t_pkcs5.c   [plain text]

/*
 * lib/crypto/t_pkcs5.c
 *
 * Copyright 2002 by the Massachusetts Institute of Technology.
 * All Rights Reserved.
 *
 * Export of this software from the United States of America may
 *   require a specific license from the United States Government.
 *   It is the responsibility of any person or organization contemplating
 *   export to obtain such a license before exporting.
 * 
 * WITHIN THAT CONSTRAINT, permission to use, copy, modify, and
 * distribute this software and its documentation for any purpose and
 * without fee is hereby granted, provided that the above copyright
 * notice appear in all copies and that both that copyright notice and
 * this permission notice appear in supporting documentation, and that
 * the name of M.I.T. not be used in advertising or publicity pertaining
 * to distribution of the software without specific, written prior
 * permission.  Furthermore if you modify this software you must label
 * your software as modified software and not distribute it in such a
 * fashion that it might be confused with the original M.I.T. software.
 * M.I.T. makes no representations about the suitability of
 * this software for any purpose.  It is provided "as is" without express
 * or implied warranty.
 * 
 *
 * Test vectors for PBKDF2 (from PKCS #5v2), based on RFC 3211.
 */

#include <assert.h>
#include <stdio.h>
#include <string.h>
#include <ctype.h>

#include "k5-int.h"

static void printhex (size_t len, const char *p)
{
    while (len--)
	printf (" %02X", 0xff & *p++);
}

static void printdata (krb5_data *d) {
    printhex (d->length, d->data);
}

static void test_pbkdf2_rfc3211()
{
    char x[100];
    krb5_error_code err;
    krb5_data d, pass, salt;
    int i;

    /* RFC 3211 test cases.  */
    static const struct {
	const char *pass;
	const char *salt;
	unsigned int count;
	size_t len;
	const unsigned char expected[24];
    } t[] = {
	{ "password", "\x12\x34\x56\x78\x78\x56\x34\x12", 5, 8,
	  { 0xD1, 0xDA, 0xA7, 0x86, 0x15, 0xF2, 0x87, 0xE6 } },
	{ "All n-entities must communicate with other "
	  "n-entities via n-1 entiteeheehees",
	  "\x12\x34\x56\x78\x78\x56\x34\x12", 500, 24,
	  { 0x6A, 0x89, 0x70, 0xBF, 0x68, 0xC9, 0x2C, 0xAE,
	    0xA8, 0x4A, 0x8D, 0xF2, 0x85, 0x10, 0x85, 0x86,
	    0x07, 0x12, 0x63, 0x80, 0xCC, 0x47, 0xAB, 0x2D } },
    };

    d.data = x;
    printf("RFC 3211 test of PBKDF#2\n");

    for (i = 0; i < sizeof(t)/sizeof(t[0]); i++) {

	printf("pkbdf2(iter_count=%d, dklen=%d (%d bytes), salt=12 34 56 78 78 56 34 12,\n"
	       "       pass=%s):\n  ->",
	       t[i].count, t[i].len * 8, t[i].len, t[i].pass);

	d.length = t[i].len;
	pass.data = t[i].pass;
	pass.length = strlen(pass.data);
	salt.data = t[i].salt;
	salt.length = strlen(salt.data);
	err = krb5int_pbkdf2_hmac_sha1 (&d, t[i].count, &pass, &salt);
	if (err) {
	    printf("error in computing pbkdf2: %s\n", error_message(err));
	    exit(1);
	}
	printdata(&d);
	if (!memcmp(x, t[i].expected, t[i].len))
	    printf("\nTest passed.\n\n");
	else {
	    printf("\n*** CHECK FAILED!\n");
	    exit(1);
	}
    }
}

int main ()
{
    test_pbkdf2_rfc3211();
    return 0;
}