| Index: srtp/crypto/math/stat.c
|
| diff --git a/srtp/crypto/math/stat.c b/srtp/crypto/math/stat.c
|
| deleted file mode 100644
|
| index aaff3c4fde1bb1dc7004639e7da285b5f362cdef..0000000000000000000000000000000000000000
|
| --- a/srtp/crypto/math/stat.c
|
| +++ /dev/null
|
| @@ -1,407 +0,0 @@
|
| -/*
|
| - * stats.c
|
| - *
|
| - * statistical tests for randomness (FIPS 140-2, Section 4.9)
|
| - *
|
| - * David A. McGrew
|
| - * Cisco Systems, Inc.
|
| - */
|
| -
|
| -/*
|
| - *
|
| - * Copyright (c) 2001-2006, Cisco Systems, Inc.
|
| - * All rights reserved.
|
| - *
|
| - * Redistribution and use in source and binary forms, with or without
|
| - * modification, are permitted provided that the following conditions
|
| - * are met:
|
| - *
|
| - * Redistributions of source code must retain the above copyright
|
| - * notice, this list of conditions and the following disclaimer.
|
| - *
|
| - * Redistributions in binary form must reproduce the above
|
| - * copyright notice, this list of conditions and the following
|
| - * disclaimer in the documentation and/or other materials provided
|
| - * with the distribution.
|
| - *
|
| - * Neither the name of the Cisco Systems, Inc. nor the names of its
|
| - * contributors may be used to endorse or promote products derived
|
| - * from this software without specific prior written permission.
|
| - *
|
| - * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
| - * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
| - * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
|
| - * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
|
| - * COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
|
| - * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
|
| - * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
|
| - * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
| - * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
| - * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
| - * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
|
| - * OF THE POSSIBILITY OF SUCH DAMAGE.
|
| - *
|
| - */
|
| -
|
| -#ifdef HAVE_CONFIG_H
|
| - #include <config.h>
|
| -#endif
|
| -
|
| -#include "stat.h"
|
| -
|
| -debug_module_t mod_stat = {
|
| - 0, /* debugging is off by default */
|
| - (char *)"stat test" /* printable module name */
|
| -};
|
| -
|
| -/*
|
| - * each test assumes that 20,000 bits (2500 octets) of data is
|
| - * provided as input
|
| - */
|
| -
|
| -#define STAT_TEST_DATA_LEN 2500
|
| -
|
| -err_status_t
|
| -stat_test_monobit(uint8_t *data) {
|
| - uint8_t *data_end = data + STAT_TEST_DATA_LEN;
|
| - uint16_t ones_count;
|
| -
|
| - ones_count = 0;
|
| - while (data < data_end) {
|
| - ones_count += octet_get_weight(*data);
|
| - data++;
|
| - }
|
| -
|
| - debug_print(mod_stat, "bit count: %d", ones_count);
|
| -
|
| - if ((ones_count < 9725) || (ones_count > 10275))
|
| - return err_status_algo_fail;
|
| -
|
| - return err_status_ok;
|
| -}
|
| -
|
| -err_status_t
|
| -stat_test_poker(uint8_t *data) {
|
| - int i;
|
| - uint8_t *data_end = data + STAT_TEST_DATA_LEN;
|
| - double poker;
|
| - uint16_t f[16] = {
|
| - 0, 0, 0, 0, 0, 0, 0, 0,
|
| - 0, 0, 0, 0, 0, 0, 0, 0
|
| - };
|
| -
|
| - while (data < data_end) {
|
| - f[*data & 0x0f]++; /* increment freq. count for low nibble */
|
| - f[(*data) >> 4]++; /* increment freq. count for high nibble */
|
| - data++;
|
| - }
|
| -
|
| - poker = 0.0;
|
| - for (i=0; i < 16; i++)
|
| - poker += (double) f[i] * f[i];
|
| -
|
| - poker *= (16.0 / 5000.0);
|
| - poker -= 5000.0;
|
| -
|
| - debug_print(mod_stat, "poker test: %f\n", poker);
|
| -
|
| - if ((poker < 2.16) || (poker > 46.17))
|
| - return err_status_algo_fail;
|
| -
|
| - return err_status_ok;
|
| -}
|
| -
|
| -
|
| -/*
|
| - * runs[i] holds the number of runs of size (i-1)
|
| - */
|
| -
|
| -err_status_t
|
| -stat_test_runs(uint8_t *data) {
|
| - uint8_t *data_end = data + STAT_TEST_DATA_LEN;
|
| - uint16_t runs[6] = { 0, 0, 0, 0, 0, 0 };
|
| - uint16_t gaps[6] = { 0, 0, 0, 0, 0, 0 };
|
| - uint16_t lo_value[6] = { 2315, 1114, 527, 240, 103, 103 };
|
| - uint16_t hi_value[6] = { 2685, 1386, 723, 384, 209, 209 };
|
| - int state = 0;
|
| - uint16_t mask;
|
| - int i;
|
| -
|
| - /*
|
| - * the state variable holds the number of bits in the
|
| - * current run (or gap, if negative)
|
| - */
|
| -
|
| - while (data < data_end) {
|
| -
|
| - /* loop over the bits of this byte */
|
| - for (mask = 1; mask < 256; mask <<= 1) {
|
| - if (*data & mask) {
|
| -
|
| - /* next bit is a one */
|
| - if (state > 0) {
|
| -
|
| - /* prefix is a run, so increment the run-count */
|
| - state++;
|
| -
|
| - /* check for long runs */
|
| - if (state > 25) {
|
| - debug_print(mod_stat, ">25 runs: %d", state);
|
| - return err_status_algo_fail;
|
| - }
|
| -
|
| - } else if (state < 0) {
|
| -
|
| - /* prefix is a gap */
|
| - if (state < -25) {
|
| - debug_print(mod_stat, ">25 gaps: %d", state);
|
| - return err_status_algo_fail; /* long-runs test failed */
|
| - }
|
| - if (state < -6) {
|
| - state = -6; /* group together gaps > 5 */
|
| - }
|
| - gaps[-1-state]++; /* increment gap count */
|
| - state = 1; /* set state at one set bit */
|
| - } else {
|
| -
|
| - /* state is zero; this happens only at initialization */
|
| - state = 1;
|
| - }
|
| - } else {
|
| -
|
| - /* next bit is a zero */
|
| - if (state > 0) {
|
| -
|
| - /* prefix is a run */
|
| - if (state > 25) {
|
| - debug_print(mod_stat, ">25 runs (2): %d", state);
|
| - return err_status_algo_fail; /* long-runs test failed */
|
| - }
|
| - if (state > 6) {
|
| - state = 6; /* group together runs > 5 */
|
| - }
|
| - runs[state-1]++; /* increment run count */
|
| - state = -1; /* set state at one zero bit */
|
| - } else if (state < 0) {
|
| -
|
| - /* prefix is a gap, so increment gap-count (decrement state) */
|
| - state--;
|
| -
|
| - /* check for long gaps */
|
| - if (state < -25) {
|
| - debug_print(mod_stat, ">25 gaps (2): %d", state);
|
| - return err_status_algo_fail;
|
| - }
|
| -
|
| - } else {
|
| -
|
| - /* state is zero; this happens only at initialization */
|
| - state = -1;
|
| - }
|
| - }
|
| - }
|
| -
|
| - /* move along to next octet */
|
| - data++;
|
| - }
|
| -
|
| - if (mod_stat.on) {
|
| - debug_print(mod_stat, "runs test", NULL);
|
| - for (i=0; i < 6; i++)
|
| - debug_print(mod_stat, " runs[]: %d", runs[i]);
|
| - for (i=0; i < 6; i++)
|
| - debug_print(mod_stat, " gaps[]: %d", gaps[i]);
|
| - }
|
| -
|
| - /* check run and gap counts against the fixed limits */
|
| - for (i=0; i < 6; i++)
|
| - if ( (runs[i] < lo_value[i] ) || (runs[i] > hi_value[i])
|
| - || (gaps[i] < lo_value[i] ) || (gaps[i] > hi_value[i]))
|
| - return err_status_algo_fail;
|
| -
|
| -
|
| - return err_status_ok;
|
| -}
|
| -
|
| -
|
| -/*
|
| - * the function stat_test_rand_source applys the FIPS-140-2 statistical
|
| - * tests to the random source defined by rs
|
| - *
|
| - */
|
| -
|
| -#define RAND_SRC_BUF_OCTETS 50 /* this value MUST divide 2500! */
|
| -
|
| -err_status_t
|
| -stat_test_rand_source(rand_source_func_t get_rand_bytes) {
|
| - int i;
|
| - double poker;
|
| - uint8_t *data, *data_end;
|
| - uint16_t f[16] = {
|
| - 0, 0, 0, 0, 0, 0, 0, 0,
|
| - 0, 0, 0, 0, 0, 0, 0, 0
|
| - };
|
| - uint8_t buffer[RAND_SRC_BUF_OCTETS];
|
| - err_status_t status;
|
| - int ones_count = 0;
|
| - uint16_t runs[6] = { 0, 0, 0, 0, 0, 0 };
|
| - uint16_t gaps[6] = { 0, 0, 0, 0, 0, 0 };
|
| - uint16_t lo_value[6] = { 2315, 1114, 527, 240, 103, 103 };
|
| - uint16_t hi_value[6] = { 2685, 1386, 723, 384, 209, 209 };
|
| - int state = 0;
|
| - uint16_t mask;
|
| -
|
| - /* counters for monobit, poker, and runs tests are initialized above */
|
| -
|
| - /* main loop: fill buffer, update counters for stat tests */
|
| - for (i=0; i < 2500; i+=RAND_SRC_BUF_OCTETS) {
|
| -
|
| - /* fill data buffer */
|
| - status = get_rand_bytes(buffer, RAND_SRC_BUF_OCTETS);
|
| - if (status) {
|
| - debug_print(mod_stat, "couldn't get rand bytes: %d",status);
|
| - return status;
|
| - }
|
| -
|
| -#if 0
|
| - debug_print(mod_stat, "%s",
|
| - octet_string_hex_string(buffer, RAND_SRC_BUF_OCTETS));
|
| -#endif
|
| -
|
| - data = buffer;
|
| - data_end = data + RAND_SRC_BUF_OCTETS;
|
| - while (data < data_end) {
|
| -
|
| - /* update monobit test counter */
|
| - ones_count += octet_get_weight(*data);
|
| -
|
| - /* update poker test counters */
|
| - f[*data & 0x0f]++; /* increment freq. count for low nibble */
|
| - f[(*data) >> 4]++; /* increment freq. count for high nibble */
|
| -
|
| - /* update runs test counters */
|
| - /* loop over the bits of this byte */
|
| - for (mask = 1; mask < 256; mask <<= 1) {
|
| - if (*data & mask) {
|
| -
|
| - /* next bit is a one */
|
| - if (state > 0) {
|
| -
|
| - /* prefix is a run, so increment the run-count */
|
| - state++;
|
| -
|
| - /* check for long runs */
|
| - if (state > 25) {
|
| - debug_print(mod_stat, ">25 runs (3): %d", state);
|
| - return err_status_algo_fail;
|
| - }
|
| -
|
| - } else if (state < 0) {
|
| -
|
| - /* prefix is a gap */
|
| - if (state < -25) {
|
| - debug_print(mod_stat, ">25 gaps (3): %d", state);
|
| - return err_status_algo_fail; /* long-runs test failed */
|
| - }
|
| - if (state < -6) {
|
| - state = -6; /* group together gaps > 5 */
|
| - }
|
| - gaps[-1-state]++; /* increment gap count */
|
| - state = 1; /* set state at one set bit */
|
| - } else {
|
| -
|
| - /* state is zero; this happens only at initialization */
|
| - state = 1;
|
| - }
|
| - } else {
|
| -
|
| - /* next bit is a zero */
|
| - if (state > 0) {
|
| -
|
| - /* prefix is a run */
|
| - if (state > 25) {
|
| - debug_print(mod_stat, ">25 runs (4): %d", state);
|
| - return err_status_algo_fail; /* long-runs test failed */
|
| - }
|
| - if (state > 6) {
|
| - state = 6; /* group together runs > 5 */
|
| - }
|
| - runs[state-1]++; /* increment run count */
|
| - state = -1; /* set state at one zero bit */
|
| - } else if (state < 0) {
|
| -
|
| - /* prefix is a gap, so increment gap-count (decrement state) */
|
| - state--;
|
| -
|
| - /* check for long gaps */
|
| - if (state < -25) {
|
| - debug_print(mod_stat, ">25 gaps (4): %d", state);
|
| - return err_status_algo_fail;
|
| - }
|
| -
|
| - } else {
|
| -
|
| - /* state is zero; this happens only at initialization */
|
| - state = -1;
|
| - }
|
| - }
|
| - }
|
| -
|
| - /* advance data pointer */
|
| - data++;
|
| - }
|
| - }
|
| -
|
| - /* check to see if test data is within bounds */
|
| -
|
| - /* check monobit test data */
|
| -
|
| - debug_print(mod_stat, "stat: bit count: %d", ones_count);
|
| -
|
| - if ((ones_count < 9725) || (ones_count > 10275)) {
|
| - debug_print(mod_stat, "stat: failed monobit test %d", ones_count);
|
| - return err_status_algo_fail;
|
| - }
|
| -
|
| - /* check poker test data */
|
| - poker = 0.0;
|
| - for (i=0; i < 16; i++)
|
| - poker += (double) f[i] * f[i];
|
| -
|
| - poker *= (16.0 / 5000.0);
|
| - poker -= 5000.0;
|
| -
|
| - debug_print(mod_stat, "stat: poker test: %f", poker);
|
| -
|
| - if ((poker < 2.16) || (poker > 46.17)) {
|
| - debug_print(mod_stat, "stat: failed poker test", NULL);
|
| - return err_status_algo_fail;
|
| - }
|
| -
|
| - /* check run and gap counts against the fixed limits */
|
| - for (i=0; i < 6; i++)
|
| - if ((runs[i] < lo_value[i] ) || (runs[i] > hi_value[i])
|
| - || (gaps[i] < lo_value[i] ) || (gaps[i] > hi_value[i])) {
|
| - debug_print(mod_stat, "stat: failed run/gap test", NULL);
|
| - return err_status_algo_fail;
|
| - }
|
| -
|
| - debug_print(mod_stat, "passed random stat test", NULL);
|
| - return err_status_ok;
|
| -}
|
| -
|
| -err_status_t
|
| -stat_test_rand_source_with_repetition(rand_source_func_t source, unsigned num_trials) {
|
| - unsigned int i;
|
| - err_status_t err = err_status_algo_fail;
|
| -
|
| - for (i=0; i < num_trials; i++) {
|
| - err = stat_test_rand_source(source);
|
| - if (err == err_status_ok) {
|
| - return err_status_ok;
|
| - }
|
| - debug_print(mod_stat, "failed stat test (try number %d)\n", i);
|
| - }
|
| -
|
| - return err;
|
| -}
|
|
|