Received: by 2002:a25:ab43:0:0:0:0:0 with SMTP id u61csp5449326ybi; Wed, 12 Jun 2019 02:42:09 -0700 (PDT) X-Google-Smtp-Source: APXvYqz1AjIP9JSCFnB0VrR3oJbhX1+2X1e/Njxc/2y7BLEGui4/xBgZkl0dGCt8q3TR5xv14emZ X-Received: by 2002:a17:90a:b298:: with SMTP id c24mr31560948pjr.18.1560332528991; Wed, 12 Jun 2019 02:42:08 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1560332528; cv=none; d=google.com; s=arc-20160816; b=P9rbRAz6v08om58tGLFEz4ziTBb2t8/hmeCHRgpfu5ZrDQuzLbdH5eaBmwXiF0eWS8 DR8Bn+xeHYEYImxeOQVymZMgexc8OVX8LDwx9mB7rt4A15b56QBVp91FWL8D8uL2JH0r 3srD2X4OKvRxQKJQggqzIPA2gy4XgCBE+iLITJ43MxYtXVXYiez/vexya24voAxTbb8T SufcN61NsfgROLSP7tkJj9HhGHSoMLzgJyS8RGksZnsbt0jFURpwBXgb6TtmOyj3omIC BUHrEVDhaw6/ENgjKwbOLIXzYzVEi7r7EjlXiZM5iPdmhhFbemgrlHHG5bnaxyR3b1hf A3bQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:sender:user-agent:in-reply-to :content-disposition:mime-version:references:message-id:subject:cc :to:from:date; bh=xeNVwJh/sCR1XhbT7shn5i0WZgm+tfYM0Sy67dGS16k=; b=rzCXIM35B/8ElvRxJ00hSc9oAQqvphRxAvLROFkoK9FYiwicbkX0qtO4GzjF8vXB4s woOrOvcU0WsXsQRcjT+RcURNd3VT2aBnzskefs/fS8axex9I/v8Hdkeb3wwYKTUit24x pOhnmkRA4kW3tE2Bp9wWFeiMSLkavy+Nvco38Rd4o7TnEDrXPw6F4+RbJUEYZKWWKGD6 zYEYmpxvAPqhBFjhocI+ep8OHvSmluVByXfWljyvGIHnO3xHX9AR5SwAedUawviynnNj bwG5Afbh5gp7WGEtX55SqVvXi73VIF0wH4zeUVTgYLpZhlNadYXwr9JpC62OMYv+dh2F 2Llg== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: best guess record for domain of linux-crypto-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-crypto-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [209.132.180.67]) by mx.google.com with ESMTP id l102si5107705pje.78.2019.06.12.02.41.47; Wed, 12 Jun 2019 02:42:08 -0700 (PDT) Received-SPF: pass (google.com: best guess record for domain of linux-crypto-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67; Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of linux-crypto-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) smtp.mailfrom=linux-crypto-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727677AbfFLJkx (ORCPT + 99 others); Wed, 12 Jun 2019 05:40:53 -0400 Received: from metis.ext.pengutronix.de ([85.220.165.71]:51759 "EHLO metis.ext.pengutronix.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1725497AbfFLJkx (ORCPT ); Wed, 12 Jun 2019 05:40:53 -0400 Received: from ptx.hi.pengutronix.de ([2001:67c:670:100:1d::c0]) by metis.ext.pengutronix.de with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1hazkQ-0005lO-Uu; Wed, 12 Jun 2019 11:40:50 +0200 Received: from sha by ptx.hi.pengutronix.de with local (Exim 4.89) (envelope-from ) id 1hazkQ-0007HA-55; Wed, 12 Jun 2019 11:40:50 +0200 Date: Wed, 12 Jun 2019 11:40:50 +0200 From: Sascha Hauer To: Horia Geanta Cc: Fabio Estevam , "open list:HARDWARE RANDOM NUMBER GENERATOR CORE" , Sascha Hauer Subject: Re: ctr(aes) broken in CAAM driver Message-ID: <20190612094050.6esonhumzv2ywhdh@pengutronix.de> References: <20190515130746.cvhkxxffrmmynfq3@pengutronix.de> <20190515132225.oczgouglycuhqo4l@pengutronix.de> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Sent-From: Pengutronix Hildesheim X-URL: http://www.pengutronix.de/ X-IRC: #ptxdist @freenode X-Accept-Language: de,en X-Accept-Content-Type: text/plain X-Uptime: 11:38:15 up 25 days, 15:56, 85 users, load average: 0.02, 0.08, 0.08 User-Agent: NeoMutt/20170113 (1.7.2) X-SA-Exim-Connect-IP: 2001:67c:670:100:1d::c0 X-SA-Exim-Mail-From: sha@pengutronix.de X-SA-Exim-Scanned: No (on metis.ext.pengutronix.de); SAEximRunCond expanded to false X-PTX-Original-Recipient: linux-crypto@vger.kernel.org Sender: linux-crypto-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-crypto@vger.kernel.org Hi Horia, On Wed, May 15, 2019 at 01:35:16PM +0000, Horia Geanta wrote: > For talitos, the problem is the lack of IV update. > > For caam, the problem is incorrect IV update (output IV is equal to last > ciphertext block, which is correect for cbc, but not for ctr mode). > > I am working at a fix, but it takes longer since I would like to program the > accelerator to the save the IV (and not do counter increment in SW, which > created problems for many other implementations). Any news here? With the fix Ard provided gcm(aes) now works again, but only as long as the crypto self tests are disabled. Sascha -- Pengutronix e.K. | | Industrial Linux Solutions | http://www.pengutronix.de/ | Peiner Str. 6-8, 31137 Hildesheim, Germany | Phone: +49-5121-206917-0 | Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 |