mirror of
https://github.com/Telecominfraproject/OpenCellular.git
synced 2025-11-25 02:35:22 +00:00
f5564fa98c
This CL does the following: 1) It adds a SignatureBuf function which uses the OpenSSL library to generate RSA signature. This is more robust than the previous way of invoking the command line "openssl" utility and capturing its output. No more unnecessary temporary files for signature operations. 2) It adds functions that allow direct manipulation of binary verified Firmware and Kernel Image blobs in memory. 3) It changes the structure field members for FirmwareImage to make it consistent with KernelImage. Now it's clearer which key is used when. 4) Minor bug fixes and slightly improved API for dealing verified boot firmware and kernel images. 5) Renames the RSA_verify function to prevent conflicts with OpenSSL since it's linked into the firmware utility binary. Review URL: http://codereview.chromium.org/661353
96 lines
2.7 KiB
C
96 lines
2.7 KiB
C
/* Copyright (c) 2010 The Chromium OS Authors. All rights reserved.
|
|
* Use of this source code is governed by a BSD-style license that can be
|
|
* found in the LICENSE file.
|
|
*/
|
|
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
|
|
#include "file_keys.h"
|
|
#include "padding.h"
|
|
#include "rsa.h"
|
|
#include "timer_utils.h"
|
|
#include "utility.h"
|
|
|
|
#define FILE_NAME_SIZE 128
|
|
#define NUM_OPERATIONS 100 /* Number of signature operations to time. */
|
|
|
|
int SpeedTestAlgorithm(int algorithm) {
|
|
int i, key_size;
|
|
int error_code = 0;
|
|
double speed, msecs;
|
|
char file_name[FILE_NAME_SIZE];
|
|
uint8_t* digest = NULL;
|
|
uint8_t* signature = NULL;
|
|
uint32_t digest_len, sig_len;
|
|
RSAPublicKey* key = NULL;
|
|
ClockTimerState ct;
|
|
char* sha_strings[] = { /* Maps algorithm->SHA algorithm. */
|
|
"sha1", "sha256", "sha512", /* RSA-1024 */
|
|
"sha1", "sha256", "sha512", /* RSA-2048 */
|
|
"sha1", "sha256", "sha512", /* RSA-4096 */
|
|
"sha1", "sha256", "sha512", /* RSA-8192 */
|
|
};
|
|
|
|
key_size = siglen_map[algorithm] * 8; /* in bits. */
|
|
/* Get key. */
|
|
snprintf(file_name, FILE_NAME_SIZE, "testkeys/key_rsa%d.keyb", key_size);
|
|
key = RSAPublicKeyFromFile(file_name);
|
|
if (!key) {
|
|
fprintf(stderr, "Couldn't read RSA Public key from file: %s\n", file_name);
|
|
error_code = 1;
|
|
goto failure;
|
|
}
|
|
|
|
/* Get expected digest. */
|
|
snprintf(file_name, FILE_NAME_SIZE, "testcases/test_file.%s.digest",
|
|
sha_strings[algorithm]);
|
|
digest = BufferFromFile(file_name, &digest_len);
|
|
if (!digest) {
|
|
fprintf(stderr, "Couldn't read digest file.\n");
|
|
error_code = 1;
|
|
goto failure;
|
|
}
|
|
|
|
/* Get signature to verify against. */
|
|
snprintf(file_name, FILE_NAME_SIZE, "testcases/test_file.rsa%d_%s.sig",
|
|
key_size, sha_strings[algorithm]);
|
|
signature = BufferFromFile(file_name, &sig_len);
|
|
if (!signature) {
|
|
fprintf(stderr, "Couldn't read signature file.\n");
|
|
error_code = 1;
|
|
goto failure;
|
|
}
|
|
|
|
StartTimer(&ct);
|
|
for (i = 0; i < NUM_OPERATIONS; i++) {
|
|
if (!RSAVerify(key, signature, sig_len, algorithm, digest))
|
|
fprintf(stderr, "Warning: Signature Check Failed.\n");
|
|
}
|
|
StopTimer(&ct);
|
|
|
|
msecs = (float) GetDurationMsecs(&ct) / NUM_OPERATIONS;
|
|
speed = 1000.0 / msecs ;
|
|
fprintf(stderr, "# rsa%d/%s:\tTime taken per verification = %.02f ms,"
|
|
" Speed = %.02f verifications/s\n", key_size, sha_strings[algorithm],
|
|
msecs, speed);
|
|
fprintf(stdout, "ms_rsa%d_%s:%.02f\n", key_size, sha_strings[algorithm],
|
|
msecs);
|
|
|
|
failure:
|
|
Free(signature);
|
|
Free(digest);
|
|
Free(key);
|
|
return error_code;
|
|
}
|
|
|
|
int main(int argc, char* argv[]) {
|
|
int i;
|
|
int error_code = 0;
|
|
for (i = 0; i < kNumAlgorithms; ++i) {
|
|
if(SpeedTestAlgorithm(i))
|
|
error_code = 1;
|
|
}
|
|
return error_code;
|
|
}
|