Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 1 | /* BEGIN_HEADER */ |
Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 2 | #include "mbedtls/rsa.h" |
| 3 | #include "mbedtls/md.h" |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 4 | /* END_HEADER */ |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 5 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 6 | /* BEGIN_DEPENDENCIES |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 7 | * depends_on:MBEDTLS_PKCS1_V21:MBEDTLS_RSA_C:MBEDTLS_SHA1_C |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 8 | * END_DEPENDENCIES |
| 9 | */ |
Paul Bakker | 5690efc | 2011-05-26 13:16:06 +0000 | [diff] [blame] | 10 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 11 | /* BEGIN_CASE */ |
Cédric Meuter | bc13cd9 | 2020-12-28 14:39:33 +0100 | [diff] [blame] | 12 | void pkcs1_rsaes_oaep_encrypt( int mod, data_t * input_N, data_t * input_E, |
| 13 | int hash, data_t * message_str, data_t * rnd_buf, |
Ronald Cron | ac6ae35 | 2020-06-26 14:33:03 +0200 | [diff] [blame] | 14 | data_t * result_str, int result ) |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 15 | { |
Ron Eldor | 5b8f120 | 2018-11-22 15:49:49 +0200 | [diff] [blame] | 16 | unsigned char output[256]; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 17 | mbedtls_rsa_context ctx; |
Ronald Cron | 351f0ee | 2020-06-10 12:12:18 +0200 | [diff] [blame] | 18 | mbedtls_test_rnd_buf_info info; |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 19 | mbedtls_mpi N, E; |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 20 | |
Gilles Peskine | bef3019 | 2021-03-24 00:48:57 +0100 | [diff] [blame^] | 21 | info.fallback_f_rng = mbedtls_test_rnd_std_rand; |
| 22 | info.fallback_p_rng = NULL; |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 23 | info.buf = rnd_buf->x; |
| 24 | info.length = rnd_buf->len; |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 25 | |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 26 | mbedtls_mpi_init( &N ); mbedtls_mpi_init( &E ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 27 | mbedtls_rsa_init( &ctx, MBEDTLS_RSA_PKCS_V21, hash ); |
Ron Eldor | 5b8f120 | 2018-11-22 15:49:49 +0200 | [diff] [blame] | 28 | memset( output, 0x00, sizeof( output ) ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 29 | |
Cédric Meuter | bc13cd9 | 2020-12-28 14:39:33 +0100 | [diff] [blame] | 30 | TEST_ASSERT( mbedtls_mpi_read_binary( &N, input_N->x, input_N->len ) == 0 ); |
| 31 | TEST_ASSERT( mbedtls_mpi_read_binary( &E, input_E->x, input_E->len ) == 0 ); |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 32 | TEST_ASSERT( mbedtls_rsa_import( &ctx, &N, NULL, NULL, NULL, &E ) == 0 ); |
| 33 | TEST_ASSERT( mbedtls_rsa_get_len( &ctx ) == (size_t) ( ( mod + 7 ) / 8 ) ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 34 | TEST_ASSERT( mbedtls_rsa_check_pubkey( &ctx ) == 0 ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 35 | |
Gilles Peskine | 85a6dd4 | 2018-10-15 16:32:42 +0200 | [diff] [blame] | 36 | if( message_str->len == 0 ) |
| 37 | message_str->x = NULL; |
Ronald Cron | 6c5bd7f | 2020-06-10 14:08:26 +0200 | [diff] [blame] | 38 | TEST_ASSERT( mbedtls_rsa_pkcs1_encrypt( &ctx, |
| 39 | &mbedtls_test_rnd_buffer_rand, |
| 40 | &info, MBEDTLS_RSA_PUBLIC, |
| 41 | message_str->len, message_str->x, |
| 42 | output ) == result ); |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 43 | if( result == 0 ) |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 44 | { |
Cédric Meuter | 6882b46 | 2021-01-10 11:31:12 +0100 | [diff] [blame] | 45 | ASSERT_COMPARE( output, ctx.len, result_str->x, result_str->len ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 46 | } |
Paul Bakker | 58ef6ec | 2013-01-03 11:33:48 +0100 | [diff] [blame] | 47 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 48 | exit: |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 49 | mbedtls_mpi_free( &N ); mbedtls_mpi_free( &E ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 50 | mbedtls_rsa_free( &ctx ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 51 | } |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 52 | /* END_CASE */ |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 53 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 54 | /* BEGIN_CASE */ |
Cédric Meuter | bc13cd9 | 2020-12-28 14:39:33 +0100 | [diff] [blame] | 55 | void pkcs1_rsaes_oaep_decrypt( int mod, data_t * input_P, data_t * input_Q, |
| 56 | data_t * input_N, data_t * input_E, int hash, |
| 57 | data_t * result_str, char * seed, data_t * message_str, |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 58 | int result ) |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 59 | { |
Ron Eldor | 5b8f120 | 2018-11-22 15:49:49 +0200 | [diff] [blame] | 60 | unsigned char output[64]; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 61 | mbedtls_rsa_context ctx; |
Paul Bakker | f4a3f30 | 2011-04-24 15:53:29 +0000 | [diff] [blame] | 62 | size_t output_len; |
Ronald Cron | 351f0ee | 2020-06-10 12:12:18 +0200 | [diff] [blame] | 63 | mbedtls_test_rnd_pseudo_info rnd_info; |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 64 | mbedtls_mpi N, P, Q, E; |
Paul Bakker | dbd443d | 2013-08-16 13:38:47 +0200 | [diff] [blame] | 65 | ((void) seed); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 66 | |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 67 | mbedtls_mpi_init( &N ); mbedtls_mpi_init( &P ); |
| 68 | mbedtls_mpi_init( &Q ); mbedtls_mpi_init( &E ); |
| 69 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 70 | mbedtls_rsa_init( &ctx, MBEDTLS_RSA_PKCS_V21, hash ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 71 | |
Ron Eldor | 5b8f120 | 2018-11-22 15:49:49 +0200 | [diff] [blame] | 72 | memset( output, 0x00, sizeof( output ) ); |
Ronald Cron | 351f0ee | 2020-06-10 12:12:18 +0200 | [diff] [blame] | 73 | memset( &rnd_info, 0, sizeof( mbedtls_test_rnd_pseudo_info ) ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 74 | |
Cédric Meuter | bc13cd9 | 2020-12-28 14:39:33 +0100 | [diff] [blame] | 75 | TEST_ASSERT( mbedtls_mpi_read_binary( &P, input_P->x, input_P->len ) == 0 ); |
| 76 | TEST_ASSERT( mbedtls_mpi_read_binary( &Q, input_Q->x, input_Q->len ) == 0 ); |
| 77 | TEST_ASSERT( mbedtls_mpi_read_binary( &N, input_N->x, input_N->len ) == 0 ); |
| 78 | TEST_ASSERT( mbedtls_mpi_read_binary( &E, input_E->x, input_E->len ) == 0 ); |
Paul Bakker | 548957d | 2013-08-30 10:30:02 +0200 | [diff] [blame] | 79 | |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 80 | TEST_ASSERT( mbedtls_rsa_import( &ctx, &N, &P, &Q, NULL, &E ) == 0 ); |
| 81 | TEST_ASSERT( mbedtls_rsa_get_len( &ctx ) == (size_t) ( ( mod + 7 ) / 8 ) ); |
Hanno Becker | 7f25f85 | 2017-10-10 16:56:22 +0100 | [diff] [blame] | 82 | TEST_ASSERT( mbedtls_rsa_complete( &ctx ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 83 | TEST_ASSERT( mbedtls_rsa_check_privkey( &ctx ) == 0 ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 84 | |
Ronald Cron | ac6ae35 | 2020-06-26 14:33:03 +0200 | [diff] [blame] | 85 | if( result_str->len == 0 ) |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 86 | { |
Ronald Cron | 6c5bd7f | 2020-06-10 14:08:26 +0200 | [diff] [blame] | 87 | TEST_ASSERT( mbedtls_rsa_pkcs1_decrypt( &ctx, |
| 88 | &mbedtls_test_rnd_pseudo_rand, |
| 89 | &rnd_info, |
| 90 | MBEDTLS_RSA_PRIVATE, |
| 91 | &output_len, message_str->x, |
| 92 | NULL, 0 ) == result ); |
Gilles Peskine | 85a6dd4 | 2018-10-15 16:32:42 +0200 | [diff] [blame] | 93 | } |
| 94 | else |
| 95 | { |
Ronald Cron | 6c5bd7f | 2020-06-10 14:08:26 +0200 | [diff] [blame] | 96 | TEST_ASSERT( mbedtls_rsa_pkcs1_decrypt( &ctx, |
| 97 | &mbedtls_test_rnd_pseudo_rand, |
| 98 | &rnd_info, |
| 99 | MBEDTLS_RSA_PRIVATE, |
| 100 | &output_len, message_str->x, |
| 101 | output, |
Ron Eldor | 5b8f120 | 2018-11-22 15:49:49 +0200 | [diff] [blame] | 102 | sizeof( output ) ) == result ); |
Gilles Peskine | 85a6dd4 | 2018-10-15 16:32:42 +0200 | [diff] [blame] | 103 | if( result == 0 ) |
| 104 | { |
Cédric Meuter | 6882b46 | 2021-01-10 11:31:12 +0100 | [diff] [blame] | 105 | ASSERT_COMPARE( output, output_len, result_str->x, result_str->len ); |
Gilles Peskine | 85a6dd4 | 2018-10-15 16:32:42 +0200 | [diff] [blame] | 106 | } |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 107 | } |
Paul Bakker | 6c591fa | 2011-05-05 11:49:20 +0000 | [diff] [blame] | 108 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 109 | exit: |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 110 | mbedtls_mpi_free( &N ); mbedtls_mpi_free( &P ); |
| 111 | mbedtls_mpi_free( &Q ); mbedtls_mpi_free( &E ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 112 | mbedtls_rsa_free( &ctx ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 113 | } |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 114 | /* END_CASE */ |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 115 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 116 | /* BEGIN_CASE */ |
Cédric Meuter | bc13cd9 | 2020-12-28 14:39:33 +0100 | [diff] [blame] | 117 | void pkcs1_rsassa_pss_sign( int mod, data_t * input_P, data_t * input_Q, |
| 118 | data_t * input_N, data_t * input_E, int digest, |
| 119 | int hash, data_t * message_str, data_t * rnd_buf, |
Cédric Meuter | 61adfd6 | 2021-01-10 11:52:39 +0100 | [diff] [blame] | 120 | data_t * result_str, int fixed_salt_length, |
| 121 | int result ) |
Cédric Meuter | 668a78d | 2020-04-30 11:57:04 +0200 | [diff] [blame] | 122 | { |
| 123 | unsigned char hash_result[MBEDTLS_MD_MAX_SIZE]; |
| 124 | unsigned char output[512]; |
| 125 | mbedtls_rsa_context ctx; |
| 126 | mbedtls_test_rnd_buf_info info; |
| 127 | mbedtls_mpi N, P, Q, E; |
| 128 | |
Gilles Peskine | bef3019 | 2021-03-24 00:48:57 +0100 | [diff] [blame^] | 129 | info.fallback_f_rng = mbedtls_test_rnd_std_rand; |
| 130 | info.fallback_p_rng = NULL; |
Cédric Meuter | 668a78d | 2020-04-30 11:57:04 +0200 | [diff] [blame] | 131 | info.buf = rnd_buf->x; |
| 132 | info.length = rnd_buf->len; |
| 133 | |
| 134 | mbedtls_mpi_init( &N ); mbedtls_mpi_init( &P ); |
| 135 | mbedtls_mpi_init( &Q ); mbedtls_mpi_init( &E ); |
| 136 | mbedtls_rsa_init( &ctx, MBEDTLS_RSA_PKCS_V21, hash ); |
| 137 | |
| 138 | memset( hash_result, 0x00, sizeof( hash_result ) ); |
| 139 | memset( output, 0x00, sizeof( output ) ); |
| 140 | |
Cédric Meuter | bc13cd9 | 2020-12-28 14:39:33 +0100 | [diff] [blame] | 141 | TEST_ASSERT( mbedtls_mpi_read_binary( &P, input_P->x, input_P->len ) == 0 ); |
| 142 | TEST_ASSERT( mbedtls_mpi_read_binary( &Q, input_Q->x, input_Q->len ) == 0 ); |
| 143 | TEST_ASSERT( mbedtls_mpi_read_binary( &N, input_N->x, input_N->len ) == 0 ); |
| 144 | TEST_ASSERT( mbedtls_mpi_read_binary( &E, input_E->x, input_E->len ) == 0 ); |
Cédric Meuter | 668a78d | 2020-04-30 11:57:04 +0200 | [diff] [blame] | 145 | |
| 146 | TEST_ASSERT( mbedtls_rsa_import( &ctx, &N, &P, &Q, NULL, &E ) == 0 ); |
| 147 | TEST_ASSERT( mbedtls_rsa_get_len( &ctx ) == (size_t) ( ( mod + 7 ) / 8 ) ); |
| 148 | TEST_ASSERT( mbedtls_rsa_complete( &ctx ) == 0 ); |
| 149 | TEST_ASSERT( mbedtls_rsa_check_privkey( &ctx ) == 0 ); |
| 150 | |
Cédric Meuter | 668a78d | 2020-04-30 11:57:04 +0200 | [diff] [blame] | 151 | if( mbedtls_md_info_from_type( digest ) != NULL ) |
| 152 | TEST_ASSERT( mbedtls_md( mbedtls_md_info_from_type( digest ), message_str->x, message_str->len, hash_result ) == 0 ); |
| 153 | |
Cédric Meuter | 61adfd6 | 2021-01-10 11:52:39 +0100 | [diff] [blame] | 154 | if (fixed_salt_length == MBEDTLS_RSA_SALT_LEN_ANY) |
| 155 | { |
| 156 | TEST_ASSERT( mbedtls_rsa_pkcs1_sign( &ctx, &mbedtls_test_rnd_buffer_rand, |
| 157 | &info, MBEDTLS_RSA_PRIVATE, digest, 0, |
| 158 | hash_result, output ) == result ); |
| 159 | if( result == 0 ) |
| 160 | { |
| 161 | ASSERT_COMPARE( output, ctx.len, result_str->x, result_str->len ); |
| 162 | } |
| 163 | |
| 164 | info.buf = rnd_buf->x; |
| 165 | info.length = rnd_buf->len; |
| 166 | } |
| 167 | |
Cédric Meuter | ff3db6a | 2021-01-10 15:40:33 +0100 | [diff] [blame] | 168 | TEST_ASSERT( mbedtls_rsa_rsassa_pss_sign_ext( &ctx, &mbedtls_test_rnd_buffer_rand, |
Cédric Meuter | 61adfd6 | 2021-01-10 11:52:39 +0100 | [diff] [blame] | 169 | &info, digest, 0, hash_result, |
| 170 | fixed_salt_length, output ) == result ); |
Cédric Meuter | 668a78d | 2020-04-30 11:57:04 +0200 | [diff] [blame] | 171 | if( result == 0 ) |
| 172 | { |
Cédric Meuter | 6882b46 | 2021-01-10 11:31:12 +0100 | [diff] [blame] | 173 | ASSERT_COMPARE( output, ctx.len, result_str->x, result_str->len ); |
Cédric Meuter | 668a78d | 2020-04-30 11:57:04 +0200 | [diff] [blame] | 174 | } |
| 175 | |
| 176 | exit: |
| 177 | mbedtls_mpi_free( &N ); mbedtls_mpi_free( &P ); |
| 178 | mbedtls_mpi_free( &Q ); mbedtls_mpi_free( &E ); |
| 179 | mbedtls_rsa_free( &ctx ); |
| 180 | } |
| 181 | /* END_CASE */ |
| 182 | |
| 183 | /* BEGIN_CASE */ |
Cédric Meuter | bc13cd9 | 2020-12-28 14:39:33 +0100 | [diff] [blame] | 184 | void pkcs1_rsassa_pss_verify( int mod, data_t * input_N, data_t * input_E, |
| 185 | int digest, int hash, data_t * message_str, |
| 186 | char * salt, data_t * result_str, int result ) |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 187 | { |
Ron Eldor | 5b8f120 | 2018-11-22 15:49:49 +0200 | [diff] [blame] | 188 | unsigned char hash_result[MBEDTLS_MD_MAX_SIZE]; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 189 | mbedtls_rsa_context ctx; |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 190 | mbedtls_mpi N, E; |
Paul Bakker | dbd443d | 2013-08-16 13:38:47 +0200 | [diff] [blame] | 191 | ((void) salt); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 192 | |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 193 | mbedtls_mpi_init( &N ); mbedtls_mpi_init( &E ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 194 | mbedtls_rsa_init( &ctx, MBEDTLS_RSA_PKCS_V21, hash ); |
Ron Eldor | 5b8f120 | 2018-11-22 15:49:49 +0200 | [diff] [blame] | 195 | memset( hash_result, 0x00, sizeof( hash_result ) ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 196 | |
Cédric Meuter | bc13cd9 | 2020-12-28 14:39:33 +0100 | [diff] [blame] | 197 | TEST_ASSERT( mbedtls_mpi_read_binary( &N, input_N->x, input_N->len ) == 0 ); |
| 198 | TEST_ASSERT( mbedtls_mpi_read_binary( &E, input_E->x, input_E->len ) == 0 ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 199 | |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 200 | TEST_ASSERT( mbedtls_rsa_import( &ctx, &N, NULL, NULL, NULL, &E ) == 0 ); |
| 201 | TEST_ASSERT( mbedtls_rsa_get_len( &ctx ) == (size_t) ( ( mod + 7 ) / 8 ) ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 202 | TEST_ASSERT( mbedtls_rsa_check_pubkey( &ctx ) == 0 ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 203 | |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 204 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 205 | if( mbedtls_md_info_from_type( digest ) != NULL ) |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 206 | TEST_ASSERT( mbedtls_md( mbedtls_md_info_from_type( digest ), message_str->x, message_str->len, hash_result ) == 0 ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 207 | |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 208 | TEST_ASSERT( mbedtls_rsa_pkcs1_verify( &ctx, NULL, NULL, MBEDTLS_RSA_PUBLIC, digest, 0, hash_result, result_str->x ) == result ); |
Paul Bakker | 58ef6ec | 2013-01-03 11:33:48 +0100 | [diff] [blame] | 209 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 210 | exit: |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 211 | mbedtls_mpi_free( &N ); mbedtls_mpi_free( &E ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 212 | mbedtls_rsa_free( &ctx ); |
Paul Bakker | 9dcc322 | 2011-03-08 14:16:06 +0000 | [diff] [blame] | 213 | } |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 214 | /* END_CASE */ |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 215 | |
| 216 | /* BEGIN_CASE */ |
Cédric Meuter | bc13cd9 | 2020-12-28 14:39:33 +0100 | [diff] [blame] | 217 | void pkcs1_rsassa_pss_verify_ext( int mod, data_t * input_N, data_t * input_E, |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 218 | int msg_digest_id, int ctx_hash, |
| 219 | int mgf_hash, int salt_len, |
Azim Khan | 5fcca46 | 2018-06-29 11:05:32 +0100 | [diff] [blame] | 220 | data_t * message_str, |
| 221 | data_t * result_str, int result_simple, |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 222 | int result_full ) |
| 223 | { |
Ron Eldor | 5b8f120 | 2018-11-22 15:49:49 +0200 | [diff] [blame] | 224 | unsigned char hash_result[MBEDTLS_MD_MAX_SIZE]; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 225 | mbedtls_rsa_context ctx; |
Azim Khan | f1aaec9 | 2017-05-30 14:23:15 +0100 | [diff] [blame] | 226 | size_t hash_len; |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 227 | mbedtls_mpi N, E; |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 228 | |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 229 | mbedtls_mpi_init( &N ); mbedtls_mpi_init( &E ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 230 | mbedtls_rsa_init( &ctx, MBEDTLS_RSA_PKCS_V21, ctx_hash ); |
Ron Eldor | 5b8f120 | 2018-11-22 15:49:49 +0200 | [diff] [blame] | 231 | memset( hash_result, 0x00, sizeof( hash_result ) ); |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 232 | |
Cédric Meuter | bc13cd9 | 2020-12-28 14:39:33 +0100 | [diff] [blame] | 233 | TEST_ASSERT( mbedtls_mpi_read_binary( &N, input_N->x, input_N->len ) == 0 ); |
| 234 | TEST_ASSERT( mbedtls_mpi_read_binary( &E, input_E->x, input_E->len ) == 0 ); |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 235 | |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 236 | TEST_ASSERT( mbedtls_rsa_import( &ctx, &N, NULL, NULL, NULL, &E ) == 0 ); |
| 237 | TEST_ASSERT( mbedtls_rsa_get_len( &ctx ) == (size_t) ( ( mod + 7 ) / 8 ) ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 238 | TEST_ASSERT( mbedtls_rsa_check_pubkey( &ctx ) == 0 ); |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 239 | |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 240 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 241 | if( msg_digest_id != MBEDTLS_MD_NONE ) |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 242 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 243 | TEST_ASSERT( mbedtls_md( mbedtls_md_info_from_type( msg_digest_id ), |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 244 | message_str->x, message_str->len, hash_result ) == 0 ); |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 245 | hash_len = 0; |
| 246 | } |
| 247 | else |
| 248 | { |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 249 | memcpy( hash_result, message_str->x, message_str->len ); |
| 250 | hash_len = message_str->len; |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 251 | } |
| 252 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 253 | TEST_ASSERT( mbedtls_rsa_pkcs1_verify( &ctx, NULL, NULL, MBEDTLS_RSA_PUBLIC, |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 254 | msg_digest_id, hash_len, hash_result, |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 255 | result_str->x ) == result_simple ); |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 256 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 257 | TEST_ASSERT( mbedtls_rsa_rsassa_pss_verify_ext( &ctx, NULL, NULL, MBEDTLS_RSA_PUBLIC, |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 258 | msg_digest_id, hash_len, hash_result, |
| 259 | mgf_hash, salt_len, |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 260 | result_str->x ) == result_full ); |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 261 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 262 | exit: |
Hanno Becker | 6326a6d | 2017-08-23 06:38:22 +0100 | [diff] [blame] | 263 | mbedtls_mpi_free( &N ); mbedtls_mpi_free( &E ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 264 | mbedtls_rsa_free( &ctx ); |
Manuel Pégourié-Gonnard | 5ec628a | 2014-06-03 11:44:06 +0200 | [diff] [blame] | 265 | } |
| 266 | /* END_CASE */ |