145 lines
4.4 KiB
C
145 lines
4.4 KiB
C
/* Copyright (c) 2016, Google Inc.
|
|
*
|
|
* Permission to use, copy, modify, and/or distribute this software for any
|
|
* purpose with or without fee is hereby granted, provided that the above
|
|
* copyright notice and this permission notice appear in all copies.
|
|
*
|
|
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
|
|
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
|
|
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
|
|
* SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
|
|
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
|
|
* OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
|
|
* CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */
|
|
|
|
#include <math.h>
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
|
|
#include <openssl/crypto.h>
|
|
#include <openssl/rand.h>
|
|
|
|
#include "internal.h"
|
|
|
|
|
|
#define NTESTS 1000
|
|
|
|
static int test_keys(void) {
|
|
NEWHOPE_POLY *sk = NEWHOPE_POLY_new();
|
|
uint8_t server_key[SHA256_DIGEST_LENGTH], client_key[SHA256_DIGEST_LENGTH];
|
|
uint8_t servermsg[NEWHOPE_SERVERMSG_LENGTH];
|
|
uint8_t clientmsg[NEWHOPE_CLIENTMSG_LENGTH];
|
|
int i;
|
|
|
|
for (i = 0; i < NTESTS; i++) {
|
|
/* Alice generates a public key */
|
|
NEWHOPE_keygen(servermsg, sk);
|
|
|
|
/* Bob derives a secret key and creates a response */
|
|
if (!NEWHOPE_client_compute_key(client_key, clientmsg, servermsg,
|
|
sizeof(servermsg))) {
|
|
fprintf(stderr, "ERROR client key exchange failed\n");
|
|
return 0;
|
|
}
|
|
|
|
/* Alice uses Bob's response to get her secret key */
|
|
if (!NEWHOPE_server_compute_key(server_key, sk, clientmsg,
|
|
sizeof(clientmsg))) {
|
|
fprintf(stderr, "ERROR server key exchange failed\n");
|
|
return 0;
|
|
}
|
|
|
|
if (memcmp(server_key, client_key, SHA256_DIGEST_LENGTH) != 0) {
|
|
fprintf(stderr, "ERROR keys did not agree\n");
|
|
return 0;
|
|
}
|
|
}
|
|
|
|
NEWHOPE_POLY_free(sk);
|
|
return 1;
|
|
}
|
|
|
|
static int test_invalid_sk_a(void) {
|
|
NEWHOPE_POLY *sk = NEWHOPE_POLY_new();
|
|
uint8_t server_key[SHA256_DIGEST_LENGTH], client_key[SHA256_DIGEST_LENGTH];
|
|
uint8_t servermsg[NEWHOPE_SERVERMSG_LENGTH];
|
|
uint8_t clientmsg[NEWHOPE_CLIENTMSG_LENGTH];
|
|
int i;
|
|
|
|
for (i = 0; i < NTESTS; i++) {
|
|
/* Alice generates a public key */
|
|
NEWHOPE_keygen(servermsg, sk);
|
|
|
|
/* Bob derives a secret key and creates a response */
|
|
if (!NEWHOPE_client_compute_key(client_key, clientmsg, servermsg,
|
|
sizeof(servermsg))) {
|
|
fprintf(stderr, "ERROR client key exchange failed\n");
|
|
return 0;
|
|
}
|
|
|
|
/* Corrupt the secret key */
|
|
NEWHOPE_keygen(servermsg /* not used below */, sk);
|
|
|
|
/* Alice uses Bob's response to get her secret key */
|
|
if (!NEWHOPE_server_compute_key(server_key, sk, clientmsg,
|
|
sizeof(clientmsg))) {
|
|
fprintf(stderr, "ERROR server key exchange failed\n");
|
|
return 0;
|
|
}
|
|
|
|
if (memcmp(server_key, client_key, SHA256_DIGEST_LENGTH) == 0) {
|
|
fprintf(stderr, "ERROR invalid sk_a\n");
|
|
return 0;
|
|
}
|
|
}
|
|
|
|
NEWHOPE_POLY_free(sk);
|
|
return 1;
|
|
}
|
|
|
|
static int test_invalid_ciphertext(void) {
|
|
NEWHOPE_POLY *sk = NEWHOPE_POLY_new();
|
|
uint8_t server_key[SHA256_DIGEST_LENGTH], client_key[SHA256_DIGEST_LENGTH];
|
|
uint8_t servermsg[NEWHOPE_SERVERMSG_LENGTH];
|
|
uint8_t clientmsg[NEWHOPE_CLIENTMSG_LENGTH];
|
|
int i;
|
|
|
|
for (i = 0; i < 10; i++) {
|
|
/* Alice generates a public key */
|
|
NEWHOPE_keygen(servermsg, sk);
|
|
|
|
/* Bob derives a secret key and creates a response */
|
|
if (!NEWHOPE_client_compute_key(client_key, clientmsg, servermsg,
|
|
sizeof(servermsg))) {
|
|
fprintf(stderr, "ERROR client key exchange failed\n");
|
|
return 0;
|
|
}
|
|
|
|
/* Change some byte in the "ciphertext" */
|
|
clientmsg[42] ^= 1;
|
|
|
|
/* Alice uses Bob's response to get her secret key */
|
|
if (!NEWHOPE_server_compute_key(server_key, sk, clientmsg,
|
|
sizeof(clientmsg))) {
|
|
fprintf(stderr, "ERROR server key exchange failed\n");
|
|
return 0;
|
|
}
|
|
|
|
if (!memcmp(server_key, client_key, SHA256_DIGEST_LENGTH)) {
|
|
fprintf(stderr, "ERROR invalid clientmsg\n");
|
|
return 0;
|
|
}
|
|
}
|
|
|
|
NEWHOPE_POLY_free(sk);
|
|
return 1;
|
|
}
|
|
|
|
int main(void) {
|
|
if (!test_keys() || !test_invalid_sk_a() || !test_invalid_ciphertext()) {
|
|
return 1;
|
|
}
|
|
printf("PASS\n");
|
|
return 0;
|
|
}
|