ffc_internal_test.c@ 94403

最後變更在這個檔案從94403是 94320,由 vboxsync 提交於 3 年前
libs/openssl-3.0.1: Export to OSE and fix copyright headers in Makefiles, bugref:10128
檔案大小: 25.4 KB

行
1	/*
2	* Copyright 2019-2021 The OpenSSL Project Authors. All Rights Reserved.
3	* Copyright (c) 2019-2020, Oracle and/or its affiliates. All rights reserved.
4	*
5	* Licensed under the Apache License 2.0 (the "License"). You may not use
6	* this file except in compliance with the License. You can obtain a copy
7	* in the file LICENSE in the source distribution or at
8	* https://www.openssl.org/source/license.html
9	*/
10
11	/*
12	* This is an internal test that is intentionally using internal APIs. Some of
13	* those APIs are deprecated for public use.
14	*/
15	#include "internal/deprecated.h"
16
17	#include <stdio.h>
18	#include <stdlib.h>
19	#include <string.h>
20
21	#include "internal/nelem.h"
22	#include <openssl/crypto.h>
23	#include <openssl/bio.h>
24	#include <openssl/bn.h>
25	#include <openssl/rand.h>
26	#include <openssl/err.h>
27	#include "testutil.h"
28
29	#include "internal/ffc.h"
30
31	#ifndef OPENSSL_NO_DSA
32	static const unsigned char dsa_2048_224_sha224_p[] = {
33	0x93, 0x57, 0x93, 0x62, 0x1b, 0x9a, 0x10, 0x9b, 0xc1, 0x56, 0x0f, 0x24,
34	0x71, 0x76, 0x4e, 0xd3, 0xed, 0x78, 0x78, 0x7a, 0xbf, 0x89, 0x71, 0x67,
35	0x8e, 0x03, 0xd8, 0x5b, 0xcd, 0x22, 0x8f, 0x70, 0x74, 0xff, 0x22, 0x05,
36	0x07, 0x0c, 0x4c, 0x60, 0xed, 0x41, 0xe1, 0x9e, 0x9c, 0xaa, 0x3e, 0x19,
37	0x5c, 0x3d, 0x80, 0x58, 0xb2, 0x7f, 0x5f, 0x89, 0xec, 0xb5, 0x19, 0xdb,
38	0x06, 0x11, 0xe9, 0x78, 0x5c, 0xf9, 0xa0, 0x9e, 0x70, 0x62, 0x14, 0x7b,
39	0xda, 0x92, 0xbf, 0xb2, 0x6b, 0x01, 0x6f, 0xb8, 0x68, 0x9c, 0x89, 0x36,
40	0x89, 0x72, 0x79, 0x49, 0x93, 0x3d, 0x14, 0xb2, 0x2d, 0xbb, 0xf0, 0xdf,
41	0x94, 0x45, 0x0b, 0x5f, 0xf1, 0x75, 0x37, 0xeb, 0x49, 0xb9, 0x2d, 0xce,
42	0xb7, 0xf4, 0x95, 0x77, 0xc2, 0xe9, 0x39, 0x1c, 0x4e, 0x0c, 0x40, 0x62,
43	0x33, 0x0a, 0xe6, 0x29, 0x6f, 0xba, 0xef, 0x02, 0xdd, 0x0d, 0xe4, 0x04,
44	0x01, 0x70, 0x40, 0xb9, 0xc9, 0x7e, 0x2f, 0x10, 0x37, 0xe9, 0xde, 0xb0,
45	0xf6, 0xeb, 0x71, 0x7f, 0x9c, 0x35, 0x16, 0xf3, 0x0d, 0xc4, 0xe8, 0x02,
46	0x37, 0x6c, 0xdd, 0xb3, 0x8d, 0x2d, 0x1e, 0x28, 0x13, 0x22, 0x89, 0x40,
47	0xe5, 0xfa, 0x16, 0x67, 0xd6, 0xda, 0x12, 0xa2, 0x38, 0x83, 0x25, 0xcc,
48	0x26, 0xc1, 0x27, 0x74, 0xfe, 0xf6, 0x7a, 0xb6, 0xa1, 0xe4, 0xe8, 0xdf,
49	0x5d, 0xd2, 0x9c, 0x2f, 0xec, 0xea, 0x08, 0xca, 0x48, 0xdb, 0x18, 0x4b,
50	0x12, 0xee, 0x16, 0x9b, 0xa6, 0x00, 0xa0, 0x18, 0x98, 0x7d, 0xce, 0x6c,
51	0x6d, 0xf8, 0xfc, 0x95, 0x51, 0x1b, 0x0a, 0x40, 0xb6, 0xfc, 0xe5, 0xe2,
52	0xb0, 0x26, 0x53, 0x4c, 0xd7, 0xfe, 0xaa, 0x6d, 0xbc, 0xdd, 0xc0, 0x61,
53	0x65, 0xe4, 0x89, 0x44, 0x18, 0x6f, 0xd5, 0x39, 0xcf, 0x75, 0x6d, 0x29,
54	0xcc, 0xf8, 0x40, 0xab
55	};
56	static const unsigned char dsa_2048_224_sha224_q[] = {
57	0xf2, 0x5e, 0x4e, 0x9a, 0x15, 0xa8, 0x13, 0xdf, 0xa3, 0x17, 0x90, 0xc6,
58	0xd6, 0x5e, 0xb1, 0xfb, 0x31, 0xf8, 0xb5, 0xb1, 0x4b, 0xa7, 0x6d, 0xde,
59	0x57, 0x76, 0x6f, 0x11
60	};
61	static const unsigned char dsa_2048_224_sha224_seed[] = {
62	0xd2, 0xb1, 0x36, 0xd8, 0x5b, 0x8e, 0xa4, 0xb2, 0x6a, 0xab, 0x4e, 0x85,
63	0x8b, 0x49, 0xf9, 0xdd, 0xe6, 0xa1, 0xcd, 0xad, 0x49, 0x52, 0xe9, 0xb3,
64	0x36, 0x17, 0x06, 0xcf
65	};
66	static const unsigned char dsa_2048_224_sha224_bad_seed[] = {
67	0xd2, 0xb1, 0x36, 0xd8, 0x5b, 0x8e, 0xa4, 0xb2, 0x6a, 0xab, 0x4e, 0x85,
68	0x8b, 0x49, 0xf9, 0xdd, 0xe6, 0xa1, 0xcd, 0xad, 0x49, 0x52, 0xe9, 0xb3,
69	0x36, 0x17, 0x06, 0xd0
70	};
71	static int dsa_2048_224_sha224_counter = 2878;
72
73	static const unsigned char dsa_3072_256_sha512_p[] = {
74	0x9a, 0x82, 0x8b, 0x8d, 0xea, 0xd0, 0x56, 0x23, 0x88, 0x2d, 0x5d, 0x41,
75	0x42, 0x4c, 0x13, 0x5a, 0x15, 0x81, 0x59, 0x02, 0xc5, 0x00, 0x82, 0x28,
76	0x01, 0xee, 0x8f, 0x99, 0xfd, 0x6a, 0x95, 0xf2, 0x0f, 0xae, 0x34, 0x77,
77	0x29, 0xcc, 0xc7, 0x50, 0x0e, 0x03, 0xef, 0xb0, 0x4d, 0xe5, 0x10, 0x00,
78	0xa8, 0x7b, 0xce, 0x8c, 0xc6, 0xb2, 0x01, 0x74, 0x23, 0x1b, 0x7f, 0xe8,
79	0xf9, 0x71, 0x28, 0x39, 0xcf, 0x18, 0x04, 0xb2, 0x95, 0x61, 0x2d, 0x11,
80	0x71, 0x6b, 0xdd, 0x0d, 0x0b, 0xf0, 0xe6, 0x97, 0x52, 0x29, 0x9d, 0x45,
81	0xb1, 0x23, 0xda, 0xb0, 0xd5, 0xcb, 0x51, 0x71, 0x8e, 0x40, 0x9c, 0x97,
82	0x13, 0xea, 0x1f, 0x4b, 0x32, 0x5d, 0x27, 0x74, 0x81, 0x8d, 0x47, 0x8a,
83	0x08, 0xce, 0xf4, 0xd1, 0x28, 0xa2, 0x0f, 0x9b, 0x2e, 0xc9, 0xa3, 0x0e,
84	0x5d, 0xde, 0x47, 0x19, 0x6d, 0x5f, 0x98, 0xe0, 0x8e, 0x7f, 0x60, 0x8f,
85	0x25, 0xa7, 0xa4, 0xeb, 0xb9, 0xf3, 0x24, 0xa4, 0x9e, 0xc1, 0xbd, 0x14,
86	0x27, 0x7c, 0x27, 0xc8, 0x4f, 0x5f, 0xed, 0xfd, 0x86, 0xc8, 0xf1, 0xd7,
87	0x82, 0xe2, 0xeb, 0xe5, 0xd2, 0xbe, 0xb0, 0x65, 0x28, 0xab, 0x99, 0x9e,
88	0xcd, 0xd5, 0x22, 0xf8, 0x1b, 0x3b, 0x01, 0xe9, 0x20, 0x3d, 0xe4, 0x98,
89	0x22, 0xfe, 0xfc, 0x09, 0x7e, 0x95, 0x20, 0xda, 0xb6, 0x12, 0x2c, 0x94,
90	0x5c, 0xea, 0x74, 0x71, 0xbd, 0x19, 0xac, 0x78, 0x43, 0x02, 0x51, 0xb8,
91	0x5f, 0x06, 0x1d, 0xea, 0xc8, 0xa4, 0x3b, 0xc9, 0x78, 0xa3, 0x2b, 0x09,
92	0xdc, 0x76, 0x74, 0xc4, 0x23, 0x14, 0x48, 0x2e, 0x84, 0x2b, 0xa3, 0x82,
93	0xc1, 0xba, 0x0b, 0x39, 0x2a, 0x9f, 0x24, 0x7b, 0xd6, 0xc2, 0xea, 0x5a,
94	0xb6, 0xbd, 0x15, 0x82, 0x21, 0x85, 0xe0, 0x6b, 0x12, 0x4f, 0x8d, 0x64,
95	0x75, 0xeb, 0x7e, 0xa1, 0xdb, 0xe0, 0x9d, 0x25, 0xae, 0x3b, 0xe9, 0x9b,
96	0x21, 0x7f, 0x9a, 0x3d, 0x66, 0xd0, 0x52, 0x1d, 0x39, 0x8b, 0xeb, 0xfc,
97	0xec, 0xbe, 0x72, 0x20, 0x5a, 0xdf, 0x1b, 0x00, 0xf1, 0x0e, 0xed, 0xc6,
98	0x78, 0x6f, 0xc9, 0xab, 0xe4, 0xd6, 0x81, 0x8b, 0xcc, 0xf6, 0xd4, 0x6a,
99	0x31, 0x62, 0x08, 0xd9, 0x38, 0x21, 0x8f, 0xda, 0x9e, 0xb1, 0x2b, 0x9c,
100	0xc0, 0xbe, 0xf7, 0x9a, 0x43, 0x2d, 0x07, 0x59, 0x46, 0x0e, 0xd5, 0x23,
101	0x4e, 0xaa, 0x4a, 0x04, 0xc2, 0xde, 0x33, 0xa6, 0x34, 0xba, 0xac, 0x4f,
102	0x78, 0xd8, 0xca, 0x76, 0xce, 0x5e, 0xd4, 0xf6, 0x85, 0x4c, 0x6a, 0x60,
103	0x08, 0x5d, 0x0e, 0x34, 0x8b, 0xf2, 0xb6, 0xe3, 0xb7, 0x51, 0xca, 0x43,
104	0xaa, 0x68, 0x7b, 0x0a, 0x6e, 0xea, 0xce, 0x1e, 0x2c, 0x34, 0x8e, 0x0f,
105	0xe2, 0xcc, 0x38, 0xf2, 0x9a, 0x98, 0xef, 0xe6, 0x7f, 0xf6, 0x62, 0xbb
106	};
107	static const unsigned char dsa_3072_256_sha512_q[] = {
108	0xc1, 0xdb, 0xc1, 0x21, 0x50, 0x49, 0x63, 0xa3, 0x77, 0x6d, 0x4c, 0x92,
109	0xed, 0x58, 0x9e, 0x98, 0xea, 0xac, 0x7a, 0x90, 0x13, 0x24, 0xf7, 0xcd,
110	0xd7, 0xe6, 0xd4, 0x8f, 0xf0, 0x45, 0x4b, 0xf7
111	};
112	static const unsigned char dsa_3072_256_sha512_seed[] = {
113	0x35, 0x24, 0xb5, 0x59, 0xd5, 0x27, 0x58, 0x10, 0xf6, 0xa2, 0x7c, 0x9a,
114	0x0d, 0xc2, 0x70, 0x8a, 0xb0, 0x41, 0x4a, 0x84, 0x0b, 0xfe, 0x66, 0xf5,
115	0x3a, 0xbf, 0x4a, 0xa9, 0xcb, 0xfc, 0xa6, 0x22
116	};
117	static int dsa_3072_256_sha512_counter = 1604;
118
119	static const unsigned char dsa_2048_224_sha256_p[] = {
120	0xe9, 0x13, 0xbc, 0xf2, 0x14, 0x5d, 0xf9, 0x79, 0xd6, 0x6d, 0xf5, 0xc5,
121	0xbe, 0x7b, 0x6f, 0x90, 0x63, 0xd0, 0xfd, 0xee, 0x4f, 0xc4, 0x65, 0x83,
122	0xbf, 0xec, 0xc3, 0x2c, 0x5d, 0x30, 0xc8, 0xa4, 0x3b, 0x2f, 0x3b, 0x29,
123	0x43, 0x69, 0xfb, 0x6e, 0xa9, 0xa4, 0x07, 0x6c, 0xcd, 0xb0, 0xd2, 0xd9,
124	0xd3, 0xe6, 0xf4, 0x87, 0x16, 0xb7, 0xe5, 0x06, 0xb9, 0xba, 0xd6, 0x87,
125	0xbc, 0x01, 0x9e, 0xba, 0xc2, 0xcf, 0x39, 0xb6, 0xec, 0xdc, 0x75, 0x07,
126	0xc1, 0x39, 0x2d, 0x6a, 0x95, 0x31, 0x97, 0xda, 0x54, 0x20, 0x29, 0xe0,
127	0x1b, 0xf9, 0x74, 0x65, 0xaa, 0xc1, 0x47, 0xd3, 0x9e, 0xb4, 0x3c, 0x1d,
128	0xe0, 0xdc, 0x2d, 0x21, 0xab, 0x12, 0x3b, 0xa5, 0x51, 0x1e, 0xc6, 0xbc,
129	0x6b, 0x4c, 0x22, 0xd1, 0x7c, 0xc6, 0xce, 0xcb, 0x8c, 0x1d, 0x1f, 0xce,
130	0x1c, 0xe2, 0x75, 0x49, 0x6d, 0x2c, 0xee, 0x7f, 0x5f, 0xb8, 0x74, 0x42,
131	0x5c, 0x96, 0x77, 0x13, 0xff, 0x80, 0xf3, 0x05, 0xc7, 0xfe, 0x08, 0x3b,
132	0x25, 0x36, 0x46, 0xa2, 0xc4, 0x26, 0xb4, 0xb0, 0x3b, 0xd5, 0xb2, 0x4c,
133	0x13, 0x29, 0x0e, 0x47, 0x31, 0x66, 0x7d, 0x78, 0x57, 0xe6, 0xc2, 0xb5,
134	0x9f, 0x46, 0x17, 0xbc, 0xa9, 0x9a, 0x49, 0x1c, 0x0f, 0x45, 0xe0, 0x88,
135	0x97, 0xa1, 0x30, 0x7c, 0x42, 0xb7, 0x2c, 0x0a, 0xce, 0xb3, 0xa5, 0x7a,
136	0x61, 0x8e, 0xab, 0x44, 0xc1, 0xdc, 0x70, 0xe5, 0xda, 0x78, 0x2a, 0xb4,
137	0xe6, 0x3c, 0xa0, 0x58, 0xda, 0x62, 0x0a, 0xb2, 0xa9, 0x3d, 0xaa, 0x49,
138	0x7e, 0x7f, 0x9a, 0x19, 0x67, 0xee, 0xd6, 0xe3, 0x67, 0x13, 0xe8, 0x6f,
139	0x79, 0x50, 0x76, 0xfc, 0xb3, 0x9d, 0x7e, 0x9e, 0x3e, 0x6e, 0x47, 0xb1,
140	0x11, 0x5e, 0xc8, 0x83, 0x3a, 0x3c, 0xfc, 0x82, 0x5c, 0x9d, 0x34, 0x65,
141	0x73, 0xb4, 0x56, 0xd5
142	};
143	static const unsigned char dsa_2048_224_sha256_q[] = {
144	0xb0, 0xdf, 0xa1, 0x7b, 0xa4, 0x77, 0x64, 0x0e, 0xb9, 0x28, 0xbb, 0xbc,
145	0xd4, 0x60, 0x02, 0xaf, 0x21, 0x8c, 0xb0, 0x69, 0x0f, 0x8a, 0x7b, 0xc6,
146	0x80, 0xcb, 0x0a, 0x45
147	};
148	static const unsigned char dsa_2048_224_sha256_g[] = {
149	0x11, 0x7c, 0x5f, 0xf6, 0x99, 0x44, 0x67, 0x5b, 0x69, 0xa3, 0x83, 0xef,
150	0xb5, 0x85, 0xa2, 0x19, 0x35, 0x18, 0x2a, 0xf2, 0x58, 0xf4, 0xc9, 0x58,
151	0x9e, 0xb9, 0xe8, 0x91, 0x17, 0x2f, 0xb0, 0x60, 0x85, 0x95, 0xa6, 0x62,
152	0x36, 0xd0, 0xff, 0x94, 0xb9, 0xa6, 0x50, 0xad, 0xa6, 0xf6, 0x04, 0x28,
153	0xc2, 0xc9, 0xb9, 0x75, 0xf3, 0x66, 0xb4, 0xeb, 0xf6, 0xd5, 0x06, 0x13,
154	0x01, 0x64, 0x82, 0xa9, 0xf1, 0xd5, 0x41, 0xdc, 0xf2, 0x08, 0xfc, 0x2f,
155	0xc4, 0xa1, 0x21, 0xee, 0x7d, 0xbc, 0xda, 0x5a, 0xa4, 0xa2, 0xb9, 0x68,
156	0x87, 0x36, 0xba, 0x53, 0x9e, 0x14, 0x4e, 0x76, 0x5c, 0xba, 0x79, 0x3d,
157	0x0f, 0xe5, 0x99, 0x1c, 0x27, 0xfc, 0xaf, 0x10, 0x63, 0x87, 0x68, 0x0e,
158	0x3e, 0x6e, 0xaa, 0xf3, 0xdf, 0x76, 0x7e, 0x02, 0x9a, 0x41, 0x96, 0xa1,
159	0x6c, 0xbb, 0x67, 0xee, 0x0c, 0xad, 0x72, 0x65, 0xf1, 0x70, 0xb0, 0x39,
160	0x9b, 0x54, 0x5f, 0xd7, 0x6c, 0xc5, 0x9a, 0x90, 0x53, 0x18, 0xde, 0x5e,
161	0x62, 0x89, 0xb9, 0x2f, 0x66, 0x59, 0x3a, 0x3d, 0x10, 0xeb, 0xa5, 0x99,
162	0xf6, 0x21, 0x7d, 0xf2, 0x7b, 0x42, 0x15, 0x1c, 0x55, 0x79, 0x15, 0xaa,
163	0xa4, 0x17, 0x2e, 0x48, 0xc3, 0xa8, 0x36, 0xf5, 0x1a, 0x97, 0xce, 0xbd,
164	0x72, 0xef, 0x1d, 0x50, 0x5b, 0xb1, 0x60, 0x0a, 0x5c, 0x0b, 0xa6, 0x21,
165	0x38, 0x28, 0x4e, 0x89, 0x33, 0x1d, 0xb5, 0x7e, 0x5c, 0xf1, 0x6b, 0x2c,
166	0xbd, 0xad, 0x84, 0xb2, 0x8e, 0x96, 0xe2, 0x30, 0xe7, 0x54, 0xb8, 0xc9,
167	0x70, 0xcb, 0x10, 0x30, 0x63, 0x90, 0xf4, 0x45, 0x64, 0x93, 0x09, 0x38,
168	0x6a, 0x47, 0x58, 0x31, 0x04, 0x1a, 0x18, 0x04, 0x1a, 0xe0, 0xd7, 0x0b,
169	0x3c, 0xbe, 0x2a, 0x9c, 0xec, 0xcc, 0x0d, 0x0c, 0xed, 0xde, 0x54, 0xbc,
170	0xe6, 0x93, 0x59, 0xfc
171	};
172
173	static int ffc_params_validate_g_unverified_test(void)
174	{
175	int ret = 0, res;
176	FFC_PARAMS params;
177	BIGNUM p = NULL, q = NULL, *g = NULL;
178	BIGNUM p1 = NULL, g1 = NULL;
179
180	ossl_ffc_params_init(&params);
181
182	if (!TEST_ptr(p = BN_bin2bn(dsa_2048_224_sha256_p,
183	sizeof(dsa_2048_224_sha256_p), NULL)))
184	goto err;
185	p1 = p;
186	if (!TEST_ptr(q = BN_bin2bn(dsa_2048_224_sha256_q,
187	sizeof(dsa_2048_224_sha256_q), NULL)))
188	goto err;
189	if (!TEST_ptr(g = BN_bin2bn(dsa_2048_224_sha256_g,
190	sizeof(dsa_2048_224_sha256_g), NULL)))
191	goto err;
192	g1 = g;
193
194	/* Fail if g is NULL */
195	ossl_ffc_params_set0_pqg(&params, p, q, NULL);
196	p = NULL;
197	q = NULL;
198	ossl_ffc_params_set_flags(&params, FFC_PARAM_FLAG_VALIDATE_G);
199	ossl_ffc_set_digest(&params, "SHA256", NULL);
200
201	if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
202	FFC_PARAM_TYPE_DSA,
203	&res, NULL)))
204	goto err;
205
206	ossl_ffc_params_set0_pqg(&params, p, q, g);
207	g = NULL;
208	if (!TEST_true(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
209	FFC_PARAM_TYPE_DSA,
210	&res, NULL)))
211	goto err;
212
213	/* incorrect g */
214	BN_add_word(g1, 1);
215	if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
216	FFC_PARAM_TYPE_DSA,
217	&res, NULL)))
218	goto err;
219
220	/* fail if g < 2 */
221	BN_set_word(g1, 1);
222	if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
223	FFC_PARAM_TYPE_DSA,
224	&res, NULL)))
225	goto err;
226
227	BN_copy(g1, p1);
228	/* Fail if g >= p */
229	if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
230	FFC_PARAM_TYPE_DSA,
231	&res, NULL)))
232	goto err;
233
234	ret = 1;
235	err:
236	ossl_ffc_params_cleanup(&params);
237	BN_free(p);
238	BN_free(q);
239	BN_free(g);
240	return ret;
241	}
242
243	static int ffc_params_validate_pq_test(void)
244	{
245	int ret = 0, res = -1;
246	FFC_PARAMS params;
247	BIGNUM p = NULL, q = NULL;
248
249	ossl_ffc_params_init(&params);
250	if (!TEST_ptr(p = BN_bin2bn(dsa_2048_224_sha224_p,
251	sizeof(dsa_2048_224_sha224_p),
252	NULL)))
253	goto err;
254	if (!TEST_ptr(q = BN_bin2bn(dsa_2048_224_sha224_q,
255	sizeof(dsa_2048_224_sha224_q),
256	NULL)))
257	goto err;
258
259	/* No p */
260	ossl_ffc_params_set0_pqg(&params, NULL, q, NULL);
261	q = NULL;
262	ossl_ffc_params_set_flags(&params, FFC_PARAM_FLAG_VALIDATE_PQ);
263	ossl_ffc_set_digest(&params, "SHA224", NULL);
264
265	if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
266	FFC_PARAM_TYPE_DSA,
267	&res, NULL)))
268	goto err;
269
270	/* Test valid case */
271	ossl_ffc_params_set0_pqg(&params, p, NULL, NULL);
272	p = NULL;
273	ossl_ffc_params_set_validate_params(&params, dsa_2048_224_sha224_seed,
274	sizeof(dsa_2048_224_sha224_seed),
275	dsa_2048_224_sha224_counter);
276	if (!TEST_true(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
277	FFC_PARAM_TYPE_DSA,
278	&res, NULL)))
279	goto err;
280
281	/* Bad counter - so p is not prime */
282	ossl_ffc_params_set_validate_params(&params, dsa_2048_224_sha224_seed,
283	sizeof(dsa_2048_224_sha224_seed),
284	1);
285	if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
286	FFC_PARAM_TYPE_DSA,
287	&res, NULL)))
288	goto err;
289
290	/* seedlen smaller than N */
291	ossl_ffc_params_set_validate_params(&params, dsa_2048_224_sha224_seed,
292	sizeof(dsa_2048_224_sha224_seed)-1,
293	dsa_2048_224_sha224_counter);
294	if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
295	FFC_PARAM_TYPE_DSA,
296	&res, NULL)))
297	goto err;
298
299	/* Provided seed doesnt produce a valid prime q */
300	ossl_ffc_params_set_validate_params(&params, dsa_2048_224_sha224_bad_seed,
301	sizeof(dsa_2048_224_sha224_bad_seed),
302	dsa_2048_224_sha224_counter);
303	if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
304	FFC_PARAM_TYPE_DSA,
305	&res, NULL)))
306	goto err;
307
308	if (!TEST_ptr(p = BN_bin2bn(dsa_3072_256_sha512_p,
309	sizeof(dsa_3072_256_sha512_p), NULL)))
310	goto err;
311	if (!TEST_ptr(q = BN_bin2bn(dsa_3072_256_sha512_q,
312	sizeof(dsa_3072_256_sha512_q),
313	NULL)))
314	goto err;
315
316
317	ossl_ffc_params_set0_pqg(&params, p, q, NULL);
318	p = q = NULL;
319	ossl_ffc_set_digest(&params, "SHA512", NULL);
320	ossl_ffc_params_set_validate_params(&params, dsa_3072_256_sha512_seed,
321	sizeof(dsa_3072_256_sha512_seed),
322	dsa_3072_256_sha512_counter);
323	/* Q doesn't div P-1 */
324	if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
325	FFC_PARAM_TYPE_DSA,
326	&res, NULL)))
327	goto err;
328
329	/* Bad L/N for FIPS DH */
330	if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
331	FFC_PARAM_TYPE_DH,
332	&res, NULL)))
333	goto err;
334
335	ret = 1;
336	err:
337	ossl_ffc_params_cleanup(&params);
338	BN_free(p);
339	BN_free(q);
340	return ret;
341	}
342	#endif /* OPENSSL_NO_DSA */
343
344	#ifndef OPENSSL_NO_DH
345	static int ffc_params_gen_test(void)
346	{
347	int ret = 0, res = -1;
348	FFC_PARAMS params;
349
350	ossl_ffc_params_init(&params);
351	if (!TEST_true(ossl_ffc_params_FIPS186_4_generate(NULL, &params,
352	FFC_PARAM_TYPE_DH,
353	2048, 256, &res, NULL)))
354	goto err;
355	if (!TEST_true(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
356	FFC_PARAM_TYPE_DH,
357	&res, NULL)))
358	goto err;
359
360	ret = 1;
361	err:
362	ossl_ffc_params_cleanup(&params);
363	return ret;
364	}
365
366	static int ffc_params_gen_canonicalg_test(void)
367	{
368	int ret = 0, res = -1;
369	FFC_PARAMS params;
370
371	ossl_ffc_params_init(&params);
372	params.gindex = 1;
373	if (!TEST_true(ossl_ffc_params_FIPS186_4_generate(NULL, &params,
374	FFC_PARAM_TYPE_DH,
375	2048, 256, &res, NULL)))
376	goto err;
377	if (!TEST_true(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
378	FFC_PARAM_TYPE_DH,
379	&res, NULL)))
380	goto err;
381
382	if (!TEST_true(ossl_ffc_params_print(bio_out, &params, 4)))
383	goto err;
384
385	ret = 1;
386	err:
387	ossl_ffc_params_cleanup(&params);
388	return ret;
389	}
390
391	static int ffc_params_fips186_2_gen_validate_test(void)
392	{
393	int ret = 0, res = -1;
394	FFC_PARAMS params;
395	BIGNUM *bn = NULL;
396
397	ossl_ffc_params_init(&params);
398	if (!TEST_ptr(bn = BN_new()))
399	goto err;
400	if (!TEST_true(ossl_ffc_params_FIPS186_2_generate(NULL, &params,
401	FFC_PARAM_TYPE_DH,
402	1024, 160, &res, NULL)))
403	goto err;
404	if (!TEST_true(ossl_ffc_params_FIPS186_2_validate(NULL, &params,
405	FFC_PARAM_TYPE_DH,
406	&res, NULL)))
407	goto err;
408
409	/*
410	* The fips186-2 generation should produce a different q compared to
411	* fips 186-4 given the same seed value. So validation of q will fail.
412	*/
413	if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
414	FFC_PARAM_TYPE_DSA,
415	&res, NULL)))
416	goto err;
417	/* As the params are randomly generated the error is one of the following */
418	if (!TEST_true(res == FFC_CHECK_Q_MISMATCH \|\| res == FFC_CHECK_Q_NOT_PRIME))
419	goto err;
420
421	ossl_ffc_params_set_flags(&params, FFC_PARAM_FLAG_VALIDATE_G);
422	/* Partially valid g test will still pass */
423	if (!TEST_int_eq(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
424	FFC_PARAM_TYPE_DSA,
425	&res, NULL), 2))
426	goto err;
427
428	if (!TEST_true(ossl_ffc_params_print(bio_out, &params, 4)))
429	goto err;
430
431	ret = 1;
432	err:
433	BN_free(bn);
434	ossl_ffc_params_cleanup(&params);
435	return ret;
436	}
437
438	extern FFC_PARAMS ossl_dh_get0_params(DH dh);
439
440	static int ffc_public_validate_test(void)
441	{
442	int ret = 0, res = -1;
443	FFC_PARAMS *params;
444	BIGNUM *pub = NULL;
445	DH *dh = NULL;
446
447	if (!TEST_ptr(pub = BN_new()))
448	goto err;
449
450	if (!TEST_ptr(dh = DH_new_by_nid(NID_ffdhe2048)))
451	goto err;
452	params = ossl_dh_get0_params(dh);
453
454	if (!TEST_true(BN_set_word(pub, 1)))
455	goto err;
456	BN_set_negative(pub, 1);
457	/* Fail if public key is negative */
458	if (!TEST_false(ossl_ffc_validate_public_key(params, pub, &res)))
459	goto err;
460	if (!TEST_int_eq(FFC_ERROR_PUBKEY_TOO_SMALL, res))
461	goto err;
462	if (!TEST_true(BN_set_word(pub, 0)))
463	goto err;
464	if (!TEST_int_eq(FFC_ERROR_PUBKEY_TOO_SMALL, res))
465	goto err;
466	/* Fail if public key is zero */
467	if (!TEST_false(ossl_ffc_validate_public_key(params, pub, &res)))
468	goto err;
469	if (!TEST_int_eq(FFC_ERROR_PUBKEY_TOO_SMALL, res))
470	goto err;
471	/* Fail if public key is 1 */
472	if (!TEST_false(ossl_ffc_validate_public_key(params, BN_value_one(), &res)))
473	goto err;
474	if (!TEST_int_eq(FFC_ERROR_PUBKEY_TOO_SMALL, res))
475	goto err;
476	if (!TEST_true(BN_add_word(pub, 2)))
477	goto err;
478	/* Pass if public key >= 2 */
479	if (!TEST_true(ossl_ffc_validate_public_key(params, pub, &res)))
480	goto err;
481
482	if (!TEST_ptr(BN_copy(pub, params->p)))
483	goto err;
484	/* Fail if public key = p */
485	if (!TEST_false(ossl_ffc_validate_public_key(params, pub, &res)))
486	goto err;
487	if (!TEST_int_eq(FFC_ERROR_PUBKEY_TOO_LARGE, res))
488	goto err;
489
490	if (!TEST_true(BN_sub_word(pub, 1)))
491	goto err;
492	/* Fail if public key = p - 1 */
493	if (!TEST_false(ossl_ffc_validate_public_key(params, pub, &res)))
494	goto err;
495	if (!TEST_int_eq(FFC_ERROR_PUBKEY_TOO_LARGE, res))
496	goto err;
497
498	if (!TEST_true(BN_sub_word(pub, 1)))
499	goto err;
500	/* Fail if public key is not related to p & q */
501	if (!TEST_false(ossl_ffc_validate_public_key(params, pub, &res)))
502	goto err;
503	if (!TEST_int_eq(FFC_ERROR_PUBKEY_INVALID, res))
504	goto err;
505
506	if (!TEST_true(BN_sub_word(pub, 5)))
507	goto err;
508	/* Pass if public key is valid */
509	if (!TEST_true(ossl_ffc_validate_public_key(params, pub, &res)))
510	goto err;
511
512	ret = 1;
513	err:
514	DH_free(dh);
515	BN_free(pub);
516	return ret;
517	}
518
519	static int ffc_private_validate_test(void)
520	{
521	int ret = 0, res = -1;
522	FFC_PARAMS *params;
523	BIGNUM *priv = NULL;
524	DH *dh = NULL;
525
526	if (!TEST_ptr(priv = BN_new()))
527	goto err;
528
529	if (!TEST_ptr(dh = DH_new_by_nid(NID_ffdhe2048)))
530	goto err;
531	params = ossl_dh_get0_params(dh);
532
533	if (!TEST_true(BN_set_word(priv, 1)))
534	goto err;
535	BN_set_negative(priv, 1);
536	/* Fail if priv key is negative */
537	if (!TEST_false(ossl_ffc_validate_private_key(params->q, priv, &res)))
538	goto err;
539	if (!TEST_int_eq(FFC_ERROR_PRIVKEY_TOO_SMALL, res))
540	goto err;
541
542	if (!TEST_true(BN_set_word(priv, 0)))
543	goto err;
544	/* Fail if priv key is zero */
545	if (!TEST_false(ossl_ffc_validate_private_key(params->q, priv, &res)))
546	goto err;
547	if (!TEST_int_eq(FFC_ERROR_PRIVKEY_TOO_SMALL, res))
548	goto err;
549
550	/* Pass if priv key >= 1 */
551	if (!TEST_true(ossl_ffc_validate_private_key(params->q, BN_value_one(),
552	&res)))
553	goto err;
554
555	if (!TEST_ptr(BN_copy(priv, params->q)))
556	goto err;
557	/* Fail if priv key = upper */
558	if (!TEST_false(ossl_ffc_validate_private_key(params->q, priv, &res)))
559	goto err;
560	if (!TEST_int_eq(FFC_ERROR_PRIVKEY_TOO_LARGE, res))
561	goto err;
562
563	if (!TEST_true(BN_sub_word(priv, 1)))
564	goto err;
565	/* Pass if priv key <= upper - 1 */
566	if (!TEST_true(ossl_ffc_validate_private_key(params->q, priv, &res)))
567	goto err;
568
569	ret = 1;
570	err:
571	DH_free(dh);
572	BN_free(priv);
573	return ret;
574	}
575
576	static int ffc_private_gen_test(int index)
577	{
578	int ret = 0, res = -1, N;
579	FFC_PARAMS *params;
580	BIGNUM *priv = NULL;
581	DH *dh = NULL;
582	BN_CTX *ctx = NULL;
583
584	if (!TEST_ptr(ctx = BN_CTX_new_ex(NULL)))
585	goto err;
586
587	if (!TEST_ptr(priv = BN_new()))
588	goto err;
589
590	if (!TEST_ptr(dh = DH_new_by_nid(NID_ffdhe2048)))
591	goto err;
592	params = ossl_dh_get0_params(dh);
593
594	N = BN_num_bits(params->q);
595	/* Fail since N < 2s - where s = 112/
596	if (!TEST_false(ossl_ffc_generate_private_key(ctx, params, 220, 112, priv)))
597	goto err;
598	/* fail since N > len(q) */
599	if (!TEST_false(ossl_ffc_generate_private_key(ctx, params, N + 1, 112, priv)))
600	goto err;
601	/* pass since 2s <= N <= len(q) */
602	if (!TEST_true(ossl_ffc_generate_private_key(ctx, params, N, 112, priv)))
603	goto err;
604	/* pass since N = len(q) */
605	if (!TEST_true(ossl_ffc_validate_private_key(params->q, priv, &res)))
606	goto err;
607	/* pass since 2s <= N < len(q) */
608	if (!TEST_true(ossl_ffc_generate_private_key(ctx, params, N / 2, 112, priv)))
609	goto err;
610	if (!TEST_true(ossl_ffc_validate_private_key(params->q, priv, &res)))
611	goto err;
612
613	/* N and s are ignored in this case */
614	if (!TEST_true(ossl_ffc_generate_private_key(ctx, params, 0, 0, priv)))
615	goto err;
616	if (!TEST_true(ossl_ffc_validate_private_key(params->q, priv, &res)))
617	goto err;
618
619	ret = 1;
620	err:
621	DH_free(dh);
622	BN_free(priv);
623	BN_CTX_free(ctx);
624	return ret;
625	}
626	#endif /* OPENSSL_NO_DH */
627
628	int setup_tests(void)
629	{
630	#ifndef OPENSSL_NO_DSA
631	ADD_TEST(ffc_params_validate_pq_test);
632	ADD_TEST(ffc_params_validate_g_unverified_test);
633	#endif /* OPENSSL_NO_DSA */
634	#ifndef OPENSSL_NO_DH
635	ADD_TEST(ffc_params_gen_test);
636	ADD_TEST(ffc_params_gen_canonicalg_test);
637	ADD_TEST(ffc_params_fips186_2_gen_validate_test);
638	ADD_TEST(ffc_public_validate_test);
639	ADD_TEST(ffc_private_validate_test);
640	ADD_ALL_TESTS(ffc_private_gen_test, 10);
641	#endif /* OPENSSL_NO_DH */
642	return 1;
643	}

注意: 瀏覽 TracBrowser 來幫助您使用儲存庫瀏覽器

source: vbox/trunk/src/libs/openssl-3.0.2/test/ffc_internal_test.c@ 94403

以其他格式下載: