Received: by 2002:a05:6a10:f3d0:0:0:0:0 with SMTP id a16csp266842pxv; Thu, 24 Jun 2021 07:30:43 -0700 (PDT) X-Google-Smtp-Source: ABdhPJxbvjrwJAcCPlwjSF6QzedyuqpGxNfp1AvHvcQp/QOJhVMF8gnfeX4CtEfTlIVYthwdXRSr X-Received: by 2002:a92:da88:: with SMTP id u8mr3916635iln.185.1624545043207; Thu, 24 Jun 2021 07:30:43 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1624545043; cv=none; d=google.com; s=arc-20160816; b=JWHa71e8kH1WFW8KjQElHRawok9lnidAlQtEpTfR70J9hFBxa7HiDDtwt2eOLu4CQE z8MKR0q+RfeSHhrFeQ4AOyR4kfDA+MXchfRTx52g355D2sDmfFQ9yj5TX8sLK3oT72JP sidK9RqLu7qzt+a4ovb1L736PZAfRNEyjRiQnhpTbOtS01vjdOEZ2x3EYMJ9gTUoRGK6 /TaMkWyVbr8cCoM1c7/W085CsOz+zYc+j9oXzoXP1LFQTzLUHF5lujGoMY1T+c0sEsd8 j/v12jR/z/R493zPDo1R5u/COePwJCQUObkja4G6ZG9iozo0ZKv4nWH7UBzHfoN5T7UX EGew== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:user-agent:in-reply-to:content-transfer-encoding :content-disposition:mime-version:references:message-id:subject:cc :to:from:date; bh=VI0WbBjVpLAqcgLFUMitzzvsI43mQrKjfFmT7vIoT+0=; b=j5g2isTp6YBPRABXe46RdqrXEfg+u77j4+P9QZ8yz6Q+br1YS7cB+RBD8epHstNzST YrHztvXYUMExthPCs4/z/NUnhQpuhB6ze3oPubrLfA9sxOGg7h8D63y7S73wbikL6CqW lHR+O5XLSC/XQjquBtO3BoQ0Lr0dFk5KwiHMJYjOFTKI4VdiSorej8JZ/MhGH/1t5+4u vFWTm3yuFnaLj4sci+KEfnX8qzmfAho4Xz/aLoIAje71nFRS5H9T4EPnalas/0yXSkqD bLb8iBqXnB2mjML8elNwdWPuKtkekvLWhGilEnMJ/5E1kEMePZFgxgNlTKX1pgY6dJ7C imGg== ARC-Authentication-Results: i=1; mx.google.com; spf=pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-crypto-owner@vger.kernel.org Return-Path: Received: from vger.kernel.org (vger.kernel.org. [23.128.96.18]) by mx.google.com with ESMTP id l9si3080295ilh.7.2021.06.24.07.30.25; Thu, 24 Jun 2021 07:30:43 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) client-ip=23.128.96.18; Authentication-Results: mx.google.com; spf=pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 23.128.96.18 as permitted sender) smtp.mailfrom=linux-crypto-owner@vger.kernel.org Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S230296AbhFXOcn (ORCPT + 99 others); Thu, 24 Jun 2021 10:32:43 -0400 Received: from helcar.hmeau.com ([216.24.177.18]:50862 "EHLO deadmen.hmeau.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S230170AbhFXOcm (ORCPT ); Thu, 24 Jun 2021 10:32:42 -0400 Received: from gondobar.mordor.me.apana.org.au ([192.168.128.4] helo=gondobar) by deadmen.hmeau.com with esmtp (Exim 4.92 #5 (Debian)) id 1lwQN4-0005Ye-IP; Thu, 24 Jun 2021 22:30:22 +0800 Received: from herbert by gondobar with local (Exim 4.92) (envelope-from ) id 1lwQN1-0005HE-Eo; Thu, 24 Jun 2021 22:30:19 +0800 Date: Thu, 24 Jun 2021 22:30:19 +0800 From: Herbert Xu To: Stephan =?iso-8859-1?Q?M=FCller?= Cc: linux-crypto@vger.kernel.org, Vlad Dronov Subject: Re: [PATCH] crypto: DRBG - switch to HMAC SHA512 DRBG as default DRBG Message-ID: <20210624143019.GA20222@gondor.apana.org.au> References: <3171520.o5pSzXOnS6@positron.chronox.de> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <3171520.o5pSzXOnS6@positron.chronox.de> User-Agent: Mutt/1.10.1 (2018-07-13) Precedence: bulk List-ID: X-Mailing-List: linux-crypto@vger.kernel.org On Thu, May 20, 2021 at 09:31:11PM +0200, Stephan M?ller wrote: > > diff --git a/crypto/drbg.c b/crypto/drbg.c > index 1b4587e0ddad..ea85d4a0fe9e 100644 > --- a/crypto/drbg.c > +++ b/crypto/drbg.c > @@ -176,18 +176,18 @@ static const struct drbg_core drbg_cores[] = { > .blocklen_bytes = 48, > .cra_name = "hmac_sha384", > .backend_cra_name = "hmac(sha384)", > - }, { > - .flags = DRBG_HMAC | DRBG_STRENGTH256, > - .statelen = 64, /* block length of cipher */ > - .blocklen_bytes = 64, > - .cra_name = "hmac_sha512", > - .backend_cra_name = "hmac(sha512)", > }, { > .flags = DRBG_HMAC | DRBG_STRENGTH256, > .statelen = 32, /* block length of cipher */ > .blocklen_bytes = 32, > .cra_name = "hmac_sha256", > .backend_cra_name = "hmac(sha256)", > + }, { > + .flags = DRBG_HMAC | DRBG_STRENGTH256, > + .statelen = 64, /* block length of cipher */ > + .blocklen_bytes = 64, > + .cra_name = "hmac_sha512", > + .backend_cra_name = "hmac(sha512)", > }, Hi Stephan: I just noticed that unlike hmac(sha256) drbg with hmac(sha512) doesn't have a self-test. Could you add one for it please? Thanks, -- Email: Herbert Xu Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt