Nayna Jain | c9deb18 | 2020-11-16 19:03:12 +0000 | [diff] [blame] | 1 | /* BEGIN_HEADER */ |
| 2 | #include "mbedtls/bignum.h" |
| 3 | #include "mbedtls/pkcs7.h" |
| 4 | #include "mbedtls/x509.h" |
| 5 | #include "mbedtls/x509_crt.h" |
| 6 | #include "mbedtls/x509_crl.h" |
| 7 | #include "mbedtls/oid.h" |
| 8 | #include "sys/types.h" |
| 9 | #include "sys/stat.h" |
| 10 | /* END_HEADER */ |
| 11 | |
| 12 | /* BEGIN_DEPENDENCIES |
Dave Rodgman | 2364aae | 2022-11-04 11:33:04 +0000 | [diff] [blame] | 13 | * depends_on:MBEDTLS_PKCS7_C:MBEDTLS_RSA_C |
Nayna Jain | c9deb18 | 2020-11-16 19:03:12 +0000 | [diff] [blame] | 14 | * END_DEPENDENCIES |
| 15 | */ |
Nick Child | b781770 | 2022-12-12 15:49:35 -0600 | [diff] [blame] | 16 | /* BEGIN_SUITE_HELPERS */ |
| 17 | int pkcs7_parse_buffer(unsigned char *pkcs7_buf, int buflen) |
| 18 | { |
| 19 | int res; |
| 20 | mbedtls_pkcs7 pkcs7; |
| 21 | |
| 22 | mbedtls_pkcs7_init(&pkcs7); |
| 23 | res = mbedtls_pkcs7_parse_der(&pkcs7, pkcs7_buf, buflen); |
| 24 | mbedtls_pkcs7_free(&pkcs7); |
| 25 | return res; |
| 26 | } |
| 27 | /* END_SUITE_HELPERS */ |
Nayna Jain | c9deb18 | 2020-11-16 19:03:12 +0000 | [diff] [blame] | 28 | |
Nick Child | 4983ddf | 2022-12-14 15:04:40 -0600 | [diff] [blame] | 29 | /* BEGIN_CASE */ |
| 30 | void pkcs7_asn1_fail(data_t *pkcs7_buf) |
| 31 | { |
| 32 | int res; |
| 33 | res = pkcs7_parse_buffer(pkcs7_buf->x, pkcs7_buf->len); |
| 34 | TEST_ASSERT(res != MBEDTLS_PKCS7_SIGNED_DATA); |
| 35 | |
| 36 | } |
| 37 | /* END_CASE */ |
| 38 | |
Nick Child | 45525d3 | 2022-02-25 11:54:34 -0600 | [diff] [blame] | 39 | /* BEGIN_CASE depends_on:MBEDTLS_FS_IO */ |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 40 | void pkcs7_parse(char *pkcs7_file, int res_expect) |
Nayna Jain | c9deb18 | 2020-11-16 19:03:12 +0000 | [diff] [blame] | 41 | { |
| 42 | unsigned char *pkcs7_buf = NULL; |
| 43 | size_t buflen; |
| 44 | int res; |
| 45 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 46 | res = mbedtls_pk_load_file(pkcs7_file, &pkcs7_buf, &buflen); |
| 47 | TEST_EQUAL(res, 0); |
Nayna Jain | c9deb18 | 2020-11-16 19:03:12 +0000 | [diff] [blame] | 48 | |
Nick Child | b781770 | 2022-12-12 15:49:35 -0600 | [diff] [blame] | 49 | res = pkcs7_parse_buffer(pkcs7_buf, buflen); |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 50 | TEST_EQUAL(res, res_expect); |
Nayna Jain | c9deb18 | 2020-11-16 19:03:12 +0000 | [diff] [blame] | 51 | |
| 52 | exit: |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 53 | mbedtls_free(pkcs7_buf); |
Nayna Jain | c9deb18 | 2020-11-16 19:03:12 +0000 | [diff] [blame] | 54 | } |
| 55 | /* END_CASE */ |
| 56 | |
Nick Child | 45525d3 | 2022-02-25 11:54:34 -0600 | [diff] [blame] | 57 | /* BEGIN_CASE depends_on:MBEDTLS_FS_IO:MBEDTLS_X509_CRT_PARSE_C:MBEDTLS_PKCS1_V15:MBEDTLS_RSA_C */ |
Nick Child | c547447 | 2023-01-27 21:06:39 +0000 | [diff] [blame] | 58 | void pkcs7_verify(char *pkcs7_file, |
| 59 | char *crt_files, |
| 60 | char *filetobesigned, |
| 61 | int do_hash_alg, |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 62 | int res_expect) |
Nayna Jain | c9deb18 | 2020-11-16 19:03:12 +0000 | [diff] [blame] | 63 | { |
| 64 | unsigned char *pkcs7_buf = NULL; |
Nick Child | c547447 | 2023-01-27 21:06:39 +0000 | [diff] [blame] | 65 | size_t buflen, i, k, cnt = 0, n_crts = 1; |
Nayna Jain | c9deb18 | 2020-11-16 19:03:12 +0000 | [diff] [blame] | 66 | unsigned char *data = NULL; |
Nick Child | c547447 | 2023-01-27 21:06:39 +0000 | [diff] [blame] | 67 | char **crt_files_arr = NULL; |
Nick Child | 951f700 | 2023-01-30 16:35:58 +0000 | [diff] [blame^] | 68 | unsigned char *hash = NULL; |
Nayna Jain | c9deb18 | 2020-11-16 19:03:12 +0000 | [diff] [blame] | 69 | struct stat st; |
| 70 | size_t datalen; |
| 71 | int res; |
| 72 | FILE *file; |
| 73 | const mbedtls_md_info_t *md_info; |
Nayna Jain | c9deb18 | 2020-11-16 19:03:12 +0000 | [diff] [blame] | 74 | mbedtls_pkcs7 pkcs7; |
Nick Child | c547447 | 2023-01-27 21:06:39 +0000 | [diff] [blame] | 75 | mbedtls_x509_crt **crts = NULL; |
Nayna Jain | c9deb18 | 2020-11-16 19:03:12 +0000 | [diff] [blame] | 76 | |
Nayna Jain | c9deb18 | 2020-11-16 19:03:12 +0000 | [diff] [blame] | 77 | |
Nick Child | c547447 | 2023-01-27 21:06:39 +0000 | [diff] [blame] | 78 | /* crt_files are space seprated list */ |
| 79 | for (i = 0; i < strlen(crt_files); i++) { |
| 80 | if (crt_files[i] == ' ') { |
| 81 | n_crts++; |
| 82 | } |
Nick Child | 8a94de4 | 2022-09-14 10:51:51 -0500 | [diff] [blame] | 83 | } |
Nayna Jain | c9deb18 | 2020-11-16 19:03:12 +0000 | [diff] [blame] | 84 | |
Nick Child | c547447 | 2023-01-27 21:06:39 +0000 | [diff] [blame] | 85 | ASSERT_ALLOC(crts, sizeof(*crts)*n_crts); |
| 86 | ASSERT_ALLOC(crt_files_arr, sizeof(*crt_files_arr)*n_crts); |
Nayna Jain | c9deb18 | 2020-11-16 19:03:12 +0000 | [diff] [blame] | 87 | |
Nick Child | c547447 | 2023-01-27 21:06:39 +0000 | [diff] [blame] | 88 | for (i = 0; i < strlen(crt_files); i++) { |
| 89 | for (k = i; k < strlen(crt_files); k++) { |
| 90 | if (crt_files[k] == ' ') { |
| 91 | break; |
| 92 | } |
| 93 | } |
| 94 | ASSERT_ALLOC(crt_files_arr[cnt], (k-i)+1); |
| 95 | crt_files_arr[cnt][k-i] = '\0'; |
| 96 | memcpy(crt_files_arr[cnt++], crt_files + i, k-i); |
| 97 | i = k; |
| 98 | } |
Nick Child | 62b2d7e | 2022-07-14 16:24:59 -0500 | [diff] [blame] | 99 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 100 | mbedtls_pkcs7_init(&pkcs7); |
Nick Child | c547447 | 2023-01-27 21:06:39 +0000 | [diff] [blame] | 101 | for (i = 0; i < n_crts; i++) { |
| 102 | ASSERT_ALLOC(crts[i], sizeof(*crts[i])); |
| 103 | mbedtls_x509_crt_init(crts[i]); |
| 104 | } |
Nick Child | 62b2d7e | 2022-07-14 16:24:59 -0500 | [diff] [blame] | 105 | |
Gilles Peskine | 391005c | 2022-11-27 21:32:37 +0100 | [diff] [blame] | 106 | USE_PSA_INIT(); |
| 107 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 108 | res = mbedtls_pk_load_file(pkcs7_file, &pkcs7_buf, &buflen); |
| 109 | TEST_EQUAL(res, 0); |
Nick Child | 62b2d7e | 2022-07-14 16:24:59 -0500 | [diff] [blame] | 110 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 111 | res = mbedtls_pkcs7_parse_der(&pkcs7, pkcs7_buf, buflen); |
| 112 | TEST_EQUAL(res, MBEDTLS_PKCS7_SIGNED_DATA); |
Nick Child | 62b2d7e | 2022-07-14 16:24:59 -0500 | [diff] [blame] | 113 | |
Nick Child | c547447 | 2023-01-27 21:06:39 +0000 | [diff] [blame] | 114 | TEST_EQUAL(pkcs7.signed_data.no_of_signers, n_crts); |
Nick Child | 62b2d7e | 2022-07-14 16:24:59 -0500 | [diff] [blame] | 115 | |
Nick Child | c547447 | 2023-01-27 21:06:39 +0000 | [diff] [blame] | 116 | for (i = 0; i < n_crts; i++) { |
| 117 | res = mbedtls_x509_crt_parse_file(crts[i], crt_files_arr[i]); |
| 118 | TEST_EQUAL(res, 0); |
| 119 | } |
Nick Child | 62b2d7e | 2022-07-14 16:24:59 -0500 | [diff] [blame] | 120 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 121 | res = stat(filetobesigned, &st); |
| 122 | TEST_EQUAL(res, 0); |
Nick Child | 62b2d7e | 2022-07-14 16:24:59 -0500 | [diff] [blame] | 123 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 124 | file = fopen(filetobesigned, "rb"); |
| 125 | TEST_ASSERT(file != NULL); |
Nick Child | 62b2d7e | 2022-07-14 16:24:59 -0500 | [diff] [blame] | 126 | |
| 127 | datalen = st.st_size; |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 128 | ASSERT_ALLOC(data, datalen); |
| 129 | buflen = fread((void *) data, sizeof(unsigned char), datalen, file); |
| 130 | TEST_EQUAL(buflen, datalen); |
Nick Child | 62b2d7e | 2022-07-14 16:24:59 -0500 | [diff] [blame] | 131 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 132 | fclose(file); |
Nick Child | 62b2d7e | 2022-07-14 16:24:59 -0500 | [diff] [blame] | 133 | |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 134 | if (do_hash_alg) { |
Nick Child | ff2746f | 2022-12-15 13:06:21 -0600 | [diff] [blame] | 135 | md_info = mbedtls_md_info_from_type((mbedtls_md_type_t) do_hash_alg); |
Nick Child | 951f700 | 2023-01-30 16:35:58 +0000 | [diff] [blame^] | 136 | ASSERT_ALLOC(hash, mbedtls_md_get_size(md_info)); |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 137 | res = mbedtls_md(md_info, data, datalen, hash); |
| 138 | TEST_EQUAL(res, 0); |
Nick Child | 62b2d7e | 2022-07-14 16:24:59 -0500 | [diff] [blame] | 139 | |
Nick Child | c547447 | 2023-01-27 21:06:39 +0000 | [diff] [blame] | 140 | for (i = 0; i < n_crts; i++) { |
| 141 | res = |
| 142 | mbedtls_pkcs7_signed_hash_verify(&pkcs7, crts[i], hash, |
| 143 | mbedtls_md_get_size(md_info)); |
| 144 | TEST_EQUAL(res, res_expect); |
| 145 | } |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 146 | } else { |
Nick Child | c547447 | 2023-01-27 21:06:39 +0000 | [diff] [blame] | 147 | for (i = 0; i < n_crts; i++) { |
| 148 | res = mbedtls_pkcs7_signed_data_verify(&pkcs7, crts[i], data, datalen); |
| 149 | TEST_EQUAL(res, res_expect); |
| 150 | } |
Nick Child | 8a94de4 | 2022-09-14 10:51:51 -0500 | [diff] [blame] | 151 | } |
Nick Child | 62b2d7e | 2022-07-14 16:24:59 -0500 | [diff] [blame] | 152 | |
Nick Child | 62b2d7e | 2022-07-14 16:24:59 -0500 | [diff] [blame] | 153 | exit: |
Nick Child | c547447 | 2023-01-27 21:06:39 +0000 | [diff] [blame] | 154 | for (i = 0; i < n_crts; i++) { |
| 155 | mbedtls_x509_crt_free(crts[i]); |
| 156 | mbedtls_free(crts[i]); |
| 157 | mbedtls_free(crt_files_arr[i]); |
| 158 | } |
Nick Child | 951f700 | 2023-01-30 16:35:58 +0000 | [diff] [blame^] | 159 | mbedtls_free(hash); |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 160 | mbedtls_pkcs7_free(&pkcs7); |
Nick Child | c547447 | 2023-01-27 21:06:39 +0000 | [diff] [blame] | 161 | mbedtls_free(crt_files_arr); |
| 162 | mbedtls_free(crts); |
Gilles Peskine | 449bd83 | 2023-01-11 14:50:10 +0100 | [diff] [blame] | 163 | mbedtls_free(data); |
| 164 | mbedtls_free(pkcs7_buf); |
Nick Child | 62b2d7e | 2022-07-14 16:24:59 -0500 | [diff] [blame] | 165 | USE_PSA_DONE(); |
| 166 | } |
| 167 | /* END_CASE */ |