1#!/bin/sh 2# $FreeBSD: releng/11.0/tests/sys/geom/class/eli/integrity_hmac_test.sh 293821 2016-01-13 09:14:27Z ngie $ 3 4. $(dirname $0)/conf.sh 5 6base=`basename $0` 7sectors=100 8keyfile=`mktemp $base.XXXXXX` || exit 1 9sector=`mktemp $base.XXXXXX` || exit 1 10 11echo "1..2760" 12 13i=1 14for cipher in aes:0 aes:128 aes:256 \ 15 aes-xts:0 aes-xts:128 aes-xts:256 \ 16 aes-cbc:0 aes-cbc:128 aes-cbc:192 aes-cbc:256 \ 17 3des:0 3des:192 \ 18 3des-cbc:0 3des-cbc:192 \ 19 blowfish:0 blowfish:128 blowfish:160 blowfish:192 blowfish:224 \ 20 blowfish:256 blowfish:288 blowfish:320 blowfish:352 blowfish:384 \ 21 blowfish:416 blowfish:448 \ 22 blowfish-cbc:0 blowfish-cbc:128 blowfish-cbc:160 blowfish-cbc:192 blowfish-cbc:224 \ 23 blowfish-cbc:256 blowfish-cbc:288 blowfish-cbc:320 blowfish-cbc:352 blowfish-cbc:384 \ 24 blowfish-cbc:416 blowfish-cbc:448 \ 25 camellia:0 camellia:128 camellia:192 camellia:256 \ 26 camellia-cbc:0 camellia-cbc:128 camellia-cbc:192 camellia-cbc:256; do 27 ealgo=${cipher%%:*} 28 keylen=${cipher##*:} 29 for aalgo in hmac/md5 hmac/sha1 hmac/ripemd160 hmac/sha256 hmac/sha384 hmac/sha512; do 30 for secsize in 512 1024 2048 4096 8192; do 31 mdconfig -a -t malloc -s `expr $secsize \* 2 + 512`b -u $no || exit 1 32 33 dd if=/dev/random of=${keyfile} bs=512 count=16 >/dev/null 2>&1 34 35 geli init -B none -a $aalgo -e $ealgo -l $keylen -P -K $keyfile -s $secsize md${no} 2>/dev/null 36 geli attach -p -k $keyfile md${no} 37 38 dd if=/dev/random of=/dev/md${no}.eli bs=${secsize} count=1 >/dev/null 2>&1 39 40 dd if=/dev/md${no}.eli bs=${secsize} count=1 >/dev/null 2>&1 41 if [ $? -eq 0 ]; then 42 echo "ok $i - aalgo=${aalgo} ealgo=${ealgo} keylen=${keylen} sec=${secsize}" 43 else 44 echo "not ok $i - aalgo=${aalgo} ealgo=${ealgo} keylen=${keylen} sec=${secsize}" 45 fi 46 i=$((i+1)) 47 48 geli detach md${no} 49 # Corrupt 8 bytes of HMAC. 50 dd if=/dev/md${no} of=${sector} bs=512 count=1 >/dev/null 2>&1 51 dd if=/dev/random of=${sector} bs=1 count=16 conv=notrunc >/dev/null 2>&1 52 dd if=${sector} of=/dev/md${no} bs=512 count=1 >/dev/null 2>&1 53 geli attach -p -k $keyfile md${no} 54 55 dd if=/dev/md${no}.eli bs=${secsize} count=1 >/dev/null 2>&1 56 if [ $? -ne 0 ]; then 57 echo "ok $i - aalgo=${aalgo} ealgo=${ealgo} keylen=${keylen} sec=${secsize}" 58 else 59 echo "not ok $i - aalgo=${aalgo} ealgo=${ealgo} keylen=${keylen} sec=${secsize}" 60 fi 61 i=$((i+1)) 62 63 geli detach md${no} 64 mdconfig -d -u $no 65 done 66 done 67done 68 69rm -f $keyfile $sector 70