Re: [PATCH 0/5] Add KDF implementations to crypto API
From: Eric Biggers <ebiggers@kernel.org>
Date: 2021-01-04 22:21:37
Also in:
keyrings, linux-fscrypt, lkml
From: Eric Biggers <ebiggers@kernel.org>
Date: 2021-01-04 22:21:37
Also in:
keyrings, linux-fscrypt, lkml
On Mon, Jan 04, 2021 at 10:45:57PM +0100, Stephan Müller wrote:
The HKDF addition is used to replace the implementation in the filesystem crypto extension. This code was tested by using an EXT4 encrypted file system that was created and contains files written to by the current implementation. Using the new implementation a successful read of the existing files was possible and new files / directories were created and read successfully. These newly added file system objects could be successfully read using the current code. Yet if there is a test suite to validate whether the invokcation of the HKDF calculates the same result as the existing implementation, I would be happy to validate the implementation accordingly.
See https://www.kernel.org/doc/html/latest/filesystems/fscrypt.html#tests for how to run the fscrypt tests. 'kvm-xfstests -c ext4 generic/582' should be enough for this, though you could run all the tests if you want. - Eric