diff options
Diffstat (limited to 'src/lib/libssl/src/fips/des/fips_des_selftest.c')
-rw-r--r-- | src/lib/libssl/src/fips/des/fips_des_selftest.c | 200 |
1 files changed, 200 insertions, 0 deletions
diff --git a/src/lib/libssl/src/fips/des/fips_des_selftest.c b/src/lib/libssl/src/fips/des/fips_des_selftest.c new file mode 100644 index 0000000000..3e0778eb5e --- /dev/null +++ b/src/lib/libssl/src/fips/des/fips_des_selftest.c | |||
@@ -0,0 +1,200 @@ | |||
1 | /* ==================================================================== | ||
2 | * Copyright (c) 2003 The OpenSSL Project. All rights reserved. | ||
3 | * | ||
4 | * Redistribution and use in source and binary forms, with or without | ||
5 | * modification, are permitted provided that the following conditions | ||
6 | * are met: | ||
7 | * | ||
8 | * 1. Redistributions of source code must retain the above copyright | ||
9 | * notice, this list of conditions and the following disclaimer. | ||
10 | * | ||
11 | * 2. Redistributions in binary form must reproduce the above copyright | ||
12 | * notice, this list of conditions and the following disclaimer in | ||
13 | * the documentation and/or other materials provided with the | ||
14 | * distribution. | ||
15 | * | ||
16 | * 3. All advertising materials mentioning features or use of this | ||
17 | * software must display the following acknowledgment: | ||
18 | * "This product includes software developed by the OpenSSL Project | ||
19 | * for use in the OpenSSL Toolkit. (http://www.openssl.org/)" | ||
20 | * | ||
21 | * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to | ||
22 | * endorse or promote products derived from this software without | ||
23 | * prior written permission. For written permission, please contact | ||
24 | * openssl-core@openssl.org. | ||
25 | * | ||
26 | * 5. Products derived from this software may not be called "OpenSSL" | ||
27 | * nor may "OpenSSL" appear in their names without prior written | ||
28 | * permission of the OpenSSL Project. | ||
29 | * | ||
30 | * 6. Redistributions of any form whatsoever must retain the following | ||
31 | * acknowledgment: | ||
32 | * "This product includes software developed by the OpenSSL Project | ||
33 | * for use in the OpenSSL Toolkit (http://www.openssl.org/)" | ||
34 | * | ||
35 | * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY | ||
36 | * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | ||
37 | * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | ||
38 | * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR | ||
39 | * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, | ||
40 | * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT | ||
41 | * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; | ||
42 | * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) | ||
43 | * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, | ||
44 | * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) | ||
45 | * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED | ||
46 | * OF THE POSSIBILITY OF SUCH DAMAGE. | ||
47 | * | ||
48 | */ | ||
49 | |||
50 | #include <string.h> | ||
51 | #include <openssl/err.h> | ||
52 | #include <openssl/fips.h> | ||
53 | #include <openssl/des.h> | ||
54 | #include <openssl/opensslconf.h> | ||
55 | |||
56 | #ifdef OPENSSL_FIPS | ||
57 | static struct | ||
58 | { | ||
59 | DES_cblock key; | ||
60 | unsigned char plaintext[8]; | ||
61 | unsigned char ciphertext[8]; | ||
62 | } tests[]= | ||
63 | { | ||
64 | { | ||
65 | { 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00 }, | ||
66 | { 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00 }, | ||
67 | { 0x8C,0xA6,0x4D,0xE9,0xC1,0xB1,0x23,0xA7 } | ||
68 | }, | ||
69 | { | ||
70 | { 0xFE,0xDC,0xBA,0x98,0x76,0x54,0x32,0x10 }, | ||
71 | { 0x01,0x23,0x45,0x67,0x89,0xAB,0xCD,0xEF }, | ||
72 | { 0xED,0x39,0xD9,0x50,0xFA,0x74,0xBC,0xC4 }, | ||
73 | }, | ||
74 | }; | ||
75 | |||
76 | static struct | ||
77 | { | ||
78 | DES_cblock key1; | ||
79 | DES_cblock key2; | ||
80 | unsigned char plaintext[8]; | ||
81 | unsigned char ciphertext[8]; | ||
82 | } tests2[]= | ||
83 | { | ||
84 | { | ||
85 | { 0x7c,0x4f,0x6e,0xf7,0xa2,0x04,0x16,0xec }, | ||
86 | { 0x0b,0x6b,0x7c,0x9e,0x5e,0x19,0xa7,0xc4 }, | ||
87 | { 0x06,0xa7,0xd8,0x79,0xaa,0xce,0x69,0xef }, | ||
88 | { 0x4c,0x11,0x17,0x55,0xbf,0xc4,0x4e,0xfd } | ||
89 | }, | ||
90 | { | ||
91 | { 0x5d,0x9e,0x01,0xd3,0x25,0xc7,0x3e,0x34 }, | ||
92 | { 0x01,0x16,0x7c,0x85,0x23,0xdf,0xe0,0x68 }, | ||
93 | { 0x9c,0x50,0x09,0x0f,0x5e,0x7d,0x69,0x7e }, | ||
94 | { 0xd2,0x0b,0x18,0xdf,0xd9,0x0d,0x9e,0xff }, | ||
95 | } | ||
96 | }; | ||
97 | |||
98 | static struct | ||
99 | { | ||
100 | DES_cblock key1; | ||
101 | DES_cblock key2; | ||
102 | DES_cblock key3; | ||
103 | unsigned char plaintext[8]; | ||
104 | unsigned char ciphertext[8]; | ||
105 | } tests3[]= | ||
106 | { | ||
107 | { | ||
108 | { 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00 }, | ||
109 | { 0xFE,0xDC,0xBA,0x98,0x76,0x54,0x32,0x10 }, | ||
110 | { 0x12,0x34,0x56,0x78,0x9a,0xbc,0xde,0xf0 }, | ||
111 | { 0x8f,0x8f,0xbf,0x9b,0x5d,0x48,0xb4,0x1c}, | ||
112 | { 0x59,0x8c,0xe5,0xd3,0x6c,0xa2,0xea,0x1b}, | ||
113 | }, | ||
114 | { | ||
115 | { 0xDC,0xBA,0x98,0x76,0x54,0x32,0x10,0xFE }, | ||
116 | { 0x01,0x23,0x45,0x67,0x89,0xAB,0xCD,0xEF }, | ||
117 | { 0xED,0x39,0xD9,0x50,0xFA,0x74,0xBC,0xC4 }, | ||
118 | { 0x01,0x23,0x45,0x67,0x89,0xAB,0xCD,0xEF }, | ||
119 | { 0x11,0x25,0xb0,0x35,0xbe,0xa0,0x82,0x86 }, | ||
120 | }, | ||
121 | }; | ||
122 | |||
123 | void FIPS_corrupt_des() | ||
124 | { | ||
125 | tests[0].plaintext[0]++; | ||
126 | } | ||
127 | |||
128 | int FIPS_selftest_des() | ||
129 | { | ||
130 | int n; | ||
131 | |||
132 | /* Encrypt/decrypt with DES and compare to known answers */ | ||
133 | for(n=0 ; n < 2 ; ++n) | ||
134 | { | ||
135 | DES_key_schedule key; | ||
136 | DES_cblock buf; | ||
137 | |||
138 | DES_set_key(&tests[n].key,&key); | ||
139 | DES_ecb_encrypt(&tests[n].plaintext,&buf,&key,1); | ||
140 | if(memcmp(buf,tests[n].ciphertext,sizeof buf)) | ||
141 | { | ||
142 | FIPSerr(FIPS_F_FIPS_SELFTEST_DES,FIPS_R_SELFTEST_FAILED); | ||
143 | return 0; | ||
144 | } | ||
145 | DES_ecb_encrypt(&tests[n].ciphertext,&buf,&key,0); | ||
146 | if(memcmp(buf,tests[n].plaintext,sizeof buf)) | ||
147 | { | ||
148 | FIPSerr(FIPS_F_FIPS_SELFTEST_DES,FIPS_R_SELFTEST_FAILED); | ||
149 | return 0; | ||
150 | } | ||
151 | } | ||
152 | |||
153 | /* Encrypt/decrypt with 2-key 3DES and compare to known answers */ | ||
154 | for(n=0 ; n < 2 ; ++n) | ||
155 | { | ||
156 | DES_key_schedule key1, key2; | ||
157 | unsigned char buf[8]; | ||
158 | |||
159 | DES_set_key(&tests2[n].key1,&key1); | ||
160 | DES_set_key(&tests2[n].key2,&key2); | ||
161 | DES_ecb2_encrypt(tests2[n].plaintext,buf,&key1,&key2,1); | ||
162 | if(memcmp(buf,tests2[n].ciphertext,sizeof buf)) | ||
163 | { | ||
164 | FIPSerr(FIPS_F_FIPS_SELFTEST_DES,FIPS_R_SELFTEST_FAILED); | ||
165 | return 0; | ||
166 | } | ||
167 | DES_ecb2_encrypt(tests2[n].ciphertext,buf,&key1,&key2,0); | ||
168 | if(memcmp(buf,tests2[n].plaintext,sizeof buf)) | ||
169 | { | ||
170 | FIPSerr(FIPS_F_FIPS_SELFTEST_DES,FIPS_R_SELFTEST_FAILED); | ||
171 | return 0; | ||
172 | } | ||
173 | } | ||
174 | |||
175 | /* Encrypt/decrypt with 3DES and compare to known answers */ | ||
176 | for(n=0 ; n < 2 ; ++n) | ||
177 | { | ||
178 | DES_key_schedule key1, key2, key3; | ||
179 | unsigned char buf[8]; | ||
180 | |||
181 | DES_set_key(&tests3[n].key1,&key1); | ||
182 | DES_set_key(&tests3[n].key2,&key2); | ||
183 | DES_set_key(&tests3[n].key3,&key3); | ||
184 | DES_ecb3_encrypt(tests3[n].plaintext,buf,&key1,&key2,&key3,1); | ||
185 | if(memcmp(buf,tests3[n].ciphertext,sizeof buf)) | ||
186 | { | ||
187 | FIPSerr(FIPS_F_FIPS_SELFTEST_DES,FIPS_R_SELFTEST_FAILED); | ||
188 | return 0; | ||
189 | } | ||
190 | DES_ecb3_encrypt(tests3[n].ciphertext,buf,&key1,&key2,&key3,0); | ||
191 | if(memcmp(buf,tests3[n].plaintext,sizeof buf)) | ||
192 | { | ||
193 | FIPSerr(FIPS_F_FIPS_SELFTEST_DES,FIPS_R_SELFTEST_FAILED); | ||
194 | return 0; | ||
195 | } | ||
196 | } | ||
197 | |||
198 | return 1; | ||
199 | } | ||
200 | #endif | ||