318964 - implement HMAC algorithm tests for FIPS 140-2 validation

Status: RESOLVED FIXED

(NSS :: Test, defect)

Description

[glen beasley]

http://csrc.nist.gov/cryptval/shs/shaval.htm
http://csrc.nist.gov/cryptval/shs/SHAVS.pdf

Comment 1

[glen beasley]

http://csrc.nist.gov/cryptval/MsgAuth.htm
http://csrc.nist.gov/cryptval/mac/HMACVS.pdf

Comment 2

[glen beasley]

Attachment: Added FIPS 140-2 HMAC test

Comment 3

[Wan-Teh Chang]

Comment on attachment 206047 [details] [diff] [review]
Added FIPS 140-2 HMAC test

>+                /* set the HASH algorithm for HMAC */
>+                if (HMACLen == SHA1_LENGTH) {
>+                    hash_alg = HASH_AlgSHA1;
>+                } else if (HMACLen == SHA256_LENGTH) {
>+                    hash_alg = HASH_AlgSHA256;
>+                } else if (HMACLen == SHA384_LENGTH) {
>+                    hash_alg = HASH_AlgSHA384;
>+                } else if (HMACLen == SHA512_LENGTH) {
>+                    hash_alg = HASH_AlgSHA512;
>+                }

Should add an "else" block that "goto loser".

r=wtc.

Comment 4

[Wan-Teh Chang]

Glen, please check in your FIPS algorithm tests on
both the trunk and the NSS_11_BRANCH.  We will be
running the algorithm tests using a NSS_3_11_BRANCH
build.

Comment 5

[glen beasley]

Checking in fipstest.c;
/cvsroot/mozilla/security/nss/cmd/fipstest/fipstest.c,v  <--  fipstest.c
new revision: 1.7; previous revision: 1.6
done
RCS file: /cvsroot/mozilla/security/nss/cmd/fipstest/hmac.sh,v
done
Checking in hmac.sh;
/cvsroot/mozilla/security/nss/cmd/fipstest/hmac.sh,v  <--  hmac.sh
initial revision: 1.1
done