tree ac3178c5a4e0ed13031de3b39950beee91eb41ef
parent a9bdeed0cbf79003c6edcff7634f5f0cea183c9f
author Daniel McCarney <daniel@binaryparadox.net> 1734301474 -0500
committer Boringssl LUCI CQ <boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com> 1736358012 -0800

util/fipstools: add SSH KDF ACVP support

This commit updates the acvptool subprocess handling to support the
SSH KDF ACVP tests specified in:

  https://pages.nist.gov/ACVP/draft-celi-acvp-kdf-ssh.html

These vectors use the algorithm "kdf-components" and the mode "ssh".
Module wrappers that advertise capabilities that include this algo/mode
need to implement two new commands (described in ACVP.md):

1. "SSHKDF/$HASH/client" for deriving client direction keys.
2. "SSHKDF/$HASH/server" for deriving server direction keys.

Both commands take K, H, SessionID and a cipher name as input and return
the IV key, the encryption key, and the integrity key for their
respective direction.

Change-Id: Ib32612222f0bba299c1365b0bd9188a604fd1ead
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/74347
Reviewed-by: Adam Langley <agl@google.com>
Commit-Queue: Adam Langley <agl@google.com>
Reviewed-by: Bob Beck <bbe@google.com>