密码库LibTomCrypt学习记录——（2.28）分组密码算法的工作模式——OCB代码示例

本文展示了一组针对OCB模式下AES加密算法的测试向量，详细列出了密钥、nonce、明文、密文及认证标签的具体数值，旨在验证加密及解密过程的正确性。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

#include "tomcrypt.h"

typedef struct NistOCBTestVector_st{
   char *   name;//test vetor name
   int ptlen;
   unsigned char key[16];
   unsigned char nonce[16];
   unsigned char pt[34];
   unsigned char ct[34];
   unsigned char tag[16];
} NistOCBTestVector;

static const NistOCBTestVector tests_ocb[] =
{
   {
       "OCB-AES-128-0B",
       0,
       /* key */
       { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
       /* nonce */
       { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
       /* pt */
       { 0 },
       /* ct */
       { 0 },
       /* tag */
       { 0x15, 0xd3, 0x7d, 0xd7, 0xc8, 0x90, 0xd5, 0xd6, 0xac, 0xab, 0x92, 0x7b, 0xc0, 0xdc, 0x60, 0xee },
   },

   {
       "OCB-AES-128-3B",
       3,
       /* key */
       { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
       /* nonce */
       { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
       /* pt */
       { 0x00, 0x01, 0x02 },
       /* ct */
       { 0xfc, 0xd3, 0x7d },
       /* tag */
       { 0x02, 0x25, 0x47, 0x39, 0xa5, 0xe3, 0x56, 0x5a, 0xe2, 0xdc, 0xd6, 0x2c, 0x65, 0x97, 0x46, 0xba },
   },

   {
       "OCB-AES-128-16B",
       16,
       /* key */
       { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
       /* nonce */
       { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
       /* pt */
       { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
       /* ct */
       { 0x37, 0xdf, 0x8c, 0xe1, 0x5b, 0x48, 0x9b, 0xf3, 0x1d, 0x0f, 0xc4, 0x4d, 0xa1, 0xfa, 0xf6, 0xd6 },
       /* tag */
       { 0xdf, 0xb7, 0x63, 0xeb, 0xdb, 0x5f, 0x0e, 0x71, 0x9c, 0x7b, 0x41, 0x61, 0x80, 0x80, 0x04, 0xdf },
   },

   {
       "OCB-AES-128-20B",
       20,
       /* key */
       { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
       /* nonce */
       { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
       /* pt */
       { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
       0x10, 0x11, 0x12, 0x13 },
       /* ct */
       { 0x01, 0xa0, 0x75, 0xf0, 0xd8, 0x15, 0xb1, 0xa4, 0xe9, 0xc8, 0x81, 0xa1, 0xbc, 0xff, 0xc3, 0xeb,
       0x70, 0x03, 0xeb, 0x55},
       /* tag */
       { 0x75, 0x30, 0x84, 0x14, 0x4e, 0xb6, 0x3b, 0x77, 0x0b, 0x06, 0x3c, 0x2e, 0x23, 0xcd, 0xa0, 0xbb },
   },

   {
       "OCB-AES-128-32B",
       32,
       /* key */
       { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
       /* nonce */
       { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
       /* pt */
       { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
       0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f },
       /* ct */
       { 0x01, 0xa0, 0x75, 0xf0, 0xd8, 0x15, 0xb1, 0xa4, 0xe9, 0xc8, 0x81, 0xa1, 0xbc, 0xff, 0xc3, 0xeb,
       0x4a, 0xfc, 0xbb, 0x7f, 0xed, 0xc0, 0x8c, 0xa8, 0x65, 0x4c, 0x6d, 0x30, 0x4d, 0x16, 0x12, 0xfa },

       /* tag */
       { 0xc1, 0x4c, 0xbf, 0x2c, 0x1a, 0x1f, 0x1c, 0x3c, 0x13, 0x7e, 0xad, 0xea, 0x1f, 0x2f, 0x2f, 0xcf },
   },

   {
       "OCB-AES-128-34B",
       34,
       /* key */
       { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f },
       /* nonce */
       { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01 },
       /* pt */
       { 0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
       0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
       0x20, 0x21 },
       /* ct */
       { 0x01, 0xa0, 0x75, 0xf0, 0xd8, 0x15, 0xb1, 0xa4, 0xe9, 0xc8, 0x81, 0xa1, 0xbc, 0xff, 0xc3, 0xeb,
       0xd4, 0x90, 0x3d, 0xd0, 0x02, 0x5b, 0xa4, 0xaa, 0x83, 0x7c, 0x74, 0xf1, 0x21, 0xb0, 0x26, 0x0f,
       0xa9, 0x5d },

       /* tag */
       { 0xcf, 0x83, 0x41, 0xbb, 0x10, 0x82, 0x0c, 0xcf, 0x14, 0xbd, 0xec, 0x56, 0xb8, 0xd7, 0xd6, 0xab },
   },
};

int Test_OCB_AES(void)
{
   int err, x, idx, res;
   unsigned long len;
   unsigned char outct[MAXBLOCKSIZE], outtag[MAXBLOCKSIZE];

   if ( register_cipher (&aes_desc) != CRYPT_OK ) { return CRYPT_INVALID_CIPHER; }
   if ((idx = find_cipher("aes")) == -1) { return CRYPT_NOP; }

   printf("Test OCB Begin!\n");

   for (x = 0; x < (int)(sizeof(tests_ocb)/sizeof(tests_ocb[0])); x++)
   {
       len = sizeof(outtag);
       err = ocb_encrypt_authenticate_memory(idx, tests_ocb[x].key, 16,
           tests_ocb[x].nonce, tests_ocb[x].pt, tests_ocb[x].ptlen, outct, outtag, &len);

       err = (XMEMCMP(outtag, tests_ocb[x].tag, len) || XMEMCMP(outct, tests_ocb[x].ct, tests_ocb[x].ptlen));

       err = ocb_decrypt_verify_memory(idx, tests_ocb[x].key, 16, tests_ocb[x].nonce, outct, tests_ocb[x].ptlen,
           outct, tests_ocb[x].tag, len, &res);

       err = (res != 1) || XMEMCMP(tests_ocb[x].pt, outct, tests_ocb[x].ptlen);

       printf("Test Vector %s:\t%s\n", tests_ocb[x].name, err ? "fail!" : "pass!" );
   }