| Index: openssl/fips/fipsalgtest.pl
|
| ===================================================================
|
| --- openssl/fips/fipsalgtest.pl (revision 105093)
|
| +++ openssl/fips/fipsalgtest.pl (working copy)
|
| @@ -1,887 +0,0 @@
|
| -#!/usr/bin/perl -w
|
| -# Perl utility to run or verify FIPS 140-2 CMVP algorithm tests based on the
|
| -# pathnames of input algorithm test files actually present (the unqualified
|
| -# file names are consistent but the pathnames are not).
|
| -#
|
| -
|
| -# FIPS test definitions
|
| -# List of all the unqualified file names we expect and command lines to run
|
| -
|
| -# DSA tests
|
| -my @fips_dsa_test_list = (
|
| -
|
| - "DSA",
|
| -
|
| - [ "PQGGen", "fips_dssvs pqg" ],
|
| - [ "KeyPair", "fips_dssvs keypair" ],
|
| - [ "SigGen", "fips_dssvs siggen" ],
|
| - [ "SigVer", "fips_dssvs sigver" ]
|
| -
|
| -);
|
| -
|
| -my @fips_dsa_pqgver_test_list = (
|
| -
|
| - [ "PQGVer", "fips_dssvs pqgver" ]
|
| -
|
| -);
|
| -
|
| -# RSA tests
|
| -
|
| -my @fips_rsa_test_list = (
|
| -
|
| - "RSA",
|
| -
|
| - [ "SigGen15", "fips_rsastest" ],
|
| - [ "SigVer15", "fips_rsavtest" ],
|
| - [ "SigVerRSA", "fips_rsavtest -x931" ],
|
| - [ "KeyGenRSA", "fips_rsagtest" ],
|
| - [ "SigGenRSA", "fips_rsastest -x931" ]
|
| -
|
| -);
|
| -
|
| -# Special cases for PSS. The filename itself is
|
| -# not sufficient to determine the test. Addditionally we
|
| -# need to examine the file contents to determine the salt length
|
| -# In these cases the test filename has (saltlen) appended.
|
| -
|
| -# RSA PSS salt length 0 tests
|
| -
|
| -my @fips_rsa_pss0_test_list = (
|
| -
|
| - [ "SigGenPSS(0)", "fips_rsastest -saltlen 0" ],
|
| - [ "SigVerPSS(0)", "fips_rsavtest -saltlen 0" ]
|
| -
|
| -);
|
| -
|
| -# RSA PSS salt length 62 tests
|
| -
|
| -my @fips_rsa_pss62_test_list = (
|
| - [ "SigGenPSS(62)", "fips_rsastest -saltlen 62" ],
|
| - [ "SigVerPSS(62)", "fips_rsavtest -saltlen 62" ]
|
| -
|
| -);
|
| -
|
| -# SHA tests
|
| -
|
| -my @fips_sha_test_list = (
|
| -
|
| - "SHA",
|
| -
|
| - [ "SHA1LongMsg", "fips_shatest" ],
|
| - [ "SHA1Monte", "fips_shatest" ],
|
| - [ "SHA1ShortMsg", "fips_shatest" ],
|
| - [ "SHA224LongMsg", "fips_shatest" ],
|
| - [ "SHA224Monte", "fips_shatest" ],
|
| - [ "SHA224ShortMsg", "fips_shatest" ],
|
| - [ "SHA256LongMsg", "fips_shatest" ],
|
| - [ "SHA256Monte", "fips_shatest" ],
|
| - [ "SHA256ShortMsg", "fips_shatest" ],
|
| - [ "SHA384LongMsg", "fips_shatest" ],
|
| - [ "SHA384Monte", "fips_shatest" ],
|
| - [ "SHA384ShortMsg", "fips_shatest" ],
|
| - [ "SHA512LongMsg", "fips_shatest" ],
|
| - [ "SHA512Monte", "fips_shatest" ],
|
| - [ "SHA512ShortMsg", "fips_shatest" ]
|
| -
|
| -);
|
| -
|
| -# HMAC
|
| -
|
| -my @fips_hmac_test_list = (
|
| -
|
| - "HMAC",
|
| -
|
| - [ "HMAC", "fips_hmactest" ]
|
| -
|
| -);
|
| -
|
| -# RAND tests, AES version
|
| -
|
| -my @fips_rand_aes_test_list = (
|
| -
|
| - "RAND (AES)",
|
| -
|
| - [ "ANSI931_AES128MCT", "fips_rngvs mct" ],
|
| - [ "ANSI931_AES192MCT", "fips_rngvs mct" ],
|
| - [ "ANSI931_AES256MCT", "fips_rngvs mct" ],
|
| - [ "ANSI931_AES128VST", "fips_rngvs vst" ],
|
| - [ "ANSI931_AES192VST", "fips_rngvs vst" ],
|
| - [ "ANSI931_AES256VST", "fips_rngvs vst" ]
|
| -
|
| -);
|
| -
|
| -# RAND tests, DES2 version
|
| -
|
| -my @fips_rand_des2_test_list = (
|
| -
|
| - "RAND (DES2)",
|
| -
|
| - [ "ANSI931_TDES2MCT", "fips_rngvs mct" ],
|
| - [ "ANSI931_TDES2VST", "fips_rngvs vst" ]
|
| -
|
| -);
|
| -
|
| -# AES tests
|
| -
|
| -my @fips_aes_test_list = (
|
| -
|
| - "AES",
|
| -
|
| - [ "CBCGFSbox128", "fips_aesavs -f" ],
|
| - [ "CBCGFSbox192", "fips_aesavs -f" ],
|
| - [ "CBCGFSbox256", "fips_aesavs -f" ],
|
| - [ "CBCKeySbox128", "fips_aesavs -f" ],
|
| - [ "CBCKeySbox192", "fips_aesavs -f" ],
|
| - [ "CBCKeySbox256", "fips_aesavs -f" ],
|
| - [ "CBCMCT128", "fips_aesavs -f" ],
|
| - [ "CBCMCT192", "fips_aesavs -f" ],
|
| - [ "CBCMCT256", "fips_aesavs -f" ],
|
| - [ "CBCMMT128", "fips_aesavs -f" ],
|
| - [ "CBCMMT192", "fips_aesavs -f" ],
|
| - [ "CBCMMT256", "fips_aesavs -f" ],
|
| - [ "CBCVarKey128", "fips_aesavs -f" ],
|
| - [ "CBCVarKey192", "fips_aesavs -f" ],
|
| - [ "CBCVarKey256", "fips_aesavs -f" ],
|
| - [ "CBCVarTxt128", "fips_aesavs -f" ],
|
| - [ "CBCVarTxt192", "fips_aesavs -f" ],
|
| - [ "CBCVarTxt256", "fips_aesavs -f" ],
|
| - [ "CFB128GFSbox128", "fips_aesavs -f" ],
|
| - [ "CFB128GFSbox192", "fips_aesavs -f" ],
|
| - [ "CFB128GFSbox256", "fips_aesavs -f" ],
|
| - [ "CFB128KeySbox128", "fips_aesavs -f" ],
|
| - [ "CFB128KeySbox192", "fips_aesavs -f" ],
|
| - [ "CFB128KeySbox256", "fips_aesavs -f" ],
|
| - [ "CFB128MCT128", "fips_aesavs -f" ],
|
| - [ "CFB128MCT192", "fips_aesavs -f" ],
|
| - [ "CFB128MCT256", "fips_aesavs -f" ],
|
| - [ "CFB128MMT128", "fips_aesavs -f" ],
|
| - [ "CFB128MMT192", "fips_aesavs -f" ],
|
| - [ "CFB128MMT256", "fips_aesavs -f" ],
|
| - [ "CFB128VarKey128", "fips_aesavs -f" ],
|
| - [ "CFB128VarKey192", "fips_aesavs -f" ],
|
| - [ "CFB128VarKey256", "fips_aesavs -f" ],
|
| - [ "CFB128VarTxt128", "fips_aesavs -f" ],
|
| - [ "CFB128VarTxt192", "fips_aesavs -f" ],
|
| - [ "CFB128VarTxt256", "fips_aesavs -f" ],
|
| - [ "CFB8GFSbox128", "fips_aesavs -f" ],
|
| - [ "CFB8GFSbox192", "fips_aesavs -f" ],
|
| - [ "CFB8GFSbox256", "fips_aesavs -f" ],
|
| - [ "CFB8KeySbox128", "fips_aesavs -f" ],
|
| - [ "CFB8KeySbox192", "fips_aesavs -f" ],
|
| - [ "CFB8KeySbox256", "fips_aesavs -f" ],
|
| - [ "CFB8MCT128", "fips_aesavs -f" ],
|
| - [ "CFB8MCT192", "fips_aesavs -f" ],
|
| - [ "CFB8MCT256", "fips_aesavs -f" ],
|
| - [ "CFB8MMT128", "fips_aesavs -f" ],
|
| - [ "CFB8MMT192", "fips_aesavs -f" ],
|
| - [ "CFB8MMT256", "fips_aesavs -f" ],
|
| - [ "CFB8VarKey128", "fips_aesavs -f" ],
|
| - [ "CFB8VarKey192", "fips_aesavs -f" ],
|
| - [ "CFB8VarKey256", "fips_aesavs -f" ],
|
| - [ "CFB8VarTxt128", "fips_aesavs -f" ],
|
| - [ "CFB8VarTxt192", "fips_aesavs -f" ],
|
| - [ "CFB8VarTxt256", "fips_aesavs -f" ],
|
| -
|
| - [ "ECBGFSbox128", "fips_aesavs -f" ],
|
| - [ "ECBGFSbox192", "fips_aesavs -f" ],
|
| - [ "ECBGFSbox256", "fips_aesavs -f" ],
|
| - [ "ECBKeySbox128", "fips_aesavs -f" ],
|
| - [ "ECBKeySbox192", "fips_aesavs -f" ],
|
| - [ "ECBKeySbox256", "fips_aesavs -f" ],
|
| - [ "ECBMCT128", "fips_aesavs -f" ],
|
| - [ "ECBMCT192", "fips_aesavs -f" ],
|
| - [ "ECBMCT256", "fips_aesavs -f" ],
|
| - [ "ECBMMT128", "fips_aesavs -f" ],
|
| - [ "ECBMMT192", "fips_aesavs -f" ],
|
| - [ "ECBMMT256", "fips_aesavs -f" ],
|
| - [ "ECBVarKey128", "fips_aesavs -f" ],
|
| - [ "ECBVarKey192", "fips_aesavs -f" ],
|
| - [ "ECBVarKey256", "fips_aesavs -f" ],
|
| - [ "ECBVarTxt128", "fips_aesavs -f" ],
|
| - [ "ECBVarTxt192", "fips_aesavs -f" ],
|
| - [ "ECBVarTxt256", "fips_aesavs -f" ],
|
| - [ "OFBGFSbox128", "fips_aesavs -f" ],
|
| - [ "OFBGFSbox192", "fips_aesavs -f" ],
|
| - [ "OFBGFSbox256", "fips_aesavs -f" ],
|
| - [ "OFBKeySbox128", "fips_aesavs -f" ],
|
| - [ "OFBKeySbox192", "fips_aesavs -f" ],
|
| - [ "OFBKeySbox256", "fips_aesavs -f" ],
|
| - [ "OFBMCT128", "fips_aesavs -f" ],
|
| - [ "OFBMCT192", "fips_aesavs -f" ],
|
| - [ "OFBMCT256", "fips_aesavs -f" ],
|
| - [ "OFBMMT128", "fips_aesavs -f" ],
|
| - [ "OFBMMT192", "fips_aesavs -f" ],
|
| - [ "OFBMMT256", "fips_aesavs -f" ],
|
| - [ "OFBVarKey128", "fips_aesavs -f" ],
|
| - [ "OFBVarKey192", "fips_aesavs -f" ],
|
| - [ "OFBVarKey256", "fips_aesavs -f" ],
|
| - [ "OFBVarTxt128", "fips_aesavs -f" ],
|
| - [ "OFBVarTxt192", "fips_aesavs -f" ],
|
| - [ "OFBVarTxt256", "fips_aesavs -f" ]
|
| -
|
| -);
|
| -
|
| -my @fips_aes_cfb1_test_list = (
|
| -
|
| - # AES CFB1 tests
|
| -
|
| - [ "CFB1GFSbox128", "fips_aesavs -f" ],
|
| - [ "CFB1GFSbox192", "fips_aesavs -f" ],
|
| - [ "CFB1GFSbox256", "fips_aesavs -f" ],
|
| - [ "CFB1KeySbox128", "fips_aesavs -f" ],
|
| - [ "CFB1KeySbox192", "fips_aesavs -f" ],
|
| - [ "CFB1KeySbox256", "fips_aesavs -f" ],
|
| - [ "CFB1MCT128", "fips_aesavs -f" ],
|
| - [ "CFB1MCT192", "fips_aesavs -f" ],
|
| - [ "CFB1MCT256", "fips_aesavs -f" ],
|
| - [ "CFB1MMT128", "fips_aesavs -f" ],
|
| - [ "CFB1MMT192", "fips_aesavs -f" ],
|
| - [ "CFB1MMT256", "fips_aesavs -f" ],
|
| - [ "CFB1VarKey128", "fips_aesavs -f" ],
|
| - [ "CFB1VarKey192", "fips_aesavs -f" ],
|
| - [ "CFB1VarKey256", "fips_aesavs -f" ],
|
| - [ "CFB1VarTxt128", "fips_aesavs -f" ],
|
| - [ "CFB1VarTxt192", "fips_aesavs -f" ],
|
| - [ "CFB1VarTxt256", "fips_aesavs -f" ]
|
| -
|
| -);
|
| -
|
| -# Triple DES tests
|
| -
|
| -my @fips_des3_test_list = (
|
| -
|
| - "Triple DES",
|
| -
|
| - [ "TCBCinvperm", "fips_desmovs -f" ],
|
| - [ "TCBCMMT1", "fips_desmovs -f" ],
|
| - [ "TCBCMMT2", "fips_desmovs -f" ],
|
| - [ "TCBCMMT3", "fips_desmovs -f" ],
|
| - [ "TCBCMonte1", "fips_desmovs -f" ],
|
| - [ "TCBCMonte2", "fips_desmovs -f" ],
|
| - [ "TCBCMonte3", "fips_desmovs -f" ],
|
| - [ "TCBCpermop", "fips_desmovs -f" ],
|
| - [ "TCBCsubtab", "fips_desmovs -f" ],
|
| - [ "TCBCvarkey", "fips_desmovs -f" ],
|
| - [ "TCBCvartext", "fips_desmovs -f" ],
|
| - [ "TCFB64invperm", "fips_desmovs -f" ],
|
| - [ "TCFB64MMT1", "fips_desmovs -f" ],
|
| - [ "TCFB64MMT2", "fips_desmovs -f" ],
|
| - [ "TCFB64MMT3", "fips_desmovs -f" ],
|
| - [ "TCFB64Monte1", "fips_desmovs -f" ],
|
| - [ "TCFB64Monte2", "fips_desmovs -f" ],
|
| - [ "TCFB64Monte3", "fips_desmovs -f" ],
|
| - [ "TCFB64permop", "fips_desmovs -f" ],
|
| - [ "TCFB64subtab", "fips_desmovs -f" ],
|
| - [ "TCFB64varkey", "fips_desmovs -f" ],
|
| - [ "TCFB64vartext", "fips_desmovs -f" ],
|
| - [ "TCFB8invperm", "fips_desmovs -f" ],
|
| - [ "TCFB8MMT1", "fips_desmovs -f" ],
|
| - [ "TCFB8MMT2", "fips_desmovs -f" ],
|
| - [ "TCFB8MMT3", "fips_desmovs -f" ],
|
| - [ "TCFB8Monte1", "fips_desmovs -f" ],
|
| - [ "TCFB8Monte2", "fips_desmovs -f" ],
|
| - [ "TCFB8Monte3", "fips_desmovs -f" ],
|
| - [ "TCFB8permop", "fips_desmovs -f" ],
|
| - [ "TCFB8subtab", "fips_desmovs -f" ],
|
| - [ "TCFB8varkey", "fips_desmovs -f" ],
|
| - [ "TCFB8vartext", "fips_desmovs -f" ],
|
| - [ "TECBinvperm", "fips_desmovs -f" ],
|
| - [ "TECBMMT1", "fips_desmovs -f" ],
|
| - [ "TECBMMT2", "fips_desmovs -f" ],
|
| - [ "TECBMMT3", "fips_desmovs -f" ],
|
| - [ "TECBMonte1", "fips_desmovs -f" ],
|
| - [ "TECBMonte2", "fips_desmovs -f" ],
|
| - [ "TECBMonte3", "fips_desmovs -f" ],
|
| - [ "TECBpermop", "fips_desmovs -f" ],
|
| - [ "TECBsubtab", "fips_desmovs -f" ],
|
| - [ "TECBvarkey", "fips_desmovs -f" ],
|
| - [ "TECBvartext", "fips_desmovs -f" ],
|
| - [ "TOFBinvperm", "fips_desmovs -f" ],
|
| - [ "TOFBMMT1", "fips_desmovs -f" ],
|
| - [ "TOFBMMT2", "fips_desmovs -f" ],
|
| - [ "TOFBMMT3", "fips_desmovs -f" ],
|
| - [ "TOFBMonte1", "fips_desmovs -f" ],
|
| - [ "TOFBMonte2", "fips_desmovs -f" ],
|
| - [ "TOFBMonte3", "fips_desmovs -f" ],
|
| - [ "TOFBpermop", "fips_desmovs -f" ],
|
| - [ "TOFBsubtab", "fips_desmovs -f" ],
|
| - [ "TOFBvarkey", "fips_desmovs -f" ],
|
| - [ "TOFBvartext", "fips_desmovs -f" ]
|
| -
|
| -);
|
| -
|
| -my @fips_des3_cfb1_test_list = (
|
| -
|
| - # DES3 CFB1 tests
|
| -
|
| - [ "TCFB1invperm", "fips_desmovs -f" ],
|
| - [ "TCFB1MMT1", "fips_desmovs -f" ],
|
| - [ "TCFB1MMT2", "fips_desmovs -f" ],
|
| - [ "TCFB1MMT3", "fips_desmovs -f" ],
|
| - [ "TCFB1Monte1", "fips_desmovs -f" ],
|
| - [ "TCFB1Monte2", "fips_desmovs -f" ],
|
| - [ "TCFB1Monte3", "fips_desmovs -f" ],
|
| - [ "TCFB1permop", "fips_desmovs -f" ],
|
| - [ "TCFB1subtab", "fips_desmovs -f" ],
|
| - [ "TCFB1varkey", "fips_desmovs -f" ],
|
| - [ "TCFB1vartext", "fips_desmovs -f" ],
|
| -
|
| -);
|
| -
|
| -# Verification special cases.
|
| -# In most cases the output of a test is deterministic and
|
| -# it can be compared to a known good result. A few involve
|
| -# the genration and use of random keys and the output will
|
| -# be different each time. In thoses cases we perform special tests
|
| -# to simply check their consistency. For example signature generation
|
| -# output will be run through signature verification to see if all outputs
|
| -# show as valid.
|
| -#
|
| -
|
| -my %verify_special = (
|
| - "PQGGen" => "fips_dssvs pqgver",
|
| - "KeyPair" => "fips_dssvs keyver",
|
| - "SigGen" => "fips_dssvs sigver",
|
| - "SigGen15" => "fips_rsavtest",
|
| - "SigGenRSA" => "fips_rsavtest -x931",
|
| - "SigGenPSS(0)" => "fips_rsavtest -saltlen 0",
|
| - "SigGenPSS(62)" => "fips_rsavtest -saltlen 62",
|
| -);
|
| -
|
| -my $win32 = $^O =~ m/mswin/i;
|
| -my $onedir = 0;
|
| -my $filter = "";
|
| -my $tvdir;
|
| -my $tprefix;
|
| -my $shwrap_prefix;
|
| -my $debug = 0;
|
| -my $quiet = 0;
|
| -my $notest = 0;
|
| -my $verify = 1;
|
| -my $rspdir = "rsp";
|
| -my $ignore_missing = 0;
|
| -my $ignore_bogus = 0;
|
| -my $bufout = '';
|
| -my $list_tests = 0;
|
| -
|
| -my %fips_enabled = (
|
| - dsa => 1,
|
| - "dsa-pqgver" => 0,
|
| - rsa => 1,
|
| - "rsa-pss0" => 0,
|
| - "rsa-pss62" => 1,
|
| - sha => 1,
|
| - hmac => 1,
|
| - "rand-aes" => 1,
|
| - "rand-des2" => 0,
|
| - aes => 1,
|
| - "aes-cfb1" => 0,
|
| - des3 => 1,
|
| - "des3-cfb1" => 0
|
| -);
|
| -
|
| -foreach (@ARGV) {
|
| - if ( $_ eq "--win32" ) {
|
| - $win32 = 1;
|
| - }
|
| - elsif ( $_ eq "--onedir" ) {
|
| - $onedir = 1;
|
| - }
|
| - elsif ( $_ eq "--debug" ) {
|
| - $debug = 1;
|
| - }
|
| - elsif ( $_ eq "--ignore-missing" ) {
|
| - $ignore_missing = 1;
|
| - }
|
| - elsif ( $_ eq "--ignore-bogus" ) {
|
| - $ignore_bogus = 1;
|
| - }
|
| - elsif ( $_ eq "--generate" ) {
|
| - $verify = 0;
|
| - }
|
| - elsif ( $_ eq "--notest" ) {
|
| - $notest = 1;
|
| - }
|
| - elsif ( $_ eq "--quiet" ) {
|
| - $quiet = 1;
|
| - }
|
| - elsif (/--dir=(.*)$/) {
|
| - $tvdir = $1;
|
| - }
|
| - elsif (/--rspdir=(.*)$/) {
|
| - $rspdir = $1;
|
| - }
|
| - elsif (/--tprefix=(.*)$/) {
|
| - $tprefix = $1;
|
| - }
|
| - elsif (/--shwrap_prefix=(.*)$/) {
|
| - $shwrap_prefix = $1;
|
| - }
|
| - elsif (/^--(enable|disable)-(.*)$/) {
|
| - if ( !exists $fips_enabled{$2} ) {
|
| - print STDERR "Unknown test $2\n";
|
| - }
|
| - if ( $1 eq "enable" ) {
|
| - $fips_enabled{$2} = 1;
|
| - }
|
| - else {
|
| - $fips_enabled{$2} = 0;
|
| - }
|
| - }
|
| - elsif (/--filter=(.*)$/) {
|
| - $filter = $1;
|
| - }
|
| - elsif (/^--list-tests$/) {
|
| - $list_tests = 1;
|
| - }
|
| - else {
|
| - Help();
|
| - exit(1);
|
| - }
|
| -}
|
| -
|
| -my @fips_test_list;
|
| -
|
| -push @fips_test_list, @fips_dsa_test_list if $fips_enabled{"dsa"};
|
| -push @fips_test_list, @fips_dsa_pqgver_test_list if $fips_enabled{"dsa-pqgver"};
|
| -push @fips_test_list, @fips_rsa_test_list if $fips_enabled{"rsa"};
|
| -push @fips_test_list, @fips_rsa_pss0_test_list if $fips_enabled{"rsa-pss0"};
|
| -push @fips_test_list, @fips_rsa_pss62_test_list if $fips_enabled{"rsa-pss62"};
|
| -push @fips_test_list, @fips_sha_test_list if $fips_enabled{"sha"};
|
| -push @fips_test_list, @fips_hmac_test_list if $fips_enabled{"hmac"};
|
| -push @fips_test_list, @fips_rand_aes_test_list if $fips_enabled{"rand-aes"};
|
| -push @fips_test_list, @fips_rand_des2_test_list if $fips_enabled{"rand-des2"};
|
| -push @fips_test_list, @fips_aes_test_list if $fips_enabled{"aes"};
|
| -push @fips_test_list, @fips_aes_cfb1_test_list if $fips_enabled{"aes-cfb1"};
|
| -push @fips_test_list, @fips_des3_test_list if $fips_enabled{"des3"};
|
| -push @fips_test_list, @fips_des3_cfb1_test_list if $fips_enabled{"des3-cfb1"};
|
| -
|
| -if ($list_tests) {
|
| - my ( $test, $en );
|
| - print "=====TEST LIST=====\n";
|
| - foreach $test ( sort keys %fips_enabled ) {
|
| - $en = $fips_enabled{$test};
|
| - $test =~ tr/[a-z]/[A-Z]/;
|
| - printf "%-10s %s\n", $test, $en ? "enabled" : "disabled";
|
| - }
|
| - exit(0);
|
| -}
|
| -
|
| -foreach (@fips_test_list) {
|
| - next unless ref($_);
|
| - my $nm = $_->[0];
|
| - $_->[2] = "";
|
| - $_->[3] = "";
|
| - print STDERR "Duplicate test $nm\n" if exists $fips_tests{$nm};
|
| - $fips_tests{$nm} = $_;
|
| -}
|
| -
|
| -$tvdir = "." unless defined $tvdir;
|
| -
|
| -if ($win32) {
|
| - if ( !defined $tprefix ) {
|
| - if ($onedir) {
|
| - $tprefix = ".\\";
|
| - }
|
| - else {
|
| - $tprefix = "..\\out32dll\\";
|
| - }
|
| - }
|
| -}
|
| -else {
|
| - if ($onedir) {
|
| - $tprefix = "./" unless defined $tprefix;
|
| - $shwrap_prefix = "./" unless defined $shwrap_prefix;
|
| - }
|
| - else {
|
| - $tprefix = "../test/" unless defined $tprefix;
|
| - $shwrap_prefix = "../util/" unless defined $shwrap_prefix;
|
| - }
|
| -}
|
| -
|
| -sanity_check_exe( $win32, $tprefix, $shwrap_prefix );
|
| -
|
| -my $cmd_prefix = $win32 ? "" : "${shwrap_prefix}shlib_wrap.sh ";
|
| -
|
| -find_files( $filter, $tvdir );
|
| -
|
| -sanity_check_files();
|
| -
|
| -my ( $runerr, $cmperr, $cmpok, $scheckrunerr, $scheckerr, $scheckok, $skipcnt )
|
| - = ( 0, 0, 0, 0, 0, 0, 0 );
|
| -
|
| -exit(0) if $notest;
|
| -
|
| -run_tests( $verify, $win32, $tprefix, $filter, $tvdir );
|
| -
|
| -if ($verify) {
|
| - print "ALGORITHM TEST VERIFY SUMMARY REPORT:\n";
|
| - print "Tests skipped due to missing files: $skipcnt\n";
|
| - print "Algorithm test program execution failures: $runerr\n";
|
| - print "Test comparisons successful: $cmpok\n";
|
| - print "Test comparisons failed: $cmperr\n";
|
| - print "Test sanity checks successful: $scheckok\n";
|
| - print "Test sanity checks failed: $scheckerr\n";
|
| - print "Sanity check program execution failures: $scheckrunerr\n";
|
| -
|
| - if ( $runerr || $cmperr || $scheckrunerr || $scheckerr ) {
|
| - print "***TEST FAILURE***\n";
|
| - }
|
| - else {
|
| - print "***ALL TESTS SUCCESSFUL***\n";
|
| - }
|
| -}
|
| -else {
|
| - print "ALGORITHM TEST SUMMARY REPORT:\n";
|
| - print "Tests skipped due to missing files: $skipcnt\n";
|
| - print "Algorithm test program execution failures: $runerr\n";
|
| -
|
| - if ($runerr) {
|
| - print "***TEST FAILURE***\n";
|
| - }
|
| - else {
|
| - print "***ALL TESTS SUCCESSFUL***\n";
|
| - }
|
| -}
|
| -
|
| -#--------------------------------
|
| -sub Help {
|
| - ( my $cmd ) = ( $0 =~ m#([^/]+)$# );
|
| - print <<EOF;
|
| -$cmd: generate run CMVP algorithm tests
|
| - --debug Enable debug output
|
| - --dir=<dirname> Optional root for *.req file search
|
| - --filter=<regexp>
|
| - --onedir <dirname> Assume all components in current directory
|
| - --rspdir=<dirname> Name of subdirectories containing *.rsp files, default "rsp"
|
| - --shwrap_prefix=<prefix>
|
| - --tprefix=<prefix>
|
| - --ignore-bogus Ignore duplicate or bogus files
|
| - --ignore-missing Ignore missing test files
|
| - --quiet Shhh....
|
| - --generate Generate algorithm test output
|
| - --win32 Win32 environment
|
| - --enable-<alg> Enable algorithm set <alg>.
|
| - --disable-<alg> Disable algorithm set <alg>.
|
| - Where <alg> can be one of:
|
| -EOF
|
| -
|
| -while (my ($key, $value) = each %fips_enabled)
|
| - {
|
| - printf "\t\t%-20s(%s by default)\n", $key ,
|
| - $value ? "enabled" : "disabled";
|
| - }
|
| -}
|
| -
|
| -# Sanity check to see if all necessary executables exist
|
| -
|
| -sub sanity_check_exe {
|
| - my ( $win32, $tprefix, $shwrap_prefix ) = @_;
|
| - my %exe_list;
|
| - my $bad = 0;
|
| - $exe_list{ $shwrap_prefix . "shlib_wrap.sh" } = 1 unless $win32;
|
| - foreach (@fips_test_list) {
|
| - next unless ref($_);
|
| - my $cmd = $_->[1];
|
| - $cmd =~ s/ .*$//;
|
| - $cmd = $tprefix . $cmd;
|
| - $cmd .= ".exe" if $win32;
|
| - $exe_list{$cmd} = 1;
|
| - }
|
| -
|
| - foreach ( sort keys %exe_list ) {
|
| - if ( !-f $_ ) {
|
| - print STDERR "ERROR: can't find executable $_\n";
|
| - $bad = 1;
|
| - }
|
| - }
|
| - if ($bad) {
|
| - print STDERR "FATAL ERROR: executables missing\n";
|
| - exit(1);
|
| - }
|
| - elsif ($debug) {
|
| - print STDERR "Executable sanity check passed OK\n";
|
| - }
|
| -}
|
| -
|
| -# Search for all request and response files
|
| -
|
| -sub find_files {
|
| - my ( $filter, $dir ) = @_;
|
| - my ( $dirh, $testname );
|
| - opendir( $dirh, $dir );
|
| - while ( $_ = readdir($dirh) ) {
|
| - next if ( $_ eq "." || $_ eq ".." );
|
| - $_ = "$dir/$_";
|
| - if ( -f "$_" ) {
|
| - if (/\/([^\/]*)\.rsp$/) {
|
| - $testname = fix_pss( $1, $_ );
|
| - if ( exists $fips_tests{$testname} ) {
|
| - if ( $fips_tests{$testname}->[3] eq "" ) {
|
| - $fips_tests{$testname}->[3] = $_;
|
| - }
|
| - else {
|
| - print STDERR
|
| -"WARNING: duplicate response file $_ for test $testname\n";
|
| - $nbogus++;
|
| - }
|
| - }
|
| - else {
|
| - print STDERR "WARNING: bogus file $_\n";
|
| - $nbogus++;
|
| - }
|
| - }
|
| - next unless /$filter.*\.req$/i;
|
| - if (/\/([^\/]*)\.req$/) {
|
| - $testname = fix_pss( $1, $_ );
|
| - if ( exists $fips_tests{$testname} ) {
|
| - if ( $fips_tests{$testname}->[2] eq "" ) {
|
| - $fips_tests{$testname}->[2] = $_;
|
| - }
|
| - else {
|
| - print STDERR
|
| -"WARNING: duplicate request file $_ for test $testname\n";
|
| - $nbogus++;
|
| - }
|
| -
|
| - }
|
| - elsif ( !/SHAmix\.req$/ ) {
|
| - print STDERR "WARNING: unrecognized filename $_\n";
|
| - $nbogus++;
|
| - }
|
| - }
|
| - }
|
| - elsif ( -d "$_" ) {
|
| - find_files( $filter, $_ );
|
| - }
|
| - }
|
| - closedir($dirh);
|
| -}
|
| -
|
| -sub fix_pss {
|
| - my ( $test, $path ) = @_;
|
| - my $sl = "";
|
| - local $_;
|
| - if ( $test =~ /PSS/ ) {
|
| - open( IN, $path ) || die "Can't Open File $path";
|
| - while (<IN>) {
|
| - if (/^\s*#\s*salt\s+len:\s+(\d+)\s*$/i) {
|
| - $sl = $1;
|
| - last;
|
| - }
|
| - }
|
| - close IN;
|
| - if ( $sl eq "" ) {
|
| - print STDERR "WARNING: No Salt length detected for file $path\n";
|
| - }
|
| - else {
|
| - return $test . "($sl)";
|
| - }
|
| - }
|
| - return $test;
|
| -}
|
| -
|
| -sub sanity_check_files {
|
| - my $bad = 0;
|
| - foreach (@fips_test_list) {
|
| - next unless ref($_);
|
| - my ( $tst, $cmd, $req, $resp ) = @$_;
|
| -
|
| - #print STDERR "FILES $tst, $cmd, $req, $resp\n";
|
| - if ( $req eq "" ) {
|
| - print STDERR "WARNING: missing request file for $tst\n";
|
| - $bad = 1;
|
| - next;
|
| - }
|
| - if ( $verify && $resp eq "" ) {
|
| - print STDERR "WARNING: no response file for test $tst\n";
|
| - $bad = 1;
|
| - }
|
| - elsif ( !$verify && $resp ne "" ) {
|
| - print STDERR "WARNING: response file $resp will be overwritten\n";
|
| - }
|
| - }
|
| - if ($bad) {
|
| - print STDERR "ERROR: test vector file set not complete\n";
|
| - exit(1) unless $ignore_missing;
|
| - }
|
| - if ($nbogus) {
|
| - print STDERR
|
| - "ERROR: $nbogus bogus or duplicate request and response files\n";
|
| - exit(1) unless $ignore_bogus;
|
| - }
|
| - if ( $debug && !$nbogus && !$bad ) {
|
| - print STDERR "test vector file set complete\n";
|
| - }
|
| -}
|
| -
|
| -sub run_tests {
|
| - my ( $verify, $win32, $tprefix, $filter, $tvdir ) = @_;
|
| - my ( $tname, $tref );
|
| - my $bad = 0;
|
| - foreach (@fips_test_list) {
|
| - if ( !ref($_) ) {
|
| - print "Running $_ tests\n" unless $quiet;
|
| - next;
|
| - }
|
| - my ( $tname, $tcmd, $req, $rsp ) = @$_;
|
| - my $out = $rsp;
|
| - if ($verify) {
|
| - $out =~ s/\.rsp$/.tst/;
|
| - }
|
| - if ( $req eq "" ) {
|
| - print STDERR
|
| - "WARNING: Request file for $tname missing: test skipped\n";
|
| - $skipcnt++;
|
| - next;
|
| - }
|
| - if ( $verify && $rsp eq "" ) {
|
| - print STDERR
|
| - "WARNING: Response file for $tname missing: test skipped\n";
|
| - $skipcnt++;
|
| - next;
|
| - }
|
| - elsif ( !$verify ) {
|
| - if ( $rsp ne "" ) {
|
| - print STDERR "WARNING: Response file for $tname deleted\n";
|
| - unlink $rsp;
|
| - }
|
| - $out = $req;
|
| - $out =~ s|/req/(\S+)\.req|/$rspdir/$1.rsp|;
|
| - my $outdir = $out;
|
| - $outdir =~ s|/[^/]*$||;
|
| - if ( !-d $outdir ) {
|
| - print STDERR "DEBUG: Creating directory $outdir\n" if $debug;
|
| - mkdir($outdir) || die "Can't create directory $outdir";
|
| - }
|
| - }
|
| - my $cmd = "$cmd_prefix$tprefix$tcmd ";
|
| - if ( $tcmd =~ /-f$/ ) {
|
| - $cmd .= "\"$req\" \"$out\"";
|
| - }
|
| - else {
|
| - $cmd .= "<\"$req\" >\"$out\"";
|
| - }
|
| - print STDERR "DEBUG: running test $tname\n" if ( $debug && !$verify );
|
| - system($cmd);
|
| - if ( $? != 0 ) {
|
| - print STDERR
|
| - "WARNING: error executing test $tname for command: $cmd\n";
|
| - $runerr++;
|
| - next;
|
| - }
|
| - if ($verify) {
|
| - if ( exists $verify_special{$tname} ) {
|
| - my $vout = $rsp;
|
| - $vout =~ s/\.rsp$/.ver/;
|
| - $tcmd = $verify_special{$tname};
|
| - $cmd = "$cmd_prefix$tprefix$tcmd ";
|
| - $cmd .= "<\"$out\" >\"$vout\"";
|
| - system($cmd);
|
| - if ( $? != 0 ) {
|
| - print STDERR
|
| - "WARNING: error executing verify test $tname $cmd\n";
|
| - $scheckrunerr++;
|
| - next;
|
| - }
|
| - my ( $fcount, $pcount ) = ( 0, 0 );
|
| - open VER, "$vout";
|
| - while (<VER>) {
|
| - if (/^Result\s*=\s*(\S*)\s*$/i)
|
| -
|
| - {
|
| - if ( $1 eq "F" ) {
|
| - $fcount++;
|
| - }
|
| - else {
|
| - $pcount++;
|
| - }
|
| - }
|
| - }
|
| - close VER;
|
| -
|
| - unlink $vout;
|
| - if ( $fcount || $debug ) {
|
| - print STDERR "DEBUG: $tname, Pass=$pcount, Fail=$fcount\n";
|
| - }
|
| - if ( $fcount || !$pcount ) {
|
| - $scheckerr++;
|
| - }
|
| - else {
|
| - $scheckok++;
|
| - }
|
| -
|
| - }
|
| - elsif ( !cmp_file( $tname, $rsp, $out ) ) {
|
| - $cmperr++;
|
| - }
|
| - else {
|
| - $cmpok++;
|
| - }
|
| - unlink $out;
|
| - }
|
| - }
|
| -}
|
| -
|
| -sub cmp_file {
|
| - my ( $tname, $rsp, $tst ) = @_;
|
| - my ( $rspf, $tstf );
|
| - my ( $rspline, $tstline );
|
| - if ( !open( $rspf, $rsp ) ) {
|
| - print STDERR "ERROR: can't open request file $rsp\n";
|
| - return 0;
|
| - }
|
| - if ( !open( $tstf, $tst ) ) {
|
| - print STDERR "ERROR: can't open output file $tst\n";
|
| - return 0;
|
| - }
|
| - for ( ; ; ) {
|
| - $rspline = next_line($rspf);
|
| - $tstline = next_line($tstf);
|
| - if ( !defined($rspline) && !defined($tstline) ) {
|
| - print STDERR "DEBUG: $tname file comparison OK\n" if $debug;
|
| - return 1;
|
| - }
|
| - if ( !defined($rspline) ) {
|
| - print STDERR "ERROR: $tname EOF on $rsp\n";
|
| - return 0;
|
| - }
|
| - if ( !defined($tstline) ) {
|
| - print STDERR "ERROR: $tname EOF on $tst\n";
|
| - return 0;
|
| - }
|
| -
|
| - # Workaround for bug in RAND des2 test output */
|
| - if ( $tstline =~ /^Key2 =/ && $rspline =~ /^Key1 =/ ) {
|
| - $rspline =~ s/^Key1/Key2/;
|
| - }
|
| -
|
| - if ( $tstline ne $rspline ) {
|
| - print STDERR "ERROR: $tname mismatch:\n";
|
| - print STDERR "\t \"$tstline\" != \"$rspline\"\n";
|
| - return 0;
|
| - }
|
| - }
|
| - return 1;
|
| -}
|
| -
|
| -sub next_line {
|
| - my ($in) = @_;
|
| -
|
| - while (<$in>) {
|
| - chomp;
|
| -
|
| - # Delete comments
|
| - s/#.*$//;
|
| -
|
| - # Ignore blank lines
|
| - next if (/^\s*$/);
|
| -
|
| - # Translate multiple space into one
|
| - s/\s+/ /g;
|
| - # Delete trailing whitespace
|
| - s/\s+$//;
|
| - return $_;
|
| - }
|
| - return undef;
|
| -}
|
|
|