2 # Perl utility to run or verify FIPS 140-2 CAVP algorithm tests based on the
3 # pathnames of input algorithm test files actually present (the unqualified
4 # file names are consistent but the pathnames are not).
7 # FIPS test definitions
8 # List of all the unqualified file names we expect and command lines to run
11 my @fips_dsa_test_list = (
15 [ "PQGGen", "fips_dssvs pqg", "path:[^C]DSA/.*PQGGen" ],
16 [ "KeyPair", "fips_dssvs keypair", "path:[^C]DSA/.*KeyPair" ],
17 [ "SigGen", "fips_dssvs siggen", "path:[^C]DSA/.*SigGen" ],
18 [ "SigVer", "fips_dssvs sigver", "path:[^C]DSA/.*SigVer" ]
22 my @fips_dsa_pqgver_test_list = (
24 [ "PQGVer", "fips_dssvs pqgver", "path:[^C]DSA/.*PQGVer" ]
29 my @fips_dsa2_test_list = (
33 [ "PQGGen", "fips_dssvs pqg", "path:[^C]DSA2/.*PQGGen" ],
34 [ "KeyPair", "fips_dssvs keypair", "path:[^C]DSA2/.*KeyPair" ],
35 [ "SigGen", "fips_dssvs siggen", "path:[^C]DSA2/.*SigGen" ],
36 [ "SigVer", "fips_dssvs sigver", "path:[^C]DSA2/.*SigVer" ],
37 [ "PQGVer", "fips_dssvs pqgver", "path:[^C]DSA2/.*PQGVer" ]
41 # ECDSA and ECDSA2 tests
42 my @fips_ecdsa_test_list = (
46 [ "KeyPair", "fips_ecdsavs KeyPair", "path:/ECDSA/.*KeyPair" ],
47 [ "PKV", "fips_ecdsavs PKV", "path:/ECDSA/.*PKV" ],
48 [ "SigGen", "fips_ecdsavs SigGen", "path:/ECDSA/.*SigGen" ],
49 [ "SigVer", "fips_ecdsavs SigVer", "path:/ECDSA/.*SigVer" ],
53 [ "KeyPair", "fips_ecdsavs KeyPair", "path:/ECDSA2/.*KeyPair" ],
54 [ "PKV", "fips_ecdsavs PKV", "path:/ECDSA2/.*PKV" ],
55 [ "SigGen", "fips_ecdsavs SigGen", "path:/ECDSA2/.*SigGen" ],
56 [ "SigVer", "fips_ecdsavs SigVer", "path:/ECDSA2/.*SigVer" ],
62 my @fips_rsa_test_list = (
66 [ "SigGen15", "fips_rsastest" ],
67 [ "SigVer15", "fips_rsavtest" ],
68 [ "SigVerRSA", "fips_rsavtest -x931" ],
69 [ "KeyGenRSA", "fips_rsagtest" ],
70 [ "SigGenRSA", "fips_rsastest -x931" ]
74 # Special cases for PSS. The filename itself is
75 # not sufficient to determine the test. Addditionally we
76 # need to examine the file contents to determine the salt length
77 # In these cases the test filename has (saltlen) appended.
79 # RSA PSS salt length 0 tests
81 my @fips_rsa_pss0_test_list = (
83 [ "SigGenPSS(0)", "fips_rsastest -saltlen 0",
84 'file:^\s*#\s*salt\s+len:\s+0\s*$' ],
85 [ "SigVerPSS(0)", "fips_rsavtest -saltlen 0",
86 'file:^\s*#\s*salt\s+len:\s+0\s*$' ],
90 # RSA PSS salt length 62 tests
92 my @fips_rsa_pss62_test_list = (
93 [ "SigGenPSS(62)", "fips_rsastest -saltlen 62",
94 'file:^\s*#\s*salt\s+len:\s+62\s*$' ],
95 [ "SigVerPSS(62)", "fips_rsavtest -saltlen 62",
96 'file:^\s*#\s*salt\s+len:\s+62\s*$' ],
101 my @fips_sha_test_list = (
105 [ "SHA1LongMsg", "fips_shatest" ],
106 [ "SHA1Monte", "fips_shatest" ],
107 [ "SHA1ShortMsg", "fips_shatest" ],
108 [ "SHA224LongMsg", "fips_shatest" ],
109 [ "SHA224Monte", "fips_shatest" ],
110 [ "SHA224ShortMsg", "fips_shatest" ],
111 [ "SHA256LongMsg", "fips_shatest" ],
112 [ "SHA256Monte", "fips_shatest" ],
113 [ "SHA256ShortMsg", "fips_shatest" ],
114 [ "SHA384LongMsg", "fips_shatest" ],
115 [ "SHA384Monte", "fips_shatest" ],
116 [ "SHA384ShortMsg", "fips_shatest" ],
117 [ "SHA512LongMsg", "fips_shatest" ],
118 [ "SHA512Monte", "fips_shatest" ],
119 [ "SHA512ShortMsg", "fips_shatest" ]
125 my @fips_hmac_test_list = (
129 [ "HMAC", "fips_hmactest" ]
135 my @fips_cmac_test_list = (
139 [ "CMACGenAES128", "fips_cmactest -a aes128 -g" ],
140 [ "CMACVerAES128", "fips_cmactest -a aes128 -v" ],
141 [ "CMACGenAES192", "fips_cmactest -a aes192 -g" ],
142 [ "CMACVerAES192", "fips_cmactest -a aes192 -v" ],
143 [ "CMACGenAES256", "fips_cmactest -a aes256 -g" ],
144 [ "CMACVerAES256", "fips_cmactest -a aes256 -v" ],
145 [ "CMACGenTDES3", "fips_cmactest -a tdes3 -g" ],
146 [ "CMACVerTDES3", "fips_cmactest -a tdes3 -v" ],
150 # RAND tests, AES version
152 my @fips_rand_aes_test_list = (
156 [ "ANSI931_AES128MCT", "fips_rngvs mct" ],
157 [ "ANSI931_AES192MCT", "fips_rngvs mct" ],
158 [ "ANSI931_AES256MCT", "fips_rngvs mct" ],
159 [ "ANSI931_AES128VST", "fips_rngvs vst" ],
160 [ "ANSI931_AES192VST", "fips_rngvs vst" ],
161 [ "ANSI931_AES256VST", "fips_rngvs vst" ]
165 # RAND tests, DES2 version
167 my @fips_rand_des2_test_list = (
171 [ "ANSI931_TDES2MCT", "fips_rngvs mct" ],
172 [ "ANSI931_TDES2VST", "fips_rngvs vst" ]
178 my @fips_aes_test_list = (
182 [ "CBCGFSbox128", "fips_aesavs -f" ],
183 [ "CBCGFSbox192", "fips_aesavs -f" ],
184 [ "CBCGFSbox256", "fips_aesavs -f" ],
185 [ "CBCKeySbox128", "fips_aesavs -f" ],
186 [ "CBCKeySbox192", "fips_aesavs -f" ],
187 [ "CBCKeySbox256", "fips_aesavs -f" ],
188 [ "CBCMCT128", "fips_aesavs -f" ],
189 [ "CBCMCT192", "fips_aesavs -f" ],
190 [ "CBCMCT256", "fips_aesavs -f" ],
191 [ "CBCMMT128", "fips_aesavs -f" ],
192 [ "CBCMMT192", "fips_aesavs -f" ],
193 [ "CBCMMT256", "fips_aesavs -f" ],
194 [ "CBCVarKey128", "fips_aesavs -f" ],
195 [ "CBCVarKey192", "fips_aesavs -f" ],
196 [ "CBCVarKey256", "fips_aesavs -f" ],
197 [ "CBCVarTxt128", "fips_aesavs -f" ],
198 [ "CBCVarTxt192", "fips_aesavs -f" ],
199 [ "CBCVarTxt256", "fips_aesavs -f" ],
200 [ "CFB128GFSbox128", "fips_aesavs -f" ],
201 [ "CFB128GFSbox192", "fips_aesavs -f" ],
202 [ "CFB128GFSbox256", "fips_aesavs -f" ],
203 [ "CFB128KeySbox128", "fips_aesavs -f" ],
204 [ "CFB128KeySbox192", "fips_aesavs -f" ],
205 [ "CFB128KeySbox256", "fips_aesavs -f" ],
206 [ "CFB128MCT128", "fips_aesavs -f" ],
207 [ "CFB128MCT192", "fips_aesavs -f" ],
208 [ "CFB128MCT256", "fips_aesavs -f" ],
209 [ "CFB128MMT128", "fips_aesavs -f" ],
210 [ "CFB128MMT192", "fips_aesavs -f" ],
211 [ "CFB128MMT256", "fips_aesavs -f" ],
212 [ "CFB128VarKey128", "fips_aesavs -f" ],
213 [ "CFB128VarKey192", "fips_aesavs -f" ],
214 [ "CFB128VarKey256", "fips_aesavs -f" ],
215 [ "CFB128VarTxt128", "fips_aesavs -f" ],
216 [ "CFB128VarTxt192", "fips_aesavs -f" ],
217 [ "CFB128VarTxt256", "fips_aesavs -f" ],
218 [ "CFB8GFSbox128", "fips_aesavs -f" ],
219 [ "CFB8GFSbox192", "fips_aesavs -f" ],
220 [ "CFB8GFSbox256", "fips_aesavs -f" ],
221 [ "CFB8KeySbox128", "fips_aesavs -f" ],
222 [ "CFB8KeySbox192", "fips_aesavs -f" ],
223 [ "CFB8KeySbox256", "fips_aesavs -f" ],
224 [ "CFB8MCT128", "fips_aesavs -f" ],
225 [ "CFB8MCT192", "fips_aesavs -f" ],
226 [ "CFB8MCT256", "fips_aesavs -f" ],
227 [ "CFB8MMT128", "fips_aesavs -f" ],
228 [ "CFB8MMT192", "fips_aesavs -f" ],
229 [ "CFB8MMT256", "fips_aesavs -f" ],
230 [ "CFB8VarKey128", "fips_aesavs -f" ],
231 [ "CFB8VarKey192", "fips_aesavs -f" ],
232 [ "CFB8VarKey256", "fips_aesavs -f" ],
233 [ "CFB8VarTxt128", "fips_aesavs -f" ],
234 [ "CFB8VarTxt192", "fips_aesavs -f" ],
235 [ "CFB8VarTxt256", "fips_aesavs -f" ],
237 [ "ECBGFSbox128", "fips_aesavs -f" ],
238 [ "ECBGFSbox192", "fips_aesavs -f" ],
239 [ "ECBGFSbox256", "fips_aesavs -f" ],
240 [ "ECBKeySbox128", "fips_aesavs -f" ],
241 [ "ECBKeySbox192", "fips_aesavs -f" ],
242 [ "ECBKeySbox256", "fips_aesavs -f" ],
243 [ "ECBMCT128", "fips_aesavs -f" ],
244 [ "ECBMCT192", "fips_aesavs -f" ],
245 [ "ECBMCT256", "fips_aesavs -f" ],
246 [ "ECBMMT128", "fips_aesavs -f" ],
247 [ "ECBMMT192", "fips_aesavs -f" ],
248 [ "ECBMMT256", "fips_aesavs -f" ],
249 [ "ECBVarKey128", "fips_aesavs -f" ],
250 [ "ECBVarKey192", "fips_aesavs -f" ],
251 [ "ECBVarKey256", "fips_aesavs -f" ],
252 [ "ECBVarTxt128", "fips_aesavs -f" ],
253 [ "ECBVarTxt192", "fips_aesavs -f" ],
254 [ "ECBVarTxt256", "fips_aesavs -f" ],
255 [ "OFBGFSbox128", "fips_aesavs -f" ],
256 [ "OFBGFSbox192", "fips_aesavs -f" ],
257 [ "OFBGFSbox256", "fips_aesavs -f" ],
258 [ "OFBKeySbox128", "fips_aesavs -f" ],
259 [ "OFBKeySbox192", "fips_aesavs -f" ],
260 [ "OFBKeySbox256", "fips_aesavs -f" ],
261 [ "OFBMCT128", "fips_aesavs -f" ],
262 [ "OFBMCT192", "fips_aesavs -f" ],
263 [ "OFBMCT256", "fips_aesavs -f" ],
264 [ "OFBMMT128", "fips_aesavs -f" ],
265 [ "OFBMMT192", "fips_aesavs -f" ],
266 [ "OFBMMT256", "fips_aesavs -f" ],
267 [ "OFBVarKey128", "fips_aesavs -f" ],
268 [ "OFBVarKey192", "fips_aesavs -f" ],
269 [ "OFBVarKey256", "fips_aesavs -f" ],
270 [ "OFBVarTxt128", "fips_aesavs -f" ],
271 [ "OFBVarTxt192", "fips_aesavs -f" ],
272 [ "OFBVarTxt256", "fips_aesavs -f" ]
276 my @fips_aes_cfb1_test_list = (
280 [ "CFB1GFSbox128", "fips_aesavs -f" ],
281 [ "CFB1GFSbox192", "fips_aesavs -f" ],
282 [ "CFB1GFSbox256", "fips_aesavs -f" ],
283 [ "CFB1KeySbox128", "fips_aesavs -f" ],
284 [ "CFB1KeySbox192", "fips_aesavs -f" ],
285 [ "CFB1KeySbox256", "fips_aesavs -f" ],
286 [ "CFB1MCT128", "fips_aesavs -f" ],
287 [ "CFB1MCT192", "fips_aesavs -f" ],
288 [ "CFB1MCT256", "fips_aesavs -f" ],
289 [ "CFB1MMT128", "fips_aesavs -f" ],
290 [ "CFB1MMT192", "fips_aesavs -f" ],
291 [ "CFB1MMT256", "fips_aesavs -f" ],
292 [ "CFB1VarKey128", "fips_aesavs -f" ],
293 [ "CFB1VarKey192", "fips_aesavs -f" ],
294 [ "CFB1VarKey256", "fips_aesavs -f" ],
295 [ "CFB1VarTxt128", "fips_aesavs -f" ],
296 [ "CFB1VarTxt192", "fips_aesavs -f" ],
297 [ "CFB1VarTxt256", "fips_aesavs -f" ]
301 my @fips_aes_ccm_test_list = (
307 [ "DVPT128", "fips_gcmtest -ccm" ],
308 [ "DVPT192", "fips_gcmtest -ccm" ],
309 [ "DVPT256", "fips_gcmtest -ccm" ],
310 [ "VADT128", "fips_gcmtest -ccm" ],
311 [ "VADT192", "fips_gcmtest -ccm" ],
312 [ "VADT256", "fips_gcmtest -ccm" ],
313 [ "VNT128", "fips_gcmtest -ccm" ],
314 [ "VNT192", "fips_gcmtest -ccm" ],
315 [ "VNT256", "fips_gcmtest -ccm" ],
316 [ "VPT128", "fips_gcmtest -ccm" ],
317 [ "VPT192", "fips_gcmtest -ccm" ],
318 [ "VPT256", "fips_gcmtest -ccm" ],
319 [ "VTT128", "fips_gcmtest -ccm" ],
320 [ "VTT192", "fips_gcmtest -ccm" ],
321 [ "VTT256", "fips_gcmtest -ccm" ]
325 my @fips_aes_gcm_test_list = (
331 [ "gcmDecrypt128", "fips_gcmtest -decrypt" ],
332 [ "gcmDecrypt192", "fips_gcmtest -decrypt" ],
333 [ "gcmDecrypt256", "fips_gcmtest -decrypt" ],
334 [ "gcmEncryptIntIV128", "fips_gcmtest -encrypt" ],
335 [ "gcmEncryptIntIV192", "fips_gcmtest -encrypt" ],
336 [ "gcmEncryptIntIV256", "fips_gcmtest -encrypt" ],
340 my @fips_aes_xts_test_list = (
345 [ "XTSGenAES128", "fips_gcmtest -xts" ],
346 [ "XTSGenAES256", "fips_gcmtest -xts" ],
352 my @fips_des3_test_list = (
356 [ "TCBCinvperm", "fips_desmovs -f" ],
357 [ "TCBCMMT1", "fips_desmovs -f" ],
358 [ "TCBCMMT2", "fips_desmovs -f" ],
359 [ "TCBCMMT3", "fips_desmovs -f" ],
360 [ "TCBCMonte1", "fips_desmovs -f" ],
361 [ "TCBCMonte2", "fips_desmovs -f" ],
362 [ "TCBCMonte3", "fips_desmovs -f" ],
363 [ "TCBCpermop", "fips_desmovs -f" ],
364 [ "TCBCsubtab", "fips_desmovs -f" ],
365 [ "TCBCvarkey", "fips_desmovs -f" ],
366 [ "TCBCvartext", "fips_desmovs -f" ],
367 [ "TCFB64invperm", "fips_desmovs -f" ],
368 [ "TCFB64MMT1", "fips_desmovs -f" ],
369 [ "TCFB64MMT2", "fips_desmovs -f" ],
370 [ "TCFB64MMT3", "fips_desmovs -f" ],
371 [ "TCFB64Monte1", "fips_desmovs -f" ],
372 [ "TCFB64Monte2", "fips_desmovs -f" ],
373 [ "TCFB64Monte3", "fips_desmovs -f" ],
374 [ "TCFB64permop", "fips_desmovs -f" ],
375 [ "TCFB64subtab", "fips_desmovs -f" ],
376 [ "TCFB64varkey", "fips_desmovs -f" ],
377 [ "TCFB64vartext", "fips_desmovs -f" ],
378 [ "TCFB8invperm", "fips_desmovs -f" ],
379 [ "TCFB8MMT1", "fips_desmovs -f" ],
380 [ "TCFB8MMT2", "fips_desmovs -f" ],
381 [ "TCFB8MMT3", "fips_desmovs -f" ],
382 [ "TCFB8Monte1", "fips_desmovs -f" ],
383 [ "TCFB8Monte2", "fips_desmovs -f" ],
384 [ "TCFB8Monte3", "fips_desmovs -f" ],
385 [ "TCFB8permop", "fips_desmovs -f" ],
386 [ "TCFB8subtab", "fips_desmovs -f" ],
387 [ "TCFB8varkey", "fips_desmovs -f" ],
388 [ "TCFB8vartext", "fips_desmovs -f" ],
389 [ "TECBinvperm", "fips_desmovs -f" ],
390 [ "TECBMMT1", "fips_desmovs -f" ],
391 [ "TECBMMT2", "fips_desmovs -f" ],
392 [ "TECBMMT3", "fips_desmovs -f" ],
393 [ "TECBMonte1", "fips_desmovs -f" ],
394 [ "TECBMonte2", "fips_desmovs -f" ],
395 [ "TECBMonte3", "fips_desmovs -f" ],
396 [ "TECBpermop", "fips_desmovs -f" ],
397 [ "TECBsubtab", "fips_desmovs -f" ],
398 [ "TECBvarkey", "fips_desmovs -f" ],
399 [ "TECBvartext", "fips_desmovs -f" ],
400 [ "TOFBinvperm", "fips_desmovs -f" ],
401 [ "TOFBMMT1", "fips_desmovs -f" ],
402 [ "TOFBMMT2", "fips_desmovs -f" ],
403 [ "TOFBMMT3", "fips_desmovs -f" ],
404 [ "TOFBMonte1", "fips_desmovs -f" ],
405 [ "TOFBMonte2", "fips_desmovs -f" ],
406 [ "TOFBMonte3", "fips_desmovs -f" ],
407 [ "TOFBpermop", "fips_desmovs -f" ],
408 [ "TOFBsubtab", "fips_desmovs -f" ],
409 [ "TOFBvarkey", "fips_desmovs -f" ],
410 [ "TOFBvartext", "fips_desmovs -f" ]
414 my @fips_des3_cfb1_test_list = (
418 [ "TCFB1invperm", "fips_desmovs -f" ],
419 [ "TCFB1MMT1", "fips_desmovs -f" ],
420 [ "TCFB1MMT2", "fips_desmovs -f" ],
421 [ "TCFB1MMT3", "fips_desmovs -f" ],
422 [ "TCFB1Monte1", "fips_desmovs -f" ],
423 [ "TCFB1Monte2", "fips_desmovs -f" ],
424 [ "TCFB1Monte3", "fips_desmovs -f" ],
425 [ "TCFB1permop", "fips_desmovs -f" ],
426 [ "TCFB1subtab", "fips_desmovs -f" ],
427 [ "TCFB1varkey", "fips_desmovs -f" ],
428 [ "TCFB1vartext", "fips_desmovs -f" ],
432 my @fips_drbg_test_list = (
434 # SP800-90 DRBG tests
436 [ "CTR_DRBG", "fips_drbgvs" ],
437 [ "Dual_EC_DRBG", "fips_drbgvs" ],
438 [ "Hash_DRBG", "fips_drbgvs" ],
439 [ "HMAC_DRBG", "fips_drbgvs" ]
443 my @fips_dh_test_list = (
446 "DH Ephemeral Primitives Only",
447 [ "KASValidityTest_FFCEphem_NOKC_ZZOnly_init", "fips_dhvs dhver" ],
448 [ "KASValidityTest_FFCEphem_NOKC_ZZOnly_resp", "fips_dhvs dhver" ],
452 my @fips_ecdh_test_list = (
455 "ECDH Ephemeral Primitives Only",
456 [ "KAS_ECC_CDH_PrimitiveTest", "fips_ecdhvs ecdhgen" ],
457 # [ "KASValidityTest_ECCEphemeralUnified_NOKC_ZZOnly_init",
458 # "fips_ecdhvs ecdhver" ],
459 # [ "KASValidityTest_ECCEphemeralUnified_NOKC_ZZOnly_resp",
460 # "fips_ecdhvs ecdhver" ],
465 # Verification special cases.
466 # In most cases the output of a test is deterministic and
467 # it can be compared to a known good result. A few involve
468 # the genration and use of random keys and the output will
469 # be different each time. In thoses cases we perform special tests
470 # to simply check their consistency. For example signature generation
471 # output will be run through signature verification to see if all outputs
475 my %verify_special = (
476 "PQGGen" => "fips_dssvs pqgver",
477 "KeyPair" => "fips_dssvs keyver",
478 "SigGen" => "fips_dssvs sigver",
479 "SigGen15" => "fips_rsavtest",
480 "SigGenRSA" => "fips_rsavtest -x931",
481 "SigGenPSS(0)" => "fips_rsavtest -saltlen 0",
482 "SigGenPSS(62)" => "fips_rsavtest -saltlen 62",
485 my $win32 = $^O =~ m/mswin/i;
495 my $ignore_missing = 0;
496 my $ignore_bogus = 0;
499 my $minimal_script = 0;
501 my $no_warn_missing = 0;
502 my $no_warn_bogus = 0;
503 my $rmcmd = "rm -rf";
533 if ( $_ eq "--win32" ) {
536 elsif ( $_ eq "--onedir" ) {
539 elsif ( $_ eq "--debug" ) {
542 elsif ( $_ eq "--quiet-missing" ) {
544 $no_warn_missing = 1;
546 elsif ( $_ eq "--ignore-missing" ) {
549 elsif ( $_ eq "--quiet-bogus" ) {
553 elsif ( $_ eq "--ignore-bogus" ) {
556 elsif ( $_ eq "--minimal-script" ) {
559 elsif (/--generate-script=(.*)$/) {
562 } elsif ( $_ eq "--generate" ) {
565 elsif ( $_ eq "--notest" ) {
568 elsif ( $_ eq "--quiet" ) {
571 elsif (/--dir=(.*)$/) {
574 elsif (/--rspdir=(.*)$/) {
577 elsif (/--tprefix=(.*)$/) {
580 elsif (/^--disable-all$/) {
581 foreach (keys %fips_enabled) {
582 $fips_enabled{$_} = 0;
585 elsif (/^--(enable|disable)-(.*)$/) {
586 if ( !exists $fips_enabled{$2} ) {
587 print STDERR "Unknown test $2\n";
590 if ( $1 eq "enable" ) {
591 $fips_enabled{$2} = 1;
594 $fips_enabled{$2} = 0;
597 elsif (/--filter=(.*)$/) {
600 elsif (/--rm=(.*)$/) {
603 elsif (/--script-tprefix=(.*)$/) {
606 elsif (/--mkdir=(.*)$/) {
609 elsif (/^--list-tests$/) {
621 if (!$fips_enabled{"v2"}) {
622 foreach (keys %fips_enabled) {
623 $fips_enabled{$_} = 0 if $fips_enabled{$_} == 2;
627 push @fips_test_list, @fips_dsa_test_list if $fips_enabled{"dsa"};
628 push @fips_test_list, @fips_dsa_pqgver_test_list if $fips_enabled{"dsa-pqgver"};
629 push @fips_test_list, @fips_dsa2_test_list if $fips_enabled{"dsa2"};
630 push @fips_test_list, @fips_ecdsa_test_list if $fips_enabled{"ecdsa"};
631 push @fips_test_list, @fips_rsa_test_list if $fips_enabled{"rsa"};
632 push @fips_test_list, @fips_rsa_pss0_test_list if $fips_enabled{"rsa-pss0"};
633 push @fips_test_list, @fips_rsa_pss62_test_list if $fips_enabled{"rsa-pss62"};
634 push @fips_test_list, @fips_sha_test_list if $fips_enabled{"sha"};
635 push @fips_test_list, @fips_hmac_test_list if $fips_enabled{"hmac"};
636 push @fips_test_list, @fips_cmac_test_list if $fips_enabled{"cmac"};
637 push @fips_test_list, @fips_rand_aes_test_list if $fips_enabled{"rand-aes"};
638 push @fips_test_list, @fips_rand_des2_test_list if $fips_enabled{"rand-des2"};
639 push @fips_test_list, @fips_aes_test_list if $fips_enabled{"aes"};
640 push @fips_test_list, @fips_aes_cfb1_test_list if $fips_enabled{"aes-cfb1"};
641 push @fips_test_list, @fips_des3_test_list if $fips_enabled{"des3"};
642 push @fips_test_list, @fips_des3_cfb1_test_list if $fips_enabled{"des3-cfb1"};
643 push @fips_test_list, @fips_drbg_test_list if $fips_enabled{"drbg"};
644 push @fips_test_list, @fips_aes_ccm_test_list if $fips_enabled{"aes-ccm"};
645 push @fips_test_list, @fips_aes_gcm_test_list if $fips_enabled{"aes-gcm"};
646 push @fips_test_list, @fips_aes_xts_test_list if $fips_enabled{"aes-xts"};
647 push @fips_test_list, @fips_dh_test_list if $fips_enabled{"dh"};
648 push @fips_test_list, @fips_ecdh_test_list if $fips_enabled{"ecdh"};
652 print "=====TEST LIST=====\n";
653 foreach $test ( sort keys %fips_enabled ) {
654 $en = $fips_enabled{$test};
655 $test =~ tr/[a-z]/[A-Z]/;
656 printf "%-10s %s\n", $test, $en ? "enabled" : "disabled";
661 foreach (@fips_test_list) {
668 $tvdir = "." unless defined $tvdir;
671 if ( !defined $tprefix ) {
676 $tprefix = "..\\out32dll\\";
682 $tprefix = "./" unless defined $tprefix;
685 $tprefix = "../test/" unless defined $tprefix;
689 sanity_check_exe( $win32, $tprefix) if $outfile eq "";
691 find_files( $filter, $tvdir );
693 sanity_check_files();
695 my ( $runerr, $cmperr, $cmpok, $scheckrunerr, $scheckerr, $scheckok, $skipcnt )
696 = ( 0, 0, 0, 0, 0, 0, 0 );
699 print "Outputting commands to $outfile\n" if $outfile ne "";
700 run_tests( $verify, $win32, $tprefix, $filter, $tvdir, $outfile );
703 print "ALGORITHM TEST VERIFY SUMMARY REPORT:\n";
704 print "Tests skipped due to missing files: $skipcnt\n";
705 print "Algorithm test program execution failures: $runerr\n";
706 print "Test comparisons successful: $cmpok\n";
707 print "Test comparisons failed: $cmperr\n";
708 print "Test sanity checks successful: $scheckok\n";
709 print "Test sanity checks failed: $scheckerr\n";
710 print "Sanity check program execution failures: $scheckrunerr\n";
712 if ( $runerr || $cmperr || $scheckrunerr || $scheckerr ) {
713 print "***TEST FAILURE***\n";
716 print "***ALL TESTS SUCCESSFUL***\n";
719 elsif ($outfile eq "") {
720 print "ALGORITHM TEST SUMMARY REPORT:\n";
721 print "Tests skipped due to missing files: $skipcnt\n";
722 print "Algorithm test program execution failures: $runerr\n";
725 print "***TEST FAILURE***\n";
728 print "***ALL TESTS SUCCESSFUL***\n";
732 #--------------------------------
734 ( my $cmd ) = ( $0 =~ m#([^/]+)$# );
736 $cmd: generate run CAVP algorithm tests
737 --debug Enable debug output
738 --dir=<dirname> Optional root for *.req file search
740 --onedir <dirname> Assume all components in current directory
741 --rspdir=<dirname> Name of subdirectories containing *.rsp files, default "resp"
743 --ignore-bogus Ignore duplicate or bogus files
744 --ignore-missing Ignore missing test files
746 --generate Generate algorithm test output
747 --win32 Win32 environment
748 --enable-<alg> Enable algorithm set <alg>.
749 --disable-<alg> Disable algorithm set <alg>.
750 Where <alg> can be one of:
753 while (my ($key, $value) = each %fips_enabled)
755 printf "\t\t%-20s(%s by default)\n", $key ,
756 $value == 1 ? "enabled" : "disabled";
760 # Sanity check to see if all necessary executables exist
762 sub sanity_check_exe {
763 my ( $win32, $tprefix, ) = @_;
766 foreach (@fips_test_list) {
770 $cmd = $tprefix . $cmd;
771 $cmd .= ".exe" if $win32;
775 foreach ( sort keys %exe_list ) {
777 print STDERR "ERROR: can't find executable $_\n";
782 print STDERR "FATAL ERROR: executables missing\n";
786 print STDERR "Executable sanity check passed OK\n";
790 # Search for all request and response files
793 my ( $filter, $dir ) = @_;
794 my ( $dirh, $testname, $tref );
795 opendir( $dirh, $dir );
796 while ( $_ = readdir($dirh) ) {
797 next if ( $_ eq "." || $_ eq ".." );
800 if (/\/([^\/]*)\.rsp$/) {
801 $tref = find_test($1, $_);
802 if ( defined $tref ) {
803 $testname = $$tref[0];
804 if ( $$tref[4] eq "" ) {
809 "WARNING: duplicate response file $_ for test $testname\n";
814 print STDERR "WARNING: bogus file $_\n" unless $no_warn_bogus;
818 next unless /$filter.*\.req$/i;
819 if (/\/([^\/]*)\.req$/) {
820 $tref = find_test($1, $_);
821 if ( defined $tref ) {
822 $testname = $$tref[0];
823 if ( $$tref[3] eq "" ) {
828 "WARNING: duplicate request file $_ for test $testname\n";
833 elsif ( !/SHAmix\.req$/ ) {
834 print STDERR "WARNING: unrecognized filename $_\n" unless $no_warn_bogus;
840 find_files( $filter, $_ );
846 # Find test based on filename.
847 # In ambiguous cases search file contents for a match
851 my ( $test, $path ) = @_;
852 foreach $tref (@fips_test_list) {
853 next unless ref($tref);
854 my ( $tst, $cmd, $excmd, $req, $resp ) = @$tref;
858 if (defined $excmd) {
859 if ($excmd =~ /^path:(.*)$/) {
861 return $tref if ($path =~ /$fmatch/);
864 elsif ($excmd =~ /^file:(.*)$/) {
869 return $tref if (!defined $regexp);
872 open( IN, $path ) || die "Can't Open File $path";
873 while ($line = <IN>) {
874 if ($line =~ /$regexp/i) {
880 return $tref if $found == 1;
886 sub sanity_check_files {
888 foreach (@fips_test_list) {
890 my ( $tst, $cmd, $regexp, $req, $resp ) = @$_;
892 #print STDERR "FILES $tst, $cmd, $req, $resp\n";
894 print STDERR "WARNING: missing request file for $tst\n" unless $no_warn_missing;
898 if ( $verify && $resp eq "" ) {
899 print STDERR "WARNING: no response file for test $tst\n";
902 elsif ( !$verify && $resp ne "" ) {
903 print STDERR "WARNING: response file $resp will be overwritten\n";
907 print STDERR "ERROR: test vector file set not complete\n";
908 exit(1) unless $ignore_missing;
912 "ERROR: $nbogus bogus or duplicate request and response files\n";
913 exit(1) unless $ignore_bogus;
915 if ( $debug && !$nbogus && !$bad ) {
916 print STDERR "test vector file set complete\n";
921 my ( $verify, $win32, $tprefix, $filter, $tvdir, $outfile ) = @_;
922 my ( $tname, $tref );
925 if ($outfile ne "") {
926 open OUT, ">$outfile" || die "Can't open $outfile";
928 if ($outfile ne "" && !$minimal_script) {
932 rem Test vector run script
933 rem Auto generated by fipsalgtest.pl script
936 echo Running Algorithm Tests
940 $stprefix = $tprefix unless defined $stprefix;
944 # Test vector run script
945 # Auto generated by fipsalgtest.pl script
948 echo Running Algorithm Tests
959 foreach (@fips_test_list) {
961 if ($outfile ne "") {
962 print "Generating script for $_ tests\n";
963 print OUT "\n\n\necho \"Running $_ tests\"\n" unless $minimal_script;
965 print "Running $_ tests\n" unless $quiet;
969 my ( $tname, $tcmd, $regexp, $req, $rsp ) = @$_;
972 $out =~ s/\.rsp$/.tst/;
976 "WARNING: Request file for $tname missing: test skipped\n" unless $no_warn_missing;
980 if ( $verify && $rsp eq "" ) {
982 "WARNING: Response file for $tname missing: test skipped\n";
988 print STDERR "WARNING: Response file for $tname deleted\n";
992 $out =~ s|/req/(\S+)\.req|/$rspdir/$1.rsp|;
994 $outdir =~ s|/[^/]*$||;
995 if ($outfile ne "") {
1001 if ($outdir ne $lastdir && !$minimal_script) {
1004 if exist \"$outdir\" rd /s /q "$outdir"
1017 } elsif ( !-d $outdir ) {
1018 print STDERR "DEBUG: Creating directory $outdir\n" if $debug;
1019 mkdir($outdir) || die "Can't create directory $outdir";
1022 my $cmd = "$tcmd \"$req\" \"$out\"";
1023 print STDERR "DEBUG: running test $tname\n" if ( $debug && !$verify );
1024 if ($outfile ne "") {
1025 print OUT "echo \" running $tname test\"\n" unless $minimal_script;
1026 print OUT "\${TPREFIX}$cmd\n";
1028 $cmd = "$tprefix$cmd";
1032 "WARNING: error executing test $tname for command: $cmd\n";
1038 if ( exists $verify_special{$tname} ) {
1040 $vout =~ s/\.rsp$/.ver/;
1041 $tcmd = $verify_special{$tname};
1042 $cmd = "$tprefix$tcmd ";
1043 $cmd .= "\"$out\" \"$vout\"";
1047 "WARNING: error executing verify test $tname $cmd\n";
1051 my ( $fcount, $pcount ) = ( 0, 0 );
1054 if (/^Result\s*=\s*(\S*)\s*$/i)
1068 if ( $fcount || $debug ) {
1069 print STDERR "DEBUG: $tname, Pass=$pcount, Fail=$fcount\n";
1071 if ( $fcount || !$pcount ) {
1079 elsif ( !cmp_file( $tname, $rsp, $out ) ) {
1088 if ($outfile ne "") {
1089 print OUT "\n\necho All Tests Completed\n" unless $minimal_script;
1095 my ( $tname, $rsp, $tst ) = @_;
1096 my ( $rspf, $tstf );
1097 my ( $rspline, $tstline );
1099 if ( !open( $rspf, $rsp ) ) {
1100 print STDERR "ERROR: can't open request file $rsp\n";
1103 if ( !open( $tstf, $tst ) ) {
1104 print STDERR "ERROR: can't open output file $tst\n";
1107 $monte = 1 if ($rsp =~ /Monte[123]/);
1109 $rspline = next_line($rspf);
1110 $tstline = next_line($tstf);
1111 if ( !defined($rspline) && !defined($tstline) ) {
1112 print STDERR "DEBUG: $tname file comparison OK\n" if $debug;
1115 # Workaround for old broken DES3 MCT format which added bogus
1116 # extra lines: after [ENCRYPT] or [DECRYPT] skip until first
1119 if ($rspline =~ /CRYPT/) {
1121 $rspline = next_line($rspf);
1122 } while (defined($rspline) && $rspline !~ /COUNT/);
1124 if ($tstline =~ /CRYPT/) {
1126 $tstline = next_line($tstf);
1127 } while (defined($tstline) && $tstline !~ /COUNT/);
1130 if ( !defined($rspline) ) {
1131 print STDERR "ERROR: $tname EOF on $rsp\n";
1134 if ( !defined($tstline) ) {
1135 print STDERR "ERROR: $tname EOF on $tst\n";
1139 # Workaround for bug in RAND des2 test output */
1140 if ( $tstline =~ /^Key2 =/ && $rspline =~ /^Key1 =/ ) {
1141 $rspline =~ s/^Key1/Key2/;
1144 if ( $tstline ne $rspline ) {
1145 print STDERR "ERROR: $tname mismatch:\n";
1146 print STDERR "\t \"$tstline\" != \"$rspline\"\n";
1162 # Ignore blank lines
1165 # Translate multiple space into one
1167 # Delete trailing whitespace
1169 # Remove leading zeroes
1171 # Translate to upper case