blob: 9005ddb313682509059116cea20a16bde07dedae [file] [log] [blame]
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/pk.h"
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +02003
Manuel Pégourié-Gonnard7c13d692014-11-12 00:01:34 +01004/* For error codes */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00005#include "mbedtls/ecp.h"
6#include "mbedtls/rsa.h"
Manuel Pégourié-Gonnard7c13d692014-11-12 00:01:34 +01007
Andres Amaya Garcia7ea67272017-05-08 11:15:49 +01008#include <limits.h>
Andres Amaya Garcia6ff067d2017-06-09 14:26:59 +01009#include <stdint.h>
Andres AG5c79d252017-02-15 10:52:32 +000010
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020011static int rnd_std_rand( void *rng_state, unsigned char *output, size_t len );
12
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020013#define RSA_KEY_SIZE 512
14#define RSA_KEY_LEN 64
15
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020016static int pk_genkey( mbedtls_pk_context *pk )
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020017{
Paul Bakkera5320902013-12-19 17:29:52 +010018 ((void) pk);
19
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020020#if defined(MBEDTLS_RSA_C) && defined(MBEDTLS_GENPRIME)
21 if( mbedtls_pk_get_type( pk ) == MBEDTLS_PK_RSA )
22 return mbedtls_rsa_gen_key( mbedtls_pk_rsa( *pk ), rnd_std_rand, NULL, RSA_KEY_SIZE, 3 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020023#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020024#if defined(MBEDTLS_ECP_C)
25 if( mbedtls_pk_get_type( pk ) == MBEDTLS_PK_ECKEY ||
26 mbedtls_pk_get_type( pk ) == MBEDTLS_PK_ECKEY_DH ||
27 mbedtls_pk_get_type( pk ) == MBEDTLS_PK_ECDSA )
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020028 {
29 int ret;
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +020030 if( ( ret = mbedtls_ecp_group_load( &mbedtls_pk_ec( *pk )->grp,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020031 MBEDTLS_ECP_DP_SECP192R1 ) ) != 0 )
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020032 return( ret );
33
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020034 return mbedtls_ecp_gen_keypair( &mbedtls_pk_ec( *pk )->grp, &mbedtls_pk_ec( *pk )->d,
35 &mbedtls_pk_ec( *pk )->Q, rnd_std_rand, NULL );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020036 }
37#endif
38 return( -1 );
39}
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020040
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020041#if defined(MBEDTLS_RSA_C)
42int mbedtls_rsa_decrypt_func( void *ctx, int mode, size_t *olen,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020043 const unsigned char *input, unsigned char *output,
44 size_t output_max_len )
45{
Hanno Becker6ac972d2017-09-07 10:57:48 +010046 return( mbedtls_rsa_pkcs1_decrypt( (mbedtls_rsa_context *) ctx,
47 rnd_std_rand, NULL, mode, olen,
48 input, output, output_max_len ) );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020049}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020050int mbedtls_rsa_sign_func( void *ctx,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020051 int (*f_rng)(void *, unsigned char *, size_t), void *p_rng,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020052 int mode, mbedtls_md_type_t md_alg, unsigned int hashlen,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020053 const unsigned char *hash, unsigned char *sig )
54{
Hanno Beckera5400682017-05-03 16:43:15 +010055 ((void) f_rng);
56 ((void) p_rng);
57 return( mbedtls_rsa_pkcs1_sign( (mbedtls_rsa_context *) ctx, rnd_std_rand, NULL, mode,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020058 md_alg, hashlen, hash, sig ) );
59}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020060size_t mbedtls_rsa_key_len_func( void *ctx )
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020061{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020062 return( ((const mbedtls_rsa_context *) ctx)->len );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020063}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020064#endif /* MBEDTLS_RSA_C */
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020065/* END_HEADER */
66
67/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020068 * depends_on:MBEDTLS_PK_C
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020069 * END_DEPENDENCIES
70 */
71
72/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +010073void pk_utils( int type, int size, int len, char * name )
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020074{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020075 mbedtls_pk_context pk;
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020076
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020077 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020078
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +020079 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( type ) ) == 0 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020080 TEST_ASSERT( pk_genkey( &pk ) == 0 );
81
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020082 TEST_ASSERT( (int) mbedtls_pk_get_type( &pk ) == type );
83 TEST_ASSERT( mbedtls_pk_can_do( &pk, type ) );
Manuel Pégourié-Gonnard097c7bb2015-06-18 16:43:38 +020084 TEST_ASSERT( mbedtls_pk_get_bitlen( &pk ) == (unsigned) size );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020085 TEST_ASSERT( mbedtls_pk_get_len( &pk ) == (unsigned) len );
86 TEST_ASSERT( strcmp( mbedtls_pk_get_name( &pk), name ) == 0 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020087
Paul Bakkerbd51b262014-07-10 15:26:12 +020088exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020089 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020090}
91/* END_CASE */
92
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020093/* BEGIN_CASE depends_on:MBEDTLS_PK_PARSE_C:MBEDTLS_FS_IO */
Azim Khanf1aaec92017-05-30 14:23:15 +010094void mbedtls_pk_check_pair( char * pub_file, char * prv_file, int ret )
Manuel Pégourié-Gonnard70bdadf2014-11-06 16:51:20 +010095{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020096 mbedtls_pk_context pub, prv, alt;
Manuel Pégourié-Gonnard70bdadf2014-11-06 16:51:20 +010097
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020098 mbedtls_pk_init( &pub );
99 mbedtls_pk_init( &prv );
100 mbedtls_pk_init( &alt );
Manuel Pégourié-Gonnard70bdadf2014-11-06 16:51:20 +0100101
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200102 TEST_ASSERT( mbedtls_pk_parse_public_keyfile( &pub, pub_file ) == 0 );
103 TEST_ASSERT( mbedtls_pk_parse_keyfile( &prv, prv_file, NULL ) == 0 );
Manuel Pégourié-Gonnard70bdadf2014-11-06 16:51:20 +0100104
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200105 TEST_ASSERT( mbedtls_pk_check_pair( &pub, &prv ) == ret );
Manuel Pégourié-Gonnard70bdadf2014-11-06 16:51:20 +0100106
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200107#if defined(MBEDTLS_RSA_C) && defined(MBEDTLS_PK_RSA_ALT_SUPPORT)
108 if( mbedtls_pk_get_type( &prv ) == MBEDTLS_PK_RSA )
Manuel Pégourié-Gonnarda1efcb02014-11-08 17:08:08 +0100109 {
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200110 TEST_ASSERT( mbedtls_pk_setup_rsa_alt( &alt, mbedtls_pk_rsa( prv ),
Hanno Becker6ac972d2017-09-07 10:57:48 +0100111 mbedtls_rsa_decrypt_func, mbedtls_rsa_sign_func,
112 mbedtls_rsa_key_len_func ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200113 TEST_ASSERT( mbedtls_pk_check_pair( &pub, &alt ) == ret );
Manuel Pégourié-Gonnarda1efcb02014-11-08 17:08:08 +0100114 }
Manuel Pégourié-Gonnard7c13d692014-11-12 00:01:34 +0100115#endif
Manuel Pégourié-Gonnarda1efcb02014-11-08 17:08:08 +0100116
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200117 mbedtls_pk_free( &pub );
118 mbedtls_pk_free( &prv );
119 mbedtls_pk_free( &alt );
Manuel Pégourié-Gonnard70bdadf2014-11-06 16:51:20 +0100120}
121/* END_CASE */
122
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200123/* BEGIN_CASE depends_on:MBEDTLS_RSA_C */
Azim Khan5fcca462018-06-29 11:05:32 +0100124void pk_rsa_verify_test_vec( data_t * message_str, int digest, int mod,
Azim Khand30ca132017-06-09 04:32:58 +0100125 int radix_N, char * input_N, int radix_E,
Azim Khan5fcca462018-06-29 11:05:32 +0100126 char * input_E, data_t * result_str,
Azim Khanf1aaec92017-05-30 14:23:15 +0100127 int result )
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200128{
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200129 unsigned char hash_result[1000];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200130 mbedtls_rsa_context *rsa;
131 mbedtls_pk_context pk;
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200132
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200133 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200134
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200135 memset( hash_result, 0x00, 1000 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200136
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200137 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200138 rsa = mbedtls_pk_rsa( pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200139
Paul Bakker42099c32014-01-27 11:45:49 +0100140 rsa->len = mod / 8;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200141 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->N, radix_N, input_N ) == 0 );
142 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->E, radix_E, input_E ) == 0 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200143
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200144
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200145 if( mbedtls_md_info_from_type( digest ) != NULL )
Azim Khand30ca132017-06-09 04:32:58 +0100146 TEST_ASSERT( mbedtls_md( mbedtls_md_info_from_type( digest ), message_str->x, message_str->len, hash_result ) == 0 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200147
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200148 TEST_ASSERT( mbedtls_pk_verify( &pk, digest, hash_result, 0,
Azim Khand30ca132017-06-09 04:32:58 +0100149 result_str->x, mbedtls_pk_get_len( &pk ) ) == result );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200150
Paul Bakkerbd51b262014-07-10 15:26:12 +0200151exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200152 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200153}
154/* END_CASE */
155
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200156/* BEGIN_CASE depends_on:MBEDTLS_RSA_C */
Azim Khan5fcca462018-06-29 11:05:32 +0100157void pk_rsa_verify_ext_test_vec( data_t * message_str, int digest,
Azim Khand30ca132017-06-09 04:32:58 +0100158 int mod, int radix_N, char * input_N,
159 int radix_E, char * input_E,
Azim Khan5fcca462018-06-29 11:05:32 +0100160 data_t * result_str, int pk_type,
Azim Khanf1aaec92017-05-30 14:23:15 +0100161 int mgf1_hash_id, int salt_len, int result )
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200162{
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200163 unsigned char hash_result[1000];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200164 mbedtls_rsa_context *rsa;
165 mbedtls_pk_context pk;
166 mbedtls_pk_rsassa_pss_options pss_opts;
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200167 void *options;
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200168 size_t hash_len;
169
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200170 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200171
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200172 memset( hash_result, 0x00, 1000 );
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200173
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200174 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200175 rsa = mbedtls_pk_rsa( pk );
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200176
177 rsa->len = mod / 8;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200178 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->N, radix_N, input_N ) == 0 );
179 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->E, radix_E, input_E ) == 0 );
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200180
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200181
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200182 if( digest != MBEDTLS_MD_NONE )
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200183 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200184 TEST_ASSERT( mbedtls_md( mbedtls_md_info_from_type( digest ),
Azim Khand30ca132017-06-09 04:32:58 +0100185 message_str->x, message_str->len, hash_result ) == 0 );
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200186 hash_len = 0;
187 }
188 else
189 {
Azim Khand30ca132017-06-09 04:32:58 +0100190 memcpy( hash_result, message_str->x, message_str->len );
191 hash_len = message_str->len;
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200192 }
193
194 if( mgf1_hash_id < 0 )
195 {
196 options = NULL;
197 }
198 else
199 {
200 options = &pss_opts;
201
202 pss_opts.mgf1_hash_id = mgf1_hash_id;
203 pss_opts.expected_salt_len = salt_len;
204 }
205
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200206 TEST_ASSERT( mbedtls_pk_verify_ext( pk_type, options, &pk,
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200207 digest, hash_result, hash_len,
Azim Khand30ca132017-06-09 04:32:58 +0100208 result_str->x, mbedtls_pk_get_len( &pk ) ) == result );
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200209
Paul Bakkerbd51b262014-07-10 15:26:12 +0200210exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200211 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200212}
213/* END_CASE */
214
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200215/* BEGIN_CASE depends_on:MBEDTLS_ECDSA_C */
Azim Khan5fcca462018-06-29 11:05:32 +0100216void pk_ec_test_vec( int type, int id, data_t * key, data_t * hash,
217 data_t * sig, int ret )
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200218{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200219 mbedtls_pk_context pk;
220 mbedtls_ecp_keypair *eckey;
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200221
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200222 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200223
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200224
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200225 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( type ) ) == 0 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200226
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200227 TEST_ASSERT( mbedtls_pk_can_do( &pk, MBEDTLS_PK_ECDSA ) );
228 eckey = mbedtls_pk_ec( pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200229
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200230 TEST_ASSERT( mbedtls_ecp_group_load( &eckey->grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200231 TEST_ASSERT( mbedtls_ecp_point_read_binary( &eckey->grp, &eckey->Q,
Azim Khand30ca132017-06-09 04:32:58 +0100232 key->x, key->len ) == 0 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200233
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200234 TEST_ASSERT( mbedtls_pk_verify( &pk, MBEDTLS_MD_NONE,
Azim Khand30ca132017-06-09 04:32:58 +0100235 hash->x, hash->len, sig->x, sig->len ) == ret );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200236
Paul Bakkerbd51b262014-07-10 15:26:12 +0200237exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200238 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200239}
240/* END_CASE */
241
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200242/* BEGIN_CASE depends_on:MBEDTLS_SHA256_C */
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200243void pk_sign_verify( int type, int sign_ret, int verify_ret )
244{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200245 mbedtls_pk_context pk;
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200246 unsigned char hash[50], sig[5000];
247 size_t sig_len;
248
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200249 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200250
251 memset( hash, 0x2a, sizeof hash );
252 memset( sig, 0, sizeof sig );
253
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200254 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( type ) ) == 0 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200255 TEST_ASSERT( pk_genkey( &pk ) == 0 );
256
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200257 TEST_ASSERT( mbedtls_pk_sign( &pk, MBEDTLS_MD_SHA256, hash, sizeof hash,
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200258 sig, &sig_len, rnd_std_rand, NULL ) == sign_ret );
259
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200260 TEST_ASSERT( mbedtls_pk_verify( &pk, MBEDTLS_MD_SHA256,
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200261 hash, sizeof hash, sig, sig_len ) == verify_ret );
262
Paul Bakkerbd51b262014-07-10 15:26:12 +0200263exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200264 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200265}
266/* END_CASE */
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200267
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200268/* BEGIN_CASE depends_on:MBEDTLS_RSA_C */
Azim Khan5fcca462018-06-29 11:05:32 +0100269void pk_rsa_encrypt_test_vec( data_t * message, int mod, int radix_N,
Azim Khand30ca132017-06-09 04:32:58 +0100270 char * input_N, int radix_E, char * input_E,
Azim Khan5fcca462018-06-29 11:05:32 +0100271 data_t * result, int ret )
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200272{
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200273 unsigned char output[1000];
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200274 rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200275 mbedtls_rsa_context *rsa;
276 mbedtls_pk_context pk;
Azim Khanf1aaec92017-05-30 14:23:15 +0100277 size_t olen;
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200278
279 memset( &rnd_info, 0, sizeof( rnd_pseudo_info ) );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200280 memset( output, 0, sizeof( output ) );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200281
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200282
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200283 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200284 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200285 rsa = mbedtls_pk_rsa( pk );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200286
287 rsa->len = mod / 8;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200288 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->N, radix_N, input_N ) == 0 );
289 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->E, radix_E, input_E ) == 0 );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200290
Azim Khand30ca132017-06-09 04:32:58 +0100291 TEST_ASSERT( mbedtls_pk_encrypt( &pk, message->x, message->len,
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200292 output, &olen, sizeof( output ),
293 rnd_pseudo_rand, &rnd_info ) == ret );
Azim Khand30ca132017-06-09 04:32:58 +0100294 TEST_ASSERT( olen == result->len );
295 TEST_ASSERT( memcmp( output, result->x, olen ) == 0 );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200296
Paul Bakkerbd51b262014-07-10 15:26:12 +0200297exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200298 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200299}
300/* END_CASE */
301
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200302/* BEGIN_CASE depends_on:MBEDTLS_RSA_C */
Azim Khan5fcca462018-06-29 11:05:32 +0100303void pk_rsa_decrypt_test_vec( data_t * cipher, int mod, int radix_P,
Azim Khand30ca132017-06-09 04:32:58 +0100304 char * input_P, int radix_Q, char * input_Q,
305 int radix_N, char * input_N, int radix_E,
Azim Khan5fcca462018-06-29 11:05:32 +0100306 char * input_E, data_t * clear, int ret )
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200307{
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200308 unsigned char output[1000];
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200309 rnd_pseudo_info rnd_info;
Hanno Beckerd71dc152017-08-23 06:32:42 +0100310 mbedtls_mpi N, P, Q, E;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200311 mbedtls_rsa_context *rsa;
312 mbedtls_pk_context pk;
Azim Khanf1aaec92017-05-30 14:23:15 +0100313 size_t olen;
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200314
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200315 mbedtls_pk_init( &pk );
Hanno Beckerd71dc152017-08-23 06:32:42 +0100316 mbedtls_mpi_init( &N ); mbedtls_mpi_init( &P );
317 mbedtls_mpi_init( &Q ); mbedtls_mpi_init( &E );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200318
319 memset( &rnd_info, 0, sizeof( rnd_pseudo_info ) );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200320
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200321
322 /* init pk-rsa context */
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200323 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200324 rsa = mbedtls_pk_rsa( pk );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200325
326 /* load public key */
Hanno Beckerd71dc152017-08-23 06:32:42 +0100327 TEST_ASSERT( mbedtls_mpi_read_string( &N, radix_N, input_N ) == 0 );
328 TEST_ASSERT( mbedtls_mpi_read_string( &E, radix_E, input_E ) == 0 );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200329
330 /* load private key */
Hanno Beckerd71dc152017-08-23 06:32:42 +0100331 TEST_ASSERT( mbedtls_mpi_read_string( &P, radix_P, input_P ) == 0 );
332 TEST_ASSERT( mbedtls_mpi_read_string( &Q, radix_Q, input_Q ) == 0 );
333 TEST_ASSERT( mbedtls_rsa_import( rsa, &N, &P, &Q, NULL, &E ) == 0 );
334 TEST_ASSERT( mbedtls_rsa_get_len( rsa ) == (size_t) ( mod / 8 ) );
Hanno Becker7f25f852017-10-10 16:56:22 +0100335 TEST_ASSERT( mbedtls_rsa_complete( rsa ) == 0 );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200336
337 /* decryption test */
338 memset( output, 0, sizeof( output ) );
339 olen = 0;
Azim Khand30ca132017-06-09 04:32:58 +0100340 TEST_ASSERT( mbedtls_pk_decrypt( &pk, cipher->x, cipher->len,
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200341 output, &olen, sizeof( output ),
342 rnd_pseudo_rand, &rnd_info ) == ret );
343 if( ret == 0 )
344 {
Azim Khand30ca132017-06-09 04:32:58 +0100345 TEST_ASSERT( olen == clear->len );
346 TEST_ASSERT( memcmp( output, clear->x, olen ) == 0 );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200347 }
348
Paul Bakkerbd51b262014-07-10 15:26:12 +0200349exit:
Hanno Beckerd71dc152017-08-23 06:32:42 +0100350 mbedtls_mpi_free( &N ); mbedtls_mpi_free( &P );
351 mbedtls_mpi_free( &Q ); mbedtls_mpi_free( &E );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200352 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200353}
354/* END_CASE */
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200355
356/* BEGIN_CASE */
357void pk_ec_nocrypt( int type )
358{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200359 mbedtls_pk_context pk;
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200360 unsigned char output[100];
361 unsigned char input[100];
362 rnd_pseudo_info rnd_info;
363 size_t olen = 0;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200364 int ret = MBEDTLS_ERR_PK_TYPE_MISMATCH;
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200365
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200366 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200367
368 memset( &rnd_info, 0, sizeof( rnd_pseudo_info ) );
369 memset( output, 0, sizeof( output ) );
370 memset( input, 0, sizeof( input ) );
371
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200372 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( type ) ) == 0 );
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200373
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200374 TEST_ASSERT( mbedtls_pk_encrypt( &pk, input, sizeof( input ),
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200375 output, &olen, sizeof( output ),
376 rnd_pseudo_rand, &rnd_info ) == ret );
377
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200378 TEST_ASSERT( mbedtls_pk_decrypt( &pk, input, sizeof( input ),
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200379 output, &olen, sizeof( output ),
380 rnd_pseudo_rand, &rnd_info ) == ret );
381
Paul Bakkerbd51b262014-07-10 15:26:12 +0200382exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200383 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200384}
385/* END_CASE */
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200386
Andres Amaya Garcia7ea67272017-05-08 11:15:49 +0100387/* BEGIN_CASE depends_on:MBEDTLS_RSA_C */
Andres AG5c79d252017-02-15 10:52:32 +0000388void pk_rsa_overflow( )
389{
390 mbedtls_pk_context pk;
itayzafrir693a1d92018-02-26 12:02:10 +0200391 size_t hash_len = SIZE_MAX, sig_len = SIZE_MAX;
392 unsigned char hash[50], sig[100];
Andres Amaya Garcia7ea67272017-05-08 11:15:49 +0100393
394 if( SIZE_MAX <= UINT_MAX )
395 return;
Andres AG5c79d252017-02-15 10:52:32 +0000396
itayzafrir693a1d92018-02-26 12:02:10 +0200397 memset( hash, 0x2a, sizeof hash );
398 memset( sig, 0, sizeof sig );
399
Andres AG5c79d252017-02-15 10:52:32 +0000400 mbedtls_pk_init( &pk );
401
402 TEST_ASSERT( mbedtls_pk_setup( &pk,
403 mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 );
404
405#if defined(MBEDTLS_PKCS1_V21)
406 TEST_ASSERT( mbedtls_pk_verify_ext( MBEDTLS_PK_RSASSA_PSS, NULL, &pk,
itayzafrir693a1d92018-02-26 12:02:10 +0200407 MBEDTLS_MD_NONE, hash, hash_len, sig, sig_len ) ==
Andres AG5c79d252017-02-15 10:52:32 +0000408 MBEDTLS_ERR_PK_BAD_INPUT_DATA );
409#endif /* MBEDTLS_PKCS1_V21 */
410
itayzafrir693a1d92018-02-26 12:02:10 +0200411 TEST_ASSERT( mbedtls_pk_verify( &pk, MBEDTLS_MD_NONE, hash, hash_len,
412 sig, sig_len ) == MBEDTLS_ERR_PK_BAD_INPUT_DATA );
Andres AG5c79d252017-02-15 10:52:32 +0000413
itayzafrir693a1d92018-02-26 12:02:10 +0200414 TEST_ASSERT( mbedtls_pk_sign( &pk, MBEDTLS_MD_NONE, hash, hash_len, sig, &sig_len,
Andres AG5c79d252017-02-15 10:52:32 +0000415 rnd_std_rand, NULL ) == MBEDTLS_ERR_PK_BAD_INPUT_DATA );
416
417exit:
418 mbedtls_pk_free( &pk );
419}
420/* END_CASE */
421
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200422/* BEGIN_CASE depends_on:MBEDTLS_RSA_C:MBEDTLS_PK_RSA_ALT_SUPPORT */
Azim Khanf1aaec92017-05-30 14:23:15 +0100423void pk_rsa_alt( )
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200424{
425 /*
426 * An rsa_alt context can only do private operations (decrypt, sign).
427 * Test it against the public operations (encrypt, verify) of a
428 * corresponding rsa context.
429 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200430 mbedtls_rsa_context raw;
431 mbedtls_pk_context rsa, alt;
432 mbedtls_pk_debug_item dbg_items[10];
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200433 unsigned char hash[50], sig[1000];
434 unsigned char msg[50], ciph[1000], test[1000];
435 size_t sig_len, ciph_len, test_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200436 int ret = MBEDTLS_ERR_PK_TYPE_MISMATCH;
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200437
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200438 mbedtls_rsa_init( &raw, MBEDTLS_RSA_PKCS_V15, MBEDTLS_MD_NONE );
439 mbedtls_pk_init( &rsa ); mbedtls_pk_init( &alt );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200440
441 memset( hash, 0x2a, sizeof hash );
442 memset( sig, 0, sizeof sig );
443 memset( msg, 0x2a, sizeof msg );
444 memset( ciph, 0, sizeof ciph );
445 memset( test, 0, sizeof test );
446
447 /* Initiliaze PK RSA context with random key */
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200448 TEST_ASSERT( mbedtls_pk_setup( &rsa,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200449 mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200450 TEST_ASSERT( pk_genkey( &rsa ) == 0 );
451
452 /* Extract key to the raw rsa context */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200453 TEST_ASSERT( mbedtls_rsa_copy( &raw, mbedtls_pk_rsa( rsa ) ) == 0 );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200454
455 /* Initialize PK RSA_ALT context */
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200456 TEST_ASSERT( mbedtls_pk_setup_rsa_alt( &alt, (void *) &raw,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200457 mbedtls_rsa_decrypt_func, mbedtls_rsa_sign_func, mbedtls_rsa_key_len_func ) == 0 );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200458
459 /* Test administrative functions */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200460 TEST_ASSERT( mbedtls_pk_can_do( &alt, MBEDTLS_PK_RSA ) );
Manuel Pégourié-Gonnard097c7bb2015-06-18 16:43:38 +0200461 TEST_ASSERT( mbedtls_pk_get_bitlen( &alt ) == RSA_KEY_SIZE );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200462 TEST_ASSERT( mbedtls_pk_get_len( &alt ) == RSA_KEY_LEN );
463 TEST_ASSERT( mbedtls_pk_get_type( &alt ) == MBEDTLS_PK_RSA_ALT );
464 TEST_ASSERT( strcmp( mbedtls_pk_get_name( &alt ), "RSA-alt" ) == 0 );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200465
466 /* Test signature */
Andres Amaya Garcia7ea67272017-05-08 11:15:49 +0100467#if SIZE_MAX > UINT_MAX
468 TEST_ASSERT( mbedtls_pk_sign( &alt, MBEDTLS_MD_NONE, hash, SIZE_MAX,
469 sig, &sig_len, rnd_std_rand, NULL ) ==
Andres AG5c79d252017-02-15 10:52:32 +0000470 MBEDTLS_ERR_PK_BAD_INPUT_DATA );
Andres Amaya Garcia7ea67272017-05-08 11:15:49 +0100471#endif /* SIZE_MAX > UINT_MAX */
472 TEST_ASSERT( mbedtls_pk_sign( &alt, MBEDTLS_MD_NONE, hash, sizeof hash,
473 sig, &sig_len, rnd_std_rand, NULL ) == 0 );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200474 TEST_ASSERT( sig_len == RSA_KEY_LEN );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200475 TEST_ASSERT( mbedtls_pk_verify( &rsa, MBEDTLS_MD_NONE,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200476 hash, sizeof hash, sig, sig_len ) == 0 );
477
478 /* Test decrypt */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200479 TEST_ASSERT( mbedtls_pk_encrypt( &rsa, msg, sizeof msg,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200480 ciph, &ciph_len, sizeof ciph,
481 rnd_std_rand, NULL ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200482 TEST_ASSERT( mbedtls_pk_decrypt( &alt, ciph, ciph_len,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200483 test, &test_len, sizeof test,
484 rnd_std_rand, NULL ) == 0 );
485 TEST_ASSERT( test_len == sizeof msg );
486 TEST_ASSERT( memcmp( test, msg, test_len ) == 0 );
487
488 /* Test forbidden operations */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200489 TEST_ASSERT( mbedtls_pk_encrypt( &alt, msg, sizeof msg,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200490 ciph, &ciph_len, sizeof ciph,
491 rnd_std_rand, NULL ) == ret );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200492 TEST_ASSERT( mbedtls_pk_verify( &alt, MBEDTLS_MD_NONE,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200493 hash, sizeof hash, sig, sig_len ) == ret );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200494 TEST_ASSERT( mbedtls_pk_debug( &alt, dbg_items ) == ret );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200495
Paul Bakkerbd51b262014-07-10 15:26:12 +0200496exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200497 mbedtls_rsa_free( &raw );
498 mbedtls_pk_free( &rsa ); mbedtls_pk_free( &alt );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200499}
500/* END_CASE */