lib/gssapi/krb5/test_cfx.c

   1 /*
   2  * Copyright (c) 2006 Kungliga Tekniska Högskolan
   3  * (Royal Institute of Technology, Stockholm, Sweden).
   4  * All rights reserved.
   5  *
   6  * Redistribution and use in source and binary forms, with or without
   7  * modification, are permitted provided that the following conditions
   8  * are met:
   9  *
  10  * 1. Redistributions of source code must retain the above copyright
  11  *    notice, this list of conditions and the following disclaimer.
  12  *
  13  * 2. Redistributions in binary form must reproduce the above copyright
  14  *    notice, this list of conditions and the following disclaimer in the
  15  *    documentation and/or other materials provided with the distribution.
  16  *
  17  * 3. Neither the name of KTH nor the names of its contributors may be
  18  *    used to endorse or promote products derived from this software without
  19  *    specific prior written permission.
  20  *
  21  * THIS SOFTWARE IS PROVIDED BY KTH AND ITS CONTRIBUTORS ``AS IS'' AND ANY
  22  * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  23  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
  24  * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL KTH OR ITS CONTRIBUTORS BE
  25  * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
  26  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
  27  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
  28  * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
  29  * WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
  30  * OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
  31  * ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
  32  */
  33
  34 #include "gsskrb5_locl.h"
  35
  36 struct range {
  37     size_t lower;
  38     size_t upper;
  39 };
  40
  41 struct range tests[] = {
  42     { 0, 1040 },
  43     { 2040, 2080 },
  44     { 4080, 5000 },
  45     { 8180, 8292 },
  46     { 9980, 10010 }
  47 };
  48
  49 static void
  50 test_range(const struct range *r, int integ,
  51            krb5_context context, krb5_crypto crypto)
  52 {
  53     krb5_error_code ret;
  54     size_t size, rsize;
  55     struct gsskrb5_ctx ctx;
  56
  57     for (size = r->lower; size < r->upper; size++) {
  58         size_t cksumsize;
  59         uint16_t padsize;
  60         OM_uint32 minor;
  61         OM_uint32 max_wrap_size;
  62
  63         ctx.crypto = crypto;
  64
  65         ret = _gssapi_wrap_size_cfx(&minor,
  66                                     &ctx,
  67                                     context,
  68                                     integ,
  69                                     0,
  70                                     size,
  71                                     &max_wrap_size);
  72         if (ret)
  73             krb5_errx(context, 1, "_gsskrb5cfx_max_wrap_length_cfx: %d", ret);
  74         if (max_wrap_size == 0)
  75             continue;
  76
  77         ret = _gsskrb5cfx_wrap_length_cfx(context,
  78                                           crypto,
  79                                           integ,
  80                                           0,
  81                                           max_wrap_size,
  82                                           &rsize, &cksumsize, &padsize);
  83         if (ret)
  84             krb5_errx(context, 1, "_gsskrb5cfx_wrap_length_cfx: %d", ret);
  85
  86         if (size < rsize)
  87             krb5_errx(context, 1,
  88                       "size (%d) < rsize (%d) for max_wrap_size %d",
  89                       (int)size, (int)rsize, (int)max_wrap_size);
  90     }
  91 }
  92
  93 static void
  94 test_special(krb5_context context, krb5_crypto crypto,
  95              int integ, size_t testsize)
  96 {
  97     krb5_error_code ret;
  98     size_t rsize;
  99     OM_uint32 max_wrap_size;
 100     size_t cksumsize;
 101     uint16_t padsize;
 102     struct gsskrb5_ctx ctx;
 103     OM_uint32 minor;
 104
 105     ctx.crypto = crypto;
 106
 107     ret = _gssapi_wrap_size_cfx(&minor,
 108                                 &ctx,
 109                                 context,
 110                                 integ,
 111                                 0,
 112                                 testsize,
 113                                 &max_wrap_size);
 114     if (ret)
 115       krb5_errx(context, 1, "_gsskrb5cfx_max_wrap_length_cfx: %d", ret);
 116     if (ret)
 117         krb5_errx(context, 1, "_gsskrb5cfx_max_wrap_length_cfx: %d", ret);
 118
 119     ret = _gsskrb5cfx_wrap_length_cfx(context,
 120                                       crypto,
 121                                       integ,
 122                                       0,
 123                                       max_wrap_size,
 124                                       &rsize, &cksumsize, &padsize);
 125     if (ret)
 126         krb5_errx(context, 1, "_gsskrb5cfx_wrap_length_cfx: %d", ret);
 127
 128     if (testsize < rsize)
 129         krb5_errx(context, 1,
 130                   "testsize (%d) < rsize (%d) for max_wrap_size %d",
 131                   (int)testsize, (int)rsize, (int)max_wrap_size);
 132 }
 133
 134
 135
 136
 137 int
 138 main(int argc, char **argv)
 139 {
 140     krb5_keyblock keyblock;
 141     krb5_error_code ret;
 142     krb5_context context;
 143     krb5_crypto crypto;
 144     int i;
 145
 146     ret = krb5_init_context(&context);
 147     if (ret)
 148         errx(1, "krb5_context_init: %d", ret);
 149
 150     ret = krb5_generate_random_keyblock(context,
 151                                         ENCTYPE_AES256_CTS_HMAC_SHA1_96,
 152                                         &keyblock);
 153     if (ret)
 154         krb5_err(context, 1, ret, "krb5_generate_random_keyblock");
 155
 156     ret = krb5_crypto_init(context, &keyblock, 0, &crypto);
 157     if (ret)
 158         krb5_err(context, 1, ret, "krb5_crypto_init");
 159
 160     test_special(context, crypto, 1, 60);
 161     test_special(context, crypto, 0, 60);
 162
 163     for (i = 0; i < sizeof(tests)/sizeof(tests[0]); i++) {
 164         test_range(&tests[i], 1, context, crypto);
 165         test_range(&tests[i], 0, context, crypto);
 166     }
 167
 168     krb5_free_keyblock_contents(context, &keyblock);
 169     krb5_crypto_destroy(context, crypto);
 170     krb5_free_context(context);
 171
 172     return 0;
 173 }