Thomas Fossati | 656864b | 2016-07-17 08:51:22 +0100 | [diff] [blame] | 1 | /* BEGIN_HEADER */ |
| 2 | #include "mbedtls/hkdf.h" |
Jaeden Amero | 10e0e4d | 2018-05-23 19:44:26 +0100 | [diff] [blame] | 3 | #include "mbedtls/md_internal.h" |
Thomas Fossati | 656864b | 2016-07-17 08:51:22 +0100 | [diff] [blame] | 4 | /* END_HEADER */ |
| 5 | |
| 6 | /* BEGIN_DEPENDENCIES |
| 7 | * depends_on:MBEDTLS_HKDF_C |
| 8 | * END_DEPENDENCIES |
| 9 | */ |
| 10 | |
| 11 | /* BEGIN_CASE */ |
| 12 | void test_hkdf( int md_alg, char *hex_ikm_string, char *hex_salt_string, |
| 13 | char *hex_info_string, char *hex_okm_string ) |
| 14 | { |
| 15 | int ret; |
| 16 | size_t ikm_len, salt_len, info_len, okm_len; |
Ron Eldor | 732ccc4 | 2018-11-13 18:59:17 +0200 | [diff] [blame] | 17 | unsigned char ikm[128] = { '\0' }; |
| 18 | unsigned char salt[128] = { '\0' }; |
| 19 | unsigned char info[128] = { '\0' }; |
Ron Eldor | ae3a631 | 2018-11-14 20:22:03 +0200 | [diff] [blame] | 20 | unsigned char expected_okm[128] = { '\0' }; |
| 21 | unsigned char okm[128] = { '\0' }; |
Ron Eldor | 1a3a7e5 | 2019-01-28 15:01:53 +0200 | [diff] [blame] | 22 | /* |
Ron Eldor | bc93219 | 2019-01-28 15:07:55 +0200 | [diff] [blame] | 23 | * okm_hex is the string representation of okm, |
Ron Eldor | 17233f5 | 2019-01-28 15:18:15 +0200 | [diff] [blame] | 24 | * so its size is twice the size of okm, and an extra null-termination. |
Ron Eldor | 1a3a7e5 | 2019-01-28 15:01:53 +0200 | [diff] [blame] | 25 | */ |
Ron Eldor | 17233f5 | 2019-01-28 15:18:15 +0200 | [diff] [blame] | 26 | unsigned char okm_hex[257] = { '\0' }; |
Thomas Fossati | 656864b | 2016-07-17 08:51:22 +0100 | [diff] [blame] | 27 | |
| 28 | const mbedtls_md_info_t *md = mbedtls_md_info_from_type( md_alg ); |
| 29 | TEST_ASSERT( md != NULL ); |
| 30 | |
Ronald Cron | 72d628f | 2020-06-08 17:05:57 +0200 | [diff] [blame] | 31 | ikm_len = mbedtls_test_unhexify( ikm, hex_ikm_string ); |
| 32 | salt_len = mbedtls_test_unhexify( salt, hex_salt_string ); |
| 33 | info_len = mbedtls_test_unhexify( info, hex_info_string ); |
| 34 | okm_len = mbedtls_test_unhexify( expected_okm, hex_okm_string ); |
Thomas Fossati | 656864b | 2016-07-17 08:51:22 +0100 | [diff] [blame] | 35 | |
| 36 | ret = mbedtls_hkdf( md, salt, salt_len, ikm, ikm_len, info, info_len, okm, |
| 37 | okm_len); |
| 38 | TEST_ASSERT( ret == 0 ); |
| 39 | |
Ronald Cron | ff31eab | 2020-06-08 17:20:59 +0200 | [diff] [blame^] | 40 | /* |
| 41 | * Run mbedtls_test_hexify on it so that it looks nicer if the assertion |
| 42 | * fails. |
| 43 | */ |
Ronald Cron | 72d628f | 2020-06-08 17:05:57 +0200 | [diff] [blame] | 44 | mbedtls_test_hexify( okm_hex, okm, okm_len ); |
Ron Eldor | bc93219 | 2019-01-28 15:07:55 +0200 | [diff] [blame] | 45 | TEST_ASSERT( !strcmp( (char *)okm_hex, hex_okm_string ) ); |
Thomas Fossati | 656864b | 2016-07-17 08:51:22 +0100 | [diff] [blame] | 46 | } |
| 47 | /* END_CASE */ |
Jaeden Amero | 3618962 | 2018-05-23 18:55:47 +0100 | [diff] [blame] | 48 | |
| 49 | /* BEGIN_CASE */ |
| 50 | void test_hkdf_extract( int md_alg, char *hex_ikm_string, |
| 51 | char *hex_salt_string, char *hex_prk_string ) |
| 52 | { |
| 53 | int ret; |
| 54 | unsigned char *ikm = NULL; |
| 55 | unsigned char *salt = NULL; |
| 56 | unsigned char *prk = NULL; |
| 57 | unsigned char *output_prk = NULL; |
| 58 | size_t ikm_len, salt_len, prk_len, output_prk_len; |
| 59 | |
| 60 | const mbedtls_md_info_t *md = mbedtls_md_info_from_type( md_alg ); |
| 61 | TEST_ASSERT( md != NULL ); |
| 62 | |
| 63 | output_prk_len = mbedtls_md_get_size( md ); |
| 64 | output_prk = mbedtls_calloc( 1, output_prk_len ); |
| 65 | |
| 66 | ikm = unhexify_alloc( hex_ikm_string, &ikm_len ); |
| 67 | salt = unhexify_alloc( hex_salt_string, &salt_len ); |
| 68 | prk = unhexify_alloc( hex_prk_string, &prk_len ); |
| 69 | TEST_ASSERT( prk_len == output_prk_len ); |
| 70 | |
| 71 | ret = mbedtls_hkdf_extract( md, salt, salt_len, ikm, ikm_len, output_prk ); |
| 72 | TEST_ASSERT( ret == 0 ); |
| 73 | |
| 74 | TEST_ASSERT( !memcmp( output_prk, prk, prk_len ) ); |
| 75 | |
| 76 | exit: |
| 77 | mbedtls_free(ikm); |
| 78 | mbedtls_free(salt); |
| 79 | mbedtls_free(prk); |
| 80 | mbedtls_free(output_prk); |
| 81 | } |
| 82 | /* END_CASE */ |
| 83 | |
| 84 | /* BEGIN_CASE */ |
| 85 | void test_hkdf_expand( int md_alg, char *hex_info_string, |
| 86 | char *hex_prk_string, char *hex_okm_string ) |
| 87 | { |
| 88 | enum { OKM_LEN = 1024 }; |
| 89 | int ret; |
| 90 | unsigned char *info = NULL; |
| 91 | unsigned char *prk = NULL; |
| 92 | unsigned char *okm = NULL; |
| 93 | unsigned char *output_okm = NULL; |
| 94 | size_t info_len, prk_len, okm_len; |
| 95 | |
| 96 | const mbedtls_md_info_t *md = mbedtls_md_info_from_type( md_alg ); |
| 97 | TEST_ASSERT( md != NULL ); |
| 98 | |
| 99 | output_okm = mbedtls_calloc( OKM_LEN, 1 ); |
| 100 | |
| 101 | prk = unhexify_alloc( hex_prk_string, &prk_len ); |
| 102 | info = unhexify_alloc( hex_info_string, &info_len ); |
| 103 | okm = unhexify_alloc( hex_okm_string, &okm_len ); |
| 104 | TEST_ASSERT( prk_len == mbedtls_md_get_size( md ) ); |
| 105 | TEST_ASSERT( okm_len < OKM_LEN ); |
| 106 | |
| 107 | ret = mbedtls_hkdf_expand( md, prk, prk_len, info, info_len, |
| 108 | output_okm, OKM_LEN ); |
| 109 | TEST_ASSERT( ret == 0 ); |
| 110 | TEST_ASSERT( !memcmp( output_okm, okm, okm_len ) ); |
| 111 | |
| 112 | exit: |
| 113 | mbedtls_free(info); |
| 114 | mbedtls_free(prk); |
| 115 | mbedtls_free(okm); |
| 116 | mbedtls_free(output_okm); |
| 117 | } |
| 118 | /* END_CASE */ |
Jaeden Amero | 10e0e4d | 2018-05-23 19:44:26 +0100 | [diff] [blame] | 119 | |
| 120 | /* BEGIN_CASE */ |
| 121 | void test_hkdf_extract_ret( int hash_len, int ret ) |
| 122 | { |
| 123 | int output_ret; |
| 124 | unsigned char *salt = NULL; |
| 125 | unsigned char *ikm = NULL; |
| 126 | unsigned char *prk = NULL; |
| 127 | size_t salt_len, ikm_len; |
| 128 | struct mbedtls_md_info_t fake_md_info; |
| 129 | |
| 130 | memset( &fake_md_info, 0, sizeof( fake_md_info ) ); |
| 131 | fake_md_info.type = MBEDTLS_MD_NONE; |
| 132 | fake_md_info.size = hash_len; |
| 133 | |
| 134 | prk = mbedtls_calloc( MBEDTLS_MD_MAX_SIZE, 1 ); |
| 135 | salt_len = 0; |
| 136 | ikm_len = 0; |
| 137 | |
| 138 | output_ret = mbedtls_hkdf_extract( &fake_md_info, salt, salt_len, |
| 139 | ikm, ikm_len, prk ); |
| 140 | TEST_ASSERT( output_ret == ret ); |
| 141 | |
| 142 | exit: |
| 143 | mbedtls_free(prk); |
| 144 | } |
| 145 | /* END_CASE */ |
| 146 | |
| 147 | /* BEGIN_CASE */ |
| 148 | void test_hkdf_expand_ret( int hash_len, int prk_len, int okm_len, int ret ) |
| 149 | { |
| 150 | int output_ret; |
| 151 | unsigned char *info = NULL; |
| 152 | unsigned char *prk = NULL; |
| 153 | unsigned char *okm = NULL; |
| 154 | size_t info_len; |
| 155 | struct mbedtls_md_info_t fake_md_info; |
| 156 | |
| 157 | memset( &fake_md_info, 0, sizeof( fake_md_info ) ); |
| 158 | fake_md_info.type = MBEDTLS_MD_NONE; |
| 159 | fake_md_info.size = hash_len; |
| 160 | |
| 161 | info_len = 0; |
| 162 | |
| 163 | if (prk_len > 0) |
| 164 | prk = mbedtls_calloc( prk_len, 1 ); |
| 165 | |
| 166 | if (okm_len > 0) |
| 167 | okm = mbedtls_calloc( okm_len, 1 ); |
| 168 | |
| 169 | output_ret = mbedtls_hkdf_expand( &fake_md_info, prk, prk_len, |
| 170 | info, info_len, okm, okm_len ); |
| 171 | TEST_ASSERT( output_ret == ret ); |
| 172 | |
| 173 | exit: |
| 174 | mbedtls_free(prk); |
| 175 | mbedtls_free(okm); |
| 176 | } |
| 177 | /* END_CASE */ |