mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2025-08-08 17:42:09 +03:00
292 lines
11 KiB
C
292 lines
11 KiB
C
/* BEGIN_HEADER */
|
|
#include "mbedtls/gcm.h"
|
|
/* END_HEADER */
|
|
|
|
/* BEGIN_DEPENDENCIES
|
|
* depends_on:MBEDTLS_GCM_C
|
|
* END_DEPENDENCIES
|
|
*/
|
|
|
|
/* BEGIN_CASE */
|
|
void gcm_bad_parameters(int cipher_id, int direction,
|
|
data_t *key_str, data_t *src_str,
|
|
data_t *iv_str, data_t *add_str,
|
|
int tag_len_bits, int gcm_result)
|
|
{
|
|
unsigned char output[128];
|
|
unsigned char tag_output[16];
|
|
mbedtls_gcm_context ctx;
|
|
size_t tag_len = tag_len_bits / 8;
|
|
|
|
mbedtls_gcm_init(&ctx);
|
|
|
|
memset(output, 0x00, sizeof(output));
|
|
memset(tag_output, 0x00, sizeof(tag_output));
|
|
|
|
TEST_ASSERT(mbedtls_gcm_setkey(&ctx, cipher_id, key_str->x, key_str->len * 8) == 0);
|
|
TEST_ASSERT(mbedtls_gcm_crypt_and_tag(&ctx, direction, src_str->len, iv_str->x, iv_str->len,
|
|
add_str->x, add_str->len, src_str->x, output, tag_len,
|
|
tag_output) == gcm_result);
|
|
|
|
exit:
|
|
mbedtls_gcm_free(&ctx);
|
|
}
|
|
/* END_CASE */
|
|
|
|
/* BEGIN_CASE */
|
|
void gcm_encrypt_and_tag(int cipher_id, data_t *key_str,
|
|
data_t *src_str, data_t *iv_str,
|
|
data_t *add_str, data_t *dst,
|
|
int tag_len_bits, data_t *tag,
|
|
int init_result)
|
|
{
|
|
unsigned char output[128];
|
|
unsigned char tag_output[16];
|
|
mbedtls_gcm_context ctx;
|
|
size_t tag_len = tag_len_bits / 8;
|
|
|
|
mbedtls_gcm_init(&ctx);
|
|
|
|
memset(output, 0x00, 128);
|
|
memset(tag_output, 0x00, 16);
|
|
|
|
|
|
TEST_ASSERT(mbedtls_gcm_setkey(&ctx, cipher_id, key_str->x, key_str->len * 8) == init_result);
|
|
if (init_result == 0) {
|
|
TEST_ASSERT(mbedtls_gcm_crypt_and_tag(&ctx, MBEDTLS_GCM_ENCRYPT, src_str->len, iv_str->x,
|
|
iv_str->len, add_str->x, add_str->len, src_str->x,
|
|
output, tag_len, tag_output) == 0);
|
|
|
|
TEST_ASSERT(mbedtls_test_hexcmp(output, dst->x,
|
|
src_str->len, dst->len) == 0);
|
|
TEST_ASSERT(mbedtls_test_hexcmp(tag_output, tag->x,
|
|
tag_len, tag->len) == 0);
|
|
}
|
|
|
|
exit:
|
|
mbedtls_gcm_free(&ctx);
|
|
}
|
|
/* END_CASE */
|
|
|
|
/* BEGIN_CASE */
|
|
void gcm_decrypt_and_verify(int cipher_id, data_t *key_str,
|
|
data_t *src_str, data_t *iv_str,
|
|
data_t *add_str, int tag_len_bits,
|
|
data_t *tag_str, char *result,
|
|
data_t *pt_result, int init_result)
|
|
{
|
|
unsigned char output[128];
|
|
mbedtls_gcm_context ctx;
|
|
int ret;
|
|
size_t tag_len = tag_len_bits / 8;
|
|
|
|
mbedtls_gcm_init(&ctx);
|
|
|
|
memset(output, 0x00, 128);
|
|
|
|
|
|
TEST_ASSERT(mbedtls_gcm_setkey(&ctx, cipher_id, key_str->x, key_str->len * 8) == init_result);
|
|
if (init_result == 0) {
|
|
ret = mbedtls_gcm_auth_decrypt(&ctx,
|
|
src_str->len,
|
|
iv_str->x,
|
|
iv_str->len,
|
|
add_str->x,
|
|
add_str->len,
|
|
tag_str->x,
|
|
tag_len,
|
|
src_str->x,
|
|
output);
|
|
|
|
if (strcmp("FAIL", result) == 0) {
|
|
TEST_ASSERT(ret == MBEDTLS_ERR_GCM_AUTH_FAILED);
|
|
} else {
|
|
TEST_ASSERT(ret == 0);
|
|
|
|
TEST_ASSERT(mbedtls_test_hexcmp(output, pt_result->x,
|
|
src_str->len,
|
|
pt_result->len) == 0);
|
|
}
|
|
}
|
|
|
|
exit:
|
|
mbedtls_gcm_free(&ctx);
|
|
}
|
|
/* END_CASE */
|
|
|
|
/* BEGIN_CASE depends_on:MBEDTLS_CHECK_PARAMS:!MBEDTLS_PARAM_FAILED_ALT */
|
|
void gcm_invalid_param()
|
|
{
|
|
mbedtls_gcm_context ctx;
|
|
unsigned char valid_buffer[] = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06 };
|
|
mbedtls_cipher_id_t valid_cipher = MBEDTLS_CIPHER_ID_AES;
|
|
int valid_mode = MBEDTLS_GCM_ENCRYPT;
|
|
int valid_len = sizeof(valid_buffer);
|
|
int valid_bitlen = 128, invalid_bitlen = 1;
|
|
|
|
mbedtls_gcm_init(&ctx);
|
|
|
|
/* mbedtls_gcm_init() */
|
|
TEST_INVALID_PARAM(mbedtls_gcm_init(NULL));
|
|
|
|
/* mbedtls_gcm_setkey */
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_setkey(NULL, valid_cipher, valid_buffer, valid_bitlen));
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_setkey(&ctx, valid_cipher, NULL, valid_bitlen));
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_setkey(&ctx, valid_cipher, valid_buffer, invalid_bitlen));
|
|
|
|
/* mbedtls_gcm_crypt_and_tag() */
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_crypt_and_tag(NULL, valid_mode, valid_len,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, valid_buffer,
|
|
valid_len, valid_buffer));
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_crypt_and_tag(&ctx, valid_mode, valid_len,
|
|
NULL, valid_len,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, valid_buffer,
|
|
valid_len, valid_buffer));
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_crypt_and_tag(&ctx, valid_mode, valid_len,
|
|
valid_buffer, valid_len,
|
|
NULL, valid_len,
|
|
valid_buffer, valid_buffer,
|
|
valid_len, valid_buffer));
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_crypt_and_tag(&ctx, valid_mode, valid_len,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, valid_len,
|
|
NULL, valid_buffer,
|
|
valid_len, valid_buffer));
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_crypt_and_tag(&ctx, valid_mode, valid_len,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, NULL,
|
|
valid_len, valid_buffer));
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_crypt_and_tag(&ctx, valid_mode, valid_len,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, valid_buffer,
|
|
valid_len, NULL));
|
|
|
|
/* mbedtls_gcm_auth_decrypt() */
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_auth_decrypt(NULL, valid_len,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, valid_buffer));
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_auth_decrypt(&ctx, valid_len,
|
|
NULL, valid_len,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, valid_buffer));
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_auth_decrypt(&ctx, valid_len,
|
|
valid_buffer, valid_len,
|
|
NULL, valid_len,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, valid_buffer));
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_auth_decrypt(&ctx, valid_len,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, valid_len,
|
|
NULL, valid_len,
|
|
valid_buffer, valid_buffer));
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_auth_decrypt(&ctx, valid_len,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, valid_len,
|
|
NULL, valid_buffer));
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_auth_decrypt(&ctx, valid_len,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, NULL));
|
|
|
|
/* mbedtls_gcm_starts() */
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_starts(NULL, valid_mode,
|
|
valid_buffer, valid_len,
|
|
valid_buffer, valid_len));
|
|
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_starts(&ctx, valid_mode,
|
|
NULL, valid_len,
|
|
valid_buffer, valid_len));
|
|
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_starts(&ctx, valid_mode,
|
|
valid_buffer, valid_len,
|
|
NULL, valid_len));
|
|
|
|
/* mbedtls_gcm_update() */
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_update(NULL, valid_len,
|
|
valid_buffer, valid_buffer));
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_update(&ctx, valid_len,
|
|
NULL, valid_buffer));
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_update(&ctx, valid_len,
|
|
valid_buffer, NULL));
|
|
|
|
/* mbedtls_gcm_finish() */
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_finish(NULL, valid_buffer, valid_len));
|
|
TEST_INVALID_PARAM_RET(
|
|
MBEDTLS_ERR_GCM_BAD_INPUT,
|
|
mbedtls_gcm_finish(&ctx, NULL, valid_len));
|
|
|
|
exit:
|
|
mbedtls_gcm_free(&ctx);
|
|
}
|
|
/* END_CASE */
|
|
|
|
/* BEGIN_CASE */
|
|
void gcm_valid_param()
|
|
{
|
|
TEST_VALID_PARAM(mbedtls_gcm_free(NULL));
|
|
exit:
|
|
return;
|
|
}
|
|
/* END_CASE */
|
|
|
|
/* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST:MBEDTLS_AES_C */
|
|
void gcm_selftest()
|
|
{
|
|
TEST_ASSERT(mbedtls_gcm_self_test(1) == 0);
|
|
}
|
|
/* END_CASE */
|