Discussion:
[strongSwan] AES-GCM for ESP
Joshua Liebow-Feeser
2015-07-07 21:17:10 UTC
Permalink
Hi,

I'm trying to set up strongSwan to use AES-GCM as the encryption algorithm
for ESP. I'd like this to be parallelized, so I'm trying to use pcrypt, but
whenever I try to instantiate the proper kernel support, I get errors:

$ sudo modprobe tcrypt alg="pcrypt(rfc4106(gcm(aes-aesni)))" type=3
FATAL: Error inserting tcrypt
(/lib/modules/3.13.0-55-generic/kernel/crypto/tcrypt.ko): Unknown symbol in
module, or unknown parameter (see dmesg)
$ dmesg | tail -n 1
[...] tcrypt: one or more tests failed!

Any idea what's going on here or how I could fix it? Thanks!
Cheers,
Josh
Noel Kuntze
2015-07-07 21:21:41 UTC
Permalink
Hello Joshua,

Well, try to use crconf instead.
Load the crypto_user module before using crconf.
Look at the PKGBUILD[1] for the crconf package for Arch Linux
for hints towards building it

[1] https://aur.archlinux.org/packages/cr/crconf/PKGBUILD

Mit freundlichen Grüßen/Kind Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
Post by Joshua Liebow-Feeser
Hi,
$ sudo modprobe tcrypt alg="pcrypt(rfc4106(gcm(aes-aesni)))" type=3
FATAL: Error inserting tcrypt (/lib/modules/3.13.0-55-generic/kernel/crypto/tcrypt.ko): Unknown symbol in module, or unknown parameter (see dmesg)
$ dmesg | tail -n 1
[...] tcrypt: one or more tests failed!
Any idea what's going on here or how I could fix it? Thanks!
Cheers,
Josh
_______________________________________________
Users mailing list
https://lists.strongswan.org/mailman/listinfo/users
Joshua Liebow-Feeser
2015-07-07 22:37:21 UTC
Permalink
OK, I'll try that. What would be the invocation to load the drivers
equivalent to the *modprobe* command that I used?
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Hello Joshua,
Well, try to use crconf instead.
Load the crypto_user module before using crconf.
Look at the PKGBUILD[1] for the crconf package for Arch Linux
for hints towards building it
[1] https://aur.archlinux.org/packages/cr/crconf/PKGBUILD
Mit freundlichen GrÌßen/Kind Regards,
Noel Kuntze
GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
Post by Joshua Liebow-Feeser
Hi,
I'm trying to set up strongSwan to use AES-GCM as the encryption
algorithm for ESP. I'd like this to be parallelized, so I'm trying to use
pcrypt, but whenever I try to instantiate the proper kernel support, I get
Post by Joshua Liebow-Feeser
$ sudo modprobe tcrypt alg="pcrypt(rfc4106(gcm(aes-aesni)))" type=3
FATAL: Error inserting tcrypt
(/lib/modules/3.13.0-55-generic/kernel/crypto/tcrypt.ko): Unknown symbol in
module, or unknown parameter (see dmesg)
Post by Joshua Liebow-Feeser
$ dmesg | tail -n 1
[...] tcrypt: one or more tests failed!
Any idea what's going on here or how I could fix it? Thanks!
Cheers,
Josh
_______________________________________________
Users mailing list
https://lists.strongswan.org/mailman/listinfo/users
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=GOOL
-----END PGP SIGNATURE-----
Noel Kuntze
2015-07-07 22:47:50 UTC
Permalink
Hello Joshua,

Look in the wiki article about pcrypt[1].

[1] https://wiki.strongswan.org/projects/strongswan/wiki/Pcrypt

Mit freundlichen Grüßen/Kind Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
OK, I'll try that. What would be the invocation to load the drivers equivalent to the *modprobe* command that I used?
Hello Joshua,
Well, try to use crconf instead.
Load the crypto_user module before using crconf.
Look at the PKGBUILD[1] for the crconf package for Arch Linux
for hints towards building it
[1] https://aur.archlinux.org/packages/cr/crconf/PKGBUILD
Mit freundlichen Grüßen/Kind Regards,
Noel Kuntze
GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
Post by Joshua Liebow-Feeser
Hi,
$ sudo modprobe tcrypt alg="pcrypt(rfc4106(gcm(aes-aesni)))" type=3
FATAL: Error inserting tcrypt (/lib/modules/3.13.0-55-generic/kernel/crypto/tcrypt.ko): Unknown symbol in module, or unknown parameter (see dmesg)
$ dmesg | tail -n 1
[...] tcrypt: one or more tests failed!
Any idea what's going on here or how I could fix it? Thanks!
Cheers,
Josh
_______________________________________________
Users mailing list
https://lists.strongswan.org/mailman/listinfo/users
Joshua Liebow-Feeser
2015-07-07 22:51:02 UTC
Permalink
Ah, thanks! Unfortunately, it doesn't work:
$ sudo ./crconf add driver 'pcrypt(rfc4106(gcm(aes-aesni)))' type 3
RTNETLINK answers: No such file or directory

Does that mean that the algorithm isn't supported or something?
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Hello Joshua,
Look in the wiki article about pcrypt[1].
[1] https://wiki.strongswan.org/projects/strongswan/wiki/Pcrypt
Mit freundlichen GrÌßen/Kind Regards,
Noel Kuntze
GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
Post by Joshua Liebow-Feeser
OK, I'll try that. What would be the invocation to load the drivers
equivalent to the *modprobe* command that I used?
Post by Joshua Liebow-Feeser
Hello Joshua,
Well, try to use crconf instead.
Load the crypto_user module before using crconf.
Look at the PKGBUILD[1] for the crconf package for Arch Linux
for hints towards building it
[1] https://aur.archlinux.org/packages/cr/crconf/PKGBUILD
Mit freundlichen GrÌßen/Kind Regards,
Noel Kuntze
GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
Post by Joshua Liebow-Feeser
Hi,
I'm trying to set up strongSwan to use AES-GCM as the encryption
algorithm for ESP. I'd like this to be parallelized, so I'm trying to use
pcrypt, but whenever I try to instantiate the proper kernel support, I get
Post by Joshua Liebow-Feeser
Post by Joshua Liebow-Feeser
$ sudo modprobe tcrypt alg="pcrypt(rfc4106(gcm(aes-aesni)))" type=3
FATAL: Error inserting tcrypt
(/lib/modules/3.13.0-55-generic/kernel/crypto/tcrypt.ko): Unknown symbol in
module, or unknown parameter (see dmesg)
Post by Joshua Liebow-Feeser
Post by Joshua Liebow-Feeser
$ dmesg | tail -n 1
[...] tcrypt: one or more tests failed!
Any idea what's going on here or how I could fix it? Thanks!
Cheers,
Josh
_______________________________________________
Users mailing list
https://lists.strongswan.org/mailman/listinfo/users
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=0Y8/
-----END PGP SIGNATURE-----
Randy Wyatt
2015-07-07 22:55:23 UTC
Permalink
is 3.13.0-55 your running kernel or an older kernel. Ubuntu is up to 57 at
least. The module build and kernel version has to match.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Hello Joshua,
Look in the wiki article about pcrypt[1].
[1] https://wiki.strongswan.org/projects/strongswan/wiki/Pcrypt
Mit freundlichen GrÌßen/Kind Regards,
Noel Kuntze
GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
Post by Joshua Liebow-Feeser
OK, I'll try that. What would be the invocation to load the drivers
equivalent to the *modprobe* command that I used?
Post by Joshua Liebow-Feeser
Hello Joshua,
Well, try to use crconf instead.
Load the crypto_user module before using crconf.
Look at the PKGBUILD[1] for the crconf package for Arch Linux
for hints towards building it
[1] https://aur.archlinux.org/packages/cr/crconf/PKGBUILD
Mit freundlichen GrÌßen/Kind Regards,
Noel Kuntze
GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
Post by Joshua Liebow-Feeser
Hi,
I'm trying to set up strongSwan to use AES-GCM as the encryption
algorithm for ESP. I'd like this to be parallelized, so I'm trying to use
pcrypt, but whenever I try to instantiate the proper kernel support, I get
Post by Joshua Liebow-Feeser
Post by Joshua Liebow-Feeser
$ sudo modprobe tcrypt alg="pcrypt(rfc4106(gcm(aes-aesni)))" type=3
FATAL: Error inserting tcrypt
(/lib/modules/3.13.0-55-generic/kernel/crypto/tcrypt.ko): Unknown symbol in
module, or unknown parameter (see dmesg)
Post by Joshua Liebow-Feeser
Post by Joshua Liebow-Feeser
$ dmesg | tail -n 1
[...] tcrypt: one or more tests failed!
Any idea what's going on here or how I could fix it? Thanks!
Cheers,
Josh
_______________________________________________
Users mailing list
https://lists.strongswan.org/mailman/listinfo/users
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=0Y8/
-----END PGP SIGNATURE-----
_______________________________________________
Users mailing list
https://lists.strongswan.org/mailman/listinfo/users
Joshua Liebow-Feeser
2015-07-07 22:58:25 UTC
Permalink
Yep - 3.13.0-55.
Post by Randy Wyatt
is 3.13.0-55 your running kernel or an older kernel. Ubuntu is up to 57
at least. The module build and kernel version has to match.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Hello Joshua,
Look in the wiki article about pcrypt[1].
[1] https://wiki.strongswan.org/projects/strongswan/wiki/Pcrypt
Mit freundlichen GrÌßen/Kind Regards,
Noel Kuntze
GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
Post by Joshua Liebow-Feeser
OK, I'll try that. What would be the invocation to load the drivers
equivalent to the *modprobe* command that I used?
Post by Joshua Liebow-Feeser
Hello Joshua,
Well, try to use crconf instead.
Load the crypto_user module before using crconf.
Look at the PKGBUILD[1] for the crconf package for Arch Linux
for hints towards building it
[1] https://aur.archlinux.org/packages/cr/crconf/PKGBUILD
Mit freundlichen GrÌßen/Kind Regards,
Noel Kuntze
GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
Post by Joshua Liebow-Feeser
Hi,
I'm trying to set up strongSwan to use AES-GCM as the encryption
algorithm for ESP. I'd like this to be parallelized, so I'm trying to use
pcrypt, but whenever I try to instantiate the proper kernel support, I get
Post by Joshua Liebow-Feeser
Post by Joshua Liebow-Feeser
$ sudo modprobe tcrypt alg="pcrypt(rfc4106(gcm(aes-aesni)))" type=3
FATAL: Error inserting tcrypt
(/lib/modules/3.13.0-55-generic/kernel/crypto/tcrypt.ko): Unknown symbol in
module, or unknown parameter (see dmesg)
Post by Joshua Liebow-Feeser
Post by Joshua Liebow-Feeser
$ dmesg | tail -n 1
[...] tcrypt: one or more tests failed!
Any idea what's going on here or how I could fix it? Thanks!
Cheers,
Josh
_______________________________________________
Users mailing list
https://lists.strongswan.org/mailman/listinfo/users
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=0Y8/
-----END PGP SIGNATURE-----
_______________________________________________
Users mailing list
https://lists.strongswan.org/mailman/listinfo/users
Randy Wyatt
2015-07-07 23:01:10 UTC
Permalink
Sometimes try loading the module from the directory
cd /lib/modules/3.13.0-55-generic/kernel/crypto

and then do your modprobe.

I see this problem with other modules quite frequently.
Post by Joshua Liebow-Feeser
Yep - 3.13.0-55.
Post by Randy Wyatt
is 3.13.0-55 your running kernel or an older kernel. Ubuntu is up to 57
at least. The module build and kernel version has to match.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Hello Joshua,
Look in the wiki article about pcrypt[1].
[1] https://wiki.strongswan.org/projects/strongswan/wiki/Pcrypt
Mit freundlichen GrÌßen/Kind Regards,
Noel Kuntze
GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
Post by Joshua Liebow-Feeser
OK, I'll try that. What would be the invocation to load the drivers
equivalent to the *modprobe* command that I used?
Post by Joshua Liebow-Feeser
Hello Joshua,
Well, try to use crconf instead.
Load the crypto_user module before using crconf.
Look at the PKGBUILD[1] for the crconf package for Arch Linux
for hints towards building it
[1] https://aur.archlinux.org/packages/cr/crconf/PKGBUILD
Mit freundlichen GrÌßen/Kind Regards,
Noel Kuntze
GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
Post by Joshua Liebow-Feeser
Hi,
I'm trying to set up strongSwan to use AES-GCM as the encryption
algorithm for ESP. I'd like this to be parallelized, so I'm trying to use
pcrypt, but whenever I try to instantiate the proper kernel support, I get
Post by Joshua Liebow-Feeser
Post by Joshua Liebow-Feeser
$ sudo modprobe tcrypt alg="pcrypt(rfc4106(gcm(aes-aesni)))" type=3
FATAL: Error inserting tcrypt
(/lib/modules/3.13.0-55-generic/kernel/crypto/tcrypt.ko): Unknown symbol in
module, or unknown parameter (see dmesg)
Post by Joshua Liebow-Feeser
Post by Joshua Liebow-Feeser
$ dmesg | tail -n 1
[...] tcrypt: one or more tests failed!
Any idea what's going on here or how I could fix it? Thanks!
Cheers,
Josh
_______________________________________________
Users mailing list
https://lists.strongswan.org/mailman/listinfo/users
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=0Y8/
-----END PGP SIGNATURE-----
_______________________________________________
Users mailing list
https://lists.strongswan.org/mailman/listinfo/users
Joshua Liebow-Feeser
2015-07-07 23:05:26 UTC
Permalink
You mean just cd into that directory and then run *sudo modprobe tcrypt
alg="pcrypt(rfc4106(gcm(aes-aesni)))" type=3*?
Post by Randy Wyatt
Sometimes try loading the module from the directory
cd /lib/modules/3.13.0-55-generic/kernel/crypto
and then do your modprobe.
I see this problem with other modules quite frequently.
Post by Joshua Liebow-Feeser
Yep - 3.13.0-55.
Post by Randy Wyatt
is 3.13.0-55 your running kernel or an older kernel. Ubuntu is up to 57
at least. The module build and kernel version has to match.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Hello Joshua,
Look in the wiki article about pcrypt[1].
[1] https://wiki.strongswan.org/projects/strongswan/wiki/Pcrypt
Mit freundlichen GrÌßen/Kind Regards,
Noel Kuntze
GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
Post by Joshua Liebow-Feeser
OK, I'll try that. What would be the invocation to load the drivers
equivalent to the *modprobe* command that I used?
Post by Joshua Liebow-Feeser
Hello Joshua,
Well, try to use crconf instead.
Load the crypto_user module before using crconf.
Look at the PKGBUILD[1] for the crconf package for Arch Linux
for hints towards building it
[1] https://aur.archlinux.org/packages/cr/crconf/PKGBUILD
Mit freundlichen GrÌßen/Kind Regards,
Noel Kuntze
GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
Post by Joshua Liebow-Feeser
Hi,
I'm trying to set up strongSwan to use AES-GCM as the encryption
algorithm for ESP. I'd like this to be parallelized, so I'm trying to use
pcrypt, but whenever I try to instantiate the proper kernel support, I get
Post by Joshua Liebow-Feeser
Post by Joshua Liebow-Feeser
$ sudo modprobe tcrypt alg="pcrypt(rfc4106(gcm(aes-aesni)))" type=3
FATAL: Error inserting tcrypt
(/lib/modules/3.13.0-55-generic/kernel/crypto/tcrypt.ko): Unknown symbol in
module, or unknown parameter (see dmesg)
Post by Joshua Liebow-Feeser
Post by Joshua Liebow-Feeser
$ dmesg | tail -n 1
[...] tcrypt: one or more tests failed!
Any idea what's going on here or how I could fix it? Thanks!
Cheers,
Josh
_______________________________________________
Users mailing list
https://lists.strongswan.org/mailman/listinfo/users
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2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=0Y8/
-----END PGP SIGNATURE-----
_______________________________________________
Users mailing list
https://lists.strongswan.org/mailman/listinfo/users
Randy Wyatt
2015-07-08 15:03:42 UTC
Permalink
tcrypt is simply to measure the performance of the encryption algorithm.
It takes several arguments. The first argument is the algorithm. The
second is the type. The third is mode. The fourth is mask, and the fifth
is time.

The error message you are seeing is actually a little deceiving. There is
not actually a problem with the kernel symbols. It solely means one of the
arguments are wrong. You can inspect tcrypt.c in the kernel sources to see
the encryption tests. From what I can tell, your argument to alg is wrong.

I think the wiki page needs to be updated. I will wait for someone more
experienced than I am to validate my findings.

The tests start at line 952 in tcrypt.c. I would specifically look at line
1229. It still gives the resources temporarily unavailable as mentioned in
the wiki.

Regards,
Randy
Post by Joshua Liebow-Feeser
Hi,
I'm trying to set up strongSwan to use AES-GCM as the encryption algorithm
for ESP. I'd like this to be parallelized, so I'm trying to use pcrypt, but
$ sudo modprobe tcrypt alg="pcrypt(rfc4106(gcm(aes-aesni)))" type=3
FATAL: Error inserting tcrypt
(/lib/modules/3.13.0-55-generic/kernel/crypto/tcrypt.ko): Unknown symbol in
module, or unknown parameter (see dmesg)
$ dmesg | tail -n 1
[...] tcrypt: one or more tests failed!
Any idea what's going on here or how I could fix it? Thanks!
Cheers,
Josh
_______________________________________________
Users mailing list
https://lists.strongswan.org/mailman/listinfo/users
Randy Wyatt
2015-07-08 15:41:57 UTC
Permalink
pcrypt may be giving me errors because I am trying it on a small amazon
instance. You must have at least 2 cores/CPU's.

Regards,
Randy
Post by Randy Wyatt
tcrypt is simply to measure the performance of the encryption algorithm.
It takes several arguments. The first argument is the algorithm. The
second is the type. The third is mode. The fourth is mask, and the fifth
is time.
The error message you are seeing is actually a little deceiving. There is
not actually a problem with the kernel symbols. It solely means one of the
arguments are wrong. You can inspect tcrypt.c in the kernel sources to see
the encryption tests. From what I can tell, your argument to alg is wrong.
I think the wiki page needs to be updated. I will wait for someone more
experienced than I am to validate my findings.
The tests start at line 952 in tcrypt.c. I would specifically look at
line 1229. It still gives the resources temporarily unavailable as
mentioned in the wiki.
Regards,
Randy
Post by Joshua Liebow-Feeser
Hi,
I'm trying to set up strongSwan to use AES-GCM as the encryption
algorithm for ESP. I'd like this to be parallelized, so I'm trying to use
pcrypt, but whenever I try to instantiate the proper kernel support, I get
$ sudo modprobe tcrypt alg="pcrypt(rfc4106(gcm(aes-aesni)))" type=3
FATAL: Error inserting tcrypt
(/lib/modules/3.13.0-55-generic/kernel/crypto/tcrypt.ko): Unknown symbol in
module, or unknown parameter (see dmesg)
$ dmesg | tail -n 1
[...] tcrypt: one or more tests failed!
Any idea what's going on here or how I could fix it? Thanks!
Cheers,
Josh
_______________________________________________
Users mailing list
https://lists.strongswan.org/mailman/listinfo/users
--
Randy W. Wyatt
***@gmail.com
Home: 858-309-5303
Cell: 858-598-4421
Fax: 858-408-7554
Loading...