fips/des/fips_des_selftest.c

   1 /* ====================================================================
   2  * Copyright (c) 2003 The OpenSSL Project.  All rights reserved.
   3  *
   4  * Redistribution and use in source and binary forms, with or without
   5  * modification, are permitted provided that the following conditions
   6  * are met:
   7  *
   8  * 1. Redistributions of source code must retain the above copyright
   9  *    notice, this list of conditions and the following disclaimer.
  10  *
  11  * 2. Redistributions in binary form must reproduce the above copyright
  12  *    notice, this list of conditions and the following disclaimer in
  13  *    the documentation and/or other materials provided with the
  14  *    distribution.
  15  *
  16  * 3. All advertising materials mentioning features or use of this
  17  *    software must display the following acknowledgment:
  18  *    "This product includes software developed by the OpenSSL Project
  19  *    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
  20  *
  21  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  22  *    endorse or promote products derived from this software without
  23  *    prior written permission. For written permission, please contact
  24  *    openssl-core@openssl.org.
  25  *
  26  * 5. Products derived from this software may not be called "OpenSSL"
  27  *    nor may "OpenSSL" appear in their names without prior written
  28  *    permission of the OpenSSL Project.
  29  *
  30  * 6. Redistributions of any form whatsoever must retain the following
  31  *    acknowledgment:
  32  *    "This product includes software developed by the OpenSSL Project
  33  *    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
  34  *
  35  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  36  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  37  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  38  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
  39  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  40  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  41  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  42  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  43  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  44  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  45  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  46  * OF THE POSSIBILITY OF SUCH DAMAGE.
  47  *
  48  */
  49
  50 #include <string.h>
  51 #include <openssl/err.h>
  52 #include <openssl/fips.h>
  53 #include <openssl/evp.h>
  54 #include <openssl/opensslconf.h>
  55
  56 #ifdef OPENSSL_FIPS
  57 static struct
  58     {
  59     unsigned char key[8];
  60     unsigned char plaintext[8];
  61     unsigned char ciphertext[8];
  62     } tests[]=
  63         {
  64         {
  65         { 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00 },
  66         { 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00 },
  67         { 0x8C,0xA6,0x4D,0xE9,0xC1,0xB1,0x23,0xA7 }
  68         },
  69         {
  70         { 0xFE,0xDC,0xBA,0x98,0x76,0x54,0x32,0x10 },
  71         { 0x01,0x23,0x45,0x67,0x89,0xAB,0xCD,0xEF },
  72         { 0xED,0x39,0xD9,0x50,0xFA,0x74,0xBC,0xC4 },
  73         },
  74         };
  75
  76 static struct
  77     {
  78     unsigned char key[16];
  79     unsigned char plaintext[8];
  80     unsigned char ciphertext[8];
  81     } tests2[]=
  82         {
  83         {
  84         { 0x7c,0x4f,0x6e,0xf7,0xa2,0x04,0x16,0xec,
  85           0x0b,0x6b,0x7c,0x9e,0x5e,0x19,0xa7,0xc4 },
  86         { 0x06,0xa7,0xd8,0x79,0xaa,0xce,0x69,0xef },
  87         { 0x4c,0x11,0x17,0x55,0xbf,0xc4,0x4e,0xfd }
  88         },
  89         {
  90         { 0x5d,0x9e,0x01,0xd3,0x25,0xc7,0x3e,0x34,
  91           0x01,0x16,0x7c,0x85,0x23,0xdf,0xe0,0x68 },
  92         { 0x9c,0x50,0x09,0x0f,0x5e,0x7d,0x69,0x7e },
  93         { 0xd2,0x0b,0x18,0xdf,0xd9,0x0d,0x9e,0xff },
  94         }
  95         };
  96
  97 static struct
  98     {
  99     unsigned char key[24];
 100     unsigned char plaintext[8];
 101     unsigned char ciphertext[8];
 102     } tests3[]=
 103         {
 104         {
 105         { 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
 106           0xFE,0xDC,0xBA,0x98,0x76,0x54,0x32,0x10,
 107           0x12,0x34,0x56,0x78,0x9a,0xbc,0xde,0xf0 },
 108         { 0x8f,0x8f,0xbf,0x9b,0x5d,0x48,0xb4,0x1c },
 109         { 0x59,0x8c,0xe5,0xd3,0x6c,0xa2,0xea,0x1b },
 110         },
 111         {
 112         { 0xDC,0xBA,0x98,0x76,0x54,0x32,0x10,0xFE,
 113           0x01,0x23,0x45,0x67,0x89,0xAB,0xCD,0xEF,
 114           0xED,0x39,0xD9,0x50,0xFA,0x74,0xBC,0xC4 },
 115         { 0x01,0x23,0x45,0x67,0x89,0xAB,0xCD,0xEF },
 116         { 0x11,0x25,0xb0,0x35,0xbe,0xa0,0x82,0x86 },
 117         },
 118         };
 119
 120 void FIPS_corrupt_des()
 121     {
 122     tests[0].plaintext[0]++;
 123     }
 124
 125 int FIPS_selftest_des()
 126     {
 127     int n, ret = 0;
 128     EVP_CIPHER_CTX ctx;
 129     EVP_CIPHER_CTX_init(&ctx);
 130 #if 0
 131     /* Encrypt/decrypt with DES and compare to known answers */
 132     for(n=0 ; n < 2 ; ++n)
 133         {
 134         if (!fips_cipher_test(&ctx, EVP_des_ecb(),
 135                                 tests[n].key, NULL,
 136                                 tests[n].plaintext, tests[n].ciphertext, 8))
 137                 goto err;
 138         }
 139 #endif
 140     /* Encrypt/decrypt with 2-key 3DES and compare to known answers */
 141     for(n=0 ; n < 2 ; ++n)
 142         {
 143         if (!fips_cipher_test(&ctx, EVP_des_ede_ecb(),
 144                                 tests2[n].key, NULL,
 145                                 tests2[n].plaintext, tests2[n].ciphertext, 8))
 146                 goto err;
 147         }
 148
 149     /* Encrypt/decrypt with 3DES and compare to known answers */
 150     for(n=0 ; n < 2 ; ++n)
 151         {
 152         if (!fips_cipher_test(&ctx, EVP_des_ede3_ecb(),
 153                                 tests3[n].key, NULL,
 154                                 tests3[n].plaintext, tests3[n].ciphertext, 8))
 155                 goto err;
 156         }
 157     ret = 1;
 158     err:
 159     EVP_CIPHER_CTX_cleanup(&ctx);
 160     if (ret == 0)
 161             FIPSerr(FIPS_F_FIPS_SELFTEST_DES,FIPS_R_SELFTEST_FAILED);
 162
 163     return ret;
 164     }
 165 #endif