eap Mailing List: Re: questions about PRF in eap-sim-11.txt

[henry.haverinen (henry.haverinen]

Michael,

Please find a test run of an implementation of the NIST PRF 
below. The details of running the G function are shown in 
the attachment. It gives the same result as the NIST example, 
so it should be correct. Thanks to Jukka-Pekka Honkanen
for providing the test runs.

If you can verify that you get the same results with
your implementation, then I think we could use include
these test vectors to EAP SIM and EAP AKA drafts.
They would be useful in verifying the PRF implementation.

Regards,
Henry

--

# Copied from "Multiple Examples of DSA" 
http://csrc.nist.gov/encryption/dss/Examples-1024bit.pdf
# Using the revised algorithm found in the Change Notice for the generation of 
x values:
# XKEY= bd029bbe 7f51960b cf9edb2b 61f06f0f eb5a38b6
# XSEED= 00000000 00000000 00000000 00000000 00000000
# The first loop through step 3.2 provides:
# XVAL= bd029bbe 7f51960b cf9edb2b 61f06f0f eb5a38b6
# Using the routine in Appendix 3.3 Constructing The Function G From SHA-1
# provides:
# w[0]= 2070b322 3dba372f de1c0ffc 7b2e3b49 8b260614
# The following value is the updated XKEY value from step 3.2.c:
# XKEY= dd734ee0 bd0bcd3b adbaeb27 dd1eaa59 76803ecb
# The second loop through step 3.2 provides:
# XVAL= dd734ee0 bd0bcd3b adbaeb27 dd1eaa59 76803ecb
# Using the routine in Appendix 3.3 Constructing The Function G From SHA-1
# provides:
# w[1]= 3c6c18ba cb0f6c55 babb1378 8e20d737 a3275116
# The following value is the updated XKEY value from step 3.2.c:
# XKEY= 19df679b 881b3991 6875fea0 6b3f8191 19a78fe2
# Step 3.3 provides the following values:
# w[0] || w[1]= 2070b322 3dba372f de1c0ffc 7b2e3b49 8b260614
#               3c6c18ba cb0f6c55 babb1378 8e20d737 a3275116

frame # This is xkey input to dss_random().
{
        0xbd, 0x02, 0x9b, 0xbe, 0x7f, 0x51, 0x96, 0x0b,
        0xcf, 0x9e, 0xdb, 0x2b, 0x61, 0xf0, 0x6f, 0x0f,
        0xeb, 0x5a, 0x38, 0xb6
}


frame # This is the correct output from dss_random().
{
        0x20, 0x70, 0xb3, 0x22, 0x3d, 0xba, 0x37, 0x2f,
        0xde, 0x1c, 0x0f, 0xfc, 0x7b, 0x2e, 0x3b, 0x49,
        0x8b, 0x26, 0x06, 0x14, 0x3c, 0x6c, 0x18, 0xba,
        0xcb, 0x0f, 0x6c, 0x55, 0xba, 0xbb, 0x13, 0x78,
        0x8e, 0x20, 0xd7, 0x37, 0xa3, 0x27, 0x51, 0x16
}

Attachment: eap_core.log
Description: eap_core.log