Robert Sloan | 8ff0355 | 2017-06-14 12:40:58 -0700 | [diff] [blame^] | 1 | /* Copyright (c) 2017, Google Inc. |
| 2 | * |
| 3 | * Permission to use, copy, modify, and/or distribute this software for any |
| 4 | * purpose with or without fee is hereby granted, provided that the above |
| 5 | * copyright notice and this permission notice appear in all copies. |
| 6 | * |
| 7 | * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES |
| 8 | * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF |
| 9 | * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY |
| 10 | * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES |
| 11 | * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION |
| 12 | * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN |
| 13 | * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */ |
| 14 | |
| 15 | // cavp_ctr_drbg_test processes a NIST CAVP DRBG800-90A test vector request |
| 16 | // file and emits the corresponding response. |
| 17 | |
| 18 | #include <openssl/crypto.h> |
| 19 | |
| 20 | #include <stdlib.h> |
| 21 | |
| 22 | #include "cavp_test_util.h" |
| 23 | #include "../crypto/fipsmodule/rand/internal.h" |
| 24 | #include "../crypto/test/file_test.h" |
| 25 | |
| 26 | |
| 27 | static bool TestCTRDRBG(FileTest *t, void *arg) { |
| 28 | std::string test_type, prediction_resistance, entropy_input_len, nonce_len, |
| 29 | personalization_str_len, additional_input_len, returned_bits_len; |
| 30 | if (!t->GetInstruction(&test_type, "AES-256 no df") || |
| 31 | !t->GetInstruction(&prediction_resistance, "PredictionResistance") || |
| 32 | !t->GetInstruction(&entropy_input_len, "EntropyInputLen") || |
| 33 | !t->GetInstruction(&nonce_len, "NonceLen") || |
| 34 | !t->GetInstruction(&personalization_str_len, |
| 35 | "PersonalizationStringLen") || |
| 36 | !t->GetInstruction(&additional_input_len, "AdditionalInputLen") || |
| 37 | !t->GetInstruction(&returned_bits_len, "ReturnedBitsLen") || |
| 38 | !test_type.empty() || |
| 39 | prediction_resistance != "False" || |
| 40 | strtoul(entropy_input_len.c_str(), nullptr, 0) != |
| 41 | CTR_DRBG_ENTROPY_LEN * 8 || |
| 42 | nonce_len != "0") { |
| 43 | return false; |
| 44 | } |
| 45 | |
| 46 | std::string count; |
| 47 | std::vector<uint8_t> entropy, nonce, personalization_str, ai1, ai2; |
| 48 | if (!t->GetAttribute(&count, "COUNT") || |
| 49 | !t->GetBytes(&entropy, "EntropyInput") || |
| 50 | !t->GetBytes(&nonce, "Nonce") || |
| 51 | !t->GetBytes(&personalization_str, "PersonalizationString") || |
| 52 | !t->GetBytes(&ai1, "AdditionalInput") || |
| 53 | !t->GetBytes(&ai2, "AdditionalInput/2") || |
| 54 | entropy.size() * 8 != strtoul(entropy_input_len.c_str(), nullptr, 0) || |
| 55 | nonce.size() != 0 || |
| 56 | personalization_str.size() * 8 != |
| 57 | strtoul(personalization_str_len.c_str(), nullptr, 0) || |
| 58 | ai1.size() != ai2.size() || |
| 59 | ai1.size() * 8 != strtoul(additional_input_len.c_str(), nullptr, 0)) { |
| 60 | return false; |
| 61 | } |
| 62 | |
| 63 | CTR_DRBG_STATE drbg; |
| 64 | CTR_DRBG_init(&drbg, entropy.data(), |
| 65 | personalization_str.size() > 0 ? personalization_str.data() |
| 66 | : nullptr, |
| 67 | personalization_str.size()); |
| 68 | |
| 69 | uint64_t out_len = strtoul(returned_bits_len.c_str(), nullptr, 0); |
| 70 | if (out_len == 0 || (out_len & 7) != 0) { |
| 71 | return false; |
| 72 | } |
| 73 | out_len /= 8; |
| 74 | |
| 75 | std::vector<uint8_t> out; |
| 76 | out.resize(out_len); |
| 77 | |
| 78 | CTR_DRBG_generate(&drbg, out.data(), out.size(), |
| 79 | ai1.size() > 0 ? ai1.data() : nullptr, ai1.size()); |
| 80 | CTR_DRBG_generate(&drbg, out.data(), out.size(), |
| 81 | ai2.size() > 0 ? ai2.data() : nullptr, ai2.size()); |
| 82 | |
| 83 | printf("%s", t->CurrentTestToString().c_str()); |
| 84 | printf("ReturnedBits = %s\r\n\r\n", |
| 85 | EncodeHex(out.data(), out.size()).c_str()); |
| 86 | |
| 87 | return true; |
| 88 | } |
| 89 | |
| 90 | static int usage(char *arg) { |
| 91 | fprintf(stderr, "usage: %s <test file>\n", arg); |
| 92 | return 1; |
| 93 | } |
| 94 | |
| 95 | int cavp_ctr_drbg_test_main(int argc, char **argv) { |
| 96 | if (argc != 2) { |
| 97 | return usage(argv[0]); |
| 98 | } |
| 99 | |
| 100 | FileTest::Options opts; |
| 101 | opts.path = argv[1]; |
| 102 | opts.callback = TestCTRDRBG; |
| 103 | opts.silent = true; |
| 104 | opts.comment_callback = EchoComment; |
| 105 | return FileTestMain(opts); |
| 106 | } |