blob: 9781e7f2803c4fb1d3265404e56ff3f6013eba71 [file] [log] [blame]
Thomas Fossati656864b2016-07-17 08:51:22 +01001/* BEGIN_HEADER */
2#include "mbedtls/hkdf.h"
Jaeden Amero10e0e4d2018-05-23 19:44:26 +01003#include "mbedtls/md_internal.h"
Thomas Fossati656864b2016-07-17 08:51:22 +01004/* END_HEADER */
5
6/* BEGIN_DEPENDENCIES
7 * depends_on:MBEDTLS_HKDF_C
8 * END_DEPENDENCIES
9 */
10
11/* BEGIN_CASE */
12void test_hkdf( int md_alg, char *hex_ikm_string, char *hex_salt_string,
13 char *hex_info_string, char *hex_okm_string )
14{
15 int ret;
16 size_t ikm_len, salt_len, info_len, okm_len;
Ron Eldor732ccc42018-11-13 18:59:17 +020017 unsigned char ikm[128] = { '\0' };
18 unsigned char salt[128] = { '\0' };
19 unsigned char info[128] = { '\0' };
Ron Eldorae3a6312018-11-14 20:22:03 +020020 unsigned char expected_okm[128] = { '\0' };
21 unsigned char okm[128] = { '\0' };
Ron Eldor1a3a7e52019-01-28 15:01:53 +020022 /*
Ron Eldorbc932192019-01-28 15:07:55 +020023 * okm_hex is the string representation of okm,
Ron Eldor17233f52019-01-28 15:18:15 +020024 * so its size is twice the size of okm, and an extra null-termination.
Ron Eldor1a3a7e52019-01-28 15:01:53 +020025 */
Ron Eldor17233f52019-01-28 15:18:15 +020026 unsigned char okm_hex[257] = { '\0' };
Thomas Fossati656864b2016-07-17 08:51:22 +010027
28 const mbedtls_md_info_t *md = mbedtls_md_info_from_type( md_alg );
29 TEST_ASSERT( md != NULL );
30
Ronald Cron72d628f2020-06-08 17:05:57 +020031 ikm_len = mbedtls_test_unhexify( ikm, hex_ikm_string );
32 salt_len = mbedtls_test_unhexify( salt, hex_salt_string );
33 info_len = mbedtls_test_unhexify( info, hex_info_string );
34 okm_len = mbedtls_test_unhexify( expected_okm, hex_okm_string );
Thomas Fossati656864b2016-07-17 08:51:22 +010035
36 ret = mbedtls_hkdf( md, salt, salt_len, ikm, ikm_len, info, info_len, okm,
37 okm_len);
38 TEST_ASSERT( ret == 0 );
39
Ronald Cronff31eab2020-06-08 17:20:59 +020040 /*
41 * Run mbedtls_test_hexify on it so that it looks nicer if the assertion
42 * fails.
43 */
Ronald Cron72d628f2020-06-08 17:05:57 +020044 mbedtls_test_hexify( okm_hex, okm, okm_len );
Ron Eldorbc932192019-01-28 15:07:55 +020045 TEST_ASSERT( !strcmp( (char *)okm_hex, hex_okm_string ) );
Thomas Fossati656864b2016-07-17 08:51:22 +010046}
47/* END_CASE */
Jaeden Amero36189622018-05-23 18:55:47 +010048
49/* BEGIN_CASE */
50void test_hkdf_extract( int md_alg, char *hex_ikm_string,
51 char *hex_salt_string, char *hex_prk_string )
52{
53 int ret;
54 unsigned char *ikm = NULL;
55 unsigned char *salt = NULL;
56 unsigned char *prk = NULL;
57 unsigned char *output_prk = NULL;
58 size_t ikm_len, salt_len, prk_len, output_prk_len;
59
60 const mbedtls_md_info_t *md = mbedtls_md_info_from_type( md_alg );
61 TEST_ASSERT( md != NULL );
62
63 output_prk_len = mbedtls_md_get_size( md );
64 output_prk = mbedtls_calloc( 1, output_prk_len );
65
66 ikm = unhexify_alloc( hex_ikm_string, &ikm_len );
67 salt = unhexify_alloc( hex_salt_string, &salt_len );
68 prk = unhexify_alloc( hex_prk_string, &prk_len );
69 TEST_ASSERT( prk_len == output_prk_len );
70
71 ret = mbedtls_hkdf_extract( md, salt, salt_len, ikm, ikm_len, output_prk );
72 TEST_ASSERT( ret == 0 );
73
74 TEST_ASSERT( !memcmp( output_prk, prk, prk_len ) );
75
76exit:
77 mbedtls_free(ikm);
78 mbedtls_free(salt);
79 mbedtls_free(prk);
80 mbedtls_free(output_prk);
81}
82/* END_CASE */
83
84/* BEGIN_CASE */
85void test_hkdf_expand( int md_alg, char *hex_info_string,
86 char *hex_prk_string, char *hex_okm_string )
87{
88 enum { OKM_LEN = 1024 };
89 int ret;
90 unsigned char *info = NULL;
91 unsigned char *prk = NULL;
92 unsigned char *okm = NULL;
93 unsigned char *output_okm = NULL;
94 size_t info_len, prk_len, okm_len;
95
96 const mbedtls_md_info_t *md = mbedtls_md_info_from_type( md_alg );
97 TEST_ASSERT( md != NULL );
98
99 output_okm = mbedtls_calloc( OKM_LEN, 1 );
100
101 prk = unhexify_alloc( hex_prk_string, &prk_len );
102 info = unhexify_alloc( hex_info_string, &info_len );
103 okm = unhexify_alloc( hex_okm_string, &okm_len );
104 TEST_ASSERT( prk_len == mbedtls_md_get_size( md ) );
105 TEST_ASSERT( okm_len < OKM_LEN );
106
107 ret = mbedtls_hkdf_expand( md, prk, prk_len, info, info_len,
108 output_okm, OKM_LEN );
109 TEST_ASSERT( ret == 0 );
110 TEST_ASSERT( !memcmp( output_okm, okm, okm_len ) );
111
112exit:
113 mbedtls_free(info);
114 mbedtls_free(prk);
115 mbedtls_free(okm);
116 mbedtls_free(output_okm);
117}
118/* END_CASE */
Jaeden Amero10e0e4d2018-05-23 19:44:26 +0100119
120/* BEGIN_CASE */
121void test_hkdf_extract_ret( int hash_len, int ret )
122{
123 int output_ret;
124 unsigned char *salt = NULL;
125 unsigned char *ikm = NULL;
126 unsigned char *prk = NULL;
127 size_t salt_len, ikm_len;
128 struct mbedtls_md_info_t fake_md_info;
129
130 memset( &fake_md_info, 0, sizeof( fake_md_info ) );
131 fake_md_info.type = MBEDTLS_MD_NONE;
132 fake_md_info.size = hash_len;
133
134 prk = mbedtls_calloc( MBEDTLS_MD_MAX_SIZE, 1 );
135 salt_len = 0;
136 ikm_len = 0;
137
138 output_ret = mbedtls_hkdf_extract( &fake_md_info, salt, salt_len,
139 ikm, ikm_len, prk );
140 TEST_ASSERT( output_ret == ret );
141
142exit:
143 mbedtls_free(prk);
144}
145/* END_CASE */
146
147/* BEGIN_CASE */
148void test_hkdf_expand_ret( int hash_len, int prk_len, int okm_len, int ret )
149{
150 int output_ret;
151 unsigned char *info = NULL;
152 unsigned char *prk = NULL;
153 unsigned char *okm = NULL;
154 size_t info_len;
155 struct mbedtls_md_info_t fake_md_info;
156
157 memset( &fake_md_info, 0, sizeof( fake_md_info ) );
158 fake_md_info.type = MBEDTLS_MD_NONE;
159 fake_md_info.size = hash_len;
160
161 info_len = 0;
162
163 if (prk_len > 0)
164 prk = mbedtls_calloc( prk_len, 1 );
165
166 if (okm_len > 0)
167 okm = mbedtls_calloc( okm_len, 1 );
168
169 output_ret = mbedtls_hkdf_expand( &fake_md_info, prk, prk_len,
170 info, info_len, okm, okm_len );
171 TEST_ASSERT( output_ret == ret );
172
173exit:
174 mbedtls_free(prk);
175 mbedtls_free(okm);
176}
177/* END_CASE */