From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S932229AbbFDQ3J (ORCPT ); Thu, 4 Jun 2015 12:29:09 -0400 Received: from mga02.intel.com ([134.134.136.20]:49471 "EHLO mga02.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752617AbbFDQ3F (ORCPT ); Thu, 4 Jun 2015 12:29:05 -0400 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.13,553,1427785200"; d="scan'208";a="737152026" Message-ID: <55707CB9.7090307@intel.com> Date: Thu, 04 Jun 2015 09:28:41 -0700 From: Tadeusz Struk User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.7.0 MIME-Version: 1.0 To: Stephan Mueller CC: herbert@gondor.apana.org.au, linux-kernel@vger.kernel.org, keescook@chromium.org, jwboyer@redhat.com, richard@nod.at, steved@redhat.com, qat-linux@intel.com, dhowells@redhat.com, linux-crypto@vger.kernel.org, james.l.morris@oracle.com, jkosina@suse.cz, zohar@linux.vnet.ibm.com, davem@davemloft.net, vgoyal@redhat.com Subject: Re: [PATCH RFC v3 3/3] crypto: add tests vectors for RSA References: <20150603224403.22310.79731.stgit@tstruk-mobl1> <20150603224424.22310.24677.stgit@tstruk-mobl1> <3173099.iDVlNMTGc2@tachyon.chronox.de> In-Reply-To: <3173099.iDVlNMTGc2@tachyon.chronox.de> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Hi Stephan On 06/03/2015 05:15 PM, Stephan Mueller wrote: > May I ask that the outbuf_enc is memcmp()ed with an expected value? This check > is required for FIPS 140-2 compliance. Without that memcmp, FIPS 140-2 > validations will not be successful. Sure, I will do that. I wasn't aware that this was required. > > Sorry for bringing that one up just now: 512 and 1024 bit test vectors will > not be helpful for several use cases, including FIPS. I can offer to give you > 2k or 3k vectors. I have one 2K vector from openSSL fips so I'll use it instead of the 512 one. > Besides, wouldn't one vector be sufficient? I think there is no harm to have these 3 vectors to make sure an implementation is well tested.