kernel: backport crypto selftests for some ciphersuites main master
authorAleksander Jan Bajkowski <olek2@wp.pl>
Wed, 28 Jan 2026 00:00:59 +0000 (01:00 +0100)
committerHauke Mehrtens <hauke@hauke-m.de>
Sun, 15 Feb 2026 00:25:54 +0000 (01:25 +0100)
commitd22eb0a0123d90b951442fe38472570e0339ee69
treed09c4fe55318c87c5d6f77448567f3a1cc35881c
parent70ba7512e7fc434fabc02487a46e2637a86c614e
kernel: backport crypto selftests for some ciphersuites

FIPS 140-3 recommends that all crypto implementations should be tested
before first use. Testmanager performs initial tests based on existing
test vectors. Not all algorithms have defined test vectors, so to improve
this situation, this commit backports recently added test vectors for
three  cipher suites:
* authenc(hmac(md5),cbc(des3_ede)),
* authenc(hmac(sha224),cbc(aes)),
* authenc(hmac(sha384),cbc(aes)).

These vectors were calculated using a software implementation and then
double-checked on Mediatek MT7981 (safexcel) and NXP P2020 (talitos).
Both platforms passed self-tests.

Signed-off-by: Aleksander Jan Bajkowski <olek2@wp.pl>
Link: https://github.com/openwrt/openwrt/pull/21970
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
target/linux/generic/backport-6.12/910-v7.0-crypto-testmgr-Add-test-vectors-for-authenc-hmac-sha.patch [new file with mode: 0644]
target/linux/generic/backport-6.12/911-v7.0-crypto-testmgr-Add-test-vectors-for-authenc-hmac-sha.patch [new file with mode: 0644]
target/linux/generic/backport-6.12/912-v7.0-crypto-testmgr-Add-test-vectors-for-authenc-hmac-md5.patch [new file with mode: 0644]