1 /* 2 * Copyright 2019-2022 The OpenSSL Project Authors. All Rights Reserved. 3 * 4 * Licensed under the Apache License 2.0 (the "License"). You may not use 5 * this file except in compliance with the License. You can obtain a copy 6 * in the file LICENSE in the source distribution or at 7 * https://www.openssl.org/source/license.html 8 */ 9 10 #include <openssl/evp.h> 11 #include "testutil.h" 12 13 static const unsigned char gcm_key[] = { 14 0xee, 0xbc, 0x1f, 0x57, 0x48, 0x7f, 0x51, 0x92, 0x1c, 0x04, 0x65, 0x66, 15 0x5f, 0x8a, 0xe6, 0xd1, 0x65, 0x8b, 0xb2, 0x6d, 0xe6, 0xf8, 0xa0, 0x69, 16 0xa3, 0x52, 0x02, 0x93, 0xa5, 0x72, 0x07, 0x8f 17 }; 18 static const unsigned char gcm_iv[] = { 19 0x99, 0xaa, 0x3e, 0x68, 0xed, 0x81, 0x73, 0xa0, 0xee, 0xd0, 0x66, 0x84 20 }; 21 static const unsigned char gcm_pt[] = { 22 0xf5, 0x6e, 0x87, 0x05, 0x5b, 0xc3, 0x2d, 0x0e, 0xeb, 0x31, 0xb2, 0xea, 23 0xcc, 0x2b, 0xf2, 0xa5 24 }; 25 static const unsigned char gcm_aad[] = { 26 0x4d, 0x23, 0xc3, 0xce, 0xc3, 0x34, 0xb4, 0x9b, 0xdb, 0x37, 0x0c, 0x43, 27 0x7f, 0xec, 0x78, 0xde 28 }; 29 static const unsigned char gcm_ct[] = { 30 0xf7, 0x26, 0x44, 0x13, 0xa8, 0x4c, 0x0e, 0x7c, 0xd5, 0x36, 0x86, 0x7e, 31 0xb9, 0xf2, 0x17, 0x36 32 }; 33 static const unsigned char gcm_tag[] = { 34 0x67, 0xba, 0x05, 0x10, 0x26, 0x2a, 0xe4, 0x87, 0xd7, 0x37, 0xee, 0x62, 35 0x98, 0xf7, 0x7e, 0x0c 36 }; 37 38 static int do_encrypt(unsigned char *iv_gen, unsigned char *ct, int *ct_len, 39 unsigned char *tag, int *tag_len) 40 { 41 int ret = 0; 42 EVP_CIPHER_CTX *ctx = NULL; 43 int outlen; 44 unsigned char outbuf[64]; 45 46 *tag_len = 16; 47 ret = TEST_ptr(ctx = EVP_CIPHER_CTX_new()) 48 && TEST_true(EVP_EncryptInit_ex(ctx, EVP_aes_256_gcm(), NULL, NULL, 49 NULL) > 0) 50 && TEST_true(EVP_EncryptInit_ex(ctx, NULL, NULL, gcm_key, 51 iv_gen != NULL ? NULL : gcm_iv) > 0) 52 && TEST_true(EVP_EncryptUpdate(ctx, NULL, &outlen, gcm_aad, 53 sizeof(gcm_aad)) > 0) 54 && TEST_true(EVP_EncryptUpdate(ctx, ct, ct_len, gcm_pt, 55 sizeof(gcm_pt)) > 0) 56 && TEST_true(EVP_EncryptFinal_ex(ctx, outbuf, &outlen) > 0) 57 && TEST_int_eq(EVP_CIPHER_CTX_get_tag_length(ctx), 16) 58 && TEST_true(EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_GET_TAG, 16, 59 tag) > 0) 60 && TEST_true(iv_gen == NULL 61 || EVP_CIPHER_CTX_get_original_iv(ctx, iv_gen, 12)); 62 EVP_CIPHER_CTX_free(ctx); 63 return ret; 64 } 65 66 static int do_decrypt(const unsigned char *iv, const unsigned char *ct, 67 int ct_len, const unsigned char *tag, int tag_len) 68 { 69 int ret = 0; 70 EVP_CIPHER_CTX *ctx = NULL; 71 int outlen, ptlen; 72 unsigned char pt[32]; 73 unsigned char outbuf[32]; 74 75 ret = TEST_ptr(ctx = EVP_CIPHER_CTX_new()) 76 && TEST_true(EVP_DecryptInit_ex(ctx, EVP_aes_256_gcm(), NULL, 77 NULL, NULL) > 0) 78 && TEST_true(EVP_DecryptInit_ex(ctx, NULL, NULL, gcm_key, iv) > 0) 79 && TEST_int_eq(EVP_CIPHER_CTX_get_tag_length(ctx), 16) 80 && TEST_true(EVP_DecryptUpdate(ctx, NULL, &outlen, gcm_aad, 81 sizeof(gcm_aad)) > 0) 82 && TEST_true(EVP_DecryptUpdate(ctx, pt, &ptlen, ct, 83 ct_len) > 0) 84 && TEST_true(EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_SET_TAG, 85 tag_len, (void *)tag) > 0) 86 && TEST_true(EVP_DecryptFinal_ex(ctx, outbuf, &outlen) > 0) 87 && TEST_mem_eq(gcm_pt, sizeof(gcm_pt), pt, ptlen); 88 89 EVP_CIPHER_CTX_free(ctx); 90 return ret; 91 } 92 93 static int kat_test(void) 94 { 95 unsigned char tag[32]; 96 unsigned char ct[32]; 97 int ctlen = 0, taglen = 0; 98 99 return do_encrypt(NULL, ct, &ctlen, tag, &taglen) 100 && TEST_mem_eq(gcm_ct, sizeof(gcm_ct), ct, ctlen) 101 && TEST_mem_eq(gcm_tag, sizeof(gcm_tag), tag, taglen) 102 && do_decrypt(gcm_iv, ct, ctlen, tag, taglen); 103 } 104 105 static int badkeylen_test(void) 106 { 107 int ret; 108 EVP_CIPHER_CTX *ctx = NULL; 109 const EVP_CIPHER *cipher; 110 111 ret = TEST_ptr(cipher = EVP_aes_192_gcm()) 112 && TEST_ptr(ctx = EVP_CIPHER_CTX_new()) 113 && TEST_true(EVP_EncryptInit_ex(ctx, cipher, NULL, NULL, NULL)) 114 && TEST_int_le(EVP_CIPHER_CTX_set_key_length(ctx, 2), 0); 115 EVP_CIPHER_CTX_free(ctx); 116 return ret; 117 } 118 119 static int ivgen_test(void) 120 { 121 unsigned char iv_gen[16]; 122 unsigned char tag[32]; 123 unsigned char ct[32]; 124 int ctlen = 0, taglen = 0; 125 126 return do_encrypt(iv_gen, ct, &ctlen, tag, &taglen) 127 && do_decrypt(iv_gen, ct, ctlen, tag, taglen); 128 } 129 130 int setup_tests(void) 131 { 132 ADD_TEST(kat_test); 133 ADD_TEST(badkeylen_test); 134 ADD_TEST(ivgen_test); 135 return 1; 136 } 137