Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 1 | /* BEGIN_HEADER */ |
Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 2 | #include "mbedtls/dhm.h" |
Gilles Peskine | 02db8f4 | 2021-03-30 23:28:51 +0200 | [diff] [blame] | 3 | |
| 4 | static int check_dhm_param_output( const mbedtls_mpi *expected, |
| 5 | const unsigned char *buffer, |
| 6 | size_t size, |
| 7 | size_t *offset ) |
| 8 | { |
| 9 | size_t n; |
| 10 | mbedtls_mpi actual; |
| 11 | int ok = 0; |
| 12 | mbedtls_mpi_init( &actual ); |
| 13 | |
| 14 | ++mbedtls_test_info.step; |
| 15 | |
| 16 | TEST_ASSERT( size >= *offset + 2 ); |
| 17 | n = ( buffer[*offset] << 8 ) | buffer[*offset + 1]; |
| 18 | *offset += 2; |
Gilles Peskine | 03299dc | 2021-04-13 22:10:24 +0200 | [diff] [blame^] | 19 | /* The DHM param output from Mbed TLS has leading zeros stripped, as |
| 20 | * permitted but not required by RFC 5246 \S4.4. */ |
Gilles Peskine | 02db8f4 | 2021-03-30 23:28:51 +0200 | [diff] [blame] | 21 | TEST_EQUAL( n, mbedtls_mpi_size( expected ) ); |
| 22 | TEST_ASSERT( size >= *offset + n ); |
| 23 | TEST_EQUAL( 0, mbedtls_mpi_read_binary( &actual, buffer + *offset, n ) ); |
| 24 | TEST_EQUAL( 0, mbedtls_mpi_cmp_mpi( expected, &actual ) ); |
| 25 | *offset += n; |
| 26 | |
| 27 | ok = 1; |
| 28 | exit: |
| 29 | mbedtls_mpi_free( &actual ); |
| 30 | return( ok ); |
| 31 | } |
| 32 | |
| 33 | static int check_dhm_params( const mbedtls_dhm_context *ctx, |
| 34 | size_t x_size, |
| 35 | const unsigned char *ske, size_t ske_len ) |
| 36 | { |
| 37 | size_t offset = 0; |
| 38 | |
| 39 | /* Check that ctx->X and ctx->GX are within range. */ |
| 40 | TEST_ASSERT( mbedtls_mpi_cmp_int( &ctx->X, 1 ) > 0 ); |
| 41 | TEST_ASSERT( mbedtls_mpi_cmp_mpi( &ctx->X, &ctx->P ) < 0 ); |
| 42 | TEST_ASSERT( mbedtls_mpi_size( &ctx->X ) <= x_size ); |
| 43 | TEST_ASSERT( mbedtls_mpi_cmp_int( &ctx->GX, 1 ) > 0 ); |
| 44 | TEST_ASSERT( mbedtls_mpi_cmp_mpi( &ctx->GX, &ctx->P ) < 0 ); |
| 45 | |
| 46 | /* Check ske: it must contain P, G and G^X, each prefixed with a |
| 47 | * 2-byte size. */ |
| 48 | if( !check_dhm_param_output( &ctx->P, ske, ske_len, &offset ) ) |
| 49 | goto exit; |
| 50 | if( !check_dhm_param_output( &ctx->G, ske, ske_len, &offset ) ) |
| 51 | goto exit; |
| 52 | if( !check_dhm_param_output( &ctx->GX, ske, ske_len, &offset ) ) |
| 53 | goto exit; |
| 54 | TEST_EQUAL( offset, ske_len ); |
| 55 | |
| 56 | return( 1 ); |
| 57 | exit: |
| 58 | return( 0 ); |
| 59 | } |
| 60 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 61 | /* END_HEADER */ |
Paul Bakker | 5c60de2 | 2009-07-08 19:47:36 +0000 | [diff] [blame] | 62 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 63 | /* BEGIN_DEPENDENCIES |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 64 | * depends_on:MBEDTLS_DHM_C:MBEDTLS_BIGNUM_C |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 65 | * END_DEPENDENCIES |
| 66 | */ |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 67 | |
Andrzej Kurek | c470b6b | 2019-01-31 08:20:20 -0500 | [diff] [blame] | 68 | /* BEGIN_CASE depends_on:MBEDTLS_CHECK_PARAMS:!MBEDTLS_PARAM_FAILED_ALT */ |
| 69 | void dhm_invalid_params( ) |
| 70 | { |
| 71 | mbedtls_dhm_context ctx; |
| 72 | unsigned char buf[42] = { 0 }; |
| 73 | unsigned char *buf_null = NULL; |
| 74 | mbedtls_mpi X; |
| 75 | size_t const buflen = sizeof( buf ); |
| 76 | size_t len; |
| 77 | |
| 78 | TEST_INVALID_PARAM( mbedtls_dhm_init( NULL ) ); |
| 79 | TEST_VALID_PARAM( mbedtls_dhm_free( NULL ) ); |
| 80 | |
| 81 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
| 82 | mbedtls_dhm_read_params( NULL, |
| 83 | (unsigned char**) &buf, |
| 84 | buf ) ); |
| 85 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
| 86 | mbedtls_dhm_read_params( &ctx, &buf_null, buf ) ); |
| 87 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
| 88 | mbedtls_dhm_read_params( &ctx, NULL, buf ) ); |
| 89 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
| 90 | mbedtls_dhm_read_params( &ctx, |
| 91 | (unsigned char**) &buf, |
| 92 | NULL ) ); |
| 93 | |
| 94 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
| 95 | mbedtls_dhm_make_params( NULL, buflen, |
| 96 | buf, &len, |
Ronald Cron | 351f0ee | 2020-06-10 12:12:18 +0200 | [diff] [blame] | 97 | mbedtls_test_rnd_std_rand, |
Andrzej Kurek | c470b6b | 2019-01-31 08:20:20 -0500 | [diff] [blame] | 98 | NULL ) ); |
| 99 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
| 100 | mbedtls_dhm_make_params( &ctx, buflen, |
| 101 | NULL, &len, |
Ronald Cron | 351f0ee | 2020-06-10 12:12:18 +0200 | [diff] [blame] | 102 | mbedtls_test_rnd_std_rand, |
Andrzej Kurek | c470b6b | 2019-01-31 08:20:20 -0500 | [diff] [blame] | 103 | NULL ) ); |
| 104 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
| 105 | mbedtls_dhm_make_params( &ctx, buflen, |
| 106 | buf, NULL, |
Ronald Cron | 351f0ee | 2020-06-10 12:12:18 +0200 | [diff] [blame] | 107 | mbedtls_test_rnd_std_rand, |
Andrzej Kurek | c470b6b | 2019-01-31 08:20:20 -0500 | [diff] [blame] | 108 | NULL ) ); |
| 109 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
| 110 | mbedtls_dhm_make_params( &ctx, buflen, |
| 111 | buf, &len, |
| 112 | NULL, |
| 113 | NULL ) ); |
| 114 | |
| 115 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
| 116 | mbedtls_dhm_set_group( NULL, &X, &X ) ); |
| 117 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
| 118 | mbedtls_dhm_set_group( &ctx, NULL, &X ) ); |
| 119 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
| 120 | mbedtls_dhm_set_group( &ctx, &X, NULL ) ); |
| 121 | |
| 122 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
| 123 | mbedtls_dhm_read_public( NULL, buf, buflen ) ); |
| 124 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
| 125 | mbedtls_dhm_read_public( &ctx, NULL, buflen ) ); |
| 126 | |
| 127 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
| 128 | mbedtls_dhm_make_public( NULL, buflen, |
| 129 | buf, buflen, |
Ronald Cron | 351f0ee | 2020-06-10 12:12:18 +0200 | [diff] [blame] | 130 | mbedtls_test_rnd_std_rand, |
Andrzej Kurek | c470b6b | 2019-01-31 08:20:20 -0500 | [diff] [blame] | 131 | NULL ) ); |
| 132 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
| 133 | mbedtls_dhm_make_public( &ctx, buflen, |
| 134 | NULL, buflen, |
Ronald Cron | 351f0ee | 2020-06-10 12:12:18 +0200 | [diff] [blame] | 135 | mbedtls_test_rnd_std_rand, |
Andrzej Kurek | c470b6b | 2019-01-31 08:20:20 -0500 | [diff] [blame] | 136 | NULL ) ); |
| 137 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
| 138 | mbedtls_dhm_make_public( &ctx, buflen, |
| 139 | buf, buflen, |
| 140 | NULL, |
| 141 | NULL ) ); |
| 142 | |
| 143 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
Ronald Cron | 6c5bd7f | 2020-06-10 14:08:26 +0200 | [diff] [blame] | 144 | mbedtls_dhm_calc_secret( NULL, buf, buflen, &len, |
| 145 | mbedtls_test_rnd_std_rand, |
Andrzej Kurek | c470b6b | 2019-01-31 08:20:20 -0500 | [diff] [blame] | 146 | NULL ) ); |
| 147 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
Ronald Cron | 6c5bd7f | 2020-06-10 14:08:26 +0200 | [diff] [blame] | 148 | mbedtls_dhm_calc_secret( &ctx, NULL, buflen, &len, |
| 149 | mbedtls_test_rnd_std_rand, |
Andrzej Kurek | c470b6b | 2019-01-31 08:20:20 -0500 | [diff] [blame] | 150 | NULL ) ); |
| 151 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
Ronald Cron | 6c5bd7f | 2020-06-10 14:08:26 +0200 | [diff] [blame] | 152 | mbedtls_dhm_calc_secret( &ctx, buf, buflen, NULL, |
| 153 | mbedtls_test_rnd_std_rand, |
Andrzej Kurek | c470b6b | 2019-01-31 08:20:20 -0500 | [diff] [blame] | 154 | NULL ) ); |
| 155 | |
| 156 | #if defined(MBEDTLS_ASN1_PARSE_C) |
| 157 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
| 158 | mbedtls_dhm_parse_dhm( NULL, buf, buflen ) ); |
| 159 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
| 160 | mbedtls_dhm_parse_dhm( &ctx, NULL, buflen ) ); |
| 161 | |
| 162 | #if defined(MBEDTLS_FS_IO) |
| 163 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
| 164 | mbedtls_dhm_parse_dhmfile( NULL, "" ) ); |
| 165 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA, |
| 166 | mbedtls_dhm_parse_dhmfile( &ctx, NULL ) ); |
| 167 | #endif /* MBEDTLS_FS_IO */ |
| 168 | #endif /* MBEDTLS_ASN1_PARSE_C */ |
| 169 | |
| 170 | exit: |
| 171 | return; |
| 172 | } |
| 173 | /* END_CASE */ |
| 174 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 175 | /* BEGIN_CASE */ |
Gilles Peskine | 2baf2b0 | 2021-03-30 23:44:22 +0200 | [diff] [blame] | 176 | void dhm_do_dhm( int radix_P, char *input_P, int x_size, |
Janos Follath | 4b151fa | 2017-09-20 13:46:37 +0100 | [diff] [blame] | 177 | int radix_G, char *input_G, int result ) |
Paul Bakker | 5c60de2 | 2009-07-08 19:47:36 +0000 | [diff] [blame] | 178 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 179 | mbedtls_dhm_context ctx_srv; |
| 180 | mbedtls_dhm_context ctx_cli; |
Paul Bakker | 5c60de2 | 2009-07-08 19:47:36 +0000 | [diff] [blame] | 181 | unsigned char ske[1000]; |
| 182 | unsigned char *p = ske; |
| 183 | unsigned char pub_cli[1000]; |
| 184 | unsigned char sec_srv[1000]; |
| 185 | unsigned char sec_cli[1000]; |
Paul Bakker | f4a3f30 | 2011-04-24 15:53:29 +0000 | [diff] [blame] | 186 | size_t ske_len = 0; |
| 187 | size_t pub_cli_len = 0; |
Manuel Pégourié-Gonnard | 3335205 | 2015-06-02 16:17:08 +0100 | [diff] [blame] | 188 | size_t sec_srv_len; |
| 189 | size_t sec_cli_len; |
Gilles Peskine | 2baf2b0 | 2021-03-30 23:44:22 +0200 | [diff] [blame] | 190 | int i; |
Ronald Cron | 351f0ee | 2020-06-10 12:12:18 +0200 | [diff] [blame] | 191 | mbedtls_test_rnd_pseudo_info rnd_info; |
Paul Bakker | 5c60de2 | 2009-07-08 19:47:36 +0000 | [diff] [blame] | 192 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 193 | mbedtls_dhm_init( &ctx_srv ); |
| 194 | mbedtls_dhm_init( &ctx_cli ); |
Paul Bakker | 5c60de2 | 2009-07-08 19:47:36 +0000 | [diff] [blame] | 195 | memset( ske, 0x00, 1000 ); |
| 196 | memset( pub_cli, 0x00, 1000 ); |
| 197 | memset( sec_srv, 0x00, 1000 ); |
| 198 | memset( sec_cli, 0x00, 1000 ); |
Ronald Cron | 351f0ee | 2020-06-10 12:12:18 +0200 | [diff] [blame] | 199 | memset( &rnd_info, 0x00, sizeof( mbedtls_test_rnd_pseudo_info ) ); |
Paul Bakker | 5c60de2 | 2009-07-08 19:47:36 +0000 | [diff] [blame] | 200 | |
Manuel Pégourié-Gonnard | 143b502 | 2013-09-04 16:29:59 +0200 | [diff] [blame] | 201 | /* |
| 202 | * Set params |
| 203 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 204 | TEST_ASSERT( mbedtls_mpi_read_string( &ctx_srv.P, radix_P, input_P ) == 0 ); |
| 205 | TEST_ASSERT( mbedtls_mpi_read_string( &ctx_srv.G, radix_G, input_G ) == 0 ); |
Gilles Peskine | 2baf2b0 | 2021-03-30 23:44:22 +0200 | [diff] [blame] | 206 | pub_cli_len = mbedtls_mpi_size( &ctx_srv.P ); |
Manuel Pégourié-Gonnard | 143b502 | 2013-09-04 16:29:59 +0200 | [diff] [blame] | 207 | |
| 208 | /* |
| 209 | * First key exchange |
| 210 | */ |
Gilles Peskine | 02db8f4 | 2021-03-30 23:28:51 +0200 | [diff] [blame] | 211 | mbedtls_test_set_step( 10 ); |
Ronald Cron | 6c5bd7f | 2020-06-10 14:08:26 +0200 | [diff] [blame] | 212 | TEST_ASSERT( mbedtls_dhm_make_params( &ctx_srv, x_size, ske, &ske_len, |
| 213 | &mbedtls_test_rnd_pseudo_rand, |
| 214 | &rnd_info ) == result ); |
Janos Follath | 4b151fa | 2017-09-20 13:46:37 +0100 | [diff] [blame] | 215 | if ( result != 0 ) |
| 216 | goto exit; |
Gilles Peskine | 02db8f4 | 2021-03-30 23:28:51 +0200 | [diff] [blame] | 217 | if( !check_dhm_params( &ctx_srv, x_size, ske, ske_len ) ) |
| 218 | goto exit; |
Janos Follath | 4b151fa | 2017-09-20 13:46:37 +0100 | [diff] [blame] | 219 | |
Manuel Pégourié-Gonnard | 143b502 | 2013-09-04 16:29:59 +0200 | [diff] [blame] | 220 | ske[ske_len++] = 0; |
| 221 | ske[ske_len++] = 0; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 222 | TEST_ASSERT( mbedtls_dhm_read_params( &ctx_cli, &p, ske + ske_len ) == 0 ); |
Manuel Pégourié-Gonnard | 143b502 | 2013-09-04 16:29:59 +0200 | [diff] [blame] | 223 | |
Ronald Cron | 6c5bd7f | 2020-06-10 14:08:26 +0200 | [diff] [blame] | 224 | TEST_ASSERT( mbedtls_dhm_make_public( &ctx_cli, x_size, pub_cli, pub_cli_len, |
| 225 | &mbedtls_test_rnd_pseudo_rand, |
| 226 | &rnd_info ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 227 | TEST_ASSERT( mbedtls_dhm_read_public( &ctx_srv, pub_cli, pub_cli_len ) == 0 ); |
Manuel Pégourié-Gonnard | 143b502 | 2013-09-04 16:29:59 +0200 | [diff] [blame] | 228 | |
Ronald Cron | 6c5bd7f | 2020-06-10 14:08:26 +0200 | [diff] [blame] | 229 | TEST_ASSERT( mbedtls_dhm_calc_secret( &ctx_srv, sec_srv, sizeof( sec_srv ), |
| 230 | &sec_srv_len, |
| 231 | &mbedtls_test_rnd_pseudo_rand, |
| 232 | &rnd_info ) == 0 ); |
Manuel Pégourié-Gonnard | 3335205 | 2015-06-02 16:17:08 +0100 | [diff] [blame] | 233 | TEST_ASSERT( mbedtls_dhm_calc_secret( &ctx_cli, sec_cli, sizeof( sec_cli ), &sec_cli_len, NULL, NULL ) == 0 ); |
Manuel Pégourié-Gonnard | 143b502 | 2013-09-04 16:29:59 +0200 | [diff] [blame] | 234 | |
| 235 | TEST_ASSERT( sec_srv_len == sec_cli_len ); |
| 236 | TEST_ASSERT( sec_srv_len != 0 ); |
| 237 | TEST_ASSERT( memcmp( sec_srv, sec_cli, sec_srv_len ) == 0 ); |
| 238 | |
Manuel Pégourié-Gonnard | 15d5de1 | 2013-09-17 11:34:11 +0200 | [diff] [blame] | 239 | /* Re-do calc_secret on server a few times to test update of blinding values */ |
| 240 | for( i = 0; i < 3; i++ ) |
| 241 | { |
Gilles Peskine | 02db8f4 | 2021-03-30 23:28:51 +0200 | [diff] [blame] | 242 | mbedtls_test_set_step( 20 + i ); |
Manuel Pégourié-Gonnard | 15d5de1 | 2013-09-17 11:34:11 +0200 | [diff] [blame] | 243 | sec_srv_len = 1000; |
Ronald Cron | 6c5bd7f | 2020-06-10 14:08:26 +0200 | [diff] [blame] | 244 | TEST_ASSERT( mbedtls_dhm_calc_secret( &ctx_srv, sec_srv, |
| 245 | sizeof( sec_srv ), &sec_srv_len, |
| 246 | &mbedtls_test_rnd_pseudo_rand, |
| 247 | &rnd_info ) == 0 ); |
Manuel Pégourié-Gonnard | 143b502 | 2013-09-04 16:29:59 +0200 | [diff] [blame] | 248 | |
Manuel Pégourié-Gonnard | 15d5de1 | 2013-09-17 11:34:11 +0200 | [diff] [blame] | 249 | TEST_ASSERT( sec_srv_len == sec_cli_len ); |
| 250 | TEST_ASSERT( sec_srv_len != 0 ); |
| 251 | TEST_ASSERT( memcmp( sec_srv, sec_cli, sec_srv_len ) == 0 ); |
| 252 | } |
Manuel Pégourié-Gonnard | 143b502 | 2013-09-04 16:29:59 +0200 | [diff] [blame] | 253 | |
| 254 | /* |
| 255 | * Second key exchange to test change of blinding values on server |
| 256 | */ |
Manuel Pégourié-Gonnard | 143b502 | 2013-09-04 16:29:59 +0200 | [diff] [blame] | 257 | p = ske; |
Paul Bakker | 5c60de2 | 2009-07-08 19:47:36 +0000 | [diff] [blame] | 258 | |
Gilles Peskine | 02db8f4 | 2021-03-30 23:28:51 +0200 | [diff] [blame] | 259 | mbedtls_test_set_step( 30 ); |
Ronald Cron | 6c5bd7f | 2020-06-10 14:08:26 +0200 | [diff] [blame] | 260 | TEST_ASSERT( mbedtls_dhm_make_params( &ctx_srv, x_size, ske, &ske_len, |
| 261 | &mbedtls_test_rnd_pseudo_rand, |
| 262 | &rnd_info ) == 0 ); |
Gilles Peskine | 02db8f4 | 2021-03-30 23:28:51 +0200 | [diff] [blame] | 263 | if( !check_dhm_params( &ctx_srv, x_size, ske, ske_len ) ) |
| 264 | goto exit; |
Paul Bakker | 5c60de2 | 2009-07-08 19:47:36 +0000 | [diff] [blame] | 265 | ske[ske_len++] = 0; |
| 266 | ske[ske_len++] = 0; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 267 | TEST_ASSERT( mbedtls_dhm_read_params( &ctx_cli, &p, ske + ske_len ) == 0 ); |
Paul Bakker | 5c60de2 | 2009-07-08 19:47:36 +0000 | [diff] [blame] | 268 | |
Ronald Cron | 6c5bd7f | 2020-06-10 14:08:26 +0200 | [diff] [blame] | 269 | TEST_ASSERT( mbedtls_dhm_make_public( &ctx_cli, x_size, pub_cli, pub_cli_len, |
| 270 | &mbedtls_test_rnd_pseudo_rand, |
| 271 | &rnd_info ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 272 | TEST_ASSERT( mbedtls_dhm_read_public( &ctx_srv, pub_cli, pub_cli_len ) == 0 ); |
Paul Bakker | 5c60de2 | 2009-07-08 19:47:36 +0000 | [diff] [blame] | 273 | |
Ronald Cron | 6c5bd7f | 2020-06-10 14:08:26 +0200 | [diff] [blame] | 274 | TEST_ASSERT( mbedtls_dhm_calc_secret( &ctx_srv, sec_srv, sizeof( sec_srv ), |
| 275 | &sec_srv_len, |
| 276 | &mbedtls_test_rnd_pseudo_rand, |
| 277 | &rnd_info ) == 0 ); |
Manuel Pégourié-Gonnard | 3335205 | 2015-06-02 16:17:08 +0100 | [diff] [blame] | 278 | TEST_ASSERT( mbedtls_dhm_calc_secret( &ctx_cli, sec_cli, sizeof( sec_cli ), &sec_cli_len, NULL, NULL ) == 0 ); |
Paul Bakker | 5c60de2 | 2009-07-08 19:47:36 +0000 | [diff] [blame] | 279 | |
| 280 | TEST_ASSERT( sec_srv_len == sec_cli_len ); |
| 281 | TEST_ASSERT( sec_srv_len != 0 ); |
| 282 | TEST_ASSERT( memcmp( sec_srv, sec_cli, sec_srv_len ) == 0 ); |
Paul Bakker | c43481a | 2011-02-20 16:34:26 +0000 | [diff] [blame] | 283 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 284 | exit: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 285 | mbedtls_dhm_free( &ctx_srv ); |
| 286 | mbedtls_dhm_free( &ctx_cli ); |
Paul Bakker | 5c60de2 | 2009-07-08 19:47:36 +0000 | [diff] [blame] | 287 | } |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 288 | /* END_CASE */ |
Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 289 | |
Chris Jones | d10b331 | 2020-12-02 10:41:50 +0000 | [diff] [blame] | 290 | /* BEGIN_CASE */ |
| 291 | void dhm_make_public( int P_bytes, int radix_G, char *input_G, int result ) |
| 292 | { |
| 293 | mbedtls_mpi P, G; |
| 294 | mbedtls_dhm_context ctx; |
| 295 | unsigned char output[MBEDTLS_MPI_MAX_SIZE]; |
| 296 | |
| 297 | mbedtls_mpi_init( &P ); |
| 298 | mbedtls_mpi_init( &G ); |
| 299 | mbedtls_dhm_init( &ctx ); |
| 300 | |
| 301 | TEST_ASSERT( mbedtls_mpi_lset( &P, 1 ) == 0 ); |
| 302 | TEST_ASSERT( mbedtls_mpi_shift_l( &P, ( P_bytes * 8 ) - 1 ) == 0 ); |
| 303 | TEST_ASSERT( mbedtls_mpi_set_bit( &P, 0, 1 ) == 0 ); |
| 304 | |
| 305 | TEST_ASSERT( mbedtls_mpi_read_string( &G, radix_G, input_G ) == 0 ); |
| 306 | |
| 307 | TEST_ASSERT( mbedtls_dhm_set_group( &ctx, &P, &G ) == 0 ); |
| 308 | TEST_ASSERT( mbedtls_dhm_make_public( &ctx, (int) mbedtls_mpi_size( &P ), |
| 309 | output, sizeof(output), |
| 310 | &mbedtls_test_rnd_pseudo_rand, |
| 311 | NULL ) == result ); |
| 312 | |
| 313 | exit: |
| 314 | mbedtls_mpi_free( &P ); |
| 315 | mbedtls_mpi_free( &G ); |
| 316 | mbedtls_dhm_free( &ctx ); |
| 317 | } |
| 318 | /* END_CASE */ |
| 319 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 320 | /* BEGIN_CASE depends_on:MBEDTLS_FS_IO */ |
Azim Khan | f1aaec9 | 2017-05-30 14:23:15 +0100 | [diff] [blame] | 321 | void dhm_file( char * filename, char * p, char * g, int len ) |
Manuel Pégourié-Gonnard | 3fec220 | 2014-03-29 16:42:38 +0100 | [diff] [blame] | 322 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 323 | mbedtls_dhm_context ctx; |
| 324 | mbedtls_mpi P, G; |
Manuel Pégourié-Gonnard | 3fec220 | 2014-03-29 16:42:38 +0100 | [diff] [blame] | 325 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 326 | mbedtls_dhm_init( &ctx ); |
| 327 | mbedtls_mpi_init( &P ); mbedtls_mpi_init( &G ); |
Manuel Pégourié-Gonnard | 3fec220 | 2014-03-29 16:42:38 +0100 | [diff] [blame] | 328 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 329 | TEST_ASSERT( mbedtls_mpi_read_string( &P, 16, p ) == 0 ); |
| 330 | TEST_ASSERT( mbedtls_mpi_read_string( &G, 16, g ) == 0 ); |
Manuel Pégourié-Gonnard | 3fec220 | 2014-03-29 16:42:38 +0100 | [diff] [blame] | 331 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 332 | TEST_ASSERT( mbedtls_dhm_parse_dhmfile( &ctx, filename ) == 0 ); |
Manuel Pégourié-Gonnard | 3fec220 | 2014-03-29 16:42:38 +0100 | [diff] [blame] | 333 | |
| 334 | TEST_ASSERT( ctx.len == (size_t) len ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 335 | TEST_ASSERT( mbedtls_mpi_cmp_mpi( &ctx.P, &P ) == 0 ); |
| 336 | TEST_ASSERT( mbedtls_mpi_cmp_mpi( &ctx.G, &G ) == 0 ); |
Manuel Pégourié-Gonnard | 3fec220 | 2014-03-29 16:42:38 +0100 | [diff] [blame] | 337 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 338 | exit: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 339 | mbedtls_mpi_free( &P ); mbedtls_mpi_free( &G ); |
| 340 | mbedtls_dhm_free( &ctx ); |
Manuel Pégourié-Gonnard | 3fec220 | 2014-03-29 16:42:38 +0100 | [diff] [blame] | 341 | } |
| 342 | /* END_CASE */ |
| 343 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 344 | /* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST */ |
Azim Khan | f1aaec9 | 2017-05-30 14:23:15 +0100 | [diff] [blame] | 345 | void dhm_selftest( ) |
Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 346 | { |
Andres AG | 93012e8 | 2016-09-09 09:10:28 +0100 | [diff] [blame] | 347 | TEST_ASSERT( mbedtls_dhm_self_test( 1 ) == 0 ); |
Paul Bakker | 40ce79f | 2013-09-15 17:43:54 +0200 | [diff] [blame] | 348 | } |
| 349 | /* END_CASE */ |