1 /* SPDX-License-Identifier: BSD-3-Clause 2 * Copyright(c) 2021 Marvell 3 */ 4 5 #ifndef TEST_CRYPTODEV_SECURITY_IPSEC_TEST_VECTORS_H_ 6 #define TEST_CRYPTODEV_SECURITY_IPSEC_TEST_VECTORS_H_ 7 8 #include <rte_crypto.h> 9 #include <rte_security.h> 10 11 #include "test_cryptodev_security_ipsec.h" 12 13 /* 14 * Known vectors 15 * 16 * AES-GCM vectors are based on : 17 * https://datatracker.ietf.org/doc/html/draft-mcgrew-gcm-test-01 18 * 19 * Vectors are updated to have corrected L4 checksum and sequence number 1. 20 */ 21 22 struct ipsec_test_data pkt_aes_128_gcm = { 23 .key = { 24 .data = { 25 0xfe, 0xff, 0xe9, 0x92, 0x86, 0x65, 0x73, 0x1c, 26 0x6d, 0x6a, 0x8f, 0x94, 0x67, 0x30, 0x83, 0x08 27 }, 28 }, 29 .input_text = { 30 .data = { 31 /* IP */ 32 0x45, 0x00, 0x00, 0x3e, 0x69, 0x8f, 0x00, 0x00, 33 0x80, 0x11, 0x4d, 0xcc, 0xc0, 0xa8, 0x01, 0x02, 34 0xc0, 0xa8, 0x01, 0x01, 35 36 /* UDP */ 37 0x0a, 0x98, 0x00, 0x35, 0x00, 0x2a, 0x23, 0x43, 38 0xb2, 0xd0, 0x01, 0x00, 0x00, 0x01, 0x00, 0x00, 39 0x00, 0x00, 0x00, 0x00, 0x03, 0x73, 0x69, 0x70, 40 0x09, 0x63, 0x79, 0x62, 0x65, 0x72, 0x63, 0x69, 41 0x74, 0x79, 0x02, 0x64, 0x6b, 0x00, 0x00, 0x01, 42 0x00, 0x01, 43 }, 44 .len = 62, 45 }, 46 .output_text = { 47 .data = { 48 /* IP - outer header */ 49 0x45, 0x00, 0x00, 0x74, 0x69, 0x8f, 0x00, 0x00, 50 0x80, 0x32, 0x4d, 0x75, 0xc0, 0xa8, 0x01, 0x02, 51 0xc0, 0xa8, 0x01, 0x01, 52 53 /* ESP */ 54 0x00, 0x00, 0xa5, 0xf8, 0x00, 0x00, 0x00, 0x01, 55 56 /* IV */ 57 0xfa, 0xce, 0xdb, 0xad, 0xde, 0xca, 0xf8, 0x88, 58 59 /* Data */ 60 0xde, 0xb2, 0x2c, 0xd9, 0xb0, 0x7c, 0x72, 0xc1, 61 0x6e, 0x3a, 0x65, 0xbe, 0xeb, 0x8d, 0xf3, 0x04, 62 0xa5, 0xa5, 0x89, 0x7d, 0x33, 0xae, 0x53, 0x0f, 63 0x1b, 0xa7, 0x6d, 0x5d, 0x11, 0x4d, 0x2a, 0x5c, 64 0x3d, 0xe8, 0x18, 0x27, 0xc1, 0x0e, 0x9a, 0x4f, 65 0x51, 0x33, 0x0d, 0x0e, 0xec, 0x41, 0x66, 0x42, 66 0xcf, 0xbb, 0x85, 0xa5, 0xb4, 0x7e, 0x48, 0xa4, 67 0xec, 0x3b, 0x9b, 0xa9, 0x5d, 0x91, 0x8b, 0xd4, 68 0x29, 0xc7, 0x37, 0x57, 0x9f, 0xf1, 0x9e, 0x58, 69 0xcf, 0xfc, 0x60, 0x7a, 0x3b, 0xce, 0x89, 0x94, 70 71 }, 72 .len = 116, 73 }, 74 .salt = { 75 .data = { 76 0xca, 0xfe, 0xba, 0xbe 77 }, 78 .len = 4, 79 }, 80 81 .iv = { 82 .data = { 83 0xfa, 0xce, 0xdb, 0xad, 0xde, 0xca, 0xf8, 0x88 84 }, 85 }, 86 87 .ipsec_xform = { 88 .spi = 0xa5f8, 89 .options.esn = 0, 90 .options.udp_encap = 0, 91 .options.copy_dscp = 0, 92 .options.copy_flabel = 0, 93 .options.copy_df = 0, 94 .options.dec_ttl = 0, 95 .options.ecn = 0, 96 .options.stats = 0, 97 .options.tunnel_hdr_verify = 0, 98 .options.ip_csum_enable = 0, 99 .options.l4_csum_enable = 0, 100 .direction = RTE_SECURITY_IPSEC_SA_DIR_EGRESS, 101 .proto = RTE_SECURITY_IPSEC_SA_PROTO_ESP, 102 .mode = RTE_SECURITY_IPSEC_SA_MODE_TUNNEL, 103 .tunnel.type = RTE_SECURITY_IPSEC_TUNNEL_IPV4, 104 .replay_win_sz = 0, 105 }, 106 107 .aead = true, 108 109 .xform = { 110 .aead = { 111 .next = NULL, 112 .type = RTE_CRYPTO_SYM_XFORM_AEAD, 113 .aead = { 114 .op = RTE_CRYPTO_AEAD_OP_ENCRYPT, 115 .algo = RTE_CRYPTO_AEAD_AES_GCM, 116 .key.length = 16, 117 .iv.length = 12, 118 .iv.offset = IV_OFFSET, 119 .digest_length = 16, 120 .aad_length = 12, 121 }, 122 }, 123 }, 124 }; 125 126 struct ipsec_test_data pkt_aes_192_gcm = { 127 .key = { 128 .data = { 129 0xfe, 0xff, 0xe9, 0x92, 0x86, 0x65, 0x73, 0x1c, 130 0x6d, 0x6a, 0x8f, 0x94, 0x67, 0x30, 0x83, 0x08, 131 0xfe, 0xff, 0xe9, 0x92, 0x86, 0x65, 0x73, 0x1c 132 }, 133 }, 134 .input_text = { 135 .data = { 136 /* IP */ 137 0x45, 0x00, 0x00, 0x28, 0xa4, 0xad, 0x40, 0x00, 138 0x40, 0x06, 0x78, 0x80, 0x0a, 0x01, 0x03, 0x8f, 139 0x0a, 0x01, 0x06, 0x12, 140 141 /* TCP */ 142 0x80, 0x23, 0x06, 0xb8, 0xcb, 0x71, 0x26, 0x02, 143 0xdd, 0x6b, 0xb0, 0x3e, 0x50, 0x10, 0x16, 0xd0, 144 0x75, 0x67, 0x00, 0x01 145 }, 146 .len = 40, 147 }, 148 .output_text = { 149 .data = { 150 /* IP - outer header */ 151 0x45, 0x00, 0x00, 0x60, 0x69, 0x8f, 0x00, 0x00, 152 0x80, 0x32, 0x4d, 0x89, 0xc0, 0xa8, 0x01, 0x02, 153 0xc0, 0xa8, 0x01, 0x01, 154 155 /* ESP */ 156 0x00, 0x00, 0xa5, 0xf8, 0x00, 0x00, 0x00, 0x01, 157 158 /* IV */ 159 0xfa, 0xce, 0xdb, 0xad, 0xde, 0xca, 0xf8, 0x88, 160 161 /* Data */ 162 0xa5, 0xb1, 0xf8, 0x06, 0x60, 0x29, 0xae, 0xa4, 163 0x0e, 0x59, 0x8b, 0x81, 0x22, 0xde, 0x02, 0x42, 164 0x09, 0x38, 0xb3, 0xab, 0x33, 0xf8, 0x28, 0xe6, 165 0x87, 0xb8, 0x85, 0x8b, 0x5b, 0xfb, 0xdb, 0xd0, 166 0x31, 0x5b, 0x27, 0x45, 0x21, 0x4b, 0xcc, 0x77, 167 0x82, 0xac, 0x91, 0x38, 0xf2, 0xbb, 0xbe, 0xe4, 168 0xcf, 0x03, 0x36, 0x89, 0xdd, 0x40, 0xd3, 0x6e, 169 0x54, 0x05, 0x22, 0x22, 170 }, 171 .len = 96, 172 }, 173 .salt = { 174 .data = { 175 0xca, 0xfe, 0xba, 0xbe 176 }, 177 .len = 4, 178 }, 179 180 .iv = { 181 .data = { 182 0xfa, 0xce, 0xdb, 0xad, 0xde, 0xca, 0xf8, 0x88 183 }, 184 }, 185 186 .ipsec_xform = { 187 .spi = 0xa5f8, 188 .options.esn = 0, 189 .options.udp_encap = 0, 190 .options.copy_dscp = 0, 191 .options.copy_flabel = 0, 192 .options.copy_df = 0, 193 .options.dec_ttl = 0, 194 .options.ecn = 0, 195 .options.stats = 0, 196 .options.tunnel_hdr_verify = 0, 197 .options.ip_csum_enable = 0, 198 .options.l4_csum_enable = 0, 199 .direction = RTE_SECURITY_IPSEC_SA_DIR_EGRESS, 200 .proto = RTE_SECURITY_IPSEC_SA_PROTO_ESP, 201 .mode = RTE_SECURITY_IPSEC_SA_MODE_TUNNEL, 202 .tunnel.type = RTE_SECURITY_IPSEC_TUNNEL_IPV4, 203 .replay_win_sz = 0, 204 }, 205 206 .aead = true, 207 208 .xform = { 209 .aead = { 210 .next = NULL, 211 .type = RTE_CRYPTO_SYM_XFORM_AEAD, 212 .aead = { 213 .op = RTE_CRYPTO_AEAD_OP_ENCRYPT, 214 .algo = RTE_CRYPTO_AEAD_AES_GCM, 215 .key.length = 24, 216 .iv.length = 12, 217 .iv.offset = IV_OFFSET, 218 .digest_length = 16, 219 .aad_length = 12, 220 }, 221 }, 222 }, 223 }; 224 225 struct ipsec_test_data pkt_aes_256_gcm = { 226 .key = { 227 .data = { 228 0xab, 0xbc, 0xcd, 0xde, 0xf0, 0x01, 0x12, 0x23, 229 0x34, 0x45, 0x56, 0x67, 0x78, 0x89, 0x9a, 0xab, 230 0xab, 0xbc, 0xcd, 0xde, 0xf0, 0x01, 0x12, 0x23, 231 0x34, 0x45, 0x56, 0x67, 0x78, 0x89, 0x9a, 0xab, 232 }, 233 }, 234 .input_text = { 235 .data = { 236 /* IP */ 237 0x45, 0x00, 0x00, 0x30, 0x69, 0xa6, 0x40, 0x00, 238 0x80, 0x06, 0x26, 0x90, 0xc0, 0xa8, 0x01, 0x02, 239 0x93, 0x89, 0x15, 0x5e, 240 241 /* TCP */ 242 0x0a, 0x9e, 0x00, 0x8b, 0x2d, 0xc5, 0x7e, 0xe0, 243 0x00, 0x00, 0x00, 0x00, 0x70, 0x02, 0x40, 0x00, 244 0x20, 0xbf, 0x00, 0x00, 0x02, 0x04, 0x05, 0xb4, 245 0x01, 0x01, 0x04, 0x02, 246 }, 247 .len = 48, 248 }, 249 .output_text = { 250 .data = { 251 /* IP - outer header */ 252 0x45, 0x00, 0x00, 0x68, 0x69, 0x8f, 0x00, 0x00, 253 0x80, 0x32, 0x4d, 0x81, 0xc0, 0xa8, 0x01, 0x02, 254 0xc0, 0xa8, 0x01, 0x01, 255 256 /* ESP */ 257 0x4a, 0x2c, 0xbf, 0xe3, 0x00, 0x00, 0x00, 0x01, 258 259 /* IV */ 260 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 261 262 /* Data */ 263 0xff, 0x42, 0x5c, 0x9b, 0x72, 0x45, 0x99, 0xdf, 264 0x7a, 0x3b, 0xcd, 0x51, 0x01, 0x94, 0xe0, 0x0d, 265 0x6a, 0x78, 0x10, 0x7f, 0x1b, 0x0b, 0x1c, 0xbf, 266 0x06, 0xef, 0xae, 0x9d, 0x65, 0xa5, 0xd7, 0x63, 267 0x74, 0x8a, 0x63, 0x79, 0x85, 0x77, 0x1d, 0x34, 268 0x7f, 0x05, 0x45, 0x65, 0x9f, 0x14, 0xe9, 0x9d, 269 0xef, 0x84, 0x2d, 0x8b, 0x00, 0x14, 0x4a, 0x1f, 270 0xec, 0x6a, 0xdf, 0x0c, 0x9a, 0x92, 0x7f, 0xee, 271 0xa6, 0xc5, 0x11, 0x60, 272 }, 273 .len = 104, 274 }, 275 .salt = { 276 .data = { 277 0x11, 0x22, 0x33, 0x44 278 }, 279 .len = 4, 280 }, 281 282 .iv = { 283 .data = { 284 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08 285 }, 286 }, 287 288 .ipsec_xform = { 289 .spi = 0x4a2cbfe3, 290 .options.esn = 0, 291 .options.udp_encap = 0, 292 .options.copy_dscp = 0, 293 .options.copy_flabel = 0, 294 .options.copy_df = 0, 295 .options.dec_ttl = 0, 296 .options.ecn = 0, 297 .options.stats = 0, 298 .options.tunnel_hdr_verify = 0, 299 .options.ip_csum_enable = 0, 300 .options.l4_csum_enable = 0, 301 .direction = RTE_SECURITY_IPSEC_SA_DIR_EGRESS, 302 .proto = RTE_SECURITY_IPSEC_SA_PROTO_ESP, 303 .mode = RTE_SECURITY_IPSEC_SA_MODE_TUNNEL, 304 .tunnel.type = RTE_SECURITY_IPSEC_TUNNEL_IPV4, 305 .replay_win_sz = 0, 306 }, 307 308 .aead = true, 309 310 .xform = { 311 .aead = { 312 .next = NULL, 313 .type = RTE_CRYPTO_SYM_XFORM_AEAD, 314 .aead = { 315 .op = RTE_CRYPTO_AEAD_OP_ENCRYPT, 316 .algo = RTE_CRYPTO_AEAD_AES_GCM, 317 .key.length = 32, 318 .iv.length = 12, 319 .iv.offset = IV_OFFSET, 320 .digest_length = 16, 321 .aad_length = 12, 322 }, 323 }, 324 }, 325 }; 326 327 #endif /* TEST_CRYPTODEV_SECURITY_IPSEC_TEST_VECTORS_H_ */ 328