mirror of
https://github.com/yuzu-emu/mbedtls.git
synced 2025-02-24 20:36:52 +00:00
Merge remote-tracking branch 'public/pr/1658' into development
This commit is contained in:
Simon Butcher
commit
c88c627fba
|
|
@ -14,6 +14,8 @@ Features
|
||||||
buffer, which can save some RAM. If buffer lengths are kept equal, there
|
buffer, which can save some RAM. If buffer lengths are kept equal, there
|
||||||
is no functional difference. Contributed by Angus Gratton, and also
|
is no functional difference. Contributed by Angus Gratton, and also
|
||||||
independently contributed again by Paul Sokolovsky.
|
independently contributed again by Paul Sokolovsky.
|
||||||
|
* Add support for key wrapping modes based on AES as defined by
|
||||||
|
NIST SP 800-38F algorithms KW and KWP and by RFC's 3394 and 5649.
|
||||||
|
|
||||||
Bugfix
|
Bugfix
|
||||||
* Fix the key_app_writer example which was writing a leading zero byte which
|
* Fix the key_app_writer example which was writing a leading zero byte which
|
||||||
|
|
|
||||||
|
|
@ -87,6 +87,11 @@
|
||||||
#error "MBEDTLS_CMAC_C defined, but not all prerequisites"
|
#error "MBEDTLS_CMAC_C defined, but not all prerequisites"
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
|
#if defined(MBEDTLS_NIST_KW_C) && \
|
||||||
|
( !defined(MBEDTLS_AES_C) || !defined(MBEDTLS_CIPHER_C) )
|
||||||
|
#error "MBEDTLS_NIST_KW_C defined, but not all prerequisites"
|
||||||
|
#endif
|
||||||
|
|
||||||
#if defined(MBEDTLS_ECDH_C) && !defined(MBEDTLS_ECP_C)
|
#if defined(MBEDTLS_ECDH_C) && !defined(MBEDTLS_ECP_C)
|
||||||
#error "MBEDTLS_ECDH_C defined, but not all prerequisites"
|
#error "MBEDTLS_ECDH_C defined, but not all prerequisites"
|
||||||
#endif
|
#endif
|
||||||
|
|
|
||||||
|
|
@ -308,6 +308,7 @@
|
||||||
//#define MBEDTLS_DHM_ALT
|
//#define MBEDTLS_DHM_ALT
|
||||||
//#define MBEDTLS_ECJPAKE_ALT
|
//#define MBEDTLS_ECJPAKE_ALT
|
||||||
//#define MBEDTLS_GCM_ALT
|
//#define MBEDTLS_GCM_ALT
|
||||||
|
//#define MBEDTLS_NIST_KW_ALT
|
||||||
//#define MBEDTLS_MD2_ALT
|
//#define MBEDTLS_MD2_ALT
|
||||||
//#define MBEDTLS_MD4_ALT
|
//#define MBEDTLS_MD4_ALT
|
||||||
//#define MBEDTLS_MD5_ALT
|
//#define MBEDTLS_MD5_ALT
|
||||||
|
|
@ -2248,6 +2249,19 @@
|
||||||
*/
|
*/
|
||||||
#define MBEDTLS_HMAC_DRBG_C
|
#define MBEDTLS_HMAC_DRBG_C
|
||||||
|
|
||||||
|
/**
|
||||||
|
* \def MBEDTLS_NIST_KW_C
|
||||||
|
*
|
||||||
|
* Enable the Key Wrapping mode for 128-bit block ciphers,
|
||||||
|
* as defined in NIST SP 800-38F. Only KW and KWP modes
|
||||||
|
* are supported. At the moment, only AES is approved by NIST.
|
||||||
|
*
|
||||||
|
* Module: library/nist_kw.c
|
||||||
|
*
|
||||||
|
* Requires: MBEDTLS_AES_C and MBEDTLS_CIPHER_C
|
||||||
|
*/
|
||||||
|
//#define MBEDTLS_NIST_KW_C
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* \def MBEDTLS_MD_C
|
* \def MBEDTLS_MD_C
|
||||||
*
|
*
|
||||||
|
|
|
||||||
178
include/mbedtls/nist_kw.h
Normal file
178
include/mbedtls/nist_kw.h
Normal file
|
|
@ -0,0 +1,178 @@
|
||||||
|
/**
|
||||||
|
* \file nist_kw.h
|
||||||
|
*
|
||||||
|
* \brief This file provides an API for key wrapping (KW) and key wrapping with
|
||||||
|
* padding (KWP) as defined in NIST SP 800-38F.
|
||||||
|
* https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf
|
||||||
|
*
|
||||||
|
* Key wrapping specifies a deterministic authenticated-encryption mode
|
||||||
|
* of operation, according to <em>NIST SP 800-38F: Recommendation for
|
||||||
|
* Block Cipher Modes of Operation: Methods for Key Wrapping</em>. Its
|
||||||
|
* purpose is to protect cryptographic keys.
|
||||||
|
*
|
||||||
|
* Its equivalent is RFC 3394 for KW, and RFC 5649 for KWP.
|
||||||
|
* https://tools.ietf.org/html/rfc3394
|
||||||
|
* https://tools.ietf.org/html/rfc5649
|
||||||
|
*
|
||||||
|
*/
|
||||||
|
/*
|
||||||
|
* Copyright (C) 2018, Arm Limited (or its affiliates), All Rights Reserved
|
||||||
|
* SPDX-License-Identifier: Apache-2.0
|
||||||
|
*
|
||||||
|
* Licensed under the Apache License, Version 2.0 (the "License"); you may
|
||||||
|
* not use this file except in compliance with the License.
|
||||||
|
* You may obtain a copy of the License at
|
||||||
|
*
|
||||||
|
* http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
*
|
||||||
|
* Unless required by applicable law or agreed to in writing, software
|
||||||
|
* distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
||||||
|
* WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
* See the License for the specific language governing permissions and
|
||||||
|
* limitations under the License.
|
||||||
|
*
|
||||||
|
* This file is part of Mbed TLS (https://tls.mbed.org)
|
||||||
|
*/
|
||||||
|
|
||||||
|
#ifndef MBEDTLS_NIST_KW_H
|
||||||
|
#define MBEDTLS_NIST_KW_H
|
||||||
|
|
||||||
|
#include "cipher.h"
|
||||||
|
|
||||||
|
#ifdef __cplusplus
|
||||||
|
extern "C" {
|
||||||
|
#endif
|
||||||
|
|
||||||
|
typedef enum
|
||||||
|
{
|
||||||
|
MBEDTLS_KW_MODE_KW = 0,
|
||||||
|
MBEDTLS_KW_MODE_KWP = 1
|
||||||
|
} mbedtls_nist_kw_mode_t;
|
||||||
|
|
||||||
|
#if !defined(MBEDTLS_NIST_KW_ALT)
|
||||||
|
// Regular implementation
|
||||||
|
//
|
||||||
|
|
||||||
|
/**
|
||||||
|
* \brief The key wrapping context-type definition. The key wrapping context is passed
|
||||||
|
* to the APIs called.
|
||||||
|
*
|
||||||
|
* \note The definition of this type may change in future library versions.
|
||||||
|
* Don't make any assumptions on this context!
|
||||||
|
*/
|
||||||
|
typedef struct {
|
||||||
|
mbedtls_cipher_context_t cipher_ctx; /*!< The cipher context used. */
|
||||||
|
} mbedtls_nist_kw_context;
|
||||||
|
|
||||||
|
#else /* MBEDTLS_NIST_key wrapping_ALT */
|
||||||
|
#include "nist_kw_alt.h"
|
||||||
|
#endif /* MBEDTLS_NIST_KW_ALT */
|
||||||
|
|
||||||
|
/**
|
||||||
|
* \brief This function initializes the specified key wrapping context
|
||||||
|
* to make references valid and prepare the context
|
||||||
|
* for mbedtls_nist_kw_setkey() or mbedtls_nist_kw_free().
|
||||||
|
*
|
||||||
|
* \param ctx The key wrapping context to initialize.
|
||||||
|
*
|
||||||
|
*/
|
||||||
|
void mbedtls_nist_kw_init( mbedtls_nist_kw_context *ctx );
|
||||||
|
|
||||||
|
/**
|
||||||
|
* \brief This function initializes the key wrapping context set in the
|
||||||
|
* \p ctx parameter and sets the encryption key.
|
||||||
|
*
|
||||||
|
* \param ctx The key wrapping context.
|
||||||
|
* \param cipher The 128-bit block cipher to use. Only AES is supported.
|
||||||
|
* \param key The Key Encryption Key (KEK).
|
||||||
|
* \param keybits The KEK size in bits. This must be acceptable by the cipher.
|
||||||
|
* \param is_wrap Specify whether the operation within the context is wrapping or unwrapping
|
||||||
|
*
|
||||||
|
* \return \c 0 on success.
|
||||||
|
* \return \c MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA for any invalid input.
|
||||||
|
* \return \c MBEDTLS_ERR_CIPHER_FEATURE_UNAVAILABLE for 128-bit block ciphers
|
||||||
|
* which are not supported.
|
||||||
|
* \return cipher-specific error code on failure of the underlying cipher.
|
||||||
|
*/
|
||||||
|
int mbedtls_nist_kw_setkey( mbedtls_nist_kw_context *ctx,
|
||||||
|
mbedtls_cipher_id_t cipher,
|
||||||
|
const unsigned char *key,
|
||||||
|
unsigned int keybits,
|
||||||
|
const int is_wrap );
|
||||||
|
|
||||||
|
/**
|
||||||
|
* \brief This function releases and clears the specified key wrapping context
|
||||||
|
* and underlying cipher sub-context.
|
||||||
|
*
|
||||||
|
* \param ctx The key wrapping context to clear.
|
||||||
|
*/
|
||||||
|
void mbedtls_nist_kw_free( mbedtls_nist_kw_context *ctx );
|
||||||
|
|
||||||
|
/**
|
||||||
|
* \brief This function encrypts a buffer using key wrapping.
|
||||||
|
*
|
||||||
|
* \param ctx The key wrapping context to use for encryption.
|
||||||
|
* \param mode The key wrapping mode to use (MBEDTLS_KW_MODE_KW or MBEDTLS_KW_MODE_KWP)
|
||||||
|
* \param input The buffer holding the input data.
|
||||||
|
* \param in_len The length of the input data in Bytes.
|
||||||
|
* The input uses units of 8 Bytes called semiblocks.
|
||||||
|
* <ul><li>For KW mode: a multiple of 8 bytes between 16 and 2^57-8 inclusive. </li>
|
||||||
|
* <li>For KWP mode: any length between 1 and 2^32-1 inclusive.</li></ul>
|
||||||
|
* \param[out] output The buffer holding the output data.
|
||||||
|
* <ul><li>For KW mode: Must be at least 8 bytes larger than \p in_len.</li>
|
||||||
|
* <li>For KWP mode: Must be at least 8 bytes larger rounded up to a multiple of
|
||||||
|
* 8 bytes for KWP (15 bytes at most).</li></ul>
|
||||||
|
* \param[out] out_len The number of bytes written to the output buffer. \c 0 on failure.
|
||||||
|
* \param[in] out_size The capacity of the output buffer.
|
||||||
|
*
|
||||||
|
* \return \c 0 on success.
|
||||||
|
* \return \c MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA for invalid input length.
|
||||||
|
* \return cipher-specific error code on failure of the underlying cipher.
|
||||||
|
*/
|
||||||
|
int mbedtls_nist_kw_wrap( mbedtls_nist_kw_context *ctx, mbedtls_nist_kw_mode_t mode,
|
||||||
|
const unsigned char *input, size_t in_len,
|
||||||
|
unsigned char *output, size_t* out_len, size_t out_size );
|
||||||
|
|
||||||
|
/**
|
||||||
|
* \brief This function decrypts a buffer using key wrapping.
|
||||||
|
*
|
||||||
|
* \param ctx The key wrapping context to use for decryption.
|
||||||
|
* \param mode The key wrapping mode to use (MBEDTLS_KW_MODE_KW or MBEDTLS_KW_MODE_KWP)
|
||||||
|
* \param input The buffer holding the input data.
|
||||||
|
* \param in_len The length of the input data in Bytes.
|
||||||
|
* The input uses units of 8 Bytes called semiblocks.
|
||||||
|
* The input must be a multiple of semiblocks.
|
||||||
|
* <ul><li>For KW mode: a multiple of 8 bytes between 24 and 2^57 inclusive. </li>
|
||||||
|
* <li>For KWP mode: a multiple of 8 bytes between 16 and 2^32 inclusive.</li></ul>
|
||||||
|
* \param[out] output The buffer holding the output data.
|
||||||
|
* The output buffer's minimal length is 8 bytes shorter than \p in_len.
|
||||||
|
* \param[out] out_len The number of bytes written to the output buffer. \c 0 on failure.
|
||||||
|
* For KWP mode, the length could be up to 15 bytes shorter than \p in_len,
|
||||||
|
* depending on how much padding was added to the data.
|
||||||
|
* \param[in] out_size The capacity of the output buffer.
|
||||||
|
*
|
||||||
|
* \return \c 0 on success.
|
||||||
|
* \return \c MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA for invalid input length.
|
||||||
|
* \return \c MBEDTLS_ERR_CIPHER_AUTH_FAILED for verification failure of the ciphertext.
|
||||||
|
* \return cipher-specific error code on failure of the underlying cipher.
|
||||||
|
*/
|
||||||
|
int mbedtls_nist_kw_unwrap( mbedtls_nist_kw_context *ctx, mbedtls_nist_kw_mode_t mode,
|
||||||
|
const unsigned char *input, size_t in_len,
|
||||||
|
unsigned char *output, size_t* out_len, size_t out_size);
|
||||||
|
|
||||||
|
|
||||||
|
#if defined(MBEDTLS_SELF_TEST) && defined(MBEDTLS_AES_C)
|
||||||
|
/**
|
||||||
|
* \brief The key wrapping checkup routine.
|
||||||
|
*
|
||||||
|
* \return \c 0 on success.
|
||||||
|
* \return \c 1 on failure.
|
||||||
|
*/
|
||||||
|
int mbedtls_nist_kw_self_test( int verbose );
|
||||||
|
#endif /* MBEDTLS_SELF_TEST && MBEDTLS_AES_C */
|
||||||
|
|
||||||
|
#ifdef __cplusplus
|
||||||
|
}
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#endif /* MBEDTLS_NIST_KW_H */
|
||||||
|
|
@ -97,6 +97,8 @@
|
||||||
/* ISO arc for standard certificate and CRL extensions */
|
/* ISO arc for standard certificate and CRL extensions */
|
||||||
#define MBEDTLS_OID_ID_CE MBEDTLS_OID_ISO_CCITT_DS "\x1D" /**< id-ce OBJECT IDENTIFIER ::= {joint-iso-ccitt(2) ds(5) 29} */
|
#define MBEDTLS_OID_ID_CE MBEDTLS_OID_ISO_CCITT_DS "\x1D" /**< id-ce OBJECT IDENTIFIER ::= {joint-iso-ccitt(2) ds(5) 29} */
|
||||||
|
|
||||||
|
#define MBEDTLS_OID_NIST_ALG MBEDTLS_OID_GOV "\x03\x04" /** { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistAlgorithm(4) */
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Private Internet Extensions
|
* Private Internet Extensions
|
||||||
* { iso(1) identified-organization(3) dod(6) internet(1)
|
* { iso(1) identified-organization(3) dod(6) internet(1)
|
||||||
|
|
@ -219,12 +221,12 @@
|
||||||
#define MBEDTLS_OID_DIGEST_ALG_MD4 MBEDTLS_OID_RSA_COMPANY "\x02\x04" /**< id-mbedtls_md4 OBJECT IDENTIFIER ::= { iso(1) member-body(2) us(840) rsadsi(113549) digestAlgorithm(2) 4 } */
|
#define MBEDTLS_OID_DIGEST_ALG_MD4 MBEDTLS_OID_RSA_COMPANY "\x02\x04" /**< id-mbedtls_md4 OBJECT IDENTIFIER ::= { iso(1) member-body(2) us(840) rsadsi(113549) digestAlgorithm(2) 4 } */
|
||||||
#define MBEDTLS_OID_DIGEST_ALG_MD5 MBEDTLS_OID_RSA_COMPANY "\x02\x05" /**< id-mbedtls_md5 OBJECT IDENTIFIER ::= { iso(1) member-body(2) us(840) rsadsi(113549) digestAlgorithm(2) 5 } */
|
#define MBEDTLS_OID_DIGEST_ALG_MD5 MBEDTLS_OID_RSA_COMPANY "\x02\x05" /**< id-mbedtls_md5 OBJECT IDENTIFIER ::= { iso(1) member-body(2) us(840) rsadsi(113549) digestAlgorithm(2) 5 } */
|
||||||
#define MBEDTLS_OID_DIGEST_ALG_SHA1 MBEDTLS_OID_ISO_IDENTIFIED_ORG MBEDTLS_OID_OIW_SECSIG_SHA1 /**< id-mbedtls_sha1 OBJECT IDENTIFIER ::= { iso(1) identified-organization(3) oiw(14) secsig(3) algorithms(2) 26 } */
|
#define MBEDTLS_OID_DIGEST_ALG_SHA1 MBEDTLS_OID_ISO_IDENTIFIED_ORG MBEDTLS_OID_OIW_SECSIG_SHA1 /**< id-mbedtls_sha1 OBJECT IDENTIFIER ::= { iso(1) identified-organization(3) oiw(14) secsig(3) algorithms(2) 26 } */
|
||||||
#define MBEDTLS_OID_DIGEST_ALG_SHA224 MBEDTLS_OID_GOV "\x03\x04\x02\x04" /**< id-sha224 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistalgorithm(4) hashalgs(2) 4 } */
|
#define MBEDTLS_OID_DIGEST_ALG_SHA224 MBEDTLS_OID_NIST_ALG "\x02\x04" /**< id-sha224 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistalgorithm(4) hashalgs(2) 4 } */
|
||||||
#define MBEDTLS_OID_DIGEST_ALG_SHA256 MBEDTLS_OID_GOV "\x03\x04\x02\x01" /**< id-mbedtls_sha256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistalgorithm(4) hashalgs(2) 1 } */
|
#define MBEDTLS_OID_DIGEST_ALG_SHA256 MBEDTLS_OID_NIST_ALG "\x02\x01" /**< id-mbedtls_sha256 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistalgorithm(4) hashalgs(2) 1 } */
|
||||||
|
|
||||||
#define MBEDTLS_OID_DIGEST_ALG_SHA384 MBEDTLS_OID_GOV "\x03\x04\x02\x02" /**< id-sha384 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistalgorithm(4) hashalgs(2) 2 } */
|
#define MBEDTLS_OID_DIGEST_ALG_SHA384 MBEDTLS_OID_NIST_ALG "\x02\x02" /**< id-sha384 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistalgorithm(4) hashalgs(2) 2 } */
|
||||||
|
|
||||||
#define MBEDTLS_OID_DIGEST_ALG_SHA512 MBEDTLS_OID_GOV "\x03\x04\x02\x03" /**< id-mbedtls_sha512 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistalgorithm(4) hashalgs(2) 3 } */
|
#define MBEDTLS_OID_DIGEST_ALG_SHA512 MBEDTLS_OID_NIST_ALG "\x02\x03" /**< id-mbedtls_sha512 OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistalgorithm(4) hashalgs(2) 3 } */
|
||||||
|
|
||||||
#define MBEDTLS_OID_HMAC_SHA1 MBEDTLS_OID_RSA_COMPANY "\x02\x07" /**< id-hmacWithSHA1 OBJECT IDENTIFIER ::= { iso(1) member-body(2) us(840) rsadsi(113549) digestAlgorithm(2) 7 } */
|
#define MBEDTLS_OID_HMAC_SHA1 MBEDTLS_OID_RSA_COMPANY "\x02\x07" /**< id-hmacWithSHA1 OBJECT IDENTIFIER ::= { iso(1) member-body(2) us(840) rsadsi(113549) digestAlgorithm(2) 7 } */
|
||||||
|
|
||||||
|
|
@ -241,7 +243,20 @@
|
||||||
*/
|
*/
|
||||||
#define MBEDTLS_OID_DES_CBC MBEDTLS_OID_ISO_IDENTIFIED_ORG MBEDTLS_OID_OIW_SECSIG_ALG "\x07" /**< desCBC OBJECT IDENTIFIER ::= { iso(1) identified-organization(3) oiw(14) secsig(3) algorithms(2) 7 } */
|
#define MBEDTLS_OID_DES_CBC MBEDTLS_OID_ISO_IDENTIFIED_ORG MBEDTLS_OID_OIW_SECSIG_ALG "\x07" /**< desCBC OBJECT IDENTIFIER ::= { iso(1) identified-organization(3) oiw(14) secsig(3) algorithms(2) 7 } */
|
||||||
#define MBEDTLS_OID_DES_EDE3_CBC MBEDTLS_OID_RSA_COMPANY "\x03\x07" /**< des-ede3-cbc OBJECT IDENTIFIER ::= { iso(1) member-body(2) -- us(840) rsadsi(113549) encryptionAlgorithm(3) 7 } */
|
#define MBEDTLS_OID_DES_EDE3_CBC MBEDTLS_OID_RSA_COMPANY "\x03\x07" /**< des-ede3-cbc OBJECT IDENTIFIER ::= { iso(1) member-body(2) -- us(840) rsadsi(113549) encryptionAlgorithm(3) 7 } */
|
||||||
|
#define MBEDTLS_OID_AES MBEDTLS_OID_NIST_ALG "\x01" /** aes OBJECT IDENTIFIER ::= { joint-iso-itu-t(2) country(16) us(840) organization(1) gov(101) csor(3) nistAlgorithm(4) 1 } */
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Key Wrapping algorithms
|
||||||
|
*/
|
||||||
|
/*
|
||||||
|
* RFC 5649
|
||||||
|
*/
|
||||||
|
#define MBEDTLS_OID_AES128_KW MBEDTLS_OID_AES "\x05" /** id-aes128-wrap OBJECT IDENTIFIER ::= { aes 5 } */
|
||||||
|
#define MBEDTLS_OID_AES128_KWP MBEDTLS_OID_AES "\x08" /** id-aes128-wrap-pad OBJECT IDENTIFIER ::= { aes 8 } */
|
||||||
|
#define MBEDTLS_OID_AES192_KW MBEDTLS_OID_AES "\x19" /** id-aes192-wrap OBJECT IDENTIFIER ::= { aes 25 } */
|
||||||
|
#define MBEDTLS_OID_AES192_KWP MBEDTLS_OID_AES "\x1c" /** id-aes192-wrap-pad OBJECT IDENTIFIER ::= { aes 28 } */
|
||||||
|
#define MBEDTLS_OID_AES256_KW MBEDTLS_OID_AES "\x2d" /** id-aes256-wrap OBJECT IDENTIFIER ::= { aes 45 } */
|
||||||
|
#define MBEDTLS_OID_AES256_KWP MBEDTLS_OID_AES "\x30" /** id-aes256-wrap-pad OBJECT IDENTIFIER ::= { aes 48 } */
|
||||||
/*
|
/*
|
||||||
* PKCS#5 OIDs
|
* PKCS#5 OIDs
|
||||||
*/
|
*/
|
||||||
|
|
|
||||||
|
|
@ -40,6 +40,7 @@ set(src_crypto
|
||||||
md5.c
|
md5.c
|
||||||
md_wrap.c
|
md_wrap.c
|
||||||
memory_buffer_alloc.c
|
memory_buffer_alloc.c
|
||||||
|
nist_kw.c
|
||||||
oid.c
|
oid.c
|
||||||
padlock.c
|
padlock.c
|
||||||
pem.c
|
pem.c
|
||||||
|
|
|
||||||
|
|
@ -76,11 +76,11 @@ OBJS_CRYPTO= aes.o aesni.o arc4.o \
|
||||||
hkdf.o \
|
hkdf.o \
|
||||||
hmac_drbg.o md.o md2.o \
|
hmac_drbg.o md.o md2.o \
|
||||||
md4.o md5.o md_wrap.o \
|
md4.o md5.o md_wrap.o \
|
||||||
memory_buffer_alloc.o oid.o \
|
memory_buffer_alloc.o nist_kw.o \
|
||||||
padlock.o pem.o pk.o \
|
oid.o padlock.o pem.o \
|
||||||
pk_wrap.o pkcs12.o pkcs5.o \
|
pk.o pk_wrap.o pkcs12.o \
|
||||||
pkparse.o pkwrite.o platform.o \
|
pkcs5.o pkparse.o pkwrite.o \
|
||||||
platform_util.o poly1305.o \
|
platform.o platform_util.o poly1305.o \
|
||||||
ripemd160.o rsa_internal.o rsa.o \
|
ripemd160.o rsa_internal.o rsa.o \
|
||||||
sha1.o sha256.o sha512.o \
|
sha1.o sha256.o sha512.o \
|
||||||
threading.o timing.o version.o \
|
threading.o timing.o version.o \
|
||||||
|
|
|
||||||
755
library/nist_kw.c
Normal file
755
library/nist_kw.c
Normal file
|
|
@ -0,0 +1,755 @@
|
||||||
|
/*
|
||||||
|
* Implementation of NIST SP 800-38F key wrapping, supporting KW and KWP modes
|
||||||
|
* only
|
||||||
|
*
|
||||||
|
* Copyright (C) 2018, Arm Limited (or its affiliates), All Rights Reserved
|
||||||
|
* SPDX-License-Identifier: Apache-2.0
|
||||||
|
*
|
||||||
|
* Licensed under the Apache License, Version 2.0 (the "License"); you may
|
||||||
|
* not use this file except in compliance with the License.
|
||||||
|
* You may obtain a copy of the License at
|
||||||
|
*
|
||||||
|
* http://www.apache.org/licenses/LICENSE-2.0
|
||||||
|
*
|
||||||
|
* Unless required by applicable law or agreed to in writing, software
|
||||||
|
* distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
||||||
|
* WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||||
|
* See the License for the specific language governing permissions and
|
||||||
|
* limitations under the License.
|
||||||
|
*
|
||||||
|
* This file is part of Mbed TLS (https://tls.mbed.org)
|
||||||
|
*/
|
||||||
|
/*
|
||||||
|
* Definition of Key Wrapping:
|
||||||
|
* https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38F.pdf
|
||||||
|
* RFC 3394 "Advanced Encryption Standard (AES) Key Wrap Algorithm"
|
||||||
|
* RFC 5649 "Advanced Encryption Standard (AES) Key Wrap with Padding Algorithm"
|
||||||
|
*
|
||||||
|
* Note: RFC 3394 defines different methodology for intermediate operations for
|
||||||
|
* the wrapping and unwrapping operation than the definition in NIST SP 800-38F.
|
||||||
|
*/
|
||||||
|
|
||||||
|
#if !defined(MBEDTLS_CONFIG_FILE)
|
||||||
|
#include "mbedtls/config.h"
|
||||||
|
#else
|
||||||
|
#include MBEDTLS_CONFIG_FILE
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#if defined(MBEDTLS_NIST_KW_C)
|
||||||
|
|
||||||
|
#include "mbedtls/nist_kw.h"
|
||||||
|
#include "mbedtls/platform_util.h"
|
||||||
|
|
||||||
|
#include <stdint.h>
|
||||||
|
#include <string.h>
|
||||||
|
|
||||||
|
#if defined(MBEDTLS_SELF_TEST) && defined(MBEDTLS_AES_C)
|
||||||
|
#if defined(MBEDTLS_PLATFORM_C)
|
||||||
|
#include "mbedtls/platform.h"
|
||||||
|
#else
|
||||||
|
#include <stdio.h>
|
||||||
|
#define mbedtls_printf printf
|
||||||
|
#endif /* MBEDTLS_PLATFORM_C */
|
||||||
|
#endif /* MBEDTLS_SELF_TEST && MBEDTLS_AES_C */
|
||||||
|
|
||||||
|
#if !defined(MBEDTLS_NIST_KW_ALT)
|
||||||
|
|
||||||
|
#define KW_SEMIBLOCK_LENGTH 8
|
||||||
|
#define MIN_SEMIBLOCKS_COUNT 3
|
||||||
|
|
||||||
|
/* constant-time buffer comparison */
|
||||||
|
static inline unsigned char mbedtls_nist_kw_safer_memcmp( const void *a, const void *b, size_t n )
|
||||||
|
{
|
||||||
|
size_t i;
|
||||||
|
volatile const unsigned char *A = (volatile const unsigned char *) a;
|
||||||
|
volatile const unsigned char *B = (volatile const unsigned char *) b;
|
||||||
|
volatile unsigned char diff = 0;
|
||||||
|
|
||||||
|
for( i = 0; i < n; i++ )
|
||||||
|
{
|
||||||
|
/* Read volatile data in order before computing diff.
|
||||||
|
* This avoids IAR compiler warning:
|
||||||
|
* 'the order of volatile accesses is undefined ..' */
|
||||||
|
unsigned char x = A[i], y = B[i];
|
||||||
|
diff |= x ^ y;
|
||||||
|
}
|
||||||
|
|
||||||
|
return( diff );
|
||||||
|
}
|
||||||
|
|
||||||
|
/*! The 64-bit default integrity check value (ICV) for KW mode. */
|
||||||
|
static const unsigned char NIST_KW_ICV1[] = {0xA6, 0xA6, 0xA6, 0xA6, 0xA6, 0xA6, 0xA6, 0xA6};
|
||||||
|
/*! The 32-bit default integrity check value (ICV) for KWP mode. */
|
||||||
|
static const unsigned char NIST_KW_ICV2[] = {0xA6, 0x59, 0x59, 0xA6};
|
||||||
|
|
||||||
|
#ifndef GET_UINT32_BE
|
||||||
|
#define GET_UINT32_BE(n,b,i) \
|
||||||
|
do { \
|
||||||
|
(n) = ( (uint32_t) (b)[(i) ] << 24 ) \
|
||||||
|
| ( (uint32_t) (b)[(i) + 1] << 16 ) \
|
||||||
|
| ( (uint32_t) (b)[(i) + 2] << 8 ) \
|
||||||
|
| ( (uint32_t) (b)[(i) + 3] ); \
|
||||||
|
} while( 0 )
|
||||||
|
#endif
|
||||||
|
|
||||||
|
#ifndef PUT_UINT32_BE
|
||||||
|
#define PUT_UINT32_BE(n,b,i) \
|
||||||
|
do { \
|
||||||
|
(b)[(i) ] = (unsigned char) ( (n) >> 24 ); \
|
||||||
|
(b)[(i) + 1] = (unsigned char) ( (n) >> 16 ); \
|
||||||
|
(b)[(i) + 2] = (unsigned char) ( (n) >> 8 ); \
|
||||||
|
(b)[(i) + 3] = (unsigned char) ( (n) ); \
|
||||||
|
} while( 0 )
|
||||||
|
#endif
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Initialize context
|
||||||
|
*/
|
||||||
|
void mbedtls_nist_kw_init( mbedtls_nist_kw_context *ctx )
|
||||||
|
{
|
||||||
|
memset( ctx, 0, sizeof( mbedtls_nist_kw_context ) );
|
||||||
|
}
|
||||||
|
|
||||||
|
int mbedtls_nist_kw_setkey( mbedtls_nist_kw_context *ctx,
|
||||||
|
mbedtls_cipher_id_t cipher,
|
||||||
|
const unsigned char *key,
|
||||||
|
unsigned int keybits,
|
||||||
|
const int is_wrap )
|
||||||
|
{
|
||||||
|
int ret;
|
||||||
|
const mbedtls_cipher_info_t *cipher_info;
|
||||||
|
|
||||||
|
cipher_info = mbedtls_cipher_info_from_values( cipher,
|
||||||
|
keybits,
|
||||||
|
MBEDTLS_MODE_ECB );
|
||||||
|
if( cipher_info == NULL )
|
||||||
|
return( MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
|
||||||
|
|
||||||
|
if( cipher_info->block_size != 16 )
|
||||||
|
return( MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
|
||||||
|
|
||||||
|
/*
|
||||||
|
* SP 800-38F currently defines AES cipher as the only block cipher allowed:
|
||||||
|
* "For KW and KWP, the underlying block cipher shall be approved, and the
|
||||||
|
* block size shall be 128 bits. Currently, the AES block cipher, with key
|
||||||
|
* lengths of 128, 192, or 256 bits, is the only block cipher that fits
|
||||||
|
* this profile."
|
||||||
|
* Currently we don't support other 128 bit block ciphers for key wrapping,
|
||||||
|
* such as Camellia and Aria.
|
||||||
|
*/
|
||||||
|
if( cipher != MBEDTLS_CIPHER_ID_AES )
|
||||||
|
return( MBEDTLS_ERR_CIPHER_FEATURE_UNAVAILABLE );
|
||||||
|
|
||||||
|
mbedtls_cipher_free( &ctx->cipher_ctx );
|
||||||
|
|
||||||
|
if( ( ret = mbedtls_cipher_setup( &ctx->cipher_ctx, cipher_info ) ) != 0 )
|
||||||
|
return( ret );
|
||||||
|
|
||||||
|
if( ( ret = mbedtls_cipher_setkey( &ctx->cipher_ctx, key, keybits,
|
||||||
|
is_wrap ? MBEDTLS_ENCRYPT :
|
||||||
|
MBEDTLS_DECRYPT )
|
||||||
|
) != 0 )
|
||||||
|
{
|
||||||
|
return( ret );
|
||||||
|
}
|
||||||
|
|
||||||
|
return( 0 );
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Free context
|
||||||
|
*/
|
||||||
|
void mbedtls_nist_kw_free( mbedtls_nist_kw_context *ctx )
|
||||||
|
{
|
||||||
|
mbedtls_cipher_free( &ctx->cipher_ctx );
|
||||||
|
mbedtls_platform_zeroize( ctx, sizeof( mbedtls_nist_kw_context ) );
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Helper function for Xoring the uint64_t "t" with the encrypted A.
|
||||||
|
* Defined in NIST SP 800-38F section 6.1
|
||||||
|
*/
|
||||||
|
static void calc_a_xor_t( unsigned char A[KW_SEMIBLOCK_LENGTH], uint64_t t )
|
||||||
|
{
|
||||||
|
size_t i = 0;
|
||||||
|
for( i = 0; i < sizeof( t ); i++ )
|
||||||
|
{
|
||||||
|
A[i] ^= ( t >> ( ( sizeof( t ) - 1 - i ) * 8 ) ) & 0xff;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
* KW-AE as defined in SP 800-38F section 6.2
|
||||||
|
* KWP-AE as defined in SP 800-38F section 6.3
|
||||||
|
*/
|
||||||
|
int mbedtls_nist_kw_wrap( mbedtls_nist_kw_context *ctx,
|
||||||
|
mbedtls_nist_kw_mode_t mode,
|
||||||
|
const unsigned char *input, size_t in_len,
|
||||||
|
unsigned char *output, size_t *out_len, size_t out_size )
|
||||||
|
{
|
||||||
|
int ret = 0;
|
||||||
|
size_t semiblocks = 0;
|
||||||
|
size_t s;
|
||||||
|
size_t olen, padlen = 0;
|
||||||
|
uint64_t t = 0;
|
||||||
|
unsigned char outbuff[KW_SEMIBLOCK_LENGTH * 2];
|
||||||
|
unsigned char inbuff[KW_SEMIBLOCK_LENGTH * 2];
|
||||||
|
unsigned char *R2 = output + KW_SEMIBLOCK_LENGTH;
|
||||||
|
unsigned char *A = output;
|
||||||
|
|
||||||
|
*out_len = 0;
|
||||||
|
/*
|
||||||
|
* Generate the String to work on
|
||||||
|
*/
|
||||||
|
if( mode == MBEDTLS_KW_MODE_KW )
|
||||||
|
{
|
||||||
|
if( out_size < in_len + KW_SEMIBLOCK_LENGTH )
|
||||||
|
{
|
||||||
|
return( MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
* According to SP 800-38F Table 1, the plaintext length for KW
|
||||||
|
* must be between 2 to 2^54-1 semiblocks inclusive.
|
||||||
|
*/
|
||||||
|
if( in_len < 16 ||
|
||||||
|
#if SIZE_MAX > 0x1FFFFFFFFFFFFF8
|
||||||
|
in_len > 0x1FFFFFFFFFFFFF8 ||
|
||||||
|
#endif
|
||||||
|
in_len % KW_SEMIBLOCK_LENGTH != 0 )
|
||||||
|
{
|
||||||
|
return( MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
|
||||||
|
}
|
||||||
|
|
||||||
|
memcpy( output, NIST_KW_ICV1, KW_SEMIBLOCK_LENGTH );
|
||||||
|
memmove( output + KW_SEMIBLOCK_LENGTH, input, in_len );
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
if( in_len % 8 != 0 )
|
||||||
|
{
|
||||||
|
padlen = ( 8 - ( in_len % 8 ) );
|
||||||
|
}
|
||||||
|
|
||||||
|
if( out_size < in_len + KW_SEMIBLOCK_LENGTH + padlen )
|
||||||
|
{
|
||||||
|
return( MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
* According to SP 800-38F Table 1, the plaintext length for KWP
|
||||||
|
* must be between 1 and 2^32-1 octets inclusive.
|
||||||
|
*/
|
||||||
|
if( in_len < 1
|
||||||
|
#if SIZE_MAX > 0xFFFFFFFF
|
||||||
|
|| in_len > 0xFFFFFFFF
|
||||||
|
#endif
|
||||||
|
)
|
||||||
|
{
|
||||||
|
return( MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
|
||||||
|
}
|
||||||
|
|
||||||
|
memcpy( output, NIST_KW_ICV2, KW_SEMIBLOCK_LENGTH / 2 );
|
||||||
|
PUT_UINT32_BE( ( in_len & 0xffffffff ), output,
|
||||||
|
KW_SEMIBLOCK_LENGTH / 2 );
|
||||||
|
|
||||||
|
memcpy( output + KW_SEMIBLOCK_LENGTH, input, in_len );
|
||||||
|
memset( output + KW_SEMIBLOCK_LENGTH + in_len, 0, padlen );
|
||||||
|
}
|
||||||
|
semiblocks = ( ( in_len + padlen ) / KW_SEMIBLOCK_LENGTH ) + 1;
|
||||||
|
|
||||||
|
s = 6 * ( semiblocks - 1 );
|
||||||
|
|
||||||
|
if( mode == MBEDTLS_KW_MODE_KWP
|
||||||
|
&& in_len <= KW_SEMIBLOCK_LENGTH )
|
||||||
|
{
|
||||||
|
memcpy( inbuff, output, 16 );
|
||||||
|
ret = mbedtls_cipher_update( &ctx->cipher_ctx,
|
||||||
|
inbuff, 16, output, &olen );
|
||||||
|
if( ret != 0 )
|
||||||
|
goto cleanup;
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
/*
|
||||||
|
* Do the wrapping function W, as defined in RFC 3394 section 2.2.1
|
||||||
|
*/
|
||||||
|
if( semiblocks < MIN_SEMIBLOCKS_COUNT )
|
||||||
|
{
|
||||||
|
ret = MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA;
|
||||||
|
goto cleanup;
|
||||||
|
}
|
||||||
|
|
||||||
|
/* Calculate intermediate values */
|
||||||
|
for( t = 1; t <= s; t++ )
|
||||||
|
{
|
||||||
|
memcpy( inbuff, A, KW_SEMIBLOCK_LENGTH );
|
||||||
|
memcpy( inbuff + KW_SEMIBLOCK_LENGTH, R2, KW_SEMIBLOCK_LENGTH );
|
||||||
|
|
||||||
|
ret = mbedtls_cipher_update( &ctx->cipher_ctx,
|
||||||
|
inbuff, 16, outbuff, &olen );
|
||||||
|
if( ret != 0 )
|
||||||
|
goto cleanup;
|
||||||
|
|
||||||
|
memcpy( A, outbuff, KW_SEMIBLOCK_LENGTH );
|
||||||
|
calc_a_xor_t( A, t );
|
||||||
|
|
||||||
|
memcpy( R2, outbuff + KW_SEMIBLOCK_LENGTH, KW_SEMIBLOCK_LENGTH );
|
||||||
|
R2 += KW_SEMIBLOCK_LENGTH;
|
||||||
|
if( R2 >= output + ( semiblocks * KW_SEMIBLOCK_LENGTH ) )
|
||||||
|
R2 = output + KW_SEMIBLOCK_LENGTH;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
*out_len = semiblocks * KW_SEMIBLOCK_LENGTH;
|
||||||
|
|
||||||
|
cleanup:
|
||||||
|
|
||||||
|
if( ret != 0)
|
||||||
|
{
|
||||||
|
memset( output, 0, semiblocks * KW_SEMIBLOCK_LENGTH );
|
||||||
|
}
|
||||||
|
mbedtls_platform_zeroize( inbuff, KW_SEMIBLOCK_LENGTH * 2 );
|
||||||
|
mbedtls_platform_zeroize( outbuff, KW_SEMIBLOCK_LENGTH * 2 );
|
||||||
|
mbedtls_cipher_finish( &ctx->cipher_ctx, NULL, &olen );
|
||||||
|
return( ret );
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
* W-1 function as defined in RFC 3394 section 2.2.2
|
||||||
|
* This function assumes the following:
|
||||||
|
* 1. Output buffer is at least of size ( semiblocks - 1 ) * KW_SEMIBLOCK_LENGTH.
|
||||||
|
* 2. The input buffer is of size semiblocks * KW_SEMIBLOCK_LENGTH.
|
||||||
|
* 3. Minimal number of semiblocks is 3.
|
||||||
|
* 4. A is a buffer to hold the first semiblock of the input buffer.
|
||||||
|
*/
|
||||||
|
static int unwrap( mbedtls_nist_kw_context *ctx,
|
||||||
|
const unsigned char *input, size_t semiblocks,
|
||||||
|
unsigned char A[KW_SEMIBLOCK_LENGTH],
|
||||||
|
unsigned char *output, size_t* out_len )
|
||||||
|
{
|
||||||
|
int ret = 0;
|
||||||
|
const size_t s = 6 * ( semiblocks - 1 );
|
||||||
|
size_t olen;
|
||||||
|
uint64_t t = 0;
|
||||||
|
unsigned char outbuff[KW_SEMIBLOCK_LENGTH * 2];
|
||||||
|
unsigned char inbuff[KW_SEMIBLOCK_LENGTH * 2];
|
||||||
|
unsigned char *R = output + ( semiblocks - 2 ) * KW_SEMIBLOCK_LENGTH;
|
||||||
|
*out_len = 0;
|
||||||
|
|
||||||
|
if( semiblocks < MIN_SEMIBLOCKS_COUNT )
|
||||||
|
{
|
||||||
|
return( MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
|
||||||
|
}
|
||||||
|
|
||||||
|
memcpy( A, input, KW_SEMIBLOCK_LENGTH );
|
||||||
|
memmove( output, input + KW_SEMIBLOCK_LENGTH, ( semiblocks - 1 ) * KW_SEMIBLOCK_LENGTH );
|
||||||
|
|
||||||
|
/* Calculate intermediate values */
|
||||||
|
for( t = s; t >= 1; t-- )
|
||||||
|
{
|
||||||
|
calc_a_xor_t( A, t );
|
||||||
|
|
||||||
|
memcpy( inbuff, A, KW_SEMIBLOCK_LENGTH );
|
||||||
|
memcpy( inbuff + KW_SEMIBLOCK_LENGTH, R, KW_SEMIBLOCK_LENGTH );
|
||||||
|
|
||||||
|
ret = mbedtls_cipher_update( &ctx->cipher_ctx,
|
||||||
|
inbuff, 16, outbuff, &olen );
|
||||||
|
if( ret != 0 )
|
||||||
|
goto cleanup;
|
||||||
|
|
||||||
|
memcpy( A, outbuff, KW_SEMIBLOCK_LENGTH );
|
||||||
|
|
||||||
|
/* Set R as LSB64 of outbuff */
|
||||||
|
memcpy( R, outbuff + KW_SEMIBLOCK_LENGTH, KW_SEMIBLOCK_LENGTH );
|
||||||
|
|
||||||
|
if( R == output )
|
||||||
|
R = output + ( semiblocks - 2 ) * KW_SEMIBLOCK_LENGTH;
|
||||||
|
else
|
||||||
|
R -= KW_SEMIBLOCK_LENGTH;
|
||||||
|
}
|
||||||
|
|
||||||
|
*out_len = ( semiblocks - 1 ) * KW_SEMIBLOCK_LENGTH;
|
||||||
|
|
||||||
|
cleanup:
|
||||||
|
if( ret != 0)
|
||||||
|
memset( output, 0, ( semiblocks - 1 ) * KW_SEMIBLOCK_LENGTH );
|
||||||
|
mbedtls_platform_zeroize( inbuff, sizeof( inbuff ) );
|
||||||
|
mbedtls_platform_zeroize( outbuff, sizeof( outbuff ) );
|
||||||
|
|
||||||
|
return( ret );
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
* KW-AD as defined in SP 800-38F section 6.2
|
||||||
|
* KWP-AD as defined in SP 800-38F section 6.3
|
||||||
|
*/
|
||||||
|
int mbedtls_nist_kw_unwrap( mbedtls_nist_kw_context *ctx,
|
||||||
|
mbedtls_nist_kw_mode_t mode,
|
||||||
|
const unsigned char *input, size_t in_len,
|
||||||
|
unsigned char *output, size_t *out_len, size_t out_size )
|
||||||
|
{
|
||||||
|
int ret = 0;
|
||||||
|
size_t i, olen;
|
||||||
|
unsigned char A[KW_SEMIBLOCK_LENGTH];
|
||||||
|
unsigned char diff, bad_padding = 0;
|
||||||
|
|
||||||
|
*out_len = 0;
|
||||||
|
if( out_size < in_len - KW_SEMIBLOCK_LENGTH )
|
||||||
|
{
|
||||||
|
return( MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
|
||||||
|
}
|
||||||
|
|
||||||
|
if( mode == MBEDTLS_KW_MODE_KW )
|
||||||
|
{
|
||||||
|
/*
|
||||||
|
* According to SP 800-38F Table 1, the ciphertext length for KW
|
||||||
|
* must be between 3 to 2^54 semiblocks inclusive.
|
||||||
|
*/
|
||||||
|
if( in_len < 24 ||
|
||||||
|
#if SIZE_MAX > 0x200000000000000
|
||||||
|
in_len > 0x200000000000000 ||
|
||||||
|
#endif
|
||||||
|
in_len % KW_SEMIBLOCK_LENGTH != 0 )
|
||||||
|
{
|
||||||
|
return( MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
|
||||||
|
}
|
||||||
|
|
||||||
|
ret = unwrap( ctx, input, in_len / KW_SEMIBLOCK_LENGTH,
|
||||||
|
A, output, out_len );
|
||||||
|
if( ret != 0 )
|
||||||
|
goto cleanup;
|
||||||
|
|
||||||
|
/* Check ICV in "constant-time" */
|
||||||
|
diff = mbedtls_nist_kw_safer_memcmp( NIST_KW_ICV1, A, KW_SEMIBLOCK_LENGTH );
|
||||||
|
|
||||||
|
if( diff != 0 )
|
||||||
|
{
|
||||||
|
ret = MBEDTLS_ERR_CIPHER_AUTH_FAILED;
|
||||||
|
goto cleanup;
|
||||||
|
}
|
||||||
|
|
||||||
|
}
|
||||||
|
else if( mode == MBEDTLS_KW_MODE_KWP )
|
||||||
|
{
|
||||||
|
size_t padlen = 0;
|
||||||
|
uint32_t Plen;
|
||||||
|
/*
|
||||||
|
* According to SP 800-38F Table 1, the ciphertext length for KWP
|
||||||
|
* must be between 2 to 2^29 semiblocks inclusive.
|
||||||
|
*/
|
||||||
|
if( in_len < KW_SEMIBLOCK_LENGTH * 2 ||
|
||||||
|
#if SIZE_MAX > 0x100000000
|
||||||
|
in_len > 0x100000000 ||
|
||||||
|
#endif
|
||||||
|
in_len % KW_SEMIBLOCK_LENGTH != 0 )
|
||||||
|
{
|
||||||
|
return( MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA );
|
||||||
|
}
|
||||||
|
|
||||||
|
if( in_len == KW_SEMIBLOCK_LENGTH * 2 )
|
||||||
|
{
|
||||||
|
unsigned char outbuff[KW_SEMIBLOCK_LENGTH * 2];
|
||||||
|
ret = mbedtls_cipher_update( &ctx->cipher_ctx,
|
||||||
|
input, 16, outbuff, &olen );
|
||||||
|
if( ret != 0 )
|
||||||
|
goto cleanup;
|
||||||
|
|
||||||
|
memcpy( A, outbuff, KW_SEMIBLOCK_LENGTH );
|
||||||
|
memcpy( output, outbuff + KW_SEMIBLOCK_LENGTH, KW_SEMIBLOCK_LENGTH );
|
||||||
|
mbedtls_platform_zeroize( outbuff, sizeof( outbuff ) );
|
||||||
|
*out_len = KW_SEMIBLOCK_LENGTH;
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
/* in_len >= KW_SEMIBLOCK_LENGTH * 3 */
|
||||||
|
ret = unwrap( ctx, input, in_len / KW_SEMIBLOCK_LENGTH,
|
||||||
|
A, output, out_len );
|
||||||
|
if( ret != 0 )
|
||||||
|
goto cleanup;
|
||||||
|
}
|
||||||
|
|
||||||
|
/* Check ICV in "constant-time" */
|
||||||
|
diff = mbedtls_nist_kw_safer_memcmp( NIST_KW_ICV2, A, KW_SEMIBLOCK_LENGTH / 2 );
|
||||||
|
|
||||||
|
if( diff != 0 )
|
||||||
|
{
|
||||||
|
ret = MBEDTLS_ERR_CIPHER_AUTH_FAILED;
|
||||||
|
}
|
||||||
|
|
||||||
|
GET_UINT32_BE( Plen, A, KW_SEMIBLOCK_LENGTH / 2 );
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Plen is the length of the plaintext, when the input is valid.
|
||||||
|
* If Plen is larger than the plaintext and padding, padlen will be
|
||||||
|
* larger than 8, because of the type wrap around.
|
||||||
|
*/
|
||||||
|
padlen = in_len - KW_SEMIBLOCK_LENGTH - Plen;
|
||||||
|
if ( padlen > 7 )
|
||||||
|
{
|
||||||
|
padlen &= 7;
|
||||||
|
ret = MBEDTLS_ERR_CIPHER_AUTH_FAILED;
|
||||||
|
}
|
||||||
|
|
||||||
|
/* Check padding in "constant-time" */
|
||||||
|
for( diff = 0, i = 0; i < KW_SEMIBLOCK_LENGTH; i++ )
|
||||||
|
{
|
||||||
|
if( i >= KW_SEMIBLOCK_LENGTH - padlen )
|
||||||
|
diff |= output[*out_len - KW_SEMIBLOCK_LENGTH + i];
|
||||||
|
else
|
||||||
|
bad_padding |= output[*out_len - KW_SEMIBLOCK_LENGTH + i];
|
||||||
|
}
|
||||||
|
|
||||||
|
if( diff != 0 )
|
||||||
|
{
|
||||||
|
ret = MBEDTLS_ERR_CIPHER_AUTH_FAILED;
|
||||||
|
}
|
||||||
|
|
||||||
|
if( ret != 0 )
|
||||||
|
{
|
||||||
|
goto cleanup;
|
||||||
|
}
|
||||||
|
memset( output + Plen, 0, padlen );
|
||||||
|
*out_len = Plen;
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
ret = MBEDTLS_ERR_CIPHER_FEATURE_UNAVAILABLE;
|
||||||
|
goto cleanup;
|
||||||
|
}
|
||||||
|
|
||||||
|
cleanup:
|
||||||
|
if( ret != 0 )
|
||||||
|
{
|
||||||
|
memset( output, 0, *out_len );
|
||||||
|
*out_len = 0;
|
||||||
|
}
|
||||||
|
|
||||||
|
mbedtls_platform_zeroize( &bad_padding, sizeof( bad_padding) );
|
||||||
|
mbedtls_platform_zeroize( &diff, sizeof( diff ) );
|
||||||
|
mbedtls_platform_zeroize( A, sizeof( A ) );
|
||||||
|
mbedtls_cipher_finish( &ctx->cipher_ctx, NULL, &olen );
|
||||||
|
return( ret );
|
||||||
|
}
|
||||||
|
|
||||||
|
#endif /* !MBEDTLS_NIST_KW_ALT */
|
||||||
|
|
||||||
|
#if defined(MBEDTLS_SELF_TEST) && defined(MBEDTLS_AES_C)
|
||||||
|
|
||||||
|
#define KW_TESTS 3
|
||||||
|
|
||||||
|
/*
|
||||||
|
* Test vectors taken from NIST
|
||||||
|
* https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/CAVP-TESTING-BLOCK-CIPHER-MODES#KW
|
||||||
|
*/
|
||||||
|
static const unsigned int key_len[KW_TESTS] = { 16, 24, 32 };
|
||||||
|
|
||||||
|
static const unsigned char kw_key[KW_TESTS][32] = {
|
||||||
|
{ 0x75, 0x75, 0xda, 0x3a, 0x93, 0x60, 0x7c, 0xc2,
|
||||||
|
0xbf, 0xd8, 0xce, 0xc7, 0xaa, 0xdf, 0xd9, 0xa6 },
|
||||||
|
{ 0x2d, 0x85, 0x26, 0x08, 0x1d, 0x02, 0xfb, 0x5b,
|
||||||
|
0x85, 0xf6, 0x9a, 0xc2, 0x86, 0xec, 0xd5, 0x7d,
|
||||||
|
0x40, 0xdf, 0x5d, 0xf3, 0x49, 0x47, 0x44, 0xd3 },
|
||||||
|
{ 0x11, 0x2a, 0xd4, 0x1b, 0x48, 0x56, 0xc7, 0x25,
|
||||||
|
0x4a, 0x98, 0x48, 0xd3, 0x0f, 0xdd, 0x78, 0x33,
|
||||||
|
0x5b, 0x03, 0x9a, 0x48, 0xa8, 0x96, 0x2c, 0x4d,
|
||||||
|
0x1c, 0xb7, 0x8e, 0xab, 0xd5, 0xda, 0xd7, 0x88 }
|
||||||
|
};
|
||||||
|
|
||||||
|
static const unsigned char kw_msg[KW_TESTS][40] = {
|
||||||
|
{ 0x42, 0x13, 0x6d, 0x3c, 0x38, 0x4a, 0x3e, 0xea,
|
||||||
|
0xc9, 0x5a, 0x06, 0x6f, 0xd2, 0x8f, 0xed, 0x3f },
|
||||||
|
{ 0x95, 0xc1, 0x1b, 0xf5, 0x35, 0x3a, 0xfe, 0xdb,
|
||||||
|
0x98, 0xfd, 0xd6, 0xc8, 0xca, 0x6f, 0xdb, 0x6d,
|
||||||
|
0xa5, 0x4b, 0x74, 0xb4, 0x99, 0x0f, 0xdc, 0x45,
|
||||||
|
0xc0, 0x9d, 0x15, 0x8f, 0x51, 0xce, 0x62, 0x9d,
|
||||||
|
0xe2, 0xaf, 0x26, 0xe3, 0x25, 0x0e, 0x6b, 0x4c },
|
||||||
|
{ 0x1b, 0x20, 0xbf, 0x19, 0x90, 0xb0, 0x65, 0xd7,
|
||||||
|
0x98, 0xe1, 0xb3, 0x22, 0x64, 0xad, 0x50, 0xa8,
|
||||||
|
0x74, 0x74, 0x92, 0xba, 0x09, 0xa0, 0x4d, 0xd1 }
|
||||||
|
};
|
||||||
|
|
||||||
|
static const size_t kw_msg_len[KW_TESTS] = { 16, 40, 24 };
|
||||||
|
static const size_t kw_out_len[KW_TESTS] = { 24, 48, 32 };
|
||||||
|
static const unsigned char kw_res[KW_TESTS][48] = {
|
||||||
|
{ 0x03, 0x1f, 0x6b, 0xd7, 0xe6, 0x1e, 0x64, 0x3d,
|
||||||
|
0xf6, 0x85, 0x94, 0x81, 0x6f, 0x64, 0xca, 0xa3,
|
||||||
|
0xf5, 0x6f, 0xab, 0xea, 0x25, 0x48, 0xf5, 0xfb },
|
||||||
|
{ 0x44, 0x3c, 0x6f, 0x15, 0x09, 0x83, 0x71, 0x91,
|
||||||
|
0x3e, 0x5c, 0x81, 0x4c, 0xa1, 0xa0, 0x42, 0xec,
|
||||||
|
0x68, 0x2f, 0x7b, 0x13, 0x6d, 0x24, 0x3a, 0x4d,
|
||||||
|
0x6c, 0x42, 0x6f, 0xc6, 0x97, 0x15, 0x63, 0xe8,
|
||||||
|
0xa1, 0x4a, 0x55, 0x8e, 0x09, 0x64, 0x16, 0x19,
|
||||||
|
0xbf, 0x03, 0xfc, 0xaf, 0x90, 0xb1, 0xfc, 0x2d },
|
||||||
|
{ 0xba, 0x8a, 0x25, 0x9a, 0x47, 0x1b, 0x78, 0x7d,
|
||||||
|
0xd5, 0xd5, 0x40, 0xec, 0x25, 0xd4, 0x3d, 0x87,
|
||||||
|
0x20, 0x0f, 0xda, 0xdc, 0x6d, 0x1f, 0x05, 0xd9,
|
||||||
|
0x16, 0x58, 0x4f, 0xa9, 0xf6, 0xcb, 0xf5, 0x12 }
|
||||||
|
};
|
||||||
|
|
||||||
|
static const unsigned char kwp_key[KW_TESTS][32] = {
|
||||||
|
{ 0x78, 0x65, 0xe2, 0x0f, 0x3c, 0x21, 0x65, 0x9a,
|
||||||
|
0xb4, 0x69, 0x0b, 0x62, 0x9c, 0xdf, 0x3c, 0xc4 },
|
||||||
|
{ 0xf5, 0xf8, 0x96, 0xa3, 0xbd, 0x2f, 0x4a, 0x98,
|
||||||
|
0x23, 0xef, 0x16, 0x2b, 0x00, 0xb8, 0x05, 0xd7,
|
||||||
|
0xde, 0x1e, 0xa4, 0x66, 0x26, 0x96, 0xa2, 0x58 },
|
||||||
|
{ 0x95, 0xda, 0x27, 0x00, 0xca, 0x6f, 0xd9, 0xa5,
|
||||||
|
0x25, 0x54, 0xee, 0x2a, 0x8d, 0xf1, 0x38, 0x6f,
|
||||||
|
0x5b, 0x94, 0xa1, 0xa6, 0x0e, 0xd8, 0xa4, 0xae,
|
||||||
|
0xf6, 0x0a, 0x8d, 0x61, 0xab, 0x5f, 0x22, 0x5a }
|
||||||
|
};
|
||||||
|
|
||||||
|
static const unsigned char kwp_msg[KW_TESTS][31] = {
|
||||||
|
{ 0xbd, 0x68, 0x43, 0xd4, 0x20, 0x37, 0x8d, 0xc8,
|
||||||
|
0x96 },
|
||||||
|
{ 0x6c, 0xcd, 0xd5, 0x85, 0x18, 0x40, 0x97, 0xeb,
|
||||||
|
0xd5, 0xc3, 0xaf, 0x3e, 0x47, 0xd0, 0x2c, 0x19,
|
||||||
|
0x14, 0x7b, 0x4d, 0x99, 0x5f, 0x96, 0x43, 0x66,
|
||||||
|
0x91, 0x56, 0x75, 0x8c, 0x13, 0x16, 0x8f },
|
||||||
|
{ 0xd1 }
|
||||||
|
};
|
||||||
|
static const size_t kwp_msg_len[KW_TESTS] = { 9, 31, 1 };
|
||||||
|
|
||||||
|
static const unsigned char kwp_res[KW_TESTS][48] = {
|
||||||
|
{ 0x41, 0xec, 0xa9, 0x56, 0xd4, 0xaa, 0x04, 0x7e,
|
||||||
|
0xb5, 0xcf, 0x4e, 0xfe, 0x65, 0x96, 0x61, 0xe7,
|
||||||
|
0x4d, 0xb6, 0xf8, 0xc5, 0x64, 0xe2, 0x35, 0x00 },
|
||||||
|
{ 0x4e, 0x9b, 0xc2, 0xbc, 0xbc, 0x6c, 0x1e, 0x13,
|
||||||
|
0xd3, 0x35, 0xbc, 0xc0, 0xf7, 0x73, 0x6a, 0x88,
|
||||||
|
0xfa, 0x87, 0x53, 0x66, 0x15, 0xbb, 0x8e, 0x63,
|
||||||
|
0x8b, 0xcc, 0x81, 0x66, 0x84, 0x68, 0x17, 0x90,
|
||||||
|
0x67, 0xcf, 0xa9, 0x8a, 0x9d, 0x0e, 0x33, 0x26 },
|
||||||
|
{ 0x06, 0xba, 0x7a, 0xe6, 0xf3, 0x24, 0x8c, 0xfd,
|
||||||
|
0xcf, 0x26, 0x75, 0x07, 0xfa, 0x00, 0x1b, 0xc4 }
|
||||||
|
};
|
||||||
|
static const size_t kwp_out_len[KW_TESTS] = { 24, 40, 16 };
|
||||||
|
|
||||||
|
int mbedtls_nist_kw_self_test( int verbose )
|
||||||
|
{
|
||||||
|
mbedtls_nist_kw_context ctx;
|
||||||
|
unsigned char out[48];
|
||||||
|
size_t olen;
|
||||||
|
int i;
|
||||||
|
int ret = 0;
|
||||||
|
mbedtls_nist_kw_init( &ctx );
|
||||||
|
|
||||||
|
for( i = 0; i < KW_TESTS; i++ )
|
||||||
|
{
|
||||||
|
if( verbose != 0 )
|
||||||
|
mbedtls_printf( " KW-AES-%u ", (unsigned int) key_len[i] * 8 );
|
||||||
|
|
||||||
|
ret = mbedtls_nist_kw_setkey( &ctx, MBEDTLS_CIPHER_ID_AES,
|
||||||
|
kw_key[i], key_len[i] * 8, 1 );
|
||||||
|
if( ret != 0 )
|
||||||
|
{
|
||||||
|
if( verbose != 0 )
|
||||||
|
mbedtls_printf( " KW: setup failed " );
|
||||||
|
|
||||||
|
goto end;
|
||||||
|
}
|
||||||
|
|
||||||
|
ret = mbedtls_nist_kw_wrap( &ctx, MBEDTLS_KW_MODE_KW, kw_msg[i],
|
||||||
|
kw_msg_len[i], out, &olen, sizeof( out ) );
|
||||||
|
if( ret != 0 || kw_out_len[i] != olen ||
|
||||||
|
memcmp( out, kw_res[i], kw_out_len[i] ) != 0 )
|
||||||
|
{
|
||||||
|
if( verbose != 0 )
|
||||||
|
mbedtls_printf( "failed. ");
|
||||||
|
|
||||||
|
ret = 1;
|
||||||
|
goto end;
|
||||||
|
}
|
||||||
|
|
||||||
|
if( ( ret = mbedtls_nist_kw_setkey( &ctx, MBEDTLS_CIPHER_ID_AES,
|
||||||
|
kw_key[i], key_len[i] * 8, 0 ) )
|
||||||
|
!= 0 )
|
||||||
|
{
|
||||||
|
if( verbose != 0 )
|
||||||
|
mbedtls_printf( " KW: setup failed ");
|
||||||
|
|
||||||
|
goto end;
|
||||||
|
}
|
||||||
|
|
||||||
|
ret = mbedtls_nist_kw_unwrap( &ctx, MBEDTLS_KW_MODE_KW,
|
||||||
|
out, olen, out, &olen, sizeof( out ) );
|
||||||
|
|
||||||
|
if( ret != 0 || olen != kw_msg_len[i] ||
|
||||||
|
memcmp( out, kw_msg[i], kw_msg_len[i] ) != 0 )
|
||||||
|
{
|
||||||
|
if( verbose != 0 )
|
||||||
|
mbedtls_printf( "failed\n" );
|
||||||
|
|
||||||
|
ret = 1;
|
||||||
|
goto end;
|
||||||
|
}
|
||||||
|
|
||||||
|
if( verbose != 0 )
|
||||||
|
mbedtls_printf( " passed\n" );
|
||||||
|
}
|
||||||
|
|
||||||
|
for( i = 0; i < KW_TESTS; i++ )
|
||||||
|
{
|
||||||
|
olen = sizeof( out );
|
||||||
|
if( verbose != 0 )
|
||||||
|
mbedtls_printf( " KWP-AES-%u ", (unsigned int) key_len[i] * 8 );
|
||||||
|
|
||||||
|
ret = mbedtls_nist_kw_setkey( &ctx, MBEDTLS_CIPHER_ID_AES, kwp_key[i],
|
||||||
|
key_len[i] * 8, 1 );
|
||||||
|
if( ret != 0 )
|
||||||
|
{
|
||||||
|
if( verbose != 0 )
|
||||||
|
mbedtls_printf( " KWP: setup failed " );
|
||||||
|
|
||||||
|
goto end;
|
||||||
|
}
|
||||||
|
ret = mbedtls_nist_kw_wrap( &ctx, MBEDTLS_KW_MODE_KWP, kwp_msg[i],
|
||||||
|
kwp_msg_len[i], out, &olen, sizeof( out ) );
|
||||||
|
|
||||||
|
if( ret != 0 || kwp_out_len[i] != olen ||
|
||||||
|
memcmp( out, kwp_res[i], kwp_out_len[i] ) != 0 )
|
||||||
|
{
|
||||||
|
if( verbose != 0 )
|
||||||
|
mbedtls_printf( "failed. ");
|
||||||
|
|
||||||
|
ret = 1;
|
||||||
|
goto end;
|
||||||
|
}
|
||||||
|
|
||||||
|
if( ( ret = mbedtls_nist_kw_setkey( &ctx, MBEDTLS_CIPHER_ID_AES,
|
||||||
|
kwp_key[i], key_len[i] * 8, 0 ) )
|
||||||
|
!= 0 )
|
||||||
|
{
|
||||||
|
if( verbose != 0 )
|
||||||
|
mbedtls_printf( " KWP: setup failed ");
|
||||||
|
|
||||||
|
goto end;
|
||||||
|
}
|
||||||
|
|
||||||
|
ret = mbedtls_nist_kw_unwrap( &ctx, MBEDTLS_KW_MODE_KWP, out,
|
||||||
|
olen, out, &olen, sizeof( out ) );
|
||||||
|
|
||||||
|
if( ret != 0 || olen != kwp_msg_len[i] ||
|
||||||
|
memcmp( out, kwp_msg[i], kwp_msg_len[i] ) != 0 )
|
||||||
|
{
|
||||||
|
if( verbose != 0 )
|
||||||
|
mbedtls_printf( "failed. ");
|
||||||
|
|
||||||
|
ret = 1;
|
||||||
|
goto end;
|
||||||
|
}
|
||||||
|
|
||||||
|
if( verbose != 0 )
|
||||||
|
mbedtls_printf( " passed\n" );
|
||||||
|
}
|
||||||
|
end:
|
||||||
|
mbedtls_nist_kw_free( &ctx );
|
||||||
|
|
||||||
|
if( verbose != 0 )
|
||||||
|
mbedtls_printf( "\n" );
|
||||||
|
|
||||||
|
return( ret );
|
||||||
|
}
|
||||||
|
|
||||||
|
#endif /* MBEDTLS_SELF_TEST && MBEDTLS_AES_C */
|
||||||
|
|
||||||
|
#endif /* MBEDTLS_NIST_KW_C */
|
||||||
|
|
@ -126,6 +126,9 @@ static const char *features[] = {
|
||||||
#if defined(MBEDTLS_GCM_ALT)
|
#if defined(MBEDTLS_GCM_ALT)
|
||||||
"MBEDTLS_GCM_ALT",
|
"MBEDTLS_GCM_ALT",
|
||||||
#endif /* MBEDTLS_GCM_ALT */
|
#endif /* MBEDTLS_GCM_ALT */
|
||||||
|
#if defined(MBEDTLS_NIST_KW_ALT)
|
||||||
|
"MBEDTLS_NIST_KW_ALT",
|
||||||
|
#endif /* MBEDTLS_NIST_KW_ALT */
|
||||||
#if defined(MBEDTLS_MD2_ALT)
|
#if defined(MBEDTLS_MD2_ALT)
|
||||||
"MBEDTLS_MD2_ALT",
|
"MBEDTLS_MD2_ALT",
|
||||||
#endif /* MBEDTLS_MD2_ALT */
|
#endif /* MBEDTLS_MD2_ALT */
|
||||||
|
|
@ -618,6 +621,9 @@ static const char *features[] = {
|
||||||
#if defined(MBEDTLS_HMAC_DRBG_C)
|
#if defined(MBEDTLS_HMAC_DRBG_C)
|
||||||
"MBEDTLS_HMAC_DRBG_C",
|
"MBEDTLS_HMAC_DRBG_C",
|
||||||
#endif /* MBEDTLS_HMAC_DRBG_C */
|
#endif /* MBEDTLS_HMAC_DRBG_C */
|
||||||
|
#if defined(MBEDTLS_NIST_KW_C)
|
||||||
|
"MBEDTLS_NIST_KW_C",
|
||||||
|
#endif /* MBEDTLS_NIST_KW_C */
|
||||||
#if defined(MBEDTLS_MD_C)
|
#if defined(MBEDTLS_MD_C)
|
||||||
"MBEDTLS_MD_C",
|
"MBEDTLS_MD_C",
|
||||||
#endif /* MBEDTLS_MD_C */
|
#endif /* MBEDTLS_MD_C */
|
||||||
|
|
|
||||||
|
|
@ -69,6 +69,7 @@
|
||||||
#include "mbedtls/md_internal.h"
|
#include "mbedtls/md_internal.h"
|
||||||
#include "mbedtls/net.h"
|
#include "mbedtls/net.h"
|
||||||
#include "mbedtls/net_sockets.h"
|
#include "mbedtls/net_sockets.h"
|
||||||
|
#include "mbedtls/nist_kw.h"
|
||||||
#include "mbedtls/oid.h"
|
#include "mbedtls/oid.h"
|
||||||
#include "mbedtls/padlock.h"
|
#include "mbedtls/padlock.h"
|
||||||
#include "mbedtls/pem.h"
|
#include "mbedtls/pem.h"
|
||||||
|
|
|
||||||
|
|
@ -57,6 +57,7 @@
|
||||||
#include "mbedtls/ecp.h"
|
#include "mbedtls/ecp.h"
|
||||||
#include "mbedtls/ecjpake.h"
|
#include "mbedtls/ecjpake.h"
|
||||||
#include "mbedtls/timing.h"
|
#include "mbedtls/timing.h"
|
||||||
|
#include "mbedtls/nist_kw.h"
|
||||||
|
|
||||||
#include <string.h>
|
#include <string.h>
|
||||||
|
|
||||||
|
|
@ -208,6 +209,9 @@ const selftest_t selftests[] =
|
||||||
#if defined(MBEDTLS_CCM_C) && defined(MBEDTLS_AES_C)
|
#if defined(MBEDTLS_CCM_C) && defined(MBEDTLS_AES_C)
|
||||||
{"ccm", mbedtls_ccm_self_test},
|
{"ccm", mbedtls_ccm_self_test},
|
||||||
#endif
|
#endif
|
||||||
|
#if defined(MBEDTLS_NIST_KW_C) && defined(MBEDTLS_AES_C)
|
||||||
|
{"nist_kw", mbedtls_nist_kw_self_test},
|
||||||
|
#endif
|
||||||
#if defined(MBEDTLS_CMAC_C)
|
#if defined(MBEDTLS_CMAC_C)
|
||||||
{"cmac", mbedtls_cmac_self_test},
|
{"cmac", mbedtls_cmac_self_test},
|
||||||
#endif
|
#endif
|
||||||
|
|
|
||||||
|
|
@ -96,6 +96,7 @@ add_test_suite(md)
|
||||||
add_test_suite(mdx)
|
add_test_suite(mdx)
|
||||||
add_test_suite(memory_buffer_alloc)
|
add_test_suite(memory_buffer_alloc)
|
||||||
add_test_suite(mpi)
|
add_test_suite(mpi)
|
||||||
|
add_test_suite(nist_kw)
|
||||||
add_test_suite(pem)
|
add_test_suite(pem)
|
||||||
add_test_suite(pkcs1_v15)
|
add_test_suite(pkcs1_v15)
|
||||||
add_test_suite(pkcs1_v21)
|
add_test_suite(pkcs1_v21)
|
||||||
|
|
|
||||||
|
|
@ -83,6 +83,7 @@ APPS = test_suite_aes.ecb$(EXEXT) test_suite_aes.cbc$(EXEXT) \
|
||||||
test_suite_md$(EXEXT) test_suite_mdx$(EXEXT) \
|
test_suite_md$(EXEXT) test_suite_mdx$(EXEXT) \
|
||||||
test_suite_memory_buffer_alloc$(EXEXT) \
|
test_suite_memory_buffer_alloc$(EXEXT) \
|
||||||
test_suite_mpi$(EXEXT) \
|
test_suite_mpi$(EXEXT) \
|
||||||
|
test_suite_nist_kw$(EXEXT) \
|
||||||
test_suite_pem$(EXEXT) test_suite_pkcs1_v15$(EXEXT) \
|
test_suite_pem$(EXEXT) test_suite_pkcs1_v15$(EXEXT) \
|
||||||
test_suite_pkcs1_v21$(EXEXT) test_suite_pkcs5$(EXEXT) \
|
test_suite_pkcs1_v21$(EXEXT) test_suite_pkcs5$(EXEXT) \
|
||||||
test_suite_pkparse$(EXEXT) test_suite_pkwrite$(EXEXT) \
|
test_suite_pkparse$(EXEXT) test_suite_pkwrite$(EXEXT) \
|
||||||
|
|
@ -428,6 +429,10 @@ test_suite_mpi$(EXEXT): test_suite_mpi.c $(DEP)
|
||||||
echo " CC $<"
|
echo " CC $<"
|
||||||
$(CC) $(LOCAL_CFLAGS) $(CFLAGS) $< $(LOCAL_LDFLAGS) $(LDFLAGS) -o $@
|
$(CC) $(LOCAL_CFLAGS) $(CFLAGS) $< $(LOCAL_LDFLAGS) $(LDFLAGS) -o $@
|
||||||
|
|
||||||
|
test_suite_nist_kw$(EXEXT): test_suite_nist_kw.c $(DEP)
|
||||||
|
echo " CC $<"
|
||||||
|
$(CC) $(LOCAL_CFLAGS) $(CFLAGS) $< $(LOCAL_LDFLAGS) $(LDFLAGS) -o $@
|
||||||
|
|
||||||
test_suite_pem$(EXEXT): test_suite_pem.c $(DEP)
|
test_suite_pem$(EXEXT): test_suite_pem.c $(DEP)
|
||||||
echo " CC $<"
|
echo " CC $<"
|
||||||
$(CC) $(LOCAL_CFLAGS) $(CFLAGS) $< $(LOCAL_LDFLAGS) $(LDFLAGS) -o $@
|
$(CC) $(LOCAL_CFLAGS) $(CFLAGS) $< $(LOCAL_LDFLAGS) $(LDFLAGS) -o $@
|
||||||
|
|
|
||||||
462
tests/suites/test_suite_nist_kw.data
Normal file
462
tests/suites/test_suite_nist_kw.data
Normal file
|
|
@ -0,0 +1,462 @@
|
||||||
|
NIST KW self test
|
||||||
|
mbedtls_nist_kw_self_test:
|
||||||
|
|
||||||
|
NIST KW mix contexts and modes
|
||||||
|
mbedtls_nist_kw_mix_contexts:
|
||||||
|
|
||||||
|
NIST KW init #1 wrapping AES-128: OK
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_setkey:MBEDTLS_CIPHER_ID_AES:128:1:0
|
||||||
|
|
||||||
|
NIST KW init #2 unwrapping AES-128: OK
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_setkey:MBEDTLS_CIPHER_ID_AES:128:1:0
|
||||||
|
|
||||||
|
NIST KW init #3 CAMELLIA-256: unsupported cipher
|
||||||
|
depends_on:MBEDTLS_CAMELLIA_C
|
||||||
|
mbedtls_nist_kw_setkey:MBEDTLS_CIPHER_ID_CAMELLIA:256:0:MBEDTLS_ERR_CIPHER_FEATURE_UNAVAILABLE
|
||||||
|
|
||||||
|
NIST KW init #4 AES-224: bad key size
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_setkey:MBEDTLS_CIPHER_ID_AES:224:1:MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA
|
||||||
|
|
||||||
|
NIST KW init #5 BLOWFISH-128: bad cipher
|
||||||
|
depends_on:MBEDTLS_BLOWFISH_C
|
||||||
|
mbedtls_nist_kw_setkey:MBEDTLS_CIPHER_ID_BLOWFISH:128:0:MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA
|
||||||
|
|
||||||
|
NIST KW lengths #1 KW plaintext OK (2 to 2^54 - 1 semiblocks)
|
||||||
|
nist_kw_plaintext_lengths:16:24:MBEDTLS_KW_MODE_KW:0
|
||||||
|
|
||||||
|
NIST KW lengths #2 KWP plaintext OK (1 to 2^32 - 1 octets)
|
||||||
|
nist_kw_plaintext_lengths:5:16:MBEDTLS_KW_MODE_KWP:0
|
||||||
|
|
||||||
|
NIST KW lengths #3 KW ciphertext OK (3 to 2^54 semiblocks)
|
||||||
|
nist_kw_ciphertext_lengths:32:24:MBEDTLS_KW_MODE_KW:0
|
||||||
|
|
||||||
|
NIST KW lengths #4 KWP ciphertext OK (2 to 2^29 semiblocks)
|
||||||
|
nist_kw_ciphertext_lengths:24:16:MBEDTLS_KW_MODE_KWP:0
|
||||||
|
|
||||||
|
NIST KW lengths #5 KW plaintext too short (2 to 2^54 - 1 semiblocks)
|
||||||
|
nist_kw_plaintext_lengths:5:13:MBEDTLS_KW_MODE_KW:MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA
|
||||||
|
|
||||||
|
NIST KW lengths #6 KWP plaintext too short (1 to 2^32 - 1 octets)
|
||||||
|
nist_kw_plaintext_lengths:0:8:MBEDTLS_KW_MODE_KWP:MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA
|
||||||
|
|
||||||
|
NIST KW lengths #8 KW ciphertext too short (3 to 2^54 semiblocks)
|
||||||
|
nist_kw_ciphertext_lengths:16:8:MBEDTLS_KW_MODE_KW:MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA
|
||||||
|
|
||||||
|
NIST KW lengths #9 KWP ciphertext too short (2 to 2^29 semiblocks)
|
||||||
|
nist_kw_ciphertext_lengths:8:8:MBEDTLS_KW_MODE_KWP:MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA
|
||||||
|
|
||||||
|
NIST KW lengths #10 KW plaintext not a multiple of semiblocks.
|
||||||
|
nist_kw_plaintext_lengths:21:29:MBEDTLS_KW_MODE_KW:MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA
|
||||||
|
|
||||||
|
NIST KW lengths #11 KW ciphertext not a multiple of semiblocks.
|
||||||
|
nist_kw_ciphertext_lengths:34:26:MBEDTLS_KW_MODE_KW:MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA
|
||||||
|
|
||||||
|
NIST KW lengths #12 KWP ciphertext not a multiple of semiblocks.
|
||||||
|
nist_kw_ciphertext_lengths:30:22:MBEDTLS_KW_MODE_KWP:MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA
|
||||||
|
|
||||||
|
NIST KW lengths #13 KW wrapping output buffer too short
|
||||||
|
nist_kw_plaintext_lengths:16:16:MBEDTLS_KW_MODE_KW:MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA
|
||||||
|
|
||||||
|
NIST KW lengths #14 KWP wrapping output buffer too short
|
||||||
|
nist_kw_plaintext_lengths:5:10:MBEDTLS_KW_MODE_KWP:MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA
|
||||||
|
|
||||||
|
NIST KW lengths #15 KW unwrapping output buffer too short
|
||||||
|
nist_kw_ciphertext_lengths:32:16:MBEDTLS_KW_MODE_KW:MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA
|
||||||
|
|
||||||
|
NIST KW lengths #16 KWP unwrapping output buffer too short
|
||||||
|
nist_kw_ciphertext_lengths:24:12:MBEDTLS_KW_MODE_KWP:MBEDTLS_ERR_CIPHER_BAD_INPUT_DATA
|
||||||
|
|
||||||
|
NIST KW wrap AES-128 CAVS 17.4 PLAINTEXT LENGTH = 128 count 7
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"095e293f31e317ba6861114b95c90792":"64349d506ae85ecd84459c7a5c423f55":"97de4425572274bd7fb2d6688d5afd4454d992348d42a643"
|
||||||
|
|
||||||
|
NIST KW wrap AES-128 CAVS 17.4 PLAINTEXT LENGTH = 256 count 11
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"ca8f6c56a9c9300549e9eae75a4604b8":"1542b8662136245162c64d45af1a982302f69f1d01a1a6bc29ef8facafbeaea0":"4d340c10bbbddf5b2014ded264bffce49901bd22adaee074b0f25a2d19c134eb3c7f38c5d0444766"
|
||||||
|
|
||||||
|
NIST KW wrap AES-128 CAVS 17.4 PLAINTEXT LENGTH = 192 count 8
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"b4902b13ea73f17829b4e334fb359ec4":"2073399c7794c8b73dd782dc250dab31c80a8cba33477ab2":"37eda4eec3096135f5193c37bdeaf498b71e3a205c5638682fe746f236566b11"
|
||||||
|
|
||||||
|
NIST KW wrap AES-128 CAVS 17.4 PLAINTEXT LENGTH = 320 count 14
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"579448a3d638f093742ae6b24d729849":"464d3162469899955d8bc8bfc0a22555bce609b2415bedf17a942abfe96ad4e124d4a832fbcff49f":"dadd1440a06946eabddf18e784b7719d36caa33cb626aa03aca057585584ea07a8714ecb90ceb232d6b0760845105fbb"
|
||||||
|
|
||||||
|
NIST KW wrap AES-128 CAVS 17.4 PLAINTEXT LENGTH = 4096 count 0
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"98311985c4661d7e811ee56070e6fecf":"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":"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"
|
||||||
|
|
||||||
|
NIST KW wrap AES-192 CAVS 17.4 PLAINTEXT LENGTH = 128 count 7
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"13df8fa68a6e096b9b5bbaebb64ace2e6a05485b5cb7e43f":"3ee9367f631fb375ba47241966ad4ab8":"d0309b1291a06c595fcaa6dcf97817dbd7b7ad2cf48ddec2"
|
||||||
|
|
||||||
|
NIST KW wrap AES-192 CAVS 17.4 PLAINTEXT LENGTH = 256 count 11
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"17c25023ac76a8af777a6f71c0c0f97931554b0a15a79222":"15227ef52412346e83a18c54a75374f69a24de6a07cfba9082596eeb5d758bb0":"0f8e2fe4f3a28c1fcebf20fef2bfd3489deb284e03d057337496285f4ffe62f074bafa0a0a6e44e4"
|
||||||
|
|
||||||
|
NIST KW wrap AES-192 CAVS 17.4 PLAINTEXT LENGTH = 192 count 8
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"49d1c4ec51f2695ad7e47554efd24170ab03f628eba7d5fb":"8bf961097a6fa75694cf0ea47cfda23928fc433d5fc762e6":"dc72c58faca0dd662e5fefd05cd714987cc2470219db77baf779fca865f31529"
|
||||||
|
|
||||||
|
NIST KW wrap AES-192 CAVS 17.4 PLAINTEXT LENGTH = 320 count 14
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"e06ebf0145b178ea45687abe366fdec559877dbc9300a653":"f0104e9546628d801c4f7e875f1ca4f385e915b0c7bd52ed158b6b42d7301f1df6dd5bfc80d0318a":"5b4b1d4ef349fcf5eb7d720d84b2e79fbabf3db18277ada0752b9883c21f0e24281854420e6751af8fbcc4b98be0c1d7"
|
||||||
|
|
||||||
|
NIST KW wrap AES-192 CAVS 17.4 PLAINTEXT LENGTH = 4096 count 0
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"932ed6ee1db1c4cf7fd81efce5609641cb5f3409563089dc":"da8dd9c1dc8cbf95b0fa280747c1007ecb086b7c944b0db4dfa3bdf6ed0c9725901cb838c2e30131250188c22bd92b068aa0871ce58a0c22307671612fc4884a655329851d54afd48a9d3a7f97976850d6fd842034548aee67df1272b06f155eb21966858731c3c35d4bb94a1ea351ef5a8c4779c077d648ec1c4f27cfaa48f47541a8f36831e35a961b076307bea928e1856e448d7695a0f7fbcd8c82800d12f530c2086f3b67bc5081d384010b47d327120def5c92f815aaae31d32893cdd18a71ba4e208445ff3a2f68a0a46689458b0f2d6d9cd3726284e56b4c020b97a82d4463f74098cfd7bd7a5f12157a0bc812266b8f2c215933cb67518f900602f0825538e05765318b6d31150007e410b92d5d957e119c5d94aadba193cf6da230387b1c5e6448515f9789a8867571ea82ad34dc5b912d6cd243bd4fc2f19d132bd8f1f5cef00a141e30ec4d3f7a546a215d5b0c7e70c3b0ec4fc34b66c4170bf403ef910dd3897caef33405827a55f943904c4e1b1aee4cc3ffd0ad27e316c164e2b5bbcf73df60d8859201b6602be01ba638aff468f3136120c117ca848ae161ecafade668e2d04b227437d4b91c6fc40ebd9490f211bcd21fd7005d200ef584f37aa2c4c769174551cec0d7f2936ae78f6c389382212703d0e7c82aef1a736056ed9c45e71439731537a2edb8a63741825c678a11c42e5b2281b43e203b0523":"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"
|
||||||
|
|
||||||
|
NIST KW wrap AES-256 CAVS 17.4 PLAINTEXT LENGTH = 128 count 7
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"e823c6ef53b110eeb3f178871cf436887cca9df061d1f26409ec3b410033d967":"f90c279e9e6423804a6505e8effd924c":"0abb50b222af66058646156d106df7c85c28b708395eb9dd"
|
||||||
|
|
||||||
|
NIST KW wrap AES-256 CAVS 17.4 PLAINTEXT LENGTH = 256 count 11
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"e5cca71056548467bc9c2849aba67cfe0fd74c44d514535d2314022a3f3e6ec8":"326b6da4dce95c94226b63c2d38c4e005c566191b00028b59cc788e0af5261cc":"2a4f331f451589fd103d9a9cbbeae5d5f5be7acf15aa6e21c45e09362263cf34b0ccab7c8a28dfed"
|
||||||
|
|
||||||
|
NIST KW wrap AES-256 CAVS 17.4 PLAINTEXT LENGTH = 192 count 8
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"6a077f95496aba1bb80831280e7563f3a187e6d014342028349f766b791108ce":"a77b3ddac0e78c9176b7445f9ec349b2d85aa2f57e6cb362":"7c065be0a2173e0f14a3418779e7f3eb6eb7fbb7a3c20fd6c08b37d408bd9423"
|
||||||
|
|
||||||
|
NIST KW wrap AES-256 CAVS 17.4 PLAINTEXT LENGTH = 320 count 14
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"752b21422647f1006de116360e88e2f6601eeb5aafd27cba56c20193fc1b941a":"a5948c20bc611187d688cb03caa04fb17774aa4f99ae3da5d821bcccfae950d72ca74b3a870008aa":"d71109224edc4233db8819aaca4db9c61ab5aad2806d0e985f1830acd8adde23ce75046b2057e0a23dec7a053bac6c4c"
|
||||||
|
|
||||||
|
NIST KW wrap AES-256 CAVS 17.4 PLAINTEXT LENGTH = 4096 count 0
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"931bf2c55eac657ae56fc0a9505a6ea7cc9af5162d844ccf01f19debfad09cbe":"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":"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"
|
||||||
|
|
||||||
|
NIST KWP wrap AES-128 CAVS 21.4 PLAINTEXT LENGTH = 8 count 3
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"d060e5faa705b6c600ecfcd5252bbfba":"3d":"28ccc6da03cd79b78c7207946fcee402"
|
||||||
|
|
||||||
|
NIST KWP wrap AES-128 CAVS 21.4 PLAINTEXT LENGTH = 64 count 5
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"663ee3d40628059fe01a9766d5c1c31f":"1c6ccd67438f20de":"c2717ed6e51bb4314388cd26464f4d18"
|
||||||
|
|
||||||
|
NIST KWP wrap AES-128 CAVS 21.4 PLAINTEXT LENGTH = 72 count 0
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"7865e20f3c21659ab4690b629cdf3cc4":"bd6843d420378dc896":"41eca956d4aa047eb5cf4efe659661e74db6f8c564e23500"
|
||||||
|
|
||||||
|
NIST KWP wrap AES-128 CAVS 21.4 PLAINTEXT LENGTH = 248 count 2
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"02a92285d0baa874ac94f6648988d44f":"6ac78aff505805e3145fac44eaeb6ac92945ca12d9bc0b6fee8b1e5b983f37":"18b251cf54d2a51ac903af2fd008f6aa2b1bf491fa2e0458dba272866821e98ad037eae4af654811"
|
||||||
|
|
||||||
|
NIST KWP wrap AES-128 CAVS 21.4 PLAINTEXT LENGTH = 4096 count 1
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"6b8ba9cc9b31068ba175abfcc60c1338":"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":"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"
|
||||||
|
|
||||||
|
NIST KWP wrap AES-192 CAVS 21.4 PLAINTEXT LENGTH = 8 count 3
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"959b4595778d7b860e08fcb5e24b11f118fd5d67089f2ea4":"65":"1cf986a0fb2208977c37a4c3830eba72"
|
||||||
|
|
||||||
|
NIST KWP wrap AES-192 CAVS 21.4 PLAINTEXT LENGTH = 64 count 5
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"02dfb6662e0c1b95d34aaba7eb6c1fdd41c52b89213d5b18":"27361c34c2601fe6":"089f835f3210734aa1a2282c6ff30ef9"
|
||||||
|
|
||||||
|
NIST KWP wrap AES-192 CAVS 21.4 PLAINTEXT LENGTH = 72 count 0
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"9464f1af6aabad076661328bcfd15777da16a288a2660009":"431527c3a644c106bb":"d9b257b400d808a0b0386af3be9154fc7f2fb2d7edc06201"
|
||||||
|
|
||||||
|
NIST KWP wrap AES-192 CAVS 21.4 PLAINTEXT LENGTH = 248 count 2
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"df419ca84650ef28a1c5d1cb47917e4480a3aca4bd29dd5e":"3d84df372bc0b854c058441e952738ec79474b673c94e32dc78d23745fb5e7":"497e966414475938204c3b3d606d5160461c54dfdfe903b6624208d7cfc90bb403f384bfd54d1ed2"
|
||||||
|
|
||||||
|
NIST KWP wrap AES-192 CAVS 21.4 PLAINTEXT LENGTH = 4096 count 1
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"a85b4359ebd240012ec749459bc928eaa52c84e887ababb9":"9db71e2a2d40f6fcc1b8311167ae13fb101bdf7b5c4e078373c0c3cb3f3a3ca39a91a6985d3fdd48d93f2b5a09b2a69350da2846ce6a37d018dda95ddac93a92fda7b7c3bb6518dd78f367f70e34e0bf19dbba46fd13d3f3e0a1776350f27138c64b177aa39c54dc06184b320016b6305c2dea19fa6da634cd613d5a4f71bc045f555a1ccee39b8f1ab90840b5bae555932e08719bf38f72bc1057875e8c077a70629f46be91281b977ed6f2a71171a7cbaf8e0566e55da6220a85a7655758de3b372144ef76d0337d3133004c0db096b2c41f524f95706247a331d08a6ff72b425395fee8e1ad308ccfe5b0525c40803e529db72063731fe1644891bdc0d5961397006e1f5d6521ad4e5aee3544da101fd3cf6bcf879220a612b7016e5eefe7369f136086e8f5109ae83e8687519f2008406d20992b64ba1d27b436ea5db1fd734340f3b2279e026a96e3f9c5c7b99553e35ada9e1d7d708a73774718f9b7073c0889a298f212d47ff5960e04743070338f99b11687396da2120b8f132535c0911b04505c0e6c32590c82bf59486fadfbdc0f16a224b2f52082eb66201f041d64b34809e5e91cda89d80d78fe1e15862bcf84f65a301ae68d097c9be09f3411c11cf83225733dbc9306ad2630eb7994a0d112ba83dc542966414137fd008fbb7995f649edf844fe5ee86b94acade1a04f42dae21928b9b0cdde8cc66095772d":"72880f9f173f0ef4d99e3ae71f6f3b94f66a08aaa22be1d206faf431718c1a29bd0a574b1a28b69f0e64d56d3e43617dc73506a939b7de9005ef0ee3f02b9265e91a32aaec58b7ab990f39774f6769c9be9ced3339f6bf0159055abe237c4c755613a6c03271abea3bc89527f284a3e1557ae26b3910b779a77a128e773d11d7d641479d02f4888c989cbb8d928da0136b965531730a3c0c32404351f4c2390d996dff58985ed1d4f4021a5d6ccedf4555066a826a04055cdf8c9c44bdae26619390b3e22b064f86b28382094a3e299d55ab335ade601699e85f19d6f6f12407caf84ad47f03d75198691f1a9b2aa9ed95e508d8551b19601418922f3289fc1efc3abb1ebc2f4886dfe325cddfe25dd908e5aef8ad197ce2703e692b9c46a12201fa71ebc2e323ff8926ecc059ffeeacc0446d3f28496f17f1b4ad6504e4e24188862e25f3dfc36adc7f79920d88e6c53269cc4e5dbbebbba1a2347154683c840d178476ae11d6ce574c26b8b895957b8623807e8831b87b5639aeb415adf1bbef394046deb3bbe91a5c17f2f67131ae5f696352a488e3bed40df025e0a0846e0037847350fe8ae3cf73141d0ec550d82b89c05bbff7337bfe846411d3f0bd012e4de2fe5b83c7210214c0404b40e08abdd3f4bc441f9b6e1efdaa4ac13b85d139f670a6060a1ba8d2528bcd19f241d9ee5077d20c120f2b484c67c9c598b1b209824c3b8aec2b7b"
|
||||||
|
|
||||||
|
NIST KWP wrap AES-256 CAVS 21.4 PLAINTEXT LENGTH = 8 count 3
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"0070492ff3aaa190496c72bb0affdb6fac7fa9cb32e6e91a46ea34863422f807":"39":"643a9706af6bd06410b70ee38f546bc2"
|
||||||
|
|
||||||
|
NIST KWP wrap AES-256 CAVS 21.4 PLAINTEXT LENGTH = 64 count 5
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"c6e882f5b8e361e43bb3e54d5a7b8c690f485bcbec2dd2183c7e623f6b02c5fc":"99ae80eec64630ed":"de0680b34f7374539ad9b75f08f4d8e6"
|
||||||
|
|
||||||
|
NIST KWP wrap AES-256 CAVS 21.4 PLAINTEXT LENGTH = 72 count 0
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"70da43aac823c6dd37d1109f5b18feb4503c973288989745e2cc1cc21d9570c6":"edf17d966ed896aee3":"d67b5b2ad15c645450e23b5e7b6d682f8ae20e716d470db7"
|
||||||
|
|
||||||
|
NIST KWP wrap AES-256 CAVS 21.4 PLAINTEXT LENGTH = 248 count 2
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"e941febe4b683c02dce56194a86b72d4c569e1fc84bc7a6f24c3ae2b39bf5440":"c168cf12acb6679c24d424baa62ed56559caee163a4efa946478ad43d7dbd6":"4ad9979caa72fddff0876c0295a57fcf74e5980fec2cf622191ec6b5aebb75e0adebb12d0862ffae"
|
||||||
|
|
||||||
|
NIST KWP wrap AES-256 CAVS 21.4 PLAINTEXT LENGTH = 4096 count 1
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"20f31cded60b8ed8d9d3fd1e1fa6244e76c7cb7628bfd28a5d63ce8aa2c9494d":"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":"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"
|
||||||
|
|
||||||
|
NIST KW unwrap AES-128 CAVS 17.4 PLAINTEXT LENGTH = 128 count 3
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"e63c2cb1a2c1282d473b66753494a591":"084532f86949dfb7be2cdf09d2b7505418e7bca5185661e1":"a26e8ee007ab90f599a1bc31cdabd5fe":0
|
||||||
|
|
||||||
|
NIST KW unwrap AES-128 CAVS 17.4 PLAINTEXT LENGTH = 256 count 0
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"83da6e02404d5abfd47d15da591840e2":"3f4cbf3a98029243da87a756b3c52553f91366f4ff4b103b2c73e68aa8ca81f01ebda35d718741ac":"67dfd627346ebd217849a5ba5bca6e9ce07a7747bed1ba119ec01503202a075a":0
|
||||||
|
|
||||||
|
NIST KW unwrap AES-128 CAVS 17.4 PLAINTEXT LENGTH = 192 count 7
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"e5c2fc20f9263da4f15b817874dd987d":"0538fdca42f1fd72afadbe689fa8a396996d734e4f082c8c4ef41ef11dc6246e":"35a261169f240dffe4701ce41f6dff986764afa6e84f63c9":0
|
||||||
|
|
||||||
|
NIST KW unwrap AES-128 CAVS 17.4 PLAINTEXT LENGTH = 320 count 8
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"3f5501341f617cae30dd0afbfa247c09":"72fcc9e5942344d11c3b23503b170e39cd635da3a83aa9ffb196cfb1d6eeae6dc5f5683238da6e9b49edbf95819bbbdf":"e2a34da9ea2ad66e130251f8a7798b87d7bd7601abc5ae8f7305b024ddb4b3e00351484165e16d25":0
|
||||||
|
|
||||||
|
NIST KW unwrap AES-128 CAVS 17.4 PLAINTEXT LENGTH = 4096 count 0
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"adf44a10a05e64f2df87db52f3ae18d3":"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":"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":0
|
||||||
|
|
||||||
|
NIST KW unwrap AES-128 CAVS 17.4 PLAINTEXT LENGTH = 128 count 1
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"5d4899ee66beff1bda1fc717a1ad4c50":"bb7fd0bce778bd775e4e88d904d26a7134364c53a6c493a0":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KW unwrap AES-128 CAVS 17.4 PLAINTEXT LENGTH = 256 count 1
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"84bc6ce7ee4fd9db512536669d0686da":"c383db930ffd02c0073ac2cc79ec289e6866bdcc6a135a3b776aa42f14ee04f9cca06ed6c0b22901":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KW unwrap AES-128 CAVS 17.4 PLAINTEXT LENGTH = 192 count 3
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"266b009e911bb55f9aa0661539a6fdd5":"db9c94e7236ec56982d7ddeb9427c24580bc1fb96db98ab19340e03670045b7a":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KW unwrap AES-128 CAVS 17.4 PLAINTEXT LENGTH = 320 count 1
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"51c2e3d090a74bfa10db090b63ae53aa":"598a16c226e6c848a78ca30fa514edc9467f704b529c02c5522d1890b4dc21588ed6c3b070ed952adc733d865eb9d468":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KW unwrap AES-128 CAVS 17.4 PLAINTEXT LENGTH = 4096 count 4
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"6a7814a80acae9d03eda69cad200ffe5":"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":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KW unwrap AES-192 CAVS 17.4 PLAINTEXT LENGTH = 128 count 0
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"26045402548ee6196fc0a60208ffde21137ddb1c6c5d2ba0":"fcd55c2c60ff6de19ec3e6b13490c2821f0c565abf10be2d":"94b8276743184d086962ce6c4e63bd53":0
|
||||||
|
|
||||||
|
NIST KW unwrap AES-192 CAVS 17.4 PLAINTEXT LENGTH = 256 count 0
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"b3a0aa60fb14b658e1eb1c1a5a8e1f60307c9b9faa2f1587":"fdeda2a10e51da1817af2ba4c9f200414aec67545f5e71c608e85d14da8c5567bf51dec4ff2d8c05":"65986b3a6a3658a66cb5beb302540bb032b36c76d040b24fe278a1473ad4c32f":0
|
||||||
|
|
||||||
|
NIST KW unwrap AES-192 CAVS 17.4 PLAINTEXT LENGTH = 192 count 6
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"f0ee8ab6f804a2629e163b58c1a9e9039b53ac60493df11d":"3593dda0daead2dcf850f8670b7d0692332f57068213a772a8244d058e5634d7":"401df0c06aa4c58a71b9438e11a11a239f577b6037adf350":0
|
||||||
|
|
||||||
|
NIST KW unwrap AES-192 CAVS 17.4 PLAINTEXT LENGTH = 320 count 8
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"579e58b2bf9c34c31e8c644faef6b698131624063fb2d795":"b39acd09d9bf9daaa89304f76402065cc3d863e12df8a966f037146db9619e7be5ccbf50206773c5eca35e36492ef4b7":"9c1f66267c2083a42f3da4e754a073c1ff151681e2bc070e6e4682065fd109088a096e72024fdcb0":0
|
||||||
|
|
||||||
|
NIST KW unwrap AES-192 CAVS 17.4 PLAINTEXT LENGTH = 4096 count 0
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"366af2c7a1d7a1ee5a7c239fd526024472f674ab039bba25":"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":"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":0
|
||||||
|
|
||||||
|
NIST KW unwrap AES-192 CAVS 17.4 PLAINTEXT LENGTH = 128 count 3
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"9200a0f688d86c0b6bfd9abeff66341684a373fe3f9a3057":"5c685c8596e374710fe327bafc45cd09190215fdcc03d010":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KW unwrap AES-192 CAVS 17.4 PLAINTEXT LENGTH = 256 count 1
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"95c9e644559919cace6f93f545dbfe48b130808ed66d0964":"7b8d1307e992221f6ffdcc7909d972d5f02e92187139cfd77f79345cb998bbdbabedb3ac00a6cdc4":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KW unwrap AES-192 CAVS 17.4 PLAINTEXT LENGTH = 192 count 7
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"ffdbcbd0abc94c7f15e5b6e8a7190f1ed4f01be11f4f7ccb":"e9ad95c8e9185a001509c50ae0098d45f7032575c7b8fd90a561716d2e5804fb":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KW unwrap AES-192 CAVS 17.4 PLAINTEXT LENGTH = 320 count 9
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"253a5cbe79a291c0af1a3d7460e7f284bd672cd026753fc4":"f71014ba711602df5cff2b93e86253775ea308bf83fde65fbc9a9a7852f87357330450072aaa3d6ef8dffbee20d2de7c":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KW unwrap AES-192 CAVS 17.4 PLAINTEXT LENGTH = 4096 count 1
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"ff8666e4e538a6cf0a2a002b63716b06ec5f187785c2fc1b":"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":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KW unwrap AES-256 CAVS 17.4 PLAINTEXT LENGTH = 128 count 3
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"e594f0067cedb74e883e7746d29ba725c884c25375323f367cf49d17ad0f567b":"3b51ae2b0e3ddeed94efd7bfdc22630187e1f7624d15ed78":"587e3f6c75644bb5c3db9c74714f5556":0
|
||||||
|
|
||||||
|
NIST KW unwrap AES-256 CAVS 17.4 PLAINTEXT LENGTH = 256 count 0
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"049c7bcba03e04395c2a22e6a9215cdae0f762b077b1244b443147f5695799fa":"776b1e91e935d1f80a537902186d6b00dfc6afc12000f1bde913df5d67407061db8227fcd08953d4":"e617831c7db8038fda4c59403775c3d435136a566f3509c273e1da1ef9f50aea":0
|
||||||
|
|
||||||
|
NIST KW unwrap AES-256 CAVS 17.4 PLAINTEXT LENGTH = 192 count 7
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"e86b9c1f74cc87ab8ca6a2fa1723fef173077e684345b90dacd3d485f587d320":"c97e8c25d498430300982cdcef592e34176e33e45cd59b19f7605f52e3c7b997":"261313cbea4b246e53affe1f84bd4c900c9b1d1842d79337":0
|
||||||
|
|
||||||
|
NIST KW unwrap AES-256 CAVS 17.4 PLAINTEXT LENGTH = 320 count 8
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"5b7f48b8ce77007481667e9900f3077a0c9407a70082b0de29bbfbd716a07149":"3ed16c7e4fed98d76092936e94fa5696c787ab63cb764e930fd37f917be4e7e60c90f327f0865d279e6c449b96301ed7":"4e0e6c45137efbf858ce896c815268a10d9869ef5668a90739b7eff99617691fe63b911afa53feca":0
|
||||||
|
|
||||||
|
NIST KW unwrap AES-256 CAVS 17.4 PLAINTEXT LENGTH = 4096 count 0
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"9e92fc974e09541e6cdf1415575511436ac04a56db186bc0e60f0fac9bd58c6a":"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":"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":0
|
||||||
|
|
||||||
|
NIST KW unwrap AES-256 CAVS 17.4 PLAINTEXT LENGTH = 128 count 4
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"08c936b25b567a0aa679c29f201bf8b190327df0c2563e39cee061f149f4d91b":"e227eb8ae9d239ccd8928adec39c28810ca9b3dc1f366444":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KW unwrap AES-256 CAVS 17.4 PLAINTEXT LENGTH = 256 count 3
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"605b22935f1eee56ba884bc7a869febc159ac306b66fb9767a7cc6ab7068dffa":"6607f5a64c8f9fd96dc6f9f735b06a193762cdbacfc367e410926c1bfe6dd715490adbad5b9697a6":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KW unwrap AES-256 CAVS 17.4 PLAINTEXT LENGTH = 192 count 3
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"81c93da5baa5157bf700fd38d7d67662670778b690cfbca9fe11e06268b35605":"875e1ca385586f83d1e23e44ca201006df04e1854e41b933fd607a7383ae1a39":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KW unwrap AES-256 CAVS 17.4 PLAINTEXT LENGTH = 320 count 4
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"c42c53da9bd5393e63818ecc1336ec6dfcf1d633e51ebb51c68fb0997c979e7a":"52f7b481f72bc2d41edade5388d38c2ff75765939576e49bab400040a14ff488848bef57d1502c06a3faad471f5c3178":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KW unwrap AES-256 CAVS 17.4 PLAINTEXT LENGTH = 4096 count 1
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"7b51259246dd7252f6a7215fb11fbeabfabafb0f8856afae525af8feb81d3490":"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":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-128 CAVS 21.4 PLAINTEXT LENGTH = 8 count 2
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"20501013aa1578ab32704a4287029098":"382179a39d75756f57763486d038b50f":"14":0
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-128 CAVS 21.4 PLAINTEXT LENGTH = 64 count 5
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"a099fff482dbaeb53aad84f81b916da0":"b831c7137facaed059cbf268767e230f":"0d24299443bcc444":0
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-128 CAVS 21.4 PLAINTEXT LENGTH = 72 count 0
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"4d49e260348172c38a79eb925b189b12":"54755a93ff5173aec60d1eaa8fd7d4090f00f638c2831aa9":"2bbe64479da7c45976":0
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-128 CAVS 21.4 PLAINTEXT LENGTH = 248 count 3
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"6a5a5ac4ccedf055d7562ac58ee7819c":"46904a5583e8a22f4b2f5aa8d071f5cbfc938130f1b33f2e6401aee7cccdef2159a89c9b682cfaf4":"33ac6837955300e569b29958985cdbd434c18208779a949d20b110b0b719e1":0
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-128 CAVS 21.4 PLAINTEXT LENGTH = 4096 count 0
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"1dd51f0d3a0a784174ba81b2c9f89005":"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":"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":0
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-128 CAVS 21.4 PLAINTEXT LENGTH = 8 count 1
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"30be7ff51227f0eef786cb7be2482510":"7f61a0a8b2fe7803f2947d233ec3a255":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-128 CAVS 21.4 PLAINTEXT LENGTH = 64 count 7
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"9ad15907cd05d77b844816b1dd806c92":"7aa0e5d322363afbdd71b531e50d4935":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-128 CAVS 21.4 PLAINTEXT LENGTH = 72 count 5
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"2005cbe9cc66a35cafdff1af119ae6ce":"60f9c736ec3619efdcc7cccc6b90ae5cdb8bb9eceea5dd96":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-128 CAVS 21.4 PLAINTEXT LENGTH = 248 count 5
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"2c3b49efbf60ed01a3ef27ee24ac90b0":"5fa5a87bec09a3e05864656f8966cd38e1c4af48a06b1dab4ec9cca35dd0f92b54015fe5332bdef9":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-128 CAVS 21.4 PLAINTEXT LENGTH = 4096 count 2
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"4b4c43c9de4fb4a2a7a7adafeabe2dbd":"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":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-192 CAVS 21.4 PLAINTEXT LENGTH = 8 count 2
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"716da5cce5877d8f305b5478d671f6c73eb1bff4de15df07":"dbd5247ad2445575cafb00ee7707c218":"bf":0
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-192 CAVS 21.4 PLAINTEXT LENGTH = 64 count 5
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"b94bc10b85a8c2f74a66fa723a25ea1b398a4f627efe1ce0":"18eef64a022b2c7db27648cbb5f1d5e6":"19c0f2f78606fae7":0
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-192 CAVS 21.4 PLAINTEXT LENGTH = 72 count 0
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"f61cde8e515d59a8ca95efb1a98ed4216c4a9649151babf2":"83fce85e9bfc6ed784b052472e5780fee662f17a91faf1a9":"1c6883862ede37b31b":0
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-192 CAVS 21.4 PLAINTEXT LENGTH = 248 count 3
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"1c883af75147bae6f34205cd656ad30ec97e617456591ce6":"f24f6747711cf72fab0422026c6d548ccdba786d77ab900ac3fb8f39f116d38e92c82d5fd9a045dd":"bdd793f086d8733f69055bd79bbc448be857286e918fd4c54be4acf4eca5e4":0
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-192 CAVS 21.4 PLAINTEXT LENGTH = 4096 count 0
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"1b38d4b366f844e71a8db6be2b77a05a9e81720d2d3f31ee":"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":"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":0
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-192 CAVS 21.4 PLAINTEXT LENGTH = 8 count 5
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"df8f5124b1e03228f2b96f0df31924bac1d3b5d094da22e6":"230bb26c1ea9d5c8fcf7c122ea994f41":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-192 CAVS 21.4 PLAINTEXT LENGTH = 64 count 7
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"94c8dae772a43b5e00468e0947699b239dfe30ab5f90e2f6":"239c6bceee3583fe7825011e02f01cc0":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-192 CAVS 21.4 PLAINTEXT LENGTH = 72 count 5
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"d81b7162dc6e9e18bea6e258bddb53a1c9f22a4a7177d9dd":"4f3a2b7b229a665776f9cfa42e0c2a615a81f69cc0f0f465":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-192 CAVS 21.4 PLAINTEXT LENGTH = 248 count 1
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"688833d56cf1a0f492bf1f7e35c2fa6299a2b1b5ca2a2823":"4b7c17d7a7189e7955c03abb0ca95fc0c780953787972097ae596d46fe2a8cd75995e6309780ae5f":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-192 CAVS 21.4 PLAINTEXT LENGTH = 4096 count 2
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"4b0faa630930b0ff8e624aeb4ddfa018a858cfa653132675":"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":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-256 CAVS 21.4 PLAINTEXT LENGTH = 8 count 2
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"da862b25a629d328cf9fac7be0d6ead1cb2404e9bab87a2381a46eb1a81187c5":"5e01a2b9b8413f303a3578d2cc255fda":"d4":0
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-256 CAVS 21.4 PLAINTEXT LENGTH = 64 count 5
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"362586d516d38e4d58b50a441443e75064cf6d6cdb6420862932ba7b0480b0fd":"ea7ee0f5af3a271a9777838ed13c61af":"f1b92d0db744bfee":0
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-256 CAVS 21.4 PLAINTEXT LENGTH = 72 count 1
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"0e6d542f960c7e61ca190d7fd719fda157030a0a013164613a8c522b52ae685d":"b5cae8a82095abb3478ab167dbc0201d2f4dfc5f81bbe44e":"a957eb4ea02e68ba8b":0
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-256 CAVS 21.4 PLAINTEXT LENGTH = 248 count 3
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"0445b86d13b7b76c0089a63dec70c32fded9607af63714b7c3cc724f49c1c6e2":"7f63167976e71e43b7b135c8cd12148f826f56e73f6fb6e7f6cefa23c34302ff374d44dd66b6bb01":"7af8c3b32e61f8b5c027383a273927b8fd09b75692bd0b713ec8ecec0bdd2c":0
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-256 CAVS 21.4 PLAINTEXT LENGTH = 4096 count 0
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"08f5c088acec18e6cf1f03a8f85d772e327e7fb07f8c2939eb554e84c42ab93d":"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":"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":0
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-256 CAVS 21.4 PLAINTEXT LENGTH = 8 count 5
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"5fc3ef43eef256993fb00e6ccc90f60319f10a3bc9fe5ca4ec876c165e2a7720":"f3d922a948969acca293bc3daa027e48":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-256 CAVS 21.4 PLAINTEXT LENGTH = 64 count 0
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"398444df32841be9e699c64faa92630c834564b8384876dceb471c4056fc8299":"30032c9a3ed00d29512d8c725fa86a4b":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-256 CAVS 21.4 PLAINTEXT LENGTH = 72 count 0
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"64b69233fe392c0bcda28a931cc3527b1a8f29235c1adf6256556c685cb89b9f":"6b5fd75ad16eda04a8b29f1bc0411ae28befbad9e474f2d8":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-256 CAVS 21.4 PLAINTEXT LENGTH = 248 count 2
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"8c35fb77766d04f48d5b52275c5c5f31f568078419e5c2335918965fbe53cedd":"bacccb1714dbaa4908c2654aa8dbb1ddbddd8ab819429b026619fb1c0fa75a8247372b2feeab1e1d":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
NIST KWP unwrap AES-256 CAVS 21.4 PLAINTEXT LENGTH = 4096 count 3
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"1726706350c11e6883955f24ea11ab247ce3b2ab54d05e67ad9770b5564483dd":"b006f26a67d0e1e2cbeb5c23b6b300adc1526d1f17bbe964fe8237ae244878158e6b04cb488786b5258ac973c3a2eafd7fcf3a7ca6c825155659fbc53d112bc78b3a770cf059fdd5e68f2b4bfa36de3721231102e5041c947fba3d906bff39592ec3901a398da23035f1190e99b58659330cc2e856ee87ad4197dcc7d16e1f062275bced1ed5cd82163ae3e58da7368dc2aadac855385bd4fa0b8baadef608d0a5c27172d12b88c70b136eeccf37f36364361a990dc50815743cab1636e661bff04ca8345520c30b935a060b450526b1d6ac09170e5b0a327b88f42327b85c9a621d2ca745963c2815a2bfcf509d50b6058ed6e67f369b5608d2aa885238b67d1b8e0d83f9464aa473bf109350fcc02e360c2619236cbfbf895b607895530d8d3d2e41450750dad05b1c37ef15db7fb4707597ac252e8e58d4c1ab2713b427643d198164c908b5d8ff36e9700157284009c7b283633d8b27b378bb65eff8aa59b5fe5e6437a1d53a99c106c2c4d033d3d23950e313a10eb31d68524ae9f8e4f56437acf66db3e8f77407a15bbff4b393e5559908993146d93c673d2aeb7d4cb8fc8d0169de7ed6e2bbe6ce9958a0f5d201419e7acb17e47da827ba380d6b3ad3b5a8c2101c5fb501110c727169065f23297947f538ab3ec165d61edc1f6a9e1735e9b7fc06d4d3406cf8f9c6a68b196cf262324a986705fbc802cdd2e6b4ebcf68e6bb9e793ae644":"":MBEDTLS_ERR_CIPHER_AUTH_FAILED
|
||||||
|
|
||||||
|
KW AES-128 wrap rfc 3394
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"000102030405060708090A0B0C0D0E0F":"00112233445566778899AABBCCDDEEFF":"1FA68B0A8112B447AEF34BD8FB5A7B829D3E862371D2CFE5"
|
||||||
|
|
||||||
|
KW AES-192 wrap rfc 3394
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"000102030405060708090A0B0C0D0E0F1011121314151617":"00112233445566778899AABBCCDDEEFF":"96778B25AE6CA435F92B5B97C050AED2468AB8A17AD84E5D"
|
||||||
|
|
||||||
|
KW AES-256 wrap rfc 3394
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F":"00112233445566778899AABBCCDDEEFF":"64E8C3F9CE0F5BA263E9777905818A2A93C8191E7D6E8AE7"
|
||||||
|
|
||||||
|
KW AES-128 unwrap rfc 3394
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"000102030405060708090A0B0C0D0E0F":"1FA68B0A8112B447AEF34BD8FB5A7B829D3E862371D2CFE5":"00112233445566778899AABBCCDDEEFF":0
|
||||||
|
|
||||||
|
KW AES-192 unwrap rfc 3394
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"000102030405060708090A0B0C0D0E0F1011121314151617":"031D33264E15D33268F24EC260743EDCE1C6C7DDEE725A936BA814915C6762D2":"00112233445566778899AABBCCDDEEFF0001020304050607":0
|
||||||
|
|
||||||
|
KW AES-256 unwrap rfc 3394
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_unwrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KW:"000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F":"A8F9BC1612C68B3FF6E6F4FBE30E71E4769C8B80A32CB8958CD5D17D6B254DA1":"00112233445566778899AABBCCDDEEFF0001020304050607":0
|
||||||
|
|
||||||
|
KWP AES-192 wrap rfc 5649
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"5840df6e29b02af1ab493b705bf16ea1ae8338f4dcc176a8":"c37b7e6492584340bed12207808941155068f738":"138bdeaa9b8fa7fc61f97742e72248ee5ae6ae5360d1ae6a5f54f373fa543b6a"
|
||||||
|
|
||||||
|
KWP AES-192 wrap rfc 5649
|
||||||
|
depends_on:MBEDTLS_AES_C
|
||||||
|
mbedtls_nist_kw_wrap:MBEDTLS_CIPHER_ID_AES:MBEDTLS_KW_MODE_KWP:"5840df6e29b02af1ab493b705bf16ea1ae8338f4dcc176a8":"466f7250617369":"afbeb0f07dfbf5419200f2ccb50bb24f"
|
||||||
343
tests/suites/test_suite_nist_kw.function
Normal file
343
tests/suites/test_suite_nist_kw.function
Normal file
|
|
@ -0,0 +1,343 @@
|
||||||
|
/* BEGIN_HEADER */
|
||||||
|
#include "mbedtls/nist_kw.h"
|
||||||
|
/* END_HEADER */
|
||||||
|
|
||||||
|
/* BEGIN_DEPENDENCIES
|
||||||
|
* depends_on:MBEDTLS_NIST_KW_C
|
||||||
|
* END_DEPENDENCIES
|
||||||
|
*/
|
||||||
|
|
||||||
|
/* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST:MBEDTLS_AES_C */
|
||||||
|
void mbedtls_nist_kw_self_test( )
|
||||||
|
{
|
||||||
|
TEST_ASSERT( mbedtls_nist_kw_self_test( 1 ) == 0 );
|
||||||
|
}
|
||||||
|
/* END_CASE */
|
||||||
|
|
||||||
|
/* BEGIN_CASE depends_on:MBEDTLS_AES_C */
|
||||||
|
void mbedtls_nist_kw_mix_contexts( )
|
||||||
|
{
|
||||||
|
mbedtls_nist_kw_context ctx1, ctx2;
|
||||||
|
unsigned char key[16];
|
||||||
|
unsigned char plaintext[32];
|
||||||
|
unsigned char ciphertext1[40];
|
||||||
|
unsigned char ciphertext2[40];
|
||||||
|
size_t output_len, i;
|
||||||
|
|
||||||
|
memset( plaintext, 0, sizeof( plaintext ) );
|
||||||
|
memset( ciphertext1, 0, sizeof( ciphertext1 ) );
|
||||||
|
memset( ciphertext2, 0, sizeof( ciphertext2 ) );
|
||||||
|
memset( key, 0, sizeof( key ) );
|
||||||
|
|
||||||
|
/*
|
||||||
|
* 1. Check wrap and unwrap with two seperate contexts
|
||||||
|
*/
|
||||||
|
mbedtls_nist_kw_init( &ctx1 );
|
||||||
|
mbedtls_nist_kw_init( &ctx2 );
|
||||||
|
|
||||||
|
TEST_ASSERT( mbedtls_nist_kw_setkey( &ctx1,
|
||||||
|
MBEDTLS_CIPHER_ID_AES,
|
||||||
|
key, sizeof( key ) * 8,
|
||||||
|
1 ) == 0 );
|
||||||
|
|
||||||
|
TEST_ASSERT( mbedtls_nist_kw_wrap( &ctx1, MBEDTLS_KW_MODE_KW,
|
||||||
|
plaintext, sizeof( plaintext ),
|
||||||
|
ciphertext1, &output_len,
|
||||||
|
sizeof( ciphertext1 ) ) == 0 );
|
||||||
|
TEST_ASSERT( output_len == sizeof( ciphertext1 ) );
|
||||||
|
|
||||||
|
TEST_ASSERT( mbedtls_nist_kw_setkey( &ctx2,
|
||||||
|
MBEDTLS_CIPHER_ID_AES,
|
||||||
|
key, sizeof( key ) * 8,
|
||||||
|
0 ) == 0 );
|
||||||
|
|
||||||
|
TEST_ASSERT( mbedtls_nist_kw_unwrap( &ctx2, MBEDTLS_KW_MODE_KW,
|
||||||
|
ciphertext1, output_len,
|
||||||
|
plaintext, &output_len,
|
||||||
|
sizeof( plaintext ) ) == 0 );
|
||||||
|
|
||||||
|
TEST_ASSERT( output_len == sizeof( plaintext ) );
|
||||||
|
for( i = 0; i < sizeof( plaintext ); i++ )
|
||||||
|
{
|
||||||
|
TEST_ASSERT( plaintext[i] == 0 );
|
||||||
|
}
|
||||||
|
mbedtls_nist_kw_free( &ctx1 );
|
||||||
|
mbedtls_nist_kw_free( &ctx2 );
|
||||||
|
|
||||||
|
/*
|
||||||
|
* 2. Check wrapping with two modes, on same context
|
||||||
|
*/
|
||||||
|
mbedtls_nist_kw_init( &ctx1 );
|
||||||
|
mbedtls_nist_kw_init( &ctx2 );
|
||||||
|
output_len = sizeof( ciphertext1 );
|
||||||
|
|
||||||
|
TEST_ASSERT( mbedtls_nist_kw_setkey( &ctx1,
|
||||||
|
MBEDTLS_CIPHER_ID_AES,
|
||||||
|
key, sizeof( key ) * 8,
|
||||||
|
1 ) == 0 );
|
||||||
|
|
||||||
|
TEST_ASSERT( mbedtls_nist_kw_wrap( &ctx1, MBEDTLS_KW_MODE_KW,
|
||||||
|
plaintext, sizeof( plaintext ),
|
||||||
|
ciphertext1, &output_len,
|
||||||
|
sizeof( ciphertext1 ) ) == 0 );
|
||||||
|
TEST_ASSERT( output_len == sizeof( ciphertext1 ) );
|
||||||
|
|
||||||
|
TEST_ASSERT( mbedtls_nist_kw_wrap( &ctx1, MBEDTLS_KW_MODE_KWP,
|
||||||
|
plaintext, sizeof( plaintext ),
|
||||||
|
ciphertext2, &output_len,
|
||||||
|
sizeof( ciphertext2 ) ) == 0 );
|
||||||
|
|
||||||
|
TEST_ASSERT( output_len == sizeof( ciphertext2 ) );
|
||||||
|
|
||||||
|
TEST_ASSERT( mbedtls_nist_kw_setkey( &ctx2,
|
||||||
|
MBEDTLS_CIPHER_ID_AES,
|
||||||
|
key, sizeof( key ) * 8,
|
||||||
|
0 ) == 0 );
|
||||||
|
|
||||||
|
TEST_ASSERT( mbedtls_nist_kw_unwrap( &ctx2, MBEDTLS_KW_MODE_KW,
|
||||||
|
ciphertext1, sizeof( ciphertext1 ),
|
||||||
|
plaintext, &output_len,
|
||||||
|
sizeof( plaintext ) ) == 0 );
|
||||||
|
|
||||||
|
TEST_ASSERT( output_len == sizeof( plaintext ) );
|
||||||
|
|
||||||
|
for( i = 0; i < sizeof( plaintext ); i++ )
|
||||||
|
{
|
||||||
|
TEST_ASSERT( plaintext[i] == 0 );
|
||||||
|
}
|
||||||
|
|
||||||
|
TEST_ASSERT( mbedtls_nist_kw_unwrap( &ctx2, MBEDTLS_KW_MODE_KWP,
|
||||||
|
ciphertext2, sizeof( ciphertext2 ),
|
||||||
|
plaintext, &output_len,
|
||||||
|
sizeof( plaintext ) ) == 0 );
|
||||||
|
|
||||||
|
TEST_ASSERT( output_len == sizeof( plaintext ) );
|
||||||
|
|
||||||
|
for( i = 0; i < sizeof( plaintext ); i++ )
|
||||||
|
{
|
||||||
|
TEST_ASSERT( plaintext[i] == 0 );
|
||||||
|
}
|
||||||
|
|
||||||
|
exit:
|
||||||
|
mbedtls_nist_kw_free( &ctx1 );
|
||||||
|
mbedtls_nist_kw_free( &ctx2 );
|
||||||
|
}
|
||||||
|
/* END_CASE */
|
||||||
|
|
||||||
|
/* BEGIN_CASE */
|
||||||
|
void mbedtls_nist_kw_setkey( int cipher_id, int key_size,
|
||||||
|
int is_wrap, int result )
|
||||||
|
{
|
||||||
|
mbedtls_nist_kw_context ctx;
|
||||||
|
unsigned char key[32];
|
||||||
|
int ret;
|
||||||
|
|
||||||
|
mbedtls_nist_kw_init( &ctx );
|
||||||
|
|
||||||
|
memset( key, 0x2A, sizeof( key ) );
|
||||||
|
TEST_ASSERT( (unsigned) key_size <= 8 * sizeof( key ) );
|
||||||
|
|
||||||
|
ret = mbedtls_nist_kw_setkey( &ctx, cipher_id, key, key_size, is_wrap );
|
||||||
|
TEST_ASSERT( ret == result );
|
||||||
|
|
||||||
|
exit:
|
||||||
|
mbedtls_nist_kw_free( &ctx );
|
||||||
|
}
|
||||||
|
/* END_CASE */
|
||||||
|
|
||||||
|
/* BEGIN_CASE depends_on:MBEDTLS_AES_C */
|
||||||
|
void nist_kw_plaintext_lengths( int in_len, int out_len, int mode, int res )
|
||||||
|
{
|
||||||
|
mbedtls_nist_kw_context ctx;
|
||||||
|
unsigned char key[16];
|
||||||
|
unsigned char *plaintext = NULL;
|
||||||
|
unsigned char *ciphertext = NULL;
|
||||||
|
size_t output_len = out_len;
|
||||||
|
|
||||||
|
mbedtls_nist_kw_init( &ctx );
|
||||||
|
|
||||||
|
memset( key, 0, sizeof( key ) );
|
||||||
|
|
||||||
|
if (in_len == 0)
|
||||||
|
{
|
||||||
|
/* mbedtls_calloc can return NULL for zero-length buffers. Make sure we
|
||||||
|
* always have a plaintext buffer, even if the length is 0. */
|
||||||
|
plaintext = mbedtls_calloc( 1, 1 );
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
plaintext = mbedtls_calloc( 1, in_len );
|
||||||
|
}
|
||||||
|
TEST_ASSERT( plaintext != NULL );
|
||||||
|
ciphertext = mbedtls_calloc( 1, output_len );
|
||||||
|
TEST_ASSERT( ciphertext != NULL );
|
||||||
|
|
||||||
|
memset( plaintext, 0, in_len );
|
||||||
|
memset( ciphertext, 0, output_len );
|
||||||
|
|
||||||
|
|
||||||
|
TEST_ASSERT( mbedtls_nist_kw_setkey( &ctx, MBEDTLS_CIPHER_ID_AES,
|
||||||
|
key, 8 * sizeof( key ), 1 ) == 0 );
|
||||||
|
|
||||||
|
TEST_ASSERT( mbedtls_nist_kw_wrap( &ctx, mode, plaintext, in_len,
|
||||||
|
ciphertext, &output_len,
|
||||||
|
output_len ) == res );
|
||||||
|
if( res == 0 )
|
||||||
|
{
|
||||||
|
if( mode == MBEDTLS_KW_MODE_KWP )
|
||||||
|
TEST_ASSERT( output_len == (size_t) in_len + 8 -
|
||||||
|
( in_len % 8 ) + 8 );
|
||||||
|
else
|
||||||
|
TEST_ASSERT( output_len == (size_t) in_len + 8 );
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
TEST_ASSERT( output_len == 0 );
|
||||||
|
}
|
||||||
|
|
||||||
|
exit:
|
||||||
|
mbedtls_free( ciphertext );
|
||||||
|
mbedtls_free( plaintext );
|
||||||
|
mbedtls_nist_kw_free( &ctx );
|
||||||
|
}
|
||||||
|
/* END_CASE */
|
||||||
|
|
||||||
|
/* BEGIN_CASE depends_on:MBEDTLS_AES_C */
|
||||||
|
void nist_kw_ciphertext_lengths( int in_len, int out_len, int mode, int res )
|
||||||
|
{
|
||||||
|
mbedtls_nist_kw_context ctx;
|
||||||
|
unsigned char key[16];
|
||||||
|
unsigned char *plaintext = NULL;
|
||||||
|
unsigned char *ciphertext = NULL;
|
||||||
|
int unwrap_ret;
|
||||||
|
size_t output_len = out_len;
|
||||||
|
|
||||||
|
mbedtls_nist_kw_init( &ctx );
|
||||||
|
|
||||||
|
memset( key, 0, sizeof( key ) );
|
||||||
|
|
||||||
|
plaintext = mbedtls_calloc( 1, output_len );
|
||||||
|
TEST_ASSERT( plaintext != NULL );
|
||||||
|
ciphertext = mbedtls_calloc( 1, in_len );
|
||||||
|
TEST_ASSERT( ciphertext != NULL );
|
||||||
|
|
||||||
|
memset( plaintext, 0, output_len );
|
||||||
|
memset( ciphertext, 0, in_len );
|
||||||
|
|
||||||
|
|
||||||
|
TEST_ASSERT( mbedtls_nist_kw_setkey( &ctx, MBEDTLS_CIPHER_ID_AES,
|
||||||
|
key, 8 * sizeof( key ), 0 ) == 0 );
|
||||||
|
unwrap_ret = mbedtls_nist_kw_unwrap( &ctx, mode, ciphertext, in_len,
|
||||||
|
plaintext, &output_len,
|
||||||
|
output_len );
|
||||||
|
|
||||||
|
if( res == 0 )
|
||||||
|
TEST_ASSERT( unwrap_ret == MBEDTLS_ERR_CIPHER_AUTH_FAILED );
|
||||||
|
else
|
||||||
|
TEST_ASSERT( unwrap_ret == res );
|
||||||
|
|
||||||
|
TEST_ASSERT( output_len == 0 );
|
||||||
|
|
||||||
|
exit:
|
||||||
|
mbedtls_free( ciphertext );
|
||||||
|
mbedtls_free( plaintext );
|
||||||
|
mbedtls_nist_kw_free( &ctx );
|
||||||
|
}
|
||||||
|
/* END_CASE */
|
||||||
|
|
||||||
|
/* BEGIN_CASE */
|
||||||
|
void mbedtls_nist_kw_wrap( int cipher_id, int mode,
|
||||||
|
char *key_hex, char *msg_hex,
|
||||||
|
char *result_hex )
|
||||||
|
{
|
||||||
|
unsigned char key[32];
|
||||||
|
unsigned char msg[512];
|
||||||
|
unsigned char result[528];
|
||||||
|
unsigned char expected_result[528];
|
||||||
|
mbedtls_nist_kw_context ctx;
|
||||||
|
size_t key_len, msg_len, output_len, result_len, i, padlen;
|
||||||
|
|
||||||
|
mbedtls_nist_kw_init( &ctx );
|
||||||
|
|
||||||
|
memset( key, 0x00, sizeof( key ) );
|
||||||
|
memset( msg, 0x00, sizeof( msg ) );
|
||||||
|
memset( result, '+', sizeof( result ) );
|
||||||
|
|
||||||
|
key_len = unhexify( key, key_hex );
|
||||||
|
msg_len = unhexify( msg, msg_hex );
|
||||||
|
result_len = unhexify( expected_result, result_hex );
|
||||||
|
output_len = sizeof( result );
|
||||||
|
|
||||||
|
TEST_ASSERT( mbedtls_nist_kw_setkey( &ctx, cipher_id, key, key_len * 8, 1 )
|
||||||
|
== 0 );
|
||||||
|
|
||||||
|
/* Test with input == output */
|
||||||
|
TEST_ASSERT( mbedtls_nist_kw_wrap( &ctx, mode, msg, msg_len,
|
||||||
|
result, &output_len, sizeof( result ) ) == 0 );
|
||||||
|
|
||||||
|
TEST_ASSERT( output_len == result_len );
|
||||||
|
|
||||||
|
TEST_ASSERT( memcmp( expected_result, result, result_len ) == 0 );
|
||||||
|
|
||||||
|
padlen = ( msg_len % 8 != 0 ) ? 8 - (msg_len % 8 ) : 0;
|
||||||
|
/* Check that the function didn't write beyond the end of the buffer. */
|
||||||
|
for( i = msg_len + 8 + padlen; i < sizeof( result ); i++ )
|
||||||
|
{
|
||||||
|
TEST_ASSERT( result[i] == '+' );
|
||||||
|
}
|
||||||
|
|
||||||
|
exit:
|
||||||
|
mbedtls_nist_kw_free( &ctx );
|
||||||
|
}
|
||||||
|
/* END_CASE */
|
||||||
|
|
||||||
|
/* BEGIN_CASE */
|
||||||
|
void mbedtls_nist_kw_unwrap( int cipher_id, int mode,
|
||||||
|
char *key_hex, char *msg_hex,
|
||||||
|
char *result_hex, int expected_ret )
|
||||||
|
{
|
||||||
|
unsigned char key[32];
|
||||||
|
unsigned char msg[528];
|
||||||
|
unsigned char result[528];
|
||||||
|
unsigned char expected_result[528];
|
||||||
|
mbedtls_nist_kw_context ctx;
|
||||||
|
size_t key_len, msg_len, output_len, result_len, i;
|
||||||
|
|
||||||
|
mbedtls_nist_kw_init( &ctx );
|
||||||
|
|
||||||
|
memset( key, 0x00, sizeof( key ) );
|
||||||
|
memset( msg, 0x00, sizeof( msg ) );
|
||||||
|
memset( result, '+', sizeof( result ) );
|
||||||
|
memset( expected_result, 0x00, sizeof( expected_result ) );
|
||||||
|
|
||||||
|
key_len = unhexify( key, key_hex );
|
||||||
|
msg_len = unhexify( msg, msg_hex );
|
||||||
|
result_len = unhexify( expected_result, result_hex );
|
||||||
|
output_len = sizeof( result );
|
||||||
|
|
||||||
|
TEST_ASSERT( mbedtls_nist_kw_setkey( &ctx, cipher_id, key, key_len * 8, 0 )
|
||||||
|
== 0 );
|
||||||
|
|
||||||
|
/* Test with input == output */
|
||||||
|
TEST_ASSERT( mbedtls_nist_kw_unwrap( &ctx, mode, msg, msg_len,
|
||||||
|
result, &output_len, sizeof( result ) ) == expected_ret );
|
||||||
|
if( expected_ret == 0 )
|
||||||
|
{
|
||||||
|
TEST_ASSERT( output_len == result_len );
|
||||||
|
TEST_ASSERT( memcmp( expected_result, result, result_len ) == 0 );
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
TEST_ASSERT( output_len == 0 );
|
||||||
|
}
|
||||||
|
|
||||||
|
/* Check that the function didn't write beyond the end of the buffer. */
|
||||||
|
for( i = msg_len - 8; i < sizeof( result ); i++ )
|
||||||
|
{
|
||||||
|
TEST_ASSERT( result[i] == '+' );
|
||||||
|
}
|
||||||
|
|
||||||
|
exit:
|
||||||
|
mbedtls_nist_kw_free( &ctx );
|
||||||
|
}
|
||||||
|
/* END_CASE */
|
||||||
|
|
@ -191,6 +191,7 @@
|
||||||
<ClInclude Include="..\..\include\mbedtls\memory_buffer_alloc.h" />
|
<ClInclude Include="..\..\include\mbedtls\memory_buffer_alloc.h" />
|
||||||
<ClInclude Include="..\..\include\mbedtls\net.h" />
|
<ClInclude Include="..\..\include\mbedtls\net.h" />
|
||||||
<ClInclude Include="..\..\include\mbedtls\net_sockets.h" />
|
<ClInclude Include="..\..\include\mbedtls\net_sockets.h" />
|
||||||
|
<ClInclude Include="..\..\include\mbedtls\nist_kw.h" />
|
||||||
<ClInclude Include="..\..\include\mbedtls\oid.h" />
|
<ClInclude Include="..\..\include\mbedtls\oid.h" />
|
||||||
<ClInclude Include="..\..\include\mbedtls\padlock.h" />
|
<ClInclude Include="..\..\include\mbedtls\padlock.h" />
|
||||||
<ClInclude Include="..\..\include\mbedtls\pem.h" />
|
<ClInclude Include="..\..\include\mbedtls\pem.h" />
|
||||||
|
|
@ -265,6 +266,7 @@
|
||||||
<ClCompile Include="..\..\library\md_wrap.c" />
|
<ClCompile Include="..\..\library\md_wrap.c" />
|
||||||
<ClCompile Include="..\..\library\memory_buffer_alloc.c" />
|
<ClCompile Include="..\..\library\memory_buffer_alloc.c" />
|
||||||
<ClCompile Include="..\..\library\net_sockets.c" />
|
<ClCompile Include="..\..\library\net_sockets.c" />
|
||||||
|
<ClCompile Include="..\..\library\nist_kw.c" />
|
||||||
<ClCompile Include="..\..\library\oid.c" />
|
<ClCompile Include="..\..\library\oid.c" />
|
||||||
<ClCompile Include="..\..\library\padlock.c" />
|
<ClCompile Include="..\..\library\padlock.c" />
|
||||||
<ClCompile Include="..\..\library\pem.c" />
|
<ClCompile Include="..\..\library\pem.c" />
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue