linux-kernel - Re: crypto self-test errors kernel 6.12.4

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <aBqvJJdXMcBpp9mC@gondor.apana.org.au>
Date: Wed, 7 May 2025 08:53:56 +0800
From: Herbert Xu <herbert@...dor.apana.org.au>
To: Ryan Wanner <ryan.wanner@...rochip.com>
Cc: linux-crypto@...r.kernel.org, open list <linux-kernel@...r.kernel.org>
Subject: Re: crypto self-test errors kernel 6.12.4

On Tue, May 06, 2025 at 01:12:31PM -0700, Ryan Wanner wrote:
> Hello,
> 
> I upgraded my ARM kernel from v6.6.9 to v6.12.4 and I am seeing some
> crypto self test errors that I did not see before. Shown below. These
> errors are different every boot and I did not see them on 6.6.9 kernel.
> I did notice that when I compile the crypto HW acceleration drivers as
> modules like this:
> CONFIG_CRYPTO_DEV_ATMEL_AES [=m]
> CONFIG_CRYPTO_DEV_ATMEL_TDES [=m]
> CONFIG_CRYPTO_DEV_ATMEL_SHA [=m]
> 
> and have them loaded by systemd at boot I do not get errors and all the
> self tests pass.
> 
> Is there a race condition I am not aware of? Or is the new asynchronous
> crypto tests creating bugs in the HW acceleration drivers.

Yes that's entirely possible as I think it was around that time
when the self-tests became concurrent.

> DRBG: could not allocate digest TFM handle: hmac(sha512)
> alg: drbg: Failed to reset rng
> alg: drbg: Test 0 failed for drbg_nopr_hmac_sha512
> alg: self-tests for stdrng using drbg_nopr_hmac_sha512 failed (rc=-22)
> ------------[ cut here ]------------
> WARNING: CPU: 0 PID: 90 at crypto/testmgr.c:5928 0xc0397fd0
> alg: self-tests for stdrng using drbg_nopr_hmac_sha512 failed (rc=-22)
> 
> alg: hash: error allocating hmac(sha512-generic) (generic impl of
> hmac(sha512)): -17
> alg: self-tests for hmac(sha512) using atmel-hmac-sha512 failed (rc=-17)
> ------------[ cut here ]------------
> WARNING: CPU: 0 PID: 53 at crypto/testmgr.c:5928 0xc0397fd0
> alg: self-tests for hmac(sha512) using atmel-hmac-sha512 failed (rc=-17)

17 is EEXIST, that may actually point to a bug in the Crypto API
itself.

Could you please test the current mainline kernel and send me the
complete bootup messages and kconfig file?

Thanks,
-- 
Email: Herbert Xu <herbert@...dor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt