gencertbuf.pl 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337
  1. #!/usr/bin/perl
  2. # gencertbuf.pl
  3. # version 1.1
  4. # Updated 07/01/2014
  5. #
  6. # Copyright (C) 2006-2015 wolfSSL Inc.
  7. #
  8. use strict;
  9. use warnings;
  10. # ---- SCRIPT SETTINGS -------------------------------------------------------
  11. # output C header file to write cert/key buffers to
  12. my $outputFile = "./wolfssl/certs_test.h";
  13. # ecc keys and certs to be converted
  14. # Used with HAVE_ECC && USE_CERT_BUFFERS_256
  15. my @fileList_ecc = (
  16. [ "./certs/ecc-client-key.der", "ecc_clikey_der_256" ],
  17. [ "./certs/ecc-client-keyPub.der", "ecc_clikeypub_der_256" ],
  18. [ "./certs/client-ecc-cert.der", "cliecc_cert_der_256" ],
  19. [ "./certs/ecc-key.der", "ecc_key_der_256" ],
  20. [ "./certs/ecc-keyPub.der", "ecc_key_pub_der_256" ],
  21. [ "./certs/server-ecc-comp.der", "serv_ecc_comp_der_256" ],
  22. [ "./certs/server-ecc-rsa.der", "serv_ecc_rsa_der_256" ],
  23. [ "./certs/server-ecc.der", "serv_ecc_der_256" ],
  24. [ "./certs/ca-ecc-key.der", "ca_ecc_key_der_256" ],
  25. [ "./certs/ca-ecc-cert.der", "ca_ecc_cert_der_256" ],
  26. [ "./certs/ca-ecc384-key.der", "ca_ecc_key_der_384" ],
  27. [ "./certs/ca-ecc384-cert.der", "ca_ecc_cert_der_384" ]
  28. );
  29. # ed25519 keys and certs
  30. # Used with HAVE_ED25519 define.
  31. my @fileList_ed = (
  32. [ "./certs/ed25519/server-ed25519.der", "server_ed25519_cert" ],
  33. [ "./certs/ed25519/server-ed25519-key.der", "server_ed25519_key" ],
  34. [ "./certs/ed25519/ca-ed25519.der", "ca_ed25519_cert" ],
  35. [ "./certs/ed25519/client-ed25519.der", "client_ed25519_cert" ],
  36. [ "./certs/ed25519/client-ed25519-key.der", "client_ed25519_key" ]
  37. );
  38. # 1024-bit certs/keys to be converted
  39. # Used with USE_CERT_BUFFERS_1024 define.
  40. my @fileList_1024 = (
  41. [ "./certs/1024/client-key.der", "client_key_der_1024" ],
  42. [ "./certs/1024/client-keyPub.der", "client_keypub_der_1024" ],
  43. [ "./certs/1024/client-cert.der", "client_cert_der_1024" ],
  44. [ "./certs/1024/dh1024.der", "dh_key_der_1024" ],
  45. [ "./certs/1024/dsa1024.der", "dsa_key_der_1024" ],
  46. [ "./certs/1024/rsa1024.der", "rsa_key_der_1024" ],
  47. [ "./certs/1024/ca-key.der", "ca_key_der_1024"],
  48. [ "./certs/1024/ca-cert.der", "ca_cert_der_1024" ],
  49. [ "./certs/1024/server-key.der", "server_key_der_1024" ],
  50. [ "./certs/1024/server-cert.der", "server_cert_der_1024" ]
  51. );
  52. # 2048-bit certs/keys to be converted
  53. # Used with USE_CERT_BUFFERS_2048 define.
  54. my @fileList_2048 = (
  55. [ "./certs/client-key.der", "client_key_der_2048" ],
  56. [ "./certs/client-keyPub.der", "client_keypub_der_2048" ],
  57. [ "./certs/client-cert.der", "client_cert_der_2048" ],
  58. [ "./certs/dh2048.der", "dh_key_der_2048" ],
  59. [ "./certs/dh-pubkey-2048.der", "dh_pub_key_der_2048" ],
  60. [ "./certs/dsa-pubkey-2048.der", "dsa_pub_key_der_2048" ],
  61. [ "./certs/dsa2048.der", "dsa_key_der_2048" ],
  62. [ "./certs/rsa2048.der", "rsa_key_der_2048" ],
  63. [ "./certs/ca-key.der", "ca_key_der_2048" ],
  64. [ "./certs/ca-cert.der", "ca_cert_der_2048" ],
  65. [ "./certs/ca-cert-chain.der", "ca_cert_chain_der" ],
  66. [ "./certs/server-key.der", "server_key_der_2048" ],
  67. [ "./certs/server-cert.der", "server_cert_der_2048" ]
  68. );
  69. # 3072-bit certs/keys to be converted
  70. # Used with USE_CERT_BUFFERS_3072 define.
  71. my @fileList_3072 = (
  72. [ "./certs/dh3072.der", "dh_key_der_3072" ],
  73. [ "./certs/dsa3072.der", "dsa_key_der_3072" ],
  74. [ "./certs/rsa3072.der", "rsa_key_der_3072" ],
  75. [ "./certs/3072/client-key.der", "client_key_der_3072" ],
  76. [ "./certs/3072/client-keyPub.der", "client_keypub_der_3072" ],
  77. [ "./certs/3072/client-cert.der", "client_cert_der_3072" ],
  78. );
  79. # 4096-bit certs/keys to be converted
  80. # Used with USE_CERT_BUFFERS_4096 define.
  81. my @fileList_4096 = (
  82. [ "./certs/4096/client-key.der", "client_key_der_4096" ],
  83. [ "./certs/4096/client-keyPub.der", "client_keypub_der_4096" ],
  84. [ "./certs/4096/client-cert.der", "client_cert_der_4096" ],
  85. [ "./certs/dh4096.der", "dh_key_der_4096" ],
  86. );
  87. #Falcon Post-Quantum Keys
  88. #Used with HAVE_PQC
  89. my @fileList_falcon = (
  90. ["certs/falcon/bench_falcon_level1_key.der", "bench_falcon_level1_key" ],
  91. ["certs/falcon/bench_falcon_level5_key.der", "bench_falcon_level5_key" ],
  92. );
  93. #Dilithium Post-Quantum Keys
  94. #Used with HAVE_PQC
  95. my @fileList_dilithium = (
  96. ["certs/dilithium/bench_dilithium_level2_key.der", "bench_dilithium_level2_key" ],
  97. ["certs/dilithium/bench_dilithium_level3_key.der", "bench_dilithium_level3_key" ],
  98. ["certs/dilithium/bench_dilithium_level5_key.der", "bench_dilithium_level5_key" ],
  99. ["certs/dilithium/bench_dilithium_aes_level2_key.der", "bench_dilithium_aes_level2_key" ],
  100. ["certs/dilithium/bench_dilithium_aes_level3_key.der", "bench_dilithium_aes_level3_key" ],
  101. ["certs/dilithium/bench_dilithium_aes_level5_key.der", "bench_dilithium_aes_level5_key" ],
  102. );
  103. # ----------------------------------------------------------------------------
  104. my $num_ecc = @fileList_ecc;
  105. my $num_ed = @fileList_ed;
  106. my $num_1024 = @fileList_1024;
  107. my $num_2048 = @fileList_2048;
  108. my $num_3072 = @fileList_3072;
  109. my $num_4096 = @fileList_4096;
  110. my $num_falcon = @fileList_falcon;
  111. my $num_dilithium = @fileList_dilithium;
  112. # open our output file, "+>" creates and/or truncates
  113. open OUT_FILE, "+>", $outputFile or die $!;
  114. print OUT_FILE "/* certs_test.h */\n\n";
  115. print OUT_FILE "#ifndef WOLFSSL_CERTS_TEST_H\n";
  116. print OUT_FILE "#define WOLFSSL_CERTS_TEST_H\n\n";
  117. # convert and print 1024-bit cert/keys
  118. print OUT_FILE "#ifdef USE_CERT_BUFFERS_1024\n\n";
  119. for (my $i = 0; $i < $num_1024; $i++) {
  120. my $fname = $fileList_1024[$i][0];
  121. my $sname = $fileList_1024[$i][1];
  122. print OUT_FILE "/* $fname, 1024-bit */\n";
  123. print OUT_FILE "static const unsigned char $sname\[] =\n";
  124. print OUT_FILE "{\n";
  125. file_to_hex($fname);
  126. print OUT_FILE "};\n";
  127. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  128. }
  129. print OUT_FILE "#endif /* USE_CERT_BUFFERS_1024 */\n\n";
  130. # convert and print 2048-bit certs/keys
  131. print OUT_FILE "#ifdef USE_CERT_BUFFERS_2048\n\n";
  132. for (my $i = 0; $i < $num_2048; $i++) {
  133. my $fname = $fileList_2048[$i][0];
  134. my $sname = $fileList_2048[$i][1];
  135. print OUT_FILE "/* $fname, 2048-bit */\n";
  136. print OUT_FILE "static const unsigned char $sname\[] =\n";
  137. print OUT_FILE "{\n";
  138. file_to_hex($fname);
  139. print OUT_FILE "};\n";
  140. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  141. }
  142. print OUT_FILE "#endif /* USE_CERT_BUFFERS_2048 */\n\n";
  143. # convert and print 3072-bit certs/keys
  144. print OUT_FILE "#ifdef USE_CERT_BUFFERS_3072\n\n";
  145. for (my $i = 0; $i < $num_3072; $i++) {
  146. my $fname = $fileList_3072[$i][0];
  147. my $sname = $fileList_3072[$i][1];
  148. print OUT_FILE "/* $fname, 3072-bit */\n";
  149. print OUT_FILE "static const unsigned char $sname\[] =\n";
  150. print OUT_FILE "{\n";
  151. file_to_hex($fname);
  152. print OUT_FILE "};\n";
  153. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  154. }
  155. print OUT_FILE "#endif /* USE_CERT_BUFFERS_3072 */\n\n";
  156. # convert and print 4096-bit certs/keys
  157. print OUT_FILE "#ifdef USE_CERT_BUFFERS_4096\n\n";
  158. for (my $i = 0; $i < $num_4096; $i++) {
  159. my $fname = $fileList_4096[$i][0];
  160. my $sname = $fileList_4096[$i][1];
  161. print OUT_FILE "/* $fname, 4096-bit */\n";
  162. print OUT_FILE "static const unsigned char $sname\[] =\n";
  163. print OUT_FILE "{\n";
  164. file_to_hex($fname);
  165. print OUT_FILE "};\n";
  166. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  167. }
  168. print OUT_FILE "#endif /* USE_CERT_BUFFERS_4096 */\n\n";
  169. # convert and print falcon keys
  170. print OUT_FILE "#ifdef HAVE_PQC && HAVE_FALCON\n\n";
  171. for (my $i = 0; $i < $num_falcon; $i++) {
  172. my $fname = $fileList_falcon[$i][0];
  173. my $sname = $fileList_falcon[$i][1];
  174. print OUT_FILE "/* $fname */\n";
  175. print OUT_FILE "static const unsigned char $sname\[] =\n";
  176. print OUT_FILE "{\n";
  177. file_to_hex($fname);
  178. print OUT_FILE "};\n";
  179. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  180. }
  181. print OUT_FILE "#endif /* HAVE_PQC && HAVE_FALCON */\n\n";
  182. # convert and print dilithium keys
  183. print OUT_FILE "#ifdef HAVE_PQC && HAVE_DILITHIUM\n\n";
  184. for (my $i = 0; $i < $num_dilithium; $i++) {
  185. my $fname = $fileList_dilithium[$i][0];
  186. my $sname = $fileList_dilithium[$i][1];
  187. print OUT_FILE "/* $fname */\n";
  188. print OUT_FILE "static const unsigned char $sname\[] =\n";
  189. print OUT_FILE "{\n";
  190. file_to_hex($fname);
  191. print OUT_FILE "};\n";
  192. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  193. }
  194. print OUT_FILE "#endif /* HAVE_PQC && HAVE_DILITHIUM */\n\n";
  195. # convert and print 256-bit cert/keys
  196. print OUT_FILE "#if defined(HAVE_ECC) && defined(USE_CERT_BUFFERS_256)\n\n";
  197. for (my $i = 0; $i < $num_ecc; $i++) {
  198. my $fname = $fileList_ecc[$i][0];
  199. my $sname = $fileList_ecc[$i][1];
  200. print OUT_FILE "/* $fname, ECC */\n";
  201. print OUT_FILE "static const unsigned char $sname\[] =\n";
  202. print OUT_FILE "{\n";
  203. file_to_hex($fname);
  204. print OUT_FILE "};\n";
  205. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  206. }
  207. print OUT_FILE "#endif /* HAVE_ECC && USE_CERT_BUFFERS_256 */\n\n";
  208. print OUT_FILE "/* dh1024 p */
  209. static const unsigned char dh_p[] =
  210. {
  211. 0xE6, 0x96, 0x9D, 0x3D, 0x49, 0x5B, 0xE3, 0x2C, 0x7C, 0xF1, 0x80, 0xC3,
  212. 0xBD, 0xD4, 0x79, 0x8E, 0x91, 0xB7, 0x81, 0x82, 0x51, 0xBB, 0x05, 0x5E,
  213. 0x2A, 0x20, 0x64, 0x90, 0x4A, 0x79, 0xA7, 0x70, 0xFA, 0x15, 0xA2, 0x59,
  214. 0xCB, 0xD5, 0x23, 0xA6, 0xA6, 0xEF, 0x09, 0xC4, 0x30, 0x48, 0xD5, 0xA2,
  215. 0x2F, 0x97, 0x1F, 0x3C, 0x20, 0x12, 0x9B, 0x48, 0x00, 0x0E, 0x6E, 0xDD,
  216. 0x06, 0x1C, 0xBC, 0x05, 0x3E, 0x37, 0x1D, 0x79, 0x4E, 0x53, 0x27, 0xDF,
  217. 0x61, 0x1E, 0xBB, 0xBE, 0x1B, 0xAC, 0x9B, 0x5C, 0x60, 0x44, 0xCF, 0x02,
  218. 0x3D, 0x76, 0xE0, 0x5E, 0xEA, 0x9B, 0xAD, 0x99, 0x1B, 0x13, 0xA6, 0x3C,
  219. 0x97, 0x4E, 0x9E, 0xF1, 0x83, 0x9E, 0xB5, 0xDB, 0x12, 0x51, 0x36, 0xF7,
  220. 0x26, 0x2E, 0x56, 0xA8, 0x87, 0x15, 0x38, 0xDF, 0xD8, 0x23, 0xC6, 0x50,
  221. 0x50, 0x85, 0xE2, 0x1F, 0x0D, 0xD5, 0xC8, 0x6B,
  222. };
  223. /* dh1024 g */
  224. static const unsigned char dh_g[] =
  225. {
  226. 0x02,
  227. };\n\n";
  228. # convert and print ed25519 cert/keys
  229. print OUT_FILE "#if defined(HAVE_ED25519)\n\n";
  230. for (my $i = 0; $i < $num_ed; $i++) {
  231. my $fname = $fileList_ed[$i][0];
  232. my $sname = $fileList_ed[$i][1];
  233. print OUT_FILE "/* $fname, ED25519 */\n";
  234. print OUT_FILE "static const unsigned char $sname\[] =\n";
  235. print OUT_FILE "{\n";
  236. file_to_hex($fname);
  237. print OUT_FILE "};\n";
  238. print OUT_FILE "static const int sizeof_$sname = sizeof($sname);\n\n";
  239. }
  240. print OUT_FILE "#endif /* HAVE_ED25519 */\n\n";
  241. print OUT_FILE "#endif /* WOLFSSL_CERTS_TEST_H */\n\n";
  242. # close certs_test.h file
  243. close OUT_FILE or die $!;
  244. # print file as hex, comma-separated, as needed by C buffer
  245. sub file_to_hex {
  246. my $fileName = $_[0];
  247. open my $fp, "<", $fileName or die $!;
  248. binmode($fp);
  249. my $fileLen = -s $fileName;
  250. my $byte;
  251. for (my $i = 0, my $j = 1; $i < $fileLen; $i++, $j++)
  252. {
  253. if ($j == 1) {
  254. print OUT_FILE " ";
  255. }
  256. if ($j != 1) {
  257. print OUT_FILE " ";
  258. }
  259. read($fp, $byte, 1) or die "Error reading $fileName";
  260. my $output = sprintf("0x%02X", ord($byte));
  261. print OUT_FILE $output;
  262. if ($i != ($fileLen - 1)) {
  263. print OUT_FILE ",";
  264. }
  265. if ($j == 10) {
  266. $j = 0;
  267. print OUT_FILE "\n";
  268. }
  269. }
  270. print OUT_FILE "\n";
  271. close($fp);
  272. }