jpaketest.c revision 296465
1#include <openssl/opensslconf.h>
2
3#ifdef OPENSSL_NO_JPAKE
4
5# include <stdio.h>
6
7int main(int argc, char *argv[])
8{
9    printf("No J-PAKE support\n");
10    return (0);
11}
12
13#else
14
15# include <openssl/jpake.h>
16# include <openssl/err.h>
17
18static void showbn(const char *name, const BIGNUM *bn)
19{
20    fputs(name, stdout);
21    fputs(" = ", stdout);
22    BN_print_fp(stdout, bn);
23    putc('\n', stdout);
24}
25
26static int run_jpake(JPAKE_CTX *alice, JPAKE_CTX *bob)
27{
28    JPAKE_STEP1 alice_s1;
29    JPAKE_STEP1 bob_s1;
30    JPAKE_STEP2 alice_s2;
31    JPAKE_STEP2 bob_s2;
32    JPAKE_STEP3A alice_s3a;
33    JPAKE_STEP3B bob_s3b;
34
35    /* Alice -> Bob: step 1 */
36    puts("A->B s1");
37    JPAKE_STEP1_init(&alice_s1);
38    JPAKE_STEP1_generate(&alice_s1, alice);
39    if (!JPAKE_STEP1_process(bob, &alice_s1)) {
40        printf("Bob fails to process Alice's step 1\n");
41        ERR_print_errors_fp(stdout);
42        return 1;
43    }
44    JPAKE_STEP1_release(&alice_s1);
45
46    /* Bob -> Alice: step 1 */
47    puts("B->A s1");
48    JPAKE_STEP1_init(&bob_s1);
49    JPAKE_STEP1_generate(&bob_s1, bob);
50    if (!JPAKE_STEP1_process(alice, &bob_s1)) {
51        printf("Alice fails to process Bob's step 1\n");
52        ERR_print_errors_fp(stdout);
53        return 2;
54    }
55    JPAKE_STEP1_release(&bob_s1);
56
57    /* Alice -> Bob: step 2 */
58    puts("A->B s2");
59    JPAKE_STEP2_init(&alice_s2);
60    JPAKE_STEP2_generate(&alice_s2, alice);
61    if (!JPAKE_STEP2_process(bob, &alice_s2)) {
62        printf("Bob fails to process Alice's step 2\n");
63        ERR_print_errors_fp(stdout);
64        return 3;
65    }
66    JPAKE_STEP2_release(&alice_s2);
67
68    /* Bob -> Alice: step 2 */
69    puts("B->A s2");
70    JPAKE_STEP2_init(&bob_s2);
71    JPAKE_STEP2_generate(&bob_s2, bob);
72    if (!JPAKE_STEP2_process(alice, &bob_s2)) {
73        printf("Alice fails to process Bob's step 2\n");
74        ERR_print_errors_fp(stdout);
75        return 4;
76    }
77    JPAKE_STEP2_release(&bob_s2);
78
79    showbn("Alice's key", JPAKE_get_shared_key(alice));
80    showbn("Bob's key  ", JPAKE_get_shared_key(bob));
81
82    /* Alice -> Bob: step 3a */
83    puts("A->B s3a");
84    JPAKE_STEP3A_init(&alice_s3a);
85    JPAKE_STEP3A_generate(&alice_s3a, alice);
86    if (!JPAKE_STEP3A_process(bob, &alice_s3a)) {
87        printf("Bob fails to process Alice's step 3a\n");
88        ERR_print_errors_fp(stdout);
89        return 5;
90    }
91    JPAKE_STEP3A_release(&alice_s3a);
92
93    /* Bob -> Alice: step 3b */
94    puts("B->A s3b");
95    JPAKE_STEP3B_init(&bob_s3b);
96    JPAKE_STEP3B_generate(&bob_s3b, bob);
97    if (!JPAKE_STEP3B_process(alice, &bob_s3b)) {
98        printf("Alice fails to process Bob's step 3b\n");
99        ERR_print_errors_fp(stdout);
100        return 6;
101    }
102    JPAKE_STEP3B_release(&bob_s3b);
103
104    return 0;
105}
106
107int main(int argc, char **argv)
108{
109    JPAKE_CTX *alice;
110    JPAKE_CTX *bob;
111    BIGNUM *p = NULL;
112    BIGNUM *g = NULL;
113    BIGNUM *q = NULL;
114    BIGNUM *secret = BN_new();
115    BIO *bio_err;
116
117    bio_err = BIO_new_fp(stderr, BIO_NOCLOSE);
118
119    CRYPTO_malloc_debug_init();
120    CRYPTO_dbg_set_options(V_CRYPTO_MDEBUG_ALL);
121    CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ON);
122
123    ERR_load_crypto_strings();
124
125    /*-
126    BN_hex2bn(&p, "fd7f53811d75122952df4a9c2eece4e7f611b7523cef4400c31e3f80b6512669455d402251fb593d8d58fabfc5f5ba30f6cb9b556cd7813b801d346ff26660b76b9950a5a49f9fe8047b1022c24fbba9d7feb7c61bf83b57e7c6a8a6150f04fb83f6d3c51ec3023554135a169132f675f3ae2b61d72aeff22203199dd14801c7");
127    BN_hex2bn(&g, "f7e1a085d69b3ddecbbcab5c36b857b97994afbbfa3aea82f9574c0b3d0782675159578ebad4594fe67107108180b449167123e84c281613b7cf09328cc8a6e13c167a8b547c8d28e0a3ae1e2bb3a675916ea37f0bfa213562f1fb627a01243bcca4f1bea8519089a883dfe15ae59f06928b665e807b552564014c3bfecf492a");
128    BN_hex2bn(&q, "9760508f15230bccb292b982a2eb840bf0581cf5");
129    */
130    /*-
131    p = BN_new();
132    BN_generate_prime(p, 1024, 1, NULL, NULL, NULL, NULL);
133    */
134    /* Use a safe prime for p (that we found earlier) */
135    BN_hex2bn(&p,
136              "F9E5B365665EA7A05A9C534502780FEE6F1AB5BD4F49947FD036DBD7E905269AF46EF28B0FC07487EE4F5D20FB3C0AF8E700F3A2FA3414970CBED44FEDFF80CE78D800F184BB82435D137AADA2C6C16523247930A63B85661D1FC817A51ACD96168E95898A1F83A79FFB529368AA7833ABD1B0C3AEDDB14D2E1A2F71D99F763F");
137    showbn("p", p);
138    g = BN_new();
139    BN_set_word(g, 2);
140    showbn("g", g);
141    q = BN_new();
142    BN_rshift1(q, p);
143    showbn("q", q);
144
145    BN_rand(secret, 32, -1, 0);
146
147    /* A normal run, expect this to work... */
148    alice = JPAKE_CTX_new("Alice", "Bob", p, g, q, secret);
149    bob = JPAKE_CTX_new("Bob", "Alice", p, g, q, secret);
150
151    if (run_jpake(alice, bob) != 0) {
152        fprintf(stderr, "Plain JPAKE run failed\n");
153        return 1;
154    }
155
156    JPAKE_CTX_free(bob);
157    JPAKE_CTX_free(alice);
158
159    /* Now give Alice and Bob different secrets */
160    alice = JPAKE_CTX_new("Alice", "Bob", p, g, q, secret);
161    BN_add_word(secret, 1);
162    bob = JPAKE_CTX_new("Bob", "Alice", p, g, q, secret);
163
164    if (run_jpake(alice, bob) != 5) {
165        fprintf(stderr, "Mismatched secret JPAKE run failed\n");
166        return 1;
167    }
168
169    JPAKE_CTX_free(bob);
170    JPAKE_CTX_free(alice);
171
172    BN_free(secret);
173    BN_free(q);
174    BN_free(g);
175    BN_free(p);
176
177    CRYPTO_cleanup_all_ex_data();
178    ERR_remove_state(0);
179    ERR_free_strings();
180    CRYPTO_mem_leaks(bio_err);
181
182    return 0;
183}
184
185#endif
186