1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
|
/*
* Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
*
* Licensed under the Apache License, Version 2.0 (the "License").
* You may not use this file except in compliance with the License.
* A copy of the License is located at
*
* http://aws.amazon.com/apache2.0
*
* or in the "license" file accompanying this file. This file is distributed
* on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
* express or implied. See the License for the specific language governing
* permissions and limitations under the License.
*/
#include "pq-crypto/s2n_pq.h"
#include "s2n_test.h"
#include "tests/testlib/s2n_testlib.h"
#include "tls/s2n_kem.h"
#include "utils/s2n_safety.h"
struct s2n_kem_test_vector {
const struct s2n_kem *kem;
bool (*asm_is_enabled)();
S2N_RESULT (*enable_asm)();
S2N_RESULT (*disable_asm)();
};
static const struct s2n_kem_test_vector test_vectors[] = {
{
.kem = &s2n_kyber_512_r3,
.asm_is_enabled = s2n_pq_no_asm_available,
.enable_asm = s2n_pq_noop_asm,
.disable_asm = s2n_pq_noop_asm,
},
{
.kem = &s2n_kyber_512_r3,
.asm_is_enabled = s2n_kyber512r3_is_avx2_bmi2_enabled,
.enable_asm = s2n_try_enable_kyber512r3_opt_avx2_bmi2,
.disable_asm = s2n_disable_kyber512r3_opt_avx2_bmi2,
},
};
/* EXPECT_SUCCESS checks explicitly function_call != -1; the PQ KEM functions may return
* any non-zero int to indicate failure.*/
#define EXPECT_PQ_KEM_SUCCESS(function_call) EXPECT_EQUAL((function_call), 0)
#define EXPECT_PQ_KEM_FAILURE(function_call) EXPECT_NOT_EQUAL((function_call), 0)
int main()
{
BEGIN_TEST();
for (size_t i = 0; i < s2n_array_len(test_vectors); i++) {
const struct s2n_kem_test_vector vector = test_vectors[i];
const struct s2n_kem *kem = vector.kem;
DEFER_CLEANUP(struct s2n_blob public_key = { 0 }, s2n_free);
EXPECT_SUCCESS(s2n_alloc(&public_key, kem->public_key_length));
DEFER_CLEANUP(struct s2n_blob private_key = { 0 }, s2n_free);
EXPECT_SUCCESS(s2n_alloc(&private_key, kem->private_key_length));
DEFER_CLEANUP(struct s2n_blob client_shared_secret = { 0 }, s2n_free);
EXPECT_SUCCESS(s2n_alloc(&client_shared_secret, kem->shared_secret_key_length));
DEFER_CLEANUP(struct s2n_blob server_shared_secret = { 0 }, s2n_free);
EXPECT_SUCCESS(s2n_alloc(&server_shared_secret, kem->shared_secret_key_length));
DEFER_CLEANUP(struct s2n_blob ciphertext = { 0 }, s2n_free);
EXPECT_SUCCESS(s2n_alloc(&ciphertext, kem->ciphertext_length));
if (s2n_pq_is_enabled()) {
/* Run the tests for C and assembly implementations (where available) */
s2n_result (*asm_toggle_funcs[])(void) = { vector.disable_asm, vector.enable_asm };
for (size_t j = 0; j < s2n_array_len(asm_toggle_funcs); j++) {
EXPECT_OK(asm_toggle_funcs[j]());
/* Test a successful round-trip: keygen->enc->dec */
EXPECT_PQ_KEM_SUCCESS(kem->generate_keypair(public_key.data, private_key.data));
EXPECT_PQ_KEM_SUCCESS(kem->encapsulate(ciphertext.data, client_shared_secret.data, public_key.data));
EXPECT_PQ_KEM_SUCCESS(kem->decapsulate(server_shared_secret.data, ciphertext.data, private_key.data));
EXPECT_BYTEARRAY_EQUAL(server_shared_secret.data, client_shared_secret.data, kem->shared_secret_key_length);
/* By design, if an invalid private key + ciphertext pair is provided to decapsulate(),
* the function should still succeed (return S2N_SUCCESS); however, the shared secret
* that was "decapsulated" will be a garbage random value. */
ciphertext.data[0] ^= 1; /* Flip a bit to invalidate the ciphertext */
EXPECT_PQ_KEM_SUCCESS(kem->decapsulate(server_shared_secret.data, ciphertext.data, private_key.data));
EXPECT_BYTEARRAY_NOT_EQUAL(server_shared_secret.data, client_shared_secret.data, kem->shared_secret_key_length);
}
} else {
#if defined(S2N_NO_PQ)
EXPECT_FAILURE_WITH_ERRNO(kem->generate_keypair(public_key.data, private_key.data), S2N_ERR_UNIMPLEMENTED);
EXPECT_FAILURE_WITH_ERRNO(kem->encapsulate(ciphertext.data, client_shared_secret.data, public_key.data), S2N_ERR_UNIMPLEMENTED);
EXPECT_FAILURE_WITH_ERRNO(kem->decapsulate(server_shared_secret.data, ciphertext.data, private_key.data), S2N_ERR_UNIMPLEMENTED);
#else
EXPECT_FAILURE_WITH_ERRNO(kem->generate_keypair(public_key.data, private_key.data), S2N_ERR_PQ_DISABLED);
EXPECT_FAILURE_WITH_ERRNO(kem->encapsulate(ciphertext.data, client_shared_secret.data, public_key.data), S2N_ERR_PQ_DISABLED);
EXPECT_FAILURE_WITH_ERRNO(kem->decapsulate(server_shared_secret.data, ciphertext.data, private_key.data), S2N_ERR_PQ_DISABLED);
#endif
}
}
END_TEST();
}
|
