Received-SPF: pass (google.com: best guess record for domain of linux-crypto-owner@vger.kernel.org designates 209.132.180.67 as permitted sender) client-ip=209.132.180.67;
From:   Pascal Van Leeuwen <pvanleeuwen@verimatrix.com>
To:     Corentin Labbe <clabbe.montjoie@gmail.com>,
        "herbert@gondor.apana.org.au" <herbert@gondor.apana.org.au>,
        "linux-crypto@vger.kernel.org" <linux-crypto@vger.kernel.org>
CC:     "linux-kernel@vger.kernel.org" <linux-kernel@vger.kernel.org>
Subject: RE: Need help with failling gcm_base(ctr,ghash-generic) selftest
Thread-Topic: Need help with failling gcm_base(ctr,ghash-generic) selftest
Thread-Index: AQHVSKFY6oVMoifWy0S5Dl262GlQMabm/nnw
Date:   Fri, 2 Aug 2019 00:24:04 +0000
Message-ID: <MN2PR20MB297372F8FB158C59BF4F6F2FCAD90@MN2PR20MB2973.namprd20.prod.outlook.com>
References: <20190801194249.GA18705@Red>
In-Reply-To: <20190801194249.GA18705@Red>
Accept-Language: en-US
Content-Language: en-US
received-spf: None (protection.outlook.com: verimatrix.com does not designate
 permitted sender hosts)
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 4384dd67-989a-4ef9-dca2-08d716dfb981
X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Aug 2019 00:24:04.0908
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: dcb260f9-022d-4495-8602-eae51035a0d0
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: pvanleeuwen@verimatrix.com
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR20MB3120
Sender: linux-crypto-owner@vger.kernel.org
Precedence: bulk
List-ID: <linux-crypto.vger.kernel.org>
X-Mailing-List: linux-crypto@vger.kernel.org

> -----Original Message-----
> From: linux-crypto-owner@vger.kernel.org <linux-crypto-owner@vger.kernel.=
org> On Behalf Of
> Corentin Labbe
> Sent: Thursday, August 1, 2019 9:43 PM
> To: herbert@gondor.apana.org.au; linux-crypto@vger.kernel.org
> Cc: linux-kernel@vger.kernel.org
> Subject: Need help with failling gcm_base(ctr,ghash-generic) selftest
>=20
> Hello
>=20
> I am writing the Allwinner sun8i-ce driver and when running tcrypt I got
> [   30.201739] alg: aead: gcm_base(ctr-aes-sun8i-ce,ghash-generic) decryp=
tion failed on test
> vector 3; expected_error=3D0, actual_error=3D-74, cfg=3D\"random: may_sle=
ep use_digest
> src_divs=3D[100.0%@+2614] dst_divs=3D[5.90%@alignmask+3015, 60.56%@+3996,=
 17.92%@+865,
> 15.62%@+10]\"
> or
>
The decryption reports only an -EBADMSG here, which means the decryption it=
self went
fine, but the authentication tag mismatched.


> [  148.613537] alg: aead: gcm_base(ctr-aes-sun8i-ce,ghash-generic) encryp=
tion test failed
> (wrong result) on test vector 2, cfg=3D\"random: may_sleep use_final src_=
divs=3D[100.0%@+0]
> iv_offset=3D20\"
>=20
Can't say for sure, but considering the decrypt error, this is most likely =
just a
mismatch on the appended authentication tag.

> Since ctr-aes-sun8i-ce is passing the ctr(aes) selftest, I dont understan=
d what could be
> wrong.
>=20
That is possible, as this appears to be a problem with the authentication p=
art,
not the encryption part. So possibly a problem with the way you setup the=20
authentication key (which is actually derived from the encryption key, but =
I don't
know if your hardware does this autonomously, mine doesn't) and/or operatio=
n?

> Thanks
> Regards


Regards,
Pascal van Leeuwen
Silicon IP Architect, Multi-Protocol Engines @ Verimatrix
www.insidesecure.com