|
|
b3353e |
diff -up openssl-1.1.1k/test/evp_extra_test.c.s390x-test-aes openssl-1.1.1k/test/evp_extra_test.c
|
|
|
b3353e |
--- openssl-1.1.1k/test/evp_extra_test.c.s390x-test-aes 2021-07-16 17:33:04.663181698 +0200
|
|
|
b3353e |
+++ openssl-1.1.1k/test/evp_extra_test.c 2021-07-16 17:49:27.780439742 +0200
|
|
|
b3353e |
@@ -320,6 +320,97 @@ static const unsigned char pExampleECPar
|
|
|
b3353e |
};
|
|
|
b3353e |
#endif
|
|
|
b3353e |
|
|
|
b3353e |
+static const unsigned char kCFBDefaultKey[] = {
|
|
|
b3353e |
+ 0x2B, 0x7E, 0x15, 0x16, 0x28, 0xAE, 0xD2, 0xA6, 0xAB, 0xF7, 0x15, 0x88,
|
|
|
b3353e |
+ 0x09, 0xCF, 0x4F, 0x3C
|
|
|
b3353e |
+};
|
|
|
b3353e |
+
|
|
|
b3353e |
+static const unsigned char kGCMDefaultKey[32] = { 0 };
|
|
|
b3353e |
+
|
|
|
b3353e |
+static const unsigned char kGCMResetKey[] = {
|
|
|
b3353e |
+ 0xfe, 0xff, 0xe9, 0x92, 0x86, 0x65, 0x73, 0x1c, 0x6d, 0x6a, 0x8f, 0x94,
|
|
|
b3353e |
+ 0x67, 0x30, 0x83, 0x08, 0xfe, 0xff, 0xe9, 0x92, 0x86, 0x65, 0x73, 0x1c,
|
|
|
b3353e |
+ 0x6d, 0x6a, 0x8f, 0x94, 0x67, 0x30, 0x83, 0x08
|
|
|
b3353e |
+};
|
|
|
b3353e |
+
|
|
|
b3353e |
+static const unsigned char iCFBIV[] = {
|
|
|
b3353e |
+ 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0A, 0x0B,
|
|
|
b3353e |
+ 0x0C, 0x0D, 0x0E, 0x0F
|
|
|
b3353e |
+};
|
|
|
b3353e |
+
|
|
|
b3353e |
+static const unsigned char iGCMDefaultIV[12] = { 0 };
|
|
|
b3353e |
+
|
|
|
b3353e |
+static const unsigned char iGCMResetIV1[] = {
|
|
|
b3353e |
+ 0xca, 0xfe, 0xba, 0xbe, 0xfa, 0xce, 0xdb, 0xad
|
|
|
b3353e |
+};
|
|
|
b3353e |
+
|
|
|
b3353e |
+static const unsigned char iGCMResetIV2[] = {
|
|
|
b3353e |
+ 0xca, 0xfe, 0xba, 0xbe, 0xfa, 0xce, 0xdb, 0xad, 0xde, 0xca, 0xf8, 0x88
|
|
|
b3353e |
+};
|
|
|
b3353e |
+
|
|
|
b3353e |
+static const unsigned char cfbPlaintext[] = {
|
|
|
b3353e |
+ 0x6B, 0xC1, 0xBE, 0xE2, 0x2E, 0x40, 0x9F, 0x96, 0xE9, 0x3D, 0x7E, 0x11,
|
|
|
b3353e |
+ 0x73, 0x93, 0x17, 0x2A
|
|
|
b3353e |
+};
|
|
|
b3353e |
+
|
|
|
b3353e |
+static const unsigned char gcmDefaultPlaintext[16] = { 0 };
|
|
|
b3353e |
+
|
|
|
b3353e |
+static const unsigned char gcmResetPlaintext[] = {
|
|
|
b3353e |
+ 0xd9, 0x31, 0x32, 0x25, 0xf8, 0x84, 0x06, 0xe5, 0xa5, 0x59, 0x09, 0xc5,
|
|
|
b3353e |
+ 0xaf, 0xf5, 0x26, 0x9a, 0x86, 0xa7, 0xa9, 0x53, 0x15, 0x34, 0xf7, 0xda,
|
|
|
b3353e |
+ 0x2e, 0x4c, 0x30, 0x3d, 0x8a, 0x31, 0x8a, 0x72, 0x1c, 0x3c, 0x0c, 0x95,
|
|
|
b3353e |
+ 0x95, 0x68, 0x09, 0x53, 0x2f, 0xcf, 0x0e, 0x24, 0x49, 0xa6, 0xb5, 0x25,
|
|
|
b3353e |
+ 0xb1, 0x6a, 0xed, 0xf5, 0xaa, 0x0d, 0xe6, 0x57, 0xba, 0x63, 0x7b, 0x39
|
|
|
b3353e |
+};
|
|
|
b3353e |
+
|
|
|
b3353e |
+static const unsigned char cfbCiphertext[] = {
|
|
|
b3353e |
+ 0x3B, 0x3F, 0xD9, 0x2E, 0xB7, 0x2D, 0xAD, 0x20, 0x33, 0x34, 0x49, 0xF8,
|
|
|
b3353e |
+ 0xE8, 0x3C, 0xFB, 0x4A
|
|
|
b3353e |
+};
|
|
|
b3353e |
+
|
|
|
b3353e |
+static const unsigned char gcmDefaultCiphertext[] = {
|
|
|
b3353e |
+ 0xce, 0xa7, 0x40, 0x3d, 0x4d, 0x60, 0x6b, 0x6e, 0x07, 0x4e, 0xc5, 0xd3,
|
|
|
b3353e |
+ 0xba, 0xf3, 0x9d, 0x18
|
|
|
b3353e |
+};
|
|
|
b3353e |
+
|
|
|
b3353e |
+static const unsigned char gcmResetCiphertext1[] = {
|
|
|
b3353e |
+ 0xc3, 0x76, 0x2d, 0xf1, 0xca, 0x78, 0x7d, 0x32, 0xae, 0x47, 0xc1, 0x3b,
|
|
|
b3353e |
+ 0xf1, 0x98, 0x44, 0xcb, 0xaf, 0x1a, 0xe1, 0x4d, 0x0b, 0x97, 0x6a, 0xfa,
|
|
|
b3353e |
+ 0xc5, 0x2f, 0xf7, 0xd7, 0x9b, 0xba, 0x9d, 0xe0, 0xfe, 0xb5, 0x82, 0xd3,
|
|
|
b3353e |
+ 0x39, 0x34, 0xa4, 0xf0, 0x95, 0x4c, 0xc2, 0x36, 0x3b, 0xc7, 0x3f, 0x78,
|
|
|
b3353e |
+ 0x62, 0xac, 0x43, 0x0e, 0x64, 0xab, 0xe4, 0x99, 0xf4, 0x7c, 0x9b, 0x1f
|
|
|
b3353e |
+};
|
|
|
b3353e |
+
|
|
|
b3353e |
+static const unsigned char gcmResetCiphertext2[] = {
|
|
|
b3353e |
+ 0x52, 0x2d, 0xc1, 0xf0, 0x99, 0x56, 0x7d, 0x07, 0xf4, 0x7f, 0x37, 0xa3,
|
|
|
b3353e |
+ 0x2a, 0x84, 0x42, 0x7d, 0x64, 0x3a, 0x8c, 0xdc, 0xbf, 0xe5, 0xc0, 0xc9,
|
|
|
b3353e |
+ 0x75, 0x98, 0xa2, 0xbd, 0x25, 0x55, 0xd1, 0xaa, 0x8c, 0xb0, 0x8e, 0x48,
|
|
|
b3353e |
+ 0x59, 0x0d, 0xbb, 0x3d, 0xa7, 0xb0, 0x8b, 0x10, 0x56, 0x82, 0x88, 0x38,
|
|
|
b3353e |
+ 0xc5, 0xf6, 0x1e, 0x63, 0x93, 0xba, 0x7a, 0x0a, 0xbc, 0xc9, 0xf6, 0x62
|
|
|
b3353e |
+};
|
|
|
b3353e |
+
|
|
|
b3353e |
+static const unsigned char gcmAAD[] = {
|
|
|
b3353e |
+ 0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe, 0xef, 0xfe, 0xed, 0xfa, 0xce,
|
|
|
b3353e |
+ 0xde, 0xad, 0xbe, 0xef, 0xab, 0xad, 0xda, 0xd2
|
|
|
b3353e |
+};
|
|
|
b3353e |
+
|
|
|
b3353e |
+static const unsigned char gcmDefaultTag[] = {
|
|
|
b3353e |
+ 0xd0, 0xd1, 0xc8, 0xa7, 0x99, 0x99, 0x6b, 0xf0, 0x26, 0x5b, 0x98, 0xb5,
|
|
|
b3353e |
+ 0xd4, 0x8a, 0xb9, 0x19
|
|
|
b3353e |
+};
|
|
|
b3353e |
+
|
|
|
b3353e |
+static const unsigned char gcmResetTag1[] = {
|
|
|
b3353e |
+ 0x3a, 0x33, 0x7d, 0xbf, 0x46, 0xa7, 0x92, 0xc4, 0x5e, 0x45, 0x49, 0x13,
|
|
|
b3353e |
+ 0xfe, 0x2e, 0xa8, 0xf2
|
|
|
b3353e |
+};
|
|
|
b3353e |
+
|
|
|
b3353e |
+static const unsigned char gcmResetTag2[] = {
|
|
|
b3353e |
+ 0x76, 0xfc, 0x6e, 0xce, 0x0f, 0x4e, 0x17, 0x68, 0xcd, 0xdf, 0x88, 0x53,
|
|
|
b3353e |
+ 0xbb, 0x2d, 0x55, 0x1b
|
|
|
b3353e |
+};
|
|
|
b3353e |
+
|
|
|
b3353e |
+
|
|
|
b3353e |
+
|
|
|
b3353e |
typedef struct APK_DATA_st {
|
|
|
b3353e |
const unsigned char *kder;
|
|
|
b3353e |
size_t size;
|
|
|
b3353e |
@@ -330,6 +421,385 @@ typedef struct APK_DATA_st {
|
|
|
b3353e |
int type; /* 0 for private, 1 for public, 2 for params */
|
|
|
b3353e |
} APK_DATA;
|
|
|
b3353e |
|
|
|
b3353e |
+typedef struct {
|
|
|
b3353e |
+ const char *cipher;
|
|
|
b3353e |
+ const unsigned char *key;
|
|
|
b3353e |
+ const unsigned char *iv;
|
|
|
b3353e |
+ const unsigned char *input;
|
|
|
b3353e |
+ const unsigned char *expected;
|
|
|
b3353e |
+ const unsigned char *tag;
|
|
|
b3353e |
+ size_t ivlen; /* 0 if we do not need to set a specific IV len */
|
|
|
b3353e |
+ size_t inlen;
|
|
|
b3353e |
+ size_t expectedlen;
|
|
|
b3353e |
+ size_t taglen;
|
|
|
b3353e |
+ int keyfirst;
|
|
|
b3353e |
+ int initenc;
|
|
|
b3353e |
+ int finalenc;
|
|
|
b3353e |
+} EVP_INIT_TEST_st;
|
|
|
b3353e |
+
|
|
|
b3353e |
+static const EVP_INIT_TEST_st evp_init_tests[] = {
|
|
|
b3353e |
+ {
|
|
|
b3353e |
+ "aes-128-cfb", kCFBDefaultKey, iCFBIV, cfbPlaintext,
|
|
|
b3353e |
+ cfbCiphertext, NULL, 0, sizeof(cfbPlaintext), sizeof(cfbCiphertext),
|
|
|
b3353e |
+ 0, 1, 0, 1
|
|
|
b3353e |
+ },
|
|
|
b3353e |
+ {
|
|
|
b3353e |
+ "aes-256-gcm", kGCMDefaultKey, iGCMDefaultIV, gcmDefaultPlaintext,
|
|
|
b3353e |
+ gcmDefaultCiphertext, gcmDefaultTag, sizeof(iGCMDefaultIV),
|
|
|
b3353e |
+ sizeof(gcmDefaultPlaintext), sizeof(gcmDefaultCiphertext),
|
|
|
b3353e |
+ sizeof(gcmDefaultTag), 1, 0, 1
|
|
|
b3353e |
+ },
|
|
|
b3353e |
+ {
|
|
|
b3353e |
+ "aes-128-cfb", kCFBDefaultKey, iCFBIV, cfbPlaintext,
|
|
|
b3353e |
+ cfbCiphertext, NULL, 0, sizeof(cfbPlaintext), sizeof(cfbCiphertext),
|
|
|
b3353e |
+ 0, 0, 0, 1
|
|
|
b3353e |
+ },
|
|
|
b3353e |
+ {
|
|
|
b3353e |
+ "aes-256-gcm", kGCMDefaultKey, iGCMDefaultIV, gcmDefaultPlaintext,
|
|
|
b3353e |
+ gcmDefaultCiphertext, gcmDefaultTag, sizeof(iGCMDefaultIV),
|
|
|
b3353e |
+ sizeof(gcmDefaultPlaintext), sizeof(gcmDefaultCiphertext),
|
|
|
b3353e |
+ sizeof(gcmDefaultTag), 0, 0, 1
|
|
|
b3353e |
+ },
|
|
|
b3353e |
+ {
|
|
|
b3353e |
+ "aes-128-cfb", kCFBDefaultKey, iCFBIV, cfbCiphertext,
|
|
|
b3353e |
+ cfbPlaintext, NULL, 0, sizeof(cfbCiphertext), sizeof(cfbPlaintext),
|
|
|
b3353e |
+ 0, 1, 1, 0
|
|
|
b3353e |
+ },
|
|
|
b3353e |
+ {
|
|
|
b3353e |
+ "aes-256-gcm", kGCMDefaultKey, iGCMDefaultIV, gcmDefaultCiphertext,
|
|
|
b3353e |
+ gcmDefaultPlaintext, gcmDefaultTag, sizeof(iGCMDefaultIV),
|
|
|
b3353e |
+ sizeof(gcmDefaultCiphertext), sizeof(gcmDefaultPlaintext),
|
|
|
b3353e |
+ sizeof(gcmDefaultTag), 1, 1, 0
|
|
|
b3353e |
+ },
|
|
|
b3353e |
+ {
|
|
|
b3353e |
+ "aes-128-cfb", kCFBDefaultKey, iCFBIV, cfbCiphertext,
|
|
|
b3353e |
+ cfbPlaintext, NULL, 0, sizeof(cfbCiphertext), sizeof(cfbPlaintext),
|
|
|
b3353e |
+ 0, 0, 1, 0
|
|
|
b3353e |
+ },
|
|
|
b3353e |
+ {
|
|
|
b3353e |
+ "aes-256-gcm", kGCMDefaultKey, iGCMDefaultIV, gcmDefaultCiphertext,
|
|
|
b3353e |
+ gcmDefaultPlaintext, gcmDefaultTag, sizeof(iGCMDefaultIV),
|
|
|
b3353e |
+ sizeof(gcmDefaultCiphertext), sizeof(gcmDefaultPlaintext),
|
|
|
b3353e |
+ sizeof(gcmDefaultTag), 0, 1, 0
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+};
|
|
|
b3353e |
+
|
|
|
b3353e |
+static int evp_init_seq_set_iv(EVP_CIPHER_CTX *ctx, const EVP_INIT_TEST_st *t)
|
|
|
b3353e |
+{
|
|
|
b3353e |
+ int res = 0;
|
|
|
b3353e |
+
|
|
|
b3353e |
+ if (t->ivlen != 0) {
|
|
|
b3353e |
+ if (!TEST_true(EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_GCM_SET_IVLEN, t->ivlen, NULL)))
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CipherInit_ex(ctx, NULL, NULL, NULL, t->iv, -1)))
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ res = 1;
|
|
|
b3353e |
+ err:
|
|
|
b3353e |
+ return res;
|
|
|
b3353e |
+}
|
|
|
b3353e |
+
|
|
|
b3353e |
+/*
|
|
|
b3353e |
+ * Test step-wise cipher initialization via EVP_CipherInit_ex where the
|
|
|
b3353e |
+ * arguments are given one at a time and a final adjustment to the enc
|
|
|
b3353e |
+ * parameter sets the correct operation.
|
|
|
b3353e |
+ */
|
|
|
b3353e |
+static int test_evp_init_seq(int idx)
|
|
|
b3353e |
+{
|
|
|
b3353e |
+ int outlen1, outlen2;
|
|
|
b3353e |
+ int testresult = 0;
|
|
|
b3353e |
+ unsigned char outbuf[1024];
|
|
|
b3353e |
+ unsigned char tag[16];
|
|
|
b3353e |
+ const EVP_INIT_TEST_st *t = &evp_init_tests[idx];
|
|
|
b3353e |
+ EVP_CIPHER_CTX *ctx = NULL;
|
|
|
b3353e |
+ const EVP_CIPHER *type = NULL;
|
|
|
b3353e |
+ size_t taglen = sizeof(tag);
|
|
|
b3353e |
+ char *errmsg = NULL;
|
|
|
b3353e |
+
|
|
|
b3353e |
+ ctx = EVP_CIPHER_CTX_new();
|
|
|
b3353e |
+ if (ctx == NULL) {
|
|
|
b3353e |
+ errmsg = "CTX_ALLOC";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_ptr(type = EVP_get_cipherbyname(t->cipher))) {
|
|
|
b3353e |
+ errmsg = "GET_CIPHERBYNAME";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CipherInit_ex(ctx, type, NULL, NULL, NULL, t->initenc))) {
|
|
|
b3353e |
+ errmsg = "EMPTY_ENC_INIT";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CIPHER_CTX_set_padding(ctx, 0))) {
|
|
|
b3353e |
+ errmsg = "PADDING";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (t->keyfirst && !TEST_true(EVP_CipherInit_ex(ctx, NULL, NULL, t->key, NULL, -1))) {
|
|
|
b3353e |
+ errmsg = "KEY_INIT (before iv)";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!evp_init_seq_set_iv(ctx, t)) {
|
|
|
b3353e |
+ errmsg = "IV_INIT";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (t->keyfirst == 0 && !TEST_true(EVP_CipherInit_ex(ctx, NULL, NULL, t->key, NULL, -1))) {
|
|
|
b3353e |
+ errmsg = "KEY_INIT (after iv)";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CipherInit_ex(ctx, NULL, NULL, NULL, NULL, t->finalenc))) {
|
|
|
b3353e |
+ errmsg = "FINAL_ENC_INIT";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CipherUpdate(ctx, outbuf, &outlen1, t->input, t->inlen))) {
|
|
|
b3353e |
+ errmsg = "CIPHER_UPDATE";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (t->finalenc == 0 && t->tag != NULL) {
|
|
|
b3353e |
+ /* Set expected tag */
|
|
|
b3353e |
+ if (!TEST_true(EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_SET_TAG,
|
|
|
b3353e |
+ t->taglen, (void *)t->tag))) {
|
|
|
b3353e |
+ errmsg = "SET_TAG";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CipherFinal_ex(ctx, outbuf + outlen1, &outlen2))) {
|
|
|
b3353e |
+ errmsg = "CIPHER_FINAL";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_mem_eq(t->expected, t->expectedlen, outbuf, outlen1 + outlen2)) {
|
|
|
b3353e |
+ errmsg = "WRONG_RESULT";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (t->finalenc != 0 && t->tag != NULL) {
|
|
|
b3353e |
+ if (!TEST_true(EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_GET_TAG, taglen, tag))) {
|
|
|
b3353e |
+ errmsg = "GET_TAG";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_mem_eq(t->tag, t->taglen, tag, taglen)) {
|
|
|
b3353e |
+ errmsg = "TAG_ERROR";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ testresult = 1;
|
|
|
b3353e |
+ err:
|
|
|
b3353e |
+ if (errmsg != NULL)
|
|
|
b3353e |
+ TEST_info("evp_init_test %d: %s", idx, errmsg);
|
|
|
b3353e |
+ EVP_CIPHER_CTX_free(ctx);
|
|
|
b3353e |
+ return testresult;
|
|
|
b3353e |
+}
|
|
|
b3353e |
+
|
|
|
b3353e |
+typedef struct {
|
|
|
b3353e |
+ const unsigned char *input;
|
|
|
b3353e |
+ const unsigned char *expected;
|
|
|
b3353e |
+ size_t inlen;
|
|
|
b3353e |
+ size_t expectedlen;
|
|
|
b3353e |
+ int enc;
|
|
|
b3353e |
+} EVP_RESET_TEST_st;
|
|
|
b3353e |
+
|
|
|
b3353e |
+static const EVP_RESET_TEST_st evp_reset_tests[] = {
|
|
|
b3353e |
+ {
|
|
|
b3353e |
+ cfbPlaintext, cfbCiphertext,
|
|
|
b3353e |
+ sizeof(cfbPlaintext), sizeof(cfbCiphertext), 1
|
|
|
b3353e |
+ },
|
|
|
b3353e |
+ {
|
|
|
b3353e |
+ cfbCiphertext, cfbPlaintext,
|
|
|
b3353e |
+ sizeof(cfbCiphertext), sizeof(cfbPlaintext), 0
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+};
|
|
|
b3353e |
+
|
|
|
b3353e |
+/*
|
|
|
b3353e |
+ * Test a reset of a cipher via EVP_CipherInit_ex after the cipher has already
|
|
|
b3353e |
+ * been used.
|
|
|
b3353e |
+ */
|
|
|
b3353e |
+static int test_evp_reset(int idx)
|
|
|
b3353e |
+{
|
|
|
b3353e |
+ const EVP_RESET_TEST_st *t = &evp_reset_tests[idx];
|
|
|
b3353e |
+ int outlen1, outlen2;
|
|
|
b3353e |
+ int testresult = 0;
|
|
|
b3353e |
+ unsigned char outbuf[1024];
|
|
|
b3353e |
+ EVP_CIPHER_CTX *ctx = NULL;
|
|
|
b3353e |
+ const EVP_CIPHER *type = NULL;
|
|
|
b3353e |
+ char *errmsg = NULL;
|
|
|
b3353e |
+
|
|
|
b3353e |
+ if (!TEST_ptr(ctx = EVP_CIPHER_CTX_new())) {
|
|
|
b3353e |
+ errmsg = "CTX_ALLOC";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_ptr(type = EVP_get_cipherbyname("aes-128-cfb"))) {
|
|
|
b3353e |
+ errmsg = "GET_CIPHERBYNAME";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CipherInit_ex(ctx, type, NULL, kCFBDefaultKey, iCFBIV, t->enc))) {
|
|
|
b3353e |
+ errmsg = "CIPHER_INIT";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CIPHER_CTX_set_padding(ctx, 0))) {
|
|
|
b3353e |
+ errmsg = "PADDING";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CipherUpdate(ctx, outbuf, &outlen1, t->input, t->inlen))) {
|
|
|
b3353e |
+ errmsg = "CIPHER_UPDATE";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CipherFinal_ex(ctx, outbuf + outlen1, &outlen2))) {
|
|
|
b3353e |
+ errmsg = "CIPHER_FINAL";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_mem_eq(t->expected, t->expectedlen, outbuf, outlen1 + outlen2)) {
|
|
|
b3353e |
+ errmsg = "WRONG_RESULT";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CipherInit_ex(ctx, NULL, NULL, NULL, NULL, -1))) {
|
|
|
b3353e |
+ errmsg = "CIPHER_REINIT";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CipherUpdate(ctx, outbuf, &outlen1, t->input, t->inlen))) {
|
|
|
b3353e |
+ errmsg = "CIPHER_UPDATE (reinit)";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CipherFinal_ex(ctx, outbuf + outlen1, &outlen2))) {
|
|
|
b3353e |
+ errmsg = "CIPHER_FINAL (reinit)";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_mem_eq(t->expected, t->expectedlen, outbuf, outlen1 + outlen2)) {
|
|
|
b3353e |
+ errmsg = "WRONG_RESULT (reinit)";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ testresult = 1;
|
|
|
b3353e |
+ err:
|
|
|
b3353e |
+ if (errmsg != NULL)
|
|
|
b3353e |
+ TEST_info("test_evp_reset %d: %s", idx, errmsg);
|
|
|
b3353e |
+ EVP_CIPHER_CTX_free(ctx);
|
|
|
b3353e |
+ return testresult;
|
|
|
b3353e |
+}
|
|
|
b3353e |
+
|
|
|
b3353e |
+typedef struct {
|
|
|
b3353e |
+ const unsigned char *iv1;
|
|
|
b3353e |
+ const unsigned char *iv2;
|
|
|
b3353e |
+ const unsigned char *expected1;
|
|
|
b3353e |
+ const unsigned char *expected2;
|
|
|
b3353e |
+ const unsigned char *tag1;
|
|
|
b3353e |
+ const unsigned char *tag2;
|
|
|
b3353e |
+ size_t ivlen1;
|
|
|
b3353e |
+ size_t ivlen2;
|
|
|
b3353e |
+ size_t expectedlen1;
|
|
|
b3353e |
+ size_t expectedlen2;
|
|
|
b3353e |
+} TEST_GCM_IV_REINIT_st;
|
|
|
b3353e |
+
|
|
|
b3353e |
+static const TEST_GCM_IV_REINIT_st gcm_reinit_tests[] = {
|
|
|
b3353e |
+ {
|
|
|
b3353e |
+ iGCMResetIV1, iGCMResetIV2, gcmResetCiphertext1, gcmResetCiphertext2,
|
|
|
b3353e |
+ gcmResetTag1, gcmResetTag2, sizeof(iGCMResetIV1), sizeof(iGCMResetIV2),
|
|
|
b3353e |
+ sizeof(gcmResetCiphertext1), sizeof(gcmResetCiphertext2)
|
|
|
b3353e |
+ },
|
|
|
b3353e |
+ {
|
|
|
b3353e |
+ iGCMResetIV2, iGCMResetIV1, gcmResetCiphertext2, gcmResetCiphertext1,
|
|
|
b3353e |
+ gcmResetTag2, gcmResetTag1, sizeof(iGCMResetIV2), sizeof(iGCMResetIV1),
|
|
|
b3353e |
+ sizeof(gcmResetCiphertext2), sizeof(gcmResetCiphertext1)
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+};
|
|
|
b3353e |
+
|
|
|
b3353e |
+static int test_gcm_reinit(int idx)
|
|
|
b3353e |
+{
|
|
|
b3353e |
+ int outlen1, outlen2, outlen3;
|
|
|
b3353e |
+ int testresult = 0;
|
|
|
b3353e |
+ unsigned char outbuf[1024];
|
|
|
b3353e |
+ unsigned char tag[16];
|
|
|
b3353e |
+ const TEST_GCM_IV_REINIT_st *t = &gcm_reinit_tests[idx];
|
|
|
b3353e |
+ EVP_CIPHER_CTX *ctx = NULL;
|
|
|
b3353e |
+ const EVP_CIPHER *type = NULL;
|
|
|
b3353e |
+ size_t taglen = sizeof(tag);
|
|
|
b3353e |
+ char *errmsg = NULL;
|
|
|
b3353e |
+
|
|
|
b3353e |
+ if (!TEST_ptr(ctx = EVP_CIPHER_CTX_new())) {
|
|
|
b3353e |
+ errmsg = "CTX_ALLOC";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_ptr(type = EVP_get_cipherbyname("aes-256-gcm"))) {
|
|
|
b3353e |
+ errmsg = "GET_CIPHERBYNAME";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CipherInit_ex(ctx, type, NULL, NULL, NULL, 1))) {
|
|
|
b3353e |
+ errmsg = "ENC_INIT";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_GCM_SET_IVLEN, t->ivlen1, NULL))) {
|
|
|
b3353e |
+ errmsg = "SET_IVLEN1";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CipherInit_ex(ctx, NULL, NULL, kGCMResetKey, t->iv1, 1))) {
|
|
|
b3353e |
+ errmsg = "SET_IV1";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CipherUpdate(ctx, NULL, &outlen3, gcmAAD, sizeof(gcmAAD)))) {
|
|
|
b3353e |
+ errmsg = "AAD1";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ EVP_CIPHER_CTX_set_padding(ctx, 0);
|
|
|
b3353e |
+ if (!TEST_true(EVP_CipherUpdate(ctx, outbuf, &outlen1, gcmResetPlaintext,
|
|
|
b3353e |
+ sizeof(gcmResetPlaintext)))) {
|
|
|
b3353e |
+ errmsg = "CIPHER_UPDATE1";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CipherFinal_ex(ctx, outbuf + outlen1, &outlen2))) {
|
|
|
b3353e |
+ errmsg = "CIPHER_FINAL1";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_mem_eq(t->expected1, t->expectedlen1, outbuf, outlen1 + outlen2)) {
|
|
|
b3353e |
+ errmsg = "WRONG_RESULT1";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_GET_TAG, taglen, tag))) {
|
|
|
b3353e |
+ errmsg = "GET_TAG1";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_mem_eq(t->tag1, taglen, tag, taglen)) {
|
|
|
b3353e |
+ errmsg = "TAG_ERROR1";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ /* Now reinit */
|
|
|
b3353e |
+ if (!TEST_true(EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_GCM_SET_IVLEN, t->ivlen2, NULL))) {
|
|
|
b3353e |
+ errmsg = "SET_IVLEN2";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CipherInit_ex(ctx, NULL, NULL, NULL, t->iv2, -1))) {
|
|
|
b3353e |
+ errmsg = "SET_IV2";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CipherUpdate(ctx, NULL, &outlen3, gcmAAD, sizeof(gcmAAD)))) {
|
|
|
b3353e |
+ errmsg = "AAD2";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CipherUpdate(ctx, outbuf, &outlen1, gcmResetPlaintext,
|
|
|
b3353e |
+ sizeof(gcmResetPlaintext)))) {
|
|
|
b3353e |
+ errmsg = "CIPHER_UPDATE2";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CipherFinal_ex(ctx, outbuf + outlen1, &outlen2))) {
|
|
|
b3353e |
+ errmsg = "CIPHER_FINAL2";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_mem_eq(t->expected2, t->expectedlen2, outbuf, outlen1 + outlen2)) {
|
|
|
b3353e |
+ errmsg = "WRONG_RESULT2";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_true(EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_GET_TAG, taglen, tag))) {
|
|
|
b3353e |
+ errmsg = "GET_TAG2";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ if (!TEST_mem_eq(t->tag2, taglen, tag, taglen)) {
|
|
|
b3353e |
+ errmsg = "TAG_ERROR2";
|
|
|
b3353e |
+ goto err;
|
|
|
b3353e |
+ }
|
|
|
b3353e |
+ testresult = 1;
|
|
|
b3353e |
+ err:
|
|
|
b3353e |
+ if (errmsg != NULL)
|
|
|
b3353e |
+ TEST_info("evp_init_test %d: %s", idx, errmsg);
|
|
|
b3353e |
+ EVP_CIPHER_CTX_free(ctx);
|
|
|
b3353e |
+ return testresult;
|
|
|
b3353e |
+}
|
|
|
b3353e |
+
|
|
|
b3353e |
+
|
|
|
b3353e |
+
|
|
|
b3353e |
static APK_DATA keydata[] = {
|
|
|
b3353e |
{kExampleRSAKeyDER, sizeof(kExampleRSAKeyDER), EVP_PKEY_RSA},
|
|
|
b3353e |
{kExampleRSAKeyPKCS8, sizeof(kExampleRSAKeyPKCS8), EVP_PKEY_RSA},
|
|
|
b3353e |
@@ -1208,6 +1678,8 @@ int setup_tests(void)
|
|
|
b3353e |
#ifndef OPENSSL_NO_DH
|
|
|
b3353e |
ADD_TEST(test_EVP_PKEY_set1_DH);
|
|
|
b3353e |
#endif
|
|
|
b3353e |
-
|
|
|
b3353e |
+ ADD_ALL_TESTS(test_evp_init_seq, OSSL_NELEM(evp_init_tests));
|
|
|
b3353e |
+ ADD_ALL_TESTS(test_evp_reset, OSSL_NELEM(evp_reset_tests));
|
|
|
b3353e |
+ ADD_ALL_TESTS(test_gcm_reinit, OSSL_NELEM(gcm_reinit_tests));
|
|
|
b3353e |
return 1;
|
|
|
b3353e |
}
|