+/* ====================================================================
+ * Copyright (c) 2004 The OpenSSL Project. All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright
+ * notice, this list of conditions and the following disclaimer.
+ *
+ * 2. Redistributions in binary form must reproduce the above copyright
+ * notice, this list of conditions and the following disclaimer in
+ * the documentation and/or other materials provided with the
+ * distribution.
+ *
+ * 3. All advertising materials mentioning features or use of this
+ * software must display the following acknowledgment:
+ * "This product includes software developed by the OpenSSL Project
+ * for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
+ *
+ * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
+ * endorse or promote products derived from this software without
+ * prior written permission. For written permission, please contact
+ * openssl-core@openssl.org.
+ *
+ * 5. Products derived from this software may not be called "OpenSSL"
+ * nor may "OpenSSL" appear in their names without prior written
+ * permission of the OpenSSL Project.
+ *
+ * 6. Redistributions of any form whatsoever must retain the following
+ * acknowledgment:
+ * "This product includes software developed by the OpenSSL Project
+ * for use in the OpenSSL Toolkit (http://www.openssl.org/)"
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
+ * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+ * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
+ * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+ * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+ * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+ * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
+ * OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ */
/*---------------------------------------------
NIST DES Modes of Operation Validation System
Test Program
Based on the AES Validation Suite, which was:
- Copyright
+ Donated to OpenSSL by:
V-ONE Corporation
20250 Century Blvd, Suite 300
Germantown, MD 20874
#include <openssl/evp.h>
#include <openssl/fips.h>
#include <openssl/err.h>
+#include "e_os.h"
-//#define AES_BLOCK_SIZE 16
+/*#define AES_BLOCK_SIZE 16*/
#define VERBOSE 0
unsigned char *out, unsigned char *in, int len)
{
const EVP_CIPHER *cipher = NULL;
- int ret = 1;
int kt = 0;
if (ctx)
printf("Unknown mode: %s\n", amode);
exit(1);
}
- if (ret)
+ if (akeysz != 64 && akeysz != 192)
{
- if (akeysz != 64)
+ printf("Invalid key size: %d\n", akeysz);
+ exit(1);
+ }
+ else
+ {
+ kt += akeysz;
+ switch (kt)
{
- printf("Invalid key size: %d\n", akeysz);
- ret = 0;
+ case 1064:
+ cipher=EVP_des_cbc();
+ break;
+ case 1192:
+ cipher=EVP_des_ede3_cbc();
+ break;
+ case 2064:
+ cipher=EVP_des_ecb();
+ break;
+ case 2192:
+ cipher=EVP_des_ede3_ecb();
+ break;
+ case 3064:
+ cipher=EVP_des_cfb64();
+ break;
+ case 3192:
+ cipher=EVP_des_ede3_cfb64();
+ break;
+ case 4064:
+ cipher=EVP_des_ofb();
+ break;
+ case 4192:
+ cipher=EVP_des_ede3_ofb();
+ break;
+ case 5064:
+ cipher=EVP_des_cfb1();
+ break;
+ case 5192:
+ cipher=EVP_des_ede3_cfb1();
+ break;
+ case 6064:
+ cipher=EVP_des_cfb8();
+ break;
+ case 6192:
+ cipher=EVP_des_ede3_cfb8();
+ break;
+ default:
+ printf("Didn't handle mode %d\n",kt);
+ exit(1);
}
- else
+ if(!EVP_CipherInit(ctx, cipher, aKey, iVec, dir))
{
- kt += akeysz;
- switch (kt)
- {
- case 1064:
- cipher=EVP_des_cbc();
- break;
- case 2064:
- cipher=EVP_des_ecb();
- break;
- case 3064:
- cipher=EVP_des_cfb64();
- break;
- case 4064:
- cipher=EVP_des_ofb();
- break;
- case 5064:
- cipher=EVP_des_cfb1();
- break;
- case 6064:
- cipher=EVP_des_cfb8();
- break;
- default:
- printf("Didn't handle mode %d\n",kt);
- exit(1);
- }
- if(!EVP_CipherInit(ctx, cipher, aKey, iVec, dir))
- {
- ERR_print_errors_fp(stderr);
- exit(1);
- }
- EVP_Cipher(ctx, out, in, len);
+ ERR_print_errors_fp(stderr);
+ exit(1);
}
+ EVP_Cipher(ctx, out, in, len);
}
- return ret;
+ return 1;
}
/*-----------------------------------------------*/
int n;
/* move the bytes... */
- memmove(dst,dst+nbits/8,8-nbits/8);
+ memmove(dst,dst+nbits/8,3*8-nbits/8);
/* append new data */
- memcpy(dst+8-nbits/8,src,(nbits+7)/8);
+ memcpy(dst+3*8-nbits/8,src,(nbits+7)/8);
/* left shift the bits */
if(nbits%8)
- for(n=0 ; n < 8 ; ++n)
+ for(n=0 ; n < 3*8 ; ++n)
dst[n]=(dst[n] << (nbits%8))|(dst[n+1] >> (8-nbits%8));
}
char *t_tag[2] = {"PLAINTEXT", "CIPHERTEXT"};
char *t_mode[6] = {"CBC","ECB","OFB","CFB1","CFB8","CFB64"};
enum Mode {CBC, ECB, OFB, CFB1, CFB8, CFB64};
-int Sizes[6]={64,0,64,1,8,64};
-enum XCrypt {XDECRYPT, XENCRYPT};
+int Sizes[6]={64,64,64,1,8,64};
void do_mct(char *amode,
- int akeysz, unsigned char *akey,unsigned char *ivec,
+ int akeysz, int numkeys, unsigned char *akey,unsigned char *ivec,
int dir, unsigned char *text, int len,
FILE *rfp)
{
int i,imode;
- unsigned char nk[16]; // double size to make the bitshift easier
+ unsigned char nk[4*8]; /* longest key+8 */
+ unsigned char text0[8];
for (imode=0 ; imode < 6 ; ++imode)
if(!strcmp(amode,t_mode[imode]))
int j;
int n;
EVP_CIPHER_CTX ctx;
+ int kp=akeysz/64;
unsigned char old_iv[8];
fprintf(rfp,"\nCOUNT = %d\n",i);
- OutputValue("KEY",akey,akeysz/8,rfp,0);
+ if(kp == 1)
+ OutputValue("KEY",akey,8,rfp,0);
+ else
+ for(n=0 ; n < kp ; ++n)
+ {
+ fprintf(rfp,"KEY%d",n+1);
+ OutputValue("",akey+n*8,8,rfp,0);
+ }
+
if(imode != ECB)
OutputValue("IV",ivec,8,rfp,0);
OutputValue(t_tag[dir^1],text,len,rfp,imode == CFB1);
if(imode == CFB1)
text[0]<<=7;
+ memcpy(text0,text,8);
+
for(j=0 ; j < 10000 ; ++j)
{
+ unsigned char old_text[8];
+
+ memcpy(old_text,text,8);
if(j == 0)
{
memcpy(old_iv,ivec,8);
if(j == 9999)
{
OutputValue(t_tag[dir],text,len,rfp,imode == CFB1);
- // memcpy(ivec,text,8);
+ /* memcpy(ivec,text,8); */
}
- // DebugValue("iv",ctx.iv,8);
+ /* DebugValue("iv",ctx.iv,8); */
/* accumulate material for the next key */
shiftin(nk,text,Sizes[imode]);
- // DebugValue("nk",nk,8);
- if(imode == CFB1 || imode == CFB8 || imode == CBC)
+ /* DebugValue("nk",nk,24);*/
+ if((dir && (imode == CFB1 || imode == CFB8 || imode == CFB64
+ || imode == CBC)) || imode == OFB)
memcpy(text,old_iv,8);
+
+ if(!dir && (imode == CFB1 || imode == CFB8 || imode == CFB64))
+ {
+ /* the test specifies using the output of the raw DES operation
+ which we don't have, so reconstruct it... */
+ for(n=0 ; n < 8 ; ++n)
+ text[n]^=old_text[n];
+ }
}
for(n=0 ; n < 8 ; ++n)
- akey[n]^=nk[n];
+ akey[n]^=nk[16+n];
+ for(n=0 ; n < 8 ; ++n)
+ akey[8+n]^=nk[8+n];
+ for(n=0 ; n < 8 ; ++n)
+ akey[16+n]^=nk[n];
+ if(numkeys < 3)
+ memcpy(&akey[2*8],akey,8);
+ if(numkeys < 2)
+ memcpy(&akey[8],akey,8);
+ DES_set_odd_parity((DES_cblock *)akey);
+ DES_set_odd_parity((DES_cblock *)(akey+8));
+ DES_set_odd_parity((DES_cblock *)(akey+16));
memcpy(ivec,ctx.iv,8);
+
+ /* pointless exercise - the final text doesn't depend on the
+ initial text in OFB mode, so who cares what it is? (Who
+ designed these tests?) */
+ if(imode == OFB)
+ for(n=0 ; n < 8 ; ++n)
+ text[n]=text0[n]^old_iv[n];
}
}
FILE *afp = NULL, *rfp = NULL;
char ibuf[2048];
int ilen, len, ret = 0;
- char algo[8] = "";
char amode[8] = "";
char atest[100] = "";
int akeysz=0;
unsigned char ciphertext[2048];
char *rp;
EVP_CIPHER_CTX ctx;
+ int numkeys=1;
if (!rqfile || !(*rqfile))
{
while (!err && (fgets(ibuf, sizeof(ibuf), afp)) != NULL)
{
ilen = strlen(ibuf);
- // printf("step=%d ibuf=%s",step,ibuf);
+ /* printf("step=%d ibuf=%s",step,ibuf);*/
+ if(step == 3 && !strcmp(amode,"ECB"))
+ {
+ memset(iVec, 0, sizeof(iVec));
+ step = (dir)? 4: 5; /* no ivec for ECB */
+ }
switch (step)
{
case 0: /* read preamble */
if (ibuf[0] == '\n')
{ /* end of preamble */
- if ((*algo == '\0') ||
- (*amode == '\0') ||
- (akeysz == 0))
+ if (*amode == '\0')
{
- printf("Missing Algorithm, Mode or KeySize (%s/%s/%d)\n",
- algo,amode,akeysz);
+ printf("Missing Mode\n");
err = 1;
}
else
{ /* process preamble */
char *xp, *pp = ibuf+2;
int n;
- if (akeysz)
+ if(*amode)
{ /* insert current time & date */
time_t rtim = time(0);
fprintf(rfp, "# %s", ctime(&rtim));
{
fputs(ibuf, rfp);
if(!strncmp(pp,"INVERSE ",8) || !strncmp(pp,"DES ",4)
+ || !strncmp(pp,"TDES ",5)
|| !strncmp(pp,"PERMUTATION ",12)
|| !strncmp(pp,"SUBSTITUTION ",13)
|| !strncmp(pp,"VARIABLE ",9))
{
- strcpy(algo, "DES");
/* get test type */
if(!strncmp(pp,"DES ",4))
pp+=4;
+ else if(!strncmp(pp,"TDES ",5))
+ pp+=5;
xp = strchr(pp, ' ');
n = xp-pp;
strncpy(atest, pp, n);
strncpy(amode, xp+1, n);
amode[n] = '\0';
/* amode[3] = '\0'; */
- printf("Test = %s, Mode = %s\n", atest, amode);
+ printf("Test=%s, Mode=%s\n",atest,amode);
}
- else if(!strncmp(pp,"State :",7))
- akeysz=64;
}
}
break;
step = 2;
case 2: /* KEY = xxxx */
- fputs(ibuf, rfp);
if(*ibuf == '\n')
+ {
+ fputs(ibuf, rfp);
break;
+ }
if(!strncasecmp(ibuf,"COUNT = ",8))
+ {
+ fputs(ibuf, rfp);
break;
-
- if (strncasecmp(ibuf, "KEY = ", 6) != 0)
+ }
+ if(!strncasecmp(ibuf,"COUNT=",6))
{
- printf("Missing KEY\n");
- err = 1;
+ fputs(ibuf, rfp);
+ break;
+ }
+ if(!strncasecmp(ibuf,"NumKeys = ",10))
+ {
+ numkeys=atoi(ibuf+10);
+ break;
}
- else
+
+ fputs(ibuf, rfp);
+ if(!strncasecmp(ibuf,"KEY = ",6))
{
+ akeysz=64;
len = hex2bin((char*)ibuf+6, strlen(ibuf+6)-1, aKey);
if (len < 0)
{
printf("Invalid KEY\n");
- err =1;
+ err=1;
break;
}
PrintValue("KEY", aKey, len);
- if (strcmp(amode, "ECB") == 0)
+ ++step;
+ }
+ else if(!strncasecmp(ibuf,"KEYs = ",7))
+ {
+ akeysz=64*3;
+ len=hex2bin(ibuf+7,strlen(ibuf+7)-1,aKey);
+ if(len != 8)
{
- memset(iVec, 0, sizeof(iVec));
- step = (dir)? 4: 5; /* no ivec for ECB */
+ printf("Invalid KEY\n");
+ err=1;
+ break;
}
- else
+ memcpy(aKey+8,aKey,8);
+ memcpy(aKey+16,aKey,8);
+ ibuf[4]='\0';
+ PrintValue("KEYs",aKey,len);
+ ++step;
+ }
+ else if(!strncasecmp(ibuf,"KEY",3))
+ {
+ int n=ibuf[3]-'1';
+
+ akeysz=64*3;
+ len=hex2bin(ibuf+7,strlen(ibuf+7)-1,aKey+n*8);
+ if(len != 8)
+ {
+ printf("Invalid KEY\n");
+ err=1;
+ break;
+ }
+ ibuf[4]='\0';
+ PrintValue(ibuf,aKey,len);
+ if(n == 2)
++step;
}
+ else
+ {
+ printf("Missing KEY\n");
+ err = 1;
+ }
break;
case 3: /* IV = xxxx */
PrintValue("PLAINTEXT", (unsigned char*)plaintext, len);
if (strcmp(atest, "Monte") == 0) /* Monte Carlo Test */
{
- do_mct(amode,akeysz,aKey,iVec,dir,plaintext,len,rfp);
+ do_mct(amode,akeysz,numkeys,aKey,iVec,dir,plaintext,len,rfp);
}
else
{
PrintValue("CIPHERTEXT", ciphertext, len);
if (strcmp(atest, "Monte") == 0) /* Monte Carlo Test */
{
- do_mct(amode, akeysz, aKey, iVec,
+ do_mct(amode, akeysz, numkeys, aKey, iVec,
dir, ciphertext, len, rfp);
}
else
char fn[250] = "", rfn[256] = "";
int f_opt = 0, d_opt = 1;
-#ifdef FIPS
- FIPS_mode_set(1);
+#ifdef OPENSSL_FIPS
+ if(!FIPS_mode_set(1,argv[0]))
+ {
+ ERR_load_crypto_strings();
+ ERR_print_errors(BIO_new_fp(stderr,BIO_NOCLOSE));
+ exit(1);
+ }
#endif
ERR_load_crypto_strings();
if (argc > 1)
projects / oweals / openssl.git / blobdiff