Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 1 | /* BEGIN_HEADER */ |
Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 2 | #include "mbedtls/rsa.h" |
| 3 | #include "mbedtls/md.h" |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 4 | /* END_HEADER */ |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 5 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 6 | /* BEGIN_DEPENDENCIES |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 7 | * depends_on:MBEDTLS_PKCS1_V21:MBEDTLS_RSA_C:MBEDTLS_SHA1_C |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 8 | * END_DEPENDENCIES |
| 9 | */ |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 10 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 11 | /* BEGIN_CASE */ |
Cédric Meuter | bc13cd9 | 2020-12-28 14:39:33 +0100 | [diff] [blame] | 12 | void pkcs1_rsaes_oaep_encrypt( int mod, data_t * input_N, data_t * input_E, |
| 13 | int hash, data_t * message_str, data_t * rnd_buf, |
Ronald Cron | ac6ae35 | 2020-06-26 14:33:03 +0200 | [diff] [blame] | 14 | data_t * result_str, int result ) |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 15 | { |
Ron Eldor | 5b8f120 | 2018-11-22 15:49:49 +0200 | [diff] [blame] | 16 | unsigned char output[256]; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 17 | mbedtls_rsa_context ctx; |
Ronald Cron | 351f0ee | 2020-06-10 12:12:18 +0200 | [diff] [blame] | 18 | mbedtls_test_rnd_buf_info info; |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 19 | mbedtls_mpi N, E; |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 20 | |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 21 | info.buf = rnd_buf->x; |
| 22 | info.length = rnd_buf->len; |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 23 | |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 24 | mbedtls_mpi_init( &N ); mbedtls_mpi_init( &E ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 25 | mbedtls_rsa_init( &ctx, MBEDTLS_RSA_PKCS_V21, hash ); |
Ron Eldor | 5b8f120 | 2018-11-22 15:49:49 +0200 | [diff] [blame] | 26 | memset( output, 0x00, sizeof( output ) ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 27 | |
Cédric Meuter | bc13cd9 | 2020-12-28 14:39:33 +0100 | [diff] [blame] | 28 | TEST_ASSERT( mbedtls_mpi_read_binary( &N, input_N->x, input_N->len ) == 0 ); |
| 29 | TEST_ASSERT( mbedtls_mpi_read_binary( &E, input_E->x, input_E->len ) == 0 ); |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 30 | TEST_ASSERT( mbedtls_rsa_import( &ctx, &N, NULL, NULL, NULL, &E ) == 0 ); |
| 31 | TEST_ASSERT( mbedtls_rsa_get_len( &ctx ) == (size_t) ( ( mod + 7 ) / 8 ) ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 32 | TEST_ASSERT( mbedtls_rsa_check_pubkey( &ctx ) == 0 ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 33 | |
Gilles Peskine | 85a6dd4 | 2018-10-15 16:32:42 +0200 | [diff] [blame] | 34 | if( message_str->len == 0 ) |
| 35 | message_str->x = NULL; |
Ronald Cron | 6c5bd7f | 2020-06-10 14:08:26 +0200 | [diff] [blame] | 36 | TEST_ASSERT( mbedtls_rsa_pkcs1_encrypt( &ctx, |
| 37 | &mbedtls_test_rnd_buffer_rand, |
| 38 | &info, MBEDTLS_RSA_PUBLIC, |
| 39 | message_str->len, message_str->x, |
| 40 | output ) == result ); |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 41 | if( result == 0 ) |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 42 | { |
Cédric Meuter | 6882b46 | 2021-01-10 11:31:12 +0100 | [diff] [blame] | 43 | ASSERT_COMPARE( output, ctx.len, result_str->x, result_str->len ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 44 | } |
Paul Bakker | 58ef6ec | 2013-01-03 11:33:48 +0100 | [diff] [blame] | 45 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 46 | exit: |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 47 | mbedtls_mpi_free( &N ); mbedtls_mpi_free( &E ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 48 | mbedtls_rsa_free( &ctx ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 49 | } |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 50 | /* END_CASE */ |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 51 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 52 | /* BEGIN_CASE */ |
Cédric Meuter | bc13cd9 | 2020-12-28 14:39:33 +0100 | [diff] [blame] | 53 | void pkcs1_rsaes_oaep_decrypt( int mod, data_t * input_P, data_t * input_Q, |
| 54 | data_t * input_N, data_t * input_E, int hash, |
| 55 | data_t * result_str, char * seed, data_t * message_str, |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 56 | int result ) |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 57 | { |
Ron Eldor | 5b8f120 | 2018-11-22 15:49:49 +0200 | [diff] [blame] | 58 | unsigned char output[64]; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 59 | mbedtls_rsa_context ctx; |
Paul Bakker | f4a3f30 | 2011-04-24 15:53:29 +0000 | [diff] [blame] | 60 | size_t output_len; |
Ronald Cron | 351f0ee | 2020-06-10 12:12:18 +0200 | [diff] [blame] | 61 | mbedtls_test_rnd_pseudo_info rnd_info; |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 62 | mbedtls_mpi N, P, Q, E; |
Paul Bakker | dbd443d | 2013-08-16 13:38:47 +0200 | [diff] [blame] | 63 | ((void) seed); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 64 | |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 65 | mbedtls_mpi_init( &N ); mbedtls_mpi_init( &P ); |
| 66 | mbedtls_mpi_init( &Q ); mbedtls_mpi_init( &E ); |
| 67 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 68 | mbedtls_rsa_init( &ctx, MBEDTLS_RSA_PKCS_V21, hash ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 69 | |
Ron Eldor | 5b8f120 | 2018-11-22 15:49:49 +0200 | [diff] [blame] | 70 | memset( output, 0x00, sizeof( output ) ); |
Ronald Cron | 351f0ee | 2020-06-10 12:12:18 +0200 | [diff] [blame] | 71 | memset( &rnd_info, 0, sizeof( mbedtls_test_rnd_pseudo_info ) ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 72 | |
Cédric Meuter | bc13cd9 | 2020-12-28 14:39:33 +0100 | [diff] [blame] | 73 | TEST_ASSERT( mbedtls_mpi_read_binary( &P, input_P->x, input_P->len ) == 0 ); |
| 74 | TEST_ASSERT( mbedtls_mpi_read_binary( &Q, input_Q->x, input_Q->len ) == 0 ); |
| 75 | TEST_ASSERT( mbedtls_mpi_read_binary( &N, input_N->x, input_N->len ) == 0 ); |
| 76 | TEST_ASSERT( mbedtls_mpi_read_binary( &E, input_E->x, input_E->len ) == 0 ); |
Paul Bakker | 548957d | 2013-08-30 10:30:02 +0200 | [diff] [blame] | 77 | |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 78 | TEST_ASSERT( mbedtls_rsa_import( &ctx, &N, &P, &Q, NULL, &E ) == 0 ); |
| 79 | TEST_ASSERT( mbedtls_rsa_get_len( &ctx ) == (size_t) ( ( mod + 7 ) / 8 ) ); |
Hanno Becker | 7f25f85 | 2017-10-10 16:56:22 +0100 | [diff] [blame] | 80 | TEST_ASSERT( mbedtls_rsa_complete( &ctx ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 81 | TEST_ASSERT( mbedtls_rsa_check_privkey( &ctx ) == 0 ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 82 | |
Ronald Cron | ac6ae35 | 2020-06-26 14:33:03 +0200 | [diff] [blame] | 83 | if( result_str->len == 0 ) |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 84 | { |
Ronald Cron | 6c5bd7f | 2020-06-10 14:08:26 +0200 | [diff] [blame] | 85 | TEST_ASSERT( mbedtls_rsa_pkcs1_decrypt( &ctx, |
| 86 | &mbedtls_test_rnd_pseudo_rand, |
| 87 | &rnd_info, |
| 88 | MBEDTLS_RSA_PRIVATE, |
| 89 | &output_len, message_str->x, |
| 90 | NULL, 0 ) == result ); |
Gilles Peskine | 85a6dd4 | 2018-10-15 16:32:42 +0200 | [diff] [blame] | 91 | } |
| 92 | else |
| 93 | { |
Ronald Cron | 6c5bd7f | 2020-06-10 14:08:26 +0200 | [diff] [blame] | 94 | TEST_ASSERT( mbedtls_rsa_pkcs1_decrypt( &ctx, |
| 95 | &mbedtls_test_rnd_pseudo_rand, |
| 96 | &rnd_info, |
| 97 | MBEDTLS_RSA_PRIVATE, |
| 98 | &output_len, message_str->x, |
| 99 | output, |
Ron Eldor | 5b8f120 | 2018-11-22 15:49:49 +0200 | [diff] [blame] | 100 | sizeof( output ) ) == result ); |
Gilles Peskine | 85a6dd4 | 2018-10-15 16:32:42 +0200 | [diff] [blame] | 101 | if( result == 0 ) |
| 102 | { |
Cédric Meuter | 6882b46 | 2021-01-10 11:31:12 +0100 | [diff] [blame] | 103 | ASSERT_COMPARE( output, output_len, result_str->x, result_str->len ); |
Gilles Peskine | 85a6dd4 | 2018-10-15 16:32:42 +0200 | [diff] [blame] | 104 | } |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 105 | } |
Paul Bakker | 6c591fa | 2011-05-05 11:49:20 +0000 | [diff] [blame] | 106 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 107 | exit: |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 108 | mbedtls_mpi_free( &N ); mbedtls_mpi_free( &P ); |
| 109 | mbedtls_mpi_free( &Q ); mbedtls_mpi_free( &E ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 110 | mbedtls_rsa_free( &ctx ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 111 | } |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 112 | /* END_CASE */ |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 113 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 114 | /* BEGIN_CASE */ |
Cédric Meuter | bc13cd9 | 2020-12-28 14:39:33 +0100 | [diff] [blame] | 115 | void pkcs1_rsassa_pss_sign( int mod, data_t * input_P, data_t * input_Q, |
| 116 | data_t * input_N, data_t * input_E, int digest, |
| 117 | int hash, data_t * message_str, data_t * rnd_buf, |
Cédric Meuter | 61adfd6 | 2021-01-10 11:52:39 +0100 | [diff] [blame^] | 118 | data_t * result_str, int fixed_salt_length, |
| 119 | int result ) |
Cédric Meuter | 668a78d | 2020-04-30 11:57:04 +0200 | [diff] [blame] | 120 | { |
| 121 | unsigned char hash_result[MBEDTLS_MD_MAX_SIZE]; |
| 122 | unsigned char output[512]; |
| 123 | mbedtls_rsa_context ctx; |
| 124 | mbedtls_test_rnd_buf_info info; |
| 125 | mbedtls_mpi N, P, Q, E; |
| 126 | |
| 127 | info.buf = rnd_buf->x; |
| 128 | info.length = rnd_buf->len; |
| 129 | |
| 130 | mbedtls_mpi_init( &N ); mbedtls_mpi_init( &P ); |
| 131 | mbedtls_mpi_init( &Q ); mbedtls_mpi_init( &E ); |
| 132 | mbedtls_rsa_init( &ctx, MBEDTLS_RSA_PKCS_V21, hash ); |
| 133 | |
| 134 | memset( hash_result, 0x00, sizeof( hash_result ) ); |
| 135 | memset( output, 0x00, sizeof( output ) ); |
| 136 | |
Cédric Meuter | bc13cd9 | 2020-12-28 14:39:33 +0100 | [diff] [blame] | 137 | TEST_ASSERT( mbedtls_mpi_read_binary( &P, input_P->x, input_P->len ) == 0 ); |
| 138 | TEST_ASSERT( mbedtls_mpi_read_binary( &Q, input_Q->x, input_Q->len ) == 0 ); |
| 139 | TEST_ASSERT( mbedtls_mpi_read_binary( &N, input_N->x, input_N->len ) == 0 ); |
| 140 | TEST_ASSERT( mbedtls_mpi_read_binary( &E, input_E->x, input_E->len ) == 0 ); |
Cédric Meuter | 668a78d | 2020-04-30 11:57:04 +0200 | [diff] [blame] | 141 | |
| 142 | TEST_ASSERT( mbedtls_rsa_import( &ctx, &N, &P, &Q, NULL, &E ) == 0 ); |
| 143 | TEST_ASSERT( mbedtls_rsa_get_len( &ctx ) == (size_t) ( ( mod + 7 ) / 8 ) ); |
| 144 | TEST_ASSERT( mbedtls_rsa_complete( &ctx ) == 0 ); |
| 145 | TEST_ASSERT( mbedtls_rsa_check_privkey( &ctx ) == 0 ); |
| 146 | |
Cédric Meuter | 668a78d | 2020-04-30 11:57:04 +0200 | [diff] [blame] | 147 | if( mbedtls_md_info_from_type( digest ) != NULL ) |
| 148 | TEST_ASSERT( mbedtls_md( mbedtls_md_info_from_type( digest ), message_str->x, message_str->len, hash_result ) == 0 ); |
| 149 | |
Cédric Meuter | 61adfd6 | 2021-01-10 11:52:39 +0100 | [diff] [blame^] | 150 | if (fixed_salt_length == MBEDTLS_RSA_SALT_LEN_ANY) |
| 151 | { |
| 152 | TEST_ASSERT( mbedtls_rsa_pkcs1_sign( &ctx, &mbedtls_test_rnd_buffer_rand, |
| 153 | &info, MBEDTLS_RSA_PRIVATE, digest, 0, |
| 154 | hash_result, output ) == result ); |
| 155 | if( result == 0 ) |
| 156 | { |
| 157 | ASSERT_COMPARE( output, ctx.len, result_str->x, result_str->len ); |
| 158 | } |
| 159 | |
| 160 | info.buf = rnd_buf->x; |
| 161 | info.length = rnd_buf->len; |
| 162 | } |
| 163 | |
| 164 | TEST_ASSERT( mbedtls_rsa_rsassa_pss_sign_ext( &ctx, &mbedtls_test_rnd_buffer_rand, |
| 165 | &info, digest, 0, hash_result, |
| 166 | fixed_salt_length, output ) == result ); |
Cédric Meuter | 668a78d | 2020-04-30 11:57:04 +0200 | [diff] [blame] | 167 | if( result == 0 ) |
| 168 | { |
Cédric Meuter | 6882b46 | 2021-01-10 11:31:12 +0100 | [diff] [blame] | 169 | ASSERT_COMPARE( output, ctx.len, result_str->x, result_str->len ); |
Cédric Meuter | 668a78d | 2020-04-30 11:57:04 +0200 | [diff] [blame] | 170 | } |
Cédric Meuter | 61adfd6 | 2021-01-10 11:52:39 +0100 | [diff] [blame^] | 171 | |
Cédric Meuter | 668a78d | 2020-04-30 11:57:04 +0200 | [diff] [blame] | 172 | |
| 173 | exit: |
| 174 | mbedtls_mpi_free( &N ); mbedtls_mpi_free( &P ); |
| 175 | mbedtls_mpi_free( &Q ); mbedtls_mpi_free( &E ); |
| 176 | mbedtls_rsa_free( &ctx ); |
| 177 | } |
| 178 | /* END_CASE */ |
| 179 | |
| 180 | /* BEGIN_CASE */ |
Cédric Meuter | bc13cd9 | 2020-12-28 14:39:33 +0100 | [diff] [blame] | 181 | void pkcs1_rsassa_pss_verify( int mod, data_t * input_N, data_t * input_E, |
| 182 | int digest, int hash, data_t * message_str, |
| 183 | char * salt, data_t * result_str, int result ) |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 184 | { |
Ron Eldor | 5b8f120 | 2018-11-22 15:49:49 +0200 | [diff] [blame] | 185 | unsigned char hash_result[MBEDTLS_MD_MAX_SIZE]; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 186 | mbedtls_rsa_context ctx; |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 187 | mbedtls_mpi N, E; |
Paul Bakker | dbd443d | 2013-08-16 13:38:47 +0200 | [diff] [blame] | 188 | ((void) salt); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 189 | |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 190 | mbedtls_mpi_init( &N ); mbedtls_mpi_init( &E ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 191 | mbedtls_rsa_init( &ctx, MBEDTLS_RSA_PKCS_V21, hash ); |
Ron Eldor | 5b8f120 | 2018-11-22 15:49:49 +0200 | [diff] [blame] | 192 | memset( hash_result, 0x00, sizeof( hash_result ) ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 193 | |
Cédric Meuter | bc13cd9 | 2020-12-28 14:39:33 +0100 | [diff] [blame] | 194 | TEST_ASSERT( mbedtls_mpi_read_binary( &N, input_N->x, input_N->len ) == 0 ); |
| 195 | TEST_ASSERT( mbedtls_mpi_read_binary( &E, input_E->x, input_E->len ) == 0 ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 196 | |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 197 | TEST_ASSERT( mbedtls_rsa_import( &ctx, &N, NULL, NULL, NULL, &E ) == 0 ); |
| 198 | TEST_ASSERT( mbedtls_rsa_get_len( &ctx ) == (size_t) ( ( mod + 7 ) / 8 ) ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 199 | TEST_ASSERT( mbedtls_rsa_check_pubkey( &ctx ) == 0 ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 200 | |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 201 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 202 | if( mbedtls_md_info_from_type( digest ) != NULL ) |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 203 | TEST_ASSERT( mbedtls_md( mbedtls_md_info_from_type( digest ), message_str->x, message_str->len, hash_result ) == 0 ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 204 | |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 205 | TEST_ASSERT( mbedtls_rsa_pkcs1_verify( &ctx, NULL, NULL, MBEDTLS_RSA_PUBLIC, digest, 0, hash_result, result_str->x ) == result ); |
Paul Bakker | 58ef6ec | 2013-01-03 11:33:48 +0100 | [diff] [blame] | 206 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 207 | exit: |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 208 | mbedtls_mpi_free( &N ); mbedtls_mpi_free( &E ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 209 | mbedtls_rsa_free( &ctx ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 210 | } |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 211 | /* END_CASE */ |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 212 | |
| 213 | /* BEGIN_CASE */ |
Cédric Meuter | bc13cd9 | 2020-12-28 14:39:33 +0100 | [diff] [blame] | 214 | void pkcs1_rsassa_pss_verify_ext( int mod, data_t * input_N, data_t * input_E, |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 215 | int msg_digest_id, int ctx_hash, |
| 216 | int mgf_hash, int salt_len, |
Azim Khan | 5fcca46 | 2018-06-29 11:05:32 +0100 | [diff] [blame] | 217 | data_t * message_str, |
| 218 | data_t * result_str, int result_simple, |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 219 | int result_full ) |
| 220 | { |
Ron Eldor | 5b8f120 | 2018-11-22 15:49:49 +0200 | [diff] [blame] | 221 | unsigned char hash_result[MBEDTLS_MD_MAX_SIZE]; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 222 | mbedtls_rsa_context ctx; |
Azim Khan | f1aaec9 | 2017-05-30 14:23:15 +0100 | [diff] [blame] | 223 | size_t hash_len; |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 224 | mbedtls_mpi N, E; |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 225 | |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 226 | mbedtls_mpi_init( &N ); mbedtls_mpi_init( &E ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 227 | mbedtls_rsa_init( &ctx, MBEDTLS_RSA_PKCS_V21, ctx_hash ); |
Ron Eldor | 5b8f120 | 2018-11-22 15:49:49 +0200 | [diff] [blame] | 228 | memset( hash_result, 0x00, sizeof( hash_result ) ); |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 229 | |
Cédric Meuter | bc13cd9 | 2020-12-28 14:39:33 +0100 | [diff] [blame] | 230 | TEST_ASSERT( mbedtls_mpi_read_binary( &N, input_N->x, input_N->len ) == 0 ); |
| 231 | TEST_ASSERT( mbedtls_mpi_read_binary( &E, input_E->x, input_E->len ) == 0 ); |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 232 | |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 233 | TEST_ASSERT( mbedtls_rsa_import( &ctx, &N, NULL, NULL, NULL, &E ) == 0 ); |
| 234 | TEST_ASSERT( mbedtls_rsa_get_len( &ctx ) == (size_t) ( ( mod + 7 ) / 8 ) ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 235 | TEST_ASSERT( mbedtls_rsa_check_pubkey( &ctx ) == 0 ); |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 236 | |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 237 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 238 | if( msg_digest_id != MBEDTLS_MD_NONE ) |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 239 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 240 | TEST_ASSERT( mbedtls_md( mbedtls_md_info_from_type( msg_digest_id ), |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 241 | message_str->x, message_str->len, hash_result ) == 0 ); |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 242 | hash_len = 0; |
| 243 | } |
| 244 | else |
| 245 | { |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 246 | memcpy( hash_result, message_str->x, message_str->len ); |
| 247 | hash_len = message_str->len; |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 248 | } |
| 249 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 250 | TEST_ASSERT( mbedtls_rsa_pkcs1_verify( &ctx, NULL, NULL, MBEDTLS_RSA_PUBLIC, |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 251 | msg_digest_id, hash_len, hash_result, |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 252 | result_str->x ) == result_simple ); |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 253 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 254 | TEST_ASSERT( mbedtls_rsa_rsassa_pss_verify_ext( &ctx, NULL, NULL, MBEDTLS_RSA_PUBLIC, |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 255 | msg_digest_id, hash_len, hash_result, |
| 256 | mgf_hash, salt_len, |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 257 | result_str->x ) == result_full ); |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 258 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 259 | exit: |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 260 | mbedtls_mpi_free( &N ); mbedtls_mpi_free( &E ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 261 | mbedtls_rsa_free( &ctx ); |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 262 | } |
| 263 | /* END_CASE */ |