You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
314 lines
9.0 KiB
314 lines
9.0 KiB
/* test_cmac_mode.c - TinyCrypt AES-CMAC tests (including SP 800-38B tests) */ |
|
|
|
/* |
|
* Copyright (C) 2017 by Intel Corporation, All Rights Reserved. |
|
* |
|
* Redistribution and use in source and binary forms, with or without |
|
* modification, are permitted provided that the following conditions are met: |
|
* |
|
* - Redistributions of source code must retain the above copyright notice, |
|
* this list of conditions and the following disclaimer. |
|
* |
|
* - Redistributions in binary form must reproduce the above copyright |
|
* notice, this list of conditions and the following disclaimer in the |
|
* documentation and/or other materials provided with the distribution. |
|
* |
|
* - Neither the name of Intel Corporation nor the names of its contributors |
|
* may be used to endorse or promote products derived from this software |
|
* without specific prior written permission. |
|
* |
|
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" |
|
* AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE |
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE |
|
* ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE |
|
* LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR |
|
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF |
|
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS |
|
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN |
|
* CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) |
|
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE |
|
* POSSIBILITY OF SUCH DAMAGE. |
|
*/ |
|
/* |
|
* DESCRIPTION |
|
* This module tests the following AES-CMAC test (including SP 800-38B): |
|
* |
|
* Scenarios tested include: |
|
* - CMAC test #1 (GF(2^128) double)) |
|
* - CMAC test #2 null msg (SP 800-38B test vector #1) |
|
* - CMAC test #3 1 block msg (SP 800-38B test vector #2) |
|
* - CMAC test #4 320 bit msg (SP 800-38B test vector #3) |
|
* - CMAC test #5 512 bit msg (SP 800-38B test vector #4) |
|
*/ |
|
|
|
#include <tinycrypt/cmac_mode.h> |
|
#include <tinycrypt/constants.h> |
|
#include <tinycrypt/aes.h> |
|
#include <test_utils.h> |
|
|
|
#include <stdio.h> |
|
#include <string.h> |
|
|
|
#define BUF_LEN 16 |
|
|
|
static void show(const char *label, const uint8_t *s, size_t slen) |
|
{ |
|
unsigned int i; |
|
|
|
TC_PRINT("%s\t", label); |
|
for (i = 0; i < slen; ++i) { |
|
TC_PRINT("%02x", s[i]); |
|
} |
|
TC_PRINT("\n"); |
|
} |
|
|
|
extern void gf_double(uint8_t *out, uint8_t *in); |
|
|
|
static int verify_gf_2_128_double(uint8_t *K1, uint8_t *K2, |
|
struct tc_cmac_struct s) |
|
{ |
|
int result = TC_PASS; |
|
|
|
TC_PRINT("Performing CMAC test #1 (GF(2^128) double):\n"); |
|
|
|
uint8_t zero[BUF_LEN]; |
|
uint8_t L[BUF_LEN]; |
|
const uint8_t l[BUF_LEN] = { |
|
0x7d, 0xf7, 0x6b, 0x0c, 0x1a, 0xb8, 0x99, 0xb3, |
|
0x3e, 0x42, 0xf0, 0x47, 0xb9, 0x1b, 0x54, 0x6f |
|
}; |
|
const uint8_t k1[BUF_LEN] = { |
|
0xfb, 0xee, 0xd6, 0x18, 0x35, 0x71, 0x33, 0x66, |
|
0x7c, 0x85, 0xe0, 0x8f, 0x72, 0x36, 0xa8, 0xde |
|
}; |
|
const uint8_t k2[BUF_LEN] = { |
|
0xf7, 0xdd, 0xac, 0x30, 0x6a, 0xe2, 0x66, 0xcc, |
|
0xf9, 0x0b, 0xc1, 0x1e, 0xe4, 0x6d, 0x51, 0x3b |
|
}; |
|
|
|
(void) memset(zero, '\0', sizeof(zero)); |
|
tc_aes_encrypt(L, zero, s.sched); |
|
if (memcmp(L, l, BUF_LEN) != 0) { |
|
TC_ERROR("%s: AES encryption failed\n", __func__); |
|
show("expected L =", l, sizeof(l)); |
|
show("computed L =", L, sizeof(L)); |
|
return TC_FAIL; |
|
} |
|
|
|
gf_double(K1, L); |
|
if (memcmp(K1, k1, BUF_LEN) != 0) { |
|
TC_ERROR("%s: gf_2_128_double failed when msb = 0\n", __func__); |
|
show("expected K1 =", k1, sizeof(k1)); |
|
show("computed K1 =", K1, sizeof(k1)); |
|
return TC_FAIL; |
|
} |
|
|
|
gf_double(K2, K1); |
|
if (memcmp(K2, k2, BUF_LEN) != 0) { |
|
TC_ERROR("%s: gf_2_128_double failed when msb = 1\n", __func__); |
|
show("expected K2 =", k2, sizeof(k2)); |
|
show("computed K2 =", K2, sizeof(k2)); |
|
return TC_FAIL; |
|
} |
|
|
|
TC_END_RESULT(result); |
|
return result; |
|
} |
|
|
|
static int verify_cmac_null_msg(TCCmacState_t s) |
|
{ |
|
int result = TC_PASS; |
|
|
|
TC_PRINT("Performing CMAC test #2 (SP 800-38B test vector #1):\n"); |
|
|
|
const uint8_t tag[BUF_LEN] = { |
|
0xbb, 0x1d, 0x69, 0x29, 0xe9, 0x59, 0x37, 0x28, |
|
0x7f, 0xa3, 0x7d, 0x12, 0x9b, 0x75, 0x67, 0x46 |
|
}; |
|
uint8_t Tag[BUF_LEN]; |
|
|
|
(void) tc_cmac_init(s); |
|
(void) tc_cmac_update(s, (const uint8_t *) 0, 0); |
|
(void) tc_cmac_final(Tag, s); |
|
|
|
if (memcmp(Tag, tag, BUF_LEN) != 0) { |
|
TC_ERROR("%s: aes_cmac failed with null msg = 1\n", __func__); |
|
show("expected Tag =", tag, sizeof(tag)); |
|
show("computed Tag =", Tag, sizeof(Tag)); |
|
return TC_FAIL; |
|
} |
|
|
|
TC_END_RESULT(result); |
|
return result; |
|
} |
|
|
|
static int verify_cmac_1_block_msg(TCCmacState_t s) |
|
{ |
|
int result = TC_PASS; |
|
|
|
TC_PRINT("Performing CMAC test #3 (SP 800-38B test vector #2):\n"); |
|
|
|
const uint8_t msg[BUF_LEN] = { |
|
0x6b, 0xc1, 0xbe, 0xe2, 0x2e, 0x40, 0x9f, 0x96, |
|
0xe9, 0x3d, 0x7e, 0x11, 0x73, 0x93, 0x17, 0x2a |
|
}; |
|
const uint8_t tag[BUF_LEN] = { |
|
0x07, 0x0a, 0x16, 0xb4, 0x6b, 0x4d, 0x41, 0x44, |
|
0xf7, 0x9b, 0xdd, 0x9d, 0xd0, 0x4a, 0x28, 0x7c |
|
}; |
|
uint8_t Tag[BUF_LEN]; |
|
|
|
(void) tc_cmac_init(s); |
|
(void) tc_cmac_update(s, msg, sizeof(msg)); |
|
(void) tc_cmac_final(Tag, s); |
|
|
|
if (memcmp(Tag, tag, BUF_LEN) != 0) { |
|
TC_ERROR("%s: aes_cmac failed with 1 block msg\n", __func__); |
|
show("aes_cmac failed with 1 block msg =", msg, sizeof(msg)); |
|
show("expected Tag =", tag, sizeof(tag)); |
|
show("computed Tag =", Tag, sizeof(Tag)); |
|
return TC_FAIL; |
|
} |
|
|
|
TC_END_RESULT(result); |
|
return result; |
|
} |
|
|
|
static int verify_cmac_320_bit_msg(TCCmacState_t s) |
|
{ |
|
int result = TC_PASS; |
|
|
|
TC_PRINT("Performing CMAC test #4 (SP 800-38B test vector #3):\n"); |
|
|
|
const uint8_t msg[40] = { |
|
0x6b, 0xc1, 0xbe, 0xe2, 0x2e, 0x40, 0x9f, 0x96, |
|
0xe9, 0x3d, 0x7e, 0x11, 0x73, 0x93, 0x17, 0x2a, |
|
0xae, 0x2d, 0x8a, 0x57, 0x1e, 0x03, 0xac, 0x9c, |
|
0x9e, 0xb7, 0x6f, 0xac, 0x45, 0xaf, 0x8e, 0x51, |
|
0x30, 0xc8, 0x1c, 0x46, 0xa3, 0x5c, 0xe4, 0x11 |
|
}; |
|
const uint8_t tag[BUF_LEN] = { |
|
0xdf, 0xa6, 0x67, 0x47, 0xde, 0x9a, 0xe6, 0x30, |
|
0x30, 0xca, 0x32, 0x61, 0x14, 0x97, 0xc8, 0x27 |
|
}; |
|
uint8_t Tag[BUF_LEN]; |
|
|
|
(void) tc_cmac_init(s); |
|
(void) tc_cmac_update(s, msg, sizeof(msg)); |
|
(void) tc_cmac_final(Tag, s); |
|
|
|
if (memcmp(Tag, tag, BUF_LEN) != 0) { |
|
TC_ERROR("%s: aes_cmac failed with 320 bit msg\n", __func__); |
|
show("aes_cmac failed with 320 bit msg =", msg, sizeof(msg)); |
|
show("expected Tag =", tag, sizeof(tag)); |
|
show("computed Tag =", Tag, sizeof(Tag)); |
|
return TC_FAIL; |
|
} |
|
|
|
TC_END_RESULT(result); |
|
return result; |
|
} |
|
|
|
static int verify_cmac_512_bit_msg(TCCmacState_t s) |
|
{ |
|
int result = TC_PASS; |
|
|
|
TC_PRINT("Performing CMAC test #5 (SP 800-38B test vector #4)\n"); |
|
|
|
const uint8_t msg[64] = { |
|
0x6b, 0xc1, 0xbe, 0xe2, 0x2e, 0x40, 0x9f, 0x96, |
|
0xe9, 0x3d, 0x7e, 0x11, 0x73, 0x93, 0x17, 0x2a, |
|
0xae, 0x2d, 0x8a, 0x57, 0x1e, 0x03, 0xac, 0x9c, |
|
0x9e, 0xb7, 0x6f, 0xac, 0x45, 0xaf, 0x8e, 0x51, |
|
0x30, 0xc8, 0x1c, 0x46, 0xa3, 0x5c, 0xe4, 0x11, |
|
0xe5, 0xfb, 0xc1, 0x19, 0x1a, 0x0a, 0x52, 0xef, |
|
0xf6, 0x9f, 0x24, 0x45, 0xdf, 0x4f, 0x9b, 0x17, |
|
0xad, 0x2b, 0x41, 0x7b, 0xe6, 0x6c, 0x37, 0x10 |
|
}; |
|
const uint8_t tag[BUF_LEN] = { |
|
0x51, 0xf0, 0xbe, 0xbf, 0x7e, 0x3b, 0x9d, 0x92, |
|
0xfc, 0x49, 0x74, 0x17, 0x79, 0x36, 0x3c, 0xfe |
|
}; |
|
uint8_t Tag[BUF_LEN]; |
|
|
|
(void)tc_cmac_init(s); |
|
(void)tc_cmac_update(s, msg, sizeof(msg)); |
|
(void)tc_cmac_final(Tag, s); |
|
|
|
if (memcmp(Tag, tag, BUF_LEN) != 0) { |
|
TC_ERROR("%s: aes_cmac failed with 512 bit msg\n", __func__); |
|
show("aes_cmac failed with 512 bit msg =", msg, sizeof(msg)); |
|
show("expected Tag =", tag, sizeof(tag)); |
|
show("computed Tag =", Tag, sizeof(Tag)); |
|
return TC_FAIL; |
|
} |
|
|
|
TC_END_RESULT(result); |
|
return result; |
|
} |
|
|
|
/* |
|
* Main task to test CMAC |
|
* effects: returns 1 if all tests pass |
|
* exceptions: returns a negative value if some test fails |
|
*/ |
|
int main(void) |
|
{ |
|
|
|
int result = TC_PASS; |
|
|
|
struct tc_cmac_struct state; |
|
struct tc_aes_key_sched_struct sched; |
|
|
|
const uint8_t key[BUF_LEN] = { |
|
0x2b, 0x7e, 0x15, 0x16, 0x28, 0xae, 0xd2, 0xa6, |
|
0xab, 0xf7, 0x15, 0x88, 0x09, 0xcf, 0x4f, 0x3c |
|
}; |
|
uint8_t K1[BUF_LEN], K2[BUF_LEN]; |
|
|
|
TC_START("Performing CMAC tests:"); |
|
|
|
(void) tc_cmac_setup(&state, key, &sched); |
|
result = verify_gf_2_128_double(K1, K2, state); |
|
if (result == TC_FAIL) { |
|
/* terminate test */ |
|
TC_ERROR("CMAC test #1 (128 double) failed.\n"); |
|
goto exitTest; |
|
} |
|
(void) tc_cmac_setup(&state, key, &sched); |
|
result = verify_cmac_null_msg(&state); |
|
if (result == TC_FAIL) { |
|
/* terminate test */ |
|
TC_ERROR("CMAC test #2 (null msg) failed.\n"); |
|
goto exitTest; |
|
} |
|
(void) tc_cmac_setup(&state, key, &sched); |
|
result = verify_cmac_1_block_msg(&state); |
|
if (result == TC_FAIL) { |
|
/* terminate test */ |
|
TC_ERROR("CMAC test #3 (1 block msg)failed.\n"); |
|
goto exitTest; |
|
} |
|
(void) tc_cmac_setup(&state, key, &sched); |
|
result = verify_cmac_320_bit_msg(&state); |
|
if (result == TC_FAIL) { |
|
/* terminate test */ |
|
TC_ERROR("CMAC test #4 (320 bit msg) failed.\n"); |
|
goto exitTest; |
|
} |
|
(void) tc_cmac_setup(&state, key, &sched); |
|
result = verify_cmac_512_bit_msg(&state); |
|
if (result == TC_FAIL) { |
|
/* terminate test */ |
|
TC_ERROR("CMAC test #5 (512 bit msg)failed.\n"); |
|
goto exitTest; |
|
} |
|
|
|
TC_PRINT("All CMAC tests succeeded!\n"); |
|
|
|
exitTest: |
|
TC_END_RESULT(result); |
|
TC_END_REPORT(result); |
|
|
|
return result; |
|
}
|
|
|