From eda77a82ab24b707e9fbcad235c35ec514051175 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= <lha@kth.se>
Date: Mon, 9 Jan 2006 15:24:14 +0000
Subject: [PATCH] Add test for DH.

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@16497 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 lib/des/test_engine_dso.c | 64 ++++++++++++++++++++++++++++++++++++---
 1 file changed, 60 insertions(+), 4 deletions(-)

diff --git a/lib/des/test_engine_dso.c b/lib/des/test_engine_dso.c
index d42f3d5d9..12018e921 100644
--- a/lib/des/test_engine_dso.c
+++ b/lib/des/test_engine_dso.c
@@ -50,12 +50,15 @@ static int version_flag;
 static int help_flag;
 static char *id_flag;
 static char *rsa_flag;
+static int dh_flag;
 
 static struct getargs args[] = {
     { "id",		0,	arg_string,	&id_flag,
-      "id", 	NULL },
+      "selects the engine id", 	"engine-id" },
     { "rsa",		0,	arg_string,	&rsa_flag,
-      "rsa-der-file", 	NULL },
+      "tests RSA modes", 	"private-rsa-der-file" },
+    { "dh",		0,	arg_flag,	&dh_flag,
+      "test dh", NULL },
     { "version",	0,	arg_flag,	&version_flag,
       "print version", NULL },
     { "help",		0,	arg_flag,	&help_flag,
@@ -77,7 +80,7 @@ main(int argc, char **argv)
 {
     ENGINE *engine;
     int idx = 0;
-    int have_rsa;
+    int have_rsa, have_dh;
 
     setprogname(argv[0]);
 
@@ -105,8 +108,9 @@ main(int argc, char **argv)
     printf("name: %s\n", ENGINE_get_name(engine));
     printf("id: %s\n", ENGINE_get_id(engine));
     have_rsa = ENGINE_get_RSA(engine) != NULL;
+    have_dh = ENGINE_get_DH(engine) != NULL;
     printf("RSA: %s\n", have_rsa ? "yes" : "no");
-    printf("DH: %s\n", ENGINE_get_DH(engine) ? "yes" : "no");
+    printf("DH: %s\n", have_dh ? "yes" : "no");
 
     if (rsa_flag && have_rsa) {
 	unsigned char buf[1024 * 4];
@@ -178,6 +182,58 @@ main(int argc, char **argv)
 
     }
 
+    if (dh_flag) {
+	DH *server, *client;
+	void *skey, *ckey;
+	int ssize, csize;
+
+	/* RFC2412-MODP-group2 */
+	const char *p = 
+	    "FFFFFFFF" "FFFFFFFF" "C90FDAA2" "2168C234" "C4C6628B" "80DC1CD1"
+	    "29024E08" "8A67CC74" "020BBEA6" "3B139B22" "514A0879" "8E3404DD"
+	    "EF9519B3" "CD3A431B" "302B0A6D" "F25F1437" "4FE1356D" "6D51C245"
+	    "E485B576" "625E7EC6" "F44C42E9" "A637ED6B" "0BFF5CB6" "F406B7ED"
+	    "EE386BFB" "5A899FA5" "AE9F2411" "7C4B1FE6" "49286651" "ECE65381"
+	    "FFFFFFFF" "FFFFFFFF";
+	const char *g = "02";
+
+	server = DH_new_method(engine);
+	client = DH_new_method(engine);
+
+	BN_hex2bn(&server->p, p);
+	BN_hex2bn(&client->p, p);
+	BN_hex2bn(&server->g, g);
+	BN_hex2bn(&client->g, g);
+
+	if (!DH_generate_key(server))
+	    errx(1, "DH_generate_key failed for server");
+	if (!DH_generate_key(client))
+	    errx(1, "DH_generate_key failed for client");
+
+	skey = emalloc(DH_size(server));
+	ckey = emalloc(DH_size(client));
+
+	ssize = DH_compute_key(skey, client->pub_key, server);
+	if (ssize == -1)
+	    errx(1, "DH_compute_key failed for server");
+	csize = DH_compute_key(ckey, server->pub_key, client);
+	if (csize == -1)
+	    errx(1, "DH_compute_key failed for client");
+
+	if (ssize != csize)
+	    errx(1, "DH_compute_key size mismatch");
+	    
+	if (memcmp(skey, ckey, csize) != 0)
+	    errx(1, "DH_compute_key key mismatch");
+
+	free(skey);
+	free(ckey);
+	DH_free(server);
+	DH_free(client);
+
+	printf("dh test passed\n");
+    }
+
     ENGINE_finish(engine);
 
     return 0;