/** @file \r
Application for Cryptographic Primitives Validation.\r
\r
-Copyright (c) 2009 - 2010, Intel Corporation. All rights reserved.<BR>\r
+Copyright (c) 2009 - 2011, Intel Corporation. All rights reserved.<BR>\r
This program and the accompanying materials\r
are licensed and made available under the terms and conditions of the BSD License\r
which accompanies this distribution. The full text of the license may be found at\r
\r
**/\r
\r
-#include <Uefi.h>\r
-#include <Library/BaseLib.h>\r
-#include <Library/BaseMemoryLib.h>\r
-#include <Library/MemoryAllocationLib.h>\r
-#include <Library/UefiLib.h>\r
-#include <Library/UefiApplicationEntryPoint.h>\r
-#include <Library/DebugLib.h>\r
-\r
-#include <Library/BaseCryptLib.h>\r
-\r
-//\r
-// Max Known Digest Size is SHA512 Output (64 bytes) by far\r
-//\r
-#define MAX_DIGEST_SIZE 64\r
-\r
-//\r
-// Message string for digest validation\r
-//\r
-GLOBAL_REMOVE_IF_UNREFERENCED CONST CHAR8 *HashData = "abc";\r
-\r
-//\r
-// Result for MD5("abc"). (From "A.5 Test suite" of IETF RFC1321)\r
-//\r
-GLOBAL_REMOVE_IF_UNREFERENCED CONST UINT8 Md5Digest[MD5_DIGEST_SIZE] = {\r
- 0x90, 0x01, 0x50, 0x98, 0x3c, 0xd2, 0x4f, 0xb0, 0xd6, 0x96, 0x3f, 0x7d, 0x28, 0xe1, 0x7f, 0x72\r
- };\r
-\r
-//\r
-// Result for SHA-1("abc"). (From "A.1 SHA-1 Example" of NIST FIPS 180-2)\r
-//\r
-GLOBAL_REMOVE_IF_UNREFERENCED CONST UINT8 Sha1Digest[SHA1_DIGEST_SIZE] = {\r
- 0xa9, 0x99, 0x3e, 0x36, 0x47, 0x06, 0x81, 0x6a, 0xba, 0x3e, 0x25, 0x71, 0x78, 0x50, 0xc2, 0x6c,\r
- 0x9c, 0xd0, 0xd8, 0x9d\r
- };\r
-\r
-//\r
-// Result for SHA-256("abc"). (From "B.1 SHA-256 Example" of NIST FIPS 180-2)\r
-//\r
-GLOBAL_REMOVE_IF_UNREFERENCED CONST UINT8 Sha256Digest[SHA256_DIGEST_SIZE] = {\r
- 0xba, 0x78, 0x16, 0xbf, 0x8f, 0x01, 0xcf, 0xea, 0x41, 0x41, 0x40, 0xde, 0x5d, 0xae, 0x22, 0x23,\r
- 0xb0, 0x03, 0x61, 0xa3, 0x96, 0x17, 0x7a, 0x9c, 0xb4, 0x10, 0xff, 0x61, 0xf2, 0x00, 0x15, 0xad\r
- };\r
-\r
-//\r
-// RSA PKCS#1 Validation Data from OpenSSL "Fips_rsa_selftest.c"\r
-//\r
-\r
-// Public Modulus of RSA Key\r
-GLOBAL_REMOVE_IF_UNREFERENCED CONST UINT8 RsaN[] = {\r
- 0xBB, 0xF8, 0x2F, 0x09, 0x06, 0x82, 0xCE, 0x9C, 0x23, 0x38, 0xAC, 0x2B, 0x9D, 0xA8, 0x71, 0xF7, \r
- 0x36, 0x8D, 0x07, 0xEE, 0xD4, 0x10, 0x43, 0xA4, 0x40, 0xD6, 0xB6, 0xF0, 0x74, 0x54, 0xF5, 0x1F,\r
- 0xB8, 0xDF, 0xBA, 0xAF, 0x03, 0x5C, 0x02, 0xAB, 0x61, 0xEA, 0x48, 0xCE, 0xEB, 0x6F, 0xCD, 0x48,\r
- 0x76, 0xED, 0x52, 0x0D, 0x60, 0xE1, 0xEC, 0x46, 0x19, 0x71, 0x9D, 0x8A, 0x5B, 0x8B, 0x80, 0x7F,\r
- 0xAF, 0xB8, 0xE0, 0xA3, 0xDF, 0xC7, 0x37, 0x72, 0x3E, 0xE6, 0xB4, 0xB7, 0xD9, 0x3A, 0x25, 0x84,\r
- 0xEE, 0x6A, 0x64, 0x9D, 0x06, 0x09, 0x53, 0x74, 0x88, 0x34, 0xB2, 0x45, 0x45, 0x98, 0x39, 0x4E,\r
- 0xE0, 0xAA, 0xB1, 0x2D, 0x7B, 0x61, 0xA5, 0x1F, 0x52, 0x7A, 0x9A, 0x41, 0xF6, 0xC1, 0x68, 0x7F,\r
- 0xE2, 0x53, 0x72, 0x98, 0xCA, 0x2A, 0x8F, 0x59, 0x46, 0xF8, 0xE5, 0xFD, 0x09, 0x1D, 0xBD, 0xCB\r
- };\r
-\r
-// Public Exponent of RSA Key\r
-GLOBAL_REMOVE_IF_UNREFERENCED CONST UINT8 RsaE[] = { 0x11 };\r
-\r
-// Known Answer Test (KAT) Data for RSA PKCS#1 Signing\r
-GLOBAL_REMOVE_IF_UNREFERENCED CONST CHAR8 RsaSignData[] = "OpenSSL FIPS 140-2 Public Key RSA KAT";\r
-\r
-// Known Signature for the above message, under SHA-1 Digest\r
-GLOBAL_REMOVE_IF_UNREFERENCED CONST UINT8 RsaPkcs1Signature[] = {\r
- 0x71, 0xEE, 0x1A, 0xC0, 0xFE, 0x01, 0x93, 0x54, 0x79, 0x5C, 0xF2, 0x4C, 0x4A, 0xFD, 0x1A, 0x05,\r
- 0x8F, 0x64, 0xB1, 0x6D, 0x61, 0x33, 0x8D, 0x9B, 0xE7, 0xFD, 0x60, 0xA3, 0x83, 0xB5, 0xA3, 0x51,\r
- 0x55, 0x77, 0x90, 0xCF, 0xDC, 0x22, 0x37, 0x8E, 0xD0, 0xE1, 0xAE, 0x09, 0xE3, 0x3D, 0x1E, 0xF8,\r
- 0x80, 0xD1, 0x8B, 0xC2, 0xEC, 0x0A, 0xD7, 0x6B, 0x88, 0x8B, 0x8B, 0xA1, 0x20, 0x22, 0xBE, 0x59,\r
- 0x5B, 0xE0, 0x23, 0x24, 0xA1, 0x49, 0x30, 0xBA, 0xA9, 0x9E, 0xE8, 0xB1, 0x8A, 0x62, 0x16, 0xBF,\r
- 0x4E, 0xCA, 0x2E, 0x4E, 0xBC, 0x29, 0xA8, 0x67, 0x13, 0xB7, 0x9F, 0x1D, 0x04, 0x44, 0xE5, 0x5F,\r
- 0x35, 0x07, 0x11, 0xBC, 0xED, 0x19, 0x37, 0x21, 0xCF, 0x23, 0x48, 0x1F, 0x72, 0x05, 0xDE, 0xE6,\r
- 0xE8, 0x7F, 0x33, 0x8A, 0x76, 0x4B, 0x2F, 0x95, 0xDF, 0xF1, 0x5F, 0x84, 0x80, 0xD9, 0x46, 0xB4\r
- };\r
-\r
-/**\r
- Validate MSFT Authenticode using PKCS#7 Verification Interfaces.\r
-\r
- @return EFI_SUCCESS Validation succeeds. \r
-\r
-**/\r
-BOOLEAN\r
-AuthenticodeVerify (\r
- VOID\r
- );\r
-\r
-/**\r
- Validate UEFI-OpenSSL Digest Interfaces.\r
-\r
- @return EFI_SUCCESS Validation succeeded.\r
-\r
-**/\r
-EFI_STATUS\r
-ValidateCryptDigest (\r
- VOID\r
- )\r
-{\r
- UINTN CtxSize;\r
- VOID *HashCtx;\r
- UINTN DataSize;\r
- UINT8 Digest[MAX_DIGEST_SIZE];\r
- UINTN Index;\r
- BOOLEAN Status;\r
-\r
- Print (L" UEFI-OpenSSL Hash Engine Testing (Hashing(\"abc\")): ");\r
- DataSize = AsciiStrLen (HashData);\r
-\r
- //\r
- // MD5 Digest Validation\r
- //\r
- ZeroMem (Digest, MAX_DIGEST_SIZE);\r
- CtxSize = Md5GetContextSize ();\r
- HashCtx = AllocatePool (CtxSize);\r
- Status = Md5Init (HashCtx);\r
- Status = Md5Update (HashCtx, HashData, DataSize);\r
- Status = Md5Final (HashCtx, Digest);\r
- FreePool (HashCtx);\r
- Print (L"\n - MD5 Digest: \n = 0x");\r
- for (Index = 0; Index < MD5_DIGEST_SIZE; Index++) {\r
- Print (L"%02x", Digest[Index]);\r
- }\r
- if (CompareMem (Digest, Md5Digest, MD5_DIGEST_SIZE) == 0) {\r
- Print (L" [Pass]");\r
- } else {\r
- Print (L" [Failed]");\r
- }\r
-\r
- //\r
- // SHA-1 Digest Validation\r
- //\r
- ZeroMem (Digest, MAX_DIGEST_SIZE);\r
- CtxSize = Sha1GetContextSize ();\r
- HashCtx = AllocatePool (CtxSize);\r
- Status = Sha1Init (HashCtx);\r
- Status = Sha1Update (HashCtx, HashData, DataSize);\r
- Status = Sha1Final (HashCtx, Digest);\r
- FreePool (HashCtx);\r
- Print (L"\n - SHA-1 Digest: \n = 0x");\r
- for (Index = 0; Index < SHA1_DIGEST_SIZE; Index++) {\r
- Print (L"%02x", Digest[Index]);\r
- }\r
- if (CompareMem (Digest, Sha1Digest, SHA1_DIGEST_SIZE) == 0) {\r
- Print (L" [Pass]");\r
- } else {\r
- Print (L" [Failed]");\r
- }\r
-\r
- //\r
- // SHA256 Digest Validation\r
- //\r
- ZeroMem (Digest, MAX_DIGEST_SIZE);\r
- CtxSize = Sha256GetContextSize ();\r
- HashCtx = AllocatePool (CtxSize);\r
- Status = Sha256Init (HashCtx);\r
- Status = Sha256Update (HashCtx, HashData, DataSize);\r
- Status = Sha256Final (HashCtx, Digest);\r
- FreePool (HashCtx);\r
- Print (L"\n - SHA-256 Digest: \n = 0x");\r
- for (Index = 0; Index < SHA256_DIGEST_SIZE; Index++) {\r
- Print (L"%02x", Digest[Index]);\r
- }\r
- if (CompareMem (Digest, Sha256Digest, SHA256_DIGEST_SIZE) == 0) {\r
- Print (L" [Pass]");\r
- } else {\r
- Print (L" [Failed]");\r
- } \r
-\r
- Print (L"\n");\r
- \r
- return EFI_SUCCESS;\r
-}\r
-\r
-\r
-/**\r
- Validate UEFI-OpenSSL Message Authentication Codes Interfaces.\r
-\r
- @return EFI_SUCCESS Validation succeeded. \r
-\r
-**/\r
-EFI_STATUS\r
-ValidateCryptHmac (\r
- VOID\r
- )\r
-{\r
- Print (L"\n UEFI-OpenSSL HMAC Engine Testing: ");\r
- Print (L"\n ==> No HMAC Support in Base Crypto Library!\n");\r
-\r
- return EFI_SUCCESS;\r
-}\r
-\r
-\r
-/**\r
- Validate UEFI-OpenSSL Block Ciphers (Symmetric Crypto) Interfaces.\r
-\r
- @return EFI_SUCCESS Validation succeeded.\r
-\r
-**/\r
-EFI_STATUS\r
-ValidateCryptBlockCipher (\r
- VOID\r
- )\r
-{\r
- Print (L"\n UEFI-OpenSSL Block Cipher Engine Testing: ");\r
- Print (L"\n ==> No Block Cipher Support in Base Crypto Library!\n");\r
-\r
- return EFI_SUCCESS;\r
-}\r
-\r
-\r
-/**\r
- Validate UEFI-OpenSSL RSA Interfaces.\r
-\r
- @return EFI_SUCCESS Validation succeeded.\r
-\r
-**/\r
-EFI_STATUS\r
-ValidateCryptRsa (\r
- VOID\r
- )\r
-{\r
- VOID *Rsa;\r
- UINT8 mHash[SHA1_DIGEST_SIZE];\r
- UINTN HashSize;\r
- UINTN CtxSize;\r
- VOID *Sha1Ctx;\r
- UINT8 *Signature;\r
- UINTN SigSize;\r
- BOOLEAN Status;\r
-\r
- Print (L"\n UEFI-OpenSSL RSA Engine Testing: ");\r
-\r
- //\r
- // Generate & Initialize RSA Context\r
- //\r
- Rsa = RsaNew ();\r
- Print (L"\n - Generate RSA Context .............. ");\r
- if (Rsa != NULL) {\r
- Print (L"[Pass]");\r
- } else {\r
- Print (L"[Failed]");\r
- }\r
-\r
- //\r
- // Set RSA Key Components\r
- // NOTE: Only N and E are needed to be set as RSA public key for signature verification\r
- //\r
- Print (L"\n - Set RSA Key Components ............ ");\r
- Status = RsaSetKey (Rsa, RsaKeyN, RsaN, sizeof (RsaN));\r
- Status = RsaSetKey (Rsa, RsaKeyE, RsaE, sizeof (RsaE));\r
- if (Status) {\r
- Print (L"[Pass]");\r
- } else {\r
- Print (L"[Failed]");\r
- }\r
-\r
- //\r
- // SHA-1 Digest Message for PKCS#1 Signature \r
- //\r
- Print (L"\n - Hash Original Message ............. ");\r
- HashSize = SHA1_DIGEST_SIZE;\r
- ZeroMem (mHash, HashSize);\r
- CtxSize = Sha1GetContextSize ();\r
- Sha1Ctx = AllocatePool (CtxSize);\r
- Status = Sha1Init (Sha1Ctx);\r
- Status = Sha1Update (Sha1Ctx, RsaSignData, AsciiStrLen (RsaSignData));\r
- Status = Sha1Final (Sha1Ctx, mHash);\r
- FreePool (Sha1Ctx);\r
- if (Status) {\r
- Print (L"[Pass]");\r
- } else {\r
- Print (L"[Failed]");\r
- }\r
-\r
- //\r
- // Verify RSA PKCS#1-encoded Signature\r
- //\r
- Print (L"\n - PKCS#1 Signature Verification ..... ");\r
- SigSize = sizeof (RsaPkcs1Signature);\r
- Signature = (UINT8 *)AllocatePool (SigSize);\r
- CopyMem (Signature, RsaPkcs1Signature, SigSize);\r
- Status = RsaPkcs1Verify (Rsa, mHash, HashSize, Signature, SigSize);\r
- if (Status) {\r
- Print (L"[Pass]");\r
- } else {\r
- Print (L"[Failed]");\r
- } \r
-\r
- //\r
- // Release Resources\r
- //\r
- RsaFree (Rsa);\r
- Print (L"\n - Release RSA Context ............... [Pass]");\r
-\r
- Print (L"\n");\r
-\r
- return EFI_SUCCESS;\r
-}\r
-\r
-/**\r
- Validate UEFI-OpenSSL PKCS#7 Verification Interfaces.\r
-\r
- @return EFI_SUCCESS Validation succeeded.\r
-\r
-**/\r
-EFI_STATUS\r
-ValidateAuthenticode (\r
- VOID\r
- )\r
-{\r
- Print (L"\n UEFI-OpenSSL PKCS#7-Signed-Data Testing: ");\r
-\r
- Print (L"\n - Authenticode (PKCS#7 Signed Data) Verification ... ");\r
-\r
- if (AuthenticodeVerify ()) {\r
- Print (L"[Pass]");\r
- } else {\r
- Print (L"[Failed]");\r
- } \r
-\r
- Print (L"\n");\r
-\r
- return EFI_SUCCESS;\r
-}\r
-\r
+#include "Cryptest.h"\r
\r
/**\r
Entry Point of Cryptographic Validation Utility.\r
Print (L"\nUEFI-OpenSSL Wrapper Cryptosystem Testing: \n");\r
Print (L"-------------------------------------------- \n");\r
\r
- Status = EFI_SUCCESS;\r
+ RandomSeed (NULL, 0);\r
+\r
Status = ValidateCryptDigest ();\r
+ if (EFI_ERROR (Status)) {\r
+ return Status;\r
+ }\r
+\r
Status = ValidateCryptHmac ();\r
+ if (EFI_ERROR (Status)) {\r
+ return Status;\r
+ }\r
+\r
Status = ValidateCryptBlockCipher ();\r
+ if (EFI_ERROR (Status)) {\r
+ return Status;\r
+ }\r
+\r
Status = ValidateCryptRsa ();\r
+ if (EFI_ERROR (Status)) {\r
+ return Status;\r
+ }\r
+\r
+ Status = ValidateCryptRsa2 ();\r
+ if (EFI_ERROR (Status)) {\r
+ return Status;\r
+ }\r
+\r
+ Status = ValidateCryptPkcs7 ();\r
+ if (EFI_ERROR (Status)) {\r
+ return Status;\r
+ }\r
+\r
Status = ValidateAuthenticode ();\r
+ if (EFI_ERROR (Status)) {\r
+ return Status;\r
+ }\r
+\r
+ Status = ValidateCryptDh ();\r
+ if (EFI_ERROR (Status)) {\r
+ return Status;\r
+ }\r
\r
- return Status;\r
+ Status = ValidateCryptPrng ();\r
+ if (EFI_ERROR (Status)) {\r
+ return Status;\r
+ }\r
+\r
+ return EFI_SUCCESS;\r
}\r
projects / mirror_edk2.git / blobdiff