Move FIPS RSA function definitions to fips.h
[openssl.git] / fips / rsa / fips_rsagtest.c
1 /* fips_rsagtest.c */
2 /* Written by Dr Stephen N Henson (steve@openssl.org) for the OpenSSL
3  * project 2005.
4  */
5 /* ====================================================================
6  * Copyright (c) 2005,2007 The OpenSSL Project.  All rights reserved.
7  *
8  * Redistribution and use in source and binary forms, with or without
9  * modification, are permitted provided that the following conditions
10  * are met:
11  *
12  * 1. Redistributions of source code must retain the above copyright
13  *    notice, this list of conditions and the following disclaimer. 
14  *
15  * 2. Redistributions in binary form must reproduce the above copyright
16  *    notice, this list of conditions and the following disclaimer in
17  *    the documentation and/or other materials provided with the
18  *    distribution.
19  *
20  * 3. All advertising materials mentioning features or use of this
21  *    software must display the following acknowledgment:
22  *    "This product includes software developed by the OpenSSL Project
23  *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
24  *
25  * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
26  *    endorse or promote products derived from this software without
27  *    prior written permission. For written permission, please contact
28  *    licensing@OpenSSL.org.
29  *
30  * 5. Products derived from this software may not be called "OpenSSL"
31  *    nor may "OpenSSL" appear in their names without prior written
32  *    permission of the OpenSSL Project.
33  *
34  * 6. Redistributions of any form whatsoever must retain the following
35  *    acknowledgment:
36  *    "This product includes software developed by the OpenSSL Project
37  *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
38  *
39  * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
40  * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
41  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
42  * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
43  * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
44  * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
45  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
46  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
48  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
49  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
50  * OF THE POSSIBILITY OF SUCH DAMAGE.
51  * ====================================================================
52  *
53  * This product includes cryptographic software written by Eric Young
54  * (eay@cryptsoft.com).  This product includes software written by Tim
55  * Hudson (tjh@cryptsoft.com).
56  *
57  */
58
59 #define OPENSSL_FIPSAPI
60
61 #include <stdio.h>
62 #include <ctype.h>
63 #include <string.h>
64 #include <openssl/bio.h>
65 #include <openssl/evp.h>
66 #include <openssl/hmac.h>
67 #include <openssl/err.h>
68 #include <openssl/bn.h>
69
70 #ifndef OPENSSL_FIPS
71
72 int main(int argc, char *argv[])
73 {
74     printf("No FIPS RSA support\n");
75     return(0);
76 }
77
78 #else
79
80 #include <openssl/rsa.h>
81 #include <openssl/fips.h>
82 #include "fips_utl.h"
83
84 int rsa_test(FILE *out, FILE *in);
85 static int rsa_printkey1(FILE *out, RSA *rsa,
86                 BIGNUM *Xp1, BIGNUM *Xp2, BIGNUM *Xp,
87                 BIGNUM *e);
88 static int rsa_printkey2(FILE *out, RSA *rsa,
89                 BIGNUM *Xq1, BIGNUM *Xq2, BIGNUM *Xq);
90
91 int main(int argc, char **argv)
92         {
93         FILE *in = NULL, *out = NULL;
94
95         int ret = 1;
96
97         fips_algtest_init();
98
99         if (argc == 1)
100                 in = stdin;
101         else
102                 in = fopen(argv[1], "r");
103
104         if (argc < 2)
105                 out = stdout;
106         else
107                 out = fopen(argv[2], "w");
108
109         if (!in)
110                 {
111                 fprintf(stderr, "FATAL input initialization error\n");
112                 goto end;
113                 }
114
115         if (!out)
116                 {
117                 fprintf(stderr, "FATAL output initialization error\n");
118                 goto end;
119                 }
120
121         if (!rsa_test(out, in))
122                 {
123                 fprintf(stderr, "FATAL RSAGTEST file processing error\n");
124                 goto end;
125                 }
126         else
127                 ret = 0;
128
129         end:
130
131         if (in && (in != stdin))
132                 fclose(in);
133         if (out && (out != stdout))
134                 fclose(out);
135
136         return ret;
137
138         }
139
140 #define RSA_TEST_MAXLINELEN     10240
141
142 int rsa_test(FILE *out, FILE *in)
143         {
144         char *linebuf, *olinebuf, *p, *q;
145         char *keyword, *value;
146         RSA *rsa = NULL;
147         BIGNUM *Xp1 = NULL, *Xp2 = NULL, *Xp = NULL;
148         BIGNUM *Xq1 = NULL, *Xq2 = NULL, *Xq = NULL;
149         BIGNUM *e = NULL;
150         int ret = 0;
151         int lnum = 0;
152
153         olinebuf = OPENSSL_malloc(RSA_TEST_MAXLINELEN);
154         linebuf = OPENSSL_malloc(RSA_TEST_MAXLINELEN);
155
156         if (!linebuf || !olinebuf)
157                 goto error;
158
159         while (fgets(olinebuf, RSA_TEST_MAXLINELEN, in))
160                 {
161                 lnum++;
162                 strcpy(linebuf, olinebuf);
163                 keyword = linebuf;
164                 /* Skip leading space */
165                 while (isspace((unsigned char)*keyword))
166                         keyword++;
167
168                 /* Look for = sign */
169                 p = strchr(linebuf, '=');
170
171                 /* If no = or starts with [ (for [foo = bar] line) just copy */
172                 if (!p || *keyword=='[')
173                         {
174                         if (fputs(olinebuf, out) < 0)
175                                 goto error;
176                         continue;
177                         }
178
179                 q = p - 1;
180
181                 /* Remove trailing space */
182                 while (isspace((unsigned char)*q))
183                         *q-- = 0;
184
185                 *p = 0;
186                 value = p + 1;
187
188                 /* Remove leading space from value */
189                 while (isspace((unsigned char)*value))
190                         value++;
191
192                 /* Remove trailing space from value */
193                 p = value + strlen(value) - 1;
194
195                 while (*p == '\n' || isspace((unsigned char)*p))
196                         *p-- = 0;
197
198                 if (!strcmp(keyword, "xp1"))
199                         {
200                         if (Xp1 || !do_hex2bn(&Xp1,value))
201                                 goto parse_error;
202                         }
203                 else if (!strcmp(keyword, "xp2"))
204                         {
205                         if (Xp2 || !do_hex2bn(&Xp2,value))
206                                 goto parse_error;
207                         }
208                 else if (!strcmp(keyword, "Xp"))
209                         {
210                         if (Xp || !do_hex2bn(&Xp,value))
211                                 goto parse_error;
212                         }
213                 else if (!strcmp(keyword, "xq1"))
214                         {
215                         if (Xq1 || !do_hex2bn(&Xq1,value))
216                                 goto parse_error;
217                         }
218                 else if (!strcmp(keyword, "xq2"))
219                         {
220                         if (Xq2 || !do_hex2bn(&Xq2,value))
221                                 goto parse_error;
222                         }
223                 else if (!strcmp(keyword, "Xq"))
224                         {
225                         if (Xq || !do_hex2bn(&Xq,value))
226                                 goto parse_error;
227                         }
228                 else if (!strcmp(keyword, "e"))
229                         {
230                         if (e || !do_hex2bn(&e,value))
231                                 goto parse_error;
232                         }
233                 else if (!strcmp(keyword, "p1"))
234                         continue;
235                 else if (!strcmp(keyword, "p2"))
236                         continue;
237                 else if (!strcmp(keyword, "p"))
238                         continue;
239                 else if (!strcmp(keyword, "q1"))
240                         continue;
241                 else if (!strcmp(keyword, "q2"))
242                         continue;
243                 else if (!strcmp(keyword, "q"))
244                         continue;
245                 else if (!strcmp(keyword, "n"))
246                         continue;
247                 else if (!strcmp(keyword, "d"))
248                         continue;
249                 else
250                         goto parse_error;
251
252                 fputs(olinebuf, out);
253
254                 if (e && Xp1 && Xp2 && Xp)
255                         {
256                         rsa = FIPS_rsa_new();
257                         if (!rsa)
258                                 goto error;
259                         if (!rsa_printkey1(out, rsa, Xp1, Xp2, Xp, e))
260                                 goto error;
261                         BN_free(Xp1);
262                         Xp1 = NULL;
263                         BN_free(Xp2);
264                         Xp2 = NULL;
265                         BN_free(Xp);
266                         Xp = NULL;
267                         BN_free(e);
268                         e = NULL;
269                         }
270
271                 if (rsa && Xq1 && Xq2 && Xq)
272                         {
273                         if (!rsa_printkey2(out, rsa, Xq1, Xq2, Xq))
274                                 goto error;
275                         BN_free(Xq1);
276                         Xq1 = NULL;
277                         BN_free(Xq2);
278                         Xq2 = NULL;
279                         BN_free(Xq);
280                         Xq = NULL;
281                         FIPS_rsa_free(rsa);
282                         rsa = NULL;
283                         }
284                 }
285
286         ret = 1;
287
288         error:
289
290         if (olinebuf)
291                 OPENSSL_free(olinebuf);
292         if (linebuf)
293                 OPENSSL_free(linebuf);
294
295         if (Xp1)
296                 BN_free(Xp1);
297         if (Xp2)
298                 BN_free(Xp2);
299         if (Xp)
300                 BN_free(Xp);
301         if (Xq1)
302                 BN_free(Xq1);
303         if (Xq1)
304                 BN_free(Xq1);
305         if (Xq2)
306                 BN_free(Xq2);
307         if (Xq)
308                 BN_free(Xq);
309         if (e)
310                 BN_free(e);
311         if (rsa)
312                 FIPS_rsa_free(rsa);
313
314         return ret;
315
316         parse_error:
317
318         fprintf(stderr, "FATAL parse error processing line %d\n", lnum);
319
320         goto error;
321
322         }
323
324 static int rsa_printkey1(FILE *out, RSA *rsa,
325                 BIGNUM *Xp1, BIGNUM *Xp2, BIGNUM *Xp,
326                 BIGNUM *e)
327         {
328         int ret = 0;
329         BIGNUM *p1 = NULL, *p2 = NULL;
330         p1 = BN_new();
331         p2 = BN_new();
332         if (!p1 || !p2)
333                 goto error;
334
335         if (!RSA_X931_derive_ex(rsa, p1, p2, NULL, NULL, Xp1, Xp2, Xp,
336                                                 NULL, NULL, NULL, e, NULL))
337                 goto error;
338
339         do_bn_print_name(out, "p1", p1);
340         do_bn_print_name(out, "p2", p2);
341         do_bn_print_name(out, "p", rsa->p);
342
343         ret = 1;
344
345         error:
346         if (p1)
347                 BN_free(p1);
348         if (p2)
349                 BN_free(p2);
350
351         return ret;
352         }
353
354 static int rsa_printkey2(FILE *out, RSA *rsa,
355                 BIGNUM *Xq1, BIGNUM *Xq2, BIGNUM *Xq)
356         {
357         int ret = 0;
358         BIGNUM *q1 = NULL, *q2 = NULL;
359         q1 = BN_new();
360         q2 = BN_new();
361         if (!q1 || !q2)
362                 goto error;
363
364         if (!RSA_X931_derive_ex(rsa, NULL, NULL, q1, q2, NULL, NULL, NULL,
365                                                 Xq1, Xq2, Xq, NULL, NULL))
366                 goto error;
367
368         do_bn_print_name(out, "q1", q1);
369         do_bn_print_name(out, "q2", q2);
370         do_bn_print_name(out, "q", rsa->q);
371         do_bn_print_name(out, "n", rsa->n);
372         do_bn_print_name(out, "d", rsa->d);
373
374         ret = 1;
375
376         error:
377         if (q1)
378                 BN_free(q1);
379         if (q2)
380                 BN_free(q2);
381
382         return ret;
383         }
384
385 #endif