crypto: testmgr - add twofish tests
[linux-3.10.git] / crypto / tcrypt.c
1 /*
2  * Quick & dirty crypto testing module.
3  *
4  * This will only exist until we have a better testing mechanism
5  * (e.g. a char device).
6  *
7  * Copyright (c) 2002 James Morris <jmorris@intercode.com.au>
8  * Copyright (c) 2002 Jean-Francois Dive <jef@linuxbe.org>
9  * Copyright (c) 2007 Nokia Siemens Networks
10  *
11  * Updated RFC4106 AES-GCM testing.
12  *    Authors: Aidan O'Mahony (aidan.o.mahony@intel.com)
13  *             Adrian Hoban <adrian.hoban@intel.com>
14  *             Gabriele Paoloni <gabriele.paoloni@intel.com>
15  *             Tadeusz Struk (tadeusz.struk@intel.com)
16  *             Copyright (c) 2010, Intel Corporation.
17  *
18  * This program is free software; you can redistribute it and/or modify it
19  * under the terms of the GNU General Public License as published by the Free
20  * Software Foundation; either version 2 of the License, or (at your option)
21  * any later version.
22  *
23  */
24
25 #include <crypto/hash.h>
26 #include <linux/err.h>
27 #include <linux/init.h>
28 #include <linux/gfp.h>
29 #include <linux/module.h>
30 #include <linux/scatterlist.h>
31 #include <linux/string.h>
32 #include <linux/moduleparam.h>
33 #include <linux/jiffies.h>
34 #include <linux/timex.h>
35 #include <linux/interrupt.h>
36 #include "tcrypt.h"
37 #include "internal.h"
38
39 /*
40  * Need slab memory for testing (size in number of pages).
41  */
42 #define TVMEMSIZE       4
43
44 /*
45 * Used by test_cipher_speed()
46 */
47 #define ENCRYPT 1
48 #define DECRYPT 0
49
50 /*
51  * Used by test_cipher_speed()
52  */
53 static unsigned int sec;
54
55 static char *alg = NULL;
56 static u32 type;
57 static u32 mask;
58 static int mode;
59 static char *tvmem[TVMEMSIZE];
60
61 static char *check[] = {
62         "des", "md5", "des3_ede", "rot13", "sha1", "sha224", "sha256",
63         "blowfish", "twofish", "serpent", "sha384", "sha512", "md4", "aes",
64         "cast6", "arc4", "michael_mic", "deflate", "crc32c", "tea", "xtea",
65         "khazad", "wp512", "wp384", "wp256", "tnepres", "xeta",  "fcrypt",
66         "camellia", "seed", "salsa20", "rmd128", "rmd160", "rmd256", "rmd320",
67         "lzo", "cts", "zlib", NULL
68 };
69
70 static int test_cipher_jiffies(struct blkcipher_desc *desc, int enc,
71                                struct scatterlist *sg, int blen, int sec)
72 {
73         unsigned long start, end;
74         int bcount;
75         int ret;
76
77         for (start = jiffies, end = start + sec * HZ, bcount = 0;
78              time_before(jiffies, end); bcount++) {
79                 if (enc)
80                         ret = crypto_blkcipher_encrypt(desc, sg, sg, blen);
81                 else
82                         ret = crypto_blkcipher_decrypt(desc, sg, sg, blen);
83
84                 if (ret)
85                         return ret;
86         }
87
88         printk("%d operations in %d seconds (%ld bytes)\n",
89                bcount, sec, (long)bcount * blen);
90         return 0;
91 }
92
93 static int test_cipher_cycles(struct blkcipher_desc *desc, int enc,
94                               struct scatterlist *sg, int blen)
95 {
96         unsigned long cycles = 0;
97         int ret = 0;
98         int i;
99
100         local_bh_disable();
101         local_irq_disable();
102
103         /* Warm-up run. */
104         for (i = 0; i < 4; i++) {
105                 if (enc)
106                         ret = crypto_blkcipher_encrypt(desc, sg, sg, blen);
107                 else
108                         ret = crypto_blkcipher_decrypt(desc, sg, sg, blen);
109
110                 if (ret)
111                         goto out;
112         }
113
114         /* The real thing. */
115         for (i = 0; i < 8; i++) {
116                 cycles_t start, end;
117
118                 start = get_cycles();
119                 if (enc)
120                         ret = crypto_blkcipher_encrypt(desc, sg, sg, blen);
121                 else
122                         ret = crypto_blkcipher_decrypt(desc, sg, sg, blen);
123                 end = get_cycles();
124
125                 if (ret)
126                         goto out;
127
128                 cycles += end - start;
129         }
130
131 out:
132         local_irq_enable();
133         local_bh_enable();
134
135         if (ret == 0)
136                 printk("1 operation in %lu cycles (%d bytes)\n",
137                        (cycles + 4) / 8, blen);
138
139         return ret;
140 }
141
142 static u32 block_sizes[] = { 16, 64, 256, 1024, 8192, 0 };
143
144 static void test_cipher_speed(const char *algo, int enc, unsigned int sec,
145                               struct cipher_speed_template *template,
146                               unsigned int tcount, u8 *keysize)
147 {
148         unsigned int ret, i, j, iv_len;
149         const char *key;
150         char iv[128];
151         struct crypto_blkcipher *tfm;
152         struct blkcipher_desc desc;
153         const char *e;
154         u32 *b_size;
155
156         if (enc == ENCRYPT)
157                 e = "encryption";
158         else
159                 e = "decryption";
160
161         printk("\ntesting speed of %s %s\n", algo, e);
162
163         tfm = crypto_alloc_blkcipher(algo, 0, CRYPTO_ALG_ASYNC);
164
165         if (IS_ERR(tfm)) {
166                 printk("failed to load transform for %s: %ld\n", algo,
167                        PTR_ERR(tfm));
168                 return;
169         }
170         desc.tfm = tfm;
171         desc.flags = 0;
172
173         i = 0;
174         do {
175
176                 b_size = block_sizes;
177                 do {
178                         struct scatterlist sg[TVMEMSIZE];
179
180                         if ((*keysize + *b_size) > TVMEMSIZE * PAGE_SIZE) {
181                                 printk("template (%u) too big for "
182                                        "tvmem (%lu)\n", *keysize + *b_size,
183                                        TVMEMSIZE * PAGE_SIZE);
184                                 goto out;
185                         }
186
187                         printk("test %u (%d bit key, %d byte blocks): ", i,
188                                         *keysize * 8, *b_size);
189
190                         memset(tvmem[0], 0xff, PAGE_SIZE);
191
192                         /* set key, plain text and IV */
193                         key = tvmem[0];
194                         for (j = 0; j < tcount; j++) {
195                                 if (template[j].klen == *keysize) {
196                                         key = template[j].key;
197                                         break;
198                                 }
199                         }
200
201                         ret = crypto_blkcipher_setkey(tfm, key, *keysize);
202                         if (ret) {
203                                 printk("setkey() failed flags=%x\n",
204                                                 crypto_blkcipher_get_flags(tfm));
205                                 goto out;
206                         }
207
208                         sg_init_table(sg, TVMEMSIZE);
209                         sg_set_buf(sg, tvmem[0] + *keysize,
210                                    PAGE_SIZE - *keysize);
211                         for (j = 1; j < TVMEMSIZE; j++) {
212                                 sg_set_buf(sg + j, tvmem[j], PAGE_SIZE);
213                                 memset (tvmem[j], 0xff, PAGE_SIZE);
214                         }
215
216                         iv_len = crypto_blkcipher_ivsize(tfm);
217                         if (iv_len) {
218                                 memset(&iv, 0xff, iv_len);
219                                 crypto_blkcipher_set_iv(tfm, iv, iv_len);
220                         }
221
222                         if (sec)
223                                 ret = test_cipher_jiffies(&desc, enc, sg,
224                                                           *b_size, sec);
225                         else
226                                 ret = test_cipher_cycles(&desc, enc, sg,
227                                                          *b_size);
228
229                         if (ret) {
230                                 printk("%s() failed flags=%x\n", e, desc.flags);
231                                 break;
232                         }
233                         b_size++;
234                         i++;
235                 } while (*b_size);
236                 keysize++;
237         } while (*keysize);
238
239 out:
240         crypto_free_blkcipher(tfm);
241 }
242
243 static int test_hash_jiffies_digest(struct hash_desc *desc,
244                                     struct scatterlist *sg, int blen,
245                                     char *out, int sec)
246 {
247         unsigned long start, end;
248         int bcount;
249         int ret;
250
251         for (start = jiffies, end = start + sec * HZ, bcount = 0;
252              time_before(jiffies, end); bcount++) {
253                 ret = crypto_hash_digest(desc, sg, blen, out);
254                 if (ret)
255                         return ret;
256         }
257
258         printk("%6u opers/sec, %9lu bytes/sec\n",
259                bcount / sec, ((long)bcount * blen) / sec);
260
261         return 0;
262 }
263
264 static int test_hash_jiffies(struct hash_desc *desc, struct scatterlist *sg,
265                              int blen, int plen, char *out, int sec)
266 {
267         unsigned long start, end;
268         int bcount, pcount;
269         int ret;
270
271         if (plen == blen)
272                 return test_hash_jiffies_digest(desc, sg, blen, out, sec);
273
274         for (start = jiffies, end = start + sec * HZ, bcount = 0;
275              time_before(jiffies, end); bcount++) {
276                 ret = crypto_hash_init(desc);
277                 if (ret)
278                         return ret;
279                 for (pcount = 0; pcount < blen; pcount += plen) {
280                         ret = crypto_hash_update(desc, sg, plen);
281                         if (ret)
282                                 return ret;
283                 }
284                 /* we assume there is enough space in 'out' for the result */
285                 ret = crypto_hash_final(desc, out);
286                 if (ret)
287                         return ret;
288         }
289
290         printk("%6u opers/sec, %9lu bytes/sec\n",
291                bcount / sec, ((long)bcount * blen) / sec);
292
293         return 0;
294 }
295
296 static int test_hash_cycles_digest(struct hash_desc *desc,
297                                    struct scatterlist *sg, int blen, char *out)
298 {
299         unsigned long cycles = 0;
300         int i;
301         int ret;
302
303         local_bh_disable();
304         local_irq_disable();
305
306         /* Warm-up run. */
307         for (i = 0; i < 4; i++) {
308                 ret = crypto_hash_digest(desc, sg, blen, out);
309                 if (ret)
310                         goto out;
311         }
312
313         /* The real thing. */
314         for (i = 0; i < 8; i++) {
315                 cycles_t start, end;
316
317                 start = get_cycles();
318
319                 ret = crypto_hash_digest(desc, sg, blen, out);
320                 if (ret)
321                         goto out;
322
323                 end = get_cycles();
324
325                 cycles += end - start;
326         }
327
328 out:
329         local_irq_enable();
330         local_bh_enable();
331
332         if (ret)
333                 return ret;
334
335         printk("%6lu cycles/operation, %4lu cycles/byte\n",
336                cycles / 8, cycles / (8 * blen));
337
338         return 0;
339 }
340
341 static int test_hash_cycles(struct hash_desc *desc, struct scatterlist *sg,
342                             int blen, int plen, char *out)
343 {
344         unsigned long cycles = 0;
345         int i, pcount;
346         int ret;
347
348         if (plen == blen)
349                 return test_hash_cycles_digest(desc, sg, blen, out);
350
351         local_bh_disable();
352         local_irq_disable();
353
354         /* Warm-up run. */
355         for (i = 0; i < 4; i++) {
356                 ret = crypto_hash_init(desc);
357                 if (ret)
358                         goto out;
359                 for (pcount = 0; pcount < blen; pcount += plen) {
360                         ret = crypto_hash_update(desc, sg, plen);
361                         if (ret)
362                                 goto out;
363                 }
364                 ret = crypto_hash_final(desc, out);
365                 if (ret)
366                         goto out;
367         }
368
369         /* The real thing. */
370         for (i = 0; i < 8; i++) {
371                 cycles_t start, end;
372
373                 start = get_cycles();
374
375                 ret = crypto_hash_init(desc);
376                 if (ret)
377                         goto out;
378                 for (pcount = 0; pcount < blen; pcount += plen) {
379                         ret = crypto_hash_update(desc, sg, plen);
380                         if (ret)
381                                 goto out;
382                 }
383                 ret = crypto_hash_final(desc, out);
384                 if (ret)
385                         goto out;
386
387                 end = get_cycles();
388
389                 cycles += end - start;
390         }
391
392 out:
393         local_irq_enable();
394         local_bh_enable();
395
396         if (ret)
397                 return ret;
398
399         printk("%6lu cycles/operation, %4lu cycles/byte\n",
400                cycles / 8, cycles / (8 * blen));
401
402         return 0;
403 }
404
405 static void test_hash_sg_init(struct scatterlist *sg)
406 {
407         int i;
408
409         sg_init_table(sg, TVMEMSIZE);
410         for (i = 0; i < TVMEMSIZE; i++) {
411                 sg_set_buf(sg + i, tvmem[i], PAGE_SIZE);
412                 memset(tvmem[i], 0xff, PAGE_SIZE);
413         }
414 }
415
416 static void test_hash_speed(const char *algo, unsigned int sec,
417                             struct hash_speed *speed)
418 {
419         struct scatterlist sg[TVMEMSIZE];
420         struct crypto_hash *tfm;
421         struct hash_desc desc;
422         static char output[1024];
423         int i;
424         int ret;
425
426         printk(KERN_INFO "\ntesting speed of %s\n", algo);
427
428         tfm = crypto_alloc_hash(algo, 0, CRYPTO_ALG_ASYNC);
429
430         if (IS_ERR(tfm)) {
431                 printk(KERN_ERR "failed to load transform for %s: %ld\n", algo,
432                        PTR_ERR(tfm));
433                 return;
434         }
435
436         desc.tfm = tfm;
437         desc.flags = 0;
438
439         if (crypto_hash_digestsize(tfm) > sizeof(output)) {
440                 printk(KERN_ERR "digestsize(%u) > outputbuffer(%zu)\n",
441                        crypto_hash_digestsize(tfm), sizeof(output));
442                 goto out;
443         }
444
445         test_hash_sg_init(sg);
446         for (i = 0; speed[i].blen != 0; i++) {
447                 if (speed[i].blen > TVMEMSIZE * PAGE_SIZE) {
448                         printk(KERN_ERR
449                                "template (%u) too big for tvmem (%lu)\n",
450                                speed[i].blen, TVMEMSIZE * PAGE_SIZE);
451                         goto out;
452                 }
453
454                 if (speed[i].klen)
455                         crypto_hash_setkey(tfm, tvmem[0], speed[i].klen);
456
457                 printk(KERN_INFO "test%3u "
458                        "(%5u byte blocks,%5u bytes per update,%4u updates): ",
459                        i, speed[i].blen, speed[i].plen, speed[i].blen / speed[i].plen);
460
461                 if (sec)
462                         ret = test_hash_jiffies(&desc, sg, speed[i].blen,
463                                                 speed[i].plen, output, sec);
464                 else
465                         ret = test_hash_cycles(&desc, sg, speed[i].blen,
466                                                speed[i].plen, output);
467
468                 if (ret) {
469                         printk(KERN_ERR "hashing failed ret=%d\n", ret);
470                         break;
471                 }
472         }
473
474 out:
475         crypto_free_hash(tfm);
476 }
477
478 struct tcrypt_result {
479         struct completion completion;
480         int err;
481 };
482
483 static void tcrypt_complete(struct crypto_async_request *req, int err)
484 {
485         struct tcrypt_result *res = req->data;
486
487         if (err == -EINPROGRESS)
488                 return;
489
490         res->err = err;
491         complete(&res->completion);
492 }
493
494 static inline int do_one_ahash_op(struct ahash_request *req, int ret)
495 {
496         if (ret == -EINPROGRESS || ret == -EBUSY) {
497                 struct tcrypt_result *tr = req->base.data;
498
499                 ret = wait_for_completion_interruptible(&tr->completion);
500                 if (!ret)
501                         ret = tr->err;
502                 INIT_COMPLETION(tr->completion);
503         }
504         return ret;
505 }
506
507 static int test_ahash_jiffies_digest(struct ahash_request *req, int blen,
508                                      char *out, int sec)
509 {
510         unsigned long start, end;
511         int bcount;
512         int ret;
513
514         for (start = jiffies, end = start + sec * HZ, bcount = 0;
515              time_before(jiffies, end); bcount++) {
516                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
517                 if (ret)
518                         return ret;
519         }
520
521         printk("%6u opers/sec, %9lu bytes/sec\n",
522                bcount / sec, ((long)bcount * blen) / sec);
523
524         return 0;
525 }
526
527 static int test_ahash_jiffies(struct ahash_request *req, int blen,
528                               int plen, char *out, int sec)
529 {
530         unsigned long start, end;
531         int bcount, pcount;
532         int ret;
533
534         if (plen == blen)
535                 return test_ahash_jiffies_digest(req, blen, out, sec);
536
537         for (start = jiffies, end = start + sec * HZ, bcount = 0;
538              time_before(jiffies, end); bcount++) {
539                 ret = crypto_ahash_init(req);
540                 if (ret)
541                         return ret;
542                 for (pcount = 0; pcount < blen; pcount += plen) {
543                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
544                         if (ret)
545                                 return ret;
546                 }
547                 /* we assume there is enough space in 'out' for the result */
548                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
549                 if (ret)
550                         return ret;
551         }
552
553         pr_cont("%6u opers/sec, %9lu bytes/sec\n",
554                 bcount / sec, ((long)bcount * blen) / sec);
555
556         return 0;
557 }
558
559 static int test_ahash_cycles_digest(struct ahash_request *req, int blen,
560                                     char *out)
561 {
562         unsigned long cycles = 0;
563         int ret, i;
564
565         /* Warm-up run. */
566         for (i = 0; i < 4; i++) {
567                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
568                 if (ret)
569                         goto out;
570         }
571
572         /* The real thing. */
573         for (i = 0; i < 8; i++) {
574                 cycles_t start, end;
575
576                 start = get_cycles();
577
578                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
579                 if (ret)
580                         goto out;
581
582                 end = get_cycles();
583
584                 cycles += end - start;
585         }
586
587 out:
588         if (ret)
589                 return ret;
590
591         pr_cont("%6lu cycles/operation, %4lu cycles/byte\n",
592                 cycles / 8, cycles / (8 * blen));
593
594         return 0;
595 }
596
597 static int test_ahash_cycles(struct ahash_request *req, int blen,
598                              int plen, char *out)
599 {
600         unsigned long cycles = 0;
601         int i, pcount, ret;
602
603         if (plen == blen)
604                 return test_ahash_cycles_digest(req, blen, out);
605
606         /* Warm-up run. */
607         for (i = 0; i < 4; i++) {
608                 ret = crypto_ahash_init(req);
609                 if (ret)
610                         goto out;
611                 for (pcount = 0; pcount < blen; pcount += plen) {
612                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
613                         if (ret)
614                                 goto out;
615                 }
616                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
617                 if (ret)
618                         goto out;
619         }
620
621         /* The real thing. */
622         for (i = 0; i < 8; i++) {
623                 cycles_t start, end;
624
625                 start = get_cycles();
626
627                 ret = crypto_ahash_init(req);
628                 if (ret)
629                         goto out;
630                 for (pcount = 0; pcount < blen; pcount += plen) {
631                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
632                         if (ret)
633                                 goto out;
634                 }
635                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
636                 if (ret)
637                         goto out;
638
639                 end = get_cycles();
640
641                 cycles += end - start;
642         }
643
644 out:
645         if (ret)
646                 return ret;
647
648         pr_cont("%6lu cycles/operation, %4lu cycles/byte\n",
649                 cycles / 8, cycles / (8 * blen));
650
651         return 0;
652 }
653
654 static void test_ahash_speed(const char *algo, unsigned int sec,
655                              struct hash_speed *speed)
656 {
657         struct scatterlist sg[TVMEMSIZE];
658         struct tcrypt_result tresult;
659         struct ahash_request *req;
660         struct crypto_ahash *tfm;
661         static char output[1024];
662         int i, ret;
663
664         printk(KERN_INFO "\ntesting speed of async %s\n", algo);
665
666         tfm = crypto_alloc_ahash(algo, 0, 0);
667         if (IS_ERR(tfm)) {
668                 pr_err("failed to load transform for %s: %ld\n",
669                        algo, PTR_ERR(tfm));
670                 return;
671         }
672
673         if (crypto_ahash_digestsize(tfm) > sizeof(output)) {
674                 pr_err("digestsize(%u) > outputbuffer(%zu)\n",
675                        crypto_ahash_digestsize(tfm), sizeof(output));
676                 goto out;
677         }
678
679         test_hash_sg_init(sg);
680         req = ahash_request_alloc(tfm, GFP_KERNEL);
681         if (!req) {
682                 pr_err("ahash request allocation failure\n");
683                 goto out;
684         }
685
686         init_completion(&tresult.completion);
687         ahash_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
688                                    tcrypt_complete, &tresult);
689
690         for (i = 0; speed[i].blen != 0; i++) {
691                 if (speed[i].blen > TVMEMSIZE * PAGE_SIZE) {
692                         pr_err("template (%u) too big for tvmem (%lu)\n",
693                                speed[i].blen, TVMEMSIZE * PAGE_SIZE);
694                         break;
695                 }
696
697                 pr_info("test%3u "
698                         "(%5u byte blocks,%5u bytes per update,%4u updates): ",
699                         i, speed[i].blen, speed[i].plen, speed[i].blen / speed[i].plen);
700
701                 ahash_request_set_crypt(req, sg, output, speed[i].plen);
702
703                 if (sec)
704                         ret = test_ahash_jiffies(req, speed[i].blen,
705                                                  speed[i].plen, output, sec);
706                 else
707                         ret = test_ahash_cycles(req, speed[i].blen,
708                                                 speed[i].plen, output);
709
710                 if (ret) {
711                         pr_err("hashing failed ret=%d\n", ret);
712                         break;
713                 }
714         }
715
716         ahash_request_free(req);
717
718 out:
719         crypto_free_ahash(tfm);
720 }
721
722 static void test_available(void)
723 {
724         char **name = check;
725
726         while (*name) {
727                 printk("alg %s ", *name);
728                 printk(crypto_has_alg(*name, 0, 0) ?
729                        "found\n" : "not found\n");
730                 name++;
731         }
732 }
733
734 static inline int tcrypt_test(const char *alg)
735 {
736         int ret;
737
738         ret = alg_test(alg, alg, 0, 0);
739         /* non-fips algs return -EINVAL in fips mode */
740         if (fips_enabled && ret == -EINVAL)
741                 ret = 0;
742         return ret;
743 }
744
745 static int do_test(int m)
746 {
747         int i;
748         int ret = 0;
749
750         switch (m) {
751         case 0:
752                 for (i = 1; i < 200; i++)
753                         ret += do_test(i);
754                 break;
755
756         case 1:
757                 ret += tcrypt_test("md5");
758                 break;
759
760         case 2:
761                 ret += tcrypt_test("sha1");
762                 break;
763
764         case 3:
765                 ret += tcrypt_test("ecb(des)");
766                 ret += tcrypt_test("cbc(des)");
767                 break;
768
769         case 4:
770                 ret += tcrypt_test("ecb(des3_ede)");
771                 ret += tcrypt_test("cbc(des3_ede)");
772                 break;
773
774         case 5:
775                 ret += tcrypt_test("md4");
776                 break;
777
778         case 6:
779                 ret += tcrypt_test("sha256");
780                 break;
781
782         case 7:
783                 ret += tcrypt_test("ecb(blowfish)");
784                 ret += tcrypt_test("cbc(blowfish)");
785                 ret += tcrypt_test("ctr(blowfish)");
786                 break;
787
788         case 8:
789                 ret += tcrypt_test("ecb(twofish)");
790                 ret += tcrypt_test("cbc(twofish)");
791                 ret += tcrypt_test("ctr(twofish)");
792                 break;
793
794         case 9:
795                 ret += tcrypt_test("ecb(serpent)");
796                 break;
797
798         case 10:
799                 ret += tcrypt_test("ecb(aes)");
800                 ret += tcrypt_test("cbc(aes)");
801                 ret += tcrypt_test("lrw(aes)");
802                 ret += tcrypt_test("xts(aes)");
803                 ret += tcrypt_test("ctr(aes)");
804                 ret += tcrypt_test("rfc3686(ctr(aes))");
805                 break;
806
807         case 11:
808                 ret += tcrypt_test("sha384");
809                 break;
810
811         case 12:
812                 ret += tcrypt_test("sha512");
813                 break;
814
815         case 13:
816                 ret += tcrypt_test("deflate");
817                 break;
818
819         case 14:
820                 ret += tcrypt_test("ecb(cast5)");
821                 break;
822
823         case 15:
824                 ret += tcrypt_test("ecb(cast6)");
825                 break;
826
827         case 16:
828                 ret += tcrypt_test("ecb(arc4)");
829                 break;
830
831         case 17:
832                 ret += tcrypt_test("michael_mic");
833                 break;
834
835         case 18:
836                 ret += tcrypt_test("crc32c");
837                 break;
838
839         case 19:
840                 ret += tcrypt_test("ecb(tea)");
841                 break;
842
843         case 20:
844                 ret += tcrypt_test("ecb(xtea)");
845                 break;
846
847         case 21:
848                 ret += tcrypt_test("ecb(khazad)");
849                 break;
850
851         case 22:
852                 ret += tcrypt_test("wp512");
853                 break;
854
855         case 23:
856                 ret += tcrypt_test("wp384");
857                 break;
858
859         case 24:
860                 ret += tcrypt_test("wp256");
861                 break;
862
863         case 25:
864                 ret += tcrypt_test("ecb(tnepres)");
865                 break;
866
867         case 26:
868                 ret += tcrypt_test("ecb(anubis)");
869                 ret += tcrypt_test("cbc(anubis)");
870                 break;
871
872         case 27:
873                 ret += tcrypt_test("tgr192");
874                 break;
875
876         case 28:
877
878                 ret += tcrypt_test("tgr160");
879                 break;
880
881         case 29:
882                 ret += tcrypt_test("tgr128");
883                 break;
884
885         case 30:
886                 ret += tcrypt_test("ecb(xeta)");
887                 break;
888
889         case 31:
890                 ret += tcrypt_test("pcbc(fcrypt)");
891                 break;
892
893         case 32:
894                 ret += tcrypt_test("ecb(camellia)");
895                 ret += tcrypt_test("cbc(camellia)");
896                 break;
897         case 33:
898                 ret += tcrypt_test("sha224");
899                 break;
900
901         case 34:
902                 ret += tcrypt_test("salsa20");
903                 break;
904
905         case 35:
906                 ret += tcrypt_test("gcm(aes)");
907                 break;
908
909         case 36:
910                 ret += tcrypt_test("lzo");
911                 break;
912
913         case 37:
914                 ret += tcrypt_test("ccm(aes)");
915                 break;
916
917         case 38:
918                 ret += tcrypt_test("cts(cbc(aes))");
919                 break;
920
921         case 39:
922                 ret += tcrypt_test("rmd128");
923                 break;
924
925         case 40:
926                 ret += tcrypt_test("rmd160");
927                 break;
928
929         case 41:
930                 ret += tcrypt_test("rmd256");
931                 break;
932
933         case 42:
934                 ret += tcrypt_test("rmd320");
935                 break;
936
937         case 43:
938                 ret += tcrypt_test("ecb(seed)");
939                 break;
940
941         case 44:
942                 ret += tcrypt_test("zlib");
943                 break;
944
945         case 45:
946                 ret += tcrypt_test("rfc4309(ccm(aes))");
947                 break;
948
949         case 100:
950                 ret += tcrypt_test("hmac(md5)");
951                 break;
952
953         case 101:
954                 ret += tcrypt_test("hmac(sha1)");
955                 break;
956
957         case 102:
958                 ret += tcrypt_test("hmac(sha256)");
959                 break;
960
961         case 103:
962                 ret += tcrypt_test("hmac(sha384)");
963                 break;
964
965         case 104:
966                 ret += tcrypt_test("hmac(sha512)");
967                 break;
968
969         case 105:
970                 ret += tcrypt_test("hmac(sha224)");
971                 break;
972
973         case 106:
974                 ret += tcrypt_test("xcbc(aes)");
975                 break;
976
977         case 107:
978                 ret += tcrypt_test("hmac(rmd128)");
979                 break;
980
981         case 108:
982                 ret += tcrypt_test("hmac(rmd160)");
983                 break;
984
985         case 109:
986                 ret += tcrypt_test("vmac(aes)");
987                 break;
988
989         case 150:
990                 ret += tcrypt_test("ansi_cprng");
991                 break;
992
993         case 151:
994                 ret += tcrypt_test("rfc4106(gcm(aes))");
995                 break;
996
997         case 200:
998                 test_cipher_speed("ecb(aes)", ENCRYPT, sec, NULL, 0,
999                                 speed_template_16_24_32);
1000                 test_cipher_speed("ecb(aes)", DECRYPT, sec, NULL, 0,
1001                                 speed_template_16_24_32);
1002                 test_cipher_speed("cbc(aes)", ENCRYPT, sec, NULL, 0,
1003                                 speed_template_16_24_32);
1004                 test_cipher_speed("cbc(aes)", DECRYPT, sec, NULL, 0,
1005                                 speed_template_16_24_32);
1006                 test_cipher_speed("lrw(aes)", ENCRYPT, sec, NULL, 0,
1007                                 speed_template_32_40_48);
1008                 test_cipher_speed("lrw(aes)", DECRYPT, sec, NULL, 0,
1009                                 speed_template_32_40_48);
1010                 test_cipher_speed("xts(aes)", ENCRYPT, sec, NULL, 0,
1011                                 speed_template_32_48_64);
1012                 test_cipher_speed("xts(aes)", DECRYPT, sec, NULL, 0,
1013                                 speed_template_32_48_64);
1014                 test_cipher_speed("ctr(aes)", ENCRYPT, sec, NULL, 0,
1015                                 speed_template_16_24_32);
1016                 test_cipher_speed("ctr(aes)", DECRYPT, sec, NULL, 0,
1017                                 speed_template_16_24_32);
1018                 break;
1019
1020         case 201:
1021                 test_cipher_speed("ecb(des3_ede)", ENCRYPT, sec,
1022                                 des3_speed_template, DES3_SPEED_VECTORS,
1023                                 speed_template_24);
1024                 test_cipher_speed("ecb(des3_ede)", DECRYPT, sec,
1025                                 des3_speed_template, DES3_SPEED_VECTORS,
1026                                 speed_template_24);
1027                 test_cipher_speed("cbc(des3_ede)", ENCRYPT, sec,
1028                                 des3_speed_template, DES3_SPEED_VECTORS,
1029                                 speed_template_24);
1030                 test_cipher_speed("cbc(des3_ede)", DECRYPT, sec,
1031                                 des3_speed_template, DES3_SPEED_VECTORS,
1032                                 speed_template_24);
1033                 break;
1034
1035         case 202:
1036                 test_cipher_speed("ecb(twofish)", ENCRYPT, sec, NULL, 0,
1037                                 speed_template_16_24_32);
1038                 test_cipher_speed("ecb(twofish)", DECRYPT, sec, NULL, 0,
1039                                 speed_template_16_24_32);
1040                 test_cipher_speed("cbc(twofish)", ENCRYPT, sec, NULL, 0,
1041                                 speed_template_16_24_32);
1042                 test_cipher_speed("cbc(twofish)", DECRYPT, sec, NULL, 0,
1043                                 speed_template_16_24_32);
1044                 test_cipher_speed("ctr(twofish)", ENCRYPT, sec, NULL, 0,
1045                                 speed_template_16_24_32);
1046                 test_cipher_speed("ctr(twofish)", DECRYPT, sec, NULL, 0,
1047                                 speed_template_16_24_32);
1048                 break;
1049
1050         case 203:
1051                 test_cipher_speed("ecb(blowfish)", ENCRYPT, sec, NULL, 0,
1052                                   speed_template_8_32);
1053                 test_cipher_speed("ecb(blowfish)", DECRYPT, sec, NULL, 0,
1054                                   speed_template_8_32);
1055                 test_cipher_speed("cbc(blowfish)", ENCRYPT, sec, NULL, 0,
1056                                   speed_template_8_32);
1057                 test_cipher_speed("cbc(blowfish)", DECRYPT, sec, NULL, 0,
1058                                   speed_template_8_32);
1059                 test_cipher_speed("ctr(blowfish)", ENCRYPT, sec, NULL, 0,
1060                                   speed_template_8_32);
1061                 test_cipher_speed("ctr(blowfish)", DECRYPT, sec, NULL, 0,
1062                                   speed_template_8_32);
1063                 break;
1064
1065         case 204:
1066                 test_cipher_speed("ecb(des)", ENCRYPT, sec, NULL, 0,
1067                                   speed_template_8);
1068                 test_cipher_speed("ecb(des)", DECRYPT, sec, NULL, 0,
1069                                   speed_template_8);
1070                 test_cipher_speed("cbc(des)", ENCRYPT, sec, NULL, 0,
1071                                   speed_template_8);
1072                 test_cipher_speed("cbc(des)", DECRYPT, sec, NULL, 0,
1073                                   speed_template_8);
1074                 break;
1075
1076         case 205:
1077                 test_cipher_speed("ecb(camellia)", ENCRYPT, sec, NULL, 0,
1078                                 speed_template_16_24_32);
1079                 test_cipher_speed("ecb(camellia)", DECRYPT, sec, NULL, 0,
1080                                 speed_template_16_24_32);
1081                 test_cipher_speed("cbc(camellia)", ENCRYPT, sec, NULL, 0,
1082                                 speed_template_16_24_32);
1083                 test_cipher_speed("cbc(camellia)", DECRYPT, sec, NULL, 0,
1084                                 speed_template_16_24_32);
1085                 break;
1086
1087         case 206:
1088                 test_cipher_speed("salsa20", ENCRYPT, sec, NULL, 0,
1089                                   speed_template_16_32);
1090                 break;
1091
1092         case 300:
1093                 /* fall through */
1094
1095         case 301:
1096                 test_hash_speed("md4", sec, generic_hash_speed_template);
1097                 if (mode > 300 && mode < 400) break;
1098
1099         case 302:
1100                 test_hash_speed("md5", sec, generic_hash_speed_template);
1101                 if (mode > 300 && mode < 400) break;
1102
1103         case 303:
1104                 test_hash_speed("sha1", sec, generic_hash_speed_template);
1105                 if (mode > 300 && mode < 400) break;
1106
1107         case 304:
1108                 test_hash_speed("sha256", sec, generic_hash_speed_template);
1109                 if (mode > 300 && mode < 400) break;
1110
1111         case 305:
1112                 test_hash_speed("sha384", sec, generic_hash_speed_template);
1113                 if (mode > 300 && mode < 400) break;
1114
1115         case 306:
1116                 test_hash_speed("sha512", sec, generic_hash_speed_template);
1117                 if (mode > 300 && mode < 400) break;
1118
1119         case 307:
1120                 test_hash_speed("wp256", sec, generic_hash_speed_template);
1121                 if (mode > 300 && mode < 400) break;
1122
1123         case 308:
1124                 test_hash_speed("wp384", sec, generic_hash_speed_template);
1125                 if (mode > 300 && mode < 400) break;
1126
1127         case 309:
1128                 test_hash_speed("wp512", sec, generic_hash_speed_template);
1129                 if (mode > 300 && mode < 400) break;
1130
1131         case 310:
1132                 test_hash_speed("tgr128", sec, generic_hash_speed_template);
1133                 if (mode > 300 && mode < 400) break;
1134
1135         case 311:
1136                 test_hash_speed("tgr160", sec, generic_hash_speed_template);
1137                 if (mode > 300 && mode < 400) break;
1138
1139         case 312:
1140                 test_hash_speed("tgr192", sec, generic_hash_speed_template);
1141                 if (mode > 300 && mode < 400) break;
1142
1143         case 313:
1144                 test_hash_speed("sha224", sec, generic_hash_speed_template);
1145                 if (mode > 300 && mode < 400) break;
1146
1147         case 314:
1148                 test_hash_speed("rmd128", sec, generic_hash_speed_template);
1149                 if (mode > 300 && mode < 400) break;
1150
1151         case 315:
1152                 test_hash_speed("rmd160", sec, generic_hash_speed_template);
1153                 if (mode > 300 && mode < 400) break;
1154
1155         case 316:
1156                 test_hash_speed("rmd256", sec, generic_hash_speed_template);
1157                 if (mode > 300 && mode < 400) break;
1158
1159         case 317:
1160                 test_hash_speed("rmd320", sec, generic_hash_speed_template);
1161                 if (mode > 300 && mode < 400) break;
1162
1163         case 318:
1164                 test_hash_speed("ghash-generic", sec, hash_speed_template_16);
1165                 if (mode > 300 && mode < 400) break;
1166
1167         case 399:
1168                 break;
1169
1170         case 400:
1171                 /* fall through */
1172
1173         case 401:
1174                 test_ahash_speed("md4", sec, generic_hash_speed_template);
1175                 if (mode > 400 && mode < 500) break;
1176
1177         case 402:
1178                 test_ahash_speed("md5", sec, generic_hash_speed_template);
1179                 if (mode > 400 && mode < 500) break;
1180
1181         case 403:
1182                 test_ahash_speed("sha1", sec, generic_hash_speed_template);
1183                 if (mode > 400 && mode < 500) break;
1184
1185         case 404:
1186                 test_ahash_speed("sha256", sec, generic_hash_speed_template);
1187                 if (mode > 400 && mode < 500) break;
1188
1189         case 405:
1190                 test_ahash_speed("sha384", sec, generic_hash_speed_template);
1191                 if (mode > 400 && mode < 500) break;
1192
1193         case 406:
1194                 test_ahash_speed("sha512", sec, generic_hash_speed_template);
1195                 if (mode > 400 && mode < 500) break;
1196
1197         case 407:
1198                 test_ahash_speed("wp256", sec, generic_hash_speed_template);
1199                 if (mode > 400 && mode < 500) break;
1200
1201         case 408:
1202                 test_ahash_speed("wp384", sec, generic_hash_speed_template);
1203                 if (mode > 400 && mode < 500) break;
1204
1205         case 409:
1206                 test_ahash_speed("wp512", sec, generic_hash_speed_template);
1207                 if (mode > 400 && mode < 500) break;
1208
1209         case 410:
1210                 test_ahash_speed("tgr128", sec, generic_hash_speed_template);
1211                 if (mode > 400 && mode < 500) break;
1212
1213         case 411:
1214                 test_ahash_speed("tgr160", sec, generic_hash_speed_template);
1215                 if (mode > 400 && mode < 500) break;
1216
1217         case 412:
1218                 test_ahash_speed("tgr192", sec, generic_hash_speed_template);
1219                 if (mode > 400 && mode < 500) break;
1220
1221         case 413:
1222                 test_ahash_speed("sha224", sec, generic_hash_speed_template);
1223                 if (mode > 400 && mode < 500) break;
1224
1225         case 414:
1226                 test_ahash_speed("rmd128", sec, generic_hash_speed_template);
1227                 if (mode > 400 && mode < 500) break;
1228
1229         case 415:
1230                 test_ahash_speed("rmd160", sec, generic_hash_speed_template);
1231                 if (mode > 400 && mode < 500) break;
1232
1233         case 416:
1234                 test_ahash_speed("rmd256", sec, generic_hash_speed_template);
1235                 if (mode > 400 && mode < 500) break;
1236
1237         case 417:
1238                 test_ahash_speed("rmd320", sec, generic_hash_speed_template);
1239                 if (mode > 400 && mode < 500) break;
1240
1241         case 499:
1242                 break;
1243
1244         case 1000:
1245                 test_available();
1246                 break;
1247         }
1248
1249         return ret;
1250 }
1251
1252 static int do_alg_test(const char *alg, u32 type, u32 mask)
1253 {
1254         return crypto_has_alg(alg, type, mask ?: CRYPTO_ALG_TYPE_MASK) ?
1255                0 : -ENOENT;
1256 }
1257
1258 static int __init tcrypt_mod_init(void)
1259 {
1260         int err = -ENOMEM;
1261         int i;
1262
1263         for (i = 0; i < TVMEMSIZE; i++) {
1264                 tvmem[i] = (void *)__get_free_page(GFP_KERNEL);
1265                 if (!tvmem[i])
1266                         goto err_free_tv;
1267         }
1268
1269         if (alg)
1270                 err = do_alg_test(alg, type, mask);
1271         else
1272                 err = do_test(mode);
1273
1274         if (err) {
1275                 printk(KERN_ERR "tcrypt: one or more tests failed!\n");
1276                 goto err_free_tv;
1277         }
1278
1279         /* We intentionaly return -EAGAIN to prevent keeping the module,
1280          * unless we're running in fips mode. It does all its work from
1281          * init() and doesn't offer any runtime functionality, but in
1282          * the fips case, checking for a successful load is helpful.
1283          * => we don't need it in the memory, do we?
1284          *                                        -- mludvig
1285          */
1286         if (!fips_enabled)
1287                 err = -EAGAIN;
1288
1289 err_free_tv:
1290         for (i = 0; i < TVMEMSIZE && tvmem[i]; i++)
1291                 free_page((unsigned long)tvmem[i]);
1292
1293         return err;
1294 }
1295
1296 /*
1297  * If an init function is provided, an exit function must also be provided
1298  * to allow module unload.
1299  */
1300 static void __exit tcrypt_mod_fini(void) { }
1301
1302 module_init(tcrypt_mod_init);
1303 module_exit(tcrypt_mod_fini);
1304
1305 module_param(alg, charp, 0);
1306 module_param(type, uint, 0);
1307 module_param(mask, uint, 0);
1308 module_param(mode, int, 0);
1309 module_param(sec, uint, 0);
1310 MODULE_PARM_DESC(sec, "Length in seconds of speed tests "
1311                       "(defaults to zero which uses CPU cycles instead)");
1312
1313 MODULE_LICENSE("GPL");
1314 MODULE_DESCRIPTION("Quick & dirty crypto testing module");
1315 MODULE_AUTHOR("James Morris <jmorris@intercode.com.au>");