1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
|
#! /usr/bin/env perl
# Copyright 2017-2021 The OpenSSL Project Authors. All Rights Reserved.
# Copyright 2017 BaishanCloud. All rights reserved.
#
# Licensed under the Apache License 2.0 (the "License"). You may not use
# this file except in compliance with the License. You can obtain a copy
# in the file LICENSE in the source distribution or at
# https://www.openssl.org/source/license.html
use strict;
use warnings;
use File::Spec;
use OpenSSL::Test qw/:DEFAULT data_file/;
use OpenSSL::Test::Utils;
setup("test_mp_rsa");
my @test_param = (
# 3 primes, 2048-bit
{
primes => '3',
bits => '2048',
},
# 4 primes, 4096-bit
{
primes => '4',
bits => '4096',
},
# 5 primes, 8192-bit
{
primes => '5',
bits => '8192',
},
);
plan tests => 2 + scalar(@test_param) * 5 * 2;
ok(run(test(["rsa_mp_test"])), "running rsa multi prime test");
ok(run(app(['openssl', 'pkey', '-noout', '-check', '-in',
data_file('rsamplcm.pem')])), "checking lcm in key check");
my $cleartext = data_file("plain_text");
# genrsa
run_mp_tests(0);
# evp
run_mp_tests(1);
sub run_mp_tests {
my $evp = shift;
foreach my $param (@test_param) {
my $primes = $param->{primes};
my $bits = $param->{bits};
my $name = ($evp ? "evp" : "") . "${bits}p${primes}";
if ($evp) {
ok(run(app([ 'openssl', 'genpkey', '-out', "rsamptest-$name.pem",
'-algorithm', 'RSA',
'-pkeyopt', "rsa_keygen_primes:$primes",
'-pkeyopt', "rsa_keygen_bits:$bits"])),
"genrsa $name");
ok(run(app([ 'openssl', 'pkey', '-check',
'-in', "rsamptest-$name.pem", '-noout'])),
"rsa -check $name");
ok(run(app([ 'openssl', 'pkeyutl', '-inkey', "rsamptest-$name.pem",
'-encrypt', '-in', $cleartext,
'-out', "rsamptest-$name.enc" ])),
"rsa $name encrypt");
ok(run(app([ 'openssl', 'pkeyutl', '-inkey', "rsamptest-$name.pem",
'-decrypt', '-in', "rsamptest-$name.enc",
'-out', "rsamptest-$name.dec" ])),
"rsa $name decrypt");
} else {
ok(run(app([ 'openssl', 'genrsa', '-out', "rsamptest-$name.pem",
'-primes', $primes, $bits])), "genrsa $name");
ok(run(app([ 'openssl', 'rsa', '-check',
'-in', "rsamptest-$name.pem", '-noout'])),
"rsa -check $name");
if (!disabled('deprecated-3.0')) {
ok(run(app([ 'openssl', 'rsautl', '-inkey', "rsamptest-$name.pem",
'-encrypt', '-in', $cleartext,
'-out', "rsamptest-$name.enc" ])),
"rsa $name encrypt");
ok(run(app([ 'openssl', 'rsautl', '-inkey', "rsamptest-$name.pem",
'-decrypt', '-in', "rsamptest-$name.enc",
'-out', "rsamptest-$name.dec" ])),
"rsa $name decrypt");
} else {
ok(run(app([ 'openssl', 'pkeyutl', '-inkey', "rsamptest-$name.pem",
'-encrypt', '-in', $cleartext,
'-out', "rsamptest-$name.enc" ])),
"rsa $name encrypt");
ok(run(app([ 'openssl', 'pkeyutl', '-inkey', "rsamptest-$name.pem",
'-decrypt', '-in', "rsamptest-$name.enc",
'-out', "rsamptest-$name.dec" ])),
"rsa $name decrypt");
}
}
ok(check_msg("rsamptest-$name.dec"), "rsa $name check result");
}
}
sub check_msg {
my $decrypted = shift;
my $msg;
my $dec;
open(my $fh, "<", $cleartext) or return 0;
binmode $fh;
read($fh, $msg, 10240);
close $fh;
open($fh, "<", $decrypted ) or return 0;
binmode $fh;
read($fh, $dec, 10240);
close $fh;
if ($msg ne $dec) {
print STDERR "cleartext and decrypted are not the same";
return 0;
}
return 1;
}
|