blob: d7edb755c7e5ba4b7f61b963d3e8664dedff11dd [file] [log] [blame]
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/pk.h"
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +02003
Manuel Pégourié-Gonnard7c13d692014-11-12 00:01:34 +01004/* For error codes */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00005#include "mbedtls/ecp.h"
6#include "mbedtls/rsa.h"
Manuel Pégourié-Gonnard7c13d692014-11-12 00:01:34 +01007
Andres AG5c79d252017-02-15 10:52:32 +00008/* For detecting 64-bit compilation */
9#include "mbedtls/bignum.h"
10
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020011static int rnd_std_rand( void *rng_state, unsigned char *output, size_t len );
12
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020013#define RSA_KEY_SIZE 512
14#define RSA_KEY_LEN 64
15
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020016static int pk_genkey( mbedtls_pk_context *pk )
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020017{
Paul Bakkera5320902013-12-19 17:29:52 +010018 ((void) pk);
19
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020020#if defined(MBEDTLS_RSA_C) && defined(MBEDTLS_GENPRIME)
21 if( mbedtls_pk_get_type( pk ) == MBEDTLS_PK_RSA )
22 return mbedtls_rsa_gen_key( mbedtls_pk_rsa( *pk ), rnd_std_rand, NULL, RSA_KEY_SIZE, 3 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020023#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020024#if defined(MBEDTLS_ECP_C)
25 if( mbedtls_pk_get_type( pk ) == MBEDTLS_PK_ECKEY ||
26 mbedtls_pk_get_type( pk ) == MBEDTLS_PK_ECKEY_DH ||
27 mbedtls_pk_get_type( pk ) == MBEDTLS_PK_ECDSA )
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020028 {
29 int ret;
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +020030 if( ( ret = mbedtls_ecp_group_load( &mbedtls_pk_ec( *pk )->grp,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020031 MBEDTLS_ECP_DP_SECP192R1 ) ) != 0 )
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020032 return( ret );
33
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020034 return mbedtls_ecp_gen_keypair( &mbedtls_pk_ec( *pk )->grp, &mbedtls_pk_ec( *pk )->d,
35 &mbedtls_pk_ec( *pk )->Q, rnd_std_rand, NULL );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020036 }
37#endif
38 return( -1 );
39}
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020040
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020041#if defined(MBEDTLS_RSA_C)
42int mbedtls_rsa_decrypt_func( void *ctx, int mode, size_t *olen,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020043 const unsigned char *input, unsigned char *output,
44 size_t output_max_len )
45{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020046 return( mbedtls_rsa_pkcs1_decrypt( (mbedtls_rsa_context *) ctx, NULL, NULL, mode, olen,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020047 input, output, output_max_len ) );
48}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020049int mbedtls_rsa_sign_func( void *ctx,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020050 int (*f_rng)(void *, unsigned char *, size_t), void *p_rng,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020051 int mode, mbedtls_md_type_t md_alg, unsigned int hashlen,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020052 const unsigned char *hash, unsigned char *sig )
53{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020054 return( mbedtls_rsa_pkcs1_sign( (mbedtls_rsa_context *) ctx, f_rng, p_rng, mode,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020055 md_alg, hashlen, hash, sig ) );
56}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020057size_t mbedtls_rsa_key_len_func( void *ctx )
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020058{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020059 return( ((const mbedtls_rsa_context *) ctx)->len );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020060}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020061#endif /* MBEDTLS_RSA_C */
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020062/* END_HEADER */
63
64/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020065 * depends_on:MBEDTLS_PK_C
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020066 * END_DEPENDENCIES
67 */
68
69/* BEGIN_CASE */
70void pk_utils( int type, int size, int len, char *name )
71{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020072 mbedtls_pk_context pk;
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020073
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020074 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020075
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +020076 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( type ) ) == 0 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020077 TEST_ASSERT( pk_genkey( &pk ) == 0 );
78
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020079 TEST_ASSERT( (int) mbedtls_pk_get_type( &pk ) == type );
80 TEST_ASSERT( mbedtls_pk_can_do( &pk, type ) );
Manuel Pégourié-Gonnard097c7bb2015-06-18 16:43:38 +020081 TEST_ASSERT( mbedtls_pk_get_bitlen( &pk ) == (unsigned) size );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020082 TEST_ASSERT( mbedtls_pk_get_len( &pk ) == (unsigned) len );
83 TEST_ASSERT( strcmp( mbedtls_pk_get_name( &pk), name ) == 0 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020084
Paul Bakkerbd51b262014-07-10 15:26:12 +020085exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020086 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020087}
88/* END_CASE */
89
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020090/* BEGIN_CASE depends_on:MBEDTLS_PK_PARSE_C:MBEDTLS_FS_IO */
91void mbedtls_pk_check_pair( char *pub_file, char *prv_file, int ret )
Manuel Pégourié-Gonnard70bdadf2014-11-06 16:51:20 +010092{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020093 mbedtls_pk_context pub, prv, alt;
Manuel Pégourié-Gonnard70bdadf2014-11-06 16:51:20 +010094
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020095 mbedtls_pk_init( &pub );
96 mbedtls_pk_init( &prv );
97 mbedtls_pk_init( &alt );
Manuel Pégourié-Gonnard70bdadf2014-11-06 16:51:20 +010098
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020099 TEST_ASSERT( mbedtls_pk_parse_public_keyfile( &pub, pub_file ) == 0 );
100 TEST_ASSERT( mbedtls_pk_parse_keyfile( &prv, prv_file, NULL ) == 0 );
Manuel Pégourié-Gonnard70bdadf2014-11-06 16:51:20 +0100101
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200102 TEST_ASSERT( mbedtls_pk_check_pair( &pub, &prv ) == ret );
Manuel Pégourié-Gonnard70bdadf2014-11-06 16:51:20 +0100103
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200104#if defined(MBEDTLS_RSA_C) && defined(MBEDTLS_PK_RSA_ALT_SUPPORT)
105 if( mbedtls_pk_get_type( &prv ) == MBEDTLS_PK_RSA )
Manuel Pégourié-Gonnarda1efcb02014-11-08 17:08:08 +0100106 {
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200107 TEST_ASSERT( mbedtls_pk_setup_rsa_alt( &alt, mbedtls_pk_rsa( prv ),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200108 mbedtls_rsa_decrypt_func, mbedtls_rsa_sign_func, mbedtls_rsa_key_len_func ) == 0 );
109 TEST_ASSERT( mbedtls_pk_check_pair( &pub, &alt ) == ret );
Manuel Pégourié-Gonnarda1efcb02014-11-08 17:08:08 +0100110 }
Manuel Pégourié-Gonnard7c13d692014-11-12 00:01:34 +0100111#endif
Manuel Pégourié-Gonnarda1efcb02014-11-08 17:08:08 +0100112
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200113 mbedtls_pk_free( &pub );
114 mbedtls_pk_free( &prv );
115 mbedtls_pk_free( &alt );
Manuel Pégourié-Gonnard70bdadf2014-11-06 16:51:20 +0100116}
117/* END_CASE */
118
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200119/* BEGIN_CASE depends_on:MBEDTLS_RSA_C */
Paul Bakker42099c32014-01-27 11:45:49 +0100120void pk_rsa_verify_test_vec( char *message_hex_string, int digest,
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200121 int mod, int radix_N, char *input_N, int radix_E,
122 char *input_E, char *result_hex_str, int result )
123{
124 unsigned char message_str[1000];
125 unsigned char hash_result[1000];
126 unsigned char result_str[1000];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200127 mbedtls_rsa_context *rsa;
128 mbedtls_pk_context pk;
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200129 int msg_len;
Manuel Pégourié-Gonnard15d7df22017-08-17 14:33:31 +0200130 mbedtls_pk_restart_ctx *rs_ctx = NULL;
Manuel Pégourié-Gonnardc4ee9ac2017-05-08 10:09:36 +0200131#if defined(MBEDTLS_ECDSA_C) && defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard15d7df22017-08-17 14:33:31 +0200132 mbedtls_pk_restart_ctx ctx;
Manuel Pégourié-Gonnardc4ee9ac2017-05-08 10:09:36 +0200133
134 rs_ctx = &ctx;
Manuel Pégourié-Gonnard15d7df22017-08-17 14:33:31 +0200135 mbedtls_pk_restart_init( rs_ctx );
Manuel Pégourié-Gonnardc4ee9ac2017-05-08 10:09:36 +0200136 mbedtls_ecp_set_max_ops( 42 );
137#endif
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200138
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200139 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200140
141 memset( message_str, 0x00, 1000 );
142 memset( hash_result, 0x00, 1000 );
143 memset( result_str, 0x00, 1000 );
144
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200145 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200146 rsa = mbedtls_pk_rsa( pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200147
Paul Bakker42099c32014-01-27 11:45:49 +0100148 rsa->len = mod / 8;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200149 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->N, radix_N, input_N ) == 0 );
150 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->E, radix_E, input_E ) == 0 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200151
152 msg_len = unhexify( message_str, message_hex_string );
153 unhexify( result_str, result_hex_str );
154
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200155 if( mbedtls_md_info_from_type( digest ) != NULL )
156 TEST_ASSERT( mbedtls_md( mbedtls_md_info_from_type( digest ), message_str, msg_len, hash_result ) == 0 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200157
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200158 TEST_ASSERT( mbedtls_pk_verify( &pk, digest, hash_result, 0,
159 result_str, mbedtls_pk_get_len( &pk ) ) == result );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200160
Manuel Pégourié-Gonnardc4ee9ac2017-05-08 10:09:36 +0200161 TEST_ASSERT( mbedtls_pk_verify_restartable( &pk, digest, hash_result, 0,
162 result_str, mbedtls_pk_get_len( &pk ), rs_ctx ) == result );
163
Paul Bakkerbd51b262014-07-10 15:26:12 +0200164exit:
Manuel Pégourié-Gonnardc4ee9ac2017-05-08 10:09:36 +0200165#if defined(MBEDTLS_ECDSA_C) && defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard15d7df22017-08-17 14:33:31 +0200166 mbedtls_pk_restart_free( rs_ctx );
Manuel Pégourié-Gonnardc4ee9ac2017-05-08 10:09:36 +0200167#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200168 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200169}
170/* END_CASE */
171
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200172/* BEGIN_CASE depends_on:MBEDTLS_RSA_C */
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200173void pk_rsa_verify_ext_test_vec( char *message_hex_string, int digest,
174 int mod, int radix_N, char *input_N, int radix_E,
175 char *input_E, char *result_hex_str,
176 int pk_type, int mgf1_hash_id, int salt_len,
177 int result )
178{
179 unsigned char message_str[1000];
180 unsigned char hash_result[1000];
181 unsigned char result_str[1000];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200182 mbedtls_rsa_context *rsa;
183 mbedtls_pk_context pk;
184 mbedtls_pk_rsassa_pss_options pss_opts;
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200185 void *options;
186 int msg_len;
187 size_t hash_len;
188
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200189 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200190
191 memset( message_str, 0x00, 1000 );
192 memset( hash_result, 0x00, 1000 );
193 memset( result_str, 0x00, 1000 );
194
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200195 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200196 rsa = mbedtls_pk_rsa( pk );
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200197
198 rsa->len = mod / 8;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200199 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->N, radix_N, input_N ) == 0 );
200 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->E, radix_E, input_E ) == 0 );
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200201
202 msg_len = unhexify( message_str, message_hex_string );
203 unhexify( result_str, result_hex_str );
204
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200205 if( digest != MBEDTLS_MD_NONE )
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200206 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200207 TEST_ASSERT( mbedtls_md( mbedtls_md_info_from_type( digest ),
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200208 message_str, msg_len, hash_result ) == 0 );
209 hash_len = 0;
210 }
211 else
212 {
213 memcpy( hash_result, message_str, msg_len );
214 hash_len = msg_len;
215 }
216
217 if( mgf1_hash_id < 0 )
218 {
219 options = NULL;
220 }
221 else
222 {
223 options = &pss_opts;
224
225 pss_opts.mgf1_hash_id = mgf1_hash_id;
226 pss_opts.expected_salt_len = salt_len;
227 }
228
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200229 TEST_ASSERT( mbedtls_pk_verify_ext( pk_type, options, &pk,
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200230 digest, hash_result, hash_len,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200231 result_str, mbedtls_pk_get_len( &pk ) ) == result );
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200232
Paul Bakkerbd51b262014-07-10 15:26:12 +0200233exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200234 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200235}
236/* END_CASE */
237
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200238/* BEGIN_CASE depends_on:MBEDTLS_ECDSA_C */
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200239void pk_ec_test_vec( int type, int id, char *key_str,
240 char *hash_str, char * sig_str, int ret )
241{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200242 mbedtls_pk_context pk;
243 mbedtls_ecp_keypair *eckey;
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200244 unsigned char hash[100], sig[500], key[500];
245 size_t hash_len, sig_len, key_len;
246
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200247 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200248
249 memset( hash, 0, sizeof( hash ) ); hash_len = unhexify(hash, hash_str);
250 memset( sig, 0, sizeof( sig ) ); sig_len = unhexify(sig, sig_str);
251 memset( key, 0, sizeof( key ) ); key_len = unhexify(key, key_str);
252
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200253 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( type ) ) == 0 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200254
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200255 TEST_ASSERT( mbedtls_pk_can_do( &pk, MBEDTLS_PK_ECDSA ) );
256 eckey = mbedtls_pk_ec( pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200257
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200258 TEST_ASSERT( mbedtls_ecp_group_load( &eckey->grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200259 TEST_ASSERT( mbedtls_ecp_point_read_binary( &eckey->grp, &eckey->Q,
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200260 key, key_len ) == 0 );
261
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200262 TEST_ASSERT( mbedtls_pk_verify( &pk, MBEDTLS_MD_NONE,
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200263 hash, hash_len, sig, sig_len ) == ret );
264
Paul Bakkerbd51b262014-07-10 15:26:12 +0200265exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200266 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200267}
268/* END_CASE */
269
Manuel Pégourié-Gonnardc4ee9ac2017-05-08 10:09:36 +0200270/* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE:MBEDTLS_ECDSA_C:MBEDTLS_ECDSA_DETERMINISTIC */
271void pk_sign_verify_restart( int pk_type, int grp_id, char *d_str,
272 char *QX_str, char *QY_str,
273 int md_alg, char *msg, char *sig_str,
274 int max_ops, int min_restart, int max_restart )
275{
276 int ret, cnt_restart;
Manuel Pégourié-Gonnard15d7df22017-08-17 14:33:31 +0200277 mbedtls_pk_restart_ctx rs_ctx;
Manuel Pégourié-Gonnardc4ee9ac2017-05-08 10:09:36 +0200278 mbedtls_pk_context prv, pub;
279 unsigned char hash[MBEDTLS_MD_MAX_SIZE];
280 unsigned char sig[MBEDTLS_ECDSA_MAX_LEN];
281 unsigned char sig_check[MBEDTLS_ECDSA_MAX_LEN];
282 size_t hlen, slen, slen_check;
283 const mbedtls_md_info_t *md_info;
284
Manuel Pégourié-Gonnard15d7df22017-08-17 14:33:31 +0200285 mbedtls_pk_restart_init( &rs_ctx );
Manuel Pégourié-Gonnardc4ee9ac2017-05-08 10:09:36 +0200286 mbedtls_pk_init( &prv );
287 mbedtls_pk_init( &pub );
288 memset( hash, 0, sizeof( hash ) );
289 memset( sig, 0, sizeof( sig ) );
290 memset( sig_check, 0, sizeof( sig_check ) );
291
292 TEST_ASSERT( mbedtls_pk_setup( &prv, mbedtls_pk_info_from_type( pk_type ) ) == 0 );
293 TEST_ASSERT( mbedtls_ecp_group_load( &mbedtls_pk_ec( prv )->grp, grp_id ) == 0 );
294 TEST_ASSERT( mbedtls_mpi_read_string( &mbedtls_pk_ec( prv )->d, 16, d_str ) == 0 );
295
296 TEST_ASSERT( mbedtls_pk_setup( &pub, mbedtls_pk_info_from_type( pk_type ) ) == 0 );
297 TEST_ASSERT( mbedtls_ecp_group_load( &mbedtls_pk_ec( pub )->grp, grp_id ) == 0 );
298 TEST_ASSERT( mbedtls_ecp_point_read_string( &mbedtls_pk_ec( pub )->Q, 16, QX_str, QY_str ) == 0 );
299
300 slen_check = unhexify( sig_check, sig_str );
301
302 md_info = mbedtls_md_info_from_type( md_alg );
303 TEST_ASSERT( md_info != NULL );
304
305 hlen = mbedtls_md_get_size( md_info );
306 mbedtls_md( md_info, (const unsigned char *) msg, strlen( msg ), hash );
307
308 mbedtls_ecp_set_max_ops( max_ops );
309
310 slen = sizeof( sig );
311 cnt_restart = 0;
312 do {
313 ret = mbedtls_pk_sign_restartable( &prv, md_alg, hash, hlen,
314 sig, &slen, NULL, NULL, &rs_ctx );
315 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restart );
316
317 TEST_ASSERT( ret == 0 );
318 TEST_ASSERT( slen == slen_check );
319 TEST_ASSERT( memcmp( sig, sig_check, slen ) == 0 );
320
321 TEST_ASSERT( cnt_restart >= min_restart );
322 TEST_ASSERT( cnt_restart <= max_restart );
323
324 cnt_restart = 0;
325 do {
326 ret = mbedtls_pk_verify_restartable( &pub, md_alg,
327 hash, hlen, sig, slen, &rs_ctx );
328 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restart );
329
330 TEST_ASSERT( ret == 0 );
331 TEST_ASSERT( cnt_restart >= min_restart );
332 TEST_ASSERT( cnt_restart <= max_restart );
333
334 hash[0]++;
335 do {
336 ret = mbedtls_pk_verify_restartable( &pub, md_alg,
337 hash, hlen, sig, slen, &rs_ctx );
338 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
339 TEST_ASSERT( ret != 0 );
340 hash[0]--;
341
342 sig[0]++;
343 do {
344 ret = mbedtls_pk_verify_restartable( &pub, md_alg,
345 hash, hlen, sig, slen, &rs_ctx );
346 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
347 TEST_ASSERT( ret != 0 );
348 sig[0]--;
349
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200350 /* Do we leak memory when aborting? try verify then sign
351 * This test only makes sense when we actually restart */
352 if( min_restart > 0 )
353 {
354 ret = mbedtls_pk_verify_restartable( &pub, md_alg,
355 hash, hlen, sig, slen, &rs_ctx );
356 TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
357 mbedtls_pk_restart_free( &rs_ctx );
Manuel Pégourié-Gonnardc4ee9ac2017-05-08 10:09:36 +0200358
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200359 slen = sizeof( sig );
360 ret = mbedtls_pk_sign_restartable( &prv, md_alg, hash, hlen,
361 sig, &slen, NULL, NULL, &rs_ctx );
362 TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
363 }
Manuel Pégourié-Gonnardc4ee9ac2017-05-08 10:09:36 +0200364
365exit:
Manuel Pégourié-Gonnard15d7df22017-08-17 14:33:31 +0200366 mbedtls_pk_restart_free( &rs_ctx );
Manuel Pégourié-Gonnardc4ee9ac2017-05-08 10:09:36 +0200367 mbedtls_pk_free( &prv );
368 mbedtls_pk_free( &pub );
369}
370/* END_CASE */
371
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200372/* BEGIN_CASE depends_on:MBEDTLS_SHA256_C */
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200373void pk_sign_verify( int type, int sign_ret, int verify_ret )
374{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200375 mbedtls_pk_context pk;
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200376 unsigned char hash[50], sig[5000];
377 size_t sig_len;
Manuel Pégourié-Gonnardc4ee9ac2017-05-08 10:09:36 +0200378 void *rs_ctx = NULL;
379#if defined(MBEDTLS_ECDSA_C) && defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard15d7df22017-08-17 14:33:31 +0200380 mbedtls_pk_restart_ctx ctx;
Manuel Pégourié-Gonnardc4ee9ac2017-05-08 10:09:36 +0200381
382 rs_ctx = &ctx;
Manuel Pégourié-Gonnard15d7df22017-08-17 14:33:31 +0200383 mbedtls_pk_restart_init( rs_ctx );
Manuel Pégourié-Gonnardc4ee9ac2017-05-08 10:09:36 +0200384 mbedtls_ecp_set_max_ops( 42000 );
385#endif
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200386
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200387 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200388
389 memset( hash, 0x2a, sizeof hash );
390 memset( sig, 0, sizeof sig );
391
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200392 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( type ) ) == 0 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200393 TEST_ASSERT( pk_genkey( &pk ) == 0 );
394
Manuel Pégourié-Gonnardc4ee9ac2017-05-08 10:09:36 +0200395 TEST_ASSERT( mbedtls_pk_sign_restartable( &pk, MBEDTLS_MD_SHA256,
396 hash, sizeof hash, sig, &sig_len,
397 rnd_std_rand, NULL, rs_ctx ) == sign_ret );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200398
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200399 TEST_ASSERT( mbedtls_pk_verify( &pk, MBEDTLS_MD_SHA256,
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200400 hash, sizeof hash, sig, sig_len ) == verify_ret );
401
Manuel Pégourié-Gonnardc4ee9ac2017-05-08 10:09:36 +0200402 if( verify_ret == 0 )
403 {
404 hash[0]++;
405 TEST_ASSERT( mbedtls_pk_verify( &pk, MBEDTLS_MD_SHA256,
406 hash, sizeof hash, sig, sig_len ) != 0 );
407 hash[0]--;
408
409 sig[0]++;
410 TEST_ASSERT( mbedtls_pk_verify( &pk, MBEDTLS_MD_SHA256,
411 hash, sizeof hash, sig, sig_len ) != 0 );
412 sig[0]--;
413 }
414
415 TEST_ASSERT( mbedtls_pk_sign( &pk, MBEDTLS_MD_SHA256, hash, sizeof hash,
416 sig, &sig_len, rnd_std_rand, NULL ) == sign_ret );
417
418 TEST_ASSERT( mbedtls_pk_verify_restartable( &pk, MBEDTLS_MD_SHA256,
419 hash, sizeof hash, sig, sig_len, rs_ctx ) == verify_ret );
420
421 if( verify_ret == 0 )
422 {
423 hash[0]++;
424 TEST_ASSERT( mbedtls_pk_verify_restartable( &pk, MBEDTLS_MD_SHA256,
425 hash, sizeof hash, sig, sig_len, rs_ctx ) != 0 );
426 hash[0]--;
427
428 sig[0]++;
429 TEST_ASSERT( mbedtls_pk_verify_restartable( &pk, MBEDTLS_MD_SHA256,
430 hash, sizeof hash, sig, sig_len, rs_ctx ) != 0 );
431 sig[0]--;
432 }
433
Paul Bakkerbd51b262014-07-10 15:26:12 +0200434exit:
Manuel Pégourié-Gonnardc4ee9ac2017-05-08 10:09:36 +0200435#if defined(MBEDTLS_ECDSA_C) && defined(MBEDTLS_ECP_RESTARTABLE)
Manuel Pégourié-Gonnard15d7df22017-08-17 14:33:31 +0200436 mbedtls_pk_restart_free( rs_ctx );
Manuel Pégourié-Gonnardc4ee9ac2017-05-08 10:09:36 +0200437#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200438 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200439}
440/* END_CASE */
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200441
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200442/* BEGIN_CASE depends_on:MBEDTLS_RSA_C */
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200443void pk_rsa_encrypt_test_vec( char *message_hex, int mod,
444 int radix_N, char *input_N,
445 int radix_E, char *input_E,
446 char *result_hex, int ret )
447{
448 unsigned char message[1000];
449 unsigned char output[1000];
450 unsigned char result[1000];
451 size_t msg_len, olen, res_len;
452 rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200453 mbedtls_rsa_context *rsa;
454 mbedtls_pk_context pk;
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200455
456 memset( &rnd_info, 0, sizeof( rnd_pseudo_info ) );
457 memset( message, 0, sizeof( message ) );
458 memset( output, 0, sizeof( output ) );
459 memset( result, 0, sizeof( result ) );
460
461 msg_len = unhexify( message, message_hex );
462 res_len = unhexify( result, result_hex );
463
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200464 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200465 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200466 rsa = mbedtls_pk_rsa( pk );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200467
468 rsa->len = mod / 8;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200469 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->N, radix_N, input_N ) == 0 );
470 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->E, radix_E, input_E ) == 0 );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200471
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200472 TEST_ASSERT( mbedtls_pk_encrypt( &pk, message, msg_len,
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200473 output, &olen, sizeof( output ),
474 rnd_pseudo_rand, &rnd_info ) == ret );
475 TEST_ASSERT( olen == res_len );
476 TEST_ASSERT( memcmp( output, result, olen ) == 0 );
477
Paul Bakkerbd51b262014-07-10 15:26:12 +0200478exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200479 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200480}
481/* END_CASE */
482
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200483/* BEGIN_CASE depends_on:MBEDTLS_RSA_C */
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200484void pk_rsa_decrypt_test_vec( char *cipher_hex, int mod,
485 int radix_P, char *input_P,
486 int radix_Q, char *input_Q,
487 int radix_N, char *input_N,
488 int radix_E, char *input_E,
489 char *clear_hex, int ret )
490{
491 unsigned char clear[1000];
492 unsigned char output[1000];
493 unsigned char cipher[1000];
494 size_t clear_len, olen, cipher_len;
495 rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200496 mbedtls_mpi P1, Q1, H, G;
497 mbedtls_rsa_context *rsa;
498 mbedtls_pk_context pk;
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200499
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200500 mbedtls_pk_init( &pk );
501 mbedtls_mpi_init( &P1 ); mbedtls_mpi_init( &Q1 ); mbedtls_mpi_init( &H ); mbedtls_mpi_init( &G );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200502
503 memset( &rnd_info, 0, sizeof( rnd_pseudo_info ) );
504 memset( clear, 0, sizeof( clear ) );
505 memset( cipher, 0, sizeof( cipher ) );
506
507 clear_len = unhexify( clear, clear_hex );
508 cipher_len = unhexify( cipher, cipher_hex );
509
510 /* init pk-rsa context */
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200511 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200512 rsa = mbedtls_pk_rsa( pk );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200513
514 /* load public key */
515 rsa->len = mod / 8;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200516 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->N, radix_N, input_N ) == 0 );
517 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->E, radix_E, input_E ) == 0 );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200518
519 /* load private key */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200520 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->P, radix_P, input_P ) == 0 );
521 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->Q, radix_Q, input_Q ) == 0 );
522 TEST_ASSERT( mbedtls_mpi_sub_int( &P1, &rsa->P, 1 ) == 0 );
523 TEST_ASSERT( mbedtls_mpi_sub_int( &Q1, &rsa->Q, 1 ) == 0 );
524 TEST_ASSERT( mbedtls_mpi_mul_mpi( &H, &P1, &Q1 ) == 0 );
525 TEST_ASSERT( mbedtls_mpi_gcd( &G, &rsa->E, &H ) == 0 );
526 TEST_ASSERT( mbedtls_mpi_inv_mod( &rsa->D , &rsa->E, &H ) == 0 );
527 TEST_ASSERT( mbedtls_mpi_mod_mpi( &rsa->DP, &rsa->D, &P1 ) == 0 );
528 TEST_ASSERT( mbedtls_mpi_mod_mpi( &rsa->DQ, &rsa->D, &Q1 ) == 0 );
529 TEST_ASSERT( mbedtls_mpi_inv_mod( &rsa->QP, &rsa->Q, &rsa->P ) == 0 );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200530
531 /* decryption test */
532 memset( output, 0, sizeof( output ) );
533 olen = 0;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200534 TEST_ASSERT( mbedtls_pk_decrypt( &pk, cipher, cipher_len,
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200535 output, &olen, sizeof( output ),
536 rnd_pseudo_rand, &rnd_info ) == ret );
537 if( ret == 0 )
538 {
539 TEST_ASSERT( olen == clear_len );
540 TEST_ASSERT( memcmp( output, clear, olen ) == 0 );
541 }
542
Paul Bakkerbd51b262014-07-10 15:26:12 +0200543exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200544 mbedtls_mpi_free( &P1 ); mbedtls_mpi_free( &Q1 ); mbedtls_mpi_free( &H ); mbedtls_mpi_free( &G );
545 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200546}
547/* END_CASE */
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200548
549/* BEGIN_CASE */
550void pk_ec_nocrypt( int type )
551{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200552 mbedtls_pk_context pk;
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200553 unsigned char output[100];
554 unsigned char input[100];
555 rnd_pseudo_info rnd_info;
556 size_t olen = 0;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200557 int ret = MBEDTLS_ERR_PK_TYPE_MISMATCH;
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200558
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200559 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200560
561 memset( &rnd_info, 0, sizeof( rnd_pseudo_info ) );
562 memset( output, 0, sizeof( output ) );
563 memset( input, 0, sizeof( input ) );
564
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200565 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( type ) ) == 0 );
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200566
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200567 TEST_ASSERT( mbedtls_pk_encrypt( &pk, input, sizeof( input ),
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200568 output, &olen, sizeof( output ),
569 rnd_pseudo_rand, &rnd_info ) == ret );
570
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200571 TEST_ASSERT( mbedtls_pk_decrypt( &pk, input, sizeof( input ),
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200572 output, &olen, sizeof( output ),
573 rnd_pseudo_rand, &rnd_info ) == ret );
574
Paul Bakkerbd51b262014-07-10 15:26:12 +0200575exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200576 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200577}
578/* END_CASE */
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200579
Andres AG5c79d252017-02-15 10:52:32 +0000580/* BEGIN_CASE depends_on:MBEDTLS_RSA_C:MBEDTLS_HAVE_INT64 */
581void pk_rsa_overflow( )
582{
583 mbedtls_pk_context pk;
584 size_t hash_len = (size_t)-1;
585
586 mbedtls_pk_init( &pk );
587
588 TEST_ASSERT( mbedtls_pk_setup( &pk,
589 mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 );
590
591#if defined(MBEDTLS_PKCS1_V21)
592 TEST_ASSERT( mbedtls_pk_verify_ext( MBEDTLS_PK_RSASSA_PSS, NULL, &pk,
593 MBEDTLS_MD_NONE, NULL, hash_len, NULL, 0 ) ==
594 MBEDTLS_ERR_PK_BAD_INPUT_DATA );
595#endif /* MBEDTLS_PKCS1_V21 */
596
597 TEST_ASSERT( mbedtls_pk_verify( &pk, MBEDTLS_MD_NONE, NULL, hash_len,
598 NULL, 0 ) == MBEDTLS_ERR_PK_BAD_INPUT_DATA );
599
600 TEST_ASSERT( mbedtls_pk_sign( &pk, MBEDTLS_MD_NONE, NULL, hash_len, NULL, 0,
601 rnd_std_rand, NULL ) == MBEDTLS_ERR_PK_BAD_INPUT_DATA );
602
603exit:
604 mbedtls_pk_free( &pk );
605}
606/* END_CASE */
607
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200608/* BEGIN_CASE depends_on:MBEDTLS_RSA_C:MBEDTLS_PK_RSA_ALT_SUPPORT */
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200609void pk_rsa_alt( )
610{
611 /*
612 * An rsa_alt context can only do private operations (decrypt, sign).
613 * Test it against the public operations (encrypt, verify) of a
614 * corresponding rsa context.
615 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200616 mbedtls_rsa_context raw;
617 mbedtls_pk_context rsa, alt;
618 mbedtls_pk_debug_item dbg_items[10];
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200619 unsigned char hash[50], sig[1000];
620 unsigned char msg[50], ciph[1000], test[1000];
621 size_t sig_len, ciph_len, test_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200622 int ret = MBEDTLS_ERR_PK_TYPE_MISMATCH;
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200623
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200624 mbedtls_rsa_init( &raw, MBEDTLS_RSA_PKCS_V15, MBEDTLS_MD_NONE );
625 mbedtls_pk_init( &rsa ); mbedtls_pk_init( &alt );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200626
627 memset( hash, 0x2a, sizeof hash );
628 memset( sig, 0, sizeof sig );
629 memset( msg, 0x2a, sizeof msg );
630 memset( ciph, 0, sizeof ciph );
631 memset( test, 0, sizeof test );
632
633 /* Initiliaze PK RSA context with random key */
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200634 TEST_ASSERT( mbedtls_pk_setup( &rsa,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200635 mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200636 TEST_ASSERT( pk_genkey( &rsa ) == 0 );
637
638 /* Extract key to the raw rsa context */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200639 TEST_ASSERT( mbedtls_rsa_copy( &raw, mbedtls_pk_rsa( rsa ) ) == 0 );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200640
641 /* Initialize PK RSA_ALT context */
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200642 TEST_ASSERT( mbedtls_pk_setup_rsa_alt( &alt, (void *) &raw,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200643 mbedtls_rsa_decrypt_func, mbedtls_rsa_sign_func, mbedtls_rsa_key_len_func ) == 0 );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200644
645 /* Test administrative functions */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200646 TEST_ASSERT( mbedtls_pk_can_do( &alt, MBEDTLS_PK_RSA ) );
Manuel Pégourié-Gonnard097c7bb2015-06-18 16:43:38 +0200647 TEST_ASSERT( mbedtls_pk_get_bitlen( &alt ) == RSA_KEY_SIZE );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200648 TEST_ASSERT( mbedtls_pk_get_len( &alt ) == RSA_KEY_LEN );
649 TEST_ASSERT( mbedtls_pk_get_type( &alt ) == MBEDTLS_PK_RSA_ALT );
650 TEST_ASSERT( strcmp( mbedtls_pk_get_name( &alt ), "RSA-alt" ) == 0 );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200651
652 /* Test signature */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200653 TEST_ASSERT( mbedtls_pk_sign( &alt, MBEDTLS_MD_NONE, hash, sizeof hash,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200654 sig, &sig_len, rnd_std_rand, NULL ) == 0 );
Andres AG5c79d252017-02-15 10:52:32 +0000655#if defined(MBEDTLS_HAVE_INT64)
656 TEST_ASSERT( mbedtls_pk_sign( &alt, MBEDTLS_MD_NONE, hash, (size_t)-1,
657 NULL, NULL, rnd_std_rand, NULL ) ==
658 MBEDTLS_ERR_PK_BAD_INPUT_DATA );
659#endif /* MBEDTLS_HAVE_INT64 */
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200660 TEST_ASSERT( sig_len == RSA_KEY_LEN );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200661 TEST_ASSERT( mbedtls_pk_verify( &rsa, MBEDTLS_MD_NONE,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200662 hash, sizeof hash, sig, sig_len ) == 0 );
663
664 /* Test decrypt */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200665 TEST_ASSERT( mbedtls_pk_encrypt( &rsa, msg, sizeof msg,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200666 ciph, &ciph_len, sizeof ciph,
667 rnd_std_rand, NULL ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200668 TEST_ASSERT( mbedtls_pk_decrypt( &alt, ciph, ciph_len,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200669 test, &test_len, sizeof test,
670 rnd_std_rand, NULL ) == 0 );
671 TEST_ASSERT( test_len == sizeof msg );
672 TEST_ASSERT( memcmp( test, msg, test_len ) == 0 );
673
674 /* Test forbidden operations */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200675 TEST_ASSERT( mbedtls_pk_encrypt( &alt, msg, sizeof msg,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200676 ciph, &ciph_len, sizeof ciph,
677 rnd_std_rand, NULL ) == ret );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200678 TEST_ASSERT( mbedtls_pk_verify( &alt, MBEDTLS_MD_NONE,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200679 hash, sizeof hash, sig, sig_len ) == ret );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200680 TEST_ASSERT( mbedtls_pk_debug( &alt, dbg_items ) == ret );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200681
Paul Bakkerbd51b262014-07-10 15:26:12 +0200682exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200683 mbedtls_rsa_free( &raw );
684 mbedtls_pk_free( &rsa ); mbedtls_pk_free( &alt );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200685}
686/* END_CASE */