b3353e
diff -up openssl-1.1.1k/test/evp_extra_test.c.s390x-test-aes openssl-1.1.1k/test/evp_extra_test.c
b3353e
--- openssl-1.1.1k/test/evp_extra_test.c.s390x-test-aes	2021-07-16 17:33:04.663181698 +0200
b3353e
+++ openssl-1.1.1k/test/evp_extra_test.c	2021-07-16 17:49:27.780439742 +0200
b3353e
@@ -320,6 +320,97 @@ static const unsigned char pExampleECPar
b3353e
 };
b3353e
 #endif
b3353e
 
b3353e
+static const unsigned char kCFBDefaultKey[] = {
b3353e
+	0x2B, 0x7E, 0x15, 0x16, 0x28, 0xAE, 0xD2, 0xA6, 0xAB, 0xF7, 0x15, 0x88,
b3353e
+    0x09, 0xCF, 0x4F, 0x3C
b3353e
+};
b3353e
+
b3353e
+static const unsigned char kGCMDefaultKey[32] = { 0 };
b3353e
+
b3353e
+static const unsigned char kGCMResetKey[] = {
b3353e
+	0xfe, 0xff, 0xe9, 0x92, 0x86, 0x65, 0x73, 0x1c, 0x6d, 0x6a, 0x8f, 0x94,
b3353e
+    0x67, 0x30, 0x83, 0x08, 0xfe, 0xff, 0xe9, 0x92, 0x86, 0x65, 0x73, 0x1c,
b3353e
+	0x6d, 0x6a, 0x8f, 0x94, 0x67, 0x30, 0x83, 0x08
b3353e
+};
b3353e
+
b3353e
+static const unsigned char iCFBIV[] = {
b3353e
+	0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0A, 0x0B,
b3353e
+    0x0C, 0x0D, 0x0E, 0x0F
b3353e
+};
b3353e
+
b3353e
+static const unsigned char iGCMDefaultIV[12] = { 0 };
b3353e
+
b3353e
+static const unsigned char iGCMResetIV1[] = {
b3353e
+	0xca, 0xfe, 0xba, 0xbe, 0xfa, 0xce, 0xdb, 0xad
b3353e
+};
b3353e
+
b3353e
+static const unsigned char iGCMResetIV2[] = {
b3353e
+	0xca, 0xfe, 0xba, 0xbe, 0xfa, 0xce, 0xdb, 0xad, 0xde, 0xca, 0xf8, 0x88
b3353e
+};
b3353e
+
b3353e
+static const unsigned char cfbPlaintext[] = {
b3353e
+	0x6B, 0xC1, 0xBE, 0xE2, 0x2E, 0x40, 0x9F, 0x96, 0xE9, 0x3D, 0x7E, 0x11,
b3353e
+    0x73, 0x93, 0x17, 0x2A
b3353e
+};
b3353e
+
b3353e
+static const unsigned char gcmDefaultPlaintext[16] = { 0 };
b3353e
+
b3353e
+static const unsigned char gcmResetPlaintext[] = {
b3353e
+	0xd9, 0x31, 0x32, 0x25, 0xf8, 0x84, 0x06, 0xe5, 0xa5, 0x59, 0x09, 0xc5,
b3353e
+	0xaf, 0xf5, 0x26, 0x9a, 0x86, 0xa7, 0xa9, 0x53, 0x15, 0x34, 0xf7, 0xda,
b3353e
+	0x2e, 0x4c, 0x30, 0x3d, 0x8a, 0x31, 0x8a, 0x72, 0x1c, 0x3c, 0x0c, 0x95,
b3353e
+	0x95, 0x68, 0x09, 0x53, 0x2f, 0xcf, 0x0e, 0x24, 0x49, 0xa6, 0xb5, 0x25,
b3353e
+    0xb1, 0x6a, 0xed, 0xf5, 0xaa, 0x0d, 0xe6, 0x57, 0xba, 0x63, 0x7b, 0x39
b3353e
+};
b3353e
+
b3353e
+static const unsigned char cfbCiphertext[] = {
b3353e
+	0x3B, 0x3F, 0xD9, 0x2E, 0xB7, 0x2D, 0xAD, 0x20, 0x33, 0x34, 0x49, 0xF8,
b3353e
+    0xE8, 0x3C, 0xFB, 0x4A
b3353e
+};
b3353e
+
b3353e
+static const unsigned char gcmDefaultCiphertext[] = {
b3353e
+	0xce, 0xa7, 0x40, 0x3d, 0x4d, 0x60, 0x6b, 0x6e, 0x07, 0x4e, 0xc5, 0xd3,
b3353e
+    0xba, 0xf3, 0x9d, 0x18
b3353e
+};
b3353e
+
b3353e
+static const unsigned char gcmResetCiphertext1[] = {
b3353e
+	0xc3, 0x76, 0x2d, 0xf1, 0xca, 0x78, 0x7d, 0x32, 0xae, 0x47, 0xc1, 0x3b,
b3353e
+    0xf1, 0x98, 0x44, 0xcb, 0xaf, 0x1a, 0xe1, 0x4d, 0x0b, 0x97, 0x6a, 0xfa,
b3353e
+    0xc5, 0x2f, 0xf7, 0xd7, 0x9b, 0xba, 0x9d, 0xe0, 0xfe, 0xb5, 0x82, 0xd3,
b3353e
+	0x39, 0x34, 0xa4, 0xf0, 0x95, 0x4c, 0xc2, 0x36, 0x3b, 0xc7, 0x3f, 0x78,
b3353e
+	0x62, 0xac, 0x43, 0x0e, 0x64, 0xab, 0xe4, 0x99, 0xf4, 0x7c, 0x9b, 0x1f
b3353e
+};
b3353e
+
b3353e
+static const unsigned char gcmResetCiphertext2[] = {
b3353e
+	0x52, 0x2d, 0xc1, 0xf0, 0x99, 0x56, 0x7d, 0x07, 0xf4, 0x7f, 0x37, 0xa3,
b3353e
+    0x2a, 0x84, 0x42, 0x7d, 0x64, 0x3a, 0x8c, 0xdc, 0xbf, 0xe5, 0xc0, 0xc9,
b3353e
+	0x75, 0x98, 0xa2, 0xbd, 0x25, 0x55, 0xd1, 0xaa, 0x8c, 0xb0, 0x8e, 0x48,
b3353e
+	0x59, 0x0d, 0xbb, 0x3d, 0xa7, 0xb0, 0x8b, 0x10, 0x56, 0x82, 0x88, 0x38,
b3353e
+	0xc5, 0xf6, 0x1e, 0x63, 0x93, 0xba, 0x7a, 0x0a, 0xbc, 0xc9, 0xf6, 0x62
b3353e
+};
b3353e
+
b3353e
+static const unsigned char gcmAAD[] = {
b3353e
+	0xfe, 0xed, 0xfa, 0xce, 0xde, 0xad, 0xbe, 0xef, 0xfe, 0xed, 0xfa, 0xce,
b3353e
+    0xde, 0xad, 0xbe, 0xef, 0xab, 0xad, 0xda, 0xd2
b3353e
+};
b3353e
+
b3353e
+static const unsigned char gcmDefaultTag[] = {
b3353e
+	0xd0, 0xd1, 0xc8, 0xa7, 0x99, 0x99, 0x6b, 0xf0, 0x26, 0x5b, 0x98, 0xb5,
b3353e
+    0xd4, 0x8a, 0xb9, 0x19
b3353e
+};
b3353e
+
b3353e
+static const unsigned char gcmResetTag1[] = {
b3353e
+	0x3a, 0x33, 0x7d, 0xbf, 0x46, 0xa7, 0x92, 0xc4, 0x5e, 0x45, 0x49, 0x13,
b3353e
+	0xfe, 0x2e, 0xa8, 0xf2
b3353e
+};
b3353e
+
b3353e
+static const unsigned char gcmResetTag2[] = {
b3353e
+	0x76, 0xfc, 0x6e, 0xce, 0x0f, 0x4e, 0x17, 0x68, 0xcd, 0xdf, 0x88, 0x53,
b3353e
+    0xbb, 0x2d, 0x55, 0x1b
b3353e
+};
b3353e
+
b3353e
+
b3353e
+
b3353e
 typedef struct APK_DATA_st {
b3353e
     const unsigned char *kder;
b3353e
     size_t size;
b3353e
@@ -330,6 +421,385 @@ typedef struct APK_DATA_st {
b3353e
     int type; /* 0 for private, 1 for public, 2 for params */
b3353e
 } APK_DATA;
b3353e
 
b3353e
+typedef struct {
b3353e
+    const char *cipher;
b3353e
+    const unsigned char *key;
b3353e
+    const unsigned char *iv;
b3353e
+    const unsigned char *input;
b3353e
+    const unsigned char *expected;
b3353e
+    const unsigned char *tag;
b3353e
+    size_t ivlen; /* 0 if we do not need to set a specific IV len */
b3353e
+    size_t inlen;
b3353e
+    size_t expectedlen;
b3353e
+    size_t taglen;
b3353e
+    int keyfirst;
b3353e
+    int initenc;
b3353e
+    int finalenc;
b3353e
+} EVP_INIT_TEST_st;
b3353e
+
b3353e
+static const EVP_INIT_TEST_st evp_init_tests[] = {
b3353e
+    {
b3353e
+        "aes-128-cfb", kCFBDefaultKey, iCFBIV, cfbPlaintext,
b3353e
+        cfbCiphertext, NULL, 0, sizeof(cfbPlaintext), sizeof(cfbCiphertext),
b3353e
+        0, 1, 0, 1
b3353e
+    },
b3353e
+    {
b3353e
+        "aes-256-gcm", kGCMDefaultKey, iGCMDefaultIV, gcmDefaultPlaintext,
b3353e
+        gcmDefaultCiphertext, gcmDefaultTag, sizeof(iGCMDefaultIV),
b3353e
+        sizeof(gcmDefaultPlaintext), sizeof(gcmDefaultCiphertext),
b3353e
+        sizeof(gcmDefaultTag), 1, 0, 1
b3353e
+    },
b3353e
+    {
b3353e
+        "aes-128-cfb", kCFBDefaultKey, iCFBIV, cfbPlaintext,
b3353e
+        cfbCiphertext, NULL, 0, sizeof(cfbPlaintext), sizeof(cfbCiphertext),
b3353e
+        0, 0, 0, 1
b3353e
+    },
b3353e
+    {
b3353e
+        "aes-256-gcm", kGCMDefaultKey, iGCMDefaultIV, gcmDefaultPlaintext,
b3353e
+        gcmDefaultCiphertext, gcmDefaultTag, sizeof(iGCMDefaultIV),
b3353e
+        sizeof(gcmDefaultPlaintext), sizeof(gcmDefaultCiphertext),
b3353e
+        sizeof(gcmDefaultTag), 0, 0, 1
b3353e
+    },
b3353e
+    {
b3353e
+        "aes-128-cfb", kCFBDefaultKey, iCFBIV, cfbCiphertext,
b3353e
+        cfbPlaintext, NULL, 0, sizeof(cfbCiphertext), sizeof(cfbPlaintext),
b3353e
+        0, 1, 1, 0
b3353e
+    },
b3353e
+    {
b3353e
+        "aes-256-gcm", kGCMDefaultKey, iGCMDefaultIV, gcmDefaultCiphertext,
b3353e
+        gcmDefaultPlaintext, gcmDefaultTag, sizeof(iGCMDefaultIV),
b3353e
+        sizeof(gcmDefaultCiphertext), sizeof(gcmDefaultPlaintext),
b3353e
+        sizeof(gcmDefaultTag), 1, 1, 0
b3353e
+    },
b3353e
+    {
b3353e
+        "aes-128-cfb", kCFBDefaultKey, iCFBIV, cfbCiphertext,
b3353e
+        cfbPlaintext, NULL, 0, sizeof(cfbCiphertext), sizeof(cfbPlaintext),
b3353e
+        0, 0, 1, 0
b3353e
+    },
b3353e
+    {
b3353e
+        "aes-256-gcm", kGCMDefaultKey, iGCMDefaultIV, gcmDefaultCiphertext,
b3353e
+        gcmDefaultPlaintext, gcmDefaultTag, sizeof(iGCMDefaultIV),
b3353e
+        sizeof(gcmDefaultCiphertext), sizeof(gcmDefaultPlaintext),
b3353e
+        sizeof(gcmDefaultTag), 0, 1, 0
b3353e
+    }
b3353e
+};
b3353e
+
b3353e
+static int evp_init_seq_set_iv(EVP_CIPHER_CTX *ctx, const EVP_INIT_TEST_st *t)
b3353e
+{
b3353e
+    int res = 0;
b3353e
+
b3353e
+    if (t->ivlen != 0) {
b3353e
+        if (!TEST_true(EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_GCM_SET_IVLEN, t->ivlen, NULL)))
b3353e
+            goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CipherInit_ex(ctx, NULL, NULL, NULL, t->iv, -1)))
b3353e
+        goto err;
b3353e
+    res = 1;
b3353e
+ err:
b3353e
+    return res;
b3353e
+}
b3353e
+
b3353e
+/*
b3353e
+ * Test step-wise cipher initialization via EVP_CipherInit_ex where the
b3353e
+ * arguments are given one at a time and a final adjustment to the enc
b3353e
+ * parameter sets the correct operation.
b3353e
+ */
b3353e
+static int test_evp_init_seq(int idx)
b3353e
+{
b3353e
+    int outlen1, outlen2;
b3353e
+    int testresult = 0;
b3353e
+    unsigned char outbuf[1024];
b3353e
+    unsigned char tag[16];
b3353e
+    const EVP_INIT_TEST_st *t = &evp_init_tests[idx];
b3353e
+    EVP_CIPHER_CTX *ctx = NULL;
b3353e
+    const EVP_CIPHER *type = NULL;
b3353e
+    size_t taglen = sizeof(tag);
b3353e
+    char *errmsg = NULL;
b3353e
+
b3353e
+    ctx = EVP_CIPHER_CTX_new();
b3353e
+    if (ctx == NULL) {
b3353e
+        errmsg = "CTX_ALLOC";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_ptr(type = EVP_get_cipherbyname(t->cipher))) {
b3353e
+        errmsg = "GET_CIPHERBYNAME";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CipherInit_ex(ctx, type, NULL, NULL, NULL, t->initenc))) {
b3353e
+        errmsg = "EMPTY_ENC_INIT";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CIPHER_CTX_set_padding(ctx, 0))) {
b3353e
+        errmsg = "PADDING";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (t->keyfirst && !TEST_true(EVP_CipherInit_ex(ctx, NULL, NULL, t->key, NULL, -1))) {
b3353e
+        errmsg = "KEY_INIT (before iv)";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!evp_init_seq_set_iv(ctx, t)) {
b3353e
+        errmsg = "IV_INIT";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (t->keyfirst == 0 &&  !TEST_true(EVP_CipherInit_ex(ctx, NULL, NULL, t->key, NULL, -1))) {
b3353e
+        errmsg = "KEY_INIT (after iv)";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CipherInit_ex(ctx, NULL, NULL, NULL, NULL, t->finalenc))) {
b3353e
+        errmsg = "FINAL_ENC_INIT";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CipherUpdate(ctx, outbuf, &outlen1, t->input, t->inlen))) {
b3353e
+        errmsg = "CIPHER_UPDATE";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (t->finalenc == 0 && t->tag != NULL) {
b3353e
+        /* Set expected tag */
b3353e
+        if (!TEST_true(EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_SET_TAG,
b3353e
+                                           t->taglen, (void *)t->tag))) {
b3353e
+            errmsg = "SET_TAG";
b3353e
+            goto err;
b3353e
+        }
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CipherFinal_ex(ctx, outbuf + outlen1, &outlen2))) {
b3353e
+        errmsg = "CIPHER_FINAL";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_mem_eq(t->expected, t->expectedlen, outbuf, outlen1 + outlen2)) {
b3353e
+        errmsg = "WRONG_RESULT";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (t->finalenc != 0 && t->tag != NULL) {
b3353e
+        if (!TEST_true(EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_GET_TAG, taglen, tag))) {
b3353e
+            errmsg = "GET_TAG";
b3353e
+            goto err;
b3353e
+        }
b3353e
+        if (!TEST_mem_eq(t->tag, t->taglen, tag, taglen)) {
b3353e
+            errmsg = "TAG_ERROR";
b3353e
+            goto err;
b3353e
+        }
b3353e
+    }
b3353e
+    testresult = 1;
b3353e
+ err:
b3353e
+    if (errmsg != NULL)
b3353e
+        TEST_info("evp_init_test %d: %s", idx, errmsg);
b3353e
+    EVP_CIPHER_CTX_free(ctx);
b3353e
+    return testresult;
b3353e
+}
b3353e
+
b3353e
+typedef struct {
b3353e
+    const unsigned char *input;
b3353e
+    const unsigned char *expected;
b3353e
+    size_t inlen;
b3353e
+    size_t expectedlen;
b3353e
+    int enc;
b3353e
+} EVP_RESET_TEST_st;
b3353e
+
b3353e
+static const EVP_RESET_TEST_st evp_reset_tests[] = {
b3353e
+    {
b3353e
+        cfbPlaintext, cfbCiphertext,
b3353e
+        sizeof(cfbPlaintext), sizeof(cfbCiphertext), 1
b3353e
+    },
b3353e
+    {
b3353e
+        cfbCiphertext, cfbPlaintext,
b3353e
+        sizeof(cfbCiphertext), sizeof(cfbPlaintext), 0
b3353e
+    }
b3353e
+};
b3353e
+
b3353e
+/*
b3353e
+ * Test a reset of a cipher via EVP_CipherInit_ex after the cipher has already
b3353e
+ * been used.
b3353e
+ */
b3353e
+static int test_evp_reset(int idx)
b3353e
+{
b3353e
+    const EVP_RESET_TEST_st *t = &evp_reset_tests[idx];
b3353e
+    int outlen1, outlen2;
b3353e
+    int testresult = 0;
b3353e
+    unsigned char outbuf[1024];
b3353e
+    EVP_CIPHER_CTX *ctx = NULL;
b3353e
+    const EVP_CIPHER *type = NULL;
b3353e
+    char *errmsg = NULL;
b3353e
+
b3353e
+    if (!TEST_ptr(ctx = EVP_CIPHER_CTX_new())) {
b3353e
+        errmsg = "CTX_ALLOC";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_ptr(type = EVP_get_cipherbyname("aes-128-cfb"))) {
b3353e
+        errmsg = "GET_CIPHERBYNAME";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CipherInit_ex(ctx, type, NULL, kCFBDefaultKey, iCFBIV, t->enc))) {
b3353e
+        errmsg = "CIPHER_INIT";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CIPHER_CTX_set_padding(ctx, 0))) {
b3353e
+        errmsg = "PADDING";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CipherUpdate(ctx, outbuf, &outlen1, t->input, t->inlen))) {
b3353e
+        errmsg = "CIPHER_UPDATE";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CipherFinal_ex(ctx, outbuf + outlen1, &outlen2))) {
b3353e
+        errmsg = "CIPHER_FINAL";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_mem_eq(t->expected, t->expectedlen, outbuf, outlen1 + outlen2)) {
b3353e
+        errmsg = "WRONG_RESULT";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CipherInit_ex(ctx, NULL, NULL, NULL, NULL, -1))) {
b3353e
+        errmsg = "CIPHER_REINIT";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CipherUpdate(ctx, outbuf, &outlen1, t->input, t->inlen))) {
b3353e
+        errmsg = "CIPHER_UPDATE (reinit)";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CipherFinal_ex(ctx, outbuf + outlen1, &outlen2))) {
b3353e
+        errmsg = "CIPHER_FINAL (reinit)";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_mem_eq(t->expected, t->expectedlen, outbuf, outlen1 + outlen2)) {
b3353e
+        errmsg = "WRONG_RESULT (reinit)";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    testresult = 1;
b3353e
+ err:
b3353e
+    if (errmsg != NULL)
b3353e
+        TEST_info("test_evp_reset %d: %s", idx, errmsg);
b3353e
+    EVP_CIPHER_CTX_free(ctx);
b3353e
+    return testresult;
b3353e
+}
b3353e
+
b3353e
+typedef struct {
b3353e
+    const unsigned char *iv1;
b3353e
+    const unsigned char *iv2;
b3353e
+    const unsigned char *expected1;
b3353e
+    const unsigned char *expected2;
b3353e
+    const unsigned char *tag1;
b3353e
+    const unsigned char *tag2;
b3353e
+    size_t ivlen1;
b3353e
+    size_t ivlen2;
b3353e
+    size_t expectedlen1;
b3353e
+    size_t expectedlen2;
b3353e
+} TEST_GCM_IV_REINIT_st;
b3353e
+
b3353e
+static const TEST_GCM_IV_REINIT_st gcm_reinit_tests[] = {
b3353e
+    {
b3353e
+        iGCMResetIV1, iGCMResetIV2, gcmResetCiphertext1, gcmResetCiphertext2,
b3353e
+        gcmResetTag1, gcmResetTag2, sizeof(iGCMResetIV1), sizeof(iGCMResetIV2),
b3353e
+        sizeof(gcmResetCiphertext1), sizeof(gcmResetCiphertext2)
b3353e
+    },
b3353e
+    {
b3353e
+        iGCMResetIV2, iGCMResetIV1, gcmResetCiphertext2, gcmResetCiphertext1,
b3353e
+        gcmResetTag2, gcmResetTag1, sizeof(iGCMResetIV2), sizeof(iGCMResetIV1),
b3353e
+        sizeof(gcmResetCiphertext2), sizeof(gcmResetCiphertext1)
b3353e
+    }
b3353e
+};
b3353e
+
b3353e
+static int test_gcm_reinit(int idx)
b3353e
+{
b3353e
+    int outlen1, outlen2, outlen3;
b3353e
+    int testresult = 0;
b3353e
+    unsigned char outbuf[1024];
b3353e
+    unsigned char tag[16];
b3353e
+    const TEST_GCM_IV_REINIT_st *t = &gcm_reinit_tests[idx];
b3353e
+    EVP_CIPHER_CTX *ctx = NULL;
b3353e
+    const EVP_CIPHER *type = NULL;
b3353e
+    size_t taglen = sizeof(tag);
b3353e
+    char *errmsg = NULL;
b3353e
+
b3353e
+    if (!TEST_ptr(ctx = EVP_CIPHER_CTX_new())) {
b3353e
+        errmsg = "CTX_ALLOC";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_ptr(type = EVP_get_cipherbyname("aes-256-gcm"))) {
b3353e
+        errmsg = "GET_CIPHERBYNAME";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CipherInit_ex(ctx, type, NULL, NULL, NULL, 1))) {
b3353e
+        errmsg = "ENC_INIT";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_GCM_SET_IVLEN, t->ivlen1, NULL))) {
b3353e
+        errmsg = "SET_IVLEN1";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CipherInit_ex(ctx, NULL, NULL, kGCMResetKey, t->iv1, 1))) {
b3353e
+        errmsg = "SET_IV1";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CipherUpdate(ctx, NULL, &outlen3, gcmAAD, sizeof(gcmAAD)))) {
b3353e
+        errmsg = "AAD1";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    EVP_CIPHER_CTX_set_padding(ctx, 0);
b3353e
+    if (!TEST_true(EVP_CipherUpdate(ctx, outbuf, &outlen1, gcmResetPlaintext,
b3353e
+                                    sizeof(gcmResetPlaintext)))) {
b3353e
+        errmsg = "CIPHER_UPDATE1";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CipherFinal_ex(ctx, outbuf + outlen1, &outlen2))) {
b3353e
+        errmsg = "CIPHER_FINAL1";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_mem_eq(t->expected1, t->expectedlen1, outbuf, outlen1 + outlen2)) {
b3353e
+        errmsg = "WRONG_RESULT1";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_GET_TAG, taglen, tag))) {
b3353e
+        errmsg = "GET_TAG1";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_mem_eq(t->tag1, taglen, tag, taglen)) {
b3353e
+        errmsg = "TAG_ERROR1";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    /* Now reinit */
b3353e
+    if (!TEST_true(EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_GCM_SET_IVLEN, t->ivlen2, NULL))) {
b3353e
+        errmsg = "SET_IVLEN2";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CipherInit_ex(ctx, NULL, NULL, NULL, t->iv2, -1))) {
b3353e
+        errmsg = "SET_IV2";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CipherUpdate(ctx, NULL, &outlen3, gcmAAD, sizeof(gcmAAD)))) {
b3353e
+        errmsg = "AAD2";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CipherUpdate(ctx, outbuf, &outlen1, gcmResetPlaintext,
b3353e
+                                    sizeof(gcmResetPlaintext)))) {
b3353e
+        errmsg = "CIPHER_UPDATE2";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CipherFinal_ex(ctx, outbuf + outlen1, &outlen2))) {
b3353e
+        errmsg = "CIPHER_FINAL2";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_mem_eq(t->expected2, t->expectedlen2, outbuf, outlen1 + outlen2)) {
b3353e
+        errmsg = "WRONG_RESULT2";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_true(EVP_CIPHER_CTX_ctrl(ctx, EVP_CTRL_AEAD_GET_TAG, taglen, tag))) {
b3353e
+        errmsg = "GET_TAG2";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    if (!TEST_mem_eq(t->tag2, taglen, tag, taglen)) {
b3353e
+        errmsg = "TAG_ERROR2";
b3353e
+        goto err;
b3353e
+    }
b3353e
+    testresult = 1;
b3353e
+ err:
b3353e
+    if (errmsg != NULL)
b3353e
+        TEST_info("evp_init_test %d: %s", idx, errmsg);
b3353e
+    EVP_CIPHER_CTX_free(ctx);
b3353e
+    return testresult;
b3353e
+}
b3353e
+
b3353e
+
b3353e
+
b3353e
 static APK_DATA keydata[] = {
b3353e
     {kExampleRSAKeyDER, sizeof(kExampleRSAKeyDER), EVP_PKEY_RSA},
b3353e
     {kExampleRSAKeyPKCS8, sizeof(kExampleRSAKeyPKCS8), EVP_PKEY_RSA},
b3353e
@@ -1208,6 +1678,8 @@ int setup_tests(void)
b3353e
 #ifndef OPENSSL_NO_DH
b3353e
     ADD_TEST(test_EVP_PKEY_set1_DH);
b3353e
 #endif
b3353e
-
b3353e
+    ADD_ALL_TESTS(test_evp_init_seq, OSSL_NELEM(evp_init_tests));
b3353e
+    ADD_ALL_TESTS(test_evp_reset, OSSL_NELEM(evp_reset_tests));
b3353e
+    ADD_ALL_TESTS(test_gcm_reinit, OSSL_NELEM(gcm_reinit_tests));
b3353e
     return 1;
b3353e
 }