1 /* Copyright (c) 2015, Google Inc. 2 * 3 * Permission to use, copy, modify, and/or distribute this software for any 4 * purpose with or without fee is hereby granted, provided that the above 5 * copyright notice and this permission notice appear in all copies. 6 * 7 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES 8 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF 9 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY 10 * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES 11 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION 12 * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN 13 * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */ 14 15 #include <stdio.h> 16 17 #include <algorithm> 18 19 #include <openssl/cmac.h> 20 21 #include "../test/scoped_types.h" 22 #include "../test/test_util.h" 23 24 25 static void dump(const uint8_t *got, const uint8_t *want, size_t len) { 26 hexdump(stderr, "got :", got, len); 27 hexdump(stderr, "want:", want, len); 28 fflush(stderr); 29 } 30 31 static int test(const char *name, const uint8_t *key, size_t key_len, 32 const uint8_t *msg, size_t msg_len, const uint8_t *expected) { 33 uint8_t out[16]; 34 35 if (!AES_CMAC(out, key, key_len, msg, msg_len)) { 36 fprintf(stderr, "%s: AES_CMAC failed\n", name); 37 return 0; 38 } 39 40 if (CRYPTO_memcmp(out, expected, sizeof(out)) != 0) { 41 fprintf(stderr, "%s: CMAC result differs:\n", name); 42 dump(out, expected, sizeof(out)); 43 return 0; 44 } 45 46 ScopedCMAC_CTX ctx(CMAC_CTX_new()); 47 if (!CMAC_Init(ctx.get(), key, key_len, EVP_aes_128_cbc(), NULL)) { 48 fprintf(stderr, "%s: CMAC_Init failed.\n", name); 49 return 0; 50 } 51 52 for (unsigned chunk_size = 1; chunk_size <= msg_len; chunk_size++) { 53 if (!CMAC_Reset(ctx.get())) { 54 fprintf(stderr, "%s/%u: CMAC_Reset failed.\n", name, chunk_size); 55 return 0; 56 } 57 58 size_t done = 0; 59 while (done < msg_len) { 60 size_t todo = std::min(msg_len - done, static_cast<size_t>(chunk_size)); 61 if (!CMAC_Update(ctx.get(), msg + done, todo)) { 62 fprintf(stderr, "%s/%u: CMAC_Update failed.\n", name, chunk_size); 63 return 0; 64 } 65 66 done += todo; 67 } 68 69 size_t out_len; 70 if (!CMAC_Final(ctx.get(), out, &out_len)) { 71 fprintf(stderr, "%s/%u: CMAC_Final failed.\n", name, chunk_size); 72 return 0; 73 } 74 75 if (out_len != sizeof(out)) { 76 fprintf(stderr, "%s/%u: incorrect out_len: %u.\n", name, chunk_size, 77 static_cast<unsigned>(out_len)); 78 return 0; 79 } 80 81 if (CRYPTO_memcmp(out, expected, sizeof(out)) != 0) { 82 fprintf(stderr, "%s/%u: CMAC result differs:\n", name, chunk_size); 83 dump(out, expected, sizeof(out)); 84 return 0; 85 } 86 } 87 88 return 1; 89 } 90 91 static int rfc_4493_test_vectors(void) { 92 static const uint8_t kKey[16] = { 93 0x2b, 0x7e, 0x15, 0x16, 0x28, 0xae, 0xd2, 0xa6, 94 0xab, 0xf7, 0x15, 0x88, 0x09, 0xcf, 0x4f, 0x3c, 95 }; 96 static const uint8_t kOut1[16] = { 97 0xbb, 0x1d, 0x69, 0x29, 0xe9, 0x59, 0x37, 0x28, 98 0x7f, 0xa3, 0x7d, 0x12, 0x9b, 0x75, 0x67, 0x46, 99 }; 100 static const uint8_t kMsg2[] = { 101 0x6b, 0xc1, 0xbe, 0xe2, 0x2e, 0x40, 0x9f, 0x96, 102 0xe9, 0x3d, 0x7e, 0x11, 0x73, 0x93, 0x17, 0x2a, 103 }; 104 static const uint8_t kOut2[16] = { 105 0x07, 0x0a, 0x16, 0xb4, 0x6b, 0x4d, 0x41, 0x44, 106 0xf7, 0x9b, 0xdd, 0x9d, 0xd0, 0x4a, 0x28, 0x7c, 107 }; 108 static const uint8_t kMsg3[] = { 109 0x6b, 0xc1, 0xbe, 0xe2, 0x2e, 0x40, 0x9f, 0x96, 110 0xe9, 0x3d, 0x7e, 0x11, 0x73, 0x93, 0x17, 0x2a, 111 0xae, 0x2d, 0x8a, 0x57, 0x1e, 0x03, 0xac, 0x9c, 112 0x9e, 0xb7, 0x6f, 0xac, 0x45, 0xaf, 0x8e, 0x51, 113 0x30, 0xc8, 0x1c, 0x46, 0xa3, 0x5c, 0xe4, 0x11, 114 }; 115 static const uint8_t kOut3[16] = { 116 0xdf, 0xa6, 0x67, 0x47, 0xde, 0x9a, 0xe6, 0x30, 117 0x30, 0xca, 0x32, 0x61, 0x14, 0x97, 0xc8, 0x27, 118 }; 119 static const uint8_t kMsg4[] = { 120 0x6b, 0xc1, 0xbe, 0xe2, 0x2e, 0x40, 0x9f, 0x96, 121 0xe9, 0x3d, 0x7e, 0x11, 0x73, 0x93, 0x17, 0x2a, 122 0xae, 0x2d, 0x8a, 0x57, 0x1e, 0x03, 0xac, 0x9c, 123 0x9e, 0xb7, 0x6f, 0xac, 0x45, 0xaf, 0x8e, 0x51, 124 0x30, 0xc8, 0x1c, 0x46, 0xa3, 0x5c, 0xe4, 0x11, 125 0xe5, 0xfb, 0xc1, 0x19, 0x1a, 0x0a, 0x52, 0xef, 126 0xf6, 0x9f, 0x24, 0x45, 0xdf, 0x4f, 0x9b, 0x17, 127 0xad, 0x2b, 0x41, 0x7b, 0xe6, 0x6c, 0x37, 0x10, 128 }; 129 static const uint8_t kOut4[16] = { 130 0x51, 0xf0, 0xbe, 0xbf, 0x7e, 0x3b, 0x9d, 0x92, 131 0xfc, 0x49, 0x74, 0x17, 0x79, 0x36, 0x3c, 0xfe, 132 }; 133 134 if (!test("RFC 4493 #1", kKey, sizeof(kKey), NULL, 0, kOut1) || 135 !test("RFC 4493 #2", kKey, sizeof(kKey), kMsg2, sizeof(kMsg2), kOut2) || 136 !test("RFC 4493 #3", kKey, sizeof(kKey), kMsg3, sizeof(kMsg3), kOut3) || 137 !test("RFC 4493 #4", kKey, sizeof(kKey), kMsg4, sizeof(kMsg4), kOut4)) { 138 return 0; 139 } 140 141 return 1; 142 } 143 144 int main(int argc, char **argv) { 145 if (!rfc_4493_test_vectors()) { 146 return 1; 147 } 148 149 printf("PASS\n"); 150 return 0; 151 } 152
