/* BEGIN_HEADER */ #include "mbedtls/gcm.h" /* END_HEADER */ /* BEGIN_DEPENDENCIES * depends_on:MBEDTLS_GCM_C * END_DEPENDENCIES */ /* BEGIN_CASE */ void gcm_bad_parameters( int cipher_id, int direction, data_t *key_str, data_t *src_str, data_t *iv_str, data_t *add_str, int tag_len_bits, int gcm_result ) { unsigned char output[128]; unsigned char tag_output[16]; mbedtls_gcm_context ctx; size_t tag_len = tag_len_bits / 8; mbedtls_gcm_init( &ctx ); memset( output, 0x00, sizeof( output ) ); memset( tag_output, 0x00, sizeof( tag_output ) ); TEST_ASSERT( mbedtls_gcm_setkey( &ctx, cipher_id, key_str->x, key_str->len * 8 ) == 0 ); TEST_ASSERT( mbedtls_gcm_crypt_and_tag( &ctx, direction, src_str->len, iv_str->x, iv_str->len, add_str->x, add_str->len, src_str->x, output, tag_len, tag_output ) == gcm_result ); exit: mbedtls_gcm_free( &ctx ); } /* END_CASE */ /* BEGIN_CASE */ void gcm_encrypt_and_tag( int cipher_id, data_t * key_str, data_t * src_str, data_t * iv_str, data_t * add_str, data_t * dst, int tag_len_bits, data_t * tag, int init_result ) { unsigned char output[128]; unsigned char tag_output[16]; mbedtls_gcm_context ctx; size_t tag_len = tag_len_bits / 8; mbedtls_gcm_init( &ctx ); memset(output, 0x00, 128); memset(tag_output, 0x00, 16); TEST_ASSERT( mbedtls_gcm_setkey( &ctx, cipher_id, key_str->x, key_str->len * 8 ) == init_result ); if( init_result == 0 ) { TEST_ASSERT( mbedtls_gcm_crypt_and_tag( &ctx, MBEDTLS_GCM_ENCRYPT, src_str->len, iv_str->x, iv_str->len, add_str->x, add_str->len, src_str->x, output, tag_len, tag_output ) == 0 ); TEST_ASSERT( mbedtls_test_hexcmp( output, dst->x, src_str->len, dst->len ) == 0 ); TEST_ASSERT( mbedtls_test_hexcmp( tag_output, tag->x, tag_len, tag->len ) == 0 ); } exit: mbedtls_gcm_free( &ctx ); } /* END_CASE */ /* BEGIN_CASE */ void gcm_decrypt_and_verify( int cipher_id, data_t * key_str, data_t * src_str, data_t * iv_str, data_t * add_str, int tag_len_bits, data_t * tag_str, char * result, data_t * pt_result, int init_result ) { unsigned char output[128]; mbedtls_gcm_context ctx; int ret; size_t tag_len = tag_len_bits / 8; mbedtls_gcm_init( &ctx ); memset(output, 0x00, 128); TEST_ASSERT( mbedtls_gcm_setkey( &ctx, cipher_id, key_str->x, key_str->len * 8 ) == init_result ); if( init_result == 0 ) { ret = mbedtls_gcm_auth_decrypt( &ctx, src_str->len, iv_str->x, iv_str->len, add_str->x, add_str->len, tag_str->x, tag_len, src_str->x, output ); if( strcmp( "FAIL", result ) == 0 ) { TEST_ASSERT( ret == MBEDTLS_ERR_GCM_AUTH_FAILED ); } else { TEST_ASSERT( ret == 0 ); TEST_ASSERT( mbedtls_test_hexcmp( output, pt_result->x, src_str->len, pt_result->len ) == 0 ); } } exit: mbedtls_gcm_free( &ctx ); } /* END_CASE */ /* BEGIN_CASE depends_on:MBEDTLS_CHECK_PARAMS:!MBEDTLS_PARAM_FAILED_ALT */ void gcm_invalid_param( ) { mbedtls_gcm_context ctx; unsigned char valid_buffer[] = { 0x01, 0x02, 0x03, 0x04, 0x05, 0x06 }; mbedtls_cipher_id_t valid_cipher = MBEDTLS_CIPHER_ID_AES; int valid_mode = MBEDTLS_GCM_ENCRYPT; int valid_len = sizeof(valid_buffer); int valid_bitlen = 128, invalid_bitlen = 1; mbedtls_gcm_init( &ctx ); /* mbedtls_gcm_init() */ TEST_INVALID_PARAM( mbedtls_gcm_init( NULL ) ); /* mbedtls_gcm_setkey */ TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_setkey( NULL, valid_cipher, valid_buffer, valid_bitlen ) ); TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_setkey( &ctx, valid_cipher, NULL, valid_bitlen ) ); TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_setkey( &ctx, valid_cipher, valid_buffer, invalid_bitlen ) ); /* mbedtls_gcm_crypt_and_tag() */ TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_crypt_and_tag( NULL, valid_mode, valid_len, valid_buffer, valid_len, valid_buffer, valid_len, valid_buffer, valid_buffer, valid_len, valid_buffer ) ); TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_crypt_and_tag( &ctx, valid_mode, valid_len, NULL, valid_len, valid_buffer, valid_len, valid_buffer, valid_buffer, valid_len, valid_buffer ) ); TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_crypt_and_tag( &ctx, valid_mode, valid_len, valid_buffer, valid_len, NULL, valid_len, valid_buffer, valid_buffer, valid_len, valid_buffer ) ); TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_crypt_and_tag( &ctx, valid_mode, valid_len, valid_buffer, valid_len, valid_buffer, valid_len, NULL, valid_buffer, valid_len, valid_buffer ) ); TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_crypt_and_tag( &ctx, valid_mode, valid_len, valid_buffer, valid_len, valid_buffer, valid_len, valid_buffer, NULL, valid_len, valid_buffer ) ); TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_crypt_and_tag( &ctx, valid_mode, valid_len, valid_buffer, valid_len, valid_buffer, valid_len, valid_buffer, valid_buffer, valid_len, NULL ) ); /* mbedtls_gcm_auth_decrypt() */ TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_auth_decrypt( NULL, valid_len, valid_buffer, valid_len, valid_buffer, valid_len, valid_buffer, valid_len, valid_buffer, valid_buffer) ); TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_auth_decrypt( &ctx, valid_len, NULL, valid_len, valid_buffer, valid_len, valid_buffer, valid_len, valid_buffer, valid_buffer) ); TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_auth_decrypt( &ctx, valid_len, valid_buffer, valid_len, NULL, valid_len, valid_buffer, valid_len, valid_buffer, valid_buffer) ); TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_auth_decrypt( &ctx, valid_len, valid_buffer, valid_len, valid_buffer, valid_len, NULL, valid_len, valid_buffer, valid_buffer) ); TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_auth_decrypt( &ctx, valid_len, valid_buffer, valid_len, valid_buffer, valid_len, valid_buffer, valid_len, NULL, valid_buffer) ); TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_auth_decrypt( &ctx, valid_len, valid_buffer, valid_len, valid_buffer, valid_len, valid_buffer, valid_len, valid_buffer, NULL) ); /* mbedtls_gcm_starts() */ TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_starts( NULL, valid_mode, valid_buffer, valid_len, valid_buffer, valid_len ) ); TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_starts( &ctx, valid_mode, NULL, valid_len, valid_buffer, valid_len ) ); TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_starts( &ctx, valid_mode, valid_buffer, valid_len, NULL, valid_len ) ); /* mbedtls_gcm_update() */ TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_update( NULL, valid_len, valid_buffer, valid_buffer ) ); TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_update( &ctx, valid_len, NULL, valid_buffer ) ); TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_update( &ctx, valid_len, valid_buffer, NULL ) ); /* mbedtls_gcm_finish() */ TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_finish( NULL, valid_buffer, valid_len ) ); TEST_INVALID_PARAM_RET( MBEDTLS_ERR_GCM_BAD_INPUT, mbedtls_gcm_finish( &ctx, NULL, valid_len ) ); exit: mbedtls_gcm_free( &ctx ); } /* END_CASE */ /* BEGIN_CASE */ void gcm_valid_param( ) { TEST_VALID_PARAM( mbedtls_gcm_free( NULL ) ); exit: return; } /* END_CASE */ /* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST */ void gcm_selftest( ) { TEST_ASSERT( mbedtls_gcm_self_test( 1 ) == 0 ); } /* END_CASE */