blob: c51ec946d79f6cf2012767c09e8ef635def0a5d1 [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/dhm.h"
Gilles Peskine02db8f42021-03-30 23:28:51 +02003
4static int check_dhm_param_output( const mbedtls_mpi *expected,
5 const unsigned char *buffer,
6 size_t size,
7 size_t *offset )
8{
9 size_t n;
10 mbedtls_mpi actual;
11 int ok = 0;
12 mbedtls_mpi_init( &actual );
13
14 ++mbedtls_test_info.step;
15
16 TEST_ASSERT( size >= *offset + 2 );
17 n = ( buffer[*offset] << 8 ) | buffer[*offset + 1];
18 *offset += 2;
Gilles Peskine03299dc2021-04-13 22:10:24 +020019 /* The DHM param output from Mbed TLS has leading zeros stripped, as
20 * permitted but not required by RFC 5246 \S4.4. */
Gilles Peskine02db8f42021-03-30 23:28:51 +020021 TEST_EQUAL( n, mbedtls_mpi_size( expected ) );
22 TEST_ASSERT( size >= *offset + n );
23 TEST_EQUAL( 0, mbedtls_mpi_read_binary( &actual, buffer + *offset, n ) );
24 TEST_EQUAL( 0, mbedtls_mpi_cmp_mpi( expected, &actual ) );
25 *offset += n;
26
27 ok = 1;
28exit:
29 mbedtls_mpi_free( &actual );
30 return( ok );
31}
32
33static int check_dhm_params( const mbedtls_dhm_context *ctx,
34 size_t x_size,
35 const unsigned char *ske, size_t ske_len )
36{
37 size_t offset = 0;
38
39 /* Check that ctx->X and ctx->GX are within range. */
40 TEST_ASSERT( mbedtls_mpi_cmp_int( &ctx->X, 1 ) > 0 );
41 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &ctx->X, &ctx->P ) < 0 );
42 TEST_ASSERT( mbedtls_mpi_size( &ctx->X ) <= x_size );
43 TEST_ASSERT( mbedtls_mpi_cmp_int( &ctx->GX, 1 ) > 0 );
44 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &ctx->GX, &ctx->P ) < 0 );
45
46 /* Check ske: it must contain P, G and G^X, each prefixed with a
47 * 2-byte size. */
48 if( !check_dhm_param_output( &ctx->P, ske, ske_len, &offset ) )
49 goto exit;
50 if( !check_dhm_param_output( &ctx->G, ske, ske_len, &offset ) )
51 goto exit;
52 if( !check_dhm_param_output( &ctx->GX, ske, ske_len, &offset ) )
53 goto exit;
54 TEST_EQUAL( offset, ske_len );
55
56 return( 1 );
57exit:
58 return( 0 );
59}
60
Paul Bakker33b43f12013-08-20 11:48:36 +020061/* END_HEADER */
Paul Bakker5c60de22009-07-08 19:47:36 +000062
Paul Bakker33b43f12013-08-20 11:48:36 +020063/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020064 * depends_on:MBEDTLS_DHM_C:MBEDTLS_BIGNUM_C
Paul Bakker33b43f12013-08-20 11:48:36 +020065 * END_DEPENDENCIES
66 */
Paul Bakker5690efc2011-05-26 13:16:06 +000067
Andrzej Kurekc470b6b2019-01-31 08:20:20 -050068/* BEGIN_CASE depends_on:MBEDTLS_CHECK_PARAMS:!MBEDTLS_PARAM_FAILED_ALT */
69void dhm_invalid_params( )
70{
71 mbedtls_dhm_context ctx;
72 unsigned char buf[42] = { 0 };
73 unsigned char *buf_null = NULL;
74 mbedtls_mpi X;
75 size_t const buflen = sizeof( buf );
76 size_t len;
77
78 TEST_INVALID_PARAM( mbedtls_dhm_init( NULL ) );
79 TEST_VALID_PARAM( mbedtls_dhm_free( NULL ) );
80
81 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
82 mbedtls_dhm_read_params( NULL,
83 (unsigned char**) &buf,
84 buf ) );
85 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
86 mbedtls_dhm_read_params( &ctx, &buf_null, buf ) );
87 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
88 mbedtls_dhm_read_params( &ctx, NULL, buf ) );
89 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
90 mbedtls_dhm_read_params( &ctx,
91 (unsigned char**) &buf,
92 NULL ) );
93
94 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
95 mbedtls_dhm_make_params( NULL, buflen,
96 buf, &len,
Ronald Cron351f0ee2020-06-10 12:12:18 +020097 mbedtls_test_rnd_std_rand,
Andrzej Kurekc470b6b2019-01-31 08:20:20 -050098 NULL ) );
99 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
100 mbedtls_dhm_make_params( &ctx, buflen,
101 NULL, &len,
Ronald Cron351f0ee2020-06-10 12:12:18 +0200102 mbedtls_test_rnd_std_rand,
Andrzej Kurekc470b6b2019-01-31 08:20:20 -0500103 NULL ) );
104 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
105 mbedtls_dhm_make_params( &ctx, buflen,
106 buf, NULL,
Ronald Cron351f0ee2020-06-10 12:12:18 +0200107 mbedtls_test_rnd_std_rand,
Andrzej Kurekc470b6b2019-01-31 08:20:20 -0500108 NULL ) );
109 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
110 mbedtls_dhm_make_params( &ctx, buflen,
111 buf, &len,
112 NULL,
113 NULL ) );
114
115 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
116 mbedtls_dhm_set_group( NULL, &X, &X ) );
117 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
118 mbedtls_dhm_set_group( &ctx, NULL, &X ) );
119 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
120 mbedtls_dhm_set_group( &ctx, &X, NULL ) );
121
122 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
123 mbedtls_dhm_read_public( NULL, buf, buflen ) );
124 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
125 mbedtls_dhm_read_public( &ctx, NULL, buflen ) );
126
127 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
128 mbedtls_dhm_make_public( NULL, buflen,
129 buf, buflen,
Ronald Cron351f0ee2020-06-10 12:12:18 +0200130 mbedtls_test_rnd_std_rand,
Andrzej Kurekc470b6b2019-01-31 08:20:20 -0500131 NULL ) );
132 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
133 mbedtls_dhm_make_public( &ctx, buflen,
134 NULL, buflen,
Ronald Cron351f0ee2020-06-10 12:12:18 +0200135 mbedtls_test_rnd_std_rand,
Andrzej Kurekc470b6b2019-01-31 08:20:20 -0500136 NULL ) );
137 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
138 mbedtls_dhm_make_public( &ctx, buflen,
139 buf, buflen,
140 NULL,
141 NULL ) );
142
143 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
Ronald Cron6c5bd7f2020-06-10 14:08:26 +0200144 mbedtls_dhm_calc_secret( NULL, buf, buflen, &len,
145 mbedtls_test_rnd_std_rand,
Andrzej Kurekc470b6b2019-01-31 08:20:20 -0500146 NULL ) );
147 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
Ronald Cron6c5bd7f2020-06-10 14:08:26 +0200148 mbedtls_dhm_calc_secret( &ctx, NULL, buflen, &len,
149 mbedtls_test_rnd_std_rand,
Andrzej Kurekc470b6b2019-01-31 08:20:20 -0500150 NULL ) );
151 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
Ronald Cron6c5bd7f2020-06-10 14:08:26 +0200152 mbedtls_dhm_calc_secret( &ctx, buf, buflen, NULL,
153 mbedtls_test_rnd_std_rand,
Andrzej Kurekc470b6b2019-01-31 08:20:20 -0500154 NULL ) );
155
156#if defined(MBEDTLS_ASN1_PARSE_C)
157 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
158 mbedtls_dhm_parse_dhm( NULL, buf, buflen ) );
159 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
160 mbedtls_dhm_parse_dhm( &ctx, NULL, buflen ) );
161
162#if defined(MBEDTLS_FS_IO)
163 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
164 mbedtls_dhm_parse_dhmfile( NULL, "" ) );
165 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_DHM_BAD_INPUT_DATA,
166 mbedtls_dhm_parse_dhmfile( &ctx, NULL ) );
167#endif /* MBEDTLS_FS_IO */
168#endif /* MBEDTLS_ASN1_PARSE_C */
169
170exit:
171 return;
172}
173/* END_CASE */
174
Paul Bakker33b43f12013-08-20 11:48:36 +0200175/* BEGIN_CASE */
Gilles Peskine2baf2b02021-03-30 23:44:22 +0200176void dhm_do_dhm( int radix_P, char *input_P, int x_size,
Janos Follath4b151fa2017-09-20 13:46:37 +0100177 int radix_G, char *input_G, int result )
Paul Bakker5c60de22009-07-08 19:47:36 +0000178{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200179 mbedtls_dhm_context ctx_srv;
180 mbedtls_dhm_context ctx_cli;
Paul Bakker5c60de22009-07-08 19:47:36 +0000181 unsigned char ske[1000];
182 unsigned char *p = ske;
183 unsigned char pub_cli[1000];
184 unsigned char sec_srv[1000];
185 unsigned char sec_cli[1000];
Paul Bakkerf4a3f302011-04-24 15:53:29 +0000186 size_t ske_len = 0;
187 size_t pub_cli_len = 0;
Manuel Pégourié-Gonnard33352052015-06-02 16:17:08 +0100188 size_t sec_srv_len;
189 size_t sec_cli_len;
Gilles Peskine2baf2b02021-03-30 23:44:22 +0200190 int i;
Ronald Cron351f0ee2020-06-10 12:12:18 +0200191 mbedtls_test_rnd_pseudo_info rnd_info;
Paul Bakker5c60de22009-07-08 19:47:36 +0000192
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200193 mbedtls_dhm_init( &ctx_srv );
194 mbedtls_dhm_init( &ctx_cli );
Paul Bakker5c60de22009-07-08 19:47:36 +0000195 memset( ske, 0x00, 1000 );
196 memset( pub_cli, 0x00, 1000 );
197 memset( sec_srv, 0x00, 1000 );
198 memset( sec_cli, 0x00, 1000 );
Ronald Cron351f0ee2020-06-10 12:12:18 +0200199 memset( &rnd_info, 0x00, sizeof( mbedtls_test_rnd_pseudo_info ) );
Paul Bakker5c60de22009-07-08 19:47:36 +0000200
Manuel Pégourié-Gonnard143b5022013-09-04 16:29:59 +0200201 /*
202 * Set params
203 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200204 TEST_ASSERT( mbedtls_mpi_read_string( &ctx_srv.P, radix_P, input_P ) == 0 );
205 TEST_ASSERT( mbedtls_mpi_read_string( &ctx_srv.G, radix_G, input_G ) == 0 );
Gilles Peskine2baf2b02021-03-30 23:44:22 +0200206 pub_cli_len = mbedtls_mpi_size( &ctx_srv.P );
Manuel Pégourié-Gonnard143b5022013-09-04 16:29:59 +0200207
208 /*
209 * First key exchange
210 */
Gilles Peskine02db8f42021-03-30 23:28:51 +0200211 mbedtls_test_set_step( 10 );
Ronald Cron6c5bd7f2020-06-10 14:08:26 +0200212 TEST_ASSERT( mbedtls_dhm_make_params( &ctx_srv, x_size, ske, &ske_len,
213 &mbedtls_test_rnd_pseudo_rand,
214 &rnd_info ) == result );
Janos Follath4b151fa2017-09-20 13:46:37 +0100215 if ( result != 0 )
216 goto exit;
Gilles Peskine02db8f42021-03-30 23:28:51 +0200217 if( !check_dhm_params( &ctx_srv, x_size, ske, ske_len ) )
218 goto exit;
Janos Follath4b151fa2017-09-20 13:46:37 +0100219
Manuel Pégourié-Gonnard143b5022013-09-04 16:29:59 +0200220 ske[ske_len++] = 0;
221 ske[ske_len++] = 0;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200222 TEST_ASSERT( mbedtls_dhm_read_params( &ctx_cli, &p, ske + ske_len ) == 0 );
Manuel Pégourié-Gonnard143b5022013-09-04 16:29:59 +0200223
Ronald Cron6c5bd7f2020-06-10 14:08:26 +0200224 TEST_ASSERT( mbedtls_dhm_make_public( &ctx_cli, x_size, pub_cli, pub_cli_len,
225 &mbedtls_test_rnd_pseudo_rand,
226 &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200227 TEST_ASSERT( mbedtls_dhm_read_public( &ctx_srv, pub_cli, pub_cli_len ) == 0 );
Manuel Pégourié-Gonnard143b5022013-09-04 16:29:59 +0200228
Ronald Cron6c5bd7f2020-06-10 14:08:26 +0200229 TEST_ASSERT( mbedtls_dhm_calc_secret( &ctx_srv, sec_srv, sizeof( sec_srv ),
230 &sec_srv_len,
231 &mbedtls_test_rnd_pseudo_rand,
232 &rnd_info ) == 0 );
Manuel Pégourié-Gonnard33352052015-06-02 16:17:08 +0100233 TEST_ASSERT( mbedtls_dhm_calc_secret( &ctx_cli, sec_cli, sizeof( sec_cli ), &sec_cli_len, NULL, NULL ) == 0 );
Manuel Pégourié-Gonnard143b5022013-09-04 16:29:59 +0200234
235 TEST_ASSERT( sec_srv_len == sec_cli_len );
236 TEST_ASSERT( sec_srv_len != 0 );
237 TEST_ASSERT( memcmp( sec_srv, sec_cli, sec_srv_len ) == 0 );
238
Manuel Pégourié-Gonnard15d5de12013-09-17 11:34:11 +0200239 /* Re-do calc_secret on server a few times to test update of blinding values */
240 for( i = 0; i < 3; i++ )
241 {
Gilles Peskine02db8f42021-03-30 23:28:51 +0200242 mbedtls_test_set_step( 20 + i );
Manuel Pégourié-Gonnard15d5de12013-09-17 11:34:11 +0200243 sec_srv_len = 1000;
Ronald Cron6c5bd7f2020-06-10 14:08:26 +0200244 TEST_ASSERT( mbedtls_dhm_calc_secret( &ctx_srv, sec_srv,
245 sizeof( sec_srv ), &sec_srv_len,
246 &mbedtls_test_rnd_pseudo_rand,
247 &rnd_info ) == 0 );
Manuel Pégourié-Gonnard143b5022013-09-04 16:29:59 +0200248
Manuel Pégourié-Gonnard15d5de12013-09-17 11:34:11 +0200249 TEST_ASSERT( sec_srv_len == sec_cli_len );
250 TEST_ASSERT( sec_srv_len != 0 );
251 TEST_ASSERT( memcmp( sec_srv, sec_cli, sec_srv_len ) == 0 );
252 }
Manuel Pégourié-Gonnard143b5022013-09-04 16:29:59 +0200253
254 /*
255 * Second key exchange to test change of blinding values on server
256 */
Manuel Pégourié-Gonnard143b5022013-09-04 16:29:59 +0200257 p = ske;
Paul Bakker5c60de22009-07-08 19:47:36 +0000258
Gilles Peskine02db8f42021-03-30 23:28:51 +0200259 mbedtls_test_set_step( 30 );
Ronald Cron6c5bd7f2020-06-10 14:08:26 +0200260 TEST_ASSERT( mbedtls_dhm_make_params( &ctx_srv, x_size, ske, &ske_len,
261 &mbedtls_test_rnd_pseudo_rand,
262 &rnd_info ) == 0 );
Gilles Peskine02db8f42021-03-30 23:28:51 +0200263 if( !check_dhm_params( &ctx_srv, x_size, ske, ske_len ) )
264 goto exit;
Paul Bakker5c60de22009-07-08 19:47:36 +0000265 ske[ske_len++] = 0;
266 ske[ske_len++] = 0;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200267 TEST_ASSERT( mbedtls_dhm_read_params( &ctx_cli, &p, ske + ske_len ) == 0 );
Paul Bakker5c60de22009-07-08 19:47:36 +0000268
Ronald Cron6c5bd7f2020-06-10 14:08:26 +0200269 TEST_ASSERT( mbedtls_dhm_make_public( &ctx_cli, x_size, pub_cli, pub_cli_len,
270 &mbedtls_test_rnd_pseudo_rand,
271 &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200272 TEST_ASSERT( mbedtls_dhm_read_public( &ctx_srv, pub_cli, pub_cli_len ) == 0 );
Paul Bakker5c60de22009-07-08 19:47:36 +0000273
Ronald Cron6c5bd7f2020-06-10 14:08:26 +0200274 TEST_ASSERT( mbedtls_dhm_calc_secret( &ctx_srv, sec_srv, sizeof( sec_srv ),
275 &sec_srv_len,
276 &mbedtls_test_rnd_pseudo_rand,
277 &rnd_info ) == 0 );
Manuel Pégourié-Gonnard33352052015-06-02 16:17:08 +0100278 TEST_ASSERT( mbedtls_dhm_calc_secret( &ctx_cli, sec_cli, sizeof( sec_cli ), &sec_cli_len, NULL, NULL ) == 0 );
Paul Bakker5c60de22009-07-08 19:47:36 +0000279
280 TEST_ASSERT( sec_srv_len == sec_cli_len );
281 TEST_ASSERT( sec_srv_len != 0 );
282 TEST_ASSERT( memcmp( sec_srv, sec_cli, sec_srv_len ) == 0 );
Paul Bakkerc43481a2011-02-20 16:34:26 +0000283
Paul Bakkerbd51b262014-07-10 15:26:12 +0200284exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200285 mbedtls_dhm_free( &ctx_srv );
286 mbedtls_dhm_free( &ctx_cli );
Paul Bakker5c60de22009-07-08 19:47:36 +0000287}
Paul Bakker33b43f12013-08-20 11:48:36 +0200288/* END_CASE */
Paul Bakker40ce79f2013-09-15 17:43:54 +0200289
Chris Jonesd10b3312020-12-02 10:41:50 +0000290/* BEGIN_CASE */
291void dhm_make_public( int P_bytes, int radix_G, char *input_G, int result )
292{
293 mbedtls_mpi P, G;
294 mbedtls_dhm_context ctx;
295 unsigned char output[MBEDTLS_MPI_MAX_SIZE];
296
297 mbedtls_mpi_init( &P );
298 mbedtls_mpi_init( &G );
299 mbedtls_dhm_init( &ctx );
300
301 TEST_ASSERT( mbedtls_mpi_lset( &P, 1 ) == 0 );
302 TEST_ASSERT( mbedtls_mpi_shift_l( &P, ( P_bytes * 8 ) - 1 ) == 0 );
303 TEST_ASSERT( mbedtls_mpi_set_bit( &P, 0, 1 ) == 0 );
304
305 TEST_ASSERT( mbedtls_mpi_read_string( &G, radix_G, input_G ) == 0 );
306
307 TEST_ASSERT( mbedtls_dhm_set_group( &ctx, &P, &G ) == 0 );
308 TEST_ASSERT( mbedtls_dhm_make_public( &ctx, (int) mbedtls_mpi_size( &P ),
309 output, sizeof(output),
310 &mbedtls_test_rnd_pseudo_rand,
311 NULL ) == result );
312
313exit:
314 mbedtls_mpi_free( &P );
315 mbedtls_mpi_free( &G );
316 mbedtls_dhm_free( &ctx );
317}
318/* END_CASE */
319
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200320/* BEGIN_CASE depends_on:MBEDTLS_FS_IO */
Azim Khanf1aaec92017-05-30 14:23:15 +0100321void dhm_file( char * filename, char * p, char * g, int len )
Manuel Pégourié-Gonnard3fec2202014-03-29 16:42:38 +0100322{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200323 mbedtls_dhm_context ctx;
324 mbedtls_mpi P, G;
Manuel Pégourié-Gonnard3fec2202014-03-29 16:42:38 +0100325
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200326 mbedtls_dhm_init( &ctx );
327 mbedtls_mpi_init( &P ); mbedtls_mpi_init( &G );
Manuel Pégourié-Gonnard3fec2202014-03-29 16:42:38 +0100328
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200329 TEST_ASSERT( mbedtls_mpi_read_string( &P, 16, p ) == 0 );
330 TEST_ASSERT( mbedtls_mpi_read_string( &G, 16, g ) == 0 );
Manuel Pégourié-Gonnard3fec2202014-03-29 16:42:38 +0100331
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200332 TEST_ASSERT( mbedtls_dhm_parse_dhmfile( &ctx, filename ) == 0 );
Manuel Pégourié-Gonnard3fec2202014-03-29 16:42:38 +0100333
334 TEST_ASSERT( ctx.len == (size_t) len );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200335 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &ctx.P, &P ) == 0 );
336 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &ctx.G, &G ) == 0 );
Manuel Pégourié-Gonnard3fec2202014-03-29 16:42:38 +0100337
Paul Bakkerbd51b262014-07-10 15:26:12 +0200338exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200339 mbedtls_mpi_free( &P ); mbedtls_mpi_free( &G );
340 mbedtls_dhm_free( &ctx );
Manuel Pégourié-Gonnard3fec2202014-03-29 16:42:38 +0100341}
342/* END_CASE */
343
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200344/* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST */
Azim Khanf1aaec92017-05-30 14:23:15 +0100345void dhm_selftest( )
Paul Bakker40ce79f2013-09-15 17:43:54 +0200346{
Andres AG93012e82016-09-09 09:10:28 +0100347 TEST_ASSERT( mbedtls_dhm_self_test( 1 ) == 0 );
Paul Bakker40ce79f2013-09-15 17:43:54 +0200348}
349/* END_CASE */