Kernel/iwd
3
0
Fork 0
mirror of https://git.kernel.org/pub/scm/network/wireless/iwd.git synced 2024-11-05 03:29:24 +01:00
Code Releases Activity
ca0806438b
iwd/unit/test-dpp.c

580 lines
19 KiB
C
Raw Normal View History

unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
/*
*
* Wireless daemon for Linux
*
* Copyright (C) 2021 Intel Corporation. All rights reserved.
*
* This library is free software; you can redistribute it and/or
* modify it under the terms of the GNU Lesser General Public
* License as published by the Free Software Foundation; either
* version 2.1 of the License, or (at your option) any later version.
*
* This library is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public
* License along with this library; if not, write to the Free Software
* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
*
*/
#ifdef HAVE_CONFIG_H
#include <config.h>
#endif
#include <assert.h>
#include <stdio.h>
#include <ell/ell.h>
#include "src/dpp-util.h"
#include "src/util.h"
unit: fix memory leaks in test-dpp
2021-12-07 00:51:26 +01:00
#include "ell/useful.h"
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
unit: add DPP unit tests for URI parsing
2022-02-22 23:28:40 +01:00
struct dpp_test_info {
const char *uri;
bool expect_fail;
uint32_t expected_freqs[10];
struct dpp_uri_info result;
};
struct dpp_test_info all_values = {
.uri = "DPP:C:81/1,115/36;I:SN=4774LH2b4044;M:5254005828e5;V:2;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;;",
.result = {
.mac = { 0x52, 0x54, 0x00, 0x58, 0x28, 0xe5 },
.version = 2,
},
.expected_freqs = { 2412, 5180, 0 }
};
struct dpp_test_info no_type = {
.uri = "C:81/1;K:shouldnotmatter;;",
.expect_fail = true
};
struct dpp_test_info empty = {
.uri = "DPP:",
.expect_fail = true
};
struct dpp_test_info no_key = {
.uri = "DPP:C:81/1,115/36;I:SN=4774LH2b4044;M:5254005828e5;V:2;;",
.expect_fail = true
};
struct dpp_test_info data_after_terminator = {
.uri = "DPP:K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;;C:81/1;;",
.expect_fail = true
};
struct dpp_test_info single_terminator = {
.uri = "DPP:K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;",
.expect_fail = true
};
struct dpp_test_info no_terminator = {
.uri = "DPP:K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=",
.expect_fail = true
};
struct dpp_test_info bad_key = {
.uri = "DPP:K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0;;",
.expect_fail = true
};
struct dpp_test_info unexpected_id = {
.uri = "DPP:Z:somedata;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;;",
.expect_fail = true
};
struct dpp_test_info bad_channels[] = {
{
.uri = "DPP:C:;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;;",
.expect_fail = true
},
{
.uri = "DPP:C:81;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;;",
.expect_fail = true
},
{
.uri = "DPP:C:81/;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;;",
.expect_fail = true
},
{
.uri = "DPP:C:81/1,;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;;",
.expect_fail = true
},
{
.uri = "DPP:C:81/1,81/;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;;",
.expect_fail = true
},
{
.uri = "DPP:C:81/1,/;K:MDkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDIgADURzxmttZoIRIPWGoQMV00XHWCAQIhXruVWOz0NjlkIA=;;",
.expect_fail = true
},
};
static bool verify_info(const struct dpp_uri_info *parsed,
const struct dpp_test_info *result)
{
const struct dpp_uri_info *expected = &result->result;
uint32_t i;
assert(!memcmp(parsed->mac, expected->mac, 6));
assert(parsed->version == expected->version);
assert(parsed->boot_public != NULL);
for (i = 0; result->expected_freqs[i]; i++)
assert(scan_freq_set_contains(parsed->freqs,
result->expected_freqs[i]));
return true;
}
static void test_uri_parse(const void *data)
{
const struct dpp_test_info *test_info = data;
struct dpp_uri_info *info;
info = dpp_parse_uri(test_info->uri);
if (test_info->expect_fail) {
assert(info == NULL);
return;
}
assert(verify_info(info, test_info));
dpp_free_uri_info(info);
}
static void test_bad_channels(const void *data)
{
unsigned int i;
for (i = 0; i < L_ARRAY_SIZE(bad_channels); i++)
test_uri_parse(&bad_channels[i]);
}
unit: make test-dpp key derivation test more extendable Use a new structure to hold key values so they can be changed for different test vectors while using the same test function.
2023-10-26 22:26:50 +02:00
struct dpp_test_vector {
/* Initiator values */
const char *i_proto_public;
const char *i_proto_private;
const char *i_boot_public;
const char *i_boot_private;
const char *i_nonce;
const char *i_auth;
const char *i_asn1;
/* Responder values */
const char *r_proto_public;
const char *r_proto_private;
const char *r_boot_public;
const char *r_boot_private;
const char *r_nonce;
const char *r_auth;
const char *r_asn1;
const char *k1;
const char *k2;
const char *ke;
const char *mx;
const char *nx;
unit: add DPP test for mutual authentication
2023-10-26 22:26:51 +02:00
const char *lx;
};
/*
* B.1 Test Vectors for DPP Authentication Using P-256 for
* Mutual Authentication
*/
static struct dpp_test_vector mutual_p256 = {
.i_proto_public = "50a532ae2a07207276418d2fa630295d45569be425aa634f02014d00a7d1f61a"
"e14f35a5a858bccad90d126c46594c49ef82655e78888e15a32d916ac2172491",
.i_proto_private = "a87de9afbb406c96e5f79a3df895ecac3ad406f95da66314c8cb3165e0c61783",
/*
* The spec uses a 31 octet Y value, a zero byte was prepended to the
* Y value here otherwise the point cannot be created
*/
.i_boot_public = "88b37ed91938b5197097808a6244847617892046d93b9501afd48fa0f148dfde"
"00f73b6991287884a9c9a33f8e0691f14d44b59811e9d8242d010270b0d33ec0",
.i_boot_private = "15b2a83c5a0a38b61f2aa8200ee4994b8afdc01c58507d10d0a38f7eedf051bb",
.i_nonce = "13f4602a16daeb69712263b9c46cba31",
.i_auth = "d34944bb4b1f05caebda762c6e4ae034c819ec2f62a57dcfade2473876e007b2",
.i_asn1 = "3039301306072a8648ce3d020106082a8648ce3d0301070322000288b37ed919"
"38b5197097808a6244847617892046d93b9501afd48fa0f148dfde",
.r_proto_public = "5e3fb3576884887f17c3203d8a3a6c2fac722ef0e2201b61ac73bc655c709a90"
"2d4b030669fb9eff8b0a79fa7c1a172ac2a92c626256963f9274dc90682c81e5",
.r_proto_private = "f798ed2e19286f6a6efe210b1863badb99af2a14b497634dbfd2a97394fb5aa5",
.r_boot_public = "09c585a91b4df9fd25a045201885c39cc5cfae397ddaeda957dec57fa0e3503f"
"52bf05968198a2f92883e96a386d767579883302dbf292105c90a43694c2fd5c",
.r_boot_private = "54ce181a98525f217216f59b245f60e9df30ac7f6b26c939418cfc3c42d1afa0",
.r_nonce = "3d0cfb011ca916d796f7029ff0b43393",
.r_auth = "a725abe6dc66ccf3aa3d6d61a19932fcbb0799ed09ff78e5bc6d4ea5ef8e8670",
.r_asn1 = "3039301306072a8648ce3d020106082a8648ce3d0301070322000209c585a91b"
"4df9fd25a045201885c39cc5cfae397ddaeda957dec57fa0e3503f",
.k1 = "3d832a02ed6d7fc1dc96d2eceab738cf01c0028eb256be33d5a21a720bfcf949",
.k2 = "ca08bdeeef838ddf897a5f01f20bb93dc5a895cb86788ca8c00a7664899bc310",
.ke = "b6db65526c9a0174c3bed56f7e614f3a656233c078693249ac3516425127e5d5",
.mx = "dde2878117d69745be4f916a2dd14269d783d1d788c603bb8746beabbd1dbbbc",
.nx = "92118478b75c21c2c59340c842b5bce560a535f60bc37a75fe390d738c58d8e8",
.lx = "fb737234c973cc3a36e64e5170a32f12089d198c73c2fd85a53d0b282530fd02"
unit: make test-dpp key derivation test more extendable Use a new structure to hold key values so they can be changed for different test vectors while using the same test function.
2023-10-26 22:26:50 +02:00
};
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
/*
* B.2 Test Vectors for DPP Authentication Using P-256 for
* Responder-only Authentication
*/
unit: make test-dpp key derivation test more extendable Use a new structure to hold key values so they can be changed for different test vectors while using the same test function.
2023-10-26 22:26:50 +02:00
static struct dpp_test_vector responder_only_p256 = {
.i_proto_public = "50a532ae2a07207276418d2fa630295d45569be425aa634f02014d00a7d1f61a"
"e14f35a5a858bccad90d126c46594c49ef82655e78888e15a32d916ac2172491",
.i_nonce = "13f4602a16daeb69712263b9c46cba31",
.i_auth = "787d1189b526448d2901e7f6c22775ce514fce52fc886c1e924f2fbb8d97b210",
.r_proto_public = "5e3fb3576884887f17c3203d8a3a6c2fac722ef0e2201b61ac73bc655c709a90"
"2d4b030669fb9eff8b0a79fa7c1a172ac2a92c626256963f9274dc90682c81e5",
.r_proto_private = "f798ed2e19286f6a6efe210b1863badb99af2a14b497634dbfd2a97394fb5aa5",
.r_boot_public = "09c585a91b4df9fd25a045201885c39cc5cfae397ddaeda957dec57fa0e3503f"
"52bf05968198a2f92883e96a386d767579883302dbf292105c90a43694c2fd5c",
.r_boot_private = "54ce181a98525f217216f59b245f60e9df30ac7f6b26c939418cfc3c42d1afa0",
.r_nonce = "3d0cfb011ca916d796f7029ff0b43393",
.r_auth = "43509ef7137d8c2fbe66d802ae09dedd94d41b8cbfafb4954782014ff4a3f91c",
.r_asn1 = "3039301306072a8648ce3d020106082a8648ce3d0301070322000209c585a91b"
"4df9fd25a045201885c39cc5cfae397ddaeda957dec57fa0e3503f",
.k1 = "3d832a02ed6d7fc1dc96d2eceab738cf01c0028eb256be33d5a21a720bfcf949",
.k2 = "ca08bdeeef838ddf897a5f01f20bb93dc5a895cb86788ca8c00a7664899bc310",
.ke = "c8882a8ab30c878467822534138c704ede0ab1e873fe03b601a7908463fec87a",
.mx = "dde2878117d69745be4f916a2dd14269d783d1d788c603bb8746beabbd1dbbbc",
.nx = "92118478b75c21c2c59340c842b5bce560a535f60bc37a75fe390d738c58d8e8",
};
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
#define HEX2BUF(s, buf, _len) { \
unit: correct memcpy overrun in test-dpp The memcpy in HEX2BUF was copying the length of the buffer that was passed in, not the actual length of the converted hexstring. This test was segfaulting in the Alpine CI which uses clang/musl.
2023-10-26 00:42:24 +02:00
size_t _len_out; \
unsigned char *_tmp = l_util_from_hexstring(s, &_len_out); \
memcpy(buf, _tmp, _len_out); \
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
l_free(_tmp); \
}
#define CHECK_FROM_STR(str, bytes, __len) \
({ \
uint64_t __tmp[L_ECC_MAX_DIGITS]; \
HEX2BUF(str, __tmp, __len); \
assert(!memcmp(bytes, __tmp, __len)); \
})
static void test_key_derivation(const void *data)
{
unit: make test-dpp key derivation test more extendable Use a new structure to hold key values so they can be changed for different test vectors while using the same test function.
2023-10-26 22:26:50 +02:00
const struct dpp_test_vector *vector = data;
unit: add to test-dpp to expose ASN1 point conversion bug Add a test to show the incorrect ASN1 conversion to and from points. This was due to the check if Y is odd/even being inverted which incorrectly prefixes the X coordinate with the wrong byte. The test itself was not fully correct because it was using compliant points rather than full points, and the spec contains the entire Y coordinate so the full point should be used. This patch also adds ASN1 conversions to validate that dpp_point_from_asn1 and dpp_point_to_asn1 work properly.
2023-10-10 15:57:01 +02:00
uint64_t tmp[L_ECC_MAX_DIGITS * 2];
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
const struct l_ecc_curve *curve = l_ecc_curve_from_ike_group(19);
unit: add DPP test for mutual authentication
2023-10-26 22:26:51 +02:00
_auto_(l_ecc_point_free) struct l_ecc_point *i_boot_public = NULL;
_auto_(l_ecc_scalar_free) struct l_ecc_scalar *i_boot_private = NULL;
unit: fix memory leaks in test-dpp
2021-12-07 00:51:26 +01:00
_auto_(l_ecc_point_free) struct l_ecc_point *i_proto_public = NULL;
_auto_(l_ecc_point_free) struct l_ecc_point *r_boot_public = NULL;
_auto_(l_ecc_scalar_free) struct l_ecc_scalar *r_boot_private = NULL;
_auto_(l_ecc_scalar_free) struct l_ecc_scalar *r_proto_private = NULL;
_auto_(l_ecc_point_free) struct l_ecc_point *r_proto_public = NULL;
_auto_(l_ecc_scalar_free) struct l_ecc_scalar *m = NULL;
_auto_(l_ecc_scalar_free) struct l_ecc_scalar *n = NULL;
unit: add DPP test for mutual authentication
2023-10-26 22:26:51 +02:00
_auto_(l_ecc_point_free) struct l_ecc_point *l = NULL;
unit: add to test-dpp to expose ASN1 point conversion bug Add a test to show the incorrect ASN1 conversion to and from points. This was due to the check if Y is odd/even being inverted which incorrectly prefixes the X coordinate with the wrong byte. The test itself was not fully correct because it was using compliant points rather than full points, and the spec contains the entire Y coordinate so the full point should be used. This patch also adds ASN1 conversions to validate that dpp_point_from_asn1 and dpp_point_to_asn1 work properly.
2023-10-10 15:57:01 +02:00
_auto_(l_ecc_point_free) struct l_ecc_point *from_asn1 = NULL;
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
uint64_t k1[L_ECC_MAX_DIGITS];
uint64_t k2[L_ECC_MAX_DIGITS];
uint64_t ke[L_ECC_MAX_DIGITS];
uint8_t i_nonce[16];
uint8_t r_nonce[16];
uint64_t r_auth[L_ECC_MAX_DIGITS];
uint64_t i_auth[L_ECC_MAX_DIGITS];
unit: add to test-dpp to expose ASN1 point conversion bug Add a test to show the incorrect ASN1 conversion to and from points. This was due to the check if Y is odd/even being inverted which incorrectly prefixes the X coordinate with the wrong byte. The test itself was not fully correct because it was using compliant points rather than full points, and the spec contains the entire Y coordinate so the full point should be used. This patch also adds ASN1 conversions to validate that dpp_point_from_asn1 and dpp_point_to_asn1 work properly.
2023-10-10 15:57:01 +02:00
_auto_(l_free) uint8_t *asn1 = NULL;
size_t asn1_len;
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
unit: make test-dpp key derivation test more extendable Use a new structure to hold key values so they can be changed for different test vectors while using the same test function.
2023-10-26 22:26:50 +02:00
HEX2BUF(vector->i_proto_public, tmp, 64);
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
i_proto_public = l_ecc_point_from_data(curve,
unit: add to test-dpp to expose ASN1 point conversion bug Add a test to show the incorrect ASN1 conversion to and from points. This was due to the check if Y is odd/even being inverted which incorrectly prefixes the X coordinate with the wrong byte. The test itself was not fully correct because it was using compliant points rather than full points, and the spec contains the entire Y coordinate so the full point should be used. This patch also adds ASN1 conversions to validate that dpp_point_from_asn1 and dpp_point_to_asn1 work properly.
2023-10-10 15:57:01 +02:00
L_ECC_POINT_TYPE_FULL,
tmp, 64);
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
assert(i_proto_public);
unit: make test-dpp key derivation test more extendable Use a new structure to hold key values so they can be changed for different test vectors while using the same test function.
2023-10-26 22:26:50 +02:00
HEX2BUF(vector->r_boot_public, tmp, 64);
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
r_boot_public = l_ecc_point_from_data(curve,
unit: add to test-dpp to expose ASN1 point conversion bug Add a test to show the incorrect ASN1 conversion to and from points. This was due to the check if Y is odd/even being inverted which incorrectly prefixes the X coordinate with the wrong byte. The test itself was not fully correct because it was using compliant points rather than full points, and the spec contains the entire Y coordinate so the full point should be used. This patch also adds ASN1 conversions to validate that dpp_point_from_asn1 and dpp_point_to_asn1 work properly.
2023-10-10 15:57:01 +02:00
L_ECC_POINT_TYPE_FULL,
tmp, 64);
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
assert(r_boot_public);
unit: add DPP test for mutual authentication
2023-10-26 22:26:51 +02:00
if (vector->i_boot_public) {
HEX2BUF(vector->i_boot_public, tmp, 64);
i_boot_public = l_ecc_point_from_data(curve,
L_ECC_POINT_TYPE_FULL,
tmp, 64);
assert(i_boot_public);
}
if (vector->i_boot_private) {
HEX2BUF(vector->i_boot_private, tmp, 32);
i_boot_private = l_ecc_scalar_new(curve, tmp, 32);
assert(i_boot_private);
}
unit: make test-dpp key derivation test more extendable Use a new structure to hold key values so they can be changed for different test vectors while using the same test function.
2023-10-26 22:26:50 +02:00
HEX2BUF(vector->r_asn1, tmp, sizeof(tmp));
unit: add to test-dpp to expose ASN1 point conversion bug Add a test to show the incorrect ASN1 conversion to and from points. This was due to the check if Y is odd/even being inverted which incorrectly prefixes the X coordinate with the wrong byte. The test itself was not fully correct because it was using compliant points rather than full points, and the spec contains the entire Y coordinate so the full point should be used. This patch also adds ASN1 conversions to validate that dpp_point_from_asn1 and dpp_point_to_asn1 work properly.
2023-10-10 15:57:01 +02:00
asn1 = dpp_point_to_asn1(r_boot_public, &asn1_len);
from_asn1 = dpp_point_from_asn1(asn1, asn1_len);
assert(l_ecc_points_are_equal(from_asn1, r_boot_public));
assert(asn1_len == 59);
assert(memcmp(tmp, asn1, asn1_len) == 0);
unit: add DPP test for mutual authentication
2023-10-26 22:26:51 +02:00
if (vector->i_asn1) {
HEX2BUF(vector->i_asn1, tmp, sizeof(tmp));
asn1 = dpp_point_to_asn1(i_boot_public, &asn1_len);
from_asn1 = dpp_point_from_asn1(asn1, asn1_len);
assert(l_ecc_points_are_equal(from_asn1, i_boot_public));
assert(asn1_len == 59);
assert(memcmp(tmp, asn1, asn1_len) == 0);
}
unit: make test-dpp key derivation test more extendable Use a new structure to hold key values so they can be changed for different test vectors while using the same test function.
2023-10-26 22:26:50 +02:00
HEX2BUF(vector->r_proto_public, tmp, 64);
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
r_proto_public = l_ecc_point_from_data(curve,
unit: add to test-dpp to expose ASN1 point conversion bug Add a test to show the incorrect ASN1 conversion to and from points. This was due to the check if Y is odd/even being inverted which incorrectly prefixes the X coordinate with the wrong byte. The test itself was not fully correct because it was using compliant points rather than full points, and the spec contains the entire Y coordinate so the full point should be used. This patch also adds ASN1 conversions to validate that dpp_point_from_asn1 and dpp_point_to_asn1 work properly.
2023-10-10 15:57:01 +02:00
L_ECC_POINT_TYPE_FULL,
tmp, 64);
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
assert(r_proto_public);
unit: make test-dpp key derivation test more extendable Use a new structure to hold key values so they can be changed for different test vectors while using the same test function.
2023-10-26 22:26:50 +02:00
HEX2BUF(vector->r_boot_private, tmp, 32);
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
r_boot_private = l_ecc_scalar_new(curve, tmp, 32);
assert(r_boot_private);
unit: make test-dpp key derivation test more extendable Use a new structure to hold key values so they can be changed for different test vectors while using the same test function.
2023-10-26 22:26:50 +02:00
HEX2BUF(vector->r_proto_private, tmp, 32);
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
r_proto_private = l_ecc_scalar_new(curve, tmp, 32);
assert(r_proto_private);
m = dpp_derive_k1(i_proto_public, r_boot_private, k1);
assert(m);
unit: make test-dpp key derivation test more extendable Use a new structure to hold key values so they can be changed for different test vectors while using the same test function.
2023-10-26 22:26:50 +02:00
CHECK_FROM_STR(vector->k1, k1, 32);
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
l_ecc_scalar_get_data(m, tmp, sizeof(tmp));
unit: make test-dpp key derivation test more extendable Use a new structure to hold key values so they can be changed for different test vectors while using the same test function.
2023-10-26 22:26:50 +02:00
CHECK_FROM_STR(vector->mx, tmp, 32);
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
n = dpp_derive_k2(i_proto_public, r_proto_private, k2);
assert(n);
unit: make test-dpp key derivation test more extendable Use a new structure to hold key values so they can be changed for different test vectors while using the same test function.
2023-10-26 22:26:50 +02:00
CHECK_FROM_STR(vector->k2, k2, 32);
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
l_ecc_scalar_get_data(n, tmp, sizeof(tmp));
unit: make test-dpp key derivation test more extendable Use a new structure to hold key values so they can be changed for different test vectors while using the same test function.
2023-10-26 22:26:50 +02:00
CHECK_FROM_STR(vector->nx, tmp, 32);
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
unit: add DPP test for mutual authentication
2023-10-26 22:26:51 +02:00
if (vector->lx) {
/* Check initiator derivation */
l = dpp_derive_li(r_boot_public, r_proto_public,
i_boot_private);
assert(l);
l_ecc_point_get_x(l, tmp, sizeof(tmp));
CHECK_FROM_STR(vector->lx, tmp, 32);
l_ecc_point_free(l);
l = NULL;
/* Check responder derivation */
l = dpp_derive_lr(r_boot_private, r_proto_private,
i_boot_public);
assert(l);
l_ecc_point_get_x(l, tmp, sizeof(tmp));
CHECK_FROM_STR(vector->lx, tmp, 32);
}
unit: make test-dpp key derivation test more extendable Use a new structure to hold key values so they can be changed for different test vectors while using the same test function.
2023-10-26 22:26:50 +02:00
HEX2BUF(vector->i_nonce, i_nonce, 16);
HEX2BUF(vector->r_nonce, r_nonce, 16);
unit: add DPP test for mutual authentication
2023-10-26 22:26:51 +02:00
dpp_derive_ke(i_nonce, r_nonce, m, n, l, ke);
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
unit: make test-dpp key derivation test more extendable Use a new structure to hold key values so they can be changed for different test vectors while using the same test function.
2023-10-26 22:26:50 +02:00
CHECK_FROM_STR(vector->ke, ke, 32);
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
dpp_derive_r_auth(i_nonce, r_nonce, 16, i_proto_public, r_proto_public,
unit: add DPP test for mutual authentication
2023-10-26 22:26:51 +02:00
i_boot_public, r_boot_public, r_auth);
unit: make test-dpp key derivation test more extendable Use a new structure to hold key values so they can be changed for different test vectors while using the same test function.
2023-10-26 22:26:50 +02:00
CHECK_FROM_STR(vector->r_auth, r_auth, 32);
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
dpp_derive_i_auth(r_nonce, i_nonce, 16, r_proto_public, i_proto_public,
unit: add DPP test for mutual authentication
2023-10-26 22:26:51 +02:00
r_boot_public, i_boot_public, i_auth);
unit: make test-dpp key derivation test more extendable Use a new structure to hold key values so they can be changed for different test vectors while using the same test function.
2023-10-26 22:26:50 +02:00
CHECK_FROM_STR(vector->i_auth, i_auth, 32);
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
}
unit: add PKEX DPP tests
2023-10-26 22:26:52 +02:00
struct dpp_pkex_test_vector {
uint8_t mac_i[6];
uint8_t mac_r[6];
const char *identifier;
const char *key;
const char *i_boot_public;
const char *i_boot_private;
const char *qix;
const char *r_boot_public;
const char *r_boot_private;
const char *qrx;
const char *mx;
const char *nx;
const char *k;
const char *j;
const char *ax;
const char *yx;
const char *xx;
const char *bx;
const char *lx;
const char *z;
const char *u;
const char *v;
};
/*
* Appendix D PKEX Test Vector for NIST p256
*/
static struct dpp_pkex_test_vector pkex_vector = {
.mac_i = { 0xac, 0x64, 0x91, 0xf4, 0x52, 0x07 },
.mac_r = { 0x6e, 0x5e, 0xce, 0x6e, 0xf3, 0xdd },
.identifier = "joes_key",
.key = "thisisreallysecret",
.i_boot_public = "0ad58864754c812685ff3a52a573c1d72c72c4ebed98f3915622d4dfc84a438d"
"7e81429aac49ddec75ad6521db9c74074e30b5eb2ba53693c9341b79be14e101",
.i_boot_private = "5941b51acfc702cdc1c347264beb2920db88eb1a0bf03a211868b1632233c269",
.qix = "2867c4e080980dbad5099a8f821e8729679c5c714888c0bd9c7e8e4048c5fa5e",
.r_boot_public = "977b7fa39779a81429febb12e1dc5e20a7e017c4bc7437090e57c966a2b0e8a3"
"9d2b62733947639763f64c7b6708c1e0857becb7e24fc195248b5b06036cf792",
.r_boot_private = "2ae8956293f49986b6d0b8169a86805d9232babb5f6813fdfe96f19d59536c60",
.qrx = "134af1c41c8e7d974c647cc2bfca30b036966959f9044e90f673d756706e624c",
.mx = "bcca8e23e5c05032ae6051ca6392f7c4a4b4f9fe13e8126132d070e552848176",
.nx = "0a91e0728809bb8191ea36d0a1d5602bf36ab6708fbfd063e2511e533b534020",
.k = "7415e1c68611f0443cc345d136984e488c6a26d3d5482fa67e9841a03a87c78f",
.j = "31c1b9ab31d9c2f278b35b5c29d180dfeaf76d585ede9c0dd91cb66149db572e",
.ax = "0ad58864754c812685ff3a52a573c1d72c72c4ebed98f3915622d4dfc84a438d",
.yx = "a9972a94f143740df31c7a61124d01a4e949d0fdcede61369f4c6b097aeb18b5",
.xx = "740ab9f0c173507b0081b475b275de6a3060cf434b6a65f0b0144a1dbf913310",
.bx = "977b7fa39779a81429febb12e1dc5e20a7e017c4bc7437090e57c966a2b0e8a3",
.lx = "bc5f3128b0b997079a23ead63cf502ef4f7526602269620377b79bce20e03d44",
.z = "5271dee915cf7b1908747d8edb8394442411c5183ee38b79ebef399c08738e0b",
.u = "598c3d8dcccea2d43259068d542a907442f07e8cbcfb3fb49faac12eb2fee5b6",
.v = "b2833ce21ab4e42c082111a5dd232334e48019f66b2e274f521fe2f7dfa11999",
};
static void test_pkex_key_derivation(const void *user_data)
{
const struct dpp_pkex_test_vector *vector = user_data;
const struct l_ecc_curve *curve = l_ecc_curve_from_ike_group(19);
uint64_t tmp[L_ECC_MAX_DIGITS * 2];
_auto_(l_ecc_point_free) struct l_ecc_point *qi = NULL;
_auto_(l_ecc_point_free) struct l_ecc_point *qr = NULL;
_auto_(l_ecc_point_free) struct l_ecc_point *n = NULL;
_auto_(l_ecc_point_free) struct l_ecc_point *m = NULL;
_auto_(l_ecc_point_free) struct l_ecc_point *j = NULL;
_auto_(l_ecc_point_free) struct l_ecc_point *k = NULL;
_auto_(l_ecc_point_free) struct l_ecc_point *a = NULL;
_auto_(l_ecc_point_free) struct l_ecc_point *y = NULL;
_auto_(l_ecc_point_free) struct l_ecc_point *x = NULL;
_auto_(l_ecc_point_free) struct l_ecc_point *b = NULL;
_auto_(l_ecc_point_free) struct l_ecc_point *l = NULL;
size_t len;
qi = dpp_derive_qi(curve, vector->key, vector->identifier,
vector->mac_i);
l_ecc_point_get_x(qi, tmp, sizeof(tmp));
CHECK_FROM_STR(vector->qix, tmp, 32);
qr = dpp_derive_qr(curve, vector->key, vector->identifier,
vector->mac_r);
l_ecc_point_get_x(qr, tmp, sizeof(tmp));
CHECK_FROM_STR(vector->qrx, tmp, 32);
HEX2BUF(vector->nx, tmp, 32);
n = l_ecc_point_from_data(curve, L_ECC_POINT_TYPE_COMPLIANT, tmp, 32);
assert(n);
HEX2BUF(vector->mx, tmp, 32);
m = l_ecc_point_from_data(curve, L_ECC_POINT_TYPE_COMPLIANT, tmp, 32);
assert(m);
HEX2BUF(vector->k, tmp, 32);
k = l_ecc_point_from_data(curve, L_ECC_POINT_TYPE_COMPLIANT, tmp, 32);
assert(k);
dpp_derive_z(vector->mac_i, vector->mac_r, n, m, k, vector->key,
vector->identifier, tmp, &len);
CHECK_FROM_STR(vector->z, tmp, 32);
HEX2BUF(vector->j, tmp, 32);
j = l_ecc_point_from_data(curve, L_ECC_POINT_TYPE_COMPLIANT, tmp, 32);
assert(j);
HEX2BUF(vector->ax, tmp, 32);
a = l_ecc_point_from_data(curve, L_ECC_POINT_TYPE_COMPLIANT, tmp, 32);
assert(a);
HEX2BUF(vector->yx, tmp, 32);
y = l_ecc_point_from_data(curve, L_ECC_POINT_TYPE_COMPLIANT, tmp, 32);
assert(y);
HEX2BUF(vector->xx, tmp, 32);
x = l_ecc_point_from_data(curve, L_ECC_POINT_TYPE_COMPLIANT, tmp, 32);
assert(x);
dpp_derive_u(j, vector->mac_i, a, y, x, tmp, &len);
CHECK_FROM_STR(vector->u, tmp, 32);
HEX2BUF(vector->bx, tmp, 32);
b = l_ecc_point_from_data(curve, L_ECC_POINT_TYPE_COMPLIANT, tmp, 32);
assert(b);
HEX2BUF(vector->lx, tmp, 32);
l = l_ecc_point_from_data(curve, L_ECC_POINT_TYPE_COMPLIANT, tmp, 32);
assert(l);
dpp_derive_v(l, vector->mac_r, b, x, y, tmp, &len);
CHECK_FROM_STR(vector->v, tmp, 32);
}
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
int main(int argc, char *argv[])
{
l_test_init(&argc, &argv);
unit: add checksum/random check for test-dpp
2022-01-10 23:05:35 +01:00
if (l_checksum_is_supported(L_CHECKSUM_SHA256, true) &&
unit: add DPP test for mutual authentication
2023-10-26 22:26:51 +02:00
l_getrandom_is_supported()) {
l_test_add("DPP test responder-only key derivation",
test_key_derivation,
unit: make test-dpp key derivation test more extendable Use a new structure to hold key values so they can be changed for different test vectors while using the same test function.
2023-10-26 22:26:50 +02:00
&responder_only_p256);
unit: add DPP test for mutual authentication
2023-10-26 22:26:51 +02:00
l_test_add("DPP test mutual key derivation",
test_key_derivation,
&mutual_p256);
unit: add PKEX DPP tests
2023-10-26 22:26:52 +02:00
l_test_add("DPP test PKEX key derivation",
test_pkex_key_derivation,
&pkex_vector);
unit: add DPP test for mutual authentication
2023-10-26 22:26:51 +02:00
}
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
unit: add DPP unit tests for URI parsing
2022-02-22 23:28:40 +01:00
l_test_add("DPP URI parse", test_uri_parse, &all_values);
l_test_add("DPP URI no type", test_uri_parse, &no_type);
l_test_add("DPP URI empty", test_uri_parse, &empty);
l_test_add("DPP URI no key", test_uri_parse, &no_key);
l_test_add("DPP URI data after terminator", test_uri_parse,
&data_after_terminator);
l_test_add("DPP URI single terminator", test_uri_parse,
&single_terminator);
l_test_add("DPP URI no terminator", test_uri_parse,
&no_terminator);
l_test_add("DPP URI bad key", test_uri_parse, &bad_key);
l_test_add("DPP URI bad channels", test_bad_channels, &bad_channels);
l_test_add("DPP URI unexpected ID", test_uri_parse, &unexpected_id);
unit: add unit test for DPP crypto operations
2021-12-06 22:03:56 +01:00
return l_test_run();
}
Copy Permalink