boringssl/crypto/newhope/newhope_test.c

/* Copyright (c) 2016, Google Inc.
 *
 * Permission to use, copy, modify, and/or distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
 * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
 * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
 * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */

#include <math.h>
#include <stdio.h>
#include <string.h>

#include <openssl/crypto.h>
#include <openssl/rand.h>

#include "internal.h"


#define NTESTS 1000

static int test_keys(void) {
  NEWHOPE_POLY *sk = NEWHOPE_POLY_new();
  uint8_t server_key[SHA256_DIGEST_LENGTH], client_key[SHA256_DIGEST_LENGTH];
  uint8_t servermsg[NEWHOPE_SERVERMSG_LENGTH];
  uint8_t clientmsg[NEWHOPE_CLIENTMSG_LENGTH];
  int i;

  for (i = 0; i < NTESTS; i++) {
    /* Alice generates a public key */
    NEWHOPE_keygen(servermsg, sk);

    /* Bob derives a secret key and creates a response */
    if (!NEWHOPE_client_compute_key(client_key, clientmsg, servermsg,
                                    sizeof(servermsg))) {
      fprintf(stderr, "ERROR client key exchange failed\n");
      return 0;
    }

    /* Alice uses Bob's response to get her secret key */
    if (!NEWHOPE_server_compute_key(server_key, sk, clientmsg,
                                    sizeof(clientmsg))) {
      fprintf(stderr, "ERROR server key exchange failed\n");
      return 0;
    }

    if (memcmp(server_key, client_key, SHA256_DIGEST_LENGTH) != 0) {
      fprintf(stderr, "ERROR keys did not agree\n");
      return 0;
    }
  }

  NEWHOPE_POLY_free(sk);
  return 1;
}

static int test_invalid_sk_a(void) {
  NEWHOPE_POLY *sk = NEWHOPE_POLY_new();
  uint8_t server_key[SHA256_DIGEST_LENGTH], client_key[SHA256_DIGEST_LENGTH];
  uint8_t servermsg[NEWHOPE_SERVERMSG_LENGTH];
  uint8_t clientmsg[NEWHOPE_CLIENTMSG_LENGTH];
  int i;

  for (i = 0; i < NTESTS; i++) {
    /* Alice generates a public key */
    NEWHOPE_keygen(servermsg, sk);

    /* Bob derives a secret key and creates a response */
    if (!NEWHOPE_client_compute_key(client_key, clientmsg, servermsg,
                                    sizeof(servermsg))) {
      fprintf(stderr, "ERROR client key exchange failed\n");
      return 0;
    }

    /* Corrupt the secret key */
    NEWHOPE_keygen(servermsg /* not used below */, sk);

    /* Alice uses Bob's response to get her secret key */
    if (!NEWHOPE_server_compute_key(server_key, sk, clientmsg,
                                    sizeof(clientmsg))) {
      fprintf(stderr, "ERROR server key exchange failed\n");
      return 0;
    }

    if (memcmp(server_key, client_key, SHA256_DIGEST_LENGTH) == 0) {
      fprintf(stderr, "ERROR invalid sk_a\n");
      return 0;
    }
  }

  NEWHOPE_POLY_free(sk);
  return 1;
}

static int test_invalid_ciphertext(void) {
  NEWHOPE_POLY *sk = NEWHOPE_POLY_new();
  uint8_t server_key[SHA256_DIGEST_LENGTH], client_key[SHA256_DIGEST_LENGTH];
  uint8_t servermsg[NEWHOPE_SERVERMSG_LENGTH];
  uint8_t clientmsg[NEWHOPE_CLIENTMSG_LENGTH];
  int i;

  for (i = 0; i < 10; i++) {
    /* Alice generates a public key */
    NEWHOPE_keygen(servermsg, sk);

    /* Bob derives a secret key and creates a response */
    if (!NEWHOPE_client_compute_key(client_key, clientmsg, servermsg,
                                    sizeof(servermsg))) {
      fprintf(stderr, "ERROR client key exchange failed\n");
      return 0;
    }

    /* Change some byte in the "ciphertext" */
    clientmsg[42] ^= 1;

    /* Alice uses Bob's response to get her secret key */
    if (!NEWHOPE_server_compute_key(server_key, sk, clientmsg,
                                    sizeof(clientmsg))) {
      fprintf(stderr, "ERROR server key exchange failed\n");
      return 0;
    }

    if (!memcmp(server_key, client_key, SHA256_DIGEST_LENGTH)) {
      fprintf(stderr, "ERROR invalid clientmsg\n");
      return 0;
    }
  }

  NEWHOPE_POLY_free(sk);
  return 1;
}

int main(void) {
  if (!test_keys() || !test_invalid_sk_a() || !test_invalid_ciphertext()) {
    return 1;
  }
  printf("PASS\n");
  return 0;
}