Skip to content

Correct the 'keys' usage for the Block Cipher examples #1589

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Kneckter wants to merge 2 commits into
base: master
Choose a base branch
from
Open

Correct the 'keys' usage for the Block Cipher examples #1589

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
599230a
Correct the 'keys' usage for the Block Cipher examples
Kneckter Jun 17, 2025
6b10c77
Mark 'keys' as optional
Kneckter Jun 17, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 11 additions & 7 deletions src/conditioning-components/sections/05-capabilities.adoc
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,14 +20,14 @@ The following ConditioningComponent / AES-CBC-MAC / SP800-90B and ConditioningCo
| mode | The specific conditioning component to be validated | string | "AES-CBC-MAC" or "BlockCipher_DF"
| revision | The algorithm testing revision to use | string | "SP800-90B"
| keyLen | The length of keys supported in bits | array | [128, 192, 256]
| keys | User-defined keys used to generate, AES-CBC-MAC only | array | Must have matching keyLen support
| keys | This property is *OPTIONAL*. User-defined keys used to generate, AES-CBC-MAC only | array | Must have matching keyLen support
| payloadLen | The lengths in bits supported by the IUT | domain | [{"min": 8, "max": 65536, "inc": 8}]
| outputLen | The lengths in bits suppoerted by the IUT as output only for BlockCipher_DF | domain | [{"min": 128, "max": 512, "inc": 8}]
| outputLen | The lengths in bits supported by the IUT as output only for BlockCipher_DF | domain | [{"min": 128, "max": 512, "inc": 8}]
|===

NOTE: For ConditioningComponent / AES-CBC-MAC / SP800-90B, the payload itself is processed through the encryption engine. Therefore the minimum 'payloadLen' is 128 bits and the minimum increment is 128 bits. In other words, all values within the 'payloadLen' must correspond to complete AES blocks in bits (a multiple of 128).

Note: For ConditioningComponent / AES-CBC-MAC / SP800-90B, 'keys' must have a matching supported 'keyLen', i.e., if submitting a key of 128-bits, 'keyLen' must have 128 supported as well. The opposite is true as well, every kenLen must include a matching Key. When uder-defined keys are utilized, random keys will not be generated.
NOTE: For ConditioningComponent / AES-CBC-MAC / SP800-90B, 'keys' must have a matching supported 'keyLen', i.e., if submitting a key of 128-bits, 'keyLen' must have 128 supported as well. The opposite is true as well, every kenLen must include a matching Key. When user-defined keys are utilized, random keys will not be generated.

The following is an example of a registration for ConditioningComponents / AES-CBC-MAC / SP800-90B

Expand All @@ -42,6 +42,11 @@ The following is an example of a registration for ConditioningComponents / AES-C
192,
256
],
"keys": [
"D1C1B7FFB2CCE0BBF13D4F7B4A246A8D",
"D1C1B7FFB2CCE0BBF13D4F7B4A246A8DD1C1B7FFB2CCE0BB",
"D1C1B7FFB2CCE0BBF13D4F7B4A246A8DD1C1B7FFB2CCE0BBF13D4F7B4A246A8D"
],
"payloadLen": [
{
"min": 128,
Expand All @@ -61,10 +66,9 @@ The following is an example of a registration for ConditioningComponents / Block
"mode": "BlockCipher_DF",
"revision": "SP800-90B",
"keyLen": [
128
],
"keys": [
D1C1B7FFB2CCE0BBF13D4F7B4A246A8D
128,
192,
256
],
"payloadLen": [
{
Expand Down