CCSDS Space Data Link Security (355.0-B-2)
irmin: schema2 prototype — node/=>/fix/self_describing
+18
-12
+18
-12
test/interop/cryptolib/test.ml
+18
-12
test/interop/cryptolib/test.ml
···
37
37
let vector_codec =
38
38
Csvt.(
39
39
Row.(
40
-
obj (fun name mode spi ekid ecs iv_len mac_len has_seg_hdr key_hex
41
-
input_hex secured_hex ->
40
+
obj
41
+
(fun
42
+
name
43
+
mode
44
+
spi
45
+
ekid
46
+
ecs
47
+
iv_len
48
+
mac_len
49
+
has_seg_hdr
50
+
key_hex
51
+
input_hex
52
+
secured_hex
53
+
->
42
54
{
43
55
name;
44
56
mode;
···
77
89
CryptoLib's default SA configuration after Crypto_Init_TC_Unit_Test:
78
90
- SA[1]: est=0, ast=0, shivf_len=12, iv_len=12, SCID=3, VCID=0
79
91
- SA[4]: est=1, ast=1, shivf_len=12, iv_len=12, stmacf_len=16,
80
-
ecs=AES-256-GCM, ekid=4, ABM=0xFF...
92
+
ecs=AES-256-GCM, ekid=4, ABM=0xFF...
81
93
82
94
The ABM in the generator is set to all 0xFF, matching our Sa.All. *)
83
95
let sa_of_vector (v : vector) =
···
124
136
let expected_full = Hex.decode_exn v.secured_hex in
125
137
126
138
(* CryptoLib's secured frame sans FECF *)
127
-
let expected =
128
-
Bytes.sub expected_full 0 (Bytes.length expected_full - 2)
129
-
in
139
+
let expected = Bytes.sub expected_full 0 (Bytes.length expected_full - 2) in
130
140
131
141
(* frame_hdr_bytes = TC_header(5) + seg_hdr(1) from the SECURED frame.
132
142
We use the secured frame's TC header because its FL field reflects the
···
191
201
in
192
202
let protect_tests =
193
203
List.map
194
-
(fun (v : vector) ->
195
-
Alcotest.test_case v.name `Quick (test_protect v))
204
+
(fun (v : vector) -> Alcotest.test_case v.name `Quick (test_protect v))
196
205
testable_vectors
197
206
in
198
207
let parse_tests =
···
202
211
vectors
203
212
in
204
213
Alcotest.run "sdls-interop-cryptolib"
205
-
[
206
-
("protect", protect_tests);
207
-
("security_header", parse_tests);
208
-
]
214
+
[ ("protect", protect_tests); ("security_header", parse_tests) ]