Skip to content

20260410-linuxkm-aes-ccm#10194

Merged
dgarske merged 1 commit into
wolfSSL:masterfrom
douzzer:20260410-linuxkm-aes-ccm
Apr 13, 2026
Merged

20260410-linuxkm-aes-ccm#10194
dgarske merged 1 commit into
wolfSSL:masterfrom
douzzer:20260410-linuxkm-aes-ccm

Conversation

@douzzer

@douzzer douzzer commented Apr 11, 2026

Copy link
Copy Markdown
Contributor

linuxkm: implement LKCAPI shims for wolfCrypt-native AES-CCM.

also, minor fixes:

linuxkm/lkcapi_aes_glue.c: in linuxkm_test_aescfb(), call the appropriate aes_cfb_test(), not aes_cfb_test().
linuxkm/lkcapi_glue.c: fix bugprone-macro-parentheses in REGISTER_ALG_OPTIONAL().
linuxkm/module_hooks.c: in updateFipsHash(), add suppression for clang-diagnostic-cast-function-type-strict warnings around actually-safe function pointer casts in call to wc_fips_generate_hash().

tested with

wolfssl-multi-test.sh ...
check-source-text
quantum-safe-wolfssl-all-crypto-only-noasm-linuxkm-mainline-insmod-clang-tidy
linuxkm-6.15-all-cryptonly-quantum-safe-fips-dev-intelasm-insmod-crypto-fuzzer-ksan
linuxkm-6.12-all-cryptonly-intelasm-fips-dev-dyn-hash-LKCAPI-insmod
linuxkm-cryptonly-fips-v5-dyn-hash-LKCAPI-yes-twc-insmod-kmemleak
linuxkm-cryptonly-fips-v5-dyn-hash-LKCAPI-yes-twc-insmod-ksanitizer
linuxkm-cryptonly-intelasm-fips-v6-dyn-hash-LKCAPI-yes-twc-insmod-ksanitizer
linuxkm-cryptonly-intelasm-fips-v6-dyn-hash-LKCAPI-yes-twc-insmod-kmemleak
linuxkm-cryptonly-intelasm-fips-dev-dyn-hash-LKCAPI-yes-twc-insmod-ksanitizer
linuxkm-cryptonly-fips-dev-dyn-hash-LKCAPI-yes-twc-insmod-ksanitizer
linuxkm-cryptonly-intelasm-fips-dev-dyn-hash-LKCAPI-yes-twc-insmod-kmemleak
'.*cust-kernel.*'

also, minor fixes:

linuxkm/lkcapi_aes_glue.c: in linuxkm_test_aescfb(), call the appropriate aes_cfb_test(), not aes_cfb_test().
linuxkm/lkcapi_glue.c: fix bugprone-macro-parentheses in REGISTER_ALG_OPTIONAL().
linuxkm/module_hooks.c: in updateFipsHash(), add suppression for clang-diagnostic-cast-function-type-strict warnings around actually-safe function pointer casts in call to wc_fips_generate_hash().

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #10194

Scan targets checked: linuxkm-bugs, linuxkm-src

No new issues found in the changed files. ✅

@douzzer

douzzer commented Apr 11, 2026

Copy link
Copy Markdown
Contributor Author

retest this please
(cavp sefl-test "FAIL: scripts/resume.test")

@sameehj

sameehj commented Apr 13, 2026

Copy link
Copy Markdown
Contributor

+1, I’d prefer a follow-up that extends linuxkm_test_aesccm / linuxkm_test_aesccm_rfc4309 with the same kind of end-to-end crypto_aead exercise linuxkm_test_aesgcm already does (wolfCrypt vectors plus crypto_alloc_aead / crypto_aead_encrypt / crypto_aead_decrypt), since aesccm_test() alone does not drive the shim the way the kernel does.

@dgarske dgarske merged commit e73b255 into wolfSSL:master Apr 13, 2026
387 of 388 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants