crypto/tcrypt.c

   1 // SPDX-License-Identifier: GPL-2.0-or-later
   2 /*
   3  * Quick & dirty crypto testing module.
   4  *
   5  * This will only exist until we have a better testing mechanism
   6  * (e.g. a char device).
   7  *
   8  * Copyright (c) 2002 James Morris <jmorris@intercode.com.au>
   9  * Copyright (c) 2002 Jean-Francois Dive <jef@linuxbe.org>
  10  * Copyright (c) 2007 Nokia Siemens Networks
  11  *
  12  * Updated RFC4106 AES-GCM testing.
  13  *    Authors: Aidan O'Mahony (aidan.o.mahony@intel.com)
  14  *             Adrian Hoban <adrian.hoban@intel.com>
  15  *             Gabriele Paoloni <gabriele.paoloni@intel.com>
  16  *             Tadeusz Struk (tadeusz.struk@intel.com)
  17  *             Copyright (c) 2010, Intel Corporation.
  18  */
  19
  20 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
  21
  22 #include <crypto/aead.h>
  23 #include <crypto/hash.h>
  24 #include <crypto/skcipher.h>
  25 #include <linux/err.h>
  26 #include <linux/fips.h>
  27 #include <linux/init.h>
  28 #include <linux/gfp.h>
  29 #include <linux/module.h>
  30 #include <linux/scatterlist.h>
  31 #include <linux/string.h>
  32 #include <linux/moduleparam.h>
  33 #include <linux/jiffies.h>
  34 #include <linux/timex.h>
  35 #include <linux/interrupt.h>
  36 #include "tcrypt.h"
  37
  38 /*
  39  * Need slab memory for testing (size in number of pages).
  40  */
  41 #define TVMEMSIZE       4
  42
  43 /*
  44 * Used by test_cipher_speed()
  45 */
  46 #define ENCRYPT 1
  47 #define DECRYPT 0
  48
  49 #define MAX_DIGEST_SIZE         64
  50
  51 /*
  52  * return a string with the driver name
  53  */
  54 #define get_driver_name(tfm_type, tfm) crypto_tfm_alg_driver_name(tfm_type ## _tfm(tfm))
  55
  56 /*
  57  * Used by test_cipher_speed()
  58  */
  59 static unsigned int sec;
  60
  61 static char *alg = NULL;
  62 static u32 type;
  63 static u32 mask;
  64 static int mode;
  65 static u32 num_mb = 8;
  66 static unsigned int klen;
  67 static char *tvmem[TVMEMSIZE];
  68
  69 static const char *check[] = {
  70         "des", "md5", "des3_ede", "rot13", "sha1", "sha224", "sha256", "sm3",
  71         "blowfish", "twofish", "serpent", "sha384", "sha512", "md4", "aes",
  72         "cast6", "arc4", "michael_mic", "deflate", "crc32c", "tea", "xtea",
  73         "khazad", "wp512", "wp384", "wp256", "xeta",  "fcrypt",
  74         "camellia", "seed", "rmd160",
  75         "lzo", "lzo-rle", "cts", "sha3-224", "sha3-256", "sha3-384",
  76         "sha3-512", "streebog256", "streebog512",
  77         NULL
  78 };
  79
  80 static const int block_sizes[] = { 16, 64, 256, 1024, 1420, 4096, 0 };
  81 static const int aead_sizes[] = { 16, 64, 256, 512, 1024, 1420, 4096, 8192, 0 };
  82
  83 #define XBUFSIZE 8
  84 #define MAX_IVLEN 32
  85
  86 static int testmgr_alloc_buf(char *buf[XBUFSIZE])
  87 {
  88         int i;
  89
  90         for (i = 0; i < XBUFSIZE; i++) {
  91                 buf[i] = (void *)__get_free_page(GFP_KERNEL);
  92                 if (!buf[i])
  93                         goto err_free_buf;
  94         }
  95
  96         return 0;
  97
  98 err_free_buf:
  99         while (i-- > 0)
 100                 free_page((unsigned long)buf[i]);
 101
 102         return -ENOMEM;
 103 }
 104
 105 static void testmgr_free_buf(char *buf[XBUFSIZE])
 106 {
 107         int i;
 108
 109         for (i = 0; i < XBUFSIZE; i++)
 110                 free_page((unsigned long)buf[i]);
 111 }
 112
 113 static void sg_init_aead(struct scatterlist *sg, char *xbuf[XBUFSIZE],
 114                          unsigned int buflen, const void *assoc,
 115                          unsigned int aad_size)
 116 {
 117         int np = (buflen + PAGE_SIZE - 1)/PAGE_SIZE;
 118         int k, rem;
 119
 120         if (np > XBUFSIZE) {
 121                 rem = PAGE_SIZE;
 122                 np = XBUFSIZE;
 123         } else {
 124                 rem = buflen % PAGE_SIZE;
 125         }
 126
 127         sg_init_table(sg, np + 1);
 128
 129         sg_set_buf(&sg[0], assoc, aad_size);
 130
 131         if (rem)
 132                 np--;
 133         for (k = 0; k < np; k++)
 134                 sg_set_buf(&sg[k + 1], xbuf[k], PAGE_SIZE);
 135
 136         if (rem)
 137                 sg_set_buf(&sg[k + 1], xbuf[k], rem);
 138 }
 139
 140 static inline int do_one_aead_op(struct aead_request *req, int ret)
 141 {
 142         struct crypto_wait *wait = req->base.data;
 143
 144         return crypto_wait_req(ret, wait);
 145 }
 146
 147 struct test_mb_aead_data {
 148         struct scatterlist sg[XBUFSIZE];
 149         struct scatterlist sgout[XBUFSIZE];
 150         struct aead_request *req;
 151         struct crypto_wait wait;
 152         char *xbuf[XBUFSIZE];
 153         char *xoutbuf[XBUFSIZE];
 154         char *axbuf[XBUFSIZE];
 155 };
 156
 157 static int do_mult_aead_op(struct test_mb_aead_data *data, int enc,
 158                                 u32 num_mb, int *rc)
 159 {
 160         int i, err = 0;
 161
 162         /* Fire up a bunch of concurrent requests */
 163         for (i = 0; i < num_mb; i++) {
 164                 if (enc == ENCRYPT)
 165                         rc[i] = crypto_aead_encrypt(data[i].req);
 166                 else
 167                         rc[i] = crypto_aead_decrypt(data[i].req);
 168         }
 169
 170         /* Wait for all requests to finish */
 171         for (i = 0; i < num_mb; i++) {
 172                 rc[i] = crypto_wait_req(rc[i], &data[i].wait);
 173
 174                 if (rc[i]) {
 175                         pr_info("concurrent request %d error %d\n", i, rc[i]);
 176                         err = rc[i];
 177                 }
 178         }
 179
 180         return err;
 181 }
 182
 183 static int test_mb_aead_jiffies(struct test_mb_aead_data *data, int enc,
 184                                 int blen, int secs, u32 num_mb)
 185 {
 186         unsigned long start, end;
 187         int bcount;
 188         int ret = 0;
 189         int *rc;
 190
 191         rc = kcalloc(num_mb, sizeof(*rc), GFP_KERNEL);
 192         if (!rc)
 193                 return -ENOMEM;
 194
 195         for (start = jiffies, end = start + secs * HZ, bcount = 0;
 196              time_before(jiffies, end); bcount++) {
 197                 ret = do_mult_aead_op(data, enc, num_mb, rc);
 198                 if (ret)
 199                         goto out;
 200         }
 201
 202         pr_cont("%d operations in %d seconds (%llu bytes)\n",
 203                 bcount * num_mb, secs, (u64)bcount * blen * num_mb);
 204
 205 out:
 206         kfree(rc);
 207         return ret;
 208 }
 209
 210 static int test_mb_aead_cycles(struct test_mb_aead_data *data, int enc,
 211                                int blen, u32 num_mb)
 212 {
 213         unsigned long cycles = 0;
 214         int ret = 0;
 215         int i;
 216         int *rc;
 217
 218         rc = kcalloc(num_mb, sizeof(*rc), GFP_KERNEL);
 219         if (!rc)
 220                 return -ENOMEM;
 221
 222         /* Warm-up run. */
 223         for (i = 0; i < 4; i++) {
 224                 ret = do_mult_aead_op(data, enc, num_mb, rc);
 225                 if (ret)
 226                         goto out;
 227         }
 228
 229         /* The real thing. */
 230         for (i = 0; i < 8; i++) {
 231                 cycles_t start, end;
 232
 233                 start = get_cycles();
 234                 ret = do_mult_aead_op(data, enc, num_mb, rc);
 235                 end = get_cycles();
 236
 237                 if (ret)
 238                         goto out;
 239
 240                 cycles += end - start;
 241         }
 242
 243         pr_cont("1 operation in %lu cycles (%d bytes)\n",
 244                 (cycles + 4) / (8 * num_mb), blen);
 245
 246 out:
 247         kfree(rc);
 248         return ret;
 249 }
 250
 251 static void test_mb_aead_speed(const char *algo, int enc, int secs,
 252                                struct aead_speed_template *template,
 253                                unsigned int tcount, u8 authsize,
 254                                unsigned int aad_size, u8 *keysize, u32 num_mb)
 255 {
 256         struct test_mb_aead_data *data;
 257         struct crypto_aead *tfm;
 258         unsigned int i, j, iv_len;
 259         const int *b_size;
 260         const char *key;
 261         const char *e;
 262         void *assoc;
 263         char *iv;
 264         int ret;
 265
 266
 267         if (aad_size >= PAGE_SIZE) {
 268                 pr_err("associate data length (%u) too big\n", aad_size);
 269                 return;
 270         }
 271
 272         iv = kzalloc(MAX_IVLEN, GFP_KERNEL);
 273         if (!iv)
 274                 return;
 275
 276         if (enc == ENCRYPT)
 277                 e = "encryption";
 278         else
 279                 e = "decryption";
 280
 281         data = kcalloc(num_mb, sizeof(*data), GFP_KERNEL);
 282         if (!data)
 283                 goto out_free_iv;
 284
 285         tfm = crypto_alloc_aead(algo, 0, 0);
 286         if (IS_ERR(tfm)) {
 287                 pr_err("failed to load transform for %s: %ld\n",
 288                         algo, PTR_ERR(tfm));
 289                 goto out_free_data;
 290         }
 291
 292         ret = crypto_aead_setauthsize(tfm, authsize);
 293
 294         for (i = 0; i < num_mb; ++i)
 295                 if (testmgr_alloc_buf(data[i].xbuf)) {
 296                         while (i--)
 297                                 testmgr_free_buf(data[i].xbuf);
 298                         goto out_free_tfm;
 299                 }
 300
 301         for (i = 0; i < num_mb; ++i)
 302                 if (testmgr_alloc_buf(data[i].axbuf)) {
 303                         while (i--)
 304                                 testmgr_free_buf(data[i].axbuf);
 305                         goto out_free_xbuf;
 306                 }
 307
 308         for (i = 0; i < num_mb; ++i)
 309                 if (testmgr_alloc_buf(data[i].xoutbuf)) {
 310                         while (i--)
 311                                 testmgr_free_buf(data[i].xoutbuf);
 312                         goto out_free_axbuf;
 313                 }
 314
 315         for (i = 0; i < num_mb; ++i) {
 316                 data[i].req = aead_request_alloc(tfm, GFP_KERNEL);
 317                 if (!data[i].req) {
 318                         pr_err("alg: skcipher: Failed to allocate request for %s\n",
 319                                algo);
 320                         while (i--)
 321                                 aead_request_free(data[i].req);
 322                         goto out_free_xoutbuf;
 323                 }
 324         }
 325
 326         for (i = 0; i < num_mb; ++i) {
 327                 crypto_init_wait(&data[i].wait);
 328                 aead_request_set_callback(data[i].req,
 329                                           CRYPTO_TFM_REQ_MAY_BACKLOG,
 330                                           crypto_req_done, &data[i].wait);
 331         }
 332
 333         pr_info("\ntesting speed of multibuffer %s (%s) %s\n", algo,
 334                 get_driver_name(crypto_aead, tfm), e);
 335
 336         i = 0;
 337         do {
 338                 b_size = aead_sizes;
 339                 do {
 340                         int bs = round_up(*b_size, crypto_aead_blocksize(tfm));
 341
 342                         if (bs + authsize > XBUFSIZE * PAGE_SIZE) {
 343                                 pr_err("template (%u) too big for buffer (%lu)\n",
 344                                        authsize + bs,
 345                                        XBUFSIZE * PAGE_SIZE);
 346                                 goto out;
 347                         }
 348
 349                         pr_info("test %u (%d bit key, %d byte blocks): ", i,
 350                                 *keysize * 8, bs);
 351
 352                         /* Set up tfm global state, i.e. the key */
 353
 354                         memset(tvmem[0], 0xff, PAGE_SIZE);
 355                         key = tvmem[0];
 356                         for (j = 0; j < tcount; j++) {
 357                                 if (template[j].klen == *keysize) {
 358                                         key = template[j].key;
 359                                         break;
 360                                 }
 361                         }
 362
 363                         crypto_aead_clear_flags(tfm, ~0);
 364
 365                         ret = crypto_aead_setkey(tfm, key, *keysize);
 366                         if (ret) {
 367                                 pr_err("setkey() failed flags=%x\n",
 368                                        crypto_aead_get_flags(tfm));
 369                                 goto out;
 370                         }
 371
 372                         iv_len = crypto_aead_ivsize(tfm);
 373                         if (iv_len)
 374                                 memset(iv, 0xff, iv_len);
 375
 376                         /* Now setup per request stuff, i.e. buffers */
 377
 378                         for (j = 0; j < num_mb; ++j) {
 379                                 struct test_mb_aead_data *cur = &data[j];
 380
 381                                 assoc = cur->axbuf[0];
 382                                 memset(assoc, 0xff, aad_size);
 383
 384                                 sg_init_aead(cur->sg, cur->xbuf,
 385                                              bs + (enc ? 0 : authsize),
 386                                              assoc, aad_size);
 387
 388                                 sg_init_aead(cur->sgout, cur->xoutbuf,
 389                                              bs + (enc ? authsize : 0),
 390                                              assoc, aad_size);
 391
 392                                 aead_request_set_ad(cur->req, aad_size);
 393
 394                                 if (!enc) {
 395
 396                                         aead_request_set_crypt(cur->req,
 397                                                                cur->sgout,
 398                                                                cur->sg,
 399                                                                bs, iv);
 400                                         ret = crypto_aead_encrypt(cur->req);
 401                                         ret = do_one_aead_op(cur->req, ret);
 402
 403                                         if (ret) {
 404                                                 pr_err("calculating auth failed (%d)\n",
 405                                                        ret);
 406                                                 break;
 407                                         }
 408                                 }
 409
 410                                 aead_request_set_crypt(cur->req, cur->sg,
 411                                                        cur->sgout, bs +
 412                                                        (enc ? 0 : authsize),
 413                                                        iv);
 414
 415                         }
 416
 417                         if (secs) {
 418                                 ret = test_mb_aead_jiffies(data, enc, bs,
 419                                                            secs, num_mb);
 420                                 cond_resched();
 421                         } else {
 422                                 ret = test_mb_aead_cycles(data, enc, bs,
 423                                                           num_mb);
 424                         }
 425
 426                         if (ret) {
 427                                 pr_err("%s() failed return code=%d\n", e, ret);
 428                                 break;
 429                         }
 430                         b_size++;
 431                         i++;
 432                 } while (*b_size);
 433                 keysize++;
 434         } while (*keysize);
 435
 436 out:
 437         for (i = 0; i < num_mb; ++i)
 438                 aead_request_free(data[i].req);
 439 out_free_xoutbuf:
 440         for (i = 0; i < num_mb; ++i)
 441                 testmgr_free_buf(data[i].xoutbuf);
 442 out_free_axbuf:
 443         for (i = 0; i < num_mb; ++i)
 444                 testmgr_free_buf(data[i].axbuf);
 445 out_free_xbuf:
 446         for (i = 0; i < num_mb; ++i)
 447                 testmgr_free_buf(data[i].xbuf);
 448 out_free_tfm:
 449         crypto_free_aead(tfm);
 450 out_free_data:
 451         kfree(data);
 452 out_free_iv:
 453         kfree(iv);
 454 }
 455
 456 static int test_aead_jiffies(struct aead_request *req, int enc,
 457                                 int blen, int secs)
 458 {
 459         unsigned long start, end;
 460         int bcount;
 461         int ret;
 462
 463         for (start = jiffies, end = start + secs * HZ, bcount = 0;
 464              time_before(jiffies, end); bcount++) {
 465                 if (enc)
 466                         ret = do_one_aead_op(req, crypto_aead_encrypt(req));
 467                 else
 468                         ret = do_one_aead_op(req, crypto_aead_decrypt(req));
 469
 470                 if (ret)
 471                         return ret;
 472         }
 473
 474         pr_cont("%d operations in %d seconds (%llu bytes)\n",
 475                 bcount, secs, (u64)bcount * blen);
 476         return 0;
 477 }
 478
 479 static int test_aead_cycles(struct aead_request *req, int enc, int blen)
 480 {
 481         unsigned long cycles = 0;
 482         int ret = 0;
 483         int i;
 484
 485         /* Warm-up run. */
 486         for (i = 0; i < 4; i++) {
 487                 if (enc)
 488                         ret = do_one_aead_op(req, crypto_aead_encrypt(req));
 489                 else
 490                         ret = do_one_aead_op(req, crypto_aead_decrypt(req));
 491
 492                 if (ret)
 493                         goto out;
 494         }
 495
 496         /* The real thing. */
 497         for (i = 0; i < 8; i++) {
 498                 cycles_t start, end;
 499
 500                 start = get_cycles();
 501                 if (enc)
 502                         ret = do_one_aead_op(req, crypto_aead_encrypt(req));
 503                 else
 504                         ret = do_one_aead_op(req, crypto_aead_decrypt(req));
 505                 end = get_cycles();
 506
 507                 if (ret)
 508                         goto out;
 509
 510                 cycles += end - start;
 511         }
 512
 513 out:
 514         if (ret == 0)
 515                 printk("1 operation in %lu cycles (%d bytes)\n",
 516                        (cycles + 4) / 8, blen);
 517
 518         return ret;
 519 }
 520
 521 static void test_aead_speed(const char *algo, int enc, unsigned int secs,
 522                             struct aead_speed_template *template,
 523                             unsigned int tcount, u8 authsize,
 524                             unsigned int aad_size, u8 *keysize)
 525 {
 526         unsigned int i, j;
 527         struct crypto_aead *tfm;
 528         int ret = -ENOMEM;
 529         const char *key;
 530         struct aead_request *req;
 531         struct scatterlist *sg;
 532         struct scatterlist *sgout;
 533         const char *e;
 534         void *assoc;
 535         char *iv;
 536         char *xbuf[XBUFSIZE];
 537         char *xoutbuf[XBUFSIZE];
 538         char *axbuf[XBUFSIZE];
 539         const int *b_size;
 540         unsigned int iv_len;
 541         struct crypto_wait wait;
 542
 543         iv = kzalloc(MAX_IVLEN, GFP_KERNEL);
 544         if (!iv)
 545                 return;
 546
 547         if (aad_size >= PAGE_SIZE) {
 548                 pr_err("associate data length (%u) too big\n", aad_size);
 549                 goto out_noxbuf;
 550         }
 551
 552         if (enc == ENCRYPT)
 553                 e = "encryption";
 554         else
 555                 e = "decryption";
 556
 557         if (testmgr_alloc_buf(xbuf))
 558                 goto out_noxbuf;
 559         if (testmgr_alloc_buf(axbuf))
 560                 goto out_noaxbuf;
 561         if (testmgr_alloc_buf(xoutbuf))
 562                 goto out_nooutbuf;
 563
 564         sg = kmalloc(sizeof(*sg) * 9 * 2, GFP_KERNEL);
 565         if (!sg)
 566                 goto out_nosg;
 567         sgout = &sg[9];
 568
 569         tfm = crypto_alloc_aead(algo, 0, 0);
 570
 571         if (IS_ERR(tfm)) {
 572                 pr_err("alg: aead: Failed to load transform for %s: %ld\n", algo,
 573                        PTR_ERR(tfm));
 574                 goto out_notfm;
 575         }
 576
 577         crypto_init_wait(&wait);
 578         printk(KERN_INFO "\ntesting speed of %s (%s) %s\n", algo,
 579                         get_driver_name(crypto_aead, tfm), e);
 580
 581         req = aead_request_alloc(tfm, GFP_KERNEL);
 582         if (!req) {
 583                 pr_err("alg: aead: Failed to allocate request for %s\n",
 584                        algo);
 585                 goto out_noreq;
 586         }
 587
 588         aead_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
 589                                   crypto_req_done, &wait);
 590
 591         i = 0;
 592         do {
 593                 b_size = aead_sizes;
 594                 do {
 595                         u32 bs = round_up(*b_size, crypto_aead_blocksize(tfm));
 596
 597                         assoc = axbuf[0];
 598                         memset(assoc, 0xff, aad_size);
 599
 600                         if ((*keysize + bs) > TVMEMSIZE * PAGE_SIZE) {
 601                                 pr_err("template (%u) too big for tvmem (%lu)\n",
 602                                        *keysize + bs,
 603                                         TVMEMSIZE * PAGE_SIZE);
 604                                 goto out;
 605                         }
 606
 607                         key = tvmem[0];
 608                         for (j = 0; j < tcount; j++) {
 609                                 if (template[j].klen == *keysize) {
 610                                         key = template[j].key;
 611                                         break;
 612                                 }
 613                         }
 614                         ret = crypto_aead_setkey(tfm, key, *keysize);
 615                         ret = crypto_aead_setauthsize(tfm, authsize);
 616
 617                         iv_len = crypto_aead_ivsize(tfm);
 618                         if (iv_len)
 619                                 memset(iv, 0xff, iv_len);
 620
 621                         crypto_aead_clear_flags(tfm, ~0);
 622                         printk(KERN_INFO "test %u (%d bit key, %d byte blocks): ",
 623                                         i, *keysize * 8, bs);
 624
 625
 626                         memset(tvmem[0], 0xff, PAGE_SIZE);
 627
 628                         if (ret) {
 629                                 pr_err("setkey() failed flags=%x\n",
 630                                                 crypto_aead_get_flags(tfm));
 631                                 goto out;
 632                         }
 633
 634                         sg_init_aead(sg, xbuf, bs + (enc ? 0 : authsize),
 635                                      assoc, aad_size);
 636
 637                         sg_init_aead(sgout, xoutbuf,
 638                                      bs + (enc ? authsize : 0), assoc,
 639                                      aad_size);
 640
 641                         aead_request_set_ad(req, aad_size);
 642
 643                         if (!enc) {
 644
 645                                 /*
 646                                  * For decryption we need a proper auth so
 647                                  * we do the encryption path once with buffers
 648                                  * reversed (input <-> output) to calculate it
 649                                  */
 650                                 aead_request_set_crypt(req, sgout, sg,
 651                                                        bs, iv);
 652                                 ret = do_one_aead_op(req,
 653                                                      crypto_aead_encrypt(req));
 654
 655                                 if (ret) {
 656                                         pr_err("calculating auth failed (%d)\n",
 657                                                ret);
 658                                         break;
 659                                 }
 660                         }
 661
 662                         aead_request_set_crypt(req, sg, sgout,
 663                                                bs + (enc ? 0 : authsize),
 664                                                iv);
 665
 666                         if (secs) {
 667                                 ret = test_aead_jiffies(req, enc, bs,
 668                                                         secs);
 669                                 cond_resched();
 670                         } else {
 671                                 ret = test_aead_cycles(req, enc, bs);
 672                         }
 673
 674                         if (ret) {
 675                                 pr_err("%s() failed return code=%d\n", e, ret);
 676                                 break;
 677                         }
 678                         b_size++;
 679                         i++;
 680                 } while (*b_size);
 681                 keysize++;
 682         } while (*keysize);
 683
 684 out:
 685         aead_request_free(req);
 686 out_noreq:
 687         crypto_free_aead(tfm);
 688 out_notfm:
 689         kfree(sg);
 690 out_nosg:
 691         testmgr_free_buf(xoutbuf);
 692 out_nooutbuf:
 693         testmgr_free_buf(axbuf);
 694 out_noaxbuf:
 695         testmgr_free_buf(xbuf);
 696 out_noxbuf:
 697         kfree(iv);
 698 }
 699
 700 static void test_hash_sg_init(struct scatterlist *sg)
 701 {
 702         int i;
 703
 704         sg_init_table(sg, TVMEMSIZE);
 705         for (i = 0; i < TVMEMSIZE; i++) {
 706                 sg_set_buf(sg + i, tvmem[i], PAGE_SIZE);
 707                 memset(tvmem[i], 0xff, PAGE_SIZE);
 708         }
 709 }
 710
 711 static inline int do_one_ahash_op(struct ahash_request *req, int ret)
 712 {
 713         struct crypto_wait *wait = req->base.data;
 714
 715         return crypto_wait_req(ret, wait);
 716 }
 717
 718 struct test_mb_ahash_data {
 719         struct scatterlist sg[XBUFSIZE];
 720         char result[64];
 721         struct ahash_request *req;
 722         struct crypto_wait wait;
 723         char *xbuf[XBUFSIZE];
 724 };
 725
 726 static inline int do_mult_ahash_op(struct test_mb_ahash_data *data, u32 num_mb,
 727                                    int *rc)
 728 {
 729         int i, err = 0;
 730
 731         /* Fire up a bunch of concurrent requests */
 732         for (i = 0; i < num_mb; i++)
 733                 rc[i] = crypto_ahash_digest(data[i].req);
 734
 735         /* Wait for all requests to finish */
 736         for (i = 0; i < num_mb; i++) {
 737                 rc[i] = crypto_wait_req(rc[i], &data[i].wait);
 738
 739                 if (rc[i]) {
 740                         pr_info("concurrent request %d error %d\n", i, rc[i]);
 741                         err = rc[i];
 742                 }
 743         }
 744
 745         return err;
 746 }
 747
 748 static int test_mb_ahash_jiffies(struct test_mb_ahash_data *data, int blen,
 749                                  int secs, u32 num_mb)
 750 {
 751         unsigned long start, end;
 752         int bcount;
 753         int ret = 0;
 754         int *rc;
 755
 756         rc = kcalloc(num_mb, sizeof(*rc), GFP_KERNEL);
 757         if (!rc)
 758                 return -ENOMEM;
 759
 760         for (start = jiffies, end = start + secs * HZ, bcount = 0;
 761              time_before(jiffies, end); bcount++) {
 762                 ret = do_mult_ahash_op(data, num_mb, rc);
 763                 if (ret)
 764                         goto out;
 765         }
 766
 767         pr_cont("%d operations in %d seconds (%llu bytes)\n",
 768                 bcount * num_mb, secs, (u64)bcount * blen * num_mb);
 769
 770 out:
 771         kfree(rc);
 772         return ret;
 773 }
 774
 775 static int test_mb_ahash_cycles(struct test_mb_ahash_data *data, int blen,
 776                                 u32 num_mb)
 777 {
 778         unsigned long cycles = 0;
 779         int ret = 0;
 780         int i;
 781         int *rc;
 782
 783         rc = kcalloc(num_mb, sizeof(*rc), GFP_KERNEL);
 784         if (!rc)
 785                 return -ENOMEM;
 786
 787         /* Warm-up run. */
 788         for (i = 0; i < 4; i++) {
 789                 ret = do_mult_ahash_op(data, num_mb, rc);
 790                 if (ret)
 791                         goto out;
 792         }
 793
 794         /* The real thing. */
 795         for (i = 0; i < 8; i++) {
 796                 cycles_t start, end;
 797
 798                 start = get_cycles();
 799                 ret = do_mult_ahash_op(data, num_mb, rc);
 800                 end = get_cycles();
 801
 802                 if (ret)
 803                         goto out;
 804
 805                 cycles += end - start;
 806         }
 807
 808         pr_cont("1 operation in %lu cycles (%d bytes)\n",
 809                 (cycles + 4) / (8 * num_mb), blen);
 810
 811 out:
 812         kfree(rc);
 813         return ret;
 814 }
 815
 816 static void test_mb_ahash_speed(const char *algo, unsigned int secs,
 817                                 struct hash_speed *speed, u32 num_mb)
 818 {
 819         struct test_mb_ahash_data *data;
 820         struct crypto_ahash *tfm;
 821         unsigned int i, j, k;
 822         int ret;
 823
 824         data = kcalloc(num_mb, sizeof(*data), GFP_KERNEL);
 825         if (!data)
 826                 return;
 827
 828         tfm = crypto_alloc_ahash(algo, 0, 0);
 829         if (IS_ERR(tfm)) {
 830                 pr_err("failed to load transform for %s: %ld\n",
 831                         algo, PTR_ERR(tfm));
 832                 goto free_data;
 833         }
 834
 835         for (i = 0; i < num_mb; ++i) {
 836                 if (testmgr_alloc_buf(data[i].xbuf))
 837                         goto out;
 838
 839                 crypto_init_wait(&data[i].wait);
 840
 841                 data[i].req = ahash_request_alloc(tfm, GFP_KERNEL);
 842                 if (!data[i].req) {
 843                         pr_err("alg: hash: Failed to allocate request for %s\n",
 844                                algo);
 845                         goto out;
 846                 }
 847
 848                 ahash_request_set_callback(data[i].req, 0, crypto_req_done,
 849                                            &data[i].wait);
 850
 851                 sg_init_table(data[i].sg, XBUFSIZE);
 852                 for (j = 0; j < XBUFSIZE; j++) {
 853                         sg_set_buf(data[i].sg + j, data[i].xbuf[j], PAGE_SIZE);
 854                         memset(data[i].xbuf[j], 0xff, PAGE_SIZE);
 855                 }
 856         }
 857
 858         pr_info("\ntesting speed of multibuffer %s (%s)\n", algo,
 859                 get_driver_name(crypto_ahash, tfm));
 860
 861         for (i = 0; speed[i].blen != 0; i++) {
 862                 /* For some reason this only tests digests. */
 863                 if (speed[i].blen != speed[i].plen)
 864                         continue;
 865
 866                 if (speed[i].blen > XBUFSIZE * PAGE_SIZE) {
 867                         pr_err("template (%u) too big for tvmem (%lu)\n",
 868                                speed[i].blen, XBUFSIZE * PAGE_SIZE);
 869                         goto out;
 870                 }
 871
 872                 if (klen)
 873                         crypto_ahash_setkey(tfm, tvmem[0], klen);
 874
 875                 for (k = 0; k < num_mb; k++)
 876                         ahash_request_set_crypt(data[k].req, data[k].sg,
 877                                                 data[k].result, speed[i].blen);
 878
 879                 pr_info("test%3u "
 880                         "(%5u byte blocks,%5u bytes per update,%4u updates): ",
 881                         i, speed[i].blen, speed[i].plen,
 882                         speed[i].blen / speed[i].plen);
 883
 884                 if (secs) {
 885                         ret = test_mb_ahash_jiffies(data, speed[i].blen, secs,
 886                                                     num_mb);
 887                         cond_resched();
 888                 } else {
 889                         ret = test_mb_ahash_cycles(data, speed[i].blen, num_mb);
 890                 }
 891
 892
 893                 if (ret) {
 894                         pr_err("At least one hashing failed ret=%d\n", ret);
 895                         break;
 896                 }
 897         }
 898
 899 out:
 900         for (k = 0; k < num_mb; ++k)
 901                 ahash_request_free(data[k].req);
 902
 903         for (k = 0; k < num_mb; ++k)
 904                 testmgr_free_buf(data[k].xbuf);
 905
 906         crypto_free_ahash(tfm);
 907
 908 free_data:
 909         kfree(data);
 910 }
 911
 912 static int test_ahash_jiffies_digest(struct ahash_request *req, int blen,
 913                                      char *out, int secs)
 914 {
 915         unsigned long start, end;
 916         int bcount;
 917         int ret;
 918
 919         for (start = jiffies, end = start + secs * HZ, bcount = 0;
 920              time_before(jiffies, end); bcount++) {
 921                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
 922                 if (ret)
 923                         return ret;
 924         }
 925
 926         printk("%6u opers/sec, %9lu bytes/sec\n",
 927                bcount / secs, ((long)bcount * blen) / secs);
 928
 929         return 0;
 930 }
 931
 932 static int test_ahash_jiffies(struct ahash_request *req, int blen,
 933                               int plen, char *out, int secs)
 934 {
 935         unsigned long start, end;
 936         int bcount, pcount;
 937         int ret;
 938
 939         if (plen == blen)
 940                 return test_ahash_jiffies_digest(req, blen, out, secs);
 941
 942         for (start = jiffies, end = start + secs * HZ, bcount = 0;
 943              time_before(jiffies, end); bcount++) {
 944                 ret = do_one_ahash_op(req, crypto_ahash_init(req));
 945                 if (ret)
 946                         return ret;
 947                 for (pcount = 0; pcount < blen; pcount += plen) {
 948                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
 949                         if (ret)
 950                                 return ret;
 951                 }
 952                 /* we assume there is enough space in 'out' for the result */
 953                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
 954                 if (ret)
 955                         return ret;
 956         }
 957
 958         pr_cont("%6u opers/sec, %9lu bytes/sec\n",
 959                 bcount / secs, ((long)bcount * blen) / secs);
 960
 961         return 0;
 962 }
 963
 964 static int test_ahash_cycles_digest(struct ahash_request *req, int blen,
 965                                     char *out)
 966 {
 967         unsigned long cycles = 0;
 968         int ret, i;
 969
 970         /* Warm-up run. */
 971         for (i = 0; i < 4; i++) {
 972                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
 973                 if (ret)
 974                         goto out;
 975         }
 976
 977         /* The real thing. */
 978         for (i = 0; i < 8; i++) {
 979                 cycles_t start, end;
 980
 981                 start = get_cycles();
 982
 983                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
 984                 if (ret)
 985                         goto out;
 986
 987                 end = get_cycles();
 988
 989                 cycles += end - start;
 990         }
 991
 992 out:
 993         if (ret)
 994                 return ret;
 995
 996         pr_cont("%6lu cycles/operation, %4lu cycles/byte\n",
 997                 cycles / 8, cycles / (8 * blen));
 998
 999         return 0;
1000 }
1001
1002 static int test_ahash_cycles(struct ahash_request *req, int blen,
1003                              int plen, char *out)
1004 {
1005         unsigned long cycles = 0;
1006         int i, pcount, ret;
1007
1008         if (plen == blen)
1009                 return test_ahash_cycles_digest(req, blen, out);
1010
1011         /* Warm-up run. */
1012         for (i = 0; i < 4; i++) {
1013                 ret = do_one_ahash_op(req, crypto_ahash_init(req));
1014                 if (ret)
1015                         goto out;
1016                 for (pcount = 0; pcount < blen; pcount += plen) {
1017                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
1018                         if (ret)
1019                                 goto out;
1020                 }
1021                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
1022                 if (ret)
1023                         goto out;
1024         }
1025
1026         /* The real thing. */
1027         for (i = 0; i < 8; i++) {
1028                 cycles_t start, end;
1029
1030                 start = get_cycles();
1031
1032                 ret = do_one_ahash_op(req, crypto_ahash_init(req));
1033                 if (ret)
1034                         goto out;
1035                 for (pcount = 0; pcount < blen; pcount += plen) {
1036                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
1037                         if (ret)
1038                                 goto out;
1039                 }
1040                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
1041                 if (ret)
1042                         goto out;
1043
1044                 end = get_cycles();
1045
1046                 cycles += end - start;
1047         }
1048
1049 out:
1050         if (ret)
1051                 return ret;
1052
1053         pr_cont("%6lu cycles/operation, %4lu cycles/byte\n",
1054                 cycles / 8, cycles / (8 * blen));
1055
1056         return 0;
1057 }
1058
1059 static void test_ahash_speed_common(const char *algo, unsigned int secs,
1060                                     struct hash_speed *speed, unsigned mask)
1061 {
1062         struct scatterlist sg[TVMEMSIZE];
1063         struct crypto_wait wait;
1064         struct ahash_request *req;
1065         struct crypto_ahash *tfm;
1066         char *output;
1067         int i, ret;
1068
1069         tfm = crypto_alloc_ahash(algo, 0, mask);
1070         if (IS_ERR(tfm)) {
1071                 pr_err("failed to load transform for %s: %ld\n",
1072                        algo, PTR_ERR(tfm));
1073                 return;
1074         }
1075
1076         printk(KERN_INFO "\ntesting speed of async %s (%s)\n", algo,
1077                         get_driver_name(crypto_ahash, tfm));
1078
1079         if (crypto_ahash_digestsize(tfm) > MAX_DIGEST_SIZE) {
1080                 pr_err("digestsize(%u) > %d\n", crypto_ahash_digestsize(tfm),
1081                        MAX_DIGEST_SIZE);
1082                 goto out;
1083         }
1084
1085         test_hash_sg_init(sg);
1086         req = ahash_request_alloc(tfm, GFP_KERNEL);
1087         if (!req) {
1088                 pr_err("ahash request allocation failure\n");
1089                 goto out;
1090         }
1091
1092         crypto_init_wait(&wait);
1093         ahash_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
1094                                    crypto_req_done, &wait);
1095
1096         output = kmalloc(MAX_DIGEST_SIZE, GFP_KERNEL);
1097         if (!output)
1098                 goto out_nomem;
1099
1100         for (i = 0; speed[i].blen != 0; i++) {
1101                 if (speed[i].blen > TVMEMSIZE * PAGE_SIZE) {
1102                         pr_err("template (%u) too big for tvmem (%lu)\n",
1103                                speed[i].blen, TVMEMSIZE * PAGE_SIZE);
1104                         break;
1105                 }
1106
1107                 if (klen)
1108                         crypto_ahash_setkey(tfm, tvmem[0], klen);
1109
1110                 pr_info("test%3u "
1111                         "(%5u byte blocks,%5u bytes per update,%4u updates): ",
1112                         i, speed[i].blen, speed[i].plen, speed[i].blen / speed[i].plen);
1113
1114                 ahash_request_set_crypt(req, sg, output, speed[i].plen);
1115
1116                 if (secs) {
1117                         ret = test_ahash_jiffies(req, speed[i].blen,
1118                                                  speed[i].plen, output, secs);
1119                         cond_resched();
1120                 } else {
1121                         ret = test_ahash_cycles(req, speed[i].blen,
1122                                                 speed[i].plen, output);
1123                 }
1124
1125                 if (ret) {
1126                         pr_err("hashing failed ret=%d\n", ret);
1127                         break;
1128                 }
1129         }
1130
1131         kfree(output);
1132
1133 out_nomem:
1134         ahash_request_free(req);
1135
1136 out:
1137         crypto_free_ahash(tfm);
1138 }
1139
1140 static void test_ahash_speed(const char *algo, unsigned int secs,
1141                              struct hash_speed *speed)
1142 {
1143         return test_ahash_speed_common(algo, secs, speed, 0);
1144 }
1145
1146 static void test_hash_speed(const char *algo, unsigned int secs,
1147                             struct hash_speed *speed)
1148 {
1149         return test_ahash_speed_common(algo, secs, speed, CRYPTO_ALG_ASYNC);
1150 }
1151
1152 struct test_mb_skcipher_data {
1153         struct scatterlist sg[XBUFSIZE];
1154         struct skcipher_request *req;
1155         struct crypto_wait wait;
1156         char *xbuf[XBUFSIZE];
1157 };
1158
1159 static int do_mult_acipher_op(struct test_mb_skcipher_data *data, int enc,
1160                                 u32 num_mb, int *rc)
1161 {
1162         int i, err = 0;
1163
1164         /* Fire up a bunch of concurrent requests */
1165         for (i = 0; i < num_mb; i++) {
1166                 if (enc == ENCRYPT)
1167                         rc[i] = crypto_skcipher_encrypt(data[i].req);
1168                 else
1169                         rc[i] = crypto_skcipher_decrypt(data[i].req);
1170         }
1171
1172         /* Wait for all requests to finish */
1173         for (i = 0; i < num_mb; i++) {
1174                 rc[i] = crypto_wait_req(rc[i], &data[i].wait);
1175
1176                 if (rc[i]) {
1177                         pr_info("concurrent request %d error %d\n", i, rc[i]);
1178                         err = rc[i];
1179                 }
1180         }
1181
1182         return err;
1183 }
1184
1185 static int test_mb_acipher_jiffies(struct test_mb_skcipher_data *data, int enc,
1186                                 int blen, int secs, u32 num_mb)
1187 {
1188         unsigned long start, end;
1189         int bcount;
1190         int ret = 0;
1191         int *rc;
1192
1193         rc = kcalloc(num_mb, sizeof(*rc), GFP_KERNEL);
1194         if (!rc)
1195                 return -ENOMEM;
1196
1197         for (start = jiffies, end = start + secs * HZ, bcount = 0;
1198              time_before(jiffies, end); bcount++) {
1199                 ret = do_mult_acipher_op(data, enc, num_mb, rc);
1200                 if (ret)
1201                         goto out;
1202         }
1203
1204         pr_cont("%d operations in %d seconds (%llu bytes)\n",
1205                 bcount * num_mb, secs, (u64)bcount * blen * num_mb);
1206
1207 out:
1208         kfree(rc);
1209         return ret;
1210 }
1211
1212 static int test_mb_acipher_cycles(struct test_mb_skcipher_data *data, int enc,
1213                                int blen, u32 num_mb)
1214 {
1215         unsigned long cycles = 0;
1216         int ret = 0;
1217         int i;
1218         int *rc;
1219
1220         rc = kcalloc(num_mb, sizeof(*rc), GFP_KERNEL);
1221         if (!rc)
1222                 return -ENOMEM;
1223
1224         /* Warm-up run. */
1225         for (i = 0; i < 4; i++) {
1226                 ret = do_mult_acipher_op(data, enc, num_mb, rc);
1227                 if (ret)
1228                         goto out;
1229         }
1230
1231         /* The real thing. */
1232         for (i = 0; i < 8; i++) {
1233                 cycles_t start, end;
1234
1235                 start = get_cycles();
1236                 ret = do_mult_acipher_op(data, enc, num_mb, rc);
1237                 end = get_cycles();
1238
1239                 if (ret)
1240                         goto out;
1241
1242                 cycles += end - start;
1243         }
1244
1245         pr_cont("1 operation in %lu cycles (%d bytes)\n",
1246                 (cycles + 4) / (8 * num_mb), blen);
1247
1248 out:
1249         kfree(rc);
1250         return ret;
1251 }
1252
1253 static void test_mb_skcipher_speed(const char *algo, int enc, int secs,
1254                                    struct cipher_speed_template *template,
1255                                    unsigned int tcount, u8 *keysize, u32 num_mb)
1256 {
1257         struct test_mb_skcipher_data *data;
1258         struct crypto_skcipher *tfm;
1259         unsigned int i, j, iv_len;
1260         const int *b_size;
1261         const char *key;
1262         const char *e;
1263         char iv[128];
1264         int ret;
1265
1266         if (enc == ENCRYPT)
1267                 e = "encryption";
1268         else
1269                 e = "decryption";
1270
1271         data = kcalloc(num_mb, sizeof(*data), GFP_KERNEL);
1272         if (!data)
1273                 return;
1274
1275         tfm = crypto_alloc_skcipher(algo, 0, 0);
1276         if (IS_ERR(tfm)) {
1277                 pr_err("failed to load transform for %s: %ld\n",
1278                         algo, PTR_ERR(tfm));
1279                 goto out_free_data;
1280         }
1281
1282         for (i = 0; i < num_mb; ++i)
1283                 if (testmgr_alloc_buf(data[i].xbuf)) {
1284                         while (i--)
1285                                 testmgr_free_buf(data[i].xbuf);
1286                         goto out_free_tfm;
1287                 }
1288
1289
1290         for (i = 0; i < num_mb; ++i)
1291                 if (testmgr_alloc_buf(data[i].xbuf)) {
1292                         while (i--)
1293                                 testmgr_free_buf(data[i].xbuf);
1294                         goto out_free_tfm;
1295                 }
1296
1297
1298         for (i = 0; i < num_mb; ++i) {
1299                 data[i].req = skcipher_request_alloc(tfm, GFP_KERNEL);
1300                 if (!data[i].req) {
1301                         pr_err("alg: skcipher: Failed to allocate request for %s\n",
1302                                algo);
1303                         while (i--)
1304                                 skcipher_request_free(data[i].req);
1305                         goto out_free_xbuf;
1306                 }
1307         }
1308
1309         for (i = 0; i < num_mb; ++i) {
1310                 skcipher_request_set_callback(data[i].req,
1311                                               CRYPTO_TFM_REQ_MAY_BACKLOG,
1312                                               crypto_req_done, &data[i].wait);
1313                 crypto_init_wait(&data[i].wait);
1314         }
1315
1316         pr_info("\ntesting speed of multibuffer %s (%s) %s\n", algo,
1317                 get_driver_name(crypto_skcipher, tfm), e);
1318
1319         i = 0;
1320         do {
1321                 b_size = block_sizes;
1322                 do {
1323                         u32 bs = round_up(*b_size, crypto_skcipher_blocksize(tfm));
1324
1325                         if (bs > XBUFSIZE * PAGE_SIZE) {
1326                                 pr_err("template (%u) too big for buffer (%lu)\n",
1327                                        *b_size, XBUFSIZE * PAGE_SIZE);
1328                                 goto out;
1329                         }
1330
1331                         pr_info("test %u (%d bit key, %d byte blocks): ", i,
1332                                 *keysize * 8, bs);
1333
1334                         /* Set up tfm global state, i.e. the key */
1335
1336                         memset(tvmem[0], 0xff, PAGE_SIZE);
1337                         key = tvmem[0];
1338                         for (j = 0; j < tcount; j++) {
1339                                 if (template[j].klen == *keysize) {
1340                                         key = template[j].key;
1341                                         break;
1342                                 }
1343                         }
1344
1345                         crypto_skcipher_clear_flags(tfm, ~0);
1346
1347                         ret = crypto_skcipher_setkey(tfm, key, *keysize);
1348                         if (ret) {
1349                                 pr_err("setkey() failed flags=%x\n",
1350                                        crypto_skcipher_get_flags(tfm));
1351                                 goto out;
1352                         }
1353
1354                         iv_len = crypto_skcipher_ivsize(tfm);
1355                         if (iv_len)
1356                                 memset(&iv, 0xff, iv_len);
1357
1358                         /* Now setup per request stuff, i.e. buffers */
1359
1360                         for (j = 0; j < num_mb; ++j) {
1361                                 struct test_mb_skcipher_data *cur = &data[j];
1362                                 unsigned int k = bs;
1363                                 unsigned int pages = DIV_ROUND_UP(k, PAGE_SIZE);
1364                                 unsigned int p = 0;
1365
1366                                 sg_init_table(cur->sg, pages);
1367
1368                                 while (k > PAGE_SIZE) {
1369                                         sg_set_buf(cur->sg + p, cur->xbuf[p],
1370                                                    PAGE_SIZE);
1371                                         memset(cur->xbuf[p], 0xff, PAGE_SIZE);
1372                                         p++;
1373                                         k -= PAGE_SIZE;
1374                                 }
1375
1376                                 sg_set_buf(cur->sg + p, cur->xbuf[p], k);
1377                                 memset(cur->xbuf[p], 0xff, k);
1378
1379                                 skcipher_request_set_crypt(cur->req, cur->sg,
1380                                                            cur->sg, *b_size,
1381                                                            iv);
1382                         }
1383
1384                         if (secs) {
1385                                 ret = test_mb_acipher_jiffies(data, enc,
1386                                                               bs, secs,
1387                                                               num_mb);
1388                                 cond_resched();
1389                         } else {
1390                                 ret = test_mb_acipher_cycles(data, enc,
1391                                                              bs, num_mb);
1392                         }
1393
1394                         if (ret) {
1395                                 pr_err("%s() failed flags=%x\n", e,
1396                                        crypto_skcipher_get_flags(tfm));
1397                                 break;
1398                         }
1399                         b_size++;
1400                         i++;
1401                 } while (*b_size);
1402                 keysize++;
1403         } while (*keysize);
1404
1405 out:
1406         for (i = 0; i < num_mb; ++i)
1407                 skcipher_request_free(data[i].req);
1408 out_free_xbuf:
1409         for (i = 0; i < num_mb; ++i)
1410                 testmgr_free_buf(data[i].xbuf);
1411 out_free_tfm:
1412         crypto_free_skcipher(tfm);
1413 out_free_data:
1414         kfree(data);
1415 }
1416
1417 static inline int do_one_acipher_op(struct skcipher_request *req, int ret)
1418 {
1419         struct crypto_wait *wait = req->base.data;
1420
1421         return crypto_wait_req(ret, wait);
1422 }
1423
1424 static int test_acipher_jiffies(struct skcipher_request *req, int enc,
1425                                 int blen, int secs)
1426 {
1427         unsigned long start, end;
1428         int bcount;
1429         int ret;
1430
1431         for (start = jiffies, end = start + secs * HZ, bcount = 0;
1432              time_before(jiffies, end); bcount++) {
1433                 if (enc)
1434                         ret = do_one_acipher_op(req,
1435                                                 crypto_skcipher_encrypt(req));
1436                 else
1437                         ret = do_one_acipher_op(req,
1438                                                 crypto_skcipher_decrypt(req));
1439
1440                 if (ret)
1441                         return ret;
1442         }
1443
1444         pr_cont("%d operations in %d seconds (%llu bytes)\n",
1445                 bcount, secs, (u64)bcount * blen);
1446         return 0;
1447 }
1448
1449 static int test_acipher_cycles(struct skcipher_request *req, int enc,
1450                                int blen)
1451 {
1452         unsigned long cycles = 0;
1453         int ret = 0;
1454         int i;
1455
1456         /* Warm-up run. */
1457         for (i = 0; i < 4; i++) {
1458                 if (enc)
1459                         ret = do_one_acipher_op(req,
1460                                                 crypto_skcipher_encrypt(req));
1461                 else
1462                         ret = do_one_acipher_op(req,
1463                                                 crypto_skcipher_decrypt(req));
1464
1465                 if (ret)
1466                         goto out;
1467         }
1468
1469         /* The real thing. */
1470         for (i = 0; i < 8; i++) {
1471                 cycles_t start, end;
1472
1473                 start = get_cycles();
1474                 if (enc)
1475                         ret = do_one_acipher_op(req,
1476                                                 crypto_skcipher_encrypt(req));
1477                 else
1478                         ret = do_one_acipher_op(req,
1479                                                 crypto_skcipher_decrypt(req));
1480                 end = get_cycles();
1481
1482                 if (ret)
1483                         goto out;
1484
1485                 cycles += end - start;
1486         }
1487
1488 out:
1489         if (ret == 0)
1490                 pr_cont("1 operation in %lu cycles (%d bytes)\n",
1491                         (cycles + 4) / 8, blen);
1492
1493         return ret;
1494 }
1495
1496 static void test_skcipher_speed(const char *algo, int enc, unsigned int secs,
1497                                 struct cipher_speed_template *template,
1498                                 unsigned int tcount, u8 *keysize, bool async)
1499 {
1500         unsigned int ret, i, j, k, iv_len;
1501         struct crypto_wait wait;
1502         const char *key;
1503         char iv[128];
1504         struct skcipher_request *req;
1505         struct crypto_skcipher *tfm;
1506         const int *b_size;
1507         const char *e;
1508
1509         if (enc == ENCRYPT)
1510                 e = "encryption";
1511         else
1512                 e = "decryption";
1513
1514         crypto_init_wait(&wait);
1515
1516         tfm = crypto_alloc_skcipher(algo, 0, async ? 0 : CRYPTO_ALG_ASYNC);
1517
1518         if (IS_ERR(tfm)) {
1519                 pr_err("failed to load transform for %s: %ld\n", algo,
1520                        PTR_ERR(tfm));
1521                 return;
1522         }
1523
1524         pr_info("\ntesting speed of %s %s (%s) %s\n", async ? "async" : "sync",
1525                 algo, get_driver_name(crypto_skcipher, tfm), e);
1526
1527         req = skcipher_request_alloc(tfm, GFP_KERNEL);
1528         if (!req) {
1529                 pr_err("tcrypt: skcipher: Failed to allocate request for %s\n",
1530                        algo);
1531                 goto out;
1532         }
1533
1534         skcipher_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
1535                                       crypto_req_done, &wait);
1536
1537         i = 0;
1538         do {
1539                 b_size = block_sizes;
1540
1541                 do {
1542                         u32 bs = round_up(*b_size, crypto_skcipher_blocksize(tfm));
1543                         struct scatterlist sg[TVMEMSIZE];
1544
1545                         if ((*keysize + bs) > TVMEMSIZE * PAGE_SIZE) {
1546                                 pr_err("template (%u) too big for "
1547                                        "tvmem (%lu)\n", *keysize + bs,
1548                                        TVMEMSIZE * PAGE_SIZE);
1549                                 goto out_free_req;
1550                         }
1551
1552                         pr_info("test %u (%d bit key, %d byte blocks): ", i,
1553                                 *keysize * 8, bs);
1554
1555                         memset(tvmem[0], 0xff, PAGE_SIZE);
1556
1557                         /* set key, plain text and IV */
1558                         key = tvmem[0];
1559                         for (j = 0; j < tcount; j++) {
1560                                 if (template[j].klen == *keysize) {
1561                                         key = template[j].key;
1562                                         break;
1563                                 }
1564                         }
1565
1566                         crypto_skcipher_clear_flags(tfm, ~0);
1567
1568                         ret = crypto_skcipher_setkey(tfm, key, *keysize);
1569                         if (ret) {
1570                                 pr_err("setkey() failed flags=%x\n",
1571                                         crypto_skcipher_get_flags(tfm));
1572                                 goto out_free_req;
1573                         }
1574
1575                         k = *keysize + bs;
1576                         sg_init_table(sg, DIV_ROUND_UP(k, PAGE_SIZE));
1577
1578                         if (k > PAGE_SIZE) {
1579                                 sg_set_buf(sg, tvmem[0] + *keysize,
1580                                    PAGE_SIZE - *keysize);
1581                                 k -= PAGE_SIZE;
1582                                 j = 1;
1583                                 while (k > PAGE_SIZE) {
1584                                         sg_set_buf(sg + j, tvmem[j], PAGE_SIZE);
1585                                         memset(tvmem[j], 0xff, PAGE_SIZE);
1586                                         j++;
1587                                         k -= PAGE_SIZE;
1588                                 }
1589                                 sg_set_buf(sg + j, tvmem[j], k);
1590                                 memset(tvmem[j], 0xff, k);
1591                         } else {
1592                                 sg_set_buf(sg, tvmem[0] + *keysize, bs);
1593                         }
1594
1595                         iv_len = crypto_skcipher_ivsize(tfm);
1596                         if (iv_len)
1597                                 memset(&iv, 0xff, iv_len);
1598
1599                         skcipher_request_set_crypt(req, sg, sg, bs, iv);
1600
1601                         if (secs) {
1602                                 ret = test_acipher_jiffies(req, enc,
1603                                                            bs, secs);
1604                                 cond_resched();
1605                         } else {
1606                                 ret = test_acipher_cycles(req, enc,
1607                                                           bs);
1608                         }
1609
1610                         if (ret) {
1611                                 pr_err("%s() failed flags=%x\n", e,
1612                                        crypto_skcipher_get_flags(tfm));
1613                                 break;
1614                         }
1615                         b_size++;
1616                         i++;
1617                 } while (*b_size);
1618                 keysize++;
1619         } while (*keysize);
1620
1621 out_free_req:
1622         skcipher_request_free(req);
1623 out:
1624         crypto_free_skcipher(tfm);
1625 }
1626
1627 static void test_acipher_speed(const char *algo, int enc, unsigned int secs,
1628                                struct cipher_speed_template *template,
1629                                unsigned int tcount, u8 *keysize)
1630 {
1631         return test_skcipher_speed(algo, enc, secs, template, tcount, keysize,
1632                                    true);
1633 }
1634
1635 static void test_cipher_speed(const char *algo, int enc, unsigned int secs,
1636                               struct cipher_speed_template *template,
1637                               unsigned int tcount, u8 *keysize)
1638 {
1639         return test_skcipher_speed(algo, enc, secs, template, tcount, keysize,
1640                                    false);
1641 }
1642
1643 static void test_available(void)
1644 {
1645         const char **name = check;
1646
1647         while (*name) {
1648                 printk("alg %s ", *name);
1649                 printk(crypto_has_alg(*name, 0, 0) ?
1650                        "found\n" : "not found\n");
1651                 name++;
1652         }
1653 }
1654
1655 static inline int tcrypt_test(const char *alg)
1656 {
1657         int ret;
1658
1659         pr_debug("testing %s\n", alg);
1660
1661         ret = alg_test(alg, alg, 0, 0);
1662         /* non-fips algs return -EINVAL in fips mode */
1663         if (fips_enabled && ret == -EINVAL)
1664                 ret = 0;
1665         return ret;
1666 }
1667
1668 static int do_test(const char *alg, u32 type, u32 mask, int m, u32 num_mb)
1669 {
1670         int i;
1671         int ret = 0;
1672
1673         switch (m) {
1674         case 0:
1675                 if (alg) {
1676                         if (!crypto_has_alg(alg, type,
1677                                             mask ?: CRYPTO_ALG_TYPE_MASK))
1678                                 ret = -ENOENT;
1679                         break;
1680                 }
1681
1682                 for (i = 1; i < 200; i++)
1683                         ret += do_test(NULL, 0, 0, i, num_mb);
1684                 break;
1685
1686         case 1:
1687                 ret += tcrypt_test("md5");
1688                 break;
1689
1690         case 2:
1691                 ret += tcrypt_test("sha1");
1692                 break;
1693
1694         case 3:
1695                 ret += tcrypt_test("ecb(des)");
1696                 ret += tcrypt_test("cbc(des)");
1697                 ret += tcrypt_test("ctr(des)");
1698                 break;
1699
1700         case 4:
1701                 ret += tcrypt_test("ecb(des3_ede)");
1702                 ret += tcrypt_test("cbc(des3_ede)");
1703                 ret += tcrypt_test("ctr(des3_ede)");
1704                 break;
1705
1706         case 5:
1707                 ret += tcrypt_test("md4");
1708                 break;
1709
1710         case 6:
1711                 ret += tcrypt_test("sha256");
1712                 break;
1713
1714         case 7:
1715                 ret += tcrypt_test("ecb(blowfish)");
1716                 ret += tcrypt_test("cbc(blowfish)");
1717                 ret += tcrypt_test("ctr(blowfish)");
1718                 break;
1719
1720         case 8:
1721                 ret += tcrypt_test("ecb(twofish)");
1722                 ret += tcrypt_test("cbc(twofish)");
1723                 ret += tcrypt_test("ctr(twofish)");
1724                 ret += tcrypt_test("lrw(twofish)");
1725                 ret += tcrypt_test("xts(twofish)");
1726                 break;
1727
1728         case 9:
1729                 ret += tcrypt_test("ecb(serpent)");
1730                 ret += tcrypt_test("cbc(serpent)");
1731                 ret += tcrypt_test("ctr(serpent)");
1732                 ret += tcrypt_test("lrw(serpent)");
1733                 ret += tcrypt_test("xts(serpent)");
1734                 break;
1735
1736         case 10:
1737                 ret += tcrypt_test("ecb(aes)");
1738                 ret += tcrypt_test("cbc(aes)");
1739                 ret += tcrypt_test("lrw(aes)");
1740                 ret += tcrypt_test("xts(aes)");
1741                 ret += tcrypt_test("ctr(aes)");
1742                 ret += tcrypt_test("rfc3686(ctr(aes))");
1743                 ret += tcrypt_test("ofb(aes)");
1744                 ret += tcrypt_test("cfb(aes)");
1745                 break;
1746
1747         case 11:
1748                 ret += tcrypt_test("sha384");
1749                 break;
1750
1751         case 12:
1752                 ret += tcrypt_test("sha512");
1753                 break;
1754
1755         case 13:
1756                 ret += tcrypt_test("deflate");
1757                 break;
1758
1759         case 14:
1760                 ret += tcrypt_test("ecb(cast5)");
1761                 ret += tcrypt_test("cbc(cast5)");
1762                 ret += tcrypt_test("ctr(cast5)");
1763                 break;
1764
1765         case 15:
1766                 ret += tcrypt_test("ecb(cast6)");
1767                 ret += tcrypt_test("cbc(cast6)");
1768                 ret += tcrypt_test("ctr(cast6)");
1769                 ret += tcrypt_test("lrw(cast6)");
1770                 ret += tcrypt_test("xts(cast6)");
1771                 break;
1772
1773         case 16:
1774                 ret += tcrypt_test("ecb(arc4)");
1775                 break;
1776
1777         case 17:
1778                 ret += tcrypt_test("michael_mic");
1779                 break;
1780
1781         case 18:
1782                 ret += tcrypt_test("crc32c");
1783                 break;
1784
1785         case 19:
1786                 ret += tcrypt_test("ecb(tea)");
1787                 break;
1788
1789         case 20:
1790                 ret += tcrypt_test("ecb(xtea)");
1791                 break;
1792
1793         case 21:
1794                 ret += tcrypt_test("ecb(khazad)");
1795                 break;
1796
1797         case 22:
1798                 ret += tcrypt_test("wp512");
1799                 break;
1800
1801         case 23:
1802                 ret += tcrypt_test("wp384");
1803                 break;
1804
1805         case 24:
1806                 ret += tcrypt_test("wp256");
1807                 break;
1808
1809         case 26:
1810                 ret += tcrypt_test("ecb(anubis)");
1811                 ret += tcrypt_test("cbc(anubis)");
1812                 break;
1813
1814         case 30:
1815                 ret += tcrypt_test("ecb(xeta)");
1816                 break;
1817
1818         case 31:
1819                 ret += tcrypt_test("pcbc(fcrypt)");
1820                 break;
1821
1822         case 32:
1823                 ret += tcrypt_test("ecb(camellia)");
1824                 ret += tcrypt_test("cbc(camellia)");
1825                 ret += tcrypt_test("ctr(camellia)");
1826                 ret += tcrypt_test("lrw(camellia)");
1827                 ret += tcrypt_test("xts(camellia)");
1828                 break;
1829
1830         case 33:
1831                 ret += tcrypt_test("sha224");
1832                 break;
1833
1834         case 35:
1835                 ret += tcrypt_test("gcm(aes)");
1836                 break;
1837
1838         case 36:
1839                 ret += tcrypt_test("lzo");
1840                 break;
1841
1842         case 37:
1843                 ret += tcrypt_test("ccm(aes)");
1844                 break;
1845
1846         case 38:
1847                 ret += tcrypt_test("cts(cbc(aes))");
1848                 break;
1849
1850         case 40:
1851                 ret += tcrypt_test("rmd160");
1852                 break;
1853
1854         case 43:
1855                 ret += tcrypt_test("ecb(seed)");
1856                 break;
1857
1858         case 45:
1859                 ret += tcrypt_test("rfc4309(ccm(aes))");
1860                 break;
1861
1862         case 46:
1863                 ret += tcrypt_test("ghash");
1864                 break;
1865
1866         case 47:
1867                 ret += tcrypt_test("crct10dif");
1868                 break;
1869
1870         case 48:
1871                 ret += tcrypt_test("sha3-224");
1872                 break;
1873
1874         case 49:
1875                 ret += tcrypt_test("sha3-256");
1876                 break;
1877
1878         case 50:
1879                 ret += tcrypt_test("sha3-384");
1880                 break;
1881
1882         case 51:
1883                 ret += tcrypt_test("sha3-512");
1884                 break;
1885
1886         case 52:
1887                 ret += tcrypt_test("sm3");
1888                 break;
1889
1890         case 53:
1891                 ret += tcrypt_test("streebog256");
1892                 break;
1893
1894         case 54:
1895                 ret += tcrypt_test("streebog512");
1896                 break;
1897
1898         case 100:
1899                 ret += tcrypt_test("hmac(md5)");
1900                 break;
1901
1902         case 101:
1903                 ret += tcrypt_test("hmac(sha1)");
1904                 break;
1905
1906         case 102:
1907                 ret += tcrypt_test("hmac(sha256)");
1908                 break;
1909
1910         case 103:
1911                 ret += tcrypt_test("hmac(sha384)");
1912                 break;
1913
1914         case 104:
1915                 ret += tcrypt_test("hmac(sha512)");
1916                 break;
1917
1918         case 105:
1919                 ret += tcrypt_test("hmac(sha224)");
1920                 break;
1921
1922         case 106:
1923                 ret += tcrypt_test("xcbc(aes)");
1924                 break;
1925
1926         case 108:
1927                 ret += tcrypt_test("hmac(rmd160)");
1928                 break;
1929
1930         case 109:
1931                 ret += tcrypt_test("vmac64(aes)");
1932                 break;
1933
1934         case 111:
1935                 ret += tcrypt_test("hmac(sha3-224)");
1936                 break;
1937
1938         case 112:
1939                 ret += tcrypt_test("hmac(sha3-256)");
1940                 break;
1941
1942         case 113:
1943                 ret += tcrypt_test("hmac(sha3-384)");
1944                 break;
1945
1946         case 114:
1947                 ret += tcrypt_test("hmac(sha3-512)");
1948                 break;
1949
1950         case 115:
1951                 ret += tcrypt_test("hmac(streebog256)");
1952                 break;
1953
1954         case 116:
1955                 ret += tcrypt_test("hmac(streebog512)");
1956                 break;
1957
1958         case 150:
1959                 ret += tcrypt_test("ansi_cprng");
1960                 break;
1961
1962         case 151:
1963                 ret += tcrypt_test("rfc4106(gcm(aes))");
1964                 break;
1965
1966         case 152:
1967                 ret += tcrypt_test("rfc4543(gcm(aes))");
1968                 break;
1969
1970         case 153:
1971                 ret += tcrypt_test("cmac(aes)");
1972                 break;
1973
1974         case 154:
1975                 ret += tcrypt_test("cmac(des3_ede)");
1976                 break;
1977
1978         case 155:
1979                 ret += tcrypt_test("authenc(hmac(sha1),cbc(aes))");
1980                 break;
1981
1982         case 156:
1983                 ret += tcrypt_test("authenc(hmac(md5),ecb(cipher_null))");
1984                 break;
1985
1986         case 157:
1987                 ret += tcrypt_test("authenc(hmac(sha1),ecb(cipher_null))");
1988                 break;
1989         case 181:
1990                 ret += tcrypt_test("authenc(hmac(sha1),cbc(des))");
1991                 break;
1992         case 182:
1993                 ret += tcrypt_test("authenc(hmac(sha1),cbc(des3_ede))");
1994                 break;
1995         case 183:
1996                 ret += tcrypt_test("authenc(hmac(sha224),cbc(des))");
1997                 break;
1998         case 184:
1999                 ret += tcrypt_test("authenc(hmac(sha224),cbc(des3_ede))");
2000                 break;
2001         case 185:
2002                 ret += tcrypt_test("authenc(hmac(sha256),cbc(des))");
2003                 break;
2004         case 186:
2005                 ret += tcrypt_test("authenc(hmac(sha256),cbc(des3_ede))");
2006                 break;
2007         case 187:
2008                 ret += tcrypt_test("authenc(hmac(sha384),cbc(des))");
2009                 break;
2010         case 188:
2011                 ret += tcrypt_test("authenc(hmac(sha384),cbc(des3_ede))");
2012                 break;
2013         case 189:
2014                 ret += tcrypt_test("authenc(hmac(sha512),cbc(des))");
2015                 break;
2016         case 190:
2017                 ret += tcrypt_test("authenc(hmac(sha512),cbc(des3_ede))");
2018                 break;
2019         case 191:
2020                 ret += tcrypt_test("ecb(sm4)");
2021                 ret += tcrypt_test("cbc(sm4)");
2022                 ret += tcrypt_test("ctr(sm4)");
2023                 break;
2024         case 200:
2025                 test_cipher_speed("ecb(aes)", ENCRYPT, sec, NULL, 0,
2026                                 speed_template_16_24_32);
2027                 test_cipher_speed("ecb(aes)", DECRYPT, sec, NULL, 0,
2028                                 speed_template_16_24_32);
2029                 test_cipher_speed("cbc(aes)", ENCRYPT, sec, NULL, 0,
2030                                 speed_template_16_24_32);
2031                 test_cipher_speed("cbc(aes)", DECRYPT, sec, NULL, 0,
2032                                 speed_template_16_24_32);
2033                 test_cipher_speed("lrw(aes)", ENCRYPT, sec, NULL, 0,
2034                                 speed_template_32_40_48);
2035                 test_cipher_speed("lrw(aes)", DECRYPT, sec, NULL, 0,
2036                                 speed_template_32_40_48);
2037                 test_cipher_speed("xts(aes)", ENCRYPT, sec, NULL, 0,
2038                                 speed_template_32_64);
2039                 test_cipher_speed("xts(aes)", DECRYPT, sec, NULL, 0,
2040                                 speed_template_32_64);
2041                 test_cipher_speed("cts(cbc(aes))", ENCRYPT, sec, NULL, 0,
2042                                 speed_template_16_24_32);
2043                 test_cipher_speed("cts(cbc(aes))", DECRYPT, sec, NULL, 0,
2044                                 speed_template_16_24_32);
2045                 test_cipher_speed("ctr(aes)", ENCRYPT, sec, NULL, 0,
2046                                 speed_template_16_24_32);
2047                 test_cipher_speed("ctr(aes)", DECRYPT, sec, NULL, 0,
2048                                 speed_template_16_24_32);
2049                 test_cipher_speed("cfb(aes)", ENCRYPT, sec, NULL, 0,
2050                                 speed_template_16_24_32);
2051                 test_cipher_speed("cfb(aes)", DECRYPT, sec, NULL, 0,
2052                                 speed_template_16_24_32);
2053                 break;
2054
2055         case 201:
2056                 test_cipher_speed("ecb(des3_ede)", ENCRYPT, sec,
2057                                 des3_speed_template, DES3_SPEED_VECTORS,
2058                                 speed_template_24);
2059                 test_cipher_speed("ecb(des3_ede)", DECRYPT, sec,
2060                                 des3_speed_template, DES3_SPEED_VECTORS,
2061                                 speed_template_24);
2062                 test_cipher_speed("cbc(des3_ede)", ENCRYPT, sec,
2063                                 des3_speed_template, DES3_SPEED_VECTORS,
2064                                 speed_template_24);
2065                 test_cipher_speed("cbc(des3_ede)", DECRYPT, sec,
2066                                 des3_speed_template, DES3_SPEED_VECTORS,
2067                                 speed_template_24);
2068                 test_cipher_speed("ctr(des3_ede)", ENCRYPT, sec,
2069                                 des3_speed_template, DES3_SPEED_VECTORS,
2070                                 speed_template_24);
2071                 test_cipher_speed("ctr(des3_ede)", DECRYPT, sec,
2072                                 des3_speed_template, DES3_SPEED_VECTORS,
2073                                 speed_template_24);
2074                 break;
2075
2076         case 202:
2077                 test_cipher_speed("ecb(twofish)", ENCRYPT, sec, NULL, 0,
2078                                 speed_template_16_24_32);
2079                 test_cipher_speed("ecb(twofish)", DECRYPT, sec, NULL, 0,
2080                                 speed_template_16_24_32);
2081                 test_cipher_speed("cbc(twofish)", ENCRYPT, sec, NULL, 0,
2082                                 speed_template_16_24_32);
2083                 test_cipher_speed("cbc(twofish)", DECRYPT, sec, NULL, 0,
2084                                 speed_template_16_24_32);
2085                 test_cipher_speed("ctr(twofish)", ENCRYPT, sec, NULL, 0,
2086                                 speed_template_16_24_32);
2087                 test_cipher_speed("ctr(twofish)", DECRYPT, sec, NULL, 0,
2088                                 speed_template_16_24_32);
2089                 test_cipher_speed("lrw(twofish)", ENCRYPT, sec, NULL, 0,
2090                                 speed_template_32_40_48);
2091                 test_cipher_speed("lrw(twofish)", DECRYPT, sec, NULL, 0,
2092                                 speed_template_32_40_48);
2093                 test_cipher_speed("xts(twofish)", ENCRYPT, sec, NULL, 0,
2094                                 speed_template_32_48_64);
2095                 test_cipher_speed("xts(twofish)", DECRYPT, sec, NULL, 0,
2096                                 speed_template_32_48_64);
2097                 break;
2098
2099         case 203:
2100                 test_cipher_speed("ecb(blowfish)", ENCRYPT, sec, NULL, 0,
2101                                   speed_template_8_32);
2102                 test_cipher_speed("ecb(blowfish)", DECRYPT, sec, NULL, 0,
2103                                   speed_template_8_32);
2104                 test_cipher_speed("cbc(blowfish)", ENCRYPT, sec, NULL, 0,
2105                                   speed_template_8_32);
2106                 test_cipher_speed("cbc(blowfish)", DECRYPT, sec, NULL, 0,
2107                                   speed_template_8_32);
2108                 test_cipher_speed("ctr(blowfish)", ENCRYPT, sec, NULL, 0,
2109                                   speed_template_8_32);
2110                 test_cipher_speed("ctr(blowfish)", DECRYPT, sec, NULL, 0,
2111                                   speed_template_8_32);
2112                 break;
2113
2114         case 204:
2115                 test_cipher_speed("ecb(des)", ENCRYPT, sec, NULL, 0,
2116                                   speed_template_8);
2117                 test_cipher_speed("ecb(des)", DECRYPT, sec, NULL, 0,
2118                                   speed_template_8);
2119                 test_cipher_speed("cbc(des)", ENCRYPT, sec, NULL, 0,
2120                                   speed_template_8);
2121                 test_cipher_speed("cbc(des)", DECRYPT, sec, NULL, 0,
2122                                   speed_template_8);
2123                 break;
2124
2125         case 205:
2126                 test_cipher_speed("ecb(camellia)", ENCRYPT, sec, NULL, 0,
2127                                 speed_template_16_24_32);
2128                 test_cipher_speed("ecb(camellia)", DECRYPT, sec, NULL, 0,
2129                                 speed_template_16_24_32);
2130                 test_cipher_speed("cbc(camellia)", ENCRYPT, sec, NULL, 0,
2131                                 speed_template_16_24_32);
2132                 test_cipher_speed("cbc(camellia)", DECRYPT, sec, NULL, 0,
2133                                 speed_template_16_24_32);
2134                 test_cipher_speed("ctr(camellia)", ENCRYPT, sec, NULL, 0,
2135                                 speed_template_16_24_32);
2136                 test_cipher_speed("ctr(camellia)", DECRYPT, sec, NULL, 0,
2137                                 speed_template_16_24_32);
2138                 test_cipher_speed("lrw(camellia)", ENCRYPT, sec, NULL, 0,
2139                                 speed_template_32_40_48);
2140                 test_cipher_speed("lrw(camellia)", DECRYPT, sec, NULL, 0,
2141                                 speed_template_32_40_48);
2142                 test_cipher_speed("xts(camellia)", ENCRYPT, sec, NULL, 0,
2143                                 speed_template_32_48_64);
2144                 test_cipher_speed("xts(camellia)", DECRYPT, sec, NULL, 0,
2145                                 speed_template_32_48_64);
2146                 break;
2147
2148         case 207:
2149                 test_cipher_speed("ecb(serpent)", ENCRYPT, sec, NULL, 0,
2150                                   speed_template_16_32);
2151                 test_cipher_speed("ecb(serpent)", DECRYPT, sec, NULL, 0,
2152                                   speed_template_16_32);
2153                 test_cipher_speed("cbc(serpent)", ENCRYPT, sec, NULL, 0,
2154                                   speed_template_16_32);
2155                 test_cipher_speed("cbc(serpent)", DECRYPT, sec, NULL, 0,
2156                                   speed_template_16_32);
2157                 test_cipher_speed("ctr(serpent)", ENCRYPT, sec, NULL, 0,
2158                                   speed_template_16_32);
2159                 test_cipher_speed("ctr(serpent)", DECRYPT, sec, NULL, 0,
2160                                   speed_template_16_32);
2161                 test_cipher_speed("lrw(serpent)", ENCRYPT, sec, NULL, 0,
2162                                   speed_template_32_48);
2163                 test_cipher_speed("lrw(serpent)", DECRYPT, sec, NULL, 0,
2164                                   speed_template_32_48);
2165                 test_cipher_speed("xts(serpent)", ENCRYPT, sec, NULL, 0,
2166                                   speed_template_32_64);
2167                 test_cipher_speed("xts(serpent)", DECRYPT, sec, NULL, 0,
2168                                   speed_template_32_64);
2169                 break;
2170
2171         case 208:
2172                 test_cipher_speed("ecb(arc4)", ENCRYPT, sec, NULL, 0,
2173                                   speed_template_8);
2174                 break;
2175
2176         case 209:
2177                 test_cipher_speed("ecb(cast5)", ENCRYPT, sec, NULL, 0,
2178                                   speed_template_8_16);
2179                 test_cipher_speed("ecb(cast5)", DECRYPT, sec, NULL, 0,
2180                                   speed_template_8_16);
2181                 test_cipher_speed("cbc(cast5)", ENCRYPT, sec, NULL, 0,
2182                                   speed_template_8_16);
2183                 test_cipher_speed("cbc(cast5)", DECRYPT, sec, NULL, 0,
2184                                   speed_template_8_16);
2185                 test_cipher_speed("ctr(cast5)", ENCRYPT, sec, NULL, 0,
2186                                   speed_template_8_16);
2187                 test_cipher_speed("ctr(cast5)", DECRYPT, sec, NULL, 0,
2188                                   speed_template_8_16);
2189                 break;
2190
2191         case 210:
2192                 test_cipher_speed("ecb(cast6)", ENCRYPT, sec, NULL, 0,
2193                                   speed_template_16_32);
2194                 test_cipher_speed("ecb(cast6)", DECRYPT, sec, NULL, 0,
2195                                   speed_template_16_32);
2196                 test_cipher_speed("cbc(cast6)", ENCRYPT, sec, NULL, 0,
2197                                   speed_template_16_32);
2198                 test_cipher_speed("cbc(cast6)", DECRYPT, sec, NULL, 0,
2199                                   speed_template_16_32);
2200                 test_cipher_speed("ctr(cast6)", ENCRYPT, sec, NULL, 0,
2201                                   speed_template_16_32);
2202                 test_cipher_speed("ctr(cast6)", DECRYPT, sec, NULL, 0,
2203                                   speed_template_16_32);
2204                 test_cipher_speed("lrw(cast6)", ENCRYPT, sec, NULL, 0,
2205                                   speed_template_32_48);
2206                 test_cipher_speed("lrw(cast6)", DECRYPT, sec, NULL, 0,
2207                                   speed_template_32_48);
2208                 test_cipher_speed("xts(cast6)", ENCRYPT, sec, NULL, 0,
2209                                   speed_template_32_64);
2210                 test_cipher_speed("xts(cast6)", DECRYPT, sec, NULL, 0,
2211                                   speed_template_32_64);
2212                 break;
2213
2214         case 211:
2215                 test_aead_speed("rfc4106(gcm(aes))", ENCRYPT, sec,
2216                                 NULL, 0, 16, 16, aead_speed_template_20);
2217                 test_aead_speed("gcm(aes)", ENCRYPT, sec,
2218                                 NULL, 0, 16, 8, speed_template_16_24_32);
2219                 test_aead_speed("rfc4106(gcm(aes))", DECRYPT, sec,
2220                                 NULL, 0, 16, 16, aead_speed_template_20);
2221                 test_aead_speed("gcm(aes)", DECRYPT, sec,
2222                                 NULL, 0, 16, 8, speed_template_16_24_32);
2223                 break;
2224
2225         case 212:
2226                 test_aead_speed("rfc4309(ccm(aes))", ENCRYPT, sec,
2227                                 NULL, 0, 16, 16, aead_speed_template_19);
2228                 test_aead_speed("rfc4309(ccm(aes))", DECRYPT, sec,
2229                                 NULL, 0, 16, 16, aead_speed_template_19);
2230                 break;
2231
2232         case 213:
2233                 test_aead_speed("rfc7539esp(chacha20,poly1305)", ENCRYPT, sec,
2234                                 NULL, 0, 16, 8, aead_speed_template_36);
2235                 test_aead_speed("rfc7539esp(chacha20,poly1305)", DECRYPT, sec,
2236                                 NULL, 0, 16, 8, aead_speed_template_36);
2237                 break;
2238
2239         case 214:
2240                 test_cipher_speed("chacha20", ENCRYPT, sec, NULL, 0,
2241                                   speed_template_32);
2242                 break;
2243
2244         case 215:
2245                 test_mb_aead_speed("rfc4106(gcm(aes))", ENCRYPT, sec, NULL,
2246                                    0, 16, 16, aead_speed_template_20, num_mb);
2247                 test_mb_aead_speed("gcm(aes)", ENCRYPT, sec, NULL, 0, 16, 8,
2248                                    speed_template_16_24_32, num_mb);
2249                 test_mb_aead_speed("rfc4106(gcm(aes))", DECRYPT, sec, NULL,
2250                                    0, 16, 16, aead_speed_template_20, num_mb);
2251                 test_mb_aead_speed("gcm(aes)", DECRYPT, sec, NULL, 0, 16, 8,
2252                                    speed_template_16_24_32, num_mb);
2253                 break;
2254
2255         case 216:
2256                 test_mb_aead_speed("rfc4309(ccm(aes))", ENCRYPT, sec, NULL, 0,
2257                                    16, 16, aead_speed_template_19, num_mb);
2258                 test_mb_aead_speed("rfc4309(ccm(aes))", DECRYPT, sec, NULL, 0,
2259                                    16, 16, aead_speed_template_19, num_mb);
2260                 break;
2261
2262         case 217:
2263                 test_mb_aead_speed("rfc7539esp(chacha20,poly1305)", ENCRYPT,
2264                                    sec, NULL, 0, 16, 8, aead_speed_template_36,
2265                                    num_mb);
2266                 test_mb_aead_speed("rfc7539esp(chacha20,poly1305)", DECRYPT,
2267                                    sec, NULL, 0, 16, 8, aead_speed_template_36,
2268                                    num_mb);
2269                 break;
2270
2271         case 218:
2272                 test_cipher_speed("ecb(sm4)", ENCRYPT, sec, NULL, 0,
2273                                 speed_template_16);
2274                 test_cipher_speed("ecb(sm4)", DECRYPT, sec, NULL, 0,
2275                                 speed_template_16);
2276                 test_cipher_speed("cbc(sm4)", ENCRYPT, sec, NULL, 0,
2277                                 speed_template_16);
2278                 test_cipher_speed("cbc(sm4)", DECRYPT, sec, NULL, 0,
2279                                 speed_template_16);
2280                 test_cipher_speed("ctr(sm4)", ENCRYPT, sec, NULL, 0,
2281                                 speed_template_16);
2282                 test_cipher_speed("ctr(sm4)", DECRYPT, sec, NULL, 0,
2283                                 speed_template_16);
2284                 break;
2285
2286         case 219:
2287                 test_cipher_speed("adiantum(xchacha12,aes)", ENCRYPT, sec, NULL,
2288                                   0, speed_template_32);
2289                 test_cipher_speed("adiantum(xchacha12,aes)", DECRYPT, sec, NULL,
2290                                   0, speed_template_32);
2291                 test_cipher_speed("adiantum(xchacha20,aes)", ENCRYPT, sec, NULL,
2292                                   0, speed_template_32);
2293                 test_cipher_speed("adiantum(xchacha20,aes)", DECRYPT, sec, NULL,
2294                                   0, speed_template_32);
2295                 break;
2296
2297         case 220:
2298                 test_acipher_speed("essiv(cbc(aes),sha256)",
2299                                   ENCRYPT, sec, NULL, 0,
2300                                   speed_template_16_24_32);
2301                 test_acipher_speed("essiv(cbc(aes),sha256)",
2302                                   DECRYPT, sec, NULL, 0,
2303                                   speed_template_16_24_32);
2304                 break;
2305
2306         case 221:
2307                 test_aead_speed("aegis128", ENCRYPT, sec,
2308                                 NULL, 0, 16, 8, speed_template_16);
2309                 test_aead_speed("aegis128", DECRYPT, sec,
2310                                 NULL, 0, 16, 8, speed_template_16);
2311                 break;
2312
2313         case 300:
2314                 if (alg) {
2315                         test_hash_speed(alg, sec, generic_hash_speed_template);
2316                         break;
2317                 }
2318                 fallthrough;
2319         case 301:
2320                 test_hash_speed("md4", sec, generic_hash_speed_template);
2321                 if (mode > 300 && mode < 400) break;
2322                 fallthrough;
2323         case 302:
2324                 test_hash_speed("md5", sec, generic_hash_speed_template);
2325                 if (mode > 300 && mode < 400) break;
2326                 fallthrough;
2327         case 303:
2328                 test_hash_speed("sha1", sec, generic_hash_speed_template);
2329                 if (mode > 300 && mode < 400) break;
2330                 fallthrough;
2331         case 304:
2332                 test_hash_speed("sha256", sec, generic_hash_speed_template);
2333                 if (mode > 300 && mode < 400) break;
2334                 fallthrough;
2335         case 305:
2336                 test_hash_speed("sha384", sec, generic_hash_speed_template);
2337                 if (mode > 300 && mode < 400) break;
2338                 fallthrough;
2339         case 306:
2340                 test_hash_speed("sha512", sec, generic_hash_speed_template);
2341                 if (mode > 300 && mode < 400) break;
2342                 fallthrough;
2343         case 307:
2344                 test_hash_speed("wp256", sec, generic_hash_speed_template);
2345                 if (mode > 300 && mode < 400) break;
2346                 fallthrough;
2347         case 308:
2348                 test_hash_speed("wp384", sec, generic_hash_speed_template);
2349                 if (mode > 300 && mode < 400) break;
2350                 fallthrough;
2351         case 309:
2352                 test_hash_speed("wp512", sec, generic_hash_speed_template);
2353                 if (mode > 300 && mode < 400) break;
2354                 fallthrough;
2355         case 313:
2356                 test_hash_speed("sha224", sec, generic_hash_speed_template);
2357                 if (mode > 300 && mode < 400) break;
2358                 fallthrough;
2359         case 315:
2360                 test_hash_speed("rmd160", sec, generic_hash_speed_template);
2361                 if (mode > 300 && mode < 400) break;
2362                 fallthrough;
2363         case 318:
2364                 klen = 16;
2365                 test_hash_speed("ghash", sec, generic_hash_speed_template);
2366                 if (mode > 300 && mode < 400) break;
2367                 fallthrough;
2368         case 319:
2369                 test_hash_speed("crc32c", sec, generic_hash_speed_template);
2370                 if (mode > 300 && mode < 400) break;
2371                 fallthrough;
2372         case 320:
2373                 test_hash_speed("crct10dif", sec, generic_hash_speed_template);
2374                 if (mode > 300 && mode < 400) break;
2375                 fallthrough;
2376         case 321:
2377                 test_hash_speed("poly1305", sec, poly1305_speed_template);
2378                 if (mode > 300 && mode < 400) break;
2379                 fallthrough;
2380         case 322:
2381                 test_hash_speed("sha3-224", sec, generic_hash_speed_template);
2382                 if (mode > 300 && mode < 400) break;
2383                 fallthrough;
2384         case 323:
2385                 test_hash_speed("sha3-256", sec, generic_hash_speed_template);
2386                 if (mode > 300 && mode < 400) break;
2387                 fallthrough;
2388         case 324:
2389                 test_hash_speed("sha3-384", sec, generic_hash_speed_template);
2390                 if (mode > 300 && mode < 400) break;
2391                 fallthrough;
2392         case 325:
2393                 test_hash_speed("sha3-512", sec, generic_hash_speed_template);
2394                 if (mode > 300 && mode < 400) break;
2395                 fallthrough;
2396         case 326:
2397                 test_hash_speed("sm3", sec, generic_hash_speed_template);
2398                 if (mode > 300 && mode < 400) break;
2399                 fallthrough;
2400         case 327:
2401                 test_hash_speed("streebog256", sec,
2402                                 generic_hash_speed_template);
2403                 if (mode > 300 && mode < 400) break;
2404                 fallthrough;
2405         case 328:
2406                 test_hash_speed("streebog512", sec,
2407                                 generic_hash_speed_template);
2408                 if (mode > 300 && mode < 400) break;
2409                 fallthrough;
2410         case 399:
2411                 break;
2412
2413         case 400:
2414                 if (alg) {
2415                         test_ahash_speed(alg, sec, generic_hash_speed_template);
2416                         break;
2417                 }
2418                 fallthrough;
2419         case 401:
2420                 test_ahash_speed("md4", sec, generic_hash_speed_template);
2421                 if (mode > 400 && mode < 500) break;
2422                 fallthrough;
2423         case 402:
2424                 test_ahash_speed("md5", sec, generic_hash_speed_template);
2425                 if (mode > 400 && mode < 500) break;
2426                 fallthrough;
2427         case 403:
2428                 test_ahash_speed("sha1", sec, generic_hash_speed_template);
2429                 if (mode > 400 && mode < 500) break;
2430                 fallthrough;
2431         case 404:
2432                 test_ahash_speed("sha256", sec, generic_hash_speed_template);
2433                 if (mode > 400 && mode < 500) break;
2434                 fallthrough;
2435         case 405:
2436                 test_ahash_speed("sha384", sec, generic_hash_speed_template);
2437                 if (mode > 400 && mode < 500) break;
2438                 fallthrough;
2439         case 406:
2440                 test_ahash_speed("sha512", sec, generic_hash_speed_template);
2441                 if (mode > 400 && mode < 500) break;
2442                 fallthrough;
2443         case 407:
2444                 test_ahash_speed("wp256", sec, generic_hash_speed_template);
2445                 if (mode > 400 && mode < 500) break;
2446                 fallthrough;
2447         case 408:
2448                 test_ahash_speed("wp384", sec, generic_hash_speed_template);
2449                 if (mode > 400 && mode < 500) break;
2450                 fallthrough;
2451         case 409:
2452                 test_ahash_speed("wp512", sec, generic_hash_speed_template);
2453                 if (mode > 400 && mode < 500) break;
2454                 fallthrough;
2455         case 413:
2456                 test_ahash_speed("sha224", sec, generic_hash_speed_template);
2457                 if (mode > 400 && mode < 500) break;
2458                 fallthrough;
2459         case 415:
2460                 test_ahash_speed("rmd160", sec, generic_hash_speed_template);
2461                 if (mode > 400 && mode < 500) break;
2462                 fallthrough;
2463         case 418:
2464                 test_ahash_speed("sha3-224", sec, generic_hash_speed_template);
2465                 if (mode > 400 && mode < 500) break;
2466                 fallthrough;
2467         case 419:
2468                 test_ahash_speed("sha3-256", sec, generic_hash_speed_template);
2469                 if (mode > 400 && mode < 500) break;
2470                 fallthrough;
2471         case 420:
2472                 test_ahash_speed("sha3-384", sec, generic_hash_speed_template);
2473                 if (mode > 400 && mode < 500) break;
2474                 fallthrough;
2475         case 421:
2476                 test_ahash_speed("sha3-512", sec, generic_hash_speed_template);
2477                 if (mode > 400 && mode < 500) break;
2478                 fallthrough;
2479         case 422:
2480                 test_mb_ahash_speed("sha1", sec, generic_hash_speed_template,
2481                                     num_mb);
2482                 if (mode > 400 && mode < 500) break;
2483                 fallthrough;
2484         case 423:
2485                 test_mb_ahash_speed("sha256", sec, generic_hash_speed_template,
2486                                     num_mb);
2487                 if (mode > 400 && mode < 500) break;
2488                 fallthrough;
2489         case 424:
2490                 test_mb_ahash_speed("sha512", sec, generic_hash_speed_template,
2491                                     num_mb);
2492                 if (mode > 400 && mode < 500) break;
2493                 fallthrough;
2494         case 425:
2495                 test_mb_ahash_speed("sm3", sec, generic_hash_speed_template,
2496                                     num_mb);
2497                 if (mode > 400 && mode < 500) break;
2498                 fallthrough;
2499         case 426:
2500                 test_mb_ahash_speed("streebog256", sec,
2501                                     generic_hash_speed_template, num_mb);
2502                 if (mode > 400 && mode < 500) break;
2503                 fallthrough;
2504         case 427:
2505                 test_mb_ahash_speed("streebog512", sec,
2506                                     generic_hash_speed_template, num_mb);
2507                 if (mode > 400 && mode < 500) break;
2508                 fallthrough;
2509         case 499:
2510                 break;
2511
2512         case 500:
2513                 test_acipher_speed("ecb(aes)", ENCRYPT, sec, NULL, 0,
2514                                    speed_template_16_24_32);
2515                 test_acipher_speed("ecb(aes)", DECRYPT, sec, NULL, 0,
2516                                    speed_template_16_24_32);
2517                 test_acipher_speed("cbc(aes)", ENCRYPT, sec, NULL, 0,
2518                                    speed_template_16_24_32);
2519                 test_acipher_speed("cbc(aes)", DECRYPT, sec, NULL, 0,
2520                                    speed_template_16_24_32);
2521                 test_acipher_speed("lrw(aes)", ENCRYPT, sec, NULL, 0,
2522                                    speed_template_32_40_48);
2523                 test_acipher_speed("lrw(aes)", DECRYPT, sec, NULL, 0,
2524                                    speed_template_32_40_48);
2525                 test_acipher_speed("xts(aes)", ENCRYPT, sec, NULL, 0,
2526                                    speed_template_32_64);
2527                 test_acipher_speed("xts(aes)", DECRYPT, sec, NULL, 0,
2528                                    speed_template_32_64);
2529                 test_acipher_speed("cts(cbc(aes))", ENCRYPT, sec, NULL, 0,
2530                                    speed_template_16_24_32);
2531                 test_acipher_speed("cts(cbc(aes))", DECRYPT, sec, NULL, 0,
2532                                    speed_template_16_24_32);
2533                 test_acipher_speed("ctr(aes)", ENCRYPT, sec, NULL, 0,
2534                                    speed_template_16_24_32);
2535                 test_acipher_speed("ctr(aes)", DECRYPT, sec, NULL, 0,
2536                                    speed_template_16_24_32);
2537                 test_acipher_speed("cfb(aes)", ENCRYPT, sec, NULL, 0,
2538                                    speed_template_16_24_32);
2539                 test_acipher_speed("cfb(aes)", DECRYPT, sec, NULL, 0,
2540                                    speed_template_16_24_32);
2541                 test_acipher_speed("ofb(aes)", ENCRYPT, sec, NULL, 0,
2542                                    speed_template_16_24_32);
2543                 test_acipher_speed("ofb(aes)", DECRYPT, sec, NULL, 0,
2544                                    speed_template_16_24_32);
2545                 test_acipher_speed("rfc3686(ctr(aes))", ENCRYPT, sec, NULL, 0,
2546                                    speed_template_20_28_36);
2547                 test_acipher_speed("rfc3686(ctr(aes))", DECRYPT, sec, NULL, 0,
2548                                    speed_template_20_28_36);
2549                 break;
2550
2551         case 501:
2552                 test_acipher_speed("ecb(des3_ede)", ENCRYPT, sec,
2553                                    des3_speed_template, DES3_SPEED_VECTORS,
2554                                    speed_template_24);
2555                 test_acipher_speed("ecb(des3_ede)", DECRYPT, sec,
2556                                    des3_speed_template, DES3_SPEED_VECTORS,
2557                                    speed_template_24);
2558                 test_acipher_speed("cbc(des3_ede)", ENCRYPT, sec,
2559                                    des3_speed_template, DES3_SPEED_VECTORS,
2560                                    speed_template_24);
2561                 test_acipher_speed("cbc(des3_ede)", DECRYPT, sec,
2562                                    des3_speed_template, DES3_SPEED_VECTORS,
2563                                    speed_template_24);
2564                 test_acipher_speed("cfb(des3_ede)", ENCRYPT, sec,
2565                                    des3_speed_template, DES3_SPEED_VECTORS,
2566                                    speed_template_24);
2567                 test_acipher_speed("cfb(des3_ede)", DECRYPT, sec,
2568                                    des3_speed_template, DES3_SPEED_VECTORS,
2569                                    speed_template_24);
2570                 test_acipher_speed("ofb(des3_ede)", ENCRYPT, sec,
2571                                    des3_speed_template, DES3_SPEED_VECTORS,
2572                                    speed_template_24);
2573                 test_acipher_speed("ofb(des3_ede)", DECRYPT, sec,
2574                                    des3_speed_template, DES3_SPEED_VECTORS,
2575                                    speed_template_24);
2576                 break;
2577
2578         case 502:
2579                 test_acipher_speed("ecb(des)", ENCRYPT, sec, NULL, 0,
2580                                    speed_template_8);
2581                 test_acipher_speed("ecb(des)", DECRYPT, sec, NULL, 0,
2582                                    speed_template_8);
2583                 test_acipher_speed("cbc(des)", ENCRYPT, sec, NULL, 0,
2584                                    speed_template_8);
2585                 test_acipher_speed("cbc(des)", DECRYPT, sec, NULL, 0,
2586                                    speed_template_8);
2587                 test_acipher_speed("cfb(des)", ENCRYPT, sec, NULL, 0,
2588                                    speed_template_8);
2589                 test_acipher_speed("cfb(des)", DECRYPT, sec, NULL, 0,
2590                                    speed_template_8);
2591                 test_acipher_speed("ofb(des)", ENCRYPT, sec, NULL, 0,
2592                                    speed_template_8);
2593                 test_acipher_speed("ofb(des)", DECRYPT, sec, NULL, 0,
2594                                    speed_template_8);
2595                 break;
2596
2597         case 503:
2598                 test_acipher_speed("ecb(serpent)", ENCRYPT, sec, NULL, 0,
2599                                    speed_template_16_32);
2600                 test_acipher_speed("ecb(serpent)", DECRYPT, sec, NULL, 0,
2601                                    speed_template_16_32);
2602                 test_acipher_speed("cbc(serpent)", ENCRYPT, sec, NULL, 0,
2603                                    speed_template_16_32);
2604                 test_acipher_speed("cbc(serpent)", DECRYPT, sec, NULL, 0,
2605                                    speed_template_16_32);
2606                 test_acipher_speed("ctr(serpent)", ENCRYPT, sec, NULL, 0,
2607                                    speed_template_16_32);
2608                 test_acipher_speed("ctr(serpent)", DECRYPT, sec, NULL, 0,
2609                                    speed_template_16_32);
2610                 test_acipher_speed("lrw(serpent)", ENCRYPT, sec, NULL, 0,
2611                                    speed_template_32_48);
2612                 test_acipher_speed("lrw(serpent)", DECRYPT, sec, NULL, 0,
2613                                    speed_template_32_48);
2614                 test_acipher_speed("xts(serpent)", ENCRYPT, sec, NULL, 0,
2615                                    speed_template_32_64);
2616                 test_acipher_speed("xts(serpent)", DECRYPT, sec, NULL, 0,
2617                                    speed_template_32_64);
2618                 break;
2619
2620         case 504:
2621                 test_acipher_speed("ecb(twofish)", ENCRYPT, sec, NULL, 0,
2622                                    speed_template_16_24_32);
2623                 test_acipher_speed("ecb(twofish)", DECRYPT, sec, NULL, 0,
2624                                    speed_template_16_24_32);
2625                 test_acipher_speed("cbc(twofish)", ENCRYPT, sec, NULL, 0,
2626                                    speed_template_16_24_32);
2627                 test_acipher_speed("cbc(twofish)", DECRYPT, sec, NULL, 0,
2628                                    speed_template_16_24_32);
2629                 test_acipher_speed("ctr(twofish)", ENCRYPT, sec, NULL, 0,
2630                                    speed_template_16_24_32);
2631                 test_acipher_speed("ctr(twofish)", DECRYPT, sec, NULL, 0,
2632                                    speed_template_16_24_32);
2633                 test_acipher_speed("lrw(twofish)", ENCRYPT, sec, NULL, 0,
2634                                    speed_template_32_40_48);
2635                 test_acipher_speed("lrw(twofish)", DECRYPT, sec, NULL, 0,
2636                                    speed_template_32_40_48);
2637                 test_acipher_speed("xts(twofish)", ENCRYPT, sec, NULL, 0,
2638                                    speed_template_32_48_64);
2639                 test_acipher_speed("xts(twofish)", DECRYPT, sec, NULL, 0,
2640                                    speed_template_32_48_64);
2641                 break;
2642
2643         case 505:
2644                 test_acipher_speed("ecb(arc4)", ENCRYPT, sec, NULL, 0,
2645                                    speed_template_8);
2646                 break;
2647
2648         case 506:
2649                 test_acipher_speed("ecb(cast5)", ENCRYPT, sec, NULL, 0,
2650                                    speed_template_8_16);
2651                 test_acipher_speed("ecb(cast5)", DECRYPT, sec, NULL, 0,
2652                                    speed_template_8_16);
2653                 test_acipher_speed("cbc(cast5)", ENCRYPT, sec, NULL, 0,
2654                                    speed_template_8_16);
2655                 test_acipher_speed("cbc(cast5)", DECRYPT, sec, NULL, 0,
2656                                    speed_template_8_16);
2657                 test_acipher_speed("ctr(cast5)", ENCRYPT, sec, NULL, 0,
2658                                    speed_template_8_16);
2659                 test_acipher_speed("ctr(cast5)", DECRYPT, sec, NULL, 0,
2660                                    speed_template_8_16);
2661                 break;
2662
2663         case 507:
2664                 test_acipher_speed("ecb(cast6)", ENCRYPT, sec, NULL, 0,
2665                                    speed_template_16_32);
2666                 test_acipher_speed("ecb(cast6)", DECRYPT, sec, NULL, 0,
2667                                    speed_template_16_32);
2668                 test_acipher_speed("cbc(cast6)", ENCRYPT, sec, NULL, 0,
2669                                    speed_template_16_32);
2670                 test_acipher_speed("cbc(cast6)", DECRYPT, sec, NULL, 0,
2671                                    speed_template_16_32);
2672                 test_acipher_speed("ctr(cast6)", ENCRYPT, sec, NULL, 0,
2673                                    speed_template_16_32);
2674                 test_acipher_speed("ctr(cast6)", DECRYPT, sec, NULL, 0,
2675                                    speed_template_16_32);
2676                 test_acipher_speed("lrw(cast6)", ENCRYPT, sec, NULL, 0,
2677                                    speed_template_32_48);
2678                 test_acipher_speed("lrw(cast6)", DECRYPT, sec, NULL, 0,
2679                                    speed_template_32_48);
2680                 test_acipher_speed("xts(cast6)", ENCRYPT, sec, NULL, 0,
2681                                    speed_template_32_64);
2682                 test_acipher_speed("xts(cast6)", DECRYPT, sec, NULL, 0,
2683                                    speed_template_32_64);
2684                 break;
2685
2686         case 508:
2687                 test_acipher_speed("ecb(camellia)", ENCRYPT, sec, NULL, 0,
2688                                    speed_template_16_32);
2689                 test_acipher_speed("ecb(camellia)", DECRYPT, sec, NULL, 0,
2690                                    speed_template_16_32);
2691                 test_acipher_speed("cbc(camellia)", ENCRYPT, sec, NULL, 0,
2692                                    speed_template_16_32);
2693                 test_acipher_speed("cbc(camellia)", DECRYPT, sec, NULL, 0,
2694                                    speed_template_16_32);
2695                 test_acipher_speed("ctr(camellia)", ENCRYPT, sec, NULL, 0,
2696                                    speed_template_16_32);
2697                 test_acipher_speed("ctr(camellia)", DECRYPT, sec, NULL, 0,
2698                                    speed_template_16_32);
2699                 test_acipher_speed("lrw(camellia)", ENCRYPT, sec, NULL, 0,
2700                                    speed_template_32_48);
2701                 test_acipher_speed("lrw(camellia)", DECRYPT, sec, NULL, 0,
2702                                    speed_template_32_48);
2703                 test_acipher_speed("xts(camellia)", ENCRYPT, sec, NULL, 0,
2704                                    speed_template_32_64);
2705                 test_acipher_speed("xts(camellia)", DECRYPT, sec, NULL, 0,
2706                                    speed_template_32_64);
2707                 break;
2708
2709         case 509:
2710                 test_acipher_speed("ecb(blowfish)", ENCRYPT, sec, NULL, 0,
2711                                    speed_template_8_32);
2712                 test_acipher_speed("ecb(blowfish)", DECRYPT, sec, NULL, 0,
2713                                    speed_template_8_32);
2714                 test_acipher_speed("cbc(blowfish)", ENCRYPT, sec, NULL, 0,
2715                                    speed_template_8_32);
2716                 test_acipher_speed("cbc(blowfish)", DECRYPT, sec, NULL, 0,
2717                                    speed_template_8_32);
2718                 test_acipher_speed("ctr(blowfish)", ENCRYPT, sec, NULL, 0,
2719                                    speed_template_8_32);
2720                 test_acipher_speed("ctr(blowfish)", DECRYPT, sec, NULL, 0,
2721                                    speed_template_8_32);
2722                 break;
2723
2724         case 600:
2725                 test_mb_skcipher_speed("ecb(aes)", ENCRYPT, sec, NULL, 0,
2726                                        speed_template_16_24_32, num_mb);
2727                 test_mb_skcipher_speed("ecb(aes)", DECRYPT, sec, NULL, 0,
2728                                        speed_template_16_24_32, num_mb);
2729                 test_mb_skcipher_speed("cbc(aes)", ENCRYPT, sec, NULL, 0,
2730                                        speed_template_16_24_32, num_mb);
2731                 test_mb_skcipher_speed("cbc(aes)", DECRYPT, sec, NULL, 0,
2732                                        speed_template_16_24_32, num_mb);
2733                 test_mb_skcipher_speed("lrw(aes)", ENCRYPT, sec, NULL, 0,
2734                                        speed_template_32_40_48, num_mb);
2735                 test_mb_skcipher_speed("lrw(aes)", DECRYPT, sec, NULL, 0,
2736                                        speed_template_32_40_48, num_mb);
2737                 test_mb_skcipher_speed("xts(aes)", ENCRYPT, sec, NULL, 0,
2738                                        speed_template_32_64, num_mb);
2739                 test_mb_skcipher_speed("xts(aes)", DECRYPT, sec, NULL, 0,
2740                                        speed_template_32_64, num_mb);
2741                 test_mb_skcipher_speed("cts(cbc(aes))", ENCRYPT, sec, NULL, 0,
2742                                        speed_template_16_24_32, num_mb);
2743                 test_mb_skcipher_speed("cts(cbc(aes))", DECRYPT, sec, NULL, 0,
2744                                        speed_template_16_24_32, num_mb);
2745                 test_mb_skcipher_speed("ctr(aes)", ENCRYPT, sec, NULL, 0,
2746                                        speed_template_16_24_32, num_mb);
2747                 test_mb_skcipher_speed("ctr(aes)", DECRYPT, sec, NULL, 0,
2748                                        speed_template_16_24_32, num_mb);
2749                 test_mb_skcipher_speed("cfb(aes)", ENCRYPT, sec, NULL, 0,
2750                                        speed_template_16_24_32, num_mb);
2751                 test_mb_skcipher_speed("cfb(aes)", DECRYPT, sec, NULL, 0,
2752                                        speed_template_16_24_32, num_mb);
2753                 test_mb_skcipher_speed("ofb(aes)", ENCRYPT, sec, NULL, 0,
2754                                        speed_template_16_24_32, num_mb);
2755                 test_mb_skcipher_speed("ofb(aes)", DECRYPT, sec, NULL, 0,
2756                                        speed_template_16_24_32, num_mb);
2757                 test_mb_skcipher_speed("rfc3686(ctr(aes))", ENCRYPT, sec, NULL,
2758                                        0, speed_template_20_28_36, num_mb);
2759                 test_mb_skcipher_speed("rfc3686(ctr(aes))", DECRYPT, sec, NULL,
2760                                        0, speed_template_20_28_36, num_mb);
2761                 break;
2762
2763         case 601:
2764                 test_mb_skcipher_speed("ecb(des3_ede)", ENCRYPT, sec,
2765                                        des3_speed_template, DES3_SPEED_VECTORS,
2766                                        speed_template_24, num_mb);
2767                 test_mb_skcipher_speed("ecb(des3_ede)", DECRYPT, sec,
2768                                        des3_speed_template, DES3_SPEED_VECTORS,
2769                                        speed_template_24, num_mb);
2770                 test_mb_skcipher_speed("cbc(des3_ede)", ENCRYPT, sec,
2771                                        des3_speed_template, DES3_SPEED_VECTORS,
2772                                        speed_template_24, num_mb);
2773                 test_mb_skcipher_speed("cbc(des3_ede)", DECRYPT, sec,
2774                                        des3_speed_template, DES3_SPEED_VECTORS,
2775                                        speed_template_24, num_mb);
2776                 test_mb_skcipher_speed("cfb(des3_ede)", ENCRYPT, sec,
2777                                        des3_speed_template, DES3_SPEED_VECTORS,
2778                                        speed_template_24, num_mb);
2779                 test_mb_skcipher_speed("cfb(des3_ede)", DECRYPT, sec,
2780                                        des3_speed_template, DES3_SPEED_VECTORS,
2781                                        speed_template_24, num_mb);
2782                 test_mb_skcipher_speed("ofb(des3_ede)", ENCRYPT, sec,
2783                                        des3_speed_template, DES3_SPEED_VECTORS,
2784                                        speed_template_24, num_mb);
2785                 test_mb_skcipher_speed("ofb(des3_ede)", DECRYPT, sec,
2786                                        des3_speed_template, DES3_SPEED_VECTORS,
2787                                        speed_template_24, num_mb);
2788                 break;
2789
2790         case 602:
2791                 test_mb_skcipher_speed("ecb(des)", ENCRYPT, sec, NULL, 0,
2792                                        speed_template_8, num_mb);
2793                 test_mb_skcipher_speed("ecb(des)", DECRYPT, sec, NULL, 0,
2794                                        speed_template_8, num_mb);
2795                 test_mb_skcipher_speed("cbc(des)", ENCRYPT, sec, NULL, 0,
2796                                        speed_template_8, num_mb);
2797                 test_mb_skcipher_speed("cbc(des)", DECRYPT, sec, NULL, 0,
2798                                        speed_template_8, num_mb);
2799                 test_mb_skcipher_speed("cfb(des)", ENCRYPT, sec, NULL, 0,
2800                                        speed_template_8, num_mb);
2801                 test_mb_skcipher_speed("cfb(des)", DECRYPT, sec, NULL, 0,
2802                                        speed_template_8, num_mb);
2803                 test_mb_skcipher_speed("ofb(des)", ENCRYPT, sec, NULL, 0,
2804                                        speed_template_8, num_mb);
2805                 test_mb_skcipher_speed("ofb(des)", DECRYPT, sec, NULL, 0,
2806                                        speed_template_8, num_mb);
2807                 break;
2808
2809         case 603:
2810                 test_mb_skcipher_speed("ecb(serpent)", ENCRYPT, sec, NULL, 0,
2811                                        speed_template_16_32, num_mb);
2812                 test_mb_skcipher_speed("ecb(serpent)", DECRYPT, sec, NULL, 0,
2813                                        speed_template_16_32, num_mb);
2814                 test_mb_skcipher_speed("cbc(serpent)", ENCRYPT, sec, NULL, 0,
2815                                        speed_template_16_32, num_mb);
2816                 test_mb_skcipher_speed("cbc(serpent)", DECRYPT, sec, NULL, 0,
2817                                        speed_template_16_32, num_mb);
2818                 test_mb_skcipher_speed("ctr(serpent)", ENCRYPT, sec, NULL, 0,
2819                                        speed_template_16_32, num_mb);
2820                 test_mb_skcipher_speed("ctr(serpent)", DECRYPT, sec, NULL, 0,
2821                                        speed_template_16_32, num_mb);
2822                 test_mb_skcipher_speed("lrw(serpent)", ENCRYPT, sec, NULL, 0,
2823                                        speed_template_32_48, num_mb);
2824                 test_mb_skcipher_speed("lrw(serpent)", DECRYPT, sec, NULL, 0,
2825                                        speed_template_32_48, num_mb);
2826                 test_mb_skcipher_speed("xts(serpent)", ENCRYPT, sec, NULL, 0,
2827                                        speed_template_32_64, num_mb);
2828                 test_mb_skcipher_speed("xts(serpent)", DECRYPT, sec, NULL, 0,
2829                                        speed_template_32_64, num_mb);
2830                 break;
2831
2832         case 604:
2833                 test_mb_skcipher_speed("ecb(twofish)", ENCRYPT, sec, NULL, 0,
2834                                        speed_template_16_24_32, num_mb);
2835                 test_mb_skcipher_speed("ecb(twofish)", DECRYPT, sec, NULL, 0,
2836                                        speed_template_16_24_32, num_mb);
2837                 test_mb_skcipher_speed("cbc(twofish)", ENCRYPT, sec, NULL, 0,
2838                                        speed_template_16_24_32, num_mb);
2839                 test_mb_skcipher_speed("cbc(twofish)", DECRYPT, sec, NULL, 0,
2840                                        speed_template_16_24_32, num_mb);
2841                 test_mb_skcipher_speed("ctr(twofish)", ENCRYPT, sec, NULL, 0,
2842                                        speed_template_16_24_32, num_mb);
2843                 test_mb_skcipher_speed("ctr(twofish)", DECRYPT, sec, NULL, 0,
2844                                        speed_template_16_24_32, num_mb);
2845                 test_mb_skcipher_speed("lrw(twofish)", ENCRYPT, sec, NULL, 0,
2846                                        speed_template_32_40_48, num_mb);
2847                 test_mb_skcipher_speed("lrw(twofish)", DECRYPT, sec, NULL, 0,
2848                                        speed_template_32_40_48, num_mb);
2849                 test_mb_skcipher_speed("xts(twofish)", ENCRYPT, sec, NULL, 0,
2850                                        speed_template_32_48_64, num_mb);
2851                 test_mb_skcipher_speed("xts(twofish)", DECRYPT, sec, NULL, 0,
2852                                        speed_template_32_48_64, num_mb);
2853                 break;
2854
2855         case 605:
2856                 test_mb_skcipher_speed("ecb(arc4)", ENCRYPT, sec, NULL, 0,
2857                                        speed_template_8, num_mb);
2858                 break;
2859
2860         case 606:
2861                 test_mb_skcipher_speed("ecb(cast5)", ENCRYPT, sec, NULL, 0,
2862                                        speed_template_8_16, num_mb);
2863                 test_mb_skcipher_speed("ecb(cast5)", DECRYPT, sec, NULL, 0,
2864                                        speed_template_8_16, num_mb);
2865                 test_mb_skcipher_speed("cbc(cast5)", ENCRYPT, sec, NULL, 0,
2866                                        speed_template_8_16, num_mb);
2867                 test_mb_skcipher_speed("cbc(cast5)", DECRYPT, sec, NULL, 0,
2868                                        speed_template_8_16, num_mb);
2869                 test_mb_skcipher_speed("ctr(cast5)", ENCRYPT, sec, NULL, 0,
2870                                        speed_template_8_16, num_mb);
2871                 test_mb_skcipher_speed("ctr(cast5)", DECRYPT, sec, NULL, 0,
2872                                        speed_template_8_16, num_mb);
2873                 break;
2874
2875         case 607:
2876                 test_mb_skcipher_speed("ecb(cast6)", ENCRYPT, sec, NULL, 0,
2877                                        speed_template_16_32, num_mb);
2878                 test_mb_skcipher_speed("ecb(cast6)", DECRYPT, sec, NULL, 0,
2879                                        speed_template_16_32, num_mb);
2880                 test_mb_skcipher_speed("cbc(cast6)", ENCRYPT, sec, NULL, 0,
2881                                        speed_template_16_32, num_mb);
2882                 test_mb_skcipher_speed("cbc(cast6)", DECRYPT, sec, NULL, 0,
2883                                        speed_template_16_32, num_mb);
2884                 test_mb_skcipher_speed("ctr(cast6)", ENCRYPT, sec, NULL, 0,
2885                                        speed_template_16_32, num_mb);
2886                 test_mb_skcipher_speed("ctr(cast6)", DECRYPT, sec, NULL, 0,
2887                                        speed_template_16_32, num_mb);
2888                 test_mb_skcipher_speed("lrw(cast6)", ENCRYPT, sec, NULL, 0,
2889                                        speed_template_32_48, num_mb);
2890                 test_mb_skcipher_speed("lrw(cast6)", DECRYPT, sec, NULL, 0,
2891                                        speed_template_32_48, num_mb);
2892                 test_mb_skcipher_speed("xts(cast6)", ENCRYPT, sec, NULL, 0,
2893                                        speed_template_32_64, num_mb);
2894                 test_mb_skcipher_speed("xts(cast6)", DECRYPT, sec, NULL, 0,
2895                                        speed_template_32_64, num_mb);
2896                 break;
2897
2898         case 608:
2899                 test_mb_skcipher_speed("ecb(camellia)", ENCRYPT, sec, NULL, 0,
2900                                        speed_template_16_32, num_mb);
2901                 test_mb_skcipher_speed("ecb(camellia)", DECRYPT, sec, NULL, 0,
2902                                        speed_template_16_32, num_mb);
2903                 test_mb_skcipher_speed("cbc(camellia)", ENCRYPT, sec, NULL, 0,
2904                                        speed_template_16_32, num_mb);
2905                 test_mb_skcipher_speed("cbc(camellia)", DECRYPT, sec, NULL, 0,
2906                                        speed_template_16_32, num_mb);
2907                 test_mb_skcipher_speed("ctr(camellia)", ENCRYPT, sec, NULL, 0,
2908                                        speed_template_16_32, num_mb);
2909                 test_mb_skcipher_speed("ctr(camellia)", DECRYPT, sec, NULL, 0,
2910                                        speed_template_16_32, num_mb);
2911                 test_mb_skcipher_speed("lrw(camellia)", ENCRYPT, sec, NULL, 0,
2912                                        speed_template_32_48, num_mb);
2913                 test_mb_skcipher_speed("lrw(camellia)", DECRYPT, sec, NULL, 0,
2914                                        speed_template_32_48, num_mb);
2915                 test_mb_skcipher_speed("xts(camellia)", ENCRYPT, sec, NULL, 0,
2916                                        speed_template_32_64, num_mb);
2917                 test_mb_skcipher_speed("xts(camellia)", DECRYPT, sec, NULL, 0,
2918                                        speed_template_32_64, num_mb);
2919                 break;
2920
2921         case 609:
2922                 test_mb_skcipher_speed("ecb(blowfish)", ENCRYPT, sec, NULL, 0,
2923                                        speed_template_8_32, num_mb);
2924                 test_mb_skcipher_speed("ecb(blowfish)", DECRYPT, sec, NULL, 0,
2925                                        speed_template_8_32, num_mb);
2926                 test_mb_skcipher_speed("cbc(blowfish)", ENCRYPT, sec, NULL, 0,
2927                                        speed_template_8_32, num_mb);
2928                 test_mb_skcipher_speed("cbc(blowfish)", DECRYPT, sec, NULL, 0,
2929                                        speed_template_8_32, num_mb);
2930                 test_mb_skcipher_speed("ctr(blowfish)", ENCRYPT, sec, NULL, 0,
2931                                        speed_template_8_32, num_mb);
2932                 test_mb_skcipher_speed("ctr(blowfish)", DECRYPT, sec, NULL, 0,
2933                                        speed_template_8_32, num_mb);
2934                 break;
2935
2936         case 1000:
2937                 test_available();
2938                 break;
2939         }
2940
2941         return ret;
2942 }
2943
2944 static int __init tcrypt_mod_init(void)
2945 {
2946         int err = -ENOMEM;
2947         int i;
2948
2949         for (i = 0; i < TVMEMSIZE; i++) {
2950                 tvmem[i] = (void *)__get_free_page(GFP_KERNEL);
2951                 if (!tvmem[i])
2952                         goto err_free_tv;
2953         }
2954
2955         err = do_test(alg, type, mask, mode, num_mb);
2956
2957         if (err) {
2958                 printk(KERN_ERR "tcrypt: one or more tests failed!\n");
2959                 goto err_free_tv;
2960         } else {
2961                 pr_debug("all tests passed\n");
2962         }
2963
2964         /* We intentionaly return -EAGAIN to prevent keeping the module,
2965          * unless we're running in fips mode. It does all its work from
2966          * init() and doesn't offer any runtime functionality, but in
2967          * the fips case, checking for a successful load is helpful.
2968          * => we don't need it in the memory, do we?
2969          *                                        -- mludvig
2970          */
2971         if (!fips_enabled)
2972                 err = -EAGAIN;
2973
2974 err_free_tv:
2975         for (i = 0; i < TVMEMSIZE && tvmem[i]; i++)
2976                 free_page((unsigned long)tvmem[i]);
2977
2978         return err;
2979 }
2980
2981 /*
2982  * If an init function is provided, an exit function must also be provided
2983  * to allow module unload.
2984  */
2985 static void __exit tcrypt_mod_fini(void) { }
2986
2987 late_initcall(tcrypt_mod_init);
2988 module_exit(tcrypt_mod_fini);
2989
2990 module_param(alg, charp, 0);
2991 module_param(type, uint, 0);
2992 module_param(mask, uint, 0);
2993 module_param(mode, int, 0);
2994 module_param(sec, uint, 0);
2995 MODULE_PARM_DESC(sec, "Length in seconds of speed tests "
2996                       "(defaults to zero which uses CPU cycles instead)");
2997 module_param(num_mb, uint, 0000);
2998 MODULE_PARM_DESC(num_mb, "Number of concurrent requests to be used in mb speed tests (defaults to 8)");
2999 module_param(klen, uint, 0);
3000 MODULE_PARM_DESC(klen, "Key length (defaults to 0)");
3001
3002 MODULE_LICENSE("GPL");
3003 MODULE_DESCRIPTION("Quick & dirty crypto testing module");
3004 MODULE_AUTHOR("James Morris <jmorris@intercode.com.au>");