1#!/bin/sh
2# $FreeBSD: releng/11.0/tests/sys/geom/class/eli/integrity_hmac_test.sh 293821 2016-01-13 09:14:27Z ngie $
3
4. $(dirname $0)/conf.sh
5
6base=`basename $0`
7sectors=100
8keyfile=`mktemp $base.XXXXXX` || exit 1
9sector=`mktemp $base.XXXXXX` || exit 1
10
11echo "1..2760"
12
13i=1
14for cipher in aes:0 aes:128 aes:256 \
15    aes-xts:0 aes-xts:128 aes-xts:256 \
16    aes-cbc:0 aes-cbc:128 aes-cbc:192 aes-cbc:256 \
17    3des:0 3des:192 \
18    3des-cbc:0 3des-cbc:192 \
19    blowfish:0 blowfish:128 blowfish:160 blowfish:192 blowfish:224 \
20    blowfish:256 blowfish:288 blowfish:320 blowfish:352 blowfish:384 \
21    blowfish:416 blowfish:448 \
22    blowfish-cbc:0 blowfish-cbc:128 blowfish-cbc:160 blowfish-cbc:192 blowfish-cbc:224 \
23    blowfish-cbc:256 blowfish-cbc:288 blowfish-cbc:320 blowfish-cbc:352 blowfish-cbc:384 \
24    blowfish-cbc:416 blowfish-cbc:448 \
25    camellia:0 camellia:128 camellia:192 camellia:256 \
26    camellia-cbc:0 camellia-cbc:128 camellia-cbc:192 camellia-cbc:256; do
27	ealgo=${cipher%%:*}
28	keylen=${cipher##*:}
29	for aalgo in hmac/md5 hmac/sha1 hmac/ripemd160 hmac/sha256 hmac/sha384 hmac/sha512; do
30		for secsize in 512 1024 2048 4096 8192; do
31			mdconfig -a -t malloc -s `expr $secsize \* 2 + 512`b -u $no || exit 1
32
33			dd if=/dev/random of=${keyfile} bs=512 count=16 >/dev/null 2>&1
34
35			geli init -B none -a $aalgo -e $ealgo -l $keylen -P -K $keyfile -s $secsize md${no} 2>/dev/null
36			geli attach -p -k $keyfile md${no}
37
38			dd if=/dev/random of=/dev/md${no}.eli bs=${secsize} count=1 >/dev/null 2>&1
39
40			dd if=/dev/md${no}.eli bs=${secsize} count=1 >/dev/null 2>&1
41			if [ $? -eq 0 ]; then
42				echo "ok $i - aalgo=${aalgo} ealgo=${ealgo} keylen=${keylen} sec=${secsize}"
43			else
44				echo "not ok $i - aalgo=${aalgo} ealgo=${ealgo} keylen=${keylen} sec=${secsize}"
45			fi
46			i=$((i+1))
47
48			geli detach md${no}
49			# Corrupt 8 bytes of HMAC.
50			dd if=/dev/md${no} of=${sector} bs=512 count=1 >/dev/null 2>&1
51			dd if=/dev/random of=${sector} bs=1 count=16 conv=notrunc >/dev/null 2>&1
52			dd if=${sector} of=/dev/md${no} bs=512 count=1 >/dev/null 2>&1
53			geli attach -p -k $keyfile md${no}
54
55			dd if=/dev/md${no}.eli bs=${secsize} count=1 >/dev/null 2>&1
56			if [ $? -ne 0 ]; then
57				echo "ok $i - aalgo=${aalgo} ealgo=${ealgo} keylen=${keylen} sec=${secsize}"
58			else
59				echo "not ok $i - aalgo=${aalgo} ealgo=${ealgo} keylen=${keylen} sec=${secsize}"
60			fi
61			i=$((i+1))
62
63			geli detach md${no}
64			mdconfig -d -u $no
65		done
66	done
67done
68
69rm -f $keyfile $sector
70