3 from scapy.layers.ipsec import ESP
4 from scapy.layers.inet import IP, ICMP, UDP
5 from scapy.layers.inet6 import IPv6
6 from scapy.layers.l2 import Ether
7 from scapy.packet import Raw
9 from parameterized import parameterized
10 from framework import VppTestRunner
11 from template_ipsec import IpsecTra46Tests, IpsecTun46Tests, TemplateIpsec, \
12 IpsecTcpTests, IpsecTun4Tests, IpsecTra4Tests, config_tra_params, \
13 config_tun_params, IPsecIPv4Params, IPsecIPv6Params, \
14 IpsecTra4, IpsecTun4, IpsecTra6, IpsecTun6, \
15 IpsecTun6HandoffTests, IpsecTun4HandoffTests, \
17 from vpp_ipsec import VppIpsecSpd, VppIpsecSpdEntry, VppIpsecSA,\
19 from vpp_ip_route import VppIpRoute, VppRoutePath
20 from vpp_ip import DpoProto
21 from vpp_papi import VppEnum
24 engines_supporting_chain_bufs = ["openssl", "async"]
25 engines = ["ia32", "ipsecmb", "openssl"]
28 class ConfigIpsecESP(TemplateIpsec):
30 tra4_encrypt_node_name = "esp4-encrypt"
31 tra4_decrypt_node_name = ["esp4-decrypt", "esp4-decrypt-post"]
32 tra6_encrypt_node_name = "esp6-encrypt"
33 tra6_decrypt_node_name = ["esp6-decrypt", "esp6-decrypt-post"]
34 tun4_encrypt_node_name = "esp4-encrypt"
35 tun4_decrypt_node_name = ["esp4-decrypt", "esp4-decrypt-post"]
36 tun6_encrypt_node_name = "esp6-encrypt"
37 tun6_decrypt_node_name = ["esp6-decrypt", "esp6-decrypt-post"]
41 super(ConfigIpsecESP, cls).setUpClass()
44 def tearDownClass(cls):
45 super(ConfigIpsecESP, cls).tearDownClass()
48 super(ConfigIpsecESP, self).setUp()
51 super(ConfigIpsecESP, self).tearDown()
53 def config_anti_replay(self, params):
54 saf = VppEnum.vl_api_ipsec_sad_flags_t
56 p.flags |= saf.IPSEC_API_SAD_FLAG_USE_ANTI_REPLAY
58 def config_network(self, params):
60 self.tun_if = self.pg0
61 self.tra_if = self.pg2
62 self.logger.info(self.vapi.ppcli("show int addr"))
64 self.tra_spd = VppIpsecSpd(self, self.tra_spd_id)
65 self.tra_spd.add_vpp_config()
66 self.net_objs.append(self.tra_spd)
67 self.tun_spd = VppIpsecSpd(self, self.tun_spd_id)
68 self.tun_spd.add_vpp_config()
69 self.net_objs.append(self.tun_spd)
71 b = VppIpsecSpdItfBinding(self, self.tun_spd,
74 self.net_objs.append(b)
76 b = VppIpsecSpdItfBinding(self, self.tra_spd,
79 self.net_objs.append(b)
82 self.config_esp_tra(p)
83 config_tra_params(p, self.encryption_type)
85 self.config_esp_tun(p)
86 config_tun_params(p, self.encryption_type, self.tun_if)
89 d = DpoProto.DPO_PROTO_IP6 if p.is_ipv6 else DpoProto.DPO_PROTO_IP4
90 r = VppIpRoute(self, p.remote_tun_if_host, p.addr_len,
91 [VppRoutePath(self.tun_if.remote_addr[p.addr_type],
95 self.net_objs.append(r)
97 self.logger.info(self.vapi.ppcli("show ipsec all"))
99 def unconfig_network(self):
100 for o in reversed(self.net_objs):
101 o.remove_vpp_config()
104 def config_esp_tun(self, params):
105 addr_type = params.addr_type
106 scapy_tun_sa_id = params.scapy_tun_sa_id
107 scapy_tun_spi = params.scapy_tun_spi
108 vpp_tun_sa_id = params.vpp_tun_sa_id
109 vpp_tun_spi = params.vpp_tun_spi
110 auth_algo_vpp_id = params.auth_algo_vpp_id
111 auth_key = params.auth_key
112 crypt_algo_vpp_id = params.crypt_algo_vpp_id
113 crypt_key = params.crypt_key
114 remote_tun_if_host = params.remote_tun_if_host
115 addr_any = params.addr_any
116 addr_bcast = params.addr_bcast
117 e = VppEnum.vl_api_ipsec_spd_action_t
119 tun_flags = params.tun_flags
123 params.tun_sa_in = VppIpsecSA(self, scapy_tun_sa_id, scapy_tun_spi,
124 auth_algo_vpp_id, auth_key,
125 crypt_algo_vpp_id, crypt_key,
126 self.vpp_esp_protocol,
127 self.tun_if.local_addr[addr_type],
128 self.tun_if.remote_addr[addr_type],
133 hop_limit=params.outer_hop_limit)
134 params.tun_sa_out = VppIpsecSA(self, vpp_tun_sa_id, vpp_tun_spi,
135 auth_algo_vpp_id, auth_key,
136 crypt_algo_vpp_id, crypt_key,
137 self.vpp_esp_protocol,
138 self.tun_if.remote_addr[addr_type],
139 self.tun_if.local_addr[addr_type],
144 hop_limit=params.outer_hop_limit)
145 objs.append(params.tun_sa_in)
146 objs.append(params.tun_sa_out)
148 params.spd_policy_in_any = VppIpsecSpdEntry(self, self.tun_spd,
150 addr_any, addr_bcast,
151 addr_any, addr_bcast,
153 params.spd_policy_out_any = VppIpsecSpdEntry(self, self.tun_spd,
155 addr_any, addr_bcast,
156 addr_any, addr_bcast,
159 objs.append(params.spd_policy_out_any)
160 objs.append(params.spd_policy_in_any)
162 objs.append(VppIpsecSpdEntry(self, self.tun_spd, vpp_tun_sa_id,
163 remote_tun_if_host, remote_tun_if_host,
164 self.pg1.remote_addr[addr_type],
165 self.pg1.remote_addr[addr_type],
168 policy=e.IPSEC_API_SPD_ACTION_PROTECT,
170 objs.append(VppIpsecSpdEntry(self, self.tun_spd, scapy_tun_sa_id,
171 self.pg1.remote_addr[addr_type],
172 self.pg1.remote_addr[addr_type],
173 remote_tun_if_host, remote_tun_if_host,
175 policy=e.IPSEC_API_SPD_ACTION_PROTECT,
177 objs.append(VppIpsecSpdEntry(self, self.tun_spd, vpp_tun_sa_id,
178 remote_tun_if_host, remote_tun_if_host,
179 self.pg0.local_addr[addr_type],
180 self.pg0.local_addr[addr_type],
183 policy=e.IPSEC_API_SPD_ACTION_PROTECT,
185 objs.append(VppIpsecSpdEntry(self, self.tun_spd, scapy_tun_sa_id,
186 self.pg0.local_addr[addr_type],
187 self.pg0.local_addr[addr_type],
188 remote_tun_if_host, remote_tun_if_host,
190 policy=e.IPSEC_API_SPD_ACTION_PROTECT,
194 self.net_objs = self.net_objs + objs
196 def config_esp_tra(self, params):
197 addr_type = params.addr_type
198 scapy_tra_sa_id = params.scapy_tra_sa_id
199 scapy_tra_spi = params.scapy_tra_spi
200 vpp_tra_sa_id = params.vpp_tra_sa_id
201 vpp_tra_spi = params.vpp_tra_spi
202 auth_algo_vpp_id = params.auth_algo_vpp_id
203 auth_key = params.auth_key
204 crypt_algo_vpp_id = params.crypt_algo_vpp_id
205 crypt_key = params.crypt_key
206 addr_any = params.addr_any
207 addr_bcast = params.addr_bcast
208 e = VppEnum.vl_api_ipsec_spd_action_t
213 params.tra_sa_in = VppIpsecSA(self, scapy_tra_sa_id, scapy_tra_spi,
214 auth_algo_vpp_id, auth_key,
215 crypt_algo_vpp_id, crypt_key,
216 self.vpp_esp_protocol,
219 params.tra_sa_out = VppIpsecSA(self, vpp_tra_sa_id, vpp_tra_spi,
220 auth_algo_vpp_id, auth_key,
221 crypt_algo_vpp_id, crypt_key,
222 self.vpp_esp_protocol,
225 objs.append(params.tra_sa_in)
226 objs.append(params.tra_sa_out)
228 objs.append(VppIpsecSpdEntry(self, self.tra_spd, vpp_tra_sa_id,
229 addr_any, addr_bcast,
230 addr_any, addr_bcast,
232 objs.append(VppIpsecSpdEntry(self, self.tra_spd, vpp_tra_sa_id,
233 addr_any, addr_bcast,
234 addr_any, addr_bcast,
237 objs.append(VppIpsecSpdEntry(self, self.tra_spd, vpp_tra_sa_id,
238 self.tra_if.local_addr[addr_type],
239 self.tra_if.local_addr[addr_type],
240 self.tra_if.remote_addr[addr_type],
241 self.tra_if.remote_addr[addr_type],
243 policy=e.IPSEC_API_SPD_ACTION_PROTECT,
245 objs.append(VppIpsecSpdEntry(self, self.tra_spd, scapy_tra_sa_id,
246 self.tra_if.local_addr[addr_type],
247 self.tra_if.local_addr[addr_type],
248 self.tra_if.remote_addr[addr_type],
249 self.tra_if.remote_addr[addr_type],
250 0, policy=e.IPSEC_API_SPD_ACTION_PROTECT,
254 self.net_objs = self.net_objs + objs
257 class TemplateIpsecEsp(ConfigIpsecESP):
259 Basic test for ipsec esp sanity - tunnel and transport modes.
261 Below 4 cases are covered as part of this test
262 1) ipsec esp v4 transport basic test - IPv4 Transport mode
263 scenario using HMAC-SHA1-96 integrity algo
264 2) ipsec esp v4 transport burst test
265 Above test for 257 pkts
266 3) ipsec esp 4o4 tunnel basic test - IPv4 Tunnel mode
267 scenario using HMAC-SHA1-96 integrity algo
268 4) ipsec esp 4o4 tunnel burst test
269 Above test for 257 pkts
274 |pg2| <-------> |VPP|
279 --- encrypt --- plain ---
280 |pg0| <------- |VPP| <------ |pg1|
283 --- decrypt --- plain ---
284 |pg0| -------> |VPP| ------> |pg1|
290 super(TemplateIpsecEsp, cls).setUpClass()
293 def tearDownClass(cls):
294 super(TemplateIpsecEsp, cls).tearDownClass()
297 super(TemplateIpsecEsp, self).setUp()
298 self.config_anti_replay(self.params.values())
299 self.config_network(self.params.values())
302 self.unconfig_network()
303 super(TemplateIpsecEsp, self).tearDown()
306 class TestIpsecEsp1(TemplateIpsecEsp, IpsecTra46Tests,
307 IpsecTun46Tests, IpsecTra6ExtTests):
308 """ Ipsec ESP - TUN & TRA tests """
312 super(TestIpsecEsp1, cls).setUpClass()
315 def tearDownClass(cls):
316 super(TestIpsecEsp1, cls).tearDownClass()
319 super(TestIpsecEsp1, self).setUp()
322 super(TestIpsecEsp1, self).tearDown()
324 def test_tun_46(self):
325 """ ipsec 4o6 tunnel """
326 # add an SPD entry to direct 2.2.2.2 to the v6 tunnel SA
327 p6 = self.ipv6_params
328 p4 = self.ipv4_params
330 p6.remote_tun_if_host4 = "2.2.2.2"
331 e = VppEnum.vl_api_ipsec_spd_action_t
333 VppIpsecSpdEntry(self,
336 self.pg1.remote_addr[p4.addr_type],
337 self.pg1.remote_addr[p4.addr_type],
338 p6.remote_tun_if_host4,
339 p6.remote_tun_if_host4,
342 policy=e.IPSEC_API_SPD_ACTION_PROTECT,
343 is_outbound=1).add_vpp_config()
344 VppIpRoute(self, p6.remote_tun_if_host4, p4.addr_len,
345 [VppRoutePath(self.tun_if.remote_addr[p4.addr_type],
346 0xffffffff)]).add_vpp_config()
348 old_name = self.tun6_encrypt_node_name
349 self.tun6_encrypt_node_name = "esp4-encrypt"
351 self.verify_tun_46(p6, count=63)
352 self.tun6_encrypt_node_name = old_name
354 def test_tun_64(self):
355 """ ipsec 6o4 tunnel """
356 # add an SPD entry to direct 4444::4 to the v4 tunnel SA
357 p6 = self.ipv6_params
358 p4 = self.ipv4_params
360 p4.remote_tun_if_host6 = "4444::4"
361 e = VppEnum.vl_api_ipsec_spd_action_t
363 VppIpsecSpdEntry(self,
366 self.pg1.remote_addr[p6.addr_type],
367 self.pg1.remote_addr[p6.addr_type],
368 p4.remote_tun_if_host6,
369 p4.remote_tun_if_host6,
372 policy=e.IPSEC_API_SPD_ACTION_PROTECT,
373 is_outbound=1).add_vpp_config()
374 d = DpoProto.DPO_PROTO_IP6
375 VppIpRoute(self, p4.remote_tun_if_host6, p6.addr_len,
376 [VppRoutePath(self.tun_if.remote_addr[p6.addr_type],
378 proto=d)]).add_vpp_config()
380 old_name = self.tun4_encrypt_node_name
381 self.tun4_encrypt_node_name = "esp6-encrypt"
382 self.verify_tun_64(p4, count=63)
383 self.tun4_encrypt_node_name = old_name
386 class TestIpsecEspTun(TemplateIpsecEsp, IpsecTun46Tests):
387 """ Ipsec ESP - TUN encap tests """
390 self.ipv4_params = IPsecIPv4Params()
391 self.ipv6_params = IPsecIPv6Params()
393 c = (VppEnum.vl_api_tunnel_encap_decap_flags_t.
394 TUNNEL_API_ENCAP_DECAP_FLAG_ENCAP_COPY_DSCP)
395 c1 = c | (VppEnum.vl_api_tunnel_encap_decap_flags_t.
396 TUNNEL_API_ENCAP_DECAP_FLAG_ENCAP_COPY_ECN)
398 self.ipv4_params.tun_flags = c
399 self.ipv6_params.tun_flags = c1
401 super(TestIpsecEspTun, self).setUp()
403 def gen_pkts(self, sw_intf, src, dst, count=1, payload_size=54):
404 # set the DSCP + ECN - flags are set to copy only DSCP
405 return [Ether(src=sw_intf.remote_mac, dst=sw_intf.local_mac) /
406 IP(src=src, dst=dst, tos=5) /
407 UDP(sport=4444, dport=4444) /
408 Raw(b'X' * payload_size)
409 for i in range(count)]
411 def gen_pkts6(self, p, sw_intf, src, dst, count=1, payload_size=54):
412 # set the DSCP + ECN - flags are set to copy both
413 return [Ether(src=sw_intf.remote_mac, dst=sw_intf.local_mac) /
414 IPv6(src=src, dst=dst, tc=5) /
415 UDP(sport=4444, dport=4444) /
416 Raw(b'X' * payload_size)
417 for i in range(count)]
419 def verify_encrypted(self, p, sa, rxs):
420 # just check that only the DSCP is copied
422 self.assertEqual(rx[IP].tos, 4)
424 def verify_encrypted6(self, p, sa, rxs):
425 # just check that the DSCP & ECN are copied
427 self.assertEqual(rx[IPv6].tc, 5)
430 class TestIpsecEspTun2(TemplateIpsecEsp, IpsecTun46Tests):
431 """ Ipsec ESP - TUN DSCP tests """
434 self.ipv4_params = IPsecIPv4Params()
435 self.ipv6_params = IPsecIPv6Params()
437 self.ipv4_params.dscp = VppEnum.vl_api_ip_dscp_t.IP_API_DSCP_EF
438 self.ipv6_params.dscp = VppEnum.vl_api_ip_dscp_t.IP_API_DSCP_AF11
440 super(TestIpsecEspTun2, self).setUp()
442 def gen_pkts(self, sw_intf, src, dst, count=1, payload_size=54):
443 return [Ether(src=sw_intf.remote_mac, dst=sw_intf.local_mac) /
444 IP(src=src, dst=dst) /
445 UDP(sport=4444, dport=4444) /
446 Raw(b'X' * payload_size)
447 for i in range(count)]
449 def gen_pkts6(self, p, sw_intf, src, dst, count=1, payload_size=54):
450 return [Ether(src=sw_intf.remote_mac, dst=sw_intf.local_mac) /
451 IPv6(src=src, dst=dst) /
452 UDP(sport=4444, dport=4444) /
453 Raw(b'X' * payload_size)
454 for i in range(count)]
456 def verify_encrypted(self, p, sa, rxs):
457 # just check that only the DSCP is set
459 self.assertEqual(rx[IP].tos,
460 VppEnum.vl_api_ip_dscp_t.IP_API_DSCP_EF << 2)
462 def verify_encrypted6(self, p, sa, rxs):
463 # just check that the DSCP is set
465 self.assertEqual(rx[IPv6].tc,
466 VppEnum.vl_api_ip_dscp_t.IP_API_DSCP_AF11 << 2)
469 class TestIpsecEsp2(TemplateIpsecEsp, IpsecTcpTests):
470 """ Ipsec ESP - TCP tests """
474 class TestIpsecEspAsync(TemplateIpsecEsp):
475 """ Ipsec ESP - Aysnc tests """
480 super(TestIpsecEspAsync, self).setUp()
482 self.p_sync = IPsecIPv4Params()
484 self.p_sync.crypt_algo_vpp_id = (VppEnum.vl_api_ipsec_crypto_alg_t.
485 IPSEC_API_CRYPTO_ALG_AES_CBC_256)
486 self.p_sync.crypt_algo = 'AES-CBC' # scapy name
487 self.p_sync.crypt_key = b'JPjyOWBeVEQiMe7hJPjyOWBeVEQiMe7h'
489 self.p_sync.scapy_tun_sa_id += 0xf0000
490 self.p_sync.scapy_tun_spi += 0xf0000
491 self.p_sync.vpp_tun_sa_id += 0xf0000
492 self.p_sync.vpp_tun_spi += 0xf0000
493 self.p_sync.remote_tun_if_host = "2.2.2.2"
494 e = VppEnum.vl_api_ipsec_spd_action_t
496 self.p_sync.sa = VppIpsecSA(
498 self.p_sync.vpp_tun_sa_id,
499 self.p_sync.vpp_tun_spi,
500 self.p_sync.auth_algo_vpp_id,
501 self.p_sync.auth_key,
502 self.p_sync.crypt_algo_vpp_id,
503 self.p_sync.crypt_key,
504 self.vpp_esp_protocol,
505 self.tun_if.local_addr[self.p_sync.addr_type],
506 self.tun_if.remote_addr[self.p_sync.addr_type]).add_vpp_config()
507 self.p_sync.spd = VppIpsecSpdEntry(
510 self.p_sync.vpp_tun_sa_id,
511 self.pg1.remote_addr[self.p_sync.addr_type],
512 self.pg1.remote_addr[self.p_sync.addr_type],
513 self.p_sync.remote_tun_if_host,
514 self.p_sync.remote_tun_if_host,
517 policy=e.IPSEC_API_SPD_ACTION_PROTECT,
518 is_outbound=1).add_vpp_config()
520 self.p_sync.remote_tun_if_host,
521 self.p_sync.addr_len,
523 self.tun_if.remote_addr[self.p_sync.addr_type],
524 0xffffffff)]).add_vpp_config()
525 config_tun_params(self.p_sync, self.encryption_type, self.tun_if)
527 self.p_async = IPsecIPv4Params()
529 self.p_async.crypt_algo_vpp_id = (VppEnum.vl_api_ipsec_crypto_alg_t.
530 IPSEC_API_CRYPTO_ALG_AES_GCM_256)
531 self.p_async.auth_algo_vpp_id = (VppEnum.vl_api_ipsec_integ_alg_t.
532 IPSEC_API_INTEG_ALG_NONE)
533 self.p_async.crypt_algo = 'AES-GCM' # scapy name
534 self.p_async.crypt_key = b'JPjyOWBeVEQiMe7hJPjyOWBeVEQiMe7h'
535 self.p_async.auth_algo = 'NULL'
537 self.p_async.scapy_tun_sa_id += 0xe0000
538 self.p_async.scapy_tun_spi += 0xe0000
539 self.p_async.vpp_tun_sa_id += 0xe0000
540 self.p_async.vpp_tun_spi += 0xe0000
541 self.p_async.remote_tun_if_host = "2.2.2.3"
543 iflags = VppEnum.vl_api_ipsec_sad_flags_t
544 self.p_async.flags = (iflags.IPSEC_API_SAD_FLAG_USE_ESN |
545 iflags.IPSEC_API_SAD_FLAG_USE_ANTI_REPLAY |
546 iflags.IPSEC_API_SAD_FLAG_ASYNC)
548 self.p_async.sa = VppIpsecSA(
550 self.p_async.vpp_tun_sa_id,
551 self.p_async.vpp_tun_spi,
552 self.p_async.auth_algo_vpp_id,
553 self.p_async.auth_key,
554 self.p_async.crypt_algo_vpp_id,
555 self.p_async.crypt_key,
556 self.vpp_esp_protocol,
557 self.tun_if.local_addr[self.p_async.addr_type],
558 self.tun_if.remote_addr[self.p_async.addr_type],
559 flags=self.p_async.flags).add_vpp_config()
560 self.p_async.spd = VppIpsecSpdEntry(
563 self.p_async.vpp_tun_sa_id,
564 self.pg1.remote_addr[self.p_async.addr_type],
565 self.pg1.remote_addr[self.p_async.addr_type],
566 self.p_async.remote_tun_if_host,
567 self.p_async.remote_tun_if_host,
570 policy=e.IPSEC_API_SPD_ACTION_PROTECT,
571 is_outbound=1).add_vpp_config()
573 self.p_async.remote_tun_if_host,
574 self.p_async.addr_len,
576 self.tun_if.remote_addr[self.p_async.addr_type],
577 0xffffffff)]).add_vpp_config()
578 config_tun_params(self.p_async, self.encryption_type, self.tun_if)
580 def test_dual_stream(self):
581 """ Alternating SAs """
582 p = self.params[self.p_sync.addr_type]
583 self.vapi.ipsec_set_async_mode(async_enable=True)
585 pkts = [(Ether(src=self.pg1.remote_mac, dst=self.pg1.local_mac) /
586 IP(src=self.pg1.remote_ip4,
587 dst=self.p_sync.remote_tun_if_host) /
588 UDP(sport=4444, dport=4444) /
590 (Ether(src=self.pg1.remote_mac, dst=self.pg1.local_mac) /
591 IP(src=self.pg1.remote_ip4,
592 dst=p.remote_tun_if_host) /
593 UDP(sport=4444, dport=4444) /
597 rxs = self.send_and_expect(self.pg1, pkts, self.pg0)
599 self.assertEqual(len(rxs), len(pkts))
602 if rx[ESP].spi == p.scapy_tun_spi:
603 decrypted = p.vpp_tun_sa.decrypt(rx[IP])
604 elif rx[ESP].spi == self.p_sync.vpp_tun_spi:
605 decrypted = self.p_sync.scapy_tun_sa.decrypt(rx[IP])
608 self.assertTrue(False)
610 self.p_sync.spd.remove_vpp_config()
611 self.p_sync.sa.remove_vpp_config()
612 self.p_async.spd.remove_vpp_config()
613 self.p_async.sa.remove_vpp_config()
614 self.vapi.ipsec_set_async_mode(async_enable=False)
616 def test_sync_async_noop_stream(self):
617 """ Alternating SAs sync/async/noop """
618 p = self.params[self.p_sync.addr_type]
620 # first pin the default/noop SA to worker 0
621 pkts = [(Ether(src=self.pg1.remote_mac, dst=self.pg1.local_mac) /
622 IP(src=self.pg1.remote_ip4,
623 dst=p.remote_tun_if_host) /
624 UDP(sport=4444, dport=4444) /
626 rxs = self.send_and_expect(self.pg1, pkts, self.pg0, worker=0)
628 self.logger.info(self.vapi.cli("sh ipsec sa"))
629 self.logger.info(self.vapi.cli("sh crypto async status"))
631 # then use all the other SAs on worker 1.
632 # some will handoff, other take the sync and async paths
633 pkts = [(Ether(src=self.pg1.remote_mac, dst=self.pg1.local_mac) /
634 IP(src=self.pg1.remote_ip4,
635 dst=self.p_sync.remote_tun_if_host) /
636 UDP(sport=4444, dport=4444) /
638 (Ether(src=self.pg1.remote_mac, dst=self.pg1.local_mac) /
639 IP(src=self.pg1.remote_ip4,
640 dst=p.remote_tun_if_host) /
641 UDP(sport=4444, dport=4444) /
643 (Ether(src=self.pg1.remote_mac, dst=self.pg1.local_mac) /
644 IP(src=self.pg1.remote_ip4,
645 dst=self.p_async.remote_tun_if_host) /
646 UDP(sport=4444, dport=4444) /
650 rxs = self.send_and_expect(self.pg1, pkts, self.pg0, worker=1)
652 self.assertEqual(len(rxs), len(pkts))
655 if rx[ESP].spi == p.scapy_tun_spi:
656 decrypted = p.vpp_tun_sa.decrypt(rx[IP])
657 elif rx[ESP].spi == self.p_sync.vpp_tun_spi:
658 decrypted = self.p_sync.scapy_tun_sa.decrypt(rx[IP])
659 elif rx[ESP].spi == self.p_async.vpp_tun_spi:
660 decrypted = self.p_async.scapy_tun_sa.decrypt(rx[IP])
663 self.assertTrue(False)
665 self.p_sync.spd.remove_vpp_config()
666 self.p_sync.sa.remove_vpp_config()
667 self.p_async.spd.remove_vpp_config()
668 self.p_async.sa.remove_vpp_config()
670 # async mode should have been disabled now that there are
671 # no async SAs. there's no API for this, so a reluctant
673 self.assertTrue("DISABLED" in self.vapi.cli("sh crypto async status"))
676 class TestIpsecEspHandoff(TemplateIpsecEsp,
677 IpsecTun6HandoffTests,
678 IpsecTun4HandoffTests):
679 """ Ipsec ESP - handoff tests """
683 class TemplateIpsecEspUdp(ConfigIpsecESP):
690 super(TemplateIpsecEspUdp, cls).setUpClass()
693 def tearDownClass(cls):
694 super(TemplateIpsecEspUdp, cls).tearDownClass()
697 super(TemplateIpsecEspUdp, self).setUp()
699 self.tun_if = self.pg0
700 self.tra_if = self.pg2
701 self.logger.info(self.vapi.ppcli("show int addr"))
704 p.flags = (VppEnum.vl_api_ipsec_sad_flags_t.
705 IPSEC_API_SAD_FLAG_UDP_ENCAP |
706 VppEnum.vl_api_ipsec_sad_flags_t.
707 IPSEC_API_SAD_FLAG_USE_ANTI_REPLAY)
708 p.nat_header = UDP(sport=5454, dport=4500)
710 self.tra_spd = VppIpsecSpd(self, self.tra_spd_id)
711 self.tra_spd.add_vpp_config()
712 VppIpsecSpdItfBinding(self, self.tra_spd,
713 self.tra_if).add_vpp_config()
715 self.config_esp_tra(p)
716 config_tra_params(p, self.encryption_type)
718 self.tun_spd = VppIpsecSpd(self, self.tun_spd_id)
719 self.tun_spd.add_vpp_config()
720 VppIpsecSpdItfBinding(self, self.tun_spd,
721 self.tun_if).add_vpp_config()
723 self.config_esp_tun(p)
724 self.logger.info(self.vapi.ppcli("show ipsec all"))
726 d = DpoProto.DPO_PROTO_IP4
727 VppIpRoute(self, p.remote_tun_if_host, p.addr_len,
728 [VppRoutePath(self.tun_if.remote_addr[p.addr_type],
730 proto=d)]).add_vpp_config()
733 super(TemplateIpsecEspUdp, self).tearDown()
735 def show_commands_at_teardown(self):
736 self.logger.info(self.vapi.cli("show hardware"))
739 class TestIpsecEspUdp(TemplateIpsecEspUdp, IpsecTra4Tests):
740 """ Ipsec NAT-T ESP UDP tests """
744 class MyParameters():
746 saf = VppEnum.vl_api_ipsec_sad_flags_t
747 flag_esn = saf.IPSEC_API_SAD_FLAG_USE_ESN
748 flag_ar = saf.IPSEC_API_SAD_FLAG_USE_ANTI_REPLAY
749 self.flags = [0, flag_esn, flag_ar]
750 # foreach crypto algorithm
752 'AES-GCM-128/NONE': {
753 'vpp-crypto': (VppEnum.vl_api_ipsec_crypto_alg_t.
754 IPSEC_API_CRYPTO_ALG_AES_GCM_128),
755 'vpp-integ': (VppEnum.vl_api_ipsec_integ_alg_t.
756 IPSEC_API_INTEG_ALG_NONE),
757 'scapy-crypto': "AES-GCM",
758 'scapy-integ': "NULL",
759 'key': b"JPjyOWBeVEQiMe7h",
761 'AES-GCM-192/NONE': {
762 'vpp-crypto': (VppEnum.vl_api_ipsec_crypto_alg_t.
763 IPSEC_API_CRYPTO_ALG_AES_GCM_192),
764 'vpp-integ': (VppEnum.vl_api_ipsec_integ_alg_t.
765 IPSEC_API_INTEG_ALG_NONE),
766 'scapy-crypto': "AES-GCM",
767 'scapy-integ': "NULL",
768 'key': b"JPjyOWBeVEQiMe7h01234567",
770 'AES-GCM-256/NONE': {
771 'vpp-crypto': (VppEnum.vl_api_ipsec_crypto_alg_t.
772 IPSEC_API_CRYPTO_ALG_AES_GCM_256),
773 'vpp-integ': (VppEnum.vl_api_ipsec_integ_alg_t.
774 IPSEC_API_INTEG_ALG_NONE),
775 'scapy-crypto': "AES-GCM",
776 'scapy-integ': "NULL",
777 'key': b"JPjyOWBeVEQiMe7h0123456787654321",
779 'AES-CBC-128/MD5-96': {
780 'vpp-crypto': (VppEnum.vl_api_ipsec_crypto_alg_t.
781 IPSEC_API_CRYPTO_ALG_AES_CBC_128),
782 'vpp-integ': (VppEnum.vl_api_ipsec_integ_alg_t.
783 IPSEC_API_INTEG_ALG_MD5_96),
784 'scapy-crypto': "AES-CBC",
785 'scapy-integ': "HMAC-MD5-96",
787 'key': b"JPjyOWBeVEQiMe7h"},
788 'AES-CBC-192/SHA1-96': {
789 'vpp-crypto': (VppEnum.vl_api_ipsec_crypto_alg_t.
790 IPSEC_API_CRYPTO_ALG_AES_CBC_192),
791 'vpp-integ': (VppEnum.vl_api_ipsec_integ_alg_t.
792 IPSEC_API_INTEG_ALG_SHA1_96),
793 'scapy-crypto': "AES-CBC",
794 'scapy-integ': "HMAC-SHA1-96",
796 'key': b"JPjyOWBeVEQiMe7hJPjyOWBe"},
797 'AES-CBC-256/SHA1-96': {
798 'vpp-crypto': (VppEnum.vl_api_ipsec_crypto_alg_t.
799 IPSEC_API_CRYPTO_ALG_AES_CBC_256),
800 'vpp-integ': (VppEnum.vl_api_ipsec_integ_alg_t.
801 IPSEC_API_INTEG_ALG_SHA1_96),
802 'scapy-crypto': "AES-CBC",
803 'scapy-integ': "HMAC-SHA1-96",
805 'key': b"JPjyOWBeVEQiMe7hJPjyOWBeVEQiMe7h"},
806 '3DES-CBC/SHA1-96': {
807 'vpp-crypto': (VppEnum.vl_api_ipsec_crypto_alg_t.
808 IPSEC_API_CRYPTO_ALG_3DES_CBC),
809 'vpp-integ': (VppEnum.vl_api_ipsec_integ_alg_t.
810 IPSEC_API_INTEG_ALG_SHA1_96),
811 'scapy-crypto': "3DES",
812 'scapy-integ': "HMAC-SHA1-96",
814 'key': b"JPjyOWBeVEQiMe7h00112233"},
816 'vpp-crypto': (VppEnum.vl_api_ipsec_crypto_alg_t.
817 IPSEC_API_CRYPTO_ALG_NONE),
818 'vpp-integ': (VppEnum.vl_api_ipsec_integ_alg_t.
819 IPSEC_API_INTEG_ALG_SHA1_96),
820 'scapy-crypto': "NULL",
821 'scapy-integ': "HMAC-SHA1-96",
823 'key': b"JPjyOWBeVEQiMe7h00112233"},
824 'AES-CTR-128/SHA1-96': {
825 'vpp-crypto': (VppEnum.vl_api_ipsec_crypto_alg_t.
826 IPSEC_API_CRYPTO_ALG_AES_CTR_128),
827 'vpp-integ': (VppEnum.vl_api_ipsec_integ_alg_t.
828 IPSEC_API_INTEG_ALG_SHA1_96),
829 'scapy-crypto': "AES-CTR",
830 'scapy-integ': "HMAC-SHA1-96",
832 'key': b"JPjyOWBeVEQiMe7h"},
833 'AES-CTR-192/SHA1-96': {
834 'vpp-crypto': (VppEnum.vl_api_ipsec_crypto_alg_t.
835 IPSEC_API_CRYPTO_ALG_AES_CTR_192),
836 'vpp-integ': (VppEnum.vl_api_ipsec_integ_alg_t.
837 IPSEC_API_INTEG_ALG_SHA1_96),
838 'scapy-crypto': "AES-CTR",
839 'scapy-integ': "HMAC-SHA1-96",
841 'key': b"JPjyOWBeVEQiMe7hJPjyOWBe"},
842 'AES-CTR-256/SHA1-96': {
843 'vpp-crypto': (VppEnum.vl_api_ipsec_crypto_alg_t.
844 IPSEC_API_CRYPTO_ALG_AES_CTR_256),
845 'vpp-integ': (VppEnum.vl_api_ipsec_integ_alg_t.
846 IPSEC_API_INTEG_ALG_SHA1_96),
847 'scapy-crypto': "AES-CTR",
848 'scapy-integ': "HMAC-SHA1-96",
850 'key': b"JPjyOWBeVEQiMe7hJPjyOWBeVEQiMe7h"}}
853 class RunTestIpsecEspAll(ConfigIpsecESP,
854 IpsecTra4, IpsecTra6,
855 IpsecTun4, IpsecTun6):
856 """ Ipsec ESP all Algos """
859 def setUpConstants(cls):
860 test_args = str.split(cls.__doc__, " ")
861 engine = test_args[0]
862 if engine == "async":
863 cls.vpp_worker_count = 2
864 super(RunTestIpsecEspAll, cls).setUpConstants()
867 super(RunTestIpsecEspAll, self).setUp()
868 test_args = str.split(self.__doc__, " ")
870 params = MyParameters()
871 self.engine = test_args[0]
872 self.flag = params.flags[0]
873 if test_args[1] == 'ESNon':
874 self.flag |= params.flags[1]
875 if test_args[2] == 'ARon':
876 self.flag |= params.flags[2]
878 self.algo = params.algos[test_args[3]]
879 self.async_mode = False
880 if self.engine == "async":
881 self.async_mode = True
884 super(RunTestIpsecEspAll, self).tearDown()
887 self.run_a_test(self.engine, self.flag, self.algo)
889 def run_a_test(self, engine, flag, algo, payload_size=None):
891 self.vapi.cli("set ipsec async mode on")
893 self.vapi.cli("set crypto handler all %s" % engine)
895 self.logger.info(self.vapi.cli("show crypto async status"))
896 self.ipv4_params = IPsecIPv4Params()
897 self.ipv6_params = IPsecIPv6Params()
899 self.params = {self.ipv4_params.addr_type:
901 self.ipv6_params.addr_type:
904 for _, p in self.params.items():
905 p.auth_algo_vpp_id = algo['vpp-integ']
906 p.crypt_algo_vpp_id = algo['vpp-crypto']
907 p.crypt_algo = algo['scapy-crypto']
908 p.auth_algo = algo['scapy-integ']
909 p.crypt_key = algo['key']
910 p.salt = algo['salt']
912 p.outer_flow_label = 243224
913 p.async_mode = self.async_mode
915 self.reporter.send_keep_alive(self)
918 # configure the SPDs. SAs, etc
920 self.config_network(self.params.values())
924 # An exhautsive 4o6, 6o4 is not necessary
927 self.verify_tra_basic6(count=NUM_PKTS)
928 self.verify_tra_basic4(count=NUM_PKTS)
929 self.verify_tun_66(self.params[socket.AF_INET6],
932 # Use an odd-byte payload size to check for correct padding.
934 # 49 + 2 == 51 which should pad +1 to 52 for 4 byte alignment, +5
935 # to 56 for 8 byte alignment, and +13 to 64 for 64 byte alignment.
936 # This should catch bugs where the code is incorrectly over-padding
937 # for algorithms that don't require it
938 psz = 49 - len(IP()/ICMP()) if payload_size is None else payload_size
939 self.verify_tun_44(self.params[socket.AF_INET],
940 count=NUM_PKTS, payload_size=psz)
943 1970, # results in 2 chained buffers entering decrypt node
944 # but leaving as simple buffer due to ICV removal (tra4)
945 2004, # footer+ICV will be added to 2nd buffer (tun4)
946 4010, # ICV ends up splitted accross 2 buffers in esp_decrypt
947 # for transport4; transport6 takes normal path
948 4020, # same as above but tra4 and tra6 are switched
950 if self.engine in engines_supporting_chain_bufs:
951 for sz in LARGE_PKT_SZ:
952 self.verify_tra_basic4(count=NUM_PKTS, payload_size=sz)
953 self.verify_tra_basic6(count=NUM_PKTS, payload_size=sz)
954 self.verify_tun_66(self.params[socket.AF_INET6],
955 count=NUM_PKTS, payload_size=sz)
956 self.verify_tun_44(self.params[socket.AF_INET],
957 count=NUM_PKTS, payload_size=sz)
960 # reconfigure the network and SA to run the
963 saf = VppEnum.vl_api_ipsec_sad_flags_t
964 if flag & saf.IPSEC_API_SAD_FLAG_USE_ANTI_REPLAY:
965 self.unconfig_network()
966 self.config_network(self.params.values())
967 self.verify_tra_anti_replay()
969 self.unconfig_network()
970 self.config_network(self.params.values())
971 self.verify_hi_seq_num()
974 # swap the handlers while SAs are up
976 self.unconfig_network()
977 self.config_network(self.params.values())
980 self.vapi.cli("set crypto handler all %s" % e)
981 self.verify_tra_basic4(count=NUM_PKTS)
983 self.unconfig_network()
986 # To generate test classes, do:
987 # grep '# GEN' test_ipsec_esp.py | sed -e 's/# GEN //g' | bash
989 # GEN for ENG in native ipsecmb openssl; do \
990 # GEN for ESN in ESNon ESNoff; do for AR in ARon ARoff; do \
991 # GEN for ALG in AES-GCM-128/NONE \
992 # GEN AES-GCM-192/NONE AES-GCM-256/NONE AES-CBC-128/MD5-96 \
993 # GEN AES-CBC-192/SHA1-96 AES-CBC-256/SHA1-96 \
994 # GEN 3DES-CBC/SHA1-96 NONE/SHA1-96 \
995 # GEN AES-CTR-128/SHA1-96 AES-CTR-192/SHA1-96 AES-CTR-256/SHA1-96; do \
996 # GEN echo -en "\n\nclass "
997 # GEN echo -e "Test_${ENG}_${ESN}_${AR}_${ALG}(RunTestIpsecEspAll):" |
998 # GEN sed -e 's/-/_/g' -e 's#/#_#g' ;
999 # GEN echo ' """'$ENG $ESN $AR $ALG IPSec test'"""' ;
1000 # GEN echo " def test_ipsec(self):";
1001 # GEN echo ' """'$ENG $ESN $AR $ALG IPSec test'"""' ;
1002 # GEN echo " self.run_test()";
1003 # GEN done; done; done; done
1005 # GEN for ESN in ESNon ESNoff; do for AR in ARon ARoff; do \
1007 # GEN AES-GCM-128/NONE AES-GCM-192/NONE AES-GCM-256/NONE \
1008 # GEN AES-CBC-192/SHA1-96 AES-CBC-256/SHA1-96; do \
1009 # GEN echo -en "\n\nclass "
1010 # GEN echo -e "Test_async_${ESN}_${AR}_${ALG}(RunTestIpsecEspAll):" |
1011 # GEN sed -e 's/-/_/g' -e 's#/#_#g' ;
1012 # GEN echo ' """'async $ESN $AR $ALG IPSec test'"""' ;
1013 # GEN echo " def test_ipsec(self):";
1014 # GEN echo ' """'async $ESN $AR $ALG IPSec test'"""' ;
1015 # GEN echo " self.run_test()";
1016 # GEN done; done; done;
1019 class Test_native_ESNon_ARon_AES_GCM_128_NONE(RunTestIpsecEspAll):
1020 """native ESNon ARon AES-GCM-128/NONE IPSec test"""
1021 def test_ipsec(self):
1022 """native ESNon ARon AES-GCM-128/NONE IPSec test"""
1026 class Test_native_ESNon_ARon_AES_GCM_192_NONE(RunTestIpsecEspAll):
1027 """native ESNon ARon AES-GCM-192/NONE IPSec test"""
1028 def test_ipsec(self):
1029 """native ESNon ARon AES-GCM-192/NONE IPSec test"""
1033 class Test_native_ESNon_ARon_AES_GCM_256_NONE(RunTestIpsecEspAll):
1034 """native ESNon ARon AES-GCM-256/NONE IPSec test"""
1035 def test_ipsec(self):
1036 """native ESNon ARon AES-GCM-256/NONE IPSec test"""
1040 class Test_native_ESNon_ARon_AES_CBC_128_MD5_96(RunTestIpsecEspAll):
1041 """native ESNon ARon AES-CBC-128/MD5-96 IPSec test"""
1042 def test_ipsec(self):
1043 """native ESNon ARon AES-CBC-128/MD5-96 IPSec test"""
1047 class Test_native_ESNon_ARon_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
1048 """native ESNon ARon AES-CBC-192/SHA1-96 IPSec test"""
1049 def test_ipsec(self):
1050 """native ESNon ARon AES-CBC-192/SHA1-96 IPSec test"""
1054 class Test_native_ESNon_ARon_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
1055 """native ESNon ARon AES-CBC-256/SHA1-96 IPSec test"""
1056 def test_ipsec(self):
1057 """native ESNon ARon AES-CBC-256/SHA1-96 IPSec test"""
1061 class Test_native_ESNon_ARon_3DES_CBC_SHA1_96(RunTestIpsecEspAll):
1062 """native ESNon ARon 3DES-CBC/SHA1-96 IPSec test"""
1063 def test_ipsec(self):
1064 """native ESNon ARon 3DES-CBC/SHA1-96 IPSec test"""
1068 class Test_native_ESNon_ARon_NONE_SHA1_96(RunTestIpsecEspAll):
1069 """native ESNon ARon NONE/SHA1-96 IPSec test"""
1070 def test_ipsec(self):
1071 """native ESNon ARon NONE/SHA1-96 IPSec test"""
1075 class Test_native_ESNon_ARon_AES_CTR_128_SHA1_96(RunTestIpsecEspAll):
1076 """native ESNon ARon AES-CTR-128/SHA1-96 IPSec test"""
1077 def test_ipsec(self):
1078 """native ESNon ARon AES-CTR-128/SHA1-96 IPSec test"""
1082 class Test_native_ESNon_ARon_AES_CTR_192_SHA1_96(RunTestIpsecEspAll):
1083 """native ESNon ARon AES-CTR-192/SHA1-96 IPSec test"""
1084 def test_ipsec(self):
1085 """native ESNon ARon AES-CTR-192/SHA1-96 IPSec test"""
1089 class Test_native_ESNon_ARon_AES_CTR_256_SHA1_96(RunTestIpsecEspAll):
1090 """native ESNon ARon AES-CTR-256/SHA1-96 IPSec test"""
1091 def test_ipsec(self):
1092 """native ESNon ARon AES-CTR-256/SHA1-96 IPSec test"""
1096 class Test_native_ESNon_ARoff_AES_GCM_128_NONE(RunTestIpsecEspAll):
1097 """native ESNon ARoff AES-GCM-128/NONE IPSec test"""
1098 def test_ipsec(self):
1099 """native ESNon ARoff AES-GCM-128/NONE IPSec test"""
1103 class Test_native_ESNon_ARoff_AES_GCM_192_NONE(RunTestIpsecEspAll):
1104 """native ESNon ARoff AES-GCM-192/NONE IPSec test"""
1105 def test_ipsec(self):
1106 """native ESNon ARoff AES-GCM-192/NONE IPSec test"""
1110 class Test_native_ESNon_ARoff_AES_GCM_256_NONE(RunTestIpsecEspAll):
1111 """native ESNon ARoff AES-GCM-256/NONE IPSec test"""
1112 def test_ipsec(self):
1113 """native ESNon ARoff AES-GCM-256/NONE IPSec test"""
1117 class Test_native_ESNon_ARoff_AES_CBC_128_MD5_96(RunTestIpsecEspAll):
1118 """native ESNon ARoff AES-CBC-128/MD5-96 IPSec test"""
1119 def test_ipsec(self):
1120 """native ESNon ARoff AES-CBC-128/MD5-96 IPSec test"""
1124 class Test_native_ESNon_ARoff_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
1125 """native ESNon ARoff AES-CBC-192/SHA1-96 IPSec test"""
1126 def test_ipsec(self):
1127 """native ESNon ARoff AES-CBC-192/SHA1-96 IPSec test"""
1131 class Test_native_ESNon_ARoff_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
1132 """native ESNon ARoff AES-CBC-256/SHA1-96 IPSec test"""
1133 def test_ipsec(self):
1134 """native ESNon ARoff AES-CBC-256/SHA1-96 IPSec test"""
1138 class Test_native_ESNon_ARoff_3DES_CBC_SHA1_96(RunTestIpsecEspAll):
1139 """native ESNon ARoff 3DES-CBC/SHA1-96 IPSec test"""
1140 def test_ipsec(self):
1141 """native ESNon ARoff 3DES-CBC/SHA1-96 IPSec test"""
1145 class Test_native_ESNon_ARoff_NONE_SHA1_96(RunTestIpsecEspAll):
1146 """native ESNon ARoff NONE/SHA1-96 IPSec test"""
1147 def test_ipsec(self):
1148 """native ESNon ARoff NONE/SHA1-96 IPSec test"""
1152 class Test_native_ESNon_ARoff_AES_CTR_128_SHA1_96(RunTestIpsecEspAll):
1153 """native ESNon ARoff AES-CTR-128/SHA1-96 IPSec test"""
1154 def test_ipsec(self):
1155 """native ESNon ARoff AES-CTR-128/SHA1-96 IPSec test"""
1159 class Test_native_ESNon_ARoff_AES_CTR_192_SHA1_96(RunTestIpsecEspAll):
1160 """native ESNon ARoff AES-CTR-192/SHA1-96 IPSec test"""
1161 def test_ipsec(self):
1162 """native ESNon ARoff AES-CTR-192/SHA1-96 IPSec test"""
1166 class Test_native_ESNon_ARoff_AES_CTR_256_SHA1_96(RunTestIpsecEspAll):
1167 """native ESNon ARoff AES-CTR-256/SHA1-96 IPSec test"""
1168 def test_ipsec(self):
1169 """native ESNon ARoff AES-CTR-256/SHA1-96 IPSec test"""
1173 class Test_native_ESNoff_ARon_AES_GCM_128_NONE(RunTestIpsecEspAll):
1174 """native ESNoff ARon AES-GCM-128/NONE IPSec test"""
1175 def test_ipsec(self):
1176 """native ESNoff ARon AES-GCM-128/NONE IPSec test"""
1180 class Test_native_ESNoff_ARon_AES_GCM_192_NONE(RunTestIpsecEspAll):
1181 """native ESNoff ARon AES-GCM-192/NONE IPSec test"""
1182 def test_ipsec(self):
1183 """native ESNoff ARon AES-GCM-192/NONE IPSec test"""
1187 class Test_native_ESNoff_ARon_AES_GCM_256_NONE(RunTestIpsecEspAll):
1188 """native ESNoff ARon AES-GCM-256/NONE IPSec test"""
1189 def test_ipsec(self):
1190 """native ESNoff ARon AES-GCM-256/NONE IPSec test"""
1194 class Test_native_ESNoff_ARon_AES_CBC_128_MD5_96(RunTestIpsecEspAll):
1195 """native ESNoff ARon AES-CBC-128/MD5-96 IPSec test"""
1196 def test_ipsec(self):
1197 """native ESNoff ARon AES-CBC-128/MD5-96 IPSec test"""
1201 class Test_native_ESNoff_ARon_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
1202 """native ESNoff ARon AES-CBC-192/SHA1-96 IPSec test"""
1203 def test_ipsec(self):
1204 """native ESNoff ARon AES-CBC-192/SHA1-96 IPSec test"""
1208 class Test_native_ESNoff_ARon_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
1209 """native ESNoff ARon AES-CBC-256/SHA1-96 IPSec test"""
1210 def test_ipsec(self):
1211 """native ESNoff ARon AES-CBC-256/SHA1-96 IPSec test"""
1215 class Test_native_ESNoff_ARon_3DES_CBC_SHA1_96(RunTestIpsecEspAll):
1216 """native ESNoff ARon 3DES-CBC/SHA1-96 IPSec test"""
1217 def test_ipsec(self):
1218 """native ESNoff ARon 3DES-CBC/SHA1-96 IPSec test"""
1222 class Test_native_ESNoff_ARon_NONE_SHA1_96(RunTestIpsecEspAll):
1223 """native ESNoff ARon NONE/SHA1-96 IPSec test"""
1224 def test_ipsec(self):
1225 """native ESNoff ARon NONE/SHA1-96 IPSec test"""
1229 class Test_native_ESNoff_ARon_AES_CTR_128_SHA1_96(RunTestIpsecEspAll):
1230 """native ESNoff ARon AES-CTR-128/SHA1-96 IPSec test"""
1231 def test_ipsec(self):
1232 """native ESNoff ARon AES-CTR-128/SHA1-96 IPSec test"""
1236 class Test_native_ESNoff_ARon_AES_CTR_192_SHA1_96(RunTestIpsecEspAll):
1237 """native ESNoff ARon AES-CTR-192/SHA1-96 IPSec test"""
1238 def test_ipsec(self):
1239 """native ESNoff ARon AES-CTR-192/SHA1-96 IPSec test"""
1243 class Test_native_ESNoff_ARon_AES_CTR_256_SHA1_96(RunTestIpsecEspAll):
1244 """native ESNoff ARon AES-CTR-256/SHA1-96 IPSec test"""
1245 def test_ipsec(self):
1246 """native ESNoff ARon AES-CTR-256/SHA1-96 IPSec test"""
1250 class Test_native_ESNoff_ARoff_AES_GCM_128_NONE(RunTestIpsecEspAll):
1251 """native ESNoff ARoff AES-GCM-128/NONE IPSec test"""
1252 def test_ipsec(self):
1253 """native ESNoff ARoff AES-GCM-128/NONE IPSec test"""
1257 class Test_native_ESNoff_ARoff_AES_GCM_192_NONE(RunTestIpsecEspAll):
1258 """native ESNoff ARoff AES-GCM-192/NONE IPSec test"""
1259 def test_ipsec(self):
1260 """native ESNoff ARoff AES-GCM-192/NONE IPSec test"""
1264 class Test_native_ESNoff_ARoff_AES_GCM_256_NONE(RunTestIpsecEspAll):
1265 """native ESNoff ARoff AES-GCM-256/NONE IPSec test"""
1266 def test_ipsec(self):
1267 """native ESNoff ARoff AES-GCM-256/NONE IPSec test"""
1271 class Test_native_ESNoff_ARoff_AES_CBC_128_MD5_96(RunTestIpsecEspAll):
1272 """native ESNoff ARoff AES-CBC-128/MD5-96 IPSec test"""
1273 def test_ipsec(self):
1274 """native ESNoff ARoff AES-CBC-128/MD5-96 IPSec test"""
1278 class Test_native_ESNoff_ARoff_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
1279 """native ESNoff ARoff AES-CBC-192/SHA1-96 IPSec test"""
1280 def test_ipsec(self):
1281 """native ESNoff ARoff AES-CBC-192/SHA1-96 IPSec test"""
1285 class Test_native_ESNoff_ARoff_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
1286 """native ESNoff ARoff AES-CBC-256/SHA1-96 IPSec test"""
1287 def test_ipsec(self):
1288 """native ESNoff ARoff AES-CBC-256/SHA1-96 IPSec test"""
1292 class Test_native_ESNoff_ARoff_3DES_CBC_SHA1_96(RunTestIpsecEspAll):
1293 """native ESNoff ARoff 3DES-CBC/SHA1-96 IPSec test"""
1294 def test_ipsec(self):
1295 """native ESNoff ARoff 3DES-CBC/SHA1-96 IPSec test"""
1299 class Test_native_ESNoff_ARoff_NONE_SHA1_96(RunTestIpsecEspAll):
1300 """native ESNoff ARoff NONE/SHA1-96 IPSec test"""
1301 def test_ipsec(self):
1302 """native ESNoff ARoff NONE/SHA1-96 IPSec test"""
1306 class Test_native_ESNoff_ARoff_AES_CTR_128_SHA1_96(RunTestIpsecEspAll):
1307 """native ESNoff ARoff AES-CTR-128/SHA1-96 IPSec test"""
1308 def test_ipsec(self):
1309 """native ESNoff ARoff AES-CTR-128/SHA1-96 IPSec test"""
1313 class Test_native_ESNoff_ARoff_AES_CTR_192_SHA1_96(RunTestIpsecEspAll):
1314 """native ESNoff ARoff AES-CTR-192/SHA1-96 IPSec test"""
1315 def test_ipsec(self):
1316 """native ESNoff ARoff AES-CTR-192/SHA1-96 IPSec test"""
1320 class Test_native_ESNoff_ARoff_AES_CTR_256_SHA1_96(RunTestIpsecEspAll):
1321 """native ESNoff ARoff AES-CTR-256/SHA1-96 IPSec test"""
1322 def test_ipsec(self):
1323 """native ESNoff ARoff AES-CTR-256/SHA1-96 IPSec test"""
1327 class Test_ipsecmb_ESNon_ARon_AES_GCM_128_NONE(RunTestIpsecEspAll):
1328 """ipsecmb ESNon ARon AES-GCM-128/NONE IPSec test"""
1329 def test_ipsec(self):
1330 """ipsecmb ESNon ARon AES-GCM-128/NONE IPSec test"""
1334 class Test_ipsecmb_ESNon_ARon_AES_GCM_192_NONE(RunTestIpsecEspAll):
1335 """ipsecmb ESNon ARon AES-GCM-192/NONE IPSec test"""
1336 def test_ipsec(self):
1337 """ipsecmb ESNon ARon AES-GCM-192/NONE IPSec test"""
1341 class Test_ipsecmb_ESNon_ARon_AES_GCM_256_NONE(RunTestIpsecEspAll):
1342 """ipsecmb ESNon ARon AES-GCM-256/NONE IPSec test"""
1343 def test_ipsec(self):
1344 """ipsecmb ESNon ARon AES-GCM-256/NONE IPSec test"""
1348 class Test_ipsecmb_ESNon_ARon_AES_CBC_128_MD5_96(RunTestIpsecEspAll):
1349 """ipsecmb ESNon ARon AES-CBC-128/MD5-96 IPSec test"""
1350 def test_ipsec(self):
1351 """ipsecmb ESNon ARon AES-CBC-128/MD5-96 IPSec test"""
1355 class Test_ipsecmb_ESNon_ARon_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
1356 """ipsecmb ESNon ARon AES-CBC-192/SHA1-96 IPSec test"""
1357 def test_ipsec(self):
1358 """ipsecmb ESNon ARon AES-CBC-192/SHA1-96 IPSec test"""
1362 class Test_ipsecmb_ESNon_ARon_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
1363 """ipsecmb ESNon ARon AES-CBC-256/SHA1-96 IPSec test"""
1364 def test_ipsec(self):
1365 """ipsecmb ESNon ARon AES-CBC-256/SHA1-96 IPSec test"""
1369 class Test_ipsecmb_ESNon_ARon_3DES_CBC_SHA1_96(RunTestIpsecEspAll):
1370 """ipsecmb ESNon ARon 3DES-CBC/SHA1-96 IPSec test"""
1371 def test_ipsec(self):
1372 """ipsecmb ESNon ARon 3DES-CBC/SHA1-96 IPSec test"""
1376 class Test_ipsecmb_ESNon_ARon_NONE_SHA1_96(RunTestIpsecEspAll):
1377 """ipsecmb ESNon ARon NONE/SHA1-96 IPSec test"""
1378 def test_ipsec(self):
1379 """ipsecmb ESNon ARon NONE/SHA1-96 IPSec test"""
1383 class Test_ipsecmb_ESNon_ARon_AES_CTR_128_SHA1_96(RunTestIpsecEspAll):
1384 """ipsecmb ESNon ARon AES-CTR-128/SHA1-96 IPSec test"""
1385 def test_ipsec(self):
1386 """ipsecmb ESNon ARon AES-CTR-128/SHA1-96 IPSec test"""
1390 class Test_ipsecmb_ESNon_ARon_AES_CTR_192_SHA1_96(RunTestIpsecEspAll):
1391 """ipsecmb ESNon ARon AES-CTR-192/SHA1-96 IPSec test"""
1392 def test_ipsec(self):
1393 """ipsecmb ESNon ARon AES-CTR-192/SHA1-96 IPSec test"""
1397 class Test_ipsecmb_ESNon_ARon_AES_CTR_256_SHA1_96(RunTestIpsecEspAll):
1398 """ipsecmb ESNon ARon AES-CTR-256/SHA1-96 IPSec test"""
1399 def test_ipsec(self):
1400 """ipsecmb ESNon ARon AES-CTR-256/SHA1-96 IPSec test"""
1404 class Test_ipsecmb_ESNon_ARoff_AES_GCM_128_NONE(RunTestIpsecEspAll):
1405 """ipsecmb ESNon ARoff AES-GCM-128/NONE IPSec test"""
1406 def test_ipsec(self):
1407 """ipsecmb ESNon ARoff AES-GCM-128/NONE IPSec test"""
1411 class Test_ipsecmb_ESNon_ARoff_AES_GCM_192_NONE(RunTestIpsecEspAll):
1412 """ipsecmb ESNon ARoff AES-GCM-192/NONE IPSec test"""
1413 def test_ipsec(self):
1414 """ipsecmb ESNon ARoff AES-GCM-192/NONE IPSec test"""
1418 class Test_ipsecmb_ESNon_ARoff_AES_GCM_256_NONE(RunTestIpsecEspAll):
1419 """ipsecmb ESNon ARoff AES-GCM-256/NONE IPSec test"""
1420 def test_ipsec(self):
1421 """ipsecmb ESNon ARoff AES-GCM-256/NONE IPSec test"""
1425 class Test_ipsecmb_ESNon_ARoff_AES_CBC_128_MD5_96(RunTestIpsecEspAll):
1426 """ipsecmb ESNon ARoff AES-CBC-128/MD5-96 IPSec test"""
1427 def test_ipsec(self):
1428 """ipsecmb ESNon ARoff AES-CBC-128/MD5-96 IPSec test"""
1432 class Test_ipsecmb_ESNon_ARoff_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
1433 """ipsecmb ESNon ARoff AES-CBC-192/SHA1-96 IPSec test"""
1434 def test_ipsec(self):
1435 """ipsecmb ESNon ARoff AES-CBC-192/SHA1-96 IPSec test"""
1439 class Test_ipsecmb_ESNon_ARoff_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
1440 """ipsecmb ESNon ARoff AES-CBC-256/SHA1-96 IPSec test"""
1441 def test_ipsec(self):
1442 """ipsecmb ESNon ARoff AES-CBC-256/SHA1-96 IPSec test"""
1446 class Test_ipsecmb_ESNon_ARoff_3DES_CBC_SHA1_96(RunTestIpsecEspAll):
1447 """ipsecmb ESNon ARoff 3DES-CBC/SHA1-96 IPSec test"""
1448 def test_ipsec(self):
1449 """ipsecmb ESNon ARoff 3DES-CBC/SHA1-96 IPSec test"""
1453 class Test_ipsecmb_ESNon_ARoff_NONE_SHA1_96(RunTestIpsecEspAll):
1454 """ipsecmb ESNon ARoff NONE/SHA1-96 IPSec test"""
1455 def test_ipsec(self):
1456 """ipsecmb ESNon ARoff NONE/SHA1-96 IPSec test"""
1460 class Test_ipsecmb_ESNon_ARoff_AES_CTR_128_SHA1_96(RunTestIpsecEspAll):
1461 """ipsecmb ESNon ARoff AES-CTR-128/SHA1-96 IPSec test"""
1462 def test_ipsec(self):
1463 """ipsecmb ESNon ARoff AES-CTR-128/SHA1-96 IPSec test"""
1467 class Test_ipsecmb_ESNon_ARoff_AES_CTR_192_SHA1_96(RunTestIpsecEspAll):
1468 """ipsecmb ESNon ARoff AES-CTR-192/SHA1-96 IPSec test"""
1469 def test_ipsec(self):
1470 """ipsecmb ESNon ARoff AES-CTR-192/SHA1-96 IPSec test"""
1474 class Test_ipsecmb_ESNon_ARoff_AES_CTR_256_SHA1_96(RunTestIpsecEspAll):
1475 """ipsecmb ESNon ARoff AES-CTR-256/SHA1-96 IPSec test"""
1476 def test_ipsec(self):
1477 """ipsecmb ESNon ARoff AES-CTR-256/SHA1-96 IPSec test"""
1481 class Test_ipsecmb_ESNoff_ARon_AES_GCM_128_NONE(RunTestIpsecEspAll):
1482 """ipsecmb ESNoff ARon AES-GCM-128/NONE IPSec test"""
1483 def test_ipsec(self):
1484 """ipsecmb ESNoff ARon AES-GCM-128/NONE IPSec test"""
1488 class Test_ipsecmb_ESNoff_ARon_AES_GCM_192_NONE(RunTestIpsecEspAll):
1489 """ipsecmb ESNoff ARon AES-GCM-192/NONE IPSec test"""
1490 def test_ipsec(self):
1491 """ipsecmb ESNoff ARon AES-GCM-192/NONE IPSec test"""
1495 class Test_ipsecmb_ESNoff_ARon_AES_GCM_256_NONE(RunTestIpsecEspAll):
1496 """ipsecmb ESNoff ARon AES-GCM-256/NONE IPSec test"""
1497 def test_ipsec(self):
1498 """ipsecmb ESNoff ARon AES-GCM-256/NONE IPSec test"""
1502 class Test_ipsecmb_ESNoff_ARon_AES_CBC_128_MD5_96(RunTestIpsecEspAll):
1503 """ipsecmb ESNoff ARon AES-CBC-128/MD5-96 IPSec test"""
1504 def test_ipsec(self):
1505 """ipsecmb ESNoff ARon AES-CBC-128/MD5-96 IPSec test"""
1509 class Test_ipsecmb_ESNoff_ARon_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
1510 """ipsecmb ESNoff ARon AES-CBC-192/SHA1-96 IPSec test"""
1511 def test_ipsec(self):
1512 """ipsecmb ESNoff ARon AES-CBC-192/SHA1-96 IPSec test"""
1516 class Test_ipsecmb_ESNoff_ARon_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
1517 """ipsecmb ESNoff ARon AES-CBC-256/SHA1-96 IPSec test"""
1518 def test_ipsec(self):
1519 """ipsecmb ESNoff ARon AES-CBC-256/SHA1-96 IPSec test"""
1523 class Test_ipsecmb_ESNoff_ARon_3DES_CBC_SHA1_96(RunTestIpsecEspAll):
1524 """ipsecmb ESNoff ARon 3DES-CBC/SHA1-96 IPSec test"""
1525 def test_ipsec(self):
1526 """ipsecmb ESNoff ARon 3DES-CBC/SHA1-96 IPSec test"""
1530 class Test_ipsecmb_ESNoff_ARon_NONE_SHA1_96(RunTestIpsecEspAll):
1531 """ipsecmb ESNoff ARon NONE/SHA1-96 IPSec test"""
1532 def test_ipsec(self):
1533 """ipsecmb ESNoff ARon NONE/SHA1-96 IPSec test"""
1537 class Test_ipsecmb_ESNoff_ARon_AES_CTR_128_SHA1_96(RunTestIpsecEspAll):
1538 """ipsecmb ESNoff ARon AES-CTR-128/SHA1-96 IPSec test"""
1539 def test_ipsec(self):
1540 """ipsecmb ESNoff ARon AES-CTR-128/SHA1-96 IPSec test"""
1544 class Test_ipsecmb_ESNoff_ARon_AES_CTR_192_SHA1_96(RunTestIpsecEspAll):
1545 """ipsecmb ESNoff ARon AES-CTR-192/SHA1-96 IPSec test"""
1546 def test_ipsec(self):
1547 """ipsecmb ESNoff ARon AES-CTR-192/SHA1-96 IPSec test"""
1551 class Test_ipsecmb_ESNoff_ARon_AES_CTR_256_SHA1_96(RunTestIpsecEspAll):
1552 """ipsecmb ESNoff ARon AES-CTR-256/SHA1-96 IPSec test"""
1553 def test_ipsec(self):
1554 """ipsecmb ESNoff ARon AES-CTR-256/SHA1-96 IPSec test"""
1558 class Test_ipsecmb_ESNoff_ARoff_AES_GCM_128_NONE(RunTestIpsecEspAll):
1559 """ipsecmb ESNoff ARoff AES-GCM-128/NONE IPSec test"""
1560 def test_ipsec(self):
1561 """ipsecmb ESNoff ARoff AES-GCM-128/NONE IPSec test"""
1565 class Test_ipsecmb_ESNoff_ARoff_AES_GCM_192_NONE(RunTestIpsecEspAll):
1566 """ipsecmb ESNoff ARoff AES-GCM-192/NONE IPSec test"""
1567 def test_ipsec(self):
1568 """ipsecmb ESNoff ARoff AES-GCM-192/NONE IPSec test"""
1572 class Test_ipsecmb_ESNoff_ARoff_AES_GCM_256_NONE(RunTestIpsecEspAll):
1573 """ipsecmb ESNoff ARoff AES-GCM-256/NONE IPSec test"""
1574 def test_ipsec(self):
1575 """ipsecmb ESNoff ARoff AES-GCM-256/NONE IPSec test"""
1579 class Test_ipsecmb_ESNoff_ARoff_AES_CBC_128_MD5_96(RunTestIpsecEspAll):
1580 """ipsecmb ESNoff ARoff AES-CBC-128/MD5-96 IPSec test"""
1581 def test_ipsec(self):
1582 """ipsecmb ESNoff ARoff AES-CBC-128/MD5-96 IPSec test"""
1586 class Test_ipsecmb_ESNoff_ARoff_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
1587 """ipsecmb ESNoff ARoff AES-CBC-192/SHA1-96 IPSec test"""
1588 def test_ipsec(self):
1589 """ipsecmb ESNoff ARoff AES-CBC-192/SHA1-96 IPSec test"""
1593 class Test_ipsecmb_ESNoff_ARoff_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
1594 """ipsecmb ESNoff ARoff AES-CBC-256/SHA1-96 IPSec test"""
1595 def test_ipsec(self):
1596 """ipsecmb ESNoff ARoff AES-CBC-256/SHA1-96 IPSec test"""
1600 class Test_ipsecmb_ESNoff_ARoff_3DES_CBC_SHA1_96(RunTestIpsecEspAll):
1601 """ipsecmb ESNoff ARoff 3DES-CBC/SHA1-96 IPSec test"""
1602 def test_ipsec(self):
1603 """ipsecmb ESNoff ARoff 3DES-CBC/SHA1-96 IPSec test"""
1607 class Test_ipsecmb_ESNoff_ARoff_NONE_SHA1_96(RunTestIpsecEspAll):
1608 """ipsecmb ESNoff ARoff NONE/SHA1-96 IPSec test"""
1609 def test_ipsec(self):
1610 """ipsecmb ESNoff ARoff NONE/SHA1-96 IPSec test"""
1614 class Test_ipsecmb_ESNoff_ARoff_AES_CTR_128_SHA1_96(RunTestIpsecEspAll):
1615 """ipsecmb ESNoff ARoff AES-CTR-128/SHA1-96 IPSec test"""
1616 def test_ipsec(self):
1617 """ipsecmb ESNoff ARoff AES-CTR-128/SHA1-96 IPSec test"""
1621 class Test_ipsecmb_ESNoff_ARoff_AES_CTR_192_SHA1_96(RunTestIpsecEspAll):
1622 """ipsecmb ESNoff ARoff AES-CTR-192/SHA1-96 IPSec test"""
1623 def test_ipsec(self):
1624 """ipsecmb ESNoff ARoff AES-CTR-192/SHA1-96 IPSec test"""
1628 class Test_ipsecmb_ESNoff_ARoff_AES_CTR_256_SHA1_96(RunTestIpsecEspAll):
1629 """ipsecmb ESNoff ARoff AES-CTR-256/SHA1-96 IPSec test"""
1630 def test_ipsec(self):
1631 """ipsecmb ESNoff ARoff AES-CTR-256/SHA1-96 IPSec test"""
1635 class Test_openssl_ESNon_ARon_AES_GCM_128_NONE(RunTestIpsecEspAll):
1636 """openssl ESNon ARon AES-GCM-128/NONE IPSec test"""
1637 def test_ipsec(self):
1638 """openssl ESNon ARon AES-GCM-128/NONE IPSec test"""
1642 class Test_openssl_ESNon_ARon_AES_GCM_192_NONE(RunTestIpsecEspAll):
1643 """openssl ESNon ARon AES-GCM-192/NONE IPSec test"""
1644 def test_ipsec(self):
1645 """openssl ESNon ARon AES-GCM-192/NONE IPSec test"""
1649 class Test_openssl_ESNon_ARon_AES_GCM_256_NONE(RunTestIpsecEspAll):
1650 """openssl ESNon ARon AES-GCM-256/NONE IPSec test"""
1651 def test_ipsec(self):
1652 """openssl ESNon ARon AES-GCM-256/NONE IPSec test"""
1656 class Test_openssl_ESNon_ARon_AES_CBC_128_MD5_96(RunTestIpsecEspAll):
1657 """openssl ESNon ARon AES-CBC-128/MD5-96 IPSec test"""
1658 def test_ipsec(self):
1659 """openssl ESNon ARon AES-CBC-128/MD5-96 IPSec test"""
1663 class Test_openssl_ESNon_ARon_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
1664 """openssl ESNon ARon AES-CBC-192/SHA1-96 IPSec test"""
1665 def test_ipsec(self):
1666 """openssl ESNon ARon AES-CBC-192/SHA1-96 IPSec test"""
1670 class Test_openssl_ESNon_ARon_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
1671 """openssl ESNon ARon AES-CBC-256/SHA1-96 IPSec test"""
1672 def test_ipsec(self):
1673 """openssl ESNon ARon AES-CBC-256/SHA1-96 IPSec test"""
1677 class Test_openssl_ESNon_ARon_3DES_CBC_SHA1_96(RunTestIpsecEspAll):
1678 """openssl ESNon ARon 3DES-CBC/SHA1-96 IPSec test"""
1679 def test_ipsec(self):
1680 """openssl ESNon ARon 3DES-CBC/SHA1-96 IPSec test"""
1684 class Test_openssl_ESNon_ARon_NONE_SHA1_96(RunTestIpsecEspAll):
1685 """openssl ESNon ARon NONE/SHA1-96 IPSec test"""
1686 def test_ipsec(self):
1687 """openssl ESNon ARon NONE/SHA1-96 IPSec test"""
1691 class Test_openssl_ESNon_ARon_AES_CTR_128_SHA1_96(RunTestIpsecEspAll):
1692 """openssl ESNon ARon AES-CTR-128/SHA1-96 IPSec test"""
1693 def test_ipsec(self):
1694 """openssl ESNon ARon AES-CTR-128/SHA1-96 IPSec test"""
1698 class Test_openssl_ESNon_ARon_AES_CTR_192_SHA1_96(RunTestIpsecEspAll):
1699 """openssl ESNon ARon AES-CTR-192/SHA1-96 IPSec test"""
1700 def test_ipsec(self):
1701 """openssl ESNon ARon AES-CTR-192/SHA1-96 IPSec test"""
1705 class Test_openssl_ESNon_ARon_AES_CTR_256_SHA1_96(RunTestIpsecEspAll):
1706 """openssl ESNon ARon AES-CTR-256/SHA1-96 IPSec test"""
1707 def test_ipsec(self):
1708 """openssl ESNon ARon AES-CTR-256/SHA1-96 IPSec test"""
1712 class Test_openssl_ESNon_ARoff_AES_GCM_128_NONE(RunTestIpsecEspAll):
1713 """openssl ESNon ARoff AES-GCM-128/NONE IPSec test"""
1714 def test_ipsec(self):
1715 """openssl ESNon ARoff AES-GCM-128/NONE IPSec test"""
1719 class Test_openssl_ESNon_ARoff_AES_GCM_192_NONE(RunTestIpsecEspAll):
1720 """openssl ESNon ARoff AES-GCM-192/NONE IPSec test"""
1721 def test_ipsec(self):
1722 """openssl ESNon ARoff AES-GCM-192/NONE IPSec test"""
1726 class Test_openssl_ESNon_ARoff_AES_GCM_256_NONE(RunTestIpsecEspAll):
1727 """openssl ESNon ARoff AES-GCM-256/NONE IPSec test"""
1728 def test_ipsec(self):
1729 """openssl ESNon ARoff AES-GCM-256/NONE IPSec test"""
1733 class Test_openssl_ESNon_ARoff_AES_CBC_128_MD5_96(RunTestIpsecEspAll):
1734 """openssl ESNon ARoff AES-CBC-128/MD5-96 IPSec test"""
1735 def test_ipsec(self):
1736 """openssl ESNon ARoff AES-CBC-128/MD5-96 IPSec test"""
1740 class Test_openssl_ESNon_ARoff_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
1741 """openssl ESNon ARoff AES-CBC-192/SHA1-96 IPSec test"""
1742 def test_ipsec(self):
1743 """openssl ESNon ARoff AES-CBC-192/SHA1-96 IPSec test"""
1747 class Test_openssl_ESNon_ARoff_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
1748 """openssl ESNon ARoff AES-CBC-256/SHA1-96 IPSec test"""
1749 def test_ipsec(self):
1750 """openssl ESNon ARoff AES-CBC-256/SHA1-96 IPSec test"""
1754 class Test_openssl_ESNon_ARoff_3DES_CBC_SHA1_96(RunTestIpsecEspAll):
1755 """openssl ESNon ARoff 3DES-CBC/SHA1-96 IPSec test"""
1756 def test_ipsec(self):
1757 """openssl ESNon ARoff 3DES-CBC/SHA1-96 IPSec test"""
1761 class Test_openssl_ESNon_ARoff_NONE_SHA1_96(RunTestIpsecEspAll):
1762 """openssl ESNon ARoff NONE/SHA1-96 IPSec test"""
1763 def test_ipsec(self):
1764 """openssl ESNon ARoff NONE/SHA1-96 IPSec test"""
1768 class Test_openssl_ESNon_ARoff_AES_CTR_128_SHA1_96(RunTestIpsecEspAll):
1769 """openssl ESNon ARoff AES-CTR-128/SHA1-96 IPSec test"""
1770 def test_ipsec(self):
1771 """openssl ESNon ARoff AES-CTR-128/SHA1-96 IPSec test"""
1775 class Test_openssl_ESNon_ARoff_AES_CTR_192_SHA1_96(RunTestIpsecEspAll):
1776 """openssl ESNon ARoff AES-CTR-192/SHA1-96 IPSec test"""
1777 def test_ipsec(self):
1778 """openssl ESNon ARoff AES-CTR-192/SHA1-96 IPSec test"""
1782 class Test_openssl_ESNon_ARoff_AES_CTR_256_SHA1_96(RunTestIpsecEspAll):
1783 """openssl ESNon ARoff AES-CTR-256/SHA1-96 IPSec test"""
1784 def test_ipsec(self):
1785 """openssl ESNon ARoff AES-CTR-256/SHA1-96 IPSec test"""
1789 class Test_openssl_ESNoff_ARon_AES_GCM_128_NONE(RunTestIpsecEspAll):
1790 """openssl ESNoff ARon AES-GCM-128/NONE IPSec test"""
1791 def test_ipsec(self):
1792 """openssl ESNoff ARon AES-GCM-128/NONE IPSec test"""
1796 class Test_openssl_ESNoff_ARon_AES_GCM_192_NONE(RunTestIpsecEspAll):
1797 """openssl ESNoff ARon AES-GCM-192/NONE IPSec test"""
1798 def test_ipsec(self):
1799 """openssl ESNoff ARon AES-GCM-192/NONE IPSec test"""
1803 class Test_openssl_ESNoff_ARon_AES_GCM_256_NONE(RunTestIpsecEspAll):
1804 """openssl ESNoff ARon AES-GCM-256/NONE IPSec test"""
1805 def test_ipsec(self):
1806 """openssl ESNoff ARon AES-GCM-256/NONE IPSec test"""
1810 class Test_openssl_ESNoff_ARon_AES_CBC_128_MD5_96(RunTestIpsecEspAll):
1811 """openssl ESNoff ARon AES-CBC-128/MD5-96 IPSec test"""
1812 def test_ipsec(self):
1813 """openssl ESNoff ARon AES-CBC-128/MD5-96 IPSec test"""
1817 class Test_openssl_ESNoff_ARon_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
1818 """openssl ESNoff ARon AES-CBC-192/SHA1-96 IPSec test"""
1819 def test_ipsec(self):
1820 """openssl ESNoff ARon AES-CBC-192/SHA1-96 IPSec test"""
1824 class Test_openssl_ESNoff_ARon_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
1825 """openssl ESNoff ARon AES-CBC-256/SHA1-96 IPSec test"""
1826 def test_ipsec(self):
1827 """openssl ESNoff ARon AES-CBC-256/SHA1-96 IPSec test"""
1831 class Test_openssl_ESNoff_ARon_3DES_CBC_SHA1_96(RunTestIpsecEspAll):
1832 """openssl ESNoff ARon 3DES-CBC/SHA1-96 IPSec test"""
1833 def test_ipsec(self):
1834 """openssl ESNoff ARon 3DES-CBC/SHA1-96 IPSec test"""
1838 class Test_openssl_ESNoff_ARon_NONE_SHA1_96(RunTestIpsecEspAll):
1839 """openssl ESNoff ARon NONE/SHA1-96 IPSec test"""
1840 def test_ipsec(self):
1841 """openssl ESNoff ARon NONE/SHA1-96 IPSec test"""
1845 class Test_openssl_ESNoff_ARon_AES_CTR_128_SHA1_96(RunTestIpsecEspAll):
1846 """openssl ESNoff ARon AES-CTR-128/SHA1-96 IPSec test"""
1847 def test_ipsec(self):
1848 """openssl ESNoff ARon AES-CTR-128/SHA1-96 IPSec test"""
1852 class Test_openssl_ESNoff_ARon_AES_CTR_192_SHA1_96(RunTestIpsecEspAll):
1853 """openssl ESNoff ARon AES-CTR-192/SHA1-96 IPSec test"""
1854 def test_ipsec(self):
1855 """openssl ESNoff ARon AES-CTR-192/SHA1-96 IPSec test"""
1859 class Test_openssl_ESNoff_ARon_AES_CTR_256_SHA1_96(RunTestIpsecEspAll):
1860 """openssl ESNoff ARon AES-CTR-256/SHA1-96 IPSec test"""
1861 def test_ipsec(self):
1862 """openssl ESNoff ARon AES-CTR-256/SHA1-96 IPSec test"""
1866 class Test_openssl_ESNoff_ARoff_AES_GCM_128_NONE(RunTestIpsecEspAll):
1867 """openssl ESNoff ARoff AES-GCM-128/NONE IPSec test"""
1868 def test_ipsec(self):
1869 """openssl ESNoff ARoff AES-GCM-128/NONE IPSec test"""
1873 class Test_openssl_ESNoff_ARoff_AES_GCM_192_NONE(RunTestIpsecEspAll):
1874 """openssl ESNoff ARoff AES-GCM-192/NONE IPSec test"""
1875 def test_ipsec(self):
1876 """openssl ESNoff ARoff AES-GCM-192/NONE IPSec test"""
1880 class Test_openssl_ESNoff_ARoff_AES_GCM_256_NONE(RunTestIpsecEspAll):
1881 """openssl ESNoff ARoff AES-GCM-256/NONE IPSec test"""
1882 def test_ipsec(self):
1883 """openssl ESNoff ARoff AES-GCM-256/NONE IPSec test"""
1887 class Test_openssl_ESNoff_ARoff_AES_CBC_128_MD5_96(RunTestIpsecEspAll):
1888 """openssl ESNoff ARoff AES-CBC-128/MD5-96 IPSec test"""
1889 def test_ipsec(self):
1890 """openssl ESNoff ARoff AES-CBC-128/MD5-96 IPSec test"""
1894 class Test_openssl_ESNoff_ARoff_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
1895 """openssl ESNoff ARoff AES-CBC-192/SHA1-96 IPSec test"""
1896 def test_ipsec(self):
1897 """openssl ESNoff ARoff AES-CBC-192/SHA1-96 IPSec test"""
1901 class Test_openssl_ESNoff_ARoff_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
1902 """openssl ESNoff ARoff AES-CBC-256/SHA1-96 IPSec test"""
1903 def test_ipsec(self):
1904 """openssl ESNoff ARoff AES-CBC-256/SHA1-96 IPSec test"""
1908 class Test_openssl_ESNoff_ARoff_3DES_CBC_SHA1_96(RunTestIpsecEspAll):
1909 """openssl ESNoff ARoff 3DES-CBC/SHA1-96 IPSec test"""
1910 def test_ipsec(self):
1911 """openssl ESNoff ARoff 3DES-CBC/SHA1-96 IPSec test"""
1915 class Test_openssl_ESNoff_ARoff_NONE_SHA1_96(RunTestIpsecEspAll):
1916 """openssl ESNoff ARoff NONE/SHA1-96 IPSec test"""
1917 def test_ipsec(self):
1918 """openssl ESNoff ARoff NONE/SHA1-96 IPSec test"""
1922 class Test_openssl_ESNoff_ARoff_AES_CTR_128_SHA1_96(RunTestIpsecEspAll):
1923 """openssl ESNoff ARoff AES-CTR-128/SHA1-96 IPSec test"""
1924 def test_ipsec(self):
1925 """openssl ESNoff ARoff AES-CTR-128/SHA1-96 IPSec test"""
1929 class Test_openssl_ESNoff_ARoff_AES_CTR_192_SHA1_96(RunTestIpsecEspAll):
1930 """openssl ESNoff ARoff AES-CTR-192/SHA1-96 IPSec test"""
1931 def test_ipsec(self):
1932 """openssl ESNoff ARoff AES-CTR-192/SHA1-96 IPSec test"""
1936 class Test_openssl_ESNoff_ARoff_AES_CTR_256_SHA1_96(RunTestIpsecEspAll):
1937 """openssl ESNoff ARoff AES-CTR-256/SHA1-96 IPSec test"""
1938 def test_ipsec(self):
1939 """openssl ESNoff ARoff AES-CTR-256/SHA1-96 IPSec test"""
1943 class Test_async_ESNon_ARon_AES_GCM_128_NONE(RunTestIpsecEspAll):
1944 """async ESNon ARon AES-GCM-128/NONE IPSec test"""
1945 def test_ipsec(self):
1946 """async ESNon ARon AES-GCM-128/NONE IPSec test"""
1950 class Test_async_ESNon_ARon_AES_GCM_192_NONE(RunTestIpsecEspAll):
1951 """async ESNon ARon AES-GCM-192/NONE IPSec test"""
1952 def test_ipsec(self):
1953 """async ESNon ARon AES-GCM-192/NONE IPSec test"""
1957 class Test_async_ESNon_ARon_AES_GCM_256_NONE(RunTestIpsecEspAll):
1958 """async ESNon ARon AES-GCM-256/NONE IPSec test"""
1959 def test_ipsec(self):
1960 """async ESNon ARon AES-GCM-256/NONE IPSec test"""
1964 class Test_async_ESNon_ARon_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
1965 """async ESNon ARon AES-CBC-192/SHA1-96 IPSec test"""
1966 def test_ipsec(self):
1967 """async ESNon ARon AES-CBC-192/SHA1-96 IPSec test"""
1971 class Test_async_ESNon_ARon_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
1972 """async ESNon ARon AES-CBC-256/SHA1-96 IPSec test"""
1973 def test_ipsec(self):
1974 """async ESNon ARon AES-CBC-256/SHA1-96 IPSec test"""
1978 class Test_async_ESNon_ARoff_AES_GCM_128_NONE(RunTestIpsecEspAll):
1979 """async ESNon ARoff AES-GCM-128/NONE IPSec test"""
1980 def test_ipsec(self):
1981 """async ESNon ARoff AES-GCM-128/NONE IPSec test"""
1985 class Test_async_ESNon_ARoff_AES_GCM_192_NONE(RunTestIpsecEspAll):
1986 """async ESNon ARoff AES-GCM-192/NONE IPSec test"""
1987 def test_ipsec(self):
1988 """async ESNon ARoff AES-GCM-192/NONE IPSec test"""
1992 class Test_async_ESNon_ARoff_AES_GCM_256_NONE(RunTestIpsecEspAll):
1993 """async ESNon ARoff AES-GCM-256/NONE IPSec test"""
1994 def test_ipsec(self):
1995 """async ESNon ARoff AES-GCM-256/NONE IPSec test"""
1999 class Test_async_ESNon_ARoff_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
2000 """async ESNon ARoff AES-CBC-192/SHA1-96 IPSec test"""
2001 def test_ipsec(self):
2002 """async ESNon ARoff AES-CBC-192/SHA1-96 IPSec test"""
2006 class Test_async_ESNon_ARoff_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
2007 """async ESNon ARoff AES-CBC-256/SHA1-96 IPSec test"""
2008 def test_ipsec(self):
2009 """async ESNon ARoff AES-CBC-256/SHA1-96 IPSec test"""
2013 class Test_async_ESNoff_ARon_AES_GCM_128_NONE(RunTestIpsecEspAll):
2014 """async ESNoff ARon AES-GCM-128/NONE IPSec test"""
2015 def test_ipsec(self):
2016 """async ESNoff ARon AES-GCM-128/NONE IPSec test"""
2020 class Test_async_ESNoff_ARon_AES_GCM_192_NONE(RunTestIpsecEspAll):
2021 """async ESNoff ARon AES-GCM-192/NONE IPSec test"""
2022 def test_ipsec(self):
2023 """async ESNoff ARon AES-GCM-192/NONE IPSec test"""
2027 class Test_async_ESNoff_ARon_AES_GCM_256_NONE(RunTestIpsecEspAll):
2028 """async ESNoff ARon AES-GCM-256/NONE IPSec test"""
2029 def test_ipsec(self):
2030 """async ESNoff ARon AES-GCM-256/NONE IPSec test"""
2034 class Test_async_ESNoff_ARon_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
2035 """async ESNoff ARon AES-CBC-192/SHA1-96 IPSec test"""
2036 def test_ipsec(self):
2037 """async ESNoff ARon AES-CBC-192/SHA1-96 IPSec test"""
2041 class Test_async_ESNoff_ARon_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
2042 """async ESNoff ARon AES-CBC-256/SHA1-96 IPSec test"""
2043 def test_ipsec(self):
2044 """async ESNoff ARon AES-CBC-256/SHA1-96 IPSec test"""
2048 class Test_async_ESNoff_ARoff_AES_GCM_128_NONE(RunTestIpsecEspAll):
2049 """async ESNoff ARoff AES-GCM-128/NONE IPSec test"""
2050 def test_ipsec(self):
2051 """async ESNoff ARoff AES-GCM-128/NONE IPSec test"""
2055 class Test_async_ESNoff_ARoff_AES_GCM_192_NONE(RunTestIpsecEspAll):
2056 """async ESNoff ARoff AES-GCM-192/NONE IPSec test"""
2057 def test_ipsec(self):
2058 """async ESNoff ARoff AES-GCM-192/NONE IPSec test"""
2062 class Test_async_ESNoff_ARoff_AES_GCM_256_NONE(RunTestIpsecEspAll):
2063 """async ESNoff ARoff AES-GCM-256/NONE IPSec test"""
2064 def test_ipsec(self):
2065 """async ESNoff ARoff AES-GCM-256/NONE IPSec test"""
2069 class Test_async_ESNoff_ARoff_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
2070 """async ESNoff ARoff AES-CBC-192/SHA1-96 IPSec test"""
2071 def test_ipsec(self):
2072 """async ESNoff ARoff AES-CBC-192/SHA1-96 IPSec test"""
2076 class Test_async_ESNoff_ARoff_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
2077 """async ESNoff ARoff AES-CBC-256/SHA1-96 IPSec test"""
2078 def test_ipsec(self):
2079 """async ESNoff ARoff AES-CBC-256/SHA1-96 IPSec test"""