integrity-hmac.t revision 182452 
1#!/bin/sh
2# $FreeBSD: head/tools/regression/geom_eli/integrity-hmac.t 182452 2008-08-29 18:10:18Z pjd $
3
4base=`basename $0`
5no=45
6sectors=100
7keyfile=`mktemp /tmp/$base.XXXXXX` || exit 1
8sector=`mktemp /tmp/$base.XXXXXX` || exit 1
9
10echo "1..1320"
11
12i=1
13for cipher in aes:0 aes:128 aes:192 aes:256 \
14    3des:0 3des:192 \
15    blowfish:0 blowfish:128 blowfish:160 blowfish:192 blowfish:224 \
16    blowfish:256 blowfish:288 blowfish:320 blowfish:352 blowfish:384 \
17    blowfish:416 blowfish:448 \
18    camellia:0 camellia:128 camellia:192 camellia:256; do
19	ealgo=${cipher%%:*}
20	keylen=${cipher##*:}
21	for aalgo in hmac/md5 hmac/sha1 hmac/ripemd160 hmac/sha256 hmac/sha384 hmac/sha512; do
22		for secsize in 512 1024 2048 4096 8192; do
23			mdconfig -a -t malloc -s `expr $secsize \* 2 + 512`b -u $no || exit 1
24
25			dd if=/dev/random of=${keyfile} bs=512 count=16 >/dev/null 2>&1
26
27			geli init -B none -a $aalgo -e $ealgo -l $keylen -P -K $keyfile -s $secsize md${no} 2>/dev/null
28			geli attach -p -k $keyfile md${no}
29
30			dd if=/dev/random of=/dev/md${no}.eli bs=${secsize} count=1 >/dev/null 2>&1
31
32			dd if=/dev/md${no}.eli bs=${secsize} count=1 >/dev/null 2>&1
33			if [ $? -eq 0 ]; then
34				echo "ok $i - aalgo=${aalgo} ealgo=${ealgo} keylen=${keylen} sec=${secsize}"
35			else
36				echo "not ok $i - aalgo=${aalgo} ealgo=${ealgo} keylen=${keylen} sec=${secsize}"
37			fi
38			i=$((i+1))
39
40			geli detach md${no}
41			# Corrupt 8 bytes of HMAC.
42			dd if=/dev/md${no} of=${sector} bs=512 count=1 >/dev/null 2>&1
43			dd if=/dev/random of=${sector} bs=1 count=16 conv=notrunc >/dev/null 2>&1
44			dd if=${sector} of=/dev/md${no} bs=512 count=1 >/dev/null 2>&1
45			geli attach -p -k $keyfile md${no}
46
47			dd if=/dev/md${no}.eli bs=${secsize} count=1 >/dev/null 2>&1
48			if [ $? -ne 0 ]; then
49				echo "ok $i - aalgo=${aalgo} ealgo=${ealgo} keylen=${keylen} sec=${secsize}"
50			else
51				echo "not ok $i - aalgo=${aalgo} ealgo=${ealgo} keylen=${keylen} sec=${secsize}"
52			fi
53			i=$((i+1))
54
55			geli detach md${no}
56			mdconfig -d -u $no
57		done
58	done
59done
60
61rm -f $keyfile $sector
62