mirror of
https://github.com/torvalds/linux.git
synced 2025-12-07 20:06:24 +00:00
04cadb4fe0
Add FIPS cryptographic algorithm self-tests for all SHA-1 and SHA-2 algorithms. Following the "Implementation Guidance for FIPS 140-3" document, to achieve this it's sufficient to just test a single test vector for each of HMAC-SHA1, HMAC-SHA256, and HMAC-SHA512. Just run these tests in the initcalls, following the example of e.g. crypto/kdf_sp800108.c. Note that this should meet the FIPS self-test requirement even in the built-in case, given that the initcalls run before userspace, storage, network, etc. are accessible. This does not fix a regression, seeing as lib/ has had SHA-1 support since 2005 and SHA-256 support since 2018. Neither ever had FIPS self-tests. Moreover, fips=1 support has always been an unfinished feature upstream. However, with lib/ now being used more widely, it's now seeing more scrutiny and people seem to want these now [1][2]. [1] https://lore.kernel.org/r/3226361.1758126043@warthog.procyon.org.uk/ [2] https://lore.kernel.org/r/f31dbb22-0add-481c-aee0-e337a7731f8e@oracle.com/ Reviewed-by: Ard Biesheuvel <ardb@kernel.org> Link: https://lore.kernel.org/r/20251011001047.51886-1-ebiggers@kernel.org Signed-off-by: Eric Biggers <ebiggers@kernel.org>
39 lines
1.4 KiB
C
39 lines
1.4 KiB
C
/* SPDX-License-Identifier: GPL-2.0-or-later */
|
|
/* This file was generated by: gen-fips-testvecs.py */
|
|
|
|
#include <linux/fips.h>
|
|
|
|
static const u8 fips_test_data[] __initconst __maybe_unused = {
|
|
0x66, 0x69, 0x70, 0x73, 0x20, 0x74, 0x65, 0x73,
|
|
0x74, 0x20, 0x64, 0x61, 0x74, 0x61, 0x00, 0x00,
|
|
};
|
|
|
|
static const u8 fips_test_key[] __initconst __maybe_unused = {
|
|
0x66, 0x69, 0x70, 0x73, 0x20, 0x74, 0x65, 0x73,
|
|
0x74, 0x20, 0x6b, 0x65, 0x79, 0x00, 0x00, 0x00,
|
|
};
|
|
|
|
static const u8 fips_test_hmac_sha1_value[] __initconst __maybe_unused = {
|
|
0x29, 0xa9, 0x88, 0xb8, 0x5c, 0xb4, 0xaf, 0x4b,
|
|
0x97, 0x2a, 0xee, 0x87, 0x5b, 0x0a, 0x02, 0x55,
|
|
0x99, 0xbf, 0x86, 0x78,
|
|
};
|
|
|
|
static const u8 fips_test_hmac_sha256_value[] __initconst __maybe_unused = {
|
|
0x59, 0x25, 0x85, 0xcc, 0x40, 0xe9, 0x64, 0x2f,
|
|
0xe9, 0xbf, 0x82, 0xb7, 0xd3, 0x15, 0x3d, 0x43,
|
|
0x22, 0x0b, 0x4c, 0x00, 0x90, 0x14, 0x25, 0xcf,
|
|
0x9e, 0x13, 0x2b, 0xc2, 0x30, 0xe6, 0xe8, 0x93,
|
|
};
|
|
|
|
static const u8 fips_test_hmac_sha512_value[] __initconst __maybe_unused = {
|
|
0x6b, 0xea, 0x5d, 0x27, 0x49, 0x5b, 0x3f, 0xea,
|
|
0xde, 0x2d, 0xfa, 0x32, 0x75, 0xdb, 0x77, 0xc8,
|
|
0x26, 0xe9, 0x4e, 0x95, 0x4d, 0xad, 0x88, 0x02,
|
|
0x87, 0xf9, 0x52, 0x0a, 0xd1, 0x92, 0x80, 0x1d,
|
|
0x92, 0x7e, 0x3c, 0xbd, 0xb1, 0x3c, 0x49, 0x98,
|
|
0x44, 0x9c, 0x8f, 0xee, 0x3f, 0x02, 0x71, 0x51,
|
|
0x57, 0x0b, 0x15, 0x38, 0x95, 0xd8, 0xa3, 0x81,
|
|
0xba, 0xb3, 0x15, 0x37, 0x5c, 0x6d, 0x57, 0x2b,
|
|
};
|