From 65eac03ad9ee13b9d73972035ab71ed74c5bd5b7 Mon Sep 17 00:00:00 2001 From: Abtin Keshavarzian Date: Wed, 23 Dec 2020 14:56:33 -0800 Subject: [PATCH] [crypto] add new flavors of 'Update()' for SHA-256 and HMAC computation (#6002) This commit updates `Sha256` and `HmacSha256` classes adding new flavors of `Update()` method which inputs bytes from a given buffer, or from an object, or read from a `Message` for hash calculation. This commit also updates unit test to add more test-cases (from RFC 4231) for HMAC and adds new set of test-cases for SHA-256. The test also covers calculating hash over data read directly from a `Message`. --- src/core/common/message.hpp | 9 + src/core/crypto/hkdf_sha256.cpp | 4 +- src/core/crypto/hmac_sha256.cpp | 19 ++- src/core/crypto/hmac_sha256.hpp | 35 +++- src/core/crypto/sha256.cpp | 19 ++- src/core/crypto/sha256.hpp | 34 +++- src/core/meshcop/meshcop.cpp | 2 +- src/core/thread/key_manager.cpp | 4 +- src/core/utils/slaac_address.cpp | 6 +- tests/unit/test_ecdsa.cpp | 6 +- tests/unit/test_hmac_sha256.cpp | 272 +++++++++++++++++++++++++++---- 11 files changed, 355 insertions(+), 55 deletions(-) diff --git a/src/core/common/message.hpp b/src/core/common/message.hpp index 77a4ffa8e..ebb8919d0 100644 --- a/src/core/common/message.hpp +++ b/src/core/common/message.hpp @@ -54,6 +54,13 @@ namespace ot { +namespace Crypto { + +class Sha256; +class HmacSha256; + +} // namespace Crypto + /** * @addtogroup core-message * @@ -294,6 +301,8 @@ protected: class Message : public Buffer { friend class Checksum; + friend class Crypto::HmacSha256; + friend class Crypto::Sha256; friend class MessagePool; friend class MessageQueue; friend class PriorityQueue; diff --git a/src/core/crypto/hkdf_sha256.cpp b/src/core/crypto/hkdf_sha256.cpp index fd10befdb..dad7b0faf 100644 --- a/src/core/crypto/hkdf_sha256.cpp +++ b/src/core/crypto/hkdf_sha256.cpp @@ -75,13 +75,13 @@ void HkdfSha256::Expand(const uint8_t *aInfo, uint16_t aInfoLength, uint8_t *aOu if (iter != 0) { - hmac.Update(hash.GetBytes(), sizeof(hash)); + hmac.Update(hash); } hmac.Update(aInfo, aInfoLength); iter++; - hmac.Update(&iter, sizeof(iter)); + hmac.Update(iter); hmac.Finish(hash); copyLength = (aOutputKeyLength > sizeof(hash)) ? sizeof(hash) : aOutputKeyLength; diff --git a/src/core/crypto/hmac_sha256.cpp b/src/core/crypto/hmac_sha256.cpp index e88a6c02f..add3e3aca 100644 --- a/src/core/crypto/hmac_sha256.cpp +++ b/src/core/crypto/hmac_sha256.cpp @@ -33,6 +33,8 @@ #include "hmac_sha256.hpp" +#include "common/message.hpp" + namespace ot { namespace Crypto { @@ -54,9 +56,22 @@ void HmacSha256::Start(const uint8_t *aKey, uint16_t aKeyLength) mbedtls_md_hmac_starts(&mContext, aKey, aKeyLength); } -void HmacSha256::Update(const uint8_t *aBuf, uint16_t aBufLength) +void HmacSha256::Update(const void *aBuf, uint16_t aBufLength) { - mbedtls_md_hmac_update(&mContext, aBuf, aBufLength); + mbedtls_md_hmac_update(&mContext, reinterpret_cast(aBuf), aBufLength); +} + +void HmacSha256::Update(const Message &aMessage, uint16_t aOffset, uint16_t aLength) +{ + Message::Chunk chunk; + + aMessage.GetFirstChunk(aOffset, aLength, chunk); + + while (chunk.GetLength() > 0) + { + Update(chunk.GetData(), chunk.GetLength()); + aMessage.GetNextChunk(aLength, chunk); + } } void HmacSha256::Finish(Hash &aHash) diff --git a/src/core/crypto/hmac_sha256.hpp b/src/core/crypto/hmac_sha256.hpp index 2d0d8d9d1..5fcd2a04f 100644 --- a/src/core/crypto/hmac_sha256.hpp +++ b/src/core/crypto/hmac_sha256.hpp @@ -43,6 +43,9 @@ #include "crypto/sha256.hpp" namespace ot { + +class Message; + namespace Crypto { /** @@ -66,19 +69,19 @@ public: typedef Sha256::Hash Hash; /** - * Constructor for initialization of mbedtls_md_context_t. + * Constructor for `HmacSha256`. * */ HmacSha256(void); /** - * Destructor for freeing of mbedtls_md_context_t. + * Destructor for `HmacSha256`. * */ ~HmacSha256(void); /** - * This method sets the key. + * This method sets the key and starts the HMAC computation. * * @param[in] aKey A pointer to the key. * @param[in] aKeyLength The key length in bytes. @@ -93,7 +96,31 @@ public: * @param[in] aBufLength The length of @p aBuf in bytes. * */ - void Update(const uint8_t *aBuf, uint16_t aBufLength); + void Update(const void *aBuf, uint16_t aBufLength); + + /** + * This method inputs an object (treated as a sequence of bytes) into the HMAC computation. + * + * @tparam ObjectType The object type. + * + * @param[in] aObject A reference to the object. + * + */ + template void Update(const ObjectType &aObject) + { + static_assert(!TypeTraits::IsPointer::kValue, "ObjectType must not be a pointer"); + return Update(&aObject, sizeof(ObjectType)); + } + + /** + * This method inputs the bytes read from a given message into the HMAC computation. + * + * @param[in] aMessage The message to read the data from. + * @param[in] aOffset The offset into @p aMessage to start to read. + * @param[in] aLength The number of bytes to read. + * + */ + void Update(const Message &aMessage, uint16_t aOffset, uint16_t aLength); /** * This method finalizes the hash computation. diff --git a/src/core/crypto/sha256.cpp b/src/core/crypto/sha256.cpp index 340fe5548..9721d29d5 100644 --- a/src/core/crypto/sha256.cpp +++ b/src/core/crypto/sha256.cpp @@ -33,6 +33,8 @@ #include "sha256.hpp" +#include "common/message.hpp" + namespace ot { namespace Crypto { @@ -51,9 +53,22 @@ void Sha256::Start(void) mbedtls_sha256_starts_ret(&mContext, 0); } -void Sha256::Update(const uint8_t *aBuf, uint16_t aBufLength) +void Sha256::Update(const void *aBuf, uint16_t aBufLength) { - mbedtls_sha256_update_ret(&mContext, aBuf, aBufLength); + mbedtls_sha256_update_ret(&mContext, reinterpret_cast(aBuf), aBufLength); +} + +void Sha256::Update(const Message &aMessage, uint16_t aOffset, uint16_t aLength) +{ + Message::Chunk chunk; + + aMessage.GetFirstChunk(aOffset, aLength, chunk); + + while (chunk.GetLength() > 0) + { + Update(chunk.GetData(), chunk.GetLength()); + aMessage.GetNextChunk(aLength, chunk); + } } void Sha256::Finish(Hash &aHash) diff --git a/src/core/crypto/sha256.hpp b/src/core/crypto/sha256.hpp index 326f43553..627a5f53f 100644 --- a/src/core/crypto/sha256.hpp +++ b/src/core/crypto/sha256.hpp @@ -44,8 +44,12 @@ #include "common/clearable.hpp" #include "common/equatable.hpp" +#include "common/type_traits.hpp" namespace ot { + +class Message; + namespace Crypto { /** @@ -84,13 +88,13 @@ public: }; /** - * Constructor for initializing mbedtls_sha256_context. + * Constructor for `Sha256` object. * */ Sha256(void); /** - * Destructor for freeing mbedtls_sha256_context. + * Destructor for `Sha256` object. * */ ~Sha256(void); @@ -108,7 +112,31 @@ public: * @param[in] aBufLength The length of @p aBuf in bytes. * */ - void Update(const uint8_t *aBuf, uint16_t aBufLength); + void Update(const void *aBuf, uint16_t aBufLength); + + /** + * This method inputs an object (treated as a sequence of bytes) into the SHA-256 computation. + * + * @tparam ObjectType The object type. + * + * @param[in] aObject A reference to the object. + * + */ + template void Update(const ObjectType &aObject) + { + static_assert(!TypeTraits::IsPointer::kValue, "ObjectType must not be a pointer"); + return Update(&aObject, sizeof(ObjectType)); + } + + /** + * This method inputs the bytes read from a given message into the SHA-256 computation. + * + * @param[in] aMessage The message to read the data from. + * @param[in] aOffset The offset into @p aMessage to start to read. + * @param[in] aLength The number of bytes to read. + * + */ + void Update(const Message &aMessage, uint16_t aOffset, uint16_t aLength); /** * This method finalizes the hash computation. diff --git a/src/core/meshcop/meshcop.cpp b/src/core/meshcop/meshcop.cpp index 24e4c1f71..082b6ed04 100644 --- a/src/core/meshcop/meshcop.cpp +++ b/src/core/meshcop/meshcop.cpp @@ -291,7 +291,7 @@ void ComputeJoinerId(const Mac::ExtAddress &aEui64, Mac::ExtAddress &aJoinerId) Crypto::Sha256::Hash hash; sha256.Start(); - sha256.Update(aEui64.m8, sizeof(aEui64)); + sha256.Update(aEui64); sha256.Finish(hash); memcpy(&aJoinerId, hash.GetBytes(), sizeof(aJoinerId)); diff --git a/src/core/thread/key_manager.cpp b/src/core/thread/key_manager.cpp index aa46902a4..fd191d834 100644 --- a/src/core/thread/key_manager.cpp +++ b/src/core/thread/key_manager.cpp @@ -163,8 +163,8 @@ void KeyManager::ComputeKeys(uint32_t aKeySequence, HashKeys &aHashKeys) hmac.Start(mMasterKey.m8, sizeof(mMasterKey.m8)); Encoding::BigEndian::WriteUint32(aKeySequence, keySequenceBytes); - hmac.Update(keySequenceBytes, sizeof(keySequenceBytes)); - hmac.Update(kThreadString, sizeof(kThreadString)); + hmac.Update(keySequenceBytes); + hmac.Update(kThreadString); hmac.Finish(aHashKeys.mHash); } diff --git a/src/core/utils/slaac_address.cpp b/src/core/utils/slaac_address.cpp index 4222c3848..669b36ad9 100644 --- a/src/core/utils/slaac_address.cpp +++ b/src/core/utils/slaac_address.cpp @@ -294,9 +294,9 @@ otError Slaac::GenerateIid(Ip6::NetifUnicastAddress &aAddress, sha256.Update(aNetworkId, aNetworkIdLength); } - sha256.Update(netIface, sizeof(netIface)); - sha256.Update(reinterpret_cast(&dadCounter), sizeof(dadCounter)); - sha256.Update(secretKey.m8, sizeof(IidSecretKey)); + sha256.Update(netIface); + sha256.Update(dadCounter); + sha256.Update(secretKey); sha256.Finish(hash); aAddress.GetAddress().GetIid().SetBytes(hash.GetBytes()); diff --git a/tests/unit/test_ecdsa.cpp b/tests/unit/test_ecdsa.cpp index b52bb041f..a279bc361 100644 --- a/tests/unit/test_ecdsa.cpp +++ b/tests/unit/test_ecdsa.cpp @@ -101,7 +101,7 @@ void TestEcdsaVector(void) printf("\nHash the message ----------------------------------------------------------\n"); sha256.Start(); - sha256.Update(kMessage, sizeof(kMessage)); + sha256.Update(kMessage); sha256.Finish(hash); DumpBuffer("Hash", hash.GetBytes(), sizeof(hash)); @@ -153,7 +153,7 @@ void TestEdsaKeyGenerationSignAndVerify(void) printf("\nHash the message ----------------------------------------------------------\n"); sha256.Start(); - sha256.Update(reinterpret_cast(kMessage), sizeof(kMessage) - 1); + sha256.Update(kMessage, sizeof(kMessage) - 1); sha256.Finish(hash); DumpBuffer("Hash", hash.GetBytes(), sizeof(hash)); @@ -167,7 +167,7 @@ void TestEdsaKeyGenerationSignAndVerify(void) printf("\nSignature was verified successfully."); sha256.Start(); - sha256.Update(reinterpret_cast(kMessage), sizeof(kMessage)); // include null char + sha256.Update(kMessage, sizeof(kMessage)); // include null char sha256.Finish(hash); VerifyOrQuit(publicKey.Verify(hash, signature) != OT_ERROR_NONE, "PublicKey::Verify() passed for invalid signature"); diff --git a/tests/unit/test_hmac_sha256.cpp b/tests/unit/test_hmac_sha256.cpp index 676f966ef..1623b70c2 100644 --- a/tests/unit/test_hmac_sha256.cpp +++ b/tests/unit/test_hmac_sha256.cpp @@ -29,60 +29,266 @@ #include #include "common/debug.hpp" +#include "common/message.hpp" #include "crypto/hmac_sha256.hpp" +#include "crypto/sha256.hpp" #include "test_platform.h" #include "test_util.h" -void TestHmacSha256(void) +namespace ot { + +void TestSha256(void) { - static const struct + const char kData1[] = "abc"; + + const otCryptoSha256Hash kHash1 = {{ + 0xba, 0x78, 0x16, 0xbf, 0x8f, 0x01, 0xcf, 0xea, 0x41, 0x41, 0x40, 0xde, 0x5d, 0xae, 0x22, 0x23, + 0xb0, 0x03, 0x61, 0xa3, 0x96, 0x17, 0x7a, 0x9c, 0xb4, 0x10, 0xff, 0x61, 0xf2, 0x00, 0x15, 0xad, + }}; + + const char kData2[] = ""; + + const otCryptoSha256Hash kHash2 = {{ + 0xe3, 0xb0, 0xc4, 0x42, 0x98, 0xfc, 0x1c, 0x14, 0x9a, 0xfb, 0xf4, 0xc8, 0x99, 0x6f, 0xb9, 0x24, + 0x27, 0xae, 0x41, 0xe4, 0x64, 0x9b, 0x93, 0x4c, 0xa4, 0x95, 0x99, 0x1b, 0x78, 0x52, 0xb8, 0x55, + }}; + + const char kData3[] = "abcdbcdecdefdefgefghfghighijhijkijkljklmklmnlmnomnopnopq"; + + const otCryptoSha256Hash kHash3 = {{ + 0x24, 0x8d, 0x6a, 0x61, 0xd2, 0x06, 0x38, 0xb8, 0xe5, 0xc0, 0x26, 0x93, 0x0c, 0x3e, 0x60, 0x39, + 0xa3, 0x3c, 0xe4, 0x59, 0x64, 0xff, 0x21, 0x67, 0xf6, 0xec, 0xed, 0xd4, 0x19, 0xdb, 0x06, 0xc1, + }}; + + const char kData4[] = "abcdefghbcdefghicdefghijdefghijkefghijklfghijklmghijklmnhijklmnoijklmnopjklmnopqklmnopqrlmno" + "pqrsmnopqrstnopqrstu"; + + const otCryptoSha256Hash kHash4 = {{ + 0xcf, 0x5b, 0x16, 0xa7, 0x78, 0xaf, 0x83, 0x80, 0x03, 0x6c, 0xe5, 0x9e, 0x7b, 0x04, 0x92, 0x37, + 0x0b, 0x24, 0x9b, 0x11, 0xe8, 0xf0, 0x7a, 0x51, 0xaf, 0xac, 0x45, 0x03, 0x7a, 0xfe, 0xe9, 0xd1, + }}; + + struct TestCase { - const char * key; - const char * data; - otCryptoSha256Hash hash; - } tests[] = { - { - "\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b\x0b", - "Hi There", - {{ - 0xb0, 0x34, 0x4c, 0x61, 0xd8, 0xdb, 0x38, 0x53, 0x5c, 0xa8, 0xaf, 0xce, 0xaf, 0x0b, 0xf1, 0x2b, - 0x88, 0x1d, 0xc2, 0x00, 0xc9, 0x83, 0x3d, 0xa7, 0x26, 0xe9, 0x37, 0x6c, 0x2e, 0x32, 0xcf, 0xf7, - }}, - }, - { - nullptr, - nullptr, - {}, - }, + const char * mData; // (null-terminated string). + otCryptoSha256Hash mHash; }; - otInstance *instance = testInitInstance(); + static const TestCase kTestCases[] = { + {kData1, kHash1}, + {kData2, kHash2}, + {kData3, kHash3}, + {kData4, kHash4}, + }; - // Make sure hmac is destructed before freeing instance. + printf("TestSha256\n"); + + Instance * instance = testInitInstance(); + MessagePool *messagePool; + Message * message; + uint16_t offsets[OT_ARRAY_LENGTH(kTestCases)]; + uint8_t index; + + VerifyOrQuit(instance != nullptr, "Null OpenThread instance"); + + messagePool = &instance->Get(); + VerifyOrQuit((message = messagePool->New(Message::kTypeIp6, 0)) != nullptr, "Message::New failed"); + + for (const TestCase &testCase : kTestCases) { - ot::Crypto::HmacSha256 hmac; - ot::Crypto::HmacSha256::Hash hash; + Crypto::Sha256 sha256; + Crypto::Sha256::Hash hash; - VerifyOrQuit(instance != nullptr, "Null OpenThread instance"); + sha256.Start(); + sha256.Update(testCase.mData, static_cast(strlen(testCase.mData))); + sha256.Finish(hash); - for (int i = 0; tests[i].key != nullptr; i++) - { - hmac.Start(reinterpret_cast(tests[i].key), static_cast(strlen(tests[i].key))); - hmac.Update(reinterpret_cast(tests[i].data), static_cast(strlen(tests[i].data))); - hmac.Finish(hash); + VerifyOrQuit(hash == static_cast(testCase.mHash), "HMAC-SHA-256 failed"); + } - VerifyOrQuit(hash == static_cast(tests[i].hash), - "HMAC-SHA-256 failed"); - } + // Append all test case `mData` in the message. + + index = 0; + + for (const TestCase &testCase : kTestCases) + { + SuccessOrQuit(message->Append("Hello"), "Message::Append() failed"); + offsets[index++] = message->GetLength(); + SuccessOrQuit(message->AppendBytes(testCase.mData, static_cast(strlen(testCase.mData))), + "Message::AppendBytes() failed"); + SuccessOrQuit(message->Append("There!"), "Message::Append() failed"); + } + + index = 0; + + for (const TestCase &testCase : kTestCases) + { + Crypto::Sha256 sha256; + Crypto::Sha256::Hash hash; + + sha256.Start(); + sha256.Update(*message, offsets[index++], static_cast(strlen(testCase.mData))); + sha256.Finish(hash); + + VerifyOrQuit(hash == static_cast(testCase.mHash), "HMAC-SHA-256 failed"); } testFreeInstance(instance); } +void TestHmacSha256(void) +{ + struct TestCase + { + const void * mKey; + uint16_t mKeyLength; + const void * mData; + uint16_t mDataLength; + otCryptoSha256Hash mHash; + }; + + // Test-cases from RFC 4231. + + const uint8_t kKey1[] = { + 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, + 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, 0x0b, + }; + + const char kData1[] = "Hi There"; + + const otCryptoSha256Hash kHash1 = {{ + 0xb0, 0x34, 0x4c, 0x61, 0xd8, 0xdb, 0x38, 0x53, 0x5c, 0xa8, 0xaf, 0xce, 0xaf, 0x0b, 0xf1, 0x2b, + 0x88, 0x1d, 0xc2, 0x00, 0xc9, 0x83, 0x3d, 0xa7, 0x26, 0xe9, 0x37, 0x6c, 0x2e, 0x32, 0xcf, 0xf7, + }}; + + const char kKey2[] = "Jefe"; + const char kData2[] = "what do ya want for nothing?"; + + const otCryptoSha256Hash kHash2 = {{ + 0x5b, 0xdc, 0xc1, 0x46, 0xbf, 0x60, 0x75, 0x4e, 0x6a, 0x04, 0x24, 0x26, 0x08, 0x95, 0x75, 0xc7, + 0x5a, 0x00, 0x3f, 0x08, 0x9d, 0x27, 0x39, 0x83, 0x9d, 0xec, 0x58, 0xb9, 0x64, 0xec, 0x38, 0x43, + }}; + + const uint8_t kKey3[] = {0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, + 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa}; + + const uint8_t kData3[] = { + 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, + 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, + 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, 0xdd, + }; + + const otCryptoSha256Hash kHash3 = {{ + 0x77, 0x3e, 0xa9, 0x1e, 0x36, 0x80, 0x0e, 0x46, 0x85, 0x4d, 0xb8, 0xeb, 0xd0, 0x91, 0x81, 0xa7, + 0x29, 0x59, 0x09, 0x8b, 0x3e, 0xf8, 0xc1, 0x22, 0xd9, 0x63, 0x55, 0x14, 0xce, 0xd5, 0x65, 0xfe, + }}; + + const uint8_t kKey4[] = { + 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, + 0x0e, 0x0f, 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19, + }; + + const uint8_t kData4[] = { + 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, + 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, + 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, 0xcd, + }; + + const otCryptoSha256Hash kHash4 = {{ + 0x82, 0x55, 0x8a, 0x38, 0x9a, 0x44, 0x3c, 0x0e, 0xa4, 0xcc, 0x81, 0x98, 0x99, 0xf2, 0x08, 0x3a, + 0x85, 0xf0, 0xfa, 0xa3, 0xe5, 0x78, 0xf8, 0x07, 0x7a, 0x2e, 0x3f, 0xf4, 0x67, 0x29, 0x66, 0x5b, + }}; + + const uint8_t kKey5[] = { + 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, + 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, + 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, + 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, + 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, + 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, + 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, + 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, 0xaa, + }; + + const char kData5[] = "This is a test using a larger than block-size key and a larger than block-size data. The " + "key needs to be hashed before being used by the HMAC algorithm."; + + const otCryptoSha256Hash kHash5 = {{ + 0x9b, 0x09, 0xff, 0xa7, 0x1b, 0x94, 0x2f, 0xcb, 0x27, 0x63, 0x5f, 0xbc, 0xd5, 0xb0, 0xe9, 0x44, + 0xbf, 0xdc, 0x63, 0x64, 0x4f, 0x07, 0x13, 0x93, 0x8a, 0x7f, 0x51, 0x53, 0x5c, 0x3a, 0x35, 0xe2, + }}; + + static const TestCase kTestCases[] = { + {kKey1, sizeof(kKey1), kData1, sizeof(kData1) - 1, kHash1}, + {kKey2, sizeof(kKey2) - 1, kData2, sizeof(kData2) - 1, kHash2}, + {kKey3, sizeof(kKey3), kData3, sizeof(kData3), kHash3}, + {kKey4, sizeof(kKey4), kData4, sizeof(kData4), kHash4}, + {kKey5, sizeof(kKey5), kData5, sizeof(kData5) - 1, kHash5}, + }; + + Instance * instance = testInitInstance(); + MessagePool *messagePool; + Message * message; + uint16_t offsets[OT_ARRAY_LENGTH(kTestCases)]; + uint8_t index; + + printf("TestHmacSha256\n"); + + VerifyOrQuit(instance != nullptr, "Null OpenThread instance"); + + messagePool = &instance->Get(); + VerifyOrQuit((message = messagePool->New(Message::kTypeIp6, 0)) != nullptr, "Message::New failed"); + + for (const TestCase &testCase : kTestCases) + { + Crypto::HmacSha256 hmac; + Crypto::HmacSha256::Hash hash; + + hmac.Start(reinterpret_cast(testCase.mKey), testCase.mKeyLength); + hmac.Update(testCase.mData, testCase.mDataLength); + hmac.Finish(hash); + + VerifyOrQuit(hash == static_cast(testCase.mHash), "HMAC-SHA-256 failed"); + } + + // Append all test case `mData` in the message. + + index = 0; + + for (const TestCase &testCase : kTestCases) + { + SuccessOrQuit(message->Append("Hello"), "Message::Append() failed"); + offsets[index++] = message->GetLength(); + SuccessOrQuit(message->AppendBytes(testCase.mData, testCase.mDataLength), "Message::AppendBytes() failed"); + SuccessOrQuit(message->Append("There"), "Message::Append() failed"); + } + + index = 0; + + for (const TestCase &testCase : kTestCases) + { + Crypto::HmacSha256 hmac; + Crypto::HmacSha256::Hash hash; + + hmac.Start(reinterpret_cast(testCase.mKey), testCase.mKeyLength); + hmac.Update(*message, offsets[index++], testCase.mDataLength); + hmac.Finish(hash); + + VerifyOrQuit(hash == static_cast(testCase.mHash), "HMAC-SHA-256 failed"); + } + + message->Free(); + + testFreeInstance(instance); +} + +} // namespace ot + int main(void) { - TestHmacSha256(); + ot::TestSha256(); + ot::TestHmacSha256(); printf("All tests passed\n"); return 0; }