blob: 4b8109023b6d21964dcd61d481822292d2d8566c [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/ecp.h"
Gilles Peskine420d7d92017-11-10 15:21:12 +01003#include "mbedtls/pk.h"
Paul Bakkerdbd443d2013-08-16 13:38:47 +02004
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02005#define ECP_PF_UNKNOWN -1
Paul Bakker33b43f12013-08-20 11:48:36 +02006/* END_HEADER */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +01007
Paul Bakker33b43f12013-08-20 11:48:36 +02008/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02009 * depends_on:MBEDTLS_ECP_C
Paul Bakker33b43f12013-08-20 11:48:36 +020010 * END_DEPENDENCIES
11 */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010012
Paul Bakker33b43f12013-08-20 11:48:36 +020013/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020014void mbedtls_ecp_curve_info( int id, int tls_id, int size, char *name )
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010015{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020016 const mbedtls_ecp_curve_info *by_id, *by_tls, *by_name;
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010017
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020018 by_id = mbedtls_ecp_curve_info_from_grp_id( id );
19 by_tls = mbedtls_ecp_curve_info_from_tls_id( tls_id );
20 by_name = mbedtls_ecp_curve_info_from_name( name );
Paul Bakker94b916c2014-04-17 16:07:20 +020021 TEST_ASSERT( by_id != NULL );
22 TEST_ASSERT( by_tls != NULL );
23 TEST_ASSERT( by_name != NULL );
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010024
25 TEST_ASSERT( by_id == by_tls );
26 TEST_ASSERT( by_id == by_name );
27
Manuel Pégourié-Gonnard797f48a2015-06-18 15:45:05 +020028 TEST_ASSERT( by_id->bit_size == size );
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010029}
30/* END_CASE */
31
32/* BEGIN_CASE */
Janos Follath28fff142017-01-27 15:51:14 +000033void ecp_check_pub( int grp_id, char *x_hex, char *y_hex, char *z_hex, int ret )
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010034{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020035 mbedtls_ecp_group grp;
36 mbedtls_ecp_point P;
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010037
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020038 mbedtls_ecp_group_init( &grp );
39 mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010040
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +020041 TEST_ASSERT( mbedtls_ecp_group_load( &grp, grp_id ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010042
Janos Follath28fff142017-01-27 15:51:14 +000043 TEST_ASSERT( mbedtls_mpi_read_string( &P.X, 16, x_hex ) == 0 );
44 TEST_ASSERT( mbedtls_mpi_read_string( &P.Y, 16, y_hex ) == 0 );
45 TEST_ASSERT( mbedtls_mpi_read_string( &P.Z, 16, z_hex ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010046
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020047 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &P ) == ret );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010048
Paul Bakkerbd51b262014-07-10 15:26:12 +020049exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020050 mbedtls_ecp_group_free( &grp );
51 mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010052}
53/* END_CASE */
54
55/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +020056void ecp_test_vect( int id, char *dA_str, char *xA_str, char *yA_str,
57 char *dB_str, char *xB_str, char *yB_str, char *xZ_str,
58 char *yZ_str )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010059{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020060 mbedtls_ecp_group grp;
61 mbedtls_ecp_point R;
62 mbedtls_mpi dA, xA, yA, dB, xB, yB, xZ, yZ;
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +020063 rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010064
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020065 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
66 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); mbedtls_mpi_init( &yA ); mbedtls_mpi_init( &dB );
67 mbedtls_mpi_init( &xB ); mbedtls_mpi_init( &yB ); mbedtls_mpi_init( &xZ ); mbedtls_mpi_init( &yZ );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +020068 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010069
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +020070 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010071
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020072 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +010073
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020074 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_str ) == 0 );
75 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_str ) == 0 );
76 TEST_ASSERT( mbedtls_mpi_read_string( &yA, 16, yA_str ) == 0 );
77 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_str ) == 0 );
78 TEST_ASSERT( mbedtls_mpi_read_string( &xB, 16, xB_str ) == 0 );
79 TEST_ASSERT( mbedtls_mpi_read_string( &yB, 16, yB_str ) == 0 );
80 TEST_ASSERT( mbedtls_mpi_read_string( &xZ, 16, xZ_str ) == 0 );
81 TEST_ASSERT( mbedtls_mpi_read_string( &yZ, 16, yZ_str ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +010082
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020083 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G,
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +020084 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020085 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
86 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yA ) == 0 );
87 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
88 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R, NULL, NULL ) == 0 );
89 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
90 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
91 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +010092
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020093 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
94 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 );
95 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yB ) == 0 );
96 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
97 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R,
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +020098 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020099 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
100 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
101 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100102
Paul Bakkerbd51b262014-07-10 15:26:12 +0200103exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200104 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
105 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); mbedtls_mpi_free( &yA ); mbedtls_mpi_free( &dB );
106 mbedtls_mpi_free( &xB ); mbedtls_mpi_free( &yB ); mbedtls_mpi_free( &xZ ); mbedtls_mpi_free( &yZ );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100107}
Paul Bakker33b43f12013-08-20 11:48:36 +0200108/* END_CASE */
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100109
Paul Bakker33b43f12013-08-20 11:48:36 +0200110/* BEGIN_CASE */
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100111void ecp_test_vec_x( int id, char *dA_hex, char *xA_hex,
112 char *dB_hex, char *xB_hex, char *xS_hex )
113{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200114 mbedtls_ecp_group grp;
115 mbedtls_ecp_point R;
116 mbedtls_mpi dA, xA, dB, xB, xS;
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100117 rnd_pseudo_info rnd_info;
118
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200119 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
120 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA );
121 mbedtls_mpi_init( &dB ); mbedtls_mpi_init( &xB );
122 mbedtls_mpi_init( &xS );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100123 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
124
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200125 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100126
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200127 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100128
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200129 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_hex ) == 0 );
130 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_hex ) == 0 );
131 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_hex ) == 0 );
132 TEST_ASSERT( mbedtls_mpi_read_string( &xB, 16, xB_hex ) == 0 );
133 TEST_ASSERT( mbedtls_mpi_read_string( &xS, 16, xS_hex ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100134
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200135 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G,
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100136 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200137 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
138 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100139
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200140 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R,
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100141 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200142 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
143 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100144
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200145 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
146 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
147 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100148
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200149 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R, NULL, NULL ) == 0 );
150 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
151 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100152
Paul Bakkerbd51b262014-07-10 15:26:12 +0200153exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200154 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
155 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA );
156 mbedtls_mpi_free( &dB ); mbedtls_mpi_free( &xB );
157 mbedtls_mpi_free( &xS );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100158}
159/* END_CASE */
160
161/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +0200162void ecp_fast_mod( int id, char *N_str )
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100163{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200164 mbedtls_ecp_group grp;
165 mbedtls_mpi N, R;
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100166
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200167 mbedtls_mpi_init( &N ); mbedtls_mpi_init( &R );
168 mbedtls_ecp_group_init( &grp );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100169
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200170 TEST_ASSERT( mbedtls_mpi_read_string( &N, 16, N_str ) == 0 );
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200171 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde783f062013-10-21 14:52:21 +0200172 TEST_ASSERT( grp.modp != NULL );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100173
174 /*
175 * Store correct result before we touch N
176 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200177 TEST_ASSERT( mbedtls_mpi_mod_mpi( &R, &N, &grp.P ) == 0 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100178
179 TEST_ASSERT( grp.modp( &N ) == 0 );
Manuel Pégourié-Gonnardc0696c22015-06-18 16:47:17 +0200180 TEST_ASSERT( mbedtls_mpi_bitlen( &N ) <= grp.pbits + 3 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100181
182 /*
Paul Bakkerd8b0c5e2014-04-11 15:31:33 +0200183 * Use mod rather than addition/subtraction in case previous test fails
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100184 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200185 TEST_ASSERT( mbedtls_mpi_mod_mpi( &N, &N, &grp.P ) == 0 );
186 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &N, &R ) == 0 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100187
Paul Bakkerbd51b262014-07-10 15:26:12 +0200188exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200189 mbedtls_mpi_free( &N ); mbedtls_mpi_free( &R );
190 mbedtls_ecp_group_free( &grp );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100191}
Paul Bakker33b43f12013-08-20 11:48:36 +0200192/* END_CASE */
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100193
Paul Bakker33b43f12013-08-20 11:48:36 +0200194/* BEGIN_CASE */
195void ecp_write_binary( int id, char *x, char *y, char *z, int format,
196 char *out, int blen, int ret )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100197{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200198 mbedtls_ecp_group grp;
199 mbedtls_ecp_point P;
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100200 unsigned char buf[256], str[512];
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100201 size_t olen;
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100202
203 memset( buf, 0, sizeof( buf ) );
204 memset( str, 0, sizeof( str ) );
205
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200206 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100207
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200208 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100209
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200210 TEST_ASSERT( mbedtls_mpi_read_string( &P.X, 16, x ) == 0 );
211 TEST_ASSERT( mbedtls_mpi_read_string( &P.Y, 16, y ) == 0 );
212 TEST_ASSERT( mbedtls_mpi_read_string( &P.Z, 16, z ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100213
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200214 TEST_ASSERT( mbedtls_ecp_point_write_binary( &grp, &P, format,
Paul Bakker33b43f12013-08-20 11:48:36 +0200215 &olen, buf, blen ) == ret );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100216
Paul Bakker33b43f12013-08-20 11:48:36 +0200217 if( ret == 0 )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100218 {
Manuel Pégourié-Gonnard37d218a2012-11-24 15:19:55 +0100219 hexify( str, buf, olen );
Paul Bakker33b43f12013-08-20 11:48:36 +0200220 TEST_ASSERT( strcasecmp( (char *) str, out ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100221 }
222
Paul Bakkerbd51b262014-07-10 15:26:12 +0200223exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200224 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100225}
Paul Bakker33b43f12013-08-20 11:48:36 +0200226/* END_CASE */
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100227
Paul Bakker33b43f12013-08-20 11:48:36 +0200228/* BEGIN_CASE */
229void ecp_read_binary( int id, char *input, char *x, char *y, char *z,
230 int ret )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100231{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200232 mbedtls_ecp_group grp;
233 mbedtls_ecp_point P;
234 mbedtls_mpi X, Y, Z;
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100235 int ilen;
236 unsigned char buf[256];
237
238 memset( buf, 0, sizeof( buf ) );
239
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200240 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
241 mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100242
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200243 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100244
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200245 TEST_ASSERT( mbedtls_mpi_read_string( &X, 16, x ) == 0 );
246 TEST_ASSERT( mbedtls_mpi_read_string( &Y, 16, y ) == 0 );
247 TEST_ASSERT( mbedtls_mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100248
Paul Bakker33b43f12013-08-20 11:48:36 +0200249 ilen = unhexify( buf, input );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100250
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200251 TEST_ASSERT( mbedtls_ecp_point_read_binary( &grp, &P, buf, ilen ) == ret );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100252
Paul Bakker33b43f12013-08-20 11:48:36 +0200253 if( ret == 0 )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100254 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200255 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 );
256 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 );
257 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100258 }
259
Paul Bakkerbd51b262014-07-10 15:26:12 +0200260exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200261 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
262 mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100263}
Paul Bakker33b43f12013-08-20 11:48:36 +0200264/* END_CASE */
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100265
Paul Bakker33b43f12013-08-20 11:48:36 +0200266/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200267void mbedtls_ecp_tls_read_point( int id, char *input, char *x, char *y, char *z,
Paul Bakker33b43f12013-08-20 11:48:36 +0200268 int ret )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100269{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200270 mbedtls_ecp_group grp;
271 mbedtls_ecp_point P;
272 mbedtls_mpi X, Y, Z;
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100273 size_t ilen;
274 unsigned char buf[256];
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100275 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100276
277 memset( buf, 0, sizeof( buf ) );
278
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200279 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
280 mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100281
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200282 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100283
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200284 TEST_ASSERT( mbedtls_mpi_read_string( &X, 16, x ) == 0 );
285 TEST_ASSERT( mbedtls_mpi_read_string( &Y, 16, y ) == 0 );
286 TEST_ASSERT( mbedtls_mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100287
Paul Bakker33b43f12013-08-20 11:48:36 +0200288 ilen = unhexify( buf, input );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100289
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200290 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &P, &vbuf, ilen ) == ret );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100291
Paul Bakker33b43f12013-08-20 11:48:36 +0200292 if( ret == 0 )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100293 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200294 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 );
295 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 );
296 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100297 TEST_ASSERT( *vbuf == 0x00 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100298 }
299
Paul Bakkerbd51b262014-07-10 15:26:12 +0200300exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200301 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
302 mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100303}
Paul Bakker33b43f12013-08-20 11:48:36 +0200304/* END_CASE */
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100305
Paul Bakker33b43f12013-08-20 11:48:36 +0200306/* BEGIN_CASE */
307void ecp_tls_write_read_point( int id )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100308{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200309 mbedtls_ecp_group grp;
310 mbedtls_ecp_point pt;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100311 unsigned char buf[256];
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100312 const unsigned char *vbuf;
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100313 size_t olen;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100314
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200315 mbedtls_ecp_group_init( &grp );
316 mbedtls_ecp_point_init( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100317
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200318 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100319
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100320 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200321 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G,
322 MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
323 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen )
324 == MBEDTLS_ERR_ECP_FEATURE_UNAVAILABLE );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100325 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100326
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100327 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200328 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G,
329 MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
330 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
331 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.X, &pt.X ) == 0 );
332 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Y, &pt.Y ) == 0 );
333 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Z, &pt.Z ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100334 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100335
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100336 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200337 TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 );
338 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt,
339 MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
340 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
341 TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100342 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100343
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100344 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200345 TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 );
346 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt,
347 MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
348 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
349 TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100350 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100351
Paul Bakkerbd51b262014-07-10 15:26:12 +0200352exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200353 mbedtls_ecp_group_free( &grp );
354 mbedtls_ecp_point_free( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100355}
Paul Bakker33b43f12013-08-20 11:48:36 +0200356/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100357
Paul Bakker33b43f12013-08-20 11:48:36 +0200358/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200359void mbedtls_ecp_tls_read_group( char *record, int result, int bits )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100360{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200361 mbedtls_ecp_group grp;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100362 unsigned char buf[10];
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100363 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100364 int len, ret;
365
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200366 mbedtls_ecp_group_init( &grp );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100367 memset( buf, 0x00, sizeof( buf ) );
368
Paul Bakker33b43f12013-08-20 11:48:36 +0200369 len = unhexify( buf, record );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100370
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200371 ret = mbedtls_ecp_tls_read_group( &grp, &vbuf, len );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100372
Paul Bakker33b43f12013-08-20 11:48:36 +0200373 TEST_ASSERT( ret == result );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100374 if( ret == 0)
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100375 {
Manuel Pégourié-Gonnardc0696c22015-06-18 16:47:17 +0200376 TEST_ASSERT( mbedtls_mpi_bitlen( &grp.P ) == (size_t) bits );
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100377 TEST_ASSERT( *vbuf == 0x00 );
378 }
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100379
Paul Bakkerbd51b262014-07-10 15:26:12 +0200380exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200381 mbedtls_ecp_group_free( &grp );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100382}
Paul Bakker33b43f12013-08-20 11:48:36 +0200383/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100384
Paul Bakker33b43f12013-08-20 11:48:36 +0200385/* BEGIN_CASE */
386void ecp_tls_write_read_group( int id )
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100387{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200388 mbedtls_ecp_group grp1, grp2;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100389 unsigned char buf[10];
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100390 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100391 size_t len;
392 int ret;
393
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200394 mbedtls_ecp_group_init( &grp1 );
395 mbedtls_ecp_group_init( &grp2 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100396 memset( buf, 0x00, sizeof( buf ) );
397
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200398 TEST_ASSERT( mbedtls_ecp_group_load( &grp1, id ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100399
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200400 TEST_ASSERT( mbedtls_ecp_tls_write_group( &grp1, &len, buf, 10 ) == 0 );
401 ret = mbedtls_ecp_tls_read_group( &grp2, &vbuf, len );
Paul Bakker94b916c2014-04-17 16:07:20 +0200402 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100403
404 if( ret == 0 )
405 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200406 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp1.N, &grp2.N ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100407 TEST_ASSERT( grp1.id == grp2.id );
408 }
409
Paul Bakkerbd51b262014-07-10 15:26:12 +0200410exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200411 mbedtls_ecp_group_free( &grp1 );
412 mbedtls_ecp_group_free( &grp2 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100413}
Paul Bakker33b43f12013-08-20 11:48:36 +0200414/* END_CASE */
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100415
Gilles Peskine420d7d92017-11-10 15:21:12 +0100416/* BEGIN_CASE depends_on:MBEDTLS_ASN1_WRITE_C:MBEDTLS_OID_C */
417void ecp_ansi_write_group( int id, char *hex )
418{
419 mbedtls_ecp_group grp;
420 unsigned char good[MBEDTLS_OID_EC_GRP_MAX_SIZE];
421 unsigned char tested[MBEDTLS_OID_EC_GRP_MAX_SIZE];
422 size_t good_len = unhexify( good, hex );
423 int ret = 0;
424 mbedtls_ecp_group_init( &grp );
425 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
426
427 /* Positive test */
428 ret = mbedtls_ecp_ansi_write_group( &grp, tested, sizeof( tested ) );
429 TEST_ASSERT( ret >= 0 && good_len == (unsigned) ret );
430 TEST_ASSERT( memcmp( good, tested, good_len ) == 0 );
431
432 /* Buffer too small */
433 TEST_ASSERT( mbedtls_ecp_ansi_write_group( &grp, tested, good_len - 1 ) ==
434 MBEDTLS_ERR_ECP_BUFFER_TOO_SMALL );
435
436exit:
437 mbedtls_ecp_group_free( &grp );
438}
439/* END_CASE */
440
441/* BEGIN_CASE depends_on:MBEDTLS_ASN1_WRITE_C:MBEDTLS_OID_C:MBEDTLS_PK_PARSE_C:MBEDTLS_FS_IO */
442void ecp_ansi_write_point( char *key_file, int format, char *good_hex )
443{
444 unsigned char good_buf[1000];
445 unsigned char tested_buf[1000];
446 size_t good_len = unhexify( good_buf, good_hex );
447 mbedtls_pk_context pk;
448 int ret = 0;
449 mbedtls_pk_init( &pk );
450 TEST_ASSERT( mbedtls_pk_parse_public_keyfile( &pk, key_file ) == 0 );
451
452 /* Positive test */
453 ret = mbedtls_ecp_ansi_write_point( mbedtls_pk_ec( pk ), format,
454 tested_buf, sizeof( tested_buf ) );
455 TEST_ASSERT( ret >= 0 && good_len == (unsigned) ret );
456 TEST_ASSERT( memcmp( good_buf, tested_buf, good_len ) == 0 );
457
458 /* Buffer too small */
459 TEST_ASSERT( mbedtls_ecp_ansi_write_point( mbedtls_pk_ec( pk ), format,
460 tested_buf, good_len - 1 ) ==
461 MBEDTLS_ERR_ECP_BUFFER_TOO_SMALL );
462
463exit:
464 if( ret >= 0 ) {
465 unsigned char out[999] = {0};
466 hexify( out, tested_buf, ret );
467 printf("== %s ==\n", out);
468 }
469 mbedtls_pk_free( &pk );
470}
471/* END_CASE */
472
Paul Bakker33b43f12013-08-20 11:48:36 +0200473/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200474void mbedtls_ecp_check_privkey( int id, char *key_hex, int ret )
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200475{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200476 mbedtls_ecp_group grp;
477 mbedtls_mpi d;
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200478
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200479 mbedtls_ecp_group_init( &grp );
480 mbedtls_mpi_init( &d );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200481
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200482 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200483 TEST_ASSERT( mbedtls_mpi_read_string( &d, 16, key_hex ) == 0 );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200484
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200485 TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == ret );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200486
Paul Bakkerbd51b262014-07-10 15:26:12 +0200487exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200488 mbedtls_ecp_group_free( &grp );
489 mbedtls_mpi_free( &d );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200490}
Paul Bakker33b43f12013-08-20 11:48:36 +0200491/* END_CASE */
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200492
Paul Bakker33b43f12013-08-20 11:48:36 +0200493/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200494void mbedtls_ecp_check_pub_priv( int id_pub, char *Qx_pub, char *Qy_pub,
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100495 int id, char *d, char *Qx, char *Qy, int ret )
496{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200497 mbedtls_ecp_keypair pub, prv;
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100498
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200499 mbedtls_ecp_keypair_init( &pub );
500 mbedtls_ecp_keypair_init( &prv );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100501
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200502 if( id_pub != MBEDTLS_ECP_DP_NONE )
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200503 TEST_ASSERT( mbedtls_ecp_group_load( &pub.grp, id_pub ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200504 TEST_ASSERT( mbedtls_ecp_point_read_string( &pub.Q, 16, Qx_pub, Qy_pub ) == 0 );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100505
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200506 if( id != MBEDTLS_ECP_DP_NONE )
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200507 TEST_ASSERT( mbedtls_ecp_group_load( &prv.grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200508 TEST_ASSERT( mbedtls_ecp_point_read_string( &prv.Q, 16, Qx, Qy ) == 0 );
509 TEST_ASSERT( mbedtls_mpi_read_string( &prv.d, 16, d ) == 0 );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100510
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200511 TEST_ASSERT( mbedtls_ecp_check_pub_priv( &pub, &prv ) == ret );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100512
513exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200514 mbedtls_ecp_keypair_free( &pub );
515 mbedtls_ecp_keypair_free( &prv );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100516}
517/* END_CASE */
518
519/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200520void mbedtls_ecp_gen_keypair( int id )
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100521{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200522 mbedtls_ecp_group grp;
523 mbedtls_ecp_point Q;
524 mbedtls_mpi d;
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100525 rnd_pseudo_info rnd_info;
526
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200527 mbedtls_ecp_group_init( &grp );
528 mbedtls_ecp_point_init( &Q );
529 mbedtls_mpi_init( &d );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100530 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
531
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200532 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100533
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200534 TEST_ASSERT( mbedtls_ecp_gen_keypair( &grp, &d, &Q, &rnd_pseudo_rand, &rnd_info )
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100535 == 0 );
536
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200537 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &Q ) == 0 );
538 TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100539
Paul Bakkerbd51b262014-07-10 15:26:12 +0200540exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200541 mbedtls_ecp_group_free( &grp );
542 mbedtls_ecp_point_free( &Q );
543 mbedtls_mpi_free( &d );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100544}
Paul Bakker33b43f12013-08-20 11:48:36 +0200545/* END_CASE */
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100546
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100547/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200548void mbedtls_ecp_gen_key( int id )
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100549{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200550 mbedtls_ecp_keypair key;
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100551 rnd_pseudo_info rnd_info;
552
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200553 mbedtls_ecp_keypair_init( &key );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100554 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
555
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200556 TEST_ASSERT( mbedtls_ecp_gen_key( id, &key, &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100557
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200558 TEST_ASSERT( mbedtls_ecp_check_pubkey( &key.grp, &key.Q ) == 0 );
559 TEST_ASSERT( mbedtls_ecp_check_privkey( &key.grp, &key.d ) == 0 );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100560
Paul Bakkerbd51b262014-07-10 15:26:12 +0200561exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200562 mbedtls_ecp_keypair_free( &key );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100563}
564/* END_CASE */
565
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200566/* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST */
Paul Bakker33b43f12013-08-20 11:48:36 +0200567void ecp_selftest()
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100568{
Andres AG93012e82016-09-09 09:10:28 +0100569 TEST_ASSERT( mbedtls_ecp_self_test( 1 ) == 0 );
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100570}
Paul Bakker33b43f12013-08-20 11:48:36 +0200571/* END_CASE */