tools/regression/geom_eli/integrity-hmac.t

   1 #!/bin/sh
   2 # $FreeBSD$
   3
   4 base=`basename $0`
   5 no=45
   6 sectors=100
   7 keyfile=`mktemp /tmp/$base.XXXXXX` || exit 1
   8 sector=`mktemp /tmp/$base.XXXXXX` || exit 1
   9
  10 echo "1..1080"
  11
  12 i=1
  13 for cipher in aes:0 aes:128 aes:192 aes:256 \
  14     3des:0 3des:192 \
  15     blowfish:0 blowfish:128 blowfish:160 blowfish:192 blowfish:224 \
  16     blowfish:256 blowfish:288 blowfish:320 blowfish:352 blowfish:384 \
  17     blowfish:416 blowfish:448; do
  18         ealgo=${cipher%%:*}
  19         keylen=${cipher##*:}
  20         for aalgo in hmac/md5 hmac/sha1 hmac/ripemd160 hmac/sha256 hmac/sha384 hmac/sha512; do
  21                 for secsize in 512 1024 2048 4096 8192; do
  22                         mdconfig -a -t malloc -s `expr $secsize \* 2 + 512`b -u $no || exit 1
  23
  24                         dd if=/dev/random of=${keyfile} bs=512 count=16 >/dev/null 2>&1
  25
  26                         geli init -a $aalgo -e $ealgo -l $keylen -P -K $keyfile -s $secsize md${no}
  27                         geli attach -p -k $keyfile md${no}
  28
  29                         dd if=/dev/random of=/dev/md${no}.eli bs=${secsize} count=1 >/dev/null 2>&1
  30
  31                         dd if=/dev/md${no}.eli bs=${secsize} count=1 >/dev/null 2>&1
  32                         if [ $? -eq 0 ]; then
  33                                 echo "ok $i - aalgo=${aalgo} ealgo=${ealgo} keylen=${keylen} sec=${secsize}"
  34                         else
  35                                 echo "not ok $i - aalgo=${aalgo} ealgo=${ealgo} keylen=${keylen} sec=${secsize}"
  36                         fi
  37                         i=$((i+1))
  38
  39                         geli detach md${no}
  40                         # Corrupt 8 bytes of HMAC.
  41                         dd if=/dev/md${no} of=${sector} bs=512 count=1 >/dev/null 2>&1
  42                         dd if=/dev/random of=${sector} bs=1 count=16 conv=notrunc >/dev/null 2>&1
  43                         dd if=${sector} of=/dev/md${no} bs=512 count=1 >/dev/null 2>&1
  44                         geli attach -p -k $keyfile md${no}
  45
  46                         dd if=/dev/md${no}.eli bs=${secsize} count=1 >/dev/null 2>&1
  47                         if [ $? -ne 0 ]; then
  48                                 echo "ok $i - aalgo=${aalgo} ealgo=${ealgo} keylen=${keylen} sec=${secsize}"
  49                         else
  50                                 echo "not ok $i - aalgo=${aalgo} ealgo=${ealgo} keylen=${keylen} sec=${secsize}"
  51                         fi
  52                         i=$((i+1))
  53
  54                         geli detach md${no}
  55                         mdconfig -d -u $no
  56                 done
  57         done
  58 done
  59
  60 rm -f $keyfile $sector