GmSSL/tests/ff1test.c

/*
 *  Copyright 2014-2026 The GmSSL Project. All Rights Reserved.
 *
 *  Licensed under the Apache License, Version 2.0 (the License); you may
 *  not use this file except in compliance with the License.
 *
 *  http://www.apache.org/licenses/LICENSE-2.0
 */

#include <stdio.h>
#include <string.h>
#include <gmssl/ff1.h>
#include <gmssl/error.h>


typedef struct {
	const uint8_t key[16];
	const char *plaintext;
	const uint8_t *tweak;
	size_t tweaklen;
	const char *ciphertext;
} FF1_TEST;

static const uint8_t ff1_sm4_tweak1[] = {
	0x39, 0x38, 0x37, 0x36, 0x35, 0x34, 0x33, 0x32,
	0x31, 0x30,
};

static const uint8_t ff1_sm4_tweak2[] = {
	0x37, 0x38, 0x39, 0x36, 0x70, 0x71, 0x72, 0x73,
	0x74, 0x75, 0x76,
};

static const FF1_TEST ff1_sm4_tests[] = {
	{
		{
			0x2b, 0x7e, 0x15, 0x16, 0x28, 0xae, 0xd2, 0xa6,
			0xab, 0xf7, 0x15, 0x88, 0x09, 0xcf, 0x4f, 0x3c,
		},
		"6226090102675688",
		ff1_sm4_tweak1,
		sizeof(ff1_sm4_tweak1),
		"2326982895499381",
	},
	{
		{
			0x2b, 0x7e, 0x15, 0x16, 0x28, 0xae, 0xd2, 0xa6,
			0xab, 0xf7, 0x15, 0x88, 0x09, 0xcf, 0x4f, 0x3c,
		},
		"110107197203192876",
		ff1_sm4_tweak2,
		sizeof(ff1_sm4_tweak2),
		"755842115213533405",
	},
	{
		{
			0x2b, 0x7e, 0x15, 0x16, 0x28, 0xae, 0xd2, 0xa6,
			0xab, 0xf7, 0x15, 0x88, 0x09, 0xcf, 0x4f, 0x3c,
		},
		"13687260594",
		NULL,
		0,
		"37914960556",
	},
};

#ifdef ENABLE_AES
static const uint8_t ff1_aes128_tweak1[] = {
	0x39, 0x38, 0x37, 0x36, 0x35, 0x34, 0x33, 0x32,
	0x31, 0x30,
};

static const uint8_t ff1_aes128_tweak4[] = {
	0x37, 0x37, 0x37, 0x37, 0x37, 0x37, 0x37,
};

static const FF1_TEST ff1_aes128_tests[] = {
	{
		{
			0x2b, 0x7e, 0x15, 0x16, 0x28, 0xae, 0xd2, 0xa6,
			0xab, 0xf7, 0x15, 0x88, 0x09, 0xcf, 0x4f, 0x3c,
		},
		"0123456789",
		ff1_aes128_tweak1,
		sizeof(ff1_aes128_tweak1),
		"6124200773",
	},
	{
		{
			0x2b, 0x7e, 0x15, 0x16, 0x28, 0xae, 0xd2, 0xa6,
			0xab, 0xf7, 0x15, 0x88, 0x09, 0xcf, 0x4f, 0x3c,
		},
		"0123456789",
		NULL,
		0,
		"2433477484",
	},
	{
		{
			0x2b, 0x7e, 0x15, 0x16, 0x28, 0xae, 0xd2, 0xa6,
			0xab, 0xf7, 0x15, 0x88, 0x09, 0xcf, 0x4f, 0x3c,
		},
		"999999999",
		ff1_aes128_tweak4,
		sizeof(ff1_aes128_tweak4),
		"658229573",
	},
};
#endif

static int test_ff1_sm4(void)
{
	const char *plaintext = "99999999999999999";
	size_t plaintext_len = strlen(plaintext);
	const char sentinel = '#';
	const uint8_t key[16] = {0};
	const uint8_t tweak[8] = {
		0x31, 0x32, 0x33, 0x34, 0x35, 0x36, 0x37, 0x38,
	};
	BLOCK_CIPHER_KEY block_key;
	char ciphertext[FF1_MAX_DIGITS + 1];
	char decrypted[FF1_MAX_DIGITS + 1];

	if (ff1_init(&block_key, BLOCK_CIPHER_sm4(), key) != 1) {
		error_print();
		return -1;
	}
	ciphertext[plaintext_len] = sentinel;
	if (ff1_encrypt(&block_key, plaintext, plaintext_len,
		tweak, sizeof(tweak), ciphertext) != 1) {
		error_print();
		return -1;
	}
	if (ciphertext[plaintext_len] != sentinel) {
		error_print();
		return -1;
	}
	ciphertext[plaintext_len] = '\0';
	decrypted[plaintext_len] = sentinel;
	if (ff1_decrypt(&block_key, ciphertext, plaintext_len,
		tweak, sizeof(tweak), decrypted) != 1) {
		error_print();
		return -1;
	}
	if (decrypted[plaintext_len] != sentinel) {
		error_print();
		return -1;
	}
	decrypted[plaintext_len] = '\0';
	if (strcmp(plaintext, decrypted) != 0) {
		error_print();
		return -1;
	}

	printf("ff1-sm4-encrypt(\"%s\") = \"%s\"\n", plaintext, ciphertext);
	printf("%s() ok\n", __FUNCTION__);
	return 1;
}

static int test_ff1_sm4_vectors(void)
{
	BLOCK_CIPHER_KEY block_key;
	char ciphertext[FF1_MAX_DIGITS + 1];
	char decrypted[FF1_MAX_DIGITS + 1];
	size_t i;
	int err = 0;

	for (i = 0; i < sizeof(ff1_sm4_tests)/sizeof(ff1_sm4_tests[0]); i++) {
		const FF1_TEST *test = &ff1_sm4_tests[i];

		if (ff1_init(&block_key, BLOCK_CIPHER_sm4(), test->key) != 1) {
			error_print();
			return -1;
		}
		if (ff1_encrypt(&block_key, test->plaintext, strlen(test->plaintext),
			test->tweak, test->tweaklen, ciphertext) != 1) {
			error_print();
			return -1;
		}
		ciphertext[strlen(test->plaintext)] = '\0';
		if (strcmp(ciphertext, test->ciphertext) != 0) {
			fprintf(stderr, "test %zu: got %s, expected %s\n",
				i + 1, ciphertext, test->ciphertext);
			error_print();
			err++;
			continue;
		}
		if (ff1_decrypt(&block_key, test->ciphertext, strlen(test->ciphertext),
			test->tweak, test->tweaklen, decrypted) != 1) {
			error_print();
			return -1;
		}
		decrypted[strlen(test->ciphertext)] = '\0';
		if (strcmp(decrypted, test->plaintext) != 0) {
			error_print();
			return -1;
		}
	}
	if (err) {
		return -1;
	}

	printf("%s() ok\n", __FUNCTION__);
	return 1;
}

#ifdef ENABLE_AES
static int test_ff1_aes128_vectors(void)
{
	BLOCK_CIPHER_KEY block_key;
	char ciphertext[FF1_MAX_DIGITS + 1];
	char decrypted[FF1_MAX_DIGITS + 1];
	size_t i;
	int err = 0;

	for (i = 0; i < sizeof(ff1_aes128_tests)/sizeof(ff1_aes128_tests[0]); i++) {
		const FF1_TEST *test = &ff1_aes128_tests[i];

		if (ff1_init(&block_key, BLOCK_CIPHER_aes128(), test->key) != 1) {
			error_print();
			return -1;
		}
		if (ff1_encrypt(&block_key, test->plaintext, strlen(test->plaintext),
			test->tweak, test->tweaklen, ciphertext) != 1) {
			error_print();
			return -1;
		}
		ciphertext[strlen(test->plaintext)] = '\0';
		if (strcmp(ciphertext, test->ciphertext) != 0) {
			fprintf(stderr, "AES-128 test %zu: got %s, expected %s\n",
				i + 1, ciphertext, test->ciphertext);
			error_print();
			err++;
			continue;
		}
		if (ff1_decrypt(&block_key, test->ciphertext, strlen(test->ciphertext),
			test->tweak, test->tweaklen, decrypted) != 1) {
			error_print();
			return -1;
		}
		decrypted[strlen(test->ciphertext)] = '\0';
		if (strcmp(decrypted, test->plaintext) != 0) {
			error_print();
			return -1;
		}
	}
	if (err) {
		return -1;
	}

	printf("%s() ok\n", __FUNCTION__);
	return 1;
}
#endif

int main(void)
{
	int err = 0;

	if (test_ff1_sm4() != 1) {
		err++;
	}
	if (test_ff1_sm4_vectors() != 1) {
		err++;
	}
#ifdef ENABLE_AES
	if (test_ff1_aes128_vectors() != 1) {
		err++;
	}
#endif

	return err;
}