1 /* 2 * Copyright (c) 2006 Kungliga Tekniska Högskolan 3 * (Royal Institute of Technology, Stockholm, Sweden). 4 * All rights reserved. 5 * 6 * Redistribution and use in source and binary forms, with or without 7 * modification, are permitted provided that the following conditions 8 * are met: 9 * 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 13 * 2. Redistributions in binary form must reproduce the above copyright 14 * notice, this list of conditions and the following disclaimer in the 15 * documentation and/or other materials provided with the distribution. 16 * 17 * 3. Neither the name of KTH nor the names of its contributors may be 18 * used to endorse or promote products derived from this software without 19 * specific prior written permission. 20 * 21 * THIS SOFTWARE IS PROVIDED BY KTH AND ITS CONTRIBUTORS ``AS IS'' AND ANY 22 * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 24 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL KTH OR ITS CONTRIBUTORS BE 25 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 26 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 27 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR 28 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, 29 * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR 30 * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF 31 * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 32 */ 33 34 #include "gsskrb5_locl.h" 35 36 struct range { 37 size_t lower; 38 size_t upper; 39 }; 40 41 struct range tests[] = { 42 { 0, 1040 }, 43 { 2040, 2080 }, 44 { 4080, 5000 }, 45 { 8180, 8292 }, 46 { 9980, 10010 } 47 }; 48 49 static void 50 test_range(const struct range *r, int integ, 51 krb5_context context, krb5_crypto crypto) 52 { 53 krb5_error_code ret; 54 size_t size, rsize; 55 struct gsskrb5_ctx ctx; 56 57 for (size = r->lower; size < r->upper; size++) { 58 size_t cksumsize; 59 uint16_t padsize; 60 OM_uint32 minor; 61 OM_uint32 max_wrap_size; 62 63 ctx.crypto = crypto; 64 65 ret = _gssapi_wrap_size_cfx(&minor, 66 &ctx, 67 context, 68 integ, 69 0, 70 size, 71 &max_wrap_size); 72 if (ret) 73 krb5_errx(context, 1, "_gsskrb5cfx_max_wrap_length_cfx: %d", ret); 74 if (max_wrap_size == 0) 75 continue; 76 77 ret = _gsskrb5cfx_wrap_length_cfx(context, 78 crypto, 79 integ, 80 0, 81 max_wrap_size, 82 &rsize, &cksumsize, &padsize); 83 if (ret) 84 krb5_errx(context, 1, "_gsskrb5cfx_wrap_length_cfx: %d", ret); 85 86 if (size < rsize) 87 krb5_errx(context, 1, 88 "size (%d) < rsize (%d) for max_wrap_size %d", 89 (int)size, (int)rsize, (int)max_wrap_size); 90 } 91 } 92 93 static void 94 test_special(krb5_context context, krb5_crypto crypto, 95 int integ, size_t testsize) 96 { 97 krb5_error_code ret; 98 size_t rsize; 99 OM_uint32 max_wrap_size; 100 size_t cksumsize; 101 uint16_t padsize; 102 struct gsskrb5_ctx ctx; 103 OM_uint32 minor; 104 105 ctx.crypto = crypto; 106 107 ret = _gssapi_wrap_size_cfx(&minor, 108 &ctx, 109 context, 110 integ, 111 0, 112 testsize, 113 &max_wrap_size); 114 if (ret) 115 krb5_errx(context, 1, "_gsskrb5cfx_max_wrap_length_cfx: %d", ret); 116 if (ret) 117 krb5_errx(context, 1, "_gsskrb5cfx_max_wrap_length_cfx: %d", ret); 118 119 ret = _gsskrb5cfx_wrap_length_cfx(context, 120 crypto, 121 integ, 122 0, 123 max_wrap_size, 124 &rsize, &cksumsize, &padsize); 125 if (ret) 126 krb5_errx(context, 1, "_gsskrb5cfx_wrap_length_cfx: %d", ret); 127 128 if (testsize < rsize) 129 krb5_errx(context, 1, 130 "testsize (%d) < rsize (%d) for max_wrap_size %d", 131 (int)testsize, (int)rsize, (int)max_wrap_size); 132 } 133 134 135 136 137 int 138 main(int argc, char **argv) 139 { 140 krb5_keyblock keyblock; 141 krb5_error_code ret; 142 krb5_context context; 143 krb5_crypto crypto; 144 int i; 145 146 ret = krb5_init_context(&context); 147 if (ret) 148 errx(1, "krb5_context_init: %d", ret); 149 150 ret = krb5_generate_random_keyblock(context, 151 ENCTYPE_AES256_CTS_HMAC_SHA1_96, 152 &keyblock); 153 if (ret) 154 krb5_err(context, 1, ret, "krb5_generate_random_keyblock"); 155 156 ret = krb5_crypto_init(context, &keyblock, 0, &crypto); 157 if (ret) 158 krb5_err(context, 1, ret, "krb5_crypto_init"); 159 160 test_special(context, crypto, 1, 60); 161 test_special(context, crypto, 0, 60); 162 163 for (i = 0; i < sizeof(tests)/sizeof(tests[0]); i++) { 164 test_range(&tests[i], 1, context, crypto); 165 test_range(&tests[i], 0, context, crypto); 166 } 167 168 krb5_free_keyblock_contents(context, &keyblock); 169 krb5_crypto_destroy(context, crypto); 170 krb5_free_context(context); 171 172 return 0; 173 } 174