280 lines
7.9 KiB
NASM
280 lines
7.9 KiB
NASM
|
; aestest.inc - AES test suite
|
||
|
|
;
|
||
|
|
; Copyright (C) 2016 Ivan Baravy (dunkaist)
|
||
|
|
; Copyright (C) 2016 Jeffrey Amelynck
|
||
|
|
;
|
||
|
|
; This program is free software: you can redistribute it and/or modify
|
||
|
|
; it under the terms of the GNU General Public License as published by
|
||
|
|
; the Free Software Foundation, either version 3 of the License, or
|
||
|
|
; (at your option) any later version.
|
||
|
|
;
|
||
|
|
; This program is distributed in the hope that it will be useful,
|
||
|
|
; but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
|
|
; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
|
|
; GNU General Public License for more details.
|
||
|
|
;
|
||
|
|
; You should have received a copy of the GNU General Public License
|
||
|
|
; along with this program. If not, see <http://www.gnu.org/licenses/>.
|
||
|
|
|
||
|
|
format binary as ""
|
||
|
|
|
||
|
|
use32
|
||
|
|
org 0x0
|
||
|
|
db 'MENUET01'
|
||
|
|
dd 0x01,start,i_end,e_end,e_end,0,0
|
||
|
|
|
||
|
|
__DEBUG__ = 1
|
||
|
|
__DEBUG_LEVEL__ = 1
|
||
|
|
|
||
|
|
include '../../../proc32.inc'
|
||
|
|
include '../../../macros.inc'
|
||
|
|
include '../../../dll.inc'
|
||
|
|
include '../../../debug-fdo.inc'
|
||
|
|
;include 'libcrash.inc'
|
||
|
|
include '../aes256.inc'
|
||
|
|
include '../aes256-ctr.inc'
|
||
|
|
include '../aes256-cbc.inc'
|
||
|
|
|
||
|
|
; Test vectors are taken from the very end of sp800-38a.pdf
|
||
|
|
|
||
|
|
|
||
|
|
start:
|
||
|
|
mcall 68, 11
|
||
|
|
|
||
|
|
DEBUGF 1,'===========================================\n'
|
||
|
|
DEBUGF 1,'AES256_CTR_CRYPT\n'
|
||
|
|
DEBUGF 1,'\n'
|
||
|
|
DEBUGF 1,'key : '
|
||
|
|
stdcall dump_128bit_hex, key
|
||
|
|
DEBUGF 1,'\n'
|
||
|
|
DEBUGF 1,' '
|
||
|
|
stdcall dump_128bit_hex, key+16
|
||
|
|
DEBUGF 1,'\n'
|
||
|
|
DEBUGF 1,'\n'
|
||
|
|
DEBUGF 1,'counter: '
|
||
|
|
stdcall dump_128bit_hex, counter
|
||
|
|
DEBUGF 1,'\n'
|
||
|
|
DEBUGF 1,'\n'
|
||
|
|
|
||
|
|
stdcall aes256_ctr_init, counter
|
||
|
|
; returns context, save it to ebx
|
||
|
|
mov ebx, eax
|
||
|
|
stdcall aes256_set_encrypt_key, ebx, key
|
||
|
|
|
||
|
|
mov esi, plain
|
||
|
|
mov edi, cipher
|
||
|
|
mov ecx, 4
|
||
|
|
@@:
|
||
|
|
push ecx
|
||
|
|
stdcall aes256_ctr_crypt, ebx, esi, edi
|
||
|
|
pop ecx
|
||
|
|
add esi, 16
|
||
|
|
add edi, 16
|
||
|
|
loop @r
|
||
|
|
|
||
|
|
DEBUGF 1,'===========================================\n'
|
||
|
|
DEBUGF 1,'AES256_CBC_ENCRYPT\n'
|
||
|
|
DEBUGF 1,'\n'
|
||
|
|
DEBUGF 1,'key : '
|
||
|
|
stdcall dump_128bit_hex, key
|
||
|
|
DEBUGF 1,'\n'
|
||
|
|
DEBUGF 1,' '
|
||
|
|
stdcall dump_128bit_hex, key+16
|
||
|
|
DEBUGF 1,'\n'
|
||
|
|
DEBUGF 1,'\n'
|
||
|
|
DEBUGF 1,'IV : '
|
||
|
|
stdcall dump_128bit_hex, iv
|
||
|
|
DEBUGF 1,'\n'
|
||
|
|
DEBUGF 1,'\n'
|
||
|
|
|
||
|
|
stdcall aes256_cbc_init, iv
|
||
|
|
; returns context, save it to ebx
|
||
|
|
mov ebx, eax
|
||
|
|
stdcall aes256_set_encrypt_key, ebx, key
|
||
|
|
|
||
|
|
mov esi, plain
|
||
|
|
mov edi, cipher
|
||
|
|
mov ecx, 4
|
||
|
|
@@:
|
||
|
|
push ecx
|
||
|
|
stdcall aes256_cbc_encrypt, ebx, esi, edi
|
||
|
|
pop ecx
|
||
|
|
add esi, 16
|
||
|
|
add edi, 16
|
||
|
|
loop @r
|
||
|
|
|
||
|
|
DEBUGF 1,'===========================================\n'
|
||
|
|
DEBUGF 1,'AES256_CBC_DECRYPT\n'
|
||
|
|
DEBUGF 1,'\n'
|
||
|
|
DEBUGF 1,'key : '
|
||
|
|
stdcall dump_128bit_hex, key
|
||
|
|
DEBUGF 1,'\n'
|
||
|
|
DEBUGF 1,' '
|
||
|
|
stdcall dump_128bit_hex, key+16
|
||
|
|
DEBUGF 1,'\n'
|
||
|
|
DEBUGF 1,'\n'
|
||
|
|
DEBUGF 1,'IV : '
|
||
|
|
stdcall dump_128bit_hex, iv
|
||
|
|
DEBUGF 1,'\n'
|
||
|
|
DEBUGF 1,'\n'
|
||
|
|
|
||
|
|
stdcall aes256_cbc_init, iv
|
||
|
|
; returns context, save it to ebx
|
||
|
|
mov ebx, eax
|
||
|
|
stdcall aes256_set_decrypt_key, ebx, key
|
||
|
|
|
||
|
|
mov esi, cipher
|
||
|
|
mov edi, plain
|
||
|
|
mov ecx, 4
|
||
|
|
@@:
|
||
|
|
push ecx
|
||
|
|
stdcall aes256_cbc_decrypt, ebx, esi, edi
|
||
|
|
pop ecx
|
||
|
|
add esi, 16
|
||
|
|
add edi, 16
|
||
|
|
loop @r
|
||
|
|
|
||
|
|
quit:
|
||
|
|
DEBUGF 1,'===========================================\n'
|
||
|
|
mcall -1
|
||
|
|
|
||
|
|
|
||
|
|
key db 0x60,0x3d,0xeb,0x10,0x15,0xca,0x71,0xbe,0x2b,0x73,0xae,0xf0,\
|
||
|
|
0x85,0x7d,0x77,0x81,0x1f,0x35,0x2c,0x07,0x3b,0x61,0x08,0xd7,\
|
||
|
|
0x2d,0x98,0x10,0xa3,0x09,0x14,0xdf,0xf4
|
||
|
|
|
||
|
|
iv db 0x00,0x01,0x02,0x03,0x04,0x05,0x06,0x07,0x08,0x09,0x0a,0x0b,\
|
||
|
|
0x0c,0x0d,0x0e,0x0f
|
||
|
|
|
||
|
|
counter db 0xf0,0xf1,0xf2,0xf3,0xf4,0xf5,0xf6,0xf7,0xf8,0xf9,0xfa,0xfb,\
|
||
|
|
0xfc,0xfd,0xfe,0xff
|
||
|
|
|
||
|
|
plain db 0x6b,0xc1,0xbe,0xe2,0x2e,0x40,0x9f,0x96,0xe9,0x3d,0x7e,0x11,\
|
||
|
|
0x73,0x93,0x17,0x2a,0xae,0x2d,0x8a,0x57,0x1e,0x03,0xac,0x9c,\
|
||
|
|
0x9e,0xb7,0x6f,0xac,0x45,0xaf,0x8e,0x51,0x30,0xc8,0x1c,0x46,\
|
||
|
|
0xa3,0x5c,0xe4,0x11,0xe5,0xfb,0xc1,0x19,0x1a,0x0a,0x52,0xef,\
|
||
|
|
0xf6,0x9f,0x24,0x45,0xdf,0x4f,0x9b,0x17,0xad,0x2b,0x41,0x7b,\
|
||
|
|
0xe6,0x6c,0x37,0x10
|
||
|
|
|
||
|
|
cipher rd 16
|
||
|
|
|
||
|
|
; CTR-AES256.Encrypt
|
||
|
|
;
|
||
|
|
; Key 603deb1015ca71be2b73aef0857d7781
|
||
|
|
; 1f352c073b6108d72d9810a30914dff4
|
||
|
|
; Init. Counter f0f1f2f3f4f5f6f7f8f9fafbfcfdfeff
|
||
|
|
;
|
||
|
|
;
|
||
|
|
; Block #1
|
||
|
|
;
|
||
|
|
; Input Block f0f1f2f3f4f5f6f7f8f9fafbfcfdfeff
|
||
|
|
; Output Block 0bdf7df1591716335e9a8b15c860c502
|
||
|
|
; Plaintext 6bc1bee22e409f96e93d7e117393172a
|
||
|
|
; Ciphertext 601ec313775789a5b7a7f504bbf3d228
|
||
|
|
;
|
||
|
|
;
|
||
|
|
; Block #2
|
||
|
|
;
|
||
|
|
; Input Block f0f1f2f3f4f5f6f7f8f9fafbfcfdff00
|
||
|
|
; Output Block 5a6e699d536119065433863c8f657b94
|
||
|
|
; Plaintext ae2d8a571e03ac9c9eb76fac45af8e51
|
||
|
|
; Ciphertext f443e3ca4d62b59aca84e990cacaf5c5
|
||
|
|
;
|
||
|
|
;
|
||
|
|
; Block #3
|
||
|
|
;
|
||
|
|
; Input Block f0f1f2f3f4f5f6f7f8f9fafbfcfdff01
|
||
|
|
; Output Block 1bc12c9c01610d5d0d8bd6a3378eca62
|
||
|
|
; Plaintext 30c81c46a35ce411e5fbc1191a0a52ef
|
||
|
|
; Ciphertext 2b0930daa23de94ce87017ba2d84988d
|
||
|
|
;
|
||
|
|
;
|
||
|
|
; Block #4
|
||
|
|
;
|
||
|
|
; Input Block f0f1f2f3f4f5f6f7f8f9fafbfcfdff02
|
||
|
|
; Output Block 2956e1c8693536b1bee99c73a31576b6
|
||
|
|
; Plaintext f69f2445df4f9b17ad2b417be66c3710
|
||
|
|
; Ciphertext dfc9c58db67aada613c2dd08457941a6
|
||
|
|
|
||
|
|
|
||
|
|
; CBC-AES256.Encrypt
|
||
|
|
; Key 603deb1015ca71be2b73aef0857d7781
|
||
|
|
; 1f352c073b6108d72d9810a30914dff4
|
||
|
|
; IV 000102030405060708090a0b0c0d0e0f
|
||
|
|
;
|
||
|
|
; Block #1
|
||
|
|
;
|
||
|
|
; Plaintext 6bc1bee22e409f96e93d7e117393172a
|
||
|
|
; Input Block 6bc0bce12a459991e134741a7f9e1925
|
||
|
|
; Output Block f58c4c04d6e5f1ba779eabfb5f7bfbd6
|
||
|
|
; Ciphertext f58c4c04d6e5f1ba779eabfb5f7bfbd6
|
||
|
|
;
|
||
|
|
; Block #2
|
||
|
|
;
|
||
|
|
; Plaintext ae2d8a571e03ac9c9eb76fac45af8e51
|
||
|
|
; Input Block 5ba1c653c8e65d26e929c4571ad47587
|
||
|
|
; Output Block 9cfc4e967edb808d679f777bc6702c7d
|
||
|
|
; Ciphertext 9cfc4e967edb808d679f777bc6702c7d
|
||
|
|
;
|
||
|
|
; Block #3
|
||
|
|
;
|
||
|
|
; Plaintext 30c81c46a35ce411e5fbc1191a0a52ef
|
||
|
|
; Input Block ac3452d0dd87649c8264b662dc7a7e92
|
||
|
|
; Output Block 39f23369a9d9bacfa530e26304231461
|
||
|
|
; Ciphertext 39f23369a9d9bacfa530e26304231461
|
||
|
|
;
|
||
|
|
; Block #4
|
||
|
|
;
|
||
|
|
; Plaintext f69f2445df4f9b17ad2b417be66c3710
|
||
|
|
; Input Block cf6d172c769621d8081ba318e24f2371
|
||
|
|
; Output Block b2eb05e2c39be9fcda6c19078c6a9d1b
|
||
|
|
; Ciphertext b2eb05e2c39be9fcda6c19078c6a9d1b
|
||
|
|
|
||
|
|
|
||
|
|
; CBC-AES256.Decrypt
|
||
|
|
; Key 603deb1015ca71be2b73aef0857d7781
|
||
|
|
; 1f352c073b6108d72d9810a30914dff4
|
||
|
|
; IV 000102030405060708090a0b0c0d0e0f
|
||
|
|
;
|
||
|
|
; Block #1
|
||
|
|
;
|
||
|
|
; Ciphertext f58c4c04d6e5f1ba779eabfb5f7bfbd6
|
||
|
|
; Input Block f58c4c04d6e5f1ba779eabfb5f7bfbd6
|
||
|
|
; Output Block 6bc0bce12a459991e134741a7f9e1925
|
||
|
|
; Plaintext 6bc1bee22e409f96e93d7e117393172a
|
||
|
|
;
|
||
|
|
; Block #2
|
||
|
|
;
|
||
|
|
; Ciphertext 9cfc4e967edb808d679f777bc6702c7d
|
||
|
|
; Input Block 9cfc4e967edb808d679f777bc6702c7d
|
||
|
|
; Output Block 5ba1c653c8e65d26e929c4571ad47587
|
||
|
|
; Plaintext ae2d8a571e03ac9c9eb76fac45af8e51
|
||
|
|
;
|
||
|
|
; Block #3
|
||
|
|
;
|
||
|
|
; Ciphertext 39f23369a9d9bacfa530e26304231461
|
||
|
|
; Input Block 39f23369a9d9bacfa530e26304231461
|
||
|
|
; Output Block ac3452d0dd87649c8264b662dc7a7e92
|
||
|
|
; Plaintext 30c81c46a35ce411e5fbc1191a0a52ef
|
||
|
|
;
|
||
|
|
; Block #4
|
||
|
|
;
|
||
|
|
; Ciphertext b2eb05e2c39be9fcda6c19078c6a9d1b
|
||
|
|
; Input Block b2eb05e2c39be9fcda6c19078c6a9d1b
|
||
|
|
; Output Block cf6d172c769621d8081ba318e24f2371
|
||
|
|
; Plaintext f69f2445df4f9b17ad2b417be66c3710
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
include_debug_strings
|
||
|
|
|
||
|
|
IncludeIGlobals
|
||
|
|
|
||
|
|
i_end:
|
||
|
|
|
||
|
|
IncludeUGlobals
|
||
|
|
|
||
|
|
rb 0x1000 ;stack
|
||
|
|
e_end:
|
||
|
|
|