linux-kernel - RE: Testing of CPRM on SD Card

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <0A50DBE80DD6674E94F7269DC964A7B6441418@dbde01.ent.ti.com>
Date:	Tue, 31 Jul 2007 07:10:14 +0530
From:	"Sriram, Kannan" <ksriram@...com>
To:	"Alan Cox" <alan@...rguk.ukuu.org.uk>,
	"Midhun A" <midhunagni@...il.com>
Cc:	<linux-kernel@...r.kernel.org>,
	<linux-arm-kernel@...ts.arm.linux.org.uk>,
	<linux-mtd@...ts.infradead.org>
Subject: RE: Testing of CPRM on SD Card

> -----Original Message-----
> From: Alan Cox [mailto:alan@...rguk.ukuu.org.uk]
> Sent: Tuesday, July 31, 2007 12:11 AM
> To: Midhun A
> Cc: Sriram, Kannan; linux-kernel@...r.kernel.org; linux-arm-
> kernel@...ts.arm.linux.org.uk; linux-mtd@...ts.infradead.org
> Subject: Re: Testing of CPRM on SD Card
> 
> On Mon, 30 Jul 2007 20:23:42 +0530
> "Midhun A" <midhunagni@...il.com> wrote:
> 
> > Hey All,
> >
> >     Thanks a lot for the replies. I have the development keys. But
the
> > algorithm and some intellectual property needs to be licenced from
the
> > 4C entity guys to implement it. As of now I just want to test the
CPRM
> > functionality. So licensing the algo for a prototype testing is a
huge
> > cost.
>

If you have the development keys, then you should typically have the
dummy "secret constant" used in the C2 algorithm as well. Contrary to
popular belief, the C2 algorithm by itself is not proprietary, just the
256 byte secret constant used inside the C2 algorithm. Also, if you want
to just "test" CPRM, you have all the stuff you need (not the real
stuff, but stuff that you can validate using your development keys) in
the name of dummy keys. Some sample input/ output data as well as
related dummy keys and the C2 algorithms are all available at the 4C
website for free download.

I had once (long ago) validated CPRM purely using stuff downloaded from
4C (free download). But my setup was not Linux; rather on a DSP
simulator platform, and was "low level".

But if you are looking for a quick test using a real SD-card, then like
I said, your development keys won't help. You need a real set of valid
"production keys" and these I bet are very hard to get!

> Good good, the higher the better and the less this evil stuff gets
used.

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/