1 /*
2  * QEMU Crypto cipher algorithms
3  *
4  * Copyright (c) 2015 Red Hat, Inc.
5  *
6  * This library is free software; you can redistribute it and/or
7  * modify it under the terms of the GNU Lesser General Public
8  * License as published by the Free Software Foundation; either
9  * version 2.1 of the License, or (at your option) any later version.
10  *
11  * This library is distributed in the hope that it will be useful,
12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
14  * Lesser General Public License for more details.
15  *
16  * You should have received a copy of the GNU Lesser General Public
17  * License along with this library; if not, see <http://www.gnu.org/licenses/>.
18  *
19  */
20 
21 #include "qemu/osdep.h"
22 
23 #include "crypto/init.h"
24 #include "crypto/cipher.h"
25 #include "qapi/error.h"
26 
27 typedef struct QCryptoCipherTestData QCryptoCipherTestData;
28 struct QCryptoCipherTestData {
29     const char *path;
30     QCryptoCipherAlgorithm alg;
31     QCryptoCipherMode mode;
32     const char *key;
33     const char *plaintext;
34     const char *ciphertext;
35     const char *iv;
36 };
37 
38 /* AES test data comes from appendix F of:
39  *
40  * http://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf
41  */
42 static QCryptoCipherTestData test_data[] = {
43     {
44         /* NIST F.1.1 ECB-AES128.Encrypt */
45         .path = "/crypto/cipher/aes-ecb-128",
46         .alg = QCRYPTO_CIPHER_ALG_AES_128,
47         .mode = QCRYPTO_CIPHER_MODE_ECB,
48         .key = "2b7e151628aed2a6abf7158809cf4f3c",
49         .plaintext =
50             "6bc1bee22e409f96e93d7e117393172a"
51             "ae2d8a571e03ac9c9eb76fac45af8e51"
52             "30c81c46a35ce411e5fbc1191a0a52ef"
53             "f69f2445df4f9b17ad2b417be66c3710",
54         .ciphertext =
55             "3ad77bb40d7a3660a89ecaf32466ef97"
56             "f5d3d58503b9699de785895a96fdbaaf"
57             "43b1cd7f598ece23881b00e3ed030688"
58             "7b0c785e27e8ad3f8223207104725dd4"
59     },
60     {
61         /* NIST F.1.3 ECB-AES192.Encrypt */
62         .path = "/crypto/cipher/aes-ecb-192",
63         .alg = QCRYPTO_CIPHER_ALG_AES_192,
64         .mode = QCRYPTO_CIPHER_MODE_ECB,
65         .key = "8e73b0f7da0e6452c810f32b809079e562f8ead2522c6b7b",
66         .plaintext  =
67             "6bc1bee22e409f96e93d7e117393172a"
68             "ae2d8a571e03ac9c9eb76fac45af8e51"
69             "30c81c46a35ce411e5fbc1191a0a52ef"
70             "f69f2445df4f9b17ad2b417be66c3710",
71         .ciphertext =
72             "bd334f1d6e45f25ff712a214571fa5cc"
73             "974104846d0ad3ad7734ecb3ecee4eef"
74             "ef7afd2270e2e60adce0ba2face6444e"
75             "9a4b41ba738d6c72fb16691603c18e0e"
76     },
77     {
78         /* NIST F.1.5 ECB-AES256.Encrypt */
79         .path = "/crypto/cipher/aes-ecb-256",
80         .alg = QCRYPTO_CIPHER_ALG_AES_256,
81         .mode = QCRYPTO_CIPHER_MODE_ECB,
82         .key =
83             "603deb1015ca71be2b73aef0857d7781"
84             "1f352c073b6108d72d9810a30914dff4",
85         .plaintext  =
86             "6bc1bee22e409f96e93d7e117393172a"
87             "ae2d8a571e03ac9c9eb76fac45af8e51"
88             "30c81c46a35ce411e5fbc1191a0a52ef"
89             "f69f2445df4f9b17ad2b417be66c3710",
90         .ciphertext =
91             "f3eed1bdb5d2a03c064b5a7e3db181f8"
92             "591ccb10d410ed26dc5ba74a31362870"
93             "b6ed21b99ca6f4f9f153e7b1beafed1d"
94             "23304b7a39f9f3ff067d8d8f9e24ecc7",
95     },
96     {
97         /* NIST F.2.1 CBC-AES128.Encrypt */
98         .path = "/crypto/cipher/aes-cbc-128",
99         .alg = QCRYPTO_CIPHER_ALG_AES_128,
100         .mode = QCRYPTO_CIPHER_MODE_CBC,
101         .key = "2b7e151628aed2a6abf7158809cf4f3c",
102         .iv = "000102030405060708090a0b0c0d0e0f",
103         .plaintext  =
104             "6bc1bee22e409f96e93d7e117393172a"
105             "ae2d8a571e03ac9c9eb76fac45af8e51"
106             "30c81c46a35ce411e5fbc1191a0a52ef"
107             "f69f2445df4f9b17ad2b417be66c3710",
108         .ciphertext =
109             "7649abac8119b246cee98e9b12e9197d"
110             "5086cb9b507219ee95db113a917678b2"
111             "73bed6b8e3c1743b7116e69e22229516"
112             "3ff1caa1681fac09120eca307586e1a7",
113     },
114     {
115         /* NIST F.2.3 CBC-AES128.Encrypt */
116         .path = "/crypto/cipher/aes-cbc-192",
117         .alg = QCRYPTO_CIPHER_ALG_AES_192,
118         .mode = QCRYPTO_CIPHER_MODE_CBC,
119         .key = "8e73b0f7da0e6452c810f32b809079e562f8ead2522c6b7b",
120         .iv = "000102030405060708090a0b0c0d0e0f",
121         .plaintext  =
122             "6bc1bee22e409f96e93d7e117393172a"
123             "ae2d8a571e03ac9c9eb76fac45af8e51"
124             "30c81c46a35ce411e5fbc1191a0a52ef"
125             "f69f2445df4f9b17ad2b417be66c3710",
126         .ciphertext =
127             "4f021db243bc633d7178183a9fa071e8"
128             "b4d9ada9ad7dedf4e5e738763f69145a"
129             "571b242012fb7ae07fa9baac3df102e0"
130             "08b0e27988598881d920a9e64f5615cd",
131     },
132     {
133         /* NIST F.2.5 CBC-AES128.Encrypt */
134         .path = "/crypto/cipher/aes-cbc-256",
135         .alg = QCRYPTO_CIPHER_ALG_AES_256,
136         .mode = QCRYPTO_CIPHER_MODE_CBC,
137         .key =
138             "603deb1015ca71be2b73aef0857d7781"
139             "1f352c073b6108d72d9810a30914dff4",
140         .iv = "000102030405060708090a0b0c0d0e0f",
141         .plaintext  =
142             "6bc1bee22e409f96e93d7e117393172a"
143             "ae2d8a571e03ac9c9eb76fac45af8e51"
144             "30c81c46a35ce411e5fbc1191a0a52ef"
145             "f69f2445df4f9b17ad2b417be66c3710",
146         .ciphertext =
147             "f58c4c04d6e5f1ba779eabfb5f7bfbd6"
148             "9cfc4e967edb808d679f777bc6702c7d"
149             "39f23369a9d9bacfa530e26304231461"
150             "b2eb05e2c39be9fcda6c19078c6a9d1b",
151     },
152     {
153         /*
154          * Testing 'password' as plaintext fits
155          * in single AES block, and gives identical
156          * ciphertext in ECB and CBC modes
157          */
158         .path = "/crypto/cipher/des-ecb-56-one-block",
159         .alg = QCRYPTO_CIPHER_ALG_DES,
160         .mode = QCRYPTO_CIPHER_MODE_ECB,
161         .key = "80c4a2e691d5b3f7",
162         .plaintext = "70617373776f7264",
163         .ciphertext = "73fa80b66134e403",
164     },
165     {
166         /* See previous comment */
167         .path = "/crypto/cipher/des-cbc-56-one-block",
168         .alg = QCRYPTO_CIPHER_ALG_DES,
169         .mode = QCRYPTO_CIPHER_MODE_CBC,
170         .key = "80c4a2e691d5b3f7",
171         .iv = "0000000000000000",
172         .plaintext = "70617373776f7264",
173         .ciphertext = "73fa80b66134e403",
174     },
175     {
176         .path = "/crypto/cipher/des-ecb-56",
177         .alg = QCRYPTO_CIPHER_ALG_DES,
178         .mode = QCRYPTO_CIPHER_MODE_ECB,
179         .key = "80c4a2e691d5b3f7",
180         .plaintext =
181             "6bc1bee22e409f96e93d7e117393172a"
182             "ae2d8a571e03ac9c9eb76fac45af8e51"
183             "30c81c46a35ce411e5fbc1191a0a52ef"
184             "f69f2445df4f9b17ad2b417be66c3710",
185         .ciphertext =
186             "8f346aaf64eaf24040720d80648c52e7"
187             "aefc616be53ab1a3d301e69d91e01838"
188             "ffd29f1bb5596ad94ea2d8e6196b7f09"
189             "30d8ed0bf2773af36dd82a6280c20926",
190     },
191     {
192         /* Borrowed from linux-kernel crypto/testmgr.h */
193         .path = "/crypto/cipher/3des-cbc",
194         .alg = QCRYPTO_CIPHER_ALG_3DES,
195         .mode = QCRYPTO_CIPHER_MODE_CBC,
196         .key =
197             "e9c0ff2e760b6424444d995a12d640c0"
198             "eac284e81495dbe8",
199         .iv =
200             "7d3388930f93b242",
201         .plaintext =
202             "6f54206f614d796e5320636565727374"
203             "54206f6f4d206e612079655372637465"
204             "20736f54206f614d796e532063656572"
205             "737454206f6f4d206e61207965537263"
206             "746520736f54206f614d796e53206365"
207             "6572737454206f6f4d206e6120796553"
208             "7263746520736f54206f614d796e5320"
209             "63656572737454206f6f4d206e610a79",
210         .ciphertext =
211             "0e2db6973c5633f4671721c76e8ad549"
212             "74b34905c51cd0ed12565c5396b6007d"
213             "9048fcf58d2939cc8ad5351836234ed7"
214             "76d1da0c9467bb048bf2036ca8cfb6ea"
215             "226447aa8f7513bf9fc2c3f0c956c57a"
216             "71632e897b1e12cae25fafd8a4f8c97a"
217             "d6f92131624445a6d6bc5ad32d5443cc"
218             "9ddea570e942458a6bfab19113b0d919",
219     },
220     {
221         /* Borrowed from linux-kernel crypto/testmgr.h */
222         .path = "/crypto/cipher/3des-ecb",
223         .alg = QCRYPTO_CIPHER_ALG_3DES,
224         .mode = QCRYPTO_CIPHER_MODE_ECB,
225         .key =
226             "0123456789abcdef5555555555555555"
227             "fedcba9876543210",
228         .plaintext =
229             "736f6d6564617461",
230         .ciphertext =
231             "18d748e563620572",
232     },
233     {
234         /* Borrowed from linux-kernel crypto/testmgr.h */
235         .path = "/crypto/cipher/3des-ctr",
236         .alg = QCRYPTO_CIPHER_ALG_3DES,
237         .mode = QCRYPTO_CIPHER_MODE_CTR,
238         .key =
239             "9cd6f39cb95a67005a67002dceeb2dce"
240             "ebb45172b451721f",
241         .iv =
242             "ffffffffffffffff",
243         .plaintext =
244             "05ec77fb42d559208b128669f05bcf56"
245             "39ad349f66ea7dc448d3ba0db118e34a"
246             "fe41285c278e11856cf75ec2553ca00b"
247             "9265e970db4fd6b900b41fe649fd442f"
248             "533a8d149863ca5dc1a833a70e9178ec"
249             "77de42d5bc078b12e54cf05b22563980"
250             "6b9f66c950c4af36ba0d947fe34add41"
251             "28b31a8e11f843f75e21553c876e9265"
252             "cc57dba235b900eb72e649d0442fb619"
253             "8d14ff46ca5d24a8339a6d9178c377de"
254             "a108bc07ee71e54cd75b22b51c806bf2"
255             "45c9503baf369960947fc64adda40fb3"
256             "1aed74f8432a5e218813876ef158cc57"
257             "3ea2359c67eb72c549d0bb02b619e04b"
258             "ff46295d248f169a6df45fc3aa3da108"
259             "937aee71d84cd7be01b51ce74ef2452c"
260             "503b82159960cb52c6a930a40f9679ed"
261             "74df432abd048813fa4df15823573e81"
262             "689c67ce51c5ac37bb02957ce04bd246"
263             "29b01b8f16f940f45f26aa3d846f937a"
264             "cd54d8a30abe01e873e74ed1452cb71e"
265             "8215fc47cb5225a9309b629679c074df"
266             "a609bd04ef76fa4dd458238a1d8168f3"
267             "5ace5138ac379e61957cc74bd2a50cb0"
268             "1be275f9402b5f268910846ff659cd54"
269             "3fa30a9d64e873da4ed1b803b71ee148"
270             "fc472e52258c179b62f55cc0ab32a609"
271             "907bef76d94dd4bf068a1de44ff35a2d"
272             "5138836a9e61c853c7ae31a50c977ee2"
273             "75dc402bb2058910fb42f65920543f86"
274             "699d64cf56daad34b803ea7de148d347",
275         .ciphertext =
276             "07c20820721f49ef19cd6f3253052215"
277             "a2852bdb85d2d8b9dd0d1b45cb6911d4"
278             "eabeb2455d0caebea0c127ac659f537e"
279             "afc21bb5b86d360c25c0f86d0b2901da"
280             "1378dc89121243faf612ef8d87627883"
281             "e2be41204c6d351bd10c30cfe2de2b03"
282             "bf4573d4e55995d1b39b276297bdde7f"
283             "a4d23980aa5023f074883da86a18793b"
284             "c4966c8d2240926ed6ad2a1fde63c0e7"
285             "07f72df7b5f3f0cc017c2a9bc210caaa"
286             "fd2b3fc5f3f6fc9b45db53e45bf3c97b"
287             "8e52ffc802b8ac9da10039da3d2d0e01"
288             "097d8d5ebe53b9b08ee7e2966ab278ea"
289             "de238ba5fa5ce3dabf8e316a55d16ab2"
290             "b5466fa5f0eeba1f9f98b0664fd03fa9"
291             "df5f58c4f4ff755c403a097e6e1c97d4"
292             "cce7e771cf0b150871fa0797cde6ca1d"
293             "14280ccf99137af1ebfafa9207de1da1"
294             "d33669fe514d9f2e83374f1f4830ed04"
295             "4da4ef3aca76f41c418f6337782f86a6"
296             "ef417ed2af88ab675271c38ef8269372"
297             "aad60ee70b46b13ab408a9a8a0cf200c"
298             "52bc8b0556b2bc319b74b92929969a50"
299             "dc45dc1aeb0c64d4d3057e5955c3f490"
300             "c2abf89b8adacea1c3f4ad77dd44c8ac"
301             "a3f1c9d2195cb0caa234c1f76cfdac65"
302             "32dc48c4f2006b77f17d76acc031632a"
303             "a53a62c891b10365cb43d106dfc367bc"
304             "dce0cd35ce4965a0527ba70d07a91bb0"
305             "407772c2ea0e3a7846b991b6e73d5142"
306             "fd51b0c62c6313785ceefccfc4700034",
307     },
308     {
309         /* RFC 2144, Appendix B.1 */
310         .path = "/crypto/cipher/cast5-128",
311         .alg = QCRYPTO_CIPHER_ALG_CAST5_128,
312         .mode = QCRYPTO_CIPHER_MODE_ECB,
313         .key = "0123456712345678234567893456789A",
314         .plaintext = "0123456789abcdef",
315         .ciphertext = "238b4fe5847e44b2",
316     },
317     {
318         /* libgcrypt serpent.c */
319         .path = "/crypto/cipher/serpent-128",
320         .alg = QCRYPTO_CIPHER_ALG_SERPENT_128,
321         .mode = QCRYPTO_CIPHER_MODE_ECB,
322         .key = "00000000000000000000000000000000",
323         .plaintext = "d29d576fcea3a3a7ed9099f29273d78e",
324         .ciphertext = "b2288b968ae8b08648d1ce9606fd992d",
325     },
326     {
327         /* libgcrypt serpent.c */
328         .path = "/crypto/cipher/serpent-192",
329         .alg = QCRYPTO_CIPHER_ALG_SERPENT_192,
330         .mode = QCRYPTO_CIPHER_MODE_ECB,
331         .key = "00000000000000000000000000000000"
332                "0000000000000000",
333         .plaintext = "d29d576fceaba3a7ed9899f2927bd78e",
334         .ciphertext = "130e353e1037c22405e8faefb2c3c3e9",
335     },
336     {
337         /* libgcrypt serpent.c */
338         .path = "/crypto/cipher/serpent-256a",
339         .alg = QCRYPTO_CIPHER_ALG_SERPENT_256,
340         .mode = QCRYPTO_CIPHER_MODE_ECB,
341         .key = "00000000000000000000000000000000"
342                "00000000000000000000000000000000",
343         .plaintext = "d095576fcea3e3a7ed98d9f29073d78e",
344         .ciphertext = "b90ee5862de69168f2bdd5125b45472b",
345     },
346     {
347         /* libgcrypt serpent.c */
348         .path = "/crypto/cipher/serpent-256b",
349         .alg = QCRYPTO_CIPHER_ALG_SERPENT_256,
350         .mode = QCRYPTO_CIPHER_MODE_ECB,
351         .key = "00000000000000000000000000000000"
352                "00000000000000000000000000000000",
353         .plaintext = "00000000010000000200000003000000",
354         .ciphertext = "2061a42782bd52ec691ec383b03ba77c",
355     },
356     {
357         /* Twofish paper "Known Answer Test" */
358         .path = "/crypto/cipher/twofish-128",
359         .alg = QCRYPTO_CIPHER_ALG_TWOFISH_128,
360         .mode = QCRYPTO_CIPHER_MODE_ECB,
361         .key = "d491db16e7b1c39e86cb086b789f5419",
362         .plaintext = "019f9809de1711858faac3a3ba20fbc3",
363         .ciphertext = "6363977de839486297e661c6c9d668eb",
364     },
365     {
366         /* Twofish paper "Known Answer Test", I=3 */
367         .path = "/crypto/cipher/twofish-192",
368         .alg = QCRYPTO_CIPHER_ALG_TWOFISH_192,
369         .mode = QCRYPTO_CIPHER_MODE_ECB,
370         .key = "88b2b2706b105e36b446bb6d731a1e88"
371                "efa71f788965bd44",
372         .plaintext = "39da69d6ba4997d585b6dc073ca341b2",
373         .ciphertext = "182b02d81497ea45f9daacdc29193a65",
374     },
375     {
376         /* Twofish paper "Known Answer Test", I=4 */
377         .path = "/crypto/cipher/twofish-256",
378         .alg = QCRYPTO_CIPHER_ALG_TWOFISH_256,
379         .mode = QCRYPTO_CIPHER_MODE_ECB,
380         .key = "d43bb7556ea32e46f2a282b7d45b4e0d"
381                "57ff739d4dc92c1bd7fc01700cc8216f",
382         .plaintext = "90afe91bb288544f2c32dc239b2635e6",
383         .ciphertext = "6cb4561c40bf0a9705931cb6d408e7fa",
384     },
385 #ifdef CONFIG_CRYPTO_SM4
386     {
387         /* SM4, GB/T 32907-2016, Appendix A.1 */
388         .path = "/crypto/cipher/sm4",
389         .alg = QCRYPTO_CIPHER_ALG_SM4,
390         .mode = QCRYPTO_CIPHER_MODE_ECB,
391         .key = "0123456789abcdeffedcba9876543210",
392         .plaintext  =
393             "0123456789abcdeffedcba9876543210",
394         .ciphertext =
395             "681edf34d206965e86b3e94f536e4246",
396     },
397 #endif
398     {
399         /* #1 32 byte key, 32 byte PTX */
400         .path = "/crypto/cipher/aes-xts-128-1",
401         .alg = QCRYPTO_CIPHER_ALG_AES_128,
402         .mode = QCRYPTO_CIPHER_MODE_XTS,
403         .key =
404             "00000000000000000000000000000000"
405             "00000000000000000000000000000000",
406         .iv =
407             "00000000000000000000000000000000",
408         .plaintext =
409             "00000000000000000000000000000000"
410             "00000000000000000000000000000000",
411         .ciphertext =
412             "917cf69ebd68b2ec9b9fe9a3eadda692"
413             "cd43d2f59598ed858c02c2652fbf922e",
414     },
415     {
416         /* #2, 32 byte key, 32 byte PTX */
417         .path = "/crypto/cipher/aes-xts-128-2",
418         .alg = QCRYPTO_CIPHER_ALG_AES_128,
419         .mode = QCRYPTO_CIPHER_MODE_XTS,
420         .key =
421             "11111111111111111111111111111111"
422             "22222222222222222222222222222222",
423         .iv =
424             "33333333330000000000000000000000",
425         .plaintext =
426             "44444444444444444444444444444444"
427             "44444444444444444444444444444444",
428         .ciphertext =
429             "c454185e6a16936e39334038acef838b"
430             "fb186fff7480adc4289382ecd6d394f0",
431     },
432     {
433         /* #5 from xts.7, 32 byte key, 32 byte PTX */
434         .path = "/crypto/cipher/aes-xts-128-3",
435         .alg = QCRYPTO_CIPHER_ALG_AES_128,
436         .mode = QCRYPTO_CIPHER_MODE_XTS,
437         .key =
438             "fffefdfcfbfaf9f8f7f6f5f4f3f2f1f0"
439             "bfbebdbcbbbab9b8b7b6b5b4b3b2b1b0",
440         .iv =
441             "9a785634120000000000000000000000",
442         .plaintext =
443             "44444444444444444444444444444444"
444             "44444444444444444444444444444444",
445         .ciphertext =
446             "b01f86f8edc1863706fa8a4253e34f28"
447             "af319de38334870f4dd1f94cbe9832f1",
448     },
449     {
450         /* #4, 32 byte key, 512 byte PTX  */
451         .path = "/crypto/cipher/aes-xts-128-4",
452         .alg = QCRYPTO_CIPHER_ALG_AES_128,
453         .mode = QCRYPTO_CIPHER_MODE_XTS,
454         .key =
455             "27182818284590452353602874713526"
456             "31415926535897932384626433832795",
457         .iv =
458             "00000000000000000000000000000000",
459         .plaintext =
460             "000102030405060708090a0b0c0d0e0f"
461             "101112131415161718191a1b1c1d1e1f"
462             "202122232425262728292a2b2c2d2e2f"
463             "303132333435363738393a3b3c3d3e3f"
464             "404142434445464748494a4b4c4d4e4f"
465             "505152535455565758595a5b5c5d5e5f"
466             "606162636465666768696a6b6c6d6e6f"
467             "707172737475767778797a7b7c7d7e7f"
468             "808182838485868788898a8b8c8d8e8f"
469             "909192939495969798999a9b9c9d9e9f"
470             "a0a1a2a3a4a5a6a7a8a9aaabacadaeaf"
471             "b0b1b2b3b4b5b6b7b8b9babbbcbdbebf"
472             "c0c1c2c3c4c5c6c7c8c9cacbcccdcecf"
473             "d0d1d2d3d4d5d6d7d8d9dadbdcdddedf"
474             "e0e1e2e3e4e5e6e7e8e9eaebecedeeef"
475             "f0f1f2f3f4f5f6f7f8f9fafbfcfdfeff"
476             "000102030405060708090a0b0c0d0e0f"
477             "101112131415161718191a1b1c1d1e1f"
478             "202122232425262728292a2b2c2d2e2f"
479             "303132333435363738393a3b3c3d3e3f"
480             "404142434445464748494a4b4c4d4e4f"
481             "505152535455565758595a5b5c5d5e5f"
482             "606162636465666768696a6b6c6d6e6f"
483             "707172737475767778797a7b7c7d7e7f"
484             "808182838485868788898a8b8c8d8e8f"
485             "909192939495969798999a9b9c9d9e9f"
486             "a0a1a2a3a4a5a6a7a8a9aaabacadaeaf"
487             "b0b1b2b3b4b5b6b7b8b9babbbcbdbebf"
488             "c0c1c2c3c4c5c6c7c8c9cacbcccdcecf"
489             "d0d1d2d3d4d5d6d7d8d9dadbdcdddedf"
490             "e0e1e2e3e4e5e6e7e8e9eaebecedeeef"
491             "f0f1f2f3f4f5f6f7f8f9fafbfcfdfeff",
492         .ciphertext =
493             "27a7479befa1d476489f308cd4cfa6e2"
494             "a96e4bbe3208ff25287dd3819616e89c"
495             "c78cf7f5e543445f8333d8fa7f560000"
496             "05279fa5d8b5e4ad40e736ddb4d35412"
497             "328063fd2aab53e5ea1e0a9f332500a5"
498             "df9487d07a5c92cc512c8866c7e860ce"
499             "93fdf166a24912b422976146ae20ce84"
500             "6bb7dc9ba94a767aaef20c0d61ad0265"
501             "5ea92dc4c4e41a8952c651d33174be51"
502             "a10c421110e6d81588ede82103a252d8"
503             "a750e8768defffed9122810aaeb99f91"
504             "72af82b604dc4b8e51bcb08235a6f434"
505             "1332e4ca60482a4ba1a03b3e65008fc5"
506             "da76b70bf1690db4eae29c5f1badd03c"
507             "5ccf2a55d705ddcd86d449511ceb7ec3"
508             "0bf12b1fa35b913f9f747a8afd1b130e"
509             "94bff94effd01a91735ca1726acd0b19"
510             "7c4e5b03393697e126826fb6bbde8ecc"
511             "1e08298516e2c9ed03ff3c1b7860f6de"
512             "76d4cecd94c8119855ef5297ca67e9f3"
513             "e7ff72b1e99785ca0a7e7720c5b36dc6"
514             "d72cac9574c8cbbc2f801e23e56fd344"
515             "b07f22154beba0f08ce8891e643ed995"
516             "c94d9a69c9f1b5f499027a78572aeebd"
517             "74d20cc39881c213ee770b1010e4bea7"
518             "18846977ae119f7a023ab58cca0ad752"
519             "afe656bb3c17256a9f6e9bf19fdd5a38"
520             "fc82bbe872c5539edb609ef4f79c203e"
521             "bb140f2e583cb2ad15b4aa5b655016a8"
522             "449277dbd477ef2c8d6c017db738b18d"
523             "eb4a427d1923ce3ff262735779a418f2"
524             "0a282df920147beabe421ee5319d0568",
525     },
526     {
527         /* Bad config - cast5-128 has 8 byte block size
528          * which is incompatible with XTS
529          */
530         .path = "/crypto/cipher/cast5-xts-128",
531         .alg = QCRYPTO_CIPHER_ALG_CAST5_128,
532         .mode = QCRYPTO_CIPHER_MODE_XTS,
533         .key =
534             "27182818284590452353602874713526"
535             "31415926535897932384626433832795",
536     },
537     {
538         /* NIST F.5.1 CTR-AES128.Encrypt */
539         .path = "/crypto/cipher/aes-ctr-128",
540         .alg = QCRYPTO_CIPHER_ALG_AES_128,
541         .mode = QCRYPTO_CIPHER_MODE_CTR,
542         .key = "2b7e151628aed2a6abf7158809cf4f3c",
543         .iv = "f0f1f2f3f4f5f6f7f8f9fafbfcfdfeff",
544         .plaintext  =
545             "6bc1bee22e409f96e93d7e117393172a"
546             "ae2d8a571e03ac9c9eb76fac45af8e51"
547             "30c81c46a35ce411e5fbc1191a0a52ef"
548             "f69f2445df4f9b17ad2b417be66c3710",
549         .ciphertext =
550             "874d6191b620e3261bef6864990db6ce"
551             "9806f66b7970fdff8617187bb9fffdff"
552             "5ae4df3edbd5d35e5b4f09020db03eab"
553             "1e031dda2fbe03d1792170a0f3009cee",
554     },
555     {
556         /* NIST F.5.3 CTR-AES192.Encrypt */
557         .path = "/crypto/cipher/aes-ctr-192",
558         .alg = QCRYPTO_CIPHER_ALG_AES_192,
559         .mode = QCRYPTO_CIPHER_MODE_CTR,
560         .key = "8e73b0f7da0e6452c810f32b809079e562f8ead2522c6b7b",
561         .iv = "f0f1f2f3f4f5f6f7f8f9fafbfcfdfeff",
562         .plaintext  =
563             "6bc1bee22e409f96e93d7e117393172a"
564             "ae2d8a571e03ac9c9eb76fac45af8e51"
565             "30c81c46a35ce411e5fbc1191a0a52ef"
566             "f69f2445df4f9b17ad2b417be66c3710",
567         .ciphertext =
568             "1abc932417521ca24f2b0459fe7e6e0b"
569             "090339ec0aa6faefd5ccc2c6f4ce8e94"
570             "1e36b26bd1ebc670d1bd1d665620abf7"
571             "4f78a7f6d29809585a97daec58c6b050",
572     },
573     {
574         /* NIST F.5.5 CTR-AES256.Encrypt */
575         .path = "/crypto/cipher/aes-ctr-256",
576         .alg = QCRYPTO_CIPHER_ALG_AES_256,
577         .mode = QCRYPTO_CIPHER_MODE_CTR,
578         .key = "603deb1015ca71be2b73aef0857d7781"
579                "1f352c073b6108d72d9810a30914dff4",
580         .iv = "f0f1f2f3f4f5f6f7f8f9fafbfcfdfeff",
581         .plaintext  =
582             "6bc1bee22e409f96e93d7e117393172a"
583             "ae2d8a571e03ac9c9eb76fac45af8e51"
584             "30c81c46a35ce411e5fbc1191a0a52ef"
585             "f69f2445df4f9b17ad2b417be66c3710",
586         .ciphertext =
587             "601ec313775789a5b7a7f504bbf3d228"
588             "f443e3ca4d62b59aca84e990cacaf5c5"
589             "2b0930daa23de94ce87017ba2d84988d"
590             "dfc9c58db67aada613c2dd08457941a6",
591     }
592 };
593 
594 
595 static inline int unhex(char c)
596 {
597     if (c >= 'a' && c <= 'f') {
598         return 10 + (c - 'a');
599     }
600     if (c >= 'A' && c <= 'F') {
601         return 10 + (c - 'A');
602     }
603     return c - '0';
604 }
605 
606 static inline char hex(int i)
607 {
608     if (i < 10) {
609         return '0' + i;
610     }
611     return 'a' + (i - 10);
612 }
613 
614 static size_t unhex_string(const char *hexstr,
615                            uint8_t **data)
616 {
617     size_t len;
618     size_t i;
619 
620     if (!hexstr) {
621         *data = NULL;
622         return 0;
623     }
624 
625     len = strlen(hexstr);
626     *data = g_new0(uint8_t, len / 2);
627 
628     for (i = 0; i < len; i += 2) {
629         (*data)[i/2] = (unhex(hexstr[i]) << 4) | unhex(hexstr[i+1]);
630     }
631     return len / 2;
632 }
633 
634 static char *hex_string(const uint8_t *bytes,
635                         size_t len)
636 {
637     char *hexstr = g_new0(char, len * 2 + 1);
638     size_t i;
639 
640     for (i = 0; i < len; i++) {
641         hexstr[i*2] = hex((bytes[i] >> 4) & 0xf);
642         hexstr[i*2+1] = hex(bytes[i] & 0xf);
643     }
644     hexstr[len*2] = '\0';
645 
646     return hexstr;
647 }
648 
649 static void test_cipher(const void *opaque)
650 {
651     const QCryptoCipherTestData *data = opaque;
652 
653     QCryptoCipher *cipher;
654     uint8_t *key, *iv = NULL, *ciphertext = NULL,
655         *plaintext = NULL, *outtext = NULL;
656     size_t nkey, niv = 0, nciphertext = 0, nplaintext = 0;
657     char *outtexthex = NULL;
658     size_t ivsize, keysize, blocksize;
659     Error *err = NULL;
660 
661     nkey = unhex_string(data->key, &key);
662     if (data->iv) {
663         niv = unhex_string(data->iv, &iv);
664     }
665     if (data->ciphertext) {
666         nciphertext = unhex_string(data->ciphertext, &ciphertext);
667     }
668     if (data->plaintext) {
669         nplaintext = unhex_string(data->plaintext, &plaintext);
670     }
671 
672     g_assert(nciphertext == nplaintext);
673 
674     outtext = g_new0(uint8_t, nciphertext);
675 
676     cipher = qcrypto_cipher_new(
677         data->alg, data->mode,
678         key, nkey,
679         &err);
680     if (data->plaintext) {
681         g_assert(err == NULL);
682         g_assert(cipher != NULL);
683     } else {
684         error_free_or_abort(&err);
685         g_assert(cipher == NULL);
686         goto cleanup;
687     }
688 
689     keysize = qcrypto_cipher_get_key_len(data->alg);
690     blocksize = qcrypto_cipher_get_block_len(data->alg);
691     ivsize = qcrypto_cipher_get_iv_len(data->alg, data->mode);
692 
693     if (data->mode == QCRYPTO_CIPHER_MODE_XTS) {
694         g_assert_cmpint(keysize * 2, ==, nkey);
695     } else {
696         g_assert_cmpint(keysize, ==, nkey);
697     }
698     g_assert_cmpint(ivsize, ==, niv);
699     if (niv) {
700         g_assert_cmpint(blocksize, ==, niv);
701     }
702 
703     if (iv) {
704         g_assert(qcrypto_cipher_setiv(cipher,
705                                       iv, niv,
706                                       &error_abort) == 0);
707     }
708     g_assert(qcrypto_cipher_encrypt(cipher,
709                                     plaintext,
710                                     outtext,
711                                     nplaintext,
712                                     &error_abort) == 0);
713 
714     outtexthex = hex_string(outtext, nciphertext);
715 
716     g_assert_cmpstr(outtexthex, ==, data->ciphertext);
717 
718     g_free(outtexthex);
719 
720     if (iv) {
721         g_assert(qcrypto_cipher_setiv(cipher,
722                                       iv, niv,
723                                       &error_abort) == 0);
724     }
725     g_assert(qcrypto_cipher_decrypt(cipher,
726                                     ciphertext,
727                                     outtext,
728                                     nplaintext,
729                                     &error_abort) == 0);
730 
731     outtexthex = hex_string(outtext, nplaintext);
732 
733     g_assert_cmpstr(outtexthex, ==, data->plaintext);
734 
735  cleanup:
736     g_free(outtext);
737     g_free(outtexthex);
738     g_free(key);
739     g_free(iv);
740     g_free(ciphertext);
741     g_free(plaintext);
742     qcrypto_cipher_free(cipher);
743 }
744 
745 
746 static void test_cipher_null_iv(void)
747 {
748     QCryptoCipher *cipher;
749     uint8_t key[32] = { 0 };
750     uint8_t plaintext[32] = { 0 };
751     uint8_t ciphertext[32] = { 0 };
752 
753     cipher = qcrypto_cipher_new(
754         QCRYPTO_CIPHER_ALG_AES_256,
755         QCRYPTO_CIPHER_MODE_CBC,
756         key, sizeof(key),
757         &error_abort);
758     g_assert(cipher != NULL);
759 
760     /* Don't call qcrypto_cipher_setiv */
761 
762     qcrypto_cipher_encrypt(cipher,
763                            plaintext,
764                            ciphertext,
765                            sizeof(plaintext),
766                            &error_abort);
767 
768     qcrypto_cipher_free(cipher);
769 }
770 
771 static void test_cipher_short_plaintext(void)
772 {
773     Error *err = NULL;
774     QCryptoCipher *cipher;
775     uint8_t key[32] = { 0 };
776     uint8_t plaintext1[20] = { 0 };
777     uint8_t ciphertext1[20] = { 0 };
778     uint8_t plaintext2[40] = { 0 };
779     uint8_t ciphertext2[40] = { 0 };
780     int ret;
781 
782     cipher = qcrypto_cipher_new(
783         QCRYPTO_CIPHER_ALG_AES_256,
784         QCRYPTO_CIPHER_MODE_CBC,
785         key, sizeof(key),
786         &error_abort);
787     g_assert(cipher != NULL);
788 
789     /* Should report an error as plaintext is shorter
790      * than block size
791      */
792     ret = qcrypto_cipher_encrypt(cipher,
793                                  plaintext1,
794                                  ciphertext1,
795                                  sizeof(plaintext1),
796                                  &err);
797     g_assert(ret == -1);
798     error_free_or_abort(&err);
799 
800     /* Should report an error as plaintext is larger than
801      * block size, but not a multiple of block size
802      */
803     ret = qcrypto_cipher_encrypt(cipher,
804                                  plaintext2,
805                                  ciphertext2,
806                                  sizeof(plaintext2),
807                                  &err);
808     g_assert(ret == -1);
809     error_free_or_abort(&err);
810 
811     qcrypto_cipher_free(cipher);
812 }
813 
814 int main(int argc, char **argv)
815 {
816     size_t i;
817 
818     g_test_init(&argc, &argv, NULL);
819 
820     g_assert(qcrypto_init(NULL) == 0);
821 
822     for (i = 0; i < G_N_ELEMENTS(test_data); i++) {
823         if (qcrypto_cipher_supports(test_data[i].alg, test_data[i].mode)) {
824             g_test_add_data_func(test_data[i].path, &test_data[i], test_cipher);
825         }
826     }
827 
828     g_test_add_func("/crypto/cipher/null-iv",
829                     test_cipher_null_iv);
830 
831     g_test_add_func("/crypto/cipher/short-plaintext",
832                     test_cipher_short_plaintext);
833 
834     return g_test_run();
835 }
836