ecdhtest.c 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410
  1. /* crypto/ecdh/ecdhtest.c */
  2. /* ====================================================================
  3. * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
  4. *
  5. * The Elliptic Curve Public-Key Crypto Library (ECC Code) included
  6. * herein is developed by SUN MICROSYSTEMS, INC., and is contributed
  7. * to the OpenSSL project.
  8. *
  9. * The ECC Code is licensed pursuant to the OpenSSL open source
  10. * license provided below.
  11. *
  12. * The ECDH software is originally written by Douglas Stebila of
  13. * Sun Microsystems Laboratories.
  14. *
  15. */
  16. /* ====================================================================
  17. * Copyright (c) 1998-2003 The OpenSSL Project. All rights reserved.
  18. *
  19. * Redistribution and use in source and binary forms, with or without
  20. * modification, are permitted provided that the following conditions
  21. * are met:
  22. *
  23. * 1. Redistributions of source code must retain the above copyright
  24. * notice, this list of conditions and the following disclaimer.
  25. *
  26. * 2. Redistributions in binary form must reproduce the above copyright
  27. * notice, this list of conditions and the following disclaimer in
  28. * the documentation and/or other materials provided with the
  29. * distribution.
  30. *
  31. * 3. All advertising materials mentioning features or use of this
  32. * software must display the following acknowledgment:
  33. * "This product includes software developed by the OpenSSL Project
  34. * for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
  35. *
  36. * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
  37. * endorse or promote products derived from this software without
  38. * prior written permission. For written permission, please contact
  39. * [email protected].
  40. *
  41. * 5. Products derived from this software may not be called "OpenSSL"
  42. * nor may "OpenSSL" appear in their names without prior written
  43. * permission of the OpenSSL Project.
  44. *
  45. * 6. Redistributions of any form whatsoever must retain the following
  46. * acknowledgment:
  47. * "This product includes software developed by the OpenSSL Project
  48. * for use in the OpenSSL Toolkit (http://www.openssl.org/)"
  49. *
  50. * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
  51. * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  52. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  53. * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
  54. * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
  55. * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
  56. * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  57. * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  58. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  59. * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  60. * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  61. * OF THE POSSIBILITY OF SUCH DAMAGE.
  62. * ====================================================================
  63. *
  64. * This product includes cryptographic software written by Eric Young
  65. * ([email protected]). This product includes software written by Tim
  66. * Hudson ([email protected]).
  67. *
  68. */
  69. #include <stdio.h>
  70. #include <stdlib.h>
  71. #include <string.h>
  72. #include "../e_os.h"
  73. #include <openssl/opensslconf.h> /* for OPENSSL_NO_ECDH */
  74. #include <openssl/crypto.h>
  75. #include <openssl/bio.h>
  76. #include <openssl/bn.h>
  77. #include <openssl/objects.h>
  78. #include <openssl/rand.h>
  79. #include <openssl/sha.h>
  80. #include <openssl/err.h>
  81. #ifdef OPENSSL_NO_ECDH
  82. int main(int argc, char *argv[])
  83. {
  84. printf("No ECDH support\n");
  85. return (0);
  86. }
  87. #else
  88. # include <openssl/ec.h>
  89. # include <openssl/ecdh.h>
  90. # ifdef OPENSSL_SYS_WIN16
  91. # define MS_CALLBACK _far _loadds
  92. # else
  93. # define MS_CALLBACK
  94. # endif
  95. # if 0
  96. static void MS_CALLBACK cb(int p, int n, void *arg);
  97. # endif
  98. static const char rnd_seed[] =
  99. "string to make the random number generator think it has entropy";
  100. static const int KDF1_SHA1_len = 20;
  101. static void *KDF1_SHA1(const void *in, size_t inlen, void *out,
  102. size_t *outlen)
  103. {
  104. # ifndef OPENSSL_NO_SHA
  105. if (*outlen < SHA_DIGEST_LENGTH)
  106. return NULL;
  107. else
  108. *outlen = SHA_DIGEST_LENGTH;
  109. return SHA1(in, inlen, out);
  110. # else
  111. return NULL;
  112. # endif
  113. }
  114. static int test_ecdh_curve(int nid, const char *text, BN_CTX *ctx, BIO *out)
  115. {
  116. EC_KEY *a = NULL;
  117. EC_KEY *b = NULL;
  118. BIGNUM *x_a = NULL, *y_a = NULL, *x_b = NULL, *y_b = NULL;
  119. char buf[12];
  120. unsigned char *abuf = NULL, *bbuf = NULL;
  121. int i, alen, blen, aout, bout, ret = 0;
  122. const EC_GROUP *group;
  123. a = EC_KEY_new_by_curve_name(nid);
  124. b = EC_KEY_new_by_curve_name(nid);
  125. if (a == NULL || b == NULL)
  126. goto err;
  127. group = EC_KEY_get0_group(a);
  128. if ((x_a = BN_new()) == NULL)
  129. goto err;
  130. if ((y_a = BN_new()) == NULL)
  131. goto err;
  132. if ((x_b = BN_new()) == NULL)
  133. goto err;
  134. if ((y_b = BN_new()) == NULL)
  135. goto err;
  136. BIO_puts(out, "Testing key generation with ");
  137. BIO_puts(out, text);
  138. # ifdef NOISY
  139. BIO_puts(out, "\n");
  140. # else
  141. (void)BIO_flush(out);
  142. # endif
  143. if (!EC_KEY_generate_key(a))
  144. goto err;
  145. if (EC_METHOD_get_field_type(EC_GROUP_method_of(group)) ==
  146. NID_X9_62_prime_field) {
  147. if (!EC_POINT_get_affine_coordinates_GFp
  148. (group, EC_KEY_get0_public_key(a), x_a, y_a, ctx))
  149. goto err;
  150. }
  151. # ifndef OPENSSL_NO_EC2M
  152. else {
  153. if (!EC_POINT_get_affine_coordinates_GF2m(group,
  154. EC_KEY_get0_public_key(a),
  155. x_a, y_a, ctx))
  156. goto err;
  157. }
  158. # endif
  159. # ifdef NOISY
  160. BIO_puts(out, " pri 1=");
  161. BN_print(out, a->priv_key);
  162. BIO_puts(out, "\n pub 1=");
  163. BN_print(out, x_a);
  164. BIO_puts(out, ",");
  165. BN_print(out, y_a);
  166. BIO_puts(out, "\n");
  167. # else
  168. BIO_printf(out, " .");
  169. (void)BIO_flush(out);
  170. # endif
  171. if (!EC_KEY_generate_key(b))
  172. goto err;
  173. if (EC_METHOD_get_field_type(EC_GROUP_method_of(group)) ==
  174. NID_X9_62_prime_field) {
  175. if (!EC_POINT_get_affine_coordinates_GFp
  176. (group, EC_KEY_get0_public_key(b), x_b, y_b, ctx))
  177. goto err;
  178. }
  179. # ifndef OPENSSL_NO_EC2M
  180. else {
  181. if (!EC_POINT_get_affine_coordinates_GF2m(group,
  182. EC_KEY_get0_public_key(b),
  183. x_b, y_b, ctx))
  184. goto err;
  185. }
  186. # endif
  187. # ifdef NOISY
  188. BIO_puts(out, " pri 2=");
  189. BN_print(out, b->priv_key);
  190. BIO_puts(out, "\n pub 2=");
  191. BN_print(out, x_b);
  192. BIO_puts(out, ",");
  193. BN_print(out, y_b);
  194. BIO_puts(out, "\n");
  195. # else
  196. BIO_printf(out, ".");
  197. (void)BIO_flush(out);
  198. # endif
  199. alen = KDF1_SHA1_len;
  200. abuf = (unsigned char *)OPENSSL_malloc(alen);
  201. aout =
  202. ECDH_compute_key(abuf, alen, EC_KEY_get0_public_key(b), a, KDF1_SHA1);
  203. # ifdef NOISY
  204. BIO_puts(out, " key1 =");
  205. for (i = 0; i < aout; i++) {
  206. sprintf(buf, "%02X", abuf[i]);
  207. BIO_puts(out, buf);
  208. }
  209. BIO_puts(out, "\n");
  210. # else
  211. BIO_printf(out, ".");
  212. (void)BIO_flush(out);
  213. # endif
  214. blen = KDF1_SHA1_len;
  215. bbuf = (unsigned char *)OPENSSL_malloc(blen);
  216. bout =
  217. ECDH_compute_key(bbuf, blen, EC_KEY_get0_public_key(a), b, KDF1_SHA1);
  218. # ifdef NOISY
  219. BIO_puts(out, " key2 =");
  220. for (i = 0; i < bout; i++) {
  221. sprintf(buf, "%02X", bbuf[i]);
  222. BIO_puts(out, buf);
  223. }
  224. BIO_puts(out, "\n");
  225. # else
  226. BIO_printf(out, ".");
  227. (void)BIO_flush(out);
  228. # endif
  229. if ((aout < 4) || (bout != aout) || (memcmp(abuf, bbuf, aout) != 0)) {
  230. # ifndef NOISY
  231. BIO_printf(out, " failed\n\n");
  232. BIO_printf(out, "key a:\n");
  233. BIO_printf(out, "private key: ");
  234. BN_print(out, EC_KEY_get0_private_key(a));
  235. BIO_printf(out, "\n");
  236. BIO_printf(out, "public key (x,y): ");
  237. BN_print(out, x_a);
  238. BIO_printf(out, ",");
  239. BN_print(out, y_a);
  240. BIO_printf(out, "\nkey b:\n");
  241. BIO_printf(out, "private key: ");
  242. BN_print(out, EC_KEY_get0_private_key(b));
  243. BIO_printf(out, "\n");
  244. BIO_printf(out, "public key (x,y): ");
  245. BN_print(out, x_b);
  246. BIO_printf(out, ",");
  247. BN_print(out, y_b);
  248. BIO_printf(out, "\n");
  249. BIO_printf(out, "generated key a: ");
  250. for (i = 0; i < bout; i++) {
  251. sprintf(buf, "%02X", bbuf[i]);
  252. BIO_puts(out, buf);
  253. }
  254. BIO_printf(out, "\n");
  255. BIO_printf(out, "generated key b: ");
  256. for (i = 0; i < aout; i++) {
  257. sprintf(buf, "%02X", abuf[i]);
  258. BIO_puts(out, buf);
  259. }
  260. BIO_printf(out, "\n");
  261. # endif
  262. fprintf(stderr, "Error in ECDH routines\n");
  263. ret = 0;
  264. } else {
  265. # ifndef NOISY
  266. BIO_printf(out, " ok\n");
  267. # endif
  268. ret = 1;
  269. }
  270. err:
  271. ERR_print_errors_fp(stderr);
  272. if (abuf != NULL)
  273. OPENSSL_free(abuf);
  274. if (bbuf != NULL)
  275. OPENSSL_free(bbuf);
  276. if (x_a)
  277. BN_free(x_a);
  278. if (y_a)
  279. BN_free(y_a);
  280. if (x_b)
  281. BN_free(x_b);
  282. if (y_b)
  283. BN_free(y_b);
  284. if (b)
  285. EC_KEY_free(b);
  286. if (a)
  287. EC_KEY_free(a);
  288. return (ret);
  289. }
  290. int main(int argc, char *argv[])
  291. {
  292. BN_CTX *ctx = NULL;
  293. int ret = 1;
  294. BIO *out;
  295. CRYPTO_malloc_debug_init();
  296. CRYPTO_dbg_set_options(V_CRYPTO_MDEBUG_ALL);
  297. CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ON);
  298. # ifdef OPENSSL_SYS_WIN32
  299. CRYPTO_malloc_init();
  300. # endif
  301. RAND_seed(rnd_seed, sizeof rnd_seed);
  302. out = BIO_new(BIO_s_file());
  303. if (out == NULL)
  304. EXIT(1);
  305. BIO_set_fp(out, stdout, BIO_NOCLOSE);
  306. if ((ctx = BN_CTX_new()) == NULL)
  307. goto err;
  308. /* NIST PRIME CURVES TESTS */
  309. if (!test_ecdh_curve
  310. (NID_X9_62_prime192v1, "NIST Prime-Curve P-192", ctx, out))
  311. goto err;
  312. if (!test_ecdh_curve(NID_secp224r1, "NIST Prime-Curve P-224", ctx, out))
  313. goto err;
  314. if (!test_ecdh_curve
  315. (NID_X9_62_prime256v1, "NIST Prime-Curve P-256", ctx, out))
  316. goto err;
  317. if (!test_ecdh_curve(NID_secp384r1, "NIST Prime-Curve P-384", ctx, out))
  318. goto err;
  319. if (!test_ecdh_curve(NID_secp521r1, "NIST Prime-Curve P-521", ctx, out))
  320. goto err;
  321. # ifndef OPENSSL_NO_EC2M
  322. /* NIST BINARY CURVES TESTS */
  323. if (!test_ecdh_curve(NID_sect163k1, "NIST Binary-Curve K-163", ctx, out))
  324. goto err;
  325. if (!test_ecdh_curve(NID_sect163r2, "NIST Binary-Curve B-163", ctx, out))
  326. goto err;
  327. if (!test_ecdh_curve(NID_sect233k1, "NIST Binary-Curve K-233", ctx, out))
  328. goto err;
  329. if (!test_ecdh_curve(NID_sect233r1, "NIST Binary-Curve B-233", ctx, out))
  330. goto err;
  331. if (!test_ecdh_curve(NID_sect283k1, "NIST Binary-Curve K-283", ctx, out))
  332. goto err;
  333. if (!test_ecdh_curve(NID_sect283r1, "NIST Binary-Curve B-283", ctx, out))
  334. goto err;
  335. if (!test_ecdh_curve(NID_sect409k1, "NIST Binary-Curve K-409", ctx, out))
  336. goto err;
  337. if (!test_ecdh_curve(NID_sect409r1, "NIST Binary-Curve B-409", ctx, out))
  338. goto err;
  339. if (!test_ecdh_curve(NID_sect571k1, "NIST Binary-Curve K-571", ctx, out))
  340. goto err;
  341. if (!test_ecdh_curve(NID_sect571r1, "NIST Binary-Curve B-571", ctx, out))
  342. goto err;
  343. # endif
  344. ret = 0;
  345. err:
  346. ERR_print_errors_fp(stderr);
  347. if (ctx)
  348. BN_CTX_free(ctx);
  349. BIO_free(out);
  350. CRYPTO_cleanup_all_ex_data();
  351. ERR_remove_thread_state(NULL);
  352. CRYPTO_mem_leaks_fp(stderr);
  353. EXIT(ret);
  354. return (ret);
  355. }
  356. # if 0
  357. static void MS_CALLBACK cb(int p, int n, void *arg)
  358. {
  359. char c = '*';
  360. if (p == 0)
  361. c = '.';
  362. if (p == 1)
  363. c = '+';
  364. if (p == 2)
  365. c = '*';
  366. if (p == 3)
  367. c = '\n';
  368. BIO_write((BIO *)arg, &c, 1);
  369. (void)BIO_flush((BIO *)arg);
  370. # ifdef LINT
  371. p = n;
  372. # endif
  373. }
  374. # endif
  375. #endif