tpm2: Add script to re-generate the test data for AES and new test for TDES

Add a script that uses openssl to create the test data we are using
in the TPM 2 code already. Extend this script with TDES 128 and 192 bit
key sizes and tests.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
This commit is contained in:
Stefan Berger 2019-05-03 14:29:47 -04:00 committed by Stefan Berger
parent bd7dc396e1
commit cb386e4c7f

71
src/tpm2/gensymtestsdata.sh Executable file
View File

@ -0,0 +1,71 @@
#!/bin/bash
AES_KEY_128='2b7e151628aed2a6abf7158809cf4f3c'
AES_KEY_192='8e73b0f7da0e6452c810f32b809079e562f8ead2522c6b7b'
AES_KEY_256='603deb1015ca71be2b73aef0857d77811f352c073b6108d72d9810a30914dff4'
AES_DATA_IN='\x6b\xc1\xbe\xe2\x2e\x40\x9f\x96\xe9\x3d\x7e\x11\x73\x93\x17\x2a\xae\x2d\x8a\x57\x1e\x03\xac\x9c\x9e\xb7\x6f\xac\x45\xaf\x8e\x51'
echo -en "$AES_DATA_IN" >/tmp/data
for keysize in 128 192 256; do
tmp=AES_KEY_${keysize}
key=$(eval echo \$$tmp)
for mode in ecb cbc cfb ofb ctr; do
cipher="aes-${keysize}-${mode}"
bs=$((128 / 8))
iv=""
ivparm=""
case $mode in
ecb)
;;
ctr)
v=255
for ((c=0; c < bs; c++)); do
iv="$(printf "%02x" $v)${iv}"
v=$((v - 1))
done
ivparm="-iv ${iv}"
;;
*)
for ((c=0; c < bs; c++)); do
iv="${iv}$(printf "%02x" $c)"
done
ivparm="-iv ${iv}"
;;
esac
echo -n "$cipher: "
openssl enc -e -K "${key}" ${ivparm} -${cipher} -in <(echo -en "$AES_DATA_IN") | \
od -t x1 -w128 -An | \
sed -n 's/ \([a-f0-9]\{2\}\)/ 0x\1/pg'
done
done
# We need to extend the 128 bit key to be 192 bit key otherwise 3rd schedule is all zeroes
TDES_KEY_128=${AES_KEY_128}${AES_KEY_128:0:16}
TDES_KEY_192=${AES_KEY_192}
TDES_DATA_IN=${AES_DATA_IN}
for keysize in 128 192; do
tmp=TDES_KEY_${keysize}
key=$(eval echo \$$tmp)
for mode in ecb cbc cfb ofb; do
cipher="des-ede3-${mode}"
iv=""
ivparm=""
bs=8
case $mode in
ecb)
;;
*)
for ((c=0; c < bs; c++)); do
iv="${iv}$(printf "%02x" $c)"
done
ivparm="-iv ${iv}"
;;
esac
echo -n "$cipher [${keysize}]: "
openssl enc -e -K "${key}" ${ivparm} -${cipher} -in <(echo -en "$TDES_DATA_IN") | \
od -t x1 -w128 -An | \
sed -n 's/ \([a-f0-9]\{2\}\)/ 0x\1/pg'
done
done