| /* test_cmac_mode.c - TinyCrypt AES-CMAC tests (including SP 800-38B tests) */ |
| |
| /* |
| * Copyright (C) 2015 by Intel Corporation, All Rights Reserved. |
| * |
| * Redistribution and use in source and binary forms, with or without |
| * modification, are permitted provided that the following conditions are met: |
| * |
| * - Redistributions of source code must retain the above copyright notice, |
| * this list of conditions and the following disclaimer. |
| * |
| * - Redistributions in binary form must reproduce the above copyright |
| * notice, this list of conditions and the following disclaimer in the |
| * documentation and/or other materials provided with the distribution. |
| * |
| * - Neither the name of Intel Corporation nor the names of its contributors |
| * may be used to endorse or promote products derived from this software |
| * without specific prior written permission. |
| * |
| * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" |
| * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE |
| * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE |
| * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE |
| * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR |
| * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF |
| * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS |
| * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN |
| * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) |
| * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE |
| * POSSIBILITY OF SUCH DAMAGE. |
| */ |
| /* |
| * DESCRIPTION |
| * This module tests the following AES-CMAC test (including SP 800-38B): |
| * |
| * Scenarios tested include: |
| * - CMAC test #1 (GF(2^128) double)) |
| * - CMAC test #2 null msg (SP 800-38B test vector #1) |
| * - CMAC test #3 1 block msg (SP 800-38B test vector #2) |
| * - CMAC test #4 320 bit msg (SP 800-38B test vector #3) |
| * - CMAC test #5 512 bit msg(SP 800-38B test vector #4) |
| */ |
| |
| #include <tinycrypt/cmac_mode.h> |
| #include <tinycrypt/constants.h> |
| #include <tinycrypt/aes.h> |
| #include <zephyr/test_utils.h> |
| |
| #include <stdio.h> |
| #include <string.h> |
| #include <zephyr/ztest.h> |
| |
| #define BUF_LEN 16 |
| |
| static void show(const char *label, const uint8_t *s, size_t slen) |
| { |
| uint32_t i; |
| |
| TC_PRINT("%s\t", label); |
| for (i = 0U; i < slen; ++i) { |
| TC_PRINT("%02x", s[i]); |
| } |
| TC_PRINT("\n"); |
| } |
| |
| extern void gf_double(uint8_t *out, uint8_t *in); |
| |
| static uint32_t verify_gf_2_128_double(uint8_t *K1, uint8_t *K2, struct tc_cmac_struct s) |
| { |
| uint32_t result = TC_PASS; |
| |
| TC_PRINT("Performing CMAC test #1 (GF(2^128) double):\n"); |
| |
| uint8_t zero[BUF_LEN]; |
| uint8_t L[BUF_LEN]; |
| const uint8_t l[BUF_LEN] = { |
| 0x7d, 0xf7, 0x6b, 0x0c, 0x1a, 0xb8, 0x99, 0xb3, |
| 0x3e, 0x42, 0xf0, 0x47, 0xb9, 0x1b, 0x54, 0x6f |
| }; |
| const uint8_t k1[BUF_LEN] = { |
| 0xfb, 0xee, 0xd6, 0x18, 0x35, 0x71, 0x33, 0x66, |
| 0x7c, 0x85, 0xe0, 0x8f, 0x72, 0x36, 0xa8, 0xde |
| }; |
| const uint8_t k2[BUF_LEN] = { |
| 0xf7, 0xdd, 0xac, 0x30, 0x6a, 0xe2, 0x66, 0xcc, |
| 0xf9, 0x0b, 0xc1, 0x1e, 0xe4, 0x6d, 0x51, 0x3b |
| }; |
| |
| (void) memset(zero, '\0', sizeof(zero)); |
| tc_aes_encrypt(L, zero, s.sched); |
| if (memcmp(L, l, BUF_LEN) != 0) { |
| TC_ERROR("%s: AES encryption failed\n", __func__); |
| show("expected L =", l, sizeof(l)); |
| show("computed L =", L, sizeof(L)); |
| return TC_FAIL; |
| } |
| |
| gf_double(K1, L); |
| if (memcmp(K1, k1, BUF_LEN) != 0) { |
| TC_ERROR("%s: gf_2_128_double failed when msb = 0\n", __func__); |
| show("expected K1 =", k1, sizeof(k1)); |
| show("computed K1 =", K1, sizeof(k1)); |
| return TC_FAIL; |
| } |
| |
| gf_double(K2, K1); |
| if (memcmp(K2, k2, BUF_LEN) != 0) { |
| TC_ERROR("%s: gf_2_128_double failed when msb = 1\n", __func__); |
| show("expected K2 =", k2, sizeof(k2)); |
| show("computed K2 =", K2, sizeof(k2)); |
| return TC_FAIL; |
| } |
| |
| TC_END_RESULT(result); |
| return result; |
| } |
| |
| static uint32_t verify_cmac_null_msg(TCCmacState_t s) |
| { |
| uint32_t result = TC_PASS; |
| |
| TC_PRINT("Performing CMAC test #2 (SP 800-38B test vector #1):\n"); |
| |
| const uint8_t tag[BUF_LEN] = { |
| 0xbb, 0x1d, 0x69, 0x29, 0xe9, 0x59, 0x37, 0x28, |
| 0x7f, 0xa3, 0x7d, 0x12, 0x9b, 0x75, 0x67, 0x46 |
| }; |
| uint8_t Tag[BUF_LEN]; |
| |
| (void) tc_cmac_init(s); |
| (void) tc_cmac_update(s, (const uint8_t *) 0, 0); |
| (void) tc_cmac_final(Tag, s); |
| |
| if (memcmp(Tag, tag, BUF_LEN) != 0) { |
| TC_ERROR("%s: aes_cmac failed with null msg = 1\n", __func__); |
| show("expected Tag =", tag, sizeof(tag)); |
| show("computed Tag =", Tag, sizeof(Tag)); |
| return TC_FAIL; |
| } |
| |
| TC_END_RESULT(result); |
| return result; |
| } |
| |
| static uint32_t verify_cmac_1_block_msg(TCCmacState_t s) |
| { |
| uint32_t result = TC_PASS; |
| |
| TC_PRINT("Performing CMAC test #3 (SP 800-38B test vector #2):\n"); |
| |
| const uint8_t msg[BUF_LEN] = { |
| 0x6b, 0xc1, 0xbe, 0xe2, 0x2e, 0x40, 0x9f, 0x96, |
| 0xe9, 0x3d, 0x7e, 0x11, 0x73, 0x93, 0x17, 0x2a |
| }; |
| const uint8_t tag[BUF_LEN] = { |
| 0x07, 0x0a, 0x16, 0xb4, 0x6b, 0x4d, 0x41, 0x44, |
| 0xf7, 0x9b, 0xdd, 0x9d, 0xd0, 0x4a, 0x28, 0x7c |
| }; |
| uint8_t Tag[BUF_LEN]; |
| |
| (void) tc_cmac_init(s); |
| (void) tc_cmac_update(s, msg, sizeof(msg)); |
| (void) tc_cmac_final(Tag, s); |
| |
| if (memcmp(Tag, tag, BUF_LEN) != 0) { |
| TC_ERROR("%s: aes_cmac failed with 1 block msg\n", __func__); |
| show("aes_cmac failed with 1 block msg =", msg, sizeof(msg)); |
| show("expected Tag =", tag, sizeof(tag)); |
| show("computed Tag =", Tag, sizeof(Tag)); |
| return TC_FAIL; |
| } |
| |
| TC_END_RESULT(result); |
| return result; |
| } |
| |
| static uint32_t verify_cmac_320_bit_msg(TCCmacState_t s) |
| { |
| uint32_t result = TC_PASS; |
| |
| TC_PRINT("Performing CMAC test #4 (SP 800-38B test vector #3):\n"); |
| |
| const uint8_t msg[40] = { |
| 0x6b, 0xc1, 0xbe, 0xe2, 0x2e, 0x40, 0x9f, 0x96, |
| 0xe9, 0x3d, 0x7e, 0x11, 0x73, 0x93, 0x17, 0x2a, |
| 0xae, 0x2d, 0x8a, 0x57, 0x1e, 0x03, 0xac, 0x9c, |
| 0x9e, 0xb7, 0x6f, 0xac, 0x45, 0xaf, 0x8e, 0x51, |
| 0x30, 0xc8, 0x1c, 0x46, 0xa3, 0x5c, 0xe4, 0x11 |
| }; |
| const uint8_t tag[BUF_LEN] = { |
| 0xdf, 0xa6, 0x67, 0x47, 0xde, 0x9a, 0xe6, 0x30, |
| 0x30, 0xca, 0x32, 0x61, 0x14, 0x97, 0xc8, 0x27 |
| }; |
| uint8_t Tag[BUF_LEN]; |
| |
| (void) tc_cmac_init(s); |
| (void) tc_cmac_update(s, msg, sizeof(msg)); |
| (void) tc_cmac_final(Tag, s); |
| |
| if (memcmp(Tag, tag, BUF_LEN) != 0) { |
| TC_ERROR("%s: aes_cmac failed with 320 bit msg\n", __func__); |
| show("aes_cmac failed with 320 bit msg =", msg, sizeof(msg)); |
| show("expected Tag =", tag, sizeof(tag)); |
| show("computed Tag =", Tag, sizeof(Tag)); |
| return TC_FAIL; |
| } |
| |
| TC_END_RESULT(result); |
| return result; |
| } |
| |
| static uint32_t verify_cmac_512_bit_msg(TCCmacState_t s) |
| { |
| uint32_t result = TC_PASS; |
| |
| TC_PRINT("Performing CMAC test #5 (SP 800-38B test vector #4)\n"); |
| |
| const uint8_t msg[64] = { |
| 0x6b, 0xc1, 0xbe, 0xe2, 0x2e, 0x40, 0x9f, 0x96, |
| 0xe9, 0x3d, 0x7e, 0x11, 0x73, 0x93, 0x17, 0x2a, |
| 0xae, 0x2d, 0x8a, 0x57, 0x1e, 0x03, 0xac, 0x9c, |
| 0x9e, 0xb7, 0x6f, 0xac, 0x45, 0xaf, 0x8e, 0x51, |
| 0x30, 0xc8, 0x1c, 0x46, 0xa3, 0x5c, 0xe4, 0x11, |
| 0xe5, 0xfb, 0xc1, 0x19, 0x1a, 0x0a, 0x52, 0xef, |
| 0xf6, 0x9f, 0x24, 0x45, 0xdf, 0x4f, 0x9b, 0x17, |
| 0xad, 0x2b, 0x41, 0x7b, 0xe6, 0x6c, 0x37, 0x10 |
| }; |
| const uint8_t tag[BUF_LEN] = { |
| 0x51, 0xf0, 0xbe, 0xbf, 0x7e, 0x3b, 0x9d, 0x92, |
| 0xfc, 0x49, 0x74, 0x17, 0x79, 0x36, 0x3c, 0xfe |
| }; |
| uint8_t Tag[BUF_LEN]; |
| |
| (void)tc_cmac_init(s); |
| (void)tc_cmac_update(s, msg, sizeof(msg)); |
| (void)tc_cmac_final(Tag, s); |
| |
| if (memcmp(Tag, tag, BUF_LEN) != 0) { |
| TC_ERROR("%s: aes_cmac failed with 512 bit msg\n", __func__); |
| show("aes_cmac failed with 512 bit msg =", msg, sizeof(msg)); |
| show("expected Tag =", tag, sizeof(tag)); |
| show("computed Tag =", Tag, sizeof(Tag)); |
| return TC_FAIL; |
| } |
| |
| TC_END_RESULT(result); |
| return result; |
| } |
| |
| /* |
| * Main task to test CMAC |
| */ |
| |
| ZTEST(tinycrypt, test_cmac_mode) |
| { |
| |
| uint32_t result = TC_PASS; |
| |
| struct tc_cmac_struct state; |
| struct tc_aes_key_sched_struct sched; |
| |
| const uint8_t key[BUF_LEN] = { |
| 0x2b, 0x7e, 0x15, 0x16, 0x28, 0xae, 0xd2, 0xa6, |
| 0xab, 0xf7, 0x15, 0x88, 0x09, 0xcf, 0x4f, 0x3c |
| }; |
| uint8_t K1[BUF_LEN], K2[BUF_LEN]; |
| |
| |
| (void) tc_cmac_setup(&state, key, &sched); |
| result = verify_gf_2_128_double(K1, K2, state); |
| |
| /**TESTPOINT: Check result - test 1*/ |
| zassert_false(result, "CMAC test #1 (128 double) failed"); |
| |
| (void) tc_cmac_setup(&state, key, &sched); |
| result = verify_cmac_null_msg(&state); |
| |
| /**TESTPOINT: Check result - test 2*/ |
| zassert_false(result, "CMAC test #2 (null msg) failed"); |
| |
| (void) tc_cmac_setup(&state, key, &sched); |
| result = verify_cmac_1_block_msg(&state); |
| |
| /**TESTPOINT: Check result - test 3*/ |
| zassert_false(result, "CMAC test #1 (1 block msg) failed"); |
| |
| (void) tc_cmac_setup(&state, key, &sched); |
| result = verify_cmac_320_bit_msg(&state); |
| |
| /**TESTPOINT: Check result - test 4*/ |
| zassert_false(result, "CMAC test #1 (320 bit msg) failed"); |
| |
| (void) tc_cmac_setup(&state, key, &sched); |
| result = verify_cmac_512_bit_msg(&state); |
| |
| /**TESTPOINT: Check result - test 5*/ |
| zassert_false(result, "CMAC test #1 (512 bit msg) failed"); |
| |
| TC_PRINT("All CMAC tests succeeded!\n"); |
| } |