1#
2# Copyright 2001-2024 The OpenSSL Project Authors. All Rights Reserved.
3#
4# Licensed under the Apache License 2.0 (the "License").  You may not use
5# this file except in compliance with the License.  You can obtain a copy
6# in the file LICENSE in the source distribution or at
7# https://www.openssl.org/source/license.html
8
9# Tests start with one of these keywords
10#       Cipher Decrypt Derive Digest Encoding KDF MAC PBE
11#       PrivPubKeyPair Sign Verify VerifyRecover
12# and continue until a blank line. Lines starting with a pound sign are ignored.
13
14Title = HKDF tests (from RFC5869 test vectors) using PKEYKDF
15
16PKEYKDF = HKDF
17Ctrl.md = md:SHA256
18Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
19Ctrl.salt = hexsalt:000102030405060708090a0b0c
20Ctrl.info = hexinfo:f0f1f2f3f4f5f6f7f8f9
21Output = 3cb25f25faacd57a90434f64d0362f2a2d2d0a90cf1a5a4c5db02d56ecc4c5bf34007208d5b887185865
22
23PKEYKDF = HKDF
24Ctrl.mode = mode:EXTRACT_ONLY
25Ctrl.md = md:SHA256
26Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
27Ctrl.salt = hexsalt:000102030405060708090a0b0c
28Output = 077709362c2e32df0ddc3f0dc47bba6390b6c73bb50f9c3122ec844ad7c2b3e5
29
30PKEYKDF = HKDF
31Ctrl.mode = mode:EXPAND_ONLY
32Ctrl.md = md:SHA256
33Ctrl.IKM = hexkey:077709362c2e32df0ddc3f0dc47bba6390b6c73bb50f9c3122ec844ad7c2b3e5
34Ctrl.info = hexinfo:f0f1f2f3f4f5f6f7f8f9
35Output = 3cb25f25faacd57a90434f64d0362f2a2d2d0a90cf1a5a4c5db02d56ecc4c5bf34007208d5b887185865
36
37PKEYKDF = HKDF
38Ctrl.md = md:SHA256
39Ctrl.IKM = hexkey:000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f
40Ctrl.salt = hexsalt:606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf
41Ctrl.info = hexinfo:b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff
42Output = b11e398dc80327a1c8e7f78c596a49344f012eda2d4efad8a050cc4c19afa97c59045a99cac7827271cb41c65e590e09da3275600c2f09b8367793a9aca3db71cc30c58179ec3e87c14c01d5c1f3434f1d87
43
44PKEYKDF = HKDF
45Ctrl.mode = mode:EXTRACT_ONLY
46Ctrl.md = md:SHA256
47Ctrl.IKM = hexkey:000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f
48Ctrl.salt = hexsalt:606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf
49Output = 06a6b88c5853361a06104c9ceb35b45cef760014904671014a193f40c15fc244
50
51PKEYKDF = HKDF
52Ctrl.mode = mode:EXPAND_ONLY
53Ctrl.md = md:SHA256
54Ctrl.IKM = hexkey:06a6b88c5853361a06104c9ceb35b45cef760014904671014a193f40c15fc244
55Ctrl.info = hexinfo:b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff
56Output = b11e398dc80327a1c8e7f78c596a49344f012eda2d4efad8a050cc4c19afa97c59045a99cac7827271cb41c65e590e09da3275600c2f09b8367793a9aca3db71cc30c58179ec3e87c14c01d5c1f3434f1d87
57
58PKEYKDF = HKDF
59Ctrl.md = md:SHA256
60Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
61Ctrl.salt = salt:
62Ctrl.info = info:
63Output = 8da4e775a563c18f715f802a063c5a31b8a11f5c5ee1879ec3454e5f3c738d2d9d201395faa4b61a96c8
64
65PKEYKDF = HKDF
66Ctrl.mode = mode:EXTRACT_ONLY
67Ctrl.md = md:SHA256
68Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
69Ctrl.salt = salt:
70Ctrl.info = info:
71Output = 19ef24a32c717b167f33a91d6f648bdf96596776afdb6377ac434c1c293ccb04
72
73PKEYKDF = HKDF
74Ctrl.mode = mode:EXPAND_ONLY
75Ctrl.md = md:SHA256
76Ctrl.IKM = hexkey:19ef24a32c717b167f33a91d6f648bdf96596776afdb6377ac434c1c293ccb04
77Ctrl.info = info:
78Output = 8da4e775a563c18f715f802a063c5a31b8a11f5c5ee1879ec3454e5f3c738d2d9d201395faa4b61a96c8
79
80Availablein = default
81PKEYKDF = HKDF
82Ctrl.md = md:SHA1
83Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b
84Ctrl.salt = hexsalt:000102030405060708090a0b0c
85Ctrl.info = hexinfo:f0f1f2f3f4f5f6f7f8f9
86Output = 085a01ea1b10f36933068b56efa5ad81a4f14b822f5b091568a9cdd4f155fda2c22e422478d305f3f896
87
88Availablein = default
89PKEYKDF = HKDF
90Ctrl.mode = mode:EXTRACT_ONLY
91Ctrl.md = md:SHA1
92Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b
93Ctrl.salt = hexsalt:000102030405060708090a0b0c
94Output = 9b6c18c432a7bf8f0e71c8eb88f4b30baa2ba243
95
96PKEYKDF = HKDF
97Ctrl.mode = mode:EXPAND_ONLY
98Ctrl.md = md:SHA1
99Ctrl.IKM = hexkey:9b6c18c432a7bf8f0e71c8eb88f4b30baa2ba243
100Ctrl.info = hexinfo:f0f1f2f3f4f5f6f7f8f9
101Output = 085a01ea1b10f36933068b56efa5ad81a4f14b822f5b091568a9cdd4f155fda2c22e422478d305f3f896
102
103PKEYKDF = HKDF
104Ctrl.md = md:SHA1
105Ctrl.IKM = hexkey:000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f
106Ctrl.salt = hexsalt:606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf
107Ctrl.info = hexinfo:b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff
108Output = 0bd770a74d1160f7c9f12cd5912a06ebff6adcae899d92191fe4305673ba2ffe8fa3f1a4e5ad79f3f334b3b202b2173c486ea37ce3d397ed034c7f9dfeb15c5e927336d0441f4c4300e2cff0d0900b52d3b4
109
110PKEYKDF = HKDF
111Ctrl.mode = mode:EXTRACT_ONLY
112Ctrl.md = md:SHA1
113Ctrl.IKM = hexkey:000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f
114Ctrl.salt = hexsalt:606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf
115Output = 8adae09a2a307059478d309b26c4115a224cfaf6
116
117PKEYKDF = HKDF
118Ctrl.mode = mode:EXPAND_ONLY
119Ctrl.md = md:SHA1
120Ctrl.IKM = hexkey:8adae09a2a307059478d309b26c4115a224cfaf6
121Ctrl.info = hexinfo:b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff
122Output = 0bd770a74d1160f7c9f12cd5912a06ebff6adcae899d92191fe4305673ba2ffe8fa3f1a4e5ad79f3f334b3b202b2173c486ea37ce3d397ed034c7f9dfeb15c5e927336d0441f4c4300e2cff0d0900b52d3b4
123
124PKEYKDF = HKDF
125Ctrl.md = md:SHA1
126Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
127Ctrl.salt = salt:
128Ctrl.info = info:
129Output = 0ac1af7002b3d761d1e55298da9d0506b9ae52057220a306e07b6b87e8df21d0ea00033de03984d34918
130
131PKEYKDF = HKDF
132Ctrl.mode = mode:EXTRACT_ONLY
133Ctrl.md = md:SHA1
134Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
135Ctrl.salt = salt:
136Output = da8c8a73c7fa77288ec6f5e7c297786aa0d32d01
137
138PKEYKDF = HKDF
139Ctrl.mode = mode:EXPAND_ONLY
140Ctrl.md = md:SHA1
141Ctrl.IKM = hexkey:da8c8a73c7fa77288ec6f5e7c297786aa0d32d01
142Ctrl.info = info:
143Output = 0ac1af7002b3d761d1e55298da9d0506b9ae52057220a306e07b6b87e8df21d0ea00033de03984d34918
144
145PKEYKDF = HKDF
146Ctrl.md = md:SHA1
147Ctrl.IKM = hexkey:0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c
148Ctrl.salt = salt:
149Ctrl.info = info:
150Output = 2c91117204d745f3500d636a62f64f0ab3bae548aa53d423b0d1f27ebba6f5e5673a081d70cce7acfc48
151
152PKEYKDF = HKDF
153Ctrl.mode = mode:EXTRACT_ONLY
154Ctrl.md = md:SHA1
155Ctrl.IKM = hexkey:0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c
156Ctrl.salt = salt:
157Output = 2adccada18779e7c2077ad2eb19d3f3e731385dd
158
159PKEYKDF = HKDF
160Ctrl.mode = mode:EXPAND_ONLY
161Ctrl.md = md:SHA1
162Ctrl.IKM = hexkey:2adccada18779e7c2077ad2eb19d3f3e731385dd
163Ctrl.info = info:
164Output = 2c91117204d745f3500d636a62f64f0ab3bae548aa53d423b0d1f27ebba6f5e5673a081d70cce7acfc48
165
166PKEYKDF = HKDF
167Ctrl.IKM = hexkey:0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c
168Ctrl.salt = salt:
169Ctrl.info = info:
170Output = 00
171Result = KDF_DERIVE_ERROR
172
173PKEYKDF = HKDF
174Ctrl.md = md:SHA1
175Ctrl.salt = salt:
176Ctrl.info = info:
177Output = 00
178Result = KDF_DERIVE_ERROR
179
180PKEYKDF = HKDF
181Ctrl.md = md:SHA1
182Ctrl.IKM = hexkey:0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c
183Ctrl.info = info:
184Output = 2c91117204d745f3500d636a62f64f0ab3bae548aa53d423b0d1f27ebba6f5e5673a081d70cce7acfc48
185
186PKEYKDF = HKDF
187Ctrl.md = md:SHA1
188Ctrl.IKM = hexkey:0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c
189Ctrl.salt = salt:
190Output = 2c91117204d745f3500d636a62f64f0ab3bae548aa53d423b0d1f27ebba6f5e5673a081d70cce7acfc48
191
192PKEYKDF = HKDF
193Ctrl.mode = mode:EXTRACT_AND_EXPAND
194Ctrl.md = md:SHA1
195Ctrl.IKM = hexkey:0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c
196Ctrl.salt = salt:
197Output = 2c91117204d745f3500d636a62f64f0ab3bae548aa53d423b0d1f27ebba6f5e5673a081d70cce7acfc48
198
199# Test that the operation with XOF digest function is rejected
200FIPSversion = >=3.4.0
201PKEYKDF = HKDF
202Ctrl.digest = digest:SHAKE-256
203Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
204Ctrl.salt = hexsalt:000102030405060708090a0b0c
205Ctrl.info = hexinfo:f0f1f2f3f4f5f6f7f8f9
206Result = PKEY_CTRL_ERROR
207Reason = xof digests not allowed
208
209Title = FIPS indicator tests
210
211# Test that the key whose length is shorter than 112 bits is rejected
212Availablein = fips
213FIPSversion = >=3.4.0
214PKEYKDF = HKDF
215Ctrl.digest = digest:SHA1
216Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b
217Ctrl.salt = hexsalt:000102030405060708090a0b0c
218Ctrl.info = hexinfo:f0f1f2f3f4f5f6f7f8f9
219Result = PKEY_CTRL_ERROR
220Reason = invalid key length
221
222# Test that the key whose length is shorter than 112 bits is reported as
223# unapproved
224Availablein = fips
225FIPSversion = >=3.4.0
226PKEYKDF = HKDF
227Unapproved = 1
228Ctrl.key-check = key-check:0
229Ctrl.digest = digest:SHA1
230Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b
231Ctrl.salt = hexsalt:000102030405060708090a0b0c
232Ctrl.info = hexinfo:f0f1f2f3f4f5f6f7f8f9
233Output = 085a01ea1b10f36933068b56efa5ad81a4f14b822f5b091568a9cdd4f155fda2c22e422478d305f3f896
234