]> git.ipfire.org Git - thirdparty/openssl.git/blame - test/ffc_internal_test.c
projects / thirdparty / openssl.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
Update copyright year
[thirdparty/openssl.git] / test / ffc_internal_test.c
CommitLineData
8083fd3a 1/*
8020d79b 2 * Copyright 2019-2021 The OpenSSL Project Authors. All Rights Reserved.
8083fd3a
SL		 3 * Copyright (c) 2019-2020, Oracle and/or its affiliates. All rights reserved.
4 *
5 * Licensed under the Apache License 2.0 (the "License"). You may not use
6 * this file except in compliance with the License. You can obtain a copy
7 * in the file LICENSE in the source distribution or at
8 * https://www.openssl.org/source/license.html
9 */
10
25e49af9
MC		 11/*
12 * This is an internal test that is intentionally using internal APIs. Some of
13 * those APIs are deprecated for public use.
14 */
15#include "internal/deprecated.h"
16
8083fd3a
SL		 17#include <stdio.h>
18#include <stdlib.h>
19#include <string.h>
20
21#include "internal/nelem.h"
22#include <openssl/crypto.h>
23#include <openssl/bio.h>
24#include <openssl/bn.h>
25#include <openssl/rand.h>
26#include <openssl/err.h>
27#include "testutil.h"
28
29#include "internal/ffc.h"
30
31#ifndef OPENSSL_NO_DSA
32static const unsigned char dsa_2048_224_sha224_p[] = {
33 0x93, 0x57, 0x93, 0x62, 0x1b, 0x9a, 0x10, 0x9b, 0xc1, 0x56, 0x0f, 0x24,
34 0x71, 0x76, 0x4e, 0xd3, 0xed, 0x78, 0x78, 0x7a, 0xbf, 0x89, 0x71, 0x67,
35 0x8e, 0x03, 0xd8, 0x5b, 0xcd, 0x22, 0x8f, 0x70, 0x74, 0xff, 0x22, 0x05,
36 0x07, 0x0c, 0x4c, 0x60, 0xed, 0x41, 0xe1, 0x9e, 0x9c, 0xaa, 0x3e, 0x19,
37 0x5c, 0x3d, 0x80, 0x58, 0xb2, 0x7f, 0x5f, 0x89, 0xec, 0xb5, 0x19, 0xdb,
38 0x06, 0x11, 0xe9, 0x78, 0x5c, 0xf9, 0xa0, 0x9e, 0x70, 0x62, 0x14, 0x7b,
39 0xda, 0x92, 0xbf, 0xb2, 0x6b, 0x01, 0x6f, 0xb8, 0x68, 0x9c, 0x89, 0x36,
40 0x89, 0x72, 0x79, 0x49, 0x93, 0x3d, 0x14, 0xb2, 0x2d, 0xbb, 0xf0, 0xdf,
41 0x94, 0x45, 0x0b, 0x5f, 0xf1, 0x75, 0x37, 0xeb, 0x49, 0xb9, 0x2d, 0xce,
42 0xb7, 0xf4, 0x95, 0x77, 0xc2, 0xe9, 0x39, 0x1c, 0x4e, 0x0c, 0x40, 0x62,
43 0x33, 0x0a, 0xe6, 0x29, 0x6f, 0xba, 0xef, 0x02, 0xdd, 0x0d, 0xe4, 0x04,
44 0x01, 0x70, 0x40, 0xb9, 0xc9, 0x7e, 0x2f, 0x10, 0x37, 0xe9, 0xde, 0xb0,
45 0xf6, 0xeb, 0x71, 0x7f, 0x9c, 0x35, 0x16, 0xf3, 0x0d, 0xc4, 0xe8, 0x02,
46 0x37, 0x6c, 0xdd, 0xb3, 0x8d, 0x2d, 0x1e, 0x28, 0x13, 0x22, 0x89, 0x40,
47 0xe5, 0xfa, 0x16, 0x67, 0xd6, 0xda, 0x12, 0xa2, 0x38, 0x83, 0x25, 0xcc,
48 0x26, 0xc1, 0x27, 0x74, 0xfe, 0xf6, 0x7a, 0xb6, 0xa1, 0xe4, 0xe8, 0xdf,
49 0x5d, 0xd2, 0x9c, 0x2f, 0xec, 0xea, 0x08, 0xca, 0x48, 0xdb, 0x18, 0x4b,
50 0x12, 0xee, 0x16, 0x9b, 0xa6, 0x00, 0xa0, 0x18, 0x98, 0x7d, 0xce, 0x6c,
51 0x6d, 0xf8, 0xfc, 0x95, 0x51, 0x1b, 0x0a, 0x40, 0xb6, 0xfc, 0xe5, 0xe2,
52 0xb0, 0x26, 0x53, 0x4c, 0xd7, 0xfe, 0xaa, 0x6d, 0xbc, 0xdd, 0xc0, 0x61,
53 0x65, 0xe4, 0x89, 0x44, 0x18, 0x6f, 0xd5, 0x39, 0xcf, 0x75, 0x6d, 0x29,
54 0xcc, 0xf8, 0x40, 0xab
55};
56static const unsigned char dsa_2048_224_sha224_q[] = {
57 0xf2, 0x5e, 0x4e, 0x9a, 0x15, 0xa8, 0x13, 0xdf, 0xa3, 0x17, 0x90, 0xc6,
58 0xd6, 0x5e, 0xb1, 0xfb, 0x31, 0xf8, 0xb5, 0xb1, 0x4b, 0xa7, 0x6d, 0xde,
59 0x57, 0x76, 0x6f, 0x11
60};
61static const unsigned char dsa_2048_224_sha224_seed[] = {
62 0xd2, 0xb1, 0x36, 0xd8, 0x5b, 0x8e, 0xa4, 0xb2, 0x6a, 0xab, 0x4e, 0x85,
63 0x8b, 0x49, 0xf9, 0xdd, 0xe6, 0xa1, 0xcd, 0xad, 0x49, 0x52, 0xe9, 0xb3,
64 0x36, 0x17, 0x06, 0xcf
65};
66static const unsigned char dsa_2048_224_sha224_bad_seed[] = {
67 0xd2, 0xb1, 0x36, 0xd8, 0x5b, 0x8e, 0xa4, 0xb2, 0x6a, 0xab, 0x4e, 0x85,
68 0x8b, 0x49, 0xf9, 0xdd, 0xe6, 0xa1, 0xcd, 0xad, 0x49, 0x52, 0xe9, 0xb3,
69 0x36, 0x17, 0x06, 0xd0
70};
71static int dsa_2048_224_sha224_counter = 2878;
72
73static const unsigned char dsa_3072_256_sha512_p[] = {
74 0x9a, 0x82, 0x8b, 0x8d, 0xea, 0xd0, 0x56, 0x23, 0x88, 0x2d, 0x5d, 0x41,
75 0x42, 0x4c, 0x13, 0x5a, 0x15, 0x81, 0x59, 0x02, 0xc5, 0x00, 0x82, 0x28,
76 0x01, 0xee, 0x8f, 0x99, 0xfd, 0x6a, 0x95, 0xf2, 0x0f, 0xae, 0x34, 0x77,
77 0x29, 0xcc, 0xc7, 0x50, 0x0e, 0x03, 0xef, 0xb0, 0x4d, 0xe5, 0x10, 0x00,
78 0xa8, 0x7b, 0xce, 0x8c, 0xc6, 0xb2, 0x01, 0x74, 0x23, 0x1b, 0x7f, 0xe8,
79 0xf9, 0x71, 0x28, 0x39, 0xcf, 0x18, 0x04, 0xb2, 0x95, 0x61, 0x2d, 0x11,
80 0x71, 0x6b, 0xdd, 0x0d, 0x0b, 0xf0, 0xe6, 0x97, 0x52, 0x29, 0x9d, 0x45,
81 0xb1, 0x23, 0xda, 0xb0, 0xd5, 0xcb, 0x51, 0x71, 0x8e, 0x40, 0x9c, 0x97,
82 0x13, 0xea, 0x1f, 0x4b, 0x32, 0x5d, 0x27, 0x74, 0x81, 0x8d, 0x47, 0x8a,
83 0x08, 0xce, 0xf4, 0xd1, 0x28, 0xa2, 0x0f, 0x9b, 0x2e, 0xc9, 0xa3, 0x0e,
84 0x5d, 0xde, 0x47, 0x19, 0x6d, 0x5f, 0x98, 0xe0, 0x8e, 0x7f, 0x60, 0x8f,
85 0x25, 0xa7, 0xa4, 0xeb, 0xb9, 0xf3, 0x24, 0xa4, 0x9e, 0xc1, 0xbd, 0x14,
86 0x27, 0x7c, 0x27, 0xc8, 0x4f, 0x5f, 0xed, 0xfd, 0x86, 0xc8, 0xf1, 0xd7,
87 0x82, 0xe2, 0xeb, 0xe5, 0xd2, 0xbe, 0xb0, 0x65, 0x28, 0xab, 0x99, 0x9e,
88 0xcd, 0xd5, 0x22, 0xf8, 0x1b, 0x3b, 0x01, 0xe9, 0x20, 0x3d, 0xe4, 0x98,
89 0x22, 0xfe, 0xfc, 0x09, 0x7e, 0x95, 0x20, 0xda, 0xb6, 0x12, 0x2c, 0x94,
90 0x5c, 0xea, 0x74, 0x71, 0xbd, 0x19, 0xac, 0x78, 0x43, 0x02, 0x51, 0xb8,
91 0x5f, 0x06, 0x1d, 0xea, 0xc8, 0xa4, 0x3b, 0xc9, 0x78, 0xa3, 0x2b, 0x09,
92 0xdc, 0x76, 0x74, 0xc4, 0x23, 0x14, 0x48, 0x2e, 0x84, 0x2b, 0xa3, 0x82,
93 0xc1, 0xba, 0x0b, 0x39, 0x2a, 0x9f, 0x24, 0x7b, 0xd6, 0xc2, 0xea, 0x5a,
94 0xb6, 0xbd, 0x15, 0x82, 0x21, 0x85, 0xe0, 0x6b, 0x12, 0x4f, 0x8d, 0x64,
95 0x75, 0xeb, 0x7e, 0xa1, 0xdb, 0xe0, 0x9d, 0x25, 0xae, 0x3b, 0xe9, 0x9b,
96 0x21, 0x7f, 0x9a, 0x3d, 0x66, 0xd0, 0x52, 0x1d, 0x39, 0x8b, 0xeb, 0xfc,
97 0xec, 0xbe, 0x72, 0x20, 0x5a, 0xdf, 0x1b, 0x00, 0xf1, 0x0e, 0xed, 0xc6,
98 0x78, 0x6f, 0xc9, 0xab, 0xe4, 0xd6, 0x81, 0x8b, 0xcc, 0xf6, 0xd4, 0x6a,
99 0x31, 0x62, 0x08, 0xd9, 0x38, 0x21, 0x8f, 0xda, 0x9e, 0xb1, 0x2b, 0x9c,
100 0xc0, 0xbe, 0xf7, 0x9a, 0x43, 0x2d, 0x07, 0x59, 0x46, 0x0e, 0xd5, 0x23,
101 0x4e, 0xaa, 0x4a, 0x04, 0xc2, 0xde, 0x33, 0xa6, 0x34, 0xba, 0xac, 0x4f,
102 0x78, 0xd8, 0xca, 0x76, 0xce, 0x5e, 0xd4, 0xf6, 0x85, 0x4c, 0x6a, 0x60,
103 0x08, 0x5d, 0x0e, 0x34, 0x8b, 0xf2, 0xb6, 0xe3, 0xb7, 0x51, 0xca, 0x43,
104 0xaa, 0x68, 0x7b, 0x0a, 0x6e, 0xea, 0xce, 0x1e, 0x2c, 0x34, 0x8e, 0x0f,
105 0xe2, 0xcc, 0x38, 0xf2, 0x9a, 0x98, 0xef, 0xe6, 0x7f, 0xf6, 0x62, 0xbb
106};
107static const unsigned char dsa_3072_256_sha512_q[] = {
108 0xc1, 0xdb, 0xc1, 0x21, 0x50, 0x49, 0x63, 0xa3, 0x77, 0x6d, 0x4c, 0x92,
109 0xed, 0x58, 0x9e, 0x98, 0xea, 0xac, 0x7a, 0x90, 0x13, 0x24, 0xf7, 0xcd,
110 0xd7, 0xe6, 0xd4, 0x8f, 0xf0, 0x45, 0x4b, 0xf7
111};
112static const unsigned char dsa_3072_256_sha512_seed[] = {
113 0x35, 0x24, 0xb5, 0x59, 0xd5, 0x27, 0x58, 0x10, 0xf6, 0xa2, 0x7c, 0x9a,
114 0x0d, 0xc2, 0x70, 0x8a, 0xb0, 0x41, 0x4a, 0x84, 0x0b, 0xfe, 0x66, 0xf5,
115 0x3a, 0xbf, 0x4a, 0xa9, 0xcb, 0xfc, 0xa6, 0x22
116};
117static int dsa_3072_256_sha512_counter = 1604;
118
119static const unsigned char dsa_2048_224_sha256_p[] = {
120 0xe9, 0x13, 0xbc, 0xf2, 0x14, 0x5d, 0xf9, 0x79, 0xd6, 0x6d, 0xf5, 0xc5,
121 0xbe, 0x7b, 0x6f, 0x90, 0x63, 0xd0, 0xfd, 0xee, 0x4f, 0xc4, 0x65, 0x83,
122 0xbf, 0xec, 0xc3, 0x2c, 0x5d, 0x30, 0xc8, 0xa4, 0x3b, 0x2f, 0x3b, 0x29,
123 0x43, 0x69, 0xfb, 0x6e, 0xa9, 0xa4, 0x07, 0x6c, 0xcd, 0xb0, 0xd2, 0xd9,
124 0xd3, 0xe6, 0xf4, 0x87, 0x16, 0xb7, 0xe5, 0x06, 0xb9, 0xba, 0xd6, 0x87,
125 0xbc, 0x01, 0x9e, 0xba, 0xc2, 0xcf, 0x39, 0xb6, 0xec, 0xdc, 0x75, 0x07,
126 0xc1, 0x39, 0x2d, 0x6a, 0x95, 0x31, 0x97, 0xda, 0x54, 0x20, 0x29, 0xe0,
127 0x1b, 0xf9, 0x74, 0x65, 0xaa, 0xc1, 0x47, 0xd3, 0x9e, 0xb4, 0x3c, 0x1d,
128 0xe0, 0xdc, 0x2d, 0x21, 0xab, 0x12, 0x3b, 0xa5, 0x51, 0x1e, 0xc6, 0xbc,
129 0x6b, 0x4c, 0x22, 0xd1, 0x7c, 0xc6, 0xce, 0xcb, 0x8c, 0x1d, 0x1f, 0xce,
130 0x1c, 0xe2, 0x75, 0x49, 0x6d, 0x2c, 0xee, 0x7f, 0x5f, 0xb8, 0x74, 0x42,
131 0x5c, 0x96, 0x77, 0x13, 0xff, 0x80, 0xf3, 0x05, 0xc7, 0xfe, 0x08, 0x3b,
132 0x25, 0x36, 0x46, 0xa2, 0xc4, 0x26, 0xb4, 0xb0, 0x3b, 0xd5, 0xb2, 0x4c,
133 0x13, 0x29, 0x0e, 0x47, 0x31, 0x66, 0x7d, 0x78, 0x57, 0xe6, 0xc2, 0xb5,
134 0x9f, 0x46, 0x17, 0xbc, 0xa9, 0x9a, 0x49, 0x1c, 0x0f, 0x45, 0xe0, 0x88,
135 0x97, 0xa1, 0x30, 0x7c, 0x42, 0xb7, 0x2c, 0x0a, 0xce, 0xb3, 0xa5, 0x7a,
136 0x61, 0x8e, 0xab, 0x44, 0xc1, 0xdc, 0x70, 0xe5, 0xda, 0x78, 0x2a, 0xb4,
137 0xe6, 0x3c, 0xa0, 0x58, 0xda, 0x62, 0x0a, 0xb2, 0xa9, 0x3d, 0xaa, 0x49,
138 0x7e, 0x7f, 0x9a, 0x19, 0x67, 0xee, 0xd6, 0xe3, 0x67, 0x13, 0xe8, 0x6f,
139 0x79, 0x50, 0x76, 0xfc, 0xb3, 0x9d, 0x7e, 0x9e, 0x3e, 0x6e, 0x47, 0xb1,
140 0x11, 0x5e, 0xc8, 0x83, 0x3a, 0x3c, 0xfc, 0x82, 0x5c, 0x9d, 0x34, 0x65,
141 0x73, 0xb4, 0x56, 0xd5
142};
143static const unsigned char dsa_2048_224_sha256_q[] = {
144 0xb0, 0xdf, 0xa1, 0x7b, 0xa4, 0x77, 0x64, 0x0e, 0xb9, 0x28, 0xbb, 0xbc,
145 0xd4, 0x60, 0x02, 0xaf, 0x21, 0x8c, 0xb0, 0x69, 0x0f, 0x8a, 0x7b, 0xc6,
146 0x80, 0xcb, 0x0a, 0x45
147};
148static const unsigned char dsa_2048_224_sha256_g[] = {
149 0x11, 0x7c, 0x5f, 0xf6, 0x99, 0x44, 0x67, 0x5b, 0x69, 0xa3, 0x83, 0xef,
150 0xb5, 0x85, 0xa2, 0x19, 0x35, 0x18, 0x2a, 0xf2, 0x58, 0xf4, 0xc9, 0x58,
151 0x9e, 0xb9, 0xe8, 0x91, 0x17, 0x2f, 0xb0, 0x60, 0x85, 0x95, 0xa6, 0x62,
152 0x36, 0xd0, 0xff, 0x94, 0xb9, 0xa6, 0x50, 0xad, 0xa6, 0xf6, 0x04, 0x28,
153 0xc2, 0xc9, 0xb9, 0x75, 0xf3, 0x66, 0xb4, 0xeb, 0xf6, 0xd5, 0x06, 0x13,
154 0x01, 0x64, 0x82, 0xa9, 0xf1, 0xd5, 0x41, 0xdc, 0xf2, 0x08, 0xfc, 0x2f,
155 0xc4, 0xa1, 0x21, 0xee, 0x7d, 0xbc, 0xda, 0x5a, 0xa4, 0xa2, 0xb9, 0x68,
156 0x87, 0x36, 0xba, 0x53, 0x9e, 0x14, 0x4e, 0x76, 0x5c, 0xba, 0x79, 0x3d,
157 0x0f, 0xe5, 0x99, 0x1c, 0x27, 0xfc, 0xaf, 0x10, 0x63, 0x87, 0x68, 0x0e,
158 0x3e, 0x6e, 0xaa, 0xf3, 0xdf, 0x76, 0x7e, 0x02, 0x9a, 0x41, 0x96, 0xa1,
159 0x6c, 0xbb, 0x67, 0xee, 0x0c, 0xad, 0x72, 0x65, 0xf1, 0x70, 0xb0, 0x39,
160 0x9b, 0x54, 0x5f, 0xd7, 0x6c, 0xc5, 0x9a, 0x90, 0x53, 0x18, 0xde, 0x5e,
161 0x62, 0x89, 0xb9, 0x2f, 0x66, 0x59, 0x3a, 0x3d, 0x10, 0xeb, 0xa5, 0x99,
162 0xf6, 0x21, 0x7d, 0xf2, 0x7b, 0x42, 0x15, 0x1c, 0x55, 0x79, 0x15, 0xaa,
163 0xa4, 0x17, 0x2e, 0x48, 0xc3, 0xa8, 0x36, 0xf5, 0x1a, 0x97, 0xce, 0xbd,
164 0x72, 0xef, 0x1d, 0x50, 0x5b, 0xb1, 0x60, 0x0a, 0x5c, 0x0b, 0xa6, 0x21,
165 0x38, 0x28, 0x4e, 0x89, 0x33, 0x1d, 0xb5, 0x7e, 0x5c, 0xf1, 0x6b, 0x2c,
166 0xbd, 0xad, 0x84, 0xb2, 0x8e, 0x96, 0xe2, 0x30, 0xe7, 0x54, 0xb8, 0xc9,
167 0x70, 0xcb, 0x10, 0x30, 0x63, 0x90, 0xf4, 0x45, 0x64, 0x93, 0x09, 0x38,
168 0x6a, 0x47, 0x58, 0x31, 0x04, 0x1a, 0x18, 0x04, 0x1a, 0xe0, 0xd7, 0x0b,
169 0x3c, 0xbe, 0x2a, 0x9c, 0xec, 0xcc, 0x0d, 0x0c, 0xed, 0xde, 0x54, 0xbc,
170 0xe6, 0x93, 0x59, 0xfc
171};
172
173static int ffc_params_validate_g_unverified_test(void)
174{
175 int ret = 0, res;
176 FFC_PARAMS params;
177 BIGNUM *p = NULL, *q = NULL, *g = NULL;
178 BIGNUM *p1 = NULL, *g1 = NULL;
179
5357c106 180 ossl_ffc_params_init(&params);
8083fd3a
SL		 181
182 if (!TEST_ptr(p = BN_bin2bn(dsa_2048_224_sha256_p,
183 sizeof(dsa_2048_224_sha256_p), NULL)))
184 goto err;
185 p1 = p;
186 if (!TEST_ptr(q = BN_bin2bn(dsa_2048_224_sha256_q,
187 sizeof(dsa_2048_224_sha256_q), NULL)))
188 goto err;
189 if (!TEST_ptr(g = BN_bin2bn(dsa_2048_224_sha256_g,
190 sizeof(dsa_2048_224_sha256_g), NULL)))
191 goto err;
192 g1 = g;
193
194 /* Fail if g is NULL */
5357c106 195 ossl_ffc_params_set0_pqg(&params, p, q, NULL);
8083fd3a
SL		 196 p = NULL;
197 q = NULL;
5357c106
P		 198 ossl_ffc_params_set_flags(&params, FFC_PARAM_FLAG_VALIDATE_G);
199 ossl_ffc_set_digest(&params, "SHA256", NULL);
4f2271d5 200
5357c106
P		 201 if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
202 FFC_PARAM_TYPE_DSA,
203 &res, NULL)))
8083fd3a
SL		 204 goto err;
205
5357c106 206 ossl_ffc_params_set0_pqg(&params, p, q, g);
8083fd3a 207 g = NULL;
5357c106
P		 208 if (!TEST_true(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
209 FFC_PARAM_TYPE_DSA,
210 &res, NULL)))
8083fd3a
SL		 211 goto err;
212
213 /* incorrect g */
214 BN_add_word(g1, 1);
5357c106
P		 215 if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
216 FFC_PARAM_TYPE_DSA,
217 &res, NULL)))
8083fd3a
SL		 218 goto err;
219
220 /* fail if g < 2 */
221 BN_set_word(g1, 1);
5357c106
P		 222 if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
223 FFC_PARAM_TYPE_DSA,
224 &res, NULL)))
8083fd3a
SL		 225 goto err;
226
227 BN_copy(g1, p1);
228 /* Fail if g >= p */
5357c106
P		 229 if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
230 FFC_PARAM_TYPE_DSA,
231 &res, NULL)))
8083fd3a
SL		 232 goto err;
233
234 ret = 1;
235err:
5357c106 236 ossl_ffc_params_cleanup(&params);
8083fd3a
SL		 237 BN_free(p);
238 BN_free(q);
239 BN_free(g);
240 return ret;
241}
242
243static int ffc_params_validate_pq_test(void)
244{
245 int ret = 0, res = -1;
246 FFC_PARAMS params;
247 BIGNUM *p = NULL, *q = NULL;
248
5357c106 249 ossl_ffc_params_init(&params);
8083fd3a
SL		 250 if (!TEST_ptr(p = BN_bin2bn(dsa_2048_224_sha224_p,
251 sizeof(dsa_2048_224_sha224_p),
252 NULL)))
253 goto err;
254 if (!TEST_ptr(q = BN_bin2bn(dsa_2048_224_sha224_q,
255 sizeof(dsa_2048_224_sha224_q),
256 NULL)))
257 goto err;
258
259 /* No p */
5357c106 260 ossl_ffc_params_set0_pqg(&params, NULL, q, NULL);
8083fd3a 261 q = NULL;
5357c106
P		 262 ossl_ffc_params_set_flags(&params, FFC_PARAM_FLAG_VALIDATE_PQ);
263 ossl_ffc_set_digest(&params, "SHA224", NULL);
4f2271d5 264
5357c106
P		 265 if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
266 FFC_PARAM_TYPE_DSA,
267 &res, NULL)))
8083fd3a
SL		 268 goto err;
269
270 /* Test valid case */
5357c106 271 ossl_ffc_params_set0_pqg(&params, p, NULL, NULL);
8083fd3a 272 p = NULL;
5357c106
P		 273 ossl_ffc_params_set_validate_params(&params, dsa_2048_224_sha224_seed,
274 sizeof(dsa_2048_224_sha224_seed),
275 dsa_2048_224_sha224_counter);
276 if (!TEST_true(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
277 FFC_PARAM_TYPE_DSA,
278 &res, NULL)))
8083fd3a
SL		 279 goto err;
280
281 /* Bad counter - so p is not prime */
5357c106
P		 282 ossl_ffc_params_set_validate_params(&params, dsa_2048_224_sha224_seed,
283 sizeof(dsa_2048_224_sha224_seed),
284 1);
285 if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
286 FFC_PARAM_TYPE_DSA,
287 &res, NULL)))
8083fd3a
SL		 288 goto err;
289
290 /* seedlen smaller than N */
5357c106
P		 291 ossl_ffc_params_set_validate_params(&params, dsa_2048_224_sha224_seed,
292 sizeof(dsa_2048_224_sha224_seed)-1,
293 dsa_2048_224_sha224_counter);
294 if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
295 FFC_PARAM_TYPE_DSA,
296 &res, NULL)))
8083fd3a
SL		 297 goto err;
298
299 /* Provided seed doesnt produce a valid prime q */
5357c106
P		 300 ossl_ffc_params_set_validate_params(&params, dsa_2048_224_sha224_bad_seed,
301 sizeof(dsa_2048_224_sha224_bad_seed),
302 dsa_2048_224_sha224_counter);
303 if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
304 FFC_PARAM_TYPE_DSA,
305 &res, NULL)))
8083fd3a
SL		 306 goto err;
307
308 if (!TEST_ptr(p = BN_bin2bn(dsa_3072_256_sha512_p,
309 sizeof(dsa_3072_256_sha512_p), NULL)))
310 goto err;
311 if (!TEST_ptr(q = BN_bin2bn(dsa_3072_256_sha512_q,
312 sizeof(dsa_3072_256_sha512_q),
313 NULL)))
314 goto err;
315
316
5357c106 317 ossl_ffc_params_set0_pqg(&params, p, q, NULL);
8083fd3a 318 p = q = NULL;
5357c106
P		 319 ossl_ffc_set_digest(&params, "SHA512", NULL);
320 ossl_ffc_params_set_validate_params(&params, dsa_3072_256_sha512_seed,
321 sizeof(dsa_3072_256_sha512_seed),
322 dsa_3072_256_sha512_counter);
8083fd3a 323 /* Q doesn't div P-1 */
5357c106
P		 324 if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
325 FFC_PARAM_TYPE_DSA,
326 &res, NULL)))
8083fd3a
SL		 327 goto err;
328
329 /* Bad L/N for FIPS DH */
5357c106
P		 330 if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
331 FFC_PARAM_TYPE_DH,
332 &res, NULL)))
8083fd3a
SL		 333 goto err;
334
335 ret = 1;
336err:
5357c106 337 ossl_ffc_params_cleanup(&params);
8083fd3a
SL		 338 BN_free(p);
339 BN_free(q);
340 return ret;
341}
342#endif /* OPENSSL_NO_DSA */
343
344#ifndef OPENSSL_NO_DH
345static int ffc_params_gen_test(void)
346{
347 int ret = 0, res = -1;
348 FFC_PARAMS params;
349
5357c106
P		 350 ossl_ffc_params_init(&params);
351 if (!TEST_true(ossl_ffc_params_FIPS186_4_generate(NULL, &params,
352 FFC_PARAM_TYPE_DH,
353 2048, 256, &res, NULL)))
8083fd3a 354 goto err;
5357c106
P		 355 if (!TEST_true(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
356 FFC_PARAM_TYPE_DH,
357 &res, NULL)))
8083fd3a
SL		 358 goto err;
359
360 ret = 1;
361err:
5357c106 362 ossl_ffc_params_cleanup(&params);
8083fd3a
SL		 363 return ret;
364}
365
366static int ffc_params_gen_canonicalg_test(void)
367{
368 int ret = 0, res = -1;
369 FFC_PARAMS params;
370
5357c106 371 ossl_ffc_params_init(&params);
8083fd3a 372 params.gindex = 1;
5357c106
P		 373 if (!TEST_true(ossl_ffc_params_FIPS186_4_generate(NULL, &params,
374 FFC_PARAM_TYPE_DH,
375 2048, 256, &res, NULL)))
8083fd3a 376 goto err;
5357c106
P		 377 if (!TEST_true(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
378 FFC_PARAM_TYPE_DH,
379 &res, NULL)))
8083fd3a
SL		 380 goto err;
381
5357c106 382 if (!TEST_true(ossl_ffc_params_print(bio_out, &params, 4)))
8083fd3a
SL		 383 goto err;
384
385 ret = 1;
386err:
5357c106 387 ossl_ffc_params_cleanup(&params);
8083fd3a
SL		 388 return ret;
389}
390
391static int ffc_params_fips186_2_gen_validate_test(void)
392{
393 int ret = 0, res = -1;
394 FFC_PARAMS params;
395 BIGNUM *bn = NULL;
396
5357c106 397 ossl_ffc_params_init(&params);
8083fd3a
SL		 398 if (!TEST_ptr(bn = BN_new()))
399 goto err;
5357c106
P		 400 if (!TEST_true(ossl_ffc_params_FIPS186_2_generate(NULL, &params,
401 FFC_PARAM_TYPE_DH,
402 1024, 160, &res, NULL)))
8083fd3a 403 goto err;
5357c106
P		 404 if (!TEST_true(ossl_ffc_params_FIPS186_2_validate(NULL, &params,
405 FFC_PARAM_TYPE_DH,
406 &res, NULL)))
8083fd3a 407 goto err;
8083fd3a
SL		 408
409 /*
410 * The fips186-2 generation should produce a different q compared to
411 * fips 186-4 given the same seed value. So validation of q will fail.
412 */
5357c106
P		 413 if (!TEST_false(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
414 FFC_PARAM_TYPE_DSA,
415 &res, NULL)))
8083fd3a
SL		 416 goto err;
417 /* As the params are randomly generated the error is one of the following */
418 if (!TEST_true(res == FFC_CHECK_Q_MISMATCH || res == FFC_CHECK_Q_NOT_PRIME))
419 goto err;
420
5357c106 421 ossl_ffc_params_set_flags(&params, FFC_PARAM_FLAG_VALIDATE_G);
8083fd3a 422 /* Partially valid g test will still pass */
5357c106
P		 423 if (!TEST_int_eq(ossl_ffc_params_FIPS186_4_validate(NULL, &params,
424 FFC_PARAM_TYPE_DSA,
425 &res, NULL), 2))
8083fd3a
SL		 426 goto err;
427
5357c106 428 if (!TEST_true(ossl_ffc_params_print(bio_out, &params, 4)))
8083fd3a
SL		 429 goto err;
430
431 ret = 1;
432err:
433 BN_free(bn);
5357c106 434 ossl_ffc_params_cleanup(&params);
8083fd3a
SL		 435 return ret;
436}
437
19dbb742 438extern FFC_PARAMS *ossl_dh_get0_params(DH *dh);
8083fd3a
SL		 439
440static int ffc_public_validate_test(void)
441{
442 int ret = 0, res = -1;
443 FFC_PARAMS *params;
444 BIGNUM *pub = NULL;
445 DH *dh = NULL;
446
447 if (!TEST_ptr(pub = BN_new()))
448 goto err;
449
450 if (!TEST_ptr(dh = DH_new_by_nid(NID_ffdhe2048)))
451 goto err;
19dbb742 452 params = ossl_dh_get0_params(dh);
8083fd3a
SL		 453
454 if (!TEST_true(BN_set_word(pub, 1)))
455 goto err;
456 BN_set_negative(pub, 1);
457 /* Fail if public key is negative */
5357c106 458 if (!TEST_false(ossl_ffc_validate_public_key(params, pub, &res)))
8083fd3a
SL		 459 goto err;
460 if (!TEST_int_eq(FFC_ERROR_PUBKEY_TOO_SMALL, res))
461 goto err;
462 if (!TEST_true(BN_set_word(pub, 0)))
463 goto err;
464 if (!TEST_int_eq(FFC_ERROR_PUBKEY_TOO_SMALL, res))
465 goto err;
466 /* Fail if public key is zero */
5357c106 467 if (!TEST_false(ossl_ffc_validate_public_key(params, pub, &res)))
8083fd3a
SL		 468 goto err;
469 if (!TEST_int_eq(FFC_ERROR_PUBKEY_TOO_SMALL, res))
470 goto err;
471 /* Fail if public key is 1 */
5357c106 472 if (!TEST_false(ossl_ffc_validate_public_key(params, BN_value_one(), &res)))
8083fd3a
SL		 473 goto err;
474 if (!TEST_int_eq(FFC_ERROR_PUBKEY_TOO_SMALL, res))
475 goto err;
476 if (!TEST_true(BN_add_word(pub, 2)))
477 goto err;
478 /* Pass if public key >= 2 */
5357c106 479 if (!TEST_true(ossl_ffc_validate_public_key(params, pub, &res)))
8083fd3a
SL		 480 goto err;
481
482 if (!TEST_ptr(BN_copy(pub, params->p)))
483 goto err;
484 /* Fail if public key = p */
5357c106 485 if (!TEST_false(ossl_ffc_validate_public_key(params, pub, &res)))
8083fd3a
SL		 486 goto err;
487 if (!TEST_int_eq(FFC_ERROR_PUBKEY_TOO_LARGE, res))
488 goto err;
489
490 if (!TEST_true(BN_sub_word(pub, 1)))
491 goto err;
492 /* Fail if public key = p - 1 */
5357c106 493 if (!TEST_false(ossl_ffc_validate_public_key(params, pub, &res)))
8083fd3a
SL		 494 goto err;
495 if (!TEST_int_eq(FFC_ERROR_PUBKEY_TOO_LARGE, res))
496 goto err;
497
498 if (!TEST_true(BN_sub_word(pub, 1)))
499 goto err;
500 /* Fail if public key is not related to p & q */
5357c106 501 if (!TEST_false(ossl_ffc_validate_public_key(params, pub, &res)))
8083fd3a
SL		 502 goto err;
503 if (!TEST_int_eq(FFC_ERROR_PUBKEY_INVALID, res))
504 goto err;
505
506 if (!TEST_true(BN_sub_word(pub, 5)))
507 goto err;
508 /* Pass if public key is valid */
5357c106 509 if (!TEST_true(ossl_ffc_validate_public_key(params, pub, &res)))
8083fd3a
SL		 510 goto err;
511
512 ret = 1;
513err:
514 DH_free(dh);
515 BN_free(pub);
516 return ret;
517}
518
519static int ffc_private_validate_test(void)
520{
521 int ret = 0, res = -1;
522 FFC_PARAMS *params;
523 BIGNUM *priv = NULL;
524 DH *dh = NULL;
525
526 if (!TEST_ptr(priv = BN_new()))
527 goto err;
528
529 if (!TEST_ptr(dh = DH_new_by_nid(NID_ffdhe2048)))
530 goto err;
19dbb742 531 params = ossl_dh_get0_params(dh);
8083fd3a
SL		 532
533 if (!TEST_true(BN_set_word(priv, 1)))
534 goto err;
535 BN_set_negative(priv, 1);
536 /* Fail if priv key is negative */
5357c106 537 if (!TEST_false(ossl_ffc_validate_private_key(params->q, priv, &res)))
8083fd3a
SL		 538 goto err;
539 if (!TEST_int_eq(FFC_ERROR_PRIVKEY_TOO_SMALL, res))
540 goto err;
541
542 if (!TEST_true(BN_set_word(priv, 0)))
543 goto err;
544 /* Fail if priv key is zero */
5357c106 545 if (!TEST_false(ossl_ffc_validate_private_key(params->q, priv, &res)))
8083fd3a
SL		 546 goto err;
547 if (!TEST_int_eq(FFC_ERROR_PRIVKEY_TOO_SMALL, res))
548 goto err;
549
550 /* Pass if priv key >= 1 */
5357c106
P		 551 if (!TEST_true(ossl_ffc_validate_private_key(params->q, BN_value_one(),
552 &res)))
8083fd3a
SL		 553 goto err;
554
555 if (!TEST_ptr(BN_copy(priv, params->q)))
556 goto err;
557 /* Fail if priv key = upper */
5357c106 558 if (!TEST_false(ossl_ffc_validate_private_key(params->q, priv, &res)))
8083fd3a
SL		 559 goto err;
560 if (!TEST_int_eq(FFC_ERROR_PRIVKEY_TOO_LARGE, res))
561 goto err;
562
563 if (!TEST_true(BN_sub_word(priv, 1)))
564 goto err;
565 /* Pass if priv key <= upper - 1 */
5357c106 566 if (!TEST_true(ossl_ffc_validate_private_key(params->q, priv, &res)))
8083fd3a
SL		 567 goto err;
568
569 ret = 1;
570err:
571 DH_free(dh);
572 BN_free(priv);
573 return ret;
574}
575
576static int ffc_private_gen_test(int index)
577{
578 int ret = 0, res = -1, N;
579 FFC_PARAMS *params;
580 BIGNUM *priv = NULL;
581 DH *dh = NULL;
582 BN_CTX *ctx = NULL;
583
584 if (!TEST_ptr(ctx = BN_CTX_new_ex(NULL)))
585 goto err;
586
587 if (!TEST_ptr(priv = BN_new()))
588 goto err;
589
590 if (!TEST_ptr(dh = DH_new_by_nid(NID_ffdhe2048)))
591 goto err;
19dbb742 592 params = ossl_dh_get0_params(dh);
8083fd3a
SL		 593
594 N = BN_num_bits(params->q);
595 /* Fail since N < 2*s - where s = 112*/
5357c106 596 if (!TEST_false(ossl_ffc_generate_private_key(ctx, params, 220, 112, priv)))
8083fd3a
SL		 597 goto err;
598 /* fail since N > len(q) */
5357c106 599 if (!TEST_false(ossl_ffc_generate_private_key(ctx, params, N + 1, 112, priv)))
8083fd3a
SL		 600 goto err;
601 /* pass since 2s <= N <= len(q) */
5357c106 602 if (!TEST_true(ossl_ffc_generate_private_key(ctx, params, N, 112, priv)))
8083fd3a
SL		 603 goto err;
604 /* pass since N = len(q) */
5357c106 605 if (!TEST_true(ossl_ffc_validate_private_key(params->q, priv, &res)))
8083fd3a
SL		 606 goto err;
607 /* pass since 2s <= N < len(q) */
5357c106 608 if (!TEST_true(ossl_ffc_generate_private_key(ctx, params, N / 2, 112, priv)))
8083fd3a 609 goto err;
5357c106 610 if (!TEST_true(ossl_ffc_validate_private_key(params->q, priv, &res)))
8083fd3a
SL		 611 goto err;
612
613 /* N and s are ignored in this case */
5357c106 614 if (!TEST_true(ossl_ffc_generate_private_key(ctx, params, 0, 0, priv)))
8083fd3a 615 goto err;
5357c106 616 if (!TEST_true(ossl_ffc_validate_private_key(params->q, priv, &res)))
8083fd3a
SL		 617 goto err;
618
619 ret = 1;
620err:
621 DH_free(dh);
622 BN_free(priv);
623 BN_CTX_free(ctx);
624 return ret;
625}
626#endif /* OPENSSL_NO_DH */
627
628int setup_tests(void)
629{
630#ifndef OPENSSL_NO_DSA
631 ADD_TEST(ffc_params_validate_pq_test);
632 ADD_TEST(ffc_params_validate_g_unverified_test);
633#endif /* OPENSSL_NO_DSA */
634#ifndef OPENSSL_NO_DH
635 ADD_TEST(ffc_params_gen_test);
636 ADD_TEST(ffc_params_gen_canonicalg_test);
637 ADD_TEST(ffc_params_fips186_2_gen_validate_test);
638 ADD_TEST(ffc_public_validate_test);
639 ADD_TEST(ffc_private_validate_test);
640 ADD_ALL_TESTS(ffc_private_gen_test, 10);
641#endif /* OPENSSL_NO_DH */
642 return 1;
643}
A mirror of the official openssl repository