aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/test/nist-sp-800-38a.py
diff options
context:
space:
mode:
Diffstat (limited to 'test/nist-sp-800-38a.py')
-rw-r--r--test/nist-sp-800-38a.py192
1 files changed, 108 insertions, 84 deletions
diff --git a/test/nist-sp-800-38a.py b/test/nist-sp-800-38a.py
index a9da9a1..07bf817 100644
--- a/test/nist-sp-800-38a.py
+++ b/test/nist-sp-800-38a.py
@@ -4,38 +4,40 @@
from datetime import datetime
import logging
-import toolkit
+import os.path
import sys
-_plaintexts = [
+import toolkit
+
+_TEST_PLAINTEXTS = [
'6bc1bee22e409f96e93d7e117393172a',
'ae2d8a571e03ac9c9eb76fac45af8e51',
'30c81c46a35ce411e5fbc1191a0a52ef',
'f69f2445df4f9b17ad2b417be66c3710'
]
-_keys = {
+_TEST_KEYS = {
toolkit.AES128: '2b7e151628aed2a6abf7158809cf4f3c',
toolkit.AES192: '8e73b0f7da0e6452c810f32b809079e562f8ead2522c6b7b',
toolkit.AES256: '603deb1015ca71be2b73aef0857d77811f352c073b6108d72d9810a30914dff4'
}
-_default_iv = '000102030405060708090a0b0c0d0e0f'
-_ctr_iv = 'f0f1f2f3f4f5f6f7f8f9fafbfcfdfeff'
+_TEST_IV = '000102030405060708090a0b0c0d0e0f'
+_TEST_IV_CTR = 'f0f1f2f3f4f5f6f7f8f9fafbfcfdfeff'
-_init_vectors = {
+_TEST_INIT_VECTORS = {
toolkit.AES128: {
- toolkit.CBC: _default_iv,
- toolkit.CFB: _default_iv,
- toolkit.OFB: _default_iv,
- toolkit.CTR: _ctr_iv
+ toolkit.CBC: _TEST_IV,
+ toolkit.CFB: _TEST_IV,
+ toolkit.OFB: _TEST_IV,
+ toolkit.CTR: _TEST_IV_CTR
}
}
-_init_vectors[toolkit.AES192] = _init_vectors[toolkit.AES128]
-_init_vectors[toolkit.AES256] = _init_vectors[toolkit.AES128]
+_TEST_INIT_VECTORS[toolkit.AES192] = _TEST_INIT_VECTORS[toolkit.AES128]
+_TEST_INIT_VECTORS[toolkit.AES256] = _TEST_INIT_VECTORS[toolkit.AES128]
-_ciphertexts = {
+_TEST_CIPHERTEXTS = {
toolkit.AES128: {
toolkit.ECB: [
'3ad77bb40d7a3660a89ecaf32466ef97',
@@ -134,7 +136,26 @@ _ciphertexts = {
}
}
-def _assert_output(actual, expected):
+def get_test_plaintexts(algorithm=None, mode=None):
+ return _TEST_PLAINTEXTS
+
+def get_test_key(algorithm, mode=None):
+ return _TEST_KEYS[algorithm]
+
+def get_test_iv(algorithm, mode):
+ if not toolkit.mode_requires_init_vector(mode):
+ return None
+ return _TEST_INIT_VECTORS[algorithm][mode]
+
+def get_test_ciphertexts(algorithm, mode):
+ return _TEST_CIPHERTEXTS[algorithm][mode]
+
+def get_tested_algorithms_and_modes():
+ for algorithm in _TEST_CIPHERTEXTS:
+ for mode in _TEST_CIPHERTEXTS[algorithm]:
+ yield algorithm, mode
+
+def verify_test_output(actual, expected):
if len(actual) != len(expected):
logging.error('Unexpected output length {0} (expected {1})'.format(len(actual), len(expected)))
return False
@@ -143,36 +164,68 @@ def _assert_output(actual, expected):
return False
return True
-class _TestExitCode:
+class TestExitCode:
SUCCESS, FAILURE, ERROR, SKIPPED = range(4)
-def _run_encryption_tests(tools, algorithm, mode, use_boxes=False):
- logging.info('Running encryption tests...')
- key = _keys[algorithm]
- iv = None
- if algorithm in _init_vectors and mode in _init_vectors[algorithm]:
- iv = _init_vectors[algorithm][mode]
- ciphertexts = _ciphertexts[algorithm][mode]
- _input = toolkit.BlockInput(key, _plaintexts, iv=iv)
- actual_output = tools.run_encrypt_block(algorithm, mode, _input, use_boxes)
- if _assert_output(actual_output, ciphertexts):
- return _TestExitCode.SUCCESS
+def run_encryption_test(tools, algorithm, mode, use_boxes=False):
+ logging.info('Running encryption test...')
+ logging.info('Algorithm: {}'.format(algorithm))
+ logging.info('Mode: {}'.format(mode))
+ plaintexts = get_test_plaintexts(algorithm, mode)
+ key = get_test_key(algorithm, mode)
+ iv = get_test_iv(algorithm, mode)
+ expected_ciphertexts = get_test_ciphertexts(algorithm, mode)
+ input_ = toolkit.BlockInput(key, plaintexts, iv=iv)
+ actual_ciphertexts = tools.run_encrypt_block(algorithm, mode, input_, use_boxes)
+ if verify_test_output(actual_ciphertexts, expected_ciphertexts):
+ return TestExitCode.SUCCESS
else:
- return _TestExitCode.FAILURE
-
-def _run_decryption_tests(tools, algorithm, mode, use_boxes=False):
- logging.info('Running decryption tests...')
- key = _keys[algorithm]
- iv = None
- if algorithm in _init_vectors and mode in _init_vectors[algorithm]:
- iv = _init_vectors[algorithm][mode]
- ciphertexts = _ciphertexts[algorithm][mode]
- _input = toolkit.BlockInput(key, ciphertexts, iv=iv)
- actual_output = tools.run_decrypt_block(algorithm, mode, _input, use_boxes)
- if _assert_output(actual_output, _plaintexts):
- return _TestExitCode.SUCCESS
+ return TestExitCode.FAILURE
+
+def run_decryption_test(tools, algorithm, mode, use_boxes=False):
+ logging.info('Running decryption test...')
+ logging.info('Algorithm: {}'.format(algorithm))
+ logging.info('Mode: {}'.format(mode))
+ ciphertexts = get_test_ciphertexts(algorithm, mode)
+ key = get_test_key(algorithm, mode)
+ iv = get_test_iv(algorithm, mode)
+ expected_plaintexts = get_test_plaintexts(algorithm, mode)
+ input_ = toolkit.BlockInput(key, ciphertexts, iv=iv)
+ actual_plaintexts = tools.run_decrypt_block(algorithm, mode, input_, use_boxes)
+ if verify_test_output(actual_plaintexts, expected_plaintexts):
+ return TestExitCode.SUCCESS
else:
- return _TestExitCode.FAILURE
+ return TestExitCode.FAILURE
+
+def _run_tests(tools, algorithm, mode, use_boxes=False):
+ maybe_algorithm = toolkit.is_algorithm_supported(algorithm)
+ if maybe_algorithm is None:
+ logging.warn('Unknown or unsupported algorithm: {}'.format(maybe_algorithm))
+ yield TestExitCode.SKIPPED
+ raise StopIteration
+ algorithm = maybe_algorithm
+ maybe_mode = toolkit.is_mode_supported(mode)
+ if maybe_mode is None:
+ logging.warn('Unknown or unsupported node: {}'.format(maybe_mode))
+ yield TestExitCode.SKIPPED
+ raise StopIteration
+ mode = maybe_mode
+ try:
+ yield run_encryption_test(tools, algorithm, mode, use_boxes=args.use_boxes)
+ except Exception as e:
+ logging.error('Encountered an exception!')
+ logging.exception(e)
+ yield TestExitCode.ERROR
+ try:
+ yield run_decryption_test(tools, algorithm, mode, use_boxes=args.use_boxes)
+ except Exception as e:
+ logging.error('Encountered an exception!')
+ logging.exception(e)
+ yield TestExitCode.ERROR
+
+def _build_default_log_path():
+ return datetime.now().strftime('{}_%Y-%m-%d_%H-%M-%S.log').format(
+ os.path.splitext(os.path.basename(__file__))[0])
if __name__ == '__main__':
import argparse
@@ -183,57 +236,28 @@ if __name__ == '__main__':
help='use Intel SDE to run *.exe files')
parser.add_argument('--use-boxes', '-b', action='store_true',
help='use the "boxes" interface')
- parser.add_argument('--log', '-l', help='set log file path')
+ parser.add_argument('--log', '-l', default=_build_default_log_path(),
+ help='set log file path')
args = parser.parse_args()
tools = toolkit.Tools(args.path, use_sde=args.sde)
- logging_options = {
- 'format': '%(asctime)s | %(module)s | %(levelname)s | %(message)s',
- 'level': logging.DEBUG }
-
- if args.log is None:
- logging_options['filename'] = datetime.now().strftime('nist-sp-800-38a_%Y-%m-%d_%H-%M-%S.log')
- else:
- logging_options['filename'] = args.log
- logging.basicConfig(**logging_options)
+ logging.basicConfig(filename=args.log,
+ format='%(asctime)s | %(module)s | %(levelname)s | %(message)s',
+ level=logging.DEBUG,
+ datefmt='%Y-%m-%d %H:%M:%S')
exit_codes = []
- for algorithm in _ciphertexts:
- maybe_algorithm = toolkit.is_algorithm_supported(algorithm)
- if maybe_algorithm is None:
- logging.warn('Unknown or unsupported algorithm: ' + algorithm)
- exit_codes.append(_TestExitCode.SKIPPED)
- continue
- algorithm = maybe_algorithm
- logging.info('Algorithm: ' + algorithm)
- for mode in _ciphertexts[algorithm]:
- maybe_mode = toolkit.is_mode_supported(mode)
- if maybe_mode is None:
- logging.warn('Unknown or unsupported mode: ' + mode)
- exit_codes.append(_TestExitCode.SKIPPED)
- continue
- mode = maybe_mode
- logging.info('Mode: ' + mode)
- try:
- exit_codes.append(_run_encryption_tests(tools, algorithm, mode, use_boxes=args.use_boxes))
- except Exception as e:
- logging.error('Encountered an exception!')
- logging.exception(e)
- exit_codes.append(_TestExitCode.ERROR)
- try:
- exit_codes.append(_run_decryption_tests(tools, algorithm, mode, use_boxes=args.use_boxes))
- except Exception as e:
- logging.error('Encountered an exception!')
- logging.exception(e)
- exit_codes.append(_TestExitCode.ERROR)
+ for algorithm, mode in get_tested_algorithms_and_modes():
+ exit_codes.extend(_run_tests(tools, algorithm, mode, use_boxes=args.use_boxes))
+
logging.info('Test exit codes:')
- logging.info('\tSkipped: {0}'.format(exit_codes.count(_TestExitCode.SKIPPED)))
- logging.info('\tError(s): {0}'.format(exit_codes.count(_TestExitCode.ERROR)))
- logging.info('\tSucceeded: {0}'.format(exit_codes.count(_TestExitCode.SUCCESS)))
- logging.info('\tFailed: {0}'.format(exit_codes.count(_TestExitCode.FAILURE)))
- if (exit_codes.count(_TestExitCode.ERROR) == 0 and
- exit_codes.count(_TestExitCode.FAILURE) == 0):
+ logging.info('\tSkipped: {0}'.format(exit_codes.count(TestExitCode.SKIPPED)))
+ logging.info('\tError(s): {0}'.format(exit_codes.count(TestExitCode.ERROR)))
+ logging.info('\tSucceeded: {0}'.format(exit_codes.count(TestExitCode.SUCCESS)))
+ logging.info('\tFailed: {0}'.format(exit_codes.count(TestExitCode.FAILURE)))
+ if (exit_codes.count(TestExitCode.ERROR) == 0 and
+ exit_codes.count(TestExitCode.FAILURE) == 0):
sys.exit()
else:
sys.exit(1)
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-10 19:43:26 +0000