linux.git/crypto/testmgr.h, branch v5.12.5

crypto: serpent - get rid of obsolete tnepres variant

2021-02-10T06:55:56+00:00

It is not trivial to trace back why exactly the tnepres variant of
serpent was added ~17 years ago - Google searches come up mostly empty,
but it seems to be related with the 'kerneli' version, which was based
on an incorrect interpretation of the serpent spec.

In other words, nobody is likely to care anymore today, so let's get rid
of it.

Signed-off-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu

crypto: salsa20 - remove Salsa20 stream cipher algorithm

2021-01-29T05:07:04+00:00

Salsa20 is not used anywhere in the kernel, is not suitable for disk
encryption, and widely considered to have been superseded by ChaCha20.
So let's remove it.

Signed-off-by: Ard Biesheuvel 
Acked-by:  Mike Snitzer 
Signed-off-by: Herbert Xu

crypto: tgr192 - remove Tiger 128/160/192 hash algorithms

2021-01-29T05:07:04+00:00

Tiger is never referenced anywhere in the kernel, and unlikely
to be depended upon by userspace via AF_ALG. So let's remove it.

Signed-off-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu

crypto: rmd320 - remove RIPE-MD 320 hash algorithm

2021-01-29T05:07:04+00:00

RIPE-MD 320 is never referenced anywhere in the kernel, and unlikely
to be depended upon by userspace via AF_ALG. So let's remove it

Signed-off-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu

crypto: rmd256 - remove RIPE-MD 256 hash algorithm

2021-01-29T05:07:03+00:00

RIPE-MD 256 is never referenced anywhere in the kernel, and unlikely
to be depended upon by userspace via AF_ALG. So let's remove it

Signed-off-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu

crypto: rmd128 - remove RIPE-MD 128 hash algorithm

2021-01-29T05:07:03+00:00

RIPE-MD 128 is never referenced anywhere in the kernel, and unlikely
to be depended upon by userspace via AF_ALG. So let's remove it.

Signed-off-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu

crypto: sm2 - add SM2 test vectors to testmgr

2020-09-25T07:48:54+00:00

Add testmgr test vectors for SM2 algorithm. These vectors come
from `openssl pkeyutl -sign` and libgcrypt.

Signed-off-by: Tianjia Zhang 
Tested-by: Xufeng Zhang 
Signed-off-by: Herbert Xu

crypto: testmgr - delete duplicated words

2020-07-23T07:34:20+00:00

Delete the doubled word "from" in multiple places.

Signed-off-by: Randy Dunlap 
Cc: Herbert Xu 
Cc: "David S. Miller" 
Cc: linux-crypto@vger.kernel.org
Signed-off-by: Herbert Xu

crypto: testmgr - generate inauthentic AEAD test vectors

2019-12-11T08:37:01+00:00

The whole point of using an AEAD over length-preserving encryption is
that the data is authenticated.  However currently the fuzz tests don't
test any inauthentic inputs to verify that the data is actually being
authenticated.  And only two algorithms ("rfc4543(gcm(aes))" and
"ccm(aes)") even have any inauthentic test vectors at all.

Therefore, update the AEAD fuzz tests to sometimes generate inauthentic
test vectors, either by generating a (ciphertext, AAD) pair without
using the key, or by mutating an authentic pair that was generated.

To avoid flakiness, only assume this works reliably if the auth tag is
at least 8 bytes.  Also account for the rfc4106, rfc4309, and rfc7539esp
algorithms intentionally ignoring the last 8 AAD bytes, and for some
algorithms doing extra checks that result in EINVAL rather than EBADMSG.

Signed-off-by: Eric Biggers 
Signed-off-by: Herbert Xu

crypto: curve25519 - add kpp selftest

2019-11-17T01:02:43+00:00

In preparation of introducing KPP implementations of Curve25519, import
the set of test cases proposed by the Zinc patch set, but converted to
the KPP format.

Signed-off-by: Ard Biesheuvel 
Signed-off-by: Herbert Xu