[CRYPTO] xts: XTS blockcipher mode implementation without partial blocks

XTS currently considered to be the successor of the LRW mode by the IEEE1619
workgroup. LRW was discarded, because it was not secure if the encyption key
itself is encrypted with LRW.

XTS does not have this problem. The implementation is pretty straightforward,
a new function was added to gf128mul to handle GF(128) elements in ble format.
Four testvectors from the specification
	http://grouper.ieee.org/groups/1619/email/pdf00086.pdf
were added, and they verify on my system.

Signed-off-by: Rik Snel <rsnel@cube.dyndns.org>
Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>

1 files changed, 12 insertions, 0 deletions

diff --git a/crypto/tcrypt.c b/crypto/tcrypt.c
index de6435ea9bf8..18d489c8b935 100644
--- a/crypto/tcrypt.c
+++ b/crypto/tcrypt.c
@@ -955,6 +955,10 @@ static void do_test(void)
                             AES_LRW_ENC_TEST_VECTORS);
                 test_cipher("lrw(aes)", DECRYPT, aes_lrw_dec_tv_template,
                             AES_LRW_DEC_TEST_VECTORS);
+                test_cipher("xts(aes)", ENCRYPT, aes_xts_enc_tv_template,
+                            AES_XTS_ENC_TEST_VECTORS);
+                test_cipher("xts(aes)", DECRYPT, aes_xts_dec_tv_template,
+                            AES_XTS_DEC_TEST_VECTORS);
 
                 //CAST5
                 test_cipher("ecb(cast5)", ENCRYPT, cast5_enc_tv_template,
@@ -1138,6 +1142,10 @@ static void do_test(void)
                             AES_LRW_ENC_TEST_VECTORS);
                 test_cipher("lrw(aes)", DECRYPT, aes_lrw_dec_tv_template,
                             AES_LRW_DEC_TEST_VECTORS);
+                test_cipher("xts(aes)", ENCRYPT, aes_xts_enc_tv_template,
+                            AES_XTS_ENC_TEST_VECTORS);
+                test_cipher("xts(aes)", DECRYPT, aes_xts_dec_tv_template,
+                            AES_XTS_DEC_TEST_VECTORS);
                 break;
 
         case 11:
@@ -1313,6 +1321,10 @@ static void do_test(void)
                                   aes_lrw_speed_template);
                 test_cipher_speed("lrw(aes)", DECRYPT, sec, NULL, 0,
                                   aes_lrw_speed_template);
+                test_cipher_speed("xts(aes)", ENCRYPT, sec, NULL, 0,
+                                  aes_xts_speed_template);
+                test_cipher_speed("xts(aes)", DECRYPT, sec, NULL, 0,
+                                  aes_xts_speed_template);
                 break;
 
         case 201: