1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
|
#include <errno.h>
#include <openssl/crypto.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <sys/time.h>
#include <openssl/opensslconf.h>
#ifdef OPENSSL_FIPS
#include <openssl/fips.h>
#endif /* OPENSSL_FIPS */
#include "ica_api.h"
#include "testcase.h"
#include <openssl/obj_mac.h>
#define MAX_ECC_PRIV_SIZE 66 /* 521 bits */
#define MAX_ECDSA_SIG_SIZE 2*MAX_ECC_PRIV_SIZE
#define NUM_ECKEYGEN_TESTS (sizeof(eckeygen_tests)/sizeof(eckeygen_test_t))
#define NUM_HW_SW_TESTS 2
#define NUM_HASH_LENGTHS (sizeof(hash_length)/sizeof(int))
typedef struct {
unsigned int nid;
char nid_str[32];
} eckeygen_test_t;
static eckeygen_test_t eckeygen_tests[] = {
{NID_X9_62_prime192v1, "NID_X9_62_prime192v1"},
{NID_secp224r1, "NID_secp224r1"},
{NID_X9_62_prime256v1, "NID_X9_62_prime256v1"},
{NID_secp384r1, "NID_secp384r1"},
{NID_secp521r1, "NID_secp521r1"},
{NID_brainpoolP160r1, "NID_brainpoolP160r1"},
{NID_brainpoolP192r1, "NID_brainpoolP192r1"},
{NID_brainpoolP224r1, "NID_brainpoolP224r1"},
{NID_brainpoolP256r1, "NID_brainpoolP256r1"},
{NID_brainpoolP320r1, "NID_brainpoolP320r1"},
{NID_brainpoolP384r1, "NID_brainpoolP384r1"},
{NID_brainpoolP512r1, "NID_brainpoolP512r1"},
};
static unsigned char hash[] = {
0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07,
0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f,
0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17,
0x18, 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f,
};
static unsigned int hash_length[] = {
20, 28, 32, 48, 64,
};
int main(int argc, char **argv)
{
ica_adapter_handle_t adapter_handle;
unsigned int i, j, k, rc;
unsigned int errors=0, test_failed=0;
unsigned char signature[MAX_ECDSA_SIG_SIZE];
unsigned char pub_X[MAX_ECC_PRIV_SIZE];
unsigned char pub_Y[MAX_ECC_PRIV_SIZE];
unsigned char priv_D[MAX_ECC_PRIV_SIZE];
unsigned int privlen = 0;
ICA_EC_KEY *eckey;
char *icapath;
set_verbosity(argc, argv);
if (!ecc_available()) {
printf("Skipping EC keygen test, because the required HW"
" is not available on this machine.\n");
return TEST_SKIP;
}
rc = ica_open_adapter(&adapter_handle);
if (rc != 0) {
V_(printf("ica_open_adapter failed and returned %d (0x%x).\n", rc, rc));
}
/* set ICAPATH default value */
icapath = getenv("ICAPATH");
if ((icapath == NULL) || (atoi(icapath) == 0)) {
icapath = "1";
setenv("ICAPATH", icapath, 1);
}
/* Iterate over curves */
for (i = 0; i < NUM_ECKEYGEN_TESTS; i++) {
setenv("ICAPATH", icapath, 1);
test_failed = 0;
memset(pub_X, 0, sizeof(pub_X));
memset(pub_Y, 0, sizeof(pub_Y));
memset(priv_D, 0, sizeof(priv_D));
V_(printf("Generating EC key for curve %d (%s) \n", eckeygen_tests[i].nid, eckeygen_tests[i].nid_str));
for (k = 0; k < NUM_HW_SW_TESTS; k++) {
if (can_toggle(eckeygen_tests[i].nid))
toggle_env_icapath();
/* generate EC key with given curve */
VV_(printf(" performing keygen with ICAPATH=%d \n", getenv_icapath()));
eckey = ica_ec_key_new(eckeygen_tests[i].nid, &privlen);
if (!eckey)
continue;
rc = ica_ec_key_generate(adapter_handle, eckey);
if (rc) {
if (rc == EPERM) {
V_(printf("Curve %d not supported on this system, skipping ...\n", eckeygen_tests[i].nid));
continue;
} else {
V_(printf("EC key for curve %i could not be generated, rc=%i.\n", eckeygen_tests[i].nid, rc));
errors++;
continue;
}
}
for (j = 0; j<NUM_HASH_LENGTHS; j++) {
if (can_toggle(eckeygen_tests[i].nid))
toggle_env_icapath();
/* calculate ECDSA signature with this key */
VV_(printf(" performing sign with ICAPATH=%d \n", getenv_icapath()));
rc = ica_ecdsa_sign(adapter_handle, eckey, hash, hash_length[j],
signature, MAX_ECDSA_SIG_SIZE);
if (rc) {
V_(printf("Signature could not be created, key not usable, rc=%i.\n",rc));
test_failed = 1;
break;
} else {
if (can_toggle(eckeygen_tests[i].nid))
toggle_env_icapath();
/* verify ECDSA signature with this key */
VV_(printf(" performing verify with ICAPATH=%d \n", getenv_icapath()));
rc = ica_ecdsa_verify(adapter_handle, eckey, hash, hash_length[j],
signature, MAX_ECDSA_SIG_SIZE);
if (rc) {
V_(printf("Signature could not be verified, key not usable, rc=%i.\n",rc));
test_failed = 1;
break;
}
}
}
}
if (test_failed)
errors++;
ica_ec_key_free(eckey);
unset_env_icapath();
}
ica_close_adapter(adapter_handle);
if (errors) {
printf("%i of %li EC keygen tests failed.\n", errors, NUM_ECKEYGEN_TESTS);
return TEST_FAIL;
}
printf("All EC keygen tests passed.\n");
return TEST_SUCC;
}
|
