tests/jwt_flipflop.c

/* Public domain, no copyright. Use at your own risk. */

#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <time.h>
#include <unistd.h>

#include "jwt_tests.h"


static void *test_malloc(size_t size)
{
	return malloc(size);
}

static void test_free(void *ptr)
{
	free(ptr);
}

static int test_set_alloc(void)
{
	return jwt_set_alloc(test_malloc, test_free);
}

#ifdef JWT_CONSTRUCTOR
START_TEST(test_jwt_crypto_ops)
{
	const char *msg = getenv("JWT_CRYPTO");

	ck_assert_str_eq(msg, "NONEXISTENT");
}
END_TEST
#endif

START_TEST(test_alloc_funcs)
{
	jwt_malloc_t m = NULL;
	jwt_free_t f = NULL;
	int ret;

	SET_OPS();

	jwt_get_alloc(&m, &f);
	ck_assert_ptr_null(m);
	ck_assert_ptr_null(f);

	ret = test_set_alloc();
	ck_assert_int_eq(ret, 0);

	jwt_get_alloc(&m, &f);
	ck_assert(m == test_malloc);
	ck_assert(f == test_free);

	/* XXX Need to do a build/verify to exercise the functions */
}
END_TEST

static char *__builder(const char *cops, const char *priv, jwt_alg_t alg)
{
	jwt_builder_auto_t *builder;
	jwt_alg_t a_check = JWT_ALG_NONE;
	char *out;
	int ret;

	ret = jwt_set_crypto_ops(cops);
	ck_assert_int_eq(ret, 0);

	builder = jwt_builder_new();
	ck_assert_ptr_nonnull(builder);
	ck_assert_int_eq(jwt_builder_error(builder), 0);

	read_json(priv);

	if (jwks_item_alg(g_item) == JWT_ALG_NONE)
		a_check = alg;

	ret = jwt_builder_setkey(builder, a_check, g_item);
	ck_assert_int_eq(ret, 0);

	out = jwt_builder_generate(builder);
	if (out == NULL)
		fprintf(stderr, "BuildErr[%s]: %s\n", jwt_alg_str(alg),
			jwt_builder_error_msg(builder));
	ck_assert_ptr_nonnull(out);

	free_key();

	return out;
}

static void __checker(const char *cops, const char *pub, jwt_alg_t alg,
		      char *token)
{
	jwt_checker_auto_t *checker;
	int ret;

	ret = jwt_set_crypto_ops(cops);
	ck_assert_int_eq(ret, 0);

	checker = jwt_checker_new();
	ck_assert_ptr_nonnull(checker);
	ck_assert_int_eq(jwt_checker_error(checker), 0);

	read_json(pub);

	ret = jwt_checker_setkey(checker, alg, g_item);
	ck_assert_int_eq(ret, 0);

	ret = jwt_checker_verify(checker, token);
	if (ret)
		fprintf(stderr, "CheckErr[%s]: %s\n", jwt_alg_str(alg),
			jwt_checker_error_msg(checker));
	ck_assert_int_eq(ret, 0);

	free_key();
}

static void __flip_one(const char *priv, const char *pub, jwt_alg_t alg,
		       int mbedtls_skip)
{
	char *out = NULL;
	size_t i;


	for (i = 0; i < ARRAY_SIZE(jwt_test_ops); i++) {
		size_t c;

		/* MbedTLS has no EdDSA, and its PSA backend cannot handle RSA keys
		 * above PSA_VENDOR_RSA_MAX_KEY_BITS (the 8192-bit key); in either
		 * case it can neither produce nor verify, so skip it on both sides
		 * of the flip-flop. */
		if ((alg == JWT_ALG_EDDSA || mbedtls_skip) &&
		    jwt_test_ops[i].type == JWT_CRYPTO_OPS_MBEDTLS)
			continue;

		/* The eddsa_key_ed448 fixture is a seed-only OKP private key (no
		 * 'x'); GnuTLS < 3.8.13 crashes deriving its public key, so libjwt
		 * rejects it there. Skip generating with it (works on >= 3.8.13). */
		if (strstr(priv, "ed448") &&
		    gnutls_okp_jwk_broken(jwt_test_ops[i].type))
			continue;

		/* Generate on Here */
		out = __builder(jwt_test_ops[i].name, priv, alg);
		if (out == NULL)
			continue;

		for (c = 0; c < ARRAY_SIZE(jwt_test_ops); c++) {
			/* Test everywhere */

			if ((alg == JWT_ALG_EDDSA || mbedtls_skip) &&
			    jwt_test_ops[c].type == JWT_CRYPTO_OPS_MBEDTLS)
				continue;

			if (strstr(pub, "ed448") &&
			    gnutls_okp_jwk_broken(jwt_test_ops[c].type))
				continue;

			__checker(jwt_test_ops[c].name, pub, alg, out);
		}

		free(out);

		test_set_alloc();
	}
}

#define FLIPFLOP_KEY(__name, __pub, __alg)	\
START_TEST(__name)				\
{						\
        __flip_one(#__name ".json",		\
		   #__pub ".json", __alg, 0);	\
}						\
END_TEST

/* As FLIPFLOP_KEY, but skip the MbedTLS backend (its PSA crypto cannot import
 * RSA keys above PSA_VENDOR_RSA_MAX_KEY_BITS). */
#define FLIPFLOP_KEY_NO_MBEDTLS(__name, __pub, __alg)	\
START_TEST(__name)				\
{						\
        __flip_one(#__name ".json",		\
		   #__pub ".json", __alg, 1);	\
}						\
END_TEST

#define FLIPFLOP_KEY2(__name, __pub, __alg)	\
START_TEST(rsa_no_alg_ ## __alg)		\
{						\
	__flip_one(#__name ".json",		\
		   #__pub ".json", __alg, 0);	\
}						\
END_TEST

FLIPFLOP_KEY(ec_key_prime256v1,
	     ec_key_prime256v1_pub,
	     JWT_ALG_ES256);
FLIPFLOP_KEY(ec_key_secp384r1,
	     ec_key_secp384r1_pub,
	     JWT_ALG_ES384);
FLIPFLOP_KEY(ec_key_secp521r1,
	     ec_key_secp521r1,
	     JWT_ALG_ES512);

FLIPFLOP_KEY(eddsa_key_ed25519,
	     eddsa_key_ed25519,
	     JWT_ALG_EDDSA);
FLIPFLOP_KEY(eddsa_key_ed448,
	     eddsa_key_ed448_pub,
	     JWT_ALG_EDDSA);

FLIPFLOP_KEY(rsa_key_2048,
	     rsa_key_2048_pub,
	     JWT_ALG_RS256);
FLIPFLOP_KEY(rsa_key_4096,
	     rsa_key_4096,
	     JWT_ALG_RS384);
FLIPFLOP_KEY_NO_MBEDTLS(rsa_key_8192,
	     rsa_key_8192_pub,
	     JWT_ALG_RS512);

FLIPFLOP_KEY(rsa_pss_key_2048,
	     rsa_pss_key_2048,
	     JWT_ALG_PS256);
FLIPFLOP_KEY(rsa_pss_key_2048_384,
	     rsa_pss_key_2048_384_pub,
	     JWT_ALG_PS384);
FLIPFLOP_KEY(rsa_pss_key_2048_512,
	     rsa_pss_key_2048_512_pub,
	     JWT_ALG_PS512);

/* This key is RSA and does not have an alg set. It can be used for any of the
 * PS and RS algorithms, so test and make sure that works. */
FLIPFLOP_KEY2(rsa_pss_key_2048_notpss,
	      rsa_pss_key_2048_notpss_pub,
	      JWT_ALG_PS256);
FLIPFLOP_KEY2(rsa_pss_key_2048_notpss,
	      rsa_pss_key_2048_notpss_pub,
	      JWT_ALG_PS384);
FLIPFLOP_KEY2(rsa_pss_key_2048_notpss,
	      rsa_pss_key_2048_notpss_pub,
	      JWT_ALG_PS512);
FLIPFLOP_KEY2(rsa_pss_key_2048_notpss,
	      rsa_pss_key_2048_notpss_pub,
	      JWT_ALG_RS256);
FLIPFLOP_KEY2(rsa_pss_key_2048_notpss,
	      rsa_pss_key_2048_notpss_pub,
	      JWT_ALG_RS384);
FLIPFLOP_KEY2(rsa_pss_key_2048_notpss,
	      rsa_pss_key_2048_notpss_pub,
	      JWT_ALG_RS512);

FLIPFLOP_KEY(oct_key_256,
	     oct_key_256,
	     JWT_ALG_HS256);
FLIPFLOP_KEY(oct_key_384,
	     oct_key_384,
	     JWT_ALG_HS384);
FLIPFLOP_KEY(oct_key_512,
	     oct_key_512,
	     JWT_ALG_HS512);

static Suite *libjwt_suite(const char *title)
{
	Suite *s;
	TCase *tc_core;

	s = suite_create(title);

	tc_core = tcase_create("Keys");

	tcase_add_test(tc_core, ec_key_prime256v1);
	tcase_add_test(tc_core, ec_key_secp384r1);
	tcase_add_test(tc_core, ec_key_secp521r1);

	tcase_add_test(tc_core, eddsa_key_ed25519);
	tcase_add_test(tc_core, eddsa_key_ed448);

	tcase_add_test(tc_core, rsa_key_2048);
	tcase_add_test(tc_core, rsa_key_4096);
	tcase_add_test(tc_core, rsa_key_8192);

	tcase_add_test(tc_core, rsa_pss_key_2048);
	tcase_add_test(tc_core, rsa_pss_key_2048_384);
	tcase_add_test(tc_core, rsa_pss_key_2048_512);

	/* A set of checks */
	tcase_add_test(tc_core, rsa_no_alg_JWT_ALG_PS256);
	tcase_add_test(tc_core, rsa_no_alg_JWT_ALG_PS384);
	tcase_add_test(tc_core, rsa_no_alg_JWT_ALG_PS512);
	tcase_add_test(tc_core, rsa_no_alg_JWT_ALG_RS256);
	tcase_add_test(tc_core, rsa_no_alg_JWT_ALG_RS384);
	tcase_add_test(tc_core, rsa_no_alg_JWT_ALG_RS512);

	tcase_add_test(tc_core, oct_key_256);
	tcase_add_test(tc_core, oct_key_384);
	tcase_add_test(tc_core, oct_key_512);

	tcase_set_timeout(tc_core, 60);

	suite_add_tcase(s, tc_core);

	/* We run this here so we get some usage out of it */
	tc_core = tcase_create("Utility");
#ifdef JWT_CONSTRUCTOR
	tcase_add_test(tc_core, test_jwt_crypto_ops);
#endif
	tcase_add_test(tc_core, test_alloc_funcs);
	suite_add_tcase(s, tc_core);

	return s;
}

int main(void)
{
	JWT_TEST_MAIN("OpenSSL, GnuTLS, MbedTLS Cross Testing");
}