Hi, The key derviation functions are considered to be a cryptographic operation. As cryptographic operations are provided via the kernel crypto API, this patch set consolidates the SP800-108 KDF implementation into the crypto API. If this patch is accepted, another patch set will be published attempting to move the HKDF implementation from the crypto file system code base to the kernel crypto API. The KDF implementation is provided as service functions. Yet, the interface to the the provided KDF is modeled such, that additional KDF implementation can use the same API style. The goal is to allow the transformation from a service function into a crypto API template eventually. The KDF executes a power-on self test with test vectors from commonly known sources. Tbe SP800-108 KDF implementation is used to replace the implementation in the keys subsystem. The implementation was verified using the keyutils command line test code provided in tests/keyctl/dh_compute/valid. All tests show that the expected values are calculated with the new code. Changes v3: * port to kernel 5.16-rc1 * remove the HKDF patch to only leave the SP800-108 patch Stephan Mueller (4): crypto: Add key derivation self-test support code crypto: add SP800-108 counter key derivation function security: DH - remove dead code for zero padding security: DH - use KDF implementation from crypto API crypto/Kconfig | 7 ++ crypto/Makefile | 5 + crypto/kdf_sp800108.c | 149 +++++++++++++++++++++++++ include/crypto/internal/kdf_selftest.h | 71 ++++++++++++ include/crypto/kdf_sp800108.h | 61 ++++++++++ security/keys/Kconfig | 2 +- security/keys/dh.c | 118 +++----------------- 7 files changed, 310 insertions(+), 103 deletions(-) create mode 100644 crypto/kdf_sp800108.c create mode 100644 include/crypto/internal/kdf_selftest.h create mode 100644 include/crypto/kdf_sp800108.h -- 2.33.1
