target/linux/generic/backport-5.4/080-wireguard-0022-crypto-testmgr-add-test-cases-for-Blake2s.patch

   1 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
   2 From: Ard Biesheuvel <ardb@kernel.org>
   3 Date: Fri, 8 Nov 2019 13:22:29 +0100
   4 Subject: [PATCH] crypto: testmgr - add test cases for Blake2s
   5
   6 commit 17e1df67023a5c9ccaeb5de8bf5b88f63127ecf7 upstream.
   7
   8 As suggested by Eric for the Blake2b implementation contributed by
   9 David, introduce a set of test vectors for Blake2s covering different
  10 digest and key sizes.
  11
  12           blake2s-128  blake2s-160  blake2s-224  blake2s-256
  13          ---------------------------------------------------
  14 len=0   | klen=0       klen=1       klen=16      klen=32
  15 len=1   | klen=16      klen=32      klen=0       klen=1
  16 len=7   | klen=32      klen=0       klen=1       klen=16
  17 len=15  | klen=1       klen=16      klen=32      klen=0
  18 len=64  | klen=0       klen=1       klen=16      klen=32
  19 len=247 | klen=16      klen=32      klen=0       klen=1
  20 len=256 | klen=32      klen=0       klen=1       klen=16
  21
  22 Cc: David Sterba <dsterba@suse.com>
  23 Cc: Eric Biggers <ebiggers@google.com>
  24 Signed-off-by: Ard Biesheuvel <ardb@kernel.org>
  25 Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
  26 Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
  27 ---
  28  crypto/testmgr.c |  24 +++++
  29  crypto/testmgr.h | 251 +++++++++++++++++++++++++++++++++++++++++++++++
  30  2 files changed, 275 insertions(+)
  31
  32 --- a/crypto/testmgr.c
  33 +++ b/crypto/testmgr.c
  34 @@ -4035,6 +4035,30 @@ static const struct alg_test_desc alg_te
  35                 .test = alg_test_null,
  36                 .fips_allowed = 1,
  37         }, {
  38 +               .alg = "blake2s-128",
  39 +               .test = alg_test_hash,
  40 +               .suite = {
  41 +                       .hash = __VECS(blakes2s_128_tv_template)
  42 +               }
  43 +       }, {
  44 +               .alg = "blake2s-160",
  45 +               .test = alg_test_hash,
  46 +               .suite = {
  47 +                       .hash = __VECS(blakes2s_160_tv_template)
  48 +               }
  49 +       }, {
  50 +               .alg = "blake2s-224",
  51 +               .test = alg_test_hash,
  52 +               .suite = {
  53 +                       .hash = __VECS(blakes2s_224_tv_template)
  54 +               }
  55 +       }, {
  56 +               .alg = "blake2s-256",
  57 +               .test = alg_test_hash,
  58 +               .suite = {
  59 +                       .hash = __VECS(blakes2s_256_tv_template)
  60 +               }
  61 +       }, {
  62                 .alg = "cbc(aes)",
  63                 .test = alg_test_skcipher,
  64                 .fips_allowed = 1,
  65 --- a/crypto/testmgr.h
  66 +++ b/crypto/testmgr.h
  67 @@ -31567,4 +31567,255 @@ static const struct aead_testvec essiv_h
  68         },
  69  };
  70
  71 +static const char blake2_ordered_sequence[] =
  72 +       "\x00\x01\x02\x03\x04\x05\x06\x07"
  73 +       "\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f"
  74 +       "\x10\x11\x12\x13\x14\x15\x16\x17"
  75 +       "\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f"
  76 +       "\x20\x21\x22\x23\x24\x25\x26\x27"
  77 +       "\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f"
  78 +       "\x30\x31\x32\x33\x34\x35\x36\x37"
  79 +       "\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f"
  80 +       "\x40\x41\x42\x43\x44\x45\x46\x47"
  81 +       "\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f"
  82 +       "\x50\x51\x52\x53\x54\x55\x56\x57"
  83 +       "\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f"
  84 +       "\x60\x61\x62\x63\x64\x65\x66\x67"
  85 +       "\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f"
  86 +       "\x70\x71\x72\x73\x74\x75\x76\x77"
  87 +       "\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f"
  88 +       "\x80\x81\x82\x83\x84\x85\x86\x87"
  89 +       "\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f"
  90 +       "\x90\x91\x92\x93\x94\x95\x96\x97"
  91 +       "\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f"
  92 +       "\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7"
  93 +       "\xa8\xa9\xaa\xab\xac\xad\xae\xaf"
  94 +       "\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7"
  95 +       "\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf"
  96 +       "\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7"
  97 +       "\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf"
  98 +       "\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7"
  99 +       "\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf"
 100 +       "\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7"
 101 +       "\xe8\xe9\xea\xeb\xec\xed\xee\xef"
 102 +       "\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7"
 103 +       "\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff";
 104 +
 105 +static const struct hash_testvec blakes2s_128_tv_template[] = {{
 106 +       .digest = (u8[]){ 0x64, 0x55, 0x0d, 0x6f, 0xfe, 0x2c, 0x0a, 0x01,
 107 +                         0xa1, 0x4a, 0xba, 0x1e, 0xad, 0xe0, 0x20, 0x0c, },
 108 +}, {
 109 +       .plaintext = blake2_ordered_sequence,
 110 +       .psize = 64,
 111 +       .digest = (u8[]){ 0xdc, 0x66, 0xca, 0x8f, 0x03, 0x86, 0x58, 0x01,
 112 +                         0xb0, 0xff, 0xe0, 0x6e, 0xd8, 0xa1, 0xa9, 0x0e, },
 113 +}, {
 114 +       .ksize = 16,
 115 +       .key = blake2_ordered_sequence,
 116 +       .plaintext = blake2_ordered_sequence,
 117 +       .psize = 1,
 118 +       .digest = (u8[]){ 0x88, 0x1e, 0x42, 0xe7, 0xbb, 0x35, 0x80, 0x82,
 119 +                         0x63, 0x7c, 0x0a, 0x0f, 0xd7, 0xec, 0x6c, 0x2f, },
 120 +}, {
 121 +       .ksize = 32,
 122 +       .key = blake2_ordered_sequence,
 123 +       .plaintext = blake2_ordered_sequence,
 124 +       .psize = 7,
 125 +       .digest = (u8[]){ 0xcf, 0x9e, 0x07, 0x2a, 0xd5, 0x22, 0xf2, 0xcd,
 126 +                         0xa2, 0xd8, 0x25, 0x21, 0x80, 0x86, 0x73, 0x1c, },
 127 +}, {
 128 +       .ksize = 1,
 129 +       .key = "B",
 130 +       .plaintext = blake2_ordered_sequence,
 131 +       .psize = 15,
 132 +       .digest = (u8[]){ 0xf6, 0x33, 0x5a, 0x2c, 0x22, 0xa0, 0x64, 0xb2,
 133 +                         0xb6, 0x3f, 0xeb, 0xbc, 0xd1, 0xc3, 0xe5, 0xb2, },
 134 +}, {
 135 +       .ksize = 16,
 136 +       .key = blake2_ordered_sequence,
 137 +       .plaintext = blake2_ordered_sequence,
 138 +       .psize = 247,
 139 +       .digest = (u8[]){ 0x72, 0x66, 0x49, 0x60, 0xf9, 0x4a, 0xea, 0xbe,
 140 +                         0x1f, 0xf4, 0x60, 0xce, 0xb7, 0x81, 0xcb, 0x09, },
 141 +}, {
 142 +       .ksize = 32,
 143 +       .key = blake2_ordered_sequence,
 144 +       .plaintext = blake2_ordered_sequence,
 145 +       .psize = 256,
 146 +       .digest = (u8[]){ 0xd5, 0xa4, 0x0e, 0xc3, 0x16, 0xc7, 0x51, 0xa6,
 147 +                         0x3c, 0xd0, 0xd9, 0x11, 0x57, 0xfa, 0x1e, 0xbb, },
 148 +}};
 149 +
 150 +static const struct hash_testvec blakes2s_160_tv_template[] = {{
 151 +       .plaintext = blake2_ordered_sequence,
 152 +       .psize = 7,
 153 +       .digest = (u8[]){ 0xb4, 0xf2, 0x03, 0x49, 0x37, 0xed, 0xb1, 0x3e,
 154 +                         0x5b, 0x2a, 0xca, 0x64, 0x82, 0x74, 0xf6, 0x62,
 155 +                         0xe3, 0xf2, 0x84, 0xff, },
 156 +}, {
 157 +       .plaintext = blake2_ordered_sequence,
 158 +       .psize = 256,
 159 +       .digest = (u8[]){ 0xaa, 0x56, 0x9b, 0xdc, 0x98, 0x17, 0x75, 0xf2,
 160 +                         0xb3, 0x68, 0x83, 0xb7, 0x9b, 0x8d, 0x48, 0xb1,
 161 +                         0x9b, 0x2d, 0x35, 0x05, },
 162 +}, {
 163 +       .ksize = 1,
 164 +       .key = "B",
 165 +       .digest = (u8[]){ 0x50, 0x16, 0xe7, 0x0c, 0x01, 0xd0, 0xd3, 0xc3,
 166 +                         0xf4, 0x3e, 0xb1, 0x6e, 0x97, 0xa9, 0x4e, 0xd1,
 167 +                         0x79, 0x65, 0x32, 0x93, },
 168 +}, {
 169 +       .ksize = 32,
 170 +       .key = blake2_ordered_sequence,
 171 +       .plaintext = blake2_ordered_sequence,
 172 +       .psize = 1,
 173 +       .digest = (u8[]){ 0x1c, 0x2b, 0xcd, 0x9a, 0x68, 0xca, 0x8c, 0x71,
 174 +                         0x90, 0x29, 0x6c, 0x54, 0xfa, 0x56, 0x4a, 0xef,
 175 +                         0xa2, 0x3a, 0x56, 0x9c, },
 176 +}, {
 177 +       .ksize = 16,
 178 +       .key = blake2_ordered_sequence,
 179 +       .plaintext = blake2_ordered_sequence,
 180 +       .psize = 15,
 181 +       .digest = (u8[]){ 0x36, 0xc3, 0x5f, 0x9a, 0xdc, 0x7e, 0xbf, 0x19,
 182 +                         0x68, 0xaa, 0xca, 0xd8, 0x81, 0xbf, 0x09, 0x34,
 183 +                         0x83, 0x39, 0x0f, 0x30, },
 184 +}, {
 185 +       .ksize = 1,
 186 +       .key = "B",
 187 +       .plaintext = blake2_ordered_sequence,
 188 +       .psize = 64,
 189 +       .digest = (u8[]){ 0x86, 0x80, 0x78, 0xa4, 0x14, 0xec, 0x03, 0xe5,
 190 +                         0xb6, 0x9a, 0x52, 0x0e, 0x42, 0xee, 0x39, 0x9d,
 191 +                         0xac, 0xa6, 0x81, 0x63, },
 192 +}, {
 193 +       .ksize = 32,
 194 +       .key = blake2_ordered_sequence,
 195 +       .plaintext = blake2_ordered_sequence,
 196 +       .psize = 247,
 197 +       .digest = (u8[]){ 0x2d, 0xd8, 0xd2, 0x53, 0x66, 0xfa, 0xa9, 0x01,
 198 +                         0x1c, 0x9c, 0xaf, 0xa3, 0xe2, 0x9d, 0x9b, 0x10,
 199 +                         0x0a, 0xf6, 0x73, 0xe8, },
 200 +}};
 201 +
 202 +static const struct hash_testvec blakes2s_224_tv_template[] = {{
 203 +       .plaintext = blake2_ordered_sequence,
 204 +       .psize = 1,
 205 +       .digest = (u8[]){ 0x61, 0xb9, 0x4e, 0xc9, 0x46, 0x22, 0xa3, 0x91,
 206 +                         0xd2, 0xae, 0x42, 0xe6, 0x45, 0x6c, 0x90, 0x12,
 207 +                         0xd5, 0x80, 0x07, 0x97, 0xb8, 0x86, 0x5a, 0xfc,
 208 +                         0x48, 0x21, 0x97, 0xbb, },
 209 +}, {
 210 +       .plaintext = blake2_ordered_sequence,
 211 +       .psize = 247,
 212 +       .digest = (u8[]){ 0x9e, 0xda, 0xc7, 0x20, 0x2c, 0xd8, 0x48, 0x2e,
 213 +                         0x31, 0x94, 0xab, 0x46, 0x6d, 0x94, 0xd8, 0xb4,
 214 +                         0x69, 0xcd, 0xae, 0x19, 0x6d, 0x9e, 0x41, 0xcc,
 215 +                         0x2b, 0xa4, 0xd5, 0xf6, },
 216 +}, {
 217 +       .ksize = 16,
 218 +       .key = blake2_ordered_sequence,
 219 +       .digest = (u8[]){ 0x32, 0xc0, 0xac, 0xf4, 0x3b, 0xd3, 0x07, 0x9f,
 220 +                         0xbe, 0xfb, 0xfa, 0x4d, 0x6b, 0x4e, 0x56, 0xb3,
 221 +                         0xaa, 0xd3, 0x27, 0xf6, 0x14, 0xbf, 0xb9, 0x32,
 222 +                         0xa7, 0x19, 0xfc, 0xb8, },
 223 +}, {
 224 +       .ksize = 1,
 225 +       .key = "B",
 226 +       .plaintext = blake2_ordered_sequence,
 227 +       .psize = 7,
 228 +       .digest = (u8[]){ 0x73, 0xad, 0x5e, 0x6d, 0xb9, 0x02, 0x8e, 0x76,
 229 +                         0xf2, 0x66, 0x42, 0x4b, 0x4c, 0xfa, 0x1f, 0xe6,
 230 +                         0x2e, 0x56, 0x40, 0xe5, 0xa2, 0xb0, 0x3c, 0xe8,
 231 +                         0x7b, 0x45, 0xfe, 0x05, },
 232 +}, {
 233 +       .ksize = 32,
 234 +       .key = blake2_ordered_sequence,
 235 +       .plaintext = blake2_ordered_sequence,
 236 +       .psize = 15,
 237 +       .digest = (u8[]){ 0x16, 0x60, 0xfb, 0x92, 0x54, 0xb3, 0x6e, 0x36,
 238 +                         0x81, 0xf4, 0x16, 0x41, 0xc3, 0x3d, 0xd3, 0x43,
 239 +                         0x84, 0xed, 0x10, 0x6f, 0x65, 0x80, 0x7a, 0x3e,
 240 +                         0x25, 0xab, 0xc5, 0x02, },
 241 +}, {
 242 +       .ksize = 16,
 243 +       .key = blake2_ordered_sequence,
 244 +       .plaintext = blake2_ordered_sequence,
 245 +       .psize = 64,
 246 +       .digest = (u8[]){ 0xca, 0xaa, 0x39, 0x67, 0x9c, 0xf7, 0x6b, 0xc7,
 247 +                         0xb6, 0x82, 0xca, 0x0e, 0x65, 0x36, 0x5b, 0x7c,
 248 +                         0x24, 0x00, 0xfa, 0x5f, 0xda, 0x06, 0x91, 0x93,
 249 +                         0x6a, 0x31, 0x83, 0xb5, },
 250 +}, {
 251 +       .ksize = 1,
 252 +       .key = "B",
 253 +       .plaintext = blake2_ordered_sequence,
 254 +       .psize = 256,
 255 +       .digest = (u8[]){ 0x90, 0x02, 0x26, 0xb5, 0x06, 0x9c, 0x36, 0x86,
 256 +                         0x94, 0x91, 0x90, 0x1e, 0x7d, 0x2a, 0x71, 0xb2,
 257 +                         0x48, 0xb5, 0xe8, 0x16, 0xfd, 0x64, 0x33, 0x45,
 258 +                         0xb3, 0xd7, 0xec, 0xcc, },
 259 +}};
 260 +
 261 +static const struct hash_testvec blakes2s_256_tv_template[] = {{
 262 +       .plaintext = blake2_ordered_sequence,
 263 +       .psize = 15,
 264 +       .digest = (u8[]){ 0xd9, 0x7c, 0x82, 0x8d, 0x81, 0x82, 0xa7, 0x21,
 265 +                         0x80, 0xa0, 0x6a, 0x78, 0x26, 0x83, 0x30, 0x67,
 266 +                         0x3f, 0x7c, 0x4e, 0x06, 0x35, 0x94, 0x7c, 0x04,
 267 +                         0xc0, 0x23, 0x23, 0xfd, 0x45, 0xc0, 0xa5, 0x2d, },
 268 +}, {
 269 +       .ksize = 32,
 270 +       .key = blake2_ordered_sequence,
 271 +       .digest = (u8[]){ 0x48, 0xa8, 0x99, 0x7d, 0xa4, 0x07, 0x87, 0x6b,
 272 +                         0x3d, 0x79, 0xc0, 0xd9, 0x23, 0x25, 0xad, 0x3b,
 273 +                         0x89, 0xcb, 0xb7, 0x54, 0xd8, 0x6a, 0xb7, 0x1a,
 274 +                         0xee, 0x04, 0x7a, 0xd3, 0x45, 0xfd, 0x2c, 0x49, },
 275 +}, {
 276 +       .ksize = 1,
 277 +       .key = "B",
 278 +       .plaintext = blake2_ordered_sequence,
 279 +       .psize = 1,
 280 +       .digest = (u8[]){ 0x22, 0x27, 0xae, 0xaa, 0x6e, 0x81, 0x56, 0x03,
 281 +                         0xa7, 0xe3, 0xa1, 0x18, 0xa5, 0x9a, 0x2c, 0x18,
 282 +                         0xf4, 0x63, 0xbc, 0x16, 0x70, 0xf1, 0xe7, 0x4b,
 283 +                         0x00, 0x6d, 0x66, 0x16, 0xae, 0x9e, 0x74, 0x4e, },
 284 +}, {
 285 +       .ksize = 16,
 286 +       .key = blake2_ordered_sequence,
 287 +       .plaintext = blake2_ordered_sequence,
 288 +       .psize = 7,
 289 +       .digest = (u8[]){ 0x58, 0x5d, 0xa8, 0x60, 0x1c, 0xa4, 0xd8, 0x03,
 290 +                         0x86, 0x86, 0x84, 0x64, 0xd7, 0xa0, 0x8e, 0x15,
 291 +                         0x2f, 0x05, 0xa2, 0x1b, 0xbc, 0xef, 0x7a, 0x34,
 292 +                         0xb3, 0xc5, 0xbc, 0x4b, 0xf0, 0x32, 0xeb, 0x12, },
 293 +}, {
 294 +       .ksize = 32,
 295 +       .key = blake2_ordered_sequence,
 296 +       .plaintext = blake2_ordered_sequence,
 297 +       .psize = 64,
 298 +       .digest = (u8[]){ 0x89, 0x75, 0xb0, 0x57, 0x7f, 0xd3, 0x55, 0x66,
 299 +                         0xd7, 0x50, 0xb3, 0x62, 0xb0, 0x89, 0x7a, 0x26,
 300 +                         0xc3, 0x99, 0x13, 0x6d, 0xf0, 0x7b, 0xab, 0xab,
 301 +                         0xbd, 0xe6, 0x20, 0x3f, 0xf2, 0x95, 0x4e, 0xd4, },
 302 +}, {
 303 +       .ksize = 1,
 304 +       .key = "B",
 305 +       .plaintext = blake2_ordered_sequence,
 306 +       .psize = 247,
 307 +       .digest = (u8[]){ 0x2e, 0x74, 0x1c, 0x1d, 0x03, 0xf4, 0x9d, 0x84,
 308 +                         0x6f, 0xfc, 0x86, 0x32, 0x92, 0x49, 0x7e, 0x66,
 309 +                         0xd7, 0xc3, 0x10, 0x88, 0xfe, 0x28, 0xb3, 0xe0,
 310 +                         0xbf, 0x50, 0x75, 0xad, 0x8e, 0xa4, 0xe6, 0xb2, },
 311 +}, {
 312 +       .ksize = 16,
 313 +       .key = blake2_ordered_sequence,
 314 +       .plaintext = blake2_ordered_sequence,
 315 +       .psize = 256,
 316 +       .digest = (u8[]){ 0xb9, 0xd2, 0x81, 0x0e, 0x3a, 0xb1, 0x62, 0x9b,
 317 +                         0xad, 0x44, 0x05, 0xf4, 0x92, 0x2e, 0x99, 0xc1,
 318 +                         0x4a, 0x47, 0xbb, 0x5b, 0x6f, 0xb2, 0x96, 0xed,
 319 +                         0xd5, 0x06, 0xb5, 0x3a, 0x7c, 0x7a, 0x65, 0x1d, },
 320 +}};
 321 +
 322  #endif /* _CRYPTO_TESTMGR_H */