25개 이상의 토픽을 선택하실 수 없습니다. Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 

170 lines
6.3 KiB

  1. /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  2. * All rights reserved.
  3. *
  4. * This package is an SSL implementation written
  5. * by Eric Young (eay@cryptsoft.com).
  6. * The implementation was written so as to conform with Netscapes SSL.
  7. *
  8. * This library is free for commercial and non-commercial use as long as
  9. * the following conditions are aheared to. The following conditions
  10. * apply to all code found in this distribution, be it the RC4, RSA,
  11. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  12. * included with this distribution is covered by the same copyright terms
  13. * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  14. *
  15. * Copyright remains Eric Young's, and as such any Copyright notices in
  16. * the code are not to be removed.
  17. * If this package is used in a product, Eric Young should be given attribution
  18. * as the author of the parts of the library used.
  19. * This can be in the form of a textual message at program startup or
  20. * in documentation (online or textual) provided with the package.
  21. *
  22. * Redistribution and use in source and binary forms, with or without
  23. * modification, are permitted provided that the following conditions
  24. * are met:
  25. * 1. Redistributions of source code must retain the copyright
  26. * notice, this list of conditions and the following disclaimer.
  27. * 2. Redistributions in binary form must reproduce the above copyright
  28. * notice, this list of conditions and the following disclaimer in the
  29. * documentation and/or other materials provided with the distribution.
  30. * 3. All advertising materials mentioning features or use of this software
  31. * must display the following acknowledgement:
  32. * "This product includes cryptographic software written by
  33. * Eric Young (eay@cryptsoft.com)"
  34. * The word 'cryptographic' can be left out if the rouines from the library
  35. * being used are not cryptographic related :-).
  36. * 4. If you include any Windows specific code (or a derivative thereof) from
  37. * the apps directory (application code) you must include an acknowledgement:
  38. * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  39. *
  40. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  41. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  42. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  43. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  44. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  45. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  46. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  47. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  48. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  49. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  50. * SUCH DAMAGE.
  51. *
  52. * The licence and distribution terms for any publically available version or
  53. * derivative of this code cannot be changed. i.e. this code cannot simply be
  54. * copied and put under another distribution licence
  55. * [including the GNU Public Licence.] */
  56. #include <stdio.h>
  57. #include <string.h>
  58. #include <memory>
  59. #include <string>
  60. #include <vector>
  61. #include <openssl/crypto.h>
  62. #include <openssl/digest.h>
  63. #include <openssl/hmac.h>
  64. #include "../test/file_test.h"
  65. static const EVP_MD *GetDigest(const std::string &name) {
  66. if (name == "MD5") {
  67. return EVP_md5();
  68. } else if (name == "SHA1") {
  69. return EVP_sha1();
  70. } else if (name == "SHA224") {
  71. return EVP_sha224();
  72. } else if (name == "SHA256") {
  73. return EVP_sha256();
  74. } else if (name == "SHA384") {
  75. return EVP_sha384();
  76. } else if (name == "SHA512") {
  77. return EVP_sha512();
  78. }
  79. return nullptr;
  80. }
  81. static bool TestHMAC(FileTest *t, void *arg) {
  82. std::string digest_str;
  83. if (!t->GetAttribute(&digest_str, "HMAC")) {
  84. return false;
  85. }
  86. const EVP_MD *digest = GetDigest(digest_str);
  87. if (digest == nullptr) {
  88. t->PrintLine("Unknown digest '%s'", digest_str.c_str());
  89. return false;
  90. }
  91. std::vector<uint8_t> key, input, output;
  92. if (!t->GetBytes(&key, "Key") ||
  93. !t->GetBytes(&input, "Input") ||
  94. !t->GetBytes(&output, "Output")) {
  95. return false;
  96. }
  97. // Test using the one-shot API.
  98. unsigned expected_mac_len = EVP_MD_size(digest);
  99. std::unique_ptr<uint8_t[]> mac(new uint8_t[expected_mac_len]);
  100. unsigned mac_len;
  101. if (nullptr == HMAC(digest, key.data(), key.size(), input.data(),
  102. input.size(), mac.get(), &mac_len) ||
  103. mac_len != expected_mac_len ||
  104. !t->ExpectBytesEqual(output.data(), output.size(), mac.get(), mac_len)) {
  105. t->PrintLine("One-shot API failed.");
  106. return false;
  107. }
  108. // Test using HMAC_CTX.
  109. bssl::ScopedHMAC_CTX ctx;
  110. if (!HMAC_Init_ex(ctx.get(), key.data(), key.size(), digest, nullptr) ||
  111. !HMAC_Update(ctx.get(), input.data(), input.size()) ||
  112. !HMAC_Final(ctx.get(), mac.get(), &mac_len) ||
  113. mac_len != expected_mac_len ||
  114. !t->ExpectBytesEqual(output.data(), output.size(), mac.get(), mac_len)) {
  115. t->PrintLine("HMAC_CTX failed.");
  116. return false;
  117. }
  118. // Test that an HMAC_CTX may be reset with the same key.
  119. if (!HMAC_Init_ex(ctx.get(), nullptr, 0, digest, nullptr) ||
  120. !HMAC_Update(ctx.get(), input.data(), input.size()) ||
  121. !HMAC_Final(ctx.get(), mac.get(), &mac_len) ||
  122. mac_len != expected_mac_len ||
  123. !t->ExpectBytesEqual(output.data(), output.size(), mac.get(), mac_len)) {
  124. t->PrintLine("HMAC_CTX with reset failed.");
  125. return false;
  126. }
  127. // Test feeding the input in byte by byte.
  128. if (!HMAC_Init_ex(ctx.get(), nullptr, 0, nullptr, nullptr)) {
  129. t->PrintLine("HMAC_CTX streaming failed.");
  130. return false;
  131. }
  132. for (size_t i = 0; i < input.size(); i++) {
  133. if (!HMAC_Update(ctx.get(), &input[i], 1)) {
  134. t->PrintLine("HMAC_CTX streaming failed.");
  135. return false;
  136. }
  137. }
  138. if (!HMAC_Final(ctx.get(), mac.get(), &mac_len) ||
  139. mac_len != expected_mac_len ||
  140. !t->ExpectBytesEqual(output.data(), output.size(), mac.get(), mac_len)) {
  141. t->PrintLine("HMAC_CTX streaming failed.");
  142. return false;
  143. }
  144. return true;
  145. }
  146. int main(int argc, char *argv[]) {
  147. CRYPTO_library_init();
  148. if (argc != 2) {
  149. fprintf(stderr, "%s <test file.txt>\n", argv[0]);
  150. return 1;
  151. }
  152. return FileTestMain(TestHMAC, nullptr, argv[1]);
  153. }