1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
|
/* -*- mode: c; c-basic-offset: 4; indent-tabs-mode: nil -*- */
/* lib/crypto/crypto_tests/t_pkcs5.c */
/*
* Copyright 2002 by the Massachusetts Institute of Technology.
* All Rights Reserved.
*
* Export of this software from the United States of America may
* require a specific license from the United States Government.
* It is the responsibility of any person or organization contemplating
* export to obtain such a license before exporting.
*
* WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
* distribute this software and its documentation for any purpose and
* without fee is hereby granted, provided that the above copyright
* notice appear in all copies and that both that copyright notice and
* this permission notice appear in supporting documentation, and that
* the name of M.I.T. not be used in advertising or publicity pertaining
* to distribution of the software without specific, written prior
* permission. Furthermore if you modify this software you must label
* your software as modified software and not distribute it in such a
* fashion that it might be confused with the original M.I.T. software.
* M.I.T. makes no representations about the suitability of
* this software for any purpose. It is provided "as is" without express
* or implied warranty.
*/
/* Test vectors for PBKDF2 (from PKCS #5v2), based on RFC 3211. */
#include "k5-int.h"
static void printhex (size_t len, const char *p)
{
while (len--)
printf (" %02X", 0xff & *p++);
}
static void printdata (krb5_data *d) {
printhex (d->length, d->data);
}
static void test_pbkdf2_rfc3211(void)
{
char x[100];
krb5_error_code err;
krb5_data d, pass, salt;
int i;
/* RFC 3211 test cases. */
static const struct {
const char *pass;
const char *salt;
unsigned int count;
size_t len;
const unsigned char expected[24];
} t[] = {
{ "password", "\x12\x34\x56\x78\x78\x56\x34\x12", 5, 8,
{ 0xD1, 0xDA, 0xA7, 0x86, 0x15, 0xF2, 0x87, 0xE6 } },
{ "All n-entities must communicate with other "
"n-entities via n-1 entiteeheehees",
"\x12\x34\x56\x78\x78\x56\x34\x12", 500, 24,
{ 0x6A, 0x89, 0x70, 0xBF, 0x68, 0xC9, 0x2C, 0xAE,
0xA8, 0x4A, 0x8D, 0xF2, 0x85, 0x10, 0x85, 0x86,
0x07, 0x12, 0x63, 0x80, 0xCC, 0x47, 0xAB, 0x2D } },
};
d.data = x;
printf("RFC 3211 test of PBKDF#2\n");
for (i = 0; i < sizeof(t)/sizeof(t[0]); i++) {
printf("pkbdf2(iter_count=%d, dklen=%d (%d bytes), salt=12 34 56 78 78 56 34 12,\n"
" pass=%s):\n ->",
t[i].count, t[i].len * 8, t[i].len, t[i].pass);
d.length = t[i].len;
pass.data = t[i].pass;
pass.length = strlen(pass.data);
salt.data = t[i].salt;
salt.length = strlen(salt.data);
err = krb5int_pbkdf2_hmac_sha1 (&d, t[i].count, &pass, &salt);
if (err) {
printf("error in computing pbkdf2: %s\n", error_message(err));
exit(1);
}
printdata(&d);
if (!memcmp(x, t[i].expected, t[i].len))
printf("\nTest passed.\n\n");
else {
printf("\n*** CHECK FAILED!\n");
exit(1);
}
}
}
int main(void)
{
test_pbkdf2_rfc3211();
return 0;
}
|
