*/
#include <openssl/engine.h>
+#include <openssl/opensslv.h>
#include <openssl/evp.h>
#include <openssl/rand.h>
#include <openssl/err.h>
#include <openssl/asn1.h>
+#if OPENSSL_VERSION_MAJOR < 3
+# include <openssl/hmac.h>
+#else
+# include <openssl/core_names.h>
+#endif
#include <openssl/obj_mac.h>
#include <string.h>
#include <stdlib.h>
printf(cGREEN " Test passed\n" cNORM);}
/*
- * Test key from both GOST R 34.12-2015 and GOST R 34.13-2015.
+ * Test keys from both GOST R 34.12-2015 and GOST R 34.13-2015,
+ * for 128-bit cipher (A.1).
*/
static const char K[32] = {
0x88,0x99,0xaa,0xbb,0xcc,0xdd,0xee,0xff,0x00,0x11,0x22,0x33,0x44,0x55,0x66,0x77,
0xfe,0xdc,0xba,0x98,0x76,0x54,0x32,0x10,0x01,0x23,0x45,0x67,0x89,0xab,0xcd,0xef,
};
+/*
+ * Key for 64-bit cipher (A.2).
+ */
+static const char Km[32] = {
+ 0xff,0xee,0xdd,0xcc,0xbb,0xaa,0x99,0x88,0x77,0x66,0x55,0x44,0x33,0x22,0x11,0x00,
+ 0xf0,0xf1,0xf2,0xf3,0xf4,0xf5,0xf6,0xf7,0xf8,0xf9,0xfa,0xfb,0xfc,0xfd,0xfe,0xff,
+};
+
/*
* Plaintext from GOST R 34.13-2015 A.1.
* First 16 bytes is vector (a) from GOST R 34.12-2015 A.1.
0x22,0x33,0x44,0x55,0x66,0x77,0x88,0x99,0xaa,0xbb,0xcc,0xee,0xff,0x0a,0x00,0x11,
};
+/* Plaintext for 64-bit cipher (A.2) */
+static const char Pm[] = {
+ 0x92,0xde,0xf0,0x6b,0x3c,0x13,0x0a,0x59,0xdb,0x54,0xc7,0x04,0xf8,0x18,0x9d,0x20,
+ 0x4a,0x98,0xfb,0x2e,0x67,0xa8,0x02,0x4c,0x89,0x12,0x40,0x9b,0x17,0xb5,0x7e,0x41,
+};
+
/*
- * OMAC1/CMAC test vector from GOST R 34.13-2015 А.1.6
+ * Kuznyechik OMAC1/CMAC test vector from GOST R 34.13-2015 А.1.6
*/
static const char MAC_omac[] = { 0x33,0x6f,0x4d,0x29,0x60,0x59,0xfb,0xe3 };
+/*
+ * Magma OMAC1/CMAC test vector from GOST R 34.13-2015 А.2.6
+ */
+static const char MAC_magma_omac[] = { 0x15,0x4e,0x72,0x10 };
+
/*
* OMAC-ACPKM test vector from R 1323565.1.017-2018 A.4.1
*/
const char *name; /* Test name and source. */
const char *plaintext; /* Input (of psize), NULL for synthetic test. */
const char *digest; /* Expected output (of EVP_MD_size or truncate). */
+ const char *hmac; /* Expected output for HMAC tests. */
const char *key; /* MAC key.*/
int psize; /* Input (plaintext) size. */
int mdsize; /* Compare to EVP_MD_size() if non-zero. */
};
static const struct hash_testvec testvecs[] = {
- {
+ { /* Test vectors from standards. */
.nid = NID_id_GostR3411_2012_512,
.name = "M1 from RFC 6986 (10.1.1) and GOST R 34.11-2012 (А.1.1)",
.plaintext =
.mdsize = 128 / 8,
.truncate = sizeof(MAC_omac),
},
+ {
+ .nid = NID_magma_mac,
+ .name = "P from GOST R 34.13-2015 (А.2.6)",
+ .plaintext = Pm,
+ .psize = sizeof(Pm),
+ .key = Km,
+ .key_size = sizeof(Km),
+ .digest = MAC_magma_omac,
+ .mdsize = 64 / 8,
+ .truncate = sizeof(MAC_magma_omac),
+ },
{
.nid = NID_id_tc26_cipher_gostr3412_2015_kuznyechik_ctracpkm_omac,
.name = "M from R 1323565.1.017-2018 (A.4.1)",
.digest = MAC_omac_acpkm2,
.mdsize = sizeof(MAC_omac_acpkm2),
},
+ { /* HMAC tests. */
+ .nid = NID_id_GostR3411_2012_512,
+ .name = "HMAC_GOSTR3411_2012_512 from RFC 7836 (B) and R 50.1.113-2016 (A)",
+ .plaintext =
+ "\x01\x26\xbd\xb8\x78\x00\xaf\x21\x43\x41\x45\x65\x63\x78\x01\x00",
+ .psize = 16,
+ .key =
+ "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f"
+ "\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f",
+ .key_size = 32,
+ .hmac =
+ "\xa5\x9b\xab\x22\xec\xae\x19\xc6\x5f\xbd\xe6\xe5\xf4\xe9\xf5\xd8"
+ "\x54\x9d\x31\xf0\x37\xf9\xdf\x9b\x90\x55\x00\xe1\x71\x92\x3a\x77"
+ "\x3d\x5f\x15\x30\xf2\xed\x7e\x96\x4c\xb2\xee\xdc\x29\xe9\xad\x2f"
+ "\x3a\xfe\x93\xb2\x81\x4f\x79\xf5\x00\x0f\xfc\x03\x66\xc2\x51\xe6",
+ },
+ {
+ .nid = NID_id_GostR3411_2012_256,
+ .name = "HMAC_GOSTR3411_2012_256 from RFC 7836 (B) and R 50.1.113-2016 (A)",
+ .plaintext =
+ "\x01\x26\xbd\xb8\x78\x00\xaf\x21\x43\x41\x45\x65\x63\x78\x01\x00",
+ .psize = 16,
+ .key =
+ "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f"
+ "\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f",
+ .key_size = 32,
+ .hmac =
+ "\xa1\xaa\x5f\x7d\xe4\x02\xd7\xb3\xd3\x23\xf2\x99\x1c\x8d\x45\x34"
+ "\x01\x31\x37\x01\x0a\x83\x75\x4f\xd0\xaf\x6d\x7c\xd4\x92\x2e\xd9",
+ },
/* Other KATs. */
{
.nid = NID_id_GostR3411_2012_512,
printf("\n");
}
+#if OPENSSL_VERSION_MAJOR < 3
+static int do_hmac(const EVP_MD *type, const char *plaintext,
+ unsigned int psize, const char *etalon, int mdsize,
+ const char *key, unsigned int key_size)
+{
+ unsigned int len;
+ unsigned char md[EVP_MAX_MD_SIZE];
+
+ HMAC_CTX *ctx;
+ T(ctx = HMAC_CTX_new());
+ T(HMAC_Init_ex(ctx, key, key_size, type, NULL));
+ T(HMAC_Update(ctx, (const unsigned char *)plaintext, psize));
+ T(HMAC_Final(ctx, md, &len));
+ HMAC_CTX_free(ctx);
+
+ if (mdsize)
+ T(len == mdsize);
+ if (memcmp(md, etalon, len) != 0) {
+ printf(cRED "hmac mismatch\n" cNORM);
+ hexdump(etalon, len);
+ hexdump(md, len);
+ return 1;
+ }
+ return 0;
+}
+#else
+static int do_hmac(const EVP_MD *type, const char *plaintext,
+ unsigned int psize, const char *etalon, int mdsize,
+ const char *key, unsigned int key_size)
+{
+ size_t len;
+ unsigned char md[EVP_MAX_MD_SIZE];
+
+ EVP_MAC *hmac;
+ T(hmac = EVP_MAC_fetch(NULL, "HMAC", NULL));
+ EVP_MAC_CTX *ctx;
+ T(ctx = EVP_MAC_CTX_new(hmac));
+ OSSL_PARAM params[] = {
+ OSSL_PARAM_utf8_string(OSSL_MAC_PARAM_DIGEST,
+ (char *)EVP_MD_name(type), 0),
+ OSSL_PARAM_octet_string(OSSL_MAC_PARAM_KEY, (char *)key, key_size),
+ OSSL_PARAM_END
+ };
+ T(EVP_MAC_CTX_set_params(ctx, params));
+ T(EVP_MAC_init(ctx));
+ T(EVP_MAC_update(ctx, (unsigned char *)plaintext, psize));
+ T(EVP_MAC_final(ctx, md, &len, EVP_MAX_MD_SIZE));
+ EVP_MAC_CTX_free(ctx);
+ EVP_MAC_free(hmac);
+
+ if (mdsize)
+ T(len == mdsize);
+ if (memcmp(md, etalon, len) != 0) {
+ printf(cRED "hmac mismatch\n" cNORM);
+ hexdump(etalon, len);
+ hexdump(md, len);
+ return 1;
+ }
+ return 0;
+}
+#endif
+
static int do_digest(const EVP_MD *type, const char *plaintext,
unsigned int psize, const char *etalon, int mdsize, int truncate,
const char *key, unsigned int key_size, int acpkm, int acpkm_t,
T(len == mdsize);
if (memcmp(md, etalon, mdsize) != 0) {
printf(cRED "digest mismatch\n" cNORM);
+ hexdump(etalon, mdsize);
+ hexdump(md, mdsize);
return 1;
}
static int do_test(const struct hash_testvec *tv)
{
- int ret = 0;
+ int ret = 0;
- const EVP_MD *type;
- T(type = EVP_get_digestbynid(tv->nid));
- const char *name = EVP_MD_name(type);
- printf(cBLUE "Test %s: %s: " cNORM, name, tv->name);
- fflush(stdout);
+ const EVP_MD *type;
+ T(type = EVP_get_digestbynid(tv->nid));
+ const char *name = EVP_MD_name(type);
+ printf(cBLUE "%s Test %s: %s: " cNORM, tv->hmac? "HMAC" : "MD",
+ name, tv->name);
+ fflush(stdout);
+ if (tv->hmac)
+ ret |= do_hmac(type, tv->plaintext, tv->psize, tv->hmac,
+ tv->mdsize, tv->key, tv->key_size);
+ else
ret |= do_digest(type, tv->plaintext, tv->psize, tv->digest,
tv->mdsize, tv->truncate, tv->key, tv->key_size, tv->acpkm,
tv->acpkm_t, tv->block_size);
- /* Text alignment problems. */
- int shifts = 32;
- int i;
- char *buf;
- T(buf = OPENSSL_malloc(tv->psize + shifts));
- for (i = 0; i < shifts; i++) {
- memcpy(buf + i, tv->plaintext, tv->psize);
- ret |= do_digest(type, buf + i, tv->psize, tv->digest,
- tv->mdsize, tv->truncate, tv->key, tv->key_size, tv->acpkm,
- tv->acpkm_t, tv->block_size);
- }
- OPENSSL_free(buf);
-
- if (!ret)
- printf(cGREEN "success\n" cNORM);
+ /* Test alignment problems. */
+ int shifts = 32;
+ int i;
+ char *buf;
+ T(buf = OPENSSL_malloc(tv->psize + shifts));
+ for (i = 0; i < shifts; i++) {
+ memcpy(buf + i, tv->plaintext, tv->psize);
+ if (tv->hmac)
+ ret |= do_hmac(type, buf + i, tv->psize, tv->hmac,
+ tv->mdsize, tv->key, tv->key_size);
else
- printf(cRED "fail\n" cNORM);
- return ret;
+ ret |= do_digest(type, buf + i, tv->psize, tv->digest,
+ tv->mdsize, tv->truncate, tv->key, tv->key_size,
+ tv->acpkm, tv->acpkm_t, tv->block_size);
+ }
+ OPENSSL_free(buf);
+
+ if (!ret)
+ printf(cGREEN "success\n" cNORM);
+ else
+ printf(cRED "fail\n" cNORM);
+ return ret;
}
#define SUPER_SIZE 256
{
int ret = 0;
- printf(cBLUE "Synthetic test %s: " cNORM, tv->name);
+ printf(cBLUE "MD Test %s: " cNORM, tv->name);
fflush(stdout);
unsigned int shifts;
projects / openssl-gost / engine.git / blobdiff