blob: 967a6a0a1c6670440dd740b2c973ca754a714e80 [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/cipher.h"
Manuel Pégourié-Gonnardf7ce67f2013-09-03 20:17:35 +02003
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004#if defined(MBEDTLS_GCM_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00005#include "mbedtls/gcm.h"
Manuel Pégourié-Gonnardf7ce67f2013-09-03 20:17:35 +02006#endif
Paul Bakker33b43f12013-08-20 11:48:36 +02007/* END_HEADER */
Paul Bakker8123e9d2011-01-06 15:37:30 +00008
Paul Bakker33b43f12013-08-20 11:48:36 +02009/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020010 * depends_on:MBEDTLS_CIPHER_C
Paul Bakker33b43f12013-08-20 11:48:36 +020011 * END_DEPENDENCIES
12 */
Paul Bakker5690efc2011-05-26 13:16:06 +000013
Paul Bakker33b43f12013-08-20 11:48:36 +020014/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020015void mbedtls_cipher_list( )
Manuel Pégourié-Gonnard66dfc5a2014-03-29 16:10:55 +010016{
17 const int *cipher_type;
18
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020019 for( cipher_type = mbedtls_cipher_list(); *cipher_type != 0; cipher_type++ )
20 TEST_ASSERT( mbedtls_cipher_info_from_type( *cipher_type ) != NULL );
Manuel Pégourié-Gonnard66dfc5a2014-03-29 16:10:55 +010021}
22/* END_CASE */
23
24/* BEGIN_CASE */
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020025void cipher_null_args( )
26{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020027 mbedtls_cipher_context_t ctx;
28 const mbedtls_cipher_info_t *info = mbedtls_cipher_info_from_type( *( mbedtls_cipher_list() ) );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020029 unsigned char buf[1] = { 0 };
30 size_t olen;
31
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020032 mbedtls_cipher_init( &ctx );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020033
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020034 TEST_ASSERT( mbedtls_cipher_get_block_size( NULL ) == 0 );
35 TEST_ASSERT( mbedtls_cipher_get_block_size( &ctx ) == 0 );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020036
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020037 TEST_ASSERT( mbedtls_cipher_get_cipher_mode( NULL ) == MBEDTLS_MODE_NONE );
38 TEST_ASSERT( mbedtls_cipher_get_cipher_mode( &ctx ) == MBEDTLS_MODE_NONE );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020039
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020040 TEST_ASSERT( mbedtls_cipher_get_iv_size( NULL ) == 0 );
41 TEST_ASSERT( mbedtls_cipher_get_iv_size( &ctx ) == 0 );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020042
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020043 TEST_ASSERT( mbedtls_cipher_info_from_string( NULL ) == NULL );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020044
Manuel Pégourié-Gonnard8473f872015-05-14 13:51:45 +020045 TEST_ASSERT( mbedtls_cipher_setup( &ctx, NULL )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020046 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard8473f872015-05-14 13:51:45 +020047 TEST_ASSERT( mbedtls_cipher_setup( NULL, info )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020048 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020049
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020050 TEST_ASSERT( mbedtls_cipher_setkey( NULL, buf, 0, MBEDTLS_ENCRYPT )
51 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
52 TEST_ASSERT( mbedtls_cipher_setkey( &ctx, buf, 0, MBEDTLS_ENCRYPT )
53 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020054
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020055 TEST_ASSERT( mbedtls_cipher_set_iv( NULL, buf, 0 )
56 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
57 TEST_ASSERT( mbedtls_cipher_set_iv( &ctx, buf, 0 )
58 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020059
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020060 TEST_ASSERT( mbedtls_cipher_reset( NULL ) == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
61 TEST_ASSERT( mbedtls_cipher_reset( &ctx ) == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020062
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020063#if defined(MBEDTLS_GCM_C)
64 TEST_ASSERT( mbedtls_cipher_update_ad( NULL, buf, 0 )
65 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
66 TEST_ASSERT( mbedtls_cipher_update_ad( &ctx, buf, 0 )
67 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020068#endif
69
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020070 TEST_ASSERT( mbedtls_cipher_update( NULL, buf, 0, buf, &olen )
71 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
72 TEST_ASSERT( mbedtls_cipher_update( &ctx, buf, 0, buf, &olen )
73 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020074
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020075 TEST_ASSERT( mbedtls_cipher_finish( NULL, buf, &olen )
76 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
77 TEST_ASSERT( mbedtls_cipher_finish( &ctx, buf, &olen )
78 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020079
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020080#if defined(MBEDTLS_GCM_C)
81 TEST_ASSERT( mbedtls_cipher_write_tag( NULL, buf, olen )
82 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
83 TEST_ASSERT( mbedtls_cipher_write_tag( &ctx, buf, olen )
84 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020085
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020086 TEST_ASSERT( mbedtls_cipher_check_tag( NULL, buf, olen )
87 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
88 TEST_ASSERT( mbedtls_cipher_check_tag( &ctx, buf, olen )
89 == MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard5e7693f2014-06-13 16:08:07 +020090#endif
91}
92/* END_CASE */
93
94/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +020095void enc_dec_buf( int cipher_id, char *cipher_string, int key_len,
96 int length_val, int pad_mode )
Paul Bakkerdbd443d2013-08-16 13:38:47 +020097{
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +020098 size_t length = length_val, outlen, total_len, i, block_size;
Paul Bakker8123e9d2011-01-06 15:37:30 +000099 unsigned char key[32];
100 unsigned char iv[16];
Manuel Pégourié-Gonnard9241be72013-08-31 17:31:03 +0200101 unsigned char ad[13];
102 unsigned char tag[16];
Manuel Pégourié-Gonnard1af50a22013-09-05 10:30:32 +0200103 unsigned char inbuf[64];
104 unsigned char encbuf[64];
105 unsigned char decbuf[64];
Paul Bakker8123e9d2011-01-06 15:37:30 +0000106
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200107 const mbedtls_cipher_info_t *cipher_info;
108 mbedtls_cipher_context_t ctx_dec;
109 mbedtls_cipher_context_t ctx_enc;
Paul Bakker8123e9d2011-01-06 15:37:30 +0000110
Manuel Pégourié-Gonnard1af50a22013-09-05 10:30:32 +0200111 /*
112 * Prepare contexts
113 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200114 mbedtls_cipher_init( &ctx_dec );
115 mbedtls_cipher_init( &ctx_enc );
Manuel Pégourié-Gonnard1af50a22013-09-05 10:30:32 +0200116
117 memset( key, 0x2a, sizeof( key ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000118
119 /* Check and get info structures */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200120 cipher_info = mbedtls_cipher_info_from_type( cipher_id );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000121 TEST_ASSERT( NULL != cipher_info );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200122 TEST_ASSERT( mbedtls_cipher_info_from_string( cipher_string ) == cipher_info );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000123
124 /* Initialise enc and dec contexts */
Manuel Pégourié-Gonnard8473f872015-05-14 13:51:45 +0200125 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx_dec, cipher_info ) );
126 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx_enc, cipher_info ) );
Manuel Pégourié-Gonnard1af50a22013-09-05 10:30:32 +0200127
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200128 TEST_ASSERT( 0 == mbedtls_cipher_setkey( &ctx_dec, key, key_len, MBEDTLS_DECRYPT ) );
129 TEST_ASSERT( 0 == mbedtls_cipher_setkey( &ctx_enc, key, key_len, MBEDTLS_ENCRYPT ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000130
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200131#if defined(MBEDTLS_CIPHER_MODE_WITH_PADDING)
Paul Bakker33b43f12013-08-20 11:48:36 +0200132 if( -1 != pad_mode )
Manuel Pégourié-Gonnard6c978992013-07-26 13:20:42 +0200133 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200134 TEST_ASSERT( 0 == mbedtls_cipher_set_padding_mode( &ctx_dec, pad_mode ) );
135 TEST_ASSERT( 0 == mbedtls_cipher_set_padding_mode( &ctx_enc, pad_mode ) );
Manuel Pégourié-Gonnard6c978992013-07-26 13:20:42 +0200136 }
Manuel Pégourié-Gonnard989ed382013-09-13 14:41:45 +0200137#else
138 (void) pad_mode;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200139#endif /* MBEDTLS_CIPHER_MODE_WITH_PADDING */
Manuel Pégourié-Gonnard6c978992013-07-26 13:20:42 +0200140
Manuel Pégourié-Gonnard1af50a22013-09-05 10:30:32 +0200141 /*
142 * Do a few encode/decode cycles
143 */
144 for( i = 0; i < 3; i++ )
145 {
146 memset( iv , 0x00 + i, sizeof( iv ) );
147 memset( ad, 0x10 + i, sizeof( ad ) );
148 memset( inbuf, 0x20 + i, sizeof( inbuf ) );
149
150 memset( encbuf, 0, sizeof( encbuf ) );
151 memset( decbuf, 0, sizeof( decbuf ) );
152 memset( tag, 0, sizeof( tag ) );
153
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200154 TEST_ASSERT( 0 == mbedtls_cipher_set_iv( &ctx_dec, iv, sizeof( iv ) ) );
155 TEST_ASSERT( 0 == mbedtls_cipher_set_iv( &ctx_enc, iv, sizeof( iv ) ) );
Manuel Pégourié-Gonnard9c853b92013-09-03 13:04:44 +0200156
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200157 TEST_ASSERT( 0 == mbedtls_cipher_reset( &ctx_dec ) );
158 TEST_ASSERT( 0 == mbedtls_cipher_reset( &ctx_enc ) );
Manuel Pégourié-Gonnard2adc40c2013-09-03 13:54:12 +0200159
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200160#if defined(MBEDTLS_GCM_C)
161 TEST_ASSERT( 0 == mbedtls_cipher_update_ad( &ctx_dec, ad, sizeof( ad ) - i ) );
162 TEST_ASSERT( 0 == mbedtls_cipher_update_ad( &ctx_enc, ad, sizeof( ad ) - i ) );
Manuel Pégourié-Gonnard8f625632014-06-24 15:26:28 +0200163#endif
Paul Bakker8123e9d2011-01-06 15:37:30 +0000164
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200165 block_size = mbedtls_cipher_get_block_size( &ctx_enc );
166 TEST_ASSERT( block_size != 0 );
167
Paul Bakker8123e9d2011-01-06 15:37:30 +0000168 /* encode length number of bytes from inbuf */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200169 TEST_ASSERT( 0 == mbedtls_cipher_update( &ctx_enc, inbuf, length, encbuf, &outlen ) );
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200170 total_len = outlen;
171
172 TEST_ASSERT( total_len == length ||
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200173 ( total_len % block_size == 0 &&
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200174 total_len < length &&
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200175 total_len + block_size > length ) );
Paul Bakker343a8702011-06-09 14:27:58 +0000176
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200177 TEST_ASSERT( 0 == mbedtls_cipher_finish( &ctx_enc, encbuf + outlen, &outlen ) );
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200178 total_len += outlen;
Paul Bakker343a8702011-06-09 14:27:58 +0000179
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200180#if defined(MBEDTLS_GCM_C)
181 TEST_ASSERT( 0 == mbedtls_cipher_write_tag( &ctx_enc, tag, sizeof( tag ) ) );
Manuel Pégourié-Gonnard8f625632014-06-24 15:26:28 +0200182#endif
Manuel Pégourié-Gonnardaa9ffc52013-09-03 16:19:22 +0200183
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200184 TEST_ASSERT( total_len == length ||
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200185 ( total_len % block_size == 0 &&
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200186 total_len > length &&
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200187 total_len <= length + block_size ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000188
189 /* decode the previously encoded string */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200190 TEST_ASSERT( 0 == mbedtls_cipher_update( &ctx_dec, encbuf, total_len, decbuf, &outlen ) );
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200191 total_len = outlen;
192
193 TEST_ASSERT( total_len == length ||
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200194 ( total_len % block_size == 0 &&
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200195 total_len < length &&
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200196 total_len + block_size >= length ) );
Paul Bakker343a8702011-06-09 14:27:58 +0000197
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200198 TEST_ASSERT( 0 == mbedtls_cipher_finish( &ctx_dec, decbuf + outlen, &outlen ) );
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200199 total_len += outlen;
Paul Bakker343a8702011-06-09 14:27:58 +0000200
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200201#if defined(MBEDTLS_GCM_C)
202 TEST_ASSERT( 0 == mbedtls_cipher_check_tag( &ctx_dec, tag, sizeof( tag ) ) );
Manuel Pégourié-Gonnard8f625632014-06-24 15:26:28 +0200203#endif
Manuel Pégourié-Gonnardaa9ffc52013-09-03 16:19:22 +0200204
Manuel Pégourié-Gonnard1af50a22013-09-05 10:30:32 +0200205 /* check result */
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200206 TEST_ASSERT( total_len == length );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000207 TEST_ASSERT( 0 == memcmp(inbuf, decbuf, length) );
Manuel Pégourié-Gonnard1af50a22013-09-05 10:30:32 +0200208 }
Paul Bakker8123e9d2011-01-06 15:37:30 +0000209
Manuel Pégourié-Gonnard1af50a22013-09-05 10:30:32 +0200210 /*
211 * Done
212 */
Paul Bakkerbd51b262014-07-10 15:26:12 +0200213exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200214 mbedtls_cipher_free( &ctx_dec );
215 mbedtls_cipher_free( &ctx_enc );
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200216}
Paul Bakker33b43f12013-08-20 11:48:36 +0200217/* END_CASE */
Paul Bakker8123e9d2011-01-06 15:37:30 +0000218
Paul Bakker33b43f12013-08-20 11:48:36 +0200219/* BEGIN_CASE */
220void enc_fail( int cipher_id, int pad_mode, int key_len,
221 int length_val, int ret )
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200222{
Paul Bakker33b43f12013-08-20 11:48:36 +0200223 size_t length = length_val;
Manuel Pégourié-Gonnardebdc4132013-07-26 16:50:44 +0200224 unsigned char key[32];
225 unsigned char iv[16];
226
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200227 const mbedtls_cipher_info_t *cipher_info;
228 mbedtls_cipher_context_t ctx;
Manuel Pégourié-Gonnardebdc4132013-07-26 16:50:44 +0200229
230 unsigned char inbuf[64];
231 unsigned char encbuf[64];
232
233 size_t outlen = 0;
234
235 memset( key, 0, 32 );
236 memset( iv , 0, 16 );
237
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200238 mbedtls_cipher_init( &ctx );
Manuel Pégourié-Gonnardebdc4132013-07-26 16:50:44 +0200239
240 memset( inbuf, 5, 64 );
241 memset( encbuf, 0, 64 );
242
243 /* Check and get info structures */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200244 cipher_info = mbedtls_cipher_info_from_type( cipher_id );
Manuel Pégourié-Gonnardebdc4132013-07-26 16:50:44 +0200245 TEST_ASSERT( NULL != cipher_info );
246
247 /* Initialise context */
Manuel Pégourié-Gonnard8473f872015-05-14 13:51:45 +0200248 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx, cipher_info ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200249 TEST_ASSERT( 0 == mbedtls_cipher_setkey( &ctx, key, key_len, MBEDTLS_ENCRYPT ) );
250#if defined(MBEDTLS_CIPHER_MODE_WITH_PADDING)
251 TEST_ASSERT( 0 == mbedtls_cipher_set_padding_mode( &ctx, pad_mode ) );
Manuel Pégourié-Gonnard989ed382013-09-13 14:41:45 +0200252#else
253 (void) pad_mode;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200254#endif /* MBEDTLS_CIPHER_MODE_WITH_PADDING */
255 TEST_ASSERT( 0 == mbedtls_cipher_set_iv( &ctx, iv, 16 ) );
256 TEST_ASSERT( 0 == mbedtls_cipher_reset( &ctx ) );
257#if defined(MBEDTLS_GCM_C)
258 TEST_ASSERT( 0 == mbedtls_cipher_update_ad( &ctx, NULL, 0 ) );
Manuel Pégourié-Gonnard8f625632014-06-24 15:26:28 +0200259#endif
Manuel Pégourié-Gonnardebdc4132013-07-26 16:50:44 +0200260
261 /* encode length number of bytes from inbuf */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200262 TEST_ASSERT( 0 == mbedtls_cipher_update( &ctx, inbuf, length, encbuf, &outlen ) );
263 TEST_ASSERT( ret == mbedtls_cipher_finish( &ctx, encbuf + outlen, &outlen ) );
Manuel Pégourié-Gonnardebdc4132013-07-26 16:50:44 +0200264
265 /* done */
Paul Bakkerbd51b262014-07-10 15:26:12 +0200266exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200267 mbedtls_cipher_free( &ctx );
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200268}
Paul Bakker33b43f12013-08-20 11:48:36 +0200269/* END_CASE */
Manuel Pégourié-Gonnardebdc4132013-07-26 16:50:44 +0200270
Paul Bakker33b43f12013-08-20 11:48:36 +0200271/* BEGIN_CASE */
272void dec_empty_buf()
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200273{
Paul Bakker8123e9d2011-01-06 15:37:30 +0000274 unsigned char key[32];
275 unsigned char iv[16];
276
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200277 mbedtls_cipher_context_t ctx_dec;
278 const mbedtls_cipher_info_t *cipher_info;
Paul Bakker8123e9d2011-01-06 15:37:30 +0000279
280 unsigned char encbuf[64];
281 unsigned char decbuf[64];
282
Paul Bakkerf4a3f302011-04-24 15:53:29 +0000283 size_t outlen = 0;
Paul Bakker8123e9d2011-01-06 15:37:30 +0000284
285 memset( key, 0, 32 );
286 memset( iv , 0, 16 );
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200287
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200288 mbedtls_cipher_init( &ctx_dec );
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200289
Paul Bakker8123e9d2011-01-06 15:37:30 +0000290 memset( encbuf, 0, 64 );
291 memset( decbuf, 0, 64 );
292
Manuel Pégourié-Gonnard9c853b92013-09-03 13:04:44 +0200293 /* Initialise context */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200294 cipher_info = mbedtls_cipher_info_from_type( MBEDTLS_CIPHER_AES_128_CBC );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000295 TEST_ASSERT( NULL != cipher_info);
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200296
Manuel Pégourié-Gonnard8473f872015-05-14 13:51:45 +0200297 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx_dec, cipher_info ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000298
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200299 TEST_ASSERT( 0 == mbedtls_cipher_setkey( &ctx_dec, key, 128, MBEDTLS_DECRYPT ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000300
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200301 TEST_ASSERT( 0 == mbedtls_cipher_set_iv( &ctx_dec, iv, 16 ) );
Manuel Pégourié-Gonnard9c853b92013-09-03 13:04:44 +0200302
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200303 TEST_ASSERT( 0 == mbedtls_cipher_reset( &ctx_dec ) );
Manuel Pégourié-Gonnard2adc40c2013-09-03 13:54:12 +0200304
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200305#if defined(MBEDTLS_GCM_C)
306 TEST_ASSERT( 0 == mbedtls_cipher_update_ad( &ctx_dec, NULL, 0 ) );
Manuel Pégourié-Gonnard8f625632014-06-24 15:26:28 +0200307#endif
Paul Bakker8123e9d2011-01-06 15:37:30 +0000308
309 /* decode 0-byte string */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200310 TEST_ASSERT( 0 == mbedtls_cipher_update( &ctx_dec, encbuf, 0, decbuf, &outlen ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000311 TEST_ASSERT( 0 == outlen );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200312 TEST_ASSERT( MBEDTLS_ERR_CIPHER_FULL_BLOCK_EXPECTED == mbedtls_cipher_finish(
Manuel Pégourié-Gonnardaa9ffc52013-09-03 16:19:22 +0200313 &ctx_dec, decbuf + outlen, &outlen ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000314 TEST_ASSERT( 0 == outlen );
315
Paul Bakkerbd51b262014-07-10 15:26:12 +0200316exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200317 mbedtls_cipher_free( &ctx_dec );
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200318}
Paul Bakker33b43f12013-08-20 11:48:36 +0200319/* END_CASE */
Paul Bakker8123e9d2011-01-06 15:37:30 +0000320
Paul Bakker33b43f12013-08-20 11:48:36 +0200321/* BEGIN_CASE */
322void enc_dec_buf_multipart( int cipher_id, int key_len, int first_length_val,
323 int second_length_val )
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200324{
Paul Bakker33b43f12013-08-20 11:48:36 +0200325 size_t first_length = first_length_val;
326 size_t second_length = second_length_val;
Paul Bakker23986e52011-04-24 08:57:21 +0000327 size_t length = first_length + second_length;
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200328 size_t block_size;
Paul Bakker8123e9d2011-01-06 15:37:30 +0000329 unsigned char key[32];
330 unsigned char iv[16];
331
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200332 mbedtls_cipher_context_t ctx_dec;
333 mbedtls_cipher_context_t ctx_enc;
334 const mbedtls_cipher_info_t *cipher_info;
Paul Bakker8123e9d2011-01-06 15:37:30 +0000335
336 unsigned char inbuf[64];
337 unsigned char encbuf[64];
338 unsigned char decbuf[64];
339
Paul Bakker23986e52011-04-24 08:57:21 +0000340 size_t outlen = 0;
341 size_t totaloutlen = 0;
Paul Bakker8123e9d2011-01-06 15:37:30 +0000342
343 memset( key, 0, 32 );
344 memset( iv , 0, 16 );
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200345
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200346 mbedtls_cipher_init( &ctx_dec );
347 mbedtls_cipher_init( &ctx_enc );
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200348
Paul Bakker8123e9d2011-01-06 15:37:30 +0000349 memset( inbuf, 5, 64 );
350 memset( encbuf, 0, 64 );
351 memset( decbuf, 0, 64 );
352
353 /* Initialise enc and dec contexts */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200354 cipher_info = mbedtls_cipher_info_from_type( cipher_id );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000355 TEST_ASSERT( NULL != cipher_info);
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200356
Manuel Pégourié-Gonnard8473f872015-05-14 13:51:45 +0200357 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx_dec, cipher_info ) );
358 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx_enc, cipher_info ) );
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200359
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200360 TEST_ASSERT( 0 == mbedtls_cipher_setkey( &ctx_dec, key, key_len, MBEDTLS_DECRYPT ) );
361 TEST_ASSERT( 0 == mbedtls_cipher_setkey( &ctx_enc, key, key_len, MBEDTLS_ENCRYPT ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000362
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200363 TEST_ASSERT( 0 == mbedtls_cipher_set_iv( &ctx_dec, iv, 16 ) );
364 TEST_ASSERT( 0 == mbedtls_cipher_set_iv( &ctx_enc, iv, 16 ) );
Manuel Pégourié-Gonnard9c853b92013-09-03 13:04:44 +0200365
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200366 TEST_ASSERT( 0 == mbedtls_cipher_reset( &ctx_dec ) );
367 TEST_ASSERT( 0 == mbedtls_cipher_reset( &ctx_enc ) );
Manuel Pégourié-Gonnard2adc40c2013-09-03 13:54:12 +0200368
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200369#if defined(MBEDTLS_GCM_C)
370 TEST_ASSERT( 0 == mbedtls_cipher_update_ad( &ctx_dec, NULL, 0 ) );
371 TEST_ASSERT( 0 == mbedtls_cipher_update_ad( &ctx_enc, NULL, 0 ) );
Manuel Pégourié-Gonnard8f625632014-06-24 15:26:28 +0200372#endif
Paul Bakker8123e9d2011-01-06 15:37:30 +0000373
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200374 block_size = mbedtls_cipher_get_block_size( &ctx_enc );
375 TEST_ASSERT( block_size != 0 );
376
Paul Bakker8123e9d2011-01-06 15:37:30 +0000377 /* encode length number of bytes from inbuf */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200378 TEST_ASSERT( 0 == mbedtls_cipher_update( &ctx_enc, inbuf, first_length, encbuf, &outlen ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000379 totaloutlen = outlen;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200380 TEST_ASSERT( 0 == mbedtls_cipher_update( &ctx_enc, inbuf + first_length, second_length, encbuf + totaloutlen, &outlen ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000381 totaloutlen += outlen;
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200382 TEST_ASSERT( totaloutlen == length ||
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200383 ( totaloutlen % block_size == 0 &&
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200384 totaloutlen < length &&
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200385 totaloutlen + block_size > length ) );
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200386
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200387 TEST_ASSERT( 0 == mbedtls_cipher_finish( &ctx_enc, encbuf + totaloutlen, &outlen ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000388 totaloutlen += outlen;
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200389 TEST_ASSERT( totaloutlen == length ||
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200390 ( totaloutlen % block_size == 0 &&
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200391 totaloutlen > length &&
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200392 totaloutlen <= length + block_size ) );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000393
394 /* decode the previously encoded string */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200395 TEST_ASSERT( 0 == mbedtls_cipher_update( &ctx_dec, encbuf, totaloutlen, decbuf, &outlen ) );
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200396 totaloutlen = outlen;
397
398 TEST_ASSERT( totaloutlen == length ||
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200399 ( totaloutlen % block_size == 0 &&
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200400 totaloutlen < length &&
Manuel Pégourié-Gonnardac5361f2015-06-24 01:08:09 +0200401 totaloutlen + block_size >= length ) );
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200402
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200403 TEST_ASSERT( 0 == mbedtls_cipher_finish( &ctx_dec, decbuf + outlen, &outlen ) );
Manuel Pégourié-Gonnard725680f2013-07-25 15:26:54 +0200404 totaloutlen += outlen;
405
406 TEST_ASSERT( totaloutlen == length );
Paul Bakker8123e9d2011-01-06 15:37:30 +0000407
408 TEST_ASSERT( 0 == memcmp(inbuf, decbuf, length) );
409
Paul Bakkerbd51b262014-07-10 15:26:12 +0200410exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200411 mbedtls_cipher_free( &ctx_dec );
412 mbedtls_cipher_free( &ctx_enc );
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200413}
Paul Bakker33b43f12013-08-20 11:48:36 +0200414/* END_CASE */
Paul Bakker8123e9d2011-01-06 15:37:30 +0000415
Paul Bakker33b43f12013-08-20 11:48:36 +0200416/* BEGIN_CASE */
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200417void decrypt_test_vec( int cipher_id, int pad_mode,
418 char *hex_key, char *hex_iv,
419 char *hex_cipher, char *hex_clear,
420 char *hex_ad, char *hex_tag,
421 int finish_result, int tag_result )
422{
Manuel Pégourié-Gonnardf7ce67f2013-09-03 20:17:35 +0200423 unsigned char key[50];
424 unsigned char iv[50];
425 unsigned char cipher[200];
426 unsigned char clear[200];
427 unsigned char ad[200];
428 unsigned char tag[20];
Manuel Pégourié-Gonnarda7496f02013-09-20 11:29:59 +0200429 size_t key_len, iv_len, cipher_len, clear_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200430#if defined(MBEDTLS_GCM_C)
Manuel Pégourié-Gonnarda7496f02013-09-20 11:29:59 +0200431 size_t ad_len, tag_len;
432#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200433 mbedtls_cipher_context_t ctx;
Manuel Pégourié-Gonnardf7ce67f2013-09-03 20:17:35 +0200434 unsigned char output[200];
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200435 size_t outlen, total_len;
436
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200437 mbedtls_cipher_init( &ctx );
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200438
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200439 memset( key, 0x00, sizeof( key ) );
440 memset( iv, 0x00, sizeof( iv ) );
441 memset( cipher, 0x00, sizeof( cipher ) );
442 memset( clear, 0x00, sizeof( clear ) );
443 memset( ad, 0x00, sizeof( ad ) );
444 memset( tag, 0x00, sizeof( tag ) );
445 memset( output, 0x00, sizeof( output ) );
446
447 key_len = unhexify( key, hex_key );
448 iv_len = unhexify( iv, hex_iv );
449 cipher_len = unhexify( cipher, hex_cipher );
450 clear_len = unhexify( clear, hex_clear );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200451#if defined(MBEDTLS_GCM_C)
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200452 ad_len = unhexify( ad, hex_ad );
453 tag_len = unhexify( tag, hex_tag );
Manuel Pégourié-Gonnarda7496f02013-09-20 11:29:59 +0200454#else
455 ((void) hex_ad);
456 ((void) hex_tag);
457#endif
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200458
459 /* Prepare context */
Manuel Pégourié-Gonnard8473f872015-05-14 13:51:45 +0200460 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200461 mbedtls_cipher_info_from_type( cipher_id ) ) );
462 TEST_ASSERT( 0 == mbedtls_cipher_setkey( &ctx, key, 8 * key_len, MBEDTLS_DECRYPT ) );
463#if defined(MBEDTLS_CIPHER_MODE_WITH_PADDING)
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200464 if( pad_mode != -1 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200465 TEST_ASSERT( 0 == mbedtls_cipher_set_padding_mode( &ctx, pad_mode ) );
Manuel Pégourié-Gonnard989ed382013-09-13 14:41:45 +0200466#else
467 (void) pad_mode;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200468#endif /* MBEDTLS_CIPHER_MODE_WITH_PADDING */
469 TEST_ASSERT( 0 == mbedtls_cipher_set_iv( &ctx, iv, iv_len ) );
470 TEST_ASSERT( 0 == mbedtls_cipher_reset( &ctx ) );
471#if defined(MBEDTLS_GCM_C)
472 TEST_ASSERT( 0 == mbedtls_cipher_update_ad( &ctx, ad, ad_len ) );
Manuel Pégourié-Gonnard8f625632014-06-24 15:26:28 +0200473#endif
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200474
475 /* decode buffer and check tag */
476 total_len = 0;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200477 TEST_ASSERT( 0 == mbedtls_cipher_update( &ctx, cipher, cipher_len, output, &outlen ) );
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200478 total_len += outlen;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200479 TEST_ASSERT( finish_result == mbedtls_cipher_finish( &ctx, output + outlen,
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200480 &outlen ) );
481 total_len += outlen;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200482#if defined(MBEDTLS_GCM_C)
483 TEST_ASSERT( tag_result == mbedtls_cipher_check_tag( &ctx, tag, tag_len ) );
Manuel Pégourié-Gonnard8f625632014-06-24 15:26:28 +0200484#endif
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200485
486 /* check plaintext only if everything went fine */
487 if( 0 == finish_result && 0 == tag_result )
488 {
489 TEST_ASSERT( total_len == clear_len );
490 TEST_ASSERT( 0 == memcmp( output, clear, clear_len ) );
491 }
492
Paul Bakkerbd51b262014-07-10 15:26:12 +0200493exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200494 mbedtls_cipher_free( &ctx );
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200495}
496/* END_CASE */
497
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200498/* BEGIN_CASE depends_on:MBEDTLS_CIPHER_MODE_AEAD */
Manuel Pégourié-Gonnard542eac52014-05-15 16:03:07 +0200499void auth_crypt_tv( int cipher_id, char *hex_key, char *hex_iv,
500 char *hex_ad, char *hex_cipher,
501 char *hex_tag, char *hex_clear )
502{
503 int ret;
504 unsigned char key[50];
505 unsigned char iv[50];
506 unsigned char cipher[200];
507 unsigned char clear[200];
508 unsigned char ad[200];
509 unsigned char tag[20];
510 unsigned char my_tag[20];
511 size_t key_len, iv_len, cipher_len, clear_len, ad_len, tag_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200512 mbedtls_cipher_context_t ctx;
Manuel Pégourié-Gonnard542eac52014-05-15 16:03:07 +0200513 unsigned char output[200];
514 size_t outlen;
515
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200516 mbedtls_cipher_init( &ctx );
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200517
Manuel Pégourié-Gonnard542eac52014-05-15 16:03:07 +0200518 memset( key, 0x00, sizeof( key ) );
519 memset( iv, 0x00, sizeof( iv ) );
520 memset( cipher, 0x00, sizeof( cipher ) );
521 memset( clear, 0x00, sizeof( clear ) );
522 memset( ad, 0x00, sizeof( ad ) );
523 memset( tag, 0x00, sizeof( tag ) );
524 memset( my_tag, 0xFF, sizeof( my_tag ) );
525 memset( output, 0xFF, sizeof( output ) );
526
527 key_len = unhexify( key, hex_key );
528 iv_len = unhexify( iv, hex_iv );
529 cipher_len = unhexify( cipher, hex_cipher );
530 ad_len = unhexify( ad, hex_ad );
531 tag_len = unhexify( tag, hex_tag );
532
533 /* Prepare context */
Manuel Pégourié-Gonnard8473f872015-05-14 13:51:45 +0200534 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200535 mbedtls_cipher_info_from_type( cipher_id ) ) );
536 TEST_ASSERT( 0 == mbedtls_cipher_setkey( &ctx, key, 8 * key_len, MBEDTLS_DECRYPT ) );
Manuel Pégourié-Gonnard542eac52014-05-15 16:03:07 +0200537
538 /* decode buffer and check tag */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200539 ret = mbedtls_cipher_auth_decrypt( &ctx, iv, iv_len, ad, ad_len,
Manuel Pégourié-Gonnard542eac52014-05-15 16:03:07 +0200540 cipher, cipher_len, output, &outlen,
541 tag, tag_len );
542
543 /* make sure we didn't overwrite */
544 TEST_ASSERT( output[outlen + 0] == 0xFF );
545 TEST_ASSERT( output[outlen + 1] == 0xFF );
546
547 /* make sure the message is rejected if it should be */
548 if( strcmp( hex_clear, "FAIL" ) == 0 )
549 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200550 TEST_ASSERT( ret == MBEDTLS_ERR_CIPHER_AUTH_FAILED );
Paul Bakkerbd51b262014-07-10 15:26:12 +0200551 goto exit;
Manuel Pégourié-Gonnard542eac52014-05-15 16:03:07 +0200552 }
553
554 /* otherwise, make sure it was decrypted properly */
555 TEST_ASSERT( ret == 0 );
556
557 clear_len = unhexify( clear, hex_clear );
558 TEST_ASSERT( outlen == clear_len );
559 TEST_ASSERT( memcmp( output, clear, clear_len ) == 0 );
560
561 /* then encrypt the clear and make sure we get the same ciphertext and tag */
562 memset( output, 0xFF, sizeof( output ) );
563 outlen = 0;
564
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200565 ret = mbedtls_cipher_auth_encrypt( &ctx, iv, iv_len, ad, ad_len,
Manuel Pégourié-Gonnard542eac52014-05-15 16:03:07 +0200566 clear, clear_len, output, &outlen,
567 my_tag, tag_len );
568 TEST_ASSERT( ret == 0 );
569
570 TEST_ASSERT( outlen == clear_len );
571 TEST_ASSERT( memcmp( output, cipher, clear_len ) == 0 );
572 TEST_ASSERT( memcmp( my_tag, tag, tag_len ) == 0 );
573
574 /* make sure we didn't overwrite */
575 TEST_ASSERT( output[outlen + 0] == 0xFF );
576 TEST_ASSERT( output[outlen + 1] == 0xFF );
577 TEST_ASSERT( my_tag[tag_len + 0] == 0xFF );
578 TEST_ASSERT( my_tag[tag_len + 1] == 0xFF );
579
580
Paul Bakkerbd51b262014-07-10 15:26:12 +0200581exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200582 mbedtls_cipher_free( &ctx );
Manuel Pégourié-Gonnard542eac52014-05-15 16:03:07 +0200583}
584/* END_CASE */
585
Manuel Pégourié-Gonnard8eccab52013-09-03 18:31:25 +0200586/* BEGIN_CASE */
Paul Bakker5e0efa72013-09-08 23:04:04 +0200587void test_vec_ecb( int cipher_id, int operation, char *hex_key,
588 char *hex_input, char *hex_result,
589 int finish_result )
590{
591 unsigned char key[50];
592 unsigned char input[16];
593 unsigned char result[16];
594 size_t key_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200595 mbedtls_cipher_context_t ctx;
Paul Bakker5e0efa72013-09-08 23:04:04 +0200596 unsigned char output[32];
597 size_t outlen;
598
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200599 mbedtls_cipher_init( &ctx );
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200600
Paul Bakker5e0efa72013-09-08 23:04:04 +0200601 memset( key, 0x00, sizeof( key ) );
602 memset( input, 0x00, sizeof( input ) );
603 memset( result, 0x00, sizeof( result ) );
604 memset( output, 0x00, sizeof( output ) );
605
606 /* Prepare context */
Manuel Pégourié-Gonnard8473f872015-05-14 13:51:45 +0200607 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200608 mbedtls_cipher_info_from_type( cipher_id ) ) );
Paul Bakker5e0efa72013-09-08 23:04:04 +0200609
610 key_len = unhexify( key, hex_key );
611 TEST_ASSERT( unhexify( input, hex_input ) ==
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200612 (int) mbedtls_cipher_get_block_size( &ctx ) );
Paul Bakker5e0efa72013-09-08 23:04:04 +0200613 TEST_ASSERT( unhexify( result, hex_result ) ==
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200614 (int) mbedtls_cipher_get_block_size( &ctx ) );
Paul Bakker5e0efa72013-09-08 23:04:04 +0200615
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200616 TEST_ASSERT( 0 == mbedtls_cipher_setkey( &ctx, key, 8 * key_len, operation ) );
Paul Bakker5e0efa72013-09-08 23:04:04 +0200617
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200618 TEST_ASSERT( 0 == mbedtls_cipher_update( &ctx, input,
619 mbedtls_cipher_get_block_size( &ctx ),
Paul Bakker5e0efa72013-09-08 23:04:04 +0200620 output, &outlen ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200621 TEST_ASSERT( outlen == mbedtls_cipher_get_block_size( &ctx ) );
622 TEST_ASSERT( finish_result == mbedtls_cipher_finish( &ctx, output + outlen,
Paul Bakker5e0efa72013-09-08 23:04:04 +0200623 &outlen ) );
624 TEST_ASSERT( 0 == outlen );
625
626 /* check plaintext only if everything went fine */
627 if( 0 == finish_result )
628 TEST_ASSERT( 0 == memcmp( output, result,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200629 mbedtls_cipher_get_block_size( &ctx ) ) );
Paul Bakker5e0efa72013-09-08 23:04:04 +0200630
Paul Bakkerbd51b262014-07-10 15:26:12 +0200631exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200632 mbedtls_cipher_free( &ctx );
Paul Bakker5e0efa72013-09-08 23:04:04 +0200633}
634/* END_CASE */
635
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200636/* BEGIN_CASE depends_on:MBEDTLS_CIPHER_MODE_WITH_PADDING */
Paul Bakker33b43f12013-08-20 11:48:36 +0200637void set_padding( int cipher_id, int pad_mode, int ret )
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200638{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200639 const mbedtls_cipher_info_t *cipher_info;
640 mbedtls_cipher_context_t ctx;
Manuel Pégourié-Gonnardd5fdcaf2013-07-24 18:05:00 +0200641
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200642 mbedtls_cipher_init( &ctx );
Paul Bakkerd2a2d612014-07-01 15:45:49 +0200643
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200644 cipher_info = mbedtls_cipher_info_from_type( cipher_id );
Manuel Pégourié-Gonnardd5fdcaf2013-07-24 18:05:00 +0200645 TEST_ASSERT( NULL != cipher_info );
Manuel Pégourié-Gonnard8473f872015-05-14 13:51:45 +0200646 TEST_ASSERT( 0 == mbedtls_cipher_setup( &ctx, cipher_info ) );
Manuel Pégourié-Gonnardd5fdcaf2013-07-24 18:05:00 +0200647
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200648 TEST_ASSERT( ret == mbedtls_cipher_set_padding_mode( &ctx, pad_mode ) );
Manuel Pégourié-Gonnardd5fdcaf2013-07-24 18:05:00 +0200649
Paul Bakkerbd51b262014-07-10 15:26:12 +0200650exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200651 mbedtls_cipher_free( &ctx );
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200652}
Paul Bakker33b43f12013-08-20 11:48:36 +0200653/* END_CASE */
Paul Bakker8123e9d2011-01-06 15:37:30 +0000654
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200655/* BEGIN_CASE depends_on:MBEDTLS_CIPHER_MODE_CBC */
Paul Bakker33b43f12013-08-20 11:48:36 +0200656void check_padding( int pad_mode, char *input_str, int ret, int dlen_check )
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200657{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200658 mbedtls_cipher_info_t cipher_info;
659 mbedtls_cipher_context_t ctx;
Manuel Pégourié-Gonnarda6408492013-07-26 10:55:02 +0200660 unsigned char input[16];
661 size_t ilen, dlen;
662
663 /* build a fake context just for getting access to get_padding */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200664 mbedtls_cipher_init( &ctx );
665 cipher_info.mode = MBEDTLS_MODE_CBC;
Manuel Pégourié-Gonnarda6408492013-07-26 10:55:02 +0200666 ctx.cipher_info = &cipher_info;
667
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200668 TEST_ASSERT( 0 == mbedtls_cipher_set_padding_mode( &ctx, pad_mode ) );
Manuel Pégourié-Gonnarda6408492013-07-26 10:55:02 +0200669
Paul Bakker33b43f12013-08-20 11:48:36 +0200670 ilen = unhexify( input, input_str );
Manuel Pégourié-Gonnarda6408492013-07-26 10:55:02 +0200671
Paul Bakker33b43f12013-08-20 11:48:36 +0200672 TEST_ASSERT( ret == ctx.get_padding( input, ilen, &dlen ) );
673 if( 0 == ret )
674 TEST_ASSERT( dlen == (size_t) dlen_check );
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200675}
Paul Bakker33b43f12013-08-20 11:48:36 +0200676/* END_CASE */