1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
|
// SPDX-License-Identifier: LGPL-2.1-or-later
/*
* Test utility checking availability of crypto primitive in crypto backend.
*
* Copyright (C) 2024-2025 Milan Broz
*/
#include <stdio.h>
#include <stdlib.h>
#include <unistd.h>
#include <fcntl.h>
#include "crypto_backend/crypto_backend.h"
static bool fips_mode(void)
{
int fd;
char buf = 0;
fd = open("/proc/sys/crypto/fips_enabled", O_RDONLY);
if (fd < 0)
return false;
if (read(fd, &buf, 1) != 1)
buf = '0';
close(fd);
return (buf == '1');
}
static int check_cipher(const char *alg, const char *mode, unsigned long key_bits)
{
struct crypt_cipher *cipher;
char key[256];
if (key_bits % 8 || (key_bits / 8) > sizeof(key))
return EXIT_FAILURE;
/* Userspace crypto */
crypt_backend_rng(key, sizeof(key), CRYPT_RND_NORMAL, 0);
if (crypt_cipher_init(&cipher, alg, mode, key, key_bits / 8))
return EXIT_FAILURE;
crypt_cipher_destroy(cipher);
/* Kernel crypto */
if (crypt_cipher_check_kernel(alg, mode, NULL, key_bits / 8))
return EXIT_FAILURE;
return EXIT_SUCCESS;
}
static int check_hash(const char *hash)
{
struct crypt_hash *h;
if (crypt_hash_size(hash) < 0)
return EXIT_FAILURE;
if (crypt_hash_init(&h, hash))
return EXIT_FAILURE;
crypt_hash_destroy(h);
return EXIT_SUCCESS;
}
static void __attribute__((noreturn)) exit_help(bool destroy_backend)
{
printf("Use: crypto_check version | hash <alg> | cipher <alg> <mode> [key_bits]\n");
if (destroy_backend)
crypt_backend_destroy();
exit(EXIT_FAILURE);
}
int main(int argc, char *argv[])
{
int r = EXIT_SUCCESS;
if (argc < 2)
exit_help(false);
if (crypt_backend_init(fips_mode())) {
printf("Crypto backend init error.");
return EXIT_FAILURE;
}
if (!strcmp(argv[1], "version")) {
printf("%s%s\n", crypt_backend_version(), fips_mode() ? " (FIPS mode)" : "" );
} else if (!strcmp(argv[1], "hash")) {
if (argc != 3)
exit_help(true);
r = check_hash(argv[2]);
} else if (!strcmp(argv[1], "cipher")) {
unsigned long ul = 256;
char *ptr;
if (argc < 4 || argc > 5)
exit_help(true);
if (argc == 5) {
ul = strtoul(argv[4], &ptr, 10);
if (*ptr)
exit_help(true);
}
r = check_cipher(argv[2], argv[3], ul);
}
crypt_backend_destroy();
return r;
}
|
