| /* BEGIN_HEADER */ |
| #include "mbedtls/entropy.h" |
| #include "mbedtls/entropy_poll.h" |
| |
| /* |
| * Number of calls made to entropy_dummy_source() |
| */ |
| static size_t entropy_dummy_calls; |
| |
| /* |
| * Dummy entropy source |
| * |
| * If data is NULL, write exactly the requested length. |
| * Otherwise, write the length indicated by data or error if negative |
| */ |
| static int entropy_dummy_source( void *data, unsigned char *output, |
| size_t len, size_t *olen ) |
| { |
| entropy_dummy_calls++; |
| |
| if( data == NULL ) |
| *olen = len; |
| else |
| { |
| int *d = (int *) data; |
| |
| if( *d < 0 ) |
| return( MBEDTLS_ERR_ENTROPY_SOURCE_FAILED ); |
| else |
| *olen = *d; |
| } |
| |
| memset( output, 0x2a, *olen ); |
| |
| return( 0 ); |
| } |
| |
| #if defined(MBEDTLS_ENTROPY_NV_SEED) |
| /* |
| * Ability to clear entropy sources to allow testing with just predefined |
| * entropy sources. This function or tests depending on it might break if there |
| * are internal changes to how entropy sources are registered. |
| * |
| * To be called immediately after mbedtls_entropy_init(). |
| * |
| * Just resetting the counter. New sources will overwrite existing ones. |
| * This might break memory checks in the future if sources need 'free-ing' then |
| * as well. |
| */ |
| static void entropy_clear_sources( mbedtls_entropy_context *ctx ) |
| { |
| ctx->source_count = 0; |
| } |
| |
| /* |
| * NV seed read/write functions that use a buffer instead of a file |
| */ |
| static unsigned char buffer_seed[MBEDTLS_ENTROPY_BLOCK_SIZE]; |
| |
| static int buffer_nv_seed_read( unsigned char *buf, size_t buf_len ) |
| { |
| if( buf_len != MBEDTLS_ENTROPY_BLOCK_SIZE ) |
| return( -1 ); |
| |
| memcpy( buf, buffer_seed, MBEDTLS_ENTROPY_BLOCK_SIZE ); |
| return( 0 ); |
| } |
| |
| static int buffer_nv_seed_write( unsigned char *buf, size_t buf_len ) |
| { |
| if( buf_len != MBEDTLS_ENTROPY_BLOCK_SIZE ) |
| return( -1 ); |
| |
| memcpy( buffer_seed, buf, MBEDTLS_ENTROPY_BLOCK_SIZE ); |
| return( 0 ); |
| } |
| |
| /* |
| * NV seed read/write helpers that fill the base seedfile |
| */ |
| static int write_nv_seed( unsigned char *buf, size_t buf_len ) |
| { |
| FILE *f; |
| |
| if( buf_len != MBEDTLS_ENTROPY_BLOCK_SIZE ) |
| return( -1 ); |
| |
| if( ( f = fopen( MBEDTLS_PLATFORM_STD_NV_SEED_FILE, "w" ) ) == NULL ) |
| return( -1 ); |
| |
| if( fwrite( buf, 1, MBEDTLS_ENTROPY_BLOCK_SIZE, f ) != |
| MBEDTLS_ENTROPY_BLOCK_SIZE ) |
| return( -1 ); |
| |
| fclose( f ); |
| |
| return( 0 ); |
| } |
| |
| static int read_nv_seed( unsigned char *buf, size_t buf_len ) |
| { |
| FILE *f; |
| |
| if( buf_len != MBEDTLS_ENTROPY_BLOCK_SIZE ) |
| return( -1 ); |
| |
| if( ( f = fopen( MBEDTLS_PLATFORM_STD_NV_SEED_FILE, "rb" ) ) == NULL ) |
| return( -1 ); |
| |
| if( fread( buf, 1, MBEDTLS_ENTROPY_BLOCK_SIZE, f ) != |
| MBEDTLS_ENTROPY_BLOCK_SIZE ) |
| return( -1 ); |
| |
| fclose( f ); |
| |
| return( 0 ); |
| } |
| #endif /* MBEDTLS_ENTROPY_NV_SEED */ |
| /* END_HEADER */ |
| |
| /* BEGIN_DEPENDENCIES |
| * depends_on:MBEDTLS_ENTROPY_C |
| * END_DEPENDENCIES |
| */ |
| |
| /* BEGIN_CASE depends_on:MBEDTLS_ENTROPY_NV_SEED:MBEDTLS_FS_IO */ |
| void entropy_seed_file( char *path, int ret ) |
| { |
| mbedtls_entropy_context ctx; |
| |
| mbedtls_entropy_init( &ctx ); |
| |
| TEST_ASSERT( mbedtls_entropy_write_seed_file( &ctx, path ) == ret ); |
| TEST_ASSERT( mbedtls_entropy_update_seed_file( &ctx, path ) == ret ); |
| |
| exit: |
| mbedtls_entropy_free( &ctx ); |
| } |
| /* END_CASE */ |
| |
| /* BEGIN_CASE */ |
| void entropy_too_many_sources( ) |
| { |
| mbedtls_entropy_context ctx; |
| size_t i; |
| |
| mbedtls_entropy_init( &ctx ); |
| |
| /* |
| * It's hard to tell precisely when the error will occur, |
| * since we don't know how many sources were automatically added. |
| */ |
| for( i = 0; i < MBEDTLS_ENTROPY_MAX_SOURCES; i++ ) |
| (void) mbedtls_entropy_add_source( &ctx, entropy_dummy_source, NULL, |
| 16, MBEDTLS_ENTROPY_SOURCE_WEAK ); |
| |
| TEST_ASSERT( mbedtls_entropy_add_source( &ctx, entropy_dummy_source, NULL, |
| 16, MBEDTLS_ENTROPY_SOURCE_WEAK ) |
| == MBEDTLS_ERR_ENTROPY_MAX_SOURCES ); |
| |
| exit: |
| mbedtls_entropy_free( &ctx ); |
| } |
| /* END_CASE */ |
| |
| /* BEGIN_CASE depends_on:ENTROPY_HAVE_STRONG */ |
| void entropy_func_len( int len, int ret ) |
| { |
| mbedtls_entropy_context ctx; |
| unsigned char buf[MBEDTLS_ENTROPY_BLOCK_SIZE + 10] = { 0 }; |
| unsigned char acc[MBEDTLS_ENTROPY_BLOCK_SIZE + 10] = { 0 }; |
| size_t i, j; |
| |
| mbedtls_entropy_init( &ctx ); |
| |
| /* |
| * See comments in mbedtls_entropy_self_test() |
| */ |
| for( i = 0; i < 8; i++ ) |
| { |
| TEST_ASSERT( mbedtls_entropy_func( &ctx, buf, len ) == ret ); |
| for( j = 0; j < sizeof( buf ); j++ ) |
| acc[j] |= buf[j]; |
| } |
| |
| if( ret == 0 ) |
| for( j = 0; j < (size_t) len; j++ ) |
| TEST_ASSERT( acc[j] != 0 ); |
| |
| for( j = len; j < sizeof( buf ); j++ ) |
| TEST_ASSERT( acc[j] == 0 ); |
| } |
| /* END_CASE */ |
| |
| /* BEGIN_CASE */ |
| void entropy_source_fail( char *path ) |
| { |
| mbedtls_entropy_context ctx; |
| int fail = -1; |
| unsigned char buf[16]; |
| |
| mbedtls_entropy_init( &ctx ); |
| |
| TEST_ASSERT( mbedtls_entropy_add_source( &ctx, entropy_dummy_source, |
| &fail, 16, |
| MBEDTLS_ENTROPY_SOURCE_WEAK ) |
| == 0 ); |
| |
| TEST_ASSERT( mbedtls_entropy_func( &ctx, buf, sizeof( buf ) ) |
| == MBEDTLS_ERR_ENTROPY_SOURCE_FAILED ); |
| TEST_ASSERT( mbedtls_entropy_gather( &ctx ) |
| == MBEDTLS_ERR_ENTROPY_SOURCE_FAILED ); |
| #if defined(MBEDTLS_FS_IO) && defined(MBEDTLS_ENTROPY_NV_SEED) |
| TEST_ASSERT( mbedtls_entropy_write_seed_file( &ctx, path ) |
| == MBEDTLS_ERR_ENTROPY_SOURCE_FAILED ); |
| TEST_ASSERT( mbedtls_entropy_update_seed_file( &ctx, path ) |
| == MBEDTLS_ERR_ENTROPY_SOURCE_FAILED ); |
| #else |
| ((void) path); |
| #endif |
| |
| exit: |
| mbedtls_entropy_free( &ctx ); |
| } |
| /* END_CASE */ |
| |
| /* BEGIN_CASE depends_on:ENTROPY_HAVE_STRONG */ |
| void entropy_threshold( int threshold, int chunk_size, int result ) |
| { |
| mbedtls_entropy_context ctx; |
| unsigned char buf[MBEDTLS_ENTROPY_BLOCK_SIZE] = { 0 }; |
| int ret; |
| |
| mbedtls_entropy_init( &ctx ); |
| |
| TEST_ASSERT( mbedtls_entropy_add_source( &ctx, entropy_dummy_source, |
| &chunk_size, threshold, |
| MBEDTLS_ENTROPY_SOURCE_WEAK ) == 0 ); |
| |
| entropy_dummy_calls = 0; |
| ret = mbedtls_entropy_func( &ctx, buf, sizeof( buf ) ); |
| |
| if( result >= 0 ) |
| { |
| TEST_ASSERT( ret == 0 ); |
| #if defined(MBEDTLS_ENTROPY_NV_SEED) |
| // Two times as much calls due to the NV seed update |
| result *= 2; |
| #endif |
| TEST_ASSERT( entropy_dummy_calls == (size_t) result ); |
| } |
| else |
| { |
| TEST_ASSERT( ret == result ); |
| } |
| |
| exit: |
| mbedtls_entropy_free( &ctx ); |
| } |
| /* END_CASE */ |
| |
| /* BEGIN_CASE depends_on:MBEDTLS_ENTROPY_NV_SEED:MBEDTLS_FS_IO */ |
| void nv_seed_file_create() |
| { |
| unsigned char buf[MBEDTLS_ENTROPY_BLOCK_SIZE]; |
| |
| memset( buf, 0, MBEDTLS_ENTROPY_BLOCK_SIZE ); |
| |
| TEST_ASSERT( write_nv_seed( buf, MBEDTLS_ENTROPY_BLOCK_SIZE ) == 0 ); |
| } |
| /* END_CASE */ |
| |
| /* BEGIN_CASE depends_on:MBEDTLS_ENTROPY_NV_SEED:MBEDTLS_FS_IO:MBEDTLS_PLATFORM_NV_SEED_ALT */ |
| void entropy_nv_seed_std_io() |
| { |
| unsigned char io_seed[MBEDTLS_ENTROPY_BLOCK_SIZE]; |
| unsigned char check_seed[MBEDTLS_ENTROPY_BLOCK_SIZE]; |
| |
| memset( io_seed, 1, MBEDTLS_ENTROPY_BLOCK_SIZE ); |
| memset( check_seed, 0, MBEDTLS_ENTROPY_BLOCK_SIZE ); |
| |
| mbedtls_platform_set_nv_seed( mbedtls_platform_std_nv_seed_read, |
| mbedtls_platform_std_nv_seed_write ); |
| |
| /* Check if platform NV read and write manipulate the same data */ |
| TEST_ASSERT( write_nv_seed( io_seed, MBEDTLS_ENTROPY_BLOCK_SIZE ) == 0 ); |
| TEST_ASSERT( mbedtls_nv_seed_read( check_seed, MBEDTLS_ENTROPY_BLOCK_SIZE ) == |
| MBEDTLS_ENTROPY_BLOCK_SIZE ); |
| |
| TEST_ASSERT( memcmp( io_seed, check_seed, MBEDTLS_ENTROPY_BLOCK_SIZE ) == 0 ); |
| |
| memset( check_seed, 0, MBEDTLS_ENTROPY_BLOCK_SIZE ); |
| |
| /* Check if platform NV write and raw read manipulate the same data */ |
| TEST_ASSERT( mbedtls_nv_seed_write( io_seed, MBEDTLS_ENTROPY_BLOCK_SIZE ) == |
| MBEDTLS_ENTROPY_BLOCK_SIZE ); |
| TEST_ASSERT( read_nv_seed( check_seed, MBEDTLS_ENTROPY_BLOCK_SIZE ) == 0 ); |
| |
| TEST_ASSERT( memcmp( io_seed, check_seed, MBEDTLS_ENTROPY_BLOCK_SIZE ) == 0 ); |
| } |
| /* END_CASE */ |
| |
| /* BEGIN_CASE depends_on:MBEDTLS_ENTROPY_NV_SEED:MBEDTLS_PLATFORM_NV_SEED_ALT:MBEDTLS_ENTROPY_SHA512_ACCUMULATOR */ |
| void entropy_nv_seed( char *read_seed_str ) |
| { |
| mbedtls_sha512_context accumulator; |
| mbedtls_entropy_context ctx; |
| |
| unsigned char header[2]; |
| unsigned char entropy[MBEDTLS_ENTROPY_BLOCK_SIZE]; |
| unsigned char buf[MBEDTLS_ENTROPY_BLOCK_SIZE]; |
| unsigned char empty[MBEDTLS_ENTROPY_BLOCK_SIZE]; |
| unsigned char read_seed[MBEDTLS_ENTROPY_BLOCK_SIZE]; |
| unsigned char check_seed[MBEDTLS_ENTROPY_BLOCK_SIZE]; |
| unsigned char check_entropy[MBEDTLS_ENTROPY_BLOCK_SIZE]; |
| |
| memset( entropy, 0, MBEDTLS_ENTROPY_BLOCK_SIZE ); |
| memset( buf, 0, MBEDTLS_ENTROPY_BLOCK_SIZE ); |
| memset( buffer_seed, 0, MBEDTLS_ENTROPY_BLOCK_SIZE ); |
| memset( empty, 0, MBEDTLS_ENTROPY_BLOCK_SIZE ); |
| memset( check_seed, 2, MBEDTLS_ENTROPY_BLOCK_SIZE ); |
| memset( check_entropy, 3, MBEDTLS_ENTROPY_BLOCK_SIZE ); |
| |
| // Set the initial NV seed to read |
| unhexify( read_seed, read_seed_str ); |
| memcpy( buffer_seed, read_seed, MBEDTLS_ENTROPY_BLOCK_SIZE ); |
| |
| // Make sure we read/write NV seed from our buffers |
| mbedtls_platform_set_nv_seed( buffer_nv_seed_read, buffer_nv_seed_write ); |
| |
| mbedtls_entropy_init( &ctx ); |
| entropy_clear_sources( &ctx ); |
| |
| TEST_ASSERT( mbedtls_entropy_add_source( &ctx, mbedtls_nv_seed_poll, NULL, |
| MBEDTLS_ENTROPY_BLOCK_SIZE, |
| MBEDTLS_ENTROPY_SOURCE_STRONG ) == 0 ); |
| |
| // Do an entropy run |
| TEST_ASSERT( mbedtls_entropy_func( &ctx, entropy, sizeof( entropy ) ) == 0 ); |
| |
| // Determine what should have happened with manual entropy internal logic |
| // Only use the SHA-512 version to check |
| |
| // Init accumulator |
| header[1] = MBEDTLS_ENTROPY_BLOCK_SIZE; |
| mbedtls_sha512_starts( &accumulator, 0 ); |
| |
| // First run for updating write_seed |
| header[0] = 0; |
| mbedtls_sha512_update( &accumulator, header, 2 ); |
| mbedtls_sha512_update( &accumulator, read_seed, MBEDTLS_ENTROPY_BLOCK_SIZE ); |
| mbedtls_sha512_finish( &accumulator, buf ); |
| |
| memset( &accumulator, 0, sizeof( mbedtls_sha512_context ) ); |
| mbedtls_sha512_starts( &accumulator, 0 ); |
| mbedtls_sha512_update( &accumulator, buf, MBEDTLS_ENTROPY_BLOCK_SIZE ); |
| |
| mbedtls_sha512( buf, MBEDTLS_ENTROPY_BLOCK_SIZE, check_seed, 0 ); |
| |
| // Second run for actual entropy (triggers mbedtls_entropy_update_nv_seed) |
| header[0] = MBEDTLS_ENTROPY_SOURCE_MANUAL; |
| mbedtls_sha512_update( &accumulator, header, 2 ); |
| mbedtls_sha512_update( &accumulator, empty, MBEDTLS_ENTROPY_BLOCK_SIZE ); |
| |
| header[0] = 0; |
| mbedtls_sha512_update( &accumulator, header, 2 ); |
| mbedtls_sha512_update( &accumulator, check_seed, MBEDTLS_ENTROPY_BLOCK_SIZE ); |
| mbedtls_sha512_finish( &accumulator, buf ); |
| |
| mbedtls_sha512( buf, MBEDTLS_ENTROPY_BLOCK_SIZE, check_entropy, 0 ); |
| |
| // Check result of both NV file and entropy received with the manual calculations |
| TEST_ASSERT( memcmp( check_seed, buffer_seed, MBEDTLS_ENTROPY_BLOCK_SIZE ) == 0 ); |
| TEST_ASSERT( memcmp( check_entropy, entropy, MBEDTLS_ENTROPY_BLOCK_SIZE ) == 0 ); |
| |
| mbedtls_entropy_free( &ctx ); |
| } |
| /* END_CASE */ |
| |
| /* BEGIN_CASE depends_on:ENTROPY_HAVE_STRONG:MBEDTLS_SELF_TEST */ |
| void entropy_selftest( int result ) |
| { |
| TEST_ASSERT( mbedtls_entropy_self_test( 1 ) == result ); |
| } |
| /* END_CASE */ |