1 /*
2 * Copyright (c) 2022 Yubico AB. All rights reserved.
3 * Use of this source code is governed by a BSD-style
4 * license that can be found in the LICENSE file.
5 * SPDX-License-Identifier: BSD-2-Clause
6 */
7
8 #undef NDEBUG
9
10 #include <assert.h>
11 #include <string.h>
12
13 #define _FIDO_INTERNAL
14
15 #include <fido.h>
16 #include <fido/rs256.h>
17
18 #include <openssl/bio.h>
19 #include <openssl/pem.h>
20
21 #define ASSERT_NOT_NULL(e) assert((e) != NULL)
22 #define ASSERT_NULL(e) assert((e) == NULL)
23 #define ASSERT_INVAL(e) assert((e) == FIDO_ERR_INVALID_ARGUMENT)
24 #define ASSERT_OK(e) assert((e) == FIDO_OK)
25
26 static char rsa1024[] = \
27 "-----BEGIN PUBLIC KEY-----\n"
28 "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCw92gn9Ku/bEfFj1AutaZyltpf\n"
29 "zzXrg70kQFymNq+spMt/HlxKiImw8TZU08zWW4ZLE/Ch4JYjMW6ETAdQFhSC63Ih\n"
30 "Wecui0JJ1f+2CsUVg+h7lO1877LZYUpdNiJrbqMb5Yc4N3FPtvdl3NoLIIQsF76H\n"
31 "VRvpjQgkWipRfZ97JQIDAQAB\n"
32 "-----END PUBLIC KEY-----";
33
34 static char rsa2048[] = \
35 "-----BEGIN PUBLIC KEY-----\n"
36 "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvIq/55ZodBIxzo/8BnE\n"
37 "UQN1fo1hmJ6V20hQHSzJq5tHyxRCcvKikuJ1ZvR4RdZlEzdTdbEfMBdZ8sxve0/U\n"
38 "yYEjH92CG0vgTCYuUaFLJTaWZSvWa96G8Lw+V4VyNFDRCM7sflOaSVH5pAsz8OEc\n"
39 "TLZfM4NhnDsJAM+mQ6X7Tza0sczPchgDA+9KByXo/VIqyuBQs17rlKC2reMa8NkY\n"
40 "rBRQZJLNzi68d5/BHH1flGWE1l8wJ9dr1Ex93H/KdzX+7/28TWUC98nneUo8RfRx\n"
41 "FwUt/EInDMHOORCaCHSs28U/9IUyMjqLB1rxKhIp09yGXMiTrrT+p+Pcn8dO01HT\n"
42 "vQIDAQAB\n"
43 "-----END PUBLIC KEY-----";
44
45 static char rsa3072[] = \
46 "-----BEGIN PUBLIC KEY-----\n"
47 "MIIBojANBgkqhkiG9w0BAQEFAAOCAY8AMIIBigKCAYEAwZunKrMs/o92AniLPNTF\n"
48 "Ta4EYfhy5NDmMvQvRFT/eTYItLrOTPmYMap68KLyZYmgz/AdaxAL/992QWre7XTY\n"
49 "gqLwtZT+WsSu7xPHWKTTXrlVohKBeLHQ0I7Zy0NSMUxhlJEMrBAjSyFAS86zWm5w\n"
50 "ctC3pNCqfUKugA07BVj+d5Mv5fziwgMR86kuhkVuMYfsR4IYwX4+va0pyLzxx624\n"
51 "s9nJ107g+A+3MUk4bAto3lruFeeZPUI2AFzFQbGg5By6VtvVi3gKQ7lUNtAr0Onu\n"
52 "I6Fb+yz8sbFcvDpJcu5CXW20GrKMVP4KY5pn2LCajWuZjBl/dXWayPfm4UX5Y2O4\n"
53 "73tzPpUBNwnEdz79His0v80Vmvjwn5IuF2jAoimrBNPJFFwCCuVNy8kgj2vllk1l\n"
54 "RvLOG6hf8VnlDb40QZS3QAQ09xFfF+xlVLb8cHH6wllaAGEM230TrmawpC7xpz4Z\n"
55 "sTuwJwI0AWEi//noMsRz2BuF2fCp//aORYJQU2S8kYk3AgMBAAE=\n"
56 "-----END PUBLIC KEY-----";
57
58 static const unsigned char rsa2048_raw[] = {
59 0xa6, 0xf2, 0x2a, 0xff, 0x9e, 0x59, 0xa1, 0xd0,
60 0x48, 0xc7, 0x3a, 0x3f, 0xf0, 0x19, 0xc4, 0x51,
61 0x03, 0x75, 0x7e, 0x8d, 0x61, 0x98, 0x9e, 0x95,
62 0xdb, 0x48, 0x50, 0x1d, 0x2c, 0xc9, 0xab, 0x9b,
63 0x47, 0xcb, 0x14, 0x42, 0x72, 0xf2, 0xa2, 0x92,
64 0xe2, 0x75, 0x66, 0xf4, 0x78, 0x45, 0xd6, 0x65,
65 0x13, 0x37, 0x53, 0x75, 0xb1, 0x1f, 0x30, 0x17,
66 0x59, 0xf2, 0xcc, 0x6f, 0x7b, 0x4f, 0xd4, 0xc9,
67 0x81, 0x23, 0x1f, 0xdd, 0x82, 0x1b, 0x4b, 0xe0,
68 0x4c, 0x26, 0x2e, 0x51, 0xa1, 0x4b, 0x25, 0x36,
69 0x96, 0x65, 0x2b, 0xd6, 0x6b, 0xde, 0x86, 0xf0,
70 0xbc, 0x3e, 0x57, 0x85, 0x72, 0x34, 0x50, 0xd1,
71 0x08, 0xce, 0xec, 0x7e, 0x53, 0x9a, 0x49, 0x51,
72 0xf9, 0xa4, 0x0b, 0x33, 0xf0, 0xe1, 0x1c, 0x4c,
73 0xb6, 0x5f, 0x33, 0x83, 0x61, 0x9c, 0x3b, 0x09,
74 0x00, 0xcf, 0xa6, 0x43, 0xa5, 0xfb, 0x4f, 0x36,
75 0xb4, 0xb1, 0xcc, 0xcf, 0x72, 0x18, 0x03, 0x03,
76 0xef, 0x4a, 0x07, 0x25, 0xe8, 0xfd, 0x52, 0x2a,
77 0xca, 0xe0, 0x50, 0xb3, 0x5e, 0xeb, 0x94, 0xa0,
78 0xb6, 0xad, 0xe3, 0x1a, 0xf0, 0xd9, 0x18, 0xac,
79 0x14, 0x50, 0x64, 0x92, 0xcd, 0xce, 0x2e, 0xbc,
80 0x77, 0x9f, 0xc1, 0x1c, 0x7d, 0x5f, 0x94, 0x65,
81 0x84, 0xd6, 0x5f, 0x30, 0x27, 0xd7, 0x6b, 0xd4,
82 0x4c, 0x7d, 0xdc, 0x7f, 0xca, 0x77, 0x35, 0xfe,
83 0xef, 0xfd, 0xbc, 0x4d, 0x65, 0x02, 0xf7, 0xc9,
84 0xe7, 0x79, 0x4a, 0x3c, 0x45, 0xf4, 0x71, 0x17,
85 0x05, 0x2d, 0xfc, 0x42, 0x27, 0x0c, 0xc1, 0xce,
86 0x39, 0x10, 0x9a, 0x08, 0x74, 0xac, 0xdb, 0xc5,
87 0x3f, 0xf4, 0x85, 0x32, 0x32, 0x3a, 0x8b, 0x07,
88 0x5a, 0xf1, 0x2a, 0x12, 0x29, 0xd3, 0xdc, 0x86,
89 0x5c, 0xc8, 0x93, 0xae, 0xb4, 0xfe, 0xa7, 0xe3,
90 0xdc, 0x9f, 0xc7, 0x4e, 0xd3, 0x51, 0xd3, 0xbd,
91 0x01, 0x00, 0x01,
92 };
93
94 static EVP_PKEY *
EVP_PKEY_from_PEM(const char * ptr,size_t len)95 EVP_PKEY_from_PEM(const char *ptr, size_t len)
96 {
97 BIO *bio = NULL;
98 EVP_PKEY *pkey = NULL;
99
100 if ((bio = BIO_new(BIO_s_mem())) == NULL) {
101 warnx("BIO_new");
102 goto out;
103 }
104 if (len > INT_MAX || BIO_write(bio, ptr, (int)len) != (int)len) {
105 warnx("BIO_write");
106 goto out;
107 }
108 if ((pkey = PEM_read_bio_PUBKEY(bio, NULL, NULL, NULL)) == NULL)
109 warnx("PEM_read_bio_PUBKEY");
110 out:
111 BIO_free(bio);
112
113 return pkey;
114 }
115
116 static int
rs256_pk_cmp(const char * ptr,size_t len)117 rs256_pk_cmp(const char *ptr, size_t len)
118 {
119 EVP_PKEY *pkA = NULL;
120 EVP_PKEY *pkB = NULL;
121 rs256_pk_t *k = NULL;
122 int r, ok = -1;
123
124 if ((pkA = EVP_PKEY_from_PEM(ptr, len)) == NULL) {
125 warnx("EVP_PKEY_from_PEM");
126 goto out;
127 }
128 if ((k = rs256_pk_new()) == NULL) {
129 warnx("rs256_pk_new");
130 goto out;
131 }
132 if ((r = rs256_pk_from_EVP_PKEY(k, pkA)) != FIDO_OK) {
133 warnx("rs256_pk_from_EVP_PKEY: 0x%x", r);
134 goto out;
135 }
136 if ((pkB = rs256_pk_to_EVP_PKEY(k)) == NULL) {
137 warnx("rs256_pk_to_EVP_PKEY");
138 goto out;
139 }
140 if ((r = EVP_PKEY_cmp(pkA, pkB)) != 1) {
141 warnx("EVP_PKEY_cmp: %d", r);
142 goto out;
143 }
144
145 ok = 0;
146 out:
147 EVP_PKEY_free(pkA);
148 EVP_PKEY_free(pkB);
149 rs256_pk_free(&k);
150
151 return ok;
152 }
153
154 static void
invalid_size(const char * pem)155 invalid_size(const char *pem)
156 {
157 EVP_PKEY *pkey;
158 rs256_pk_t *pk;
159
160 ASSERT_NOT_NULL((pkey = EVP_PKEY_from_PEM(pem, strlen(pem))));
161 ASSERT_NOT_NULL((pk = rs256_pk_new()));
162 ASSERT_INVAL(rs256_pk_from_EVP_PKEY(pk, pkey));
163
164 EVP_PKEY_free(pkey);
165 rs256_pk_free(&pk);
166 }
167
168 static void
valid_size(const char * pem,const unsigned char * raw,size_t raw_len)169 valid_size(const char *pem, const unsigned char *raw, size_t raw_len)
170 {
171 EVP_PKEY *pkeyA;
172 EVP_PKEY *pkeyB;
173 rs256_pk_t *pkA;
174 rs256_pk_t *pkB;
175
176 ASSERT_NOT_NULL((pkeyA = EVP_PKEY_from_PEM(pem, strlen(pem))));
177 ASSERT_NOT_NULL((pkA = rs256_pk_new()));
178 ASSERT_NOT_NULL((pkB = rs256_pk_new()));
179 ASSERT_OK(rs256_pk_from_EVP_PKEY(pkA, pkeyA));
180 ASSERT_OK(rs256_pk_from_ptr(pkB, raw, raw_len));
181 ASSERT_NOT_NULL((pkeyB = rs256_pk_to_EVP_PKEY(pkB)));
182 assert(EVP_PKEY_cmp(pkeyA, pkeyB) == 1);
183 assert(rs256_pk_cmp(pem, strlen(pem)) == 0);
184
185 EVP_PKEY_free(pkeyA);
186 EVP_PKEY_free(pkeyB);
187 rs256_pk_free(&pkA);
188 rs256_pk_free(&pkB);
189 }
190
191 int
main(void)192 main(void)
193 {
194 fido_init(0);
195
196 invalid_size(rsa1024);
197 invalid_size(rsa3072);
198 valid_size(rsa2048, rsa2048_raw, sizeof(rsa2048_raw));
199
200 exit(0);
201 }
202