Received-SPF: pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18;
From:   "Bhat, Jayalakshmi Manjunath" <jayalakshmi.bhat@hp.com>
To:     Stephan Mueller <smueller@chronox.de>,
        "linux-crypto@vger.kernel.org" <linux-crypto@vger.kernel.org>
Subject: RE: Information required on how to provide reseed input to DRBG
Thread-Topic: Information required on how to provide reseed input to DRBG
Thread-Index: AdZxT90HuxgE8CzuQx++WGnAfz8h1AANP/iAAACUzxAANK7MAABhyJAg
Date:   Sun, 16 Aug 2020 15:23:45 +0000
Message-ID: <TU4PR8401MB1216D834A2D0AB0881776991F65E0@TU4PR8401MB1216.NAMPRD84.PROD.OUTLOOK.COM>
References: <TU4PR8401MB1216EDF43D02A616A8022320F6430@TU4PR8401MB1216.NAMPRD84.PROD.OUTLOOK.COM>
 <24177500.6Emhk5qWAg@tauon.chronox.de>
 <TU4PR8401MB12168D750EEF9AB43607FE8DF6430@TU4PR8401MB1216.NAMPRD84.PROD.OUTLOOK.COM>
 <4093118.6tgchFWduM@tauon.chronox.de>
In-Reply-To: <4093118.6tgchFWduM@tauon.chronox.de>
Accept-Language: en-US
Content-Language: en-US
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-Network-Message-Id: 76c0d30e-07be-411f-d5af-08d841f85e1b
X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Aug 2020 15:23:45.8003
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: ca7981a2-785a-463d-b82a-3db87dfc3ce6
X-MS-Exchange-CrossTenant-mailboxtype: HOSTED
X-MS-Exchange-CrossTenant-userprincipalname: TvYC2AA5cu9qgYFSLelGz3LUFM9Eav6G+7Gcq1PzdBMWmVa3Q3FnTJ+gbDOoyoPSOmvWIIUxEzYVO8X9QApP3w==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: TU4PR8401MB1215
Authentication-Results: relay.mimecast.com;
        auth=pass smtp.auth=CUSA62A171 smtp.mailfrom=jayalakshmi.bhat@hp.com
X-Mimecast-Spam-Score: 0.005
X-Mimecast-Originator: hp.com
Content-Type: text/plain; charset=WINDOWS-1252
Content-Transfer-Encoding: quoted-printable
Sender: linux-crypto-owner@vger.kernel.org
Precedence: bulk
List-ID: <linux-crypto.vger.kernel.org>
X-Mailing-List: linux-crypto@vger.kernel.org

Hi Stephan,

Thank you. Initially I was thinking this is the approach. However I was con=
fused on drbg instance state.
This worked well. Thank you very much once again.

Regards,
Jayalakshmi

-----Original Message-----
From: Stephan Mueller <smueller@chronox.de>=20
Sent: Friday, August 14, 2020 10:13 PM
To: linux-crypto@vger.kernel.org; Bhat, Jayalakshmi Manjunath <jayalakshmi.=
bhat@hp.com>
Subject: Re: Information required on how to provide reseed input to DRBG

Am Donnerstag, 13. August 2020, 17:56:49 CEST schrieb Bhat, Jayalakshmi
Manjunath:

Hi Jayalakshmi,

> Hi Stephen,
>=20
> Thanks you very much on the response. I actually went through the code=20
> that you mentioned. My question is on inputting reseed. Example input=20
> I have is something like this
>=20
> "entropyInput" :
> "F929692DF52BC06878F67A4DBC76471C03981B987FF09BF7E29C18AD6F7F8397", "nonc=
e"
> : "8DB5A7ECEC06078C1C41D2C80AB6CB5EDFE00EA7B1AA6F4F907E80C9BAA008CE",
> "persoString" : "C99B39DD7B8FB0F772",
> "otherInput" :
> =09 {
> =09=09"intendedUse" : "reSeed",
> =09        =09"additionalInput" :=20
> "32ED729CD8FCC001B6B2703F0DBE04D5EED127A615212FEC967566ABBFBC8913027D=20
> ", "entropyInput" :
> "6FE46781AF69B38550A4D2C3888C8E515D28A2A4F141A041F3E2E9A753E46A30" },
> =09 {
> =09=09"intendedUse" : "generate",
> =09=09 "additionalInput" :
> "3C758EC9ECFD905E5865FD8343556815FBD8A064846252CBC161BFEAAC4FA9AF4D0DB
> 8D8B9 FD2E06B2C7A3FD55", "entropyInput" : ""
> =09},
> =09{
> =09=09"intendedUse" : "generate",
> =09=09"additionalInput" :
> "8F8F3F52D2CEF7FA788E984DA152ECA82CF0493E37985E387B3CFCEC2639F610431CA
> 0A81F 740C4CD65230DD291733", "entropyInput" : ""
> =09}

Here is my code for that:


drbg_string_fill(&testentropy, entropyreseed->data,
=09=09=09=09 entropyreseed->len);
drbg_string_fill(&addtl, addtlreseed->data, addtlreseed->len); ret =3D cryp=
to_drbg_reset_test(drng, &addtl, &test_data);

>=20
> I understood
> how to use " entropyInput", " nonce" and " persoString".
> how to use " additionalInput" and " entropyInput" from generate section.
> My question is how to I use " additionalInput" and " entropyInput"=20
> from reSeed section.
>=20
> I could see only below APIs available to set the values.
> crypto_drbg_get_bytes_addtl_test { crypto_rng_set_entropy,
> crypto_rng_generate) crypto_drbg_reset_test {crypto_rng_set_entropy,=20
> crypto_rng_reset} crypto_drbg_get_bytes_addtl { crypto_rng_generate)
>=20
> I am not seeing any API to input reseed values or to trigger reseed?
>=20
> Regards,
> Jaya
>=20
>=20
> -----Original Message-----
> From: linux-crypto-owner@vger.kernel.org
> <linux-crypto-owner@vger.kernel.org> On Behalf Of Stephan Mueller Sent:
> Thursday, August 13, 2020 8:48 PM
> To: linux-crypto@vger.kernel.org; Bhat, Jayalakshmi Manjunath=20
> <jayalakshmi.bhat@hp.com> Subject: Re: Information required on how to=20
> provide reseed input to DRBG
>=20
> Am Donnerstag, 13. August 2020, 11:01:27 CEST schrieb Bhat,=20
> Jayalakshmi
> Manjunath:
>=20
> Hi Jayalakshmi,
>=20
> > Hi All,
> >=20
> > I could successfully execute the CAVS test for DRBG with=20
> > ""predResistanceEnabled" : true" reseedImplemented": false.
> >=20
> > I am trying to execute the tests with "predResistanceEnabled" :=20
> > false; "reseedImplemented" : true. But not successful.
> >=20
> > Can anyone please let me know how to provide reseed data to DRBG?
>=20
> See, for example, how drbg_nopr_sha256_tv_template is processed with
> drbg_cavs_test()
>=20
> > Regards.
> > Jayalakshmi
>=20
> Ciao
> Stephan


Ciao
Stephan