crypto: testmgr - add testvector for pkcs1pad(rsa)

The PKCS#1 RSA implementation is provided with a self test with RSA 2048
and SHA-256. This self test implicitly covers other RSA keys and other
hashes. Also, this self test implies that the pkcs1pad(rsa) is FIPS
140-2 compliant.

Signed-off-by: Stephan Mueller <smueller@chronox.de>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>

1 files changed, 29 insertions, 4 deletions

diff --git a/crypto/testmgr.c b/crypto/testmgr.c
index 127a0f545ec2..32087a7acbfb 100644
--- a/crypto/testmgr.c
+++ b/crypto/testmgr.c
@@ -2222,8 +2222,11 @@ static int test_akcipher_one(struct crypto_akcipher *tfm,
         akcipher_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
                                       tcrypt_complete, &result);
 
-        /* Run RSA encrypt - c = m^e mod n;*/
-        err = wait_async_op(&result, crypto_akcipher_encrypt(req));
+        err = wait_async_op(&result, vecs->siggen_sigver_test ?
+                                     /* Run asymmetric signature generation */
+                                     crypto_akcipher_sign(req) :
+                                     /* Run asymmetric encrypt */
+                                     crypto_akcipher_encrypt(req));
         if (err) {
                 pr_err("alg: akcipher: encrypt test failed. err %d\n", err);
                 goto free_all;
@@ -2261,8 +2264,11 @@ static int test_akcipher_one(struct crypto_akcipher *tfm,
         init_completion(&result.completion);
         akcipher_request_set_crypt(req, &src, &dst, vecs->c_size, out_len_max);
 
-        /* Run RSA decrypt - m = c^d mod n;*/
-        err = wait_async_op(&result, crypto_akcipher_decrypt(req));
+        err = wait_async_op(&result, vecs->siggen_sigver_test ?
+                                     /* Run asymmetric signature verification */
+                                     crypto_akcipher_verify(req) :
+                                     /* Run asymmetric decrypt */
+                                     crypto_akcipher_decrypt(req));
         if (err) {
                 pr_err("alg: akcipher: decrypt test failed. err %d\n", err);
                 goto free_all;
@@ -3309,6 +3315,25 @@ static const struct alg_test_desc alg_test_descs[] = {
                         }
                 }
         }, {
+                .alg = "pkcs1pad(rsa,sha224)",
+                .test = alg_test_null,
+                .fips_allowed = 1,
+        }, {
+                .alg = "pkcs1pad(rsa,sha256)",
+                .test = alg_test_akcipher,
+                .fips_allowed = 1,
+                .suite = {
+                        .akcipher = __VECS(pkcs1pad_rsa_tv_template)
+                }
+        }, {
+                .alg = "pkcs1pad(rsa,sha384)",
+                .test = alg_test_null,
+                .fips_allowed = 1,
+        }, {
+                .alg = "pkcs1pad(rsa,sha512)",
+                .test = alg_test_null,
+                .fips_allowed = 1,
+        }, {
                 .alg = "poly1305",
                 .test = alg_test_hash,
                 .suite = {