]>
Commit | Line | Data |
---|---|---|
bcf082d1 | 1 | /* |
4333b89f | 2 | * Copyright 2019-2021 The OpenSSL Project Authors. All Rights Reserved. |
bcf082d1 SL |
3 | * |
4 | * Licensed under the Apache License 2.0 (the "License"). You may not use | |
5 | * this file except in compliance with the License. You can obtain a copy | |
6 | * in the file LICENSE in the source distribution or at | |
7 | * https://www.openssl.org/source/license.html | |
8 | */ | |
9 | ||
10 | #include <openssl/evp.h> | |
11 | #include "testutil.h" | |
12 | ||
13 | static const unsigned char gcm_key[] = { | |
14 | 0xee, 0xbc, 0x1f, 0x57, 0x48, 0x7f, 0x51, 0x92, 0x1c, 0x04, 0x65, 0x66, | |
15 | 0x5f, 0x8a, 0xe6, 0xd1, 0x65, 0x8b, 0xb2, 0x6d, 0xe6, 0xf8, 0xa0, 0x69, | |
16 | 0xa3, 0x52, 0x02, 0x93, 0xa5, 0x72, 0x07, 0x8f | |
17 | }; | |
18 | static const unsigned char gcm_iv[] = { | |
19 | 0x99, 0xaa, 0x3e, 0x68, 0xed, 0x81, 0x73, 0xa0, 0xee, 0xd0, 0x66, 0x84 | |
20 | }; | |
21 | static const unsigned char gcm_pt[] = { | |
22 | 0xf5, 0x6e, 0x87, 0x05, 0x5b, 0xc3, 0x2d, 0x0e, 0xeb, 0x31, 0xb2, 0xea, | |
23 | 0xcc, 0x2b, 0xf2, 0xa5 | |
24 | }; | |
25 | static const unsigned char gcm_aad[] = { | |
26 | 0x4d, 0x23, 0xc3, 0xce, 0xc3, 0x34, 0xb4, 0x9b, 0xdb, 0x37, 0x0c, 0x43, | |
27 | 0x7f, 0xec, 0x78, 0xde | |
28 | }; | |
29 | static const unsigned char gcm_ct[] = { | |
30 | 0xf7, 0x26, 0x44, 0x13, 0xa8, 0x4c, 0x0e, 0x7c, 0xd5, 0x36, 0x86, 0x7e, | |
31 | 0xb9, 0xf2, 0x17, 0x36 | |
32 | }; | |
33 | static const unsigned char gcm_tag[] = { | |
34 | 0x67, 0xba, 0x05, 0x10, 0x26, 0x2a, 0xe4, 0x87, 0xd7, 0x37, 0xee, 0x62, | |
35 | 0x98, 0xf7, 0x7e, 0x0c | |
36 | }; | |
37 | ||
38 | static int do_encrypt(unsigned char *iv_gen, unsigned char *ct, int *ct_len, | |
39 | unsigned char *tag, int *tag_len) | |
40 | { | |
41 | int ret = 0; | |
42 | EVP_CIPHER_CTX *ctx = NULL; | |
43 | int outlen; | |
44 | unsigned char outbuf[64]; | |
45 | ||
46 | *tag_len = 16; | |
47 | ret = TEST_ptr(ctx = EVP_CIPHER_CTX_new()) | |
48 | && TEST_true(EVP_EncryptInit_ex(ctx, EVP_aes_256_gcm(), NULL, NULL, | |
49 | NULL) > 0) | |
50 | && TEST_true(EVP_EncryptInit_ex(ctx, NULL, NULL, gcm_key, | |
51 | iv_gen != NULL ? NULL : gcm_iv) > 0) | |
52 | && TEST_true(EVP_EncryptUpdate(ctx, NULL, &outlen, gcm_aad, | |
53 | sizeof(gcm_aad)) > 0) | |
54 | && TEST_true(EVP_EncryptUpdate(ctx, ct, ct_len, gcm_pt, | |
55 | sizeof(gcm_pt)) > 0) | |
56 | && TEST_true(EVP_EncryptFinal_ex(ctx, outbuf, &outlen) > 0) | |
ed576acd | 57 | && TEST_int_eq(EVP_CIPHER_CTX_get_tag_length(ctx), 16) |
bcf082d1 SL |
58 | && TEST_true(EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_GET_TAG, 16, |
59 | tag) > 0) | |
60 | && TEST_true(iv_gen == NULL | |
0d83b7b9 | 61 | || EVP_CIPHER_CTX_get_original_iv(ctx, iv_gen, 12)); |
bcf082d1 SL |
62 | EVP_CIPHER_CTX_free(ctx); |
63 | return ret; | |
64 | } | |
65 | ||
66 | static int do_decrypt(const unsigned char *iv, const unsigned char *ct, | |
67 | int ct_len, const unsigned char *tag, int tag_len) | |
68 | { | |
69 | int ret = 0; | |
70 | EVP_CIPHER_CTX *ctx = NULL; | |
71 | int outlen, ptlen; | |
72 | unsigned char pt[32]; | |
73 | unsigned char outbuf[32]; | |
74 | ||
75 | ret = TEST_ptr(ctx = EVP_CIPHER_CTX_new()) | |
76 | && TEST_true(EVP_DecryptInit_ex(ctx, EVP_aes_256_gcm(), NULL, | |
77 | NULL, NULL) > 0) | |
78 | && TEST_true(EVP_DecryptInit_ex(ctx, NULL, NULL, gcm_key, iv) > 0) | |
ed576acd | 79 | && TEST_int_eq(EVP_CIPHER_CTX_get_tag_length(ctx), 16) |
bcf082d1 SL |
80 | && TEST_true(EVP_DecryptUpdate(ctx, NULL, &outlen, gcm_aad, |
81 | sizeof(gcm_aad)) > 0) | |
82 | && TEST_true(EVP_DecryptUpdate(ctx, pt, &ptlen, ct, | |
83 | ct_len) > 0) | |
84 | && TEST_true(EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_SET_TAG, | |
85 | tag_len, (void *)tag) > 0) | |
86 | && TEST_true(EVP_DecryptFinal_ex(ctx, outbuf, &outlen) > 0) | |
87 | && TEST_mem_eq(gcm_pt, sizeof(gcm_pt), pt, ptlen); | |
88 | ||
89 | EVP_CIPHER_CTX_free(ctx); | |
90 | return ret; | |
91 | } | |
92 | ||
93 | static int kat_test(void) | |
94 | { | |
95 | unsigned char tag[32]; | |
96 | unsigned char ct[32]; | |
97 | int ctlen = 0, taglen = 0; | |
98 | ||
99 | return do_encrypt(NULL, ct, &ctlen, tag, &taglen) | |
100 | && TEST_mem_eq(gcm_ct, sizeof(gcm_ct), ct, ctlen) | |
101 | && TEST_mem_eq(gcm_tag, sizeof(gcm_tag), tag, taglen) | |
102 | && do_decrypt(gcm_iv, ct, ctlen, tag, taglen); | |
103 | } | |
104 | ||
e9c116eb SL |
105 | static int badkeylen_test(void) |
106 | { | |
107 | int ret; | |
108 | EVP_CIPHER_CTX *ctx = NULL; | |
109 | const EVP_CIPHER *cipher; | |
110 | ||
111 | ret = TEST_ptr(cipher = EVP_aes_192_gcm()) | |
112 | && TEST_ptr(ctx = EVP_CIPHER_CTX_new()) | |
113 | && TEST_true(EVP_EncryptInit_ex(ctx, cipher, NULL, NULL, NULL)) | |
114 | && TEST_false(EVP_CIPHER_CTX_set_key_length(ctx, 2)); | |
115 | EVP_CIPHER_CTX_free(ctx); | |
116 | return ret; | |
117 | } | |
118 | ||
f844f9eb | 119 | #ifdef FIPS_MODULE |
bcf082d1 SL |
120 | static int ivgen_test(void) |
121 | { | |
122 | unsigned char iv_gen[16]; | |
123 | unsigned char tag[32]; | |
124 | unsigned char ct[32]; | |
125 | int ctlen = 0, taglen = 0; | |
126 | ||
127 | return do_encrypt(iv_gen, ct, &ctlen, tag, &taglen) | |
128 | && do_decrypt(iv_gen, ct, ctlen, tag, taglen); | |
129 | } | |
f844f9eb | 130 | #endif /* FIPS_MODULE */ |
bcf082d1 SL |
131 | |
132 | int setup_tests(void) | |
133 | { | |
134 | ADD_TEST(kat_test); | |
e9c116eb | 135 | ADD_TEST(badkeylen_test); |
f844f9eb | 136 | #ifdef FIPS_MODULE |
bcf082d1 | 137 | ADD_TEST(ivgen_test); |
f844f9eb | 138 | #endif /* FIPS_MODULE */ |
bcf082d1 SL |
139 | return 1; |
140 | } |