crypto/tcrypt.c

   1 /*
   2  * Quick & dirty crypto testing module.
   3  *
   4  * This will only exist until we have a better testing mechanism
   5  * (e.g. a char device).
   6  *
   7  * Copyright (c) 2002 James Morris <jmorris@intercode.com.au>
   8  * Copyright (c) 2002 Jean-Francois Dive <jef@linuxbe.org>
   9  * Copyright (c) 2007 Nokia Siemens Networks
  10  *
  11  * Updated RFC4106 AES-GCM testing.
  12  *    Authors: Aidan O'Mahony (aidan.o.mahony@intel.com)
  13  *             Adrian Hoban <adrian.hoban@intel.com>
  14  *             Gabriele Paoloni <gabriele.paoloni@intel.com>
  15  *             Tadeusz Struk (tadeusz.struk@intel.com)
  16  *             Copyright (c) 2010, Intel Corporation.
  17  *
  18  * This program is free software; you can redistribute it and/or modify it
  19  * under the terms of the GNU General Public License as published by the Free
  20  * Software Foundation; either version 2 of the License, or (at your option)
  21  * any later version.
  22  *
  23  */
  24
  25 #include <crypto/hash.h>
  26 #include <linux/err.h>
  27 #include <linux/init.h>
  28 #include <linux/gfp.h>
  29 #include <linux/module.h>
  30 #include <linux/scatterlist.h>
  31 #include <linux/string.h>
  32 #include <linux/moduleparam.h>
  33 #include <linux/jiffies.h>
  34 #include <linux/timex.h>
  35 #include <linux/interrupt.h>
  36 #include "tcrypt.h"
  37 #include "internal.h"
  38
  39 /*
  40  * Need slab memory for testing (size in number of pages).
  41  */
  42 #define TVMEMSIZE       4
  43
  44 /*
  45 * Used by test_cipher_speed()
  46 */
  47 #define ENCRYPT 1
  48 #define DECRYPT 0
  49
  50 /*
  51  * Used by test_cipher_speed()
  52  */
  53 static unsigned int sec;
  54
  55 static char *alg = NULL;
  56 static u32 type;
  57 static u32 mask;
  58 static int mode;
  59 static char *tvmem[TVMEMSIZE];
  60
  61 static char *check[] = {
  62         "des", "md5", "des3_ede", "rot13", "sha1", "sha224", "sha256",
  63         "blowfish", "twofish", "serpent", "sha384", "sha512", "md4", "aes",
  64         "cast6", "arc4", "michael_mic", "deflate", "crc32c", "tea", "xtea",
  65         "khazad", "wp512", "wp384", "wp256", "tnepres", "xeta",  "fcrypt",
  66         "camellia", "seed", "salsa20", "rmd128", "rmd160", "rmd256", "rmd320",
  67         "lzo", "cts", "zlib", NULL
  68 };
  69
  70 static int test_cipher_jiffies(struct blkcipher_desc *desc, int enc,
  71                                struct scatterlist *sg, int blen, int sec)
  72 {
  73         unsigned long start, end;
  74         int bcount;
  75         int ret;
  76
  77         for (start = jiffies, end = start + sec * HZ, bcount = 0;
  78              time_before(jiffies, end); bcount++) {
  79                 if (enc)
  80                         ret = crypto_blkcipher_encrypt(desc, sg, sg, blen);
  81                 else
  82                         ret = crypto_blkcipher_decrypt(desc, sg, sg, blen);
  83
  84                 if (ret)
  85                         return ret;
  86         }
  87
  88         printk("%d operations in %d seconds (%ld bytes)\n",
  89                bcount, sec, (long)bcount * blen);
  90         return 0;
  91 }
  92
  93 static int test_cipher_cycles(struct blkcipher_desc *desc, int enc,
  94                               struct scatterlist *sg, int blen)
  95 {
  96         unsigned long cycles = 0;
  97         int ret = 0;
  98         int i;
  99
 100         local_bh_disable();
 101         local_irq_disable();
 102
 103         /* Warm-up run. */
 104         for (i = 0; i < 4; i++) {
 105                 if (enc)
 106                         ret = crypto_blkcipher_encrypt(desc, sg, sg, blen);
 107                 else
 108                         ret = crypto_blkcipher_decrypt(desc, sg, sg, blen);
 109
 110                 if (ret)
 111                         goto out;
 112         }
 113
 114         /* The real thing. */
 115         for (i = 0; i < 8; i++) {
 116                 cycles_t start, end;
 117
 118                 start = get_cycles();
 119                 if (enc)
 120                         ret = crypto_blkcipher_encrypt(desc, sg, sg, blen);
 121                 else
 122                         ret = crypto_blkcipher_decrypt(desc, sg, sg, blen);
 123                 end = get_cycles();
 124
 125                 if (ret)
 126                         goto out;
 127
 128                 cycles += end - start;
 129         }
 130
 131 out:
 132         local_irq_enable();
 133         local_bh_enable();
 134
 135         if (ret == 0)
 136                 printk("1 operation in %lu cycles (%d bytes)\n",
 137                        (cycles + 4) / 8, blen);
 138
 139         return ret;
 140 }
 141
 142 static u32 block_sizes[] = { 16, 64, 256, 1024, 8192, 0 };
 143
 144 static void test_cipher_speed(const char *algo, int enc, unsigned int sec,
 145                               struct cipher_speed_template *template,
 146                               unsigned int tcount, u8 *keysize)
 147 {
 148         unsigned int ret, i, j, iv_len;
 149         const char *key;
 150         char iv[128];
 151         struct crypto_blkcipher *tfm;
 152         struct blkcipher_desc desc;
 153         const char *e;
 154         u32 *b_size;
 155
 156         if (enc == ENCRYPT)
 157                 e = "encryption";
 158         else
 159                 e = "decryption";
 160
 161         printk("\ntesting speed of %s %s\n", algo, e);
 162
 163         tfm = crypto_alloc_blkcipher(algo, 0, CRYPTO_ALG_ASYNC);
 164
 165         if (IS_ERR(tfm)) {
 166                 printk("failed to load transform for %s: %ld\n", algo,
 167                        PTR_ERR(tfm));
 168                 return;
 169         }
 170         desc.tfm = tfm;
 171         desc.flags = 0;
 172
 173         i = 0;
 174         do {
 175
 176                 b_size = block_sizes;
 177                 do {
 178                         struct scatterlist sg[TVMEMSIZE];
 179
 180                         if ((*keysize + *b_size) > TVMEMSIZE * PAGE_SIZE) {
 181                                 printk("template (%u) too big for "
 182                                        "tvmem (%lu)\n", *keysize + *b_size,
 183                                        TVMEMSIZE * PAGE_SIZE);
 184                                 goto out;
 185                         }
 186
 187                         printk("test %u (%d bit key, %d byte blocks): ", i,
 188                                         *keysize * 8, *b_size);
 189
 190                         memset(tvmem[0], 0xff, PAGE_SIZE);
 191
 192                         /* set key, plain text and IV */
 193                         key = tvmem[0];
 194                         for (j = 0; j < tcount; j++) {
 195                                 if (template[j].klen == *keysize) {
 196                                         key = template[j].key;
 197                                         break;
 198                                 }
 199                         }
 200
 201                         ret = crypto_blkcipher_setkey(tfm, key, *keysize);
 202                         if (ret) {
 203                                 printk("setkey() failed flags=%x\n",
 204                                                 crypto_blkcipher_get_flags(tfm));
 205                                 goto out;
 206                         }
 207
 208                         sg_init_table(sg, TVMEMSIZE);
 209                         sg_set_buf(sg, tvmem[0] + *keysize,
 210                                    PAGE_SIZE - *keysize);
 211                         for (j = 1; j < TVMEMSIZE; j++) {
 212                                 sg_set_buf(sg + j, tvmem[j], PAGE_SIZE);
 213                                 memset (tvmem[j], 0xff, PAGE_SIZE);
 214                         }
 215
 216                         iv_len = crypto_blkcipher_ivsize(tfm);
 217                         if (iv_len) {
 218                                 memset(&iv, 0xff, iv_len);
 219                                 crypto_blkcipher_set_iv(tfm, iv, iv_len);
 220                         }
 221
 222                         if (sec)
 223                                 ret = test_cipher_jiffies(&desc, enc, sg,
 224                                                           *b_size, sec);
 225                         else
 226                                 ret = test_cipher_cycles(&desc, enc, sg,
 227                                                          *b_size);
 228
 229                         if (ret) {
 230                                 printk("%s() failed flags=%x\n", e, desc.flags);
 231                                 break;
 232                         }
 233                         b_size++;
 234                         i++;
 235                 } while (*b_size);
 236                 keysize++;
 237         } while (*keysize);
 238
 239 out:
 240         crypto_free_blkcipher(tfm);
 241 }
 242
 243 static int test_hash_jiffies_digest(struct hash_desc *desc,
 244                                     struct scatterlist *sg, int blen,
 245                                     char *out, int sec)
 246 {
 247         unsigned long start, end;
 248         int bcount;
 249         int ret;
 250
 251         for (start = jiffies, end = start + sec * HZ, bcount = 0;
 252              time_before(jiffies, end); bcount++) {
 253                 ret = crypto_hash_digest(desc, sg, blen, out);
 254                 if (ret)
 255                         return ret;
 256         }
 257
 258         printk("%6u opers/sec, %9lu bytes/sec\n",
 259                bcount / sec, ((long)bcount * blen) / sec);
 260
 261         return 0;
 262 }
 263
 264 static int test_hash_jiffies(struct hash_desc *desc, struct scatterlist *sg,
 265                              int blen, int plen, char *out, int sec)
 266 {
 267         unsigned long start, end;
 268         int bcount, pcount;
 269         int ret;
 270
 271         if (plen == blen)
 272                 return test_hash_jiffies_digest(desc, sg, blen, out, sec);
 273
 274         for (start = jiffies, end = start + sec * HZ, bcount = 0;
 275              time_before(jiffies, end); bcount++) {
 276                 ret = crypto_hash_init(desc);
 277                 if (ret)
 278                         return ret;
 279                 for (pcount = 0; pcount < blen; pcount += plen) {
 280                         ret = crypto_hash_update(desc, sg, plen);
 281                         if (ret)
 282                                 return ret;
 283                 }
 284                 /* we assume there is enough space in 'out' for the result */
 285                 ret = crypto_hash_final(desc, out);
 286                 if (ret)
 287                         return ret;
 288         }
 289
 290         printk("%6u opers/sec, %9lu bytes/sec\n",
 291                bcount / sec, ((long)bcount * blen) / sec);
 292
 293         return 0;
 294 }
 295
 296 static int test_hash_cycles_digest(struct hash_desc *desc,
 297                                    struct scatterlist *sg, int blen, char *out)
 298 {
 299         unsigned long cycles = 0;
 300         int i;
 301         int ret;
 302
 303         local_bh_disable();
 304         local_irq_disable();
 305
 306         /* Warm-up run. */
 307         for (i = 0; i < 4; i++) {
 308                 ret = crypto_hash_digest(desc, sg, blen, out);
 309                 if (ret)
 310                         goto out;
 311         }
 312
 313         /* The real thing. */
 314         for (i = 0; i < 8; i++) {
 315                 cycles_t start, end;
 316
 317                 start = get_cycles();
 318
 319                 ret = crypto_hash_digest(desc, sg, blen, out);
 320                 if (ret)
 321                         goto out;
 322
 323                 end = get_cycles();
 324
 325                 cycles += end - start;
 326         }
 327
 328 out:
 329         local_irq_enable();
 330         local_bh_enable();
 331
 332         if (ret)
 333                 return ret;
 334
 335         printk("%6lu cycles/operation, %4lu cycles/byte\n",
 336                cycles / 8, cycles / (8 * blen));
 337
 338         return 0;
 339 }
 340
 341 static int test_hash_cycles(struct hash_desc *desc, struct scatterlist *sg,
 342                             int blen, int plen, char *out)
 343 {
 344         unsigned long cycles = 0;
 345         int i, pcount;
 346         int ret;
 347
 348         if (plen == blen)
 349                 return test_hash_cycles_digest(desc, sg, blen, out);
 350
 351         local_bh_disable();
 352         local_irq_disable();
 353
 354         /* Warm-up run. */
 355         for (i = 0; i < 4; i++) {
 356                 ret = crypto_hash_init(desc);
 357                 if (ret)
 358                         goto out;
 359                 for (pcount = 0; pcount < blen; pcount += plen) {
 360                         ret = crypto_hash_update(desc, sg, plen);
 361                         if (ret)
 362                                 goto out;
 363                 }
 364                 ret = crypto_hash_final(desc, out);
 365                 if (ret)
 366                         goto out;
 367         }
 368
 369         /* The real thing. */
 370         for (i = 0; i < 8; i++) {
 371                 cycles_t start, end;
 372
 373                 start = get_cycles();
 374
 375                 ret = crypto_hash_init(desc);
 376                 if (ret)
 377                         goto out;
 378                 for (pcount = 0; pcount < blen; pcount += plen) {
 379                         ret = crypto_hash_update(desc, sg, plen);
 380                         if (ret)
 381                                 goto out;
 382                 }
 383                 ret = crypto_hash_final(desc, out);
 384                 if (ret)
 385                         goto out;
 386
 387                 end = get_cycles();
 388
 389                 cycles += end - start;
 390         }
 391
 392 out:
 393         local_irq_enable();
 394         local_bh_enable();
 395
 396         if (ret)
 397                 return ret;
 398
 399         printk("%6lu cycles/operation, %4lu cycles/byte\n",
 400                cycles / 8, cycles / (8 * blen));
 401
 402         return 0;
 403 }
 404
 405 static void test_hash_sg_init(struct scatterlist *sg)
 406 {
 407         int i;
 408
 409         sg_init_table(sg, TVMEMSIZE);
 410         for (i = 0; i < TVMEMSIZE; i++) {
 411                 sg_set_buf(sg + i, tvmem[i], PAGE_SIZE);
 412                 memset(tvmem[i], 0xff, PAGE_SIZE);
 413         }
 414 }
 415
 416 static void test_hash_speed(const char *algo, unsigned int sec,
 417                             struct hash_speed *speed)
 418 {
 419         struct scatterlist sg[TVMEMSIZE];
 420         struct crypto_hash *tfm;
 421         struct hash_desc desc;
 422         static char output[1024];
 423         int i;
 424         int ret;
 425
 426         printk(KERN_INFO "\ntesting speed of %s\n", algo);
 427
 428         tfm = crypto_alloc_hash(algo, 0, CRYPTO_ALG_ASYNC);
 429
 430         if (IS_ERR(tfm)) {
 431                 printk(KERN_ERR "failed to load transform for %s: %ld\n", algo,
 432                        PTR_ERR(tfm));
 433                 return;
 434         }
 435
 436         desc.tfm = tfm;
 437         desc.flags = 0;
 438
 439         if (crypto_hash_digestsize(tfm) > sizeof(output)) {
 440                 printk(KERN_ERR "digestsize(%u) > outputbuffer(%zu)\n",
 441                        crypto_hash_digestsize(tfm), sizeof(output));
 442                 goto out;
 443         }
 444
 445         test_hash_sg_init(sg);
 446         for (i = 0; speed[i].blen != 0; i++) {
 447                 if (speed[i].blen > TVMEMSIZE * PAGE_SIZE) {
 448                         printk(KERN_ERR
 449                                "template (%u) too big for tvmem (%lu)\n",
 450                                speed[i].blen, TVMEMSIZE * PAGE_SIZE);
 451                         goto out;
 452                 }
 453
 454                 if (speed[i].klen)
 455                         crypto_hash_setkey(tfm, tvmem[0], speed[i].klen);
 456
 457                 printk(KERN_INFO "test%3u "
 458                        "(%5u byte blocks,%5u bytes per update,%4u updates): ",
 459                        i, speed[i].blen, speed[i].plen, speed[i].blen / speed[i].plen);
 460
 461                 if (sec)
 462                         ret = test_hash_jiffies(&desc, sg, speed[i].blen,
 463                                                 speed[i].plen, output, sec);
 464                 else
 465                         ret = test_hash_cycles(&desc, sg, speed[i].blen,
 466                                                speed[i].plen, output);
 467
 468                 if (ret) {
 469                         printk(KERN_ERR "hashing failed ret=%d\n", ret);
 470                         break;
 471                 }
 472         }
 473
 474 out:
 475         crypto_free_hash(tfm);
 476 }
 477
 478 struct tcrypt_result {
 479         struct completion completion;
 480         int err;
 481 };
 482
 483 static void tcrypt_complete(struct crypto_async_request *req, int err)
 484 {
 485         struct tcrypt_result *res = req->data;
 486
 487         if (err == -EINPROGRESS)
 488                 return;
 489
 490         res->err = err;
 491         complete(&res->completion);
 492 }
 493
 494 static inline int do_one_ahash_op(struct ahash_request *req, int ret)
 495 {
 496         if (ret == -EINPROGRESS || ret == -EBUSY) {
 497                 struct tcrypt_result *tr = req->base.data;
 498
 499                 ret = wait_for_completion_interruptible(&tr->completion);
 500                 if (!ret)
 501                         ret = tr->err;
 502                 INIT_COMPLETION(tr->completion);
 503         }
 504         return ret;
 505 }
 506
 507 static int test_ahash_jiffies_digest(struct ahash_request *req, int blen,
 508                                      char *out, int sec)
 509 {
 510         unsigned long start, end;
 511         int bcount;
 512         int ret;
 513
 514         for (start = jiffies, end = start + sec * HZ, bcount = 0;
 515              time_before(jiffies, end); bcount++) {
 516                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
 517                 if (ret)
 518                         return ret;
 519         }
 520
 521         printk("%6u opers/sec, %9lu bytes/sec\n",
 522                bcount / sec, ((long)bcount * blen) / sec);
 523
 524         return 0;
 525 }
 526
 527 static int test_ahash_jiffies(struct ahash_request *req, int blen,
 528                               int plen, char *out, int sec)
 529 {
 530         unsigned long start, end;
 531         int bcount, pcount;
 532         int ret;
 533
 534         if (plen == blen)
 535                 return test_ahash_jiffies_digest(req, blen, out, sec);
 536
 537         for (start = jiffies, end = start + sec * HZ, bcount = 0;
 538              time_before(jiffies, end); bcount++) {
 539                 ret = crypto_ahash_init(req);
 540                 if (ret)
 541                         return ret;
 542                 for (pcount = 0; pcount < blen; pcount += plen) {
 543                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
 544                         if (ret)
 545                                 return ret;
 546                 }
 547                 /* we assume there is enough space in 'out' for the result */
 548                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
 549                 if (ret)
 550                         return ret;
 551         }
 552
 553         pr_cont("%6u opers/sec, %9lu bytes/sec\n",
 554                 bcount / sec, ((long)bcount * blen) / sec);
 555
 556         return 0;
 557 }
 558
 559 static int test_ahash_cycles_digest(struct ahash_request *req, int blen,
 560                                     char *out)
 561 {
 562         unsigned long cycles = 0;
 563         int ret, i;
 564
 565         /* Warm-up run. */
 566         for (i = 0; i < 4; i++) {
 567                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
 568                 if (ret)
 569                         goto out;
 570         }
 571
 572         /* The real thing. */
 573         for (i = 0; i < 8; i++) {
 574                 cycles_t start, end;
 575
 576                 start = get_cycles();
 577
 578                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
 579                 if (ret)
 580                         goto out;
 581
 582                 end = get_cycles();
 583
 584                 cycles += end - start;
 585         }
 586
 587 out:
 588         if (ret)
 589                 return ret;
 590
 591         pr_cont("%6lu cycles/operation, %4lu cycles/byte\n",
 592                 cycles / 8, cycles / (8 * blen));
 593
 594         return 0;
 595 }
 596
 597 static int test_ahash_cycles(struct ahash_request *req, int blen,
 598                              int plen, char *out)
 599 {
 600         unsigned long cycles = 0;
 601         int i, pcount, ret;
 602
 603         if (plen == blen)
 604                 return test_ahash_cycles_digest(req, blen, out);
 605
 606         /* Warm-up run. */
 607         for (i = 0; i < 4; i++) {
 608                 ret = crypto_ahash_init(req);
 609                 if (ret)
 610                         goto out;
 611                 for (pcount = 0; pcount < blen; pcount += plen) {
 612                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
 613                         if (ret)
 614                                 goto out;
 615                 }
 616                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
 617                 if (ret)
 618                         goto out;
 619         }
 620
 621         /* The real thing. */
 622         for (i = 0; i < 8; i++) {
 623                 cycles_t start, end;
 624
 625                 start = get_cycles();
 626
 627                 ret = crypto_ahash_init(req);
 628                 if (ret)
 629                         goto out;
 630                 for (pcount = 0; pcount < blen; pcount += plen) {
 631                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
 632                         if (ret)
 633                                 goto out;
 634                 }
 635                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
 636                 if (ret)
 637                         goto out;
 638
 639                 end = get_cycles();
 640
 641                 cycles += end - start;
 642         }
 643
 644 out:
 645         if (ret)
 646                 return ret;
 647
 648         pr_cont("%6lu cycles/operation, %4lu cycles/byte\n",
 649                 cycles / 8, cycles / (8 * blen));
 650
 651         return 0;
 652 }
 653
 654 static void test_ahash_speed(const char *algo, unsigned int sec,
 655                              struct hash_speed *speed)
 656 {
 657         struct scatterlist sg[TVMEMSIZE];
 658         struct tcrypt_result tresult;
 659         struct ahash_request *req;
 660         struct crypto_ahash *tfm;
 661         static char output[1024];
 662         int i, ret;
 663
 664         printk(KERN_INFO "\ntesting speed of async %s\n", algo);
 665
 666         tfm = crypto_alloc_ahash(algo, 0, 0);
 667         if (IS_ERR(tfm)) {
 668                 pr_err("failed to load transform for %s: %ld\n",
 669                        algo, PTR_ERR(tfm));
 670                 return;
 671         }
 672
 673         if (crypto_ahash_digestsize(tfm) > sizeof(output)) {
 674                 pr_err("digestsize(%u) > outputbuffer(%zu)\n",
 675                        crypto_ahash_digestsize(tfm), sizeof(output));
 676                 goto out;
 677         }
 678
 679         test_hash_sg_init(sg);
 680         req = ahash_request_alloc(tfm, GFP_KERNEL);
 681         if (!req) {
 682                 pr_err("ahash request allocation failure\n");
 683                 goto out;
 684         }
 685
 686         init_completion(&tresult.completion);
 687         ahash_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
 688                                    tcrypt_complete, &tresult);
 689
 690         for (i = 0; speed[i].blen != 0; i++) {
 691                 if (speed[i].blen > TVMEMSIZE * PAGE_SIZE) {
 692                         pr_err("template (%u) too big for tvmem (%lu)\n",
 693                                speed[i].blen, TVMEMSIZE * PAGE_SIZE);
 694                         break;
 695                 }
 696
 697                 pr_info("test%3u "
 698                         "(%5u byte blocks,%5u bytes per update,%4u updates): ",
 699                         i, speed[i].blen, speed[i].plen, speed[i].blen / speed[i].plen);
 700
 701                 ahash_request_set_crypt(req, sg, output, speed[i].plen);
 702
 703                 if (sec)
 704                         ret = test_ahash_jiffies(req, speed[i].blen,
 705                                                  speed[i].plen, output, sec);
 706                 else
 707                         ret = test_ahash_cycles(req, speed[i].blen,
 708                                                 speed[i].plen, output);
 709
 710                 if (ret) {
 711                         pr_err("hashing failed ret=%d\n", ret);
 712                         break;
 713                 }
 714         }
 715
 716         ahash_request_free(req);
 717
 718 out:
 719         crypto_free_ahash(tfm);
 720 }
 721
 722 static void test_available(void)
 723 {
 724         char **name = check;
 725
 726         while (*name) {
 727                 printk("alg %s ", *name);
 728                 printk(crypto_has_alg(*name, 0, 0) ?
 729                        "found\n" : "not found\n");
 730                 name++;
 731         }
 732 }
 733
 734 static inline int tcrypt_test(const char *alg)
 735 {
 736         int ret;
 737
 738         ret = alg_test(alg, alg, 0, 0);
 739         /* non-fips algs return -EINVAL in fips mode */
 740         if (fips_enabled && ret == -EINVAL)
 741                 ret = 0;
 742         return ret;
 743 }
 744
 745 static int do_test(int m)
 746 {
 747         int i;
 748         int ret = 0;
 749
 750         switch (m) {
 751         case 0:
 752                 for (i = 1; i < 200; i++)
 753                         ret += do_test(i);
 754                 break;
 755
 756         case 1:
 757                 ret += tcrypt_test("md5");
 758                 break;
 759
 760         case 2:
 761                 ret += tcrypt_test("sha1");
 762                 break;
 763
 764         case 3:
 765                 ret += tcrypt_test("ecb(des)");
 766                 ret += tcrypt_test("cbc(des)");
 767                 break;
 768
 769         case 4:
 770                 ret += tcrypt_test("ecb(des3_ede)");
 771                 ret += tcrypt_test("cbc(des3_ede)");
 772                 break;
 773
 774         case 5:
 775                 ret += tcrypt_test("md4");
 776                 break;
 777
 778         case 6:
 779                 ret += tcrypt_test("sha256");
 780                 break;
 781
 782         case 7:
 783                 ret += tcrypt_test("ecb(blowfish)");
 784                 ret += tcrypt_test("cbc(blowfish)");
 785                 ret += tcrypt_test("ctr(blowfish)");
 786                 break;
 787
 788         case 8:
 789                 ret += tcrypt_test("ecb(twofish)");
 790                 ret += tcrypt_test("cbc(twofish)");
 791                 ret += tcrypt_test("ctr(twofish)");
 792                 break;
 793
 794         case 9:
 795                 ret += tcrypt_test("ecb(serpent)");
 796                 break;
 797
 798         case 10:
 799                 ret += tcrypt_test("ecb(aes)");
 800                 ret += tcrypt_test("cbc(aes)");
 801                 ret += tcrypt_test("lrw(aes)");
 802                 ret += tcrypt_test("xts(aes)");
 803                 ret += tcrypt_test("ctr(aes)");
 804                 ret += tcrypt_test("rfc3686(ctr(aes))");
 805                 break;
 806
 807         case 11:
 808                 ret += tcrypt_test("sha384");
 809                 break;
 810
 811         case 12:
 812                 ret += tcrypt_test("sha512");
 813                 break;
 814
 815         case 13:
 816                 ret += tcrypt_test("deflate");
 817                 break;
 818
 819         case 14:
 820                 ret += tcrypt_test("ecb(cast5)");
 821                 break;
 822
 823         case 15:
 824                 ret += tcrypt_test("ecb(cast6)");
 825                 break;
 826
 827         case 16:
 828                 ret += tcrypt_test("ecb(arc4)");
 829                 break;
 830
 831         case 17:
 832                 ret += tcrypt_test("michael_mic");
 833                 break;
 834
 835         case 18:
 836                 ret += tcrypt_test("crc32c");
 837                 break;
 838
 839         case 19:
 840                 ret += tcrypt_test("ecb(tea)");
 841                 break;
 842
 843         case 20:
 844                 ret += tcrypt_test("ecb(xtea)");
 845                 break;
 846
 847         case 21:
 848                 ret += tcrypt_test("ecb(khazad)");
 849                 break;
 850
 851         case 22:
 852                 ret += tcrypt_test("wp512");
 853                 break;
 854
 855         case 23:
 856                 ret += tcrypt_test("wp384");
 857                 break;
 858
 859         case 24:
 860                 ret += tcrypt_test("wp256");
 861                 break;
 862
 863         case 25:
 864                 ret += tcrypt_test("ecb(tnepres)");
 865                 break;
 866
 867         case 26:
 868                 ret += tcrypt_test("ecb(anubis)");
 869                 ret += tcrypt_test("cbc(anubis)");
 870                 break;
 871
 872         case 27:
 873                 ret += tcrypt_test("tgr192");
 874                 break;
 875
 876         case 28:
 877
 878                 ret += tcrypt_test("tgr160");
 879                 break;
 880
 881         case 29:
 882                 ret += tcrypt_test("tgr128");
 883                 break;
 884
 885         case 30:
 886                 ret += tcrypt_test("ecb(xeta)");
 887                 break;
 888
 889         case 31:
 890                 ret += tcrypt_test("pcbc(fcrypt)");
 891                 break;
 892
 893         case 32:
 894                 ret += tcrypt_test("ecb(camellia)");
 895                 ret += tcrypt_test("cbc(camellia)");
 896                 break;
 897         case 33:
 898                 ret += tcrypt_test("sha224");
 899                 break;
 900
 901         case 34:
 902                 ret += tcrypt_test("salsa20");
 903                 break;
 904
 905         case 35:
 906                 ret += tcrypt_test("gcm(aes)");
 907                 break;
 908
 909         case 36:
 910                 ret += tcrypt_test("lzo");
 911                 break;
 912
 913         case 37:
 914                 ret += tcrypt_test("ccm(aes)");
 915                 break;
 916
 917         case 38:
 918                 ret += tcrypt_test("cts(cbc(aes))");
 919                 break;
 920
 921         case 39:
 922                 ret += tcrypt_test("rmd128");
 923                 break;
 924
 925         case 40:
 926                 ret += tcrypt_test("rmd160");
 927                 break;
 928
 929         case 41:
 930                 ret += tcrypt_test("rmd256");
 931                 break;
 932
 933         case 42:
 934                 ret += tcrypt_test("rmd320");
 935                 break;
 936
 937         case 43:
 938                 ret += tcrypt_test("ecb(seed)");
 939                 break;
 940
 941         case 44:
 942                 ret += tcrypt_test("zlib");
 943                 break;
 944
 945         case 45:
 946                 ret += tcrypt_test("rfc4309(ccm(aes))");
 947                 break;
 948
 949         case 100:
 950                 ret += tcrypt_test("hmac(md5)");
 951                 break;
 952
 953         case 101:
 954                 ret += tcrypt_test("hmac(sha1)");
 955                 break;
 956
 957         case 102:
 958                 ret += tcrypt_test("hmac(sha256)");
 959                 break;
 960
 961         case 103:
 962                 ret += tcrypt_test("hmac(sha384)");
 963                 break;
 964
 965         case 104:
 966                 ret += tcrypt_test("hmac(sha512)");
 967                 break;
 968
 969         case 105:
 970                 ret += tcrypt_test("hmac(sha224)");
 971                 break;
 972
 973         case 106:
 974                 ret += tcrypt_test("xcbc(aes)");
 975                 break;
 976
 977         case 107:
 978                 ret += tcrypt_test("hmac(rmd128)");
 979                 break;
 980
 981         case 108:
 982                 ret += tcrypt_test("hmac(rmd160)");
 983                 break;
 984
 985         case 109:
 986                 ret += tcrypt_test("vmac(aes)");
 987                 break;
 988
 989         case 150:
 990                 ret += tcrypt_test("ansi_cprng");
 991                 break;
 992
 993         case 151:
 994                 ret += tcrypt_test("rfc4106(gcm(aes))");
 995                 break;
 996
 997         case 200:
 998                 test_cipher_speed("ecb(aes)", ENCRYPT, sec, NULL, 0,
 999                                 speed_template_16_24_32);
1000                 test_cipher_speed("ecb(aes)", DECRYPT, sec, NULL, 0,
1001                                 speed_template_16_24_32);
1002                 test_cipher_speed("cbc(aes)", ENCRYPT, sec, NULL, 0,
1003                                 speed_template_16_24_32);
1004                 test_cipher_speed("cbc(aes)", DECRYPT, sec, NULL, 0,
1005                                 speed_template_16_24_32);
1006                 test_cipher_speed("lrw(aes)", ENCRYPT, sec, NULL, 0,
1007                                 speed_template_32_40_48);
1008                 test_cipher_speed("lrw(aes)", DECRYPT, sec, NULL, 0,
1009                                 speed_template_32_40_48);
1010                 test_cipher_speed("xts(aes)", ENCRYPT, sec, NULL, 0,
1011                                 speed_template_32_48_64);
1012                 test_cipher_speed("xts(aes)", DECRYPT, sec, NULL, 0,
1013                                 speed_template_32_48_64);
1014                 test_cipher_speed("ctr(aes)", ENCRYPT, sec, NULL, 0,
1015                                 speed_template_16_24_32);
1016                 test_cipher_speed("ctr(aes)", DECRYPT, sec, NULL, 0,
1017                                 speed_template_16_24_32);
1018                 break;
1019
1020         case 201:
1021                 test_cipher_speed("ecb(des3_ede)", ENCRYPT, sec,
1022                                 des3_speed_template, DES3_SPEED_VECTORS,
1023                                 speed_template_24);
1024                 test_cipher_speed("ecb(des3_ede)", DECRYPT, sec,
1025                                 des3_speed_template, DES3_SPEED_VECTORS,
1026                                 speed_template_24);
1027                 test_cipher_speed("cbc(des3_ede)", ENCRYPT, sec,
1028                                 des3_speed_template, DES3_SPEED_VECTORS,
1029                                 speed_template_24);
1030                 test_cipher_speed("cbc(des3_ede)", DECRYPT, sec,
1031                                 des3_speed_template, DES3_SPEED_VECTORS,
1032                                 speed_template_24);
1033                 break;
1034
1035         case 202:
1036                 test_cipher_speed("ecb(twofish)", ENCRYPT, sec, NULL, 0,
1037                                 speed_template_16_24_32);
1038                 test_cipher_speed("ecb(twofish)", DECRYPT, sec, NULL, 0,
1039                                 speed_template_16_24_32);
1040                 test_cipher_speed("cbc(twofish)", ENCRYPT, sec, NULL, 0,
1041                                 speed_template_16_24_32);
1042                 test_cipher_speed("cbc(twofish)", DECRYPT, sec, NULL, 0,
1043                                 speed_template_16_24_32);
1044                 test_cipher_speed("ctr(twofish)", ENCRYPT, sec, NULL, 0,
1045                                 speed_template_16_24_32);
1046                 test_cipher_speed("ctr(twofish)", DECRYPT, sec, NULL, 0,
1047                                 speed_template_16_24_32);
1048                 break;
1049
1050         case 203:
1051                 test_cipher_speed("ecb(blowfish)", ENCRYPT, sec, NULL, 0,
1052                                   speed_template_8_32);
1053                 test_cipher_speed("ecb(blowfish)", DECRYPT, sec, NULL, 0,
1054                                   speed_template_8_32);
1055                 test_cipher_speed("cbc(blowfish)", ENCRYPT, sec, NULL, 0,
1056                                   speed_template_8_32);
1057                 test_cipher_speed("cbc(blowfish)", DECRYPT, sec, NULL, 0,
1058                                   speed_template_8_32);
1059                 test_cipher_speed("ctr(blowfish)", ENCRYPT, sec, NULL, 0,
1060                                   speed_template_8_32);
1061                 test_cipher_speed("ctr(blowfish)", DECRYPT, sec, NULL, 0,
1062                                   speed_template_8_32);
1063                 break;
1064
1065         case 204:
1066                 test_cipher_speed("ecb(des)", ENCRYPT, sec, NULL, 0,
1067                                   speed_template_8);
1068                 test_cipher_speed("ecb(des)", DECRYPT, sec, NULL, 0,
1069                                   speed_template_8);
1070                 test_cipher_speed("cbc(des)", ENCRYPT, sec, NULL, 0,
1071                                   speed_template_8);
1072                 test_cipher_speed("cbc(des)", DECRYPT, sec, NULL, 0,
1073                                   speed_template_8);
1074                 break;
1075
1076         case 205:
1077                 test_cipher_speed("ecb(camellia)", ENCRYPT, sec, NULL, 0,
1078                                 speed_template_16_24_32);
1079                 test_cipher_speed("ecb(camellia)", DECRYPT, sec, NULL, 0,
1080                                 speed_template_16_24_32);
1081                 test_cipher_speed("cbc(camellia)", ENCRYPT, sec, NULL, 0,
1082                                 speed_template_16_24_32);
1083                 test_cipher_speed("cbc(camellia)", DECRYPT, sec, NULL, 0,
1084                                 speed_template_16_24_32);
1085                 break;
1086
1087         case 206:
1088                 test_cipher_speed("salsa20", ENCRYPT, sec, NULL, 0,
1089                                   speed_template_16_32);
1090                 break;
1091
1092         case 300:
1093                 /* fall through */
1094
1095         case 301:
1096                 test_hash_speed("md4", sec, generic_hash_speed_template);
1097                 if (mode > 300 && mode < 400) break;
1098
1099         case 302:
1100                 test_hash_speed("md5", sec, generic_hash_speed_template);
1101                 if (mode > 300 && mode < 400) break;
1102
1103         case 303:
1104                 test_hash_speed("sha1", sec, generic_hash_speed_template);
1105                 if (mode > 300 && mode < 400) break;
1106
1107         case 304:
1108                 test_hash_speed("sha256", sec, generic_hash_speed_template);
1109                 if (mode > 300 && mode < 400) break;
1110
1111         case 305:
1112                 test_hash_speed("sha384", sec, generic_hash_speed_template);
1113                 if (mode > 300 && mode < 400) break;
1114
1115         case 306:
1116                 test_hash_speed("sha512", sec, generic_hash_speed_template);
1117                 if (mode > 300 && mode < 400) break;
1118
1119         case 307:
1120                 test_hash_speed("wp256", sec, generic_hash_speed_template);
1121                 if (mode > 300 && mode < 400) break;
1122
1123         case 308:
1124                 test_hash_speed("wp384", sec, generic_hash_speed_template);
1125                 if (mode > 300 && mode < 400) break;
1126
1127         case 309:
1128                 test_hash_speed("wp512", sec, generic_hash_speed_template);
1129                 if (mode > 300 && mode < 400) break;
1130
1131         case 310:
1132                 test_hash_speed("tgr128", sec, generic_hash_speed_template);
1133                 if (mode > 300 && mode < 400) break;
1134
1135         case 311:
1136                 test_hash_speed("tgr160", sec, generic_hash_speed_template);
1137                 if (mode > 300 && mode < 400) break;
1138
1139         case 312:
1140                 test_hash_speed("tgr192", sec, generic_hash_speed_template);
1141                 if (mode > 300 && mode < 400) break;
1142
1143         case 313:
1144                 test_hash_speed("sha224", sec, generic_hash_speed_template);
1145                 if (mode > 300 && mode < 400) break;
1146
1147         case 314:
1148                 test_hash_speed("rmd128", sec, generic_hash_speed_template);
1149                 if (mode > 300 && mode < 400) break;
1150
1151         case 315:
1152                 test_hash_speed("rmd160", sec, generic_hash_speed_template);
1153                 if (mode > 300 && mode < 400) break;
1154
1155         case 316:
1156                 test_hash_speed("rmd256", sec, generic_hash_speed_template);
1157                 if (mode > 300 && mode < 400) break;
1158
1159         case 317:
1160                 test_hash_speed("rmd320", sec, generic_hash_speed_template);
1161                 if (mode > 300 && mode < 400) break;
1162
1163         case 318:
1164                 test_hash_speed("ghash-generic", sec, hash_speed_template_16);
1165                 if (mode > 300 && mode < 400) break;
1166
1167         case 399:
1168                 break;
1169
1170         case 400:
1171                 /* fall through */
1172
1173         case 401:
1174                 test_ahash_speed("md4", sec, generic_hash_speed_template);
1175                 if (mode > 400 && mode < 500) break;
1176
1177         case 402:
1178                 test_ahash_speed("md5", sec, generic_hash_speed_template);
1179                 if (mode > 400 && mode < 500) break;
1180
1181         case 403:
1182                 test_ahash_speed("sha1", sec, generic_hash_speed_template);
1183                 if (mode > 400 && mode < 500) break;
1184
1185         case 404:
1186                 test_ahash_speed("sha256", sec, generic_hash_speed_template);
1187                 if (mode > 400 && mode < 500) break;
1188
1189         case 405:
1190                 test_ahash_speed("sha384", sec, generic_hash_speed_template);
1191                 if (mode > 400 && mode < 500) break;
1192
1193         case 406:
1194                 test_ahash_speed("sha512", sec, generic_hash_speed_template);
1195                 if (mode > 400 && mode < 500) break;
1196
1197         case 407:
1198                 test_ahash_speed("wp256", sec, generic_hash_speed_template);
1199                 if (mode > 400 && mode < 500) break;
1200
1201         case 408:
1202                 test_ahash_speed("wp384", sec, generic_hash_speed_template);
1203                 if (mode > 400 && mode < 500) break;
1204
1205         case 409:
1206                 test_ahash_speed("wp512", sec, generic_hash_speed_template);
1207                 if (mode > 400 && mode < 500) break;
1208
1209         case 410:
1210                 test_ahash_speed("tgr128", sec, generic_hash_speed_template);
1211                 if (mode > 400 && mode < 500) break;
1212
1213         case 411:
1214                 test_ahash_speed("tgr160", sec, generic_hash_speed_template);
1215                 if (mode > 400 && mode < 500) break;
1216
1217         case 412:
1218                 test_ahash_speed("tgr192", sec, generic_hash_speed_template);
1219                 if (mode > 400 && mode < 500) break;
1220
1221         case 413:
1222                 test_ahash_speed("sha224", sec, generic_hash_speed_template);
1223                 if (mode > 400 && mode < 500) break;
1224
1225         case 414:
1226                 test_ahash_speed("rmd128", sec, generic_hash_speed_template);
1227                 if (mode > 400 && mode < 500) break;
1228
1229         case 415:
1230                 test_ahash_speed("rmd160", sec, generic_hash_speed_template);
1231                 if (mode > 400 && mode < 500) break;
1232
1233         case 416:
1234                 test_ahash_speed("rmd256", sec, generic_hash_speed_template);
1235                 if (mode > 400 && mode < 500) break;
1236
1237         case 417:
1238                 test_ahash_speed("rmd320", sec, generic_hash_speed_template);
1239                 if (mode > 400 && mode < 500) break;
1240
1241         case 499:
1242                 break;
1243
1244         case 1000:
1245                 test_available();
1246                 break;
1247         }
1248
1249         return ret;
1250 }
1251
1252 static int do_alg_test(const char *alg, u32 type, u32 mask)
1253 {
1254         return crypto_has_alg(alg, type, mask ?: CRYPTO_ALG_TYPE_MASK) ?
1255                0 : -ENOENT;
1256 }
1257
1258 static int __init tcrypt_mod_init(void)
1259 {
1260         int err = -ENOMEM;
1261         int i;
1262
1263         for (i = 0; i < TVMEMSIZE; i++) {
1264                 tvmem[i] = (void *)__get_free_page(GFP_KERNEL);
1265                 if (!tvmem[i])
1266                         goto err_free_tv;
1267         }
1268
1269         if (alg)
1270                 err = do_alg_test(alg, type, mask);
1271         else
1272                 err = do_test(mode);
1273
1274         if (err) {
1275                 printk(KERN_ERR "tcrypt: one or more tests failed!\n");
1276                 goto err_free_tv;
1277         }
1278
1279         /* We intentionaly return -EAGAIN to prevent keeping the module,
1280          * unless we're running in fips mode. It does all its work from
1281          * init() and doesn't offer any runtime functionality, but in
1282          * the fips case, checking for a successful load is helpful.
1283          * => we don't need it in the memory, do we?
1284          *                                        -- mludvig
1285          */
1286         if (!fips_enabled)
1287                 err = -EAGAIN;
1288
1289 err_free_tv:
1290         for (i = 0; i < TVMEMSIZE && tvmem[i]; i++)
1291                 free_page((unsigned long)tvmem[i]);
1292
1293         return err;
1294 }
1295
1296 /*
1297  * If an init function is provided, an exit function must also be provided
1298  * to allow module unload.
1299  */
1300 static void __exit tcrypt_mod_fini(void) { }
1301
1302 module_init(tcrypt_mod_init);
1303 module_exit(tcrypt_mod_fini);
1304
1305 module_param(alg, charp, 0);
1306 module_param(type, uint, 0);
1307 module_param(mask, uint, 0);
1308 module_param(mode, int, 0);
1309 module_param(sec, uint, 0);
1310 MODULE_PARM_DESC(sec, "Length in seconds of speed tests "
1311                       "(defaults to zero which uses CPU cycles instead)");
1312
1313 MODULE_LICENSE("GPL");
1314 MODULE_DESCRIPTION("Quick & dirty crypto testing module");
1315 MODULE_AUTHOR("James Morris <jmorris@intercode.com.au>");