AuroraMiddleware/libtomcrypt
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
e9c0b9f34c
libtomcrypt/tests/padding_test.c
Steffen Jaeckel 71e54554ff add SSH-style padding 
Signed-off-by: Steffen Jaeckel <s@jaeckel.eu>
2024-02-18 17:02:07 +00:00

221 lines
9.3 KiB
C
Raw Blame History

/* LibTomCrypt, modular cryptographic library -- Tom St Denis */
/* SPDX-License-Identifier: Unlicense */
#include <tomcrypt_test.h>
#ifdef LTC_PADDING
typedef struct padding_testcase_ padding_testcase;
typedef int (*cmp_padding_testcase)(const padding_testcase*, const unsigned char*, unsigned long);
struct padding_testcase_ {
unsigned long is, should, max, mode;
const char* name;
cmp_padding_testcase cmp;
};
#define EQ(a, b) s_eq((a), (b), #a, #b)
static int s_eq(unsigned long a, unsigned long b, const char* s_a, const char* s_b)
{
if (a == b) return CRYPT_OK;
#if defined(LTC_TEST) && defined(LTC_TEST_DBG)
else fprintf(stderr, "'%s == %s' failed, %lu is not equal to %lu\n", s_a, s_b, a, b);
#else
LTC_UNUSED_PARAM(s_a);
LTC_UNUSED_PARAM(s_b);
#endif
return CRYPT_FAIL_TESTVECTOR;
}
static int s_cmp_pkcs7(const padding_testcase* t, const unsigned char* p, unsigned long len)
{
unsigned long n, diff = len - t->is;
DOX(EQ(len, t->should), t->name);
for (n = len - diff; n < len; ++n) {
DOX(EQ(p[n], diff), t->name);
}
return CRYPT_OK;
}
#ifdef LTC_RNG_GET_BYTES
static int s_cmp_iso_10126(const padding_testcase* t, const unsigned char* p, unsigned long len)
{
LTC_UNUSED_PARAM(p);
if (len < t->should || len > t->max) {
#if defined(LTC_TEST) && defined(LTC_TEST_DBG)
fprintf(stderr, "(%lu < %lu || %lu > %lu) failed, %s\n", len, t->should, len, t->max, t->name);
#endif
return CRYPT_FAIL_TESTVECTOR;
}
DOX(EQ(p[len - 1], len - t->is), t->name);
return CRYPT_OK;
}
#endif
static int s_cmp_x923(const padding_testcase* t, const unsigned char* p, unsigned long len)
{
unsigned long n, diff = len - t->is;
DOX(EQ(len, t->should), t->name);
for (n = len - diff; n < len - 1; ++n) {
DOX(EQ(p[n], 0x0), t->name);
}
DOX(EQ(p[len - 1], diff), t->name);
return CRYPT_OK;
}
static int s_cmp_oaz(const padding_testcase* t, const unsigned char* p, unsigned long len)
{
unsigned long n, diff = len - t->is;
DOX(EQ(len, t->should), t->name);
n = len - diff;
DOX(EQ(p[n], 0x80), t->name);
n++;
for (; n < len; ++n) {
DOX(EQ(p[n], 0x0), t->name);
}
return CRYPT_OK;
}
static int s_cmp_zero(const padding_testcase* t, const unsigned char* p, unsigned long len)
{
unsigned long n, diff = len - t->is;
DOX(EQ(len, t->should), t->name);
for (n = len - diff; n < len; ++n) {
DOX(EQ(p[n], 0x0), t->name);
}
return CRYPT_OK;
}
static int s_cmp_ssh(const padding_testcase* t, const unsigned char* p, unsigned long len)
{
unsigned long n, diff = len - t->is;
unsigned char pad = 0x1;
DOX(EQ(len, t->should), t->name);
for (n = len - diff; n < len; ++n) {
DOX(EQ(p[n], pad), t->name);
pad++;
}
return CRYPT_OK;
}
static int s_padding_testrun(const padding_testcase* t)
{
unsigned long len;
unsigned char buf[1024];
len = sizeof(buf);
XMEMSET(buf, 0xAA, t->is);
DO(padding_pad(buf, t->is, &len, t->mode));
DO(t->cmp(t, buf, len));
DO(padding_depad(buf, &len, t->mode));
DO(EQ(len, t->is));
return CRYPT_OK;
}
int padding_test(void)
{
const padding_testcase cases[] = {
{ 0, 16, 0, LTC_PAD_PKCS7 | 16, "0-pkcs7", s_cmp_pkcs7 },
{ 1, 16, 0, LTC_PAD_PKCS7 | 16, "1-pkcs7", s_cmp_pkcs7 },
{ 15, 16, 0, LTC_PAD_PKCS7 | 16, "15-pkcs7", s_cmp_pkcs7 },
{ 16, 32, 0, LTC_PAD_PKCS7 | 16, "16-pkcs7", s_cmp_pkcs7 },
{ 255, 256, 0, LTC_PAD_PKCS7 | 16, "255-pkcs7", s_cmp_pkcs7 },
{ 256, 272, 0, LTC_PAD_PKCS7 | 16, "256-pkcs7", s_cmp_pkcs7 },
#ifdef LTC_RNG_GET_BYTES
{ 0, 16, 256, LTC_PAD_ISO_10126 | 16, "0-rand", s_cmp_iso_10126 },
{ 1, 16, 272, LTC_PAD_ISO_10126 | 16, "1-rand", s_cmp_iso_10126 },
{ 15, 16, 272, LTC_PAD_ISO_10126 | 16, "15-rand", s_cmp_iso_10126 },
{ 16, 32, 288, LTC_PAD_ISO_10126 | 16, "16-rand", s_cmp_iso_10126 },
{ 255, 256, 512, LTC_PAD_ISO_10126 | 16, "255-rand", s_cmp_iso_10126 },
{ 256, 272, 528, LTC_PAD_ISO_10126 | 16, "256-rand", s_cmp_iso_10126 },
#endif
{ 0, 16, 0, LTC_PAD_ANSI_X923 | 16, "0-x923", s_cmp_x923 },
{ 1, 16, 0, LTC_PAD_ANSI_X923 | 16, "1-x923", s_cmp_x923 },
{ 15, 16, 0, LTC_PAD_ANSI_X923 | 16, "15-x923", s_cmp_x923 },
{ 16, 32, 0, LTC_PAD_ANSI_X923 | 16, "16-x923", s_cmp_x923 },
{ 255, 256, 0, LTC_PAD_ANSI_X923 | 16, "255-x923", s_cmp_x923 },
{ 256, 272, 0, LTC_PAD_ANSI_X923 | 16, "256-x923", s_cmp_x923 },
{ 0, 16, 0, LTC_PAD_SSH | 16, "0-ssh", s_cmp_ssh },
{ 1, 16, 0, LTC_PAD_SSH | 16, "1-ssh", s_cmp_ssh },
{ 15, 16, 0, LTC_PAD_SSH | 16, "15-ssh", s_cmp_ssh },
{ 16, 32, 0, LTC_PAD_SSH | 16, "16-ssh", s_cmp_ssh },
{ 255, 256, 0, LTC_PAD_SSH | 16, "255-ssh", s_cmp_ssh },
{ 256, 272, 0, LTC_PAD_SSH | 16, "256-ssh", s_cmp_ssh },
{ 0, 16, 0, LTC_PAD_ONE_AND_ZERO | 16, "0-one-and-zero", s_cmp_oaz },
{ 1, 16, 0, LTC_PAD_ONE_AND_ZERO | 16, "1-one-and-zero", s_cmp_oaz },
{ 15, 16, 0, LTC_PAD_ONE_AND_ZERO | 16, "15-one-and-zero", s_cmp_oaz },
{ 16, 32, 0, LTC_PAD_ONE_AND_ZERO | 16, "16-one-and-zero", s_cmp_oaz },
{ 255, 256, 0, LTC_PAD_ONE_AND_ZERO | 16, "255-one-and-zero", s_cmp_oaz },
{ 256, 272, 0, LTC_PAD_ONE_AND_ZERO | 16, "256-one-and-zero", s_cmp_oaz },
{ 0, 0, 0, LTC_PAD_ZERO | 16, "0-zero", s_cmp_zero },
{ 1, 16, 0, LTC_PAD_ZERO | 16, "1-zero", s_cmp_zero },
{ 15, 16, 0, LTC_PAD_ZERO | 16, "15-zero", s_cmp_zero },
{ 16, 16, 0, LTC_PAD_ZERO | 16, "16-zero", s_cmp_zero },
{ 255, 256, 0, LTC_PAD_ZERO | 16, "255-zero", s_cmp_zero },
{ 256, 256, 0, LTC_PAD_ZERO | 16, "256-zero", s_cmp_zero },
{ 0, 16, 0, LTC_PAD_ZERO_ALWAYS | 16, "0-zero-always", s_cmp_zero },
{ 1, 16, 0, LTC_PAD_ZERO_ALWAYS | 16, "1-zero-always", s_cmp_zero },
{ 15, 16, 0, LTC_PAD_ZERO_ALWAYS | 16, "15-zero-always", s_cmp_zero },
{ 16, 32, 0, LTC_PAD_ZERO_ALWAYS | 16, "16-zero-always", s_cmp_zero },
{ 255, 256, 0, LTC_PAD_ZERO_ALWAYS | 16, "255-zero-always", s_cmp_zero },
{ 256, 272, 0, LTC_PAD_ZERO_ALWAYS | 16, "256-zero-always", s_cmp_zero },
};
unsigned i;
/* Examples from https://en.wikipedia.org/w/index.php?title=Padding_(cryptography)&oldid=823057951#Byte_padding */
const struct {
unsigned char data[16];
unsigned long len;
unsigned long mode;
} tv[] = {
{ { 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0x04, 0x04, 0x04, 0x04 }, 12, LTC_PAD_PKCS7 | 16 },
{ { 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0x00, 0x00, 0x00, 0x04 }, 12, LTC_PAD_ANSI_X923 | 16 },
#ifdef LTC_RNG_GET_BYTES
{ { 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0x81, 0xA6, 0x23, 0x04 }, 12, LTC_PAD_ISO_10126 | 16 },
#endif
{ { 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0x80, 0x00, 0x00, 0x00 }, 12, LTC_PAD_ONE_AND_ZERO | 16 },
{ { 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0x80 }, 15, LTC_PAD_ONE_AND_ZERO | 16 },
{ { 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0xDD, 0x00, 0x00, 0x00, 0x00 }, 12, LTC_PAD_ZERO | 16 },
};
/* we need a big buffer like that as LTC_PAD_ISO_10126
* is allowed to add 1-255 bytes of padding
*/
unsigned char buf[256 + 16];
unsigned long l;
for (i = 0; i < sizeof(cases)/sizeof(cases[0]); ++i) {
DOX(s_padding_testrun(&cases[i]), cases[i].name);
}
for (i = 0; i < sizeof(tv)/sizeof(tv[0]); ++i) {
XMEMCPY(buf, tv[i].data, sizeof(tv[i].data));
l = sizeof(tv[i].data);
DO(padding_depad(buf, &l, tv[i].mode));
XMEMSET(buf, 0xDD, 16);
l = sizeof(buf);
DO(padding_pad(buf, tv[i].len, &l, tv[i].mode));
#ifdef LTC_RNG_GET_BYTES
if ((tv[i].mode & LTC_PAD_MASK) != LTC_PAD_ISO_10126)
#endif
{
COMPARE_TESTVECTOR(tv[i].data, sizeof(tv[i].data), buf, l, "padding fixed TV", i);
}
}
/* wycheproof failing test - https://github.com/libtom/libtomcrypt/pull/454 */
{
unsigned char data[] = { 0x47,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00 };
unsigned long len = sizeof(data);
SHOULD_FAIL(padding_depad(data, &len, (LTC_PAD_PKCS7 | 16)));
}
return CRYPT_OK;
}
#endif
Reference in New Issue View Git Blame Copy Permalink