dropbear: libtomcrypt/notes/etc/NoekeonVects.java annotate

annotate libtomcrypt/notes/etc/NoekeonVects.java @ 1622:e11ed628708b

- Add adaptive authentication failure delay - Rework monotonic_now/gettime_wrapper and use clock_gettime on more platforms

author	Matt Johnston <matt@ucc.asn.au>
date	Mon, 05 Nov 2018 23:36:34 +0800
parents	6dba84798cd5
children

rev	line source
1471 6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1 /*
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	2 NoekeonVects.java - Generate Noekeon test vectors using BouncyCastle.
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	3
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	4 Written in 2011 by Patrick Pelletier <[email protected]>
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	5
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	6 To the extent possible under law, the author(s) have dedicated all
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	7 copyright and related and neighboring rights to this software to
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	8 the public domain worldwide. This software is distributed without
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	9 any warranty.
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	10
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	11 This file is dedicated to the public domain with the CC0 Public Domain
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	12 Dedication: http://creativecommons.org/publicdomain/zero/1.0/legalcode.txt
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	13
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	14 You may also consider this file to be covered by the WTFPL, as contained
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	15 in the LibTomCrypt LICENSE file, if that makes you happier for some reason.
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	16
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	17 ----------------------------------------------------------------------
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	18
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	19 This program was inspired by the comment in Botan 1.10.1's
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	20 doc/examples/eax_test.cpp:
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	21
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	22 // Noekeon: unknown cause, though LTC's lone test vector does not
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	23 // match Botan
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	24
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	25 So, I investigated the discrepancy by comparing them with a third
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	26 implementation, BouncyCastle: http://www.bouncycastle.org/java.html
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	27
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	28 I determined that there are two reasons why LibTomCrypt's Noekeon does
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	29 not match Botan:
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	30
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	31 1) Botan uses "indirect Noekeon" (with a key schedule), while
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	32 LibTomCrypt and BouncyCastle both use "direct Noekeon" (without
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	33 a key schedule). See slide 14 of
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	34 http://gro.noekeon.org/Noekeon-slides.pdf
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	35
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	36 2) However, LibTomCrypt's direct Noekeon still does not match
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	37 BouncyCastle's direct Noekeon. This is because of a bug in
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	38 LibTomCrypt's PI1 and PI2 functions:
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	39 https://github.com/libtom/libtomcrypt/issues/5
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	40
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	41 This program uses BouncyCastle to produce test vectors which are
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	42 suitable for Botan (by explicitly scheduling the key, thus
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	43 building indirect Noekeon out of BouncyCastle's direct Noekeon),
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	44 and also produces test vectors which would be suitable for
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	45 LibTomCrypt (direct Noekeon) once its PI1 and PI2 functions are
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	46 fixed to match the Noekeon specification.
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	47
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	48 Although this program uses a PRNG from BouncyCastle to generate
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	49 data for the test vectors, it uses a fixed seed and thus will
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	50 produce the same output every time it is run.
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	51 */
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	52
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	53 import java.io.ByteArrayOutputStream;
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	54 import java.io.IOException;
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	55 import java.util.Locale;
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	56 import org.bouncycastle.crypto.digests.RIPEMD128Digest;
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	57 import org.bouncycastle.crypto.engines.NoekeonEngine;
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	58 import org.bouncycastle.crypto.modes.EAXBlockCipher;
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	59 import org.bouncycastle.crypto.params.AEADParameters;
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	60 import org.bouncycastle.crypto.params.KeyParameter;
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	61 import org.bouncycastle.crypto.prng.DigestRandomGenerator;
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	62 import org.bouncycastle.util.encoders.HexEncoder;
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	63
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	64 public class NoekeonVects
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	65 {
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	66 private final DigestRandomGenerator r =
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	67 new DigestRandomGenerator(new RIPEMD128Digest());
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	68
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	69 private final HexEncoder h = new HexEncoder();
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	70
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	71 private final NoekeonEngine noekeon = new NoekeonEngine();
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	72
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	73 private final KeyParameter null_key = new KeyParameter(new byte[16]);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	74
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	75 private final boolean schedule_key;
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	76
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	77 private final boolean botan_format;
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	78
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	79 private byte[] randomBytes(int n)
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	80 {
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	81 byte[] b = new byte[n];
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	82 r.nextBytes(b);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	83 return b;
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	84 }
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	85
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	86 private void hexOut(byte[] b) throws IOException
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	87 {
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	88 // HexEncoder uses lowercase, and Botan's test vectors must
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	89 // be in uppercase, so...
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	90 ByteArrayOutputStream os = new ByteArrayOutputStream();
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	91 h.encode(b, 0, b.length, os);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	92 String s = os.toString("US-ASCII");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	93 System.out.print(s.toUpperCase(Locale.US));
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	94 }
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	95
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	96 private void printCArray(byte[] a) throws IOException
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	97 {
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	98 byte[] b = new byte[1];
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	99 for (int i = 0; i < a.length; i++)
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	100 {
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	101 if (i > 0)
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	102 System.out.print(", ");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	103 System.out.print("0x");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	104 b[0] = a[i];
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	105 hexOut(b);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	106 }
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	107 }
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	108
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	109 private void printVector(byte[] key, byte[] plaintext, byte[] ciphertext)
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	110 throws IOException
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	111 {
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	112 if (botan_format)
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	113 {
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	114 hexOut(plaintext);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	115 System.out.print(":");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	116 hexOut(ciphertext);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	117 System.out.println(":\\");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	118 hexOut(key);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	119 System.out.println();
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	120 }
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	121 else
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	122 {
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	123 System.out.println(" {");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	124 System.out.println(" 16,");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	125 System.out.print(" { ");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	126 printCArray (key);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	127 System.out.println(" },");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	128 System.out.print(" { ");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	129 printCArray (plaintext);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	130 System.out.println(" },");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	131 System.out.print(" { ");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	132 printCArray (ciphertext);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	133 System.out.println(" }");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	134 System.out.println(" },");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	135 }
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	136 }
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	137
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	138 private KeyParameter maybe_schedule_key(byte[] key)
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	139 {
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	140 if (schedule_key)
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	141 {
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	142 noekeon.init(true, null_key);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	143 byte[] scheduled = new byte[16];
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	144 noekeon.processBlock(key, 0, scheduled, 0);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	145 return new KeyParameter(scheduled);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	146 }
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	147 else
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	148 return new KeyParameter(key);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	149 }
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	150
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	151 private byte[] encrypt(byte[] plaintext, byte[] key)
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	152 {
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	153 KeyParameter kp = maybe_schedule_key(key);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	154 noekeon.init(true, kp);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	155 byte[] ciphertext = new byte[16];
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	156 noekeon.processBlock(plaintext, 0, ciphertext, 0);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	157 return ciphertext;
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	158 }
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	159
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	160 public NoekeonVects(long seed, boolean schedule_key, boolean botan_format)
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	161 {
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	162 this.schedule_key = schedule_key;
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	163 this.botan_format = botan_format;
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	164 r.addSeedMaterial(seed);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	165 }
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	166
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	167 public void ecb_vectors() throws IOException
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	168 {
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	169 for (int i = 0; i < 8; i++)
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	170 {
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	171 byte[] key = randomBytes(16);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	172 byte[] plaintext = randomBytes(16);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	173 byte[] ciphertext = encrypt(plaintext, key);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	174 printVector(key, plaintext, ciphertext);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	175 }
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	176 }
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	177
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	178 public void eax_vectors() throws Exception
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	179 {
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	180 System.out.println("EAX-noekeon (16 byte key)");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	181 EAXBlockCipher eax = new EAXBlockCipher(new NoekeonEngine());
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	182 byte[] output = new byte[48];
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	183 byte[] tag = new byte[16];
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	184
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	185 for (int j = 0; j < 16; j++)
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	186 tag[j] = (byte) j;
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	187
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	188 for (int i = 0; i <= 32; i++)
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	189 {
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	190 byte[] header_nonce_plaintext = new byte[i];
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	191 for (int j = 0; j < i; j++)
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	192 header_nonce_plaintext[j] = (byte) j;
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	193 AEADParameters params =
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	194 new AEADParameters(maybe_schedule_key(tag),
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	195 128,
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	196 header_nonce_plaintext,
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	197 header_nonce_plaintext);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	198 eax.init(true, params);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	199 int off = eax.processBytes(header_nonce_plaintext, 0, i,
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	200 output, 0);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	201 off += eax.doFinal(output, off);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	202 if (off != i + 16)
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	203 throw new RuntimeException("didn't expect that");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	204 byte[] ciphertext = new byte[i];
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	205 for (int j = 0; j < i; j++)
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	206 ciphertext[j] = output[j];
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	207 for (int j = 0; j < 16; j++)
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	208 tag[j] = output[i + j];
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	209 System.out.print(i < 10 ? " " : " ");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	210 System.out.print(i);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	211 System.out.print(": ");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	212 hexOut(ciphertext);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	213 System.out.print(", ");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	214 hexOut(tag);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	215 System.out.println();
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	216 }
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	217 }
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	218
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	219 public static void main(String[] argv) throws Exception
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	220 {
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	221 NoekeonVects bot = new NoekeonVects(0xdefacedbadfacadeL, true, true);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	222 NoekeonVects tom = new NoekeonVects(0xdefacedbadfacadeL, false, false);
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	223 System.out.println("# ECB vectors for indirect Noekeon, in Botan's");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	224 System.out.println("# test vector format, suitable for insertion");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	225 System.out.println("# into Botan's file checks/validate.dat");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	226 System.out.println("# Block cipher format is plaintext:ciphertext:key");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	227 bot.ecb_vectors();
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	228 System.out.println();
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	229 System.out.println("/* ECB vectors for direct Noekeon, as C arrays");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	230 System.out.println(" * suitable for insertion into LibTomCrypt's");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	231 System.out.println(" * noekeon_test() in src/ciphers/noekeon.c,");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	232 System.out.println(" * once LTC's PI1/PI2 bug is fixed. */");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	233 tom.ecb_vectors();
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	234 System.out.println();
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	235 System.out.println("# EAX vectors for indirect Noekeon, in the format");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	236 System.out.println("# generated by LTC's demos/tv_gen.c and consumed");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	237 System.out.println("# by Botan's doc/examples/eax_test.cpp, suitable");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	238 System.out.println("# for insertion in Botan's doc/examples/eax.vec");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	239 bot.eax_vectors();
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	240 System.out.println();
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	241 System.out.println("# EAX vectors for direct Noekeon, in the format");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	242 System.out.println("# generated by LTC's demos/tv_gen.c and consumed");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	243 System.out.println("# by Botan's doc/examples/eax_test.cpp, which");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	244 System.out.println("# should match LTC's notes/eax_tv.txt, once");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	245 System.out.println("# LTC's PI1/PI2 bug is fixed.");
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	246 tom.eax_vectors();
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	247 System.out.flush();
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	248 }
6dba84798cd5 Update to libtomcrypt 1.18.1, merged with Dropbear changes Matt Johnston <matt@ucc.asn.au> parents: diff changeset	249 }

Mercurial > dropbear

annotate libtomcrypt/notes/etc/NoekeonVects.java @ 1622:e11ed628708b