blob: 883cfe08ec24b5ae47cef7d0f2d4de71dfb481a8 [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/ctr_drbg.h"
Rich Evans00ab4702015-02-06 13:43:58 +00003
Paul Bakker3ddfa662013-11-26 17:45:20 +01004int test_offset_idx;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005int mbedtls_entropy_func( void *data, unsigned char *buf, size_t len )
Paul Bakker0e04d0e2011-11-27 14:46:59 +00006{
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +01007 const unsigned char *p = (unsigned char *) data;
Paul Bakker3ddfa662013-11-26 17:45:20 +01008 memcpy( buf, p + test_offset_idx, len );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +01009 test_offset_idx += len;
Paul Bakker0e04d0e2011-11-27 14:46:59 +000010 return( 0 );
11}
Paul Bakker33b43f12013-08-20 11:48:36 +020012/* END_HEADER */
Paul Bakker0e04d0e2011-11-27 14:46:59 +000013
Paul Bakker33b43f12013-08-20 11:48:36 +020014/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020015 * depends_on:MBEDTLS_CTR_DRBG_C
Paul Bakker33b43f12013-08-20 11:48:36 +020016 * END_DEPENDENCIES
17 */
Paul Bakker0e04d0e2011-11-27 14:46:59 +000018
Paul Bakker33b43f12013-08-20 11:48:36 +020019/* BEGIN_CASE */
Paul Bakker185ccf72016-07-14 13:21:10 +010020void ctr_drbg_special_behaviours( )
21{
22 mbedtls_ctr_drbg_context ctx;
23 unsigned char output[512];
24 unsigned char additional[512];
25
26 mbedtls_ctr_drbg_init( &ctx );
27 memset( output, 0, sizeof( output ) );
28 memset( additional, 0, sizeof( additional ) );
29
30 TEST_ASSERT( mbedtls_ctr_drbg_random_with_add( &ctx,
31 output, MBEDTLS_CTR_DRBG_MAX_REQUEST + 1,
32 additional, 16 ) ==
33 MBEDTLS_ERR_CTR_DRBG_REQUEST_TOO_BIG );
34 TEST_ASSERT( mbedtls_ctr_drbg_random_with_add( &ctx,
35 output, 16,
36 additional, MBEDTLS_CTR_DRBG_MAX_INPUT + 1 ) ==
37 MBEDTLS_ERR_CTR_DRBG_INPUT_TOO_BIG );
38
39 TEST_ASSERT( mbedtls_ctr_drbg_reseed( &ctx, additional,
40 MBEDTLS_CTR_DRBG_MAX_SEED_INPUT + 1 ) ==
41 MBEDTLS_ERR_CTR_DRBG_INPUT_TOO_BIG );
Andres Amaya Garcia6a543362017-01-17 23:04:22 +000042
43 mbedtls_ctr_drbg_set_entropy_len( &ctx, ~0 );
44 TEST_ASSERT( mbedtls_ctr_drbg_reseed( &ctx, additional,
45 MBEDTLS_CTR_DRBG_MAX_SEED_INPUT ) ==
46 MBEDTLS_ERR_CTR_DRBG_INPUT_TOO_BIG );
Paul Bakker185ccf72016-07-14 13:21:10 +010047exit:
48 mbedtls_ctr_drbg_free( &ctx );
49}
50/* END_CASE */
51
52/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +020053void ctr_drbg_validate_pr( char *add_init_string, char *entropy_string,
54 char *add1_string, char *add2_string,
55 char *result_str )
Paul Bakker0e04d0e2011-11-27 14:46:59 +000056{
57 unsigned char entropy[512];
58 unsigned char add_init[512];
59 unsigned char add1[512];
60 unsigned char add2[512];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020061 mbedtls_ctr_drbg_context ctx;
Paul Bakker0e04d0e2011-11-27 14:46:59 +000062 unsigned char buf[512];
63 unsigned char output_str[512];
64 int add_init_len, add1_len, add2_len;
65
Manuel Pégourié-Gonnard8d128ef2015-04-28 22:38:08 +020066 mbedtls_ctr_drbg_init( &ctx );
Paul Bakker0e04d0e2011-11-27 14:46:59 +000067 memset( output_str, 0, 512 );
68
Paul Bakker33b43f12013-08-20 11:48:36 +020069 unhexify( entropy, entropy_string );
70 add_init_len = unhexify( add_init, add_init_string );
71 add1_len = unhexify( add1, add1_string );
72 add2_len = unhexify( add2, add2_string );
Paul Bakker0e04d0e2011-11-27 14:46:59 +000073
Paul Bakker3ddfa662013-11-26 17:45:20 +010074 test_offset_idx = 0;
Manuel Pégourié-Gonnard8d128ef2015-04-28 22:38:08 +020075 TEST_ASSERT( mbedtls_ctr_drbg_seed_entropy_len( &ctx, mbedtls_entropy_func, entropy, add_init, add_init_len, 32 ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020076 mbedtls_ctr_drbg_set_prediction_resistance( &ctx, MBEDTLS_CTR_DRBG_PR_ON );
Paul Bakker0e04d0e2011-11-27 14:46:59 +000077
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020078 TEST_ASSERT( mbedtls_ctr_drbg_random_with_add( &ctx, buf, 16, add1, add1_len ) == 0 );
79 TEST_ASSERT( mbedtls_ctr_drbg_random_with_add( &ctx, buf, 16, add2, add2_len ) == 0 );
Paul Bakker0e04d0e2011-11-27 14:46:59 +000080 hexify( output_str, buf, 16 );
Paul Bakker33b43f12013-08-20 11:48:36 +020081 TEST_ASSERT( strcmp( (char *) output_str, result_str ) == 0 );
Paul Bakkera317a982014-06-18 16:44:11 +020082
Paul Bakkerbd51b262014-07-10 15:26:12 +020083exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020084 mbedtls_ctr_drbg_free( &ctx );
Paul Bakker0e04d0e2011-11-27 14:46:59 +000085}
Paul Bakker33b43f12013-08-20 11:48:36 +020086/* END_CASE */
Paul Bakker0e04d0e2011-11-27 14:46:59 +000087
Paul Bakker33b43f12013-08-20 11:48:36 +020088/* BEGIN_CASE */
89void ctr_drbg_validate_nopr( char *add_init_string, char *entropy_string,
90 char *add1_string, char *add_reseed_string,
91 char *add2_string, char *result_str )
Paul Bakker0e04d0e2011-11-27 14:46:59 +000092{
93 unsigned char entropy[512];
94 unsigned char add_init[512];
95 unsigned char add1[512];
96 unsigned char add_reseed[512];
97 unsigned char add2[512];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020098 mbedtls_ctr_drbg_context ctx;
Paul Bakker0e04d0e2011-11-27 14:46:59 +000099 unsigned char buf[512];
100 unsigned char output_str[512];
101 int add_init_len, add1_len, add_reseed_len, add2_len;
102
Manuel Pégourié-Gonnard8d128ef2015-04-28 22:38:08 +0200103 mbedtls_ctr_drbg_init( &ctx );
Paul Bakker0e04d0e2011-11-27 14:46:59 +0000104 memset( output_str, 0, 512 );
105
Paul Bakker33b43f12013-08-20 11:48:36 +0200106 unhexify( entropy, entropy_string );
107 add_init_len = unhexify( add_init, add_init_string );
108 add1_len = unhexify( add1, add1_string );
109 add_reseed_len = unhexify( add_reseed, add_reseed_string );
110 add2_len = unhexify( add2, add2_string );
Paul Bakker0e04d0e2011-11-27 14:46:59 +0000111
Paul Bakker3ddfa662013-11-26 17:45:20 +0100112 test_offset_idx = 0;
Manuel Pégourié-Gonnard8d128ef2015-04-28 22:38:08 +0200113 TEST_ASSERT( mbedtls_ctr_drbg_seed_entropy_len( &ctx, mbedtls_entropy_func, entropy, add_init, add_init_len, 32 ) == 0 );
Paul Bakker0e04d0e2011-11-27 14:46:59 +0000114
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200115 TEST_ASSERT( mbedtls_ctr_drbg_random_with_add( &ctx, buf, 16, add1, add1_len ) == 0 );
116 TEST_ASSERT( mbedtls_ctr_drbg_reseed( &ctx, add_reseed, add_reseed_len ) == 0 );
117 TEST_ASSERT( mbedtls_ctr_drbg_random_with_add( &ctx, buf, 16, add2, add2_len ) == 0 );
Paul Bakker0e04d0e2011-11-27 14:46:59 +0000118 hexify( output_str, buf, 16 );
Paul Bakker33b43f12013-08-20 11:48:36 +0200119 TEST_ASSERT( strcmp( (char *) output_str, result_str ) == 0 );
Paul Bakkera317a982014-06-18 16:44:11 +0200120
Paul Bakkerbd51b262014-07-10 15:26:12 +0200121exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200122 mbedtls_ctr_drbg_free( &ctx );
Paul Bakker0e04d0e2011-11-27 14:46:59 +0000123}
Paul Bakker33b43f12013-08-20 11:48:36 +0200124/* END_CASE */
Manuel Pégourié-Gonnardb3b205e2014-01-31 12:04:06 +0100125
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100126/* BEGIN_CASE */
127void ctr_drbg_entropy_usage( )
128{
129 unsigned char out[16];
130 unsigned char add[16];
131 unsigned char entropy[1024];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200132 mbedtls_ctr_drbg_context ctx;
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100133 size_t i, reps = 10;
134 int last_idx;
135
Manuel Pégourié-Gonnard8d128ef2015-04-28 22:38:08 +0200136 mbedtls_ctr_drbg_init( &ctx );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100137 test_offset_idx = 0;
138 memset( entropy, 0, sizeof( entropy ) );
139 memset( out, 0, sizeof( out ) );
140 memset( add, 0, sizeof( add ) );
141
142 /* Init must use entropy */
143 last_idx = test_offset_idx;
Manuel Pégourié-Gonnard8d128ef2015-04-28 22:38:08 +0200144 TEST_ASSERT( mbedtls_ctr_drbg_seed( &ctx, mbedtls_entropy_func, entropy, NULL, 0 ) == 0 );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100145 TEST_ASSERT( last_idx < test_offset_idx );
146
147 /* By default, PR is off and reseed_interval is large,
148 * so the next few calls should not use entropy */
149 last_idx = test_offset_idx;
150 for( i = 0; i < reps; i++ )
151 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200152 TEST_ASSERT( mbedtls_ctr_drbg_random( &ctx, out, sizeof( out ) - 4 ) == 0 );
153 TEST_ASSERT( mbedtls_ctr_drbg_random_with_add( &ctx, out, sizeof( out ) - 4,
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100154 add, sizeof( add ) ) == 0 );
155 }
156 TEST_ASSERT( last_idx == test_offset_idx );
157
158 /* While at it, make sure we didn't write past the requested length */
159 TEST_ASSERT( out[sizeof( out ) - 4] == 0 );
160 TEST_ASSERT( out[sizeof( out ) - 3] == 0 );
161 TEST_ASSERT( out[sizeof( out ) - 2] == 0 );
162 TEST_ASSERT( out[sizeof( out ) - 1] == 0 );
163
164 /* Set reseed_interval to the number of calls done,
165 * so the next call should reseed */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200166 mbedtls_ctr_drbg_set_reseed_interval( &ctx, 2 * reps );
167 TEST_ASSERT( mbedtls_ctr_drbg_random( &ctx, out, sizeof( out ) ) == 0 );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100168 TEST_ASSERT( last_idx < test_offset_idx );
169
170 /* The new few calls should not reseed */
171 last_idx = test_offset_idx;
172 for( i = 0; i < reps / 2; i++ )
173 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200174 TEST_ASSERT( mbedtls_ctr_drbg_random( &ctx, out, sizeof( out ) ) == 0 );
175 TEST_ASSERT( mbedtls_ctr_drbg_random_with_add( &ctx, out, sizeof( out ) ,
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100176 add, sizeof( add ) ) == 0 );
177 }
178 TEST_ASSERT( last_idx == test_offset_idx );
179
Manuel Pégourié-Gonnardf5f25b32014-11-27 14:04:56 +0100180 /* Call update with too much data (sizeof entropy > MAX(_SEED)_INPUT)
181 * (just make sure it doesn't cause memory corruption) */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200182 mbedtls_ctr_drbg_update( &ctx, entropy, sizeof( entropy ) );
Manuel Pégourié-Gonnardf5f25b32014-11-27 14:04:56 +0100183
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100184 /* Now enable PR, so the next few calls should all reseed */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200185 mbedtls_ctr_drbg_set_prediction_resistance( &ctx, MBEDTLS_CTR_DRBG_PR_ON );
186 TEST_ASSERT( mbedtls_ctr_drbg_random( &ctx, out, sizeof( out ) ) == 0 );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100187 TEST_ASSERT( last_idx < test_offset_idx );
188
189 /* Finally, check setting entropy_len */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200190 mbedtls_ctr_drbg_set_entropy_len( &ctx, 42 );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100191 last_idx = test_offset_idx;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200192 TEST_ASSERT( mbedtls_ctr_drbg_random( &ctx, out, sizeof( out ) ) == 0 );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100193 TEST_ASSERT( test_offset_idx - last_idx == 42 );
194
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200195 mbedtls_ctr_drbg_set_entropy_len( &ctx, 13 );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100196 last_idx = test_offset_idx;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200197 TEST_ASSERT( mbedtls_ctr_drbg_random( &ctx, out, sizeof( out ) ) == 0 );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100198 TEST_ASSERT( test_offset_idx - last_idx == 13 );
Paul Bakkera317a982014-06-18 16:44:11 +0200199
Paul Bakkerbd51b262014-07-10 15:26:12 +0200200exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200201 mbedtls_ctr_drbg_free( &ctx );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100202}
203/* END_CASE */
204
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200205/* BEGIN_CASE depends_on:MBEDTLS_FS_IO */
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100206void ctr_drbg_seed_file( char *path, int ret )
207{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200208 mbedtls_ctr_drbg_context ctx;
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100209
Manuel Pégourié-Gonnard8d128ef2015-04-28 22:38:08 +0200210 mbedtls_ctr_drbg_init( &ctx );
211
212 TEST_ASSERT( mbedtls_ctr_drbg_seed( &ctx, rnd_std_rand, NULL, NULL, 0 ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200213 TEST_ASSERT( mbedtls_ctr_drbg_write_seed_file( &ctx, path ) == ret );
214 TEST_ASSERT( mbedtls_ctr_drbg_update_seed_file( &ctx, path ) == ret );
Paul Bakkera317a982014-06-18 16:44:11 +0200215
Paul Bakkerbd51b262014-07-10 15:26:12 +0200216exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200217 mbedtls_ctr_drbg_free( &ctx );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100218}
219/* END_CASE */
220
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200221/* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST */
Manuel Pégourié-Gonnardb3b205e2014-01-31 12:04:06 +0100222void ctr_drbg_selftest( )
223{
Andres AG93012e82016-09-09 09:10:28 +0100224 TEST_ASSERT( mbedtls_ctr_drbg_self_test( 1 ) == 0 );
Manuel Pégourié-Gonnardb3b205e2014-01-31 12:04:06 +0100225}
226/* END_CASE */