lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-Id: <201001301734.46003.wolfgang.walter@stwm.de>
Date:	Sat, 30 Jan 2010 17:34:45 +0100
From:	Wolfgang Walter <wolfgang.walter@...m.de>
To:	Herbert Xu <herbert@...dor.apana.org.au>
Cc:	"linux-kernel@...r.kernel.org" <linux-kernel@...r.kernel.org>,
	"netdev@...r.kernel.org" <netdev@...r.kernel.org>
Subject: Re: 2.6.32: padlock_sha1 and hmac broken?

Am Samstag, 30. Januar 2010 schrieben Sie:
> On Sat, Jan 30, 2010 at 12:44:15AM +0100, Wolfgang Walter wrote:
> > Hello,
> >
> > I upgraded some machines with VIA processors from (vanilla) 2.6.31 to
> > 2.6.32.7.
> >
> > If I build the kernel 2.6.32.7 with CONFIG_CRYPTO_DEV_PADLOCK_SHA=y and
> > padlock supports sha, hmac(sha1) is missing and IPSEC with hmac(sha1) no
> > longer is possible.
>
> Can you please attach the dmesg output so we can see if there
> were any error messages?

=============
E# disabled
[    0.144494] HPET not enabled in BIOS. You might try hpet=force boot option
[    0.144634] pci 0000:00:11.5: reg 10 io port: [0xec00-0xecff]
[    0.144698] pci 0000:00:11.5: supports D1 D2
[    0.144787] pci 0000:01:00.0: reg 10 32bit mmio pref: [0xf4000000-0xf7ffffff]
[    0.144803] pci 0000:01:00.0: reg 14 32bit mmio: [0xfb000000-0xfbffffff]
[    0.144835] pci 0000:01:00.0: reg 30 32bit mmio pref: [0x000000-0x00ffff]
[    0.144865] pci 0000:01:00.0: supports D1 D2
[    0.144921] pci 0000:00:01.0: bridge io port: [0xd000-0xdfff]
[    0.144933] pci 0000:00:01.0: bridge 32bit mmio: [0xfb000000-0xfcffffff]
[    0.144946] pci 0000:00:01.0: bridge 32bit mmio pref: [0xf4000000-0xf7ffffff]
[    0.144965] pci_bus 0000:00: on NUMA node 0
[    0.144985] ACPI: PCI Interrupt Routing Table [\_SB_.PCI0._PRT]
[    0.327624] ACPI: PCI Interrupt Link [LNKA] (IRQs 3 4 6 7 10 11 12) *5
[    0.328584] ACPI: PCI Interrupt Link [LNKB] (IRQs 3 4 6 7 10 *11 12)
[    0.329501] ACPI: PCI Interrupt Link [LNKC] (IRQs 3 4 6 7 *10 11 12)
[    0.330402] ACPI: PCI Interrupt Link [LNKD] (IRQs 3 4 6 7 10 11 12) *0, disabled.
[    0.331336] ACPI: PCI Interrupt Link [LNKE] (IRQs 3 4 6 7 10 11 12) *0, disabled.
[    0.332247] ACPI: PCI Interrupt Link [LNKF] (IRQs 3 4 6 7 10 11 12) *0, disabled.
[    0.333159] ACPI: PCI Interrupt Link [LNK0] (IRQs 3 4 6 7 10 11 12) *0, disabled.
[    0.334095] ACPI: PCI Interrupt Link [LNK1] (IRQs 3 4 6 7 10 11 12) *0, disabled.
[    0.335140] ACPI: PCI Interrupt Link [ALKA] (IRQs *20)
[    0.335828] ACPI: PCI Interrupt Link [ALKB] (IRQs *21)
[    0.336519] ACPI: PCI Interrupt Link [ALKC] (IRQs *22)
[    0.337280] ACPI: PCI Interrupt Link [ALKD] (IRQs *23), disabled.
[    0.337998] vgaarb: device added: PCI:0000:01:00.0,decodes=io+mem,owns=io+mem,locks=none
[    0.338080] vgaarb: loaded
[    0.338528] SCSI subsystem initialized
[    0.338658] libata version 3.00 loaded.
[    0.339062] usbcore: registered new interface driver usbfs
[    0.339205] usbcore: registered new interface driver hub
[    0.339364] usbcore: registered new device driver usb
[    0.339798] PCI: Using ACPI for IRQ routing
[    0.340410] Switching to clocksource tsc
[    0.340531] pnp: PnP ACPI init
[    0.340606] ACPI: bus type pnp registered
[    0.354181] pnp: PnP ACPI: found 11 devices
[    0.354252] ACPI: ACPI bus type pnp unregistered
[    0.354343] system 00:00: iomem range 0xf0000-0xfffff could not be reserved
[    0.354415] system 00:00: iomem range 0x1eee0000-0x1eefffff could not be reserved
[    0.354496] system 00:00: iomem range 0xffff0000-0xffffffff has been reserved
[    0.354568] system 00:00: iomem range 0x0-0x9ffff could not be reserved
[    0.354638] system 00:00: iomem range 0x100000-0x1eedffff could not be reserved
[    0.354717] system 00:00: iomem range 0xfec00000-0xfec00fff could not be reserved
[    0.354797] system 00:00: iomem range 0xfee00000-0xfee00fff has been reserved
[    0.354869] system 00:00: iomem range 0xfff80000-0xfffeffff has been reserved
[    0.354951] system 00:02: ioport range 0x400-0x47f has been reserved
[    0.355020] system 00:02: ioport range 0x500-0x50f has been reserved
[    0.355131] system 00:03: ioport range 0x4d0-0x4d1 has been reserved
[    0.355200] system 00:03: ioport range 0x800-0x87f has been reserved
[    0.355269] system 00:03: ioport range 0x880-0x8ff has been reserved
[    0.391005] pci 0000:00:01.0: PCI bridge, secondary bus 0000:01
[    0.391081] pci 0000:00:01.0:   IO window: 0xd000-0xdfff
[    0.391151] pci 0000:00:01.0:   MEM window: 0xfb000000-0xfcffffff
[    0.391222] pci 0000:00:01.0:   PREFETCH window: 0xf4000000-0xf7ffffff
[    0.391311] pci 0000:00:01.0: setting latency timer to 64
[    0.391326] pci_bus 0000:00: resource 0 io:  [0x00-0xffff]
[    0.391337] pci_bus 0000:00: resource 1 mem: [0x000000-0xffffffff]
[    0.391348] pci_bus 0000:01: resource 0 io:  [0xd000-0xdfff]
[    0.391359] pci_bus 0000:01: resource 1 mem: [0xfb000000-0xfcffffff]
[    0.391370] pci_bus 0000:01: resource 2 pref mem [0xf4000000-0xf7ffffff]
[    0.391471] NET: Registered protocol family 2
[    0.391849] IP route cache hash table entries: 4096 (order: 2, 16384 bytes)
[    0.392765] TCP established hash table entries: 16384 (order: 5, 131072 bytes)
[    0.393170] TCP bind hash table entries: 16384 (order: 4, 65536 bytes)
[    0.394127] TCP: Hash tables configured (established 16384 bind 16384)
[    0.394195] TCP reno registered
[    0.394459] NET: Registered protocol family 1
[    0.394579] pci 0000:00:01.0: disabling DAC on VIA PCI bridge
[    0.394773] pci 0000:00:11.0: Bypassing VIA 8237 APIC De-Assert Message
[    0.394853] pci 0000:01:00.0: Boot video device
[    0.394985] Trying to unpack rootfs image as initramfs...
[    0.397158] rootfs image is not initramfs (no cpio magic); looks like an initrd
[    0.583043] Freeing initrd memory: 42677k freed
[    0.657473] cpufreq-nforce2: No nForce2 chipset.
[    0.667097] msgmni has been set to 970
[    0.667379] alg: No test for cipher_null (cipher_null-generic)
[    0.667498] alg: No test for ecb(cipher_null) (ecb-cipher_null)
[    0.667610] alg: No test for digest_null (digest_null-generic)
[    0.667718] alg: No test for compress_null (compress_null-generic)
[    0.670760] alg: No test for fcrypt (fcrypt-generic)
[    0.679058] alg: No test for stdrng (krng)
[    0.716094] alg: No test for ghash (ghash-generic)
[    0.716212] io scheduler noop registered
[    0.716272] io scheduler anticipatory registered
[    0.716334] io scheduler deadline registered
[    0.716680] io scheduler cfq registered (default)
[    0.717179] fan PNP0C0B:00: registered as cooling_device0
[    0.717255] ACPI: Fan [FAN] (on)
[    0.717565] processor LNXCPU:00: registered as cooling_device1
[    0.719182] thermal LNXTHERM:01: registered as thermal_zone0
[    0.719267] ACPI: Thermal Zone [THRM] (-248 C)
[    0.727205] Real Time Clock Driver v1.12b
[    0.727761] VIA RNG detected
[    0.727936] Serial: 8250/16550 driver, 4 ports, IRQ sharing disabled
[    0.728201] serial8250: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
[    0.728473] serial8250: ttyS1 at I/O 0x2f8 (irq = 3) is a 16550A
[    0.729423] 00:08: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A
[    0.729847] 00:09: ttyS1 at I/O 0x2f8 (irq = 3) is a 16550A
[    0.734418] brd: module loaded
[    0.736455] loop: module loaded
[    0.737003] sata_via 0000:00:0f.0: version 2.4
[    0.737729] ACPI: PCI Interrupt Link [ALKA] enabled at IRQ 20
[    0.737818] sata_via 0000:00:0f.0: PCI INT B -> Link[ALKA] -> GSI 20 (level, low) -> IRQ 20
[    0.737980] sata_via 0000:00:0f.0: routed to hard irq line 11
[    0.738200] scsi0 : sata_via
[    0.738633] scsi1 : sata_via
[    0.743265] ata1: SATA max UDMA/133 cmd 0xff00 ctl 0xfe00 bmdma 0xfb00 irq 20
[    0.743344] ata2: SATA max UDMA/133 cmd 0xfd00 ctl 0xfc00 bmdma 0xfb08 irq 20
[    0.744718] pata_via 0000:00:0f.1: version 0.3.4
[    0.744767] pata_via 0000:00:0f.1: PCI INT A -> Link[ALKA] -> GSI 20 (level, low) -> IRQ 20
[    0.745103] scsi2 : pata_via
[    0.745412] scsi3 : pata_via
[    0.749245] ata3: PATA max UDMA/133 cmd 0x1f0 ctl 0x3f6 bmdma 0xfa00 irq 14
[    0.749322] ata4: PATA max UDMA/133 cmd 0x170 ctl 0x376 bmdma 0xfa08 irq 15
[    0.751538] Intel(R) PRO/1000 Network Driver - version 7.3.21-k5-NAPI
[    0.751614] Copyright (c) 1999-2006 Intel Corporation.
[    0.751788] e1000e: Intel(R) PRO/1000 Network Driver - 1.0.2-k2
[    0.751854] e1000e: Copyright (c) 1999-2008 Intel Corporation.
[    0.752023] Intel(R) Gigabit Ethernet Network Driver - version 1.3.16-k2
[    0.752091] Copyright (c) 2007-2009 Intel Corporation.
[    0.752247] Ethernet Channel Bonding Driver: v3.5.0 (November 4, 2008)
[    0.752318] bonding: Warning: either miimon or arp_interval and arp_ip_target module parameters must be 
specified, otherwise bonding will not detect link failures! see bonding.txt for details.
[    0.753414] Atheros(R) L2 Ethernet Driver - version 2.2.3
[    0.753481] Copyright (c) 2007 Atheros Corporation.
[    0.753651] e100: Intel(R) PRO/100 Network Driver, 3.5.24-k2-NAPI
[    0.753717] e100: Copyright(c) 1999-2006 Intel Corporation
[    0.754053] via-rhine: Broken BIOS detected, avoid_D3 enabled.
[    0.754409] PPP generic driver version 2.4.2
[    0.754714] PPP Deflate Compression module registered
[    0.754779] NET: Registered protocol family 24
[    0.754865] PPPoL2TP kernel driver, V1.0
[    0.755766] 8139too Fast Ethernet driver 0.9.28
[    0.755863] 8139too 0000:00:05.0: PCI INT A -> GSI 16 (level, low) -> IRQ 16
[    0.757379] eth0: RealTek RTL8139 at 0xdf7d2000, 00:30:18:4c:69:5f, IRQ 16
[    0.757495] 8139too 0000:00:06.0: PCI INT A -> GSI 17 (level, low) -> IRQ 17
[    0.758684] eth1: RealTek RTL8139 at 0xdf7d6000, 00:30:18:4c:69:5e, IRQ 17
[    0.758785] 8139too 0000:00:07.0: PCI INT A -> GSI 18 (level, low) -> IRQ 18
[    0.760026] eth2: RealTek RTL8139 at 0xdf7da000, 00:30:18:4c:69:5d, IRQ 18
[    0.760197] tun: Universal TUN/TAP device driver, 1.6
[    0.760260] tun: (C) 1999-2004 Max Krasnyansky <maxk@...lcomm.com>
[    0.761031] ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver
[    0.761857] ACPI: PCI Interrupt Link [ALKB] enabled at IRQ 21
[    0.761940] ehci_hcd 0000:00:10.4: PCI INT C -> Link[ALKB] -> GSI 21 (level, low) -> IRQ 21
[    0.762052] ehci_hcd 0000:00:10.4: EHCI Host Controller
[    0.762355] ehci_hcd 0000:00:10.4: new USB bus registered, assigned bus number 1
[    0.762532] ehci_hcd 0000:00:10.4: irq 21, io mem 0xfdffc000
[    0.769490] ehci_hcd 0000:00:10.4: USB 2.0 started, EHCI 1.00
[    0.769830] usb usb1: configuration #1 chosen from 1 choice
[    0.770025] hub 1-0:1.0: USB hub found
[    0.770103] hub 1-0:1.0: 8 ports detected
[    0.770359] ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
[    0.770533] uhci_hcd: USB Universal Host Controller Interface driver
[    0.770727] uhci_hcd 0000:00:10.0: PCI INT A -> Link[ALKB] -> GSI 21 (level, low) -> IRQ 21
[    0.770820] uhci_hcd 0000:00:10.0: UHCI Host Controller
[    0.771050] uhci_hcd 0000:00:10.0: new USB bus registered, assigned bus number 2
[    0.771162] uhci_hcd 0000:00:10.0: irq 21, io base 0x0000f900
[    0.771537] usb usb2: configuration #1 chosen from 1 choice
[    0.771724] hub 2-0:1.0: USB hub found
[    0.771802] hub 2-0:1.0: 2 ports detected
[    0.771986] uhci_hcd 0000:00:10.1: PCI INT A -> Link[ALKB] -> GSI 21 (level, low) -> IRQ 21
[    0.772076] uhci_hcd 0000:00:10.1: UHCI Host Controller
[    0.772300] uhci_hcd 0000:00:10.1: new USB bus registered, assigned bus number 3
[    0.772412] uhci_hcd 0000:00:10.1: irq 21, io base 0x0000f800
[    0.772780] usb usb3: configuration #1 chosen from 1 choice
[    0.773014] hub 3-0:1.0: USB hub found
[    0.773090] hub 3-0:1.0: 2 ports detected
[    0.773289] uhci_hcd 0000:00:10.2: PCI INT B -> Link[ALKB] -> GSI 21 (level, low) -> IRQ 21
[    0.773381] uhci_hcd 0000:00:10.2: UHCI Host Controller
[    0.773597] uhci_hcd 0000:00:10.2: new USB bus registered, assigned bus number 4
[    0.773709] uhci_hcd 0000:00:10.2: irq 21, io base 0x0000f700
[    0.774087] usb usb4: configuration #1 chosen from 1 choice
[    0.774286] hub 4-0:1.0: USB hub found
[    0.774362] hub 4-0:1.0: 2 ports detected
[    0.774543] uhci_hcd 0000:00:10.3: PCI INT B -> Link[ALKB] -> GSI 21 (level, low) -> IRQ 21
[    0.774632] uhci_hcd 0000:00:10.3: UHCI Host Controller
[    0.774849] uhci_hcd 0000:00:10.3: new USB bus registered, assigned bus number 5
[    0.774961] uhci_hcd 0000:00:10.3: irq 21, io base 0x0000f600
[    0.775332] usb usb5: configuration #1 chosen from 1 choice
[    0.775528] hub 5-0:1.0: USB hub found
[    0.775605] hub 5-0:1.0: 2 ports detected
[    0.775847] Initializing USB Mass Storage driver...
[    0.776082] usbcore: registered new interface driver usb-storage
[    0.776240] USB Mass Storage support registered.
[    0.776614] PNP: No PS/2 controller found. Probing ports directly.
[    0.952805] ata1: SATA link down 1.5 Gbps (SStatus 0 SControl 300)
[    1.039562] serio: i8042 KBD port at 0x60,0x64 irq 1
[    1.040107] mice: PS/2 mouse device common for all mice
[    1.040511] vt1211: Found VT1211 chip at 0x6000, revision 2
[    1.040751] hwmon-vid: Unknown VRM version of your x86 CPU
[    1.041244] EDAC MC: Ver: 2.1.0 Jan 29 2010
[    1.041624] cpuidle: using governor ladder
[    1.041985] padlock: Using VIA PadLock ACE for AES algorithm.
[    1.042208] padlock: Using VIA PadLock ACE for SHA1/SHA256 algorithms.
[    1.044696] usbcore: registered new interface driver hiddev
[    1.044855] usbcore: registered new interface driver usbhid
[    1.044921] usbhid: v2.6:USB HID core driver
[    1.045210] GACT probability on
[    1.045269] Mirror/redirect action on
[    1.045329] Simple TC action Loaded
[    1.046549] netem: version 1.2
[    1.046610] u32 classifier
[    1.046664]     Performance counters on
[    1.046722]     input device check on 
[    1.046779]     Actions configured 
[    1.046842] Netfilter messages via NETLINK v0.30.
[    1.047083] xt_time: kernel timezone is -0000
[    1.048522] IPv4 over IPv4 tunneling driver
[    1.050009] GRE over IPv4 tunneling driver
[    1.051417] ip_tables: (C) 2000-2006 Netfilter Core Team
[    1.051547] arp_tables: (C) 2002 David S. Miller
[    1.051695] TCP cubic registered
[    1.051752] Initializing XFRM netlink socket
[    1.051816] IPv6: Loaded, but administratively disabled, reboot required to enable
[    1.051892] ipv6 ah init: can't add xfrm type
[    1.051952] ipv6 esp init: can't add xfrm type
[    1.052012] ipcomp6 init: can't add xfrm type
[    1.052089] ip6_tables: (C) 2000-2006 Netfilter Core Team
[    1.052212] IPv6 over IPv4 tunneling driver
[    1.054635] NET: Registered protocol family 17
[    1.054715] NET: Registered protocol family 15
[    1.055004] Bridge firewalling registered
[    1.055071] Ebtables v2.0 registered
[    1.055189] 802.1Q VLAN Support v1.8 Ben Greear <greearb@...delatech.com>
[    1.055256] All bugs added by David S. Miller <davem@...hat.com>
[    1.055363] Using IPI Shortcut mode
[    1.166687] ata2: SATA link down 1.5 Gbps (SStatus 0 SControl 300)
[    1.357068] ata4.00: ATA-0: TRANSCEND, 20070312, max MWDMA2
[    1.357136] ata4.00: 996912 sectors, multi 0: LBA 
[    1.370307] ata4.00: configured for PIO4
[    1.390304] ata4.00: configured for PIO4
[    1.390365] ata4: EH complete
[    1.403538] scsi 3:0:0:0: Direct-Access     ATA      TRANSCEND        2007 PQ: 0 ANSI: 5
[    1.404179] sd 3:0:0:0: [sda] 996912 512-byte logical blocks: (510 MB/486 MiB)
[    1.404337] sd 3:0:0:0: [sda] Write Protect is off
[    1.404403] sd 3:0:0:0: [sda] Mode Sense: 00 3a 00 00
[    1.404450] sd 3:0:0:0: [sda] Write cache: disabled, read cache: enabled, doesn't support DPO or FUA
[    1.404811]  sda: sda1
[    1.406838] sd 3:0:0:0: Attached scsi generic sg0 type 0
[    1.407324] sd 3:0:0:0: [sda] Attached SCSI disk
[    1.426851] RAMDISK: gzip image found at block 0
[    8.951329] VFS: Mounted root (ext2 filesystem) readonly on device 1:0.
[    8.951452] devtmpfs: mounted
[    8.951542] Freeing unused kernel memory: 316k freed
[   10.473262] IPv4 FIB: Using LC-trie version 0.409
[   10.917146] eth2: link up, 100Mbps, full-duplex, lpa 0x41E1
[   10.917722] eth1: link up, 100Mbps, full-duplex, lpa 0xC5E1
[   10.918198] eth0: link up, 100Mbps, full-duplex, lpa 0x41E1
[   11.885269] nf_conntrack version 0.5.0 (7766 buckets, 31064 max)
[   11.885768] CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use
[   11.885778] nf_conntrack.acct=1 kernel parameter, acct=1 nf_conntrack module option or
[   11.885786] sysctl net.netfilter.nf_conntrack_acct=1 to enable it.

=============

>
> Please also try "modprobe tcrypt mode=101".
>


[  474.947508] alg: hash: Failed to load transform for hmac(sha1): -2
[  474.952660] alg: hash: Failed to load transform for hmac(sha1): -2
[  474.952737] tcrypt: one or more tests failed!


Regards,
-- 
Wolfgang Walter
Studentenwerk München
Anstalt des öffentlichen Rechts

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ