1 /* Copyright (c) 2017, Google Inc. 2 * 3 * Permission to use, copy, modify, and/or distribute this software for any 4 * purpose with or without fee is hereby granted, provided that the above 5 * copyright notice and this permission notice appear in all copies. 6 * 7 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES 8 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF 9 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY 10 * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES 11 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION 12 * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN 13 * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */ 14 15 // cavp_rsa2_sigver_test processes NIST CAVP RSA2 SigVer test vector request 16 // files and emits the corresponding response. 17 18 #include <vector> 19 20 #include <openssl/bn.h> 21 #include <openssl/crypto.h> 22 #include <openssl/digest.h> 23 #include <openssl/err.h> 24 #include <openssl/rsa.h> 25 26 #include "../crypto/internal.h" 27 #include "../crypto/test/file_test.h" 28 #include "cavp_test_util.h" 29 30 31 namespace { 32 33 struct TestCtx { 34 std::vector<uint8_t> N; 35 bool is_pss; 36 }; 37 38 } 39 40 static bool TestRSA2SigVer(FileTest *t, void *arg) { 41 TestCtx *ctx = reinterpret_cast<TestCtx *>(arg); 42 43 std::string mod_str; 44 if (!t->GetInstruction(&mod_str, "mod")) { 45 return false; 46 } 47 48 printf("%s", t->CurrentTestToString().c_str()); 49 50 if (t->HasAttribute("n")) { 51 printf("\r\n"); 52 return t->GetBytes(&ctx->N, "n"); 53 } 54 55 std::string hash; 56 std::vector<uint8_t> e_bytes, msg, sig; 57 if (!t->GetAttribute(&hash, "SHAAlg") || 58 !t->GetBytes(&e_bytes, "e") || 59 !t->GetBytes(&msg, "Msg") || 60 !t->GetBytes(&sig, "S")) { 61 return false; 62 } 63 64 bssl::UniquePtr<RSA> key(RSA_new()); 65 key->n = BN_new(); 66 key->e = BN_new(); 67 if (key == nullptr || 68 !BN_bin2bn(ctx->N.data(), ctx->N.size(), key->n) || 69 !BN_bin2bn(e_bytes.data(), e_bytes.size(), key->e)) { 70 return false; 71 } 72 73 const EVP_MD *md = EVP_get_digestbyname(hash.c_str()); 74 uint8_t digest_buf[EVP_MAX_MD_SIZE]; 75 unsigned digest_len; 76 if (md == NULL || 77 !EVP_Digest(msg.data(), msg.size(), digest_buf, &digest_len, md, NULL)) { 78 return false; 79 } 80 81 int ok; 82 if (ctx->is_pss) { 83 ok = RSA_verify_pss_mgf1(key.get(), digest_buf, digest_len, md, md, -1, 84 sig.data(), sig.size()); 85 } else { 86 ok = RSA_verify(EVP_MD_type(md), digest_buf, digest_len, sig.data(), 87 sig.size(), key.get()); 88 } 89 90 if (ok) { 91 printf("Result = P\r\n\r\n"); 92 } else { 93 char buf[256]; 94 ERR_error_string_n(ERR_get_error(), buf, sizeof(buf)); 95 printf("Result = F (%s)\r\n\r\n", buf); 96 } 97 ERR_clear_error(); 98 return true; 99 } 100 101 int cavp_rsa2_sigver_test_main(int argc, char **argv) { 102 if (argc != 3) { 103 fprintf(stderr, "usage: %s (pkcs15|pss) <test file>\n", 104 argv[0]); 105 return 1; 106 } 107 108 TestCtx ctx; 109 if (strcmp(argv[1], "pkcs15") == 0) { 110 ctx = {std::vector<uint8_t>(), false}; 111 } else if (strcmp(argv[1], "pss") == 0) { 112 ctx = {std::vector<uint8_t>(), true}; 113 } else { 114 fprintf(stderr, "Unknown test type: %s\n", argv[1]); 115 return 1; 116 } 117 118 FileTest::Options opts; 119 opts.path = argv[2]; 120 opts.callback = TestRSA2SigVer; 121 opts.arg = &ctx; 122 opts.silent = true; 123 opts.comment_callback = EchoComment; 124 return FileTestMain(opts); 125 } 126