1 /* Copyright (c) 2014 The Chromium OS Authors. All rights reserved.
2 * Use of this source code is governed by a BSD-style license that can be
3 * found in the LICENSE file.
4 */
5
6
7 #include <stdint.h>
8 #include <stdio.h>
9
10 #define _STUB_IMPLEMENTATION_
11
12 #include "cryptolib.h"
13 #include "file_keys.h"
14 #include "rsa_padding_test.h"
15 #include "test_common.h"
16 #include "utility.h"
17 #include "vboot_api.h"
18
19 #include "2common.h"
20 #include "2rsa.h"
21
22 /*
23 * Internal functions from 2rsa.c that have error conditions we can't trigger
24 * from the public APIs. These include checks for bad algorithms where the
25 * next call level up already checks for bad algorithms, etc.
26 *
27 * These functions aren't in 2rsa.h because they're not part of the public
28 * APIs.
29 */
30 int vb2_mont_ge(const struct vb2_public_key *key, uint32_t *a);
31 int vb2_check_padding(const uint8_t *sig, const struct vb2_public_key *key);
32
33 /**
34 * Test RSA utility funcs
35 */
test_utils(void)36 static void test_utils(void)
37 {
38 uint8_t sig[RSA1024NUMBYTES];
39 struct vb2_public_key kbad = {.sig_alg = VB2_SIG_INVALID,
40 .hash_alg = VB2_HASH_INVALID};
41
42 /* Verify old and new algorithm count constants match */
43 TEST_EQ(kNumAlgorithms, VB2_ALG_COUNT, "Algorithm counts");
44
45 /* Crypto algorithm to sig algorithm mapping */
46 TEST_EQ(vb2_crypto_to_signature(VB2_ALG_RSA1024_SHA1),
47 VB2_SIG_RSA1024, "Crypto map to RSA1024");
48 TEST_EQ(vb2_crypto_to_signature(VB2_ALG_RSA2048_SHA256),
49 VB2_SIG_RSA2048, "Crypto map to RSA2048");
50 TEST_EQ(vb2_crypto_to_signature(VB2_ALG_RSA4096_SHA256),
51 VB2_SIG_RSA4096, "Crypto map to RSA4096");
52 TEST_EQ(vb2_crypto_to_signature(VB2_ALG_RSA8192_SHA512),
53 VB2_SIG_RSA8192, "Crypto map to RSA8192");
54 TEST_EQ(vb2_crypto_to_signature(VB2_ALG_COUNT),
55 VB2_SIG_INVALID, "Crypto map to invalid");
56
57 /* Sig size */
58 TEST_EQ(vb2_rsa_sig_size(VB2_SIG_RSA1024), RSA1024NUMBYTES,
59 "Sig size RSA1024");
60 TEST_EQ(vb2_rsa_sig_size(VB2_SIG_RSA2048), RSA2048NUMBYTES,
61 "Sig size RSA2048");
62 TEST_EQ(vb2_rsa_sig_size(VB2_SIG_RSA4096), RSA4096NUMBYTES,
63 "Sig size RSA4096");
64 TEST_EQ(vb2_rsa_sig_size(VB2_SIG_RSA8192), RSA8192NUMBYTES,
65 "Sig size RSA8192");
66 TEST_EQ(vb2_rsa_sig_size(VB2_SIG_INVALID), 0,
67 "Sig size invalid algorithm");
68 TEST_EQ(vb2_rsa_sig_size(VB2_SIG_NONE), 0,
69 "Sig size no signing algorithm");
70
71 /* Packed key size */
72 TEST_EQ(vb2_packed_key_size(VB2_SIG_RSA1024),
73 RSA1024NUMBYTES * 2 + sizeof(uint32_t) * 2,
74 "Packed key size VB2_SIG_RSA1024");
75 TEST_EQ(vb2_packed_key_size(VB2_SIG_RSA2048),
76 RSA2048NUMBYTES * 2 + sizeof(uint32_t) * 2,
77 "Packed key size VB2_SIG_RSA2048");
78 TEST_EQ(vb2_packed_key_size(VB2_SIG_RSA4096),
79 RSA4096NUMBYTES * 2 + sizeof(uint32_t) * 2,
80 "Packed key size VB2_SIG_RSA4096");
81 TEST_EQ(vb2_packed_key_size(VB2_SIG_RSA8192),
82 RSA8192NUMBYTES * 2 + sizeof(uint32_t) * 2,
83 "Packed key size VB2_SIG_RSA8192");
84 TEST_EQ(vb2_packed_key_size(VB2_SIG_INVALID), 0,
85 "Packed key size invalid algorithm");
86 TEST_EQ(vb2_packed_key_size(VB2_SIG_NONE), 0,
87 "Packed key size no signing algorithm");
88
89 /* Test padding check with bad algorithm */
90 Memcpy(sig, signatures[0], sizeof(sig));
91 TEST_EQ(vb2_check_padding(sig, &kbad),
92 VB2_ERROR_RSA_PADDING_SIZE,
93 "vb2_check_padding() bad padding algorithm/size");
94
95 /* Test safe memcmp */
96 TEST_EQ(vb2_safe_memcmp("foo", "foo", 3), 0, "vb2_safe_memcmp() good");
97 TEST_NEQ(vb2_safe_memcmp("foo", "bar", 3), 0, "vb2_safe_memcmp() bad");
98 TEST_EQ(vb2_safe_memcmp("foo", "bar", 0), 0, "vb2_safe_memcmp() zero");
99
100 /* Test Montgomery >= */
101 {
102 uint32_t n[4] = {4, 4, 4, 4};
103 uint32_t a[4] = {4, 4, 4, 4};
104 struct vb2_public_key k = {
105 .arrsize = 4,
106 .n = n,
107 };
108 TEST_EQ(vb2_mont_ge(&k, a), 1, "mont_ge equal");
109
110 a[2] = 3;
111 TEST_EQ(vb2_mont_ge(&k, a), 0, "mont_ge less");
112
113 a[1] = 5;
114 TEST_EQ(vb2_mont_ge(&k, a), 0, "mont_ge greater");
115 }
116 }
117
main(int argc,char * argv[])118 int main(int argc, char* argv[])
119 {
120 /* Run tests */
121 test_utils();
122
123 return gTestSuccess ? 0 : 255;
124 }
125