examples/fips_validation/fips_validation_tdes.c

/* SPDX-License-Identifier: BSD-3-Clause
 * Copyright(c) 2018 Intel Corporation
 */
 
#include <string.h>
#include <stdio.h>
 
#include <rte_malloc.h>
#include <rte_cryptodev.h>
 
#include "fips_validation.h"
 
#define NEW_LINE_STR    "#"
#define TEST_TYPE_KEY   " for CBC"
#define TEST_TYPE_ECB_KEY   " for ECB"
#define TEST_CBCI_KEY   " for CBCI"
 
#define ENC_STR     "[ENCRYPT]"
#define DEC_STR     "[DECRYPT]"
 
#define COUNT_STR   "COUNT = "
#define KEY1_STR    "KEY1 = "
#define KEY2_STR    "KEY2 = "
#define KEY3_STR    "KEY3 = "
 
#define KEYS_STR    "KEYs = "
#define IV_STR      "IV = "
#define PT_STR      "PLAINTEXT = "
#define CT_STR      "CIPHERTEXT = "
#define NK_STR      "NumKeys = "
 
#define SET_STR     " = "
 
#define PLAIN_TEXT  0
#define CIPHER_TEXT 1
#define KEY_TEXT    2
#define IV_TEXT     3
 
#define DEVICE_STR  "# Config Info for : "
 
#define ALGO_JSON_STR   "algorithm"
#define TESTTYPE_JSON_STR "testType"
#define DIR_JSON_STR    "direction"
#define KEYOPT_JSON_STR "keyingOption"
 
#define PT_JSON_STR "pt"
#define CT_JSON_STR "ct"
#define IV_JSON_STR "iv"
#define KEY1_JSON_STR   "key1"
#define KEY2_JSON_STR   "key2"
#define KEY3_JSON_STR   "key3"
 
#define OP_ENC_JSON_STR "encrypt"
#define OP_DEC_JSON_STR "decrypt"
 
struct {
    uint32_t type;
    const char *desc;
} test_types[] = {
        {TDES_INVERSE_PERMUTATION, "INVERSE PERMUTATION"},
        {TDES_PERMUTATION, "PERMUTATION OPERATION"},
        {TDES_SUBSTITUTION_TABLE, "SUBSTITUTION TABLE"},
        {TDES_VARIABLE_KEY, "VARIABLE KEY"},
        {TDES_VARIABLE_TEXT, "VARIABLE PLAINTEXT/CIPHERTEXT"},
        {TDES_VARIABLE_TEXT, "KAT"},
        {TDES_AFT, "Functional Test"},
        {TDES_MCT, "Monte Carlo (Modes) Test"},
        {TDES_MMT, "Multi block Message Test"},
};
 
static int
writeback_tdes_hex_str(const char *key, char *dst, struct fips_val *val);
 
static int
parse_tdes_uint8_hex_str(const char *key, char *src, struct fips_val *val);
 
static int
parse_tdes_interim(const char *key, char *text, struct fips_val *val);
 
struct fips_test_callback tdes_tests_vectors[] = {
        {KEYS_STR, parse_tdes_uint8_hex_str, &vec.cipher_auth.key},
        {KEY1_STR, parse_tdes_uint8_hex_str, &vec.cipher_auth.key},
        {KEY2_STR, parse_tdes_uint8_hex_str, &vec.cipher_auth.key},
        {KEY3_STR, parse_tdes_uint8_hex_str, &vec.cipher_auth.key},
        {IV_STR, parse_uint8_hex_str, &vec.iv},
        {PT_STR, parse_uint8_hex_str, &vec.pt},
        {CT_STR, parse_uint8_hex_str, &vec.ct},
        {NULL, NULL, NULL} 
};
 
struct fips_test_callback tdes_tests_interim_vectors[] = {
        {ENC_STR, parse_tdes_interim, NULL},
        {DEC_STR, parse_tdes_interim, NULL},
        {NK_STR, parse_tdes_interim, NULL},
        {NULL, NULL, NULL} 
};
 
struct fips_test_callback tdes_writeback_callbacks[] = {
        {COUNT_STR, NULL, NULL},
        {IV_STR, writeback_hex_str, &vec.iv},
        {KEY1_STR, writeback_tdes_hex_str, &vec.cipher_auth.key},
        {KEY2_STR, writeback_tdes_hex_str, &vec.cipher_auth.key},
        {KEY3_STR, writeback_tdes_hex_str, &vec.cipher_auth.key},
        {KEYS_STR, writeback_tdes_hex_str, &vec.cipher_auth.key},
        {PT_STR, writeback_hex_str, &vec.pt},
        {CT_STR, writeback_hex_str, &vec.ct},
        {NULL, NULL, NULL} 
};
 
#ifdef USE_JANSSON
static struct {
    enum fips_tdes_test_types type;
    const char *desc;
} const tdes_test_types[] = {
    {TDES_AFT, "AFT"},
    {TDES_MCT, "MCT"},
};
 
static struct {
    enum fips_tdes_test_mode mode;
    const char *desc;
} const tdes_test_modes[] = {
    {TDES_MODE_CBC, "CBC"},
    {TDES_MODE_ECB, "ECB"},
};
 
#define TDES_KEYS_TUPLE_LEN 24
 
static int
parser_tdes_read_key(const char *key, char *src, struct fips_val *val)
{
    uint8_t tmp_key[TDES_KEYS_TUPLE_LEN] = {0};
    uint32_t len, i;
 
    len = strlen(src) / 2;
 
    if (val->val) {
        memcpy(tmp_key, val->val, val->len);
        rte_free(val->val);
    }
 
    val->val = rte_zmalloc(NULL, TDES_KEYS_TUPLE_LEN, 0);
    if (!val->val)
        return -1;
 
    memcpy(val->val, tmp_key, TDES_KEYS_TUPLE_LEN);
 
    if (strstr(key, KEY1_JSON_STR)) {
        for (i = 0; i < len; i++) {
            char byte[3] = {src[i * 2], src[i * 2 + 1], '\0'};
 
            if (parser_read_uint8_hex(&val->val[i], byte) < 0)
                goto error_exit;
        }
 
        if (info.interim_info.tdes_data.nb_keys == 2)
            memcpy(val->val + 16, val->val, 8);
 
    } else if (strstr(key, KEY2_JSON_STR)) {
        for (i = 0; i < len; i++) {
            char byte[3] = {src[i * 2], src[i * 2 + 1], '\0'};
 
            if (parser_read_uint8_hex(&val->val[i + 8], byte) < 0)
                goto error_exit;
        }
 
    } else if (strstr(key, KEY3_JSON_STR)) {
        for (i = 0; i < len; i++) {
            char byte[3] = {src[i * 2], src[i * 2 + 1], '\0'};
 
            if (parser_read_uint8_hex(&val->val[i + 16], byte) < 0)
                goto error_exit;
        }
    } else
        return -EINVAL;
 
    val->len = TDES_KEYS_TUPLE_LEN;
 
    return 0;
 
error_exit:
    rte_free(val->val);
    memset(val, 0, sizeof(*val));
    return -EINVAL;
}
 
struct fips_test_callback tdes_dec_json_vectors[] = {
    {KEY1_JSON_STR, parser_tdes_read_key, &vec.cipher_auth.key},
    {KEY2_JSON_STR, parser_tdes_read_key, &vec.cipher_auth.key},
    {KEY3_JSON_STR, parser_tdes_read_key, &vec.cipher_auth.key},
    {IV_JSON_STR, parse_uint8_hex_str, &vec.iv},
    {CT_JSON_STR, parse_uint8_hex_str, &vec.ct},
    {NULL, NULL, NULL} 
};
 
struct fips_test_callback tdes_enc_json_vectors[] = {
    {KEY1_JSON_STR, parser_tdes_read_key, &vec.cipher_auth.key},
    {KEY2_JSON_STR, parser_tdes_read_key, &vec.cipher_auth.key},
    {KEY3_JSON_STR, parser_tdes_read_key, &vec.cipher_auth.key},
    {IV_JSON_STR, parse_uint8_hex_str, &vec.iv},
    {PT_JSON_STR, parse_uint8_hex_str, &vec.pt},
    {NULL, NULL, NULL} 
};
 
static int
parse_test_tdes_json_writeback(struct fips_val *val)
{
    struct fips_val tmp_val;
    json_t *tcId;
 
    tcId = json_object_get(json_info.json_test_case, "tcId");
 
    json_info.json_write_case = json_object();
    json_object_set(json_info.json_write_case, "tcId", tcId);
 
    if (info.op == FIPS_TEST_ENC_AUTH_GEN) {
        json_t *ct;
 
        tmp_val.val = val->val;
        tmp_val.len = vec.pt.len;
 
        writeback_hex_str("", info.one_line_text, &tmp_val);
        ct = json_string(info.one_line_text);
        json_object_set_new(json_info.json_write_case, CT_JSON_STR, ct);
 
        tmp_val.val = val->val + vec.pt.len;
        tmp_val.len = val->len - vec.pt.len;
 
        writeback_hex_str("", info.one_line_text, &tmp_val);
    } else {
        if (vec.status == RTE_CRYPTO_OP_STATUS_SUCCESS) {
            tmp_val.val = val->val;
            tmp_val.len = vec.ct.len;
 
            writeback_hex_str("", info.one_line_text, &tmp_val);
            json_object_set_new(json_info.json_write_case, PT_JSON_STR,
                                json_string(info.one_line_text));
        } else {
            json_object_set_new(json_info.json_write_case, "testPassed", json_false());
        }
    }
 
    return 0;
}
 
static int
parse_test_tdes_mct_json_writeback(struct fips_val *val)
{
    json_t *tcId, *resArr, *res, *ct, *pt, *key, *iv;
    struct fips_val tmp_val;
 
    tcId = json_object_get(json_info.json_test_case, "tcId");
    if (json_info.json_write_case) {
        json_t *wcId;
 
        wcId = json_object_get(json_info.json_write_case, "tcId");
        if (!json_equal(tcId, wcId)) {
            json_info.json_write_case = json_object();
            json_object_set(json_info.json_write_case, "tcId", tcId);
            json_object_set(json_info.json_write_case, "resultsArray", json_array());
        }
    } else {
        json_info.json_write_case = json_object();
        json_object_set(json_info.json_write_case, "tcId", tcId);
        json_object_set(json_info.json_write_case, "resultsArray", json_array());
    }
 
    resArr = json_object_get(json_info.json_write_case, "resultsArray");
    if (!json_is_array(resArr))
        return -EINVAL;
 
    res = json_object();
    if (info .op == FIPS_TEST_ENC_AUTH_GEN) {
        tmp_val.len = 8;
        tmp_val.val = vec.cipher_auth.key.val;
        writeback_hex_str("", info.one_line_text, &tmp_val);
        key = json_string(info.one_line_text);
        json_object_set_new(res, KEY1_JSON_STR, key);
 
        tmp_val.val = vec.cipher_auth.key.val + 8;
        writeback_hex_str("", info.one_line_text, &tmp_val);
        key = json_string(info.one_line_text);
        json_object_set_new(res, KEY2_JSON_STR, key);
 
        tmp_val.val =  vec.cipher_auth.key.val + 16;
        writeback_hex_str("", info.one_line_text, &tmp_val);
        key = json_string(info.one_line_text);
        json_object_set_new(res, KEY3_JSON_STR, key);
 
        if (info.interim_info.tdes_data.test_mode == TDES_MODE_CBC) {
            writeback_hex_str("", info.one_line_text, &val[2]);
            iv = json_string(info.one_line_text);
            json_object_set_new(res, IV_JSON_STR, iv);
        }
 
        writeback_hex_str("", info.one_line_text, &val[1]);
        pt = json_string(info.one_line_text);
        json_object_set_new(res, PT_JSON_STR, pt);
 
        tmp_val.val = val->val;
        tmp_val.len = vec.pt.len;
 
        writeback_hex_str("", info.one_line_text, &tmp_val);
        ct = json_string(info.one_line_text);
        json_object_set_new(res, CT_JSON_STR, ct);
 
        tmp_val.val = val->val + vec.pt.len;
        tmp_val.len = val->len - vec.pt.len;
 
        writeback_hex_str("", info.one_line_text, &tmp_val);
    } else {
        if (vec.status == RTE_CRYPTO_OP_STATUS_SUCCESS) {
            tmp_val.len = 8;
            tmp_val.val = vec.cipher_auth.key.val;
            writeback_hex_str("", info.one_line_text, &tmp_val);
            key = json_string(info.one_line_text);
            json_object_set_new(res, KEY1_JSON_STR, key);
 
            tmp_val.val = vec.cipher_auth.key.val + 8;
            writeback_hex_str("", info.one_line_text, &tmp_val);
            key = json_string(info.one_line_text);
            json_object_set_new(res, KEY2_JSON_STR, key);
 
            tmp_val.val = vec.cipher_auth.key.val + 16;
            writeback_hex_str("", info.one_line_text, &tmp_val);
            key = json_string(info.one_line_text);
            json_object_set_new(res, KEY3_JSON_STR, key);
 
            if (info.interim_info.tdes_data.test_mode == TDES_MODE_CBC) {
                writeback_hex_str("", info.one_line_text, &val[2]);
                iv = json_string(info.one_line_text);
                json_object_set_new(res, IV_JSON_STR, iv);
            }
 
            tmp_val.val = val->val;
            tmp_val.len = vec.ct.len;
 
            writeback_hex_str("", info.one_line_text, &tmp_val);
            pt = json_string(info.one_line_text);
            json_object_set_new(res, PT_JSON_STR, pt);
 
            writeback_hex_str("", info.one_line_text, &val[1]);
            ct = json_string(info.one_line_text);
            json_object_set_new(res, CT_JSON_STR, ct);
        } else {
            json_object_set_new(json_info.json_write_case, "testPassed", json_false());
        }
    }
 
    json_array_append_new(resArr, res);
 
    return 0;
}
 
int parse_test_tdes_json_init(void)
{
    json_t *type_obj = json_object_get(json_info.json_test_group, TESTTYPE_JSON_STR);
    json_t *algo_obj = json_object_get(json_info.json_vector_set, ALGO_JSON_STR);
    const char *type_str = json_string_value(type_obj);
    const char *algo_str = json_string_value(algo_obj);
    uint32_t i;
 
    if (json_info.json_test_group) {
        json_t *direction_obj, *opt_obj;
        const char *direction_str;
        int opt_val;
 
        direction_obj = json_object_get(json_info.json_test_group, DIR_JSON_STR);
        direction_str = json_string_value(direction_obj);
 
        if (strcmp(direction_str, OP_ENC_JSON_STR) == 0) {
            info.op = FIPS_TEST_ENC_AUTH_GEN;
            info.callbacks = tdes_enc_json_vectors;
        } else if (strcmp(direction_str, OP_DEC_JSON_STR) == 0) {
            info.op = FIPS_TEST_DEC_AUTH_VERIF;
            info.callbacks = tdes_dec_json_vectors;
        } else {
            return -EINVAL;
        }
 
        opt_obj = json_object_get(json_info.json_test_group, KEYOPT_JSON_STR);
        opt_val = json_integer_value(opt_obj);
        if (opt_val == 2)
            info.interim_info.tdes_data.nb_keys = 2;
        else
            info.interim_info.tdes_data.nb_keys = 3;
 
        info.interim_callbacks = NULL;
    }
 
    for (i = 0; i < RTE_DIM(tdes_test_types); i++)
        if (strstr(type_str, tdes_test_types[i].desc)) {
            info.interim_info.tdes_data.test_type =
                tdes_test_types[i].type;
            break;
        }
 
    if (i >= RTE_DIM(tdes_test_types))
        return -EINVAL;
 
    for (i = 0; RTE_DIM(tdes_test_modes); i++)
        if (strstr(algo_str, tdes_test_modes[i].desc)) {
            info.interim_info.tdes_data.test_mode =
                tdes_test_modes[i].mode;
            break;
        }
 
    if (i >= RTE_DIM(tdes_test_modes))
        return -EINVAL;
 
    switch (info.interim_info.tdes_data.test_type) {
    case TDES_AFT:
        info.parse_writeback = parse_test_tdes_json_writeback;
        break;
    case TDES_MCT:
        info.parse_writeback = parse_test_tdes_mct_json_writeback;
        break;
    default:
        info.parse_writeback = NULL;
    };
 
    if (info.parse_writeback == NULL)
        return -EINVAL;
 
    return 0;
}
#endif /* USE_JANSSON */
 
static int
parse_tdes_interim(const char *key, char *text,
        __rte_unused struct fips_val *val)
{
    if (strstr(key, ENC_STR))
        info.op = FIPS_TEST_ENC_AUTH_GEN;
    else if (strstr(key, DEC_STR))
        info.op = FIPS_TEST_DEC_AUTH_VERIF;
    else if (strstr(key, NK_STR)) {
        if (strcmp(text, "NumKeys = 1") == 0)
            info.interim_info.tdes_data.nb_keys = 1;
        else if (strcmp(text, "NumKeys = 2") == 0)
            info.interim_info.tdes_data.nb_keys = 2;
        else if (strcmp(text, "NumKeys = 3") == 0)
            info.interim_info.tdes_data.nb_keys = 3;
        else
            return -EINVAL;
    } else
        return -EINVAL;
 
    return 0;
}
 
static int
parse_tdes_uint8_hex_str(const char *key, char *src, struct fips_val *val)
{
    uint8_t tmp_key[24] = {0};
    uint32_t len, i;
 
    src += strlen(key);
 
    len = strlen(src) / 2;
 
    if (val->val) {
        memcpy(tmp_key, val->val, val->len);
        rte_free(val->val);
    }
 
    val->val = rte_zmalloc(NULL, 24, 0);
    if (!val->val)
        return -1;
 
    memcpy(val->val, tmp_key, 24);
 
    if (strstr(key, KEYS_STR)) {
        for (i = 0; i < len; i++) {
            char byte[3] = {src[i * 2], src[i * 2 + 1], '\0'};
 
            if (parser_read_uint8_hex(&val->val[i], byte) < 0)
                goto error_exit;
        }
 
        memcpy(val->val + 8, val->val, 8);
        memcpy(val->val + 16, val->val, 8);
 
    } else if (strstr(key, KEY1_STR)) {
        for (i = 0; i < len; i++) {
            char byte[3] = {src[i * 2], src[i * 2 + 1], '\0'};
 
            if (parser_read_uint8_hex(&val->val[i], byte) < 0)
                goto error_exit;
        }
 
        if (info.interim_info.tdes_data.nb_keys == 2)
            memcpy(val->val + 16, val->val, 8);
 
    } else if (strstr(key, KEY2_STR)) {
        for (i = 0; i < len; i++) {
            char byte[3] = {src[i * 2], src[i * 2 + 1], '\0'};
 
            if (parser_read_uint8_hex(&val->val[i + 8], byte) < 0)
                goto error_exit;
        }
 
    } else if (strstr(key, KEY3_STR)) {
        for (i = 0; i < len; i++) {
            char byte[3] = {src[i * 2], src[i * 2 + 1], '\0'};
 
            if (parser_read_uint8_hex(&val->val[i + 16], byte) < 0)
                goto error_exit;
        }
    } else
        return -EINVAL;
 
    val->len = 24;
 
    return 0;
 
error_exit:
    rte_free(val->val);
    memset(val, 0, sizeof(*val));
    return -EINVAL;
}
 
static int
parse_test_tdes_writeback(struct fips_val *val)
{
 
    if (info.op == FIPS_TEST_ENC_AUTH_GEN)
        fprintf(info.fp_wr, "%s", CT_STR);
    else
        fprintf(info.fp_wr, "%s", PT_STR);
 
    parse_write_hex_str(val);
 
    return 0;
 
}
 
static int
writeback_tdes_hex_str(const char *key, char *dst, struct fips_val *val)
{
    struct fips_val tmp_val = {0};
 
    tmp_val.len = 8;
 
    if (strstr(key, KEY1_STR))
        tmp_val.val = val->val;
    else if (strstr(key, KEY2_STR))
        tmp_val.val = val->val + 8;
    else if (strstr(key, KEY3_STR))
        tmp_val.val = val->val + 16;
    else
        return -EINVAL;
 
    return writeback_hex_str(key, dst, &tmp_val);
}
 
static int
rsp_test_tdes_check(struct fips_val *val)
{
    struct fips_val *data;
 
    if (info.op == FIPS_TEST_ENC_AUTH_GEN)
        data = &vec.ct;
    else
        data = &vec.pt;
 
    if (memcmp(val->val, data->val, val->len) == 0)
        fprintf(info.fp_wr, "Success\n");
    else
        fprintf(info.fp_wr, "Failed\n");
 
    return 0;
}
 
int
parse_test_tdes_init(void)
{
    uint32_t i;
 
    for (i = 0; i < info.nb_vec_lines; i++) {
        char *line = info.vec[i];
        uint32_t j;
 
        if (strstr(line, TEST_CBCI_KEY))
            return -EPERM;
 
        for (j = 0; j < RTE_DIM(test_types); j++)
            if (strstr(line, test_types[j].desc)) {
                info.interim_info.tdes_data.test_type =
                        test_types[j].type;
                if (strstr(line, TEST_TYPE_ECB_KEY))
                    info.interim_info.tdes_data.test_mode =
                        TDES_MODE_ECB;
                else
                    info.interim_info.tdes_data.test_mode =
                        TDES_MODE_CBC;
                break;
            }
    }
 
    info.parse_writeback = parse_test_tdes_writeback;
    info.callbacks = tdes_tests_vectors;
    info.interim_callbacks = tdes_tests_interim_vectors;
    info.writeback_callbacks = tdes_writeback_callbacks;
    info.kat_check = rsp_test_tdes_check;
 
    return 0;
}