blob: 421227f5e8d4dcc92d291866b8dc52149ece439e [file] [log] [blame]
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/pk.h"
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +02003
Manuel Pégourié-Gonnard7c13d692014-11-12 00:01:34 +01004/* For error codes */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00005#include "mbedtls/ecp.h"
6#include "mbedtls/rsa.h"
Manuel Pégourié-Gonnard7c13d692014-11-12 00:01:34 +01007
Andres Amaya Garcia7ea67272017-05-08 11:15:49 +01008#include <limits.h>
Andres Amaya Garcia6ff067d2017-06-09 14:26:59 +01009#include <stdint.h>
Andres AG5c79d252017-02-15 10:52:32 +000010
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020011static int rnd_std_rand( void *rng_state, unsigned char *output, size_t len );
12
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020013#define RSA_KEY_SIZE 512
14#define RSA_KEY_LEN 64
15
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020016static int pk_genkey( mbedtls_pk_context *pk )
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020017{
Paul Bakkera5320902013-12-19 17:29:52 +010018 ((void) pk);
19
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020020#if defined(MBEDTLS_RSA_C) && defined(MBEDTLS_GENPRIME)
21 if( mbedtls_pk_get_type( pk ) == MBEDTLS_PK_RSA )
22 return mbedtls_rsa_gen_key( mbedtls_pk_rsa( *pk ), rnd_std_rand, NULL, RSA_KEY_SIZE, 3 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020023#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020024#if defined(MBEDTLS_ECP_C)
25 if( mbedtls_pk_get_type( pk ) == MBEDTLS_PK_ECKEY ||
26 mbedtls_pk_get_type( pk ) == MBEDTLS_PK_ECKEY_DH ||
27 mbedtls_pk_get_type( pk ) == MBEDTLS_PK_ECDSA )
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020028 {
29 int ret;
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +020030 if( ( ret = mbedtls_ecp_group_load( &mbedtls_pk_ec( *pk )->grp,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020031 MBEDTLS_ECP_DP_SECP192R1 ) ) != 0 )
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020032 return( ret );
33
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020034 return mbedtls_ecp_gen_keypair( &mbedtls_pk_ec( *pk )->grp, &mbedtls_pk_ec( *pk )->d,
35 &mbedtls_pk_ec( *pk )->Q, rnd_std_rand, NULL );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020036 }
37#endif
38 return( -1 );
39}
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020040
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020041#if defined(MBEDTLS_RSA_C)
42int mbedtls_rsa_decrypt_func( void *ctx, int mode, size_t *olen,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020043 const unsigned char *input, unsigned char *output,
44 size_t output_max_len )
45{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020046 return( mbedtls_rsa_pkcs1_decrypt( (mbedtls_rsa_context *) ctx, NULL, NULL, mode, olen,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020047 input, output, output_max_len ) );
48}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020049int mbedtls_rsa_sign_func( void *ctx,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020050 int (*f_rng)(void *, unsigned char *, size_t), void *p_rng,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020051 int mode, mbedtls_md_type_t md_alg, unsigned int hashlen,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020052 const unsigned char *hash, unsigned char *sig )
53{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020054 return( mbedtls_rsa_pkcs1_sign( (mbedtls_rsa_context *) ctx, f_rng, p_rng, mode,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020055 md_alg, hashlen, hash, sig ) );
56}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020057size_t mbedtls_rsa_key_len_func( void *ctx )
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020058{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020059 return( ((const mbedtls_rsa_context *) ctx)->len );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +020060}
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020061#endif /* MBEDTLS_RSA_C */
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020062/* END_HEADER */
63
64/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020065 * depends_on:MBEDTLS_PK_C
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020066 * END_DEPENDENCIES
67 */
68
69/* BEGIN_CASE */
70void pk_utils( int type, int size, int len, char *name )
71{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020072 mbedtls_pk_context pk;
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020073
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020074 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020075
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +020076 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( type ) ) == 0 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020077 TEST_ASSERT( pk_genkey( &pk ) == 0 );
78
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020079 TEST_ASSERT( (int) mbedtls_pk_get_type( &pk ) == type );
80 TEST_ASSERT( mbedtls_pk_can_do( &pk, type ) );
Manuel Pégourié-Gonnard097c7bb2015-06-18 16:43:38 +020081 TEST_ASSERT( mbedtls_pk_get_bitlen( &pk ) == (unsigned) size );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020082 TEST_ASSERT( mbedtls_pk_get_len( &pk ) == (unsigned) len );
83 TEST_ASSERT( strcmp( mbedtls_pk_get_name( &pk), name ) == 0 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020084
Paul Bakkerbd51b262014-07-10 15:26:12 +020085exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020086 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +020087}
88/* END_CASE */
89
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020090/* BEGIN_CASE depends_on:MBEDTLS_PK_PARSE_C:MBEDTLS_FS_IO */
91void mbedtls_pk_check_pair( char *pub_file, char *prv_file, int ret )
Manuel Pégourié-Gonnard70bdadf2014-11-06 16:51:20 +010092{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020093 mbedtls_pk_context pub, prv, alt;
Manuel Pégourié-Gonnard70bdadf2014-11-06 16:51:20 +010094
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020095 mbedtls_pk_init( &pub );
96 mbedtls_pk_init( &prv );
97 mbedtls_pk_init( &alt );
Manuel Pégourié-Gonnard70bdadf2014-11-06 16:51:20 +010098
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020099 TEST_ASSERT( mbedtls_pk_parse_public_keyfile( &pub, pub_file ) == 0 );
100 TEST_ASSERT( mbedtls_pk_parse_keyfile( &prv, prv_file, NULL ) == 0 );
Manuel Pégourié-Gonnard70bdadf2014-11-06 16:51:20 +0100101
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200102 TEST_ASSERT( mbedtls_pk_check_pair( &pub, &prv ) == ret );
Manuel Pégourié-Gonnard70bdadf2014-11-06 16:51:20 +0100103
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200104#if defined(MBEDTLS_RSA_C) && defined(MBEDTLS_PK_RSA_ALT_SUPPORT)
105 if( mbedtls_pk_get_type( &prv ) == MBEDTLS_PK_RSA )
Manuel Pégourié-Gonnarda1efcb02014-11-08 17:08:08 +0100106 {
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200107 TEST_ASSERT( mbedtls_pk_setup_rsa_alt( &alt, mbedtls_pk_rsa( prv ),
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200108 mbedtls_rsa_decrypt_func, mbedtls_rsa_sign_func, mbedtls_rsa_key_len_func ) == 0 );
109 TEST_ASSERT( mbedtls_pk_check_pair( &pub, &alt ) == ret );
Manuel Pégourié-Gonnarda1efcb02014-11-08 17:08:08 +0100110 }
Manuel Pégourié-Gonnard7c13d692014-11-12 00:01:34 +0100111#endif
Manuel Pégourié-Gonnarda1efcb02014-11-08 17:08:08 +0100112
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200113 mbedtls_pk_free( &pub );
114 mbedtls_pk_free( &prv );
115 mbedtls_pk_free( &alt );
Manuel Pégourié-Gonnard70bdadf2014-11-06 16:51:20 +0100116}
117/* END_CASE */
118
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200119/* BEGIN_CASE depends_on:MBEDTLS_RSA_C */
Paul Bakker42099c32014-01-27 11:45:49 +0100120void pk_rsa_verify_test_vec( char *message_hex_string, int digest,
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200121 int mod, int radix_N, char *input_N, int radix_E,
122 char *input_E, char *result_hex_str, int result )
123{
124 unsigned char message_str[1000];
125 unsigned char hash_result[1000];
126 unsigned char result_str[1000];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200127 mbedtls_rsa_context *rsa;
128 mbedtls_pk_context pk;
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200129 int msg_len;
130
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200131 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200132
133 memset( message_str, 0x00, 1000 );
134 memset( hash_result, 0x00, 1000 );
135 memset( result_str, 0x00, 1000 );
136
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200137 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200138 rsa = mbedtls_pk_rsa( pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200139
Paul Bakker42099c32014-01-27 11:45:49 +0100140 rsa->len = mod / 8;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200141 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->N, radix_N, input_N ) == 0 );
142 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->E, radix_E, input_E ) == 0 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200143
144 msg_len = unhexify( message_str, message_hex_string );
145 unhexify( result_str, result_hex_str );
146
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200147 if( mbedtls_md_info_from_type( digest ) != NULL )
148 TEST_ASSERT( mbedtls_md( mbedtls_md_info_from_type( digest ), message_str, msg_len, hash_result ) == 0 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200149
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200150 TEST_ASSERT( mbedtls_pk_verify( &pk, digest, hash_result, 0,
151 result_str, mbedtls_pk_get_len( &pk ) ) == result );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200152
Paul Bakkerbd51b262014-07-10 15:26:12 +0200153exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200154 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200155}
156/* END_CASE */
157
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200158/* BEGIN_CASE depends_on:MBEDTLS_RSA_C */
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200159void pk_rsa_verify_ext_test_vec( char *message_hex_string, int digest,
160 int mod, int radix_N, char *input_N, int radix_E,
161 char *input_E, char *result_hex_str,
162 int pk_type, int mgf1_hash_id, int salt_len,
163 int result )
164{
165 unsigned char message_str[1000];
166 unsigned char hash_result[1000];
167 unsigned char result_str[1000];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200168 mbedtls_rsa_context *rsa;
169 mbedtls_pk_context pk;
170 mbedtls_pk_rsassa_pss_options pss_opts;
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200171 void *options;
172 int msg_len;
173 size_t hash_len;
174
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200175 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200176
177 memset( message_str, 0x00, 1000 );
178 memset( hash_result, 0x00, 1000 );
179 memset( result_str, 0x00, 1000 );
180
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200181 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200182 rsa = mbedtls_pk_rsa( pk );
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200183
184 rsa->len = mod / 8;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200185 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->N, radix_N, input_N ) == 0 );
186 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->E, radix_E, input_E ) == 0 );
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200187
188 msg_len = unhexify( message_str, message_hex_string );
189 unhexify( result_str, result_hex_str );
190
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200191 if( digest != MBEDTLS_MD_NONE )
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200192 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200193 TEST_ASSERT( mbedtls_md( mbedtls_md_info_from_type( digest ),
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200194 message_str, msg_len, hash_result ) == 0 );
195 hash_len = 0;
196 }
197 else
198 {
199 memcpy( hash_result, message_str, msg_len );
200 hash_len = msg_len;
201 }
202
203 if( mgf1_hash_id < 0 )
204 {
205 options = NULL;
206 }
207 else
208 {
209 options = &pss_opts;
210
211 pss_opts.mgf1_hash_id = mgf1_hash_id;
212 pss_opts.expected_salt_len = salt_len;
213 }
214
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200215 TEST_ASSERT( mbedtls_pk_verify_ext( pk_type, options, &pk,
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200216 digest, hash_result, hash_len,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200217 result_str, mbedtls_pk_get_len( &pk ) ) == result );
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200218
Paul Bakkerbd51b262014-07-10 15:26:12 +0200219exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200220 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnard20422e92014-06-05 13:41:44 +0200221}
222/* END_CASE */
223
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200224/* BEGIN_CASE depends_on:MBEDTLS_ECDSA_C */
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200225void pk_ec_test_vec( int type, int id, char *key_str,
226 char *hash_str, char * sig_str, int ret )
227{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200228 mbedtls_pk_context pk;
229 mbedtls_ecp_keypair *eckey;
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200230 unsigned char hash[100], sig[500], key[500];
231 size_t hash_len, sig_len, key_len;
232
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200233 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200234
235 memset( hash, 0, sizeof( hash ) ); hash_len = unhexify(hash, hash_str);
236 memset( sig, 0, sizeof( sig ) ); sig_len = unhexify(sig, sig_str);
237 memset( key, 0, sizeof( key ) ); key_len = unhexify(key, key_str);
238
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200239 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( type ) ) == 0 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200240
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200241 TEST_ASSERT( mbedtls_pk_can_do( &pk, MBEDTLS_PK_ECDSA ) );
242 eckey = mbedtls_pk_ec( pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200243
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200244 TEST_ASSERT( mbedtls_ecp_group_load( &eckey->grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200245 TEST_ASSERT( mbedtls_ecp_point_read_binary( &eckey->grp, &eckey->Q,
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200246 key, key_len ) == 0 );
247
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200248 TEST_ASSERT( mbedtls_pk_verify( &pk, MBEDTLS_MD_NONE,
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200249 hash, hash_len, sig, sig_len ) == ret );
250
Paul Bakkerbd51b262014-07-10 15:26:12 +0200251exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200252 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200253}
254/* END_CASE */
255
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200256/* BEGIN_CASE depends_on:MBEDTLS_SHA256_C */
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200257void pk_sign_verify( int type, int sign_ret, int verify_ret )
258{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200259 mbedtls_pk_context pk;
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200260 unsigned char hash[50], sig[5000];
261 size_t sig_len;
262
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200263 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200264
265 memset( hash, 0x2a, sizeof hash );
266 memset( sig, 0, sizeof sig );
267
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200268 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( type ) ) == 0 );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200269 TEST_ASSERT( pk_genkey( &pk ) == 0 );
270
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200271 TEST_ASSERT( mbedtls_pk_sign( &pk, MBEDTLS_MD_SHA256, hash, sizeof hash,
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200272 sig, &sig_len, rnd_std_rand, NULL ) == sign_ret );
273
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200274 TEST_ASSERT( mbedtls_pk_verify( &pk, MBEDTLS_MD_SHA256,
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200275 hash, sizeof hash, sig, sig_len ) == verify_ret );
276
Paul Bakkerbd51b262014-07-10 15:26:12 +0200277exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200278 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnardb0a467f2013-09-21 12:31:05 +0200279}
280/* END_CASE */
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200281
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200282/* BEGIN_CASE depends_on:MBEDTLS_RSA_C */
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200283void pk_rsa_encrypt_test_vec( char *message_hex, int mod,
284 int radix_N, char *input_N,
285 int radix_E, char *input_E,
286 char *result_hex, int ret )
287{
288 unsigned char message[1000];
289 unsigned char output[1000];
290 unsigned char result[1000];
291 size_t msg_len, olen, res_len;
292 rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200293 mbedtls_rsa_context *rsa;
294 mbedtls_pk_context pk;
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200295
296 memset( &rnd_info, 0, sizeof( rnd_pseudo_info ) );
297 memset( message, 0, sizeof( message ) );
298 memset( output, 0, sizeof( output ) );
299 memset( result, 0, sizeof( result ) );
300
301 msg_len = unhexify( message, message_hex );
302 res_len = unhexify( result, result_hex );
303
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200304 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200305 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200306 rsa = mbedtls_pk_rsa( pk );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200307
308 rsa->len = mod / 8;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200309 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->N, radix_N, input_N ) == 0 );
310 TEST_ASSERT( mbedtls_mpi_read_string( &rsa->E, radix_E, input_E ) == 0 );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200311
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200312 TEST_ASSERT( mbedtls_pk_encrypt( &pk, message, msg_len,
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200313 output, &olen, sizeof( output ),
314 rnd_pseudo_rand, &rnd_info ) == ret );
315 TEST_ASSERT( olen == res_len );
316 TEST_ASSERT( memcmp( output, result, olen ) == 0 );
317
Paul Bakkerbd51b262014-07-10 15:26:12 +0200318exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200319 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200320}
321/* END_CASE */
322
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200323/* BEGIN_CASE depends_on:MBEDTLS_RSA_C */
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200324void pk_rsa_decrypt_test_vec( char *cipher_hex, int mod,
325 int radix_P, char *input_P,
326 int radix_Q, char *input_Q,
327 int radix_N, char *input_N,
328 int radix_E, char *input_E,
329 char *clear_hex, int ret )
330{
331 unsigned char clear[1000];
332 unsigned char output[1000];
333 unsigned char cipher[1000];
334 size_t clear_len, olen, cipher_len;
335 rnd_pseudo_info rnd_info;
Hanno Beckerd71dc152017-08-23 06:32:42 +0100336 mbedtls_mpi N, P, Q, E;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200337 mbedtls_rsa_context *rsa;
338 mbedtls_pk_context pk;
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200339
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200340 mbedtls_pk_init( &pk );
Hanno Beckerd71dc152017-08-23 06:32:42 +0100341 mbedtls_mpi_init( &N ); mbedtls_mpi_init( &P );
342 mbedtls_mpi_init( &Q ); mbedtls_mpi_init( &E );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200343
344 memset( &rnd_info, 0, sizeof( rnd_pseudo_info ) );
345 memset( clear, 0, sizeof( clear ) );
346 memset( cipher, 0, sizeof( cipher ) );
347
Hanno Beckerd71dc152017-08-23 06:32:42 +0100348 clear_len = unhexify( clear, clear_hex );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200349 cipher_len = unhexify( cipher, cipher_hex );
350
351 /* init pk-rsa context */
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200352 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200353 rsa = mbedtls_pk_rsa( pk );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200354
355 /* load public key */
Hanno Beckerd71dc152017-08-23 06:32:42 +0100356 TEST_ASSERT( mbedtls_mpi_read_string( &N, radix_N, input_N ) == 0 );
357 TEST_ASSERT( mbedtls_mpi_read_string( &E, radix_E, input_E ) == 0 );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200358
359 /* load private key */
Hanno Beckerd71dc152017-08-23 06:32:42 +0100360 TEST_ASSERT( mbedtls_mpi_read_string( &P, radix_P, input_P ) == 0 );
361 TEST_ASSERT( mbedtls_mpi_read_string( &Q, radix_Q, input_Q ) == 0 );
362 TEST_ASSERT( mbedtls_rsa_import( rsa, &N, &P, &Q, NULL, &E ) == 0 );
363 TEST_ASSERT( mbedtls_rsa_get_len( rsa ) == (size_t) ( mod / 8 ) );
Hanno Becker7f25f852017-10-10 16:56:22 +0100364 TEST_ASSERT( mbedtls_rsa_complete( rsa ) == 0 );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200365
366 /* decryption test */
367 memset( output, 0, sizeof( output ) );
368 olen = 0;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200369 TEST_ASSERT( mbedtls_pk_decrypt( &pk, cipher, cipher_len,
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200370 output, &olen, sizeof( output ),
371 rnd_pseudo_rand, &rnd_info ) == ret );
372 if( ret == 0 )
373 {
374 TEST_ASSERT( olen == clear_len );
375 TEST_ASSERT( memcmp( output, clear, olen ) == 0 );
376 }
377
Paul Bakkerbd51b262014-07-10 15:26:12 +0200378exit:
Hanno Beckerd71dc152017-08-23 06:32:42 +0100379 mbedtls_mpi_free( &N ); mbedtls_mpi_free( &P );
380 mbedtls_mpi_free( &Q ); mbedtls_mpi_free( &E );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200381 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnard67d45832013-10-17 12:34:16 +0200382}
383/* END_CASE */
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200384
385/* BEGIN_CASE */
386void pk_ec_nocrypt( int type )
387{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200388 mbedtls_pk_context pk;
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200389 unsigned char output[100];
390 unsigned char input[100];
391 rnd_pseudo_info rnd_info;
392 size_t olen = 0;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200393 int ret = MBEDTLS_ERR_PK_TYPE_MISMATCH;
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200394
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200395 mbedtls_pk_init( &pk );
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200396
397 memset( &rnd_info, 0, sizeof( rnd_pseudo_info ) );
398 memset( output, 0, sizeof( output ) );
399 memset( input, 0, sizeof( input ) );
400
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200401 TEST_ASSERT( mbedtls_pk_setup( &pk, mbedtls_pk_info_from_type( type ) ) == 0 );
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200402
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200403 TEST_ASSERT( mbedtls_pk_encrypt( &pk, input, sizeof( input ),
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200404 output, &olen, sizeof( output ),
405 rnd_pseudo_rand, &rnd_info ) == ret );
406
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200407 TEST_ASSERT( mbedtls_pk_decrypt( &pk, input, sizeof( input ),
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200408 output, &olen, sizeof( output ),
409 rnd_pseudo_rand, &rnd_info ) == ret );
410
Paul Bakkerbd51b262014-07-10 15:26:12 +0200411exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200412 mbedtls_pk_free( &pk );
Manuel Pégourié-Gonnard75c78822013-10-17 12:46:39 +0200413}
414/* END_CASE */
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200415
Andres Amaya Garcia7ea67272017-05-08 11:15:49 +0100416/* BEGIN_CASE depends_on:MBEDTLS_RSA_C */
Andres AG5c79d252017-02-15 10:52:32 +0000417void pk_rsa_overflow( )
418{
419 mbedtls_pk_context pk;
itayzafrir693a1d92018-02-26 12:02:10 +0200420 size_t hash_len = SIZE_MAX, sig_len = SIZE_MAX;
421 unsigned char hash[50], sig[100];
Andres Amaya Garcia7ea67272017-05-08 11:15:49 +0100422
423 if( SIZE_MAX <= UINT_MAX )
424 return;
Andres AG5c79d252017-02-15 10:52:32 +0000425
itayzafrir693a1d92018-02-26 12:02:10 +0200426 memset( hash, 0x2a, sizeof hash );
427 memset( sig, 0, sizeof sig );
428
Andres AG5c79d252017-02-15 10:52:32 +0000429 mbedtls_pk_init( &pk );
430
431 TEST_ASSERT( mbedtls_pk_setup( &pk,
432 mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 );
433
434#if defined(MBEDTLS_PKCS1_V21)
435 TEST_ASSERT( mbedtls_pk_verify_ext( MBEDTLS_PK_RSASSA_PSS, NULL, &pk,
itayzafrir693a1d92018-02-26 12:02:10 +0200436 MBEDTLS_MD_NONE, hash, hash_len, sig, sig_len ) ==
Andres AG5c79d252017-02-15 10:52:32 +0000437 MBEDTLS_ERR_PK_BAD_INPUT_DATA );
438#endif /* MBEDTLS_PKCS1_V21 */
439
itayzafrir693a1d92018-02-26 12:02:10 +0200440 TEST_ASSERT( mbedtls_pk_verify( &pk, MBEDTLS_MD_NONE, hash, hash_len,
441 sig, sig_len ) == MBEDTLS_ERR_PK_BAD_INPUT_DATA );
Andres AG5c79d252017-02-15 10:52:32 +0000442
itayzafrir693a1d92018-02-26 12:02:10 +0200443 TEST_ASSERT( mbedtls_pk_sign( &pk, MBEDTLS_MD_NONE, hash, hash_len, sig, &sig_len,
Andres AG5c79d252017-02-15 10:52:32 +0000444 rnd_std_rand, NULL ) == MBEDTLS_ERR_PK_BAD_INPUT_DATA );
445
446exit:
447 mbedtls_pk_free( &pk );
448}
449/* END_CASE */
450
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200451/* BEGIN_CASE depends_on:MBEDTLS_RSA_C:MBEDTLS_PK_RSA_ALT_SUPPORT */
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200452void pk_rsa_alt( )
453{
454 /*
455 * An rsa_alt context can only do private operations (decrypt, sign).
456 * Test it against the public operations (encrypt, verify) of a
457 * corresponding rsa context.
458 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200459 mbedtls_rsa_context raw;
460 mbedtls_pk_context rsa, alt;
461 mbedtls_pk_debug_item dbg_items[10];
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200462 unsigned char hash[50], sig[1000];
463 unsigned char msg[50], ciph[1000], test[1000];
464 size_t sig_len, ciph_len, test_len;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200465 int ret = MBEDTLS_ERR_PK_TYPE_MISMATCH;
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200466
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200467 mbedtls_rsa_init( &raw, MBEDTLS_RSA_PKCS_V15, MBEDTLS_MD_NONE );
468 mbedtls_pk_init( &rsa ); mbedtls_pk_init( &alt );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200469
470 memset( hash, 0x2a, sizeof hash );
471 memset( sig, 0, sizeof sig );
472 memset( msg, 0x2a, sizeof msg );
473 memset( ciph, 0, sizeof ciph );
474 memset( test, 0, sizeof test );
475
476 /* Initiliaze PK RSA context with random key */
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200477 TEST_ASSERT( mbedtls_pk_setup( &rsa,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200478 mbedtls_pk_info_from_type( MBEDTLS_PK_RSA ) ) == 0 );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200479 TEST_ASSERT( pk_genkey( &rsa ) == 0 );
480
481 /* Extract key to the raw rsa context */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200482 TEST_ASSERT( mbedtls_rsa_copy( &raw, mbedtls_pk_rsa( rsa ) ) == 0 );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200483
484 /* Initialize PK RSA_ALT context */
Manuel Pégourié-Gonnardd9e6a3a2015-05-14 19:41:36 +0200485 TEST_ASSERT( mbedtls_pk_setup_rsa_alt( &alt, (void *) &raw,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200486 mbedtls_rsa_decrypt_func, mbedtls_rsa_sign_func, mbedtls_rsa_key_len_func ) == 0 );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200487
488 /* Test administrative functions */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200489 TEST_ASSERT( mbedtls_pk_can_do( &alt, MBEDTLS_PK_RSA ) );
Manuel Pégourié-Gonnard097c7bb2015-06-18 16:43:38 +0200490 TEST_ASSERT( mbedtls_pk_get_bitlen( &alt ) == RSA_KEY_SIZE );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200491 TEST_ASSERT( mbedtls_pk_get_len( &alt ) == RSA_KEY_LEN );
492 TEST_ASSERT( mbedtls_pk_get_type( &alt ) == MBEDTLS_PK_RSA_ALT );
493 TEST_ASSERT( strcmp( mbedtls_pk_get_name( &alt ), "RSA-alt" ) == 0 );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200494
495 /* Test signature */
Andres Amaya Garcia7ea67272017-05-08 11:15:49 +0100496#if SIZE_MAX > UINT_MAX
497 TEST_ASSERT( mbedtls_pk_sign( &alt, MBEDTLS_MD_NONE, hash, SIZE_MAX,
498 sig, &sig_len, rnd_std_rand, NULL ) ==
Andres AG5c79d252017-02-15 10:52:32 +0000499 MBEDTLS_ERR_PK_BAD_INPUT_DATA );
Andres Amaya Garcia7ea67272017-05-08 11:15:49 +0100500#endif /* SIZE_MAX > UINT_MAX */
501 TEST_ASSERT( mbedtls_pk_sign( &alt, MBEDTLS_MD_NONE, hash, sizeof hash,
502 sig, &sig_len, rnd_std_rand, NULL ) == 0 );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200503 TEST_ASSERT( sig_len == RSA_KEY_LEN );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200504 TEST_ASSERT( mbedtls_pk_verify( &rsa, MBEDTLS_MD_NONE,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200505 hash, sizeof hash, sig, sig_len ) == 0 );
506
507 /* Test decrypt */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200508 TEST_ASSERT( mbedtls_pk_encrypt( &rsa, msg, sizeof msg,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200509 ciph, &ciph_len, sizeof ciph,
510 rnd_std_rand, NULL ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200511 TEST_ASSERT( mbedtls_pk_decrypt( &alt, ciph, ciph_len,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200512 test, &test_len, sizeof test,
513 rnd_std_rand, NULL ) == 0 );
514 TEST_ASSERT( test_len == sizeof msg );
515 TEST_ASSERT( memcmp( test, msg, test_len ) == 0 );
516
517 /* Test forbidden operations */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200518 TEST_ASSERT( mbedtls_pk_encrypt( &alt, msg, sizeof msg,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200519 ciph, &ciph_len, sizeof ciph,
520 rnd_std_rand, NULL ) == ret );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200521 TEST_ASSERT( mbedtls_pk_verify( &alt, MBEDTLS_MD_NONE,
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200522 hash, sizeof hash, sig, sig_len ) == ret );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200523 TEST_ASSERT( mbedtls_pk_debug( &alt, dbg_items ) == ret );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200524
Paul Bakkerbd51b262014-07-10 15:26:12 +0200525exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200526 mbedtls_rsa_free( &raw );
527 mbedtls_pk_free( &rsa ); mbedtls_pk_free( &alt );
Manuel Pégourié-Gonnard01488752014-04-03 22:09:18 +0200528}
529/* END_CASE */