Home | History | Annotate | Line # | Download | only in hcrypto 
      1 /*	$NetBSD: test_pkcs5.c,v 1.2 2017/01/28 21:31:47 christos Exp $	*/
      2 
      3 /*
      4  * Copyright (c) 2006 Kungliga Tekniska Hgskolan
      5  * (Royal Institute of Technology, Stockholm, Sweden).
      6  * All rights reserved.
      7  *
      8  * Redistribution and use in source and binary forms, with or without
      9  * modification, are permitted provided that the following conditions
     10  * are met:
     11  *
     12  * 1. Redistributions of source code must retain the above copyright
     13  *    notice, this list of conditions and the following disclaimer.
     14  *
     15  * 2. Redistributions in binary form must reproduce the above copyright
     16  *    notice, this list of conditions and the following disclaimer in the
     17  *    documentation and/or other materials provided with the distribution.
     18  *
     19  * 3. Neither the name of the Institute nor the names of its contributors
     20  *    may be used to endorse or promote products derived from this software
     21  *    without specific prior written permission.
     22  *
     23  * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
     24  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     25  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     26  * ARE DISCLAIMED.  IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
     27  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     28  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     29  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     30  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     31  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     32  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     33  * SUCH DAMAGE.
     34  */
     35 
     36 #include <config.h>
     37 #include <krb5/roken.h>
     38 #include <err.h>
     39 
     40 #include <evp.h>
     41 
     42 struct tests {
     43     const char *password;
     44     const char *salt;
     45     int iterations;
     46     const void *pbkdf2_128;
     47     const void *pbkdf2_256;
     48 };
     49 
     50 
     51 const struct tests pkcs5_tests[] = {
     52     { "password",
     53       "ATHENA.MIT.EDUraeburn",
     54       1,
     55       "\xcd\xed\xb5\x28\x1b\xb2\xf8\x01\x56\x5a\x11\x22\xb2\x56\x35\x15",
     56       "\xcd\xed\xb5\x28\x1b\xb2\xf8\x01\x56\x5a\x11\x22\xb2\x56\x35\x15"
     57       "\x0a\xd1\xf7\xa0\x4b\xb9\xf3\xa3\x33\xec\xc0\xe2\xe1\xf7\x08\x37"
     58     },
     59     { "password",
     60       "ATHENA.MIT.EDUraeburn",
     61       2,
     62       "\x01\xdb\xee\x7f\x4a\x9e\x24\x3e\x98\x8b\x62\xc7\x3c\xda\x93\x5d",
     63       "\x01\xdb\xee\x7f\x4a\x9e\x24\x3e\x98\x8b\x62\xc7\x3c\xda\x93\x5d"
     64       "\xa0\x53\x78\xb9\x32\x44\xec\x8f\x48\xa9\x9e\x61\xad\x79\x9d\x86"
     65     },
     66     { "password",
     67       "ATHENA.MIT.EDUraeburn",
     68       1200,
     69       "\x5c\x08\xeb\x61\xfd\xf7\x1e\x4e\x4e\xc3\xcf\x6b\xa1\xf5\x51\x2b",
     70       "\x5c\x08\xeb\x61\xfd\xf7\x1e\x4e\x4e\xc3\xcf\x6b\xa1\xf5\x51\x2b"
     71       "\xa7\xe5\x2d\xdb\xc5\xe5\x14\x2f\x70\x8a\x31\xe2\xe6\x2b\x1e\x13"
     72     },
     73     {
     74 	"password", "\x12\x34\x56\x78\x78\x56\x34\x12",
     75 	5,
     76 	"\xd1\xda\xa7\x86\x15\xf2\x87\xe6\xa1\xc8\xb1\x20\xd7\x06\x2a\x49",
     77 	"\xd1\xda\xa7\x86\x15\xf2\x87\xe6\xa1\xc8\xb1\x20\xd7\x06\x2a\x49"
     78 	"\x3f\x98\xd2\x03\xe6\xbe\x49\xa6\xad\xf4\xfa\x57\x4b\x6e\x64\xee"
     79     },
     80     {
     81 	"XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX",
     82 	"pass phrase equals block size",
     83 	1200,
     84 	"\x13\x9c\x30\xc0\x96\x6b\xc3\x2b\xa5\x5f\xdb\xf2\x12\x53\x0a\xc9",
     85 	"\x13\x9c\x30\xc0\x96\x6b\xc3\x2b\xa5\x5f\xdb\xf2\x12\x53\x0a\xc9"
     86 	"\xc5\xec\x59\xf1\xa4\x52\xf5\xcc\x9a\xd9\x40\xfe\xa0\x59\x8e\xd1"
     87     },
     88     {
     89 	"XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX",
     90 	"pass phrase exceeds block size",
     91 	1200,
     92 	"\x9c\xca\xd6\xd4\x68\x77\x0c\xd5\x1b\x10\xe6\xa6\x87\x21\xbe\x61",
     93 	"\x9c\xca\xd6\xd4\x68\x77\x0c\xd5\x1b\x10\xe6\xa6\x87\x21\xbe\x61"
     94 	"\x1a\x8b\x4d\x28\x26\x01\xdb\x3b\x36\xbe\x92\x46\x91\x5e\xc8\x2a"
     95     },
     96     {
     97 	"\xf0\x9d\x84\x9e" /* g-clef */,
     98 	"EXAMPLE.COMpianist",
     99 	50,
    100 	"\x6b\x9c\xf2\x6d\x45\x45\x5a\x43\xa5\xb8\xbb\x27\x6a\x40\x3b\x39",
    101 	"\x6b\x9c\xf2\x6d\x45\x45\x5a\x43\xa5\xb8\xbb\x27\x6a\x40\x3b\x39"
    102 	"\xe7\xfe\x37\xa0\xc4\x1e\x02\xc2\x81\xff\x30\x69\xe1\xe9\x4f\x52"
    103     }
    104 };
    105 
    106 static int
    107 test_pkcs5_pbe2(const struct tests *t)
    108 {
    109     unsigned char key[32];
    110     int ret, error = 0;
    111 
    112     ret = PKCS5_PBKDF2_HMAC(t->password, strlen(t->password),
    113 			    t->salt, strlen(t->salt),
    114 			    t->iterations, EVP_sha1(),
    115 			    16, key);
    116     if (ret != 1)
    117 	errx(1, "PKCS5_PBKDF2_HMAC: %d", ret);
    118 
    119     if (memcmp(t->pbkdf2_128, key, 16) != 0) {
    120 	printf("incorrect 128 key\n");
    121 	error++;
    122     }
    123 
    124     ret = PKCS5_PBKDF2_HMAC(t->password, strlen(t->password),
    125 			    t->salt, strlen(t->salt),
    126 			    t->iterations, EVP_sha1(),
    127 			    32, key);
    128     if (ret != 1)
    129 	errx(1, "PKCS5_PBKDF2_HMAC: %d", ret);
    130 
    131     if (memcmp(t->pbkdf2_256, key, 32) != 0) {
    132 	printf("incorrect 256 key\n");
    133 	error++;
    134     }
    135 
    136     return error;
    137 }
    138 
    139 int
    140 main(int argc, char **argv)
    141 {
    142     int ret = 0;
    143     int i;
    144 
    145     for (i = 0; i < sizeof(pkcs5_tests)/sizeof(pkcs5_tests[0]); i++)
    146 	ret += test_pkcs5_pbe2(&pkcs5_tests[i]);
    147 
    148     return ret;
    149 }
    150