* Need help with failling gcm_base(ctr,ghash-generic) selftest @ 2019-08-01 19:42 Corentin Labbe 2019-08-02 0:24 ` Pascal Van Leeuwen 0 siblings, 1 reply; 4+ messages in thread From: Corentin Labbe @ 2019-08-01 19:42 UTC (permalink / raw) To: herbert, linux-crypto; +Cc: linux-kernel Hello I am writing the Allwinner sun8i-ce driver and when running tcrypt I got [ 30.201739] alg: aead: gcm_base(ctr-aes-sun8i-ce,ghash-generic) decryption failed on test vector 3; expected_error=0, actual_error=-74, cfg=\"random: may_sleep use_digest src_divs=[100.0%@+2614] dst_divs=[5.90%@alignmask+3015, 60.56%@+3996, 17.92%@+865, 15.62%@+10]\" or [ 148.613537] alg: aead: gcm_base(ctr-aes-sun8i-ce,ghash-generic) encryption test failed (wrong result) on test vector 2, cfg=\"random: may_sleep use_final src_divs=[100.0%@+0] iv_offset=20\" Since ctr-aes-sun8i-ce is passing the ctr(aes) selftest, I dont understand what could be wrong. Thanks Regards ^ permalink raw reply [flat|nested] 4+ messages in thread
* RE: Need help with failling gcm_base(ctr,ghash-generic) selftest 2019-08-01 19:42 Need help with failling gcm_base(ctr,ghash-generic) selftest Corentin Labbe @ 2019-08-02 0:24 ` Pascal Van Leeuwen 2019-08-02 5:18 ` Corentin Labbe 0 siblings, 1 reply; 4+ messages in thread From: Pascal Van Leeuwen @ 2019-08-02 0:24 UTC (permalink / raw) To: Corentin Labbe, herbert, linux-crypto; +Cc: linux-kernel > -----Original Message----- > From: linux-crypto-owner@vger.kernel.org <linux-crypto-owner@vger.kernel.org> On Behalf Of > Corentin Labbe > Sent: Thursday, August 1, 2019 9:43 PM > To: herbert@gondor.apana.org.au; linux-crypto@vger.kernel.org > Cc: linux-kernel@vger.kernel.org > Subject: Need help with failling gcm_base(ctr,ghash-generic) selftest > > Hello > > I am writing the Allwinner sun8i-ce driver and when running tcrypt I got > [ 30.201739] alg: aead: gcm_base(ctr-aes-sun8i-ce,ghash-generic) decryption failed on test > vector 3; expected_error=0, actual_error=-74, cfg=\"random: may_sleep use_digest > src_divs=[100.0%@+2614] dst_divs=[5.90%@alignmask+3015, 60.56%@+3996, 17.92%@+865, > 15.62%@+10]\" > or > The decryption reports only an -EBADMSG here, which means the decryption itself went fine, but the authentication tag mismatched. > [ 148.613537] alg: aead: gcm_base(ctr-aes-sun8i-ce,ghash-generic) encryption test failed > (wrong result) on test vector 2, cfg=\"random: may_sleep use_final src_divs=[100.0%@+0] > iv_offset=20\" > Can't say for sure, but considering the decrypt error, this is most likely just a mismatch on the appended authentication tag. > Since ctr-aes-sun8i-ce is passing the ctr(aes) selftest, I dont understand what could be > wrong. > That is possible, as this appears to be a problem with the authentication part, not the encryption part. So possibly a problem with the way you setup the authentication key (which is actually derived from the encryption key, but I don't know if your hardware does this autonomously, mine doesn't) and/or operation? > Thanks > Regards Regards, Pascal van Leeuwen Silicon IP Architect, Multi-Protocol Engines @ Verimatrix www.insidesecure.com ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: Need help with failling gcm_base(ctr,ghash-generic) selftest 2019-08-02 0:24 ` Pascal Van Leeuwen @ 2019-08-02 5:18 ` Corentin Labbe 2019-08-02 8:55 ` Pascal Van Leeuwen 0 siblings, 1 reply; 4+ messages in thread From: Corentin Labbe @ 2019-08-02 5:18 UTC (permalink / raw) To: Pascal Van Leeuwen; +Cc: herbert, linux-crypto, linux-kernel On Fri, Aug 02, 2019 at 12:24:04AM +0000, Pascal Van Leeuwen wrote: > > -----Original Message----- > > From: linux-crypto-owner@vger.kernel.org <linux-crypto-owner@vger.kernel.org> On Behalf Of > > Corentin Labbe > > Sent: Thursday, August 1, 2019 9:43 PM > > To: herbert@gondor.apana.org.au; linux-crypto@vger.kernel.org > > Cc: linux-kernel@vger.kernel.org > > Subject: Need help with failling gcm_base(ctr,ghash-generic) selftest > > > > Hello > > > > I am writing the Allwinner sun8i-ce driver and when running tcrypt I got > > [ 30.201739] alg: aead: gcm_base(ctr-aes-sun8i-ce,ghash-generic) decryption failed on test > > vector 3; expected_error=0, actual_error=-74, cfg=\"random: may_sleep use_digest > > src_divs=[100.0%@+2614] dst_divs=[5.90%@alignmask+3015, 60.56%@+3996, 17.92%@+865, > > 15.62%@+10]\" > > or > > > The decryption reports only an -EBADMSG here, which means the decryption itself went > fine, but the authentication tag mismatched. > > > > [ 148.613537] alg: aead: gcm_base(ctr-aes-sun8i-ce,ghash-generic) encryption test failed > > (wrong result) on test vector 2, cfg=\"random: may_sleep use_final src_divs=[100.0%@+0] > > iv_offset=20\" > > > Can't say for sure, but considering the decrypt error, this is most likely just a > mismatch on the appended authentication tag. > > > Since ctr-aes-sun8i-ce is passing the ctr(aes) selftest, I dont understand what could be > > wrong. > > > That is possible, as this appears to be a problem with the authentication part, > not the encryption part. So possibly a problem with the way you setup the > authentication key (which is actually derived from the encryption key, but I don't > know if your hardware does this autonomously, mine doesn't) and/or operation? > But since my driver is just a skcipher, I dont understand why I should care about any aead part, right ? ^ permalink raw reply [flat|nested] 4+ messages in thread
* RE: Need help with failling gcm_base(ctr,ghash-generic) selftest 2019-08-02 5:18 ` Corentin Labbe @ 2019-08-02 8:55 ` Pascal Van Leeuwen 0 siblings, 0 replies; 4+ messages in thread From: Pascal Van Leeuwen @ 2019-08-02 8:55 UTC (permalink / raw) To: Corentin Labbe; +Cc: herbert, linux-crypto, linux-kernel > -----Original Message----- > From: Corentin Labbe <clabbe.montjoie@gmail.com> > Sent: Friday, August 2, 2019 7:19 AM > To: Pascal Van Leeuwen <pvanleeuwen@verimatrix.com> > Cc: herbert@gondor.apana.org.au; linux-crypto@vger.kernel.org; linux- > kernel@vger.kernel.org > Subject: Re: Need help with failling gcm_base(ctr,ghash-generic) selftest > > On Fri, Aug 02, 2019 at 12:24:04AM +0000, Pascal Van Leeuwen wrote: > > > -----Original Message----- > > > From: linux-crypto-owner@vger.kernel.org <linux-crypto-owner@vger.kernel.org> On > Behalf Of > > > Corentin Labbe > > > Sent: Thursday, August 1, 2019 9:43 PM > > > To: herbert@gondor.apana.org.au; linux-crypto@vger.kernel.org > > > Cc: linux-kernel@vger.kernel.org > > > Subject: Need help with failling gcm_base(ctr,ghash-generic) selftest > > > > > > Hello > > > > > > I am writing the Allwinner sun8i-ce driver and when running tcrypt I got > > > [ 30.201739] alg: aead: gcm_base(ctr-aes-sun8i-ce,ghash-generic) decryption failed > on test > > > vector 3; expected_error=0, actual_error=-74, cfg=\"random: may_sleep use_digest > > > src_divs=[100.0%@+2614] dst_divs=[5.90%@alignmask+3015, 60.56%@+3996, 17.92%@+865, > > > 15.62%@+10]\" > > > or > > > > > The decryption reports only an -EBADMSG here, which means the decryption itself went > > fine, but the authentication tag mismatched. > > > > > > > [ 148.613537] alg: aead: gcm_base(ctr-aes-sun8i-ce,ghash-generic) encryption test > failed > > > (wrong result) on test vector 2, cfg=\"random: may_sleep use_final > src_divs=[100.0%@+0] > > > iv_offset=20\" > > > > > Can't say for sure, but considering the decrypt error, this is most likely just a > > mismatch on the appended authentication tag. > > > > > Since ctr-aes-sun8i-ce is passing the ctr(aes) selftest, I dont understand what could > be > > > wrong. > > > > > That is possible, as this appears to be a problem with the authentication part, > > not the encryption part. So possibly a problem with the way you setup the > > authentication key (which is actually derived from the encryption key, but I don't > > know if your hardware does this autonomously, mine doesn't) and/or operation? > > > > But since my driver is just a skcipher, I dont understand why I should care about any aead > part, right ? > Ah, my bad ... your aes-ctr skcipher is being wrapped by the generic gcm_base template here, I missed that detail ... wish I could help you further, but I can't think of anything obvious that could cause this (decrypt fails on auth as I remarked earlier but only with a specific scatter buffer layout??). Regards, Pascal van Leeuwen Silicon IP Architect, Multi-Protocol Engines @ Verimatrix www.insidesecure.com ^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2019-08-02 8:55 UTC | newest] Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed) -- links below jump to the message on this page -- 2019-08-01 19:42 Need help with failling gcm_base(ctr,ghash-generic) selftest Corentin Labbe 2019-08-02 0:24 ` Pascal Van Leeuwen 2019-08-02 5:18 ` Corentin Labbe 2019-08-02 8:55 ` Pascal Van Leeuwen
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox; as well as URLs for NNTP newsgroup(s).