1 /* Copyright (c) 2015, Google Inc.
2 *
3 * Permission to use, copy, modify, and/or distribute this software for any
4 * purpose with or without fee is hereby granted, provided that the above
5 * copyright notice and this permission notice appear in all copies.
6 *
7 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
8 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
9 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
10 * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
11 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
12 * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
13 * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
14
15 #include <stdio.h>
16
17 #include <algorithm>
18
19 #include <gtest/gtest.h>
20
21 #include <openssl/cipher.h>
22 #include <openssl/cmac.h>
23 #include <openssl/mem.h>
24
25 #include "../test/test_util.h"
26
27
test(const char * name,const uint8_t * key,size_t key_len,const uint8_t * msg,size_t msg_len,const uint8_t * expected)28 static void test(const char *name, const uint8_t *key, size_t key_len,
29 const uint8_t *msg, size_t msg_len, const uint8_t *expected) {
30 SCOPED_TRACE(name);
31
32 // Test the single-shot API.
33 uint8_t out[16];
34 ASSERT_TRUE(AES_CMAC(out, key, key_len, msg, msg_len));
35 EXPECT_EQ(Bytes(expected, sizeof(out)), Bytes(out));
36
37 bssl::UniquePtr<CMAC_CTX> ctx(CMAC_CTX_new());
38 ASSERT_TRUE(ctx);
39 ASSERT_TRUE(CMAC_Init(ctx.get(), key, key_len, EVP_aes_128_cbc(), NULL));
40
41 for (unsigned chunk_size = 1; chunk_size <= msg_len; chunk_size++) {
42 SCOPED_TRACE(chunk_size);
43
44 ASSERT_TRUE(CMAC_Reset(ctx.get()));
45
46 size_t done = 0;
47 while (done < msg_len) {
48 size_t todo = std::min(msg_len - done, static_cast<size_t>(chunk_size));
49 ASSERT_TRUE(CMAC_Update(ctx.get(), msg + done, todo));
50 done += todo;
51 }
52
53 size_t out_len;
54 ASSERT_TRUE(CMAC_Final(ctx.get(), out, &out_len));
55 EXPECT_EQ(Bytes(expected, sizeof(out)), Bytes(out, out_len));
56 }
57 }
58
TEST(CMACTest,RFC4493TestVectors)59 TEST(CMACTest, RFC4493TestVectors) {
60 static const uint8_t kKey[16] = {
61 0x2b, 0x7e, 0x15, 0x16, 0x28, 0xae, 0xd2, 0xa6,
62 0xab, 0xf7, 0x15, 0x88, 0x09, 0xcf, 0x4f, 0x3c,
63 };
64 static const uint8_t kOut1[16] = {
65 0xbb, 0x1d, 0x69, 0x29, 0xe9, 0x59, 0x37, 0x28,
66 0x7f, 0xa3, 0x7d, 0x12, 0x9b, 0x75, 0x67, 0x46,
67 };
68 static const uint8_t kMsg2[] = {
69 0x6b, 0xc1, 0xbe, 0xe2, 0x2e, 0x40, 0x9f, 0x96,
70 0xe9, 0x3d, 0x7e, 0x11, 0x73, 0x93, 0x17, 0x2a,
71 };
72 static const uint8_t kOut2[16] = {
73 0x07, 0x0a, 0x16, 0xb4, 0x6b, 0x4d, 0x41, 0x44,
74 0xf7, 0x9b, 0xdd, 0x9d, 0xd0, 0x4a, 0x28, 0x7c,
75 };
76 static const uint8_t kMsg3[] = {
77 0x6b, 0xc1, 0xbe, 0xe2, 0x2e, 0x40, 0x9f, 0x96,
78 0xe9, 0x3d, 0x7e, 0x11, 0x73, 0x93, 0x17, 0x2a,
79 0xae, 0x2d, 0x8a, 0x57, 0x1e, 0x03, 0xac, 0x9c,
80 0x9e, 0xb7, 0x6f, 0xac, 0x45, 0xaf, 0x8e, 0x51,
81 0x30, 0xc8, 0x1c, 0x46, 0xa3, 0x5c, 0xe4, 0x11,
82 };
83 static const uint8_t kOut3[16] = {
84 0xdf, 0xa6, 0x67, 0x47, 0xde, 0x9a, 0xe6, 0x30,
85 0x30, 0xca, 0x32, 0x61, 0x14, 0x97, 0xc8, 0x27,
86 };
87 static const uint8_t kMsg4[] = {
88 0x6b, 0xc1, 0xbe, 0xe2, 0x2e, 0x40, 0x9f, 0x96,
89 0xe9, 0x3d, 0x7e, 0x11, 0x73, 0x93, 0x17, 0x2a,
90 0xae, 0x2d, 0x8a, 0x57, 0x1e, 0x03, 0xac, 0x9c,
91 0x9e, 0xb7, 0x6f, 0xac, 0x45, 0xaf, 0x8e, 0x51,
92 0x30, 0xc8, 0x1c, 0x46, 0xa3, 0x5c, 0xe4, 0x11,
93 0xe5, 0xfb, 0xc1, 0x19, 0x1a, 0x0a, 0x52, 0xef,
94 0xf6, 0x9f, 0x24, 0x45, 0xdf, 0x4f, 0x9b, 0x17,
95 0xad, 0x2b, 0x41, 0x7b, 0xe6, 0x6c, 0x37, 0x10,
96 };
97 static const uint8_t kOut4[16] = {
98 0x51, 0xf0, 0xbe, 0xbf, 0x7e, 0x3b, 0x9d, 0x92,
99 0xfc, 0x49, 0x74, 0x17, 0x79, 0x36, 0x3c, 0xfe,
100 };
101
102 test("RFC 4493 #1", kKey, sizeof(kKey), NULL, 0, kOut1);
103 test("RFC 4493 #2", kKey, sizeof(kKey), kMsg2, sizeof(kMsg2), kOut2);
104 test("RFC 4493 #3", kKey, sizeof(kKey), kMsg3, sizeof(kMsg3), kOut3);
105 test("RFC 4493 #4", kKey, sizeof(kKey), kMsg4, sizeof(kMsg4), kOut4);
106 }
107