-typedef struct {
- const char *case_name;
- int num;
- const AES_KEY *encrypt_key_schedule;
- const AES_KEY *decrypt_key_schedule;
- const unsigned char *input;
- SIZED_DATA iv;
- const SIZED_DATA *vector;
-} CTS128_FIXTURE;
-
-static CTS128_FIXTURE setup_cts128(const char *const test_case_name)
-{
- CTS128_FIXTURE fixture;
- fixture.case_name = test_case_name;
- return fixture;
-}
-
-static int execute_cts128(CTS128_FIXTURE fixture)
-{
- const unsigned char *test_iv = fixture.iv.data;
- size_t test_iv_len = fixture.iv.size;
- const unsigned char *vector = fixture.vector->data;
- size_t len = fixture.vector->size;
- const unsigned char *test_input = fixture.input;
- const AES_KEY *encrypt_key_schedule = fixture.encrypt_key_schedule;
- const AES_KEY *decrypt_key_schedule = fixture.decrypt_key_schedule;
- unsigned char iv[16];
- unsigned char cleartext[64], ciphertext[64];
- size_t tail;
-
- fprintf(stderr, "vector_%" OSSLzu "\n", len);
- fflush(stdout);
-
- if ((tail = len % 16) == 0)
- tail = 16;
- tail += 16;
-
- /* test block-based encryption */
- memcpy(iv, test_iv, test_iv_len);
- CRYPTO_cts128_encrypt_block(test_input, ciphertext, len,
- encrypt_key_schedule, iv,
- (block128_f)AES_encrypt);
- if (memcmp(ciphertext, vector, len)) {
- fprintf(stderr, "block encrypt: output_%" OSSLzu " mismatch\n", len);
- return 0;
- }
- if (memcmp(iv, vector + len - tail, sizeof(iv))) {
- fprintf(stderr, "block encrypt: iv_%" OSSLzu " mismatch\n", len);
- return 0;
- }
-
- /* test block-based decryption */
- memcpy(iv, test_iv, test_iv_len);
- CRYPTO_cts128_decrypt_block(ciphertext, cleartext, len,
- decrypt_key_schedule, iv,
- (block128_f)AES_decrypt);
- if (memcmp(cleartext, test_input, len)) {
- fprintf(stderr, "block decrypt: input_%" OSSLzu " mismatch\n", len);
- return 0;
- }
- if (memcmp(iv, vector + len - tail, sizeof(iv))) {
- fprintf(stderr, "block decrypt: iv_%" OSSLzu " mismatch\n", len);
- return 0;
- }
-
- /* test streamed encryption */
- memcpy(iv, test_iv, test_iv_len);
- CRYPTO_cts128_encrypt(test_input, ciphertext, len, encrypt_key_schedule,
- iv, (cbc128_f) AES_cbc_encrypt);
- if (memcmp(ciphertext, vector, len)) {
- fprintf(stderr, "stream encrypt: output_%" OSSLzu " mismatch\n", len);
- return 0;
- }
- if (memcmp(iv, vector + len - tail, sizeof(iv))) {
- fprintf(stderr, "stream encrypt: iv_%" OSSLzu " mismatch\n", len);
- return 0;
- }
-
- /* test streamed decryption */
- memcpy(iv, test_iv, test_iv_len);
- CRYPTO_cts128_decrypt(ciphertext, cleartext, len, decrypt_key_schedule, iv,
- (cbc128_f)AES_cbc_encrypt);
- if (memcmp(cleartext, test_input, len)) {
- fprintf(stderr, "stream decrypt: input_%" OSSLzu " mismatch\n", len);
- return 0;
- }
- if (memcmp(iv, vector + len - tail, sizeof(iv))) {
- fprintf(stderr, "stream decrypt: iv_%" OSSLzu " mismatch\n", len);
- return 0;
- }
-
- return 1;
-}
-
-static int execute_cts128_nist(CTS128_FIXTURE fixture)
-{
- const unsigned char *test_iv = fixture.iv.data;
- size_t test_iv_len = fixture.iv.size;
- const unsigned char *vector = fixture.vector->data;
- size_t len = fixture.vector->size;
- const unsigned char *test_input = fixture.input;
- const AES_KEY *encrypt_key_schedule = fixture.encrypt_key_schedule;
- const AES_KEY *decrypt_key_schedule = fixture.decrypt_key_schedule;
- unsigned char iv[16];
- unsigned char cleartext[64], ciphertext[64], nistvector[64];
- size_t tail;
-
- fprintf(stderr, "nistvector_%" OSSLzu "\n", len);
- fflush(stdout);
-
- if ((tail = len % 16) == 0)
- tail = 16;
-
- len -= 16 + tail;
- memcpy(nistvector, vector, len);
- /* flip two last blocks */
- memcpy(nistvector + len, vector + len + 16, tail);
- memcpy(nistvector + len + tail, vector + len, 16);
- len += 16 + tail;
- tail = 16;
-
- /* test block-based encryption */
- memcpy(iv, test_iv, test_iv_len);
- CRYPTO_nistcts128_encrypt_block(test_input, ciphertext, len,
- encrypt_key_schedule, iv,
- (block128_f)AES_encrypt);
- if (memcmp(ciphertext, nistvector, len)) {
- fprintf(stderr, "output_%" OSSLzu " mismatch\n", len);
- return 0;
- }
- if (memcmp(iv, nistvector + len - tail, sizeof(iv))) {
- fprintf(stderr, "iv_%" OSSLzu " mismatch\n", len);
- return 0;
- }
-
- /* test block-based decryption */
- memcpy(iv, test_iv, test_iv_len);
- CRYPTO_nistcts128_decrypt_block(ciphertext, cleartext, len,
- decrypt_key_schedule, iv,
- (block128_f)AES_decrypt);
- if (memcmp(cleartext, test_input, len)) {
- fprintf(stderr, "input_%" OSSLzu " mismatch\n", len);
- return 0;
- }
- if (memcmp(iv, nistvector + len - tail, sizeof(iv))) {
- fprintf(stderr, "iv_%" OSSLzu " mismatch\n", len);
- return 0;
- }
-
- /* test streamed encryption */
- memcpy(iv, test_iv, test_iv_len);
- CRYPTO_nistcts128_encrypt(test_input, ciphertext, len,
- encrypt_key_schedule, iv,
- (cbc128_f)AES_cbc_encrypt);
- if (memcmp(ciphertext, nistvector, len)) {
- fprintf(stderr, "output_%" OSSLzu " mismatch\n", len);
- return 0;
- }
- if (memcmp(iv, nistvector + len - tail, sizeof(iv))) {
- fprintf(stderr, "iv_%" OSSLzu " mismatch\n", len);
- return 0;
- }
-
- /* test streamed decryption */
- memcpy(iv, test_iv, test_iv_len);
- CRYPTO_nistcts128_decrypt(ciphertext, cleartext, len, decrypt_key_schedule,
- iv, (cbc128_f)AES_cbc_encrypt);
- if (memcmp(cleartext, test_input, len)) {
- fprintf(stderr, "input_%" OSSLzu " mismatch\n", len);
- return 0;
- }
- if (memcmp(iv, nistvector + len - tail, sizeof(iv))) {
- fprintf(stderr, "iv_%" OSSLzu " mismatch\n", len);
- return 0;
- }
-
- return 1;
-}
-
-static void teardown_cts128(CTS128_FIXTURE fixture)
-{
-}
-
-/**********************************************************************
- *
- * Test of gcm128
- *
- ***/
-
-typedef struct {
- const char *case_name;
- int num;
- SIZED_DATA K;
- SIZED_DATA IV;
- SIZED_DATA A;
- SIZED_DATA P;
- SIZED_DATA C;
- SIZED_DATA T;
-} GCM128_FIXTURE;
-
-static GCM128_FIXTURE setup_gcm128(const char *const test_case_name)
-{
- GCM128_FIXTURE fixture;
- fixture.case_name = test_case_name;
- return fixture;
-}
-
-static int execute_gcm128(GCM128_FIXTURE fixture)
-{
- unsigned char out[512];
- SIZED_DATA *K = &fixture.K;
- SIZED_DATA *IV = &fixture.IV;
- SIZED_DATA *A = &fixture.A;
- SIZED_DATA *P = &fixture.P;
- SIZED_DATA *C = &fixture.C;
- SIZED_DATA *T = &fixture.T;
- int n = fixture.num;
- GCM128_CONTEXT ctx;
- AES_KEY key;
- int err = 0;
-
- AES_set_encrypt_key(K->data, K->size * 8, &key);
-
- CRYPTO_gcm128_init(&ctx, &key, (block128_f)AES_encrypt);
- CRYPTO_gcm128_setiv(&ctx, IV->data, IV->size);
- memset(out, 0, P->size);
- if (A->data)
- CRYPTO_gcm128_aad(&ctx, A->data, A->size);
- if (P->data)
- CRYPTO_gcm128_encrypt( &ctx, P->data, out, P->size);
- if (CRYPTO_gcm128_finish(&ctx, T->data, 16)
- || (C->data && memcmp(out, C->data, P->size)))
- err++, fprintf(stderr, "encrypt test#%d failed.\n", n);
-
- CRYPTO_gcm128_setiv(&ctx, IV->data, IV->size);
- memset(out, 0, P->size);
- if (A->data)
- CRYPTO_gcm128_aad(&ctx, A->data, A->size);
- if (C->data)
- CRYPTO_gcm128_decrypt(&ctx, C->data, out, P->size);
- if (CRYPTO_gcm128_finish(&ctx, T->data, 16)
- || (P->data && memcmp(out, P->data, P->size)))
- err++, fprintf(stderr, "decrypt test#%d failed.\n", n);
-
- return err == 0;
-}
-
-static void teardown_gcm128(GCM128_FIXTURE fixture)
-{
-}
-
-static void benchmark_gcm128(const unsigned char *K, size_t Klen,
- const unsigned char *IV, size_t IVlen)
-{
-#ifdef OPENSSL_CPUID_OBJ
- GCM128_CONTEXT ctx;
- AES_KEY key;
- size_t start, gcm_t, ctr_t, OPENSSL_rdtsc();
- union {
- u64 u;
- u8 c[1024];
- } buf;
-
- AES_set_encrypt_key(K, Klen * 8, &key);
- CRYPTO_gcm128_init(&ctx, &key, (block128_f) AES_encrypt);
- CRYPTO_gcm128_setiv(&ctx, IV, IVlen);
-
- CRYPTO_gcm128_encrypt(&ctx, buf.c, buf.c, sizeof(buf));
- start = OPENSSL_rdtsc();
- CRYPTO_gcm128_encrypt(&ctx, buf.c, buf.c, sizeof(buf));
- gcm_t = OPENSSL_rdtsc() - start;
-
- CRYPTO_ctr128_encrypt(buf.c, buf.c, sizeof(buf),
- &key, ctx.Yi.c, ctx.EKi.c, &ctx.mres,
- (block128_f) AES_encrypt);
- start = OPENSSL_rdtsc();
- CRYPTO_ctr128_encrypt(buf.c, buf.c, sizeof(buf),
- &key, ctx.Yi.c, ctx.EKi.c, &ctx.mres,
- (block128_f) AES_encrypt);
- ctr_t = OPENSSL_rdtsc() - start;
-
- printf("%.2f-%.2f=%.2f\n",
- gcm_t / (double)sizeof(buf),
- ctr_t / (double)sizeof(buf),
- (gcm_t - ctr_t) / (double)sizeof(buf));
-# ifdef GHASH
- {
- void (*gcm_ghash_p) (u64 Xi[2], const u128 Htable[16],
- const u8 *inp, size_t len) = ctx.ghash;
-
- GHASH((&ctx), buf.c, sizeof(buf));
- start = OPENSSL_rdtsc();
- for (i = 0; i < 100; ++i)
- GHASH((&ctx), buf.c, sizeof(buf));
- gcm_t = OPENSSL_rdtsc() - start;
- printf("%.2f\n", gcm_t / (double)sizeof(buf) / (double)i);
- }
-# endif
-#else
- fprintf(stderr,
- "Benchmarking of modes isn't available on this platform\n");
-#endif
-}
-
-/**********************************************************************
- *
- * Test driver
- *
- ***/
-