| /* BEGIN_HEADER */ |
| #include "mbedtls/chachapoly.h" |
| /* END_HEADER */ |
| |
| /* BEGIN_DEPENDENCIES |
| * depends_on:MBEDTLS_CHACHAPOLY_C |
| * END_DEPENDENCIES |
| */ |
| |
| /* BEGIN_CASE */ |
| void mbedtls_chachapoly_enc( char *hex_key_string, char *hex_nonce_string, char *hex_aad_string, char *hex_input_string, char *hex_output_string, char *hex_mac_string ) |
| { |
| unsigned char key_str[32]; /* size set by the standard */ |
| unsigned char nonce_str[12]; /* size set by the standard */ |
| unsigned char aad_str[12]; /* max size of test data so far */ |
| unsigned char input_str[265]; /* max size of binary input/output so far */ |
| unsigned char output_str[265]; |
| unsigned char output[265]; |
| unsigned char mac_str[16]; /* size set by the standard */ |
| unsigned char mac[16]; /* size set by the standard */ |
| size_t input_len; |
| size_t output_len; |
| size_t aad_len; |
| size_t key_len; |
| size_t nonce_len; |
| size_t mac_len; |
| mbedtls_chachapoly_context ctx; |
| |
| memset( key_str, 0x00, sizeof( key_str ) ); |
| memset( nonce_str, 0x00, sizeof( nonce_str ) ); |
| memset( aad_str, 0x00, sizeof( aad_str ) ); |
| memset( input_str, 0x00, sizeof( input_str ) ); |
| memset( output_str, 0x00, sizeof( output_str ) ); |
| memset( mac_str, 0x00, sizeof( mac_str ) ); |
| |
| aad_len = unhexify( aad_str, hex_aad_string ); |
| input_len = unhexify( input_str, hex_input_string ); |
| output_len = unhexify( output_str, hex_output_string ); |
| key_len = unhexify( key_str, hex_key_string ); |
| nonce_len = unhexify( nonce_str, hex_nonce_string ); |
| mac_len = unhexify( mac_str, hex_mac_string ); |
| |
| TEST_ASSERT( key_len == 32 ); |
| TEST_ASSERT( nonce_len == 12 ); |
| TEST_ASSERT( mac_len == 16 ); |
| |
| mbedtls_chachapoly_init( &ctx ); |
| |
| TEST_ASSERT( mbedtls_chachapoly_setkey( &ctx, key_str ) == 0 ); |
| |
| TEST_ASSERT( mbedtls_chachapoly_encrypt_and_tag( &ctx, |
| input_len, nonce_str, |
| aad_str, aad_len, |
| input_str, output, mac ) == 0 ); |
| |
| TEST_ASSERT( memcmp( output_str, output, output_len ) == 0 ); |
| TEST_ASSERT( memcmp( mac_str, mac, 16U ) == 0 ); |
| |
| exit: |
| mbedtls_chachapoly_free( &ctx ); |
| } |
| /* END_CASE */ |
| |
| /* BEGIN_CASE */ |
| void mbedtls_chachapoly_dec( char *hex_key_string, char *hex_nonce_string, char *hex_aad_string, char *hex_input_string, char *hex_output_string, char *hex_mac_string, int ret_exp ) |
| { |
| unsigned char key_str[32]; /* size set by the standard */ |
| unsigned char nonce_str[12]; /* size set by the standard */ |
| unsigned char aad_str[12]; /* max size of test data so far */ |
| unsigned char input_str[265]; /* max size of binary input/output so far */ |
| unsigned char output_str[265]; |
| unsigned char output[265]; |
| unsigned char mac_str[16]; /* size set by the standard */ |
| size_t input_len; |
| size_t output_len; |
| size_t aad_len; |
| size_t key_len; |
| size_t nonce_len; |
| size_t mac_len; |
| int ret; |
| mbedtls_chachapoly_context ctx; |
| |
| memset( key_str, 0x00, sizeof( key_str ) ); |
| memset( nonce_str, 0x00, sizeof( nonce_str ) ); |
| memset( aad_str, 0x00, sizeof( aad_str ) ); |
| memset( input_str, 0x00, sizeof( input_str ) ); |
| memset( output_str, 0x00, sizeof( output_str ) ); |
| memset( mac_str, 0x00, sizeof( mac_str ) ); |
| |
| aad_len = unhexify( aad_str, hex_aad_string ); |
| input_len = unhexify( input_str, hex_input_string ); |
| output_len = unhexify( output_str, hex_output_string ); |
| key_len = unhexify( key_str, hex_key_string ); |
| nonce_len = unhexify( nonce_str, hex_nonce_string ); |
| mac_len = unhexify( mac_str, hex_mac_string ); |
| |
| TEST_ASSERT( key_len == 32 ); |
| TEST_ASSERT( nonce_len == 12 ); |
| TEST_ASSERT( mac_len == 16 ); |
| |
| mbedtls_chachapoly_init( &ctx ); |
| |
| TEST_ASSERT( mbedtls_chachapoly_setkey( &ctx, key_str ) == 0 ); |
| |
| ret = mbedtls_chachapoly_auth_decrypt( &ctx, |
| input_len, nonce_str, |
| aad_str, aad_len, |
| mac_str, input_str, output ); |
| |
| TEST_ASSERT( ret == ret_exp ); |
| if( ret_exp == 0 ) |
| { |
| TEST_ASSERT( memcmp( output_str, output, output_len ) == 0 ); |
| } |
| |
| exit: |
| mbedtls_chachapoly_free( &ctx ); |
| } |
| /* END_CASE */ |
| |
| /* BEGIN_CASE depends_on:MBEDTLS_CHECK_PARAMS:!MBEDTLS_PARAM_FAILED_ALT */ |
| void chachapoly_bad_params() |
| { |
| unsigned char key[32]; |
| unsigned char nonce[12]; |
| unsigned char aad[1]; |
| unsigned char input[1]; |
| unsigned char output[1]; |
| unsigned char mac[16]; |
| size_t input_len = sizeof( input ); |
| size_t aad_len = sizeof( aad ); |
| mbedtls_chachapoly_context ctx; |
| |
| memset( key, 0x00, sizeof( key ) ); |
| memset( nonce, 0x00, sizeof( nonce ) ); |
| memset( aad, 0x00, sizeof( aad ) ); |
| memset( input, 0x00, sizeof( input ) ); |
| memset( output, 0x00, sizeof( output ) ); |
| memset( mac, 0x00, sizeof( mac ) ); |
| |
| TEST_INVALID_PARAM( mbedtls_chachapoly_init( NULL ) ); |
| TEST_VALID_PARAM( mbedtls_chachapoly_free( NULL ) ); |
| |
| /* setkey */ |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_setkey( NULL, key ) ); |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_setkey( &ctx, NULL ) ); |
| |
| /* encrypt_and_tag */ |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_encrypt_and_tag( NULL, |
| 0, nonce, |
| aad, 0, |
| input, output, mac ) ); |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_encrypt_and_tag( &ctx, |
| 0, NULL, |
| aad, 0, |
| input, output, mac ) ); |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_encrypt_and_tag( &ctx, |
| 0, nonce, |
| NULL, aad_len, |
| input, output, mac ) ); |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_encrypt_and_tag( &ctx, |
| input_len, nonce, |
| aad, 0, |
| NULL, output, mac ) ); |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_encrypt_and_tag( &ctx, |
| input_len, nonce, |
| aad, 0, |
| input, NULL, mac ) ); |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_encrypt_and_tag( &ctx, |
| 0, nonce, |
| aad, 0, |
| input, output, NULL ) ); |
| |
| /* auth_decrypt */ |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_auth_decrypt( NULL, |
| 0, nonce, |
| aad, 0, |
| mac, input, output ) ); |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_auth_decrypt( &ctx, |
| 0, NULL, |
| aad, 0, |
| mac, input, output ) ); |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_auth_decrypt( &ctx, |
| 0, nonce, |
| NULL, aad_len, |
| mac, input, output ) ); |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_auth_decrypt( &ctx, |
| 0, nonce, |
| aad, 0, |
| NULL, input, output ) ); |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_auth_decrypt( &ctx, |
| input_len, nonce, |
| aad, 0, |
| mac, NULL, output ) ); |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_auth_decrypt( &ctx, |
| input_len, nonce, |
| aad, 0, |
| mac, input, NULL ) ); |
| |
| /* starts */ |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_starts( NULL, nonce, |
| MBEDTLS_CHACHAPOLY_ENCRYPT ) ); |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_starts( &ctx, NULL, |
| MBEDTLS_CHACHAPOLY_ENCRYPT ) ); |
| |
| /* update_aad */ |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_update_aad( NULL, aad, |
| aad_len ) ); |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_update_aad( &ctx, NULL, |
| aad_len ) ); |
| |
| /* update */ |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_update( NULL, input_len, |
| input, output ) ); |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_update( &ctx, input_len, |
| NULL, output ) ); |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_update( &ctx, input_len, |
| input, NULL ) ); |
| |
| /* finish */ |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_finish( NULL, mac ) ); |
| TEST_INVALID_PARAM_RET( MBEDTLS_ERR_POLY1305_BAD_INPUT_DATA, |
| mbedtls_chachapoly_finish( &ctx, NULL ) ); |
| |
| exit: |
| return; |
| } |
| /* END_CASE */ |
| |
| /* BEGIN_CASE */ |
| void chachapoly_state() |
| { |
| unsigned char key[32]; |
| unsigned char nonce[12]; |
| unsigned char aad[1]; |
| unsigned char input[1]; |
| unsigned char output[1]; |
| unsigned char mac[16]; |
| size_t input_len = sizeof( input ); |
| size_t aad_len = sizeof( aad ); |
| mbedtls_chachapoly_context ctx; |
| |
| memset( key, 0x00, sizeof( key ) ); |
| memset( nonce, 0x00, sizeof( nonce ) ); |
| memset( aad, 0x00, sizeof( aad ) ); |
| memset( input, 0x00, sizeof( input ) ); |
| memset( output, 0x00, sizeof( output ) ); |
| memset( mac, 0x00, sizeof( mac ) ); |
| |
| /* Initial state: finish, update, update_aad forbidden */ |
| mbedtls_chachapoly_init( &ctx ); |
| |
| TEST_ASSERT( mbedtls_chachapoly_finish( &ctx, mac ) |
| == MBEDTLS_ERR_CHACHAPOLY_BAD_STATE ); |
| TEST_ASSERT( mbedtls_chachapoly_update( &ctx, input_len, input, output ) |
| == MBEDTLS_ERR_CHACHAPOLY_BAD_STATE ); |
| TEST_ASSERT( mbedtls_chachapoly_update_aad( &ctx, aad, aad_len ) |
| == MBEDTLS_ERR_CHACHAPOLY_BAD_STATE ); |
| |
| /* Still initial state: finish, update, update_aad forbidden */ |
| TEST_ASSERT( mbedtls_chachapoly_setkey( &ctx, key ) |
| == 0 ); |
| |
| TEST_ASSERT( mbedtls_chachapoly_finish( &ctx, mac ) |
| == MBEDTLS_ERR_CHACHAPOLY_BAD_STATE ); |
| TEST_ASSERT( mbedtls_chachapoly_update( &ctx, input_len, input, output ) |
| == MBEDTLS_ERR_CHACHAPOLY_BAD_STATE ); |
| TEST_ASSERT( mbedtls_chachapoly_update_aad( &ctx, aad, aad_len ) |
| == MBEDTLS_ERR_CHACHAPOLY_BAD_STATE ); |
| |
| /* Starts -> finish OK */ |
| TEST_ASSERT( mbedtls_chachapoly_starts( &ctx, nonce, MBEDTLS_CHACHAPOLY_ENCRYPT ) |
| == 0 ); |
| TEST_ASSERT( mbedtls_chachapoly_finish( &ctx, mac ) |
| == 0 ); |
| |
| /* After finish: update, update_aad forbidden */ |
| TEST_ASSERT( mbedtls_chachapoly_update( &ctx, input_len, input, output ) |
| == MBEDTLS_ERR_CHACHAPOLY_BAD_STATE ); |
| TEST_ASSERT( mbedtls_chachapoly_update_aad( &ctx, aad, aad_len ) |
| == MBEDTLS_ERR_CHACHAPOLY_BAD_STATE ); |
| |
| /* Starts -> update* OK */ |
| TEST_ASSERT( mbedtls_chachapoly_starts( &ctx, nonce, MBEDTLS_CHACHAPOLY_ENCRYPT ) |
| == 0 ); |
| TEST_ASSERT( mbedtls_chachapoly_update( &ctx, input_len, input, output ) |
| == 0 ); |
| TEST_ASSERT( mbedtls_chachapoly_update( &ctx, input_len, input, output ) |
| == 0 ); |
| |
| /* After update: update_aad forbidden */ |
| TEST_ASSERT( mbedtls_chachapoly_update_aad( &ctx, aad, aad_len ) |
| == MBEDTLS_ERR_CHACHAPOLY_BAD_STATE ); |
| |
| /* Starts -> update_aad* -> finish OK */ |
| TEST_ASSERT( mbedtls_chachapoly_starts( &ctx, nonce, MBEDTLS_CHACHAPOLY_ENCRYPT ) |
| == 0 ); |
| TEST_ASSERT( mbedtls_chachapoly_update_aad( &ctx, aad, aad_len ) |
| == 0 ); |
| TEST_ASSERT( mbedtls_chachapoly_update_aad( &ctx, aad, aad_len ) |
| == 0 ); |
| TEST_ASSERT( mbedtls_chachapoly_finish( &ctx, mac ) |
| == 0 ); |
| |
| exit: |
| mbedtls_chachapoly_free( &ctx ); |
| } |
| /* END_CASE */ |
| |
| /* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST */ |
| void chachapoly_selftest() |
| { |
| TEST_ASSERT( mbedtls_chachapoly_self_test( 1 ) == 0 ); |
| } |
| /* END_CASE */ |
