Received-SPF: pass (google.com: best guess record for domain of linux-crypto-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
MIME-Version: 1.0
References: <20190515130746.cvhkxxffrmmynfq3@pengutronix.de>
In-Reply-To: <20190515130746.cvhkxxffrmmynfq3@pengutronix.de>
From:   Fabio Estevam <festevam@gmail.com>
Date:   Wed, 15 May 2019 10:17:19 -0300
Message-ID: <CAOMZO5CJvcipPNY6TXnwwET2fc=zaP3Dj3HPT-zfZpzfqHkeHQ@mail.gmail.com>
Subject: Re: ctr(aes) broken in CAAM driver
To:     Sascha Hauer <s.hauer@pengutronix.de>
Cc:     "open list:HARDWARE RANDOM NUMBER GENERATOR CORE" 
        <linux-crypto@vger.kernel.org>,
        =?UTF-8?Q?Horia_Geant=C4=83?= <horia.geanta@nxp.com>,
        Sascha Hauer <kernel@pengutronix.de>
Content-Type: text/plain; charset="UTF-8"
Sender: linux-crypto-owner@vger.kernel.org
Precedence: bulk

Hi Sascha,

On Wed, May 15, 2019 at 10:09 AM Sascha Hauer <s.hauer@pengutronix.de> wrote:
>
> Hi,
>
> ctr(aes) is broken in current kernel (v5.1+). It may have been broken
> for longer, but the crypto tests now check for a correct output IV. The
> testmgr answers with:
>
> alg: skcipher: ctr-aes-caam encryption test failed (wrong output IV) on test vector 0, cfg="in-place"
>
> output IV is this, which is the last 16 bytes of the encrypted message:
> 00000000: 1e 03 1d da 2f be 03 d1 79 21 70 a0 f3 00 9c ee
>
> It should look like this instead, which is input IV + 4:
> 00000000: f0 f1 f2 f3 f4 f5 f6 f7 f8 f9 fa fb fc fd ff 03
>
> I have no idea how to fix this as I don't know how to get the output IV
> back from the CAAM. Any ideas?

Is this problem similar to this one?
https://www.mail-archive.com/linux-crypto@vger.kernel.org/msg37512.html