Examples directory renamed -> tests

7 files changed, 0 insertions, 5261 deletions

diff --git a/examples/Makefile b/examples/Makefile
deleted file mode 100644
index 883529e..0000000
--- a/examples/Makefile
+++ /dev/null
@@ -1,26 +0,0 @@
-CC = gcc
-CFLAGS = -Wall -g -O2
-
-progs := ncr pk speed
-
-all: $(progs)
-
-speed: speed.c
-	$(CC) $(CFLAGS) $< -o $@
-
-ncr: ncr.c
-	$(CC) $(CFLAGS) $< -o $@
-
-pk: pk.c
-	$(CC) $(CFLAGS) $< -o $@ -L/usr/local/lib -lgnutls
-
-uspeed: shm/aes_cbc.c shm/shm.c shm/aes.h
-	$(CC) $(CFLAGS) shm/aes_cbc.c shm/shm.c -o $@ -Ishm -lpthread
-
-check: $(progs)
-	./ncr
-	./pk
-	./speed
-
-clean:
-	rm -f *.o *~ $(progs)
diff --git a/examples/ncr.c b/examples/ncr.c
deleted file mode 100644
index 13ee298..0000000
--- a/examples/ncr.c
+++ /dev/null
@@ -1,1676 +0,0 @@
-/*
- * Demo on how to use /dev/crypto device for HMAC.
- *
- * Placed under public domain.
- *
- */
-#include <stdint.h>
-#include <stdio.h>
-#include <string.h>
-#include <unistd.h>
-#include <fcntl.h>
-#include <time.h>
-#include <sys/ioctl.h>
-#include <sys/types.h>
-#include <sys/stat.h>
-#include <sys/socket.h>
-#include <linux/netlink.h>
-#include "../ncr.h"
-#include <stdlib.h>
-
-#define DATA_SIZE 4096
-
-#define ALIGN_NL __attribute__((aligned(NLA_ALIGNTO)))
-
-#define ALG_AES_CBC "cbc(aes)"
-#define ALG_AES_ECB "ecb(aes)"
-
-static void randomize_data(uint8_t * data, size_t data_size)
-{
-	int i;
-
-	srand(time(0) * getpid());
-	for (i = 0; i < data_size; i++) {
-		data[i] = rand() & 0xff;
-	}
-}
-
-#define KEY_DATA_SIZE 16
-#define WRAPPED_KEY_DATA_SIZE 32
-static int test_ncr_key(int cfd)
-{
-	struct __attribute__ ((packed)) {
-		struct ncr_key_generate f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(ALG_AES_CBC)] ALIGN_NL;
-		struct nlattr flags_head ALIGN_NL;
-		uint32_t flags ALIGN_NL;
-		struct nlattr bits_head ALIGN_NL;
-		uint32_t bits ALIGN_NL;
-	} kgen;
-	struct __attribute__ ((packed)) {
-		struct ncr_key_get_info f;
-		/* This union is only here to stop gcc from complaining about
-		   aliasing. */
-		union {
-			unsigned char __reserve[DATA_SIZE];
-			struct nlattr first_header;
-		} u ALIGN_NL;
-	} kinfo;
-	struct nlattr *nla;
-	ncr_key_t key;
-	struct __attribute__ ((packed)) {
-		struct ncr_key_import f;
-		struct nlattr id_head ALIGN_NL;
-		uint8_t id[2] ALIGN_NL;
-		struct nlattr type_head ALIGN_NL;
-		uint32_t type ALIGN_NL;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(ALG_AES_CBC)] ALIGN_NL;
-		struct nlattr flags_head ALIGN_NL;
-		uint32_t flags ALIGN_NL;
-	} kimport;
-	struct ncr_key_export kexport;
-	uint8_t data[KEY_DATA_SIZE];
-	uint8_t data_bak[KEY_DATA_SIZE];
-	uint16_t *attr_p;
-	int got_algo, got_flags, got_type;
-
-	fprintf(stdout, "Tests on Keys:\n");
-
-	/* test 1: generate a key in userspace import it
-	 * to kernel via data and export it.
-	 */
-
-	fprintf(stdout, "\tKey generation...\n");
-
-	randomize_data(data, sizeof(data));
-	memcpy(data_bak, data, sizeof(data));
-
-	/* convert it to key */
-	key = ioctl(cfd, NCRIO_KEY_INIT);
-	if (key == -1) {
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	memset(&kimport.f, 0, sizeof(kimport.f));
-	kimport.f.input_size = sizeof(kimport);
-	kimport.f.key = key;
-	kimport.f.data = data;
-	kimport.f.data_size = sizeof(data);
-	kimport.id_head.nla_len = NLA_HDRLEN + sizeof(kimport.id);
-	kimport.id_head.nla_type = NCR_ATTR_KEY_ID;
-	kimport.id[0] = 'a';
-	kimport.id[1] = 'b';
-	kimport.type_head.nla_len = NLA_HDRLEN + sizeof(kimport.type);
-	kimport.type_head.nla_type = NCR_ATTR_KEY_TYPE;
-	kimport.type = NCR_KEY_TYPE_SECRET;
-	kimport.algo_head.nla_len = NLA_HDRLEN + sizeof(kimport.algo);
-	kimport.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(kimport.algo, ALG_AES_CBC);
-	kimport.flags_head.nla_len = NLA_HDRLEN + sizeof(kimport.flags);
-	kimport.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-	kimport.flags = NCR_KEY_FLAG_EXPORTABLE;
-
-	if (ioctl(cfd, NCRIO_KEY_IMPORT, &kimport)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_IMPORT)");
-		return 1;
-	}
-
-	/* now try to read it */
-	fprintf(stdout, "\tKey export...\n");
-
-	memset(&kexport, 0, sizeof(kexport));
-	kexport.key = key;
-	kexport.buffer = data;
-	kexport.buffer_size = sizeof(data);
-
-	if (ioctl(cfd, NCRIO_KEY_EXPORT, &kexport) != sizeof(data)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_EXPORT)");
-		return 1;
-	}
-
-	if (memcmp(data, data_bak, sizeof(data)) != 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		fprintf(stderr, "data returned but differ!\n");
-		return 1;
-	}
-
-	if (ioctl(cfd, NCRIO_KEY_DEINIT, &key)) {
-		perror("ioctl(NCRIO_KEY_DEINIT)");
-		return 1;
-	}
-
-	/* finished, we keep data for next test */
-
-	/* test 2: generate a key in kernel space and
-	 * export it.
-	 */
-
-	fprintf(stdout, "\tKey import...\n");
-	/* convert it to key */
-	key = ioctl(cfd, NCRIO_KEY_INIT);
-	if (key == -1) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	memset(&kgen.f, 0, sizeof(kgen.f));
-	kgen.f.input_size = sizeof(kgen);
-	kgen.f.key = key;
-	kgen.algo_head.nla_len = NLA_HDRLEN + sizeof(kgen.algo);
-	kgen.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(kgen.algo, ALG_AES_CBC);
-	kgen.flags_head.nla_len = NLA_HDRLEN + sizeof(kgen.flags);
-	kgen.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-	kgen.flags = NCR_KEY_FLAG_EXPORTABLE;
-	kgen.bits_head.nla_len = NLA_HDRLEN + sizeof(kgen.bits);
-	kgen.bits_head.nla_type = NCR_ATTR_SECRET_KEY_BITS;
-	kgen.bits = 128;	/* 16 bytes */
-
-	if (ioctl(cfd, NCRIO_KEY_GENERATE, &kgen)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_GENERATE)");
-		return 1;
-	}
-
-	memset(data, 0, sizeof(data));
-
-	memset(&kexport, 0, sizeof(kexport));
-	kexport.key = key;
-	kexport.buffer = data;
-	kexport.buffer_size = sizeof(data);
-
-	if (ioctl(cfd, NCRIO_KEY_EXPORT, &kexport) != sizeof(data)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_EXPORT)");
-		return 1;
-	}
-
-	if (data[0] == 0 && data[1] == 0 && data[2] == 0 && data[4] == 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		fprintf(stderr,
-			"Generated key: %.2x.%.2x.%.2x.%.2x.%.2x.%.2x.%.2x.%.2x."
-			"%.2x.%.2x.%.2x.%.2x.%.2x.%.2x.%.2x.%.2x\n", data[0],
-			data[1], data[2], data[3], data[4], data[5], data[6],
-			data[7], data[8], data[9], data[10], data[11], data[12],
-			data[13], data[14], data[15]);
-		return 1;
-	}
-
-	memset(&kinfo.f, 0, sizeof(kinfo.f));
-	kinfo.f.output_size = sizeof(kinfo);
-	kinfo.f.key = key;
-	nla = &kinfo.u.first_header;
-	nla->nla_type = NCR_ATTR_WANTED_ATTRS;
-	attr_p = (uint16_t *) ((char *)nla + NLA_HDRLEN);
-	*attr_p++ = NCR_ATTR_ALGORITHM;
-	*attr_p++ = NCR_ATTR_KEY_FLAGS;
-	*attr_p++ = NCR_ATTR_KEY_TYPE;
-	nla->nla_len = (char *)attr_p - (char *)nla;
-	kinfo.f.input_size = (char *)attr_p - (char *)&kinfo;
-
-	if (ioctl(cfd, NCRIO_KEY_GET_INFO, &kinfo)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_GET_INFO)");
-		return 1;
-	}
-
-	got_algo = got_flags = got_type = 0;
-	if (kinfo.f.output_size <
-	    (char *)&kinfo.u.first_header - (char *)&kinfo) {
-		fprintf(stderr, "No nlattr returned\n");
-		return 1;
-	}
-	nla = &kinfo.u.first_header;
-	for (;;) {
-		void *data;
-
-		if (nla->nla_len >
-		    kinfo.f.output_size - ((char *)nla - (char *)&kinfo)) {
-			fprintf(stderr, "Attributes overflow\n");
-			return 1;
-		}
-		data = (char *)nla + NLA_HDRLEN;
-		switch (nla->nla_type) {
-		case NCR_ATTR_ALGORITHM:
-			if (nla->nla_len < NLA_HDRLEN + 1) {
-				fprintf(stderr, "Attribute too small\n");
-				return 1;
-			}
-			if (((char *)data)[nla->nla_len - NLA_HDRLEN - 1]
-			    != 0) {
-				fprintf(stderr, "NUL missing\n");
-				return 1;
-			}
-			if (strcmp(data, ALG_AES_CBC) != 0) {
-				fprintf(stderr, "Unexpected algorithm\n");
-				return 1;
-			}
-			got_algo++;
-			break;
-		case NCR_ATTR_KEY_FLAGS:
-			if (nla->nla_len < NLA_HDRLEN + sizeof(uint32_t)) {
-				fprintf(stderr, "Attribute too small\n");
-				return 1;
-			}
-			if (*(uint32_t *) data != NCR_KEY_FLAG_EXPORTABLE) {
-				fprintf(stderr, "Unexpected key flags\n");
-				return 1;
-			}
-			got_flags++;
-			break;
-		case NCR_ATTR_KEY_TYPE:
-			if (nla->nla_len < NLA_HDRLEN + sizeof(uint32_t)) {
-				fprintf(stderr, "Attribute too small\n");
-				return 1;
-			}
-			if (*(uint32_t *) data != NCR_KEY_TYPE_SECRET) {
-				fprintf(stderr, "Unexpected key type\n");
-				return 1;
-			}
-			got_type++;
-			break;
-		}
-
-		if (NLA_ALIGN(nla->nla_len) + NLA_HDRLEN >
-		    kinfo.f.output_size - ((char *)nla - (char *)&kinfo))
-			break;
-		nla = (struct nlattr *)((char *)nla + NLA_ALIGN(nla->nla_len));
-	}
-	if (got_algo != 1 || got_flags != 1 || got_type != 1) {
-		fprintf(stderr, "Unexpected attrs - %d, %d, %d\n", got_algo,
-			got_flags, got_type);
-		return 1;
-	}
-
-	if (ioctl(cfd, NCRIO_KEY_DEINIT, &key)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_DEINIT)");
-		return 1;
-	}
-
-	/* test 3: generate an unexportable key in kernel space and
-	 * try to export it.
-	 */
-	fprintf(stdout, "\tKey protection of non-exportable keys...\n");
-	key = ioctl(cfd, NCRIO_KEY_INIT);
-	if (key == -1) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	memset(&kgen.f, 0, sizeof(kgen.f));
-	kgen.f.input_size = sizeof(kgen);
-	kgen.f.key = key;
-	kgen.algo_head.nla_len = NLA_HDRLEN + sizeof(kgen.algo);
-	kgen.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(kgen.algo, ALG_AES_CBC);
-	kgen.flags_head.nla_len = NLA_HDRLEN + sizeof(kgen.flags);
-	kgen.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-	kgen.flags = 0;
-	kgen.bits_head.nla_len = NLA_HDRLEN + sizeof(kgen.flags);
-	kgen.bits_head.nla_type = NCR_ATTR_SECRET_KEY_BITS;
-	kgen.bits = 128;	/* 16 bytes */
-
-	if (ioctl(cfd, NCRIO_KEY_GENERATE, &kgen)) {
-		perror("ioctl(NCRIO_KEY_GENERATE)");
-		return 1;
-	}
-
-	memset(data, 0, sizeof(data));
-
-	memset(&kexport, 0, sizeof(kexport));
-	kexport.key = key;
-	kexport.buffer = data;
-	kexport.buffer_size = sizeof(data);
-
-	/* try to get the output data - should fail */
-
-	if (ioctl(cfd, NCRIO_KEY_EXPORT, &kexport) >= 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		fprintf(stderr, "Data were exported, but shouldn't be!\n");
-		return 1;
-	}
-
-	if (ioctl(cfd, NCRIO_KEY_DEINIT, &key)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_DEINIT)");
-		return 1;
-	}
-
-	return 0;
-}
-
-/* Key wrapping */
-static int test_ncr_wrap_key(int cfd)
-{
-	int i, ret;
-	ncr_key_t key, key2;
-	struct __attribute__ ((packed)) {
-		struct ncr_key_import f;
-		struct nlattr id_head ALIGN_NL;
-		uint8_t id[2] ALIGN_NL;
-		struct nlattr type_head ALIGN_NL;
-		uint32_t type ALIGN_NL;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(ALG_AES_CBC)] ALIGN_NL;
-		struct nlattr flags_head ALIGN_NL;
-		uint32_t flags ALIGN_NL;
-	} kimport;
-	struct __attribute__ ((packed)) {
-		struct ncr_key_wrap f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(NCR_WALG_AES_RFC3394)] ALIGN_NL;
-	}
-	kwrap;
-	struct __attribute__ ((packed)) {
-		struct ncr_key_unwrap f;
-		struct nlattr wrap_algo_head ALIGN_NL;
-		char wrap_algo[sizeof(NCR_WALG_AES_RFC3394)] ALIGN_NL;
-		struct nlattr flags_head ALIGN_NL;
-		uint32_t flags ALIGN_NL;
-	} kunwrap;
-	uint8_t data[WRAPPED_KEY_DATA_SIZE];
-	int data_size;
-
-	fprintf(stdout, "Tests on Keys:\n");
-
-	/* test 1: generate a key in userspace import it
-	 * to kernel via data and export it.
-	 */
-
-	fprintf(stdout, "\tKey Wrap test...\n");
-
-	/* convert it to key */
-	key = ioctl(cfd, NCRIO_KEY_INIT);
-	if (key == -1) {
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	memset(&kimport.f, 0, sizeof(kimport.f));
-	kimport.f.input_size = sizeof(kimport);
-	kimport.f.key = key;
-	kimport.f.data =
-	    "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F";
-	kimport.f.data_size = 16;
-	kimport.id_head.nla_len = NLA_HDRLEN + sizeof(kimport.id);
-	kimport.id_head.nla_type = NCR_ATTR_KEY_ID;
-	kimport.id[0] = 'a';
-	kimport.id[1] = 'b';
-	kimport.type_head.nla_len = NLA_HDRLEN + sizeof(kimport.type);
-	kimport.type_head.nla_type = NCR_ATTR_KEY_TYPE;
-	kimport.type = NCR_KEY_TYPE_SECRET;
-	kimport.algo_head.nla_len = NLA_HDRLEN + sizeof(kimport.algo);
-	kimport.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(kimport.algo, ALG_AES_CBC);
-	kimport.flags_head.nla_len = NLA_HDRLEN + sizeof(kimport.flags);
-	kimport.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-	kimport.flags =
-	    NCR_KEY_FLAG_EXPORTABLE | NCR_KEY_FLAG_WRAPPING |
-	    NCR_KEY_FLAG_UNWRAPPING;
-
-	ret = ioctl(cfd, NCRIO_KEY_IMPORT, &kimport);
-	if (geteuid() == 0 && ret) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_IMPORT)");
-		return 1;
-	}
-
-	if (geteuid() != 0) {
-		/* cannot test further */
-		fprintf(stdout,
-			"\t(Wrapping test not completed. Run as root)\n");
-		return 0;
-	}
-
-	/* convert it to key */
-	key2 = ioctl(cfd, NCRIO_KEY_INIT);
-	if (key2 == -1) {
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	memset(&kimport.f, 0, sizeof(kimport.f));
-	kimport.f.input_size = sizeof(kimport);
-	kimport.f.key = key2;
-#define DKEY "\x00\x11\x22\x33\x44\x55\x66\x77\x88\x99\xAA\xBB\xCC\xDD\xEE\xFF"
-	kimport.f.data = DKEY;
-	kimport.f.data_size = 16;
-	kimport.id_head.nla_len = NLA_HDRLEN + sizeof(kimport.id);
-	kimport.id_head.nla_type = NCR_ATTR_KEY_ID;
-	kimport.id[0] = 'b';
-	kimport.id[1] = 'a';
-	kimport.type_head.nla_len = NLA_HDRLEN + sizeof(kimport.type);
-	kimport.type_head.nla_type = NCR_ATTR_KEY_TYPE;
-	kimport.type = NCR_KEY_TYPE_SECRET;
-	kimport.algo_head.nla_len = NLA_HDRLEN + sizeof(kimport.algo);
-	kimport.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(kimport.algo, ALG_AES_CBC);
-	kimport.flags_head.nla_len = NLA_HDRLEN + sizeof(kimport.flags);
-	kimport.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-	kimport.flags = NCR_KEY_FLAG_EXPORTABLE | NCR_KEY_FLAG_WRAPPABLE;
-
-	if (ioctl(cfd, NCRIO_KEY_IMPORT, &kimport)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_IMPORT)");
-		return 1;
-	}
-
-	/* now try wrapping key2 using key */
-	memset(&kwrap.f, 0, sizeof(kwrap.f));
-	kwrap.f.input_size = sizeof(kwrap);
-	kwrap.f.wrapping_key = key;
-	kwrap.f.source_key = key2;
-	kwrap.f.buffer = data;
-	kwrap.f.buffer_size = sizeof(data);
-	kwrap.algo_head.nla_len = NLA_HDRLEN + sizeof(kwrap.algo);
-	kwrap.algo_head.nla_type = NCR_ATTR_WRAPPING_ALGORITHM;
-	strcpy(kwrap.algo, NCR_WALG_AES_RFC3394);
-
-	data_size = ioctl(cfd, NCRIO_KEY_WRAP, &kwrap);
-	if (data_size < 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_WRAP)");
-		return 1;
-	}
-
-	if (data_size != 24 || memcmp(data,
-				      "\x1F\xA6\x8B\x0A\x81\x12\xB4\x47\xAE\xF3\x4B\xD8\xFB\x5A\x7B\x82\x9D\x3E\x86\x23\x71\xD2\xCF\xE5",
-				      24) != 0) {
-		fprintf(stderr, "Wrapped data do not match.\n");
-
-		fprintf(stderr, "Data[%d]: ", (int)data_size);
-		for (i = 0; i < data_size; i++)
-			fprintf(stderr, "%.2x:", data[i]);
-		fprintf(stderr, "\n");
-		return 1;
-	}
-
-	/* test unwrapping */
-	fprintf(stdout, "\tKey Unwrap test...\n");
-
-	/* reset key2 */
-	if (ioctl(cfd, NCRIO_KEY_DEINIT, &key2)) {
-		perror("ioctl(NCRIO_KEY_DEINIT)");
-		return 1;
-	}
-
-	key2 = ioctl(cfd, NCRIO_KEY_INIT);
-	if (key2 == -1) {
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	memset(&kunwrap.f, 0, sizeof(kunwrap.f));
-	kunwrap.f.input_size = sizeof(kunwrap);
-	kunwrap.f.wrapping_key = key;
-	kunwrap.f.dest_key = key2;
-	kunwrap.f.data = data;
-	kunwrap.f.data_size = data_size;
-	kunwrap.wrap_algo_head.nla_len = NLA_HDRLEN + sizeof(kunwrap.wrap_algo);
-	kunwrap.wrap_algo_head.nla_type = NCR_ATTR_WRAPPING_ALGORITHM;
-	strcpy(kunwrap.wrap_algo, NCR_WALG_AES_RFC3394);
-	kunwrap.flags_head.nla_len = NLA_HDRLEN + sizeof(kunwrap.flags);
-	kunwrap.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-	kunwrap.flags = NCR_KEY_FLAG_EXPORTABLE | NCR_KEY_FLAG_WRAPPABLE;
-
-	if (ioctl(cfd, NCRIO_KEY_UNWRAP, &kunwrap)) {
-		perror("ioctl(NCRIO_KEY_UNWRAP)");
-		return 1;
-	}
-
-	/* now export the unwrapped */
-#if 0
-	/* this cannot be performed like that, because unwrap
-	 * always sets keys as unexportable. Maybe we can implement
-	 * a data comparison ioctl().
-	 */
-	memset(&keydata, 0, sizeof(keydata));
-	keydata.key = key2;
-	keydata.data = kdata.desc;
-
-	if (ioctl(cfd, NCRIO_KEY_EXPORT, &keydata)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_IMPORT)");
-		return 1;
-	}
-
-	if (ioctl(cfd, NCRIO_DATA_GET, &kdata)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_DATA_GET)");
-		return 1;
-	}
-
-	if (kdata.data_size != 16 || memcmp(kdata.data, DKEY, 16) != 0) {
-		fprintf(stderr, "Unwrapped data do not match.\n");
-		fprintf(stderr, "Data[%d]: ", (int)kdata.data_size);
-		for (i = 0; i < kdata.data_size; i++)
-			fprintf(stderr, "%.2x:", data[i]);
-		fprintf(stderr, "\n");
-		return 1;
-	}
-#endif
-
-	return 0;
-}
-
-/* check whether wrapping of long keys is not allowed with
- * shorted wrapping keys */
-static int test_ncr_wrap_key2(int cfd)
-{
-	int ret;
-	ncr_key_t key, key2;
-	struct __attribute__ ((packed)) {
-		struct ncr_key_import f;
-		struct nlattr id_head ALIGN_NL;
-		uint8_t id[2] ALIGN_NL;
-		struct nlattr type_head ALIGN_NL;
-		uint32_t type ALIGN_NL;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(ALG_AES_CBC)] ALIGN_NL;
-		struct nlattr flags_head ALIGN_NL;
-		uint32_t flags ALIGN_NL;
-	} kimport;
-	struct __attribute__ ((packed)) {
-		struct ncr_key_wrap f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(NCR_WALG_AES_RFC3394)] ALIGN_NL;
-	}
-	kwrap;
-	uint8_t data[WRAPPED_KEY_DATA_SIZE];
-
-	/* test 1: generate a key in userspace import it
-	 * to kernel via data and export it.
-	 */
-
-	fprintf(stdout, "\tKey Wrap test II...\n");
-
-	if (geteuid() != 0) {
-		/* cannot test further */
-		fprintf(stdout,
-			"\t(Wrapping test not completed. Run as root)\n");
-		return 0;
-	}
-
-	/* convert it to key */
-	key = ioctl(cfd, NCRIO_KEY_INIT);
-	if (key == -1) {
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	memset(&kimport.f, 0, sizeof(kimport.f));
-	kimport.f.input_size = sizeof(kimport);
-	kimport.f.key = key;
-	kimport.f.data =
-	    "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F";
-	kimport.f.data_size = 16;
-	kimport.id_head.nla_len = NLA_HDRLEN + sizeof(kimport.id);
-	kimport.id_head.nla_type = NCR_ATTR_KEY_ID;
-	kimport.id[0] = 'a';
-	kimport.id[1] = 'b';
-	kimport.type_head.nla_len = NLA_HDRLEN + sizeof(kimport.type);
-	kimport.type_head.nla_type = NCR_ATTR_KEY_TYPE;
-	kimport.type = NCR_KEY_TYPE_SECRET;
-	kimport.algo_head.nla_len = NLA_HDRLEN + sizeof(kimport.algo);
-	kimport.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(kimport.algo, ALG_AES_CBC);
-	kimport.flags_head.nla_len = NLA_HDRLEN + sizeof(kimport.flags);
-	kimport.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-	kimport.flags =
-	    NCR_KEY_FLAG_EXPORTABLE | NCR_KEY_FLAG_WRAPPING |
-	    NCR_KEY_FLAG_UNWRAPPING;
-
-	if (ioctl(cfd, NCRIO_KEY_IMPORT, &kimport)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_IMPORT)");
-		return 1;
-	}
-
-	/* convert it to key */
-	key2 = ioctl(cfd, NCRIO_KEY_INIT);
-	if (key2 == -1) {
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	memset(&kimport.f, 0, sizeof(kimport.f));
-	kimport.f.input_size = sizeof(kimport);
-	kimport.f.key = key2;
-	kimport.f.data =
-	    "\x00\x11\x22\x33\x44\x55\x66\x77\x88\x99\xAA\xBB\xCC\xDD\xEE\xFF\x00\x11\x22\x33\x44\x55\x66\x77\x88\x99\xAA\xBB\xCC\xDD\xEE\xFF";
-	kimport.f.data_size = 32;
-	kimport.id_head.nla_len = NLA_HDRLEN + sizeof(kimport.id);
-	kimport.id_head.nla_type = NCR_ATTR_KEY_ID;
-	kimport.id[0] = 'b';
-	kimport.id[1] = 'a';
-	kimport.type_head.nla_len = NLA_HDRLEN + sizeof(kimport.type);
-	kimport.type_head.nla_type = NCR_ATTR_KEY_TYPE;
-	kimport.type = NCR_KEY_TYPE_SECRET;
-	kimport.algo_head.nla_len = NLA_HDRLEN + sizeof(kimport.algo);
-	kimport.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(kimport.algo, ALG_AES_CBC);
-	kimport.flags_head.nla_len = NLA_HDRLEN + sizeof(kimport.flags);
-	kimport.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-	kimport.flags = NCR_KEY_FLAG_EXPORTABLE | NCR_KEY_FLAG_WRAPPABLE;
-
-	if (ioctl(cfd, NCRIO_KEY_IMPORT, &kimport)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_IMPORT)");
-		return 1;
-	}
-
-	/* now try wrapping key2 using key */
-	memset(&kwrap.f, 0, sizeof(kwrap.f));
-	kwrap.f.input_size = sizeof(kwrap);
-	kwrap.f.wrapping_key = key;
-	kwrap.f.source_key = key2;
-	kwrap.f.buffer = data;
-	kwrap.f.buffer_size = sizeof(data);
-	kwrap.algo_head.nla_len = NLA_HDRLEN + sizeof(kwrap.algo);
-	kwrap.algo_head.nla_type = NCR_ATTR_WRAPPING_ALGORITHM;
-	strcpy(kwrap.algo, NCR_WALG_AES_RFC3394);
-
-	ret = ioctl(cfd, NCRIO_KEY_WRAP, &kwrap);
-	if (ret >= 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		/* wrapping shouldn't have been allowed */
-		return 1;
-	}
-
-	return 0;
-}
-
-static int test_ncr_store_wrap_key(int cfd)
-{
-	int i;
-	ncr_key_t key2;
-	struct __attribute__ ((packed)) {
-		struct ncr_key_import f;
-		struct nlattr id_head ALIGN_NL;
-		uint8_t id[2] ALIGN_NL;
-		struct nlattr type_head ALIGN_NL;
-		uint32_t type ALIGN_NL;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(ALG_AES_CBC)] ALIGN_NL;
-		struct nlattr flags_head ALIGN_NL;
-		uint32_t flags ALIGN_NL;
-	} kimport;
-	struct ncr_key_export kexport;
-	struct ncr_key_storage_wrap kwrap;
-	struct ncr_key_storage_unwrap kunwrap;
-	uint8_t data[DATA_SIZE];
-	int data_size;
-
-	fprintf(stdout, "Tests on Key storage:\n");
-
-	/* test 1: generate a key in userspace import it
-	 * to kernel via data and export it.
-	 */
-
-	fprintf(stdout, "\tKey Storage wrap test...\n");
-
-	/* convert it to key */
-	key2 = ioctl(cfd, NCRIO_KEY_INIT);
-	if (key2 == -1) {
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	memset(&kimport.f, 0, sizeof(kimport.f));
-	kimport.f.input_size = sizeof(kimport);
-	kimport.f.key = key2;
-#define DKEY "\x00\x11\x22\x33\x44\x55\x66\x77\x88\x99\xAA\xBB\xCC\xDD\xEE\xFF"
-	kimport.f.data = DKEY;
-	kimport.f.data_size = 16;
-	kimport.id_head.nla_len = NLA_HDRLEN + sizeof(kimport.id);
-	kimport.id_head.nla_type = NCR_ATTR_KEY_ID;
-	kimport.id[0] = 'b';
-	kimport.id[1] = 'a';
-	kimport.type_head.nla_len = NLA_HDRLEN + sizeof(kimport.type);
-	kimport.type_head.nla_type = NCR_ATTR_KEY_TYPE;
-	kimport.type = NCR_KEY_TYPE_SECRET;
-	kimport.algo_head.nla_len = NLA_HDRLEN + sizeof(kimport.algo);
-	kimport.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(kimport.algo, ALG_AES_CBC);
-	kimport.flags_head.nla_len = NLA_HDRLEN + sizeof(kimport.flags);
-	kimport.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-	kimport.flags = NCR_KEY_FLAG_EXPORTABLE | NCR_KEY_FLAG_WRAPPABLE;
-
-	if (ioctl(cfd, NCRIO_KEY_IMPORT, &kimport)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_IMPORT)");
-		return 1;
-	}
-
-	/* now try wrapping key2 using key */
-	memset(&kwrap, 0, sizeof(kwrap));
-	kwrap.key = key2;
-	kwrap.buffer = data;
-	kwrap.buffer_size = sizeof(data);
-
-	data_size = ioctl(cfd, NCRIO_KEY_STORAGE_WRAP, &kwrap);
-	if (data_size < 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_STORAGE_WRAP)");
-		return 1;
-	}
-
-	/* test unwrapping */
-	fprintf(stdout, "\tKey Storage Unwrap test...\n");
-
-	/* reset key2 */
-	if (ioctl(cfd, NCRIO_KEY_DEINIT, &key2)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_DEINIT)");
-		return 1;
-	}
-
-	key2 = ioctl(cfd, NCRIO_KEY_INIT);
-	if (key2 == -1) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	memset(&kunwrap, 0, sizeof(kunwrap));
-	kunwrap.key = key2;
-	kunwrap.data = data;
-	kunwrap.data_size = data_size;
-
-	if (ioctl(cfd, NCRIO_KEY_STORAGE_UNWRAP, &kunwrap)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_STORAGE_UNWRAP)");
-		return 1;
-	}
-
-	/* now export the unwrapped */
-	memset(&kexport, 0, sizeof(kexport));
-	kexport.key = key2;
-	kexport.buffer = data;
-	kexport.buffer_size = sizeof(data);
-
-	data_size = ioctl(cfd, NCRIO_KEY_EXPORT, &kexport);
-	if (data_size != 16) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_EXPORT)");
-		return 1;
-	}
-
-	if (memcmp(data, DKEY, 16) != 0) {
-		fprintf(stderr, "Unwrapped data do not match.\n");
-		fprintf(stderr, "Data[%d]: ", (int)data_size);
-		for (i = 0; i < data_size; i++)
-			fprintf(stderr, "%.2x:", data[i]);
-		fprintf(stderr, "\n");
-		return 1;
-	}
-
-	return 0;
-
-}
-
-struct aes_vectors_st {
-	const uint8_t *key;
-	const uint8_t *plaintext;
-	const uint8_t *ciphertext;
-} aes_vectors[] = {
-	{
-	.key =
-		    (uint8_t *)
-		    "\xc0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",.
-		    plaintext =
-		    (uint8_t *)
-		    "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",.
-		    ciphertext =
-		    (uint8_t *)
-		    "\x4b\xc3\xf8\x83\x45\x0c\x11\x3c\x64\xca\x42\xe1\x11\x2a\x9e\x87",},
-	{
-	.key =
-		    (uint8_t *)
-		    "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",.
-		    plaintext =
-		    (uint8_t *)
-		    "\xf3\x44\x81\xec\x3c\xc6\x27\xba\xcd\x5d\xc3\xfb\x08\xf2\x73\xe6",.
-		    ciphertext =
-		    (uint8_t *)
-		    "\x03\x36\x76\x3e\x96\x6d\x92\x59\x5a\x56\x7c\xc9\xce\x53\x7f\x5e",},
-	{
-	.key =
-		    (uint8_t *)
-		    "\x10\xa5\x88\x69\xd7\x4b\xe5\xa3\x74\xcf\x86\x7c\xfb\x47\x38\x59",.
-		    plaintext =
-		    (uint8_t *)
-		    "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",.
-		    ciphertext =
-		    (uint8_t *)
-		    "\x6d\x25\x1e\x69\x44\xb0\x51\xe0\x4e\xaa\x6f\xb4\xdb\xf7\x84\x65",},
-	{
-	.key =
-		    (uint8_t *)
-		    "\xca\xea\x65\xcd\xbb\x75\xe9\x16\x9e\xcd\x22\xeb\xe6\xe5\x46\x75",.
-		    plaintext =
-		    (uint8_t *)
-		    "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",.
-		    ciphertext =
-		    (uint8_t *)
-		    "\x6e\x29\x20\x11\x90\x15\x2d\xf4\xee\x05\x81\x39\xde\xf6\x10\xbb",},
-	{
-.key =
-		    (uint8_t *)
-		    "\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xfe",.
-		    plaintext =
-		    (uint8_t *)
-		    "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",.
-		    ciphertext =
-		    (uint8_t *)
-		    "\x9b\xa4\xa9\x14\x3f\x4e\x5d\x40\x48\x52\x1c\x4f\x88\x77\xd8\x8e",},};
-
-/* AES cipher */
-static int test_ncr_aes(int cfd)
-{
-	ncr_key_t key;
-	struct __attribute__ ((packed)) {
-		struct ncr_key_import f;
-		struct nlattr id_head ALIGN_NL;
-		uint8_t id[2] ALIGN_NL;
-		struct nlattr type_head ALIGN_NL;
-		uint32_t type ALIGN_NL;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(ALG_AES_ECB)] ALIGN_NL;
-		struct nlattr flags_head ALIGN_NL;
-		uint32_t flags ALIGN_NL;
-	} kimport;
-	uint8_t data[KEY_DATA_SIZE];
-	int i, j;
-	struct __attribute__ ((packed)) {
-		struct ncr_session_once f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(ALG_AES_ECB)] ALIGN_NL;
-		struct nlattr key_head ALIGN_NL;
-		uint32_t key ALIGN_NL;
-		struct nlattr input_head ALIGN_NL;
-		struct ncr_session_input_data input ALIGN_NL;
-		struct nlattr output_head ALIGN_NL;
-		struct ncr_session_output_buffer output ALIGN_NL;
-	} op;
-	size_t data_size;
-
-	/* convert it to key */
-	key = ioctl(cfd, NCRIO_KEY_INIT);
-	if (key == -1) {
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	fprintf(stdout, "Tests on AES Encryption\n");
-	for (i = 0; i < sizeof(aes_vectors) / sizeof(aes_vectors[0]); i++) {
-
-		memset(&kimport.f, 0, sizeof(kimport.f));
-		kimport.f.input_size = sizeof(kimport);
-		kimport.f.key = key;
-		kimport.f.data = aes_vectors[i].key;
-		kimport.f.data_size = 16;
-		kimport.id_head.nla_len = NLA_HDRLEN + sizeof(kimport.id);
-		kimport.id_head.nla_type = NCR_ATTR_KEY_ID;
-		kimport.id[0] = 'a';
-		kimport.id[1] = 'b';
-		kimport.type_head.nla_len = NLA_HDRLEN + sizeof(kimport.type);
-		kimport.type_head.nla_type = NCR_ATTR_KEY_TYPE;
-		kimport.type = NCR_KEY_TYPE_SECRET;
-		kimport.algo_head.nla_len = NLA_HDRLEN + sizeof(kimport.algo);
-		kimport.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-		strcpy(kimport.algo, ALG_AES_ECB);
-		kimport.flags_head.nla_len = NLA_HDRLEN + sizeof(kimport.flags);
-		kimport.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-		kimport.flags = NCR_KEY_FLAG_EXPORTABLE;
-		if (ioctl(cfd, NCRIO_KEY_IMPORT, &kimport)) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_KEY_IMPORT)");
-			return 1;
-		}
-
-		/* encrypt */
-		memset(&op.f, 0, sizeof(op.f));
-		op.f.input_size = sizeof(op);
-		op.f.op = NCR_OP_ENCRYPT;
-		op.algo_head.nla_len = NLA_HDRLEN + sizeof(op.algo);
-		op.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-		strcpy(op.algo, ALG_AES_ECB);
-		op.key_head.nla_len = NLA_HDRLEN + sizeof(op.key);
-		op.key_head.nla_type = NCR_ATTR_KEY;
-		op.key = key;
-		op.input_head.nla_len = NLA_HDRLEN + sizeof(op.input);
-		op.input_head.nla_type = NCR_ATTR_UPDATE_INPUT_DATA;
-		op.input.data = aes_vectors[i].plaintext;
-		op.input.data_size = 16;
-		op.output_head.nla_len = NLA_HDRLEN + sizeof(op.output);
-		op.output_head.nla_type = NCR_ATTR_UPDATE_OUTPUT_BUFFER;
-		op.output.buffer = data;
-		op.output.buffer_size = sizeof(data);
-		op.output.result_size_ptr = &data_size;
-
-		if (ioctl(cfd, NCRIO_SESSION_ONCE, &op)) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_SESSION_ONCE)");
-			return 1;
-		}
-		/* verify */
-
-		if (data_size != 16
-		    || memcmp(data, aes_vectors[i].ciphertext, 16) != 0) {
-			fprintf(stderr, "AES test vector %d failed!\n", i);
-
-			fprintf(stderr, "Cipher[%d]: ", (int)data_size);
-			for (j = 0; j < data_size; j++)
-				fprintf(stderr, "%.2x:", (int)data[j]);
-			fprintf(stderr, "\n");
-
-			fprintf(stderr, "Expected[%d]: ", 16);
-			for (j = 0; j < 16; j++)
-				fprintf(stderr, "%.2x:",
-					(int)aes_vectors[i].ciphertext[j]);
-			fprintf(stderr, "\n");
-			return 1;
-		}
-	}
-
-	fprintf(stdout, "Tests on AES Decryption\n");
-	for (i = 0; i < sizeof(aes_vectors) / sizeof(aes_vectors[0]); i++) {
-
-		memset(&kimport.f, 0, sizeof(kimport.f));
-		kimport.f.input_size = sizeof(kimport);
-		kimport.f.key = key;
-		kimport.f.data = aes_vectors[i].key;
-		kimport.f.data_size = 16;
-		kimport.id_head.nla_len = NLA_HDRLEN + sizeof(kimport.id);
-		kimport.id_head.nla_type = NCR_ATTR_KEY_ID;
-		kimport.id[0] = 'a';
-		kimport.id[1] = 'b';
-		kimport.type_head.nla_len = NLA_HDRLEN + sizeof(kimport.type);
-		kimport.type_head.nla_type = NCR_ATTR_KEY_TYPE;
-		kimport.type = NCR_KEY_TYPE_SECRET;
-		kimport.algo_head.nla_len = NLA_HDRLEN + sizeof(kimport.algo);
-		kimport.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-		strcpy(kimport.algo, ALG_AES_CBC);
-		kimport.flags_head.nla_len = NLA_HDRLEN + sizeof(kimport.flags);
-		kimport.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-		kimport.flags = NCR_KEY_FLAG_EXPORTABLE;
-		if (ioctl(cfd, NCRIO_KEY_IMPORT, &kimport)) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_KEY_IMPORT)");
-			return 1;
-		}
-
-		/* decrypt */
-		memset(&op.f, 0, sizeof(op.f));
-		op.f.input_size = sizeof(op);
-		op.f.op = NCR_OP_DECRYPT;
-		op.algo_head.nla_len = NLA_HDRLEN + sizeof(op.algo);
-		op.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-		strcpy(op.algo, ALG_AES_ECB);
-		op.key_head.nla_len = NLA_HDRLEN + sizeof(op.key);
-		op.key_head.nla_type = NCR_ATTR_KEY;
-		op.key = key;
-		op.input_head.nla_len = NLA_HDRLEN + sizeof(op.input);
-		op.input_head.nla_type = NCR_ATTR_UPDATE_INPUT_DATA;
-		op.input.data = aes_vectors[i].ciphertext;
-		op.input.data_size = 16;
-		op.output_head.nla_len = NLA_HDRLEN + sizeof(op.output);
-		op.output_head.nla_type = NCR_ATTR_UPDATE_OUTPUT_BUFFER;
-		op.output.buffer = data;
-		op.output.buffer_size = sizeof(data);
-		op.output.result_size_ptr = &data_size;
-
-		if (ioctl(cfd, NCRIO_SESSION_ONCE, &op)) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_SESSION_ONCE)");
-			return 1;
-		}
-
-		if (data_size != 16
-		    || memcmp(data, aes_vectors[i].plaintext, 16) != 0) {
-			fprintf(stderr, "AES test vector %d failed!\n", i);
-
-			fprintf(stderr, "Plain[%d]: ", (int)data_size);
-			for (j = 0; j < data_size; j++)
-				fprintf(stderr, "%.2x:", (int)data[j]);
-			fprintf(stderr, "\n");
-
-			fprintf(stderr, "Expected[%d]: ", 16);
-			for (j = 0; j < 16; j++)
-				fprintf(stderr, "%.2x:",
-					(int)aes_vectors[i].plaintext[j]);
-			fprintf(stderr, "\n");
-			return 1;
-		}
-	}
-
-	fprintf(stdout, "\n");
-
-	return 0;
-
-}
-
-struct hash_vectors_st {
-	const char *algorithm;
-	const uint8_t *key;	/* if hmac */
-	int key_size;
-	const uint8_t *plaintext;
-	int plaintext_size;
-	const uint8_t *output;
-	int output_size;
-	ncr_crypto_op_t op;
-} hash_vectors[] = {
-	{
-	.algorithm = "sha1",.key = NULL,.plaintext =
-		    (uint8_t *) "what do ya want for nothing?",.
-		    plaintext_size =
-		    sizeof("what do ya want for nothing?") - 1,.output =
-		    (uint8_t *)
-		    "\x8f\x82\x03\x94\xf9\x53\x35\x18\x20\x45\xda\x24\xf3\x4d\xe5\x2b\xf8\xbc\x34\x32",.
-		    output_size = 20,.op = NCR_OP_SIGN,}
-	, {
-	.algorithm = "hmac(md5)",.key = (uint8_t *) "Jefe",.key_size =
-		    4,.plaintext =
-		    (uint8_t *) "what do ya want for nothing?",.
-		    plaintext_size =
-		    sizeof("what do ya want for nothing?") - 1,.output =
-		    (uint8_t *)
-		    "\x75\x0c\x78\x3e\x6a\xb0\xb5\x03\xea\xa8\x6e\x31\x0a\x5d\xb7\x38",.
-		    output_size = 16,.op = NCR_OP_SIGN,}
-	,
-	    /* from rfc4231 */
-	{
-	.algorithm = "hmac(sha224)",.key =
-		    (uint8_t *)
-		    "\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b",.
-		    key_size = 20,.plaintext =
-		    (uint8_t *) "Hi There",.plaintext_size =
-		    sizeof("Hi There") - 1,.output =
-		    (uint8_t *)
-		    "\x89\x6f\xb1\x12\x8a\xbb\xdf\x19\x68\x32\x10\x7c\xd4\x9d\xf3\x3f\x47\xb4\xb1\x16\x99\x12\xba\x4f\x53\x68\x4b\x22",.
-		    output_size = 28,.op = NCR_OP_SIGN,}
-	, {
-	.algorithm = "hmac(sha256)",.key =
-		    (uint8_t *)
-		    "\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b",.
-		    key_size = 20,.plaintext =
-		    (uint8_t *) "Hi There",.plaintext_size =
-		    sizeof("Hi There") - 1,.output =
-		    (uint8_t *)
-		    "\xb0\x34\x4c\x61\xd8\xdb\x38\x53\x5c\xa8\xaf\xce\xaf\x0b\xf1\x2b\x88\x1d\xc2\x00\xc9\x83\x3d\xa7\x26\xe9\x37\x6c\x2e\x32\xcf\xf7",.
-		    output_size = 32,.op = NCR_OP_SIGN,}
-	, {
-	.algorithm = "hmac(sha384)",.key =
-		    (uint8_t *)
-		    "\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b",.
-		    key_size = 20,.plaintext =
-		    (uint8_t *) "Hi There",.plaintext_size =
-		    sizeof("Hi There") - 1,.output =
-		    (uint8_t *)
-		    "\xaf\xd0\x39\x44\xd8\x48\x95\x62\x6b\x08\x25\xf4\xab\x46\x90\x7f\x15\xf9\xda\xdb\xe4\x10\x1e\xc6\x82\xaa\x03\x4c\x7c\xeb\xc5\x9c\xfa\xea\x9e\xa9\x07\x6e\xde\x7f\x4a\xf1\x52\xe8\xb2\xfa\x9c\xb6",.
-		    output_size = 48,.op = NCR_OP_SIGN,}
-	, {
-	.algorithm = "hmac(sha512)",.key =
-		    (uint8_t *)
-		    "\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b",.
-		    key_size = 20,.plaintext =
-		    (uint8_t *) "Hi There",.plaintext_size =
-		    sizeof("Hi There") - 1,.output =
-		    (uint8_t *)
-		    "\x87\xaa\x7c\xde\xa5\xef\x61\x9d\x4f\xf0\xb4\x24\x1a\x1d\x6c\xb0\x23\x79\xf4\xe2\xce\x4e\xc2\x78\x7a\xd0\xb3\x05\x45\xe1\x7c\xde\xda\xa8\x33\xb7\xd6\xb8\xa7\x02\x03\x8b\x27\x4e\xae\xa3\xf4\xe4\xbe\x9d\x91\x4e\xeb\x61\xf1\x70\x2e\x69\x6c\x20\x3a\x12\x68\x54",.
-		    output_size = 64,.op = NCR_OP_SIGN,}
-,};
-
-#define HASH_DATA_SIZE 64
-
-/* SHA1 and other hashes */
-static int test_ncr_hash(int cfd)
-{
-	ncr_key_t key;
-	struct __attribute__ ((packed)) {
-		struct ncr_key_import f;
-		struct nlattr id_head ALIGN_NL;
-		uint8_t id[2] ALIGN_NL;
-		struct nlattr type_head ALIGN_NL;
-		uint32_t type ALIGN_NL;
-		struct nlattr flags_head ALIGN_NL;
-		uint32_t flags ALIGN_NL;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[128] ALIGN_NL;
-	} kimport;
-	uint8_t data[HASH_DATA_SIZE];
-	int i, j;
-	size_t data_size;
-	struct __attribute__ ((packed)) {
-		struct ncr_session_once f;
-		struct nlattr key_head ALIGN_NL;
-		uint32_t key ALIGN_NL;
-		struct nlattr input_head ALIGN_NL;
-		struct ncr_session_input_data input ALIGN_NL;
-		struct nlattr output_head ALIGN_NL;
-		struct ncr_session_output_buffer output ALIGN_NL;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[128] ALIGN_NL;
-	} op;
-
-	/* convert it to key */
-	key = ioctl(cfd, NCRIO_KEY_INIT);
-	if (key == -1) {
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	fprintf(stdout, "Tests on Hashes\n");
-	for (i = 0; i < sizeof(hash_vectors) / sizeof(hash_vectors[0]); i++) {
-		size_t algo_size;
-
-		algo_size = strlen(hash_vectors[i].algorithm) + 1;
-		fprintf(stdout, "\t%s:\n", hash_vectors[i].algorithm);
-		/* import key */
-		if (hash_vectors[i].key != NULL) {
-
-			memset(&kimport.f, 0, sizeof(kimport.f));
-			kimport.f.key = key;
-			kimport.f.data = hash_vectors[i].key;
-			kimport.f.data_size = hash_vectors[i].key_size;
-			kimport.id_head.nla_len
-			    = NLA_HDRLEN + sizeof(kimport.id);
-			kimport.id_head.nla_type = NCR_ATTR_KEY_ID;
-			kimport.id[0] = 'a';
-			kimport.id[1] = 'b';
-			kimport.type_head.nla_len
-			    = NLA_HDRLEN + sizeof(kimport.type);
-			kimport.type_head.nla_type = NCR_ATTR_KEY_TYPE;
-			kimport.type = NCR_KEY_TYPE_SECRET;
-			kimport.flags_head.nla_len
-			    = NLA_HDRLEN + sizeof(kimport.flags);
-			kimport.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-			kimport.flags = NCR_KEY_FLAG_EXPORTABLE;
-			kimport.algo_head.nla_len = NLA_HDRLEN + algo_size;
-			kimport.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-			memcpy(kimport.algo, hash_vectors[i].algorithm,
-			       algo_size);
-			kimport.f.input_size
-			    = kimport.algo + algo_size - (char *)&kimport;
-			if (ioctl(cfd, NCRIO_KEY_IMPORT, &kimport)) {
-				fprintf(stderr, "Error: %s:%d\n", __func__,
-					__LINE__);
-				perror("ioctl(NCRIO_KEY_IMPORT)");
-				return 1;
-			}
-		}
-
-		memset(&op.f, 0, sizeof(op.f));
-		op.f.op = hash_vectors[i].op;
-		op.key_head.nla_len = NLA_HDRLEN + sizeof(op.key);
-		op.key_head.nla_type = NCR_ATTR_KEY;
-		op.key = hash_vectors[i].key != NULL ? key : NCR_KEY_INVALID;
-		op.input_head.nla_len = NLA_HDRLEN + sizeof(op.input);
-		op.input_head.nla_type = NCR_ATTR_UPDATE_INPUT_DATA;
-		op.input.data = hash_vectors[i].plaintext;
-		op.input.data_size = hash_vectors[i].plaintext_size;
-		op.output_head.nla_len = NLA_HDRLEN + sizeof(op.output);
-		op.output_head.nla_type = NCR_ATTR_FINAL_OUTPUT_BUFFER;
-		op.output.buffer = data;
-		op.output.buffer_size = sizeof(data);
-		op.output.result_size_ptr = &data_size;
-		op.algo_head.nla_len = NLA_HDRLEN + algo_size;
-		op.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-		memcpy(op.algo, hash_vectors[i].algorithm, algo_size);
-		op.f.input_size = op.algo + algo_size - (char *)&op;
-
-		if (ioctl(cfd, NCRIO_SESSION_ONCE, &op)) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_SESSION_ONCE)");
-			return 1;
-		}
-
-		if (data_size != hash_vectors[i].output_size ||
-		    memcmp(data, hash_vectors[i].output,
-			   hash_vectors[i].output_size) != 0) {
-			fprintf(stderr, "HASH test vector %d failed!\n", i);
-
-			fprintf(stderr, "Output[%d]: ", (int)data_size);
-			for (j = 0; j < data_size; j++)
-				fprintf(stderr, "%.2x:", (int)data[j]);
-			fprintf(stderr, "\n");
-
-			fprintf(stderr, "Expected[%d]: ",
-				hash_vectors[i].output_size);
-			for (j = 0; j < hash_vectors[i].output_size; j++)
-				fprintf(stderr, "%.2x:",
-					(int)hash_vectors[i].output[j]);
-			fprintf(stderr, "\n");
-			return 1;
-		}
-	}
-
-	fprintf(stdout, "\n");
-
-	return 0;
-
-}
-
-static int test_ncr_hash_clone(int cfd)
-{
-	ncr_key_t key;
-	struct __attribute__ ((packed)) {
-		struct ncr_key_import f;
-		struct nlattr id_head ALIGN_NL;
-		uint8_t id[2] ALIGN_NL;
-		struct nlattr type_head ALIGN_NL;
-		uint32_t type ALIGN_NL;
-		struct nlattr flags_head ALIGN_NL;
-		uint32_t flags ALIGN_NL;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[128] ALIGN_NL;
-	} kimport;
-	uint8_t data[HASH_DATA_SIZE];
-	const struct hash_vectors_st *hv;
-	int j;
-	size_t data_size;
-	struct __attribute__ ((packed)) {
-		struct ncr_session_init f;
-		struct nlattr key_head ALIGN_NL;
-		uint32_t key ALIGN_NL;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[128] ALIGN_NL;
-	} kinit;
-	struct __attribute__ ((packed)) {
-		struct ncr_session_update f;
-		struct nlattr input_head ALIGN_NL;
-		struct ncr_session_input_data input ALIGN_NL;
-	} kupdate;
-	struct __attribute__ ((packed)) {
-		struct ncr_session_final f;
-		struct nlattr input_head ALIGN_NL;
-		struct ncr_session_input_data input ALIGN_NL;
-		struct nlattr output_head ALIGN_NL;
-		struct ncr_session_output_buffer output ALIGN_NL;
-	} kfinal;
-	struct __attribute__ ((packed)) {
-		struct ncr_session_once f;
-		struct nlattr clone_head ALIGN_NL;
-		uint32_t clone ALIGN_NL;
-		struct nlattr input_head ALIGN_NL;
-		struct ncr_session_input_data input ALIGN_NL;
-		struct nlattr output_head ALIGN_NL;
-		struct ncr_session_output_buffer output ALIGN_NL;
-	} kclone;
-	ncr_session_t ses;
-
-	/* convert it to key */
-	key = ioctl(cfd, NCRIO_KEY_INIT);
-	if (key == -1) {
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	fprintf(stdout, "Tests of hash cloning\n");
-	for (hv = hash_vectors;
-	     hv < hash_vectors + sizeof(hash_vectors) / sizeof(hash_vectors[0]);
-	     hv++) {
-		size_t algo_size;
-
-		algo_size = strlen(hv->algorithm) + 1;
-		fprintf(stdout, "\t%s:\n", hv->algorithm);
-		/* import key */
-		if (hv->key != NULL) {
-
-			memset(&kimport.f, 0, sizeof(kimport.f));
-			kimport.f.key = key;
-			kimport.f.data = hv->key;
-			kimport.f.data_size = hv->key_size;
-			kimport.id_head.nla_len
-			    = NLA_HDRLEN + sizeof(kimport.id);
-			kimport.id_head.nla_type = NCR_ATTR_KEY_ID;
-			kimport.id[0] = 'a';
-			kimport.id[1] = 'b';
-			kimport.type_head.nla_len
-			    = NLA_HDRLEN + sizeof(kimport.type);
-			kimport.type_head.nla_type = NCR_ATTR_KEY_TYPE;
-			kimport.type = NCR_KEY_TYPE_SECRET;
-			kimport.flags_head.nla_len
-			    = NLA_HDRLEN + sizeof(kimport.flags);
-			kimport.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-			kimport.flags = NCR_KEY_FLAG_EXPORTABLE;
-			kimport.algo_head.nla_len = NLA_HDRLEN + algo_size;
-			kimport.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-			memcpy(kimport.algo, hv->algorithm, algo_size);
-			kimport.f.input_size
-			    = kimport.algo + algo_size - (char *)&kimport;
-			if (ioctl(cfd, NCRIO_KEY_IMPORT, &kimport)) {
-				fprintf(stderr, "Error: %s:%d\n", __func__,
-					__LINE__);
-				perror("ioctl(NCRIO_KEY_IMPORT)");
-				return 1;
-			}
-		}
-
-		/* Initialize a session */
-		memset(&kinit.f, 0, sizeof(kinit.f));
-		kinit.f.op = hv->op;
-		kinit.key_head.nla_len = NLA_HDRLEN + sizeof(kinit.key);
-		kinit.key_head.nla_type = NCR_ATTR_KEY;
-		kinit.key = hv->key != NULL ? key : NCR_KEY_INVALID;
-		kinit.algo_head.nla_len = NLA_HDRLEN + algo_size;
-		kinit.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-		memcpy(kinit.algo, hv->algorithm, algo_size);
-		kinit.f.input_size = kinit.algo + algo_size - (char *)&kinit;
-
-		ses = ioctl(cfd, NCRIO_SESSION_INIT, &kinit);
-		if (ses < 0) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_SESSION_INIT)");
-			return 1;
-		}
-
-		/* Submit half of the data */
-		memset(&kupdate.f, 0, sizeof(kupdate.f));
-		kupdate.f.input_size = sizeof(kupdate);
-		kupdate.f.ses = ses;
-		kupdate.input_head.nla_len = NLA_HDRLEN + sizeof(kupdate.input);
-		kupdate.input_head.nla_type = NCR_ATTR_UPDATE_INPUT_DATA;
-		kupdate.input.data = hv->plaintext;
-		kupdate.input.data_size = hv->plaintext_size / 2;
-
-		if (ioctl(cfd, NCRIO_SESSION_UPDATE, &kupdate)) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_SESSION_UPDATE)");
-			return 1;
-		}
-
-		/* Clone a session, submit the other half, verify. */
-		memset(&kclone.f, 0, sizeof(kclone.f));
-		kclone.f.input_size = sizeof(kclone);
-		kclone.f.op = hv->op;
-		kclone.clone_head.nla_len = NLA_HDRLEN + sizeof(kclone.clone);
-		kclone.clone_head.nla_type = NCR_ATTR_SESSION_CLONE_FROM;
-		kclone.clone = ses;
-		kclone.input_head.nla_len = NLA_HDRLEN + sizeof(kclone.input);
-		kclone.input_head.nla_type = NCR_ATTR_UPDATE_INPUT_DATA;
-		kclone.input.data = hv->plaintext + hv->plaintext_size / 2;
-		kclone.input.data_size
-		    = hv->plaintext_size - hv->plaintext_size / 2;
-		kclone.output_head.nla_len = NLA_HDRLEN + sizeof(kclone.output);
-		kclone.output_head.nla_type = NCR_ATTR_FINAL_OUTPUT_BUFFER;
-		kclone.output.buffer = data;
-		kclone.output.buffer_size = sizeof(data);
-		kclone.output.result_size_ptr = &data_size;
-
-		if (ioctl(cfd, NCRIO_SESSION_ONCE, &kclone)) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_SESSION_ONCE)");
-			return 1;
-		}
-
-		if (data_size != hv->output_size
-		    || memcmp(data, hv->output, hv->output_size) != 0) {
-			fprintf(stderr, "HASH test vector %td failed!\n",
-				hv - hash_vectors);
-
-			fprintf(stderr, "Output[%zu]: ", data_size);
-			for (j = 0; j < data_size; j++)
-				fprintf(stderr, "%.2x:", (int)data[j]);
-			fprintf(stderr, "\n");
-
-			fprintf(stderr, "Expected[%d]: ", hv->output_size);
-			for (j = 0; j < hv->output_size; j++)
-				fprintf(stderr, "%.2x:", (int)hv->output[j]);
-			fprintf(stderr, "\n");
-			return 1;
-		}
-
-		/* Submit the other half to the original session, verify. */
-		memset(&kfinal.f, 0, sizeof(kfinal.f));
-		kfinal.f.input_size = sizeof(kfinal);
-		kfinal.f.ses = ses;
-		kfinal.input_head.nla_len = NLA_HDRLEN + sizeof(kfinal.input);
-		kfinal.input_head.nla_type = NCR_ATTR_UPDATE_INPUT_DATA;
-		kfinal.input.data = hv->plaintext + hv->plaintext_size / 2;
-		kfinal.input.data_size
-		    = hv->plaintext_size - hv->plaintext_size / 2;
-		kfinal.output_head.nla_len = NLA_HDRLEN + sizeof(kfinal.output);
-		kfinal.output_head.nla_type = NCR_ATTR_FINAL_OUTPUT_BUFFER;
-		kfinal.output.buffer = data;
-		kfinal.output.buffer_size = sizeof(data);
-		kfinal.output.result_size_ptr = &data_size;
-
-		if (ioctl(cfd, NCRIO_SESSION_FINAL, &kfinal)) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_SESSION_FINAL)");
-			return 1;
-		}
-
-		if (data_size != hv->output_size
-		    || memcmp(data, hv->output, hv->output_size) != 0) {
-			fprintf(stderr, "HASH test vector %td failed!\n",
-				hv - hash_vectors);
-
-			fprintf(stderr, "Output[%zu]: ", data_size);
-			for (j = 0; j < data_size; j++)
-				fprintf(stderr, "%.2x:", (int)data[j]);
-			fprintf(stderr, "\n");
-
-			fprintf(stderr, "Expected[%d]: ", hv->output_size);
-			for (j = 0; j < hv->output_size; j++)
-				fprintf(stderr, "%.2x:", (int)hv->output[j]);
-			fprintf(stderr, "\n");
-			return 1;
-		}
-	}
-
-	fprintf(stdout, "\n");
-
-	return 0;
-
-}
-
-static int test_ncr_hash_key(int cfd)
-{
-	ncr_key_t key;
-	ncr_session_t ses;
-	struct __attribute__ ((packed)) {
-		struct ncr_key_import f;
-		struct nlattr id_head ALIGN_NL;
-		uint8_t id[2] ALIGN_NL;
-		struct nlattr type_head ALIGN_NL;
-		uint32_t type ALIGN_NL;
-		struct nlattr flags_head ALIGN_NL;
-		uint32_t flags ALIGN_NL;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[128] ALIGN_NL;
-	} kimport;
-	uint8_t data[HASH_DATA_SIZE];
-	int j;
-	size_t data_size, algo_size;
-	struct __attribute__ ((packed)) {
-		struct ncr_session_init f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[128] ALIGN_NL;
-	} op_init;
-	struct __attribute__ ((packed)) {
-		struct ncr_session_update f;
-		struct nlattr data_head ALIGN_NL;
-		struct ncr_session_input_data data ALIGN_NL;
-	} op_up_data;
-	struct __attribute__ ((packed)) {
-		struct ncr_session_update f;
-		struct nlattr key_head ALIGN_NL;
-		uint32_t key;
-	} op_up_key;
-	struct __attribute__ ((packed)) {
-		struct ncr_session_final f;
-		struct nlattr output_head ALIGN_NL;
-		struct ncr_session_output_buffer output ALIGN_NL;
-	} op_final;
-	const uint8_t *output =
-	    (void *)
-	    "\xe2\xd7\x2c\x2e\x14\xad\x97\xc8\xd2\xdb\xce\xd8\xb3\x52\x9f\x1c\xb3\x2c\x5c\xec";
-
-	/* convert it to key */
-	key = ioctl(cfd, NCRIO_KEY_INIT);
-	if (key == -1) {
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	fprintf(stdout, "Tests on Hashes of Keys\n");
-
-	fprintf(stdout, "\t%s:\n", hash_vectors[0].algorithm);
-	algo_size = strlen(hash_vectors[0].algorithm) + 1;
-	/* import key */
-	memset(&kimport.f, 0, sizeof(kimport.f));
-	kimport.f.key = key;
-	kimport.f.data = hash_vectors[0].plaintext;
-	kimport.f.data_size = hash_vectors[0].plaintext_size;
-	kimport.id_head.nla_len = NLA_HDRLEN + sizeof(kimport.id);
-	kimport.id_head.nla_type = NCR_ATTR_KEY_ID;
-	kimport.id[0] = 'a';
-	kimport.id[1] = 'b';
-	kimport.type_head.nla_len = NLA_HDRLEN + sizeof(kimport.type);
-	kimport.type_head.nla_type = NCR_ATTR_KEY_TYPE;
-	kimport.type = NCR_KEY_TYPE_SECRET;
-	kimport.flags_head.nla_len = NLA_HDRLEN + sizeof(kimport.flags);
-	kimport.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-	kimport.flags = NCR_KEY_FLAG_EXPORTABLE | NCR_KEY_FLAG_HASHABLE;
-	kimport.algo_head.nla_len = NLA_HDRLEN + algo_size;
-	kimport.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	memcpy(kimport.algo, hash_vectors[0].algorithm, algo_size);
-	kimport.f.input_size = kimport.algo + algo_size - (char *)&kimport;
-	if (ioctl(cfd, NCRIO_KEY_IMPORT, &kimport)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_IMPORT)");
-		return 1;
-	}
-
-	memset(&op_init.f, 0, sizeof(op_init.f));
-	op_init.f.op = hash_vectors[0].op;
-	op_init.algo_head.nla_len = NLA_HDRLEN + algo_size;
-	op_init.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	memcpy(op_init.algo, hash_vectors[0].algorithm, algo_size);
-	op_init.f.input_size = op_init.algo + algo_size - (char *)&op_init;
-
-	ses = ioctl(cfd, NCRIO_SESSION_INIT, &op_init);
-	if (ses < 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_SESSION_INIT)");
-		return 1;
-	}
-
-	memset(&op_up_data.f, 0, sizeof(op_up_data.f));
-	op_up_data.f.input_size = sizeof(op_up_data);
-	op_up_data.f.ses = ses;
-	op_up_data.data_head.nla_len = NLA_HDRLEN + sizeof(op_up_data.data);
-	op_up_data.data_head.nla_type = NCR_ATTR_UPDATE_INPUT_DATA;
-	op_up_data.data.data = hash_vectors[0].plaintext;
-	op_up_data.data.data_size = hash_vectors[0].plaintext_size;
-
-	if (ioctl(cfd, NCRIO_SESSION_UPDATE, &op_up_data)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_SESSION_UPDATE)");
-		return 1;
-	}
-
-	memset(&op_up_key.f, 0, sizeof(op_up_key.f));
-	op_up_key.f.input_size = sizeof(op_up_key);
-	op_up_key.f.ses = ses;
-	op_up_key.key_head.nla_len = NLA_HDRLEN + sizeof(op_up_key.key);
-	op_up_key.key_head.nla_type = NCR_ATTR_UPDATE_INPUT_KEY_AS_DATA;
-	op_up_key.key = key;
-
-	if (ioctl(cfd, NCRIO_SESSION_UPDATE, &op_up_key)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_SESSION_UPDATE)");
-		return 1;
-	}
-
-	memset(&op_final.f, 0, sizeof(op_final.f));
-	op_final.f.input_size = sizeof(op_final);
-	op_final.f.ses = ses;
-	op_final.output_head.nla_len = NLA_HDRLEN + sizeof(op_final.output);
-	op_final.output_head.nla_type = NCR_ATTR_FINAL_OUTPUT_BUFFER;
-	op_final.output.buffer = data;
-	op_final.output.buffer_size = sizeof(data);
-	op_final.output.result_size_ptr = &data_size;
-
-	if (ioctl(cfd, NCRIO_SESSION_FINAL, &op_final)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_SESSION_FINAL)");
-		return 1;
-	}
-
-	if (data_size != hash_vectors[0].output_size ||
-	    memcmp(data, output, hash_vectors[0].output_size) != 0) {
-		fprintf(stderr, "HASH test vector %d failed!\n", 0);
-
-		fprintf(stderr, "Output[%d]: ", (int)data_size);
-		for (j = 0; j < data_size; j++)
-			fprintf(stderr, "%.2x:", (int)data[j]);
-		fprintf(stderr, "\n");
-
-		fprintf(stderr, "Expected[%d]: ", hash_vectors[0].output_size);
-		for (j = 0; j < hash_vectors[0].output_size; j++)
-			fprintf(stderr, "%.2x:", (int)output[j]);
-		fprintf(stderr, "\n");
-		return 1;
-	}
-
-	fprintf(stdout, "\n");
-
-	return 0;
-
-}
-
-int main()
-{
-	int fd = -1;
-
-	/* Open the crypto device */
-	fd = open("/dev/crypto", O_RDWR, 0);
-	if (fd < 0) {
-		perror("open(/dev/crypto)");
-		return 1;
-	}
-
-	if (test_ncr_key(fd))
-		return 1;
-
-	if (test_ncr_aes(fd))
-		return 1;
-
-	if (test_ncr_hash(fd))
-		return 1;
-
-	if (test_ncr_hash_clone(fd))
-		return 1;
-
-	if (test_ncr_hash_key(fd))
-		return 1;
-
-	if (test_ncr_wrap_key(fd))
-		return 1;
-
-	if (test_ncr_wrap_key2(fd))
-		return 1;
-
-	if (test_ncr_store_wrap_key(fd))
-		return 1;
-
-	/* Close the original descriptor */
-	if (close(fd)) {
-		perror("close(fd)");
-		return 1;
-	}
-
-	return 0;
-}
diff --git a/examples/pk.c b/examples/pk.c
deleted file mode 100644
index b2cae68..0000000
--- a/examples/pk.c
+++ /dev/null
@@ -1,1725 +0,0 @@
-/*
- * Demo on how to use /dev/crypto device for HMAC.
- *
- * Placed under public domain.
- *
- */
-#include <assert.h>
-#include <stdint.h>
-#include <stdio.h>
-#include <string.h>
-#include <unistd.h>
-#include <fcntl.h>
-#include <time.h>
-#include <sys/ioctl.h>
-#include <sys/socket.h>
-#include <sys/types.h>
-#include <sys/stat.h>
-#include <linux/netlink.h>
-#include "../ncr.h"
-#include <stdlib.h>
-#include <gnutls/gnutls.h>
-#include <gnutls/x509.h>
-#if GNUTLS_VERSION_NUMBER >= 0x020b00
-# include <gnutls/abstract.h>
-#endif
-
-#define DATA_SIZE 4096
-
-#define ALIGN_NL __attribute__((aligned(NLA_ALIGNTO)))
-
-#define SIGNATURE_HASH "sha1"
-#define SIGNATURE_HASH_SIZE 20
-
-#define ALG_AES_CBC "cbc(aes)"
-#define ALG_DH "dh"
-#define ALG_DSA "dsa"
-#define ALG_RSA "rsa"
-
-static void print_hex_datum(gnutls_datum_t * dat)
-{
-	unsigned int j;
-#define SPACE "\t"
-	fprintf(stdout, "\n" SPACE);
-	for (j = 0; j < dat->size; j++) {
-		fprintf(stdout, "%.2x:", (unsigned char)dat->data[j]);
-		if ((j + 1) % 15 == 0)
-			fprintf(stdout, "\n" SPACE);
-	}
-	fprintf(stdout, "\n");
-}
-
-static void
-print_dsa_pkey(gnutls_datum_t * x, gnutls_datum_t * y, gnutls_datum_t * p,
-	       gnutls_datum_t * q, gnutls_datum_t * g)
-{
-	if (x) {
-		fprintf(stdout, "private key:");
-		print_hex_datum(x);
-	}
-	fprintf(stdout, "public key:");
-	print_hex_datum(y);
-	fprintf(stdout, "p:");
-	print_hex_datum(p);
-	fprintf(stdout, "q:");
-	print_hex_datum(q);
-	fprintf(stdout, "g:");
-	print_hex_datum(g);
-}
-
-static void
-print_rsa_pkey(gnutls_datum_t * m, gnutls_datum_t * e, gnutls_datum_t * d,
-	       gnutls_datum_t * p, gnutls_datum_t * q, gnutls_datum_t * u,
-	       gnutls_datum_t * exp1, gnutls_datum_t * exp2)
-{
-	fprintf(stdout, "modulus:");
-	print_hex_datum(m);
-	fprintf(stdout, "public exponent:");
-	print_hex_datum(e);
-	if (d) {
-		fprintf(stdout, "private exponent:");
-		print_hex_datum(d);
-		fprintf(stdout, "prime1:");
-		print_hex_datum(p);
-		fprintf(stdout, "prime2:");
-		print_hex_datum(q);
-		fprintf(stdout, "coefficient:");
-		print_hex_datum(u);
-		if (exp1 && exp2) {
-			fprintf(stdout, "exp1:");
-			print_hex_datum(exp1);
-			fprintf(stdout, "exp2:");
-			print_hex_datum(exp2);
-		}
-	}
-}
-
-static const char *raw_to_string(const unsigned char *raw, size_t raw_size)
-{
-	static char buf[1024];
-	size_t i;
-	if (raw_size == 0)
-		return NULL;
-
-	if (raw_size * 3 + 1 >= sizeof(buf))
-		return NULL;
-
-	for (i = 0; i < raw_size; i++) {
-		sprintf(&(buf[i * 3]), "%02X%s", raw[i],
-			(i == raw_size - 1) ? "" : ":");
-	}
-	buf[sizeof(buf) - 1] = '\0';
-
-	return buf;
-}
-
-int privkey_info(void *data, int data_size, int verbose)
-{
-	gnutls_x509_privkey_t key;
-	size_t size;
-	int ret;
-	gnutls_datum_t der;
-	unsigned char buffer[5 * 1024];
-	const char *cprint;
-
-	ret = gnutls_x509_privkey_init(&key);
-	if (ret < 0) {
-		fprintf(stderr, "error in privkey_init\n");
-		return 1;
-	}
-
-	der.data = data;
-	der.size = data_size;
-
-	ret = gnutls_x509_privkey_import(key, &der, GNUTLS_X509_FMT_DER);
-	if (ret < 0) {
-		fprintf(stderr, "unable to import privkey\n");
-		return 1;
-	}
-
-	if (verbose > 0) {
-		/* Public key algorithm
-		 */
-		fprintf(stdout, "Public Key Info:\n");
-		ret = gnutls_x509_privkey_get_pk_algorithm(key);
-
-		fprintf(stdout, "\tPublic Key Algorithm: ");
-		cprint = gnutls_pk_algorithm_get_name(ret);
-		fprintf(stdout, "%s\n", cprint ? cprint : "Unknown");
-
-		/* Print the raw public and private keys
-		 */
-		if (ret == GNUTLS_PK_RSA) {
-			gnutls_datum_t m, e, d, p, q, u, exp1 = { NULL, 0 }
-			, exp2 = {
-			NULL, 0};
-
-#if GNUTLS_VERSION_NUMBER >= 0x020b00
-			ret =
-			    gnutls_x509_privkey_export_rsa_raw2(key, &m, &e, &d,
-								&p, &q, &u,
-								&exp1, &exp2);
-#else
-			ret =
-			    gnutls_x509_privkey_export_rsa_raw(key, &m, &e, &d,
-							       &p, &q, &u);
-#endif
-			if (ret < 0)
-				fprintf(stderr,
-					"Error in key RSA data export: %s\n",
-					gnutls_strerror(ret));
-			else {
-				print_rsa_pkey(&m, &e, &d, &p, &q, &u, &exp1,
-					       &exp2);
-				gnutls_free(m.data);
-				gnutls_free(e.data);
-				gnutls_free(d.data);
-				gnutls_free(p.data);
-				gnutls_free(q.data);
-				gnutls_free(u.data);
-				gnutls_free(exp1.data);
-				gnutls_free(exp2.data);
-			}
-		} else if (ret == GNUTLS_PK_DSA) {
-			gnutls_datum_t p, q, g, y, x;
-
-			ret =
-			    gnutls_x509_privkey_export_dsa_raw(key, &p, &q, &g,
-							       &y, &x);
-			if (ret < 0)
-				fprintf(stderr,
-					"Error in key DSA data export: %s\n",
-					gnutls_strerror(ret));
-			else {
-				print_dsa_pkey(&x, &y, &p, &q, &g);
-				gnutls_free(x.data);
-				gnutls_free(y.data);
-				gnutls_free(p.data);
-				gnutls_free(q.data);
-				gnutls_free(g.data);
-			}
-		}
-
-		fprintf(stdout, "\n");
-
-		size = sizeof(buffer);
-		if ((ret =
-		     gnutls_x509_privkey_get_key_id(key, 0, buffer,
-						    &size)) < 0) {
-			fprintf(stderr, "Error in key id calculation: %s\n",
-				gnutls_strerror(ret));
-		} else {
-			fprintf(stdout, "Public Key ID: %s\n",
-				raw_to_string(buffer, size));
-		}
-
-		size = sizeof(buffer);
-		ret =
-		    gnutls_x509_privkey_export(key, GNUTLS_X509_FMT_PEM, buffer,
-					       &size);
-		if (ret < 0) {
-			fprintf(stderr, "Error in privkey_export\n");
-			return 1;
-		}
-
-		fprintf(stdout, "\n%s\n", buffer);
-	}
-
-	gnutls_x509_privkey_deinit(key);
-
-	return 0;
-}
-
-int pubkey_info(void *data, int data_size, int verbose)
-{
-#if GNUTLS_VERSION_NUMBER >= 0x020b00
-	gnutls_pubkey_t key;
-	size_t size;
-	int ret;
-	gnutls_datum_t der;
-	unsigned char buffer[5 * 1024];
-	const char *cprint;
-
-	ret = gnutls_pubkey_init(&key);
-	if (ret < 0) {
-		fprintf(stderr, "error in pubkey_init\n");
-		return 1;
-	}
-
-	der.data = data;
-	der.size = data_size;
-
-	ret = gnutls_pubkey_import(key, &der, GNUTLS_X509_FMT_DER);
-	if (ret < 0) {
-		fprintf(stderr, "unable to import pubkey\n");
-		return 1;
-	}
-
-	if (verbose > 0) {
-		/* Public key algorithm
-		 */
-		fprintf(stdout, "Public Key Info:\n");
-		ret = gnutls_pubkey_get_pk_algorithm(key, NULL);
-
-		fprintf(stdout, "\tPublic Key Algorithm: ");
-		cprint = gnutls_pk_algorithm_get_name(ret);
-		fprintf(stdout, "%s\n", cprint ? cprint : "Unknown");
-
-		/* Print the raw public and private keys
-		 */
-		if (ret == GNUTLS_PK_RSA) {
-			gnutls_datum_t m, e;
-
-			ret = gnutls_pubkey_get_pk_rsa_raw(key, &m, &e);
-			if (ret < 0)
-				fprintf(stderr,
-					"Error in key RSA data export: %s\n",
-					gnutls_strerror(ret));
-			else {
-				print_rsa_pkey(&m, &e, NULL, NULL, NULL, NULL,
-					       NULL, NULL);
-				gnutls_free(m.data);
-				gnutls_free(e.data);
-			}
-		} else if (ret == GNUTLS_PK_DSA) {
-			gnutls_datum_t p, q, g, y;
-
-			ret = gnutls_pubkey_get_pk_dsa_raw(key, &p, &q, &g, &y);
-			if (ret < 0)
-				fprintf(stderr,
-					"Error in key DSA data export: %s\n",
-					gnutls_strerror(ret));
-			else {
-				print_dsa_pkey(NULL, &y, &p, &q, &g);
-				gnutls_free(y.data);
-				gnutls_free(p.data);
-				gnutls_free(q.data);
-				gnutls_free(g.data);
-			}
-		}
-
-		fprintf(stdout, "\n");
-
-		size = sizeof(buffer);
-		if ((ret = gnutls_pubkey_get_key_id(key, 0, buffer, &size)) < 0) {
-			fprintf(stderr, "Error in key id calculation: %s\n",
-				gnutls_strerror(ret));
-		} else {
-			fprintf(stdout, "Public Key ID: %s\n",
-				raw_to_string(buffer, size));
-		}
-
-		size = sizeof(buffer);
-		ret =
-		    gnutls_pubkey_export(key, GNUTLS_X509_FMT_PEM, buffer,
-					 &size);
-		if (ret < 0) {
-			fprintf(stderr, "Error in privkey_export\n");
-			return 1;
-		}
-
-		fprintf(stdout, "\n%s\n", buffer);
-	}
-
-	gnutls_pubkey_deinit(key);
-#endif
-	return 0;
-}
-
-/* Diffie Hellman */
-const char dh_params_txt[] = "-----BEGIN DH PARAMETERS-----\n"
-    "MIGHAoGBAKMox0/IjuGqSaGMJESYMhdmXiTe1pY8gkSzWZ/ktWaUdaYAzgAZp7r3\n"
-    "OCh68YslS9Oi7/UQjmBbgGuOucMKgq3tYeYzY8G2epIuIzM4TAogaEqwkdSrXlth\n"
-    "MMsP2FhLhHg8m6V6iItitnMOz9r8t3BEf04GRlfzgZraM0gUUwTjAgEF\n"
-    "-----END DH PARAMETERS-----\n";
-
-static int test_ncr_dh(int cfd)
-{
-	struct __attribute__ ((packed)) {
-		struct ncr_key_generate_pair f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(ALG_DH)] ALIGN_NL;
-		struct nlattr flags_head ALIGN_NL;
-		uint32_t flags ALIGN_NL;
-		unsigned char buffer[DATA_SIZE] ALIGN_NL;
-	} kgen;
-	struct nlattr *nla;
-	ncr_key_t private1, public1, public2, private2;
-	ncr_key_t z1, z2;
-	int ret, j;
-	gnutls_datum g, p, params;
-	gnutls_dh_params_t dhp;
-	unsigned char y1[1024], y2[1024];
-	ssize_t y1_size, y2_size;
-	struct ncr_key_export kexport;
-	struct __attribute__ ((packed)) {
-		struct ncr_key_derive f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(NCR_DERIVE_DH)] ALIGN_NL;
-		struct nlattr flags_head ALIGN_NL;
-		uint32_t flags ALIGN_NL;
-		struct nlattr public_head ALIGN_NL;
-		unsigned char public[DATA_SIZE] ALIGN_NL;
-	} kderive;
-
-	fprintf(stdout, "Tests on DH key exchange:");
-	fflush(stdout);
-
-	params.data = (void *)dh_params_txt;
-	params.size = sizeof(dh_params_txt) - 1;
-
-	ret = gnutls_dh_params_init(&dhp);
-	if (ret < 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		fprintf(stderr, "gnutls: %s\n", gnutls_strerror(ret));
-		return 1;
-	}
-
-	ret = gnutls_dh_params_import_pkcs3(dhp, &params, GNUTLS_X509_FMT_PEM);
-	if (ret < 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		fprintf(stderr, "gnutls: %s\n", gnutls_strerror(ret));
-		return 1;
-	}
-
-	ret = gnutls_dh_params_export_raw(dhp, &p, &g, NULL);
-	if (ret < 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		fprintf(stderr, "gnutls: %s\n", gnutls_strerror(ret));
-		return 1;
-	}
-
-	for (j = 0; j < 100; j++) {
-		/* generate a DH key */
-		private1 = ioctl(cfd, NCRIO_KEY_INIT);
-		if (private1 == -1) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_KEY_INIT)");
-			return 1;
-		}
-
-		public1 = ioctl(cfd, NCRIO_KEY_INIT);
-		if (public1 == -1) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_KEY_INIT)");
-			return 1;
-		}
-
-		memset(&kgen.f, 0, sizeof(kgen.f));
-		kgen.f.private_key = private1;
-		kgen.f.public_key = public1;
-		kgen.algo_head.nla_len = NLA_HDRLEN + sizeof(kgen.algo);
-		kgen.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-		strcpy(kgen.algo, ALG_DH);
-		kgen.flags_head.nla_len = NLA_HDRLEN + sizeof(kgen.flags);
-		kgen.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-		kgen.flags = NCR_KEY_FLAG_EXPORTABLE;
-		nla = (struct nlattr *)kgen.buffer;
-		nla->nla_len = NLA_HDRLEN + p.size;
-		nla->nla_type = NCR_ATTR_DH_PRIME;
-		memcpy((char *)nla + NLA_HDRLEN, p.data, p.size);
-		nla = (struct nlattr *)((char *)nla + NLA_ALIGN(nla->nla_len));
-		nla->nla_len = NLA_HDRLEN + g.size;
-		nla->nla_type = NCR_ATTR_DH_BASE;
-		memcpy((char *)nla + NLA_HDRLEN, g.data, g.size);
-		nla = (struct nlattr *)((char *)nla + NLA_ALIGN(nla->nla_len));
-		kgen.f.input_size = (char *)nla - (char *)&kgen;
-		assert(kgen.f.input_size <= sizeof(kgen));
-
-		if (ioctl(cfd, NCRIO_KEY_GENERATE_PAIR, &kgen)) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_KEY_GENERATE_PAIR)");
-			return 1;
-		}
-
-		/* generate another DH key */
-		private2 = ioctl(cfd, NCRIO_KEY_INIT);
-		if (private2 == -1) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_KEY_INIT)");
-			return 1;
-		}
-
-		public2 = ioctl(cfd, NCRIO_KEY_INIT);
-		if (public2 == -1) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_KEY_INIT)");
-			return 1;
-		}
-
-		memset(&kgen.f, 0, sizeof(kgen.f));
-		kgen.f.private_key = private2;
-		kgen.f.public_key = public2;
-		kgen.algo_head.nla_len = NLA_HDRLEN + sizeof(kgen.algo);
-		kgen.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-		strcpy(kgen.algo, ALG_DH);
-		kgen.flags_head.nla_len = NLA_HDRLEN + sizeof(kgen.flags);
-		kgen.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-		kgen.flags = NCR_KEY_FLAG_EXPORTABLE;
-		nla = (struct nlattr *)kgen.buffer;
-		nla->nla_len = NLA_HDRLEN + p.size;
-		nla->nla_type = NCR_ATTR_DH_PRIME;
-		memcpy((char *)nla + NLA_HDRLEN, p.data, p.size);
-		nla = (struct nlattr *)((char *)nla + NLA_ALIGN(nla->nla_len));
-		nla->nla_len = NLA_HDRLEN + g.size;
-		nla->nla_type = NCR_ATTR_DH_BASE;
-		memcpy((char *)nla + NLA_HDRLEN, g.data, g.size);
-		nla = (struct nlattr *)((char *)nla + NLA_ALIGN(nla->nla_len));
-		kgen.f.input_size = (char *)nla - (char *)&kgen;
-		assert(kgen.f.input_size <= sizeof(kgen));
-
-		if (ioctl(cfd, NCRIO_KEY_GENERATE_PAIR, &kgen)) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_KEY_GENERATE_PAIR)");
-			return 1;
-		}
-
-		/* export y1=g^x1 */
-		memset(&kexport, 0, sizeof(kexport));
-		kexport.key = public1;
-		kexport.buffer = y1;
-		kexport.buffer_size = sizeof(y1);
-
-		y1_size = ioctl(cfd, NCRIO_KEY_EXPORT, &kexport);
-		if (y1_size < 0) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_KEY_EXPORT)");
-			return 1;
-		}
-
-		/* export y2=g^x2 */
-		memset(&kexport, 0, sizeof(kexport));
-		kexport.key = public2;
-		kexport.buffer = y2;
-		kexport.buffer_size = sizeof(y2);
-
-		y2_size = ioctl(cfd, NCRIO_KEY_EXPORT, &kexport);
-		if (y2_size < 0) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_KEY_EXPORT)");
-			return 1;
-		}
-
-		/* z1=y1^x2 */
-		z1 = ioctl(cfd, NCRIO_KEY_INIT);
-		if (z1 == -1) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_KEY_INIT)");
-			return 1;
-		}
-
-		memset(&kderive.f, 0, sizeof(kderive.f));
-		kderive.f.input_key = private1;
-		kderive.f.new_key = z1;
-		kderive.algo_head.nla_len = NLA_HDRLEN + sizeof(kderive.algo);
-		kderive.algo_head.nla_type = NCR_ATTR_DERIVATION_ALGORITHM;
-		strcpy(kderive.algo, NCR_DERIVE_DH);
-		kderive.flags_head.nla_len = NLA_HDRLEN + sizeof(kderive.flags);
-		kderive.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-		kderive.flags = NCR_KEY_FLAG_EXPORTABLE;
-		kderive.public_head.nla_len = NLA_HDRLEN + y2_size;
-		kderive.public_head.nla_type = NCR_ATTR_DH_PUBLIC;
-		memcpy(kderive.public, y2, y2_size);
-		nla = (struct nlattr *)((char *)&kderive.public_head
-					+
-					NLA_ALIGN(kderive.public_head.nla_len));
-		kderive.f.input_size = (char *)nla - (char *)&kderive;
-		assert(kderive.f.input_size <= sizeof(kderive));
-
-		if (ioctl(cfd, NCRIO_KEY_DERIVE, &kderive)) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_KEY_DERIVE)");
-			return 1;
-		}
-
-		/* z2=y2^x1 */
-		z2 = ioctl(cfd, NCRIO_KEY_INIT);
-		if (z2 == -1) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_KEY_INIT)");
-			return 1;
-		}
-
-		memset(&kderive.f, 0, sizeof(kderive.f));
-		kderive.f.input_key = private2;
-		kderive.f.new_key = z2;
-		kderive.algo_head.nla_len = NLA_HDRLEN + sizeof(kderive.algo);
-		kderive.algo_head.nla_type = NCR_ATTR_DERIVATION_ALGORITHM;
-		strcpy(kderive.algo, NCR_DERIVE_DH);
-		kderive.flags_head.nla_len = NLA_HDRLEN + sizeof(kderive.flags);
-		kderive.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-		kderive.flags = NCR_KEY_FLAG_EXPORTABLE;
-		kderive.public_head.nla_len = NLA_HDRLEN + y1_size;
-		kderive.public_head.nla_type = NCR_ATTR_DH_PUBLIC;
-		memcpy(kderive.public, y1, y1_size);
-		nla = (struct nlattr *)((char *)&kderive.public_head
-					+
-					NLA_ALIGN(kderive.public_head.nla_len));
-		kderive.f.input_size = (char *)nla - (char *)&kderive;
-		assert(kderive.f.input_size <= sizeof(kderive));
-
-		if (ioctl(cfd, NCRIO_KEY_DERIVE, &kderive)) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_KEY_DERIVE)");
-			return 1;
-		}
-
-		/* z1==z2 */
-		memset(&kexport, 0, sizeof(kexport));
-		kexport.key = z1;
-		kexport.buffer = y1;
-		kexport.buffer_size = sizeof(y1);
-
-		y1_size = ioctl(cfd, NCRIO_KEY_EXPORT, &kexport);
-		if (y1_size < 0) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_KEY_EXPORT)");
-			return 1;
-		}
-
-		memset(&kexport, 0, sizeof(kexport));
-		kexport.key = z2;
-		kexport.buffer = y2;
-		kexport.buffer_size = sizeof(y2);
-
-		y2_size = ioctl(cfd, NCRIO_KEY_EXPORT, &kexport);
-		if (y2_size < 0) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_KEY_EXPORT)");
-			return 1;
-		}
-
-		if (y1_size == 0 || y1_size != y2_size
-		    || memcmp(y1, y2, y1_size) != 0) {
-			int i;
-
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			fprintf(stderr,
-				"Output in DH does not match (%d, %d)!\n",
-				(int)y1_size, (int)y2_size);
-
-			fprintf(stderr, "Key1[%d]: ", (int)y1_size);
-			for (i = 0; i < y1_size; i++)
-				fprintf(stderr, "%.2x:", y1[i]);
-			fprintf(stderr, "\n");
-
-			fprintf(stderr, "Key2[%d]: ", (int)y2_size);
-			for (i = 0; i < y2_size; i++)
-				fprintf(stderr, "%.2x:", y2[i]);
-			fprintf(stderr, "\n");
-
-			return 1;
-		}
-
-		if (ioctl(cfd, NCRIO_KEY_DEINIT, &private1)) {
-			perror("ioctl(NCRIO_KEY_DEINIT)");
-			return 1;
-		}
-		if (ioctl(cfd, NCRIO_KEY_DEINIT, &public1)) {
-			perror("ioctl(NCRIO_KEY_DEINIT)");
-			return 1;
-		}
-		if (ioctl(cfd, NCRIO_KEY_DEINIT, &private2)) {
-			perror("ioctl(NCRIO_KEY_DEINIT)");
-			return 1;
-		}
-		if (ioctl(cfd, NCRIO_KEY_DEINIT, &public2)) {
-			perror("ioctl(NCRIO_KEY_DEINIT)");
-			return 1;
-		}
-		if (ioctl(cfd, NCRIO_KEY_DEINIT, &z1)) {
-			perror("ioctl(NCRIO_KEY_DEINIT)");
-			return 1;
-		}
-		if (ioctl(cfd, NCRIO_KEY_DEINIT, &z2)) {
-			perror("ioctl(NCRIO_KEY_DEINIT)");
-			return 1;
-		}
-	}
-
-	fprintf(stdout, " Success\n");
-
-	return 0;
-}
-
-/* check whether wrapping of long keys is not allowed with
- * shorted wrapping keys */
-static int test_ncr_wrap_key3(int cfd)
-{
-	int ret, i;
-	ncr_key_t key;
-	size_t data_size;
-	struct __attribute__ ((packed)) {
-		struct ncr_key_import f;
-		struct nlattr id_head ALIGN_NL;
-		uint8_t id[2] ALIGN_NL;
-		struct nlattr type_head ALIGN_NL;
-		uint32_t type ALIGN_NL;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(ALG_AES_CBC)] ALIGN_NL;
-		struct nlattr flags_head ALIGN_NL;
-		uint32_t flags ALIGN_NL;
-	} kimport;
-	struct __attribute__ ((packed)) {
-		struct ncr_key_wrap f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(NCR_WALG_AES_RFC5649)] ALIGN_NL;
-	}
-	kwrap;
-	struct __attribute__ ((packed)) {
-		struct ncr_key_unwrap f;
-		struct nlattr wrap_algo_head ALIGN_NL;
-		char wrap_algo[sizeof(NCR_WALG_AES_RFC5649)] ALIGN_NL;
-		struct nlattr flags_head ALIGN_NL;
-		uint32_t flags ALIGN_NL;
-	} kunwrap;
-	struct __attribute__ ((packed)) {
-		struct ncr_key_generate_pair f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(ALG_RSA)] ALIGN_NL;
-		struct nlattr flags_head ALIGN_NL;
-		uint32_t flags ALIGN_NL;
-		struct nlattr bits_head ALIGN_NL;
-		uint32_t bits ALIGN_NL;
-	} kgen;
-	ncr_key_t pubkey, privkey;
-	uint8_t data[DATA_SIZE];
-	/* only the first two should be allowed to be wrapped.
-	 * the latter shouldn't because it has security level larger
-	 * then 128 bits (the size of the wrapping key).
-	 */
-	const int sizes[] = { 1024, 3248, 5200 };
-
-	fprintf(stdout, "Tests on key wrapping (might take long): ");
-	fflush(stdout);
-
-	/* convert it to key */
-	privkey = ioctl(cfd, NCRIO_KEY_INIT);
-	if (privkey == -1) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	pubkey = ioctl(cfd, NCRIO_KEY_INIT);
-	if (pubkey == -1) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	if (geteuid() != 0) {
-		/* cannot test further */
-		fprintf(stdout,
-			"\t(Wrapping test not completed. Run as root)\n");
-		return 0;
-	}
-
-	/* make a wrapping key */
-	key = ioctl(cfd, NCRIO_KEY_INIT);
-	if (key == -1) {
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	memset(&kimport.f, 0, sizeof(kimport.f));
-	kimport.f.input_size = sizeof(kimport);
-	kimport.f.key = key;
-	kimport.f.data =
-	    "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F";
-	kimport.f.data_size = 16;
-	kimport.id_head.nla_len = NLA_HDRLEN + sizeof(kimport.id);
-	kimport.id_head.nla_type = NCR_ATTR_KEY_ID;
-	kimport.id[0] = 'a';
-	kimport.id[1] = 'b';
-	kimport.type_head.nla_len = NLA_HDRLEN + sizeof(kimport.type);
-	kimport.type_head.nla_type = NCR_ATTR_KEY_TYPE;
-	kimport.type = NCR_KEY_TYPE_SECRET;
-	kimport.algo_head.nla_len = NLA_HDRLEN + sizeof(kimport.algo);
-	kimport.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(kimport.algo, ALG_AES_CBC);
-	kimport.flags_head.nla_len = NLA_HDRLEN + sizeof(kimport.flags);
-	kimport.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-	kimport.flags =
-	    NCR_KEY_FLAG_EXPORTABLE | NCR_KEY_FLAG_WRAPPING |
-	    NCR_KEY_FLAG_UNWRAPPING;
-
-	if (ioctl(cfd, NCRIO_KEY_IMPORT, &kimport)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_IMPORT)");
-		return 1;
-	}
-
-	for (i = 0; i < sizeof(sizes) / sizeof(sizes[0]); i++) {
-
-		fprintf(stdout, ".");
-		fflush(stdout);
-
-		memset(&kgen.f, 0, sizeof(kgen.f));
-		kgen.f.input_size = sizeof(kgen);
-		kgen.f.private_key = privkey;
-		kgen.f.public_key = pubkey;
-		kgen.algo_head.nla_len = NLA_HDRLEN + sizeof(kgen.algo);
-		kgen.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-		strcpy(kgen.algo, ALG_RSA);
-		kgen.flags_head.nla_len = NLA_HDRLEN + sizeof(kgen.flags);
-		kgen.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-		kgen.flags = NCR_KEY_FLAG_EXPORTABLE | NCR_KEY_FLAG_WRAPPABLE;
-		kgen.bits_head.nla_len = NLA_HDRLEN + sizeof(kgen.bits);
-		kgen.bits_head.nla_type = NCR_ATTR_RSA_MODULUS_BITS;
-		kgen.bits = sizes[i];
-
-		if (ioctl(cfd, NCRIO_KEY_GENERATE_PAIR, &kgen)) {
-			fprintf(stderr, "Error[%d-%d]: %s:%d\n", i, sizes[i],
-				__func__, __LINE__);
-			perror("ioctl(NCRIO_KEY_GENERATE_PAIR)");
-			return 1;
-		}
-
-		/* now try wrapping key2 using key */
-		memset(&kwrap.f, 0, sizeof(kwrap.f));
-		kwrap.f.input_size = sizeof(kwrap);
-		kwrap.f.wrapping_key = key;
-		kwrap.f.source_key = pubkey;
-		kwrap.f.buffer = data;
-		kwrap.f.buffer_size = sizeof(data);
-		kwrap.algo_head.nla_len = NLA_HDRLEN + sizeof(kwrap.algo);
-		kwrap.algo_head.nla_type = NCR_ATTR_WRAPPING_ALGORITHM;
-		strcpy(kwrap.algo, NCR_WALG_AES_RFC5649);
-
-		ret = ioctl(cfd, NCRIO_KEY_WRAP, &kwrap);
-		if (ret < 0) {
-			fprintf(stderr, "Error[%d-%d]: %s:%d\n", i, sizes[i],
-				__func__, __LINE__);
-			/* wrapping of public key should have been allowed! */
-			return 1;
-		}
-
-		/* now try wrapping private using key */
-		memset(&kwrap.f, 0, sizeof(kwrap.f));
-		kwrap.f.input_size = sizeof(kwrap);
-		kwrap.f.wrapping_key = key;
-		kwrap.f.source_key = privkey;
-		kwrap.f.buffer = data;
-		kwrap.f.buffer_size = sizeof(data);
-		kwrap.algo_head.nla_len = NLA_HDRLEN + sizeof(kwrap.algo);
-		kwrap.algo_head.nla_type = NCR_ATTR_WRAPPING_ALGORITHM;
-		strcpy(kwrap.algo, NCR_WALG_AES_RFC5649);
-
-		ret = ioctl(cfd, NCRIO_KEY_WRAP, &kwrap);
-		if (ret < 0 && i != 2) {
-			fprintf(stderr, "Error[%d-%d]: %s:%d\n", i, sizes[i],
-				__func__, __LINE__);
-			/* wrapping should have been allowed */
-			return 1;
-		} else if (ret >= 0 && i == 2) {
-			fprintf(stderr, "Error[%d-%d]: %s:%d\n", i, sizes[i],
-				__func__, __LINE__);
-			/* wrapping shouldn't have been allowed */
-			return 1;
-		}
-
-		if (ret >= 0) {
-			data_size = ret;
-
-			/* try unwrapping */
-			memset(&kunwrap.f, 0, sizeof(kunwrap.f));
-			kunwrap.f.input_size = sizeof(kunwrap);
-			kunwrap.f.wrapping_key = key;
-			kunwrap.f.dest_key = privkey;
-			kunwrap.f.data = data;
-			kunwrap.f.data_size = data_size;
-			kunwrap.wrap_algo_head.nla_len
-			    = NLA_HDRLEN + sizeof(kunwrap.wrap_algo);
-			kunwrap.wrap_algo_head.nla_type
-			    = NCR_ATTR_WRAPPING_ALGORITHM;
-			strcpy(kunwrap.wrap_algo, NCR_WALG_AES_RFC5649);
-			kunwrap.flags_head.nla_len
-			    = NLA_HDRLEN + sizeof(kunwrap.flags);
-			kunwrap.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-			kunwrap.flags = 0;
-
-			ret = ioctl(cfd, NCRIO_KEY_UNWRAP, &kunwrap);
-			if (ret) {
-				fprintf(stderr, "Error[%d-%d]: %s:%d\n", i,
-					sizes[i], __func__, __LINE__);
-				return 1;
-			}
-		}
-		fprintf(stdout, "*");
-		fflush(stdout);
-
-	}
-
-	fprintf(stdout, " Success\n");
-	return 0;
-}
-
-#define RSA_ENCRYPT_SIZE 32
-
-static int rsa_key_encrypt(int cfd, ncr_key_t privkey, ncr_key_t pubkey,
-			   int oaep)
-{
-	struct __attribute__ ((packed)) {
-		struct ncr_session_once f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(ALG_RSA)] ALIGN_NL;
-		struct nlattr key_head ALIGN_NL;
-		uint32_t key ALIGN_NL;
-		struct nlattr rsa_head ALIGN_NL;
-		uint32_t rsa ALIGN_NL;
-		struct nlattr oaep_hash_head ALIGN_NL;
-		char oaep_hash[sizeof(SIGNATURE_HASH)] ALIGN_NL;
-		struct nlattr input_head ALIGN_NL;
-		struct ncr_session_input_data input ALIGN_NL;
-		struct nlattr output_head ALIGN_NL;
-		struct ncr_session_output_buffer output ALIGN_NL;
-	} op;
-	uint8_t data[DATA_SIZE];
-	uint8_t vdata[RSA_ENCRYPT_SIZE];
-	size_t enc_size, dec_size;
-
-	fprintf(stdout, "Tests on RSA (%s) key encryption:",
-		(oaep != 0) ? "OAEP" : "PKCS V1.5");
-	fflush(stdout);
-
-	memset(data, 0x3, sizeof(data));
-	memcpy(vdata, data, sizeof(vdata));
-
-	/* do encryption */
-	memset(&op.f, 0, sizeof(op.f));
-	op.f.input_size = sizeof(op);
-	op.f.op = NCR_OP_ENCRYPT;
-	op.algo_head.nla_len = NLA_HDRLEN + sizeof(op.algo);
-	op.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(op.algo, ALG_RSA);
-	op.key_head.nla_len = NLA_HDRLEN + sizeof(op.key);
-	op.key_head.nla_type = NCR_ATTR_KEY;
-	op.key = pubkey;
-	op.rsa_head.nla_len = NLA_HDRLEN + sizeof(op.rsa);
-	op.rsa_head.nla_type = NCR_ATTR_RSA_ENCODING_METHOD;
-	if (oaep) {
-		op.rsa = RSA_PKCS1_OAEP;
-	} else {
-		op.rsa = RSA_PKCS1_V1_5;
-	}
-	op.oaep_hash_head.nla_len = NLA_HDRLEN + sizeof(op.oaep_hash);
-	op.oaep_hash_head.nla_type = NCR_ATTR_RSA_OAEP_HASH_ALGORITHM;
-	strcpy(op.oaep_hash, SIGNATURE_HASH);	/* Ignored if not using OAEP */
-	op.input_head.nla_len = NLA_HDRLEN + sizeof(op.input);
-	op.input_head.nla_type = NCR_ATTR_UPDATE_INPUT_DATA;
-	op.input.data = data;
-	op.input.data_size = RSA_ENCRYPT_SIZE;
-	op.output_head.nla_len = NLA_HDRLEN + sizeof(op.output);
-	op.output_head.nla_type = NCR_ATTR_UPDATE_OUTPUT_BUFFER;
-	op.output.buffer = data;
-	op.output.buffer_size = sizeof(data);
-	op.output.result_size_ptr = &enc_size;
-
-	if (ioctl(cfd, NCRIO_SESSION_ONCE, &op)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_SESSION_ONCE)");
-		return 1;
-	}
-
-	/* decrypt data */
-	memset(&op.f, 0, sizeof(op.f));
-	op.f.input_size = sizeof(op);
-	op.f.op = NCR_OP_DECRYPT;
-	op.algo_head.nla_len = NLA_HDRLEN + sizeof(op.algo);
-	op.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(op.algo, ALG_RSA);
-	op.key_head.nla_len = NLA_HDRLEN + sizeof(op.key);
-	op.key_head.nla_type = NCR_ATTR_KEY;
-	op.key = privkey;
-	op.rsa_head.nla_len = NLA_HDRLEN + sizeof(op.rsa);
-	op.rsa_head.nla_type = NCR_ATTR_RSA_ENCODING_METHOD;
-	if (oaep) {
-		op.rsa = RSA_PKCS1_OAEP;
-	} else {
-		op.rsa = RSA_PKCS1_V1_5;
-	}
-	op.oaep_hash_head.nla_len = NLA_HDRLEN + sizeof(op.oaep_hash);
-	op.oaep_hash_head.nla_type = NCR_ATTR_RSA_OAEP_HASH_ALGORITHM;
-	strcpy(op.oaep_hash, SIGNATURE_HASH);	/* Ignored if not using OAEP */
-	op.input_head.nla_len = NLA_HDRLEN + sizeof(op.input);
-	op.input_head.nla_type = NCR_ATTR_UPDATE_INPUT_DATA;
-	op.input.data = data;
-	op.input.data_size = enc_size;
-	op.output_head.nla_len = NLA_HDRLEN + sizeof(op.output);
-	op.output_head.nla_type = NCR_ATTR_UPDATE_OUTPUT_BUFFER;
-	op.output.buffer = data;
-	op.output.buffer_size = sizeof(data);
-	op.output.result_size_ptr = &dec_size;
-
-	if (ioctl(cfd, NCRIO_SESSION_ONCE, &op)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_SESSION_ONCE)");
-		return 1;
-	}
-
-	if (dec_size != sizeof(vdata)
-	    || memcmp(vdata, data, sizeof(vdata)) != 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		fprintf(stderr, "Decrypted data do not match!\n");
-		return 1;
-	}
-
-	fprintf(stdout, " Success\n");
-
-	return 0;
-
-}
-
-#define DATA_TO_SIGN 52
-
-static int rsa_key_sign_verify(int cfd, ncr_key_t privkey, ncr_key_t pubkey,
-			       int pss)
-{
-	struct __attribute__ ((packed)) {
-		struct ncr_session_once f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(ALG_RSA)] ALIGN_NL;
-		struct nlattr key_head ALIGN_NL;
-		uint32_t key ALIGN_NL;
-		struct nlattr rsa_head ALIGN_NL;
-		uint32_t rsa ALIGN_NL;
-		struct nlattr sign_hash_head ALIGN_NL;
-		char sign_hash[sizeof(SIGNATURE_HASH)] ALIGN_NL;
-		struct nlattr input_head ALIGN_NL;
-		struct ncr_session_input_data input ALIGN_NL;
-		struct nlattr signature_head ALIGN_NL;
-		struct ncr_session_output_buffer signature ALIGN_NL;
-	} ksign;
-	struct __attribute__ ((packed)) {
-		struct ncr_session_once f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(ALG_RSA)] ALIGN_NL;
-		struct nlattr key_head ALIGN_NL;
-		uint32_t key ALIGN_NL;
-		struct nlattr rsa_head ALIGN_NL;
-		uint32_t rsa ALIGN_NL;
-		struct nlattr sign_hash_head ALIGN_NL;
-		char sign_hash[sizeof(SIGNATURE_HASH)] ALIGN_NL;
-		struct nlattr input_head ALIGN_NL;
-		struct ncr_session_input_data input ALIGN_NL;
-		struct nlattr signature_head ALIGN_NL;
-		struct ncr_session_input_data signature ALIGN_NL;
-	} kverify;
-	uint8_t data[DATA_SIZE];
-	uint8_t sig[DATA_SIZE];
-	size_t sig_size;
-	int ret;
-
-	fprintf(stdout, "Tests on RSA (%s) key signature:",
-		(pss != 0) ? "PSS" : "PKCS V1.5");
-	fflush(stdout);
-
-	memset(data, 0x3, sizeof(data));
-
-	/* sign data */
-	memset(&ksign.f, 0, sizeof(ksign.f));
-	ksign.f.input_size = sizeof(ksign);
-	ksign.f.op = NCR_OP_SIGN;
-	ksign.algo_head.nla_len = NLA_HDRLEN + sizeof(ksign.algo);
-	ksign.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(ksign.algo, ALG_RSA);
-	ksign.key_head.nla_len = NLA_HDRLEN + sizeof(ksign.key);
-	ksign.key_head.nla_type = NCR_ATTR_KEY;
-	ksign.key = privkey;
-	ksign.rsa_head.nla_len = NLA_HDRLEN + sizeof(ksign.rsa);
-	ksign.rsa_head.nla_type = NCR_ATTR_RSA_ENCODING_METHOD;
-	ksign.rsa = (pss != 0) ? RSA_PKCS1_PSS : RSA_PKCS1_V1_5;
-	ksign.sign_hash_head.nla_len = NLA_HDRLEN + sizeof(ksign.sign_hash);
-	ksign.sign_hash_head.nla_type = NCR_ATTR_SIGNATURE_HASH_ALGORITHM;
-	strcpy(ksign.sign_hash, SIGNATURE_HASH);
-	ksign.input_head.nla_len = NLA_HDRLEN + sizeof(ksign.input);
-	ksign.input_head.nla_type = NCR_ATTR_UPDATE_INPUT_DATA;
-	ksign.input.data = data;
-	ksign.input.data_size = DATA_TO_SIGN;
-	ksign.signature_head.nla_len = NLA_HDRLEN + sizeof(ksign.signature);
-	ksign.signature_head.nla_type = NCR_ATTR_FINAL_OUTPUT_BUFFER;
-	ksign.signature.buffer = sig;
-	ksign.signature.buffer_size = sizeof(sig);
-	ksign.signature.result_size_ptr = &sig_size;
-
-	if (ioctl(cfd, NCRIO_SESSION_ONCE, &ksign)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_SESSION_ONCE)");
-		return 1;
-	}
-
-	/* verify signature */
-	memset(data, 0x3, sizeof(data));
-
-	memset(&kverify.f, 0, sizeof(kverify.f));
-	kverify.f.input_size = sizeof(kverify);
-	kverify.f.op = NCR_OP_VERIFY;
-	kverify.algo_head.nla_len = NLA_HDRLEN + sizeof(kverify.algo);
-	kverify.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(kverify.algo, ALG_RSA);
-	kverify.key_head.nla_len = NLA_HDRLEN + sizeof(kverify.key);
-	kverify.key_head.nla_type = NCR_ATTR_KEY;
-	kverify.key = pubkey;
-	kverify.rsa_head.nla_len = NLA_HDRLEN + sizeof(kverify.rsa);
-	kverify.rsa_head.nla_type = NCR_ATTR_RSA_ENCODING_METHOD;
-	kverify.rsa = (pss != 0) ? RSA_PKCS1_PSS : RSA_PKCS1_V1_5;
-	kverify.sign_hash_head.nla_len = NLA_HDRLEN + sizeof(kverify.sign_hash);
-	kverify.sign_hash_head.nla_type = NCR_ATTR_SIGNATURE_HASH_ALGORITHM;
-	strcpy(kverify.sign_hash, SIGNATURE_HASH);
-	kverify.input_head.nla_len = NLA_HDRLEN + sizeof(kverify.input);
-	kverify.input_head.nla_type = NCR_ATTR_UPDATE_INPUT_DATA;
-	kverify.input.data = data;
-	kverify.input.data_size = DATA_TO_SIGN;
-	kverify.signature_head.nla_len = NLA_HDRLEN + sizeof(kverify.signature);
-	kverify.signature_head.nla_type = NCR_ATTR_FINAL_INPUT_DATA;
-	kverify.signature.data = sig;
-	kverify.signature.data_size = sig_size;
-
-	ret = ioctl(cfd, NCRIO_SESSION_ONCE, &kverify);
-	if (ret < 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_SESSION_ONCE)");
-		return 1;
-	}
-
-	if (ret)
-		fprintf(stdout, " Success\n");
-	else {
-		fprintf(stdout, " Verification Failed!\n");
-		return 1;
-	}
-
-	return 0;
-
-}
-
-static int rsa_key_sign_verify_transparent(int cfd, ncr_key_t privkey,
-					   ncr_key_t pubkey, int pss)
-{
-	struct __attribute__ ((packed)) {
-		struct ncr_session_once f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(NCR_ALG_RSA_TRANSPARENT_HASH)] ALIGN_NL;
-		struct nlattr key_head ALIGN_NL;
-		uint32_t key ALIGN_NL;
-		struct nlattr rsa_head ALIGN_NL;
-		uint32_t rsa ALIGN_NL;
-		struct nlattr sign_hash_head ALIGN_NL;
-		char sign_hash[sizeof(SIGNATURE_HASH)] ALIGN_NL;
-		struct nlattr input_head ALIGN_NL;
-		struct ncr_session_input_data input ALIGN_NL;
-		struct nlattr signature_head ALIGN_NL;
-		struct ncr_session_output_buffer signature ALIGN_NL;
-	} ksign;
-	struct __attribute__ ((packed)) {
-		struct ncr_session_once f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(NCR_ALG_RSA_TRANSPARENT_HASH)] ALIGN_NL;
-		struct nlattr key_head ALIGN_NL;
-		uint32_t key ALIGN_NL;
-		struct nlattr rsa_head ALIGN_NL;
-		uint32_t rsa ALIGN_NL;
-		struct nlattr sign_hash_head ALIGN_NL;
-		char sign_hash[sizeof(SIGNATURE_HASH)] ALIGN_NL;
-		struct nlattr input_head ALIGN_NL;
-		struct ncr_session_input_data input ALIGN_NL;
-		struct nlattr signature_head ALIGN_NL;
-		struct ncr_session_input_data signature ALIGN_NL;
-	} kverify;
-	uint8_t data[SIGNATURE_HASH_SIZE];
-	uint8_t sig[DATA_SIZE];
-	size_t sig_size;
-	int ret;
-
-	fprintf(stdout, "Tests on transparent RSA (%s) key signature:",
-		(pss != 0) ? "PSS" : "PKCS V1.5");
-	fflush(stdout);
-
-	memset(data, 0x3, sizeof(data));
-
-	/* sign data */
-	memset(&ksign.f, 0, sizeof(ksign.f));
-	ksign.f.input_size = sizeof(ksign);
-	ksign.f.op = NCR_OP_SIGN;
-	ksign.algo_head.nla_len = NLA_HDRLEN + sizeof(ksign.algo);
-	ksign.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(ksign.algo, NCR_ALG_RSA_TRANSPARENT_HASH);
-	ksign.key_head.nla_len = NLA_HDRLEN + sizeof(ksign.key);
-	ksign.key_head.nla_type = NCR_ATTR_KEY;
-	ksign.key = privkey;
-	ksign.rsa_head.nla_len = NLA_HDRLEN + sizeof(ksign.rsa);
-	ksign.rsa_head.nla_type = NCR_ATTR_RSA_ENCODING_METHOD;
-	ksign.rsa = (pss != 0) ? RSA_PKCS1_PSS : RSA_PKCS1_V1_5;
-	ksign.sign_hash_head.nla_len = NLA_HDRLEN + sizeof(ksign.sign_hash);
-	ksign.sign_hash_head.nla_type = NCR_ATTR_SIGNATURE_HASH_ALGORITHM;
-	strcpy(ksign.sign_hash, SIGNATURE_HASH);
-	ksign.input_head.nla_len = NLA_HDRLEN + sizeof(ksign.input);
-	ksign.input_head.nla_type = NCR_ATTR_UPDATE_INPUT_DATA;
-	ksign.input.data = data;
-	ksign.input.data_size = SIGNATURE_HASH_SIZE;
-	ksign.signature_head.nla_len = NLA_HDRLEN + sizeof(ksign.signature);
-	ksign.signature_head.nla_type = NCR_ATTR_FINAL_OUTPUT_BUFFER;
-	ksign.signature.buffer = sig;
-	ksign.signature.buffer_size = sizeof(sig);
-	ksign.signature.result_size_ptr = &sig_size;
-
-	if (ioctl(cfd, NCRIO_SESSION_ONCE, &ksign)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_SESSION_ONCE)");
-		return 1;
-	}
-
-	/* verify signature */
-	memset(data, 0x3, sizeof(data));
-
-	memset(&kverify.f, 0, sizeof(kverify.f));
-	kverify.f.input_size = sizeof(kverify);
-	kverify.f.op = NCR_OP_VERIFY;
-	kverify.algo_head.nla_len = NLA_HDRLEN + sizeof(kverify.algo);
-	kverify.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(kverify.algo, NCR_ALG_RSA_TRANSPARENT_HASH);
-	kverify.key_head.nla_len = NLA_HDRLEN + sizeof(kverify.key);
-	kverify.key_head.nla_type = NCR_ATTR_KEY;
-	kverify.key = pubkey;
-	kverify.rsa_head.nla_len = NLA_HDRLEN + sizeof(kverify.rsa);
-	kverify.rsa_head.nla_type = NCR_ATTR_RSA_ENCODING_METHOD;
-	kverify.rsa = (pss != 0) ? RSA_PKCS1_PSS : RSA_PKCS1_V1_5;
-	kverify.sign_hash_head.nla_len = NLA_HDRLEN + sizeof(kverify.sign_hash);
-	kverify.sign_hash_head.nla_type = NCR_ATTR_SIGNATURE_HASH_ALGORITHM;
-	strcpy(kverify.sign_hash, SIGNATURE_HASH);
-	kverify.input_head.nla_len = NLA_HDRLEN + sizeof(kverify.input);
-	kverify.input_head.nla_type = NCR_ATTR_UPDATE_INPUT_DATA;
-	kverify.input.data = data;
-	kverify.input.data_size = SIGNATURE_HASH_SIZE;
-	kverify.signature_head.nla_len = NLA_HDRLEN + sizeof(kverify.signature);
-	kverify.signature_head.nla_type = NCR_ATTR_FINAL_INPUT_DATA;
-	kverify.signature.data = sig;
-	kverify.signature.data_size = sig_size;
-
-	ret = ioctl(cfd, NCRIO_SESSION_ONCE, &kverify);
-	if (ret < 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_SESSION_ONCE)");
-		return 1;
-	}
-
-	if (ret)
-		fprintf(stdout, " Success\n");
-	else {
-		fprintf(stdout, " Verification Failed!\n");
-		return 1;
-	}
-
-	return 0;
-}
-
-static int dsa_key_sign_verify(int cfd, ncr_key_t privkey, ncr_key_t pubkey)
-{
-	struct __attribute__ ((packed)) {
-		struct ncr_session_once f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(ALG_DSA)] ALIGN_NL;
-		struct nlattr key_head ALIGN_NL;
-		uint32_t key ALIGN_NL;
-		struct nlattr sign_hash_head ALIGN_NL;
-		char sign_hash[sizeof(SIGNATURE_HASH)] ALIGN_NL;
-		struct nlattr input_head ALIGN_NL;
-		struct ncr_session_input_data input ALIGN_NL;
-		struct nlattr signature_head ALIGN_NL;
-		struct ncr_session_output_buffer signature ALIGN_NL;
-	} ksign;
-	struct __attribute__ ((packed)) {
-		struct ncr_session_once f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(ALG_DSA)] ALIGN_NL;
-		struct nlattr key_head ALIGN_NL;
-		uint32_t key ALIGN_NL;
-		struct nlattr sign_hash_head ALIGN_NL;
-		char sign_hash[sizeof(SIGNATURE_HASH)] ALIGN_NL;
-		struct nlattr input_head ALIGN_NL;
-		struct ncr_session_input_data input ALIGN_NL;
-		struct nlattr signature_head ALIGN_NL;
-		struct ncr_session_input_data signature ALIGN_NL;
-	} kverify;
-	uint8_t data[DATA_SIZE];
-	uint8_t sig[DATA_SIZE];
-	size_t sig_size;
-	int ret;
-
-	fprintf(stdout, "Tests on DSA key signature:");
-	fflush(stdout);
-
-	memset(data, 0x3, sizeof(data));
-
-	/* sign data */
-	memset(&ksign.f, 0, sizeof(ksign.f));
-	ksign.f.input_size = sizeof(ksign);
-	ksign.f.op = NCR_OP_SIGN;
-	ksign.algo_head.nla_len = NLA_HDRLEN + sizeof(ksign.algo);
-	ksign.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(ksign.algo, ALG_DSA);
-	ksign.key_head.nla_len = NLA_HDRLEN + sizeof(ksign.key);
-	ksign.key_head.nla_type = NCR_ATTR_KEY;
-	ksign.key = privkey;
-	ksign.sign_hash_head.nla_len = NLA_HDRLEN + sizeof(ksign.sign_hash);
-	ksign.sign_hash_head.nla_type = NCR_ATTR_SIGNATURE_HASH_ALGORITHM;
-	strcpy(ksign.sign_hash, SIGNATURE_HASH);
-	ksign.input_head.nla_len = NLA_HDRLEN + sizeof(ksign.input);
-	ksign.input_head.nla_type = NCR_ATTR_UPDATE_INPUT_DATA;
-	ksign.input.data = data;
-	ksign.input.data_size = DATA_TO_SIGN;
-	ksign.signature_head.nla_len = NLA_HDRLEN + sizeof(ksign.signature);
-	ksign.signature_head.nla_type = NCR_ATTR_FINAL_OUTPUT_BUFFER;
-	ksign.signature.buffer = sig;
-	ksign.signature.buffer_size = sizeof(sig);
-	ksign.signature.result_size_ptr = &sig_size;
-
-	if (ioctl(cfd, NCRIO_SESSION_ONCE, &ksign)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_SESSION_ONCE)");
-		return 1;
-	}
-
-	/* verify signature */
-	memset(&kverify.f, 0, sizeof(kverify.f));
-	kverify.f.input_size = sizeof(kverify);
-	kverify.f.op = NCR_OP_VERIFY;
-	kverify.algo_head.nla_len = NLA_HDRLEN + sizeof(kverify.algo);
-	kverify.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(kverify.algo, ALG_DSA);
-	kverify.key_head.nla_len = NLA_HDRLEN + sizeof(kverify.key);
-	kverify.key_head.nla_type = NCR_ATTR_KEY;
-	kverify.key = pubkey;
-	kverify.sign_hash_head.nla_len = NLA_HDRLEN + sizeof(kverify.sign_hash);
-	kverify.sign_hash_head.nla_type = NCR_ATTR_SIGNATURE_HASH_ALGORITHM;
-	strcpy(kverify.sign_hash, SIGNATURE_HASH);
-	kverify.input_head.nla_len = NLA_HDRLEN + sizeof(kverify.input);
-	kverify.input_head.nla_type = NCR_ATTR_UPDATE_INPUT_DATA;
-	kverify.input.data = data;
-	kverify.input.data_size = DATA_TO_SIGN;
-	kverify.signature_head.nla_len = NLA_HDRLEN + sizeof(kverify.signature);
-	kverify.signature_head.nla_type = NCR_ATTR_FINAL_INPUT_DATA;
-	kverify.signature.data = sig;
-	kverify.signature.data_size = sizeof(sig);
-
-	ret = ioctl(cfd, NCRIO_SESSION_ONCE, &kverify);
-	if (ret < 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_SESSION_ONCE)");
-		return 1;
-	}
-
-	if (ret)
-		fprintf(stdout, " Success\n");
-	else {
-		fprintf(stdout, " Verification Failed!\n");
-		return 1;
-	}
-
-	return 0;
-
-}
-
-static int dsa_key_sign_verify_transparent(int cfd, ncr_key_t privkey,
-					   ncr_key_t pubkey)
-{
-	struct __attribute__ ((packed)) {
-		struct ncr_session_once f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(NCR_ALG_DSA_TRANSPARENT_HASH)] ALIGN_NL;
-		struct nlattr key_head ALIGN_NL;
-		uint32_t key ALIGN_NL;
-		struct nlattr sign_hash_head ALIGN_NL;
-		char sign_hash[sizeof(SIGNATURE_HASH)] ALIGN_NL;
-		struct nlattr input_head ALIGN_NL;
-		struct ncr_session_input_data input ALIGN_NL;
-		struct nlattr signature_head ALIGN_NL;
-		struct ncr_session_output_buffer signature ALIGN_NL;
-	} ksign;
-	struct __attribute__ ((packed)) {
-		struct ncr_session_once f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(NCR_ALG_DSA_TRANSPARENT_HASH)] ALIGN_NL;
-		struct nlattr key_head ALIGN_NL;
-		uint32_t key ALIGN_NL;
-		struct nlattr sign_hash_head ALIGN_NL;
-		char sign_hash[sizeof(SIGNATURE_HASH)] ALIGN_NL;
-		struct nlattr input_head ALIGN_NL;
-		struct ncr_session_input_data input ALIGN_NL;
-		struct nlattr signature_head ALIGN_NL;
-		struct ncr_session_input_data signature ALIGN_NL;
-	} kverify;
-	uint8_t data[SIGNATURE_HASH_SIZE];
-	uint8_t sig[DATA_SIZE];
-	size_t sig_size;
-	int ret;
-
-	fprintf(stdout, "Tests on transparent DSA key signature:");
-	fflush(stdout);
-
-	memset(data, 0x3, sizeof(data));
-
-	/* sign data */
-	memset(&ksign.f, 0, sizeof(ksign.f));
-	ksign.f.input_size = sizeof(ksign);
-	ksign.f.op = NCR_OP_SIGN;
-	ksign.algo_head.nla_len = NLA_HDRLEN + sizeof(ksign.algo);
-	ksign.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(ksign.algo, NCR_ALG_DSA_TRANSPARENT_HASH);
-	ksign.key_head.nla_len = NLA_HDRLEN + sizeof(ksign.key);
-	ksign.key_head.nla_type = NCR_ATTR_KEY;
-	ksign.key = privkey;
-	ksign.sign_hash_head.nla_len = NLA_HDRLEN + sizeof(ksign.sign_hash);
-	ksign.sign_hash_head.nla_type = NCR_ATTR_SIGNATURE_HASH_ALGORITHM;
-	strcpy(ksign.sign_hash, SIGNATURE_HASH);
-	ksign.input_head.nla_len = NLA_HDRLEN + sizeof(ksign.input);
-	ksign.input_head.nla_type = NCR_ATTR_UPDATE_INPUT_DATA;
-	ksign.input.data = data;
-	ksign.input.data_size = SIGNATURE_HASH_SIZE;
-	ksign.signature_head.nla_len = NLA_HDRLEN + sizeof(ksign.signature);
-	ksign.signature_head.nla_type = NCR_ATTR_FINAL_OUTPUT_BUFFER;
-	ksign.signature.buffer = sig;
-	ksign.signature.buffer_size = sizeof(sig);
-	ksign.signature.result_size_ptr = &sig_size;
-
-	if (ioctl(cfd, NCRIO_SESSION_ONCE, &ksign)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_SESSION_ONCE)");
-		return 1;
-	}
-
-	/* verify signature */
-	memset(&kverify.f, 0, sizeof(kverify.f));
-	kverify.f.input_size = sizeof(kverify);
-	kverify.f.op = NCR_OP_VERIFY;
-	kverify.algo_head.nla_len = NLA_HDRLEN + sizeof(kverify.algo);
-	kverify.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(kverify.algo, NCR_ALG_DSA_TRANSPARENT_HASH);
-	kverify.key_head.nla_len = NLA_HDRLEN + sizeof(kverify.key);
-	kverify.key_head.nla_type = NCR_ATTR_KEY;
-	kverify.key = pubkey;
-	kverify.sign_hash_head.nla_len = NLA_HDRLEN + sizeof(kverify.sign_hash);
-	kverify.sign_hash_head.nla_type = NCR_ATTR_SIGNATURE_HASH_ALGORITHM;
-	strcpy(kverify.sign_hash, SIGNATURE_HASH);
-	kverify.input_head.nla_len = NLA_HDRLEN + sizeof(kverify.input);
-	kverify.input_head.nla_type = NCR_ATTR_UPDATE_INPUT_DATA;
-	kverify.input.data = data;
-	kverify.input.data_size = SIGNATURE_HASH_SIZE;
-	kverify.signature_head.nla_len = NLA_HDRLEN + sizeof(kverify.signature);
-	kverify.signature_head.nla_type = NCR_ATTR_FINAL_INPUT_DATA;
-	kverify.signature.data = sig;
-	kverify.signature.data_size = sizeof(sig);
-
-	ret = ioctl(cfd, NCRIO_SESSION_ONCE, &kverify);
-	if (ret < 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_SESSION_ONCE)");
-		return 1;
-	}
-
-	if (ret)
-		fprintf(stdout, " Success\n");
-	else {
-		fprintf(stdout, " Verification Failed!\n");
-		return 1;
-	}
-
-	return 0;
-}
-
-static int test_ncr_rsa(int cfd)
-{
-	int ret;
-	struct __attribute__ ((packed)) {
-		struct ncr_key_generate_pair f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(ALG_RSA)] ALIGN_NL;
-		struct nlattr flags_head ALIGN_NL;
-		uint32_t flags ALIGN_NL;
-		struct nlattr bits_head ALIGN_NL;
-		uint32_t bits ALIGN_NL;
-	} kgen;
-	ncr_key_t pubkey, privkey;
-	struct ncr_key_export kexport;
-	uint8_t data[DATA_SIZE];
-	int data_size;
-
-	fprintf(stdout, "Tests on RSA key generation:");
-	fflush(stdout);
-
-	/* convert it to key */
-	privkey = ioctl(cfd, NCRIO_KEY_INIT);
-	if (privkey == -1) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	pubkey = ioctl(cfd, NCRIO_KEY_INIT);
-	if (pubkey == -1) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	memset(&kgen, 0, sizeof(kgen));
-	kgen.f.input_size = sizeof(kgen);
-	kgen.f.private_key = privkey;
-	kgen.f.public_key = pubkey;
-	kgen.algo_head.nla_len = NLA_HDRLEN + sizeof(kgen.algo);
-	kgen.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(kgen.algo, ALG_RSA);
-	kgen.flags_head.nla_len = NLA_HDRLEN + sizeof(kgen.flags);
-	kgen.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-	kgen.flags =
-	    NCR_KEY_FLAG_EXPORTABLE | NCR_KEY_FLAG_WRAPPABLE |
-	    NCR_KEY_FLAG_ALLOW_TRANSPARENT_HASH;
-	kgen.bits_head.nla_len = NLA_HDRLEN + sizeof(kgen.bits);
-	kgen.bits_head.nla_type = NCR_ATTR_RSA_MODULUS_BITS;
-	kgen.bits = 1024;
-
-	if (ioctl(cfd, NCRIO_KEY_GENERATE_PAIR, &kgen)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_GENERATE_PAIR)");
-		return 1;
-	}
-
-	/* export the private key */
-	memset(data, 0, sizeof(data));
-	memset(&kexport, 0, sizeof(kexport));
-	kexport.key = privkey;
-	kexport.buffer = data;
-	kexport.buffer_size = sizeof(data);
-
-	data_size = ioctl(cfd, NCRIO_KEY_EXPORT, &kexport);
-	if (data_size < 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_EXPORT)");
-		return 1;
-	}
-
-	ret = privkey_info(data, data_size, 0);
-	if (ret != 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		return 1;
-	}
-
-	/* export the public key */
-
-	memset(data, 0, sizeof(data));
-	memset(&kexport, 0, sizeof(kexport));
-	kexport.key = pubkey;
-	kexport.buffer = data;
-	kexport.buffer_size = sizeof(data);
-
-	data_size = ioctl(cfd, NCRIO_KEY_EXPORT, &kexport);
-	if (data_size < 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_EXPORT)");
-		return 1;
-	}
-
-	ret = pubkey_info(data, data_size, 0);
-	if (ret != 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		return 1;
-	}
-
-	fprintf(stdout, " Success\n");
-
-	ret = rsa_key_sign_verify(cfd, privkey, pubkey, 1);
-	if (ret != 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		return 1;
-	}
-
-	ret = rsa_key_sign_verify(cfd, privkey, pubkey, 0);
-	if (ret != 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		return 1;
-	}
-
-	ret = rsa_key_sign_verify_transparent(cfd, privkey, pubkey, 1);
-	if (ret != 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		return 1;
-	}
-
-	ret = rsa_key_sign_verify_transparent(cfd, privkey, pubkey, 0);
-	if (ret != 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		return 1;
-	}
-
-	ret = rsa_key_encrypt(cfd, privkey, pubkey, 0);
-	if (ret != 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		return 1;
-	}
-
-	ret = rsa_key_encrypt(cfd, privkey, pubkey, 1);
-	if (ret != 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		return 1;
-	}
-
-	return 0;
-
-}
-
-static int test_ncr_dsa(int cfd)
-{
-	int ret;
-	struct __attribute__ ((packed)) {
-		struct ncr_key_generate_pair f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(ALG_DSA)] ALIGN_NL;
-		struct nlattr flags_head ALIGN_NL;
-		uint32_t flags ALIGN_NL;
-		struct nlattr q_bits_head ALIGN_NL;
-		uint32_t q_bits ALIGN_NL;
-		struct nlattr p_bits_head ALIGN_NL;
-		uint32_t p_bits ALIGN_NL;
-	} kgen;
-	ncr_key_t pubkey, privkey;
-	struct ncr_key_export kexport;
-	uint8_t data[DATA_SIZE];
-	int data_size;
-
-	fprintf(stdout, "Tests on DSA key generation:");
-	fflush(stdout);
-
-	/* convert it to key */
-	privkey = ioctl(cfd, NCRIO_KEY_INIT);
-	if (privkey == -1) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	pubkey = ioctl(cfd, NCRIO_KEY_INIT);
-	if (pubkey == -1) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	memset(&kgen, 0, sizeof(kgen));
-	kgen.f.input_size = sizeof(kgen);
-	kgen.f.private_key = privkey;
-	kgen.f.public_key = pubkey;
-	kgen.algo_head.nla_len = NLA_HDRLEN + sizeof(kgen.algo);
-	kgen.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(kgen.algo, ALG_DSA);
-	kgen.flags_head.nla_len = NLA_HDRLEN + sizeof(kgen.flags);
-	kgen.flags_head.nla_type = NCR_ATTR_KEY_FLAGS;
-	kgen.flags =
-	    NCR_KEY_FLAG_EXPORTABLE | NCR_KEY_FLAG_WRAPPABLE |
-	    NCR_KEY_FLAG_ALLOW_TRANSPARENT_HASH;
-	kgen.q_bits_head.nla_len = NLA_HDRLEN + sizeof(kgen.q_bits);
-	kgen.q_bits_head.nla_type = NCR_ATTR_DSA_Q_BITS;
-	kgen.q_bits = 160;
-	kgen.p_bits_head.nla_len = NLA_HDRLEN + sizeof(kgen.p_bits);
-	kgen.p_bits_head.nla_type = NCR_ATTR_DSA_P_BITS;
-	kgen.p_bits = 1024;
-
-	if (ioctl(cfd, NCRIO_KEY_GENERATE_PAIR, &kgen)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_GENERATE_PAIR)");
-		return 1;
-	}
-
-	memset(data, 0, sizeof(data));
-	memset(&kexport, 0, sizeof(kexport));
-	kexport.key = privkey;
-	kexport.buffer = data;
-	kexport.buffer_size = sizeof(data);
-
-	data_size = ioctl(cfd, NCRIO_KEY_EXPORT, &kexport);
-	if (data_size < 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_EXPORT)");
-		return 1;
-	}
-
-	ret = privkey_info(data, data_size, 0);
-	if (ret != 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		return 1;
-	}
-
-	/* export the public key */
-
-	memset(data, 0, sizeof(data));
-	memset(&kexport, 0, sizeof(kexport));
-	kexport.key = pubkey;
-	kexport.buffer = data;
-	kexport.buffer_size = sizeof(data);
-
-	data_size = ioctl(cfd, NCRIO_KEY_EXPORT, &kexport);
-	if (data_size < 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_EXPORT)");
-		return 1;
-	}
-
-	ret = pubkey_info(data, data_size, 0);
-	if (ret != 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		return 1;
-	}
-
-	fprintf(stdout, " Success\n");
-
-	ret = dsa_key_sign_verify(cfd, privkey, pubkey);
-	if (ret != 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		return 1;
-	}
-
-	ret = dsa_key_sign_verify_transparent(cfd, privkey, pubkey);
-	if (ret != 0) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		return 1;
-	}
-
-	return 0;
-
-}
-
-int main()
-{
-	int fd = -1;
-
-	gnutls_global_init();
-
-	/* actually test if the initial close
-	 * will really delete all used lists */
-
-	fd = open("/dev/crypto", O_RDWR, 0);
-	if (fd < 0) {
-		perror("open(/dev/crypto)");
-		return 1;
-	}
-
-	if (test_ncr_dh(fd))
-		return 1;
-
-	if (test_ncr_rsa(fd))
-		return 1;
-
-	if (test_ncr_dsa(fd))
-		return 1;
-
-	if (test_ncr_wrap_key3(fd))
-		return 1;
-
-	/* Close the original descriptor */
-	if (close(fd)) {
-		perror("close(fd)");
-		return 1;
-	}
-
-	return 0;
-}
diff --git a/examples/shm/aes.h b/examples/shm/aes.h
deleted file mode 100644
index 53e7863..0000000
--- a/examples/shm/aes.h
+++ /dev/null
@@ -1,40 +0,0 @@
-/*
- * Common values for AES algorithms
- */
-
-#ifndef _CRYPTO_AES_H
-#define _CRYPTO_AES_H
-# include <stdint.h>
-# include <string.h>
-
-#define AES_MIN_KEY_SIZE	16
-#define AES_MAX_KEY_SIZE	32
-#define AES_KEYSIZE_128		16
-#define AES_KEYSIZE_192		24
-#define AES_KEYSIZE_256		32
-#define AES_BLOCK_SIZE		16
-#define AES_MAX_KEYLENGTH	(15 * 16)
-#define AES_MAX_KEYLENGTH_U32	(AES_MAX_KEYLENGTH / sizeof(uint32_t))
-
-/*
- * Please ensure that the first two fields are 16-byte aligned
- * relative to the start of the structure, i.e., don't move them!
- */
-struct crypto_aes_ctx {
-	uint32_t key_enc[AES_MAX_KEYLENGTH_U32];
-	uint32_t key_dec[AES_MAX_KEYLENGTH_U32];
-	uint32_t key_length;
-};
-
-extern const uint32_t crypto_ft_tab[4][256];
-extern const uint32_t crypto_fl_tab[4][256];
-extern const uint32_t crypto_it_tab[4][256];
-extern const uint32_t crypto_il_tab[4][256];
-
-int crypto_aes_expand_key(struct crypto_aes_ctx *ctx, const uint8_t * in_key,
-			  unsigned int key_len);
-
-int crypto_cbc_encrypt(const struct crypto_aes_ctx *ctx,
-		       void *src, int nbytes, void *dst, void *iv);
-
-#endif
diff --git a/examples/shm/aes_cbc.c b/examples/shm/aes_cbc.c
deleted file mode 100644
index dda988e..0000000
--- a/examples/shm/aes_cbc.c
+++ /dev/null
@@ -1,1404 +0,0 @@
-/* 
- * Cryptographic API.
- *
- * AES Cipher Algorithm.
- *
- * Based on Brian Gladman's code.
- *
- * Linux developers:
- *  Alexander Kjeldaas <astor@fast.no>
- *  Herbert Valerio Riedel <hvr@hvrlab.org>
- *  Kyle McMartin <kyle@debian.org>
- *  Adam J. Richter <adam@yggdrasil.com> (conversion to 2.5 API).
- *
- * This program is free software; you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation; either version 2 of the License, or
- * (at your option) any later version.
- *
- * ---------------------------------------------------------------------------
- * Copyright (c) 2002, Dr Brian Gladman <brg@gladman.me.uk>, Worcester, UK.
- * All rights reserved.
- *
- * LICENSE TERMS
- *
- * The free distribution and use of this software in both source and binary
- * form is allowed (with or without changes) provided that:
- *
- *   1. distributions of this source code include the above copyright
- *      notice, this list of conditions and the following disclaimer;
- *
- *   2. distributions in binary form include the above copyright
- *      notice, this list of conditions and the following disclaimer
- *      in the documentation and/or other associated materials;
- *
- *   3. the copyright holder's name is not used to endorse products
- *      built using this software without specific written permission.
- *
- * ALTERNATIVELY, provided that this notice is retained in full, this product
- * may be distributed under the terms of the GNU General Public License (GPL),
- * in which case the provisions of the GPL apply INSTEAD OF those given above.
- *
- * DISCLAIMER
- *
- * This software is provided 'as is' with no explicit or implied warranties
- * in respect of its properties, including, but not limited to, correctness
- * and/or fitness for purpose.
- * ---------------------------------------------------------------------------
- */
-
-#include <aes.h>
-#include <stdint.h>
-#include <linux/types.h>
-#include <asm/byteorder.h>
-#define cpu_to_le16(v16) (v16)
-#define cpu_to_le32(v32) (v32)
-#define cpu_to_le64(v64) (v64)
-#define le16_to_cpu(v16) (v16)
-#define le32_to_cpu(v32) (v32)
-#define le64_to_cpu(v64) (v64)
-
-static inline __u32 ror32(__u32 word, unsigned int shift)
-{
-	return (word >> shift) | (word << (32 - shift));
-}
-
-static inline uint8_t byte(const uint32_t x, const unsigned n)
-{
-	return x >> (n << 3);
-}
-
-static const uint32_t rco_tab[10] = { 1, 2, 4, 8, 16, 32, 64, 128, 27, 54 };
-
-const uint32_t crypto_ft_tab[4][256] = {
-	{
-	 0xa56363c6, 0x847c7cf8, 0x997777ee, 0x8d7b7bf6,
-	 0x0df2f2ff, 0xbd6b6bd6, 0xb16f6fde, 0x54c5c591,
-	 0x50303060, 0x03010102, 0xa96767ce, 0x7d2b2b56,
-	 0x19fefee7, 0x62d7d7b5, 0xe6abab4d, 0x9a7676ec,
-	 0x45caca8f, 0x9d82821f, 0x40c9c989, 0x877d7dfa,
-	 0x15fafaef, 0xeb5959b2, 0xc947478e, 0x0bf0f0fb,
-	 0xecadad41, 0x67d4d4b3, 0xfda2a25f, 0xeaafaf45,
-	 0xbf9c9c23, 0xf7a4a453, 0x967272e4, 0x5bc0c09b,
-	 0xc2b7b775, 0x1cfdfde1, 0xae93933d, 0x6a26264c,
-	 0x5a36366c, 0x413f3f7e, 0x02f7f7f5, 0x4fcccc83,
-	 0x5c343468, 0xf4a5a551, 0x34e5e5d1, 0x08f1f1f9,
-	 0x937171e2, 0x73d8d8ab, 0x53313162, 0x3f15152a,
-	 0x0c040408, 0x52c7c795, 0x65232346, 0x5ec3c39d,
-	 0x28181830, 0xa1969637, 0x0f05050a, 0xb59a9a2f,
-	 0x0907070e, 0x36121224, 0x9b80801b, 0x3de2e2df,
-	 0x26ebebcd, 0x6927274e, 0xcdb2b27f, 0x9f7575ea,
-	 0x1b090912, 0x9e83831d, 0x742c2c58, 0x2e1a1a34,
-	 0x2d1b1b36, 0xb26e6edc, 0xee5a5ab4, 0xfba0a05b,
-	 0xf65252a4, 0x4d3b3b76, 0x61d6d6b7, 0xceb3b37d,
-	 0x7b292952, 0x3ee3e3dd, 0x712f2f5e, 0x97848413,
-	 0xf55353a6, 0x68d1d1b9, 0x00000000, 0x2cededc1,
-	 0x60202040, 0x1ffcfce3, 0xc8b1b179, 0xed5b5bb6,
-	 0xbe6a6ad4, 0x46cbcb8d, 0xd9bebe67, 0x4b393972,
-	 0xde4a4a94, 0xd44c4c98, 0xe85858b0, 0x4acfcf85,
-	 0x6bd0d0bb, 0x2aefefc5, 0xe5aaaa4f, 0x16fbfbed,
-	 0xc5434386, 0xd74d4d9a, 0x55333366, 0x94858511,
-	 0xcf45458a, 0x10f9f9e9, 0x06020204, 0x817f7ffe,
-	 0xf05050a0, 0x443c3c78, 0xba9f9f25, 0xe3a8a84b,
-	 0xf35151a2, 0xfea3a35d, 0xc0404080, 0x8a8f8f05,
-	 0xad92923f, 0xbc9d9d21, 0x48383870, 0x04f5f5f1,
-	 0xdfbcbc63, 0xc1b6b677, 0x75dadaaf, 0x63212142,
-	 0x30101020, 0x1affffe5, 0x0ef3f3fd, 0x6dd2d2bf,
-	 0x4ccdcd81, 0x140c0c18, 0x35131326, 0x2fececc3,
-	 0xe15f5fbe, 0xa2979735, 0xcc444488, 0x3917172e,
-	 0x57c4c493, 0xf2a7a755, 0x827e7efc, 0x473d3d7a,
-	 0xac6464c8, 0xe75d5dba, 0x2b191932, 0x957373e6,
-	 0xa06060c0, 0x98818119, 0xd14f4f9e, 0x7fdcdca3,
-	 0x66222244, 0x7e2a2a54, 0xab90903b, 0x8388880b,
-	 0xca46468c, 0x29eeeec7, 0xd3b8b86b, 0x3c141428,
-	 0x79dedea7, 0xe25e5ebc, 0x1d0b0b16, 0x76dbdbad,
-	 0x3be0e0db, 0x56323264, 0x4e3a3a74, 0x1e0a0a14,
-	 0xdb494992, 0x0a06060c, 0x6c242448, 0xe45c5cb8,
-	 0x5dc2c29f, 0x6ed3d3bd, 0xefacac43, 0xa66262c4,
-	 0xa8919139, 0xa4959531, 0x37e4e4d3, 0x8b7979f2,
-	 0x32e7e7d5, 0x43c8c88b, 0x5937376e, 0xb76d6dda,
-	 0x8c8d8d01, 0x64d5d5b1, 0xd24e4e9c, 0xe0a9a949,
-	 0xb46c6cd8, 0xfa5656ac, 0x07f4f4f3, 0x25eaeacf,
-	 0xaf6565ca, 0x8e7a7af4, 0xe9aeae47, 0x18080810,
-	 0xd5baba6f, 0x887878f0, 0x6f25254a, 0x722e2e5c,
-	 0x241c1c38, 0xf1a6a657, 0xc7b4b473, 0x51c6c697,
-	 0x23e8e8cb, 0x7cdddda1, 0x9c7474e8, 0x211f1f3e,
-	 0xdd4b4b96, 0xdcbdbd61, 0x868b8b0d, 0x858a8a0f,
-	 0x907070e0, 0x423e3e7c, 0xc4b5b571, 0xaa6666cc,
-	 0xd8484890, 0x05030306, 0x01f6f6f7, 0x120e0e1c,
-	 0xa36161c2, 0x5f35356a, 0xf95757ae, 0xd0b9b969,
-	 0x91868617, 0x58c1c199, 0x271d1d3a, 0xb99e9e27,
-	 0x38e1e1d9, 0x13f8f8eb, 0xb398982b, 0x33111122,
-	 0xbb6969d2, 0x70d9d9a9, 0x898e8e07, 0xa7949433,
-	 0xb69b9b2d, 0x221e1e3c, 0x92878715, 0x20e9e9c9,
-	 0x49cece87, 0xff5555aa, 0x78282850, 0x7adfdfa5,
-	 0x8f8c8c03, 0xf8a1a159, 0x80898909, 0x170d0d1a,
-	 0xdabfbf65, 0x31e6e6d7, 0xc6424284, 0xb86868d0,
-	 0xc3414182, 0xb0999929, 0x772d2d5a, 0x110f0f1e,
-	 0xcbb0b07b, 0xfc5454a8, 0xd6bbbb6d, 0x3a16162c,
-	 }, {
-	     0x6363c6a5, 0x7c7cf884, 0x7777ee99, 0x7b7bf68d,
-	     0xf2f2ff0d, 0x6b6bd6bd, 0x6f6fdeb1, 0xc5c59154,
-	     0x30306050, 0x01010203, 0x6767cea9, 0x2b2b567d,
-	     0xfefee719, 0xd7d7b562, 0xabab4de6, 0x7676ec9a,
-	     0xcaca8f45, 0x82821f9d, 0xc9c98940, 0x7d7dfa87,
-	     0xfafaef15, 0x5959b2eb, 0x47478ec9, 0xf0f0fb0b,
-	     0xadad41ec, 0xd4d4b367, 0xa2a25ffd, 0xafaf45ea,
-	     0x9c9c23bf, 0xa4a453f7, 0x7272e496, 0xc0c09b5b,
-	     0xb7b775c2, 0xfdfde11c, 0x93933dae, 0x26264c6a,
-	     0x36366c5a, 0x3f3f7e41, 0xf7f7f502, 0xcccc834f,
-	     0x3434685c, 0xa5a551f4, 0xe5e5d134, 0xf1f1f908,
-	     0x7171e293, 0xd8d8ab73, 0x31316253, 0x15152a3f,
-	     0x0404080c, 0xc7c79552, 0x23234665, 0xc3c39d5e,
-	     0x18183028, 0x969637a1, 0x05050a0f, 0x9a9a2fb5,
-	     0x07070e09, 0x12122436, 0x80801b9b, 0xe2e2df3d,
-	     0xebebcd26, 0x27274e69, 0xb2b27fcd, 0x7575ea9f,
-	     0x0909121b, 0x83831d9e, 0x2c2c5874, 0x1a1a342e,
-	     0x1b1b362d, 0x6e6edcb2, 0x5a5ab4ee, 0xa0a05bfb,
-	     0x5252a4f6, 0x3b3b764d, 0xd6d6b761, 0xb3b37dce,
-	     0x2929527b, 0xe3e3dd3e, 0x2f2f5e71, 0x84841397,
-	     0x5353a6f5, 0xd1d1b968, 0x00000000, 0xededc12c,
-	     0x20204060, 0xfcfce31f, 0xb1b179c8, 0x5b5bb6ed,
-	     0x6a6ad4be, 0xcbcb8d46, 0xbebe67d9, 0x3939724b,
-	     0x4a4a94de, 0x4c4c98d4, 0x5858b0e8, 0xcfcf854a,
-	     0xd0d0bb6b, 0xefefc52a, 0xaaaa4fe5, 0xfbfbed16,
-	     0x434386c5, 0x4d4d9ad7, 0x33336655, 0x85851194,
-	     0x45458acf, 0xf9f9e910, 0x02020406, 0x7f7ffe81,
-	     0x5050a0f0, 0x3c3c7844, 0x9f9f25ba, 0xa8a84be3,
-	     0x5151a2f3, 0xa3a35dfe, 0x404080c0, 0x8f8f058a,
-	     0x92923fad, 0x9d9d21bc, 0x38387048, 0xf5f5f104,
-	     0xbcbc63df, 0xb6b677c1, 0xdadaaf75, 0x21214263,
-	     0x10102030, 0xffffe51a, 0xf3f3fd0e, 0xd2d2bf6d,
-	     0xcdcd814c, 0x0c0c1814, 0x13132635, 0xececc32f,
-	     0x5f5fbee1, 0x979735a2, 0x444488cc, 0x17172e39,
-	     0xc4c49357, 0xa7a755f2, 0x7e7efc82, 0x3d3d7a47,
-	     0x6464c8ac, 0x5d5dbae7, 0x1919322b, 0x7373e695,
-	     0x6060c0a0, 0x81811998, 0x4f4f9ed1, 0xdcdca37f,
-	     0x22224466, 0x2a2a547e, 0x90903bab, 0x88880b83,
-	     0x46468cca, 0xeeeec729, 0xb8b86bd3, 0x1414283c,
-	     0xdedea779, 0x5e5ebce2, 0x0b0b161d, 0xdbdbad76,
-	     0xe0e0db3b, 0x32326456, 0x3a3a744e, 0x0a0a141e,
-	     0x494992db, 0x06060c0a, 0x2424486c, 0x5c5cb8e4,
-	     0xc2c29f5d, 0xd3d3bd6e, 0xacac43ef, 0x6262c4a6,
-	     0x919139a8, 0x959531a4, 0xe4e4d337, 0x7979f28b,
-	     0xe7e7d532, 0xc8c88b43, 0x37376e59, 0x6d6ddab7,
-	     0x8d8d018c, 0xd5d5b164, 0x4e4e9cd2, 0xa9a949e0,
-	     0x6c6cd8b4, 0x5656acfa, 0xf4f4f307, 0xeaeacf25,
-	     0x6565caaf, 0x7a7af48e, 0xaeae47e9, 0x08081018,
-	     0xbaba6fd5, 0x7878f088, 0x25254a6f, 0x2e2e5c72,
-	     0x1c1c3824, 0xa6a657f1, 0xb4b473c7, 0xc6c69751,
-	     0xe8e8cb23, 0xdddda17c, 0x7474e89c, 0x1f1f3e21,
-	     0x4b4b96dd, 0xbdbd61dc, 0x8b8b0d86, 0x8a8a0f85,
-	     0x7070e090, 0x3e3e7c42, 0xb5b571c4, 0x6666ccaa,
-	     0x484890d8, 0x03030605, 0xf6f6f701, 0x0e0e1c12,
-	     0x6161c2a3, 0x35356a5f, 0x5757aef9, 0xb9b969d0,
-	     0x86861791, 0xc1c19958, 0x1d1d3a27, 0x9e9e27b9,
-	     0xe1e1d938, 0xf8f8eb13, 0x98982bb3, 0x11112233,
-	     0x6969d2bb, 0xd9d9a970, 0x8e8e0789, 0x949433a7,
-	     0x9b9b2db6, 0x1e1e3c22, 0x87871592, 0xe9e9c920,
-	     0xcece8749, 0x5555aaff, 0x28285078, 0xdfdfa57a,
-	     0x8c8c038f, 0xa1a159f8, 0x89890980, 0x0d0d1a17,
-	     0xbfbf65da, 0xe6e6d731, 0x424284c6, 0x6868d0b8,
-	     0x414182c3, 0x999929b0, 0x2d2d5a77, 0x0f0f1e11,
-	     0xb0b07bcb, 0x5454a8fc, 0xbbbb6dd6, 0x16162c3a,
-	     }, {
-		 0x63c6a563, 0x7cf8847c, 0x77ee9977, 0x7bf68d7b,
-		 0xf2ff0df2, 0x6bd6bd6b, 0x6fdeb16f, 0xc59154c5,
-		 0x30605030, 0x01020301, 0x67cea967, 0x2b567d2b,
-		 0xfee719fe, 0xd7b562d7, 0xab4de6ab, 0x76ec9a76,
-		 0xca8f45ca, 0x821f9d82, 0xc98940c9, 0x7dfa877d,
-		 0xfaef15fa, 0x59b2eb59, 0x478ec947, 0xf0fb0bf0,
-		 0xad41ecad, 0xd4b367d4, 0xa25ffda2, 0xaf45eaaf,
-		 0x9c23bf9c, 0xa453f7a4, 0x72e49672, 0xc09b5bc0,
-		 0xb775c2b7, 0xfde11cfd, 0x933dae93, 0x264c6a26,
-		 0x366c5a36, 0x3f7e413f, 0xf7f502f7, 0xcc834fcc,
-		 0x34685c34, 0xa551f4a5, 0xe5d134e5, 0xf1f908f1,
-		 0x71e29371, 0xd8ab73d8, 0x31625331, 0x152a3f15,
-		 0x04080c04, 0xc79552c7, 0x23466523, 0xc39d5ec3,
-		 0x18302818, 0x9637a196, 0x050a0f05, 0x9a2fb59a,
-		 0x070e0907, 0x12243612, 0x801b9b80, 0xe2df3de2,
-		 0xebcd26eb, 0x274e6927, 0xb27fcdb2, 0x75ea9f75,
-		 0x09121b09, 0x831d9e83, 0x2c58742c, 0x1a342e1a,
-		 0x1b362d1b, 0x6edcb26e, 0x5ab4ee5a, 0xa05bfba0,
-		 0x52a4f652, 0x3b764d3b, 0xd6b761d6, 0xb37dceb3,
-		 0x29527b29, 0xe3dd3ee3, 0x2f5e712f, 0x84139784,
-		 0x53a6f553, 0xd1b968d1, 0x00000000, 0xedc12ced,
-		 0x20406020, 0xfce31ffc, 0xb179c8b1, 0x5bb6ed5b,
-		 0x6ad4be6a, 0xcb8d46cb, 0xbe67d9be, 0x39724b39,
-		 0x4a94de4a, 0x4c98d44c, 0x58b0e858, 0xcf854acf,
-		 0xd0bb6bd0, 0xefc52aef, 0xaa4fe5aa, 0xfbed16fb,
-		 0x4386c543, 0x4d9ad74d, 0x33665533, 0x85119485,
-		 0x458acf45, 0xf9e910f9, 0x02040602, 0x7ffe817f,
-		 0x50a0f050, 0x3c78443c, 0x9f25ba9f, 0xa84be3a8,
-		 0x51a2f351, 0xa35dfea3, 0x4080c040, 0x8f058a8f,
-		 0x923fad92, 0x9d21bc9d, 0x38704838, 0xf5f104f5,
-		 0xbc63dfbc, 0xb677c1b6, 0xdaaf75da, 0x21426321,
-		 0x10203010, 0xffe51aff, 0xf3fd0ef3, 0xd2bf6dd2,
-		 0xcd814ccd, 0x0c18140c, 0x13263513, 0xecc32fec,
-		 0x5fbee15f, 0x9735a297, 0x4488cc44, 0x172e3917,
-		 0xc49357c4, 0xa755f2a7, 0x7efc827e, 0x3d7a473d,
-		 0x64c8ac64, 0x5dbae75d, 0x19322b19, 0x73e69573,
-		 0x60c0a060, 0x81199881, 0x4f9ed14f, 0xdca37fdc,
-		 0x22446622, 0x2a547e2a, 0x903bab90, 0x880b8388,
-		 0x468cca46, 0xeec729ee, 0xb86bd3b8, 0x14283c14,
-		 0xdea779de, 0x5ebce25e, 0x0b161d0b, 0xdbad76db,
-		 0xe0db3be0, 0x32645632, 0x3a744e3a, 0x0a141e0a,
-		 0x4992db49, 0x060c0a06, 0x24486c24, 0x5cb8e45c,
-		 0xc29f5dc2, 0xd3bd6ed3, 0xac43efac, 0x62c4a662,
-		 0x9139a891, 0x9531a495, 0xe4d337e4, 0x79f28b79,
-		 0xe7d532e7, 0xc88b43c8, 0x376e5937, 0x6ddab76d,
-		 0x8d018c8d, 0xd5b164d5, 0x4e9cd24e, 0xa949e0a9,
-		 0x6cd8b46c, 0x56acfa56, 0xf4f307f4, 0xeacf25ea,
-		 0x65caaf65, 0x7af48e7a, 0xae47e9ae, 0x08101808,
-		 0xba6fd5ba, 0x78f08878, 0x254a6f25, 0x2e5c722e,
-		 0x1c38241c, 0xa657f1a6, 0xb473c7b4, 0xc69751c6,
-		 0xe8cb23e8, 0xdda17cdd, 0x74e89c74, 0x1f3e211f,
-		 0x4b96dd4b, 0xbd61dcbd, 0x8b0d868b, 0x8a0f858a,
-		 0x70e09070, 0x3e7c423e, 0xb571c4b5, 0x66ccaa66,
-		 0x4890d848, 0x03060503, 0xf6f701f6, 0x0e1c120e,
-		 0x61c2a361, 0x356a5f35, 0x57aef957, 0xb969d0b9,
-		 0x86179186, 0xc19958c1, 0x1d3a271d, 0x9e27b99e,
-		 0xe1d938e1, 0xf8eb13f8, 0x982bb398, 0x11223311,
-		 0x69d2bb69, 0xd9a970d9, 0x8e07898e, 0x9433a794,
-		 0x9b2db69b, 0x1e3c221e, 0x87159287, 0xe9c920e9,
-		 0xce8749ce, 0x55aaff55, 0x28507828, 0xdfa57adf,
-		 0x8c038f8c, 0xa159f8a1, 0x89098089, 0x0d1a170d,
-		 0xbf65dabf, 0xe6d731e6, 0x4284c642, 0x68d0b868,
-		 0x4182c341, 0x9929b099, 0x2d5a772d, 0x0f1e110f,
-		 0xb07bcbb0, 0x54a8fc54, 0xbb6dd6bb, 0x162c3a16,
-		 }, {
-		     0xc6a56363, 0xf8847c7c, 0xee997777, 0xf68d7b7b,
-		     0xff0df2f2, 0xd6bd6b6b, 0xdeb16f6f, 0x9154c5c5,
-		     0x60503030, 0x02030101, 0xcea96767, 0x567d2b2b,
-		     0xe719fefe, 0xb562d7d7, 0x4de6abab, 0xec9a7676,
-		     0x8f45caca, 0x1f9d8282, 0x8940c9c9, 0xfa877d7d,
-		     0xef15fafa, 0xb2eb5959, 0x8ec94747, 0xfb0bf0f0,
-		     0x41ecadad, 0xb367d4d4, 0x5ffda2a2, 0x45eaafaf,
-		     0x23bf9c9c, 0x53f7a4a4, 0xe4967272, 0x9b5bc0c0,
-		     0x75c2b7b7, 0xe11cfdfd, 0x3dae9393, 0x4c6a2626,
-		     0x6c5a3636, 0x7e413f3f, 0xf502f7f7, 0x834fcccc,
-		     0x685c3434, 0x51f4a5a5, 0xd134e5e5, 0xf908f1f1,
-		     0xe2937171, 0xab73d8d8, 0x62533131, 0x2a3f1515,
-		     0x080c0404, 0x9552c7c7, 0x46652323, 0x9d5ec3c3,
-		     0x30281818, 0x37a19696, 0x0a0f0505, 0x2fb59a9a,
-		     0x0e090707, 0x24361212, 0x1b9b8080, 0xdf3de2e2,
-		     0xcd26ebeb, 0x4e692727, 0x7fcdb2b2, 0xea9f7575,
-		     0x121b0909, 0x1d9e8383, 0x58742c2c, 0x342e1a1a,
-		     0x362d1b1b, 0xdcb26e6e, 0xb4ee5a5a, 0x5bfba0a0,
-		     0xa4f65252, 0x764d3b3b, 0xb761d6d6, 0x7dceb3b3,
-		     0x527b2929, 0xdd3ee3e3, 0x5e712f2f, 0x13978484,
-		     0xa6f55353, 0xb968d1d1, 0x00000000, 0xc12ceded,
-		     0x40602020, 0xe31ffcfc, 0x79c8b1b1, 0xb6ed5b5b,
-		     0xd4be6a6a, 0x8d46cbcb, 0x67d9bebe, 0x724b3939,
-		     0x94de4a4a, 0x98d44c4c, 0xb0e85858, 0x854acfcf,
-		     0xbb6bd0d0, 0xc52aefef, 0x4fe5aaaa, 0xed16fbfb,
-		     0x86c54343, 0x9ad74d4d, 0x66553333, 0x11948585,
-		     0x8acf4545, 0xe910f9f9, 0x04060202, 0xfe817f7f,
-		     0xa0f05050, 0x78443c3c, 0x25ba9f9f, 0x4be3a8a8,
-		     0xa2f35151, 0x5dfea3a3, 0x80c04040, 0x058a8f8f,
-		     0x3fad9292, 0x21bc9d9d, 0x70483838, 0xf104f5f5,
-		     0x63dfbcbc, 0x77c1b6b6, 0xaf75dada, 0x42632121,
-		     0x20301010, 0xe51affff, 0xfd0ef3f3, 0xbf6dd2d2,
-		     0x814ccdcd, 0x18140c0c, 0x26351313, 0xc32fecec,
-		     0xbee15f5f, 0x35a29797, 0x88cc4444, 0x2e391717,
-		     0x9357c4c4, 0x55f2a7a7, 0xfc827e7e, 0x7a473d3d,
-		     0xc8ac6464, 0xbae75d5d, 0x322b1919, 0xe6957373,
-		     0xc0a06060, 0x19988181, 0x9ed14f4f, 0xa37fdcdc,
-		     0x44662222, 0x547e2a2a, 0x3bab9090, 0x0b838888,
-		     0x8cca4646, 0xc729eeee, 0x6bd3b8b8, 0x283c1414,
-		     0xa779dede, 0xbce25e5e, 0x161d0b0b, 0xad76dbdb,
-		     0xdb3be0e0, 0x64563232, 0x744e3a3a, 0x141e0a0a,
-		     0x92db4949, 0x0c0a0606, 0x486c2424, 0xb8e45c5c,
-		     0x9f5dc2c2, 0xbd6ed3d3, 0x43efacac, 0xc4a66262,
-		     0x39a89191, 0x31a49595, 0xd337e4e4, 0xf28b7979,
-		     0xd532e7e7, 0x8b43c8c8, 0x6e593737, 0xdab76d6d,
-		     0x018c8d8d, 0xb164d5d5, 0x9cd24e4e, 0x49e0a9a9,
-		     0xd8b46c6c, 0xacfa5656, 0xf307f4f4, 0xcf25eaea,
-		     0xcaaf6565, 0xf48e7a7a, 0x47e9aeae, 0x10180808,
-		     0x6fd5baba, 0xf0887878, 0x4a6f2525, 0x5c722e2e,
-		     0x38241c1c, 0x57f1a6a6, 0x73c7b4b4, 0x9751c6c6,
-		     0xcb23e8e8, 0xa17cdddd, 0xe89c7474, 0x3e211f1f,
-		     0x96dd4b4b, 0x61dcbdbd, 0x0d868b8b, 0x0f858a8a,
-		     0xe0907070, 0x7c423e3e, 0x71c4b5b5, 0xccaa6666,
-		     0x90d84848, 0x06050303, 0xf701f6f6, 0x1c120e0e,
-		     0xc2a36161, 0x6a5f3535, 0xaef95757, 0x69d0b9b9,
-		     0x17918686, 0x9958c1c1, 0x3a271d1d, 0x27b99e9e,
-		     0xd938e1e1, 0xeb13f8f8, 0x2bb39898, 0x22331111,
-		     0xd2bb6969, 0xa970d9d9, 0x07898e8e, 0x33a79494,
-		     0x2db69b9b, 0x3c221e1e, 0x15928787, 0xc920e9e9,
-		     0x8749cece, 0xaaff5555, 0x50782828, 0xa57adfdf,
-		     0x038f8c8c, 0x59f8a1a1, 0x09808989, 0x1a170d0d,
-		     0x65dabfbf, 0xd731e6e6, 0x84c64242, 0xd0b86868,
-		     0x82c34141, 0x29b09999, 0x5a772d2d, 0x1e110f0f,
-		     0x7bcbb0b0, 0xa8fc5454, 0x6dd6bbbb, 0x2c3a1616,
-		     }
-};
-
-const uint32_t crypto_fl_tab[4][256] = {
-	{
-	 0x00000063, 0x0000007c, 0x00000077, 0x0000007b,
-	 0x000000f2, 0x0000006b, 0x0000006f, 0x000000c5,
-	 0x00000030, 0x00000001, 0x00000067, 0x0000002b,
-	 0x000000fe, 0x000000d7, 0x000000ab, 0x00000076,
-	 0x000000ca, 0x00000082, 0x000000c9, 0x0000007d,
-	 0x000000fa, 0x00000059, 0x00000047, 0x000000f0,
-	 0x000000ad, 0x000000d4, 0x000000a2, 0x000000af,
-	 0x0000009c, 0x000000a4, 0x00000072, 0x000000c0,
-	 0x000000b7, 0x000000fd, 0x00000093, 0x00000026,
-	 0x00000036, 0x0000003f, 0x000000f7, 0x000000cc,
-	 0x00000034, 0x000000a5, 0x000000e5, 0x000000f1,
-	 0x00000071, 0x000000d8, 0x00000031, 0x00000015,
-	 0x00000004, 0x000000c7, 0x00000023, 0x000000c3,
-	 0x00000018, 0x00000096, 0x00000005, 0x0000009a,
-	 0x00000007, 0x00000012, 0x00000080, 0x000000e2,
-	 0x000000eb, 0x00000027, 0x000000b2, 0x00000075,
-	 0x00000009, 0x00000083, 0x0000002c, 0x0000001a,
-	 0x0000001b, 0x0000006e, 0x0000005a, 0x000000a0,
-	 0x00000052, 0x0000003b, 0x000000d6, 0x000000b3,
-	 0x00000029, 0x000000e3, 0x0000002f, 0x00000084,
-	 0x00000053, 0x000000d1, 0x00000000, 0x000000ed,
-	 0x00000020, 0x000000fc, 0x000000b1, 0x0000005b,
-	 0x0000006a, 0x000000cb, 0x000000be, 0x00000039,
-	 0x0000004a, 0x0000004c, 0x00000058, 0x000000cf,
-	 0x000000d0, 0x000000ef, 0x000000aa, 0x000000fb,
-	 0x00000043, 0x0000004d, 0x00000033, 0x00000085,
-	 0x00000045, 0x000000f9, 0x00000002, 0x0000007f,
-	 0x00000050, 0x0000003c, 0x0000009f, 0x000000a8,
-	 0x00000051, 0x000000a3, 0x00000040, 0x0000008f,
-	 0x00000092, 0x0000009d, 0x00000038, 0x000000f5,
-	 0x000000bc, 0x000000b6, 0x000000da, 0x00000021,
-	 0x00000010, 0x000000ff, 0x000000f3, 0x000000d2,
-	 0x000000cd, 0x0000000c, 0x00000013, 0x000000ec,
-	 0x0000005f, 0x00000097, 0x00000044, 0x00000017,
-	 0x000000c4, 0x000000a7, 0x0000007e, 0x0000003d,
-	 0x00000064, 0x0000005d, 0x00000019, 0x00000073,
-	 0x00000060, 0x00000081, 0x0000004f, 0x000000dc,
-	 0x00000022, 0x0000002a, 0x00000090, 0x00000088,
-	 0x00000046, 0x000000ee, 0x000000b8, 0x00000014,
-	 0x000000de, 0x0000005e, 0x0000000b, 0x000000db,
-	 0x000000e0, 0x00000032, 0x0000003a, 0x0000000a,
-	 0x00000049, 0x00000006, 0x00000024, 0x0000005c,
-	 0x000000c2, 0x000000d3, 0x000000ac, 0x00000062,
-	 0x00000091, 0x00000095, 0x000000e4, 0x00000079,
-	 0x000000e7, 0x000000c8, 0x00000037, 0x0000006d,
-	 0x0000008d, 0x000000d5, 0x0000004e, 0x000000a9,
-	 0x0000006c, 0x00000056, 0x000000f4, 0x000000ea,
-	 0x00000065, 0x0000007a, 0x000000ae, 0x00000008,
-	 0x000000ba, 0x00000078, 0x00000025, 0x0000002e,
-	 0x0000001c, 0x000000a6, 0x000000b4, 0x000000c6,
-	 0x000000e8, 0x000000dd, 0x00000074, 0x0000001f,
-	 0x0000004b, 0x000000bd, 0x0000008b, 0x0000008a,
-	 0x00000070, 0x0000003e, 0x000000b5, 0x00000066,
-	 0x00000048, 0x00000003, 0x000000f6, 0x0000000e,
-	 0x00000061, 0x00000035, 0x00000057, 0x000000b9,
-	 0x00000086, 0x000000c1, 0x0000001d, 0x0000009e,
-	 0x000000e1, 0x000000f8, 0x00000098, 0x00000011,
-	 0x00000069, 0x000000d9, 0x0000008e, 0x00000094,
-	 0x0000009b, 0x0000001e, 0x00000087, 0x000000e9,
-	 0x000000ce, 0x00000055, 0x00000028, 0x000000df,
-	 0x0000008c, 0x000000a1, 0x00000089, 0x0000000d,
-	 0x000000bf, 0x000000e6, 0x00000042, 0x00000068,
-	 0x00000041, 0x00000099, 0x0000002d, 0x0000000f,
-	 0x000000b0, 0x00000054, 0x000000bb, 0x00000016,
-	 }, {
-	     0x00006300, 0x00007c00, 0x00007700, 0x00007b00,
-	     0x0000f200, 0x00006b00, 0x00006f00, 0x0000c500,
-	     0x00003000, 0x00000100, 0x00006700, 0x00002b00,
-	     0x0000fe00, 0x0000d700, 0x0000ab00, 0x00007600,
-	     0x0000ca00, 0x00008200, 0x0000c900, 0x00007d00,
-	     0x0000fa00, 0x00005900, 0x00004700, 0x0000f000,
-	     0x0000ad00, 0x0000d400, 0x0000a200, 0x0000af00,
-	     0x00009c00, 0x0000a400, 0x00007200, 0x0000c000,
-	     0x0000b700, 0x0000fd00, 0x00009300, 0x00002600,
-	     0x00003600, 0x00003f00, 0x0000f700, 0x0000cc00,
-	     0x00003400, 0x0000a500, 0x0000e500, 0x0000f100,
-	     0x00007100, 0x0000d800, 0x00003100, 0x00001500,
-	     0x00000400, 0x0000c700, 0x00002300, 0x0000c300,
-	     0x00001800, 0x00009600, 0x00000500, 0x00009a00,
-	     0x00000700, 0x00001200, 0x00008000, 0x0000e200,
-	     0x0000eb00, 0x00002700, 0x0000b200, 0x00007500,
-	     0x00000900, 0x00008300, 0x00002c00, 0x00001a00,
-	     0x00001b00, 0x00006e00, 0x00005a00, 0x0000a000,
-	     0x00005200, 0x00003b00, 0x0000d600, 0x0000b300,
-	     0x00002900, 0x0000e300, 0x00002f00, 0x00008400,
-	     0x00005300, 0x0000d100, 0x00000000, 0x0000ed00,
-	     0x00002000, 0x0000fc00, 0x0000b100, 0x00005b00,
-	     0x00006a00, 0x0000cb00, 0x0000be00, 0x00003900,
-	     0x00004a00, 0x00004c00, 0x00005800, 0x0000cf00,
-	     0x0000d000, 0x0000ef00, 0x0000aa00, 0x0000fb00,
-	     0x00004300, 0x00004d00, 0x00003300, 0x00008500,
-	     0x00004500, 0x0000f900, 0x00000200, 0x00007f00,
-	     0x00005000, 0x00003c00, 0x00009f00, 0x0000a800,
-	     0x00005100, 0x0000a300, 0x00004000, 0x00008f00,
-	     0x00009200, 0x00009d00, 0x00003800, 0x0000f500,
-	     0x0000bc00, 0x0000b600, 0x0000da00, 0x00002100,
-	     0x00001000, 0x0000ff00, 0x0000f300, 0x0000d200,
-	     0x0000cd00, 0x00000c00, 0x00001300, 0x0000ec00,
-	     0x00005f00, 0x00009700, 0x00004400, 0x00001700,
-	     0x0000c400, 0x0000a700, 0x00007e00, 0x00003d00,
-	     0x00006400, 0x00005d00, 0x00001900, 0x00007300,
-	     0x00006000, 0x00008100, 0x00004f00, 0x0000dc00,
-	     0x00002200, 0x00002a00, 0x00009000, 0x00008800,
-	     0x00004600, 0x0000ee00, 0x0000b800, 0x00001400,
-	     0x0000de00, 0x00005e00, 0x00000b00, 0x0000db00,
-	     0x0000e000, 0x00003200, 0x00003a00, 0x00000a00,
-	     0x00004900, 0x00000600, 0x00002400, 0x00005c00,
-	     0x0000c200, 0x0000d300, 0x0000ac00, 0x00006200,
-	     0x00009100, 0x00009500, 0x0000e400, 0x00007900,
-	     0x0000e700, 0x0000c800, 0x00003700, 0x00006d00,
-	     0x00008d00, 0x0000d500, 0x00004e00, 0x0000a900,
-	     0x00006c00, 0x00005600, 0x0000f400, 0x0000ea00,
-	     0x00006500, 0x00007a00, 0x0000ae00, 0x00000800,
-	     0x0000ba00, 0x00007800, 0x00002500, 0x00002e00,
-	     0x00001c00, 0x0000a600, 0x0000b400, 0x0000c600,
-	     0x0000e800, 0x0000dd00, 0x00007400, 0x00001f00,
-	     0x00004b00, 0x0000bd00, 0x00008b00, 0x00008a00,
-	     0x00007000, 0x00003e00, 0x0000b500, 0x00006600,
-	     0x00004800, 0x00000300, 0x0000f600, 0x00000e00,
-	     0x00006100, 0x00003500, 0x00005700, 0x0000b900,
-	     0x00008600, 0x0000c100, 0x00001d00, 0x00009e00,
-	     0x0000e100, 0x0000f800, 0x00009800, 0x00001100,
-	     0x00006900, 0x0000d900, 0x00008e00, 0x00009400,
-	     0x00009b00, 0x00001e00, 0x00008700, 0x0000e900,
-	     0x0000ce00, 0x00005500, 0x00002800, 0x0000df00,
-	     0x00008c00, 0x0000a100, 0x00008900, 0x00000d00,
-	     0x0000bf00, 0x0000e600, 0x00004200, 0x00006800,
-	     0x00004100, 0x00009900, 0x00002d00, 0x00000f00,
-	     0x0000b000, 0x00005400, 0x0000bb00, 0x00001600,
-	     }, {
-		 0x00630000, 0x007c0000, 0x00770000, 0x007b0000,
-		 0x00f20000, 0x006b0000, 0x006f0000, 0x00c50000,
-		 0x00300000, 0x00010000, 0x00670000, 0x002b0000,
-		 0x00fe0000, 0x00d70000, 0x00ab0000, 0x00760000,
-		 0x00ca0000, 0x00820000, 0x00c90000, 0x007d0000,
-		 0x00fa0000, 0x00590000, 0x00470000, 0x00f00000,
-		 0x00ad0000, 0x00d40000, 0x00a20000, 0x00af0000,
-		 0x009c0000, 0x00a40000, 0x00720000, 0x00c00000,
-		 0x00b70000, 0x00fd0000, 0x00930000, 0x00260000,
-		 0x00360000, 0x003f0000, 0x00f70000, 0x00cc0000,
-		 0x00340000, 0x00a50000, 0x00e50000, 0x00f10000,
-		 0x00710000, 0x00d80000, 0x00310000, 0x00150000,
-		 0x00040000, 0x00c70000, 0x00230000, 0x00c30000,
-		 0x00180000, 0x00960000, 0x00050000, 0x009a0000,
-		 0x00070000, 0x00120000, 0x00800000, 0x00e20000,
-		 0x00eb0000, 0x00270000, 0x00b20000, 0x00750000,
-		 0x00090000, 0x00830000, 0x002c0000, 0x001a0000,
-		 0x001b0000, 0x006e0000, 0x005a0000, 0x00a00000,
-		 0x00520000, 0x003b0000, 0x00d60000, 0x00b30000,
-		 0x00290000, 0x00e30000, 0x002f0000, 0x00840000,
-		 0x00530000, 0x00d10000, 0x00000000, 0x00ed0000,
-		 0x00200000, 0x00fc0000, 0x00b10000, 0x005b0000,
-		 0x006a0000, 0x00cb0000, 0x00be0000, 0x00390000,
-		 0x004a0000, 0x004c0000, 0x00580000, 0x00cf0000,
-		 0x00d00000, 0x00ef0000, 0x00aa0000, 0x00fb0000,
-		 0x00430000, 0x004d0000, 0x00330000, 0x00850000,
-		 0x00450000, 0x00f90000, 0x00020000, 0x007f0000,
-		 0x00500000, 0x003c0000, 0x009f0000, 0x00a80000,
-		 0x00510000, 0x00a30000, 0x00400000, 0x008f0000,
-		 0x00920000, 0x009d0000, 0x00380000, 0x00f50000,
-		 0x00bc0000, 0x00b60000, 0x00da0000, 0x00210000,
-		 0x00100000, 0x00ff0000, 0x00f30000, 0x00d20000,
-		 0x00cd0000, 0x000c0000, 0x00130000, 0x00ec0000,
-		 0x005f0000, 0x00970000, 0x00440000, 0x00170000,
-		 0x00c40000, 0x00a70000, 0x007e0000, 0x003d0000,
-		 0x00640000, 0x005d0000, 0x00190000, 0x00730000,
-		 0x00600000, 0x00810000, 0x004f0000, 0x00dc0000,
-		 0x00220000, 0x002a0000, 0x00900000, 0x00880000,
-		 0x00460000, 0x00ee0000, 0x00b80000, 0x00140000,
-		 0x00de0000, 0x005e0000, 0x000b0000, 0x00db0000,
-		 0x00e00000, 0x00320000, 0x003a0000, 0x000a0000,
-		 0x00490000, 0x00060000, 0x00240000, 0x005c0000,
-		 0x00c20000, 0x00d30000, 0x00ac0000, 0x00620000,
-		 0x00910000, 0x00950000, 0x00e40000, 0x00790000,
-		 0x00e70000, 0x00c80000, 0x00370000, 0x006d0000,
-		 0x008d0000, 0x00d50000, 0x004e0000, 0x00a90000,
-		 0x006c0000, 0x00560000, 0x00f40000, 0x00ea0000,
-		 0x00650000, 0x007a0000, 0x00ae0000, 0x00080000,
-		 0x00ba0000, 0x00780000, 0x00250000, 0x002e0000,
-		 0x001c0000, 0x00a60000, 0x00b40000, 0x00c60000,
-		 0x00e80000, 0x00dd0000, 0x00740000, 0x001f0000,
-		 0x004b0000, 0x00bd0000, 0x008b0000, 0x008a0000,
-		 0x00700000, 0x003e0000, 0x00b50000, 0x00660000,
-		 0x00480000, 0x00030000, 0x00f60000, 0x000e0000,
-		 0x00610000, 0x00350000, 0x00570000, 0x00b90000,
-		 0x00860000, 0x00c10000, 0x001d0000, 0x009e0000,
-		 0x00e10000, 0x00f80000, 0x00980000, 0x00110000,
-		 0x00690000, 0x00d90000, 0x008e0000, 0x00940000,
-		 0x009b0000, 0x001e0000, 0x00870000, 0x00e90000,
-		 0x00ce0000, 0x00550000, 0x00280000, 0x00df0000,
-		 0x008c0000, 0x00a10000, 0x00890000, 0x000d0000,
-		 0x00bf0000, 0x00e60000, 0x00420000, 0x00680000,
-		 0x00410000, 0x00990000, 0x002d0000, 0x000f0000,
-		 0x00b00000, 0x00540000, 0x00bb0000, 0x00160000,
-		 }, {
-		     0x63000000, 0x7c000000, 0x77000000, 0x7b000000,
-		     0xf2000000, 0x6b000000, 0x6f000000, 0xc5000000,
-		     0x30000000, 0x01000000, 0x67000000, 0x2b000000,
-		     0xfe000000, 0xd7000000, 0xab000000, 0x76000000,
-		     0xca000000, 0x82000000, 0xc9000000, 0x7d000000,
-		     0xfa000000, 0x59000000, 0x47000000, 0xf0000000,
-		     0xad000000, 0xd4000000, 0xa2000000, 0xaf000000,
-		     0x9c000000, 0xa4000000, 0x72000000, 0xc0000000,
-		     0xb7000000, 0xfd000000, 0x93000000, 0x26000000,
-		     0x36000000, 0x3f000000, 0xf7000000, 0xcc000000,
-		     0x34000000, 0xa5000000, 0xe5000000, 0xf1000000,
-		     0x71000000, 0xd8000000, 0x31000000, 0x15000000,
-		     0x04000000, 0xc7000000, 0x23000000, 0xc3000000,
-		     0x18000000, 0x96000000, 0x05000000, 0x9a000000,
-		     0x07000000, 0x12000000, 0x80000000, 0xe2000000,
-		     0xeb000000, 0x27000000, 0xb2000000, 0x75000000,
-		     0x09000000, 0x83000000, 0x2c000000, 0x1a000000,
-		     0x1b000000, 0x6e000000, 0x5a000000, 0xa0000000,
-		     0x52000000, 0x3b000000, 0xd6000000, 0xb3000000,
-		     0x29000000, 0xe3000000, 0x2f000000, 0x84000000,
-		     0x53000000, 0xd1000000, 0x00000000, 0xed000000,
-		     0x20000000, 0xfc000000, 0xb1000000, 0x5b000000,
-		     0x6a000000, 0xcb000000, 0xbe000000, 0x39000000,
-		     0x4a000000, 0x4c000000, 0x58000000, 0xcf000000,
-		     0xd0000000, 0xef000000, 0xaa000000, 0xfb000000,
-		     0x43000000, 0x4d000000, 0x33000000, 0x85000000,
-		     0x45000000, 0xf9000000, 0x02000000, 0x7f000000,
-		     0x50000000, 0x3c000000, 0x9f000000, 0xa8000000,
-		     0x51000000, 0xa3000000, 0x40000000, 0x8f000000,
-		     0x92000000, 0x9d000000, 0x38000000, 0xf5000000,
-		     0xbc000000, 0xb6000000, 0xda000000, 0x21000000,
-		     0x10000000, 0xff000000, 0xf3000000, 0xd2000000,
-		     0xcd000000, 0x0c000000, 0x13000000, 0xec000000,
-		     0x5f000000, 0x97000000, 0x44000000, 0x17000000,
-		     0xc4000000, 0xa7000000, 0x7e000000, 0x3d000000,
-		     0x64000000, 0x5d000000, 0x19000000, 0x73000000,
-		     0x60000000, 0x81000000, 0x4f000000, 0xdc000000,
-		     0x22000000, 0x2a000000, 0x90000000, 0x88000000,
-		     0x46000000, 0xee000000, 0xb8000000, 0x14000000,
-		     0xde000000, 0x5e000000, 0x0b000000, 0xdb000000,
-		     0xe0000000, 0x32000000, 0x3a000000, 0x0a000000,
-		     0x49000000, 0x06000000, 0x24000000, 0x5c000000,
-		     0xc2000000, 0xd3000000, 0xac000000, 0x62000000,
-		     0x91000000, 0x95000000, 0xe4000000, 0x79000000,
-		     0xe7000000, 0xc8000000, 0x37000000, 0x6d000000,
-		     0x8d000000, 0xd5000000, 0x4e000000, 0xa9000000,
-		     0x6c000000, 0x56000000, 0xf4000000, 0xea000000,
-		     0x65000000, 0x7a000000, 0xae000000, 0x08000000,
-		     0xba000000, 0x78000000, 0x25000000, 0x2e000000,
-		     0x1c000000, 0xa6000000, 0xb4000000, 0xc6000000,
-		     0xe8000000, 0xdd000000, 0x74000000, 0x1f000000,
-		     0x4b000000, 0xbd000000, 0x8b000000, 0x8a000000,
-		     0x70000000, 0x3e000000, 0xb5000000, 0x66000000,
-		     0x48000000, 0x03000000, 0xf6000000, 0x0e000000,
-		     0x61000000, 0x35000000, 0x57000000, 0xb9000000,
-		     0x86000000, 0xc1000000, 0x1d000000, 0x9e000000,
-		     0xe1000000, 0xf8000000, 0x98000000, 0x11000000,
-		     0x69000000, 0xd9000000, 0x8e000000, 0x94000000,
-		     0x9b000000, 0x1e000000, 0x87000000, 0xe9000000,
-		     0xce000000, 0x55000000, 0x28000000, 0xdf000000,
-		     0x8c000000, 0xa1000000, 0x89000000, 0x0d000000,
-		     0xbf000000, 0xe6000000, 0x42000000, 0x68000000,
-		     0x41000000, 0x99000000, 0x2d000000, 0x0f000000,
-		     0xb0000000, 0x54000000, 0xbb000000, 0x16000000,
-		     }
-};
-
-const uint32_t crypto_it_tab[4][256] = {
-	{
-	 0x50a7f451, 0x5365417e, 0xc3a4171a, 0x965e273a,
-	 0xcb6bab3b, 0xf1459d1f, 0xab58faac, 0x9303e34b,
-	 0x55fa3020, 0xf66d76ad, 0x9176cc88, 0x254c02f5,
-	 0xfcd7e54f, 0xd7cb2ac5, 0x80443526, 0x8fa362b5,
-	 0x495ab1de, 0x671bba25, 0x980eea45, 0xe1c0fe5d,
-	 0x02752fc3, 0x12f04c81, 0xa397468d, 0xc6f9d36b,
-	 0xe75f8f03, 0x959c9215, 0xeb7a6dbf, 0xda595295,
-	 0x2d83bed4, 0xd3217458, 0x2969e049, 0x44c8c98e,
-	 0x6a89c275, 0x78798ef4, 0x6b3e5899, 0xdd71b927,
-	 0xb64fe1be, 0x17ad88f0, 0x66ac20c9, 0xb43ace7d,
-	 0x184adf63, 0x82311ae5, 0x60335197, 0x457f5362,
-	 0xe07764b1, 0x84ae6bbb, 0x1ca081fe, 0x942b08f9,
-	 0x58684870, 0x19fd458f, 0x876cde94, 0xb7f87b52,
-	 0x23d373ab, 0xe2024b72, 0x578f1fe3, 0x2aab5566,
-	 0x0728ebb2, 0x03c2b52f, 0x9a7bc586, 0xa50837d3,
-	 0xf2872830, 0xb2a5bf23, 0xba6a0302, 0x5c8216ed,
-	 0x2b1ccf8a, 0x92b479a7, 0xf0f207f3, 0xa1e2694e,
-	 0xcdf4da65, 0xd5be0506, 0x1f6234d1, 0x8afea6c4,
-	 0x9d532e34, 0xa055f3a2, 0x32e18a05, 0x75ebf6a4,
-	 0x39ec830b, 0xaaef6040, 0x069f715e, 0x51106ebd,
-	 0xf98a213e, 0x3d06dd96, 0xae053edd, 0x46bde64d,
-	 0xb58d5491, 0x055dc471, 0x6fd40604, 0xff155060,
-	 0x24fb9819, 0x97e9bdd6, 0xcc434089, 0x779ed967,
-	 0xbd42e8b0, 0x888b8907, 0x385b19e7, 0xdbeec879,
-	 0x470a7ca1, 0xe90f427c, 0xc91e84f8, 0x00000000,
-	 0x83868009, 0x48ed2b32, 0xac70111e, 0x4e725a6c,
-	 0xfbff0efd, 0x5638850f, 0x1ed5ae3d, 0x27392d36,
-	 0x64d90f0a, 0x21a65c68, 0xd1545b9b, 0x3a2e3624,
-	 0xb1670a0c, 0x0fe75793, 0xd296eeb4, 0x9e919b1b,
-	 0x4fc5c080, 0xa220dc61, 0x694b775a, 0x161a121c,
-	 0x0aba93e2, 0xe52aa0c0, 0x43e0223c, 0x1d171b12,
-	 0x0b0d090e, 0xadc78bf2, 0xb9a8b62d, 0xc8a91e14,
-	 0x8519f157, 0x4c0775af, 0xbbdd99ee, 0xfd607fa3,
-	 0x9f2601f7, 0xbcf5725c, 0xc53b6644, 0x347efb5b,
-	 0x7629438b, 0xdcc623cb, 0x68fcedb6, 0x63f1e4b8,
-	 0xcadc31d7, 0x10856342, 0x40229713, 0x2011c684,
-	 0x7d244a85, 0xf83dbbd2, 0x1132f9ae, 0x6da129c7,
-	 0x4b2f9e1d, 0xf330b2dc, 0xec52860d, 0xd0e3c177,
-	 0x6c16b32b, 0x99b970a9, 0xfa489411, 0x2264e947,
-	 0xc48cfca8, 0x1a3ff0a0, 0xd82c7d56, 0xef903322,
-	 0xc74e4987, 0xc1d138d9, 0xfea2ca8c, 0x360bd498,
-	 0xcf81f5a6, 0x28de7aa5, 0x268eb7da, 0xa4bfad3f,
-	 0xe49d3a2c, 0x0d927850, 0x9bcc5f6a, 0x62467e54,
-	 0xc2138df6, 0xe8b8d890, 0x5ef7392e, 0xf5afc382,
-	 0xbe805d9f, 0x7c93d069, 0xa92dd56f, 0xb31225cf,
-	 0x3b99acc8, 0xa77d1810, 0x6e639ce8, 0x7bbb3bdb,
-	 0x097826cd, 0xf418596e, 0x01b79aec, 0xa89a4f83,
-	 0x656e95e6, 0x7ee6ffaa, 0x08cfbc21, 0xe6e815ef,
-	 0xd99be7ba, 0xce366f4a, 0xd4099fea, 0xd67cb029,
-	 0xafb2a431, 0x31233f2a, 0x3094a5c6, 0xc066a235,
-	 0x37bc4e74, 0xa6ca82fc, 0xb0d090e0, 0x15d8a733,
-	 0x4a9804f1, 0xf7daec41, 0x0e50cd7f, 0x2ff69117,
-	 0x8dd64d76, 0x4db0ef43, 0x544daacc, 0xdf0496e4,
-	 0xe3b5d19e, 0x1b886a4c, 0xb81f2cc1, 0x7f516546,
-	 0x04ea5e9d, 0x5d358c01, 0x737487fa, 0x2e410bfb,
-	 0x5a1d67b3, 0x52d2db92, 0x335610e9, 0x1347d66d,
-	 0x8c61d79a, 0x7a0ca137, 0x8e14f859, 0x893c13eb,
-	 0xee27a9ce, 0x35c961b7, 0xede51ce1, 0x3cb1477a,
-	 0x59dfd29c, 0x3f73f255, 0x79ce1418, 0xbf37c773,
-	 0xeacdf753, 0x5baafd5f, 0x146f3ddf, 0x86db4478,
-	 0x81f3afca, 0x3ec468b9, 0x2c342438, 0x5f40a3c2,
-	 0x72c31d16, 0x0c25e2bc, 0x8b493c28, 0x41950dff,
-	 0x7101a839, 0xdeb30c08, 0x9ce4b4d8, 0x90c15664,
-	 0x6184cb7b, 0x70b632d5, 0x745c6c48, 0x4257b8d0,
-	 }, {
-	     0xa7f45150, 0x65417e53, 0xa4171ac3, 0x5e273a96,
-	     0x6bab3bcb, 0x459d1ff1, 0x58faacab, 0x03e34b93,
-	     0xfa302055, 0x6d76adf6, 0x76cc8891, 0x4c02f525,
-	     0xd7e54ffc, 0xcb2ac5d7, 0x44352680, 0xa362b58f,
-	     0x5ab1de49, 0x1bba2567, 0x0eea4598, 0xc0fe5de1,
-	     0x752fc302, 0xf04c8112, 0x97468da3, 0xf9d36bc6,
-	     0x5f8f03e7, 0x9c921595, 0x7a6dbfeb, 0x595295da,
-	     0x83bed42d, 0x217458d3, 0x69e04929, 0xc8c98e44,
-	     0x89c2756a, 0x798ef478, 0x3e58996b, 0x71b927dd,
-	     0x4fe1beb6, 0xad88f017, 0xac20c966, 0x3ace7db4,
-	     0x4adf6318, 0x311ae582, 0x33519760, 0x7f536245,
-	     0x7764b1e0, 0xae6bbb84, 0xa081fe1c, 0x2b08f994,
-	     0x68487058, 0xfd458f19, 0x6cde9487, 0xf87b52b7,
-	     0xd373ab23, 0x024b72e2, 0x8f1fe357, 0xab55662a,
-	     0x28ebb207, 0xc2b52f03, 0x7bc5869a, 0x0837d3a5,
-	     0x872830f2, 0xa5bf23b2, 0x6a0302ba, 0x8216ed5c,
-	     0x1ccf8a2b, 0xb479a792, 0xf207f3f0, 0xe2694ea1,
-	     0xf4da65cd, 0xbe0506d5, 0x6234d11f, 0xfea6c48a,
-	     0x532e349d, 0x55f3a2a0, 0xe18a0532, 0xebf6a475,
-	     0xec830b39, 0xef6040aa, 0x9f715e06, 0x106ebd51,
-	     0x8a213ef9, 0x06dd963d, 0x053eddae, 0xbde64d46,
-	     0x8d5491b5, 0x5dc47105, 0xd406046f, 0x155060ff,
-	     0xfb981924, 0xe9bdd697, 0x434089cc, 0x9ed96777,
-	     0x42e8b0bd, 0x8b890788, 0x5b19e738, 0xeec879db,
-	     0x0a7ca147, 0x0f427ce9, 0x1e84f8c9, 0x00000000,
-	     0x86800983, 0xed2b3248, 0x70111eac, 0x725a6c4e,
-	     0xff0efdfb, 0x38850f56, 0xd5ae3d1e, 0x392d3627,
-	     0xd90f0a64, 0xa65c6821, 0x545b9bd1, 0x2e36243a,
-	     0x670a0cb1, 0xe757930f, 0x96eeb4d2, 0x919b1b9e,
-	     0xc5c0804f, 0x20dc61a2, 0x4b775a69, 0x1a121c16,
-	     0xba93e20a, 0x2aa0c0e5, 0xe0223c43, 0x171b121d,
-	     0x0d090e0b, 0xc78bf2ad, 0xa8b62db9, 0xa91e14c8,
-	     0x19f15785, 0x0775af4c, 0xdd99eebb, 0x607fa3fd,
-	     0x2601f79f, 0xf5725cbc, 0x3b6644c5, 0x7efb5b34,
-	     0x29438b76, 0xc623cbdc, 0xfcedb668, 0xf1e4b863,
-	     0xdc31d7ca, 0x85634210, 0x22971340, 0x11c68420,
-	     0x244a857d, 0x3dbbd2f8, 0x32f9ae11, 0xa129c76d,
-	     0x2f9e1d4b, 0x30b2dcf3, 0x52860dec, 0xe3c177d0,
-	     0x16b32b6c, 0xb970a999, 0x489411fa, 0x64e94722,
-	     0x8cfca8c4, 0x3ff0a01a, 0x2c7d56d8, 0x903322ef,
-	     0x4e4987c7, 0xd138d9c1, 0xa2ca8cfe, 0x0bd49836,
-	     0x81f5a6cf, 0xde7aa528, 0x8eb7da26, 0xbfad3fa4,
-	     0x9d3a2ce4, 0x9278500d, 0xcc5f6a9b, 0x467e5462,
-	     0x138df6c2, 0xb8d890e8, 0xf7392e5e, 0xafc382f5,
-	     0x805d9fbe, 0x93d0697c, 0x2dd56fa9, 0x1225cfb3,
-	     0x99acc83b, 0x7d1810a7, 0x639ce86e, 0xbb3bdb7b,
-	     0x7826cd09, 0x18596ef4, 0xb79aec01, 0x9a4f83a8,
-	     0x6e95e665, 0xe6ffaa7e, 0xcfbc2108, 0xe815efe6,
-	     0x9be7bad9, 0x366f4ace, 0x099fead4, 0x7cb029d6,
-	     0xb2a431af, 0x233f2a31, 0x94a5c630, 0x66a235c0,
-	     0xbc4e7437, 0xca82fca6, 0xd090e0b0, 0xd8a73315,
-	     0x9804f14a, 0xdaec41f7, 0x50cd7f0e, 0xf691172f,
-	     0xd64d768d, 0xb0ef434d, 0x4daacc54, 0x0496e4df,
-	     0xb5d19ee3, 0x886a4c1b, 0x1f2cc1b8, 0x5165467f,
-	     0xea5e9d04, 0x358c015d, 0x7487fa73, 0x410bfb2e,
-	     0x1d67b35a, 0xd2db9252, 0x5610e933, 0x47d66d13,
-	     0x61d79a8c, 0x0ca1377a, 0x14f8598e, 0x3c13eb89,
-	     0x27a9ceee, 0xc961b735, 0xe51ce1ed, 0xb1477a3c,
-	     0xdfd29c59, 0x73f2553f, 0xce141879, 0x37c773bf,
-	     0xcdf753ea, 0xaafd5f5b, 0x6f3ddf14, 0xdb447886,
-	     0xf3afca81, 0xc468b93e, 0x3424382c, 0x40a3c25f,
-	     0xc31d1672, 0x25e2bc0c, 0x493c288b, 0x950dff41,
-	     0x01a83971, 0xb30c08de, 0xe4b4d89c, 0xc1566490,
-	     0x84cb7b61, 0xb632d570, 0x5c6c4874, 0x57b8d042,
-	     }, {
-		 0xf45150a7, 0x417e5365, 0x171ac3a4, 0x273a965e,
-		 0xab3bcb6b, 0x9d1ff145, 0xfaacab58, 0xe34b9303,
-		 0x302055fa, 0x76adf66d, 0xcc889176, 0x02f5254c,
-		 0xe54ffcd7, 0x2ac5d7cb, 0x35268044, 0x62b58fa3,
-		 0xb1de495a, 0xba25671b, 0xea45980e, 0xfe5de1c0,
-		 0x2fc30275, 0x4c8112f0, 0x468da397, 0xd36bc6f9,
-		 0x8f03e75f, 0x9215959c, 0x6dbfeb7a, 0x5295da59,
-		 0xbed42d83, 0x7458d321, 0xe0492969, 0xc98e44c8,
-		 0xc2756a89, 0x8ef47879, 0x58996b3e, 0xb927dd71,
-		 0xe1beb64f, 0x88f017ad, 0x20c966ac, 0xce7db43a,
-		 0xdf63184a, 0x1ae58231, 0x51976033, 0x5362457f,
-		 0x64b1e077, 0x6bbb84ae, 0x81fe1ca0, 0x08f9942b,
-		 0x48705868, 0x458f19fd, 0xde94876c, 0x7b52b7f8,
-		 0x73ab23d3, 0x4b72e202, 0x1fe3578f, 0x55662aab,
-		 0xebb20728, 0xb52f03c2, 0xc5869a7b, 0x37d3a508,
-		 0x2830f287, 0xbf23b2a5, 0x0302ba6a, 0x16ed5c82,
-		 0xcf8a2b1c, 0x79a792b4, 0x07f3f0f2, 0x694ea1e2,
-		 0xda65cdf4, 0x0506d5be, 0x34d11f62, 0xa6c48afe,
-		 0x2e349d53, 0xf3a2a055, 0x8a0532e1, 0xf6a475eb,
-		 0x830b39ec, 0x6040aaef, 0x715e069f, 0x6ebd5110,
-		 0x213ef98a, 0xdd963d06, 0x3eddae05, 0xe64d46bd,
-		 0x5491b58d, 0xc471055d, 0x06046fd4, 0x5060ff15,
-		 0x981924fb, 0xbdd697e9, 0x4089cc43, 0xd967779e,
-		 0xe8b0bd42, 0x8907888b, 0x19e7385b, 0xc879dbee,
-		 0x7ca1470a, 0x427ce90f, 0x84f8c91e, 0x00000000,
-		 0x80098386, 0x2b3248ed, 0x111eac70, 0x5a6c4e72,
-		 0x0efdfbff, 0x850f5638, 0xae3d1ed5, 0x2d362739,
-		 0x0f0a64d9, 0x5c6821a6, 0x5b9bd154, 0x36243a2e,
-		 0x0a0cb167, 0x57930fe7, 0xeeb4d296, 0x9b1b9e91,
-		 0xc0804fc5, 0xdc61a220, 0x775a694b, 0x121c161a,
-		 0x93e20aba, 0xa0c0e52a, 0x223c43e0, 0x1b121d17,
-		 0x090e0b0d, 0x8bf2adc7, 0xb62db9a8, 0x1e14c8a9,
-		 0xf1578519, 0x75af4c07, 0x99eebbdd, 0x7fa3fd60,
-		 0x01f79f26, 0x725cbcf5, 0x6644c53b, 0xfb5b347e,
-		 0x438b7629, 0x23cbdcc6, 0xedb668fc, 0xe4b863f1,
-		 0x31d7cadc, 0x63421085, 0x97134022, 0xc6842011,
-		 0x4a857d24, 0xbbd2f83d, 0xf9ae1132, 0x29c76da1,
-		 0x9e1d4b2f, 0xb2dcf330, 0x860dec52, 0xc177d0e3,
-		 0xb32b6c16, 0x70a999b9, 0x9411fa48, 0xe9472264,
-		 0xfca8c48c, 0xf0a01a3f, 0x7d56d82c, 0x3322ef90,
-		 0x4987c74e, 0x38d9c1d1, 0xca8cfea2, 0xd498360b,
-		 0xf5a6cf81, 0x7aa528de, 0xb7da268e, 0xad3fa4bf,
-		 0x3a2ce49d, 0x78500d92, 0x5f6a9bcc, 0x7e546246,
-		 0x8df6c213, 0xd890e8b8, 0x392e5ef7, 0xc382f5af,
-		 0x5d9fbe80, 0xd0697c93, 0xd56fa92d, 0x25cfb312,
-		 0xacc83b99, 0x1810a77d, 0x9ce86e63, 0x3bdb7bbb,
-		 0x26cd0978, 0x596ef418, 0x9aec01b7, 0x4f83a89a,
-		 0x95e6656e, 0xffaa7ee6, 0xbc2108cf, 0x15efe6e8,
-		 0xe7bad99b, 0x6f4ace36, 0x9fead409, 0xb029d67c,
-		 0xa431afb2, 0x3f2a3123, 0xa5c63094, 0xa235c066,
-		 0x4e7437bc, 0x82fca6ca, 0x90e0b0d0, 0xa73315d8,
-		 0x04f14a98, 0xec41f7da, 0xcd7f0e50, 0x91172ff6,
-		 0x4d768dd6, 0xef434db0, 0xaacc544d, 0x96e4df04,
-		 0xd19ee3b5, 0x6a4c1b88, 0x2cc1b81f, 0x65467f51,
-		 0x5e9d04ea, 0x8c015d35, 0x87fa7374, 0x0bfb2e41,
-		 0x67b35a1d, 0xdb9252d2, 0x10e93356, 0xd66d1347,
-		 0xd79a8c61, 0xa1377a0c, 0xf8598e14, 0x13eb893c,
-		 0xa9ceee27, 0x61b735c9, 0x1ce1ede5, 0x477a3cb1,
-		 0xd29c59df, 0xf2553f73, 0x141879ce, 0xc773bf37,
-		 0xf753eacd, 0xfd5f5baa, 0x3ddf146f, 0x447886db,
-		 0xafca81f3, 0x68b93ec4, 0x24382c34, 0xa3c25f40,
-		 0x1d1672c3, 0xe2bc0c25, 0x3c288b49, 0x0dff4195,
-		 0xa8397101, 0x0c08deb3, 0xb4d89ce4, 0x566490c1,
-		 0xcb7b6184, 0x32d570b6, 0x6c48745c, 0xb8d04257,
-		 }, {
-		     0x5150a7f4, 0x7e536541, 0x1ac3a417, 0x3a965e27,
-		     0x3bcb6bab, 0x1ff1459d, 0xacab58fa, 0x4b9303e3,
-		     0x2055fa30, 0xadf66d76, 0x889176cc, 0xf5254c02,
-		     0x4ffcd7e5, 0xc5d7cb2a, 0x26804435, 0xb58fa362,
-		     0xde495ab1, 0x25671bba, 0x45980eea, 0x5de1c0fe,
-		     0xc302752f, 0x8112f04c, 0x8da39746, 0x6bc6f9d3,
-		     0x03e75f8f, 0x15959c92, 0xbfeb7a6d, 0x95da5952,
-		     0xd42d83be, 0x58d32174, 0x492969e0, 0x8e44c8c9,
-		     0x756a89c2, 0xf478798e, 0x996b3e58, 0x27dd71b9,
-		     0xbeb64fe1, 0xf017ad88, 0xc966ac20, 0x7db43ace,
-		     0x63184adf, 0xe582311a, 0x97603351, 0x62457f53,
-		     0xb1e07764, 0xbb84ae6b, 0xfe1ca081, 0xf9942b08,
-		     0x70586848, 0x8f19fd45, 0x94876cde, 0x52b7f87b,
-		     0xab23d373, 0x72e2024b, 0xe3578f1f, 0x662aab55,
-		     0xb20728eb, 0x2f03c2b5, 0x869a7bc5, 0xd3a50837,
-		     0x30f28728, 0x23b2a5bf, 0x02ba6a03, 0xed5c8216,
-		     0x8a2b1ccf, 0xa792b479, 0xf3f0f207, 0x4ea1e269,
-		     0x65cdf4da, 0x06d5be05, 0xd11f6234, 0xc48afea6,
-		     0x349d532e, 0xa2a055f3, 0x0532e18a, 0xa475ebf6,
-		     0x0b39ec83, 0x40aaef60, 0x5e069f71, 0xbd51106e,
-		     0x3ef98a21, 0x963d06dd, 0xddae053e, 0x4d46bde6,
-		     0x91b58d54, 0x71055dc4, 0x046fd406, 0x60ff1550,
-		     0x1924fb98, 0xd697e9bd, 0x89cc4340, 0x67779ed9,
-		     0xb0bd42e8, 0x07888b89, 0xe7385b19, 0x79dbeec8,
-		     0xa1470a7c, 0x7ce90f42, 0xf8c91e84, 0x00000000,
-		     0x09838680, 0x3248ed2b, 0x1eac7011, 0x6c4e725a,
-		     0xfdfbff0e, 0x0f563885, 0x3d1ed5ae, 0x3627392d,
-		     0x0a64d90f, 0x6821a65c, 0x9bd1545b, 0x243a2e36,
-		     0x0cb1670a, 0x930fe757, 0xb4d296ee, 0x1b9e919b,
-		     0x804fc5c0, 0x61a220dc, 0x5a694b77, 0x1c161a12,
-		     0xe20aba93, 0xc0e52aa0, 0x3c43e022, 0x121d171b,
-		     0x0e0b0d09, 0xf2adc78b, 0x2db9a8b6, 0x14c8a91e,
-		     0x578519f1, 0xaf4c0775, 0xeebbdd99, 0xa3fd607f,
-		     0xf79f2601, 0x5cbcf572, 0x44c53b66, 0x5b347efb,
-		     0x8b762943, 0xcbdcc623, 0xb668fced, 0xb863f1e4,
-		     0xd7cadc31, 0x42108563, 0x13402297, 0x842011c6,
-		     0x857d244a, 0xd2f83dbb, 0xae1132f9, 0xc76da129,
-		     0x1d4b2f9e, 0xdcf330b2, 0x0dec5286, 0x77d0e3c1,
-		     0x2b6c16b3, 0xa999b970, 0x11fa4894, 0x472264e9,
-		     0xa8c48cfc, 0xa01a3ff0, 0x56d82c7d, 0x22ef9033,
-		     0x87c74e49, 0xd9c1d138, 0x8cfea2ca, 0x98360bd4,
-		     0xa6cf81f5, 0xa528de7a, 0xda268eb7, 0x3fa4bfad,
-		     0x2ce49d3a, 0x500d9278, 0x6a9bcc5f, 0x5462467e,
-		     0xf6c2138d, 0x90e8b8d8, 0x2e5ef739, 0x82f5afc3,
-		     0x9fbe805d, 0x697c93d0, 0x6fa92dd5, 0xcfb31225,
-		     0xc83b99ac, 0x10a77d18, 0xe86e639c, 0xdb7bbb3b,
-		     0xcd097826, 0x6ef41859, 0xec01b79a, 0x83a89a4f,
-		     0xe6656e95, 0xaa7ee6ff, 0x2108cfbc, 0xefe6e815,
-		     0xbad99be7, 0x4ace366f, 0xead4099f, 0x29d67cb0,
-		     0x31afb2a4, 0x2a31233f, 0xc63094a5, 0x35c066a2,
-		     0x7437bc4e, 0xfca6ca82, 0xe0b0d090, 0x3315d8a7,
-		     0xf14a9804, 0x41f7daec, 0x7f0e50cd, 0x172ff691,
-		     0x768dd64d, 0x434db0ef, 0xcc544daa, 0xe4df0496,
-		     0x9ee3b5d1, 0x4c1b886a, 0xc1b81f2c, 0x467f5165,
-		     0x9d04ea5e, 0x015d358c, 0xfa737487, 0xfb2e410b,
-		     0xb35a1d67, 0x9252d2db, 0xe9335610, 0x6d1347d6,
-		     0x9a8c61d7, 0x377a0ca1, 0x598e14f8, 0xeb893c13,
-		     0xceee27a9, 0xb735c961, 0xe1ede51c, 0x7a3cb147,
-		     0x9c59dfd2, 0x553f73f2, 0x1879ce14, 0x73bf37c7,
-		     0x53eacdf7, 0x5f5baafd, 0xdf146f3d, 0x7886db44,
-		     0xca81f3af, 0xb93ec468, 0x382c3424, 0xc25f40a3,
-		     0x1672c31d, 0xbc0c25e2, 0x288b493c, 0xff41950d,
-		     0x397101a8, 0x08deb30c, 0xd89ce4b4, 0x6490c156,
-		     0x7b6184cb, 0xd570b632, 0x48745c6c, 0xd04257b8,
-		     }
-};
-
-const uint32_t crypto_il_tab[4][256] = {
-	{
-	 0x00000052, 0x00000009, 0x0000006a, 0x000000d5,
-	 0x00000030, 0x00000036, 0x000000a5, 0x00000038,
-	 0x000000bf, 0x00000040, 0x000000a3, 0x0000009e,
-	 0x00000081, 0x000000f3, 0x000000d7, 0x000000fb,
-	 0x0000007c, 0x000000e3, 0x00000039, 0x00000082,
-	 0x0000009b, 0x0000002f, 0x000000ff, 0x00000087,
-	 0x00000034, 0x0000008e, 0x00000043, 0x00000044,
-	 0x000000c4, 0x000000de, 0x000000e9, 0x000000cb,
-	 0x00000054, 0x0000007b, 0x00000094, 0x00000032,
-	 0x000000a6, 0x000000c2, 0x00000023, 0x0000003d,
-	 0x000000ee, 0x0000004c, 0x00000095, 0x0000000b,
-	 0x00000042, 0x000000fa, 0x000000c3, 0x0000004e,
-	 0x00000008, 0x0000002e, 0x000000a1, 0x00000066,
-	 0x00000028, 0x000000d9, 0x00000024, 0x000000b2,
-	 0x00000076, 0x0000005b, 0x000000a2, 0x00000049,
-	 0x0000006d, 0x0000008b, 0x000000d1, 0x00000025,
-	 0x00000072, 0x000000f8, 0x000000f6, 0x00000064,
-	 0x00000086, 0x00000068, 0x00000098, 0x00000016,
-	 0x000000d4, 0x000000a4, 0x0000005c, 0x000000cc,
-	 0x0000005d, 0x00000065, 0x000000b6, 0x00000092,
-	 0x0000006c, 0x00000070, 0x00000048, 0x00000050,
-	 0x000000fd, 0x000000ed, 0x000000b9, 0x000000da,
-	 0x0000005e, 0x00000015, 0x00000046, 0x00000057,
-	 0x000000a7, 0x0000008d, 0x0000009d, 0x00000084,
-	 0x00000090, 0x000000d8, 0x000000ab, 0x00000000,
-	 0x0000008c, 0x000000bc, 0x000000d3, 0x0000000a,
-	 0x000000f7, 0x000000e4, 0x00000058, 0x00000005,
-	 0x000000b8, 0x000000b3, 0x00000045, 0x00000006,
-	 0x000000d0, 0x0000002c, 0x0000001e, 0x0000008f,
-	 0x000000ca, 0x0000003f, 0x0000000f, 0x00000002,
-	 0x000000c1, 0x000000af, 0x000000bd, 0x00000003,
-	 0x00000001, 0x00000013, 0x0000008a, 0x0000006b,
-	 0x0000003a, 0x00000091, 0x00000011, 0x00000041,
-	 0x0000004f, 0x00000067, 0x000000dc, 0x000000ea,
-	 0x00000097, 0x000000f2, 0x000000cf, 0x000000ce,
-	 0x000000f0, 0x000000b4, 0x000000e6, 0x00000073,
-	 0x00000096, 0x000000ac, 0x00000074, 0x00000022,
-	 0x000000e7, 0x000000ad, 0x00000035, 0x00000085,
-	 0x000000e2, 0x000000f9, 0x00000037, 0x000000e8,
-	 0x0000001c, 0x00000075, 0x000000df, 0x0000006e,
-	 0x00000047, 0x000000f1, 0x0000001a, 0x00000071,
-	 0x0000001d, 0x00000029, 0x000000c5, 0x00000089,
-	 0x0000006f, 0x000000b7, 0x00000062, 0x0000000e,
-	 0x000000aa, 0x00000018, 0x000000be, 0x0000001b,
-	 0x000000fc, 0x00000056, 0x0000003e, 0x0000004b,
-	 0x000000c6, 0x000000d2, 0x00000079, 0x00000020,
-	 0x0000009a, 0x000000db, 0x000000c0, 0x000000fe,
-	 0x00000078, 0x000000cd, 0x0000005a, 0x000000f4,
-	 0x0000001f, 0x000000dd, 0x000000a8, 0x00000033,
-	 0x00000088, 0x00000007, 0x000000c7, 0x00000031,
-	 0x000000b1, 0x00000012, 0x00000010, 0x00000059,
-	 0x00000027, 0x00000080, 0x000000ec, 0x0000005f,
-	 0x00000060, 0x00000051, 0x0000007f, 0x000000a9,
-	 0x00000019, 0x000000b5, 0x0000004a, 0x0000000d,
-	 0x0000002d, 0x000000e5, 0x0000007a, 0x0000009f,
-	 0x00000093, 0x000000c9, 0x0000009c, 0x000000ef,
-	 0x000000a0, 0x000000e0, 0x0000003b, 0x0000004d,
-	 0x000000ae, 0x0000002a, 0x000000f5, 0x000000b0,
-	 0x000000c8, 0x000000eb, 0x000000bb, 0x0000003c,
-	 0x00000083, 0x00000053, 0x00000099, 0x00000061,
-	 0x00000017, 0x0000002b, 0x00000004, 0x0000007e,
-	 0x000000ba, 0x00000077, 0x000000d6, 0x00000026,
-	 0x000000e1, 0x00000069, 0x00000014, 0x00000063,
-	 0x00000055, 0x00000021, 0x0000000c, 0x0000007d,
-	 }, {
-	     0x00005200, 0x00000900, 0x00006a00, 0x0000d500,
-	     0x00003000, 0x00003600, 0x0000a500, 0x00003800,
-	     0x0000bf00, 0x00004000, 0x0000a300, 0x00009e00,
-	     0x00008100, 0x0000f300, 0x0000d700, 0x0000fb00,
-	     0x00007c00, 0x0000e300, 0x00003900, 0x00008200,
-	     0x00009b00, 0x00002f00, 0x0000ff00, 0x00008700,
-	     0x00003400, 0x00008e00, 0x00004300, 0x00004400,
-	     0x0000c400, 0x0000de00, 0x0000e900, 0x0000cb00,
-	     0x00005400, 0x00007b00, 0x00009400, 0x00003200,
-	     0x0000a600, 0x0000c200, 0x00002300, 0x00003d00,
-	     0x0000ee00, 0x00004c00, 0x00009500, 0x00000b00,
-	     0x00004200, 0x0000fa00, 0x0000c300, 0x00004e00,
-	     0x00000800, 0x00002e00, 0x0000a100, 0x00006600,
-	     0x00002800, 0x0000d900, 0x00002400, 0x0000b200,
-	     0x00007600, 0x00005b00, 0x0000a200, 0x00004900,
-	     0x00006d00, 0x00008b00, 0x0000d100, 0x00002500,
-	     0x00007200, 0x0000f800, 0x0000f600, 0x00006400,
-	     0x00008600, 0x00006800, 0x00009800, 0x00001600,
-	     0x0000d400, 0x0000a400, 0x00005c00, 0x0000cc00,
-	     0x00005d00, 0x00006500, 0x0000b600, 0x00009200,
-	     0x00006c00, 0x00007000, 0x00004800, 0x00005000,
-	     0x0000fd00, 0x0000ed00, 0x0000b900, 0x0000da00,
-	     0x00005e00, 0x00001500, 0x00004600, 0x00005700,
-	     0x0000a700, 0x00008d00, 0x00009d00, 0x00008400,
-	     0x00009000, 0x0000d800, 0x0000ab00, 0x00000000,
-	     0x00008c00, 0x0000bc00, 0x0000d300, 0x00000a00,
-	     0x0000f700, 0x0000e400, 0x00005800, 0x00000500,
-	     0x0000b800, 0x0000b300, 0x00004500, 0x00000600,
-	     0x0000d000, 0x00002c00, 0x00001e00, 0x00008f00,
-	     0x0000ca00, 0x00003f00, 0x00000f00, 0x00000200,
-	     0x0000c100, 0x0000af00, 0x0000bd00, 0x00000300,
-	     0x00000100, 0x00001300, 0x00008a00, 0x00006b00,
-	     0x00003a00, 0x00009100, 0x00001100, 0x00004100,
-	     0x00004f00, 0x00006700, 0x0000dc00, 0x0000ea00,
-	     0x00009700, 0x0000f200, 0x0000cf00, 0x0000ce00,
-	     0x0000f000, 0x0000b400, 0x0000e600, 0x00007300,
-	     0x00009600, 0x0000ac00, 0x00007400, 0x00002200,
-	     0x0000e700, 0x0000ad00, 0x00003500, 0x00008500,
-	     0x0000e200, 0x0000f900, 0x00003700, 0x0000e800,
-	     0x00001c00, 0x00007500, 0x0000df00, 0x00006e00,
-	     0x00004700, 0x0000f100, 0x00001a00, 0x00007100,
-	     0x00001d00, 0x00002900, 0x0000c500, 0x00008900,
-	     0x00006f00, 0x0000b700, 0x00006200, 0x00000e00,
-	     0x0000aa00, 0x00001800, 0x0000be00, 0x00001b00,
-	     0x0000fc00, 0x00005600, 0x00003e00, 0x00004b00,
-	     0x0000c600, 0x0000d200, 0x00007900, 0x00002000,
-	     0x00009a00, 0x0000db00, 0x0000c000, 0x0000fe00,
-	     0x00007800, 0x0000cd00, 0x00005a00, 0x0000f400,
-	     0x00001f00, 0x0000dd00, 0x0000a800, 0x00003300,
-	     0x00008800, 0x00000700, 0x0000c700, 0x00003100,
-	     0x0000b100, 0x00001200, 0x00001000, 0x00005900,
-	     0x00002700, 0x00008000, 0x0000ec00, 0x00005f00,
-	     0x00006000, 0x00005100, 0x00007f00, 0x0000a900,
-	     0x00001900, 0x0000b500, 0x00004a00, 0x00000d00,
-	     0x00002d00, 0x0000e500, 0x00007a00, 0x00009f00,
-	     0x00009300, 0x0000c900, 0x00009c00, 0x0000ef00,
-	     0x0000a000, 0x0000e000, 0x00003b00, 0x00004d00,
-	     0x0000ae00, 0x00002a00, 0x0000f500, 0x0000b000,
-	     0x0000c800, 0x0000eb00, 0x0000bb00, 0x00003c00,
-	     0x00008300, 0x00005300, 0x00009900, 0x00006100,
-	     0x00001700, 0x00002b00, 0x00000400, 0x00007e00,
-	     0x0000ba00, 0x00007700, 0x0000d600, 0x00002600,
-	     0x0000e100, 0x00006900, 0x00001400, 0x00006300,
-	     0x00005500, 0x00002100, 0x00000c00, 0x00007d00,
-	     }, {
-		 0x00520000, 0x00090000, 0x006a0000, 0x00d50000,
-		 0x00300000, 0x00360000, 0x00a50000, 0x00380000,
-		 0x00bf0000, 0x00400000, 0x00a30000, 0x009e0000,
-		 0x00810000, 0x00f30000, 0x00d70000, 0x00fb0000,
-		 0x007c0000, 0x00e30000, 0x00390000, 0x00820000,
-		 0x009b0000, 0x002f0000, 0x00ff0000, 0x00870000,
-		 0x00340000, 0x008e0000, 0x00430000, 0x00440000,
-		 0x00c40000, 0x00de0000, 0x00e90000, 0x00cb0000,
-		 0x00540000, 0x007b0000, 0x00940000, 0x00320000,
-		 0x00a60000, 0x00c20000, 0x00230000, 0x003d0000,
-		 0x00ee0000, 0x004c0000, 0x00950000, 0x000b0000,
-		 0x00420000, 0x00fa0000, 0x00c30000, 0x004e0000,
-		 0x00080000, 0x002e0000, 0x00a10000, 0x00660000,
-		 0x00280000, 0x00d90000, 0x00240000, 0x00b20000,
-		 0x00760000, 0x005b0000, 0x00a20000, 0x00490000,
-		 0x006d0000, 0x008b0000, 0x00d10000, 0x00250000,
-		 0x00720000, 0x00f80000, 0x00f60000, 0x00640000,
-		 0x00860000, 0x00680000, 0x00980000, 0x00160000,
-		 0x00d40000, 0x00a40000, 0x005c0000, 0x00cc0000,
-		 0x005d0000, 0x00650000, 0x00b60000, 0x00920000,
-		 0x006c0000, 0x00700000, 0x00480000, 0x00500000,
-		 0x00fd0000, 0x00ed0000, 0x00b90000, 0x00da0000,
-		 0x005e0000, 0x00150000, 0x00460000, 0x00570000,
-		 0x00a70000, 0x008d0000, 0x009d0000, 0x00840000,
-		 0x00900000, 0x00d80000, 0x00ab0000, 0x00000000,
-		 0x008c0000, 0x00bc0000, 0x00d30000, 0x000a0000,
-		 0x00f70000, 0x00e40000, 0x00580000, 0x00050000,
-		 0x00b80000, 0x00b30000, 0x00450000, 0x00060000,
-		 0x00d00000, 0x002c0000, 0x001e0000, 0x008f0000,
-		 0x00ca0000, 0x003f0000, 0x000f0000, 0x00020000,
-		 0x00c10000, 0x00af0000, 0x00bd0000, 0x00030000,
-		 0x00010000, 0x00130000, 0x008a0000, 0x006b0000,
-		 0x003a0000, 0x00910000, 0x00110000, 0x00410000,
-		 0x004f0000, 0x00670000, 0x00dc0000, 0x00ea0000,
-		 0x00970000, 0x00f20000, 0x00cf0000, 0x00ce0000,
-		 0x00f00000, 0x00b40000, 0x00e60000, 0x00730000,
-		 0x00960000, 0x00ac0000, 0x00740000, 0x00220000,
-		 0x00e70000, 0x00ad0000, 0x00350000, 0x00850000,
-		 0x00e20000, 0x00f90000, 0x00370000, 0x00e80000,
-		 0x001c0000, 0x00750000, 0x00df0000, 0x006e0000,
-		 0x00470000, 0x00f10000, 0x001a0000, 0x00710000,
-		 0x001d0000, 0x00290000, 0x00c50000, 0x00890000,
-		 0x006f0000, 0x00b70000, 0x00620000, 0x000e0000,
-		 0x00aa0000, 0x00180000, 0x00be0000, 0x001b0000,
-		 0x00fc0000, 0x00560000, 0x003e0000, 0x004b0000,
-		 0x00c60000, 0x00d20000, 0x00790000, 0x00200000,
-		 0x009a0000, 0x00db0000, 0x00c00000, 0x00fe0000,
-		 0x00780000, 0x00cd0000, 0x005a0000, 0x00f40000,
-		 0x001f0000, 0x00dd0000, 0x00a80000, 0x00330000,
-		 0x00880000, 0x00070000, 0x00c70000, 0x00310000,
-		 0x00b10000, 0x00120000, 0x00100000, 0x00590000,
-		 0x00270000, 0x00800000, 0x00ec0000, 0x005f0000,
-		 0x00600000, 0x00510000, 0x007f0000, 0x00a90000,
-		 0x00190000, 0x00b50000, 0x004a0000, 0x000d0000,
-		 0x002d0000, 0x00e50000, 0x007a0000, 0x009f0000,
-		 0x00930000, 0x00c90000, 0x009c0000, 0x00ef0000,
-		 0x00a00000, 0x00e00000, 0x003b0000, 0x004d0000,
-		 0x00ae0000, 0x002a0000, 0x00f50000, 0x00b00000,
-		 0x00c80000, 0x00eb0000, 0x00bb0000, 0x003c0000,
-		 0x00830000, 0x00530000, 0x00990000, 0x00610000,
-		 0x00170000, 0x002b0000, 0x00040000, 0x007e0000,
-		 0x00ba0000, 0x00770000, 0x00d60000, 0x00260000,
-		 0x00e10000, 0x00690000, 0x00140000, 0x00630000,
-		 0x00550000, 0x00210000, 0x000c0000, 0x007d0000,
-		 }, {
-		     0x52000000, 0x09000000, 0x6a000000, 0xd5000000,
-		     0x30000000, 0x36000000, 0xa5000000, 0x38000000,
-		     0xbf000000, 0x40000000, 0xa3000000, 0x9e000000,
-		     0x81000000, 0xf3000000, 0xd7000000, 0xfb000000,
-		     0x7c000000, 0xe3000000, 0x39000000, 0x82000000,
-		     0x9b000000, 0x2f000000, 0xff000000, 0x87000000,
-		     0x34000000, 0x8e000000, 0x43000000, 0x44000000,
-		     0xc4000000, 0xde000000, 0xe9000000, 0xcb000000,
-		     0x54000000, 0x7b000000, 0x94000000, 0x32000000,
-		     0xa6000000, 0xc2000000, 0x23000000, 0x3d000000,
-		     0xee000000, 0x4c000000, 0x95000000, 0x0b000000,
-		     0x42000000, 0xfa000000, 0xc3000000, 0x4e000000,
-		     0x08000000, 0x2e000000, 0xa1000000, 0x66000000,
-		     0x28000000, 0xd9000000, 0x24000000, 0xb2000000,
-		     0x76000000, 0x5b000000, 0xa2000000, 0x49000000,
-		     0x6d000000, 0x8b000000, 0xd1000000, 0x25000000,
-		     0x72000000, 0xf8000000, 0xf6000000, 0x64000000,
-		     0x86000000, 0x68000000, 0x98000000, 0x16000000,
-		     0xd4000000, 0xa4000000, 0x5c000000, 0xcc000000,
-		     0x5d000000, 0x65000000, 0xb6000000, 0x92000000,
-		     0x6c000000, 0x70000000, 0x48000000, 0x50000000,
-		     0xfd000000, 0xed000000, 0xb9000000, 0xda000000,
-		     0x5e000000, 0x15000000, 0x46000000, 0x57000000,
-		     0xa7000000, 0x8d000000, 0x9d000000, 0x84000000,
-		     0x90000000, 0xd8000000, 0xab000000, 0x00000000,
-		     0x8c000000, 0xbc000000, 0xd3000000, 0x0a000000,
-		     0xf7000000, 0xe4000000, 0x58000000, 0x05000000,
-		     0xb8000000, 0xb3000000, 0x45000000, 0x06000000,
-		     0xd0000000, 0x2c000000, 0x1e000000, 0x8f000000,
-		     0xca000000, 0x3f000000, 0x0f000000, 0x02000000,
-		     0xc1000000, 0xaf000000, 0xbd000000, 0x03000000,
-		     0x01000000, 0x13000000, 0x8a000000, 0x6b000000,
-		     0x3a000000, 0x91000000, 0x11000000, 0x41000000,
-		     0x4f000000, 0x67000000, 0xdc000000, 0xea000000,
-		     0x97000000, 0xf2000000, 0xcf000000, 0xce000000,
-		     0xf0000000, 0xb4000000, 0xe6000000, 0x73000000,
-		     0x96000000, 0xac000000, 0x74000000, 0x22000000,
-		     0xe7000000, 0xad000000, 0x35000000, 0x85000000,
-		     0xe2000000, 0xf9000000, 0x37000000, 0xe8000000,
-		     0x1c000000, 0x75000000, 0xdf000000, 0x6e000000,
-		     0x47000000, 0xf1000000, 0x1a000000, 0x71000000,
-		     0x1d000000, 0x29000000, 0xc5000000, 0x89000000,
-		     0x6f000000, 0xb7000000, 0x62000000, 0x0e000000,
-		     0xaa000000, 0x18000000, 0xbe000000, 0x1b000000,
-		     0xfc000000, 0x56000000, 0x3e000000, 0x4b000000,
-		     0xc6000000, 0xd2000000, 0x79000000, 0x20000000,
-		     0x9a000000, 0xdb000000, 0xc0000000, 0xfe000000,
-		     0x78000000, 0xcd000000, 0x5a000000, 0xf4000000,
-		     0x1f000000, 0xdd000000, 0xa8000000, 0x33000000,
-		     0x88000000, 0x07000000, 0xc7000000, 0x31000000,
-		     0xb1000000, 0x12000000, 0x10000000, 0x59000000,
-		     0x27000000, 0x80000000, 0xec000000, 0x5f000000,
-		     0x60000000, 0x51000000, 0x7f000000, 0xa9000000,
-		     0x19000000, 0xb5000000, 0x4a000000, 0x0d000000,
-		     0x2d000000, 0xe5000000, 0x7a000000, 0x9f000000,
-		     0x93000000, 0xc9000000, 0x9c000000, 0xef000000,
-		     0xa0000000, 0xe0000000, 0x3b000000, 0x4d000000,
-		     0xae000000, 0x2a000000, 0xf5000000, 0xb0000000,
-		     0xc8000000, 0xeb000000, 0xbb000000, 0x3c000000,
-		     0x83000000, 0x53000000, 0x99000000, 0x61000000,
-		     0x17000000, 0x2b000000, 0x04000000, 0x7e000000,
-		     0xba000000, 0x77000000, 0xd6000000, 0x26000000,
-		     0xe1000000, 0x69000000, 0x14000000, 0x63000000,
-		     0x55000000, 0x21000000, 0x0c000000, 0x7d000000,
-		     }
-};
-
-/* initialise the key schedule from the user supplied key */
-
-#define star_x(x) (((x) & 0x7f7f7f7f) << 1) ^ ((((x) & 0x80808080) >> 7) * 0x1b)
-
-#define imix_col(y,x)	do {		\
-	u	= star_x(x);		\
-	v	= star_x(u);		\
-	w	= star_x(v);		\
-	t	= w ^ (x);		\
-	(y)	= u ^ v ^ w;		\
-	(y)	^= ror32(u ^ t, 8) ^	\
-		ror32(v ^ t, 16) ^	\
-		ror32(t, 24);		\
-} while (0)
-
-#define ls_box(x)		\
-	crypto_fl_tab[0][byte(x, 0)] ^	\
-	crypto_fl_tab[1][byte(x, 1)] ^	\
-	crypto_fl_tab[2][byte(x, 2)] ^	\
-	crypto_fl_tab[3][byte(x, 3)]
-
-#define loop4(i)	do {		\
-	t = ror32(t, 8);		\
-	t = ls_box(t) ^ rco_tab[i];	\
-	t ^= ctx->key_enc[4 * i];		\
-	ctx->key_enc[4 * i + 4] = t;		\
-	t ^= ctx->key_enc[4 * i + 1];		\
-	ctx->key_enc[4 * i + 5] = t;		\
-	t ^= ctx->key_enc[4 * i + 2];		\
-	ctx->key_enc[4 * i + 6] = t;		\
-	t ^= ctx->key_enc[4 * i + 3];		\
-	ctx->key_enc[4 * i + 7] = t;		\
-} while (0)
-
-#define loop6(i)	do {		\
-	t = ror32(t, 8);		\
-	t = ls_box(t) ^ rco_tab[i];	\
-	t ^= ctx->key_enc[6 * i];		\
-	ctx->key_enc[6 * i + 6] = t;		\
-	t ^= ctx->key_enc[6 * i + 1];		\
-	ctx->key_enc[6 * i + 7] = t;		\
-	t ^= ctx->key_enc[6 * i + 2];		\
-	ctx->key_enc[6 * i + 8] = t;		\
-	t ^= ctx->key_enc[6 * i + 3];		\
-	ctx->key_enc[6 * i + 9] = t;		\
-	t ^= ctx->key_enc[6 * i + 4];		\
-	ctx->key_enc[6 * i + 10] = t;		\
-	t ^= ctx->key_enc[6 * i + 5];		\
-	ctx->key_enc[6 * i + 11] = t;		\
-} while (0)
-
-#define loop8(i)	do {			\
-	t = ror32(t, 8);			\
-	t = ls_box(t) ^ rco_tab[i];		\
-	t ^= ctx->key_enc[8 * i];			\
-	ctx->key_enc[8 * i + 8] = t;			\
-	t ^= ctx->key_enc[8 * i + 1];			\
-	ctx->key_enc[8 * i + 9] = t;			\
-	t ^= ctx->key_enc[8 * i + 2];			\
-	ctx->key_enc[8 * i + 10] = t;			\
-	t ^= ctx->key_enc[8 * i + 3];			\
-	ctx->key_enc[8 * i + 11] = t;			\
-	t  = ctx->key_enc[8 * i + 4] ^ ls_box(t);	\
-	ctx->key_enc[8 * i + 12] = t;			\
-	t ^= ctx->key_enc[8 * i + 5];			\
-	ctx->key_enc[8 * i + 13] = t;			\
-	t ^= ctx->key_enc[8 * i + 6];			\
-	ctx->key_enc[8 * i + 14] = t;			\
-	t ^= ctx->key_enc[8 * i + 7];			\
-	ctx->key_enc[8 * i + 15] = t;			\
-} while (0)
-
-/**
- * crypto_aes_expand_key - Expands the AES key as described in FIPS-197
- * @ctx:	The location where the computed key will be stored.
- * @in_key:	The supplied key.
- * @key_len:	The length of the supplied key.
- *
- * Returns 0 on success. The function fails only if an invalid key size (or
- * pointer) is supplied.
- * The expanded key size is 240 bytes (max of 14 rounds with a unique 16 bytes
- * key schedule plus a 16 bytes key which is used before the first round).
- * The decryption key is prepared for the "Equivalent Inverse Cipher" as
- * described in FIPS-197. The first slot (16 bytes) of each key (enc or dec) is
- * for the initial combination, the second slot for the first round and so on.
- */
-int crypto_aes_expand_key(struct crypto_aes_ctx *ctx, const uint8_t * in_key,
-			  unsigned int key_len)
-{
-	const uint32_t *key = (const uint32_t *)in_key;
-	uint32_t i, t, u, v, w, j;
-
-	if (key_len != AES_KEYSIZE_128 && key_len != AES_KEYSIZE_192 &&
-	    key_len != AES_KEYSIZE_256)
-		return -1;
-
-	ctx->key_length = key_len;
-
-	ctx->key_dec[key_len + 24] = ctx->key_enc[0] = le32_to_cpu(key[0]);
-	ctx->key_dec[key_len + 25] = ctx->key_enc[1] = le32_to_cpu(key[1]);
-	ctx->key_dec[key_len + 26] = ctx->key_enc[2] = le32_to_cpu(key[2]);
-	ctx->key_dec[key_len + 27] = ctx->key_enc[3] = le32_to_cpu(key[3]);
-
-	switch (key_len) {
-	case AES_KEYSIZE_128:
-		t = ctx->key_enc[3];
-		for (i = 0; i < 10; ++i)
-			loop4(i);
-		break;
-
-	case AES_KEYSIZE_192:
-		ctx->key_enc[4] = le32_to_cpu(key[4]);
-		t = ctx->key_enc[5] = le32_to_cpu(key[5]);
-		for (i = 0; i < 8; ++i)
-			loop6(i);
-		break;
-
-	case AES_KEYSIZE_256:
-		ctx->key_enc[4] = le32_to_cpu(key[4]);
-		ctx->key_enc[5] = le32_to_cpu(key[5]);
-		ctx->key_enc[6] = le32_to_cpu(key[6]);
-		t = ctx->key_enc[7] = le32_to_cpu(key[7]);
-		for (i = 0; i < 7; ++i)
-			loop8(i);
-		break;
-	}
-
-	ctx->key_dec[0] = ctx->key_enc[key_len + 24];
-	ctx->key_dec[1] = ctx->key_enc[key_len + 25];
-	ctx->key_dec[2] = ctx->key_enc[key_len + 26];
-	ctx->key_dec[3] = ctx->key_enc[key_len + 27];
-
-	for (i = 4; i < key_len + 24; ++i) {
-		j = key_len + 24 - (i & ~3) + (i & 3);
-		imix_col(ctx->key_dec[j], ctx->key_enc[i]);
-	}
-	return 0;
-}
-
-/* encrypt a block of text */
-
-#define f_rn(bo, bi, n, k)	do {				\
-	bo[n] = crypto_ft_tab[0][byte(bi[n], 0)] ^			\
-		crypto_ft_tab[1][byte(bi[(n + 1) & 3], 1)] ^		\
-		crypto_ft_tab[2][byte(bi[(n + 2) & 3], 2)] ^		\
-		crypto_ft_tab[3][byte(bi[(n + 3) & 3], 3)] ^ *(k + n);	\
-} while (0)
-
-#define f_nround(bo, bi, k)	do {\
-	f_rn(bo, bi, 0, k);	\
-	f_rn(bo, bi, 1, k);	\
-	f_rn(bo, bi, 2, k);	\
-	f_rn(bo, bi, 3, k);	\
-	k += 4;			\
-} while (0)
-
-#define f_rl(bo, bi, n, k)	do {				\
-	bo[n] = crypto_fl_tab[0][byte(bi[n], 0)] ^			\
-		crypto_fl_tab[1][byte(bi[(n + 1) & 3], 1)] ^		\
-		crypto_fl_tab[2][byte(bi[(n + 2) & 3], 2)] ^		\
-		crypto_fl_tab[3][byte(bi[(n + 3) & 3], 3)] ^ *(k + n);	\
-} while (0)
-
-#define f_lround(bo, bi, k)	do {\
-	f_rl(bo, bi, 0, k);	\
-	f_rl(bo, bi, 1, k);	\
-	f_rl(bo, bi, 2, k);	\
-	f_rl(bo, bi, 3, k);	\
-} while (0)
-
-static void aes_encrypt(const struct crypto_aes_ctx *ctx, uint8_t * out,
-			const uint8_t * in)
-{
-	const uint32_t *src = (const uint32_t *)in;
-	uint32_t *dst = (uint32_t *) out;
-	uint32_t b0[4], b1[4];
-	const uint32_t *kp = ctx->key_enc + 4;
-	const int key_len = ctx->key_length;
-
-	b0[0] = le32_to_cpu(src[0]) ^ ctx->key_enc[0];
-	b0[1] = le32_to_cpu(src[1]) ^ ctx->key_enc[1];
-	b0[2] = le32_to_cpu(src[2]) ^ ctx->key_enc[2];
-	b0[3] = le32_to_cpu(src[3]) ^ ctx->key_enc[3];
-
-	if (key_len > 24) {
-		f_nround(b1, b0, kp);
-		f_nround(b0, b1, kp);
-	}
-
-	if (key_len > 16) {
-		f_nround(b1, b0, kp);
-		f_nround(b0, b1, kp);
-	}
-
-	f_nround(b1, b0, kp);
-	f_nround(b0, b1, kp);
-	f_nround(b1, b0, kp);
-	f_nround(b0, b1, kp);
-	f_nround(b1, b0, kp);
-	f_nround(b0, b1, kp);
-	f_nround(b1, b0, kp);
-	f_nround(b0, b1, kp);
-	f_nround(b1, b0, kp);
-	f_lround(b0, b1, kp);
-
-	dst[0] = cpu_to_le32(b0[0]);
-	dst[1] = cpu_to_le32(b0[1]);
-	dst[2] = cpu_to_le32(b0[2]);
-	dst[3] = cpu_to_le32(b0[3]);
-}
-
-/* decrypt a block of text */
-
-#define i_rn(bo, bi, n, k)	do {				\
-	bo[n] = crypto_it_tab[0][byte(bi[n], 0)] ^			\
-		crypto_it_tab[1][byte(bi[(n + 3) & 3], 1)] ^		\
-		crypto_it_tab[2][byte(bi[(n + 2) & 3], 2)] ^		\
-		crypto_it_tab[3][byte(bi[(n + 1) & 3], 3)] ^ *(k + n);	\
-} while (0)
-
-#define i_nround(bo, bi, k)	do {\
-	i_rn(bo, bi, 0, k);	\
-	i_rn(bo, bi, 1, k);	\
-	i_rn(bo, bi, 2, k);	\
-	i_rn(bo, bi, 3, k);	\
-	k += 4;			\
-} while (0)
-
-#define i_rl(bo, bi, n, k)	do {			\
-	bo[n] = crypto_il_tab[0][byte(bi[n], 0)] ^		\
-	crypto_il_tab[1][byte(bi[(n + 3) & 3], 1)] ^		\
-	crypto_il_tab[2][byte(bi[(n + 2) & 3], 2)] ^		\
-	crypto_il_tab[3][byte(bi[(n + 1) & 3], 3)] ^ *(k + n);	\
-} while (0)
-
-#define i_lround(bo, bi, k)	do {\
-	i_rl(bo, bi, 0, k);	\
-	i_rl(bo, bi, 1, k);	\
-	i_rl(bo, bi, 2, k);	\
-	i_rl(bo, bi, 3, k);	\
-} while (0)
-
-static inline void crypto_xor_byte(uint8_t * a, const uint8_t * b,
-				   unsigned int size)
-{
-	for (; size; size--)
-		*a++ ^= *b++;
-}
-
-void crypto_xor(uint8_t * dst, const uint8_t * src, unsigned int size)
-{
-	uint32_t *a = (uint32_t *) dst;
-	uint32_t *b = (uint32_t *) src;
-
-	for (; size >= 4; size -= 4)
-		*a++ ^= *b++;
-
-	crypto_xor_byte((uint8_t *) a, (uint8_t *) b, size);
-}
-
-int crypto_cbc_encrypt(const struct crypto_aes_ctx *ctx,
-		       void *src, int nbytes, void *dst, void *iv)
-{
-	int bsize = 16;
-
-	do {
-		crypto_xor(iv, src, bsize);
-		aes_encrypt(ctx, dst, iv);
-		memcpy(iv, dst, bsize);
-
-		src += bsize;
-		dst += bsize;
-	} while ((nbytes -= bsize) >= bsize);
-
-	return nbytes;
-}
diff --git a/examples/shm/shm.c b/examples/shm/shm.c
deleted file mode 100644
index fd2c2ce..0000000
--- a/examples/shm/shm.c
+++ /dev/null
@@ -1,180 +0,0 @@
-#include <unistd.h>
-#include <sys/types.h>
-#include <sys/ipc.h>
-#include <sys/shm.h>
-#include <sys/wait.h>
-#include <sys/time.h>
-#include <semaphore.h>
-#include <stdio.h>
-#include <aes.h>
-
-sem_t *enc_sem, *get_sem;
-
-#define SHM_SIZE 64*1024
-
-void child(pid_t parent, void *mem)
-{
-	char key[16];
-	char iv[16];
-	struct crypto_aes_ctx ctx;
-	uint32_t mem_size;
-
-	for (;;) {
-		memset(key, 0xa3, sizeof(key));
-		memset(iv, 0x3, sizeof(iv));
-
-		sem_wait(enc_sem);
-
-		crypto_aes_expand_key(&ctx, (void *)key, sizeof(key));
-
-		memcpy(&mem_size, mem, sizeof(mem_size));
-
-		crypto_cbc_encrypt(&ctx, mem, mem_size, mem, iv);
-
-		sem_post(get_sem);
-	}
-}
-
-static int must_finish = 0;
-
-static void alarm_handler(int signo)
-{
-	must_finish = 1;
-}
-
-static double udifftimeval(struct timeval start, struct timeval end)
-{
-	return (double)(end.tv_usec - start.tv_usec) +
-	    (double)(end.tv_sec - start.tv_sec) * 1000 * 1000;
-}
-
-static void value2human(double bytes, double time, double *data, double *speed,
-			char *metric)
-{
-	if (bytes > 1000 && bytes < 1000 * 1000) {
-		*data = ((double)bytes) / 1000;
-		*speed = *data / time;
-		strcpy(metric, "Kb");
-		return;
-	} else if (bytes >= 1000 * 1000 && bytes < 1000 * 1000 * 1000) {
-		*data = ((double)bytes) / (1000 * 1000);
-		*speed = *data / time;
-		strcpy(metric, "Mb");
-		return;
-	} else if (bytes >= 1000 * 1000 * 1000) {
-		*data = ((double)bytes) / (1000 * 1000 * 1000);
-		*speed = *data / time;
-		strcpy(metric, "Gb");
-		return;
-	} else {
-		*data = (double)bytes;
-		*speed = *data / time;
-		strcpy(metric, "bytes");
-		return;
-	}
-}
-
-void parent(pid_t child, void *mem)
-{
-	struct timeval start, end;
-	uint32_t chunksize;
-	double total = 0;
-	double secs, ddata, dspeed;
-	char metric[16];
-
-	signal(SIGALRM, alarm_handler);
-
-	/* set a default value in shared memory */
-
-	for (chunksize = 256; chunksize <= (64 * 1024); chunksize *= 2) {
-		memset(mem, 0x33, chunksize);
-
-		printf("\tEncrypting in chunks of %d bytes: ", chunksize);
-		fflush(stdout);
-
-		total = 0;
-		must_finish = 0;
-		alarm(5);
-		gettimeofday(&start, NULL);
-
-		do {
-			memcpy(mem, &chunksize, sizeof(chunksize));
-
-			sem_post(enc_sem);
-
-			sem_wait(get_sem);
-			total += chunksize;
-		} while (must_finish == 0);
-
-		gettimeofday(&end, NULL);
-
-		secs = udifftimeval(start, end) / 1000000.0;
-		value2human(total, secs, &ddata, &dspeed, metric);
-		printf("done. %.2f %s in %.2f secs: ", ddata, metric, secs);
-		printf("%.2f %s/sec\n", dspeed, metric);
-	}
-
-}
-
-int main()
-{
-	int shmid, shmid2;
-	char c, *shm, *s, *semmem;
-	pid_t pid;
-
-	signal(SIGUSR1, SIG_IGN);
-	signal(SIGUSR2, SIG_IGN);
-
-	if ((shmid = shmget(IPC_PRIVATE, SHM_SIZE, IPC_CREAT | 0660)) < 0) {
-		perror("shmget fail");
-		return 1;
-	}
-
-	if ((shm = (char *)shmat(shmid, 0, 0)) == (char *)-1) {
-		perror("shmat : parent");
-		return 2;
-	}
-
-	if ((shmid2 =
-	     shmget(IPC_PRIVATE, 2 * sizeof(sem_t), IPC_CREAT | 0660)) < 0) {
-		perror("shmget fail");
-		return 1;
-	}
-
-	if ((semmem = (char *)shmat(shmid2, 0, 0)) == (char *)-1) {
-		perror("shmat : parent");
-		return 2;
-	}
-
-	enc_sem = (void *)semmem;
-	get_sem = (void *)semmem + sizeof(sem_t);
-
-	sem_init(enc_sem, 1, 0);
-	sem_init(get_sem, 1, 0);
-
-	printf("Addresses in parent\n");
-	printf("shared mem: %p\n", shm);
-
-	s = shm;		// s now references shared mem
-	for (c = 'A'; c <= 'Z'; ++c)	// put some info there
-		*s++ = c;
-	*s = '\0';		// terminate the sequence
-
-	switch (pid = fork()) {
-	case -1:
-		perror("fork");
-		return 3;
-	default:
-		parent(pid, shm);
-		kill(pid, SIGTERM);
-		wait(0);	// let the child finish
-		shmdt(shm);
-		shmctl(shmid, IPC_RMID, (struct shmid_ds *)0);
-		break;
-	case 0:
-		child(getppid(), shm);
-		shmdt(shm);
-		break;
-	}
-	return 0;
-}
diff --git a/examples/speed.c b/examples/speed.c
deleted file mode 100644
index 8d3563a..0000000
--- a/examples/speed.c
+++ /dev/null
@@ -1,210 +0,0 @@
-/*  cryptodev_test - simple benchmark tool for cryptodev
- *
- *    Copyright (C) 2010 by Phil Sutter <phil.sutter@viprinet.com>
- *
- *  This program is free software; you can redistribute it and/or modify
- *  it under the terms of the GNU General Public License as published by
- *  the Free Software Foundation; either version 2 of the License, or
- *  (at your option) any later version.
- *
- *  This program is distributed in the hope that it will be useful,
- *  but WITHOUT ANY WARRANTY; without even the implied warranty of
- *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- *  GNU General Public License for more details.
- *
- *  You should have received a copy of the GNU General Public License
- *  along with this program; if not, write to the Free Software
- *  Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
- */
-#include <fcntl.h>
-#include <stdint.h>
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <sys/ioctl.h>
-#include <sys/time.h>
-#include <sys/types.h>
-#include <sys/stat.h>
-#include <sys/socket.h>
-#include <signal.h>
-#include <unistd.h>
-#include <linux/netlink.h>
-#include "../ncr.h"
-
-#define ALIGN_NL __attribute__((aligned(NLA_ALIGNTO)))
-#define ALG_AES_CBC "cbc(aes)"
-
-static double udifftimeval(struct timeval start, struct timeval end)
-{
-	return (double)(end.tv_usec - start.tv_usec) +
-	    (double)(end.tv_sec - start.tv_sec) * 1000 * 1000;
-}
-
-static int must_finish = 0;
-
-static void alarm_handler(int signo)
-{
-	must_finish = 1;
-}
-
-static void value2human(double bytes, double time, double *data, double *speed,
-			char *metric)
-{
-	if (bytes > 1000 && bytes < 1000 * 1000) {
-		*data = ((double)bytes) / 1000;
-		*speed = *data / time;
-		strcpy(metric, "Kb");
-		return;
-	} else if (bytes >= 1000 * 1000 && bytes < 1000 * 1000 * 1000) {
-		*data = ((double)bytes) / (1000 * 1000);
-		*speed = *data / time;
-		strcpy(metric, "Mb");
-		return;
-	} else if (bytes >= 1000 * 1000 * 1000) {
-		*data = ((double)bytes) / (1000 * 1000 * 1000);
-		*speed = *data / time;
-		strcpy(metric, "Gb");
-		return;
-	} else {
-		*data = (double)bytes;
-		*speed = *data / time;
-		strcpy(metric, "bytes");
-		return;
-	}
-}
-
-int encrypt_data_ncr_direct(int cfd, const char *algo, int chunksize)
-{
-	char *buffer, iv[32];
-	static int val = 23;
-	struct timeval start, end;
-	double total = 0;
-	double secs, ddata, dspeed;
-	char metric[16];
-	ncr_key_t key;
-	struct __attribute__ ((packed)) {
-		struct ncr_key_generate f;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[sizeof(ALG_AES_CBC)] ALIGN_NL;
-		struct nlattr bits_head ALIGN_NL;
-		uint32_t bits ALIGN_NL;
-	} kgen;
-	struct __attribute__ ((packed)) {
-		struct ncr_session_once f;
-		struct nlattr key_head ALIGN_NL;
-		uint32_t key ALIGN_NL;
-		struct nlattr input_head ALIGN_NL;
-		struct ncr_session_input_data input ALIGN_NL;
-		struct nlattr output_head ALIGN_NL;
-		struct ncr_session_output_buffer output ALIGN_NL;
-		struct nlattr iv_head ALIGN_NL;
-		struct nlattr algo_head ALIGN_NL;
-		char algo[128] ALIGN_NL;
-	} op;
-	size_t algo_size;
-
-	algo_size = strlen(algo) + 1;
-	key = ioctl(cfd, NCRIO_KEY_INIT);
-	if (key == -1) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_INIT)");
-		return 1;
-	}
-
-	memset(&kgen.f, 0, sizeof(kgen.f));
-	kgen.f.input_size = sizeof(kgen);
-	kgen.f.key = key;
-	kgen.algo_head.nla_len = NLA_HDRLEN + sizeof(kgen.algo);
-	kgen.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-	strcpy(kgen.algo, ALG_AES_CBC);
-	kgen.bits_head.nla_len = NLA_HDRLEN + sizeof(kgen.bits);
-	kgen.bits_head.nla_type = NCR_ATTR_SECRET_KEY_BITS;
-	kgen.bits = 128;	/* 16 bytes */
-
-	if (ioctl(cfd, NCRIO_KEY_GENERATE, &kgen)) {
-		fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-		perror("ioctl(NCRIO_KEY_GENERATE)");
-		return 1;
-	}
-
-	buffer = malloc(chunksize);
-	memset(iv, 0x23, 32);
-
-	printf("\tEncrypting in chunks of %d bytes: ", chunksize);
-	fflush(stdout);
-
-	memset(buffer, val++, chunksize);
-
-	must_finish = 0;
-	alarm(5);
-
-	gettimeofday(&start, NULL);
-	do {
-		size_t output_size;
-
-		memset(&op.f, 0, sizeof(op.f));
-		op.f.op = NCR_OP_ENCRYPT;
-		op.key_head.nla_len = NLA_HDRLEN + sizeof(op.key);
-		op.key_head.nla_type = NCR_ATTR_KEY;
-		op.key = key;
-		op.input_head.nla_len = NLA_HDRLEN + sizeof(op.input);
-		op.input_head.nla_type = NCR_ATTR_UPDATE_INPUT_DATA;
-		op.input.data = buffer;
-		op.input.data_size = chunksize;
-		op.output_head.nla_len = NLA_HDRLEN + sizeof(op.output);
-		op.output_head.nla_type = NCR_ATTR_UPDATE_OUTPUT_BUFFER;
-		op.output.buffer = buffer;
-		op.output.buffer_size = chunksize;
-		op.output.result_size_ptr = &output_size;
-		op.iv_head.nla_len = NLA_HDRLEN + 0;
-		op.iv_head.nla_type = NCR_ATTR_IV;
-		op.algo_head.nla_len = NLA_HDRLEN + algo_size;
-		op.algo_head.nla_type = NCR_ATTR_ALGORITHM;
-		memcpy(op.algo, algo, algo_size);
-		op.f.input_size = op.algo + algo_size - (char *)&op;
-
-		if (ioctl(cfd, NCRIO_SESSION_ONCE, &op)) {
-			fprintf(stderr, "Error: %s:%d\n", __func__, __LINE__);
-			perror("ioctl(NCRIO_SESSION_ONCE)");
-			return 1;
-		}
-
-		total += chunksize;
-	} while (must_finish == 0);
-	gettimeofday(&end, NULL);
-
-	secs = udifftimeval(start, end) / 1000000.0;
-
-	value2human(total, secs, &ddata, &dspeed, metric);
-	printf("done. %.2f %s in %.2f secs: ", ddata, metric, secs);
-	printf("%.2f %s/sec\n", dspeed, metric);
-
-	return 0;
-}
-
-int main(void)
-{
-	int fd, i;
-
-	signal(SIGALRM, alarm_handler);
-
-	if ((fd = open("/dev/crypto", O_RDWR, 0)) < 0) {
-		perror("open()");
-		return 1;
-	}
-
-	fprintf(stderr, "\nTesting NCR-DIRECT with NULL cipher: \n");
-	for (i = 256; i <= (64 * 1024); i *= 2) {
-		if (encrypt_data_ncr_direct(fd, "ecb(cipher_null)", i))
-			break;
-	}
-
-	fprintf(stderr, "\nTesting NCR-DIRECT with AES-128-CBC cipher: \n");
-	for (i = 256; i <= (64 * 1024); i *= 2) {
-		if (encrypt_data_ncr_direct(fd, "cbc(aes)", i))
-			break;
-	}
-
-	close(fd);
-	return 0;
-}