crypto/tcrypt.c

   1 // SPDX-License-Identifier: GPL-2.0-or-later
   2 /*
   3  * Quick & dirty crypto testing module.
   4  *
   5  * This will only exist until we have a better testing mechanism
   6  * (e.g. a char device).
   7  *
   8  * Copyright (c) 2002 James Morris <[email protected]>
   9  * Copyright (c) 2002 Jean-Francois Dive <[email protected]>
  10  * Copyright (c) 2007 Nokia Siemens Networks
  11  *
  12  * Updated RFC4106 AES-GCM testing.
  13  *    Authors: Aidan O'Mahony ([email protected])
  14  *             Adrian Hoban <[email protected]>
  15  *             Gabriele Paoloni <[email protected]>
  16  *             Tadeusz Struk ([email protected])
  17  *             Copyright (c) 2010, Intel Corporation.
  18  */
  19
  20 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
  21
  22 #include <crypto/aead.h>
  23 #include <crypto/hash.h>
  24 #include <crypto/skcipher.h>
  25 #include <linux/err.h>
  26 #include <linux/fips.h>
  27 #include <linux/init.h>
  28 #include <linux/interrupt.h>
  29 #include <linux/jiffies.h>
  30 #include <linux/kernel.h>
  31 #include <linux/module.h>
  32 #include <linux/moduleparam.h>
  33 #include <linux/scatterlist.h>
  34 #include <linux/slab.h>
  35 #include <linux/string.h>
  36 #include <linux/timex.h>
  37
  38 #include "internal.h"
  39 #include "tcrypt.h"
  40
  41 /*
  42  * Need slab memory for testing (size in number of pages).
  43  */
  44 #define TVMEMSIZE       4
  45
  46 /*
  47 * Used by test_cipher_speed()
  48 */
  49 #define ENCRYPT 1
  50 #define DECRYPT 0
  51
  52 #define MAX_DIGEST_SIZE         64
  53
  54 /*
  55  * return a string with the driver name
  56  */
  57 #define get_driver_name(tfm_type, tfm) crypto_tfm_alg_driver_name(tfm_type ## _tfm(tfm))
  58
  59 /*
  60  * Used by test_cipher_speed()
  61  */
  62 static unsigned int sec;
  63
  64 static char *alg;
  65 static u32 type;
  66 static u32 mask;
  67 static int mode;
  68 static u32 num_mb = 8;
  69 static unsigned int klen;
  70 static char *tvmem[TVMEMSIZE];
  71
  72 static const int block_sizes[] = { 16, 64, 128, 256, 1024, 1420, 4096, 0 };
  73 static const int aead_sizes[] = { 16, 64, 256, 512, 1024, 1420, 4096, 8192, 0 };
  74
  75 #define XBUFSIZE 8
  76 #define MAX_IVLEN 32
  77
  78 static int testmgr_alloc_buf(char *buf[XBUFSIZE])
  79 {
  80         int i;
  81
  82         for (i = 0; i < XBUFSIZE; i++) {
  83                 buf[i] = (void *)__get_free_page(GFP_KERNEL);
  84                 if (!buf[i])
  85                         goto err_free_buf;
  86         }
  87
  88         return 0;
  89
  90 err_free_buf:
  91         while (i-- > 0)
  92                 free_page((unsigned long)buf[i]);
  93
  94         return -ENOMEM;
  95 }
  96
  97 static void testmgr_free_buf(char *buf[XBUFSIZE])
  98 {
  99         int i;
 100
 101         for (i = 0; i < XBUFSIZE; i++)
 102                 free_page((unsigned long)buf[i]);
 103 }
 104
 105 static void sg_init_aead(struct scatterlist *sg, char *xbuf[XBUFSIZE],
 106                          unsigned int buflen, const void *assoc,
 107                          unsigned int aad_size)
 108 {
 109         int np = (buflen + PAGE_SIZE - 1)/PAGE_SIZE;
 110         int k, rem;
 111
 112         if (np > XBUFSIZE) {
 113                 rem = PAGE_SIZE;
 114                 np = XBUFSIZE;
 115         } else {
 116                 rem = buflen % PAGE_SIZE;
 117         }
 118
 119         sg_init_table(sg, np + 1);
 120
 121         sg_set_buf(&sg[0], assoc, aad_size);
 122
 123         if (rem)
 124                 np--;
 125         for (k = 0; k < np; k++)
 126                 sg_set_buf(&sg[k + 1], xbuf[k], PAGE_SIZE);
 127
 128         if (rem)
 129                 sg_set_buf(&sg[k + 1], xbuf[k], rem);
 130 }
 131
 132 static inline int do_one_aead_op(struct aead_request *req, int ret)
 133 {
 134         struct crypto_wait *wait = req->base.data;
 135
 136         return crypto_wait_req(ret, wait);
 137 }
 138
 139 struct test_mb_aead_data {
 140         struct scatterlist sg[XBUFSIZE];
 141         struct scatterlist sgout[XBUFSIZE];
 142         struct aead_request *req;
 143         struct crypto_wait wait;
 144         char *xbuf[XBUFSIZE];
 145         char *xoutbuf[XBUFSIZE];
 146         char *axbuf[XBUFSIZE];
 147 };
 148
 149 static int do_mult_aead_op(struct test_mb_aead_data *data, int enc,
 150                                 u32 num_mb, int *rc)
 151 {
 152         int i, err = 0;
 153
 154         /* Fire up a bunch of concurrent requests */
 155         for (i = 0; i < num_mb; i++) {
 156                 if (enc == ENCRYPT)
 157                         rc[i] = crypto_aead_encrypt(data[i].req);
 158                 else
 159                         rc[i] = crypto_aead_decrypt(data[i].req);
 160         }
 161
 162         /* Wait for all requests to finish */
 163         for (i = 0; i < num_mb; i++) {
 164                 rc[i] = crypto_wait_req(rc[i], &data[i].wait);
 165
 166                 if (rc[i]) {
 167                         pr_info("concurrent request %d error %d\n", i, rc[i]);
 168                         err = rc[i];
 169                 }
 170         }
 171
 172         return err;
 173 }
 174
 175 static int test_mb_aead_jiffies(struct test_mb_aead_data *data, int enc,
 176                                 int blen, int secs, u32 num_mb)
 177 {
 178         unsigned long start, end;
 179         int bcount;
 180         int ret = 0;
 181         int *rc;
 182
 183         rc = kcalloc(num_mb, sizeof(*rc), GFP_KERNEL);
 184         if (!rc)
 185                 return -ENOMEM;
 186
 187         for (start = jiffies, end = start + secs * HZ, bcount = 0;
 188              time_before(jiffies, end); bcount++) {
 189                 ret = do_mult_aead_op(data, enc, num_mb, rc);
 190                 if (ret)
 191                         goto out;
 192         }
 193
 194         pr_cont("%d operations in %d seconds (%llu bytes)\n",
 195                 bcount * num_mb, secs, (u64)bcount * blen * num_mb);
 196
 197 out:
 198         kfree(rc);
 199         return ret;
 200 }
 201
 202 static int test_mb_aead_cycles(struct test_mb_aead_data *data, int enc,
 203                                int blen, u32 num_mb)
 204 {
 205         unsigned long cycles = 0;
 206         int ret = 0;
 207         int i;
 208         int *rc;
 209
 210         rc = kcalloc(num_mb, sizeof(*rc), GFP_KERNEL);
 211         if (!rc)
 212                 return -ENOMEM;
 213
 214         /* Warm-up run. */
 215         for (i = 0; i < 4; i++) {
 216                 ret = do_mult_aead_op(data, enc, num_mb, rc);
 217                 if (ret)
 218                         goto out;
 219         }
 220
 221         /* The real thing. */
 222         for (i = 0; i < 8; i++) {
 223                 cycles_t start, end;
 224
 225                 start = get_cycles();
 226                 ret = do_mult_aead_op(data, enc, num_mb, rc);
 227                 end = get_cycles();
 228
 229                 if (ret)
 230                         goto out;
 231
 232                 cycles += end - start;
 233         }
 234
 235         pr_cont("1 operation in %lu cycles (%d bytes)\n",
 236                 (cycles + 4) / (8 * num_mb), blen);
 237
 238 out:
 239         kfree(rc);
 240         return ret;
 241 }
 242
 243 static void test_mb_aead_speed(const char *algo, int enc, int secs,
 244                                struct aead_speed_template *template,
 245                                unsigned int tcount, u8 authsize,
 246                                unsigned int aad_size, u8 *keysize, u32 num_mb)
 247 {
 248         struct test_mb_aead_data *data;
 249         struct crypto_aead *tfm;
 250         unsigned int i, j, iv_len;
 251         const int *b_size;
 252         const char *key;
 253         const char *e;
 254         void *assoc;
 255         char *iv;
 256         int ret;
 257
 258
 259         if (aad_size >= PAGE_SIZE) {
 260                 pr_err("associate data length (%u) too big\n", aad_size);
 261                 return;
 262         }
 263
 264         iv = kzalloc(MAX_IVLEN, GFP_KERNEL);
 265         if (!iv)
 266                 return;
 267
 268         if (enc == ENCRYPT)
 269                 e = "encryption";
 270         else
 271                 e = "decryption";
 272
 273         data = kcalloc(num_mb, sizeof(*data), GFP_KERNEL);
 274         if (!data)
 275                 goto out_free_iv;
 276
 277         tfm = crypto_alloc_aead(algo, 0, 0);
 278         if (IS_ERR(tfm)) {
 279                 pr_err("failed to load transform for %s: %ld\n",
 280                         algo, PTR_ERR(tfm));
 281                 goto out_free_data;
 282         }
 283
 284         ret = crypto_aead_setauthsize(tfm, authsize);
 285         if (ret) {
 286                 pr_err("alg: aead: Failed to setauthsize for %s: %d\n", algo,
 287                        ret);
 288                 goto out_free_tfm;
 289         }
 290
 291         for (i = 0; i < num_mb; ++i)
 292                 if (testmgr_alloc_buf(data[i].xbuf)) {
 293                         while (i--)
 294                                 testmgr_free_buf(data[i].xbuf);
 295                         goto out_free_tfm;
 296                 }
 297
 298         for (i = 0; i < num_mb; ++i)
 299                 if (testmgr_alloc_buf(data[i].axbuf)) {
 300                         while (i--)
 301                                 testmgr_free_buf(data[i].axbuf);
 302                         goto out_free_xbuf;
 303                 }
 304
 305         for (i = 0; i < num_mb; ++i)
 306                 if (testmgr_alloc_buf(data[i].xoutbuf)) {
 307                         while (i--)
 308                                 testmgr_free_buf(data[i].xoutbuf);
 309                         goto out_free_axbuf;
 310                 }
 311
 312         for (i = 0; i < num_mb; ++i) {
 313                 data[i].req = aead_request_alloc(tfm, GFP_KERNEL);
 314                 if (!data[i].req) {
 315                         pr_err("alg: aead: Failed to allocate request for %s\n",
 316                                algo);
 317                         while (i--)
 318                                 aead_request_free(data[i].req);
 319                         goto out_free_xoutbuf;
 320                 }
 321         }
 322
 323         for (i = 0; i < num_mb; ++i) {
 324                 crypto_init_wait(&data[i].wait);
 325                 aead_request_set_callback(data[i].req,
 326                                           CRYPTO_TFM_REQ_MAY_BACKLOG,
 327                                           crypto_req_done, &data[i].wait);
 328         }
 329
 330         pr_info("testing speed of multibuffer %s (%s) %s\n", algo,
 331                 get_driver_name(crypto_aead, tfm), e);
 332
 333         i = 0;
 334         do {
 335                 b_size = aead_sizes;
 336                 do {
 337                         int bs = round_up(*b_size, crypto_aead_blocksize(tfm));
 338
 339                         if (bs + authsize > XBUFSIZE * PAGE_SIZE) {
 340                                 pr_err("template (%u) too big for buffer (%lu)\n",
 341                                        authsize + bs,
 342                                        XBUFSIZE * PAGE_SIZE);
 343                                 goto out;
 344                         }
 345
 346                         pr_info("test %u (%d bit key, %d byte blocks): ", i,
 347                                 *keysize * 8, bs);
 348
 349                         /* Set up tfm global state, i.e. the key */
 350
 351                         memset(tvmem[0], 0xff, PAGE_SIZE);
 352                         key = tvmem[0];
 353                         for (j = 0; j < tcount; j++) {
 354                                 if (template[j].klen == *keysize) {
 355                                         key = template[j].key;
 356                                         break;
 357                                 }
 358                         }
 359
 360                         crypto_aead_clear_flags(tfm, ~0);
 361
 362                         ret = crypto_aead_setkey(tfm, key, *keysize);
 363                         if (ret) {
 364                                 pr_err("setkey() failed flags=%x\n",
 365                                        crypto_aead_get_flags(tfm));
 366                                 goto out;
 367                         }
 368
 369                         iv_len = crypto_aead_ivsize(tfm);
 370                         if (iv_len)
 371                                 memset(iv, 0xff, iv_len);
 372
 373                         /* Now setup per request stuff, i.e. buffers */
 374
 375                         for (j = 0; j < num_mb; ++j) {
 376                                 struct test_mb_aead_data *cur = &data[j];
 377
 378                                 assoc = cur->axbuf[0];
 379                                 memset(assoc, 0xff, aad_size);
 380
 381                                 sg_init_aead(cur->sg, cur->xbuf,
 382                                              bs + (enc ? 0 : authsize),
 383                                              assoc, aad_size);
 384
 385                                 sg_init_aead(cur->sgout, cur->xoutbuf,
 386                                              bs + (enc ? authsize : 0),
 387                                              assoc, aad_size);
 388
 389                                 aead_request_set_ad(cur->req, aad_size);
 390
 391                                 if (!enc) {
 392
 393                                         aead_request_set_crypt(cur->req,
 394                                                                cur->sgout,
 395                                                                cur->sg,
 396                                                                bs, iv);
 397                                         ret = crypto_aead_encrypt(cur->req);
 398                                         ret = do_one_aead_op(cur->req, ret);
 399
 400                                         if (ret) {
 401                                                 pr_err("calculating auth failed (%d)\n",
 402                                                        ret);
 403                                                 break;
 404                                         }
 405                                 }
 406
 407                                 aead_request_set_crypt(cur->req, cur->sg,
 408                                                        cur->sgout, bs +
 409                                                        (enc ? 0 : authsize),
 410                                                        iv);
 411
 412                         }
 413
 414                         if (secs) {
 415                                 ret = test_mb_aead_jiffies(data, enc, bs,
 416                                                            secs, num_mb);
 417                                 cond_resched();
 418                         } else {
 419                                 ret = test_mb_aead_cycles(data, enc, bs,
 420                                                           num_mb);
 421                         }
 422
 423                         if (ret) {
 424                                 pr_err("%s() failed return code=%d\n", e, ret);
 425                                 break;
 426                         }
 427                         b_size++;
 428                         i++;
 429                 } while (*b_size);
 430                 keysize++;
 431         } while (*keysize);
 432
 433 out:
 434         for (i = 0; i < num_mb; ++i)
 435                 aead_request_free(data[i].req);
 436 out_free_xoutbuf:
 437         for (i = 0; i < num_mb; ++i)
 438                 testmgr_free_buf(data[i].xoutbuf);
 439 out_free_axbuf:
 440         for (i = 0; i < num_mb; ++i)
 441                 testmgr_free_buf(data[i].axbuf);
 442 out_free_xbuf:
 443         for (i = 0; i < num_mb; ++i)
 444                 testmgr_free_buf(data[i].xbuf);
 445 out_free_tfm:
 446         crypto_free_aead(tfm);
 447 out_free_data:
 448         kfree(data);
 449 out_free_iv:
 450         kfree(iv);
 451 }
 452
 453 static int test_aead_jiffies(struct aead_request *req, int enc,
 454                                 int blen, int secs)
 455 {
 456         unsigned long start, end;
 457         int bcount;
 458         int ret;
 459
 460         for (start = jiffies, end = start + secs * HZ, bcount = 0;
 461              time_before(jiffies, end); bcount++) {
 462                 if (enc)
 463                         ret = do_one_aead_op(req, crypto_aead_encrypt(req));
 464                 else
 465                         ret = do_one_aead_op(req, crypto_aead_decrypt(req));
 466
 467                 if (ret)
 468                         return ret;
 469         }
 470
 471         pr_cont("%d operations in %d seconds (%llu bytes)\n",
 472                 bcount, secs, (u64)bcount * blen);
 473         return 0;
 474 }
 475
 476 static int test_aead_cycles(struct aead_request *req, int enc, int blen)
 477 {
 478         unsigned long cycles = 0;
 479         int ret = 0;
 480         int i;
 481
 482         /* Warm-up run. */
 483         for (i = 0; i < 4; i++) {
 484                 if (enc)
 485                         ret = do_one_aead_op(req, crypto_aead_encrypt(req));
 486                 else
 487                         ret = do_one_aead_op(req, crypto_aead_decrypt(req));
 488
 489                 if (ret)
 490                         goto out;
 491         }
 492
 493         /* The real thing. */
 494         for (i = 0; i < 8; i++) {
 495                 cycles_t start, end;
 496
 497                 start = get_cycles();
 498                 if (enc)
 499                         ret = do_one_aead_op(req, crypto_aead_encrypt(req));
 500                 else
 501                         ret = do_one_aead_op(req, crypto_aead_decrypt(req));
 502                 end = get_cycles();
 503
 504                 if (ret)
 505                         goto out;
 506
 507                 cycles += end - start;
 508         }
 509
 510 out:
 511         if (ret == 0)
 512                 pr_cont("1 operation in %lu cycles (%d bytes)\n",
 513                         (cycles + 4) / 8, blen);
 514
 515         return ret;
 516 }
 517
 518 static void test_aead_speed(const char *algo, int enc, unsigned int secs,
 519                             struct aead_speed_template *template,
 520                             unsigned int tcount, u8 authsize,
 521                             unsigned int aad_size, u8 *keysize)
 522 {
 523         unsigned int i, j;
 524         struct crypto_aead *tfm;
 525         int ret = -ENOMEM;
 526         const char *key;
 527         struct aead_request *req;
 528         struct scatterlist *sg;
 529         struct scatterlist *sgout;
 530         const char *e;
 531         void *assoc;
 532         char *iv;
 533         char *xbuf[XBUFSIZE];
 534         char *xoutbuf[XBUFSIZE];
 535         char *axbuf[XBUFSIZE];
 536         const int *b_size;
 537         unsigned int iv_len;
 538         struct crypto_wait wait;
 539
 540         iv = kzalloc(MAX_IVLEN, GFP_KERNEL);
 541         if (!iv)
 542                 return;
 543
 544         if (aad_size >= PAGE_SIZE) {
 545                 pr_err("associate data length (%u) too big\n", aad_size);
 546                 goto out_noxbuf;
 547         }
 548
 549         if (enc == ENCRYPT)
 550                 e = "encryption";
 551         else
 552                 e = "decryption";
 553
 554         if (testmgr_alloc_buf(xbuf))
 555                 goto out_noxbuf;
 556         if (testmgr_alloc_buf(axbuf))
 557                 goto out_noaxbuf;
 558         if (testmgr_alloc_buf(xoutbuf))
 559                 goto out_nooutbuf;
 560
 561         sg = kmalloc(sizeof(*sg) * 9 * 2, GFP_KERNEL);
 562         if (!sg)
 563                 goto out_nosg;
 564         sgout = &sg[9];
 565
 566         tfm = crypto_alloc_aead(algo, 0, 0);
 567         if (IS_ERR(tfm)) {
 568                 pr_err("alg: aead: Failed to load transform for %s: %ld\n", algo,
 569                        PTR_ERR(tfm));
 570                 goto out_notfm;
 571         }
 572
 573         ret = crypto_aead_setauthsize(tfm, authsize);
 574         if (ret) {
 575                 pr_err("alg: aead: Failed to setauthsize for %s: %d\n", algo,
 576                        ret);
 577                 goto out_noreq;
 578         }
 579
 580         crypto_init_wait(&wait);
 581         pr_info("testing speed of %s (%s) %s\n", algo,
 582                 get_driver_name(crypto_aead, tfm), e);
 583
 584         req = aead_request_alloc(tfm, GFP_KERNEL);
 585         if (!req) {
 586                 pr_err("alg: aead: Failed to allocate request for %s\n",
 587                        algo);
 588                 goto out_noreq;
 589         }
 590
 591         aead_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
 592                                   crypto_req_done, &wait);
 593
 594         i = 0;
 595         do {
 596                 b_size = aead_sizes;
 597                 do {
 598                         u32 bs = round_up(*b_size, crypto_aead_blocksize(tfm));
 599
 600                         assoc = axbuf[0];
 601                         memset(assoc, 0xff, aad_size);
 602
 603                         if ((*keysize + bs) > TVMEMSIZE * PAGE_SIZE) {
 604                                 pr_err("template (%u) too big for tvmem (%lu)\n",
 605                                        *keysize + bs,
 606                                         TVMEMSIZE * PAGE_SIZE);
 607                                 goto out;
 608                         }
 609
 610                         key = tvmem[0];
 611                         for (j = 0; j < tcount; j++) {
 612                                 if (template[j].klen == *keysize) {
 613                                         key = template[j].key;
 614                                         break;
 615                                 }
 616                         }
 617
 618                         ret = crypto_aead_setkey(tfm, key, *keysize);
 619                         if (ret) {
 620                                 pr_err("setkey() failed flags=%x: %d\n",
 621                                         crypto_aead_get_flags(tfm), ret);
 622                                 goto out;
 623                         }
 624
 625                         iv_len = crypto_aead_ivsize(tfm);
 626                         if (iv_len)
 627                                 memset(iv, 0xff, iv_len);
 628
 629                         crypto_aead_clear_flags(tfm, ~0);
 630                         pr_info("test %u (%d bit key, %d byte blocks): ",
 631                                 i, *keysize * 8, bs);
 632
 633                         memset(tvmem[0], 0xff, PAGE_SIZE);
 634
 635                         sg_init_aead(sg, xbuf, bs + (enc ? 0 : authsize),
 636                                      assoc, aad_size);
 637
 638                         sg_init_aead(sgout, xoutbuf,
 639                                      bs + (enc ? authsize : 0), assoc,
 640                                      aad_size);
 641
 642                         aead_request_set_ad(req, aad_size);
 643
 644                         if (!enc) {
 645
 646                                 /*
 647                                  * For decryption we need a proper auth so
 648                                  * we do the encryption path once with buffers
 649                                  * reversed (input <-> output) to calculate it
 650                                  */
 651                                 aead_request_set_crypt(req, sgout, sg,
 652                                                        bs, iv);
 653                                 ret = do_one_aead_op(req,
 654                                                      crypto_aead_encrypt(req));
 655
 656                                 if (ret) {
 657                                         pr_err("calculating auth failed (%d)\n",
 658                                                ret);
 659                                         break;
 660                                 }
 661                         }
 662
 663                         aead_request_set_crypt(req, sg, sgout,
 664                                                bs + (enc ? 0 : authsize),
 665                                                iv);
 666
 667                         if (secs) {
 668                                 ret = test_aead_jiffies(req, enc, bs,
 669                                                         secs);
 670                                 cond_resched();
 671                         } else {
 672                                 ret = test_aead_cycles(req, enc, bs);
 673                         }
 674
 675                         if (ret) {
 676                                 pr_err("%s() failed return code=%d\n", e, ret);
 677                                 break;
 678                         }
 679                         b_size++;
 680                         i++;
 681                 } while (*b_size);
 682                 keysize++;
 683         } while (*keysize);
 684
 685 out:
 686         aead_request_free(req);
 687 out_noreq:
 688         crypto_free_aead(tfm);
 689 out_notfm:
 690         kfree(sg);
 691 out_nosg:
 692         testmgr_free_buf(xoutbuf);
 693 out_nooutbuf:
 694         testmgr_free_buf(axbuf);
 695 out_noaxbuf:
 696         testmgr_free_buf(xbuf);
 697 out_noxbuf:
 698         kfree(iv);
 699 }
 700
 701 static void test_hash_sg_init(struct scatterlist *sg)
 702 {
 703         int i;
 704
 705         sg_init_table(sg, TVMEMSIZE);
 706         for (i = 0; i < TVMEMSIZE; i++) {
 707                 sg_set_buf(sg + i, tvmem[i], PAGE_SIZE);
 708                 memset(tvmem[i], 0xff, PAGE_SIZE);
 709         }
 710 }
 711
 712 static inline int do_one_ahash_op(struct ahash_request *req, int ret)
 713 {
 714         struct crypto_wait *wait = req->base.data;
 715
 716         return crypto_wait_req(ret, wait);
 717 }
 718
 719 static int test_ahash_jiffies_digest(struct ahash_request *req, int blen,
 720                                      char *out, int secs)
 721 {
 722         unsigned long start, end;
 723         int bcount;
 724         int ret;
 725
 726         for (start = jiffies, end = start + secs * HZ, bcount = 0;
 727              time_before(jiffies, end); bcount++) {
 728                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
 729                 if (ret)
 730                         return ret;
 731         }
 732
 733         pr_cont("%6u opers/sec, %9lu bytes/sec\n",
 734                 bcount / secs, ((long)bcount * blen) / secs);
 735
 736         return 0;
 737 }
 738
 739 static int test_ahash_jiffies(struct ahash_request *req, int blen,
 740                               int plen, char *out, int secs)
 741 {
 742         unsigned long start, end;
 743         int bcount, pcount;
 744         int ret;
 745
 746         if (plen == blen)
 747                 return test_ahash_jiffies_digest(req, blen, out, secs);
 748
 749         for (start = jiffies, end = start + secs * HZ, bcount = 0;
 750              time_before(jiffies, end); bcount++) {
 751                 ret = do_one_ahash_op(req, crypto_ahash_init(req));
 752                 if (ret)
 753                         return ret;
 754                 for (pcount = 0; pcount < blen; pcount += plen) {
 755                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
 756                         if (ret)
 757                                 return ret;
 758                 }
 759                 /* we assume there is enough space in 'out' for the result */
 760                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
 761                 if (ret)
 762                         return ret;
 763         }
 764
 765         pr_cont("%6u opers/sec, %9lu bytes/sec\n",
 766                 bcount / secs, ((long)bcount * blen) / secs);
 767
 768         return 0;
 769 }
 770
 771 static int test_ahash_cycles_digest(struct ahash_request *req, int blen,
 772                                     char *out)
 773 {
 774         unsigned long cycles = 0;
 775         int ret, i;
 776
 777         /* Warm-up run. */
 778         for (i = 0; i < 4; i++) {
 779                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
 780                 if (ret)
 781                         goto out;
 782         }
 783
 784         /* The real thing. */
 785         for (i = 0; i < 8; i++) {
 786                 cycles_t start, end;
 787
 788                 start = get_cycles();
 789
 790                 ret = do_one_ahash_op(req, crypto_ahash_digest(req));
 791                 if (ret)
 792                         goto out;
 793
 794                 end = get_cycles();
 795
 796                 cycles += end - start;
 797         }
 798
 799 out:
 800         if (ret)
 801                 return ret;
 802
 803         pr_cont("%6lu cycles/operation, %4lu cycles/byte\n",
 804                 cycles / 8, cycles / (8 * blen));
 805
 806         return 0;
 807 }
 808
 809 static int test_ahash_cycles(struct ahash_request *req, int blen,
 810                              int plen, char *out)
 811 {
 812         unsigned long cycles = 0;
 813         int i, pcount, ret;
 814
 815         if (plen == blen)
 816                 return test_ahash_cycles_digest(req, blen, out);
 817
 818         /* Warm-up run. */
 819         for (i = 0; i < 4; i++) {
 820                 ret = do_one_ahash_op(req, crypto_ahash_init(req));
 821                 if (ret)
 822                         goto out;
 823                 for (pcount = 0; pcount < blen; pcount += plen) {
 824                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
 825                         if (ret)
 826                                 goto out;
 827                 }
 828                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
 829                 if (ret)
 830                         goto out;
 831         }
 832
 833         /* The real thing. */
 834         for (i = 0; i < 8; i++) {
 835                 cycles_t start, end;
 836
 837                 start = get_cycles();
 838
 839                 ret = do_one_ahash_op(req, crypto_ahash_init(req));
 840                 if (ret)
 841                         goto out;
 842                 for (pcount = 0; pcount < blen; pcount += plen) {
 843                         ret = do_one_ahash_op(req, crypto_ahash_update(req));
 844                         if (ret)
 845                                 goto out;
 846                 }
 847                 ret = do_one_ahash_op(req, crypto_ahash_final(req));
 848                 if (ret)
 849                         goto out;
 850
 851                 end = get_cycles();
 852
 853                 cycles += end - start;
 854         }
 855
 856 out:
 857         if (ret)
 858                 return ret;
 859
 860         pr_cont("%6lu cycles/operation, %4lu cycles/byte\n",
 861                 cycles / 8, cycles / (8 * blen));
 862
 863         return 0;
 864 }
 865
 866 static void test_ahash_speed_common(const char *algo, unsigned int secs,
 867                                     struct hash_speed *speed, unsigned mask)
 868 {
 869         struct scatterlist sg[TVMEMSIZE];
 870         struct crypto_wait wait;
 871         struct ahash_request *req;
 872         struct crypto_ahash *tfm;
 873         char *output;
 874         int i, ret;
 875
 876         tfm = crypto_alloc_ahash(algo, 0, mask);
 877         if (IS_ERR(tfm)) {
 878                 pr_err("failed to load transform for %s: %ld\n",
 879                        algo, PTR_ERR(tfm));
 880                 return;
 881         }
 882
 883         pr_info("testing speed of async %s (%s)\n", algo,
 884                 get_driver_name(crypto_ahash, tfm));
 885
 886         if (crypto_ahash_digestsize(tfm) > MAX_DIGEST_SIZE) {
 887                 pr_err("digestsize(%u) > %d\n", crypto_ahash_digestsize(tfm),
 888                        MAX_DIGEST_SIZE);
 889                 goto out;
 890         }
 891
 892         test_hash_sg_init(sg);
 893         req = ahash_request_alloc(tfm, GFP_KERNEL);
 894         if (!req) {
 895                 pr_err("ahash request allocation failure\n");
 896                 goto out;
 897         }
 898
 899         crypto_init_wait(&wait);
 900         ahash_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
 901                                    crypto_req_done, &wait);
 902
 903         output = kmalloc(MAX_DIGEST_SIZE, GFP_KERNEL);
 904         if (!output)
 905                 goto out_nomem;
 906
 907         for (i = 0; speed[i].blen != 0; i++) {
 908                 if (speed[i].blen > TVMEMSIZE * PAGE_SIZE) {
 909                         pr_err("template (%u) too big for tvmem (%lu)\n",
 910                                speed[i].blen, TVMEMSIZE * PAGE_SIZE);
 911                         break;
 912                 }
 913
 914                 if (klen)
 915                         crypto_ahash_setkey(tfm, tvmem[0], klen);
 916
 917                 pr_info("test%3u "
 918                         "(%5u byte blocks,%5u bytes per update,%4u updates): ",
 919                         i, speed[i].blen, speed[i].plen, speed[i].blen / speed[i].plen);
 920
 921                 ahash_request_set_crypt(req, sg, output, speed[i].plen);
 922
 923                 if (secs) {
 924                         ret = test_ahash_jiffies(req, speed[i].blen,
 925                                                  speed[i].plen, output, secs);
 926                         cond_resched();
 927                 } else {
 928                         ret = test_ahash_cycles(req, speed[i].blen,
 929                                                 speed[i].plen, output);
 930                 }
 931
 932                 if (ret) {
 933                         pr_err("hashing failed ret=%d\n", ret);
 934                         break;
 935                 }
 936         }
 937
 938         kfree(output);
 939
 940 out_nomem:
 941         ahash_request_free(req);
 942
 943 out:
 944         crypto_free_ahash(tfm);
 945 }
 946
 947 static void test_ahash_speed(const char *algo, unsigned int secs,
 948                              struct hash_speed *speed)
 949 {
 950         return test_ahash_speed_common(algo, secs, speed, 0);
 951 }
 952
 953 static void test_hash_speed(const char *algo, unsigned int secs,
 954                             struct hash_speed *speed)
 955 {
 956         return test_ahash_speed_common(algo, secs, speed, CRYPTO_ALG_ASYNC);
 957 }
 958
 959 struct test_mb_skcipher_data {
 960         struct scatterlist sg[XBUFSIZE];
 961         struct skcipher_request *req;
 962         struct crypto_wait wait;
 963         char *xbuf[XBUFSIZE];
 964 };
 965
 966 static int do_mult_acipher_op(struct test_mb_skcipher_data *data, int enc,
 967                                 u32 num_mb, int *rc)
 968 {
 969         int i, err = 0;
 970
 971         /* Fire up a bunch of concurrent requests */
 972         for (i = 0; i < num_mb; i++) {
 973                 if (enc == ENCRYPT)
 974                         rc[i] = crypto_skcipher_encrypt(data[i].req);
 975                 else
 976                         rc[i] = crypto_skcipher_decrypt(data[i].req);
 977         }
 978
 979         /* Wait for all requests to finish */
 980         for (i = 0; i < num_mb; i++) {
 981                 rc[i] = crypto_wait_req(rc[i], &data[i].wait);
 982
 983                 if (rc[i]) {
 984                         pr_info("concurrent request %d error %d\n", i, rc[i]);
 985                         err = rc[i];
 986                 }
 987         }
 988
 989         return err;
 990 }
 991
 992 static int test_mb_acipher_jiffies(struct test_mb_skcipher_data *data, int enc,
 993                                 int blen, int secs, u32 num_mb)
 994 {
 995         unsigned long start, end;
 996         int bcount;
 997         int ret = 0;
 998         int *rc;
 999
1000         rc = kcalloc(num_mb, sizeof(*rc), GFP_KERNEL);
1001         if (!rc)
1002                 return -ENOMEM;
1003
1004         for (start = jiffies, end = start + secs * HZ, bcount = 0;
1005              time_before(jiffies, end); bcount++) {
1006                 ret = do_mult_acipher_op(data, enc, num_mb, rc);
1007                 if (ret)
1008                         goto out;
1009         }
1010
1011         pr_cont("%d operations in %d seconds (%llu bytes)\n",
1012                 bcount * num_mb, secs, (u64)bcount * blen * num_mb);
1013
1014 out:
1015         kfree(rc);
1016         return ret;
1017 }
1018
1019 static int test_mb_acipher_cycles(struct test_mb_skcipher_data *data, int enc,
1020                                int blen, u32 num_mb)
1021 {
1022         unsigned long cycles = 0;
1023         int ret = 0;
1024         int i;
1025         int *rc;
1026
1027         rc = kcalloc(num_mb, sizeof(*rc), GFP_KERNEL);
1028         if (!rc)
1029                 return -ENOMEM;
1030
1031         /* Warm-up run. */
1032         for (i = 0; i < 4; i++) {
1033                 ret = do_mult_acipher_op(data, enc, num_mb, rc);
1034                 if (ret)
1035                         goto out;
1036         }
1037
1038         /* The real thing. */
1039         for (i = 0; i < 8; i++) {
1040                 cycles_t start, end;
1041
1042                 start = get_cycles();
1043                 ret = do_mult_acipher_op(data, enc, num_mb, rc);
1044                 end = get_cycles();
1045
1046                 if (ret)
1047                         goto out;
1048
1049                 cycles += end - start;
1050         }
1051
1052         pr_cont("1 operation in %lu cycles (%d bytes)\n",
1053                 (cycles + 4) / (8 * num_mb), blen);
1054
1055 out:
1056         kfree(rc);
1057         return ret;
1058 }
1059
1060 static void test_mb_skcipher_speed(const char *algo, int enc, int secs,
1061                                    struct cipher_speed_template *template,
1062                                    unsigned int tcount, u8 *keysize, u32 num_mb)
1063 {
1064         struct test_mb_skcipher_data *data;
1065         struct crypto_skcipher *tfm;
1066         unsigned int i, j, iv_len;
1067         const int *b_size;
1068         const char *key;
1069         const char *e;
1070         char iv[128];
1071         int ret;
1072
1073         if (enc == ENCRYPT)
1074                 e = "encryption";
1075         else
1076                 e = "decryption";
1077
1078         data = kcalloc(num_mb, sizeof(*data), GFP_KERNEL);
1079         if (!data)
1080                 return;
1081
1082         tfm = crypto_alloc_skcipher(algo, 0, 0);
1083         if (IS_ERR(tfm)) {
1084                 pr_err("failed to load transform for %s: %ld\n",
1085                         algo, PTR_ERR(tfm));
1086                 goto out_free_data;
1087         }
1088
1089         for (i = 0; i < num_mb; ++i)
1090                 if (testmgr_alloc_buf(data[i].xbuf)) {
1091                         while (i--)
1092                                 testmgr_free_buf(data[i].xbuf);
1093                         goto out_free_tfm;
1094                 }
1095
1096         for (i = 0; i < num_mb; ++i) {
1097                 data[i].req = skcipher_request_alloc(tfm, GFP_KERNEL);
1098                 if (!data[i].req) {
1099                         pr_err("alg: skcipher: Failed to allocate request for %s\n",
1100                                algo);
1101                         while (i--)
1102                                 skcipher_request_free(data[i].req);
1103                         goto out_free_xbuf;
1104                 }
1105         }
1106
1107         for (i = 0; i < num_mb; ++i) {
1108                 skcipher_request_set_callback(data[i].req,
1109                                               CRYPTO_TFM_REQ_MAY_BACKLOG,
1110                                               crypto_req_done, &data[i].wait);
1111                 crypto_init_wait(&data[i].wait);
1112         }
1113
1114         pr_info("testing speed of multibuffer %s (%s) %s\n", algo,
1115                 get_driver_name(crypto_skcipher, tfm), e);
1116
1117         i = 0;
1118         do {
1119                 b_size = block_sizes;
1120                 do {
1121                         u32 bs = round_up(*b_size, crypto_skcipher_blocksize(tfm));
1122
1123                         if (bs > XBUFSIZE * PAGE_SIZE) {
1124                                 pr_err("template (%u) too big for buffer (%lu)\n",
1125                                        bs, XBUFSIZE * PAGE_SIZE);
1126                                 goto out;
1127                         }
1128
1129                         pr_info("test %u (%d bit key, %d byte blocks): ", i,
1130                                 *keysize * 8, bs);
1131
1132                         /* Set up tfm global state, i.e. the key */
1133
1134                         memset(tvmem[0], 0xff, PAGE_SIZE);
1135                         key = tvmem[0];
1136                         for (j = 0; j < tcount; j++) {
1137                                 if (template[j].klen == *keysize) {
1138                                         key = template[j].key;
1139                                         break;
1140                                 }
1141                         }
1142
1143                         crypto_skcipher_clear_flags(tfm, ~0);
1144
1145                         ret = crypto_skcipher_setkey(tfm, key, *keysize);
1146                         if (ret) {
1147                                 pr_err("setkey() failed flags=%x\n",
1148                                        crypto_skcipher_get_flags(tfm));
1149                                 goto out;
1150                         }
1151
1152                         iv_len = crypto_skcipher_ivsize(tfm);
1153                         if (iv_len)
1154                                 memset(&iv, 0xff, iv_len);
1155
1156                         /* Now setup per request stuff, i.e. buffers */
1157
1158                         for (j = 0; j < num_mb; ++j) {
1159                                 struct test_mb_skcipher_data *cur = &data[j];
1160                                 unsigned int k = bs;
1161                                 unsigned int pages = DIV_ROUND_UP(k, PAGE_SIZE);
1162                                 unsigned int p = 0;
1163
1164                                 sg_init_table(cur->sg, pages);
1165
1166                                 while (k > PAGE_SIZE) {
1167                                         sg_set_buf(cur->sg + p, cur->xbuf[p],
1168                                                    PAGE_SIZE);
1169                                         memset(cur->xbuf[p], 0xff, PAGE_SIZE);
1170                                         p++;
1171                                         k -= PAGE_SIZE;
1172                                 }
1173
1174                                 sg_set_buf(cur->sg + p, cur->xbuf[p], k);
1175                                 memset(cur->xbuf[p], 0xff, k);
1176
1177                                 skcipher_request_set_crypt(cur->req, cur->sg,
1178                                                            cur->sg, bs, iv);
1179                         }
1180
1181                         if (secs) {
1182                                 ret = test_mb_acipher_jiffies(data, enc,
1183                                                               bs, secs,
1184                                                               num_mb);
1185                                 cond_resched();
1186                         } else {
1187                                 ret = test_mb_acipher_cycles(data, enc,
1188                                                              bs, num_mb);
1189                         }
1190
1191                         if (ret) {
1192                                 pr_err("%s() failed flags=%x\n", e,
1193                                        crypto_skcipher_get_flags(tfm));
1194                                 break;
1195                         }
1196                         b_size++;
1197                         i++;
1198                 } while (*b_size);
1199                 keysize++;
1200         } while (*keysize);
1201
1202 out:
1203         for (i = 0; i < num_mb; ++i)
1204                 skcipher_request_free(data[i].req);
1205 out_free_xbuf:
1206         for (i = 0; i < num_mb; ++i)
1207                 testmgr_free_buf(data[i].xbuf);
1208 out_free_tfm:
1209         crypto_free_skcipher(tfm);
1210 out_free_data:
1211         kfree(data);
1212 }
1213
1214 static inline int do_one_acipher_op(struct skcipher_request *req, int ret)
1215 {
1216         struct crypto_wait *wait = req->base.data;
1217
1218         return crypto_wait_req(ret, wait);
1219 }
1220
1221 static int test_acipher_jiffies(struct skcipher_request *req, int enc,
1222                                 int blen, int secs)
1223 {
1224         unsigned long start, end;
1225         int bcount;
1226         int ret;
1227
1228         for (start = jiffies, end = start + secs * HZ, bcount = 0;
1229              time_before(jiffies, end); bcount++) {
1230                 if (enc)
1231                         ret = do_one_acipher_op(req,
1232                                                 crypto_skcipher_encrypt(req));
1233                 else
1234                         ret = do_one_acipher_op(req,
1235                                                 crypto_skcipher_decrypt(req));
1236
1237                 if (ret)
1238                         return ret;
1239         }
1240
1241         pr_cont("%d operations in %d seconds (%llu bytes)\n",
1242                 bcount, secs, (u64)bcount * blen);
1243         return 0;
1244 }
1245
1246 static int test_acipher_cycles(struct skcipher_request *req, int enc,
1247                                int blen)
1248 {
1249         unsigned long cycles = 0;
1250         int ret = 0;
1251         int i;
1252
1253         /* Warm-up run. */
1254         for (i = 0; i < 4; i++) {
1255                 if (enc)
1256                         ret = do_one_acipher_op(req,
1257                                                 crypto_skcipher_encrypt(req));
1258                 else
1259                         ret = do_one_acipher_op(req,
1260                                                 crypto_skcipher_decrypt(req));
1261
1262                 if (ret)
1263                         goto out;
1264         }
1265
1266         /* The real thing. */
1267         for (i = 0; i < 8; i++) {
1268                 cycles_t start, end;
1269
1270                 start = get_cycles();
1271                 if (enc)
1272                         ret = do_one_acipher_op(req,
1273                                                 crypto_skcipher_encrypt(req));
1274                 else
1275                         ret = do_one_acipher_op(req,
1276                                                 crypto_skcipher_decrypt(req));
1277                 end = get_cycles();
1278
1279                 if (ret)
1280                         goto out;
1281
1282                 cycles += end - start;
1283         }
1284
1285 out:
1286         if (ret == 0)
1287                 pr_cont("1 operation in %lu cycles (%d bytes)\n",
1288                         (cycles + 4) / 8, blen);
1289
1290         return ret;
1291 }
1292
1293 static void test_skcipher_speed(const char *algo, int enc, unsigned int secs,
1294                                 struct cipher_speed_template *template,
1295                                 unsigned int tcount, u8 *keysize, bool async)
1296 {
1297         unsigned int ret, i, j, k, iv_len;
1298         struct crypto_wait wait;
1299         const char *key;
1300         char iv[128];
1301         struct skcipher_request *req;
1302         struct crypto_skcipher *tfm;
1303         const int *b_size;
1304         const char *e;
1305
1306         if (enc == ENCRYPT)
1307                 e = "encryption";
1308         else
1309                 e = "decryption";
1310
1311         crypto_init_wait(&wait);
1312
1313         tfm = crypto_alloc_skcipher(algo, 0, async ? 0 : CRYPTO_ALG_ASYNC);
1314
1315         if (IS_ERR(tfm)) {
1316                 pr_err("failed to load transform for %s: %ld\n", algo,
1317                        PTR_ERR(tfm));
1318                 return;
1319         }
1320
1321         pr_info("testing speed of %s %s (%s) %s\n", async ? "async" : "sync",
1322                 algo, get_driver_name(crypto_skcipher, tfm), e);
1323
1324         req = skcipher_request_alloc(tfm, GFP_KERNEL);
1325         if (!req) {
1326                 pr_err("skcipher: Failed to allocate request for %s\n", algo);
1327                 goto out;
1328         }
1329
1330         skcipher_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
1331                                       crypto_req_done, &wait);
1332
1333         i = 0;
1334         do {
1335                 b_size = block_sizes;
1336
1337                 do {
1338                         u32 bs = round_up(*b_size, crypto_skcipher_blocksize(tfm));
1339                         struct scatterlist sg[TVMEMSIZE];
1340
1341                         if ((*keysize + bs) > TVMEMSIZE * PAGE_SIZE) {
1342                                 pr_err("template (%u) too big for "
1343                                        "tvmem (%lu)\n", *keysize + bs,
1344                                        TVMEMSIZE * PAGE_SIZE);
1345                                 goto out_free_req;
1346                         }
1347
1348                         pr_info("test %u (%d bit key, %d byte blocks): ", i,
1349                                 *keysize * 8, bs);
1350
1351                         memset(tvmem[0], 0xff, PAGE_SIZE);
1352
1353                         /* set key, plain text and IV */
1354                         key = tvmem[0];
1355                         for (j = 0; j < tcount; j++) {
1356                                 if (template[j].klen == *keysize) {
1357                                         key = template[j].key;
1358                                         break;
1359                                 }
1360                         }
1361
1362                         crypto_skcipher_clear_flags(tfm, ~0);
1363
1364                         ret = crypto_skcipher_setkey(tfm, key, *keysize);
1365                         if (ret) {
1366                                 pr_err("setkey() failed flags=%x\n",
1367                                         crypto_skcipher_get_flags(tfm));
1368                                 goto out_free_req;
1369                         }
1370
1371                         k = *keysize + bs;
1372                         sg_init_table(sg, DIV_ROUND_UP(k, PAGE_SIZE));
1373
1374                         if (k > PAGE_SIZE) {
1375                                 sg_set_buf(sg, tvmem[0] + *keysize,
1376                                    PAGE_SIZE - *keysize);
1377                                 k -= PAGE_SIZE;
1378                                 j = 1;
1379                                 while (k > PAGE_SIZE) {
1380                                         sg_set_buf(sg + j, tvmem[j], PAGE_SIZE);
1381                                         memset(tvmem[j], 0xff, PAGE_SIZE);
1382                                         j++;
1383                                         k -= PAGE_SIZE;
1384                                 }
1385                                 sg_set_buf(sg + j, tvmem[j], k);
1386                                 memset(tvmem[j], 0xff, k);
1387                         } else {
1388                                 sg_set_buf(sg, tvmem[0] + *keysize, bs);
1389                         }
1390
1391                         iv_len = crypto_skcipher_ivsize(tfm);
1392                         if (iv_len)
1393                                 memset(&iv, 0xff, iv_len);
1394
1395                         skcipher_request_set_crypt(req, sg, sg, bs, iv);
1396
1397                         if (secs) {
1398                                 ret = test_acipher_jiffies(req, enc,
1399                                                            bs, secs);
1400                                 cond_resched();
1401                         } else {
1402                                 ret = test_acipher_cycles(req, enc,
1403                                                           bs);
1404                         }
1405
1406                         if (ret) {
1407                                 pr_err("%s() failed flags=%x\n", e,
1408                                        crypto_skcipher_get_flags(tfm));
1409                                 break;
1410                         }
1411                         b_size++;
1412                         i++;
1413                 } while (*b_size);
1414                 keysize++;
1415         } while (*keysize);
1416
1417 out_free_req:
1418         skcipher_request_free(req);
1419 out:
1420         crypto_free_skcipher(tfm);
1421 }
1422
1423 static void test_acipher_speed(const char *algo, int enc, unsigned int secs,
1424                                struct cipher_speed_template *template,
1425                                unsigned int tcount, u8 *keysize)
1426 {
1427         return test_skcipher_speed(algo, enc, secs, template, tcount, keysize,
1428                                    true);
1429 }
1430
1431 static void test_cipher_speed(const char *algo, int enc, unsigned int secs,
1432                               struct cipher_speed_template *template,
1433                               unsigned int tcount, u8 *keysize)
1434 {
1435         return test_skcipher_speed(algo, enc, secs, template, tcount, keysize,
1436                                    false);
1437 }
1438
1439 static inline int tcrypt_test(const char *alg)
1440 {
1441         int ret;
1442
1443         pr_debug("testing %s\n", alg);
1444
1445         ret = alg_test(alg, alg, 0, 0);
1446         /* non-fips algs return -EINVAL or -ECANCELED in fips mode */
1447         if (fips_enabled && (ret == -EINVAL || ret == -ECANCELED))
1448                 ret = 0;
1449         return ret;
1450 }
1451
1452 static int do_test(const char *alg, u32 type, u32 mask, int m, u32 num_mb)
1453 {
1454         int i;
1455         int ret = 0;
1456
1457         switch (m) {
1458         case 0:
1459                 if (alg) {
1460                         if (!crypto_has_alg(alg, type,
1461                                             mask ?: CRYPTO_ALG_TYPE_MASK))
1462                                 ret = -ENOENT;
1463                         break;
1464                 }
1465
1466                 for (i = 1; i < 200; i++)
1467                         ret = min(ret, do_test(NULL, 0, 0, i, num_mb));
1468                 break;
1469
1470         case 1:
1471                 ret = min(ret, tcrypt_test("md5"));
1472                 break;
1473
1474         case 2:
1475                 ret = min(ret, tcrypt_test("sha1"));
1476                 break;
1477
1478         case 3:
1479                 ret = min(ret, tcrypt_test("ecb(des)"));
1480                 ret = min(ret, tcrypt_test("cbc(des)"));
1481                 ret = min(ret, tcrypt_test("ctr(des)"));
1482                 break;
1483
1484         case 4:
1485                 ret = min(ret, tcrypt_test("ecb(des3_ede)"));
1486                 ret = min(ret, tcrypt_test("cbc(des3_ede)"));
1487                 ret = min(ret, tcrypt_test("ctr(des3_ede)"));
1488                 break;
1489
1490         case 5:
1491                 ret = min(ret, tcrypt_test("md4"));
1492                 break;
1493
1494         case 6:
1495                 ret = min(ret, tcrypt_test("sha256"));
1496                 break;
1497
1498         case 7:
1499                 ret = min(ret, tcrypt_test("ecb(blowfish)"));
1500                 ret = min(ret, tcrypt_test("cbc(blowfish)"));
1501                 ret = min(ret, tcrypt_test("ctr(blowfish)"));
1502                 break;
1503
1504         case 8:
1505                 ret = min(ret, tcrypt_test("ecb(twofish)"));
1506                 ret = min(ret, tcrypt_test("cbc(twofish)"));
1507                 ret = min(ret, tcrypt_test("ctr(twofish)"));
1508                 ret = min(ret, tcrypt_test("lrw(twofish)"));
1509                 ret = min(ret, tcrypt_test("xts(twofish)"));
1510                 break;
1511
1512         case 9:
1513                 ret = min(ret, tcrypt_test("ecb(serpent)"));
1514                 ret = min(ret, tcrypt_test("cbc(serpent)"));
1515                 ret = min(ret, tcrypt_test("ctr(serpent)"));
1516                 ret = min(ret, tcrypt_test("lrw(serpent)"));
1517                 ret = min(ret, tcrypt_test("xts(serpent)"));
1518                 break;
1519
1520         case 10:
1521                 ret = min(ret, tcrypt_test("ecb(aes)"));
1522                 ret = min(ret, tcrypt_test("cbc(aes)"));
1523                 ret = min(ret, tcrypt_test("lrw(aes)"));
1524                 ret = min(ret, tcrypt_test("xts(aes)"));
1525                 ret = min(ret, tcrypt_test("ctr(aes)"));
1526                 ret = min(ret, tcrypt_test("rfc3686(ctr(aes))"));
1527                 ret = min(ret, tcrypt_test("xctr(aes)"));
1528                 break;
1529
1530         case 11:
1531                 ret = min(ret, tcrypt_test("sha384"));
1532                 break;
1533
1534         case 12:
1535                 ret = min(ret, tcrypt_test("sha512"));
1536                 break;
1537
1538         case 13:
1539                 ret = min(ret, tcrypt_test("deflate"));
1540                 break;
1541
1542         case 14:
1543                 ret = min(ret, tcrypt_test("ecb(cast5)"));
1544                 ret = min(ret, tcrypt_test("cbc(cast5)"));
1545                 ret = min(ret, tcrypt_test("ctr(cast5)"));
1546                 break;
1547
1548         case 15:
1549                 ret = min(ret, tcrypt_test("ecb(cast6)"));
1550                 ret = min(ret, tcrypt_test("cbc(cast6)"));
1551                 ret = min(ret, tcrypt_test("ctr(cast6)"));
1552                 ret = min(ret, tcrypt_test("lrw(cast6)"));
1553                 ret = min(ret, tcrypt_test("xts(cast6)"));
1554                 break;
1555
1556         case 16:
1557                 ret = min(ret, tcrypt_test("ecb(arc4)"));
1558                 break;
1559
1560         case 17:
1561                 ret = min(ret, tcrypt_test("michael_mic"));
1562                 break;
1563
1564         case 18:
1565                 ret = min(ret, tcrypt_test("crc32c"));
1566                 break;
1567
1568         case 19:
1569                 ret = min(ret, tcrypt_test("ecb(tea)"));
1570                 break;
1571
1572         case 20:
1573                 ret = min(ret, tcrypt_test("ecb(xtea)"));
1574                 break;
1575
1576         case 21:
1577                 ret = min(ret, tcrypt_test("ecb(khazad)"));
1578                 break;
1579
1580         case 22:
1581                 ret = min(ret, tcrypt_test("wp512"));
1582                 break;
1583
1584         case 23:
1585                 ret = min(ret, tcrypt_test("wp384"));
1586                 break;
1587
1588         case 24:
1589                 ret = min(ret, tcrypt_test("wp256"));
1590                 break;
1591
1592         case 26:
1593                 ret = min(ret, tcrypt_test("ecb(anubis)"));
1594                 ret = min(ret, tcrypt_test("cbc(anubis)"));
1595                 break;
1596
1597         case 30:
1598                 ret = min(ret, tcrypt_test("ecb(xeta)"));
1599                 break;
1600
1601         case 31:
1602                 ret = min(ret, tcrypt_test("pcbc(fcrypt)"));
1603                 break;
1604
1605         case 32:
1606                 ret = min(ret, tcrypt_test("ecb(camellia)"));
1607                 ret = min(ret, tcrypt_test("cbc(camellia)"));
1608                 ret = min(ret, tcrypt_test("ctr(camellia)"));
1609                 ret = min(ret, tcrypt_test("lrw(camellia)"));
1610                 ret = min(ret, tcrypt_test("xts(camellia)"));
1611                 break;
1612
1613         case 33:
1614                 ret = min(ret, tcrypt_test("sha224"));
1615                 break;
1616
1617         case 35:
1618                 ret = min(ret, tcrypt_test("gcm(aes)"));
1619                 break;
1620
1621         case 36:
1622                 ret = min(ret, tcrypt_test("lzo"));
1623                 break;
1624
1625         case 37:
1626                 ret = min(ret, tcrypt_test("ccm(aes)"));
1627                 break;
1628
1629         case 38:
1630                 ret = min(ret, tcrypt_test("cts(cbc(aes))"));
1631                 break;
1632
1633         case 39:
1634                 ret = min(ret, tcrypt_test("xxhash64"));
1635                 break;
1636
1637         case 40:
1638                 ret = min(ret, tcrypt_test("rmd160"));
1639                 break;
1640
1641         case 42:
1642                 ret = min(ret, tcrypt_test("blake2b-512"));
1643                 break;
1644
1645         case 43:
1646                 ret = min(ret, tcrypt_test("ecb(seed)"));
1647                 break;
1648
1649         case 45:
1650                 ret = min(ret, tcrypt_test("rfc4309(ccm(aes))"));
1651                 break;
1652
1653         case 46:
1654                 ret = min(ret, tcrypt_test("ghash"));
1655                 break;
1656
1657         case 47:
1658                 ret = min(ret, tcrypt_test("crct10dif"));
1659                 break;
1660
1661         case 48:
1662                 ret = min(ret, tcrypt_test("sha3-224"));
1663                 break;
1664
1665         case 49:
1666                 ret = min(ret, tcrypt_test("sha3-256"));
1667                 break;
1668
1669         case 50:
1670                 ret = min(ret, tcrypt_test("sha3-384"));
1671                 break;
1672
1673         case 51:
1674                 ret = min(ret, tcrypt_test("sha3-512"));
1675                 break;
1676
1677         case 52:
1678                 ret = min(ret, tcrypt_test("sm3"));
1679                 break;
1680
1681         case 53:
1682                 ret = min(ret, tcrypt_test("streebog256"));
1683                 break;
1684
1685         case 54:
1686                 ret = min(ret, tcrypt_test("streebog512"));
1687                 break;
1688
1689         case 55:
1690                 ret = min(ret, tcrypt_test("gcm(sm4)"));
1691                 break;
1692
1693         case 56:
1694                 ret = min(ret, tcrypt_test("ccm(sm4)"));
1695                 break;
1696
1697         case 57:
1698                 ret = min(ret, tcrypt_test("polyval"));
1699                 break;
1700
1701         case 58:
1702                 ret = min(ret, tcrypt_test("gcm(aria)"));
1703                 break;
1704
1705         case 59:
1706                 ret = min(ret, tcrypt_test("cts(cbc(sm4))"));
1707                 break;
1708
1709         case 100:
1710                 ret = min(ret, tcrypt_test("hmac(md5)"));
1711                 break;
1712
1713         case 101:
1714                 ret = min(ret, tcrypt_test("hmac(sha1)"));
1715                 break;
1716
1717         case 102:
1718                 ret = min(ret, tcrypt_test("hmac(sha256)"));
1719                 break;
1720
1721         case 103:
1722                 ret = min(ret, tcrypt_test("hmac(sha384)"));
1723                 break;
1724
1725         case 104:
1726                 ret = min(ret, tcrypt_test("hmac(sha512)"));
1727                 break;
1728
1729         case 105:
1730                 ret = min(ret, tcrypt_test("hmac(sha224)"));
1731                 break;
1732
1733         case 106:
1734                 ret = min(ret, tcrypt_test("xcbc(aes)"));
1735                 break;
1736
1737         case 108:
1738                 ret = min(ret, tcrypt_test("hmac(rmd160)"));
1739                 break;
1740
1741         case 109:
1742                 ret = min(ret, tcrypt_test("vmac64(aes)"));
1743                 break;
1744
1745         case 111:
1746                 ret = min(ret, tcrypt_test("hmac(sha3-224)"));
1747                 break;
1748
1749         case 112:
1750                 ret = min(ret, tcrypt_test("hmac(sha3-256)"));
1751                 break;
1752
1753         case 113:
1754                 ret = min(ret, tcrypt_test("hmac(sha3-384)"));
1755                 break;
1756
1757         case 114:
1758                 ret = min(ret, tcrypt_test("hmac(sha3-512)"));
1759                 break;
1760
1761         case 115:
1762                 ret = min(ret, tcrypt_test("hmac(streebog256)"));
1763                 break;
1764
1765         case 116:
1766                 ret = min(ret, tcrypt_test("hmac(streebog512)"));
1767                 break;
1768
1769         case 150:
1770                 ret = min(ret, tcrypt_test("ansi_cprng"));
1771                 break;
1772
1773         case 151:
1774                 ret = min(ret, tcrypt_test("rfc4106(gcm(aes))"));
1775                 break;
1776
1777         case 152:
1778                 ret = min(ret, tcrypt_test("rfc4543(gcm(aes))"));
1779                 break;
1780
1781         case 153:
1782                 ret = min(ret, tcrypt_test("cmac(aes)"));
1783                 break;
1784
1785         case 154:
1786                 ret = min(ret, tcrypt_test("cmac(des3_ede)"));
1787                 break;
1788
1789         case 155:
1790                 ret = min(ret, tcrypt_test("authenc(hmac(sha1),cbc(aes))"));
1791                 break;
1792
1793         case 156:
1794                 ret = min(ret, tcrypt_test("authenc(hmac(md5),ecb(cipher_null))"));
1795                 break;
1796
1797         case 157:
1798                 ret = min(ret, tcrypt_test("authenc(hmac(sha1),ecb(cipher_null))"));
1799                 break;
1800
1801         case 158:
1802                 ret = min(ret, tcrypt_test("cbcmac(sm4)"));
1803                 break;
1804
1805         case 159:
1806                 ret = min(ret, tcrypt_test("cmac(sm4)"));
1807                 break;
1808
1809         case 160:
1810                 ret = min(ret, tcrypt_test("xcbc(sm4)"));
1811                 break;
1812
1813         case 181:
1814                 ret = min(ret, tcrypt_test("authenc(hmac(sha1),cbc(des))"));
1815                 break;
1816         case 182:
1817                 ret = min(ret, tcrypt_test("authenc(hmac(sha1),cbc(des3_ede))"));
1818                 break;
1819         case 183:
1820                 ret = min(ret, tcrypt_test("authenc(hmac(sha224),cbc(des))"));
1821                 break;
1822         case 184:
1823                 ret = min(ret, tcrypt_test("authenc(hmac(sha224),cbc(des3_ede))"));
1824                 break;
1825         case 185:
1826                 ret = min(ret, tcrypt_test("authenc(hmac(sha256),cbc(des))"));
1827                 break;
1828         case 186:
1829                 ret = min(ret, tcrypt_test("authenc(hmac(sha256),cbc(des3_ede))"));
1830                 break;
1831         case 187:
1832                 ret = min(ret, tcrypt_test("authenc(hmac(sha384),cbc(des))"));
1833                 break;
1834         case 188:
1835                 ret = min(ret, tcrypt_test("authenc(hmac(sha384),cbc(des3_ede))"));
1836                 break;
1837         case 189:
1838                 ret = min(ret, tcrypt_test("authenc(hmac(sha512),cbc(des))"));
1839                 break;
1840         case 190:
1841                 ret = min(ret, tcrypt_test("authenc(hmac(sha512),cbc(des3_ede))"));
1842                 break;
1843         case 191:
1844                 ret = min(ret, tcrypt_test("ecb(sm4)"));
1845                 ret = min(ret, tcrypt_test("cbc(sm4)"));
1846                 ret = min(ret, tcrypt_test("ctr(sm4)"));
1847                 ret = min(ret, tcrypt_test("xts(sm4)"));
1848                 break;
1849         case 192:
1850                 ret = min(ret, tcrypt_test("ecb(aria)"));
1851                 ret = min(ret, tcrypt_test("cbc(aria)"));
1852                 ret = min(ret, tcrypt_test("ctr(aria)"));
1853                 break;
1854         case 200:
1855                 test_cipher_speed("ecb(aes)", ENCRYPT, sec, NULL, 0,
1856                                 speed_template_16_24_32);
1857                 test_cipher_speed("ecb(aes)", DECRYPT, sec, NULL, 0,
1858                                 speed_template_16_24_32);
1859                 test_cipher_speed("cbc(aes)", ENCRYPT, sec, NULL, 0,
1860                                 speed_template_16_24_32);
1861                 test_cipher_speed("cbc(aes)", DECRYPT, sec, NULL, 0,
1862                                 speed_template_16_24_32);
1863                 test_cipher_speed("lrw(aes)", ENCRYPT, sec, NULL, 0,
1864                                 speed_template_32_40_48);
1865                 test_cipher_speed("lrw(aes)", DECRYPT, sec, NULL, 0,
1866                                 speed_template_32_40_48);
1867                 test_cipher_speed("xts(aes)", ENCRYPT, sec, NULL, 0,
1868                                 speed_template_32_64);
1869                 test_cipher_speed("xts(aes)", DECRYPT, sec, NULL, 0,
1870                                 speed_template_32_64);
1871                 test_cipher_speed("cts(cbc(aes))", ENCRYPT, sec, NULL, 0,
1872                                 speed_template_16_24_32);
1873                 test_cipher_speed("cts(cbc(aes))", DECRYPT, sec, NULL, 0,
1874                                 speed_template_16_24_32);
1875                 test_cipher_speed("ctr(aes)", ENCRYPT, sec, NULL, 0,
1876                                 speed_template_16_24_32);
1877                 test_cipher_speed("ctr(aes)", DECRYPT, sec, NULL, 0,
1878                                 speed_template_16_24_32);
1879                 break;
1880
1881         case 201:
1882                 test_cipher_speed("ecb(des3_ede)", ENCRYPT, sec,
1883                                 des3_speed_template, DES3_SPEED_VECTORS,
1884                                 speed_template_24);
1885                 test_cipher_speed("ecb(des3_ede)", DECRYPT, sec,
1886                                 des3_speed_template, DES3_SPEED_VECTORS,
1887                                 speed_template_24);
1888                 test_cipher_speed("cbc(des3_ede)", ENCRYPT, sec,
1889                                 des3_speed_template, DES3_SPEED_VECTORS,
1890                                 speed_template_24);
1891                 test_cipher_speed("cbc(des3_ede)", DECRYPT, sec,
1892                                 des3_speed_template, DES3_SPEED_VECTORS,
1893                                 speed_template_24);
1894                 test_cipher_speed("ctr(des3_ede)", ENCRYPT, sec,
1895                                 des3_speed_template, DES3_SPEED_VECTORS,
1896                                 speed_template_24);
1897                 test_cipher_speed("ctr(des3_ede)", DECRYPT, sec,
1898                                 des3_speed_template, DES3_SPEED_VECTORS,
1899                                 speed_template_24);
1900                 break;
1901
1902         case 202:
1903                 test_cipher_speed("ecb(twofish)", ENCRYPT, sec, NULL, 0,
1904                                 speed_template_16_24_32);
1905                 test_cipher_speed("ecb(twofish)", DECRYPT, sec, NULL, 0,
1906                                 speed_template_16_24_32);
1907                 test_cipher_speed("cbc(twofish)", ENCRYPT, sec, NULL, 0,
1908                                 speed_template_16_24_32);
1909                 test_cipher_speed("cbc(twofish)", DECRYPT, sec, NULL, 0,
1910                                 speed_template_16_24_32);
1911                 test_cipher_speed("ctr(twofish)", ENCRYPT, sec, NULL, 0,
1912                                 speed_template_16_24_32);
1913                 test_cipher_speed("ctr(twofish)", DECRYPT, sec, NULL, 0,
1914                                 speed_template_16_24_32);
1915                 test_cipher_speed("lrw(twofish)", ENCRYPT, sec, NULL, 0,
1916                                 speed_template_32_40_48);
1917                 test_cipher_speed("lrw(twofish)", DECRYPT, sec, NULL, 0,
1918                                 speed_template_32_40_48);
1919                 test_cipher_speed("xts(twofish)", ENCRYPT, sec, NULL, 0,
1920                                 speed_template_32_48_64);
1921                 test_cipher_speed("xts(twofish)", DECRYPT, sec, NULL, 0,
1922                                 speed_template_32_48_64);
1923                 break;
1924
1925         case 203:
1926                 test_cipher_speed("ecb(blowfish)", ENCRYPT, sec, NULL, 0,
1927                                   speed_template_8_32);
1928                 test_cipher_speed("ecb(blowfish)", DECRYPT, sec, NULL, 0,
1929                                   speed_template_8_32);
1930                 test_cipher_speed("cbc(blowfish)", ENCRYPT, sec, NULL, 0,
1931                                   speed_template_8_32);
1932                 test_cipher_speed("cbc(blowfish)", DECRYPT, sec, NULL, 0,
1933                                   speed_template_8_32);
1934                 test_cipher_speed("ctr(blowfish)", ENCRYPT, sec, NULL, 0,
1935                                   speed_template_8_32);
1936                 test_cipher_speed("ctr(blowfish)", DECRYPT, sec, NULL, 0,
1937                                   speed_template_8_32);
1938                 break;
1939
1940         case 204:
1941                 test_cipher_speed("ecb(des)", ENCRYPT, sec, NULL, 0,
1942                                   speed_template_8);
1943                 test_cipher_speed("ecb(des)", DECRYPT, sec, NULL, 0,
1944                                   speed_template_8);
1945                 test_cipher_speed("cbc(des)", ENCRYPT, sec, NULL, 0,
1946                                   speed_template_8);
1947                 test_cipher_speed("cbc(des)", DECRYPT, sec, NULL, 0,
1948                                   speed_template_8);
1949                 break;
1950
1951         case 205:
1952                 test_cipher_speed("ecb(camellia)", ENCRYPT, sec, NULL, 0,
1953                                 speed_template_16_24_32);
1954                 test_cipher_speed("ecb(camellia)", DECRYPT, sec, NULL, 0,
1955                                 speed_template_16_24_32);
1956                 test_cipher_speed("cbc(camellia)", ENCRYPT, sec, NULL, 0,
1957                                 speed_template_16_24_32);
1958                 test_cipher_speed("cbc(camellia)", DECRYPT, sec, NULL, 0,
1959                                 speed_template_16_24_32);
1960                 test_cipher_speed("ctr(camellia)", ENCRYPT, sec, NULL, 0,
1961                                 speed_template_16_24_32);
1962                 test_cipher_speed("ctr(camellia)", DECRYPT, sec, NULL, 0,
1963                                 speed_template_16_24_32);
1964                 test_cipher_speed("lrw(camellia)", ENCRYPT, sec, NULL, 0,
1965                                 speed_template_32_40_48);
1966                 test_cipher_speed("lrw(camellia)", DECRYPT, sec, NULL, 0,
1967                                 speed_template_32_40_48);
1968                 test_cipher_speed("xts(camellia)", ENCRYPT, sec, NULL, 0,
1969                                 speed_template_32_48_64);
1970                 test_cipher_speed("xts(camellia)", DECRYPT, sec, NULL, 0,
1971                                 speed_template_32_48_64);
1972                 break;
1973
1974         case 207:
1975                 test_cipher_speed("ecb(serpent)", ENCRYPT, sec, NULL, 0,
1976                                   speed_template_16_32);
1977                 test_cipher_speed("ecb(serpent)", DECRYPT, sec, NULL, 0,
1978                                   speed_template_16_32);
1979                 test_cipher_speed("cbc(serpent)", ENCRYPT, sec, NULL, 0,
1980                                   speed_template_16_32);
1981                 test_cipher_speed("cbc(serpent)", DECRYPT, sec, NULL, 0,
1982                                   speed_template_16_32);
1983                 test_cipher_speed("ctr(serpent)", ENCRYPT, sec, NULL, 0,
1984                                   speed_template_16_32);
1985                 test_cipher_speed("ctr(serpent)", DECRYPT, sec, NULL, 0,
1986                                   speed_template_16_32);
1987                 test_cipher_speed("lrw(serpent)", ENCRYPT, sec, NULL, 0,
1988                                   speed_template_32_48);
1989                 test_cipher_speed("lrw(serpent)", DECRYPT, sec, NULL, 0,
1990                                   speed_template_32_48);
1991                 test_cipher_speed("xts(serpent)", ENCRYPT, sec, NULL, 0,
1992                                   speed_template_32_64);
1993                 test_cipher_speed("xts(serpent)", DECRYPT, sec, NULL, 0,
1994                                   speed_template_32_64);
1995                 break;
1996
1997         case 208:
1998                 test_cipher_speed("ecb(arc4)", ENCRYPT, sec, NULL, 0,
1999                                   speed_template_8);
2000                 break;
2001
2002         case 209:
2003                 test_cipher_speed("ecb(cast5)", ENCRYPT, sec, NULL, 0,
2004                                   speed_template_8_16);
2005                 test_cipher_speed("ecb(cast5)", DECRYPT, sec, NULL, 0,
2006                                   speed_template_8_16);
2007                 test_cipher_speed("cbc(cast5)", ENCRYPT, sec, NULL, 0,
2008                                   speed_template_8_16);
2009                 test_cipher_speed("cbc(cast5)", DECRYPT, sec, NULL, 0,
2010                                   speed_template_8_16);
2011                 test_cipher_speed("ctr(cast5)", ENCRYPT, sec, NULL, 0,
2012                                   speed_template_8_16);
2013                 test_cipher_speed("ctr(cast5)", DECRYPT, sec, NULL, 0,
2014                                   speed_template_8_16);
2015                 break;
2016
2017         case 210:
2018                 test_cipher_speed("ecb(cast6)", ENCRYPT, sec, NULL, 0,
2019                                   speed_template_16_32);
2020                 test_cipher_speed("ecb(cast6)", DECRYPT, sec, NULL, 0,
2021                                   speed_template_16_32);
2022                 test_cipher_speed("cbc(cast6)", ENCRYPT, sec, NULL, 0,
2023                                   speed_template_16_32);
2024                 test_cipher_speed("cbc(cast6)", DECRYPT, sec, NULL, 0,
2025                                   speed_template_16_32);
2026                 test_cipher_speed("ctr(cast6)", ENCRYPT, sec, NULL, 0,
2027                                   speed_template_16_32);
2028                 test_cipher_speed("ctr(cast6)", DECRYPT, sec, NULL, 0,
2029                                   speed_template_16_32);
2030                 test_cipher_speed("lrw(cast6)", ENCRYPT, sec, NULL, 0,
2031                                   speed_template_32_48);
2032                 test_cipher_speed("lrw(cast6)", DECRYPT, sec, NULL, 0,
2033                                   speed_template_32_48);
2034                 test_cipher_speed("xts(cast6)", ENCRYPT, sec, NULL, 0,
2035                                   speed_template_32_64);
2036                 test_cipher_speed("xts(cast6)", DECRYPT, sec, NULL, 0,
2037                                   speed_template_32_64);
2038                 break;
2039
2040         case 211:
2041                 test_aead_speed("rfc4106(gcm(aes))", ENCRYPT, sec,
2042                                 NULL, 0, 16, 16, aead_speed_template_20_28_36);
2043                 test_aead_speed("gcm(aes)", ENCRYPT, sec,
2044                                 NULL, 0, 16, 8, speed_template_16_24_32);
2045                 test_aead_speed("rfc4106(gcm(aes))", DECRYPT, sec,
2046                                 NULL, 0, 16, 16, aead_speed_template_20_28_36);
2047                 test_aead_speed("gcm(aes)", DECRYPT, sec,
2048                                 NULL, 0, 16, 8, speed_template_16_24_32);
2049                 break;
2050
2051         case 212:
2052                 test_aead_speed("rfc4309(ccm(aes))", ENCRYPT, sec,
2053                                 NULL, 0, 16, 16, aead_speed_template_19);
2054                 test_aead_speed("rfc4309(ccm(aes))", DECRYPT, sec,
2055                                 NULL, 0, 16, 16, aead_speed_template_19);
2056                 break;
2057
2058         case 213:
2059                 test_aead_speed("rfc7539esp(chacha20,poly1305)", ENCRYPT, sec,
2060                                 NULL, 0, 16, 8, aead_speed_template_36);
2061                 test_aead_speed("rfc7539esp(chacha20,poly1305)", DECRYPT, sec,
2062                                 NULL, 0, 16, 8, aead_speed_template_36);
2063                 break;
2064
2065         case 214:
2066                 test_cipher_speed("chacha20", ENCRYPT, sec, NULL, 0,
2067                                   speed_template_32);
2068                 break;
2069
2070         case 215:
2071                 test_mb_aead_speed("rfc4106(gcm(aes))", ENCRYPT, sec, NULL,
2072                                    0, 16, 16, aead_speed_template_20_28_36, num_mb);
2073                 test_mb_aead_speed("gcm(aes)", ENCRYPT, sec, NULL, 0, 16, 8,
2074                                    speed_template_16_24_32, num_mb);
2075                 test_mb_aead_speed("rfc4106(gcm(aes))", DECRYPT, sec, NULL,
2076                                    0, 16, 16, aead_speed_template_20_28_36, num_mb);
2077                 test_mb_aead_speed("gcm(aes)", DECRYPT, sec, NULL, 0, 16, 8,
2078                                    speed_template_16_24_32, num_mb);
2079                 break;
2080
2081         case 216:
2082                 test_mb_aead_speed("rfc4309(ccm(aes))", ENCRYPT, sec, NULL, 0,
2083                                    16, 16, aead_speed_template_19, num_mb);
2084                 test_mb_aead_speed("rfc4309(ccm(aes))", DECRYPT, sec, NULL, 0,
2085                                    16, 16, aead_speed_template_19, num_mb);
2086                 break;
2087
2088         case 217:
2089                 test_mb_aead_speed("rfc7539esp(chacha20,poly1305)", ENCRYPT,
2090                                    sec, NULL, 0, 16, 8, aead_speed_template_36,
2091                                    num_mb);
2092                 test_mb_aead_speed("rfc7539esp(chacha20,poly1305)", DECRYPT,
2093                                    sec, NULL, 0, 16, 8, aead_speed_template_36,
2094                                    num_mb);
2095                 break;
2096
2097         case 218:
2098                 test_cipher_speed("ecb(sm4)", ENCRYPT, sec, NULL, 0,
2099                                 speed_template_16);
2100                 test_cipher_speed("ecb(sm4)", DECRYPT, sec, NULL, 0,
2101                                 speed_template_16);
2102                 test_cipher_speed("cbc(sm4)", ENCRYPT, sec, NULL, 0,
2103                                 speed_template_16);
2104                 test_cipher_speed("cbc(sm4)", DECRYPT, sec, NULL, 0,
2105                                 speed_template_16);
2106                 test_cipher_speed("cts(cbc(sm4))", ENCRYPT, sec, NULL, 0,
2107                                 speed_template_16);
2108                 test_cipher_speed("cts(cbc(sm4))", DECRYPT, sec, NULL, 0,
2109                                 speed_template_16);
2110                 test_cipher_speed("ctr(sm4)", ENCRYPT, sec, NULL, 0,
2111                                 speed_template_16);
2112                 test_cipher_speed("ctr(sm4)", DECRYPT, sec, NULL, 0,
2113                                 speed_template_16);
2114                 test_cipher_speed("xts(sm4)", ENCRYPT, sec, NULL, 0,
2115                                 speed_template_32);
2116                 test_cipher_speed("xts(sm4)", DECRYPT, sec, NULL, 0,
2117                                 speed_template_32);
2118                 break;
2119
2120         case 219:
2121                 test_cipher_speed("adiantum(xchacha12,aes)", ENCRYPT, sec, NULL,
2122                                   0, speed_template_32);
2123                 test_cipher_speed("adiantum(xchacha12,aes)", DECRYPT, sec, NULL,
2124                                   0, speed_template_32);
2125                 test_cipher_speed("adiantum(xchacha20,aes)", ENCRYPT, sec, NULL,
2126                                   0, speed_template_32);
2127                 test_cipher_speed("adiantum(xchacha20,aes)", DECRYPT, sec, NULL,
2128                                   0, speed_template_32);
2129                 break;
2130
2131         case 220:
2132                 test_acipher_speed("essiv(cbc(aes),sha256)",
2133                                   ENCRYPT, sec, NULL, 0,
2134                                   speed_template_16_24_32);
2135                 test_acipher_speed("essiv(cbc(aes),sha256)",
2136                                   DECRYPT, sec, NULL, 0,
2137                                   speed_template_16_24_32);
2138                 break;
2139
2140         case 221:
2141                 test_aead_speed("aegis128", ENCRYPT, sec,
2142                                 NULL, 0, 16, 8, speed_template_16);
2143                 test_aead_speed("aegis128", DECRYPT, sec,
2144                                 NULL, 0, 16, 8, speed_template_16);
2145                 break;
2146
2147         case 222:
2148                 test_aead_speed("gcm(sm4)", ENCRYPT, sec,
2149                                 NULL, 0, 16, 8, speed_template_16);
2150                 test_aead_speed("gcm(sm4)", DECRYPT, sec,
2151                                 NULL, 0, 16, 8, speed_template_16);
2152                 break;
2153
2154         case 223:
2155                 test_aead_speed("rfc4309(ccm(sm4))", ENCRYPT, sec,
2156                                 NULL, 0, 16, 16, aead_speed_template_19);
2157                 test_aead_speed("rfc4309(ccm(sm4))", DECRYPT, sec,
2158                                 NULL, 0, 16, 16, aead_speed_template_19);
2159                 break;
2160
2161         case 224:
2162                 test_mb_aead_speed("gcm(sm4)", ENCRYPT, sec, NULL, 0, 16, 8,
2163                                    speed_template_16, num_mb);
2164                 test_mb_aead_speed("gcm(sm4)", DECRYPT, sec, NULL, 0, 16, 8,
2165                                    speed_template_16, num_mb);
2166                 break;
2167
2168         case 225:
2169                 test_mb_aead_speed("rfc4309(ccm(sm4))", ENCRYPT, sec, NULL, 0,
2170                                    16, 16, aead_speed_template_19, num_mb);
2171                 test_mb_aead_speed("rfc4309(ccm(sm4))", DECRYPT, sec, NULL, 0,
2172                                    16, 16, aead_speed_template_19, num_mb);
2173                 break;
2174
2175         case 226:
2176                 test_cipher_speed("hctr2(aes)", ENCRYPT, sec, NULL,
2177                                   0, speed_template_32);
2178                 break;
2179
2180         case 227:
2181                 test_cipher_speed("ecb(aria)", ENCRYPT, sec, NULL, 0,
2182                                   speed_template_16_24_32);
2183                 test_cipher_speed("ecb(aria)", DECRYPT, sec, NULL, 0,
2184                                   speed_template_16_24_32);
2185                 test_cipher_speed("cbc(aria)", ENCRYPT, sec, NULL, 0,
2186                                   speed_template_16_24_32);
2187                 test_cipher_speed("cbc(aria)", DECRYPT, sec, NULL, 0,
2188                                   speed_template_16_24_32);
2189                 test_cipher_speed("ctr(aria)", ENCRYPT, sec, NULL, 0,
2190                                   speed_template_16_24_32);
2191                 test_cipher_speed("ctr(aria)", DECRYPT, sec, NULL, 0,
2192                                   speed_template_16_24_32);
2193                 break;
2194
2195         case 228:
2196                 test_aead_speed("gcm(aria)", ENCRYPT, sec,
2197                                 NULL, 0, 16, 8, speed_template_16_24_32);
2198                 test_aead_speed("gcm(aria)", DECRYPT, sec,
2199                                 NULL, 0, 16, 8, speed_template_16_24_32);
2200                 break;
2201
2202         case 229:
2203                 test_mb_aead_speed("gcm(aria)", ENCRYPT, sec, NULL, 0, 16, 8,
2204                                    speed_template_16, num_mb);
2205                 test_mb_aead_speed("gcm(aria)", DECRYPT, sec, NULL, 0, 16, 8,
2206                                    speed_template_16, num_mb);
2207                 break;
2208
2209         case 300:
2210                 if (alg) {
2211                         test_hash_speed(alg, sec, generic_hash_speed_template);
2212                         break;
2213                 }
2214                 fallthrough;
2215         case 301:
2216                 test_hash_speed("md4", sec, generic_hash_speed_template);
2217                 if (mode > 300 && mode < 400) break;
2218                 fallthrough;
2219         case 302:
2220                 test_hash_speed("md5", sec, generic_hash_speed_template);
2221                 if (mode > 300 && mode < 400) break;
2222                 fallthrough;
2223         case 303:
2224                 test_hash_speed("sha1", sec, generic_hash_speed_template);
2225                 if (mode > 300 && mode < 400) break;
2226                 fallthrough;
2227         case 304:
2228                 test_hash_speed("sha256", sec, generic_hash_speed_template);
2229                 if (mode > 300 && mode < 400) break;
2230                 fallthrough;
2231         case 305:
2232                 test_hash_speed("sha384", sec, generic_hash_speed_template);
2233                 if (mode > 300 && mode < 400) break;
2234                 fallthrough;
2235         case 306:
2236                 test_hash_speed("sha512", sec, generic_hash_speed_template);
2237                 if (mode > 300 && mode < 400) break;
2238                 fallthrough;
2239         case 307:
2240                 test_hash_speed("wp256", sec, generic_hash_speed_template);
2241                 if (mode > 300 && mode < 400) break;
2242                 fallthrough;
2243         case 308:
2244                 test_hash_speed("wp384", sec, generic_hash_speed_template);
2245                 if (mode > 300 && mode < 400) break;
2246                 fallthrough;
2247         case 309:
2248                 test_hash_speed("wp512", sec, generic_hash_speed_template);
2249                 if (mode > 300 && mode < 400) break;
2250                 fallthrough;
2251         case 313:
2252                 test_hash_speed("sha224", sec, generic_hash_speed_template);
2253                 if (mode > 300 && mode < 400) break;
2254                 fallthrough;
2255         case 314:
2256                 test_hash_speed("xxhash64", sec, generic_hash_speed_template);
2257                 if (mode > 300 && mode < 400) break;
2258                 fallthrough;
2259         case 315:
2260                 test_hash_speed("rmd160", sec, generic_hash_speed_template);
2261                 if (mode > 300 && mode < 400) break;
2262                 fallthrough;
2263         case 317:
2264                 test_hash_speed("blake2b-512", sec, generic_hash_speed_template);
2265                 if (mode > 300 && mode < 400) break;
2266                 fallthrough;
2267         case 318:
2268                 klen = 16;
2269                 test_hash_speed("ghash", sec, generic_hash_speed_template);
2270                 if (mode > 300 && mode < 400) break;
2271                 fallthrough;
2272         case 319:
2273                 test_hash_speed("crc32c", sec, generic_hash_speed_template);
2274                 if (mode > 300 && mode < 400) break;
2275                 fallthrough;
2276         case 320:
2277                 test_hash_speed("crct10dif", sec, generic_hash_speed_template);
2278                 if (mode > 300 && mode < 400) break;
2279                 fallthrough;
2280         case 321:
2281                 test_hash_speed("poly1305", sec, poly1305_speed_template);
2282                 if (mode > 300 && mode < 400) break;
2283                 fallthrough;
2284         case 322:
2285                 test_hash_speed("sha3-224", sec, generic_hash_speed_template);
2286                 if (mode > 300 && mode < 400) break;
2287                 fallthrough;
2288         case 323:
2289                 test_hash_speed("sha3-256", sec, generic_hash_speed_template);
2290                 if (mode > 300 && mode < 400) break;
2291                 fallthrough;
2292         case 324:
2293                 test_hash_speed("sha3-384", sec, generic_hash_speed_template);
2294                 if (mode > 300 && mode < 400) break;
2295                 fallthrough;
2296         case 325:
2297                 test_hash_speed("sha3-512", sec, generic_hash_speed_template);
2298                 if (mode > 300 && mode < 400) break;
2299                 fallthrough;
2300         case 326:
2301                 test_hash_speed("sm3", sec, generic_hash_speed_template);
2302                 if (mode > 300 && mode < 400) break;
2303                 fallthrough;
2304         case 327:
2305                 test_hash_speed("streebog256", sec,
2306                                 generic_hash_speed_template);
2307                 if (mode > 300 && mode < 400) break;
2308                 fallthrough;
2309         case 328:
2310                 test_hash_speed("streebog512", sec,
2311                                 generic_hash_speed_template);
2312                 if (mode > 300 && mode < 400) break;
2313                 fallthrough;
2314         case 399:
2315                 break;
2316
2317         case 400:
2318                 if (alg) {
2319                         test_ahash_speed(alg, sec, generic_hash_speed_template);
2320                         break;
2321                 }
2322                 fallthrough;
2323         case 401:
2324                 test_ahash_speed("md4", sec, generic_hash_speed_template);
2325                 if (mode > 400 && mode < 500) break;
2326                 fallthrough;
2327         case 402:
2328                 test_ahash_speed("md5", sec, generic_hash_speed_template);
2329                 if (mode > 400 && mode < 500) break;
2330                 fallthrough;
2331         case 403:
2332                 test_ahash_speed("sha1", sec, generic_hash_speed_template);
2333                 if (mode > 400 && mode < 500) break;
2334                 fallthrough;
2335         case 404:
2336                 test_ahash_speed("sha256", sec, generic_hash_speed_template);
2337                 if (mode > 400 && mode < 500) break;
2338                 fallthrough;
2339         case 405:
2340                 test_ahash_speed("sha384", sec, generic_hash_speed_template);
2341                 if (mode > 400 && mode < 500) break;
2342                 fallthrough;
2343         case 406:
2344                 test_ahash_speed("sha512", sec, generic_hash_speed_template);
2345                 if (mode > 400 && mode < 500) break;
2346                 fallthrough;
2347         case 407:
2348                 test_ahash_speed("wp256", sec, generic_hash_speed_template);
2349                 if (mode > 400 && mode < 500) break;
2350                 fallthrough;
2351         case 408:
2352                 test_ahash_speed("wp384", sec, generic_hash_speed_template);
2353                 if (mode > 400 && mode < 500) break;
2354                 fallthrough;
2355         case 409:
2356                 test_ahash_speed("wp512", sec, generic_hash_speed_template);
2357                 if (mode > 400 && mode < 500) break;
2358                 fallthrough;
2359         case 413:
2360                 test_ahash_speed("sha224", sec, generic_hash_speed_template);
2361                 if (mode > 400 && mode < 500) break;
2362                 fallthrough;
2363         case 414:
2364                 test_ahash_speed("xxhash64", sec, generic_hash_speed_template);
2365                 if (mode > 400 && mode < 500) break;
2366                 fallthrough;
2367         case 415:
2368                 test_ahash_speed("rmd160", sec, generic_hash_speed_template);
2369                 if (mode > 400 && mode < 500) break;
2370                 fallthrough;
2371         case 417:
2372                 test_ahash_speed("blake2b-512", sec, generic_hash_speed_template);
2373                 if (mode > 400 && mode < 500) break;
2374                 fallthrough;
2375         case 418:
2376                 test_ahash_speed("sha3-224", sec, generic_hash_speed_template);
2377                 if (mode > 400 && mode < 500) break;
2378                 fallthrough;
2379         case 419:
2380                 test_ahash_speed("sha3-256", sec, generic_hash_speed_template);
2381                 if (mode > 400 && mode < 500) break;
2382                 fallthrough;
2383         case 420:
2384                 test_ahash_speed("sha3-384", sec, generic_hash_speed_template);
2385                 if (mode > 400 && mode < 500) break;
2386                 fallthrough;
2387         case 421:
2388                 test_ahash_speed("sha3-512", sec, generic_hash_speed_template);
2389                 if (mode > 400 && mode < 500) break;
2390                 fallthrough;
2391         case 422:
2392                 test_ahash_speed("sm3", sec, generic_hash_speed_template);
2393                 if (mode > 400 && mode < 500) break;
2394                 fallthrough;
2395         case 499:
2396                 break;
2397
2398         case 500:
2399                 test_acipher_speed("ecb(aes)", ENCRYPT, sec, NULL, 0,
2400                                    speed_template_16_24_32);
2401                 test_acipher_speed("ecb(aes)", DECRYPT, sec, NULL, 0,
2402                                    speed_template_16_24_32);
2403                 test_acipher_speed("cbc(aes)", ENCRYPT, sec, NULL, 0,
2404                                    speed_template_16_24_32);
2405                 test_acipher_speed("cbc(aes)", DECRYPT, sec, NULL, 0,
2406                                    speed_template_16_24_32);
2407                 test_acipher_speed("lrw(aes)", ENCRYPT, sec, NULL, 0,
2408                                    speed_template_32_40_48);
2409                 test_acipher_speed("lrw(aes)", DECRYPT, sec, NULL, 0,
2410                                    speed_template_32_40_48);
2411                 test_acipher_speed("xts(aes)", ENCRYPT, sec, NULL, 0,
2412                                    speed_template_32_64);
2413                 test_acipher_speed("xts(aes)", DECRYPT, sec, NULL, 0,
2414                                    speed_template_32_64);
2415                 test_acipher_speed("cts(cbc(aes))", ENCRYPT, sec, NULL, 0,
2416                                    speed_template_16_24_32);
2417                 test_acipher_speed("cts(cbc(aes))", DECRYPT, sec, NULL, 0,
2418                                    speed_template_16_24_32);
2419                 test_acipher_speed("ctr(aes)", ENCRYPT, sec, NULL, 0,
2420                                    speed_template_16_24_32);
2421                 test_acipher_speed("ctr(aes)", DECRYPT, sec, NULL, 0,
2422                                    speed_template_16_24_32);
2423                 test_acipher_speed("rfc3686(ctr(aes))", ENCRYPT, sec, NULL, 0,
2424                                    speed_template_20_28_36);
2425                 test_acipher_speed("rfc3686(ctr(aes))", DECRYPT, sec, NULL, 0,
2426                                    speed_template_20_28_36);
2427                 break;
2428
2429         case 501:
2430                 test_acipher_speed("ecb(des3_ede)", ENCRYPT, sec,
2431                                    des3_speed_template, DES3_SPEED_VECTORS,
2432                                    speed_template_24);
2433                 test_acipher_speed("ecb(des3_ede)", DECRYPT, sec,
2434                                    des3_speed_template, DES3_SPEED_VECTORS,
2435                                    speed_template_24);
2436                 test_acipher_speed("cbc(des3_ede)", ENCRYPT, sec,
2437                                    des3_speed_template, DES3_SPEED_VECTORS,
2438                                    speed_template_24);
2439                 test_acipher_speed("cbc(des3_ede)", DECRYPT, sec,
2440                                    des3_speed_template, DES3_SPEED_VECTORS,
2441                                    speed_template_24);
2442                 break;
2443
2444         case 502:
2445                 test_acipher_speed("ecb(des)", ENCRYPT, sec, NULL, 0,
2446                                    speed_template_8);
2447                 test_acipher_speed("ecb(des)", DECRYPT, sec, NULL, 0,
2448                                    speed_template_8);
2449                 test_acipher_speed("cbc(des)", ENCRYPT, sec, NULL, 0,
2450                                    speed_template_8);
2451                 test_acipher_speed("cbc(des)", DECRYPT, sec, NULL, 0,
2452                                    speed_template_8);
2453                 break;
2454
2455         case 503:
2456                 test_acipher_speed("ecb(serpent)", ENCRYPT, sec, NULL, 0,
2457                                    speed_template_16_32);
2458                 test_acipher_speed("ecb(serpent)", DECRYPT, sec, NULL, 0,
2459                                    speed_template_16_32);
2460                 test_acipher_speed("cbc(serpent)", ENCRYPT, sec, NULL, 0,
2461                                    speed_template_16_32);
2462                 test_acipher_speed("cbc(serpent)", DECRYPT, sec, NULL, 0,
2463                                    speed_template_16_32);
2464                 test_acipher_speed("ctr(serpent)", ENCRYPT, sec, NULL, 0,
2465                                    speed_template_16_32);
2466                 test_acipher_speed("ctr(serpent)", DECRYPT, sec, NULL, 0,
2467                                    speed_template_16_32);
2468                 test_acipher_speed("lrw(serpent)", ENCRYPT, sec, NULL, 0,
2469                                    speed_template_32_48);
2470                 test_acipher_speed("lrw(serpent)", DECRYPT, sec, NULL, 0,
2471                                    speed_template_32_48);
2472                 test_acipher_speed("xts(serpent)", ENCRYPT, sec, NULL, 0,
2473                                    speed_template_32_64);
2474                 test_acipher_speed("xts(serpent)", DECRYPT, sec, NULL, 0,
2475                                    speed_template_32_64);
2476                 break;
2477
2478         case 504:
2479                 test_acipher_speed("ecb(twofish)", ENCRYPT, sec, NULL, 0,
2480                                    speed_template_16_24_32);
2481                 test_acipher_speed("ecb(twofish)", DECRYPT, sec, NULL, 0,
2482                                    speed_template_16_24_32);
2483                 test_acipher_speed("cbc(twofish)", ENCRYPT, sec, NULL, 0,
2484                                    speed_template_16_24_32);
2485                 test_acipher_speed("cbc(twofish)", DECRYPT, sec, NULL, 0,
2486                                    speed_template_16_24_32);
2487                 test_acipher_speed("ctr(twofish)", ENCRYPT, sec, NULL, 0,
2488                                    speed_template_16_24_32);
2489                 test_acipher_speed("ctr(twofish)", DECRYPT, sec, NULL, 0,
2490                                    speed_template_16_24_32);
2491                 test_acipher_speed("lrw(twofish)", ENCRYPT, sec, NULL, 0,
2492                                    speed_template_32_40_48);
2493                 test_acipher_speed("lrw(twofish)", DECRYPT, sec, NULL, 0,
2494                                    speed_template_32_40_48);
2495                 test_acipher_speed("xts(twofish)", ENCRYPT, sec, NULL, 0,
2496                                    speed_template_32_48_64);
2497                 test_acipher_speed("xts(twofish)", DECRYPT, sec, NULL, 0,
2498                                    speed_template_32_48_64);
2499                 break;
2500
2501         case 505:
2502                 test_acipher_speed("ecb(arc4)", ENCRYPT, sec, NULL, 0,
2503                                    speed_template_8);
2504                 break;
2505
2506         case 506:
2507                 test_acipher_speed("ecb(cast5)", ENCRYPT, sec, NULL, 0,
2508                                    speed_template_8_16);
2509                 test_acipher_speed("ecb(cast5)", DECRYPT, sec, NULL, 0,
2510                                    speed_template_8_16);
2511                 test_acipher_speed("cbc(cast5)", ENCRYPT, sec, NULL, 0,
2512                                    speed_template_8_16);
2513                 test_acipher_speed("cbc(cast5)", DECRYPT, sec, NULL, 0,
2514                                    speed_template_8_16);
2515                 test_acipher_speed("ctr(cast5)", ENCRYPT, sec, NULL, 0,
2516                                    speed_template_8_16);
2517                 test_acipher_speed("ctr(cast5)", DECRYPT, sec, NULL, 0,
2518                                    speed_template_8_16);
2519                 break;
2520
2521         case 507:
2522                 test_acipher_speed("ecb(cast6)", ENCRYPT, sec, NULL, 0,
2523                                    speed_template_16_32);
2524                 test_acipher_speed("ecb(cast6)", DECRYPT, sec, NULL, 0,
2525                                    speed_template_16_32);
2526                 test_acipher_speed("cbc(cast6)", ENCRYPT, sec, NULL, 0,
2527                                    speed_template_16_32);
2528                 test_acipher_speed("cbc(cast6)", DECRYPT, sec, NULL, 0,
2529                                    speed_template_16_32);
2530                 test_acipher_speed("ctr(cast6)", ENCRYPT, sec, NULL, 0,
2531                                    speed_template_16_32);
2532                 test_acipher_speed("ctr(cast6)", DECRYPT, sec, NULL, 0,
2533                                    speed_template_16_32);
2534                 test_acipher_speed("lrw(cast6)", ENCRYPT, sec, NULL, 0,
2535                                    speed_template_32_48);
2536                 test_acipher_speed("lrw(cast6)", DECRYPT, sec, NULL, 0,
2537                                    speed_template_32_48);
2538                 test_acipher_speed("xts(cast6)", ENCRYPT, sec, NULL, 0,
2539                                    speed_template_32_64);
2540                 test_acipher_speed("xts(cast6)", DECRYPT, sec, NULL, 0,
2541                                    speed_template_32_64);
2542                 break;
2543
2544         case 508:
2545                 test_acipher_speed("ecb(camellia)", ENCRYPT, sec, NULL, 0,
2546                                    speed_template_16_32);
2547                 test_acipher_speed("ecb(camellia)", DECRYPT, sec, NULL, 0,
2548                                    speed_template_16_32);
2549                 test_acipher_speed("cbc(camellia)", ENCRYPT, sec, NULL, 0,
2550                                    speed_template_16_32);
2551                 test_acipher_speed("cbc(camellia)", DECRYPT, sec, NULL, 0,
2552                                    speed_template_16_32);
2553                 test_acipher_speed("ctr(camellia)", ENCRYPT, sec, NULL, 0,
2554                                    speed_template_16_32);
2555                 test_acipher_speed("ctr(camellia)", DECRYPT, sec, NULL, 0,
2556                                    speed_template_16_32);
2557                 test_acipher_speed("lrw(camellia)", ENCRYPT, sec, NULL, 0,
2558                                    speed_template_32_48);
2559                 test_acipher_speed("lrw(camellia)", DECRYPT, sec, NULL, 0,
2560                                    speed_template_32_48);
2561                 test_acipher_speed("xts(camellia)", ENCRYPT, sec, NULL, 0,
2562                                    speed_template_32_64);
2563                 test_acipher_speed("xts(camellia)", DECRYPT, sec, NULL, 0,
2564                                    speed_template_32_64);
2565                 break;
2566
2567         case 509:
2568                 test_acipher_speed("ecb(blowfish)", ENCRYPT, sec, NULL, 0,
2569                                    speed_template_8_32);
2570                 test_acipher_speed("ecb(blowfish)", DECRYPT, sec, NULL, 0,
2571                                    speed_template_8_32);
2572                 test_acipher_speed("cbc(blowfish)", ENCRYPT, sec, NULL, 0,
2573                                    speed_template_8_32);
2574                 test_acipher_speed("cbc(blowfish)", DECRYPT, sec, NULL, 0,
2575                                    speed_template_8_32);
2576                 test_acipher_speed("ctr(blowfish)", ENCRYPT, sec, NULL, 0,
2577                                    speed_template_8_32);
2578                 test_acipher_speed("ctr(blowfish)", DECRYPT, sec, NULL, 0,
2579                                    speed_template_8_32);
2580                 break;
2581
2582         case 518:
2583                 test_acipher_speed("ecb(sm4)", ENCRYPT, sec, NULL, 0,
2584                                 speed_template_16);
2585                 test_acipher_speed("ecb(sm4)", DECRYPT, sec, NULL, 0,
2586                                 speed_template_16);
2587                 test_acipher_speed("cbc(sm4)", ENCRYPT, sec, NULL, 0,
2588                                 speed_template_16);
2589                 test_acipher_speed("cbc(sm4)", DECRYPT, sec, NULL, 0,
2590                                 speed_template_16);
2591                 test_acipher_speed("ctr(sm4)", ENCRYPT, sec, NULL, 0,
2592                                 speed_template_16);
2593                 test_acipher_speed("ctr(sm4)", DECRYPT, sec, NULL, 0,
2594                                 speed_template_16);
2595                 test_acipher_speed("xts(sm4)", ENCRYPT, sec, NULL, 0,
2596                                 speed_template_32);
2597                 test_acipher_speed("xts(sm4)", DECRYPT, sec, NULL, 0,
2598                                 speed_template_32);
2599                 break;
2600
2601         case 519:
2602                 test_acipher_speed("ecb(aria)", ENCRYPT, sec, NULL, 0,
2603                                    speed_template_16_24_32);
2604                 test_acipher_speed("ecb(aria)", DECRYPT, sec, NULL, 0,
2605                                    speed_template_16_24_32);
2606                 test_acipher_speed("ctr(aria)", ENCRYPT, sec, NULL, 0,
2607                                    speed_template_16_24_32);
2608                 test_acipher_speed("ctr(aria)", DECRYPT, sec, NULL, 0,
2609                                    speed_template_16_24_32);
2610                 break;
2611
2612         case 600:
2613                 test_mb_skcipher_speed("ecb(aes)", ENCRYPT, sec, NULL, 0,
2614                                        speed_template_16_24_32, num_mb);
2615                 test_mb_skcipher_speed("ecb(aes)", DECRYPT, sec, NULL, 0,
2616                                        speed_template_16_24_32, num_mb);
2617                 test_mb_skcipher_speed("cbc(aes)", ENCRYPT, sec, NULL, 0,
2618                                        speed_template_16_24_32, num_mb);
2619                 test_mb_skcipher_speed("cbc(aes)", DECRYPT, sec, NULL, 0,
2620                                        speed_template_16_24_32, num_mb);
2621                 test_mb_skcipher_speed("lrw(aes)", ENCRYPT, sec, NULL, 0,
2622                                        speed_template_32_40_48, num_mb);
2623                 test_mb_skcipher_speed("lrw(aes)", DECRYPT, sec, NULL, 0,
2624                                        speed_template_32_40_48, num_mb);
2625                 test_mb_skcipher_speed("xts(aes)", ENCRYPT, sec, NULL, 0,
2626                                        speed_template_32_64, num_mb);
2627                 test_mb_skcipher_speed("xts(aes)", DECRYPT, sec, NULL, 0,
2628                                        speed_template_32_64, num_mb);
2629                 test_mb_skcipher_speed("cts(cbc(aes))", ENCRYPT, sec, NULL, 0,
2630                                        speed_template_16_24_32, num_mb);
2631                 test_mb_skcipher_speed("cts(cbc(aes))", DECRYPT, sec, NULL, 0,
2632                                        speed_template_16_24_32, num_mb);
2633                 test_mb_skcipher_speed("ctr(aes)", ENCRYPT, sec, NULL, 0,
2634                                        speed_template_16_24_32, num_mb);
2635                 test_mb_skcipher_speed("ctr(aes)", DECRYPT, sec, NULL, 0,
2636                                        speed_template_16_24_32, num_mb);
2637                 test_mb_skcipher_speed("rfc3686(ctr(aes))", ENCRYPT, sec, NULL,
2638                                        0, speed_template_20_28_36, num_mb);
2639                 test_mb_skcipher_speed("rfc3686(ctr(aes))", DECRYPT, sec, NULL,
2640                                        0, speed_template_20_28_36, num_mb);
2641                 break;
2642
2643         case 601:
2644                 test_mb_skcipher_speed("ecb(des3_ede)", ENCRYPT, sec,
2645                                        des3_speed_template, DES3_SPEED_VECTORS,
2646                                        speed_template_24, num_mb);
2647                 test_mb_skcipher_speed("ecb(des3_ede)", DECRYPT, sec,
2648                                        des3_speed_template, DES3_SPEED_VECTORS,
2649                                        speed_template_24, num_mb);
2650                 test_mb_skcipher_speed("cbc(des3_ede)", ENCRYPT, sec,
2651                                        des3_speed_template, DES3_SPEED_VECTORS,
2652                                        speed_template_24, num_mb);
2653                 test_mb_skcipher_speed("cbc(des3_ede)", DECRYPT, sec,
2654                                        des3_speed_template, DES3_SPEED_VECTORS,
2655                                        speed_template_24, num_mb);
2656                 break;
2657
2658         case 602:
2659                 test_mb_skcipher_speed("ecb(des)", ENCRYPT, sec, NULL, 0,
2660                                        speed_template_8, num_mb);
2661                 test_mb_skcipher_speed("ecb(des)", DECRYPT, sec, NULL, 0,
2662                                        speed_template_8, num_mb);
2663                 test_mb_skcipher_speed("cbc(des)", ENCRYPT, sec, NULL, 0,
2664                                        speed_template_8, num_mb);
2665                 test_mb_skcipher_speed("cbc(des)", DECRYPT, sec, NULL, 0,
2666                                        speed_template_8, num_mb);
2667                 break;
2668
2669         case 603:
2670                 test_mb_skcipher_speed("ecb(serpent)", ENCRYPT, sec, NULL, 0,
2671                                        speed_template_16_32, num_mb);
2672                 test_mb_skcipher_speed("ecb(serpent)", DECRYPT, sec, NULL, 0,
2673                                        speed_template_16_32, num_mb);
2674                 test_mb_skcipher_speed("cbc(serpent)", ENCRYPT, sec, NULL, 0,
2675                                        speed_template_16_32, num_mb);
2676                 test_mb_skcipher_speed("cbc(serpent)", DECRYPT, sec, NULL, 0,
2677                                        speed_template_16_32, num_mb);
2678                 test_mb_skcipher_speed("ctr(serpent)", ENCRYPT, sec, NULL, 0,
2679                                        speed_template_16_32, num_mb);
2680                 test_mb_skcipher_speed("ctr(serpent)", DECRYPT, sec, NULL, 0,
2681                                        speed_template_16_32, num_mb);
2682                 test_mb_skcipher_speed("lrw(serpent)", ENCRYPT, sec, NULL, 0,
2683                                        speed_template_32_48, num_mb);
2684                 test_mb_skcipher_speed("lrw(serpent)", DECRYPT, sec, NULL, 0,
2685                                        speed_template_32_48, num_mb);
2686                 test_mb_skcipher_speed("xts(serpent)", ENCRYPT, sec, NULL, 0,
2687                                        speed_template_32_64, num_mb);
2688                 test_mb_skcipher_speed("xts(serpent)", DECRYPT, sec, NULL, 0,
2689                                        speed_template_32_64, num_mb);
2690                 break;
2691
2692         case 604:
2693                 test_mb_skcipher_speed("ecb(twofish)", ENCRYPT, sec, NULL, 0,
2694                                        speed_template_16_24_32, num_mb);
2695                 test_mb_skcipher_speed("ecb(twofish)", DECRYPT, sec, NULL, 0,
2696                                        speed_template_16_24_32, num_mb);
2697                 test_mb_skcipher_speed("cbc(twofish)", ENCRYPT, sec, NULL, 0,
2698                                        speed_template_16_24_32, num_mb);
2699                 test_mb_skcipher_speed("cbc(twofish)", DECRYPT, sec, NULL, 0,
2700                                        speed_template_16_24_32, num_mb);
2701                 test_mb_skcipher_speed("ctr(twofish)", ENCRYPT, sec, NULL, 0,
2702                                        speed_template_16_24_32, num_mb);
2703                 test_mb_skcipher_speed("ctr(twofish)", DECRYPT, sec, NULL, 0,
2704                                        speed_template_16_24_32, num_mb);
2705                 test_mb_skcipher_speed("lrw(twofish)", ENCRYPT, sec, NULL, 0,
2706                                        speed_template_32_40_48, num_mb);
2707                 test_mb_skcipher_speed("lrw(twofish)", DECRYPT, sec, NULL, 0,
2708                                        speed_template_32_40_48, num_mb);
2709                 test_mb_skcipher_speed("xts(twofish)", ENCRYPT, sec, NULL, 0,
2710                                        speed_template_32_48_64, num_mb);
2711                 test_mb_skcipher_speed("xts(twofish)", DECRYPT, sec, NULL, 0,
2712                                        speed_template_32_48_64, num_mb);
2713                 break;
2714
2715         case 605:
2716                 test_mb_skcipher_speed("ecb(arc4)", ENCRYPT, sec, NULL, 0,
2717                                        speed_template_8, num_mb);
2718                 break;
2719
2720         case 606:
2721                 test_mb_skcipher_speed("ecb(cast5)", ENCRYPT, sec, NULL, 0,
2722                                        speed_template_8_16, num_mb);
2723                 test_mb_skcipher_speed("ecb(cast5)", DECRYPT, sec, NULL, 0,
2724                                        speed_template_8_16, num_mb);
2725                 test_mb_skcipher_speed("cbc(cast5)", ENCRYPT, sec, NULL, 0,
2726                                        speed_template_8_16, num_mb);
2727                 test_mb_skcipher_speed("cbc(cast5)", DECRYPT, sec, NULL, 0,
2728                                        speed_template_8_16, num_mb);
2729                 test_mb_skcipher_speed("ctr(cast5)", ENCRYPT, sec, NULL, 0,
2730                                        speed_template_8_16, num_mb);
2731                 test_mb_skcipher_speed("ctr(cast5)", DECRYPT, sec, NULL, 0,
2732                                        speed_template_8_16, num_mb);
2733                 break;
2734
2735         case 607:
2736                 test_mb_skcipher_speed("ecb(cast6)", ENCRYPT, sec, NULL, 0,
2737                                        speed_template_16_32, num_mb);
2738                 test_mb_skcipher_speed("ecb(cast6)", DECRYPT, sec, NULL, 0,
2739                                        speed_template_16_32, num_mb);
2740                 test_mb_skcipher_speed("cbc(cast6)", ENCRYPT, sec, NULL, 0,
2741                                        speed_template_16_32, num_mb);
2742                 test_mb_skcipher_speed("cbc(cast6)", DECRYPT, sec, NULL, 0,
2743                                        speed_template_16_32, num_mb);
2744                 test_mb_skcipher_speed("ctr(cast6)", ENCRYPT, sec, NULL, 0,
2745                                        speed_template_16_32, num_mb);
2746                 test_mb_skcipher_speed("ctr(cast6)", DECRYPT, sec, NULL, 0,
2747                                        speed_template_16_32, num_mb);
2748                 test_mb_skcipher_speed("lrw(cast6)", ENCRYPT, sec, NULL, 0,
2749                                        speed_template_32_48, num_mb);
2750                 test_mb_skcipher_speed("lrw(cast6)", DECRYPT, sec, NULL, 0,
2751                                        speed_template_32_48, num_mb);
2752                 test_mb_skcipher_speed("xts(cast6)", ENCRYPT, sec, NULL, 0,
2753                                        speed_template_32_64, num_mb);
2754                 test_mb_skcipher_speed("xts(cast6)", DECRYPT, sec, NULL, 0,
2755                                        speed_template_32_64, num_mb);
2756                 break;
2757
2758         case 608:
2759                 test_mb_skcipher_speed("ecb(camellia)", ENCRYPT, sec, NULL, 0,
2760                                        speed_template_16_32, num_mb);
2761                 test_mb_skcipher_speed("ecb(camellia)", DECRYPT, sec, NULL, 0,
2762                                        speed_template_16_32, num_mb);
2763                 test_mb_skcipher_speed("cbc(camellia)", ENCRYPT, sec, NULL, 0,
2764                                        speed_template_16_32, num_mb);
2765                 test_mb_skcipher_speed("cbc(camellia)", DECRYPT, sec, NULL, 0,
2766                                        speed_template_16_32, num_mb);
2767                 test_mb_skcipher_speed("ctr(camellia)", ENCRYPT, sec, NULL, 0,
2768                                        speed_template_16_32, num_mb);
2769                 test_mb_skcipher_speed("ctr(camellia)", DECRYPT, sec, NULL, 0,
2770                                        speed_template_16_32, num_mb);
2771                 test_mb_skcipher_speed("lrw(camellia)", ENCRYPT, sec, NULL, 0,
2772                                        speed_template_32_48, num_mb);
2773                 test_mb_skcipher_speed("lrw(camellia)", DECRYPT, sec, NULL, 0,
2774                                        speed_template_32_48, num_mb);
2775                 test_mb_skcipher_speed("xts(camellia)", ENCRYPT, sec, NULL, 0,
2776                                        speed_template_32_64, num_mb);
2777                 test_mb_skcipher_speed("xts(camellia)", DECRYPT, sec, NULL, 0,
2778                                        speed_template_32_64, num_mb);
2779                 break;
2780
2781         case 609:
2782                 test_mb_skcipher_speed("ecb(blowfish)", ENCRYPT, sec, NULL, 0,
2783                                        speed_template_8_32, num_mb);
2784                 test_mb_skcipher_speed("ecb(blowfish)", DECRYPT, sec, NULL, 0,
2785                                        speed_template_8_32, num_mb);
2786                 test_mb_skcipher_speed("cbc(blowfish)", ENCRYPT, sec, NULL, 0,
2787                                        speed_template_8_32, num_mb);
2788                 test_mb_skcipher_speed("cbc(blowfish)", DECRYPT, sec, NULL, 0,
2789                                        speed_template_8_32, num_mb);
2790                 test_mb_skcipher_speed("ctr(blowfish)", ENCRYPT, sec, NULL, 0,
2791                                        speed_template_8_32, num_mb);
2792                 test_mb_skcipher_speed("ctr(blowfish)", DECRYPT, sec, NULL, 0,
2793                                        speed_template_8_32, num_mb);
2794                 break;
2795
2796         case 610:
2797                 test_mb_skcipher_speed("ecb(aria)", ENCRYPT, sec, NULL, 0,
2798                                        speed_template_16_32, num_mb);
2799                 test_mb_skcipher_speed("ecb(aria)", DECRYPT, sec, NULL, 0,
2800                                        speed_template_16_32, num_mb);
2801                 test_mb_skcipher_speed("ctr(aria)", ENCRYPT, sec, NULL, 0,
2802                                        speed_template_16_32, num_mb);
2803                 test_mb_skcipher_speed("ctr(aria)", DECRYPT, sec, NULL, 0,
2804                                        speed_template_16_32, num_mb);
2805                 break;
2806
2807         }
2808
2809         return ret;
2810 }
2811
2812 static int __init tcrypt_mod_init(void)
2813 {
2814         int err = -ENOMEM;
2815         int i;
2816
2817         for (i = 0; i < TVMEMSIZE; i++) {
2818                 tvmem[i] = (void *)__get_free_page(GFP_KERNEL);
2819                 if (!tvmem[i])
2820                         goto err_free_tv;
2821         }
2822
2823         err = do_test(alg, type, mask, mode, num_mb);
2824
2825         if (err) {
2826                 pr_err("one or more tests failed!\n");
2827                 goto err_free_tv;
2828         } else {
2829                 pr_debug("all tests passed\n");
2830         }
2831
2832         /* We intentionaly return -EAGAIN to prevent keeping the module,
2833          * unless we're running in fips mode. It does all its work from
2834          * init() and doesn't offer any runtime functionality, but in
2835          * the fips case, checking for a successful load is helpful.
2836          * => we don't need it in the memory, do we?
2837          *                                        -- mludvig
2838          */
2839         if (!fips_enabled)
2840                 err = -EAGAIN;
2841
2842 err_free_tv:
2843         for (i = 0; i < TVMEMSIZE && tvmem[i]; i++)
2844                 free_page((unsigned long)tvmem[i]);
2845
2846         return err;
2847 }
2848
2849 /*
2850  * If an init function is provided, an exit function must also be provided
2851  * to allow module unload.
2852  */
2853 static void __exit tcrypt_mod_fini(void) { }
2854
2855 late_initcall(tcrypt_mod_init);
2856 module_exit(tcrypt_mod_fini);
2857
2858 module_param(alg, charp, 0);
2859 module_param(type, uint, 0);
2860 module_param(mask, uint, 0);
2861 module_param(mode, int, 0);
2862 module_param(sec, uint, 0);
2863 MODULE_PARM_DESC(sec, "Length in seconds of speed tests "
2864                       "(defaults to zero which uses CPU cycles instead)");
2865 module_param(num_mb, uint, 0000);
2866 MODULE_PARM_DESC(num_mb, "Number of concurrent requests to be used in mb speed tests (defaults to 8)");
2867 module_param(klen, uint, 0);
2868 MODULE_PARM_DESC(klen, "Key length (defaults to 0)");
2869
2870 MODULE_LICENSE("GPL");
2871 MODULE_DESCRIPTION("Quick & dirty crypto testing module");
2872 MODULE_AUTHOR("James Morris <[email protected]>");