scripts: nist-kam-kat generates KEM KAT test data

The script converts the Known-Answers-Test data (KAT) for the NIST
post-quantum round 1 submission Key Encapsulation Mechanism (KEM)
candidates into a C struct amenable for our unit-tests.

diff --git a/scripts/.gitignore b/scripts/.gitignore
index 7883d9ccab86fdee5bdbf05ad26eb6b33794b821..ae9b212b6d121472b928cd5b2b745def57267237 100644 (file)
--- a/scripts/.gitignore
+++ b/scripts/.gitignore
@@ -16,3 +16,4 @@ settings-test
 thread_analysis
 tls_test
 timeattack
+nist-kem-kat

diff --git a/scripts/Makefile.am b/scripts/Makefile.am
index a793800b7be09113c37a188c8071223f433a5024..fb37659248f7ab041e376e1face16e34fc54da98 100644 (file)
--- a/scripts/Makefile.am
+++ b/scripts/Makefile.am
@@ -5,7 +5,7 @@ AM_CPPFLAGS = \
 
 noinst_PROGRAMS = bin2array bin2sql id2sql key2keyid keyid2sql oid2der \
        thread_analysis dh_speed pubkey_speed crypt_burn hash_burn fetch \
-       dnssec malloc_speed aes-test settings-test timeattack
+       dnssec malloc_speed aes-test settings-test timeattack nist-kem-kat
 
 if USE_TLS
   noinst_PROGRAMS += tls_test
@@ -29,6 +29,7 @@ malloc_speed_SOURCES = malloc_speed.c
 fetch_SOURCES = fetch.c
 dnssec_SOURCES = dnssec.c
 timeattack_SOURCES = timeattack.c
+nist_kem_kat_SOURCES = nist_kem_kat.c
 id2sql_LDADD = $(top_builddir)/src/libstrongswan/libstrongswan.la
 key2keyid_LDADD = $(top_builddir)/src/libstrongswan/libstrongswan.la
 keyid2sql_LDADD = $(top_builddir)/src/libstrongswan/libstrongswan.la
@@ -43,6 +44,7 @@ dnssec_LDADD = $(top_builddir)/src/libstrongswan/libstrongswan.la
 aes_test_LDADD = $(top_builddir)/src/libstrongswan/libstrongswan.la
 settings_test_LDADD = $(top_builddir)/src/libstrongswan/libstrongswan.la
 timeattack_LDADD = $(top_builddir)/src/libstrongswan/libstrongswan.la $(RTLIB)
+nist_kem_kat_LDADD = $(top_builddir)/src/libstrongswan/libstrongswan.la $(RTLIB)
 
 key2keyid.o :  $(top_builddir)/config.status
 

diff --git a/scripts/nist_kem_kat.c b/scripts/nist_kem_kat.c
new file mode 100644 (file)
index 0000000..5071953
--- /dev/null
+++ b/scripts/nist_kem_kat.c
@@ -0,0 +1,178 @@
+/*
+ * Copyright (C) 2018 Tobias Brunner
+ * HSR Hochschule fuer Technik Rapperswil
+ *
+ * This program is free software; you can redistribute it and/or modify it
+ * under the terms of the GNU General Public License as published by the
+ * Free Software Foundation; either version 2 of the License, or (at your
+ * option) any later version.  See <http://www.fsf.org/copyleft/gpl.txt>.
+ *
+ * This program is distributed in the hope that it will be useful, but
+ * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
+ * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
+ * for more details.
+ */
+
+#include <stdio.h>
+#include <stdlib.h>
+#include <string.h>
+#include <unistd.h>
+#include <getopt.h>
+#include <errno.h>
+
+#include <library.h>
+
+static void usage(FILE *out, char *name)
+{
+       fprintf(out, "Convert NIST KEM KAT file into struct\n");
+       fprintf(out, "%s [OPTIONS]\n\n", name);
+       fprintf(out, "Options:\n");
+       fprintf(out, "  -h, --help          print this help.\n");
+       fprintf(out, "  -m, --mechanism     QSKE mechanism.\n");
+       fprintf(out, "  -i, --in=FILE       request file (default STDIN).\n");
+       fprintf(out, "  -o, --out=FILE      response file (default STDOUT).\n");
+       fprintf(out, "\n");
+}
+
+int main(int argc, char *argv[])
+{
+       FILE *in = stdin;
+       FILE *out = stdout;
+       char line[90000], *mechanism = "", *pos, *eol, *param, *value;
+       size_t param_len, value_len;
+       int n;
+
+       library_init(NULL, "nist-kem-kat");
+       atexit(library_deinit);
+
+       while (true)
+       {
+               struct option long_opts[] = {
+                       {"help",                no_argument,            NULL,   'h' },
+                       {"mechanism",   required_argument,      NULL,   'm' },
+                       {"in",                  required_argument,      NULL,   'i' },
+                       {"out",                 required_argument,      NULL,   'o' },
+                       {0,0,0,0 },
+               };
+               switch (getopt_long(argc, argv, "h:m:i:o:", long_opts, NULL))
+               {
+                       case EOF:
+                               break;
+                       case 'h':
+                               usage(stdout, argv[0]);
+                               return 0;
+                       case 'm':
+                               mechanism = optarg;
+                               continue;
+                       case 'i':
+                               in = fopen(optarg, "r");
+                               if (!in)
+                               {
+                                       fprintf(stderr, "failed to open '%s': %s\n", optarg,
+                                                       strerror(errno));
+                                       usage(stderr, argv[0]);
+                                       return 1;
+                               }
+                               continue;
+                       case 'o':
+                               out = fopen(optarg, "w");
+                               if (!out)
+                               {
+                                       fprintf(stderr, "failed to open '%s': %s\n", optarg,
+                                                       strerror(errno));
+                                       usage(stderr, argv[0]);
+                                       return 1;
+                               }
+                               continue;
+                       default:
+                               usage(stderr, argv[0]);
+                               return 1;
+               }
+               break;
+       }
+
+       while (fgets(line, sizeof(line), in))
+       {
+               pos = strchr(line, '=');
+               if (!pos)
+               {
+                       continue;
+               }
+
+               /*remove preceding whitespace from value */
+               value = pos + 1;
+               eol = strchr(value, '\n');
+               if (!eol)
+               {
+                       fprintf(stderr, "eol not found\n");
+                       break;
+               }
+               value_len = eol - value;
+               while (value_len && *value == ' ')
+               {
+                       value++;
+                       value_len--;
+               }
+
+               /* remove trailing whitespace from param */
+               param = line;
+               param_len = pos - line;
+               while (param_len && *(--pos) == ' ')
+               {
+                       param_len--;
+               }
+               param[param_len] = '\0';
+
+               if (streq(param, "sk"))
+               {
+                       continue;
+               }
+
+               if (streq(param, "count"))
+               {
+                       fprintf(out, "{\n");
+                       fprintf(out, "\t.mechanism = %s,\n", mechanism);
+                       fprintf(out, "\t.count = %.*s,\n", value_len, value);
+               }
+               else
+               {
+                       fprintf(out, "\t.%s = chunk_from_chars(", param);
+                       n = 0;
+
+                       while (value_len > 1)
+                       {
+                               if (n > 0)
+                               {
+                                       fprintf(out, ",");
+                                       if (n % 100 == 0)
+                                       {
+                                               fprintf(out, " /* %d */\n", n);
+                                       }
+                               }
+                               if (n % 10 == 0)
+                               {
+                                       fprintf(out, "\n\t\t");
+                               }
+                               fprintf(out, "0x%.2s", value);
+                               value += 2;
+                               value_len -= 2;
+                               n++;
+                       }
+                       fprintf(out, "),\n");
+                       if (streq(param, "ss"))
+                       {
+                               fprintf(out, "},\n");
+                       }
+               }
+       }
+
+       if (in != stdin)
+       {
+               fclose(in);
+       }
+       if (out != stdout)
+       {
+               fclose(out);
+       }
+       return 0;
+}