pubkey_test.c File Reference

Public key self-tests. More...

#include <stdint.h>
#include <stdlib.h>
#include <string.h>
#include <assert.h>
#include <ipxe/crypto.h>
#include <ipxe/test.h>
#include "pubkey_test.h"

Go to the source code of this file.

Functions
	FILE_LICENCE (GPL2_OR_LATER_OR_UBDL)
int	pubkey_test_get_random (void *data, size_t len)
	Get random data input.
void	pubkey_encrypt_okx (struct pubkey_encryption_test *test, const char *file, unsigned int line)
	Report a public key encryption test result.
void	pubkey_decrypt_okx (struct pubkey_encryption_test *test, const char *file, unsigned int line)
	Report a public key decryption test result.
void	pubkey_encrypt_fail_okx (struct pubkey_encryption_test *test, const char *file, unsigned int line)
	Report a public key encryption failure test result.
void	pubkey_decrypt_fail_okx (struct pubkey_encryption_test *test, const char *file, unsigned int line)
	Report a public key decryption failure test result.
void	pubkey_encrypt_decrypt_okx (struct pubkey_encryption_test *test, const char *file, unsigned int line)
	Report a public key encryption and decryption test result.
void	pubkey_sign_okx (struct pubkey_signature_test *test, const char *file, unsigned int line)
	Report a public key signature test result.
void	pubkey_verify_okx (struct pubkey_signature_test *test, const char *file, unsigned int line)
	Report a public key verification test result.
void	pubkey_verify_fail_okx (struct pubkey_signature_test *test, const char *file, unsigned int line)
	Report a public key verification failure test result.
void	pubkey_sign_verify_okx (struct pubkey_signature_test *test, const char *file, unsigned int line)
	Report a public key signature and verification test result.

Variables
static const uint8_t *	pubkey_random
	Random data input.
static size_t	pubkey_random_len
	Length of random data input.

Detailed Description

Public key self-tests.

Definition in file pubkey_test.c.

Function Documentation

FILE_LICENCE()

FILE_LICENCE

(

GPL2_OR_LATER_OR_UBDL

)

pubkey_test_get_random()

int pubkey_test_get_random	(	void *	data,
		size_t	len )

Get random data input.

Parameters

data	Output buffer
len	Length of output buffer

Return values

rc	Return status code

Definition at line 56 of file pubkey_test.c.

                                                      {
 
        /* Sanity check */
        assert ( len <= pubkey_random_len );
 
        /* Return random data */
        memcpy ( data, pubkey_random, len );
 
        /* Consume random data */
        pubkey_random += len;
        pubkey_random_len -= len;
 
        return 0;
}

References assert, data, len, memcpy(), pubkey_random, and pubkey_random_len.

Referenced by rsa_test_exec().

pubkey_encrypt_okx()

void pubkey_encrypt_okx	(	struct pubkey_encryption_test *	test,
		const char *	file,
		unsigned int	line )

Report a public key encryption test result.

Parameters

test	Public key encryption/decryption test
file	Test code file
line	Test code line

Definition at line 78 of file pubkey_test.c.

                                                                {
        struct pubkey_algorithm *pubkey = test->key->pubkey;
        struct asn1_builder ciphertext;
 
        /* Sanity checks */
        okx ( test->key->public.len != 0, file, line );
        okx ( test->ciphertext.len != 0, file, line );
 
        /* Test encrypting with public key to obtain known ciphertext */
        ciphertext.data = NULL;
        ciphertext.len = 0;
        pubkey_random = test->random;
        pubkey_random_len = test->random_len;
        okx ( pubkey_encrypt ( pubkey, &test->key->public, &test->plaintext,
                               &ciphertext ) == 0, file, line );
        okx ( pubkey_random_len == 0, file, line );
        okx ( asn1_compare ( asn1_built ( &ciphertext ),
                             &test->ciphertext ) == 0, file, line );
        free ( ciphertext.data );
}

References asn1_built(), asn1_compare(), asn1_builder::data, free, asn1_builder::len, NULL, okx, pubkey_encrypt(), pubkey_random, pubkey_random_len, and test.

Referenced by pubkey_encrypt_decrypt_okx().

pubkey_decrypt_okx()

void pubkey_decrypt_okx	(	struct pubkey_encryption_test *	test,
		const char *	file,
		unsigned int	line )

Report a public key decryption test result.

Parameters

test	Public key encryption/decryption test
file	Test code file
line	Test code line

Definition at line 107 of file pubkey_test.c.

                                                                {
        struct pubkey_algorithm *pubkey = test->key->pubkey;
        struct asn1_builder plaintext;
 
        /* Sanity checks */
        okx ( test->key->private.len != 0, file, line );
        okx ( test->ciphertext.len != 0, file, line );
 
        /* Test decrypting with private key to obtain known plaintext */
        plaintext.data = NULL;
        plaintext.len = 0;
        okx ( pubkey_decrypt ( pubkey, &test->key->private, &test->ciphertext,
                               &plaintext ) == 0, file, line );
        okx ( asn1_compare ( asn1_built ( &plaintext ),
                             &test->plaintext ) == 0, file, line );
        free ( plaintext.data );
}

References asn1_built(), asn1_compare(), asn1_builder::data, free, asn1_builder::len, NULL, okx, pubkey_decrypt(), and test.

Referenced by pubkey_encrypt_decrypt_okx().

pubkey_encrypt_fail_okx()

void pubkey_encrypt_fail_okx	(	struct pubkey_encryption_test *	test,
		const char *	file,
		unsigned int	line )

Report a public key encryption failure test result.

Parameters

test	Public key encryption/decryption test
file	Test code file
line	Test code line

Definition at line 133 of file pubkey_test.c.

                                                                     {
        struct pubkey_algorithm *pubkey = test->key->pubkey;
        struct asn1_builder ciphertext;
 
        /* Test encrypting with public key */
        ciphertext.data = NULL;
        ciphertext.len = 0;
        pubkey_random = test->random;
        pubkey_random_len = test->random_len;
        okx ( pubkey_encrypt ( pubkey, &test->key->public, &test->plaintext,
                               &ciphertext ) != 0, file, line );
        free ( ciphertext.data );
}

References asn1_builder::data, free, asn1_builder::len, NULL, okx, pubkey_encrypt(), pubkey_random, pubkey_random_len, and test.

pubkey_decrypt_fail_okx()

void pubkey_decrypt_fail_okx	(	struct pubkey_encryption_test *	test,
		const char *	file,
		unsigned int	line )

Report a public key decryption failure test result.

Parameters

test	Public key encryption/decryption test
file	Test code file
line	Test code line

Definition at line 155 of file pubkey_test.c.

                                                                     {
        struct pubkey_algorithm *pubkey = test->key->pubkey;
        struct asn1_builder plaintext;
 
        /* Test decrypting with private key to obtain known plaintext */
        plaintext.data = NULL;
        plaintext.len = 0;
        okx ( pubkey_decrypt ( pubkey, &test->key->private, &test->ciphertext,
                               &plaintext ) != 0, file, line );
        free ( plaintext.data );
}

References asn1_builder::data, free, asn1_builder::len, NULL, okx, pubkey_decrypt(), and test.

pubkey_encrypt_decrypt_okx()

void pubkey_encrypt_decrypt_okx	(	struct pubkey_encryption_test *	test,
		const char *	file,
		unsigned int	line )

Report a public key encryption and decryption test result.

Parameters

test	Public key encryption/decryption test
file	Test code file
line	Test code line

Definition at line 175 of file pubkey_test.c.

                                                                        {
        struct pubkey_algorithm *pubkey = test->key->pubkey;
        struct asn1_builder plaintext;
        struct asn1_builder ciphertext;
 
        /* Sanity checks */
        okx ( test->key->private.len != 0, file, line );
        okx ( test->key->public.len != 0, file, line );
        okx ( test->ciphertext.len != 0, file, line );
 
        /* Test key matching */
        okx ( pubkey_match ( pubkey, &test->key->private,
                             &test->key->public ) == 0, file, line );
 
        /* Test encrypting with public key to obtain known ciphertext */
        pubkey_encrypt_okx ( test, file, line );
 
        /* Test decrypting with private key to obtain known plaintext */
        pubkey_decrypt_okx ( test, file, line );
 
        /* Test encrypting with private key and decrypting with public key */
        ciphertext.data = NULL;
        ciphertext.len = 0;
        plaintext.data = NULL;
        plaintext.len = 0;
        pubkey_random = test->random;
        pubkey_random_len = test->random_len;
        okx ( pubkey_encrypt ( pubkey, &test->key->private, &test->plaintext,
                               &ciphertext ) == 0, file, line );
        okx ( pubkey_random_len == 0, file, line );
        okx ( pubkey_decrypt ( pubkey, &test->key->public,
                               asn1_built ( &ciphertext ),
                               &plaintext ) == 0, file, line );
        okx ( asn1_compare ( asn1_built ( &plaintext ),
                             &test->plaintext ) == 0, file, line );
        free ( ciphertext.data );
        free ( plaintext.data );
 
        /* Test encrypting with public key and decrypting with private key */
        ciphertext.data = NULL;
        ciphertext.len = 0;
        plaintext.data = NULL;
        plaintext.len = 0;
        pubkey_random = test->random;
        pubkey_random_len = test->random_len;
        okx ( pubkey_encrypt ( pubkey, &test->key->public, &test->plaintext,
                               &ciphertext ) == 0, file, line );
        okx ( pubkey_random_len == 0, file, line );
        okx ( pubkey_decrypt ( pubkey, &test->key->private,
                               asn1_built ( &ciphertext ),
                               &plaintext ) == 0, file, line );
        okx ( asn1_compare ( asn1_built ( &plaintext ),
                             &test->plaintext ) == 0, file, line );
        free ( ciphertext.data );
        free ( plaintext.data );
}

References asn1_built(), asn1_compare(), asn1_builder::data, free, asn1_builder::len, NULL, okx, pubkey_decrypt(), pubkey_decrypt_okx(), pubkey_encrypt(), pubkey_encrypt_okx(), pubkey_match(), pubkey_random, pubkey_random_len, and test.

pubkey_sign_okx()

void pubkey_sign_okx	(	struct pubkey_signature_test *	test,
		const char *	file,
		unsigned int	line )

Report a public key signature test result.

Parameters

test	Public key signature/verification test
file	Test code file
line	Test code line

Definition at line 240 of file pubkey_test.c.

                                                             {
        struct pubkey_algorithm *pubkey = test->key->pubkey;
        struct digest_algorithm *digest = test->digest;
        uint8_t digestctx[digest->ctxsize];
        uint8_t digestout[digest->digestsize];
        struct asn1_builder builder = { NULL, 0 };
 
        /* Sanity checks */
        okx ( test->key->private.len != 0, file, line );
        okx ( test->key->public.len != 0, file, line );
        okx ( test->signature.len != 0, file, line );
 
        /* Test key matching */
        okx ( pubkey_match ( pubkey, &test->key->private,
                             &test->key->public ) == 0, file, line );
 
        /* Construct digest over plaintext */
        digest_init ( digest, digestctx );
        digest_update ( digest, digestctx, test->plaintext,
                        test->plaintext_len );
        digest_final ( digest, digestctx, digestout );
 
        /* Test signing using private key */
        pubkey_random = test->random;
        pubkey_random_len = test->random_len;
        okx ( pubkey_sign ( pubkey, &test->key->private, digest, digestout,
                            &builder ) == 0, file, line );
        okx ( pubkey_random_len == 0, file, line );
        okx ( builder.len != 0, file, line );
        okx ( asn1_compare ( asn1_built ( &builder ), &test->signature ) == 0,
              file, line );
 
        /* Test verification of constructed signature */
        okx ( pubkey_verify ( pubkey, &test->key->public, digest, digestout,
                              asn1_built ( &builder ) ) == 0, file, line );
 
        /* Free signature */
        free ( builder.data );
}

References asn1_built(), asn1_compare(), digest_algorithm::ctxsize, asn1_builder::data, digest_final(), digest_init(), digest_update(), digest_algorithm::digestsize, free, asn1_builder::len, NULL, okx, pubkey_match(), pubkey_random, pubkey_random_len, pubkey_sign(), pubkey_verify(), and test.

Referenced by pubkey_sign_verify_okx().

pubkey_verify_okx()

void pubkey_verify_okx	(	struct pubkey_signature_test *	test,
		const char *	file,
		unsigned int	line )

Report a public key verification test result.

Parameters

test	Public key signature/verification test
file	Test code file
line	Test code line

Definition at line 288 of file pubkey_test.c.

                                                               {
        struct pubkey_algorithm *pubkey = test->key->pubkey;
        struct digest_algorithm *digest = test->digest;
        uint8_t digestctx[digest->ctxsize];
        uint8_t digestout[digest->digestsize];
        uint8_t signature[test->signature.len];
        struct asn1_cursor cursor = { signature, sizeof ( signature ) };
        uint8_t *bad;
 
        /* Sanity checks */
        okx ( test->key->public.len != 0, file, line );
        okx ( test->signature.len != 0, file, line );
 
        /* Construct digest over plaintext */
        digest_init ( digest, digestctx );
        digest_update ( digest, digestctx, test->plaintext,
                        test->plaintext_len );
        digest_final ( digest, digestctx, digestout );
 
        /* Test verification using public key */
        okx ( pubkey_verify ( pubkey, &test->key->public, digest, digestout,
                              &test->signature ) == 0, file, line );
 
        /* Test verification failure of modified signature */
        memcpy ( signature, test->signature.data, sizeof ( signature ) );
        bad = ( signature + ( sizeof ( signature ) / 2 ) );
        *bad ^= 0x40;
        okx ( pubkey_verify ( pubkey, &test->key->public, digest, digestout,
                              &cursor ) != 0, file, line );
        *bad ^= 0x40;
        okx ( pubkey_verify ( pubkey, &test->key->public, digest, digestout,
                              &cursor ) == 0, file, line );
}

References digest_algorithm::ctxsize, digest_final(), digest_init(), digest_update(), digest_algorithm::digestsize, memcpy(), okx, pubkey_verify(), signature, and test.

Referenced by pubkey_sign_verify_okx().

pubkey_verify_fail_okx()

void pubkey_verify_fail_okx	(	struct pubkey_signature_test *	test,
		const char *	file,
		unsigned int	line )

Report a public key verification failure test result.

Parameters

test	Public key signature/verification test
file	Test code file
line	Test code line

Definition at line 330 of file pubkey_test.c.

                                                                    {
        struct pubkey_algorithm *pubkey = test->key->pubkey;
        struct digest_algorithm *digest = test->digest;
        uint8_t digestctx[digest->ctxsize];
        uint8_t digestout[digest->digestsize];
 
        /* Construct digest over plaintext */
        digest_init ( digest, digestctx );
        digest_update ( digest, digestctx, test->plaintext,
                        test->plaintext_len );
        digest_final ( digest, digestctx, digestout );
 
        /* Test verification using public key */
        okx ( pubkey_verify ( pubkey, &test->key->public, digest, digestout,
                              &test->signature ) != 0, file, line );
}

References digest_algorithm::ctxsize, digest_final(), digest_init(), digest_update(), digest_algorithm::digestsize, okx, pubkey_verify(), and test.

pubkey_sign_verify_okx()

void pubkey_sign_verify_okx	(	struct pubkey_signature_test *	test,
		const char *	file,
		unsigned int	line )

Report a public key signature and verification test result.

Parameters

test	Public key signature/verification test
file	Test code file
line	Test code line

Definition at line 355 of file pubkey_test.c.

                                                                    {
        struct pubkey_algorithm *pubkey = test->key->pubkey;
 
        /* Sanity checks */
        okx ( test->key->private.len != 0, file, line );
        okx ( test->key->public.len != 0, file, line );
        okx ( test->signature.len != 0, file, line );
 
        /* Test key matching */
        okx ( pubkey_match ( pubkey, &test->key->private,
                             &test->key->public ) == 0, file, line );
 
        /* Test signature */
        pubkey_sign_okx ( test, file, line );
 
        /* Test verification */
        pubkey_verify_okx ( test, file, line );
}

References okx, pubkey_match(), pubkey_sign_okx(), pubkey_verify_okx(), and test.

Variable Documentation

pubkey_random

const uint8_t* pubkey_random

static

Random data input.

Definition at line 44 of file pubkey_test.c.

Referenced by pubkey_encrypt_decrypt_okx(), pubkey_encrypt_fail_okx(), pubkey_encrypt_okx(), pubkey_sign_okx(), and pubkey_test_get_random().

pubkey_random_len

size_t pubkey_random_len

static

Length of random data input.

Definition at line 47 of file pubkey_test.c.

Referenced by pubkey_encrypt_decrypt_okx(), pubkey_encrypt_fail_okx(), pubkey_encrypt_okx(), pubkey_sign_okx(), and pubkey_test_get_random().