2 * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
11 #include "internal/nelem.h"
12 #include <openssl/crypto.h>
13 #include <openssl/err.h>
14 #include <openssl/rand.h>
15 #include <openssl/obj_mac.h>
16 #include <openssl/evp.h>
17 #include <openssl/aes.h>
18 #include "../crypto/rand/rand_lcl.h"
21 #include "drbg_cavs_data.h"
23 static int app_data_index;
25 typedef struct test_ctx_st {
26 const unsigned char *entropy;
29 const unsigned char *nonce;
34 static size_t kat_entropy(RAND_DRBG *drbg, unsigned char **pout,
35 int entropy, size_t min_len, size_t max_len,
36 int prediction_resistance)
38 TEST_CTX *t = (TEST_CTX *)RAND_DRBG_get_ex_data(drbg, app_data_index);
41 *pout = (unsigned char *)t->entropy;
45 static size_t kat_nonce(RAND_DRBG *drbg, unsigned char **pout,
46 int entropy, size_t min_len, size_t max_len)
48 TEST_CTX *t = (TEST_CTX *)RAND_DRBG_get_ex_data(drbg, app_data_index);
51 *pout = (unsigned char *)t->nonce;
56 * Do a single NO_RESEED KAT:
59 * Generate Random Bits (pr=false)
60 * Generate Random Bits (pr=false)
63 * Return 0 on failure.
65 static int single_kat_no_reseed(const struct drbg_kat *td)
67 struct drbg_kat_no_reseed *data = (struct drbg_kat_no_reseed *)td->t;
68 RAND_DRBG *drbg = NULL;
69 unsigned char *buff = NULL;
70 unsigned int flags = 0;
74 if ((td->flags & USE_DF) == 0)
75 flags |= RAND_DRBG_FLAG_CTR_NO_DF;
76 if ((td->flags & USE_HMAC) != 0)
77 flags |= RAND_DRBG_FLAG_HMAC;
79 if (!TEST_ptr(drbg = RAND_DRBG_new(td->nid, flags, NULL)))
82 if (!TEST_true(RAND_DRBG_set_callbacks(drbg, kat_entropy, NULL,
87 memset(&t, 0, sizeof(t));
88 t.entropy = data->entropyin;
89 t.entropylen = td->entropyinlen;
90 t.nonce = data->nonce;
91 t.noncelen = td->noncelen;
92 RAND_DRBG_set_ex_data(drbg, app_data_index, &t);
94 buff = OPENSSL_malloc(td->retbyteslen);
98 if (!TEST_true(RAND_DRBG_instantiate(drbg, data->persstr, td->persstrlen))
99 || !TEST_true(RAND_DRBG_generate(drbg, buff, td->retbyteslen, 0,
100 data->addin1, td->addinlen))
101 || !TEST_true(RAND_DRBG_generate(drbg, buff, td->retbyteslen, 0,
102 data->addin2, td->addinlen))
103 || !TEST_true(RAND_DRBG_uninstantiate(drbg))
104 || !TEST_mem_eq(data->retbytes, td->retbyteslen, buff,
112 RAND_DRBG_uninstantiate(drbg);
113 RAND_DRBG_free(drbg);
115 return failures == 0;
119 * Do a single PR_FALSE KAT:
123 * Generate Random Bits (pr=false)
124 * Generate Random Bits (pr=false)
127 * Return 0 on failure.
129 static int single_kat_pr_false(const struct drbg_kat *td)
131 struct drbg_kat_pr_false *data = (struct drbg_kat_pr_false *)td->t;
132 RAND_DRBG *drbg = NULL;
133 unsigned char *buff = NULL;
134 unsigned int flags = 0;
138 if ((td->flags & USE_DF) == 0)
139 flags |= RAND_DRBG_FLAG_CTR_NO_DF;
140 if ((td->flags & USE_HMAC) != 0)
141 flags |= RAND_DRBG_FLAG_HMAC;
143 if (!TEST_ptr(drbg = RAND_DRBG_new(td->nid, flags, NULL)))
146 if (!TEST_true(RAND_DRBG_set_callbacks(drbg, kat_entropy, NULL,
151 memset(&t, 0, sizeof(t));
152 t.entropy = data->entropyin;
153 t.entropylen = td->entropyinlen;
154 t.nonce = data->nonce;
155 t.noncelen = td->noncelen;
156 RAND_DRBG_set_ex_data(drbg, app_data_index, &t);
158 buff = OPENSSL_malloc(td->retbyteslen);
162 if (!TEST_true(RAND_DRBG_instantiate(drbg, data->persstr, td->persstrlen)))
165 t.entropy = data->entropyinreseed;
166 t.entropylen = td->entropyinlen;
168 if (!TEST_true(RAND_DRBG_reseed(drbg, data->addinreseed, td->addinlen, 0))
169 || !TEST_true(RAND_DRBG_generate(drbg, buff, td->retbyteslen, 0,
170 data->addin1, td->addinlen))
171 || !TEST_true(RAND_DRBG_generate(drbg, buff, td->retbyteslen, 0,
172 data->addin2, td->addinlen))
173 || !TEST_true(RAND_DRBG_uninstantiate(drbg))
174 || !TEST_mem_eq(data->retbytes, td->retbyteslen, buff,
182 RAND_DRBG_uninstantiate(drbg);
183 RAND_DRBG_free(drbg);
185 return failures == 0;
189 * Do a single PR_TRUE KAT:
192 * Generate Random Bits (pr=true)
193 * Generate Random Bits (pr=true)
196 * Return 0 on failure.
198 static int single_kat_pr_true(const struct drbg_kat *td)
200 struct drbg_kat_pr_true *data = (struct drbg_kat_pr_true *)td->t;
201 RAND_DRBG *drbg = NULL;
202 unsigned char *buff = NULL;
203 unsigned int flags = 0;
207 if ((td->flags & USE_DF) == 0)
208 flags |= RAND_DRBG_FLAG_CTR_NO_DF;
209 if ((td->flags & USE_HMAC) != 0)
210 flags |= RAND_DRBG_FLAG_HMAC;
212 if (!TEST_ptr(drbg = RAND_DRBG_new(td->nid, flags, NULL)))
215 if (!TEST_true(RAND_DRBG_set_callbacks(drbg, kat_entropy, NULL,
220 memset(&t, 0, sizeof(t));
221 t.nonce = data->nonce;
222 t.noncelen = td->noncelen;
223 t.entropy = data->entropyin;
224 t.entropylen = td->entropyinlen;
225 RAND_DRBG_set_ex_data(drbg, app_data_index, &t);
227 buff = OPENSSL_malloc(td->retbyteslen);
231 if (!TEST_true(RAND_DRBG_instantiate(drbg, data->persstr, td->persstrlen)))
234 t.entropy = data->entropyinpr1;
235 t.entropylen = td->entropyinlen;
237 if (!TEST_true(RAND_DRBG_generate(drbg, buff, td->retbyteslen, 1,
238 data->addin1, td->addinlen)))
241 t.entropy = data->entropyinpr2;
242 t.entropylen = td->entropyinlen;
244 if (!TEST_true(RAND_DRBG_generate(drbg, buff, td->retbyteslen, 1,
245 data->addin2, td->addinlen))
246 || !TEST_true(RAND_DRBG_uninstantiate(drbg))
247 || !TEST_mem_eq(data->retbytes, td->retbyteslen, buff,
255 RAND_DRBG_uninstantiate(drbg);
256 RAND_DRBG_free(drbg);
258 return failures == 0;
261 static int test_cavs_kats(const struct drbg_kat *test[], int i)
263 const struct drbg_kat *td = test[i];
268 if (!single_kat_no_reseed(td))
272 if (!single_kat_pr_false(td))
276 if (!single_kat_pr_true(td))
279 default: /* cant happen */
287 static int test_cavs_ctr(int i)
289 return test_cavs_kats(drbg_ctr_test, i);
292 static int test_cavs_hmac(int i)
294 return test_cavs_kats(drbg_hmac_test, i);
297 static int test_cavs_hash(int i)
299 return test_cavs_kats(drbg_hash_test, i);
302 int setup_tests(void)
304 app_data_index = RAND_DRBG_get_ex_new_index(0L, NULL, NULL, NULL, NULL);
306 ADD_ALL_TESTS(test_cavs_ctr, drbg_ctr_nelem);
307 ADD_ALL_TESTS(test_cavs_hmac, drbg_hmac_nelem);
308 ADD_ALL_TESTS(test_cavs_hash, drbg_hash_nelem);