1/*	$NetBSD: validate.c,v 1.1.1.1 2011/04/13 18:14:50 elric Exp $	*/
2
3/*
4 * Copyright (c) 2010 Kungliga Tekniska Högskolan
5 * (Royal Institute of Technology, Stockholm, Sweden).
6 * All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 *
12 * 1. Redistributions of source code must retain the above copyright
13 *    notice, this list of conditions and the following disclaimer.
14 *
15 * 2. Redistributions in binary form must reproduce the above copyright
16 *    notice, this list of conditions and the following disclaimer in the
17 *    documentation and/or other materials provided with the distribution.
18 *
19 * 3. Neither the name of the Institute nor the names of its contributors
20 *    may be used to endorse or promote products derived from this software
21 *    without specific prior written permission.
22 *
23 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26 * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
33 * SUCH DAMAGE.
34 */
35
36#include <config.h>
37
38#include <sys/types.h>
39#include <limits.h>
40#include <stdio.h>
41#include <stdlib.h>
42#include <string.h>
43#include <krb5/roken.h>
44
45#include <evp.h>
46#include <hmac.h>
47#include <err.h>
48
49struct tests {
50    const EVP_CIPHER *(*cipher)(void);
51    const char *name;
52    void *key;
53    size_t keysize;
54    void *iv;
55    size_t datasize;
56    void *indata;
57    void *outdata;
58    void *outiv;
59};
60
61struct tests tests[] = {
62    {
63	EVP_aes_256_cbc,
64	"aes-256",
65	"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"
66	"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
67	32,
68	"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
69	16,
70	"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
71	"\xdc\x95\xc0\x78\xa2\x40\x89\x89\xad\x48\xa2\x14\x92\x84\x20\x87"
72    },
73#if 0
74    {
75	EVP_aes_128_cfb8,
76	"aes-cfb8-128",
77	"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
78	16,
79	"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
80	16,
81	"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
82	"\x66\xe9\x4b\xd4\xef\x8a\x2c\x3b\x88\x4c\xfa\x59\xca\x34\x2b\x2e"
83    },
84#endif
85    {
86	EVP_des_ede3_cbc,
87	"des-ede3",
88	"\x19\x17\xff\xe6\xbb\x77\x2e\xfc"
89	"\x29\x76\x43\xbc\x63\x56\x7e\x9a"
90	"\x00\x2e\x4d\x43\x1d\x5f\xfd\x58",
91	24,
92	"\xbf\x9a\x12\xb7\x26\x69\xfd\x05",
93	16,
94	"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
95	"\x55\x95\x97\x76\xa9\x6c\x66\x40\x64\xc7\xf4\x1c\x21\xb7\x14\x1b"
96    },
97#if 0
98    {
99	EVP_camellia_128_cbc,
100	"camellia128",
101	"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
102	16,
103	"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
104	16,
105	"\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00",
106	"\x07\x92\x3A\x39\xEB\x0A\x81\x7D\x1C\x4D\x87\xBD\xB8\x2D\x1F\x1C",
107	NULL
108    },
109#endif
110    {
111	EVP_rc4,
112	"rc4 8",
113	"\x01\x23\x45\x67\x89\xAB\xCD\xEF",
114	8,
115	NULL,
116	8,
117	"\x00\x00\x00\x00\x00\x00\x00\x00",
118	"\x74\x94\xC2\xE7\x10\x4B\x08\x79",
119	NULL
120    },
121    {
122	EVP_rc4,
123	"rc4 5",
124	"\x61\x8a\x63\xd2\xfb",
125	5,
126	NULL,
127	5,
128	"\xdc\xee\x4c\xf9\x2c",
129	"\xf1\x38\x29\xc9\xde",
130	NULL
131    },
132    {
133	EVP_rc4,
134	"rc4 309",
135	"\x29\x04\x19\x72\xfb\x42\xba\x5f\xc7\x12\x77\x12\xf1\x38\x29\xc9",
136	16,
137	NULL,
138	309,
139	"\x52\x75\x69\x73\x6c\x69\x6e\x6e"
140	"\x75\x6e\x20\x6c\x61\x75\x6c\x75"
141	"\x20\x6b\x6f\x72\x76\x69\x73\x73"
142	"\x73\x61\x6e\x69\x2c\x20\x74\xe4"
143	"\x68\x6b\xe4\x70\xe4\x69\x64\x65"
144	"\x6e\x20\x70\xe4\xe4\x6c\x6c\xe4"
145	"\x20\x74\xe4\x79\x73\x69\x6b\x75"
146	"\x75\x2e\x20\x4b\x65\x73\xe4\x79"
147	"\xf6\x6e\x20\x6f\x6e\x20\x6f\x6e"
148	"\x6e\x69\x20\x6f\x6d\x61\x6e\x61"
149	"\x6e\x69\x2c\x20\x6b\x61\x73\x6b"
150	"\x69\x73\x61\x76\x75\x75\x6e\x20"
151	"\x6c\x61\x61\x6b\x73\x6f\x74\x20"
152	"\x76\x65\x72\x68\x6f\x75\x75\x2e"
153	"\x20\x45\x6e\x20\x6d\x61\x20\x69"
154	"\x6c\x6f\x69\x74\x73\x65\x2c\x20"
155	"\x73\x75\x72\x65\x20\x68\x75\x6f"
156	"\x6b\x61\x61\x2c\x20\x6d\x75\x74"
157	"\x74\x61\x20\x6d\x65\x74\x73\xe4"
158	"\x6e\x20\x74\x75\x6d\x6d\x75\x75"
159	"\x73\x20\x6d\x75\x6c\x6c\x65\x20"
160	"\x74\x75\x6f\x6b\x61\x61\x2e\x20"
161	"\x50\x75\x75\x6e\x74\x6f\x20\x70"
162	"\x69\x6c\x76\x65\x6e\x2c\x20\x6d"
163	"\x69\x20\x68\x75\x6b\x6b\x75\x75"
164	"\x2c\x20\x73\x69\x69\x6e\x74\x6f"
165	"\x20\x76\x61\x72\x61\x6e\x20\x74"
166	"\x75\x75\x6c\x69\x73\x65\x6e\x2c"
167	"\x20\x6d\x69\x20\x6e\x75\x6b\x6b"
168	"\x75\x75\x2e\x20\x54\x75\x6f\x6b"
169	"\x73\x75\x74\x20\x76\x61\x6e\x61"
170	"\x6d\x6f\x6e\x20\x6a\x61\x20\x76"
171	"\x61\x72\x6a\x6f\x74\x20\x76\x65"
172	"\x65\x6e\x2c\x20\x6e\x69\x69\x73"
173	"\x74\xe4\x20\x73\x79\x64\xe4\x6d"
174	"\x65\x6e\x69\x20\x6c\x61\x75\x6c"
175	"\x75\x6e\x20\x74\x65\x65\x6e\x2e"
176	"\x20\x2d\x20\x45\x69\x6e\x6f\x20"
177	"\x4c\x65\x69\x6e\x6f",
178	"\x35\x81\x86\x99\x90\x01\xe6\xb5"
179	"\xda\xf0\x5e\xce\xeb\x7e\xee\x21"
180	"\xe0\x68\x9c\x1f\x00\xee\xa8\x1f"
181	"\x7d\xd2\xca\xae\xe1\xd2\x76\x3e"
182	"\x68\xaf\x0e\xad\x33\xd6\x6c\x26"
183	"\x8b\xc9\x46\xc4\x84\xfb\xe9\x4c"
184	"\x5f\x5e\x0b\x86\xa5\x92\x79\xe4"
185	"\xf8\x24\xe7\xa6\x40\xbd\x22\x32"
186	"\x10\xb0\xa6\x11\x60\xb7\xbc\xe9"
187	"\x86\xea\x65\x68\x80\x03\x59\x6b"
188	"\x63\x0a\x6b\x90\xf8\xe0\xca\xf6"
189	"\x91\x2a\x98\xeb\x87\x21\x76\xe8"
190	"\x3c\x20\x2c\xaa\x64\x16\x6d\x2c"
191	"\xce\x57\xff\x1b\xca\x57\xb2\x13"
192	"\xf0\xed\x1a\xa7\x2f\xb8\xea\x52"
193	"\xb0\xbe\x01\xcd\x1e\x41\x28\x67"
194	"\x72\x0b\x32\x6e\xb3\x89\xd0\x11"
195	"\xbd\x70\xd8\xaf\x03\x5f\xb0\xd8"
196	"\x58\x9d\xbc\xe3\xc6\x66\xf5\xea"
197	"\x8d\x4c\x79\x54\xc5\x0c\x3f\x34"
198	"\x0b\x04\x67\xf8\x1b\x42\x59\x61"
199	"\xc1\x18\x43\x07\x4d\xf6\x20\xf2"
200	"\x08\x40\x4b\x39\x4c\xf9\xd3\x7f"
201	"\xf5\x4b\x5f\x1a\xd8\xf6\xea\x7d"
202	"\xa3\xc5\x61\xdf\xa7\x28\x1f\x96"
203	"\x44\x63\xd2\xcc\x35\xa4\xd1\xb0"
204	"\x34\x90\xde\xc5\x1b\x07\x11\xfb"
205	"\xd6\xf5\x5f\x79\x23\x4d\x5b\x7c"
206	"\x76\x66\x22\xa6\x6d\xe9\x2b\xe9"
207	"\x96\x46\x1d\x5e\x4d\xc8\x78\xef"
208	"\x9b\xca\x03\x05\x21\xe8\x35\x1e"
209	"\x4b\xae\xd2\xfd\x04\xf9\x46\x73"
210	"\x68\xc4\xad\x6a\xc1\x86\xd0\x82"
211	"\x45\xb2\x63\xa2\x66\x6d\x1f\x6c"
212	"\x54\x20\xf1\x59\x9d\xfd\x9f\x43"
213	"\x89\x21\xc2\xf5\xa4\x63\x93\x8c"
214	"\xe0\x98\x22\x65\xee\xf7\x01\x79"
215	"\xbc\x55\x3f\x33\x9e\xb1\xa4\xc1"
216	"\xaf\x5f\x6a\x54\x7f"
217    }
218};
219
220static int
221test_cipher(struct tests *t)
222{
223    const EVP_CIPHER *c = t->cipher();
224    EVP_CIPHER_CTX ectx;
225    EVP_CIPHER_CTX dctx;
226    void *d;
227
228    EVP_CIPHER_CTX_init(&ectx);
229    EVP_CIPHER_CTX_init(&dctx);
230
231    if (EVP_CipherInit_ex(&ectx, c, NULL, NULL, NULL, 1) != 1)
232	errx(1, "%s: EVP_CipherInit_ex einit", t->name);
233    if (EVP_CipherInit_ex(&dctx, c, NULL, NULL, NULL, 0) != 1)
234	errx(1, "%s: EVP_CipherInit_ex dinit", t->name);
235
236    EVP_CIPHER_CTX_set_key_length(&ectx, t->keysize);
237    EVP_CIPHER_CTX_set_key_length(&dctx, t->keysize);
238
239    if (EVP_CipherInit_ex(&ectx, NULL, NULL, t->key, t->iv, 1) != 1)
240	errx(1, "%s: EVP_CipherInit_ex encrypt", t->name);
241    if (EVP_CipherInit_ex(&dctx, NULL, NULL, t->key, t->iv, 0) != 1)
242	errx(1, "%s: EVP_CipherInit_ex decrypt", t->name);
243
244    d = emalloc(t->datasize);
245
246    if (!EVP_Cipher(&ectx, d, t->indata, t->datasize))
247	return 1;
248
249    if (memcmp(d, t->outdata, t->datasize) != 0)
250	errx(1, "%s: encrypt not the same", t->name);
251
252    if (!EVP_Cipher(&dctx, d, d, t->datasize))
253	return 1;
254
255    if (memcmp(d, t->indata, t->datasize) != 0)
256	errx(1, "%s: decrypt not the same", t->name);
257
258    if (t->outiv)
259	/* XXXX check  */;
260
261    EVP_CIPHER_CTX_cleanup(&ectx);
262    EVP_CIPHER_CTX_cleanup(&dctx);
263    free(d);
264
265    return 0;
266}
267
268static void
269check_hmac(void)
270{
271    unsigned char buf[4] = { 0, 0, 0, 0 };
272    char hmackey[] = "hello-world";
273    size_t hmackey_size = sizeof(hmackey);
274    unsigned int hmaclen;
275    unsigned char hmac[EVP_MAX_MD_SIZE];
276    HMAC_CTX c;
277
278    char answer[20] = "\x2c\xfa\x32\xb7\x2b\x8a\xf6\xdf\xcf\xda"
279	              "\x6f\xd1\x52\x4d\x54\x58\x73\x0f\xf3\x24";
280
281    HMAC_CTX_init(&c);
282    HMAC_Init_ex(&c, hmackey, hmackey_size, EVP_sha1(), NULL);
283    HMAC_Update(&c, buf, sizeof(buf));
284    HMAC_Final(&c, hmac, &hmaclen);
285    HMAC_CTX_cleanup(&c);
286
287    if (hmaclen != 20)
288	errx(1, "hmaclen = %d\n", (int)hmaclen);
289
290    if (ct_memcmp(hmac, answer, hmaclen) != 0)
291	errx(1, "wrong answer\n");
292}
293
294void
295hcrypto_validate(void)
296{
297    static int validated = 0;
298    unsigned int i;
299
300    /* its ok to run this twice, do don't check for races */
301    if (validated)
302	return;
303    validated++;
304
305    for (i = 0; i < sizeof(tests) / sizeof(tests[0]); i++)
306	test_cipher(&tests[i]);
307
308    check_hmac();
309}
310