mirror of
https://github.com/openssl/openssl.git
synced 2024-12-15 06:01:37 +08:00
fbff5b5771
Also use OSSL_NELEM instead of hardcoding array size. Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21183)
348 lines
11 KiB
C
348 lines
11 KiB
C
/*
|
|
* Copyright 1995-2023 The OpenSSL Project Authors. All Rights Reserved.
|
|
*
|
|
* Licensed under the Apache License 2.0 (the "License"). You may not use
|
|
* this file except in compliance with the License. You can obtain a copy
|
|
* in the file LICENSE in the source distribution or at
|
|
* https://www.openssl.org/source/license.html
|
|
*/
|
|
|
|
/*
|
|
* CMAC low level APIs are deprecated for public use, but still ok for internal
|
|
* use.
|
|
*/
|
|
#include "internal/deprecated.h"
|
|
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
#include <stdlib.h>
|
|
|
|
#include "internal/nelem.h"
|
|
|
|
#include <openssl/cmac.h>
|
|
#include <openssl/aes.h>
|
|
#include <openssl/evp.h>
|
|
|
|
#include "testutil.h"
|
|
|
|
static const char xtskey[32] = {
|
|
0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b,
|
|
0x0c, 0x0d, 0x0e, 0x0f, 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
|
|
0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f
|
|
};
|
|
|
|
static struct test_st {
|
|
const char key[32];
|
|
int key_len;
|
|
unsigned char data[4096];
|
|
int data_len;
|
|
const char *mac;
|
|
} test[] = {
|
|
{
|
|
{
|
|
0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a,
|
|
0x0b, 0x0c, 0x0d, 0x0e, 0x0f
|
|
},
|
|
16,
|
|
"My test data",
|
|
12,
|
|
"29cec977c48f63c200bd5c4a6881b224"
|
|
},
|
|
{
|
|
{
|
|
0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a,
|
|
0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10, 0x11, 0x12, 0x13, 0x14, 0x15,
|
|
0x16, 0x17, 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f
|
|
},
|
|
32,
|
|
"My test data",
|
|
12,
|
|
"db6493aa04e4761f473b2b453c031c9a"
|
|
},
|
|
{
|
|
{
|
|
0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a,
|
|
0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10, 0x11, 0x12, 0x13, 0x14, 0x15,
|
|
0x16, 0x17, 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f
|
|
},
|
|
32,
|
|
"My test data again",
|
|
18,
|
|
"65c11c75ecf590badd0a5e56cbb8af60"
|
|
},
|
|
/* for aes-128-cbc */
|
|
{
|
|
{
|
|
0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a,
|
|
0x0b, 0x0c, 0x0d, 0x0e, 0x0f
|
|
},
|
|
16,
|
|
/* fullfill data to 3072 bytes with below string */
|
|
"#abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789#",
|
|
3072,
|
|
"35da8a02a7afce90e5b711308cee2dee"
|
|
},
|
|
/* for aes-192-cbc */
|
|
{
|
|
{
|
|
0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a,
|
|
0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10, 0x11, 0x12, 0x13, 0x14, 0x15,
|
|
0x16, 0x17
|
|
},
|
|
24,
|
|
/* fullfill data to 4095 bytes with below string */
|
|
"#abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789#",
|
|
4095,
|
|
"59053f4e81f3593610f987adb547c5b2"
|
|
},
|
|
/* for aes-256-cbc */
|
|
{
|
|
{
|
|
0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a,
|
|
0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10, 0x11, 0x12, 0x13, 0x14, 0x15,
|
|
0x16, 0x17, 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f
|
|
},
|
|
32,
|
|
/* fullfill data to 2560 bytes with below string */
|
|
"#abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789#",
|
|
2560,
|
|
"9c6cf85f7f4baca99725764a0df973a9"
|
|
},
|
|
/* for des-ede3-cbc */
|
|
{
|
|
{
|
|
0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a,
|
|
0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10, 0x11, 0x12, 0x13, 0x14, 0x15,
|
|
0x16, 0x17, 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f
|
|
},
|
|
24,
|
|
/* fullfill data to 2048 bytes with below string */
|
|
"#abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789#",
|
|
2048,
|
|
"2c2fccc7fcc5d98a"
|
|
},
|
|
/* for sm4-cbc */
|
|
{
|
|
{
|
|
0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a,
|
|
0x0b, 0x0c, 0x0d, 0x0e, 0x0f
|
|
},
|
|
16,
|
|
/* fullfill data to 2049 bytes with below string */
|
|
"#abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789#",
|
|
2049,
|
|
"c9a9cbc82a3b2d96074e386fce1216f2"
|
|
},
|
|
};
|
|
|
|
static char *pt(unsigned char *md, unsigned int len);
|
|
|
|
static int test_cmac_bad(void)
|
|
{
|
|
CMAC_CTX *ctx = NULL;
|
|
int ret = 0;
|
|
|
|
ctx = CMAC_CTX_new();
|
|
if (!TEST_ptr(ctx)
|
|
|| !TEST_false(CMAC_Init(ctx, NULL, 0, NULL, NULL))
|
|
|| !TEST_false(CMAC_Update(ctx, test[0].data, test[0].data_len))
|
|
/* Should be able to pass cipher first, and then key */
|
|
|| !TEST_true(CMAC_Init(ctx, NULL, 0, EVP_aes_128_cbc(), NULL))
|
|
/* Must have a key */
|
|
|| !TEST_false(CMAC_Update(ctx, test[0].data, test[0].data_len))
|
|
/* Now supply the key */
|
|
|| !TEST_true(CMAC_Init(ctx, test[0].key, test[0].key_len, NULL, NULL))
|
|
/* Update should now work */
|
|
|| !TEST_true(CMAC_Update(ctx, test[0].data, test[0].data_len))
|
|
/* XTS is not a suitable cipher to use */
|
|
|| !TEST_false(CMAC_Init(ctx, xtskey, sizeof(xtskey), EVP_aes_128_xts(),
|
|
NULL))
|
|
|| !TEST_false(CMAC_Update(ctx, test[0].data, test[0].data_len)))
|
|
goto err;
|
|
|
|
ret = 1;
|
|
err:
|
|
CMAC_CTX_free(ctx);
|
|
return ret;
|
|
}
|
|
|
|
static int test_cmac_run(void)
|
|
{
|
|
char *p;
|
|
CMAC_CTX *ctx = NULL;
|
|
unsigned char buf[AES_BLOCK_SIZE];
|
|
size_t len;
|
|
int ret = 0;
|
|
size_t case_idx = 0;
|
|
|
|
ctx = CMAC_CTX_new();
|
|
|
|
/* Construct input data, fullfill data to match data length */
|
|
for (case_idx = 0; case_idx < OSSL_NELEM(test); case_idx++) {
|
|
size_t str_len = strlen((char *)test[case_idx].data);
|
|
size_t fullfill_len = test[case_idx].data_len - str_len;
|
|
size_t fullfill_idx = str_len;
|
|
while (fullfill_len > 0) {
|
|
if (fullfill_len > str_len) {
|
|
memcpy(&test[case_idx].data[fullfill_idx], test[case_idx].data, str_len);
|
|
fullfill_len -= str_len;
|
|
fullfill_idx += str_len;
|
|
} else {
|
|
memcpy(&test[case_idx].data[fullfill_idx], test[case_idx].data, fullfill_len);
|
|
fullfill_len = 0;
|
|
}
|
|
}
|
|
}
|
|
|
|
if (!TEST_true(CMAC_Init(ctx, test[0].key, test[0].key_len,
|
|
EVP_aes_128_cbc(), NULL))
|
|
|| !TEST_true(CMAC_Update(ctx, test[0].data, test[0].data_len))
|
|
|| !TEST_true(CMAC_Final(ctx, buf, &len)))
|
|
goto err;
|
|
|
|
p = pt(buf, len);
|
|
if (!TEST_str_eq(p, test[0].mac))
|
|
goto err;
|
|
|
|
if (!TEST_true(CMAC_Init(ctx, test[1].key, test[1].key_len,
|
|
EVP_aes_256_cbc(), NULL))
|
|
|| !TEST_true(CMAC_Update(ctx, test[1].data, test[1].data_len))
|
|
|| !TEST_true(CMAC_Final(ctx, buf, &len)))
|
|
goto err;
|
|
|
|
p = pt(buf, len);
|
|
if (!TEST_str_eq(p, test[1].mac))
|
|
goto err;
|
|
|
|
if (!TEST_true(CMAC_Init(ctx, test[2].key, test[2].key_len, NULL, NULL))
|
|
|| !TEST_true(CMAC_Update(ctx, test[2].data, test[2].data_len))
|
|
|| !TEST_true(CMAC_Final(ctx, buf, &len)))
|
|
goto err;
|
|
p = pt(buf, len);
|
|
if (!TEST_str_eq(p, test[2].mac))
|
|
goto err;
|
|
/* Test reusing a key */
|
|
if (!TEST_true(CMAC_Init(ctx, NULL, 0, NULL, NULL))
|
|
|| !TEST_true(CMAC_Update(ctx, test[2].data, test[2].data_len))
|
|
|| !TEST_true(CMAC_Final(ctx, buf, &len)))
|
|
goto err;
|
|
p = pt(buf, len);
|
|
if (!TEST_str_eq(p, test[2].mac))
|
|
goto err;
|
|
|
|
/* Test setting the cipher and key separately */
|
|
if (!TEST_true(CMAC_Init(ctx, NULL, 0, EVP_aes_256_cbc(), NULL))
|
|
|| !TEST_true(CMAC_Init(ctx, test[2].key, test[2].key_len, NULL, NULL))
|
|
|| !TEST_true(CMAC_Update(ctx, test[2].data, test[2].data_len))
|
|
|| !TEST_true(CMAC_Final(ctx, buf, &len)))
|
|
goto err;
|
|
p = pt(buf, len);
|
|
if (!TEST_str_eq(p, test[2].mac))
|
|
goto err;
|
|
|
|
/* Test data length is greater than 1 block length */
|
|
if (!TEST_true(CMAC_Init(ctx, test[3].key, test[3].key_len,
|
|
EVP_aes_128_cbc(), NULL))
|
|
|| !TEST_true(CMAC_Update(ctx, test[3].data, test[3].data_len))
|
|
|| !TEST_true(CMAC_Final(ctx, buf, &len)))
|
|
goto err;
|
|
p = pt(buf, len);
|
|
if (!TEST_str_eq(p, test[3].mac))
|
|
goto err;
|
|
|
|
if (!TEST_true(CMAC_Init(ctx, test[4].key, test[4].key_len,
|
|
EVP_aes_192_cbc(), NULL))
|
|
|| !TEST_true(CMAC_Update(ctx, test[4].data, test[4].data_len))
|
|
|| !TEST_true(CMAC_Final(ctx, buf, &len)))
|
|
goto err;
|
|
p = pt(buf, len);
|
|
if (!TEST_str_eq(p, test[4].mac))
|
|
goto err;
|
|
|
|
if (!TEST_true(CMAC_Init(ctx, test[5].key, test[5].key_len,
|
|
EVP_aes_256_cbc(), NULL))
|
|
|| !TEST_true(CMAC_Update(ctx, test[5].data, test[5].data_len))
|
|
|| !TEST_true(CMAC_Final(ctx, buf, &len)))
|
|
goto err;
|
|
p = pt(buf, len);
|
|
if (!TEST_str_eq(p, test[5].mac))
|
|
goto err;
|
|
|
|
#ifndef OPENSSL_NO_DES
|
|
if (!TEST_true(CMAC_Init(ctx, test[6].key, test[6].key_len,
|
|
EVP_des_ede3_cbc(), NULL))
|
|
|| !TEST_true(CMAC_Update(ctx, test[6].data, test[6].data_len))
|
|
|| !TEST_true(CMAC_Final(ctx, buf, &len)))
|
|
goto err;
|
|
p = pt(buf, len);
|
|
if (!TEST_str_eq(p, test[6].mac))
|
|
goto err;
|
|
#endif
|
|
|
|
#ifndef OPENSSL_NO_SM4
|
|
if (!TEST_true(CMAC_Init(ctx, test[7].key, test[7].key_len,
|
|
EVP_sm4_cbc(), NULL))
|
|
|| !TEST_true(CMAC_Update(ctx, test[7].data, test[7].data_len))
|
|
|| !TEST_true(CMAC_Final(ctx, buf, &len)))
|
|
goto err;
|
|
p = pt(buf, len);
|
|
if (!TEST_str_eq(p, test[7].mac))
|
|
goto err;
|
|
#endif
|
|
|
|
ret = 1;
|
|
err:
|
|
CMAC_CTX_free(ctx);
|
|
return ret;
|
|
}
|
|
|
|
static int test_cmac_copy(void)
|
|
{
|
|
char *p;
|
|
CMAC_CTX *ctx = NULL, *ctx2 = NULL;
|
|
unsigned char buf[AES_BLOCK_SIZE];
|
|
size_t len;
|
|
int ret = 0;
|
|
|
|
ctx = CMAC_CTX_new();
|
|
ctx2 = CMAC_CTX_new();
|
|
if (!TEST_ptr(ctx) || !TEST_ptr(ctx2))
|
|
goto err;
|
|
|
|
if (!TEST_true(CMAC_Init(ctx, test[0].key, test[0].key_len,
|
|
EVP_aes_128_cbc(), NULL))
|
|
|| !TEST_true(CMAC_Update(ctx, test[0].data, test[0].data_len))
|
|
|| !TEST_true(CMAC_CTX_copy(ctx2, ctx))
|
|
|| !TEST_true(CMAC_Final(ctx2, buf, &len)))
|
|
goto err;
|
|
|
|
p = pt(buf, len);
|
|
if (!TEST_str_eq(p, test[0].mac))
|
|
goto err;
|
|
|
|
ret = 1;
|
|
err:
|
|
CMAC_CTX_free(ctx2);
|
|
CMAC_CTX_free(ctx);
|
|
return ret;
|
|
}
|
|
|
|
static char *pt(unsigned char *md, unsigned int len)
|
|
{
|
|
unsigned int i;
|
|
static char buf[80];
|
|
|
|
for (i = 0; i < len; i++)
|
|
sprintf(&(buf[i * 2]), "%02x", md[i]);
|
|
return buf;
|
|
}
|
|
|
|
int setup_tests(void)
|
|
{
|
|
ADD_TEST(test_cmac_bad);
|
|
ADD_TEST(test_cmac_run);
|
|
ADD_TEST(test_cmac_copy);
|
|
return 1;
|
|
}
|
|
|