GNU Linux-libre 5.14.14-gnu
[releases.git] / crypto / tcrypt.c
1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3  * Quick & dirty crypto testing module.
4  *
5  * This will only exist until we have a better testing mechanism
6  * (e.g. a char device).
7  *
8  * Copyright (c) 2002 James Morris <jmorris@intercode.com.au>
9  * Copyright (c) 2002 Jean-Francois Dive <jef@linuxbe.org>
10  * Copyright (c) 2007 Nokia Siemens Networks
11  *
12  * Updated RFC4106 AES-GCM testing.
13  *    Authors: Aidan O'Mahony (aidan.o.mahony@intel.com)
14  *             Adrian Hoban <adrian.hoban@intel.com>
15  *             Gabriele Paoloni <gabriele.paoloni@intel.com>
16  *             Tadeusz Struk (tadeusz.struk@intel.com)
17  *             Copyright (c) 2010, Intel Corporation.
18  */
19
20 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
21
22 #include <crypto/aead.h>
23 #include <crypto/hash.h>
24 #include <crypto/skcipher.h>
25 #include <linux/err.h>
26 #include <linux/fips.h>
27 #include <linux/init.h>
28 #include <linux/gfp.h>
29 #include <linux/module.h>
30 #include <linux/scatterlist.h>
31 #include <linux/string.h>
32 #include <linux/moduleparam.h>
33 #include <linux/jiffies.h>
34 #include <linux/timex.h>
35 #include <linux/interrupt.h>
36 #include "tcrypt.h"
37
38 /*
39  * Need slab memory for testing (size in number of pages).
40  */
41 #define TVMEMSIZE       4
42
43 /*
44 * Used by test_cipher_speed()
45 */
46 #define ENCRYPT 1
47 #define DECRYPT 0
48
49 #define MAX_DIGEST_SIZE         64
50
51 /*
52  * return a string with the driver name
53  */
54 #define get_driver_name(tfm_type, tfm) crypto_tfm_alg_driver_name(tfm_type ## _tfm(tfm))
55
56 /*
57  * Used by test_cipher_speed()
58  */
59 static unsigned int sec;
60
61 static char *alg = NULL;
62 static u32 type;
63 static u32 mask;
64 static int mode;
65 static u32 num_mb = 8;
66 static unsigned int klen;
67 static char *tvmem[TVMEMSIZE];
68
69 static const char *check[] = {
70         "des", "md5", "des3_ede", "rot13", "sha1", "sha224", "sha256", "sm3",
71         "blowfish", "twofish", "serpent", "sha384", "sha512", "md4", "aes",
72         "cast6", "arc4", "michael_mic", "deflate", "crc32c", "tea", "xtea",
73         "khazad", "wp512", "wp384", "wp256", "xeta",  "fcrypt",
74         "camellia", "seed", "rmd160",
75         "lzo", "lzo-rle", "cts", "sha3-224", "sha3-256", "sha3-384",
76         "sha3-512", "streebog256", "streebog512",
77         NULL
78 };
79
80 static const int block_sizes[] = { 16, 64, 256, 1024, 1420, 4096, 0 };
81 static const int aead_sizes[] = { 16, 64, 256, 512, 1024, 1420, 4096, 8192, 0 };
82
83 #define XBUFSIZE 8
84 #define MAX_IVLEN 32
85
86 static int testmgr_alloc_buf(char *buf[XBUFSIZE])
87 {
88         int i;
89
90         for (i = 0; i < XBUFSIZE; i++) {
91                 buf[i] = (void *)__get_free_page(GFP_KERNEL);
92                 if (!buf[i])
93                         goto err_free_buf;
94         }
95
96         return 0;
97
98 err_free_buf:
99         while (i-- > 0)
100                 free_page((unsigned long)buf[i]);
101
102         return -ENOMEM;
103 }
104
105 static void testmgr_free_buf(char *buf[XBUFSIZE])
106 {
107         int i;
108
109         for (i = 0; i < XBUFSIZE; i++)
110                 free_page((unsigned long)buf[i]);
111 }
112
113 static void sg_init_aead(struct scatterlist *sg, char *xbuf[XBUFSIZE],
114                          unsigned int buflen, const void *assoc,
115                          unsigned int aad_size)
116 {
117         int np = (buflen + PAGE_SIZE - 1)/PAGE_SIZE;
118         int k, rem;
119
120         if (np > XBUFSIZE) {
121                 rem = PAGE_SIZE;
122                 np = XBUFSIZE;
123         } else {
124                 rem = buflen % PAGE_SIZE;
125         }
126
127         sg_init_table(sg, np + 1);
128
129         sg_set_buf(&sg[0], assoc, aad_size);
130
131         if (rem)
132                 np--;
133         for (k = 0; k < np; k++)
134                 sg_set_buf(&sg[k + 1], xbuf[k], PAGE_SIZE);
135
136         if (rem)
137                 sg_set_buf(&sg[k + 1], xbuf[k], rem);
138 }
139
140 static inline int do_one_aead_op(struct aead_request *req, int ret)
141 {
142         struct crypto_wait *wait = req->base.data;
143
144         return crypto_wait_req(ret, wait);
145 }
146
147 struct test_mb_aead_data {
148         struct scatterlist sg[XBUFSIZE];
149         struct scatterlist sgout[XBUFSIZE];
150         struct aead_request *req;
151         struct crypto_wait wait;
152         char *xbuf[XBUFSIZE];
153         char *xoutbuf[XBUFSIZE];
154         char *axbuf[XBUFSIZE];
155 };
156
157 static int do_mult_aead_op(struct test_mb_aead_data *data, int enc,
158                                 u32 num_mb, int *rc)
159 {
160         int i, err = 0;
161
162         /* Fire up a bunch of concurrent requests */
163         for (i = 0; i < num_mb; i++) {
164                 if (enc == ENCRYPT)
165                         rc[i] = crypto_aead_encrypt(data[i].req);
166                 else
167                         rc[i] = crypto_aead_decrypt(data[i].req);
168         }
169
170         /* Wait for all requests to finish */
171         for (i = 0; i < num_mb; i++) {
172                 rc[i] = crypto_wait_req(rc[i], &data[i].wait);
173
174                 if (rc[i]) {
175                         pr_info("concurrent request %d error %d\n", i, rc[i]);
176                         err = rc[i];
177                 }
178         }
179
180         return err;
181 }
182
183 static int test_mb_aead_jiffies(struct test_mb_aead_data *data, int enc,
184                                 int blen, int secs, u32 num_mb)
185 {
186         unsigned long start, end;
187         int bcount;
188         int ret = 0;
189         int *rc;
190
191         rc = kcalloc(num_mb, sizeof(*rc), GFP_KERNEL);
192         if (!rc)
193                 return -ENOMEM;
194
195         for (start = jiffies, end = start + secs * HZ, bcount = 0;
196              time_before(jiffies, end); bcount++) {
197                 ret = do_mult_aead_op(data, enc, num_mb, rc);
198                 if (ret)
199                         goto out;
200         }
201
202         pr_cont("%d operations in %d seconds (%llu bytes)\n",
203                 bcount * num_mb, secs, (u64)bcount * blen * num_mb);
204
205 out:
206         kfree(rc);
207         return ret;
208 }
209
210 static int test_mb_aead_cycles(struct test_mb_aead_data *data, int enc,
211                                int blen, u32 num_mb)
212 {
213         unsigned long cycles = 0;
214         int ret = 0;
215         int i;
216         int *rc;
217
218         rc = kcalloc(num_mb, sizeof(*rc), GFP_KERNEL);
219         if (!rc)
220                 return -ENOMEM;
221
222         /* Warm-up run. */
223         for (i = 0; i < 4; i++) {
224                 ret = do_mult_aead_op(data, enc, num_mb, rc);
225                 if (ret)
226                         goto out;
227         }
228
229         /* The real thing. */
230         for (i = 0; i < 8; i++) {
231                 cycles_t start, end;
232
233                 start = get_cycles();
234                 ret = do_mult_aead_op(data, enc, num_mb, rc);
235                 end = get_cycles();
236
237                 if (ret)
238                         goto out;
239
240                 cycles += end - start;
241         }
242
243         pr_cont("1 operation in %lu cycles (%d bytes)\n",
244                 (cycles + 4) / (8 * num_mb), blen);
245
246 out:
247         kfree(rc);
248         return ret;
249 }
250
251 static void test_mb_aead_speed(const char *algo, int enc, int secs,
252                                struct aead_speed_template *template,
253                                unsigned int tcount, u8 authsize,
254                                unsigned int aad_size, u8 *keysize, u32 num_mb)
255 {
256         struct test_mb_aead_data *data;
257         struct crypto_aead *tfm;
258         unsigned int i, j, iv_len;
259         const int *b_size;
260         const char *key;
261         const char *e;
262         void *assoc;
263         char *iv;
264         int ret;
265
266
267         if (aad_size >= PAGE_SIZE) {
268                 pr_err("associate data length (%u) too big\n", aad_size);
269                 return;
270         }
271
272         iv = kzalloc(MAX_IVLEN, GFP_KERNEL);
273         if (!iv)
274                 return;
275
276         if (enc == ENCRYPT)
277                 e = "encryption";
278         else
279                 e = "decryption";
280
281         data = kcalloc(num_mb, sizeof(*data), GFP_KERNEL);
282         if (!data)
283                 goto out_free_iv;
284
285         tfm = crypto_alloc_aead(algo, 0, 0);
286         if (IS_ERR(tfm)) {
287                 pr_err("failed to load transform for %s: %ld\n",
288                         algo, PTR_ERR(tfm));
289                 goto out_free_data;
290         }
291
292         ret = crypto_aead_setauthsize(tfm, authsize);
293         if (ret) {
294                 pr_err("alg: aead: Failed to setauthsize for %s: %d\n", algo,
295                        ret);
296                 goto out_free_tfm;
297         }
298
299         for (i = 0; i < num_mb; ++i)
300                 if (testmgr_alloc_buf(data[i].xbuf)) {
301                         while (i--)
302                                 testmgr_free_buf(data[i].xbuf);
303                         goto out_free_tfm;
304                 }
305
306         for (i = 0; i < num_mb; ++i)
307                 if (testmgr_alloc_buf(data[i].axbuf)) {
308                         while (i--)
309                                 testmgr_free_buf(data[i].axbuf);
310                         goto out_free_xbuf;
311                 }
312
313         for (i = 0; i < num_mb; ++i)
314                 if (testmgr_alloc_buf(data[i].xoutbuf)) {
315                         while (i--)
316                                 testmgr_free_buf(data[i].xoutbuf);
317                         goto out_free_axbuf;
318                 }
319
320         for (i = 0; i < num_mb; ++i) {
321                 data[i].req = aead_request_alloc(tfm, GFP_KERNEL);
322                 if (!data[i].req) {
323                         pr_err("alg: aead: Failed to allocate request for %s\n",
324                                algo);
325                         while (i--)
326                                 aead_request_free(data[i].req);
327                         goto out_free_xoutbuf;
328                 }
329         }
330
331         for (i = 0; i < num_mb; ++i) {
332                 crypto_init_wait(&data[i].wait);
333                 aead_request_set_callback(data[i].req,
334                                           CRYPTO_TFM_REQ_MAY_BACKLOG,
335                                           crypto_req_done, &data[i].wait);
336         }
337
338         pr_info("\ntesting speed of multibuffer %s (%s) %s\n", algo,
339                 get_driver_name(crypto_aead, tfm), e);
340
341         i = 0;
342         do {
343                 b_size = aead_sizes;
344                 do {
345                         int bs = round_up(*b_size, crypto_aead_blocksize(tfm));
346
347                         if (bs + authsize > XBUFSIZE * PAGE_SIZE) {
348                                 pr_err("template (%u) too big for buffer (%lu)\n",
349                                        authsize + bs,
350                                        XBUFSIZE * PAGE_SIZE);
351                                 goto out;
352                         }
353
354                         pr_info("test %u (%d bit key, %d byte blocks): ", i,
355                                 *keysize * 8, bs);
356
357                         /* Set up tfm global state, i.e. the key */
358
359                         memset(tvmem[0], 0xff, PAGE_SIZE);
360                         key = tvmem[0];
361                         for (j = 0; j < tcount; j++) {
362                                 if (template[j].klen == *keysize) {
363                                         key = template[j].key;
364                                         break;
365                                 }
366                         }
367
368                         crypto_aead_clear_flags(tfm, ~0);
369
370                         ret = crypto_aead_setkey(tfm, key, *keysize);
371                         if (ret) {
372                                 pr_err("setkey() failed flags=%x\n",
373                                        crypto_aead_get_flags(tfm));
374                                 goto out;
375                         }
376
377                         iv_len = crypto_aead_ivsize(tfm);
378                         if (iv_len)
379                                 memset(iv, 0xff, iv_len);
380
381                         /* Now setup per request stuff, i.e. buffers */
382
383                         for (j = 0; j < num_mb; ++j) {
384                                 struct test_mb_aead_data *cur = &data[j];
385
386                                 assoc = cur->axbuf[0];
387                                 memset(assoc, 0xff, aad_size);
388
389                                 sg_init_aead(cur->sg, cur->xbuf,
390                                              bs + (enc ? 0 : authsize),
391                                              assoc, aad_size);
392
393                                 sg_init_aead(cur->sgout, cur->xoutbuf,
394                                              bs + (enc ? authsize : 0),
395                                              assoc, aad_size);
396
397                                 aead_request_set_ad(cur->req, aad_size);
398
399                                 if (!enc) {
400
401                                         aead_request_set_crypt(cur->req,
402                                                                cur->sgout,
403                                                                cur->sg,
404                                                                bs, iv);
405                                         ret = crypto_aead_encrypt(cur->req);
406                                         ret = do_one_aead_op(cur->req, ret);
407
408                                         if (ret) {
409                                                 pr_err("calculating auth failed (%d)\n",
410                                                        ret);
411                                                 break;
412                                         }
413                                 }
414
415                                 aead_request_set_crypt(cur->req, cur->sg,
416                                                        cur->sgout, bs +
417                                                        (enc ? 0 : authsize),
418                                                        iv);
419
420                         }
421
422                         if (secs) {
423                                 ret = test_mb_aead_jiffies(data, enc, bs,
424                                                            secs, num_mb);
425                                 cond_resched();
426                         } else {
427                                 ret = test_mb_aead_cycles(data, enc, bs,
428                                                           num_mb);
429                         }
430
431                         if (ret) {
432                                 pr_err("%s() failed return code=%d\n", e, ret);
433                                 break;
434                         }
435                         b_size++;
436                         i++;
437                 } while (*b_size);
438                 keysize++;
439         } while (*keysize);
440
441 out:
442         for (i = 0; i < num_mb; ++i)
443                 aead_request_free(data[i].req);
444 out_free_xoutbuf:
445         for (i = 0; i < num_mb; ++i)
446                 testmgr_free_buf(data[i].xoutbuf);
447 out_free_axbuf:
448         for (i = 0; i < num_mb; ++i)
449                 testmgr_free_buf(data[i].axbuf);
450 out_free_xbuf:
451         for (i = 0; i < num_mb; ++i)
452                 testmgr_free_buf(data[i].xbuf);
453 out_free_tfm:
454         crypto_free_aead(tfm);
455 out_free_data:
456         kfree(data);
457 out_free_iv:
458         kfree(iv);
459 }
460
461 static int test_aead_jiffies(struct aead_request *req, int enc,
462                                 int blen, int secs)
463 {
464         unsigned long start, end;
465         int bcount;
466         int ret;
467
468         for (start = jiffies, end = start + secs * HZ, bcount = 0;
469              time_before(jiffies, end); bcount++) {
470                 if (enc)
471                         ret = do_one_aead_op(req, crypto_aead_encrypt(req));
472                 else
473                         ret = do_one_aead_op(req, crypto_aead_decrypt(req));
474
475                 if (ret)
476                         return ret;
477         }
478
479         pr_cont("%d operations in %d seconds (%llu bytes)\n",
480                 bcount, secs, (u64)bcount * blen);
481         return 0;
482 }
483
484 static int test_aead_cycles(struct aead_request *req, int enc, int blen)
485 {
486         unsigned long cycles = 0;
487         int ret = 0;
488         int i;
489
490         /* Warm-up run. */
491         for (i = 0; i < 4; i++) {
492                 if (enc)
493                         ret = do_one_aead_op(req, crypto_aead_encrypt(req));
494                 else
495                         ret = do_one_aead_op(req, crypto_aead_decrypt(req));
496
497                 if (ret)
498                         goto out;
499         }
500
501         /* The real thing. */
502         for (i = 0; i < 8; i++) {
503                 cycles_t start, end;
504
505                 start = get_cycles();
506                 if (enc)
507                         ret = do_one_aead_op(req, crypto_aead_encrypt(req));
508                 else
509                         ret = do_one_aead_op(req, crypto_aead_decrypt(req));
510                 end = get_cycles();
511
512                 if (ret)
513                         goto out;
514
515                 cycles += end - start;
516         }
517
518 out:
519         if (ret == 0)
520                 printk("1 operation in %lu cycles (%d bytes)\n",
521                        (cycles + 4) / 8, blen);
522
523         return ret;
524 }
525
526 static void test_aead_speed(const char *algo, int enc, unsigned int secs,
527                             struct aead_speed_template *template,
528                             unsigned int tcount, u8 authsize,
529                             unsigned int aad_size, u8 *keysize)
530 {
531         unsigned int i, j;
532         struct crypto_aead *tfm;
533         int ret = -ENOMEM;
534         const char *key;
535         struct aead_request *req;
536         struct scatterlist *sg;
537         struct scatterlist *sgout;
538         const char *e;
539         void *assoc;
540         char *iv;
541         char *xbuf[XBUFSIZE];
542         char *xoutbuf[XBUFSIZE];
543         char *axbuf[XBUFSIZE];
544         const int *b_size;
545         unsigned int iv_len;
546         struct crypto_wait wait;
547
548         iv = kzalloc(MAX_IVLEN, GFP_KERNEL);
549         if (!iv)
550                 return;
551
552         if (aad_size >= PAGE_SIZE) {
553                 pr_err("associate data length (%u) too big\n", aad_size);
554                 goto out_noxbuf;
555         }
556
557         if (enc == ENCRYPT)
558                 e = "encryption";
559         else
560                 e = "decryption";
561
562         if (testmgr_alloc_buf(xbuf))
563                 goto out_noxbuf;
564         if (testmgr_alloc_buf(axbuf))
565                 goto out_noaxbuf;
566         if (testmgr_alloc_buf(xoutbuf))
567                 goto out_nooutbuf;
568
569         sg = kmalloc(sizeof(*sg) * 9 * 2, GFP_KERNEL);
570         if (!sg)
571                 goto out_nosg;
572         sgout = &sg[9];
573
574         tfm = crypto_alloc_aead(algo, 0, 0);
575         if (IS_ERR(tfm)) {
576                 pr_err("alg: aead: Failed to load transform for %s: %ld\n", algo,
577                        PTR_ERR(tfm));
578                 goto out_notfm;
579         }
580
581         ret = crypto_aead_setauthsize(tfm, authsize);
582         if (ret) {
583                 pr_err("alg: aead: Failed to setauthsize for %s: %d\n", algo,
584                        ret);
585                 goto out_noreq;
586         }
587
588         crypto_init_wait(&wait);
589         printk(KERN_INFO "\ntesting speed of %s (%s) %s\n", algo,
590                         get_driver_name(crypto_aead, tfm), e);
591
592         req = aead_request_alloc(tfm, GFP_KERNEL);
593         if (!req) {
594                 pr_err("alg: aead: Failed to allocate request for %s\n",
595                        algo);
596                 goto out_noreq;
597         }
598
599         aead_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
600                                   crypto_req_done, &wait);
601
602         i = 0;
603         do {
604                 b_size = aead_sizes;
605                 do {
606                         u32 bs = round_up(*b_size, crypto_aead_blocksize(tfm));
607
608                         assoc = axbuf[0];
609                         memset(assoc, 0xff, aad_size);
610
611                         if ((*keysize + bs) > TVMEMSIZE * PAGE_SIZE) {
612                                 pr_err("template (%u) too big for tvmem (%lu)\n",
613                                        *keysize + bs,
614                                         TVMEMSIZE * PAGE_SIZE);
615                                 goto out;
616                         }
617
618                         key = tvmem[0];
619                         for (j = 0; j < tcount; j++) {
620                                 if (template[j].klen == *keysize) {
621                                         key = template[j].key;
622                                         break;
623                                 }
624                         }
625
626                         ret = crypto_aead_setkey(tfm, key, *keysize);
627                         if (ret) {
628                                 pr_err("setkey() failed flags=%x: %d\n",
629                                         crypto_aead_get_flags(tfm), ret);
630                                 goto out;
631                         }
632
633                         iv_len = crypto_aead_ivsize(tfm);
634                         if (iv_len)
635                                 memset(iv, 0xff, iv_len);
636
637                         crypto_aead_clear_flags(tfm, ~0);
638                         printk(KERN_INFO "test %u (%d bit key, %d byte blocks): ",
639                                         i, *keysize * 8, bs);
640
641                         memset(tvmem[0], 0xff, PAGE_SIZE);
642
643                         sg_init_aead(sg, xbuf, bs + (enc ? 0 : authsize),
644                                      assoc, aad_size);
645
646                         sg_init_aead(sgout, xoutbuf,
647                                      bs + (enc ? authsize : 0), assoc,
648                                      aad_size);
649
650                         aead_request_set_ad(req, aad_size);
651
652                         if (!enc) {
653
654                                 /*
655                                  * For decryption we need a proper auth so
656                                  * we do the encryption path once with buffers
657                                  * reversed (input <-> output) to calculate it
658                                  */
659                                 aead_request_set_crypt(req, sgout, sg,
660                                                        bs, iv);
661                                 ret = do_one_aead_op(req,
662                                                      crypto_aead_encrypt(req));
663
664                                 if (ret) {
665                                         pr_err("calculating auth failed (%d)\n",
666                                                ret);
667                                         break;
668                                 }
669                         }
670
671                         aead_request_set_crypt(req, sg, sgout,
672                                                bs + (enc ? 0 : authsize),
673                                                iv);
674
675                         if (secs) {
676                                 ret = test_aead_jiffies(req, enc, bs,
677                                                         secs);
678                                 cond_resched();
679                         } else {
680                                 ret = test_aead_cycles(req, enc, bs);
681                         }
682
683                         if (ret) {
684                                 pr_err("%s() failed return code=%d\n", e, ret);
685                                 break;
686                         }
687                         b_size++;
688                         i++;
689                 } while (*b_size);
690                 keysize++;
691         } while (*keysize);
692
693 out:
694         aead_request_free(req);
695 out_noreq:
696         crypto_free_aead(tfm);
697 out_notfm:
698         kfree(sg);
699 out_nosg:
700         testmgr_free_buf(xoutbuf);
701 out_nooutbuf:
702         testmgr_free_buf(axbuf);
703 out_noaxbuf:
704         testmgr_free_buf(xbuf);
705 out_noxbuf:
706         kfree(iv);
707 }
708
709 static void test_hash_sg_init(struct scatterlist *sg)
710 {
711         int i;
712
713         sg_init_table(sg, TVMEMSIZE);
714         for (i = 0; i < TVMEMSIZE; i++) {
715                 sg_set_buf(sg + i, tvmem[i], PAGE_SIZE);
716                 memset(tvmem[i], 0xff, PAGE_SIZE);
717         }
718 }
719
720 static inline int do_one_ahash_op(struct ahash_request *req, int ret)
721 {
722         struct crypto_wait *wait = req->base.data;
723
724         return crypto_wait_req(ret, wait);
725 }
726
727 struct test_mb_ahash_data {
728         struct scatterlist sg[XBUFSIZE];
729         char result[64];
730         struct ahash_request *req;
731         struct crypto_wait wait;
732         char *xbuf[XBUFSIZE];
733 };
734
735 static inline int do_mult_ahash_op(struct test_mb_ahash_data *data, u32 num_mb,
736                                    int *rc)
737 {
738         int i, err = 0;
739
740         /* Fire up a bunch of concurrent requests */
741         for (i = 0; i < num_mb; i++)
742                 rc[i] = crypto_ahash_digest(data[i].req);
743
744         /* Wait for all requests to finish */
745         for (i = 0; i < num_mb; i++) {
746                 rc[i] = crypto_wait_req(rc[i], &data[i].wait);
747
748                 if (rc[i]) {
749                         pr_info("concurrent request %d error %d\n", i, rc[i]);
750                         err = rc[i];
751                 }
752         }
753
754         return err;
755 }
756
757 static int test_mb_ahash_jiffies(struct test_mb_ahash_data *data, int blen,
758                                  int secs, u32 num_mb)
759 {
760         unsigned long start, end;
761         int bcount;
762         int ret = 0;
763         int *rc;
764
765         rc = kcalloc(num_mb, sizeof(*rc), GFP_KERNEL);
766         if (!rc)
767                 return -ENOMEM;
768
769         for (start = jiffies, end = start + secs * HZ, bcount = 0;
770              time_before(jiffies, end); bcount++) {
771                 ret = do_mult_ahash_op(data, num_mb, rc);
772                 if (ret)
773                         goto out;
774         }
775
776         pr_cont("%d operations in %d seconds (%llu bytes)\n",
777                 bcount * num_mb, secs, (u64)bcount * blen * num_mb);
778
779 out:
780         kfree(rc);
781         return ret;
782 }
783
784 static int test_mb_ahash_cycles(struct test_mb_ahash_data *data, int blen,
785                                 u32 num_mb)
786 {
787         unsigned long cycles = 0;
788         int ret = 0;
789         int i;
790         int *rc;
791
792         rc = kcalloc(num_mb, sizeof(*rc), GFP_KERNEL);
793         if (!rc)
794                 return -ENOMEM;
795
796         /* Warm-up run. */
797         for (i = 0; i < 4; i++) {
798                 ret = do_mult_ahash_op(data, num_mb, rc);
799                 if (ret)
800                         goto out;
801         }
802
803         /* The real thing. */
804         for (i = 0; i < 8; i++) {
805                 cycles_t start, end;
806
807                 start = get_cycles();
808                 ret = do_mult_ahash_op(data, num_mb, rc);
809                 end = get_cycles();
810
811                 if (ret)
812                         goto out;
813
814                 cycles += end - start;
815         }
816
817         pr_cont("1 operation in %lu cycles (%d bytes)\n",
818                 (cycles + 4) / (8 * num_mb), blen);
819
820 out:
821         kfree(rc);
822         return ret;
823 }
824
825 static void test_mb_ahash_speed(const char *algo, unsigned int secs,
826                                 struct hash_speed *speed, u32 num_mb)
827 {
828         struct test_mb_ahash_data *data;
829         struct crypto_ahash *tfm;
830         unsigned int i, j, k;
831         int ret;
832
833         data = kcalloc(num_mb, sizeof(*data), GFP_KERNEL);
834         if (!data)
835                 return;
836
837         tfm = crypto_alloc_ahash(algo, 0, 0);
838         if (IS_ERR(tfm)) {
839                 pr_err("failed to load transform for %s: %ld\n",
840                         algo, PTR_ERR(tfm));
841                 goto free_data;
842         }
843
844         for (i = 0; i < num_mb; ++i) {
845                 if (testmgr_alloc_buf(data[i].xbuf))
846                         goto out;
847
848                 crypto_init_wait(&data[i].wait);
849
850                 data[i].req = ahash_request_alloc(tfm, GFP_KERNEL);
851                 if (!data[i].req) {
852                         pr_err("alg: hash: Failed to allocate request for %s\n",
853                                algo);
854                         goto out;
855                 }
856
857                 ahash_request_set_callback(data[i].req, 0, crypto_req_done,
858                                            &data[i].wait);
859
860                 sg_init_table(data[i].sg, XBUFSIZE);
861                 for (j = 0; j < XBUFSIZE; j++) {
862                         sg_set_buf(data[i].sg + j, data[i].xbuf[j], PAGE_SIZE);
863                         memset(data[i].xbuf[j], 0xff, PAGE_SIZE);
864                 }
865         }
866
867         pr_info("\ntesting speed of multibuffer %s (%s)\n", algo,
868                 get_driver_name(crypto_ahash, tfm));
869
870         for (i = 0; speed[i].blen != 0; i++) {
871                 /* For some reason this only tests digests. */
872                 if (speed[i].blen != speed[i].plen)
873                         continue;
874
875                 if (speed[i].blen > XBUFSIZE * PAGE_SIZE) {
876                         pr_err("template (%u) too big for tvmem (%lu)\n",
877                                speed[i].blen, XBUFSIZE * PAGE_SIZE);
878                         goto out;
879                 }
880
881                 if (klen)
882                         crypto_ahash_setkey(tfm, tvmem[0], klen);
883
884                 for (k = 0; k < num_mb; k++)
885                         ahash_request_set_crypt(data[k].req, data[k].sg,
886                                                 data[k].result, speed[i].blen);
887
888                 pr_info("test%3u "
889                         "(%5u byte blocks,%5u bytes per update,%4u updates): ",
890                         i, speed[i].blen, speed[i].plen,
891                         speed[i].blen / speed[i].plen);
892
893                 if (secs) {
894                         ret = test_mb_ahash_jiffies(data, speed[i].blen, secs,
895                                                     num_mb);
896                         cond_resched();
897                 } else {
898                         ret = test_mb_ahash_cycles(data, speed[i].blen, num_mb);
899                 }
900
901
902                 if (ret) {
903                         pr_err("At least one hashing failed ret=%d\n", ret);
904                         break;
905                 }
906         }
907
908 out:
909         for (k = 0; k < num_mb; ++k)
910                 ahash_request_free(data[k].req);
911
912         for (k = 0; k < num_mb; ++k)
913                 testmgr_free_buf(data[k].xbuf);
914
915         crypto_free_ahash(tfm);
916
917 free_data:
918         kfree(data);
919 }
920
921 static int test_ahash_jiffies_digest(struct ahash_request *req, int blen,
922                                      char *out, int secs)
923 {
924         unsigned long start, end;
925         int bcount;
926         int ret;
927
928         for (start = jiffies, end = start + secs * HZ, bcount = 0;
929              time_before(jiffies, end); bcount++) {
930                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
931                 if (ret)
932                         return ret;
933         }
934
935         printk("%6u opers/sec, %9lu bytes/sec\n",
936                bcount / secs, ((long)bcount * blen) / secs);
937
938         return 0;
939 }
940
941 static int test_ahash_jiffies(struct ahash_request *req, int blen,
942                               int plen, char *out, int secs)
943 {
944         unsigned long start, end;
945         int bcount, pcount;
946         int ret;
947
948         if (plen == blen)
949                 return test_ahash_jiffies_digest(req, blen, out, secs);
950
951         for (start = jiffies, end = start + secs * HZ, bcount = 0;
952              time_before(jiffies, end); bcount++) {
953                 ret = do_one_ahash_op(req, crypto_ahash_init(req));
954                 if (ret)
955                         return ret;
956                 for (pcount = 0; pcount < blen; pcount += plen) {
957                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
958                         if (ret)
959                                 return ret;
960                 }
961                 /* we assume there is enough space in 'out' for the result */
962                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
963                 if (ret)
964                         return ret;
965         }
966
967         pr_cont("%6u opers/sec, %9lu bytes/sec\n",
968                 bcount / secs, ((long)bcount * blen) / secs);
969
970         return 0;
971 }
972
973 static int test_ahash_cycles_digest(struct ahash_request *req, int blen,
974                                     char *out)
975 {
976         unsigned long cycles = 0;
977         int ret, i;
978
979         /* Warm-up run. */
980         for (i = 0; i < 4; i++) {
981                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
982                 if (ret)
983                         goto out;
984         }
985
986         /* The real thing. */
987         for (i = 0; i < 8; i++) {
988                 cycles_t start, end;
989
990                 start = get_cycles();
991
992                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
993                 if (ret)
994                         goto out;
995
996                 end = get_cycles();
997
998                 cycles += end - start;
999         }
1000
1001 out:
1002         if (ret)
1003                 return ret;
1004
1005         pr_cont("%6lu cycles/operation, %4lu cycles/byte\n",
1006                 cycles / 8, cycles / (8 * blen));
1007
1008         return 0;
1009 }
1010
1011 static int test_ahash_cycles(struct ahash_request *req, int blen,
1012                              int plen, char *out)
1013 {
1014         unsigned long cycles = 0;
1015         int i, pcount, ret;
1016
1017         if (plen == blen)
1018                 return test_ahash_cycles_digest(req, blen, out);
1019
1020         /* Warm-up run. */
1021         for (i = 0; i < 4; i++) {
1022                 ret = do_one_ahash_op(req, crypto_ahash_init(req));
1023                 if (ret)
1024                         goto out;
1025                 for (pcount = 0; pcount < blen; pcount += plen) {
1026                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
1027                         if (ret)
1028                                 goto out;
1029                 }
1030                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
1031                 if (ret)
1032                         goto out;
1033         }
1034
1035         /* The real thing. */
1036         for (i = 0; i < 8; i++) {
1037                 cycles_t start, end;
1038
1039                 start = get_cycles();
1040
1041                 ret = do_one_ahash_op(req, crypto_ahash_init(req));
1042                 if (ret)
1043                         goto out;
1044                 for (pcount = 0; pcount < blen; pcount += plen) {
1045                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
1046                         if (ret)
1047                                 goto out;
1048                 }
1049                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
1050                 if (ret)
1051                         goto out;
1052
1053                 end = get_cycles();
1054
1055                 cycles += end - start;
1056         }
1057
1058 out:
1059         if (ret)
1060                 return ret;
1061
1062         pr_cont("%6lu cycles/operation, %4lu cycles/byte\n",
1063                 cycles / 8, cycles / (8 * blen));
1064
1065         return 0;
1066 }
1067
1068 static void test_ahash_speed_common(const char *algo, unsigned int secs,
1069                                     struct hash_speed *speed, unsigned mask)
1070 {
1071         struct scatterlist sg[TVMEMSIZE];
1072         struct crypto_wait wait;
1073         struct ahash_request *req;
1074         struct crypto_ahash *tfm;
1075         char *output;
1076         int i, ret;
1077
1078         tfm = crypto_alloc_ahash(algo, 0, mask);
1079         if (IS_ERR(tfm)) {
1080                 pr_err("failed to load transform for %s: %ld\n",
1081                        algo, PTR_ERR(tfm));
1082                 return;
1083         }
1084
1085         printk(KERN_INFO "\ntesting speed of async %s (%s)\n", algo,
1086                         get_driver_name(crypto_ahash, tfm));
1087
1088         if (crypto_ahash_digestsize(tfm) > MAX_DIGEST_SIZE) {
1089                 pr_err("digestsize(%u) > %d\n", crypto_ahash_digestsize(tfm),
1090                        MAX_DIGEST_SIZE);
1091                 goto out;
1092         }
1093
1094         test_hash_sg_init(sg);
1095         req = ahash_request_alloc(tfm, GFP_KERNEL);
1096         if (!req) {
1097                 pr_err("ahash request allocation failure\n");
1098                 goto out;
1099         }
1100
1101         crypto_init_wait(&wait);
1102         ahash_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
1103                                    crypto_req_done, &wait);
1104
1105         output = kmalloc(MAX_DIGEST_SIZE, GFP_KERNEL);
1106         if (!output)
1107                 goto out_nomem;
1108
1109         for (i = 0; speed[i].blen != 0; i++) {
1110                 if (speed[i].blen > TVMEMSIZE * PAGE_SIZE) {
1111                         pr_err("template (%u) too big for tvmem (%lu)\n",
1112                                speed[i].blen, TVMEMSIZE * PAGE_SIZE);
1113                         break;
1114                 }
1115
1116                 if (klen)
1117                         crypto_ahash_setkey(tfm, tvmem[0], klen);
1118
1119                 pr_info("test%3u "
1120                         "(%5u byte blocks,%5u bytes per update,%4u updates): ",
1121                         i, speed[i].blen, speed[i].plen, speed[i].blen / speed[i].plen);
1122
1123                 ahash_request_set_crypt(req, sg, output, speed[i].plen);
1124
1125                 if (secs) {
1126                         ret = test_ahash_jiffies(req, speed[i].blen,
1127                                                  speed[i].plen, output, secs);
1128                         cond_resched();
1129                 } else {
1130                         ret = test_ahash_cycles(req, speed[i].blen,
1131                                                 speed[i].plen, output);
1132                 }
1133
1134                 if (ret) {
1135                         pr_err("hashing failed ret=%d\n", ret);
1136                         break;
1137                 }
1138         }
1139
1140         kfree(output);
1141
1142 out_nomem:
1143         ahash_request_free(req);
1144
1145 out:
1146         crypto_free_ahash(tfm);
1147 }
1148
1149 static void test_ahash_speed(const char *algo, unsigned int secs,
1150                              struct hash_speed *speed)
1151 {
1152         return test_ahash_speed_common(algo, secs, speed, 0);
1153 }
1154
1155 static void test_hash_speed(const char *algo, unsigned int secs,
1156                             struct hash_speed *speed)
1157 {
1158         return test_ahash_speed_common(algo, secs, speed, CRYPTO_ALG_ASYNC);
1159 }
1160
1161 struct test_mb_skcipher_data {
1162         struct scatterlist sg[XBUFSIZE];
1163         struct skcipher_request *req;
1164         struct crypto_wait wait;
1165         char *xbuf[XBUFSIZE];
1166 };
1167
1168 static int do_mult_acipher_op(struct test_mb_skcipher_data *data, int enc,
1169                                 u32 num_mb, int *rc)
1170 {
1171         int i, err = 0;
1172
1173         /* Fire up a bunch of concurrent requests */
1174         for (i = 0; i < num_mb; i++) {
1175                 if (enc == ENCRYPT)
1176                         rc[i] = crypto_skcipher_encrypt(data[i].req);
1177                 else
1178                         rc[i] = crypto_skcipher_decrypt(data[i].req);
1179         }
1180
1181         /* Wait for all requests to finish */
1182         for (i = 0; i < num_mb; i++) {
1183                 rc[i] = crypto_wait_req(rc[i], &data[i].wait);
1184
1185                 if (rc[i]) {
1186                         pr_info("concurrent request %d error %d\n", i, rc[i]);
1187                         err = rc[i];
1188                 }
1189         }
1190
1191         return err;
1192 }
1193
1194 static int test_mb_acipher_jiffies(struct test_mb_skcipher_data *data, int enc,
1195                                 int blen, int secs, u32 num_mb)
1196 {
1197         unsigned long start, end;
1198         int bcount;
1199         int ret = 0;
1200         int *rc;
1201
1202         rc = kcalloc(num_mb, sizeof(*rc), GFP_KERNEL);
1203         if (!rc)
1204                 return -ENOMEM;
1205
1206         for (start = jiffies, end = start + secs * HZ, bcount = 0;
1207              time_before(jiffies, end); bcount++) {
1208                 ret = do_mult_acipher_op(data, enc, num_mb, rc);
1209                 if (ret)
1210                         goto out;
1211         }
1212
1213         pr_cont("%d operations in %d seconds (%llu bytes)\n",
1214                 bcount * num_mb, secs, (u64)bcount * blen * num_mb);
1215
1216 out:
1217         kfree(rc);
1218         return ret;
1219 }
1220
1221 static int test_mb_acipher_cycles(struct test_mb_skcipher_data *data, int enc,
1222                                int blen, u32 num_mb)
1223 {
1224         unsigned long cycles = 0;
1225         int ret = 0;
1226         int i;
1227         int *rc;
1228
1229         rc = kcalloc(num_mb, sizeof(*rc), GFP_KERNEL);
1230         if (!rc)
1231                 return -ENOMEM;
1232
1233         /* Warm-up run. */
1234         for (i = 0; i < 4; i++) {
1235                 ret = do_mult_acipher_op(data, enc, num_mb, rc);
1236                 if (ret)
1237                         goto out;
1238         }
1239
1240         /* The real thing. */
1241         for (i = 0; i < 8; i++) {
1242                 cycles_t start, end;
1243
1244                 start = get_cycles();
1245                 ret = do_mult_acipher_op(data, enc, num_mb, rc);
1246                 end = get_cycles();
1247
1248                 if (ret)
1249                         goto out;
1250
1251                 cycles += end - start;
1252         }
1253
1254         pr_cont("1 operation in %lu cycles (%d bytes)\n",
1255                 (cycles + 4) / (8 * num_mb), blen);
1256
1257 out:
1258         kfree(rc);
1259         return ret;
1260 }
1261
1262 static void test_mb_skcipher_speed(const char *algo, int enc, int secs,
1263                                    struct cipher_speed_template *template,
1264                                    unsigned int tcount, u8 *keysize, u32 num_mb)
1265 {
1266         struct test_mb_skcipher_data *data;
1267         struct crypto_skcipher *tfm;
1268         unsigned int i, j, iv_len;
1269         const int *b_size;
1270         const char *key;
1271         const char *e;
1272         char iv[128];
1273         int ret;
1274
1275         if (enc == ENCRYPT)
1276                 e = "encryption";
1277         else
1278                 e = "decryption";
1279
1280         data = kcalloc(num_mb, sizeof(*data), GFP_KERNEL);
1281         if (!data)
1282                 return;
1283
1284         tfm = crypto_alloc_skcipher(algo, 0, 0);
1285         if (IS_ERR(tfm)) {
1286                 pr_err("failed to load transform for %s: %ld\n",
1287                         algo, PTR_ERR(tfm));
1288                 goto out_free_data;
1289         }
1290
1291         for (i = 0; i < num_mb; ++i)
1292                 if (testmgr_alloc_buf(data[i].xbuf)) {
1293                         while (i--)
1294                                 testmgr_free_buf(data[i].xbuf);
1295                         goto out_free_tfm;
1296                 }
1297
1298
1299         for (i = 0; i < num_mb; ++i)
1300                 if (testmgr_alloc_buf(data[i].xbuf)) {
1301                         while (i--)
1302                                 testmgr_free_buf(data[i].xbuf);
1303                         goto out_free_tfm;
1304                 }
1305
1306
1307         for (i = 0; i < num_mb; ++i) {
1308                 data[i].req = skcipher_request_alloc(tfm, GFP_KERNEL);
1309                 if (!data[i].req) {
1310                         pr_err("alg: skcipher: Failed to allocate request for %s\n",
1311                                algo);
1312                         while (i--)
1313                                 skcipher_request_free(data[i].req);
1314                         goto out_free_xbuf;
1315                 }
1316         }
1317
1318         for (i = 0; i < num_mb; ++i) {
1319                 skcipher_request_set_callback(data[i].req,
1320                                               CRYPTO_TFM_REQ_MAY_BACKLOG,
1321                                               crypto_req_done, &data[i].wait);
1322                 crypto_init_wait(&data[i].wait);
1323         }
1324
1325         pr_info("\ntesting speed of multibuffer %s (%s) %s\n", algo,
1326                 get_driver_name(crypto_skcipher, tfm), e);
1327
1328         i = 0;
1329         do {
1330                 b_size = block_sizes;
1331                 do {
1332                         u32 bs = round_up(*b_size, crypto_skcipher_blocksize(tfm));
1333
1334                         if (bs > XBUFSIZE * PAGE_SIZE) {
1335                                 pr_err("template (%u) too big for buffer (%lu)\n",
1336                                        *b_size, XBUFSIZE * PAGE_SIZE);
1337                                 goto out;
1338                         }
1339
1340                         pr_info("test %u (%d bit key, %d byte blocks): ", i,
1341                                 *keysize * 8, bs);
1342
1343                         /* Set up tfm global state, i.e. the key */
1344
1345                         memset(tvmem[0], 0xff, PAGE_SIZE);
1346                         key = tvmem[0];
1347                         for (j = 0; j < tcount; j++) {
1348                                 if (template[j].klen == *keysize) {
1349                                         key = template[j].key;
1350                                         break;
1351                                 }
1352                         }
1353
1354                         crypto_skcipher_clear_flags(tfm, ~0);
1355
1356                         ret = crypto_skcipher_setkey(tfm, key, *keysize);
1357                         if (ret) {
1358                                 pr_err("setkey() failed flags=%x\n",
1359                                        crypto_skcipher_get_flags(tfm));
1360                                 goto out;
1361                         }
1362
1363                         iv_len = crypto_skcipher_ivsize(tfm);
1364                         if (iv_len)
1365                                 memset(&iv, 0xff, iv_len);
1366
1367                         /* Now setup per request stuff, i.e. buffers */
1368
1369                         for (j = 0; j < num_mb; ++j) {
1370                                 struct test_mb_skcipher_data *cur = &data[j];
1371                                 unsigned int k = bs;
1372                                 unsigned int pages = DIV_ROUND_UP(k, PAGE_SIZE);
1373                                 unsigned int p = 0;
1374
1375                                 sg_init_table(cur->sg, pages);
1376
1377                                 while (k > PAGE_SIZE) {
1378                                         sg_set_buf(cur->sg + p, cur->xbuf[p],
1379                                                    PAGE_SIZE);
1380                                         memset(cur->xbuf[p], 0xff, PAGE_SIZE);
1381                                         p++;
1382                                         k -= PAGE_SIZE;
1383                                 }
1384
1385                                 sg_set_buf(cur->sg + p, cur->xbuf[p], k);
1386                                 memset(cur->xbuf[p], 0xff, k);
1387
1388                                 skcipher_request_set_crypt(cur->req, cur->sg,
1389                                                            cur->sg, *b_size,
1390                                                            iv);
1391                         }
1392
1393                         if (secs) {
1394                                 ret = test_mb_acipher_jiffies(data, enc,
1395                                                               bs, secs,
1396                                                               num_mb);
1397                                 cond_resched();
1398                         } else {
1399                                 ret = test_mb_acipher_cycles(data, enc,
1400                                                              bs, num_mb);
1401                         }
1402
1403                         if (ret) {
1404                                 pr_err("%s() failed flags=%x\n", e,
1405                                        crypto_skcipher_get_flags(tfm));
1406                                 break;
1407                         }
1408                         b_size++;
1409                         i++;
1410                 } while (*b_size);
1411                 keysize++;
1412         } while (*keysize);
1413
1414 out:
1415         for (i = 0; i < num_mb; ++i)
1416                 skcipher_request_free(data[i].req);
1417 out_free_xbuf:
1418         for (i = 0; i < num_mb; ++i)
1419                 testmgr_free_buf(data[i].xbuf);
1420 out_free_tfm:
1421         crypto_free_skcipher(tfm);
1422 out_free_data:
1423         kfree(data);
1424 }
1425
1426 static inline int do_one_acipher_op(struct skcipher_request *req, int ret)
1427 {
1428         struct crypto_wait *wait = req->base.data;
1429
1430         return crypto_wait_req(ret, wait);
1431 }
1432
1433 static int test_acipher_jiffies(struct skcipher_request *req, int enc,
1434                                 int blen, int secs)
1435 {
1436         unsigned long start, end;
1437         int bcount;
1438         int ret;
1439
1440         for (start = jiffies, end = start + secs * HZ, bcount = 0;
1441              time_before(jiffies, end); bcount++) {
1442                 if (enc)
1443                         ret = do_one_acipher_op(req,
1444                                                 crypto_skcipher_encrypt(req));
1445                 else
1446                         ret = do_one_acipher_op(req,
1447                                                 crypto_skcipher_decrypt(req));
1448
1449                 if (ret)
1450                         return ret;
1451         }
1452
1453         pr_cont("%d operations in %d seconds (%llu bytes)\n",
1454                 bcount, secs, (u64)bcount * blen);
1455         return 0;
1456 }
1457
1458 static int test_acipher_cycles(struct skcipher_request *req, int enc,
1459                                int blen)
1460 {
1461         unsigned long cycles = 0;
1462         int ret = 0;
1463         int i;
1464
1465         /* Warm-up run. */
1466         for (i = 0; i < 4; i++) {
1467                 if (enc)
1468                         ret = do_one_acipher_op(req,
1469                                                 crypto_skcipher_encrypt(req));
1470                 else
1471                         ret = do_one_acipher_op(req,
1472                                                 crypto_skcipher_decrypt(req));
1473
1474                 if (ret)
1475                         goto out;
1476         }
1477
1478         /* The real thing. */
1479         for (i = 0; i < 8; i++) {
1480                 cycles_t start, end;
1481
1482                 start = get_cycles();
1483                 if (enc)
1484                         ret = do_one_acipher_op(req,
1485                                                 crypto_skcipher_encrypt(req));
1486                 else
1487                         ret = do_one_acipher_op(req,
1488                                                 crypto_skcipher_decrypt(req));
1489                 end = get_cycles();
1490
1491                 if (ret)
1492                         goto out;
1493
1494                 cycles += end - start;
1495         }
1496
1497 out:
1498         if (ret == 0)
1499                 pr_cont("1 operation in %lu cycles (%d bytes)\n",
1500                         (cycles + 4) / 8, blen);
1501
1502         return ret;
1503 }
1504
1505 static void test_skcipher_speed(const char *algo, int enc, unsigned int secs,
1506                                 struct cipher_speed_template *template,
1507                                 unsigned int tcount, u8 *keysize, bool async)
1508 {
1509         unsigned int ret, i, j, k, iv_len;
1510         struct crypto_wait wait;
1511         const char *key;
1512         char iv[128];
1513         struct skcipher_request *req;
1514         struct crypto_skcipher *tfm;
1515         const int *b_size;
1516         const char *e;
1517
1518         if (enc == ENCRYPT)
1519                 e = "encryption";
1520         else
1521                 e = "decryption";
1522
1523         crypto_init_wait(&wait);
1524
1525         tfm = crypto_alloc_skcipher(algo, 0, async ? 0 : CRYPTO_ALG_ASYNC);
1526
1527         if (IS_ERR(tfm)) {
1528                 pr_err("failed to load transform for %s: %ld\n", algo,
1529                        PTR_ERR(tfm));
1530                 return;
1531         }
1532
1533         pr_info("\ntesting speed of %s %s (%s) %s\n", async ? "async" : "sync",
1534                 algo, get_driver_name(crypto_skcipher, tfm), e);
1535
1536         req = skcipher_request_alloc(tfm, GFP_KERNEL);
1537         if (!req) {
1538                 pr_err("tcrypt: skcipher: Failed to allocate request for %s\n",
1539                        algo);
1540                 goto out;
1541         }
1542
1543         skcipher_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
1544                                       crypto_req_done, &wait);
1545
1546         i = 0;
1547         do {
1548                 b_size = block_sizes;
1549
1550                 do {
1551                         u32 bs = round_up(*b_size, crypto_skcipher_blocksize(tfm));
1552                         struct scatterlist sg[TVMEMSIZE];
1553
1554                         if ((*keysize + bs) > TVMEMSIZE * PAGE_SIZE) {
1555                                 pr_err("template (%u) too big for "
1556                                        "tvmem (%lu)\n", *keysize + bs,
1557                                        TVMEMSIZE * PAGE_SIZE);
1558                                 goto out_free_req;
1559                         }
1560
1561                         pr_info("test %u (%d bit key, %d byte blocks): ", i,
1562                                 *keysize * 8, bs);
1563
1564                         memset(tvmem[0], 0xff, PAGE_SIZE);
1565
1566                         /* set key, plain text and IV */
1567                         key = tvmem[0];
1568                         for (j = 0; j < tcount; j++) {
1569                                 if (template[j].klen == *keysize) {
1570                                         key = template[j].key;
1571                                         break;
1572                                 }
1573                         }
1574
1575                         crypto_skcipher_clear_flags(tfm, ~0);
1576
1577                         ret = crypto_skcipher_setkey(tfm, key, *keysize);
1578                         if (ret) {
1579                                 pr_err("setkey() failed flags=%x\n",
1580                                         crypto_skcipher_get_flags(tfm));
1581                                 goto out_free_req;
1582                         }
1583
1584                         k = *keysize + bs;
1585                         sg_init_table(sg, DIV_ROUND_UP(k, PAGE_SIZE));
1586
1587                         if (k > PAGE_SIZE) {
1588                                 sg_set_buf(sg, tvmem[0] + *keysize,
1589                                    PAGE_SIZE - *keysize);
1590                                 k -= PAGE_SIZE;
1591                                 j = 1;
1592                                 while (k > PAGE_SIZE) {
1593                                         sg_set_buf(sg + j, tvmem[j], PAGE_SIZE);
1594                                         memset(tvmem[j], 0xff, PAGE_SIZE);
1595                                         j++;
1596                                         k -= PAGE_SIZE;
1597                                 }
1598                                 sg_set_buf(sg + j, tvmem[j], k);
1599                                 memset(tvmem[j], 0xff, k);
1600                         } else {
1601                                 sg_set_buf(sg, tvmem[0] + *keysize, bs);
1602                         }
1603
1604                         iv_len = crypto_skcipher_ivsize(tfm);
1605                         if (iv_len)
1606                                 memset(&iv, 0xff, iv_len);
1607
1608                         skcipher_request_set_crypt(req, sg, sg, bs, iv);
1609
1610                         if (secs) {
1611                                 ret = test_acipher_jiffies(req, enc,
1612                                                            bs, secs);
1613                                 cond_resched();
1614                         } else {
1615                                 ret = test_acipher_cycles(req, enc,
1616                                                           bs);
1617                         }
1618
1619                         if (ret) {
1620                                 pr_err("%s() failed flags=%x\n", e,
1621                                        crypto_skcipher_get_flags(tfm));
1622                                 break;
1623                         }
1624                         b_size++;
1625                         i++;
1626                 } while (*b_size);
1627                 keysize++;
1628         } while (*keysize);
1629
1630 out_free_req:
1631         skcipher_request_free(req);
1632 out:
1633         crypto_free_skcipher(tfm);
1634 }
1635
1636 static void test_acipher_speed(const char *algo, int enc, unsigned int secs,
1637                                struct cipher_speed_template *template,
1638                                unsigned int tcount, u8 *keysize)
1639 {
1640         return test_skcipher_speed(algo, enc, secs, template, tcount, keysize,
1641                                    true);
1642 }
1643
1644 static void test_cipher_speed(const char *algo, int enc, unsigned int secs,
1645                               struct cipher_speed_template *template,
1646                               unsigned int tcount, u8 *keysize)
1647 {
1648         return test_skcipher_speed(algo, enc, secs, template, tcount, keysize,
1649                                    false);
1650 }
1651
1652 static void test_available(void)
1653 {
1654         const char **name = check;
1655
1656         while (*name) {
1657                 printk("alg %s ", *name);
1658                 printk(crypto_has_alg(*name, 0, 0) ?
1659                        "found\n" : "not found\n");
1660                 name++;
1661         }
1662 }
1663
1664 static inline int tcrypt_test(const char *alg)
1665 {
1666         int ret;
1667
1668         pr_debug("testing %s\n", alg);
1669
1670         ret = alg_test(alg, alg, 0, 0);
1671         /* non-fips algs return -EINVAL in fips mode */
1672         if (fips_enabled && ret == -EINVAL)
1673                 ret = 0;
1674         return ret;
1675 }
1676
1677 static int do_test(const char *alg, u32 type, u32 mask, int m, u32 num_mb)
1678 {
1679         int i;
1680         int ret = 0;
1681
1682         switch (m) {
1683         case 0:
1684                 if (alg) {
1685                         if (!crypto_has_alg(alg, type,
1686                                             mask ?: CRYPTO_ALG_TYPE_MASK))
1687                                 ret = -ENOENT;
1688                         break;
1689                 }
1690
1691                 for (i = 1; i < 200; i++)
1692                         ret += do_test(NULL, 0, 0, i, num_mb);
1693                 break;
1694
1695         case 1:
1696                 ret += tcrypt_test("md5");
1697                 break;
1698
1699         case 2:
1700                 ret += tcrypt_test("sha1");
1701                 break;
1702
1703         case 3:
1704                 ret += tcrypt_test("ecb(des)");
1705                 ret += tcrypt_test("cbc(des)");
1706                 ret += tcrypt_test("ctr(des)");
1707                 break;
1708
1709         case 4:
1710                 ret += tcrypt_test("ecb(des3_ede)");
1711                 ret += tcrypt_test("cbc(des3_ede)");
1712                 ret += tcrypt_test("ctr(des3_ede)");
1713                 break;
1714
1715         case 5:
1716                 ret += tcrypt_test("md4");
1717                 break;
1718
1719         case 6:
1720                 ret += tcrypt_test("sha256");
1721                 break;
1722
1723         case 7:
1724                 ret += tcrypt_test("ecb(blowfish)");
1725                 ret += tcrypt_test("cbc(blowfish)");
1726                 ret += tcrypt_test("ctr(blowfish)");
1727                 break;
1728
1729         case 8:
1730                 ret += tcrypt_test("ecb(twofish)");
1731                 ret += tcrypt_test("cbc(twofish)");
1732                 ret += tcrypt_test("ctr(twofish)");
1733                 ret += tcrypt_test("lrw(twofish)");
1734                 ret += tcrypt_test("xts(twofish)");
1735                 break;
1736
1737         case 9:
1738                 ret += tcrypt_test("ecb(serpent)");
1739                 ret += tcrypt_test("cbc(serpent)");
1740                 ret += tcrypt_test("ctr(serpent)");
1741                 ret += tcrypt_test("lrw(serpent)");
1742                 ret += tcrypt_test("xts(serpent)");
1743                 break;
1744
1745         case 10:
1746                 ret += tcrypt_test("ecb(aes)");
1747                 ret += tcrypt_test("cbc(aes)");
1748                 ret += tcrypt_test("lrw(aes)");
1749                 ret += tcrypt_test("xts(aes)");
1750                 ret += tcrypt_test("ctr(aes)");
1751                 ret += tcrypt_test("rfc3686(ctr(aes))");
1752                 ret += tcrypt_test("ofb(aes)");
1753                 ret += tcrypt_test("cfb(aes)");
1754                 break;
1755
1756         case 11:
1757                 ret += tcrypt_test("sha384");
1758                 break;
1759
1760         case 12:
1761                 ret += tcrypt_test("sha512");
1762                 break;
1763
1764         case 13:
1765                 ret += tcrypt_test("deflate");
1766                 break;
1767
1768         case 14:
1769                 ret += tcrypt_test("ecb(cast5)");
1770                 ret += tcrypt_test("cbc(cast5)");
1771                 ret += tcrypt_test("ctr(cast5)");
1772                 break;
1773
1774         case 15:
1775                 ret += tcrypt_test("ecb(cast6)");
1776                 ret += tcrypt_test("cbc(cast6)");
1777                 ret += tcrypt_test("ctr(cast6)");
1778                 ret += tcrypt_test("lrw(cast6)");
1779                 ret += tcrypt_test("xts(cast6)");
1780                 break;
1781
1782         case 16:
1783                 ret += tcrypt_test("ecb(arc4)");
1784                 break;
1785
1786         case 17:
1787                 ret += tcrypt_test("michael_mic");
1788                 break;
1789
1790         case 18:
1791                 ret += tcrypt_test("crc32c");
1792                 break;
1793
1794         case 19:
1795                 ret += tcrypt_test("ecb(tea)");
1796                 break;
1797
1798         case 20:
1799                 ret += tcrypt_test("ecb(xtea)");
1800                 break;
1801
1802         case 21:
1803                 ret += tcrypt_test("ecb(khazad)");
1804                 break;
1805
1806         case 22:
1807                 ret += tcrypt_test("wp512");
1808                 break;
1809
1810         case 23:
1811                 ret += tcrypt_test("wp384");
1812                 break;
1813
1814         case 24:
1815                 ret += tcrypt_test("wp256");
1816                 break;
1817
1818         case 26:
1819                 ret += tcrypt_test("ecb(anubis)");
1820                 ret += tcrypt_test("cbc(anubis)");
1821                 break;
1822
1823         case 30:
1824                 ret += tcrypt_test("ecb(xeta)");
1825                 break;
1826
1827         case 31:
1828                 ret += tcrypt_test("pcbc(fcrypt)");
1829                 break;
1830
1831         case 32:
1832                 ret += tcrypt_test("ecb(camellia)");
1833                 ret += tcrypt_test("cbc(camellia)");
1834                 ret += tcrypt_test("ctr(camellia)");
1835                 ret += tcrypt_test("lrw(camellia)");
1836                 ret += tcrypt_test("xts(camellia)");
1837                 break;
1838
1839         case 33:
1840                 ret += tcrypt_test("sha224");
1841                 break;
1842
1843         case 35:
1844                 ret += tcrypt_test("gcm(aes)");
1845                 break;
1846
1847         case 36:
1848                 ret += tcrypt_test("lzo");
1849                 break;
1850
1851         case 37:
1852                 ret += tcrypt_test("ccm(aes)");
1853                 break;
1854
1855         case 38:
1856                 ret += tcrypt_test("cts(cbc(aes))");
1857                 break;
1858
1859         case 39:
1860                 ret += tcrypt_test("xxhash64");
1861                 break;
1862
1863         case 40:
1864                 ret += tcrypt_test("rmd160");
1865                 break;
1866
1867         case 41:
1868                 ret += tcrypt_test("blake2s-256");
1869                 break;
1870
1871         case 42:
1872                 ret += tcrypt_test("blake2b-512");
1873                 break;
1874
1875         case 43:
1876                 ret += tcrypt_test("ecb(seed)");
1877                 break;
1878
1879         case 45:
1880                 ret += tcrypt_test("rfc4309(ccm(aes))");
1881                 break;
1882
1883         case 46:
1884                 ret += tcrypt_test("ghash");
1885                 break;
1886
1887         case 47:
1888                 ret += tcrypt_test("crct10dif");
1889                 break;
1890
1891         case 48:
1892                 ret += tcrypt_test("sha3-224");
1893                 break;
1894
1895         case 49:
1896                 ret += tcrypt_test("sha3-256");
1897                 break;
1898
1899         case 50:
1900                 ret += tcrypt_test("sha3-384");
1901                 break;
1902
1903         case 51:
1904                 ret += tcrypt_test("sha3-512");
1905                 break;
1906
1907         case 52:
1908                 ret += tcrypt_test("sm3");
1909                 break;
1910
1911         case 53:
1912                 ret += tcrypt_test("streebog256");
1913                 break;
1914
1915         case 54:
1916                 ret += tcrypt_test("streebog512");
1917                 break;
1918
1919         case 100:
1920                 ret += tcrypt_test("hmac(md5)");
1921                 break;
1922
1923         case 101:
1924                 ret += tcrypt_test("hmac(sha1)");
1925                 break;
1926
1927         case 102:
1928                 ret += tcrypt_test("hmac(sha256)");
1929                 break;
1930
1931         case 103:
1932                 ret += tcrypt_test("hmac(sha384)");
1933                 break;
1934
1935         case 104:
1936                 ret += tcrypt_test("hmac(sha512)");
1937                 break;
1938
1939         case 105:
1940                 ret += tcrypt_test("hmac(sha224)");
1941                 break;
1942
1943         case 106:
1944                 ret += tcrypt_test("xcbc(aes)");
1945                 break;
1946
1947         case 108:
1948                 ret += tcrypt_test("hmac(rmd160)");
1949                 break;
1950
1951         case 109:
1952                 ret += tcrypt_test("vmac64(aes)");
1953                 break;
1954
1955         case 111:
1956                 ret += tcrypt_test("hmac(sha3-224)");
1957                 break;
1958
1959         case 112:
1960                 ret += tcrypt_test("hmac(sha3-256)");
1961                 break;
1962
1963         case 113:
1964                 ret += tcrypt_test("hmac(sha3-384)");
1965                 break;
1966
1967         case 114:
1968                 ret += tcrypt_test("hmac(sha3-512)");
1969                 break;
1970
1971         case 115:
1972                 ret += tcrypt_test("hmac(streebog256)");
1973                 break;
1974
1975         case 116:
1976                 ret += tcrypt_test("hmac(streebog512)");
1977                 break;
1978
1979         case 150:
1980                 ret += tcrypt_test("ansi_cprng");
1981                 break;
1982
1983         case 151:
1984                 ret += tcrypt_test("rfc4106(gcm(aes))");
1985                 break;
1986
1987         case 152:
1988                 ret += tcrypt_test("rfc4543(gcm(aes))");
1989                 break;
1990
1991         case 153:
1992                 ret += tcrypt_test("cmac(aes)");
1993                 break;
1994
1995         case 154:
1996                 ret += tcrypt_test("cmac(des3_ede)");
1997                 break;
1998
1999         case 155:
2000                 ret += tcrypt_test("authenc(hmac(sha1),cbc(aes))");
2001                 break;
2002
2003         case 156:
2004                 ret += tcrypt_test("authenc(hmac(md5),ecb(cipher_null))");
2005                 break;
2006
2007         case 157:
2008                 ret += tcrypt_test("authenc(hmac(sha1),ecb(cipher_null))");
2009                 break;
2010         case 181:
2011                 ret += tcrypt_test("authenc(hmac(sha1),cbc(des))");
2012                 break;
2013         case 182:
2014                 ret += tcrypt_test("authenc(hmac(sha1),cbc(des3_ede))");
2015                 break;
2016         case 183:
2017                 ret += tcrypt_test("authenc(hmac(sha224),cbc(des))");
2018                 break;
2019         case 184:
2020                 ret += tcrypt_test("authenc(hmac(sha224),cbc(des3_ede))");
2021                 break;
2022         case 185:
2023                 ret += tcrypt_test("authenc(hmac(sha256),cbc(des))");
2024                 break;
2025         case 186:
2026                 ret += tcrypt_test("authenc(hmac(sha256),cbc(des3_ede))");
2027                 break;
2028         case 187:
2029                 ret += tcrypt_test("authenc(hmac(sha384),cbc(des))");
2030                 break;
2031         case 188:
2032                 ret += tcrypt_test("authenc(hmac(sha384),cbc(des3_ede))");
2033                 break;
2034         case 189:
2035                 ret += tcrypt_test("authenc(hmac(sha512),cbc(des))");
2036                 break;
2037         case 190:
2038                 ret += tcrypt_test("authenc(hmac(sha512),cbc(des3_ede))");
2039                 break;
2040         case 191:
2041                 ret += tcrypt_test("ecb(sm4)");
2042                 ret += tcrypt_test("cbc(sm4)");
2043                 ret += tcrypt_test("ctr(sm4)");
2044                 break;
2045         case 200:
2046                 test_cipher_speed("ecb(aes)", ENCRYPT, sec, NULL, 0,
2047                                 speed_template_16_24_32);
2048                 test_cipher_speed("ecb(aes)", DECRYPT, sec, NULL, 0,
2049                                 speed_template_16_24_32);
2050                 test_cipher_speed("cbc(aes)", ENCRYPT, sec, NULL, 0,
2051                                 speed_template_16_24_32);
2052                 test_cipher_speed("cbc(aes)", DECRYPT, sec, NULL, 0,
2053                                 speed_template_16_24_32);
2054                 test_cipher_speed("lrw(aes)", ENCRYPT, sec, NULL, 0,
2055                                 speed_template_32_40_48);
2056                 test_cipher_speed("lrw(aes)", DECRYPT, sec, NULL, 0,
2057                                 speed_template_32_40_48);
2058                 test_cipher_speed("xts(aes)", ENCRYPT, sec, NULL, 0,
2059                                 speed_template_32_64);
2060                 test_cipher_speed("xts(aes)", DECRYPT, sec, NULL, 0,
2061                                 speed_template_32_64);
2062                 test_cipher_speed("cts(cbc(aes))", ENCRYPT, sec, NULL, 0,
2063                                 speed_template_16_24_32);
2064                 test_cipher_speed("cts(cbc(aes))", DECRYPT, sec, NULL, 0,
2065                                 speed_template_16_24_32);
2066                 test_cipher_speed("ctr(aes)", ENCRYPT, sec, NULL, 0,
2067                                 speed_template_16_24_32);
2068                 test_cipher_speed("ctr(aes)", DECRYPT, sec, NULL, 0,
2069                                 speed_template_16_24_32);
2070                 test_cipher_speed("cfb(aes)", ENCRYPT, sec, NULL, 0,
2071                                 speed_template_16_24_32);
2072                 test_cipher_speed("cfb(aes)", DECRYPT, sec, NULL, 0,
2073                                 speed_template_16_24_32);
2074                 break;
2075
2076         case 201:
2077                 test_cipher_speed("ecb(des3_ede)", ENCRYPT, sec,
2078                                 des3_speed_template, DES3_SPEED_VECTORS,
2079                                 speed_template_24);
2080                 test_cipher_speed("ecb(des3_ede)", DECRYPT, sec,
2081                                 des3_speed_template, DES3_SPEED_VECTORS,
2082                                 speed_template_24);
2083                 test_cipher_speed("cbc(des3_ede)", ENCRYPT, sec,
2084                                 des3_speed_template, DES3_SPEED_VECTORS,
2085                                 speed_template_24);
2086                 test_cipher_speed("cbc(des3_ede)", DECRYPT, sec,
2087                                 des3_speed_template, DES3_SPEED_VECTORS,
2088                                 speed_template_24);
2089                 test_cipher_speed("ctr(des3_ede)", ENCRYPT, sec,
2090                                 des3_speed_template, DES3_SPEED_VECTORS,
2091                                 speed_template_24);
2092                 test_cipher_speed("ctr(des3_ede)", DECRYPT, sec,
2093                                 des3_speed_template, DES3_SPEED_VECTORS,
2094                                 speed_template_24);
2095                 break;
2096
2097         case 202:
2098                 test_cipher_speed("ecb(twofish)", ENCRYPT, sec, NULL, 0,
2099                                 speed_template_16_24_32);
2100                 test_cipher_speed("ecb(twofish)", DECRYPT, sec, NULL, 0,
2101                                 speed_template_16_24_32);
2102                 test_cipher_speed("cbc(twofish)", ENCRYPT, sec, NULL, 0,
2103                                 speed_template_16_24_32);
2104                 test_cipher_speed("cbc(twofish)", DECRYPT, sec, NULL, 0,
2105                                 speed_template_16_24_32);
2106                 test_cipher_speed("ctr(twofish)", ENCRYPT, sec, NULL, 0,
2107                                 speed_template_16_24_32);
2108                 test_cipher_speed("ctr(twofish)", DECRYPT, sec, NULL, 0,
2109                                 speed_template_16_24_32);
2110                 test_cipher_speed("lrw(twofish)", ENCRYPT, sec, NULL, 0,
2111                                 speed_template_32_40_48);
2112                 test_cipher_speed("lrw(twofish)", DECRYPT, sec, NULL, 0,
2113                                 speed_template_32_40_48);
2114                 test_cipher_speed("xts(twofish)", ENCRYPT, sec, NULL, 0,
2115                                 speed_template_32_48_64);
2116                 test_cipher_speed("xts(twofish)", DECRYPT, sec, NULL, 0,
2117                                 speed_template_32_48_64);
2118                 break;
2119
2120         case 203:
2121                 test_cipher_speed("ecb(blowfish)", ENCRYPT, sec, NULL, 0,
2122                                   speed_template_8_32);
2123                 test_cipher_speed("ecb(blowfish)", DECRYPT, sec, NULL, 0,
2124                                   speed_template_8_32);
2125                 test_cipher_speed("cbc(blowfish)", ENCRYPT, sec, NULL, 0,
2126                                   speed_template_8_32);
2127                 test_cipher_speed("cbc(blowfish)", DECRYPT, sec, NULL, 0,
2128                                   speed_template_8_32);
2129                 test_cipher_speed("ctr(blowfish)", ENCRYPT, sec, NULL, 0,
2130                                   speed_template_8_32);
2131                 test_cipher_speed("ctr(blowfish)", DECRYPT, sec, NULL, 0,
2132                                   speed_template_8_32);
2133                 break;
2134
2135         case 204:
2136                 test_cipher_speed("ecb(des)", ENCRYPT, sec, NULL, 0,
2137                                   speed_template_8);
2138                 test_cipher_speed("ecb(des)", DECRYPT, sec, NULL, 0,
2139                                   speed_template_8);
2140                 test_cipher_speed("cbc(des)", ENCRYPT, sec, NULL, 0,
2141                                   speed_template_8);
2142                 test_cipher_speed("cbc(des)", DECRYPT, sec, NULL, 0,
2143                                   speed_template_8);
2144                 break;
2145
2146         case 205:
2147                 test_cipher_speed("ecb(camellia)", ENCRYPT, sec, NULL, 0,
2148                                 speed_template_16_24_32);
2149                 test_cipher_speed("ecb(camellia)", DECRYPT, sec, NULL, 0,
2150                                 speed_template_16_24_32);
2151                 test_cipher_speed("cbc(camellia)", ENCRYPT, sec, NULL, 0,
2152                                 speed_template_16_24_32);
2153                 test_cipher_speed("cbc(camellia)", DECRYPT, sec, NULL, 0,
2154                                 speed_template_16_24_32);
2155                 test_cipher_speed("ctr(camellia)", ENCRYPT, sec, NULL, 0,
2156                                 speed_template_16_24_32);
2157                 test_cipher_speed("ctr(camellia)", DECRYPT, sec, NULL, 0,
2158                                 speed_template_16_24_32);
2159                 test_cipher_speed("lrw(camellia)", ENCRYPT, sec, NULL, 0,
2160                                 speed_template_32_40_48);
2161                 test_cipher_speed("lrw(camellia)", DECRYPT, sec, NULL, 0,
2162                                 speed_template_32_40_48);
2163                 test_cipher_speed("xts(camellia)", ENCRYPT, sec, NULL, 0,
2164                                 speed_template_32_48_64);
2165                 test_cipher_speed("xts(camellia)", DECRYPT, sec, NULL, 0,
2166                                 speed_template_32_48_64);
2167                 break;
2168
2169         case 207:
2170                 test_cipher_speed("ecb(serpent)", ENCRYPT, sec, NULL, 0,
2171                                   speed_template_16_32);
2172                 test_cipher_speed("ecb(serpent)", DECRYPT, sec, NULL, 0,
2173                                   speed_template_16_32);
2174                 test_cipher_speed("cbc(serpent)", ENCRYPT, sec, NULL, 0,
2175                                   speed_template_16_32);
2176                 test_cipher_speed("cbc(serpent)", DECRYPT, sec, NULL, 0,
2177                                   speed_template_16_32);
2178                 test_cipher_speed("ctr(serpent)", ENCRYPT, sec, NULL, 0,
2179                                   speed_template_16_32);
2180                 test_cipher_speed("ctr(serpent)", DECRYPT, sec, NULL, 0,
2181                                   speed_template_16_32);
2182                 test_cipher_speed("lrw(serpent)", ENCRYPT, sec, NULL, 0,
2183                                   speed_template_32_48);
2184                 test_cipher_speed("lrw(serpent)", DECRYPT, sec, NULL, 0,
2185                                   speed_template_32_48);
2186                 test_cipher_speed("xts(serpent)", ENCRYPT, sec, NULL, 0,
2187                                   speed_template_32_64);
2188                 test_cipher_speed("xts(serpent)", DECRYPT, sec, NULL, 0,
2189                                   speed_template_32_64);
2190                 break;
2191
2192         case 208:
2193                 test_cipher_speed("ecb(arc4)", ENCRYPT, sec, NULL, 0,
2194                                   speed_template_8);
2195                 break;
2196
2197         case 209:
2198                 test_cipher_speed("ecb(cast5)", ENCRYPT, sec, NULL, 0,
2199                                   speed_template_8_16);
2200                 test_cipher_speed("ecb(cast5)", DECRYPT, sec, NULL, 0,
2201                                   speed_template_8_16);
2202                 test_cipher_speed("cbc(cast5)", ENCRYPT, sec, NULL, 0,
2203                                   speed_template_8_16);
2204                 test_cipher_speed("cbc(cast5)", DECRYPT, sec, NULL, 0,
2205                                   speed_template_8_16);
2206                 test_cipher_speed("ctr(cast5)", ENCRYPT, sec, NULL, 0,
2207                                   speed_template_8_16);
2208                 test_cipher_speed("ctr(cast5)", DECRYPT, sec, NULL, 0,
2209                                   speed_template_8_16);
2210                 break;
2211
2212         case 210:
2213                 test_cipher_speed("ecb(cast6)", ENCRYPT, sec, NULL, 0,
2214                                   speed_template_16_32);
2215                 test_cipher_speed("ecb(cast6)", DECRYPT, sec, NULL, 0,
2216                                   speed_template_16_32);
2217                 test_cipher_speed("cbc(cast6)", ENCRYPT, sec, NULL, 0,
2218                                   speed_template_16_32);
2219                 test_cipher_speed("cbc(cast6)", DECRYPT, sec, NULL, 0,
2220                                   speed_template_16_32);
2221                 test_cipher_speed("ctr(cast6)", ENCRYPT, sec, NULL, 0,
2222                                   speed_template_16_32);
2223                 test_cipher_speed("ctr(cast6)", DECRYPT, sec, NULL, 0,
2224                                   speed_template_16_32);
2225                 test_cipher_speed("lrw(cast6)", ENCRYPT, sec, NULL, 0,
2226                                   speed_template_32_48);
2227                 test_cipher_speed("lrw(cast6)", DECRYPT, sec, NULL, 0,
2228                                   speed_template_32_48);
2229                 test_cipher_speed("xts(cast6)", ENCRYPT, sec, NULL, 0,
2230                                   speed_template_32_64);
2231                 test_cipher_speed("xts(cast6)", DECRYPT, sec, NULL, 0,
2232                                   speed_template_32_64);
2233                 break;
2234
2235         case 211:
2236                 test_aead_speed("rfc4106(gcm(aes))", ENCRYPT, sec,
2237                                 NULL, 0, 16, 16, aead_speed_template_20);
2238                 test_aead_speed("gcm(aes)", ENCRYPT, sec,
2239                                 NULL, 0, 16, 8, speed_template_16_24_32);
2240                 test_aead_speed("rfc4106(gcm(aes))", DECRYPT, sec,
2241                                 NULL, 0, 16, 16, aead_speed_template_20);
2242                 test_aead_speed("gcm(aes)", DECRYPT, sec,
2243                                 NULL, 0, 16, 8, speed_template_16_24_32);
2244                 break;
2245
2246         case 212:
2247                 test_aead_speed("rfc4309(ccm(aes))", ENCRYPT, sec,
2248                                 NULL, 0, 16, 16, aead_speed_template_19);
2249                 test_aead_speed("rfc4309(ccm(aes))", DECRYPT, sec,
2250                                 NULL, 0, 16, 16, aead_speed_template_19);
2251                 break;
2252
2253         case 213:
2254                 test_aead_speed("rfc7539esp(chacha20,poly1305)", ENCRYPT, sec,
2255                                 NULL, 0, 16, 8, aead_speed_template_36);
2256                 test_aead_speed("rfc7539esp(chacha20,poly1305)", DECRYPT, sec,
2257                                 NULL, 0, 16, 8, aead_speed_template_36);
2258                 break;
2259
2260         case 214:
2261                 test_cipher_speed("chacha20", ENCRYPT, sec, NULL, 0,
2262                                   speed_template_32);
2263                 break;
2264
2265         case 215:
2266                 test_mb_aead_speed("rfc4106(gcm(aes))", ENCRYPT, sec, NULL,
2267                                    0, 16, 16, aead_speed_template_20, num_mb);
2268                 test_mb_aead_speed("gcm(aes)", ENCRYPT, sec, NULL, 0, 16, 8,
2269                                    speed_template_16_24_32, num_mb);
2270                 test_mb_aead_speed("rfc4106(gcm(aes))", DECRYPT, sec, NULL,
2271                                    0, 16, 16, aead_speed_template_20, num_mb);
2272                 test_mb_aead_speed("gcm(aes)", DECRYPT, sec, NULL, 0, 16, 8,
2273                                    speed_template_16_24_32, num_mb);
2274                 break;
2275
2276         case 216:
2277                 test_mb_aead_speed("rfc4309(ccm(aes))", ENCRYPT, sec, NULL, 0,
2278                                    16, 16, aead_speed_template_19, num_mb);
2279                 test_mb_aead_speed("rfc4309(ccm(aes))", DECRYPT, sec, NULL, 0,
2280                                    16, 16, aead_speed_template_19, num_mb);
2281                 break;
2282
2283         case 217:
2284                 test_mb_aead_speed("rfc7539esp(chacha20,poly1305)", ENCRYPT,
2285                                    sec, NULL, 0, 16, 8, aead_speed_template_36,
2286                                    num_mb);
2287                 test_mb_aead_speed("rfc7539esp(chacha20,poly1305)", DECRYPT,
2288                                    sec, NULL, 0, 16, 8, aead_speed_template_36,
2289                                    num_mb);
2290                 break;
2291
2292         case 218:
2293                 test_cipher_speed("ecb(sm4)", ENCRYPT, sec, NULL, 0,
2294                                 speed_template_16);
2295                 test_cipher_speed("ecb(sm4)", DECRYPT, sec, NULL, 0,
2296                                 speed_template_16);
2297                 test_cipher_speed("cbc(sm4)", ENCRYPT, sec, NULL, 0,
2298                                 speed_template_16);
2299                 test_cipher_speed("cbc(sm4)", DECRYPT, sec, NULL, 0,
2300                                 speed_template_16);
2301                 test_cipher_speed("ctr(sm4)", ENCRYPT, sec, NULL, 0,
2302                                 speed_template_16);
2303                 test_cipher_speed("ctr(sm4)", DECRYPT, sec, NULL, 0,
2304                                 speed_template_16);
2305                 break;
2306
2307         case 219:
2308                 test_cipher_speed("adiantum(xchacha12,aes)", ENCRYPT, sec, NULL,
2309                                   0, speed_template_32);
2310                 test_cipher_speed("adiantum(xchacha12,aes)", DECRYPT, sec, NULL,
2311                                   0, speed_template_32);
2312                 test_cipher_speed("adiantum(xchacha20,aes)", ENCRYPT, sec, NULL,
2313                                   0, speed_template_32);
2314                 test_cipher_speed("adiantum(xchacha20,aes)", DECRYPT, sec, NULL,
2315                                   0, speed_template_32);
2316                 break;
2317
2318         case 220:
2319                 test_acipher_speed("essiv(cbc(aes),sha256)",
2320                                   ENCRYPT, sec, NULL, 0,
2321                                   speed_template_16_24_32);
2322                 test_acipher_speed("essiv(cbc(aes),sha256)",
2323                                   DECRYPT, sec, NULL, 0,
2324                                   speed_template_16_24_32);
2325                 break;
2326
2327         case 221:
2328                 test_aead_speed("aegis128", ENCRYPT, sec,
2329                                 NULL, 0, 16, 8, speed_template_16);
2330                 test_aead_speed("aegis128", DECRYPT, sec,
2331                                 NULL, 0, 16, 8, speed_template_16);
2332                 break;
2333
2334         case 300:
2335                 if (alg) {
2336                         test_hash_speed(alg, sec, generic_hash_speed_template);
2337                         break;
2338                 }
2339                 fallthrough;
2340         case 301:
2341                 test_hash_speed("md4", sec, generic_hash_speed_template);
2342                 if (mode > 300 && mode < 400) break;
2343                 fallthrough;
2344         case 302:
2345                 test_hash_speed("md5", sec, generic_hash_speed_template);
2346                 if (mode > 300 && mode < 400) break;
2347                 fallthrough;
2348         case 303:
2349                 test_hash_speed("sha1", sec, generic_hash_speed_template);
2350                 if (mode > 300 && mode < 400) break;
2351                 fallthrough;
2352         case 304:
2353                 test_hash_speed("sha256", sec, generic_hash_speed_template);
2354                 if (mode > 300 && mode < 400) break;
2355                 fallthrough;
2356         case 305:
2357                 test_hash_speed("sha384", sec, generic_hash_speed_template);
2358                 if (mode > 300 && mode < 400) break;
2359                 fallthrough;
2360         case 306:
2361                 test_hash_speed("sha512", sec, generic_hash_speed_template);
2362                 if (mode > 300 && mode < 400) break;
2363                 fallthrough;
2364         case 307:
2365                 test_hash_speed("wp256", sec, generic_hash_speed_template);
2366                 if (mode > 300 && mode < 400) break;
2367                 fallthrough;
2368         case 308:
2369                 test_hash_speed("wp384", sec, generic_hash_speed_template);
2370                 if (mode > 300 && mode < 400) break;
2371                 fallthrough;
2372         case 309:
2373                 test_hash_speed("wp512", sec, generic_hash_speed_template);
2374                 if (mode > 300 && mode < 400) break;
2375                 fallthrough;
2376         case 313:
2377                 test_hash_speed("sha224", sec, generic_hash_speed_template);
2378                 if (mode > 300 && mode < 400) break;
2379                 fallthrough;
2380         case 314:
2381                 test_hash_speed("xxhash64", sec, generic_hash_speed_template);
2382                 if (mode > 300 && mode < 400) break;
2383                 fallthrough;
2384         case 315:
2385                 test_hash_speed("rmd160", sec, generic_hash_speed_template);
2386                 if (mode > 300 && mode < 400) break;
2387                 fallthrough;
2388         case 316:
2389                 test_hash_speed("blake2s-256", sec, generic_hash_speed_template);
2390                 if (mode > 300 && mode < 400) break;
2391                 fallthrough;
2392         case 317:
2393                 test_hash_speed("blake2b-512", sec, generic_hash_speed_template);
2394                 if (mode > 300 && mode < 400) break;
2395                 fallthrough;
2396         case 318:
2397                 klen = 16;
2398                 test_hash_speed("ghash", sec, generic_hash_speed_template);
2399                 if (mode > 300 && mode < 400) break;
2400                 fallthrough;
2401         case 319:
2402                 test_hash_speed("crc32c", sec, generic_hash_speed_template);
2403                 if (mode > 300 && mode < 400) break;
2404                 fallthrough;
2405         case 320:
2406                 test_hash_speed("crct10dif", sec, generic_hash_speed_template);
2407                 if (mode > 300 && mode < 400) break;
2408                 fallthrough;
2409         case 321:
2410                 test_hash_speed("poly1305", sec, poly1305_speed_template);
2411                 if (mode > 300 && mode < 400) break;
2412                 fallthrough;
2413         case 322:
2414                 test_hash_speed("sha3-224", sec, generic_hash_speed_template);
2415                 if (mode > 300 && mode < 400) break;
2416                 fallthrough;
2417         case 323:
2418                 test_hash_speed("sha3-256", sec, generic_hash_speed_template);
2419                 if (mode > 300 && mode < 400) break;
2420                 fallthrough;
2421         case 324:
2422                 test_hash_speed("sha3-384", sec, generic_hash_speed_template);
2423                 if (mode > 300 && mode < 400) break;
2424                 fallthrough;
2425         case 325:
2426                 test_hash_speed("sha3-512", sec, generic_hash_speed_template);
2427                 if (mode > 300 && mode < 400) break;
2428                 fallthrough;
2429         case 326:
2430                 test_hash_speed("sm3", sec, generic_hash_speed_template);
2431                 if (mode > 300 && mode < 400) break;
2432                 fallthrough;
2433         case 327:
2434                 test_hash_speed("streebog256", sec,
2435                                 generic_hash_speed_template);
2436                 if (mode > 300 && mode < 400) break;
2437                 fallthrough;
2438         case 328:
2439                 test_hash_speed("streebog512", sec,
2440                                 generic_hash_speed_template);
2441                 if (mode > 300 && mode < 400) break;
2442                 fallthrough;
2443         case 399:
2444                 break;
2445
2446         case 400:
2447                 if (alg) {
2448                         test_ahash_speed(alg, sec, generic_hash_speed_template);
2449                         break;
2450                 }
2451                 fallthrough;
2452         case 401:
2453                 test_ahash_speed("md4", sec, generic_hash_speed_template);
2454                 if (mode > 400 && mode < 500) break;
2455                 fallthrough;
2456         case 402:
2457                 test_ahash_speed("md5", sec, generic_hash_speed_template);
2458                 if (mode > 400 && mode < 500) break;
2459                 fallthrough;
2460         case 403:
2461                 test_ahash_speed("sha1", sec, generic_hash_speed_template);
2462                 if (mode > 400 && mode < 500) break;
2463                 fallthrough;
2464         case 404:
2465                 test_ahash_speed("sha256", sec, generic_hash_speed_template);
2466                 if (mode > 400 && mode < 500) break;
2467                 fallthrough;
2468         case 405:
2469                 test_ahash_speed("sha384", sec, generic_hash_speed_template);
2470                 if (mode > 400 && mode < 500) break;
2471                 fallthrough;
2472         case 406:
2473                 test_ahash_speed("sha512", sec, generic_hash_speed_template);
2474                 if (mode > 400 && mode < 500) break;
2475                 fallthrough;
2476         case 407:
2477                 test_ahash_speed("wp256", sec, generic_hash_speed_template);
2478                 if (mode > 400 && mode < 500) break;
2479                 fallthrough;
2480         case 408:
2481                 test_ahash_speed("wp384", sec, generic_hash_speed_template);
2482                 if (mode > 400 && mode < 500) break;
2483                 fallthrough;
2484         case 409:
2485                 test_ahash_speed("wp512", sec, generic_hash_speed_template);
2486                 if (mode > 400 && mode < 500) break;
2487                 fallthrough;
2488         case 413:
2489                 test_ahash_speed("sha224", sec, generic_hash_speed_template);
2490                 if (mode > 400 && mode < 500) break;
2491                 fallthrough;
2492         case 414:
2493                 test_ahash_speed("xxhash64", sec, generic_hash_speed_template);
2494                 if (mode > 400 && mode < 500) break;
2495                 fallthrough;
2496         case 415:
2497                 test_ahash_speed("rmd160", sec, generic_hash_speed_template);
2498                 if (mode > 400 && mode < 500) break;
2499                 fallthrough;
2500         case 416:
2501                 test_ahash_speed("blake2s-256", sec, generic_hash_speed_template);
2502                 if (mode > 400 && mode < 500) break;
2503                 fallthrough;
2504         case 417:
2505                 test_ahash_speed("blake2b-512", sec, generic_hash_speed_template);
2506                 if (mode > 400 && mode < 500) break;
2507                 fallthrough;
2508         case 418:
2509                 test_ahash_speed("sha3-224", sec, generic_hash_speed_template);
2510                 if (mode > 400 && mode < 500) break;
2511                 fallthrough;
2512         case 419:
2513                 test_ahash_speed("sha3-256", sec, generic_hash_speed_template);
2514                 if (mode > 400 && mode < 500) break;
2515                 fallthrough;
2516         case 420:
2517                 test_ahash_speed("sha3-384", sec, generic_hash_speed_template);
2518                 if (mode > 400 && mode < 500) break;
2519                 fallthrough;
2520         case 421:
2521                 test_ahash_speed("sha3-512", sec, generic_hash_speed_template);
2522                 if (mode > 400 && mode < 500) break;
2523                 fallthrough;
2524         case 422:
2525                 test_mb_ahash_speed("sha1", sec, generic_hash_speed_template,
2526                                     num_mb);
2527                 if (mode > 400 && mode < 500) break;
2528                 fallthrough;
2529         case 423:
2530                 test_mb_ahash_speed("sha256", sec, generic_hash_speed_template,
2531                                     num_mb);
2532                 if (mode > 400 && mode < 500) break;
2533                 fallthrough;
2534         case 424:
2535                 test_mb_ahash_speed("sha512", sec, generic_hash_speed_template,
2536                                     num_mb);
2537                 if (mode > 400 && mode < 500) break;
2538                 fallthrough;
2539         case 425:
2540                 test_mb_ahash_speed("sm3", sec, generic_hash_speed_template,
2541                                     num_mb);
2542                 if (mode > 400 && mode < 500) break;
2543                 fallthrough;
2544         case 426:
2545                 test_mb_ahash_speed("streebog256", sec,
2546                                     generic_hash_speed_template, num_mb);
2547                 if (mode > 400 && mode < 500) break;
2548                 fallthrough;
2549         case 427:
2550                 test_mb_ahash_speed("streebog512", sec,
2551                                     generic_hash_speed_template, num_mb);
2552                 if (mode > 400 && mode < 500) break;
2553                 fallthrough;
2554         case 499:
2555                 break;
2556
2557         case 500:
2558                 test_acipher_speed("ecb(aes)", ENCRYPT, sec, NULL, 0,
2559                                    speed_template_16_24_32);
2560                 test_acipher_speed("ecb(aes)", DECRYPT, sec, NULL, 0,
2561                                    speed_template_16_24_32);
2562                 test_acipher_speed("cbc(aes)", ENCRYPT, sec, NULL, 0,
2563                                    speed_template_16_24_32);
2564                 test_acipher_speed("cbc(aes)", DECRYPT, sec, NULL, 0,
2565                                    speed_template_16_24_32);
2566                 test_acipher_speed("lrw(aes)", ENCRYPT, sec, NULL, 0,
2567                                    speed_template_32_40_48);
2568                 test_acipher_speed("lrw(aes)", DECRYPT, sec, NULL, 0,
2569                                    speed_template_32_40_48);
2570                 test_acipher_speed("xts(aes)", ENCRYPT, sec, NULL, 0,
2571                                    speed_template_32_64);
2572                 test_acipher_speed("xts(aes)", DECRYPT, sec, NULL, 0,
2573                                    speed_template_32_64);
2574                 test_acipher_speed("cts(cbc(aes))", ENCRYPT, sec, NULL, 0,
2575                                    speed_template_16_24_32);
2576                 test_acipher_speed("cts(cbc(aes))", DECRYPT, sec, NULL, 0,
2577                                    speed_template_16_24_32);
2578                 test_acipher_speed("ctr(aes)", ENCRYPT, sec, NULL, 0,
2579                                    speed_template_16_24_32);
2580                 test_acipher_speed("ctr(aes)", DECRYPT, sec, NULL, 0,
2581                                    speed_template_16_24_32);
2582                 test_acipher_speed("cfb(aes)", ENCRYPT, sec, NULL, 0,
2583                                    speed_template_16_24_32);
2584                 test_acipher_speed("cfb(aes)", DECRYPT, sec, NULL, 0,
2585                                    speed_template_16_24_32);
2586                 test_acipher_speed("ofb(aes)", ENCRYPT, sec, NULL, 0,
2587                                    speed_template_16_24_32);
2588                 test_acipher_speed("ofb(aes)", DECRYPT, sec, NULL, 0,
2589                                    speed_template_16_24_32);
2590                 test_acipher_speed("rfc3686(ctr(aes))", ENCRYPT, sec, NULL, 0,
2591                                    speed_template_20_28_36);
2592                 test_acipher_speed("rfc3686(ctr(aes))", DECRYPT, sec, NULL, 0,
2593                                    speed_template_20_28_36);
2594                 break;
2595
2596         case 501:
2597                 test_acipher_speed("ecb(des3_ede)", ENCRYPT, sec,
2598                                    des3_speed_template, DES3_SPEED_VECTORS,
2599                                    speed_template_24);
2600                 test_acipher_speed("ecb(des3_ede)", DECRYPT, sec,
2601                                    des3_speed_template, DES3_SPEED_VECTORS,
2602                                    speed_template_24);
2603                 test_acipher_speed("cbc(des3_ede)", ENCRYPT, sec,
2604                                    des3_speed_template, DES3_SPEED_VECTORS,
2605                                    speed_template_24);
2606                 test_acipher_speed("cbc(des3_ede)", DECRYPT, sec,
2607                                    des3_speed_template, DES3_SPEED_VECTORS,
2608                                    speed_template_24);
2609                 test_acipher_speed("cfb(des3_ede)", ENCRYPT, sec,
2610                                    des3_speed_template, DES3_SPEED_VECTORS,
2611                                    speed_template_24);
2612                 test_acipher_speed("cfb(des3_ede)", DECRYPT, sec,
2613                                    des3_speed_template, DES3_SPEED_VECTORS,
2614                                    speed_template_24);
2615                 test_acipher_speed("ofb(des3_ede)", ENCRYPT, sec,
2616                                    des3_speed_template, DES3_SPEED_VECTORS,
2617                                    speed_template_24);
2618                 test_acipher_speed("ofb(des3_ede)", DECRYPT, sec,
2619                                    des3_speed_template, DES3_SPEED_VECTORS,
2620                                    speed_template_24);
2621                 break;
2622
2623         case 502:
2624                 test_acipher_speed("ecb(des)", ENCRYPT, sec, NULL, 0,
2625                                    speed_template_8);
2626                 test_acipher_speed("ecb(des)", DECRYPT, sec, NULL, 0,
2627                                    speed_template_8);
2628                 test_acipher_speed("cbc(des)", ENCRYPT, sec, NULL, 0,
2629                                    speed_template_8);
2630                 test_acipher_speed("cbc(des)", DECRYPT, sec, NULL, 0,
2631                                    speed_template_8);
2632                 test_acipher_speed("cfb(des)", ENCRYPT, sec, NULL, 0,
2633                                    speed_template_8);
2634                 test_acipher_speed("cfb(des)", DECRYPT, sec, NULL, 0,
2635                                    speed_template_8);
2636                 test_acipher_speed("ofb(des)", ENCRYPT, sec, NULL, 0,
2637                                    speed_template_8);
2638                 test_acipher_speed("ofb(des)", DECRYPT, sec, NULL, 0,
2639                                    speed_template_8);
2640                 break;
2641
2642         case 503:
2643                 test_acipher_speed("ecb(serpent)", ENCRYPT, sec, NULL, 0,
2644                                    speed_template_16_32);
2645                 test_acipher_speed("ecb(serpent)", DECRYPT, sec, NULL, 0,
2646                                    speed_template_16_32);
2647                 test_acipher_speed("cbc(serpent)", ENCRYPT, sec, NULL, 0,
2648                                    speed_template_16_32);
2649                 test_acipher_speed("cbc(serpent)", DECRYPT, sec, NULL, 0,
2650                                    speed_template_16_32);
2651                 test_acipher_speed("ctr(serpent)", ENCRYPT, sec, NULL, 0,
2652                                    speed_template_16_32);
2653                 test_acipher_speed("ctr(serpent)", DECRYPT, sec, NULL, 0,
2654                                    speed_template_16_32);
2655                 test_acipher_speed("lrw(serpent)", ENCRYPT, sec, NULL, 0,
2656                                    speed_template_32_48);
2657                 test_acipher_speed("lrw(serpent)", DECRYPT, sec, NULL, 0,
2658                                    speed_template_32_48);
2659                 test_acipher_speed("xts(serpent)", ENCRYPT, sec, NULL, 0,
2660                                    speed_template_32_64);
2661                 test_acipher_speed("xts(serpent)", DECRYPT, sec, NULL, 0,
2662                                    speed_template_32_64);
2663                 break;
2664
2665         case 504:
2666                 test_acipher_speed("ecb(twofish)", ENCRYPT, sec, NULL, 0,
2667                                    speed_template_16_24_32);
2668                 test_acipher_speed("ecb(twofish)", DECRYPT, sec, NULL, 0,
2669                                    speed_template_16_24_32);
2670                 test_acipher_speed("cbc(twofish)", ENCRYPT, sec, NULL, 0,
2671                                    speed_template_16_24_32);
2672                 test_acipher_speed("cbc(twofish)", DECRYPT, sec, NULL, 0,
2673                                    speed_template_16_24_32);
2674                 test_acipher_speed("ctr(twofish)", ENCRYPT, sec, NULL, 0,
2675                                    speed_template_16_24_32);
2676                 test_acipher_speed("ctr(twofish)", DECRYPT, sec, NULL, 0,
2677                                    speed_template_16_24_32);
2678                 test_acipher_speed("lrw(twofish)", ENCRYPT, sec, NULL, 0,
2679                                    speed_template_32_40_48);
2680                 test_acipher_speed("lrw(twofish)", DECRYPT, sec, NULL, 0,
2681                                    speed_template_32_40_48);
2682                 test_acipher_speed("xts(twofish)", ENCRYPT, sec, NULL, 0,
2683                                    speed_template_32_48_64);
2684                 test_acipher_speed("xts(twofish)", DECRYPT, sec, NULL, 0,
2685                                    speed_template_32_48_64);
2686                 break;
2687
2688         case 505:
2689                 test_acipher_speed("ecb(arc4)", ENCRYPT, sec, NULL, 0,
2690                                    speed_template_8);
2691                 break;
2692
2693         case 506:
2694                 test_acipher_speed("ecb(cast5)", ENCRYPT, sec, NULL, 0,
2695                                    speed_template_8_16);
2696                 test_acipher_speed("ecb(cast5)", DECRYPT, sec, NULL, 0,
2697                                    speed_template_8_16);
2698                 test_acipher_speed("cbc(cast5)", ENCRYPT, sec, NULL, 0,
2699                                    speed_template_8_16);
2700                 test_acipher_speed("cbc(cast5)", DECRYPT, sec, NULL, 0,
2701                                    speed_template_8_16);
2702                 test_acipher_speed("ctr(cast5)", ENCRYPT, sec, NULL, 0,
2703                                    speed_template_8_16);
2704                 test_acipher_speed("ctr(cast5)", DECRYPT, sec, NULL, 0,
2705                                    speed_template_8_16);
2706                 break;
2707
2708         case 507:
2709                 test_acipher_speed("ecb(cast6)", ENCRYPT, sec, NULL, 0,
2710                                    speed_template_16_32);
2711                 test_acipher_speed("ecb(cast6)", DECRYPT, sec, NULL, 0,
2712                                    speed_template_16_32);
2713                 test_acipher_speed("cbc(cast6)", ENCRYPT, sec, NULL, 0,
2714                                    speed_template_16_32);
2715                 test_acipher_speed("cbc(cast6)", DECRYPT, sec, NULL, 0,
2716                                    speed_template_16_32);
2717                 test_acipher_speed("ctr(cast6)", ENCRYPT, sec, NULL, 0,
2718                                    speed_template_16_32);
2719                 test_acipher_speed("ctr(cast6)", DECRYPT, sec, NULL, 0,
2720                                    speed_template_16_32);
2721                 test_acipher_speed("lrw(cast6)", ENCRYPT, sec, NULL, 0,
2722                                    speed_template_32_48);
2723                 test_acipher_speed("lrw(cast6)", DECRYPT, sec, NULL, 0,
2724                                    speed_template_32_48);
2725                 test_acipher_speed("xts(cast6)", ENCRYPT, sec, NULL, 0,
2726                                    speed_template_32_64);
2727                 test_acipher_speed("xts(cast6)", DECRYPT, sec, NULL, 0,
2728                                    speed_template_32_64);
2729                 break;
2730
2731         case 508:
2732                 test_acipher_speed("ecb(camellia)", ENCRYPT, sec, NULL, 0,
2733                                    speed_template_16_32);
2734                 test_acipher_speed("ecb(camellia)", DECRYPT, sec, NULL, 0,
2735                                    speed_template_16_32);
2736                 test_acipher_speed("cbc(camellia)", ENCRYPT, sec, NULL, 0,
2737                                    speed_template_16_32);
2738                 test_acipher_speed("cbc(camellia)", DECRYPT, sec, NULL, 0,
2739                                    speed_template_16_32);
2740                 test_acipher_speed("ctr(camellia)", ENCRYPT, sec, NULL, 0,
2741                                    speed_template_16_32);
2742                 test_acipher_speed("ctr(camellia)", DECRYPT, sec, NULL, 0,
2743                                    speed_template_16_32);
2744                 test_acipher_speed("lrw(camellia)", ENCRYPT, sec, NULL, 0,
2745                                    speed_template_32_48);
2746                 test_acipher_speed("lrw(camellia)", DECRYPT, sec, NULL, 0,
2747                                    speed_template_32_48);
2748                 test_acipher_speed("xts(camellia)", ENCRYPT, sec, NULL, 0,
2749                                    speed_template_32_64);
2750                 test_acipher_speed("xts(camellia)", DECRYPT, sec, NULL, 0,
2751                                    speed_template_32_64);
2752                 break;
2753
2754         case 509:
2755                 test_acipher_speed("ecb(blowfish)", ENCRYPT, sec, NULL, 0,
2756                                    speed_template_8_32);
2757                 test_acipher_speed("ecb(blowfish)", DECRYPT, sec, NULL, 0,
2758                                    speed_template_8_32);
2759                 test_acipher_speed("cbc(blowfish)", ENCRYPT, sec, NULL, 0,
2760                                    speed_template_8_32);
2761                 test_acipher_speed("cbc(blowfish)", DECRYPT, sec, NULL, 0,
2762                                    speed_template_8_32);
2763                 test_acipher_speed("ctr(blowfish)", ENCRYPT, sec, NULL, 0,
2764                                    speed_template_8_32);
2765                 test_acipher_speed("ctr(blowfish)", DECRYPT, sec, NULL, 0,
2766                                    speed_template_8_32);
2767                 break;
2768
2769         case 600:
2770                 test_mb_skcipher_speed("ecb(aes)", ENCRYPT, sec, NULL, 0,
2771                                        speed_template_16_24_32, num_mb);
2772                 test_mb_skcipher_speed("ecb(aes)", DECRYPT, sec, NULL, 0,
2773                                        speed_template_16_24_32, num_mb);
2774                 test_mb_skcipher_speed("cbc(aes)", ENCRYPT, sec, NULL, 0,
2775                                        speed_template_16_24_32, num_mb);
2776                 test_mb_skcipher_speed("cbc(aes)", DECRYPT, sec, NULL, 0,
2777                                        speed_template_16_24_32, num_mb);
2778                 test_mb_skcipher_speed("lrw(aes)", ENCRYPT, sec, NULL, 0,
2779                                        speed_template_32_40_48, num_mb);
2780                 test_mb_skcipher_speed("lrw(aes)", DECRYPT, sec, NULL, 0,
2781                                        speed_template_32_40_48, num_mb);
2782                 test_mb_skcipher_speed("xts(aes)", ENCRYPT, sec, NULL, 0,
2783                                        speed_template_32_64, num_mb);
2784                 test_mb_skcipher_speed("xts(aes)", DECRYPT, sec, NULL, 0,
2785                                        speed_template_32_64, num_mb);
2786                 test_mb_skcipher_speed("cts(cbc(aes))", ENCRYPT, sec, NULL, 0,
2787                                        speed_template_16_24_32, num_mb);
2788                 test_mb_skcipher_speed("cts(cbc(aes))", DECRYPT, sec, NULL, 0,
2789                                        speed_template_16_24_32, num_mb);
2790                 test_mb_skcipher_speed("ctr(aes)", ENCRYPT, sec, NULL, 0,
2791                                        speed_template_16_24_32, num_mb);
2792                 test_mb_skcipher_speed("ctr(aes)", DECRYPT, sec, NULL, 0,
2793                                        speed_template_16_24_32, num_mb);
2794                 test_mb_skcipher_speed("cfb(aes)", ENCRYPT, sec, NULL, 0,
2795                                        speed_template_16_24_32, num_mb);
2796                 test_mb_skcipher_speed("cfb(aes)", DECRYPT, sec, NULL, 0,
2797                                        speed_template_16_24_32, num_mb);
2798                 test_mb_skcipher_speed("ofb(aes)", ENCRYPT, sec, NULL, 0,
2799                                        speed_template_16_24_32, num_mb);
2800                 test_mb_skcipher_speed("ofb(aes)", DECRYPT, sec, NULL, 0,
2801                                        speed_template_16_24_32, num_mb);
2802                 test_mb_skcipher_speed("rfc3686(ctr(aes))", ENCRYPT, sec, NULL,
2803                                        0, speed_template_20_28_36, num_mb);
2804                 test_mb_skcipher_speed("rfc3686(ctr(aes))", DECRYPT, sec, NULL,
2805                                        0, speed_template_20_28_36, num_mb);
2806                 break;
2807
2808         case 601:
2809                 test_mb_skcipher_speed("ecb(des3_ede)", ENCRYPT, sec,
2810                                        des3_speed_template, DES3_SPEED_VECTORS,
2811                                        speed_template_24, num_mb);
2812                 test_mb_skcipher_speed("ecb(des3_ede)", DECRYPT, sec,
2813                                        des3_speed_template, DES3_SPEED_VECTORS,
2814                                        speed_template_24, num_mb);
2815                 test_mb_skcipher_speed("cbc(des3_ede)", ENCRYPT, sec,
2816                                        des3_speed_template, DES3_SPEED_VECTORS,
2817                                        speed_template_24, num_mb);
2818                 test_mb_skcipher_speed("cbc(des3_ede)", DECRYPT, sec,
2819                                        des3_speed_template, DES3_SPEED_VECTORS,
2820                                        speed_template_24, num_mb);
2821                 test_mb_skcipher_speed("cfb(des3_ede)", ENCRYPT, sec,
2822                                        des3_speed_template, DES3_SPEED_VECTORS,
2823                                        speed_template_24, num_mb);
2824                 test_mb_skcipher_speed("cfb(des3_ede)", DECRYPT, sec,
2825                                        des3_speed_template, DES3_SPEED_VECTORS,
2826                                        speed_template_24, num_mb);
2827                 test_mb_skcipher_speed("ofb(des3_ede)", ENCRYPT, sec,
2828                                        des3_speed_template, DES3_SPEED_VECTORS,
2829                                        speed_template_24, num_mb);
2830                 test_mb_skcipher_speed("ofb(des3_ede)", DECRYPT, sec,
2831                                        des3_speed_template, DES3_SPEED_VECTORS,
2832                                        speed_template_24, num_mb);
2833                 break;
2834
2835         case 602:
2836                 test_mb_skcipher_speed("ecb(des)", ENCRYPT, sec, NULL, 0,
2837                                        speed_template_8, num_mb);
2838                 test_mb_skcipher_speed("ecb(des)", DECRYPT, sec, NULL, 0,
2839                                        speed_template_8, num_mb);
2840                 test_mb_skcipher_speed("cbc(des)", ENCRYPT, sec, NULL, 0,
2841                                        speed_template_8, num_mb);
2842                 test_mb_skcipher_speed("cbc(des)", DECRYPT, sec, NULL, 0,
2843                                        speed_template_8, num_mb);
2844                 test_mb_skcipher_speed("cfb(des)", ENCRYPT, sec, NULL, 0,
2845                                        speed_template_8, num_mb);
2846                 test_mb_skcipher_speed("cfb(des)", DECRYPT, sec, NULL, 0,
2847                                        speed_template_8, num_mb);
2848                 test_mb_skcipher_speed("ofb(des)", ENCRYPT, sec, NULL, 0,
2849                                        speed_template_8, num_mb);
2850                 test_mb_skcipher_speed("ofb(des)", DECRYPT, sec, NULL, 0,
2851                                        speed_template_8, num_mb);
2852                 break;
2853
2854         case 603:
2855                 test_mb_skcipher_speed("ecb(serpent)", ENCRYPT, sec, NULL, 0,
2856                                        speed_template_16_32, num_mb);
2857                 test_mb_skcipher_speed("ecb(serpent)", DECRYPT, sec, NULL, 0,
2858                                        speed_template_16_32, num_mb);
2859                 test_mb_skcipher_speed("cbc(serpent)", ENCRYPT, sec, NULL, 0,
2860                                        speed_template_16_32, num_mb);
2861                 test_mb_skcipher_speed("cbc(serpent)", DECRYPT, sec, NULL, 0,
2862                                        speed_template_16_32, num_mb);
2863                 test_mb_skcipher_speed("ctr(serpent)", ENCRYPT, sec, NULL, 0,
2864                                        speed_template_16_32, num_mb);
2865                 test_mb_skcipher_speed("ctr(serpent)", DECRYPT, sec, NULL, 0,
2866                                        speed_template_16_32, num_mb);
2867                 test_mb_skcipher_speed("lrw(serpent)", ENCRYPT, sec, NULL, 0,
2868                                        speed_template_32_48, num_mb);
2869                 test_mb_skcipher_speed("lrw(serpent)", DECRYPT, sec, NULL, 0,
2870                                        speed_template_32_48, num_mb);
2871                 test_mb_skcipher_speed("xts(serpent)", ENCRYPT, sec, NULL, 0,
2872                                        speed_template_32_64, num_mb);
2873                 test_mb_skcipher_speed("xts(serpent)", DECRYPT, sec, NULL, 0,
2874                                        speed_template_32_64, num_mb);
2875                 break;
2876
2877         case 604:
2878                 test_mb_skcipher_speed("ecb(twofish)", ENCRYPT, sec, NULL, 0,
2879                                        speed_template_16_24_32, num_mb);
2880                 test_mb_skcipher_speed("ecb(twofish)", DECRYPT, sec, NULL, 0,
2881                                        speed_template_16_24_32, num_mb);
2882                 test_mb_skcipher_speed("cbc(twofish)", ENCRYPT, sec, NULL, 0,
2883                                        speed_template_16_24_32, num_mb);
2884                 test_mb_skcipher_speed("cbc(twofish)", DECRYPT, sec, NULL, 0,
2885                                        speed_template_16_24_32, num_mb);
2886                 test_mb_skcipher_speed("ctr(twofish)", ENCRYPT, sec, NULL, 0,
2887                                        speed_template_16_24_32, num_mb);
2888                 test_mb_skcipher_speed("ctr(twofish)", DECRYPT, sec, NULL, 0,
2889                                        speed_template_16_24_32, num_mb);
2890                 test_mb_skcipher_speed("lrw(twofish)", ENCRYPT, sec, NULL, 0,
2891                                        speed_template_32_40_48, num_mb);
2892                 test_mb_skcipher_speed("lrw(twofish)", DECRYPT, sec, NULL, 0,
2893                                        speed_template_32_40_48, num_mb);
2894                 test_mb_skcipher_speed("xts(twofish)", ENCRYPT, sec, NULL, 0,
2895                                        speed_template_32_48_64, num_mb);
2896                 test_mb_skcipher_speed("xts(twofish)", DECRYPT, sec, NULL, 0,
2897                                        speed_template_32_48_64, num_mb);
2898                 break;
2899
2900         case 605:
2901                 test_mb_skcipher_speed("ecb(arc4)", ENCRYPT, sec, NULL, 0,
2902                                        speed_template_8, num_mb);
2903                 break;
2904
2905         case 606:
2906                 test_mb_skcipher_speed("ecb(cast5)", ENCRYPT, sec, NULL, 0,
2907                                        speed_template_8_16, num_mb);
2908                 test_mb_skcipher_speed("ecb(cast5)", DECRYPT, sec, NULL, 0,
2909                                        speed_template_8_16, num_mb);
2910                 test_mb_skcipher_speed("cbc(cast5)", ENCRYPT, sec, NULL, 0,
2911                                        speed_template_8_16, num_mb);
2912                 test_mb_skcipher_speed("cbc(cast5)", DECRYPT, sec, NULL, 0,
2913                                        speed_template_8_16, num_mb);
2914                 test_mb_skcipher_speed("ctr(cast5)", ENCRYPT, sec, NULL, 0,
2915                                        speed_template_8_16, num_mb);
2916                 test_mb_skcipher_speed("ctr(cast5)", DECRYPT, sec, NULL, 0,
2917                                        speed_template_8_16, num_mb);
2918                 break;
2919
2920         case 607:
2921                 test_mb_skcipher_speed("ecb(cast6)", ENCRYPT, sec, NULL, 0,
2922                                        speed_template_16_32, num_mb);
2923                 test_mb_skcipher_speed("ecb(cast6)", DECRYPT, sec, NULL, 0,
2924                                        speed_template_16_32, num_mb);
2925                 test_mb_skcipher_speed("cbc(cast6)", ENCRYPT, sec, NULL, 0,
2926                                        speed_template_16_32, num_mb);
2927                 test_mb_skcipher_speed("cbc(cast6)", DECRYPT, sec, NULL, 0,
2928                                        speed_template_16_32, num_mb);
2929                 test_mb_skcipher_speed("ctr(cast6)", ENCRYPT, sec, NULL, 0,
2930                                        speed_template_16_32, num_mb);
2931                 test_mb_skcipher_speed("ctr(cast6)", DECRYPT, sec, NULL, 0,
2932                                        speed_template_16_32, num_mb);
2933                 test_mb_skcipher_speed("lrw(cast6)", ENCRYPT, sec, NULL, 0,
2934                                        speed_template_32_48, num_mb);
2935                 test_mb_skcipher_speed("lrw(cast6)", DECRYPT, sec, NULL, 0,
2936                                        speed_template_32_48, num_mb);
2937                 test_mb_skcipher_speed("xts(cast6)", ENCRYPT, sec, NULL, 0,
2938                                        speed_template_32_64, num_mb);
2939                 test_mb_skcipher_speed("xts(cast6)", DECRYPT, sec, NULL, 0,
2940                                        speed_template_32_64, num_mb);
2941                 break;
2942
2943         case 608:
2944                 test_mb_skcipher_speed("ecb(camellia)", ENCRYPT, sec, NULL, 0,
2945                                        speed_template_16_32, num_mb);
2946                 test_mb_skcipher_speed("ecb(camellia)", DECRYPT, sec, NULL, 0,
2947                                        speed_template_16_32, num_mb);
2948                 test_mb_skcipher_speed("cbc(camellia)", ENCRYPT, sec, NULL, 0,
2949                                        speed_template_16_32, num_mb);
2950                 test_mb_skcipher_speed("cbc(camellia)", DECRYPT, sec, NULL, 0,
2951                                        speed_template_16_32, num_mb);
2952                 test_mb_skcipher_speed("ctr(camellia)", ENCRYPT, sec, NULL, 0,
2953                                        speed_template_16_32, num_mb);
2954                 test_mb_skcipher_speed("ctr(camellia)", DECRYPT, sec, NULL, 0,
2955                                        speed_template_16_32, num_mb);
2956                 test_mb_skcipher_speed("lrw(camellia)", ENCRYPT, sec, NULL, 0,
2957                                        speed_template_32_48, num_mb);
2958                 test_mb_skcipher_speed("lrw(camellia)", DECRYPT, sec, NULL, 0,
2959                                        speed_template_32_48, num_mb);
2960                 test_mb_skcipher_speed("xts(camellia)", ENCRYPT, sec, NULL, 0,
2961                                        speed_template_32_64, num_mb);
2962                 test_mb_skcipher_speed("xts(camellia)", DECRYPT, sec, NULL, 0,
2963                                        speed_template_32_64, num_mb);
2964                 break;
2965
2966         case 609:
2967                 test_mb_skcipher_speed("ecb(blowfish)", ENCRYPT, sec, NULL, 0,
2968                                        speed_template_8_32, num_mb);
2969                 test_mb_skcipher_speed("ecb(blowfish)", DECRYPT, sec, NULL, 0,
2970                                        speed_template_8_32, num_mb);
2971                 test_mb_skcipher_speed("cbc(blowfish)", ENCRYPT, sec, NULL, 0,
2972                                        speed_template_8_32, num_mb);
2973                 test_mb_skcipher_speed("cbc(blowfish)", DECRYPT, sec, NULL, 0,
2974                                        speed_template_8_32, num_mb);
2975                 test_mb_skcipher_speed("ctr(blowfish)", ENCRYPT, sec, NULL, 0,
2976                                        speed_template_8_32, num_mb);
2977                 test_mb_skcipher_speed("ctr(blowfish)", DECRYPT, sec, NULL, 0,
2978                                        speed_template_8_32, num_mb);
2979                 break;
2980
2981         case 1000:
2982                 test_available();
2983                 break;
2984         }
2985
2986         return ret;
2987 }
2988
2989 static int __init tcrypt_mod_init(void)
2990 {
2991         int err = -ENOMEM;
2992         int i;
2993
2994         for (i = 0; i < TVMEMSIZE; i++) {
2995                 tvmem[i] = (void *)__get_free_page(GFP_KERNEL);
2996                 if (!tvmem[i])
2997                         goto err_free_tv;
2998         }
2999
3000         err = do_test(alg, type, mask, mode, num_mb);
3001
3002         if (err) {
3003                 printk(KERN_ERR "tcrypt: one or more tests failed!\n");
3004                 goto err_free_tv;
3005         } else {
3006                 pr_debug("all tests passed\n");
3007         }
3008
3009         /* We intentionaly return -EAGAIN to prevent keeping the module,
3010          * unless we're running in fips mode. It does all its work from
3011          * init() and doesn't offer any runtime functionality, but in
3012          * the fips case, checking for a successful load is helpful.
3013          * => we don't need it in the memory, do we?
3014          *                                        -- mludvig
3015          */
3016         if (!fips_enabled)
3017                 err = -EAGAIN;
3018
3019 err_free_tv:
3020         for (i = 0; i < TVMEMSIZE && tvmem[i]; i++)
3021                 free_page((unsigned long)tvmem[i]);
3022
3023         return err;
3024 }
3025
3026 /*
3027  * If an init function is provided, an exit function must also be provided
3028  * to allow module unload.
3029  */
3030 static void __exit tcrypt_mod_fini(void) { }
3031
3032 late_initcall(tcrypt_mod_init);
3033 module_exit(tcrypt_mod_fini);
3034
3035 module_param(alg, charp, 0);
3036 module_param(type, uint, 0);
3037 module_param(mask, uint, 0);
3038 module_param(mode, int, 0);
3039 module_param(sec, uint, 0);
3040 MODULE_PARM_DESC(sec, "Length in seconds of speed tests "
3041                       "(defaults to zero which uses CPU cycles instead)");
3042 module_param(num_mb, uint, 0000);
3043 MODULE_PARM_DESC(num_mb, "Number of concurrent requests to be used in mb speed tests (defaults to 8)");
3044 module_param(klen, uint, 0);
3045 MODULE_PARM_DESC(klen, "Key length (defaults to 0)");
3046
3047 MODULE_LICENSE("GPL");
3048 MODULE_DESCRIPTION("Quick & dirty crypto testing module");
3049 MODULE_AUTHOR("James Morris <jmorris@intercode.com.au>");