Received-SPF: pass (google.com: domain of linux-crypto-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20;
Message-ID: <ec12c50a30400385e6180b53a4c17b2be82d10db.camel@corsac.net>
Subject: Re: crypto_alg_lookup() returning -80 (ELIBBAD)
From:   Yves-Alexis Perez <corsac@corsac.net>
To:     linux-crypto@vger.kernel.org
Cc:     Tobias Brunner <tobias@strongswan.org>
Date:   Mon, 21 Nov 2022 13:18:10 +0100
In-Reply-To: <a378dcbc2a7ccb0353beb23b69039117ecbe8114.camel@corsac.net>
References: <a378dcbc2a7ccb0353beb23b69039117ecbe8114.camel@corsac.net>
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="UTF-8"
User-Agent: Evolution 3.46.1-1 
MIME-Version: 1.0
Precedence: bulk

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Fri, 2022-10-07 at 18:17 +0200, Yves-Alexis Perez wrote:
> So there's definitely something fishy in my kernel and I'm unsure why.
>=20
> Would anyone have a clue about what is happening here, and any idea how t=
o
> debug further?

With some help from systemtap I managed to debug further and narrowed down =
the
problem to the RNG (and more specifically anssi_cprng).

When booting, first load of the module returns:

[    7.910500] alg: cprng: Failed to load transform for ansi_cprng: -2
[    7.917774] alg: No test for fips(ansi_cprng) (fips_ansi_cprng)

But unloading/reloading the module afterwards only shows the second line an=
d
IPsec starts working again (whether the `ip xfrm state` lines or strongSwan
more generally).

I have yet to debug further but my feeling is that it might be TPM-related =
but
I'm unsure and have no clear debugging path for now. I'll let you know if I
find anything.

Regards,
- --=20
Yves-Alexis
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEE8vi34Qgfo83x35gF3rYcyPpXRFsFAmN7bIIACgkQ3rYcyPpX
RFsqdQgA62FGOagIAHKW000yQ/pm42+vO9DZFo7zJ17OHCsjintACME/bU3p3O+l
mmWz7yv1ib7GcCL19p1ZN/XX3ukORYwuvm3ixKy7mytRb1qwphKLKl1t08NeEceB
b7z2ZyjQAIPslkT0LL88fk5T3iOjelZg94fNTerUxDiGWCt6a8Oqz09jBUEK2yST
UgkOGVPlNQM5Frs/SUiC2HhkHQEmek/urwncKVBfBCcmJQcqaaGBKeAyZB+JEyCz
1h0HnrHhIhjWPj93SwdbaqjnT7eIOT+jQSQ67CatUWkQBEHT1FJgcyle/mzhb8hs
wGW4VaOtbfTOtdMVlXFyipNMszMG2g=3D=3D
=3D6MCJ
-----END PGP SIGNATURE-----