Test Specification:
IPv6 Conformance Test For IPv6 IPsec
(for host)

No.Title

Host Transport Mode

Initialize for Host
1Set Global Address and Check (Host)

Host Transport AH Outbound

Host Transport AH Outbound with authentication
2Outbound AH packet (HMAC-MD5)
3Outbound AH packet (HMAC-SHA1)

Host Transport AH Outbound Header Order
4Outbound Header Order (Fragment Header vs AH)

Host Transport AH Outbound Connect SA bundles
5Connect two SA bundles with different spi, different IPdst
6Connect two SA bundles with same spi, different IPdst

Host Transport AH Inbound

Host Transport AH Inbound with authentication
7Inbound AH packet (HMAC-MD5)
8Inbound AH packet (HMAC-SHA1)

Host Transport AH Inbound Header Order
9Inbound Header Order (Fragment Header vs AH)

Host Transport AH Inbound Connect SA bundles
10Connect two SA bundles with different spi, different IPsrc
11Connect two SA bundles with different spi, same IPsrc

Host Transport AH Inbound, Detect modification of packet with AH
12Detect modification of IPv6 header IP dst address with AH
13Detect modification of IPv6 header IP src address with AH
14Undetect modification of IPv6 header hoplimit with AH
15Detect modification of IPv6 header IP dst address with Routing header and AH
16Detect modification of Routing header "last router address" with AH
17Detect modification of DstOpt header option type before AH
18Detect modification of DstOpt header option len before AH
19Detect modification of DstOpt header option data before AH
20Detect modification of DstOpt header option data after AH
21Detect modification of HBHOpt header option type with AH
22Detect modification of HBHOpt header option len with AH
23Detect modification of HBHOpt header option data with AH
24Detect modification of payload with AH

Host Transport ESP Outbound

ESP Outbound without authentication
25Outbound ESP packet (DES-CBC)
26Outbound ESP packet (3DES-CBC)
27Outbound ESP packet (RIJNDAEL-CBC)

ESP Outbound with authentication
28Outbound ESP packet (NULL, HMAC-MD5)
29Outbound ESP packet (NULL, HMAC-SHA1)
30Outbound ESP packet (NULL, HMAC-SHA2-256)
31Outbound ESP packet (DES-CBC, HMAC-MD5)
32Outbound ESP packet (DES-CBC, HMAC-SHA1)
33Outbound ESP packet (DES-CBC, HMAC-SHA2-256)
34Outbound ESP packet (3DES-CBC, HMAC-MD5)
35Outbound ESP packet (3DES-CBC, HMAC-SHA1)
36Outbound ESP packet (3DES-CBC, HMAC-SHA2-256)
37Outbound ESP packet (RIJNDAEL-CBC, HMAC-MD5)
38Outbound ESP packet (RIJNDAEL-CBC, HMAC-SHA1)
39Outbound ESP packet (RIJNDAEL-CBC, HMAC-SHA2-256)

ESP Outbound Padding
40Outbound Padding (NULL, HMAC-MD5)
41Outbound Padding (NULL, HMAC-SHA1)
42Outbound Padding (NULL, HMAC-SHA2-256)
43Outbound Padding (DES-CBC, HMAC-MD5)
44Outbound Padding (DES-CBC, HMAC-SHA1)
45Outbound Padding (DES-CBC, HMAC-SHA2-256)
46Outbound Padding (3DES-CBC, HMAC-MD5)
47Outbound Padding (3DES-CBC, HMAC-SHA1)
48Outbound Padding (3DES-CBC, HMAC-SHA2-256)
49Outbound Padding (RIJNDAEL-CBC, HMAC-MD5)
50Outbound Padding (RIJNDAEL-CBC, HMAC-SHA1)
51Outbound Padding (RIJNDAEL-CBC, HMAC-SHA2-256)

ESP Outboud Sequence Counter Overflow
52Sequence Counter Overflow check

ESP Outbound Lifetime of SA
53Lifetime of SA using time, ESP (NULL),ESP Authentication HMAC-MD5
54Lifetime of SA using byte, ESP (NULL),ESP Authentication HMAC-MD5

ESP Outbound Header Order
55Header Order (Fragment Header vs ESP (NULL, HMAC-MD5) )
56Header Order (Fragment Header vs ESP (NULL, HMAC-SHA1) )
57Header Order (Fragment Header vs ESP (NULL, HMAC-SHA2-256) )

ESP Outbound Connect SA bundles
58Connect two SA bundles with different spi, different IPdst, ESP (DES-CBC)
59Connect two SA bundles with different spi, different IPdst, ESP (3DES-CBC)
60Connect two SA bundles with different spi, different IPdst, ESP (RIJNDAEL-CBC)
61Connect two SA bundles with same spi, different IPdst, ESP (DES-CBC)
62Connect two SA bundles with same spi, different IPdst, ESP (3DES-CBC)
63Connect two SA bundles with same spi, different IPdst, ESP (RIJNDAEL-CBC)

Host Transport ESP Inbound

ESP Inbound without authentication
64Inbound ESP (DES-CBC) packet
65Inbound ESP (3DES-CBC) packet
66Inbound ESP (RIJNDAEL-CBC) packet
67Inbound ESP (DES-CBC) packet (Invalid Encryption Key)
68Inbound ESP (3DES-CBC) packet (Invalid Encryption Key)
69Inbound ESP (RIJNDAEL-CBC) packet (Invalid Encryption Key)

ESP Inbound with authentication
70Inbound ESP packet (NULL, HMAC-MD5)
71Inbound ESP packet (NULL, HMAC-SHA1)
72Inbound ESP packet (NULL, HMAC-SHA2-256)
73Inbound ESP packet (DES-CBC, HMAC-MD5)
74Inbound ESP packet (DES-CBC, HMAC-SHA1)
75Inbound ESP packet (DES-CBC, HMAC-SHA2-256)
76Inbound ESP packet (3DES-CBC, HMAC-MD5)
77Inbound ESP packet (3DES-CBC, HMAC-SHA1)
78Inbound ESP packet (3DES-CBC, HMAC-SHA2-256)
79Inbound ESP packet (RIJNDAEL-CBC, HMAC-MD5)
80Inbound ESP packet (RIJNDAEL-CBC, HMAC-SHA1)
81Inbound ESP packet (RIJNDAEL-CBC, HMAC-SHA2-256)
82Inbound ESP (DES-CBC, HMAC-MD5) packet (Invalid Authentication Key)
83Inbound ESP (DES-CBC, HMAC-SHA1) packet (Invalid Authentication Key)
84Inbound ESP (DES-CBC, HMAC-SHA2-256) packet (Invalid Authentication Key)

ESP Inbound Padding
85Inbound Padding (NULL, HMAC-MD5)
86Inbound Padding (NULL, HMAC-SHA1)
87Inbound Padding (NULL, HMAC-SHA2-256)
88Inbound Padding (DES-CBC, HMAC-MD5)
89Inbound Padding (DES-CBC, HMAC-SHA1)
90Inbound Padding (DES-CBC, HMAC-SHA2-256)
91Inbound Padding (3DES-CBC, HMAC-MD5)
92Inbound Padding (3DES-CBC, HMAC-SHA1)
93Inbound Padding (3DES-CBC, HMAC-SHA2-256)
94Inbound Padding (RIJNDAEL-CBC, HMAC-MD5)
95Inbound Padding (RIJNDAEL-CBC, HMAC-SHA1)
96Inbound Padding (RIJNDAEL-CBC, HMAC-SHA2-256)
97Padding Length is 255 (max), ESP (DES-CBC)
98Padding Length is 255 (max), ESP (3DES-CBC)
99Padding Length is 255 (max), ESP (RIJNDAEL-CBC)
100Invalid Padding, ESP(DES-CBC)
101Invalid Padding, ESP(3DES-CBC)
102Invalid Padding, ESP(RIJNDAEL-CBC)

ESP Inbound Anti-Replay Window
103Duplicate Sequence Number check
104Sliding receive window check
105Expand or shift Receive Window

ESP Inbound Lifetime of SA
106Lifetime of SA using time, ESP (NULL),ESP Authentication HMAC-MD5
107Lifetime of SA using byte, ESP (NULL),ESP Authentication HMAC-MD5

ESP Inbound Header Order
108Header Order (Fragment Header vs ESP (NULL, HMAC-MD5))
109Header Order (Fragment Header vs ESP (NULL, HMAC-SHA1))
110Header Order (Fragment Header vs ESP (NULL, HMAC-SHA2-256))

ESP Inbound Connect SA bundles
111Connect two SA bundles with different spi, different IPsrc, ESP (DES-CBC)
112Connect two SA bundles with different spi, different IPsrc, ESP (3DES-CBC)
113Connect two SA bundles with different spi, different IPsrc, ESP (RIJNDAEL-CBC)
114Connect two SA bundles with different spi, same IPsrc, ESP (DES-CBC)
115Connect two SA bundles with different spi, same IPsrc, ESP (3DES-CBC)
116Connect two SA bundles with different spi, same IPsrc, ESP (RIJNDAEL-CBC)

Host Transport AH-ESP Outbound
117Outbound AH-ESP combination

Host Transport AH-ESP Inbound
118Inbound AH-ESP combination

Host Transport Common Outbound
119Select SPD entry (policy=discard,none)
120Select SPD entry (policy=discard,none), ESP (DES-CBC)
121Select SPD entry (policy=discard,none), ESP (3DES-CBC)
122Select SPD entry (policy=discard,none), ESP(RIJNDAEL-CBC)

Host Transport Common Inbound

Inbound Connect SA bundles
123Connect two SA bundles with same spi, same IPsrc, different protocol
124Select SPD entry (policy=discard,none), AH (HMAC-MD5)
125Select SPD entry (policy=discard,none), ESP (DES-CBC)
126Select SPD entry (policy=discard,none), ESP (3DES-CBC)
127Select SPD entry (policy=discard,none), ESP (RIJNDAEL-CBC)