Question

CCSP ISC2

Answer 1

using System;
using System.Diagnostics;
using System.Reflection;
using System.IO;
using System.Text;

using CryptoSysPKI;

/* $Id: TestPKIcsharpV12.cs $
* Last updated:
* $Date: 2020-03-6 09:13 $
* $Version: 12.3.0 $
*/

/* Some tests demonstrating new features in CryptoSys PKI v12.1
* in particular RSA-PSS and ECC signatures in X.509 certificates.
*
* Test files are in `pkiDotNetTestFiles.zip`. These must be in the CWD.
*/

/******************************* LICENSE ***********************************
* Copyright (C) 2018-20 David Ireland, DI Management Services Pty Limited.
* All rights reserved. <www.di-mgt.com.au> <www.cryptosys.net>
* The code in this module is licensed under the terms of the MIT license.
* For a copy, see <http://opensource.org/licenses/MIT>
****************************************************************************
*/

namespace TestPKIcsharpV12
{
class TestPKIcsharpV12
{
private const int MIN_PKI_VERSION = 120100;
// Test files required to exist in the current working directory:
private static string[] arrFileNames = new string[]
{
"AliceRSAPSS.p8", /* Unencrypted version */
"AliceRSAPSS.p8e", /* Encrypted, password="password" */
"AliceRSAPssSignByCarl.cer",
"BobRSAPSS.p8e",
"BobRSAPssSignByCarl.cer",
"CarlRSAPssSelf.cer",
"CA_ECC_P256.p8e",
"CA_ECC_P256.pub",
"CA_RSA_2048.p8e",
"CA_RSA_2048.pub",
"excontent.txt",
"rsa-oaep-1.p8",
"rsa-oaep-1.pub",
"User_ECC_P256.p8e",
"User_ECC_P256.pub",
"User_RSA_2048.p8e",
"User_RSA_2048.pub",
"User_RSA_2048.cer",
"User2_ECC_P256.p8e",
"User2_ECC_P256.pub",
"User2_RSA_2048.p8e",
"User2_RSA_2048.pub",
};
// Name of file with zipped test files
private static string zippedTestFiles = "pkiDotNetTestFiles.zip";

static void Main(string[] args)
{
Console.WriteLine("TESTING CRYPTOSYS PKI FOR CHANGES IN V12.0 AND V12.1");

// Make sure minimum required version of CryptoSys PKI is installed...
Console.WriteLine("PKI Version is " + General.Version());
if (General.Version() < MIN_PKI_VERSION) {
Console.WriteLine("FATAL ERROR: Require PKI version " + MIN_PKI_VERSION + " or later.");
return;
}

// Deal with command-line options
bool doSome = false;
bool askDelete = false;
for (int iarg = 0; iarg < args.Length; iarg++) {
if (args[iarg] == "some")
doSome = true;
if (args[iarg] == "askdelete")
askDelete = true;
}

// Check required files exist and setup temp directory
string origdir = SetupTestFilesAndDirectory(arrFileNames);
if (null == origdir) return;


//*************
// DO THE TESTS
//*************
if (doSome) // Use "some" in the command line
{ // Do some tests - comment these out as required
/* //test_MakeKeys(); // Only do this once! */
//test_ReadKeys();
//test_MakeCerts_ECDSA();
//test_MakeCerts_PSS();
//test_SIG_VerifyData_PSS();
//test_RSA_EncryptDecrypt();
//test_SIG_SignData_PSS();
//test_SIG_SignData_ECDSA();
//test_RSA_ToXMLStringEx();
//test_CMS_MakeSigData_PSS();
//test_MakeSignedEnveloped_PSS_OAEP();
//test_PFX_MakeFile_PSS();
/* NEW IN [v12.1] */
test_CIPHER_EncryptAEAD();
//test_X509_ReadCertFromP7Chain();
//test_X509_ReadCertFromPFX();
}
else { // Do all the test modules (default)
DoAllTests();
}


// FINALLY, DISPLAY QUICK INFO ABOUT THE CORE DLL
Console.WriteLine("\nDETAILS OF CORE DLL...");
Console.WriteLine("DLL Version={0} [{1}] Lic={2} Compiled=[{3}] ",
General.Version(), General.Platform(), General.LicenceType(), General.CompileTime());
Console.WriteLine("[{0}]", General.ModuleName());


//********************************************
Console.WriteLine("\nALL TESTS COMPLETED.");

// Put CWD back to original and offer to remove the test dir
RestoreDirectory(origdir, askDelete);
}
static void DoAllTests()
{
/* //test_MakeKeys(); // Only do this once! */
test_ReadKeys();
test_MakeCerts_ECDSA();
test_MakeCerts_PSS();
test_SIG_VerifyData_PSS();
test_RSA_EncryptDecrypt();
test_SIG_SignData_PSS();
test_SIG_SignData_ECDSA();
test_RSA_ToXMLStringEx();
test_CMS_MakeSigData_PSS();
test_MakeSignedEnveloped_PSS_OAEP();
test_PFX_MakeFile_PSS();
// New in [v12.1]
test_CIPHER_EncryptAEAD();
test_X509_ReadCertFromP7Chain();
test_X509_ReadCertFromPFX();
}


//********************
// THE TEST MODULES...
//********************


static void test_MakeKeys()
{
/* Demonstrates:
* Rsa.MakeKeys()
* Ecc.MakeKeys()
*/
int r;
Console.WriteLine("Generating two 2048-bit RSA keys...");
r = Rsa.MakeKeys("CA_RSA_2048.pub", "CA_RSA_2048.p8e", 2048, Rsa.PublicExponent.Exp_EQ_65537, 80, "password", Rsa.PbeOptions.Pbe_Pbkdf2_aes256_CBC, false);
r = Rsa.MakeKeys("User_RSA_2048.pub", "User_RSA_2048.p8e", 2048, Rsa.PublicExponent.Exp_EQ_65537, 80, "password", Rsa.PbeOptions.Pbe_Pbkdf2_aes256_CBC, false);

Console.WriteLine("Generating two ECC keys using P-256...");
r = Ecc.MakeKeys("CA_ECC_P256.pub", "CA_ECC_P256.p8e", Ecc.CurveName.P_256, "password", Ecc.PbeScheme.Pbe_Pbkdf2_aes256_CBC, "", 0);
r = Ecc.MakeKeys("User_ECC_P256.pub", "User_ECC_P256.p8e", Ecc.CurveName.P_256, "password", Ecc.PbeScheme.Pbe_Pbkdf2_aes256_CBC, "", 0);
}

static void test_ReadKeys()
{
Console.WriteLine("\nShow we can read the key files we made...");

/* Demonstrates:
* Rsa.ReadPrivateKey()
* Rsa.ReadPublicKey()
* Rsa.KeyBits()
* Rsa.KeyHashCode()
* Rsa.KeyMatch()
* Ecc.ReadPrivateKey()
* Ecc.ReadPublicKey()
* Ecc.QueryKey()
* Ecc.KeyHashCode()
*/

StringBuilder sbPriKey;
string pubkey;
int r;

// RSA keys:
sbPriKey = Rsa.ReadPrivateKey("CA_RSA_2048.p8e", "password");
Debug.Assert(sbPriKey.Length > 0, "Failed to read CA_RSA_2048 private key");
Console.WriteLine("CA_RSA pri key length={0}", Rsa.KeyBits(sbPriKey.ToString()));
Console.WriteLine("CA_RSA pri key hash code={0,8:X}", Rsa.KeyHashCode(sbPriKey.ToString()));
pubkey = Rsa.ReadPublicKey("CA_RSA_2048.pub").ToString();
Debug.Assert(pubkey.Length > 0, "Failed to read CA_RSA_2048 public key");
Console.WriteLine("CA_RSA pub key length={0}", Rsa.KeyBits(pubkey));
Console.WriteLine("CA_RSA pub key hash code={0,8:X}", Rsa.KeyHashCode(pubkey));
// Check they match
r = Rsa.KeyMatch(sbPriKey.ToString(), pubkey);
Console.WriteLine("Rsa.KeyMatch() returns {0} (expected 0)", r);
Debug.Assert(0 == r);

// ECC keys:
sbPriKey = Ecc.ReadPrivateKey("CA_ECC_P256.p8e", "password");
Debug.Assert(sbPriKey.Length > 0, "Failed to read CA_ECC_P256 private key");
Console.WriteLine("CA_ECC pri key length={0}", Ecc.QueryKey(sbPriKey.ToString(), "keyBits"));
Console.WriteLine("CA_ECC pri key hash code={0,8:X}", Ecc.KeyHashCode(sbPriKey.ToString()));
pubkey = Ecc.ReadPublicKey("CA_ECC_P256.pub").ToString();
Debug.Assert(pubkey.Length > 0, "Failed to read CA_ECC_P256 public key");
Console.WriteLine("CA_ECC pub key length={0}", Ecc.QueryKey(pubkey, "keyBits"));
Console.WriteLine("CA_ECC pub key hash code={0,8:X}", Ecc.KeyHashCode(pubkey));
}

static void test_MakeCerts_ECDSA()
{
Console.WriteLine("\nCreate a new CA certificate and end-user certificates using ECDSA...");

/* Demonstrates:
* X509.MakeCertSelf() using SigAlgorithm.Ecdsa_Sha256
* X509.MakeCert() using SigAlgorithm.Ecdsa_Sha256 and X509.CertOptions.Ecdsa_Deterministic
* X509.CertRequest() using SigAlgorithm.Ecdsa_Sha256
* X509.VerifyCert() for an X.509 certificate
* X509.VerifyCert() for a PKCS#10 CSR
* X509.VerifyCert() for an X.509 CRL
* X509.MakeCRL() using SigAlgorithm.Ecdsa_Sha256
* X509.CheckCertInCRL()
* X509.TextDumpToString() using X509.OutputOpts.Ldap
* Asn1.TextDumpToString()
* Ecc.ReadPublicKey()
*/

int r;
X509.KeyUsageOptions kuFlags;
string dn, extns;
string s, query, pubkey;

// Create a self-signed CA certificate
string ca_cert = "CA_ECC_P256.cer";
kuFlags = X509.KeyUsageOptions.KeyCertSign | X509.KeyUsageOptions.CrlSign | X509.KeyUsageOptions.NonRepudiation;
dn = "C=AU;OU=Elliptical;O=Cert Services;CN=El Jefe";
extns = "serialNumber=#xECC0CA;notBefore=2018-01-01;notAfter=2023-12-31";
r = X509.MakeCertSelf(ca_cert, "CA_ECC_P256.p8e", 0, 0, dn, extns, kuFlags, "password", SigAlgorithm.Ecdsa_Sha256, X509.CertOptions.UTF8String);
Console.WriteLine("X509.MakeCertSelf returns {0} (expecting 0)", r);
Debug.Assert(0 == r);

// Display cert details (with distinguished name in LDAP form (NB reverse order to dn above) and serial number in Decimal
Console.WriteLine("FILE: {0}", ca_cert);
s = X509.TextDumpToString(ca_cert, X509.OutputOpts.Decimal | X509.OutputOpts.Ldap);
Console.WriteLine(s);

// Use the CA certificate to create an end-user certificate
string user_cert = "User_ECC_P256.cer";
kuFlags = X509.KeyUsageOptions.DataEncipherment | X509.KeyUsageOptions.DigitalSignature | X509.KeyUsageOptions.KeyEncipherment;
dn = "C=AU;OU=Elliptical;O=User Org;CN=The User";
extns = "serialNumber=#xECD5A0;notBefore=2018-01-02;notAfter=2023-12-30";
r = X509.MakeCert(user_cert, ca_cert, "User_ECC_P256.pub", "CA_ECC_P256.p8e", 0, 0, dn, extns, kuFlags, "password",
SigAlgorithm.Ecdsa_Sha256, X509.CertOptions.UTF8String | X509.CertOptions.Ecdsa_Deterministic);
Console.WriteLine("X509.MakeCert returns {0} (expecting 0)", r);
Debug.Assert(0 == r);

// Query cert for information
Console.WriteLine("FILE: {0}", user_cert);
query = "signatureAlgorithm";
Console.WriteLine("X509.QueryCert('{0}')={1}", query, X509.QueryCert(user_cert, query));
query = "serialNumber";
Console.WriteLine("X509.QueryCert('{0}')={1}", query, X509.QueryCert(user_cert, query));
// Extract public key from certificate
pubkey = Ecc.ReadPublicKey(user_cert).ToString();
Debug.Assert(pubkey.Length > 0, "Failed to read public key from certificate");
Console.WriteLine("ECC public key length={0}", Ecc.QueryKey(pubkey, "keyBits"));

// Validate the end user cert was issued by CA
r = X509.VerifyCert(user_cert, ca_cert);
Console.WriteLine("X509.VerifyCert returns {0} (expecting 0)", r);
if (r != 0) disp_error(r);
Debug.Assert(0 == r);

Console.WriteLine("\nCreate a PKCS10 certificate signing request (CSR) using ECC P-256 key then use to issue new X.509 certificate...");

string user_csr = "User2_ECC_P256.p10";
dn = "C=AU;OU=Elliptic;O=User Org;CN=User 2";
extns = "keyUsage=digitalSignature,dataEncipherment,dataEncipherment;";
// Make a CSR - must match ECC key with ECC signature algorithm
r = X509.CertRequest(user_csr, "User2_ECC_P256.p8e", dn, extns, "password", SigAlgorithm.Ecdsa_Sha256, 0);
Console.WriteLine("X509.CertRequest returns {0} (expecting 0)", r);
if (r != 0) disp_error(r);
Debug.Assert(0 == r);
// We can verify that the signature is good
r = X509.VerifyCert(user_csr, "");
Console.WriteLine("X509.VerifyCert('{1}') returns {0} (expecting 0)", r, user_csr);
Debug.Assert(0 == r);

// CA receives the CSR and issues a new end-user certificate
string user2_cert = "User2_ECC_P256.cer";
extns = "notBefore=2018-01-02;";
r = X509.MakeCert(user2_cert, ca_cert, user_csr, "CA_ECC_P256.p8e", 0xECD5A2, 4, "", extns, 0, "password", SigAlgorithm.Ecdsa_Sha256, 0);
Console.WriteLine("X509.MakeCert returns {0} (expecting 0)", r);
if (r != 0) disp_error(r);
Debug.Assert(0 == r);

// Dump the ASN.1 structure of the user certificate
Console.WriteLine("FILE: {0}", user2_cert);
s = Asn1.TextDumpToString(user2_cert, 0);
Console.WriteLine(s);

Console.WriteLine("\nThe CA creates a Certificate Revocation List (CRL) revoking User2's certificate as of 1 April 2018");
string crlFile = "ECC_P256.crl";
r = X509.MakeCRL(crlFile, ca_cert, "CA_ECC_P256.p8e", "password", "#xECD5A2,2018-04-01", "", SigAlgorithm.Ecdsa_Sha256, 0);
Console.WriteLine("X509.MakeCRL returns {0} (expecting 0)", r);
if (r != 0) disp_error(r);
Debug.Assert(0 == r);

// Verify that the signature in the CRL file is good
r = X509.VerifyCert(crlFile, ca_cert);
Console.WriteLine("X509.VerifyCert('{1}') returns {0} (expecting 0)", r, crlFile);
Debug.Assert(0 == r);

// See if certificate has been revoked as of today
r = X509.CheckCertInCRL(user2_cert, crlFile, null, "");
Console.WriteLine("X509.CheckCertInCRL('{1}',now) returns {0} (expecting {2}=X509.Revoked)", r, crlFile, X509.Revoked);
Debug.Assert(X509.Revoked == r);
// See if certificate has been revoked as of 2018-02-01
string datestr = "2018-02-01";
r = X509.CheckCertInCRL(user2_cert, crlFile, null, datestr);
Console.WriteLine("X509.CheckCertInCRL('{1}',{2}) returns {0} (expecting 0=NOT REVOKED)", r, crlFile, datestr);
Debug.Assert(0 == r);


}

static void test_MakeCerts_PSS()
{
Console.WriteLine("\nCreate a new CA certificate and end-user certificate using RSA-PSS...");

/* Demonstrates:
* X509.MakeCertSelf() using SigAlgorithm.Rsa_Pss_Sha256
* X509.MakeCert() using SigAlgorithm.Rsa_Pss_Sha256
* X509.QueryCert()
* X509.ValidatePath()
* X509.TextDumpToString() using X509.OutputOpts.Ldap
* Rsa.ReadPublicKey()
* Rsa.KeyBits()
*/

int r;
X509.KeyUsageOptions kuFlags;
string dn, extns;
string s, query, pubkey;

// Create a self-signed CA certificate
string ca_cert = "CA_RSA_2048.cer";
kuFlags = X509.KeyUsageOptions.KeyCertSign | X509.KeyUsageOptions.CrlSign | X509.KeyUsageOptions.NonRepudiation;
dn = "C=AU;OU=PSS;O=Cert Services;CN=El Jefe";
extns = "serialNumber=#d1234567;notBefore=2018-01-01;notAfter=2023-12-31";
r = X509.MakeCertSelf(ca_cert, "CA_RSA_2048.p8e", 0, 0, dn, extns, kuFlags, "password", SigAlgorithm.Rsa_Pss_Sha256, X509.CertOptions.UTF8String);
Console.WriteLine("X509.MakeCertSelf returns {0} (expecting 0)", r);
Debug.Assert(0 == r);

// Display cert details (with distinguished name in LDAP form (NB reverse order to dn above) and serial number in Decimal
Console.WriteLine("FILE: {0}", ca_cert);
s = X509.TextDumpToString(ca_cert, X509.OutputOpts.Decimal | X509.OutputOpts.Ldap);
Console.WriteLine(s);

// Use the CA certificate to create an end-user certificate
string user_cert = "User_RSA_2048.cer";
kuFlags = X509.KeyUsageOptions.DataEncipherment | X509.KeyUsageOptions.DigitalSignature | X509.KeyUsageOptions.KeyEncipherment;
dn = "C=AU;OU=PSS;O=User Org;CN=The User";
extns = "serialNumber=#d2345678;notBefore=2018-01-02;notAfter=2023-12-30";
r = X509.MakeCert(user_cert, ca_cert, "User_RSA_2048.pub", "CA_RSA_2048.p8e", 0, 0, dn, extns, kuFlags, "password", SigAlgorithm.Rsa_Pss_Sha256, X509.CertOptions.UTF8String);
Console.WriteLine("X509.MakeCert returns {0} (expecting 0)", r);
Debug.Assert(0 == r);

// Query cert for information
Console.WriteLine("FILE: {0}", user_cert);
query = "signatureAlgorithm";
Console.WriteLine("X509.QueryCert('{0}')={1}", query, X509.QueryCert(user_cert, query));
query = "serialNumber";
Console.WriteLine("X509.QueryCert('{0}')={1}", query, X509.QueryCert(user_cert, query, X509.OutputOpts.Decimal));
// Extract public key from certificate
pubkey = Rsa.ReadPublicKey(user_cert).ToString();
Debug.Assert(pubkey.Length > 0, "Failed to read public key from certificate");
Console.WriteLine("Rsa public key length={0}", Rsa.KeyBits(pubkey));

// Validate the certificate path
string certpath = ca_cert + ";" + user_cert;
r = X509.ValidatePath(certpath);
Console.WriteLine("X509.ValidatePath('{0}') returns {1} (expecting 0)", certpath, r);
if (r != 0) disp_error(r);
Debug.Assert(0 == r);

}

static void test_SIG_VerifyData_PSS()
{
Console.WriteLine("\nVERIFY A SIGNATURE VALUE:");

/* Demonstrates:
* Sig.VerifyData() using SigAlgorithm.Rsa_Pss_Sha1 and SigAlgorithm.Rsa_Pss_Sha512
* Sig.VerifyDigest()
*/

int r;
string rsakeyvalue, msghex, S;
string rsaprikey;
byte[] msg, digest;

Console.WriteLine("1. NIST test CAVS 11.1 FIPS186-3 - SigVer RSA PKCS#1 RSASSA-PSS...");
// Example No 1 from NIST test
// # CAVS 11.1
// # "FIPS186-3 - SigVer RSA PKCS#1 RSASSA-PSS" information for "rsa2_check"
// CryptoSys-PKI-specific way to read in an RSA key using hex-encoded components
rsakeyvalue = "<RSAKeyValue>" +
"<Modulus EncodingType=\"hexBinary\">ec996bc93e81094436fd5fc2eef511782eb40fe60cc6f27f24bc8728d686537f1caa82cfcfa5c323604b6918d7cd0318d98395c855c7c7ada6fc447f192283cdc81e7291e232336019d4dac12356b93a349883cd2c0a7d2eae9715f1cc6dd657cea5cb2c46ce6468794b326b33f1bff61a00fa72931345ca6768365e1eb906dd</Modulus>" +
"<Exponent EncodingType=\"hexBinary\">90c6d3</Exponent></RSAKeyValue>";
msghex = "a4daf4621676917e28493a585d9baffca3755e77e1f18e3ccfb3dec60ab8ee7e684f5cde8864f2d7ae041d70ce1ea1b1e7878cbf93416848dbfdb5214fde972e5780cb83c439dfc8aa9fa3e2724adbd02bdb36d2213c84d1b12a23fb5bf1baae19772a97ef7cc21bc420b3f570a6c321167745f9b46a489ff8420f9a5679c1c4";
S = "319c62984acd52423e59a17d27d4eca7722703b054a71a1ee5f7a218b6f4a274632eaf8ef2a577a7e8a7f654b8deb1ec9b1e529cf93459cc8af4c6df6fffabc3edded0c421604ea2aae35836b05fd9de7abd78540d45fd6d0ea714733a3427b00d9d6404db8ede4a27932b47d88243eefcbffe1e55841823def30c57de7562cf";

msg = Cnv.FromHex(msghex);
r = Sig.VerifyData(S, msg, rsakeyvalue, SigAlgorithm.Rsa_Pss_Sha1);
Console.WriteLine("Sig.VerifyData() returns {0} (expecting 0)", r);
if (r != 0) disp_error(r);
Debug.Assert(0 == r);

// Example from NIST with SHA512 and sLen = 0
Console.WriteLine("2. NIST test with SHA512 and sLen = 0...");
rsakeyvalue = "<RSAKeyValue>" +
"<Modulus EncodingType=\"hexBinary\">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</Modulus>" +
"<Exponent EncodingType=\"hexBinary\">000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b3f57f</Exponent></RSAKeyValue>";
msghex = "be2f3e1dc8a3711570401bd535185426944d094e8481a12a438de07d54760c88c99d4fdbbe355d6a26fa56e3ca20ee3f8e8acb98f63d2f3aea14d6fcb6b522d155c3759aef56de3ea0a8f9fd7b111001cf358636a87c765c99c2975bb95063d6ec0b780264ec3eb967b0caca52d10294deb402d3a224bfb9d9ffea41662f18c0";
S = "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";

msg = Cnv.FromHex(msghex);
r = Sig.VerifyData(S, msg, rsakeyvalue, SigAlgorithm.Rsa_Pss_Sha512);
Console.WriteLine("Sig.VerifyData() returns {0} (expecting 0)", r);
if (r != 0) disp_error(r);
Debug.Assert(0 == r);

Console.WriteLine("3. Test using independently-generated signature...");
rsaprikey = "