1#
2# Copyright 2001-2024 The OpenSSL Project Authors. All Rights Reserved.
3#
4# Licensed under the Apache License 2.0 (the "License").  You may not use
5# this file except in compliance with the License.  You can obtain a copy
6# in the file LICENSE in the source distribution or at
7# https://www.openssl.org/source/license.html
8
9# Tests start with one of these keywords
10#       Cipher Decrypt Derive Digest Encoding KDF MAC PBE
11#       PrivPubKeyPair Sign Verify VerifyRecover
12# and continue until a blank line. Lines starting with a pound sign are ignored.
13
14Title = HKDF tests (from RFC5869 test vectors)
15
16KDF = HKDF
17Ctrl.digest = digest:SHA256
18Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
19Ctrl.salt = hexsalt:000102030405060708090a0b0c
20Ctrl.info = hexinfo:f0f1f2f3f4f5f6f7f8f9
21Output = 3cb25f25faacd57a90434f64d0362f2a2d2d0a90cf1a5a4c5db02d56ecc4c5bf34007208d5b887185865
22
23KDF = HKDF
24Ctrl.mode = mode:EXTRACT_ONLY
25Ctrl.digest = digest:SHA256
26Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
27Ctrl.salt = hexsalt:000102030405060708090a0b0c
28Output = 077709362c2e32df0ddc3f0dc47bba6390b6c73bb50f9c3122ec844ad7c2b3e5
29
30KDF = HKDF
31Ctrl.mode = mode:EXPAND_ONLY
32Ctrl.digest = digest:SHA256
33Ctrl.IKM = hexkey:077709362c2e32df0ddc3f0dc47bba6390b6c73bb50f9c3122ec844ad7c2b3e5
34Ctrl.info = hexinfo:f0f1f2f3f4f5f6f7f8f9
35Output = 3cb25f25faacd57a90434f64d0362f2a2d2d0a90cf1a5a4c5db02d56ecc4c5bf34007208d5b887185865
36
37KDF = HKDF
38Ctrl.digest = digest:SHA256
39Ctrl.IKM = hexkey:000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f
40Ctrl.salt = hexsalt:606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf
41Ctrl.info = hexinfo:b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff
42Output = b11e398dc80327a1c8e7f78c596a49344f012eda2d4efad8a050cc4c19afa97c59045a99cac7827271cb41c65e590e09da3275600c2f09b8367793a9aca3db71cc30c58179ec3e87c14c01d5c1f3434f1d87
43
44KDF = HKDF
45Ctrl.mode = mode:EXTRACT_ONLY
46Ctrl.digest = digest:SHA256
47Ctrl.IKM = hexkey:000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f
48Ctrl.salt = hexsalt:606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf
49Output = 06a6b88c5853361a06104c9ceb35b45cef760014904671014a193f40c15fc244
50
51KDF = HKDF
52Ctrl.mode = mode:EXPAND_ONLY
53Ctrl.digest = digest:SHA256
54Ctrl.IKM = hexkey:06a6b88c5853361a06104c9ceb35b45cef760014904671014a193f40c15fc244
55Ctrl.info = hexinfo:b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff
56Output = b11e398dc80327a1c8e7f78c596a49344f012eda2d4efad8a050cc4c19afa97c59045a99cac7827271cb41c65e590e09da3275600c2f09b8367793a9aca3db71cc30c58179ec3e87c14c01d5c1f3434f1d87
57
58KDF = HKDF
59Ctrl.digest = digest:SHA256
60Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
61Ctrl.salt = salt:
62Ctrl.info = info:
63Output = 8da4e775a563c18f715f802a063c5a31b8a11f5c5ee1879ec3454e5f3c738d2d9d201395faa4b61a96c8
64
65KDF = HKDF
66Ctrl.mode = mode:EXTRACT_ONLY
67Ctrl.digest = digest:SHA256
68Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
69Ctrl.salt = salt:
70Ctrl.info = info:
71Output = 19ef24a32c717b167f33a91d6f648bdf96596776afdb6377ac434c1c293ccb04
72
73KDF = HKDF
74Ctrl.mode = mode:EXPAND_ONLY
75Ctrl.digest = digest:SHA256
76Ctrl.IKM = hexkey:19ef24a32c717b167f33a91d6f648bdf96596776afdb6377ac434c1c293ccb04
77Ctrl.info = info:
78Output = 8da4e775a563c18f715f802a063c5a31b8a11f5c5ee1879ec3454e5f3c738d2d9d201395faa4b61a96c8
79
80Availablein = default
81KDF = HKDF
82Ctrl.digest = digest:SHA1
83Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b
84Ctrl.salt = hexsalt:000102030405060708090a0b0c
85Ctrl.info = hexinfo:f0f1f2f3f4f5f6f7f8f9
86Output = 085a01ea1b10f36933068b56efa5ad81a4f14b822f5b091568a9cdd4f155fda2c22e422478d305f3f896
87
88Availablein = default
89KDF = HKDF
90Ctrl.mode = mode:EXTRACT_ONLY
91Ctrl.digest = digest:SHA1
92Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b
93Ctrl.salt = hexsalt:000102030405060708090a0b0c
94Output = 9b6c18c432a7bf8f0e71c8eb88f4b30baa2ba243
95
96KDF = HKDF
97Ctrl.mode = mode:EXPAND_ONLY
98Ctrl.digest = digest:SHA1
99Ctrl.IKM = hexkey:9b6c18c432a7bf8f0e71c8eb88f4b30baa2ba243
100Ctrl.info = hexinfo:f0f1f2f3f4f5f6f7f8f9
101Output = 085a01ea1b10f36933068b56efa5ad81a4f14b822f5b091568a9cdd4f155fda2c22e422478d305f3f896
102
103KDF = HKDF
104Ctrl.digest = digest:SHA1
105Ctrl.IKM = hexkey:000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f
106Ctrl.salt = hexsalt:606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf
107Ctrl.info = hexinfo:b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff
108Output = 0bd770a74d1160f7c9f12cd5912a06ebff6adcae899d92191fe4305673ba2ffe8fa3f1a4e5ad79f3f334b3b202b2173c486ea37ce3d397ed034c7f9dfeb15c5e927336d0441f4c4300e2cff0d0900b52d3b4
109
110KDF = HKDF
111Ctrl.mode = mode:EXTRACT_ONLY
112Ctrl.digest = digest:SHA1
113Ctrl.IKM = hexkey:000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f404142434445464748494a4b4c4d4e4f
114Ctrl.salt = hexsalt:606162636465666768696a6b6c6d6e6f707172737475767778797a7b7c7d7e7f808182838485868788898a8b8c8d8e8f909192939495969798999a9b9c9d9e9fa0a1a2a3a4a5a6a7a8a9aaabacadaeaf
115Output = 8adae09a2a307059478d309b26c4115a224cfaf6
116
117KDF = HKDF
118Ctrl.mode = mode:EXPAND_ONLY
119Ctrl.digest = digest:SHA1
120Ctrl.IKM = hexkey:8adae09a2a307059478d309b26c4115a224cfaf6
121Ctrl.info = hexinfo:b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0c1c2c3c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff
122Output = 0bd770a74d1160f7c9f12cd5912a06ebff6adcae899d92191fe4305673ba2ffe8fa3f1a4e5ad79f3f334b3b202b2173c486ea37ce3d397ed034c7f9dfeb15c5e927336d0441f4c4300e2cff0d0900b52d3b4
123
124KDF = HKDF
125Ctrl.digest = digest:SHA1
126Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
127Ctrl.salt = salt:
128Ctrl.info = info:
129Output = 0ac1af7002b3d761d1e55298da9d0506b9ae52057220a306e07b6b87e8df21d0ea00033de03984d34918
130
131KDF = HKDF
132Ctrl.mode = mode:EXTRACT_ONLY
133Ctrl.digest = digest:SHA1
134Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
135Ctrl.salt = salt:
136Output = da8c8a73c7fa77288ec6f5e7c297786aa0d32d01
137
138KDF = HKDF
139Ctrl.mode = mode:EXPAND_ONLY
140Ctrl.digest = digest:SHA1
141Ctrl.IKM = hexkey:da8c8a73c7fa77288ec6f5e7c297786aa0d32d01
142Ctrl.info = info:
143Output = 0ac1af7002b3d761d1e55298da9d0506b9ae52057220a306e07b6b87e8df21d0ea00033de03984d34918
144
145KDF = HKDF
146Ctrl.digest = digest:SHA1
147Ctrl.IKM = hexkey:0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c
148Ctrl.salt = salt:
149Ctrl.info = info:
150Output = 2c91117204d745f3500d636a62f64f0ab3bae548aa53d423b0d1f27ebba6f5e5673a081d70cce7acfc48
151
152KDF = HKDF
153Ctrl.mode = mode:EXTRACT_ONLY
154Ctrl.digest = digest:SHA1
155Ctrl.IKM = hexkey:0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c
156Ctrl.salt = salt:
157Output = 2adccada18779e7c2077ad2eb19d3f3e731385dd
158
159KDF = HKDF
160Ctrl.mode = mode:EXPAND_ONLY
161Ctrl.digest = digest:SHA1
162Ctrl.IKM = hexkey:2adccada18779e7c2077ad2eb19d3f3e731385dd
163Ctrl.info = info:
164Output = 2c91117204d745f3500d636a62f64f0ab3bae548aa53d423b0d1f27ebba6f5e5673a081d70cce7acfc48
165
166KDF = HKDF
167Ctrl.IKM = hexkey:0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c
168Ctrl.salt = salt:
169Ctrl.info = info:
170Output = 00
171Result = KDF_DERIVE_ERROR
172
173KDF = HKDF
174Ctrl.digest = digest:SHA1
175Ctrl.salt = salt:
176Ctrl.info = info:
177Output = 00
178Result = KDF_DERIVE_ERROR
179
180KDF = HKDF
181Ctrl.digest = digest:SHA1
182Ctrl.IKM = hexkey:0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c
183Ctrl.info = info:
184Output = 2c91117204d745f3500d636a62f64f0ab3bae548aa53d423b0d1f27ebba6f5e5673a081d70cce7acfc48
185
186KDF = HKDF
187Ctrl.digest = digest:SHA1
188Ctrl.IKM = hexkey:0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c
189Ctrl.salt = salt:
190Output = 2c91117204d745f3500d636a62f64f0ab3bae548aa53d423b0d1f27ebba6f5e5673a081d70cce7acfc48
191
192KDF = HKDF
193Ctrl.mode = mode:EXTRACT_AND_EXPAND
194Ctrl.digest = digest:SHA1
195Ctrl.IKM = hexkey:0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c
196Ctrl.salt = salt:
197Output = 2c91117204d745f3500d636a62f64f0ab3bae548aa53d423b0d1f27ebba6f5e5673a081d70cce7acfc48
198
199# The output key size should match the digest size for EXTRACT_ONLY mode
200KDF = HKDF
201Ctrl.mode = mode:EXTRACT_ONLY
202Ctrl.digest = digest:SHA1
203Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
204Ctrl.salt = salt:
205Output = da8c8a73
206Result = KDF_DERIVE_ERROR
207
208# Test concat of multiple info (Uses existing test data, and just splits the info into separate fields)
209KDF = HKDF
210Ctrl.mode = mode:EXPAND_ONLY
211Ctrl.digest = digest:SHA1
212Ctrl.IKM = hexkey:8adae09a2a307059478d309b26c4115a224cfaf6
213Ctrl.info = hexinfo:b0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0
214Ctrl.info = hexinfo:c1c2c3
215Ctrl.info = hexinfo:c4c5c6c7c8c9cacbcccdcecfd0d1d2d3d4d5d6d7d8d9
216Ctrl.info = hexinfo:dadbdcdddedfe0e1e2e3e4e5e6e7e8e9eaebecedeeeff0f1f2f3f4f5f6f7f8f9fafbfcfdfeff
217Output = 0bd770a74d1160f7c9f12cd5912a06ebff6adcae899d92191fe4305673ba2ffe8fa3f1a4e5ad79f3f334b3b202b2173c486ea37ce3d397ed034c7f9dfeb15c5e927336d0441f4c4300e2cff0d0900b52d3b4
218
219Availablein = default
220KDF = HKDF
221Ctrl.digest = digest:BLAKE2S-256
222Ctrl.IKM = hexkey:1a2d
223Ctrl.salt = hexsalt:000000000000000000000000000000000000000000000000000000000000000000
224Ctrl.info = info:
225Output = 62f99231760bedd72319cc6cad
226
227# Test that the operation with XOF digest function is rejected
228FIPSversion = >=3.4.0
229KDF = HKDF
230Ctrl.digest = digest:SHAKE-256
231Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b
232Ctrl.salt = hexsalt:000102030405060708090a0b0c
233Ctrl.info = hexinfo:f0f1f2f3f4f5f6f7f8f9
234Result = KDF_CTRL_ERROR
235Reason = xof digests not allowed
236
237Title = FIPS indicator tests
238
239# Test that the key whose length is shorter than 112 bits is rejected
240Availablein = fips
241FIPSversion = >=3.4.0
242KDF = HKDF
243Ctrl.digest = digest:SHA1
244Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b
245Ctrl.salt = hexsalt:000102030405060708090a0b0c
246Ctrl.info = hexinfo:f0f1f2f3f4f5f6f7f8f9
247Result = KDF_CTRL_ERROR
248Reason = invalid key length
249
250# Test that the key whose length is shorter than 112 bits is reported as
251# unapproved
252Availablein = fips
253FIPSversion = >=3.4.0
254KDF = HKDF
255Unapproved = 1
256Ctrl.key-check = key-check:0
257Ctrl.digest = digest:SHA1
258Ctrl.IKM = hexkey:0b0b0b0b0b0b0b0b0b0b0b
259Ctrl.salt = hexsalt:000102030405060708090a0b0c
260Ctrl.info = hexinfo:f0f1f2f3f4f5f6f7f8f9
261Output = 085a01ea1b10f36933068b56efa5ad81a4f14b822f5b091568a9cdd4f155fda2c22e422478d305f3f896
262