1 /* SPDX-License-Identifier: BSD-3-Clause
2 * Copyright(c) 2018 Intel Corporation
5 #ifndef _FIPS_VALIDATION_H_
6 #define _FIPS_VALIDATION_H_
8 #define FIPS_PARSE_ERR(fmt, args) \
9 RTE_LOG(ERR, USER1, "FIPS parse error" ## fmt ## "\n", ## args)
11 #define ERR_MSG_SIZE 128
12 #define MAX_CASE_LINE 15
13 #define MAX_LINE_CHAR 204800 /*< max number of characters per line */
14 #define MAX_NB_TESTS 10240
15 #define MAX_BUF_SIZE 2048
16 #define MAX_STRING_SIZE 64
17 #define MAX_DIGEST_SIZE 64
19 #define POSITIVE_TEST 0
20 #define NEGATIVE_TEST -1
22 #define REQ_FILE_PERFIX "req"
23 #define RSP_FILE_PERFIX "rsp"
24 #define FAX_FILE_PERFIX "fax"
26 enum fips_test_algorithms {
27 FIPS_TEST_ALGO_AES = 0,
28 FIPS_TEST_ALGO_AES_GCM,
29 FIPS_TEST_ALGO_AES_CMAC,
30 FIPS_TEST_ALGO_AES_CCM,
34 FIPS_TEST_ALGO_AES_XTS,
45 FIPS_TEST_ENC_AUTH_GEN = 1,
46 FIPS_TEST_DEC_AUTH_VERIF,
49 #define MAX_LINE_PER_VECTOR 16
56 struct fips_test_vector {
60 struct fips_val digest;
61 struct fips_val auth_aad;
66 struct fips_val digest;
75 enum rte_crypto_op_status status;
78 typedef int (*post_prcess_t)(struct fips_val *val);
80 typedef int (*parse_callback_t)(const char *key, char *text,
81 struct fips_val *val);
83 struct fips_test_callback {
89 enum fips_aesavs_test_types {
90 AESAVS_TYPE_GFXBOX = 1,
98 enum fips_tdes_test_types {
99 TDES_INVERSE_PERMUTATION = 0,
101 TDES_SUBSTITUTION_TABLE,
105 TDES_MCT, /* Monte Carlo (Modes) Test */
106 TDES_MMT /* Multi block Message Test */
109 enum fips_tdes_test_mode {
114 enum fips_ccm_test_types {
115 CCM_VADT = 1, /* Variable Associated Data Test */
116 CCM_VPT, /* Variable Payload Test */
117 CCM_VNT, /* Variable Nonce Test */
118 CCM_VTT, /* Variable Tag Test */
119 CCM_DVPT, /* Decryption-Verification Process Test */
122 enum fips_sha_test_types {
127 struct aesavs_interim_data {
128 enum fips_aesavs_test_types test_type;
129 uint32_t cipher_algo;
133 struct hmac_interim_data {
134 enum rte_crypto_auth_algorithm algo;
137 struct tdes_interim_data {
138 enum fips_tdes_test_types test_type;
139 enum fips_tdes_test_mode test_mode;
143 struct ccm_interim_data {
144 enum fips_ccm_test_types test_type;
152 struct sha_interim_data {
153 enum fips_sha_test_types test_type;
154 enum rte_crypto_auth_algorithm algo;
157 struct fips_test_interim_info {
160 enum file_types file_type;
161 enum fips_test_algorithms algo;
163 char *vec[MAX_LINE_PER_VECTOR];
164 uint32_t vec_start_off;
165 uint32_t nb_vec_lines;
166 char device_name[MAX_STRING_SIZE];
167 char file_name[MAX_STRING_SIZE];
170 struct aesavs_interim_data aes_data;
171 struct hmac_interim_data hmac_data;
172 struct tdes_interim_data tdes_data;
173 struct ccm_interim_data ccm_data;
174 struct sha_interim_data sha_data;
177 enum fips_test_op op;
179 const struct fips_test_callback *callbacks;
180 const struct fips_test_callback *interim_callbacks;
181 const struct fips_test_callback *writeback_callbacks;
183 post_prcess_t parse_writeback;
184 post_prcess_t kat_check;
187 extern struct fips_test_vector vec;
188 extern struct fips_test_interim_info info;
191 fips_test_init(const char *req_file_path, const char *rsp_file_path,
192 const char *device_name);
195 fips_test_clear(void);
198 fips_test_fetch_one_block(void);
201 fips_test_parse_one_case(void);
204 fips_test_write_one_case(void);
207 parse_test_aes_init(void);
210 parse_test_tdes_init(void);
213 parse_test_hmac_init(void);
216 parse_test_gcm_init(void);
219 parse_test_cmac_init(void);
222 parse_test_ccm_init(void);
225 parse_test_sha_init(void);
228 parse_test_xts_init(void);
231 parser_read_uint8_hex(uint8_t *value, const char *p);
234 parse_uint8_hex_str(const char *key, char *src, struct fips_val *val);
237 parse_uint8_known_len_hex_str(const char *key, char *src, struct fips_val *val);
240 parser_read_uint32_val(const char *key, char *src, struct fips_val *val);
243 parser_read_uint32_bit_val(const char *key, char *src, struct fips_val *val);
246 parser_read_uint32(uint32_t *value, char *p);
249 parser_read_uint32_val(const char *key, char *src, struct fips_val *val);
252 writeback_hex_str(const char *key, char *dst, struct fips_val *val);
255 parse_write_hex_str(struct fips_val *src);
258 update_info_vec(uint32_t count);