From b09bd2d92ee1bbbf6db4533d5d9d2a7b39ae48c4 Mon Sep 17 00:00:00 2001 From: Eric Biggers Date: Sun, 2 Aug 2026 16:30:05 -0700 Subject: lib/crypto: tests: Add KUnit test suite for AES-GCM Add a KUnit test suite for the AES-GCM library API. It consists of: - All the shared test cases from aead-test-template.h. These include extensive consistency tests, a "Monte-Carlo test", and a benchmark. - Tests against hardcoded AES-GCM test vectors from external sources. Reviewed-by: Ard Biesheuvel Link: https://patch.msgid.link/20260802233005.161467-6-ebiggers@kernel.org Signed-off-by: Eric Biggers --- scripts/crypto/gen-aead-testvecs.py | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) (limited to 'scripts') diff --git a/scripts/crypto/gen-aead-testvecs.py b/scripts/crypto/gen-aead-testvecs.py index 048043735819..d77d646f75b5 100755 --- a/scripts/crypto/gen-aead-testvecs.py +++ b/scripts/crypto/gen-aead-testvecs.py @@ -41,6 +41,15 @@ def gen_monte_carlo_checksum(alg): key, tag_length=tag_len ) ct_and_tag = ccm.encrypt(nonce, pt, ad) + elif alg == "aes-gcm": + key_len = [16, 24, 32][data_len % 3] + key = rand_bytes(key_len) + nonce = rand_bytes(12) + tag_len = [4, 8, 12, 13, 14, 15, 16][data_len % 7] + gcm = cryptography.hazmat.primitives.ciphers.aead.AESGCM(key) + # python-cryptography supports only 16-byte GCM tags. However, in + # GCM, shorter tags are simply truncated. Do that below. + ct_and_tag = gcm.encrypt(nonce, pt, ad)[: data_len + tag_len] blake2s.update(ct_and_tag) @@ -53,8 +62,8 @@ def gen_monte_carlo_checksum(alg): print("};") -if len(sys.argv) != 2 or sys.argv[1] not in ("aes-ccm"): - sys.stderr.write("Usage: gen-aead-testvecs.py [aes-ccm]\n") +if len(sys.argv) != 2 or sys.argv[1] not in ("aes-ccm", "aes-gcm"): + sys.stderr.write("Usage: gen-aead-testvecs.py [aes-ccm|aes-gcm]\n") sys.exit(1) gen_monte_carlo_checksum(sys.argv[1]) -- cgit v1.2.3