blob: 53b97b252fd89e821adaa58c9f80ca72ac5583b5 [file] [log] [blame]
Paul Bakker9dcc3222011-03-08 14:16:06 +00001BEGIN_HEADER
Paul Bakker9dcc3222011-03-08 14:16:06 +00002#include <polarssl/rsa.h>
3#include <polarssl/md.h>
4#include <polarssl/md2.h>
5#include <polarssl/md4.h>
6#include <polarssl/md5.h>
7#include <polarssl/sha1.h>
8#include <polarssl/sha2.h>
9#include <polarssl/sha4.h>
10END_HEADER
11
12BEGIN_CASE
13pkcs1_rsaes_oaep_encrypt:mod:radix_N:input_N:radix_E:input_E:hash:message_hex_string:seed:result_hex_str:result
14{
15 unsigned char message_str[1000];
16 unsigned char output[1000];
17 unsigned char output_str[1000];
18 unsigned char rnd_buf[1000];
19 rsa_context ctx;
Paul Bakkerf4a3f302011-04-24 15:53:29 +000020 size_t msg_len;
Paul Bakker4cce2bb2011-03-13 16:56:35 +000021 rnd_buf_info info;
Paul Bakker9dcc3222011-03-08 14:16:06 +000022
23 info.length = unhexify( rnd_buf, {seed} );
24 info.buf = rnd_buf;
25 info.per_call = 1;
26
27 rsa_init( &ctx, RSA_PKCS_V21, {hash} );
28 memset( message_str, 0x00, 1000 );
29 memset( output, 0x00, 1000 );
30 memset( output_str, 0x00, 1000 );
31
32 ctx.len = {mod} / 8 + ( ( {mod} % 8 ) ? 1 : 0 );
33 TEST_ASSERT( mpi_read_string( &ctx.N, {radix_N}, {input_N} ) == 0 );
34 TEST_ASSERT( mpi_read_string( &ctx.E, {radix_E}, {input_E} ) == 0 );
35
36 TEST_ASSERT( rsa_check_pubkey( &ctx ) == 0 );
37
38 msg_len = unhexify( message_str, {message_hex_string} );
39
40 TEST_ASSERT( rsa_pkcs1_encrypt( &ctx, &rnd_buffer_rand, &info, RSA_PUBLIC, msg_len, message_str, output ) == {result} );
41 if( {result} == 0 )
42 {
43 hexify( output_str, output, ctx.len );
44
45 TEST_ASSERT( strcasecmp( (char *) output_str, {result_hex_str} ) == 0 );
46 }
47}
48END_CASE
49
50BEGIN_CASE
51pkcs1_rsaes_oaep_decrypt:mod:radix_P:input_P:radix_Q:input_Q:radix_N:input_N:radix_E:input_E:hash:result_hex_str:seed:message_hex_string:result
52{
53 unsigned char message_str[1000];
54 unsigned char output[1000];
55 unsigned char output_str[1000];
56 rsa_context ctx;
57 mpi P1, Q1, H, G;
Paul Bakkerf4a3f302011-04-24 15:53:29 +000058 size_t output_len;
59 size_t msg_len;
Paul Bakker9dcc3222011-03-08 14:16:06 +000060
Paul Bakker6c591fa2011-05-05 11:49:20 +000061 mpi_init( &P1 ); mpi_init( &Q1 ); mpi_init( &H ); mpi_init( &G );
Paul Bakker9dcc3222011-03-08 14:16:06 +000062 rsa_init( &ctx, RSA_PKCS_V21, {hash} );
63
64 memset( message_str, 0x00, 1000 );
65 memset( output, 0x00, 1000 );
66 memset( output_str, 0x00, 1000 );
67
68 ctx.len = {mod} / 8 + ( ( {mod} % 8 ) ? 1 : 0 );
69 TEST_ASSERT( mpi_read_string( &ctx.P, {radix_P}, {input_P} ) == 0 );
70 TEST_ASSERT( mpi_read_string( &ctx.Q, {radix_Q}, {input_Q} ) == 0 );
71 TEST_ASSERT( mpi_read_string( &ctx.N, {radix_N}, {input_N} ) == 0 );
72 TEST_ASSERT( mpi_read_string( &ctx.E, {radix_E}, {input_E} ) == 0 );
73
74 TEST_ASSERT( mpi_sub_int( &P1, &ctx.P, 1 ) == 0 );
75 TEST_ASSERT( mpi_sub_int( &Q1, &ctx.Q, 1 ) == 0 );
76 TEST_ASSERT( mpi_mul_mpi( &H, &P1, &Q1 ) == 0 );
77 TEST_ASSERT( mpi_gcd( &G, &ctx.E, &H ) == 0 );
78 TEST_ASSERT( mpi_inv_mod( &ctx.D , &ctx.E, &H ) == 0 );
79 TEST_ASSERT( mpi_mod_mpi( &ctx.DP, &ctx.D, &P1 ) == 0 );
80 TEST_ASSERT( mpi_mod_mpi( &ctx.DQ, &ctx.D, &Q1 ) == 0 );
81 TEST_ASSERT( mpi_inv_mod( &ctx.QP, &ctx.Q, &ctx.P ) == 0 );
82
83 TEST_ASSERT( rsa_check_privkey( &ctx ) == 0 );
84
85 msg_len = unhexify( message_str, {message_hex_string} );
86
87 TEST_ASSERT( rsa_pkcs1_decrypt( &ctx, RSA_PRIVATE, &output_len, message_str, output, 1000 ) == {result} );
88 if( {result} == 0 )
89 {
90 hexify( output_str, output, ctx.len );
91
92 TEST_ASSERT( strncasecmp( (char *) output_str, {result_hex_str}, strlen( {result_hex_str} ) ) == 0 );
93 }
Paul Bakker6c591fa2011-05-05 11:49:20 +000094
95 mpi_free( &P1 ); mpi_free( &Q1 ); mpi_free( &H ); mpi_free( &G );
Paul Bakker9dcc3222011-03-08 14:16:06 +000096}
97END_CASE
98
99BEGIN_CASE
100pkcs1_rsassa_pss_sign:mod:radix_P:input_P:radix_Q:input_Q:radix_N:input_N:radix_E:input_E:digest:hash:message_hex_string:salt:result_hex_str:result
101{
102 unsigned char message_str[1000];
103 unsigned char hash_result[1000];
104 unsigned char output[1000];
105 unsigned char output_str[1000];
106 unsigned char rnd_buf[1000];
107 rsa_context ctx;
108 mpi P1, Q1, H, G;
Paul Bakkerf4a3f302011-04-24 15:53:29 +0000109 size_t msg_len;
Paul Bakker4cce2bb2011-03-13 16:56:35 +0000110 rnd_buf_info info;
Paul Bakker9dcc3222011-03-08 14:16:06 +0000111
112 info.length = unhexify( rnd_buf, {salt} );
113 info.buf = rnd_buf;
114 info.per_call = 1;
115
Paul Bakker6c591fa2011-05-05 11:49:20 +0000116 mpi_init( &P1 ); mpi_init( &Q1 ); mpi_init( &H ); mpi_init( &G );
Paul Bakker9dcc3222011-03-08 14:16:06 +0000117 rsa_init( &ctx, RSA_PKCS_V21, {hash} );
118
119 memset( message_str, 0x00, 1000 );
120 memset( hash_result, 0x00, 1000 );
121 memset( output, 0x00, 1000 );
122 memset( output_str, 0x00, 1000 );
123
124 ctx.len = {mod} / 8 + ( ( {mod} % 8 ) ? 1 : 0 );
125 TEST_ASSERT( mpi_read_string( &ctx.P, {radix_P}, {input_P} ) == 0 );
126 TEST_ASSERT( mpi_read_string( &ctx.Q, {radix_Q}, {input_Q} ) == 0 );
127 TEST_ASSERT( mpi_read_string( &ctx.N, {radix_N}, {input_N} ) == 0 );
128 TEST_ASSERT( mpi_read_string( &ctx.E, {radix_E}, {input_E} ) == 0 );
129
130 TEST_ASSERT( mpi_sub_int( &P1, &ctx.P, 1 ) == 0 );
131 TEST_ASSERT( mpi_sub_int( &Q1, &ctx.Q, 1 ) == 0 );
132 TEST_ASSERT( mpi_mul_mpi( &H, &P1, &Q1 ) == 0 );
133 TEST_ASSERT( mpi_gcd( &G, &ctx.E, &H ) == 0 );
134 TEST_ASSERT( mpi_inv_mod( &ctx.D , &ctx.E, &H ) == 0 );
135 TEST_ASSERT( mpi_mod_mpi( &ctx.DP, &ctx.D, &P1 ) == 0 );
136 TEST_ASSERT( mpi_mod_mpi( &ctx.DQ, &ctx.D, &Q1 ) == 0 );
137 TEST_ASSERT( mpi_inv_mod( &ctx.QP, &ctx.Q, &ctx.P ) == 0 );
138
139 TEST_ASSERT( rsa_check_privkey( &ctx ) == 0 );
140
141 msg_len = unhexify( message_str, {message_hex_string} );
142
143 switch( {digest} )
144 {
145#ifdef POLARSSL_MD2_C
146 case SIG_RSA_MD2:
147 md2( message_str, msg_len, hash_result );
148 break;
149#endif
150#ifdef POLARSSL_MD4_C
151 case SIG_RSA_MD4:
152 md4( message_str, msg_len, hash_result );
153 break;
154#endif
155#ifdef POLARSSL_MD5_C
156 case SIG_RSA_MD5:
157 md5( message_str, msg_len, hash_result );
158 break;
159#endif
160#ifdef POLARSSL_SHA1_C
161 case SIG_RSA_SHA1:
162 sha1( message_str, msg_len, hash_result );
163 break;
164#endif
165#ifdef POLARSSL_SHA2_C
166 case SIG_RSA_SHA224:
167 sha2( message_str, msg_len, hash_result, 1 );
168 break;
169 case SIG_RSA_SHA256:
170 sha2( message_str, msg_len, hash_result, 0 );
171 break;
172#endif
173#ifdef POLARSSL_SHA4_C
174 case SIG_RSA_SHA384:
175 sha4( message_str, msg_len, hash_result, 1 );
176 break;
177 case SIG_RSA_SHA512:
178 sha4( message_str, msg_len, hash_result, 0 );
179 break;
180#endif
181 }
182
183 TEST_ASSERT( rsa_pkcs1_sign( &ctx, &rnd_buffer_rand, &info, RSA_PRIVATE, {digest}, 0, hash_result, output ) == {result} );
184 if( {result} == 0 )
185 {
186 hexify( output_str, output, ctx.len);
187
188 TEST_ASSERT( strcasecmp( (char *) output_str, {result_hex_str} ) == 0 );
189 }
Paul Bakker6c591fa2011-05-05 11:49:20 +0000190
191 mpi_free( &P1 ); mpi_free( &Q1 ); mpi_free( &H ); mpi_free( &G );
Paul Bakker9dcc3222011-03-08 14:16:06 +0000192}
193END_CASE
194
195BEGIN_CASE
196pkcs1_rsassa_pss_verify:mod:radix_N:input_N:radix_E:input_E:digest:hash:message_hex_string:salt:result_hex_str:result
197{
198 unsigned char message_str[1000];
199 unsigned char hash_result[1000];
200 unsigned char result_str[1000];
201 rsa_context ctx;
Paul Bakkerf4a3f302011-04-24 15:53:29 +0000202 size_t msg_len;
Paul Bakker9dcc3222011-03-08 14:16:06 +0000203
204 rsa_init( &ctx, RSA_PKCS_V21, {hash} );
205 memset( message_str, 0x00, 1000 );
206 memset( hash_result, 0x00, 1000 );
207 memset( result_str, 0x00, 1000 );
208
209 ctx.len = {mod} / 8 + ( ( {mod} % 8 ) ? 1 : 0 );
210 TEST_ASSERT( mpi_read_string( &ctx.N, {radix_N}, {input_N} ) == 0 );
211 TEST_ASSERT( mpi_read_string( &ctx.E, {radix_E}, {input_E} ) == 0 );
212
213 TEST_ASSERT( rsa_check_pubkey( &ctx ) == 0 );
214
215 msg_len = unhexify( message_str, {message_hex_string} );
216 unhexify( result_str, {result_hex_str} );
217
218 switch( {digest} )
219 {
220#ifdef POLARSSL_MD2_C
221 case SIG_RSA_MD2:
222 md2( message_str, msg_len, hash_result );
223 break;
224#endif
225#ifdef POLARSSL_MD4_C
226 case SIG_RSA_MD4:
227 md4( message_str, msg_len, hash_result );
228 break;
229#endif
230#ifdef POLARSSL_MD5_C
231 case SIG_RSA_MD5:
232 md5( message_str, msg_len, hash_result );
233 break;
234#endif
235#ifdef POLARSSL_SHA1_C
236 case SIG_RSA_SHA1:
237 sha1( message_str, msg_len, hash_result );
238 break;
239#endif
240#ifdef POLARSSL_SHA2_C
241 case SIG_RSA_SHA224:
242 sha2( message_str, msg_len, hash_result, 1 );
243 break;
244 case SIG_RSA_SHA256:
245 sha2( message_str, msg_len, hash_result, 0 );
246 break;
247#endif
248#ifdef POLARSSL_SHA4_C
249 case SIG_RSA_SHA384:
250 sha4( message_str, msg_len, hash_result, 1 );
251 break;
252 case SIG_RSA_SHA512:
253 sha4( message_str, msg_len, hash_result, 0 );
254 break;
255#endif
256 }
257
258 TEST_ASSERT( rsa_pkcs1_verify( &ctx, RSA_PUBLIC, {digest}, 0, hash_result, result_str ) == {result} );
259}
260END_CASE