Kev Mann / mbed-dev-OS5_10_4

RTC auf true

features/mbedtls/src/pkcs5.c@2:7aab896b1a3b, 2019-03-13 (annotated)

Committer:
kevman
Date:
Wed Mar 13 11:03:24 2019 +0000
Revision:
2:7aab896b1a3b
Parent:
0:38ceb79fef03 
2019-03-13

Who changed what in which revision?

UserRevisionLine numberNew contents of line
kevman 0:38ceb79fef03 1 /**
kevman 0:38ceb79fef03 2 * \file pkcs5.c
kevman 0:38ceb79fef03 3 *
kevman 0:38ceb79fef03 4 * \brief PKCS#5 functions
kevman 0:38ceb79fef03 5 *
kevman 0:38ceb79fef03 6 * \author Mathias Olsson <mathias@kompetensum.com>
kevman 0:38ceb79fef03 7 *
kevman 0:38ceb79fef03 8 * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved
kevman 0:38ceb79fef03 9 * SPDX-License-Identifier: Apache-2.0
kevman 0:38ceb79fef03 10 *
kevman 0:38ceb79fef03 11 * Licensed under the Apache License, Version 2.0 (the "License"); you may
kevman 0:38ceb79fef03 12 * not use this file except in compliance with the License.
kevman 0:38ceb79fef03 13 * You may obtain a copy of the License at
kevman 0:38ceb79fef03 14 *
kevman 0:38ceb79fef03 15 * http://www.apache.org/licenses/LICENSE-2.0
kevman 0:38ceb79fef03 16 *
kevman 0:38ceb79fef03 17 * Unless required by applicable law or agreed to in writing, software
kevman 0:38ceb79fef03 18 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
kevman 0:38ceb79fef03 19 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
kevman 0:38ceb79fef03 20 * See the License for the specific language governing permissions and
kevman 0:38ceb79fef03 21 * limitations under the License.
kevman 0:38ceb79fef03 22 *
kevman 0:38ceb79fef03 23 * This file is part of mbed TLS (https://tls.mbed.org)
kevman 0:38ceb79fef03 24 */
kevman 0:38ceb79fef03 25 /*
kevman 0:38ceb79fef03 26 * PKCS#5 includes PBKDF2 and more
kevman 0:38ceb79fef03 27 *
kevman 0:38ceb79fef03 28 * http://tools.ietf.org/html/rfc2898 (Specification)
kevman 0:38ceb79fef03 29 * http://tools.ietf.org/html/rfc6070 (Test vectors)
kevman 0:38ceb79fef03 30 */
kevman 0:38ceb79fef03 31
kevman 0:38ceb79fef03 32 #if !defined(MBEDTLS_CONFIG_FILE)
kevman 0:38ceb79fef03 33 #include "mbedtls/config.h"
kevman 0:38ceb79fef03 34 #else
kevman 0:38ceb79fef03 35 #include MBEDTLS_CONFIG_FILE
kevman 0:38ceb79fef03 36 #endif
kevman 0:38ceb79fef03 37
kevman 0:38ceb79fef03 38 #if defined(MBEDTLS_PKCS5_C)
kevman 0:38ceb79fef03 39
kevman 0:38ceb79fef03 40 #include "mbedtls/pkcs5.h"
kevman 0:38ceb79fef03 41
kevman 0:38ceb79fef03 42 #if defined(MBEDTLS_ASN1_PARSE_C)
kevman 0:38ceb79fef03 43 #include "mbedtls/asn1.h"
kevman 0:38ceb79fef03 44 #include "mbedtls/cipher.h"
kevman 0:38ceb79fef03 45 #include "mbedtls/oid.h"
kevman 0:38ceb79fef03 46 #endif /* MBEDTLS_ASN1_PARSE_C */
kevman 0:38ceb79fef03 47
kevman 0:38ceb79fef03 48 #include <string.h>
kevman 0:38ceb79fef03 49
kevman 0:38ceb79fef03 50 #if defined(MBEDTLS_PLATFORM_C)
kevman 0:38ceb79fef03 51 #include "mbedtls/platform.h"
kevman 0:38ceb79fef03 52 #else
kevman 0:38ceb79fef03 53 #include <stdio.h>
kevman 0:38ceb79fef03 54 #define mbedtls_printf printf
kevman 0:38ceb79fef03 55 #endif
kevman 0:38ceb79fef03 56
kevman 0:38ceb79fef03 57 #if !defined(MBEDTLS_ASN1_PARSE_C)
kevman 0:38ceb79fef03 58 int mbedtls_pkcs5_pbes2( const mbedtls_asn1_buf *pbe_params, int mode,
kevman 0:38ceb79fef03 59 const unsigned char *pwd, size_t pwdlen,
kevman 0:38ceb79fef03 60 const unsigned char *data, size_t datalen,
kevman 0:38ceb79fef03 61 unsigned char *output )
kevman 0:38ceb79fef03 62 {
kevman 0:38ceb79fef03 63 ((void) pbe_params);
kevman 0:38ceb79fef03 64 ((void) mode);
kevman 0:38ceb79fef03 65 ((void) pwd);
kevman 0:38ceb79fef03 66 ((void) pwdlen);
kevman 0:38ceb79fef03 67 ((void) data);
kevman 0:38ceb79fef03 68 ((void) datalen);
kevman 0:38ceb79fef03 69 ((void) output);
kevman 0:38ceb79fef03 70 return( MBEDTLS_ERR_PKCS5_FEATURE_UNAVAILABLE );
kevman 0:38ceb79fef03 71 }
kevman 0:38ceb79fef03 72 #else
kevman 0:38ceb79fef03 73 static int pkcs5_parse_pbkdf2_params( const mbedtls_asn1_buf *params,
kevman 0:38ceb79fef03 74 mbedtls_asn1_buf *salt, int *iterations,
kevman 0:38ceb79fef03 75 int *keylen, mbedtls_md_type_t *md_type )
kevman 0:38ceb79fef03 76 {
kevman 0:38ceb79fef03 77 int ret;
kevman 0:38ceb79fef03 78 mbedtls_asn1_buf prf_alg_oid;
kevman 0:38ceb79fef03 79 unsigned char *p = params->p;
kevman 0:38ceb79fef03 80 const unsigned char *end = params->p + params->len;
kevman 0:38ceb79fef03 81
kevman 0:38ceb79fef03 82 if( params->tag != ( MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE ) )
kevman 0:38ceb79fef03 83 return( MBEDTLS_ERR_PKCS5_INVALID_FORMAT +
kevman 0:38ceb79fef03 84 MBEDTLS_ERR_ASN1_UNEXPECTED_TAG );
kevman 0:38ceb79fef03 85 /*
kevman 0:38ceb79fef03 86 * PBKDF2-params ::= SEQUENCE {
kevman 0:38ceb79fef03 87 * salt OCTET STRING,
kevman 0:38ceb79fef03 88 * iterationCount INTEGER,
kevman 0:38ceb79fef03 89 * keyLength INTEGER OPTIONAL
kevman 0:38ceb79fef03 90 * prf AlgorithmIdentifier DEFAULT algid-hmacWithSHA1
kevman 0:38ceb79fef03 91 * }
kevman 0:38ceb79fef03 92 *
kevman 0:38ceb79fef03 93 */
kevman 0:38ceb79fef03 94 if( ( ret = mbedtls_asn1_get_tag( &p, end, &salt->len, MBEDTLS_ASN1_OCTET_STRING ) ) != 0 )
kevman 0:38ceb79fef03 95 return( MBEDTLS_ERR_PKCS5_INVALID_FORMAT + ret );
kevman 0:38ceb79fef03 96
kevman 0:38ceb79fef03 97 salt->p = p;
kevman 0:38ceb79fef03 98 p += salt->len;
kevman 0:38ceb79fef03 99
kevman 0:38ceb79fef03 100 if( ( ret = mbedtls_asn1_get_int( &p, end, iterations ) ) != 0 )
kevman 0:38ceb79fef03 101 return( MBEDTLS_ERR_PKCS5_INVALID_FORMAT + ret );
kevman 0:38ceb79fef03 102
kevman 0:38ceb79fef03 103 if( p == end )
kevman 0:38ceb79fef03 104 return( 0 );
kevman 0:38ceb79fef03 105
kevman 0:38ceb79fef03 106 if( ( ret = mbedtls_asn1_get_int( &p, end, keylen ) ) != 0 )
kevman 0:38ceb79fef03 107 {
kevman 0:38ceb79fef03 108 if( ret != MBEDTLS_ERR_ASN1_UNEXPECTED_TAG )
kevman 0:38ceb79fef03 109 return( MBEDTLS_ERR_PKCS5_INVALID_FORMAT + ret );
kevman 0:38ceb79fef03 110 }
kevman 0:38ceb79fef03 111
kevman 0:38ceb79fef03 112 if( p == end )
kevman 0:38ceb79fef03 113 return( 0 );
kevman 0:38ceb79fef03 114
kevman 0:38ceb79fef03 115 if( ( ret = mbedtls_asn1_get_alg_null( &p, end, &prf_alg_oid ) ) != 0 )
kevman 0:38ceb79fef03 116 return( MBEDTLS_ERR_PKCS5_INVALID_FORMAT + ret );
kevman 0:38ceb79fef03 117
kevman 0:38ceb79fef03 118 if( mbedtls_oid_get_md_hmac( &prf_alg_oid, md_type ) != 0 )
kevman 0:38ceb79fef03 119 return( MBEDTLS_ERR_PKCS5_FEATURE_UNAVAILABLE );
kevman 0:38ceb79fef03 120
kevman 0:38ceb79fef03 121 if( p != end )
kevman 0:38ceb79fef03 122 return( MBEDTLS_ERR_PKCS5_INVALID_FORMAT +
kevman 0:38ceb79fef03 123 MBEDTLS_ERR_ASN1_LENGTH_MISMATCH );
kevman 0:38ceb79fef03 124
kevman 0:38ceb79fef03 125 return( 0 );
kevman 0:38ceb79fef03 126 }
kevman 0:38ceb79fef03 127
kevman 0:38ceb79fef03 128 int mbedtls_pkcs5_pbes2( const mbedtls_asn1_buf *pbe_params, int mode,
kevman 0:38ceb79fef03 129 const unsigned char *pwd, size_t pwdlen,
kevman 0:38ceb79fef03 130 const unsigned char *data, size_t datalen,
kevman 0:38ceb79fef03 131 unsigned char *output )
kevman 0:38ceb79fef03 132 {
kevman 0:38ceb79fef03 133 int ret, iterations = 0, keylen = 0;
kevman 0:38ceb79fef03 134 unsigned char *p, *end;
kevman 0:38ceb79fef03 135 mbedtls_asn1_buf kdf_alg_oid, enc_scheme_oid, kdf_alg_params, enc_scheme_params;
kevman 0:38ceb79fef03 136 mbedtls_asn1_buf salt;
kevman 0:38ceb79fef03 137 mbedtls_md_type_t md_type = MBEDTLS_MD_SHA1;
kevman 0:38ceb79fef03 138 unsigned char key[32], iv[32];
kevman 0:38ceb79fef03 139 size_t olen = 0;
kevman 0:38ceb79fef03 140 const mbedtls_md_info_t *md_info;
kevman 0:38ceb79fef03 141 const mbedtls_cipher_info_t *cipher_info;
kevman 0:38ceb79fef03 142 mbedtls_md_context_t md_ctx;
kevman 0:38ceb79fef03 143 mbedtls_cipher_type_t cipher_alg;
kevman 0:38ceb79fef03 144 mbedtls_cipher_context_t cipher_ctx;
kevman 0:38ceb79fef03 145
kevman 0:38ceb79fef03 146 p = pbe_params->p;
kevman 0:38ceb79fef03 147 end = p + pbe_params->len;
kevman 0:38ceb79fef03 148
kevman 0:38ceb79fef03 149 /*
kevman 0:38ceb79fef03 150 * PBES2-params ::= SEQUENCE {
kevman 0:38ceb79fef03 151 * keyDerivationFunc AlgorithmIdentifier {{PBES2-KDFs}},
kevman 0:38ceb79fef03 152 * encryptionScheme AlgorithmIdentifier {{PBES2-Encs}}
kevman 0:38ceb79fef03 153 * }
kevman 0:38ceb79fef03 154 */
kevman 0:38ceb79fef03 155 if( pbe_params->tag != ( MBEDTLS_ASN1_CONSTRUCTED | MBEDTLS_ASN1_SEQUENCE ) )
kevman 0:38ceb79fef03 156 return( MBEDTLS_ERR_PKCS5_INVALID_FORMAT +
kevman 0:38ceb79fef03 157 MBEDTLS_ERR_ASN1_UNEXPECTED_TAG );
kevman 0:38ceb79fef03 158
kevman 0:38ceb79fef03 159 if( ( ret = mbedtls_asn1_get_alg( &p, end, &kdf_alg_oid, &kdf_alg_params ) ) != 0 )
kevman 0:38ceb79fef03 160 return( MBEDTLS_ERR_PKCS5_INVALID_FORMAT + ret );
kevman 0:38ceb79fef03 161
kevman 0:38ceb79fef03 162 // Only PBKDF2 supported at the moment
kevman 0:38ceb79fef03 163 //
kevman 0:38ceb79fef03 164 if( MBEDTLS_OID_CMP( MBEDTLS_OID_PKCS5_PBKDF2, &kdf_alg_oid ) != 0 )
kevman 0:38ceb79fef03 165 return( MBEDTLS_ERR_PKCS5_FEATURE_UNAVAILABLE );
kevman 0:38ceb79fef03 166
kevman 0:38ceb79fef03 167 if( ( ret = pkcs5_parse_pbkdf2_params( &kdf_alg_params,
kevman 0:38ceb79fef03 168 &salt, &iterations, &keylen,
kevman 0:38ceb79fef03 169 &md_type ) ) != 0 )
kevman 0:38ceb79fef03 170 {
kevman 0:38ceb79fef03 171 return( ret );
kevman 0:38ceb79fef03 172 }
kevman 0:38ceb79fef03 173
kevman 0:38ceb79fef03 174 md_info = mbedtls_md_info_from_type( md_type );
kevman 0:38ceb79fef03 175 if( md_info == NULL )
kevman 0:38ceb79fef03 176 return( MBEDTLS_ERR_PKCS5_FEATURE_UNAVAILABLE );
kevman 0:38ceb79fef03 177
kevman 0:38ceb79fef03 178 if( ( ret = mbedtls_asn1_get_alg( &p, end, &enc_scheme_oid,
kevman 0:38ceb79fef03 179 &enc_scheme_params ) ) != 0 )
kevman 0:38ceb79fef03 180 {
kevman 0:38ceb79fef03 181 return( MBEDTLS_ERR_PKCS5_INVALID_FORMAT + ret );
kevman 0:38ceb79fef03 182 }
kevman 0:38ceb79fef03 183
kevman 0:38ceb79fef03 184 if( mbedtls_oid_get_cipher_alg( &enc_scheme_oid, &cipher_alg ) != 0 )
kevman 0:38ceb79fef03 185 return( MBEDTLS_ERR_PKCS5_FEATURE_UNAVAILABLE );
kevman 0:38ceb79fef03 186
kevman 0:38ceb79fef03 187 cipher_info = mbedtls_cipher_info_from_type( cipher_alg );
kevman 0:38ceb79fef03 188 if( cipher_info == NULL )
kevman 0:38ceb79fef03 189 return( MBEDTLS_ERR_PKCS5_FEATURE_UNAVAILABLE );
kevman 0:38ceb79fef03 190
kevman 0:38ceb79fef03 191 /*
kevman 0:38ceb79fef03 192 * The value of keylen from pkcs5_parse_pbkdf2_params() is ignored
kevman 0:38ceb79fef03 193 * since it is optional and we don't know if it was set or not
kevman 0:38ceb79fef03 194 */
kevman 0:38ceb79fef03 195 keylen = cipher_info->key_bitlen / 8;
kevman 0:38ceb79fef03 196
kevman 0:38ceb79fef03 197 if( enc_scheme_params.tag != MBEDTLS_ASN1_OCTET_STRING ||
kevman 0:38ceb79fef03 198 enc_scheme_params.len != cipher_info->iv_size )
kevman 0:38ceb79fef03 199 {
kevman 0:38ceb79fef03 200 return( MBEDTLS_ERR_PKCS5_INVALID_FORMAT );
kevman 0:38ceb79fef03 201 }
kevman 0:38ceb79fef03 202
kevman 0:38ceb79fef03 203 mbedtls_md_init( &md_ctx );
kevman 0:38ceb79fef03 204 mbedtls_cipher_init( &cipher_ctx );
kevman 0:38ceb79fef03 205
kevman 0:38ceb79fef03 206 memcpy( iv, enc_scheme_params.p, enc_scheme_params.len );
kevman 0:38ceb79fef03 207
kevman 0:38ceb79fef03 208 if( ( ret = mbedtls_md_setup( &md_ctx, md_info, 1 ) ) != 0 )
kevman 0:38ceb79fef03 209 goto exit;
kevman 0:38ceb79fef03 210
kevman 0:38ceb79fef03 211 if( ( ret = mbedtls_pkcs5_pbkdf2_hmac( &md_ctx, pwd, pwdlen, salt.p, salt.len,
kevman 0:38ceb79fef03 212 iterations, keylen, key ) ) != 0 )
kevman 0:38ceb79fef03 213 {
kevman 0:38ceb79fef03 214 goto exit;
kevman 0:38ceb79fef03 215 }
kevman 0:38ceb79fef03 216
kevman 0:38ceb79fef03 217 if( ( ret = mbedtls_cipher_setup( &cipher_ctx, cipher_info ) ) != 0 )
kevman 0:38ceb79fef03 218 goto exit;
kevman 0:38ceb79fef03 219
kevman 0:38ceb79fef03 220 if( ( ret = mbedtls_cipher_setkey( &cipher_ctx, key, 8 * keylen, (mbedtls_operation_t) mode ) ) != 0 )
kevman 0:38ceb79fef03 221 goto exit;
kevman 0:38ceb79fef03 222
kevman 0:38ceb79fef03 223 if( ( ret = mbedtls_cipher_crypt( &cipher_ctx, iv, enc_scheme_params.len,
kevman 0:38ceb79fef03 224 data, datalen, output, &olen ) ) != 0 )
kevman 0:38ceb79fef03 225 ret = MBEDTLS_ERR_PKCS5_PASSWORD_MISMATCH;
kevman 0:38ceb79fef03 226
kevman 0:38ceb79fef03 227 exit:
kevman 0:38ceb79fef03 228 mbedtls_md_free( &md_ctx );
kevman 0:38ceb79fef03 229 mbedtls_cipher_free( &cipher_ctx );
kevman 0:38ceb79fef03 230
kevman 0:38ceb79fef03 231 return( ret );
kevman 0:38ceb79fef03 232 }
kevman 0:38ceb79fef03 233 #endif /* MBEDTLS_ASN1_PARSE_C */
kevman 0:38ceb79fef03 234
kevman 0:38ceb79fef03 235 int mbedtls_pkcs5_pbkdf2_hmac( mbedtls_md_context_t *ctx, const unsigned char *password,
kevman 0:38ceb79fef03 236 size_t plen, const unsigned char *salt, size_t slen,
kevman 0:38ceb79fef03 237 unsigned int iteration_count,
kevman 0:38ceb79fef03 238 uint32_t key_length, unsigned char *output )
kevman 0:38ceb79fef03 239 {
kevman 0:38ceb79fef03 240 int ret, j;
kevman 0:38ceb79fef03 241 unsigned int i;
kevman 0:38ceb79fef03 242 unsigned char md1[MBEDTLS_MD_MAX_SIZE];
kevman 0:38ceb79fef03 243 unsigned char work[MBEDTLS_MD_MAX_SIZE];
kevman 0:38ceb79fef03 244 unsigned char md_size = mbedtls_md_get_size( ctx->md_info );
kevman 0:38ceb79fef03 245 size_t use_len;
kevman 0:38ceb79fef03 246 unsigned char *out_p = output;
kevman 0:38ceb79fef03 247 unsigned char counter[4];
kevman 0:38ceb79fef03 248
kevman 0:38ceb79fef03 249 memset( counter, 0, 4 );
kevman 0:38ceb79fef03 250 counter[3] = 1;
kevman 0:38ceb79fef03 251
kevman 0:38ceb79fef03 252 #if UINT_MAX > 0xFFFFFFFF
kevman 0:38ceb79fef03 253 if( iteration_count > 0xFFFFFFFF )
kevman 0:38ceb79fef03 254 return( MBEDTLS_ERR_PKCS5_BAD_INPUT_DATA );
kevman 0:38ceb79fef03 255 #endif
kevman 0:38ceb79fef03 256
kevman 0:38ceb79fef03 257 while( key_length )
kevman 0:38ceb79fef03 258 {
kevman 0:38ceb79fef03 259 // U1 ends up in work
kevman 0:38ceb79fef03 260 //
kevman 0:38ceb79fef03 261 if( ( ret = mbedtls_md_hmac_starts( ctx, password, plen ) ) != 0 )
kevman 0:38ceb79fef03 262 return( ret );
kevman 0:38ceb79fef03 263
kevman 0:38ceb79fef03 264 if( ( ret = mbedtls_md_hmac_update( ctx, salt, slen ) ) != 0 )
kevman 0:38ceb79fef03 265 return( ret );
kevman 0:38ceb79fef03 266
kevman 0:38ceb79fef03 267 if( ( ret = mbedtls_md_hmac_update( ctx, counter, 4 ) ) != 0 )
kevman 0:38ceb79fef03 268 return( ret );
kevman 0:38ceb79fef03 269
kevman 0:38ceb79fef03 270 if( ( ret = mbedtls_md_hmac_finish( ctx, work ) ) != 0 )
kevman 0:38ceb79fef03 271 return( ret );
kevman 0:38ceb79fef03 272
kevman 0:38ceb79fef03 273 memcpy( md1, work, md_size );
kevman 0:38ceb79fef03 274
kevman 0:38ceb79fef03 275 for( i = 1; i < iteration_count; i++ )
kevman 0:38ceb79fef03 276 {
kevman 0:38ceb79fef03 277 // U2 ends up in md1
kevman 0:38ceb79fef03 278 //
kevman 0:38ceb79fef03 279 if( ( ret = mbedtls_md_hmac_starts( ctx, password, plen ) ) != 0 )
kevman 0:38ceb79fef03 280 return( ret );
kevman 0:38ceb79fef03 281
kevman 0:38ceb79fef03 282 if( ( ret = mbedtls_md_hmac_update( ctx, md1, md_size ) ) != 0 )
kevman 0:38ceb79fef03 283 return( ret );
kevman 0:38ceb79fef03 284
kevman 0:38ceb79fef03 285 if( ( ret = mbedtls_md_hmac_finish( ctx, md1 ) ) != 0 )
kevman 0:38ceb79fef03 286 return( ret );
kevman 0:38ceb79fef03 287
kevman 0:38ceb79fef03 288 // U1 xor U2
kevman 0:38ceb79fef03 289 //
kevman 0:38ceb79fef03 290 for( j = 0; j < md_size; j++ )
kevman 0:38ceb79fef03 291 work[j] ^= md1[j];
kevman 0:38ceb79fef03 292 }
kevman 0:38ceb79fef03 293
kevman 0:38ceb79fef03 294 use_len = ( key_length < md_size ) ? key_length : md_size;
kevman 0:38ceb79fef03 295 memcpy( out_p, work, use_len );
kevman 0:38ceb79fef03 296
kevman 0:38ceb79fef03 297 key_length -= (uint32_t) use_len;
kevman 0:38ceb79fef03 298 out_p += use_len;
kevman 0:38ceb79fef03 299
kevman 0:38ceb79fef03 300 for( i = 4; i > 0; i-- )
kevman 0:38ceb79fef03 301 if( ++counter[i - 1] != 0 )
kevman 0:38ceb79fef03 302 break;
kevman 0:38ceb79fef03 303 }
kevman 0:38ceb79fef03 304
kevman 0:38ceb79fef03 305 return( 0 );
kevman 0:38ceb79fef03 306 }
kevman 0:38ceb79fef03 307
kevman 0:38ceb79fef03 308 #if defined(MBEDTLS_SELF_TEST)
kevman 0:38ceb79fef03 309
kevman 0:38ceb79fef03 310 #if !defined(MBEDTLS_SHA1_C)
kevman 0:38ceb79fef03 311 int mbedtls_pkcs5_self_test( int verbose )
kevman 0:38ceb79fef03 312 {
kevman 0:38ceb79fef03 313 if( verbose != 0 )
kevman 0:38ceb79fef03 314 mbedtls_printf( " PBKDF2 (SHA1): skipped\n\n" );
kevman 0:38ceb79fef03 315
kevman 0:38ceb79fef03 316 return( 0 );
kevman 0:38ceb79fef03 317 }
kevman 0:38ceb79fef03 318 #else
kevman 0:38ceb79fef03 319
kevman 0:38ceb79fef03 320 #define MAX_TESTS 6
kevman 0:38ceb79fef03 321
kevman 0:38ceb79fef03 322 static const size_t plen[MAX_TESTS] =
kevman 0:38ceb79fef03 323 { 8, 8, 8, 24, 9 };
kevman 0:38ceb79fef03 324
kevman 0:38ceb79fef03 325 static const unsigned char password[MAX_TESTS][32] =
kevman 0:38ceb79fef03 326 {
kevman 0:38ceb79fef03 327 "password",
kevman 0:38ceb79fef03 328 "password",
kevman 0:38ceb79fef03 329 "password",
kevman 0:38ceb79fef03 330 "passwordPASSWORDpassword",
kevman 0:38ceb79fef03 331 "pass\0word",
kevman 0:38ceb79fef03 332 };
kevman 0:38ceb79fef03 333
kevman 0:38ceb79fef03 334 static const size_t slen[MAX_TESTS] =
kevman 0:38ceb79fef03 335 { 4, 4, 4, 36, 5 };
kevman 0:38ceb79fef03 336
kevman 0:38ceb79fef03 337 static const unsigned char salt[MAX_TESTS][40] =
kevman 0:38ceb79fef03 338 {
kevman 0:38ceb79fef03 339 "salt",
kevman 0:38ceb79fef03 340 "salt",
kevman 0:38ceb79fef03 341 "salt",
kevman 0:38ceb79fef03 342 "saltSALTsaltSALTsaltSALTsaltSALTsalt",
kevman 0:38ceb79fef03 343 "sa\0lt",
kevman 0:38ceb79fef03 344 };
kevman 0:38ceb79fef03 345
kevman 0:38ceb79fef03 346 static const uint32_t it_cnt[MAX_TESTS] =
kevman 0:38ceb79fef03 347 { 1, 2, 4096, 4096, 4096 };
kevman 0:38ceb79fef03 348
kevman 0:38ceb79fef03 349 static const uint32_t key_len[MAX_TESTS] =
kevman 0:38ceb79fef03 350 { 20, 20, 20, 25, 16 };
kevman 0:38ceb79fef03 351
kevman 0:38ceb79fef03 352 static const unsigned char result_key[MAX_TESTS][32] =
kevman 0:38ceb79fef03 353 {
kevman 0:38ceb79fef03 354 { 0x0c, 0x60, 0xc8, 0x0f, 0x96, 0x1f, 0x0e, 0x71,
kevman 0:38ceb79fef03 355 0xf3, 0xa9, 0xb5, 0x24, 0xaf, 0x60, 0x12, 0x06,
kevman 0:38ceb79fef03 356 0x2f, 0xe0, 0x37, 0xa6 },
kevman 0:38ceb79fef03 357 { 0xea, 0x6c, 0x01, 0x4d, 0xc7, 0x2d, 0x6f, 0x8c,
kevman 0:38ceb79fef03 358 0xcd, 0x1e, 0xd9, 0x2a, 0xce, 0x1d, 0x41, 0xf0,
kevman 0:38ceb79fef03 359 0xd8, 0xde, 0x89, 0x57 },
kevman 0:38ceb79fef03 360 { 0x4b, 0x00, 0x79, 0x01, 0xb7, 0x65, 0x48, 0x9a,
kevman 0:38ceb79fef03 361 0xbe, 0xad, 0x49, 0xd9, 0x26, 0xf7, 0x21, 0xd0,
kevman 0:38ceb79fef03 362 0x65, 0xa4, 0x29, 0xc1 },
kevman 0:38ceb79fef03 363 { 0x3d, 0x2e, 0xec, 0x4f, 0xe4, 0x1c, 0x84, 0x9b,
kevman 0:38ceb79fef03 364 0x80, 0xc8, 0xd8, 0x36, 0x62, 0xc0, 0xe4, 0x4a,
kevman 0:38ceb79fef03 365 0x8b, 0x29, 0x1a, 0x96, 0x4c, 0xf2, 0xf0, 0x70,
kevman 0:38ceb79fef03 366 0x38 },
kevman 0:38ceb79fef03 367 { 0x56, 0xfa, 0x6a, 0xa7, 0x55, 0x48, 0x09, 0x9d,
kevman 0:38ceb79fef03 368 0xcc, 0x37, 0xd7, 0xf0, 0x34, 0x25, 0xe0, 0xc3 },
kevman 0:38ceb79fef03 369 };
kevman 0:38ceb79fef03 370
kevman 0:38ceb79fef03 371 int mbedtls_pkcs5_self_test( int verbose )
kevman 0:38ceb79fef03 372 {
kevman 0:38ceb79fef03 373 mbedtls_md_context_t sha1_ctx;
kevman 0:38ceb79fef03 374 const mbedtls_md_info_t *info_sha1;
kevman 0:38ceb79fef03 375 int ret, i;
kevman 0:38ceb79fef03 376 unsigned char key[64];
kevman 0:38ceb79fef03 377
kevman 0:38ceb79fef03 378 mbedtls_md_init( &sha1_ctx );
kevman 0:38ceb79fef03 379
kevman 0:38ceb79fef03 380 info_sha1 = mbedtls_md_info_from_type( MBEDTLS_MD_SHA1 );
kevman 0:38ceb79fef03 381 if( info_sha1 == NULL )
kevman 0:38ceb79fef03 382 {
kevman 0:38ceb79fef03 383 ret = 1;
kevman 0:38ceb79fef03 384 goto exit;
kevman 0:38ceb79fef03 385 }
kevman 0:38ceb79fef03 386
kevman 0:38ceb79fef03 387 if( ( ret = mbedtls_md_setup( &sha1_ctx, info_sha1, 1 ) ) != 0 )
kevman 0:38ceb79fef03 388 {
kevman 0:38ceb79fef03 389 ret = 1;
kevman 0:38ceb79fef03 390 goto exit;
kevman 0:38ceb79fef03 391 }
kevman 0:38ceb79fef03 392
kevman 0:38ceb79fef03 393 for( i = 0; i < MAX_TESTS; i++ )
kevman 0:38ceb79fef03 394 {
kevman 0:38ceb79fef03 395 if( verbose != 0 )
kevman 0:38ceb79fef03 396 mbedtls_printf( " PBKDF2 (SHA1) #%d: ", i );
kevman 0:38ceb79fef03 397
kevman 0:38ceb79fef03 398 ret = mbedtls_pkcs5_pbkdf2_hmac( &sha1_ctx, password[i], plen[i], salt[i],
kevman 0:38ceb79fef03 399 slen[i], it_cnt[i], key_len[i], key );
kevman 0:38ceb79fef03 400 if( ret != 0 ||
kevman 0:38ceb79fef03 401 memcmp( result_key[i], key, key_len[i] ) != 0 )
kevman 0:38ceb79fef03 402 {
kevman 0:38ceb79fef03 403 if( verbose != 0 )
kevman 0:38ceb79fef03 404 mbedtls_printf( "failed\n" );
kevman 0:38ceb79fef03 405
kevman 0:38ceb79fef03 406 ret = 1;
kevman 0:38ceb79fef03 407 goto exit;
kevman 0:38ceb79fef03 408 }
kevman 0:38ceb79fef03 409
kevman 0:38ceb79fef03 410 if( verbose != 0 )
kevman 0:38ceb79fef03 411 mbedtls_printf( "passed\n" );
kevman 0:38ceb79fef03 412 }
kevman 0:38ceb79fef03 413
kevman 0:38ceb79fef03 414 if( verbose != 0 )
kevman 0:38ceb79fef03 415 mbedtls_printf( "\n" );
kevman 0:38ceb79fef03 416
kevman 0:38ceb79fef03 417 exit:
kevman 0:38ceb79fef03 418 mbedtls_md_free( &sha1_ctx );
kevman 0:38ceb79fef03 419
kevman 0:38ceb79fef03 420 return( ret );
kevman 0:38ceb79fef03 421 }
kevman 0:38ceb79fef03 422 #endif /* MBEDTLS_SHA1_C */
kevman 0:38ceb79fef03 423
kevman 0:38ceb79fef03 424 #endif /* MBEDTLS_SELF_TEST */
kevman 0:38ceb79fef03 425
kevman 0:38ceb79fef03 426 #endif /* MBEDTLS_PKCS5_C */