0N/A/*
2362N/A * Copyright (c) 2005, 2007, Oracle and/or its affiliates. All rights reserved.
0N/A * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.
0N/A *
0N/A * This code is free software; you can redistribute it and/or modify it
0N/A * under the terms of the GNU General Public License version 2 only, as
0N/A * published by the Free Software Foundation.
0N/A *
0N/A * This code is distributed in the hope that it will be useful, but WITHOUT
0N/A * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
0N/A * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
0N/A * version 2 for more details (a copy is included in the LICENSE file that
0N/A * accompanied this code).
0N/A *
0N/A * You should have received a copy of the GNU General Public License version
0N/A * 2 along with this work; if not, write to the Free Software Foundation,
0N/A * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.
0N/A *
2362N/A * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA
2362N/A * or visit www.oracle.com if you need additional information or have any
2362N/A * questions.
0N/A */
0N/A
0N/A/**
0N/A * @test
0N/A * @bug 6330287 6331386
0N/A * @summary verify that DHKeyPairGenerator returns keys of the expected size
0N/A * (modulus and exponent)
0N/A * -and-
0N/A * DHKeyPairGenerator is using BigInteger.setBit
0N/A * @author Andreas Sterbenz
0N/A */
0N/A
0N/Aimport java.math.BigInteger;
0N/Aimport java.util.Arrays;
0N/A
0N/Aimport java.security.*;
0N/Aimport javax.crypto.*;
0N/Aimport javax.crypto.interfaces.*;
0N/Aimport javax.crypto.spec.*;
0N/A
0N/A/*
0N/A * NOTE: BigInteger's bitlength() doesn't report leading zeros, only
0N/A * the number of bits needed to actually represent the number. i.e.
0N/A *
0N/A * new BigInteger("4").bitLength() = 3
0N/A *
0N/A * Since the private key x can vary 1 <= x <= p-2, we can't do any
0N/A * bitlength-based calculations here. But we can check that p conforms
0N/A * as expected.
0N/A *
0N/A * If not specified, we're currently using an lsize of Math.max(384, psize/2).
0N/A */
0N/Apublic class TestExponentSize {
0N/A
0N/A /*
0N/A * Sizes and values for various lengths.
0N/A */
0N/A private enum Sizes {
0N/A two56(256), three84(384), five12(512), seven68(768), ten24(1024);
0N/A
0N/A private final int intSize;
0N/A private final BigInteger bigIntValue;
0N/A
0N/A Sizes(int size) {
0N/A intSize = size;
0N/A byte [] bits = new byte[intSize/8];
0N/A Arrays.fill(bits, (byte)0xff);
0N/A bigIntValue = new BigInteger(1, bits);
0N/A }
0N/A
0N/A int getIntSize() {
0N/A return intSize;
0N/A }
0N/A
0N/A BigInteger getBigIntValue() {
0N/A return bigIntValue;
0N/A }
0N/A }
0N/A
0N/A public static void main(String[] args) throws Exception {
0N/A KeyPair kp;
0N/A KeyPairGenerator kpg = KeyPairGenerator.getInstance("DH", "SunJCE");
0N/A
0N/A // Sun's default uses a default psize of 1024/lsize of 512
0N/A kp = kpg.generateKeyPair();
0N/A checkKeyPair(kp, Sizes.ten24, Sizes.five12);
0N/A
0N/A DHPublicKey publicKey = (DHPublicKey)kp.getPublic();
0N/A BigInteger p = publicKey.getParams().getP();
0N/A BigInteger g = publicKey.getParams().getG();
0N/A
0N/A kpg.initialize(Sizes.ten24.getIntSize());
0N/A kp = kpg.generateKeyPair();
0N/A checkKeyPair(kp, Sizes.ten24, Sizes.five12);
0N/A
0N/A kpg.initialize(new DHParameterSpec(p, g, Sizes.ten24.getIntSize()));
0N/A kp = kpg.generateKeyPair();
0N/A checkKeyPair(kp, Sizes.ten24, Sizes.ten24);
0N/A
0N/A kpg.initialize(new DHParameterSpec(p, g, Sizes.five12.getIntSize()));
0N/A kp = kpg.generateKeyPair();
0N/A checkKeyPair(kp, Sizes.ten24, Sizes.five12);
0N/A
0N/A kpg.initialize(new DHParameterSpec(p, g, Sizes.two56.getIntSize()));
0N/A kp = kpg.generateKeyPair();
0N/A checkKeyPair(kp, Sizes.ten24, Sizes.two56);
0N/A
0N/A kpg.initialize(Sizes.five12.getIntSize());
0N/A kp = kpg.generateKeyPair();
0N/A checkKeyPair(kp, Sizes.five12, Sizes.three84);
0N/A
0N/A kpg.initialize(Sizes.seven68.getIntSize());
0N/A kp = kpg.generateKeyPair();
0N/A checkKeyPair(kp, Sizes.seven68, Sizes.three84);
0N/A
0N/A System.out.println("OK");
0N/A }
0N/A
0N/A private static void checkKeyPair(KeyPair kp, Sizes modulusSize,
0N/A Sizes exponentSize) throws Exception {
0N/A
0N/A System.out.println("Checking (" + modulusSize + ", " +
0N/A exponentSize + ")");
0N/A DHPrivateKey privateKey = (DHPrivateKey)kp.getPrivate();
0N/A BigInteger p = privateKey.getParams().getP();
0N/A BigInteger x = privateKey.getX();
0N/A
0N/A if (p.bitLength() != modulusSize.getIntSize()) {
0N/A throw new Exception("Invalid modulus size: " + p.bitLength());
0N/A }
0N/A
0N/A if (x.bitLength() > exponentSize.getIntSize()) {
0N/A throw new Exception("X has more bits than expected: " +
0N/A x.bitLength());
0N/A }
0N/A
0N/A BigInteger pMinus2 =
0N/A p.subtract(BigInteger.ONE).subtract(BigInteger.ONE);
0N/A
0N/A if ((x.compareTo(BigInteger.ONE) < 0 ||
0N/A (x.compareTo(pMinus2)) > 0)) {
0N/A throw new Exception(
0N/A "X outside range 1<=x<p-2: x: " + x + " p: " + p);
0N/A }
0N/A }
0N/A}