jpaketest.c revision 296341
1#include <openssl/opensslconf.h> 2 3#ifdef OPENSSL_NO_JPAKE 4 5# include <stdio.h> 6 7int main(int argc, char *argv[]) 8{ 9 printf("No J-PAKE support\n"); 10 return (0); 11} 12 13#else 14 15# include <openssl/jpake.h> 16# include <openssl/err.h> 17 18static void showbn(const char *name, const BIGNUM *bn) 19{ 20 fputs(name, stdout); 21 fputs(" = ", stdout); 22 BN_print_fp(stdout, bn); 23 putc('\n', stdout); 24} 25 26static int run_jpake(JPAKE_CTX *alice, JPAKE_CTX *bob) 27{ 28 JPAKE_STEP1 alice_s1; 29 JPAKE_STEP1 bob_s1; 30 JPAKE_STEP2 alice_s2; 31 JPAKE_STEP2 bob_s2; 32 JPAKE_STEP3A alice_s3a; 33 JPAKE_STEP3B bob_s3b; 34 35 /* Alice -> Bob: step 1 */ 36 puts("A->B s1"); 37 JPAKE_STEP1_init(&alice_s1); 38 JPAKE_STEP1_generate(&alice_s1, alice); 39 if (!JPAKE_STEP1_process(bob, &alice_s1)) { 40 printf("Bob fails to process Alice's step 1\n"); 41 ERR_print_errors_fp(stdout); 42 return 1; 43 } 44 JPAKE_STEP1_release(&alice_s1); 45 46 /* Bob -> Alice: step 1 */ 47 puts("B->A s1"); 48 JPAKE_STEP1_init(&bob_s1); 49 JPAKE_STEP1_generate(&bob_s1, bob); 50 if (!JPAKE_STEP1_process(alice, &bob_s1)) { 51 printf("Alice fails to process Bob's step 1\n"); 52 ERR_print_errors_fp(stdout); 53 return 2; 54 } 55 JPAKE_STEP1_release(&bob_s1); 56 57 /* Alice -> Bob: step 2 */ 58 puts("A->B s2"); 59 JPAKE_STEP2_init(&alice_s2); 60 JPAKE_STEP2_generate(&alice_s2, alice); 61 if (!JPAKE_STEP2_process(bob, &alice_s2)) { 62 printf("Bob fails to process Alice's step 2\n"); 63 ERR_print_errors_fp(stdout); 64 return 3; 65 } 66 JPAKE_STEP2_release(&alice_s2); 67 68 /* Bob -> Alice: step 2 */ 69 puts("B->A s2"); 70 JPAKE_STEP2_init(&bob_s2); 71 JPAKE_STEP2_generate(&bob_s2, bob); 72 if (!JPAKE_STEP2_process(alice, &bob_s2)) { 73 printf("Alice fails to process Bob's step 2\n"); 74 ERR_print_errors_fp(stdout); 75 return 4; 76 } 77 JPAKE_STEP2_release(&bob_s2); 78 79 showbn("Alice's key", JPAKE_get_shared_key(alice)); 80 showbn("Bob's key ", JPAKE_get_shared_key(bob)); 81 82 /* Alice -> Bob: step 3a */ 83 puts("A->B s3a"); 84 JPAKE_STEP3A_init(&alice_s3a); 85 JPAKE_STEP3A_generate(&alice_s3a, alice); 86 if (!JPAKE_STEP3A_process(bob, &alice_s3a)) { 87 printf("Bob fails to process Alice's step 3a\n"); 88 ERR_print_errors_fp(stdout); 89 return 5; 90 } 91 JPAKE_STEP3A_release(&alice_s3a); 92 93 /* Bob -> Alice: step 3b */ 94 puts("B->A s3b"); 95 JPAKE_STEP3B_init(&bob_s3b); 96 JPAKE_STEP3B_generate(&bob_s3b, bob); 97 if (!JPAKE_STEP3B_process(alice, &bob_s3b)) { 98 printf("Alice fails to process Bob's step 3b\n"); 99 ERR_print_errors_fp(stdout); 100 return 6; 101 } 102 JPAKE_STEP3B_release(&bob_s3b); 103 104 return 0; 105} 106 107int main(int argc, char **argv) 108{ 109 JPAKE_CTX *alice; 110 JPAKE_CTX *bob; 111 BIGNUM *p = NULL; 112 BIGNUM *g = NULL; 113 BIGNUM *q = NULL; 114 BIGNUM *secret = BN_new(); 115 BIO *bio_err; 116 117 bio_err = BIO_new_fp(stderr, BIO_NOCLOSE); 118 119 CRYPTO_malloc_debug_init(); 120 CRYPTO_dbg_set_options(V_CRYPTO_MDEBUG_ALL); 121 CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ON); 122 123 ERR_load_crypto_strings(); 124 125 /*- 126 BN_hex2bn(&p, "fd7f53811d75122952df4a9c2eece4e7f611b7523cef4400c31e3f80b6512669455d402251fb593d8d58fabfc5f5ba30f6cb9b556cd7813b801d346ff26660b76b9950a5a49f9fe8047b1022c24fbba9d7feb7c61bf83b57e7c6a8a6150f04fb83f6d3c51ec3023554135a169132f675f3ae2b61d72aeff22203199dd14801c7"); 127 BN_hex2bn(&g, "f7e1a085d69b3ddecbbcab5c36b857b97994afbbfa3aea82f9574c0b3d0782675159578ebad4594fe67107108180b449167123e84c281613b7cf09328cc8a6e13c167a8b547c8d28e0a3ae1e2bb3a675916ea37f0bfa213562f1fb627a01243bcca4f1bea8519089a883dfe15ae59f06928b665e807b552564014c3bfecf492a"); 128 BN_hex2bn(&q, "9760508f15230bccb292b982a2eb840bf0581cf5"); 129 */ 130 /*- 131 p = BN_new(); 132 BN_generate_prime(p, 1024, 1, NULL, NULL, NULL, NULL); 133 */ 134 /* Use a safe prime for p (that we found earlier) */ 135 BN_hex2bn(&p, 136 "F9E5B365665EA7A05A9C534502780FEE6F1AB5BD4F49947FD036DBD7E905269AF46EF28B0FC07487EE4F5D20FB3C0AF8E700F3A2FA3414970CBED44FEDFF80CE78D800F184BB82435D137AADA2C6C16523247930A63B85661D1FC817A51ACD96168E95898A1F83A79FFB529368AA7833ABD1B0C3AEDDB14D2E1A2F71D99F763F"); 137 showbn("p", p); 138 g = BN_new(); 139 BN_set_word(g, 2); 140 showbn("g", g); 141 q = BN_new(); 142 BN_rshift1(q, p); 143 showbn("q", q); 144 145 BN_rand(secret, 32, -1, 0); 146 147 /* A normal run, expect this to work... */ 148 alice = JPAKE_CTX_new("Alice", "Bob", p, g, q, secret); 149 bob = JPAKE_CTX_new("Bob", "Alice", p, g, q, secret); 150 151 if (run_jpake(alice, bob) != 0) { 152 fprintf(stderr, "Plain JPAKE run failed\n"); 153 return 1; 154 } 155 156 JPAKE_CTX_free(bob); 157 JPAKE_CTX_free(alice); 158 159 /* Now give Alice and Bob different secrets */ 160 alice = JPAKE_CTX_new("Alice", "Bob", p, g, q, secret); 161 BN_add_word(secret, 1); 162 bob = JPAKE_CTX_new("Bob", "Alice", p, g, q, secret); 163 164 if (run_jpake(alice, bob) != 5) { 165 fprintf(stderr, "Mismatched secret JPAKE run failed\n"); 166 return 1; 167 } 168 169 JPAKE_CTX_free(bob); 170 JPAKE_CTX_free(alice); 171 172 BN_free(secret); 173 BN_free(q); 174 BN_free(g); 175 BN_free(p); 176 177 CRYPTO_cleanup_all_ex_data(); 178 ERR_remove_thread_state(NULL); 179 ERR_free_strings(); 180 CRYPTO_mem_leaks(bio_err); 181 182 return 0; 183} 184 185#endif 186