arno/trezor-firmware
1
0
Fork 0
mirror of https://github.com/trezor/trezor-firmware.git synced 2025-01-03 12:00:59 +00:00
Code Issues Releases Wiki Activity

test_openssl: test for NIST curve too

Browse Source
This commit is contained in:
Pavol Rusnak 2017-06-05 17:02:21 +02:00
parent d4b5e64ba2
commit 4e3ae3d69b
No known key found for this signature in database
GPG Key ID: 91F3B339B9A02A3D
1 changed files with 46 additions and 35 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

81
test_openssl.c
View File

@ -29,32 +29,25 @@
#include "ecdsa.h" #include "ecdsa.h"
#include "rand.h" #include "rand.h"
#include "nist256p1.h"
#include "secp256k1.h" #include "secp256k1.h"
int main(int argc, char *argv[]) void openssl_check(unsigned int iterations, int nid, const ecdsa_curve *curve)
{ {
uint8_t sig[64], pub_key33[33], pub_key65[65], priv_key[32], msg[256], buffer[1000], hash[32], *p; uint8_t sig[64], pub_key33[33], pub_key65[65], priv_key[32], msg[256], buffer[1000], hash[32], *p;
uint32_t i, j, msg_len;
SHA256_CTX sha256; SHA256_CTX sha256;
EC_GROUP *ecgroup; EC_GROUP *ecgroup;
int cnt = 0;
ecgroup = EC_GROUP_new_by_curve_name(NID_secp256k1); ecgroup = EC_GROUP_new_by_curve_name(nid);
for (unsigned int iter = 0; iter < iterations; iter++) {
unsigned long max_iterations = -1;
if (argc == 2) {
sscanf(argv[1], "%lu", &max_iterations);
} else if (argc > 2) {
puts("Zero or one command-line arguments only, exiting....");
}
unsigned long iterations = 0;
while (argc == 1 || iterations < max_iterations) {
// random message len between 1 and 256 // random message len between 1 and 256
msg_len = (random32() & 0xFF) + 1; int msg_len = (random32() & 0xFF) + 1;
// create random message // create random message
for (i = 0; i < msg_len; i++) { random_buffer(msg, msg_len);
msg[i] = random32() & 0xFF;
}
// new ECDSA key // new ECDSA key
EC_KEY *eckey = EC_KEY_new(); EC_KEY *eckey = EC_KEY_new();
EC_KEY_set_group(eckey, ecgroup); EC_KEY_set_group(eckey, ecgroup);
@ -66,39 +59,39 @@ int main(int argc, char *argv[])
i2d_ECPrivateKey(eckey, &p); i2d_ECPrivateKey(eckey, &p);
// size of the key is in buffer[8] and the key begins right after that // size of the key is in buffer[8] and the key begins right after that
i = buffer[8]; int s = buffer[8];
// extract key data // extract key data
if (i > 32) { if (s > 32) {
for (j = 0; j < 32; j++) { for (int j = 0; j < 32; j++) {
priv_key[j] = buffer[j + i - 23]; priv_key[j] = buffer[j + s - 23];
} }
} else { } else {
for (j = 0; j < 32 - i; j++) { for (int j = 0; j < 32 - s; j++) {
priv_key[j] = 0; priv_key[j] = 0;
} }
for (j = 0; j < i; j++) { for (int j = 0; j < s; j++) {
priv_key[j + 32 - i] = buffer[j + 9]; priv_key[j + 32 - s] = buffer[j + 9];
} }
} }
// use our ECDSA signer to sign the message with the key // use our ECDSA signer to sign the message with the key
if (ecdsa_sign(&secp256k1, priv_key, msg, msg_len, sig, NULL, NULL) != 0) { if (ecdsa_sign(curve, priv_key, msg, msg_len, sig, NULL, NULL) != 0) {
printf("trezor-crypto signing failed\n"); printf("trezor-crypto signing failed\n");
break; return;
} }
// generate public key from private key // generate public key from private key
ecdsa_get_public_key33(&secp256k1, priv_key, pub_key33); ecdsa_get_public_key33(curve, priv_key, pub_key33);
ecdsa_get_public_key65(&secp256k1, priv_key, pub_key65); ecdsa_get_public_key65(curve, priv_key, pub_key65);
// use our ECDSA verifier to verify the message signature // use our ECDSA verifier to verify the message signature
if (ecdsa_verify(&secp256k1, pub_key65, sig, msg, msg_len) != 0) { if (ecdsa_verify(curve, pub_key65, sig, msg, msg_len) != 0) {
printf("trezor-crypto verification failed (pub_key_len = 65)\n"); printf("trezor-crypto verification failed (pub_key_len = 65)\n");
break; return;
} }
if (ecdsa_verify(&secp256k1, pub_key33, sig, msg, msg_len) != 0) { if (ecdsa_verify(curve, pub_key33, sig, msg, msg_len) != 0) {
printf("trezor-crypto verification failed (pub_key_len = 33)\n"); printf("trezor-crypto verification failed (pub_key_len = 33)\n");
break; return;
} }
// copy signature to the OpenSSL struct // copy signature to the OpenSSL struct
@ -114,14 +107,32 @@ int main(int argc, char *argv[])
// verify all went well, i.e. we can decrypt our signature with OpenSSL // verify all went well, i.e. we can decrypt our signature with OpenSSL
if (ECDSA_do_verify(hash, 32, signature, eckey) != 1) { if (ECDSA_do_verify(hash, 32, signature, eckey) != 1) {
printf("OpenSSL verification failed\n"); printf("OpenSSL verification failed\n");
break; return;
} }
ECDSA_SIG_free(signature); ECDSA_SIG_free(signature);
EC_KEY_free(eckey); EC_KEY_free(eckey);
cnt++; if (((iter + 1) % 100) == 0) printf("Passed ... %d\n", iter + 1);
if ((cnt % 100) == 0) printf("Passed ... %d\n", cnt);
++iterations;
} }
EC_GROUP_free(ecgroup); EC_GROUP_free(ecgroup);
printf("All OK\n");
}
int main(int argc, char *argv[])
{
if (argc != 2) {
printf("Usage: test_openssl iterations\n");
return 1;
}
unsigned int iterations;
sscanf(argv[1], "%u", &iterations);
printf("Testing secp256k1:\n");
openssl_check(iterations, NID_secp256k1, &secp256k1);
printf("Testing nist256p1:\n");
openssl_check(iterations, NID_X9_62_prime256v1, &nist256p1);
return 0; return 0;
} }