1193645Ssimon#include <openssl/opensslconf.h> 2193645Ssimon 3193645Ssimon#ifdef OPENSSL_NO_JPAKE 4193645Ssimon 5193645Ssimon#include <stdio.h> 6193645Ssimon 7193645Ssimonint main(int argc, char *argv[]) 8193645Ssimon{ 9193645Ssimon printf("No J-PAKE support\n"); 10193645Ssimon return(0); 11193645Ssimon} 12193645Ssimon 13193645Ssimon#else 14193645Ssimon 15193645Ssimon#include <openssl/jpake.h> 16193645Ssimon#include <openssl/err.h> 17193645Ssimon 18193645Ssimonstatic void showbn(const char *name, const BIGNUM *bn) 19193645Ssimon { 20193645Ssimon fputs(name, stdout); 21193645Ssimon fputs(" = ", stdout); 22193645Ssimon BN_print_fp(stdout, bn); 23193645Ssimon putc('\n', stdout); 24193645Ssimon } 25193645Ssimon 26193645Ssimonstatic int run_jpake(JPAKE_CTX *alice, JPAKE_CTX *bob) 27193645Ssimon { 28193645Ssimon JPAKE_STEP1 alice_s1; 29193645Ssimon JPAKE_STEP1 bob_s1; 30193645Ssimon JPAKE_STEP2 alice_s2; 31193645Ssimon JPAKE_STEP2 bob_s2; 32193645Ssimon JPAKE_STEP3A alice_s3a; 33193645Ssimon JPAKE_STEP3B bob_s3b; 34193645Ssimon 35193645Ssimon /* Alice -> Bob: step 1 */ 36193645Ssimon puts("A->B s1"); 37193645Ssimon JPAKE_STEP1_init(&alice_s1); 38193645Ssimon JPAKE_STEP1_generate(&alice_s1, alice); 39193645Ssimon if(!JPAKE_STEP1_process(bob, &alice_s1)) 40193645Ssimon { 41193645Ssimon printf("Bob fails to process Alice's step 1\n"); 42193645Ssimon ERR_print_errors_fp(stdout); 43193645Ssimon return 1; 44193645Ssimon } 45193645Ssimon JPAKE_STEP1_release(&alice_s1); 46193645Ssimon 47193645Ssimon /* Bob -> Alice: step 1 */ 48193645Ssimon puts("B->A s1"); 49193645Ssimon JPAKE_STEP1_init(&bob_s1); 50193645Ssimon JPAKE_STEP1_generate(&bob_s1, bob); 51193645Ssimon if(!JPAKE_STEP1_process(alice, &bob_s1)) 52193645Ssimon { 53193645Ssimon printf("Alice fails to process Bob's step 1\n"); 54193645Ssimon ERR_print_errors_fp(stdout); 55193645Ssimon return 2; 56193645Ssimon } 57193645Ssimon JPAKE_STEP1_release(&bob_s1); 58193645Ssimon 59193645Ssimon /* Alice -> Bob: step 2 */ 60193645Ssimon puts("A->B s2"); 61193645Ssimon JPAKE_STEP2_init(&alice_s2); 62193645Ssimon JPAKE_STEP2_generate(&alice_s2, alice); 63193645Ssimon if(!JPAKE_STEP2_process(bob, &alice_s2)) 64193645Ssimon { 65193645Ssimon printf("Bob fails to process Alice's step 2\n"); 66193645Ssimon ERR_print_errors_fp(stdout); 67193645Ssimon return 3; 68193645Ssimon } 69193645Ssimon JPAKE_STEP2_release(&alice_s2); 70193645Ssimon 71193645Ssimon /* Bob -> Alice: step 2 */ 72193645Ssimon puts("B->A s2"); 73193645Ssimon JPAKE_STEP2_init(&bob_s2); 74193645Ssimon JPAKE_STEP2_generate(&bob_s2, bob); 75193645Ssimon if(!JPAKE_STEP2_process(alice, &bob_s2)) 76193645Ssimon { 77193645Ssimon printf("Alice fails to process Bob's step 2\n"); 78193645Ssimon ERR_print_errors_fp(stdout); 79193645Ssimon return 4; 80193645Ssimon } 81193645Ssimon JPAKE_STEP2_release(&bob_s2); 82193645Ssimon 83193645Ssimon showbn("Alice's key", JPAKE_get_shared_key(alice)); 84193645Ssimon showbn("Bob's key ", JPAKE_get_shared_key(bob)); 85193645Ssimon 86193645Ssimon /* Alice -> Bob: step 3a */ 87193645Ssimon puts("A->B s3a"); 88193645Ssimon JPAKE_STEP3A_init(&alice_s3a); 89193645Ssimon JPAKE_STEP3A_generate(&alice_s3a, alice); 90193645Ssimon if(!JPAKE_STEP3A_process(bob, &alice_s3a)) 91193645Ssimon { 92193645Ssimon printf("Bob fails to process Alice's step 3a\n"); 93193645Ssimon ERR_print_errors_fp(stdout); 94193645Ssimon return 5; 95193645Ssimon } 96193645Ssimon JPAKE_STEP3A_release(&alice_s3a); 97193645Ssimon 98193645Ssimon /* Bob -> Alice: step 3b */ 99193645Ssimon puts("B->A s3b"); 100193645Ssimon JPAKE_STEP3B_init(&bob_s3b); 101193645Ssimon JPAKE_STEP3B_generate(&bob_s3b, bob); 102193645Ssimon if(!JPAKE_STEP3B_process(alice, &bob_s3b)) 103193645Ssimon { 104193645Ssimon printf("Alice fails to process Bob's step 3b\n"); 105193645Ssimon ERR_print_errors_fp(stdout); 106193645Ssimon return 6; 107193645Ssimon } 108193645Ssimon JPAKE_STEP3B_release(&bob_s3b); 109193645Ssimon 110193645Ssimon return 0; 111193645Ssimon } 112193645Ssimon 113193645Ssimonint main(int argc, char **argv) 114193645Ssimon { 115193645Ssimon JPAKE_CTX *alice; 116193645Ssimon JPAKE_CTX *bob; 117193645Ssimon BIGNUM *p = NULL; 118193645Ssimon BIGNUM *g = NULL; 119193645Ssimon BIGNUM *q = NULL; 120193645Ssimon BIGNUM *secret = BN_new(); 121193645Ssimon BIO *bio_err; 122193645Ssimon 123193645Ssimon bio_err = BIO_new_fp(stderr, BIO_NOCLOSE); 124193645Ssimon 125193645Ssimon CRYPTO_malloc_debug_init(); 126193645Ssimon CRYPTO_dbg_set_options(V_CRYPTO_MDEBUG_ALL); 127193645Ssimon CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ON); 128193645Ssimon 129193645Ssimon ERR_load_crypto_strings(); 130193645Ssimon 131193645Ssimon /* 132193645Ssimon BN_hex2bn(&p, "fd7f53811d75122952df4a9c2eece4e7f611b7523cef4400c31e3f80b6512669455d402251fb593d8d58fabfc5f5ba30f6cb9b556cd7813b801d346ff26660b76b9950a5a49f9fe8047b1022c24fbba9d7feb7c61bf83b57e7c6a8a6150f04fb83f6d3c51ec3023554135a169132f675f3ae2b61d72aeff22203199dd14801c7"); 133193645Ssimon BN_hex2bn(&g, "f7e1a085d69b3ddecbbcab5c36b857b97994afbbfa3aea82f9574c0b3d0782675159578ebad4594fe67107108180b449167123e84c281613b7cf09328cc8a6e13c167a8b547c8d28e0a3ae1e2bb3a675916ea37f0bfa213562f1fb627a01243bcca4f1bea8519089a883dfe15ae59f06928b665e807b552564014c3bfecf492a"); 134193645Ssimon BN_hex2bn(&q, "9760508f15230bccb292b982a2eb840bf0581cf5"); 135193645Ssimon */ 136193645Ssimon /* 137193645Ssimon p = BN_new(); 138193645Ssimon BN_generate_prime(p, 1024, 1, NULL, NULL, NULL, NULL); 139193645Ssimon */ 140193645Ssimon /* Use a safe prime for p (that we found earlier) */ 141193645Ssimon BN_hex2bn(&p, "F9E5B365665EA7A05A9C534502780FEE6F1AB5BD4F49947FD036DBD7E905269AF46EF28B0FC07487EE4F5D20FB3C0AF8E700F3A2FA3414970CBED44FEDFF80CE78D800F184BB82435D137AADA2C6C16523247930A63B85661D1FC817A51ACD96168E95898A1F83A79FFB529368AA7833ABD1B0C3AEDDB14D2E1A2F71D99F763F"); 142193645Ssimon showbn("p", p); 143193645Ssimon g = BN_new(); 144193645Ssimon BN_set_word(g, 2); 145193645Ssimon showbn("g", g); 146193645Ssimon q = BN_new(); 147193645Ssimon BN_rshift1(q, p); 148193645Ssimon showbn("q", q); 149193645Ssimon 150193645Ssimon BN_rand(secret, 32, -1, 0); 151193645Ssimon 152193645Ssimon /* A normal run, expect this to work... */ 153193645Ssimon alice = JPAKE_CTX_new("Alice", "Bob", p, g, q, secret); 154193645Ssimon bob = JPAKE_CTX_new("Bob", "Alice", p, g, q, secret); 155193645Ssimon 156193645Ssimon if(run_jpake(alice, bob) != 0) 157193645Ssimon { 158193645Ssimon fprintf(stderr, "Plain JPAKE run failed\n"); 159193645Ssimon return 1; 160193645Ssimon } 161193645Ssimon 162193645Ssimon JPAKE_CTX_free(bob); 163193645Ssimon JPAKE_CTX_free(alice); 164193645Ssimon 165193645Ssimon /* Now give Alice and Bob different secrets */ 166193645Ssimon alice = JPAKE_CTX_new("Alice", "Bob", p, g, q, secret); 167193645Ssimon BN_add_word(secret, 1); 168193645Ssimon bob = JPAKE_CTX_new("Bob", "Alice", p, g, q, secret); 169193645Ssimon 170193645Ssimon if(run_jpake(alice, bob) != 5) 171193645Ssimon { 172193645Ssimon fprintf(stderr, "Mismatched secret JPAKE run failed\n"); 173193645Ssimon return 1; 174193645Ssimon } 175193645Ssimon 176193645Ssimon JPAKE_CTX_free(bob); 177193645Ssimon JPAKE_CTX_free(alice); 178193645Ssimon 179193645Ssimon BN_free(secret); 180193645Ssimon BN_free(q); 181193645Ssimon BN_free(g); 182193645Ssimon BN_free(p); 183193645Ssimon 184193645Ssimon CRYPTO_cleanup_all_ex_data(); 185238405Sjkim ERR_remove_thread_state(NULL); 186193645Ssimon ERR_free_strings(); 187193645Ssimon CRYPTO_mem_leaks(bio_err); 188193645Ssimon 189193645Ssimon return 0; 190193645Ssimon } 191193645Ssimon 192193645Ssimon#endif 193