denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

botan: Implement prf+ via Botan's HKDF implementation

Browse Source
This commit is contained in:
Tobias Brunner
2022-04-14 19:02:56 +02:00
parent f535f1ed53
commit cb8f924051
17 changed files with 257 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libstrongswan/tests/suites/test_prf_plus.c
+7 -1
View File
@@ -137,7 +137,13 @@ START_TEST(test_wrap)
/* the 1-byte counter overflows after 255 blocks of the underlying PRF */
out = chunk_alloc(32 * 255 + 1);
ck_assert(kdf->get_bytes(kdf, out.len - 1 , out.ptr));
ck_assert(kdf->get_bytes(kdf, out.len - 2, out.ptr));
if (!kdf->get_bytes(kdf, out.len - 1, out.ptr))
{ /* Botan 3.x has a check for (len/bs) >= 255 blocks, so we allow this */
warn("unable to generate maximum-sized key for %N (%N) but maximum-1 "
"is fine", key_derivation_function_names, KDF_PRF_PLUS,
pseudo_random_function_names, PRF_HMAC_SHA2_256);
}
ck_assert(!kdf->get_bytes(kdf, out.len, out.ptr));
chunk_free(&out);
kdf->destroy(kdf);