crypt/wolfssl
1
0
Fork 0
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-10-24 04:09:07 +03:00
Code Activity

tests/api: stuck seed source at reseed reports ENTROPY_RT_E

Browse Source
This commit is contained in:
kaleb-himes
2026-09-11 14:52:23 -06:00
parent aeed5847f2
commit 00a68582ad
2 changed files with 61 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

59
tests/api/test_random.c
View File

@@ -1092,6 +1092,65 @@ int test_wc_RNG_SeedCb(void)
return EXPECT_RESULT();
}
#if defined(WC_RNG_SEED_CB) && defined(HAVE_HASHDRBG) && \
!defined(CUSTOM_RAND_GENERATE_BLOCK) && !defined(HAVE_SELFTEST) && \
(!defined(HAVE_FIPS) || FIPS_VERSION3_GE(7,0,0)) && \
defined(HAVE_GETPID) && !defined(WOLFSSL_NO_GETPID) && \
!defined(WC_RNG_SEED_APT_CUTOFF) && !defined(WC_RNG_SEED_APT_WINDOW) && \
!defined(WC_RNG_SEED_RCT_CUTOFF)
/* Stuck noise source: every seed byte is zero. */
static int test_random_seedCb_stuck(OS_Seed* os, byte* seed, word32 sz)
{
(void)os;
XMEMSET(seed, 0, sz);
return 0;
}
#endif
/* A stuck seed source at reseed reports the SP 800-90B RCT code.
* rng.pid = 0 never matches the process, so the next generate reseeds. */
int test_wc_RNG_ReseedVerdict(void)
{
EXPECT_DECLS;
#if defined(WC_RNG_SEED_CB) && defined(HAVE_HASHDRBG) && \
!defined(CUSTOM_RAND_GENERATE_BLOCK) && !defined(HAVE_SELFTEST) && \
(!defined(HAVE_FIPS) || FIPS_VERSION3_GE(7,0,0)) && \
defined(HAVE_GETPID) && !defined(WOLFSSL_NO_GETPID) && \
!defined(WC_RNG_SEED_APT_CUTOFF) && !defined(WC_RNG_SEED_APT_WINDOW) && \
!defined(WC_RNG_SEED_RCT_CUTOFF)
WC_RNG rng;
byte out[32];
/* Do not inherit whatever source the previous test left installed: under
* HAVE_FIPS seedCb starts NULL and wc_InitRng() would fail. */
DoExpectIntEQ(wc_SetSeed_Cb(WC_GENERATE_SEED_DEFAULT), 0);
XMEMSET(&rng, 0, sizeof(WC_RNG));
ExpectIntEQ(wc_InitRng(&rng), 0);
/* Control: a forced reseed from a working source succeeds. */
rng.pid = 0;
ExpectIntEQ(wc_RNG_GenerateBlock(&rng, out, sizeof(out)), 0);
ExpectIntEQ(wc_SetSeed_Cb(test_random_seedCb_stuck), 0);
rng.pid = 0;
#if FIPS_VERSION3_GE(7,0,0)
ExpectIntEQ(wc_RNG_GenerateBlock(&rng, out, sizeof(out)),
WC_NO_ERR_TRACE(ENTROPY_RT_E));
#else
ExpectIntEQ(wc_RNG_GenerateBlock(&rng, out, sizeof(out)),
WC_NO_ERR_TRACE(RNG_FAILURE_E));
#endif
/* The failed instance stays failed. */
ExpectIntEQ(wc_RNG_GenerateBlock(&rng, out, sizeof(out)),
WC_NO_ERR_TRACE(RNG_FAILURE_E));
/* Do-form: restore even after a failed check, or later tests inherit it. */
DoExpectIntEQ(wc_SetSeed_Cb(WC_GENERATE_SEED_DEFAULT), 0);
DoExpectIntEQ(wc_FreeRng(&rng), 0);
#endif
return EXPECT_RESULT();
}
/* CUSTOM_RAND_GENERATE_BLOCK: an external RNG function bypasses Hash_DRBG
* generation entirely in wc_RNG_GenerateBlock() (and _InitRng() itself is
* skipped, since it is guarded by

2
tests/api/test_random.h
View File

@@ -40,6 +40,7 @@ int test_wc_RNG_HealthTest_SHA512(void);
int test_wc_RNG_HealthTest_SHA256_Ext(void);
int test_wc_RNG_HealthTest_SHA512_Ext(void);
int test_wc_RNG_SeedCb(void);
int test_wc_RNG_ReseedVerdict(void);
int test_wc_RNG_CustomRandBlock(void);
int test_wc_RNG_DrbgDisable(void);
int test_wc_DrbgDecisionCoverage(void);
@@ -63,6 +64,7 @@ int test_wc_Entropy_Get(void);
TEST_DECL_GROUP("random", test_wc_RNG_HealthTest_SHA256_Ext), \
TEST_DECL_GROUP("random", test_wc_RNG_HealthTest_SHA512_Ext), \
TEST_DECL_GROUP("random", test_wc_RNG_SeedCb), \
TEST_DECL_GROUP("random", test_wc_RNG_ReseedVerdict), \
TEST_DECL_GROUP("random", test_wc_RNG_CustomRandBlock), \
TEST_DECL_GROUP("random", test_wc_RNG_DrbgDisable), \
TEST_DECL_GROUP("random", test_wc_DrbgDecisionCoverage), \