Test Specification:
Conformance Test For IPv6(UDP) IPsec
(for host)

No.Title

Host Transport Mode

Initialize for Host
1Set Global Address and Check (Host)

Host Transport ESP Outbound.

ESP Outbound without authentication
2Outbound ESP packet (DES-CBC)
3Outbound ESP packet (3DES-CBC)
4Outbound ESP packet (RIJNDAEL-CBC)

ESP Outbound with authentication
5Outbound ESP packet (NULL, HMAC-MD5)
6Outbound ESP packet (NULL, HMAC-SHA1)
7Outbound ESP packet (NULL, HMAC-SHA2-256)
8Outbound ESP packet (DES-CBC, HMAC-MD5)
9Outbound ESP packet (DES-CBC, HMAC-SHA1)
10Outbound ESP packet (DES-CBC, HMAC-SHA2-256)
11Outbound ESP packet (3DES-CBC, HMAC-MD5)
12Outbound ESP packet (3DES-CBC, HMAC-SHA1)
13Outbound ESP packet (3DES-CBC, HMAC-SHA2-256)
14Outbound ESP packet (RIJNDAEL-CBC, HMAC-MD5)
15Outbound ESP packet (RIJNDAEL-CBC, HMAC-SHA1)
16Outbound ESP packet (RIJNDAEL-CBC, HMAC-SHA2-256)

ESP Outbound Padding
17Outbound Padding (NULL, HMAC-MD5)
18Outbound Padding (NULL, HMAC-SHA1)
19Outbound Padding (NULL, HMAC-SHA2-256)
20Outbound Padding (DES-CBC, HMAC-MD5)
21Outbound Padding (DES-CBC, HMAC-SHA1)
22Outbound Padding (DES-CBC, HMAC-SHA2-256)
23Outbound Padding (3DES-CBC, HMAC-MD5)
24Outbound Padding (3DES-CBC, HMAC-SHA1)
25Outbound Padding (3DES-CBC, HMAC-SHA2-256)
26Outbound Padding (RIJNDAEL-CBC, HMAC-MD5)
27Outbound Padding (RIJNDAEL-CBC, HMAC-SHA1)
28Outbound Padding (RIJNDAEL-CBC, HMAC-SHA2-256)

ESP Outbound Sequence Counter Overflow
29Sequence Counter Overflow check

ESP Outbound Lifetime of SA
30Lifetime of SA using time, ESP (NULL),ESP Authentication HMAC-MD5
31Lifetime of SA using byte, ESP (NULL),ESP Authentication HMAC-MD5

ESP Outbound Header Order
32Header Order (Fragment Header vs ESP (NULL, HMAC-MD5) )
33Header Order (Fragment Header vs ESP (NULL, HMAC-SHA1) )
34Header Order (Fragment Header vs ESP (NULL, HMAC-SHA2-256) )

ESP Outbound Connect SA bundles
35Connect two SA bundles with different spi, different IPdst, ESP (DES-CBC)
36Connect two SA bundles with different spi, different IPdst, ESP (3DES-CBC)
37Connect two SA bundles with different spi, different IPdst, ESP (RIJNDAEL-CBC)
38Connect two SA bundles with same spi, different IPdst, ESP (DES-CBC)
39Connect two SA bundles with same spi, different IPdst, ESP (3DES-CBC)
40Connect two SA bundles with same spi, different IPdst, ESP (RIJNDAEL-CBC)

Host Transport ESP Inbound.

ESP Inbound without authentication
41Inbound ESP packet (DES-CBC)
42Inbound ESP packet (3DES-CBC)
43Inbound ESP packet (RIJNDAEL-CBC)
44Inbound ESP (DES-CBC) packet (Invalid Encryption Key)
45Inbound ESP (3DES-CBC) packet (Invalid Encryption Key)
46Inbound ESP (RIJNDAEL-CBC) packet (Invalid Encryption Key)

ESP Inbound with authentication
47Inbound ESP packet (NULL, HMAC-MD5)
48Inbound ESP packet (NULL, HMAC-SHA1)
49Inbound ESP packet (NULL, HMAC-SHA2-256)
50Inbound ESP packet (DES-CBC, HMAC-MD5)
51Inbound ESP packet (DES-CBC, HMAC-SHA1)
52Inbound ESP packet (DES-CBC, HMAC-SHA2-256)
53Inbound ESP packet (3DES-CBC, HMAC-MD5)
54Inbound ESP packet (3DES-CBC, HMAC-SHA1)
55Inbound ESP packet (3DES-CBC, HMAC-SHA2-256)
56Inbound ESP packet (RIJNDAEL-CBC, HMAC-MD5)
57Inbound ESP packet (RIJNDAEL-CBC, HMAC-SHA1)
58Inbound ESP packet (RIJNDAEL-CBC, HMAC-SHA2-256)
59Inbound ESP (DES-CBC, HMAC-MD5) packet (Invalid Authentication Key)
60Inbound ESP (DES-CBC, HMAC-SHA1) packet (Invalid Authentication Key)
61Inbound ESP (DES-CBC, HMAC-SHA2-256) packet (Invalid Authentication Key)

ESP Inbound Padding
62Inbound Padding (NULL, HMAC-MD5)
63Inbound Padding (NULL, HMAC-SHA1)
64Inbound Padding (NULL, HMAC-SHA2-256)
65Inbound Padding (DES-CBC, HMAC-MD5)
66Inbound Padding (DES-CBC, HMAC-SHA1)
67Inbound Padding (DES-CBC, HMAC-SHA2-256)
68Inbound Padding (3DES-CBC, HMAC-MD5)
69Inbound Padding (3DES-CBC, HMAC-SHA1)
70Inbound Padding (3DES-CBC, HMAC-SHA2-256)
71Inbound Padding (RIJNDAEL-CBC, HMAC-MD5)
72Inbound Padding (RIJNDAEL-CBC, HMAC-SHA1)
73Inbound Padding (RIJNDAEL-CBC, HMAC-SHA2-256)
74Padding Length is 255 (max), ESP (DES-CBC)
75Padding Length is 255 (max), ESP (3DES-CBC)
76Padding Length is 255 (max), ESP (RIJNDAEL-CBC)
77Invalid Padding, ESP(DES-CBC)
78Invalid Padding, ESP(3DES-CBC)
79Invalid Padding, ESP(RIJNDAEL-CBC)

ESP Inbound Anti-Replay Window
80Duplicate Sequence Number check
81Sliding receive window check
82Expand or shift Receive Window

ESP Inbound Lifetime of SA
83Lifetime of SA using time, ESP (NULL),ESP Authentication HMAC-MD5
84Lifetime of SA using byte, ESP (NULL),ESP Authentication HMAC-MD5

ESP Inbound Header Order
85Header Order (Fragment Header vs ESP (NULL, HMAC-MD5))
86Header Order (Fragment Header vs ESP (NULL, HMAC-SHA1))
87Header Order (Fragment Header vs ESP (NULL, HMAC-SHA2-256))

ESP Inbound Connect SA bundles
88Connect two SA bundles with different spi, different IPsrc, ESP (DES-CBC)
89Connect two SA bundles with different spi, different IPsrc, ESP (3DES-CBC)
90Connect two SA bundles with different spi, different IPsrc, ESP (RIJNDAEL-CBC)
91Connect two SA bundles with different spi, same IPsrc, ESP (DES-CBC)
92Connect two SA bundles with different spi, same IPsrc, ESP (3DES-CBC)
93Connect two SA bundles with different spi, same IPsrc, ESP (RIJNDAEL-CBC)

Host Transport Common Outbound.
94Select SPD entry (policy=discard,none), ESP (DES-CBC)
95Select SPD entry (policy=discard,none), ESP (3DES-CBC)
96Select SPD entry (policy=discard,none), ESP(RIJNDAEL-CBC)

Host Transport Common Inbound.
97Select SPD entry (policy=discard,none), ESP (DES-CBC)
98Select SPD entry (policy=discard,none), ESP (3DES-CBC)
99Select SPD entry (policy=discard,none), ESP (RIJNDAEL-CBC)