34b55a952e4ae368d6db045e0b741cfd41a07f92
[dpdk.git] / app / test / test_cryptodev.c
1 /* SPDX-License-Identifier: BSD-3-Clause
2  * Copyright(c) 2015-2020 Intel Corporation
3  * Copyright 2020 NXP
4  */
5
6 #include <time.h>
7
8 #include <rte_common.h>
9 #include <rte_hexdump.h>
10 #include <rte_mbuf.h>
11 #include <rte_malloc.h>
12 #include <rte_memcpy.h>
13 #include <rte_pause.h>
14 #include <rte_bus_vdev.h>
15 #include <rte_ether.h>
16
17 #include <rte_crypto.h>
18 #include <rte_cryptodev.h>
19 #include <rte_ip.h>
20 #include <rte_string_fns.h>
21
22 #ifdef RTE_CRYPTO_SCHEDULER
23 #include <rte_cryptodev_scheduler.h>
24 #include <rte_cryptodev_scheduler_operations.h>
25 #endif
26
27 #include <rte_lcore.h>
28
29 #include "test.h"
30 #include "test_cryptodev.h"
31
32 #include "test_cryptodev_blockcipher.h"
33 #include "test_cryptodev_aes_test_vectors.h"
34 #include "test_cryptodev_des_test_vectors.h"
35 #include "test_cryptodev_hash_test_vectors.h"
36 #include "test_cryptodev_kasumi_test_vectors.h"
37 #include "test_cryptodev_kasumi_hash_test_vectors.h"
38 #include "test_cryptodev_snow3g_test_vectors.h"
39 #include "test_cryptodev_snow3g_hash_test_vectors.h"
40 #include "test_cryptodev_zuc_test_vectors.h"
41 #include "test_cryptodev_aead_test_vectors.h"
42 #include "test_cryptodev_hmac_test_vectors.h"
43 #include "test_cryptodev_mixed_test_vectors.h"
44 #ifdef RTE_LIB_SECURITY
45 #include "test_cryptodev_security_ipsec.h"
46 #include "test_cryptodev_security_ipsec_test_vectors.h"
47 #include "test_cryptodev_security_pdcp_test_vectors.h"
48 #include "test_cryptodev_security_pdcp_sdap_test_vectors.h"
49 #include "test_cryptodev_security_pdcp_test_func.h"
50 #include "test_cryptodev_security_docsis_test_vectors.h"
51
52 #define SDAP_DISABLED   0
53 #define SDAP_ENABLED    1
54 #endif
55
56 #define VDEV_ARGS_SIZE 100
57 #define MAX_NB_SESSIONS 4
58
59 #define MAX_DRV_SERVICE_CTX_SIZE 256
60
61 #define MAX_RAW_DEQUEUE_COUNT   65535
62
63 #define IN_PLACE 0
64 #define OUT_OF_PLACE 1
65
66 static int gbl_driver_id;
67
68 static enum rte_security_session_action_type gbl_action_type =
69         RTE_SECURITY_ACTION_TYPE_NONE;
70
71 enum cryptodev_api_test_type global_api_test_type = CRYPTODEV_API_TEST;
72
73 struct crypto_unittest_params {
74         struct rte_crypto_sym_xform cipher_xform;
75         struct rte_crypto_sym_xform auth_xform;
76         struct rte_crypto_sym_xform aead_xform;
77 #ifdef RTE_LIB_SECURITY
78         struct rte_security_docsis_xform docsis_xform;
79 #endif
80
81         union {
82                 struct rte_cryptodev_sym_session *sess;
83 #ifdef RTE_LIB_SECURITY
84                 struct rte_security_session *sec_session;
85 #endif
86         };
87 #ifdef RTE_LIB_SECURITY
88         enum rte_security_session_action_type type;
89 #endif
90         struct rte_crypto_op *op;
91
92         struct rte_mbuf *obuf, *ibuf;
93
94         uint8_t *digest;
95 };
96
97 #define ALIGN_POW2_ROUNDUP(num, align) \
98         (((num) + (align) - 1) & ~((align) - 1))
99
100 #define ADD_STATIC_TESTSUITE(index, parent_ts, child_ts, num_child_ts)  \
101         for (j = 0; j < num_child_ts; index++, j++)                     \
102                 parent_ts.unit_test_suites[index] = child_ts[j]
103
104 #define ADD_BLOCKCIPHER_TESTSUITE(index, parent_ts, blk_types, num_blk_types)   \
105         for (j = 0; j < num_blk_types; index++, j++)                            \
106                 parent_ts.unit_test_suites[index] =                             \
107                                 build_blockcipher_test_suite(blk_types[j])
108
109 #define FREE_BLOCKCIPHER_TESTSUITE(index, parent_ts, num_blk_types)             \
110         for (j = index; j < index + num_blk_types; j++)                         \
111                 free_blockcipher_test_suite(parent_ts.unit_test_suites[j])
112
113 /*
114  * Forward declarations.
115  */
116 static int
117 test_AES_CBC_HMAC_SHA512_decrypt_create_session_params(
118                 struct crypto_unittest_params *ut_params, uint8_t *cipher_key,
119                 uint8_t *hmac_key);
120
121 static int
122 test_AES_CBC_HMAC_SHA512_decrypt_perform(struct rte_cryptodev_sym_session *sess,
123                 struct crypto_unittest_params *ut_params,
124                 struct crypto_testsuite_params *ts_param,
125                 const uint8_t *cipher,
126                 const uint8_t *digest,
127                 const uint8_t *iv);
128
129 static int
130 security_proto_supported(enum rte_security_session_action_type action,
131         enum rte_security_session_protocol proto);
132
133 static int
134 dev_configure_and_start(uint64_t ff_disable);
135
136 static struct rte_mbuf *
137 setup_test_string(struct rte_mempool *mpool,
138                 const char *string, size_t len, uint8_t blocksize)
139 {
140         struct rte_mbuf *m = rte_pktmbuf_alloc(mpool);
141         size_t t_len = len - (blocksize ? (len % blocksize) : 0);
142
143         if (m) {
144                 char *dst;
145
146                 memset(m->buf_addr, 0, m->buf_len);
147                 dst = rte_pktmbuf_append(m, t_len);
148                 if (!dst) {
149                         rte_pktmbuf_free(m);
150                         return NULL;
151                 }
152                 if (string != NULL)
153                         rte_memcpy(dst, string, t_len);
154                 else
155                         memset(dst, 0, t_len);
156         }
157
158         return m;
159 }
160
161 /* Get number of bytes in X bits (rounding up) */
162 static uint32_t
163 ceil_byte_length(uint32_t num_bits)
164 {
165         if (num_bits % 8)
166                 return ((num_bits >> 3) + 1);
167         else
168                 return (num_bits >> 3);
169 }
170
171 static void
172 post_process_raw_dp_op(void *user_data, uint32_t index __rte_unused,
173                 uint8_t is_op_success)
174 {
175         struct rte_crypto_op *op = user_data;
176         op->status = is_op_success ? RTE_CRYPTO_OP_STATUS_SUCCESS :
177                         RTE_CRYPTO_OP_STATUS_ERROR;
178 }
179
180 void
181 process_sym_raw_dp_op(uint8_t dev_id, uint16_t qp_id,
182                 struct rte_crypto_op *op, uint8_t is_cipher, uint8_t is_auth,
183                 uint8_t len_in_bits, uint8_t cipher_iv_len)
184 {
185         struct rte_crypto_sym_op *sop = op->sym;
186         struct rte_crypto_op *ret_op = NULL;
187         struct rte_crypto_vec data_vec[UINT8_MAX];
188         struct rte_crypto_va_iova_ptr cipher_iv, digest, aad_auth_iv;
189         union rte_crypto_sym_ofs ofs;
190         struct rte_crypto_sym_vec vec;
191         struct rte_crypto_sgl sgl;
192         uint32_t max_len;
193         union rte_cryptodev_session_ctx sess;
194         uint32_t count = 0;
195         struct rte_crypto_raw_dp_ctx *ctx;
196         uint32_t cipher_offset = 0, cipher_len = 0, auth_offset = 0,
197                         auth_len = 0;
198         int32_t n;
199         uint32_t n_success;
200         int ctx_service_size;
201         int32_t status = 0;
202         int enqueue_status, dequeue_status;
203
204         ctx_service_size = rte_cryptodev_get_raw_dp_ctx_size(dev_id);
205         if (ctx_service_size < 0) {
206                 op->status = RTE_CRYPTO_OP_STATUS_ERROR;
207                 return;
208         }
209
210         ctx = malloc(ctx_service_size);
211         if (!ctx) {
212                 op->status = RTE_CRYPTO_OP_STATUS_ERROR;
213                 return;
214         }
215
216         /* Both are enums, setting crypto_sess will suit any session type */
217         sess.crypto_sess = op->sym->session;
218
219         if (rte_cryptodev_configure_raw_dp_ctx(dev_id, qp_id, ctx,
220                         op->sess_type, sess, 0) < 0) {
221                 op->status = RTE_CRYPTO_OP_STATUS_ERROR;
222                 goto exit;
223         }
224
225         cipher_iv.iova = 0;
226         cipher_iv.va = NULL;
227         aad_auth_iv.iova = 0;
228         aad_auth_iv.va = NULL;
229         digest.iova = 0;
230         digest.va = NULL;
231         sgl.vec = data_vec;
232         vec.num = 1;
233         vec.sgl = &sgl;
234         vec.iv = &cipher_iv;
235         vec.digest = &digest;
236         vec.aad = &aad_auth_iv;
237         vec.status = &status;
238
239         ofs.raw = 0;
240
241         if (is_cipher && is_auth) {
242                 cipher_offset = sop->cipher.data.offset;
243                 cipher_len = sop->cipher.data.length;
244                 auth_offset = sop->auth.data.offset;
245                 auth_len = sop->auth.data.length;
246                 max_len = RTE_MAX(cipher_offset + cipher_len,
247                                 auth_offset + auth_len);
248                 if (len_in_bits) {
249                         max_len = max_len >> 3;
250                         cipher_offset = cipher_offset >> 3;
251                         auth_offset = auth_offset >> 3;
252                         cipher_len = cipher_len >> 3;
253                         auth_len = auth_len >> 3;
254                 }
255                 ofs.ofs.cipher.head = cipher_offset;
256                 ofs.ofs.cipher.tail = max_len - cipher_offset - cipher_len;
257                 ofs.ofs.auth.head = auth_offset;
258                 ofs.ofs.auth.tail = max_len - auth_offset - auth_len;
259                 cipher_iv.va = rte_crypto_op_ctod_offset(op, void *, IV_OFFSET);
260                 cipher_iv.iova = rte_crypto_op_ctophys_offset(op, IV_OFFSET);
261                 aad_auth_iv.va = rte_crypto_op_ctod_offset(
262                                 op, void *, IV_OFFSET + cipher_iv_len);
263                 aad_auth_iv.iova = rte_crypto_op_ctophys_offset(op, IV_OFFSET +
264                                 cipher_iv_len);
265                 digest.va = (void *)sop->auth.digest.data;
266                 digest.iova = sop->auth.digest.phys_addr;
267
268         } else if (is_cipher) {
269                 cipher_offset = sop->cipher.data.offset;
270                 cipher_len = sop->cipher.data.length;
271                 max_len = cipher_len + cipher_offset;
272                 if (len_in_bits) {
273                         max_len = max_len >> 3;
274                         cipher_offset = cipher_offset >> 3;
275                         cipher_len = cipher_len >> 3;
276                 }
277                 ofs.ofs.cipher.head = cipher_offset;
278                 ofs.ofs.cipher.tail = max_len - cipher_offset - cipher_len;
279                 cipher_iv.va = rte_crypto_op_ctod_offset(op, void *, IV_OFFSET);
280                 cipher_iv.iova = rte_crypto_op_ctophys_offset(op, IV_OFFSET);
281
282         } else if (is_auth) {
283                 auth_offset = sop->auth.data.offset;
284                 auth_len = sop->auth.data.length;
285                 max_len = auth_len + auth_offset;
286                 if (len_in_bits) {
287                         max_len = max_len >> 3;
288                         auth_offset = auth_offset >> 3;
289                         auth_len = auth_len >> 3;
290                 }
291                 ofs.ofs.auth.head = auth_offset;
292                 ofs.ofs.auth.tail = max_len - auth_offset - auth_len;
293                 aad_auth_iv.va = rte_crypto_op_ctod_offset(
294                                 op, void *, IV_OFFSET + cipher_iv_len);
295                 aad_auth_iv.iova = rte_crypto_op_ctophys_offset(op, IV_OFFSET +
296                                 cipher_iv_len);
297                 digest.va = (void *)sop->auth.digest.data;
298                 digest.iova = sop->auth.digest.phys_addr;
299
300         } else { /* aead */
301                 cipher_offset = sop->aead.data.offset;
302                 cipher_len = sop->aead.data.length;
303                 max_len = cipher_len + cipher_offset;
304                 if (len_in_bits) {
305                         max_len = max_len >> 3;
306                         cipher_offset = cipher_offset >> 3;
307                         cipher_len = cipher_len >> 3;
308                 }
309                 ofs.ofs.cipher.head = cipher_offset;
310                 ofs.ofs.cipher.tail = max_len - cipher_offset - cipher_len;
311                 cipher_iv.va = rte_crypto_op_ctod_offset(op, void *, IV_OFFSET);
312                 cipher_iv.iova = rte_crypto_op_ctophys_offset(op, IV_OFFSET);
313                 aad_auth_iv.va = (void *)sop->aead.aad.data;
314                 aad_auth_iv.iova = sop->aead.aad.phys_addr;
315                 digest.va = (void *)sop->aead.digest.data;
316                 digest.iova = sop->aead.digest.phys_addr;
317         }
318
319         n = rte_crypto_mbuf_to_vec(sop->m_src, 0, max_len,
320                         data_vec, RTE_DIM(data_vec));
321         if (n < 0 || n > sop->m_src->nb_segs) {
322                 op->status = RTE_CRYPTO_OP_STATUS_ERROR;
323                 goto exit;
324         }
325
326         sgl.num = n;
327
328         if (rte_cryptodev_raw_enqueue_burst(ctx, &vec, ofs, (void **)&op,
329                         &enqueue_status) < 1) {
330                 op->status = RTE_CRYPTO_OP_STATUS_ERROR;
331                 goto exit;
332         }
333
334         if (enqueue_status == 0) {
335                 status = rte_cryptodev_raw_enqueue_done(ctx, 1);
336                 if (status < 0) {
337                         op->status = RTE_CRYPTO_OP_STATUS_ERROR;
338                         goto exit;
339                 }
340         } else if (enqueue_status < 0) {
341                 op->status = RTE_CRYPTO_OP_STATUS_ERROR;
342                 goto exit;
343         }
344
345         n = n_success = 0;
346         while (count++ < MAX_RAW_DEQUEUE_COUNT && n == 0) {
347                 n = rte_cryptodev_raw_dequeue_burst(ctx,
348                         NULL, 1, post_process_raw_dp_op,
349                                 (void **)&ret_op, 0, &n_success,
350                                 &dequeue_status);
351                 if (dequeue_status < 0) {
352                         op->status = RTE_CRYPTO_OP_STATUS_ERROR;
353                         goto exit;
354                 }
355                 if (n == 0)
356                         rte_pause();
357         }
358
359         if (n == 1 && dequeue_status == 0) {
360                 if (rte_cryptodev_raw_dequeue_done(ctx, 1) < 0) {
361                         op->status = RTE_CRYPTO_OP_STATUS_ERROR;
362                         goto exit;
363                 }
364         }
365
366         op->status = (count == MAX_RAW_DEQUEUE_COUNT + 1 || ret_op != op ||
367                         n_success < 1) ? RTE_CRYPTO_OP_STATUS_ERROR :
368                                         RTE_CRYPTO_OP_STATUS_SUCCESS;
369
370 exit:
371         free(ctx);
372 }
373
374 static void
375 process_cpu_aead_op(uint8_t dev_id, struct rte_crypto_op *op)
376 {
377         int32_t n, st;
378         struct rte_crypto_sym_op *sop;
379         union rte_crypto_sym_ofs ofs;
380         struct rte_crypto_sgl sgl;
381         struct rte_crypto_sym_vec symvec;
382         struct rte_crypto_va_iova_ptr iv_ptr, aad_ptr, digest_ptr;
383         struct rte_crypto_vec vec[UINT8_MAX];
384
385         sop = op->sym;
386
387         n = rte_crypto_mbuf_to_vec(sop->m_src, sop->aead.data.offset,
388                 sop->aead.data.length, vec, RTE_DIM(vec));
389
390         if (n < 0 || n != sop->m_src->nb_segs) {
391                 op->status = RTE_CRYPTO_OP_STATUS_ERROR;
392                 return;
393         }
394
395         sgl.vec = vec;
396         sgl.num = n;
397         symvec.sgl = &sgl;
398         symvec.iv = &iv_ptr;
399         symvec.digest = &digest_ptr;
400         symvec.aad = &aad_ptr;
401         symvec.status = &st;
402         symvec.num = 1;
403
404         /* for CPU crypto the IOVA address is not required */
405         iv_ptr.va = rte_crypto_op_ctod_offset(op, void *, IV_OFFSET);
406         digest_ptr.va = (void *)sop->aead.digest.data;
407         aad_ptr.va = (void *)sop->aead.aad.data;
408
409         ofs.raw = 0;
410
411         n = rte_cryptodev_sym_cpu_crypto_process(dev_id, sop->session, ofs,
412                 &symvec);
413
414         if (n != 1)
415                 op->status = RTE_CRYPTO_OP_STATUS_AUTH_FAILED;
416         else
417                 op->status = RTE_CRYPTO_OP_STATUS_SUCCESS;
418 }
419
420 static void
421 process_cpu_crypt_auth_op(uint8_t dev_id, struct rte_crypto_op *op)
422 {
423         int32_t n, st;
424         struct rte_crypto_sym_op *sop;
425         union rte_crypto_sym_ofs ofs;
426         struct rte_crypto_sgl sgl;
427         struct rte_crypto_sym_vec symvec;
428         struct rte_crypto_va_iova_ptr iv_ptr, digest_ptr;
429         struct rte_crypto_vec vec[UINT8_MAX];
430
431         sop = op->sym;
432
433         n = rte_crypto_mbuf_to_vec(sop->m_src, sop->auth.data.offset,
434                 sop->auth.data.length, vec, RTE_DIM(vec));
435
436         if (n < 0 || n != sop->m_src->nb_segs) {
437                 op->status = RTE_CRYPTO_OP_STATUS_ERROR;
438                 return;
439         }
440
441         sgl.vec = vec;
442         sgl.num = n;
443         symvec.sgl = &sgl;
444         symvec.iv = &iv_ptr;
445         symvec.digest = &digest_ptr;
446         symvec.status = &st;
447         symvec.num = 1;
448
449         iv_ptr.va = rte_crypto_op_ctod_offset(op, void *, IV_OFFSET);
450         digest_ptr.va = (void *)sop->auth.digest.data;
451
452         ofs.raw = 0;
453         ofs.ofs.cipher.head = sop->cipher.data.offset - sop->auth.data.offset;
454         ofs.ofs.cipher.tail = (sop->auth.data.offset + sop->auth.data.length) -
455                 (sop->cipher.data.offset + sop->cipher.data.length);
456
457         n = rte_cryptodev_sym_cpu_crypto_process(dev_id, sop->session, ofs,
458                 &symvec);
459
460         if (n != 1)
461                 op->status = RTE_CRYPTO_OP_STATUS_AUTH_FAILED;
462         else
463                 op->status = RTE_CRYPTO_OP_STATUS_SUCCESS;
464 }
465
466 static struct rte_crypto_op *
467 process_crypto_request(uint8_t dev_id, struct rte_crypto_op *op)
468 {
469
470         RTE_VERIFY(gbl_action_type != RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO);
471
472         if (rte_cryptodev_enqueue_burst(dev_id, 0, &op, 1) != 1) {
473                 RTE_LOG(ERR, USER1, "Error sending packet for encryption\n");
474                 return NULL;
475         }
476
477         op = NULL;
478
479         while (rte_cryptodev_dequeue_burst(dev_id, 0, &op, 1) == 0)
480                 rte_pause();
481
482         if (op->status != RTE_CRYPTO_OP_STATUS_SUCCESS) {
483                 RTE_LOG(DEBUG, USER1, "Operation status %d\n", op->status);
484                 return NULL;
485         }
486
487         return op;
488 }
489
490 static struct crypto_testsuite_params testsuite_params = { NULL };
491 struct crypto_testsuite_params *p_testsuite_params = &testsuite_params;
492 static struct crypto_unittest_params unittest_params;
493
494 static int
495 testsuite_setup(void)
496 {
497         struct crypto_testsuite_params *ts_params = &testsuite_params;
498         struct rte_cryptodev_info info;
499         uint32_t i = 0, nb_devs, dev_id;
500         uint16_t qp_id;
501
502         memset(ts_params, 0, sizeof(*ts_params));
503
504         ts_params->mbuf_pool = rte_mempool_lookup("CRYPTO_MBUFPOOL");
505         if (ts_params->mbuf_pool == NULL) {
506                 /* Not already created so create */
507                 ts_params->mbuf_pool = rte_pktmbuf_pool_create(
508                                 "CRYPTO_MBUFPOOL",
509                                 NUM_MBUFS, MBUF_CACHE_SIZE, 0, MBUF_SIZE,
510                                 rte_socket_id());
511                 if (ts_params->mbuf_pool == NULL) {
512                         RTE_LOG(ERR, USER1, "Can't create CRYPTO_MBUFPOOL\n");
513                         return TEST_FAILED;
514                 }
515         }
516
517         ts_params->large_mbuf_pool = rte_mempool_lookup(
518                         "CRYPTO_LARGE_MBUFPOOL");
519         if (ts_params->large_mbuf_pool == NULL) {
520                 /* Not already created so create */
521                 ts_params->large_mbuf_pool = rte_pktmbuf_pool_create(
522                                 "CRYPTO_LARGE_MBUFPOOL",
523                                 1, 0, 0, UINT16_MAX,
524                                 rte_socket_id());
525                 if (ts_params->large_mbuf_pool == NULL) {
526                         RTE_LOG(ERR, USER1,
527                                 "Can't create CRYPTO_LARGE_MBUFPOOL\n");
528                         return TEST_FAILED;
529                 }
530         }
531
532         ts_params->op_mpool = rte_crypto_op_pool_create(
533                         "MBUF_CRYPTO_SYM_OP_POOL",
534                         RTE_CRYPTO_OP_TYPE_SYMMETRIC,
535                         NUM_MBUFS, MBUF_CACHE_SIZE,
536                         DEFAULT_NUM_XFORMS *
537                         sizeof(struct rte_crypto_sym_xform) +
538                         MAXIMUM_IV_LENGTH,
539                         rte_socket_id());
540         if (ts_params->op_mpool == NULL) {
541                 RTE_LOG(ERR, USER1, "Can't create CRYPTO_OP_POOL\n");
542                 return TEST_FAILED;
543         }
544
545         nb_devs = rte_cryptodev_count();
546         if (nb_devs < 1) {
547                 RTE_LOG(WARNING, USER1, "No crypto devices found?\n");
548                 return TEST_SKIPPED;
549         }
550
551         if (rte_cryptodev_device_count_by_driver(gbl_driver_id) < 1) {
552                 RTE_LOG(WARNING, USER1, "No %s devices found?\n",
553                                 rte_cryptodev_driver_name_get(gbl_driver_id));
554                 return TEST_SKIPPED;
555         }
556
557         /* Create list of valid crypto devs */
558         for (i = 0; i < nb_devs; i++) {
559                 rte_cryptodev_info_get(i, &info);
560                 if (info.driver_id == gbl_driver_id)
561                         ts_params->valid_devs[ts_params->valid_dev_count++] = i;
562         }
563
564         if (ts_params->valid_dev_count < 1)
565                 return TEST_FAILED;
566
567         /* Set up all the qps on the first of the valid devices found */
568
569         dev_id = ts_params->valid_devs[0];
570
571         rte_cryptodev_info_get(dev_id, &info);
572
573         ts_params->conf.nb_queue_pairs = info.max_nb_queue_pairs;
574         ts_params->conf.socket_id = SOCKET_ID_ANY;
575         ts_params->conf.ff_disable = RTE_CRYPTODEV_FF_SECURITY;
576
577         unsigned int session_size =
578                 rte_cryptodev_sym_get_private_session_size(dev_id);
579
580 #ifdef RTE_LIB_SECURITY
581         unsigned int security_session_size = rte_security_session_get_size(
582                         rte_cryptodev_get_sec_ctx(dev_id));
583
584         if (session_size < security_session_size)
585                 session_size = security_session_size;
586 #endif
587         /*
588          * Create mempool with maximum number of sessions.
589          */
590         if (info.sym.max_nb_sessions != 0 &&
591                         info.sym.max_nb_sessions < MAX_NB_SESSIONS) {
592                 RTE_LOG(ERR, USER1, "Device does not support "
593                                 "at least %u sessions\n",
594                                 MAX_NB_SESSIONS);
595                 return TEST_FAILED;
596         }
597
598         ts_params->session_mpool = rte_cryptodev_sym_session_pool_create(
599                         "test_sess_mp", MAX_NB_SESSIONS, 0, 0, 0,
600                         SOCKET_ID_ANY);
601         TEST_ASSERT_NOT_NULL(ts_params->session_mpool,
602                         "session mempool allocation failed");
603
604         ts_params->session_priv_mpool = rte_mempool_create(
605                         "test_sess_mp_priv",
606                         MAX_NB_SESSIONS,
607                         session_size,
608                         0, 0, NULL, NULL, NULL,
609                         NULL, SOCKET_ID_ANY,
610                         0);
611         TEST_ASSERT_NOT_NULL(ts_params->session_priv_mpool,
612                         "session mempool allocation failed");
613
614
615
616         TEST_ASSERT_SUCCESS(rte_cryptodev_configure(dev_id,
617                         &ts_params->conf),
618                         "Failed to configure cryptodev %u with %u qps",
619                         dev_id, ts_params->conf.nb_queue_pairs);
620
621         ts_params->qp_conf.nb_descriptors = MAX_NUM_OPS_INFLIGHT;
622         ts_params->qp_conf.mp_session = ts_params->session_mpool;
623         ts_params->qp_conf.mp_session_private = ts_params->session_priv_mpool;
624
625         for (qp_id = 0; qp_id < info.max_nb_queue_pairs; qp_id++) {
626                 TEST_ASSERT_SUCCESS(rte_cryptodev_queue_pair_setup(
627                         dev_id, qp_id, &ts_params->qp_conf,
628                         rte_cryptodev_socket_id(dev_id)),
629                         "Failed to setup queue pair %u on cryptodev %u",
630                         qp_id, dev_id);
631         }
632
633         return TEST_SUCCESS;
634 }
635
636 static void
637 testsuite_teardown(void)
638 {
639         struct crypto_testsuite_params *ts_params = &testsuite_params;
640         int res;
641
642         if (ts_params->mbuf_pool != NULL) {
643                 RTE_LOG(DEBUG, USER1, "CRYPTO_MBUFPOOL count %u\n",
644                 rte_mempool_avail_count(ts_params->mbuf_pool));
645         }
646
647         if (ts_params->op_mpool != NULL) {
648                 RTE_LOG(DEBUG, USER1, "CRYPTO_OP_POOL count %u\n",
649                 rte_mempool_avail_count(ts_params->op_mpool));
650         }
651
652         /* Free session mempools */
653         if (ts_params->session_priv_mpool != NULL) {
654                 rte_mempool_free(ts_params->session_priv_mpool);
655                 ts_params->session_priv_mpool = NULL;
656         }
657
658         if (ts_params->session_mpool != NULL) {
659                 rte_mempool_free(ts_params->session_mpool);
660                 ts_params->session_mpool = NULL;
661         }
662
663         res = rte_cryptodev_close(ts_params->valid_devs[0]);
664         if (res)
665                 RTE_LOG(ERR, USER1, "Crypto device close error %d\n", res);
666 }
667
668 static int
669 check_capabilities_supported(enum rte_crypto_sym_xform_type type,
670                 const int *algs, uint16_t num_algs)
671 {
672         uint8_t dev_id = testsuite_params.valid_devs[0];
673         bool some_alg_supported = FALSE;
674         uint16_t i;
675
676         for (i = 0; i < num_algs && !some_alg_supported; i++) {
677                 struct rte_cryptodev_sym_capability_idx alg = {
678                         type, {algs[i]}
679                 };
680                 if (rte_cryptodev_sym_capability_get(dev_id,
681                                 &alg) != NULL)
682                         some_alg_supported = TRUE;
683         }
684         if (!some_alg_supported)
685                 return TEST_SKIPPED;
686
687         return 0;
688 }
689
690 int
691 check_cipher_capabilities_supported(const enum rte_crypto_cipher_algorithm *ciphers,
692                 uint16_t num_ciphers)
693 {
694         return check_capabilities_supported(RTE_CRYPTO_SYM_XFORM_CIPHER,
695                         (const int *) ciphers, num_ciphers);
696 }
697
698 int
699 check_auth_capabilities_supported(const enum rte_crypto_auth_algorithm *auths,
700                 uint16_t num_auths)
701 {
702         return check_capabilities_supported(RTE_CRYPTO_SYM_XFORM_AUTH,
703                         (const int *) auths, num_auths);
704 }
705
706 int
707 check_aead_capabilities_supported(const enum rte_crypto_aead_algorithm *aeads,
708                 uint16_t num_aeads)
709 {
710         return check_capabilities_supported(RTE_CRYPTO_SYM_XFORM_AEAD,
711                         (const int *) aeads, num_aeads);
712 }
713
714 static int
715 null_testsuite_setup(void)
716 {
717         struct crypto_testsuite_params *ts_params = &testsuite_params;
718         uint8_t dev_id = ts_params->valid_devs[0];
719         struct rte_cryptodev_info dev_info;
720         const enum rte_crypto_cipher_algorithm ciphers[] = {
721                 RTE_CRYPTO_CIPHER_NULL
722         };
723         const enum rte_crypto_auth_algorithm auths[] = {
724                 RTE_CRYPTO_AUTH_NULL
725         };
726
727         rte_cryptodev_info_get(dev_id, &dev_info);
728
729         if (!(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYMMETRIC_CRYPTO)) {
730                 RTE_LOG(INFO, USER1, "Feature flag requirements for NULL "
731                                 "testsuite not met\n");
732                 return TEST_SKIPPED;
733         }
734
735         if (check_cipher_capabilities_supported(ciphers, RTE_DIM(ciphers)) != 0
736                         && check_auth_capabilities_supported(auths,
737                         RTE_DIM(auths)) != 0) {
738                 RTE_LOG(INFO, USER1, "Capability requirements for NULL "
739                                 "testsuite not met\n");
740                 return TEST_SKIPPED;
741         }
742
743         return 0;
744 }
745
746 static int
747 crypto_gen_testsuite_setup(void)
748 {
749         struct crypto_testsuite_params *ts_params = &testsuite_params;
750         uint8_t dev_id = ts_params->valid_devs[0];
751         struct rte_cryptodev_info dev_info;
752
753         rte_cryptodev_info_get(dev_id, &dev_info);
754
755         if (!(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYMMETRIC_CRYPTO)) {
756                 RTE_LOG(INFO, USER1, "Feature flag requirements for Crypto Gen "
757                                 "testsuite not met\n");
758                 return TEST_SKIPPED;
759         }
760
761         return 0;
762 }
763
764 #ifdef RTE_LIB_SECURITY
765 static int
766 ipsec_proto_testsuite_setup(void)
767 {
768         struct crypto_testsuite_params *ts_params = &testsuite_params;
769         struct crypto_unittest_params *ut_params = &unittest_params;
770         struct rte_cryptodev_info dev_info;
771         int ret = 0;
772
773         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
774
775         if (!(dev_info.feature_flags & RTE_CRYPTODEV_FF_SECURITY)) {
776                 RTE_LOG(INFO, USER1, "Feature flag requirements for IPsec Proto "
777                                 "testsuite not met\n");
778                 return TEST_SKIPPED;
779         }
780
781         /* Reconfigure to enable security */
782         ret = dev_configure_and_start(0);
783         if (ret != TEST_SUCCESS)
784                 return ret;
785
786         /* Set action type */
787         ut_params->type = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL;
788
789         if (security_proto_supported(
790                         RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL,
791                         RTE_SECURITY_PROTOCOL_IPSEC) < 0) {
792                 RTE_LOG(INFO, USER1, "Capability requirements for IPsec Proto "
793                                 "test not met\n");
794                 ret = TEST_SKIPPED;
795         }
796
797         /*
798          * Stop the device. Device would be started again by individual test
799          * case setup routine.
800          */
801         rte_cryptodev_stop(ts_params->valid_devs[0]);
802
803         return ret;
804 }
805
806 static int
807 pdcp_proto_testsuite_setup(void)
808 {
809         struct crypto_testsuite_params *ts_params = &testsuite_params;
810         uint8_t dev_id = ts_params->valid_devs[0];
811         struct rte_cryptodev_info dev_info;
812         const enum rte_crypto_cipher_algorithm ciphers[] = {
813                 RTE_CRYPTO_CIPHER_NULL,
814                 RTE_CRYPTO_CIPHER_AES_CTR,
815                 RTE_CRYPTO_CIPHER_ZUC_EEA3,
816                 RTE_CRYPTO_CIPHER_SNOW3G_UEA2
817         };
818         const enum rte_crypto_auth_algorithm auths[] = {
819                 RTE_CRYPTO_AUTH_NULL,
820                 RTE_CRYPTO_AUTH_SNOW3G_UIA2,
821                 RTE_CRYPTO_AUTH_AES_CMAC,
822                 RTE_CRYPTO_AUTH_ZUC_EIA3
823         };
824
825         rte_cryptodev_info_get(dev_id, &dev_info);
826
827         if (!(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYMMETRIC_CRYPTO) ||
828                         !(dev_info.feature_flags &
829                         RTE_CRYPTODEV_FF_SECURITY)) {
830                 RTE_LOG(INFO, USER1, "Feature flag requirements for PDCP Proto "
831                                 "testsuite not met\n");
832                 return TEST_SKIPPED;
833         }
834
835         if (check_cipher_capabilities_supported(ciphers, RTE_DIM(ciphers)) != 0
836                         && check_auth_capabilities_supported(auths,
837                         RTE_DIM(auths)) != 0) {
838                 RTE_LOG(INFO, USER1, "Capability requirements for PDCP Proto "
839                                 "testsuite not met\n");
840                 return TEST_SKIPPED;
841         }
842
843         return 0;
844 }
845
846 static int
847 docsis_proto_testsuite_setup(void)
848 {
849         struct crypto_testsuite_params *ts_params = &testsuite_params;
850         uint8_t dev_id = ts_params->valid_devs[0];
851         struct rte_cryptodev_info dev_info;
852         const enum rte_crypto_cipher_algorithm ciphers[] = {
853                 RTE_CRYPTO_CIPHER_AES_DOCSISBPI
854         };
855
856         rte_cryptodev_info_get(dev_id, &dev_info);
857
858         if (!(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYMMETRIC_CRYPTO) ||
859                         !(dev_info.feature_flags &
860                         RTE_CRYPTODEV_FF_SECURITY)) {
861                 RTE_LOG(INFO, USER1, "Feature flag requirements for Docsis "
862                                 "Proto testsuite not met\n");
863                 return TEST_SKIPPED;
864         }
865
866         if (check_cipher_capabilities_supported(ciphers, RTE_DIM(ciphers)) != 0) {
867                 RTE_LOG(INFO, USER1, "Capability requirements for Docsis Proto "
868                                 "testsuite not met\n");
869                 return TEST_SKIPPED;
870         }
871
872         return 0;
873 }
874 #endif
875
876 static int
877 aes_ccm_auth_testsuite_setup(void)
878 {
879         struct crypto_testsuite_params *ts_params = &testsuite_params;
880         uint8_t dev_id = ts_params->valid_devs[0];
881         struct rte_cryptodev_info dev_info;
882         const enum rte_crypto_aead_algorithm aeads[] = {
883                 RTE_CRYPTO_AEAD_AES_CCM
884         };
885
886         rte_cryptodev_info_get(dev_id, &dev_info);
887
888         if (!(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYMMETRIC_CRYPTO) ||
889                         ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
890                         !(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
891                 RTE_LOG(INFO, USER1, "Feature flag requirements for AES CCM "
892                                 "testsuite not met\n");
893                 return TEST_SKIPPED;
894         }
895
896         if (check_aead_capabilities_supported(aeads, RTE_DIM(aeads)) != 0) {
897                 RTE_LOG(INFO, USER1, "Capability requirements for AES CCM "
898                                 "testsuite not met\n");
899                 return TEST_SKIPPED;
900         }
901
902         return 0;
903 }
904
905 static int
906 aes_gcm_auth_testsuite_setup(void)
907 {
908         struct crypto_testsuite_params *ts_params = &testsuite_params;
909         uint8_t dev_id = ts_params->valid_devs[0];
910         struct rte_cryptodev_info dev_info;
911         const enum rte_crypto_aead_algorithm aeads[] = {
912                 RTE_CRYPTO_AEAD_AES_GCM
913         };
914
915         rte_cryptodev_info_get(dev_id, &dev_info);
916
917         if (!(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYMMETRIC_CRYPTO)) {
918                 RTE_LOG(INFO, USER1, "Feature flag requirements for AES GCM "
919                                 "testsuite not met\n");
920                 return TEST_SKIPPED;
921         }
922
923         if (check_aead_capabilities_supported(aeads, RTE_DIM(aeads)) != 0) {
924                 RTE_LOG(INFO, USER1, "Capability requirements for AES GCM "
925                                 "testsuite not met\n");
926                 return TEST_SKIPPED;
927         }
928
929         return 0;
930 }
931
932 static int
933 aes_gmac_auth_testsuite_setup(void)
934 {
935         struct crypto_testsuite_params *ts_params = &testsuite_params;
936         uint8_t dev_id = ts_params->valid_devs[0];
937         struct rte_cryptodev_info dev_info;
938         const enum rte_crypto_auth_algorithm auths[] = {
939                 RTE_CRYPTO_AUTH_AES_GMAC
940         };
941
942         rte_cryptodev_info_get(dev_id, &dev_info);
943
944         if (!(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYMMETRIC_CRYPTO) ||
945                         ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
946                         !(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
947                 RTE_LOG(INFO, USER1, "Feature flag requirements for AES GMAC "
948                                 "testsuite not met\n");
949                 return TEST_SKIPPED;
950         }
951
952         if (check_auth_capabilities_supported(auths, RTE_DIM(auths)) != 0) {
953                 RTE_LOG(INFO, USER1, "Capability requirements for AES GMAC "
954                                 "testsuite not met\n");
955                 return TEST_SKIPPED;
956         }
957
958         return 0;
959 }
960
961 static int
962 chacha20_poly1305_testsuite_setup(void)
963 {
964         struct crypto_testsuite_params *ts_params = &testsuite_params;
965         uint8_t dev_id = ts_params->valid_devs[0];
966         struct rte_cryptodev_info dev_info;
967         const enum rte_crypto_aead_algorithm aeads[] = {
968                 RTE_CRYPTO_AEAD_CHACHA20_POLY1305
969         };
970
971         rte_cryptodev_info_get(dev_id, &dev_info);
972
973         if (!(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYMMETRIC_CRYPTO) ||
974                         ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
975                         !(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
976                 RTE_LOG(INFO, USER1, "Feature flag requirements for "
977                                 "Chacha20-Poly1305 testsuite not met\n");
978                 return TEST_SKIPPED;
979         }
980
981         if (check_aead_capabilities_supported(aeads, RTE_DIM(aeads)) != 0) {
982                 RTE_LOG(INFO, USER1, "Capability requirements for "
983                                 "Chacha20-Poly1305 testsuite not met\n");
984                 return TEST_SKIPPED;
985         }
986
987         return 0;
988 }
989
990 static int
991 snow3g_testsuite_setup(void)
992 {
993         struct crypto_testsuite_params *ts_params = &testsuite_params;
994         uint8_t dev_id = ts_params->valid_devs[0];
995         struct rte_cryptodev_info dev_info;
996         const enum rte_crypto_cipher_algorithm ciphers[] = {
997                 RTE_CRYPTO_CIPHER_SNOW3G_UEA2
998
999         };
1000         const enum rte_crypto_auth_algorithm auths[] = {
1001                 RTE_CRYPTO_AUTH_SNOW3G_UIA2
1002         };
1003
1004         rte_cryptodev_info_get(dev_id, &dev_info);
1005
1006         if (!(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYMMETRIC_CRYPTO)) {
1007                 RTE_LOG(INFO, USER1, "Feature flag requirements for Snow3G "
1008                                 "testsuite not met\n");
1009                 return TEST_SKIPPED;
1010         }
1011
1012         if (check_cipher_capabilities_supported(ciphers, RTE_DIM(ciphers)) != 0
1013                         && check_auth_capabilities_supported(auths,
1014                         RTE_DIM(auths)) != 0) {
1015                 RTE_LOG(INFO, USER1, "Capability requirements for Snow3G "
1016                                 "testsuite not met\n");
1017                 return TEST_SKIPPED;
1018         }
1019
1020         return 0;
1021 }
1022
1023 static int
1024 zuc_testsuite_setup(void)
1025 {
1026         struct crypto_testsuite_params *ts_params = &testsuite_params;
1027         uint8_t dev_id = ts_params->valid_devs[0];
1028         struct rte_cryptodev_info dev_info;
1029         const enum rte_crypto_cipher_algorithm ciphers[] = {
1030                 RTE_CRYPTO_CIPHER_ZUC_EEA3
1031         };
1032         const enum rte_crypto_auth_algorithm auths[] = {
1033                 RTE_CRYPTO_AUTH_ZUC_EIA3
1034         };
1035
1036         rte_cryptodev_info_get(dev_id, &dev_info);
1037
1038         if (!(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYMMETRIC_CRYPTO)) {
1039                 RTE_LOG(INFO, USER1, "Feature flag requirements for ZUC "
1040                                 "testsuite not met\n");
1041                 return TEST_SKIPPED;
1042         }
1043
1044         if (check_cipher_capabilities_supported(ciphers, RTE_DIM(ciphers)) != 0
1045                         && check_auth_capabilities_supported(auths,
1046                         RTE_DIM(auths)) != 0) {
1047                 RTE_LOG(INFO, USER1, "Capability requirements for ZUC "
1048                                 "testsuite not met\n");
1049                 return TEST_SKIPPED;
1050         }
1051
1052         return 0;
1053 }
1054
1055 static int
1056 hmac_md5_auth_testsuite_setup(void)
1057 {
1058         struct crypto_testsuite_params *ts_params = &testsuite_params;
1059         uint8_t dev_id = ts_params->valid_devs[0];
1060         struct rte_cryptodev_info dev_info;
1061         const enum rte_crypto_auth_algorithm auths[] = {
1062                 RTE_CRYPTO_AUTH_MD5_HMAC
1063         };
1064
1065         rte_cryptodev_info_get(dev_id, &dev_info);
1066
1067         if (!(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYMMETRIC_CRYPTO) ||
1068                         ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
1069                         !(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
1070                 RTE_LOG(INFO, USER1, "Feature flag requirements for HMAC MD5 "
1071                                 "Auth testsuite not met\n");
1072                 return TEST_SKIPPED;
1073         }
1074
1075         if (check_auth_capabilities_supported(auths, RTE_DIM(auths)) != 0) {
1076                 RTE_LOG(INFO, USER1, "Capability requirements for HMAC MD5 "
1077                                 "testsuite not met\n");
1078                 return TEST_SKIPPED;
1079         }
1080
1081         return 0;
1082 }
1083
1084 static int
1085 kasumi_testsuite_setup(void)
1086 {
1087         struct crypto_testsuite_params *ts_params = &testsuite_params;
1088         uint8_t dev_id = ts_params->valid_devs[0];
1089         struct rte_cryptodev_info dev_info;
1090         const enum rte_crypto_cipher_algorithm ciphers[] = {
1091                 RTE_CRYPTO_CIPHER_KASUMI_F8
1092         };
1093         const enum rte_crypto_auth_algorithm auths[] = {
1094                 RTE_CRYPTO_AUTH_KASUMI_F9
1095         };
1096
1097         rte_cryptodev_info_get(dev_id, &dev_info);
1098
1099         if (!(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYMMETRIC_CRYPTO) ||
1100                         ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
1101                         !(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
1102                 RTE_LOG(INFO, USER1, "Feature flag requirements for Kasumi "
1103                                 "testsuite not met\n");
1104                 return TEST_SKIPPED;
1105         }
1106
1107         if (check_cipher_capabilities_supported(ciphers, RTE_DIM(ciphers)) != 0
1108                         && check_auth_capabilities_supported(auths,
1109                         RTE_DIM(auths)) != 0) {
1110                 RTE_LOG(INFO, USER1, "Capability requirements for Kasumi "
1111                                 "testsuite not met\n");
1112                 return TEST_SKIPPED;
1113         }
1114
1115         return 0;
1116 }
1117
1118 static int
1119 negative_aes_gcm_testsuite_setup(void)
1120 {
1121         struct crypto_testsuite_params *ts_params = &testsuite_params;
1122         uint8_t dev_id = ts_params->valid_devs[0];
1123         struct rte_cryptodev_info dev_info;
1124         const enum rte_crypto_aead_algorithm aeads[] = {
1125                 RTE_CRYPTO_AEAD_AES_GCM
1126         };
1127
1128         rte_cryptodev_info_get(dev_id, &dev_info);
1129
1130         if (!(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYMMETRIC_CRYPTO) ||
1131                         ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
1132                         !(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
1133                 RTE_LOG(INFO, USER1, "Feature flag requirements for Negative "
1134                                 "AES GCM testsuite not met\n");
1135                 return TEST_SKIPPED;
1136         }
1137
1138         if (check_aead_capabilities_supported(aeads, RTE_DIM(aeads)) != 0) {
1139                 RTE_LOG(INFO, USER1, "Capability requirements for Negative "
1140                                 "AES GCM testsuite not met\n");
1141                 return TEST_SKIPPED;
1142         }
1143
1144         return 0;
1145 }
1146
1147 static int
1148 negative_aes_gmac_testsuite_setup(void)
1149 {
1150         struct crypto_testsuite_params *ts_params = &testsuite_params;
1151         uint8_t dev_id = ts_params->valid_devs[0];
1152         struct rte_cryptodev_info dev_info;
1153         const enum rte_crypto_auth_algorithm auths[] = {
1154                 RTE_CRYPTO_AUTH_AES_GMAC
1155         };
1156
1157         rte_cryptodev_info_get(dev_id, &dev_info);
1158
1159         if (!(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYMMETRIC_CRYPTO) ||
1160                         ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
1161                         !(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
1162                 RTE_LOG(INFO, USER1, "Feature flag requirements for Negative "
1163                                 "AES GMAC testsuite not met\n");
1164                 return TEST_SKIPPED;
1165         }
1166
1167         if (check_auth_capabilities_supported(auths, RTE_DIM(auths)) != 0) {
1168                 RTE_LOG(INFO, USER1, "Capability requirements for Negative "
1169                                 "AES GMAC testsuite not met\n");
1170                 return TEST_SKIPPED;
1171         }
1172
1173         return 0;
1174 }
1175
1176 static int
1177 mixed_cipher_hash_testsuite_setup(void)
1178 {
1179         struct crypto_testsuite_params *ts_params = &testsuite_params;
1180         uint8_t dev_id = ts_params->valid_devs[0];
1181         struct rte_cryptodev_info dev_info;
1182         uint64_t feat_flags;
1183         const enum rte_crypto_cipher_algorithm ciphers[] = {
1184                 RTE_CRYPTO_CIPHER_NULL,
1185                 RTE_CRYPTO_CIPHER_AES_CTR,
1186                 RTE_CRYPTO_CIPHER_ZUC_EEA3,
1187                 RTE_CRYPTO_CIPHER_SNOW3G_UEA2
1188         };
1189         const enum rte_crypto_auth_algorithm auths[] = {
1190                 RTE_CRYPTO_AUTH_NULL,
1191                 RTE_CRYPTO_AUTH_SNOW3G_UIA2,
1192                 RTE_CRYPTO_AUTH_AES_CMAC,
1193                 RTE_CRYPTO_AUTH_ZUC_EIA3
1194         };
1195
1196         rte_cryptodev_info_get(dev_id, &dev_info);
1197         feat_flags = dev_info.feature_flags;
1198
1199         if (!(feat_flags & RTE_CRYPTODEV_FF_SYMMETRIC_CRYPTO) ||
1200                         (global_api_test_type == CRYPTODEV_RAW_API_TEST)) {
1201                 RTE_LOG(INFO, USER1, "Feature flag requirements for Mixed "
1202                                 "Cipher Hash testsuite not met\n");
1203                 return TEST_SKIPPED;
1204         }
1205
1206         if (check_cipher_capabilities_supported(ciphers, RTE_DIM(ciphers)) != 0
1207                         && check_auth_capabilities_supported(auths,
1208                         RTE_DIM(auths)) != 0) {
1209                 RTE_LOG(INFO, USER1, "Capability requirements for Mixed "
1210                                 "Cipher Hash testsuite not met\n");
1211                 return TEST_SKIPPED;
1212         }
1213
1214         return 0;
1215 }
1216
1217 static int
1218 esn_testsuite_setup(void)
1219 {
1220         struct crypto_testsuite_params *ts_params = &testsuite_params;
1221         uint8_t dev_id = ts_params->valid_devs[0];
1222         struct rte_cryptodev_info dev_info;
1223         const enum rte_crypto_cipher_algorithm ciphers[] = {
1224                 RTE_CRYPTO_CIPHER_AES_CBC
1225         };
1226         const enum rte_crypto_auth_algorithm auths[] = {
1227                 RTE_CRYPTO_AUTH_SHA1_HMAC
1228         };
1229
1230         rte_cryptodev_info_get(dev_id, &dev_info);
1231
1232         if (!(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYMMETRIC_CRYPTO) ||
1233                         ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
1234                         !(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
1235                 RTE_LOG(INFO, USER1, "Feature flag requirements for ESN "
1236                                 "testsuite not met\n");
1237                 return TEST_SKIPPED;
1238         }
1239
1240         if (check_cipher_capabilities_supported(ciphers, RTE_DIM(ciphers)) != 0
1241                         && check_auth_capabilities_supported(auths,
1242                         RTE_DIM(auths)) != 0) {
1243                 RTE_LOG(INFO, USER1, "Capability requirements for ESN "
1244                                 "testsuite not met\n");
1245                 return TEST_SKIPPED;
1246         }
1247
1248         return 0;
1249 }
1250
1251 static int
1252 multi_session_testsuite_setup(void)
1253 {
1254         struct crypto_testsuite_params *ts_params = &testsuite_params;
1255         uint8_t dev_id = ts_params->valid_devs[0];
1256         struct rte_cryptodev_info dev_info;
1257         const enum rte_crypto_cipher_algorithm ciphers[] = {
1258                 RTE_CRYPTO_CIPHER_AES_CBC
1259         };
1260         const enum rte_crypto_auth_algorithm auths[] = {
1261                 RTE_CRYPTO_AUTH_SHA512_HMAC
1262         };
1263
1264         rte_cryptodev_info_get(dev_id, &dev_info);
1265
1266         if (!(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYMMETRIC_CRYPTO)) {
1267                 RTE_LOG(INFO, USER1, "Feature flag requirements for Multi "
1268                                 "Session testsuite not met\n");
1269                 return TEST_SKIPPED;
1270         }
1271
1272         if (check_cipher_capabilities_supported(ciphers, RTE_DIM(ciphers)) != 0
1273                         && check_auth_capabilities_supported(auths,
1274                         RTE_DIM(auths)) != 0) {
1275                 RTE_LOG(INFO, USER1, "Capability requirements for Multi "
1276                                 "Session testsuite not met\n");
1277                 return TEST_SKIPPED;
1278         }
1279
1280         return 0;
1281 }
1282
1283 static int
1284 negative_hmac_sha1_testsuite_setup(void)
1285 {
1286         struct crypto_testsuite_params *ts_params = &testsuite_params;
1287         uint8_t dev_id = ts_params->valid_devs[0];
1288         struct rte_cryptodev_info dev_info;
1289         const enum rte_crypto_cipher_algorithm ciphers[] = {
1290                 RTE_CRYPTO_CIPHER_AES_CBC
1291         };
1292         const enum rte_crypto_auth_algorithm auths[] = {
1293                 RTE_CRYPTO_AUTH_SHA1_HMAC
1294         };
1295
1296         rte_cryptodev_info_get(dev_id, &dev_info);
1297
1298         if (!(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYMMETRIC_CRYPTO) ||
1299                         ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
1300                         !(dev_info.feature_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
1301                 RTE_LOG(INFO, USER1, "Feature flag requirements for Negative "
1302                                 "HMAC SHA1 testsuite not met\n");
1303                 return TEST_SKIPPED;
1304         }
1305
1306         if (check_cipher_capabilities_supported(ciphers, RTE_DIM(ciphers)) != 0
1307                         && check_auth_capabilities_supported(auths,
1308                         RTE_DIM(auths)) != 0) {
1309                 RTE_LOG(INFO, USER1, "Capability requirements for Negative "
1310                                 "HMAC SHA1 testsuite not met\n");
1311                 return TEST_SKIPPED;
1312         }
1313
1314         return 0;
1315 }
1316
1317 static int
1318 dev_configure_and_start(uint64_t ff_disable)
1319 {
1320         struct crypto_testsuite_params *ts_params = &testsuite_params;
1321         struct crypto_unittest_params *ut_params = &unittest_params;
1322
1323         uint16_t qp_id;
1324
1325         /* Clear unit test parameters before running test */
1326         memset(ut_params, 0, sizeof(*ut_params));
1327
1328         /* Reconfigure device to default parameters */
1329         ts_params->conf.socket_id = SOCKET_ID_ANY;
1330         ts_params->conf.ff_disable = ff_disable;
1331         ts_params->qp_conf.nb_descriptors = MAX_NUM_OPS_INFLIGHT;
1332         ts_params->qp_conf.mp_session = ts_params->session_mpool;
1333         ts_params->qp_conf.mp_session_private = ts_params->session_priv_mpool;
1334
1335         TEST_ASSERT_SUCCESS(rte_cryptodev_configure(ts_params->valid_devs[0],
1336                         &ts_params->conf),
1337                         "Failed to configure cryptodev %u",
1338                         ts_params->valid_devs[0]);
1339
1340         for (qp_id = 0; qp_id < ts_params->conf.nb_queue_pairs ; qp_id++) {
1341                 TEST_ASSERT_SUCCESS(rte_cryptodev_queue_pair_setup(
1342                         ts_params->valid_devs[0], qp_id,
1343                         &ts_params->qp_conf,
1344                         rte_cryptodev_socket_id(ts_params->valid_devs[0])),
1345                         "Failed to setup queue pair %u on cryptodev %u",
1346                         qp_id, ts_params->valid_devs[0]);
1347         }
1348
1349
1350         rte_cryptodev_stats_reset(ts_params->valid_devs[0]);
1351
1352         /* Start the device */
1353         TEST_ASSERT_SUCCESS(rte_cryptodev_start(ts_params->valid_devs[0]),
1354                         "Failed to start cryptodev %u",
1355                         ts_params->valid_devs[0]);
1356
1357         return TEST_SUCCESS;
1358 }
1359
1360 int
1361 ut_setup(void)
1362 {
1363         /* Configure and start the device with security feature disabled */
1364         return dev_configure_and_start(RTE_CRYPTODEV_FF_SECURITY);
1365 }
1366
1367 static int
1368 ut_setup_security(void)
1369 {
1370         /* Configure and start the device with no features disabled */
1371         return dev_configure_and_start(0);
1372 }
1373
1374 void
1375 ut_teardown(void)
1376 {
1377         struct crypto_testsuite_params *ts_params = &testsuite_params;
1378         struct crypto_unittest_params *ut_params = &unittest_params;
1379         struct rte_cryptodev_stats stats;
1380
1381         /* free crypto session structure */
1382 #ifdef RTE_LIB_SECURITY
1383         if (ut_params->type == RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL) {
1384                 if (ut_params->sec_session) {
1385                         rte_security_session_destroy(rte_cryptodev_get_sec_ctx
1386                                                 (ts_params->valid_devs[0]),
1387                                                 ut_params->sec_session);
1388                         ut_params->sec_session = NULL;
1389                 }
1390         } else
1391 #endif
1392         {
1393                 if (ut_params->sess) {
1394                         rte_cryptodev_sym_session_clear(
1395                                         ts_params->valid_devs[0],
1396                                         ut_params->sess);
1397                         rte_cryptodev_sym_session_free(ut_params->sess);
1398                         ut_params->sess = NULL;
1399                 }
1400         }
1401
1402         /* free crypto operation structure */
1403         if (ut_params->op)
1404                 rte_crypto_op_free(ut_params->op);
1405
1406         /*
1407          * free mbuf - both obuf and ibuf are usually the same,
1408          * so check if they point at the same address is necessary,
1409          * to avoid freeing the mbuf twice.
1410          */
1411         if (ut_params->obuf) {
1412                 rte_pktmbuf_free(ut_params->obuf);
1413                 if (ut_params->ibuf == ut_params->obuf)
1414                         ut_params->ibuf = 0;
1415                 ut_params->obuf = 0;
1416         }
1417         if (ut_params->ibuf) {
1418                 rte_pktmbuf_free(ut_params->ibuf);
1419                 ut_params->ibuf = 0;
1420         }
1421
1422         if (ts_params->mbuf_pool != NULL)
1423                 RTE_LOG(DEBUG, USER1, "CRYPTO_MBUFPOOL count %u\n",
1424                         rte_mempool_avail_count(ts_params->mbuf_pool));
1425
1426         rte_cryptodev_stats_get(ts_params->valid_devs[0], &stats);
1427
1428         /* Stop the device */
1429         rte_cryptodev_stop(ts_params->valid_devs[0]);
1430 }
1431
1432 static int
1433 test_device_configure_invalid_dev_id(void)
1434 {
1435         struct crypto_testsuite_params *ts_params = &testsuite_params;
1436         uint16_t dev_id, num_devs = 0;
1437
1438         TEST_ASSERT((num_devs = rte_cryptodev_count()) >= 1,
1439                         "Need at least %d devices for test", 1);
1440
1441         /* valid dev_id values */
1442         dev_id = ts_params->valid_devs[0];
1443
1444         /* Stop the device in case it's started so it can be configured */
1445         rte_cryptodev_stop(dev_id);
1446
1447         TEST_ASSERT_SUCCESS(rte_cryptodev_configure(dev_id, &ts_params->conf),
1448                         "Failed test for rte_cryptodev_configure: "
1449                         "invalid dev_num %u", dev_id);
1450
1451         /* invalid dev_id values */
1452         dev_id = num_devs;
1453
1454         TEST_ASSERT_FAIL(rte_cryptodev_configure(dev_id, &ts_params->conf),
1455                         "Failed test for rte_cryptodev_configure: "
1456                         "invalid dev_num %u", dev_id);
1457
1458         dev_id = 0xff;
1459
1460         TEST_ASSERT_FAIL(rte_cryptodev_configure(dev_id, &ts_params->conf),
1461                         "Failed test for rte_cryptodev_configure:"
1462                         "invalid dev_num %u", dev_id);
1463
1464         return TEST_SUCCESS;
1465 }
1466
1467 static int
1468 test_device_configure_invalid_queue_pair_ids(void)
1469 {
1470         struct crypto_testsuite_params *ts_params = &testsuite_params;
1471         uint16_t orig_nb_qps = ts_params->conf.nb_queue_pairs;
1472
1473         /* Stop the device in case it's started so it can be configured */
1474         rte_cryptodev_stop(ts_params->valid_devs[0]);
1475
1476         /* valid - max value queue pairs */
1477         ts_params->conf.nb_queue_pairs = orig_nb_qps;
1478
1479         TEST_ASSERT_SUCCESS(rte_cryptodev_configure(ts_params->valid_devs[0],
1480                         &ts_params->conf),
1481                         "Failed to configure cryptodev: dev_id %u, qp_id %u",
1482                         ts_params->valid_devs[0], ts_params->conf.nb_queue_pairs);
1483
1484         /* valid - one queue pairs */
1485         ts_params->conf.nb_queue_pairs = 1;
1486
1487         TEST_ASSERT_SUCCESS(rte_cryptodev_configure(ts_params->valid_devs[0],
1488                         &ts_params->conf),
1489                         "Failed to configure cryptodev: dev_id %u, qp_id %u",
1490                         ts_params->valid_devs[0],
1491                         ts_params->conf.nb_queue_pairs);
1492
1493
1494         /* invalid - zero queue pairs */
1495         ts_params->conf.nb_queue_pairs = 0;
1496
1497         TEST_ASSERT_FAIL(rte_cryptodev_configure(ts_params->valid_devs[0],
1498                         &ts_params->conf),
1499                         "Failed test for rte_cryptodev_configure, dev_id %u,"
1500                         " invalid qps: %u",
1501                         ts_params->valid_devs[0],
1502                         ts_params->conf.nb_queue_pairs);
1503
1504
1505         /* invalid - max value supported by field queue pairs */
1506         ts_params->conf.nb_queue_pairs = UINT16_MAX;
1507
1508         TEST_ASSERT_FAIL(rte_cryptodev_configure(ts_params->valid_devs[0],
1509                         &ts_params->conf),
1510                         "Failed test for rte_cryptodev_configure, dev_id %u,"
1511                         " invalid qps: %u",
1512                         ts_params->valid_devs[0],
1513                         ts_params->conf.nb_queue_pairs);
1514
1515
1516         /* invalid - max value + 1 queue pairs */
1517         ts_params->conf.nb_queue_pairs = orig_nb_qps + 1;
1518
1519         TEST_ASSERT_FAIL(rte_cryptodev_configure(ts_params->valid_devs[0],
1520                         &ts_params->conf),
1521                         "Failed test for rte_cryptodev_configure, dev_id %u,"
1522                         " invalid qps: %u",
1523                         ts_params->valid_devs[0],
1524                         ts_params->conf.nb_queue_pairs);
1525
1526         /* revert to original testsuite value */
1527         ts_params->conf.nb_queue_pairs = orig_nb_qps;
1528
1529         return TEST_SUCCESS;
1530 }
1531
1532 static int
1533 test_queue_pair_descriptor_setup(void)
1534 {
1535         struct crypto_testsuite_params *ts_params = &testsuite_params;
1536         struct rte_cryptodev_qp_conf qp_conf = {
1537                 .nb_descriptors = MAX_NUM_OPS_INFLIGHT
1538         };
1539         uint16_t qp_id;
1540
1541         /* Stop the device in case it's started so it can be configured */
1542         rte_cryptodev_stop(ts_params->valid_devs[0]);
1543
1544         TEST_ASSERT_SUCCESS(rte_cryptodev_configure(ts_params->valid_devs[0],
1545                         &ts_params->conf),
1546                         "Failed to configure cryptodev %u",
1547                         ts_params->valid_devs[0]);
1548
1549         /*
1550          * Test various ring sizes on this device. memzones can't be
1551          * freed so are re-used if ring is released and re-created.
1552          */
1553         qp_conf.nb_descriptors = MIN_NUM_OPS_INFLIGHT; /* min size*/
1554         qp_conf.mp_session = ts_params->session_mpool;
1555         qp_conf.mp_session_private = ts_params->session_priv_mpool;
1556
1557         for (qp_id = 0; qp_id < ts_params->conf.nb_queue_pairs; qp_id++) {
1558                 TEST_ASSERT_SUCCESS(rte_cryptodev_queue_pair_setup(
1559                                 ts_params->valid_devs[0], qp_id, &qp_conf,
1560                                 rte_cryptodev_socket_id(
1561                                                 ts_params->valid_devs[0])),
1562                                 "Failed test for "
1563                                 "rte_cryptodev_queue_pair_setup: num_inflights "
1564                                 "%u on qp %u on cryptodev %u",
1565                                 qp_conf.nb_descriptors, qp_id,
1566                                 ts_params->valid_devs[0]);
1567         }
1568
1569         qp_conf.nb_descriptors = (uint32_t)(MAX_NUM_OPS_INFLIGHT / 2);
1570
1571         for (qp_id = 0; qp_id < ts_params->conf.nb_queue_pairs; qp_id++) {
1572                 TEST_ASSERT_SUCCESS(rte_cryptodev_queue_pair_setup(
1573                                 ts_params->valid_devs[0], qp_id, &qp_conf,
1574                                 rte_cryptodev_socket_id(
1575                                                 ts_params->valid_devs[0])),
1576                                 "Failed test for"
1577                                 " rte_cryptodev_queue_pair_setup: num_inflights"
1578                                 " %u on qp %u on cryptodev %u",
1579                                 qp_conf.nb_descriptors, qp_id,
1580                                 ts_params->valid_devs[0]);
1581         }
1582
1583         qp_conf.nb_descriptors = MAX_NUM_OPS_INFLIGHT; /* valid */
1584
1585         for (qp_id = 0; qp_id < ts_params->conf.nb_queue_pairs; qp_id++) {
1586                 TEST_ASSERT_SUCCESS(rte_cryptodev_queue_pair_setup(
1587                                 ts_params->valid_devs[0], qp_id, &qp_conf,
1588                                 rte_cryptodev_socket_id(
1589                                                 ts_params->valid_devs[0])),
1590                                 "Failed test for "
1591                                 "rte_cryptodev_queue_pair_setup: num_inflights"
1592                                 " %u on qp %u on cryptodev %u",
1593                                 qp_conf.nb_descriptors, qp_id,
1594                                 ts_params->valid_devs[0]);
1595         }
1596
1597         qp_conf.nb_descriptors = DEFAULT_NUM_OPS_INFLIGHT;
1598
1599         for (qp_id = 0; qp_id < ts_params->conf.nb_queue_pairs; qp_id++) {
1600                 TEST_ASSERT_SUCCESS(rte_cryptodev_queue_pair_setup(
1601                                 ts_params->valid_devs[0], qp_id, &qp_conf,
1602                                 rte_cryptodev_socket_id(
1603                                                 ts_params->valid_devs[0])),
1604                                 "Failed test for"
1605                                 " rte_cryptodev_queue_pair_setup:"
1606                                 "num_inflights %u on qp %u on cryptodev %u",
1607                                 qp_conf.nb_descriptors, qp_id,
1608                                 ts_params->valid_devs[0]);
1609         }
1610
1611         /* test invalid queue pair id */
1612         qp_conf.nb_descriptors = DEFAULT_NUM_OPS_INFLIGHT;      /*valid */
1613
1614         qp_id = ts_params->conf.nb_queue_pairs;         /*invalid */
1615
1616         TEST_ASSERT_FAIL(rte_cryptodev_queue_pair_setup(
1617                         ts_params->valid_devs[0],
1618                         qp_id, &qp_conf,
1619                         rte_cryptodev_socket_id(ts_params->valid_devs[0])),
1620                         "Failed test for rte_cryptodev_queue_pair_setup:"
1621                         "invalid qp %u on cryptodev %u",
1622                         qp_id, ts_params->valid_devs[0]);
1623
1624         qp_id = 0xffff; /*invalid*/
1625
1626         TEST_ASSERT_FAIL(rte_cryptodev_queue_pair_setup(
1627                         ts_params->valid_devs[0],
1628                         qp_id, &qp_conf,
1629                         rte_cryptodev_socket_id(ts_params->valid_devs[0])),
1630                         "Failed test for rte_cryptodev_queue_pair_setup:"
1631                         "invalid qp %u on cryptodev %u",
1632                         qp_id, ts_params->valid_devs[0]);
1633
1634         return TEST_SUCCESS;
1635 }
1636
1637 /* ***** Plaintext data for tests ***** */
1638
1639 const char catch_22_quote_1[] =
1640                 "There was only one catch and that was Catch-22, which "
1641                 "specified that a concern for one's safety in the face of "
1642                 "dangers that were real and immediate was the process of a "
1643                 "rational mind. Orr was crazy and could be grounded. All he "
1644                 "had to do was ask; and as soon as he did, he would no longer "
1645                 "be crazy and would have to fly more missions. Orr would be "
1646                 "crazy to fly more missions and sane if he didn't, but if he "
1647                 "was sane he had to fly them. If he flew them he was crazy "
1648                 "and didn't have to; but if he didn't want to he was sane and "
1649                 "had to. Yossarian was moved very deeply by the absolute "
1650                 "simplicity of this clause of Catch-22 and let out a "
1651                 "respectful whistle. \"That's some catch, that Catch-22\", he "
1652                 "observed. \"It's the best there is,\" Doc Daneeka agreed.";
1653
1654 const char catch_22_quote[] =
1655                 "What a lousy earth! He wondered how many people were "
1656                 "destitute that same night even in his own prosperous country, "
1657                 "how many homes were shanties, how many husbands were drunk "
1658                 "and wives socked, and how many children were bullied, abused, "
1659                 "or abandoned. How many families hungered for food they could "
1660                 "not afford to buy? How many hearts were broken? How many "
1661                 "suicides would take place that same night, how many people "
1662                 "would go insane? How many cockroaches and landlords would "
1663                 "triumph? How many winners were losers, successes failures, "
1664                 "and rich men poor men? How many wise guys were stupid? How "
1665                 "many happy endings were unhappy endings? How many honest men "
1666                 "were liars, brave men cowards, loyal men traitors, how many "
1667                 "sainted men were corrupt, how many people in positions of "
1668                 "trust had sold their souls to bodyguards, how many had never "
1669                 "had souls? How many straight-and-narrow paths were crooked "
1670                 "paths? How many best families were worst families and how "
1671                 "many good people were bad people? When you added them all up "
1672                 "and then subtracted, you might be left with only the children, "
1673                 "and perhaps with Albert Einstein and an old violinist or "
1674                 "sculptor somewhere.";
1675
1676 #define QUOTE_480_BYTES         (480)
1677 #define QUOTE_512_BYTES         (512)
1678 #define QUOTE_768_BYTES         (768)
1679 #define QUOTE_1024_BYTES        (1024)
1680
1681
1682
1683 /* ***** SHA1 Hash Tests ***** */
1684
1685 #define HMAC_KEY_LENGTH_SHA1    (DIGEST_BYTE_LENGTH_SHA1)
1686
1687 static uint8_t hmac_sha1_key[] = {
1688         0xF8, 0x2A, 0xC7, 0x54, 0xDB, 0x96, 0x18, 0xAA,
1689         0xC3, 0xA1, 0x53, 0xF6, 0x1F, 0x17, 0x60, 0xBD,
1690         0xDE, 0xF4, 0xDE, 0xAD };
1691
1692 /* ***** SHA224 Hash Tests ***** */
1693
1694 #define HMAC_KEY_LENGTH_SHA224  (DIGEST_BYTE_LENGTH_SHA224)
1695
1696
1697 /* ***** AES-CBC Cipher Tests ***** */
1698
1699 #define CIPHER_KEY_LENGTH_AES_CBC       (16)
1700 #define CIPHER_IV_LENGTH_AES_CBC        (CIPHER_KEY_LENGTH_AES_CBC)
1701
1702 static uint8_t aes_cbc_key[] = {
1703         0xE4, 0x23, 0x33, 0x8A, 0x35, 0x64, 0x61, 0xE2,
1704         0x49, 0x03, 0xDD, 0xC6, 0xB8, 0xCA, 0x55, 0x7A };
1705
1706 static uint8_t aes_cbc_iv[] = {
1707         0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
1708         0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f };
1709
1710
1711 /* ***** AES-CBC / HMAC-SHA1 Hash Tests ***** */
1712
1713 static const uint8_t catch_22_quote_2_512_bytes_AES_CBC_ciphertext[] = {
1714         0x8B, 0x4D, 0xDA, 0x1B, 0xCF, 0x04, 0xA0, 0x31,
1715         0xB4, 0xBF, 0xBD, 0x68, 0x43, 0x20, 0x7E, 0x76,
1716         0xB1, 0x96, 0x8B, 0xA2, 0x7C, 0xA2, 0x83, 0x9E,
1717         0x39, 0x5A, 0x2F, 0x7E, 0x92, 0xB4, 0x48, 0x1A,
1718         0x3F, 0x6B, 0x5D, 0xDF, 0x52, 0x85, 0x5F, 0x8E,
1719         0x42, 0x3C, 0xFB, 0xE9, 0x1A, 0x24, 0xD6, 0x08,
1720         0xDD, 0xFD, 0x16, 0xFB, 0xE9, 0x55, 0xEF, 0xF0,
1721         0xA0, 0x8D, 0x13, 0xAB, 0x81, 0xC6, 0x90, 0x01,
1722         0xB5, 0x18, 0x84, 0xB3, 0xF6, 0xE6, 0x11, 0x57,
1723         0xD6, 0x71, 0xC6, 0x3C, 0x3F, 0x2F, 0x33, 0xEE,
1724         0x24, 0x42, 0x6E, 0xAC, 0x0B, 0xCA, 0xEC, 0xF9,
1725         0x84, 0xF8, 0x22, 0xAA, 0x60, 0xF0, 0x32, 0xA9,
1726         0x75, 0x75, 0x3B, 0xCB, 0x70, 0x21, 0x0A, 0x8D,
1727         0x0F, 0xE0, 0xC4, 0x78, 0x2B, 0xF8, 0x97, 0xE3,
1728         0xE4, 0x26, 0x4B, 0x29, 0xDA, 0x88, 0xCD, 0x46,
1729         0xEC, 0xAA, 0xF9, 0x7F, 0xF1, 0x15, 0xEA, 0xC3,
1730         0x87, 0xE6, 0x31, 0xF2, 0xCF, 0xDE, 0x4D, 0x80,
1731         0x70, 0x91, 0x7E, 0x0C, 0xF7, 0x26, 0x3A, 0x92,
1732         0x4F, 0x18, 0x83, 0xC0, 0x8F, 0x59, 0x01, 0xA5,
1733         0x88, 0xD1, 0xDB, 0x26, 0x71, 0x27, 0x16, 0xF5,
1734         0xEE, 0x10, 0x82, 0xAC, 0x68, 0x26, 0x9B, 0xE2,
1735         0x6D, 0xD8, 0x9A, 0x80, 0xDF, 0x04, 0x31, 0xD5,
1736         0xF1, 0x35, 0x5C, 0x3B, 0xDD, 0x9A, 0x65, 0xBA,
1737         0x58, 0x34, 0x85, 0x61, 0x1C, 0x42, 0x10, 0x76,
1738         0x73, 0x02, 0x42, 0xC9, 0x23, 0x18, 0x8E, 0xB4,
1739         0x6F, 0xB4, 0xA3, 0x54, 0x6E, 0x88, 0x3B, 0x62,
1740         0x7C, 0x02, 0x8D, 0x4C, 0x9F, 0xC8, 0x45, 0xF4,
1741         0xC9, 0xDE, 0x4F, 0xEB, 0x22, 0x83, 0x1B, 0xE4,
1742         0x49, 0x37, 0xE4, 0xAD, 0xE7, 0xCD, 0x21, 0x54,
1743         0xBC, 0x1C, 0xC2, 0x04, 0x97, 0xB4, 0x10, 0x61,
1744         0xF0, 0xE4, 0xEF, 0x27, 0x63, 0x3A, 0xDA, 0x91,
1745         0x41, 0x25, 0x62, 0x1C, 0x5C, 0xB6, 0x38, 0x4A,
1746         0x88, 0x71, 0x59, 0x5A, 0x8D, 0xA0, 0x09, 0xAF,
1747         0x72, 0x94, 0xD7, 0x79, 0x5C, 0x60, 0x7C, 0x8F,
1748         0x4C, 0xF5, 0xD9, 0xA1, 0x39, 0x6D, 0x81, 0x28,
1749         0xEF, 0x13, 0x28, 0xDF, 0xF5, 0x3E, 0xF7, 0x8E,
1750         0x09, 0x9C, 0x78, 0x18, 0x79, 0xB8, 0x68, 0xD7,
1751         0xA8, 0x29, 0x62, 0xAD, 0xDE, 0xE1, 0x61, 0x76,
1752         0x1B, 0x05, 0x16, 0xCD, 0xBF, 0x02, 0x8E, 0xA6,
1753         0x43, 0x6E, 0x92, 0x55, 0x4F, 0x60, 0x9C, 0x03,
1754         0xB8, 0x4F, 0xA3, 0x02, 0xAC, 0xA8, 0xA7, 0x0C,
1755         0x1E, 0xB5, 0x6B, 0xF8, 0xC8, 0x4D, 0xDE, 0xD2,
1756         0xB0, 0x29, 0x6E, 0x40, 0xE6, 0xD6, 0xC9, 0xE6,
1757         0xB9, 0x0F, 0xB6, 0x63, 0xF5, 0xAA, 0x2B, 0x96,
1758         0xA7, 0x16, 0xAC, 0x4E, 0x0A, 0x33, 0x1C, 0xA6,
1759         0xE6, 0xBD, 0x8A, 0xCF, 0x40, 0xA9, 0xB2, 0xFA,
1760         0x63, 0x27, 0xFD, 0x9B, 0xD9, 0xFC, 0xD5, 0x87,
1761         0x8D, 0x4C, 0xB6, 0xA4, 0xCB, 0xE7, 0x74, 0x55,
1762         0xF4, 0xFB, 0x41, 0x25, 0xB5, 0x4B, 0x0A, 0x1B,
1763         0xB1, 0xD6, 0xB7, 0xD9, 0x47, 0x2A, 0xC3, 0x98,
1764         0x6A, 0xC4, 0x03, 0x73, 0x1F, 0x93, 0x6E, 0x53,
1765         0x19, 0x25, 0x64, 0x15, 0x83, 0xF9, 0x73, 0x2A,
1766         0x74, 0xB4, 0x93, 0x69, 0xC4, 0x72, 0xFC, 0x26,
1767         0xA2, 0x9F, 0x43, 0x45, 0xDD, 0xB9, 0xEF, 0x36,
1768         0xC8, 0x3A, 0xCD, 0x99, 0x9B, 0x54, 0x1A, 0x36,
1769         0xC1, 0x59, 0xF8, 0x98, 0xA8, 0xCC, 0x28, 0x0D,
1770         0x73, 0x4C, 0xEE, 0x98, 0xCB, 0x7C, 0x58, 0x7E,
1771         0x20, 0x75, 0x1E, 0xB7, 0xC9, 0xF8, 0xF2, 0x0E,
1772         0x63, 0x9E, 0x05, 0x78, 0x1A, 0xB6, 0xA8, 0x7A,
1773         0xF9, 0x98, 0x6A, 0xA6, 0x46, 0x84, 0x2E, 0xF6,
1774         0x4B, 0xDC, 0x9B, 0x8F, 0x9B, 0x8F, 0xEE, 0xB4,
1775         0xAA, 0x3F, 0xEE, 0xC0, 0x37, 0x27, 0x76, 0xC7,
1776         0x95, 0xBB, 0x26, 0x74, 0x69, 0x12, 0x7F, 0xF1,
1777         0xBB, 0xFF, 0xAE, 0xB5, 0x99, 0x6E, 0xCB, 0x0C
1778 };
1779
1780 static const uint8_t catch_22_quote_2_512_bytes_AES_CBC_HMAC_SHA1_digest[] = {
1781         0x9a, 0x4f, 0x88, 0x1b, 0xb6, 0x8f, 0xd8, 0x60,
1782         0x42, 0x1a, 0x7d, 0x3d, 0xf5, 0x82, 0x80, 0xf1,
1783         0x18, 0x8c, 0x1d, 0x32
1784 };
1785
1786
1787 /* Multisession Vector context Test */
1788 /*Begin Session 0 */
1789 static uint8_t ms_aes_cbc_key0[] = {
1790         0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
1791         0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd, 0xfe, 0xff
1792 };
1793
1794 static uint8_t ms_aes_cbc_iv0[] = {
1795         0xf0, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
1796         0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd, 0xfe, 0xff
1797 };
1798
1799 static const uint8_t ms_aes_cbc_cipher0[] = {
1800                 0x3C, 0xE4, 0xEE, 0x42, 0xB6, 0x9B, 0xC3, 0x38,
1801                 0x5F, 0xAD, 0x54, 0xDC, 0xA8, 0x32, 0x81, 0xDC,
1802                 0x7A, 0x6F, 0x85, 0x58, 0x07, 0x35, 0xED, 0xEB,
1803                 0xAD, 0x79, 0x79, 0x96, 0xD3, 0x0E, 0xA6, 0xD9,
1804                 0xAA, 0x86, 0xA4, 0x8F, 0xB5, 0xD6, 0x6E, 0x6D,
1805                 0x0C, 0x91, 0x2F, 0xC4, 0x67, 0x98, 0x0E, 0xC4,
1806                 0x8D, 0x83, 0x68, 0x69, 0xC4, 0xD3, 0x94, 0x34,
1807                 0xC4, 0x5D, 0x60, 0x55, 0x22, 0x87, 0x8F, 0x6F,
1808                 0x17, 0x8E, 0x75, 0xE4, 0x02, 0xF5, 0x1B, 0x99,
1809                 0xC8, 0x39, 0xA9, 0xAB, 0x23, 0x91, 0x12, 0xED,
1810                 0x08, 0xE7, 0xD9, 0x25, 0x89, 0x24, 0x4F, 0x8D,
1811                 0x68, 0xF3, 0x10, 0x39, 0x0A, 0xEE, 0x45, 0x24,
1812                 0xDF, 0x7A, 0x9D, 0x00, 0x25, 0xE5, 0x35, 0x71,
1813                 0x4E, 0x40, 0x59, 0x6F, 0x0A, 0x13, 0xB3, 0x72,
1814                 0x1D, 0x98, 0x63, 0x94, 0x89, 0xA5, 0x39, 0x8E,
1815                 0xD3, 0x9C, 0x8A, 0x7F, 0x71, 0x2F, 0xC7, 0xCD,
1816                 0x81, 0x05, 0xDC, 0xC0, 0x8D, 0xCE, 0x6D, 0x18,
1817                 0x30, 0xC4, 0x72, 0x51, 0xF0, 0x27, 0xC8, 0xF6,
1818                 0x60, 0x5B, 0x7C, 0xB2, 0xE3, 0x49, 0x0C, 0x29,
1819                 0xC6, 0x9F, 0x39, 0x57, 0x80, 0x55, 0x24, 0x2C,
1820                 0x9B, 0x0F, 0x5A, 0xB3, 0x89, 0x55, 0x31, 0x96,
1821                 0x0D, 0xCD, 0xF6, 0x51, 0x03, 0x2D, 0x89, 0x26,
1822                 0x74, 0x44, 0xD6, 0xE8, 0xDC, 0xEA, 0x44, 0x55,
1823                 0x64, 0x71, 0x9C, 0x9F, 0x5D, 0xBA, 0x39, 0x46,
1824                 0xA8, 0x17, 0xA1, 0x9C, 0x52, 0x9D, 0xBC, 0x6B,
1825                 0x4A, 0x98, 0xE6, 0xEA, 0x33, 0xEC, 0x58, 0xB4,
1826                 0x43, 0xF0, 0x32, 0x45, 0xA4, 0xC1, 0x55, 0xB7,
1827                 0x5D, 0xB5, 0x59, 0xB2, 0xE3, 0x96, 0xFF, 0xA5,
1828                 0xAF, 0xE1, 0x86, 0x1B, 0x42, 0xE6, 0x3B, 0xA0,
1829                 0x90, 0x4A, 0xE8, 0x8C, 0x21, 0x7F, 0x36, 0x1E,
1830                 0x5B, 0x65, 0x25, 0xD1, 0xC1, 0x5A, 0xCA, 0x3D,
1831                 0x10, 0xED, 0x2D, 0x79, 0xD0, 0x0F, 0x58, 0x44,
1832                 0x69, 0x81, 0xF5, 0xD4, 0xC9, 0x0F, 0x90, 0x76,
1833                 0x1F, 0x54, 0xD2, 0xD5, 0x97, 0xCE, 0x2C, 0xE3,
1834                 0xEF, 0xF4, 0xB7, 0xC6, 0x3A, 0x87, 0x7F, 0x83,
1835                 0x2A, 0xAF, 0xCD, 0x90, 0x12, 0xA7, 0x7D, 0x85,
1836                 0x1D, 0x62, 0xD3, 0x85, 0x25, 0x05, 0xDB, 0x45,
1837                 0x92, 0xA3, 0xF6, 0xA2, 0xA8, 0x41, 0xE4, 0x25,
1838                 0x86, 0x87, 0x67, 0x24, 0xEC, 0x89, 0x23, 0x2A,
1839                 0x9B, 0x20, 0x4D, 0x93, 0xEE, 0xE2, 0x2E, 0xC1,
1840                 0x0B, 0x15, 0x33, 0xCF, 0x00, 0xD1, 0x1A, 0xDA,
1841                 0x93, 0xFD, 0x28, 0x21, 0x5B, 0xCF, 0xD1, 0xF3,
1842                 0x5A, 0x81, 0xBA, 0x82, 0x5E, 0x2F, 0x61, 0xB4,
1843                 0x05, 0x71, 0xB5, 0xF4, 0x39, 0x3C, 0x1F, 0x60,
1844                 0x00, 0x7A, 0xC4, 0xF8, 0x35, 0x20, 0x6C, 0x3A,
1845                 0xCC, 0x03, 0x8F, 0x7B, 0xA2, 0xB6, 0x65, 0x8A,
1846                 0xB6, 0x5F, 0xFD, 0x25, 0xD3, 0x5F, 0x92, 0xF9,
1847                 0xAE, 0x17, 0x9B, 0x5E, 0x6E, 0x9A, 0xE4, 0x55,
1848                 0x10, 0x25, 0x07, 0xA4, 0xAF, 0x21, 0x69, 0x13,
1849                 0xD8, 0xFA, 0x31, 0xED, 0xF7, 0xA7, 0xA7, 0x3B,
1850                 0xB8, 0x96, 0x8E, 0x10, 0x86, 0x74, 0xD8, 0xB1,
1851                 0x34, 0x9E, 0x9B, 0x6A, 0x26, 0xA8, 0xD4, 0xD0,
1852                 0xB5, 0xF6, 0xDE, 0xE7, 0xCA, 0x06, 0xDC, 0xA3,
1853                 0x6F, 0xEE, 0x6B, 0x1E, 0xB5, 0x30, 0x99, 0x23,
1854                 0xF9, 0x76, 0xF0, 0xA0, 0xCF, 0x3B, 0x94, 0x7B,
1855                 0x19, 0x8D, 0xA5, 0x0C, 0x18, 0xA6, 0x1D, 0x07,
1856                 0x89, 0xBE, 0x5B, 0x61, 0xE5, 0xF1, 0x42, 0xDB,
1857                 0xD4, 0x2E, 0x02, 0x1F, 0xCE, 0xEF, 0x92, 0xB1,
1858                 0x1B, 0x56, 0x50, 0xF2, 0x16, 0xE5, 0xE7, 0x4F,
1859                 0xFD, 0xBB, 0x3E, 0xD2, 0xFC, 0x3C, 0xC6, 0x0F,
1860                 0xF9, 0x12, 0x4E, 0xCB, 0x1E, 0x0C, 0x15, 0x84,
1861                 0x2A, 0x14, 0x8A, 0x02, 0xE4, 0x7E, 0x95, 0x5B,
1862                 0x86, 0xDB, 0x9B, 0x62, 0x5B, 0x19, 0xD2, 0x17,
1863                 0xFA, 0x13, 0xBB, 0x6B, 0x3F, 0x45, 0x9F, 0xBF
1864 };
1865
1866
1867 static  uint8_t ms_hmac_key0[] = {
1868                 0xFF, 0x1A, 0x7D, 0x3D, 0xF5, 0x82, 0x80, 0xF1,
1869                 0xF1, 0x35, 0x5C, 0x3B, 0xDD, 0x9A, 0x65, 0xBA,
1870                 0x58, 0x34, 0x85, 0x65, 0x1C, 0x42, 0x50, 0x76,
1871                 0x9A, 0xAF, 0x88, 0x1B, 0xB6, 0x8F, 0xF8, 0x60,
1872                 0xA2, 0x5A, 0x7F, 0x3F, 0xF4, 0x72, 0x70, 0xF1,
1873                 0xF5, 0x35, 0x4C, 0x3B, 0xDD, 0x90, 0x65, 0xB0,
1874                 0x47, 0x3A, 0x75, 0x61, 0x5C, 0xA2, 0x10, 0x76,
1875                 0x9A, 0xAF, 0x77, 0x5B, 0xB6, 0x7F, 0xF7, 0x60
1876 };
1877
1878 static const uint8_t ms_hmac_digest0[] = {
1879                 0x43, 0x52, 0xED, 0x34, 0xAB, 0x36, 0xB2, 0x51,
1880                 0xFB, 0xA3, 0xA6, 0x7C, 0x38, 0xFC, 0x42, 0x8F,
1881                 0x57, 0x64, 0xAB, 0x81, 0xA7, 0x89, 0xB7, 0x6C,
1882                 0xA0, 0xDC, 0xB9, 0x4D, 0xC4, 0x30, 0xF9, 0xD4,
1883                 0x10, 0x82, 0x55, 0xD0, 0xAB, 0x32, 0xFB, 0x56,
1884                 0x0D, 0xE4, 0x68, 0x3D, 0x76, 0xD0, 0x7B, 0xE4,
1885                 0xA6, 0x2C, 0x34, 0x9E, 0x8C, 0x41, 0xF8, 0x23,
1886                 0x28, 0x1B, 0x3A, 0x90, 0x26, 0x34, 0x47, 0x90
1887                 };
1888
1889 /* End Session 0 */
1890 /* Begin session 1 */
1891
1892 static  uint8_t ms_aes_cbc_key1[] = {
1893                 0xf1, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
1894                 0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd, 0xfe, 0xff
1895 };
1896
1897 static  uint8_t ms_aes_cbc_iv1[] = {
1898         0xf1, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
1899         0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd, 0xfe, 0xff
1900 };
1901
1902 static const uint8_t ms_aes_cbc_cipher1[] = {
1903                 0x5A, 0x7A, 0x67, 0x5D, 0xB8, 0xE1, 0xDC, 0x71,
1904                 0x39, 0xA8, 0x74, 0x93, 0x9C, 0x4C, 0xFE, 0x23,
1905                 0x61, 0xCD, 0xA4, 0xB3, 0xD9, 0xCE, 0x99, 0x09,
1906                 0x2A, 0x23, 0xF3, 0x29, 0xBF, 0x4C, 0xB4, 0x6A,
1907                 0x1B, 0x6B, 0x73, 0x4D, 0x48, 0x0C, 0xCF, 0x6C,
1908                 0x5E, 0x34, 0x9E, 0x7F, 0xBC, 0x8F, 0xCC, 0x8F,
1909                 0x75, 0x1D, 0x3D, 0x77, 0x10, 0x76, 0xC8, 0xB9,
1910                 0x99, 0x6F, 0xD6, 0x56, 0x75, 0xA9, 0xB2, 0x66,
1911                 0xC2, 0x24, 0x2B, 0x9C, 0xFE, 0x40, 0x8E, 0x43,
1912                 0x20, 0x97, 0x1B, 0xFA, 0xD0, 0xCF, 0x04, 0xAB,
1913                 0xBB, 0xF6, 0x5D, 0xF5, 0xA0, 0x19, 0x7C, 0x23,
1914                 0x5D, 0x80, 0x8C, 0x49, 0xF6, 0x76, 0x88, 0x29,
1915                 0x27, 0x4C, 0x59, 0x2B, 0x43, 0xA6, 0xB2, 0x26,
1916                 0x27, 0x78, 0xBE, 0x1B, 0xE1, 0x4F, 0x5A, 0x1F,
1917                 0xFC, 0x68, 0x08, 0xE7, 0xC4, 0xD1, 0x34, 0x68,
1918                 0xB7, 0x13, 0x14, 0x41, 0x62, 0x6B, 0x1F, 0x77,
1919                 0x0C, 0x68, 0x1D, 0x0D, 0xED, 0x89, 0xAA, 0xD8,
1920                 0x97, 0x02, 0xBA, 0x5E, 0xD4, 0x84, 0x25, 0x97,
1921                 0x03, 0xA5, 0xA6, 0x13, 0x66, 0x02, 0xF4, 0xC3,
1922                 0xF3, 0xD3, 0xCC, 0x95, 0xC3, 0x87, 0x46, 0x90,
1923                 0x1F, 0x6E, 0x14, 0xA8, 0x00, 0xF2, 0x6F, 0xD5,
1924                 0xA1, 0xAD, 0xD5, 0x40, 0xA2, 0x0F, 0x32, 0x7E,
1925                 0x99, 0xA3, 0xF5, 0x53, 0xC3, 0x26, 0xA1, 0x45,
1926                 0x01, 0x88, 0x57, 0x84, 0x3E, 0x7B, 0x4E, 0x0B,
1927                 0x3C, 0xB5, 0x3E, 0x9E, 0xE9, 0x78, 0x77, 0xC5,
1928                 0xC0, 0x89, 0xA8, 0xF8, 0xF1, 0xA5, 0x2D, 0x5D,
1929                 0xF9, 0xC6, 0xFB, 0xCB, 0x05, 0x23, 0xBD, 0x6E,
1930                 0x5E, 0x14, 0xC6, 0x57, 0x73, 0xCF, 0x98, 0xBD,
1931                 0x10, 0x8B, 0x18, 0xA6, 0x01, 0x5B, 0x13, 0xAE,
1932                 0x8E, 0xDE, 0x1F, 0xB5, 0xB7, 0x40, 0x6C, 0xC1,
1933                 0x1E, 0xA1, 0x19, 0x20, 0x9E, 0x95, 0xE0, 0x2F,
1934                 0x1C, 0xF5, 0xD9, 0xD0, 0x2B, 0x1E, 0x82, 0x25,
1935                 0x62, 0xB4, 0xEB, 0xA1, 0x1F, 0xCE, 0x44, 0xA1,
1936                 0xCB, 0x92, 0x01, 0x6B, 0xE4, 0x26, 0x23, 0xE3,
1937                 0xC5, 0x67, 0x35, 0x55, 0xDA, 0xE5, 0x27, 0xEE,
1938                 0x8D, 0x12, 0x84, 0xB7, 0xBA, 0xA7, 0x1C, 0xD6,
1939                 0x32, 0x3F, 0x67, 0xED, 0xFB, 0x5B, 0x8B, 0x52,
1940                 0x46, 0x8C, 0xF9, 0x69, 0xCD, 0xAE, 0x79, 0xAA,
1941                 0x37, 0x78, 0x49, 0xEB, 0xC6, 0x8E, 0x76, 0x63,
1942                 0x84, 0xFF, 0x9D, 0x22, 0x99, 0x51, 0xB7, 0x5E,
1943                 0x83, 0x4C, 0x8B, 0xDF, 0x5A, 0x07, 0xCC, 0xBA,
1944                 0x42, 0xA5, 0x98, 0xB6, 0x47, 0x0E, 0x66, 0xEB,
1945                 0x23, 0x0E, 0xBA, 0x44, 0xA8, 0xAA, 0x20, 0x71,
1946                 0x79, 0x9C, 0x77, 0x5F, 0xF5, 0xFE, 0xEC, 0xEF,
1947                 0xC6, 0x64, 0x3D, 0x84, 0xD0, 0x2B, 0xA7, 0x0A,
1948                 0xC3, 0x72, 0x5B, 0x9C, 0xFA, 0xA8, 0x87, 0x95,
1949                 0x94, 0x11, 0x38, 0xA7, 0x1E, 0x58, 0xE3, 0x73,
1950                 0xC6, 0xC9, 0xD1, 0x7B, 0x92, 0xDB, 0x0F, 0x49,
1951                 0x74, 0xC2, 0xA2, 0x0E, 0x35, 0x57, 0xAC, 0xDB,
1952                 0x9A, 0x1C, 0xCF, 0x5A, 0x32, 0x3E, 0x26, 0x9B,
1953                 0xEC, 0xB3, 0xEF, 0x9C, 0xFE, 0xBE, 0x52, 0xAC,
1954                 0xB1, 0x29, 0xDD, 0xFD, 0x07, 0xE2, 0xEE, 0xED,
1955                 0xE4, 0x46, 0x37, 0xFE, 0xD1, 0xDC, 0xCD, 0x02,
1956                 0xF9, 0x31, 0xB0, 0xFB, 0x36, 0xB7, 0x34, 0xA4,
1957                 0x76, 0xE8, 0x57, 0xBF, 0x99, 0x92, 0xC7, 0xAF,
1958                 0x98, 0x10, 0xE2, 0x70, 0xCA, 0xC9, 0x2B, 0x82,
1959                 0x06, 0x96, 0x88, 0x0D, 0xB3, 0xAC, 0x9E, 0x6D,
1960                 0x43, 0xBC, 0x5B, 0x31, 0xCF, 0x65, 0x8D, 0xA6,
1961                 0xC7, 0xFE, 0x73, 0xE1, 0x54, 0xF7, 0x10, 0xF9,
1962                 0x86, 0xF7, 0xDF, 0xA1, 0xA1, 0xD8, 0xAE, 0x35,
1963                 0xB3, 0x90, 0xDC, 0x6F, 0x43, 0x7A, 0x8B, 0xE0,
1964                 0xFE, 0x8F, 0x33, 0x4D, 0x29, 0x6C, 0x45, 0x53,
1965                 0x73, 0xDD, 0x21, 0x0B, 0x85, 0x30, 0xB5, 0xA5,
1966                 0xF3, 0x5D, 0xEC, 0x79, 0x61, 0x9D, 0x9E, 0xB3
1967
1968 };
1969
1970 static uint8_t ms_hmac_key1[] = {
1971                 0xFE, 0x1A, 0x7D, 0x3D, 0xF5, 0x82, 0x80, 0xF1,
1972                 0xF1, 0x35, 0x5C, 0x3B, 0xDD, 0x9A, 0x65, 0xBA,
1973                 0x58, 0x34, 0x85, 0x65, 0x1C, 0x42, 0x50, 0x76,
1974                 0x9A, 0xAF, 0x88, 0x1B, 0xB6, 0x8F, 0xF8, 0x60,
1975                 0xA2, 0x5A, 0x7F, 0x3F, 0xF4, 0x72, 0x70, 0xF1,
1976                 0xF5, 0x35, 0x4C, 0x3B, 0xDD, 0x90, 0x65, 0xB0,
1977                 0x47, 0x3A, 0x75, 0x61, 0x5C, 0xA2, 0x10, 0x76,
1978                 0x9A, 0xAF, 0x77, 0x5B, 0xB6, 0x7F, 0xF7, 0x60
1979 };
1980
1981 static const uint8_t ms_hmac_digest1[] = {
1982                 0xCE, 0x6E, 0x5F, 0x77, 0x96, 0x9A, 0xB1, 0x69,
1983                 0x2D, 0x5E, 0xF3, 0x2F, 0x32, 0x10, 0xCB, 0x50,
1984                 0x0E, 0x09, 0x56, 0x25, 0x07, 0x34, 0xC9, 0x20,
1985                 0xEC, 0x13, 0x43, 0x23, 0x5C, 0x08, 0x8B, 0xCD,
1986                 0xDC, 0x86, 0x8C, 0xEE, 0x0A, 0x95, 0x2E, 0xB9,
1987                 0x8C, 0x7B, 0x02, 0x7A, 0xD4, 0xE1, 0x49, 0xB4,
1988                 0x45, 0xB5, 0x52, 0x37, 0xC6, 0xFF, 0xFE, 0xAA,
1989                 0x0A, 0x87, 0xB8, 0x51, 0xF9, 0x2A, 0x01, 0x8F
1990 };
1991 /* End Session 1  */
1992 /* Begin Session 2 */
1993 static  uint8_t ms_aes_cbc_key2[] = {
1994                 0xff, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
1995                 0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd, 0xfe, 0xff
1996 };
1997
1998 static  uint8_t ms_aes_cbc_iv2[] = {
1999                 0xff, 0xf1, 0xf2, 0xf3, 0xf4, 0xf5, 0xf6, 0xf7,
2000                 0xf8, 0xf9, 0xfa, 0xfb, 0xfc, 0xfd, 0xfe, 0xff
2001 };
2002
2003 static const uint8_t ms_aes_cbc_cipher2[] = {
2004                 0xBB, 0x3C, 0x68, 0x25, 0xFD, 0xB6, 0xA2, 0x91,
2005                 0x20, 0x56, 0xF6, 0x30, 0x35, 0xFC, 0x9E, 0x97,
2006                 0xF2, 0x90, 0xFC, 0x7E, 0x3E, 0x0A, 0x75, 0xC8,
2007                 0x4C, 0xF2, 0x2D, 0xAC, 0xD3, 0x93, 0xF0, 0xC5,
2008                 0x14, 0x88, 0x8A, 0x23, 0xC2, 0x59, 0x9A, 0x98,
2009                 0x4B, 0xD5, 0x2C, 0xDA, 0x43, 0xA9, 0x34, 0x69,
2010                 0x7C, 0x6D, 0xDB, 0xDC, 0xCB, 0xC0, 0xA0, 0x09,
2011                 0xA7, 0x86, 0x16, 0x4B, 0xBF, 0xA8, 0xB6, 0xCF,
2012                 0x7F, 0x74, 0x1F, 0x22, 0xF0, 0xF6, 0xBB, 0x44,
2013                 0x8B, 0x4C, 0x9E, 0x23, 0xF8, 0x9F, 0xFC, 0x5B,
2014                 0x9E, 0x9C, 0x2A, 0x79, 0x30, 0x8F, 0xBF, 0xA9,
2015                 0x68, 0xA1, 0x20, 0x71, 0x7C, 0x77, 0x22, 0x34,
2016                 0x07, 0xCD, 0xC6, 0xF6, 0x50, 0x0A, 0x08, 0x99,
2017                 0x17, 0x98, 0xE3, 0x93, 0x8A, 0xB0, 0xEE, 0xDF,
2018                 0xC2, 0xBA, 0x3B, 0x44, 0x73, 0xDF, 0xDD, 0xDC,
2019                 0x14, 0x4D, 0x3B, 0xBB, 0x5E, 0x58, 0xC1, 0x26,
2020                 0xA7, 0xAE, 0x47, 0xF3, 0x24, 0x6D, 0x4F, 0xD3,
2021                 0x6E, 0x3E, 0x33, 0xE6, 0x7F, 0xCA, 0x50, 0xAF,
2022                 0x5D, 0x3D, 0xA0, 0xDD, 0xC9, 0xF3, 0x30, 0xD3,
2023                 0x6E, 0x8B, 0x2E, 0x12, 0x24, 0x34, 0xF0, 0xD3,
2024                 0xC7, 0x8D, 0x23, 0x29, 0xAA, 0x05, 0xE1, 0xFA,
2025                 0x2E, 0xF6, 0x8D, 0x37, 0x86, 0xC0, 0x6D, 0x13,
2026                 0x2D, 0x98, 0xF3, 0x52, 0x39, 0x22, 0xCE, 0x38,
2027                 0xC2, 0x1A, 0x72, 0xED, 0xFB, 0xCC, 0xE4, 0x71,
2028                 0x5A, 0x0C, 0x0D, 0x09, 0xF8, 0xE8, 0x1B, 0xBC,
2029                 0x53, 0xC8, 0xD8, 0x8F, 0xE5, 0x98, 0x5A, 0xB1,
2030                 0x06, 0xA6, 0x5B, 0xE6, 0xA2, 0x88, 0x21, 0x9E,
2031                 0x36, 0xC0, 0x34, 0xF9, 0xFB, 0x3B, 0x0A, 0x22,
2032                 0x00, 0x00, 0x39, 0x48, 0x8D, 0x23, 0x74, 0x62,
2033                 0x72, 0x91, 0xE6, 0x36, 0xAA, 0x77, 0x9C, 0x72,
2034                 0x9D, 0xA8, 0xC3, 0xA9, 0xD5, 0x44, 0x72, 0xA6,
2035                 0xB9, 0x28, 0x8F, 0x64, 0x4C, 0x8A, 0x64, 0xE6,
2036                 0x4E, 0xFA, 0xEF, 0x87, 0xDE, 0x7B, 0x22, 0x44,
2037                 0xB0, 0xDF, 0x2E, 0x5F, 0x0B, 0xA5, 0xF2, 0x24,
2038                 0x07, 0x5C, 0x2D, 0x39, 0xB7, 0x3D, 0x8A, 0xE5,
2039                 0x0E, 0x9D, 0x4E, 0x50, 0xED, 0x03, 0x99, 0x8E,
2040                 0xF0, 0x06, 0x55, 0x4E, 0xA2, 0x24, 0xE7, 0x17,
2041                 0x46, 0xDF, 0x6C, 0xCD, 0xC6, 0x44, 0xE8, 0xF9,
2042                 0xB9, 0x1B, 0x36, 0xF6, 0x7F, 0x10, 0xA4, 0x7D,
2043                 0x90, 0xBD, 0xE4, 0xAA, 0xD6, 0x9E, 0x18, 0x9D,
2044                 0x22, 0x35, 0xD6, 0x55, 0x54, 0xAA, 0xF7, 0x22,
2045                 0xA3, 0x3E, 0xEF, 0xC8, 0xA2, 0x34, 0x8D, 0xA9,
2046                 0x37, 0x63, 0xA6, 0xC3, 0x57, 0xCB, 0x0C, 0x49,
2047                 0x7D, 0x02, 0xBE, 0xAA, 0x13, 0x75, 0xB7, 0x4E,
2048                 0x52, 0x62, 0xA5, 0xC2, 0x33, 0xC7, 0x6C, 0x1B,
2049                 0xF6, 0x34, 0xF6, 0x09, 0xA5, 0x0C, 0xC7, 0xA2,
2050                 0x61, 0x48, 0x62, 0x7D, 0x17, 0x15, 0xE3, 0x95,
2051                 0xC8, 0x63, 0xD2, 0xA4, 0x43, 0xA9, 0x49, 0x07,
2052                 0xB2, 0x3B, 0x2B, 0x62, 0x7D, 0xCB, 0x51, 0xB3,
2053                 0x25, 0x33, 0x47, 0x0E, 0x14, 0x67, 0xDC, 0x6A,
2054                 0x9B, 0x51, 0xAC, 0x9D, 0x8F, 0xA2, 0x2B, 0x57,
2055                 0x8C, 0x5C, 0x5F, 0x76, 0x23, 0x92, 0x0F, 0x84,
2056                 0x46, 0x0E, 0x40, 0x85, 0x38, 0x60, 0xFA, 0x61,
2057                 0x20, 0xC5, 0xE3, 0xF1, 0x70, 0xAC, 0x1B, 0xBF,
2058                 0xC4, 0x2B, 0xC5, 0x67, 0xD1, 0x43, 0xC5, 0x17,
2059                 0x74, 0x71, 0x69, 0x6F, 0x82, 0x89, 0x19, 0x8A,
2060                 0x70, 0x43, 0x92, 0x01, 0xC4, 0x63, 0x7E, 0xB1,
2061                 0x59, 0x4E, 0xCD, 0xEA, 0x93, 0xA4, 0x52, 0x53,
2062                 0x9B, 0x61, 0x5B, 0xD2, 0x3E, 0x19, 0x39, 0xB7,
2063                 0x32, 0xEA, 0x8E, 0xF8, 0x1D, 0x76, 0x5C, 0xB2,
2064                 0x73, 0x2D, 0x91, 0xC0, 0x18, 0xED, 0x25, 0x2A,
2065                 0x53, 0x64, 0xF0, 0x92, 0x31, 0x55, 0x21, 0xA8,
2066                 0x24, 0xA9, 0xD1, 0x02, 0xF6, 0x6C, 0x2B, 0x70,
2067                 0xA9, 0x59, 0xC1, 0xD6, 0xC3, 0x57, 0x5B, 0x92
2068 };
2069
2070 static  uint8_t ms_hmac_key2[] = {
2071                 0xFC, 0x1A, 0x7D, 0x3D, 0xF5, 0x82, 0x80, 0xF1,
2072                 0xF1, 0x35, 0x5C, 0x3B, 0xDD, 0x9A, 0x65, 0xBA,
2073                 0x58, 0x34, 0x85, 0x65, 0x1C, 0x42, 0x50, 0x76,
2074                 0x9A, 0xAF, 0x88, 0x1B, 0xB6, 0x8F, 0xF8, 0x60,
2075                 0xA2, 0x5A, 0x7F, 0x3F, 0xF4, 0x72, 0x70, 0xF1,
2076                 0xF5, 0x35, 0x4C, 0x3B, 0xDD, 0x90, 0x65, 0xB0,
2077                 0x47, 0x3A, 0x75, 0x61, 0x5C, 0xA2, 0x10, 0x76,
2078                 0x9A, 0xAF, 0x77, 0x5B, 0xB6, 0x7F, 0xF7, 0x60
2079 };
2080
2081 static const uint8_t ms_hmac_digest2[] = {
2082                 0xA5, 0x0F, 0x9C, 0xFB, 0x08, 0x62, 0x59, 0xFF,
2083                 0x80, 0x2F, 0xEB, 0x4B, 0xE1, 0x46, 0x21, 0xD6,
2084                 0x02, 0x98, 0xF2, 0x8E, 0xF4, 0xEC, 0xD4, 0x77,
2085                 0x86, 0x4C, 0x31, 0x28, 0xC8, 0x25, 0x80, 0x27,
2086                 0x3A, 0x72, 0x5D, 0x6A, 0x56, 0x8A, 0xD3, 0x82,
2087                 0xB0, 0xEC, 0x31, 0x6D, 0x8B, 0x6B, 0xB4, 0x24,
2088                 0xE7, 0x62, 0xC1, 0x52, 0xBC, 0x14, 0x1B, 0x8E,
2089                 0xEC, 0x9A, 0xF1, 0x47, 0x80, 0xD2, 0xB0, 0x59
2090 };
2091
2092 /* End Session 2 */
2093
2094
2095 static int
2096 test_AES_CBC_HMAC_SHA1_encrypt_digest(void)
2097 {
2098         struct crypto_testsuite_params *ts_params = &testsuite_params;
2099         struct crypto_unittest_params *ut_params = &unittest_params;
2100
2101         /* Verify the capabilities */
2102         struct rte_cryptodev_sym_capability_idx cap_idx;
2103         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
2104         cap_idx.algo.auth = RTE_CRYPTO_AUTH_SHA1_HMAC;
2105         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
2106                         &cap_idx) == NULL)
2107                 return TEST_SKIPPED;
2108         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
2109         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_AES_CBC;
2110         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
2111                         &cap_idx) == NULL)
2112                 return TEST_SKIPPED;
2113
2114         /* Generate test mbuf data and space for digest */
2115         ut_params->ibuf = setup_test_string(ts_params->mbuf_pool,
2116                         catch_22_quote, QUOTE_512_BYTES, 0);
2117
2118         ut_params->digest = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
2119                         DIGEST_BYTE_LENGTH_SHA1);
2120         TEST_ASSERT_NOT_NULL(ut_params->digest, "no room to append digest");
2121
2122         /* Setup Cipher Parameters */
2123         ut_params->cipher_xform.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
2124         ut_params->cipher_xform.next = &ut_params->auth_xform;
2125
2126         ut_params->cipher_xform.cipher.algo = RTE_CRYPTO_CIPHER_AES_CBC;
2127         ut_params->cipher_xform.cipher.op = RTE_CRYPTO_CIPHER_OP_ENCRYPT;
2128         ut_params->cipher_xform.cipher.key.data = aes_cbc_key;
2129         ut_params->cipher_xform.cipher.key.length = CIPHER_KEY_LENGTH_AES_CBC;
2130         ut_params->cipher_xform.cipher.iv.offset = IV_OFFSET;
2131         ut_params->cipher_xform.cipher.iv.length = CIPHER_IV_LENGTH_AES_CBC;
2132
2133         /* Setup HMAC Parameters */
2134         ut_params->auth_xform.type = RTE_CRYPTO_SYM_XFORM_AUTH;
2135
2136         ut_params->auth_xform.next = NULL;
2137
2138         ut_params->auth_xform.auth.op = RTE_CRYPTO_AUTH_OP_GENERATE;
2139         ut_params->auth_xform.auth.algo = RTE_CRYPTO_AUTH_SHA1_HMAC;
2140         ut_params->auth_xform.auth.key.length = HMAC_KEY_LENGTH_SHA1;
2141         ut_params->auth_xform.auth.key.data = hmac_sha1_key;
2142         ut_params->auth_xform.auth.digest_length = DIGEST_BYTE_LENGTH_SHA1;
2143
2144         ut_params->sess = rte_cryptodev_sym_session_create(
2145                         ts_params->session_mpool);
2146
2147         /* Create crypto session*/
2148         rte_cryptodev_sym_session_init(ts_params->valid_devs[0],
2149                         ut_params->sess, &ut_params->cipher_xform,
2150                         ts_params->session_priv_mpool);
2151         TEST_ASSERT_NOT_NULL(ut_params->sess, "Session creation failed");
2152
2153         /* Generate crypto op data structure */
2154         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
2155                         RTE_CRYPTO_OP_TYPE_SYMMETRIC);
2156         TEST_ASSERT_NOT_NULL(ut_params->op,
2157                         "Failed to allocate symmetric crypto operation struct");
2158
2159         rte_crypto_op_attach_sym_session(ut_params->op, ut_params->sess);
2160
2161         struct rte_crypto_sym_op *sym_op = ut_params->op->sym;
2162
2163         /* set crypto operation source mbuf */
2164         sym_op->m_src = ut_params->ibuf;
2165
2166         /* Set crypto operation authentication parameters */
2167         sym_op->auth.digest.data = ut_params->digest;
2168         sym_op->auth.digest.phys_addr = rte_pktmbuf_iova_offset(
2169                         ut_params->ibuf, QUOTE_512_BYTES);
2170
2171         sym_op->auth.data.offset = 0;
2172         sym_op->auth.data.length = QUOTE_512_BYTES;
2173
2174         /* Copy IV at the end of the crypto operation */
2175         rte_memcpy(rte_crypto_op_ctod_offset(ut_params->op, uint8_t *, IV_OFFSET),
2176                         aes_cbc_iv, CIPHER_IV_LENGTH_AES_CBC);
2177
2178         /* Set crypto operation cipher parameters */
2179         sym_op->cipher.data.offset = 0;
2180         sym_op->cipher.data.length = QUOTE_512_BYTES;
2181
2182         /* Process crypto operation */
2183         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
2184                 process_cpu_crypt_auth_op(ts_params->valid_devs[0],
2185                         ut_params->op);
2186         else
2187                 TEST_ASSERT_NOT_NULL(
2188                         process_crypto_request(ts_params->valid_devs[0],
2189                                 ut_params->op),
2190                                 "failed to process sym crypto op");
2191
2192         TEST_ASSERT_EQUAL(ut_params->op->status, RTE_CRYPTO_OP_STATUS_SUCCESS,
2193                         "crypto op processing failed");
2194
2195         /* Validate obuf */
2196         uint8_t *ciphertext = rte_pktmbuf_mtod(ut_params->op->sym->m_src,
2197                         uint8_t *);
2198
2199         TEST_ASSERT_BUFFERS_ARE_EQUAL(ciphertext,
2200                         catch_22_quote_2_512_bytes_AES_CBC_ciphertext,
2201                         QUOTE_512_BYTES,
2202                         "ciphertext data not as expected");
2203
2204         uint8_t *digest = ciphertext + QUOTE_512_BYTES;
2205
2206         TEST_ASSERT_BUFFERS_ARE_EQUAL(digest,
2207                         catch_22_quote_2_512_bytes_AES_CBC_HMAC_SHA1_digest,
2208                         gbl_driver_id == rte_cryptodev_driver_id_get(
2209                                         RTE_STR(CRYPTODEV_NAME_AESNI_MB_PMD)) ?
2210                                         TRUNCATED_DIGEST_BYTE_LENGTH_SHA1 :
2211                                         DIGEST_BYTE_LENGTH_SHA1,
2212                         "Generated digest data not as expected");
2213
2214         return TEST_SUCCESS;
2215 }
2216
2217 /* ***** AES-CBC / HMAC-SHA512 Hash Tests ***** */
2218
2219 #define HMAC_KEY_LENGTH_SHA512  (DIGEST_BYTE_LENGTH_SHA512)
2220
2221 static uint8_t hmac_sha512_key[] = {
2222         0x42, 0x1a, 0x7d, 0x3d, 0xf5, 0x82, 0x80, 0xf1,
2223         0xF1, 0x35, 0x5C, 0x3B, 0xDD, 0x9A, 0x65, 0xBA,
2224         0x58, 0x34, 0x85, 0x65, 0x1C, 0x42, 0x50, 0x76,
2225         0x9a, 0xaf, 0x88, 0x1b, 0xb6, 0x8f, 0xf8, 0x60,
2226         0xa2, 0x5a, 0x7f, 0x3f, 0xf4, 0x72, 0x70, 0xf1,
2227         0xF5, 0x35, 0x4C, 0x3B, 0xDD, 0x90, 0x65, 0xB0,
2228         0x47, 0x3a, 0x75, 0x61, 0x5C, 0xa2, 0x10, 0x76,
2229         0x9a, 0xaf, 0x77, 0x5b, 0xb6, 0x7f, 0xf7, 0x60 };
2230
2231 static const uint8_t catch_22_quote_2_512_bytes_AES_CBC_HMAC_SHA512_digest[] = {
2232         0x5D, 0x54, 0x66, 0xC1, 0x6E, 0xBC, 0x04, 0xB8,
2233         0x46, 0xB8, 0x08, 0x6E, 0xE0, 0xF0, 0x43, 0x48,
2234         0x37, 0x96, 0x9C, 0xC6, 0x9C, 0xC2, 0x1E, 0xE8,
2235         0xF2, 0x0C, 0x0B, 0xEF, 0x86, 0xA2, 0xE3, 0x70,
2236         0x95, 0xC8, 0xB3, 0x06, 0x47, 0xA9, 0x90, 0xE8,
2237         0xA0, 0xC6, 0x72, 0x69, 0x05, 0xC0, 0x0D, 0x0E,
2238         0x21, 0x96, 0x65, 0x93, 0x74, 0x43, 0x2A, 0x1D,
2239         0x2E, 0xBF, 0xC2, 0xC2, 0xEE, 0xCC, 0x2F, 0x0A };
2240
2241
2242
2243 static int
2244 test_AES_CBC_HMAC_SHA512_decrypt_create_session_params(
2245                 struct crypto_unittest_params *ut_params,
2246                 uint8_t *cipher_key,
2247                 uint8_t *hmac_key);
2248
2249 static int
2250 test_AES_CBC_HMAC_SHA512_decrypt_perform(struct rte_cryptodev_sym_session *sess,
2251                 struct crypto_unittest_params *ut_params,
2252                 struct crypto_testsuite_params *ts_params,
2253                 const uint8_t *cipher,
2254                 const uint8_t *digest,
2255                 const uint8_t *iv);
2256
2257
2258 static int
2259 test_AES_CBC_HMAC_SHA512_decrypt_create_session_params(
2260                 struct crypto_unittest_params *ut_params,
2261                 uint8_t *cipher_key,
2262                 uint8_t *hmac_key)
2263 {
2264
2265         /* Setup Cipher Parameters */
2266         ut_params->cipher_xform.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
2267         ut_params->cipher_xform.next = NULL;
2268
2269         ut_params->cipher_xform.cipher.algo = RTE_CRYPTO_CIPHER_AES_CBC;
2270         ut_params->cipher_xform.cipher.op = RTE_CRYPTO_CIPHER_OP_DECRYPT;
2271         ut_params->cipher_xform.cipher.key.data = cipher_key;
2272         ut_params->cipher_xform.cipher.key.length = CIPHER_KEY_LENGTH_AES_CBC;
2273         ut_params->cipher_xform.cipher.iv.offset = IV_OFFSET;
2274         ut_params->cipher_xform.cipher.iv.length = CIPHER_IV_LENGTH_AES_CBC;
2275
2276         /* Setup HMAC Parameters */
2277         ut_params->auth_xform.type = RTE_CRYPTO_SYM_XFORM_AUTH;
2278         ut_params->auth_xform.next = &ut_params->cipher_xform;
2279
2280         ut_params->auth_xform.auth.op = RTE_CRYPTO_AUTH_OP_VERIFY;
2281         ut_params->auth_xform.auth.algo = RTE_CRYPTO_AUTH_SHA512_HMAC;
2282         ut_params->auth_xform.auth.key.data = hmac_key;
2283         ut_params->auth_xform.auth.key.length = HMAC_KEY_LENGTH_SHA512;
2284         ut_params->auth_xform.auth.digest_length = DIGEST_BYTE_LENGTH_SHA512;
2285
2286         return TEST_SUCCESS;
2287 }
2288
2289
2290 static int
2291 test_AES_CBC_HMAC_SHA512_decrypt_perform(struct rte_cryptodev_sym_session *sess,
2292                 struct crypto_unittest_params *ut_params,
2293                 struct crypto_testsuite_params *ts_params,
2294                 const uint8_t *cipher,
2295                 const uint8_t *digest,
2296                 const uint8_t *iv)
2297 {
2298         /* Generate test mbuf data and digest */
2299         ut_params->ibuf = setup_test_string(ts_params->mbuf_pool,
2300                         (const char *)
2301                         cipher,
2302                         QUOTE_512_BYTES, 0);
2303
2304         ut_params->digest = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
2305                         DIGEST_BYTE_LENGTH_SHA512);
2306         TEST_ASSERT_NOT_NULL(ut_params->digest, "no room to append digest");
2307
2308         rte_memcpy(ut_params->digest,
2309                         digest,
2310                         DIGEST_BYTE_LENGTH_SHA512);
2311
2312         /* Generate Crypto op data structure */
2313         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
2314                         RTE_CRYPTO_OP_TYPE_SYMMETRIC);
2315         TEST_ASSERT_NOT_NULL(ut_params->op,
2316                         "Failed to allocate symmetric crypto operation struct");
2317
2318         rte_crypto_op_attach_sym_session(ut_params->op, sess);
2319
2320         struct rte_crypto_sym_op *sym_op = ut_params->op->sym;
2321
2322         /* set crypto operation source mbuf */
2323         sym_op->m_src = ut_params->ibuf;
2324
2325         sym_op->auth.digest.data = ut_params->digest;
2326         sym_op->auth.digest.phys_addr = rte_pktmbuf_iova_offset(
2327                         ut_params->ibuf, QUOTE_512_BYTES);
2328
2329         sym_op->auth.data.offset = 0;
2330         sym_op->auth.data.length = QUOTE_512_BYTES;
2331
2332         /* Copy IV at the end of the crypto operation */
2333         rte_memcpy(rte_crypto_op_ctod_offset(ut_params->op, uint8_t *, IV_OFFSET),
2334                         iv, CIPHER_IV_LENGTH_AES_CBC);
2335
2336         sym_op->cipher.data.offset = 0;
2337         sym_op->cipher.data.length = QUOTE_512_BYTES;
2338
2339         /* Process crypto operation */
2340         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
2341                 process_cpu_crypt_auth_op(ts_params->valid_devs[0],
2342                         ut_params->op);
2343         else if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
2344                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
2345                                 ut_params->op, 1, 1, 0, 0);
2346         else
2347                 TEST_ASSERT_NOT_NULL(
2348                                 process_crypto_request(ts_params->valid_devs[0],
2349                                         ut_params->op),
2350                                         "failed to process sym crypto op");
2351
2352         TEST_ASSERT_EQUAL(ut_params->op->status, RTE_CRYPTO_OP_STATUS_SUCCESS,
2353                         "crypto op processing failed");
2354
2355         ut_params->obuf = ut_params->op->sym->m_src;
2356
2357         /* Validate obuf */
2358         TEST_ASSERT_BUFFERS_ARE_EQUAL(
2359                         rte_pktmbuf_mtod(ut_params->obuf, uint8_t *),
2360                         catch_22_quote,
2361                         QUOTE_512_BYTES,
2362                         "Plaintext data not as expected");
2363
2364         /* Validate obuf */
2365         TEST_ASSERT_EQUAL(ut_params->op->status, RTE_CRYPTO_OP_STATUS_SUCCESS,
2366                         "Digest verification failed");
2367
2368         return TEST_SUCCESS;
2369 }
2370
2371 /* ***** SNOW 3G Tests ***** */
2372 static int
2373 create_wireless_algo_hash_session(uint8_t dev_id,
2374         const uint8_t *key, const uint8_t key_len,
2375         const uint8_t iv_len, const uint8_t auth_len,
2376         enum rte_crypto_auth_operation op,
2377         enum rte_crypto_auth_algorithm algo)
2378 {
2379         uint8_t hash_key[key_len];
2380         int status;
2381
2382         struct crypto_testsuite_params *ts_params = &testsuite_params;
2383         struct crypto_unittest_params *ut_params = &unittest_params;
2384
2385         memcpy(hash_key, key, key_len);
2386
2387         debug_hexdump(stdout, "key:", key, key_len);
2388
2389         /* Setup Authentication Parameters */
2390         ut_params->auth_xform.type = RTE_CRYPTO_SYM_XFORM_AUTH;
2391         ut_params->auth_xform.next = NULL;
2392
2393         ut_params->auth_xform.auth.op = op;
2394         ut_params->auth_xform.auth.algo = algo;
2395         ut_params->auth_xform.auth.key.length = key_len;
2396         ut_params->auth_xform.auth.key.data = hash_key;
2397         ut_params->auth_xform.auth.digest_length = auth_len;
2398         ut_params->auth_xform.auth.iv.offset = IV_OFFSET;
2399         ut_params->auth_xform.auth.iv.length = iv_len;
2400         ut_params->sess = rte_cryptodev_sym_session_create(
2401                         ts_params->session_mpool);
2402
2403         status = rte_cryptodev_sym_session_init(dev_id, ut_params->sess,
2404                         &ut_params->auth_xform,
2405                         ts_params->session_priv_mpool);
2406         TEST_ASSERT_EQUAL(status, 0, "session init failed");
2407         TEST_ASSERT_NOT_NULL(ut_params->sess, "Session creation failed");
2408         return 0;
2409 }
2410
2411 static int
2412 create_wireless_algo_cipher_session(uint8_t dev_id,
2413                         enum rte_crypto_cipher_operation op,
2414                         enum rte_crypto_cipher_algorithm algo,
2415                         const uint8_t *key, const uint8_t key_len,
2416                         uint8_t iv_len)
2417 {
2418         uint8_t cipher_key[key_len];
2419         int status;
2420         struct crypto_testsuite_params *ts_params = &testsuite_params;
2421         struct crypto_unittest_params *ut_params = &unittest_params;
2422
2423         memcpy(cipher_key, key, key_len);
2424
2425         /* Setup Cipher Parameters */
2426         ut_params->cipher_xform.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
2427         ut_params->cipher_xform.next = NULL;
2428
2429         ut_params->cipher_xform.cipher.algo = algo;
2430         ut_params->cipher_xform.cipher.op = op;
2431         ut_params->cipher_xform.cipher.key.data = cipher_key;
2432         ut_params->cipher_xform.cipher.key.length = key_len;
2433         ut_params->cipher_xform.cipher.iv.offset = IV_OFFSET;
2434         ut_params->cipher_xform.cipher.iv.length = iv_len;
2435
2436         debug_hexdump(stdout, "key:", key, key_len);
2437
2438         /* Create Crypto session */
2439         ut_params->sess = rte_cryptodev_sym_session_create(
2440                         ts_params->session_mpool);
2441
2442         status = rte_cryptodev_sym_session_init(dev_id, ut_params->sess,
2443                         &ut_params->cipher_xform,
2444                         ts_params->session_priv_mpool);
2445         TEST_ASSERT_EQUAL(status, 0, "session init failed");
2446         TEST_ASSERT_NOT_NULL(ut_params->sess, "Session creation failed");
2447         return 0;
2448 }
2449
2450 static int
2451 create_wireless_algo_cipher_operation(const uint8_t *iv, uint8_t iv_len,
2452                         unsigned int cipher_len,
2453                         unsigned int cipher_offset)
2454 {
2455         struct crypto_testsuite_params *ts_params = &testsuite_params;
2456         struct crypto_unittest_params *ut_params = &unittest_params;
2457
2458         /* Generate Crypto op data structure */
2459         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
2460                                 RTE_CRYPTO_OP_TYPE_SYMMETRIC);
2461         TEST_ASSERT_NOT_NULL(ut_params->op,
2462                                 "Failed to allocate pktmbuf offload");
2463
2464         /* Set crypto operation data parameters */
2465         rte_crypto_op_attach_sym_session(ut_params->op, ut_params->sess);
2466
2467         struct rte_crypto_sym_op *sym_op = ut_params->op->sym;
2468
2469         /* set crypto operation source mbuf */
2470         sym_op->m_src = ut_params->ibuf;
2471
2472         /* iv */
2473         rte_memcpy(rte_crypto_op_ctod_offset(ut_params->op, uint8_t *, IV_OFFSET),
2474                         iv, iv_len);
2475         sym_op->cipher.data.length = cipher_len;
2476         sym_op->cipher.data.offset = cipher_offset;
2477         return 0;
2478 }
2479
2480 static int
2481 create_wireless_algo_cipher_operation_oop(const uint8_t *iv, uint8_t iv_len,
2482                         unsigned int cipher_len,
2483                         unsigned int cipher_offset)
2484 {
2485         struct crypto_testsuite_params *ts_params = &testsuite_params;
2486         struct crypto_unittest_params *ut_params = &unittest_params;
2487
2488         /* Generate Crypto op data structure */
2489         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
2490                                 RTE_CRYPTO_OP_TYPE_SYMMETRIC);
2491         TEST_ASSERT_NOT_NULL(ut_params->op,
2492                                 "Failed to allocate pktmbuf offload");
2493
2494         /* Set crypto operation data parameters */
2495         rte_crypto_op_attach_sym_session(ut_params->op, ut_params->sess);
2496
2497         struct rte_crypto_sym_op *sym_op = ut_params->op->sym;
2498
2499         /* set crypto operation source mbuf */
2500         sym_op->m_src = ut_params->ibuf;
2501         sym_op->m_dst = ut_params->obuf;
2502
2503         /* iv */
2504         rte_memcpy(rte_crypto_op_ctod_offset(ut_params->op, uint8_t *, IV_OFFSET),
2505                         iv, iv_len);
2506         sym_op->cipher.data.length = cipher_len;
2507         sym_op->cipher.data.offset = cipher_offset;
2508         return 0;
2509 }
2510
2511 static int
2512 create_wireless_algo_cipher_auth_session(uint8_t dev_id,
2513                 enum rte_crypto_cipher_operation cipher_op,
2514                 enum rte_crypto_auth_operation auth_op,
2515                 enum rte_crypto_auth_algorithm auth_algo,
2516                 enum rte_crypto_cipher_algorithm cipher_algo,
2517                 const uint8_t *key, uint8_t key_len,
2518                 uint8_t auth_iv_len, uint8_t auth_len,
2519                 uint8_t cipher_iv_len)
2520
2521 {
2522         uint8_t cipher_auth_key[key_len];
2523         int status;
2524
2525         struct crypto_testsuite_params *ts_params = &testsuite_params;
2526         struct crypto_unittest_params *ut_params = &unittest_params;
2527
2528         memcpy(cipher_auth_key, key, key_len);
2529
2530         /* Setup Authentication Parameters */
2531         ut_params->auth_xform.type = RTE_CRYPTO_SYM_XFORM_AUTH;
2532         ut_params->auth_xform.next = NULL;
2533
2534         ut_params->auth_xform.auth.op = auth_op;
2535         ut_params->auth_xform.auth.algo = auth_algo;
2536         ut_params->auth_xform.auth.key.length = key_len;
2537         /* Hash key = cipher key */
2538         ut_params->auth_xform.auth.key.data = cipher_auth_key;
2539         ut_params->auth_xform.auth.digest_length = auth_len;
2540         /* Auth IV will be after cipher IV */
2541         ut_params->auth_xform.auth.iv.offset = IV_OFFSET + cipher_iv_len;
2542         ut_params->auth_xform.auth.iv.length = auth_iv_len;
2543
2544         /* Setup Cipher Parameters */
2545         ut_params->cipher_xform.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
2546         ut_params->cipher_xform.next = &ut_params->auth_xform;
2547
2548         ut_params->cipher_xform.cipher.algo = cipher_algo;
2549         ut_params->cipher_xform.cipher.op = cipher_op;
2550         ut_params->cipher_xform.cipher.key.data = cipher_auth_key;
2551         ut_params->cipher_xform.cipher.key.length = key_len;
2552         ut_params->cipher_xform.cipher.iv.offset = IV_OFFSET;
2553         ut_params->cipher_xform.cipher.iv.length = cipher_iv_len;
2554
2555         debug_hexdump(stdout, "key:", key, key_len);
2556
2557         /* Create Crypto session*/
2558         ut_params->sess = rte_cryptodev_sym_session_create(
2559                         ts_params->session_mpool);
2560         TEST_ASSERT_NOT_NULL(ut_params->sess, "Session creation failed");
2561
2562         status = rte_cryptodev_sym_session_init(dev_id, ut_params->sess,
2563                         &ut_params->cipher_xform,
2564                         ts_params->session_priv_mpool);
2565         if (status == -ENOTSUP)
2566                 return TEST_SKIPPED;
2567
2568         TEST_ASSERT_EQUAL(status, 0, "session init failed");
2569         return 0;
2570 }
2571
2572 static int
2573 create_wireless_cipher_auth_session(uint8_t dev_id,
2574                 enum rte_crypto_cipher_operation cipher_op,
2575                 enum rte_crypto_auth_operation auth_op,
2576                 enum rte_crypto_auth_algorithm auth_algo,
2577                 enum rte_crypto_cipher_algorithm cipher_algo,
2578                 const struct wireless_test_data *tdata)
2579 {
2580         const uint8_t key_len = tdata->key.len;
2581         uint8_t cipher_auth_key[key_len];
2582         int status;
2583
2584         struct crypto_testsuite_params *ts_params = &testsuite_params;
2585         struct crypto_unittest_params *ut_params = &unittest_params;
2586         const uint8_t *key = tdata->key.data;
2587         const uint8_t auth_len = tdata->digest.len;
2588         uint8_t cipher_iv_len = tdata->cipher_iv.len;
2589         uint8_t auth_iv_len = tdata->auth_iv.len;
2590
2591         memcpy(cipher_auth_key, key, key_len);
2592
2593         /* Setup Authentication Parameters */
2594         ut_params->auth_xform.type = RTE_CRYPTO_SYM_XFORM_AUTH;
2595         ut_params->auth_xform.next = NULL;
2596
2597         ut_params->auth_xform.auth.op = auth_op;
2598         ut_params->auth_xform.auth.algo = auth_algo;
2599         ut_params->auth_xform.auth.key.length = key_len;
2600         /* Hash key = cipher key */
2601         ut_params->auth_xform.auth.key.data = cipher_auth_key;
2602         ut_params->auth_xform.auth.digest_length = auth_len;
2603         /* Auth IV will be after cipher IV */
2604         ut_params->auth_xform.auth.iv.offset = IV_OFFSET + cipher_iv_len;
2605         ut_params->auth_xform.auth.iv.length = auth_iv_len;
2606
2607         /* Setup Cipher Parameters */
2608         ut_params->cipher_xform.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
2609         ut_params->cipher_xform.next = &ut_params->auth_xform;
2610
2611         ut_params->cipher_xform.cipher.algo = cipher_algo;
2612         ut_params->cipher_xform.cipher.op = cipher_op;
2613         ut_params->cipher_xform.cipher.key.data = cipher_auth_key;
2614         ut_params->cipher_xform.cipher.key.length = key_len;
2615         ut_params->cipher_xform.cipher.iv.offset = IV_OFFSET;
2616         ut_params->cipher_xform.cipher.iv.length = cipher_iv_len;
2617
2618
2619         debug_hexdump(stdout, "key:", key, key_len);
2620
2621         /* Create Crypto session*/
2622         ut_params->sess = rte_cryptodev_sym_session_create(
2623                         ts_params->session_mpool);
2624
2625         status = rte_cryptodev_sym_session_init(dev_id, ut_params->sess,
2626                         &ut_params->cipher_xform,
2627                         ts_params->session_priv_mpool);
2628         if (status == -ENOTSUP)
2629                 return TEST_SKIPPED;
2630
2631         TEST_ASSERT_EQUAL(status, 0, "session init failed");
2632         TEST_ASSERT_NOT_NULL(ut_params->sess, "Session creation failed");
2633         return 0;
2634 }
2635
2636 static int
2637 create_zuc_cipher_auth_encrypt_generate_session(uint8_t dev_id,
2638                 const struct wireless_test_data *tdata)
2639 {
2640         return create_wireless_cipher_auth_session(dev_id,
2641                 RTE_CRYPTO_CIPHER_OP_ENCRYPT,
2642                 RTE_CRYPTO_AUTH_OP_GENERATE, RTE_CRYPTO_AUTH_ZUC_EIA3,
2643                 RTE_CRYPTO_CIPHER_ZUC_EEA3, tdata);
2644 }
2645
2646 static int
2647 create_wireless_algo_auth_cipher_session(uint8_t dev_id,
2648                 enum rte_crypto_cipher_operation cipher_op,
2649                 enum rte_crypto_auth_operation auth_op,
2650                 enum rte_crypto_auth_algorithm auth_algo,
2651                 enum rte_crypto_cipher_algorithm cipher_algo,
2652                 const uint8_t *key, const uint8_t key_len,
2653                 uint8_t auth_iv_len, uint8_t auth_len,
2654                 uint8_t cipher_iv_len)
2655 {
2656         uint8_t auth_cipher_key[key_len];
2657         int status;
2658         struct crypto_testsuite_params *ts_params = &testsuite_params;
2659         struct crypto_unittest_params *ut_params = &unittest_params;
2660
2661         memcpy(auth_cipher_key, key, key_len);
2662
2663         /* Setup Authentication Parameters */
2664         ut_params->auth_xform.type = RTE_CRYPTO_SYM_XFORM_AUTH;
2665         ut_params->auth_xform.auth.op = auth_op;
2666         ut_params->auth_xform.next = &ut_params->cipher_xform;
2667         ut_params->auth_xform.auth.algo = auth_algo;
2668         ut_params->auth_xform.auth.key.length = key_len;
2669         ut_params->auth_xform.auth.key.data = auth_cipher_key;
2670         ut_params->auth_xform.auth.digest_length = auth_len;
2671         /* Auth IV will be after cipher IV */
2672         ut_params->auth_xform.auth.iv.offset = IV_OFFSET + cipher_iv_len;
2673         ut_params->auth_xform.auth.iv.length = auth_iv_len;
2674
2675         /* Setup Cipher Parameters */
2676         ut_params->cipher_xform.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
2677         ut_params->cipher_xform.next = NULL;
2678         ut_params->cipher_xform.cipher.algo = cipher_algo;
2679         ut_params->cipher_xform.cipher.op = cipher_op;
2680         ut_params->cipher_xform.cipher.key.data = auth_cipher_key;
2681         ut_params->cipher_xform.cipher.key.length = key_len;
2682         ut_params->cipher_xform.cipher.iv.offset = IV_OFFSET;
2683         ut_params->cipher_xform.cipher.iv.length = cipher_iv_len;
2684
2685         debug_hexdump(stdout, "key:", key, key_len);
2686
2687         /* Create Crypto session*/
2688         ut_params->sess = rte_cryptodev_sym_session_create(
2689                         ts_params->session_mpool);
2690         TEST_ASSERT_NOT_NULL(ut_params->sess, "Session creation failed");
2691
2692         if (cipher_op == RTE_CRYPTO_CIPHER_OP_DECRYPT) {
2693                 ut_params->auth_xform.next = NULL;
2694                 ut_params->cipher_xform.next = &ut_params->auth_xform;
2695                 status = rte_cryptodev_sym_session_init(dev_id, ut_params->sess,
2696                                 &ut_params->cipher_xform,
2697                                 ts_params->session_priv_mpool);
2698
2699         } else
2700                 status = rte_cryptodev_sym_session_init(dev_id, ut_params->sess,
2701                                 &ut_params->auth_xform,
2702                                 ts_params->session_priv_mpool);
2703
2704         if (status == -ENOTSUP)
2705                 return TEST_SKIPPED;
2706
2707         TEST_ASSERT_EQUAL(status, 0, "session init failed");
2708
2709         return 0;
2710 }
2711
2712 static int
2713 create_wireless_algo_hash_operation(const uint8_t *auth_tag,
2714                 unsigned int auth_tag_len,
2715                 const uint8_t *iv, unsigned int iv_len,
2716                 unsigned int data_pad_len,
2717                 enum rte_crypto_auth_operation op,
2718                 unsigned int auth_len, unsigned int auth_offset)
2719 {
2720         struct crypto_testsuite_params *ts_params = &testsuite_params;
2721
2722         struct crypto_unittest_params *ut_params = &unittest_params;
2723
2724         /* Generate Crypto op data structure */
2725         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
2726                         RTE_CRYPTO_OP_TYPE_SYMMETRIC);
2727         TEST_ASSERT_NOT_NULL(ut_params->op,
2728                 "Failed to allocate pktmbuf offload");
2729
2730         /* Set crypto operation data parameters */
2731         rte_crypto_op_attach_sym_session(ut_params->op, ut_params->sess);
2732
2733         struct rte_crypto_sym_op *sym_op = ut_params->op->sym;
2734
2735         /* set crypto operation source mbuf */
2736         sym_op->m_src = ut_params->ibuf;
2737
2738         /* iv */
2739         rte_memcpy(rte_crypto_op_ctod_offset(ut_params->op, uint8_t *, IV_OFFSET),
2740                         iv, iv_len);
2741         /* digest */
2742         sym_op->auth.digest.data = (uint8_t *)rte_pktmbuf_append(
2743                                         ut_params->ibuf, auth_tag_len);
2744
2745         TEST_ASSERT_NOT_NULL(sym_op->auth.digest.data,
2746                                 "no room to append auth tag");
2747         ut_params->digest = sym_op->auth.digest.data;
2748         sym_op->auth.digest.phys_addr = rte_pktmbuf_iova_offset(
2749                         ut_params->ibuf, data_pad_len);
2750         if (op == RTE_CRYPTO_AUTH_OP_GENERATE)
2751                 memset(sym_op->auth.digest.data, 0, auth_tag_len);
2752         else
2753                 rte_memcpy(sym_op->auth.digest.data, auth_tag, auth_tag_len);
2754
2755         debug_hexdump(stdout, "digest:",
2756                 sym_op->auth.digest.data,
2757                 auth_tag_len);
2758
2759         sym_op->auth.data.length = auth_len;
2760         sym_op->auth.data.offset = auth_offset;
2761
2762         return 0;
2763 }
2764
2765 static int
2766 create_wireless_cipher_hash_operation(const struct wireless_test_data *tdata,
2767         enum rte_crypto_auth_operation op)
2768 {
2769         struct crypto_testsuite_params *ts_params = &testsuite_params;
2770         struct crypto_unittest_params *ut_params = &unittest_params;
2771
2772         const uint8_t *auth_tag = tdata->digest.data;
2773         const unsigned int auth_tag_len = tdata->digest.len;
2774         unsigned int plaintext_len = ceil_byte_length(tdata->plaintext.len);
2775         unsigned int data_pad_len = RTE_ALIGN_CEIL(plaintext_len, 16);
2776
2777         const uint8_t *cipher_iv = tdata->cipher_iv.data;
2778         const uint8_t cipher_iv_len = tdata->cipher_iv.len;
2779         const uint8_t *auth_iv = tdata->auth_iv.data;
2780         const uint8_t auth_iv_len = tdata->auth_iv.len;
2781         const unsigned int cipher_len = tdata->validCipherLenInBits.len;
2782         const unsigned int auth_len = tdata->validAuthLenInBits.len;
2783
2784         /* Generate Crypto op data structure */
2785         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
2786                         RTE_CRYPTO_OP_TYPE_SYMMETRIC);
2787         TEST_ASSERT_NOT_NULL(ut_params->op,
2788                         "Failed to allocate pktmbuf offload");
2789         /* Set crypto operation data parameters */
2790         rte_crypto_op_attach_sym_session(ut_params->op, ut_params->sess);
2791
2792         struct rte_crypto_sym_op *sym_op = ut_params->op->sym;
2793
2794         /* set crypto operation source mbuf */
2795         sym_op->m_src = ut_params->ibuf;
2796
2797         /* digest */
2798         sym_op->auth.digest.data = (uint8_t *)rte_pktmbuf_append(
2799                         ut_params->ibuf, auth_tag_len);
2800
2801         TEST_ASSERT_NOT_NULL(sym_op->auth.digest.data,
2802                         "no room to append auth tag");
2803         ut_params->digest = sym_op->auth.digest.data;
2804         sym_op->auth.digest.phys_addr = rte_pktmbuf_iova_offset(
2805                         ut_params->ibuf, data_pad_len);
2806         if (op == RTE_CRYPTO_AUTH_OP_GENERATE)
2807                 memset(sym_op->auth.digest.data, 0, auth_tag_len);
2808         else
2809                 rte_memcpy(sym_op->auth.digest.data, auth_tag, auth_tag_len);
2810
2811         debug_hexdump(stdout, "digest:",
2812                 sym_op->auth.digest.data,
2813                 auth_tag_len);
2814
2815         /* Copy cipher and auth IVs at the end of the crypto operation */
2816         uint8_t *iv_ptr = rte_crypto_op_ctod_offset(ut_params->op, uint8_t *,
2817                                                 IV_OFFSET);
2818         rte_memcpy(iv_ptr, cipher_iv, cipher_iv_len);
2819         iv_ptr += cipher_iv_len;
2820         rte_memcpy(iv_ptr, auth_iv, auth_iv_len);
2821
2822         sym_op->cipher.data.length = cipher_len;
2823         sym_op->cipher.data.offset = 0;
2824         sym_op->auth.data.length = auth_len;
2825         sym_op->auth.data.offset = 0;
2826
2827         return 0;
2828 }
2829
2830 static int
2831 create_zuc_cipher_hash_generate_operation(
2832                 const struct wireless_test_data *tdata)
2833 {
2834         return create_wireless_cipher_hash_operation(tdata,
2835                 RTE_CRYPTO_AUTH_OP_GENERATE);
2836 }
2837
2838 static int
2839 create_wireless_algo_cipher_hash_operation(const uint8_t *auth_tag,
2840                 const unsigned auth_tag_len,
2841                 const uint8_t *auth_iv, uint8_t auth_iv_len,
2842                 unsigned data_pad_len,
2843                 enum rte_crypto_auth_operation op,
2844                 const uint8_t *cipher_iv, uint8_t cipher_iv_len,
2845                 const unsigned cipher_len, const unsigned cipher_offset,
2846                 const unsigned auth_len, const unsigned auth_offset)
2847 {
2848         struct crypto_testsuite_params *ts_params = &testsuite_params;
2849         struct crypto_unittest_params *ut_params = &unittest_params;
2850
2851         enum rte_crypto_cipher_algorithm cipher_algo =
2852                         ut_params->cipher_xform.cipher.algo;
2853         enum rte_crypto_auth_algorithm auth_algo =
2854                         ut_params->auth_xform.auth.algo;
2855
2856         /* Generate Crypto op data structure */
2857         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
2858                         RTE_CRYPTO_OP_TYPE_SYMMETRIC);
2859         TEST_ASSERT_NOT_NULL(ut_params->op,
2860                         "Failed to allocate pktmbuf offload");
2861         /* Set crypto operation data parameters */
2862         rte_crypto_op_attach_sym_session(ut_params->op, ut_params->sess);
2863
2864         struct rte_crypto_sym_op *sym_op = ut_params->op->sym;
2865
2866         /* set crypto operation source mbuf */
2867         sym_op->m_src = ut_params->ibuf;
2868
2869         /* digest */
2870         sym_op->auth.digest.data = (uint8_t *)rte_pktmbuf_append(
2871                         ut_params->ibuf, auth_tag_len);
2872
2873         TEST_ASSERT_NOT_NULL(sym_op->auth.digest.data,
2874                         "no room to append auth tag");
2875         ut_params->digest = sym_op->auth.digest.data;
2876
2877         if (rte_pktmbuf_is_contiguous(ut_params->ibuf)) {
2878                 sym_op->auth.digest.phys_addr = rte_pktmbuf_iova_offset(
2879                                 ut_params->ibuf, data_pad_len);
2880         } else {
2881                 struct rte_mbuf *m = ut_params->ibuf;
2882                 unsigned int offset = data_pad_len;
2883
2884                 while (offset > m->data_len && m->next != NULL) {
2885                         offset -= m->data_len;
2886                         m = m->next;
2887                 }
2888                 sym_op->auth.digest.phys_addr = rte_pktmbuf_iova_offset(
2889                         m, offset);
2890         }
2891
2892         if (op == RTE_CRYPTO_AUTH_OP_GENERATE)
2893                 memset(sym_op->auth.digest.data, 0, auth_tag_len);
2894         else
2895                 rte_memcpy(sym_op->auth.digest.data, auth_tag, auth_tag_len);
2896
2897         debug_hexdump(stdout, "digest:",
2898                 sym_op->auth.digest.data,
2899                 auth_tag_len);
2900
2901         /* Copy cipher and auth IVs at the end of the crypto operation */
2902         uint8_t *iv_ptr = rte_crypto_op_ctod_offset(ut_params->op, uint8_t *,
2903                                                 IV_OFFSET);
2904         rte_memcpy(iv_ptr, cipher_iv, cipher_iv_len);
2905         iv_ptr += cipher_iv_len;
2906         rte_memcpy(iv_ptr, auth_iv, auth_iv_len);
2907
2908         if (cipher_algo == RTE_CRYPTO_CIPHER_SNOW3G_UEA2 ||
2909                 cipher_algo == RTE_CRYPTO_CIPHER_KASUMI_F8 ||
2910                 cipher_algo == RTE_CRYPTO_CIPHER_ZUC_EEA3) {
2911                 sym_op->cipher.data.length = cipher_len;
2912                 sym_op->cipher.data.offset = cipher_offset;
2913         } else {
2914                 sym_op->cipher.data.length = cipher_len >> 3;
2915                 sym_op->cipher.data.offset = cipher_offset >> 3;
2916         }
2917
2918         if (auth_algo == RTE_CRYPTO_AUTH_SNOW3G_UIA2 ||
2919                 auth_algo == RTE_CRYPTO_AUTH_KASUMI_F9 ||
2920                 auth_algo == RTE_CRYPTO_AUTH_ZUC_EIA3) {
2921                 sym_op->auth.data.length = auth_len;
2922                 sym_op->auth.data.offset = auth_offset;
2923         } else {
2924                 sym_op->auth.data.length = auth_len >> 3;
2925                 sym_op->auth.data.offset = auth_offset >> 3;
2926         }
2927
2928         return 0;
2929 }
2930
2931 static int
2932 create_wireless_algo_auth_cipher_operation(
2933                 const uint8_t *auth_tag, unsigned int auth_tag_len,
2934                 const uint8_t *cipher_iv, uint8_t cipher_iv_len,
2935                 const uint8_t *auth_iv, uint8_t auth_iv_len,
2936                 unsigned int data_pad_len,
2937                 unsigned int cipher_len, unsigned int cipher_offset,
2938                 unsigned int auth_len, unsigned int auth_offset,
2939                 uint8_t op_mode, uint8_t do_sgl, uint8_t verify)
2940 {
2941         struct crypto_testsuite_params *ts_params = &testsuite_params;
2942         struct crypto_unittest_params *ut_params = &unittest_params;
2943
2944         enum rte_crypto_cipher_algorithm cipher_algo =
2945                         ut_params->cipher_xform.cipher.algo;
2946         enum rte_crypto_auth_algorithm auth_algo =
2947                         ut_params->auth_xform.auth.algo;
2948
2949         /* Generate Crypto op data structure */
2950         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
2951                         RTE_CRYPTO_OP_TYPE_SYMMETRIC);
2952         TEST_ASSERT_NOT_NULL(ut_params->op,
2953                         "Failed to allocate pktmbuf offload");
2954
2955         /* Set crypto operation data parameters */
2956         rte_crypto_op_attach_sym_session(ut_params->op, ut_params->sess);
2957
2958         struct rte_crypto_sym_op *sym_op = ut_params->op->sym;
2959
2960         /* set crypto operation mbufs */
2961         sym_op->m_src = ut_params->ibuf;
2962         if (op_mode == OUT_OF_PLACE)
2963                 sym_op->m_dst = ut_params->obuf;
2964
2965         /* digest */
2966         if (!do_sgl) {
2967                 sym_op->auth.digest.data = rte_pktmbuf_mtod_offset(
2968                         (op_mode == IN_PLACE ?
2969                                 ut_params->ibuf : ut_params->obuf),
2970                         uint8_t *, data_pad_len);
2971                 sym_op->auth.digest.phys_addr = rte_pktmbuf_iova_offset(
2972                         (op_mode == IN_PLACE ?
2973                                 ut_params->ibuf : ut_params->obuf),
2974                         data_pad_len);
2975                 memset(sym_op->auth.digest.data, 0, auth_tag_len);
2976         } else {
2977                 uint16_t remaining_off = (auth_offset >> 3) + (auth_len >> 3);
2978                 struct rte_mbuf *sgl_buf = (op_mode == IN_PLACE ?
2979                                 sym_op->m_src : sym_op->m_dst);
2980                 while (remaining_off >= rte_pktmbuf_data_len(sgl_buf)) {
2981                         remaining_off -= rte_pktmbuf_data_len(sgl_buf);
2982                         sgl_buf = sgl_buf->next;
2983                 }
2984                 sym_op->auth.digest.data = rte_pktmbuf_mtod_offset(sgl_buf,
2985                                 uint8_t *, remaining_off);
2986                 sym_op->auth.digest.phys_addr = rte_pktmbuf_iova_offset(sgl_buf,
2987                                 remaining_off);
2988                 memset(sym_op->auth.digest.data, 0, remaining_off);
2989                 while (sgl_buf->next != NULL) {
2990                         memset(rte_pktmbuf_mtod(sgl_buf, uint8_t *),
2991                                 0, rte_pktmbuf_data_len(sgl_buf));
2992                         sgl_buf = sgl_buf->next;
2993                 }
2994         }
2995
2996         /* Copy digest for the verification */
2997         if (verify)
2998                 memcpy(sym_op->auth.digest.data, auth_tag, auth_tag_len);
2999
3000         /* Copy cipher and auth IVs at the end of the crypto operation */
3001         uint8_t *iv_ptr = rte_crypto_op_ctod_offset(
3002                         ut_params->op, uint8_t *, IV_OFFSET);
3003
3004         rte_memcpy(iv_ptr, cipher_iv, cipher_iv_len);
3005         iv_ptr += cipher_iv_len;
3006         rte_memcpy(iv_ptr, auth_iv, auth_iv_len);
3007
3008         /* Only copy over the offset data needed from src to dst in OOP,
3009          * if the auth and cipher offsets are not aligned
3010          */
3011         if (op_mode == OUT_OF_PLACE) {
3012                 if (cipher_offset > auth_offset)
3013                         rte_memcpy(
3014                                 rte_pktmbuf_mtod_offset(
3015                                         sym_op->m_dst,
3016                                         uint8_t *, auth_offset >> 3),
3017                                 rte_pktmbuf_mtod_offset(
3018                                         sym_op->m_src,
3019                                         uint8_t *, auth_offset >> 3),
3020                                 ((cipher_offset >> 3) - (auth_offset >> 3)));
3021         }
3022
3023         if (cipher_algo == RTE_CRYPTO_CIPHER_SNOW3G_UEA2 ||
3024                 cipher_algo == RTE_CRYPTO_CIPHER_KASUMI_F8 ||
3025                 cipher_algo == RTE_CRYPTO_CIPHER_ZUC_EEA3) {
3026                 sym_op->cipher.data.length = cipher_len;
3027                 sym_op->cipher.data.offset = cipher_offset;
3028         } else {
3029                 sym_op->cipher.data.length = cipher_len >> 3;
3030                 sym_op->cipher.data.offset = cipher_offset >> 3;
3031         }
3032
3033         if (auth_algo == RTE_CRYPTO_AUTH_SNOW3G_UIA2 ||
3034                 auth_algo == RTE_CRYPTO_AUTH_KASUMI_F9 ||
3035                 auth_algo == RTE_CRYPTO_AUTH_ZUC_EIA3) {
3036                 sym_op->auth.data.length = auth_len;
3037                 sym_op->auth.data.offset = auth_offset;
3038         } else {
3039                 sym_op->auth.data.length = auth_len >> 3;
3040                 sym_op->auth.data.offset = auth_offset >> 3;
3041         }
3042
3043         return 0;
3044 }
3045
3046 static int
3047 test_snow3g_authentication(const struct snow3g_hash_test_data *tdata)
3048 {
3049         struct crypto_testsuite_params *ts_params = &testsuite_params;
3050         struct crypto_unittest_params *ut_params = &unittest_params;
3051
3052         int retval;
3053         unsigned plaintext_pad_len;
3054         unsigned plaintext_len;
3055         uint8_t *plaintext;
3056         struct rte_cryptodev_info dev_info;
3057
3058         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
3059         uint64_t feat_flags = dev_info.feature_flags;
3060
3061         if (!(feat_flags & RTE_CRYPTODEV_FF_NON_BYTE_ALIGNED_DATA) &&
3062                         ((tdata->validAuthLenInBits.len % 8) != 0)) {
3063                 printf("Device doesn't support NON-Byte Aligned Data.\n");
3064                 return TEST_SKIPPED;
3065         }
3066
3067         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
3068                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
3069                 printf("Device doesn't support RAW data-path APIs.\n");
3070                 return TEST_SKIPPED;
3071         }
3072
3073         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
3074                 return TEST_SKIPPED;
3075
3076         /* Verify the capabilities */
3077         struct rte_cryptodev_sym_capability_idx cap_idx;
3078         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
3079         cap_idx.algo.auth = RTE_CRYPTO_AUTH_SNOW3G_UIA2;
3080         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
3081                         &cap_idx) == NULL)
3082                 return TEST_SKIPPED;
3083
3084         /* Create SNOW 3G session */
3085         retval = create_wireless_algo_hash_session(ts_params->valid_devs[0],
3086                         tdata->key.data, tdata->key.len,
3087                         tdata->auth_iv.len, tdata->digest.len,
3088                         RTE_CRYPTO_AUTH_OP_GENERATE,
3089                         RTE_CRYPTO_AUTH_SNOW3G_UIA2);
3090         if (retval < 0)
3091                 return retval;
3092
3093         /* alloc mbuf and set payload */
3094         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
3095
3096         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
3097         rte_pktmbuf_tailroom(ut_params->ibuf));
3098
3099         plaintext_len = ceil_byte_length(tdata->plaintext.len);
3100         /* Append data which is padded to a multiple of */
3101         /* the algorithms block size */
3102         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 16);
3103         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
3104                                 plaintext_pad_len);
3105         memcpy(plaintext, tdata->plaintext.data, plaintext_len);
3106
3107         /* Create SNOW 3G operation */
3108         retval = create_wireless_algo_hash_operation(NULL, tdata->digest.len,
3109                         tdata->auth_iv.data, tdata->auth_iv.len,
3110                         plaintext_pad_len, RTE_CRYPTO_AUTH_OP_GENERATE,
3111                         tdata->validAuthLenInBits.len,
3112                         0);
3113         if (retval < 0)
3114                 return retval;
3115
3116         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
3117                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
3118                                 ut_params->op, 0, 1, 1, 0);
3119         else
3120                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
3121                                 ut_params->op);
3122         ut_params->obuf = ut_params->op->sym->m_src;
3123         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
3124         ut_params->digest = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *)
3125                         + plaintext_pad_len;
3126
3127         /* Validate obuf */
3128         TEST_ASSERT_BUFFERS_ARE_EQUAL(
3129         ut_params->digest,
3130         tdata->digest.data,
3131         DIGEST_BYTE_LENGTH_SNOW3G_UIA2,
3132         "SNOW 3G Generated auth tag not as expected");
3133
3134         return 0;
3135 }
3136
3137 static int
3138 test_snow3g_authentication_verify(const struct snow3g_hash_test_data *tdata)
3139 {
3140         struct crypto_testsuite_params *ts_params = &testsuite_params;
3141         struct crypto_unittest_params *ut_params = &unittest_params;
3142
3143         int retval;
3144         unsigned plaintext_pad_len;
3145         unsigned plaintext_len;
3146         uint8_t *plaintext;
3147         struct rte_cryptodev_info dev_info;
3148
3149         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
3150         uint64_t feat_flags = dev_info.feature_flags;
3151
3152         if (!(feat_flags & RTE_CRYPTODEV_FF_NON_BYTE_ALIGNED_DATA) &&
3153                         ((tdata->validAuthLenInBits.len % 8) != 0)) {
3154                 printf("Device doesn't support NON-Byte Aligned Data.\n");
3155                 return TEST_SKIPPED;
3156         }
3157
3158         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
3159                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
3160                 printf("Device doesn't support RAW data-path APIs.\n");
3161                 return TEST_SKIPPED;
3162         }
3163
3164         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
3165                 return TEST_SKIPPED;
3166
3167         /* Verify the capabilities */
3168         struct rte_cryptodev_sym_capability_idx cap_idx;
3169         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
3170         cap_idx.algo.auth = RTE_CRYPTO_AUTH_SNOW3G_UIA2;
3171         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
3172                         &cap_idx) == NULL)
3173                 return TEST_SKIPPED;
3174
3175         /* Create SNOW 3G session */
3176         retval = create_wireless_algo_hash_session(ts_params->valid_devs[0],
3177                                 tdata->key.data, tdata->key.len,
3178                                 tdata->auth_iv.len, tdata->digest.len,
3179                                 RTE_CRYPTO_AUTH_OP_VERIFY,
3180                                 RTE_CRYPTO_AUTH_SNOW3G_UIA2);
3181         if (retval < 0)
3182                 return retval;
3183         /* alloc mbuf and set payload */
3184         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
3185
3186         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
3187         rte_pktmbuf_tailroom(ut_params->ibuf));
3188
3189         plaintext_len = ceil_byte_length(tdata->plaintext.len);
3190         /* Append data which is padded to a multiple of */
3191         /* the algorithms block size */
3192         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 16);
3193         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
3194                                 plaintext_pad_len);
3195         memcpy(plaintext, tdata->plaintext.data, plaintext_len);
3196
3197         /* Create SNOW 3G operation */
3198         retval = create_wireless_algo_hash_operation(tdata->digest.data,
3199                         tdata->digest.len,
3200                         tdata->auth_iv.data, tdata->auth_iv.len,
3201                         plaintext_pad_len,
3202                         RTE_CRYPTO_AUTH_OP_VERIFY,
3203                         tdata->validAuthLenInBits.len,
3204                         0);
3205         if (retval < 0)
3206                 return retval;
3207
3208         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
3209                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
3210                                 ut_params->op, 0, 1, 1, 0);
3211         else
3212                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
3213                                 ut_params->op);
3214         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
3215         ut_params->obuf = ut_params->op->sym->m_src;
3216         ut_params->digest = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *)
3217                                 + plaintext_pad_len;
3218
3219         /* Validate obuf */
3220         if (ut_params->op->status == RTE_CRYPTO_OP_STATUS_SUCCESS)
3221                 return 0;
3222         else
3223                 return -1;
3224
3225         return 0;
3226 }
3227
3228 static int
3229 test_kasumi_authentication(const struct kasumi_hash_test_data *tdata)
3230 {
3231         struct crypto_testsuite_params *ts_params = &testsuite_params;
3232         struct crypto_unittest_params *ut_params = &unittest_params;
3233
3234         int retval;
3235         unsigned plaintext_pad_len;
3236         unsigned plaintext_len;
3237         uint8_t *plaintext;
3238         struct rte_cryptodev_info dev_info;
3239
3240         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
3241         uint64_t feat_flags = dev_info.feature_flags;
3242
3243         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
3244                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
3245                 printf("Device doesn't support RAW data-path APIs.\n");
3246                 return TEST_SKIPPED;
3247         }
3248
3249         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
3250                 return TEST_SKIPPED;
3251
3252         /* Verify the capabilities */
3253         struct rte_cryptodev_sym_capability_idx cap_idx;
3254         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
3255         cap_idx.algo.auth = RTE_CRYPTO_AUTH_KASUMI_F9;
3256         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
3257                         &cap_idx) == NULL)
3258                 return TEST_SKIPPED;
3259
3260         /* Create KASUMI session */
3261         retval = create_wireless_algo_hash_session(ts_params->valid_devs[0],
3262                         tdata->key.data, tdata->key.len,
3263                         0, tdata->digest.len,
3264                         RTE_CRYPTO_AUTH_OP_GENERATE,
3265                         RTE_CRYPTO_AUTH_KASUMI_F9);
3266         if (retval < 0)
3267                 return retval;
3268
3269         /* alloc mbuf and set payload */
3270         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
3271
3272         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
3273         rte_pktmbuf_tailroom(ut_params->ibuf));
3274
3275         plaintext_len = ceil_byte_length(tdata->plaintext.len);
3276         /* Append data which is padded to a multiple of */
3277         /* the algorithms block size */
3278         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 8);
3279         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
3280                                 plaintext_pad_len);
3281         memcpy(plaintext, tdata->plaintext.data, plaintext_len);
3282
3283         /* Create KASUMI operation */
3284         retval = create_wireless_algo_hash_operation(NULL, tdata->digest.len,
3285                         NULL, 0,
3286                         plaintext_pad_len, RTE_CRYPTO_AUTH_OP_GENERATE,
3287                         tdata->plaintext.len,
3288                         0);
3289         if (retval < 0)
3290                 return retval;
3291
3292         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
3293                 process_cpu_crypt_auth_op(ts_params->valid_devs[0],
3294                         ut_params->op);
3295         else if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
3296                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
3297                                 ut_params->op, 0, 1, 1, 0);
3298         else
3299                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
3300                         ut_params->op);
3301
3302         ut_params->obuf = ut_params->op->sym->m_src;
3303         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
3304         ut_params->digest = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *)
3305                         + plaintext_pad_len;
3306
3307         /* Validate obuf */
3308         TEST_ASSERT_BUFFERS_ARE_EQUAL(
3309         ut_params->digest,
3310         tdata->digest.data,
3311         DIGEST_BYTE_LENGTH_KASUMI_F9,
3312         "KASUMI Generated auth tag not as expected");
3313
3314         return 0;
3315 }
3316
3317 static int
3318 test_kasumi_authentication_verify(const struct kasumi_hash_test_data *tdata)
3319 {
3320         struct crypto_testsuite_params *ts_params = &testsuite_params;
3321         struct crypto_unittest_params *ut_params = &unittest_params;
3322
3323         int retval;
3324         unsigned plaintext_pad_len;
3325         unsigned plaintext_len;
3326         uint8_t *plaintext;
3327         struct rte_cryptodev_info dev_info;
3328
3329         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
3330         uint64_t feat_flags = dev_info.feature_flags;
3331
3332         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
3333                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
3334                 printf("Device doesn't support RAW data-path APIs.\n");
3335                 return TEST_SKIPPED;
3336         }
3337
3338         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
3339                 return TEST_SKIPPED;
3340
3341         /* Verify the capabilities */
3342         struct rte_cryptodev_sym_capability_idx cap_idx;
3343         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
3344         cap_idx.algo.auth = RTE_CRYPTO_AUTH_KASUMI_F9;
3345         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
3346                         &cap_idx) == NULL)
3347                 return TEST_SKIPPED;
3348
3349         /* Create KASUMI session */
3350         retval = create_wireless_algo_hash_session(ts_params->valid_devs[0],
3351                                 tdata->key.data, tdata->key.len,
3352                                 0, tdata->digest.len,
3353                                 RTE_CRYPTO_AUTH_OP_VERIFY,
3354                                 RTE_CRYPTO_AUTH_KASUMI_F9);
3355         if (retval < 0)
3356                 return retval;
3357         /* alloc mbuf and set payload */
3358         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
3359
3360         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
3361         rte_pktmbuf_tailroom(ut_params->ibuf));
3362
3363         plaintext_len = ceil_byte_length(tdata->plaintext.len);
3364         /* Append data which is padded to a multiple */
3365         /* of the algorithms block size */
3366         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 8);
3367         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
3368                                 plaintext_pad_len);
3369         memcpy(plaintext, tdata->plaintext.data, plaintext_len);
3370
3371         /* Create KASUMI operation */
3372         retval = create_wireless_algo_hash_operation(tdata->digest.data,
3373                         tdata->digest.len,
3374                         NULL, 0,
3375                         plaintext_pad_len,
3376                         RTE_CRYPTO_AUTH_OP_VERIFY,
3377                         tdata->plaintext.len,
3378                         0);
3379         if (retval < 0)
3380                 return retval;
3381
3382         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
3383                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
3384                                 ut_params->op, 0, 1, 1, 0);
3385         else
3386                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
3387                                 ut_params->op);
3388         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
3389         ut_params->obuf = ut_params->op->sym->m_src;
3390         ut_params->digest = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *)
3391                                 + plaintext_pad_len;
3392
3393         /* Validate obuf */
3394         if (ut_params->op->status == RTE_CRYPTO_OP_STATUS_SUCCESS)
3395                 return 0;
3396         else
3397                 return -1;
3398
3399         return 0;
3400 }
3401
3402 static int
3403 test_snow3g_hash_generate_test_case_1(void)
3404 {
3405         return test_snow3g_authentication(&snow3g_hash_test_case_1);
3406 }
3407
3408 static int
3409 test_snow3g_hash_generate_test_case_2(void)
3410 {
3411         return test_snow3g_authentication(&snow3g_hash_test_case_2);
3412 }
3413
3414 static int
3415 test_snow3g_hash_generate_test_case_3(void)
3416 {
3417         return test_snow3g_authentication(&snow3g_hash_test_case_3);
3418 }
3419
3420 static int
3421 test_snow3g_hash_generate_test_case_4(void)
3422 {
3423         return test_snow3g_authentication(&snow3g_hash_test_case_4);
3424 }
3425
3426 static int
3427 test_snow3g_hash_generate_test_case_5(void)
3428 {
3429         return test_snow3g_authentication(&snow3g_hash_test_case_5);
3430 }
3431
3432 static int
3433 test_snow3g_hash_generate_test_case_6(void)
3434 {
3435         return test_snow3g_authentication(&snow3g_hash_test_case_6);
3436 }
3437
3438 static int
3439 test_snow3g_hash_verify_test_case_1(void)
3440 {
3441         return test_snow3g_authentication_verify(&snow3g_hash_test_case_1);
3442
3443 }
3444
3445 static int
3446 test_snow3g_hash_verify_test_case_2(void)
3447 {
3448         return test_snow3g_authentication_verify(&snow3g_hash_test_case_2);
3449 }
3450
3451 static int
3452 test_snow3g_hash_verify_test_case_3(void)
3453 {
3454         return test_snow3g_authentication_verify(&snow3g_hash_test_case_3);
3455 }
3456
3457 static int
3458 test_snow3g_hash_verify_test_case_4(void)
3459 {
3460         return test_snow3g_authentication_verify(&snow3g_hash_test_case_4);
3461 }
3462
3463 static int
3464 test_snow3g_hash_verify_test_case_5(void)
3465 {
3466         return test_snow3g_authentication_verify(&snow3g_hash_test_case_5);
3467 }
3468
3469 static int
3470 test_snow3g_hash_verify_test_case_6(void)
3471 {
3472         return test_snow3g_authentication_verify(&snow3g_hash_test_case_6);
3473 }
3474
3475 static int
3476 test_kasumi_hash_generate_test_case_1(void)
3477 {
3478         return test_kasumi_authentication(&kasumi_hash_test_case_1);
3479 }
3480
3481 static int
3482 test_kasumi_hash_generate_test_case_2(void)
3483 {
3484         return test_kasumi_authentication(&kasumi_hash_test_case_2);
3485 }
3486
3487 static int
3488 test_kasumi_hash_generate_test_case_3(void)
3489 {
3490         return test_kasumi_authentication(&kasumi_hash_test_case_3);
3491 }
3492
3493 static int
3494 test_kasumi_hash_generate_test_case_4(void)
3495 {
3496         return test_kasumi_authentication(&kasumi_hash_test_case_4);
3497 }
3498
3499 static int
3500 test_kasumi_hash_generate_test_case_5(void)
3501 {
3502         return test_kasumi_authentication(&kasumi_hash_test_case_5);
3503 }
3504
3505 static int
3506 test_kasumi_hash_generate_test_case_6(void)
3507 {
3508         return test_kasumi_authentication(&kasumi_hash_test_case_6);
3509 }
3510
3511 static int
3512 test_kasumi_hash_verify_test_case_1(void)
3513 {
3514         return test_kasumi_authentication_verify(&kasumi_hash_test_case_1);
3515 }
3516
3517 static int
3518 test_kasumi_hash_verify_test_case_2(void)
3519 {
3520         return test_kasumi_authentication_verify(&kasumi_hash_test_case_2);
3521 }
3522
3523 static int
3524 test_kasumi_hash_verify_test_case_3(void)
3525 {
3526         return test_kasumi_authentication_verify(&kasumi_hash_test_case_3);
3527 }
3528
3529 static int
3530 test_kasumi_hash_verify_test_case_4(void)
3531 {
3532         return test_kasumi_authentication_verify(&kasumi_hash_test_case_4);
3533 }
3534
3535 static int
3536 test_kasumi_hash_verify_test_case_5(void)
3537 {
3538         return test_kasumi_authentication_verify(&kasumi_hash_test_case_5);
3539 }
3540
3541 static int
3542 test_kasumi_encryption(const struct kasumi_test_data *tdata)
3543 {
3544         struct crypto_testsuite_params *ts_params = &testsuite_params;
3545         struct crypto_unittest_params *ut_params = &unittest_params;
3546
3547         int retval;
3548         uint8_t *plaintext, *ciphertext;
3549         unsigned plaintext_pad_len;
3550         unsigned plaintext_len;
3551         struct rte_cryptodev_info dev_info;
3552
3553         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
3554         uint64_t feat_flags = dev_info.feature_flags;
3555
3556         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
3557                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
3558                 printf("Device doesn't support RAW data-path APIs.\n");
3559                 return TEST_SKIPPED;
3560         }
3561
3562         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
3563                 return TEST_SKIPPED;
3564
3565         /* Verify the capabilities */
3566         struct rte_cryptodev_sym_capability_idx cap_idx;
3567         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
3568         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_KASUMI_F8;
3569         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
3570                         &cap_idx) == NULL)
3571                 return TEST_SKIPPED;
3572
3573         /* Create KASUMI session */
3574         retval = create_wireless_algo_cipher_session(ts_params->valid_devs[0],
3575                                         RTE_CRYPTO_CIPHER_OP_ENCRYPT,
3576                                         RTE_CRYPTO_CIPHER_KASUMI_F8,
3577                                         tdata->key.data, tdata->key.len,
3578                                         tdata->cipher_iv.len);
3579         if (retval < 0)
3580                 return retval;
3581
3582         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
3583
3584         /* Clear mbuf payload */
3585         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
3586                rte_pktmbuf_tailroom(ut_params->ibuf));
3587
3588         plaintext_len = ceil_byte_length(tdata->plaintext.len);
3589         /* Append data which is padded to a multiple */
3590         /* of the algorithms block size */
3591         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 8);
3592         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
3593                                 plaintext_pad_len);
3594         memcpy(plaintext, tdata->plaintext.data, plaintext_len);
3595
3596         debug_hexdump(stdout, "plaintext:", plaintext, plaintext_len);
3597
3598         /* Create KASUMI operation */
3599         retval = create_wireless_algo_cipher_operation(tdata->cipher_iv.data,
3600                                 tdata->cipher_iv.len,
3601                                 RTE_ALIGN_CEIL(tdata->validCipherLenInBits.len, 8),
3602                                 tdata->validCipherOffsetInBits.len);
3603         if (retval < 0)
3604                 return retval;
3605
3606         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
3607                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
3608                                 ut_params->op, 1, 0, 1, tdata->cipher_iv.len);
3609         else
3610                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
3611                                 ut_params->op);
3612         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
3613
3614         ut_params->obuf = ut_params->op->sym->m_dst;
3615         if (ut_params->obuf)
3616                 ciphertext = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *);
3617         else
3618                 ciphertext = plaintext + (tdata->validCipherOffsetInBits.len >> 3);
3619
3620         debug_hexdump(stdout, "ciphertext:", ciphertext, plaintext_len);
3621
3622         const uint8_t *reference_ciphertext = tdata->ciphertext.data +
3623                                 (tdata->validCipherOffsetInBits.len >> 3);
3624         /* Validate obuf */
3625         TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
3626                 ciphertext,
3627                 reference_ciphertext,
3628                 tdata->validCipherLenInBits.len,
3629                 "KASUMI Ciphertext data not as expected");
3630         return 0;
3631 }
3632
3633 static int
3634 test_kasumi_encryption_sgl(const struct kasumi_test_data *tdata)
3635 {
3636         struct crypto_testsuite_params *ts_params = &testsuite_params;
3637         struct crypto_unittest_params *ut_params = &unittest_params;
3638
3639         int retval;
3640
3641         unsigned int plaintext_pad_len;
3642         unsigned int plaintext_len;
3643
3644         uint8_t buffer[10000];
3645         const uint8_t *ciphertext;
3646
3647         struct rte_cryptodev_info dev_info;
3648
3649         /* Verify the capabilities */
3650         struct rte_cryptodev_sym_capability_idx cap_idx;
3651         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
3652         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_KASUMI_F8;
3653         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
3654                         &cap_idx) == NULL)
3655                 return TEST_SKIPPED;
3656
3657         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
3658
3659         uint64_t feat_flags = dev_info.feature_flags;
3660
3661         if (!(feat_flags & RTE_CRYPTODEV_FF_IN_PLACE_SGL)) {
3662                 printf("Device doesn't support in-place scatter-gather. "
3663                                 "Test Skipped.\n");
3664                 return TEST_SKIPPED;
3665         }
3666
3667         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
3668                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
3669                 printf("Device doesn't support RAW data-path APIs.\n");
3670                 return TEST_SKIPPED;
3671         }
3672
3673         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
3674                 return TEST_SKIPPED;
3675
3676         /* Create KASUMI session */
3677         retval = create_wireless_algo_cipher_session(ts_params->valid_devs[0],
3678                                         RTE_CRYPTO_CIPHER_OP_ENCRYPT,
3679                                         RTE_CRYPTO_CIPHER_KASUMI_F8,
3680                                         tdata->key.data, tdata->key.len,
3681                                         tdata->cipher_iv.len);
3682         if (retval < 0)
3683                 return retval;
3684
3685         plaintext_len = ceil_byte_length(tdata->plaintext.len);
3686
3687
3688         /* Append data which is padded to a multiple */
3689         /* of the algorithms block size */
3690         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 8);
3691
3692         ut_params->ibuf = create_segmented_mbuf(ts_params->mbuf_pool,
3693                         plaintext_pad_len, 10, 0);
3694
3695         pktmbuf_write(ut_params->ibuf, 0, plaintext_len, tdata->plaintext.data);
3696
3697         /* Create KASUMI operation */
3698         retval = create_wireless_algo_cipher_operation(tdata->cipher_iv.data,
3699                                 tdata->cipher_iv.len,
3700                                 RTE_ALIGN_CEIL(tdata->validCipherLenInBits.len, 8),
3701                                 tdata->validCipherOffsetInBits.len);
3702         if (retval < 0)
3703                 return retval;
3704
3705         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
3706                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
3707                                 ut_params->op, 1, 0, 1, tdata->cipher_iv.len);
3708         else
3709                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
3710                                                 ut_params->op);
3711         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
3712
3713         ut_params->obuf = ut_params->op->sym->m_dst;
3714
3715         if (ut_params->obuf)
3716                 ciphertext = rte_pktmbuf_read(ut_params->obuf, 0,
3717                                 plaintext_len, buffer);
3718         else
3719                 ciphertext = rte_pktmbuf_read(ut_params->ibuf,
3720                                 tdata->validCipherOffsetInBits.len >> 3,
3721                                 plaintext_len, buffer);
3722
3723         /* Validate obuf */
3724         debug_hexdump(stdout, "ciphertext:", ciphertext, plaintext_len);
3725
3726         const uint8_t *reference_ciphertext = tdata->ciphertext.data +
3727                                 (tdata->validCipherOffsetInBits.len >> 3);
3728         /* Validate obuf */
3729         TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
3730                 ciphertext,
3731                 reference_ciphertext,
3732                 tdata->validCipherLenInBits.len,
3733                 "KASUMI Ciphertext data not as expected");
3734         return 0;
3735 }
3736
3737 static int
3738 test_kasumi_encryption_oop(const struct kasumi_test_data *tdata)
3739 {
3740         struct crypto_testsuite_params *ts_params = &testsuite_params;
3741         struct crypto_unittest_params *ut_params = &unittest_params;
3742
3743         int retval;
3744         uint8_t *plaintext, *ciphertext;
3745         unsigned plaintext_pad_len;
3746         unsigned plaintext_len;
3747
3748         /* Verify the capabilities */
3749         struct rte_cryptodev_sym_capability_idx cap_idx;
3750         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
3751         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_KASUMI_F8;
3752         /* Data-path service does not support OOP */
3753         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
3754                         &cap_idx) == NULL)
3755                 return TEST_SKIPPED;
3756
3757         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
3758                 return TEST_SKIPPED;
3759
3760         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
3761                 return TEST_SKIPPED;
3762
3763         /* Create KASUMI session */
3764         retval = create_wireless_algo_cipher_session(ts_params->valid_devs[0],
3765                                         RTE_CRYPTO_CIPHER_OP_ENCRYPT,
3766                                         RTE_CRYPTO_CIPHER_KASUMI_F8,
3767                                         tdata->key.data, tdata->key.len,
3768                                         tdata->cipher_iv.len);
3769         if (retval < 0)
3770                 return retval;
3771
3772         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
3773         ut_params->obuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
3774
3775         /* Clear mbuf payload */
3776         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
3777                rte_pktmbuf_tailroom(ut_params->ibuf));
3778
3779         plaintext_len = ceil_byte_length(tdata->plaintext.len);
3780         /* Append data which is padded to a multiple */
3781         /* of the algorithms block size */
3782         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 8);
3783         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
3784                                 plaintext_pad_len);
3785         rte_pktmbuf_append(ut_params->obuf, plaintext_pad_len);
3786         memcpy(plaintext, tdata->plaintext.data, plaintext_len);
3787
3788         debug_hexdump(stdout, "plaintext:", plaintext, plaintext_len);
3789
3790         /* Create KASUMI operation */
3791         retval = create_wireless_algo_cipher_operation_oop(tdata->cipher_iv.data,
3792                                 tdata->cipher_iv.len,
3793                                 RTE_ALIGN_CEIL(tdata->validCipherLenInBits.len, 8),
3794                                 tdata->validCipherOffsetInBits.len);
3795         if (retval < 0)
3796                 return retval;
3797
3798         ut_params->op = process_crypto_request(ts_params->valid_devs[0],
3799                                                 ut_params->op);
3800         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
3801
3802         ut_params->obuf = ut_params->op->sym->m_dst;
3803         if (ut_params->obuf)
3804                 ciphertext = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *);
3805         else
3806                 ciphertext = plaintext + (tdata->validCipherOffsetInBits.len >> 3);
3807
3808         debug_hexdump(stdout, "ciphertext:", ciphertext, plaintext_len);
3809
3810         const uint8_t *reference_ciphertext = tdata->ciphertext.data +
3811                                 (tdata->validCipherOffsetInBits.len >> 3);
3812         /* Validate obuf */
3813         TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
3814                 ciphertext,
3815                 reference_ciphertext,
3816                 tdata->validCipherLenInBits.len,
3817                 "KASUMI Ciphertext data not as expected");
3818         return 0;
3819 }
3820
3821 static int
3822 test_kasumi_encryption_oop_sgl(const struct kasumi_test_data *tdata)
3823 {
3824         struct crypto_testsuite_params *ts_params = &testsuite_params;
3825         struct crypto_unittest_params *ut_params = &unittest_params;
3826
3827         int retval;
3828         unsigned int plaintext_pad_len;
3829         unsigned int plaintext_len;
3830
3831         const uint8_t *ciphertext;
3832         uint8_t buffer[2048];
3833
3834         struct rte_cryptodev_info dev_info;
3835
3836         /* Verify the capabilities */
3837         struct rte_cryptodev_sym_capability_idx cap_idx;
3838         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
3839         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_KASUMI_F8;
3840         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
3841                         &cap_idx) == NULL)
3842                 return TEST_SKIPPED;
3843
3844         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
3845                 return TEST_SKIPPED;
3846
3847         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
3848                 return TEST_SKIPPED;
3849
3850         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
3851
3852         uint64_t feat_flags = dev_info.feature_flags;
3853         if (!(feat_flags & RTE_CRYPTODEV_FF_OOP_SGL_IN_SGL_OUT)) {
3854                 printf("Device doesn't support out-of-place scatter-gather "
3855                                 "in both input and output mbufs. "
3856                                 "Test Skipped.\n");
3857                 return TEST_SKIPPED;
3858         }
3859
3860         /* Create KASUMI session */
3861         retval = create_wireless_algo_cipher_session(ts_params->valid_devs[0],
3862                                         RTE_CRYPTO_CIPHER_OP_ENCRYPT,
3863                                         RTE_CRYPTO_CIPHER_KASUMI_F8,
3864                                         tdata->key.data, tdata->key.len,
3865                                         tdata->cipher_iv.len);
3866         if (retval < 0)
3867                 return retval;
3868
3869         plaintext_len = ceil_byte_length(tdata->plaintext.len);
3870         /* Append data which is padded to a multiple */
3871         /* of the algorithms block size */
3872         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 8);
3873
3874         ut_params->ibuf = create_segmented_mbuf(ts_params->mbuf_pool,
3875                         plaintext_pad_len, 10, 0);
3876         ut_params->obuf = create_segmented_mbuf(ts_params->mbuf_pool,
3877                         plaintext_pad_len, 3, 0);
3878
3879         /* Append data which is padded to a multiple */
3880         /* of the algorithms block size */
3881         pktmbuf_write(ut_params->ibuf, 0, plaintext_len, tdata->plaintext.data);
3882
3883         /* Create KASUMI operation */
3884         retval = create_wireless_algo_cipher_operation_oop(tdata->cipher_iv.data,
3885                                 tdata->cipher_iv.len,
3886                                 RTE_ALIGN_CEIL(tdata->validCipherLenInBits.len, 8),
3887                                 tdata->validCipherOffsetInBits.len);
3888         if (retval < 0)
3889                 return retval;
3890
3891         ut_params->op = process_crypto_request(ts_params->valid_devs[0],
3892                                                 ut_params->op);
3893         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
3894
3895         ut_params->obuf = ut_params->op->sym->m_dst;
3896         if (ut_params->obuf)
3897                 ciphertext = rte_pktmbuf_read(ut_params->obuf, 0,
3898                                 plaintext_pad_len, buffer);
3899         else
3900                 ciphertext = rte_pktmbuf_read(ut_params->ibuf,
3901                                 tdata->validCipherOffsetInBits.len >> 3,
3902                                 plaintext_pad_len, buffer);
3903
3904         const uint8_t *reference_ciphertext = tdata->ciphertext.data +
3905                                 (tdata->validCipherOffsetInBits.len >> 3);
3906         /* Validate obuf */
3907         TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
3908                 ciphertext,
3909                 reference_ciphertext,
3910                 tdata->validCipherLenInBits.len,
3911                 "KASUMI Ciphertext data not as expected");
3912         return 0;
3913 }
3914
3915
3916 static int
3917 test_kasumi_decryption_oop(const struct kasumi_test_data *tdata)
3918 {
3919         struct crypto_testsuite_params *ts_params = &testsuite_params;
3920         struct crypto_unittest_params *ut_params = &unittest_params;
3921
3922         int retval;
3923         uint8_t *ciphertext, *plaintext;
3924         unsigned ciphertext_pad_len;
3925         unsigned ciphertext_len;
3926
3927         /* Verify the capabilities */
3928         struct rte_cryptodev_sym_capability_idx cap_idx;
3929         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
3930         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_KASUMI_F8;
3931         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
3932                         &cap_idx) == NULL)
3933                 return TEST_SKIPPED;
3934
3935         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
3936                 return TEST_SKIPPED;
3937
3938         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
3939                 return TEST_SKIPPED;
3940
3941         /* Create KASUMI session */
3942         retval = create_wireless_algo_cipher_session(ts_params->valid_devs[0],
3943                                         RTE_CRYPTO_CIPHER_OP_DECRYPT,
3944                                         RTE_CRYPTO_CIPHER_KASUMI_F8,
3945                                         tdata->key.data, tdata->key.len,
3946                                         tdata->cipher_iv.len);
3947         if (retval < 0)
3948                 return retval;
3949
3950         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
3951         ut_params->obuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
3952
3953         /* Clear mbuf payload */
3954         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
3955                rte_pktmbuf_tailroom(ut_params->ibuf));
3956
3957         ciphertext_len = ceil_byte_length(tdata->ciphertext.len);
3958         /* Append data which is padded to a multiple */
3959         /* of the algorithms block size */
3960         ciphertext_pad_len = RTE_ALIGN_CEIL(ciphertext_len, 8);
3961         ciphertext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
3962                                 ciphertext_pad_len);
3963         rte_pktmbuf_append(ut_params->obuf, ciphertext_pad_len);
3964         memcpy(ciphertext, tdata->ciphertext.data, ciphertext_len);
3965
3966         debug_hexdump(stdout, "ciphertext:", ciphertext, ciphertext_len);
3967
3968         /* Create KASUMI operation */
3969         retval = create_wireless_algo_cipher_operation_oop(tdata->cipher_iv.data,
3970                                 tdata->cipher_iv.len,
3971                                 RTE_ALIGN_CEIL(tdata->validCipherLenInBits.len, 8),
3972                                 tdata->validCipherOffsetInBits.len);
3973         if (retval < 0)
3974                 return retval;
3975
3976         ut_params->op = process_crypto_request(ts_params->valid_devs[0],
3977                                                 ut_params->op);
3978         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
3979
3980         ut_params->obuf = ut_params->op->sym->m_dst;
3981         if (ut_params->obuf)
3982                 plaintext = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *);
3983         else
3984                 plaintext = ciphertext + (tdata->validCipherOffsetInBits.len >> 3);
3985
3986         debug_hexdump(stdout, "plaintext:", plaintext, ciphertext_len);
3987
3988         const uint8_t *reference_plaintext = tdata->plaintext.data +
3989                                 (tdata->validCipherOffsetInBits.len >> 3);
3990         /* Validate obuf */
3991         TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
3992                 plaintext,
3993                 reference_plaintext,
3994                 tdata->validCipherLenInBits.len,
3995                 "KASUMI Plaintext data not as expected");
3996         return 0;
3997 }
3998
3999 static int
4000 test_kasumi_decryption(const struct kasumi_test_data *tdata)
4001 {
4002         struct crypto_testsuite_params *ts_params = &testsuite_params;
4003         struct crypto_unittest_params *ut_params = &unittest_params;
4004
4005         int retval;
4006         uint8_t *ciphertext, *plaintext;
4007         unsigned ciphertext_pad_len;
4008         unsigned ciphertext_len;
4009         struct rte_cryptodev_info dev_info;
4010
4011         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
4012         uint64_t feat_flags = dev_info.feature_flags;
4013
4014         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
4015                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
4016                 printf("Device doesn't support RAW data-path APIs.\n");
4017                 return TEST_SKIPPED;
4018         }
4019
4020         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
4021                 return TEST_SKIPPED;
4022
4023         /* Verify the capabilities */
4024         struct rte_cryptodev_sym_capability_idx cap_idx;
4025         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
4026         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_KASUMI_F8;
4027         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
4028                         &cap_idx) == NULL)
4029                 return TEST_SKIPPED;
4030
4031         /* Create KASUMI session */
4032         retval = create_wireless_algo_cipher_session(ts_params->valid_devs[0],
4033                                         RTE_CRYPTO_CIPHER_OP_DECRYPT,
4034                                         RTE_CRYPTO_CIPHER_KASUMI_F8,
4035                                         tdata->key.data, tdata->key.len,
4036                                         tdata->cipher_iv.len);
4037         if (retval < 0)
4038                 return retval;
4039
4040         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
4041
4042         /* Clear mbuf payload */
4043         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
4044                rte_pktmbuf_tailroom(ut_params->ibuf));
4045
4046         ciphertext_len = ceil_byte_length(tdata->ciphertext.len);
4047         /* Append data which is padded to a multiple */
4048         /* of the algorithms block size */
4049         ciphertext_pad_len = RTE_ALIGN_CEIL(ciphertext_len, 8);
4050         ciphertext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
4051                                 ciphertext_pad_len);
4052         memcpy(ciphertext, tdata->ciphertext.data, ciphertext_len);
4053
4054         debug_hexdump(stdout, "ciphertext:", ciphertext, ciphertext_len);
4055
4056         /* Create KASUMI operation */
4057         retval = create_wireless_algo_cipher_operation(tdata->cipher_iv.data,
4058                                         tdata->cipher_iv.len,
4059                                         tdata->ciphertext.len,
4060                                         tdata->validCipherOffsetInBits.len);
4061         if (retval < 0)
4062                 return retval;
4063
4064         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
4065                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
4066                                 ut_params->op, 1, 0, 1, 0);
4067         else
4068                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
4069                                                 ut_params->op);
4070         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
4071
4072         ut_params->obuf = ut_params->op->sym->m_dst;
4073         if (ut_params->obuf)
4074                 plaintext = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *);
4075         else
4076                 plaintext = ciphertext + (tdata->validCipherOffsetInBits.len >> 3);
4077
4078         debug_hexdump(stdout, "plaintext:", plaintext, ciphertext_len);
4079
4080         const uint8_t *reference_plaintext = tdata->plaintext.data +
4081                                 (tdata->validCipherOffsetInBits.len >> 3);
4082         /* Validate obuf */
4083         TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
4084                 plaintext,
4085                 reference_plaintext,
4086                 tdata->validCipherLenInBits.len,
4087                 "KASUMI Plaintext data not as expected");
4088         return 0;
4089 }
4090
4091 static int
4092 test_snow3g_encryption(const struct snow3g_test_data *tdata)
4093 {
4094         struct crypto_testsuite_params *ts_params = &testsuite_params;
4095         struct crypto_unittest_params *ut_params = &unittest_params;
4096
4097         int retval;
4098         uint8_t *plaintext, *ciphertext;
4099         unsigned plaintext_pad_len;
4100         unsigned plaintext_len;
4101         struct rte_cryptodev_info dev_info;
4102
4103         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
4104         uint64_t feat_flags = dev_info.feature_flags;
4105
4106         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
4107                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
4108                 printf("Device doesn't support RAW data-path APIs.\n");
4109                 return TEST_SKIPPED;
4110         }
4111
4112         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
4113                 return TEST_SKIPPED;
4114
4115         /* Verify the capabilities */
4116         struct rte_cryptodev_sym_capability_idx cap_idx;
4117         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
4118         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_SNOW3G_UEA2;
4119         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
4120                         &cap_idx) == NULL)
4121                 return TEST_SKIPPED;
4122
4123         /* Create SNOW 3G session */
4124         retval = create_wireless_algo_cipher_session(ts_params->valid_devs[0],
4125                                         RTE_CRYPTO_CIPHER_OP_ENCRYPT,
4126                                         RTE_CRYPTO_CIPHER_SNOW3G_UEA2,
4127                                         tdata->key.data, tdata->key.len,
4128                                         tdata->cipher_iv.len);
4129         if (retval < 0)
4130                 return retval;
4131
4132         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
4133
4134         /* Clear mbuf payload */
4135         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
4136                rte_pktmbuf_tailroom(ut_params->ibuf));
4137
4138         plaintext_len = ceil_byte_length(tdata->plaintext.len);
4139         /* Append data which is padded to a multiple of */
4140         /* the algorithms block size */
4141         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 16);
4142         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
4143                                 plaintext_pad_len);
4144         memcpy(plaintext, tdata->plaintext.data, plaintext_len);
4145
4146         debug_hexdump(stdout, "plaintext:", plaintext, plaintext_len);
4147
4148         /* Create SNOW 3G operation */
4149         retval = create_wireless_algo_cipher_operation(tdata->cipher_iv.data,
4150                                         tdata->cipher_iv.len,
4151                                         tdata->validCipherLenInBits.len,
4152                                         0);
4153         if (retval < 0)
4154                 return retval;
4155
4156         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
4157                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
4158                                 ut_params->op, 1, 0, 1, tdata->cipher_iv.len);
4159         else
4160                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
4161                                                 ut_params->op);
4162         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
4163
4164         ut_params->obuf = ut_params->op->sym->m_dst;
4165         if (ut_params->obuf)
4166                 ciphertext = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *);
4167         else
4168                 ciphertext = plaintext;
4169
4170         debug_hexdump(stdout, "ciphertext:", ciphertext, plaintext_len);
4171
4172         /* Validate obuf */
4173         TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
4174                 ciphertext,
4175                 tdata->ciphertext.data,
4176                 tdata->validDataLenInBits.len,
4177                 "SNOW 3G Ciphertext data not as expected");
4178         return 0;
4179 }
4180
4181
4182 static int
4183 test_snow3g_encryption_oop(const struct snow3g_test_data *tdata)
4184 {
4185         struct crypto_testsuite_params *ts_params = &testsuite_params;
4186         struct crypto_unittest_params *ut_params = &unittest_params;
4187         uint8_t *plaintext, *ciphertext;
4188
4189         int retval;
4190         unsigned plaintext_pad_len;
4191         unsigned plaintext_len;
4192
4193         /* Verify the capabilities */
4194         struct rte_cryptodev_sym_capability_idx cap_idx;
4195         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
4196         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_SNOW3G_UEA2;
4197         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
4198                         &cap_idx) == NULL)
4199                 return TEST_SKIPPED;
4200
4201         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
4202                 return TEST_SKIPPED;
4203
4204         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
4205                 return TEST_SKIPPED;
4206
4207         /* Create SNOW 3G session */
4208         retval = create_wireless_algo_cipher_session(ts_params->valid_devs[0],
4209                                         RTE_CRYPTO_CIPHER_OP_ENCRYPT,
4210                                         RTE_CRYPTO_CIPHER_SNOW3G_UEA2,
4211                                         tdata->key.data, tdata->key.len,
4212                                         tdata->cipher_iv.len);
4213         if (retval < 0)
4214                 return retval;
4215
4216         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
4217         ut_params->obuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
4218
4219         TEST_ASSERT_NOT_NULL(ut_params->ibuf,
4220                         "Failed to allocate input buffer in mempool");
4221         TEST_ASSERT_NOT_NULL(ut_params->obuf,
4222                         "Failed to allocate output buffer in mempool");
4223
4224         /* Clear mbuf payload */
4225         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
4226                rte_pktmbuf_tailroom(ut_params->ibuf));
4227
4228         plaintext_len = ceil_byte_length(tdata->plaintext.len);
4229         /* Append data which is padded to a multiple of */
4230         /* the algorithms block size */
4231         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 16);
4232         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
4233                                 plaintext_pad_len);
4234         rte_pktmbuf_append(ut_params->obuf, plaintext_pad_len);
4235         memcpy(plaintext, tdata->plaintext.data, plaintext_len);
4236
4237         debug_hexdump(stdout, "plaintext:", plaintext, plaintext_len);
4238
4239         /* Create SNOW 3G operation */
4240         retval = create_wireless_algo_cipher_operation_oop(tdata->cipher_iv.data,
4241                                         tdata->cipher_iv.len,
4242                                         tdata->validCipherLenInBits.len,
4243                                         0);
4244         if (retval < 0)
4245                 return retval;
4246
4247         ut_params->op = process_crypto_request(ts_params->valid_devs[0],
4248                                                 ut_params->op);
4249         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
4250
4251         ut_params->obuf = ut_params->op->sym->m_dst;
4252         if (ut_params->obuf)
4253                 ciphertext = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *);
4254         else
4255                 ciphertext = plaintext;
4256
4257         debug_hexdump(stdout, "ciphertext:", ciphertext, plaintext_len);
4258
4259         /* Validate obuf */
4260         TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
4261                 ciphertext,
4262                 tdata->ciphertext.data,
4263                 tdata->validDataLenInBits.len,
4264                 "SNOW 3G Ciphertext data not as expected");
4265         return 0;
4266 }
4267
4268 static int
4269 test_snow3g_encryption_oop_sgl(const struct snow3g_test_data *tdata)
4270 {
4271         struct crypto_testsuite_params *ts_params = &testsuite_params;
4272         struct crypto_unittest_params *ut_params = &unittest_params;
4273
4274         int retval;
4275         unsigned int plaintext_pad_len;
4276         unsigned int plaintext_len;
4277         uint8_t buffer[10000];
4278         const uint8_t *ciphertext;
4279
4280         struct rte_cryptodev_info dev_info;
4281
4282         /* Verify the capabilities */
4283         struct rte_cryptodev_sym_capability_idx cap_idx;
4284         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
4285         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_SNOW3G_UEA2;
4286         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
4287                         &cap_idx) == NULL)
4288                 return TEST_SKIPPED;
4289
4290         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
4291                 return TEST_SKIPPED;
4292
4293         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
4294                 return TEST_SKIPPED;
4295
4296         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
4297
4298         uint64_t feat_flags = dev_info.feature_flags;
4299
4300         if (!(feat_flags & RTE_CRYPTODEV_FF_OOP_SGL_IN_SGL_OUT)) {
4301                 printf("Device doesn't support out-of-place scatter-gather "
4302                                 "in both input and output mbufs. "
4303                                 "Test Skipped.\n");
4304                 return TEST_SKIPPED;
4305         }
4306
4307         /* Create SNOW 3G session */
4308         retval = create_wireless_algo_cipher_session(ts_params->valid_devs[0],
4309                                         RTE_CRYPTO_CIPHER_OP_ENCRYPT,
4310                                         RTE_CRYPTO_CIPHER_SNOW3G_UEA2,
4311                                         tdata->key.data, tdata->key.len,
4312                                         tdata->cipher_iv.len);
4313         if (retval < 0)
4314                 return retval;
4315
4316         plaintext_len = ceil_byte_length(tdata->plaintext.len);
4317         /* Append data which is padded to a multiple of */
4318         /* the algorithms block size */
4319         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 16);
4320
4321         ut_params->ibuf = create_segmented_mbuf(ts_params->mbuf_pool,
4322                         plaintext_pad_len, 10, 0);
4323         ut_params->obuf = create_segmented_mbuf(ts_params->mbuf_pool,
4324                         plaintext_pad_len, 3, 0);
4325
4326         TEST_ASSERT_NOT_NULL(ut_params->ibuf,
4327                         "Failed to allocate input buffer in mempool");
4328         TEST_ASSERT_NOT_NULL(ut_params->obuf,
4329                         "Failed to allocate output buffer in mempool");
4330
4331         pktmbuf_write(ut_params->ibuf, 0, plaintext_len, tdata->plaintext.data);
4332
4333         /* Create SNOW 3G operation */
4334         retval = create_wireless_algo_cipher_operation_oop(tdata->cipher_iv.data,
4335                                         tdata->cipher_iv.len,
4336                                         tdata->validCipherLenInBits.len,
4337                                         0);
4338         if (retval < 0)
4339                 return retval;
4340
4341         ut_params->op = process_crypto_request(ts_params->valid_devs[0],
4342                                                 ut_params->op);
4343         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
4344
4345         ut_params->obuf = ut_params->op->sym->m_dst;
4346         if (ut_params->obuf)
4347                 ciphertext = rte_pktmbuf_read(ut_params->obuf, 0,
4348                                 plaintext_len, buffer);
4349         else
4350                 ciphertext = rte_pktmbuf_read(ut_params->ibuf, 0,
4351                                 plaintext_len, buffer);
4352
4353         debug_hexdump(stdout, "ciphertext:", ciphertext, plaintext_len);
4354
4355         /* Validate obuf */
4356         TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
4357                 ciphertext,
4358                 tdata->ciphertext.data,
4359                 tdata->validDataLenInBits.len,
4360                 "SNOW 3G Ciphertext data not as expected");
4361
4362         return 0;
4363 }
4364
4365 /* Shift right a buffer by "offset" bits, "offset" < 8 */
4366 static void
4367 buffer_shift_right(uint8_t *buffer, uint32_t length, uint8_t offset)
4368 {
4369         uint8_t curr_byte, prev_byte;
4370         uint32_t length_in_bytes = ceil_byte_length(length + offset);
4371         uint8_t lower_byte_mask = (1 << offset) - 1;
4372         unsigned i;
4373
4374         prev_byte = buffer[0];
4375         buffer[0] >>= offset;
4376
4377         for (i = 1; i < length_in_bytes; i++) {
4378                 curr_byte = buffer[i];
4379                 buffer[i] = ((prev_byte & lower_byte_mask) << (8 - offset)) |
4380                                 (curr_byte >> offset);
4381                 prev_byte = curr_byte;
4382         }
4383 }
4384
4385 static int
4386 test_snow3g_encryption_offset_oop(const struct snow3g_test_data *tdata)
4387 {
4388         struct crypto_testsuite_params *ts_params = &testsuite_params;
4389         struct crypto_unittest_params *ut_params = &unittest_params;
4390         uint8_t *plaintext, *ciphertext;
4391         int retval;
4392         uint32_t plaintext_len;
4393         uint32_t plaintext_pad_len;
4394         uint8_t extra_offset = 4;
4395         uint8_t *expected_ciphertext_shifted;
4396         struct rte_cryptodev_info dev_info;
4397
4398         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
4399         uint64_t feat_flags = dev_info.feature_flags;
4400
4401         if (!(feat_flags & RTE_CRYPTODEV_FF_NON_BYTE_ALIGNED_DATA) &&
4402                         ((tdata->validDataLenInBits.len % 8) != 0)) {
4403                 printf("Device doesn't support NON-Byte Aligned Data.\n");
4404                 return TEST_SKIPPED;
4405         }
4406
4407         /* Verify the capabilities */
4408         struct rte_cryptodev_sym_capability_idx cap_idx;
4409         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
4410         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_SNOW3G_UEA2;
4411         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
4412                         &cap_idx) == NULL)
4413                 return TEST_SKIPPED;
4414
4415         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
4416                 return TEST_SKIPPED;
4417
4418         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
4419                 return TEST_SKIPPED;
4420
4421         /* Create SNOW 3G session */
4422         retval = create_wireless_algo_cipher_session(ts_params->valid_devs[0],
4423                                         RTE_CRYPTO_CIPHER_OP_ENCRYPT,
4424                                         RTE_CRYPTO_CIPHER_SNOW3G_UEA2,
4425                                         tdata->key.data, tdata->key.len,
4426                                         tdata->cipher_iv.len);
4427         if (retval < 0)
4428                 return retval;
4429
4430         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
4431         ut_params->obuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
4432
4433         TEST_ASSERT_NOT_NULL(ut_params->ibuf,
4434                         "Failed to allocate input buffer in mempool");
4435         TEST_ASSERT_NOT_NULL(ut_params->obuf,
4436                         "Failed to allocate output buffer in mempool");
4437
4438         /* Clear mbuf payload */
4439         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
4440                rte_pktmbuf_tailroom(ut_params->ibuf));
4441
4442         plaintext_len = ceil_byte_length(tdata->plaintext.len + extra_offset);
4443         /*
4444          * Append data which is padded to a
4445          * multiple of the algorithms block size
4446          */
4447         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 16);
4448
4449         plaintext = (uint8_t *) rte_pktmbuf_append(ut_params->ibuf,
4450                                                 plaintext_pad_len);
4451
4452         rte_pktmbuf_append(ut_params->obuf, plaintext_pad_len);
4453
4454         memcpy(plaintext, tdata->plaintext.data, (tdata->plaintext.len >> 3));
4455         buffer_shift_right(plaintext, tdata->plaintext.len, extra_offset);
4456
4457 #ifdef RTE_APP_TEST_DEBUG
4458         rte_hexdump(stdout, "plaintext:", plaintext, tdata->plaintext.len);
4459 #endif
4460         /* Create SNOW 3G operation */
4461         retval = create_wireless_algo_cipher_operation_oop(tdata->cipher_iv.data,
4462                                         tdata->cipher_iv.len,
4463                                         tdata->validCipherLenInBits.len,
4464                                         extra_offset);
4465         if (retval < 0)
4466                 return retval;
4467
4468         ut_params->op = process_crypto_request(ts_params->valid_devs[0],
4469                                                 ut_params->op);
4470         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
4471
4472         ut_params->obuf = ut_params->op->sym->m_dst;
4473         if (ut_params->obuf)
4474                 ciphertext = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *);
4475         else
4476                 ciphertext = plaintext;
4477
4478 #ifdef RTE_APP_TEST_DEBUG
4479         rte_hexdump(stdout, "ciphertext:", ciphertext, plaintext_len);
4480 #endif
4481
4482         expected_ciphertext_shifted = rte_malloc(NULL, plaintext_len, 8);
4483
4484         TEST_ASSERT_NOT_NULL(expected_ciphertext_shifted,
4485                         "failed to reserve memory for ciphertext shifted\n");
4486
4487         memcpy(expected_ciphertext_shifted, tdata->ciphertext.data,
4488                         ceil_byte_length(tdata->ciphertext.len));
4489         buffer_shift_right(expected_ciphertext_shifted, tdata->ciphertext.len,
4490                         extra_offset);
4491         /* Validate obuf */
4492         TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT_OFFSET(
4493                 ciphertext,
4494                 expected_ciphertext_shifted,
4495                 tdata->validDataLenInBits.len,
4496                 extra_offset,
4497                 "SNOW 3G Ciphertext data not as expected");
4498         return 0;
4499 }
4500
4501 static int test_snow3g_decryption(const struct snow3g_test_data *tdata)
4502 {
4503         struct crypto_testsuite_params *ts_params = &testsuite_params;
4504         struct crypto_unittest_params *ut_params = &unittest_params;
4505
4506         int retval;
4507
4508         uint8_t *plaintext, *ciphertext;
4509         unsigned ciphertext_pad_len;
4510         unsigned ciphertext_len;
4511         struct rte_cryptodev_info dev_info;
4512
4513         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
4514         uint64_t feat_flags = dev_info.feature_flags;
4515
4516         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
4517                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
4518                 printf("Device doesn't support RAW data-path APIs.\n");
4519                 return TEST_SKIPPED;
4520         }
4521
4522         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
4523                 return TEST_SKIPPED;
4524
4525         /* Verify the capabilities */
4526         struct rte_cryptodev_sym_capability_idx cap_idx;
4527         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
4528         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_SNOW3G_UEA2;
4529         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
4530                         &cap_idx) == NULL)
4531                 return TEST_SKIPPED;
4532
4533         /* Create SNOW 3G session */
4534         retval = create_wireless_algo_cipher_session(ts_params->valid_devs[0],
4535                                         RTE_CRYPTO_CIPHER_OP_DECRYPT,
4536                                         RTE_CRYPTO_CIPHER_SNOW3G_UEA2,
4537                                         tdata->key.data, tdata->key.len,
4538                                         tdata->cipher_iv.len);
4539         if (retval < 0)
4540                 return retval;
4541
4542         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
4543
4544         /* Clear mbuf payload */
4545         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
4546                rte_pktmbuf_tailroom(ut_params->ibuf));
4547
4548         ciphertext_len = ceil_byte_length(tdata->ciphertext.len);
4549         /* Append data which is padded to a multiple of */
4550         /* the algorithms block size */
4551         ciphertext_pad_len = RTE_ALIGN_CEIL(ciphertext_len, 16);
4552         ciphertext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
4553                                 ciphertext_pad_len);
4554         memcpy(ciphertext, tdata->ciphertext.data, ciphertext_len);
4555
4556         debug_hexdump(stdout, "ciphertext:", ciphertext, ciphertext_len);
4557
4558         /* Create SNOW 3G operation */
4559         retval = create_wireless_algo_cipher_operation(tdata->cipher_iv.data,
4560                                         tdata->cipher_iv.len,
4561                                         tdata->validCipherLenInBits.len,
4562                                         tdata->cipher.offset_bits);
4563         if (retval < 0)
4564                 return retval;
4565
4566         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
4567                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
4568                                 ut_params->op, 1, 0, 1, tdata->cipher_iv.len);
4569         else
4570                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
4571                                                 ut_params->op);
4572         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
4573         ut_params->obuf = ut_params->op->sym->m_dst;
4574         if (ut_params->obuf)
4575                 plaintext = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *);
4576         else
4577                 plaintext = ciphertext;
4578
4579         debug_hexdump(stdout, "plaintext:", plaintext, ciphertext_len);
4580
4581         /* Validate obuf */
4582         TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(plaintext,
4583                                 tdata->plaintext.data,
4584                                 tdata->validDataLenInBits.len,
4585                                 "SNOW 3G Plaintext data not as expected");
4586         return 0;
4587 }
4588
4589 static int test_snow3g_decryption_oop(const struct snow3g_test_data *tdata)
4590 {
4591         struct crypto_testsuite_params *ts_params = &testsuite_params;
4592         struct crypto_unittest_params *ut_params = &unittest_params;
4593
4594         int retval;
4595
4596         uint8_t *plaintext, *ciphertext;
4597         unsigned ciphertext_pad_len;
4598         unsigned ciphertext_len;
4599
4600         /* Verify the capabilities */
4601         struct rte_cryptodev_sym_capability_idx cap_idx;
4602         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
4603         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_SNOW3G_UEA2;
4604         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
4605                         &cap_idx) == NULL)
4606                 return TEST_SKIPPED;
4607
4608         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
4609                 return TEST_SKIPPED;
4610
4611         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
4612                 return TEST_SKIPPED;
4613
4614         /* Create SNOW 3G session */
4615         retval = create_wireless_algo_cipher_session(ts_params->valid_devs[0],
4616                                         RTE_CRYPTO_CIPHER_OP_DECRYPT,
4617                                         RTE_CRYPTO_CIPHER_SNOW3G_UEA2,
4618                                         tdata->key.data, tdata->key.len,
4619                                         tdata->cipher_iv.len);
4620         if (retval < 0)
4621                 return retval;
4622
4623         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
4624         ut_params->obuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
4625
4626         TEST_ASSERT_NOT_NULL(ut_params->ibuf,
4627                         "Failed to allocate input buffer");
4628         TEST_ASSERT_NOT_NULL(ut_params->obuf,
4629                         "Failed to allocate output buffer");
4630
4631         /* Clear mbuf payload */
4632         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
4633                rte_pktmbuf_tailroom(ut_params->ibuf));
4634
4635         memset(rte_pktmbuf_mtod(ut_params->obuf, uint8_t *), 0,
4636                        rte_pktmbuf_tailroom(ut_params->obuf));
4637
4638         ciphertext_len = ceil_byte_length(tdata->ciphertext.len);
4639         /* Append data which is padded to a multiple of */
4640         /* the algorithms block size */
4641         ciphertext_pad_len = RTE_ALIGN_CEIL(ciphertext_len, 16);
4642         ciphertext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
4643                                 ciphertext_pad_len);
4644         rte_pktmbuf_append(ut_params->obuf, ciphertext_pad_len);
4645         memcpy(ciphertext, tdata->ciphertext.data, ciphertext_len);
4646
4647         debug_hexdump(stdout, "ciphertext:", ciphertext, ciphertext_len);
4648
4649         /* Create SNOW 3G operation */
4650         retval = create_wireless_algo_cipher_operation_oop(tdata->cipher_iv.data,
4651                                         tdata->cipher_iv.len,
4652                                         tdata->validCipherLenInBits.len,
4653                                         0);
4654         if (retval < 0)
4655                 return retval;
4656
4657         ut_params->op = process_crypto_request(ts_params->valid_devs[0],
4658                                                 ut_params->op);
4659         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
4660         ut_params->obuf = ut_params->op->sym->m_dst;
4661         if (ut_params->obuf)
4662                 plaintext = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *);
4663         else
4664                 plaintext = ciphertext;
4665
4666         debug_hexdump(stdout, "plaintext:", plaintext, ciphertext_len);
4667
4668         /* Validate obuf */
4669         TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(plaintext,
4670                                 tdata->plaintext.data,
4671                                 tdata->validDataLenInBits.len,
4672                                 "SNOW 3G Plaintext data not as expected");
4673         return 0;
4674 }
4675
4676 static int
4677 test_zuc_cipher_auth(const struct wireless_test_data *tdata)
4678 {
4679         struct crypto_testsuite_params *ts_params = &testsuite_params;
4680         struct crypto_unittest_params *ut_params = &unittest_params;
4681
4682         int retval;
4683
4684         uint8_t *plaintext, *ciphertext;
4685         unsigned int plaintext_pad_len;
4686         unsigned int plaintext_len;
4687
4688         struct rte_cryptodev_info dev_info;
4689         struct rte_cryptodev_sym_capability_idx cap_idx;
4690
4691         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
4692         uint64_t feat_flags = dev_info.feature_flags;
4693
4694         if (!(feat_flags & RTE_CRYPTODEV_FF_NON_BYTE_ALIGNED_DATA) &&
4695                         ((tdata->validAuthLenInBits.len % 8 != 0) ||
4696                         (tdata->validDataLenInBits.len % 8 != 0))) {
4697                 printf("Device doesn't support NON-Byte Aligned Data.\n");
4698                 return TEST_SKIPPED;
4699         }
4700
4701         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
4702                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
4703                 printf("Device doesn't support RAW data-path APIs.\n");
4704                 return TEST_SKIPPED;
4705         }
4706
4707         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
4708                 return TEST_SKIPPED;
4709
4710         /* Check if device supports ZUC EEA3 */
4711         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
4712         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_ZUC_EEA3;
4713
4714         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
4715                         &cap_idx) == NULL)
4716                 return TEST_SKIPPED;
4717
4718         /* Check if device supports ZUC EIA3 */
4719         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
4720         cap_idx.algo.auth = RTE_CRYPTO_AUTH_ZUC_EIA3;
4721
4722         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
4723                         &cap_idx) == NULL)
4724                 return TEST_SKIPPED;
4725
4726         /* Create ZUC session */
4727         retval = create_zuc_cipher_auth_encrypt_generate_session(
4728                         ts_params->valid_devs[0],
4729                         tdata);
4730         if (retval != 0)
4731                 return retval;
4732         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
4733
4734         /* clear mbuf payload */
4735         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
4736                         rte_pktmbuf_tailroom(ut_params->ibuf));
4737
4738         plaintext_len = ceil_byte_length(tdata->plaintext.len);
4739         /* Append data which is padded to a multiple of */
4740         /* the algorithms block size */
4741         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 16);
4742         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
4743                                 plaintext_pad_len);
4744         memcpy(plaintext, tdata->plaintext.data, plaintext_len);
4745
4746         debug_hexdump(stdout, "plaintext:", plaintext, plaintext_len);
4747
4748         /* Create ZUC operation */
4749         retval = create_zuc_cipher_hash_generate_operation(tdata);
4750         if (retval < 0)
4751                 return retval;
4752
4753         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
4754                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
4755                                 ut_params->op, 1, 1, 1, tdata->cipher_iv.len);
4756         else
4757                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
4758                         ut_params->op);
4759         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
4760         ut_params->obuf = ut_params->op->sym->m_src;
4761         if (ut_params->obuf)
4762                 ciphertext = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *);
4763         else
4764                 ciphertext = plaintext;
4765
4766         debug_hexdump(stdout, "ciphertext:", ciphertext, plaintext_len);
4767         /* Validate obuf */
4768         TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
4769                         ciphertext,
4770                         tdata->ciphertext.data,
4771                         tdata->validDataLenInBits.len,
4772                         "ZUC Ciphertext data not as expected");
4773
4774         ut_params->digest = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *)
4775             + plaintext_pad_len;
4776
4777         /* Validate obuf */
4778         TEST_ASSERT_BUFFERS_ARE_EQUAL(
4779                         ut_params->digest,
4780                         tdata->digest.data,
4781                         4,
4782                         "ZUC Generated auth tag not as expected");
4783         return 0;
4784 }
4785
4786 static int
4787 test_snow3g_cipher_auth(const struct snow3g_test_data *tdata)
4788 {
4789         struct crypto_testsuite_params *ts_params = &testsuite_params;
4790         struct crypto_unittest_params *ut_params = &unittest_params;
4791
4792         int retval;
4793
4794         uint8_t *plaintext, *ciphertext;
4795         unsigned plaintext_pad_len;
4796         unsigned plaintext_len;
4797         struct rte_cryptodev_info dev_info;
4798
4799         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
4800         uint64_t feat_flags = dev_info.feature_flags;
4801
4802         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
4803                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
4804                 printf("Device doesn't support RAW data-path APIs.\n");
4805                 return TEST_SKIPPED;
4806         }
4807
4808         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
4809                 return TEST_SKIPPED;
4810
4811         /* Verify the capabilities */
4812         struct rte_cryptodev_sym_capability_idx cap_idx;
4813         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
4814         cap_idx.algo.auth = RTE_CRYPTO_AUTH_SNOW3G_UIA2;
4815         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
4816                         &cap_idx) == NULL)
4817                 return TEST_SKIPPED;
4818         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
4819         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_SNOW3G_UEA2;
4820         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
4821                         &cap_idx) == NULL)
4822                 return TEST_SKIPPED;
4823
4824         /* Create SNOW 3G session */
4825         retval = create_wireless_algo_cipher_auth_session(ts_params->valid_devs[0],
4826                         RTE_CRYPTO_CIPHER_OP_ENCRYPT,
4827                         RTE_CRYPTO_AUTH_OP_GENERATE,
4828                         RTE_CRYPTO_AUTH_SNOW3G_UIA2,
4829                         RTE_CRYPTO_CIPHER_SNOW3G_UEA2,
4830                         tdata->key.data, tdata->key.len,
4831                         tdata->auth_iv.len, tdata->digest.len,
4832                         tdata->cipher_iv.len);
4833         if (retval != 0)
4834                 return retval;
4835         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
4836
4837         /* clear mbuf payload */
4838         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
4839                         rte_pktmbuf_tailroom(ut_params->ibuf));
4840
4841         plaintext_len = ceil_byte_length(tdata->plaintext.len);
4842         /* Append data which is padded to a multiple of */
4843         /* the algorithms block size */
4844         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 16);
4845         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
4846                                 plaintext_pad_len);
4847         memcpy(plaintext, tdata->plaintext.data, plaintext_len);
4848
4849         debug_hexdump(stdout, "plaintext:", plaintext, plaintext_len);
4850
4851         /* Create SNOW 3G operation */
4852         retval = create_wireless_algo_cipher_hash_operation(tdata->digest.data,
4853                         tdata->digest.len, tdata->auth_iv.data,
4854                         tdata->auth_iv.len,
4855                         plaintext_pad_len, RTE_CRYPTO_AUTH_OP_GENERATE,
4856                         tdata->cipher_iv.data, tdata->cipher_iv.len,
4857                         tdata->validCipherLenInBits.len,
4858                         0,
4859                         tdata->validAuthLenInBits.len,
4860                         0
4861                         );
4862         if (retval < 0)
4863                 return retval;
4864
4865         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
4866                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
4867                                 ut_params->op, 1, 1, 1, tdata->cipher_iv.len);
4868         else
4869                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
4870                         ut_params->op);
4871         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
4872         ut_params->obuf = ut_params->op->sym->m_src;
4873         if (ut_params->obuf)
4874                 ciphertext = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *);
4875         else
4876                 ciphertext = plaintext;
4877
4878         debug_hexdump(stdout, "ciphertext:", ciphertext, plaintext_len);
4879         /* Validate obuf */
4880         TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
4881                         ciphertext,
4882                         tdata->ciphertext.data,
4883                         tdata->validDataLenInBits.len,
4884                         "SNOW 3G Ciphertext data not as expected");
4885
4886         ut_params->digest = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *)
4887             + plaintext_pad_len;
4888
4889         /* Validate obuf */
4890         TEST_ASSERT_BUFFERS_ARE_EQUAL(
4891                         ut_params->digest,
4892                         tdata->digest.data,
4893                         DIGEST_BYTE_LENGTH_SNOW3G_UIA2,
4894                         "SNOW 3G Generated auth tag not as expected");
4895         return 0;
4896 }
4897
4898 static int
4899 test_snow3g_auth_cipher(const struct snow3g_test_data *tdata,
4900         uint8_t op_mode, uint8_t verify)
4901 {
4902         struct crypto_testsuite_params *ts_params = &testsuite_params;
4903         struct crypto_unittest_params *ut_params = &unittest_params;
4904
4905         int retval;
4906
4907         uint8_t *plaintext = NULL, *ciphertext = NULL;
4908         unsigned int plaintext_pad_len;
4909         unsigned int plaintext_len;
4910         unsigned int ciphertext_pad_len;
4911         unsigned int ciphertext_len;
4912
4913         struct rte_cryptodev_info dev_info;
4914
4915         /* Verify the capabilities */
4916         struct rte_cryptodev_sym_capability_idx cap_idx;
4917         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
4918         cap_idx.algo.auth = RTE_CRYPTO_AUTH_SNOW3G_UIA2;
4919         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
4920                         &cap_idx) == NULL)
4921                 return TEST_SKIPPED;
4922         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
4923         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_SNOW3G_UEA2;
4924         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
4925                         &cap_idx) == NULL)
4926                 return TEST_SKIPPED;
4927
4928         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
4929                 return TEST_SKIPPED;
4930
4931         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
4932
4933         uint64_t feat_flags = dev_info.feature_flags;
4934
4935         if (op_mode == OUT_OF_PLACE) {
4936                 if (!(feat_flags & RTE_CRYPTODEV_FF_DIGEST_ENCRYPTED)) {
4937                         printf("Device doesn't support digest encrypted.\n");
4938                         return TEST_SKIPPED;
4939                 }
4940                 if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
4941                         return TEST_SKIPPED;
4942         }
4943
4944         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
4945                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
4946                 printf("Device doesn't support RAW data-path APIs.\n");
4947                 return TEST_SKIPPED;
4948         }
4949
4950         /* Create SNOW 3G session */
4951         retval = create_wireless_algo_auth_cipher_session(
4952                         ts_params->valid_devs[0],
4953                         (verify ? RTE_CRYPTO_CIPHER_OP_DECRYPT
4954                                         : RTE_CRYPTO_CIPHER_OP_ENCRYPT),
4955                         (verify ? RTE_CRYPTO_AUTH_OP_VERIFY
4956                                         : RTE_CRYPTO_AUTH_OP_GENERATE),
4957                         RTE_CRYPTO_AUTH_SNOW3G_UIA2,
4958                         RTE_CRYPTO_CIPHER_SNOW3G_UEA2,
4959                         tdata->key.data, tdata->key.len,
4960                         tdata->auth_iv.len, tdata->digest.len,
4961                         tdata->cipher_iv.len);
4962         if (retval != 0)
4963                 return retval;
4964
4965         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
4966         if (op_mode == OUT_OF_PLACE)
4967                 ut_params->obuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
4968
4969         /* clear mbuf payload */
4970         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
4971                 rte_pktmbuf_tailroom(ut_params->ibuf));
4972         if (op_mode == OUT_OF_PLACE)
4973                 memset(rte_pktmbuf_mtod(ut_params->obuf, uint8_t *), 0,
4974                         rte_pktmbuf_tailroom(ut_params->obuf));
4975
4976         ciphertext_len = ceil_byte_length(tdata->ciphertext.len);
4977         plaintext_len = ceil_byte_length(tdata->plaintext.len);
4978         ciphertext_pad_len = RTE_ALIGN_CEIL(ciphertext_len, 16);
4979         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 16);
4980
4981         if (verify) {
4982                 ciphertext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
4983                                         ciphertext_pad_len);
4984                 memcpy(ciphertext, tdata->ciphertext.data, ciphertext_len);
4985                 if (op_mode == OUT_OF_PLACE)
4986                         rte_pktmbuf_append(ut_params->obuf, ciphertext_pad_len);
4987                 debug_hexdump(stdout, "ciphertext:", ciphertext,
4988                         ciphertext_len);
4989         } else {
4990                 plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
4991                                         plaintext_pad_len);
4992                 memcpy(plaintext, tdata->plaintext.data, plaintext_len);
4993                 if (op_mode == OUT_OF_PLACE)
4994                         rte_pktmbuf_append(ut_params->obuf, plaintext_pad_len);
4995                 debug_hexdump(stdout, "plaintext:", plaintext, plaintext_len);
4996         }
4997
4998         /* Create SNOW 3G operation */
4999         retval = create_wireless_algo_auth_cipher_operation(
5000                 tdata->digest.data, tdata->digest.len,
5001                 tdata->cipher_iv.data, tdata->cipher_iv.len,
5002                 tdata->auth_iv.data, tdata->auth_iv.len,
5003                 (tdata->digest.offset_bytes == 0 ?
5004                 (verify ? ciphertext_pad_len : plaintext_pad_len)
5005                         : tdata->digest.offset_bytes),
5006                 tdata->validCipherLenInBits.len,
5007                 tdata->cipher.offset_bits,
5008                 tdata->validAuthLenInBits.len,
5009                 tdata->auth.offset_bits,
5010                 op_mode, 0, verify);
5011
5012         if (retval < 0)
5013                 return retval;
5014
5015         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
5016                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
5017                                 ut_params->op, 1, 1, 1, tdata->cipher_iv.len);
5018         else
5019                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
5020                         ut_params->op);
5021
5022         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
5023
5024         ut_params->obuf = (op_mode == IN_PLACE ?
5025                 ut_params->op->sym->m_src : ut_params->op->sym->m_dst);
5026
5027         if (verify) {
5028                 if (ut_params->obuf)
5029                         plaintext = rte_pktmbuf_mtod(ut_params->obuf,
5030                                                         uint8_t *);
5031                 else
5032                         plaintext = ciphertext +
5033                                 (tdata->cipher.offset_bits >> 3);
5034
5035                 debug_hexdump(stdout, "plaintext:", plaintext,
5036                         (tdata->plaintext.len >> 3) - tdata->digest.len);
5037                 debug_hexdump(stdout, "plaintext expected:",
5038                         tdata->plaintext.data,
5039                         (tdata->plaintext.len >> 3) - tdata->digest.len);
5040         } else {
5041                 if (ut_params->obuf)
5042                         ciphertext = rte_pktmbuf_mtod(ut_params->obuf,
5043                                                         uint8_t *);
5044                 else
5045                         ciphertext = plaintext;
5046
5047                 debug_hexdump(stdout, "ciphertext:", ciphertext,
5048                         ciphertext_len);
5049                 debug_hexdump(stdout, "ciphertext expected:",
5050                         tdata->ciphertext.data, tdata->ciphertext.len >> 3);
5051
5052                 ut_params->digest = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *)
5053                         + (tdata->digest.offset_bytes == 0 ?
5054                 plaintext_pad_len : tdata->digest.offset_bytes);
5055
5056                 debug_hexdump(stdout, "digest:", ut_params->digest,
5057                         tdata->digest.len);
5058                 debug_hexdump(stdout, "digest expected:", tdata->digest.data,
5059                                 tdata->digest.len);
5060         }
5061
5062         /* Validate obuf */
5063         if (verify) {
5064                 TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT_OFFSET(
5065                         plaintext,
5066                         tdata->plaintext.data,
5067                         (tdata->plaintext.len - tdata->cipher.offset_bits -
5068                          (tdata->digest.len << 3)),
5069                         tdata->cipher.offset_bits,
5070                         "SNOW 3G Plaintext data not as expected");
5071         } else {
5072                 TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT_OFFSET(
5073                         ciphertext,
5074                         tdata->ciphertext.data,
5075                         (tdata->validDataLenInBits.len -
5076                          tdata->cipher.offset_bits),
5077                         tdata->cipher.offset_bits,
5078                         "SNOW 3G Ciphertext data not as expected");
5079
5080                 TEST_ASSERT_BUFFERS_ARE_EQUAL(
5081                         ut_params->digest,
5082                         tdata->digest.data,
5083                         DIGEST_BYTE_LENGTH_SNOW3G_UIA2,
5084                         "SNOW 3G Generated auth tag not as expected");
5085         }
5086         return 0;
5087 }
5088
5089 static int
5090 test_snow3g_auth_cipher_sgl(const struct snow3g_test_data *tdata,
5091         uint8_t op_mode, uint8_t verify)
5092 {
5093         struct crypto_testsuite_params *ts_params = &testsuite_params;
5094         struct crypto_unittest_params *ut_params = &unittest_params;
5095
5096         int retval;
5097
5098         const uint8_t *plaintext = NULL;
5099         const uint8_t *ciphertext = NULL;
5100         const uint8_t *digest = NULL;
5101         unsigned int plaintext_pad_len;
5102         unsigned int plaintext_len;
5103         unsigned int ciphertext_pad_len;
5104         unsigned int ciphertext_len;
5105         uint8_t buffer[10000];
5106         uint8_t digest_buffer[10000];
5107
5108         struct rte_cryptodev_info dev_info;
5109
5110         /* Verify the capabilities */
5111         struct rte_cryptodev_sym_capability_idx cap_idx;
5112         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
5113         cap_idx.algo.auth = RTE_CRYPTO_AUTH_SNOW3G_UIA2;
5114         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
5115                         &cap_idx) == NULL)
5116                 return TEST_SKIPPED;
5117         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
5118         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_SNOW3G_UEA2;
5119         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
5120                         &cap_idx) == NULL)
5121                 return TEST_SKIPPED;
5122
5123         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
5124                 return TEST_SKIPPED;
5125
5126         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
5127
5128         uint64_t feat_flags = dev_info.feature_flags;
5129
5130         if (op_mode == IN_PLACE) {
5131                 if (!(feat_flags & RTE_CRYPTODEV_FF_IN_PLACE_SGL)) {
5132                         printf("Device doesn't support in-place scatter-gather "
5133                                         "in both input and output mbufs.\n");
5134                         return TEST_SKIPPED;
5135                 }
5136                 if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
5137                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
5138                         printf("Device doesn't support RAW data-path APIs.\n");
5139                         return TEST_SKIPPED;
5140                 }
5141         } else {
5142                 if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
5143                         return TEST_SKIPPED;
5144                 if (!(feat_flags & RTE_CRYPTODEV_FF_OOP_SGL_IN_SGL_OUT)) {
5145                         printf("Device doesn't support out-of-place scatter-gather "
5146                                         "in both input and output mbufs.\n");
5147                         return TEST_SKIPPED;
5148                 }
5149                 if (!(feat_flags & RTE_CRYPTODEV_FF_DIGEST_ENCRYPTED)) {
5150                         printf("Device doesn't support digest encrypted.\n");
5151                         return TEST_SKIPPED;
5152                 }
5153         }
5154
5155         /* Create SNOW 3G session */
5156         retval = create_wireless_algo_auth_cipher_session(
5157                         ts_params->valid_devs[0],
5158                         (verify ? RTE_CRYPTO_CIPHER_OP_DECRYPT
5159                                         : RTE_CRYPTO_CIPHER_OP_ENCRYPT),
5160                         (verify ? RTE_CRYPTO_AUTH_OP_VERIFY
5161                                         : RTE_CRYPTO_AUTH_OP_GENERATE),
5162                         RTE_CRYPTO_AUTH_SNOW3G_UIA2,
5163                         RTE_CRYPTO_CIPHER_SNOW3G_UEA2,
5164                         tdata->key.data, tdata->key.len,
5165                         tdata->auth_iv.len, tdata->digest.len,
5166                         tdata->cipher_iv.len);
5167
5168         if (retval != 0)
5169                 return retval;
5170
5171         ciphertext_len = ceil_byte_length(tdata->ciphertext.len);
5172         plaintext_len = ceil_byte_length(tdata->plaintext.len);
5173         ciphertext_pad_len = RTE_ALIGN_CEIL(ciphertext_len, 16);
5174         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 16);
5175
5176         ut_params->ibuf = create_segmented_mbuf(ts_params->mbuf_pool,
5177                         plaintext_pad_len, 15, 0);
5178         TEST_ASSERT_NOT_NULL(ut_params->ibuf,
5179                         "Failed to allocate input buffer in mempool");
5180
5181         if (op_mode == OUT_OF_PLACE) {
5182                 ut_params->obuf = create_segmented_mbuf(ts_params->mbuf_pool,
5183                                 plaintext_pad_len, 15, 0);
5184                 TEST_ASSERT_NOT_NULL(ut_params->obuf,
5185                                 "Failed to allocate output buffer in mempool");
5186         }
5187
5188         if (verify) {
5189                 pktmbuf_write(ut_params->ibuf, 0, ciphertext_len,
5190                         tdata->ciphertext.data);
5191                 ciphertext = rte_pktmbuf_read(ut_params->ibuf, 0,
5192                                         ciphertext_len, buffer);
5193                 debug_hexdump(stdout, "ciphertext:", ciphertext,
5194                         ciphertext_len);
5195         } else {
5196                 pktmbuf_write(ut_params->ibuf, 0, plaintext_len,
5197                         tdata->plaintext.data);
5198                 plaintext = rte_pktmbuf_read(ut_params->ibuf, 0,
5199                                         plaintext_len, buffer);
5200                 debug_hexdump(stdout, "plaintext:", plaintext,
5201                         plaintext_len);
5202         }
5203         memset(buffer, 0, sizeof(buffer));
5204
5205         /* Create SNOW 3G operation */
5206         retval = create_wireless_algo_auth_cipher_operation(
5207                 tdata->digest.data, tdata->digest.len,
5208                 tdata->cipher_iv.data, tdata->cipher_iv.len,
5209                 tdata->auth_iv.data, tdata->auth_iv.len,
5210                 (tdata->digest.offset_bytes == 0 ?
5211                 (verify ? ciphertext_pad_len : plaintext_pad_len)
5212                         : tdata->digest.offset_bytes),
5213                 tdata->validCipherLenInBits.len,
5214                 tdata->cipher.offset_bits,
5215                 tdata->validAuthLenInBits.len,
5216                 tdata->auth.offset_bits,
5217                 op_mode, 1, verify);
5218
5219         if (retval < 0)
5220                 return retval;
5221
5222         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
5223                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
5224                                 ut_params->op, 1, 1, 1, tdata->cipher_iv.len);
5225         else
5226                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
5227                         ut_params->op);
5228
5229         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
5230
5231         ut_params->obuf = (op_mode == IN_PLACE ?
5232                 ut_params->op->sym->m_src : ut_params->op->sym->m_dst);
5233
5234         if (verify) {
5235                 if (ut_params->obuf)
5236                         plaintext = rte_pktmbuf_read(ut_params->obuf, 0,
5237                                         plaintext_len, buffer);
5238                 else
5239                         plaintext = rte_pktmbuf_read(ut_params->ibuf, 0,
5240                                         plaintext_len, buffer);
5241
5242                 debug_hexdump(stdout, "plaintext:", plaintext,
5243                         (tdata->plaintext.len >> 3) - tdata->digest.len);
5244                 debug_hexdump(stdout, "plaintext expected:",
5245                         tdata->plaintext.data,
5246                         (tdata->plaintext.len >> 3) - tdata->digest.len);
5247         } else {
5248                 if (ut_params->obuf)
5249                         ciphertext = rte_pktmbuf_read(ut_params->obuf, 0,
5250                                         ciphertext_len, buffer);
5251                 else
5252                         ciphertext = rte_pktmbuf_read(ut_params->ibuf, 0,
5253                                         ciphertext_len, buffer);
5254
5255                 debug_hexdump(stdout, "ciphertext:", ciphertext,
5256                         ciphertext_len);
5257                 debug_hexdump(stdout, "ciphertext expected:",
5258                         tdata->ciphertext.data, tdata->ciphertext.len >> 3);
5259
5260                 if (ut_params->obuf)
5261                         digest = rte_pktmbuf_read(ut_params->obuf,
5262                                 (tdata->digest.offset_bytes == 0 ?
5263                                 plaintext_pad_len : tdata->digest.offset_bytes),
5264                                 tdata->digest.len, digest_buffer);
5265                 else
5266                         digest = rte_pktmbuf_read(ut_params->ibuf,
5267                                 (tdata->digest.offset_bytes == 0 ?
5268                                 plaintext_pad_len : tdata->digest.offset_bytes),
5269                                 tdata->digest.len, digest_buffer);
5270
5271                 debug_hexdump(stdout, "digest:", digest,
5272                         tdata->digest.len);
5273                 debug_hexdump(stdout, "digest expected:",
5274                         tdata->digest.data, tdata->digest.len);
5275         }
5276
5277         /* Validate obuf */
5278         if (verify) {
5279                 TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT_OFFSET(
5280                         plaintext,
5281                         tdata->plaintext.data,
5282                         (tdata->plaintext.len - tdata->cipher.offset_bits -
5283                          (tdata->digest.len << 3)),
5284                         tdata->cipher.offset_bits,
5285                         "SNOW 3G Plaintext data not as expected");
5286         } else {
5287                 TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT_OFFSET(
5288                         ciphertext,
5289                         tdata->ciphertext.data,
5290                         (tdata->validDataLenInBits.len -
5291                          tdata->cipher.offset_bits),
5292                         tdata->cipher.offset_bits,
5293                         "SNOW 3G Ciphertext data not as expected");
5294
5295                 TEST_ASSERT_BUFFERS_ARE_EQUAL(
5296                         digest,
5297                         tdata->digest.data,
5298                         DIGEST_BYTE_LENGTH_SNOW3G_UIA2,
5299                         "SNOW 3G Generated auth tag not as expected");
5300         }
5301         return 0;
5302 }
5303
5304 static int
5305 test_kasumi_auth_cipher(const struct kasumi_test_data *tdata,
5306         uint8_t op_mode, uint8_t verify)
5307 {
5308         struct crypto_testsuite_params *ts_params = &testsuite_params;
5309         struct crypto_unittest_params *ut_params = &unittest_params;
5310
5311         int retval;
5312
5313         uint8_t *plaintext = NULL, *ciphertext = NULL;
5314         unsigned int plaintext_pad_len;
5315         unsigned int plaintext_len;
5316         unsigned int ciphertext_pad_len;
5317         unsigned int ciphertext_len;
5318
5319         struct rte_cryptodev_info dev_info;
5320
5321         /* Verify the capabilities */
5322         struct rte_cryptodev_sym_capability_idx cap_idx;
5323         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
5324         cap_idx.algo.auth = RTE_CRYPTO_AUTH_KASUMI_F9;
5325         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
5326                         &cap_idx) == NULL)
5327                 return TEST_SKIPPED;
5328         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
5329         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_KASUMI_F8;
5330         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
5331                         &cap_idx) == NULL)
5332                 return TEST_SKIPPED;
5333
5334         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
5335
5336         uint64_t feat_flags = dev_info.feature_flags;
5337
5338         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
5339                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
5340                 printf("Device doesn't support RAW data-path APIs.\n");
5341                 return TEST_SKIPPED;
5342         }
5343
5344         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
5345                 return TEST_SKIPPED;
5346
5347         if (op_mode == OUT_OF_PLACE) {
5348                 if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
5349                         return TEST_SKIPPED;
5350                 if (!(feat_flags & RTE_CRYPTODEV_FF_DIGEST_ENCRYPTED)) {
5351                         printf("Device doesn't support digest encrypted.\n");
5352                         return TEST_SKIPPED;
5353                 }
5354         }
5355
5356         /* Create KASUMI session */
5357         retval = create_wireless_algo_auth_cipher_session(
5358                         ts_params->valid_devs[0],
5359                         (verify ? RTE_CRYPTO_CIPHER_OP_DECRYPT
5360                                         : RTE_CRYPTO_CIPHER_OP_ENCRYPT),
5361                         (verify ? RTE_CRYPTO_AUTH_OP_VERIFY
5362                                         : RTE_CRYPTO_AUTH_OP_GENERATE),
5363                         RTE_CRYPTO_AUTH_KASUMI_F9,
5364                         RTE_CRYPTO_CIPHER_KASUMI_F8,
5365                         tdata->key.data, tdata->key.len,
5366                         0, tdata->digest.len,
5367                         tdata->cipher_iv.len);
5368
5369         if (retval != 0)
5370                 return retval;
5371
5372         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
5373         if (op_mode == OUT_OF_PLACE)
5374                 ut_params->obuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
5375
5376         /* clear mbuf payload */
5377         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
5378                 rte_pktmbuf_tailroom(ut_params->ibuf));
5379         if (op_mode == OUT_OF_PLACE)
5380                 memset(rte_pktmbuf_mtod(ut_params->obuf, uint8_t *), 0,
5381                         rte_pktmbuf_tailroom(ut_params->obuf));
5382
5383         ciphertext_len = ceil_byte_length(tdata->ciphertext.len);
5384         plaintext_len = ceil_byte_length(tdata->plaintext.len);
5385         ciphertext_pad_len = RTE_ALIGN_CEIL(ciphertext_len, 16);
5386         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 16);
5387
5388         if (verify) {
5389                 ciphertext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
5390                                         ciphertext_pad_len);
5391                 memcpy(ciphertext, tdata->ciphertext.data, ciphertext_len);
5392                 if (op_mode == OUT_OF_PLACE)
5393                         rte_pktmbuf_append(ut_params->obuf, ciphertext_pad_len);
5394                 debug_hexdump(stdout, "ciphertext:", ciphertext,
5395                         ciphertext_len);
5396         } else {
5397                 plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
5398                                         plaintext_pad_len);
5399                 memcpy(plaintext, tdata->plaintext.data, plaintext_len);
5400                 if (op_mode == OUT_OF_PLACE)
5401                         rte_pktmbuf_append(ut_params->obuf, plaintext_pad_len);
5402                 debug_hexdump(stdout, "plaintext:", plaintext,
5403                         plaintext_len);
5404         }
5405
5406         /* Create KASUMI operation */
5407         retval = create_wireless_algo_auth_cipher_operation(
5408                 tdata->digest.data, tdata->digest.len,
5409                 tdata->cipher_iv.data, tdata->cipher_iv.len,
5410                 NULL, 0,
5411                 (tdata->digest.offset_bytes == 0 ?
5412                 (verify ? ciphertext_pad_len : plaintext_pad_len)
5413                         : tdata->digest.offset_bytes),
5414                 tdata->validCipherLenInBits.len,
5415                 tdata->validCipherOffsetInBits.len,
5416                 tdata->validAuthLenInBits.len,
5417                 0,
5418                 op_mode, 0, verify);
5419
5420         if (retval < 0)
5421                 return retval;
5422
5423         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
5424                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
5425                                 ut_params->op, 1, 1, 1, tdata->cipher_iv.len);
5426         else
5427                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
5428                         ut_params->op);
5429
5430         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
5431
5432         ut_params->obuf = (op_mode == IN_PLACE ?
5433                 ut_params->op->sym->m_src : ut_params->op->sym->m_dst);
5434
5435
5436         if (verify) {
5437                 if (ut_params->obuf)
5438                         plaintext = rte_pktmbuf_mtod(ut_params->obuf,
5439                                                         uint8_t *);
5440                 else
5441                         plaintext = ciphertext;
5442
5443                 debug_hexdump(stdout, "plaintext:", plaintext,
5444                         (tdata->plaintext.len >> 3) - tdata->digest.len);
5445                 debug_hexdump(stdout, "plaintext expected:",
5446                         tdata->plaintext.data,
5447                         (tdata->plaintext.len >> 3) - tdata->digest.len);
5448         } else {
5449                 if (ut_params->obuf)
5450                         ciphertext = rte_pktmbuf_mtod(ut_params->obuf,
5451                                                         uint8_t *);
5452                 else
5453                         ciphertext = plaintext;
5454
5455                 debug_hexdump(stdout, "ciphertext:", ciphertext,
5456                         ciphertext_len);
5457                 debug_hexdump(stdout, "ciphertext expected:",
5458                         tdata->ciphertext.data, tdata->ciphertext.len >> 3);
5459
5460                 ut_params->digest = rte_pktmbuf_mtod(
5461                         ut_params->obuf, uint8_t *) +
5462                         (tdata->digest.offset_bytes == 0 ?
5463                         plaintext_pad_len : tdata->digest.offset_bytes);
5464
5465                 debug_hexdump(stdout, "digest:", ut_params->digest,
5466                         tdata->digest.len);
5467                 debug_hexdump(stdout, "digest expected:",
5468                         tdata->digest.data, tdata->digest.len);
5469         }
5470
5471         /* Validate obuf */
5472         if (verify) {
5473                 TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
5474                         plaintext,
5475                         tdata->plaintext.data,
5476                         tdata->plaintext.len >> 3,
5477                         "KASUMI Plaintext data not as expected");
5478         } else {
5479                 TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
5480                         ciphertext,
5481                         tdata->ciphertext.data,
5482                         tdata->ciphertext.len >> 3,
5483                         "KASUMI Ciphertext data not as expected");
5484
5485                 TEST_ASSERT_BUFFERS_ARE_EQUAL(
5486                         ut_params->digest,
5487                         tdata->digest.data,
5488                         DIGEST_BYTE_LENGTH_KASUMI_F9,
5489                         "KASUMI Generated auth tag not as expected");
5490         }
5491         return 0;
5492 }
5493
5494 static int
5495 test_kasumi_auth_cipher_sgl(const struct kasumi_test_data *tdata,
5496         uint8_t op_mode, uint8_t verify)
5497 {
5498         struct crypto_testsuite_params *ts_params = &testsuite_params;
5499         struct crypto_unittest_params *ut_params = &unittest_params;
5500
5501         int retval;
5502
5503         const uint8_t *plaintext = NULL;
5504         const uint8_t *ciphertext = NULL;
5505         const uint8_t *digest = NULL;
5506         unsigned int plaintext_pad_len;
5507         unsigned int plaintext_len;
5508         unsigned int ciphertext_pad_len;
5509         unsigned int ciphertext_len;
5510         uint8_t buffer[10000];
5511         uint8_t digest_buffer[10000];
5512
5513         struct rte_cryptodev_info dev_info;
5514
5515         /* Verify the capabilities */
5516         struct rte_cryptodev_sym_capability_idx cap_idx;
5517         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
5518         cap_idx.algo.auth = RTE_CRYPTO_AUTH_KASUMI_F9;
5519         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
5520                         &cap_idx) == NULL)
5521                 return TEST_SKIPPED;
5522         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
5523         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_KASUMI_F8;
5524         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
5525                         &cap_idx) == NULL)
5526                 return TEST_SKIPPED;
5527
5528         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
5529                 return TEST_SKIPPED;
5530
5531         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
5532
5533         uint64_t feat_flags = dev_info.feature_flags;
5534
5535         if (op_mode == IN_PLACE) {
5536                 if (!(feat_flags & RTE_CRYPTODEV_FF_IN_PLACE_SGL)) {
5537                         printf("Device doesn't support in-place scatter-gather "
5538                                         "in both input and output mbufs.\n");
5539                         return TEST_SKIPPED;
5540                 }
5541                 if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
5542                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
5543                         printf("Device doesn't support RAW data-path APIs.\n");
5544                         return TEST_SKIPPED;
5545                 }
5546         } else {
5547                 if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
5548                         return TEST_SKIPPED;
5549                 if (!(feat_flags & RTE_CRYPTODEV_FF_OOP_SGL_IN_SGL_OUT)) {
5550                         printf("Device doesn't support out-of-place scatter-gather "
5551                                         "in both input and output mbufs.\n");
5552                         return TEST_SKIPPED;
5553                 }
5554                 if (!(feat_flags & RTE_CRYPTODEV_FF_DIGEST_ENCRYPTED)) {
5555                         printf("Device doesn't support digest encrypted.\n");
5556                         return TEST_SKIPPED;
5557                 }
5558         }
5559
5560         /* Create KASUMI session */
5561         retval = create_wireless_algo_auth_cipher_session(
5562                         ts_params->valid_devs[0],
5563                         (verify ? RTE_CRYPTO_CIPHER_OP_DECRYPT
5564                                         : RTE_CRYPTO_CIPHER_OP_ENCRYPT),
5565                         (verify ? RTE_CRYPTO_AUTH_OP_VERIFY
5566                                         : RTE_CRYPTO_AUTH_OP_GENERATE),
5567                         RTE_CRYPTO_AUTH_KASUMI_F9,
5568                         RTE_CRYPTO_CIPHER_KASUMI_F8,
5569                         tdata->key.data, tdata->key.len,
5570                         0, tdata->digest.len,
5571                         tdata->cipher_iv.len);
5572
5573         if (retval != 0)
5574                 return retval;
5575
5576         ciphertext_len = ceil_byte_length(tdata->ciphertext.len);
5577         plaintext_len = ceil_byte_length(tdata->plaintext.len);
5578         ciphertext_pad_len = RTE_ALIGN_CEIL(ciphertext_len, 16);
5579         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 16);
5580
5581         ut_params->ibuf = create_segmented_mbuf(ts_params->mbuf_pool,
5582                         plaintext_pad_len, 15, 0);
5583         TEST_ASSERT_NOT_NULL(ut_params->ibuf,
5584                         "Failed to allocate input buffer in mempool");
5585
5586         if (op_mode == OUT_OF_PLACE) {
5587                 ut_params->obuf = create_segmented_mbuf(ts_params->mbuf_pool,
5588                                 plaintext_pad_len, 15, 0);
5589                 TEST_ASSERT_NOT_NULL(ut_params->obuf,
5590                                 "Failed to allocate output buffer in mempool");
5591         }
5592
5593         if (verify) {
5594                 pktmbuf_write(ut_params->ibuf, 0, ciphertext_len,
5595                         tdata->ciphertext.data);
5596                 ciphertext = rte_pktmbuf_read(ut_params->ibuf, 0,
5597                                         ciphertext_len, buffer);
5598                 debug_hexdump(stdout, "ciphertext:", ciphertext,
5599                         ciphertext_len);
5600         } else {
5601                 pktmbuf_write(ut_params->ibuf, 0, plaintext_len,
5602                         tdata->plaintext.data);
5603                 plaintext = rte_pktmbuf_read(ut_params->ibuf, 0,
5604                                         plaintext_len, buffer);
5605                 debug_hexdump(stdout, "plaintext:", plaintext,
5606                         plaintext_len);
5607         }
5608         memset(buffer, 0, sizeof(buffer));
5609
5610         /* Create KASUMI operation */
5611         retval = create_wireless_algo_auth_cipher_operation(
5612                 tdata->digest.data, tdata->digest.len,
5613                 tdata->cipher_iv.data, tdata->cipher_iv.len,
5614                 NULL, 0,
5615                 (tdata->digest.offset_bytes == 0 ?
5616                 (verify ? ciphertext_pad_len : plaintext_pad_len)
5617                         : tdata->digest.offset_bytes),
5618                 tdata->validCipherLenInBits.len,
5619                 tdata->validCipherOffsetInBits.len,
5620                 tdata->validAuthLenInBits.len,
5621                 0,
5622                 op_mode, 1, verify);
5623
5624         if (retval < 0)
5625                 return retval;
5626
5627         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
5628                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
5629                                 ut_params->op, 1, 1, 1, tdata->cipher_iv.len);
5630         else
5631                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
5632                         ut_params->op);
5633
5634         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
5635
5636         ut_params->obuf = (op_mode == IN_PLACE ?
5637                 ut_params->op->sym->m_src : ut_params->op->sym->m_dst);
5638
5639         if (verify) {
5640                 if (ut_params->obuf)
5641                         plaintext = rte_pktmbuf_read(ut_params->obuf, 0,
5642                                         plaintext_len, buffer);
5643                 else
5644                         plaintext = rte_pktmbuf_read(ut_params->ibuf, 0,
5645                                         plaintext_len, buffer);
5646
5647                 debug_hexdump(stdout, "plaintext:", plaintext,
5648                         (tdata->plaintext.len >> 3) - tdata->digest.len);
5649                 debug_hexdump(stdout, "plaintext expected:",
5650                         tdata->plaintext.data,
5651                         (tdata->plaintext.len >> 3) - tdata->digest.len);
5652         } else {
5653                 if (ut_params->obuf)
5654                         ciphertext = rte_pktmbuf_read(ut_params->obuf, 0,
5655                                         ciphertext_len, buffer);
5656                 else
5657                         ciphertext = rte_pktmbuf_read(ut_params->ibuf, 0,
5658                                         ciphertext_len, buffer);
5659
5660                 debug_hexdump(stdout, "ciphertext:", ciphertext,
5661                         ciphertext_len);
5662                 debug_hexdump(stdout, "ciphertext expected:",
5663                         tdata->ciphertext.data, tdata->ciphertext.len >> 3);
5664
5665                 if (ut_params->obuf)
5666                         digest = rte_pktmbuf_read(ut_params->obuf,
5667                                 (tdata->digest.offset_bytes == 0 ?
5668                                 plaintext_pad_len : tdata->digest.offset_bytes),
5669                                 tdata->digest.len, digest_buffer);
5670                 else
5671                         digest = rte_pktmbuf_read(ut_params->ibuf,
5672                                 (tdata->digest.offset_bytes == 0 ?
5673                                 plaintext_pad_len : tdata->digest.offset_bytes),
5674                                 tdata->digest.len, digest_buffer);
5675
5676                 debug_hexdump(stdout, "digest:", digest,
5677                         tdata->digest.len);
5678                 debug_hexdump(stdout, "digest expected:",
5679                         tdata->digest.data, tdata->digest.len);
5680         }
5681
5682         /* Validate obuf */
5683         if (verify) {
5684                 TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
5685                         plaintext,
5686                         tdata->plaintext.data,
5687                         tdata->plaintext.len >> 3,
5688                         "KASUMI Plaintext data not as expected");
5689         } else {
5690                 TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
5691                         ciphertext,
5692                         tdata->ciphertext.data,
5693                         tdata->validDataLenInBits.len,
5694                         "KASUMI Ciphertext data not as expected");
5695
5696                 TEST_ASSERT_BUFFERS_ARE_EQUAL(
5697                         digest,
5698                         tdata->digest.data,
5699                         DIGEST_BYTE_LENGTH_KASUMI_F9,
5700                         "KASUMI Generated auth tag not as expected");
5701         }
5702         return 0;
5703 }
5704
5705 static int
5706 test_kasumi_cipher_auth(const struct kasumi_test_data *tdata)
5707 {
5708         struct crypto_testsuite_params *ts_params = &testsuite_params;
5709         struct crypto_unittest_params *ut_params = &unittest_params;
5710
5711         int retval;
5712
5713         uint8_t *plaintext, *ciphertext;
5714         unsigned plaintext_pad_len;
5715         unsigned plaintext_len;
5716         struct rte_cryptodev_info dev_info;
5717
5718         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
5719         uint64_t feat_flags = dev_info.feature_flags;
5720
5721         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
5722                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
5723                 printf("Device doesn't support RAW data-path APIs.\n");
5724                 return TEST_SKIPPED;
5725         }
5726
5727         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
5728                 return TEST_SKIPPED;
5729
5730         /* Verify the capabilities */
5731         struct rte_cryptodev_sym_capability_idx cap_idx;
5732         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
5733         cap_idx.algo.auth = RTE_CRYPTO_AUTH_KASUMI_F9;
5734         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
5735                         &cap_idx) == NULL)
5736                 return TEST_SKIPPED;
5737         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
5738         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_KASUMI_F8;
5739         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
5740                         &cap_idx) == NULL)
5741                 return TEST_SKIPPED;
5742
5743         /* Create KASUMI session */
5744         retval = create_wireless_algo_cipher_auth_session(
5745                         ts_params->valid_devs[0],
5746                         RTE_CRYPTO_CIPHER_OP_ENCRYPT,
5747                         RTE_CRYPTO_AUTH_OP_GENERATE,
5748                         RTE_CRYPTO_AUTH_KASUMI_F9,
5749                         RTE_CRYPTO_CIPHER_KASUMI_F8,
5750                         tdata->key.data, tdata->key.len,
5751                         0, tdata->digest.len,
5752                         tdata->cipher_iv.len);
5753         if (retval != 0)
5754                 return retval;
5755
5756         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
5757
5758         /* clear mbuf payload */
5759         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
5760                         rte_pktmbuf_tailroom(ut_params->ibuf));
5761
5762         plaintext_len = ceil_byte_length(tdata->plaintext.len);
5763         /* Append data which is padded to a multiple of */
5764         /* the algorithms block size */
5765         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 16);
5766         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
5767                                 plaintext_pad_len);
5768         memcpy(plaintext, tdata->plaintext.data, plaintext_len);
5769
5770         debug_hexdump(stdout, "plaintext:", plaintext, plaintext_len);
5771
5772         /* Create KASUMI operation */
5773         retval = create_wireless_algo_cipher_hash_operation(tdata->digest.data,
5774                                 tdata->digest.len, NULL, 0,
5775                                 plaintext_pad_len, RTE_CRYPTO_AUTH_OP_GENERATE,
5776                                 tdata->cipher_iv.data, tdata->cipher_iv.len,
5777                                 RTE_ALIGN_CEIL(tdata->validCipherLenInBits.len, 8),
5778                                 tdata->validCipherOffsetInBits.len,
5779                                 tdata->validAuthLenInBits.len,
5780                                 0
5781                                 );
5782         if (retval < 0)
5783                 return retval;
5784
5785         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
5786                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
5787                                 ut_params->op, 1, 1, 1, tdata->cipher_iv.len);
5788         else
5789                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
5790                         ut_params->op);
5791         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
5792
5793         if (ut_params->op->sym->m_dst)
5794                 ut_params->obuf = ut_params->op->sym->m_dst;
5795         else
5796                 ut_params->obuf = ut_params->op->sym->m_src;
5797
5798         ciphertext = rte_pktmbuf_mtod_offset(ut_params->obuf, uint8_t *,
5799                                 tdata->validCipherOffsetInBits.len >> 3);
5800
5801         ut_params->digest = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *)
5802                         + plaintext_pad_len;
5803
5804         const uint8_t *reference_ciphertext = tdata->ciphertext.data +
5805                                 (tdata->validCipherOffsetInBits.len >> 3);
5806         /* Validate obuf */
5807         TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
5808                 ciphertext,
5809                 reference_ciphertext,
5810                 tdata->validCipherLenInBits.len,
5811                 "KASUMI Ciphertext data not as expected");
5812
5813         /* Validate obuf */
5814         TEST_ASSERT_BUFFERS_ARE_EQUAL(
5815                 ut_params->digest,
5816                 tdata->digest.data,
5817                 DIGEST_BYTE_LENGTH_SNOW3G_UIA2,
5818                 "KASUMI Generated auth tag not as expected");
5819         return 0;
5820 }
5821
5822 static int
5823 test_zuc_encryption(const struct wireless_test_data *tdata)
5824 {
5825         struct crypto_testsuite_params *ts_params = &testsuite_params;
5826         struct crypto_unittest_params *ut_params = &unittest_params;
5827
5828         int retval;
5829         uint8_t *plaintext, *ciphertext;
5830         unsigned plaintext_pad_len;
5831         unsigned plaintext_len;
5832         struct rte_cryptodev_info dev_info;
5833
5834         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
5835         uint64_t feat_flags = dev_info.feature_flags;
5836
5837         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
5838                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
5839                 printf("Device doesn't support RAW data-path APIs.\n");
5840                 return TEST_SKIPPED;
5841         }
5842
5843         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
5844                 return TEST_SKIPPED;
5845
5846         struct rte_cryptodev_sym_capability_idx cap_idx;
5847
5848         /* Check if device supports ZUC EEA3 */
5849         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
5850         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_ZUC_EEA3;
5851
5852         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
5853                         &cap_idx) == NULL)
5854                 return TEST_SKIPPED;
5855
5856         /* Create ZUC session */
5857         retval = create_wireless_algo_cipher_session(ts_params->valid_devs[0],
5858                                         RTE_CRYPTO_CIPHER_OP_ENCRYPT,
5859                                         RTE_CRYPTO_CIPHER_ZUC_EEA3,
5860                                         tdata->key.data, tdata->key.len,
5861                                         tdata->cipher_iv.len);
5862         if (retval < 0)
5863                 return retval;
5864
5865         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
5866
5867         /* Clear mbuf payload */
5868         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
5869                rte_pktmbuf_tailroom(ut_params->ibuf));
5870
5871         plaintext_len = ceil_byte_length(tdata->plaintext.len);
5872         /* Append data which is padded to a multiple */
5873         /* of the algorithms block size */
5874         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 8);
5875         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
5876                                 plaintext_pad_len);
5877         memcpy(plaintext, tdata->plaintext.data, plaintext_len);
5878
5879         debug_hexdump(stdout, "plaintext:", plaintext, plaintext_len);
5880
5881         /* Create ZUC operation */
5882         retval = create_wireless_algo_cipher_operation(tdata->cipher_iv.data,
5883                                         tdata->cipher_iv.len,
5884                                         tdata->plaintext.len,
5885                                         0);
5886         if (retval < 0)
5887                 return retval;
5888
5889         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
5890                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
5891                                 ut_params->op, 1, 0, 1, tdata->cipher_iv.len);
5892         else
5893                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
5894                                                 ut_params->op);
5895         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
5896
5897         ut_params->obuf = ut_params->op->sym->m_dst;
5898         if (ut_params->obuf)
5899                 ciphertext = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *);
5900         else
5901                 ciphertext = plaintext;
5902
5903         debug_hexdump(stdout, "ciphertext:", ciphertext, plaintext_len);
5904
5905         /* Validate obuf */
5906         TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
5907                 ciphertext,
5908                 tdata->ciphertext.data,
5909                 tdata->validCipherLenInBits.len,
5910                 "ZUC Ciphertext data not as expected");
5911         return 0;
5912 }
5913
5914 static int
5915 test_zuc_encryption_sgl(const struct wireless_test_data *tdata)
5916 {
5917         struct crypto_testsuite_params *ts_params = &testsuite_params;
5918         struct crypto_unittest_params *ut_params = &unittest_params;
5919
5920         int retval;
5921
5922         unsigned int plaintext_pad_len;
5923         unsigned int plaintext_len;
5924         const uint8_t *ciphertext;
5925         uint8_t ciphertext_buffer[2048];
5926         struct rte_cryptodev_info dev_info;
5927
5928         struct rte_cryptodev_sym_capability_idx cap_idx;
5929
5930         /* Check if device supports ZUC EEA3 */
5931         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
5932         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_ZUC_EEA3;
5933
5934         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
5935                         &cap_idx) == NULL)
5936                 return TEST_SKIPPED;
5937
5938         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
5939                 return TEST_SKIPPED;
5940
5941         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
5942
5943         uint64_t feat_flags = dev_info.feature_flags;
5944
5945         if (!(feat_flags & RTE_CRYPTODEV_FF_IN_PLACE_SGL)) {
5946                 printf("Device doesn't support in-place scatter-gather. "
5947                                 "Test Skipped.\n");
5948                 return TEST_SKIPPED;
5949         }
5950
5951         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
5952                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
5953                 printf("Device doesn't support RAW data-path APIs.\n");
5954                 return TEST_SKIPPED;
5955         }
5956
5957         plaintext_len = ceil_byte_length(tdata->plaintext.len);
5958
5959         /* Append data which is padded to a multiple */
5960         /* of the algorithms block size */
5961         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 8);
5962
5963         ut_params->ibuf = create_segmented_mbuf(ts_params->mbuf_pool,
5964                         plaintext_pad_len, 10, 0);
5965
5966         pktmbuf_write(ut_params->ibuf, 0, plaintext_len,
5967                         tdata->plaintext.data);
5968
5969         /* Create ZUC session */
5970         retval = create_wireless_algo_cipher_session(ts_params->valid_devs[0],
5971                         RTE_CRYPTO_CIPHER_OP_ENCRYPT,
5972                         RTE_CRYPTO_CIPHER_ZUC_EEA3,
5973                         tdata->key.data, tdata->key.len,
5974                         tdata->cipher_iv.len);
5975         if (retval < 0)
5976                 return retval;
5977
5978         /* Clear mbuf payload */
5979
5980         pktmbuf_write(ut_params->ibuf, 0, plaintext_len, tdata->plaintext.data);
5981
5982         /* Create ZUC operation */
5983         retval = create_wireless_algo_cipher_operation(tdata->cipher_iv.data,
5984                         tdata->cipher_iv.len, tdata->plaintext.len,
5985                         0);
5986         if (retval < 0)
5987                 return retval;
5988
5989         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
5990                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
5991                                 ut_params->op, 1, 0, 1, tdata->cipher_iv.len);
5992         else
5993                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
5994                                                 ut_params->op);
5995         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
5996
5997         ut_params->obuf = ut_params->op->sym->m_dst;
5998         if (ut_params->obuf)
5999                 ciphertext = rte_pktmbuf_read(ut_params->obuf,
6000                         0, plaintext_len, ciphertext_buffer);
6001         else
6002                 ciphertext = rte_pktmbuf_read(ut_params->ibuf,
6003                         0, plaintext_len, ciphertext_buffer);
6004
6005         /* Validate obuf */
6006         debug_hexdump(stdout, "ciphertext:", ciphertext, plaintext_len);
6007
6008         /* Validate obuf */
6009         TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
6010                 ciphertext,
6011                 tdata->ciphertext.data,
6012                 tdata->validCipherLenInBits.len,
6013                 "ZUC Ciphertext data not as expected");
6014
6015         return 0;
6016 }
6017
6018 static int
6019 test_zuc_authentication(const struct wireless_test_data *tdata)
6020 {
6021         struct crypto_testsuite_params *ts_params = &testsuite_params;
6022         struct crypto_unittest_params *ut_params = &unittest_params;
6023
6024         int retval;
6025         unsigned plaintext_pad_len;
6026         unsigned plaintext_len;
6027         uint8_t *plaintext;
6028
6029         struct rte_cryptodev_sym_capability_idx cap_idx;
6030         struct rte_cryptodev_info dev_info;
6031
6032         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
6033         uint64_t feat_flags = dev_info.feature_flags;
6034
6035         if (!(feat_flags & RTE_CRYPTODEV_FF_NON_BYTE_ALIGNED_DATA) &&
6036                         (tdata->validAuthLenInBits.len % 8 != 0)) {
6037                 printf("Device doesn't support NON-Byte Aligned Data.\n");
6038                 return TEST_SKIPPED;
6039         }
6040
6041         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
6042                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
6043                 printf("Device doesn't support RAW data-path APIs.\n");
6044                 return TEST_SKIPPED;
6045         }
6046
6047         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
6048                 return TEST_SKIPPED;
6049
6050         /* Check if device supports ZUC EIA3 */
6051         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
6052         cap_idx.algo.auth = RTE_CRYPTO_AUTH_ZUC_EIA3;
6053
6054         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
6055                         &cap_idx) == NULL)
6056                 return TEST_SKIPPED;
6057
6058         /* Create ZUC session */
6059         retval = create_wireless_algo_hash_session(ts_params->valid_devs[0],
6060                         tdata->key.data, tdata->key.len,
6061                         tdata->auth_iv.len, tdata->digest.len,
6062                         RTE_CRYPTO_AUTH_OP_GENERATE,
6063                         RTE_CRYPTO_AUTH_ZUC_EIA3);
6064         if (retval < 0)
6065                 return retval;
6066
6067         /* alloc mbuf and set payload */
6068         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
6069
6070         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
6071         rte_pktmbuf_tailroom(ut_params->ibuf));
6072
6073         plaintext_len = ceil_byte_length(tdata->plaintext.len);
6074         /* Append data which is padded to a multiple of */
6075         /* the algorithms block size */
6076         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 8);
6077         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
6078                                 plaintext_pad_len);
6079         memcpy(plaintext, tdata->plaintext.data, plaintext_len);
6080
6081         /* Create ZUC operation */
6082         retval = create_wireless_algo_hash_operation(NULL, tdata->digest.len,
6083                         tdata->auth_iv.data, tdata->auth_iv.len,
6084                         plaintext_pad_len, RTE_CRYPTO_AUTH_OP_GENERATE,
6085                         tdata->validAuthLenInBits.len,
6086                         0);
6087         if (retval < 0)
6088                 return retval;
6089
6090         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
6091                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
6092                                 ut_params->op, 0, 1, 1, 0);
6093         else
6094                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
6095                                 ut_params->op);
6096         ut_params->obuf = ut_params->op->sym->m_src;
6097         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
6098         ut_params->digest = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *)
6099                         + plaintext_pad_len;
6100
6101         /* Validate obuf */
6102         TEST_ASSERT_BUFFERS_ARE_EQUAL(
6103         ut_params->digest,
6104         tdata->digest.data,
6105         tdata->digest.len,
6106         "ZUC Generated auth tag not as expected");
6107
6108         return 0;
6109 }
6110
6111 static int
6112 test_zuc_auth_cipher(const struct wireless_test_data *tdata,
6113         uint8_t op_mode, uint8_t verify)
6114 {
6115         struct crypto_testsuite_params *ts_params = &testsuite_params;
6116         struct crypto_unittest_params *ut_params = &unittest_params;
6117
6118         int retval;
6119
6120         uint8_t *plaintext = NULL, *ciphertext = NULL;
6121         unsigned int plaintext_pad_len;
6122         unsigned int plaintext_len;
6123         unsigned int ciphertext_pad_len;
6124         unsigned int ciphertext_len;
6125
6126         struct rte_cryptodev_info dev_info;
6127         struct rte_cryptodev_sym_capability_idx cap_idx;
6128
6129         /* Check if device supports ZUC EIA3 */
6130         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
6131         cap_idx.algo.auth = RTE_CRYPTO_AUTH_ZUC_EIA3;
6132
6133         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
6134                         &cap_idx) == NULL)
6135                 return TEST_SKIPPED;
6136
6137         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
6138
6139         uint64_t feat_flags = dev_info.feature_flags;
6140
6141         if (!(feat_flags & RTE_CRYPTODEV_FF_DIGEST_ENCRYPTED)) {
6142                 printf("Device doesn't support digest encrypted.\n");
6143                 return TEST_SKIPPED;
6144         }
6145         if (op_mode == IN_PLACE) {
6146                 if (!(feat_flags & RTE_CRYPTODEV_FF_IN_PLACE_SGL)) {
6147                         printf("Device doesn't support in-place scatter-gather "
6148                                         "in both input and output mbufs.\n");
6149                         return TEST_SKIPPED;
6150                 }
6151
6152                 if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
6153                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
6154                         printf("Device doesn't support RAW data-path APIs.\n");
6155                         return TEST_SKIPPED;
6156                 }
6157         } else {
6158                 if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
6159                         return TEST_SKIPPED;
6160                 if (!(feat_flags & RTE_CRYPTODEV_FF_OOP_SGL_IN_SGL_OUT)) {
6161                         printf("Device doesn't support out-of-place scatter-gather "
6162                                         "in both input and output mbufs.\n");
6163                         return TEST_SKIPPED;
6164                 }
6165         }
6166
6167         /* Create ZUC session */
6168         retval = create_wireless_algo_auth_cipher_session(
6169                         ts_params->valid_devs[0],
6170                         (verify ? RTE_CRYPTO_CIPHER_OP_DECRYPT
6171                                         : RTE_CRYPTO_CIPHER_OP_ENCRYPT),
6172                         (verify ? RTE_CRYPTO_AUTH_OP_VERIFY
6173                                         : RTE_CRYPTO_AUTH_OP_GENERATE),
6174                         RTE_CRYPTO_AUTH_ZUC_EIA3,
6175                         RTE_CRYPTO_CIPHER_ZUC_EEA3,
6176                         tdata->key.data, tdata->key.len,
6177                         tdata->auth_iv.len, tdata->digest.len,
6178                         tdata->cipher_iv.len);
6179
6180         if (retval != 0)
6181                 return retval;
6182
6183         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
6184         if (op_mode == OUT_OF_PLACE)
6185                 ut_params->obuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
6186
6187         /* clear mbuf payload */
6188         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
6189                 rte_pktmbuf_tailroom(ut_params->ibuf));
6190         if (op_mode == OUT_OF_PLACE)
6191                 memset(rte_pktmbuf_mtod(ut_params->obuf, uint8_t *), 0,
6192                         rte_pktmbuf_tailroom(ut_params->obuf));
6193
6194         ciphertext_len = ceil_byte_length(tdata->ciphertext.len);
6195         plaintext_len = ceil_byte_length(tdata->plaintext.len);
6196         ciphertext_pad_len = RTE_ALIGN_CEIL(ciphertext_len, 16);
6197         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 16);
6198
6199         if (verify) {
6200                 ciphertext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
6201                                         ciphertext_pad_len);
6202                 memcpy(ciphertext, tdata->ciphertext.data, ciphertext_len);
6203                 if (op_mode == OUT_OF_PLACE)
6204                         rte_pktmbuf_append(ut_params->obuf, ciphertext_pad_len);
6205                 debug_hexdump(stdout, "ciphertext:", ciphertext,
6206                         ciphertext_len);
6207         } else {
6208                 plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
6209                                         plaintext_pad_len);
6210                 memcpy(plaintext, tdata->plaintext.data, plaintext_len);
6211                 if (op_mode == OUT_OF_PLACE)
6212                         rte_pktmbuf_append(ut_params->obuf, plaintext_pad_len);
6213                 debug_hexdump(stdout, "plaintext:", plaintext,
6214                         plaintext_len);
6215         }
6216
6217         /* Create ZUC operation */
6218         retval = create_wireless_algo_auth_cipher_operation(
6219                 tdata->digest.data, tdata->digest.len,
6220                 tdata->cipher_iv.data, tdata->cipher_iv.len,
6221                 tdata->auth_iv.data, tdata->auth_iv.len,
6222                 (tdata->digest.offset_bytes == 0 ?
6223                 (verify ? ciphertext_pad_len : plaintext_pad_len)
6224                         : tdata->digest.offset_bytes),
6225                 tdata->validCipherLenInBits.len,
6226                 tdata->validCipherOffsetInBits.len,
6227                 tdata->validAuthLenInBits.len,
6228                 0,
6229                 op_mode, 0, verify);
6230
6231         if (retval < 0)
6232                 return retval;
6233
6234         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
6235                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
6236                                 ut_params->op, 1, 1, 1, tdata->cipher_iv.len);
6237         else
6238                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
6239                         ut_params->op);
6240
6241         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
6242
6243         ut_params->obuf = (op_mode == IN_PLACE ?
6244                 ut_params->op->sym->m_src : ut_params->op->sym->m_dst);
6245
6246
6247         if (verify) {
6248                 if (ut_params->obuf)
6249                         plaintext = rte_pktmbuf_mtod(ut_params->obuf,
6250                                                         uint8_t *);
6251                 else
6252                         plaintext = ciphertext;
6253
6254                 debug_hexdump(stdout, "plaintext:", plaintext,
6255                         (tdata->plaintext.len >> 3) - tdata->digest.len);
6256                 debug_hexdump(stdout, "plaintext expected:",
6257                         tdata->plaintext.data,
6258                         (tdata->plaintext.len >> 3) - tdata->digest.len);
6259         } else {
6260                 if (ut_params->obuf)
6261                         ciphertext = rte_pktmbuf_mtod(ut_params->obuf,
6262                                                         uint8_t *);
6263                 else
6264                         ciphertext = plaintext;
6265
6266                 debug_hexdump(stdout, "ciphertext:", ciphertext,
6267                         ciphertext_len);
6268                 debug_hexdump(stdout, "ciphertext expected:",
6269                         tdata->ciphertext.data, tdata->ciphertext.len >> 3);
6270
6271                 ut_params->digest = rte_pktmbuf_mtod(
6272                         ut_params->obuf, uint8_t *) +
6273                         (tdata->digest.offset_bytes == 0 ?
6274                         plaintext_pad_len : tdata->digest.offset_bytes);
6275
6276                 debug_hexdump(stdout, "digest:", ut_params->digest,
6277                         tdata->digest.len);
6278                 debug_hexdump(stdout, "digest expected:",
6279                         tdata->digest.data, tdata->digest.len);
6280         }
6281
6282         /* Validate obuf */
6283         if (verify) {
6284                 TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
6285                         plaintext,
6286                         tdata->plaintext.data,
6287                         tdata->plaintext.len >> 3,
6288                         "ZUC Plaintext data not as expected");
6289         } else {
6290                 TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
6291                         ciphertext,
6292                         tdata->ciphertext.data,
6293                         tdata->ciphertext.len >> 3,
6294                         "ZUC Ciphertext data not as expected");
6295
6296                 TEST_ASSERT_BUFFERS_ARE_EQUAL(
6297                         ut_params->digest,
6298                         tdata->digest.data,
6299                         DIGEST_BYTE_LENGTH_KASUMI_F9,
6300                         "ZUC Generated auth tag not as expected");
6301         }
6302         return 0;
6303 }
6304
6305 static int
6306 test_zuc_auth_cipher_sgl(const struct wireless_test_data *tdata,
6307         uint8_t op_mode, uint8_t verify)
6308 {
6309         struct crypto_testsuite_params *ts_params = &testsuite_params;
6310         struct crypto_unittest_params *ut_params = &unittest_params;
6311
6312         int retval;
6313
6314         const uint8_t *plaintext = NULL;
6315         const uint8_t *ciphertext = NULL;
6316         const uint8_t *digest = NULL;
6317         unsigned int plaintext_pad_len;
6318         unsigned int plaintext_len;
6319         unsigned int ciphertext_pad_len;
6320         unsigned int ciphertext_len;
6321         uint8_t buffer[10000];
6322         uint8_t digest_buffer[10000];
6323
6324         struct rte_cryptodev_info dev_info;
6325         struct rte_cryptodev_sym_capability_idx cap_idx;
6326
6327         /* Check if device supports ZUC EIA3 */
6328         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
6329         cap_idx.algo.auth = RTE_CRYPTO_AUTH_ZUC_EIA3;
6330
6331         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
6332                         &cap_idx) == NULL)
6333                 return TEST_SKIPPED;
6334
6335         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
6336
6337         uint64_t feat_flags = dev_info.feature_flags;
6338
6339         if (op_mode == IN_PLACE) {
6340                 if (!(feat_flags & RTE_CRYPTODEV_FF_IN_PLACE_SGL)) {
6341                         printf("Device doesn't support in-place scatter-gather "
6342                                         "in both input and output mbufs.\n");
6343                         return TEST_SKIPPED;
6344                 }
6345
6346                 if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
6347                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
6348                         printf("Device doesn't support RAW data-path APIs.\n");
6349                         return TEST_SKIPPED;
6350                 }
6351         } else {
6352                 if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
6353                         return TEST_SKIPPED;
6354                 if (!(feat_flags & RTE_CRYPTODEV_FF_OOP_SGL_IN_SGL_OUT)) {
6355                         printf("Device doesn't support out-of-place scatter-gather "
6356                                         "in both input and output mbufs.\n");
6357                         return TEST_SKIPPED;
6358                 }
6359                 if (!(feat_flags & RTE_CRYPTODEV_FF_DIGEST_ENCRYPTED)) {
6360                         printf("Device doesn't support digest encrypted.\n");
6361                         return TEST_SKIPPED;
6362                 }
6363         }
6364
6365         /* Create ZUC session */
6366         retval = create_wireless_algo_auth_cipher_session(
6367                         ts_params->valid_devs[0],
6368                         (verify ? RTE_CRYPTO_CIPHER_OP_DECRYPT
6369                                         : RTE_CRYPTO_CIPHER_OP_ENCRYPT),
6370                         (verify ? RTE_CRYPTO_AUTH_OP_VERIFY
6371                                         : RTE_CRYPTO_AUTH_OP_GENERATE),
6372                         RTE_CRYPTO_AUTH_ZUC_EIA3,
6373                         RTE_CRYPTO_CIPHER_ZUC_EEA3,
6374                         tdata->key.data, tdata->key.len,
6375                         tdata->auth_iv.len, tdata->digest.len,
6376                         tdata->cipher_iv.len);
6377
6378         if (retval != 0)
6379                 return retval;
6380
6381         ciphertext_len = ceil_byte_length(tdata->ciphertext.len);
6382         plaintext_len = ceil_byte_length(tdata->plaintext.len);
6383         ciphertext_pad_len = RTE_ALIGN_CEIL(ciphertext_len, 16);
6384         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 16);
6385
6386         ut_params->ibuf = create_segmented_mbuf(ts_params->mbuf_pool,
6387                         plaintext_pad_len, 15, 0);
6388         TEST_ASSERT_NOT_NULL(ut_params->ibuf,
6389                         "Failed to allocate input buffer in mempool");
6390
6391         if (op_mode == OUT_OF_PLACE) {
6392                 ut_params->obuf = create_segmented_mbuf(ts_params->mbuf_pool,
6393                                 plaintext_pad_len, 15, 0);
6394                 TEST_ASSERT_NOT_NULL(ut_params->obuf,
6395                                 "Failed to allocate output buffer in mempool");
6396         }
6397
6398         if (verify) {
6399                 pktmbuf_write(ut_params->ibuf, 0, ciphertext_len,
6400                         tdata->ciphertext.data);
6401                 ciphertext = rte_pktmbuf_read(ut_params->ibuf, 0,
6402                                         ciphertext_len, buffer);
6403                 debug_hexdump(stdout, "ciphertext:", ciphertext,
6404                         ciphertext_len);
6405         } else {
6406                 pktmbuf_write(ut_params->ibuf, 0, plaintext_len,
6407                         tdata->plaintext.data);
6408                 plaintext = rte_pktmbuf_read(ut_params->ibuf, 0,
6409                                         plaintext_len, buffer);
6410                 debug_hexdump(stdout, "plaintext:", plaintext,
6411                         plaintext_len);
6412         }
6413         memset(buffer, 0, sizeof(buffer));
6414
6415         /* Create ZUC operation */
6416         retval = create_wireless_algo_auth_cipher_operation(
6417                 tdata->digest.data, tdata->digest.len,
6418                 tdata->cipher_iv.data, tdata->cipher_iv.len,
6419                 NULL, 0,
6420                 (tdata->digest.offset_bytes == 0 ?
6421                 (verify ? ciphertext_pad_len : plaintext_pad_len)
6422                         : tdata->digest.offset_bytes),
6423                 tdata->validCipherLenInBits.len,
6424                 tdata->validCipherOffsetInBits.len,
6425                 tdata->validAuthLenInBits.len,
6426                 0,
6427                 op_mode, 1, verify);
6428
6429         if (retval < 0)
6430                 return retval;
6431
6432         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
6433                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
6434                                 ut_params->op, 1, 1, 1, tdata->cipher_iv.len);
6435         else
6436                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
6437                         ut_params->op);
6438
6439         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
6440
6441         ut_params->obuf = (op_mode == IN_PLACE ?
6442                 ut_params->op->sym->m_src : ut_params->op->sym->m_dst);
6443
6444         if (verify) {
6445                 if (ut_params->obuf)
6446                         plaintext = rte_pktmbuf_read(ut_params->obuf, 0,
6447                                         plaintext_len, buffer);
6448                 else
6449                         plaintext = rte_pktmbuf_read(ut_params->ibuf, 0,
6450                                         plaintext_len, buffer);
6451
6452                 debug_hexdump(stdout, "plaintext:", plaintext,
6453                         (tdata->plaintext.len >> 3) - tdata->digest.len);
6454                 debug_hexdump(stdout, "plaintext expected:",
6455                         tdata->plaintext.data,
6456                         (tdata->plaintext.len >> 3) - tdata->digest.len);
6457         } else {
6458                 if (ut_params->obuf)
6459                         ciphertext = rte_pktmbuf_read(ut_params->obuf, 0,
6460                                         ciphertext_len, buffer);
6461                 else
6462                         ciphertext = rte_pktmbuf_read(ut_params->ibuf, 0,
6463                                         ciphertext_len, buffer);
6464
6465                 debug_hexdump(stdout, "ciphertext:", ciphertext,
6466                         ciphertext_len);
6467                 debug_hexdump(stdout, "ciphertext expected:",
6468                         tdata->ciphertext.data, tdata->ciphertext.len >> 3);
6469
6470                 if (ut_params->obuf)
6471                         digest = rte_pktmbuf_read(ut_params->obuf,
6472                                 (tdata->digest.offset_bytes == 0 ?
6473                                 plaintext_pad_len : tdata->digest.offset_bytes),
6474                                 tdata->digest.len, digest_buffer);
6475                 else
6476                         digest = rte_pktmbuf_read(ut_params->ibuf,
6477                                 (tdata->digest.offset_bytes == 0 ?
6478                                 plaintext_pad_len : tdata->digest.offset_bytes),
6479                                 tdata->digest.len, digest_buffer);
6480
6481                 debug_hexdump(stdout, "digest:", digest,
6482                         tdata->digest.len);
6483                 debug_hexdump(stdout, "digest expected:",
6484                         tdata->digest.data, tdata->digest.len);
6485         }
6486
6487         /* Validate obuf */
6488         if (verify) {
6489                 TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
6490                         plaintext,
6491                         tdata->plaintext.data,
6492                         tdata->plaintext.len >> 3,
6493                         "ZUC Plaintext data not as expected");
6494         } else {
6495                 TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
6496                         ciphertext,
6497                         tdata->ciphertext.data,
6498                         tdata->validDataLenInBits.len,
6499                         "ZUC Ciphertext data not as expected");
6500
6501                 TEST_ASSERT_BUFFERS_ARE_EQUAL(
6502                         digest,
6503                         tdata->digest.data,
6504                         DIGEST_BYTE_LENGTH_KASUMI_F9,
6505                         "ZUC Generated auth tag not as expected");
6506         }
6507         return 0;
6508 }
6509
6510 static int
6511 test_kasumi_encryption_test_case_1(void)
6512 {
6513         return test_kasumi_encryption(&kasumi_test_case_1);
6514 }
6515
6516 static int
6517 test_kasumi_encryption_test_case_1_sgl(void)
6518 {
6519         return test_kasumi_encryption_sgl(&kasumi_test_case_1);
6520 }
6521
6522 static int
6523 test_kasumi_encryption_test_case_1_oop(void)
6524 {
6525         return test_kasumi_encryption_oop(&kasumi_test_case_1);
6526 }
6527
6528 static int
6529 test_kasumi_encryption_test_case_1_oop_sgl(void)
6530 {
6531         return test_kasumi_encryption_oop_sgl(&kasumi_test_case_1);
6532 }
6533
6534 static int
6535 test_kasumi_encryption_test_case_2(void)
6536 {
6537         return test_kasumi_encryption(&kasumi_test_case_2);
6538 }
6539
6540 static int
6541 test_kasumi_encryption_test_case_3(void)
6542 {
6543         return test_kasumi_encryption(&kasumi_test_case_3);
6544 }
6545
6546 static int
6547 test_kasumi_encryption_test_case_4(void)
6548 {
6549         return test_kasumi_encryption(&kasumi_test_case_4);
6550 }
6551
6552 static int
6553 test_kasumi_encryption_test_case_5(void)
6554 {
6555         return test_kasumi_encryption(&kasumi_test_case_5);
6556 }
6557
6558 static int
6559 test_kasumi_decryption_test_case_1(void)
6560 {
6561         return test_kasumi_decryption(&kasumi_test_case_1);
6562 }
6563
6564 static int
6565 test_kasumi_decryption_test_case_1_oop(void)
6566 {
6567         return test_kasumi_decryption_oop(&kasumi_test_case_1);
6568 }
6569
6570 static int
6571 test_kasumi_decryption_test_case_2(void)
6572 {
6573         return test_kasumi_decryption(&kasumi_test_case_2);
6574 }
6575
6576 static int
6577 test_kasumi_decryption_test_case_3(void)
6578 {
6579         /* rte_crypto_mbuf_to_vec does not support incomplete mbuf build */
6580         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
6581                 return TEST_SKIPPED;
6582         return test_kasumi_decryption(&kasumi_test_case_3);
6583 }
6584
6585 static int
6586 test_kasumi_decryption_test_case_4(void)
6587 {
6588         return test_kasumi_decryption(&kasumi_test_case_4);
6589 }
6590
6591 static int
6592 test_kasumi_decryption_test_case_5(void)
6593 {
6594         return test_kasumi_decryption(&kasumi_test_case_5);
6595 }
6596 static int
6597 test_snow3g_encryption_test_case_1(void)
6598 {
6599         return test_snow3g_encryption(&snow3g_test_case_1);
6600 }
6601
6602 static int
6603 test_snow3g_encryption_test_case_1_oop(void)
6604 {
6605         return test_snow3g_encryption_oop(&snow3g_test_case_1);
6606 }
6607
6608 static int
6609 test_snow3g_encryption_test_case_1_oop_sgl(void)
6610 {
6611         return test_snow3g_encryption_oop_sgl(&snow3g_test_case_1);
6612 }
6613
6614
6615 static int
6616 test_snow3g_encryption_test_case_1_offset_oop(void)
6617 {
6618         return test_snow3g_encryption_offset_oop(&snow3g_test_case_1);
6619 }
6620
6621 static int
6622 test_snow3g_encryption_test_case_2(void)
6623 {
6624         return test_snow3g_encryption(&snow3g_test_case_2);
6625 }
6626
6627 static int
6628 test_snow3g_encryption_test_case_3(void)
6629 {
6630         return test_snow3g_encryption(&snow3g_test_case_3);
6631 }
6632
6633 static int
6634 test_snow3g_encryption_test_case_4(void)
6635 {
6636         return test_snow3g_encryption(&snow3g_test_case_4);
6637 }
6638
6639 static int
6640 test_snow3g_encryption_test_case_5(void)
6641 {
6642         return test_snow3g_encryption(&snow3g_test_case_5);
6643 }
6644
6645 static int
6646 test_snow3g_decryption_test_case_1(void)
6647 {
6648         return test_snow3g_decryption(&snow3g_test_case_1);
6649 }
6650
6651 static int
6652 test_snow3g_decryption_test_case_1_oop(void)
6653 {
6654         return test_snow3g_decryption_oop(&snow3g_test_case_1);
6655 }
6656
6657 static int
6658 test_snow3g_decryption_test_case_2(void)
6659 {
6660         return test_snow3g_decryption(&snow3g_test_case_2);
6661 }
6662
6663 static int
6664 test_snow3g_decryption_test_case_3(void)
6665 {
6666         return test_snow3g_decryption(&snow3g_test_case_3);
6667 }
6668
6669 static int
6670 test_snow3g_decryption_test_case_4(void)
6671 {
6672         return test_snow3g_decryption(&snow3g_test_case_4);
6673 }
6674
6675 static int
6676 test_snow3g_decryption_test_case_5(void)
6677 {
6678         return test_snow3g_decryption(&snow3g_test_case_5);
6679 }
6680
6681 /*
6682  * Function prepares snow3g_hash_test_data from snow3g_test_data.
6683  * Pattern digest from snow3g_test_data must be allocated as
6684  * 4 last bytes in plaintext.
6685  */
6686 static void
6687 snow3g_hash_test_vector_setup(const struct snow3g_test_data *pattern,
6688                 struct snow3g_hash_test_data *output)
6689 {
6690         if ((pattern != NULL) && (output != NULL)) {
6691                 output->key.len = pattern->key.len;
6692
6693                 memcpy(output->key.data,
6694                 pattern->key.data, pattern->key.len);
6695
6696                 output->auth_iv.len = pattern->auth_iv.len;
6697
6698                 memcpy(output->auth_iv.data,
6699                 pattern->auth_iv.data, pattern->auth_iv.len);
6700
6701                 output->plaintext.len = pattern->plaintext.len;
6702
6703                 memcpy(output->plaintext.data,
6704                 pattern->plaintext.data, pattern->plaintext.len >> 3);
6705
6706                 output->digest.len = pattern->digest.len;
6707
6708                 memcpy(output->digest.data,
6709                 &pattern->plaintext.data[pattern->digest.offset_bytes],
6710                 pattern->digest.len);
6711
6712                 output->validAuthLenInBits.len =
6713                 pattern->validAuthLenInBits.len;
6714         }
6715 }
6716
6717 /*
6718  * Test case verify computed cipher and digest from snow3g_test_case_7 data.
6719  */
6720 static int
6721 test_snow3g_decryption_with_digest_test_case_1(void)
6722 {
6723         struct snow3g_hash_test_data snow3g_hash_data;
6724         struct rte_cryptodev_info dev_info;
6725         struct crypto_testsuite_params *ts_params = &testsuite_params;
6726
6727         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
6728         uint64_t feat_flags = dev_info.feature_flags;
6729
6730         if (!(feat_flags & RTE_CRYPTODEV_FF_DIGEST_ENCRYPTED)) {
6731                 printf("Device doesn't support encrypted digest operations.\n");
6732                 return TEST_SKIPPED;
6733         }
6734
6735         /*
6736          * Function prepare data for hash veryfication test case.
6737          * Digest is allocated in 4 last bytes in plaintext, pattern.
6738          */
6739         snow3g_hash_test_vector_setup(&snow3g_test_case_7, &snow3g_hash_data);
6740
6741         return test_snow3g_decryption(&snow3g_test_case_7) &
6742                         test_snow3g_authentication_verify(&snow3g_hash_data);
6743 }
6744
6745 static int
6746 test_snow3g_cipher_auth_test_case_1(void)
6747 {
6748         return test_snow3g_cipher_auth(&snow3g_test_case_3);
6749 }
6750
6751 static int
6752 test_snow3g_auth_cipher_test_case_1(void)
6753 {
6754         return test_snow3g_auth_cipher(
6755                 &snow3g_auth_cipher_test_case_1, IN_PLACE, 0);
6756 }
6757
6758 static int
6759 test_snow3g_auth_cipher_test_case_2(void)
6760 {
6761         return test_snow3g_auth_cipher(
6762                 &snow3g_auth_cipher_test_case_2, IN_PLACE, 0);
6763 }
6764
6765 static int
6766 test_snow3g_auth_cipher_test_case_2_oop(void)
6767 {
6768         return test_snow3g_auth_cipher(
6769                 &snow3g_auth_cipher_test_case_2, OUT_OF_PLACE, 0);
6770 }
6771
6772 static int
6773 test_snow3g_auth_cipher_part_digest_enc(void)
6774 {
6775         return test_snow3g_auth_cipher(
6776                 &snow3g_auth_cipher_partial_digest_encryption,
6777                         IN_PLACE, 0);
6778 }
6779
6780 static int
6781 test_snow3g_auth_cipher_part_digest_enc_oop(void)
6782 {
6783         return test_snow3g_auth_cipher(
6784                 &snow3g_auth_cipher_partial_digest_encryption,
6785                         OUT_OF_PLACE, 0);
6786 }
6787
6788 static int
6789 test_snow3g_auth_cipher_test_case_3_sgl(void)
6790 {
6791         /* rte_crypto_mbuf_to_vec does not support incomplete mbuf build */
6792         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
6793                 return TEST_SKIPPED;
6794         return test_snow3g_auth_cipher_sgl(
6795                 &snow3g_auth_cipher_test_case_3, IN_PLACE, 0);
6796 }
6797
6798 static int
6799 test_snow3g_auth_cipher_test_case_3_oop_sgl(void)
6800 {
6801         return test_snow3g_auth_cipher_sgl(
6802                 &snow3g_auth_cipher_test_case_3, OUT_OF_PLACE, 0);
6803 }
6804
6805 static int
6806 test_snow3g_auth_cipher_part_digest_enc_sgl(void)
6807 {
6808         /* rte_crypto_mbuf_to_vec does not support incomplete mbuf build */
6809         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
6810                 return TEST_SKIPPED;
6811         return test_snow3g_auth_cipher_sgl(
6812                 &snow3g_auth_cipher_partial_digest_encryption,
6813                         IN_PLACE, 0);
6814 }
6815
6816 static int
6817 test_snow3g_auth_cipher_part_digest_enc_oop_sgl(void)
6818 {
6819         return test_snow3g_auth_cipher_sgl(
6820                 &snow3g_auth_cipher_partial_digest_encryption,
6821                         OUT_OF_PLACE, 0);
6822 }
6823
6824 static int
6825 test_snow3g_auth_cipher_verify_test_case_1(void)
6826 {
6827         return test_snow3g_auth_cipher(
6828                 &snow3g_auth_cipher_test_case_1, IN_PLACE, 1);
6829 }
6830
6831 static int
6832 test_snow3g_auth_cipher_verify_test_case_2(void)
6833 {
6834         return test_snow3g_auth_cipher(
6835                 &snow3g_auth_cipher_test_case_2, IN_PLACE, 1);
6836 }
6837
6838 static int
6839 test_snow3g_auth_cipher_verify_test_case_2_oop(void)
6840 {
6841         return test_snow3g_auth_cipher(
6842                 &snow3g_auth_cipher_test_case_2, OUT_OF_PLACE, 1);
6843 }
6844
6845 static int
6846 test_snow3g_auth_cipher_verify_part_digest_enc(void)
6847 {
6848         return test_snow3g_auth_cipher(
6849                 &snow3g_auth_cipher_partial_digest_encryption,
6850                         IN_PLACE, 1);
6851 }
6852
6853 static int
6854 test_snow3g_auth_cipher_verify_part_digest_enc_oop(void)
6855 {
6856         return test_snow3g_auth_cipher(
6857                 &snow3g_auth_cipher_partial_digest_encryption,
6858                         OUT_OF_PLACE, 1);
6859 }
6860
6861 static int
6862 test_snow3g_auth_cipher_verify_test_case_3_sgl(void)
6863 {
6864         return test_snow3g_auth_cipher_sgl(
6865                 &snow3g_auth_cipher_test_case_3, IN_PLACE, 1);
6866 }
6867
6868 static int
6869 test_snow3g_auth_cipher_verify_test_case_3_oop_sgl(void)
6870 {
6871         return test_snow3g_auth_cipher_sgl(
6872                 &snow3g_auth_cipher_test_case_3, OUT_OF_PLACE, 1);
6873 }
6874
6875 static int
6876 test_snow3g_auth_cipher_verify_part_digest_enc_sgl(void)
6877 {
6878         return test_snow3g_auth_cipher_sgl(
6879                 &snow3g_auth_cipher_partial_digest_encryption,
6880                         IN_PLACE, 1);
6881 }
6882
6883 static int
6884 test_snow3g_auth_cipher_verify_part_digest_enc_oop_sgl(void)
6885 {
6886         return test_snow3g_auth_cipher_sgl(
6887                 &snow3g_auth_cipher_partial_digest_encryption,
6888                         OUT_OF_PLACE, 1);
6889 }
6890
6891 static int
6892 test_snow3g_auth_cipher_with_digest_test_case_1(void)
6893 {
6894         return test_snow3g_auth_cipher(
6895                 &snow3g_test_case_7, IN_PLACE, 0);
6896 }
6897
6898 static int
6899 test_kasumi_auth_cipher_test_case_1(void)
6900 {
6901         return test_kasumi_auth_cipher(
6902                 &kasumi_test_case_3, IN_PLACE, 0);
6903 }
6904
6905 static int
6906 test_kasumi_auth_cipher_test_case_2(void)
6907 {
6908         return test_kasumi_auth_cipher(
6909                 &kasumi_auth_cipher_test_case_2, IN_PLACE, 0);
6910 }
6911
6912 static int
6913 test_kasumi_auth_cipher_test_case_2_oop(void)
6914 {
6915         return test_kasumi_auth_cipher(
6916                 &kasumi_auth_cipher_test_case_2, OUT_OF_PLACE, 0);
6917 }
6918
6919 static int
6920 test_kasumi_auth_cipher_test_case_2_sgl(void)
6921 {
6922         return test_kasumi_auth_cipher_sgl(
6923                 &kasumi_auth_cipher_test_case_2, IN_PLACE, 0);
6924 }
6925
6926 static int
6927 test_kasumi_auth_cipher_test_case_2_oop_sgl(void)
6928 {
6929         return test_kasumi_auth_cipher_sgl(
6930                 &kasumi_auth_cipher_test_case_2, OUT_OF_PLACE, 0);
6931 }
6932
6933 static int
6934 test_kasumi_auth_cipher_verify_test_case_1(void)
6935 {
6936         return test_kasumi_auth_cipher(
6937                 &kasumi_test_case_3, IN_PLACE, 1);
6938 }
6939
6940 static int
6941 test_kasumi_auth_cipher_verify_test_case_2(void)
6942 {
6943         return test_kasumi_auth_cipher(
6944                 &kasumi_auth_cipher_test_case_2, IN_PLACE, 1);
6945 }
6946
6947 static int
6948 test_kasumi_auth_cipher_verify_test_case_2_oop(void)
6949 {
6950         return test_kasumi_auth_cipher(
6951                 &kasumi_auth_cipher_test_case_2, OUT_OF_PLACE, 1);
6952 }
6953
6954 static int
6955 test_kasumi_auth_cipher_verify_test_case_2_sgl(void)
6956 {
6957         return test_kasumi_auth_cipher_sgl(
6958                 &kasumi_auth_cipher_test_case_2, IN_PLACE, 1);
6959 }
6960
6961 static int
6962 test_kasumi_auth_cipher_verify_test_case_2_oop_sgl(void)
6963 {
6964         return test_kasumi_auth_cipher_sgl(
6965                 &kasumi_auth_cipher_test_case_2, OUT_OF_PLACE, 1);
6966 }
6967
6968 static int
6969 test_kasumi_cipher_auth_test_case_1(void)
6970 {
6971         return test_kasumi_cipher_auth(&kasumi_test_case_6);
6972 }
6973
6974 static int
6975 test_zuc_encryption_test_case_1(void)
6976 {
6977         return test_zuc_encryption(&zuc_test_case_cipher_193b);
6978 }
6979
6980 static int
6981 test_zuc_encryption_test_case_2(void)
6982 {
6983         return test_zuc_encryption(&zuc_test_case_cipher_800b);
6984 }
6985
6986 static int
6987 test_zuc_encryption_test_case_3(void)
6988 {
6989         return test_zuc_encryption(&zuc_test_case_cipher_1570b);
6990 }
6991
6992 static int
6993 test_zuc_encryption_test_case_4(void)
6994 {
6995         return test_zuc_encryption(&zuc_test_case_cipher_2798b);
6996 }
6997
6998 static int
6999 test_zuc_encryption_test_case_5(void)
7000 {
7001         return test_zuc_encryption(&zuc_test_case_cipher_4019b);
7002 }
7003
7004 static int
7005 test_zuc_encryption_test_case_6_sgl(void)
7006 {
7007         return test_zuc_encryption_sgl(&zuc_test_case_cipher_193b);
7008 }
7009
7010 static int
7011 test_zuc_hash_generate_test_case_1(void)
7012 {
7013         return test_zuc_authentication(&zuc_test_case_auth_1b);
7014 }
7015
7016 static int
7017 test_zuc_hash_generate_test_case_2(void)
7018 {
7019         return test_zuc_authentication(&zuc_test_case_auth_90b);
7020 }
7021
7022 static int
7023 test_zuc_hash_generate_test_case_3(void)
7024 {
7025         return test_zuc_authentication(&zuc_test_case_auth_577b);
7026 }
7027
7028 static int
7029 test_zuc_hash_generate_test_case_4(void)
7030 {
7031         return test_zuc_authentication(&zuc_test_case_auth_2079b);
7032 }
7033
7034 static int
7035 test_zuc_hash_generate_test_case_5(void)
7036 {
7037         return test_zuc_authentication(&zuc_test_auth_5670b);
7038 }
7039
7040 static int
7041 test_zuc_hash_generate_test_case_6(void)
7042 {
7043         return test_zuc_authentication(&zuc_test_case_auth_128b);
7044 }
7045
7046 static int
7047 test_zuc_hash_generate_test_case_7(void)
7048 {
7049         return test_zuc_authentication(&zuc_test_case_auth_2080b);
7050 }
7051
7052 static int
7053 test_zuc_hash_generate_test_case_8(void)
7054 {
7055         return test_zuc_authentication(&zuc_test_case_auth_584b);
7056 }
7057
7058 static int
7059 test_zuc_cipher_auth_test_case_1(void)
7060 {
7061         return test_zuc_cipher_auth(&zuc_test_case_cipher_200b_auth_200b);
7062 }
7063
7064 static int
7065 test_zuc_cipher_auth_test_case_2(void)
7066 {
7067         return test_zuc_cipher_auth(&zuc_test_case_cipher_800b_auth_120b);
7068 }
7069
7070 static int
7071 test_zuc_auth_cipher_test_case_1(void)
7072 {
7073         return test_zuc_auth_cipher(
7074                 &zuc_auth_cipher_test_case_1, IN_PLACE, 0);
7075 }
7076
7077 static int
7078 test_zuc_auth_cipher_test_case_1_oop(void)
7079 {
7080         return test_zuc_auth_cipher(
7081                 &zuc_auth_cipher_test_case_1, OUT_OF_PLACE, 0);
7082 }
7083
7084 static int
7085 test_zuc_auth_cipher_test_case_1_sgl(void)
7086 {
7087         return test_zuc_auth_cipher_sgl(
7088                 &zuc_auth_cipher_test_case_1, IN_PLACE, 0);
7089 }
7090
7091 static int
7092 test_zuc_auth_cipher_test_case_1_oop_sgl(void)
7093 {
7094         return test_zuc_auth_cipher_sgl(
7095                 &zuc_auth_cipher_test_case_1, OUT_OF_PLACE, 0);
7096 }
7097
7098 static int
7099 test_zuc_auth_cipher_verify_test_case_1(void)
7100 {
7101         return test_zuc_auth_cipher(
7102                 &zuc_auth_cipher_test_case_1, IN_PLACE, 1);
7103 }
7104
7105 static int
7106 test_zuc_auth_cipher_verify_test_case_1_oop(void)
7107 {
7108         return test_zuc_auth_cipher(
7109                 &zuc_auth_cipher_test_case_1, OUT_OF_PLACE, 1);
7110 }
7111
7112 static int
7113 test_zuc_auth_cipher_verify_test_case_1_sgl(void)
7114 {
7115         return test_zuc_auth_cipher_sgl(
7116                 &zuc_auth_cipher_test_case_1, IN_PLACE, 1);
7117 }
7118
7119 static int
7120 test_zuc_auth_cipher_verify_test_case_1_oop_sgl(void)
7121 {
7122         return test_zuc_auth_cipher_sgl(
7123                 &zuc_auth_cipher_test_case_1, OUT_OF_PLACE, 1);
7124 }
7125
7126 static int
7127 test_mixed_check_if_unsupported(const struct mixed_cipher_auth_test_data *tdata)
7128 {
7129         uint8_t dev_id = testsuite_params.valid_devs[0];
7130
7131         struct rte_cryptodev_sym_capability_idx cap_idx;
7132
7133         /* Check if device supports particular cipher algorithm */
7134         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
7135         cap_idx.algo.cipher = tdata->cipher_algo;
7136         if (rte_cryptodev_sym_capability_get(dev_id, &cap_idx) == NULL)
7137                 return TEST_SKIPPED;
7138
7139         /* Check if device supports particular hash algorithm */
7140         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
7141         cap_idx.algo.auth = tdata->auth_algo;
7142         if (rte_cryptodev_sym_capability_get(dev_id, &cap_idx) == NULL)
7143                 return TEST_SKIPPED;
7144
7145         return 0;
7146 }
7147
7148 static int
7149 test_mixed_auth_cipher(const struct mixed_cipher_auth_test_data *tdata,
7150         uint8_t op_mode, uint8_t verify)
7151 {
7152         struct crypto_testsuite_params *ts_params = &testsuite_params;
7153         struct crypto_unittest_params *ut_params = &unittest_params;
7154
7155         int retval;
7156
7157         uint8_t *plaintext = NULL, *ciphertext = NULL;
7158         unsigned int plaintext_pad_len;
7159         unsigned int plaintext_len;
7160         unsigned int ciphertext_pad_len;
7161         unsigned int ciphertext_len;
7162
7163         struct rte_cryptodev_info dev_info;
7164         struct rte_crypto_op *op;
7165
7166         /* Check if device supports particular algorithms separately */
7167         if (test_mixed_check_if_unsupported(tdata))
7168                 return TEST_SKIPPED;
7169         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
7170                 return TEST_SKIPPED;
7171
7172         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
7173
7174         uint64_t feat_flags = dev_info.feature_flags;
7175
7176         if (!(feat_flags & RTE_CRYPTODEV_FF_DIGEST_ENCRYPTED)) {
7177                 printf("Device doesn't support digest encrypted.\n");
7178                 return TEST_SKIPPED;
7179         }
7180
7181         /* Create the session */
7182         if (verify)
7183                 retval = create_wireless_algo_cipher_auth_session(
7184                                 ts_params->valid_devs[0],
7185                                 RTE_CRYPTO_CIPHER_OP_DECRYPT,
7186                                 RTE_CRYPTO_AUTH_OP_VERIFY,
7187                                 tdata->auth_algo,
7188                                 tdata->cipher_algo,
7189                                 tdata->auth_key.data, tdata->auth_key.len,
7190                                 tdata->auth_iv.len, tdata->digest_enc.len,
7191                                 tdata->cipher_iv.len);
7192         else
7193                 retval = create_wireless_algo_auth_cipher_session(
7194                                 ts_params->valid_devs[0],
7195                                 RTE_CRYPTO_CIPHER_OP_ENCRYPT,
7196                                 RTE_CRYPTO_AUTH_OP_GENERATE,
7197                                 tdata->auth_algo,
7198                                 tdata->cipher_algo,
7199                                 tdata->auth_key.data, tdata->auth_key.len,
7200                                 tdata->auth_iv.len, tdata->digest_enc.len,
7201                                 tdata->cipher_iv.len);
7202         if (retval != 0)
7203                 return retval;
7204
7205         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
7206         if (op_mode == OUT_OF_PLACE)
7207                 ut_params->obuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
7208
7209         /* clear mbuf payload */
7210         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
7211                 rte_pktmbuf_tailroom(ut_params->ibuf));
7212         if (op_mode == OUT_OF_PLACE) {
7213
7214                 memset(rte_pktmbuf_mtod(ut_params->obuf, uint8_t *), 0,
7215                                 rte_pktmbuf_tailroom(ut_params->obuf));
7216         }
7217
7218         ciphertext_len = ceil_byte_length(tdata->ciphertext.len_bits);
7219         plaintext_len = ceil_byte_length(tdata->plaintext.len_bits);
7220         ciphertext_pad_len = RTE_ALIGN_CEIL(ciphertext_len, 16);
7221         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 16);
7222
7223         if (verify) {
7224                 ciphertext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
7225                                 ciphertext_pad_len);
7226                 memcpy(ciphertext, tdata->ciphertext.data, ciphertext_len);
7227                 if (op_mode == OUT_OF_PLACE)
7228                         rte_pktmbuf_append(ut_params->obuf, ciphertext_pad_len);
7229                 debug_hexdump(stdout, "ciphertext:", ciphertext,
7230                                 ciphertext_len);
7231         } else {
7232                 plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
7233                                 plaintext_pad_len);
7234                 memcpy(plaintext, tdata->plaintext.data, plaintext_len);
7235                 if (op_mode == OUT_OF_PLACE)
7236                         rte_pktmbuf_append(ut_params->obuf, plaintext_pad_len);
7237                 debug_hexdump(stdout, "plaintext:", plaintext, plaintext_len);
7238         }
7239
7240         /* Create the operation */
7241         retval = create_wireless_algo_auth_cipher_operation(
7242                         tdata->digest_enc.data, tdata->digest_enc.len,
7243                         tdata->cipher_iv.data, tdata->cipher_iv.len,
7244                         tdata->auth_iv.data, tdata->auth_iv.len,
7245                         (tdata->digest_enc.offset == 0 ?
7246                                 plaintext_pad_len
7247                                 : tdata->digest_enc.offset),
7248                         tdata->validCipherLen.len_bits,
7249                         tdata->cipher.offset_bits,
7250                         tdata->validAuthLen.len_bits,
7251                         tdata->auth.offset_bits,
7252                         op_mode, 0, verify);
7253
7254         if (retval < 0)
7255                 return retval;
7256
7257         op = process_crypto_request(ts_params->valid_devs[0], ut_params->op);
7258
7259         /* Check if the op failed because the device doesn't */
7260         /* support this particular combination of algorithms */
7261         if (op == NULL && ut_params->op->status ==
7262                         RTE_CRYPTO_OP_STATUS_INVALID_SESSION) {
7263                 printf("Device doesn't support this mixed combination. "
7264                                 "Test Skipped.\n");
7265                 return TEST_SKIPPED;
7266         }
7267         ut_params->op = op;
7268
7269         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
7270
7271         ut_params->obuf = (op_mode == IN_PLACE ?
7272                         ut_params->op->sym->m_src : ut_params->op->sym->m_dst);
7273
7274         if (verify) {
7275                 if (ut_params->obuf)
7276                         plaintext = rte_pktmbuf_mtod(ut_params->obuf,
7277                                                         uint8_t *);
7278                 else
7279                         plaintext = ciphertext +
7280                                         (tdata->cipher.offset_bits >> 3);
7281
7282                 debug_hexdump(stdout, "plaintext:", plaintext,
7283                                 tdata->plaintext.len_bits >> 3);
7284                 debug_hexdump(stdout, "plaintext expected:",
7285                                 tdata->plaintext.data,
7286                                 tdata->plaintext.len_bits >> 3);
7287         } else {
7288                 if (ut_params->obuf)
7289                         ciphertext = rte_pktmbuf_mtod(ut_params->obuf,
7290                                         uint8_t *);
7291                 else
7292                         ciphertext = plaintext;
7293
7294                 debug_hexdump(stdout, "ciphertext:", ciphertext,
7295                                 ciphertext_len);
7296                 debug_hexdump(stdout, "ciphertext expected:",
7297                                 tdata->ciphertext.data,
7298                                 tdata->ciphertext.len_bits >> 3);
7299
7300                 ut_params->digest = rte_pktmbuf_mtod(ut_params->obuf, uint8_t *)
7301                                 + (tdata->digest_enc.offset == 0 ?
7302                 plaintext_pad_len : tdata->digest_enc.offset);
7303
7304                 debug_hexdump(stdout, "digest:", ut_params->digest,
7305                                 tdata->digest_enc.len);
7306                 debug_hexdump(stdout, "digest expected:",
7307                                 tdata->digest_enc.data,
7308                                 tdata->digest_enc.len);
7309         }
7310
7311         /* Validate obuf */
7312         if (verify) {
7313                 TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
7314                                 plaintext,
7315                                 tdata->plaintext.data,
7316                                 tdata->plaintext.len_bits >> 3,
7317                                 "Plaintext data not as expected");
7318         } else {
7319                 TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
7320                                 ciphertext,
7321                                 tdata->ciphertext.data,
7322                                 tdata->validDataLen.len_bits,
7323                                 "Ciphertext data not as expected");
7324
7325                 TEST_ASSERT_BUFFERS_ARE_EQUAL(
7326                                 ut_params->digest,
7327                                 tdata->digest_enc.data,
7328                                 DIGEST_BYTE_LENGTH_SNOW3G_UIA2,
7329                                 "Generated auth tag not as expected");
7330         }
7331
7332         TEST_ASSERT_EQUAL(ut_params->op->status, RTE_CRYPTO_OP_STATUS_SUCCESS,
7333                         "crypto op processing failed");
7334
7335         return 0;
7336 }
7337
7338 static int
7339 test_mixed_auth_cipher_sgl(const struct mixed_cipher_auth_test_data *tdata,
7340         uint8_t op_mode, uint8_t verify)
7341 {
7342         struct crypto_testsuite_params *ts_params = &testsuite_params;
7343         struct crypto_unittest_params *ut_params = &unittest_params;
7344
7345         int retval;
7346
7347         const uint8_t *plaintext = NULL;
7348         const uint8_t *ciphertext = NULL;
7349         const uint8_t *digest = NULL;
7350         unsigned int plaintext_pad_len;
7351         unsigned int plaintext_len;
7352         unsigned int ciphertext_pad_len;
7353         unsigned int ciphertext_len;
7354         uint8_t buffer[10000];
7355         uint8_t digest_buffer[10000];
7356
7357         struct rte_cryptodev_info dev_info;
7358         struct rte_crypto_op *op;
7359
7360         /* Check if device supports particular algorithms */
7361         if (test_mixed_check_if_unsupported(tdata))
7362                 return TEST_SKIPPED;
7363         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
7364                 return TEST_SKIPPED;
7365
7366         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
7367
7368         uint64_t feat_flags = dev_info.feature_flags;
7369
7370         if (op_mode == IN_PLACE) {
7371                 if (!(feat_flags & RTE_CRYPTODEV_FF_IN_PLACE_SGL)) {
7372                         printf("Device doesn't support in-place scatter-gather "
7373                                         "in both input and output mbufs.\n");
7374                         return TEST_SKIPPED;
7375                 }
7376         } else {
7377                 if (!(feat_flags & RTE_CRYPTODEV_FF_OOP_SGL_IN_SGL_OUT)) {
7378                         printf("Device doesn't support out-of-place scatter-gather "
7379                                         "in both input and output mbufs.\n");
7380                         return TEST_SKIPPED;
7381                 }
7382                 if (!(feat_flags & RTE_CRYPTODEV_FF_DIGEST_ENCRYPTED)) {
7383                         printf("Device doesn't support digest encrypted.\n");
7384                         return TEST_SKIPPED;
7385                 }
7386         }
7387
7388         /* Create the session */
7389         if (verify)
7390                 retval = create_wireless_algo_cipher_auth_session(
7391                                 ts_params->valid_devs[0],
7392                                 RTE_CRYPTO_CIPHER_OP_DECRYPT,
7393                                 RTE_CRYPTO_AUTH_OP_VERIFY,
7394                                 tdata->auth_algo,
7395                                 tdata->cipher_algo,
7396                                 tdata->auth_key.data, tdata->auth_key.len,
7397                                 tdata->auth_iv.len, tdata->digest_enc.len,
7398                                 tdata->cipher_iv.len);
7399         else
7400                 retval = create_wireless_algo_auth_cipher_session(
7401                                 ts_params->valid_devs[0],
7402                                 RTE_CRYPTO_CIPHER_OP_ENCRYPT,
7403                                 RTE_CRYPTO_AUTH_OP_GENERATE,
7404                                 tdata->auth_algo,
7405                                 tdata->cipher_algo,
7406                                 tdata->auth_key.data, tdata->auth_key.len,
7407                                 tdata->auth_iv.len, tdata->digest_enc.len,
7408                                 tdata->cipher_iv.len);
7409         if (retval != 0)
7410                 return retval;
7411
7412         ciphertext_len = ceil_byte_length(tdata->ciphertext.len_bits);
7413         plaintext_len = ceil_byte_length(tdata->plaintext.len_bits);
7414         ciphertext_pad_len = RTE_ALIGN_CEIL(ciphertext_len, 16);
7415         plaintext_pad_len = RTE_ALIGN_CEIL(plaintext_len, 16);
7416
7417         ut_params->ibuf = create_segmented_mbuf(ts_params->mbuf_pool,
7418                         ciphertext_pad_len, 15, 0);
7419         TEST_ASSERT_NOT_NULL(ut_params->ibuf,
7420                         "Failed to allocate input buffer in mempool");
7421
7422         if (op_mode == OUT_OF_PLACE) {
7423                 ut_params->obuf = create_segmented_mbuf(ts_params->mbuf_pool,
7424                                 plaintext_pad_len, 15, 0);
7425                 TEST_ASSERT_NOT_NULL(ut_params->obuf,
7426                                 "Failed to allocate output buffer in mempool");
7427         }
7428
7429         if (verify) {
7430                 pktmbuf_write(ut_params->ibuf, 0, ciphertext_len,
7431                         tdata->ciphertext.data);
7432                 ciphertext = rte_pktmbuf_read(ut_params->ibuf, 0,
7433                                         ciphertext_len, buffer);
7434                 debug_hexdump(stdout, "ciphertext:", ciphertext,
7435                         ciphertext_len);
7436         } else {
7437                 pktmbuf_write(ut_params->ibuf, 0, plaintext_len,
7438                         tdata->plaintext.data);
7439                 plaintext = rte_pktmbuf_read(ut_params->ibuf, 0,
7440                                         plaintext_len, buffer);
7441                 debug_hexdump(stdout, "plaintext:", plaintext,
7442                         plaintext_len);
7443         }
7444         memset(buffer, 0, sizeof(buffer));
7445
7446         /* Create the operation */
7447         retval = create_wireless_algo_auth_cipher_operation(
7448                         tdata->digest_enc.data, tdata->digest_enc.len,
7449                         tdata->cipher_iv.data, tdata->cipher_iv.len,
7450                         tdata->auth_iv.data, tdata->auth_iv.len,
7451                         (tdata->digest_enc.offset == 0 ?
7452                                 plaintext_pad_len
7453                                 : tdata->digest_enc.offset),
7454                         tdata->validCipherLen.len_bits,
7455                         tdata->cipher.offset_bits,
7456                         tdata->validAuthLen.len_bits,
7457                         tdata->auth.offset_bits,
7458                         op_mode, 1, verify);
7459
7460         if (retval < 0)
7461                 return retval;
7462
7463         op = process_crypto_request(ts_params->valid_devs[0], ut_params->op);
7464
7465         /* Check if the op failed because the device doesn't */
7466         /* support this particular combination of algorithms */
7467         if (op == NULL && ut_params->op->status ==
7468                         RTE_CRYPTO_OP_STATUS_INVALID_SESSION) {
7469                 printf("Device doesn't support this mixed combination. "
7470                                 "Test Skipped.\n");
7471                 return TEST_SKIPPED;
7472         }
7473         ut_params->op = op;
7474
7475         TEST_ASSERT_NOT_NULL(ut_params->op, "failed to retrieve obuf");
7476
7477         ut_params->obuf = (op_mode == IN_PLACE ?
7478                         ut_params->op->sym->m_src : ut_params->op->sym->m_dst);
7479
7480         if (verify) {
7481                 if (ut_params->obuf)
7482                         plaintext = rte_pktmbuf_read(ut_params->obuf, 0,
7483                                         plaintext_len, buffer);
7484                 else
7485                         plaintext = rte_pktmbuf_read(ut_params->ibuf, 0,
7486                                         plaintext_len, buffer);
7487
7488                 debug_hexdump(stdout, "plaintext:", plaintext,
7489                                 (tdata->plaintext.len_bits >> 3) -
7490                                 tdata->digest_enc.len);
7491                 debug_hexdump(stdout, "plaintext expected:",
7492                                 tdata->plaintext.data,
7493                                 (tdata->plaintext.len_bits >> 3) -
7494                                 tdata->digest_enc.len);
7495         } else {
7496                 if (ut_params->obuf)
7497                         ciphertext = rte_pktmbuf_read(ut_params->obuf, 0,
7498                                         ciphertext_len, buffer);
7499                 else
7500                         ciphertext = rte_pktmbuf_read(ut_params->ibuf, 0,
7501                                         ciphertext_len, buffer);
7502
7503                 debug_hexdump(stdout, "ciphertext:", ciphertext,
7504                         ciphertext_len);
7505                 debug_hexdump(stdout, "ciphertext expected:",
7506                         tdata->ciphertext.data,
7507                         tdata->ciphertext.len_bits >> 3);
7508
7509                 if (ut_params->obuf)
7510                         digest = rte_pktmbuf_read(ut_params->obuf,
7511                                         (tdata->digest_enc.offset == 0 ?
7512                                                 plaintext_pad_len :
7513                                                 tdata->digest_enc.offset),
7514                                         tdata->digest_enc.len, digest_buffer);
7515                 else
7516                         digest = rte_pktmbuf_read(ut_params->ibuf,
7517                                         (tdata->digest_enc.offset == 0 ?
7518                                                 plaintext_pad_len :
7519                                                 tdata->digest_enc.offset),
7520                                         tdata->digest_enc.len, digest_buffer);
7521
7522                 debug_hexdump(stdout, "digest:", digest,
7523                                 tdata->digest_enc.len);
7524                 debug_hexdump(stdout, "digest expected:",
7525                                 tdata->digest_enc.data, tdata->digest_enc.len);
7526         }
7527
7528         /* Validate obuf */
7529         if (verify) {
7530                 TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
7531                                 plaintext,
7532                                 tdata->plaintext.data,
7533                                 tdata->plaintext.len_bits >> 3,
7534                                 "Plaintext data not as expected");
7535         } else {
7536                 TEST_ASSERT_BUFFERS_ARE_EQUAL_BIT(
7537                                 ciphertext,
7538                                 tdata->ciphertext.data,
7539                                 tdata->validDataLen.len_bits,
7540                                 "Ciphertext data not as expected");
7541                 TEST_ASSERT_BUFFERS_ARE_EQUAL(
7542                                 digest,
7543                                 tdata->digest_enc.data,
7544                                 tdata->digest_enc.len,
7545                                 "Generated auth tag not as expected");
7546         }
7547
7548         TEST_ASSERT_EQUAL(ut_params->op->status, RTE_CRYPTO_OP_STATUS_SUCCESS,
7549                         "crypto op processing failed");
7550
7551         return 0;
7552 }
7553
7554 /** AUTH AES CMAC + CIPHER AES CTR */
7555
7556 static int
7557 test_aes_cmac_aes_ctr_digest_enc_test_case_1(void)
7558 {
7559         return test_mixed_auth_cipher(
7560                 &auth_aes_cmac_cipher_aes_ctr_test_case_1, IN_PLACE, 0);
7561 }
7562
7563 static int
7564 test_aes_cmac_aes_ctr_digest_enc_test_case_1_oop(void)
7565 {
7566         return test_mixed_auth_cipher(
7567                 &auth_aes_cmac_cipher_aes_ctr_test_case_1, OUT_OF_PLACE, 0);
7568 }
7569
7570 static int
7571 test_aes_cmac_aes_ctr_digest_enc_test_case_1_sgl(void)
7572 {
7573         return test_mixed_auth_cipher_sgl(
7574                 &auth_aes_cmac_cipher_aes_ctr_test_case_1, IN_PLACE, 0);
7575 }
7576
7577 static int
7578 test_aes_cmac_aes_ctr_digest_enc_test_case_1_oop_sgl(void)
7579 {
7580         return test_mixed_auth_cipher_sgl(
7581                 &auth_aes_cmac_cipher_aes_ctr_test_case_1, OUT_OF_PLACE, 0);
7582 }
7583
7584 static int
7585 test_verify_aes_cmac_aes_ctr_digest_enc_test_case_1(void)
7586 {
7587         return test_mixed_auth_cipher(
7588                 &auth_aes_cmac_cipher_aes_ctr_test_case_1, IN_PLACE, 1);
7589 }
7590
7591 static int
7592 test_verify_aes_cmac_aes_ctr_digest_enc_test_case_1_oop(void)
7593 {
7594         return test_mixed_auth_cipher(
7595                 &auth_aes_cmac_cipher_aes_ctr_test_case_1, OUT_OF_PLACE, 1);
7596 }
7597
7598 static int
7599 test_verify_aes_cmac_aes_ctr_digest_enc_test_case_1_sgl(void)
7600 {
7601         return test_mixed_auth_cipher_sgl(
7602                 &auth_aes_cmac_cipher_aes_ctr_test_case_1, IN_PLACE, 1);
7603 }
7604
7605 static int
7606 test_verify_aes_cmac_aes_ctr_digest_enc_test_case_1_oop_sgl(void)
7607 {
7608         return test_mixed_auth_cipher_sgl(
7609                 &auth_aes_cmac_cipher_aes_ctr_test_case_1, OUT_OF_PLACE, 1);
7610 }
7611
7612 /** MIXED AUTH + CIPHER */
7613
7614 static int
7615 test_auth_zuc_cipher_snow_test_case_1(void)
7616 {
7617         return test_mixed_auth_cipher(
7618                 &auth_zuc_cipher_snow_test_case_1, OUT_OF_PLACE, 0);
7619 }
7620
7621 static int
7622 test_verify_auth_zuc_cipher_snow_test_case_1(void)
7623 {
7624         return test_mixed_auth_cipher(
7625                 &auth_zuc_cipher_snow_test_case_1, OUT_OF_PLACE, 1);
7626 }
7627
7628 static int
7629 test_auth_aes_cmac_cipher_snow_test_case_1(void)
7630 {
7631         return test_mixed_auth_cipher(
7632                 &auth_aes_cmac_cipher_snow_test_case_1, OUT_OF_PLACE, 0);
7633 }
7634
7635 static int
7636 test_verify_auth_aes_cmac_cipher_snow_test_case_1(void)
7637 {
7638         return test_mixed_auth_cipher(
7639                 &auth_aes_cmac_cipher_snow_test_case_1, OUT_OF_PLACE, 1);
7640 }
7641
7642 static int
7643 test_auth_zuc_cipher_aes_ctr_test_case_1(void)
7644 {
7645         return test_mixed_auth_cipher(
7646                 &auth_zuc_cipher_aes_ctr_test_case_1, OUT_OF_PLACE, 0);
7647 }
7648
7649 static int
7650 test_verify_auth_zuc_cipher_aes_ctr_test_case_1(void)
7651 {
7652         return test_mixed_auth_cipher(
7653                 &auth_zuc_cipher_aes_ctr_test_case_1, OUT_OF_PLACE, 1);
7654 }
7655
7656 static int
7657 test_auth_snow_cipher_aes_ctr_test_case_1(void)
7658 {
7659         return test_mixed_auth_cipher(
7660                 &auth_snow_cipher_aes_ctr_test_case_1, OUT_OF_PLACE, 0);
7661 }
7662
7663 static int
7664 test_verify_auth_snow_cipher_aes_ctr_test_case_1(void)
7665 {
7666         return test_mixed_auth_cipher(
7667                 &auth_snow_cipher_aes_ctr_test_case_1, OUT_OF_PLACE, 1);
7668 }
7669
7670 static int
7671 test_auth_snow_cipher_zuc_test_case_1(void)
7672 {
7673         return test_mixed_auth_cipher(
7674                 &auth_snow_cipher_zuc_test_case_1, OUT_OF_PLACE, 0);
7675 }
7676
7677 static int
7678 test_verify_auth_snow_cipher_zuc_test_case_1(void)
7679 {
7680         return test_mixed_auth_cipher(
7681                 &auth_snow_cipher_zuc_test_case_1, OUT_OF_PLACE, 1);
7682 }
7683
7684 static int
7685 test_auth_aes_cmac_cipher_zuc_test_case_1(void)
7686 {
7687         return test_mixed_auth_cipher(
7688                 &auth_aes_cmac_cipher_zuc_test_case_1, OUT_OF_PLACE, 0);
7689 }
7690
7691 static int
7692 test_verify_auth_aes_cmac_cipher_zuc_test_case_1(void)
7693 {
7694         return test_mixed_auth_cipher(
7695                 &auth_aes_cmac_cipher_zuc_test_case_1, OUT_OF_PLACE, 1);
7696 }
7697
7698 static int
7699 test_auth_null_cipher_snow_test_case_1(void)
7700 {
7701         return test_mixed_auth_cipher(
7702                 &auth_null_cipher_snow_test_case_1, OUT_OF_PLACE, 0);
7703 }
7704
7705 static int
7706 test_verify_auth_null_cipher_snow_test_case_1(void)
7707 {
7708         return test_mixed_auth_cipher(
7709                 &auth_null_cipher_snow_test_case_1, OUT_OF_PLACE, 1);
7710 }
7711
7712 static int
7713 test_auth_null_cipher_zuc_test_case_1(void)
7714 {
7715         return test_mixed_auth_cipher(
7716                 &auth_null_cipher_zuc_test_case_1, OUT_OF_PLACE, 0);
7717 }
7718
7719 static int
7720 test_verify_auth_null_cipher_zuc_test_case_1(void)
7721 {
7722         return test_mixed_auth_cipher(
7723                 &auth_null_cipher_zuc_test_case_1, OUT_OF_PLACE, 1);
7724 }
7725
7726 static int
7727 test_auth_snow_cipher_null_test_case_1(void)
7728 {
7729         return test_mixed_auth_cipher(
7730                 &auth_snow_cipher_null_test_case_1, OUT_OF_PLACE, 0);
7731 }
7732
7733 static int
7734 test_verify_auth_snow_cipher_null_test_case_1(void)
7735 {
7736         return test_mixed_auth_cipher(
7737                 &auth_snow_cipher_null_test_case_1, OUT_OF_PLACE, 1);
7738 }
7739
7740 static int
7741 test_auth_zuc_cipher_null_test_case_1(void)
7742 {
7743         return test_mixed_auth_cipher(
7744                 &auth_zuc_cipher_null_test_case_1, OUT_OF_PLACE, 0);
7745 }
7746
7747 static int
7748 test_verify_auth_zuc_cipher_null_test_case_1(void)
7749 {
7750         return test_mixed_auth_cipher(
7751                 &auth_zuc_cipher_null_test_case_1, OUT_OF_PLACE, 1);
7752 }
7753
7754 static int
7755 test_auth_null_cipher_aes_ctr_test_case_1(void)
7756 {
7757         return test_mixed_auth_cipher(
7758                 &auth_null_cipher_aes_ctr_test_case_1, OUT_OF_PLACE, 0);
7759 }
7760
7761 static int
7762 test_verify_auth_null_cipher_aes_ctr_test_case_1(void)
7763 {
7764         return test_mixed_auth_cipher(
7765                 &auth_null_cipher_aes_ctr_test_case_1, OUT_OF_PLACE, 1);
7766 }
7767
7768 static int
7769 test_auth_aes_cmac_cipher_null_test_case_1(void)
7770 {
7771         return test_mixed_auth_cipher(
7772                 &auth_aes_cmac_cipher_null_test_case_1, OUT_OF_PLACE, 0);
7773 }
7774
7775 static int
7776 test_verify_auth_aes_cmac_cipher_null_test_case_1(void)
7777 {
7778         return test_mixed_auth_cipher(
7779                 &auth_aes_cmac_cipher_null_test_case_1, OUT_OF_PLACE, 1);
7780 }
7781
7782 /* ***** AEAD algorithm Tests ***** */
7783
7784 static int
7785 create_aead_session(uint8_t dev_id, enum rte_crypto_aead_algorithm algo,
7786                 enum rte_crypto_aead_operation op,
7787                 const uint8_t *key, const uint8_t key_len,
7788                 const uint16_t aad_len, const uint8_t auth_len,
7789                 uint8_t iv_len)
7790 {
7791         uint8_t aead_key[key_len];
7792
7793         struct crypto_testsuite_params *ts_params = &testsuite_params;
7794         struct crypto_unittest_params *ut_params = &unittest_params;
7795
7796         memcpy(aead_key, key, key_len);
7797
7798         /* Setup AEAD Parameters */
7799         ut_params->aead_xform.type = RTE_CRYPTO_SYM_XFORM_AEAD;
7800         ut_params->aead_xform.next = NULL;
7801         ut_params->aead_xform.aead.algo = algo;
7802         ut_params->aead_xform.aead.op = op;
7803         ut_params->aead_xform.aead.key.data = aead_key;
7804         ut_params->aead_xform.aead.key.length = key_len;
7805         ut_params->aead_xform.aead.iv.offset = IV_OFFSET;
7806         ut_params->aead_xform.aead.iv.length = iv_len;
7807         ut_params->aead_xform.aead.digest_length = auth_len;
7808         ut_params->aead_xform.aead.aad_length = aad_len;
7809
7810         debug_hexdump(stdout, "key:", key, key_len);
7811
7812         /* Create Crypto session*/
7813         ut_params->sess = rte_cryptodev_sym_session_create(
7814                         ts_params->session_mpool);
7815
7816         rte_cryptodev_sym_session_init(dev_id, ut_params->sess,
7817                         &ut_params->aead_xform,
7818                         ts_params->session_priv_mpool);
7819
7820         TEST_ASSERT_NOT_NULL(ut_params->sess, "Session creation failed");
7821
7822         return 0;
7823 }
7824
7825 static int
7826 create_aead_xform(struct rte_crypto_op *op,
7827                 enum rte_crypto_aead_algorithm algo,
7828                 enum rte_crypto_aead_operation aead_op,
7829                 uint8_t *key, const uint8_t key_len,
7830                 const uint8_t aad_len, const uint8_t auth_len,
7831                 uint8_t iv_len)
7832 {
7833         TEST_ASSERT_NOT_NULL(rte_crypto_op_sym_xforms_alloc(op, 1),
7834                         "failed to allocate space for crypto transform");
7835
7836         struct rte_crypto_sym_op *sym_op = op->sym;
7837
7838         /* Setup AEAD Parameters */
7839         sym_op->xform->type = RTE_CRYPTO_SYM_XFORM_AEAD;
7840         sym_op->xform->next = NULL;
7841         sym_op->xform->aead.algo = algo;
7842         sym_op->xform->aead.op = aead_op;
7843         sym_op->xform->aead.key.data = key;
7844         sym_op->xform->aead.key.length = key_len;
7845         sym_op->xform->aead.iv.offset = IV_OFFSET;
7846         sym_op->xform->aead.iv.length = iv_len;
7847         sym_op->xform->aead.digest_length = auth_len;
7848         sym_op->xform->aead.aad_length = aad_len;
7849
7850         debug_hexdump(stdout, "key:", key, key_len);
7851
7852         return 0;
7853 }
7854
7855 static int
7856 create_aead_operation(enum rte_crypto_aead_operation op,
7857                 const struct aead_test_data *tdata)
7858 {
7859         struct crypto_testsuite_params *ts_params = &testsuite_params;
7860         struct crypto_unittest_params *ut_params = &unittest_params;
7861
7862         uint8_t *plaintext, *ciphertext;
7863         unsigned int aad_pad_len, plaintext_pad_len;
7864
7865         /* Generate Crypto op data structure */
7866         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
7867                         RTE_CRYPTO_OP_TYPE_SYMMETRIC);
7868         TEST_ASSERT_NOT_NULL(ut_params->op,
7869                         "Failed to allocate symmetric crypto operation struct");
7870
7871         struct rte_crypto_sym_op *sym_op = ut_params->op->sym;
7872
7873         /* Append aad data */
7874         if (tdata->algo == RTE_CRYPTO_AEAD_AES_CCM) {
7875                 aad_pad_len = RTE_ALIGN_CEIL(tdata->aad.len + 18, 16);
7876                 sym_op->aead.aad.data = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
7877                                 aad_pad_len);
7878                 TEST_ASSERT_NOT_NULL(sym_op->aead.aad.data,
7879                                 "no room to append aad");
7880
7881                 sym_op->aead.aad.phys_addr =
7882                                 rte_pktmbuf_iova(ut_params->ibuf);
7883                 /* Copy AAD 18 bytes after the AAD pointer, according to the API */
7884                 memcpy(sym_op->aead.aad.data + 18, tdata->aad.data, tdata->aad.len);
7885                 debug_hexdump(stdout, "aad:", sym_op->aead.aad.data,
7886                         tdata->aad.len);
7887
7888                 /* Append IV at the end of the crypto operation*/
7889                 uint8_t *iv_ptr = rte_crypto_op_ctod_offset(ut_params->op,
7890                                 uint8_t *, IV_OFFSET);
7891
7892                 /* Copy IV 1 byte after the IV pointer, according to the API */
7893                 rte_memcpy(iv_ptr + 1, tdata->iv.data, tdata->iv.len);
7894                 debug_hexdump(stdout, "iv:", iv_ptr,
7895                         tdata->iv.len);
7896         } else {
7897                 aad_pad_len = RTE_ALIGN_CEIL(tdata->aad.len, 16);
7898                 sym_op->aead.aad.data = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
7899                                 aad_pad_len);
7900                 TEST_ASSERT_NOT_NULL(sym_op->aead.aad.data,
7901                                 "no room to append aad");
7902
7903                 sym_op->aead.aad.phys_addr =
7904                                 rte_pktmbuf_iova(ut_params->ibuf);
7905                 memcpy(sym_op->aead.aad.data, tdata->aad.data, tdata->aad.len);
7906                 debug_hexdump(stdout, "aad:", sym_op->aead.aad.data,
7907                         tdata->aad.len);
7908
7909                 /* Append IV at the end of the crypto operation*/
7910                 uint8_t *iv_ptr = rte_crypto_op_ctod_offset(ut_params->op,
7911                                 uint8_t *, IV_OFFSET);
7912
7913                 if (tdata->iv.len == 0) {
7914                         rte_memcpy(iv_ptr, tdata->iv.data, AES_GCM_J0_LENGTH);
7915                         debug_hexdump(stdout, "iv:", iv_ptr,
7916                                 AES_GCM_J0_LENGTH);
7917                 } else {
7918                         rte_memcpy(iv_ptr, tdata->iv.data, tdata->iv.len);
7919                         debug_hexdump(stdout, "iv:", iv_ptr,
7920                                 tdata->iv.len);
7921                 }
7922         }
7923
7924         /* Append plaintext/ciphertext */
7925         if (op == RTE_CRYPTO_AEAD_OP_ENCRYPT) {
7926                 plaintext_pad_len = RTE_ALIGN_CEIL(tdata->plaintext.len, 16);
7927                 plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
7928                                 plaintext_pad_len);
7929                 TEST_ASSERT_NOT_NULL(plaintext, "no room to append plaintext");
7930
7931                 memcpy(plaintext, tdata->plaintext.data, tdata->plaintext.len);
7932                 debug_hexdump(stdout, "plaintext:", plaintext,
7933                                 tdata->plaintext.len);
7934
7935                 if (ut_params->obuf) {
7936                         ciphertext = (uint8_t *)rte_pktmbuf_append(
7937                                         ut_params->obuf,
7938                                         plaintext_pad_len + aad_pad_len);
7939                         TEST_ASSERT_NOT_NULL(ciphertext,
7940                                         "no room to append ciphertext");
7941
7942                         memset(ciphertext + aad_pad_len, 0,
7943                                         tdata->ciphertext.len);
7944                 }
7945         } else {
7946                 plaintext_pad_len = RTE_ALIGN_CEIL(tdata->ciphertext.len, 16);
7947                 ciphertext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
7948                                 plaintext_pad_len);
7949                 TEST_ASSERT_NOT_NULL(ciphertext,
7950                                 "no room to append ciphertext");
7951
7952                 memcpy(ciphertext, tdata->ciphertext.data,
7953                                 tdata->ciphertext.len);
7954                 debug_hexdump(stdout, "ciphertext:", ciphertext,
7955                                 tdata->ciphertext.len);
7956
7957                 if (ut_params->obuf) {
7958                         plaintext = (uint8_t *)rte_pktmbuf_append(
7959                                         ut_params->obuf,
7960                                         plaintext_pad_len + aad_pad_len);
7961                         TEST_ASSERT_NOT_NULL(plaintext,
7962                                         "no room to append plaintext");
7963
7964                         memset(plaintext + aad_pad_len, 0,
7965                                         tdata->plaintext.len);
7966                 }
7967         }
7968
7969         /* Append digest data */
7970         if (op == RTE_CRYPTO_AEAD_OP_ENCRYPT) {
7971                 sym_op->aead.digest.data = (uint8_t *)rte_pktmbuf_append(
7972                                 ut_params->obuf ? ut_params->obuf :
7973                                                 ut_params->ibuf,
7974                                                 tdata->auth_tag.len);
7975                 TEST_ASSERT_NOT_NULL(sym_op->aead.digest.data,
7976                                 "no room to append digest");
7977                 memset(sym_op->aead.digest.data, 0, tdata->auth_tag.len);
7978                 sym_op->aead.digest.phys_addr = rte_pktmbuf_iova_offset(
7979                                 ut_params->obuf ? ut_params->obuf :
7980                                                 ut_params->ibuf,
7981                                                 plaintext_pad_len +
7982                                                 aad_pad_len);
7983         } else {
7984                 sym_op->aead.digest.data = (uint8_t *)rte_pktmbuf_append(
7985                                 ut_params->ibuf, tdata->auth_tag.len);
7986                 TEST_ASSERT_NOT_NULL(sym_op->aead.digest.data,
7987                                 "no room to append digest");
7988                 sym_op->aead.digest.phys_addr = rte_pktmbuf_iova_offset(
7989                                 ut_params->ibuf,
7990                                 plaintext_pad_len + aad_pad_len);
7991
7992                 rte_memcpy(sym_op->aead.digest.data, tdata->auth_tag.data,
7993                         tdata->auth_tag.len);
7994                 debug_hexdump(stdout, "digest:",
7995                         sym_op->aead.digest.data,
7996                         tdata->auth_tag.len);
7997         }
7998
7999         sym_op->aead.data.length = tdata->plaintext.len;
8000         sym_op->aead.data.offset = aad_pad_len;
8001
8002         return 0;
8003 }
8004
8005 static int
8006 test_authenticated_encryption(const struct aead_test_data *tdata)
8007 {
8008         struct crypto_testsuite_params *ts_params = &testsuite_params;
8009         struct crypto_unittest_params *ut_params = &unittest_params;
8010
8011         int retval;
8012         uint8_t *ciphertext, *auth_tag;
8013         uint16_t plaintext_pad_len;
8014         uint32_t i;
8015         struct rte_cryptodev_info dev_info;
8016
8017         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
8018         uint64_t feat_flags = dev_info.feature_flags;
8019
8020         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
8021                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
8022                 printf("Device doesn't support RAW data-path APIs.\n");
8023                 return TEST_SKIPPED;
8024         }
8025
8026         /* Verify the capabilities */
8027         struct rte_cryptodev_sym_capability_idx cap_idx;
8028         const struct rte_cryptodev_symmetric_capability *capability;
8029         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AEAD;
8030         cap_idx.algo.aead = tdata->algo;
8031         capability = rte_cryptodev_sym_capability_get(
8032                         ts_params->valid_devs[0], &cap_idx);
8033         if (capability == NULL)
8034                 return TEST_SKIPPED;
8035         if (rte_cryptodev_sym_capability_check_aead(
8036                         capability, tdata->key.len, tdata->auth_tag.len,
8037                         tdata->aad.len, tdata->iv.len))
8038                 return TEST_SKIPPED;
8039
8040         /* Create AEAD session */
8041         retval = create_aead_session(ts_params->valid_devs[0],
8042                         tdata->algo,
8043                         RTE_CRYPTO_AEAD_OP_ENCRYPT,
8044                         tdata->key.data, tdata->key.len,
8045                         tdata->aad.len, tdata->auth_tag.len,
8046                         tdata->iv.len);
8047         if (retval < 0)
8048                 return retval;
8049
8050         if (tdata->aad.len > MBUF_SIZE) {
8051                 ut_params->ibuf = rte_pktmbuf_alloc(ts_params->large_mbuf_pool);
8052                 /* Populate full size of add data */
8053                 for (i = 32; i < MAX_AAD_LENGTH; i += 32)
8054                         memcpy(&tdata->aad.data[i], &tdata->aad.data[0], 32);
8055         } else
8056                 ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
8057
8058         /* clear mbuf payload */
8059         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
8060                         rte_pktmbuf_tailroom(ut_params->ibuf));
8061
8062         /* Create AEAD operation */
8063         retval = create_aead_operation(RTE_CRYPTO_AEAD_OP_ENCRYPT, tdata);
8064         if (retval < 0)
8065                 return retval;
8066
8067         rte_crypto_op_attach_sym_session(ut_params->op, ut_params->sess);
8068
8069         ut_params->op->sym->m_src = ut_params->ibuf;
8070
8071         /* Process crypto operation */
8072         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
8073                 process_cpu_aead_op(ts_params->valid_devs[0], ut_params->op);
8074         else if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
8075                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
8076                                 ut_params->op, 0, 0, 0, 0);
8077         else
8078                 TEST_ASSERT_NOT_NULL(
8079                         process_crypto_request(ts_params->valid_devs[0],
8080                         ut_params->op), "failed to process sym crypto op");
8081
8082         TEST_ASSERT_EQUAL(ut_params->op->status, RTE_CRYPTO_OP_STATUS_SUCCESS,
8083                         "crypto op processing failed");
8084
8085         plaintext_pad_len = RTE_ALIGN_CEIL(tdata->plaintext.len, 16);
8086
8087         if (ut_params->op->sym->m_dst) {
8088                 ciphertext = rte_pktmbuf_mtod(ut_params->op->sym->m_dst,
8089                                 uint8_t *);
8090                 auth_tag = rte_pktmbuf_mtod_offset(ut_params->op->sym->m_dst,
8091                                 uint8_t *, plaintext_pad_len);
8092         } else {
8093                 ciphertext = rte_pktmbuf_mtod_offset(ut_params->op->sym->m_src,
8094                                 uint8_t *,
8095                                 ut_params->op->sym->cipher.data.offset);
8096                 auth_tag = ciphertext + plaintext_pad_len;
8097         }
8098
8099         debug_hexdump(stdout, "ciphertext:", ciphertext, tdata->ciphertext.len);
8100         debug_hexdump(stdout, "auth tag:", auth_tag, tdata->auth_tag.len);
8101
8102         /* Validate obuf */
8103         TEST_ASSERT_BUFFERS_ARE_EQUAL(
8104                         ciphertext,
8105                         tdata->ciphertext.data,
8106                         tdata->ciphertext.len,
8107                         "Ciphertext data not as expected");
8108
8109         TEST_ASSERT_BUFFERS_ARE_EQUAL(
8110                         auth_tag,
8111                         tdata->auth_tag.data,
8112                         tdata->auth_tag.len,
8113                         "Generated auth tag not as expected");
8114
8115         return 0;
8116
8117 }
8118
8119 #ifdef RTE_LIB_SECURITY
8120 static int
8121 security_proto_supported(enum rte_security_session_action_type action,
8122         enum rte_security_session_protocol proto)
8123 {
8124         struct crypto_testsuite_params *ts_params = &testsuite_params;
8125
8126         const struct rte_security_capability *capabilities;
8127         const struct rte_security_capability *capability;
8128         uint16_t i = 0;
8129
8130         struct rte_security_ctx *ctx = (struct rte_security_ctx *)
8131                                 rte_cryptodev_get_sec_ctx(
8132                                 ts_params->valid_devs[0]);
8133
8134
8135         capabilities = rte_security_capabilities_get(ctx);
8136
8137         if (capabilities == NULL)
8138                 return -ENOTSUP;
8139
8140         while ((capability = &capabilities[i++])->action !=
8141                         RTE_SECURITY_ACTION_TYPE_NONE) {
8142                 if (capability->action == action &&
8143                                 capability->protocol == proto)
8144                         return 0;
8145         }
8146
8147         return -ENOTSUP;
8148 }
8149
8150 /* Basic algorithm run function for async inplace mode.
8151  * Creates a session from input parameters and runs one operation
8152  * on input_vec. Checks the output of the crypto operation against
8153  * output_vec.
8154  */
8155 static int test_pdcp_proto(int i, int oop, enum rte_crypto_cipher_operation opc,
8156                            enum rte_crypto_auth_operation opa,
8157                            const uint8_t *input_vec, unsigned int input_vec_len,
8158                            const uint8_t *output_vec,
8159                            unsigned int output_vec_len,
8160                            enum rte_crypto_cipher_algorithm cipher_alg,
8161                            const uint8_t *cipher_key, uint32_t cipher_key_len,
8162                            enum rte_crypto_auth_algorithm auth_alg,
8163                            const uint8_t *auth_key, uint32_t auth_key_len,
8164                            uint8_t bearer, enum rte_security_pdcp_domain domain,
8165                            uint8_t packet_direction, uint8_t sn_size,
8166                            uint32_t hfn, uint32_t hfn_threshold, uint8_t sdap)
8167 {
8168         struct crypto_testsuite_params *ts_params = &testsuite_params;
8169         struct crypto_unittest_params *ut_params = &unittest_params;
8170         uint8_t *plaintext;
8171         int ret = TEST_SUCCESS;
8172         struct rte_security_ctx *ctx = (struct rte_security_ctx *)
8173                                 rte_cryptodev_get_sec_ctx(
8174                                 ts_params->valid_devs[0]);
8175
8176         /* Verify the capabilities */
8177         struct rte_security_capability_idx sec_cap_idx;
8178
8179         sec_cap_idx.action = ut_params->type;
8180         sec_cap_idx.protocol = RTE_SECURITY_PROTOCOL_PDCP;
8181         sec_cap_idx.pdcp.domain = domain;
8182         if (rte_security_capability_get(ctx, &sec_cap_idx) == NULL)
8183                 return TEST_SKIPPED;
8184
8185         /* Generate test mbuf data */
8186         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
8187
8188         /* clear mbuf payload */
8189         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
8190                         rte_pktmbuf_tailroom(ut_params->ibuf));
8191
8192         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
8193                                                   input_vec_len);
8194         memcpy(plaintext, input_vec, input_vec_len);
8195
8196         /* Out of place support */
8197         if (oop) {
8198                 /*
8199                  * For out-op-place we need to alloc another mbuf
8200                  */
8201                 ut_params->obuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
8202                 rte_pktmbuf_append(ut_params->obuf, output_vec_len);
8203         }
8204
8205         /* Setup Cipher Parameters */
8206         ut_params->cipher_xform.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
8207         ut_params->cipher_xform.cipher.algo = cipher_alg;
8208         ut_params->cipher_xform.cipher.op = opc;
8209         ut_params->cipher_xform.cipher.key.data = cipher_key;
8210         ut_params->cipher_xform.cipher.key.length = cipher_key_len;
8211         ut_params->cipher_xform.cipher.iv.length =
8212                                 packet_direction ? 4 : 0;
8213         ut_params->cipher_xform.cipher.iv.offset = IV_OFFSET;
8214
8215         /* Setup HMAC Parameters if ICV header is required */
8216         if (auth_alg != 0) {
8217                 ut_params->auth_xform.type = RTE_CRYPTO_SYM_XFORM_AUTH;
8218                 ut_params->auth_xform.next = NULL;
8219                 ut_params->auth_xform.auth.algo = auth_alg;
8220                 ut_params->auth_xform.auth.op = opa;
8221                 ut_params->auth_xform.auth.key.data = auth_key;
8222                 ut_params->auth_xform.auth.key.length = auth_key_len;
8223
8224                 ut_params->cipher_xform.next = &ut_params->auth_xform;
8225         } else {
8226                 ut_params->cipher_xform.next = NULL;
8227         }
8228
8229         struct rte_security_session_conf sess_conf = {
8230                 .action_type = ut_params->type,
8231                 .protocol = RTE_SECURITY_PROTOCOL_PDCP,
8232                 {.pdcp = {
8233                         .bearer = bearer,
8234                         .domain = domain,
8235                         .pkt_dir = packet_direction,
8236                         .sn_size = sn_size,
8237                         .hfn = packet_direction ? 0 : hfn,
8238                         /**
8239                          * hfn can be set as pdcp_test_hfn[i]
8240                          * if hfn_ovrd is not set. Here, PDCP
8241                          * packet direction is just used to
8242                          * run half of the cases with session
8243                          * HFN and other half with per packet
8244                          * HFN.
8245                          */
8246                         .hfn_threshold = hfn_threshold,
8247                         .hfn_ovrd = packet_direction ? 1 : 0,
8248                         .sdap_enabled = sdap,
8249                 } },
8250                 .crypto_xform = &ut_params->cipher_xform
8251         };
8252
8253         /* Create security session */
8254         ut_params->sec_session = rte_security_session_create(ctx,
8255                                 &sess_conf, ts_params->session_mpool,
8256                                 ts_params->session_priv_mpool);
8257
8258         if (!ut_params->sec_session) {
8259                 printf("TestCase %s()-%d line %d failed %s: ",
8260                         __func__, i, __LINE__, "Failed to allocate session");
8261                 ret = TEST_FAILED;
8262                 goto on_err;
8263         }
8264
8265         /* Generate crypto op data structure */
8266         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
8267                         RTE_CRYPTO_OP_TYPE_SYMMETRIC);
8268         if (!ut_params->op) {
8269                 printf("TestCase %s()-%d line %d failed %s: ",
8270                         __func__, i, __LINE__,
8271                         "Failed to allocate symmetric crypto operation struct");
8272                 ret = TEST_FAILED;
8273                 goto on_err;
8274         }
8275
8276         uint32_t *per_pkt_hfn = rte_crypto_op_ctod_offset(ut_params->op,
8277                                         uint32_t *, IV_OFFSET);
8278         *per_pkt_hfn = packet_direction ? hfn : 0;
8279
8280         rte_security_attach_session(ut_params->op, ut_params->sec_session);
8281
8282         /* set crypto operation source mbuf */
8283         ut_params->op->sym->m_src = ut_params->ibuf;
8284         if (oop)
8285                 ut_params->op->sym->m_dst = ut_params->obuf;
8286
8287         /* Process crypto operation */
8288         if (process_crypto_request(ts_params->valid_devs[0], ut_params->op)
8289                 == NULL) {
8290                 printf("TestCase %s()-%d line %d failed %s: ",
8291                         __func__, i, __LINE__,
8292                         "failed to process sym crypto op");
8293                 ret = TEST_FAILED;
8294                 goto on_err;
8295         }
8296
8297         if (ut_params->op->status != RTE_CRYPTO_OP_STATUS_SUCCESS) {
8298                 printf("TestCase %s()-%d line %d failed %s: ",
8299                         __func__, i, __LINE__, "crypto op processing failed");
8300                 ret = TEST_FAILED;
8301                 goto on_err;
8302         }
8303
8304         /* Validate obuf */
8305         uint8_t *ciphertext = rte_pktmbuf_mtod(ut_params->op->sym->m_src,
8306                         uint8_t *);
8307         if (oop) {
8308                 ciphertext = rte_pktmbuf_mtod(ut_params->op->sym->m_dst,
8309                                 uint8_t *);
8310         }
8311
8312         if (memcmp(ciphertext, output_vec, output_vec_len)) {
8313                 printf("\n=======PDCP TestCase #%d failed: Data Mismatch ", i);
8314                 rte_hexdump(stdout, "encrypted", ciphertext, output_vec_len);
8315                 rte_hexdump(stdout, "reference", output_vec, output_vec_len);
8316                 ret = TEST_FAILED;
8317                 goto on_err;
8318         }
8319
8320 on_err:
8321         rte_crypto_op_free(ut_params->op);
8322         ut_params->op = NULL;
8323
8324         if (ut_params->sec_session)
8325                 rte_security_session_destroy(ctx, ut_params->sec_session);
8326         ut_params->sec_session = NULL;
8327
8328         rte_pktmbuf_free(ut_params->ibuf);
8329         ut_params->ibuf = NULL;
8330         if (oop) {
8331                 rte_pktmbuf_free(ut_params->obuf);
8332                 ut_params->obuf = NULL;
8333         }
8334
8335         return ret;
8336 }
8337
8338 static int
8339 test_pdcp_proto_SGL(int i, int oop,
8340         enum rte_crypto_cipher_operation opc,
8341         enum rte_crypto_auth_operation opa,
8342         uint8_t *input_vec,
8343         unsigned int input_vec_len,
8344         uint8_t *output_vec,
8345         unsigned int output_vec_len,
8346         uint32_t fragsz,
8347         uint32_t fragsz_oop)
8348 {
8349         struct crypto_testsuite_params *ts_params = &testsuite_params;
8350         struct crypto_unittest_params *ut_params = &unittest_params;
8351         uint8_t *plaintext;
8352         struct rte_mbuf *buf, *buf_oop = NULL;
8353         int ret = TEST_SUCCESS;
8354         int to_trn = 0;
8355         int to_trn_tbl[16];
8356         int segs = 1;
8357         unsigned int trn_data = 0;
8358         struct rte_security_ctx *ctx = (struct rte_security_ctx *)
8359                                 rte_cryptodev_get_sec_ctx(
8360                                 ts_params->valid_devs[0]);
8361
8362         /* Verify the capabilities */
8363         struct rte_security_capability_idx sec_cap_idx;
8364
8365         sec_cap_idx.action = ut_params->type;
8366         sec_cap_idx.protocol = RTE_SECURITY_PROTOCOL_PDCP;
8367         sec_cap_idx.pdcp.domain = pdcp_test_params[i].domain;
8368         if (rte_security_capability_get(ctx, &sec_cap_idx) == NULL)
8369                 return TEST_SKIPPED;
8370
8371         if (fragsz > input_vec_len)
8372                 fragsz = input_vec_len;
8373
8374         uint16_t plaintext_len = fragsz;
8375         uint16_t frag_size_oop = fragsz_oop ? fragsz_oop : fragsz;
8376
8377         if (fragsz_oop > output_vec_len)
8378                 frag_size_oop = output_vec_len;
8379
8380         int ecx = 0;
8381         if (input_vec_len % fragsz != 0) {
8382                 if (input_vec_len / fragsz + 1 > 16)
8383                         return 1;
8384         } else if (input_vec_len / fragsz > 16)
8385                 return 1;
8386
8387         /* Out of place support */
8388         if (oop) {
8389                 /*
8390                  * For out-op-place we need to alloc another mbuf
8391                  */
8392                 ut_params->obuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
8393                 rte_pktmbuf_append(ut_params->obuf, frag_size_oop);
8394                 buf_oop = ut_params->obuf;
8395         }
8396
8397         /* Generate test mbuf data */
8398         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
8399
8400         /* clear mbuf payload */
8401         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
8402                         rte_pktmbuf_tailroom(ut_params->ibuf));
8403
8404         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
8405                                                   plaintext_len);
8406         memcpy(plaintext, input_vec, plaintext_len);
8407         trn_data += plaintext_len;
8408
8409         buf = ut_params->ibuf;
8410
8411         /*
8412          * Loop until no more fragments
8413          */
8414
8415         while (trn_data < input_vec_len) {
8416                 ++segs;
8417                 to_trn = (input_vec_len - trn_data < fragsz) ?
8418                                 (input_vec_len - trn_data) : fragsz;
8419
8420                 to_trn_tbl[ecx++] = to_trn;
8421
8422                 buf->next = rte_pktmbuf_alloc(ts_params->mbuf_pool);
8423                 buf = buf->next;
8424
8425                 memset(rte_pktmbuf_mtod(buf, uint8_t *), 0,
8426                                 rte_pktmbuf_tailroom(buf));
8427
8428                 /* OOP */
8429                 if (oop && !fragsz_oop) {
8430                         buf_oop->next =
8431                                         rte_pktmbuf_alloc(ts_params->mbuf_pool);
8432                         buf_oop = buf_oop->next;
8433                         memset(rte_pktmbuf_mtod(buf_oop, uint8_t *),
8434                                         0, rte_pktmbuf_tailroom(buf_oop));
8435                         rte_pktmbuf_append(buf_oop, to_trn);
8436                 }
8437
8438                 plaintext = (uint8_t *)rte_pktmbuf_append(buf,
8439                                 to_trn);
8440
8441                 memcpy(plaintext, input_vec + trn_data, to_trn);
8442                 trn_data += to_trn;
8443         }
8444
8445         ut_params->ibuf->nb_segs = segs;
8446
8447         segs = 1;
8448         if (fragsz_oop && oop) {
8449                 to_trn = 0;
8450                 ecx = 0;
8451
8452                 trn_data = frag_size_oop;
8453                 while (trn_data < output_vec_len) {
8454                         ++segs;
8455                         to_trn =
8456                                 (output_vec_len - trn_data <
8457                                                 frag_size_oop) ?
8458                                 (output_vec_len - trn_data) :
8459                                                 frag_size_oop;
8460
8461                         to_trn_tbl[ecx++] = to_trn;
8462
8463                         buf_oop->next =
8464                                 rte_pktmbuf_alloc(ts_params->mbuf_pool);
8465                         buf_oop = buf_oop->next;
8466                         memset(rte_pktmbuf_mtod(buf_oop, uint8_t *),
8467                                         0, rte_pktmbuf_tailroom(buf_oop));
8468                         rte_pktmbuf_append(buf_oop, to_trn);
8469
8470                         trn_data += to_trn;
8471                 }
8472                 ut_params->obuf->nb_segs = segs;
8473         }
8474
8475         /* Setup Cipher Parameters */
8476         ut_params->cipher_xform.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
8477         ut_params->cipher_xform.cipher.algo = pdcp_test_params[i].cipher_alg;
8478         ut_params->cipher_xform.cipher.op = opc;
8479         ut_params->cipher_xform.cipher.key.data = pdcp_test_crypto_key[i];
8480         ut_params->cipher_xform.cipher.key.length =
8481                                         pdcp_test_params[i].cipher_key_len;
8482         ut_params->cipher_xform.cipher.iv.length = 0;
8483
8484         /* Setup HMAC Parameters if ICV header is required */
8485         if (pdcp_test_params[i].auth_alg != 0) {
8486                 ut_params->auth_xform.type = RTE_CRYPTO_SYM_XFORM_AUTH;
8487                 ut_params->auth_xform.next = NULL;
8488                 ut_params->auth_xform.auth.algo = pdcp_test_params[i].auth_alg;
8489                 ut_params->auth_xform.auth.op = opa;
8490                 ut_params->auth_xform.auth.key.data = pdcp_test_auth_key[i];
8491                 ut_params->auth_xform.auth.key.length =
8492                                         pdcp_test_params[i].auth_key_len;
8493
8494                 ut_params->cipher_xform.next = &ut_params->auth_xform;
8495         } else {
8496                 ut_params->cipher_xform.next = NULL;
8497         }
8498
8499         struct rte_security_session_conf sess_conf = {
8500                 .action_type = ut_params->type,
8501                 .protocol = RTE_SECURITY_PROTOCOL_PDCP,
8502                 {.pdcp = {
8503                         .bearer = pdcp_test_bearer[i],
8504                         .domain = pdcp_test_params[i].domain,
8505                         .pkt_dir = pdcp_test_packet_direction[i],
8506                         .sn_size = pdcp_test_data_sn_size[i],
8507                         .hfn = pdcp_test_hfn[i],
8508                         .hfn_threshold = pdcp_test_hfn_threshold[i],
8509                         .hfn_ovrd = 0,
8510                 } },
8511                 .crypto_xform = &ut_params->cipher_xform
8512         };
8513
8514         /* Create security session */
8515         ut_params->sec_session = rte_security_session_create(ctx,
8516                                 &sess_conf, ts_params->session_mpool,
8517                                 ts_params->session_priv_mpool);
8518
8519         if (!ut_params->sec_session) {
8520                 printf("TestCase %s()-%d line %d failed %s: ",
8521                         __func__, i, __LINE__, "Failed to allocate session");
8522                 ret = TEST_FAILED;
8523                 goto on_err;
8524         }
8525
8526         /* Generate crypto op data structure */
8527         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
8528                         RTE_CRYPTO_OP_TYPE_SYMMETRIC);
8529         if (!ut_params->op) {
8530                 printf("TestCase %s()-%d line %d failed %s: ",
8531                         __func__, i, __LINE__,
8532                         "Failed to allocate symmetric crypto operation struct");
8533                 ret = TEST_FAILED;
8534                 goto on_err;
8535         }
8536
8537         rte_security_attach_session(ut_params->op, ut_params->sec_session);
8538
8539         /* set crypto operation source mbuf */
8540         ut_params->op->sym->m_src = ut_params->ibuf;
8541         if (oop)
8542                 ut_params->op->sym->m_dst = ut_params->obuf;
8543
8544         /* Process crypto operation */
8545         if (process_crypto_request(ts_params->valid_devs[0], ut_params->op)
8546                 == NULL) {
8547                 printf("TestCase %s()-%d line %d failed %s: ",
8548                         __func__, i, __LINE__,
8549                         "failed to process sym crypto op");
8550                 ret = TEST_FAILED;
8551                 goto on_err;
8552         }
8553
8554         if (ut_params->op->status != RTE_CRYPTO_OP_STATUS_SUCCESS) {
8555                 printf("TestCase %s()-%d line %d failed %s: ",
8556                         __func__, i, __LINE__, "crypto op processing failed");
8557                 ret = TEST_FAILED;
8558                 goto on_err;
8559         }
8560
8561         /* Validate obuf */
8562         uint8_t *ciphertext = rte_pktmbuf_mtod(ut_params->op->sym->m_src,
8563                         uint8_t *);
8564         if (oop) {
8565                 ciphertext = rte_pktmbuf_mtod(ut_params->op->sym->m_dst,
8566                                 uint8_t *);
8567         }
8568         if (fragsz_oop)
8569                 fragsz = frag_size_oop;
8570         if (memcmp(ciphertext, output_vec, fragsz)) {
8571                 printf("\n=======PDCP TestCase #%d failed: Data Mismatch ", i);
8572                 rte_hexdump(stdout, "encrypted", ciphertext, fragsz);
8573                 rte_hexdump(stdout, "reference", output_vec, fragsz);
8574                 ret = TEST_FAILED;
8575                 goto on_err;
8576         }
8577
8578         buf = ut_params->op->sym->m_src->next;
8579         if (oop)
8580                 buf = ut_params->op->sym->m_dst->next;
8581
8582         unsigned int off = fragsz;
8583
8584         ecx = 0;
8585         while (buf) {
8586                 ciphertext = rte_pktmbuf_mtod(buf,
8587                                 uint8_t *);
8588                 if (memcmp(ciphertext, output_vec + off, to_trn_tbl[ecx])) {
8589                         printf("\n=======PDCP TestCase #%d failed: Data Mismatch ", i);
8590                         rte_hexdump(stdout, "encrypted", ciphertext, to_trn_tbl[ecx]);
8591                         rte_hexdump(stdout, "reference", output_vec + off,
8592                                         to_trn_tbl[ecx]);
8593                         ret = TEST_FAILED;
8594                         goto on_err;
8595                 }
8596                 off += to_trn_tbl[ecx++];
8597                 buf = buf->next;
8598         }
8599 on_err:
8600         rte_crypto_op_free(ut_params->op);
8601         ut_params->op = NULL;
8602
8603         if (ut_params->sec_session)
8604                 rte_security_session_destroy(ctx, ut_params->sec_session);
8605         ut_params->sec_session = NULL;
8606
8607         rte_pktmbuf_free(ut_params->ibuf);
8608         ut_params->ibuf = NULL;
8609         if (oop) {
8610                 rte_pktmbuf_free(ut_params->obuf);
8611                 ut_params->obuf = NULL;
8612         }
8613
8614         return ret;
8615 }
8616
8617 int
8618 test_pdcp_proto_cplane_encap(int i)
8619 {
8620         return test_pdcp_proto(
8621                 i, 0, RTE_CRYPTO_CIPHER_OP_ENCRYPT, RTE_CRYPTO_AUTH_OP_GENERATE,
8622                 pdcp_test_data_in[i], pdcp_test_data_in_len[i],
8623                 pdcp_test_data_out[i], pdcp_test_data_in_len[i] + 4,
8624                 pdcp_test_params[i].cipher_alg, pdcp_test_crypto_key[i],
8625                 pdcp_test_params[i].cipher_key_len,
8626                 pdcp_test_params[i].auth_alg, pdcp_test_auth_key[i],
8627                 pdcp_test_params[i].auth_key_len, pdcp_test_bearer[i],
8628                 pdcp_test_params[i].domain, pdcp_test_packet_direction[i],
8629                 pdcp_test_data_sn_size[i], pdcp_test_hfn[i],
8630                 pdcp_test_hfn_threshold[i], SDAP_DISABLED);
8631 }
8632
8633 int
8634 test_pdcp_proto_uplane_encap(int i)
8635 {
8636         return test_pdcp_proto(
8637                 i, 0, RTE_CRYPTO_CIPHER_OP_ENCRYPT, RTE_CRYPTO_AUTH_OP_GENERATE,
8638                 pdcp_test_data_in[i], pdcp_test_data_in_len[i],
8639                 pdcp_test_data_out[i], pdcp_test_data_in_len[i],
8640                 pdcp_test_params[i].cipher_alg, pdcp_test_crypto_key[i],
8641                 pdcp_test_params[i].cipher_key_len,
8642                 pdcp_test_params[i].auth_alg, pdcp_test_auth_key[i],
8643                 pdcp_test_params[i].auth_key_len, pdcp_test_bearer[i],
8644                 pdcp_test_params[i].domain, pdcp_test_packet_direction[i],
8645                 pdcp_test_data_sn_size[i], pdcp_test_hfn[i],
8646                 pdcp_test_hfn_threshold[i], SDAP_DISABLED);
8647 }
8648
8649 int
8650 test_pdcp_proto_uplane_encap_with_int(int i)
8651 {
8652         return test_pdcp_proto(
8653                 i, 0, RTE_CRYPTO_CIPHER_OP_ENCRYPT, RTE_CRYPTO_AUTH_OP_GENERATE,
8654                 pdcp_test_data_in[i], pdcp_test_data_in_len[i],
8655                 pdcp_test_data_out[i], pdcp_test_data_in_len[i] + 4,
8656                 pdcp_test_params[i].cipher_alg, pdcp_test_crypto_key[i],
8657                 pdcp_test_params[i].cipher_key_len,
8658                 pdcp_test_params[i].auth_alg, pdcp_test_auth_key[i],
8659                 pdcp_test_params[i].auth_key_len, pdcp_test_bearer[i],
8660                 pdcp_test_params[i].domain, pdcp_test_packet_direction[i],
8661                 pdcp_test_data_sn_size[i], pdcp_test_hfn[i],
8662                 pdcp_test_hfn_threshold[i], SDAP_DISABLED);
8663 }
8664
8665 int
8666 test_pdcp_proto_cplane_decap(int i)
8667 {
8668         return test_pdcp_proto(
8669                 i, 0, RTE_CRYPTO_CIPHER_OP_DECRYPT, RTE_CRYPTO_AUTH_OP_VERIFY,
8670                 pdcp_test_data_out[i], pdcp_test_data_in_len[i] + 4,
8671                 pdcp_test_data_in[i], pdcp_test_data_in_len[i],
8672                 pdcp_test_params[i].cipher_alg, pdcp_test_crypto_key[i],
8673                 pdcp_test_params[i].cipher_key_len,
8674                 pdcp_test_params[i].auth_alg, pdcp_test_auth_key[i],
8675                 pdcp_test_params[i].auth_key_len, pdcp_test_bearer[i],
8676                 pdcp_test_params[i].domain, pdcp_test_packet_direction[i],
8677                 pdcp_test_data_sn_size[i], pdcp_test_hfn[i],
8678                 pdcp_test_hfn_threshold[i], SDAP_DISABLED);
8679 }
8680
8681 int
8682 test_pdcp_proto_uplane_decap(int i)
8683 {
8684         return test_pdcp_proto(
8685                 i, 0, RTE_CRYPTO_CIPHER_OP_DECRYPT, RTE_CRYPTO_AUTH_OP_VERIFY,
8686                 pdcp_test_data_out[i], pdcp_test_data_in_len[i],
8687                 pdcp_test_data_in[i], pdcp_test_data_in_len[i],
8688                 pdcp_test_params[i].cipher_alg, pdcp_test_crypto_key[i],
8689                 pdcp_test_params[i].cipher_key_len,
8690                 pdcp_test_params[i].auth_alg, pdcp_test_auth_key[i],
8691                 pdcp_test_params[i].auth_key_len, pdcp_test_bearer[i],
8692                 pdcp_test_params[i].domain, pdcp_test_packet_direction[i],
8693                 pdcp_test_data_sn_size[i], pdcp_test_hfn[i],
8694                 pdcp_test_hfn_threshold[i], SDAP_DISABLED);
8695 }
8696
8697 int
8698 test_pdcp_proto_uplane_decap_with_int(int i)
8699 {
8700         return test_pdcp_proto(
8701                 i, 0, RTE_CRYPTO_CIPHER_OP_DECRYPT, RTE_CRYPTO_AUTH_OP_VERIFY,
8702                 pdcp_test_data_out[i], pdcp_test_data_in_len[i] + 4,
8703                 pdcp_test_data_in[i], pdcp_test_data_in_len[i],
8704                 pdcp_test_params[i].cipher_alg, pdcp_test_crypto_key[i],
8705                 pdcp_test_params[i].cipher_key_len,
8706                 pdcp_test_params[i].auth_alg, pdcp_test_auth_key[i],
8707                 pdcp_test_params[i].auth_key_len, pdcp_test_bearer[i],
8708                 pdcp_test_params[i].domain, pdcp_test_packet_direction[i],
8709                 pdcp_test_data_sn_size[i], pdcp_test_hfn[i],
8710                 pdcp_test_hfn_threshold[i], SDAP_DISABLED);
8711 }
8712
8713 static int
8714 test_PDCP_PROTO_SGL_in_place_32B(void)
8715 {
8716         /* i can be used for running any PDCP case
8717          * In this case it is uplane 12-bit AES-SNOW DL encap
8718          */
8719         int i = PDCP_UPLANE_12BIT_OFFSET + AES_ENC + SNOW_AUTH + DOWNLINK;
8720         return test_pdcp_proto_SGL(i, IN_PLACE,
8721                         RTE_CRYPTO_CIPHER_OP_ENCRYPT,
8722                         RTE_CRYPTO_AUTH_OP_GENERATE,
8723                         pdcp_test_data_in[i],
8724                         pdcp_test_data_in_len[i],
8725                         pdcp_test_data_out[i],
8726                         pdcp_test_data_in_len[i]+4,
8727                         32, 0);
8728 }
8729 static int
8730 test_PDCP_PROTO_SGL_oop_32B_128B(void)
8731 {
8732         /* i can be used for running any PDCP case
8733          * In this case it is uplane 18-bit NULL-NULL DL encap
8734          */
8735         int i = PDCP_UPLANE_18BIT_OFFSET + NULL_ENC + NULL_AUTH + DOWNLINK;
8736         return test_pdcp_proto_SGL(i, OUT_OF_PLACE,
8737                         RTE_CRYPTO_CIPHER_OP_ENCRYPT,
8738                         RTE_CRYPTO_AUTH_OP_GENERATE,
8739                         pdcp_test_data_in[i],
8740                         pdcp_test_data_in_len[i],
8741                         pdcp_test_data_out[i],
8742                         pdcp_test_data_in_len[i]+4,
8743                         32, 128);
8744 }
8745 static int
8746 test_PDCP_PROTO_SGL_oop_32B_40B(void)
8747 {
8748         /* i can be used for running any PDCP case
8749          * In this case it is uplane 18-bit AES DL encap
8750          */
8751         int i = PDCP_UPLANE_OFFSET + AES_ENC + EIGHTEEN_BIT_SEQ_NUM_OFFSET
8752                         + DOWNLINK;
8753         return test_pdcp_proto_SGL(i, OUT_OF_PLACE,
8754                         RTE_CRYPTO_CIPHER_OP_ENCRYPT,
8755                         RTE_CRYPTO_AUTH_OP_GENERATE,
8756                         pdcp_test_data_in[i],
8757                         pdcp_test_data_in_len[i],
8758                         pdcp_test_data_out[i],
8759                         pdcp_test_data_in_len[i],
8760                         32, 40);
8761 }
8762 static int
8763 test_PDCP_PROTO_SGL_oop_128B_32B(void)
8764 {
8765         /* i can be used for running any PDCP case
8766          * In this case it is cplane 12-bit AES-ZUC DL encap
8767          */
8768         int i = PDCP_CPLANE_LONG_SN_OFFSET + AES_ENC + ZUC_AUTH + DOWNLINK;
8769         return test_pdcp_proto_SGL(i, OUT_OF_PLACE,
8770                         RTE_CRYPTO_CIPHER_OP_ENCRYPT,
8771                         RTE_CRYPTO_AUTH_OP_GENERATE,
8772                         pdcp_test_data_in[i],
8773                         pdcp_test_data_in_len[i],
8774                         pdcp_test_data_out[i],
8775                         pdcp_test_data_in_len[i]+4,
8776                         128, 32);
8777 }
8778
8779 static int
8780 test_PDCP_SDAP_PROTO_encap_all(void)
8781 {
8782         int i = 0, size = 0;
8783         int err, all_err = TEST_SUCCESS;
8784         const struct pdcp_sdap_test *cur_test;
8785
8786         size = RTE_DIM(list_pdcp_sdap_tests);
8787
8788         for (i = 0; i < size; i++) {
8789                 cur_test = &list_pdcp_sdap_tests[i];
8790                 err = test_pdcp_proto(
8791                         i, 0, RTE_CRYPTO_CIPHER_OP_ENCRYPT,
8792                         RTE_CRYPTO_AUTH_OP_GENERATE, cur_test->data_in,
8793                         cur_test->in_len, cur_test->data_out,
8794                         cur_test->in_len + ((cur_test->auth_key) ? 4 : 0),
8795                         cur_test->param.cipher_alg, cur_test->cipher_key,
8796                         cur_test->param.cipher_key_len,
8797                         cur_test->param.auth_alg,
8798                         cur_test->auth_key, cur_test->param.auth_key_len,
8799                         cur_test->bearer, cur_test->param.domain,
8800                         cur_test->packet_direction, cur_test->sn_size,
8801                         cur_test->hfn,
8802                         cur_test->hfn_threshold, SDAP_ENABLED);
8803                 if (err) {
8804                         printf("\t%d) %s: Encapsulation failed\n",
8805                                         cur_test->test_idx,
8806                                         cur_test->param.name);
8807                         err = TEST_FAILED;
8808                 } else {
8809                         printf("\t%d) %s: Encap PASS\n", cur_test->test_idx,
8810                                         cur_test->param.name);
8811                         err = TEST_SUCCESS;
8812                 }
8813                 all_err += err;
8814         }
8815
8816         printf("Success: %d, Failure: %d\n", size + all_err, -all_err);
8817
8818         return (all_err == TEST_SUCCESS) ? TEST_SUCCESS : TEST_FAILED;
8819 }
8820
8821 static int
8822 test_PDCP_PROTO_short_mac(void)
8823 {
8824         int i = 0, size = 0;
8825         int err, all_err = TEST_SUCCESS;
8826         const struct pdcp_short_mac_test *cur_test;
8827
8828         size = RTE_DIM(list_pdcp_smac_tests);
8829
8830         for (i = 0; i < size; i++) {
8831                 cur_test = &list_pdcp_smac_tests[i];
8832                 err = test_pdcp_proto(
8833                         i, 0, RTE_CRYPTO_CIPHER_OP_ENCRYPT,
8834                         RTE_CRYPTO_AUTH_OP_GENERATE, cur_test->data_in,
8835                         cur_test->in_len, cur_test->data_out,
8836                         cur_test->in_len + ((cur_test->auth_key) ? 4 : 0),
8837                         RTE_CRYPTO_CIPHER_NULL, NULL,
8838                         0, cur_test->param.auth_alg,
8839                         cur_test->auth_key, cur_test->param.auth_key_len,
8840                         0, cur_test->param.domain, 0, 0,
8841                         0, 0, 0);
8842                 if (err) {
8843                         printf("\t%d) %s: Short MAC test failed\n",
8844                                         cur_test->test_idx,
8845                                         cur_test->param.name);
8846                         err = TEST_FAILED;
8847                 } else {
8848                         printf("\t%d) %s: Short MAC test PASS\n",
8849                                         cur_test->test_idx,
8850                                         cur_test->param.name);
8851                         rte_hexdump(stdout, "MAC I",
8852                                     cur_test->data_out + cur_test->in_len + 2,
8853                                     2);
8854                         err = TEST_SUCCESS;
8855                 }
8856                 all_err += err;
8857         }
8858
8859         printf("Success: %d, Failure: %d\n", size + all_err, -all_err);
8860
8861         return (all_err == TEST_SUCCESS) ? TEST_SUCCESS : TEST_FAILED;
8862
8863 }
8864
8865 static int
8866 test_PDCP_SDAP_PROTO_decap_all(void)
8867 {
8868         int i = 0, size = 0;
8869         int err, all_err = TEST_SUCCESS;
8870         const struct pdcp_sdap_test *cur_test;
8871
8872         size = RTE_DIM(list_pdcp_sdap_tests);
8873
8874         for (i = 0; i < size; i++) {
8875                 cur_test = &list_pdcp_sdap_tests[i];
8876                 err = test_pdcp_proto(
8877                         i, 0, RTE_CRYPTO_CIPHER_OP_DECRYPT,
8878                         RTE_CRYPTO_AUTH_OP_VERIFY,
8879                         cur_test->data_out,
8880                         cur_test->in_len + ((cur_test->auth_key) ? 4 : 0),
8881                         cur_test->data_in, cur_test->in_len,
8882                         cur_test->param.cipher_alg,
8883                         cur_test->cipher_key, cur_test->param.cipher_key_len,
8884                         cur_test->param.auth_alg, cur_test->auth_key,
8885                         cur_test->param.auth_key_len, cur_test->bearer,
8886                         cur_test->param.domain, cur_test->packet_direction,
8887                         cur_test->sn_size, cur_test->hfn,
8888                         cur_test->hfn_threshold, SDAP_ENABLED);
8889                 if (err) {
8890                         printf("\t%d) %s: Decapsulation failed\n",
8891                                         cur_test->test_idx,
8892                                         cur_test->param.name);
8893                         err = TEST_FAILED;
8894                 } else {
8895                         printf("\t%d) %s: Decap PASS\n", cur_test->test_idx,
8896                                         cur_test->param.name);
8897                         err = TEST_SUCCESS;
8898                 }
8899                 all_err += err;
8900         }
8901
8902         printf("Success: %d, Failure: %d\n", size + all_err, -all_err);
8903
8904         return (all_err == TEST_SUCCESS) ? TEST_SUCCESS : TEST_FAILED;
8905 }
8906
8907 static int
8908 test_ipsec_proto_process(const struct ipsec_test_data td[],
8909                          struct ipsec_test_data res_d[],
8910                          int nb_td,
8911                          bool silent,
8912                          const struct ipsec_test_flags *flags)
8913 {
8914         struct crypto_testsuite_params *ts_params = &testsuite_params;
8915         struct crypto_unittest_params *ut_params = &unittest_params;
8916         struct rte_security_capability_idx sec_cap_idx;
8917         const struct rte_security_capability *sec_cap;
8918         struct rte_security_ipsec_xform ipsec_xform;
8919         uint8_t dev_id = ts_params->valid_devs[0];
8920         enum rte_security_ipsec_sa_direction dir;
8921         struct ipsec_test_data *res_d_tmp = NULL;
8922         uint32_t src = RTE_IPV4(192, 168, 1, 0);
8923         uint32_t dst = RTE_IPV4(192, 168, 1, 1);
8924         int salt_len, i, ret = TEST_SUCCESS;
8925         struct rte_security_ctx *ctx;
8926         uint8_t *input_text;
8927
8928         ut_params->type = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL;
8929         gbl_action_type = RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL;
8930
8931         /* Use first test data to create session */
8932
8933         /* Copy IPsec xform */
8934         memcpy(&ipsec_xform, &td[0].ipsec_xform, sizeof(ipsec_xform));
8935
8936         memcpy(&ipsec_xform.tunnel.ipv4.src_ip, &src, sizeof(src));
8937         memcpy(&ipsec_xform.tunnel.ipv4.dst_ip, &dst, sizeof(dst));
8938
8939         dir = ipsec_xform.direction;
8940
8941         ctx = rte_cryptodev_get_sec_ctx(dev_id);
8942
8943         sec_cap_idx.action = ut_params->type;
8944         sec_cap_idx.protocol = RTE_SECURITY_PROTOCOL_IPSEC;
8945         sec_cap_idx.ipsec.proto = ipsec_xform.proto;
8946         sec_cap_idx.ipsec.mode = ipsec_xform.mode;
8947         sec_cap_idx.ipsec.direction = ipsec_xform.direction;
8948
8949         if (flags->udp_encap)
8950                 ipsec_xform.options.udp_encap = 1;
8951
8952         sec_cap = rte_security_capability_get(ctx, &sec_cap_idx);
8953         if (sec_cap == NULL)
8954                 return TEST_SKIPPED;
8955
8956         /* Copy cipher session parameters */
8957         if (td[0].aead) {
8958                 memcpy(&ut_params->aead_xform, &td[0].xform.aead,
8959                        sizeof(ut_params->aead_xform));
8960                 ut_params->aead_xform.aead.key.data = td[0].key.data;
8961                 ut_params->aead_xform.aead.iv.offset = IV_OFFSET;
8962
8963                 /* Verify crypto capabilities */
8964                 if (test_ipsec_crypto_caps_aead_verify(
8965                                 sec_cap,
8966                                 &ut_params->aead_xform) != 0) {
8967                         if (!silent)
8968                                 RTE_LOG(INFO, USER1,
8969                                         "Crypto capabilities not supported\n");
8970                         return TEST_SKIPPED;
8971                 }
8972         } else {
8973                 /* Only AEAD supported now */
8974                 return TEST_SKIPPED;
8975         }
8976
8977         if (test_ipsec_sec_caps_verify(&ipsec_xform, sec_cap, silent) != 0)
8978                 return TEST_SKIPPED;
8979
8980         salt_len = RTE_MIN(sizeof(ipsec_xform.salt), td[0].salt.len);
8981         memcpy(&ipsec_xform.salt, td[0].salt.data, salt_len);
8982
8983         struct rte_security_session_conf sess_conf = {
8984                 .action_type = ut_params->type,
8985                 .protocol = RTE_SECURITY_PROTOCOL_IPSEC,
8986                 .ipsec = ipsec_xform,
8987                 .crypto_xform = &ut_params->aead_xform,
8988         };
8989
8990         /* Create security session */
8991         ut_params->sec_session = rte_security_session_create(ctx, &sess_conf,
8992                                         ts_params->session_mpool,
8993                                         ts_params->session_priv_mpool);
8994
8995         if (ut_params->sec_session == NULL)
8996                 return TEST_SKIPPED;
8997
8998         for (i = 0; i < nb_td; i++) {
8999                 /* Setup source mbuf payload */
9000                 ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
9001                 memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
9002                                 rte_pktmbuf_tailroom(ut_params->ibuf));
9003
9004                 input_text = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
9005                                 td[i].input_text.len);
9006
9007                 memcpy(input_text, td[i].input_text.data,
9008                        td[i].input_text.len);
9009
9010                 /* Generate crypto op data structure */
9011                 ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
9012                                         RTE_CRYPTO_OP_TYPE_SYMMETRIC);
9013                 if (!ut_params->op) {
9014                         printf("TestCase %s line %d: %s\n",
9015                                 __func__, __LINE__,
9016                                 "failed to allocate crypto op");
9017                         ret = TEST_FAILED;
9018                         goto crypto_op_free;
9019                 }
9020
9021                 /* Attach session to operation */
9022                 rte_security_attach_session(ut_params->op,
9023                                             ut_params->sec_session);
9024
9025                 /* Set crypto operation mbufs */
9026                 ut_params->op->sym->m_src = ut_params->ibuf;
9027                 ut_params->op->sym->m_dst = NULL;
9028
9029                 /* Copy IV in crypto operation when IV generation is disabled */
9030                 if (dir == RTE_SECURITY_IPSEC_SA_DIR_EGRESS &&
9031                     ipsec_xform.options.iv_gen_disable == 1) {
9032                         uint8_t *iv = rte_crypto_op_ctod_offset(ut_params->op,
9033                                                                 uint8_t *,
9034                                                                 IV_OFFSET);
9035                         int len;
9036
9037                         if (td[i].aead)
9038                                 len = td[i].xform.aead.aead.iv.length;
9039                         else
9040                                 len = td[i].xform.chain.cipher.cipher.iv.length;
9041
9042                         memcpy(iv, td[i].iv.data, len);
9043                 }
9044
9045                 /* Process crypto operation */
9046                 process_crypto_request(dev_id, ut_params->op);
9047
9048                 ret = test_ipsec_status_check(ut_params->op, flags, dir, i + 1);
9049                 if (ret != TEST_SUCCESS)
9050                         goto crypto_op_free;
9051
9052                 if (res_d != NULL)
9053                         res_d_tmp = &res_d[i];
9054
9055                 ret = test_ipsec_post_process(ut_params->ibuf, &td[i],
9056                                               res_d_tmp, silent, flags);
9057                 if (ret != TEST_SUCCESS)
9058                         goto crypto_op_free;
9059
9060                 rte_crypto_op_free(ut_params->op);
9061                 ut_params->op = NULL;
9062
9063                 rte_pktmbuf_free(ut_params->ibuf);
9064                 ut_params->ibuf = NULL;
9065         }
9066
9067 crypto_op_free:
9068         rte_crypto_op_free(ut_params->op);
9069         ut_params->op = NULL;
9070
9071         rte_pktmbuf_free(ut_params->ibuf);
9072         ut_params->ibuf = NULL;
9073
9074         if (ut_params->sec_session)
9075                 rte_security_session_destroy(ctx, ut_params->sec_session);
9076         ut_params->sec_session = NULL;
9077
9078         return ret;
9079 }
9080
9081 static int
9082 test_ipsec_proto_known_vec(const void *test_data)
9083 {
9084         struct ipsec_test_data td_outb;
9085         struct ipsec_test_flags flags;
9086
9087         memset(&flags, 0, sizeof(flags));
9088
9089         memcpy(&td_outb, test_data, sizeof(td_outb));
9090
9091         /* Disable IV gen to be able to test with known vectors */
9092         td_outb.ipsec_xform.options.iv_gen_disable = 1;
9093
9094         return test_ipsec_proto_process(&td_outb, NULL, 1, false, &flags);
9095 }
9096
9097 static int
9098 test_ipsec_proto_known_vec_inb(const void *td_outb)
9099 {
9100         struct ipsec_test_flags flags;
9101         struct ipsec_test_data td_inb;
9102
9103         memset(&flags, 0, sizeof(flags));
9104
9105         test_ipsec_td_in_from_out(td_outb, &td_inb);
9106
9107         return test_ipsec_proto_process(&td_inb, NULL, 1, false, &flags);
9108 }
9109
9110 static int
9111 test_ipsec_proto_all(const struct ipsec_test_flags *flags)
9112 {
9113         struct ipsec_test_data td_outb[IPSEC_TEST_PACKETS_MAX];
9114         struct ipsec_test_data td_inb[IPSEC_TEST_PACKETS_MAX];
9115         unsigned int i, nb_pkts = 1, pass_cnt = 0;
9116         int ret;
9117
9118         if (flags->iv_gen ||
9119             flags->sa_expiry_pkts_soft ||
9120             flags->sa_expiry_pkts_hard)
9121                 nb_pkts = IPSEC_TEST_PACKETS_MAX;
9122
9123         for (i = 0; i < RTE_DIM(aead_list); i++) {
9124                 test_ipsec_td_prepare(&aead_list[i],
9125                                       NULL,
9126                                       flags,
9127                                       td_outb,
9128                                       nb_pkts);
9129
9130                 ret = test_ipsec_proto_process(td_outb, td_inb, nb_pkts, true,
9131                                                flags);
9132                 if (ret == TEST_SKIPPED)
9133                         continue;
9134
9135                 if (ret == TEST_FAILED)
9136                         return TEST_FAILED;
9137
9138                 test_ipsec_td_update(td_inb, td_outb, nb_pkts, flags);
9139
9140                 ret = test_ipsec_proto_process(td_inb, NULL, nb_pkts, true,
9141                                                flags);
9142                 if (ret == TEST_SKIPPED)
9143                         continue;
9144
9145                 if (ret == TEST_FAILED)
9146                         return TEST_FAILED;
9147
9148                 if (flags->display_alg)
9149                         test_ipsec_display_alg(&aead_list[i], NULL);
9150
9151                 pass_cnt++;
9152         }
9153
9154         if (pass_cnt > 0)
9155                 return TEST_SUCCESS;
9156         else
9157                 return TEST_SKIPPED;
9158 }
9159
9160 static int
9161 test_ipsec_proto_display_list(const void *data __rte_unused)
9162 {
9163         struct ipsec_test_flags flags;
9164
9165         memset(&flags, 0, sizeof(flags));
9166
9167         flags.display_alg = true;
9168
9169         return test_ipsec_proto_all(&flags);
9170 }
9171
9172 static int
9173 test_ipsec_proto_iv_gen(const void *data __rte_unused)
9174 {
9175         struct ipsec_test_flags flags;
9176
9177         memset(&flags, 0, sizeof(flags));
9178
9179         flags.iv_gen = true;
9180
9181         return test_ipsec_proto_all(&flags);
9182 }
9183
9184 static int
9185 test_ipsec_proto_sa_exp_pkts_soft(const void *data __rte_unused)
9186 {
9187         struct ipsec_test_flags flags;
9188
9189         memset(&flags, 0, sizeof(flags));
9190
9191         flags.sa_expiry_pkts_soft = true;
9192
9193         return test_ipsec_proto_all(&flags);
9194 }
9195
9196 static int
9197 test_ipsec_proto_sa_exp_pkts_hard(const void *data __rte_unused)
9198 {
9199         struct ipsec_test_flags flags;
9200
9201         memset(&flags, 0, sizeof(flags));
9202
9203         flags.sa_expiry_pkts_hard = true;
9204
9205         return test_ipsec_proto_all(&flags);
9206 }
9207
9208 static int
9209 test_ipsec_proto_err_icv_corrupt(const void *data __rte_unused)
9210 {
9211         struct ipsec_test_flags flags;
9212
9213         memset(&flags, 0, sizeof(flags));
9214
9215         flags.icv_corrupt = true;
9216
9217         return test_ipsec_proto_all(&flags);
9218 }
9219
9220 static int
9221 test_ipsec_proto_udp_encap(const void *data __rte_unused)
9222 {
9223         struct ipsec_test_flags flags;
9224
9225         memset(&flags, 0, sizeof(flags));
9226
9227         flags.udp_encap = true;
9228
9229         return test_ipsec_proto_all(&flags);
9230 }
9231
9232 static int
9233 test_PDCP_PROTO_all(void)
9234 {
9235         struct crypto_testsuite_params *ts_params = &testsuite_params;
9236         struct crypto_unittest_params *ut_params = &unittest_params;
9237         struct rte_cryptodev_info dev_info;
9238         int status;
9239
9240         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
9241         uint64_t feat_flags = dev_info.feature_flags;
9242
9243         if (!(feat_flags & RTE_CRYPTODEV_FF_SECURITY))
9244                 return TEST_SKIPPED;
9245
9246         /* Set action type */
9247         ut_params->type = gbl_action_type == RTE_SECURITY_ACTION_TYPE_NONE ?
9248                 RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL :
9249                 gbl_action_type;
9250
9251         if (security_proto_supported(ut_params->type,
9252                         RTE_SECURITY_PROTOCOL_PDCP) < 0)
9253                 return TEST_SKIPPED;
9254
9255         status = test_PDCP_PROTO_cplane_encap_all();
9256         status += test_PDCP_PROTO_cplane_decap_all();
9257         status += test_PDCP_PROTO_uplane_encap_all();
9258         status += test_PDCP_PROTO_uplane_decap_all();
9259         status += test_PDCP_PROTO_SGL_in_place_32B();
9260         status += test_PDCP_PROTO_SGL_oop_32B_128B();
9261         status += test_PDCP_PROTO_SGL_oop_32B_40B();
9262         status += test_PDCP_PROTO_SGL_oop_128B_32B();
9263         status += test_PDCP_SDAP_PROTO_encap_all();
9264         status += test_PDCP_SDAP_PROTO_decap_all();
9265         status += test_PDCP_PROTO_short_mac();
9266
9267         if (status)
9268                 return TEST_FAILED;
9269         else
9270                 return TEST_SUCCESS;
9271 }
9272
9273 static int
9274 test_docsis_proto_uplink(int i, struct docsis_test_data *d_td)
9275 {
9276         struct crypto_testsuite_params *ts_params = &testsuite_params;
9277         struct crypto_unittest_params *ut_params = &unittest_params;
9278         uint8_t *plaintext, *ciphertext;
9279         uint8_t *iv_ptr;
9280         int32_t cipher_len, crc_len;
9281         uint32_t crc_data_len;
9282         int ret = TEST_SUCCESS;
9283
9284         struct rte_security_ctx *ctx = (struct rte_security_ctx *)
9285                                         rte_cryptodev_get_sec_ctx(
9286                                                 ts_params->valid_devs[0]);
9287
9288         /* Verify the capabilities */
9289         struct rte_security_capability_idx sec_cap_idx;
9290         const struct rte_security_capability *sec_cap;
9291         const struct rte_cryptodev_capabilities *crypto_cap;
9292         const struct rte_cryptodev_symmetric_capability *sym_cap;
9293         int j = 0;
9294
9295         sec_cap_idx.action = ut_params->type;
9296         sec_cap_idx.protocol = RTE_SECURITY_PROTOCOL_DOCSIS;
9297         sec_cap_idx.docsis.direction = RTE_SECURITY_DOCSIS_UPLINK;
9298
9299         sec_cap = rte_security_capability_get(ctx, &sec_cap_idx);
9300         if (sec_cap == NULL)
9301                 return TEST_SKIPPED;
9302
9303         while ((crypto_cap = &sec_cap->crypto_capabilities[j++])->op !=
9304                         RTE_CRYPTO_OP_TYPE_UNDEFINED) {
9305                 if (crypto_cap->op == RTE_CRYPTO_OP_TYPE_SYMMETRIC &&
9306                                 crypto_cap->sym.xform_type ==
9307                                         RTE_CRYPTO_SYM_XFORM_CIPHER &&
9308                                 crypto_cap->sym.cipher.algo ==
9309                                         RTE_CRYPTO_CIPHER_AES_DOCSISBPI) {
9310                         sym_cap = &crypto_cap->sym;
9311                         if (rte_cryptodev_sym_capability_check_cipher(sym_cap,
9312                                                 d_td->key.len,
9313                                                 d_td->iv.len) == 0)
9314                                 break;
9315                 }
9316         }
9317
9318         if (crypto_cap->op == RTE_CRYPTO_OP_TYPE_UNDEFINED)
9319                 return TEST_SKIPPED;
9320
9321         /* Setup source mbuf payload */
9322         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
9323         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
9324                         rte_pktmbuf_tailroom(ut_params->ibuf));
9325
9326         ciphertext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
9327                         d_td->ciphertext.len);
9328
9329         memcpy(ciphertext, d_td->ciphertext.data, d_td->ciphertext.len);
9330
9331         /* Setup cipher session parameters */
9332         ut_params->cipher_xform.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
9333         ut_params->cipher_xform.cipher.algo = RTE_CRYPTO_CIPHER_AES_DOCSISBPI;
9334         ut_params->cipher_xform.cipher.op = RTE_CRYPTO_CIPHER_OP_DECRYPT;
9335         ut_params->cipher_xform.cipher.key.data = d_td->key.data;
9336         ut_params->cipher_xform.cipher.key.length = d_td->key.len;
9337         ut_params->cipher_xform.cipher.iv.length = d_td->iv.len;
9338         ut_params->cipher_xform.cipher.iv.offset = IV_OFFSET;
9339         ut_params->cipher_xform.next = NULL;
9340
9341         /* Setup DOCSIS session parameters */
9342         ut_params->docsis_xform.direction = RTE_SECURITY_DOCSIS_UPLINK;
9343
9344         struct rte_security_session_conf sess_conf = {
9345                 .action_type = ut_params->type,
9346                 .protocol = RTE_SECURITY_PROTOCOL_DOCSIS,
9347                 .docsis = ut_params->docsis_xform,
9348                 .crypto_xform = &ut_params->cipher_xform,
9349         };
9350
9351         /* Create security session */
9352         ut_params->sec_session = rte_security_session_create(ctx, &sess_conf,
9353                                         ts_params->session_mpool,
9354                                         ts_params->session_priv_mpool);
9355
9356         if (!ut_params->sec_session) {
9357                 printf("TestCase %s(%d) line %d: %s\n",
9358                         __func__, i, __LINE__, "failed to allocate session");
9359                 ret = TEST_FAILED;
9360                 goto on_err;
9361         }
9362
9363         /* Generate crypto op data structure */
9364         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
9365                                 RTE_CRYPTO_OP_TYPE_SYMMETRIC);
9366         if (!ut_params->op) {
9367                 printf("TestCase %s(%d) line %d: %s\n",
9368                         __func__, i, __LINE__,
9369                         "failed to allocate symmetric crypto operation");
9370                 ret = TEST_FAILED;
9371                 goto on_err;
9372         }
9373
9374         /* Setup CRC operation parameters */
9375         crc_len = d_td->ciphertext.no_crc == false ?
9376                         (d_td->ciphertext.len -
9377                                 d_td->ciphertext.crc_offset -
9378                                 RTE_ETHER_CRC_LEN) :
9379                         0;
9380         crc_len = crc_len > 0 ? crc_len : 0;
9381         crc_data_len = crc_len == 0 ? 0 : RTE_ETHER_CRC_LEN;
9382         ut_params->op->sym->auth.data.length = crc_len;
9383         ut_params->op->sym->auth.data.offset = d_td->ciphertext.crc_offset;
9384
9385         /* Setup cipher operation parameters */
9386         cipher_len = d_td->ciphertext.no_cipher == false ?
9387                         (d_td->ciphertext.len -
9388                                 d_td->ciphertext.cipher_offset) :
9389                         0;
9390         cipher_len = cipher_len > 0 ? cipher_len : 0;
9391         ut_params->op->sym->cipher.data.length = cipher_len;
9392         ut_params->op->sym->cipher.data.offset = d_td->ciphertext.cipher_offset;
9393
9394         /* Setup cipher IV */
9395         iv_ptr = (uint8_t *)ut_params->op + IV_OFFSET;
9396         rte_memcpy(iv_ptr, d_td->iv.data, d_td->iv.len);
9397
9398         /* Attach session to operation */
9399         rte_security_attach_session(ut_params->op, ut_params->sec_session);
9400
9401         /* Set crypto operation mbufs */
9402         ut_params->op->sym->m_src = ut_params->ibuf;
9403         ut_params->op->sym->m_dst = NULL;
9404
9405         /* Process crypto operation */
9406         if (process_crypto_request(ts_params->valid_devs[0], ut_params->op) ==
9407                         NULL) {
9408                 printf("TestCase %s(%d) line %d: %s\n",
9409                         __func__, i, __LINE__,
9410                         "failed to process security crypto op");
9411                 ret = TEST_FAILED;
9412                 goto on_err;
9413         }
9414
9415         if (ut_params->op->status != RTE_CRYPTO_OP_STATUS_SUCCESS) {
9416                 printf("TestCase %s(%d) line %d: %s\n",
9417                         __func__, i, __LINE__, "crypto op processing failed");
9418                 ret = TEST_FAILED;
9419                 goto on_err;
9420         }
9421
9422         /* Validate plaintext */
9423         plaintext = ciphertext;
9424
9425         if (memcmp(plaintext, d_td->plaintext.data,
9426                         d_td->plaintext.len - crc_data_len)) {
9427                 printf("TestCase %s(%d) line %d: %s\n",
9428                         __func__, i, __LINE__, "plaintext not as expected\n");
9429                 rte_hexdump(stdout, "expected", d_td->plaintext.data,
9430                                 d_td->plaintext.len);
9431                 rte_hexdump(stdout, "actual", plaintext, d_td->plaintext.len);
9432                 ret = TEST_FAILED;
9433                 goto on_err;
9434         }
9435
9436 on_err:
9437         rte_crypto_op_free(ut_params->op);
9438         ut_params->op = NULL;
9439
9440         if (ut_params->sec_session)
9441                 rte_security_session_destroy(ctx, ut_params->sec_session);
9442         ut_params->sec_session = NULL;
9443
9444         rte_pktmbuf_free(ut_params->ibuf);
9445         ut_params->ibuf = NULL;
9446
9447         return ret;
9448 }
9449
9450 static int
9451 test_docsis_proto_downlink(int i, struct docsis_test_data *d_td)
9452 {
9453         struct crypto_testsuite_params *ts_params = &testsuite_params;
9454         struct crypto_unittest_params *ut_params = &unittest_params;
9455         uint8_t *plaintext, *ciphertext;
9456         uint8_t *iv_ptr;
9457         int32_t cipher_len, crc_len;
9458         int ret = TEST_SUCCESS;
9459
9460         struct rte_security_ctx *ctx = (struct rte_security_ctx *)
9461                                         rte_cryptodev_get_sec_ctx(
9462                                                 ts_params->valid_devs[0]);
9463
9464         /* Verify the capabilities */
9465         struct rte_security_capability_idx sec_cap_idx;
9466         const struct rte_security_capability *sec_cap;
9467         const struct rte_cryptodev_capabilities *crypto_cap;
9468         const struct rte_cryptodev_symmetric_capability *sym_cap;
9469         int j = 0;
9470
9471         sec_cap_idx.action = ut_params->type;
9472         sec_cap_idx.protocol = RTE_SECURITY_PROTOCOL_DOCSIS;
9473         sec_cap_idx.docsis.direction = RTE_SECURITY_DOCSIS_DOWNLINK;
9474
9475         sec_cap = rte_security_capability_get(ctx, &sec_cap_idx);
9476         if (sec_cap == NULL)
9477                 return TEST_SKIPPED;
9478
9479         while ((crypto_cap = &sec_cap->crypto_capabilities[j++])->op !=
9480                         RTE_CRYPTO_OP_TYPE_UNDEFINED) {
9481                 if (crypto_cap->op == RTE_CRYPTO_OP_TYPE_SYMMETRIC &&
9482                                 crypto_cap->sym.xform_type ==
9483                                         RTE_CRYPTO_SYM_XFORM_CIPHER &&
9484                                 crypto_cap->sym.cipher.algo ==
9485                                         RTE_CRYPTO_CIPHER_AES_DOCSISBPI) {
9486                         sym_cap = &crypto_cap->sym;
9487                         if (rte_cryptodev_sym_capability_check_cipher(sym_cap,
9488                                                 d_td->key.len,
9489                                                 d_td->iv.len) == 0)
9490                                 break;
9491                 }
9492         }
9493
9494         if (crypto_cap->op == RTE_CRYPTO_OP_TYPE_UNDEFINED)
9495                 return TEST_SKIPPED;
9496
9497         /* Setup source mbuf payload */
9498         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
9499         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
9500                         rte_pktmbuf_tailroom(ut_params->ibuf));
9501
9502         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
9503                         d_td->plaintext.len);
9504
9505         memcpy(plaintext, d_td->plaintext.data, d_td->plaintext.len);
9506
9507         /* Setup cipher session parameters */
9508         ut_params->cipher_xform.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
9509         ut_params->cipher_xform.cipher.algo = RTE_CRYPTO_CIPHER_AES_DOCSISBPI;
9510         ut_params->cipher_xform.cipher.op = RTE_CRYPTO_CIPHER_OP_ENCRYPT;
9511         ut_params->cipher_xform.cipher.key.data = d_td->key.data;
9512         ut_params->cipher_xform.cipher.key.length = d_td->key.len;
9513         ut_params->cipher_xform.cipher.iv.length = d_td->iv.len;
9514         ut_params->cipher_xform.cipher.iv.offset = IV_OFFSET;
9515         ut_params->cipher_xform.next = NULL;
9516
9517         /* Setup DOCSIS session parameters */
9518         ut_params->docsis_xform.direction = RTE_SECURITY_DOCSIS_DOWNLINK;
9519
9520         struct rte_security_session_conf sess_conf = {
9521                 .action_type = ut_params->type,
9522                 .protocol = RTE_SECURITY_PROTOCOL_DOCSIS,
9523                 .docsis = ut_params->docsis_xform,
9524                 .crypto_xform = &ut_params->cipher_xform,
9525         };
9526
9527         /* Create security session */
9528         ut_params->sec_session = rte_security_session_create(ctx, &sess_conf,
9529                                         ts_params->session_mpool,
9530                                         ts_params->session_priv_mpool);
9531
9532         if (!ut_params->sec_session) {
9533                 printf("TestCase %s(%d) line %d: %s\n",
9534                         __func__, i, __LINE__, "failed to allocate session");
9535                 ret = TEST_FAILED;
9536                 goto on_err;
9537         }
9538
9539         /* Generate crypto op data structure */
9540         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
9541                                 RTE_CRYPTO_OP_TYPE_SYMMETRIC);
9542         if (!ut_params->op) {
9543                 printf("TestCase %s(%d) line %d: %s\n",
9544                         __func__, i, __LINE__,
9545                         "failed to allocate security crypto operation");
9546                 ret = TEST_FAILED;
9547                 goto on_err;
9548         }
9549
9550         /* Setup CRC operation parameters */
9551         crc_len = d_td->plaintext.no_crc == false ?
9552                         (d_td->plaintext.len -
9553                                 d_td->plaintext.crc_offset -
9554                                 RTE_ETHER_CRC_LEN) :
9555                         0;
9556         crc_len = crc_len > 0 ? crc_len : 0;
9557         ut_params->op->sym->auth.data.length = crc_len;
9558         ut_params->op->sym->auth.data.offset = d_td->plaintext.crc_offset;
9559
9560         /* Setup cipher operation parameters */
9561         cipher_len = d_td->plaintext.no_cipher == false ?
9562                         (d_td->plaintext.len -
9563                                 d_td->plaintext.cipher_offset) :
9564                         0;
9565         cipher_len = cipher_len > 0 ? cipher_len : 0;
9566         ut_params->op->sym->cipher.data.length = cipher_len;
9567         ut_params->op->sym->cipher.data.offset = d_td->plaintext.cipher_offset;
9568
9569         /* Setup cipher IV */
9570         iv_ptr = (uint8_t *)ut_params->op + IV_OFFSET;
9571         rte_memcpy(iv_ptr, d_td->iv.data, d_td->iv.len);
9572
9573         /* Attach session to operation */
9574         rte_security_attach_session(ut_params->op, ut_params->sec_session);
9575
9576         /* Set crypto operation mbufs */
9577         ut_params->op->sym->m_src = ut_params->ibuf;
9578         ut_params->op->sym->m_dst = NULL;
9579
9580         /* Process crypto operation */
9581         if (process_crypto_request(ts_params->valid_devs[0], ut_params->op) ==
9582                         NULL) {
9583                 printf("TestCase %s(%d) line %d: %s\n",
9584                         __func__, i, __LINE__,
9585                         "failed to process security crypto op");
9586                 ret = TEST_FAILED;
9587                 goto on_err;
9588         }
9589
9590         if (ut_params->op->status != RTE_CRYPTO_OP_STATUS_SUCCESS) {
9591                 printf("TestCase %s(%d) line %d: %s\n",
9592                         __func__, i, __LINE__, "crypto op processing failed");
9593                 ret = TEST_FAILED;
9594                 goto on_err;
9595         }
9596
9597         /* Validate ciphertext */
9598         ciphertext = plaintext;
9599
9600         if (memcmp(ciphertext, d_td->ciphertext.data, d_td->ciphertext.len)) {
9601                 printf("TestCase %s(%d) line %d: %s\n",
9602                         __func__, i, __LINE__, "ciphertext not as expected\n");
9603                 rte_hexdump(stdout, "expected", d_td->ciphertext.data,
9604                                 d_td->ciphertext.len);
9605                 rte_hexdump(stdout, "actual", ciphertext, d_td->ciphertext.len);
9606                 ret = TEST_FAILED;
9607                 goto on_err;
9608         }
9609
9610 on_err:
9611         rte_crypto_op_free(ut_params->op);
9612         ut_params->op = NULL;
9613
9614         if (ut_params->sec_session)
9615                 rte_security_session_destroy(ctx, ut_params->sec_session);
9616         ut_params->sec_session = NULL;
9617
9618         rte_pktmbuf_free(ut_params->ibuf);
9619         ut_params->ibuf = NULL;
9620
9621         return ret;
9622 }
9623
9624 #define TEST_DOCSIS_COUNT(func) do {                    \
9625         int ret = func;                                 \
9626         if (ret == TEST_SUCCESS)  {                     \
9627                 printf("\t%2d)", n++);                  \
9628                 printf("+++++ PASSED:" #func"\n");      \
9629                 p++;                                    \
9630         } else if (ret == TEST_SKIPPED) {               \
9631                 printf("\t%2d)", n++);                  \
9632                 printf("~~~~~ SKIPPED:" #func"\n");     \
9633                 s++;                                    \
9634         } else {                                        \
9635                 printf("\t%2d)", n++);                  \
9636                 printf("----- FAILED:" #func"\n");      \
9637                 f++;                                    \
9638         }                                               \
9639 } while (0)
9640
9641 static int
9642 test_DOCSIS_PROTO_uplink_all(void)
9643 {
9644         int p = 0, s = 0, f = 0, n = 0;
9645
9646         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(1, &docsis_test_case_1));
9647         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(2, &docsis_test_case_2));
9648         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(3, &docsis_test_case_3));
9649         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(4, &docsis_test_case_4));
9650         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(5, &docsis_test_case_5));
9651         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(6, &docsis_test_case_6));
9652         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(7, &docsis_test_case_7));
9653         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(8, &docsis_test_case_8));
9654         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(9, &docsis_test_case_9));
9655         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(10, &docsis_test_case_10));
9656         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(11, &docsis_test_case_11));
9657         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(12, &docsis_test_case_12));
9658         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(13, &docsis_test_case_13));
9659         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(14, &docsis_test_case_14));
9660         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(15, &docsis_test_case_15));
9661         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(16, &docsis_test_case_16));
9662         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(17, &docsis_test_case_17));
9663         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(18, &docsis_test_case_18));
9664         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(19, &docsis_test_case_19));
9665         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(20, &docsis_test_case_20));
9666         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(21, &docsis_test_case_21));
9667         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(22, &docsis_test_case_22));
9668         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(23, &docsis_test_case_23));
9669         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(24, &docsis_test_case_24));
9670         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(25, &docsis_test_case_25));
9671         TEST_DOCSIS_COUNT(test_docsis_proto_uplink(26, &docsis_test_case_26));
9672
9673         if (f)
9674                 printf("## %s: %d passed out of %d (%d skipped)\n",
9675                         __func__, p, n, s);
9676
9677         return f;
9678 };
9679
9680 static int
9681 test_DOCSIS_PROTO_downlink_all(void)
9682 {
9683         int p = 0, s = 0, f = 0, n = 0;
9684
9685         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(1, &docsis_test_case_1));
9686         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(2, &docsis_test_case_2));
9687         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(3, &docsis_test_case_3));
9688         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(4, &docsis_test_case_4));
9689         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(5, &docsis_test_case_5));
9690         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(6, &docsis_test_case_6));
9691         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(7, &docsis_test_case_7));
9692         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(8, &docsis_test_case_8));
9693         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(9, &docsis_test_case_9));
9694         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(10, &docsis_test_case_10));
9695         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(11, &docsis_test_case_11));
9696         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(12, &docsis_test_case_12));
9697         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(13, &docsis_test_case_13));
9698         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(14, &docsis_test_case_14));
9699         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(15, &docsis_test_case_15));
9700         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(16, &docsis_test_case_16));
9701         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(17, &docsis_test_case_17));
9702         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(18, &docsis_test_case_18));
9703         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(19, &docsis_test_case_19));
9704         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(20, &docsis_test_case_20));
9705         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(21, &docsis_test_case_21));
9706         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(22, &docsis_test_case_22));
9707         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(23, &docsis_test_case_23));
9708         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(24, &docsis_test_case_24));
9709         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(25, &docsis_test_case_25));
9710         TEST_DOCSIS_COUNT(test_docsis_proto_downlink(26, &docsis_test_case_26));
9711
9712         if (f)
9713                 printf("## %s: %d passed out of %d (%d skipped)\n",
9714                         __func__, p, n, s);
9715
9716         return f;
9717 };
9718
9719 static int
9720 test_DOCSIS_PROTO_all(void)
9721 {
9722         struct crypto_testsuite_params *ts_params = &testsuite_params;
9723         struct crypto_unittest_params *ut_params = &unittest_params;
9724         struct rte_cryptodev_info dev_info;
9725         int status;
9726
9727         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
9728         uint64_t feat_flags = dev_info.feature_flags;
9729
9730         if (!(feat_flags & RTE_CRYPTODEV_FF_SECURITY))
9731                 return TEST_SKIPPED;
9732
9733         /* Set action type */
9734         ut_params->type = gbl_action_type == RTE_SECURITY_ACTION_TYPE_NONE ?
9735                 RTE_SECURITY_ACTION_TYPE_LOOKASIDE_PROTOCOL :
9736                 gbl_action_type;
9737
9738         if (security_proto_supported(ut_params->type,
9739                         RTE_SECURITY_PROTOCOL_DOCSIS) < 0)
9740                 return TEST_SKIPPED;
9741
9742         status = test_DOCSIS_PROTO_uplink_all();
9743         status += test_DOCSIS_PROTO_downlink_all();
9744
9745         if (status)
9746                 return TEST_FAILED;
9747         else
9748                 return TEST_SUCCESS;
9749 }
9750 #endif
9751
9752 static int
9753 test_AES_GCM_authenticated_encryption_test_case_1(void)
9754 {
9755         return test_authenticated_encryption(&gcm_test_case_1);
9756 }
9757
9758 static int
9759 test_AES_GCM_authenticated_encryption_test_case_2(void)
9760 {
9761         return test_authenticated_encryption(&gcm_test_case_2);
9762 }
9763
9764 static int
9765 test_AES_GCM_authenticated_encryption_test_case_3(void)
9766 {
9767         return test_authenticated_encryption(&gcm_test_case_3);
9768 }
9769
9770 static int
9771 test_AES_GCM_authenticated_encryption_test_case_4(void)
9772 {
9773         return test_authenticated_encryption(&gcm_test_case_4);
9774 }
9775
9776 static int
9777 test_AES_GCM_authenticated_encryption_test_case_5(void)
9778 {
9779         return test_authenticated_encryption(&gcm_test_case_5);
9780 }
9781
9782 static int
9783 test_AES_GCM_authenticated_encryption_test_case_6(void)
9784 {
9785         return test_authenticated_encryption(&gcm_test_case_6);
9786 }
9787
9788 static int
9789 test_AES_GCM_authenticated_encryption_test_case_7(void)
9790 {
9791         return test_authenticated_encryption(&gcm_test_case_7);
9792 }
9793
9794 static int
9795 test_AES_GCM_authenticated_encryption_test_case_8(void)
9796 {
9797         return test_authenticated_encryption(&gcm_test_case_8);
9798 }
9799
9800 static int
9801 test_AES_GCM_J0_authenticated_encryption_test_case_1(void)
9802 {
9803         return test_authenticated_encryption(&gcm_J0_test_case_1);
9804 }
9805
9806 static int
9807 test_AES_GCM_auth_encryption_test_case_192_1(void)
9808 {
9809         return test_authenticated_encryption(&gcm_test_case_192_1);
9810 }
9811
9812 static int
9813 test_AES_GCM_auth_encryption_test_case_192_2(void)
9814 {
9815         return test_authenticated_encryption(&gcm_test_case_192_2);
9816 }
9817
9818 static int
9819 test_AES_GCM_auth_encryption_test_case_192_3(void)
9820 {
9821         return test_authenticated_encryption(&gcm_test_case_192_3);
9822 }
9823
9824 static int
9825 test_AES_GCM_auth_encryption_test_case_192_4(void)
9826 {
9827         return test_authenticated_encryption(&gcm_test_case_192_4);
9828 }
9829
9830 static int
9831 test_AES_GCM_auth_encryption_test_case_192_5(void)
9832 {
9833         return test_authenticated_encryption(&gcm_test_case_192_5);
9834 }
9835
9836 static int
9837 test_AES_GCM_auth_encryption_test_case_192_6(void)
9838 {
9839         return test_authenticated_encryption(&gcm_test_case_192_6);
9840 }
9841
9842 static int
9843 test_AES_GCM_auth_encryption_test_case_192_7(void)
9844 {
9845         return test_authenticated_encryption(&gcm_test_case_192_7);
9846 }
9847
9848 static int
9849 test_AES_GCM_auth_encryption_test_case_256_1(void)
9850 {
9851         return test_authenticated_encryption(&gcm_test_case_256_1);
9852 }
9853
9854 static int
9855 test_AES_GCM_auth_encryption_test_case_256_2(void)
9856 {
9857         return test_authenticated_encryption(&gcm_test_case_256_2);
9858 }
9859
9860 static int
9861 test_AES_GCM_auth_encryption_test_case_256_3(void)
9862 {
9863         return test_authenticated_encryption(&gcm_test_case_256_3);
9864 }
9865
9866 static int
9867 test_AES_GCM_auth_encryption_test_case_256_4(void)
9868 {
9869         return test_authenticated_encryption(&gcm_test_case_256_4);
9870 }
9871
9872 static int
9873 test_AES_GCM_auth_encryption_test_case_256_5(void)
9874 {
9875         return test_authenticated_encryption(&gcm_test_case_256_5);
9876 }
9877
9878 static int
9879 test_AES_GCM_auth_encryption_test_case_256_6(void)
9880 {
9881         return test_authenticated_encryption(&gcm_test_case_256_6);
9882 }
9883
9884 static int
9885 test_AES_GCM_auth_encryption_test_case_256_7(void)
9886 {
9887         return test_authenticated_encryption(&gcm_test_case_256_7);
9888 }
9889
9890 static int
9891 test_AES_GCM_auth_encryption_test_case_aad_1(void)
9892 {
9893         return test_authenticated_encryption(&gcm_test_case_aad_1);
9894 }
9895
9896 static int
9897 test_AES_GCM_auth_encryption_test_case_aad_2(void)
9898 {
9899         return test_authenticated_encryption(&gcm_test_case_aad_2);
9900 }
9901
9902 static int
9903 test_AES_GCM_auth_encryption_fail_iv_corrupt(void)
9904 {
9905         struct aead_test_data tdata;
9906         int res;
9907
9908         RTE_LOG(INFO, USER1, "This is a negative test, errors are expected\n");
9909         memcpy(&tdata, &gcm_test_case_7, sizeof(struct aead_test_data));
9910         tdata.iv.data[0] += 1;
9911         res = test_authenticated_encryption(&tdata);
9912         if (res == TEST_SKIPPED)
9913                 return res;
9914         TEST_ASSERT_EQUAL(res, TEST_FAILED, "encryption not failed");
9915         return TEST_SUCCESS;
9916 }
9917
9918 static int
9919 test_AES_GCM_auth_encryption_fail_in_data_corrupt(void)
9920 {
9921         struct aead_test_data tdata;
9922         int res;
9923
9924         RTE_LOG(INFO, USER1, "This is a negative test, errors are expected\n");
9925         memcpy(&tdata, &gcm_test_case_7, sizeof(struct aead_test_data));
9926         tdata.plaintext.data[0] += 1;
9927         res = test_authenticated_encryption(&tdata);
9928         if (res == TEST_SKIPPED)
9929                 return res;
9930         TEST_ASSERT_EQUAL(res, TEST_FAILED, "encryption not failed");
9931         return TEST_SUCCESS;
9932 }
9933
9934 static int
9935 test_AES_GCM_auth_encryption_fail_out_data_corrupt(void)
9936 {
9937         struct aead_test_data tdata;
9938         int res;
9939
9940         RTE_LOG(INFO, USER1, "This is a negative test, errors are expected\n");
9941         memcpy(&tdata, &gcm_test_case_7, sizeof(struct aead_test_data));
9942         tdata.ciphertext.data[0] += 1;
9943         res = test_authenticated_encryption(&tdata);
9944         if (res == TEST_SKIPPED)
9945                 return res;
9946         TEST_ASSERT_EQUAL(res, TEST_FAILED, "encryption not failed");
9947         return TEST_SUCCESS;
9948 }
9949
9950 static int
9951 test_AES_GCM_auth_encryption_fail_aad_len_corrupt(void)
9952 {
9953         struct aead_test_data tdata;
9954         int res;
9955
9956         RTE_LOG(INFO, USER1, "This is a negative test, errors are expected\n");
9957         memcpy(&tdata, &gcm_test_case_7, sizeof(struct aead_test_data));
9958         tdata.aad.len += 1;
9959         res = test_authenticated_encryption(&tdata);
9960         if (res == TEST_SKIPPED)
9961                 return res;
9962         TEST_ASSERT_EQUAL(res, TEST_FAILED, "encryption not failed");
9963         return TEST_SUCCESS;
9964 }
9965
9966 static int
9967 test_AES_GCM_auth_encryption_fail_aad_corrupt(void)
9968 {
9969         struct aead_test_data tdata;
9970         uint8_t aad[gcm_test_case_7.aad.len];
9971         int res;
9972
9973         RTE_LOG(INFO, USER1, "This is a negative test, errors are expected\n");
9974         memcpy(&tdata, &gcm_test_case_7, sizeof(struct aead_test_data));
9975         memcpy(aad, gcm_test_case_7.aad.data, gcm_test_case_7.aad.len);
9976         aad[0] += 1;
9977         tdata.aad.data = aad;
9978         res = test_authenticated_encryption(&tdata);
9979         if (res == TEST_SKIPPED)
9980                 return res;
9981         TEST_ASSERT_EQUAL(res, TEST_FAILED, "encryption not failed");
9982         return TEST_SUCCESS;
9983 }
9984
9985 static int
9986 test_AES_GCM_auth_encryption_fail_tag_corrupt(void)
9987 {
9988         struct aead_test_data tdata;
9989         int res;
9990
9991         RTE_LOG(INFO, USER1, "This is a negative test, errors are expected\n");
9992         memcpy(&tdata, &gcm_test_case_7, sizeof(struct aead_test_data));
9993         tdata.auth_tag.data[0] += 1;
9994         res = test_authenticated_encryption(&tdata);
9995         if (res == TEST_SKIPPED)
9996                 return res;
9997         TEST_ASSERT_EQUAL(res, TEST_FAILED, "encryption not failed");
9998         return TEST_SUCCESS;
9999 }
10000
10001 static int
10002 test_authenticated_decryption(const struct aead_test_data *tdata)
10003 {
10004         struct crypto_testsuite_params *ts_params = &testsuite_params;
10005         struct crypto_unittest_params *ut_params = &unittest_params;
10006
10007         int retval;
10008         uint8_t *plaintext;
10009         uint32_t i;
10010         struct rte_cryptodev_info dev_info;
10011
10012         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
10013         uint64_t feat_flags = dev_info.feature_flags;
10014
10015         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
10016                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
10017                 printf("Device doesn't support RAW data-path APIs.\n");
10018                 return TEST_SKIPPED;
10019         }
10020
10021         /* Verify the capabilities */
10022         struct rte_cryptodev_sym_capability_idx cap_idx;
10023         const struct rte_cryptodev_symmetric_capability *capability;
10024         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AEAD;
10025         cap_idx.algo.aead = tdata->algo;
10026         capability = rte_cryptodev_sym_capability_get(
10027                         ts_params->valid_devs[0], &cap_idx);
10028         if (capability == NULL)
10029                 return TEST_SKIPPED;
10030         if (rte_cryptodev_sym_capability_check_aead(
10031                         capability, tdata->key.len, tdata->auth_tag.len,
10032                         tdata->aad.len, tdata->iv.len))
10033                 return TEST_SKIPPED;
10034
10035         /* Create AEAD session */
10036         retval = create_aead_session(ts_params->valid_devs[0],
10037                         tdata->algo,
10038                         RTE_CRYPTO_AEAD_OP_DECRYPT,
10039                         tdata->key.data, tdata->key.len,
10040                         tdata->aad.len, tdata->auth_tag.len,
10041                         tdata->iv.len);
10042         if (retval < 0)
10043                 return retval;
10044
10045         /* alloc mbuf and set payload */
10046         if (tdata->aad.len > MBUF_SIZE) {
10047                 ut_params->ibuf = rte_pktmbuf_alloc(ts_params->large_mbuf_pool);
10048                 /* Populate full size of add data */
10049                 for (i = 32; i < MAX_AAD_LENGTH; i += 32)
10050                         memcpy(&tdata->aad.data[i], &tdata->aad.data[0], 32);
10051         } else
10052                 ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
10053
10054         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
10055                         rte_pktmbuf_tailroom(ut_params->ibuf));
10056
10057         /* Create AEAD operation */
10058         retval = create_aead_operation(RTE_CRYPTO_AEAD_OP_DECRYPT, tdata);
10059         if (retval < 0)
10060                 return retval;
10061
10062         rte_crypto_op_attach_sym_session(ut_params->op, ut_params->sess);
10063
10064         ut_params->op->sym->m_src = ut_params->ibuf;
10065
10066         /* Process crypto operation */
10067         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
10068                 process_cpu_aead_op(ts_params->valid_devs[0], ut_params->op);
10069         else if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
10070                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
10071                                 ut_params->op, 0, 0, 0, 0);
10072         else
10073                 TEST_ASSERT_NOT_NULL(
10074                         process_crypto_request(ts_params->valid_devs[0],
10075                         ut_params->op), "failed to process sym crypto op");
10076
10077         TEST_ASSERT_EQUAL(ut_params->op->status, RTE_CRYPTO_OP_STATUS_SUCCESS,
10078                         "crypto op processing failed");
10079
10080         if (ut_params->op->sym->m_dst)
10081                 plaintext = rte_pktmbuf_mtod(ut_params->op->sym->m_dst,
10082                                 uint8_t *);
10083         else
10084                 plaintext = rte_pktmbuf_mtod_offset(ut_params->op->sym->m_src,
10085                                 uint8_t *,
10086                                 ut_params->op->sym->cipher.data.offset);
10087
10088         debug_hexdump(stdout, "plaintext:", plaintext, tdata->ciphertext.len);
10089
10090         /* Validate obuf */
10091         TEST_ASSERT_BUFFERS_ARE_EQUAL(
10092                         plaintext,
10093                         tdata->plaintext.data,
10094                         tdata->plaintext.len,
10095                         "Plaintext data not as expected");
10096
10097         TEST_ASSERT_EQUAL(ut_params->op->status,
10098                         RTE_CRYPTO_OP_STATUS_SUCCESS,
10099                         "Authentication failed");
10100
10101         return 0;
10102 }
10103
10104 static int
10105 test_AES_GCM_authenticated_decryption_test_case_1(void)
10106 {
10107         return test_authenticated_decryption(&gcm_test_case_1);
10108 }
10109
10110 static int
10111 test_AES_GCM_authenticated_decryption_test_case_2(void)
10112 {
10113         return test_authenticated_decryption(&gcm_test_case_2);
10114 }
10115
10116 static int
10117 test_AES_GCM_authenticated_decryption_test_case_3(void)
10118 {
10119         return test_authenticated_decryption(&gcm_test_case_3);
10120 }
10121
10122 static int
10123 test_AES_GCM_authenticated_decryption_test_case_4(void)
10124 {
10125         return test_authenticated_decryption(&gcm_test_case_4);
10126 }
10127
10128 static int
10129 test_AES_GCM_authenticated_decryption_test_case_5(void)
10130 {
10131         return test_authenticated_decryption(&gcm_test_case_5);
10132 }
10133
10134 static int
10135 test_AES_GCM_authenticated_decryption_test_case_6(void)
10136 {
10137         return test_authenticated_decryption(&gcm_test_case_6);
10138 }
10139
10140 static int
10141 test_AES_GCM_authenticated_decryption_test_case_7(void)
10142 {
10143         return test_authenticated_decryption(&gcm_test_case_7);
10144 }
10145
10146 static int
10147 test_AES_GCM_authenticated_decryption_test_case_8(void)
10148 {
10149         return test_authenticated_decryption(&gcm_test_case_8);
10150 }
10151
10152 static int
10153 test_AES_GCM_J0_authenticated_decryption_test_case_1(void)
10154 {
10155         return test_authenticated_decryption(&gcm_J0_test_case_1);
10156 }
10157
10158 static int
10159 test_AES_GCM_auth_decryption_test_case_192_1(void)
10160 {
10161         return test_authenticated_decryption(&gcm_test_case_192_1);
10162 }
10163
10164 static int
10165 test_AES_GCM_auth_decryption_test_case_192_2(void)
10166 {
10167         return test_authenticated_decryption(&gcm_test_case_192_2);
10168 }
10169
10170 static int
10171 test_AES_GCM_auth_decryption_test_case_192_3(void)
10172 {
10173         return test_authenticated_decryption(&gcm_test_case_192_3);
10174 }
10175
10176 static int
10177 test_AES_GCM_auth_decryption_test_case_192_4(void)
10178 {
10179         return test_authenticated_decryption(&gcm_test_case_192_4);
10180 }
10181
10182 static int
10183 test_AES_GCM_auth_decryption_test_case_192_5(void)
10184 {
10185         return test_authenticated_decryption(&gcm_test_case_192_5);
10186 }
10187
10188 static int
10189 test_AES_GCM_auth_decryption_test_case_192_6(void)
10190 {
10191         return test_authenticated_decryption(&gcm_test_case_192_6);
10192 }
10193
10194 static int
10195 test_AES_GCM_auth_decryption_test_case_192_7(void)
10196 {
10197         return test_authenticated_decryption(&gcm_test_case_192_7);
10198 }
10199
10200 static int
10201 test_AES_GCM_auth_decryption_test_case_256_1(void)
10202 {
10203         return test_authenticated_decryption(&gcm_test_case_256_1);
10204 }
10205
10206 static int
10207 test_AES_GCM_auth_decryption_test_case_256_2(void)
10208 {
10209         return test_authenticated_decryption(&gcm_test_case_256_2);
10210 }
10211
10212 static int
10213 test_AES_GCM_auth_decryption_test_case_256_3(void)
10214 {
10215         return test_authenticated_decryption(&gcm_test_case_256_3);
10216 }
10217
10218 static int
10219 test_AES_GCM_auth_decryption_test_case_256_4(void)
10220 {
10221         return test_authenticated_decryption(&gcm_test_case_256_4);
10222 }
10223
10224 static int
10225 test_AES_GCM_auth_decryption_test_case_256_5(void)
10226 {
10227         return test_authenticated_decryption(&gcm_test_case_256_5);
10228 }
10229
10230 static int
10231 test_AES_GCM_auth_decryption_test_case_256_6(void)
10232 {
10233         return test_authenticated_decryption(&gcm_test_case_256_6);
10234 }
10235
10236 static int
10237 test_AES_GCM_auth_decryption_test_case_256_7(void)
10238 {
10239         return test_authenticated_decryption(&gcm_test_case_256_7);
10240 }
10241
10242 static int
10243 test_AES_GCM_auth_decryption_test_case_aad_1(void)
10244 {
10245         return test_authenticated_decryption(&gcm_test_case_aad_1);
10246 }
10247
10248 static int
10249 test_AES_GCM_auth_decryption_test_case_aad_2(void)
10250 {
10251         return test_authenticated_decryption(&gcm_test_case_aad_2);
10252 }
10253
10254 static int
10255 test_AES_GCM_auth_decryption_fail_iv_corrupt(void)
10256 {
10257         struct aead_test_data tdata;
10258         int res;
10259
10260         memcpy(&tdata, &gcm_test_case_7, sizeof(struct aead_test_data));
10261         tdata.iv.data[0] += 1;
10262         res = test_authenticated_decryption(&tdata);
10263         if (res == TEST_SKIPPED)
10264                 return res;
10265         TEST_ASSERT_EQUAL(res, TEST_FAILED, "decryption not failed");
10266         return TEST_SUCCESS;
10267 }
10268
10269 static int
10270 test_AES_GCM_auth_decryption_fail_in_data_corrupt(void)
10271 {
10272         struct aead_test_data tdata;
10273         int res;
10274
10275         RTE_LOG(INFO, USER1, "This is a negative test, errors are expected\n");
10276         memcpy(&tdata, &gcm_test_case_7, sizeof(struct aead_test_data));
10277         tdata.plaintext.data[0] += 1;
10278         res = test_authenticated_decryption(&tdata);
10279         if (res == TEST_SKIPPED)
10280                 return res;
10281         TEST_ASSERT_EQUAL(res, TEST_FAILED, "decryption not failed");
10282         return TEST_SUCCESS;
10283 }
10284
10285 static int
10286 test_AES_GCM_auth_decryption_fail_out_data_corrupt(void)
10287 {
10288         struct aead_test_data tdata;
10289         int res;
10290
10291         memcpy(&tdata, &gcm_test_case_7, sizeof(struct aead_test_data));
10292         tdata.ciphertext.data[0] += 1;
10293         res = test_authenticated_decryption(&tdata);
10294         if (res == TEST_SKIPPED)
10295                 return res;
10296         TEST_ASSERT_EQUAL(res, TEST_FAILED, "decryption not failed");
10297         return TEST_SUCCESS;
10298 }
10299
10300 static int
10301 test_AES_GCM_auth_decryption_fail_aad_len_corrupt(void)
10302 {
10303         struct aead_test_data tdata;
10304         int res;
10305
10306         memcpy(&tdata, &gcm_test_case_7, sizeof(struct aead_test_data));
10307         tdata.aad.len += 1;
10308         res = test_authenticated_decryption(&tdata);
10309         if (res == TEST_SKIPPED)
10310                 return res;
10311         TEST_ASSERT_EQUAL(res, TEST_FAILED, "decryption not failed");
10312         return TEST_SUCCESS;
10313 }
10314
10315 static int
10316 test_AES_GCM_auth_decryption_fail_aad_corrupt(void)
10317 {
10318         struct aead_test_data tdata;
10319         uint8_t aad[gcm_test_case_7.aad.len];
10320         int res;
10321
10322         memcpy(&tdata, &gcm_test_case_7, sizeof(struct aead_test_data));
10323         memcpy(aad, gcm_test_case_7.aad.data, gcm_test_case_7.aad.len);
10324         aad[0] += 1;
10325         tdata.aad.data = aad;
10326         res = test_authenticated_decryption(&tdata);
10327         if (res == TEST_SKIPPED)
10328                 return res;
10329         TEST_ASSERT_EQUAL(res, TEST_FAILED, "decryption not failed");
10330         return TEST_SUCCESS;
10331 }
10332
10333 static int
10334 test_AES_GCM_auth_decryption_fail_tag_corrupt(void)
10335 {
10336         struct aead_test_data tdata;
10337         int res;
10338
10339         memcpy(&tdata, &gcm_test_case_7, sizeof(struct aead_test_data));
10340         tdata.auth_tag.data[0] += 1;
10341         res = test_authenticated_decryption(&tdata);
10342         if (res == TEST_SKIPPED)
10343                 return res;
10344         TEST_ASSERT_EQUAL(res, TEST_FAILED, "authentication not failed");
10345         return TEST_SUCCESS;
10346 }
10347
10348 static int
10349 test_authenticated_encryption_oop(const struct aead_test_data *tdata)
10350 {
10351         struct crypto_testsuite_params *ts_params = &testsuite_params;
10352         struct crypto_unittest_params *ut_params = &unittest_params;
10353
10354         int retval;
10355         uint8_t *ciphertext, *auth_tag;
10356         uint16_t plaintext_pad_len;
10357
10358         /* Verify the capabilities */
10359         struct rte_cryptodev_sym_capability_idx cap_idx;
10360         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AEAD;
10361         cap_idx.algo.aead = tdata->algo;
10362         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
10363                         &cap_idx) == NULL)
10364                 return TEST_SKIPPED;
10365
10366         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
10367                 return TEST_SKIPPED;
10368
10369         /* not supported with CPU crypto */
10370         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
10371                 return TEST_SKIPPED;
10372
10373         /* Create AEAD session */
10374         retval = create_aead_session(ts_params->valid_devs[0],
10375                         tdata->algo,
10376                         RTE_CRYPTO_AEAD_OP_ENCRYPT,
10377                         tdata->key.data, tdata->key.len,
10378                         tdata->aad.len, tdata->auth_tag.len,
10379                         tdata->iv.len);
10380         if (retval < 0)
10381                 return retval;
10382
10383         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
10384         ut_params->obuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
10385
10386         /* clear mbuf payload */
10387         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
10388                         rte_pktmbuf_tailroom(ut_params->ibuf));
10389         memset(rte_pktmbuf_mtod(ut_params->obuf, uint8_t *), 0,
10390                         rte_pktmbuf_tailroom(ut_params->obuf));
10391
10392         /* Create AEAD operation */
10393         retval = create_aead_operation(RTE_CRYPTO_AEAD_OP_ENCRYPT, tdata);
10394         if (retval < 0)
10395                 return retval;
10396
10397         rte_crypto_op_attach_sym_session(ut_params->op, ut_params->sess);
10398
10399         ut_params->op->sym->m_src = ut_params->ibuf;
10400         ut_params->op->sym->m_dst = ut_params->obuf;
10401
10402         /* Process crypto operation */
10403         TEST_ASSERT_NOT_NULL(process_crypto_request(ts_params->valid_devs[0],
10404                         ut_params->op), "failed to process sym crypto op");
10405
10406         TEST_ASSERT_EQUAL(ut_params->op->status, RTE_CRYPTO_OP_STATUS_SUCCESS,
10407                         "crypto op processing failed");
10408
10409         plaintext_pad_len = RTE_ALIGN_CEIL(tdata->plaintext.len, 16);
10410
10411         ciphertext = rte_pktmbuf_mtod_offset(ut_params->obuf, uint8_t *,
10412                         ut_params->op->sym->cipher.data.offset);
10413         auth_tag = ciphertext + plaintext_pad_len;
10414
10415         debug_hexdump(stdout, "ciphertext:", ciphertext, tdata->ciphertext.len);
10416         debug_hexdump(stdout, "auth tag:", auth_tag, tdata->auth_tag.len);
10417
10418         /* Validate obuf */
10419         TEST_ASSERT_BUFFERS_ARE_EQUAL(
10420                         ciphertext,
10421                         tdata->ciphertext.data,
10422                         tdata->ciphertext.len,
10423                         "Ciphertext data not as expected");
10424
10425         TEST_ASSERT_BUFFERS_ARE_EQUAL(
10426                         auth_tag,
10427                         tdata->auth_tag.data,
10428                         tdata->auth_tag.len,
10429                         "Generated auth tag not as expected");
10430
10431         return 0;
10432
10433 }
10434
10435 static int
10436 test_AES_GCM_authenticated_encryption_oop_test_case_1(void)
10437 {
10438         return test_authenticated_encryption_oop(&gcm_test_case_5);
10439 }
10440
10441 static int
10442 test_authenticated_decryption_oop(const struct aead_test_data *tdata)
10443 {
10444         struct crypto_testsuite_params *ts_params = &testsuite_params;
10445         struct crypto_unittest_params *ut_params = &unittest_params;
10446
10447         int retval;
10448         uint8_t *plaintext;
10449
10450         /* Verify the capabilities */
10451         struct rte_cryptodev_sym_capability_idx cap_idx;
10452         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AEAD;
10453         cap_idx.algo.aead = tdata->algo;
10454         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
10455                         &cap_idx) == NULL)
10456                 return TEST_SKIPPED;
10457
10458         /* not supported with CPU crypto and raw data-path APIs*/
10459         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO ||
10460                         global_api_test_type == CRYPTODEV_RAW_API_TEST)
10461                 return TEST_SKIPPED;
10462
10463         /* Create AEAD session */
10464         retval = create_aead_session(ts_params->valid_devs[0],
10465                         tdata->algo,
10466                         RTE_CRYPTO_AEAD_OP_DECRYPT,
10467                         tdata->key.data, tdata->key.len,
10468                         tdata->aad.len, tdata->auth_tag.len,
10469                         tdata->iv.len);
10470         if (retval < 0)
10471                 return retval;
10472
10473         /* alloc mbuf and set payload */
10474         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
10475         ut_params->obuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
10476
10477         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
10478                         rte_pktmbuf_tailroom(ut_params->ibuf));
10479         memset(rte_pktmbuf_mtod(ut_params->obuf, uint8_t *), 0,
10480                         rte_pktmbuf_tailroom(ut_params->obuf));
10481
10482         /* Create AEAD operation */
10483         retval = create_aead_operation(RTE_CRYPTO_AEAD_OP_DECRYPT, tdata);
10484         if (retval < 0)
10485                 return retval;
10486
10487         rte_crypto_op_attach_sym_session(ut_params->op, ut_params->sess);
10488
10489         ut_params->op->sym->m_src = ut_params->ibuf;
10490         ut_params->op->sym->m_dst = ut_params->obuf;
10491
10492         /* Process crypto operation */
10493         TEST_ASSERT_NOT_NULL(process_crypto_request(ts_params->valid_devs[0],
10494                         ut_params->op), "failed to process sym crypto op");
10495
10496         TEST_ASSERT_EQUAL(ut_params->op->status, RTE_CRYPTO_OP_STATUS_SUCCESS,
10497                         "crypto op processing failed");
10498
10499         plaintext = rte_pktmbuf_mtod_offset(ut_params->obuf, uint8_t *,
10500                         ut_params->op->sym->cipher.data.offset);
10501
10502         debug_hexdump(stdout, "plaintext:", plaintext, tdata->ciphertext.len);
10503
10504         /* Validate obuf */
10505         TEST_ASSERT_BUFFERS_ARE_EQUAL(
10506                         plaintext,
10507                         tdata->plaintext.data,
10508                         tdata->plaintext.len,
10509                         "Plaintext data not as expected");
10510
10511         TEST_ASSERT_EQUAL(ut_params->op->status,
10512                         RTE_CRYPTO_OP_STATUS_SUCCESS,
10513                         "Authentication failed");
10514         return 0;
10515 }
10516
10517 static int
10518 test_AES_GCM_authenticated_decryption_oop_test_case_1(void)
10519 {
10520         return test_authenticated_decryption_oop(&gcm_test_case_5);
10521 }
10522
10523 static int
10524 test_authenticated_encryption_sessionless(
10525                 const struct aead_test_data *tdata)
10526 {
10527         struct crypto_testsuite_params *ts_params = &testsuite_params;
10528         struct crypto_unittest_params *ut_params = &unittest_params;
10529
10530         int retval;
10531         uint8_t *ciphertext, *auth_tag;
10532         uint16_t plaintext_pad_len;
10533         uint8_t key[tdata->key.len + 1];
10534         struct rte_cryptodev_info dev_info;
10535
10536         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
10537         uint64_t feat_flags = dev_info.feature_flags;
10538
10539         if (!(feat_flags & RTE_CRYPTODEV_FF_SYM_SESSIONLESS)) {
10540                 printf("Device doesn't support Sessionless ops.\n");
10541                 return TEST_SKIPPED;
10542         }
10543
10544         /* not supported with CPU crypto */
10545         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
10546                 return TEST_SKIPPED;
10547
10548         /* Verify the capabilities */
10549         struct rte_cryptodev_sym_capability_idx cap_idx;
10550         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AEAD;
10551         cap_idx.algo.aead = tdata->algo;
10552         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
10553                         &cap_idx) == NULL)
10554                 return TEST_SKIPPED;
10555
10556         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
10557
10558         /* clear mbuf payload */
10559         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
10560                         rte_pktmbuf_tailroom(ut_params->ibuf));
10561
10562         /* Create AEAD operation */
10563         retval = create_aead_operation(RTE_CRYPTO_AEAD_OP_ENCRYPT, tdata);
10564         if (retval < 0)
10565                 return retval;
10566
10567         /* Create GCM xform */
10568         memcpy(key, tdata->key.data, tdata->key.len);
10569         retval = create_aead_xform(ut_params->op,
10570                         tdata->algo,
10571                         RTE_CRYPTO_AEAD_OP_ENCRYPT,
10572                         key, tdata->key.len,
10573                         tdata->aad.len, tdata->auth_tag.len,
10574                         tdata->iv.len);
10575         if (retval < 0)
10576                 return retval;
10577
10578         ut_params->op->sym->m_src = ut_params->ibuf;
10579
10580         TEST_ASSERT_EQUAL(ut_params->op->sess_type,
10581                         RTE_CRYPTO_OP_SESSIONLESS,
10582                         "crypto op session type not sessionless");
10583
10584         /* Process crypto operation */
10585         TEST_ASSERT_NOT_NULL(process_crypto_request(ts_params->valid_devs[0],
10586                         ut_params->op), "failed to process sym crypto op");
10587
10588         TEST_ASSERT_NOT_NULL(ut_params->op, "failed crypto process");
10589
10590         TEST_ASSERT_EQUAL(ut_params->op->status, RTE_CRYPTO_OP_STATUS_SUCCESS,
10591                         "crypto op status not success");
10592
10593         plaintext_pad_len = RTE_ALIGN_CEIL(tdata->plaintext.len, 16);
10594
10595         ciphertext = rte_pktmbuf_mtod_offset(ut_params->ibuf, uint8_t *,
10596                         ut_params->op->sym->cipher.data.offset);
10597         auth_tag = ciphertext + plaintext_pad_len;
10598
10599         debug_hexdump(stdout, "ciphertext:", ciphertext, tdata->ciphertext.len);
10600         debug_hexdump(stdout, "auth tag:", auth_tag, tdata->auth_tag.len);
10601
10602         /* Validate obuf */
10603         TEST_ASSERT_BUFFERS_ARE_EQUAL(
10604                         ciphertext,
10605                         tdata->ciphertext.data,
10606                         tdata->ciphertext.len,
10607                         "Ciphertext data not as expected");
10608
10609         TEST_ASSERT_BUFFERS_ARE_EQUAL(
10610                         auth_tag,
10611                         tdata->auth_tag.data,
10612                         tdata->auth_tag.len,
10613                         "Generated auth tag not as expected");
10614
10615         return 0;
10616
10617 }
10618
10619 static int
10620 test_AES_GCM_authenticated_encryption_sessionless_test_case_1(void)
10621 {
10622         return test_authenticated_encryption_sessionless(
10623                         &gcm_test_case_5);
10624 }
10625
10626 static int
10627 test_authenticated_decryption_sessionless(
10628                 const struct aead_test_data *tdata)
10629 {
10630         struct crypto_testsuite_params *ts_params = &testsuite_params;
10631         struct crypto_unittest_params *ut_params = &unittest_params;
10632
10633         int retval;
10634         uint8_t *plaintext;
10635         uint8_t key[tdata->key.len + 1];
10636         struct rte_cryptodev_info dev_info;
10637
10638         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
10639         uint64_t feat_flags = dev_info.feature_flags;
10640
10641         if (!(feat_flags & RTE_CRYPTODEV_FF_SYM_SESSIONLESS)) {
10642                 printf("Device doesn't support Sessionless ops.\n");
10643                 return TEST_SKIPPED;
10644         }
10645
10646         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
10647                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
10648                 printf("Device doesn't support RAW data-path APIs.\n");
10649                 return TEST_SKIPPED;
10650         }
10651
10652         /* not supported with CPU crypto */
10653         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
10654                 return TEST_SKIPPED;
10655
10656         /* Verify the capabilities */
10657         struct rte_cryptodev_sym_capability_idx cap_idx;
10658         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AEAD;
10659         cap_idx.algo.aead = tdata->algo;
10660         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
10661                         &cap_idx) == NULL)
10662                 return TEST_SKIPPED;
10663
10664         /* alloc mbuf and set payload */
10665         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
10666
10667         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
10668                         rte_pktmbuf_tailroom(ut_params->ibuf));
10669
10670         /* Create AEAD operation */
10671         retval = create_aead_operation(RTE_CRYPTO_AEAD_OP_DECRYPT, tdata);
10672         if (retval < 0)
10673                 return retval;
10674
10675         /* Create AEAD xform */
10676         memcpy(key, tdata->key.data, tdata->key.len);
10677         retval = create_aead_xform(ut_params->op,
10678                         tdata->algo,
10679                         RTE_CRYPTO_AEAD_OP_DECRYPT,
10680                         key, tdata->key.len,
10681                         tdata->aad.len, tdata->auth_tag.len,
10682                         tdata->iv.len);
10683         if (retval < 0)
10684                 return retval;
10685
10686         ut_params->op->sym->m_src = ut_params->ibuf;
10687
10688         TEST_ASSERT_EQUAL(ut_params->op->sess_type,
10689                         RTE_CRYPTO_OP_SESSIONLESS,
10690                         "crypto op session type not sessionless");
10691
10692         /* Process crypto operation */
10693         if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
10694                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
10695                                 ut_params->op, 0, 0, 0, 0);
10696         else
10697                 TEST_ASSERT_NOT_NULL(process_crypto_request(
10698                         ts_params->valid_devs[0], ut_params->op),
10699                                 "failed to process sym crypto op");
10700
10701         TEST_ASSERT_NOT_NULL(ut_params->op, "failed crypto process");
10702
10703         TEST_ASSERT_EQUAL(ut_params->op->status, RTE_CRYPTO_OP_STATUS_SUCCESS,
10704                         "crypto op status not success");
10705
10706         plaintext = rte_pktmbuf_mtod_offset(ut_params->ibuf, uint8_t *,
10707                         ut_params->op->sym->cipher.data.offset);
10708
10709         debug_hexdump(stdout, "plaintext:", plaintext, tdata->ciphertext.len);
10710
10711         /* Validate obuf */
10712         TEST_ASSERT_BUFFERS_ARE_EQUAL(
10713                         plaintext,
10714                         tdata->plaintext.data,
10715                         tdata->plaintext.len,
10716                         "Plaintext data not as expected");
10717
10718         TEST_ASSERT_EQUAL(ut_params->op->status,
10719                         RTE_CRYPTO_OP_STATUS_SUCCESS,
10720                         "Authentication failed");
10721         return 0;
10722 }
10723
10724 static int
10725 test_AES_GCM_authenticated_decryption_sessionless_test_case_1(void)
10726 {
10727         return test_authenticated_decryption_sessionless(
10728                         &gcm_test_case_5);
10729 }
10730
10731 static int
10732 test_AES_CCM_authenticated_encryption_test_case_128_1(void)
10733 {
10734         return test_authenticated_encryption(&ccm_test_case_128_1);
10735 }
10736
10737 static int
10738 test_AES_CCM_authenticated_encryption_test_case_128_2(void)
10739 {
10740         return test_authenticated_encryption(&ccm_test_case_128_2);
10741 }
10742
10743 static int
10744 test_AES_CCM_authenticated_encryption_test_case_128_3(void)
10745 {
10746         return test_authenticated_encryption(&ccm_test_case_128_3);
10747 }
10748
10749 static int
10750 test_AES_CCM_authenticated_decryption_test_case_128_1(void)
10751 {
10752         return test_authenticated_decryption(&ccm_test_case_128_1);
10753 }
10754
10755 static int
10756 test_AES_CCM_authenticated_decryption_test_case_128_2(void)
10757 {
10758         return test_authenticated_decryption(&ccm_test_case_128_2);
10759 }
10760
10761 static int
10762 test_AES_CCM_authenticated_decryption_test_case_128_3(void)
10763 {
10764         return test_authenticated_decryption(&ccm_test_case_128_3);
10765 }
10766
10767 static int
10768 test_AES_CCM_authenticated_encryption_test_case_192_1(void)
10769 {
10770         return test_authenticated_encryption(&ccm_test_case_192_1);
10771 }
10772
10773 static int
10774 test_AES_CCM_authenticated_encryption_test_case_192_2(void)
10775 {
10776         return test_authenticated_encryption(&ccm_test_case_192_2);
10777 }
10778
10779 static int
10780 test_AES_CCM_authenticated_encryption_test_case_192_3(void)
10781 {
10782         return test_authenticated_encryption(&ccm_test_case_192_3);
10783 }
10784
10785 static int
10786 test_AES_CCM_authenticated_decryption_test_case_192_1(void)
10787 {
10788         return test_authenticated_decryption(&ccm_test_case_192_1);
10789 }
10790
10791 static int
10792 test_AES_CCM_authenticated_decryption_test_case_192_2(void)
10793 {
10794         return test_authenticated_decryption(&ccm_test_case_192_2);
10795 }
10796
10797 static int
10798 test_AES_CCM_authenticated_decryption_test_case_192_3(void)
10799 {
10800         return test_authenticated_decryption(&ccm_test_case_192_3);
10801 }
10802
10803 static int
10804 test_AES_CCM_authenticated_encryption_test_case_256_1(void)
10805 {
10806         return test_authenticated_encryption(&ccm_test_case_256_1);
10807 }
10808
10809 static int
10810 test_AES_CCM_authenticated_encryption_test_case_256_2(void)
10811 {
10812         return test_authenticated_encryption(&ccm_test_case_256_2);
10813 }
10814
10815 static int
10816 test_AES_CCM_authenticated_encryption_test_case_256_3(void)
10817 {
10818         return test_authenticated_encryption(&ccm_test_case_256_3);
10819 }
10820
10821 static int
10822 test_AES_CCM_authenticated_decryption_test_case_256_1(void)
10823 {
10824         return test_authenticated_decryption(&ccm_test_case_256_1);
10825 }
10826
10827 static int
10828 test_AES_CCM_authenticated_decryption_test_case_256_2(void)
10829 {
10830         return test_authenticated_decryption(&ccm_test_case_256_2);
10831 }
10832
10833 static int
10834 test_AES_CCM_authenticated_decryption_test_case_256_3(void)
10835 {
10836         return test_authenticated_decryption(&ccm_test_case_256_3);
10837 }
10838
10839 static int
10840 test_stats(void)
10841 {
10842         struct crypto_testsuite_params *ts_params = &testsuite_params;
10843         struct rte_cryptodev_stats stats;
10844
10845         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
10846                 return TEST_SKIPPED;
10847
10848         /* Verify the capabilities */
10849         struct rte_cryptodev_sym_capability_idx cap_idx;
10850         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
10851         cap_idx.algo.auth = RTE_CRYPTO_AUTH_SHA1_HMAC;
10852         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
10853                         &cap_idx) == NULL)
10854                 return TEST_SKIPPED;
10855         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
10856         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_AES_CBC;
10857         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
10858                         &cap_idx) == NULL)
10859                 return TEST_SKIPPED;
10860
10861         if (rte_cryptodev_stats_get(ts_params->valid_devs[0], &stats)
10862                         == -ENOTSUP)
10863                 return TEST_SKIPPED;
10864
10865         rte_cryptodev_stats_reset(ts_params->valid_devs[0]);
10866         TEST_ASSERT((rte_cryptodev_stats_get(ts_params->valid_devs[0] + 600,
10867                         &stats) == -ENODEV),
10868                 "rte_cryptodev_stats_get invalid dev failed");
10869         TEST_ASSERT((rte_cryptodev_stats_get(ts_params->valid_devs[0], 0) != 0),
10870                 "rte_cryptodev_stats_get invalid Param failed");
10871
10872         /* Test expected values */
10873         test_AES_CBC_HMAC_SHA1_encrypt_digest();
10874         TEST_ASSERT_SUCCESS(rte_cryptodev_stats_get(ts_params->valid_devs[0],
10875                         &stats),
10876                 "rte_cryptodev_stats_get failed");
10877         TEST_ASSERT((stats.enqueued_count == 1),
10878                 "rte_cryptodev_stats_get returned unexpected enqueued stat");
10879         TEST_ASSERT((stats.dequeued_count == 1),
10880                 "rte_cryptodev_stats_get returned unexpected enqueued stat");
10881         TEST_ASSERT((stats.enqueue_err_count == 0),
10882                 "rte_cryptodev_stats_get returned unexpected enqueued stat");
10883         TEST_ASSERT((stats.dequeue_err_count == 0),
10884                 "rte_cryptodev_stats_get returned unexpected enqueued stat");
10885
10886         /* invalid device but should ignore and not reset device stats*/
10887         rte_cryptodev_stats_reset(ts_params->valid_devs[0] + 300);
10888         TEST_ASSERT_SUCCESS(rte_cryptodev_stats_get(ts_params->valid_devs[0],
10889                         &stats),
10890                 "rte_cryptodev_stats_get failed");
10891         TEST_ASSERT((stats.enqueued_count == 1),
10892                 "rte_cryptodev_stats_get returned unexpected enqueued stat");
10893
10894         /* check that a valid reset clears stats */
10895         rte_cryptodev_stats_reset(ts_params->valid_devs[0]);
10896         TEST_ASSERT_SUCCESS(rte_cryptodev_stats_get(ts_params->valid_devs[0],
10897                         &stats),
10898                                           "rte_cryptodev_stats_get failed");
10899         TEST_ASSERT((stats.enqueued_count == 0),
10900                 "rte_cryptodev_stats_get returned unexpected enqueued stat");
10901         TEST_ASSERT((stats.dequeued_count == 0),
10902                 "rte_cryptodev_stats_get returned unexpected enqueued stat");
10903
10904         return TEST_SUCCESS;
10905 }
10906
10907 static int MD5_HMAC_create_session(struct crypto_testsuite_params *ts_params,
10908                                    struct crypto_unittest_params *ut_params,
10909                                    enum rte_crypto_auth_operation op,
10910                                    const struct HMAC_MD5_vector *test_case)
10911 {
10912         uint8_t key[64];
10913
10914         memcpy(key, test_case->key.data, test_case->key.len);
10915
10916         ut_params->auth_xform.type = RTE_CRYPTO_SYM_XFORM_AUTH;
10917         ut_params->auth_xform.next = NULL;
10918         ut_params->auth_xform.auth.op = op;
10919
10920         ut_params->auth_xform.auth.algo = RTE_CRYPTO_AUTH_MD5_HMAC;
10921
10922         ut_params->auth_xform.auth.digest_length = MD5_DIGEST_LEN;
10923         ut_params->auth_xform.auth.key.length = test_case->key.len;
10924         ut_params->auth_xform.auth.key.data = key;
10925
10926         ut_params->sess = rte_cryptodev_sym_session_create(
10927                         ts_params->session_mpool);
10928
10929         rte_cryptodev_sym_session_init(ts_params->valid_devs[0],
10930                         ut_params->sess, &ut_params->auth_xform,
10931                         ts_params->session_priv_mpool);
10932
10933         if (ut_params->sess == NULL)
10934                 return TEST_FAILED;
10935
10936         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
10937
10938         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
10939                         rte_pktmbuf_tailroom(ut_params->ibuf));
10940
10941         return 0;
10942 }
10943
10944 static int MD5_HMAC_create_op(struct crypto_unittest_params *ut_params,
10945                               const struct HMAC_MD5_vector *test_case,
10946                               uint8_t **plaintext)
10947 {
10948         uint16_t plaintext_pad_len;
10949
10950         struct rte_crypto_sym_op *sym_op = ut_params->op->sym;
10951
10952         plaintext_pad_len = RTE_ALIGN_CEIL(test_case->plaintext.len,
10953                                 16);
10954
10955         *plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
10956                         plaintext_pad_len);
10957         memcpy(*plaintext, test_case->plaintext.data,
10958                         test_case->plaintext.len);
10959
10960         sym_op->auth.digest.data = (uint8_t *)rte_pktmbuf_append(
10961                         ut_params->ibuf, MD5_DIGEST_LEN);
10962         TEST_ASSERT_NOT_NULL(sym_op->auth.digest.data,
10963                         "no room to append digest");
10964         sym_op->auth.digest.phys_addr = rte_pktmbuf_iova_offset(
10965                         ut_params->ibuf, plaintext_pad_len);
10966
10967         if (ut_params->auth_xform.auth.op == RTE_CRYPTO_AUTH_OP_VERIFY) {
10968                 rte_memcpy(sym_op->auth.digest.data, test_case->auth_tag.data,
10969                            test_case->auth_tag.len);
10970         }
10971
10972         sym_op->auth.data.offset = 0;
10973         sym_op->auth.data.length = test_case->plaintext.len;
10974
10975         rte_crypto_op_attach_sym_session(ut_params->op, ut_params->sess);
10976         ut_params->op->sym->m_src = ut_params->ibuf;
10977
10978         return 0;
10979 }
10980
10981 static int
10982 test_MD5_HMAC_generate(const struct HMAC_MD5_vector *test_case)
10983 {
10984         uint16_t plaintext_pad_len;
10985         uint8_t *plaintext, *auth_tag;
10986
10987         struct crypto_testsuite_params *ts_params = &testsuite_params;
10988         struct crypto_unittest_params *ut_params = &unittest_params;
10989         struct rte_cryptodev_info dev_info;
10990
10991         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
10992         uint64_t feat_flags = dev_info.feature_flags;
10993
10994         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
10995                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
10996                 printf("Device doesn't support RAW data-path APIs.\n");
10997                 return TEST_SKIPPED;
10998         }
10999
11000         /* Verify the capabilities */
11001         struct rte_cryptodev_sym_capability_idx cap_idx;
11002         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
11003         cap_idx.algo.auth = RTE_CRYPTO_AUTH_MD5_HMAC;
11004         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
11005                         &cap_idx) == NULL)
11006                 return TEST_SKIPPED;
11007
11008         if (MD5_HMAC_create_session(ts_params, ut_params,
11009                         RTE_CRYPTO_AUTH_OP_GENERATE, test_case))
11010                 return TEST_FAILED;
11011
11012         /* Generate Crypto op data structure */
11013         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
11014                         RTE_CRYPTO_OP_TYPE_SYMMETRIC);
11015         TEST_ASSERT_NOT_NULL(ut_params->op,
11016                         "Failed to allocate symmetric crypto operation struct");
11017
11018         plaintext_pad_len = RTE_ALIGN_CEIL(test_case->plaintext.len,
11019                                 16);
11020
11021         if (MD5_HMAC_create_op(ut_params, test_case, &plaintext))
11022                 return TEST_FAILED;
11023
11024         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
11025                 process_cpu_crypt_auth_op(ts_params->valid_devs[0],
11026                         ut_params->op);
11027         else if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
11028                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
11029                                 ut_params->op, 0, 1, 0, 0);
11030         else
11031                 TEST_ASSERT_NOT_NULL(
11032                         process_crypto_request(ts_params->valid_devs[0],
11033                                 ut_params->op),
11034                                 "failed to process sym crypto op");
11035
11036         TEST_ASSERT_EQUAL(ut_params->op->status, RTE_CRYPTO_OP_STATUS_SUCCESS,
11037                         "crypto op processing failed");
11038
11039         if (ut_params->op->sym->m_dst) {
11040                 auth_tag = rte_pktmbuf_mtod_offset(ut_params->op->sym->m_dst,
11041                                 uint8_t *, plaintext_pad_len);
11042         } else {
11043                 auth_tag = plaintext + plaintext_pad_len;
11044         }
11045
11046         TEST_ASSERT_BUFFERS_ARE_EQUAL(
11047                         auth_tag,
11048                         test_case->auth_tag.data,
11049                         test_case->auth_tag.len,
11050                         "HMAC_MD5 generated tag not as expected");
11051
11052         return TEST_SUCCESS;
11053 }
11054
11055 static int
11056 test_MD5_HMAC_verify(const struct HMAC_MD5_vector *test_case)
11057 {
11058         uint8_t *plaintext;
11059
11060         struct crypto_testsuite_params *ts_params = &testsuite_params;
11061         struct crypto_unittest_params *ut_params = &unittest_params;
11062         struct rte_cryptodev_info dev_info;
11063
11064         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
11065         uint64_t feat_flags = dev_info.feature_flags;
11066
11067         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
11068                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
11069                 printf("Device doesn't support RAW data-path APIs.\n");
11070                 return TEST_SKIPPED;
11071         }
11072
11073         /* Verify the capabilities */
11074         struct rte_cryptodev_sym_capability_idx cap_idx;
11075         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
11076         cap_idx.algo.auth = RTE_CRYPTO_AUTH_MD5_HMAC;
11077         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
11078                         &cap_idx) == NULL)
11079                 return TEST_SKIPPED;
11080
11081         if (MD5_HMAC_create_session(ts_params, ut_params,
11082                         RTE_CRYPTO_AUTH_OP_VERIFY, test_case)) {
11083                 return TEST_FAILED;
11084         }
11085
11086         /* Generate Crypto op data structure */
11087         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
11088                         RTE_CRYPTO_OP_TYPE_SYMMETRIC);
11089         TEST_ASSERT_NOT_NULL(ut_params->op,
11090                         "Failed to allocate symmetric crypto operation struct");
11091
11092         if (MD5_HMAC_create_op(ut_params, test_case, &plaintext))
11093                 return TEST_FAILED;
11094
11095         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
11096                 process_cpu_crypt_auth_op(ts_params->valid_devs[0],
11097                         ut_params->op);
11098         else if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
11099                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
11100                                 ut_params->op, 0, 1, 0, 0);
11101         else
11102                 TEST_ASSERT_NOT_NULL(
11103                         process_crypto_request(ts_params->valid_devs[0],
11104                                 ut_params->op),
11105                                 "failed to process sym crypto op");
11106
11107         TEST_ASSERT_EQUAL(ut_params->op->status, RTE_CRYPTO_OP_STATUS_SUCCESS,
11108                         "HMAC_MD5 crypto op processing failed");
11109
11110         return TEST_SUCCESS;
11111 }
11112
11113 static int
11114 test_MD5_HMAC_generate_case_1(void)
11115 {
11116         return test_MD5_HMAC_generate(&HMAC_MD5_test_case_1);
11117 }
11118
11119 static int
11120 test_MD5_HMAC_verify_case_1(void)
11121 {
11122         return test_MD5_HMAC_verify(&HMAC_MD5_test_case_1);
11123 }
11124
11125 static int
11126 test_MD5_HMAC_generate_case_2(void)
11127 {
11128         return test_MD5_HMAC_generate(&HMAC_MD5_test_case_2);
11129 }
11130
11131 static int
11132 test_MD5_HMAC_verify_case_2(void)
11133 {
11134         return test_MD5_HMAC_verify(&HMAC_MD5_test_case_2);
11135 }
11136
11137 static int
11138 test_multi_session(void)
11139 {
11140         struct crypto_testsuite_params *ts_params = &testsuite_params;
11141         struct crypto_unittest_params *ut_params = &unittest_params;
11142
11143         struct rte_cryptodev_info dev_info;
11144         struct rte_cryptodev_sym_session **sessions;
11145
11146         uint16_t i;
11147
11148         /* Verify the capabilities */
11149         struct rte_cryptodev_sym_capability_idx cap_idx;
11150         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
11151         cap_idx.algo.auth = RTE_CRYPTO_AUTH_SHA512_HMAC;
11152         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
11153                         &cap_idx) == NULL)
11154                 return TEST_SKIPPED;
11155         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
11156         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_AES_CBC;
11157         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
11158                         &cap_idx) == NULL)
11159                 return TEST_SKIPPED;
11160
11161         test_AES_CBC_HMAC_SHA512_decrypt_create_session_params(ut_params,
11162                         aes_cbc_key, hmac_sha512_key);
11163
11164
11165         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
11166
11167         sessions = rte_malloc(NULL,
11168                         sizeof(struct rte_cryptodev_sym_session *) *
11169                         (MAX_NB_SESSIONS + 1), 0);
11170
11171         /* Create multiple crypto sessions*/
11172         for (i = 0; i < MAX_NB_SESSIONS; i++) {
11173
11174                 sessions[i] = rte_cryptodev_sym_session_create(
11175                                 ts_params->session_mpool);
11176
11177                 rte_cryptodev_sym_session_init(ts_params->valid_devs[0],
11178                                 sessions[i], &ut_params->auth_xform,
11179                                 ts_params->session_priv_mpool);
11180                 TEST_ASSERT_NOT_NULL(sessions[i],
11181                                 "Session creation failed at session number %u",
11182                                 i);
11183
11184                 /* Attempt to send a request on each session */
11185                 TEST_ASSERT_SUCCESS( test_AES_CBC_HMAC_SHA512_decrypt_perform(
11186                         sessions[i],
11187                         ut_params,
11188                         ts_params,
11189                         catch_22_quote_2_512_bytes_AES_CBC_ciphertext,
11190                         catch_22_quote_2_512_bytes_AES_CBC_HMAC_SHA512_digest,
11191                         aes_cbc_iv),
11192                         "Failed to perform decrypt on request number %u.", i);
11193                 /* free crypto operation structure */
11194                 if (ut_params->op)
11195                         rte_crypto_op_free(ut_params->op);
11196
11197                 /*
11198                  * free mbuf - both obuf and ibuf are usually the same,
11199                  * so check if they point at the same address is necessary,
11200                  * to avoid freeing the mbuf twice.
11201                  */
11202                 if (ut_params->obuf) {
11203                         rte_pktmbuf_free(ut_params->obuf);
11204                         if (ut_params->ibuf == ut_params->obuf)
11205                                 ut_params->ibuf = 0;
11206                         ut_params->obuf = 0;
11207                 }
11208                 if (ut_params->ibuf) {
11209                         rte_pktmbuf_free(ut_params->ibuf);
11210                         ut_params->ibuf = 0;
11211                 }
11212         }
11213
11214         sessions[i] = NULL;
11215         /* Next session create should fail */
11216         rte_cryptodev_sym_session_init(ts_params->valid_devs[0],
11217                         sessions[i], &ut_params->auth_xform,
11218                         ts_params->session_priv_mpool);
11219         TEST_ASSERT_NULL(sessions[i],
11220                         "Session creation succeeded unexpectedly!");
11221
11222         for (i = 0; i < MAX_NB_SESSIONS; i++) {
11223                 rte_cryptodev_sym_session_clear(ts_params->valid_devs[0],
11224                                 sessions[i]);
11225                 rte_cryptodev_sym_session_free(sessions[i]);
11226         }
11227
11228         rte_free(sessions);
11229
11230         return TEST_SUCCESS;
11231 }
11232
11233 struct multi_session_params {
11234         struct crypto_unittest_params ut_params;
11235         uint8_t *cipher_key;
11236         uint8_t *hmac_key;
11237         const uint8_t *cipher;
11238         const uint8_t *digest;
11239         uint8_t *iv;
11240 };
11241
11242 #define MB_SESSION_NUMBER 3
11243
11244 static int
11245 test_multi_session_random_usage(void)
11246 {
11247         struct crypto_testsuite_params *ts_params = &testsuite_params;
11248         struct rte_cryptodev_info dev_info;
11249         struct rte_cryptodev_sym_session **sessions;
11250         uint32_t i, j;
11251         struct multi_session_params ut_paramz[] = {
11252
11253                 {
11254                         .cipher_key = ms_aes_cbc_key0,
11255                         .hmac_key = ms_hmac_key0,
11256                         .cipher = ms_aes_cbc_cipher0,
11257                         .digest = ms_hmac_digest0,
11258                         .iv = ms_aes_cbc_iv0
11259                 },
11260                 {
11261                         .cipher_key = ms_aes_cbc_key1,
11262                         .hmac_key = ms_hmac_key1,
11263                         .cipher = ms_aes_cbc_cipher1,
11264                         .digest = ms_hmac_digest1,
11265                         .iv = ms_aes_cbc_iv1
11266                 },
11267                 {
11268                         .cipher_key = ms_aes_cbc_key2,
11269                         .hmac_key = ms_hmac_key2,
11270                         .cipher = ms_aes_cbc_cipher2,
11271                         .digest = ms_hmac_digest2,
11272                         .iv = ms_aes_cbc_iv2
11273                 },
11274
11275         };
11276
11277         /* Verify the capabilities */
11278         struct rte_cryptodev_sym_capability_idx cap_idx;
11279         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
11280         cap_idx.algo.auth = RTE_CRYPTO_AUTH_SHA512_HMAC;
11281         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
11282                         &cap_idx) == NULL)
11283                 return TEST_SKIPPED;
11284         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
11285         cap_idx.algo.cipher = RTE_CRYPTO_CIPHER_AES_CBC;
11286         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
11287                         &cap_idx) == NULL)
11288                 return TEST_SKIPPED;
11289
11290         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
11291
11292         sessions = rte_malloc(NULL,
11293                         (sizeof(struct rte_cryptodev_sym_session *)
11294                                         * MAX_NB_SESSIONS) + 1, 0);
11295
11296         for (i = 0; i < MB_SESSION_NUMBER; i++) {
11297                 sessions[i] = rte_cryptodev_sym_session_create(
11298                                 ts_params->session_mpool);
11299
11300                 rte_memcpy(&ut_paramz[i].ut_params, &unittest_params,
11301                                 sizeof(struct crypto_unittest_params));
11302
11303                 test_AES_CBC_HMAC_SHA512_decrypt_create_session_params(
11304                                 &ut_paramz[i].ut_params,
11305                                 ut_paramz[i].cipher_key, ut_paramz[i].hmac_key);
11306
11307                 /* Create multiple crypto sessions*/
11308                 rte_cryptodev_sym_session_init(
11309                                 ts_params->valid_devs[0],
11310                                 sessions[i],
11311                                 &ut_paramz[i].ut_params.auth_xform,
11312                                 ts_params->session_priv_mpool);
11313
11314                 TEST_ASSERT_NOT_NULL(sessions[i],
11315                                 "Session creation failed at session number %u",
11316                                 i);
11317
11318         }
11319
11320         srand(time(NULL));
11321         for (i = 0; i < 40000; i++) {
11322
11323                 j = rand() % MB_SESSION_NUMBER;
11324
11325                 TEST_ASSERT_SUCCESS(
11326                         test_AES_CBC_HMAC_SHA512_decrypt_perform(
11327                                         sessions[j],
11328                                         &ut_paramz[j].ut_params,
11329                                         ts_params, ut_paramz[j].cipher,
11330                                         ut_paramz[j].digest,
11331                                         ut_paramz[j].iv),
11332                         "Failed to perform decrypt on request number %u.", i);
11333
11334                 if (ut_paramz[j].ut_params.op)
11335                         rte_crypto_op_free(ut_paramz[j].ut_params.op);
11336
11337                 /*
11338                  * free mbuf - both obuf and ibuf are usually the same,
11339                  * so check if they point at the same address is necessary,
11340                  * to avoid freeing the mbuf twice.
11341                  */
11342                 if (ut_paramz[j].ut_params.obuf) {
11343                         rte_pktmbuf_free(ut_paramz[j].ut_params.obuf);
11344                         if (ut_paramz[j].ut_params.ibuf
11345                                         == ut_paramz[j].ut_params.obuf)
11346                                 ut_paramz[j].ut_params.ibuf = 0;
11347                         ut_paramz[j].ut_params.obuf = 0;
11348                 }
11349                 if (ut_paramz[j].ut_params.ibuf) {
11350                         rte_pktmbuf_free(ut_paramz[j].ut_params.ibuf);
11351                         ut_paramz[j].ut_params.ibuf = 0;
11352                 }
11353         }
11354
11355         for (i = 0; i < MB_SESSION_NUMBER; i++) {
11356                 rte_cryptodev_sym_session_clear(ts_params->valid_devs[0],
11357                                 sessions[i]);
11358                 rte_cryptodev_sym_session_free(sessions[i]);
11359         }
11360
11361         rte_free(sessions);
11362
11363         return TEST_SUCCESS;
11364 }
11365
11366 uint8_t orig_data[] = {0xab, 0xab, 0xab, 0xab,
11367                         0xab, 0xab, 0xab, 0xab,
11368                         0xab, 0xab, 0xab, 0xab,
11369                         0xab, 0xab, 0xab, 0xab};
11370
11371 static int
11372 test_null_invalid_operation(void)
11373 {
11374         struct crypto_testsuite_params *ts_params = &testsuite_params;
11375         struct crypto_unittest_params *ut_params = &unittest_params;
11376         int ret;
11377
11378         /* This test is for NULL PMD only */
11379         if (gbl_driver_id != rte_cryptodev_driver_id_get(
11380                         RTE_STR(CRYPTODEV_NAME_NULL_PMD)))
11381                 return TEST_SKIPPED;
11382
11383         /* Setup Cipher Parameters */
11384         ut_params->cipher_xform.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
11385         ut_params->cipher_xform.next = NULL;
11386
11387         ut_params->cipher_xform.cipher.algo = RTE_CRYPTO_CIPHER_AES_CBC;
11388         ut_params->cipher_xform.cipher.op = RTE_CRYPTO_CIPHER_OP_ENCRYPT;
11389
11390         ut_params->sess = rte_cryptodev_sym_session_create(
11391                         ts_params->session_mpool);
11392
11393         /* Create Crypto session*/
11394         ret = rte_cryptodev_sym_session_init(ts_params->valid_devs[0],
11395                         ut_params->sess, &ut_params->cipher_xform,
11396                         ts_params->session_priv_mpool);
11397         TEST_ASSERT(ret < 0,
11398                         "Session creation succeeded unexpectedly");
11399
11400
11401         /* Setup HMAC Parameters */
11402         ut_params->auth_xform.type = RTE_CRYPTO_SYM_XFORM_AUTH;
11403         ut_params->auth_xform.next = NULL;
11404
11405         ut_params->auth_xform.auth.algo = RTE_CRYPTO_AUTH_SHA1_HMAC;
11406         ut_params->auth_xform.auth.op = RTE_CRYPTO_AUTH_OP_GENERATE;
11407
11408         ut_params->sess = rte_cryptodev_sym_session_create(
11409                         ts_params->session_mpool);
11410
11411         /* Create Crypto session*/
11412         ret = rte_cryptodev_sym_session_init(ts_params->valid_devs[0],
11413                         ut_params->sess, &ut_params->auth_xform,
11414                         ts_params->session_priv_mpool);
11415         TEST_ASSERT(ret < 0,
11416                         "Session creation succeeded unexpectedly");
11417
11418         return TEST_SUCCESS;
11419 }
11420
11421
11422 #define NULL_BURST_LENGTH (32)
11423
11424 static int
11425 test_null_burst_operation(void)
11426 {
11427         struct crypto_testsuite_params *ts_params = &testsuite_params;
11428         struct crypto_unittest_params *ut_params = &unittest_params;
11429
11430         unsigned i, burst_len = NULL_BURST_LENGTH;
11431
11432         struct rte_crypto_op *burst[NULL_BURST_LENGTH] = { NULL };
11433         struct rte_crypto_op *burst_dequeued[NULL_BURST_LENGTH] = { NULL };
11434
11435         /* This test is for NULL PMD only */
11436         if (gbl_driver_id != rte_cryptodev_driver_id_get(
11437                         RTE_STR(CRYPTODEV_NAME_NULL_PMD)))
11438                 return TEST_SKIPPED;
11439
11440         /* Setup Cipher Parameters */
11441         ut_params->cipher_xform.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
11442         ut_params->cipher_xform.next = &ut_params->auth_xform;
11443
11444         ut_params->cipher_xform.cipher.algo = RTE_CRYPTO_CIPHER_NULL;
11445         ut_params->cipher_xform.cipher.op = RTE_CRYPTO_CIPHER_OP_ENCRYPT;
11446
11447         /* Setup HMAC Parameters */
11448         ut_params->auth_xform.type = RTE_CRYPTO_SYM_XFORM_AUTH;
11449         ut_params->auth_xform.next = NULL;
11450
11451         ut_params->auth_xform.auth.algo = RTE_CRYPTO_AUTH_NULL;
11452         ut_params->auth_xform.auth.op = RTE_CRYPTO_AUTH_OP_GENERATE;
11453
11454         ut_params->sess = rte_cryptodev_sym_session_create(
11455                         ts_params->session_mpool);
11456
11457         /* Create Crypto session*/
11458         rte_cryptodev_sym_session_init(ts_params->valid_devs[0],
11459                         ut_params->sess, &ut_params->cipher_xform,
11460                         ts_params->session_priv_mpool);
11461         TEST_ASSERT_NOT_NULL(ut_params->sess, "Session creation failed");
11462
11463         TEST_ASSERT_EQUAL(rte_crypto_op_bulk_alloc(ts_params->op_mpool,
11464                         RTE_CRYPTO_OP_TYPE_SYMMETRIC, burst, burst_len),
11465                         burst_len, "failed to generate burst of crypto ops");
11466
11467         /* Generate an operation for each mbuf in burst */
11468         for (i = 0; i < burst_len; i++) {
11469                 struct rte_mbuf *m = rte_pktmbuf_alloc(ts_params->mbuf_pool);
11470
11471                 TEST_ASSERT_NOT_NULL(m, "Failed to allocate mbuf");
11472
11473                 unsigned *data = (unsigned *)rte_pktmbuf_append(m,
11474                                 sizeof(unsigned));
11475                 *data = i;
11476
11477                 rte_crypto_op_attach_sym_session(burst[i], ut_params->sess);
11478
11479                 burst[i]->sym->m_src = m;
11480         }
11481
11482         /* Process crypto operation */
11483         TEST_ASSERT_EQUAL(rte_cryptodev_enqueue_burst(ts_params->valid_devs[0],
11484                         0, burst, burst_len),
11485                         burst_len,
11486                         "Error enqueuing burst");
11487
11488         TEST_ASSERT_EQUAL(rte_cryptodev_dequeue_burst(ts_params->valid_devs[0],
11489                         0, burst_dequeued, burst_len),
11490                         burst_len,
11491                         "Error dequeuing burst");
11492
11493
11494         for (i = 0; i < burst_len; i++) {
11495                 TEST_ASSERT_EQUAL(
11496                         *rte_pktmbuf_mtod(burst[i]->sym->m_src, uint32_t *),
11497                         *rte_pktmbuf_mtod(burst_dequeued[i]->sym->m_src,
11498                                         uint32_t *),
11499                         "data not as expected");
11500
11501                 rte_pktmbuf_free(burst[i]->sym->m_src);
11502                 rte_crypto_op_free(burst[i]);
11503         }
11504
11505         return TEST_SUCCESS;
11506 }
11507
11508 static uint16_t
11509 test_enq_callback(uint16_t dev_id, uint16_t qp_id, struct rte_crypto_op **ops,
11510                   uint16_t nb_ops, void *user_param)
11511 {
11512         RTE_SET_USED(dev_id);
11513         RTE_SET_USED(qp_id);
11514         RTE_SET_USED(ops);
11515         RTE_SET_USED(user_param);
11516
11517         printf("crypto enqueue callback called\n");
11518         return nb_ops;
11519 }
11520
11521 static uint16_t
11522 test_deq_callback(uint16_t dev_id, uint16_t qp_id, struct rte_crypto_op **ops,
11523                   uint16_t nb_ops, void *user_param)
11524 {
11525         RTE_SET_USED(dev_id);
11526         RTE_SET_USED(qp_id);
11527         RTE_SET_USED(ops);
11528         RTE_SET_USED(user_param);
11529
11530         printf("crypto dequeue callback called\n");
11531         return nb_ops;
11532 }
11533
11534 /*
11535  * Thread using enqueue/dequeue callback with RCU.
11536  */
11537 static int
11538 test_enqdeq_callback_thread(void *arg)
11539 {
11540         RTE_SET_USED(arg);
11541         /* DP thread calls rte_cryptodev_enqueue_burst()/
11542          * rte_cryptodev_dequeue_burst() and invokes callback.
11543          */
11544         test_null_burst_operation();
11545         return 0;
11546 }
11547
11548 static int
11549 test_enq_callback_setup(void)
11550 {
11551         struct crypto_testsuite_params *ts_params = &testsuite_params;
11552         struct rte_cryptodev_info dev_info;
11553         struct rte_cryptodev_qp_conf qp_conf = {
11554                 .nb_descriptors = MAX_NUM_OPS_INFLIGHT
11555         };
11556
11557         struct rte_cryptodev_cb *cb;
11558         uint16_t qp_id = 0;
11559
11560         /* Stop the device in case it's started so it can be configured */
11561         rte_cryptodev_stop(ts_params->valid_devs[0]);
11562
11563         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
11564
11565         TEST_ASSERT_SUCCESS(rte_cryptodev_configure(ts_params->valid_devs[0],
11566                         &ts_params->conf),
11567                         "Failed to configure cryptodev %u",
11568                         ts_params->valid_devs[0]);
11569
11570         qp_conf.nb_descriptors = MAX_NUM_OPS_INFLIGHT;
11571         qp_conf.mp_session = ts_params->session_mpool;
11572         qp_conf.mp_session_private = ts_params->session_priv_mpool;
11573
11574         TEST_ASSERT_SUCCESS(rte_cryptodev_queue_pair_setup(
11575                         ts_params->valid_devs[0], qp_id, &qp_conf,
11576                         rte_cryptodev_socket_id(ts_params->valid_devs[0])),
11577                         "Failed test for "
11578                         "rte_cryptodev_queue_pair_setup: num_inflights "
11579                         "%u on qp %u on cryptodev %u",
11580                         qp_conf.nb_descriptors, qp_id,
11581                         ts_params->valid_devs[0]);
11582
11583         /* Test with invalid crypto device */
11584         cb = rte_cryptodev_add_enq_callback(RTE_CRYPTO_MAX_DEVS,
11585                         qp_id, test_enq_callback, NULL);
11586         TEST_ASSERT_NULL(cb, "Add callback on qp %u on "
11587                         "cryptodev %u did not fail",
11588                         qp_id, RTE_CRYPTO_MAX_DEVS);
11589
11590         /* Test with invalid queue pair */
11591         cb = rte_cryptodev_add_enq_callback(ts_params->valid_devs[0],
11592                         dev_info.max_nb_queue_pairs + 1,
11593                         test_enq_callback, NULL);
11594         TEST_ASSERT_NULL(cb, "Add callback on qp %u on "
11595                         "cryptodev %u did not fail",
11596                         dev_info.max_nb_queue_pairs + 1,
11597                         ts_params->valid_devs[0]);
11598
11599         /* Test with NULL callback */
11600         cb = rte_cryptodev_add_enq_callback(ts_params->valid_devs[0],
11601                         qp_id, NULL, NULL);
11602         TEST_ASSERT_NULL(cb, "Add callback on qp %u on "
11603                         "cryptodev %u did not fail",
11604                         qp_id, ts_params->valid_devs[0]);
11605
11606         /* Test with valid configuration */
11607         cb = rte_cryptodev_add_enq_callback(ts_params->valid_devs[0],
11608                         qp_id, test_enq_callback, NULL);
11609         TEST_ASSERT_NOT_NULL(cb, "Failed test to add callback on "
11610                         "qp %u on cryptodev %u",
11611                         qp_id, ts_params->valid_devs[0]);
11612
11613         rte_cryptodev_start(ts_params->valid_devs[0]);
11614
11615         /* Launch a thread */
11616         rte_eal_remote_launch(test_enqdeq_callback_thread, NULL,
11617                                 rte_get_next_lcore(-1, 1, 0));
11618
11619         /* Wait until reader exited. */
11620         rte_eal_mp_wait_lcore();
11621
11622         /* Test with invalid crypto device */
11623         TEST_ASSERT_FAIL(rte_cryptodev_remove_enq_callback(
11624                         RTE_CRYPTO_MAX_DEVS, qp_id, cb),
11625                         "Expected call to fail as crypto device is invalid");
11626
11627         /* Test with invalid queue pair */
11628         TEST_ASSERT_FAIL(rte_cryptodev_remove_enq_callback(
11629                         ts_params->valid_devs[0],
11630                         dev_info.max_nb_queue_pairs + 1, cb),
11631                         "Expected call to fail as queue pair is invalid");
11632
11633         /* Test with NULL callback */
11634         TEST_ASSERT_FAIL(rte_cryptodev_remove_enq_callback(
11635                         ts_params->valid_devs[0], qp_id, NULL),
11636                         "Expected call to fail as callback is NULL");
11637
11638         /* Test with valid configuration */
11639         TEST_ASSERT_SUCCESS(rte_cryptodev_remove_enq_callback(
11640                         ts_params->valid_devs[0], qp_id, cb),
11641                         "Failed test to remove callback on "
11642                         "qp %u on cryptodev %u",
11643                         qp_id, ts_params->valid_devs[0]);
11644
11645         return TEST_SUCCESS;
11646 }
11647
11648 static int
11649 test_deq_callback_setup(void)
11650 {
11651         struct crypto_testsuite_params *ts_params = &testsuite_params;
11652         struct rte_cryptodev_info dev_info;
11653         struct rte_cryptodev_qp_conf qp_conf = {
11654                 .nb_descriptors = MAX_NUM_OPS_INFLIGHT
11655         };
11656
11657         struct rte_cryptodev_cb *cb;
11658         uint16_t qp_id = 0;
11659
11660         /* Stop the device in case it's started so it can be configured */
11661         rte_cryptodev_stop(ts_params->valid_devs[0]);
11662
11663         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
11664
11665         TEST_ASSERT_SUCCESS(rte_cryptodev_configure(ts_params->valid_devs[0],
11666                         &ts_params->conf),
11667                         "Failed to configure cryptodev %u",
11668                         ts_params->valid_devs[0]);
11669
11670         qp_conf.nb_descriptors = MAX_NUM_OPS_INFLIGHT;
11671         qp_conf.mp_session = ts_params->session_mpool;
11672         qp_conf.mp_session_private = ts_params->session_priv_mpool;
11673
11674         TEST_ASSERT_SUCCESS(rte_cryptodev_queue_pair_setup(
11675                         ts_params->valid_devs[0], qp_id, &qp_conf,
11676                         rte_cryptodev_socket_id(ts_params->valid_devs[0])),
11677                         "Failed test for "
11678                         "rte_cryptodev_queue_pair_setup: num_inflights "
11679                         "%u on qp %u on cryptodev %u",
11680                         qp_conf.nb_descriptors, qp_id,
11681                         ts_params->valid_devs[0]);
11682
11683         /* Test with invalid crypto device */
11684         cb = rte_cryptodev_add_deq_callback(RTE_CRYPTO_MAX_DEVS,
11685                         qp_id, test_deq_callback, NULL);
11686         TEST_ASSERT_NULL(cb, "Add callback on qp %u on "
11687                         "cryptodev %u did not fail",
11688                         qp_id, RTE_CRYPTO_MAX_DEVS);
11689
11690         /* Test with invalid queue pair */
11691         cb = rte_cryptodev_add_deq_callback(ts_params->valid_devs[0],
11692                         dev_info.max_nb_queue_pairs + 1,
11693                         test_deq_callback, NULL);
11694         TEST_ASSERT_NULL(cb, "Add callback on qp %u on "
11695                         "cryptodev %u did not fail",
11696                         dev_info.max_nb_queue_pairs + 1,
11697                         ts_params->valid_devs[0]);
11698
11699         /* Test with NULL callback */
11700         cb = rte_cryptodev_add_deq_callback(ts_params->valid_devs[0],
11701                         qp_id, NULL, NULL);
11702         TEST_ASSERT_NULL(cb, "Add callback on qp %u on "
11703                         "cryptodev %u did not fail",
11704                         qp_id, ts_params->valid_devs[0]);
11705
11706         /* Test with valid configuration */
11707         cb = rte_cryptodev_add_deq_callback(ts_params->valid_devs[0],
11708                         qp_id, test_deq_callback, NULL);
11709         TEST_ASSERT_NOT_NULL(cb, "Failed test to add callback on "
11710                         "qp %u on cryptodev %u",
11711                         qp_id, ts_params->valid_devs[0]);
11712
11713         rte_cryptodev_start(ts_params->valid_devs[0]);
11714
11715         /* Launch a thread */
11716         rte_eal_remote_launch(test_enqdeq_callback_thread, NULL,
11717                                 rte_get_next_lcore(-1, 1, 0));
11718
11719         /* Wait until reader exited. */
11720         rte_eal_mp_wait_lcore();
11721
11722         /* Test with invalid crypto device */
11723         TEST_ASSERT_FAIL(rte_cryptodev_remove_deq_callback(
11724                         RTE_CRYPTO_MAX_DEVS, qp_id, cb),
11725                         "Expected call to fail as crypto device is invalid");
11726
11727         /* Test with invalid queue pair */
11728         TEST_ASSERT_FAIL(rte_cryptodev_remove_deq_callback(
11729                         ts_params->valid_devs[0],
11730                         dev_info.max_nb_queue_pairs + 1, cb),
11731                         "Expected call to fail as queue pair is invalid");
11732
11733         /* Test with NULL callback */
11734         TEST_ASSERT_FAIL(rte_cryptodev_remove_deq_callback(
11735                         ts_params->valid_devs[0], qp_id, NULL),
11736                         "Expected call to fail as callback is NULL");
11737
11738         /* Test with valid configuration */
11739         TEST_ASSERT_SUCCESS(rte_cryptodev_remove_deq_callback(
11740                         ts_params->valid_devs[0], qp_id, cb),
11741                         "Failed test to remove callback on "
11742                         "qp %u on cryptodev %u",
11743                         qp_id, ts_params->valid_devs[0]);
11744
11745         return TEST_SUCCESS;
11746 }
11747
11748 static void
11749 generate_gmac_large_plaintext(uint8_t *data)
11750 {
11751         uint16_t i;
11752
11753         for (i = 32; i < GMAC_LARGE_PLAINTEXT_LENGTH; i += 32)
11754                 memcpy(&data[i], &data[0], 32);
11755 }
11756
11757 static int
11758 create_gmac_operation(enum rte_crypto_auth_operation op,
11759                 const struct gmac_test_data *tdata)
11760 {
11761         struct crypto_testsuite_params *ts_params = &testsuite_params;
11762         struct crypto_unittest_params *ut_params = &unittest_params;
11763         struct rte_crypto_sym_op *sym_op;
11764
11765         uint32_t plaintext_pad_len = RTE_ALIGN_CEIL(tdata->plaintext.len, 16);
11766
11767         /* Generate Crypto op data structure */
11768         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
11769                         RTE_CRYPTO_OP_TYPE_SYMMETRIC);
11770         TEST_ASSERT_NOT_NULL(ut_params->op,
11771                         "Failed to allocate symmetric crypto operation struct");
11772
11773         sym_op = ut_params->op->sym;
11774
11775         sym_op->auth.digest.data = (uint8_t *)rte_pktmbuf_append(
11776                         ut_params->ibuf, tdata->gmac_tag.len);
11777         TEST_ASSERT_NOT_NULL(sym_op->auth.digest.data,
11778                         "no room to append digest");
11779
11780         sym_op->auth.digest.phys_addr = rte_pktmbuf_iova_offset(
11781                         ut_params->ibuf, plaintext_pad_len);
11782
11783         if (op == RTE_CRYPTO_AUTH_OP_VERIFY) {
11784                 rte_memcpy(sym_op->auth.digest.data, tdata->gmac_tag.data,
11785                                 tdata->gmac_tag.len);
11786                 debug_hexdump(stdout, "digest:",
11787                                 sym_op->auth.digest.data,
11788                                 tdata->gmac_tag.len);
11789         }
11790
11791         uint8_t *iv_ptr = rte_crypto_op_ctod_offset(ut_params->op,
11792                         uint8_t *, IV_OFFSET);
11793
11794         rte_memcpy(iv_ptr, tdata->iv.data, tdata->iv.len);
11795
11796         debug_hexdump(stdout, "iv:", iv_ptr, tdata->iv.len);
11797
11798         sym_op->cipher.data.length = 0;
11799         sym_op->cipher.data.offset = 0;
11800
11801         sym_op->auth.data.offset = 0;
11802         sym_op->auth.data.length = tdata->plaintext.len;
11803
11804         return 0;
11805 }
11806
11807 static int
11808 create_gmac_operation_sgl(enum rte_crypto_auth_operation op,
11809                 const struct gmac_test_data *tdata,
11810                 void *digest_mem, uint64_t digest_phys)
11811 {
11812         struct crypto_testsuite_params *ts_params = &testsuite_params;
11813         struct crypto_unittest_params *ut_params = &unittest_params;
11814         struct rte_crypto_sym_op *sym_op;
11815
11816         /* Generate Crypto op data structure */
11817         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
11818                         RTE_CRYPTO_OP_TYPE_SYMMETRIC);
11819         TEST_ASSERT_NOT_NULL(ut_params->op,
11820                         "Failed to allocate symmetric crypto operation struct");
11821
11822         sym_op = ut_params->op->sym;
11823
11824         sym_op->auth.digest.data = digest_mem;
11825         TEST_ASSERT_NOT_NULL(sym_op->auth.digest.data,
11826                         "no room to append digest");
11827
11828         sym_op->auth.digest.phys_addr = digest_phys;
11829
11830         if (op == RTE_CRYPTO_AUTH_OP_VERIFY) {
11831                 rte_memcpy(sym_op->auth.digest.data, tdata->gmac_tag.data,
11832                                 tdata->gmac_tag.len);
11833                 debug_hexdump(stdout, "digest:",
11834                                 sym_op->auth.digest.data,
11835                                 tdata->gmac_tag.len);
11836         }
11837
11838         uint8_t *iv_ptr = rte_crypto_op_ctod_offset(ut_params->op,
11839                         uint8_t *, IV_OFFSET);
11840
11841         rte_memcpy(iv_ptr, tdata->iv.data, tdata->iv.len);
11842
11843         debug_hexdump(stdout, "iv:", iv_ptr, tdata->iv.len);
11844
11845         sym_op->cipher.data.length = 0;
11846         sym_op->cipher.data.offset = 0;
11847
11848         sym_op->auth.data.offset = 0;
11849         sym_op->auth.data.length = tdata->plaintext.len;
11850
11851         return 0;
11852 }
11853
11854 static int create_gmac_session(uint8_t dev_id,
11855                 const struct gmac_test_data *tdata,
11856                 enum rte_crypto_auth_operation auth_op)
11857 {
11858         uint8_t auth_key[tdata->key.len];
11859
11860         struct crypto_testsuite_params *ts_params = &testsuite_params;
11861         struct crypto_unittest_params *ut_params = &unittest_params;
11862
11863         memcpy(auth_key, tdata->key.data, tdata->key.len);
11864
11865         ut_params->auth_xform.type = RTE_CRYPTO_SYM_XFORM_AUTH;
11866         ut_params->auth_xform.next = NULL;
11867
11868         ut_params->auth_xform.auth.algo = RTE_CRYPTO_AUTH_AES_GMAC;
11869         ut_params->auth_xform.auth.op = auth_op;
11870         ut_params->auth_xform.auth.digest_length = tdata->gmac_tag.len;
11871         ut_params->auth_xform.auth.key.length = tdata->key.len;
11872         ut_params->auth_xform.auth.key.data = auth_key;
11873         ut_params->auth_xform.auth.iv.offset = IV_OFFSET;
11874         ut_params->auth_xform.auth.iv.length = tdata->iv.len;
11875
11876
11877         ut_params->sess = rte_cryptodev_sym_session_create(
11878                         ts_params->session_mpool);
11879
11880         rte_cryptodev_sym_session_init(dev_id, ut_params->sess,
11881                         &ut_params->auth_xform,
11882                         ts_params->session_priv_mpool);
11883
11884         TEST_ASSERT_NOT_NULL(ut_params->sess, "Session creation failed");
11885
11886         return 0;
11887 }
11888
11889 static int
11890 test_AES_GMAC_authentication(const struct gmac_test_data *tdata)
11891 {
11892         struct crypto_testsuite_params *ts_params = &testsuite_params;
11893         struct crypto_unittest_params *ut_params = &unittest_params;
11894         struct rte_cryptodev_info dev_info;
11895
11896         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
11897         uint64_t feat_flags = dev_info.feature_flags;
11898
11899         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
11900                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
11901                 printf("Device doesn't support RAW data-path APIs.\n");
11902                 return TEST_SKIPPED;
11903         }
11904
11905         int retval;
11906
11907         uint8_t *auth_tag, *plaintext;
11908         uint16_t plaintext_pad_len;
11909
11910         TEST_ASSERT_NOT_EQUAL(tdata->gmac_tag.len, 0,
11911                               "No GMAC length in the source data");
11912
11913         /* Verify the capabilities */
11914         struct rte_cryptodev_sym_capability_idx cap_idx;
11915         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
11916         cap_idx.algo.auth = RTE_CRYPTO_AUTH_AES_GMAC;
11917         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
11918                         &cap_idx) == NULL)
11919                 return TEST_SKIPPED;
11920
11921         retval = create_gmac_session(ts_params->valid_devs[0],
11922                         tdata, RTE_CRYPTO_AUTH_OP_GENERATE);
11923
11924         if (retval < 0)
11925                 return retval;
11926
11927         if (tdata->plaintext.len > MBUF_SIZE)
11928                 ut_params->ibuf = rte_pktmbuf_alloc(ts_params->large_mbuf_pool);
11929         else
11930                 ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
11931         TEST_ASSERT_NOT_NULL(ut_params->ibuf,
11932                         "Failed to allocate input buffer in mempool");
11933
11934         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
11935                         rte_pktmbuf_tailroom(ut_params->ibuf));
11936
11937         plaintext_pad_len = RTE_ALIGN_CEIL(tdata->plaintext.len, 16);
11938         /*
11939          * Runtime generate the large plain text instead of use hard code
11940          * plain text vector. It is done to avoid create huge source file
11941          * with the test vector.
11942          */
11943         if (tdata->plaintext.len == GMAC_LARGE_PLAINTEXT_LENGTH)
11944                 generate_gmac_large_plaintext(tdata->plaintext.data);
11945
11946         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
11947                                 plaintext_pad_len);
11948         TEST_ASSERT_NOT_NULL(plaintext, "no room to append plaintext");
11949
11950         memcpy(plaintext, tdata->plaintext.data, tdata->plaintext.len);
11951         debug_hexdump(stdout, "plaintext:", plaintext,
11952                         tdata->plaintext.len);
11953
11954         retval = create_gmac_operation(RTE_CRYPTO_AUTH_OP_GENERATE,
11955                         tdata);
11956
11957         if (retval < 0)
11958                 return retval;
11959
11960         rte_crypto_op_attach_sym_session(ut_params->op, ut_params->sess);
11961
11962         ut_params->op->sym->m_src = ut_params->ibuf;
11963
11964         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
11965                 process_cpu_crypt_auth_op(ts_params->valid_devs[0],
11966                         ut_params->op);
11967         else if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
11968                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
11969                                 ut_params->op, 0, 1, 0, 0);
11970         else
11971                 TEST_ASSERT_NOT_NULL(
11972                         process_crypto_request(ts_params->valid_devs[0],
11973                         ut_params->op), "failed to process sym crypto op");
11974
11975         TEST_ASSERT_EQUAL(ut_params->op->status, RTE_CRYPTO_OP_STATUS_SUCCESS,
11976                         "crypto op processing failed");
11977
11978         if (ut_params->op->sym->m_dst) {
11979                 auth_tag = rte_pktmbuf_mtod_offset(ut_params->op->sym->m_dst,
11980                                 uint8_t *, plaintext_pad_len);
11981         } else {
11982                 auth_tag = plaintext + plaintext_pad_len;
11983         }
11984
11985         debug_hexdump(stdout, "auth tag:", auth_tag, tdata->gmac_tag.len);
11986
11987         TEST_ASSERT_BUFFERS_ARE_EQUAL(
11988                         auth_tag,
11989                         tdata->gmac_tag.data,
11990                         tdata->gmac_tag.len,
11991                         "GMAC Generated auth tag not as expected");
11992
11993         return 0;
11994 }
11995
11996 static int
11997 test_AES_GMAC_authentication_test_case_1(void)
11998 {
11999         return test_AES_GMAC_authentication(&gmac_test_case_1);
12000 }
12001
12002 static int
12003 test_AES_GMAC_authentication_test_case_2(void)
12004 {
12005         return test_AES_GMAC_authentication(&gmac_test_case_2);
12006 }
12007
12008 static int
12009 test_AES_GMAC_authentication_test_case_3(void)
12010 {
12011         return test_AES_GMAC_authentication(&gmac_test_case_3);
12012 }
12013
12014 static int
12015 test_AES_GMAC_authentication_test_case_4(void)
12016 {
12017         return test_AES_GMAC_authentication(&gmac_test_case_4);
12018 }
12019
12020 static int
12021 test_AES_GMAC_authentication_verify(const struct gmac_test_data *tdata)
12022 {
12023         struct crypto_testsuite_params *ts_params = &testsuite_params;
12024         struct crypto_unittest_params *ut_params = &unittest_params;
12025         int retval;
12026         uint32_t plaintext_pad_len;
12027         uint8_t *plaintext;
12028         struct rte_cryptodev_info dev_info;
12029
12030         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
12031         uint64_t feat_flags = dev_info.feature_flags;
12032
12033         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
12034                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
12035                 printf("Device doesn't support RAW data-path APIs.\n");
12036                 return TEST_SKIPPED;
12037         }
12038
12039         TEST_ASSERT_NOT_EQUAL(tdata->gmac_tag.len, 0,
12040                               "No GMAC length in the source data");
12041
12042         /* Verify the capabilities */
12043         struct rte_cryptodev_sym_capability_idx cap_idx;
12044         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
12045         cap_idx.algo.auth = RTE_CRYPTO_AUTH_AES_GMAC;
12046         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
12047                         &cap_idx) == NULL)
12048                 return TEST_SKIPPED;
12049
12050         retval = create_gmac_session(ts_params->valid_devs[0],
12051                         tdata, RTE_CRYPTO_AUTH_OP_VERIFY);
12052
12053         if (retval < 0)
12054                 return retval;
12055
12056         if (tdata->plaintext.len > MBUF_SIZE)
12057                 ut_params->ibuf = rte_pktmbuf_alloc(ts_params->large_mbuf_pool);
12058         else
12059                 ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
12060         TEST_ASSERT_NOT_NULL(ut_params->ibuf,
12061                         "Failed to allocate input buffer in mempool");
12062
12063         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
12064                         rte_pktmbuf_tailroom(ut_params->ibuf));
12065
12066         plaintext_pad_len = RTE_ALIGN_CEIL(tdata->plaintext.len, 16);
12067
12068         /*
12069          * Runtime generate the large plain text instead of use hard code
12070          * plain text vector. It is done to avoid create huge source file
12071          * with the test vector.
12072          */
12073         if (tdata->plaintext.len == GMAC_LARGE_PLAINTEXT_LENGTH)
12074                 generate_gmac_large_plaintext(tdata->plaintext.data);
12075
12076         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
12077                                 plaintext_pad_len);
12078         TEST_ASSERT_NOT_NULL(plaintext, "no room to append plaintext");
12079
12080         memcpy(plaintext, tdata->plaintext.data, tdata->plaintext.len);
12081         debug_hexdump(stdout, "plaintext:", plaintext,
12082                         tdata->plaintext.len);
12083
12084         retval = create_gmac_operation(RTE_CRYPTO_AUTH_OP_VERIFY,
12085                         tdata);
12086
12087         if (retval < 0)
12088                 return retval;
12089
12090         rte_crypto_op_attach_sym_session(ut_params->op, ut_params->sess);
12091
12092         ut_params->op->sym->m_src = ut_params->ibuf;
12093
12094         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
12095                 process_cpu_crypt_auth_op(ts_params->valid_devs[0],
12096                         ut_params->op);
12097         else if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
12098                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
12099                                 ut_params->op, 0, 1, 0, 0);
12100         else
12101                 TEST_ASSERT_NOT_NULL(
12102                         process_crypto_request(ts_params->valid_devs[0],
12103                         ut_params->op), "failed to process sym crypto op");
12104
12105         TEST_ASSERT_EQUAL(ut_params->op->status, RTE_CRYPTO_OP_STATUS_SUCCESS,
12106                         "crypto op processing failed");
12107
12108         return 0;
12109
12110 }
12111
12112 static int
12113 test_AES_GMAC_authentication_verify_test_case_1(void)
12114 {
12115         return test_AES_GMAC_authentication_verify(&gmac_test_case_1);
12116 }
12117
12118 static int
12119 test_AES_GMAC_authentication_verify_test_case_2(void)
12120 {
12121         return test_AES_GMAC_authentication_verify(&gmac_test_case_2);
12122 }
12123
12124 static int
12125 test_AES_GMAC_authentication_verify_test_case_3(void)
12126 {
12127         return test_AES_GMAC_authentication_verify(&gmac_test_case_3);
12128 }
12129
12130 static int
12131 test_AES_GMAC_authentication_verify_test_case_4(void)
12132 {
12133         return test_AES_GMAC_authentication_verify(&gmac_test_case_4);
12134 }
12135
12136 static int
12137 test_AES_GMAC_authentication_SGL(const struct gmac_test_data *tdata,
12138                                 uint32_t fragsz)
12139 {
12140         struct crypto_testsuite_params *ts_params = &testsuite_params;
12141         struct crypto_unittest_params *ut_params = &unittest_params;
12142         struct rte_cryptodev_info dev_info;
12143         uint64_t feature_flags;
12144         unsigned int trn_data = 0;
12145         void *digest_mem = NULL;
12146         uint32_t segs = 1;
12147         unsigned int to_trn = 0;
12148         struct rte_mbuf *buf = NULL;
12149         uint8_t *auth_tag, *plaintext;
12150         int retval;
12151
12152         TEST_ASSERT_NOT_EQUAL(tdata->gmac_tag.len, 0,
12153                               "No GMAC length in the source data");
12154
12155         /* Verify the capabilities */
12156         struct rte_cryptodev_sym_capability_idx cap_idx;
12157         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
12158         cap_idx.algo.auth = RTE_CRYPTO_AUTH_AES_GMAC;
12159         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
12160                         &cap_idx) == NULL)
12161                 return TEST_SKIPPED;
12162
12163         /* Check for any input SGL support */
12164         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
12165         feature_flags = dev_info.feature_flags;
12166
12167         if ((!(feature_flags & RTE_CRYPTODEV_FF_IN_PLACE_SGL)) ||
12168                         (!(feature_flags & RTE_CRYPTODEV_FF_OOP_SGL_IN_LB_OUT)) ||
12169                         (!(feature_flags & RTE_CRYPTODEV_FF_OOP_SGL_IN_SGL_OUT)))
12170                 return TEST_SKIPPED;
12171
12172         if (fragsz > tdata->plaintext.len)
12173                 fragsz = tdata->plaintext.len;
12174
12175         uint16_t plaintext_len = fragsz;
12176
12177         retval = create_gmac_session(ts_params->valid_devs[0],
12178                         tdata, RTE_CRYPTO_AUTH_OP_GENERATE);
12179
12180         if (retval < 0)
12181                 return retval;
12182
12183         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
12184         TEST_ASSERT_NOT_NULL(ut_params->ibuf,
12185                         "Failed to allocate input buffer in mempool");
12186
12187         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
12188                         rte_pktmbuf_tailroom(ut_params->ibuf));
12189
12190         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
12191                                 plaintext_len);
12192         TEST_ASSERT_NOT_NULL(plaintext, "no room to append plaintext");
12193
12194         memcpy(plaintext, tdata->plaintext.data, plaintext_len);
12195
12196         trn_data += plaintext_len;
12197
12198         buf = ut_params->ibuf;
12199
12200         /*
12201          * Loop until no more fragments
12202          */
12203
12204         while (trn_data < tdata->plaintext.len) {
12205                 ++segs;
12206                 to_trn = (tdata->plaintext.len - trn_data < fragsz) ?
12207                                 (tdata->plaintext.len - trn_data) : fragsz;
12208
12209                 buf->next = rte_pktmbuf_alloc(ts_params->mbuf_pool);
12210                 buf = buf->next;
12211
12212                 memset(rte_pktmbuf_mtod(buf, uint8_t *), 0,
12213                                 rte_pktmbuf_tailroom(buf));
12214
12215                 plaintext = (uint8_t *)rte_pktmbuf_append(buf,
12216                                 to_trn);
12217
12218                 memcpy(plaintext, tdata->plaintext.data + trn_data,
12219                                 to_trn);
12220                 trn_data += to_trn;
12221                 if (trn_data  == tdata->plaintext.len)
12222                         digest_mem = (uint8_t *)rte_pktmbuf_append(buf,
12223                                         tdata->gmac_tag.len);
12224         }
12225         ut_params->ibuf->nb_segs = segs;
12226
12227         /*
12228          * Place digest at the end of the last buffer
12229          */
12230         uint64_t digest_phys = rte_pktmbuf_iova(buf) + to_trn;
12231
12232         if (!digest_mem) {
12233                 digest_mem = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
12234                                 + tdata->gmac_tag.len);
12235                 digest_phys = rte_pktmbuf_iova_offset(ut_params->ibuf,
12236                                 tdata->plaintext.len);
12237         }
12238
12239         retval = create_gmac_operation_sgl(RTE_CRYPTO_AUTH_OP_GENERATE,
12240                         tdata, digest_mem, digest_phys);
12241
12242         if (retval < 0)
12243                 return retval;
12244
12245         rte_crypto_op_attach_sym_session(ut_params->op, ut_params->sess);
12246
12247         ut_params->op->sym->m_src = ut_params->ibuf;
12248
12249         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
12250                 return TEST_SKIPPED;
12251
12252         TEST_ASSERT_NOT_NULL(
12253                 process_crypto_request(ts_params->valid_devs[0],
12254                 ut_params->op), "failed to process sym crypto op");
12255
12256         TEST_ASSERT_EQUAL(ut_params->op->status, RTE_CRYPTO_OP_STATUS_SUCCESS,
12257                         "crypto op processing failed");
12258
12259         auth_tag = digest_mem;
12260         debug_hexdump(stdout, "auth tag:", auth_tag, tdata->gmac_tag.len);
12261         TEST_ASSERT_BUFFERS_ARE_EQUAL(
12262                         auth_tag,
12263                         tdata->gmac_tag.data,
12264                         tdata->gmac_tag.len,
12265                         "GMAC Generated auth tag not as expected");
12266
12267         return 0;
12268 }
12269
12270 /* Segment size not multiple of block size (16B) */
12271 static int
12272 test_AES_GMAC_authentication_SGL_40B(void)
12273 {
12274         return test_AES_GMAC_authentication_SGL(&gmac_test_case_1, 40);
12275 }
12276
12277 static int
12278 test_AES_GMAC_authentication_SGL_80B(void)
12279 {
12280         return test_AES_GMAC_authentication_SGL(&gmac_test_case_1, 80);
12281 }
12282
12283 static int
12284 test_AES_GMAC_authentication_SGL_2048B(void)
12285 {
12286         return test_AES_GMAC_authentication_SGL(&gmac_test_case_5, 2048);
12287 }
12288
12289 /* Segment size not multiple of block size (16B) */
12290 static int
12291 test_AES_GMAC_authentication_SGL_2047B(void)
12292 {
12293         return test_AES_GMAC_authentication_SGL(&gmac_test_case_5, 2047);
12294 }
12295
12296 struct test_crypto_vector {
12297         enum rte_crypto_cipher_algorithm crypto_algo;
12298         unsigned int cipher_offset;
12299         unsigned int cipher_len;
12300
12301         struct {
12302                 uint8_t data[64];
12303                 unsigned int len;
12304         } cipher_key;
12305
12306         struct {
12307                 uint8_t data[64];
12308                 unsigned int len;
12309         } iv;
12310
12311         struct {
12312                 const uint8_t *data;
12313                 unsigned int len;
12314         } plaintext;
12315
12316         struct {
12317                 const uint8_t *data;
12318                 unsigned int len;
12319         } ciphertext;
12320
12321         enum rte_crypto_auth_algorithm auth_algo;
12322         unsigned int auth_offset;
12323
12324         struct {
12325                 uint8_t data[128];
12326                 unsigned int len;
12327         } auth_key;
12328
12329         struct {
12330                 const uint8_t *data;
12331                 unsigned int len;
12332         } aad;
12333
12334         struct {
12335                 uint8_t data[128];
12336                 unsigned int len;
12337         } digest;
12338 };
12339
12340 static const struct test_crypto_vector
12341 hmac_sha1_test_crypto_vector = {
12342         .auth_algo = RTE_CRYPTO_AUTH_SHA1_HMAC,
12343         .plaintext = {
12344                 .data = plaintext_hash,
12345                 .len = 512
12346         },
12347         .auth_key = {
12348                 .data = {
12349                         0xF8, 0x2A, 0xC7, 0x54, 0xDB, 0x96, 0x18, 0xAA,
12350                         0xC3, 0xA1, 0x53, 0xF6, 0x1F, 0x17, 0x60, 0xBD,
12351                         0xDE, 0xF4, 0xDE, 0xAD
12352                 },
12353                 .len = 20
12354         },
12355         .digest = {
12356                 .data = {
12357                         0xC4, 0xB7, 0x0E, 0x6B, 0xDE, 0xD1, 0xE7, 0x77,
12358                         0x7E, 0x2E, 0x8F, 0xFC, 0x48, 0x39, 0x46, 0x17,
12359                         0x3F, 0x91, 0x64, 0x59
12360                 },
12361                 .len = 20
12362         }
12363 };
12364
12365 static const struct test_crypto_vector
12366 aes128_gmac_test_vector = {
12367         .auth_algo = RTE_CRYPTO_AUTH_AES_GMAC,
12368         .plaintext = {
12369                 .data = plaintext_hash,
12370                 .len = 512
12371         },
12372         .iv = {
12373                 .data = {
12374                         0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
12375                         0x08, 0x09, 0x0A, 0x0B
12376                 },
12377                 .len = 12
12378         },
12379         .auth_key = {
12380                 .data = {
12381                         0x42, 0x1A, 0x7D, 0x3D, 0xF5, 0x82, 0x80, 0xF1,
12382                         0xF1, 0x35, 0x5C, 0x3B, 0xDD, 0x9A, 0x65, 0xBA
12383                 },
12384                 .len = 16
12385         },
12386         .digest = {
12387                 .data = {
12388                         0xCA, 0x00, 0x99, 0x8B, 0x30, 0x7E, 0x74, 0x56,
12389                         0x32, 0xA7, 0x87, 0xB5, 0xE9, 0xB2, 0x34, 0x5A
12390                 },
12391                 .len = 16
12392         }
12393 };
12394
12395 static const struct test_crypto_vector
12396 aes128cbc_hmac_sha1_test_vector = {
12397         .crypto_algo = RTE_CRYPTO_CIPHER_AES_CBC,
12398         .cipher_offset = 0,
12399         .cipher_len = 512,
12400         .cipher_key = {
12401                 .data = {
12402                         0xE4, 0x23, 0x33, 0x8A, 0x35, 0x64, 0x61, 0xE2,
12403                         0x49, 0x03, 0xDD, 0xC6, 0xB8, 0xCA, 0x55, 0x7A
12404                 },
12405                 .len = 16
12406         },
12407         .iv = {
12408                 .data = {
12409                         0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
12410                         0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F
12411                 },
12412                 .len = 16
12413         },
12414         .plaintext = {
12415                 .data = plaintext_hash,
12416                 .len = 512
12417         },
12418         .ciphertext = {
12419                 .data = ciphertext512_aes128cbc,
12420                 .len = 512
12421         },
12422         .auth_algo = RTE_CRYPTO_AUTH_SHA1_HMAC,
12423         .auth_offset = 0,
12424         .auth_key = {
12425                 .data = {
12426                         0xF8, 0x2A, 0xC7, 0x54, 0xDB, 0x96, 0x18, 0xAA,
12427                         0xC3, 0xA1, 0x53, 0xF6, 0x1F, 0x17, 0x60, 0xBD,
12428                         0xDE, 0xF4, 0xDE, 0xAD
12429                 },
12430                 .len = 20
12431         },
12432         .digest = {
12433                 .data = {
12434                         0x9A, 0x4F, 0x88, 0x1B, 0xB6, 0x8F, 0xD8, 0x60,
12435                         0x42, 0x1A, 0x7D, 0x3D, 0xF5, 0x82, 0x80, 0xF1,
12436                         0x18, 0x8C, 0x1D, 0x32
12437                 },
12438                 .len = 20
12439         }
12440 };
12441
12442 static const struct test_crypto_vector
12443 aes128cbc_hmac_sha1_aad_test_vector = {
12444         .crypto_algo = RTE_CRYPTO_CIPHER_AES_CBC,
12445         .cipher_offset = 8,
12446         .cipher_len = 496,
12447         .cipher_key = {
12448                 .data = {
12449                         0xE4, 0x23, 0x33, 0x8A, 0x35, 0x64, 0x61, 0xE2,
12450                         0x49, 0x03, 0xDD, 0xC6, 0xB8, 0xCA, 0x55, 0x7A
12451                 },
12452                 .len = 16
12453         },
12454         .iv = {
12455                 .data = {
12456                         0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
12457                         0x08, 0x09, 0x0A, 0x0B, 0x0C, 0x0D, 0x0E, 0x0F
12458                 },
12459                 .len = 16
12460         },
12461         .plaintext = {
12462                 .data = plaintext_hash,
12463                 .len = 512
12464         },
12465         .ciphertext = {
12466                 .data = ciphertext512_aes128cbc_aad,
12467                 .len = 512
12468         },
12469         .auth_algo = RTE_CRYPTO_AUTH_SHA1_HMAC,
12470         .auth_offset = 0,
12471         .auth_key = {
12472                 .data = {
12473                         0xF8, 0x2A, 0xC7, 0x54, 0xDB, 0x96, 0x18, 0xAA,
12474                         0xC3, 0xA1, 0x53, 0xF6, 0x1F, 0x17, 0x60, 0xBD,
12475                         0xDE, 0xF4, 0xDE, 0xAD
12476                 },
12477                 .len = 20
12478         },
12479         .digest = {
12480                 .data = {
12481                         0x6D, 0xF3, 0x50, 0x79, 0x7A, 0x2A, 0xAC, 0x7F,
12482                         0xA6, 0xF0, 0xC6, 0x38, 0x1F, 0xA4, 0xDD, 0x9B,
12483                         0x62, 0x0F, 0xFB, 0x10
12484                 },
12485                 .len = 20
12486         }
12487 };
12488
12489 static void
12490 data_corruption(uint8_t *data)
12491 {
12492         data[0] += 1;
12493 }
12494
12495 static void
12496 tag_corruption(uint8_t *data, unsigned int tag_offset)
12497 {
12498         data[tag_offset] += 1;
12499 }
12500
12501 static int
12502 create_auth_session(struct crypto_unittest_params *ut_params,
12503                 uint8_t dev_id,
12504                 const struct test_crypto_vector *reference,
12505                 enum rte_crypto_auth_operation auth_op)
12506 {
12507         struct crypto_testsuite_params *ts_params = &testsuite_params;
12508         uint8_t auth_key[reference->auth_key.len + 1];
12509
12510         memcpy(auth_key, reference->auth_key.data, reference->auth_key.len);
12511
12512         /* Setup Authentication Parameters */
12513         ut_params->auth_xform.type = RTE_CRYPTO_SYM_XFORM_AUTH;
12514         ut_params->auth_xform.auth.op = auth_op;
12515         ut_params->auth_xform.next = NULL;
12516         ut_params->auth_xform.auth.algo = reference->auth_algo;
12517         ut_params->auth_xform.auth.key.length = reference->auth_key.len;
12518         ut_params->auth_xform.auth.key.data = auth_key;
12519         ut_params->auth_xform.auth.digest_length = reference->digest.len;
12520
12521         /* Create Crypto session*/
12522         ut_params->sess = rte_cryptodev_sym_session_create(
12523                         ts_params->session_mpool);
12524
12525         rte_cryptodev_sym_session_init(dev_id, ut_params->sess,
12526                                 &ut_params->auth_xform,
12527                                 ts_params->session_priv_mpool);
12528
12529         TEST_ASSERT_NOT_NULL(ut_params->sess, "Session creation failed");
12530
12531         return 0;
12532 }
12533
12534 static int
12535 create_auth_cipher_session(struct crypto_unittest_params *ut_params,
12536                 uint8_t dev_id,
12537                 const struct test_crypto_vector *reference,
12538                 enum rte_crypto_auth_operation auth_op,
12539                 enum rte_crypto_cipher_operation cipher_op)
12540 {
12541         struct crypto_testsuite_params *ts_params = &testsuite_params;
12542         uint8_t cipher_key[reference->cipher_key.len + 1];
12543         uint8_t auth_key[reference->auth_key.len + 1];
12544
12545         memcpy(cipher_key, reference->cipher_key.data,
12546                         reference->cipher_key.len);
12547         memcpy(auth_key, reference->auth_key.data, reference->auth_key.len);
12548
12549         /* Setup Authentication Parameters */
12550         ut_params->auth_xform.type = RTE_CRYPTO_SYM_XFORM_AUTH;
12551         ut_params->auth_xform.auth.op = auth_op;
12552         ut_params->auth_xform.auth.algo = reference->auth_algo;
12553         ut_params->auth_xform.auth.key.length = reference->auth_key.len;
12554         ut_params->auth_xform.auth.key.data = auth_key;
12555         ut_params->auth_xform.auth.digest_length = reference->digest.len;
12556
12557         if (reference->auth_algo == RTE_CRYPTO_AUTH_AES_GMAC) {
12558                 ut_params->auth_xform.auth.iv.offset = IV_OFFSET;
12559                 ut_params->auth_xform.auth.iv.length = reference->iv.len;
12560         } else {
12561                 ut_params->auth_xform.next = &ut_params->cipher_xform;
12562
12563                 /* Setup Cipher Parameters */
12564                 ut_params->cipher_xform.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
12565                 ut_params->cipher_xform.next = NULL;
12566                 ut_params->cipher_xform.cipher.algo = reference->crypto_algo;
12567                 ut_params->cipher_xform.cipher.op = cipher_op;
12568                 ut_params->cipher_xform.cipher.key.data = cipher_key;
12569                 ut_params->cipher_xform.cipher.key.length = reference->cipher_key.len;
12570                 ut_params->cipher_xform.cipher.iv.offset = IV_OFFSET;
12571                 ut_params->cipher_xform.cipher.iv.length = reference->iv.len;
12572         }
12573
12574         /* Create Crypto session*/
12575         ut_params->sess = rte_cryptodev_sym_session_create(
12576                         ts_params->session_mpool);
12577
12578         rte_cryptodev_sym_session_init(dev_id, ut_params->sess,
12579                                 &ut_params->auth_xform,
12580                                 ts_params->session_priv_mpool);
12581
12582         TEST_ASSERT_NOT_NULL(ut_params->sess, "Session creation failed");
12583
12584         return 0;
12585 }
12586
12587 static int
12588 create_auth_operation(struct crypto_testsuite_params *ts_params,
12589                 struct crypto_unittest_params *ut_params,
12590                 const struct test_crypto_vector *reference,
12591                 unsigned int auth_generate)
12592 {
12593         /* Generate Crypto op data structure */
12594         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
12595                         RTE_CRYPTO_OP_TYPE_SYMMETRIC);
12596         TEST_ASSERT_NOT_NULL(ut_params->op,
12597                         "Failed to allocate pktmbuf offload");
12598
12599         /* Set crypto operation data parameters */
12600         rte_crypto_op_attach_sym_session(ut_params->op, ut_params->sess);
12601
12602         struct rte_crypto_sym_op *sym_op = ut_params->op->sym;
12603
12604         /* set crypto operation source mbuf */
12605         sym_op->m_src = ut_params->ibuf;
12606
12607         /* digest */
12608         sym_op->auth.digest.data = (uint8_t *)rte_pktmbuf_append(
12609                         ut_params->ibuf, reference->digest.len);
12610
12611         TEST_ASSERT_NOT_NULL(sym_op->auth.digest.data,
12612                         "no room to append auth tag");
12613
12614         sym_op->auth.digest.phys_addr = rte_pktmbuf_iova_offset(
12615                         ut_params->ibuf, reference->plaintext.len);
12616
12617         if (auth_generate)
12618                 memset(sym_op->auth.digest.data, 0, reference->digest.len);
12619         else
12620                 memcpy(sym_op->auth.digest.data,
12621                                 reference->digest.data,
12622                                 reference->digest.len);
12623
12624         debug_hexdump(stdout, "digest:",
12625                         sym_op->auth.digest.data,
12626                         reference->digest.len);
12627
12628         sym_op->auth.data.length = reference->plaintext.len;
12629         sym_op->auth.data.offset = 0;
12630
12631         return 0;
12632 }
12633
12634 static int
12635 create_auth_GMAC_operation(struct crypto_testsuite_params *ts_params,
12636                 struct crypto_unittest_params *ut_params,
12637                 const struct test_crypto_vector *reference,
12638                 unsigned int auth_generate)
12639 {
12640         /* Generate Crypto op data structure */
12641         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
12642                         RTE_CRYPTO_OP_TYPE_SYMMETRIC);
12643         TEST_ASSERT_NOT_NULL(ut_params->op,
12644                         "Failed to allocate pktmbuf offload");
12645
12646         /* Set crypto operation data parameters */
12647         rte_crypto_op_attach_sym_session(ut_params->op, ut_params->sess);
12648
12649         struct rte_crypto_sym_op *sym_op = ut_params->op->sym;
12650
12651         /* set crypto operation source mbuf */
12652         sym_op->m_src = ut_params->ibuf;
12653
12654         /* digest */
12655         sym_op->auth.digest.data = (uint8_t *)rte_pktmbuf_append(
12656                         ut_params->ibuf, reference->digest.len);
12657
12658         TEST_ASSERT_NOT_NULL(sym_op->auth.digest.data,
12659                         "no room to append auth tag");
12660
12661         sym_op->auth.digest.phys_addr = rte_pktmbuf_iova_offset(
12662                         ut_params->ibuf, reference->ciphertext.len);
12663
12664         if (auth_generate)
12665                 memset(sym_op->auth.digest.data, 0, reference->digest.len);
12666         else
12667                 memcpy(sym_op->auth.digest.data,
12668                                 reference->digest.data,
12669                                 reference->digest.len);
12670
12671         debug_hexdump(stdout, "digest:",
12672                         sym_op->auth.digest.data,
12673                         reference->digest.len);
12674
12675         rte_memcpy(rte_crypto_op_ctod_offset(ut_params->op, uint8_t *, IV_OFFSET),
12676                         reference->iv.data, reference->iv.len);
12677
12678         sym_op->cipher.data.length = 0;
12679         sym_op->cipher.data.offset = 0;
12680
12681         sym_op->auth.data.length = reference->plaintext.len;
12682         sym_op->auth.data.offset = 0;
12683
12684         return 0;
12685 }
12686
12687 static int
12688 create_cipher_auth_operation(struct crypto_testsuite_params *ts_params,
12689                 struct crypto_unittest_params *ut_params,
12690                 const struct test_crypto_vector *reference,
12691                 unsigned int auth_generate)
12692 {
12693         /* Generate Crypto op data structure */
12694         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
12695                         RTE_CRYPTO_OP_TYPE_SYMMETRIC);
12696         TEST_ASSERT_NOT_NULL(ut_params->op,
12697                         "Failed to allocate pktmbuf offload");
12698
12699         /* Set crypto operation data parameters */
12700         rte_crypto_op_attach_sym_session(ut_params->op, ut_params->sess);
12701
12702         struct rte_crypto_sym_op *sym_op = ut_params->op->sym;
12703
12704         /* set crypto operation source mbuf */
12705         sym_op->m_src = ut_params->ibuf;
12706
12707         /* digest */
12708         sym_op->auth.digest.data = (uint8_t *)rte_pktmbuf_append(
12709                         ut_params->ibuf, reference->digest.len);
12710
12711         TEST_ASSERT_NOT_NULL(sym_op->auth.digest.data,
12712                         "no room to append auth tag");
12713
12714         sym_op->auth.digest.phys_addr = rte_pktmbuf_iova_offset(
12715                         ut_params->ibuf, reference->ciphertext.len);
12716
12717         if (auth_generate)
12718                 memset(sym_op->auth.digest.data, 0, reference->digest.len);
12719         else
12720                 memcpy(sym_op->auth.digest.data,
12721                                 reference->digest.data,
12722                                 reference->digest.len);
12723
12724         debug_hexdump(stdout, "digest:",
12725                         sym_op->auth.digest.data,
12726                         reference->digest.len);
12727
12728         rte_memcpy(rte_crypto_op_ctod_offset(ut_params->op, uint8_t *, IV_OFFSET),
12729                         reference->iv.data, reference->iv.len);
12730
12731         sym_op->cipher.data.length = reference->cipher_len;
12732         sym_op->cipher.data.offset = reference->cipher_offset;
12733
12734         sym_op->auth.data.length = reference->plaintext.len;
12735         sym_op->auth.data.offset = reference->auth_offset;
12736
12737         return 0;
12738 }
12739
12740 static int
12741 create_auth_verify_operation(struct crypto_testsuite_params *ts_params,
12742                 struct crypto_unittest_params *ut_params,
12743                 const struct test_crypto_vector *reference)
12744 {
12745         return create_auth_operation(ts_params, ut_params, reference, 0);
12746 }
12747
12748 static int
12749 create_auth_verify_GMAC_operation(
12750                 struct crypto_testsuite_params *ts_params,
12751                 struct crypto_unittest_params *ut_params,
12752                 const struct test_crypto_vector *reference)
12753 {
12754         return create_auth_GMAC_operation(ts_params, ut_params, reference, 0);
12755 }
12756
12757 static int
12758 create_cipher_auth_verify_operation(struct crypto_testsuite_params *ts_params,
12759                 struct crypto_unittest_params *ut_params,
12760                 const struct test_crypto_vector *reference)
12761 {
12762         return create_cipher_auth_operation(ts_params, ut_params, reference, 0);
12763 }
12764
12765 static int
12766 test_authentication_verify_fail_when_data_corruption(
12767                 struct crypto_testsuite_params *ts_params,
12768                 struct crypto_unittest_params *ut_params,
12769                 const struct test_crypto_vector *reference,
12770                 unsigned int data_corrupted)
12771 {
12772         int retval;
12773
12774         uint8_t *plaintext;
12775         struct rte_cryptodev_info dev_info;
12776
12777         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
12778         uint64_t feat_flags = dev_info.feature_flags;
12779
12780         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
12781                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
12782                 printf("Device doesn't support RAW data-path APIs.\n");
12783                 return TEST_SKIPPED;
12784         }
12785
12786         /* Verify the capabilities */
12787         struct rte_cryptodev_sym_capability_idx cap_idx;
12788         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
12789         cap_idx.algo.auth = reference->auth_algo;
12790         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
12791                         &cap_idx) == NULL)
12792                 return TEST_SKIPPED;
12793
12794
12795         /* Create session */
12796         retval = create_auth_session(ut_params,
12797                         ts_params->valid_devs[0],
12798                         reference,
12799                         RTE_CRYPTO_AUTH_OP_VERIFY);
12800         if (retval < 0)
12801                 return retval;
12802
12803         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
12804         TEST_ASSERT_NOT_NULL(ut_params->ibuf,
12805                         "Failed to allocate input buffer in mempool");
12806
12807         /* clear mbuf payload */
12808         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
12809                         rte_pktmbuf_tailroom(ut_params->ibuf));
12810
12811         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
12812                         reference->plaintext.len);
12813         TEST_ASSERT_NOT_NULL(plaintext, "no room to append plaintext");
12814         memcpy(plaintext, reference->plaintext.data, reference->plaintext.len);
12815
12816         debug_hexdump(stdout, "plaintext:", plaintext,
12817                 reference->plaintext.len);
12818
12819         /* Create operation */
12820         retval = create_auth_verify_operation(ts_params, ut_params, reference);
12821
12822         if (retval < 0)
12823                 return retval;
12824
12825         if (data_corrupted)
12826                 data_corruption(plaintext);
12827         else
12828                 tag_corruption(plaintext, reference->plaintext.len);
12829
12830         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO) {
12831                 process_cpu_crypt_auth_op(ts_params->valid_devs[0],
12832                         ut_params->op);
12833                 TEST_ASSERT_NOT_EQUAL(ut_params->op->status,
12834                         RTE_CRYPTO_OP_STATUS_SUCCESS,
12835                         "authentication not failed");
12836         } else if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
12837                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
12838                                 ut_params->op, 0, 1, 0, 0);
12839         else {
12840                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
12841                         ut_params->op);
12842                 TEST_ASSERT_NULL(ut_params->op, "authentication not failed");
12843         }
12844
12845         return 0;
12846 }
12847
12848 static int
12849 test_authentication_verify_GMAC_fail_when_corruption(
12850                 struct crypto_testsuite_params *ts_params,
12851                 struct crypto_unittest_params *ut_params,
12852                 const struct test_crypto_vector *reference,
12853                 unsigned int data_corrupted)
12854 {
12855         int retval;
12856         uint8_t *plaintext;
12857         struct rte_cryptodev_info dev_info;
12858
12859         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
12860         uint64_t feat_flags = dev_info.feature_flags;
12861
12862         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
12863                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
12864                 printf("Device doesn't support RAW data-path APIs.\n");
12865                 return TEST_SKIPPED;
12866         }
12867
12868         /* Verify the capabilities */
12869         struct rte_cryptodev_sym_capability_idx cap_idx;
12870         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
12871         cap_idx.algo.auth = reference->auth_algo;
12872         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
12873                         &cap_idx) == NULL)
12874                 return TEST_SKIPPED;
12875
12876         /* Create session */
12877         retval = create_auth_cipher_session(ut_params,
12878                         ts_params->valid_devs[0],
12879                         reference,
12880                         RTE_CRYPTO_AUTH_OP_VERIFY,
12881                         RTE_CRYPTO_CIPHER_OP_DECRYPT);
12882         if (retval < 0)
12883                 return retval;
12884
12885         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
12886         TEST_ASSERT_NOT_NULL(ut_params->ibuf,
12887                         "Failed to allocate input buffer in mempool");
12888
12889         /* clear mbuf payload */
12890         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
12891                         rte_pktmbuf_tailroom(ut_params->ibuf));
12892
12893         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
12894                         reference->plaintext.len);
12895         TEST_ASSERT_NOT_NULL(plaintext, "no room to append plaintext");
12896         memcpy(plaintext, reference->plaintext.data, reference->plaintext.len);
12897
12898         debug_hexdump(stdout, "plaintext:", plaintext,
12899                 reference->plaintext.len);
12900
12901         /* Create operation */
12902         retval = create_auth_verify_GMAC_operation(ts_params,
12903                         ut_params,
12904                         reference);
12905
12906         if (retval < 0)
12907                 return retval;
12908
12909         if (data_corrupted)
12910                 data_corruption(plaintext);
12911         else
12912                 tag_corruption(plaintext, reference->aad.len);
12913
12914         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO) {
12915                 process_cpu_crypt_auth_op(ts_params->valid_devs[0],
12916                         ut_params->op);
12917                 TEST_ASSERT_NOT_EQUAL(ut_params->op->status,
12918                         RTE_CRYPTO_OP_STATUS_SUCCESS,
12919                         "authentication not failed");
12920         } else if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
12921                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
12922                                 ut_params->op, 0, 1, 0, 0);
12923         else {
12924                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
12925                         ut_params->op);
12926                 TEST_ASSERT_NULL(ut_params->op, "authentication not failed");
12927         }
12928
12929         return 0;
12930 }
12931
12932 static int
12933 test_authenticated_decryption_fail_when_corruption(
12934                 struct crypto_testsuite_params *ts_params,
12935                 struct crypto_unittest_params *ut_params,
12936                 const struct test_crypto_vector *reference,
12937                 unsigned int data_corrupted)
12938 {
12939         int retval;
12940
12941         uint8_t *ciphertext;
12942         struct rte_cryptodev_info dev_info;
12943
12944         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
12945         uint64_t feat_flags = dev_info.feature_flags;
12946
12947         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
12948                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
12949                 printf("Device doesn't support RAW data-path APIs.\n");
12950                 return TEST_SKIPPED;
12951         }
12952
12953         /* Verify the capabilities */
12954         struct rte_cryptodev_sym_capability_idx cap_idx;
12955         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
12956         cap_idx.algo.auth = reference->auth_algo;
12957         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
12958                         &cap_idx) == NULL)
12959                 return TEST_SKIPPED;
12960         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
12961         cap_idx.algo.cipher = reference->crypto_algo;
12962         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
12963                         &cap_idx) == NULL)
12964                 return TEST_SKIPPED;
12965
12966         /* Create session */
12967         retval = create_auth_cipher_session(ut_params,
12968                         ts_params->valid_devs[0],
12969                         reference,
12970                         RTE_CRYPTO_AUTH_OP_VERIFY,
12971                         RTE_CRYPTO_CIPHER_OP_DECRYPT);
12972         if (retval < 0)
12973                 return retval;
12974
12975         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
12976         TEST_ASSERT_NOT_NULL(ut_params->ibuf,
12977                         "Failed to allocate input buffer in mempool");
12978
12979         /* clear mbuf payload */
12980         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
12981                         rte_pktmbuf_tailroom(ut_params->ibuf));
12982
12983         ciphertext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
12984                         reference->ciphertext.len);
12985         TEST_ASSERT_NOT_NULL(ciphertext, "no room to append ciphertext");
12986         memcpy(ciphertext, reference->ciphertext.data,
12987                         reference->ciphertext.len);
12988
12989         /* Create operation */
12990         retval = create_cipher_auth_verify_operation(ts_params,
12991                         ut_params,
12992                         reference);
12993
12994         if (retval < 0)
12995                 return retval;
12996
12997         if (data_corrupted)
12998                 data_corruption(ciphertext);
12999         else
13000                 tag_corruption(ciphertext, reference->ciphertext.len);
13001
13002         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO) {
13003                 process_cpu_crypt_auth_op(ts_params->valid_devs[0],
13004                         ut_params->op);
13005                 TEST_ASSERT_NOT_EQUAL(ut_params->op->status,
13006                         RTE_CRYPTO_OP_STATUS_SUCCESS,
13007                         "authentication not failed");
13008         } else if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
13009                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
13010                                 ut_params->op, 1, 1, 0, 0);
13011         else {
13012                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
13013                         ut_params->op);
13014                 TEST_ASSERT_NULL(ut_params->op, "authentication not failed");
13015         }
13016
13017         return 0;
13018 }
13019
13020 static int
13021 test_authenticated_encrypt_with_esn(
13022                 struct crypto_testsuite_params *ts_params,
13023                 struct crypto_unittest_params *ut_params,
13024                 const struct test_crypto_vector *reference)
13025 {
13026         int retval;
13027
13028         uint8_t *authciphertext, *plaintext, *auth_tag;
13029         uint16_t plaintext_pad_len;
13030         uint8_t cipher_key[reference->cipher_key.len + 1];
13031         uint8_t auth_key[reference->auth_key.len + 1];
13032         struct rte_cryptodev_info dev_info;
13033
13034         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
13035         uint64_t feat_flags = dev_info.feature_flags;
13036
13037         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
13038                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
13039                 printf("Device doesn't support RAW data-path APIs.\n");
13040                 return TEST_SKIPPED;
13041         }
13042
13043         /* Verify the capabilities */
13044         struct rte_cryptodev_sym_capability_idx cap_idx;
13045         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
13046         cap_idx.algo.auth = reference->auth_algo;
13047         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
13048                         &cap_idx) == NULL)
13049                 return TEST_SKIPPED;
13050         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
13051         cap_idx.algo.cipher = reference->crypto_algo;
13052         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
13053                         &cap_idx) == NULL)
13054                 return TEST_SKIPPED;
13055
13056         /* Create session */
13057         memcpy(cipher_key, reference->cipher_key.data,
13058                         reference->cipher_key.len);
13059         memcpy(auth_key, reference->auth_key.data, reference->auth_key.len);
13060
13061         /* Setup Cipher Parameters */
13062         ut_params->cipher_xform.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
13063         ut_params->cipher_xform.cipher.algo = reference->crypto_algo;
13064         ut_params->cipher_xform.cipher.op = RTE_CRYPTO_CIPHER_OP_ENCRYPT;
13065         ut_params->cipher_xform.cipher.key.data = cipher_key;
13066         ut_params->cipher_xform.cipher.key.length = reference->cipher_key.len;
13067         ut_params->cipher_xform.cipher.iv.offset = IV_OFFSET;
13068         ut_params->cipher_xform.cipher.iv.length = reference->iv.len;
13069
13070         ut_params->cipher_xform.next = &ut_params->auth_xform;
13071
13072         /* Setup Authentication Parameters */
13073         ut_params->auth_xform.type = RTE_CRYPTO_SYM_XFORM_AUTH;
13074         ut_params->auth_xform.auth.op = RTE_CRYPTO_AUTH_OP_GENERATE;
13075         ut_params->auth_xform.auth.algo = reference->auth_algo;
13076         ut_params->auth_xform.auth.key.length = reference->auth_key.len;
13077         ut_params->auth_xform.auth.key.data = auth_key;
13078         ut_params->auth_xform.auth.digest_length = reference->digest.len;
13079         ut_params->auth_xform.next = NULL;
13080
13081         /* Create Crypto session*/
13082         ut_params->sess = rte_cryptodev_sym_session_create(
13083                         ts_params->session_mpool);
13084
13085         rte_cryptodev_sym_session_init(ts_params->valid_devs[0],
13086                                 ut_params->sess,
13087                                 &ut_params->cipher_xform,
13088                                 ts_params->session_priv_mpool);
13089
13090         TEST_ASSERT_NOT_NULL(ut_params->sess, "Session creation failed");
13091
13092         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
13093         TEST_ASSERT_NOT_NULL(ut_params->ibuf,
13094                         "Failed to allocate input buffer in mempool");
13095
13096         /* clear mbuf payload */
13097         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
13098                         rte_pktmbuf_tailroom(ut_params->ibuf));
13099
13100         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
13101                         reference->plaintext.len);
13102         TEST_ASSERT_NOT_NULL(plaintext, "no room to append plaintext");
13103         memcpy(plaintext, reference->plaintext.data, reference->plaintext.len);
13104
13105         /* Create operation */
13106         retval = create_cipher_auth_operation(ts_params,
13107                         ut_params,
13108                         reference, 0);
13109
13110         if (retval < 0)
13111                 return retval;
13112
13113         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
13114                 process_cpu_crypt_auth_op(ts_params->valid_devs[0],
13115                         ut_params->op);
13116         else if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
13117                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
13118                                 ut_params->op, 1, 1, 0, 0);
13119         else
13120                 ut_params->op = process_crypto_request(
13121                         ts_params->valid_devs[0], ut_params->op);
13122
13123         TEST_ASSERT_NOT_NULL(ut_params->op, "no crypto operation returned");
13124
13125         TEST_ASSERT_EQUAL(ut_params->op->status, RTE_CRYPTO_OP_STATUS_SUCCESS,
13126                         "crypto op processing failed");
13127
13128         plaintext_pad_len = RTE_ALIGN_CEIL(reference->plaintext.len, 16);
13129
13130         authciphertext = rte_pktmbuf_mtod_offset(ut_params->ibuf, uint8_t *,
13131                         ut_params->op->sym->auth.data.offset);
13132         auth_tag = authciphertext + plaintext_pad_len;
13133         debug_hexdump(stdout, "ciphertext:", authciphertext,
13134                         reference->ciphertext.len);
13135         debug_hexdump(stdout, "auth tag:", auth_tag, reference->digest.len);
13136
13137         /* Validate obuf */
13138         TEST_ASSERT_BUFFERS_ARE_EQUAL(
13139                         authciphertext,
13140                         reference->ciphertext.data,
13141                         reference->ciphertext.len,
13142                         "Ciphertext data not as expected");
13143
13144         TEST_ASSERT_BUFFERS_ARE_EQUAL(
13145                         auth_tag,
13146                         reference->digest.data,
13147                         reference->digest.len,
13148                         "Generated digest not as expected");
13149
13150         return TEST_SUCCESS;
13151
13152 }
13153
13154 static int
13155 test_authenticated_decrypt_with_esn(
13156                 struct crypto_testsuite_params *ts_params,
13157                 struct crypto_unittest_params *ut_params,
13158                 const struct test_crypto_vector *reference)
13159 {
13160         int retval;
13161
13162         uint8_t *ciphertext;
13163         uint8_t cipher_key[reference->cipher_key.len + 1];
13164         uint8_t auth_key[reference->auth_key.len + 1];
13165         struct rte_cryptodev_info dev_info;
13166
13167         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
13168         uint64_t feat_flags = dev_info.feature_flags;
13169
13170         if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
13171                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
13172                 printf("Device doesn't support RAW data-path APIs.\n");
13173                 return TEST_SKIPPED;
13174         }
13175
13176         /* Verify the capabilities */
13177         struct rte_cryptodev_sym_capability_idx cap_idx;
13178         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AUTH;
13179         cap_idx.algo.auth = reference->auth_algo;
13180         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
13181                         &cap_idx) == NULL)
13182                 return TEST_SKIPPED;
13183         cap_idx.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
13184         cap_idx.algo.cipher = reference->crypto_algo;
13185         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
13186                         &cap_idx) == NULL)
13187                 return TEST_SKIPPED;
13188
13189         /* Create session */
13190         memcpy(cipher_key, reference->cipher_key.data,
13191                         reference->cipher_key.len);
13192         memcpy(auth_key, reference->auth_key.data, reference->auth_key.len);
13193
13194         /* Setup Authentication Parameters */
13195         ut_params->auth_xform.type = RTE_CRYPTO_SYM_XFORM_AUTH;
13196         ut_params->auth_xform.auth.op = RTE_CRYPTO_AUTH_OP_VERIFY;
13197         ut_params->auth_xform.auth.algo = reference->auth_algo;
13198         ut_params->auth_xform.auth.key.length = reference->auth_key.len;
13199         ut_params->auth_xform.auth.key.data = auth_key;
13200         ut_params->auth_xform.auth.digest_length = reference->digest.len;
13201         ut_params->auth_xform.next = &ut_params->cipher_xform;
13202
13203         /* Setup Cipher Parameters */
13204         ut_params->cipher_xform.type = RTE_CRYPTO_SYM_XFORM_CIPHER;
13205         ut_params->cipher_xform.next = NULL;
13206         ut_params->cipher_xform.cipher.algo = reference->crypto_algo;
13207         ut_params->cipher_xform.cipher.op = RTE_CRYPTO_CIPHER_OP_DECRYPT;
13208         ut_params->cipher_xform.cipher.key.data = cipher_key;
13209         ut_params->cipher_xform.cipher.key.length = reference->cipher_key.len;
13210         ut_params->cipher_xform.cipher.iv.offset = IV_OFFSET;
13211         ut_params->cipher_xform.cipher.iv.length = reference->iv.len;
13212
13213         /* Create Crypto session*/
13214         ut_params->sess = rte_cryptodev_sym_session_create(
13215                         ts_params->session_mpool);
13216
13217         rte_cryptodev_sym_session_init(ts_params->valid_devs[0],
13218                                 ut_params->sess,
13219                                 &ut_params->auth_xform,
13220                                 ts_params->session_priv_mpool);
13221
13222         TEST_ASSERT_NOT_NULL(ut_params->sess, "Session creation failed");
13223
13224         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
13225         TEST_ASSERT_NOT_NULL(ut_params->ibuf,
13226                         "Failed to allocate input buffer in mempool");
13227
13228         /* clear mbuf payload */
13229         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
13230                         rte_pktmbuf_tailroom(ut_params->ibuf));
13231
13232         ciphertext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
13233                         reference->ciphertext.len);
13234         TEST_ASSERT_NOT_NULL(ciphertext, "no room to append ciphertext");
13235         memcpy(ciphertext, reference->ciphertext.data,
13236                         reference->ciphertext.len);
13237
13238         /* Create operation */
13239         retval = create_cipher_auth_verify_operation(ts_params,
13240                         ut_params,
13241                         reference);
13242
13243         if (retval < 0)
13244                 return retval;
13245
13246         if (gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
13247                 process_cpu_crypt_auth_op(ts_params->valid_devs[0],
13248                         ut_params->op);
13249         else if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
13250                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
13251                                 ut_params->op, 1, 1, 0, 0);
13252         else
13253                 ut_params->op = process_crypto_request(ts_params->valid_devs[0],
13254                         ut_params->op);
13255
13256         TEST_ASSERT_NOT_NULL(ut_params->op, "failed crypto process");
13257         TEST_ASSERT_EQUAL(ut_params->op->status,
13258                         RTE_CRYPTO_OP_STATUS_SUCCESS,
13259                         "crypto op processing passed");
13260
13261         ut_params->obuf = ut_params->op->sym->m_src;
13262         TEST_ASSERT_NOT_NULL(ut_params->obuf, "failed to retrieve obuf");
13263
13264         return 0;
13265 }
13266
13267 static int
13268 create_aead_operation_SGL(enum rte_crypto_aead_operation op,
13269                 const struct aead_test_data *tdata,
13270                 void *digest_mem, uint64_t digest_phys)
13271 {
13272         struct crypto_testsuite_params *ts_params = &testsuite_params;
13273         struct crypto_unittest_params *ut_params = &unittest_params;
13274
13275         const unsigned int auth_tag_len = tdata->auth_tag.len;
13276         const unsigned int iv_len = tdata->iv.len;
13277         unsigned int aad_len = tdata->aad.len;
13278         unsigned int aad_len_pad = 0;
13279
13280         /* Generate Crypto op data structure */
13281         ut_params->op = rte_crypto_op_alloc(ts_params->op_mpool,
13282                         RTE_CRYPTO_OP_TYPE_SYMMETRIC);
13283         TEST_ASSERT_NOT_NULL(ut_params->op,
13284                 "Failed to allocate symmetric crypto operation struct");
13285
13286         struct rte_crypto_sym_op *sym_op = ut_params->op->sym;
13287
13288         sym_op->aead.digest.data = digest_mem;
13289
13290         TEST_ASSERT_NOT_NULL(sym_op->aead.digest.data,
13291                         "no room to append digest");
13292
13293         sym_op->aead.digest.phys_addr = digest_phys;
13294
13295         if (op == RTE_CRYPTO_AEAD_OP_DECRYPT) {
13296                 rte_memcpy(sym_op->aead.digest.data, tdata->auth_tag.data,
13297                                 auth_tag_len);
13298                 debug_hexdump(stdout, "digest:",
13299                                 sym_op->aead.digest.data,
13300                                 auth_tag_len);
13301         }
13302
13303         /* Append aad data */
13304         if (tdata->algo == RTE_CRYPTO_AEAD_AES_CCM) {
13305                 uint8_t *iv_ptr = rte_crypto_op_ctod_offset(ut_params->op,
13306                                 uint8_t *, IV_OFFSET);
13307
13308                 /* Copy IV 1 byte after the IV pointer, according to the API */
13309                 rte_memcpy(iv_ptr + 1, tdata->iv.data, iv_len);
13310
13311                 aad_len = RTE_ALIGN_CEIL(aad_len + 18, 16);
13312
13313                 sym_op->aead.aad.data = (uint8_t *)rte_pktmbuf_prepend(
13314                                 ut_params->ibuf, aad_len);
13315                 TEST_ASSERT_NOT_NULL(sym_op->aead.aad.data,
13316                                 "no room to prepend aad");
13317                 sym_op->aead.aad.phys_addr = rte_pktmbuf_iova(
13318                                 ut_params->ibuf);
13319
13320                 memset(sym_op->aead.aad.data, 0, aad_len);
13321                 /* Copy AAD 18 bytes after the AAD pointer, according to the API */
13322                 rte_memcpy(sym_op->aead.aad.data, tdata->aad.data, aad_len);
13323
13324                 debug_hexdump(stdout, "iv:", iv_ptr, iv_len);
13325                 debug_hexdump(stdout, "aad:",
13326                                 sym_op->aead.aad.data, aad_len);
13327         } else {
13328                 uint8_t *iv_ptr = rte_crypto_op_ctod_offset(ut_params->op,
13329                                 uint8_t *, IV_OFFSET);
13330
13331                 rte_memcpy(iv_ptr, tdata->iv.data, iv_len);
13332
13333                 aad_len_pad = RTE_ALIGN_CEIL(aad_len, 16);
13334
13335                 sym_op->aead.aad.data = (uint8_t *)rte_pktmbuf_prepend(
13336                                 ut_params->ibuf, aad_len_pad);
13337                 TEST_ASSERT_NOT_NULL(sym_op->aead.aad.data,
13338                                 "no room to prepend aad");
13339                 sym_op->aead.aad.phys_addr = rte_pktmbuf_iova(
13340                                 ut_params->ibuf);
13341
13342                 memset(sym_op->aead.aad.data, 0, aad_len);
13343                 rte_memcpy(sym_op->aead.aad.data, tdata->aad.data, aad_len);
13344
13345                 debug_hexdump(stdout, "iv:", iv_ptr, iv_len);
13346                 debug_hexdump(stdout, "aad:",
13347                                 sym_op->aead.aad.data, aad_len);
13348         }
13349
13350         sym_op->aead.data.length = tdata->plaintext.len;
13351         sym_op->aead.data.offset = aad_len_pad;
13352
13353         return 0;
13354 }
13355
13356 #define SGL_MAX_NO      16
13357
13358 static int
13359 test_authenticated_encryption_SGL(const struct aead_test_data *tdata,
13360                 const int oop, uint32_t fragsz, uint32_t fragsz_oop)
13361 {
13362         struct crypto_testsuite_params *ts_params = &testsuite_params;
13363         struct crypto_unittest_params *ut_params = &unittest_params;
13364         struct rte_mbuf *buf, *buf_oop = NULL, *buf_last_oop = NULL;
13365         int retval;
13366         int to_trn = 0;
13367         int to_trn_tbl[SGL_MAX_NO];
13368         int segs = 1;
13369         unsigned int trn_data = 0;
13370         uint8_t *plaintext, *ciphertext, *auth_tag;
13371         struct rte_cryptodev_info dev_info;
13372
13373         /* Verify the capabilities */
13374         struct rte_cryptodev_sym_capability_idx cap_idx;
13375         cap_idx.type = RTE_CRYPTO_SYM_XFORM_AEAD;
13376         cap_idx.algo.aead = tdata->algo;
13377         if (rte_cryptodev_sym_capability_get(ts_params->valid_devs[0],
13378                         &cap_idx) == NULL)
13379                 return TEST_SKIPPED;
13380
13381         /* OOP not supported with CPU crypto */
13382         if (oop && gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
13383                 return TEST_SKIPPED;
13384
13385         /* Detailed check for the particular SGL support flag */
13386         rte_cryptodev_info_get(ts_params->valid_devs[0], &dev_info);
13387         if (!oop) {
13388                 unsigned int sgl_in = fragsz < tdata->plaintext.len;
13389                 if (sgl_in && (!(dev_info.feature_flags &
13390                                 RTE_CRYPTODEV_FF_IN_PLACE_SGL)))
13391                         return TEST_SKIPPED;
13392
13393                 uint64_t feat_flags = dev_info.feature_flags;
13394
13395                 if ((global_api_test_type == CRYPTODEV_RAW_API_TEST) &&
13396                         (!(feat_flags & RTE_CRYPTODEV_FF_SYM_RAW_DP))) {
13397                         printf("Device doesn't support RAW data-path APIs.\n");
13398                         return TEST_SKIPPED;
13399                 }
13400         } else {
13401                 unsigned int sgl_in = fragsz < tdata->plaintext.len;
13402                 unsigned int sgl_out = (fragsz_oop ? fragsz_oop : fragsz) <
13403                                 tdata->plaintext.len;
13404                 /* Raw data path API does not support OOP */
13405                 if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
13406                         return TEST_SKIPPED;
13407                 if (sgl_in && !sgl_out) {
13408                         if (!(dev_info.feature_flags &
13409                                         RTE_CRYPTODEV_FF_OOP_SGL_IN_LB_OUT))
13410                                 return TEST_SKIPPED;
13411                 } else if (!sgl_in && sgl_out) {
13412                         if (!(dev_info.feature_flags &
13413                                         RTE_CRYPTODEV_FF_OOP_LB_IN_SGL_OUT))
13414                                 return TEST_SKIPPED;
13415                 } else if (sgl_in && sgl_out) {
13416                         if (!(dev_info.feature_flags &
13417                                         RTE_CRYPTODEV_FF_OOP_SGL_IN_SGL_OUT))
13418                                 return TEST_SKIPPED;
13419                 }
13420         }
13421
13422         if (fragsz > tdata->plaintext.len)
13423                 fragsz = tdata->plaintext.len;
13424
13425         uint16_t plaintext_len = fragsz;
13426         uint16_t frag_size_oop = fragsz_oop ? fragsz_oop : fragsz;
13427
13428         if (fragsz_oop > tdata->plaintext.len)
13429                 frag_size_oop = tdata->plaintext.len;
13430
13431         int ecx = 0;
13432         void *digest_mem = NULL;
13433
13434         uint32_t prepend_len = RTE_ALIGN_CEIL(tdata->aad.len, 16);
13435
13436         if (tdata->plaintext.len % fragsz != 0) {
13437                 if (tdata->plaintext.len / fragsz + 1 > SGL_MAX_NO)
13438                         return 1;
13439         }       else {
13440                 if (tdata->plaintext.len / fragsz > SGL_MAX_NO)
13441                         return 1;
13442         }
13443
13444         /*
13445          * For out-op-place we need to alloc another mbuf
13446          */
13447         if (oop) {
13448                 ut_params->obuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
13449                 rte_pktmbuf_append(ut_params->obuf,
13450                                 frag_size_oop + prepend_len);
13451                 buf_oop = ut_params->obuf;
13452         }
13453
13454         /* Create AEAD session */
13455         retval = create_aead_session(ts_params->valid_devs[0],
13456                         tdata->algo,
13457                         RTE_CRYPTO_AEAD_OP_ENCRYPT,
13458                         tdata->key.data, tdata->key.len,
13459                         tdata->aad.len, tdata->auth_tag.len,
13460                         tdata->iv.len);
13461         if (retval < 0)
13462                 return retval;
13463
13464         ut_params->ibuf = rte_pktmbuf_alloc(ts_params->mbuf_pool);
13465
13466         /* clear mbuf payload */
13467         memset(rte_pktmbuf_mtod(ut_params->ibuf, uint8_t *), 0,
13468                         rte_pktmbuf_tailroom(ut_params->ibuf));
13469
13470         plaintext = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
13471                         plaintext_len);
13472
13473         memcpy(plaintext, tdata->plaintext.data, plaintext_len);
13474
13475         trn_data += plaintext_len;
13476
13477         buf = ut_params->ibuf;
13478
13479         /*
13480          * Loop until no more fragments
13481          */
13482
13483         while (trn_data < tdata->plaintext.len) {
13484                 ++segs;
13485                 to_trn = (tdata->plaintext.len - trn_data < fragsz) ?
13486                                 (tdata->plaintext.len - trn_data) : fragsz;
13487
13488                 to_trn_tbl[ecx++] = to_trn;
13489
13490                 buf->next = rte_pktmbuf_alloc(ts_params->mbuf_pool);
13491                 buf = buf->next;
13492
13493                 memset(rte_pktmbuf_mtod(buf, uint8_t *), 0,
13494                                 rte_pktmbuf_tailroom(buf));
13495
13496                 /* OOP */
13497                 if (oop && !fragsz_oop) {
13498                         buf_last_oop = buf_oop->next =
13499                                         rte_pktmbuf_alloc(ts_params->mbuf_pool);
13500                         buf_oop = buf_oop->next;
13501                         memset(rte_pktmbuf_mtod(buf_oop, uint8_t *),
13502                                         0, rte_pktmbuf_tailroom(buf_oop));
13503                         rte_pktmbuf_append(buf_oop, to_trn);
13504                 }
13505
13506                 plaintext = (uint8_t *)rte_pktmbuf_append(buf,
13507                                 to_trn);
13508
13509                 memcpy(plaintext, tdata->plaintext.data + trn_data,
13510                                 to_trn);
13511                 trn_data += to_trn;
13512                 if (trn_data  == tdata->plaintext.len) {
13513                         if (oop) {
13514                                 if (!fragsz_oop)
13515                                         digest_mem = rte_pktmbuf_append(buf_oop,
13516                                                 tdata->auth_tag.len);
13517                         } else
13518                                 digest_mem = (uint8_t *)rte_pktmbuf_append(buf,
13519                                         tdata->auth_tag.len);
13520                 }
13521         }
13522
13523         uint64_t digest_phys = 0;
13524
13525         ut_params->ibuf->nb_segs = segs;
13526
13527         segs = 1;
13528         if (fragsz_oop && oop) {
13529                 to_trn = 0;
13530                 ecx = 0;
13531
13532                 if (frag_size_oop == tdata->plaintext.len) {
13533                         digest_mem = rte_pktmbuf_append(ut_params->obuf,
13534                                 tdata->auth_tag.len);
13535
13536                         digest_phys = rte_pktmbuf_iova_offset(
13537                                         ut_params->obuf,
13538                                         tdata->plaintext.len + prepend_len);
13539                 }
13540
13541                 trn_data = frag_size_oop;
13542                 while (trn_data < tdata->plaintext.len) {
13543                         ++segs;
13544                         to_trn =
13545                                 (tdata->plaintext.len - trn_data <
13546                                                 frag_size_oop) ?
13547                                 (tdata->plaintext.len - trn_data) :
13548                                                 frag_size_oop;
13549
13550                         to_trn_tbl[ecx++] = to_trn;
13551
13552                         buf_last_oop = buf_oop->next =
13553                                         rte_pktmbuf_alloc(ts_params->mbuf_pool);
13554                         buf_oop = buf_oop->next;
13555                         memset(rte_pktmbuf_mtod(buf_oop, uint8_t *),
13556                                         0, rte_pktmbuf_tailroom(buf_oop));
13557                         rte_pktmbuf_append(buf_oop, to_trn);
13558
13559                         trn_data += to_trn;
13560
13561                         if (trn_data  == tdata->plaintext.len) {
13562                                 digest_mem = rte_pktmbuf_append(buf_oop,
13563                                         tdata->auth_tag.len);
13564                         }
13565                 }
13566
13567                 ut_params->obuf->nb_segs = segs;
13568         }
13569
13570         /*
13571          * Place digest at the end of the last buffer
13572          */
13573         if (!digest_phys)
13574                 digest_phys = rte_pktmbuf_iova(buf) + to_trn;
13575         if (oop && buf_last_oop)
13576                 digest_phys = rte_pktmbuf_iova(buf_last_oop) + to_trn;
13577
13578         if (!digest_mem && !oop) {
13579                 digest_mem = (uint8_t *)rte_pktmbuf_append(ut_params->ibuf,
13580                                 + tdata->auth_tag.len);
13581                 digest_phys = rte_pktmbuf_iova_offset(ut_params->ibuf,
13582                                 tdata->plaintext.len);
13583         }
13584
13585         /* Create AEAD operation */
13586         retval = create_aead_operation_SGL(RTE_CRYPTO_AEAD_OP_ENCRYPT,
13587                         tdata, digest_mem, digest_phys);
13588
13589         if (retval < 0)
13590                 return retval;
13591
13592         rte_crypto_op_attach_sym_session(ut_params->op, ut_params->sess);
13593
13594         ut_params->op->sym->m_src = ut_params->ibuf;
13595         if (oop)
13596                 ut_params->op->sym->m_dst = ut_params->obuf;
13597
13598         /* Process crypto operation */
13599         if (oop == IN_PLACE &&
13600                         gbl_action_type == RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO)
13601                 process_cpu_aead_op(ts_params->valid_devs[0], ut_params->op);
13602         else if (global_api_test_type == CRYPTODEV_RAW_API_TEST)
13603                 process_sym_raw_dp_op(ts_params->valid_devs[0], 0,
13604                                 ut_params->op, 0, 0, 0, 0);
13605         else
13606                 TEST_ASSERT_NOT_NULL(
13607                         process_crypto_request(ts_params->valid_devs[0],
13608                         ut_params->op), "failed to process sym crypto op");
13609
13610         TEST_ASSERT_EQUAL(ut_params->op->status, RTE_CRYPTO_OP_STATUS_SUCCESS,
13611                         "crypto op processing failed");
13612
13613
13614         ciphertext = rte_pktmbuf_mtod_offset(ut_params->op->sym->m_src,
13615                         uint8_t *, prepend_len);
13616         if (oop) {
13617                 ciphertext = rte_pktmbuf_mtod_offset(ut_params->op->sym->m_dst,
13618                                 uint8_t *, prepend_len);
13619         }
13620
13621         if (fragsz_oop)
13622                 fragsz = fragsz_oop;
13623
13624         TEST_ASSERT_BUFFERS_ARE_EQUAL(
13625                         ciphertext,
13626                         tdata->ciphertext.data,
13627                         fragsz,
13628                         "Ciphertext data not as expected");
13629
13630         buf = ut_params->op->sym->m_src->next;
13631         if (oop)
13632                 buf = ut_params->op->sym->m_dst->next;
13633
13634         unsigned int off = fragsz;
13635
13636         ecx = 0;
13637         while (buf) {
13638                 ciphertext = rte_pktmbuf_mtod(buf,
13639                                 uint8_t *);
13640
13641                 TEST_ASSERT_BUFFERS_ARE_EQUAL(
13642                                 ciphertext,
13643                                 tdata->ciphertext.data + off,
13644                                 to_trn_tbl[ecx],
13645                                 "Ciphertext data not as expected");
13646
13647                 off += to_trn_tbl[ecx++];
13648                 buf = buf->next;
13649         }
13650
13651         auth_tag = digest_mem;
13652         TEST_ASSERT_BUFFERS_ARE_EQUAL(
13653                         auth_tag,
13654                         tdata->auth_tag.data,
13655                         tdata->auth_tag.len,
13656                         "Generated auth tag not as expected");
13657
13658         return 0;
13659 }
13660
13661 static int
13662 test_AES_GCM_auth_encrypt_SGL_out_of_place_400B_400B(void)
13663 {
13664         return test_authenticated_encryption_SGL(
13665                         &gcm_test_case_SGL_1, OUT_OF_PLACE, 400, 400);
13666 }
13667
13668 static int
13669 test_AES_GCM_auth_encrypt_SGL_out_of_place_1500B_2000B(void)
13670 {
13671         return test_authenticated_encryption_SGL(
13672                         &gcm_test_case_SGL_1, OUT_OF_PLACE, 1500, 2000);
13673 }
13674
13675 static int
13676 test_AES_GCM_auth_encrypt_SGL_out_of_place_400B_1seg(void)
13677 {
13678         return test_authenticated_encryption_SGL(
13679                         &gcm_test_case_8, OUT_OF_PLACE, 400,
13680                         gcm_test_case_8.plaintext.len);
13681 }
13682
13683 static int
13684 test_AES_GCM_auth_encrypt_SGL_in_place_1500B(void)
13685 {
13686         /* This test is not for OPENSSL PMD */
13687         if (gbl_driver_id == rte_cryptodev_driver_id_get(
13688                         RTE_STR(CRYPTODEV_NAME_OPENSSL_PMD)))
13689                 return TEST_SKIPPED;
13690
13691         return test_authenticated_encryption_SGL(
13692                         &gcm_test_case_SGL_1, IN_PLACE, 1500, 0);
13693 }
13694
13695 static int
13696 test_authentication_verify_fail_when_data_corrupted(
13697                 struct crypto_testsuite_params *ts_params,
13698                 struct crypto_unittest_params *ut_params,
13699                 const struct test_crypto_vector *reference)
13700 {
13701         return test_authentication_verify_fail_when_data_corruption(
13702                         ts_params, ut_params, reference, 1);
13703 }
13704
13705 static int
13706 test_authentication_verify_fail_when_tag_corrupted(
13707                 struct crypto_testsuite_params *ts_params,
13708                 struct crypto_unittest_params *ut_params,
13709                 const struct test_crypto_vector *reference)
13710 {
13711         return test_authentication_verify_fail_when_data_corruption(
13712                         ts_params, ut_params, reference, 0);
13713 }
13714
13715 static int
13716 test_authentication_verify_GMAC_fail_when_data_corrupted(
13717                 struct crypto_testsuite_params *ts_params,
13718                 struct crypto_unittest_params *ut_params,
13719                 const struct test_crypto_vector *reference)
13720 {
13721         return test_authentication_verify_GMAC_fail_when_corruption(
13722                         ts_params, ut_params, reference, 1);
13723 }
13724
13725 static int
13726 test_authentication_verify_GMAC_fail_when_tag_corrupted(
13727                 struct crypto_testsuite_params *ts_params,
13728                 struct crypto_unittest_params *ut_params,
13729                 const struct test_crypto_vector *reference)
13730 {
13731         return test_authentication_verify_GMAC_fail_when_corruption(
13732                         ts_params, ut_params, reference, 0);
13733 }
13734
13735 static int
13736 test_authenticated_decryption_fail_when_data_corrupted(
13737                 struct crypto_testsuite_params *ts_params,
13738                 struct crypto_unittest_params *ut_params,
13739                 const struct test_crypto_vector *reference)
13740 {
13741         return test_authenticated_decryption_fail_when_corruption(
13742                         ts_params, ut_params, reference, 1);
13743 }
13744
13745 static int
13746 test_authenticated_decryption_fail_when_tag_corrupted(
13747                 struct crypto_testsuite_params *ts_params,
13748                 struct crypto_unittest_params *ut_params,
13749                 const struct test_crypto_vector *reference)
13750 {
13751         return test_authenticated_decryption_fail_when_corruption(
13752                         ts_params, ut_params, reference, 0);
13753 }
13754
13755 static int
13756 authentication_verify_HMAC_SHA1_fail_data_corrupt(void)
13757 {
13758         return test_authentication_verify_fail_when_data_corrupted(
13759                         &testsuite_params, &unittest_params,
13760                         &hmac_sha1_test_crypto_vector);
13761 }
13762
13763 static int
13764 authentication_verify_HMAC_SHA1_fail_tag_corrupt(void)
13765 {
13766         return test_authentication_verify_fail_when_tag_corrupted(
13767                         &testsuite_params, &unittest_params,
13768                         &hmac_sha1_test_crypto_vector);
13769 }
13770
13771 static int
13772 authentication_verify_AES128_GMAC_fail_data_corrupt(void)
13773 {
13774         return test_authentication_verify_GMAC_fail_when_data_corrupted(
13775                         &testsuite_params, &unittest_params,
13776                         &aes128_gmac_test_vector);
13777 }
13778
13779 static int
13780 authentication_verify_AES128_GMAC_fail_tag_corrupt(void)
13781 {
13782         return test_authentication_verify_GMAC_fail_when_tag_corrupted(
13783                         &testsuite_params, &unittest_params,
13784                         &aes128_gmac_test_vector);
13785 }
13786
13787 static int
13788 auth_decryption_AES128CBC_HMAC_SHA1_fail_data_corrupt(void)
13789 {
13790         return test_authenticated_decryption_fail_when_data_corrupted(
13791                         &testsuite_params,
13792                         &unittest_params,
13793                         &aes128cbc_hmac_sha1_test_vector);
13794 }
13795
13796 static int
13797 auth_decryption_AES128CBC_HMAC_SHA1_fail_tag_corrupt(void)
13798 {
13799         return test_authenticated_decryption_fail_when_tag_corrupted(
13800                         &testsuite_params,
13801                         &unittest_params,
13802                         &aes128cbc_hmac_sha1_test_vector);
13803 }
13804
13805 static int
13806 auth_encrypt_AES128CBC_HMAC_SHA1_esn_check(void)
13807 {
13808         return test_authenticated_encrypt_with_esn(
13809                         &testsuite_params,
13810                         &unittest_params,
13811                         &aes128cbc_hmac_sha1_aad_test_vector);
13812 }
13813
13814 static int
13815 auth_decrypt_AES128CBC_HMAC_SHA1_esn_check(void)
13816 {
13817         return test_authenticated_decrypt_with_esn(
13818                         &testsuite_params,
13819                         &unittest_params,
13820                         &aes128cbc_hmac_sha1_aad_test_vector);
13821 }
13822
13823 static int
13824 test_chacha20_poly1305_encrypt_test_case_rfc8439(void)
13825 {
13826         return test_authenticated_encryption(&chacha20_poly1305_case_rfc8439);
13827 }
13828
13829 static int
13830 test_chacha20_poly1305_decrypt_test_case_rfc8439(void)
13831 {
13832         return test_authenticated_decryption(&chacha20_poly1305_case_rfc8439);
13833 }
13834
13835 #ifdef RTE_CRYPTO_SCHEDULER
13836
13837 /* global AESNI worker IDs for the scheduler test */
13838 uint8_t aesni_ids[2];
13839
13840 static int
13841 scheduler_testsuite_setup(void)
13842 {
13843         uint32_t i = 0;
13844         int32_t nb_devs, ret;
13845         char vdev_args[VDEV_ARGS_SIZE] = {""};
13846         char temp_str[VDEV_ARGS_SIZE] = {"mode=multi-core,"
13847                 "ordering=enable,name=cryptodev_test_scheduler,corelist="};
13848         uint16_t worker_core_count = 0;
13849         uint16_t socket_id = 0;
13850
13851         if (gbl_driver_id == rte_cryptodev_driver_id_get(
13852                         RTE_STR(CRYPTODEV_NAME_SCHEDULER_PMD))) {
13853
13854                 /* Identify the Worker Cores
13855                  * Use 2 worker cores for the device args
13856                  */
13857                 RTE_LCORE_FOREACH_WORKER(i) {
13858                         if (worker_core_count > 1)
13859                                 break;
13860                         snprintf(vdev_args, sizeof(vdev_args),
13861                                         "%s%d", temp_str, i);
13862                         strcpy(temp_str, vdev_args);
13863                         strlcat(temp_str, ";", sizeof(temp_str));
13864                         worker_core_count++;
13865                         socket_id = rte_lcore_to_socket_id(i);
13866                 }
13867                 if (worker_core_count != 2) {
13868                         RTE_LOG(ERR, USER1,
13869                                 "Cryptodev scheduler test require at least "
13870                                 "two worker cores to run. "
13871                                 "Please use the correct coremask.\n");
13872                         return TEST_FAILED;
13873                 }
13874                 strcpy(temp_str, vdev_args);
13875                 snprintf(vdev_args, sizeof(vdev_args), "%s,socket_id=%d",
13876                                 temp_str, socket_id);
13877                 RTE_LOG(DEBUG, USER1, "vdev_args: %s\n", vdev_args);
13878                 nb_devs = rte_cryptodev_device_count_by_driver(
13879                                 rte_cryptodev_driver_id_get(
13880                                 RTE_STR(CRYPTODEV_NAME_SCHEDULER_PMD)));
13881                 if (nb_devs < 1) {
13882                         ret = rte_vdev_init(
13883                                 RTE_STR(CRYPTODEV_NAME_SCHEDULER_PMD),
13884                                         vdev_args);
13885                         TEST_ASSERT(ret == 0,
13886                                 "Failed to create instance %u of pmd : %s",
13887                                 i, RTE_STR(CRYPTODEV_NAME_SCHEDULER_PMD));
13888                 }
13889         }
13890         return testsuite_setup();
13891 }
13892
13893 static int
13894 test_scheduler_attach_worker_op(void)
13895 {
13896         struct crypto_testsuite_params *ts_params = &testsuite_params;
13897         uint8_t sched_id = ts_params->valid_devs[0];
13898         uint32_t i, nb_devs_attached = 0;
13899         int ret;
13900         char vdev_name[32];
13901         unsigned int count = rte_cryptodev_count();
13902
13903         /* create 2 AESNI_MB vdevs on top of existing devices */
13904         for (i = count; i < count + 2; i++) {
13905                 snprintf(vdev_name, sizeof(vdev_name), "%s_%u",
13906                                 RTE_STR(CRYPTODEV_NAME_AESNI_MB_PMD),
13907                                 i);
13908                 ret = rte_vdev_init(vdev_name, NULL);
13909
13910                 TEST_ASSERT(ret == 0,
13911                         "Failed to create instance %u of"
13912                         " pmd : %s",
13913                         i, RTE_STR(CRYPTODEV_NAME_AESNI_MB_PMD));
13914
13915                 if (ret < 0) {
13916                         RTE_LOG(ERR, USER1,
13917                                 "Failed to create 2 AESNI MB PMDs.\n");
13918                         return TEST_SKIPPED;
13919                 }
13920         }
13921
13922         /* attach 2 AESNI_MB cdevs */
13923         for (i = count; i < count + 2; i++) {
13924                 struct rte_cryptodev_info info;
13925                 unsigned int session_size;
13926
13927                 rte_cryptodev_info_get(i, &info);
13928                 if (info.driver_id != rte_cryptodev_driver_id_get(
13929                                 RTE_STR(CRYPTODEV_NAME_AESNI_MB_PMD)))
13930                         continue;
13931
13932                 session_size = rte_cryptodev_sym_get_private_session_size(i);
13933                 /*
13934                  * Create the session mempool again, since now there are new devices
13935                  * to use the mempool.
13936                  */
13937                 if (ts_params->session_mpool) {
13938                         rte_mempool_free(ts_params->session_mpool);
13939                         ts_params->session_mpool = NULL;
13940                 }
13941                 if (ts_params->session_priv_mpool) {
13942                         rte_mempool_free(ts_params->session_priv_mpool);
13943                         ts_params->session_priv_mpool = NULL;
13944                 }
13945
13946                 if (info.sym.max_nb_sessions != 0 &&
13947                                 info.sym.max_nb_sessions < MAX_NB_SESSIONS) {
13948                         RTE_LOG(ERR, USER1,
13949                                         "Device does not support "
13950                                         "at least %u sessions\n",
13951                                         MAX_NB_SESSIONS);
13952                         return TEST_FAILED;
13953                 }
13954                 /*
13955                  * Create mempool with maximum number of sessions,
13956                  * to include the session headers
13957                  */
13958                 if (ts_params->session_mpool == NULL) {
13959                         ts_params->session_mpool =
13960                                 rte_cryptodev_sym_session_pool_create(
13961                                                 "test_sess_mp",
13962                                                 MAX_NB_SESSIONS, 0, 0, 0,
13963                                                 SOCKET_ID_ANY);
13964                         TEST_ASSERT_NOT_NULL(ts_params->session_mpool,
13965                                         "session mempool allocation failed");
13966                 }
13967
13968                 /*
13969                  * Create mempool with maximum number of sessions,
13970                  * to include device specific session private data
13971                  */
13972                 if (ts_params->session_priv_mpool == NULL) {
13973                         ts_params->session_priv_mpool = rte_mempool_create(
13974                                         "test_sess_mp_priv",
13975                                         MAX_NB_SESSIONS,
13976                                         session_size,
13977                                         0, 0, NULL, NULL, NULL,
13978                                         NULL, SOCKET_ID_ANY,
13979                                         0);
13980
13981                         TEST_ASSERT_NOT_NULL(ts_params->session_priv_mpool,
13982                                         "session mempool allocation failed");
13983                 }
13984
13985                 ts_params->qp_conf.mp_session = ts_params->session_mpool;
13986                 ts_params->qp_conf.mp_session_private =
13987                                 ts_params->session_priv_mpool;
13988
13989                 ret = rte_cryptodev_scheduler_worker_attach(sched_id,
13990                                 (uint8_t)i);
13991
13992                 TEST_ASSERT(ret == 0,
13993                         "Failed to attach device %u of pmd : %s", i,
13994                         RTE_STR(CRYPTODEV_NAME_AESNI_MB_PMD));
13995
13996                 aesni_ids[nb_devs_attached] = (uint8_t)i;
13997
13998                 nb_devs_attached++;
13999         }
14000
14001         return 0;
14002 }
14003
14004 static int
14005 test_scheduler_detach_worker_op(void)
14006 {
14007         struct crypto_testsuite_params *ts_params = &testsuite_params;
14008         uint8_t sched_id = ts_params->valid_devs[0];
14009         uint32_t i;
14010         int ret;
14011
14012         for (i = 0; i < 2; i++) {
14013                 ret = rte_cryptodev_scheduler_worker_detach(sched_id,
14014                                 aesni_ids[i]);
14015                 TEST_ASSERT(ret == 0,
14016                         "Failed to detach device %u", aesni_ids[i]);
14017         }
14018
14019         return 0;
14020 }
14021
14022 static int
14023 test_scheduler_mode_op(enum rte_cryptodev_scheduler_mode scheduler_mode)
14024 {
14025         struct crypto_testsuite_params *ts_params = &testsuite_params;
14026         uint8_t sched_id = ts_params->valid_devs[0];
14027         /* set mode */
14028         return rte_cryptodev_scheduler_mode_set(sched_id,
14029                 scheduler_mode);
14030 }
14031
14032 static int
14033 test_scheduler_mode_roundrobin_op(void)
14034 {
14035         TEST_ASSERT(test_scheduler_mode_op(CDEV_SCHED_MODE_ROUNDROBIN) ==
14036                         0, "Failed to set roundrobin mode");
14037         return 0;
14038
14039 }
14040
14041 static int
14042 test_scheduler_mode_multicore_op(void)
14043 {
14044         TEST_ASSERT(test_scheduler_mode_op(CDEV_SCHED_MODE_MULTICORE) ==
14045                         0, "Failed to set multicore mode");
14046
14047         return 0;
14048 }
14049
14050 static int
14051 test_scheduler_mode_failover_op(void)
14052 {
14053         TEST_ASSERT(test_scheduler_mode_op(CDEV_SCHED_MODE_FAILOVER) ==
14054                         0, "Failed to set failover mode");
14055
14056         return 0;
14057 }
14058
14059 static int
14060 test_scheduler_mode_pkt_size_distr_op(void)
14061 {
14062         TEST_ASSERT(test_scheduler_mode_op(CDEV_SCHED_MODE_PKT_SIZE_DISTR) ==
14063                         0, "Failed to set pktsize mode");
14064
14065         return 0;
14066 }
14067
14068 static int
14069 scheduler_multicore_testsuite_setup(void)
14070 {
14071         if (test_scheduler_attach_worker_op() < 0)
14072                 return TEST_SKIPPED;
14073         if (test_scheduler_mode_op(CDEV_SCHED_MODE_MULTICORE) < 0)
14074                 return TEST_SKIPPED;
14075         return 0;
14076 }
14077
14078 static int
14079 scheduler_roundrobin_testsuite_setup(void)
14080 {
14081         if (test_scheduler_attach_worker_op() < 0)
14082                 return TEST_SKIPPED;
14083         if (test_scheduler_mode_op(CDEV_SCHED_MODE_ROUNDROBIN) < 0)
14084                 return TEST_SKIPPED;
14085         return 0;
14086 }
14087
14088 static int
14089 scheduler_failover_testsuite_setup(void)
14090 {
14091         if (test_scheduler_attach_worker_op() < 0)
14092                 return TEST_SKIPPED;
14093         if (test_scheduler_mode_op(CDEV_SCHED_MODE_FAILOVER) < 0)
14094                 return TEST_SKIPPED;
14095         return 0;
14096 }
14097
14098 static int
14099 scheduler_pkt_size_distr_testsuite_setup(void)
14100 {
14101         if (test_scheduler_attach_worker_op() < 0)
14102                 return TEST_SKIPPED;
14103         if (test_scheduler_mode_op(CDEV_SCHED_MODE_PKT_SIZE_DISTR) < 0)
14104                 return TEST_SKIPPED;
14105         return 0;
14106 }
14107
14108 static void
14109 scheduler_mode_testsuite_teardown(void)
14110 {
14111         test_scheduler_detach_worker_op();
14112 }
14113
14114 #endif /* RTE_CRYPTO_SCHEDULER */
14115
14116 static struct unit_test_suite end_testsuite = {
14117         .suite_name = NULL,
14118         .setup = NULL,
14119         .teardown = NULL,
14120         .unit_test_suites = NULL
14121 };
14122
14123 #ifdef RTE_LIB_SECURITY
14124 static struct unit_test_suite ipsec_proto_testsuite  = {
14125         .suite_name = "IPsec Proto Unit Test Suite",
14126         .setup = ipsec_proto_testsuite_setup,
14127         .unit_test_cases = {
14128                 TEST_CASE_NAMED_WITH_DATA(
14129                         "Outbound known vector (ESP tunnel mode IPv4 AES-GCM 128)",
14130                         ut_setup_security, ut_teardown,
14131                         test_ipsec_proto_known_vec, &pkt_aes_128_gcm),
14132                 TEST_CASE_NAMED_WITH_DATA(
14133                         "Outbound known vector (ESP tunnel mode IPv4 AES-GCM 192)",
14134                         ut_setup_security, ut_teardown,
14135                         test_ipsec_proto_known_vec, &pkt_aes_192_gcm),
14136                 TEST_CASE_NAMED_WITH_DATA(
14137                         "Outbound known vector (ESP tunnel mode IPv4 AES-GCM 256)",
14138                         ut_setup_security, ut_teardown,
14139                         test_ipsec_proto_known_vec, &pkt_aes_256_gcm),
14140                 TEST_CASE_NAMED_WITH_DATA(
14141                         "Inbound known vector (ESP tunnel mode IPv4 AES-GCM 128)",
14142                         ut_setup_security, ut_teardown,
14143                         test_ipsec_proto_known_vec_inb, &pkt_aes_128_gcm),
14144                 TEST_CASE_NAMED_WITH_DATA(
14145                         "Inbound known vector (ESP tunnel mode IPv4 AES-GCM 192)",
14146                         ut_setup_security, ut_teardown,
14147                         test_ipsec_proto_known_vec_inb, &pkt_aes_192_gcm),
14148                 TEST_CASE_NAMED_WITH_DATA(
14149                         "Inbound known vector (ESP tunnel mode IPv4 AES-GCM 256)",
14150                         ut_setup_security, ut_teardown,
14151                         test_ipsec_proto_known_vec_inb, &pkt_aes_256_gcm),
14152                 TEST_CASE_NAMED_ST(
14153                         "Combined test alg list",
14154                         ut_setup_security, ut_teardown,
14155                         test_ipsec_proto_display_list),
14156                 TEST_CASE_NAMED_ST(
14157                         "IV generation",
14158                         ut_setup_security, ut_teardown,
14159                         test_ipsec_proto_iv_gen),
14160                 TEST_CASE_NAMED_ST(
14161                         "UDP encapsulation",
14162                         ut_setup_security, ut_teardown,
14163                         test_ipsec_proto_udp_encap),
14164                 TEST_CASE_NAMED_ST(
14165                         "SA expiry packets soft",
14166                         ut_setup_security, ut_teardown,
14167                         test_ipsec_proto_sa_exp_pkts_soft),
14168                 TEST_CASE_NAMED_ST(
14169                         "SA expiry packets hard",
14170                         ut_setup_security, ut_teardown,
14171                         test_ipsec_proto_sa_exp_pkts_hard),
14172                 TEST_CASE_NAMED_ST(
14173                         "Negative test: ICV corruption",
14174                         ut_setup_security, ut_teardown,
14175                         test_ipsec_proto_err_icv_corrupt),
14176                 TEST_CASES_END() /**< NULL terminate unit test array */
14177         }
14178 };
14179
14180 static struct unit_test_suite pdcp_proto_testsuite  = {
14181         .suite_name = "PDCP Proto Unit Test Suite",
14182         .setup = pdcp_proto_testsuite_setup,
14183         .unit_test_cases = {
14184                 TEST_CASE_ST(ut_setup_security, ut_teardown,
14185                         test_PDCP_PROTO_all),
14186                 TEST_CASES_END() /**< NULL terminate unit test array */
14187         }
14188 };
14189
14190 static struct unit_test_suite docsis_proto_testsuite  = {
14191         .suite_name = "Docsis Proto Unit Test Suite",
14192         .setup = docsis_proto_testsuite_setup,
14193         .unit_test_cases = {
14194                 TEST_CASE_ST(ut_setup_security, ut_teardown,
14195                         test_DOCSIS_PROTO_all),
14196                 TEST_CASES_END() /**< NULL terminate unit test array */
14197         }
14198 };
14199 #endif
14200
14201 static struct unit_test_suite cryptodev_gen_testsuite  = {
14202         .suite_name = "Crypto General Unit Test Suite",
14203         .setup = crypto_gen_testsuite_setup,
14204         .unit_test_cases = {
14205                 TEST_CASE_ST(ut_setup, ut_teardown,
14206                                 test_device_configure_invalid_dev_id),
14207                 TEST_CASE_ST(ut_setup, ut_teardown,
14208                                 test_queue_pair_descriptor_setup),
14209                 TEST_CASE_ST(ut_setup, ut_teardown,
14210                                 test_device_configure_invalid_queue_pair_ids),
14211                 TEST_CASE_ST(ut_setup, ut_teardown, test_stats),
14212                 TEST_CASE_ST(ut_setup, ut_teardown, test_enq_callback_setup),
14213                 TEST_CASE_ST(ut_setup, ut_teardown, test_deq_callback_setup),
14214                 TEST_CASES_END() /**< NULL terminate unit test array */
14215         }
14216 };
14217
14218 static struct unit_test_suite cryptodev_negative_hmac_sha1_testsuite = {
14219         .suite_name = "Negative HMAC SHA1 Unit Test Suite",
14220         .setup = negative_hmac_sha1_testsuite_setup,
14221         .unit_test_cases = {
14222                 /** Negative tests */
14223                 TEST_CASE_ST(ut_setup, ut_teardown,
14224                         authentication_verify_HMAC_SHA1_fail_data_corrupt),
14225                 TEST_CASE_ST(ut_setup, ut_teardown,
14226                         authentication_verify_HMAC_SHA1_fail_tag_corrupt),
14227                 TEST_CASE_ST(ut_setup, ut_teardown,
14228                         auth_decryption_AES128CBC_HMAC_SHA1_fail_data_corrupt),
14229                 TEST_CASE_ST(ut_setup, ut_teardown,
14230                         auth_decryption_AES128CBC_HMAC_SHA1_fail_tag_corrupt),
14231
14232                 TEST_CASES_END() /**< NULL terminate unit test array */
14233         }
14234 };
14235
14236 static struct unit_test_suite cryptodev_multi_session_testsuite = {
14237         .suite_name = "Multi Session Unit Test Suite",
14238         .setup = multi_session_testsuite_setup,
14239         .unit_test_cases = {
14240                 TEST_CASE_ST(ut_setup, ut_teardown, test_multi_session),
14241                 TEST_CASE_ST(ut_setup, ut_teardown,
14242                                 test_multi_session_random_usage),
14243
14244                 TEST_CASES_END() /**< NULL terminate unit test array */
14245         }
14246 };
14247
14248 static struct unit_test_suite cryptodev_null_testsuite  = {
14249         .suite_name = "NULL Test Suite",
14250         .setup = null_testsuite_setup,
14251         .unit_test_cases = {
14252                 TEST_CASE_ST(ut_setup, ut_teardown,
14253                         test_null_invalid_operation),
14254                 TEST_CASE_ST(ut_setup, ut_teardown, test_null_burst_operation),
14255                 TEST_CASES_END()
14256         }
14257 };
14258
14259 static struct unit_test_suite cryptodev_aes_ccm_auth_testsuite  = {
14260         .suite_name = "AES CCM Authenticated Test Suite",
14261         .setup = aes_ccm_auth_testsuite_setup,
14262         .unit_test_cases = {
14263                 /** AES CCM Authenticated Encryption 128 bits key*/
14264                 TEST_CASE_ST(ut_setup, ut_teardown,
14265                         test_AES_CCM_authenticated_encryption_test_case_128_1),
14266                 TEST_CASE_ST(ut_setup, ut_teardown,
14267                         test_AES_CCM_authenticated_encryption_test_case_128_2),
14268                 TEST_CASE_ST(ut_setup, ut_teardown,
14269                         test_AES_CCM_authenticated_encryption_test_case_128_3),
14270
14271                 /** AES CCM Authenticated Decryption 128 bits key*/
14272                 TEST_CASE_ST(ut_setup, ut_teardown,
14273                         test_AES_CCM_authenticated_decryption_test_case_128_1),
14274                 TEST_CASE_ST(ut_setup, ut_teardown,
14275                         test_AES_CCM_authenticated_decryption_test_case_128_2),
14276                 TEST_CASE_ST(ut_setup, ut_teardown,
14277                         test_AES_CCM_authenticated_decryption_test_case_128_3),
14278
14279                 /** AES CCM Authenticated Encryption 192 bits key */
14280                 TEST_CASE_ST(ut_setup, ut_teardown,
14281                         test_AES_CCM_authenticated_encryption_test_case_192_1),
14282                 TEST_CASE_ST(ut_setup, ut_teardown,
14283                         test_AES_CCM_authenticated_encryption_test_case_192_2),
14284                 TEST_CASE_ST(ut_setup, ut_teardown,
14285                         test_AES_CCM_authenticated_encryption_test_case_192_3),
14286
14287                 /** AES CCM Authenticated Decryption 192 bits key*/
14288                 TEST_CASE_ST(ut_setup, ut_teardown,
14289                         test_AES_CCM_authenticated_decryption_test_case_192_1),
14290                 TEST_CASE_ST(ut_setup, ut_teardown,
14291                         test_AES_CCM_authenticated_decryption_test_case_192_2),
14292                 TEST_CASE_ST(ut_setup, ut_teardown,
14293                         test_AES_CCM_authenticated_decryption_test_case_192_3),
14294
14295                 /** AES CCM Authenticated Encryption 256 bits key */
14296                 TEST_CASE_ST(ut_setup, ut_teardown,
14297                         test_AES_CCM_authenticated_encryption_test_case_256_1),
14298                 TEST_CASE_ST(ut_setup, ut_teardown,
14299                         test_AES_CCM_authenticated_encryption_test_case_256_2),
14300                 TEST_CASE_ST(ut_setup, ut_teardown,
14301                         test_AES_CCM_authenticated_encryption_test_case_256_3),
14302
14303                 /** AES CCM Authenticated Decryption 256 bits key*/
14304                 TEST_CASE_ST(ut_setup, ut_teardown,
14305                         test_AES_CCM_authenticated_decryption_test_case_256_1),
14306                 TEST_CASE_ST(ut_setup, ut_teardown,
14307                         test_AES_CCM_authenticated_decryption_test_case_256_2),
14308                 TEST_CASE_ST(ut_setup, ut_teardown,
14309                         test_AES_CCM_authenticated_decryption_test_case_256_3),
14310                 TEST_CASES_END()
14311         }
14312 };
14313
14314 static struct unit_test_suite cryptodev_aes_gcm_auth_testsuite  = {
14315         .suite_name = "AES GCM Authenticated Test Suite",
14316         .setup = aes_gcm_auth_testsuite_setup,
14317         .unit_test_cases = {
14318                 /** AES GCM Authenticated Encryption */
14319                 TEST_CASE_ST(ut_setup, ut_teardown,
14320                         test_AES_GCM_auth_encrypt_SGL_in_place_1500B),
14321                 TEST_CASE_ST(ut_setup, ut_teardown,
14322                         test_AES_GCM_auth_encrypt_SGL_out_of_place_400B_400B),
14323                 TEST_CASE_ST(ut_setup, ut_teardown,
14324                         test_AES_GCM_auth_encrypt_SGL_out_of_place_1500B_2000B),
14325                 TEST_CASE_ST(ut_setup, ut_teardown,
14326                         test_AES_GCM_auth_encrypt_SGL_out_of_place_400B_1seg),
14327                 TEST_CASE_ST(ut_setup, ut_teardown,
14328                         test_AES_GCM_authenticated_encryption_test_case_1),
14329                 TEST_CASE_ST(ut_setup, ut_teardown,
14330                         test_AES_GCM_authenticated_encryption_test_case_2),
14331                 TEST_CASE_ST(ut_setup, ut_teardown,
14332                         test_AES_GCM_authenticated_encryption_test_case_3),
14333                 TEST_CASE_ST(ut_setup, ut_teardown,
14334                         test_AES_GCM_authenticated_encryption_test_case_4),
14335                 TEST_CASE_ST(ut_setup, ut_teardown,
14336                         test_AES_GCM_authenticated_encryption_test_case_5),
14337                 TEST_CASE_ST(ut_setup, ut_teardown,
14338                         test_AES_GCM_authenticated_encryption_test_case_6),
14339                 TEST_CASE_ST(ut_setup, ut_teardown,
14340                         test_AES_GCM_authenticated_encryption_test_case_7),
14341                 TEST_CASE_ST(ut_setup, ut_teardown,
14342                         test_AES_GCM_authenticated_encryption_test_case_8),
14343                 TEST_CASE_ST(ut_setup, ut_teardown,
14344                         test_AES_GCM_J0_authenticated_encryption_test_case_1),
14345
14346                 /** AES GCM Authenticated Decryption */
14347                 TEST_CASE_ST(ut_setup, ut_teardown,
14348                         test_AES_GCM_authenticated_decryption_test_case_1),
14349                 TEST_CASE_ST(ut_setup, ut_teardown,
14350                         test_AES_GCM_authenticated_decryption_test_case_2),
14351                 TEST_CASE_ST(ut_setup, ut_teardown,
14352                         test_AES_GCM_authenticated_decryption_test_case_3),
14353                 TEST_CASE_ST(ut_setup, ut_teardown,
14354                         test_AES_GCM_authenticated_decryption_test_case_4),
14355                 TEST_CASE_ST(ut_setup, ut_teardown,
14356                         test_AES_GCM_authenticated_decryption_test_case_5),
14357                 TEST_CASE_ST(ut_setup, ut_teardown,
14358                         test_AES_GCM_authenticated_decryption_test_case_6),
14359                 TEST_CASE_ST(ut_setup, ut_teardown,
14360                         test_AES_GCM_authenticated_decryption_test_case_7),
14361                 TEST_CASE_ST(ut_setup, ut_teardown,
14362                         test_AES_GCM_authenticated_decryption_test_case_8),
14363                 TEST_CASE_ST(ut_setup, ut_teardown,
14364                         test_AES_GCM_J0_authenticated_decryption_test_case_1),
14365
14366                 /** AES GCM Authenticated Encryption 192 bits key */
14367                 TEST_CASE_ST(ut_setup, ut_teardown,
14368                         test_AES_GCM_auth_encryption_test_case_192_1),
14369                 TEST_CASE_ST(ut_setup, ut_teardown,
14370                         test_AES_GCM_auth_encryption_test_case_192_2),
14371                 TEST_CASE_ST(ut_setup, ut_teardown,
14372                         test_AES_GCM_auth_encryption_test_case_192_3),
14373                 TEST_CASE_ST(ut_setup, ut_teardown,
14374                         test_AES_GCM_auth_encryption_test_case_192_4),
14375                 TEST_CASE_ST(ut_setup, ut_teardown,
14376                         test_AES_GCM_auth_encryption_test_case_192_5),
14377                 TEST_CASE_ST(ut_setup, ut_teardown,
14378                         test_AES_GCM_auth_encryption_test_case_192_6),
14379                 TEST_CASE_ST(ut_setup, ut_teardown,
14380                         test_AES_GCM_auth_encryption_test_case_192_7),
14381
14382                 /** AES GCM Authenticated Decryption 192 bits key */
14383                 TEST_CASE_ST(ut_setup, ut_teardown,
14384                         test_AES_GCM_auth_decryption_test_case_192_1),
14385                 TEST_CASE_ST(ut_setup, ut_teardown,
14386                         test_AES_GCM_auth_decryption_test_case_192_2),
14387                 TEST_CASE_ST(ut_setup, ut_teardown,
14388                         test_AES_GCM_auth_decryption_test_case_192_3),
14389                 TEST_CASE_ST(ut_setup, ut_teardown,
14390                         test_AES_GCM_auth_decryption_test_case_192_4),
14391                 TEST_CASE_ST(ut_setup, ut_teardown,
14392                         test_AES_GCM_auth_decryption_test_case_192_5),
14393                 TEST_CASE_ST(ut_setup, ut_teardown,
14394                         test_AES_GCM_auth_decryption_test_case_192_6),
14395                 TEST_CASE_ST(ut_setup, ut_teardown,
14396                         test_AES_GCM_auth_decryption_test_case_192_7),
14397
14398                 /** AES GCM Authenticated Encryption 256 bits key */
14399                 TEST_CASE_ST(ut_setup, ut_teardown,
14400                         test_AES_GCM_auth_encryption_test_case_256_1),
14401                 TEST_CASE_ST(ut_setup, ut_teardown,
14402                         test_AES_GCM_auth_encryption_test_case_256_2),
14403                 TEST_CASE_ST(ut_setup, ut_teardown,
14404                         test_AES_GCM_auth_encryption_test_case_256_3),
14405                 TEST_CASE_ST(ut_setup, ut_teardown,
14406                         test_AES_GCM_auth_encryption_test_case_256_4),
14407                 TEST_CASE_ST(ut_setup, ut_teardown,
14408                         test_AES_GCM_auth_encryption_test_case_256_5),
14409                 TEST_CASE_ST(ut_setup, ut_teardown,
14410                         test_AES_GCM_auth_encryption_test_case_256_6),
14411                 TEST_CASE_ST(ut_setup, ut_teardown,
14412                         test_AES_GCM_auth_encryption_test_case_256_7),
14413
14414                 /** AES GCM Authenticated Decryption 256 bits key */
14415                 TEST_CASE_ST(ut_setup, ut_teardown,
14416                         test_AES_GCM_auth_decryption_test_case_256_1),
14417                 TEST_CASE_ST(ut_setup, ut_teardown,
14418                         test_AES_GCM_auth_decryption_test_case_256_2),
14419                 TEST_CASE_ST(ut_setup, ut_teardown,
14420                         test_AES_GCM_auth_decryption_test_case_256_3),
14421                 TEST_CASE_ST(ut_setup, ut_teardown,
14422                         test_AES_GCM_auth_decryption_test_case_256_4),
14423                 TEST_CASE_ST(ut_setup, ut_teardown,
14424                         test_AES_GCM_auth_decryption_test_case_256_5),
14425                 TEST_CASE_ST(ut_setup, ut_teardown,
14426                         test_AES_GCM_auth_decryption_test_case_256_6),
14427                 TEST_CASE_ST(ut_setup, ut_teardown,
14428                         test_AES_GCM_auth_decryption_test_case_256_7),
14429
14430                 /** AES GCM Authenticated Encryption big aad size */
14431                 TEST_CASE_ST(ut_setup, ut_teardown,
14432                         test_AES_GCM_auth_encryption_test_case_aad_1),
14433                 TEST_CASE_ST(ut_setup, ut_teardown,
14434                         test_AES_GCM_auth_encryption_test_case_aad_2),
14435
14436                 /** AES GCM Authenticated Decryption big aad size */
14437                 TEST_CASE_ST(ut_setup, ut_teardown,
14438                         test_AES_GCM_auth_decryption_test_case_aad_1),
14439                 TEST_CASE_ST(ut_setup, ut_teardown,
14440                         test_AES_GCM_auth_decryption_test_case_aad_2),
14441
14442                 /** Out of place tests */
14443                 TEST_CASE_ST(ut_setup, ut_teardown,
14444                         test_AES_GCM_authenticated_encryption_oop_test_case_1),
14445                 TEST_CASE_ST(ut_setup, ut_teardown,
14446                         test_AES_GCM_authenticated_decryption_oop_test_case_1),
14447
14448                 /** Session-less tests */
14449                 TEST_CASE_ST(ut_setup, ut_teardown,
14450                         test_AES_GCM_authenticated_encryption_sessionless_test_case_1),
14451                 TEST_CASE_ST(ut_setup, ut_teardown,
14452                         test_AES_GCM_authenticated_decryption_sessionless_test_case_1),
14453
14454                 TEST_CASES_END()
14455         }
14456 };
14457
14458 static struct unit_test_suite cryptodev_aes_gmac_auth_testsuite  = {
14459         .suite_name = "AES GMAC Authentication Test Suite",
14460         .setup = aes_gmac_auth_testsuite_setup,
14461         .unit_test_cases = {
14462                 TEST_CASE_ST(ut_setup, ut_teardown,
14463                         test_AES_GMAC_authentication_test_case_1),
14464                 TEST_CASE_ST(ut_setup, ut_teardown,
14465                         test_AES_GMAC_authentication_verify_test_case_1),
14466                 TEST_CASE_ST(ut_setup, ut_teardown,
14467                         test_AES_GMAC_authentication_test_case_2),
14468                 TEST_CASE_ST(ut_setup, ut_teardown,
14469                         test_AES_GMAC_authentication_verify_test_case_2),
14470                 TEST_CASE_ST(ut_setup, ut_teardown,
14471                         test_AES_GMAC_authentication_test_case_3),
14472                 TEST_CASE_ST(ut_setup, ut_teardown,
14473                         test_AES_GMAC_authentication_verify_test_case_3),
14474                 TEST_CASE_ST(ut_setup, ut_teardown,
14475                         test_AES_GMAC_authentication_test_case_4),
14476                 TEST_CASE_ST(ut_setup, ut_teardown,
14477                         test_AES_GMAC_authentication_verify_test_case_4),
14478                 TEST_CASE_ST(ut_setup, ut_teardown,
14479                         test_AES_GMAC_authentication_SGL_40B),
14480                 TEST_CASE_ST(ut_setup, ut_teardown,
14481                         test_AES_GMAC_authentication_SGL_80B),
14482                 TEST_CASE_ST(ut_setup, ut_teardown,
14483                         test_AES_GMAC_authentication_SGL_2048B),
14484                 TEST_CASE_ST(ut_setup, ut_teardown,
14485                         test_AES_GMAC_authentication_SGL_2047B),
14486
14487                 TEST_CASES_END()
14488         }
14489 };
14490
14491 static struct unit_test_suite cryptodev_chacha20_poly1305_testsuite  = {
14492         .suite_name = "Chacha20-Poly1305 Test Suite",
14493         .setup = chacha20_poly1305_testsuite_setup,
14494         .unit_test_cases = {
14495                 TEST_CASE_ST(ut_setup, ut_teardown,
14496                         test_chacha20_poly1305_encrypt_test_case_rfc8439),
14497                 TEST_CASE_ST(ut_setup, ut_teardown,
14498                         test_chacha20_poly1305_decrypt_test_case_rfc8439),
14499                 TEST_CASES_END()
14500         }
14501 };
14502
14503 static struct unit_test_suite cryptodev_snow3g_testsuite  = {
14504         .suite_name = "SNOW 3G Test Suite",
14505         .setup = snow3g_testsuite_setup,
14506         .unit_test_cases = {
14507                 /** SNOW 3G encrypt only (UEA2) */
14508                 TEST_CASE_ST(ut_setup, ut_teardown,
14509                         test_snow3g_encryption_test_case_1),
14510                 TEST_CASE_ST(ut_setup, ut_teardown,
14511                         test_snow3g_encryption_test_case_2),
14512                 TEST_CASE_ST(ut_setup, ut_teardown,
14513                         test_snow3g_encryption_test_case_3),
14514                 TEST_CASE_ST(ut_setup, ut_teardown,
14515                         test_snow3g_encryption_test_case_4),
14516                 TEST_CASE_ST(ut_setup, ut_teardown,
14517                         test_snow3g_encryption_test_case_5),
14518
14519                 TEST_CASE_ST(ut_setup, ut_teardown,
14520                         test_snow3g_encryption_test_case_1_oop),
14521                 TEST_CASE_ST(ut_setup, ut_teardown,
14522                         test_snow3g_encryption_test_case_1_oop_sgl),
14523                 TEST_CASE_ST(ut_setup, ut_teardown,
14524                         test_snow3g_encryption_test_case_1_offset_oop),
14525                 TEST_CASE_ST(ut_setup, ut_teardown,
14526                         test_snow3g_decryption_test_case_1_oop),
14527
14528                 /** SNOW 3G generate auth, then encrypt (UEA2) */
14529                 TEST_CASE_ST(ut_setup, ut_teardown,
14530                         test_snow3g_auth_cipher_test_case_1),
14531                 TEST_CASE_ST(ut_setup, ut_teardown,
14532                         test_snow3g_auth_cipher_test_case_2),
14533                 TEST_CASE_ST(ut_setup, ut_teardown,
14534                         test_snow3g_auth_cipher_test_case_2_oop),
14535                 TEST_CASE_ST(ut_setup, ut_teardown,
14536                         test_snow3g_auth_cipher_part_digest_enc),
14537                 TEST_CASE_ST(ut_setup, ut_teardown,
14538                         test_snow3g_auth_cipher_part_digest_enc_oop),
14539                 TEST_CASE_ST(ut_setup, ut_teardown,
14540                         test_snow3g_auth_cipher_test_case_3_sgl),
14541                 TEST_CASE_ST(ut_setup, ut_teardown,
14542                         test_snow3g_auth_cipher_test_case_3_oop_sgl),
14543                 TEST_CASE_ST(ut_setup, ut_teardown,
14544                         test_snow3g_auth_cipher_part_digest_enc_sgl),
14545                 TEST_CASE_ST(ut_setup, ut_teardown,
14546                         test_snow3g_auth_cipher_part_digest_enc_oop_sgl),
14547
14548                 /** SNOW 3G decrypt (UEA2), then verify auth */
14549                 TEST_CASE_ST(ut_setup, ut_teardown,
14550                         test_snow3g_auth_cipher_verify_test_case_1),
14551                 TEST_CASE_ST(ut_setup, ut_teardown,
14552                         test_snow3g_auth_cipher_verify_test_case_2),
14553                 TEST_CASE_ST(ut_setup, ut_teardown,
14554                         test_snow3g_auth_cipher_verify_test_case_2_oop),
14555                 TEST_CASE_ST(ut_setup, ut_teardown,
14556                         test_snow3g_auth_cipher_verify_part_digest_enc),
14557                 TEST_CASE_ST(ut_setup, ut_teardown,
14558                         test_snow3g_auth_cipher_verify_part_digest_enc_oop),
14559                 TEST_CASE_ST(ut_setup, ut_teardown,
14560                         test_snow3g_auth_cipher_verify_test_case_3_sgl),
14561                 TEST_CASE_ST(ut_setup, ut_teardown,
14562                         test_snow3g_auth_cipher_verify_test_case_3_oop_sgl),
14563                 TEST_CASE_ST(ut_setup, ut_teardown,
14564                         test_snow3g_auth_cipher_verify_part_digest_enc_sgl),
14565                 TEST_CASE_ST(ut_setup, ut_teardown,
14566                         test_snow3g_auth_cipher_verify_part_digest_enc_oop_sgl),
14567
14568                 /** SNOW 3G decrypt only (UEA2) */
14569                 TEST_CASE_ST(ut_setup, ut_teardown,
14570                         test_snow3g_decryption_test_case_1),
14571                 TEST_CASE_ST(ut_setup, ut_teardown,
14572                         test_snow3g_decryption_test_case_2),
14573                 TEST_CASE_ST(ut_setup, ut_teardown,
14574                         test_snow3g_decryption_test_case_3),
14575                 TEST_CASE_ST(ut_setup, ut_teardown,
14576                         test_snow3g_decryption_test_case_4),
14577                 TEST_CASE_ST(ut_setup, ut_teardown,
14578                         test_snow3g_decryption_test_case_5),
14579                 TEST_CASE_ST(ut_setup, ut_teardown,
14580                         test_snow3g_decryption_with_digest_test_case_1),
14581                 TEST_CASE_ST(ut_setup, ut_teardown,
14582                         test_snow3g_hash_generate_test_case_1),
14583                 TEST_CASE_ST(ut_setup, ut_teardown,
14584                         test_snow3g_hash_generate_test_case_2),
14585                 TEST_CASE_ST(ut_setup, ut_teardown,
14586                         test_snow3g_hash_generate_test_case_3),
14587
14588                 /* Tests with buffers which length is not byte-aligned */
14589                 TEST_CASE_ST(ut_setup, ut_teardown,
14590                         test_snow3g_hash_generate_test_case_4),
14591                 TEST_CASE_ST(ut_setup, ut_teardown,
14592                         test_snow3g_hash_generate_test_case_5),
14593                 TEST_CASE_ST(ut_setup, ut_teardown,
14594                         test_snow3g_hash_generate_test_case_6),
14595                 TEST_CASE_ST(ut_setup, ut_teardown,
14596                         test_snow3g_hash_verify_test_case_1),
14597                 TEST_CASE_ST(ut_setup, ut_teardown,
14598                         test_snow3g_hash_verify_test_case_2),
14599                 TEST_CASE_ST(ut_setup, ut_teardown,
14600                         test_snow3g_hash_verify_test_case_3),
14601
14602                 /* Tests with buffers which length is not byte-aligned */
14603                 TEST_CASE_ST(ut_setup, ut_teardown,
14604                         test_snow3g_hash_verify_test_case_4),
14605                 TEST_CASE_ST(ut_setup, ut_teardown,
14606                         test_snow3g_hash_verify_test_case_5),
14607                 TEST_CASE_ST(ut_setup, ut_teardown,
14608                         test_snow3g_hash_verify_test_case_6),
14609                 TEST_CASE_ST(ut_setup, ut_teardown,
14610                         test_snow3g_cipher_auth_test_case_1),
14611                 TEST_CASE_ST(ut_setup, ut_teardown,
14612                         test_snow3g_auth_cipher_with_digest_test_case_1),
14613                 TEST_CASES_END()
14614         }
14615 };
14616
14617 static struct unit_test_suite cryptodev_zuc_testsuite  = {
14618         .suite_name = "ZUC Test Suite",
14619         .setup = zuc_testsuite_setup,
14620         .unit_test_cases = {
14621                 /** ZUC encrypt only (EEA3) */
14622                 TEST_CASE_ST(ut_setup, ut_teardown,
14623                         test_zuc_encryption_test_case_1),
14624                 TEST_CASE_ST(ut_setup, ut_teardown,
14625                         test_zuc_encryption_test_case_2),
14626                 TEST_CASE_ST(ut_setup, ut_teardown,
14627                         test_zuc_encryption_test_case_3),
14628                 TEST_CASE_ST(ut_setup, ut_teardown,
14629                         test_zuc_encryption_test_case_4),
14630                 TEST_CASE_ST(ut_setup, ut_teardown,
14631                         test_zuc_encryption_test_case_5),
14632                 TEST_CASE_ST(ut_setup, ut_teardown,
14633                         test_zuc_encryption_test_case_6_sgl),
14634
14635                 /** ZUC authenticate (EIA3) */
14636                 TEST_CASE_ST(ut_setup, ut_teardown,
14637                         test_zuc_hash_generate_test_case_1),
14638                 TEST_CASE_ST(ut_setup, ut_teardown,
14639                         test_zuc_hash_generate_test_case_2),
14640                 TEST_CASE_ST(ut_setup, ut_teardown,
14641                         test_zuc_hash_generate_test_case_3),
14642                 TEST_CASE_ST(ut_setup, ut_teardown,
14643                         test_zuc_hash_generate_test_case_4),
14644                 TEST_CASE_ST(ut_setup, ut_teardown,
14645                         test_zuc_hash_generate_test_case_5),
14646                 TEST_CASE_ST(ut_setup, ut_teardown,
14647                         test_zuc_hash_generate_test_case_6),
14648                 TEST_CASE_ST(ut_setup, ut_teardown,
14649                         test_zuc_hash_generate_test_case_7),
14650                 TEST_CASE_ST(ut_setup, ut_teardown,
14651                         test_zuc_hash_generate_test_case_8),
14652
14653                 /** ZUC alg-chain (EEA3/EIA3) */
14654                 TEST_CASE_ST(ut_setup, ut_teardown,
14655                         test_zuc_cipher_auth_test_case_1),
14656                 TEST_CASE_ST(ut_setup, ut_teardown,
14657                         test_zuc_cipher_auth_test_case_2),
14658
14659                 /** ZUC generate auth, then encrypt (EEA3) */
14660                 TEST_CASE_ST(ut_setup, ut_teardown,
14661                         test_zuc_auth_cipher_test_case_1),
14662                 TEST_CASE_ST(ut_setup, ut_teardown,
14663                         test_zuc_auth_cipher_test_case_1_oop),
14664                 TEST_CASE_ST(ut_setup, ut_teardown,
14665                         test_zuc_auth_cipher_test_case_1_sgl),
14666                 TEST_CASE_ST(ut_setup, ut_teardown,
14667                         test_zuc_auth_cipher_test_case_1_oop_sgl),
14668
14669                 /** ZUC decrypt (EEA3), then verify auth */
14670                 TEST_CASE_ST(ut_setup, ut_teardown,
14671                         test_zuc_auth_cipher_verify_test_case_1),
14672                 TEST_CASE_ST(ut_setup, ut_teardown,
14673                         test_zuc_auth_cipher_verify_test_case_1_oop),
14674                 TEST_CASE_ST(ut_setup, ut_teardown,
14675                         test_zuc_auth_cipher_verify_test_case_1_sgl),
14676                 TEST_CASE_ST(ut_setup, ut_teardown,
14677                         test_zuc_auth_cipher_verify_test_case_1_oop_sgl),
14678                 TEST_CASES_END()
14679         }
14680 };
14681
14682 static struct unit_test_suite cryptodev_hmac_md5_auth_testsuite  = {
14683         .suite_name = "HMAC_MD5 Authentication Test Suite",
14684         .setup = hmac_md5_auth_testsuite_setup,
14685         .unit_test_cases = {
14686                 TEST_CASE_ST(ut_setup, ut_teardown,
14687                         test_MD5_HMAC_generate_case_1),
14688                 TEST_CASE_ST(ut_setup, ut_teardown,
14689                         test_MD5_HMAC_verify_case_1),
14690                 TEST_CASE_ST(ut_setup, ut_teardown,
14691                         test_MD5_HMAC_generate_case_2),
14692                 TEST_CASE_ST(ut_setup, ut_teardown,
14693                         test_MD5_HMAC_verify_case_2),
14694                 TEST_CASES_END()
14695         }
14696 };
14697
14698 static struct unit_test_suite cryptodev_kasumi_testsuite  = {
14699         .suite_name = "Kasumi Test Suite",
14700         .setup = kasumi_testsuite_setup,
14701         .unit_test_cases = {
14702                 /** KASUMI hash only (UIA1) */
14703                 TEST_CASE_ST(ut_setup, ut_teardown,
14704                         test_kasumi_hash_generate_test_case_1),
14705                 TEST_CASE_ST(ut_setup, ut_teardown,
14706                         test_kasumi_hash_generate_test_case_2),
14707                 TEST_CASE_ST(ut_setup, ut_teardown,
14708                         test_kasumi_hash_generate_test_case_3),
14709                 TEST_CASE_ST(ut_setup, ut_teardown,
14710                         test_kasumi_hash_generate_test_case_4),
14711                 TEST_CASE_ST(ut_setup, ut_teardown,
14712                         test_kasumi_hash_generate_test_case_5),
14713                 TEST_CASE_ST(ut_setup, ut_teardown,
14714                         test_kasumi_hash_generate_test_case_6),
14715
14716                 TEST_CASE_ST(ut_setup, ut_teardown,
14717                         test_kasumi_hash_verify_test_case_1),
14718                 TEST_CASE_ST(ut_setup, ut_teardown,
14719                         test_kasumi_hash_verify_test_case_2),
14720                 TEST_CASE_ST(ut_setup, ut_teardown,
14721                         test_kasumi_hash_verify_test_case_3),
14722                 TEST_CASE_ST(ut_setup, ut_teardown,
14723                         test_kasumi_hash_verify_test_case_4),
14724                 TEST_CASE_ST(ut_setup, ut_teardown,
14725                         test_kasumi_hash_verify_test_case_5),
14726
14727                 /** KASUMI encrypt only (UEA1) */
14728                 TEST_CASE_ST(ut_setup, ut_teardown,
14729                         test_kasumi_encryption_test_case_1),
14730                 TEST_CASE_ST(ut_setup, ut_teardown,
14731                         test_kasumi_encryption_test_case_1_sgl),
14732                 TEST_CASE_ST(ut_setup, ut_teardown,
14733                         test_kasumi_encryption_test_case_1_oop),
14734                 TEST_CASE_ST(ut_setup, ut_teardown,
14735                         test_kasumi_encryption_test_case_1_oop_sgl),
14736                 TEST_CASE_ST(ut_setup, ut_teardown,
14737                         test_kasumi_encryption_test_case_2),
14738                 TEST_CASE_ST(ut_setup, ut_teardown,
14739                         test_kasumi_encryption_test_case_3),
14740                 TEST_CASE_ST(ut_setup, ut_teardown,
14741                         test_kasumi_encryption_test_case_4),
14742                 TEST_CASE_ST(ut_setup, ut_teardown,
14743                         test_kasumi_encryption_test_case_5),
14744
14745                 /** KASUMI decrypt only (UEA1) */
14746                 TEST_CASE_ST(ut_setup, ut_teardown,
14747                         test_kasumi_decryption_test_case_1),
14748                 TEST_CASE_ST(ut_setup, ut_teardown,
14749                         test_kasumi_decryption_test_case_2),
14750                 TEST_CASE_ST(ut_setup, ut_teardown,
14751                         test_kasumi_decryption_test_case_3),
14752                 TEST_CASE_ST(ut_setup, ut_teardown,
14753                         test_kasumi_decryption_test_case_4),
14754                 TEST_CASE_ST(ut_setup, ut_teardown,
14755                         test_kasumi_decryption_test_case_5),
14756                 TEST_CASE_ST(ut_setup, ut_teardown,
14757                         test_kasumi_decryption_test_case_1_oop),
14758                 TEST_CASE_ST(ut_setup, ut_teardown,
14759                         test_kasumi_cipher_auth_test_case_1),
14760
14761                 /** KASUMI generate auth, then encrypt (F8) */
14762                 TEST_CASE_ST(ut_setup, ut_teardown,
14763                         test_kasumi_auth_cipher_test_case_1),
14764                 TEST_CASE_ST(ut_setup, ut_teardown,
14765                         test_kasumi_auth_cipher_test_case_2),
14766                 TEST_CASE_ST(ut_setup, ut_teardown,
14767                         test_kasumi_auth_cipher_test_case_2_oop),
14768                 TEST_CASE_ST(ut_setup, ut_teardown,
14769                         test_kasumi_auth_cipher_test_case_2_sgl),
14770                 TEST_CASE_ST(ut_setup, ut_teardown,
14771                         test_kasumi_auth_cipher_test_case_2_oop_sgl),
14772
14773                 /** KASUMI decrypt (F8), then verify auth */
14774                 TEST_CASE_ST(ut_setup, ut_teardown,
14775                         test_kasumi_auth_cipher_verify_test_case_1),
14776                 TEST_CASE_ST(ut_setup, ut_teardown,
14777                         test_kasumi_auth_cipher_verify_test_case_2),
14778                 TEST_CASE_ST(ut_setup, ut_teardown,
14779                         test_kasumi_auth_cipher_verify_test_case_2_oop),
14780                 TEST_CASE_ST(ut_setup, ut_teardown,
14781                         test_kasumi_auth_cipher_verify_test_case_2_sgl),
14782                 TEST_CASE_ST(ut_setup, ut_teardown,
14783                         test_kasumi_auth_cipher_verify_test_case_2_oop_sgl),
14784
14785                 TEST_CASES_END()
14786         }
14787 };
14788
14789 static struct unit_test_suite cryptodev_esn_testsuite  = {
14790         .suite_name = "ESN Test Suite",
14791         .setup = esn_testsuite_setup,
14792         .unit_test_cases = {
14793                 TEST_CASE_ST(ut_setup, ut_teardown,
14794                         auth_encrypt_AES128CBC_HMAC_SHA1_esn_check),
14795                 TEST_CASE_ST(ut_setup, ut_teardown,
14796                         auth_decrypt_AES128CBC_HMAC_SHA1_esn_check),
14797                 TEST_CASES_END()
14798         }
14799 };
14800
14801 static struct unit_test_suite cryptodev_negative_aes_gcm_testsuite  = {
14802         .suite_name = "Negative AES GCM Test Suite",
14803         .setup = negative_aes_gcm_testsuite_setup,
14804         .unit_test_cases = {
14805                 TEST_CASE_ST(ut_setup, ut_teardown,
14806                         test_AES_GCM_auth_encryption_fail_iv_corrupt),
14807                 TEST_CASE_ST(ut_setup, ut_teardown,
14808                         test_AES_GCM_auth_encryption_fail_in_data_corrupt),
14809                 TEST_CASE_ST(ut_setup, ut_teardown,
14810                         test_AES_GCM_auth_encryption_fail_out_data_corrupt),
14811                 TEST_CASE_ST(ut_setup, ut_teardown,
14812                         test_AES_GCM_auth_encryption_fail_aad_len_corrupt),
14813                 TEST_CASE_ST(ut_setup, ut_teardown,
14814                         test_AES_GCM_auth_encryption_fail_aad_corrupt),
14815                 TEST_CASE_ST(ut_setup, ut_teardown,
14816                         test_AES_GCM_auth_encryption_fail_tag_corrupt),
14817                 TEST_CASE_ST(ut_setup, ut_teardown,
14818                         test_AES_GCM_auth_decryption_fail_iv_corrupt),
14819                 TEST_CASE_ST(ut_setup, ut_teardown,
14820                         test_AES_GCM_auth_decryption_fail_in_data_corrupt),
14821                 TEST_CASE_ST(ut_setup, ut_teardown,
14822                         test_AES_GCM_auth_decryption_fail_out_data_corrupt),
14823                 TEST_CASE_ST(ut_setup, ut_teardown,
14824                         test_AES_GCM_auth_decryption_fail_aad_len_corrupt),
14825                 TEST_CASE_ST(ut_setup, ut_teardown,
14826                         test_AES_GCM_auth_decryption_fail_aad_corrupt),
14827                 TEST_CASE_ST(ut_setup, ut_teardown,
14828                         test_AES_GCM_auth_decryption_fail_tag_corrupt),
14829
14830                 TEST_CASES_END()
14831         }
14832 };
14833
14834 static struct unit_test_suite cryptodev_negative_aes_gmac_testsuite  = {
14835         .suite_name = "Negative AES GMAC Test Suite",
14836         .setup = negative_aes_gmac_testsuite_setup,
14837         .unit_test_cases = {
14838                 TEST_CASE_ST(ut_setup, ut_teardown,
14839                         authentication_verify_AES128_GMAC_fail_data_corrupt),
14840                 TEST_CASE_ST(ut_setup, ut_teardown,
14841                         authentication_verify_AES128_GMAC_fail_tag_corrupt),
14842
14843                 TEST_CASES_END()
14844         }
14845 };
14846
14847 static struct unit_test_suite cryptodev_mixed_cipher_hash_testsuite  = {
14848         .suite_name = "Mixed CIPHER + HASH algorithms Test Suite",
14849         .setup = mixed_cipher_hash_testsuite_setup,
14850         .unit_test_cases = {
14851                 /** AUTH AES CMAC + CIPHER AES CTR */
14852                 TEST_CASE_ST(ut_setup, ut_teardown,
14853                         test_aes_cmac_aes_ctr_digest_enc_test_case_1),
14854                 TEST_CASE_ST(ut_setup, ut_teardown,
14855                         test_aes_cmac_aes_ctr_digest_enc_test_case_1_oop),
14856                 TEST_CASE_ST(ut_setup, ut_teardown,
14857                         test_aes_cmac_aes_ctr_digest_enc_test_case_1_sgl),
14858                 TEST_CASE_ST(ut_setup, ut_teardown,
14859                         test_aes_cmac_aes_ctr_digest_enc_test_case_1_oop_sgl),
14860                 TEST_CASE_ST(ut_setup, ut_teardown,
14861                         test_verify_aes_cmac_aes_ctr_digest_enc_test_case_1),
14862                 TEST_CASE_ST(ut_setup, ut_teardown,
14863                         test_verify_aes_cmac_aes_ctr_digest_enc_test_case_1_oop),
14864                 TEST_CASE_ST(ut_setup, ut_teardown,
14865                         test_verify_aes_cmac_aes_ctr_digest_enc_test_case_1_sgl),
14866                 TEST_CASE_ST(ut_setup, ut_teardown,
14867                         test_verify_aes_cmac_aes_ctr_digest_enc_test_case_1_oop_sgl),
14868
14869                 /** AUTH ZUC + CIPHER SNOW3G */
14870                 TEST_CASE_ST(ut_setup, ut_teardown,
14871                         test_auth_zuc_cipher_snow_test_case_1),
14872                 TEST_CASE_ST(ut_setup, ut_teardown,
14873                         test_verify_auth_zuc_cipher_snow_test_case_1),
14874                 /** AUTH AES CMAC + CIPHER SNOW3G */
14875                 TEST_CASE_ST(ut_setup, ut_teardown,
14876                         test_auth_aes_cmac_cipher_snow_test_case_1),
14877                 TEST_CASE_ST(ut_setup, ut_teardown,
14878                         test_verify_auth_aes_cmac_cipher_snow_test_case_1),
14879                 /** AUTH ZUC + CIPHER AES CTR */
14880                 TEST_CASE_ST(ut_setup, ut_teardown,
14881                         test_auth_zuc_cipher_aes_ctr_test_case_1),
14882                 TEST_CASE_ST(ut_setup, ut_teardown,
14883                         test_verify_auth_zuc_cipher_aes_ctr_test_case_1),
14884                 /** AUTH SNOW3G + CIPHER AES CTR */
14885                 TEST_CASE_ST(ut_setup, ut_teardown,
14886                         test_auth_snow_cipher_aes_ctr_test_case_1),
14887                 TEST_CASE_ST(ut_setup, ut_teardown,
14888                         test_verify_auth_snow_cipher_aes_ctr_test_case_1),
14889                 /** AUTH SNOW3G + CIPHER ZUC */
14890                 TEST_CASE_ST(ut_setup, ut_teardown,
14891                         test_auth_snow_cipher_zuc_test_case_1),
14892                 TEST_CASE_ST(ut_setup, ut_teardown,
14893                         test_verify_auth_snow_cipher_zuc_test_case_1),
14894                 /** AUTH AES CMAC + CIPHER ZUC */
14895                 TEST_CASE_ST(ut_setup, ut_teardown,
14896                         test_auth_aes_cmac_cipher_zuc_test_case_1),
14897                 TEST_CASE_ST(ut_setup, ut_teardown,
14898                         test_verify_auth_aes_cmac_cipher_zuc_test_case_1),
14899
14900                 /** AUTH NULL + CIPHER SNOW3G */
14901                 TEST_CASE_ST(ut_setup, ut_teardown,
14902                         test_auth_null_cipher_snow_test_case_1),
14903                 TEST_CASE_ST(ut_setup, ut_teardown,
14904                         test_verify_auth_null_cipher_snow_test_case_1),
14905                 /** AUTH NULL + CIPHER ZUC */
14906                 TEST_CASE_ST(ut_setup, ut_teardown,
14907                         test_auth_null_cipher_zuc_test_case_1),
14908                 TEST_CASE_ST(ut_setup, ut_teardown,
14909                         test_verify_auth_null_cipher_zuc_test_case_1),
14910                 /** AUTH SNOW3G + CIPHER NULL */
14911                 TEST_CASE_ST(ut_setup, ut_teardown,
14912                         test_auth_snow_cipher_null_test_case_1),
14913                 TEST_CASE_ST(ut_setup, ut_teardown,
14914                         test_verify_auth_snow_cipher_null_test_case_1),
14915                 /** AUTH ZUC + CIPHER NULL */
14916                 TEST_CASE_ST(ut_setup, ut_teardown,
14917                         test_auth_zuc_cipher_null_test_case_1),
14918                 TEST_CASE_ST(ut_setup, ut_teardown,
14919                         test_verify_auth_zuc_cipher_null_test_case_1),
14920                 /** AUTH NULL + CIPHER AES CTR */
14921                 TEST_CASE_ST(ut_setup, ut_teardown,
14922                         test_auth_null_cipher_aes_ctr_test_case_1),
14923                 TEST_CASE_ST(ut_setup, ut_teardown,
14924                         test_verify_auth_null_cipher_aes_ctr_test_case_1),
14925                 /** AUTH AES CMAC + CIPHER NULL */
14926                 TEST_CASE_ST(ut_setup, ut_teardown,
14927                         test_auth_aes_cmac_cipher_null_test_case_1),
14928                 TEST_CASE_ST(ut_setup, ut_teardown,
14929                         test_verify_auth_aes_cmac_cipher_null_test_case_1),
14930                 TEST_CASES_END()
14931         }
14932 };
14933
14934 static int
14935 run_cryptodev_testsuite(const char *pmd_name)
14936 {
14937         uint8_t ret, j, i = 0, blk_start_idx = 0;
14938         const enum blockcipher_test_type blk_suites[] = {
14939                 BLKCIPHER_AES_CHAIN_TYPE,
14940                 BLKCIPHER_AES_CIPHERONLY_TYPE,
14941                 BLKCIPHER_AES_DOCSIS_TYPE,
14942                 BLKCIPHER_3DES_CHAIN_TYPE,
14943                 BLKCIPHER_3DES_CIPHERONLY_TYPE,
14944                 BLKCIPHER_DES_CIPHERONLY_TYPE,
14945                 BLKCIPHER_DES_DOCSIS_TYPE,
14946                 BLKCIPHER_AUTHONLY_TYPE};
14947         struct unit_test_suite *static_suites[] = {
14948                 &cryptodev_multi_session_testsuite,
14949                 &cryptodev_null_testsuite,
14950                 &cryptodev_aes_ccm_auth_testsuite,
14951                 &cryptodev_aes_gcm_auth_testsuite,
14952                 &cryptodev_aes_gmac_auth_testsuite,
14953                 &cryptodev_snow3g_testsuite,
14954                 &cryptodev_chacha20_poly1305_testsuite,
14955                 &cryptodev_zuc_testsuite,
14956                 &cryptodev_hmac_md5_auth_testsuite,
14957                 &cryptodev_kasumi_testsuite,
14958                 &cryptodev_esn_testsuite,
14959                 &cryptodev_negative_aes_gcm_testsuite,
14960                 &cryptodev_negative_aes_gmac_testsuite,
14961                 &cryptodev_mixed_cipher_hash_testsuite,
14962                 &cryptodev_negative_hmac_sha1_testsuite,
14963                 &cryptodev_gen_testsuite,
14964 #ifdef RTE_LIB_SECURITY
14965                 &ipsec_proto_testsuite,
14966                 &pdcp_proto_testsuite,
14967                 &docsis_proto_testsuite,
14968 #endif
14969                 &end_testsuite
14970         };
14971         static struct unit_test_suite ts = {
14972                 .suite_name = "Cryptodev Unit Test Suite",
14973                 .setup = testsuite_setup,
14974                 .teardown = testsuite_teardown,
14975                 .unit_test_cases = {TEST_CASES_END()}
14976         };
14977
14978         gbl_driver_id = rte_cryptodev_driver_id_get(pmd_name);
14979
14980         if (gbl_driver_id == -1) {
14981                 RTE_LOG(ERR, USER1, "%s PMD must be loaded.\n", pmd_name);
14982                 return TEST_SKIPPED;
14983         }
14984
14985         ts.unit_test_suites = malloc(sizeof(struct unit_test_suite *) *
14986                         (RTE_DIM(blk_suites) + RTE_DIM(static_suites)));
14987
14988         ADD_BLOCKCIPHER_TESTSUITE(i, ts, blk_suites, RTE_DIM(blk_suites));
14989         ADD_STATIC_TESTSUITE(i, ts, static_suites, RTE_DIM(static_suites));
14990         ret = unit_test_suite_runner(&ts);
14991
14992         FREE_BLOCKCIPHER_TESTSUITE(blk_start_idx, ts, RTE_DIM(blk_suites));
14993         free(ts.unit_test_suites);
14994         return ret;
14995 }
14996
14997 static int
14998 require_feature_flag(const char *pmd_name, uint64_t flag, const char *flag_name)
14999 {
15000         struct rte_cryptodev_info dev_info;
15001         uint8_t i, nb_devs;
15002         int driver_id;
15003
15004         driver_id = rte_cryptodev_driver_id_get(pmd_name);
15005         if (driver_id == -1) {
15006                 RTE_LOG(WARNING, USER1, "%s PMD must be loaded.\n", pmd_name);
15007                 return TEST_SKIPPED;
15008         }
15009
15010         nb_devs = rte_cryptodev_count();
15011         if (nb_devs < 1) {
15012                 RTE_LOG(WARNING, USER1, "No crypto devices found?\n");
15013                 return TEST_SKIPPED;
15014         }
15015
15016         for (i = 0; i < nb_devs; i++) {
15017                 rte_cryptodev_info_get(i, &dev_info);
15018                 if (dev_info.driver_id == driver_id) {
15019                         if (!(dev_info.feature_flags & flag)) {
15020                                 RTE_LOG(INFO, USER1, "%s not supported\n",
15021                                                 flag_name);
15022                                 return TEST_SKIPPED;
15023                         }
15024                         return 0; /* found */
15025                 }
15026         }
15027
15028         RTE_LOG(INFO, USER1, "%s not supported\n", flag_name);
15029         return TEST_SKIPPED;
15030 }
15031
15032 static int
15033 test_cryptodev_qat(void)
15034 {
15035         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_QAT_SYM_PMD));
15036 }
15037
15038 static int
15039 test_cryptodev_virtio(void)
15040 {
15041         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_VIRTIO_PMD));
15042 }
15043
15044 static int
15045 test_cryptodev_aesni_mb(void)
15046 {
15047         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_AESNI_MB_PMD));
15048 }
15049
15050 static int
15051 test_cryptodev_cpu_aesni_mb(void)
15052 {
15053         int32_t rc;
15054         enum rte_security_session_action_type at = gbl_action_type;
15055         gbl_action_type = RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO;
15056         rc = run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_AESNI_MB_PMD));
15057         gbl_action_type = at;
15058         return rc;
15059 }
15060
15061 static int
15062 test_cryptodev_openssl(void)
15063 {
15064         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_OPENSSL_PMD));
15065 }
15066
15067 static int
15068 test_cryptodev_aesni_gcm(void)
15069 {
15070         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_AESNI_GCM_PMD));
15071 }
15072
15073 static int
15074 test_cryptodev_cpu_aesni_gcm(void)
15075 {
15076         int32_t rc;
15077         enum rte_security_session_action_type at = gbl_action_type;
15078         gbl_action_type = RTE_SECURITY_ACTION_TYPE_CPU_CRYPTO;
15079         rc  = run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_AESNI_GCM_PMD));
15080         gbl_action_type = at;
15081         return rc;
15082 }
15083
15084 static int
15085 test_cryptodev_mlx5(void)
15086 {
15087         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_MLX5_PMD));
15088 }
15089
15090 static int
15091 test_cryptodev_null(void)
15092 {
15093         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_NULL_PMD));
15094 }
15095
15096 static int
15097 test_cryptodev_sw_snow3g(void)
15098 {
15099         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_SNOW3G_PMD));
15100 }
15101
15102 static int
15103 test_cryptodev_sw_kasumi(void)
15104 {
15105         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_KASUMI_PMD));
15106 }
15107
15108 static int
15109 test_cryptodev_sw_zuc(void)
15110 {
15111         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_ZUC_PMD));
15112 }
15113
15114 static int
15115 test_cryptodev_armv8(void)
15116 {
15117         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_ARMV8_PMD));
15118 }
15119
15120 static int
15121 test_cryptodev_mrvl(void)
15122 {
15123         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_MVSAM_PMD));
15124 }
15125
15126 #ifdef RTE_CRYPTO_SCHEDULER
15127
15128 static int
15129 test_cryptodev_scheduler(void)
15130 {
15131         uint8_t ret, sched_i, j, i = 0, blk_start_idx = 0;
15132         const enum blockcipher_test_type blk_suites[] = {
15133                 BLKCIPHER_AES_CHAIN_TYPE,
15134                 BLKCIPHER_AES_CIPHERONLY_TYPE,
15135                 BLKCIPHER_AUTHONLY_TYPE
15136         };
15137         static struct unit_test_suite scheduler_multicore = {
15138                 .suite_name = "Scheduler Multicore Unit Test Suite",
15139                 .setup = scheduler_multicore_testsuite_setup,
15140                 .teardown = scheduler_mode_testsuite_teardown,
15141                 .unit_test_cases = {TEST_CASES_END()}
15142         };
15143         static struct unit_test_suite scheduler_round_robin = {
15144                 .suite_name = "Scheduler Round Robin Unit Test Suite",
15145                 .setup = scheduler_roundrobin_testsuite_setup,
15146                 .teardown = scheduler_mode_testsuite_teardown,
15147                 .unit_test_cases = {TEST_CASES_END()}
15148         };
15149         static struct unit_test_suite scheduler_failover = {
15150                 .suite_name = "Scheduler Failover Unit Test Suite",
15151                 .setup = scheduler_failover_testsuite_setup,
15152                 .teardown = scheduler_mode_testsuite_teardown,
15153                 .unit_test_cases = {TEST_CASES_END()}
15154         };
15155         static struct unit_test_suite scheduler_pkt_size_distr = {
15156                 .suite_name = "Scheduler Pkt Size Distr Unit Test Suite",
15157                 .setup = scheduler_pkt_size_distr_testsuite_setup,
15158                 .teardown = scheduler_mode_testsuite_teardown,
15159                 .unit_test_cases = {TEST_CASES_END()}
15160         };
15161         struct unit_test_suite *sched_mode_suites[] = {
15162                 &scheduler_multicore,
15163                 &scheduler_round_robin,
15164                 &scheduler_failover,
15165                 &scheduler_pkt_size_distr
15166         };
15167         static struct unit_test_suite scheduler_config = {
15168                 .suite_name = "Crypto Device Scheduler Config Unit Test Suite",
15169                 .unit_test_cases = {
15170                         TEST_CASE(test_scheduler_attach_worker_op),
15171                         TEST_CASE(test_scheduler_mode_multicore_op),
15172                         TEST_CASE(test_scheduler_mode_roundrobin_op),
15173                         TEST_CASE(test_scheduler_mode_failover_op),
15174                         TEST_CASE(test_scheduler_mode_pkt_size_distr_op),
15175                         TEST_CASE(test_scheduler_detach_worker_op),
15176
15177                         TEST_CASES_END() /**< NULL terminate array */
15178                 }
15179         };
15180         struct unit_test_suite *static_suites[] = {
15181                 &scheduler_config,
15182                 &end_testsuite
15183         };
15184         static struct unit_test_suite ts = {
15185                 .suite_name = "Scheduler Unit Test Suite",
15186                 .setup = scheduler_testsuite_setup,
15187                 .teardown = testsuite_teardown,
15188                 .unit_test_cases = {TEST_CASES_END()}
15189         };
15190
15191         gbl_driver_id = rte_cryptodev_driver_id_get(
15192                         RTE_STR(CRYPTODEV_NAME_SCHEDULER_PMD));
15193
15194         if (gbl_driver_id == -1) {
15195                 RTE_LOG(ERR, USER1, "SCHEDULER PMD must be loaded.\n");
15196                 return TEST_SKIPPED;
15197         }
15198
15199         if (rte_cryptodev_driver_id_get(
15200                                 RTE_STR(CRYPTODEV_NAME_AESNI_MB_PMD)) == -1) {
15201                 RTE_LOG(ERR, USER1, "AESNI MB PMD must be loaded.\n");
15202                 return TEST_SKIPPED;
15203         }
15204
15205         for (sched_i = 0; sched_i < RTE_DIM(sched_mode_suites); sched_i++) {
15206                 uint8_t blk_i = 0;
15207                 sched_mode_suites[sched_i]->unit_test_suites = malloc(sizeof
15208                                 (struct unit_test_suite *) *
15209                                 (RTE_DIM(blk_suites) + 1));
15210                 ADD_BLOCKCIPHER_TESTSUITE(blk_i, (*sched_mode_suites[sched_i]),
15211                                 blk_suites, RTE_DIM(blk_suites));
15212                 sched_mode_suites[sched_i]->unit_test_suites[blk_i] = &end_testsuite;
15213         }
15214
15215         ts.unit_test_suites = malloc(sizeof(struct unit_test_suite *) *
15216                         (RTE_DIM(static_suites) + RTE_DIM(sched_mode_suites)));
15217         ADD_STATIC_TESTSUITE(i, ts, sched_mode_suites,
15218                         RTE_DIM(sched_mode_suites));
15219         ADD_STATIC_TESTSUITE(i, ts, static_suites, RTE_DIM(static_suites));
15220         ret = unit_test_suite_runner(&ts);
15221
15222         for (sched_i = 0; sched_i < RTE_DIM(sched_mode_suites); sched_i++) {
15223                 FREE_BLOCKCIPHER_TESTSUITE(blk_start_idx,
15224                                 (*sched_mode_suites[sched_i]),
15225                                 RTE_DIM(blk_suites));
15226                 free(sched_mode_suites[sched_i]->unit_test_suites);
15227         }
15228         free(ts.unit_test_suites);
15229         return ret;
15230 }
15231
15232 REGISTER_TEST_COMMAND(cryptodev_scheduler_autotest, test_cryptodev_scheduler);
15233
15234 #endif
15235
15236 static int
15237 test_cryptodev_dpaa2_sec(void)
15238 {
15239         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_DPAA2_SEC_PMD));
15240 }
15241
15242 static int
15243 test_cryptodev_dpaa_sec(void)
15244 {
15245         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_DPAA_SEC_PMD));
15246 }
15247
15248 static int
15249 test_cryptodev_ccp(void)
15250 {
15251         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_CCP_PMD));
15252 }
15253
15254 static int
15255 test_cryptodev_octeontx(void)
15256 {
15257         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_OCTEONTX_SYM_PMD));
15258 }
15259
15260 static int
15261 test_cryptodev_octeontx2(void)
15262 {
15263         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_OCTEONTX2_PMD));
15264 }
15265
15266 static int
15267 test_cryptodev_caam_jr(void)
15268 {
15269         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_CAAM_JR_PMD));
15270 }
15271
15272 static int
15273 test_cryptodev_nitrox(void)
15274 {
15275         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_NITROX_PMD));
15276 }
15277
15278 static int
15279 test_cryptodev_bcmfs(void)
15280 {
15281         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_BCMFS_PMD));
15282 }
15283
15284 static int
15285 test_cryptodev_qat_raw_api(void)
15286 {
15287         static const char *pmd_name = RTE_STR(CRYPTODEV_NAME_QAT_SYM_PMD);
15288         int ret;
15289
15290         ret = require_feature_flag(pmd_name, RTE_CRYPTODEV_FF_SYM_RAW_DP,
15291                         "RAW API");
15292         if (ret)
15293                 return ret;
15294
15295         global_api_test_type = CRYPTODEV_RAW_API_TEST;
15296         ret = run_cryptodev_testsuite(pmd_name);
15297         global_api_test_type = CRYPTODEV_API_TEST;
15298
15299         return ret;
15300 }
15301
15302 static int
15303 test_cryptodev_cn9k(void)
15304 {
15305         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_CN9K_PMD));
15306 }
15307
15308 static int
15309 test_cryptodev_cn10k(void)
15310 {
15311         return run_cryptodev_testsuite(RTE_STR(CRYPTODEV_NAME_CN10K_PMD));
15312 }
15313
15314 REGISTER_TEST_COMMAND(cryptodev_qat_raw_api_autotest,
15315                 test_cryptodev_qat_raw_api);
15316 REGISTER_TEST_COMMAND(cryptodev_qat_autotest, test_cryptodev_qat);
15317 REGISTER_TEST_COMMAND(cryptodev_aesni_mb_autotest, test_cryptodev_aesni_mb);
15318 REGISTER_TEST_COMMAND(cryptodev_cpu_aesni_mb_autotest,
15319         test_cryptodev_cpu_aesni_mb);
15320 REGISTER_TEST_COMMAND(cryptodev_openssl_autotest, test_cryptodev_openssl);
15321 REGISTER_TEST_COMMAND(cryptodev_aesni_gcm_autotest, test_cryptodev_aesni_gcm);
15322 REGISTER_TEST_COMMAND(cryptodev_cpu_aesni_gcm_autotest,
15323         test_cryptodev_cpu_aesni_gcm);
15324 REGISTER_TEST_COMMAND(cryptodev_mlx5_autotest, test_cryptodev_mlx5);
15325 REGISTER_TEST_COMMAND(cryptodev_null_autotest, test_cryptodev_null);
15326 REGISTER_TEST_COMMAND(cryptodev_sw_snow3g_autotest, test_cryptodev_sw_snow3g);
15327 REGISTER_TEST_COMMAND(cryptodev_sw_kasumi_autotest, test_cryptodev_sw_kasumi);
15328 REGISTER_TEST_COMMAND(cryptodev_sw_zuc_autotest, test_cryptodev_sw_zuc);
15329 REGISTER_TEST_COMMAND(cryptodev_sw_armv8_autotest, test_cryptodev_armv8);
15330 REGISTER_TEST_COMMAND(cryptodev_sw_mvsam_autotest, test_cryptodev_mrvl);
15331 REGISTER_TEST_COMMAND(cryptodev_dpaa2_sec_autotest, test_cryptodev_dpaa2_sec);
15332 REGISTER_TEST_COMMAND(cryptodev_dpaa_sec_autotest, test_cryptodev_dpaa_sec);
15333 REGISTER_TEST_COMMAND(cryptodev_ccp_autotest, test_cryptodev_ccp);
15334 REGISTER_TEST_COMMAND(cryptodev_virtio_autotest, test_cryptodev_virtio);
15335 REGISTER_TEST_COMMAND(cryptodev_octeontx_autotest, test_cryptodev_octeontx);
15336 REGISTER_TEST_COMMAND(cryptodev_octeontx2_autotest, test_cryptodev_octeontx2);
15337 REGISTER_TEST_COMMAND(cryptodev_caam_jr_autotest, test_cryptodev_caam_jr);
15338 REGISTER_TEST_COMMAND(cryptodev_nitrox_autotest, test_cryptodev_nitrox);
15339 REGISTER_TEST_COMMAND(cryptodev_bcmfs_autotest, test_cryptodev_bcmfs);
15340 REGISTER_TEST_COMMAND(cryptodev_cn9k_autotest, test_cryptodev_cn9k);
15341 REGISTER_TEST_COMMAND(cryptodev_cn10k_autotest, test_cryptodev_cn10k);