cbc-mac supplement test cases and document #281

emmansun · Dec 3, 2024 · 0e154ad · 0e154ad
1 parent e6a8b84
commit 0e154ad
Show file tree

Hide file tree

Showing 5 changed files with 104 additions and 3 deletions.
diff --git a/README-EN.md b/README-EN.md
@@ -25,6 +25,7 @@ ShangMi (SM) cipher suites for Golang, referred to as **GMSM**, is a secure, hig
 
 - **ZUC** - For ZUC implementation, SIMD, AES-NI and CLMUL are used under **amd64**, **arm64** and **ppc64x**, for detail please refer [Efficient Software Implementations of ZUC](https://github.com/emmansun/gmsm/wiki/Efficient-Software-Implementations-of-ZUC)
 
+- **CBCMAC** - CBC-MAC and its variants (EMAC/ANSI retail MAC/MacDES/CMAC/LMAC/TrCBC/CBCR).
 - **CFCA** - some cfca specific implementations.
 
 - **CIPHER** - ECB/CCM/XTS/HCTR/BC/OFBNLF operation modes, XTS mode also supports **GB/T 17964-2021**. Current XTS mode implementation is **NOT** concurrent safe! **BC** and **OFBNLF** are legacy operation modes, **HCTR** is new operation mode in **GB/T 17964-2021**. **BC** operation mode is similar like **CBC**, there is no room for performance optimization in **OFBNLF** operation mode.

diff --git a/README.md b/README.md
@@ -34,6 +34,7 @@ Go语言商用密码软件，简称**GMSM**，一个安全、高性能、易于
 
 - **ZUC** - 祖冲之序列密码算法实现。使用SIMD、AES指令以及无进位乘法指令，分别对**amd64**、**arm64**和**ppc64x**架构做了优化实现, 您也可以参考[ZUC实现及优化](https://github.com/emmansun/gmsm/wiki/Efficient-Software-Implementations-of-ZUC)和相关代码，以获得更多实现细节。ZUC包实现了基于祖冲之序列密码算法的机密性算法、128/256位完整性算法。
 
+- **CBCMAC** - 符合《GB/T 15852.1-2020 采用分组密码的机制》的消息鉴别码。 
 - **CFCA** - CFCA（中金）特定实现，目前实现的是SM2私钥、证书封装处理，对应SADK中的**PKCS12_SM2**。
 
 - **CIPHER** - ECB/CCM/XTS/HCTR/BC/OFBNLF加密模式实现。XTS模式同时支持NIST规范和国标 **GB/T 17964-2021**。当前的XTS模式由于实现了BlockMode，其结构包含一个tweak数组，所以其**不支持并发使用**。**分组链接（BC）模式**和**带非线性函数的输出反馈（OFBNLF）模式**为分组密码算法的工作模式标准**GB/T 17964**的遗留模式，**带泛杂凑函数的计数器（HCTR）模式**是**GB/T 17964-2021**中的新增模式。分组链接（BC）模式和CBC模式类似；而带非线性函数的输出反馈（OFBNLF）模式的话，从软件实现的角度来看，基本没有性能优化的空间。

diff --git a/cbcmac/cbcmac.go b/cbcmac/cbcmac.go
@@ -1,3 +1,7 @@
+// Copyright 2024 Sun Yimin. All rights reserved.
+// Use of this source code is governed by a MIT-style
+// license that can be found in the LICENSE file.
+
 // Package cbcmac implements the Message Authentication Code with the block chipher mechanisms.
 package cbcmac
 
@@ -8,7 +12,8 @@ import (
 	"github.com/emmansun/gmsm/padding"
 )
 
-// Reference: GB/T 15821.1-2020 Security techniques - Message authentication codes - Part 1: Mechanisms using block ciphers
+// Reference: GB/T 15821.1-2020 Security techniques
+// Message authentication codes - Part 1: Mechanisms using block ciphers
 
 // BockCipherMAC is the interface that wraps the basic MAC method.
 type BockCipherMAC interface {
@@ -38,8 +43,6 @@ func NewCBCMAC(b cipher.Block, size int) BockCipherMAC {
 	return &cbcmac{b: b, pad: padding.NewISO9797M2Padding(uint(b.BlockSize())), size: size}
 }
 
-// Size returns the size of the MAC.
-// The returned value is the same as the block size of the block cipher.
 func (c *cbcmac) Size() int {
 	return c.size
 }
@@ -188,6 +191,8 @@ type cmac struct {
 
 // NewCMAC returns a CMAC instance that implements MAC with the given block cipher.
 // GB/T 15821.1-2020 MAC scheme 5
+//
+// Reference: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-38B.pdf
 func NewCMAC(b cipher.Block, size int) BockCipherMAC {
 	if size <= 0 || size > b.BlockSize() {
 		panic("cbcmac: invalid size")
@@ -307,6 +312,8 @@ type trCBCMAC struct {
 
 // NewTRCBCMAC returns a TR-CBC-MAC instance that implements MAC with the given block cipher.
 // GB/T 15821.1-2020 MAC scheme 7
+//
+// Reference: TrCBC: Another look at CBC-MAC.
 func NewTRCBCMAC(b cipher.Block, size int) BockCipherMAC {
 	if size <= 0 || size > b.BlockSize() {
 		panic("cbcmac: invalid size")
@@ -345,6 +352,8 @@ type cbcrMAC struct {
 
 // NewCBCRMAC returns a CBCRMAC instance that implements MAC with the given block cipher.
 // GB/T 15821.1-2020 MAC scheme 8
+//
+// Reference: CBCR: CBC MAC with rotating transformations.
 func NewCBCRMAC(b cipher.Block, size int) BockCipherMAC {
 	if size <= 0 || size > b.BlockSize() {
 		panic("cbcmac: invalid size")

diff --git a/cbcmac/cbcmac_test.go b/cbcmac/cbcmac_test.go
@@ -17,6 +17,11 @@ func TestCBCMAC(t *testing.T) {
 		src []byte
 		tag []byte
 	}{
+		{
+			[]byte{0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
+			nil,
+			[]byte{0x8c, 0x33, 0x8e, 0x5a, 0x27, 0xe3, 0x49, 0xbe, 0xae, 0x39, 0x21, 0x4f, 0xed, 0xa9, 0x70, 0x99},
+		},
 		{
 			[]byte{0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
 			[]byte("This is the test message for mac"),
@@ -50,6 +55,12 @@ func TestEMAC(t *testing.T) {
 		src  []byte
 		tag  []byte
 	}{
+		{
+			[]byte{0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
+			[]byte{0x41, 0x49, 0xd2, 0xad, 0xed, 0x94, 0x56, 0x68, 0x1e, 0xc8, 0xb5, 0x11, 0xd9, 0xe7, 0xee, 0x04},
+			nil,
+			[]byte{0x2c, 0xf6, 0xed, 0xf6, 0x3c, 0xce, 0x14, 0x44, 0x89, 0xea, 0xdd, 0xf0, 0x7b, 0x49, 0x38, 0xdb},
+		},
 		{
 			[]byte{0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
 			[]byte{0x41, 0x49, 0xd2, 0xad, 0xed, 0x94, 0x56, 0x68, 0x1e, 0xc8, 0xb5, 0x11, 0xd9, 0xe7, 0xee, 0x04},
@@ -81,6 +92,12 @@ func TestANSIRetailMAC(t *testing.T) {
 		src  []byte
 		tag  []byte
 	}{
+		{
+			[]byte{0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
+			[]byte{0x41, 0x49, 0xd2, 0xad, 0xed, 0x94, 0x56, 0x68, 0x1e, 0xc8, 0xb5, 0x11, 0xd9, 0xe7, 0xee, 0x04},
+			nil,
+			[]byte{0xb4, 0x73, 0x6b, 0xe9, 0xa1, 0x74, 0xfa, 0xa3, 0x4d, 0xb1, 0xe9, 0xf1, 0xda, 0xcd, 0x5d, 0x62},
+		},
 		{
 			[]byte{0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
 			[]byte{0x41, 0x49, 0xd2, 0xad, 0xed, 0x94, 0x56, 0x68, 0x1e, 0xc8, 0xb5, 0x11, 0xd9, 0xe7, 0xee, 0x04},
@@ -112,6 +129,12 @@ func TestMACDES(t *testing.T) {
 		src  []byte
 		tag  []byte
 	}{
+		{
+			[]byte{0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
+			[]byte{0x41, 0x49, 0xd2, 0xad, 0xed, 0x94, 0x56, 0x68, 0x1e, 0xc8, 0xb5, 0x11, 0xd9, 0xe7, 0xee, 0x04},
+			nil,
+			[]byte{0x0c, 0x56, 0x00, 0x96, 0xb6, 0x09, 0xed, 0x0e, 0xaa, 0x39, 0xaf, 0xd6, 0xe2, 0x66, 0x65, 0x11},
+		},
 		{
 			[]byte{0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
 			[]byte{0x41, 0x49, 0xd2, 0xad, 0xed, 0x94, 0x56, 0x68, 0x1e, 0xc8, 0xb5, 0x11, 0xd9, 0xe7, 0xee, 0x04},
@@ -142,6 +165,11 @@ func TestCMAC(t *testing.T) {
 		src []byte
 		tag []byte
 	}{
+		{
+			[]byte{0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
+			nil,
+			[]byte{0x29, 0xe1, 0x54, 0x32, 0x2e, 0x5c, 0x7b, 0xd8, 0xee, 0x6a, 0x25, 0xba, 0x54, 0x9b, 0x24, 0xbc},
+		},
 		{
 			[]byte{0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
 			[]byte("This is the test message for mac"),
@@ -173,6 +201,12 @@ func TestLMAC(t *testing.T) {
 		src []byte
 		tag []byte
 	}{
+		{
+			[]byte{0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
+			nil,
+			[]byte{0xcd, 0x7e, 0xd2, 0x79, 0x64, 0xe2, 0x57, 0xc0, 0x77, 0xf0, 0x55, 0xf8, 0xee, 0x38, 0x3c, 0x3f},
+		},
+
 		{
 			[]byte{0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
 			[]byte("This is the test message for mac"),
@@ -201,6 +235,11 @@ func TestTRCBCMAC(t *testing.T) {
 		src []byte
 		tag []byte
 	}{
+		{
+			[]byte{0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
+			nil,
+			[]byte{0xae, 0x39, 0x21, 0x4f, 0xed, 0xa9, 0x70, 0x99},
+		},
 		{
 			[]byte{0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
 			[]byte("This is the test message for mac"),
@@ -233,6 +272,11 @@ func TestCBCRMAC(t *testing.T) {
 		src []byte
 		tag []byte
 	}{
+		{
+			[]byte{0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
+			nil,
+			[]byte{0x90, 0x9f, 0x5e, 0x6e, 0xd1, 0x55, 0x18, 0xc0, 0x12, 0x52, 0x30, 0x23, 0x83, 0xc6, 0x3e, 0x8c},
+		},
 		{
 			[]byte{0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef, 0xfe, 0xdc, 0xba, 0x98, 0x76, 0x54, 0x32, 0x10},
 			[]byte("This is the test message for mac"),
@@ -324,6 +368,21 @@ var testVectors = []struct {
 		hash:    "070a16b46b4d4144f79bdd9dd04a287c",
 		tagsize: 16,
 	},
+	{
+		key:     "2b7e151628aed2a6abf7158809cf4f3c",
+		msg:     "6bc1bee22e409f96e93d7e117393172aae2d8a57",
+		hash:    "7d85449ea6ea19c823a7bf78837dfade",
+		tagsize: 16,
+	},
+	{
+		key: "2b7e151628aed2a6abf7158809cf4f3c",
+		msg: "6bc1bee22e409f96e93d7e117393172a" +
+			"ae2d8a571e03ac9c9eb76fac45af8e51" +
+			"30c81c46a35ce411e5fbc1191a0a52ef" +
+			"f69f2445df4f9b17ad2b417be66c3710",
+		hash:    "51f0bebf7e3b9d92fc49741779363cfe",
+		tagsize: 16,
+	},
 	{
 		key: "2b7e151628aed2a6abf7158809cf4f3c",
 		msg: "6bc1bee22e409f96e93d7e117393172a" +
@@ -363,6 +422,23 @@ var testVectors = []struct {
 		hash:    "28a7023f452e8f82bd4bf28d8c37c35c",
 		tagsize: 16,
 	},
+	{
+		key: "603deb1015ca71be2b73aef0857d7781" +
+			"1f352c073b6108d72d9810a30914dff4",
+		msg:     "6bc1bee22e409f96e93d7e117393172aae2d8a57",
+		hash:    "156727dc0878944a023c1fe03bad6d93",
+		tagsize: 16,
+	},
+	{
+		key: "603deb1015ca71be2b73aef0857d7781" +
+			"1f352c073b6108d72d9810a30914dff4",
+		msg: "6bc1bee22e409f96e93d7e117393172a" +
+			"ae2d8a571e03ac9c9eb76fac45af8e51" +
+			"30c81c46a35ce411e5fbc1191a0a52ef" +
+			"f69f2445df4f9b17ad2b417be66c3710",
+		hash:    "e1992190549f6ed5696a2c056c315410",
+		tagsize: 16,
+	},	
 	{
 		key: "603deb1015ca71be2b73aef0857d7781" +
 			"1f352c073b6108d72d9810a30914dff4",

diff --git a/cipher/gcm_sm4_test.go b/cipher/gcm_sm4_test.go
@@ -23,6 +23,20 @@ var sm4GCMTests = []struct {
 		"",
 		"232f0cfe308b49ea6fc88229b5dc858d",
 	},
+	{ // GB/T 15852.3-2019 A.4 GMAC
+		"feffe9928665731c6d6a8f9467308308",
+		"cafebabefacedbaddecaf888",
+		"",
+		"feedfacedeadbeeffeedfacedeadbeef",
+		"9d632570f93064264a20918e3081b4cd",
+	},
+	{ // GB/T 15852.3-2019 A.4 GMAC
+		"feffe9928665731c6d6a8f9467308308",
+		"cafebabefacedbaddecaf888",
+		"",
+		"feedfacedeadbeeffeedfacedeadbeefabaddad242831ec2217774244b7221b7",
+		"1eeaeb669e96bd059bd9929123030e78",
+	},	
 	{ // GB/T 36624-2018 C.5 2
 		"00000000000000000000000000000000",
 		"000000000000000000000000",