[pcsx_rearmed.git] / deps / crypto / aes_test.c

/*********************************************************************\r
* Filename:   aes_test.c\r
* Author:     Brad Conte (brad AT bradconte.com)\r
* Copyright:\r
* Disclaimer: This code is presented "as is" without any guarantees.\r
* Details:    Performs known-answer tests on the corresponding AES\r
              implementation. These tests do not encompass the full\r
              range of available test vectors and are not sufficient\r
              for FIPS-140 certification. However, if the tests pass\r
              it is very, very likely that the code is correct and was\r
              compiled properly. This code also serves as\r
	          example usage of the functions.\r
*********************************************************************/\r
\r
/*************************** HEADER FILES ***************************/\r
#include <stdio.h>\r
#include <memory.h>\r
#include "aes.h"\r
\r
/*********************** FUNCTION DEFINITIONS ***********************/\r
void print_hex(BYTE str[], int len)\r
{\r
	int idx;\r
\r
	for(idx = 0; idx < len; idx++)\r
		printf("%02x", str[idx]);\r
}\r
\r
int aes_ecb_test()\r
{\r
	WORD key_schedule[60], idx;\r
	BYTE enc_buf[128];\r
	BYTE plaintext[2][16] = {\r
		{0x6b,0xc1,0xbe,0xe2,0x2e,0x40,0x9f,0x96,0xe9,0x3d,0x7e,0x11,0x73,0x93,0x17,0x2a},\r
		{0xae,0x2d,0x8a,0x57,0x1e,0x03,0xac,0x9c,0x9e,0xb7,0x6f,0xac,0x45,0xaf,0x8e,0x51}\r
	};\r
	BYTE ciphertext[2][16] = {\r
		{0xf3,0xee,0xd1,0xbd,0xb5,0xd2,0xa0,0x3c,0x06,0x4b,0x5a,0x7e,0x3d,0xb1,0x81,0xf8},\r
		{0x59,0x1c,0xcb,0x10,0xd4,0x10,0xed,0x26,0xdc,0x5b,0xa7,0x4a,0x31,0x36,0x28,0x70}\r
	};\r
	BYTE key[1][32] = {\r
		{0x60,0x3d,0xeb,0x10,0x15,0xca,0x71,0xbe,0x2b,0x73,0xae,0xf0,0x85,0x7d,0x77,0x81,0x1f,0x35,0x2c,0x07,0x3b,0x61,0x08,0xd7,0x2d,0x98,0x10,0xa3,0x09,0x14,0xdf,0xf4}\r
	};\r
	int pass = 1;\r
\r
	// Raw ECB mode.\r
	//printf("* ECB mode:\n");\r
	aes_key_setup(key[0], key_schedule, 256);\r
	//printf(  "Key          : ");\r
	//print_hex(key[0], 32);\r
\r
	for(idx = 0; idx < 2; idx++) {\r
		aes_encrypt(plaintext[idx], enc_buf, key_schedule, 256);\r
		//printf("\nPlaintext    : ");\r
		//print_hex(plaintext[idx], 16);\r
		//printf("\n-encrypted to: ");\r
		//print_hex(enc_buf, 16);\r
		pass = pass && !memcmp(enc_buf, ciphertext[idx], 16);\r
\r
		aes_decrypt(ciphertext[idx], enc_buf, key_schedule, 256);\r
		//printf("\nCiphertext   : ");\r
		//print_hex(ciphertext[idx], 16);\r
		//printf("\n-decrypted to: ");\r
		//print_hex(enc_buf, 16);\r
		pass = pass && !memcmp(enc_buf, plaintext[idx], 16);\r
\r
		//printf("\n\n");\r
	}\r
\r
	return(pass);\r
}\r
\r
int aes_cbc_test()\r
{\r
	WORD key_schedule[60];\r
	BYTE enc_buf[128];\r
	BYTE plaintext[1][32] = {\r
		{0x6b,0xc1,0xbe,0xe2,0x2e,0x40,0x9f,0x96,0xe9,0x3d,0x7e,0x11,0x73,0x93,0x17,0x2a,0xae,0x2d,0x8a,0x57,0x1e,0x03,0xac,0x9c,0x9e,0xb7,0x6f,0xac,0x45,0xaf,0x8e,0x51}\r
	};\r
	BYTE ciphertext[1][32] = {\r
		{0xf5,0x8c,0x4c,0x04,0xd6,0xe5,0xf1,0xba,0x77,0x9e,0xab,0xfb,0x5f,0x7b,0xfb,0xd6,0x9c,0xfc,0x4e,0x96,0x7e,0xdb,0x80,0x8d,0x67,0x9f,0x77,0x7b,0xc6,0x70,0x2c,0x7d}\r
	};\r
	BYTE iv[1][16] = {\r
		{0x00,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x0d,0x0e,0x0f}\r
	};\r
	BYTE key[1][32] = {\r
		{0x60,0x3d,0xeb,0x10,0x15,0xca,0x71,0xbe,0x2b,0x73,0xae,0xf0,0x85,0x7d,0x77,0x81,0x1f,0x35,0x2c,0x07,0x3b,0x61,0x08,0xd7,0x2d,0x98,0x10,0xa3,0x09,0x14,0xdf,0xf4}\r
	};\r
	int pass = 1;\r
\r
	//printf("* CBC mode:\n");\r
	aes_key_setup(key[0], key_schedule, 256);\r
\r
	//printf(  "Key          : ");\r
	//print_hex(key[0], 32);\r
	//printf("\nIV           : ");\r
	//print_hex(iv[0], 16);\r
\r
	aes_encrypt_cbc(plaintext[0], 32, enc_buf, key_schedule, 256, iv[0]);\r
	//printf("\nPlaintext    : ");\r
	//print_hex(plaintext[0], 32);\r
	//printf("\n-encrypted to: ");\r
	//print_hex(enc_buf, 32);\r
	//printf("\nCiphertext   : ");\r
	//print_hex(ciphertext[0], 32);\r
	pass = pass && !memcmp(enc_buf, ciphertext[0], 32);\r
\r
	aes_decrypt_cbc(ciphertext[0], 32, enc_buf, key_schedule, 256, iv[0]);\r
	//printf("\nCiphertext   : ");\r
	//print_hex(ciphertext[0], 32);\r
	//printf("\n-decrypted to: ");\r
	//print_hex(enc_buf, 32);\r
	//printf("\nPlaintext   : ");\r
	//print_hex(plaintext[0], 32);\r
	pass = pass && !memcmp(enc_buf, plaintext[0], 32);\r
\r
	//printf("\n\n");\r
	return(pass);\r
}\r
\r
int aes_ctr_test()\r
{\r
	WORD key_schedule[60];\r
	BYTE enc_buf[128];\r
	BYTE plaintext[1][32] = {\r
		{0x6b,0xc1,0xbe,0xe2,0x2e,0x40,0x9f,0x96,0xe9,0x3d,0x7e,0x11,0x73,0x93,0x17,0x2a,0xae,0x2d,0x8a,0x57,0x1e,0x03,0xac,0x9c,0x9e,0xb7,0x6f,0xac,0x45,0xaf,0x8e,0x51}\r
	};\r
	BYTE ciphertext[1][32] = {\r
		{0x60,0x1e,0xc3,0x13,0x77,0x57,0x89,0xa5,0xb7,0xa7,0xf5,0x04,0xbb,0xf3,0xd2,0x28,0xf4,0x43,0xe3,0xca,0x4d,0x62,0xb5,0x9a,0xca,0x84,0xe9,0x90,0xca,0xca,0xf5,0xc5}\r
	};\r
	BYTE iv[1][16] = {\r
		{0xf0,0xf1,0xf2,0xf3,0xf4,0xf5,0xf6,0xf7,0xf8,0xf9,0xfa,0xfb,0xfc,0xfd,0xfe,0xff},\r
	};\r
	BYTE key[1][32] = {\r
		{0x60,0x3d,0xeb,0x10,0x15,0xca,0x71,0xbe,0x2b,0x73,0xae,0xf0,0x85,0x7d,0x77,0x81,0x1f,0x35,0x2c,0x07,0x3b,0x61,0x08,0xd7,0x2d,0x98,0x10,0xa3,0x09,0x14,0xdf,0xf4}\r
	};\r
	int pass = 1;\r
\r
	//printf("* CTR mode:\n");\r
	aes_key_setup(key[0], key_schedule, 256);\r
\r
	//printf(  "Key          : ");\r
	//print_hex(key[0], 32);\r
	//printf("\nIV           : ");\r
	//print_hex(iv[0], 16);\r
\r
	aes_encrypt_ctr(plaintext[0], 32, enc_buf, key_schedule, 256, iv[0]);\r
	//printf("\nPlaintext    : ");\r
	//print_hex(plaintext[0], 32);\r
	//printf("\n-encrypted to: ");\r
	//print_hex(enc_buf, 32);\r
	pass = pass && !memcmp(enc_buf, ciphertext[0], 32);\r
\r
	aes_decrypt_ctr(ciphertext[0], 32, enc_buf, key_schedule, 256, iv[0]);\r
	//printf("\nCiphertext   : ");\r
	//print_hex(ciphertext[0], 32);\r
	//printf("\n-decrypted to: ");\r
	//print_hex(enc_buf, 32);\r
	pass = pass && !memcmp(enc_buf, plaintext[0], 32);\r
\r
	//printf("\n\n");\r
	return(pass);\r
}\r
\r
int aes_ccm_test()\r
{\r
	int mac_auth;\r
	WORD enc_buf_len;\r
	BYTE enc_buf[128];\r
	BYTE plaintext[3][32] = {\r
		{0x20,0x21,0x22,0x23},\r
		{0x20,0x21,0x22,0x23,0x24,0x25,0x26,0x27,0x28,0x29,0x2a,0x2b,0x2c,0x2d,0x2e,0x2f},\r
		{0x20,0x21,0x22,0x23,0x24,0x25,0x26,0x27,0x28,0x29,0x2a,0x2b,0x2c,0x2d,0x2e,0x2f,0x30,0x31,0x32,0x33,0x34,0x35,0x36,0x37}\r
	};\r
	BYTE assoc[3][32] = {\r
		{0x00,0x01,0x02,0x03,0x04,0x05,0x06,0x07},\r
		{0x00,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x0d,0x0e,0x0f},\r
		{0x00,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x0d,0x0e,0x0f,0x10,0x11,0x12,0x13}\r
	};\r
	BYTE ciphertext[3][32 + 16] = {\r
		{0x71,0x62,0x01,0x5b,0x4d,0xac,0x25,0x5d},\r
		{0xd2,0xa1,0xf0,0xe0,0x51,0xea,0x5f,0x62,0x08,0x1a,0x77,0x92,0x07,0x3d,0x59,0x3d,0x1f,0xc6,0x4f,0xbf,0xac,0xcd},\r
		{0xe3,0xb2,0x01,0xa9,0xf5,0xb7,0x1a,0x7a,0x9b,0x1c,0xea,0xec,0xcd,0x97,0xe7,0x0b,0x61,0x76,0xaa,0xd9,0xa4,0x42,0x8a,0xa5,0x48,0x43,0x92,0xfb,0xc1,0xb0,0x99,0x51}\r
	};\r
	BYTE iv[3][16] = {\r
		{0x10,0x11,0x12,0x13,0x14,0x15,0x16},\r
		{0x10,0x11,0x12,0x13,0x14,0x15,0x16,0x17},\r
		{0x10,0x11,0x12,0x13,0x14,0x15,0x16,0x17,0x18,0x19,0x1a,0x1b}\r
	};\r
	BYTE key[1][32] = {\r
		{0x40,0x41,0x42,0x43,0x44,0x45,0x46,0x47,0x48,0x49,0x4a,0x4b,0x4c,0x4d,0x4e,0x4f}\r
	};\r
	int pass = 1;\r
\r
	//printf("* CCM mode:\n");\r
	//printf("Key           : ");\r
	//print_hex(key[0], 16);\r
\r
	//print_hex(plaintext[0], 4);\r
	//print_hex(assoc[0], 8);\r
	//print_hex(ciphertext[0], 8);\r
	//print_hex(iv[0], 7);\r
	//print_hex(key[0], 16);\r
\r
	aes_encrypt_ccm(plaintext[0], 4, assoc[0], 8, iv[0], 7, enc_buf, &enc_buf_len, 4, key[0], 128);\r
	//printf("\nNONCE        : ");\r
	//print_hex(iv[0], 7);\r
	//printf("\nAssoc. Data  : ");\r
	//print_hex(assoc[0], 8);\r
	//printf("\nPayload       : ");\r
	//print_hex(plaintext[0], 4);\r
	//printf("\n-encrypted to: ");\r
	//print_hex(enc_buf, enc_buf_len);\r
	pass = pass && !memcmp(enc_buf, ciphertext[0], enc_buf_len);\r
\r
	aes_decrypt_ccm(ciphertext[0], 8, assoc[0], 8, iv[0], 7, enc_buf, &enc_buf_len, 4, &mac_auth, key[0], 128);\r
	//printf("\n-Ciphertext  : ");\r
	//print_hex(ciphertext[0], 8);\r
	//printf("\n-decrypted to: ");\r
	//print_hex(enc_buf, enc_buf_len);\r
	//printf("\nAuthenticated: %d ", mac_auth);\r
	pass = pass && !memcmp(enc_buf, plaintext[0], enc_buf_len) && mac_auth;\r
\r
\r
	aes_encrypt_ccm(plaintext[1], 16, assoc[1], 16, iv[1], 8, enc_buf, &enc_buf_len, 6, key[0], 128);\r
	//printf("\n\nNONCE        : ");\r
	//print_hex(iv[1], 8);\r
	//printf("\nAssoc. Data  : ");\r
	//print_hex(assoc[1], 16);\r
	//printf("\nPayload      : ");\r
	//print_hex(plaintext[1], 16);\r
	//printf("\n-encrypted to: ");\r
	//print_hex(enc_buf, enc_buf_len);\r
	pass = pass && !memcmp(enc_buf, ciphertext[1], enc_buf_len);\r
\r
	aes_decrypt_ccm(ciphertext[1], 22, assoc[1], 16, iv[1], 8, enc_buf, &enc_buf_len, 6, &mac_auth, key[0], 128);\r
	//printf("\n-Ciphertext  : ");\r
	//print_hex(ciphertext[1], 22);\r
	//printf("\n-decrypted to: ");\r
	//print_hex(enc_buf, enc_buf_len);\r
	//printf("\nAuthenticated: %d ", mac_auth);\r
	pass = pass && !memcmp(enc_buf, plaintext[1], enc_buf_len) && mac_auth;\r
\r
\r
	aes_encrypt_ccm(plaintext[2], 24, assoc[2], 20, iv[2], 12, enc_buf, &enc_buf_len, 8, key[0], 128);\r
	//printf("\n\nNONCE        : ");\r
	//print_hex(iv[2], 12);\r
	//printf("\nAssoc. Data  : ");\r
	//print_hex(assoc[2], 20);\r
	//printf("\nPayload      : ");\r
	//print_hex(plaintext[2], 24);\r
	//printf("\n-encrypted to: ");\r
	//print_hex(enc_buf, enc_buf_len);\r
	pass = pass && !memcmp(enc_buf, ciphertext[2], enc_buf_len);\r
\r
	aes_decrypt_ccm(ciphertext[2], 32, assoc[2], 20, iv[2], 12, enc_buf, &enc_buf_len, 8, &mac_auth, key[0], 128);\r
	//printf("\n-Ciphertext  : ");\r
	//print_hex(ciphertext[2], 32);\r
	//printf("\n-decrypted to: ");\r
	//print_hex(enc_buf, enc_buf_len);\r
	//printf("\nAuthenticated: %d ", mac_auth);\r
	pass = pass && !memcmp(enc_buf, plaintext[2], enc_buf_len) && mac_auth;\r
\r
	//printf("\n\n");\r
	return(pass);\r
}\r
\r
int aes_test()\r
{\r
	int pass = 1;\r
\r
	pass = pass && aes_ecb_test();\r
	pass = pass && aes_cbc_test();\r
	pass = pass && aes_ctr_test();\r
	pass = pass && aes_ccm_test();\r
\r
	return(pass);\r
}\r
\r
int main(int argc, char *argv[])\r
{\r
	printf("AES Tests: %s\n", aes_test() ? "SUCCEEDED" : "FAILED");\r
\r
	return(0);\r
}\r
Commit	Line	Data
ce188d4d	1	/*********************************************************************\r
	2	* Filename: aes_test.c\r
	3	* Author: Brad Conte (brad AT bradconte.com)\r
	4	* Copyright:\r
	5	* Disclaimer: This code is presented "as is" without any guarantees.\r
	6	* Details: Performs known-answer tests on the corresponding AES\r
	7	implementation. These tests do not encompass the full\r
	8	range of available test vectors and are not sufficient\r
	9	for FIPS-140 certification. However, if the tests pass\r
	10	it is very, very likely that the code is correct and was\r
	11	compiled properly. This code also serves as\r
	12	example usage of the functions.\r
	13	*********************************************************************/\r
	14	\r
	15	/************************* HEADER FILES *************************/\r
	16	#include <stdio.h>\r
	17	#include <memory.h>\r
	18	#include "aes.h"\r
	19	\r
	20	/********************* FUNCTION DEFINITIONS *********************/\r
	21	void print_hex(BYTE str[], int len)\r
	22	{\r
	23	int idx;\r
	24	\r
	25	for(idx = 0; idx < len; idx++)\r
	26	printf("%02x", str[idx]);\r
	27	}\r
	28	\r
	29	int aes_ecb_test()\r
	30	{\r
	31	WORD key_schedule[60], idx;\r
	32	BYTE enc_buf[128];\r
	33	BYTE plaintext[2][16] = {\r
	34	{0x6b,0xc1,0xbe,0xe2,0x2e,0x40,0x9f,0x96,0xe9,0x3d,0x7e,0x11,0x73,0x93,0x17,0x2a},\r
	35	{0xae,0x2d,0x8a,0x57,0x1e,0x03,0xac,0x9c,0x9e,0xb7,0x6f,0xac,0x45,0xaf,0x8e,0x51}\r
	36	};\r
	37	BYTE ciphertext[2][16] = {\r
	38	{0xf3,0xee,0xd1,0xbd,0xb5,0xd2,0xa0,0x3c,0x06,0x4b,0x5a,0x7e,0x3d,0xb1,0x81,0xf8},\r
	39	{0x59,0x1c,0xcb,0x10,0xd4,0x10,0xed,0x26,0xdc,0x5b,0xa7,0x4a,0x31,0x36,0x28,0x70}\r
	40	};\r
	41	BYTE key[1][32] = {\r
	42	{0x60,0x3d,0xeb,0x10,0x15,0xca,0x71,0xbe,0x2b,0x73,0xae,0xf0,0x85,0x7d,0x77,0x81,0x1f,0x35,0x2c,0x07,0x3b,0x61,0x08,0xd7,0x2d,0x98,0x10,0xa3,0x09,0x14,0xdf,0xf4}\r
	43	};\r
	44	int pass = 1;\r
	45	\r
	46	// Raw ECB mode.\r
	47	//printf("* ECB mode:\n");\r
	48	aes_key_setup(key[0], key_schedule, 256);\r
	49	//printf( "Key : ");\r
	50	//print_hex(key[0], 32);\r
	51	\r
	52	for(idx = 0; idx < 2; idx++) {\r
	53	aes_encrypt(plaintext[idx], enc_buf, key_schedule, 256);\r
	54	//printf("\nPlaintext : ");\r
	55	//print_hex(plaintext[idx], 16);\r
	56	//printf("\n-encrypted to: ");\r
	57	//print_hex(enc_buf, 16);\r
	58	pass = pass && !memcmp(enc_buf, ciphertext[idx], 16);\r
	59	\r
	60	aes_decrypt(ciphertext[idx], enc_buf, key_schedule, 256);\r
	61	//printf("\nCiphertext : ");\r
	62	//print_hex(ciphertext[idx], 16);\r
	63	//printf("\n-decrypted to: ");\r
	64	//print_hex(enc_buf, 16);\r
65	pass = pass && !memcmp(enc_buf, plaintext[idx], 16);\r
66	\r
67	//printf("\n\n");\r
68	}\r
69	\r
70	return(pass);\r
71	}\r
72	\r
73	int aes_cbc_test()\r
74	{\r
75	WORD key_schedule[60];\r
76	BYTE enc_buf[128];\r
77	BYTE plaintext[1][32] = {\r
78	{0x6b,0xc1,0xbe,0xe2,0x2e,0x40,0x9f,0x96,0xe9,0x3d,0x7e,0x11,0x73,0x93,0x17,0x2a,0xae,0x2d,0x8a,0x57,0x1e,0x03,0xac,0x9c,0x9e,0xb7,0x6f,0xac,0x45,0xaf,0x8e,0x51}\r
79	};\r
80	BYTE ciphertext[1][32] = {\r
81	{0xf5,0x8c,0x4c,0x04,0xd6,0xe5,0xf1,0xba,0x77,0x9e,0xab,0xfb,0x5f,0x7b,0xfb,0xd6,0x9c,0xfc,0x4e,0x96,0x7e,0xdb,0x80,0x8d,0x67,0x9f,0x77,0x7b,0xc6,0x70,0x2c,0x7d}\r
82	};\r
83	BYTE iv[1][16] = {\r
84	{0x00,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x0d,0x0e,0x0f}\r
85	};\r
86	BYTE key[1][32] = {\r
87	{0x60,0x3d,0xeb,0x10,0x15,0xca,0x71,0xbe,0x2b,0x73,0xae,0xf0,0x85,0x7d,0x77,0x81,0x1f,0x35,0x2c,0x07,0x3b,0x61,0x08,0xd7,0x2d,0x98,0x10,0xa3,0x09,0x14,0xdf,0xf4}\r
88	};\r
89	int pass = 1;\r
90	\r
91	//printf("* CBC mode:\n");\r
92	aes_key_setup(key[0], key_schedule, 256);\r
93	\r
94	//printf( "Key : ");\r
95	//print_hex(key[0], 32);\r
96	//printf("\nIV : ");\r
97	//print_hex(iv[0], 16);\r
98	\r
99	aes_encrypt_cbc(plaintext[0], 32, enc_buf, key_schedule, 256, iv[0]);\r
100	//printf("\nPlaintext : ");\r
101	//print_hex(plaintext[0], 32);\r
102	//printf("\n-encrypted to: ");\r
103	//print_hex(enc_buf, 32);\r
104	//printf("\nCiphertext : ");\r
105	//print_hex(ciphertext[0], 32);\r
106	pass = pass && !memcmp(enc_buf, ciphertext[0], 32);\r
107	\r
108	aes_decrypt_cbc(ciphertext[0], 32, enc_buf, key_schedule, 256, iv[0]);\r
109	//printf("\nCiphertext : ");\r
110	//print_hex(ciphertext[0], 32);\r
111	//printf("\n-decrypted to: ");\r
112	//print_hex(enc_buf, 32);\r
113	//printf("\nPlaintext : ");\r
114	//print_hex(plaintext[0], 32);\r
115	pass = pass && !memcmp(enc_buf, plaintext[0], 32);\r
116	\r
117	//printf("\n\n");\r
118	return(pass);\r
119	}\r
120	\r
121	int aes_ctr_test()\r
122	{\r
123	WORD key_schedule[60];\r
124	BYTE enc_buf[128];\r
125	BYTE plaintext[1][32] = {\r
126	{0x6b,0xc1,0xbe,0xe2,0x2e,0x40,0x9f,0x96,0xe9,0x3d,0x7e,0x11,0x73,0x93,0x17,0x2a,0xae,0x2d,0x8a,0x57,0x1e,0x03,0xac,0x9c,0x9e,0xb7,0x6f,0xac,0x45,0xaf,0x8e,0x51}\r
127	};\r
128	BYTE ciphertext[1][32] = {\r
129	{0x60,0x1e,0xc3,0x13,0x77,0x57,0x89,0xa5,0xb7,0xa7,0xf5,0x04,0xbb,0xf3,0xd2,0x28,0xf4,0x43,0xe3,0xca,0x4d,0x62,0xb5,0x9a,0xca,0x84,0xe9,0x90,0xca,0xca,0xf5,0xc5}\r
130	};\r
131	BYTE iv[1][16] = {\r
132	{0xf0,0xf1,0xf2,0xf3,0xf4,0xf5,0xf6,0xf7,0xf8,0xf9,0xfa,0xfb,0xfc,0xfd,0xfe,0xff},\r
133	};\r
134	BYTE key[1][32] = {\r
135	{0x60,0x3d,0xeb,0x10,0x15,0xca,0x71,0xbe,0x2b,0x73,0xae,0xf0,0x85,0x7d,0x77,0x81,0x1f,0x35,0x2c,0x07,0x3b,0x61,0x08,0xd7,0x2d,0x98,0x10,0xa3,0x09,0x14,0xdf,0xf4}\r
136	};\r
137	int pass = 1;\r
138	\r
139	//printf("* CTR mode:\n");\r
140	aes_key_setup(key[0], key_schedule, 256);\r
141	\r
142	//printf( "Key : ");\r
143	//print_hex(key[0], 32);\r
144	//printf("\nIV : ");\r
145	//print_hex(iv[0], 16);\r
146	\r
147	aes_encrypt_ctr(plaintext[0], 32, enc_buf, key_schedule, 256, iv[0]);\r
148	//printf("\nPlaintext : ");\r
149	//print_hex(plaintext[0], 32);\r
150	//printf("\n-encrypted to: ");\r
151	//print_hex(enc_buf, 32);\r
152	pass = pass && !memcmp(enc_buf, ciphertext[0], 32);\r
153	\r
154	aes_decrypt_ctr(ciphertext[0], 32, enc_buf, key_schedule, 256, iv[0]);\r
155	//printf("\nCiphertext : ");\r
156	//print_hex(ciphertext[0], 32);\r
157	//printf("\n-decrypted to: ");\r
158	//print_hex(enc_buf, 32);\r
159	pass = pass && !memcmp(enc_buf, plaintext[0], 32);\r
160	\r
161	//printf("\n\n");\r
162	return(pass);\r
163	}\r
164	\r
165	int aes_ccm_test()\r
166	{\r
167	int mac_auth;\r
168	WORD enc_buf_len;\r
169	BYTE enc_buf[128];\r
170	BYTE plaintext[3][32] = {\r
171	{0x20,0x21,0x22,0x23},\r
172	{0x20,0x21,0x22,0x23,0x24,0x25,0x26,0x27,0x28,0x29,0x2a,0x2b,0x2c,0x2d,0x2e,0x2f},\r
173	{0x20,0x21,0x22,0x23,0x24,0x25,0x26,0x27,0x28,0x29,0x2a,0x2b,0x2c,0x2d,0x2e,0x2f,0x30,0x31,0x32,0x33,0x34,0x35,0x36,0x37}\r
174	};\r
175	BYTE assoc[3][32] = {\r
176	{0x00,0x01,0x02,0x03,0x04,0x05,0x06,0x07},\r
177	{0x00,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x0d,0x0e,0x0f},\r
178	{0x00,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,0x0c,0x0d,0x0e,0x0f,0x10,0x11,0x12,0x13}\r
179	};\r
180	BYTE ciphertext[3][32 + 16] = {\r
181	{0x71,0x62,0x01,0x5b,0x4d,0xac,0x25,0x5d},\r
182	{0xd2,0xa1,0xf0,0xe0,0x51,0xea,0x5f,0x62,0x08,0x1a,0x77,0x92,0x07,0x3d,0x59,0x3d,0x1f,0xc6,0x4f,0xbf,0xac,0xcd},\r
183	{0xe3,0xb2,0x01,0xa9,0xf5,0xb7,0x1a,0x7a,0x9b,0x1c,0xea,0xec,0xcd,0x97,0xe7,0x0b,0x61,0x76,0xaa,0xd9,0xa4,0x42,0x8a,0xa5,0x48,0x43,0x92,0xfb,0xc1,0xb0,0x99,0x51}\r
184	};\r
185	BYTE iv[3][16] = {\r
186	{0x10,0x11,0x12,0x13,0x14,0x15,0x16},\r
187	{0x10,0x11,0x12,0x13,0x14,0x15,0x16,0x17},\r
188	{0x10,0x11,0x12,0x13,0x14,0x15,0x16,0x17,0x18,0x19,0x1a,0x1b}\r
189	};\r
190	BYTE key[1][32] = {\r
191	{0x40,0x41,0x42,0x43,0x44,0x45,0x46,0x47,0x48,0x49,0x4a,0x4b,0x4c,0x4d,0x4e,0x4f}\r
192	};\r
193	int pass = 1;\r
194	\r
195	//printf("* CCM mode:\n");\r
196	//printf("Key : ");\r
197	//print_hex(key[0], 16);\r
198	\r
199	//print_hex(plaintext[0], 4);\r
200	//print_hex(assoc[0], 8);\r
201	//print_hex(ciphertext[0], 8);\r
202	//print_hex(iv[0], 7);\r
203	//print_hex(key[0], 16);\r
204	\r
205	aes_encrypt_ccm(plaintext[0], 4, assoc[0], 8, iv[0], 7, enc_buf, &enc_buf_len, 4, key[0], 128);\r
206	//printf("\nNONCE : ");\r
207	//print_hex(iv[0], 7);\r
208	//printf("\nAssoc. Data : ");\r
209	//print_hex(assoc[0], 8);\r
210	//printf("\nPayload : ");\r
211	//print_hex(plaintext[0], 4);\r
212	//printf("\n-encrypted to: ");\r
213	//print_hex(enc_buf, enc_buf_len);\r
214	pass = pass && !memcmp(enc_buf, ciphertext[0], enc_buf_len);\r
215	\r
216	aes_decrypt_ccm(ciphertext[0], 8, assoc[0], 8, iv[0], 7, enc_buf, &enc_buf_len, 4, &mac_auth, key[0], 128);\r
217	//printf("\n-Ciphertext : ");\r
218	//print_hex(ciphertext[0], 8);\r
219	//printf("\n-decrypted to: ");\r
220	//print_hex(enc_buf, enc_buf_len);\r
221	//printf("\nAuthenticated: %d ", mac_auth);\r
222	pass = pass && !memcmp(enc_buf, plaintext[0], enc_buf_len) && mac_auth;\r
223	\r
224	\r
225	aes_encrypt_ccm(plaintext[1], 16, assoc[1], 16, iv[1], 8, enc_buf, &enc_buf_len, 6, key[0], 128);\r
226	//printf("\n\nNONCE : ");\r
227	//print_hex(iv[1], 8);\r
228	//printf("\nAssoc. Data : ");\r
229	//print_hex(assoc[1], 16);\r
230	//printf("\nPayload : ");\r
231	//print_hex(plaintext[1], 16);\r
232	//printf("\n-encrypted to: ");\r
233	//print_hex(enc_buf, enc_buf_len);\r
234	pass = pass && !memcmp(enc_buf, ciphertext[1], enc_buf_len);\r
235	\r
236	aes_decrypt_ccm(ciphertext[1], 22, assoc[1], 16, iv[1], 8, enc_buf, &enc_buf_len, 6, &mac_auth, key[0], 128);\r
237	//printf("\n-Ciphertext : ");\r
238	//print_hex(ciphertext[1], 22);\r
239	//printf("\n-decrypted to: ");\r
240	//print_hex(enc_buf, enc_buf_len);\r
241	//printf("\nAuthenticated: %d ", mac_auth);\r
242	pass = pass && !memcmp(enc_buf, plaintext[1], enc_buf_len) && mac_auth;\r
243	\r
244	\r
245	aes_encrypt_ccm(plaintext[2], 24, assoc[2], 20, iv[2], 12, enc_buf, &enc_buf_len, 8, key[0], 128);\r
246	//printf("\n\nNONCE : ");\r
247	//print_hex(iv[2], 12);\r
248	//printf("\nAssoc. Data : ");\r
249	//print_hex(assoc[2], 20);\r
250	//printf("\nPayload : ");\r
251	//print_hex(plaintext[2], 24);\r
252	//printf("\n-encrypted to: ");\r
253	//print_hex(enc_buf, enc_buf_len);\r
254	pass = pass && !memcmp(enc_buf, ciphertext[2], enc_buf_len);\r
255	\r
256	aes_decrypt_ccm(ciphertext[2], 32, assoc[2], 20, iv[2], 12, enc_buf, &enc_buf_len, 8, &mac_auth, key[0], 128);\r
257	//printf("\n-Ciphertext : ");\r
258	//print_hex(ciphertext[2], 32);\r
259	//printf("\n-decrypted to: ");\r
260	//print_hex(enc_buf, enc_buf_len);\r
261	//printf("\nAuthenticated: %d ", mac_auth);\r
262	pass = pass && !memcmp(enc_buf, plaintext[2], enc_buf_len) && mac_auth;\r
263	\r
264	//printf("\n\n");\r
265	return(pass);\r
266	}\r
267	\r
268	int aes_test()\r
269	{\r
270	int pass = 1;\r
271	\r
272	pass = pass && aes_ecb_test();\r
273	pass = pass && aes_cbc_test();\r
274	pass = pass && aes_ctr_test();\r
275	pass = pass && aes_ccm_test();\r
276	\r
277	return(pass);\r
278	}\r
279	\r
280	int main(int argc, char *argv[])\r
281	{\r
282	printf("AES Tests: %s\n", aes_test() ? "SUCCEEDED" : "FAILED");\r
283	\r
284	return(0);\r
285	}\r