1 /* $OpenBSD: test_sshbuf_getput_crypto.c,v 1.2 2019/01/21 12:29:35 djm Exp $ */ 2 /* 3 * Regress test for sshbuf.h buffer API 4 * 5 * Placed in the public domain 6 */ 7 8 #include <sys/types.h> 9 #include <sys/param.h> 10 #include <stdio.h> 11 #include <stdint.h> 12 #include <stdlib.h> 13 #include <string.h> 14 15 #include <openssl/bn.h> 16 #include <openssl/ec.h> 17 #include <openssl/objects.h> 18 19 #include "test_helper.h" 20 #include "ssherr.h" 21 #include "sshbuf.h" 22 23 void sshbuf_getput_crypto_tests(void); 24 25 void 26 sshbuf_getput_crypto_tests(void) 27 { 28 struct sshbuf *p1; 29 const u_char *d; 30 size_t s; 31 BIGNUM *bn, *bn2, *bn_x, *bn_y; 32 const char *hexbn1 = "0102030405060708090a0b0c0d0e0f10"; 33 /* This one has MSB set to test bignum2 encoding negative-avoidance */ 34 const char *hexbn2 = "f0e0d0c0b0a0908070605040302010007fff11"; 35 u_char expbn1[] = { 36 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 37 0x09, 0x0a, 0x0b, 0x0c, 0x0d, 0x0e, 0x0f, 0x10, 38 }; 39 u_char expbn2[] = { 40 0xf0, 0xe0, 0xd0, 0xc0, 0xb0, 0xa0, 0x90, 0x80, 41 0x70, 0x60, 0x50, 0x40, 0x30, 0x20, 0x10, 0x00, 42 0x7f, 0xff, 0x11 43 }; 44 int ec256_nid = NID_X9_62_prime256v1; 45 char *ec256_x = "0C828004839D0106AA59575216191357" 46 "34B451459DADB586677EF9DF55784999"; 47 char *ec256_y = "4D196B50F0B4E94B3C73E3A9D4CD9DF2" 48 "C8F9A35E42BDD047550F69D80EC23CD4"; 49 u_char expec256[] = { 50 0x04, 51 0x0c, 0x82, 0x80, 0x04, 0x83, 0x9d, 0x01, 0x06, 52 0xaa, 0x59, 0x57, 0x52, 0x16, 0x19, 0x13, 0x57, 53 0x34, 0xb4, 0x51, 0x45, 0x9d, 0xad, 0xb5, 0x86, 54 0x67, 0x7e, 0xf9, 0xdf, 0x55, 0x78, 0x49, 0x99, 55 0x4d, 0x19, 0x6b, 0x50, 0xf0, 0xb4, 0xe9, 0x4b, 56 0x3c, 0x73, 0xe3, 0xa9, 0xd4, 0xcd, 0x9d, 0xf2, 57 0xc8, 0xf9, 0xa3, 0x5e, 0x42, 0xbd, 0xd0, 0x47, 58 0x55, 0x0f, 0x69, 0xd8, 0x0e, 0xc2, 0x3c, 0xd4 59 }; 60 EC_KEY *eck; 61 EC_POINT *ecp; 62 int r; 63 64 #define MKBN(b, bnn) \ 65 do { \ 66 bnn = NULL; \ 67 ASSERT_INT_GT(BN_hex2bn(&bnn, b), 0); \ 68 } while (0) 69 70 TEST_START("sshbuf_put_bignum2"); 71 MKBN(hexbn1, bn); 72 p1 = sshbuf_new(); 73 ASSERT_PTR_NE(p1, NULL); 74 ASSERT_INT_EQ(sshbuf_put_bignum2(p1, bn), 0); 75 ASSERT_SIZE_T_EQ(sshbuf_len(p1), sizeof(expbn1) + 4); 76 ASSERT_U32_EQ(PEEK_U32(sshbuf_ptr(p1)), (u_int32_t)BN_num_bytes(bn)); 77 ASSERT_MEM_EQ(sshbuf_ptr(p1) + 4, expbn1, sizeof(expbn1)); 78 BN_free(bn); 79 sshbuf_free(p1); 80 TEST_DONE(); 81 82 TEST_START("sshbuf_put_bignum2 limited"); 83 MKBN(hexbn1, bn); 84 p1 = sshbuf_new(); 85 ASSERT_PTR_NE(p1, NULL); 86 ASSERT_INT_EQ(sshbuf_set_max_size(p1, sizeof(expbn1) + 3), 0); 87 r = sshbuf_put_bignum2(p1, bn); 88 ASSERT_INT_EQ(r, SSH_ERR_NO_BUFFER_SPACE); 89 ASSERT_SIZE_T_EQ(sshbuf_len(p1), 0); 90 BN_free(bn); 91 sshbuf_free(p1); 92 TEST_DONE(); 93 94 TEST_START("sshbuf_put_bignum2 bn2"); 95 MKBN(hexbn2, bn); 96 p1 = sshbuf_new(); 97 ASSERT_PTR_NE(p1, NULL); 98 ASSERT_INT_EQ(sshbuf_put_bignum2(p1, bn), 0); 99 ASSERT_SIZE_T_EQ(sshbuf_len(p1), sizeof(expbn2) + 4 + 1); /* MSB */ 100 ASSERT_U32_EQ(PEEK_U32(sshbuf_ptr(p1)), (u_int32_t)BN_num_bytes(bn) + 1); 101 ASSERT_U8_EQ(*(sshbuf_ptr(p1) + 4), 0x00); 102 ASSERT_MEM_EQ(sshbuf_ptr(p1) + 5, expbn2, sizeof(expbn2)); 103 BN_free(bn); 104 sshbuf_free(p1); 105 TEST_DONE(); 106 107 TEST_START("sshbuf_put_bignum2 bn2 limited"); 108 MKBN(hexbn2, bn); 109 p1 = sshbuf_new(); 110 ASSERT_PTR_NE(p1, NULL); 111 ASSERT_INT_EQ(sshbuf_set_max_size(p1, sizeof(expbn2) + 3), 0); 112 r = sshbuf_put_bignum2(p1, bn); 113 ASSERT_INT_EQ(r, SSH_ERR_NO_BUFFER_SPACE); 114 ASSERT_SIZE_T_EQ(sshbuf_len(p1), 0); 115 BN_free(bn); 116 sshbuf_free(p1); 117 TEST_DONE(); 118 119 TEST_START("sshbuf_get_bignum2"); 120 MKBN(hexbn1, bn); 121 p1 = sshbuf_new(); 122 ASSERT_PTR_NE(p1, NULL); 123 ASSERT_INT_EQ(sshbuf_put_u32(p1, BN_num_bytes(bn)), 0); 124 ASSERT_INT_EQ(sshbuf_put(p1, expbn1, sizeof(expbn1)), 0); 125 ASSERT_SIZE_T_EQ(sshbuf_len(p1), 4 + sizeof(expbn1)); 126 ASSERT_INT_EQ(sshbuf_put_u16(p1, 0xd00f), 0); 127 bn2 = NULL; 128 ASSERT_INT_EQ(sshbuf_get_bignum2(p1, &bn2), 0); 129 ASSERT_BIGNUM_EQ(bn, bn2); 130 ASSERT_SIZE_T_EQ(sshbuf_len(p1), 2); 131 BN_free(bn); 132 BN_free(bn2); 133 sshbuf_free(p1); 134 TEST_DONE(); 135 136 TEST_START("sshbuf_get_bignum2 truncated"); 137 MKBN(hexbn1, bn); 138 p1 = sshbuf_new(); 139 ASSERT_PTR_NE(p1, NULL); 140 ASSERT_INT_EQ(sshbuf_put_u32(p1, BN_num_bytes(bn)), 0); 141 ASSERT_INT_EQ(sshbuf_put(p1, expbn1, sizeof(expbn1) - 1), 0); 142 bn2 = NULL; 143 r = sshbuf_get_bignum2(p1, &bn2); 144 ASSERT_INT_EQ(r, SSH_ERR_MESSAGE_INCOMPLETE); 145 ASSERT_SIZE_T_EQ(sshbuf_len(p1), sizeof(expbn1) + 3); 146 BN_free(bn); 147 BN_free(bn2); 148 sshbuf_free(p1); 149 TEST_DONE(); 150 151 TEST_START("sshbuf_get_bignum2 giant"); 152 MKBN(hexbn1, bn); 153 p1 = sshbuf_new(); 154 ASSERT_PTR_NE(p1, NULL); 155 ASSERT_INT_EQ(sshbuf_put_u32(p1, 65536), 0); 156 ASSERT_INT_EQ(sshbuf_reserve(p1, 65536, NULL), 0); 157 bn2 = NULL; 158 r = sshbuf_get_bignum2(p1, &bn2); 159 ASSERT_INT_EQ(r, SSH_ERR_BIGNUM_TOO_LARGE); 160 ASSERT_SIZE_T_EQ(sshbuf_len(p1), 65536 + 4); 161 BN_free(bn); 162 BN_free(bn2); 163 sshbuf_free(p1); 164 TEST_DONE(); 165 166 TEST_START("sshbuf_get_bignum2 bn2"); 167 MKBN(hexbn2, bn); 168 p1 = sshbuf_new(); 169 ASSERT_PTR_NE(p1, NULL); 170 ASSERT_INT_EQ(sshbuf_put_u32(p1, BN_num_bytes(bn) + 1), 0); /* MSB */ 171 ASSERT_INT_EQ(sshbuf_put_u8(p1, 0x00), 0); 172 ASSERT_INT_EQ(sshbuf_put(p1, expbn2, sizeof(expbn2)), 0); 173 ASSERT_SIZE_T_EQ(sshbuf_len(p1), 4 + 1 + sizeof(expbn2)); 174 ASSERT_INT_EQ(sshbuf_put_u16(p1, 0xd00f), 0); 175 bn2 = NULL; 176 ASSERT_INT_EQ(sshbuf_get_bignum2(p1, &bn2), 0); 177 ASSERT_BIGNUM_EQ(bn, bn2); 178 ASSERT_SIZE_T_EQ(sshbuf_len(p1), 2); 179 BN_free(bn); 180 BN_free(bn2); 181 sshbuf_free(p1); 182 TEST_DONE(); 183 184 TEST_START("sshbuf_get_bignum2 bn2 truncated"); 185 MKBN(hexbn2, bn); 186 p1 = sshbuf_new(); 187 ASSERT_PTR_NE(p1, NULL); 188 ASSERT_INT_EQ(sshbuf_put_u32(p1, BN_num_bytes(bn) + 1), 0); 189 ASSERT_INT_EQ(sshbuf_put_u8(p1, 0x00), 0); 190 ASSERT_INT_EQ(sshbuf_put(p1, expbn2, sizeof(expbn2) - 1), 0); 191 bn2 = NULL; 192 r = sshbuf_get_bignum2(p1, &bn2); 193 ASSERT_INT_EQ(r, SSH_ERR_MESSAGE_INCOMPLETE); 194 ASSERT_SIZE_T_EQ(sshbuf_len(p1), sizeof(expbn2) + 1 + 4 - 1); 195 BN_free(bn); 196 BN_free(bn2); 197 sshbuf_free(p1); 198 TEST_DONE(); 199 200 TEST_START("sshbuf_get_bignum2 bn2 negative"); 201 MKBN(hexbn2, bn); 202 p1 = sshbuf_new(); 203 ASSERT_PTR_NE(p1, NULL); 204 ASSERT_INT_EQ(sshbuf_put_u32(p1, BN_num_bytes(bn)), 0); 205 ASSERT_INT_EQ(sshbuf_put(p1, expbn2, sizeof(expbn2)), 0); 206 bn2 = NULL; 207 r = sshbuf_get_bignum2(p1, &bn2); 208 ASSERT_INT_EQ(r, SSH_ERR_BIGNUM_IS_NEGATIVE); 209 ASSERT_SIZE_T_EQ(sshbuf_len(p1), sizeof(expbn2) + 4); 210 BN_free(bn); 211 BN_free(bn2); 212 sshbuf_free(p1); 213 TEST_DONE(); 214 215 TEST_START("sshbuf_put_ec"); 216 eck = EC_KEY_new_by_curve_name(ec256_nid); 217 ASSERT_PTR_NE(eck, NULL); 218 ecp = EC_POINT_new(EC_KEY_get0_group(eck)); 219 ASSERT_PTR_NE(ecp, NULL); 220 MKBN(ec256_x, bn_x); 221 MKBN(ec256_y, bn_y); 222 ASSERT_INT_EQ(EC_POINT_set_affine_coordinates_GFp( 223 EC_KEY_get0_group(eck), ecp, bn_x, bn_y, NULL), 1); 224 ASSERT_INT_EQ(EC_KEY_set_public_key(eck, ecp), 1); 225 BN_free(bn_x); 226 BN_free(bn_y); 227 EC_POINT_free(ecp); 228 p1 = sshbuf_new(); 229 ASSERT_PTR_NE(p1, NULL); 230 ASSERT_INT_EQ(sshbuf_put_eckey(p1, eck), 0); 231 ASSERT_INT_EQ(sshbuf_get_string_direct(p1, &d, &s), 0); 232 ASSERT_SIZE_T_EQ(s, sizeof(expec256)); 233 ASSERT_MEM_EQ(d, expec256, sizeof(expec256)); 234 sshbuf_free(p1); 235 EC_KEY_free(eck); 236 TEST_DONE(); 237 238 TEST_START("sshbuf_get_ec"); 239 eck = EC_KEY_new_by_curve_name(ec256_nid); 240 ASSERT_PTR_NE(eck, NULL); 241 p1 = sshbuf_new(); 242 ASSERT_PTR_NE(p1, NULL); 243 ASSERT_INT_EQ(sshbuf_put_string(p1, expec256, sizeof(expec256)), 0); 244 ASSERT_SIZE_T_EQ(sshbuf_len(p1), sizeof(expec256) + 4); 245 ASSERT_INT_EQ(sshbuf_put_u8(p1, 0x00), 0); 246 ASSERT_INT_EQ(sshbuf_get_eckey(p1, eck), 0); 247 bn_x = BN_new(); 248 bn_y = BN_new(); 249 ASSERT_PTR_NE(bn_x, NULL); 250 ASSERT_PTR_NE(bn_y, NULL); 251 ASSERT_INT_EQ(EC_POINT_get_affine_coordinates_GFp( 252 EC_KEY_get0_group(eck), EC_KEY_get0_public_key(eck), 253 bn_x, bn_y, NULL), 1); 254 MKBN(ec256_x, bn); 255 MKBN(ec256_y, bn2); 256 ASSERT_INT_EQ(BN_cmp(bn_x, bn), 0); 257 ASSERT_INT_EQ(BN_cmp(bn_y, bn2), 0); 258 ASSERT_SIZE_T_EQ(sshbuf_len(p1), 1); 259 sshbuf_free(p1); 260 EC_KEY_free(eck); 261 BN_free(bn_x); 262 BN_free(bn_y); 263 BN_free(bn); 264 BN_free(bn2); 265 TEST_DONE(); 266 } 267 268