mirror of
https://github.com/Mbed-TLS/mbedtls.git
synced 2026-03-24 21:21:10 +01:00
955a0bb18f
Cases where radix was explictly declared are removed in most cases, replaced using script. bignum arguments are represented as hexadecimal strings. This reduces clutter in test data and makes bit patterns clearer. Signed-off-by: Werner Lewis <werner.lewis@arm.com>
355 lines
14 KiB
C
355 lines
14 KiB
C
/* BEGIN_HEADER */
|
|
#include "mbedtls/dhm.h"
|
|
|
|
/* Sanity checks on a Diffie-Hellman parameter: check the length-value
|
|
* syntax and check that the value is the expected one (taken from the
|
|
* DHM context by the caller). */
|
|
static int check_dhm_param_output( const mbedtls_mpi *expected,
|
|
const unsigned char *buffer,
|
|
size_t size,
|
|
size_t *offset )
|
|
{
|
|
size_t n;
|
|
mbedtls_mpi actual;
|
|
int ok = 0;
|
|
mbedtls_mpi_init( &actual );
|
|
|
|
++mbedtls_test_info.step;
|
|
|
|
TEST_ASSERT( size >= *offset + 2 );
|
|
n = ( buffer[*offset] << 8 ) | buffer[*offset + 1];
|
|
*offset += 2;
|
|
/* The DHM param output from Mbed TLS has leading zeros stripped, as
|
|
* permitted but not required by RFC 5246 \S4.4. */
|
|
TEST_EQUAL( n, mbedtls_mpi_size( expected ) );
|
|
TEST_ASSERT( size >= *offset + n );
|
|
TEST_EQUAL( 0, mbedtls_mpi_read_binary( &actual, buffer + *offset, n ) );
|
|
TEST_EQUAL( 0, mbedtls_mpi_cmp_mpi( expected, &actual ) );
|
|
*offset += n;
|
|
|
|
ok = 1;
|
|
exit:
|
|
mbedtls_mpi_free( &actual );
|
|
return( ok );
|
|
}
|
|
|
|
/* Sanity checks on Diffie-Hellman parameters: syntax, range, and comparison
|
|
* against the context. */
|
|
static int check_dhm_params( const mbedtls_dhm_context *ctx,
|
|
size_t x_size,
|
|
const unsigned char *ske, size_t ske_len )
|
|
{
|
|
size_t offset = 0;
|
|
|
|
/* Check that ctx->X and ctx->GX are within range. */
|
|
TEST_ASSERT( mbedtls_mpi_cmp_int( &ctx->X, 1 ) > 0 );
|
|
TEST_ASSERT( mbedtls_mpi_cmp_mpi( &ctx->X, &ctx->P ) < 0 );
|
|
TEST_ASSERT( mbedtls_mpi_size( &ctx->X ) <= x_size );
|
|
TEST_ASSERT( mbedtls_mpi_cmp_int( &ctx->GX, 1 ) > 0 );
|
|
TEST_ASSERT( mbedtls_mpi_cmp_mpi( &ctx->GX, &ctx->P ) < 0 );
|
|
|
|
/* Check ske: it must contain P, G and G^X, each prefixed with a
|
|
* 2-byte size. */
|
|
if( !check_dhm_param_output( &ctx->P, ske, ske_len, &offset ) )
|
|
goto exit;
|
|
if( !check_dhm_param_output( &ctx->G, ske, ske_len, &offset ) )
|
|
goto exit;
|
|
if( !check_dhm_param_output( &ctx->GX, ske, ske_len, &offset ) )
|
|
goto exit;
|
|
TEST_EQUAL( offset, ske_len );
|
|
|
|
return( 1 );
|
|
exit:
|
|
return( 0 );
|
|
}
|
|
|
|
/* END_HEADER */
|
|
|
|
/* BEGIN_DEPENDENCIES
|
|
* depends_on:MBEDTLS_DHM_C:MBEDTLS_BIGNUM_C
|
|
* END_DEPENDENCIES
|
|
*/
|
|
|
|
/* BEGIN_CASE depends_on:MBEDTLS_CHECK_PARAMS:!MBEDTLS_PARAM_FAILED_ALT */
|
|
void dhm_invalid_params( )
|
|
{
|
|
mbedtls_dhm_context ctx;
|
|
unsigned char buf[42] = { 0 };
|
|
unsigned char *buf_null = NULL;
|
|
mbedtls_mpi X;
|
|
size_t const buflen = sizeof( buf );
|
|
size_t len;
|
|
|
|
TEST_INVALID_PARAM( mbedtls_dhm_init( NULL ) );
|
|
TEST_VALID_PARAM( mbedtls_dhm_free( NULL ) );
|
|
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_read_params( NULL,
|
|
(unsigned char**) &buf,
|
|
buf ) );
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_read_params( &ctx, &buf_null, buf ) );
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_read_params( &ctx, NULL, buf ) );
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_read_params( &ctx,
|
|
(unsigned char**) &buf,
|
|
NULL ) );
|
|
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_make_params( NULL, buflen,
|
|
buf, &len,
|
|
mbedtls_test_rnd_std_rand,
|
|
NULL ) );
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_make_params( &ctx, buflen,
|
|
NULL, &len,
|
|
mbedtls_test_rnd_std_rand,
|
|
NULL ) );
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_make_params( &ctx, buflen,
|
|
buf, NULL,
|
|
mbedtls_test_rnd_std_rand,
|
|
NULL ) );
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_make_params( &ctx, buflen,
|
|
buf, &len,
|
|
NULL,
|
|
NULL ) );
|
|
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_set_group( NULL, &X, &X ) );
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_set_group( &ctx, NULL, &X ) );
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_set_group( &ctx, &X, NULL ) );
|
|
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_read_public( NULL, buf, buflen ) );
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_read_public( &ctx, NULL, buflen ) );
|
|
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_make_public( NULL, buflen,
|
|
buf, buflen,
|
|
mbedtls_test_rnd_std_rand,
|
|
NULL ) );
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_make_public( &ctx, buflen,
|
|
NULL, buflen,
|
|
mbedtls_test_rnd_std_rand,
|
|
NULL ) );
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_make_public( &ctx, buflen,
|
|
buf, buflen,
|
|
NULL,
|
|
NULL ) );
|
|
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_calc_secret( NULL, buf, buflen, &len,
|
|
mbedtls_test_rnd_std_rand,
|
|
NULL ) );
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_calc_secret( &ctx, NULL, buflen, &len,
|
|
mbedtls_test_rnd_std_rand,
|
|
NULL ) );
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_calc_secret( &ctx, buf, buflen, NULL,
|
|
mbedtls_test_rnd_std_rand,
|
|
NULL ) );
|
|
|
|
#if defined(MBEDTLS_ASN1_PARSE_C)
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_parse_dhm( NULL, buf, buflen ) );
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_parse_dhm( &ctx, NULL, buflen ) );
|
|
|
|
#if defined(MBEDTLS_FS_IO)
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_parse_dhmfile( NULL, "" ) );
|
|
TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
|
|
mbedtls_dhm_parse_dhmfile( &ctx, NULL ) );
|
|
#endif /* MBEDTLS_FS_IO */
|
|
#endif /* MBEDTLS_ASN1_PARSE_C */
|
|
|
|
exit:
|
|
return;
|
|
}
|
|
/* END_CASE */
|
|
|
|
/* BEGIN_CASE */
|
|
void dhm_do_dhm( char *input_P, int x_size,
|
|
char *input_G, int result )
|
|
{
|
|
mbedtls_dhm_context ctx_srv;
|
|
mbedtls_dhm_context ctx_cli;
|
|
unsigned char ske[1000];
|
|
unsigned char *p = ske;
|
|
unsigned char pub_cli[1000];
|
|
unsigned char sec_srv[1000];
|
|
unsigned char sec_cli[1000];
|
|
size_t ske_len = 0;
|
|
size_t pub_cli_len = 0;
|
|
size_t sec_srv_len;
|
|
size_t sec_cli_len;
|
|
int i;
|
|
mbedtls_test_rnd_pseudo_info rnd_info;
|
|
|
|
mbedtls_dhm_init( &ctx_srv );
|
|
mbedtls_dhm_init( &ctx_cli );
|
|
memset( ske, 0x00, 1000 );
|
|
memset( pub_cli, 0x00, 1000 );
|
|
memset( sec_srv, 0x00, 1000 );
|
|
memset( sec_cli, 0x00, 1000 );
|
|
memset( &rnd_info, 0x00, sizeof( mbedtls_test_rnd_pseudo_info ) );
|
|
|
|
/*
|
|
* Set params
|
|
*/
|
|
TEST_ASSERT( mbedtls_test_read_mpi( &ctx_srv.P, input_P ) == 0 );
|
|
TEST_ASSERT( mbedtls_test_read_mpi( &ctx_srv.G, input_G ) == 0 );
|
|
pub_cli_len = mbedtls_mpi_size( &ctx_srv.P );
|
|
|
|
/*
|
|
* First key exchange
|
|
*/
|
|
mbedtls_test_set_step( 10 );
|
|
TEST_ASSERT( mbedtls_dhm_make_params( &ctx_srv, x_size, ske, &ske_len,
|
|
&mbedtls_test_rnd_pseudo_rand,
|
|
&rnd_info ) == result );
|
|
if ( result != 0 )
|
|
goto exit;
|
|
if( !check_dhm_params( &ctx_srv, x_size, ske, ske_len ) )
|
|
goto exit;
|
|
|
|
ske[ske_len++] = 0;
|
|
ske[ske_len++] = 0;
|
|
TEST_ASSERT( mbedtls_dhm_read_params( &ctx_cli, &p, ske + ske_len ) == 0 );
|
|
|
|
TEST_ASSERT( mbedtls_dhm_make_public( &ctx_cli, x_size, pub_cli, pub_cli_len,
|
|
&mbedtls_test_rnd_pseudo_rand,
|
|
&rnd_info ) == 0 );
|
|
TEST_ASSERT( mbedtls_dhm_read_public( &ctx_srv, pub_cli, pub_cli_len ) == 0 );
|
|
|
|
TEST_ASSERT( mbedtls_dhm_calc_secret( &ctx_srv, sec_srv, sizeof( sec_srv ),
|
|
&sec_srv_len,
|
|
&mbedtls_test_rnd_pseudo_rand,
|
|
&rnd_info ) == 0 );
|
|
TEST_ASSERT( mbedtls_dhm_calc_secret( &ctx_cli, sec_cli, sizeof( sec_cli ), &sec_cli_len, NULL, NULL ) == 0 );
|
|
|
|
TEST_ASSERT( sec_srv_len == sec_cli_len );
|
|
TEST_ASSERT( sec_srv_len != 0 );
|
|
TEST_ASSERT( memcmp( sec_srv, sec_cli, sec_srv_len ) == 0 );
|
|
|
|
/* Re-do calc_secret on server a few times to test update of blinding values */
|
|
for( i = 0; i < 3; i++ )
|
|
{
|
|
mbedtls_test_set_step( 20 + i );
|
|
sec_srv_len = 1000;
|
|
TEST_ASSERT( mbedtls_dhm_calc_secret( &ctx_srv, sec_srv,
|
|
sizeof( sec_srv ), &sec_srv_len,
|
|
&mbedtls_test_rnd_pseudo_rand,
|
|
&rnd_info ) == 0 );
|
|
|
|
TEST_ASSERT( sec_srv_len == sec_cli_len );
|
|
TEST_ASSERT( sec_srv_len != 0 );
|
|
TEST_ASSERT( memcmp( sec_srv, sec_cli, sec_srv_len ) == 0 );
|
|
}
|
|
|
|
/*
|
|
* Second key exchange to test change of blinding values on server
|
|
*/
|
|
p = ske;
|
|
|
|
mbedtls_test_set_step( 30 );
|
|
TEST_ASSERT( mbedtls_dhm_make_params( &ctx_srv, x_size, ske, &ske_len,
|
|
&mbedtls_test_rnd_pseudo_rand,
|
|
&rnd_info ) == 0 );
|
|
if( !check_dhm_params( &ctx_srv, x_size, ske, ske_len ) )
|
|
goto exit;
|
|
ske[ske_len++] = 0;
|
|
ske[ske_len++] = 0;
|
|
TEST_ASSERT( mbedtls_dhm_read_params( &ctx_cli, &p, ske + ske_len ) == 0 );
|
|
|
|
TEST_ASSERT( mbedtls_dhm_make_public( &ctx_cli, x_size, pub_cli, pub_cli_len,
|
|
&mbedtls_test_rnd_pseudo_rand,
|
|
&rnd_info ) == 0 );
|
|
TEST_ASSERT( mbedtls_dhm_read_public( &ctx_srv, pub_cli, pub_cli_len ) == 0 );
|
|
|
|
TEST_ASSERT( mbedtls_dhm_calc_secret( &ctx_srv, sec_srv, sizeof( sec_srv ),
|
|
&sec_srv_len,
|
|
&mbedtls_test_rnd_pseudo_rand,
|
|
&rnd_info ) == 0 );
|
|
TEST_ASSERT( mbedtls_dhm_calc_secret( &ctx_cli, sec_cli, sizeof( sec_cli ), &sec_cli_len, NULL, NULL ) == 0 );
|
|
|
|
TEST_ASSERT( sec_srv_len == sec_cli_len );
|
|
TEST_ASSERT( sec_srv_len != 0 );
|
|
TEST_ASSERT( memcmp( sec_srv, sec_cli, sec_srv_len ) == 0 );
|
|
|
|
exit:
|
|
mbedtls_dhm_free( &ctx_srv );
|
|
mbedtls_dhm_free( &ctx_cli );
|
|
}
|
|
/* END_CASE */
|
|
|
|
/* BEGIN_CASE */
|
|
void dhm_make_public( int P_bytes, char *input_G, int result )
|
|
{
|
|
mbedtls_mpi P, G;
|
|
mbedtls_dhm_context ctx;
|
|
unsigned char output[MBEDTLS_MPI_MAX_SIZE];
|
|
|
|
mbedtls_mpi_init( &P );
|
|
mbedtls_mpi_init( &G );
|
|
mbedtls_dhm_init( &ctx );
|
|
|
|
TEST_ASSERT( mbedtls_mpi_lset( &P, 1 ) == 0 );
|
|
TEST_ASSERT( mbedtls_mpi_shift_l( &P, ( P_bytes * 8 ) - 1 ) == 0 );
|
|
TEST_ASSERT( mbedtls_mpi_set_bit( &P, 0, 1 ) == 0 );
|
|
|
|
TEST_ASSERT( mbedtls_test_read_mpi( &G, input_G ) == 0 );
|
|
|
|
TEST_ASSERT( mbedtls_dhm_set_group( &ctx, &P, &G ) == 0 );
|
|
TEST_ASSERT( mbedtls_dhm_make_public( &ctx, (int) mbedtls_mpi_size( &P ),
|
|
output, sizeof(output),
|
|
&mbedtls_test_rnd_pseudo_rand,
|
|
NULL ) == result );
|
|
|
|
exit:
|
|
mbedtls_mpi_free( &P );
|
|
mbedtls_mpi_free( &G );
|
|
mbedtls_dhm_free( &ctx );
|
|
}
|
|
/* END_CASE */
|
|
|
|
/* BEGIN_CASE depends_on:MBEDTLS_FS_IO */
|
|
void dhm_file( char * filename, char * p, char * g, int len )
|
|
{
|
|
mbedtls_dhm_context ctx;
|
|
mbedtls_mpi P, G;
|
|
|
|
mbedtls_dhm_init( &ctx );
|
|
mbedtls_mpi_init( &P ); mbedtls_mpi_init( &G );
|
|
|
|
TEST_ASSERT( mbedtls_test_read_mpi( &P, p ) == 0 );
|
|
TEST_ASSERT( mbedtls_test_read_mpi( &G, g ) == 0 );
|
|
|
|
TEST_ASSERT( mbedtls_dhm_parse_dhmfile( &ctx, filename ) == 0 );
|
|
|
|
TEST_ASSERT( ctx.len == (size_t) len );
|
|
TEST_ASSERT( mbedtls_mpi_cmp_mpi( &ctx.P, &P ) == 0 );
|
|
TEST_ASSERT( mbedtls_mpi_cmp_mpi( &ctx.G, &G ) == 0 );
|
|
|
|
exit:
|
|
mbedtls_mpi_free( &P ); mbedtls_mpi_free( &G );
|
|
mbedtls_dhm_free( &ctx );
|
|
}
|
|
/* END_CASE */
|
|
|
|
/* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST */
|
|
void dhm_selftest( )
|
|
{
|
|
TEST_ASSERT( mbedtls_dhm_self_test( 1 ) == 0 );
|
|
}
|
|
/* END_CASE */
|