307 lines
9.6 KiB
Perl
307 lines
9.6 KiB
Perl
|
#! /usr/bin/env perl
|
||
|
|
# Copyright 2017-2020 The OpenSSL Project Authors. All Rights Reserved.
|
||
|
|
#
|
||
|
|
# Licensed under the Apache License 2.0 (the "License"). You may not use
|
||
|
|
# this file except in compliance with the License. You can obtain a copy
|
||
|
|
# in the file LICENSE in the source distribution or at
|
||
|
|
# https://www.openssl.org/source/license.html
|
||
|
|
|
||
|
|
|
||
|
|
use strict;
|
||
|
|
use warnings;
|
||
|
|
|
||
|
|
use File::Spec;
|
||
|
|
use OpenSSL::Test qw/:DEFAULT srctop_file/;
|
||
|
|
use OpenSSL::Test::Utils;
|
||
|
|
|
||
|
|
setup("test_genec");
|
||
|
|
|
||
|
|
plan skip_all => "This test is unsupported in a no-ec build"
|
||
|
|
if disabled("ec");
|
||
|
|
|
||
|
|
my @prime_curves = qw(
|
||
|
|
secp112r1
|
||
|
|
secp112r2
|
||
|
|
secp128r1
|
||
|
|
secp128r2
|
||
|
|
secp160k1
|
||
|
|
secp160r1
|
||
|
|
secp160r2
|
||
|
|
secp192k1
|
||
|
|
secp224k1
|
||
|
|
secp224r1
|
||
|
|
secp256k1
|
||
|
|
secp384r1
|
||
|
|
secp521r1
|
||
|
|
prime192v1
|
||
|
|
prime192v2
|
||
|
|
prime192v3
|
||
|
|
prime239v1
|
||
|
|
prime239v2
|
||
|
|
prime239v3
|
||
|
|
prime256v1
|
||
|
|
wap-wsg-idm-ecid-wtls6
|
||
|
|
wap-wsg-idm-ecid-wtls7
|
||
|
|
wap-wsg-idm-ecid-wtls8
|
||
|
|
wap-wsg-idm-ecid-wtls9
|
||
|
|
wap-wsg-idm-ecid-wtls12
|
||
|
|
brainpoolP160r1
|
||
|
|
brainpoolP160t1
|
||
|
|
brainpoolP192r1
|
||
|
|
brainpoolP192t1
|
||
|
|
brainpoolP224r1
|
||
|
|
brainpoolP224t1
|
||
|
|
brainpoolP256r1
|
||
|
|
brainpoolP256t1
|
||
|
|
brainpoolP320r1
|
||
|
|
brainpoolP320t1
|
||
|
|
brainpoolP384r1
|
||
|
|
brainpoolP384t1
|
||
|
|
brainpoolP512r1
|
||
|
|
brainpoolP512t1
|
||
|
|
);
|
||
|
|
|
||
|
|
my @binary_curves = qw(
|
||
|
|
sect113r1
|
||
|
|
sect113r2
|
||
|
|
sect131r1
|
||
|
|
sect131r2
|
||
|
|
sect163k1
|
||
|
|
sect163r1
|
||
|
|
sect163r2
|
||
|
|
sect193r1
|
||
|
|
sect193r2
|
||
|
|
sect233k1
|
||
|
|
sect233r1
|
||
|
|
sect239k1
|
||
|
|
sect283k1
|
||
|
|
sect283r1
|
||
|
|
sect409k1
|
||
|
|
sect409r1
|
||
|
|
sect571k1
|
||
|
|
sect571r1
|
||
|
|
c2pnb163v1
|
||
|
|
c2pnb163v2
|
||
|
|
c2pnb163v3
|
||
|
|
c2pnb176v1
|
||
|
|
c2tnb191v1
|
||
|
|
c2tnb191v2
|
||
|
|
c2tnb191v3
|
||
|
|
c2pnb208w1
|
||
|
|
c2tnb239v1
|
||
|
|
c2tnb239v2
|
||
|
|
c2tnb239v3
|
||
|
|
c2pnb272w1
|
||
|
|
c2pnb304w1
|
||
|
|
c2tnb359v1
|
||
|
|
c2pnb368w1
|
||
|
|
c2tnb431r1
|
||
|
|
wap-wsg-idm-ecid-wtls1
|
||
|
|
wap-wsg-idm-ecid-wtls3
|
||
|
|
wap-wsg-idm-ecid-wtls4
|
||
|
|
wap-wsg-idm-ecid-wtls5
|
||
|
|
wap-wsg-idm-ecid-wtls10
|
||
|
|
wap-wsg-idm-ecid-wtls11
|
||
|
|
);
|
||
|
|
|
||
|
|
my @explicit_only_curves = ();
|
||
|
|
push(@explicit_only_curves, qw(
|
||
|
|
Oakley-EC2N-3
|
||
|
|
Oakley-EC2N-4
|
||
|
|
)) if !disabled("ec2m");
|
||
|
|
|
||
|
|
my @other_curves = ();
|
||
|
|
push(@other_curves, 'SM2')
|
||
|
|
if !disabled("sm2");
|
||
|
|
|
||
|
|
my @curve_aliases = qw(
|
||
|
|
P-192
|
||
|
|
P-224
|
||
|
|
P-256
|
||
|
|
P-384
|
||
|
|
P-521
|
||
|
|
);
|
||
|
|
push(@curve_aliases, qw(
|
||
|
|
B-163
|
||
|
|
B-233
|
||
|
|
B-283
|
||
|
|
B-409
|
||
|
|
B-571
|
||
|
|
K-163
|
||
|
|
K-233
|
||
|
|
K-283
|
||
|
|
K-409
|
||
|
|
K-571
|
||
|
|
)) if !disabled("ec2m");
|
||
|
|
|
||
|
|
my @curve_list = ();
|
||
|
|
push(@curve_list, @prime_curves);
|
||
|
|
push(@curve_list, @binary_curves)
|
||
|
|
if !disabled("ec2m");
|
||
|
|
push(@curve_list, @other_curves);
|
||
|
|
push(@curve_list, @curve_aliases);
|
||
|
|
|
||
|
|
my @params_encodings = ('named_curve', 'explicit');
|
||
|
|
|
||
|
|
my @output_formats = ('PEM', 'DER');
|
||
|
|
|
||
|
|
plan tests => scalar(@curve_list) * scalar(@params_encodings)
|
||
|
|
* (1 + scalar(@output_formats)) # Try listed @output_formats and text output
|
||
|
|
* 2 # Test generating parameters and keys
|
||
|
|
+ 1 # Checking that with no curve it fails
|
||
|
|
+ 1 # Checking that with unknown curve it fails
|
||
|
|
+ 1 # Subtest for explicit only curves
|
||
|
|
;
|
||
|
|
|
||
|
|
ok(!run(app([ 'openssl', 'genpkey',
|
||
|
|
'-algorithm', 'EC'])),
|
||
|
|
"genpkey EC with no params should fail");
|
||
|
|
|
||
|
|
ok(!run(app([ 'openssl', 'genpkey',
|
||
|
|
'-algorithm', 'EC',
|
||
|
|
'-pkeyopt', 'ec_paramgen_curve:bogus_foobar_curve'])),
|
||
|
|
"genpkey EC with unknown curve name should fail");
|
||
|
|
|
||
|
|
foreach my $curvename (@curve_list) {
|
||
|
|
foreach my $paramenc (@params_encodings) {
|
||
|
|
|
||
|
|
# --- Test generating parameters ---
|
||
|
|
|
||
|
|
ok(run(app([ 'openssl', 'genpkey', '-genparam',
|
||
|
|
'-algorithm', 'EC',
|
||
|
|
'-pkeyopt', 'ec_paramgen_curve:'.$curvename,
|
||
|
|
'-pkeyopt', 'ec_param_enc:'.$paramenc,
|
||
|
|
'-text'])),
|
||
|
|
"genpkey EC params ${curvename} with ec_param_enc:'${paramenc}' (text)");
|
||
|
|
|
||
|
|
foreach my $outform (@output_formats) {
|
||
|
|
my $outfile = "ecgen.${curvename}.${paramenc}." . lc $outform;
|
||
|
|
ok(run(app([ 'openssl', 'genpkey', '-genparam',
|
||
|
|
'-algorithm', 'EC',
|
||
|
|
'-pkeyopt', 'ec_paramgen_curve:'.$curvename,
|
||
|
|
'-pkeyopt', 'ec_param_enc:'.$paramenc,
|
||
|
|
'-outform', $outform,
|
||
|
|
'-out', $outfile])),
|
||
|
|
"genpkey EC params ${curvename} with ec_param_enc:'${paramenc}' (${outform})");
|
||
|
|
}
|
||
|
|
|
||
|
|
# --- Test generating actual keys ---
|
||
|
|
|
||
|
|
ok(run(app([ 'openssl', 'genpkey',
|
||
|
|
'-algorithm', 'EC',
|
||
|
|
'-pkeyopt', 'ec_paramgen_curve:'.$curvename,
|
||
|
|
'-pkeyopt', 'ec_param_enc:'.$paramenc,
|
||
|
|
'-text'])),
|
||
|
|
"genpkey EC key on ${curvename} with ec_param_enc:'${paramenc}' (text)");
|
||
|
|
|
||
|
|
foreach my $outform (@output_formats) {
|
||
|
|
my $outfile = "ecgen.${curvename}.${paramenc}." . lc $outform;
|
||
|
|
ok(run(app([ 'openssl', 'genpkey',
|
||
|
|
'-algorithm', 'EC',
|
||
|
|
'-pkeyopt', 'ec_paramgen_curve:'.$curvename,
|
||
|
|
'-pkeyopt', 'ec_param_enc:'.$paramenc,
|
||
|
|
'-outform', $outform,
|
||
|
|
'-out', $outfile])),
|
||
|
|
"genpkey EC key on ${curvename} with ec_param_enc:'${paramenc}' (${outform})");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
subtest "test curves that only support explicit parameters encoding" => sub {
|
||
|
|
@curve_list = @explicit_only_curves;
|
||
|
|
|
||
|
|
plan skip_all => "This test is unsupported under current configuration"
|
||
|
|
if scalar(@curve_list) <= 0;
|
||
|
|
|
||
|
|
plan tests => scalar(@curve_list) * scalar(@params_encodings)
|
||
|
|
* (1 + scalar(@output_formats)) # Try listed @output_formats and text output
|
||
|
|
* 2 # Test generating parameters and keys
|
||
|
|
;
|
||
|
|
|
||
|
|
foreach my $curvename (@curve_list) {
|
||
|
|
my $paramenc = "explicit";
|
||
|
|
|
||
|
|
# --- Test generating parameters ---
|
||
|
|
|
||
|
|
ok(run(app([ 'openssl', 'genpkey', '-genparam',
|
||
|
|
'-algorithm', 'EC',
|
||
|
|
'-pkeyopt', 'ec_paramgen_curve:'.$curvename,
|
||
|
|
'-pkeyopt', 'ec_param_enc:'.$paramenc,
|
||
|
|
'-text'])),
|
||
|
|
"genpkey EC params ${curvename} with ec_param_enc:'${paramenc}' (text)");
|
||
|
|
|
||
|
|
foreach my $outform (@output_formats) {
|
||
|
|
my $outfile = "ecgen.${curvename}.${paramenc}." . lc $outform;
|
||
|
|
ok(run(app([ 'openssl', 'genpkey', '-genparam',
|
||
|
|
'-algorithm', 'EC',
|
||
|
|
'-pkeyopt', 'ec_paramgen_curve:'.$curvename,
|
||
|
|
'-pkeyopt', 'ec_param_enc:'.$paramenc,
|
||
|
|
'-outform', $outform,
|
||
|
|
'-out', $outfile])),
|
||
|
|
"genpkey EC params ${curvename} with ec_param_enc:'${paramenc}' (${outform})");
|
||
|
|
}
|
||
|
|
|
||
|
|
# --- Test generating actual keys ---
|
||
|
|
|
||
|
|
ok(run(app([ 'openssl', 'genpkey',
|
||
|
|
'-algorithm', 'EC',
|
||
|
|
'-pkeyopt', 'ec_paramgen_curve:'.$curvename,
|
||
|
|
'-pkeyopt', 'ec_param_enc:'.$paramenc,
|
||
|
|
'-text'])),
|
||
|
|
"genpkey EC key on ${curvename} with ec_param_enc:'${paramenc}' (text)");
|
||
|
|
|
||
|
|
foreach my $outform (@output_formats) {
|
||
|
|
my $outfile = "ecgen.${curvename}.${paramenc}." . lc $outform;
|
||
|
|
ok(run(app([ 'openssl', 'genpkey',
|
||
|
|
'-algorithm', 'EC',
|
||
|
|
'-pkeyopt', 'ec_paramgen_curve:'.$curvename,
|
||
|
|
'-pkeyopt', 'ec_param_enc:'.$paramenc,
|
||
|
|
'-outform', $outform,
|
||
|
|
'-out', $outfile])),
|
||
|
|
"genpkey EC key on ${curvename} with ec_param_enc:'${paramenc}' (${outform})");
|
||
|
|
}
|
||
|
|
|
||
|
|
my $paramenc = "named_curve";
|
||
|
|
|
||
|
|
# --- Test generating parameters ---
|
||
|
|
|
||
|
|
ok(!run(app([ 'openssl', 'genpkey', '-genparam',
|
||
|
|
'-algorithm', 'EC',
|
||
|
|
'-pkeyopt', 'ec_paramgen_curve:'.$curvename,
|
||
|
|
'-pkeyopt', 'ec_param_enc:'.$paramenc,
|
||
|
|
'-text'])),
|
||
|
|
"genpkey EC params ${curvename} with ec_param_enc:'${paramenc}' (text)");
|
||
|
|
|
||
|
|
foreach my $outform (@output_formats) {
|
||
|
|
my $outfile = "ecgen.${curvename}.${paramenc}." . lc $outform;
|
||
|
|
ok(!run(app([ 'openssl', 'genpkey', '-genparam',
|
||
|
|
'-algorithm', 'EC',
|
||
|
|
'-pkeyopt', 'ec_paramgen_curve:'.$curvename,
|
||
|
|
'-pkeyopt', 'ec_param_enc:'.$paramenc,
|
||
|
|
'-outform', $outform,
|
||
|
|
'-out', $outfile])),
|
||
|
|
"genpkey EC params ${curvename} with ec_param_enc:'${paramenc}' (${outform})");
|
||
|
|
}
|
||
|
|
|
||
|
|
# --- Test generating actual keys ---
|
||
|
|
|
||
|
|
ok(!run(app([ 'openssl', 'genpkey',
|
||
|
|
'-algorithm', 'EC',
|
||
|
|
'-pkeyopt', 'ec_paramgen_curve:'.$curvename,
|
||
|
|
'-pkeyopt', 'ec_param_enc:'.$paramenc,
|
||
|
|
'-text'])),
|
||
|
|
"genpkey EC key on ${curvename} with ec_param_enc:'${paramenc}' (text)");
|
||
|
|
|
||
|
|
foreach my $outform (@output_formats) {
|
||
|
|
my $outfile = "ecgen.${curvename}.${paramenc}." . lc $outform;
|
||
|
|
ok(!run(app([ 'openssl', 'genpkey',
|
||
|
|
'-algorithm', 'EC',
|
||
|
|
'-pkeyopt', 'ec_paramgen_curve:'.$curvename,
|
||
|
|
'-pkeyopt', 'ec_param_enc:'.$paramenc,
|
||
|
|
'-outform', $outform,
|
||
|
|
'-out', $outfile])),
|
||
|
|
"genpkey EC key on ${curvename} with ec_param_enc:'${paramenc}' (${outform})");
|
||
|
|
}
|
||
|
|
}
|
||
|
|
};
|