Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 1 | /* BEGIN_HEADER */ |
Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 2 | #include "mbedtls/pk.h" |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 3 | |
Manuel Pégourié-Gonnard | 7c13d69 | 2014-11-12 00:01:34 +0100 | [diff] [blame] | 4 | /* For error codes */ |
Gilles Peskine | 998fbfb | 2018-12-19 17:08:51 +0100 | [diff] [blame] | 5 | #include "mbedtls/asn1.h" |
| 6 | #include "mbedtls/base64.h" |
Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 7 | #include "mbedtls/ecp.h" |
| 8 | #include "mbedtls/rsa.h" |
Manuel Pégourié-Gonnard | 7c13d69 | 2014-11-12 00:01:34 +0100 | [diff] [blame] | 9 | |
Andres Amaya Garcia | 7ea6727 | 2017-05-08 11:15:49 +0100 | [diff] [blame] | 10 | #include <limits.h> |
Andres Amaya Garcia | 6ff067d | 2017-06-09 14:26:59 +0100 | [diff] [blame] | 11 | #include <stdint.h> |
Andres AG | 5c79d25 | 2017-02-15 10:52:32 +0000 | [diff] [blame] | 12 | |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 13 | static int rnd_std_rand( void *rng_state, unsigned char *output, size_t len ); |
| 14 | |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 15 | #define RSA_KEY_SIZE 512 |
| 16 | #define RSA_KEY_LEN 64 |
| 17 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 18 | static int pk_genkey( mbedtls_pk_context *pk ) |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 19 | { |
Paul Bakker | a532090 | 2013-12-19 17:29:52 +0100 | [diff] [blame] | 20 | ((void) pk); |
| 21 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 22 | #if defined(MBEDTLS_RSA_C) && defined(MBEDTLS_GENPRIME) |
| 23 | if( mbedtls_pk_get_type( pk ) == MBEDTLS_PK_RSA ) |
| 24 | return mbedtls_rsa_gen_key( mbedtls_pk_rsa( *pk ), rnd_std_rand, NULL, RSA_KEY_SIZE, 3 ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 25 | #endif |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 26 | #if defined(MBEDTLS_ECP_C) |
| 27 | if( mbedtls_pk_get_type( pk ) == MBEDTLS_PK_ECKEY || |
| 28 | mbedtls_pk_get_type( pk ) == MBEDTLS_PK_ECKEY_DH || |
| 29 | mbedtls_pk_get_type( pk ) == MBEDTLS_PK_ECDSA ) |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 30 | { |
| 31 | int ret; |
Manuel Pégourié-Gonnard | e3a062b | 2015-05-11 18:46:47 +0200 | [diff] [blame] | 32 | if( ( ret = mbedtls_ecp_group_load( &mbedtls_pk_ec( *pk )->grp, |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 33 | MBEDTLS_ECP_DP_SECP192R1 ) ) != 0 ) |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 34 | return( ret ); |
| 35 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 36 | return mbedtls_ecp_gen_keypair( &mbedtls_pk_ec( *pk )->grp, &mbedtls_pk_ec( *pk )->d, |
| 37 | &mbedtls_pk_ec( *pk )->Q, rnd_std_rand, NULL ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 38 | } |
| 39 | #endif |
| 40 | return( -1 ); |
| 41 | } |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 42 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 43 | #if defined(MBEDTLS_RSA_C) |
| 44 | int mbedtls_rsa_decrypt_func( void *ctx, int mode, size_t *olen, |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 45 | const unsigned char *input, unsigned char *output, |
| 46 | size_t output_max_len ) |
| 47 | { |
Hanno Becker | 6ac972d | 2017-09-07 10:57:48 +0100 | [diff] [blame] | 48 | return( mbedtls_rsa_pkcs1_decrypt( (mbedtls_rsa_context *) ctx, |
| 49 | rnd_std_rand, NULL, mode, olen, |
| 50 | input, output, output_max_len ) ); |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 51 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 52 | int mbedtls_rsa_sign_func( void *ctx, |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 53 | int (*f_rng)(void *, unsigned char *, size_t), void *p_rng, |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 54 | int mode, mbedtls_md_type_t md_alg, unsigned int hashlen, |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 55 | const unsigned char *hash, unsigned char *sig ) |
| 56 | { |
Hanno Becker | a540068 | 2017-05-03 16:43:15 +0100 | [diff] [blame] | 57 | ((void) f_rng); |
| 58 | ((void) p_rng); |
| 59 | return( mbedtls_rsa_pkcs1_sign( (mbedtls_rsa_context *) ctx, rnd_std_rand, NULL, mode, |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 60 | md_alg, hashlen, hash, sig ) ); |
| 61 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 62 | size_t mbedtls_rsa_key_len_func( void *ctx ) |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 63 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 64 | return( ((const mbedtls_rsa_context *) ctx)->len ); |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 65 | } |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 66 | #endif /* MBEDTLS_RSA_C */ |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 67 | /* END_HEADER */ |
| 68 | |
| 69 | /* BEGIN_DEPENDENCIES |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 70 | * depends_on:MBEDTLS_PK_C |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 71 | * END_DEPENDENCIES |
| 72 | */ |
| 73 | |
| 74 | /* BEGIN_CASE */ |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 75 | void valid_parameters( ) |
| 76 | { |
| 77 | mbedtls_pk_context pk; |
Gilles Peskine | ee3cfec | 2018-12-19 17:10:02 +0100 | [diff] [blame] | 78 | unsigned char buf[1]; |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 79 | size_t len; |
Gilles Peskine | ee3cfec | 2018-12-19 17:10:02 +0100 | [diff] [blame] | 80 | void *options = NULL; |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 81 | |
| 82 | mbedtls_pk_init( &pk ); |
| 83 | |
Gilles Peskine | 1f19fa6 | 2018-12-19 14:18:39 +0100 | [diff] [blame] | 84 | TEST_VALID_PARAM( mbedtls_pk_free( NULL ) ); |
| 85 | |
| 86 | #if defined(MBEDTLS_ECDSA_C) && defined(MBEDTLS_ECP_RESTARTABLE) |
| 87 | TEST_VALID_PARAM( mbedtls_pk_restart_free( NULL ) ); |
| 88 | #endif |
| 89 | |
Gilles Peskine | e146e7d | 2018-12-19 13:20:21 +0100 | [diff] [blame] | 90 | TEST_ASSERT( mbedtls_pk_setup( &pk, NULL ) == |
| 91 | MBEDTLS_ERR_PK_BAD_INPUT_DATA ); |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 92 | |
Gilles Peskine | 6af45ec | 2018-12-19 17:52:05 +0100 | [diff] [blame] | 93 | /* In informational functions, we accept NULL where a context pointer |
| 94 | * is expected because that's what the library has done forever. |
| 95 | * We do not document that NULL is accepted, so we may wish to change |
| 96 | * the behavior in a future version. */ |
Gilles Peskine | e146e7d | 2018-12-19 13:20:21 +0100 | [diff] [blame] | 97 | TEST_ASSERT( mbedtls_pk_get_bitlen( NULL ) == 0 ); |
Gilles Peskine | e146e7d | 2018-12-19 13:20:21 +0100 | [diff] [blame] | 98 | TEST_ASSERT( mbedtls_pk_get_len( NULL ) == 0 ); |
Gilles Peskine | e146e7d | 2018-12-19 13:20:21 +0100 | [diff] [blame] | 99 | TEST_ASSERT( mbedtls_pk_can_do( NULL, MBEDTLS_PK_NONE ) == 0 ); |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 100 | |
Gilles Peskine | ee3cfec | 2018-12-19 17:10:02 +0100 | [diff] [blame] | 101 | TEST_ASSERT( mbedtls_pk_sign_restartable( &pk, |
| 102 | MBEDTLS_MD_NONE, |
| 103 | NULL, 0, |
| 104 | buf, &len, |
| 105 | rnd_std_rand, NULL, |
| 106 | NULL ) == |
| 107 | MBEDTLS_ERR_PK_BAD_INPUT_DATA ); |
| 108 | |
| 109 | TEST_ASSERT( mbedtls_pk_sign_restartable( &pk, |
| 110 | MBEDTLS_MD_NONE, |
| 111 | NULL, 0, |
| 112 | buf, &len, |
| 113 | rnd_std_rand, NULL, |
| 114 | NULL ) == |
| 115 | MBEDTLS_ERR_PK_BAD_INPUT_DATA ); |
| 116 | |
| 117 | TEST_ASSERT( mbedtls_pk_sign( &pk, |
| 118 | MBEDTLS_MD_NONE, |
| 119 | NULL, 0, |
| 120 | buf, &len, |
| 121 | rnd_std_rand, NULL ) == |
| 122 | MBEDTLS_ERR_PK_BAD_INPUT_DATA ); |
| 123 | |
| 124 | TEST_ASSERT( mbedtls_pk_verify_restartable( &pk, |
| 125 | MBEDTLS_MD_NONE, |
| 126 | NULL, 0, |
| 127 | buf, sizeof( buf ), |
| 128 | NULL ) == |
| 129 | MBEDTLS_ERR_PK_BAD_INPUT_DATA ); |
| 130 | |
| 131 | TEST_ASSERT( mbedtls_pk_verify( &pk, |
| 132 | MBEDTLS_MD_NONE, |
| 133 | NULL, 0, |
| 134 | buf, sizeof( buf ) ) == |
| 135 | MBEDTLS_ERR_PK_BAD_INPUT_DATA ); |
| 136 | |
| 137 | TEST_ASSERT( mbedtls_pk_verify_ext( MBEDTLS_PK_NONE, options, |
| 138 | &pk, |
| 139 | MBEDTLS_MD_NONE, |
| 140 | NULL, 0, |
| 141 | buf, sizeof( buf ) ) == |
| 142 | MBEDTLS_ERR_PK_BAD_INPUT_DATA ); |
| 143 | |
Gilles Peskine | e146e7d | 2018-12-19 13:20:21 +0100 | [diff] [blame] | 144 | TEST_ASSERT( mbedtls_pk_encrypt( &pk, |
| 145 | NULL, 0, |
| 146 | NULL, &len, 0, |
| 147 | rnd_std_rand, NULL ) == |
| 148 | MBEDTLS_ERR_PK_BAD_INPUT_DATA ); |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 149 | |
Gilles Peskine | e146e7d | 2018-12-19 13:20:21 +0100 | [diff] [blame] | 150 | TEST_ASSERT( mbedtls_pk_decrypt( &pk, |
| 151 | NULL, 0, |
| 152 | NULL, &len, 0, |
| 153 | rnd_std_rand, NULL ) == |
| 154 | MBEDTLS_ERR_PK_BAD_INPUT_DATA ); |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 155 | |
| 156 | #if defined(MBEDTLS_PK_PARSE_C) |
Gilles Peskine | e146e7d | 2018-12-19 13:20:21 +0100 | [diff] [blame] | 157 | TEST_ASSERT( mbedtls_pk_parse_key( &pk, NULL, 0, NULL, 1 ) == |
| 158 | MBEDTLS_ERR_PK_KEY_INVALID_FORMAT ); |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 159 | |
Gilles Peskine | e146e7d | 2018-12-19 13:20:21 +0100 | [diff] [blame] | 160 | TEST_ASSERT( mbedtls_pk_parse_public_key( &pk, NULL, 0 ) == |
| 161 | MBEDTLS_ERR_PK_KEY_INVALID_FORMAT ); |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 162 | #endif /* MBEDTLS_PK_PARSE_C */ |
Gilles Peskine | 998fbfb | 2018-12-19 17:08:51 +0100 | [diff] [blame] | 163 | } |
| 164 | /* END_CASE */ |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 165 | |
Gilles Peskine | 998fbfb | 2018-12-19 17:08:51 +0100 | [diff] [blame] | 166 | /* BEGIN_CASE depends_on:MBEDTLS_PK_WRITE_C */ |
| 167 | void valid_parameters_pkwrite( data_t *key_data ) |
| 168 | { |
| 169 | mbedtls_pk_context pk; |
| 170 | |
| 171 | /* For the write tests to be effective, we need a valid key pair. */ |
| 172 | mbedtls_pk_init( &pk ); |
| 173 | TEST_ASSERT( mbedtls_pk_parse_key( &pk, |
| 174 | key_data->x, key_data->len, |
| 175 | NULL, 0 ) == 0 ); |
| 176 | |
Gilles Peskine | e146e7d | 2018-12-19 13:20:21 +0100 | [diff] [blame] | 177 | TEST_ASSERT( mbedtls_pk_write_key_der( &pk, NULL, 0 ) == |
Gilles Peskine | 998fbfb | 2018-12-19 17:08:51 +0100 | [diff] [blame] | 178 | MBEDTLS_ERR_ASN1_BUF_TOO_SMALL ); |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 179 | |
Gilles Peskine | e146e7d | 2018-12-19 13:20:21 +0100 | [diff] [blame] | 180 | TEST_ASSERT( mbedtls_pk_write_pubkey_der( &pk, NULL, 0 ) == |
Gilles Peskine | 998fbfb | 2018-12-19 17:08:51 +0100 | [diff] [blame] | 181 | MBEDTLS_ERR_ASN1_BUF_TOO_SMALL ); |
| 182 | |
| 183 | #if defined(MBEDTLS_PEM_WRITE_C) |
| 184 | TEST_ASSERT( mbedtls_pk_write_key_pem( &pk, NULL, 0 ) == |
| 185 | MBEDTLS_ERR_BASE64_BUFFER_TOO_SMALL ); |
| 186 | |
| 187 | TEST_ASSERT( mbedtls_pk_write_pubkey_pem( &pk, NULL, 0 ) == |
| 188 | MBEDTLS_ERR_BASE64_BUFFER_TOO_SMALL ); |
| 189 | #endif /* MBEDTLS_PEM_WRITE_C */ |
| 190 | |
| 191 | exit: |
| 192 | mbedtls_pk_free( &pk ); |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 193 | } |
| 194 | /* END_CASE */ |
| 195 | |
| 196 | /* BEGIN_CASE depends_on:MBEDTLS_CHECK_PARAMS:!MBEDTLS_PARAM_FAILED_ALT */ |
| 197 | void invalid_parameters( ) |
| 198 | { |
| 199 | size_t len; |
| 200 | unsigned char *null_buf = NULL; |
| 201 | unsigned char buf[1]; |
| 202 | unsigned char *p = buf; |
| 203 | char str[1] = {0}; |
| 204 | mbedtls_pk_context pk; |
Gilles Peskine | ee3cfec | 2018-12-19 17:10:02 +0100 | [diff] [blame] | 205 | mbedtls_md_type_t valid_md = MBEDTLS_MD_SHA256; |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 206 | void *options = buf; |
| 207 | |
Gilles Peskine | 88ca3a2 | 2018-12-20 12:26:16 +0100 | [diff] [blame] | 208 | (void) null_buf; |
| 209 | (void) p; |
Gilles Peskine | 743e398 | 2018-12-20 12:29:48 +0100 | [diff] [blame] | 210 | (void) str; |
Gilles Peskine | 88ca3a2 | 2018-12-20 12:26:16 +0100 | [diff] [blame] | 211 | |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 212 | mbedtls_pk_init( &pk ); |
| 213 | |
| 214 | TEST_INVALID_PARAM( mbedtls_pk_init( NULL ) ); |
| 215 | |
| 216 | #if defined(MBEDTLS_ECDSA_C) && defined(MBEDTLS_ECP_RESTARTABLE) |
| 217 | TEST_INVALID_PARAM( mbedtls_pk_restart_init( NULL ) ); |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 218 | #endif |
| 219 | |
| 220 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 221 | mbedtls_pk_setup( NULL, NULL ) ); |
| 222 | |
| 223 | #if defined(MBEDTLS_PK_RSA_ALT_SUPPORT) |
| 224 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 225 | mbedtls_pk_setup_rsa_alt( NULL, buf, |
| 226 | NULL, NULL, NULL ) ); |
| 227 | #endif |
| 228 | |
| 229 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 230 | mbedtls_pk_verify_restartable( NULL, |
| 231 | MBEDTLS_MD_NONE, |
| 232 | buf, sizeof( buf ), |
| 233 | buf, sizeof( buf ), |
| 234 | NULL ) ); |
| 235 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 236 | mbedtls_pk_verify_restartable( &pk, |
| 237 | MBEDTLS_MD_NONE, |
| 238 | NULL, sizeof( buf ), |
| 239 | buf, sizeof( buf ), |
| 240 | NULL ) ); |
| 241 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 242 | mbedtls_pk_verify_restartable( &pk, |
Gilles Peskine | ee3cfec | 2018-12-19 17:10:02 +0100 | [diff] [blame] | 243 | valid_md, |
| 244 | NULL, 0, |
| 245 | buf, sizeof( buf ), |
| 246 | NULL ) ); |
| 247 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 248 | mbedtls_pk_verify_restartable( &pk, |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 249 | MBEDTLS_MD_NONE, |
| 250 | buf, sizeof( buf ), |
| 251 | NULL, sizeof( buf ), |
| 252 | NULL ) ); |
| 253 | |
| 254 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 255 | mbedtls_pk_verify( NULL, |
| 256 | MBEDTLS_MD_NONE, |
| 257 | buf, sizeof( buf ), |
| 258 | buf, sizeof( buf ) ) ); |
| 259 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 260 | mbedtls_pk_verify( &pk, |
| 261 | MBEDTLS_MD_NONE, |
| 262 | NULL, sizeof( buf ), |
| 263 | buf, sizeof( buf ) ) ); |
| 264 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 265 | mbedtls_pk_verify( &pk, |
Gilles Peskine | ee3cfec | 2018-12-19 17:10:02 +0100 | [diff] [blame] | 266 | valid_md, |
| 267 | NULL, 0, |
| 268 | buf, sizeof( buf ) ) ); |
| 269 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 270 | mbedtls_pk_verify( &pk, |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 271 | MBEDTLS_MD_NONE, |
| 272 | buf, sizeof( buf ), |
| 273 | NULL, sizeof( buf ) ) ); |
| 274 | |
| 275 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 276 | mbedtls_pk_verify_ext( MBEDTLS_PK_NONE, options, |
| 277 | NULL, |
| 278 | MBEDTLS_MD_NONE, |
| 279 | buf, sizeof( buf ), |
| 280 | buf, sizeof( buf ) ) ); |
| 281 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 282 | mbedtls_pk_verify_ext( MBEDTLS_PK_NONE, options, |
| 283 | &pk, |
| 284 | MBEDTLS_MD_NONE, |
| 285 | NULL, sizeof( buf ), |
| 286 | buf, sizeof( buf ) ) ); |
| 287 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 288 | mbedtls_pk_verify_ext( MBEDTLS_PK_NONE, options, |
| 289 | &pk, |
Gilles Peskine | ee3cfec | 2018-12-19 17:10:02 +0100 | [diff] [blame] | 290 | valid_md, |
| 291 | NULL, 0, |
| 292 | buf, sizeof( buf ) ) ); |
| 293 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 294 | mbedtls_pk_verify_ext( MBEDTLS_PK_NONE, options, |
| 295 | &pk, |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 296 | MBEDTLS_MD_NONE, |
| 297 | buf, sizeof( buf ), |
| 298 | NULL, sizeof( buf ) ) ); |
| 299 | |
| 300 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 301 | mbedtls_pk_sign_restartable( NULL, |
| 302 | MBEDTLS_MD_NONE, |
| 303 | buf, sizeof( buf ), |
| 304 | buf, &len, |
| 305 | rnd_std_rand, NULL, |
| 306 | NULL ) ); |
| 307 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 308 | mbedtls_pk_sign_restartable( &pk, |
| 309 | MBEDTLS_MD_NONE, |
| 310 | NULL, sizeof( buf ), |
| 311 | buf, &len, |
| 312 | rnd_std_rand, NULL, |
| 313 | NULL ) ); |
| 314 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 315 | mbedtls_pk_sign_restartable( &pk, |
Gilles Peskine | ee3cfec | 2018-12-19 17:10:02 +0100 | [diff] [blame] | 316 | valid_md, |
| 317 | NULL, 0, |
| 318 | buf, &len, |
| 319 | rnd_std_rand, NULL, |
| 320 | NULL ) ); |
| 321 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 322 | mbedtls_pk_sign_restartable( &pk, |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 323 | MBEDTLS_MD_NONE, |
| 324 | buf, sizeof( buf ), |
| 325 | NULL, &len, |
| 326 | rnd_std_rand, NULL, |
| 327 | NULL ) ); |
| 328 | |
| 329 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 330 | mbedtls_pk_sign( NULL, |
| 331 | MBEDTLS_MD_NONE, |
| 332 | buf, sizeof( buf ), |
| 333 | buf, &len, |
| 334 | rnd_std_rand, NULL ) ); |
| 335 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 336 | mbedtls_pk_sign( &pk, |
| 337 | MBEDTLS_MD_NONE, |
| 338 | NULL, sizeof( buf ), |
| 339 | buf, &len, |
| 340 | rnd_std_rand, NULL ) ); |
| 341 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 342 | mbedtls_pk_sign( &pk, |
Gilles Peskine | ee3cfec | 2018-12-19 17:10:02 +0100 | [diff] [blame] | 343 | valid_md, |
| 344 | NULL, 0, |
| 345 | buf, &len, |
| 346 | rnd_std_rand, NULL ) ); |
| 347 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 348 | mbedtls_pk_sign( &pk, |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 349 | MBEDTLS_MD_NONE, |
| 350 | buf, sizeof( buf ), |
| 351 | NULL, &len, |
| 352 | rnd_std_rand, NULL ) ); |
| 353 | |
| 354 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 355 | mbedtls_pk_decrypt( NULL, |
| 356 | buf, sizeof( buf ), |
| 357 | buf, &len, sizeof( buf ), |
| 358 | rnd_std_rand, NULL ) ); |
| 359 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 360 | mbedtls_pk_decrypt( &pk, |
| 361 | NULL, sizeof( buf ), |
| 362 | buf, &len, sizeof( buf ), |
| 363 | rnd_std_rand, NULL ) ); |
| 364 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 365 | mbedtls_pk_decrypt( &pk, |
| 366 | buf, sizeof( buf ), |
| 367 | NULL, &len, sizeof( buf ), |
| 368 | rnd_std_rand, NULL ) ); |
| 369 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 370 | mbedtls_pk_decrypt( &pk, |
| 371 | buf, sizeof( buf ), |
| 372 | buf, NULL, sizeof( buf ), |
| 373 | rnd_std_rand, NULL ) ); |
| 374 | |
| 375 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 376 | mbedtls_pk_encrypt( NULL, |
| 377 | buf, sizeof( buf ), |
| 378 | buf, &len, sizeof( buf ), |
| 379 | rnd_std_rand, NULL ) ); |
| 380 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 381 | mbedtls_pk_encrypt( &pk, |
| 382 | NULL, sizeof( buf ), |
| 383 | buf, &len, sizeof( buf ), |
| 384 | rnd_std_rand, NULL ) ); |
| 385 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 386 | mbedtls_pk_encrypt( &pk, |
| 387 | buf, sizeof( buf ), |
| 388 | NULL, &len, sizeof( buf ), |
| 389 | rnd_std_rand, NULL ) ); |
| 390 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 391 | mbedtls_pk_encrypt( &pk, |
| 392 | buf, sizeof( buf ), |
| 393 | buf, NULL, sizeof( buf ), |
| 394 | rnd_std_rand, NULL ) ); |
| 395 | |
| 396 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 397 | mbedtls_pk_check_pair( NULL, &pk ) ); |
| 398 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 399 | mbedtls_pk_check_pair( &pk, NULL ) ); |
| 400 | |
| 401 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 402 | mbedtls_pk_debug( NULL, NULL ) ); |
| 403 | |
| 404 | #if defined(MBEDTLS_PK_PARSE_C) |
Gilles Peskine | d602711 | 2018-12-20 12:15:41 +0100 | [diff] [blame] | 405 | #if defined(MBEDTLS_FS_IO) |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 406 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 407 | mbedtls_pk_load_file( NULL, &p, &len ) ); |
| 408 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 409 | mbedtls_pk_load_file( str, NULL, &len ) ); |
| 410 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 411 | mbedtls_pk_load_file( str, &p, NULL ) ); |
| 412 | |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 413 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 414 | mbedtls_pk_parse_keyfile( NULL, str, NULL ) ); |
| 415 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 416 | mbedtls_pk_parse_keyfile( &pk, NULL, NULL ) ); |
| 417 | |
| 418 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 419 | mbedtls_pk_parse_public_keyfile( NULL, str ) ); |
| 420 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 421 | mbedtls_pk_parse_public_keyfile( &pk, NULL ) ); |
| 422 | #endif |
| 423 | |
| 424 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 425 | mbedtls_pk_parse_subpubkey( NULL, buf, &pk ) ); |
| 426 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 427 | mbedtls_pk_parse_subpubkey( &null_buf, buf, &pk ) ); |
| 428 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 429 | mbedtls_pk_parse_subpubkey( &p, NULL, &pk ) ); |
| 430 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 431 | mbedtls_pk_parse_subpubkey( &p, buf, NULL ) ); |
| 432 | |
| 433 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 434 | mbedtls_pk_parse_key( NULL, |
| 435 | buf, sizeof( buf ), |
| 436 | buf, sizeof( buf ) ) ); |
| 437 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 438 | mbedtls_pk_parse_key( &pk, |
| 439 | NULL, sizeof( buf ), |
| 440 | buf, sizeof( buf ) ) ); |
Gilles Peskine | 78438e4 | 2018-12-19 00:55:07 +0100 | [diff] [blame] | 441 | |
| 442 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 443 | mbedtls_pk_parse_public_key( NULL, |
| 444 | buf, sizeof( buf ) ) ); |
| 445 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 446 | mbedtls_pk_parse_public_key( &pk, |
| 447 | NULL, sizeof( buf ) ) ); |
| 448 | #endif /* MBEDTLS_PK_PARSE_C */ |
| 449 | |
| 450 | #if defined(MBEDTLS_PK_WRITE_C) |
| 451 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 452 | mbedtls_pk_write_pubkey( NULL, p, &pk ) ); |
| 453 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 454 | mbedtls_pk_write_pubkey( &null_buf, p, &pk ) ); |
| 455 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 456 | mbedtls_pk_write_pubkey( &p, NULL, &pk ) ); |
| 457 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 458 | mbedtls_pk_write_pubkey( &p, p, NULL ) ); |
| 459 | |
| 460 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 461 | mbedtls_pk_write_pubkey_der( NULL, |
| 462 | buf, sizeof( buf ) ) ); |
| 463 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 464 | mbedtls_pk_write_pubkey_der( &pk, |
| 465 | NULL, sizeof( buf ) ) ); |
| 466 | |
| 467 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 468 | mbedtls_pk_write_key_der( NULL, |
| 469 | buf, sizeof( buf ) ) ); |
| 470 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 471 | mbedtls_pk_write_key_der( &pk, |
| 472 | NULL, sizeof( buf ) ) ); |
| 473 | |
| 474 | #if defined(MBEDTLS_PEM_WRITE_C) |
| 475 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 476 | mbedtls_pk_write_pubkey_pem( NULL, |
| 477 | buf, sizeof( buf ) ) ); |
| 478 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 479 | mbedtls_pk_write_pubkey_pem( &pk, |
| 480 | NULL, sizeof( buf ) ) ); |
| 481 | |
| 482 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 483 | mbedtls_pk_write_key_pem( NULL, |
| 484 | buf, sizeof( buf ) ) ); |
| 485 | TEST_INVALID_PARAM_RET( MBEDTLS_ERR_PK_BAD_INPUT_DATA, |
| 486 | mbedtls_pk_write_key_pem( &pk, |
| 487 | NULL, sizeof( buf ) ) ); |
| 488 | #endif /* MBEDTLS_PEM_WRITE_C */ |
| 489 | |
| 490 | #endif /* MBEDTLS_PK_WRITE_C */ |
| 491 | } |
| 492 | /* END_CASE */ |
| 493 | |
| 494 | /* BEGIN_CASE */ |
Azim Khan | f1aaec9 | 2017-05-30 14:23:15 +0100 | [diff] [blame] | 495 | void pk_utils( int type, int size, int len, char * name ) |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 496 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 497 | mbedtls_pk_context pk; |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 498 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 499 | mbedtls_pk_init( &pk ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 500 | |
Manuel Pégourié-Gonnard | d9e6a3a | 2015-05-14 19:41:36 +0200 | [diff] [blame] | 501 | TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( type ) ) == 0 ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 502 | TEST_ASSERT( pk_genkey( &pk ) == 0 ); |
| 503 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 504 | TEST_ASSERT( (int) mbedtls_pk_get_type( &pk ) == type ); |
| 505 | TEST_ASSERT( mbedtls_pk_can_do( &pk, type ) ); |
Manuel Pégourié-Gonnard | 097c7bb | 2015-06-18 16:43:38 +0200 | [diff] [blame] | 506 | TEST_ASSERT( mbedtls_pk_get_bitlen( &pk ) == (unsigned) size ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 507 | TEST_ASSERT( mbedtls_pk_get_len( &pk ) == (unsigned) len ); |
| 508 | TEST_ASSERT( strcmp( mbedtls_pk_get_name( &pk), name ) == 0 ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 509 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 510 | exit: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 511 | mbedtls_pk_free( &pk ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 512 | } |
| 513 | /* END_CASE */ |
| 514 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 515 | /* BEGIN_CASE depends_on:MBEDTLS_PK_PARSE_C:MBEDTLS_FS_IO */ |
Azim Khan | f1aaec9 | 2017-05-30 14:23:15 +0100 | [diff] [blame] | 516 | void mbedtls_pk_check_pair( char * pub_file, char * prv_file, int ret ) |
Manuel Pégourié-Gonnard | 70bdadf | 2014-11-06 16:51:20 +0100 | [diff] [blame] | 517 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 518 | mbedtls_pk_context pub, prv, alt; |
Manuel Pégourié-Gonnard | 70bdadf | 2014-11-06 16:51:20 +0100 | [diff] [blame] | 519 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 520 | mbedtls_pk_init( &pub ); |
| 521 | mbedtls_pk_init( &prv ); |
| 522 | mbedtls_pk_init( &alt ); |
Manuel Pégourié-Gonnard | 70bdadf | 2014-11-06 16:51:20 +0100 | [diff] [blame] | 523 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 524 | TEST_ASSERT( mbedtls_pk_parse_public_keyfile( &pub, pub_file ) == 0 ); |
| 525 | TEST_ASSERT( mbedtls_pk_parse_keyfile( &prv, prv_file, NULL ) == 0 ); |
Manuel Pégourié-Gonnard | 70bdadf | 2014-11-06 16:51:20 +0100 | [diff] [blame] | 526 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 527 | TEST_ASSERT( mbedtls_pk_check_pair( &pub, &prv ) == ret ); |
Manuel Pégourié-Gonnard | 70bdadf | 2014-11-06 16:51:20 +0100 | [diff] [blame] | 528 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 529 | #if defined(MBEDTLS_RSA_C) && defined(MBEDTLS_PK_RSA_ALT_SUPPORT) |
| 530 | if( mbedtls_pk_get_type( &prv ) == MBEDTLS_PK_RSA ) |
Manuel Pégourié-Gonnard | a1efcb0 | 2014-11-08 17:08:08 +0100 | [diff] [blame] | 531 | { |
Manuel Pégourié-Gonnard | d9e6a3a | 2015-05-14 19:41:36 +0200 | [diff] [blame] | 532 | TEST_ASSERT( mbedtls_pk_setup_rsa_alt( &alt, mbedtls_pk_rsa( prv ), |
Hanno Becker | 6ac972d | 2017-09-07 10:57:48 +0100 | [diff] [blame] | 533 | mbedtls_rsa_decrypt_func, mbedtls_rsa_sign_func, |
| 534 | mbedtls_rsa_key_len_func ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 535 | TEST_ASSERT( mbedtls_pk_check_pair( &pub, &alt ) == ret ); |
Manuel Pégourié-Gonnard | a1efcb0 | 2014-11-08 17:08:08 +0100 | [diff] [blame] | 536 | } |
Manuel Pégourié-Gonnard | 7c13d69 | 2014-11-12 00:01:34 +0100 | [diff] [blame] | 537 | #endif |
Manuel Pégourié-Gonnard | a1efcb0 | 2014-11-08 17:08:08 +0100 | [diff] [blame] | 538 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 539 | mbedtls_pk_free( &pub ); |
| 540 | mbedtls_pk_free( &prv ); |
| 541 | mbedtls_pk_free( &alt ); |
Manuel Pégourié-Gonnard | 70bdadf | 2014-11-06 16:51:20 +0100 | [diff] [blame] | 542 | } |
| 543 | /* END_CASE */ |
| 544 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 545 | /* BEGIN_CASE depends_on:MBEDTLS_RSA_C */ |
Azim Khan | 5fcca46 | 2018-06-29 11:05:32 +0100 | [diff] [blame] | 546 | void pk_rsa_verify_test_vec( data_t * message_str, int digest, int mod, |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 547 | int radix_N, char * input_N, int radix_E, |
Azim Khan | 5fcca46 | 2018-06-29 11:05:32 +0100 | [diff] [blame] | 548 | char * input_E, data_t * result_str, |
Azim Khan | f1aaec9 | 2017-05-30 14:23:15 +0100 | [diff] [blame] | 549 | int result ) |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 550 | { |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 551 | unsigned char hash_result[1000]; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 552 | mbedtls_rsa_context *rsa; |
| 553 | mbedtls_pk_context pk; |
Manuel Pégourié-Gonnard | 15d7df2 | 2017-08-17 14:33:31 +0200 | [diff] [blame] | 554 | mbedtls_pk_restart_ctx *rs_ctx = NULL; |
Manuel Pégourié-Gonnard | c4ee9ac | 2017-05-08 10:09:36 +0200 | [diff] [blame] | 555 | #if defined(MBEDTLS_ECDSA_C) && defined(MBEDTLS_ECP_RESTARTABLE) |
Manuel Pégourié-Gonnard | 15d7df2 | 2017-08-17 14:33:31 +0200 | [diff] [blame] | 556 | mbedtls_pk_restart_ctx ctx; |
Manuel Pégourié-Gonnard | c4ee9ac | 2017-05-08 10:09:36 +0200 | [diff] [blame] | 557 | |
| 558 | rs_ctx = &ctx; |
Manuel Pégourié-Gonnard | 15d7df2 | 2017-08-17 14:33:31 +0200 | [diff] [blame] | 559 | mbedtls_pk_restart_init( rs_ctx ); |
Manuel Pégourié-Gonnard | 4edb9cb | 2018-07-02 12:23:23 +0200 | [diff] [blame] | 560 | // this setting would ensure restart would happen if ECC was used |
| 561 | mbedtls_ecp_set_max_ops( 1 ); |
Manuel Pégourié-Gonnard | c4ee9ac | 2017-05-08 10:09:36 +0200 | [diff] [blame] | 562 | #endif |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 563 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 564 | mbedtls_pk_init( &pk ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 565 | |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 566 | memset( hash_result, 0x00, 1000 ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 567 | |
Manuel Pégourié-Gonnard | d9e6a3a | 2015-05-14 19:41:36 +0200 | [diff] [blame] | 568 | TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 569 | rsa = mbedtls_pk_rsa( pk ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 570 | |
Paul Bakker | 42099c3 | 2014-01-27 11:45:49 +0100 | [diff] [blame] | 571 | rsa->len = mod / 8; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 572 | TEST_ASSERT( mbedtls_mpi_read_string( &rsa->N, radix_N, input_N ) == 0 ); |
| 573 | TEST_ASSERT( mbedtls_mpi_read_string( &rsa->E, radix_E, input_E ) == 0 ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 574 | |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 575 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 576 | if( mbedtls_md_info_from_type( digest ) != NULL ) |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 577 | TEST_ASSERT( mbedtls_md( mbedtls_md_info_from_type( digest ), message_str->x, message_str->len, hash_result ) == 0 ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 578 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 579 | TEST_ASSERT( mbedtls_pk_verify( &pk, digest, hash_result, 0, |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 580 | result_str->x, mbedtls_pk_get_len( &pk ) ) == result ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 581 | |
Manuel Pégourié-Gonnard | c4ee9ac | 2017-05-08 10:09:36 +0200 | [diff] [blame] | 582 | TEST_ASSERT( mbedtls_pk_verify_restartable( &pk, digest, hash_result, 0, |
Manuel Pégourié-Gonnard | 125af94 | 2018-09-11 11:08:12 +0200 | [diff] [blame] | 583 | result_str->x, mbedtls_pk_get_len( &pk ), rs_ctx ) == result ); |
Manuel Pégourié-Gonnard | c4ee9ac | 2017-05-08 10:09:36 +0200 | [diff] [blame] | 584 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 585 | exit: |
Manuel Pégourié-Gonnard | c4ee9ac | 2017-05-08 10:09:36 +0200 | [diff] [blame] | 586 | #if defined(MBEDTLS_ECDSA_C) && defined(MBEDTLS_ECP_RESTARTABLE) |
Manuel Pégourié-Gonnard | 15d7df2 | 2017-08-17 14:33:31 +0200 | [diff] [blame] | 587 | mbedtls_pk_restart_free( rs_ctx ); |
Manuel Pégourié-Gonnard | c4ee9ac | 2017-05-08 10:09:36 +0200 | [diff] [blame] | 588 | #endif |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 589 | mbedtls_pk_free( &pk ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 590 | } |
| 591 | /* END_CASE */ |
| 592 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 593 | /* BEGIN_CASE depends_on:MBEDTLS_RSA_C */ |
Azim Khan | 5fcca46 | 2018-06-29 11:05:32 +0100 | [diff] [blame] | 594 | void pk_rsa_verify_ext_test_vec( data_t * message_str, int digest, |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 595 | int mod, int radix_N, char * input_N, |
| 596 | int radix_E, char * input_E, |
Azim Khan | 5fcca46 | 2018-06-29 11:05:32 +0100 | [diff] [blame] | 597 | data_t * result_str, int pk_type, |
Azim Khan | f1aaec9 | 2017-05-30 14:23:15 +0100 | [diff] [blame] | 598 | int mgf1_hash_id, int salt_len, int result ) |
Manuel Pégourié-Gonnard | 20422e9 | 2014-06-05 13:41:44 +0200 | [diff] [blame] | 599 | { |
Manuel Pégourié-Gonnard | 20422e9 | 2014-06-05 13:41:44 +0200 | [diff] [blame] | 600 | unsigned char hash_result[1000]; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 601 | mbedtls_rsa_context *rsa; |
| 602 | mbedtls_pk_context pk; |
| 603 | mbedtls_pk_rsassa_pss_options pss_opts; |
Manuel Pégourié-Gonnard | 20422e9 | 2014-06-05 13:41:44 +0200 | [diff] [blame] | 604 | void *options; |
Manuel Pégourié-Gonnard | 20422e9 | 2014-06-05 13:41:44 +0200 | [diff] [blame] | 605 | size_t hash_len; |
| 606 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 607 | mbedtls_pk_init( &pk ); |
Manuel Pégourié-Gonnard | 20422e9 | 2014-06-05 13:41:44 +0200 | [diff] [blame] | 608 | |
Manuel Pégourié-Gonnard | 20422e9 | 2014-06-05 13:41:44 +0200 | [diff] [blame] | 609 | memset( hash_result, 0x00, 1000 ); |
Manuel Pégourié-Gonnard | 20422e9 | 2014-06-05 13:41:44 +0200 | [diff] [blame] | 610 | |
Manuel Pégourié-Gonnard | d9e6a3a | 2015-05-14 19:41:36 +0200 | [diff] [blame] | 611 | TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 612 | rsa = mbedtls_pk_rsa( pk ); |
Manuel Pégourié-Gonnard | 20422e9 | 2014-06-05 13:41:44 +0200 | [diff] [blame] | 613 | |
| 614 | rsa->len = mod / 8; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 615 | TEST_ASSERT( mbedtls_mpi_read_string( &rsa->N, radix_N, input_N ) == 0 ); |
| 616 | TEST_ASSERT( mbedtls_mpi_read_string( &rsa->E, radix_E, input_E ) == 0 ); |
Manuel Pégourié-Gonnard | 20422e9 | 2014-06-05 13:41:44 +0200 | [diff] [blame] | 617 | |
Manuel Pégourié-Gonnard | 20422e9 | 2014-06-05 13:41:44 +0200 | [diff] [blame] | 618 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 619 | if( digest != MBEDTLS_MD_NONE ) |
Manuel Pégourié-Gonnard | 20422e9 | 2014-06-05 13:41:44 +0200 | [diff] [blame] | 620 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 621 | TEST_ASSERT( mbedtls_md( mbedtls_md_info_from_type( digest ), |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 622 | message_str->x, message_str->len, hash_result ) == 0 ); |
Manuel Pégourié-Gonnard | 20422e9 | 2014-06-05 13:41:44 +0200 | [diff] [blame] | 623 | hash_len = 0; |
| 624 | } |
| 625 | else |
| 626 | { |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 627 | memcpy( hash_result, message_str->x, message_str->len ); |
| 628 | hash_len = message_str->len; |
Manuel Pégourié-Gonnard | 20422e9 | 2014-06-05 13:41:44 +0200 | [diff] [blame] | 629 | } |
| 630 | |
| 631 | if( mgf1_hash_id < 0 ) |
| 632 | { |
| 633 | options = NULL; |
| 634 | } |
| 635 | else |
| 636 | { |
| 637 | options = &pss_opts; |
| 638 | |
| 639 | pss_opts.mgf1_hash_id = mgf1_hash_id; |
| 640 | pss_opts.expected_salt_len = salt_len; |
| 641 | } |
| 642 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 643 | TEST_ASSERT( mbedtls_pk_verify_ext( pk_type, options, &pk, |
Manuel Pégourié-Gonnard | 20422e9 | 2014-06-05 13:41:44 +0200 | [diff] [blame] | 644 | digest, hash_result, hash_len, |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 645 | result_str->x, mbedtls_pk_get_len( &pk ) ) == result ); |
Manuel Pégourié-Gonnard | 20422e9 | 2014-06-05 13:41:44 +0200 | [diff] [blame] | 646 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 647 | exit: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 648 | mbedtls_pk_free( &pk ); |
Manuel Pégourié-Gonnard | 20422e9 | 2014-06-05 13:41:44 +0200 | [diff] [blame] | 649 | } |
| 650 | /* END_CASE */ |
| 651 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 652 | /* BEGIN_CASE depends_on:MBEDTLS_ECDSA_C */ |
Azim Khan | 5fcca46 | 2018-06-29 11:05:32 +0100 | [diff] [blame] | 653 | void pk_ec_test_vec( int type, int id, data_t * key, data_t * hash, |
| 654 | data_t * sig, int ret ) |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 655 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 656 | mbedtls_pk_context pk; |
| 657 | mbedtls_ecp_keypair *eckey; |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 658 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 659 | mbedtls_pk_init( &pk ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 660 | |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 661 | |
Manuel Pégourié-Gonnard | d9e6a3a | 2015-05-14 19:41:36 +0200 | [diff] [blame] | 662 | TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( type ) ) == 0 ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 663 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 664 | TEST_ASSERT( mbedtls_pk_can_do( &pk, MBEDTLS_PK_ECDSA ) ); |
| 665 | eckey = mbedtls_pk_ec( pk ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 666 | |
Manuel Pégourié-Gonnard | e3a062b | 2015-05-11 18:46:47 +0200 | [diff] [blame] | 667 | TEST_ASSERT( mbedtls_ecp_group_load( &eckey->grp, id ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 668 | TEST_ASSERT( mbedtls_ecp_point_read_binary( &eckey->grp, &eckey->Q, |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 669 | key->x, key->len ) == 0 ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 670 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 671 | TEST_ASSERT( mbedtls_pk_verify( &pk, MBEDTLS_MD_NONE, |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 672 | hash->x, hash->len, sig->x, sig->len ) == ret ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 673 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 674 | exit: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 675 | mbedtls_pk_free( &pk ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 676 | } |
| 677 | /* END_CASE */ |
| 678 | |
Manuel Pégourié-Gonnard | c4ee9ac | 2017-05-08 10:09:36 +0200 | [diff] [blame] | 679 | /* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE:MBEDTLS_ECDSA_C:MBEDTLS_ECDSA_DETERMINISTIC */ |
| 680 | void pk_sign_verify_restart( int pk_type, int grp_id, char *d_str, |
| 681 | char *QX_str, char *QY_str, |
| 682 | int md_alg, char *msg, char *sig_str, |
| 683 | int max_ops, int min_restart, int max_restart ) |
| 684 | { |
| 685 | int ret, cnt_restart; |
Manuel Pégourié-Gonnard | 15d7df2 | 2017-08-17 14:33:31 +0200 | [diff] [blame] | 686 | mbedtls_pk_restart_ctx rs_ctx; |
Manuel Pégourié-Gonnard | c4ee9ac | 2017-05-08 10:09:36 +0200 | [diff] [blame] | 687 | mbedtls_pk_context prv, pub; |
| 688 | unsigned char hash[MBEDTLS_MD_MAX_SIZE]; |
| 689 | unsigned char sig[MBEDTLS_ECDSA_MAX_LEN]; |
| 690 | unsigned char sig_check[MBEDTLS_ECDSA_MAX_LEN]; |
| 691 | size_t hlen, slen, slen_check; |
| 692 | const mbedtls_md_info_t *md_info; |
| 693 | |
Manuel Pégourié-Gonnard | 15d7df2 | 2017-08-17 14:33:31 +0200 | [diff] [blame] | 694 | mbedtls_pk_restart_init( &rs_ctx ); |
Manuel Pégourié-Gonnard | c4ee9ac | 2017-05-08 10:09:36 +0200 | [diff] [blame] | 695 | mbedtls_pk_init( &prv ); |
| 696 | mbedtls_pk_init( &pub ); |
| 697 | memset( hash, 0, sizeof( hash ) ); |
| 698 | memset( sig, 0, sizeof( sig ) ); |
| 699 | memset( sig_check, 0, sizeof( sig_check ) ); |
| 700 | |
| 701 | TEST_ASSERT( mbedtls_pk_setup( &prv, mbedtls_pk_info_from_type( pk_type ) ) == 0 ); |
| 702 | TEST_ASSERT( mbedtls_ecp_group_load( &mbedtls_pk_ec( prv )->grp, grp_id ) == 0 ); |
| 703 | TEST_ASSERT( mbedtls_mpi_read_string( &mbedtls_pk_ec( prv )->d, 16, d_str ) == 0 ); |
| 704 | |
| 705 | TEST_ASSERT( mbedtls_pk_setup( &pub, mbedtls_pk_info_from_type( pk_type ) ) == 0 ); |
| 706 | TEST_ASSERT( mbedtls_ecp_group_load( &mbedtls_pk_ec( pub )->grp, grp_id ) == 0 ); |
| 707 | TEST_ASSERT( mbedtls_ecp_point_read_string( &mbedtls_pk_ec( pub )->Q, 16, QX_str, QY_str ) == 0 ); |
| 708 | |
| 709 | slen_check = unhexify( sig_check, sig_str ); |
| 710 | |
| 711 | md_info = mbedtls_md_info_from_type( md_alg ); |
| 712 | TEST_ASSERT( md_info != NULL ); |
| 713 | |
| 714 | hlen = mbedtls_md_get_size( md_info ); |
| 715 | mbedtls_md( md_info, (const unsigned char *) msg, strlen( msg ), hash ); |
| 716 | |
| 717 | mbedtls_ecp_set_max_ops( max_ops ); |
| 718 | |
| 719 | slen = sizeof( sig ); |
| 720 | cnt_restart = 0; |
| 721 | do { |
| 722 | ret = mbedtls_pk_sign_restartable( &prv, md_alg, hash, hlen, |
| 723 | sig, &slen, NULL, NULL, &rs_ctx ); |
| 724 | } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restart ); |
| 725 | |
| 726 | TEST_ASSERT( ret == 0 ); |
| 727 | TEST_ASSERT( slen == slen_check ); |
| 728 | TEST_ASSERT( memcmp( sig, sig_check, slen ) == 0 ); |
| 729 | |
| 730 | TEST_ASSERT( cnt_restart >= min_restart ); |
| 731 | TEST_ASSERT( cnt_restart <= max_restart ); |
| 732 | |
| 733 | cnt_restart = 0; |
| 734 | do { |
| 735 | ret = mbedtls_pk_verify_restartable( &pub, md_alg, |
| 736 | hash, hlen, sig, slen, &rs_ctx ); |
| 737 | } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restart ); |
| 738 | |
| 739 | TEST_ASSERT( ret == 0 ); |
| 740 | TEST_ASSERT( cnt_restart >= min_restart ); |
| 741 | TEST_ASSERT( cnt_restart <= max_restart ); |
| 742 | |
| 743 | hash[0]++; |
| 744 | do { |
| 745 | ret = mbedtls_pk_verify_restartable( &pub, md_alg, |
| 746 | hash, hlen, sig, slen, &rs_ctx ); |
| 747 | } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS ); |
| 748 | TEST_ASSERT( ret != 0 ); |
| 749 | hash[0]--; |
| 750 | |
| 751 | sig[0]++; |
| 752 | do { |
| 753 | ret = mbedtls_pk_verify_restartable( &pub, md_alg, |
| 754 | hash, hlen, sig, slen, &rs_ctx ); |
| 755 | } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS ); |
| 756 | TEST_ASSERT( ret != 0 ); |
| 757 | sig[0]--; |
| 758 | |
Manuel Pégourié-Gonnard | 46ba7f3 | 2017-08-28 12:20:39 +0200 | [diff] [blame] | 759 | /* Do we leak memory when aborting? try verify then sign |
| 760 | * This test only makes sense when we actually restart */ |
| 761 | if( min_restart > 0 ) |
| 762 | { |
| 763 | ret = mbedtls_pk_verify_restartable( &pub, md_alg, |
| 764 | hash, hlen, sig, slen, &rs_ctx ); |
| 765 | TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS ); |
| 766 | mbedtls_pk_restart_free( &rs_ctx ); |
Manuel Pégourié-Gonnard | c4ee9ac | 2017-05-08 10:09:36 +0200 | [diff] [blame] | 767 | |
Manuel Pégourié-Gonnard | 46ba7f3 | 2017-08-28 12:20:39 +0200 | [diff] [blame] | 768 | slen = sizeof( sig ); |
| 769 | ret = mbedtls_pk_sign_restartable( &prv, md_alg, hash, hlen, |
| 770 | sig, &slen, NULL, NULL, &rs_ctx ); |
| 771 | TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS ); |
| 772 | } |
Manuel Pégourié-Gonnard | c4ee9ac | 2017-05-08 10:09:36 +0200 | [diff] [blame] | 773 | |
| 774 | exit: |
Manuel Pégourié-Gonnard | 15d7df2 | 2017-08-17 14:33:31 +0200 | [diff] [blame] | 775 | mbedtls_pk_restart_free( &rs_ctx ); |
Manuel Pégourié-Gonnard | c4ee9ac | 2017-05-08 10:09:36 +0200 | [diff] [blame] | 776 | mbedtls_pk_free( &prv ); |
| 777 | mbedtls_pk_free( &pub ); |
| 778 | } |
| 779 | /* END_CASE */ |
| 780 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 781 | /* BEGIN_CASE depends_on:MBEDTLS_SHA256_C */ |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 782 | void pk_sign_verify( int type, int sign_ret, int verify_ret ) |
| 783 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 784 | mbedtls_pk_context pk; |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 785 | unsigned char hash[50], sig[5000]; |
| 786 | size_t sig_len; |
Manuel Pégourié-Gonnard | c4ee9ac | 2017-05-08 10:09:36 +0200 | [diff] [blame] | 787 | void *rs_ctx = NULL; |
| 788 | #if defined(MBEDTLS_ECDSA_C) && defined(MBEDTLS_ECP_RESTARTABLE) |
Manuel Pégourié-Gonnard | 15d7df2 | 2017-08-17 14:33:31 +0200 | [diff] [blame] | 789 | mbedtls_pk_restart_ctx ctx; |
Manuel Pégourié-Gonnard | c4ee9ac | 2017-05-08 10:09:36 +0200 | [diff] [blame] | 790 | |
| 791 | rs_ctx = &ctx; |
Manuel Pégourié-Gonnard | 15d7df2 | 2017-08-17 14:33:31 +0200 | [diff] [blame] | 792 | mbedtls_pk_restart_init( rs_ctx ); |
Manuel Pégourié-Gonnard | 4edb9cb | 2018-07-02 12:23:23 +0200 | [diff] [blame] | 793 | /* This value is large enough that the operation will complete in one run. |
| 794 | * See comments at the top of ecp_test_vect_restart in |
| 795 | * test_suite_ecp.function for estimates of operation counts. */ |
Manuel Pégourié-Gonnard | c4ee9ac | 2017-05-08 10:09:36 +0200 | [diff] [blame] | 796 | mbedtls_ecp_set_max_ops( 42000 ); |
| 797 | #endif |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 798 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 799 | mbedtls_pk_init( &pk ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 800 | |
| 801 | memset( hash, 0x2a, sizeof hash ); |
| 802 | memset( sig, 0, sizeof sig ); |
| 803 | |
Manuel Pégourié-Gonnard | d9e6a3a | 2015-05-14 19:41:36 +0200 | [diff] [blame] | 804 | TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( type ) ) == 0 ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 805 | TEST_ASSERT( pk_genkey( &pk ) == 0 ); |
| 806 | |
Manuel Pégourié-Gonnard | c4ee9ac | 2017-05-08 10:09:36 +0200 | [diff] [blame] | 807 | TEST_ASSERT( mbedtls_pk_sign_restartable( &pk, MBEDTLS_MD_SHA256, |
| 808 | hash, sizeof hash, sig, &sig_len, |
| 809 | rnd_std_rand, NULL, rs_ctx ) == sign_ret ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 810 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 811 | TEST_ASSERT( mbedtls_pk_verify( &pk, MBEDTLS_MD_SHA256, |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 812 | hash, sizeof hash, sig, sig_len ) == verify_ret ); |
| 813 | |
Manuel Pégourié-Gonnard | c4ee9ac | 2017-05-08 10:09:36 +0200 | [diff] [blame] | 814 | if( verify_ret == 0 ) |
| 815 | { |
| 816 | hash[0]++; |
| 817 | TEST_ASSERT( mbedtls_pk_verify( &pk, MBEDTLS_MD_SHA256, |
| 818 | hash, sizeof hash, sig, sig_len ) != 0 ); |
| 819 | hash[0]--; |
| 820 | |
| 821 | sig[0]++; |
| 822 | TEST_ASSERT( mbedtls_pk_verify( &pk, MBEDTLS_MD_SHA256, |
| 823 | hash, sizeof hash, sig, sig_len ) != 0 ); |
| 824 | sig[0]--; |
| 825 | } |
| 826 | |
| 827 | TEST_ASSERT( mbedtls_pk_sign( &pk, MBEDTLS_MD_SHA256, hash, sizeof hash, |
| 828 | sig, &sig_len, rnd_std_rand, NULL ) == sign_ret ); |
| 829 | |
| 830 | TEST_ASSERT( mbedtls_pk_verify_restartable( &pk, MBEDTLS_MD_SHA256, |
| 831 | hash, sizeof hash, sig, sig_len, rs_ctx ) == verify_ret ); |
| 832 | |
| 833 | if( verify_ret == 0 ) |
| 834 | { |
| 835 | hash[0]++; |
| 836 | TEST_ASSERT( mbedtls_pk_verify_restartable( &pk, MBEDTLS_MD_SHA256, |
| 837 | hash, sizeof hash, sig, sig_len, rs_ctx ) != 0 ); |
| 838 | hash[0]--; |
| 839 | |
| 840 | sig[0]++; |
| 841 | TEST_ASSERT( mbedtls_pk_verify_restartable( &pk, MBEDTLS_MD_SHA256, |
| 842 | hash, sizeof hash, sig, sig_len, rs_ctx ) != 0 ); |
| 843 | sig[0]--; |
| 844 | } |
| 845 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 846 | exit: |
Manuel Pégourié-Gonnard | c4ee9ac | 2017-05-08 10:09:36 +0200 | [diff] [blame] | 847 | #if defined(MBEDTLS_ECDSA_C) && defined(MBEDTLS_ECP_RESTARTABLE) |
Manuel Pégourié-Gonnard | 15d7df2 | 2017-08-17 14:33:31 +0200 | [diff] [blame] | 848 | mbedtls_pk_restart_free( rs_ctx ); |
Manuel Pégourié-Gonnard | c4ee9ac | 2017-05-08 10:09:36 +0200 | [diff] [blame] | 849 | #endif |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 850 | mbedtls_pk_free( &pk ); |
Manuel Pégourié-Gonnard | b0a467f | 2013-09-21 12:31:05 +0200 | [diff] [blame] | 851 | } |
| 852 | /* END_CASE */ |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 853 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 854 | /* BEGIN_CASE depends_on:MBEDTLS_RSA_C */ |
Azim Khan | 5fcca46 | 2018-06-29 11:05:32 +0100 | [diff] [blame] | 855 | void pk_rsa_encrypt_test_vec( data_t * message, int mod, int radix_N, |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 856 | char * input_N, int radix_E, char * input_E, |
Azim Khan | 5fcca46 | 2018-06-29 11:05:32 +0100 | [diff] [blame] | 857 | data_t * result, int ret ) |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 858 | { |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 859 | unsigned char output[1000]; |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 860 | rnd_pseudo_info rnd_info; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 861 | mbedtls_rsa_context *rsa; |
| 862 | mbedtls_pk_context pk; |
Azim Khan | f1aaec9 | 2017-05-30 14:23:15 +0100 | [diff] [blame] | 863 | size_t olen; |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 864 | |
| 865 | memset( &rnd_info, 0, sizeof( rnd_pseudo_info ) ); |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 866 | memset( output, 0, sizeof( output ) ); |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 867 | |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 868 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 869 | mbedtls_pk_init( &pk ); |
Manuel Pégourié-Gonnard | d9e6a3a | 2015-05-14 19:41:36 +0200 | [diff] [blame] | 870 | TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 871 | rsa = mbedtls_pk_rsa( pk ); |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 872 | |
| 873 | rsa->len = mod / 8; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 874 | TEST_ASSERT( mbedtls_mpi_read_string( &rsa->N, radix_N, input_N ) == 0 ); |
| 875 | TEST_ASSERT( mbedtls_mpi_read_string( &rsa->E, radix_E, input_E ) == 0 ); |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 876 | |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 877 | TEST_ASSERT( mbedtls_pk_encrypt( &pk, message->x, message->len, |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 878 | output, &olen, sizeof( output ), |
| 879 | rnd_pseudo_rand, &rnd_info ) == ret ); |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 880 | TEST_ASSERT( olen == result->len ); |
| 881 | TEST_ASSERT( memcmp( output, result->x, olen ) == 0 ); |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 882 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 883 | exit: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 884 | mbedtls_pk_free( &pk ); |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 885 | } |
| 886 | /* END_CASE */ |
| 887 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 888 | /* BEGIN_CASE depends_on:MBEDTLS_RSA_C */ |
Azim Khan | 5fcca46 | 2018-06-29 11:05:32 +0100 | [diff] [blame] | 889 | void pk_rsa_decrypt_test_vec( data_t * cipher, int mod, int radix_P, |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 890 | char * input_P, int radix_Q, char * input_Q, |
| 891 | int radix_N, char * input_N, int radix_E, |
Azim Khan | 5fcca46 | 2018-06-29 11:05:32 +0100 | [diff] [blame] | 892 | char * input_E, data_t * clear, int ret ) |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 893 | { |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 894 | unsigned char output[1000]; |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 895 | rnd_pseudo_info rnd_info; |
Hanno Becker | d71dc15 | 2017-08-23 06:32:42 +0100 | [diff] [blame] | 896 | mbedtls_mpi N, P, Q, E; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 897 | mbedtls_rsa_context *rsa; |
| 898 | mbedtls_pk_context pk; |
Azim Khan | f1aaec9 | 2017-05-30 14:23:15 +0100 | [diff] [blame] | 899 | size_t olen; |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 900 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 901 | mbedtls_pk_init( &pk ); |
Hanno Becker | d71dc15 | 2017-08-23 06:32:42 +0100 | [diff] [blame] | 902 | mbedtls_mpi_init( &N ); mbedtls_mpi_init( &P ); |
| 903 | mbedtls_mpi_init( &Q ); mbedtls_mpi_init( &E ); |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 904 | |
| 905 | memset( &rnd_info, 0, sizeof( rnd_pseudo_info ) ); |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 906 | |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 907 | |
| 908 | /* init pk-rsa context */ |
Manuel Pégourié-Gonnard | d9e6a3a | 2015-05-14 19:41:36 +0200 | [diff] [blame] | 909 | TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 910 | rsa = mbedtls_pk_rsa( pk ); |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 911 | |
| 912 | /* load public key */ |
Hanno Becker | d71dc15 | 2017-08-23 06:32:42 +0100 | [diff] [blame] | 913 | TEST_ASSERT( mbedtls_mpi_read_string( &N, radix_N, input_N ) == 0 ); |
| 914 | TEST_ASSERT( mbedtls_mpi_read_string( &E, radix_E, input_E ) == 0 ); |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 915 | |
| 916 | /* load private key */ |
Hanno Becker | d71dc15 | 2017-08-23 06:32:42 +0100 | [diff] [blame] | 917 | TEST_ASSERT( mbedtls_mpi_read_string( &P, radix_P, input_P ) == 0 ); |
| 918 | TEST_ASSERT( mbedtls_mpi_read_string( &Q, radix_Q, input_Q ) == 0 ); |
| 919 | TEST_ASSERT( mbedtls_rsa_import( rsa, &N, &P, &Q, NULL, &E ) == 0 ); |
| 920 | TEST_ASSERT( mbedtls_rsa_get_len( rsa ) == (size_t) ( mod / 8 ) ); |
Hanno Becker | 7f25f85 | 2017-10-10 16:56:22 +0100 | [diff] [blame] | 921 | TEST_ASSERT( mbedtls_rsa_complete( rsa ) == 0 ); |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 922 | |
| 923 | /* decryption test */ |
| 924 | memset( output, 0, sizeof( output ) ); |
| 925 | olen = 0; |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 926 | TEST_ASSERT( mbedtls_pk_decrypt( &pk, cipher->x, cipher->len, |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 927 | output, &olen, sizeof( output ), |
| 928 | rnd_pseudo_rand, &rnd_info ) == ret ); |
| 929 | if( ret == 0 ) |
| 930 | { |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 931 | TEST_ASSERT( olen == clear->len ); |
| 932 | TEST_ASSERT( memcmp( output, clear->x, olen ) == 0 ); |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 933 | } |
| 934 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 935 | exit: |
Hanno Becker | d71dc15 | 2017-08-23 06:32:42 +0100 | [diff] [blame] | 936 | mbedtls_mpi_free( &N ); mbedtls_mpi_free( &P ); |
| 937 | mbedtls_mpi_free( &Q ); mbedtls_mpi_free( &E ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 938 | mbedtls_pk_free( &pk ); |
Manuel Pégourié-Gonnard | 67d4583 | 2013-10-17 12:34:16 +0200 | [diff] [blame] | 939 | } |
| 940 | /* END_CASE */ |
Manuel Pégourié-Gonnard | 75c7882 | 2013-10-17 12:46:39 +0200 | [diff] [blame] | 941 | |
| 942 | /* BEGIN_CASE */ |
| 943 | void pk_ec_nocrypt( int type ) |
| 944 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 945 | mbedtls_pk_context pk; |
Manuel Pégourié-Gonnard | 75c7882 | 2013-10-17 12:46:39 +0200 | [diff] [blame] | 946 | unsigned char output[100]; |
| 947 | unsigned char input[100]; |
| 948 | rnd_pseudo_info rnd_info; |
| 949 | size_t olen = 0; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 950 | int ret = MBEDTLS_ERR_PK_TYPE_MISMATCH; |
Manuel Pégourié-Gonnard | 75c7882 | 2013-10-17 12:46:39 +0200 | [diff] [blame] | 951 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 952 | mbedtls_pk_init( &pk ); |
Manuel Pégourié-Gonnard | 75c7882 | 2013-10-17 12:46:39 +0200 | [diff] [blame] | 953 | |
| 954 | memset( &rnd_info, 0, sizeof( rnd_pseudo_info ) ); |
| 955 | memset( output, 0, sizeof( output ) ); |
| 956 | memset( input, 0, sizeof( input ) ); |
| 957 | |
Manuel Pégourié-Gonnard | d9e6a3a | 2015-05-14 19:41:36 +0200 | [diff] [blame] | 958 | TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( type ) ) == 0 ); |
Manuel Pégourié-Gonnard | 75c7882 | 2013-10-17 12:46:39 +0200 | [diff] [blame] | 959 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 960 | TEST_ASSERT( mbedtls_pk_encrypt( &pk, input, sizeof( input ), |
Manuel Pégourié-Gonnard | 75c7882 | 2013-10-17 12:46:39 +0200 | [diff] [blame] | 961 | output, &olen, sizeof( output ), |
| 962 | rnd_pseudo_rand, &rnd_info ) == ret ); |
| 963 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 964 | TEST_ASSERT( mbedtls_pk_decrypt( &pk, input, sizeof( input ), |
Manuel Pégourié-Gonnard | 75c7882 | 2013-10-17 12:46:39 +0200 | [diff] [blame] | 965 | output, &olen, sizeof( output ), |
| 966 | rnd_pseudo_rand, &rnd_info ) == ret ); |
| 967 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 968 | exit: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 969 | mbedtls_pk_free( &pk ); |
Manuel Pégourié-Gonnard | 75c7882 | 2013-10-17 12:46:39 +0200 | [diff] [blame] | 970 | } |
| 971 | /* END_CASE */ |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 972 | |
Andres Amaya Garcia | 7ea6727 | 2017-05-08 11:15:49 +0100 | [diff] [blame] | 973 | /* BEGIN_CASE depends_on:MBEDTLS_RSA_C */ |
Andres AG | 5c79d25 | 2017-02-15 10:52:32 +0000 | [diff] [blame] | 974 | void pk_rsa_overflow( ) |
| 975 | { |
| 976 | mbedtls_pk_context pk; |
itayzafrir | 693a1d9 | 2018-02-26 12:02:10 +0200 | [diff] [blame] | 977 | size_t hash_len = SIZE_MAX, sig_len = SIZE_MAX; |
| 978 | unsigned char hash[50], sig[100]; |
Andres Amaya Garcia | 7ea6727 | 2017-05-08 11:15:49 +0100 | [diff] [blame] | 979 | |
| 980 | if( SIZE_MAX <= UINT_MAX ) |
| 981 | return; |
Andres AG | 5c79d25 | 2017-02-15 10:52:32 +0000 | [diff] [blame] | 982 | |
itayzafrir | 693a1d9 | 2018-02-26 12:02:10 +0200 | [diff] [blame] | 983 | memset( hash, 0x2a, sizeof hash ); |
| 984 | memset( sig, 0, sizeof sig ); |
Andres AG | 5c79d25 | 2017-02-15 10:52:32 +0000 | [diff] [blame] | 985 | |
| 986 | mbedtls_pk_init( &pk ); |
| 987 | |
| 988 | TEST_ASSERT( mbedtls_pk_setup( &pk, |
| 989 | mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 ); |
| 990 | |
| 991 | #if defined(MBEDTLS_PKCS1_V21) |
| 992 | TEST_ASSERT( mbedtls_pk_verify_ext( MBEDTLS_PK_RSASSA_PSS, NULL, &pk, |
itayzafrir | 693a1d9 | 2018-02-26 12:02:10 +0200 | [diff] [blame] | 993 | MBEDTLS_MD_NONE, hash, hash_len, sig, sig_len ) == |
Andres AG | 5c79d25 | 2017-02-15 10:52:32 +0000 | [diff] [blame] | 994 | MBEDTLS_ERR_PK_BAD_INPUT_DATA ); |
| 995 | #endif /* MBEDTLS_PKCS1_V21 */ |
| 996 | |
itayzafrir | 693a1d9 | 2018-02-26 12:02:10 +0200 | [diff] [blame] | 997 | TEST_ASSERT( mbedtls_pk_verify( &pk, MBEDTLS_MD_NONE, hash, hash_len, |
| 998 | sig, sig_len ) == MBEDTLS_ERR_PK_BAD_INPUT_DATA ); |
Andres AG | 5c79d25 | 2017-02-15 10:52:32 +0000 | [diff] [blame] | 999 | |
itayzafrir | 693a1d9 | 2018-02-26 12:02:10 +0200 | [diff] [blame] | 1000 | TEST_ASSERT( mbedtls_pk_sign( &pk, MBEDTLS_MD_NONE, hash, hash_len, sig, &sig_len, |
Andres AG | 5c79d25 | 2017-02-15 10:52:32 +0000 | [diff] [blame] | 1001 | rnd_std_rand, NULL ) == MBEDTLS_ERR_PK_BAD_INPUT_DATA ); |
| 1002 | |
| 1003 | exit: |
| 1004 | mbedtls_pk_free( &pk ); |
| 1005 | } |
| 1006 | /* END_CASE */ |
| 1007 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1008 | /* BEGIN_CASE depends_on:MBEDTLS_RSA_C:MBEDTLS_PK_RSA_ALT_SUPPORT */ |
Azim Khan | f1aaec9 | 2017-05-30 14:23:15 +0100 | [diff] [blame] | 1009 | void pk_rsa_alt( ) |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 1010 | { |
| 1011 | /* |
| 1012 | * An rsa_alt context can only do private operations (decrypt, sign). |
| 1013 | * Test it against the public operations (encrypt, verify) of a |
| 1014 | * corresponding rsa context. |
| 1015 | */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1016 | mbedtls_rsa_context raw; |
| 1017 | mbedtls_pk_context rsa, alt; |
| 1018 | mbedtls_pk_debug_item dbg_items[10]; |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 1019 | unsigned char hash[50], sig[1000]; |
| 1020 | unsigned char msg[50], ciph[1000], test[1000]; |
| 1021 | size_t sig_len, ciph_len, test_len; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1022 | int ret = MBEDTLS_ERR_PK_TYPE_MISMATCH; |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 1023 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1024 | mbedtls_rsa_init( &raw, MBEDTLS_RSA_PKCS_V15, MBEDTLS_MD_NONE ); |
| 1025 | mbedtls_pk_init( &rsa ); mbedtls_pk_init( &alt ); |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 1026 | |
| 1027 | memset( hash, 0x2a, sizeof hash ); |
| 1028 | memset( sig, 0, sizeof sig ); |
| 1029 | memset( msg, 0x2a, sizeof msg ); |
| 1030 | memset( ciph, 0, sizeof ciph ); |
| 1031 | memset( test, 0, sizeof test ); |
| 1032 | |
| 1033 | /* Initiliaze PK RSA context with random key */ |
Manuel Pégourié-Gonnard | d9e6a3a | 2015-05-14 19:41:36 +0200 | [diff] [blame] | 1034 | TEST_ASSERT( mbedtls_pk_setup( &rsa, |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1035 | mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 ); |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 1036 | TEST_ASSERT( pk_genkey( &rsa ) == 0 ); |
| 1037 | |
| 1038 | /* Extract key to the raw rsa context */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1039 | TEST_ASSERT( mbedtls_rsa_copy( &raw, mbedtls_pk_rsa( rsa ) ) == 0 ); |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 1040 | |
| 1041 | /* Initialize PK RSA_ALT context */ |
Manuel Pégourié-Gonnard | d9e6a3a | 2015-05-14 19:41:36 +0200 | [diff] [blame] | 1042 | TEST_ASSERT( mbedtls_pk_setup_rsa_alt( &alt, (void *) &raw, |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1043 | mbedtls_rsa_decrypt_func, mbedtls_rsa_sign_func, mbedtls_rsa_key_len_func ) == 0 ); |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 1044 | |
| 1045 | /* Test administrative functions */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1046 | TEST_ASSERT( mbedtls_pk_can_do( &alt, MBEDTLS_PK_RSA ) ); |
Manuel Pégourié-Gonnard | 097c7bb | 2015-06-18 16:43:38 +0200 | [diff] [blame] | 1047 | TEST_ASSERT( mbedtls_pk_get_bitlen( &alt ) == RSA_KEY_SIZE ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1048 | TEST_ASSERT( mbedtls_pk_get_len( &alt ) == RSA_KEY_LEN ); |
| 1049 | TEST_ASSERT( mbedtls_pk_get_type( &alt ) == MBEDTLS_PK_RSA_ALT ); |
| 1050 | TEST_ASSERT( strcmp( mbedtls_pk_get_name( &alt ), "RSA-alt" ) == 0 ); |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 1051 | |
| 1052 | /* Test signature */ |
Andres Amaya Garcia | 7ea6727 | 2017-05-08 11:15:49 +0100 | [diff] [blame] | 1053 | #if SIZE_MAX > UINT_MAX |
| 1054 | TEST_ASSERT( mbedtls_pk_sign( &alt, MBEDTLS_MD_NONE, hash, SIZE_MAX, |
| 1055 | sig, &sig_len, rnd_std_rand, NULL ) == |
Andres AG | 5c79d25 | 2017-02-15 10:52:32 +0000 | [diff] [blame] | 1056 | MBEDTLS_ERR_PK_BAD_INPUT_DATA ); |
Andres Amaya Garcia | 7ea6727 | 2017-05-08 11:15:49 +0100 | [diff] [blame] | 1057 | #endif /* SIZE_MAX > UINT_MAX */ |
| 1058 | TEST_ASSERT( mbedtls_pk_sign( &alt, MBEDTLS_MD_NONE, hash, sizeof hash, |
| 1059 | sig, &sig_len, rnd_std_rand, NULL ) == 0 ); |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 1060 | TEST_ASSERT( sig_len == RSA_KEY_LEN ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1061 | TEST_ASSERT( mbedtls_pk_verify( &rsa, MBEDTLS_MD_NONE, |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 1062 | hash, sizeof hash, sig, sig_len ) == 0 ); |
| 1063 | |
| 1064 | /* Test decrypt */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1065 | TEST_ASSERT( mbedtls_pk_encrypt( &rsa, msg, sizeof msg, |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 1066 | ciph, &ciph_len, sizeof ciph, |
| 1067 | rnd_std_rand, NULL ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1068 | TEST_ASSERT( mbedtls_pk_decrypt( &alt, ciph, ciph_len, |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 1069 | test, &test_len, sizeof test, |
| 1070 | rnd_std_rand, NULL ) == 0 ); |
| 1071 | TEST_ASSERT( test_len == sizeof msg ); |
| 1072 | TEST_ASSERT( memcmp( test, msg, test_len ) == 0 ); |
| 1073 | |
| 1074 | /* Test forbidden operations */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1075 | TEST_ASSERT( mbedtls_pk_encrypt( &alt, msg, sizeof msg, |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 1076 | ciph, &ciph_len, sizeof ciph, |
| 1077 | rnd_std_rand, NULL ) == ret ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1078 | TEST_ASSERT( mbedtls_pk_verify( &alt, MBEDTLS_MD_NONE, |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 1079 | hash, sizeof hash, sig, sig_len ) == ret ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1080 | TEST_ASSERT( mbedtls_pk_debug( &alt, dbg_items ) == ret ); |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 1081 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 1082 | exit: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 1083 | mbedtls_rsa_free( &raw ); |
| 1084 | mbedtls_pk_free( &rsa ); mbedtls_pk_free( &alt ); |
Manuel Pégourié-Gonnard | 0148875 | 2014-04-03 22:09:18 +0200 | [diff] [blame] | 1085 | } |
| 1086 | /* END_CASE */ |