Eric Biggers 7b817748bf lib/crypto: tests: Add Poly1305 split-update carry regression test ...

Add a test case which reproduces the bug fixed by commit 24f07e8c07
("lib/crypto: arm64: Fix lost Poly1305 carry when resuming NEON state").
It is written in a fairly general way, such that it should also be able
to reproduce similar bugs in other implementations.

Update the comment on test_poly1305_allones_keys_and_message() to more
accurately describe what it does and differentiate it from the new test.

Reviewed-by: Jason A. Donenfeld <[email protected]>
Link: https://patch.msgid.link/[email protected]
Signed-off-by: Eric Biggers <[email protected]>

2026-10-09 19:21:07 +02:00

..

arm

lib/crypto: arm/ghash: Migrate optimized code into library

2026-03-23 15:24:54 -07:00

arm64

lib/crypto: arm64: Fix lost Poly1305 carry when resuming NEON state

2026-10-09 19:20:29 +02:00

mips

lib/crypto: mips: Drop optimized MD5 code

2026-03-30 12:35:05 -07:00

mpi

Merge tag 'libcrypto-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiggers/linux

2026-04-21 11:46:22 -07:00

powerpc

lib/crypto: powerpc/md5: Drop powerpc optimized MD5 code

2026-05-09 11:41:01 -07:00

riscv

lib/crypto: riscv/sm3: Migrate optimized code into library

2026-03-23 17:50:59 -07:00

s390

lib/crypto: s390/ghash: Migrate optimized code into library

2026-03-23 16:44:29 -07:00

sparc

lib/crypto: sparc: Drop optimized MD5 code

2026-03-30 12:35:16 -07:00

tests

lib/crypto: tests: Add Poly1305 split-update carry regression test

2026-10-09 19:21:07 +02:00

x86

lib/crypto: x86/sm3: Migrate optimized code into library

2026-03-23 17:50:59 -07:00

.kunitconfig

lib/crypto: tests: Add KUnit test suite for AES-GCM

2026-08-10 20:17:56 -07:00

aes.c

lib/crypto: aes-cmac: Use __cleanup() instead of memzero_explicit()

2026-08-10 20:17:56 -07:00

aescfb.c

lib/crypto: Include <crypto/utils.h> instead of <crypto/algapi.h>

2026-03-31 17:19:31 -07:00

arc4.c

lib/crypto: Explicitly include <linux/export.h>

2025-06-30 09:26:19 -07:00

blake2b.c

lib/crypto: blake2b: Roll up BLAKE2b round loop on 32-bit

2025-12-09 15:10:21 -08:00

blake2s.c

lib/crypto: blake2s: Replace manual unrolling with unrolled_full

2025-12-09 15:10:21 -08:00

chacha20poly1305.c

lib/crypto: tests: Migrate ChaCha20Poly1305 self-test to KUnit

2026-03-30 12:35:30 -07:00

chacha-block-generic.c

lib/crypto: chacha: Zeroize permuted_state before it leaves scope

2026-03-27 13:35:35 -07:00

chacha.c

lib/crypto: Include <crypto/utils.h> instead of <crypto/algapi.h>

2026-03-31 17:19:31 -07:00

curve25519-fiat32.c

…

curve25519-hacl64.c

…

curve25519.c

lib/crypto: curve25519: Consolidate into single module

2025-09-06 16:32:43 -07:00

des.c

lib/crypto: Explicitly include <linux/export.h>

2025-06-30 09:26:19 -07:00

fips-aes.h

lib/crypto: aes: Add FIPS self-tests for GCM and CCM

2026-08-10 20:17:56 -07:00

fips-mldsa.h

lib/crypto: mldsa: Add FIPS cryptographic algorithm self-test

2026-01-12 11:07:50 -08:00

fips-sha.h

lib/crypto: fips: Split fips.h into fips-aes.h and fips-sha.h

2026-08-10 20:17:55 -07:00

gf128hash.c

lib/crypto: gf128hash: mark clmul32() as noinline_for_stack

2026-06-11 12:57:49 -07:00

gf128mul.c

lib/crypto: gf128mul: Remove unused 4k_lle functions

2026-03-23 16:44:30 -07:00

hash_info.c

lib/crypto: hash_info: Move hash_info.c into lib/crypto/

2025-07-08 12:03:44 -07:00

Kconfig

lib/crypto: aesgcm: Remove old AES-GCM library

2026-07-23 09:30:30 -07:00

Makefile

lib/crypto: aesgcm: Remove old AES-GCM library

2026-07-23 09:30:30 -07:00

md5.c

lib/crypto: md5: Remove support for md5_mod_init_arch()

2026-07-05 12:48:50 -07:00

memneq.c

lib/crypto: Include <crypto/utils.h> instead of <crypto/algapi.h>

2026-03-31 17:19:31 -07:00

mldsa.c

lib/crypto: mldsa: Clarify the documentation for mldsa_verify() slightly

2026-02-03 19:28:51 -08:00

nh.c

lib/crypto: nh: Add NH library

2026-01-12 11:07:49 -08:00

poly1305-donna32.c

lib/crypto: Explicitly include <linux/export.h>

2025-06-30 09:26:19 -07:00

poly1305-donna64.c

lib/crypto: Explicitly include <linux/export.h>

2025-06-30 09:26:19 -07:00

poly1305.c

lib/crypto: poly1305: Use memzero_explicit() in poly1305_final()

2026-10-09 19:20:29 +02:00

sha1.c

lib/crypto: fips: Split fips.h into fips-aes.h and fips-sha.h

2026-08-10 20:17:55 -07:00

sha3.c

lib/crypto: fips: Split fips.h into fips-aes.h and fips-sha.h

2026-08-10 20:17:55 -07:00

sha256.c

lib/crypto: fips: Split fips.h into fips-aes.h and fips-sha.h

2026-08-10 20:17:55 -07:00

sha512.c

lib/crypto: fips: Split fips.h into fips-aes.h and fips-sha.h

2026-08-10 20:17:55 -07:00

simd.c

crypto: api - move crypto_simd_disabled_for_test to lib

2024-10-28 18:33:11 +08:00

sm3.c

crypto: sm3 - Remove the original "sm3_block_generic()"

2026-03-23 17:50:59 -07:00

utils.c

lib/crypto: Explicitly include <linux/export.h>

2025-06-30 09:26:19 -07:00