OLD | NEW |
| (Empty) |
1 #include <openssl/opensslconf.h> | |
2 | |
3 #ifdef OPENSSL_NO_JPAKE | |
4 | |
5 #include <stdio.h> | |
6 | |
7 int main(int argc, char *argv[]) | |
8 { | |
9 printf("No J-PAKE support\n"); | |
10 return(0); | |
11 } | |
12 | |
13 #else | |
14 | |
15 #include <openssl/jpake.h> | |
16 #include <openssl/err.h> | |
17 | |
18 static void showbn(const char *name, const BIGNUM *bn) | |
19 { | |
20 fputs(name, stdout); | |
21 fputs(" = ", stdout); | |
22 BN_print_fp(stdout, bn); | |
23 putc('\n', stdout); | |
24 } | |
25 | |
26 static int run_jpake(JPAKE_CTX *alice, JPAKE_CTX *bob) | |
27 { | |
28 JPAKE_STEP1 alice_s1; | |
29 JPAKE_STEP1 bob_s1; | |
30 JPAKE_STEP2 alice_s2; | |
31 JPAKE_STEP2 bob_s2; | |
32 JPAKE_STEP3A alice_s3a; | |
33 JPAKE_STEP3B bob_s3b; | |
34 | |
35 /* Alice -> Bob: step 1 */ | |
36 puts("A->B s1"); | |
37 JPAKE_STEP1_init(&alice_s1); | |
38 JPAKE_STEP1_generate(&alice_s1, alice); | |
39 if(!JPAKE_STEP1_process(bob, &alice_s1)) | |
40 { | |
41 printf("Bob fails to process Alice's step 1\n"); | |
42 ERR_print_errors_fp(stdout); | |
43 return 1; | |
44 } | |
45 JPAKE_STEP1_release(&alice_s1); | |
46 | |
47 /* Bob -> Alice: step 1 */ | |
48 puts("B->A s1"); | |
49 JPAKE_STEP1_init(&bob_s1); | |
50 JPAKE_STEP1_generate(&bob_s1, bob); | |
51 if(!JPAKE_STEP1_process(alice, &bob_s1)) | |
52 { | |
53 printf("Alice fails to process Bob's step 1\n"); | |
54 ERR_print_errors_fp(stdout); | |
55 return 2; | |
56 } | |
57 JPAKE_STEP1_release(&bob_s1); | |
58 | |
59 /* Alice -> Bob: step 2 */ | |
60 puts("A->B s2"); | |
61 JPAKE_STEP2_init(&alice_s2); | |
62 JPAKE_STEP2_generate(&alice_s2, alice); | |
63 if(!JPAKE_STEP2_process(bob, &alice_s2)) | |
64 { | |
65 printf("Bob fails to process Alice's step 2\n"); | |
66 ERR_print_errors_fp(stdout); | |
67 return 3; | |
68 } | |
69 JPAKE_STEP2_release(&alice_s2); | |
70 | |
71 /* Bob -> Alice: step 2 */ | |
72 puts("B->A s2"); | |
73 JPAKE_STEP2_init(&bob_s2); | |
74 JPAKE_STEP2_generate(&bob_s2, bob); | |
75 if(!JPAKE_STEP2_process(alice, &bob_s2)) | |
76 { | |
77 printf("Alice fails to process Bob's step 2\n"); | |
78 ERR_print_errors_fp(stdout); | |
79 return 4; | |
80 } | |
81 JPAKE_STEP2_release(&bob_s2); | |
82 | |
83 showbn("Alice's key", JPAKE_get_shared_key(alice)); | |
84 showbn("Bob's key ", JPAKE_get_shared_key(bob)); | |
85 | |
86 /* Alice -> Bob: step 3a */ | |
87 puts("A->B s3a"); | |
88 JPAKE_STEP3A_init(&alice_s3a); | |
89 JPAKE_STEP3A_generate(&alice_s3a, alice); | |
90 if(!JPAKE_STEP3A_process(bob, &alice_s3a)) | |
91 { | |
92 printf("Bob fails to process Alice's step 3a\n"); | |
93 ERR_print_errors_fp(stdout); | |
94 return 5; | |
95 } | |
96 JPAKE_STEP3A_release(&alice_s3a); | |
97 | |
98 /* Bob -> Alice: step 3b */ | |
99 puts("B->A s3b"); | |
100 JPAKE_STEP3B_init(&bob_s3b); | |
101 JPAKE_STEP3B_generate(&bob_s3b, bob); | |
102 if(!JPAKE_STEP3B_process(alice, &bob_s3b)) | |
103 { | |
104 printf("Alice fails to process Bob's step 3b\n"); | |
105 ERR_print_errors_fp(stdout); | |
106 return 6; | |
107 } | |
108 JPAKE_STEP3B_release(&bob_s3b); | |
109 | |
110 return 0; | |
111 } | |
112 | |
113 int main(int argc, char **argv) | |
114 { | |
115 JPAKE_CTX *alice; | |
116 JPAKE_CTX *bob; | |
117 BIGNUM *p = NULL; | |
118 BIGNUM *g = NULL; | |
119 BIGNUM *q = NULL; | |
120 BIGNUM *secret = BN_new(); | |
121 BIO *bio_err; | |
122 | |
123 bio_err = BIO_new_fp(stderr, BIO_NOCLOSE); | |
124 | |
125 CRYPTO_malloc_debug_init(); | |
126 CRYPTO_dbg_set_options(V_CRYPTO_MDEBUG_ALL); | |
127 CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ON); | |
128 | |
129 ERR_load_crypto_strings(); | |
130 | |
131 /* | |
132 BN_hex2bn(&p, "fd7f53811d75122952df4a9c2eece4e7f611b7523cef4400c31e3f80b6512
669455d402251fb593d8d58fabfc5f5ba30f6cb9b556cd7813b801d346ff26660b76b9950a5a49f9
fe8047b1022c24fbba9d7feb7c61bf83b57e7c6a8a6150f04fb83f6d3c51ec3023554135a169132f
675f3ae2b61d72aeff22203199dd14801c7"); | |
133 BN_hex2bn(&g, "f7e1a085d69b3ddecbbcab5c36b857b97994afbbfa3aea82f9574c0b3d078
2675159578ebad4594fe67107108180b449167123e84c281613b7cf09328cc8a6e13c167a8b547c8
d28e0a3ae1e2bb3a675916ea37f0bfa213562f1fb627a01243bcca4f1bea8519089a883dfe15ae59
f06928b665e807b552564014c3bfecf492a"); | |
134 BN_hex2bn(&q, "9760508f15230bccb292b982a2eb840bf0581cf5"); | |
135 */ | |
136 /* | |
137 p = BN_new(); | |
138 BN_generate_prime(p, 1024, 1, NULL, NULL, NULL, NULL); | |
139 */ | |
140 /* Use a safe prime for p (that we found earlier) */ | |
141 BN_hex2bn(&p, "F9E5B365665EA7A05A9C534502780FEE6F1AB5BD4F49947FD036DBD7E9052
69AF46EF28B0FC07487EE4F5D20FB3C0AF8E700F3A2FA3414970CBED44FEDFF80CE78D800F184BB8
2435D137AADA2C6C16523247930A63B85661D1FC817A51ACD96168E95898A1F83A79FFB529368AA7
833ABD1B0C3AEDDB14D2E1A2F71D99F763F"); | |
142 showbn("p", p); | |
143 g = BN_new(); | |
144 BN_set_word(g, 2); | |
145 showbn("g", g); | |
146 q = BN_new(); | |
147 BN_rshift1(q, p); | |
148 showbn("q", q); | |
149 | |
150 BN_rand(secret, 32, -1, 0); | |
151 | |
152 /* A normal run, expect this to work... */ | |
153 alice = JPAKE_CTX_new("Alice", "Bob", p, g, q, secret); | |
154 bob = JPAKE_CTX_new("Bob", "Alice", p, g, q, secret); | |
155 | |
156 if(run_jpake(alice, bob) != 0) | |
157 { | |
158 fprintf(stderr, "Plain JPAKE run failed\n"); | |
159 return 1; | |
160 } | |
161 | |
162 JPAKE_CTX_free(bob); | |
163 JPAKE_CTX_free(alice); | |
164 | |
165 /* Now give Alice and Bob different secrets */ | |
166 alice = JPAKE_CTX_new("Alice", "Bob", p, g, q, secret); | |
167 BN_add_word(secret, 1); | |
168 bob = JPAKE_CTX_new("Bob", "Alice", p, g, q, secret); | |
169 | |
170 if(run_jpake(alice, bob) != 5) | |
171 { | |
172 fprintf(stderr, "Mismatched secret JPAKE run failed\n"); | |
173 return 1; | |
174 } | |
175 | |
176 JPAKE_CTX_free(bob); | |
177 JPAKE_CTX_free(alice); | |
178 | |
179 BN_free(secret); | |
180 BN_free(q); | |
181 BN_free(g); | |
182 BN_free(p); | |
183 | |
184 CRYPTO_cleanup_all_ex_data(); | |
185 ERR_remove_thread_state(NULL); | |
186 ERR_free_strings(); | |
187 CRYPTO_mem_leaks(bio_err); | |
188 | |
189 return 0; | |
190 } | |
191 | |
192 #endif | |
OLD | NEW |