Received-SPF: pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18;
From:   Stephan Mueller <smueller@chronox.de>
To:     "Bhat, Jayalakshmi Manjunath" <jayalakshmi.bhat@hp.com>
Cc:     Ard Biesheuvel <ardb@kernel.org>,
        "linux-crypto@vger.kernel.org" <linux-crypto@vger.kernel.org>
Subject: Re: Monte Carlo Test (MCT) for AES
Date:   Tue, 26 May 2020 07:23:11 +0200
Message-ID: <5330121.xyrNXEdPSU@tauon.chronox.de>
In-Reply-To: <CS1PR8401MB0646A38BBFAD7FBABE50CBECF6B00@CS1PR8401MB0646.NAMPRD84.PROD.OUTLOOK.COM>
References: <TU4PR8401MB0544BD5EDA39A5E1E3388940F6B40@TU4PR8401MB0544.NAMPRD84.PROD.OUTLOOK.COM> <12555443.uLZWGnKmhe@positron.chronox.de> <CS1PR8401MB0646A38BBFAD7FBABE50CBECF6B00@CS1PR8401MB0646.NAMPRD84.PROD.OUTLOOK.COM>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="iso-8859-1"
Sender: linux-crypto-owner@vger.kernel.org
Precedence: bulk

Am Dienstag, 26. Mai 2020, 05:07:15 CEST schrieb Bhat, Jayalakshmi Manjunat=
h:

Hi Jayalakshmi,

> Hi Stephen,
>=20
> I to add the backend support using libkcapi APIs to exercise Kernel CAVP.
> Can you please  confirm if my understanding is correct?

You would need to implement an equivalent to backend_openssl.c or=20
backend_nettle.c=20
>=20
> Regards,
> Jaya
>=20
> From: linux-crypto-owner@vger.kernel.org
> <linux-crypto-owner@vger.kernel.org> On Behalf Of Stephan M=FCller Sent:
> Sunday, May 24, 2020 12:14 AM
> To: Bhat, Jayalakshmi Manjunath <jayalakshmi.bhat@hp.com>; Ard Biesheuvel
> <ardb@kernel.org> Cc: linux-crypto@vger.kernel.org
> Subject: Re: Monte Carlo Test (MCT) for AES
>=20
> Am Samstag, 23. Mai 2020, 00:11:35 CEST schrieb Ard Biesheuvel:
>=20
> Hi Ard,
>=20
> > (+ Stephan)
> >=20
> > On Fri, 22 May 2020 at 05:20, Bhat, Jayalakshmi Manjunath
> >=20
> > <mailto:jayalakshmi.bhat@hp.com> wrote:
> > > Hi All,
> > >=20
> > > We are using libkcapi for CAVS vectors verification on our Linux kern=
el.
> > > Our Linux kernel version is 4.14. Monte Carlo Test (MCT) for SHA work=
ed
> > > fine using libkcapi. We are trying to perform Monte Carlo Test (MCT) =
for
> > > AES using libkcapi. We not able to get the result successfully. Is it
> > > possible to use libkcapi to achieve AES MCT?
>=20
> Yes, it is possible. I have the ACVP testing implemented completely for A=
ES
> (ECB, CBC, CFB8, CFB128, CTR, XTS, GCM internal and external IV generatio=
n,
> CCM), TDES (ECB, CTR, CBC), SHA, HMAC, CMAC (AES and TDES). I did not yet
> try TDES CFB8 and CFB64 through, but it should work out of the box.
>=20
> AES-KW is the only one that cannot be tested through libkcapi as AF_ALG h=
as
> one shortcoming preventing this test.
>=20
> The testing is implemented with [1] but the libkcapi test backend is not
> public. The public code in [1] already implements the MCT. So, if you want
> to use [1], all you need to implement is a libkcapi backend that just
> invokes the ciphers as defined by the API in [1].
>=20
> [1] https://github.com/smuellerDD/acvpparser
>=20
> Ciao
> Stephan


Ciao
Stephan