GmSSL/tests/sm4test.c

/*
 * Copyright (c) 2014 - 2021 The GmSSL Project.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 *
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in
 *    the documentation and/or other materials provided with the
 *    distribution.
 *
 * 3. All advertising materials mentioning features or use of this
 *    software must display the following acknowledgment:
 *    "This product includes software developed by the GmSSL Project.
 *    (http://gmssl.org/)"
 *
 * 4. The name "GmSSL Project" must not be used to endorse or promote
 *    products derived from this software without prior written
 *    permission. For written permission, please contact
 *    guanzhi1980@gmail.com.
 *
 * 5. Products derived from this software may not be called "GmSSL"
 *    nor may "GmSSL" appear in their names without prior written
 *    permission of the GmSSL Project.
 *
 * 6. Redistributions of any form whatsoever must retain the following
 *    acknowledgment:
 *    "This product includes software developed by the GmSSL Project
 *    (http://gmssl.org/)"
 *
 * THIS SOFTWARE IS PROVIDED BY THE GmSSL PROJECT ``AS IS'' AND ANY
 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE GmSSL PROJECT OR
 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 * OF THE POSSIBILITY OF SUCH DAMAGE.
 */

#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include <gmssl/sm4.h>
#include <gmssl/error.h>
#include <gmssl/rand.h>

# ifdef SM4_AVX2
void sm4_avx2_ecb_encrypt_blocks(const unsigned char *in,
	unsigned char *out, size_t blocks, const SM4_KEY *key);
void sm4_avx2_ctr32_encrypt_blocks(const unsigned char *in,
	unsigned char *out, size_t blocks, const SM4_KEY *key,
	const unsigned char iv[16]);
# endif

static int test_ecb(int avx)
{
	SM4_KEY key;
	unsigned char user_key[16] = {0};
	/* 2 rounds avx-512 and 2 rounds x86 */
	unsigned char in[(16 * 2 + 2) * 16] = {0};
	unsigned char out1[sizeof(in)] = {0};
	unsigned char out2[sizeof(in)] = {0};
	int i;

	for (i = 0; i < sizeof(user_key); i++) {
		user_key[i] = (unsigned char)i;
	}
	for (i = 0; i < sizeof(in); i++) {
		in[i] = (unsigned char)i;
	}
	/*
	RAND_bytes(user_key, sizeof(user_key));
	RAND_bytes(in, sizeof(in));
	*/

	sm4_set_encrypt_key(&key, user_key);
	for (i = 0; i < sizeof(in)/SM4_BLOCK_SIZE; i++) {
		sm4_encrypt(&key, in + 16*i, out1 + 16*i);
	}

	switch (avx) {
# ifdef SM4_AVX2
	case 2:
		sm4_avx2_ecb_encrypt_blocks(in, out2, sizeof(in)/SM4_BLOCK_SIZE, &key);
		break;
# endif
	default:
		printf("avx shuold be in {2}\n");
		error_print();
		return -1;
	}

	if (memcmp(out1, out2, sizeof(out1)) != 0) {
		error_print();
		return -1;
	}
	return 0;
}

static void xor_block(unsigned char *out, const unsigned char *in)
{
	int i;
	for (i = 0; i < 16; i++) {
		out[i] ^= in[i];
	}
}

static int test_ctr32(int avx)
{
	SM4_KEY key;
	unsigned char user_key[16] = {0};
	unsigned char iv[16] = {0};
	unsigned char ctr1[16];
	unsigned char ctr2[16];
	/* 2 rounds avx-512 and 2 rounds x86 */
	unsigned char in[(16 * 2 + 2) * 16] = {0};
	unsigned char out1[sizeof(in)];
	unsigned char out2[sizeof(in)];
	int i;

	/*
	RAND_bytes(user_key, sizeof(user_key));
	RAND_bytes(iv, sizeof(iv) - 1);
	RAND_bytes(in, sizeof(in));
	*/

	sm4_set_encrypt_key(&key, user_key);
	memcpy(ctr1, iv, sizeof(iv));
	memcpy(ctr2, iv, sizeof(iv));

	for (i = 0; i < sizeof(in)/16; i++) {
		sm4_encrypt(&key, ctr1, out1 + 16 * i);
		xor_block(out1 + 16 * i, in + 16 * i);
		ctr1[15]++;
	}

	switch (avx) {
# ifdef SM4_AVX2
	case 2:
		sm4_avx2_ctr32_encrypt_blocks(in, out2, sizeof(in)/16, &key, ctr2);
		break;
# endif
	case 0:
		// do we need this?		
		//sm4_ctr32_encrypt_blocks(in, out2, sizeof(in)/16, &key, ctr2);
		break;
	default:
		printf("avx should be in {0, 2}\n");
		error_print();
		return -1;
	}

	if (memcmp(out1, out2, sizeof(out1)) != 0) {
		error_print();
		return -1;
	}
	return 0;
}


/*
static int test_ede(void)
{
	SM4_KEY key;
	sm4_ede_key_t ede_key;
	unsigned char user_key[48];
	unsigned char in[16];
	unsigned char out1[16];
	unsigned char out2[16];

	RAND_bytes(in, sizeof(in));

	RAND_bytes(user_key, 16);
	memcpy(user_key + 16, user_key, 16);
	memcpy(user_key + 32, user_key, 16);
	sm4_set_encrypt_key(&key, user_key);
	sm4_encrypt(in, out1, &key);
	sm4_ede_set_encrypt_key(&ede_key, user_key);
	sm4_ede_encrypt(in, out2, &ede_key);
	if (memcmp(out1, out2, 16) != 0) {
		return 0;
	}

	RAND_bytes(user_key, sizeof(user_key));
	sm4_ede_set_encrypt_key(&ede_key, user_key);
	sm4_ede_encrypt(in, out1, &ede_key);
	sm4_ede_set_decrypt_key(&ede_key, user_key);
	sm4_ede_decrypt(out1, out2, &ede_key);
	if (memcmp(in, out2, 16) != 0) {
		return 0;
	}

	return 1;
}
*/

int test_sm4(void)
{
	int err = 0;
	int i;
	SM4_KEY key;
	unsigned char buf[16];

	unsigned char user_key[16] = {
		0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
		0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
	};

	uint32_t rk[32] = {
		0xf12186f9, 0x41662b61, 0x5a6ab19a, 0x7ba92077,
		0x367360f4, 0x776a0c61, 0xb6bb89b3, 0x24763151,
		0xa520307c, 0xb7584dbd, 0xc30753ed, 0x7ee55b57,
		0x6988608c, 0x30d895b7, 0x44ba14af, 0x104495a1,
		0xd120b428, 0x73b55fa3, 0xcc874966, 0x92244439,
		0xe89e641f, 0x98ca015a, 0xc7159060, 0x99e1fd2e,
		0xb79bd80c, 0x1d2115b0, 0x0e228aeb, 0xf1780c81,
		0x428d3654, 0x62293496, 0x01cf72e5, 0x9124a012,
	};

	unsigned char plaintext[16] = {
		0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef,
		0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10,
	};

	unsigned char ciphertext1[16] = {
		0x68, 0x1e, 0xdf, 0x34, 0xd2, 0x06, 0x96, 0x5e,
		0x86, 0xb3, 0xe9, 0x4f, 0x53, 0x6e, 0x42, 0x46,
	};

	unsigned char ciphertext2[16] = {
		0x59, 0x52, 0x98, 0xc7, 0xc6, 0xfd, 0x27, 0x1f,
		0x04, 0x02, 0xf8, 0x04, 0xc3, 0x3d, 0x3f, 0x66,
	};

	/* test key scheduling */
	sm4_set_encrypt_key(&key, user_key);

	if (memcmp(key.rk, rk, sizeof(rk)) != 0) {
		printf("sm4 key scheduling not passed!\n");
		err++;
		goto end;
	}
	printf("sm4 key scheduling passed!\n");

	/* test encrypt once */
	sm4_encrypt(&key, plaintext, buf);

	if (memcmp(buf, ciphertext1, sizeof(ciphertext1)) != 0) {
		printf("sm4 encrypt not pass!\n");
		err++;
		goto end;
	}
	printf("sm4 encrypt pass!\n");

	/* test encrypt 1000000 times */
	memcpy(buf, plaintext, sizeof(plaintext));
	for (i = 0; i < 1000000; i++) {
		sm4_encrypt(&key, buf, buf);
	}

	if (memcmp(buf, ciphertext2, sizeof(ciphertext2)) != 0) {
		printf("sm4 encrypt 1000000 times not pass!\n");
		err++;
		goto end;
	}
	printf("sm4 encrypt 1000000 times pass!\n");

	/* test ctr32 */
	if (!test_ctr32(0)) {
		printf("sm4 ctr32 not pass!\n");
		err++;
	} else
		printf("sm4 ctr32 pass!\n");

	/* test ede */
/*
	if (!test_ede()) {
		printf("sm4 ede not pass!\n");
		err++;
	} else
		printf("sm4 ede pass!\n");
*/


# ifdef SM4_AVX2
	/* test ecb in avx2 */
	if (!test_ecb(2)) {
		printf("sm4 ecb in avx2 not pass!\n");
		err++;
	} else
		printf("sm4 ecb in avx2 pass!\n");

	/* test ctr32 in avx2 */
	if (!test_ctr32(2)) {
		printf("sm4 ctr32 in avx2 not pass!\n");
		err++;
	} else
		printf("sm4 ctr32 in avx2 pass!\n");
# endif

	if (err == 0)
		printf("sm4 all test vectors pass!\n");
	else
end:
		printf("some test vector failed\n");

	return err;
}


static int test_sm4_cbc(void)
{
	SM4_KEY sm4_key;
	uint8_t key[16] = {0};
	uint8_t iv[16];

	uint8_t buf1[2]  = {0};
	uint8_t buf2[32] = {0};
	uint8_t buf3[47] = {0};
	uint8_t buf4[96] = {0};
	uint8_t buf5[96];
	int i;

	sm4_set_encrypt_key(&sm4_key, key);
	sm4_cbc_encrypt(&sm4_key, iv, buf2, 2, buf4);

	for (i = 0; i < 32; i++) {
		printf("%02x", buf4[i]);
	}
	printf("\n");
	return 0;
}

static int test_sm4_cbc_padding(void)
{
	SM4_KEY enc_key;
	SM4_KEY dec_key;
	uint8_t key[16] = {0};
	uint8_t iv[16] = {0};
	uint8_t in[64];
	uint8_t out[128];
	uint8_t buf[128];
	size_t len1, len2, i;

	for (i = 0; i < sizeof(in); i++) {
		in[i] = i;
	}

	sm4_set_encrypt_key(&enc_key, key);
	sm4_set_decrypt_key(&dec_key, key);

	sm4_cbc_padding_encrypt(&enc_key, iv, in, 33, out, &len1);
	printf("c = (%zu) ", len1); for (i = 0; i < len1; i++) printf("%02x", out[i]); printf("\n");

	sm4_cbc_padding_decrypt(&dec_key, iv, out, len1, buf, &len2);
	printf("m = (%zu) ", len2); for (i = 0; i < len2; i++) printf("%02x", buf[i]); printf("\n");

	return 0;
}

static int test_sm4_cbc_update(void)
{
	SM4_CBC_CTX enc_ctx;
	SM4_CBC_CTX dec_ctx;

	uint8_t key[16];
	uint8_t iv[16];
	uint8_t mbuf[16 * 10];
	uint8_t cbuf[16 * 11];
	uint8_t pbuf[16 * 11];
	size_t mlen = 0;
	size_t clen = 0;
	size_t plen = 0;

	size_t len;
	size_t lens[] = { 1,5,17,80 };
	int i;

	rand_bytes(key, sizeof(key));
	rand_bytes(iv, sizeof(iv));
	rand_bytes(mbuf, sizeof(mbuf));

	format_bytes(stderr, 0, 0, "iv", iv, sizeof(iv));


	mlen = 16;
	clen = 0;
	format_bytes(stderr, 0, 0, "m", mbuf, mlen);
	if (sm4_cbc_encrypt_init(&enc_ctx, key, iv) != 1
		|| sm4_cbc_encrypt_update(&enc_ctx, mbuf, mlen, cbuf + clen, &clen) != 1
		|| (len += len) < 0
		|| sm4_cbc_encrypt_update(&enc_ctx, NULL, 0, cbuf + clen, &clen) != 1
		|| (len += len) < 0
		|| sm4_cbc_encrypt_finish(&enc_ctx, cbuf + clen, &len) != 1
		|| (clen += len) < 0) {
		error_print();
		return -1;
	}
	format_bytes(stderr, 0, 0, "c", cbuf, clen);

	if (sm4_cbc_decrypt_init(&dec_ctx, key, iv) != 1
		|| sm4_cbc_decrypt_update(&dec_ctx, cbuf, clen, pbuf, &plen) != 1
		|| sm4_cbc_decrypt_finish(&dec_ctx, pbuf + plen, &len) != 1
		|| (plen += len) < 0) {
		error_print();
		return -1;
	}
	format_bytes(stderr, 0, 0, "p", pbuf, plen);

	/*
	for (i = 0; i < sizeof(inlens)/sizeof(inlens[0]); i++) {
		if (sm4_cbc_encrypt_update(&enc_ctx, in + inlen, inlens[i], out + outlen, &len) != 1) {
			error_print();
			return -1;
		}
		inlen += inlens[i];
		outlen += len;
	}
	printf("inlen = %zu\n", inlen);

	if (sm4_cbc_encrypt_finish(&enc_ctx, out + outlen, &len) != 1) {
		error_print();
		return -1;
	}
	outlen += len;

	if (sm4_cbc_decrypt_init(&dec_ctx, key, iv) != 1) {
		error_print();
		return -1;
	}
	for (i = 0; i < sizeof(lens)/sizeof(lens[0]); i++) {
		if (sm4_cbc_decrypt_update(&dec_ctx, cbuf + inlen, lens[i], pbuf + outlen, &len) != 1) {
			error_print();
			return -1;
		}
	}

	if (sm4_cbc_decrypt_finish(&dec_ctx, pbuf + outlen, &len) != 1) {
		error_print();
		return -1;
	}
	outlen += len;
	*/

	return 1;
}

int main(void)
{
/*
	test_sm4();
	test_sm4_cbc();
	test_sm4_cbc_padding();
*/
	test_sm4_cbc_update();
	return 0;
}