examples/fips_validation/fips_validation_ccm.c - main - phprus/github_dpdk

examples/fips_validation/fips_validation_ccm.c
404 строки10 KB
Gowrishankar Muthukrishnan
examples/fips_validation: add CCM JSON validation
01 мар 2023, 12:37
01 мар 2023, 12:3755a7050
/* SPDX-License-Identifier: BSD-3-Clause
 * Copyright(c) 2018 Intel Corporation
 */

#include <stdio.h>
#include <string.h>

#include <rte_string_fns.h>
#include <rte_cryptodev.h>
#include <rte_malloc.h>

#include "fips_validation.h"

#define DVPT_STR	"CCM-DVPT"
#define VADT_STR	"CCM-VADT"
#define VPT_STR		"CCM-VPT"
#define VNT_STR		"CCM-VNT"
#define VTT_STR		"CCM-VTT"

#define PARAM_PREFIX	"["
#define ALEN_PREFIX	"Alen = "
#define PLEN_PREFIX	"Plen = "
#define IVLEN_PREFIX	"Nlen = "
#define DIGESTL_PREFIX	"Tlen = "

#define COUNT_STR	"Count = "
#define KEY_STR		"Key = "
#define IV_STR		"Nonce = "
#define PT_STR		"Payload = "
#define CT_STR		"CT = "
#define AAD_STR		"Adata = "
#define POS_NEG_STR	"Result = "

#define POS_KEYWORD	"Pass"
#define NEG_KEYWORD	"Fail"

#define DIR_JSON_STR	"direction"
#define IVLEN_JSON_STR		"ivLen"
#define PTLEN_JSON_STR	"payloadLen"
#define AADLEN_JSON_STR		"aadLen"
#define TAGLEN_JSON_STR		"tagLen"
#define KEYLEN_JSON_STR		"keyLen"
#define PT_JSON_STR		"pt"
#define CT_JSON_STR		"ct"
#define KEY_JSON_STR		"key"
#define IV_JSON_STR		"iv"
#define AAD_JSON_STR		"aad"

static int
parser_dvpt_interim(const char *key, char *src, struct fips_val *val)
{
	char *tmp, c, value[10];
	char num_pattern[] = "0123456789";
	int i = 0;

	memset(value, 0, 10);

	tmp = strstr(src, key);
	if (!tmp)
		return -1;

	tmp += strlen(key);

	c = tmp[0];

	while (strchr(num_pattern, c) && i < 10) {
		value[i++] = c;
		c = tmp[i];
	}

	return parser_read_uint32_val("", value, val);
}

static int
parse_dvpt_ct_hex_str(const char *key, char *src, struct fips_val *val)
{
	int ret;

	val->len = vec.pt.len;

	ret = parse_uint8_known_len_hex_str(key, src, val);
	if (ret < 0)
		return ret;

	src += strlen(key) + val->len * 2;

	ret = parse_uint8_known_len_hex_str("", src, &vec.aead.digest);
	if (ret < 0) {
		rte_free(val->val);
		memset(val, 0, sizeof(*val));
		return ret;
	}

	return 0;
}

static int
parse_uint8_ccm_aad_str(const char *key, char *src, struct fips_val *val)
{
	uint32_t len = val->len, j;

	src += strlen(key);

	/* CCM aad requires 18 bytes padding before the real content */
	val->val = rte_zmalloc(NULL, len + 18, 0);
	if (!val->val)
		return -1;

	for (j = 0; j < len; j++) {
		char byte[3] = {src[j * 2], src[j * 2 + 1], '\0'};

		if (parser_read_uint8_hex(&val->val[j + 18], byte) < 0) {
			rte_free(val->val);
			memset(val, 0, sizeof(*val));
			return -EINVAL;
		}
	}

	return 0;
}

struct fips_test_callback ccm_vnt_vec[] = {
		{IV_STR, parse_uint8_known_len_hex_str, &vec.iv},
		{AAD_STR, parse_uint8_ccm_aad_str, &vec.aead.aad},
		{PT_STR, parse_uint8_known_len_hex_str, &vec.pt},
		{NULL, NULL, NULL} /**< end pointer */
};

struct fips_test_callback ccm_vnt_interim_vec[] = {
		{ALEN_PREFIX, parser_read_uint32_val, &vec.aead.aad},
		{PLEN_PREFIX, parser_read_uint32_val, &vec.pt},
		{DIGESTL_PREFIX, parser_read_uint32_val, &vec.aead.digest},
		{IVLEN_PREFIX, parser_read_uint32_val, &vec.iv},
		{KEY_STR, parse_uint8_hex_str, &vec.aead.key},
		{NULL, NULL, NULL} /**< end pointer */
};

struct fips_test_callback ccm_vtt_vec[] = {
		{AAD_STR, parse_uint8_ccm_aad_str, &vec.aead.aad},
		{PT_STR, parse_uint8_known_len_hex_str, &vec.pt},
		{NULL, NULL, NULL} /**< end pointer */
};

struct fips_test_callback ccm_vtt_interim_vec[] = {
		{ALEN_PREFIX, parser_read_uint32_val, &vec.aead.aad},
		{PLEN_PREFIX, parser_read_uint32_val, &vec.pt},
		{IVLEN_PREFIX, parser_read_uint32_val, &vec.iv},
		{DIGESTL_PREFIX, parser_read_uint32_val, &vec.aead.digest},
		{KEY_STR, parse_uint8_hex_str, &vec.aead.key},
		{IV_STR, parse_uint8_known_len_hex_str, &vec.iv},
		{NULL, NULL, NULL} /**< end pointer */
};

struct fips_test_callback ccm_vadt_vec[] = {
		{AAD_STR, parse_uint8_ccm_aad_str, &vec.aead.aad},
		{PT_STR, parse_uint8_known_len_hex_str, &vec.pt},
		{NULL, NULL, NULL} /**< end pointer */
};

struct fips_test_callback ccm_vadt_interim_vec[] = {
		{PLEN_PREFIX, parser_read_uint32_val, &vec.pt},
		{IVLEN_PREFIX, parser_read_uint32_val, &vec.iv},
		{ALEN_PREFIX, parser_read_uint32_val, &vec.aead.aad},
		{DIGESTL_PREFIX, parser_read_uint32_val, &vec.aead.digest},
		{KEY_STR, parse_uint8_hex_str, &vec.aead.key},
		{IV_STR, parse_uint8_known_len_hex_str, &vec.iv},
		{NULL, NULL, NULL} /**< end pointer */
};

struct fips_test_callback ccm_vpt_vec[] = {
		{AAD_STR, parse_uint8_ccm_aad_str, &vec.aead.aad},
		{PT_STR, parse_uint8_known_len_hex_str, &vec.pt},
		{NULL, NULL, NULL} /**< end pointer */
};

struct fips_test_callback ccm_vpt_interim_vec[] = {
		{ALEN_PREFIX, parser_read_uint32_val, &vec.aead.aad},
		{IVLEN_PREFIX, parser_read_uint32_val, &vec.iv},
		{DIGESTL_PREFIX, parser_read_uint32_val, &vec.aead.digest},
		{PLEN_PREFIX, parser_read_uint32_val, &vec.pt},
		{KEY_STR, parse_uint8_hex_str, &vec.aead.key},
		{IV_STR, parse_uint8_known_len_hex_str, &vec.iv},
		{NULL, NULL, NULL} /**< end pointer */
};

struct fips_test_callback ccm_dvpt_vec[] = {
		{IV_STR, parse_uint8_known_len_hex_str, &vec.iv},
		{AAD_STR, parse_uint8_ccm_aad_str, &vec.aead.aad},
		{CT_STR, parse_dvpt_ct_hex_str, &vec.ct},
		{NULL, NULL, NULL} /**< end pointer */
};

struct fips_test_callback ccm_dvpt_interim_vec[] = {
		{ALEN_PREFIX, parser_dvpt_interim, &vec.aead.aad},
		{PLEN_PREFIX, parser_dvpt_interim, &vec.pt},
		{IVLEN_PREFIX, parser_dvpt_interim, &vec.iv},
		{DIGESTL_PREFIX, parser_dvpt_interim, &vec.aead.digest},
		{KEY_STR, parse_uint8_hex_str, &vec.aead.key},
		{NULL, NULL, NULL} /**< end pointer */
};

struct ccm_test_types {
	const char *str;
	uint32_t type;
	const struct fips_test_callback *cb;
	const struct fips_test_callback *cb_interim;
	enum fips_test_op op;
} ctt[] = {
		{DVPT_STR, CCM_DVPT, ccm_dvpt_vec, ccm_dvpt_interim_vec,
			FIPS_TEST_DEC_AUTH_VERIF},
		{VPT_STR, CCM_VPT, ccm_vpt_vec, ccm_vpt_interim_vec,
			FIPS_TEST_ENC_AUTH_GEN},
		{VADT_STR, CCM_VADT, ccm_vadt_vec, ccm_vadt_interim_vec,
			FIPS_TEST_ENC_AUTH_GEN},
		{VNT_STR, CCM_VNT, ccm_vnt_vec, ccm_vnt_interim_vec,
			FIPS_TEST_ENC_AUTH_GEN},
		{VTT_STR, CCM_VTT, ccm_vtt_vec, ccm_vtt_interim_vec,
			FIPS_TEST_ENC_AUTH_GEN},
};

#ifdef USE_JANSSON
static int
parser_read_ccm_direction_str(__rte_unused const char *key, char *src,
	__rte_unused struct fips_val *val)
{
	if (strcmp(src, "encrypt") == 0)
		info.op = FIPS_TEST_ENC_AUTH_GEN;
	else if (strcmp(src, "decrypt") == 0)
		info.op = FIPS_TEST_DEC_AUTH_VERIF;

	return 0;
}

static int
parser_read_ccm_aad_str(const char *key, char *src, struct fips_val *val)
{
	struct fips_val tmp_val = {0};
	uint32_t len = val->len;

	/* CCM aad requires 18 bytes padding before the real content */
	val->val = rte_zmalloc(NULL, len + 18, 0);
	if (!val->val)
		return -1;

	if (parse_uint8_hex_str(key, src, &tmp_val) < 0)
		return -1;

	memcpy(val->val + 18, tmp_val.val, val->len);
	rte_free(tmp_val.val);

	return 0;
}

static int
parse_read_ccm_ct_str(const char *key, char *src, struct fips_val *val)
{
	int ret;

	val->len = vec.pt.len;

	ret = parse_uint8_known_len_hex_str(key, src, val);
	if (ret < 0)
		return ret;

	src += val->len * 2;

	ret = parse_uint8_known_len_hex_str("", src, &vec.aead.digest);
	if (ret < 0) {
		rte_free(val->val);
		memset(val, 0, sizeof(*val));
		return ret;
	}

	return 0;
}

struct fips_test_callback ccm_tests_interim_json_vectors[] = {
	{DIR_JSON_STR, parser_read_ccm_direction_str, NULL},
	{IVLEN_JSON_STR, parser_read_uint32_bit_val, &vec.iv},
	{PTLEN_JSON_STR, parser_read_uint32_bit_val, &vec.pt},
	{AADLEN_JSON_STR, parser_read_uint32_bit_val, &vec.aead.aad},
	{TAGLEN_JSON_STR, parser_read_uint32_bit_val, &vec.aead.digest},
	{KEYLEN_JSON_STR, parser_read_uint32_bit_val, &vec.aead.key},
	{NULL, NULL, NULL} /**< end pointer */
};

struct fips_test_callback ccm_tests_json_vectors[] = {
	{PT_JSON_STR, parse_uint8_known_len_hex_str, &vec.pt},
	{CT_JSON_STR, parse_read_ccm_ct_str, &vec.ct},
	{KEY_JSON_STR, parse_uint8_known_len_hex_str, &vec.aead.key},
	{IV_JSON_STR, parse_uint8_known_len_hex_str, &vec.iv},
	{AAD_JSON_STR, parser_read_ccm_aad_str, &vec.aead.aad},
	{NULL, NULL, NULL} /**< end pointer */
};

static int
parse_test_ccm_json_writeback(struct fips_val *val)
{
	struct fips_val tmp_val;
	json_t *tcId;

	tcId = json_object_get(json_info.json_test_case, "tcId");
	json_info.json_write_case = json_object();
	json_object_set(json_info.json_write_case, "tcId", tcId);

	if (info.op == FIPS_TEST_ENC_AUTH_GEN) {
		json_t *ct;

		info.one_line_text[0] = '\0';
		writeback_hex_str("", info.one_line_text, val);
		ct = json_string(info.one_line_text);
		json_object_set_new(json_info.json_write_case, CT_JSON_STR, ct);
	} else {
		if (vec.status == RTE_CRYPTO_OP_STATUS_SUCCESS) {
			tmp_val.val = val->val;
			tmp_val.len = vec.pt.len;

			info.one_line_text[0] = '\0';
			writeback_hex_str("", info.one_line_text, &tmp_val);
			json_object_set_new(json_info.json_write_case, PT_JSON_STR,
				json_string(info.one_line_text));
		}  else {
			json_object_set_new(json_info.json_write_case, "testPassed",
				json_false());
		}
	}

	return 0;
}

int
parse_test_ccm_json_init(void)
{
	info.interim_callbacks = ccm_tests_interim_json_vectors;
	info.parse_writeback = parse_test_ccm_json_writeback;
	info.callbacks = ccm_tests_json_vectors;
	return 0;
}
#endif /* USE_JANSSON */

static int
parse_test_ccm_writeback(struct fips_val *val)
{
	struct fips_val tmp_val;

	switch (info.interim_info.ccm_data.test_type) {
	case CCM_DVPT:
		fprintf(info.fp_wr, "%s", POS_NEG_STR);
		if (vec.status == RTE_CRYPTO_OP_STATUS_SUCCESS) {
			fprintf(info.fp_wr, "%s\n", POS_KEYWORD);
			fprintf(info.fp_wr, "%s", PT_STR);

			tmp_val.val = val->val;
			tmp_val.len = vec.pt.len;

			if (tmp_val.len == 0)
				fprintf(info.fp_wr, "00\n");
			else
				parse_write_hex_str(&tmp_val);
		} else
			fprintf(info.fp_wr, "%s\n", NEG_KEYWORD);

		break;

	case CCM_VADT:
	case CCM_VNT:
	case CCM_VPT:
	case CCM_VTT:
		fprintf(info.fp_wr, "%s", CT_STR);

		parse_write_hex_str(val);

		break;

	}

	return 0;
}

int
parse_test_ccm_init(void)
{

	uint32_t i;

	for (i = 0; i < info.nb_vec_lines; i++) {
		char *line = info.vec[i];
		uint32_t j;

		for (j = 0; j < RTE_DIM(ctt); j++)
			if (strstr(line, ctt[j].str)) {
				info.interim_info.ccm_data.test_type =
						ctt[j].type;
				info.callbacks = ctt[j].cb;
				info.interim_callbacks = ctt[j].cb_interim;
				info.op = ctt[j].op;
				break;
		}
	}

	info.parse_writeback = parse_test_ccm_writeback;

	return 0;
}