From 0ec3f1a77a0ff3addd205527e74e1260d4a7ed54 Mon Sep 17 00:00:00 2001 From: Vitaly Chikunov Date: Sat, 9 May 2020 02:49:47 +0300 Subject: [PATCH] test_digest: Add HMAC tests for Streebog From RFC 7836 (B) and R 50.1.113-2016 (A). --- test_digest.c | 118 ++++++++++++++++++++++++++++++++++++++++---------- 1 file changed, 94 insertions(+), 24 deletions(-) diff --git a/test_digest.c b/test_digest.c index a395f89..71470f4 100644 --- a/test_digest.c +++ b/test_digest.c @@ -9,6 +9,7 @@ #include #include +#include #include #include #include @@ -139,6 +140,7 @@ struct hash_testvec { const char *name; /* Test name and source. */ const char *plaintext; /* Input (of psize), NULL for synthetic test. */ const char *digest; /* Expected output (of EVP_MD_size or truncate). */ + const char *hmac; /* Expected output for HMAC tests. */ const char *key; /* MAC key.*/ int psize; /* Input (plaintext) size. */ int mdsize; /* Compare to EVP_MD_size() if non-zero. */ @@ -244,6 +246,36 @@ static const struct hash_testvec testvecs[] = { .digest = MAC_omac_acpkm2, .mdsize = sizeof(MAC_omac_acpkm2), }, + { /* HMAC tests. */ + .nid = NID_id_GostR3411_2012_512, + .name = "HMAC_GOSTR3411_2012_512 from RFC 7836 (B) and R 50.1.113-2016 (A)", + .plaintext = + "\x01\x26\xbd\xb8\x78\x00\xaf\x21\x43\x41\x45\x65\x63\x78\x01\x00", + .psize = 16, + .key = + "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f" + "\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f", + .key_size = 32, + .hmac = + "\xa5\x9b\xab\x22\xec\xae\x19\xc6\x5f\xbd\xe6\xe5\xf4\xe9\xf5\xd8" + "\x54\x9d\x31\xf0\x37\xf9\xdf\x9b\x90\x55\x00\xe1\x71\x92\x3a\x77" + "\x3d\x5f\x15\x30\xf2\xed\x7e\x96\x4c\xb2\xee\xdc\x29\xe9\xad\x2f" + "\x3a\xfe\x93\xb2\x81\x4f\x79\xf5\x00\x0f\xfc\x03\x66\xc2\x51\xe6", + }, + { + .nid = NID_id_GostR3411_2012_256, + .name = "HMAC_GOSTR3411_2012_256 from RFC 7836 (B) and R 50.1.113-2016 (A)", + .plaintext = + "\x01\x26\xbd\xb8\x78\x00\xaf\x21\x43\x41\x45\x65\x63\x78\x01\x00", + .psize = 16, + .key = + "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f" + "\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f", + .key_size = 32, + .hmac = + "\xa1\xaa\x5f\x7d\xe4\x02\xd7\xb3\xd3\x23\xf2\x99\x1c\x8d\x45\x34" + "\x01\x31\x37\x01\x0a\x83\x75\x4f\xd0\xaf\x6d\x7c\xd4\x92\x2e\xd9", + }, /* Other KATs. */ { .nid = NID_id_GostR3411_2012_512, @@ -382,6 +414,35 @@ static void hexdump(const void *ptr, size_t len) printf("\n"); } +static int do_hmac(const EVP_MD *type, const char *plaintext, + unsigned int psize, const char *etalon, int mdsize, + const char *key, unsigned int key_size) +{ + HMAC_CTX *ctx; + T(ctx = HMAC_CTX_new()); + T(HMAC_Init_ex(ctx, key, key_size, type, NULL)); + if (mdsize) + T(HMAC_size(ctx) == mdsize); + else + T(mdsize = HMAC_size(ctx)); + T(HMAC_Update(ctx, (const unsigned char *)plaintext, psize)); + + unsigned int len; + unsigned char md[EVP_MAX_MD_SIZE]; + T(HMAC_Final(ctx, md, &len)); + + HMAC_CTX_free(ctx); + T(len == mdsize); + + if (memcmp(md, etalon, mdsize) != 0) { + printf(cRED "hmac mismatch\n" cNORM); + hexdump(etalon, mdsize); + hexdump(md, mdsize); + return 1; + } + + return 0; +} static int do_digest(const EVP_MD *type, const char *plaintext, unsigned int psize, const char *etalon, int mdsize, int truncate, const char *key, unsigned int key_size, int acpkm, int acpkm_t, @@ -430,35 +491,44 @@ static int do_digest(const EVP_MD *type, const char *plaintext, static int do_test(const struct hash_testvec *tv) { - int ret = 0; + int ret = 0; - const EVP_MD *type; - T(type = EVP_get_digestbynid(tv->nid)); - const char *name = EVP_MD_name(type); - printf(cBLUE "Test %s: %s: " cNORM, name, tv->name); - fflush(stdout); + const EVP_MD *type; + T(type = EVP_get_digestbynid(tv->nid)); + const char *name = EVP_MD_name(type); + printf(cBLUE "%s Test %s: %s: " cNORM, tv->hmac? "HMAC" : "MD", + name, tv->name); + fflush(stdout); + if (tv->hmac) + ret |= do_hmac(type, tv->plaintext, tv->psize, tv->hmac, + tv->mdsize, tv->key, tv->key_size); + else ret |= do_digest(type, tv->plaintext, tv->psize, tv->digest, tv->mdsize, tv->truncate, tv->key, tv->key_size, tv->acpkm, tv->acpkm_t, tv->block_size); - /* Text alignment problems. */ - int shifts = 32; - int i; - char *buf; - T(buf = OPENSSL_malloc(tv->psize + shifts)); - for (i = 0; i < shifts; i++) { - memcpy(buf + i, tv->plaintext, tv->psize); - ret |= do_digest(type, buf + i, tv->psize, tv->digest, - tv->mdsize, tv->truncate, tv->key, tv->key_size, tv->acpkm, - tv->acpkm_t, tv->block_size); - } - OPENSSL_free(buf); - - if (!ret) - printf(cGREEN "success\n" cNORM); + /* Test alignment problems. */ + int shifts = 32; + int i; + char *buf; + T(buf = OPENSSL_malloc(tv->psize + shifts)); + for (i = 0; i < shifts; i++) { + memcpy(buf + i, tv->plaintext, tv->psize); + if (tv->hmac) + ret |= do_hmac(type, buf + i, tv->psize, tv->hmac, + tv->mdsize, tv->key, tv->key_size); else - printf(cRED "fail\n" cNORM); - return ret; + ret |= do_digest(type, buf + i, tv->psize, tv->digest, + tv->mdsize, tv->truncate, tv->key, tv->key_size, + tv->acpkm, tv->acpkm_t, tv->block_size); + } + OPENSSL_free(buf); + + if (!ret) + printf(cGREEN "success\n" cNORM); + else + printf(cRED "fail\n" cNORM); + return ret; } #define SUPER_SIZE 256 @@ -547,7 +617,7 @@ static int do_synthetic_test(const struct hash_testvec *tv) { int ret = 0; - printf(cBLUE "Synthetic test %s: " cNORM, tv->name); + printf(cBLUE "MD Test %s: " cNORM, tv->name); fflush(stdout); unsigned int shifts; -- 2.39.2