_SPEED_VECTORS,
1600 test_acipher_speed("ecb(des3_ede)", DECRYPT, sec,
1601 des3_speed_template, DES3_SPEED_VECTORS,
1603 test_acipher_speed("cbc(des3_ede)", ENCRYPT, sec,
1604 des3_speed_template, DES3_SPEED_VECTORS,
1606 test_acipher_speed("cbc(des3_ede)", DECRYPT, sec,
1607 des3_speed_template, DES3_SPEED_VECTORS,
1609 test_acipher_speed("cfb(des3_ede)", ENCRYPT, sec,
1610 des3_speed_template, DES3_SPEED_VECTORS,
1612 test_acipher_speed("cfb(des3_ede)", DECRYPT, sec,
1613 des3_speed_template, DES3_SPEED_VECTORS,
1615 test_acipher_speed("ofb(des3_ede)", ENCRYPT, sec,
1616 des3_speed_template, DES3_SPEED_VECTORS,
1618 test_acipher_speed("ofb(des3_ede)", DECRYPT, sec,
1619 des3_speed_template, DES3_SPEED_VECTORS,
1624 test_acipher_speed("ecb(des)", ENCRYPT, sec, NULL, 0,
1626 test_acipher_speed("ecb(des)", DECRYPT, sec, NULL, 0,
1628 test_acipher_speed("cbc(des)", ENCRYPT, sec, NULL, 0,
1630 test_acipher_speed("cbc(des)", DECRYPT, sec, NULL, 0,
1632 test_acipher_speed("cfb(des)", ENCRYPT, sec, NULL, 0,
1634 test_acipher_speed("cfb(des)", DECRYPT, sec, NULL, 0,
1636 test_acipher_speed("ofb(des)", ENCRYPT, sec, NULL, 0,
1638 test_acipher_speed("ofb(des)", DECRYPT, sec, NULL, 0,
1643 test_acipher_speed("ecb(serpent)", ENCRYPT, sec, NULL, 0,
1644 speed_template_16_32);
1645 test_acipher_speed("ecb(serpent)", DECRYPT, sec, NULL, 0,
1646 speed_template_16_32);
1647 test_acipher_speed("cbc(serpent)", ENCRYPT, sec, NULL, 0,
1648 speed_template_16_32);
1649 test_acipher_speed("cbc(serpent)", DECRYPT, sec, NULL, 0,
1650 speed_template_16_32);
1651 test_acipher_speed("ctr(serpent)", ENCRYPT, sec, NULL, 0,
1652 speed_template_16_32);
1653 test_acipher_speed("ctr(serpent)", DECRYPT, sec, NULL, 0,
1654 speed_template_16_32);
1655 test_acipher_speed("lrw(serpent)", ENCRYPT, sec, NULL, 0,
1656 speed_template_32_48);
1657 test_acipher_speed("lrw(serpent)", DECRYPT, sec, NULL, 0,
1658 speed_template_32_48);
1659 test_acipher_speed("xts(serpent)", ENCRYPT, sec, NULL, 0,
1660 speed_template_32_64);
1661 test_acipher_speed("xts(serpent)", DECRYPT, sec, NULL, 0,
1662 speed_template_32_64);
1666 test_acipher_speed("ecb(twofish)", ENCRYPT, sec, NULL, 0,
1667 speed_template_16_24_32);
1668 test_acipher_speed("ecb(twofish)", DECRYPT, sec, NULL, 0,
1669 speed_template_16_24_32);
1670 test_acipher_speed("cbc(twofish)", ENCRYPT, sec, NULL, 0,
1671 speed_template_16_24_32);
1672 test_acipher_speed("cbc(twofish)", DECRYPT, sec, NULL, 0,
1673 speed_template_16_24_32);
1674 test_acipher_speed("ctr(twofish)", ENCRYPT, sec, NULL, 0,
1675 speed_template_16_24_32);
1676 test_acipher_speed("ctr(twofish)", DECRYPT, sec, NULL, 0,
1677 speed_template_16_24_32);
1678 test_acipher_speed("lrw(twofish)", ENCRYPT, sec, NULL, 0,
1679 speed_template_32_40_48);
1680 test_acipher_speed("lrw(twofish)", DECRYPT, sec, NULL, 0,
1681 speed_template_32_40_48);
1682 test_acipher_speed("xts(twofish)", ENCRYPT, sec, NULL, 0,
1683 speed_template_32_48_64);
1684 test_acipher_speed("xts(twofish)", DECRYPT, sec, NULL, 0,
1685 speed_template_32_48_64);
1689 test_acipher_speed("ecb(arc4)", ENCRYPT, sec, NULL, 0,
1694 test_acipher_speed("ecb(cast5)", ENCRYPT, sec, NULL, 0,
1695 speed_template_8_16);
1696 test_acipher_speed("ecb(cast5)", DECRYPT, sec, NULL, 0,
1697 speed_template_8_16);
1698 test_acipher_speed("cbc(cast5)", ENCRYPT, sec, NULL, 0,
1699 speed_template_8_16);
1700 test_acipher_speed("cbc(cast5)", DECRYPT, sec, NULL, 0,
1701 speed_template_8_16);
1702 test_acipher_speed("ctr(cast5)", ENCRYPT, sec, NULL, 0,
1703 speed_template_8_16);
1704 test_acipher_speed("ctr(cast5)", DECRYPT, sec, NULL, 0,
1705 speed_template_8_16);
1709 test_acipher_speed("ecb(cast6)", ENCRYPT, sec, NULL, 0,
1710 speed_template_16_32);
1711 test_acipher_speed("ecb(cast6)", DECRYPT, sec, NULL, 0,
1712 speed_template_16_32);
1713 test_acipher_speed("cbc(cast6)", ENCRYPT, sec, NULL, 0,
1714 speed_template_16_32);
1715 test_acipher_speed("cbc(cast6)", DECRYPT, sec, NULL, 0,
1716 speed_template_16_32);
1717 test_acipher_speed("ctr(cast6)", ENCRYPT, sec, NULL, 0,
1718 speed_template_16_32);
1719 test_acipher_speed("ctr(cast6)", DECRYPT, sec, NULL, 0,
1720 speed_template_16_32);
1721 test_acipher_speed("lrw(cast6)", ENCRYPT, sec, NULL, 0,
1722 speed_template_32_48);
1723 test_acipher_speed("lrw(cast6)", DECRYPT, sec, NULL, 0,
1724 speed_template_32_48);
1725 test_acipher_speed("xts(cast6)", ENCRYPT, sec, NULL, 0,
1726 speed_template_32_64);
1727 test_acipher_speed("xts(cast6)", DECRYPT, sec, NULL, 0,
1728 speed_template_32_64);
1739 static int do_alg_test(const char *alg, u32 type, u32 mask)
1741 return crypto_has_alg(alg, type, mask ?: CRYPTO_ALG_TYPE_MASK) ?
1745 static int __init tcrypt_mod_init(void)
1750 for (i = 0; i < TVMEMSIZE; i++) {
1751 tvmem[i] = (void *)__get_free_page(GFP_KERNEL);
1757 err = do_alg_test(alg, type, mask);
1759 err = do_test(mode);
1762 printk(KERN_ERR "tcrypt: one or more tests failed!\n");
1766 /* We intentionaly return -EAGAIN to prevent keeping the module,
1767 * unless we're running in fips mode. It does all its work from
1768 * init() and doesn't offer any runtime functionality, but in
1769 * the fips case, checking for a successful load is helpful.
1770 * => we don't need it in the memory, do we?
1777 for (i = 0; i < TVMEMSIZE && tvmem[i]; i++)
1778 free_page((unsigned long)tvmem[i]);
1784 * If an init function is provided, an exit function must also be provided
1785 * to allow module unload.
1787 static void __exit tcrypt_mod_fini(void) { }
1789 module_init(tcrypt_mod_init);
1790 module_exit(tcrypt_mod_fini);
1792 module_param(alg, charp, 0);
1793 module_param(type, uint, 0);
1794 module_param(mask, uint, 0);
1795 module_param(mode, int, 0);
1796 module_param(sec, uint, 0);
1797 MODULE_PARM_DESC(sec, "Length in seconds of speed tests "
1798 "(defaults to zero which uses CPU cycles instead)");
1800 MODULE_LICENSE("GPL");
1801 MODULE_DESCRIPTION("Quick & dirty crypto testing module");
1802 MODULE_AUTHOR("James Morris <jmorris@intercode.com.au>");