crypto/external/bsd/heimdal/dist/lib/hcrypto/validate.c

   1 /*      $NetBSD: validate.c,v 1.1.1.2 2014/04/24 12:45:30 pettai Exp $  */
   2
   3 /*
   4  * Copyright (c) 2010 Kungliga Tekniska Högskolan
   5  * (Royal Institute of Technology, Stockholm, Sweden).
   6  * All rights reserved.
   7  *
   8  * Redistribution and use in source and binary forms, with or without
   9  * modification, are permitted provided that the following conditions
  10  * are met:
  11  *
  12  * 1. Redistributions of source code must retain the above copyright
  13  *    notice, this list of conditions and the following disclaimer.
  14  *
  15  * 2. Redistributions in binary form must reproduce the above copyright
  16  *    notice, this list of conditions and the following disclaimer in the
  17  *    documentation and/or other materials provided with the distribution.
  18  *
  19  * 3. Neither the name of the Institute nor the names of its contributors
  20  *    may be used to endorse or promote products derived from this software
  21  *    without specific prior written permission.
  22  *
  23  * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
  24  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  25  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  26  * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
  27  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  28  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  29  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  30  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  31  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  32  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  33  * SUCH DAMAGE.
  34  */
  35
  36 #include <config.h>
  37
  38 #include <sys/types.h>
  39 #include <limits.h>
  40 #include <stdio.h>
  41 #include <stdlib.h>
  42 #include <string.h>
  43 #include <krb5/roken.h>
  44
  45 #include <evp.h>
  46 #include <hmac.h>
  47 #include <err.h>
  48
  49 struct tests {
  50     const EVP_CIPHER *(*cipher)(void);
  51     const char *name;
  52     void *key;
  53     size_t keysize;
  54     void *iv;
  55     size_t datasize;
  56     void *indata;
  57     void *outdata;
  58     void *outiv;
  59 };
  60
  61 static struct tests hc_tests[] = {
  62     {
  63         EVP_aes_256_cbc,
  64         "aes-256",
  65         "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
  66         "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
  67         32,
  68         "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
  69         16,
  70         "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
  71         "\xdc\x95\xc0\x78\xa2\x40\x89\x89\xad\x48\xa2\x14\x92\x84\x20\x87"
  72     },
  73 #if 0
  74     {
  75         EVP_aes_128_cfb8,
  76         "aes-cfb8-128",
  77         "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
  78         16,
  79         "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
  80         16,
  81         "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
  82         "\x66\xe9\x4b\xd4\xef\x8a\x2c\x3b\x88\x4c\xfa\x59\xca\x34\x2b\x2e"
  83     },
  84 #endif
  85     {
  86         EVP_des_ede3_cbc,
  87         "des-ede3",
  88         "\x19\x17\xff\xe6\xbb\x77\x2e\xfc"
  89         "\x29\x76\x43\xbc\x63\x56\x7e\x9a"
  90         "\x00\x2e\x4d\x43\x1d\x5f\xfd\x58",
  91         24,
  92         "\xbf\x9a\x12\xb7\x26\x69\xfd\x05",
  93         16,
  94         "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
  95         "\x55\x95\x97\x76\xa9\x6c\x66\x40\x64\xc7\xf4\x1c\x21\xb7\x14\x1b"
  96     },
  97 #if 0
  98     {
  99         EVP_camellia_128_cbc,
 100         "camellia128",
 101         "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
 102         16,
 103         "\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
 104         16,
 105         "\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
 106         "\x07\x92\x3A\x39\xEB\x0A\x81\x7D\x1C\x4D\x87\xBD\xB8\x2D\x1F\x1C",
 107         NULL
 108     },
 109 #endif
 110     {
 111         EVP_rc4,
 112         "rc4 8",
 113         "\x01\x23\x45\x67\x89\xAB\xCD\xEF",
 114         8,
 115         NULL,
 116         8,
 117         "\x00\x00\x00\x00\x00\x00\x00\x00",
 118         "\x74\x94\xC2\xE7\x10\x4B\x08\x79",
 119         NULL
 120     },
 121     {
 122         EVP_rc4,
 123         "rc4 5",
 124         "\x61\x8a\x63\xd2\xfb",
 125         5,
 126         NULL,
 127         5,
 128         "\xdc\xee\x4c\xf9\x2c",
 129         "\xf1\x38\x29\xc9\xde",
 130         NULL
 131     },
 132     {
 133         EVP_rc4,
 134         "rc4 309",
 135         "\x29\x04\x19\x72\xfb\x42\xba\x5f\xc7\x12\x77\x12\xf1\x38\x29\xc9",
 136         16,
 137         NULL,
 138         309,
 139         "\x52\x75\x69\x73\x6c\x69\x6e\x6e"
 140         "\x75\x6e\x20\x6c\x61\x75\x6c\x75"
 141         "\x20\x6b\x6f\x72\x76\x69\x73\x73"
 142         "\x73\x61\x6e\x69\x2c\x20\x74\xe4"
 143         "\x68\x6b\xe4\x70\xe4\x69\x64\x65"
 144         "\x6e\x20\x70\xe4\xe4\x6c\x6c\xe4"
 145         "\x20\x74\xe4\x79\x73\x69\x6b\x75"
 146         "\x75\x2e\x20\x4b\x65\x73\xe4\x79"
 147         "\xf6\x6e\x20\x6f\x6e\x20\x6f\x6e"
 148         "\x6e\x69\x20\x6f\x6d\x61\x6e\x61"
 149         "\x6e\x69\x2c\x20\x6b\x61\x73\x6b"
 150         "\x69\x73\x61\x76\x75\x75\x6e\x20"
 151         "\x6c\x61\x61\x6b\x73\x6f\x74\x20"
 152         "\x76\x65\x72\x68\x6f\x75\x75\x2e"
 153         "\x20\x45\x6e\x20\x6d\x61\x20\x69"
 154         "\x6c\x6f\x69\x74\x73\x65\x2c\x20"
 155         "\x73\x75\x72\x65\x20\x68\x75\x6f"
 156         "\x6b\x61\x61\x2c\x20\x6d\x75\x74"
 157         "\x74\x61\x20\x6d\x65\x74\x73\xe4"
 158         "\x6e\x20\x74\x75\x6d\x6d\x75\x75"
 159         "\x73\x20\x6d\x75\x6c\x6c\x65\x20"
 160         "\x74\x75\x6f\x6b\x61\x61\x2e\x20"
 161         "\x50\x75\x75\x6e\x74\x6f\x20\x70"
 162         "\x69\x6c\x76\x65\x6e\x2c\x20\x6d"
 163         "\x69\x20\x68\x75\x6b\x6b\x75\x75"
 164         "\x2c\x20\x73\x69\x69\x6e\x74\x6f"
 165         "\x20\x76\x61\x72\x61\x6e\x20\x74"
 166         "\x75\x75\x6c\x69\x73\x65\x6e\x2c"
 167         "\x20\x6d\x69\x20\x6e\x75\x6b\x6b"
 168         "\x75\x75\x2e\x20\x54\x75\x6f\x6b"
 169         "\x73\x75\x74\x20\x76\x61\x6e\x61"
 170         "\x6d\x6f\x6e\x20\x6a\x61\x20\x76"
 171         "\x61\x72\x6a\x6f\x74\x20\x76\x65"
 172         "\x65\x6e\x2c\x20\x6e\x69\x69\x73"
 173         "\x74\xe4\x20\x73\x79\x64\xe4\x6d"
 174         "\x65\x6e\x69\x20\x6c\x61\x75\x6c"
 175         "\x75\x6e\x20\x74\x65\x65\x6e\x2e"
 176         "\x20\x2d\x20\x45\x69\x6e\x6f\x20"
 177         "\x4c\x65\x69\x6e\x6f",
 178         "\x35\x81\x86\x99\x90\x01\xe6\xb5"
 179         "\xda\xf0\x5e\xce\xeb\x7e\xee\x21"
 180         "\xe0\x68\x9c\x1f\x00\xee\xa8\x1f"
 181         "\x7d\xd2\xca\xae\xe1\xd2\x76\x3e"
 182         "\x68\xaf\x0e\xad\x33\xd6\x6c\x26"
 183         "\x8b\xc9\x46\xc4\x84\xfb\xe9\x4c"
 184         "\x5f\x5e\x0b\x86\xa5\x92\x79\xe4"
 185         "\xf8\x24\xe7\xa6\x40\xbd\x22\x32"
 186         "\x10\xb0\xa6\x11\x60\xb7\xbc\xe9"
 187         "\x86\xea\x65\x68\x80\x03\x59\x6b"
 188         "\x63\x0a\x6b\x90\xf8\xe0\xca\xf6"
 189         "\x91\x2a\x98\xeb\x87\x21\x76\xe8"
 190         "\x3c\x20\x2c\xaa\x64\x16\x6d\x2c"
 191         "\xce\x57\xff\x1b\xca\x57\xb2\x13"
 192         "\xf0\xed\x1a\xa7\x2f\xb8\xea\x52"
 193         "\xb0\xbe\x01\xcd\x1e\x41\x28\x67"
 194         "\x72\x0b\x32\x6e\xb3\x89\xd0\x11"
 195         "\xbd\x70\xd8\xaf\x03\x5f\xb0\xd8"
 196         "\x58\x9d\xbc\xe3\xc6\x66\xf5\xea"
 197         "\x8d\x4c\x79\x54\xc5\x0c\x3f\x34"
 198         "\x0b\x04\x67\xf8\x1b\x42\x59\x61"
 199         "\xc1\x18\x43\x07\x4d\xf6\x20\xf2"
 200         "\x08\x40\x4b\x39\x4c\xf9\xd3\x7f"
 201         "\xf5\x4b\x5f\x1a\xd8\xf6\xea\x7d"
 202         "\xa3\xc5\x61\xdf\xa7\x28\x1f\x96"
 203         "\x44\x63\xd2\xcc\x35\xa4\xd1\xb0"
 204         "\x34\x90\xde\xc5\x1b\x07\x11\xfb"
 205         "\xd6\xf5\x5f\x79\x23\x4d\x5b\x7c"
 206         "\x76\x66\x22\xa6\x6d\xe9\x2b\xe9"
 207         "\x96\x46\x1d\x5e\x4d\xc8\x78\xef"
 208         "\x9b\xca\x03\x05\x21\xe8\x35\x1e"
 209         "\x4b\xae\xd2\xfd\x04\xf9\x46\x73"
 210         "\x68\xc4\xad\x6a\xc1\x86\xd0\x82"
 211         "\x45\xb2\x63\xa2\x66\x6d\x1f\x6c"
 212         "\x54\x20\xf1\x59\x9d\xfd\x9f\x43"
 213         "\x89\x21\xc2\xf5\xa4\x63\x93\x8c"
 214         "\xe0\x98\x22\x65\xee\xf7\x01\x79"
 215         "\xbc\x55\x3f\x33\x9e\xb1\xa4\xc1"
 216         "\xaf\x5f\x6a\x54\x7f"
 217     }
 218 };
 219
 220 static int
 221 test_cipher(struct tests *t)
 222 {
 223     const EVP_CIPHER *c = t->cipher();
 224     EVP_CIPHER_CTX ectx;
 225     EVP_CIPHER_CTX dctx;
 226     void *d;
 227
 228     EVP_CIPHER_CTX_init(&ectx);
 229     EVP_CIPHER_CTX_init(&dctx);
 230
 231     if (EVP_CipherInit_ex(&ectx, c, NULL, NULL, NULL, 1) != 1)
 232         errx(1, "%s: EVP_CipherInit_ex einit", t->name);
 233     if (EVP_CipherInit_ex(&dctx, c, NULL, NULL, NULL, 0) != 1)
 234         errx(1, "%s: EVP_CipherInit_ex dinit", t->name);
 235
 236     EVP_CIPHER_CTX_set_key_length(&ectx, t->keysize);
 237     EVP_CIPHER_CTX_set_key_length(&dctx, t->keysize);
 238
 239     if (EVP_CipherInit_ex(&ectx, NULL, NULL, t->key, t->iv, 1) != 1)
 240         errx(1, "%s: EVP_CipherInit_ex encrypt", t->name);
 241     if (EVP_CipherInit_ex(&dctx, NULL, NULL, t->key, t->iv, 0) != 1)
 242         errx(1, "%s: EVP_CipherInit_ex decrypt", t->name);
 243
 244     d = emalloc(t->datasize);
 245
 246     if (!EVP_Cipher(&ectx, d, t->indata, t->datasize))
 247         return 1;
 248
 249     if (memcmp(d, t->outdata, t->datasize) != 0)
 250         errx(1, "%s: encrypt not the same", t->name);
 251
 252     if (!EVP_Cipher(&dctx, d, d, t->datasize))
 253         return 1;
 254
 255     if (memcmp(d, t->indata, t->datasize) != 0)
 256         errx(1, "%s: decrypt not the same", t->name);
 257
 258     if (t->outiv)
 259         /* XXXX check  */;
 260
 261     EVP_CIPHER_CTX_cleanup(&ectx);
 262     EVP_CIPHER_CTX_cleanup(&dctx);
 263     free(d);
 264
 265     return 0;
 266 }
 267
 268 static void
 269 check_hmac(void)
 270 {
 271     unsigned char buf[4] = { 0, 0, 0, 0 };
 272     char hmackey[] = "hello-world";
 273     size_t hmackey_size = sizeof(hmackey);
 274     unsigned int hmaclen;
 275     unsigned char hmac[EVP_MAX_MD_SIZE];
 276     HMAC_CTX c;
 277
 278     char answer[20] = "\x2c\xfa\x32\xb7\x2b\x8a\xf6\xdf\xcf\xda"
 279                       "\x6f\xd1\x52\x4d\x54\x58\x73\x0f\xf3\x24";
 280
 281     HMAC_CTX_init(&c);
 282     HMAC_Init_ex(&c, hmackey, hmackey_size, EVP_sha1(), NULL);
 283     HMAC_Update(&c, buf, sizeof(buf));
 284     HMAC_Final(&c, hmac, &hmaclen);
 285     HMAC_CTX_cleanup(&c);
 286
 287     if (hmaclen != 20)
 288         errx(1, "hmaclen = %d\n", (int)hmaclen);
 289
 290     if (ct_memcmp(hmac, answer, hmaclen) != 0)
 291         errx(1, "wrong answer\n");
 292 }
 293
 294 void
 295 hcrypto_validate(void)
 296 {
 297     static int validated = 0;
 298     unsigned int i;
 299
 300     /* its ok to run this twice, do don't check for races */
 301     if (validated)
 302         return;
 303     validated++;
 304
 305     for (i = 0; i < sizeof(hc_tests) / sizeof(hc_tests[0]); i++)
 306         test_cipher(&hc_tests[i]);
 307
 308     check_hmac();
 309 }