blob: 1073524383182ffc3660fc6ec128311b38ea3f64 [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/cipher.h"
Manuel Pégourié-Gonnardf7ce67f2013-09-03 20:17:35 +02003
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004#if defined(MBEDTLS_GCM_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00005#include "mbedtls/gcm.h"
Manuel Pégourié-Gonnardf7ce67f2013-09-03 20:17:35 +02006#endif
Paul Bakker33b43f12013-08-20 11:48:36 +02007/* END_HEADER */
Paul Bakker8123e9d2011-01-06 15:37:30 +00008
Paul Bakker33b43f12013-08-20 11:48:36 +02009/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020010 * depends_on:MBEDTLS_CIPHER_C
Paul Bakker33b43f12013-08-20 11:48:36 +020011 * END_DEPENDENCIES
12 */
Paul Bakker5690efc2011-05-26 13:16:06 +000013
Paul Bakker33b43f12013-08-20 11:48:36 +020014/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020015void mbedtls_cipher_list( )
Manuel Pégourié-Gonnard66dfc5a2014-03-29 16:10:55 +010016{
17 const int *cipher_type;
18
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020019 for( cipher_type = mbedtls_cipher_list(); *cipher_type != 0; cipher_type++ )
20 TEST_ASSERT( mbedtls_cipher_info_from_type( *cipher_type ) != NULL );
Manuel Pégourié-Gonnard66dfc5a2014-03-29 16:10:55 +010021}
22/* END_CASE */
23
24/* BEGIN_CASE */
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020025void cipher_null_args( )
26{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020027 mbedtls_cipher_context_t ctx;
28 const mbedtls_cipher_info_t *info = mbedtls_cipher_info_from_type( *( mbedtls_cipher_list() ) );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020029 unsigned char buf[1] = { 0 };
30 size_t olen;
31
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020032 mbedtls_cipher_init( &ctx );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020033
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020034 TEST_ASSERT( mbedtls_cipher_get_block_size( NULL ) == 0 );
35 TEST_ASSERT( mbedtls_cipher_get_block_size( &ctx ) == 0 );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020036
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020037 TEST_ASSERT( mbedtls_cipher_get_cipher_mode( NULL ) == MBEDTLS_MODE_NONE );
38 TEST_ASSERT( mbedtls_cipher_get_cipher_mode( &ctx ) == MBEDTLS_MODE_NONE );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020039
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020040 TEST_ASSERT( mbedtls_cipher_get_iv_size( NULL ) == 0 );
41 TEST_ASSERT( mbedtls_cipher_get_iv_size( &ctx ) == 0 );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020042
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020043 TEST_ASSERT( mbedtls_cipher_info_from_string( NULL ) == NULL );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020044
Manuel Pégourié-Gonnard8473f872015-05-14 13:51:45 +020045 TEST_ASSERT( mbedtls_cipher_setup( &ctx, NULL )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020046 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard8473f872015-05-14 13:51:45 +020047 TEST_ASSERT( mbedtls_cipher_setup( NULL, info )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020048 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020049
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020050 TEST_ASSERT( mbedtls_cipher_setkey( NULL, buf, 0, MBEDTLS_ENCRYPT )
51 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
52 TEST_ASSERT( mbedtls_cipher_setkey( &ctx, buf, 0, MBEDTLS_ENCRYPT )
53 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020054
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020055 TEST_ASSERT( mbedtls_cipher_set_iv( NULL, buf, 0 )
56 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
57 TEST_ASSERT( mbedtls_cipher_set_iv( &ctx, buf, 0 )
58 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020059
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020060 TEST_ASSERT( mbedtls_cipher_reset( NULL ) == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
61 TEST_ASSERT( mbedtls_cipher_reset( &ctx ) == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020062
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020063#if defined(MBEDTLS_GCM_C)
64 TEST_ASSERT( mbedtls_cipher_update_ad( NULL, buf, 0 )
65 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
66 TEST_ASSERT( mbedtls_cipher_update_ad( &ctx, buf, 0 )
67 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020068#endif
69
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020070 TEST_ASSERT( mbedtls_cipher_update( NULL, buf, 0, buf, &olen )
71 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
72 TEST_ASSERT( mbedtls_cipher_update( &ctx, buf, 0, buf, &olen )
73 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020074
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020075 TEST_ASSERT( mbedtls_cipher_finish( NULL, buf, &olen )
76 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
77 TEST_ASSERT( mbedtls_cipher_finish( &ctx, buf, &olen )
78 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020079
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020080#if defined(MBEDTLS_GCM_C)
81 TEST_ASSERT( mbedtls_cipher_write_tag( NULL, buf, olen )
82 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
83 TEST_ASSERT( mbedtls_cipher_write_tag( &ctx, buf, olen )
84 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020085
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020086 TEST_ASSERT( mbedtls_cipher_check_tag( NULL, buf, olen )
87 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
88 TEST_ASSERT( mbedtls_cipher_check_tag( &ctx, buf, olen )
89 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020090#endif
91}
92/* END_CASE */
93
Paul Bakker6a9c7252016-07-14 13:46:10 +010094/* BEGIN_CASE depends_on:MBEDTLS_AES_C */
95void cipher_special_behaviours( )
96{
97 const mbedtls_cipher_info_t *cipher_info;
98 mbedtls_cipher_context_t ctx;
99 unsigned char input[32];
100 unsigned char output[32];
101 unsigned char iv[32];
102 size_t olen = 0;
103
104 mbedtls_cipher_init( &ctx );
105 memset( input, 0, sizeof( input ) );
106 memset( output, 0, sizeof( output ) );
107 memset( iv, 0, sizeof( iv ) );
108
109 /* Check and get info structures */
110 cipher_info = mbedtls_cipher_info_from_type( MBEDTLS_CIPHER_AES_128_ECB );
111 TEST_ASSERT( NULL != cipher_info );
112
113 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx, cipher_info ) );
114
115 /* IV too big */
116 TEST_ASSERT( mbedtls_cipher_set_iv( &ctx, iv, MBEDTLS_MAX_IV_LENGTH + 1 )
117 == MBEDTLS_ERR_CIPHER_FEATURE_UNAVAILABLE );
118
119 /* IV too small */
120 TEST_ASSERT( mbedtls_cipher_set_iv( &ctx, iv, 0 )
121 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
122
123 /* Update ECB with partial block */
124 TEST_ASSERT( mbedtls_cipher_update( &ctx, input, 1, output, &olen )
125 == MBEDTLS_ERR_CIPHER_FULL_BLOCK_EXPECTED );
126
127exit:
128 mbedtls_cipher_free( &ctx );
129}
130/* END_CASE */
131
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +0200132/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +0200133void enc_dec_buf( int cipher_id, char *cipher_string, int key_len,
134 int length_val, int pad_mode )
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200135{
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200136 size_t length = length_val, outlen, total_len, i, block_size;
Paul Bakker8123e9d2011-01-06 15:37:30 +0000137 unsigned char key[32];
138 unsigned char iv[16];
Manuel Pégourié-Gonnard9241be72013-08-31 17:31:03 +0200139 unsigned char ad[13];
140 unsigned char tag[16];
Manuel Pégourié-Gonnard1af50a22013-09-05 10:30:32 +0200141 unsigned char inbuf[64];
142 unsigned char encbuf[64];
143 unsigned char decbuf[64];
Paul Bakker8123e9d2011-01-06 15:37:30 +0000144
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200145 const mbedtls_cipher_info_t *cipher_info;
146 mbedtls_cipher_context_t ctx_dec;
147 mbedtls_cipher_context_t ctx_enc;
Paul Bakker8123e9d2011-01-06 15:37:30 +0000148
Manuel Pégourié-Gonnard1af50a22013-09-05 10:30:32 +0200149 /*
150 * Prepare contexts
151 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200152 mbedtls_cipher_init( &ctx_dec );
153 mbedtls_cipher_init( &ctx_enc );
Manuel Pégourié-Gonnard1af50a22013-09-05 10:30:32 +0200154
155 memset( key, 0x2a, sizeof( key ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000156
157 /* Check and get info structures */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200158 cipher_info = mbedtls_cipher_info_from_type( cipher_id );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000159 TEST_ASSERT( NULL != cipher_info );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200160 TEST_ASSERT( mbedtls_cipher_info_from_string( cipher_string ) == cipher_info );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000161
162 /* Initialise enc and dec contexts */
Manuel Pégourié-Gonnard8473f872015-05-14 13:51:45 +0200163 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx_dec, cipher_info ) );
164 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx_enc, cipher_info ) );
Manuel Pégourié-Gonnard1af50a22013-09-05 10:30:32 +0200165
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200166 TEST_ASSERT( 0 == mbedtls_cipher_setkey( &ctx_dec, key, key_len, MBEDTLS_DECRYPT ) );
167 TEST_ASSERT( 0 == mbedtls_cipher_setkey( &ctx_enc, key, key_len, MBEDTLS_ENCRYPT ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000168
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200169#if defined(MBEDTLS_CIPHER_MODE_WITH_PADDING)
Paul Bakker33b43f12013-08-20 11:48:36 +0200170 if( -1 != pad_mode )
Manuel Pégourié-Gonnard6c978992013-07-26 13:20:42 +0200171 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200172 TEST_ASSERT( 0 == mbedtls_cipher_set_padding_mode( &ctx_dec, pad_mode ) );
173 TEST_ASSERT( 0 == mbedtls_cipher_set_padding_mode( &ctx_enc, pad_mode ) );
Manuel Pégourié-Gonnard6c978992013-07-26 13:20:42 +0200174 }
Manuel Pégourié-Gonnard989ed382013-09-13 14:41:45 +0200175#else
176 (void) pad_mode;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200177#endif /* MBEDTLS_CIPHER_MODE_WITH_PADDING */
Manuel Pégourié-Gonnard6c978992013-07-26 13:20:42 +0200178
Manuel Pégourié-Gonnard1af50a22013-09-05 10:30:32 +0200179 /*
180 * Do a few encode/decode cycles
181 */
182 for( i = 0; i < 3; i++ )
183 {
184 memset( iv , 0x00 + i, sizeof( iv ) );
185 memset( ad, 0x10 + i, sizeof( ad ) );
186 memset( inbuf, 0x20 + i, sizeof( inbuf ) );
187
188 memset( encbuf, 0, sizeof( encbuf ) );
189 memset( decbuf, 0, sizeof( decbuf ) );
190 memset( tag, 0, sizeof( tag ) );
191
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200192 TEST_ASSERT( 0 == mbedtls_cipher_set_iv( &ctx_dec, iv, sizeof( iv ) ) );
193 TEST_ASSERT( 0 == mbedtls_cipher_set_iv( &ctx_enc, iv, sizeof( iv ) ) );
Manuel Pégourié-Gonnard9c853b92013-09-03 13:04:44 +0200194
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200195 TEST_ASSERT( 0 == mbedtls_cipher_reset( &ctx_dec ) );
196 TEST_ASSERT( 0 == mbedtls_cipher_reset( &ctx_enc ) );
Manuel Pégourié-Gonnard2adc40c2013-09-03 13:54:12 +0200197
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200198#if defined(MBEDTLS_GCM_C)
199 TEST_ASSERT( 0 == mbedtls_cipher_update_ad( &ctx_dec, ad, sizeof( ad ) - i ) );
200 TEST_ASSERT( 0 == mbedtls_cipher_update_ad( &ctx_enc, ad, sizeof( ad ) - i ) );
Manuel Pégourié-Gonnard8f625632014-06-24 15:26:28 +0200201#endif
Paul Bakker8123e9d2011-01-06 15:37:30 +0000202
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200203 block_size = mbedtls_cipher_get_block_size( &ctx_enc );
204 TEST_ASSERT( block_size != 0 );
205
Paul Bakker8123e9d2011-01-06 15:37:30 +0000206 /* encode length number of bytes from inbuf */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200207 TEST_ASSERT( 0 == mbedtls_cipher_update( &ctx_enc, inbuf, length, encbuf, &outlen ) );
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200208 total_len = outlen;
209
210 TEST_ASSERT( total_len == length ||
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200211 ( total_len % block_size == 0 &&
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200212 total_len < length &&
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200213 total_len + block_size > length ) );
Paul Bakker343a8702011-06-09 14:27:58 +0000214
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200215 TEST_ASSERT( 0 == mbedtls_cipher_finish( &ctx_enc, encbuf + outlen, &outlen ) );
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200216 total_len += outlen;
Paul Bakker343a8702011-06-09 14:27:58 +0000217
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200218#if defined(MBEDTLS_GCM_C)
219 TEST_ASSERT( 0 == mbedtls_cipher_write_tag( &ctx_enc, tag, sizeof( tag ) ) );
Manuel Pégourié-Gonnard8f625632014-06-24 15:26:28 +0200220#endif
Manuel Pégourié-Gonnardaa9ffc52013-09-03 16:19:22 +0200221
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200222 TEST_ASSERT( total_len == length ||
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200223 ( total_len % block_size == 0 &&
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200224 total_len > length &&
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200225 total_len <= length + block_size ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000226
227 /* decode the previously encoded string */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200228 TEST_ASSERT( 0 == mbedtls_cipher_update( &ctx_dec, encbuf, total_len, decbuf, &outlen ) );
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200229 total_len = outlen;
230
231 TEST_ASSERT( total_len == length ||
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200232 ( total_len % block_size == 0 &&
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200233 total_len < length &&
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200234 total_len + block_size >= length ) );
Paul Bakker343a8702011-06-09 14:27:58 +0000235
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200236 TEST_ASSERT( 0 == mbedtls_cipher_finish( &ctx_dec, decbuf + outlen, &outlen ) );
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200237 total_len += outlen;
Paul Bakker343a8702011-06-09 14:27:58 +0000238
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200239#if defined(MBEDTLS_GCM_C)
240 TEST_ASSERT( 0 == mbedtls_cipher_check_tag( &ctx_dec, tag, sizeof( tag ) ) );
Manuel Pégourié-Gonnard8f625632014-06-24 15:26:28 +0200241#endif
Manuel Pégourié-Gonnardaa9ffc52013-09-03 16:19:22 +0200242
Manuel Pégourié-Gonnard1af50a22013-09-05 10:30:32 +0200243 /* check result */
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200244 TEST_ASSERT( total_len == length );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000245 TEST_ASSERT( 0 == memcmp(inbuf, decbuf, length) );
Manuel Pégourié-Gonnard1af50a22013-09-05 10:30:32 +0200246 }
Paul Bakker8123e9d2011-01-06 15:37:30 +0000247
Manuel Pégourié-Gonnard1af50a22013-09-05 10:30:32 +0200248 /*
249 * Done
250 */
Paul Bakkerbd51b262014-07-10 15:26:12 +0200251exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200252 mbedtls_cipher_free( &ctx_dec );
253 mbedtls_cipher_free( &ctx_enc );
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200254}
Paul Bakker33b43f12013-08-20 11:48:36 +0200255/* END_CASE */
Paul Bakker8123e9d2011-01-06 15:37:30 +0000256
Paul Bakker33b43f12013-08-20 11:48:36 +0200257/* BEGIN_CASE */
258void enc_fail( int cipher_id, int pad_mode, int key_len,
259 int length_val, int ret )
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200260{
Paul Bakker33b43f12013-08-20 11:48:36 +0200261 size_t length = length_val;
Manuel Pégourié-Gonnardebdc4132013-07-26 16:50:44 +0200262 unsigned char key[32];
263 unsigned char iv[16];
264
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200265 const mbedtls_cipher_info_t *cipher_info;
266 mbedtls_cipher_context_t ctx;
Manuel Pégourié-Gonnardebdc4132013-07-26 16:50:44 +0200267
268 unsigned char inbuf[64];
269 unsigned char encbuf[64];
270
271 size_t outlen = 0;
272
273 memset( key, 0, 32 );
274 memset( iv , 0, 16 );
275
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200276 mbedtls_cipher_init( &ctx );
Manuel Pégourié-Gonnardebdc4132013-07-26 16:50:44 +0200277
278 memset( inbuf, 5, 64 );
279 memset( encbuf, 0, 64 );
280
281 /* Check and get info structures */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200282 cipher_info = mbedtls_cipher_info_from_type( cipher_id );
Manuel Pégourié-Gonnardebdc4132013-07-26 16:50:44 +0200283 TEST_ASSERT( NULL != cipher_info );
284
285 /* Initialise context */
Manuel Pégourié-Gonnard8473f872015-05-14 13:51:45 +0200286 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx, cipher_info ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200287 TEST_ASSERT( 0 == mbedtls_cipher_setkey( &ctx, key, key_len, MBEDTLS_ENCRYPT ) );
288#if defined(MBEDTLS_CIPHER_MODE_WITH_PADDING)
289 TEST_ASSERT( 0 == mbedtls_cipher_set_padding_mode( &ctx, pad_mode ) );
Manuel Pégourié-Gonnard989ed382013-09-13 14:41:45 +0200290#else
291 (void) pad_mode;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200292#endif /* MBEDTLS_CIPHER_MODE_WITH_PADDING */
293 TEST_ASSERT( 0 == mbedtls_cipher_set_iv( &ctx, iv, 16 ) );
294 TEST_ASSERT( 0 == mbedtls_cipher_reset( &ctx ) );
295#if defined(MBEDTLS_GCM_C)
296 TEST_ASSERT( 0 == mbedtls_cipher_update_ad( &ctx, NULL, 0 ) );
Manuel Pégourié-Gonnard8f625632014-06-24 15:26:28 +0200297#endif
Manuel Pégourié-Gonnardebdc4132013-07-26 16:50:44 +0200298
299 /* encode length number of bytes from inbuf */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200300 TEST_ASSERT( 0 == mbedtls_cipher_update( &ctx, inbuf, length, encbuf, &outlen ) );
301 TEST_ASSERT( ret == mbedtls_cipher_finish( &ctx, encbuf + outlen, &outlen ) );
Manuel Pégourié-Gonnardebdc4132013-07-26 16:50:44 +0200302
303 /* done */
Paul Bakkerbd51b262014-07-10 15:26:12 +0200304exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200305 mbedtls_cipher_free( &ctx );
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200306}
Paul Bakker33b43f12013-08-20 11:48:36 +0200307/* END_CASE */
Manuel Pégourié-Gonnardebdc4132013-07-26 16:50:44 +0200308
Paul Bakker33b43f12013-08-20 11:48:36 +0200309/* BEGIN_CASE */
310void dec_empty_buf()
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200311{
Paul Bakker8123e9d2011-01-06 15:37:30 +0000312 unsigned char key[32];
313 unsigned char iv[16];
314
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200315 mbedtls_cipher_context_t ctx_dec;
316 const mbedtls_cipher_info_t *cipher_info;
Paul Bakker8123e9d2011-01-06 15:37:30 +0000317
318 unsigned char encbuf[64];
319 unsigned char decbuf[64];
320
Paul Bakkerf4a3f302011-04-24 15:53:29 +0000321 size_t outlen = 0;
Paul Bakker8123e9d2011-01-06 15:37:30 +0000322
323 memset( key, 0, 32 );
324 memset( iv , 0, 16 );
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200325
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200326 mbedtls_cipher_init( &ctx_dec );
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200327
Paul Bakker8123e9d2011-01-06 15:37:30 +0000328 memset( encbuf, 0, 64 );
329 memset( decbuf, 0, 64 );
330
Manuel Pégourié-Gonnard9c853b92013-09-03 13:04:44 +0200331 /* Initialise context */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200332 cipher_info = mbedtls_cipher_info_from_type( MBEDTLS_CIPHER_AES_128_CBC );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000333 TEST_ASSERT( NULL != cipher_info);
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200334
Manuel Pégourié-Gonnard8473f872015-05-14 13:51:45 +0200335 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx_dec, cipher_info ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000336
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200337 TEST_ASSERT( 0 == mbedtls_cipher_setkey( &ctx_dec, key, 128, MBEDTLS_DECRYPT ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000338
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200339 TEST_ASSERT( 0 == mbedtls_cipher_set_iv( &ctx_dec, iv, 16 ) );
Manuel Pégourié-Gonnard9c853b92013-09-03 13:04:44 +0200340
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200341 TEST_ASSERT( 0 == mbedtls_cipher_reset( &ctx_dec ) );
Manuel Pégourié-Gonnard2adc40c2013-09-03 13:54:12 +0200342
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200343#if defined(MBEDTLS_GCM_C)
344 TEST_ASSERT( 0 == mbedtls_cipher_update_ad( &ctx_dec, NULL, 0 ) );
Manuel Pégourié-Gonnard8f625632014-06-24 15:26:28 +0200345#endif
Paul Bakker8123e9d2011-01-06 15:37:30 +0000346
347 /* decode 0-byte string */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200348 TEST_ASSERT( 0 == mbedtls_cipher_update( &ctx_dec, encbuf, 0, decbuf, &outlen ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000349 TEST_ASSERT( 0 == outlen );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200350 TEST_ASSERT( MBEDTLS_ERR_CIPHER_FULL_BLOCK_EXPECTED == mbedtls_cipher_finish(
Manuel Pégourié-Gonnardaa9ffc52013-09-03 16:19:22 +0200351 &ctx_dec, decbuf + outlen, &outlen ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000352 TEST_ASSERT( 0 == outlen );
353
Paul Bakkerbd51b262014-07-10 15:26:12 +0200354exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200355 mbedtls_cipher_free( &ctx_dec );
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200356}
Paul Bakker33b43f12013-08-20 11:48:36 +0200357/* END_CASE */
Paul Bakker8123e9d2011-01-06 15:37:30 +0000358
Paul Bakker33b43f12013-08-20 11:48:36 +0200359/* BEGIN_CASE */
360void enc_dec_buf_multipart( int cipher_id, int key_len, int first_length_val,
361 int second_length_val )
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200362{
Paul Bakker33b43f12013-08-20 11:48:36 +0200363 size_t first_length = first_length_val;
364 size_t second_length = second_length_val;
Paul Bakker23986e52011-04-24 08:57:21 +0000365 size_t length = first_length + second_length;
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200366 size_t block_size;
Paul Bakker8123e9d2011-01-06 15:37:30 +0000367 unsigned char key[32];
368 unsigned char iv[16];
369
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200370 mbedtls_cipher_context_t ctx_dec;
371 mbedtls_cipher_context_t ctx_enc;
372 const mbedtls_cipher_info_t *cipher_info;
Paul Bakker8123e9d2011-01-06 15:37:30 +0000373
374 unsigned char inbuf[64];
375 unsigned char encbuf[64];
376 unsigned char decbuf[64];
377
Paul Bakker23986e52011-04-24 08:57:21 +0000378 size_t outlen = 0;
379 size_t totaloutlen = 0;
Paul Bakker8123e9d2011-01-06 15:37:30 +0000380
381 memset( key, 0, 32 );
382 memset( iv , 0, 16 );
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200383
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200384 mbedtls_cipher_init( &ctx_dec );
385 mbedtls_cipher_init( &ctx_enc );
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200386
Paul Bakker8123e9d2011-01-06 15:37:30 +0000387 memset( inbuf, 5, 64 );
388 memset( encbuf, 0, 64 );
389 memset( decbuf, 0, 64 );
390
391 /* Initialise enc and dec contexts */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200392 cipher_info = mbedtls_cipher_info_from_type( cipher_id );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000393 TEST_ASSERT( NULL != cipher_info);
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200394
Manuel Pégourié-Gonnard8473f872015-05-14 13:51:45 +0200395 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx_dec, cipher_info ) );
396 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx_enc, cipher_info ) );
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200397
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200398 TEST_ASSERT( 0 == mbedtls_cipher_setkey( &ctx_dec, key, key_len, MBEDTLS_DECRYPT ) );
399 TEST_ASSERT( 0 == mbedtls_cipher_setkey( &ctx_enc, key, key_len, MBEDTLS_ENCRYPT ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000400
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200401 TEST_ASSERT( 0 == mbedtls_cipher_set_iv( &ctx_dec, iv, 16 ) );
402 TEST_ASSERT( 0 == mbedtls_cipher_set_iv( &ctx_enc, iv, 16 ) );
Manuel Pégourié-Gonnard9c853b92013-09-03 13:04:44 +0200403
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200404 TEST_ASSERT( 0 == mbedtls_cipher_reset( &ctx_dec ) );
405 TEST_ASSERT( 0 == mbedtls_cipher_reset( &ctx_enc ) );
Manuel Pégourié-Gonnard2adc40c2013-09-03 13:54:12 +0200406
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200407#if defined(MBEDTLS_GCM_C)
408 TEST_ASSERT( 0 == mbedtls_cipher_update_ad( &ctx_dec, NULL, 0 ) );
409 TEST_ASSERT( 0 == mbedtls_cipher_update_ad( &ctx_enc, NULL, 0 ) );
Manuel Pégourié-Gonnard8f625632014-06-24 15:26:28 +0200410#endif
Paul Bakker8123e9d2011-01-06 15:37:30 +0000411
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200412 block_size = mbedtls_cipher_get_block_size( &ctx_enc );
413 TEST_ASSERT( block_size != 0 );
414
Paul Bakker8123e9d2011-01-06 15:37:30 +0000415 /* encode length number of bytes from inbuf */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200416 TEST_ASSERT( 0 == mbedtls_cipher_update( &ctx_enc, inbuf, first_length, encbuf, &outlen ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000417 totaloutlen = outlen;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200418 TEST_ASSERT( 0 == mbedtls_cipher_update( &ctx_enc, inbuf + first_length, second_length, encbuf + totaloutlen, &outlen ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000419 totaloutlen += outlen;
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200420 TEST_ASSERT( totaloutlen == length ||
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200421 ( totaloutlen % block_size == 0 &&
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200422 totaloutlen < length &&
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200423 totaloutlen + block_size > length ) );
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200424
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200425 TEST_ASSERT( 0 == mbedtls_cipher_finish( &ctx_enc, encbuf + totaloutlen, &outlen ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000426 totaloutlen += outlen;
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200427 TEST_ASSERT( totaloutlen == length ||
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200428 ( totaloutlen % block_size == 0 &&
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200429 totaloutlen > length &&
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200430 totaloutlen <= length + block_size ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000431
432 /* decode the previously encoded string */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200433 TEST_ASSERT( 0 == mbedtls_cipher_update( &ctx_dec, encbuf, totaloutlen, decbuf, &outlen ) );
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200434 totaloutlen = outlen;
435
436 TEST_ASSERT( totaloutlen == length ||
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200437 ( totaloutlen % block_size == 0 &&
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200438 totaloutlen < length &&
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200439 totaloutlen + block_size >= length ) );
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200440
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200441 TEST_ASSERT( 0 == mbedtls_cipher_finish( &ctx_dec, decbuf + outlen, &outlen ) );
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200442 totaloutlen += outlen;
443
444 TEST_ASSERT( totaloutlen == length );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000445
446 TEST_ASSERT( 0 == memcmp(inbuf, decbuf, length) );
447
Paul Bakkerbd51b262014-07-10 15:26:12 +0200448exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200449 mbedtls_cipher_free( &ctx_dec );
450 mbedtls_cipher_free( &ctx_enc );
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200451}
Paul Bakker33b43f12013-08-20 11:48:36 +0200452/* END_CASE */
Paul Bakker8123e9d2011-01-06 15:37:30 +0000453
Paul Bakker33b43f12013-08-20 11:48:36 +0200454/* BEGIN_CASE */
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200455void decrypt_test_vec( int cipher_id, int pad_mode,
456 char *hex_key, char *hex_iv,
457 char *hex_cipher, char *hex_clear,
458 char *hex_ad, char *hex_tag,
459 int finish_result, int tag_result )
460{
Manuel Pégourié-Gonnardf7ce67f2013-09-03 20:17:35 +0200461 unsigned char key[50];
462 unsigned char iv[50];
463 unsigned char cipher[200];
464 unsigned char clear[200];
465 unsigned char ad[200];
466 unsigned char tag[20];
Manuel Pégourié-Gonnarda7496f02013-09-20 11:29:59 +0200467 size_t key_len, iv_len, cipher_len, clear_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200468#if defined(MBEDTLS_GCM_C)
Manuel Pégourié-Gonnarda7496f02013-09-20 11:29:59 +0200469 size_t ad_len, tag_len;
470#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200471 mbedtls_cipher_context_t ctx;
Manuel Pégourié-Gonnardf7ce67f2013-09-03 20:17:35 +0200472 unsigned char output[200];
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200473 size_t outlen, total_len;
474
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200475 mbedtls_cipher_init( &ctx );
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200476
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200477 memset( key, 0x00, sizeof( key ) );
478 memset( iv, 0x00, sizeof( iv ) );
479 memset( cipher, 0x00, sizeof( cipher ) );
480 memset( clear, 0x00, sizeof( clear ) );
481 memset( ad, 0x00, sizeof( ad ) );
482 memset( tag, 0x00, sizeof( tag ) );
483 memset( output, 0x00, sizeof( output ) );
484
485 key_len = unhexify( key, hex_key );
486 iv_len = unhexify( iv, hex_iv );
487 cipher_len = unhexify( cipher, hex_cipher );
488 clear_len = unhexify( clear, hex_clear );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200489#if defined(MBEDTLS_GCM_C)
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200490 ad_len = unhexify( ad, hex_ad );
491 tag_len = unhexify( tag, hex_tag );
Manuel Pégourié-Gonnarda7496f02013-09-20 11:29:59 +0200492#else
493 ((void) hex_ad);
494 ((void) hex_tag);
495#endif
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200496
497 /* Prepare context */
Manuel Pégourié-Gonnard8473f872015-05-14 13:51:45 +0200498 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200499 mbedtls_cipher_info_from_type( cipher_id ) ) );
500 TEST_ASSERT( 0 == mbedtls_cipher_setkey( &ctx, key, 8 * key_len, MBEDTLS_DECRYPT ) );
501#if defined(MBEDTLS_CIPHER_MODE_WITH_PADDING)
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200502 if( pad_mode != -1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200503 TEST_ASSERT( 0 == mbedtls_cipher_set_padding_mode( &ctx, pad_mode ) );
Manuel Pégourié-Gonnard989ed382013-09-13 14:41:45 +0200504#else
505 (void) pad_mode;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200506#endif /* MBEDTLS_CIPHER_MODE_WITH_PADDING */
507 TEST_ASSERT( 0 == mbedtls_cipher_set_iv( &ctx, iv, iv_len ) );
508 TEST_ASSERT( 0 == mbedtls_cipher_reset( &ctx ) );
509#if defined(MBEDTLS_GCM_C)
510 TEST_ASSERT( 0 == mbedtls_cipher_update_ad( &ctx, ad, ad_len ) );
Manuel Pégourié-Gonnard8f625632014-06-24 15:26:28 +0200511#endif
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200512
513 /* decode buffer and check tag */
514 total_len = 0;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200515 TEST_ASSERT( 0 == mbedtls_cipher_update( &ctx, cipher, cipher_len, output, &outlen ) );
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200516 total_len += outlen;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200517 TEST_ASSERT( finish_result == mbedtls_cipher_finish( &ctx, output + outlen,
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200518 &outlen ) );
519 total_len += outlen;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200520#if defined(MBEDTLS_GCM_C)
521 TEST_ASSERT( tag_result == mbedtls_cipher_check_tag( &ctx, tag, tag_len ) );
Manuel Pégourié-Gonnard8f625632014-06-24 15:26:28 +0200522#endif
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200523
524 /* check plaintext only if everything went fine */
525 if( 0 == finish_result && 0 == tag_result )
526 {
527 TEST_ASSERT( total_len == clear_len );
528 TEST_ASSERT( 0 == memcmp( output, clear, clear_len ) );
529 }
530
Paul Bakkerbd51b262014-07-10 15:26:12 +0200531exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200532 mbedtls_cipher_free( &ctx );
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200533}
534/* END_CASE */
535
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200536/* BEGIN_CASE depends_on:MBEDTLS_CIPHER_MODE_AEAD */
Manuel Pégourié-Gonnard542eac52014-05-15 16:03:07 +0200537void auth_crypt_tv( int cipher_id, char *hex_key, char *hex_iv,
538 char *hex_ad, char *hex_cipher,
539 char *hex_tag, char *hex_clear )
540{
541 int ret;
542 unsigned char key[50];
543 unsigned char iv[50];
544 unsigned char cipher[200];
545 unsigned char clear[200];
546 unsigned char ad[200];
547 unsigned char tag[20];
548 unsigned char my_tag[20];
549 size_t key_len, iv_len, cipher_len, clear_len, ad_len, tag_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200550 mbedtls_cipher_context_t ctx;
Manuel Pégourié-Gonnard542eac52014-05-15 16:03:07 +0200551 unsigned char output[200];
552 size_t outlen;
553
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200554 mbedtls_cipher_init( &ctx );
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200555
Manuel Pégourié-Gonnard542eac52014-05-15 16:03:07 +0200556 memset( key, 0x00, sizeof( key ) );
557 memset( iv, 0x00, sizeof( iv ) );
558 memset( cipher, 0x00, sizeof( cipher ) );
559 memset( clear, 0x00, sizeof( clear ) );
560 memset( ad, 0x00, sizeof( ad ) );
561 memset( tag, 0x00, sizeof( tag ) );
562 memset( my_tag, 0xFF, sizeof( my_tag ) );
563 memset( output, 0xFF, sizeof( output ) );
564
565 key_len = unhexify( key, hex_key );
566 iv_len = unhexify( iv, hex_iv );
567 cipher_len = unhexify( cipher, hex_cipher );
568 ad_len = unhexify( ad, hex_ad );
569 tag_len = unhexify( tag, hex_tag );
570
571 /* Prepare context */
Manuel Pégourié-Gonnard8473f872015-05-14 13:51:45 +0200572 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200573 mbedtls_cipher_info_from_type( cipher_id ) ) );
574 TEST_ASSERT( 0 == mbedtls_cipher_setkey( &ctx, key, 8 * key_len, MBEDTLS_DECRYPT ) );
Manuel Pégourié-Gonnard542eac52014-05-15 16:03:07 +0200575
576 /* decode buffer and check tag */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200577 ret = mbedtls_cipher_auth_decrypt( &ctx, iv, iv_len, ad, ad_len,
Manuel Pégourié-Gonnard542eac52014-05-15 16:03:07 +0200578 cipher, cipher_len, output, &outlen,
579 tag, tag_len );
580
581 /* make sure we didn't overwrite */
582 TEST_ASSERT( output[outlen + 0] == 0xFF );
583 TEST_ASSERT( output[outlen + 1] == 0xFF );
584
585 /* make sure the message is rejected if it should be */
586 if( strcmp( hex_clear, "FAIL" ) == 0 )
587 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200588 TEST_ASSERT( ret == MBEDTLS_ERR_CIPHER_AUTH_FAILED );
Paul Bakkerbd51b262014-07-10 15:26:12 +0200589 goto exit;
Manuel Pégourié-Gonnard542eac52014-05-15 16:03:07 +0200590 }
591
592 /* otherwise, make sure it was decrypted properly */
593 TEST_ASSERT( ret == 0 );
594
595 clear_len = unhexify( clear, hex_clear );
596 TEST_ASSERT( outlen == clear_len );
597 TEST_ASSERT( memcmp( output, clear, clear_len ) == 0 );
598
599 /* then encrypt the clear and make sure we get the same ciphertext and tag */
600 memset( output, 0xFF, sizeof( output ) );
601 outlen = 0;
602
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200603 ret = mbedtls_cipher_auth_encrypt( &ctx, iv, iv_len, ad, ad_len,
Manuel Pégourié-Gonnard542eac52014-05-15 16:03:07 +0200604 clear, clear_len, output, &outlen,
605 my_tag, tag_len );
606 TEST_ASSERT( ret == 0 );
607
608 TEST_ASSERT( outlen == clear_len );
609 TEST_ASSERT( memcmp( output, cipher, clear_len ) == 0 );
610 TEST_ASSERT( memcmp( my_tag, tag, tag_len ) == 0 );
611
612 /* make sure we didn't overwrite */
613 TEST_ASSERT( output[outlen + 0] == 0xFF );
614 TEST_ASSERT( output[outlen + 1] == 0xFF );
615 TEST_ASSERT( my_tag[tag_len + 0] == 0xFF );
616 TEST_ASSERT( my_tag[tag_len + 1] == 0xFF );
617
618
Paul Bakkerbd51b262014-07-10 15:26:12 +0200619exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200620 mbedtls_cipher_free( &ctx );
Manuel Pégourié-Gonnard542eac52014-05-15 16:03:07 +0200621}
622/* END_CASE */
623
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200624/* BEGIN_CASE */
Paul Bakker5e0efa72013-09-08 23:04:04 +0200625void test_vec_ecb( int cipher_id, int operation, char *hex_key,
626 char *hex_input, char *hex_result,
627 int finish_result )
628{
629 unsigned char key[50];
630 unsigned char input[16];
631 unsigned char result[16];
632 size_t key_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200633 mbedtls_cipher_context_t ctx;
Paul Bakker5e0efa72013-09-08 23:04:04 +0200634 unsigned char output[32];
635 size_t outlen;
636
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200637 mbedtls_cipher_init( &ctx );
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200638
Paul Bakker5e0efa72013-09-08 23:04:04 +0200639 memset( key, 0x00, sizeof( key ) );
640 memset( input, 0x00, sizeof( input ) );
641 memset( result, 0x00, sizeof( result ) );
642 memset( output, 0x00, sizeof( output ) );
643
644 /* Prepare context */
Manuel Pégourié-Gonnard8473f872015-05-14 13:51:45 +0200645 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200646 mbedtls_cipher_info_from_type( cipher_id ) ) );
Paul Bakker5e0efa72013-09-08 23:04:04 +0200647
648 key_len = unhexify( key, hex_key );
649 TEST_ASSERT( unhexify( input, hex_input ) ==
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200650 (int) mbedtls_cipher_get_block_size( &ctx ) );
Paul Bakker5e0efa72013-09-08 23:04:04 +0200651 TEST_ASSERT( unhexify( result, hex_result ) ==
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200652 (int) mbedtls_cipher_get_block_size( &ctx ) );
Paul Bakker5e0efa72013-09-08 23:04:04 +0200653
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200654 TEST_ASSERT( 0 == mbedtls_cipher_setkey( &ctx, key, 8 * key_len, operation ) );
Paul Bakker5e0efa72013-09-08 23:04:04 +0200655
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200656 TEST_ASSERT( 0 == mbedtls_cipher_update( &ctx, input,
657 mbedtls_cipher_get_block_size( &ctx ),
Paul Bakker5e0efa72013-09-08 23:04:04 +0200658 output, &outlen ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200659 TEST_ASSERT( outlen == mbedtls_cipher_get_block_size( &ctx ) );
660 TEST_ASSERT( finish_result == mbedtls_cipher_finish( &ctx, output + outlen,
Paul Bakker5e0efa72013-09-08 23:04:04 +0200661 &outlen ) );
662 TEST_ASSERT( 0 == outlen );
663
664 /* check plaintext only if everything went fine */
665 if( 0 == finish_result )
666 TEST_ASSERT( 0 == memcmp( output, result,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200667 mbedtls_cipher_get_block_size( &ctx ) ) );
Paul Bakker5e0efa72013-09-08 23:04:04 +0200668
Paul Bakkerbd51b262014-07-10 15:26:12 +0200669exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200670 mbedtls_cipher_free( &ctx );
Paul Bakker5e0efa72013-09-08 23:04:04 +0200671}
672/* END_CASE */
673
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200674/* BEGIN_CASE depends_on:MBEDTLS_CIPHER_MODE_WITH_PADDING */
Paul Bakker33b43f12013-08-20 11:48:36 +0200675void set_padding( int cipher_id, int pad_mode, int ret )
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200676{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200677 const mbedtls_cipher_info_t *cipher_info;
678 mbedtls_cipher_context_t ctx;
Manuel Pégourié-Gonnardd5fdcaf2013-07-24 18:05:00 +0200679
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200680 mbedtls_cipher_init( &ctx );
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200681
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200682 cipher_info = mbedtls_cipher_info_from_type( cipher_id );
Manuel Pégourié-Gonnardd5fdcaf2013-07-24 18:05:00 +0200683 TEST_ASSERT( NULL != cipher_info );
Manuel Pégourié-Gonnard8473f872015-05-14 13:51:45 +0200684 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx, cipher_info ) );
Manuel Pégourié-Gonnardd5fdcaf2013-07-24 18:05:00 +0200685
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200686 TEST_ASSERT( ret == mbedtls_cipher_set_padding_mode( &ctx, pad_mode ) );
Manuel Pégourié-Gonnardd5fdcaf2013-07-24 18:05:00 +0200687
Paul Bakkerbd51b262014-07-10 15:26:12 +0200688exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200689 mbedtls_cipher_free( &ctx );
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200690}
Paul Bakker33b43f12013-08-20 11:48:36 +0200691/* END_CASE */
Paul Bakker8123e9d2011-01-06 15:37:30 +0000692
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200693/* BEGIN_CASE depends_on:MBEDTLS_CIPHER_MODE_CBC */
Paul Bakker33b43f12013-08-20 11:48:36 +0200694void check_padding( int pad_mode, char *input_str, int ret, int dlen_check )
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200695{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200696 mbedtls_cipher_info_t cipher_info;
697 mbedtls_cipher_context_t ctx;
Manuel Pégourié-Gonnarda6408492013-07-26 10:55:02 +0200698 unsigned char input[16];
699 size_t ilen, dlen;
700
701 /* build a fake context just for getting access to get_padding */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200702 mbedtls_cipher_init( &ctx );
703 cipher_info.mode = MBEDTLS_MODE_CBC;
Manuel Pégourié-Gonnarda6408492013-07-26 10:55:02 +0200704 ctx.cipher_info = &cipher_info;
705
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200706 TEST_ASSERT( 0 == mbedtls_cipher_set_padding_mode( &ctx, pad_mode ) );
Manuel Pégourié-Gonnarda6408492013-07-26 10:55:02 +0200707
Paul Bakker33b43f12013-08-20 11:48:36 +0200708 ilen = unhexify( input, input_str );
Manuel Pégourié-Gonnarda6408492013-07-26 10:55:02 +0200709
Paul Bakker33b43f12013-08-20 11:48:36 +0200710 TEST_ASSERT( ret == ctx.get_padding( input, ilen, &dlen ) );
711 if( 0 == ret )
712 TEST_ASSERT( dlen == (size_t) dlen_check );
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200713}
Paul Bakker33b43f12013-08-20 11:48:36 +0200714/* END_CASE */