blob: 840583c5ca7757c7a60b572dc7f9ba95fc473d19 [file] [log] [blame]
Manuel Pégourié-Gonnarda6916fa2014-05-02 15:17:29 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/ccm.h"
Manuel Pégourié-Gonnarda6916fa2014-05-02 15:17:29 +02003/* END_HEADER */
4
5/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006 * depends_on:MBEDTLS_CCM_C
Manuel Pégourié-Gonnarda6916fa2014-05-02 15:17:29 +02007 * END_DEPENDENCIES
8 */
9
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020010/* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST:MBEDTLS_AES_C */
Azim Khanf1aaec92017-05-30 14:23:15 +010011void mbedtls_ccm_self_test( )
Manuel Pégourié-Gonnarda6916fa2014-05-02 15:17:29 +020012{
Andres AG93012e82016-09-09 09:10:28 +010013 TEST_ASSERT( mbedtls_ccm_self_test( 1 ) == 0 );
Manuel Pégourié-Gonnarda6916fa2014-05-02 15:17:29 +020014}
15/* END_CASE */
Manuel Pégourié-Gonnard9fe0d132014-05-06 12:12:45 +020016
17/* BEGIN_CASE */
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +020018void mbedtls_ccm_setkey( int cipher_id, int key_size, int result )
Manuel Pégourié-Gonnard9fe0d132014-05-06 12:12:45 +020019{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020020 mbedtls_ccm_context ctx;
Manuel Pégourié-Gonnard9fe0d132014-05-06 12:12:45 +020021 unsigned char key[32];
22 int ret;
23
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +020024 mbedtls_ccm_init( &ctx );
25
Manuel Pégourié-Gonnard9fe0d132014-05-06 12:12:45 +020026 memset( key, 0x2A, sizeof( key ) );
27 TEST_ASSERT( (unsigned) key_size <= 8 * sizeof( key ) );
28
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +020029 ret = mbedtls_ccm_setkey( &ctx, cipher_id, key, key_size );
Manuel Pégourié-Gonnard9fe0d132014-05-06 12:12:45 +020030 TEST_ASSERT( ret == result );
31
Paul Bakkerbd51b262014-07-10 15:26:12 +020032exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020033 mbedtls_ccm_free( &ctx );
Manuel Pégourié-Gonnard9fe0d132014-05-06 12:12:45 +020034}
35/* END_CASE */
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +020036
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020037/* BEGIN_CASE depends_on:MBEDTLS_AES_C */
Manuel Pégourié-Gonnard87df5ba2014-05-06 18:07:24 +020038void ccm_lengths( int msg_len, int iv_len, int add_len, int tag_len, int res )
39{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020040 mbedtls_ccm_context ctx;
Manuel Pégourié-Gonnard87df5ba2014-05-06 18:07:24 +020041 unsigned char key[16];
42 unsigned char msg[10];
43 unsigned char iv[14];
Dave Rodgman2e680342020-10-15 14:00:40 +010044 unsigned char *add = NULL;
Manuel Pégourié-Gonnard87df5ba2014-05-06 18:07:24 +020045 unsigned char out[10];
46 unsigned char tag[18];
47 int decrypt_ret;
48
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +020049 mbedtls_ccm_init( &ctx );
50
Dave Rodgman2e680342020-10-15 14:00:40 +010051 ASSERT_ALLOC_WEAK( add, add_len );
Manuel Pégourié-Gonnard87df5ba2014-05-06 18:07:24 +020052 memset( key, 0, sizeof( key ) );
53 memset( msg, 0, sizeof( msg ) );
54 memset( iv, 0, sizeof( iv ) );
Manuel Pégourié-Gonnard87df5ba2014-05-06 18:07:24 +020055 memset( out, 0, sizeof( out ) );
56 memset( tag, 0, sizeof( tag ) );
57
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +020058 TEST_ASSERT( mbedtls_ccm_setkey( &ctx, MBEDTLS_CIPHER_ID_AES,
Manuel Pégourié-Gonnard87df5ba2014-05-06 18:07:24 +020059 key, 8 * sizeof( key ) ) == 0 );
60
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020061 TEST_ASSERT( mbedtls_ccm_encrypt_and_tag( &ctx, msg_len, iv, iv_len, add, add_len,
Manuel Pégourié-Gonnard87df5ba2014-05-06 18:07:24 +020062 msg, out, tag, tag_len ) == res );
63
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020064 decrypt_ret = mbedtls_ccm_auth_decrypt( &ctx, msg_len, iv, iv_len, add, add_len,
Manuel Pégourié-Gonnard87df5ba2014-05-06 18:07:24 +020065 msg, out, tag, tag_len );
66
67 if( res == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020068 TEST_ASSERT( decrypt_ret == MBEDTLS_ERR_CCM_AUTH_FAILED );
Manuel Pégourié-Gonnard87df5ba2014-05-06 18:07:24 +020069 else
70 TEST_ASSERT( decrypt_ret == res );
71
Paul Bakkerbd51b262014-07-10 15:26:12 +020072exit:
Dave Rodgman2e680342020-10-15 14:00:40 +010073 mbedtls_free( add );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020074 mbedtls_ccm_free( &ctx );
Manuel Pégourié-Gonnard87df5ba2014-05-06 18:07:24 +020075}
76/* END_CASE */
77
Janos Follath95ab93d2018-05-14 14:32:41 +010078/* BEGIN_CASE depends_on:MBEDTLS_AES_C */
79void ccm_star_lengths( int msg_len, int iv_len, int add_len, int tag_len,
80 int res )
81{
82 mbedtls_ccm_context ctx;
83 unsigned char key[16];
84 unsigned char msg[10];
85 unsigned char iv[14];
86 unsigned char add[10];
87 unsigned char out[10];
88 unsigned char tag[18];
89 int decrypt_ret;
90
91 mbedtls_ccm_init( &ctx );
92
93 memset( key, 0, sizeof( key ) );
94 memset( msg, 0, sizeof( msg ) );
95 memset( iv, 0, sizeof( iv ) );
96 memset( add, 0, sizeof( add ) );
97 memset( out, 0, sizeof( out ) );
98 memset( tag, 0, sizeof( tag ) );
99
100 TEST_ASSERT( mbedtls_ccm_setkey( &ctx, MBEDTLS_CIPHER_ID_AES,
101 key, 8 * sizeof( key ) ) == 0 );
102
103 TEST_ASSERT( mbedtls_ccm_star_encrypt_and_tag( &ctx, msg_len, iv, iv_len,
104 add, add_len, msg, out, tag, tag_len ) == res );
105
106 decrypt_ret = mbedtls_ccm_star_auth_decrypt( &ctx, msg_len, iv, iv_len, add,
107 add_len, msg, out, tag, tag_len );
108
109 if( res == 0 && tag_len != 0 )
110 TEST_ASSERT( decrypt_ret == MBEDTLS_ERR_CCM_AUTH_FAILED );
111 else
112 TEST_ASSERT( decrypt_ret == res );
113
114exit:
115 mbedtls_ccm_free( &ctx );
116}
117/* END_CASE */
118
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +0200119/* BEGIN_CASE */
Azim Khan5fcca462018-06-29 11:05:32 +0100120void mbedtls_ccm_encrypt_and_tag( int cipher_id, data_t * key,
121 data_t * msg, data_t * iv,
122 data_t * add, data_t * result )
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +0200123{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200124 mbedtls_ccm_context ctx;
Azim Khanf1aaec92017-05-30 14:23:15 +0100125 size_t tag_len;
Azim Khand30ca132017-06-09 04:32:58 +0100126 uint8_t * msg_n_tag = (uint8_t *)malloc( result->len + 2 );
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +0200127
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +0200128 mbedtls_ccm_init( &ctx );
129
Azim Khand30ca132017-06-09 04:32:58 +0100130 memset( msg_n_tag, 0, result->len + 2 );
131 memcpy( msg_n_tag, msg->x, msg->len );
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +0200132
Azim Khand30ca132017-06-09 04:32:58 +0100133 tag_len = result->len - msg->len;
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +0200134
Azim Khand30ca132017-06-09 04:32:58 +0100135 TEST_ASSERT( mbedtls_ccm_setkey( &ctx, cipher_id, key->x, key->len * 8 ) == 0 );
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +0200136
Manuel Pégourié-Gonnard0f6b66d2014-05-07 14:43:46 +0200137 /* Test with input == output */
Azim Khand30ca132017-06-09 04:32:58 +0100138 TEST_ASSERT( mbedtls_ccm_encrypt_and_tag( &ctx, msg->len, iv->x, iv->len, add->x, add->len,
139 msg_n_tag, msg_n_tag, msg_n_tag + msg->len, tag_len ) == 0 );
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +0200140
Azim Khand30ca132017-06-09 04:32:58 +0100141 TEST_ASSERT( memcmp( msg_n_tag, result->x, result->len ) == 0 );
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +0200142
143 /* Check we didn't write past the end */
Azim Khand30ca132017-06-09 04:32:58 +0100144 TEST_ASSERT( msg_n_tag[result->len] == 0 && msg_n_tag[result->len + 1] == 0 );
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +0200145
Paul Bakkerbd51b262014-07-10 15:26:12 +0200146exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200147 mbedtls_ccm_free( &ctx );
Azim Khan46c9b1f2017-05-31 20:46:35 +0100148 free( msg_n_tag );
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +0200149}
150/* END_CASE */
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200151
152/* BEGIN_CASE */
Azim Khan5fcca462018-06-29 11:05:32 +0100153void mbedtls_ccm_auth_decrypt( int cipher_id, data_t * key,
154 data_t * msg, data_t * iv,
155 data_t * add, int tag_len, int result,
Ronald Cronac6ae352020-06-26 14:33:03 +0200156 data_t * expected_msg )
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200157{
Manuel Pégourié-Gonnard0f6b66d2014-05-07 14:43:46 +0200158 unsigned char tag[16];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200159 mbedtls_ccm_context ctx;
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200160
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +0200161 mbedtls_ccm_init( &ctx );
162
Manuel Pégourié-Gonnard0f6b66d2014-05-07 14:43:46 +0200163 memset( tag, 0x00, sizeof( tag ) );
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200164
Azim Khand30ca132017-06-09 04:32:58 +0100165 msg->len -= tag_len;
166 memcpy( tag, msg->x + msg->len, tag_len );
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200167
Azim Khand30ca132017-06-09 04:32:58 +0100168 TEST_ASSERT( mbedtls_ccm_setkey( &ctx, cipher_id, key->x, key->len * 8 ) == 0 );
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200169
Manuel Pégourié-Gonnard0f6b66d2014-05-07 14:43:46 +0200170 /* Test with input == output */
Azim Khand30ca132017-06-09 04:32:58 +0100171 TEST_ASSERT( mbedtls_ccm_auth_decrypt( &ctx, msg->len, iv->x, iv->len, add->x, add->len,
Mohammad Azim Khancfd83422018-06-26 18:15:18 +0100172 msg->x, msg->x, msg->x + msg->len, tag_len ) == result );
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200173
Mohammad Azim Khancfd83422018-06-26 18:15:18 +0100174 if( result == 0 )
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200175 {
Ronald Cronac6ae352020-06-26 14:33:03 +0200176 TEST_ASSERT( memcmp( msg->x, expected_msg->x, expected_msg->len ) == 0 );
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200177 }
178 else
179 {
180 size_t i;
181
Azim Khand30ca132017-06-09 04:32:58 +0100182 for( i = 0; i < msg->len; i++ )
183 TEST_ASSERT( msg->x[i] == 0 );
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200184 }
185
Manuel Pégourié-Gonnard0f6b66d2014-05-07 14:43:46 +0200186 /* Check we didn't write past the end (where the original tag is) */
Azim Khand30ca132017-06-09 04:32:58 +0100187 TEST_ASSERT( memcmp( msg->x + msg->len, tag, tag_len ) == 0 );
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200188
Paul Bakkerbd51b262014-07-10 15:26:12 +0200189exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200190 mbedtls_ccm_free( &ctx );
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200191}
192/* END_CASE */
Darryl Green0daf4ca2018-05-29 14:12:26 +0100193
194/* BEGIN_CASE */
195void mbedtls_ccm_star_encrypt_and_tag( int cipher_id,
Ronald Cron9ed40732020-06-25 09:03:34 +0200196 data_t *key, data_t *msg,
197 data_t *source_address, data_t *frame_counter,
198 int sec_level, data_t *add,
199 data_t *expected_result, int output_ret )
Darryl Green0daf4ca2018-05-29 14:12:26 +0100200{
Darryl Green0daf4ca2018-05-29 14:12:26 +0100201 unsigned char iv[13];
Darryl Green0daf4ca2018-05-29 14:12:26 +0100202 unsigned char result[50];
Darryl Green0daf4ca2018-05-29 14:12:26 +0100203 mbedtls_ccm_context ctx;
Gilles Peskineb168c0d2021-02-09 12:00:13 +0100204 size_t iv_len, tag_len;
Darryl Green0daf4ca2018-05-29 14:12:26 +0100205 int ret;
206
207 mbedtls_ccm_init( &ctx );
208
Darryl Green0daf4ca2018-05-29 14:12:26 +0100209 memset( result, 0x00, sizeof( result ) );
Darryl Green0daf4ca2018-05-29 14:12:26 +0100210
211 if( sec_level % 4 == 0)
212 tag_len = 0;
213 else
214 tag_len = 1 << ( sec_level % 4 + 1);
215
Gilles Peskineb168c0d2021-02-09 12:00:13 +0100216 TEST_ASSERT( source_address->len == 8 );
217 TEST_ASSERT( frame_counter->len == 4 );
218 memcpy( iv, source_address->x, source_address->len );
219 memcpy( iv + source_address->len, frame_counter->x, frame_counter->len );
Ronald Cron9ed40732020-06-25 09:03:34 +0200220 iv[source_address->len + frame_counter->len] = sec_level;
Darryl Green0daf4ca2018-05-29 14:12:26 +0100221 iv_len = sizeof( iv );
222
Ronald Cron9ed40732020-06-25 09:03:34 +0200223 TEST_ASSERT( mbedtls_ccm_setkey( &ctx, cipher_id,
224 key->x, key->len * 8 ) == 0 );
Darryl Green0daf4ca2018-05-29 14:12:26 +0100225
Ronald Cron9ed40732020-06-25 09:03:34 +0200226 ret = mbedtls_ccm_star_encrypt_and_tag( &ctx, msg->len, iv, iv_len,
227 add->x, add->len, msg->x,
228 result, result + msg->len, tag_len );
Darryl Green0daf4ca2018-05-29 14:12:26 +0100229
230 TEST_ASSERT( ret == output_ret );
231
Ronald Cron9ed40732020-06-25 09:03:34 +0200232 TEST_ASSERT( memcmp( result,
233 expected_result->x, expected_result->len ) == 0 );
Darryl Green0daf4ca2018-05-29 14:12:26 +0100234
235 /* Check we didn't write past the end */
Ronald Cron9ed40732020-06-25 09:03:34 +0200236 TEST_ASSERT( result[expected_result->len] == 0 &&
237 result[expected_result->len + 1] == 0 );
Darryl Green0daf4ca2018-05-29 14:12:26 +0100238
239exit:
240 mbedtls_ccm_free( &ctx );
241}
242/* END_CASE */
243
244/* BEGIN_CASE */
245void mbedtls_ccm_star_auth_decrypt( int cipher_id,
Ronald Cron9ed40732020-06-25 09:03:34 +0200246 data_t *key, data_t *msg,
247 data_t *source_address, data_t *frame_counter,
248 int sec_level, data_t *add,
249 data_t *expected_result, int output_ret )
Darryl Green0daf4ca2018-05-29 14:12:26 +0100250{
Darryl Green0daf4ca2018-05-29 14:12:26 +0100251 unsigned char iv[13];
Darryl Green0daf4ca2018-05-29 14:12:26 +0100252 unsigned char result[50];
Darryl Green0daf4ca2018-05-29 14:12:26 +0100253 mbedtls_ccm_context ctx;
Gilles Peskineb168c0d2021-02-09 12:00:13 +0100254 size_t iv_len, tag_len;
Darryl Green0daf4ca2018-05-29 14:12:26 +0100255 int ret;
256
257 mbedtls_ccm_init( &ctx );
258
Darryl Green0daf4ca2018-05-29 14:12:26 +0100259 memset( iv, 0x00, sizeof( iv ) );
Ronald Cronc7ba5602020-06-25 14:47:40 +0200260 memset( result, '+', sizeof( result ) );
Darryl Green0daf4ca2018-05-29 14:12:26 +0100261
262 if( sec_level % 4 == 0)
263 tag_len = 0;
264 else
265 tag_len = 1 << ( sec_level % 4 + 1);
266
Gilles Peskineb168c0d2021-02-09 12:00:13 +0100267 TEST_ASSERT( source_address->len == 8 );
268 TEST_ASSERT( frame_counter->len == 4 );
269 memcpy( iv, source_address->x, source_address->len );
270 memcpy( iv + source_address->len, frame_counter->x, frame_counter->len );
Ronald Cron9ed40732020-06-25 09:03:34 +0200271 iv[source_address->len + frame_counter->len] = sec_level;
Darryl Green0daf4ca2018-05-29 14:12:26 +0100272 iv_len = sizeof( iv );
273
Ronald Cron9ed40732020-06-25 09:03:34 +0200274 TEST_ASSERT( mbedtls_ccm_setkey( &ctx, cipher_id, key->x, key->len * 8 ) == 0 );
Darryl Green0daf4ca2018-05-29 14:12:26 +0100275
Ronald Cron9ed40732020-06-25 09:03:34 +0200276 ret = mbedtls_ccm_star_auth_decrypt( &ctx, msg->len - tag_len, iv, iv_len,
277 add->x, add->len, msg->x, result,
278 msg->x + msg->len - tag_len, tag_len );
Darryl Green0daf4ca2018-05-29 14:12:26 +0100279
280 TEST_ASSERT( ret == output_ret );
281
Ronald Cron9ed40732020-06-25 09:03:34 +0200282 TEST_ASSERT( memcmp( result, expected_result->x,
283 expected_result->len ) == 0 );
Darryl Green0daf4ca2018-05-29 14:12:26 +0100284
285 /* Check we didn't write past the end (where the original tag is) */
Ronald Cron9ed40732020-06-25 09:03:34 +0200286 TEST_ASSERT( ( msg->len + 2 ) <= sizeof( result ) );
287 TEST_EQUAL( result[msg->len], '+' );
288 TEST_EQUAL( result[msg->len + 1], '+' );
Darryl Green0daf4ca2018-05-29 14:12:26 +0100289
290exit:
291 mbedtls_ccm_free( &ctx );
292}
293/* END_CASE */