Comment 23 for bug 1973296

Revision history for this message
Frank Heimes (fheimes) wrote :

Many thanks for the (API) verification!

Since this verifies that the CKM_IBM_DILITHIUM mechanism is now again available via the API,
would it also be possible to test Dilithium itself (like requested in LP comment #20: https://bugs.launchpad.net/ubuntu-z-systems/+bug/1973296/comments/20)?
This would be good to avoid any further or follow-on surprises with Dilithium.

I think it should be ok to have an EP11 token ready to use and then running 'testcases/crypto/dilithium_tests'.

However, the testcases folder is not part of the Ubuntu package, but I have it - taken from the 3.13 upstream package - compiled on/for focal on one of my local systems, and could could share it (to avoid too much hassle).
I just cannot do this particular test by myself on our system, since I've currently no free adapter that I can move into 'EP11-Coproc' mode (the few adapters we have are heavily shared across running LPARs) and we also don't have a TKE to do the initial config (master pw). (I also believe that the IBM 'csulcca' package only allows to set master pws in case of adapters in cca mode, but not in EP11 mode - if I've read the docs correctly ...)