fips_des_selftest.c 4.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147
  1. /* ====================================================================
  2. * Copyright (c) 2003 The OpenSSL Project. All rights reserved.
  3. *
  4. * Redistribution and use in source and binary forms, with or without
  5. * modification, are permitted provided that the following conditions
  6. * are met:
  7. *
  8. * 1. Redistributions of source code must retain the above copyright
  9. * notice, this list of conditions and the following disclaimer.
  10. *
  11. * 2. Redistributions in binary form must reproduce the above copyright
  12. * notice, this list of conditions and the following disclaimer in
  13. * the documentation and/or other materials provided with the
  14. * distribution.
  15. *
  16. * 3. All advertising materials mentioning features or use of this
  17. * software must display the following acknowledgment:
  18. * "This product includes software developed by the OpenSSL Project
  19. * for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
  20. *
  21. * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  22. * endorse or promote products derived from this software without
  23. * prior written permission. For written permission, please contact
  24. * openssl-core@openssl.org.
  25. *
  26. * 5. Products derived from this software may not be called "OpenSSL"
  27. * nor may "OpenSSL" appear in their names without prior written
  28. * permission of the OpenSSL Project.
  29. *
  30. * 6. Redistributions of any form whatsoever must retain the following
  31. * acknowledgment:
  32. * "This product includes software developed by the OpenSSL Project
  33. * for use in the OpenSSL Toolkit (http://www.openssl.org/)"
  34. *
  35. * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  36. * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  37. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  38. * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
  39. * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  40. * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  41. * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  42. * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  43. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  44. * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  45. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  46. * OF THE POSSIBILITY OF SUCH DAMAGE.
  47. *
  48. */
  49. #include <string.h>
  50. #include <openssl/err.h>
  51. #include <openssl/fips.h>
  52. #include <openssl/evp.h>
  53. #include <openssl/opensslconf.h>
  54. #ifdef OPENSSL_FIPS
  55. static struct {
  56. unsigned char key[16];
  57. unsigned char plaintext[8];
  58. unsigned char ciphertext[8];
  59. } tests2[] = {
  60. {
  61. {
  62. 0x7c, 0x4f, 0x6e, 0xf7, 0xa2, 0x04, 0x16, 0xec, 0x0b, 0x6b, 0x7c,
  63. 0x9e, 0x5e, 0x19, 0xa7, 0xc4
  64. }, {
  65. 0x06, 0xa7, 0xd8, 0x79, 0xaa, 0xce, 0x69, 0xef
  66. }, {
  67. 0x4c, 0x11, 0x17, 0x55, 0xbf, 0xc4, 0x4e, 0xfd
  68. }
  69. },
  70. {
  71. {
  72. 0x5d, 0x9e, 0x01, 0xd3, 0x25, 0xc7, 0x3e, 0x34, 0x01, 0x16, 0x7c,
  73. 0x85, 0x23, 0xdf, 0xe0, 0x68
  74. }, {
  75. 0x9c, 0x50, 0x09, 0x0f, 0x5e, 0x7d, 0x69, 0x7e
  76. }, {
  77. 0xd2, 0x0b, 0x18, 0xdf, 0xd9, 0x0d, 0x9e, 0xff
  78. },
  79. }
  80. };
  81. static struct {
  82. unsigned char key[24];
  83. unsigned char plaintext[8];
  84. unsigned char ciphertext[8];
  85. } tests3[] = {
  86. {
  87. {
  88. 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xFE, 0xDC, 0xBA,
  89. 0x98, 0x76, 0x54, 0x32, 0x10, 0x12, 0x34, 0x56, 0x78, 0x9a, 0xbc,
  90. 0xde, 0xf0
  91. }, {
  92. 0x8f, 0x8f, 0xbf, 0x9b, 0x5d, 0x48, 0xb4, 0x1c
  93. }, {
  94. 0x59, 0x8c, 0xe5, 0xd3, 0x6c, 0xa2, 0xea, 0x1b
  95. },
  96. },
  97. {
  98. {
  99. 0xDC, 0xBA, 0x98, 0x76, 0x54, 0x32, 0x10, 0xFE, 0x01, 0x23, 0x45,
  100. 0x67, 0x89, 0xAB, 0xCD, 0xEF, 0xED, 0x39, 0xD9, 0x50, 0xFA, 0x74,
  101. 0xBC, 0xC4
  102. }, {
  103. 0x01, 0x23, 0x45, 0x67, 0x89, 0xAB, 0xCD, 0xEF
  104. }, {
  105. 0x11, 0x25, 0xb0, 0x35, 0xbe, 0xa0, 0x82, 0x86
  106. },
  107. },
  108. };
  109. void FIPS_corrupt_des()
  110. {
  111. tests2[0].plaintext[0]++;
  112. }
  113. int FIPS_selftest_des()
  114. {
  115. int n, ret = 0;
  116. EVP_CIPHER_CTX ctx;
  117. EVP_CIPHER_CTX_init(&ctx);
  118. /* Encrypt/decrypt with 2-key 3DES and compare to known answers */
  119. for (n = 0; n < 2; ++n) {
  120. if (!fips_cipher_test(&ctx, EVP_des_ede_ecb(),
  121. tests2[n].key, NULL,
  122. tests2[n].plaintext, tests2[n].ciphertext, 8))
  123. goto err;
  124. }
  125. /* Encrypt/decrypt with 3DES and compare to known answers */
  126. for (n = 0; n < 2; ++n) {
  127. if (!fips_cipher_test(&ctx, EVP_des_ede3_ecb(),
  128. tests3[n].key, NULL,
  129. tests3[n].plaintext, tests3[n].ciphertext, 8))
  130. goto err;
  131. }
  132. ret = 1;
  133. err:
  134. EVP_CIPHER_CTX_cleanup(&ctx);
  135. if (ret == 0)
  136. FIPSerr(FIPS_F_FIPS_SELFTEST_DES, FIPS_R_SELFTEST_FAILED);
  137. return ret;
  138. }
  139. #endif