1 /* Copyright (c) 2015, Google Inc.
2 *
3 * Permission to use, copy, modify, and/or distribute this software for any
4 * purpose with or without fee is hereby granted, provided that the above
5 * copyright notice and this permission notice appear in all copies.
6 *
7 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
8 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
9 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
10 * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
11 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
12 * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
13 * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
14
15 #include <stdio.h>
16
17 #include <algorithm>
18
19 #include <openssl/cmac.h>
20
21 #include "../test/scoped_types.h"
22
23
dump(const uint8_t * got,const uint8_t * expected,size_t len)24 static void dump(const uint8_t *got, const uint8_t *expected, size_t len) {
25 ScopedBIO bio(BIO_new_fp(stderr, 0 /* don't close */));
26
27 BIO_puts(bio.get(), "\nGot:\n");
28 BIO_hexdump(bio.get(), got, len, 2 /* indent */);
29 BIO_puts(bio.get(), "Expected:\n");
30 BIO_hexdump(bio.get(), expected, len, 2 /* indent */);
31 BIO_flush(bio.get());
32 }
33
test(const char * name,const uint8_t * key,size_t key_len,const uint8_t * msg,size_t msg_len,const uint8_t * expected)34 static int test(const char *name, const uint8_t *key, size_t key_len,
35 const uint8_t *msg, size_t msg_len, const uint8_t *expected) {
36 uint8_t out[16];
37
38 if (!AES_CMAC(out, key, key_len, msg, msg_len)) {
39 fprintf(stderr, "%s: AES_CMAC failed\n", name);
40 return 0;
41 }
42
43 if (CRYPTO_memcmp(out, expected, sizeof(out)) != 0) {
44 fprintf(stderr, "%s: CMAC result differs:\n", name);
45 dump(out, expected, sizeof(out));
46 return 0;
47 }
48
49 ScopedCMAC_CTX ctx(CMAC_CTX_new());
50 if (!CMAC_Init(ctx.get(), key, key_len, EVP_aes_128_cbc(), NULL)) {
51 fprintf(stderr, "%s: CMAC_Init failed.\n", name);
52 return 0;
53 }
54
55 for (unsigned chunk_size = 1; chunk_size <= msg_len; chunk_size++) {
56 if (!CMAC_Reset(ctx.get())) {
57 fprintf(stderr, "%s/%u: CMAC_Reset failed.\n", name, chunk_size);
58 return 0;
59 }
60
61 size_t done = 0;
62 while (done < msg_len) {
63 size_t todo = std::min(msg_len - done, static_cast<size_t>(chunk_size));
64 if (!CMAC_Update(ctx.get(), msg + done, todo)) {
65 fprintf(stderr, "%s/%u: CMAC_Update failed.\n", name, chunk_size);
66 return 0;
67 }
68
69 done += todo;
70 }
71
72 size_t out_len;
73 if (!CMAC_Final(ctx.get(), out, &out_len)) {
74 fprintf(stderr, "%s/%u: CMAC_Final failed.\n", name, chunk_size);
75 return 0;
76 }
77
78 if (out_len != sizeof(out)) {
79 fprintf(stderr, "%s/%u: incorrect out_len: %u.\n", name, chunk_size,
80 static_cast<unsigned>(out_len));
81 return 0;
82 }
83
84 if (CRYPTO_memcmp(out, expected, sizeof(out)) != 0) {
85 fprintf(stderr, "%s/%u: CMAC result differs:\n", name, chunk_size);
86 dump(out, expected, sizeof(out));
87 return 0;
88 }
89 }
90
91 return 1;
92 }
93
rfc_4493_test_vectors(void)94 static int rfc_4493_test_vectors(void) {
95 static const uint8_t kKey[16] = {
96 0x2b, 0x7e, 0x15, 0x16, 0x28, 0xae, 0xd2, 0xa6,
97 0xab, 0xf7, 0x15, 0x88, 0x09, 0xcf, 0x4f, 0x3c,
98 };
99 static const uint8_t kOut1[16] = {
100 0xbb, 0x1d, 0x69, 0x29, 0xe9, 0x59, 0x37, 0x28,
101 0x7f, 0xa3, 0x7d, 0x12, 0x9b, 0x75, 0x67, 0x46,
102 };
103 static const uint8_t kMsg2[] = {
104 0x6b, 0xc1, 0xbe, 0xe2, 0x2e, 0x40, 0x9f, 0x96,
105 0xe9, 0x3d, 0x7e, 0x11, 0x73, 0x93, 0x17, 0x2a,
106 };
107 static const uint8_t kOut2[16] = {
108 0x07, 0x0a, 0x16, 0xb4, 0x6b, 0x4d, 0x41, 0x44,
109 0xf7, 0x9b, 0xdd, 0x9d, 0xd0, 0x4a, 0x28, 0x7c,
110 };
111 static const uint8_t kMsg3[] = {
112 0x6b, 0xc1, 0xbe, 0xe2, 0x2e, 0x40, 0x9f, 0x96,
113 0xe9, 0x3d, 0x7e, 0x11, 0x73, 0x93, 0x17, 0x2a,
114 0xae, 0x2d, 0x8a, 0x57, 0x1e, 0x03, 0xac, 0x9c,
115 0x9e, 0xb7, 0x6f, 0xac, 0x45, 0xaf, 0x8e, 0x51,
116 0x30, 0xc8, 0x1c, 0x46, 0xa3, 0x5c, 0xe4, 0x11,
117 };
118 static const uint8_t kOut3[16] = {
119 0xdf, 0xa6, 0x67, 0x47, 0xde, 0x9a, 0xe6, 0x30,
120 0x30, 0xca, 0x32, 0x61, 0x14, 0x97, 0xc8, 0x27,
121 };
122 static const uint8_t kMsg4[] = {
123 0x6b, 0xc1, 0xbe, 0xe2, 0x2e, 0x40, 0x9f, 0x96,
124 0xe9, 0x3d, 0x7e, 0x11, 0x73, 0x93, 0x17, 0x2a,
125 0xae, 0x2d, 0x8a, 0x57, 0x1e, 0x03, 0xac, 0x9c,
126 0x9e, 0xb7, 0x6f, 0xac, 0x45, 0xaf, 0x8e, 0x51,
127 0x30, 0xc8, 0x1c, 0x46, 0xa3, 0x5c, 0xe4, 0x11,
128 0xe5, 0xfb, 0xc1, 0x19, 0x1a, 0x0a, 0x52, 0xef,
129 0xf6, 0x9f, 0x24, 0x45, 0xdf, 0x4f, 0x9b, 0x17,
130 0xad, 0x2b, 0x41, 0x7b, 0xe6, 0x6c, 0x37, 0x10,
131 };
132 static const uint8_t kOut4[16] = {
133 0x51, 0xf0, 0xbe, 0xbf, 0x7e, 0x3b, 0x9d, 0x92,
134 0xfc, 0x49, 0x74, 0x17, 0x79, 0x36, 0x3c, 0xfe,
135 };
136
137 if (!test("RFC 4493 #1", kKey, sizeof(kKey), NULL, 0, kOut1) ||
138 !test("RFC 4493 #2", kKey, sizeof(kKey), kMsg2, sizeof(kMsg2), kOut2) ||
139 !test("RFC 4493 #3", kKey, sizeof(kKey), kMsg3, sizeof(kMsg3), kOut3) ||
140 !test("RFC 4493 #4", kKey, sizeof(kKey), kMsg4, sizeof(kMsg4), kOut4)) {
141 return 0;
142 }
143
144 return 1;
145 }
146
main(int argc,char ** argv)147 int main(int argc, char **argv) {
148 if (!rfc_4493_test_vectors()) {
149 return 1;
150 }
151
152 printf("PASS\n");
153 return 0;
154 }
155