Home | History | Annotate | Download | only in fipstools 
      1 /* Copyright (c) 2017, Google Inc.
      2  *
      3  * Permission to use, copy, modify, and/or distribute this software for any
      4  * purpose with or without fee is hereby granted, provided that the above
      5  * copyright notice and this permission notice appear in all copies.
      6  *
      7  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
      8  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
      9  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
     10  * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
     11  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
     12  * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
     13  * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
     14 
     15 // cavp_rsa2_sigver_test processes NIST CAVP RSA2 SigVer test vector request
     16 // files and emits the corresponding response.
     17 
     18 #include <vector>
     19 
     20 #include <openssl/bn.h>
     21 #include <openssl/crypto.h>
     22 #include <openssl/digest.h>
     23 #include <openssl/err.h>
     24 #include <openssl/rsa.h>
     25 
     26 #include "../crypto/internal.h"
     27 #include "../crypto/test/file_test.h"
     28 #include "cavp_test_util.h"
     29 
     30 
     31 namespace {
     32 
     33 struct TestCtx {
     34   std::vector<uint8_t> N;
     35   bool is_pss;
     36 };
     37 
     38 }
     39 
     40 static bool TestRSA2SigVer(FileTest *t, void *arg) {
     41   TestCtx *ctx = reinterpret_cast<TestCtx *>(arg);
     42 
     43   std::string mod_str;
     44   if (!t->GetInstruction(&mod_str, "mod")) {
     45     return false;
     46   }
     47 
     48   printf("%s", t->CurrentTestToString().c_str());
     49 
     50   if (t->HasAttribute("n")) {
     51     printf("\r\n");
     52     return t->GetBytes(&ctx->N, "n");
     53   }
     54 
     55   std::string hash;
     56   std::vector<uint8_t> e_bytes, msg, sig;
     57   if (!t->GetAttribute(&hash, "SHAAlg") ||
     58       !t->GetBytes(&e_bytes, "e") ||
     59       !t->GetBytes(&msg, "Msg") ||
     60       !t->GetBytes(&sig, "S")) {
     61     return false;
     62   }
     63 
     64   bssl::UniquePtr<RSA> key(RSA_new());
     65   key->n = BN_new();
     66   key->e = BN_new();
     67   if (key == nullptr ||
     68       !BN_bin2bn(ctx->N.data(), ctx->N.size(), key->n) ||
     69       !BN_bin2bn(e_bytes.data(), e_bytes.size(), key->e)) {
     70     return false;
     71   }
     72 
     73   const EVP_MD *md = EVP_get_digestbyname(hash.c_str());
     74   uint8_t digest_buf[EVP_MAX_MD_SIZE];
     75   unsigned digest_len;
     76   if (md == NULL ||
     77       !EVP_Digest(msg.data(), msg.size(), digest_buf, &digest_len, md, NULL)) {
     78     return false;
     79   }
     80 
     81   int ok;
     82   if (ctx->is_pss) {
     83     ok = RSA_verify_pss_mgf1(key.get(), digest_buf, digest_len, md, md, -1,
     84                              sig.data(), sig.size());
     85   } else {
     86     ok = RSA_verify(EVP_MD_type(md), digest_buf, digest_len, sig.data(),
     87                     sig.size(), key.get());
     88   }
     89 
     90   if (ok) {
     91     printf("Result = P\r\n\r\n");
     92   } else {
     93     char buf[256];
     94     ERR_error_string_n(ERR_get_error(), buf, sizeof(buf));
     95     printf("Result = F (%s)\r\n\r\n", buf);
     96   }
     97   ERR_clear_error();
     98   return true;
     99 }
    100 
    101 int cavp_rsa2_sigver_test_main(int argc, char **argv) {
    102   if (argc != 3) {
    103     fprintf(stderr, "usage: %s (pkcs15|pss) <test file>\n",
    104             argv[0]);
    105     return 1;
    106   }
    107 
    108   TestCtx ctx;
    109   if (strcmp(argv[1], "pkcs15") == 0) {
    110     ctx = {std::vector<uint8_t>(), false};
    111   } else if (strcmp(argv[1], "pss") == 0) {
    112     ctx = {std::vector<uint8_t>(), true};
    113   } else {
    114     fprintf(stderr, "Unknown test type: %s\n", argv[1]);
    115     return 1;
    116   }
    117 
    118   FileTest::Options opts;
    119   opts.path = argv[2];
    120   opts.callback = TestRSA2SigVer;
    121   opts.arg = &ctx;
    122   opts.silent = true;
    123   opts.comment_callback = EchoComment;
    124   return FileTestMain(opts);
    125 }
    126