test/test_ipsec_esp.py

   1 import socket
   2 import unittest
   3 from scapy.layers.ipsec import ESP
   4 from scapy.layers.inet import UDP
   5
   6 from parameterized import parameterized
   7 from framework import VppTestRunner
   8 from template_ipsec import IpsecTra46Tests, IpsecTun46Tests, TemplateIpsec, \
   9     IpsecTcpTests, IpsecTun4Tests, IpsecTra4Tests, config_tra_params, \
  10     config_tun_params, IPsecIPv4Params, IPsecIPv6Params, \
  11     IpsecTra4, IpsecTun4, IpsecTra6, IpsecTun6, \
  12     IpsecTun6HandoffTests, IpsecTun4HandoffTests
  13 from vpp_ipsec import VppIpsecSpd, VppIpsecSpdEntry, VppIpsecSA,\
  14     VppIpsecSpdItfBinding
  15 from vpp_ip_route import VppIpRoute, VppRoutePath
  16 from vpp_ip import DpoProto
  17 from vpp_papi import VppEnum
  18
  19 NUM_PKTS = 67
  20
  21
  22 class ConfigIpsecESP(TemplateIpsec):
  23     encryption_type = ESP
  24     tra4_encrypt_node_name = "esp4-encrypt"
  25     tra4_decrypt_node_name = "esp4-decrypt"
  26     tra6_encrypt_node_name = "esp6-encrypt"
  27     tra6_decrypt_node_name = "esp6-decrypt"
  28     tun4_encrypt_node_name = "esp4-encrypt"
  29     tun4_decrypt_node_name = "esp4-decrypt"
  30     tun6_encrypt_node_name = "esp6-encrypt"
  31     tun6_decrypt_node_name = "esp6-decrypt"
  32
  33     @classmethod
  34     def setUpClass(cls):
  35         super(ConfigIpsecESP, cls).setUpClass()
  36
  37     @classmethod
  38     def tearDownClass(cls):
  39         super(ConfigIpsecESP, cls).tearDownClass()
  40
  41     def setUp(self):
  42         super(ConfigIpsecESP, self).setUp()
  43
  44     def tearDown(self):
  45         super(ConfigIpsecESP, self).tearDown()
  46
  47     def config_network(self, params):
  48         self.net_objs = []
  49         self.tun_if = self.pg0
  50         self.tra_if = self.pg2
  51         self.logger.info(self.vapi.ppcli("show int addr"))
  52
  53         self.tra_spd = VppIpsecSpd(self, self.tra_spd_id)
  54         self.tra_spd.add_vpp_config()
  55         self.net_objs.append(self.tra_spd)
  56         self.tun_spd = VppIpsecSpd(self, self.tun_spd_id)
  57         self.tun_spd.add_vpp_config()
  58         self.net_objs.append(self.tun_spd)
  59
  60         b = VppIpsecSpdItfBinding(self, self.tun_spd,
  61                                   self.tun_if)
  62         b.add_vpp_config()
  63         self.net_objs.append(b)
  64
  65         b = VppIpsecSpdItfBinding(self, self.tra_spd,
  66                                   self.tra_if)
  67         b.add_vpp_config()
  68         self.net_objs.append(b)
  69
  70         for p in params:
  71             self.config_esp_tra(p)
  72             config_tra_params(p, self.encryption_type)
  73         for p in params:
  74             self.config_esp_tun(p)
  75             config_tun_params(p, self.encryption_type, self.tun_if)
  76
  77         for p in params:
  78             d = DpoProto.DPO_PROTO_IP6 if p.is_ipv6 else DpoProto.DPO_PROTO_IP4
  79             r = VppIpRoute(self,  p.remote_tun_if_host, p.addr_len,
  80                            [VppRoutePath(self.tun_if.remote_addr[p.addr_type],
  81                                          0xffffffff,
  82                                          proto=d)])
  83             r.add_vpp_config()
  84             self.net_objs.append(r)
  85
  86         self.logger.info(self.vapi.ppcli("show ipsec all"))
  87
  88     def unconfig_network(self):
  89         for o in reversed(self.net_objs):
  90             o.remove_vpp_config()
  91         self.net_objs = []
  92
  93     def config_esp_tun(self, params):
  94         addr_type = params.addr_type
  95         scapy_tun_sa_id = params.scapy_tun_sa_id
  96         scapy_tun_spi = params.scapy_tun_spi
  97         vpp_tun_sa_id = params.vpp_tun_sa_id
  98         vpp_tun_spi = params.vpp_tun_spi
  99         auth_algo_vpp_id = params.auth_algo_vpp_id
 100         auth_key = params.auth_key
 101         crypt_algo_vpp_id = params.crypt_algo_vpp_id
 102         crypt_key = params.crypt_key
 103         remote_tun_if_host = params.remote_tun_if_host
 104         addr_any = params.addr_any
 105         addr_bcast = params.addr_bcast
 106         e = VppEnum.vl_api_ipsec_spd_action_t
 107         flags = params.flags
 108         salt = params.salt
 109         objs = []
 110
 111         params.tun_sa_in = VppIpsecSA(self, scapy_tun_sa_id, scapy_tun_spi,
 112                                       auth_algo_vpp_id, auth_key,
 113                                       crypt_algo_vpp_id, crypt_key,
 114                                       self.vpp_esp_protocol,
 115                                       self.tun_if.local_addr[addr_type],
 116                                       self.tun_if.remote_addr[addr_type],
 117                                       flags=flags,
 118                                       salt=salt)
 119         params.tun_sa_out = VppIpsecSA(self, vpp_tun_sa_id, vpp_tun_spi,
 120                                        auth_algo_vpp_id, auth_key,
 121                                        crypt_algo_vpp_id, crypt_key,
 122                                        self.vpp_esp_protocol,
 123                                        self.tun_if.remote_addr[addr_type],
 124                                        self.tun_if.local_addr[addr_type],
 125                                        flags=flags,
 126                                        salt=salt)
 127         objs.append(params.tun_sa_in)
 128         objs.append(params.tun_sa_out)
 129
 130         params.spd_policy_in_any = VppIpsecSpdEntry(self, self.tun_spd,
 131                                                     scapy_tun_sa_id,
 132                                                     addr_any, addr_bcast,
 133                                                     addr_any, addr_bcast,
 134                                                     socket.IPPROTO_ESP)
 135         params.spd_policy_out_any = VppIpsecSpdEntry(self, self.tun_spd,
 136                                                      scapy_tun_sa_id,
 137                                                      addr_any, addr_bcast,
 138                                                      addr_any, addr_bcast,
 139                                                      socket.IPPROTO_ESP,
 140                                                      is_outbound=0)
 141         objs.append(params.spd_policy_out_any)
 142         objs.append(params.spd_policy_in_any)
 143
 144         objs.append(VppIpsecSpdEntry(self, self.tun_spd, vpp_tun_sa_id,
 145                                      remote_tun_if_host, remote_tun_if_host,
 146                                      self.pg1.remote_addr[addr_type],
 147                                      self.pg1.remote_addr[addr_type],
 148                                      0,
 149                                      priority=10,
 150                                      policy=e.IPSEC_API_SPD_ACTION_PROTECT,
 151                                      is_outbound=0))
 152         objs.append(VppIpsecSpdEntry(self, self.tun_spd, scapy_tun_sa_id,
 153                                      self.pg1.remote_addr[addr_type],
 154                                      self.pg1.remote_addr[addr_type],
 155                                      remote_tun_if_host, remote_tun_if_host,
 156                                      0,
 157                                      policy=e.IPSEC_API_SPD_ACTION_PROTECT,
 158                                      priority=10))
 159         objs.append(VppIpsecSpdEntry(self, self.tun_spd, vpp_tun_sa_id,
 160                                      remote_tun_if_host, remote_tun_if_host,
 161                                      self.pg0.local_addr[addr_type],
 162                                      self.pg0.local_addr[addr_type],
 163                                      0,
 164                                      priority=20,
 165                                      policy=e.IPSEC_API_SPD_ACTION_PROTECT,
 166                                      is_outbound=0))
 167         objs.append(VppIpsecSpdEntry(self, self.tun_spd, scapy_tun_sa_id,
 168                                      self.pg0.local_addr[addr_type],
 169                                      self.pg0.local_addr[addr_type],
 170                                      remote_tun_if_host, remote_tun_if_host,
 171                                      0,
 172                                      policy=e.IPSEC_API_SPD_ACTION_PROTECT,
 173                                      priority=20))
 174         for o in objs:
 175             o.add_vpp_config()
 176         self.net_objs = self.net_objs + objs
 177
 178     def config_esp_tra(self, params):
 179         addr_type = params.addr_type
 180         scapy_tra_sa_id = params.scapy_tra_sa_id
 181         scapy_tra_spi = params.scapy_tra_spi
 182         vpp_tra_sa_id = params.vpp_tra_sa_id
 183         vpp_tra_spi = params.vpp_tra_spi
 184         auth_algo_vpp_id = params.auth_algo_vpp_id
 185         auth_key = params.auth_key
 186         crypt_algo_vpp_id = params.crypt_algo_vpp_id
 187         crypt_key = params.crypt_key
 188         addr_any = params.addr_any
 189         addr_bcast = params.addr_bcast
 190         flags = (VppEnum.vl_api_ipsec_sad_flags_t.
 191                  IPSEC_API_SAD_FLAG_USE_ANTI_REPLAY)
 192         e = VppEnum.vl_api_ipsec_spd_action_t
 193         flags = params.flags | flags
 194         salt = params.salt
 195         objs = []
 196
 197         params.tra_sa_in = VppIpsecSA(self, scapy_tra_sa_id, scapy_tra_spi,
 198                                       auth_algo_vpp_id, auth_key,
 199                                       crypt_algo_vpp_id, crypt_key,
 200                                       self.vpp_esp_protocol,
 201                                       flags=flags,
 202                                       salt=salt)
 203         params.tra_sa_out = VppIpsecSA(self, vpp_tra_sa_id, vpp_tra_spi,
 204                                        auth_algo_vpp_id, auth_key,
 205                                        crypt_algo_vpp_id, crypt_key,
 206                                        self.vpp_esp_protocol,
 207                                        flags=flags,
 208                                        salt=salt)
 209         objs.append(params.tra_sa_in)
 210         objs.append(params.tra_sa_out)
 211
 212         objs.append(VppIpsecSpdEntry(self, self.tra_spd, vpp_tra_sa_id,
 213                                      addr_any, addr_bcast,
 214                                      addr_any, addr_bcast,
 215                                      socket.IPPROTO_ESP))
 216         objs.append(VppIpsecSpdEntry(self, self.tra_spd, vpp_tra_sa_id,
 217                                      addr_any, addr_bcast,
 218                                      addr_any, addr_bcast,
 219                                      socket.IPPROTO_ESP,
 220                                      is_outbound=0))
 221         objs.append(VppIpsecSpdEntry(self, self.tra_spd, vpp_tra_sa_id,
 222                                      self.tra_if.local_addr[addr_type],
 223                                      self.tra_if.local_addr[addr_type],
 224                                      self.tra_if.remote_addr[addr_type],
 225                                      self.tra_if.remote_addr[addr_type],
 226                                      0, priority=10,
 227                                      policy=e.IPSEC_API_SPD_ACTION_PROTECT,
 228                                      is_outbound=0))
 229         objs.append(VppIpsecSpdEntry(self, self.tra_spd, scapy_tra_sa_id,
 230                                      self.tra_if.local_addr[addr_type],
 231                                      self.tra_if.local_addr[addr_type],
 232                                      self.tra_if.remote_addr[addr_type],
 233                                      self.tra_if.remote_addr[addr_type],
 234                                      0, policy=e.IPSEC_API_SPD_ACTION_PROTECT,
 235                                      priority=10))
 236         for o in objs:
 237             o.add_vpp_config()
 238         self.net_objs = self.net_objs + objs
 239
 240
 241 class TemplateIpsecEsp(ConfigIpsecESP):
 242     """
 243     Basic test for ipsec esp sanity - tunnel and transport modes.
 244
 245     Below 4 cases are covered as part of this test
 246     1) ipsec esp v4 transport basic test  - IPv4 Transport mode
 247         scenario using HMAC-SHA1-96 integrity algo
 248     2) ipsec esp v4 transport burst test
 249         Above test for 257 pkts
 250     3) ipsec esp 4o4 tunnel basic test    - IPv4 Tunnel mode
 251         scenario using HMAC-SHA1-96 integrity algo
 252     4) ipsec esp 4o4 tunnel burst test
 253         Above test for 257 pkts
 254
 255     TRANSPORT MODE:
 256
 257      ---   encrypt   ---
 258     |pg2| <-------> |VPP|
 259      ---   decrypt   ---
 260
 261     TUNNEL MODE:
 262
 263      ---   encrypt   ---   plain   ---
 264     |pg0| <-------  |VPP| <------ |pg1|
 265      ---             ---           ---
 266
 267      ---   decrypt   ---   plain   ---
 268     |pg0| ------->  |VPP| ------> |pg1|
 269      ---             ---           ---
 270     """
 271
 272     @classmethod
 273     def setUpClass(cls):
 274         super(TemplateIpsecEsp, cls).setUpClass()
 275
 276     @classmethod
 277     def tearDownClass(cls):
 278         super(TemplateIpsecEsp, cls).tearDownClass()
 279
 280     def setUp(self):
 281         super(TemplateIpsecEsp, self).setUp()
 282         self.config_network(self.params.values())
 283
 284     def tearDown(self):
 285         self.unconfig_network()
 286         super(TemplateIpsecEsp, self).tearDown()
 287
 288
 289 class TestIpsecEsp1(TemplateIpsecEsp, IpsecTra46Tests, IpsecTun46Tests):
 290     """ Ipsec ESP - TUN & TRA tests """
 291     pass
 292
 293
 294 class TestIpsecEsp2(TemplateIpsecEsp, IpsecTcpTests):
 295     """ Ipsec ESP - TCP tests """
 296     pass
 297
 298
 299 class TestIpsecEspHandoff(TemplateIpsecEsp,
 300                           IpsecTun6HandoffTests,
 301                           IpsecTun4HandoffTests):
 302     """ Ipsec ESP - handoff tests """
 303     pass
 304
 305
 306 class TemplateIpsecEspUdp(ConfigIpsecESP):
 307     """
 308     UDP encapped ESP
 309     """
 310
 311     @classmethod
 312     def setUpClass(cls):
 313         super(TemplateIpsecEspUdp, cls).setUpClass()
 314
 315     @classmethod
 316     def tearDownClass(cls):
 317         super(TemplateIpsecEspUdp, cls).tearDownClass()
 318
 319     def setUp(self):
 320         super(TemplateIpsecEspUdp, self).setUp()
 321         self.net_objs = []
 322         self.tun_if = self.pg0
 323         self.tra_if = self.pg2
 324         self.logger.info(self.vapi.ppcli("show int addr"))
 325
 326         p = self.ipv4_params
 327         p.flags = (VppEnum.vl_api_ipsec_sad_flags_t.
 328                    IPSEC_API_SAD_FLAG_UDP_ENCAP)
 329         p.nat_header = UDP(sport=5454, dport=4500)
 330
 331         self.tra_spd = VppIpsecSpd(self, self.tra_spd_id)
 332         self.tra_spd.add_vpp_config()
 333         VppIpsecSpdItfBinding(self, self.tra_spd,
 334                               self.tra_if).add_vpp_config()
 335
 336         self.config_esp_tra(p)
 337         config_tra_params(p, self.encryption_type)
 338
 339         self.tun_spd = VppIpsecSpd(self, self.tun_spd_id)
 340         self.tun_spd.add_vpp_config()
 341         VppIpsecSpdItfBinding(self, self.tun_spd,
 342                               self.tun_if).add_vpp_config()
 343
 344         self.config_esp_tun(p)
 345         self.logger.info(self.vapi.ppcli("show ipsec all"))
 346
 347         d = DpoProto.DPO_PROTO_IP4
 348         VppIpRoute(self,  p.remote_tun_if_host, p.addr_len,
 349                    [VppRoutePath(self.tun_if.remote_addr[p.addr_type],
 350                                  0xffffffff,
 351                                  proto=d)]).add_vpp_config()
 352
 353     def tearDown(self):
 354         super(TemplateIpsecEspUdp, self).tearDown()
 355
 356     def show_commands_at_teardown(self):
 357         self.logger.info(self.vapi.cli("show hardware"))
 358
 359
 360 class TestIpsecEspUdp(TemplateIpsecEspUdp, IpsecTra4Tests):
 361     """ Ipsec NAT-T ESP UDP tests """
 362     pass
 363
 364
 365 class MyParameters():
 366     def __init__(self):
 367         self.engines = ["ia32", "ipsecmb", "openssl"]
 368         flag_esn = VppEnum.vl_api_ipsec_sad_flags_t.IPSEC_API_SAD_FLAG_USE_ESN
 369         self.flags = [0, flag_esn]
 370         # foreach crypto algorithm
 371         self.algos = {
 372             'AES-GCM-128/NONE': {
 373                   'vpp-crypto': (VppEnum.vl_api_ipsec_crypto_alg_t.
 374                                  IPSEC_API_CRYPTO_ALG_AES_GCM_128),
 375                   'vpp-integ': (VppEnum.vl_api_ipsec_integ_alg_t.
 376                                 IPSEC_API_INTEG_ALG_NONE),
 377                   'scapy-crypto': "AES-GCM",
 378                   'scapy-integ': "NULL",
 379                   'key': b"JPjyOWBeVEQiMe7h",
 380                   'salt': 0},
 381             'AES-GCM-192/NONE': {
 382                   'vpp-crypto': (VppEnum.vl_api_ipsec_crypto_alg_t.
 383                                  IPSEC_API_CRYPTO_ALG_AES_GCM_192),
 384                   'vpp-integ': (VppEnum.vl_api_ipsec_integ_alg_t.
 385                                 IPSEC_API_INTEG_ALG_NONE),
 386                   'scapy-crypto': "AES-GCM",
 387                   'scapy-integ': "NULL",
 388                   'key': b"JPjyOWBeVEQiMe7h01234567",
 389                   'salt': 1010},
 390             'AES-GCM-256/NONE': {
 391                   'vpp-crypto': (VppEnum.vl_api_ipsec_crypto_alg_t.
 392                                  IPSEC_API_CRYPTO_ALG_AES_GCM_256),
 393                   'vpp-integ': (VppEnum.vl_api_ipsec_integ_alg_t.
 394                                 IPSEC_API_INTEG_ALG_NONE),
 395                   'scapy-crypto': "AES-GCM",
 396                   'scapy-integ': "NULL",
 397                   'key': b"JPjyOWBeVEQiMe7h0123456787654321",
 398                   'salt': 2020},
 399             'AES-CBC-128/MD5-96': {
 400                   'vpp-crypto': (VppEnum.vl_api_ipsec_crypto_alg_t.
 401                                  IPSEC_API_CRYPTO_ALG_AES_CBC_128),
 402                   'vpp-integ': (VppEnum.vl_api_ipsec_integ_alg_t.
 403                                 IPSEC_API_INTEG_ALG_MD5_96),
 404                   'scapy-crypto': "AES-CBC",
 405                   'scapy-integ': "HMAC-MD5-96",
 406                   'salt': 0,
 407                   'key': b"JPjyOWBeVEQiMe7h"},
 408             'AES-CBC-192/SHA1-96': {
 409                   'vpp-crypto': (VppEnum.vl_api_ipsec_crypto_alg_t.
 410                                  IPSEC_API_CRYPTO_ALG_AES_CBC_192),
 411                   'vpp-integ': (VppEnum.vl_api_ipsec_integ_alg_t.
 412                                 IPSEC_API_INTEG_ALG_SHA1_96),
 413                   'scapy-crypto': "AES-CBC",
 414                   'scapy-integ': "HMAC-SHA1-96",
 415                   'salt': 0,
 416                   'key': b"JPjyOWBeVEQiMe7hJPjyOWBe"},
 417             'AES-CBC-256/SHA1-96': {
 418                   'vpp-crypto': (VppEnum.vl_api_ipsec_crypto_alg_t.
 419                                  IPSEC_API_CRYPTO_ALG_AES_CBC_256),
 420                   'vpp-integ': (VppEnum.vl_api_ipsec_integ_alg_t.
 421                                 IPSEC_API_INTEG_ALG_SHA1_96),
 422                   'scapy-crypto': "AES-CBC",
 423                   'scapy-integ': "HMAC-SHA1-96",
 424                   'salt': 0,
 425                   'key': b"JPjyOWBeVEQiMe7hJPjyOWBeVEQiMe7h"},
 426             '3DES-CBC/SHA1-96': {
 427                   'vpp-crypto': (VppEnum.vl_api_ipsec_crypto_alg_t.
 428                                  IPSEC_API_CRYPTO_ALG_3DES_CBC),
 429                   'vpp-integ': (VppEnum.vl_api_ipsec_integ_alg_t.
 430                                 IPSEC_API_INTEG_ALG_SHA1_96),
 431                   'scapy-crypto': "3DES",
 432                   'scapy-integ': "HMAC-SHA1-96",
 433                   'salt': 0,
 434                   'key': b"JPjyOWBeVEQiMe7h00112233"},
 435             'NONE/SHA1-96': {
 436                   'vpp-crypto': (VppEnum.vl_api_ipsec_crypto_alg_t.
 437                                  IPSEC_API_CRYPTO_ALG_NONE),
 438                   'vpp-integ': (VppEnum.vl_api_ipsec_integ_alg_t.
 439                                 IPSEC_API_INTEG_ALG_SHA1_96),
 440                   'scapy-crypto': "NULL",
 441                   'scapy-integ': "HMAC-SHA1-96",
 442                   'salt': 0,
 443                   'key': b"JPjyOWBeVEQiMe7h00112233"}}
 444
 445
 446 class RunTestIpsecEspAll(ConfigIpsecESP,
 447                          IpsecTra4, IpsecTra6,
 448                          IpsecTun4, IpsecTun6):
 449     """ Ipsec ESP all Algos """
 450
 451     def setUp(self):
 452         super(RunTestIpsecEspAll, self).setUp()
 453         test_args = str.split(self.__doc__, " ")
 454
 455         params = MyParameters()
 456         self.engine = test_args[0]
 457         self.flag = params.flags[0]
 458         if test_args[1] == 'ESN':
 459             self.flag = params.flags[1]
 460
 461         self.algo = params.algos[test_args[2]]
 462
 463     def tearDown(self):
 464         super(RunTestIpsecEspAll, self).tearDown()
 465
 466     def run_test(self):
 467         self.run_a_test(self.engine, self.flag, self.algo)
 468
 469     def run_a_test(self, engine, flag, algo):
 470         self.vapi.cli("set crypto handler all %s" % engine)
 471
 472         self.ipv4_params = IPsecIPv4Params()
 473         self.ipv6_params = IPsecIPv6Params()
 474
 475         self.params = {self.ipv4_params.addr_type:
 476                        self.ipv4_params,
 477                        self.ipv6_params.addr_type:
 478                        self.ipv6_params}
 479
 480         for _, p in self.params.items():
 481             p.auth_algo_vpp_id = algo['vpp-integ']
 482             p.crypt_algo_vpp_id = algo['vpp-crypto']
 483             p.crypt_algo = algo['scapy-crypto']
 484             p.auth_algo = algo['scapy-integ']
 485             p.crypt_key = algo['key']
 486             p.salt = algo['salt']
 487             p.flags = p.flags | flag
 488
 489         self.reporter.send_keep_alive(self)
 490
 491         #
 492         # configure the SPDs. SAs, etc
 493         #
 494         self.config_network(self.params.values())
 495
 496         #
 497         # run some traffic.
 498         #  An exhautsive 4o6, 6o4 is not necessary
 499         #  for each algo
 500         #
 501         self.verify_tra_basic6(count=NUM_PKTS)
 502         self.verify_tra_basic4(count=NUM_PKTS)
 503         self.verify_tun_66(self.params[socket.AF_INET6],
 504                            count=NUM_PKTS)
 505         self.verify_tun_44(self.params[socket.AF_INET],
 506                            count=NUM_PKTS)
 507
 508         #
 509         # remove the SPDs, SAs, etc
 510         #
 511         self.unconfig_network()
 512
 513         #
 514         # reconfigure the network and SA to run the
 515         # anti replay tests
 516         #
 517         self.config_network(self.params.values())
 518         self.verify_tra_anti_replay()
 519         self.unconfig_network()
 520
 521 #
 522 # To generate test classes, do:
 523 #   grep '# GEN' test_ipsec_esp.py | sed -e 's/# GEN //g' | bash
 524 #
 525 # GEN for ENG in ia32 ipsecmb openssl; do \
 526 # GEN   for FLG in noESN ESN; do for ALG in AES-GCM-128/NONE \
 527 # GEN     AES-GCM-192/NONE AES-GCM-256/NONE AES-CBC-128/MD5-96 \
 528 # GEN     AES-CBC-192/SHA1-96 AES-CBC-256/SHA1-96 \
 529 # GEN     3DES-CBC/SHA1-96 NONE/SHA1-96; do \
 530 # GEN      echo -e "\n\nclass Test_${ENG}_${FLG}_${ALG}(RunTestIpsecEspAll):" |
 531 # GEN             sed -e 's/-/_/g' -e 's#/#_#g' ; \
 532 # GEN      echo '    """'$ENG $FLG $ALG IPSec test'"""' ;
 533 # GEN      echo "    def test_ipsec(self):";
 534 # GEN      echo "        self.run_test()";
 535 # GEN done; done; done
 536
 537
 538 class Test_ia32_noESN_AES_GCM_128_NONE(RunTestIpsecEspAll):
 539     """ia32 noESN AES-GCM-128/NONE IPSec test"""
 540     def test_ipsec(self):
 541         self.run_test()
 542
 543
 544 class Test_ia32_noESN_AES_GCM_192_NONE(RunTestIpsecEspAll):
 545     """ia32 noESN AES-GCM-192/NONE IPSec test"""
 546     def test_ipsec(self):
 547         self.run_test()
 548
 549
 550 class Test_ia32_noESN_AES_GCM_256_NONE(RunTestIpsecEspAll):
 551     """ia32 noESN AES-GCM-256/NONE IPSec test"""
 552     def test_ipsec(self):
 553         self.run_test()
 554
 555
 556 class Test_ia32_noESN_AES_CBC_128_MD5_96(RunTestIpsecEspAll):
 557     """ia32 noESN AES-CBC-128/MD5-96 IPSec test"""
 558     def test_ipsec(self):
 559         self.run_test()
 560
 561
 562 class Test_ia32_noESN_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
 563     """ia32 noESN AES-CBC-192/SHA1-96 IPSec test"""
 564     def test_ipsec(self):
 565         self.run_test()
 566
 567
 568 class Test_ia32_noESN_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
 569     """ia32 noESN AES-CBC-256/SHA1-96 IPSec test"""
 570     def test_ipsec(self):
 571         self.run_test()
 572
 573
 574 class Test_ia32_noESN_3DES_CBC_SHA1_96(RunTestIpsecEspAll):
 575     """ia32 noESN 3DES-CBC/SHA1-96 IPSec test"""
 576     def test_ipsec(self):
 577         self.run_test()
 578
 579
 580 class Test_ia32_noESN_NONE_SHA1_96(RunTestIpsecEspAll):
 581     """ia32 noESN NONE/SHA1-96 IPSec test"""
 582     def test_ipsec(self):
 583         self.run_test()
 584
 585
 586 class Test_ia32_ESN_AES_GCM_128_NONE(RunTestIpsecEspAll):
 587     """ia32 ESN AES-GCM-128/NONE IPSec test"""
 588     def test_ipsec(self):
 589         self.run_test()
 590
 591
 592 class Test_ia32_ESN_AES_GCM_192_NONE(RunTestIpsecEspAll):
 593     """ia32 ESN AES-GCM-192/NONE IPSec test"""
 594     def test_ipsec(self):
 595         self.run_test()
 596
 597
 598 class Test_ia32_ESN_AES_GCM_256_NONE(RunTestIpsecEspAll):
 599     """ia32 ESN AES-GCM-256/NONE IPSec test"""
 600     def test_ipsec(self):
 601         self.run_test()
 602
 603
 604 class Test_ia32_ESN_AES_CBC_128_MD5_96(RunTestIpsecEspAll):
 605     """ia32 ESN AES-CBC-128/MD5-96 IPSec test"""
 606     def test_ipsec(self):
 607         self.run_test()
 608
 609
 610 class Test_ia32_ESN_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
 611     """ia32 ESN AES-CBC-192/SHA1-96 IPSec test"""
 612     def test_ipsec(self):
 613         self.run_test()
 614
 615
 616 class Test_ia32_ESN_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
 617     """ia32 ESN AES-CBC-256/SHA1-96 IPSec test"""
 618     def test_ipsec(self):
 619         self.run_test()
 620
 621
 622 class Test_ia32_ESN_3DES_CBC_SHA1_96(RunTestIpsecEspAll):
 623     """ia32 ESN 3DES-CBC/SHA1-96 IPSec test"""
 624     def test_ipsec(self):
 625         self.run_test()
 626
 627
 628 class Test_ia32_ESN_NONE_SHA1_96(RunTestIpsecEspAll):
 629     """ia32 ESN NONE/SHA1-96 IPSec test"""
 630     def test_ipsec(self):
 631         self.run_test()
 632
 633
 634 class Test_ipsecmb_noESN_AES_GCM_128_NONE(RunTestIpsecEspAll):
 635     """ipsecmb noESN AES-GCM-128/NONE IPSec test"""
 636     def test_ipsec(self):
 637         self.run_test()
 638
 639
 640 class Test_ipsecmb_noESN_AES_GCM_192_NONE(RunTestIpsecEspAll):
 641     """ipsecmb noESN AES-GCM-192/NONE IPSec test"""
 642     def test_ipsec(self):
 643         self.run_test()
 644
 645
 646 class Test_ipsecmb_noESN_AES_GCM_256_NONE(RunTestIpsecEspAll):
 647     """ipsecmb noESN AES-GCM-256/NONE IPSec test"""
 648     def test_ipsec(self):
 649         self.run_test()
 650
 651
 652 class Test_ipsecmb_noESN_AES_CBC_128_MD5_96(RunTestIpsecEspAll):
 653     """ipsecmb noESN AES-CBC-128/MD5-96 IPSec test"""
 654     def test_ipsec(self):
 655         self.run_test()
 656
 657
 658 class Test_ipsecmb_noESN_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
 659     """ipsecmb noESN AES-CBC-192/SHA1-96 IPSec test"""
 660     def test_ipsec(self):
 661         self.run_test()
 662
 663
 664 class Test_ipsecmb_noESN_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
 665     """ipsecmb noESN AES-CBC-256/SHA1-96 IPSec test"""
 666     def test_ipsec(self):
 667         self.run_test()
 668
 669
 670 class Test_ipsecmb_noESN_3DES_CBC_SHA1_96(RunTestIpsecEspAll):
 671     """ipsecmb noESN 3DES-CBC/SHA1-96 IPSec test"""
 672     def test_ipsec(self):
 673         self.run_test()
 674
 675
 676 class Test_ipsecmb_noESN_NONE_SHA1_96(RunTestIpsecEspAll):
 677     """ipsecmb noESN NONE/SHA1-96 IPSec test"""
 678     def test_ipsec(self):
 679         self.run_test()
 680
 681
 682 class Test_ipsecmb_ESN_AES_GCM_128_NONE(RunTestIpsecEspAll):
 683     """ipsecmb ESN AES-GCM-128/NONE IPSec test"""
 684     def test_ipsec(self):
 685         self.run_test()
 686
 687
 688 class Test_ipsecmb_ESN_AES_GCM_192_NONE(RunTestIpsecEspAll):
 689     """ipsecmb ESN AES-GCM-192/NONE IPSec test"""
 690     def test_ipsec(self):
 691         self.run_test()
 692
 693
 694 class Test_ipsecmb_ESN_AES_GCM_256_NONE(RunTestIpsecEspAll):
 695     """ipsecmb ESN AES-GCM-256/NONE IPSec test"""
 696     def test_ipsec(self):
 697         self.run_test()
 698
 699
 700 class Test_ipsecmb_ESN_AES_CBC_128_MD5_96(RunTestIpsecEspAll):
 701     """ipsecmb ESN AES-CBC-128/MD5-96 IPSec test"""
 702     def test_ipsec(self):
 703         self.run_test()
 704
 705
 706 class Test_ipsecmb_ESN_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
 707     """ipsecmb ESN AES-CBC-192/SHA1-96 IPSec test"""
 708     def test_ipsec(self):
 709         self.run_test()
 710
 711
 712 class Test_ipsecmb_ESN_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
 713     """ipsecmb ESN AES-CBC-256/SHA1-96 IPSec test"""
 714     def test_ipsec(self):
 715         self.run_test()
 716
 717
 718 class Test_ipsecmb_ESN_3DES_CBC_SHA1_96(RunTestIpsecEspAll):
 719     """ipsecmb ESN 3DES-CBC/SHA1-96 IPSec test"""
 720     def test_ipsec(self):
 721         self.run_test()
 722
 723
 724 class Test_ipsecmb_ESN_NONE_SHA1_96(RunTestIpsecEspAll):
 725     """ipsecmb ESN NONE/SHA1-96 IPSec test"""
 726     def test_ipsec(self):
 727         self.run_test()
 728
 729
 730 class Test_openssl_noESN_AES_GCM_128_NONE(RunTestIpsecEspAll):
 731     """openssl noESN AES-GCM-128/NONE IPSec test"""
 732     def test_ipsec(self):
 733         self.run_test()
 734
 735
 736 class Test_openssl_noESN_AES_GCM_192_NONE(RunTestIpsecEspAll):
 737     """openssl noESN AES-GCM-192/NONE IPSec test"""
 738     def test_ipsec(self):
 739         self.run_test()
 740
 741
 742 class Test_openssl_noESN_AES_GCM_256_NONE(RunTestIpsecEspAll):
 743     """openssl noESN AES-GCM-256/NONE IPSec test"""
 744     def test_ipsec(self):
 745         self.run_test()
 746
 747
 748 class Test_openssl_noESN_AES_CBC_128_MD5_96(RunTestIpsecEspAll):
 749     """openssl noESN AES-CBC-128/MD5-96 IPSec test"""
 750     def test_ipsec(self):
 751         self.run_test()
 752
 753
 754 class Test_openssl_noESN_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
 755     """openssl noESN AES-CBC-192/SHA1-96 IPSec test"""
 756     def test_ipsec(self):
 757         self.run_test()
 758
 759
 760 class Test_openssl_noESN_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
 761     """openssl noESN AES-CBC-256/SHA1-96 IPSec test"""
 762     def test_ipsec(self):
 763         self.run_test()
 764
 765
 766 class Test_openssl_noESN_3DES_CBC_SHA1_96(RunTestIpsecEspAll):
 767     """openssl noESN 3DES-CBC/SHA1-96 IPSec test"""
 768     def test_ipsec(self):
 769         self.run_test()
 770
 771
 772 class Test_openssl_noESN_NONE_SHA1_96(RunTestIpsecEspAll):
 773     """openssl noESN NONE/SHA1-96 IPSec test"""
 774     def test_ipsec(self):
 775         self.run_test()
 776
 777
 778 class Test_openssl_ESN_AES_GCM_128_NONE(RunTestIpsecEspAll):
 779     """openssl ESN AES-GCM-128/NONE IPSec test"""
 780     def test_ipsec(self):
 781         self.run_test()
 782
 783
 784 class Test_openssl_ESN_AES_GCM_192_NONE(RunTestIpsecEspAll):
 785     """openssl ESN AES-GCM-192/NONE IPSec test"""
 786     def test_ipsec(self):
 787         self.run_test()
 788
 789
 790 class Test_openssl_ESN_AES_GCM_256_NONE(RunTestIpsecEspAll):
 791     """openssl ESN AES-GCM-256/NONE IPSec test"""
 792     def test_ipsec(self):
 793         self.run_test()
 794
 795
 796 class Test_openssl_ESN_AES_CBC_128_MD5_96(RunTestIpsecEspAll):
 797     """openssl ESN AES-CBC-128/MD5-96 IPSec test"""
 798     def test_ipsec(self):
 799         self.run_test()
 800
 801
 802 class Test_openssl_ESN_AES_CBC_192_SHA1_96(RunTestIpsecEspAll):
 803     """openssl ESN AES-CBC-192/SHA1-96 IPSec test"""
 804     def test_ipsec(self):
 805         self.run_test()
 806
 807
 808 class Test_openssl_ESN_AES_CBC_256_SHA1_96(RunTestIpsecEspAll):
 809     """openssl ESN AES-CBC-256/SHA1-96 IPSec test"""
 810     def test_ipsec(self):
 811         self.run_test()
 812
 813
 814 class Test_openssl_ESN_3DES_CBC_SHA1_96(RunTestIpsecEspAll):
 815     """openssl ESN 3DES-CBC/SHA1-96 IPSec test"""
 816     def test_ipsec(self):
 817         self.run_test()
 818
 819
 820 class Test_openssl_ESN_NONE_SHA1_96(RunTestIpsecEspAll):
 821     """openssl ESN NONE/SHA1-96 IPSec test"""
 822     def test_ipsec(self):
 823         self.run_test()
 824
 825
 826 if __name__ == '__main__':
 827     unittest.main(testRunner=VppTestRunner)