sl@0: /*
sl@0: * Copyright (c) 2005-2009 Nokia Corporation and/or its subsidiary(-ies).
sl@0: * All rights reserved.
sl@0: * This component and the accompanying materials are made available
sl@0: * under the terms of the License "Eclipse Public License v1.0"
sl@0: * which accompanies this distribution, and is available
sl@0: * at the URL "http://www.eclipse.org/legal/epl-v10.html".
sl@0: *
sl@0: * Initial Contributors:
sl@0: * Nokia Corporation - initial contribution.
sl@0: *
sl@0: * Contributors:
sl@0: *
sl@0: * Description: 
sl@0: * Generates DSA test vectors.
sl@0: *
sl@0: */
sl@0: 
sl@0: 
sl@0: 
sl@0: 
sl@0: /**
sl@0:  @file
sl@0: */
sl@0: 
sl@0: #include <stdio.h>
sl@0: #include <openssl/crypto.h>
sl@0: #include <openssl/rand.h>
sl@0: #include <openssl/dsa.h>
sl@0: #include "utils.h"
sl@0: 
sl@0: /*
sl@0:  * The DSA keys have been choosen from randomly generated ones so that either
sl@0:  * the 2nd or 3rd most significant bit of q is set - this is so that a
sl@0:  * particular path is followed when the signing procedure generates k, for which
sl@0:  * our function that generates a random number in a certain range is equivalent
sl@0:  * to the openssl one.
sl@0:  *
sl@0:  * This is nasty, but it means we don't have to change the openssl code.
sl@0:  */
sl@0: 
sl@0: static DSA* createDSAKey1()
sl@0: 	{
sl@0: 	unsigned char p_data[] =
sl@0: 		"\x8d\xf2\xa4\x94\x49\x22\x76\xaa\x3d\x25\x75\x9b\xb0\x68\x69\xcb"
sl@0: 		"\xea\xc0\xd8\x3a\xfb\x8d\x0c\xf7\xcb\xb8\x32\x4f\x0d\x78\x82\xe5"
sl@0: 		"\xd0\x76\x2f\xc5\xb7\x21\x0e\xaf\xc2\xe9\xad\xac\x32\xab\x7a\xac"
sl@0: 		"\x49\x69\x3d\xfb\xf8\x37\x24\xc2\xec\x07\x36\xee\x31\xc8\x02\x91";
sl@0: 
sl@0: 	int p_data_len = 64;
sl@0: 
sl@0: 	unsigned char q_data[] =
sl@0: 		"\xc7\x73\x21\x8c\x73\x7e\xc8\xee\x99\x3b\x4f\x2d\xed\x30\xf4\x8e"
sl@0: 		"\xda\xce\x91\x5f";
sl@0: 
sl@0: 	int q_data_len = 20;
sl@0: 
sl@0: 	unsigned char g_data[] =
sl@0: 		"\x62\x6d\x02\x78\x39\xea\x0a\x13\x41\x31\x63\xa5\x5b\x4c\xb5\x00"
sl@0: 		"\x29\x9d\x55\x22\x95\x6c\xef\xcb\x3b\xff\x10\xf3\x99\xce\x2c\x2e"
sl@0: 		"\x71\xcb\x9d\xe5\xfa\x24\xba\xbf\x58\xe5\xb7\x95\x21\x92\x5c\x9c"
sl@0: 		"\xc4\x2e\x9f\x6f\x46\x4b\x08\x8c\xc5\x72\xaf\x53\xe6\xd7\x88\x02";
sl@0: 
sl@0: 	int g_data_len = 64;
sl@0: 
sl@0: 	unsigned char priv_key_data[] =
sl@0: 		"\xc2\x5f\xb4\x81\xd7\x9c\x07\x30\x97\xc2\x1d\x0c\xb1\xd7\x07\x2f"
sl@0: 		"\x04\x1d\xbb\x89";
sl@0: 
sl@0: 	int priv_key_data_len = 20;
sl@0: 
sl@0: 	unsigned char pub_key_data[] =
sl@0: 		"\x2d\x52\x1e\x27\x37\xe7\xdb\xdb\xd1\xe4\x7a\xb6\x79\xc5\xae\x69"
sl@0: 		"\xe1\x25\x37\xe9\x96\xb1\x81\xba\xf0\xb8\x85\x0f\x84\xc8\x2b\x9e"
sl@0: 		"\xf5\xb8\xb6\xc2\xb2\x22\x1b\xb5\xa9\xd0\x58\x66\x32\x5a\xb1\x62"
sl@0: 		"\xae\xb7\x13\x68\xbd\xe4\xca\xa0\xf6\x68\x96\x3c\x7d\x1a\x43\x52";
sl@0: 
sl@0: 	int pub_key_data_len = 64;
sl@0: 
sl@0: 	DSA* key = DSA_new();
sl@0: 	key->p = BN_new();
sl@0: 	key->q = BN_new();
sl@0: 	key->g = BN_new();
sl@0: 	key->priv_key = BN_new();
sl@0: 	key->pub_key = BN_new();
sl@0: 
sl@0: 	BN_bin2bn(p_data, p_data_len, key->p);
sl@0: 	BN_bin2bn(q_data, q_data_len, key->q);
sl@0: 	BN_bin2bn(g_data, g_data_len, key->g);
sl@0: 	BN_bin2bn(pub_key_data, pub_key_data_len, key->pub_key);
sl@0: 	BN_bin2bn(priv_key_data, priv_key_data_len, key->priv_key);
sl@0: 
sl@0: 	return key;
sl@0: 	}
sl@0: 
sl@0: static DSA* createDSAKey2()
sl@0: 	{
sl@0: 	unsigned char p_data[] =
sl@0: 		"\x8d\xf2\xa4\x94\x49\x22\x76\xaa\x3d\x25\x75\x9b\xb0\x68\x69\xcb"
sl@0: 		"\xea\xc0\xd8\x3a\xfb\x8d\x0c\xf7\xcb\xb8\x32\x4f\x0d\x78\x82\xe5"
sl@0: 		"\xd0\x76\x2f\xc5\xb7\x21\x0e\xaf\xc2\xe9\xad\xac\x32\xab\x7a\xac"
sl@0: 		"\x49\x69\x3d\xfb\xf8\x37\x24\xc2\xec\x07\x36\xee\x31\xc8\x02\x91";
sl@0: 
sl@0: 	int p_data_len = 64;
sl@0: 
sl@0: 	unsigned char q_data[] =
sl@0: 		"\xc7\x73\x21\x8c\x73\x7e\xc8\xee\x99\x3b\x4f\x2d\xed\x30\xf4\x8e"
sl@0: 		"\xda\xce\x91\x5f";
sl@0: 
sl@0: 	int q_data_len = 20;
sl@0: 
sl@0: 	unsigned char g_data[] =
sl@0: 		"\x62\x6d\x02\x78\x39\xea\x0a\x13\x41\x31\x63\xa5\x5b\x4c\xb5\x00"
sl@0: 		"\x29\x9d\x55\x22\x95\x6c\xef\xcb\x3b\xff\x10\xf3\x99\xce\x2c\x2e"
sl@0: 		"\x71\xcb\x9d\xe5\xfa\x24\xba\xbf\x58\xe5\xb7\x95\x21\x92\x5c\x9c"
sl@0: 		"\xc4\x2e\x9f\x6f\x46\x4b\x08\x8c\xc5\x72\xaf\x53\xe6\xd7\x88\x02";
sl@0: 
sl@0: 	int g_data_len = 64;
sl@0: 
sl@0: 	unsigned char priv_key_data[] =
sl@0: 		"\x0f\x36\x53\xf7\x51\xa7\x04\x6e\x0b\x52\x30\xfe\x15\x7c\xa3\x3e"
sl@0: 		"\x03\xf0\x84\x73";
sl@0: 
sl@0: 	int priv_key_data_len = 20;
sl@0: 
sl@0: 	unsigned char pub_key_data[] =
sl@0: 		"\x7f\x9a\xd6\x6d\x4d\xa9\xb0\x0e\x71\x76\x04\xc4\xdb\x3b\x96\x93"
sl@0: 		"\x6b\x6c\xa6\x16\xa5\x6b\xb6\xe6\x23\x26\xc7\xf5\xd4\xd6\x5b\x06"
sl@0: 		"\x6c\x10\x47\x0a\xc2\xf2\x1d\xc1\x7b\x39\x54\x6d\x84\x99\x40\xd1"
sl@0: 		"\x7e\xb0\xb5\x17\xc1\x17\xcd\xa0\x78\x0c\xc1\x67\xf1\x57\x83\x2c";
sl@0: 
sl@0: 	int pub_key_data_len = 64;
sl@0: 
sl@0: 	DSA* key = DSA_new();
sl@0: 	key->p = BN_new();
sl@0: 	key->q = BN_new();
sl@0: 	key->g = BN_new();
sl@0: 	key->priv_key = BN_new();
sl@0: 	key->pub_key = BN_new();
sl@0: 
sl@0: 	BN_bin2bn(p_data, p_data_len, key->p);
sl@0: 	BN_bin2bn(q_data, q_data_len, key->q);
sl@0: 	BN_bin2bn(g_data, g_data_len, key->g);
sl@0: 	BN_bin2bn(pub_key_data, pub_key_data_len, key->pub_key);
sl@0: 	BN_bin2bn(priv_key_data, priv_key_data_len, key->priv_key);
sl@0: 
sl@0: 	return key;
sl@0: 	}
sl@0: 
sl@0: static DSA* createDSAKey3()
sl@0: 	{
sl@0: 	unsigned char p_data[] =
sl@0: 		"\xcf\x62\x62\xfb\x7e\x7d\xc9\xc3\x7b\x4b\xa3\x62\x02\x1c\xfd\xb0"
sl@0: 		"\xcc\xd7\xbe\x39\xba\x89\xfc\x86\xf4\x9b\x29\xee\xe8\xee\x47\x23"
sl@0: 		"\xa8\x36\xd5\xbc\x3f\x31\xfe\x75\xc9\xcc\xc2\xa4\x49\x1d\x44\xc2"
sl@0: 		"\xb2\x7a\x71\x45\xd8\xcd\x84\x41\xe5\x8a\x94\xaa\x02\x0f\xd9\x03";
sl@0: 
sl@0: 	int p_data_len = 64;
sl@0: 
sl@0: 	unsigned char q_data[] =
sl@0: 		"\xfe\xf0\xae\xe8\x2a\x1c\x4b\xdb\xbb\xd7\xdf\x3b\xfa\xc9\x63\xfb"
sl@0: 		"\x6d\xfc\x1e\xe7";
sl@0: 
sl@0: 	int q_data_len = 20;
sl@0: 
sl@0: 	unsigned char g_data[] =
sl@0: 		"\x3b\x48\xa9\x2d\x82\xde\x8c\x21\x81\x09\xf8\x78\xae\xfc\x6a\xf5"
sl@0: 		"\x0e\x2a\x90\x3d\xfb\x64\x90\x6f\x0d\xbc\xfd\x67\x4e\x2c\x56\x00"
sl@0: 		"\xa3\x80\x25\x8a\x00\x26\x62\x10\xdc\xb6\xaa\x11\xa6\x36\x8c\x19"
sl@0: 		"\xb9\x2a\xcc\x00\xca\x84\xd5\xeb\x8f\x9b\x50\x08\x2d\x56\x4b\x37";
sl@0: 
sl@0: 	int g_data_len = 64;
sl@0: 
sl@0: 	unsigned char priv_key_data[] =
sl@0: 		"\x8f\xf4\xb0\xe8\x16\x94\xcb\x45\xaf\x26\xfa\x3b\x52\x96\xb3\xe9"
sl@0: 		"\xc9\x41\xce\x18";
sl@0: 
sl@0: 	int priv_key_data_len = 20;
sl@0: 
sl@0: 	unsigned char pub_key_data[] =
sl@0: 		"\x4e\x31\xab\x0e\x9b\xd5\x16\xaf\xf5\xc7\xf8\xe3\x1d\x01\x20\x90"
sl@0: 		"\x3e\x11\x11\x5f\xf2\x22\x46\x5f\x08\xbb\x9e\x36\x82\xdc\xfb\x33"
sl@0: 		"\xf9\xaa\xa5\xe9\xa0\x12\x16\x65\xc4\xbc\x7c\x6a\xf8\xb3\xc8\x8c"
sl@0: 		"\x2e\x45\xcc\x00\xaa\x7b\x4d\xae\xae\x9a\x1d\x37\x75\xb2\xe6\x86";
sl@0: 
sl@0: 	int pub_key_data_len = 64;
sl@0: 
sl@0: 	DSA* key = DSA_new();
sl@0: 	key->p = BN_new();
sl@0: 	key->q = BN_new();
sl@0: 	key->g = BN_new();
sl@0: 	key->priv_key = BN_new();
sl@0: 	key->pub_key = BN_new();
sl@0: 
sl@0: 	BN_bin2bn(p_data, p_data_len, key->p);
sl@0: 	BN_bin2bn(q_data, q_data_len, key->q);
sl@0: 	BN_bin2bn(g_data, g_data_len, key->g);
sl@0: 	BN_bin2bn(pub_key_data, pub_key_data_len, key->pub_key);
sl@0: 	BN_bin2bn(priv_key_data, priv_key_data_len, key->priv_key);
sl@0: 
sl@0: 	return key;
sl@0: 	}
sl@0: 
sl@0: static int digest_len = 20;
sl@0: 
sl@0: static unsigned char digest1[]="12345678901234567890";
sl@0: 
sl@0: static unsigned char digest2[] =
sl@0:         "\xb1\xcd\x52\x66\x6d\x22\x60\x16\xd3\x75\x8e\x96\xa1\xff\xfa\xbc"
sl@0:         "\x1b\x9a\xe2\xd7";
sl@0: 
sl@0: static unsigned char digest3[] =
sl@0:         "\x39\x86\x53\xec\xae\xf6\xd7\x7a\x8a\x67\x8a\x74\x20\x30\x3b\xc9"
sl@0:         "\xda\xc9\xf3\xa7";
sl@0: /**
sl@0:  * Print DSA public key.
sl@0:  */
sl@0: 
sl@0: void printDSAPublicKey(DSA* key)
sl@0:     {    
sl@0:     printBNElement("keyP", key->p);
sl@0:     printBNElement("keyQ", key->q);
sl@0:     printBNElement("keyG", key->g);
sl@0:     printBNElement("keyY", key->pub_key);
sl@0:     }
sl@0: 
sl@0: /**
sl@0:  * Print DSA private key.
sl@0:  */
sl@0: 
sl@0: void printDSAPrivateKey(DSA* key)
sl@0:     {    
sl@0:     printBNElement("keyP", key->p);
sl@0:     printBNElement("keyQ", key->q);
sl@0:     printBNElement("keyG", key->g);
sl@0:     printBNElement("keyX", key->priv_key);
sl@0:     }
sl@0: 
sl@0: /**
sl@0:  * Sign a message - DSA deals with generating a digest for us.
sl@0:  */
sl@0: 
sl@0: static void generateSignatureVector(DSA* key, unsigned char* mess, int len, BOOL passes)
sl@0:     {
sl@0:     unsigned char buf[len];
sl@0: 	unsigned int siglen;
sl@0:     int err;
sl@0:     DSA_SIG* sig;
sl@0:  
sl@0: 	Mem::Copy(buf, mess, len);
sl@0: 
sl@0:     setOurRandom();
sl@0:     sig = DSA_do_sign(buf, len, key);
sl@0:     if (sig == NULL)
sl@0:         processError();
sl@0: 
sl@0:     if (!passes)
sl@0:         scramble(buf, len);
sl@0: 
sl@0:     printActionHeader("DSA test vector", "DSASignVector");
sl@0:     printDSAPrivateKey(key);
sl@0:     printHexElement("digest", buf, len);
sl@0:     printBNElement("sigR", sig->r);
sl@0:     printBNElement("sigS", sig->s);
sl@0:     printActionFooter(passes);
sl@0: 
sl@0:     printActionHeader("DSA test vector", "DSAVerifyVector");
sl@0:     printDSAPublicKey(key);
sl@0:     printHexElement("digest", buf, len);
sl@0:     printBNElement("sigR", sig->r);
sl@0:     printBNElement("sigS", sig->s);
sl@0:     printActionFooter(passes);
sl@0: 
sl@0:     DSA_SIG_free(sig);
sl@0:     }
sl@0: 
sl@0: 
sl@0: int main(int argc, char **argv)
sl@0: 	{
sl@0: 	DSA* key1 = createDSAKey1();
sl@0: 	DSA* key2 = createDSAKey2();
sl@0: 	DSA* key3 = createDSAKey3();
sl@0: 
sl@0:     setOurRandom();
sl@0:     testOurRandom();
sl@0: 
sl@0:     generateSignatureVector(key1, digest1, digest_len, TRUE);
sl@0:     generateSignatureVector(key2, digest1, digest_len, TRUE);
sl@0:     generateSignatureVector(key3, digest1, digest_len, TRUE);
sl@0: 
sl@0:     generateSignatureVector(key1, digest2, digest_len, TRUE);
sl@0:     generateSignatureVector(key2, digest2, digest_len, TRUE);
sl@0:     generateSignatureVector(key3, digest2, digest_len, TRUE);
sl@0: 
sl@0:     generateSignatureVector(key1, digest3, digest_len, TRUE);
sl@0:     generateSignatureVector(key2, digest3, digest_len, TRUE);
sl@0:     generateSignatureVector(key3, digest3, digest_len, TRUE);
sl@0: 
sl@0:     generateSignatureVector(key1, digest1, digest_len, FALSE);
sl@0:     generateSignatureVector(key2, digest1, digest_len, FALSE);
sl@0:     generateSignatureVector(key3, digest1, digest_len, FALSE);
sl@0: 
sl@0: 	return 0;
sl@0: 	}
sl@0: