blob: 7dd3d5c39c8f5434372f516d6b2bb334bbafc6c2 [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/ctr_drbg.h"
Mohammad Azim Khan67735d52017-04-06 11:55:43 +01003#include "string.h"
Rich Evans00ab4702015-02-06 13:43:58 +00004
Reut Caspie278b362017-10-19 08:49:19 +01005static int test_offset_idx;
6static int mbedtls_test_entropy_func( void *data, unsigned char *buf, size_t len )
Paul Bakker0e04d0e2011-11-27 14:46:59 +00007{
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +01008 const unsigned char *p = (unsigned char *) data;
Paul Bakker3ddfa662013-11-26 17:45:20 +01009 memcpy( buf, p + test_offset_idx, len );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +010010 test_offset_idx += len;
Paul Bakker0e04d0e2011-11-27 14:46:59 +000011 return( 0 );
12}
Paul Bakker33b43f12013-08-20 11:48:36 +020013/* END_HEADER */
Paul Bakker0e04d0e2011-11-27 14:46:59 +000014
Paul Bakker33b43f12013-08-20 11:48:36 +020015/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020016 * depends_on:MBEDTLS_CTR_DRBG_C
Paul Bakker33b43f12013-08-20 11:48:36 +020017 * END_DEPENDENCIES
18 */
Paul Bakker0e04d0e2011-11-27 14:46:59 +000019
Paul Bakker33b43f12013-08-20 11:48:36 +020020/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +010021void ctr_drbg_special_behaviours( )
Paul Bakker185ccf72016-07-14 13:21:10 +010022{
23 mbedtls_ctr_drbg_context ctx;
24 unsigned char output[512];
25 unsigned char additional[512];
26
27 mbedtls_ctr_drbg_init( &ctx );
28 memset( output, 0, sizeof( output ) );
29 memset( additional, 0, sizeof( additional ) );
30
31 TEST_ASSERT( mbedtls_ctr_drbg_random_with_add( &ctx,
32 output, MBEDTLS_CTR_DRBG_MAX_REQUEST + 1,
33 additional, 16 ) ==
34 MBEDTLS_ERR_CTR_DRBG_REQUEST_TOO_BIG );
35 TEST_ASSERT( mbedtls_ctr_drbg_random_with_add( &ctx,
36 output, 16,
37 additional, MBEDTLS_CTR_DRBG_MAX_INPUT + 1 ) ==
38 MBEDTLS_ERR_CTR_DRBG_INPUT_TOO_BIG );
39
40 TEST_ASSERT( mbedtls_ctr_drbg_reseed( &ctx, additional,
41 MBEDTLS_CTR_DRBG_MAX_SEED_INPUT + 1 ) ==
42 MBEDTLS_ERR_CTR_DRBG_INPUT_TOO_BIG );
Andres Amaya Garcia6a543362017-01-17 23:04:22 +000043
44 mbedtls_ctr_drbg_set_entropy_len( &ctx, ~0 );
45 TEST_ASSERT( mbedtls_ctr_drbg_reseed( &ctx, additional,
46 MBEDTLS_CTR_DRBG_MAX_SEED_INPUT ) ==
47 MBEDTLS_ERR_CTR_DRBG_INPUT_TOO_BIG );
Paul Bakker185ccf72016-07-14 13:21:10 +010048exit:
49 mbedtls_ctr_drbg_free( &ctx );
50}
51/* END_CASE */
52
53/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +010054void ctr_drbg_validate_pr( uint8_t * add_init, uint32_t add_init_len,
55 uint8_t * entropy, uint32_t entropy_len,
56 uint8_t * add1, uint32_t add1_len, uint8_t * add2,
57 uint32_t add2_len, uint8_t * result_str,
58 uint32_t result_str_len )
Paul Bakker0e04d0e2011-11-27 14:46:59 +000059{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020060 mbedtls_ctr_drbg_context ctx;
Paul Bakker0e04d0e2011-11-27 14:46:59 +000061 unsigned char buf[512];
Paul Bakker0e04d0e2011-11-27 14:46:59 +000062
Manuel Pégourié-Gonnard8d128ef2015-04-28 22:38:08 +020063 mbedtls_ctr_drbg_init( &ctx );
Paul Bakker0e04d0e2011-11-27 14:46:59 +000064
Paul Bakker0e04d0e2011-11-27 14:46:59 +000065
Paul Bakker3ddfa662013-11-26 17:45:20 +010066 test_offset_idx = 0;
Reut Caspie278b362017-10-19 08:49:19 +010067 TEST_ASSERT( mbedtls_ctr_drbg_seed_entropy_len( &ctx, mbedtls_test_entropy_func, entropy, add_init, add_init_len, 32 ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020068 mbedtls_ctr_drbg_set_prediction_resistance( &ctx, MBEDTLS_CTR_DRBG_PR_ON );
Paul Bakker0e04d0e2011-11-27 14:46:59 +000069
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020070 TEST_ASSERT( mbedtls_ctr_drbg_random_with_add( &ctx, buf, 16, add1, add1_len ) == 0 );
71 TEST_ASSERT( mbedtls_ctr_drbg_random_with_add( &ctx, buf, 16, add2, add2_len ) == 0 );
Azim Khanf1aaec92017-05-30 14:23:15 +010072 TEST_ASSERT( hexcmp( buf, result_str, 16, result_str_len ) == 0 );
Paul Bakkera317a982014-06-18 16:44:11 +020073
Paul Bakkerbd51b262014-07-10 15:26:12 +020074exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020075 mbedtls_ctr_drbg_free( &ctx );
Paul Bakker0e04d0e2011-11-27 14:46:59 +000076}
Paul Bakker33b43f12013-08-20 11:48:36 +020077/* END_CASE */
Paul Bakker0e04d0e2011-11-27 14:46:59 +000078
Paul Bakker33b43f12013-08-20 11:48:36 +020079/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +010080void ctr_drbg_validate_nopr( uint8_t * add_init, uint32_t add_init_len,
81 uint8_t * entropy, uint32_t entropy_len,
82 uint8_t * add1, uint32_t add1_len,
83 uint8_t * add_reseed, uint32_t add_reseed_len,
84 uint8_t * add2, uint32_t add2_len,
85 uint8_t * result_str, uint32_t result_str_len )
Paul Bakker0e04d0e2011-11-27 14:46:59 +000086{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020087 mbedtls_ctr_drbg_context ctx;
Paul Bakker0e04d0e2011-11-27 14:46:59 +000088 unsigned char buf[512];
Paul Bakker0e04d0e2011-11-27 14:46:59 +000089
Manuel Pégourié-Gonnard8d128ef2015-04-28 22:38:08 +020090 mbedtls_ctr_drbg_init( &ctx );
Paul Bakker0e04d0e2011-11-27 14:46:59 +000091
Paul Bakker0e04d0e2011-11-27 14:46:59 +000092
Paul Bakker3ddfa662013-11-26 17:45:20 +010093 test_offset_idx = 0;
Reut Caspie278b362017-10-19 08:49:19 +010094 TEST_ASSERT( mbedtls_ctr_drbg_seed_entropy_len( &ctx, mbedtls_test_entropy_func, entropy, add_init, add_init_len, 32 ) == 0 );
Paul Bakker0e04d0e2011-11-27 14:46:59 +000095
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020096 TEST_ASSERT( mbedtls_ctr_drbg_random_with_add( &ctx, buf, 16, add1, add1_len ) == 0 );
97 TEST_ASSERT( mbedtls_ctr_drbg_reseed( &ctx, add_reseed, add_reseed_len ) == 0 );
98 TEST_ASSERT( mbedtls_ctr_drbg_random_with_add( &ctx, buf, 16, add2, add2_len ) == 0 );
Azim Khanf1aaec92017-05-30 14:23:15 +010099 TEST_ASSERT( hexcmp( buf, result_str, 16, result_str_len ) == 0 );
Paul Bakkera317a982014-06-18 16:44:11 +0200100
Paul Bakkerbd51b262014-07-10 15:26:12 +0200101exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200102 mbedtls_ctr_drbg_free( &ctx );
Paul Bakker0e04d0e2011-11-27 14:46:59 +0000103}
Paul Bakker33b43f12013-08-20 11:48:36 +0200104/* END_CASE */
Manuel Pégourié-Gonnardb3b205e2014-01-31 12:04:06 +0100105
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100106/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100107void ctr_drbg_entropy_usage( )
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100108{
109 unsigned char out[16];
110 unsigned char add[16];
111 unsigned char entropy[1024];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200112 mbedtls_ctr_drbg_context ctx;
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100113 size_t i, reps = 10;
114 int last_idx;
115
Manuel Pégourié-Gonnard8d128ef2015-04-28 22:38:08 +0200116 mbedtls_ctr_drbg_init( &ctx );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100117 test_offset_idx = 0;
118 memset( entropy, 0, sizeof( entropy ) );
119 memset( out, 0, sizeof( out ) );
120 memset( add, 0, sizeof( add ) );
121
122 /* Init must use entropy */
123 last_idx = test_offset_idx;
Reut Caspie278b362017-10-19 08:49:19 +0100124 TEST_ASSERT( mbedtls_ctr_drbg_seed( &ctx, mbedtls_test_entropy_func, entropy, NULL, 0 ) == 0 );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100125 TEST_ASSERT( last_idx < test_offset_idx );
126
127 /* By default, PR is off and reseed_interval is large,
128 * so the next few calls should not use entropy */
129 last_idx = test_offset_idx;
130 for( i = 0; i < reps; i++ )
131 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200132 TEST_ASSERT( mbedtls_ctr_drbg_random( &ctx, out, sizeof( out ) - 4 ) == 0 );
133 TEST_ASSERT( mbedtls_ctr_drbg_random_with_add( &ctx, out, sizeof( out ) - 4,
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100134 add, sizeof( add ) ) == 0 );
135 }
136 TEST_ASSERT( last_idx == test_offset_idx );
137
138 /* While at it, make sure we didn't write past the requested length */
139 TEST_ASSERT( out[sizeof( out ) - 4] == 0 );
140 TEST_ASSERT( out[sizeof( out ) - 3] == 0 );
141 TEST_ASSERT( out[sizeof( out ) - 2] == 0 );
142 TEST_ASSERT( out[sizeof( out ) - 1] == 0 );
143
144 /* Set reseed_interval to the number of calls done,
145 * so the next call should reseed */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200146 mbedtls_ctr_drbg_set_reseed_interval( &ctx, 2 * reps );
147 TEST_ASSERT( mbedtls_ctr_drbg_random( &ctx, out, sizeof( out ) ) == 0 );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100148 TEST_ASSERT( last_idx < test_offset_idx );
149
150 /* The new few calls should not reseed */
151 last_idx = test_offset_idx;
152 for( i = 0; i < reps / 2; i++ )
153 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200154 TEST_ASSERT( mbedtls_ctr_drbg_random( &ctx, out, sizeof( out ) ) == 0 );
155 TEST_ASSERT( mbedtls_ctr_drbg_random_with_add( &ctx, out, sizeof( out ) ,
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100156 add, sizeof( add ) ) == 0 );
157 }
158 TEST_ASSERT( last_idx == test_offset_idx );
159
Manuel Pégourié-Gonnardf5f25b32014-11-27 14:04:56 +0100160 /* Call update with too much data (sizeof entropy > MAX(_SEED)_INPUT)
161 * (just make sure it doesn't cause memory corruption) */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200162 mbedtls_ctr_drbg_update( &ctx, entropy, sizeof( entropy ) );
Manuel Pégourié-Gonnardf5f25b32014-11-27 14:04:56 +0100163
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100164 /* Now enable PR, so the next few calls should all reseed */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200165 mbedtls_ctr_drbg_set_prediction_resistance( &ctx, MBEDTLS_CTR_DRBG_PR_ON );
166 TEST_ASSERT( mbedtls_ctr_drbg_random( &ctx, out, sizeof( out ) ) == 0 );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100167 TEST_ASSERT( last_idx < test_offset_idx );
168
169 /* Finally, check setting entropy_len */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200170 mbedtls_ctr_drbg_set_entropy_len( &ctx, 42 );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100171 last_idx = test_offset_idx;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200172 TEST_ASSERT( mbedtls_ctr_drbg_random( &ctx, out, sizeof( out ) ) == 0 );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100173 TEST_ASSERT( test_offset_idx - last_idx == 42 );
174
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200175 mbedtls_ctr_drbg_set_entropy_len( &ctx, 13 );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100176 last_idx = test_offset_idx;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200177 TEST_ASSERT( mbedtls_ctr_drbg_random( &ctx, out, sizeof( out ) ) == 0 );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100178 TEST_ASSERT( test_offset_idx - last_idx == 13 );
Paul Bakkera317a982014-06-18 16:44:11 +0200179
Paul Bakkerbd51b262014-07-10 15:26:12 +0200180exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200181 mbedtls_ctr_drbg_free( &ctx );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100182}
183/* END_CASE */
184
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200185/* BEGIN_CASE depends_on:MBEDTLS_FS_IO */
Azim Khanf1aaec92017-05-30 14:23:15 +0100186void ctr_drbg_seed_file( char * path, int ret )
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100187{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200188 mbedtls_ctr_drbg_context ctx;
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100189
Manuel Pégourié-Gonnard8d128ef2015-04-28 22:38:08 +0200190 mbedtls_ctr_drbg_init( &ctx );
191
192 TEST_ASSERT( mbedtls_ctr_drbg_seed( &ctx, rnd_std_rand, NULL, NULL, 0 ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200193 TEST_ASSERT( mbedtls_ctr_drbg_write_seed_file( &ctx, path ) == ret );
194 TEST_ASSERT( mbedtls_ctr_drbg_update_seed_file( &ctx, path ) == ret );
Paul Bakkera317a982014-06-18 16:44:11 +0200195
Paul Bakkerbd51b262014-07-10 15:26:12 +0200196exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200197 mbedtls_ctr_drbg_free( &ctx );
Manuel Pégourié-Gonnard7575daa2014-01-31 12:16:54 +0100198}
199/* END_CASE */
200
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200201/* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST */
Azim Khanf1aaec92017-05-30 14:23:15 +0100202void ctr_drbg_selftest( )
Manuel Pégourié-Gonnardb3b205e2014-01-31 12:04:06 +0100203{
Andres AG93012e82016-09-09 09:10:28 +0100204 TEST_ASSERT( mbedtls_ctr_drbg_self_test( 1 ) == 0 );
Manuel Pégourié-Gonnardb3b205e2014-01-31 12:04:06 +0100205}
206/* END_CASE */