Home | History | Annotate | Line # | Download | only in test 
      1 /*
      2  * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved.
      3  *
      4  * Licensed under the Apache License 2.0 (the "License").  You may not use
      5  * this file except in compliance with the License.  You can obtain a copy
      6  * in the file LICENSE in the source distribution or at
      7  * https://www.openssl.org/source/license.html
      8  */
      9 
     10 #include <openssl/evp.h>
     11 #include "testutil.h"
     12 
     13 static const unsigned char gcm_key[] = {
     14     0xee, 0xbc, 0x1f, 0x57, 0x48, 0x7f, 0x51, 0x92, 0x1c, 0x04, 0x65, 0x66,
     15     0x5f, 0x8a, 0xe6, 0xd1, 0x65, 0x8b, 0xb2, 0x6d, 0xe6, 0xf8, 0xa0, 0x69,
     16     0xa3, 0x52, 0x02, 0x93, 0xa5, 0x72, 0x07, 0x8f
     17 };
     18 static const unsigned char gcm_iv[] = {
     19     0x99, 0xaa, 0x3e, 0x68, 0xed, 0x81, 0x73, 0xa0, 0xee, 0xd0, 0x66, 0x84
     20 };
     21 static const unsigned char gcm_pt[] = {
     22     0xf5, 0x6e, 0x87, 0x05, 0x5b, 0xc3, 0x2d, 0x0e, 0xeb, 0x31, 0xb2, 0xea,
     23     0xcc, 0x2b, 0xf2, 0xa5
     24 };
     25 static const unsigned char gcm_aad[] = {
     26     0x4d, 0x23, 0xc3, 0xce, 0xc3, 0x34, 0xb4, 0x9b, 0xdb, 0x37, 0x0c, 0x43,
     27     0x7f, 0xec, 0x78, 0xde
     28 };
     29 static const unsigned char gcm_ct[] = {
     30     0xf7, 0x26, 0x44, 0x13, 0xa8, 0x4c, 0x0e, 0x7c, 0xd5, 0x36, 0x86, 0x7e,
     31     0xb9, 0xf2, 0x17, 0x36
     32 };
     33 static const unsigned char gcm_tag[] = {
     34     0x67, 0xba, 0x05, 0x10, 0x26, 0x2a, 0xe4, 0x87, 0xd7, 0x37, 0xee, 0x62,
     35     0x98, 0xf7, 0x7e, 0x0c
     36 };
     37 
     38 static int do_encrypt(unsigned char *iv_gen, unsigned char *ct, int *ct_len,
     39                       unsigned char *tag, int *tag_len)
     40 {
     41     int ret = 0;
     42     EVP_CIPHER_CTX *ctx = NULL;
     43     int outlen;
     44     unsigned char outbuf[64];
     45 
     46     *tag_len = 16;
     47     ret = TEST_ptr(ctx = EVP_CIPHER_CTX_new())
     48           && TEST_true(EVP_EncryptInit_ex(ctx, EVP_aes_256_gcm(), NULL, NULL,
     49                                           NULL) > 0)
     50           && TEST_true(EVP_EncryptInit_ex(ctx, NULL, NULL, gcm_key,
     51                                           iv_gen != NULL ? NULL : gcm_iv) > 0)
     52           && TEST_true(EVP_EncryptUpdate(ctx, NULL, &outlen, gcm_aad,
     53                                          sizeof(gcm_aad)) > 0)
     54           && TEST_true(EVP_EncryptUpdate(ctx, ct, ct_len, gcm_pt,
     55                                          sizeof(gcm_pt)) > 0)
     56           && TEST_true(EVP_EncryptFinal_ex(ctx, outbuf, &outlen) > 0)
     57           && TEST_int_eq(EVP_CIPHER_CTX_get_tag_length(ctx), 16)
     58           && TEST_true(EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_GET_TAG, 16,
     59                                            tag) > 0)
     60           && TEST_true(iv_gen == NULL
     61                   || EVP_CIPHER_CTX_get_original_iv(ctx, iv_gen, 12));
     62     EVP_CIPHER_CTX_free(ctx);
     63     return ret;
     64 }
     65 
     66 static int do_decrypt(const unsigned char *iv, const unsigned char *ct,
     67                       int ct_len, const unsigned char *tag, int tag_len)
     68 {
     69     int ret = 0;
     70     EVP_CIPHER_CTX *ctx = NULL;
     71     int outlen, ptlen;
     72     unsigned char pt[32];
     73     unsigned char outbuf[32];
     74 
     75     ret = TEST_ptr(ctx = EVP_CIPHER_CTX_new())
     76               && TEST_true(EVP_DecryptInit_ex(ctx, EVP_aes_256_gcm(), NULL,
     77                                               NULL, NULL) > 0)
     78               && TEST_true(EVP_DecryptInit_ex(ctx, NULL, NULL, gcm_key, iv) > 0)
     79               && TEST_int_eq(EVP_CIPHER_CTX_get_tag_length(ctx), 16)
     80               && TEST_true(EVP_DecryptUpdate(ctx, NULL, &outlen, gcm_aad,
     81                                              sizeof(gcm_aad)) > 0)
     82               && TEST_true(EVP_DecryptUpdate(ctx, pt, &ptlen, ct,
     83                                              ct_len) > 0)
     84               && TEST_true(EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_SET_TAG,
     85                                                tag_len, (void *)tag) > 0)
     86               && TEST_true(EVP_DecryptFinal_ex(ctx, outbuf, &outlen) > 0)
     87               && TEST_mem_eq(gcm_pt, sizeof(gcm_pt), pt, ptlen);
     88 
     89     EVP_CIPHER_CTX_free(ctx);
     90     return ret;
     91 }
     92 
     93 static int kat_test(void)
     94 {
     95     unsigned char tag[32];
     96     unsigned char ct[32];
     97     int ctlen = 0, taglen = 0;
     98 
     99     return do_encrypt(NULL, ct, &ctlen, tag, &taglen)
    100            && TEST_mem_eq(gcm_ct, sizeof(gcm_ct), ct, ctlen)
    101            && TEST_mem_eq(gcm_tag, sizeof(gcm_tag), tag, taglen)
    102            && do_decrypt(gcm_iv, ct, ctlen, tag, taglen);
    103 }
    104 
    105 static int badkeylen_test(void)
    106 {
    107     int ret;
    108     EVP_CIPHER_CTX *ctx = NULL;
    109     const EVP_CIPHER *cipher;
    110 
    111     ret = TEST_ptr(cipher = EVP_aes_192_gcm())
    112           && TEST_ptr(ctx = EVP_CIPHER_CTX_new())
    113           && TEST_true(EVP_EncryptInit_ex(ctx, cipher, NULL, NULL, NULL))
    114           && TEST_int_le(EVP_CIPHER_CTX_set_key_length(ctx, 2), 0);
    115     EVP_CIPHER_CTX_free(ctx);
    116     return ret;
    117 }
    118 
    119 static int ivgen_test(void)
    120 {
    121     unsigned char iv_gen[16];
    122     unsigned char tag[32];
    123     unsigned char ct[32];
    124     int ctlen = 0, taglen = 0;
    125 
    126     return do_encrypt(iv_gen, ct, &ctlen, tag, &taglen)
    127            && do_decrypt(iv_gen, ct, ctlen, tag, taglen);
    128 }
    129 
    130 int setup_tests(void)
    131 {
    132     ADD_TEST(kat_test);
    133     ADD_TEST(badkeylen_test);
    134     ADD_TEST(ivgen_test);
    135     return 1;
    136 }
    137