⬢ DragonFlyBSD Kernel Audit
DF-3565 / run.log
← back to finding ↓ download raw
############ sha1_kat ############
== FIPS 180-1 known-answer vectors ==
ok   FIPS 'abc'                                 a9993e364706816aba3e25717850c26c9cd0d89d
ok   FIPS 56-byte (pad boundary 56)             84983e441c3bd26ebaae4aa1f95129e5e54670f1
ok   empty string                               da39a3ee5e6b4b0d3255bfef95601890afd80709
ok   FIPS million-'a'                           34aa973cd4c4daa4f61eeb2bdbad27316534016f
== exhaustive length sweep vs libcrypto (all pad residues) ==
RESULT: PASS: 1859 checks, 0 failures
############ sip_kat ############
== 64 official reference vectors (SipHash-2-4) ==
   (all 64 checked: match)
== kernel vs from-paper reference, SipHash-2-4 & 1-3 ==
   (512+512 cross-checks done)
== chunked-update equivalence (partial-word buffer paths) ==
   (chunked equivalence done)
== SipHash_Final byte encoding ==
RESULT: PASS: 2111 checks, 0 failures
############ sip_keyscan (DF-3564) ############
RETAINED: verbatim 16-byte key found on the dead stack, offset -112 below caller frame
DF-3564 CONFIRMED: raw key bytes persist on the stack after SipHash_SetKey returned
############ des_kat ############
== parity table: odd_parity[] vs independent popcount ==
   (256 parity entries verified)
== weak/semi-weak detection (16 known + negatives) ==
   (weak/semi-weak table verified vs 4096 random + 16 near-miss negatives)
== default policy: des_set_key with des_check_key==0 ==
   des_set_key(0x0101010101010101) rc=0 (0=ACCEPTED) [des_check_key=0]
== key schedule -> ECB vs libcrypto (both directions) ==
   anchor1 ct=58dcc328d3aab18c (libcrypto match)
   (2000 random + 666 weak-key ECB cross-matches done)
RESULT: PASS: 8916 checks, 0 failures
############ blake_kat ############
== RFC 7693 anchors (blake2s-256, unkeyed) ==
ok   RFC7693 empty                69217a3079908094e11121d042354a7c1f55b6482ca1a51e1b250dfd1ed0eef9
ok   RFC7693 'abc'                508c5e8c327c14e2e1a72ba34eeb452f37458b209ed63a294d999b4c86675982
== official keyed KAT (blake2s-kat.txt) ==
   (256 official keyed vectors verified, 0 bad)
== kernel vs independent RFC-7693 reference ==
   (5 outlens x 4 keylens x 301 lens cross-checked)
== chunked-update equivalence (random splits) ==
   (chunked equivalence done)
RESULT: PASS: 6878 checks, 0 failures

OVERALL: ALL-PASS