> -----Original Message-----
> From: linux-crypto-ow...@vger.kernel.org <linux-crypto-ow...@vger.kernel.org> 
> On Behalf Of
> Corentin Labbe
> Sent: Thursday, August 1, 2019 9:43 PM
> To: herb...@gondor.apana.org.au; linux-crypto@vger.kernel.org
> Cc: linux-ker...@vger.kernel.org
> Subject: Need help with failling gcm_base(ctr,ghash-generic) selftest
> 
> Hello
> 
> I am writing the Allwinner sun8i-ce driver and when running tcrypt I got
> [   30.201739] alg: aead: gcm_base(ctr-aes-sun8i-ce,ghash-generic) decryption 
> failed on test
> vector 3; expected_error=0, actual_error=-74, cfg=\"random: may_sleep 
> use_digest
> src_divs=[100.0%@+2614] dst_divs=[5.90%@alignmask+3015, 60.56%@+3996, 
> 17.92%@+865,
> 15.62%@+10]\"
> or
>
The decryption reports only an -EBADMSG here, which means the decryption itself 
went
fine, but the authentication tag mismatched.


> [  148.613537] alg: aead: gcm_base(ctr-aes-sun8i-ce,ghash-generic) encryption 
> test failed
> (wrong result) on test vector 2, cfg=\"random: may_sleep use_final 
> src_divs=[100.0%@+0]
> iv_offset=20\"
> 
Can't say for sure, but considering the decrypt error, this is most likely just 
a
mismatch on the appended authentication tag.

> Since ctr-aes-sun8i-ce is passing the ctr(aes) selftest, I dont understand 
> what could be
> wrong.
> 
That is possible, as this appears to be a problem with the authentication part,
not the encryption part. So possibly a problem with the way you setup the 
authentication key (which is actually derived from the encryption key, but I 
don't
know if your hardware does this autonomously, mine doesn't) and/or operation?

> Thanks
> Regards


Regards,
Pascal van Leeuwen
Silicon IP Architect, Multi-Protocol Engines @ Verimatrix
www.insidesecure.com

Reply via email to