1 /** @file 2 Application for RSA Primitives Validation. 3 4 Copyright (c) 2010, Intel Corporation. All rights reserved.<BR> 5 This program and the accompanying materials 6 are licensed and made available under the terms and conditions of the BSD License 7 which accompanies this distribution. The full text of the license may be found at 8 http://opensource.org/licenses/bsd-license.php 9 10 THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS, 11 WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED. 12 13 **/ 14 15 #include "Cryptest.h" 16 17 #define RSA_MODULUS_LENGTH 512 18 19 // 20 // RSA PKCS#1 Validation Data from OpenSSL "Fips_rsa_selftest.c" 21 // 22 23 // 24 // Public Modulus of RSA Key 25 // 26 GLOBAL_REMOVE_IF_UNREFERENCED CONST UINT8 RsaN[] = { 27 0xBB, 0xF8, 0x2F, 0x09, 0x06, 0x82, 0xCE, 0x9C, 0x23, 0x38, 0xAC, 0x2B, 0x9D, 0xA8, 0x71, 0xF7, 28 0x36, 0x8D, 0x07, 0xEE, 0xD4, 0x10, 0x43, 0xA4, 0x40, 0xD6, 0xB6, 0xF0, 0x74, 0x54, 0xF5, 0x1F, 29 0xB8, 0xDF, 0xBA, 0xAF, 0x03, 0x5C, 0x02, 0xAB, 0x61, 0xEA, 0x48, 0xCE, 0xEB, 0x6F, 0xCD, 0x48, 30 0x76, 0xED, 0x52, 0x0D, 0x60, 0xE1, 0xEC, 0x46, 0x19, 0x71, 0x9D, 0x8A, 0x5B, 0x8B, 0x80, 0x7F, 31 0xAF, 0xB8, 0xE0, 0xA3, 0xDF, 0xC7, 0x37, 0x72, 0x3E, 0xE6, 0xB4, 0xB7, 0xD9, 0x3A, 0x25, 0x84, 32 0xEE, 0x6A, 0x64, 0x9D, 0x06, 0x09, 0x53, 0x74, 0x88, 0x34, 0xB2, 0x45, 0x45, 0x98, 0x39, 0x4E, 33 0xE0, 0xAA, 0xB1, 0x2D, 0x7B, 0x61, 0xA5, 0x1F, 0x52, 0x7A, 0x9A, 0x41, 0xF6, 0xC1, 0x68, 0x7F, 34 0xE2, 0x53, 0x72, 0x98, 0xCA, 0x2A, 0x8F, 0x59, 0x46, 0xF8, 0xE5, 0xFD, 0x09, 0x1D, 0xBD, 0xCB 35 }; 36 37 // 38 // Public Exponent of RSA Key 39 // 40 GLOBAL_REMOVE_IF_UNREFERENCED CONST UINT8 RsaE[] = { 0x11 }; 41 42 // 43 // Private Exponent of RSA Key 44 // 45 GLOBAL_REMOVE_IF_UNREFERENCED CONST UINT8 RsaD[] = { 46 0xA5, 0xDA, 0xFC, 0x53, 0x41, 0xFA, 0xF2, 0x89, 0xC4, 0xB9, 0x88, 0xDB, 0x30, 0xC1, 0xCD, 0xF8, 47 0x3F, 0x31, 0x25, 0x1E, 0x06, 0x68, 0xB4, 0x27, 0x84, 0x81, 0x38, 0x01, 0x57, 0x96, 0x41, 0xB2, 48 0x94, 0x10, 0xB3, 0xC7, 0x99, 0x8D, 0x6B, 0xC4, 0x65, 0x74, 0x5E, 0x5C, 0x39, 0x26, 0x69, 0xD6, 49 0x87, 0x0D, 0xA2, 0xC0, 0x82, 0xA9, 0x39, 0xE3, 0x7F, 0xDC, 0xB8, 0x2E, 0xC9, 0x3E, 0xDA, 0xC9, 50 0x7F, 0xF3, 0xAD, 0x59, 0x50, 0xAC, 0xCF, 0xBC, 0x11, 0x1C, 0x76, 0xF1, 0xA9, 0x52, 0x94, 0x44, 51 0xE5, 0x6A, 0xAF, 0x68, 0xC5, 0x6C, 0x09, 0x2C, 0xD3, 0x8D, 0xC3, 0xBE, 0xF5, 0xD2, 0x0A, 0x93, 52 0x99, 0x26, 0xED, 0x4F, 0x74, 0xA1, 0x3E, 0xDD, 0xFB, 0xE1, 0xA1, 0xCE, 0xCC, 0x48, 0x94, 0xAF, 53 0x94, 0x28, 0xC2, 0xB7, 0xB8, 0x88, 0x3F, 0xE4, 0x46, 0x3A, 0x4B, 0xC8, 0x5B, 0x1C, 0xB3, 0xC1 54 }; 55 56 // 57 // Known Answer Test (KAT) Data for RSA PKCS#1 Signing 58 // 59 GLOBAL_REMOVE_IF_UNREFERENCED CONST CHAR8 RsaSignData[] = "OpenSSL FIPS 140-2 Public Key RSA KAT"; 60 61 // 62 // Known Signature for the above message, under SHA-1 Digest 63 // 64 GLOBAL_REMOVE_IF_UNREFERENCED CONST UINT8 RsaPkcs1Signature[] = { 65 0x71, 0xEE, 0x1A, 0xC0, 0xFE, 0x01, 0x93, 0x54, 0x79, 0x5C, 0xF2, 0x4C, 0x4A, 0xFD, 0x1A, 0x05, 66 0x8F, 0x64, 0xB1, 0x6D, 0x61, 0x33, 0x8D, 0x9B, 0xE7, 0xFD, 0x60, 0xA3, 0x83, 0xB5, 0xA3, 0x51, 67 0x55, 0x77, 0x90, 0xCF, 0xDC, 0x22, 0x37, 0x8E, 0xD0, 0xE1, 0xAE, 0x09, 0xE3, 0x3D, 0x1E, 0xF8, 68 0x80, 0xD1, 0x8B, 0xC2, 0xEC, 0x0A, 0xD7, 0x6B, 0x88, 0x8B, 0x8B, 0xA1, 0x20, 0x22, 0xBE, 0x59, 69 0x5B, 0xE0, 0x23, 0x24, 0xA1, 0x49, 0x30, 0xBA, 0xA9, 0x9E, 0xE8, 0xB1, 0x8A, 0x62, 0x16, 0xBF, 70 0x4E, 0xCA, 0x2E, 0x4E, 0xBC, 0x29, 0xA8, 0x67, 0x13, 0xB7, 0x9F, 0x1D, 0x04, 0x44, 0xE5, 0x5F, 71 0x35, 0x07, 0x11, 0xBC, 0xED, 0x19, 0x37, 0x21, 0xCF, 0x23, 0x48, 0x1F, 0x72, 0x05, 0xDE, 0xE6, 72 0xE8, 0x7F, 0x33, 0x8A, 0x76, 0x4B, 0x2F, 0x95, 0xDF, 0xF1, 0x5F, 0x84, 0x80, 0xD9, 0x46, 0xB4 73 }; 74 75 // 76 // Default public key 0x10001 = 65537 77 // 78 GLOBAL_REMOVE_IF_UNREFERENCED CONST UINT8 DefaultPublicKey[] = { 79 0x01, 0x00, 0x01 80 }; 81 82 /** 83 Validate UEFI-OpenSSL RSA Interfaces. 84 85 @retval EFI_SUCCESS Validation succeeded. 86 @retval EFI_ABORTED Validation failed. 87 88 **/ 89 EFI_STATUS 90 ValidateCryptRsa ( 91 VOID 92 ) 93 { 94 VOID *Rsa; 95 UINT8 HashValue[SHA1_DIGEST_SIZE]; 96 UINTN HashSize; 97 UINTN CtxSize; 98 VOID *Sha1Ctx; 99 UINT8 *Signature; 100 UINTN SigSize; 101 BOOLEAN Status; 102 UINTN KeySize; 103 UINT8 *KeyBuffer; 104 105 Print (L"\nUEFI-OpenSSL RSA Engine Testing: "); 106 107 // 108 // Generate & Initialize RSA Context 109 // 110 Rsa = RsaNew (); 111 Print (L"\n- Generate RSA Context ... "); 112 if (Rsa == NULL) { 113 Print (L"[Fail]"); 114 return EFI_ABORTED; 115 } 116 117 // 118 // Set/Get RSA Key Components 119 // 120 Print (L"Set/Get RSA Key Components ... "); 121 122 // 123 // Set/Get RSA Key N 124 // 125 Status = RsaSetKey (Rsa, RsaKeyN, RsaN, sizeof (RsaN)); 126 if (!Status) { 127 Print (L"[Fail]"); 128 return EFI_ABORTED; 129 } 130 131 KeySize = 0; 132 Status = RsaGetKey (Rsa, RsaKeyN, NULL, &KeySize); 133 if (Status || KeySize != sizeof (RsaN)) { 134 Print (L"[Fail]"); 135 return EFI_ABORTED; 136 } 137 138 KeyBuffer = AllocatePool (KeySize); 139 Status = RsaGetKey (Rsa, RsaKeyN, KeyBuffer, &KeySize); 140 if (!Status || KeySize != sizeof (RsaN)) { 141 Print (L"[Fail]"); 142 return EFI_ABORTED; 143 } 144 145 if (CompareMem (KeyBuffer, RsaN, KeySize) != 0) { 146 Print (L"[Fail]"); 147 return EFI_ABORTED; 148 } 149 150 FreePool (KeyBuffer); 151 152 // 153 // Set/Get RSA Key E 154 // 155 Status = RsaSetKey (Rsa, RsaKeyE, RsaE, sizeof (RsaE)); 156 if (!Status) { 157 Print (L"[Fail]"); 158 return EFI_ABORTED; 159 } 160 161 KeySize = 0; 162 Status = RsaGetKey (Rsa, RsaKeyE, NULL, &KeySize); 163 if (Status || KeySize != sizeof (RsaE)) { 164 Print (L"[Fail]"); 165 return EFI_ABORTED; 166 } 167 168 KeyBuffer = AllocatePool (KeySize); 169 Status = RsaGetKey (Rsa, RsaKeyE, KeyBuffer, &KeySize); 170 if (!Status || KeySize != sizeof (RsaE)) { 171 Print (L"[Fail]"); 172 return EFI_ABORTED; 173 } 174 175 if (CompareMem (KeyBuffer, RsaE, KeySize) != 0) { 176 Print (L"[Fail]"); 177 return EFI_ABORTED; 178 } 179 180 FreePool (KeyBuffer); 181 182 // 183 // Clear/Get RSA Key Components 184 // 185 Print (L"Clear/Get RSA Key Components ... "); 186 187 // 188 // Clear/Get RSA Key N 189 // 190 Status = RsaSetKey (Rsa, RsaKeyN, NULL, 0); 191 if (!Status) { 192 Print (L"[Fail]"); 193 return EFI_ABORTED; 194 } 195 196 KeySize = 1; 197 Status = RsaGetKey (Rsa, RsaKeyN, NULL, &KeySize); 198 if (!Status || KeySize != 0) { 199 Print (L"[Fail]"); 200 return EFI_ABORTED; 201 } 202 203 // 204 // Clear/Get RSA Key E 205 // 206 Status = RsaSetKey (Rsa, RsaKeyE, NULL, 0); 207 if (!Status) { 208 Print (L"[Fail]"); 209 return EFI_ABORTED; 210 } 211 212 KeySize = 1; 213 Status = RsaGetKey (Rsa, RsaKeyE, NULL, &KeySize); 214 if (!Status || KeySize != 0) { 215 Print (L"[Fail]"); 216 return EFI_ABORTED; 217 } 218 219 // 220 // Generate RSA Key Components 221 // 222 Print (L"Generate RSA Key Components ... "); 223 224 Status = RsaGenerateKey (Rsa, RSA_MODULUS_LENGTH, NULL, 0); 225 if (!Status) { 226 Print (L"[Fail]"); 227 return EFI_ABORTED; 228 } 229 230 KeySize = RSA_MODULUS_LENGTH / 8; 231 KeyBuffer = AllocatePool (KeySize); 232 Status = RsaGetKey (Rsa, RsaKeyE, KeyBuffer, &KeySize); 233 if (!Status) { 234 Print (L"[Fail]"); 235 return EFI_ABORTED; 236 } 237 238 if (KeySize != 3 || 239 CompareMem (KeyBuffer, DefaultPublicKey, 3) != 0) { 240 Print (L"[Fail]"); 241 return EFI_ABORTED; 242 } 243 244 KeySize = RSA_MODULUS_LENGTH / 8; 245 Status = RsaGetKey (Rsa, RsaKeyN, KeyBuffer, &KeySize); 246 if (!Status) { 247 Print (L"[Fail]"); 248 return EFI_ABORTED; 249 } 250 251 if (KeySize != RSA_MODULUS_LENGTH / 8) { 252 Print (L"[Fail]"); 253 return EFI_ABORTED; 254 } 255 256 if (!RsaCheckKey (Rsa)) { 257 Print (L"[Fail]"); 258 return EFI_ABORTED; 259 } 260 261 // 262 // Check invalid RSA key components 263 // 264 Print (L"Check Invalid RSA Key Components ... "); 265 266 Status = RsaSetKey (Rsa, RsaKeyN, RsaN, sizeof (RsaN)); 267 if (!Status) { 268 Print (L"[Fail]"); 269 return EFI_ABORTED; 270 } 271 272 if (RsaCheckKey (Rsa)) { 273 Print (L"[Fail]"); 274 return EFI_ABORTED; 275 } 276 277 Status = RsaSetKey (Rsa, RsaKeyN, KeyBuffer, KeySize); 278 if (!Status) { 279 Print (L"[Fail]"); 280 return EFI_ABORTED; 281 } 282 283 if (!RsaCheckKey (Rsa)) { 284 Print (L"[Fail]"); 285 return EFI_ABORTED; 286 } 287 288 Status = RsaSetKey (Rsa, RsaKeyE, RsaE, sizeof (RsaE)); 289 if (!Status) { 290 Print (L"[Fail]"); 291 return EFI_ABORTED; 292 } 293 294 if (RsaCheckKey (Rsa)) { 295 Print (L"[Fail]"); 296 return EFI_ABORTED; 297 } 298 299 FreePool (KeyBuffer); 300 301 // 302 // SHA-1 Digest Message for PKCS#1 Signature 303 // 304 Print (L"Hash Original Message ... "); 305 HashSize = SHA1_DIGEST_SIZE; 306 ZeroMem (HashValue, HashSize); 307 CtxSize = Sha1GetContextSize (); 308 Sha1Ctx = AllocatePool (CtxSize); 309 310 Status = Sha1Init (Sha1Ctx); 311 if (!Status) { 312 Print (L"[Fail]"); 313 return EFI_ABORTED; 314 } 315 316 Status = Sha1Update (Sha1Ctx, RsaSignData, AsciiStrLen (RsaSignData)); 317 if (!Status) { 318 Print (L"[Fail]"); 319 return EFI_ABORTED; 320 } 321 322 Status = Sha1Final (Sha1Ctx, HashValue); 323 if (!Status) { 324 Print (L"[Fail]"); 325 return EFI_ABORTED; 326 } 327 328 FreePool (Sha1Ctx); 329 330 // 331 // Sign RSA PKCS#1-encoded Signature 332 // 333 Print (L"PKCS#1 Signature ... "); 334 335 RsaFree (Rsa); 336 337 Rsa = RsaNew (); 338 if (Rsa == NULL) { 339 Print (L"[Fail]"); 340 return EFI_ABORTED; 341 } 342 343 Status = RsaSetKey (Rsa, RsaKeyN, RsaN, sizeof (RsaN)); 344 if (!Status) { 345 Print (L"[Fail]"); 346 return EFI_ABORTED; 347 } 348 349 Status = RsaSetKey (Rsa, RsaKeyE, RsaE, sizeof (RsaE)); 350 if (!Status) { 351 Print (L"[Fail]"); 352 return EFI_ABORTED; 353 } 354 355 Status = RsaSetKey (Rsa, RsaKeyD, RsaD, sizeof (RsaD)); 356 if (!Status) { 357 Print (L"[Fail]"); 358 return EFI_ABORTED; 359 } 360 361 SigSize = 0; 362 Status = RsaPkcs1Sign (Rsa, HashValue, HashSize, NULL, &SigSize); 363 if (Status || SigSize == 0) { 364 Print (L"[Fail]"); 365 return EFI_ABORTED; 366 } 367 368 Signature = AllocatePool (SigSize); 369 Status = RsaPkcs1Sign (Rsa, HashValue, HashSize, Signature, &SigSize); 370 if (!Status) { 371 Print (L"[Fail]"); 372 return EFI_ABORTED; 373 } 374 375 if (SigSize != sizeof (RsaPkcs1Signature)) { 376 Print (L"[Fail]"); 377 return EFI_ABORTED; 378 } 379 380 if (CompareMem (Signature, RsaPkcs1Signature, SigSize) != 0) { 381 Print (L"[Fail]"); 382 return EFI_ABORTED; 383 } 384 385 // 386 // Verify RSA PKCS#1-encoded Signature 387 // 388 389 Print (L"PKCS#1 Signature Verification ... "); 390 391 Status = RsaPkcs1Verify (Rsa, HashValue, HashSize, Signature, SigSize); 392 if (!Status) { 393 Print (L"[Fail]"); 394 return EFI_ABORTED; 395 } 396 397 // 398 // Release Resources 399 // 400 RsaFree (Rsa); 401 Print (L"Release RSA Context ... [Pass]"); 402 403 Print (L"\n"); 404 405 return EFI_SUCCESS; 406 } 407
