app/test/test_security_proto.c - main - phprus/github_dpdk

app/test/test_security_proto.c
171 строка4 KB
Aakash Sasidharan
test/crypto: add TLS 1.2 data walkthrough test
14 мар 2024, 21:05
14 мар 2024, 21:05cf93f07
/* SPDX-License-Identifier: BSD-3-Clause
 * Copyright(C) 2023 Marvell.
 */

#include <rte_cryptodev.h>
#include <rte_security.h>

#include "test_security_proto.h"

struct crypto_param_comb sec_alg_list[RTE_DIM(aead_list) +
				  (RTE_DIM(cipher_list) *
				   RTE_DIM(auth_list))];

struct crypto_param_comb sec_auth_only_alg_list[2 * (RTE_DIM(auth_list) - 1)];

static uint8_t cleartext_pattern[TEST_SEC_CLEARTEXT_MAX_LEN];

void
test_sec_alg_list_populate(void)
{
	unsigned long i, j, index = 0;

	for (i = 0; i < RTE_DIM(aead_list); i++) {
		sec_alg_list[index].param1 = &aead_list[i];
		sec_alg_list[index].param2 = NULL;
		index++;
	}

	for (i = 0; i < RTE_DIM(cipher_list); i++) {
		for (j = 0; j < RTE_DIM(auth_list); j++) {
			sec_alg_list[index].param1 = &cipher_list[i];
			sec_alg_list[index].param2 = &auth_list[j];
			index++;
		}
	}
}

void
test_sec_auth_only_alg_list_populate(void)
{
	unsigned long i, index = 0;

	for (i = 1; i < RTE_DIM(auth_list); i++) {
		sec_auth_only_alg_list[index].param1 = &auth_list[i];
		sec_auth_only_alg_list[index].param2 = NULL;
		index++;
	}

	for (i = 1; i < RTE_DIM(auth_list); i++) {
		/* NULL cipher */
		sec_auth_only_alg_list[index].param1 = &cipher_list[0];

		sec_auth_only_alg_list[index].param2 = &auth_list[i];
		index++;
	}
}

int
test_sec_crypto_caps_aead_verify(const struct rte_security_capability *sec_cap,
		struct rte_crypto_sym_xform *aead)
{
	const struct rte_cryptodev_symmetric_capability *sym_cap;
	const struct rte_cryptodev_capabilities *crypto_cap;
	int j = 0;

	while ((crypto_cap = &sec_cap->crypto_capabilities[j++])->op !=
			RTE_CRYPTO_OP_TYPE_UNDEFINED) {
		if (crypto_cap->op == RTE_CRYPTO_OP_TYPE_SYMMETRIC &&
				crypto_cap->sym.xform_type == aead->type &&
				crypto_cap->sym.aead.algo == aead->aead.algo) {
			sym_cap = &crypto_cap->sym;
			if (rte_cryptodev_sym_capability_check_aead(sym_cap,
					aead->aead.key.length,
					aead->aead.digest_length,
					aead->aead.aad_length,
					aead->aead.iv.length) == 0)
				return 0;
		}
	}

	return -ENOTSUP;
}

int
test_sec_crypto_caps_cipher_verify(const struct rte_security_capability *sec_cap,
		struct rte_crypto_sym_xform *cipher)
{
	const struct rte_cryptodev_symmetric_capability *sym_cap;
	const struct rte_cryptodev_capabilities *cap;
	int j = 0;

	while ((cap = &sec_cap->crypto_capabilities[j++])->op !=
			RTE_CRYPTO_OP_TYPE_UNDEFINED) {
		if (cap->op == RTE_CRYPTO_OP_TYPE_SYMMETRIC &&
				cap->sym.xform_type == cipher->type &&
				cap->sym.cipher.algo == cipher->cipher.algo) {
			sym_cap = &cap->sym;
			if (rte_cryptodev_sym_capability_check_cipher(sym_cap,
					cipher->cipher.key.length,
					cipher->cipher.iv.length) == 0)
				return 0;
		}
	}

	return -ENOTSUP;
}

int
test_sec_crypto_caps_auth_verify(const struct rte_security_capability *sec_cap,
		struct rte_crypto_sym_xform *auth)
{
	const struct rte_cryptodev_symmetric_capability *sym_cap;
	const struct rte_cryptodev_capabilities *cap;
	int j = 0;

	while ((cap = &sec_cap->crypto_capabilities[j++])->op !=
			RTE_CRYPTO_OP_TYPE_UNDEFINED) {
		if (cap->op == RTE_CRYPTO_OP_TYPE_SYMMETRIC &&
				cap->sym.xform_type == auth->type &&
				cap->sym.auth.algo == auth->auth.algo) {
			sym_cap = &cap->sym;
			if (rte_cryptodev_sym_capability_check_auth(sym_cap,
					auth->auth.key.length,
					auth->auth.digest_length,
					auth->auth.iv.length) == 0)
				return 0;
		}
	}

	return -ENOTSUP;
}

void
test_sec_alg_display(const struct crypto_param *param1, const struct crypto_param *param2)
{
	if (param1->type == RTE_CRYPTO_SYM_XFORM_AEAD) {
		printf("\t%s [%d]",
		       rte_cryptodev_get_aead_algo_string(param1->alg.aead),
		       param1->key_length * 8);
	} else if (param1->type == RTE_CRYPTO_SYM_XFORM_AUTH) {
		printf("\t%s",
		       rte_cryptodev_get_auth_algo_string(param1->alg.auth));
		if (param1->alg.auth != RTE_CRYPTO_AUTH_NULL)
			printf(" [%dB ICV]", param1->digest_length);
	} else {
		printf("\t%s",
		       rte_cryptodev_get_cipher_algo_string(param1->alg.cipher));
		if (param1->alg.cipher != RTE_CRYPTO_CIPHER_NULL)
			printf(" [%d]", param1->key_length * 8);
		printf(" %s",
		       rte_cryptodev_get_auth_algo_string(param2->alg.auth));
		if (param2->alg.auth != RTE_CRYPTO_AUTH_NULL)
			printf(" [%dB ICV]", param2->digest_length);
	}
	printf("\n");
}

void
test_sec_proto_pattern_generate(void)
{
	unsigned int i;

	for (i = 0; i < TEST_SEC_CLEARTEXT_MAX_LEN; i++)
		cleartext_pattern[i] = (i + 1) & 0xff;
}

void
test_sec_proto_pattern_set(uint8_t *buf, int len)
{
	rte_memcpy(buf, cleartext_pattern, len);
}