cuberite/polarssl
1
0
Fork 0
mirror of https://github.com/cuberite/polarssl.git synced 2025-09-29 08:24:11 -04:00
Code Issues Packages Projects Releases Wiki Activity

Add hash corruption test to interruptible verify test

Browse Source 
Signed-off-by: Paul Elliott <paul.elliott@arm.com>
This commit is contained in:
Paul Elliott 2023-02-24 18:40:10 +00:00
parent 17152df58d
commit 8359c14c14
1 changed files with 25 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
tests/suites/test_suite_psa_crypto.function
View File

@ -7042,6 +7042,12 @@ exit:
* 3. Test that the number of ops done prior to start and after abort is zero * 3. Test that the number of ops done prior to start and after abort is zero
* and that each successful stage completes some ops (this is not mandated by * and that each successful stage completes some ops (this is not mandated by
* the PSA specification, but is currently the case). * the PSA specification, but is currently the case).
*
* 4. Test that calling psa_sign_hash_get_num_ops() multiple times between
* complete() calls does not alter the number of ops returned.
*
* 5. Test that after corrupting the hash, the verification detects an invalid
* signature.
*/ */
void verify_hash_interruptible(int key_type_arg, data_t *key_data, void verify_hash_interruptible(int key_type_arg, data_t *key_data,
int alg_arg, data_t *hash_data, int alg_arg, data_t *hash_data,
@ -7126,6 +7132,25 @@ void verify_hash_interruptible(int key_type_arg, data_t *key_data,
num_ops = psa_verify_hash_get_num_ops(&operation); num_ops = psa_verify_hash_get_num_ops(&operation);
TEST_ASSERT(num_ops == 0); TEST_ASSERT(num_ops == 0);
if (hash_data->len != 0) {
/* Flip a bit in the hash and verify that the signature is now detected
* as invalid. Flip a bit at the beginning, not at the end, because
* ECDSA may ignore the last few bits of the input. */
hash_data->x[0] ^= 1;
/* Start verification. */
PSA_ASSERT(psa_verify_hash_start(&operation, key, alg,
hash_data->x, hash_data->len,
signature_data->x, signature_data->len));
/* Continue performing the signature until complete. */
do {
status = psa_verify_hash_complete(&operation);
} while (status == PSA_OPERATION_INCOMPLETE);
TEST_ASSERT(status == PSA_ERROR_INVALID_SIGNATURE);
}
exit: exit:
psa_reset_key_attributes(&attributes); psa_reset_key_attributes(&attributes);
psa_destroy_key(key); psa_destroy_key(key);