summaryrefslogtreecommitdiff
path: root/src/regress/lib/libcrypto/aead
diff options
context:
space:
mode:
Diffstat (limited to 'src/regress/lib/libcrypto/aead')
-rw-r--r--src/regress/lib/libcrypto/aead/Makefile14
-rw-r--r--src/regress/lib/libcrypto/aead/aeadtest.c368
-rw-r--r--src/regress/lib/libcrypto/aead/aeadtests.txt77
3 files changed, 0 insertions, 459 deletions
diff --git a/src/regress/lib/libcrypto/aead/Makefile b/src/regress/lib/libcrypto/aead/Makefile
deleted file mode 100644
index 344bdcbbf1..0000000000
--- a/src/regress/lib/libcrypto/aead/Makefile
+++ /dev/null
@@ -1,14 +0,0 @@
1# $OpenBSD: Makefile,v 1.3 2014/07/08 15:53:52 jsing Exp $
2
3PROG= aeadtest
4LDADD= -lcrypto
5DPADD= ${LIBCRYPTO}
6WARNINGS= Yes
7CFLAGS+= -DLIBRESSL_INTERNAL -Werror
8
9REGRESS_TARGETS=regress-aeadtest
10
11regress-aeadtest: ${PROG}
12 ./${PROG} ${.CURDIR}/aeadtests.txt
13
14.include <bsd.regress.mk>
diff --git a/src/regress/lib/libcrypto/aead/aeadtest.c b/src/regress/lib/libcrypto/aead/aeadtest.c
deleted file mode 100644
index 4f0ab9fa3a..0000000000
--- a/src/regress/lib/libcrypto/aead/aeadtest.c
+++ /dev/null
@@ -1,368 +0,0 @@
1/* $OpenBSD: aeadtest.c,v 1.11 2018/07/17 17:06:49 tb Exp $ */
2/* ====================================================================
3 * Copyright (c) 2011-2013 The OpenSSL Project. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 *
9 * 1. Redistributions of source code must retain the above copyright
10 * notice, this list of conditions and the following disclaimer.
11 *
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in
14 * the documentation and/or other materials provided with the
15 * distribution.
16 *
17 * 3. All advertising materials mentioning features or use of this
18 * software must display the following acknowledgment:
19 * "This product includes software developed by the OpenSSL Project
20 * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
21 *
22 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
23 * endorse or promote products derived from this software without
24 * prior written permission. For written permission, please contact
25 * licensing@OpenSSL.org.
26 *
27 * 5. Products derived from this software may not be called "OpenSSL"
28 * nor may "OpenSSL" appear in their names without prior written
29 * permission of the OpenSSL Project.
30 *
31 * 6. Redistributions of any form whatsoever must retain the following
32 * acknowledgment:
33 * "This product includes software developed by the OpenSSL Project
34 * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
35 *
36 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
37 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
38 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
39 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
40 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
41 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
42 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
43 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
44 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
45 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
46 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
47 * OF THE POSSIBILITY OF SUCH DAMAGE.
48 * ====================================================================
49 */
50
51#include <stdio.h>
52#include <stdlib.h>
53#include <string.h>
54#include <stdint.h>
55
56#include <openssl/evp.h>
57
58/* This program tests an AEAD against a series of test vectors from a file. The
59 * test vector file consists of key-value lines where the key and value are
60 * separated by a colon and optional whitespace. The keys are listed in
61 * NAMES, below. The values are hex-encoded data.
62 *
63 * After a number of key-value lines, a blank line indicates the end of the
64 * test case.
65 *
66 * For example, here's a valid test case:
67 *
68 * AEAD: chacha20-poly1305
69 * KEY: bcb2639bf989c6251b29bf38d39a9bdce7c55f4b2ac12a39c8a37b5d0a5cc2b5
70 * NONCE: 1e8b4c510f5ca083
71 * IN: 8c8419bc27
72 * AD: 34ab88c265
73 * CT: 1a7c2f33f5
74 * TAG: 2875c659d0f2808de3a40027feff91a4
75 */
76
77#define BUF_MAX 1024
78
79/* These are the different types of line that are found in the input file. */
80enum {
81 AEAD = 0, /* name of the AEAD algorithm. */
82 KEY, /* hex encoded key. */
83 NONCE, /* hex encoded nonce. */
84 IN, /* hex encoded plaintext. */
85 AD, /* hex encoded additional data. */
86 CT, /* hex encoded ciphertext (not including the
87 * authenticator, which is next. */
88 TAG, /* hex encoded authenticator. */
89 NUM_TYPES
90};
91
92static const char NAMES[NUM_TYPES][6] = {
93 "AEAD",
94 "KEY",
95 "NONCE",
96 "IN",
97 "AD",
98 "CT",
99 "TAG",
100};
101
102static unsigned char
103hex_digit(char h)
104{
105 if (h >= '0' && h <= '9')
106 return h - '0';
107 else if (h >= 'a' && h <= 'f')
108 return h - 'a' + 10;
109 else if (h >= 'A' && h <= 'F')
110 return h - 'A' + 10;
111 else
112 return 16;
113}
114
115static int
116aead_from_name(const EVP_AEAD **aead, const char *name)
117{
118 *aead = NULL;
119
120 if (strcmp(name, "aes-128-gcm") == 0) {
121#ifndef OPENSSL_NO_AES
122 *aead = EVP_aead_aes_128_gcm();
123#else
124 fprintf(stderr, "No AES support.\n");
125#endif
126 } else if (strcmp(name, "aes-256-gcm") == 0) {
127#ifndef OPENSSL_NO_AES
128 *aead = EVP_aead_aes_256_gcm();
129#else
130 fprintf(stderr, "No AES support.\n");
131#endif
132 } else if (strcmp(name, "chacha20-poly1305") == 0) {
133#if !defined(OPENSSL_NO_CHACHA) && !defined(OPENSSL_NO_POLY1305)
134 *aead = EVP_aead_chacha20_poly1305();
135#else
136 fprintf(stderr, "No chacha20-poly1305 support.\n");
137#endif
138 } else {
139 fprintf(stderr, "Unknown AEAD: %s\n", name);
140 return -1;
141 }
142
143 if (*aead == NULL)
144 return 0;
145
146 return 1;
147}
148
149static int
150run_test_case(const EVP_AEAD* aead, unsigned char bufs[NUM_TYPES][BUF_MAX],
151 const unsigned int lengths[NUM_TYPES], unsigned int line_no)
152{
153 EVP_AEAD_CTX ctx;
154 unsigned char out[BUF_MAX + EVP_AEAD_MAX_TAG_LENGTH], out2[BUF_MAX];
155 size_t out_len, out_len2;
156
157 if (!EVP_AEAD_CTX_init(&ctx, aead, bufs[KEY], lengths[KEY],
158 lengths[TAG], NULL)) {
159 fprintf(stderr, "Failed to init AEAD on line %u\n", line_no);
160 return 0;
161 }
162
163 if (!EVP_AEAD_CTX_seal(&ctx, out, &out_len, sizeof(out), bufs[NONCE],
164 lengths[NONCE], bufs[IN], lengths[IN], bufs[AD], lengths[AD])) {
165 fprintf(stderr, "Failed to run AEAD on line %u\n", line_no);
166 return 0;
167 }
168
169 if (out_len != lengths[CT] + lengths[TAG]) {
170 fprintf(stderr, "Bad output length on line %u: %zu vs %u\n",
171 line_no, out_len, (unsigned)(lengths[CT] + lengths[TAG]));
172 return 0;
173 }
174
175 if (memcmp(out, bufs[CT], lengths[CT]) != 0) {
176 fprintf(stderr, "Bad output on line %u\n", line_no);
177 return 0;
178 }
179
180 if (memcmp(out + lengths[CT], bufs[TAG], lengths[TAG]) != 0) {
181 fprintf(stderr, "Bad tag on line %u\n", line_no);
182 return 0;
183 }
184
185 if (!EVP_AEAD_CTX_open(&ctx, out2, &out_len2, lengths[IN], bufs[NONCE],
186 lengths[NONCE], out, out_len, bufs[AD], lengths[AD])) {
187 fprintf(stderr, "Failed to decrypt on line %u\n", line_no);
188 return 0;
189 }
190
191 if (out_len2 != lengths[IN]) {
192 fprintf(stderr, "Bad decrypt on line %u: %zu\n",
193 line_no, out_len2);
194 return 0;
195 }
196
197 if (memcmp(out2, bufs[IN], out_len2) != 0) {
198 fprintf(stderr, "Plaintext mismatch on line %u\n", line_no);
199 return 0;
200 }
201
202 out[0] ^= 0x80;
203 if (EVP_AEAD_CTX_open(&ctx, out2, &out_len2, lengths[IN], bufs[NONCE],
204 lengths[NONCE], out, out_len, bufs[AD], lengths[AD])) {
205 fprintf(stderr, "Decrypted bad data on line %u\n", line_no);
206 return 0;
207 }
208
209 EVP_AEAD_CTX_cleanup(&ctx);
210 return 1;
211}
212
213int
214main(int argc, char **argv)
215{
216 FILE *f;
217 const EVP_AEAD *aead = NULL;
218 unsigned int line_no = 0, num_tests = 0, j;
219
220 unsigned char bufs[NUM_TYPES][BUF_MAX];
221 unsigned int lengths[NUM_TYPES];
222
223 if (argc != 2) {
224 fprintf(stderr, "%s <test file.txt>\n", argv[0]);
225 return 1;
226 }
227
228 f = fopen(argv[1], "r");
229 if (f == NULL) {
230 perror("failed to open input");
231 return 1;
232 }
233
234 for (j = 0; j < NUM_TYPES; j++)
235 lengths[j] = 0;
236
237 for (;;) {
238 char line[4096];
239 unsigned int i, type_len = 0;
240
241 unsigned char *buf = NULL;
242 unsigned int *buf_len = NULL;
243
244 if (!fgets(line, sizeof(line), f))
245 break;
246
247 line_no++;
248 if (line[0] == '#')
249 continue;
250
251 if (line[0] == '\n' || line[0] == 0) {
252 /* Run a test, if possible. */
253 char any_values_set = 0;
254 for (j = 0; j < NUM_TYPES; j++) {
255 if (lengths[j] != 0) {
256 any_values_set = 1;
257 break;
258 }
259 }
260
261 if (!any_values_set)
262 continue;
263
264 switch (aead_from_name(&aead, bufs[AEAD])) {
265 case 0:
266 fprintf(stderr, "Skipping test...\n");
267 continue;
268 case -1:
269 fprintf(stderr, "Aborting...\n");
270 return 4;
271 }
272
273 if (!run_test_case(aead, bufs, lengths, line_no))
274 return 4;
275
276 for (j = 0; j < NUM_TYPES; j++)
277 lengths[j] = 0;
278
279 num_tests++;
280 continue;
281 }
282
283 /* Each line looks like:
284 * TYPE: 0123abc
285 * Where "TYPE" is the type of the data on the line,
286 * e.g. "KEY". */
287 for (i = 0; line[i] != 0 && line[i] != '\n'; i++) {
288 if (line[i] == ':') {
289 type_len = i;
290 break;
291 }
292 }
293 i++;
294
295 if (type_len == 0) {
296 fprintf(stderr, "Parse error on line %u\n", line_no);
297 return 3;
298 }
299
300 /* After the colon, there's optional whitespace. */
301 for (; line[i] != 0 && line[i] != '\n'; i++) {
302 if (line[i] != ' ' && line[i] != '\t')
303 break;
304 }
305
306 line[type_len] = 0;
307 for (j = 0; j < NUM_TYPES; j++) {
308 if (strcmp(line, NAMES[j]) != 0)
309 continue;
310 if (lengths[j] != 0) {
311 fprintf(stderr, "Duplicate value on line %u\n",
312 line_no);
313 return 3;
314 }
315 buf = bufs[j];
316 buf_len = &lengths[j];
317 break;
318 }
319
320 if (buf == NULL) {
321 fprintf(stderr, "Unknown line type on line %u\n",
322 line_no);
323 return 3;
324 }
325
326 if (j == AEAD) {
327 *buf_len = strlcpy(buf, line + i, BUF_MAX);
328 for (j = 0; j < BUF_MAX; j++) {
329 if (buf[j] == '\n')
330 buf[j] = '\0';
331 }
332 continue;
333 }
334
335 for (j = 0; line[i] != 0 && line[i] != '\n'; i++) {
336 unsigned char v, v2;
337 v = hex_digit(line[i++]);
338 if (line[i] == 0 || line[i] == '\n') {
339 fprintf(stderr, "Odd-length hex data on "
340 "line %u\n", line_no);
341 return 3;
342 }
343 v2 = hex_digit(line[i]);
344 if (v > 15 || v2 > 15) {
345 fprintf(stderr, "Invalid hex char on line %u\n",
346 line_no);
347 return 3;
348 }
349 v <<= 4;
350 v |= v2;
351
352 if (j == BUF_MAX) {
353 fprintf(stderr, "Too much hex data on line %u "
354 "(max is %u bytes)\n",
355 line_no, (unsigned) BUF_MAX);
356 return 3;
357 }
358 buf[j++] = v;
359 *buf_len = *buf_len + 1;
360 }
361 }
362
363 printf("Completed %u test cases\n", num_tests);
364 printf("PASS\n");
365 fclose(f);
366
367 return 0;
368}
diff --git a/src/regress/lib/libcrypto/aead/aeadtests.txt b/src/regress/lib/libcrypto/aead/aeadtests.txt
deleted file mode 100644
index 18cee7e579..0000000000
--- a/src/regress/lib/libcrypto/aead/aeadtests.txt
+++ /dev/null
@@ -1,77 +0,0 @@
1# $OpenBSD: aeadtests.txt,v 1.7 2018/07/17 17:06:49 tb Exp $
2#
3# MACsec GCM-AES Test Vectors (bn-randall-test-vectors-0511-v1.pdf)
4#
5
6# 2.5.1 65-byte Packet Authentication Using GCM-AES-128
7AEAD: aes-128-gcm
8KEY: 013FE00B5F11BE7F866D0CBBC55A7A90
9NONCE: 7CFDE9F9E33724C68932D612
10IN:
11AD: 84C5D513D2AAF6E5BBD2727788E523008932D6127CFDE9F9E33724C608000F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F0005
12CT:
13TAG: 217867E50C2DAD74C28C3B50ABDF695A
14
15# 2.5.2 65-byte Packet Authentication Using GCM-AES-256
16AEAD: aes-256-gcm
17KEY: 83C093B58DE7FFE1C0DA926AC43FB3609AC1C80FEE1B624497EF942E2F79A823
18NONCE: 7CFDE9F9E33724C68932D612
19IN:
20AD: 84C5D513D2AAF6E5BBD2727788E523008932D6127CFDE9F9E33724C608000F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F0005
21CT:
22TAG: 6EE160E8FAECA4B36C86B234920CA975
23
24# 2.8.1 75-byte Packet Encryption Using GCM-AES-128
25AEAD: aes-128-gcm
26KEY: 88EE087FD95DA9FBF6725AA9D757B0CD
27NONCE: 7AE8E2CA4EC500012E58495C
28IN: 08000F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748490008
29AD: 68F2E77696CE7AE8E2CA4EC588E54D002E58495C
30CT: C31F53D99E5687F7365119B832D2AAE70741D593F1F9E2AB3455779B078EB8FEACDFEC1F8E3E5277F8180B43361F6512ADB16D2E38548A2C719DBA7228D840
31TAG: 88F8757ADB8AA788D8F65AD668BE70E7
32
33# 2.8.2 75-byte Packet Encryption Using GCM-AES-256
34AEAD: aes-256-gcm
35KEY: 4C973DBC7364621674F8B5B89E5C15511FCED9216490FB1C1A2CAA0FFE0407E5
36NONCE: 7AE8E2CA4EC500012E58495C
37IN: 08000F101112131415161718191A1B1C1D1E1F202122232425262728292A2B2C2D2E2F303132333435363738393A3B3C3D3E3F404142434445464748490008
38AD: 68F2E77696CE7AE8E2CA4EC588E54D002E58495C
39CT: BA8AE31BC506486D6873E4FCE460E7DC57591FF00611F31C3834FE1C04AD80B66803AFCF5B27E6333FA67C99DA47C2F0CED68D531BD741A943CFF7A6713BD0
40TAG: 2611CD7DAA01D61C5C886DC1A8170107
41
42# Test vector from RFC7539 2.8.2
43AEAD: chacha20-poly1305
44KEY: 808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9f
45NONCE: 070000004041424344454647
46IN: 4c616469657320616e642047656e746c656d656e206f662074686520636c617373206f66202739393a204966204920636f756c64206f6666657220796f75206f6e6c79206f6e652074697020666f7220746865206675747572652c2073756e73637265656e20776f756c642062652069742e
47AD: 50515253c0c1c2c3c4c5c6c7
48CT: d31a8d34648e60db7b86afbc53ef7ec2a4aded51296e08fea9e2b5a736ee62d63dbea45e8ca9671282fafb69da92728b1a71de0a9e060b2905d6a5b67ecd3b3692ddbd7f2d778b8c9803aee328091b58fab324e4fad675945585808b4831d7bc3ff4def08e4b7a9de576d26586cec64b6116
49TAG: 1ae10b594f09e26a7e902ecbd0600691
50
51# Test vector from RFC7539 Appendix A.5
52AEAD: chacha20-poly1305
53KEY: 1c9240a5eb55d38af333888604f6b5f0473917c1402b80099dca5cbc207075c0
54NONCE: 000000000102030405060708
55IN: 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
56AD: f33388860000000000004e91
57CT: 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
58TAG: eead9d67890cbb22392336fea1851f38
59
60# Test vector from RFC7634 Appendix A
61AEAD: chacha20-poly1305
62KEY: 808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9f
63NONCE: a0a1a2a31011121314151617
64IN: 45000054a6f200004001e778c6336405c000020508005b7a3a080000553bec100007362708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363701020204
65AD: 0102030400000005
66CT: 24039428b97f417e3c13753a4f05087b67c352e6a7fab1b982d466ef407ae5c614ee8099d52844eb61aa95dfab4c02f72aa71e7c4c4f64c9befe2facc638e8f3cbec163fac469b502773f6fb94e664da9165b82829f641e0
67TAG: 76aaa8266b7fb0f7b11b369907e1ad43
68
69# Test vector from RFC7634 Appendix B
70AEAD: chacha20-poly1305
71KEY: 808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9f
72NONCE: a0a1a2a31011121314151617
73IN: 0000000c000040010000000a00
74AD: c0c1c2c3c4c5c6c7d0d1d2d3d4d5d6d72e202500000000090000004529000029
75CT: 610394701f8d017f7c12924889
76TAG: 6b71bfe25236efd7cdc67066906315b2
77
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-12-27 01:01:40 +0000