xref: /external/vboot_reference/tests/run_rsa_tests.sh

#!/bin/bash

# Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
# Use of this source code is governed by a BSD-style license that can be
# found in the LICENSE file.

# Run tests for cryptographic routine implementations - Message digests 
# and RSA Signature verification.

return_code=0
hash_algos=( sha1 sha256 sha512 )
key_lengths=( 1024 2048 4096 8192 ) 
TEST_FILE=test_file 
TEST_FILE_SIZE=1000000

COL_RED='\E[31;1m'
COL_GREEN='\E[32;1m'
COL_YELLOW='\E[33;1m'
COL_BLUE='\E[34;1m'
COL_STOP='\E[0;m'

# Generate public key signatures on an input file for various combinations
# of message digest algorithms and RSA key sizes.
function generate_signatures {
  algorithmcounter=0
  for keylen in ${key_lengths[@]}
  do
    for hashalgo in ${hash_algos[@]}
    do
      ${UTIL_DIR}/signature_digest $algorithmcounter $1 | openssl rsautl -sign \
        -pkcs -inkey ${KEY_DIR}/key_rsa${keylen}.pem \
        > $1.rsa${keylen}\_${hashalgo}.sig
      let algorithmcounter=algorithmcounter+1
    done
  done
}

function test_signatures {
  algorithmcounter=0
  for keylen in ${key_lengths[@]}
  do
    for hashalgo in ${hash_algos[@]}
    do
      echo -e "For ${COL_YELLOW}RSA-$keylen and $hashalgo${COL_STOP}:"
      ${UTIL_DIR}/verify_data $algorithmcounter \
        ${KEY_DIR}/key_rsa${keylen}.keyb \
        ${TEST_FILE}.rsa${keylen}_${hashalgo}.sig ${TEST_FILE}
      if [ $? -ne 0 ]
      then  
        return_code=255
      fi
      let algorithmcounter=algorithmcounter+1
    done
  done
}

function test_verification {
  algorithmcounter=0
  for keylen in ${key_lengths[@]}
  do
    for hashalgo in ${hash_algos[@]}
    do
      echo -e "For ${COL_YELLOW}RSA-$keylen and $hashalgo${COL_STOP}:"
      cd ${UTIL_DIR} && ${TEST_DIR}/firmware_image_tests $algorithmcounter \
        ${TEST_DIR}/testkeys/key_rsa8192.pem \
        ${TEST_DIR}/testkeys/key_rsa8192.keyb \
        ${TEST_DIR}/testkeys/key_rsa${keylen}.pem \
        ${TEST_DIR}/testkeys/key_rsa${keylen}.keyb
      let algorithmcounter=algorithmcounter+1
    done
  done
}

function pre_work {
  # Generate a file with random bytes for signature tests.
  echo "Generating test file..."
  dd if=/dev/urandom of=${TEST_FILE} bs=${TEST_FILE_SIZE} count=1
  echo "Generating signatures..."
  generate_signatures $TEST_FILE
}

function cleanup {
  rm ${SCRIPT_DIR}/${TEST_FILE} ${SCRIPT_DIR}/${TEST_FILE}.*.sig
}

# Determine script directory.
if [[ $0 == '/'* ]]; 
then
  SCRIPT_DIR="`dirname $0`"
elif [[ $0 == './'* ]];
then
  SCRIPT_DIR="`pwd`"
else
  SCRIPT_DIR="`pwd`"/"`dirname $0`"
fi
UTIL_DIR=`dirname ${SCRIPT_DIR}`/utils
KEY_DIR=${SCRIPT_DIR}/testkeys
TEST_DIR=${SCRIPT_DIR}/

echo "Generating test cases..."
pre_work

echo
echo "Testing signature verification..."
test_signatures

echo
echo "Testing high-level image verification..."
test_verification

echo
echo "Cleaning up..."
cleanup

exit $return_code