tests/sys/geom/class/eli/integrity_hmac_test.sh

   1 #!/bin/sh
   2 # $FreeBSD$
   3
   4 . $(dirname $0)/conf.sh
   5
   6 base=`basename $0`
   7 sectors=100
   8 keyfile=`mktemp $base.XXXXXX` || exit 1
   9 sector=`mktemp $base.XXXXXX` || exit 1
  10
  11 echo "1..2760"
  12
  13 i=1
  14 for cipher in aes:0 aes:128 aes:256 \
  15     aes-xts:0 aes-xts:128 aes-xts:256 \
  16     aes-cbc:0 aes-cbc:128 aes-cbc:192 aes-cbc:256 \
  17     3des:0 3des:192 \
  18     3des-cbc:0 3des-cbc:192 \
  19     blowfish:0 blowfish:128 blowfish:160 blowfish:192 blowfish:224 \
  20     blowfish:256 blowfish:288 blowfish:320 blowfish:352 blowfish:384 \
  21     blowfish:416 blowfish:448 \
  22     blowfish-cbc:0 blowfish-cbc:128 blowfish-cbc:160 blowfish-cbc:192 blowfish-cbc:224 \
  23     blowfish-cbc:256 blowfish-cbc:288 blowfish-cbc:320 blowfish-cbc:352 blowfish-cbc:384 \
  24     blowfish-cbc:416 blowfish-cbc:448 \
  25     camellia:0 camellia:128 camellia:192 camellia:256 \
  26     camellia-cbc:0 camellia-cbc:128 camellia-cbc:192 camellia-cbc:256; do
  27         ealgo=${cipher%%:*}
  28         keylen=${cipher##*:}
  29         for aalgo in hmac/md5 hmac/sha1 hmac/ripemd160 hmac/sha256 hmac/sha384 hmac/sha512; do
  30                 for secsize in 512 1024 2048 4096 8192; do
  31                         mdconfig -a -t malloc -s `expr $secsize \* 2 + 512`b -u $no || exit 1
  32
  33                         dd if=/dev/random of=${keyfile} bs=512 count=16 >/dev/null 2>&1
  34
  35                         geli init -B none -a $aalgo -e $ealgo -l $keylen -P -K $keyfile -s $secsize md${no} 2>/dev/null
  36                         geli attach -p -k $keyfile md${no}
  37
  38                         dd if=/dev/random of=/dev/md${no}.eli bs=${secsize} count=1 >/dev/null 2>&1
  39
  40                         dd if=/dev/md${no}.eli bs=${secsize} count=1 >/dev/null 2>&1
  41                         if [ $? -eq 0 ]; then
  42                                 echo "ok $i - aalgo=${aalgo} ealgo=${ealgo} keylen=${keylen} sec=${secsize}"
  43                         else
  44                                 echo "not ok $i - aalgo=${aalgo} ealgo=${ealgo} keylen=${keylen} sec=${secsize}"
  45                         fi
  46                         i=$((i+1))
  47
  48                         geli detach md${no}
  49                         # Corrupt 8 bytes of HMAC.
  50                         dd if=/dev/md${no} of=${sector} bs=512 count=1 >/dev/null 2>&1
  51                         dd if=/dev/random of=${sector} bs=1 count=16 conv=notrunc >/dev/null 2>&1
  52                         dd if=${sector} of=/dev/md${no} bs=512 count=1 >/dev/null 2>&1
  53                         geli attach -p -k $keyfile md${no}
  54
  55                         dd if=/dev/md${no}.eli bs=${secsize} count=1 >/dev/null 2>&1
  56                         if [ $? -ne 0 ]; then
  57                                 echo "ok $i - aalgo=${aalgo} ealgo=${ealgo} keylen=${keylen} sec=${secsize}"
  58                         else
  59                                 echo "not ok $i - aalgo=${aalgo} ealgo=${ealgo} keylen=${keylen} sec=${secsize}"
  60                         fi
  61                         i=$((i+1))
  62
  63                         geli detach md${no}
  64                         mdconfig -d -u $no
  65                 done
  66         done
  67 done
  68
  69 rm -f $keyfile $sector