1cd964fceSMatt Barden /*
2cd964fceSMatt Barden  * This file and its contents are supplied under the terms of the
3cd964fceSMatt Barden  * Common Development and Distribution License ("CDDL"), version 1.0.
4cd964fceSMatt Barden  * You may only use this file in accordance with the terms of version
5cd964fceSMatt Barden  * 1.0 of the CDDL.
6cd964fceSMatt Barden  *
7cd964fceSMatt Barden  * A full copy of the text of the CDDL should have accompanied this
8cd964fceSMatt Barden  * source.  A copy of the CDDL is also available via the Internet at
9cd964fceSMatt Barden  * http://www.illumos.org/license/CDDL.
10cd964fceSMatt Barden  */
11cd964fceSMatt Barden 
12cd964fceSMatt Barden /*
13cd964fceSMatt Barden  * Copyright 2015 Nexenta Systems, Inc.  All rights reserved.
14*77de87d2SJason King  * Copyright 2019 Joyent, Inc.
15cd964fceSMatt Barden  */
16cd964fceSMatt Barden 
17*77de87d2SJason King #include <aes/aes_impl.h>
18cd964fceSMatt Barden #include <strings.h>
19cd964fceSMatt Barden #include <stdio.h>
20fb261280SJason King #include <sys/debug.h>
21cd964fceSMatt Barden #include "cryptotest.h"
22cd964fceSMatt Barden #include "aes_ccm.h"
23cd964fceSMatt Barden 
24fb261280SJason King /*
25fb261280SJason King  * Size of param (in 8-byte chunks for alignment) large enough for both
26fb261280SJason King  * CK_CCM_PARAMS and CK_AES_CCM_PARAMS.
27fb261280SJason King  */
28fb261280SJason King #define	PARAM_SIZE_64 8
29fb261280SJason King 
30*77de87d2SJason King static size_t updatelens[] = {
31*77de87d2SJason King 	1, AES_BLOCK_LEN, AES_BLOCK_LEN + 1, 2*AES_BLOCK_LEN,
32*77de87d2SJason King 	CTEST_UPDATELEN_WHOLE, CTEST_UPDATELEN_END
33*77de87d2SJason King };
34*77de87d2SJason King 
35cd964fceSMatt Barden int
main(void)36cd964fceSMatt Barden main(void)
37cd964fceSMatt Barden {
38cd964fceSMatt Barden 	int errs = 0;
39cd964fceSMatt Barden 	int i;
40cd964fceSMatt Barden 	uint8_t N[1024];
41fb261280SJason King 	uint64_t param[PARAM_SIZE_64];
42cd964fceSMatt Barden 
43*77de87d2SJason King 	cryptotest_t args = {
44*77de87d2SJason King 		.out = N,
45*77de87d2SJason King 		.outlen = sizeof (N),
46*77de87d2SJason King 		.mechname = SUN_CKM_AES_CCM,
47*77de87d2SJason King 		.updatelens = updatelens
48*77de87d2SJason King 	};
49cd964fceSMatt Barden 
50cd964fceSMatt Barden 	args.key = CCM_KEY1;
51cd964fceSMatt Barden 	args.keylen = sizeof (CCM_KEY1);
52cd964fceSMatt Barden 	for (i = 0; i < 12; i++) {
53fb261280SJason King 		bzero(param, sizeof (param));
54fb261280SJason King 		ccm_init_params(param, DATALEN[i] - AUTHLEN[i], NONCE[i],
55fb261280SJason King 		    NONCELEN[i], CCM_DATA1, AUTHLEN[i], MACLEN[i]);
56fb261280SJason King 
57fb261280SJason King 		args.param = param;
58fb261280SJason King 		args.plen = ccm_param_len();
59fb261280SJason King 
60fb261280SJason King 		VERIFY3U(args.plen, <=, sizeof (param));
61cd964fceSMatt Barden 
62cd964fceSMatt Barden 		args.in = CCM_DATA1 + AUTHLEN[i];
63cd964fceSMatt Barden 		args.inlen = DATALEN[i] - AUTHLEN[i];
64cd964fceSMatt Barden 
65cd964fceSMatt Barden 		errs += run_test(&args, RES[i] + AUTHLEN[i],
66cd964fceSMatt Barden 		    RESLEN[i] - AUTHLEN[i], ENCR_FG);
67cd964fceSMatt Barden 		(void) fprintf(stderr, "----------\n");
68cd964fceSMatt Barden 	}
69cd964fceSMatt Barden 
70cd964fceSMatt Barden 	args.key = CCM_KEY2;
71cd964fceSMatt Barden 	args.keylen = sizeof (CCM_KEY2);
72cd964fceSMatt Barden 	for (i = 12; i < 24; i++) {
73fb261280SJason King 		bzero(param, sizeof (param));
74fb261280SJason King 		ccm_init_params(param, DATALEN[i] - AUTHLEN[i], NONCE[i],
75fb261280SJason King 		    NONCELEN[i], DATA_2[i-12], AUTHLEN[i], MACLEN[i]);
76fb261280SJason King 
77fb261280SJason King 		args.param = param;
78fb261280SJason King 		args.plen = ccm_param_len();
79fb261280SJason King 
80fb261280SJason King 		VERIFY3U(args.plen, <=, sizeof (param));
81cd964fceSMatt Barden 
82cd964fceSMatt Barden 		args.in = DATA_2[i-12] + AUTHLEN[i];
83cd964fceSMatt Barden 		args.inlen = DATALEN[i] - AUTHLEN[i];
84cd964fceSMatt Barden 
85cd964fceSMatt Barden 		errs += run_test(&args, RES[i] + AUTHLEN[i],
86cd964fceSMatt Barden 		    RESLEN[i] - AUTHLEN[i], ENCR_FG);
87cd964fceSMatt Barden 		(void) fprintf(stderr, "----------\n");
88cd964fceSMatt Barden 	}
89cd964fceSMatt Barden 
90cd964fceSMatt Barden 	(void) fprintf(stderr, "\t\t\t=== decrypt ===\n----------\n\n");
91cd964fceSMatt Barden 
92cd964fceSMatt Barden 	args.key = CCM_KEY1;
93cd964fceSMatt Barden 	args.keylen = sizeof (CCM_KEY1);
94cd964fceSMatt Barden 	for (i = 0; i < 12; i++) {
95fb261280SJason King 		bzero(param, sizeof (param));
96fb261280SJason King 		ccm_init_params(param, RESLEN[i] - AUTHLEN[i], NONCE[i],
97fb261280SJason King 		    NONCELEN[i], CCM_DATA1, AUTHLEN[i], MACLEN[i]);
98fb261280SJason King 
99fb261280SJason King 		args.param = param;
100fb261280SJason King 		args.plen = ccm_param_len();
101fb261280SJason King 
102fb261280SJason King 		VERIFY3U(args.plen, <=, sizeof (param));
103cd964fceSMatt Barden 
104cd964fceSMatt Barden 		args.in = RES[i] + AUTHLEN[i];
105cd964fceSMatt Barden 		args.inlen = RESLEN[i] - AUTHLEN[i];
106cd964fceSMatt Barden 
107cd964fceSMatt Barden 		errs += run_test(&args, CCM_DATA1 + AUTHLEN[i],
108cd964fceSMatt Barden 		    DATALEN[i] - AUTHLEN[i], DECR_FG);
109cd964fceSMatt Barden 		(void) fprintf(stderr, "----------\n");
110cd964fceSMatt Barden 	}
111cd964fceSMatt Barden 
112cd964fceSMatt Barden 	args.key = CCM_KEY2;
113cd964fceSMatt Barden 	args.keylen = sizeof (CCM_KEY2);
114cd964fceSMatt Barden 	for (i = 12; i < 24; i++) {
115fb261280SJason King 		bzero(param, sizeof (param));
116fb261280SJason King 		ccm_init_params(param, RESLEN[i] - AUTHLEN[i], NONCE[i],
117fb261280SJason King 		    NONCELEN[i], DATA_2[i-12], AUTHLEN[i], MACLEN[i]);
118fb261280SJason King 
119fb261280SJason King 		args.param = param;
120fb261280SJason King 		args.plen = ccm_param_len();
121fb261280SJason King 
122fb261280SJason King 		VERIFY3U(args.plen, <=, sizeof (param));
123cd964fceSMatt Barden 
124cd964fceSMatt Barden 		args.in = RES[i] + AUTHLEN[i];
125cd964fceSMatt Barden 		args.inlen = RESLEN[i] - AUTHLEN[i];
126cd964fceSMatt Barden 
127cd964fceSMatt Barden 		errs += run_test(&args, DATA_2[i-12] + AUTHLEN[i],
128cd964fceSMatt Barden 		    DATALEN[i] - AUTHLEN[i], ENCR_FG);
129cd964fceSMatt Barden 		(void) fprintf(stderr, "----------\n");
130cd964fceSMatt Barden 	}
131cd964fceSMatt Barden 
132cd964fceSMatt Barden 	if (errs != 0)
133cd964fceSMatt Barden 		(void) fprintf(stderr, "%d tests failed\n", errs);
134cd964fceSMatt Barden 
135cd964fceSMatt Barden 	return (errs);
136cd964fceSMatt Barden }
137