topic Re: CAAM and kernel crypto tests in i.MX Processors

CAAM and kernel crypto tests

EricNelson — Wed, 28 May 2014 22:29:07 GMT

Hi all,

We're seeing some disconcerting error messages on various versions of Linux and various boards when enabling CAAM and

the kernel self-tests.

Testing on SABRE-SD with 3.10.31-alpha

root@imx6qsabresd:~# dmesg

...

alg: hash: Test 1 failed for hmac-sha1-caam

00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

00000010: f1 46 be 00

alg: hash: Test 1 failed for sha1-caam

00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

00000010: 9c d0 d8 9d

alg: hash: Test 1 failed for hmac-sha224-caam

00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

00000010: 47 b4 b1 16 99 12 ba 4f 53 68 4b 22

alg: hash: Test 1 failed for sha224-caam

00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

00000010: 2a ad bc e4 bd a0 b3 f7 e3 6c 9d a7

root@imx6qsabresd:~# cat /proc/cmdline

console=ttymxc0,115200 ip=dhcp root=/dev/mmcblk0p2 rootwait caam

The kernel configuration is essentially the same as the stock v7_defconfig with a few additional debug flags:

~/linux-imx6$ make ARCH=arm CROSS_COMPILE=arm-linux-gnueabihf- savedefconfig
scripts/kconfig/conf --savedefconfig=defconfig Kconfig

~/linux-imx6$ diff defconfig arch/arm/configs/imx_v7_defconfig
253a254
> CONFIG_USB_PHY=y
329d329
< CONFIG_DEBUG_LOCK_ALLOC=y
334d333
< # CONFIG_CRYPTO_MANAGER_DISABLE_TESTS is not set

We've seen the same results with kernel 3.0.35_4.1.0 and 3.10.17-1.0.0-ga on Nitrogen6x.

Does anyone have some insight about this?

Thanks in advance,

Eric

Re: CAAM and kernel crypto tests

jamesbone — Thu, 29 May 2014 16:17:15 GMT

Dear Eric,

On linux 3.0.35 there is a need for some patches in order to get proper functionality of CAAM

Q&A: Why is CAAM Driver Not Functioning in Linux for iMX6?

Have a great day,
Jaime

-----------------------------------------------------------------------------------------------------------------------
Note: If this post answers your question, please click the Correct Answer button. Thank you!
-----------------------------------------------------------------------------------------------------------------------

Re: CAAM and kernel crypto tests

EricNelson — Thu, 29 May 2014 16:58:05 GMT

Hi Jaime,

I think you missed that we're testing against 3.0.35_4.1.0, 3.10.17-1.0.0-ga, and 3.10.31_1.0.0-alpha.

Each of them already contains the patches from the other page:

Patch to dma_map_sg_chained:

http://git.freescale.com/git/cgit.cgi/imx/linux-2.6-imx.git/commit/?h=imx_3.0.35_4.0.0&id=b30237c79003223c6e8035d5be183cd4f0b469f9

3.10.17 sources:

https://github.com/boundarydevices/linux-imx6/blob/boundary-imx_3.10.17_1.0.0_ga/drivers/crypto/caam/sg_sw_sec4.h#L96

Patch to driver_algs:

http://git.freescale.com/git/cgit.cgi/imx/linux-2.6-imx.git/commit/?h=imx_3.0.35_4.0.0&id=6068d7a77b2101c172fc2f003f90b1febbf99505

3.10.17 sources:

https://github.com/boundarydevices/linux-imx6/blob/boundary-imx_3.10.17_1.0.0_ga/drivers/crypto/caam/caamalg.c#L2083

I also wasn't clear that the problem we're seeing is only with the hash algorithms.

Regards,

Eric

Re: CAAM and kernel crypto tests

EricNelson — Thu, 29 May 2014 18:09:57 GMT

Additional notes:

The values shown in the test failures:


alg: hash: Test 1 failed for hmac-sha1-caam  
00000000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  
00000010: f1 46 be 00

Appear to be similar to the expected results. This is the first test vector for hmac-sha1 in crypto/testmgr.c:

static struct hash_testvec hmac_sha1_tv_template[] = {
  {
  .key = "\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b",
  .ksize = 20,
  .plaintext = "Hi There",
  .psize = 8,
  .digest = "\xb6\x17\x31\x86\x55\x05\x72\x64"
   "\xe2\x8b\xc0\xb6\xfb\x37\x8c\x8e\xf1"
   "\x46\xbe",
...

Note that the sequence "f1 46 be" matches the expected value.

Also note that the first 16 bytes of each of the failed tests is showing as zero.

Re: Re: CAAM and kernel crypto tests

EricNelson — Thu, 29 May 2014 18:31:43 GMT

Further update: In a subsequent boot on 3.10.17-1.0.0-ga, I'm seeing only 8 bytes of zeros:

alg: hash: Test 1 failed for hmac-sha1-caam

00000000: 00 00 00 00 00 00 00 00 e2 8b c0 b6 fb 37 8c 8e

00000010: f1 46 be 00

alg: hash: Test 1 failed for sha1-caam

Re: Re: CAAM and kernel crypto tests

EricNelson — Thu, 29 May 2014 20:11:27 GMT

Yet more information regarding these tests...

A udelay(20) call at the end of caam_jr_enqueue() allows the tests to succeed, so it appears to be some form of timing bug.

~/linux-imx6$ git diff
diff --git a/drivers/crypto/caam/jr.c b/drivers/crypto/caam/jr.c
index 80ddddb..c8c4a7e 100644
--- a/drivers/crypto/caam/jr.c
+++ b/drivers/crypto/caam/jr.c
@@ -288,6 +288,7 @@ int caam_jr_enqueue(struct device *dev, u32 *desc,

        spin_unlock_bh(&jrp->inplock);

+       udelay(20);
        return 0;
 }
 EXPORT_SYMBOL(caam_jr_enqueue);

Re: Re: CAAM and kernel crypto tests

EricNelson — Thu, 29 May 2014 20:13:52 GMT

Yet more detail:

The same udelay(20) in either of these two spots in caam_jr_dequeue() do not result in successful tests:

linux-imx6/drivers/crypto/caam/jr.c at boundary-imx_3.10.17_1.0.0_ga · boundarydevices/linux-imx6 · GitHub

Re: CAAM and kernel crypto tests

karina_valencia — Thu, 05 Jun 2014 17:59:29 GMT

jamesbone can you continue with the follow up on this case?

Re: CAAM and kernel crypto tests

seungwonkim — Thu, 14 Aug 2014 07:26:42 GMT

Is this problem fixed?? or, solution is just delay???

I have the problem too. but, I need to change delay value up to 100usec for successful test.

It is big problem.

Re: CAAM and kernel crypto tests

EricNelson — Thu, 14 Aug 2014 20:09:07 GMT

Not fixed yet.

Re: CAAM and kernel crypto tests

karina_valencia — Thu, 14 Aug 2014 20:14:04 GMT

jamesbone do you have an update of this case?

Re: CAAM and kernel crypto tests

EricNelson — Mon, 22 Sep 2014 17:50:21 GMT

Thanks to Steve Cornelius and others at Freescale, we've been able to show that this issue has to do with cache coherency.

In particular, the CAAM drivers expect all inputs and outputs to be aligned with on a cache line boundary (32 bytes on i.MX6).

Since the testmgr code was originally created to test software implementations, as of kernel 3.10.17, it didn't ensure any particular alignment, which caused the failures, and a simple update to address this prevents the errors:

crypto testmgr: Align result buffer on cache-line · e3e7ad4 · boundarydevices/linux-imx6 · GitHub

As mentioned in the commit log, this requirement for inputs and outputs also exists in userspace code, so applications will need to take care in allocations.

Re: CAAM and kernel crypto tests

jonnettleton — Wed, 24 Sep 2014 09:11:59 GMT

There are actually proper fixes to this problem in Herbert Xu's crypto-2.6 tree. Specifically LKML: Herbert Xu: Crypto Fixes for 3.13 and LKML: Herbert Xu: Re: Crypto Fixes for 3.13 fix the problems. They would need to be backported to 3.10.xx

Re: CAAM and kernel crypto tests

EricNelson — Wed, 24 Sep 2014 16:37:27 GMT

Many thanks, Jon

Re: CAAM and kernel crypto tests

cryptolover — Tue, 16 Sep 2025 16:00:37 GMT

SecretCryptos is your one-stop solution for anonymous crypto transactions. Whether you're looking to use a crypto mixer or trade on a secure exchange, SecretCryptos ensures full privacy and anonymity for all your transactions.

SecretCryptos Crypto Mixer and Exchange

All Mixer Pages (per coin)

Instant Crypto Exchange

Crypto Exchange