blob: 6d685438e1aa02939cdca75745eb4353e3dd5a30 [file] [log] [blame]
Manuel Pégourié-Gonnarda6916fa2014-05-02 15:17:29 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/ccm.h"
Manuel Pégourié-Gonnarda6916fa2014-05-02 15:17:29 +02003/* END_HEADER */
4
5/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006 * depends_on:MBEDTLS_CCM_C
Manuel Pégourié-Gonnarda6916fa2014-05-02 15:17:29 +02007 * END_DEPENDENCIES
8 */
9
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020010/* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST:MBEDTLS_AES_C */
11void mbedtls_ccm_self_test( )
Manuel Pégourié-Gonnarda6916fa2014-05-02 15:17:29 +020012{
Andres AG93012e82016-09-09 09:10:28 +010013 TEST_ASSERT( mbedtls_ccm_self_test( 1 ) == 0 );
Manuel Pégourié-Gonnarda6916fa2014-05-02 15:17:29 +020014}
15/* END_CASE */
Manuel Pégourié-Gonnard9fe0d132014-05-06 12:12:45 +020016
17/* BEGIN_CASE */
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +020018void mbedtls_ccm_setkey( int cipher_id, int key_size, int result )
Manuel Pégourié-Gonnard9fe0d132014-05-06 12:12:45 +020019{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020020 mbedtls_ccm_context ctx;
Manuel Pégourié-Gonnard9fe0d132014-05-06 12:12:45 +020021 unsigned char key[32];
22 int ret;
23
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +020024 mbedtls_ccm_init( &ctx );
25
Manuel Pégourié-Gonnard9fe0d132014-05-06 12:12:45 +020026 memset( key, 0x2A, sizeof( key ) );
27 TEST_ASSERT( (unsigned) key_size <= 8 * sizeof( key ) );
28
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +020029 ret = mbedtls_ccm_setkey( &ctx, cipher_id, key, key_size );
Manuel Pégourié-Gonnard9fe0d132014-05-06 12:12:45 +020030 TEST_ASSERT( ret == result );
31
Paul Bakkerbd51b262014-07-10 15:26:12 +020032exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020033 mbedtls_ccm_free( &ctx );
Manuel Pégourié-Gonnard9fe0d132014-05-06 12:12:45 +020034}
35/* END_CASE */
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +020036
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020037/* BEGIN_CASE depends_on:MBEDTLS_AES_C */
Manuel Pégourié-Gonnard87df5ba2014-05-06 18:07:24 +020038void ccm_lengths( int msg_len, int iv_len, int add_len, int tag_len, int res )
39{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020040 mbedtls_ccm_context ctx;
Manuel Pégourié-Gonnard87df5ba2014-05-06 18:07:24 +020041 unsigned char key[16];
42 unsigned char msg[10];
43 unsigned char iv[14];
44 unsigned char add[10];
45 unsigned char out[10];
46 unsigned char tag[18];
47 int decrypt_ret;
48
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +020049 mbedtls_ccm_init( &ctx );
50
Manuel Pégourié-Gonnard87df5ba2014-05-06 18:07:24 +020051 memset( key, 0, sizeof( key ) );
52 memset( msg, 0, sizeof( msg ) );
53 memset( iv, 0, sizeof( iv ) );
54 memset( add, 0, sizeof( add ) );
55 memset( out, 0, sizeof( out ) );
56 memset( tag, 0, sizeof( tag ) );
57
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +020058 TEST_ASSERT( mbedtls_ccm_setkey( &ctx, MBEDTLS_CIPHER_ID_AES,
Manuel Pégourié-Gonnard87df5ba2014-05-06 18:07:24 +020059 key, 8 * sizeof( key ) ) == 0 );
60
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020061 TEST_ASSERT( mbedtls_ccm_encrypt_and_tag( &ctx, msg_len, iv, iv_len, add, add_len,
Manuel Pégourié-Gonnard87df5ba2014-05-06 18:07:24 +020062 msg, out, tag, tag_len ) == res );
63
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020064 decrypt_ret = mbedtls_ccm_auth_decrypt( &ctx, msg_len, iv, iv_len, add, add_len,
Manuel Pégourié-Gonnard87df5ba2014-05-06 18:07:24 +020065 msg, out, tag, tag_len );
66
67 if( res == 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020068 TEST_ASSERT( decrypt_ret == MBEDTLS_ERR_CCM_AUTH_FAILED );
Manuel Pégourié-Gonnard87df5ba2014-05-06 18:07:24 +020069 else
70 TEST_ASSERT( decrypt_ret == res );
71
Paul Bakkerbd51b262014-07-10 15:26:12 +020072exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020073 mbedtls_ccm_free( &ctx );
Manuel Pégourié-Gonnard87df5ba2014-05-06 18:07:24 +020074}
75/* END_CASE */
76
Janos Follath95ab93d2018-05-14 14:32:41 +010077/* BEGIN_CASE depends_on:MBEDTLS_AES_C */
78void ccm_star_lengths( int msg_len, int iv_len, int add_len, int tag_len,
79 int res )
80{
81 mbedtls_ccm_context ctx;
82 unsigned char key[16];
83 unsigned char msg[10];
84 unsigned char iv[14];
85 unsigned char add[10];
86 unsigned char out[10];
87 unsigned char tag[18];
88 int decrypt_ret;
89
90 mbedtls_ccm_init( &ctx );
91
92 memset( key, 0, sizeof( key ) );
93 memset( msg, 0, sizeof( msg ) );
94 memset( iv, 0, sizeof( iv ) );
95 memset( add, 0, sizeof( add ) );
96 memset( out, 0, sizeof( out ) );
97 memset( tag, 0, sizeof( tag ) );
98
99 TEST_ASSERT( mbedtls_ccm_setkey( &ctx, MBEDTLS_CIPHER_ID_AES,
100 key, 8 * sizeof( key ) ) == 0 );
101
102 TEST_ASSERT( mbedtls_ccm_star_encrypt_and_tag( &ctx, msg_len, iv, iv_len,
103 add, add_len, msg, out, tag, tag_len ) == res );
104
105 decrypt_ret = mbedtls_ccm_star_auth_decrypt( &ctx, msg_len, iv, iv_len, add,
106 add_len, msg, out, tag, tag_len );
107
108 if( res == 0 && tag_len != 0 )
109 TEST_ASSERT( decrypt_ret == MBEDTLS_ERR_CCM_AUTH_FAILED );
110 else
111 TEST_ASSERT( decrypt_ret == res );
112
113exit:
114 mbedtls_ccm_free( &ctx );
115}
116/* END_CASE */
117
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +0200118/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200119void mbedtls_ccm_encrypt_and_tag( int cipher_id,
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +0200120 char *key_hex, char *msg_hex,
121 char *iv_hex, char *add_hex,
122 char *result_hex )
123{
Manuel Pégourié-Gonnarde8b8d012014-05-06 18:19:06 +0200124 unsigned char key[32];
125 unsigned char msg[50];
126 unsigned char iv[13];
127 unsigned char add[32];
Manuel Pégourié-Gonnarde8b8d012014-05-06 18:19:06 +0200128 unsigned char result[50];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200129 mbedtls_ccm_context ctx;
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +0200130 size_t key_len, msg_len, iv_len, add_len, tag_len, result_len;
131
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +0200132 mbedtls_ccm_init( &ctx );
133
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +0200134 memset( key, 0x00, sizeof( key ) );
135 memset( msg, 0x00, sizeof( msg ) );
136 memset( iv, 0x00, sizeof( iv ) );
137 memset( add, 0x00, sizeof( add ) );
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +0200138 memset( result, 0x00, sizeof( result ) );
139
140 key_len = unhexify( key, key_hex );
141 msg_len = unhexify( msg, msg_hex );
142 iv_len = unhexify( iv, iv_hex );
143 add_len = unhexify( add, add_hex );
144 result_len = unhexify( result, result_hex );
145 tag_len = result_len - msg_len;
146
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +0200147 TEST_ASSERT( mbedtls_ccm_setkey( &ctx, cipher_id, key, key_len * 8 ) == 0 );
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +0200148
Manuel Pégourié-Gonnard0f6b66d2014-05-07 14:43:46 +0200149 /* Test with input == output */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200150 TEST_ASSERT( mbedtls_ccm_encrypt_and_tag( &ctx, msg_len, iv, iv_len, add, add_len,
Manuel Pégourié-Gonnard0f6b66d2014-05-07 14:43:46 +0200151 msg, msg, msg + msg_len, tag_len ) == 0 );
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +0200152
Manuel Pégourié-Gonnard0f6b66d2014-05-07 14:43:46 +0200153 TEST_ASSERT( memcmp( msg, result, result_len ) == 0 );
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +0200154
155 /* Check we didn't write past the end */
Manuel Pégourié-Gonnard0f6b66d2014-05-07 14:43:46 +0200156 TEST_ASSERT( msg[result_len] == 0 && msg[result_len + 1] == 0 );
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +0200157
Paul Bakkerbd51b262014-07-10 15:26:12 +0200158exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200159 mbedtls_ccm_free( &ctx );
Manuel Pégourié-Gonnard637eb3d2014-05-06 12:13:09 +0200160}
161/* END_CASE */
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200162
163/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200164void mbedtls_ccm_auth_decrypt( int cipher_id,
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200165 char *key_hex, char *msg_hex,
166 char *iv_hex, char *add_hex,
167 int tag_len, char *result_hex )
168{
Manuel Pégourié-Gonnarde8b8d012014-05-06 18:19:06 +0200169 unsigned char key[32];
170 unsigned char msg[50];
171 unsigned char iv[13];
172 unsigned char add[32];
Manuel Pégourié-Gonnard0f6b66d2014-05-07 14:43:46 +0200173 unsigned char tag[16];
Manuel Pégourié-Gonnarde8b8d012014-05-06 18:19:06 +0200174 unsigned char result[50];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200175 mbedtls_ccm_context ctx;
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200176 size_t key_len, msg_len, iv_len, add_len, result_len;
177 int ret;
178
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +0200179 mbedtls_ccm_init( &ctx );
180
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200181 memset( key, 0x00, sizeof( key ) );
182 memset( msg, 0x00, sizeof( msg ) );
183 memset( iv, 0x00, sizeof( iv ) );
184 memset( add, 0x00, sizeof( add ) );
Manuel Pégourié-Gonnard0f6b66d2014-05-07 14:43:46 +0200185 memset( tag, 0x00, sizeof( tag ) );
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200186 memset( result, 0x00, sizeof( result ) );
187
188 key_len = unhexify( key, key_hex );
189 msg_len = unhexify( msg, msg_hex );
190 iv_len = unhexify( iv, iv_hex );
191 add_len = unhexify( add, add_hex );
192 msg_len -= tag_len;
Manuel Pégourié-Gonnard0f6b66d2014-05-07 14:43:46 +0200193 memcpy( tag, msg + msg_len, tag_len );
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200194
195 if( strcmp( "FAIL", result_hex ) == 0 )
196 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200197 ret = MBEDTLS_ERR_CCM_AUTH_FAILED;
Rich Evans63adb492015-02-10 12:44:07 +0000198 result_len = -1;
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200199 }
200 else
201 {
202 ret = 0;
203 result_len = unhexify( result, result_hex );
204 }
205
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +0200206 TEST_ASSERT( mbedtls_ccm_setkey( &ctx, cipher_id, key, key_len * 8 ) == 0 );
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200207
Manuel Pégourié-Gonnard0f6b66d2014-05-07 14:43:46 +0200208 /* Test with input == output */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200209 TEST_ASSERT( mbedtls_ccm_auth_decrypt( &ctx, msg_len, iv, iv_len, add, add_len,
Manuel Pégourié-Gonnard0f6b66d2014-05-07 14:43:46 +0200210 msg, msg, msg + msg_len, tag_len ) == ret );
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200211
212 if( ret == 0 )
213 {
Manuel Pégourié-Gonnard0f6b66d2014-05-07 14:43:46 +0200214 TEST_ASSERT( memcmp( msg, result, result_len ) == 0 );
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200215 }
216 else
217 {
218 size_t i;
219
220 for( i = 0; i < msg_len; i++ )
Manuel Pégourié-Gonnard0f6b66d2014-05-07 14:43:46 +0200221 TEST_ASSERT( msg[i] == 0 );
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200222 }
223
Manuel Pégourié-Gonnard0f6b66d2014-05-07 14:43:46 +0200224 /* Check we didn't write past the end (where the original tag is) */
225 TEST_ASSERT( memcmp( msg + msg_len, tag, tag_len ) == 0 );
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200226
Paul Bakkerbd51b262014-07-10 15:26:12 +0200227exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200228 mbedtls_ccm_free( &ctx );
Manuel Pégourié-Gonnardce77d552014-05-06 18:06:52 +0200229}
230/* END_CASE */