Randall Spangler | e166d04 | 2014-05-13 09:24:52 -0700 | [diff] [blame] | 1 | /* Copyright (c) 2014 The Chromium OS Authors. All rights reserved. |
| 2 | * Use of this source code is governed by a BSD-style license that can be |
| 3 | * found in the LICENSE file. |
| 4 | */ |
| 5 | |
| 6 | |
| 7 | #include <stdint.h> |
| 8 | #include <stdio.h> |
| 9 | |
| 10 | #define _STUB_IMPLEMENTATION_ |
| 11 | |
| 12 | #include "cryptolib.h" |
| 13 | #include "file_keys.h" |
| 14 | #include "rsa_padding_test.h" |
| 15 | #include "test_common.h" |
| 16 | #include "utility.h" |
| 17 | #include "vboot_api.h" |
| 18 | |
| 19 | #include "2common.h" |
| 20 | #include "2rsa.h" |
| 21 | |
| 22 | /* |
| 23 | * Internal functions from 2rsa.c that have error conditions we can't trigger |
| 24 | * from the public APIs. These include checks for bad algorithms where the |
| 25 | * next call level up already checks for bad algorithms, etc. |
| 26 | * |
| 27 | * These functions aren't in 2rsa.h because they're not part of the public |
| 28 | * APIs. |
| 29 | */ |
| 30 | int vb2_mont_ge(const struct vb2_public_key *key, uint32_t *a); |
Randall Spangler | c8c2f02 | 2014-10-23 09:48:20 -0700 | [diff] [blame] | 31 | int vb2_check_padding(const uint8_t *sig, const struct vb2_public_key *key); |
Randall Spangler | e166d04 | 2014-05-13 09:24:52 -0700 | [diff] [blame] | 32 | |
| 33 | /** |
| 34 | * Test RSA utility funcs |
| 35 | */ |
| 36 | static void test_utils(void) |
| 37 | { |
Randall Spangler | c8c2f02 | 2014-10-23 09:48:20 -0700 | [diff] [blame] | 38 | uint8_t sig[RSA1024NUMBYTES]; |
| 39 | struct vb2_public_key kbad = {.sig_alg = VB2_SIG_INVALID, |
| 40 | .hash_alg = VB2_HASH_INVALID}; |
| 41 | |
Randall Spangler | e166d04 | 2014-05-13 09:24:52 -0700 | [diff] [blame] | 42 | /* Verify old and new algorithm count constants match */ |
| 43 | TEST_EQ(kNumAlgorithms, VB2_ALG_COUNT, "Algorithm counts"); |
| 44 | |
Randall Spangler | c8c2f02 | 2014-10-23 09:48:20 -0700 | [diff] [blame] | 45 | /* Crypto algorithm to sig algorithm mapping */ |
| 46 | TEST_EQ(vb2_crypto_to_signature(VB2_ALG_RSA1024_SHA1), |
| 47 | VB2_SIG_RSA1024, "Crypto map to RSA1024"); |
| 48 | TEST_EQ(vb2_crypto_to_signature(VB2_ALG_RSA2048_SHA256), |
| 49 | VB2_SIG_RSA2048, "Crypto map to RSA2048"); |
| 50 | TEST_EQ(vb2_crypto_to_signature(VB2_ALG_RSA4096_SHA256), |
| 51 | VB2_SIG_RSA4096, "Crypto map to RSA4096"); |
| 52 | TEST_EQ(vb2_crypto_to_signature(VB2_ALG_RSA8192_SHA512), |
| 53 | VB2_SIG_RSA8192, "Crypto map to RSA8192"); |
| 54 | TEST_EQ(vb2_crypto_to_signature(VB2_ALG_COUNT), |
| 55 | VB2_SIG_INVALID, "Crypto map to invalid"); |
| 56 | |
Randall Spangler | e166d04 | 2014-05-13 09:24:52 -0700 | [diff] [blame] | 57 | /* Sig size */ |
Randall Spangler | c8c2f02 | 2014-10-23 09:48:20 -0700 | [diff] [blame] | 58 | TEST_EQ(vb2_rsa_sig_size(VB2_SIG_RSA1024), RSA1024NUMBYTES, |
| 59 | "Sig size RSA1024"); |
| 60 | TEST_EQ(vb2_rsa_sig_size(VB2_SIG_RSA2048), RSA2048NUMBYTES, |
| 61 | "Sig size RSA2048"); |
| 62 | TEST_EQ(vb2_rsa_sig_size(VB2_SIG_RSA4096), RSA4096NUMBYTES, |
| 63 | "Sig size RSA4096"); |
| 64 | TEST_EQ(vb2_rsa_sig_size(VB2_SIG_RSA8192), RSA8192NUMBYTES, |
| 65 | "Sig size RSA8192"); |
| 66 | TEST_EQ(vb2_rsa_sig_size(VB2_SIG_INVALID), 0, |
Randall Spangler | e166d04 | 2014-05-13 09:24:52 -0700 | [diff] [blame] | 67 | "Sig size invalid algorithm"); |
Randall Spangler | c8c2f02 | 2014-10-23 09:48:20 -0700 | [diff] [blame] | 68 | TEST_EQ(vb2_rsa_sig_size(VB2_SIG_NONE), 0, |
| 69 | "Sig size no signing algorithm"); |
Randall Spangler | e166d04 | 2014-05-13 09:24:52 -0700 | [diff] [blame] | 70 | |
| 71 | /* Packed key size */ |
Randall Spangler | c8c2f02 | 2014-10-23 09:48:20 -0700 | [diff] [blame] | 72 | TEST_EQ(vb2_packed_key_size(VB2_SIG_RSA1024), |
Randall Spangler | e166d04 | 2014-05-13 09:24:52 -0700 | [diff] [blame] | 73 | RSA1024NUMBYTES * 2 + sizeof(uint32_t) * 2, |
Randall Spangler | c8c2f02 | 2014-10-23 09:48:20 -0700 | [diff] [blame] | 74 | "Packed key size VB2_SIG_RSA1024"); |
| 75 | TEST_EQ(vb2_packed_key_size(VB2_SIG_RSA2048), |
Randall Spangler | e166d04 | 2014-05-13 09:24:52 -0700 | [diff] [blame] | 76 | RSA2048NUMBYTES * 2 + sizeof(uint32_t) * 2, |
Randall Spangler | c8c2f02 | 2014-10-23 09:48:20 -0700 | [diff] [blame] | 77 | "Packed key size VB2_SIG_RSA2048"); |
| 78 | TEST_EQ(vb2_packed_key_size(VB2_SIG_RSA4096), |
Randall Spangler | e166d04 | 2014-05-13 09:24:52 -0700 | [diff] [blame] | 79 | RSA4096NUMBYTES * 2 + sizeof(uint32_t) * 2, |
Randall Spangler | c8c2f02 | 2014-10-23 09:48:20 -0700 | [diff] [blame] | 80 | "Packed key size VB2_SIG_RSA4096"); |
| 81 | TEST_EQ(vb2_packed_key_size(VB2_SIG_RSA8192), |
Randall Spangler | e166d04 | 2014-05-13 09:24:52 -0700 | [diff] [blame] | 82 | RSA8192NUMBYTES * 2 + sizeof(uint32_t) * 2, |
Randall Spangler | c8c2f02 | 2014-10-23 09:48:20 -0700 | [diff] [blame] | 83 | "Packed key size VB2_SIG_RSA8192"); |
| 84 | TEST_EQ(vb2_packed_key_size(VB2_SIG_INVALID), 0, |
Randall Spangler | e166d04 | 2014-05-13 09:24:52 -0700 | [diff] [blame] | 85 | "Packed key size invalid algorithm"); |
Randall Spangler | c8c2f02 | 2014-10-23 09:48:20 -0700 | [diff] [blame] | 86 | TEST_EQ(vb2_packed_key_size(VB2_SIG_NONE), 0, |
| 87 | "Packed key size no signing algorithm"); |
Randall Spangler | e166d04 | 2014-05-13 09:24:52 -0700 | [diff] [blame] | 88 | |
| 89 | /* Test padding check with bad algorithm */ |
| 90 | Memcpy(sig, signatures[0], sizeof(sig)); |
Randall Spangler | c8c2f02 | 2014-10-23 09:48:20 -0700 | [diff] [blame] | 91 | TEST_EQ(vb2_check_padding(sig, &kbad), |
| 92 | VB2_ERROR_RSA_PADDING_SIZE, |
| 93 | "vb2_check_padding() bad padding algorithm/size"); |
Randall Spangler | e166d04 | 2014-05-13 09:24:52 -0700 | [diff] [blame] | 94 | |
| 95 | /* Test safe memcmp */ |
| 96 | TEST_EQ(vb2_safe_memcmp("foo", "foo", 3), 0, "vb2_safe_memcmp() good"); |
| 97 | TEST_NEQ(vb2_safe_memcmp("foo", "bar", 3), 0, "vb2_safe_memcmp() bad"); |
| 98 | TEST_EQ(vb2_safe_memcmp("foo", "bar", 0), 0, "vb2_safe_memcmp() zero"); |
| 99 | |
| 100 | /* Test Montgomery >= */ |
| 101 | { |
| 102 | uint32_t n[4] = {4, 4, 4, 4}; |
| 103 | uint32_t a[4] = {4, 4, 4, 4}; |
| 104 | struct vb2_public_key k = { |
| 105 | .arrsize = 4, |
| 106 | .n = n, |
| 107 | }; |
| 108 | TEST_EQ(vb2_mont_ge(&k, a), 1, "mont_ge equal"); |
| 109 | |
| 110 | a[2] = 3; |
| 111 | TEST_EQ(vb2_mont_ge(&k, a), 0, "mont_ge less"); |
| 112 | |
| 113 | a[1] = 5; |
| 114 | TEST_EQ(vb2_mont_ge(&k, a), 0, "mont_ge greater"); |
| 115 | } |
| 116 | } |
| 117 | |
| 118 | int main(int argc, char* argv[]) |
| 119 | { |
| 120 | /* Run tests */ |
| 121 | test_utils(); |
| 122 | |
| 123 | return gTestSuccess ? 0 : 255; |
| 124 | } |