1 /*
2 BlueZ - Bluetooth protocol stack for Linux
3
4 Copyright (C) 2014 Intel Corporation
5
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License version 2 as
8 published by the Free Software Foundation;
9
10 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
11 OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
12 FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
13 IN NO EVENT SHALL THE COPYRIGHT HOLDER(S) AND AUTHOR(S) BE LIABLE FOR ANY
14 CLAIM, OR ANY SPECIAL INDIRECT OR CONSEQUENTIAL DAMAGES, OR ANY DAMAGES
15 WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
16 ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
17 OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
18
19 ALL LIABILITY, INCLUDING LIABILITY FOR INFRINGEMENT OF ANY PATENTS,
20 COPYRIGHTS, TRADEMARKS OR OTHER RIGHTS, RELATING TO USE OF THIS
21 SOFTWARE IS DISCLAIMED.
22 */
23
24 #include <linux/debugfs.h>
25
26 #include <net/bluetooth/bluetooth.h>
27 #include <net/bluetooth/hci_core.h>
28
29 #include "ecdh_helper.h"
30 #include "smp.h"
31 #include "selftest.h"
32
33 #if IS_ENABLED(CONFIG_BT_SELFTEST_ECDH)
34
35 static const u8 priv_a_1[32] __initconst = {
36 0xbd, 0x1a, 0x3c, 0xcd, 0xa6, 0xb8, 0x99, 0x58,
37 0x99, 0xb7, 0x40, 0xeb, 0x7b, 0x60, 0xff, 0x4a,
38 0x50, 0x3f, 0x10, 0xd2, 0xe3, 0xb3, 0xc9, 0x74,
39 0x38, 0x5f, 0xc5, 0xa3, 0xd4, 0xf6, 0x49, 0x3f,
40 };
41 static const u8 priv_b_1[32] __initconst = {
42 0xfd, 0xc5, 0x7f, 0xf4, 0x49, 0xdd, 0x4f, 0x6b,
43 0xfb, 0x7c, 0x9d, 0xf1, 0xc2, 0x9a, 0xcb, 0x59,
44 0x2a, 0xe7, 0xd4, 0xee, 0xfb, 0xfc, 0x0a, 0x90,
45 0x9a, 0xbb, 0xf6, 0x32, 0x3d, 0x8b, 0x18, 0x55,
46 };
47 static const u8 pub_a_1[64] __initconst = {
48 0xe6, 0x9d, 0x35, 0x0e, 0x48, 0x01, 0x03, 0xcc,
49 0xdb, 0xfd, 0xf4, 0xac, 0x11, 0x91, 0xf4, 0xef,
50 0xb9, 0xa5, 0xf9, 0xe9, 0xa7, 0x83, 0x2c, 0x5e,
51 0x2c, 0xbe, 0x97, 0xf2, 0xd2, 0x03, 0xb0, 0x20,
52
53 0x8b, 0xd2, 0x89, 0x15, 0xd0, 0x8e, 0x1c, 0x74,
54 0x24, 0x30, 0xed, 0x8f, 0xc2, 0x45, 0x63, 0x76,
55 0x5c, 0x15, 0x52, 0x5a, 0xbf, 0x9a, 0x32, 0x63,
56 0x6d, 0xeb, 0x2a, 0x65, 0x49, 0x9c, 0x80, 0xdc,
57 };
58 static const u8 pub_b_1[64] __initconst = {
59 0x90, 0xa1, 0xaa, 0x2f, 0xb2, 0x77, 0x90, 0x55,
60 0x9f, 0xa6, 0x15, 0x86, 0xfd, 0x8a, 0xb5, 0x47,
61 0x00, 0x4c, 0x9e, 0xf1, 0x84, 0x22, 0x59, 0x09,
62 0x96, 0x1d, 0xaf, 0x1f, 0xf0, 0xf0, 0xa1, 0x1e,
63
64 0x4a, 0x21, 0xb1, 0x15, 0xf9, 0xaf, 0x89, 0x5f,
65 0x76, 0x36, 0x8e, 0xe2, 0x30, 0x11, 0x2d, 0x47,
66 0x60, 0x51, 0xb8, 0x9a, 0x3a, 0x70, 0x56, 0x73,
67 0x37, 0xad, 0x9d, 0x42, 0x3e, 0xf3, 0x55, 0x4c,
68 };
69 static const u8 dhkey_1[32] __initconst = {
70 0x98, 0xa6, 0xbf, 0x73, 0xf3, 0x34, 0x8d, 0x86,
71 0xf1, 0x66, 0xf8, 0xb4, 0x13, 0x6b, 0x79, 0x99,
72 0x9b, 0x7d, 0x39, 0x0a, 0xa6, 0x10, 0x10, 0x34,
73 0x05, 0xad, 0xc8, 0x57, 0xa3, 0x34, 0x02, 0xec,
74 };
75
76 static const u8 priv_a_2[32] __initconst = {
77 0x63, 0x76, 0x45, 0xd0, 0xf7, 0x73, 0xac, 0xb7,
78 0xff, 0xdd, 0x03, 0x72, 0xb9, 0x72, 0x85, 0xb4,
79 0x41, 0xb6, 0x5d, 0x0c, 0x5d, 0x54, 0x84, 0x60,
80 0x1a, 0xa3, 0x9a, 0x3c, 0x69, 0x16, 0xa5, 0x06,
81 };
82 static const u8 priv_b_2[32] __initconst = {
83 0xba, 0x30, 0x55, 0x50, 0x19, 0xa2, 0xca, 0xa3,
84 0xa5, 0x29, 0x08, 0xc6, 0xb5, 0x03, 0x88, 0x7e,
85 0x03, 0x2b, 0x50, 0x73, 0xd4, 0x2e, 0x50, 0x97,
86 0x64, 0xcd, 0x72, 0x0d, 0x67, 0xa0, 0x9a, 0x52,
87 };
88 static const u8 pub_a_2[64] __initconst = {
89 0xdd, 0x78, 0x5c, 0x74, 0x03, 0x9b, 0x7e, 0x98,
90 0xcb, 0x94, 0x87, 0x4a, 0xad, 0xfa, 0xf8, 0xd5,
91 0x43, 0x3e, 0x5c, 0xaf, 0xea, 0xb5, 0x4c, 0xf4,
92 0x9e, 0x80, 0x79, 0x57, 0x7b, 0xa4, 0x31, 0x2c,
93
94 0x4f, 0x5d, 0x71, 0x43, 0x77, 0x43, 0xf8, 0xea,
95 0xd4, 0x3e, 0xbd, 0x17, 0x91, 0x10, 0x21, 0xd0,
96 0x1f, 0x87, 0x43, 0x8e, 0x40, 0xe2, 0x52, 0xcd,
97 0xbe, 0xdf, 0x98, 0x38, 0x18, 0x12, 0x95, 0x91,
98 };
99 static const u8 pub_b_2[64] __initconst = {
100 0xcc, 0x00, 0x65, 0xe1, 0xf5, 0x6c, 0x0d, 0xcf,
101 0xec, 0x96, 0x47, 0x20, 0x66, 0xc9, 0xdb, 0x84,
102 0x81, 0x75, 0xa8, 0x4d, 0xc0, 0xdf, 0xc7, 0x9d,
103 0x1b, 0x3f, 0x3d, 0xf2, 0x3f, 0xe4, 0x65, 0xf4,
104
105 0x79, 0xb2, 0xec, 0xd8, 0xca, 0x55, 0xa1, 0xa8,
106 0x43, 0x4d, 0x6b, 0xca, 0x10, 0xb0, 0xc2, 0x01,
107 0xc2, 0x33, 0x4e, 0x16, 0x24, 0xc4, 0xef, 0xee,
108 0x99, 0xd8, 0xbb, 0xbc, 0x48, 0xd0, 0x01, 0x02,
109 };
110 static const u8 dhkey_2[32] __initconst = {
111 0x69, 0xeb, 0x21, 0x32, 0xf2, 0xc6, 0x05, 0x41,
112 0x60, 0x19, 0xcd, 0x5e, 0x94, 0xe1, 0xe6, 0x5f,
113 0x33, 0x07, 0xe3, 0x38, 0x4b, 0x68, 0xe5, 0x62,
114 0x3f, 0x88, 0x6d, 0x2f, 0x3a, 0x84, 0x85, 0xab,
115 };
116
117 static const u8 priv_a_3[32] __initconst = {
118 0xbd, 0x1a, 0x3c, 0xcd, 0xa6, 0xb8, 0x99, 0x58,
119 0x99, 0xb7, 0x40, 0xeb, 0x7b, 0x60, 0xff, 0x4a,
120 0x50, 0x3f, 0x10, 0xd2, 0xe3, 0xb3, 0xc9, 0x74,
121 0x38, 0x5f, 0xc5, 0xa3, 0xd4, 0xf6, 0x49, 0x3f,
122 };
123 static const u8 pub_a_3[64] __initconst = {
124 0xe6, 0x9d, 0x35, 0x0e, 0x48, 0x01, 0x03, 0xcc,
125 0xdb, 0xfd, 0xf4, 0xac, 0x11, 0x91, 0xf4, 0xef,
126 0xb9, 0xa5, 0xf9, 0xe9, 0xa7, 0x83, 0x2c, 0x5e,
127 0x2c, 0xbe, 0x97, 0xf2, 0xd2, 0x03, 0xb0, 0x20,
128
129 0x8b, 0xd2, 0x89, 0x15, 0xd0, 0x8e, 0x1c, 0x74,
130 0x24, 0x30, 0xed, 0x8f, 0xc2, 0x45, 0x63, 0x76,
131 0x5c, 0x15, 0x52, 0x5a, 0xbf, 0x9a, 0x32, 0x63,
132 0x6d, 0xeb, 0x2a, 0x65, 0x49, 0x9c, 0x80, 0xdc,
133 };
134 static const u8 dhkey_3[32] __initconst = {
135 0x2d, 0xab, 0x00, 0x48, 0xcb, 0xb3, 0x7b, 0xda,
136 0x55, 0x7b, 0x8b, 0x72, 0xa8, 0x57, 0x87, 0xc3,
137 0x87, 0x27, 0x99, 0x32, 0xfc, 0x79, 0x5f, 0xae,
138 0x7c, 0x1c, 0xf9, 0x49, 0xe6, 0xd7, 0xaa, 0x70,
139 };
140
141 static int __init test_ecdh_sample(struct crypto_kpp *tfm, const u8 priv_a[32],
142 const u8 priv_b[32], const u8 pub_a[64],
143 const u8 pub_b[64], const u8 dhkey[32])
144 {
145 u8 *tmp, *dhkey_a, *dhkey_b;
146 int ret;
147
148 tmp = kmalloc(64, GFP_KERNEL);
149 if (!tmp)
150 return -EINVAL;
151
152 dhkey_a = &tmp[0];
153 dhkey_b = &tmp[32];
154
155 ret = set_ecdh_privkey(tfm, priv_a);
156 if (ret)
157 goto out;
158
159 ret = compute_ecdh_secret(tfm, pub_b, dhkey_a);
160 if (ret)
161 goto out;
162
163 if (memcmp(dhkey_a, dhkey, 32)) {
164 ret = -EINVAL;
165 goto out;
166 }
167
168 ret = set_ecdh_privkey(tfm, priv_b);
169 if (ret)
170 goto out;
171
172 ret = compute_ecdh_secret(tfm, pub_a, dhkey_b);
173 if (ret)
174 goto out;
175
176 if (memcmp(dhkey_b, dhkey, 32))
177 ret = -EINVAL;
178 /* fall through*/
179 out:
180 kfree(tmp);
181 return ret;
182 }
183
184 static char test_ecdh_buffer[32];
185
186 static ssize_t test_ecdh_read(struct file *file, char __user *user_buf,
187 size_t count, loff_t *ppos)
188 {
189 return simple_read_from_buffer(user_buf, count, ppos, test_ecdh_buffer,
190 strlen(test_ecdh_buffer));
191 }
192
193 static const struct file_operations test_ecdh_fops = {
194 .open = simple_open,
195 .read = test_ecdh_read,
196 .llseek = default_llseek,
197 };
198
199 static int __init test_ecdh(void)
200 {
201 struct crypto_kpp *tfm;
202 ktime_t calltime, delta, rettime;
203 unsigned long long duration = 0;
204 int err;
205
206 calltime = ktime_get();
207
208 tfm = crypto_alloc_kpp("ecdh-nist-p256", 0, 0);
209 if (IS_ERR(tfm)) {
210 BT_ERR("Unable to create ECDH crypto context");
211 err = PTR_ERR(tfm);
212 goto done;
213 }
214
215 err = test_ecdh_sample(tfm, priv_a_1, priv_b_1, pub_a_1, pub_b_1,
216 dhkey_1);
217 if (err) {
218 BT_ERR("ECDH sample 1 failed");
219 goto done;
220 }
221
222 err = test_ecdh_sample(tfm, priv_a_2, priv_b_2, pub_a_2, pub_b_2,
223 dhkey_2);
224 if (err) {
225 BT_ERR("ECDH sample 2 failed");
226 goto done;
227 }
228
229 err = test_ecdh_sample(tfm, priv_a_3, priv_a_3, pub_a_3, pub_a_3,
230 dhkey_3);
231 if (err) {
232 BT_ERR("ECDH sample 3 failed");
233 goto done;
234 }
235
236 crypto_free_kpp(tfm);
237
238 rettime = ktime_get();
239 delta = ktime_sub(rettime, calltime);
240 duration = (unsigned long long) ktime_to_ns(delta) >> 10;
241
242 BT_INFO("ECDH test passed in %llu usecs", duration);
243
244 done:
245 if (!err)
246 snprintf(test_ecdh_buffer, sizeof(test_ecdh_buffer),
247 "PASS (%llu usecs)\n", duration);
248 else
249 snprintf(test_ecdh_buffer, sizeof(test_ecdh_buffer), "FAIL\n");
250
251 debugfs_create_file("selftest_ecdh", 0444, bt_debugfs, NULL,
252 &test_ecdh_fops);
253
254 return err;
255 }
256
257 #else
258
259 static inline int test_ecdh(void)
260 {
261 return 0;
262 }
263
264 #endif
265
266 static int __init run_selftest(void)
267 {
268 int err;
269
270 BT_INFO("Starting self testing");
271
272 err = test_ecdh();
273 if (err)
274 goto done;
275
276 err = bt_selftest_smp();
277
278 done:
279 BT_INFO("Finished self testing");
280
281 return err;
282 }
283
284 #if IS_MODULE(CONFIG_BT)
285
286 /* This is run when CONFIG_BT_SELFTEST=y and CONFIG_BT=m and is just a
287 * wrapper to allow running this at module init.
288 *
289 * If CONFIG_BT_SELFTEST=n, then this code is not compiled at all.
290 */
291 int __init bt_selftest(void)
292 {
293 return run_selftest();
294 }
295
296 #else
297
298 /* This is run when CONFIG_BT_SELFTEST=y and CONFIG_BT=y and is run
299 * via late_initcall() as last item in the initialization sequence.
300 *
301 * If CONFIG_BT_SELFTEST=n, then this code is not compiled at all.
302 */
303 static int __init bt_selftest_init(void)
304 {
305 return run_selftest();
306 }
307 late_initcall(bt_selftest_init);
308
309 #endif
310
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.