RSA signature verification and SHA-1/256/512 reference implementation for verified boot.

src/platform/vboot_reference/tests/run_tests.sh

+#!/bin/bash
+
+# Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
+# Use of this source code is governed by a BSD-style license that can be
+# found in the LICENSE file.
+
+# Run tests for cryptographic routine implementations - Message digests 
+# and RSA Signature verification.
+
+hash_algos=( sha1 sha256 sha512 )
+key_lengths=( 1024 2048 4096 8192 ) 
+TEST_FILE=test_file 
+TEST_FILE_SIZE=1000000
+UTILDIR=../utils/
+
+# Generate RSA test keys of various lengths. 
+function generate_keys {
+  for i in ${key_lengths[@]}
+  do
+    openssl genrsa -F4 -out key_rsa$i.pem $i
+    # Generate self-signed certificate from key.
+    openssl req -batch -new -x509 -key key_rsa$i.pem -out key_rsa$i.crt
+    # Generate pre-processed key for use by RSA signature verification code.
+    ${UTILDIR}/dumpRSAPublicKey key_rsa$i.crt > key_rsa$i.keyb
+  done
+}
+
+# Generate public key signatures on an input file for various combinations
+# of message digest algorithms and RSA key sizes.
+function generate_signatures {
+  for i in ${hash_algos[@]}
+  do
+    for j in ${key_lengths[@]}
+    do
+      openssl dgst -binary -$i $1 >$1.digest.$i
+      openssl pkeyutl -in $1.digest.$i -inkey key_rsa$j.pem \
+        -pkeyopt digest:$i > $1.rsa$j\_$i.sig
+    done
+  done
+}
+
+function test_signatures {
+  algorithmcounter=0
+  for rsaalgo in ${key_lengths[@]}
+  do
+    for hashalgo in ${hash_algos[@]}
+    do
+      echo "For RSA-$rsaalgo and $hashalgo:"
+      ./verify_data $algorithmcounter key_rsa${rsaalgo}.keyb \
+        ${TEST_FILE}.rsa${rsaalgo}_${hashalgo}.sig ${TEST_FILE}
+      let algorithmcounter=algorithmcounter+1
+    done
+  done
+}
+
+
+function pre_work {
+  # Generate a file with random bytes for signature tests.
+  echo "Generating test file..."
+  dd if=/dev/urandom of=${TEST_FILE} bs=${TEST_FILE_SIZE} count=1
+  echo "Generating test keys..."
+  generate_keys
+  echo "Generating signatures..."
+  generate_signatures $TEST_FILE
+}
+
+function cleanup {
+  rm ${TEST_FILE} ${TEST_FILE}.digest.* ${TEST_FILE}.*.sig key_rsa*.*
+}
+
+echo "Testing message digests..."
+./sha_tests
+
+echo
+echo "Testing signature verification..."
+pre_work
+test_signatures
+
+echo
+echo "Cleaning up..."
+cleanup
+
+