823 lines
18 KiB
C
823 lines
18 KiB
C
/* ====================================================================
|
|
* Copyright (c) 2004 The OpenSSL Project. All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
*
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
*
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in
|
|
* the documentation and/or other materials provided with the
|
|
* distribution.
|
|
*
|
|
* 3. All advertising materials mentioning features or use of this
|
|
* software must display the following acknowledgment:
|
|
* "This product includes software developed by the OpenSSL Project
|
|
* for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
|
|
*
|
|
* 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
|
|
* endorse or promote products derived from this software without
|
|
* prior written permission. For written permission, please contact
|
|
* openssl-core@openssl.org.
|
|
*
|
|
* 5. Products derived from this software may not be called "OpenSSL"
|
|
* nor may "OpenSSL" appear in their names without prior written
|
|
* permission of the OpenSSL Project.
|
|
*
|
|
* 6. Redistributions of any form whatsoever must retain the following
|
|
* acknowledgment:
|
|
* "This product includes software developed by the OpenSSL Project
|
|
* for use in the OpenSSL Toolkit (http://www.openssl.org/)"
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
|
|
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
|
|
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
|
|
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
|
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
|
|
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
|
|
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
|
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
|
|
* OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
*
|
|
*/
|
|
/*---------------------------------------------
|
|
NIST DES Modes of Operation Validation System
|
|
Test Program
|
|
|
|
Based on the AES Validation Suite, which was:
|
|
Donated to OpenSSL by:
|
|
V-ONE Corporation
|
|
20250 Century Blvd, Suite 300
|
|
Germantown, MD 20874
|
|
U.S.A.
|
|
----------------------------------------------*/
|
|
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <errno.h>
|
|
#include <assert.h>
|
|
#include <ctype.h>
|
|
|
|
#include <openssl/des.h>
|
|
#include <openssl/evp.h>
|
|
#include <openssl/fips.h>
|
|
#include <openssl/err.h>
|
|
#include "e_os.h"
|
|
|
|
#ifndef OPENSSL_FIPS
|
|
|
|
int main(int argc, char *argv[])
|
|
{
|
|
printf("No FIPS DES support\n");
|
|
return(0);
|
|
}
|
|
|
|
#else
|
|
|
|
#include "fips_utl.h"
|
|
|
|
#define DES_BLOCK_SIZE 8
|
|
|
|
#define VERBOSE 0
|
|
|
|
typedef struct
|
|
{
|
|
DES_key_schedule ks1, ks2, ks3;
|
|
unsigned char tiv[DES_BLOCK_SIZE];
|
|
int dir, cmode, cbits, num, akeysz;
|
|
} DES_CTX;
|
|
|
|
/*-----------------------------------------------*/
|
|
|
|
int DES_Cipher(DES_CTX *ctx,
|
|
unsigned char *out,
|
|
unsigned char *in,
|
|
int inl)
|
|
{
|
|
|
|
unsigned long len = inl;
|
|
|
|
DES_cblock *iv = (DES_cblock *)ctx->tiv;
|
|
|
|
switch(ctx->cmode)
|
|
{
|
|
case EVP_CIPH_ECB_MODE:
|
|
while (len > 0)
|
|
{
|
|
if (ctx->akeysz == 64)
|
|
DES_ecb_encrypt((DES_cblock *)in,
|
|
(DES_cblock *)out,
|
|
&ctx->ks1, ctx->dir);
|
|
else
|
|
DES_ecb3_encrypt((const_DES_cblock *)in,
|
|
(DES_cblock *)out,
|
|
&ctx->ks1,
|
|
&ctx->ks2,
|
|
&ctx->ks3,
|
|
ctx->dir);
|
|
in += DES_BLOCK_SIZE;
|
|
out += DES_BLOCK_SIZE;
|
|
len -= DES_BLOCK_SIZE;
|
|
}
|
|
break;
|
|
|
|
case EVP_CIPH_CBC_MODE:
|
|
if (ctx->akeysz == 64)
|
|
DES_ncbc_encrypt(in, out, len, &ctx->ks1, iv, ctx->dir);
|
|
else
|
|
DES_ede3_cbc_encrypt(in, out, len,
|
|
&ctx->ks1, &ctx->ks2, &ctx->ks3,
|
|
iv, ctx->dir);
|
|
break;
|
|
|
|
case EVP_CIPH_CFB_MODE:
|
|
#if 0
|
|
if (ctx->cbits == 1)
|
|
{
|
|
if (ctx->akeysz == 64)
|
|
DES_cfb64_encrypt(in, out, len,
|
|
&ctx->ks1, iv,
|
|
&ctx->num, ctx->dir);
|
|
else
|
|
DES_ede3_cfb64_encrypt(in, out, len,
|
|
&ctx->ks1,
|
|
&ctx->ks2,
|
|
&ctx->ks3, iv,
|
|
&ctx->num, ctx->dir);
|
|
}
|
|
else
|
|
#endif
|
|
if (ctx->cbits == 8)
|
|
{
|
|
if (ctx->akeysz == 64)
|
|
DES_cfb_encrypt(in, out, 8, len,
|
|
&ctx->ks1, iv, ctx->dir);
|
|
else
|
|
DES_ede3_cfb_encrypt(in, out, 8, len,
|
|
&ctx->ks1,
|
|
&ctx->ks2,
|
|
&ctx->ks3, iv, ctx->dir);
|
|
}
|
|
else if (ctx->cbits == 64)
|
|
{
|
|
if (ctx->akeysz == 64)
|
|
DES_cfb64_encrypt(in, out, len,
|
|
&ctx->ks1, iv,
|
|
&ctx->num, ctx->dir);
|
|
else
|
|
DES_ede3_cfb64_encrypt(in, out, len,
|
|
&ctx->ks1,
|
|
&ctx->ks2,
|
|
&ctx->ks3, iv,
|
|
&ctx->num, ctx->dir);
|
|
}
|
|
break;
|
|
|
|
case EVP_CIPH_OFB_MODE:
|
|
if (ctx->akeysz == 64)
|
|
DES_ofb64_encrypt(in, out, len, &ctx->ks1, iv,
|
|
&ctx->num);
|
|
else
|
|
DES_ede3_ofb64_encrypt(in, out, len,
|
|
&ctx->ks1, &ctx->ks2, &ctx->ks3,
|
|
iv, &ctx->num);
|
|
|
|
break;
|
|
|
|
default:
|
|
return 0;
|
|
|
|
}
|
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
int DESTest(DES_CTX *ctx,
|
|
char *amode, int akeysz, unsigned char *aKey,
|
|
unsigned char *iVec,
|
|
int dir, /* 0 = decrypt, 1 = encrypt */
|
|
unsigned char *out, unsigned char *in, int len)
|
|
{
|
|
DES_cblock *deskey = (DES_cblock *)aKey;
|
|
ctx->cmode = -1;
|
|
ctx->cbits = -1;
|
|
ctx->dir = dir;
|
|
ctx->num = 0;
|
|
|
|
if (strcasecmp(amode, "CBC") == 0)
|
|
ctx->cmode = EVP_CIPH_CBC_MODE;
|
|
else if (strcasecmp(amode, "ECB") == 0)
|
|
ctx->cmode = EVP_CIPH_ECB_MODE;
|
|
else if (strcasecmp(amode, "CFB64") == 0)
|
|
{
|
|
ctx->cbits = 64;
|
|
ctx->cmode = EVP_CIPH_CFB_MODE;
|
|
}
|
|
else if (strncasecmp(amode, "OFB", 3) == 0)
|
|
ctx->cmode = EVP_CIPH_OFB_MODE;
|
|
#if 0
|
|
else if(!strcasecmp(amode,"CFB1"))
|
|
{
|
|
ctx->cbits = 1;
|
|
ctx->cmode = EVP_CIPH_CFB_MODE;
|
|
}
|
|
#endif
|
|
else if(!strcasecmp(amode,"CFB8"))
|
|
{
|
|
ctx->cbits = 8;
|
|
ctx->cmode = EVP_CIPH_CFB_MODE;
|
|
}
|
|
else
|
|
{
|
|
printf("Unknown mode: %s\n", amode);
|
|
EXIT(1);
|
|
}
|
|
if (akeysz != 64 && akeysz != 192)
|
|
{
|
|
printf("Invalid key size: %d\n", akeysz);
|
|
EXIT(1);
|
|
}
|
|
else
|
|
{
|
|
ctx->akeysz = akeysz;
|
|
DES_set_key_unchecked(deskey, &ctx->ks1);
|
|
if(ctx->akeysz == 192)
|
|
{
|
|
DES_set_key_unchecked(deskey + 1, &ctx->ks2);
|
|
DES_set_key_unchecked(deskey + 2, &ctx->ks3);
|
|
}
|
|
if (iVec)
|
|
memcpy(ctx->tiv, iVec, DES_BLOCK_SIZE);
|
|
DES_Cipher(ctx, out, in, len);
|
|
}
|
|
return 1;
|
|
}
|
|
|
|
void DebugValue(char *tag, unsigned char *val, int len)
|
|
{
|
|
char obuf[2048];
|
|
int olen;
|
|
olen = bin2hex(val, len, obuf);
|
|
printf("%s = %.*s\n", tag, olen, obuf);
|
|
}
|
|
|
|
void shiftin(unsigned char *dst,unsigned char *src,int nbits)
|
|
{
|
|
int n;
|
|
|
|
/* move the bytes... */
|
|
memmove(dst,dst+nbits/8,3*8-nbits/8);
|
|
/* append new data */
|
|
memcpy(dst+3*8-nbits/8,src,(nbits+7)/8);
|
|
/* left shift the bits */
|
|
if(nbits%8)
|
|
for(n=0 ; n < 3*8 ; ++n)
|
|
dst[n]=(dst[n] << (nbits%8))|(dst[n+1] >> (8-nbits%8));
|
|
}
|
|
|
|
/*-----------------------------------------------*/
|
|
char *t_tag[2] = {"PLAINTEXT", "CIPHERTEXT"};
|
|
char *t_mode[6] = {"CBC","ECB","OFB","CFB1","CFB8","CFB64"};
|
|
enum Mode {CBC, ECB, OFB, CFB1, CFB8, CFB64};
|
|
int Sizes[6]={64,64,64,1,8,64};
|
|
|
|
void do_mct(char *amode,
|
|
int akeysz, int numkeys, unsigned char *akey,unsigned char *ivec,
|
|
int dir, unsigned char *text, int len,
|
|
FILE *rfp)
|
|
{
|
|
int i,imode;
|
|
unsigned char nk[4*8]; /* longest key+8 */
|
|
unsigned char text0[8];
|
|
|
|
for (imode=0 ; imode < 6 ; ++imode)
|
|
if(!strcmp(amode,t_mode[imode]))
|
|
break;
|
|
if (imode == 6)
|
|
{
|
|
printf("Unrecognized mode: %s\n", amode);
|
|
EXIT(1);
|
|
}
|
|
|
|
for(i=0 ; i < 400 ; ++i)
|
|
{
|
|
int j;
|
|
int n;
|
|
DES_CTX ctx;
|
|
int kp=akeysz/64;
|
|
unsigned char old_iv[8];
|
|
|
|
fprintf(rfp,"\nCOUNT = %d\n",i);
|
|
if(kp == 1)
|
|
OutputValue("KEY",akey,8,rfp,0);
|
|
else
|
|
for(n=0 ; n < kp ; ++n)
|
|
{
|
|
fprintf(rfp,"KEY%d",n+1);
|
|
OutputValue("",akey+n*8,8,rfp,0);
|
|
}
|
|
|
|
if(imode != ECB)
|
|
OutputValue("IV",ivec,8,rfp,0);
|
|
OutputValue(t_tag[dir^1],text,len,rfp,imode == CFB1);
|
|
|
|
/* compensate for endianness */
|
|
if(imode == CFB1)
|
|
text[0]<<=7;
|
|
|
|
memcpy(text0,text,8);
|
|
|
|
for(j=0 ; j < 10000 ; ++j)
|
|
{
|
|
unsigned char old_text[8];
|
|
|
|
memcpy(old_text,text,8);
|
|
if(j == 0)
|
|
{
|
|
memcpy(old_iv,ivec,8);
|
|
DESTest(&ctx,amode,akeysz,akey,ivec,dir,text,text,len);
|
|
}
|
|
else
|
|
{
|
|
memcpy(old_iv,ctx.tiv,8);
|
|
DES_Cipher(&ctx,text,text,len);
|
|
}
|
|
if(j == 9999)
|
|
{
|
|
OutputValue(t_tag[dir],text,len,rfp,imode == CFB1);
|
|
/* memcpy(ivec,text,8); */
|
|
}
|
|
/* DebugValue("iv",ctx.iv,8); */
|
|
/* accumulate material for the next key */
|
|
shiftin(nk,text,Sizes[imode]);
|
|
/* DebugValue("nk",nk,24);*/
|
|
if((dir && (imode == CFB1 || imode == CFB8 || imode == CFB64
|
|
|| imode == CBC)) || imode == OFB)
|
|
memcpy(text,old_iv,8);
|
|
|
|
if(!dir && (imode == CFB1 || imode == CFB8 || imode == CFB64))
|
|
{
|
|
/* the test specifies using the output of the raw DES operation
|
|
which we don't have, so reconstruct it... */
|
|
for(n=0 ; n < 8 ; ++n)
|
|
text[n]^=old_text[n];
|
|
}
|
|
}
|
|
for(n=0 ; n < 8 ; ++n)
|
|
akey[n]^=nk[16+n];
|
|
for(n=0 ; n < 8 ; ++n)
|
|
akey[8+n]^=nk[8+n];
|
|
for(n=0 ; n < 8 ; ++n)
|
|
akey[16+n]^=nk[n];
|
|
if(numkeys < 3)
|
|
memcpy(&akey[2*8],akey,8);
|
|
if(numkeys < 2)
|
|
memcpy(&akey[8],akey,8);
|
|
DES_set_odd_parity((DES_cblock *)akey);
|
|
DES_set_odd_parity((DES_cblock *)(akey+8));
|
|
DES_set_odd_parity((DES_cblock *)(akey+16));
|
|
memcpy(ivec,ctx.tiv,8);
|
|
|
|
/* pointless exercise - the final text doesn't depend on the
|
|
initial text in OFB mode, so who cares what it is? (Who
|
|
designed these tests?) */
|
|
if(imode == OFB)
|
|
for(n=0 ; n < 8 ; ++n)
|
|
text[n]=text0[n]^old_iv[n];
|
|
}
|
|
}
|
|
|
|
int proc_file(char *rqfile)
|
|
{
|
|
char afn[256], rfn[256];
|
|
FILE *afp = NULL, *rfp = NULL;
|
|
char ibuf[2048], tbuf[2048];
|
|
int ilen, len, ret = 0;
|
|
char amode[8] = "";
|
|
char atest[100] = "";
|
|
int akeysz=0;
|
|
unsigned char iVec[20], aKey[40];
|
|
int dir = -1, err = 0, step = 0;
|
|
unsigned char plaintext[2048];
|
|
unsigned char ciphertext[2048];
|
|
char *rp;
|
|
DES_CTX ctx;
|
|
int numkeys=1;
|
|
|
|
if (!rqfile || !(*rqfile))
|
|
{
|
|
printf("No req file\n");
|
|
return -1;
|
|
}
|
|
strcpy(afn, rqfile);
|
|
|
|
if ((afp = fopen(afn, "r")) == NULL)
|
|
{
|
|
printf("Cannot open file: %s, %s\n",
|
|
afn, strerror(errno));
|
|
return -1;
|
|
}
|
|
strcpy(rfn,afn);
|
|
rp=strstr(rfn,"req/");
|
|
#ifdef OPENSSL_SYS_WIN32
|
|
if (!rp)
|
|
rp=strstr(rfn,"req\\");
|
|
#endif
|
|
assert(rp);
|
|
memcpy(rp,"rsp",3);
|
|
rp = strstr(rfn, ".req");
|
|
memcpy(rp, ".rsp", 4);
|
|
if ((rfp = fopen(rfn, "w")) == NULL)
|
|
{
|
|
printf("Cannot open file: %s, %s\n",
|
|
rfn, strerror(errno));
|
|
fclose(afp);
|
|
afp = NULL;
|
|
return -1;
|
|
}
|
|
while (!err && (fgets(ibuf, sizeof(ibuf), afp)) != NULL)
|
|
{
|
|
tidy_line(tbuf, ibuf);
|
|
ilen = strlen(ibuf);
|
|
/* printf("step=%d ibuf=%s",step,ibuf);*/
|
|
if(step == 3 && !strcmp(amode,"ECB"))
|
|
{
|
|
memset(iVec, 0, sizeof(iVec));
|
|
step = (dir)? 4: 5; /* no ivec for ECB */
|
|
}
|
|
switch (step)
|
|
{
|
|
case 0: /* read preamble */
|
|
if (ibuf[0] == '\n')
|
|
{ /* end of preamble */
|
|
if (*amode == '\0')
|
|
{
|
|
printf("Missing Mode\n");
|
|
err = 1;
|
|
}
|
|
else
|
|
{
|
|
fputs(ibuf, rfp);
|
|
++ step;
|
|
}
|
|
}
|
|
else if (ibuf[0] != '#')
|
|
{
|
|
printf("Invalid preamble item: %s\n", ibuf);
|
|
err = 1;
|
|
}
|
|
else
|
|
{ /* process preamble */
|
|
char *xp, *pp = ibuf+2;
|
|
int n;
|
|
if(*amode)
|
|
{ /* insert current time & date */
|
|
time_t rtim = time(0);
|
|
fprintf(rfp, "# %s", ctime(&rtim));
|
|
}
|
|
else
|
|
{
|
|
fputs(ibuf, rfp);
|
|
if(!strncmp(pp,"INVERSE ",8) || !strncmp(pp,"DES ",4)
|
|
|| !strncmp(pp,"TDES ",5)
|
|
|| !strncmp(pp,"PERMUTATION ",12)
|
|
|| !strncmp(pp,"SUBSTITUTION ",13)
|
|
|| !strncmp(pp,"VARIABLE ",9))
|
|
{
|
|
/* get test type */
|
|
if(!strncmp(pp,"DES ",4))
|
|
pp+=4;
|
|
else if(!strncmp(pp,"TDES ",5))
|
|
pp+=5;
|
|
xp = strchr(pp, ' ');
|
|
n = xp-pp;
|
|
strncpy(atest, pp, n);
|
|
atest[n] = '\0';
|
|
/* get mode */
|
|
xp = strrchr(pp, ' '); /* get mode" */
|
|
n = strlen(xp+1)-1;
|
|
strncpy(amode, xp+1, n);
|
|
amode[n] = '\0';
|
|
/* amode[3] = '\0'; */
|
|
printf("Test=%s, Mode=%s\n",atest,amode);
|
|
}
|
|
}
|
|
}
|
|
break;
|
|
|
|
case 1: /* [ENCRYPT] | [DECRYPT] */
|
|
if(ibuf[0] == '\n')
|
|
break;
|
|
if (ibuf[0] == '[')
|
|
{
|
|
fputs(ibuf, rfp);
|
|
++step;
|
|
if (strncasecmp(ibuf, "[ENCRYPT]", 9) == 0)
|
|
dir = 1;
|
|
else if (strncasecmp(ibuf, "[DECRYPT]", 9) == 0)
|
|
dir = 0;
|
|
else
|
|
{
|
|
printf("Invalid keyword: %s\n", ibuf);
|
|
err = 1;
|
|
}
|
|
break;
|
|
}
|
|
else if (dir == -1)
|
|
{
|
|
err = 1;
|
|
printf("Missing ENCRYPT/DECRYPT keyword\n");
|
|
break;
|
|
}
|
|
else
|
|
step = 2;
|
|
|
|
case 2: /* KEY = xxxx */
|
|
if(*ibuf == '\n')
|
|
{
|
|
fputs(ibuf, rfp);
|
|
break;
|
|
}
|
|
if(!strncasecmp(ibuf,"COUNT = ",8))
|
|
{
|
|
fputs(ibuf, rfp);
|
|
break;
|
|
}
|
|
if(!strncasecmp(ibuf,"COUNT=",6))
|
|
{
|
|
fputs(ibuf, rfp);
|
|
break;
|
|
}
|
|
if(!strncasecmp(ibuf,"NumKeys = ",10))
|
|
{
|
|
numkeys=atoi(ibuf+10);
|
|
break;
|
|
}
|
|
|
|
fputs(ibuf, rfp);
|
|
if(!strncasecmp(ibuf,"KEY = ",6))
|
|
{
|
|
akeysz=64;
|
|
len = hex2bin((char*)ibuf+6, aKey);
|
|
if (len < 0)
|
|
{
|
|
printf("Invalid KEY\n");
|
|
err=1;
|
|
break;
|
|
}
|
|
PrintValue("KEY", aKey, len);
|
|
++step;
|
|
}
|
|
else if(!strncasecmp(ibuf,"KEYs = ",7))
|
|
{
|
|
akeysz=64*3;
|
|
len=hex2bin(ibuf+7,aKey);
|
|
if(len != 8)
|
|
{
|
|
printf("Invalid KEY\n");
|
|
err=1;
|
|
break;
|
|
}
|
|
memcpy(aKey+8,aKey,8);
|
|
memcpy(aKey+16,aKey,8);
|
|
ibuf[4]='\0';
|
|
PrintValue("KEYs",aKey,len);
|
|
++step;
|
|
}
|
|
else if(!strncasecmp(ibuf,"KEY",3))
|
|
{
|
|
int n=ibuf[3]-'1';
|
|
|
|
akeysz=64*3;
|
|
len=hex2bin(ibuf+7,aKey+n*8);
|
|
if(len != 8)
|
|
{
|
|
printf("Invalid KEY\n");
|
|
err=1;
|
|
break;
|
|
}
|
|
ibuf[4]='\0';
|
|
PrintValue(ibuf,aKey,len);
|
|
if(n == 2)
|
|
++step;
|
|
}
|
|
else
|
|
{
|
|
printf("Missing KEY\n");
|
|
err = 1;
|
|
}
|
|
break;
|
|
|
|
case 3: /* IV = xxxx */
|
|
fputs(ibuf, rfp);
|
|
if (strncasecmp(ibuf, "IV = ", 5) != 0)
|
|
{
|
|
printf("Missing IV\n");
|
|
err = 1;
|
|
}
|
|
else
|
|
{
|
|
len = hex2bin((char*)ibuf+5, iVec);
|
|
if (len < 0)
|
|
{
|
|
printf("Invalid IV\n");
|
|
err =1;
|
|
break;
|
|
}
|
|
PrintValue("IV", iVec, len);
|
|
step = (dir)? 4: 5;
|
|
}
|
|
break;
|
|
|
|
case 4: /* PLAINTEXT = xxxx */
|
|
fputs(ibuf, rfp);
|
|
if (strncasecmp(ibuf, "PLAINTEXT = ", 12) != 0)
|
|
{
|
|
printf("Missing PLAINTEXT\n");
|
|
err = 1;
|
|
}
|
|
else
|
|
{
|
|
int nn = strlen(ibuf+12);
|
|
if(!strcmp(amode,"CFB1"))
|
|
len=bint2bin(ibuf+12,nn-1,plaintext);
|
|
else
|
|
len=hex2bin(ibuf+12, plaintext);
|
|
if (len < 0)
|
|
{
|
|
printf("Invalid PLAINTEXT: %s", ibuf+12);
|
|
err =1;
|
|
break;
|
|
}
|
|
if (len >= sizeof(plaintext))
|
|
{
|
|
printf("Buffer overflow\n");
|
|
}
|
|
PrintValue("PLAINTEXT", (unsigned char*)plaintext, len);
|
|
if (strcmp(atest, "Monte") == 0) /* Monte Carlo Test */
|
|
{
|
|
do_mct(amode,akeysz,numkeys,aKey,iVec,dir,plaintext,len,rfp);
|
|
}
|
|
else
|
|
{
|
|
assert(dir == 1);
|
|
ret = DESTest(&ctx, amode, akeysz, aKey, iVec,
|
|
dir, /* 0 = decrypt, 1 = encrypt */
|
|
ciphertext, plaintext, len);
|
|
OutputValue("CIPHERTEXT",ciphertext,len,rfp,
|
|
!strcmp(amode,"CFB1"));
|
|
}
|
|
step = 6;
|
|
}
|
|
break;
|
|
|
|
case 5: /* CIPHERTEXT = xxxx */
|
|
fputs(ibuf, rfp);
|
|
if (strncasecmp(ibuf, "CIPHERTEXT = ", 13) != 0)
|
|
{
|
|
printf("Missing KEY\n");
|
|
err = 1;
|
|
}
|
|
else
|
|
{
|
|
if(!strcmp(amode,"CFB1"))
|
|
len=bint2bin(ibuf+13,strlen(ibuf+13)-1,ciphertext);
|
|
else
|
|
len = hex2bin(ibuf+13,ciphertext);
|
|
if (len < 0)
|
|
{
|
|
printf("Invalid CIPHERTEXT\n");
|
|
err =1;
|
|
break;
|
|
}
|
|
|
|
PrintValue("CIPHERTEXT", ciphertext, len);
|
|
if (strcmp(atest, "Monte") == 0) /* Monte Carlo Test */
|
|
{
|
|
do_mct(amode, akeysz, numkeys, aKey, iVec,
|
|
dir, ciphertext, len, rfp);
|
|
}
|
|
else
|
|
{
|
|
assert(dir == 0);
|
|
ret = DESTest(&ctx, amode, akeysz, aKey, iVec,
|
|
dir, /* 0 = decrypt, 1 = encrypt */
|
|
plaintext, ciphertext, len);
|
|
OutputValue("PLAINTEXT",(unsigned char *)plaintext,len,rfp,
|
|
!strcmp(amode,"CFB1"));
|
|
}
|
|
step = 6;
|
|
}
|
|
break;
|
|
|
|
case 6:
|
|
if (ibuf[0] != '\n')
|
|
{
|
|
err = 1;
|
|
printf("Missing terminator\n");
|
|
}
|
|
else if (strcmp(atest, "MCT") != 0)
|
|
{ /* MCT already added terminating nl */
|
|
fputs(ibuf, rfp);
|
|
}
|
|
step = 1;
|
|
break;
|
|
}
|
|
}
|
|
if (rfp)
|
|
fclose(rfp);
|
|
if (afp)
|
|
fclose(afp);
|
|
return err;
|
|
}
|
|
|
|
/*--------------------------------------------------
|
|
Processes either a single file or
|
|
a set of files whose names are passed in a file.
|
|
A single file is specified as:
|
|
aes_test -f xxx.req
|
|
A set of files is specified as:
|
|
aes_test -d xxxxx.xxx
|
|
The default is: -d req.txt
|
|
--------------------------------------------------*/
|
|
int main(int argc, char **argv)
|
|
{
|
|
char *rqlist = "req.txt";
|
|
FILE *fp = NULL;
|
|
char fn[250] = "", rfn[256] = "";
|
|
int f_opt = 0, d_opt = 1;
|
|
|
|
#ifdef OPENSSL_FIPS
|
|
if(!FIPS_mode_set(1))
|
|
{
|
|
do_print_errors();
|
|
EXIT(1);
|
|
}
|
|
#endif
|
|
if (argc > 1)
|
|
{
|
|
if (strcasecmp(argv[1], "-d") == 0)
|
|
{
|
|
d_opt = 1;
|
|
}
|
|
else if (strcasecmp(argv[1], "-f") == 0)
|
|
{
|
|
f_opt = 1;
|
|
d_opt = 0;
|
|
}
|
|
else
|
|
{
|
|
printf("Invalid parameter: %s\n", argv[1]);
|
|
return 0;
|
|
}
|
|
if (argc < 3)
|
|
{
|
|
printf("Missing parameter\n");
|
|
return 0;
|
|
}
|
|
if (d_opt)
|
|
rqlist = argv[2];
|
|
else
|
|
strcpy(fn, argv[2]);
|
|
}
|
|
if (d_opt)
|
|
{ /* list of files (directory) */
|
|
if (!(fp = fopen(rqlist, "r")))
|
|
{
|
|
printf("Cannot open req list file\n");
|
|
return -1;
|
|
}
|
|
while (fgets(fn, sizeof(fn), fp))
|
|
{
|
|
strtok(fn, "\r\n");
|
|
strcpy(rfn, fn);
|
|
printf("Processing: %s\n", rfn);
|
|
if (proc_file(rfn))
|
|
{
|
|
printf(">>> Processing failed for: %s <<<\n", rfn);
|
|
EXIT(1);
|
|
}
|
|
}
|
|
fclose(fp);
|
|
}
|
|
else /* single file */
|
|
{
|
|
printf("Processing: %s\n", fn);
|
|
if (proc_file(fn))
|
|
{
|
|
printf(">>> Processing failed for: %s <<<\n", fn);
|
|
}
|
|
}
|
|
EXIT(0);
|
|
return 0;
|
|
}
|
|
|
|
#endif
|