blob: 94ba8cbe0c77db031d7de02cc76796b324ff0af1 [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/ecp.h"
Paul Bakkerdbd443d2013-08-16 13:38:47 +02003
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02004#define ECP_PF_UNKNOWN -1
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +02005
6#define ECP_PT_RESET( x ) \
7 mbedtls_ecp_point_free( x ); \
8 mbedtls_ecp_point_init( x );
Paul Bakker33b43f12013-08-20 11:48:36 +02009/* END_HEADER */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010010
Paul Bakker33b43f12013-08-20 11:48:36 +020011/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020012 * depends_on:MBEDTLS_ECP_C
Paul Bakker33b43f12013-08-20 11:48:36 +020013 * END_DEPENDENCIES
14 */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010015
Hanno Becker12dff032018-12-14 15:08:13 +000016/* BEGIN_CASE depends_on:MBEDTLS_CHECK_PARAMS:!MBEDTLS_PARAM_FAILED_ALT */
17void ecp_invalid_param( )
18{
19 mbedtls_ecp_group grp;
20 mbedtls_ecp_keypair kp;
21 mbedtls_ecp_point P;
22 mbedtls_mpi m;
23 const char *x = "deadbeef";
24 int valid_fmt = MBEDTLS_ECP_PF_UNCOMPRESSED;
25 int invalid_fmt = 42;
26 size_t olen;
27 unsigned char buf[42] = { 0 };
28 const unsigned char *null_buf = NULL;
29 mbedtls_ecp_group_id valid_group = MBEDTLS_ECP_DP_SECP192R1;
30
31 TEST_INVALID_PARAM( mbedtls_ecp_point_init( NULL ) );
32 TEST_INVALID_PARAM( mbedtls_ecp_keypair_init( NULL ) );
33 TEST_INVALID_PARAM( mbedtls_ecp_point_init( NULL ) );
34
35 TEST_VALID_PARAM( mbedtls_ecp_point_free( NULL ) );
36 TEST_VALID_PARAM( mbedtls_ecp_keypair_free( NULL ) );
37 TEST_VALID_PARAM( mbedtls_ecp_point_free( NULL ) );
38
39#if defined(MBEDTLS_ECP_RESTARTABLE)
40 TEST_INVALID_PARAM( mbedtls_ecp_restart_init( NULL ) );
41 TEST_VALID_PARAM( mbedtls_ecp_restart_free( NULL ) );
42#endif /* MBEDTLS_ECP_RESTARTABLE */
43
44 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
45 mbedtls_ecp_copy( NULL, &P ) );
46 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
47 mbedtls_ecp_copy( &P, NULL ) );
48
49 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
50 mbedtls_ecp_group_copy( NULL, &grp ) );
51 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
52 mbedtls_ecp_group_copy( &grp, NULL ) );
53
54 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
55 mbedtls_ecp_set_zero( NULL ) );
56 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
57 mbedtls_ecp_is_zero( NULL ) );
58
59 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
60 mbedtls_ecp_point_cmp( NULL, &P ) );
61 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
62 mbedtls_ecp_point_cmp( &P, NULL ) );
63
64 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
65 mbedtls_ecp_point_read_string( NULL, 2,
66 x, x ) );
67 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
68 mbedtls_ecp_point_read_string( &P, 2,
69 NULL, x ) );
70 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
71 mbedtls_ecp_point_read_string( &P, 2,
72 x, NULL ) );
73
74 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
75 mbedtls_ecp_point_write_binary( NULL, &P,
76 valid_fmt,
77 &olen,
78 buf, sizeof( buf ) ) );
79 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
80 mbedtls_ecp_point_write_binary( &grp, NULL,
81 valid_fmt,
82 &olen,
83 buf, sizeof( buf ) ) );
84 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
85 mbedtls_ecp_point_write_binary( &grp, &P,
86 invalid_fmt,
87 &olen,
88 buf, sizeof( buf ) ) );
89 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
90 mbedtls_ecp_point_write_binary( &grp, &P,
91 valid_fmt,
92 NULL,
93 buf, sizeof( buf ) ) );
94 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
95 mbedtls_ecp_point_write_binary( &grp, &P,
96 valid_fmt,
97 &olen,
98 NULL, sizeof( buf ) ) );
99
100 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
101 mbedtls_ecp_point_read_binary( NULL, &P, buf,
102 sizeof( buf ) ) );
103 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
104 mbedtls_ecp_point_read_binary( &grp, NULL, buf,
105 sizeof( buf ) ) );
106 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
107 mbedtls_ecp_point_read_binary( &grp, &P, NULL,
108 sizeof( buf ) ) );
109
110 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
111 mbedtls_ecp_tls_read_point( NULL, &P,
112 (const unsigned char **) &buf,
113 sizeof( buf ) ) );
114 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
115 mbedtls_ecp_tls_read_point( &grp, NULL,
116 (const unsigned char **) &buf,
117 sizeof( buf ) ) );
118 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
119 mbedtls_ecp_tls_read_point( &grp, &P, &null_buf,
120 sizeof( buf ) ) );
121 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
122 mbedtls_ecp_tls_read_point( &grp, &P, NULL,
123 sizeof( buf ) ) );
124
125 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
126 mbedtls_ecp_tls_write_point( NULL, &P,
127 valid_fmt,
128 &olen,
129 buf,
130 sizeof( buf ) ) );
131 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
132 mbedtls_ecp_tls_write_point( &grp, NULL,
133 valid_fmt,
134 &olen,
135 buf,
136 sizeof( buf ) ) );
137 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
138 mbedtls_ecp_tls_write_point( &grp, &P,
139 invalid_fmt,
140 &olen,
141 buf,
142 sizeof( buf ) ) );
143 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
144 mbedtls_ecp_tls_write_point( &grp, &P,
145 valid_fmt,
146 NULL,
147 buf,
148 sizeof( buf ) ) );
149 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
150 mbedtls_ecp_tls_write_point( &grp, &P,
151 valid_fmt,
152 &olen,
153 NULL,
154 sizeof( buf ) ) );
155
156 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
157 mbedtls_ecp_group_load( NULL, valid_group ) );
158
159 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
160 mbedtls_ecp_tls_read_group( NULL,
161 (const unsigned char **) &buf,
162 sizeof( buf ) ) );
163 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
164 mbedtls_ecp_tls_read_group( &grp, NULL,
165 sizeof( buf ) ) );
166 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
167 mbedtls_ecp_tls_read_group( &grp, &null_buf,
168 sizeof( buf ) ) );
169
170 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
171 mbedtls_ecp_tls_read_group_id( NULL,
172 (const unsigned char **) &buf,
173 sizeof( buf ) ) );
174 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
175 mbedtls_ecp_tls_read_group_id( &valid_group, NULL,
176 sizeof( buf ) ) );
177 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
178 mbedtls_ecp_tls_read_group_id( &valid_group,
179 &null_buf,
180 sizeof( buf ) ) );
181
182 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
183 mbedtls_ecp_tls_write_group( NULL, &olen,
184 buf, sizeof( buf ) ) );
185 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
186 mbedtls_ecp_tls_write_group( &grp, NULL,
187 buf, sizeof( buf ) ) );
188 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
189 mbedtls_ecp_tls_write_group( &grp, &olen,
190 NULL, sizeof( buf ) ) );
191
192 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
193 mbedtls_ecp_mul( NULL, &P, &m, &P,
194 rnd_std_rand, NULL ) );
195 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
196 mbedtls_ecp_mul( &grp, NULL, &m, &P,
197 rnd_std_rand, NULL ) );
198 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
199 mbedtls_ecp_mul( &grp, &P, NULL, &P,
200 rnd_std_rand, NULL ) );
201 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
202 mbedtls_ecp_mul( &grp, &P, &m, NULL,
203 rnd_std_rand, NULL ) );
204
205 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
206 mbedtls_ecp_mul_restartable( NULL, &P, &m, &P,
207 rnd_std_rand, NULL , NULL ) );
208 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
209 mbedtls_ecp_mul_restartable( &grp, NULL, &m, &P,
210 rnd_std_rand, NULL , NULL ) );
211 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
212 mbedtls_ecp_mul_restartable( &grp, &P, NULL, &P,
213 rnd_std_rand, NULL , NULL ) );
214 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
215 mbedtls_ecp_mul_restartable( &grp, &P, &m, NULL,
216 rnd_std_rand, NULL , NULL ) );
217
218 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
219 mbedtls_ecp_muladd( NULL, &P, &m, &P,
220 &m, &P ) );
221 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
222 mbedtls_ecp_muladd( &grp, NULL, &m, &P,
223 &m, &P ) );
224 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
225 mbedtls_ecp_muladd( &grp, &P, NULL, &P,
226 &m, &P ) );
227 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
228 mbedtls_ecp_muladd( &grp, &P, &m, NULL,
229 &m, &P ) );
230 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
231 mbedtls_ecp_muladd( &grp, &P, &m, &P,
232 NULL, &P ) );
233 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
234 mbedtls_ecp_muladd( &grp, &P, &m, &P,
235 &m, NULL ) );
236
237 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
238 mbedtls_ecp_muladd_restartable( NULL, &P, &m, &P,
239 &m, &P, NULL ) );
240 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
241 mbedtls_ecp_muladd_restartable( &grp, NULL, &m, &P,
242 &m, &P, NULL ) );
243 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
244 mbedtls_ecp_muladd_restartable( &grp, &P, NULL, &P,
245 &m, &P, NULL ) );
246 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
247 mbedtls_ecp_muladd_restartable( &grp, &P, &m, NULL,
248 &m, &P, NULL ) );
249 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
250 mbedtls_ecp_muladd_restartable( &grp, &P, &m, &P,
251 NULL, &P, NULL ) );
252 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
253 mbedtls_ecp_muladd_restartable( &grp, &P, &m, &P,
254 &m, NULL, NULL ) );
255
256 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
257 mbedtls_ecp_check_pubkey( NULL, &P ) );
258 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
259 mbedtls_ecp_check_pubkey( &grp, NULL ) );
260
261 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
262 mbedtls_ecp_check_privkey( NULL, &m ) );
263 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
264 mbedtls_ecp_check_privkey( &grp, NULL ) );
265
266 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
267 mbedtls_ecp_gen_keypair_base( NULL, &P,
268 &m, &P,
269 rnd_std_rand,
270 NULL ) );
271 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
272 mbedtls_ecp_gen_keypair_base( &grp, NULL,
273 &m, &P,
274 rnd_std_rand,
275 NULL ) );
276 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
277 mbedtls_ecp_gen_keypair_base( &grp, &P,
278 NULL, &P,
279 rnd_std_rand,
280 NULL ) );
281 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
282 mbedtls_ecp_gen_keypair_base( &grp, &P,
283 &m, NULL,
284 rnd_std_rand,
285 NULL ) );
286 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
287 mbedtls_ecp_gen_keypair_base( &grp, &P,
288 &m, &P,
289 NULL,
290 NULL ) );
291
292 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
293 mbedtls_ecp_gen_keypair( NULL,
294 &m, &P,
295 rnd_std_rand,
296 NULL ) );
297 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
298 mbedtls_ecp_gen_keypair( &grp,
299 NULL, &P,
300 rnd_std_rand,
301 NULL ) );
302 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
303 mbedtls_ecp_gen_keypair( &grp,
304 &m, NULL,
305 rnd_std_rand,
306 NULL ) );
307 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
308 mbedtls_ecp_gen_keypair( &grp,
309 &m, &P,
310 NULL,
311 NULL ) );
312
313 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
314 mbedtls_ecp_gen_key( valid_group, NULL,
315 rnd_std_rand, NULL ) );
316 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
317 mbedtls_ecp_gen_key( valid_group, &kp,
318 NULL, NULL ) );
319
320exit:
321 return;
322}
323/* END_CASE */
324
Paul Bakker33b43f12013-08-20 11:48:36 +0200325/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100326void mbedtls_ecp_curve_info( int id, int tls_id, int size, char * name )
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +0100327{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200328 const mbedtls_ecp_curve_info *by_id, *by_tls, *by_name;
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +0100329
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200330 by_id = mbedtls_ecp_curve_info_from_grp_id( id );
331 by_tls = mbedtls_ecp_curve_info_from_tls_id( tls_id );
332 by_name = mbedtls_ecp_curve_info_from_name( name );
Paul Bakker94b916c2014-04-17 16:07:20 +0200333 TEST_ASSERT( by_id != NULL );
334 TEST_ASSERT( by_tls != NULL );
335 TEST_ASSERT( by_name != NULL );
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +0100336
337 TEST_ASSERT( by_id == by_tls );
338 TEST_ASSERT( by_id == by_name );
339
Manuel Pégourié-Gonnard797f48a2015-06-18 15:45:05 +0200340 TEST_ASSERT( by_id->bit_size == size );
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +0100341}
342/* END_CASE */
343
344/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100345void ecp_check_pub( int grp_id, char * x_hex, char * y_hex, char * z_hex,
346 int ret )
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100347{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200348 mbedtls_ecp_group grp;
349 mbedtls_ecp_point P;
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100350
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200351 mbedtls_ecp_group_init( &grp );
352 mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100353
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200354 TEST_ASSERT( mbedtls_ecp_group_load( &grp, grp_id ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100355
Janos Follath28fff142017-01-27 15:51:14 +0000356 TEST_ASSERT( mbedtls_mpi_read_string( &P.X, 16, x_hex ) == 0 );
357 TEST_ASSERT( mbedtls_mpi_read_string( &P.Y, 16, y_hex ) == 0 );
358 TEST_ASSERT( mbedtls_mpi_read_string( &P.Z, 16, z_hex ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100359
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200360 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &P ) == ret );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100361
Paul Bakkerbd51b262014-07-10 15:26:12 +0200362exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200363 mbedtls_ecp_group_free( &grp );
364 mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100365}
366/* END_CASE */
367
Manuel Pégourié-Gonnard4b9c51e2017-04-20 15:50:26 +0200368/* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE */
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100369void ecp_test_vect_restart( int id,
370 char *dA_str, char *xA_str, char *yA_str,
371 char *dB_str, char *xZ_str, char *yZ_str,
372 int max_ops, int min_restarts, int max_restarts )
373{
374 /*
375 * Test for early restart. Based on test vectors like ecp_test_vect(),
376 * but for the sake of simplicity only does half of each side. It's
377 * important to test both base point and random point, though, as memory
378 * management is different in each case.
379 *
380 * Don't try using too precise bounds for restarts as the exact number
381 * will depend on settings such as MBEDTLS_ECP_FIXED_POINT_OPTIM and
382 * MBEDTLS_ECP_WINDOW_SIZE, as well as implementation details that may
383 * change in the future. A factor 2 is a minimum safety margin.
384 *
385 * For reference, with mbed TLS 2.4 and default settings, for P-256:
Manuel Pégourié-Gonnard9c5c78f2017-03-20 14:13:07 +0100386 * - Random point mult: ~3250M
387 * - Cold base point mult: ~3300M
388 * - Hot base point mult: ~1100M
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100389 * With MBEDTLS_ECP_WINDOW_SIZE set to 2 (minimum):
Manuel Pégourié-Gonnard9c5c78f2017-03-20 14:13:07 +0100390 * - Random point mult: ~3850M
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100391 */
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +0200392 mbedtls_ecp_restart_ctx ctx;
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100393 mbedtls_ecp_group grp;
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200394 mbedtls_ecp_point R, P;
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100395 mbedtls_mpi dA, xA, yA, dB, xZ, yZ;
396 int cnt_restarts;
397 int ret;
398
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +0200399 mbedtls_ecp_restart_init( &ctx );
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200400 mbedtls_ecp_group_init( &grp );
401 mbedtls_ecp_point_init( &R ); mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100402 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); mbedtls_mpi_init( &yA );
403 mbedtls_mpi_init( &dB ); mbedtls_mpi_init( &xZ ); mbedtls_mpi_init( &yZ );
404
405 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
406
407 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_str ) == 0 );
408 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_str ) == 0 );
409 TEST_ASSERT( mbedtls_mpi_read_string( &yA, 16, yA_str ) == 0 );
410
411 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_str ) == 0 );
412 TEST_ASSERT( mbedtls_mpi_read_string( &xZ, 16, xZ_str ) == 0 );
413 TEST_ASSERT( mbedtls_mpi_read_string( &yZ, 16, yZ_str ) == 0 );
414
415 mbedtls_ecp_set_max_ops( (unsigned) max_ops );
416
417 /* Base point case */
418 cnt_restarts = 0;
419 do {
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200420 ECP_PT_RESET( &R );
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +0200421 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dA, &grp.G, NULL, NULL, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200422 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100423
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200424 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100425 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
426 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yA ) == 0 );
427
428 TEST_ASSERT( cnt_restarts >= min_restarts );
429 TEST_ASSERT( cnt_restarts <= max_restarts );
430
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100431 /* Non-base point case */
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200432 mbedtls_ecp_copy( &P, &R );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100433 cnt_restarts = 0;
434 do {
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200435 ECP_PT_RESET( &R );
436 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dB, &P, NULL, NULL, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200437 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100438
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200439 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100440 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
441 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
442
443 TEST_ASSERT( cnt_restarts >= min_restarts );
444 TEST_ASSERT( cnt_restarts <= max_restarts );
445
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200446 /* Do we leak memory when aborting an operation?
447 * This test only makes sense when we actually restart */
448 if( min_restarts > 0 )
449 {
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200450 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dB, &P, NULL, NULL, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200451 TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
452 }
Manuel Pégourié-Gonnard77af79a2017-03-14 10:58:00 +0100453
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100454exit:
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +0200455 mbedtls_ecp_restart_free( &ctx );
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200456 mbedtls_ecp_group_free( &grp );
457 mbedtls_ecp_point_free( &R ); mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100458 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); mbedtls_mpi_free( &yA );
459 mbedtls_mpi_free( &dB ); mbedtls_mpi_free( &xZ ); mbedtls_mpi_free( &yZ );
460}
461/* END_CASE */
462
Manuel Pégourié-Gonnard4b9c51e2017-04-20 15:50:26 +0200463/* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE */
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200464void ecp_muladd_restart( int id, char *xR_str, char *yR_str,
465 char *u1_str, char *u2_str,
466 char *xQ_str, char *yQ_str,
467 int max_ops, int min_restarts, int max_restarts )
468{
469 /*
470 * Compute R = u1 * G + u2 * Q
471 * (test vectors mostly taken from ECDSA intermediate results)
472 *
473 * See comments at the top of ecp_test_vect_restart()
474 */
475 mbedtls_ecp_restart_ctx ctx;
476 mbedtls_ecp_group grp;
477 mbedtls_ecp_point R, Q;
478 mbedtls_mpi u1, u2, xR, yR;
479 int cnt_restarts;
480 int ret;
481
482 mbedtls_ecp_restart_init( &ctx );
483 mbedtls_ecp_group_init( &grp );
484 mbedtls_ecp_point_init( &R );
485 mbedtls_ecp_point_init( &Q );
486 mbedtls_mpi_init( &u1 ); mbedtls_mpi_init( &u2 );
487 mbedtls_mpi_init( &xR ); mbedtls_mpi_init( &yR );
488
489 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
490
491 TEST_ASSERT( mbedtls_mpi_read_string( &u1, 16, u1_str ) == 0 );
492 TEST_ASSERT( mbedtls_mpi_read_string( &u2, 16, u2_str ) == 0 );
493 TEST_ASSERT( mbedtls_mpi_read_string( &xR, 16, xR_str ) == 0 );
494 TEST_ASSERT( mbedtls_mpi_read_string( &yR, 16, yR_str ) == 0 );
495
496 TEST_ASSERT( mbedtls_mpi_read_string( &Q.X, 16, xQ_str ) == 0 );
497 TEST_ASSERT( mbedtls_mpi_read_string( &Q.Y, 16, yQ_str ) == 0 );
498 TEST_ASSERT( mbedtls_mpi_lset( &Q.Z, 1 ) == 0 );
499
500 mbedtls_ecp_set_max_ops( (unsigned) max_ops );
501
502 cnt_restarts = 0;
503 do {
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200504 ECP_PT_RESET( &R );
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200505 ret = mbedtls_ecp_muladd_restartable( &grp, &R,
506 &u1, &grp.G, &u2, &Q, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200507 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200508
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200509 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200510 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xR ) == 0 );
511 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yR ) == 0 );
512
513 TEST_ASSERT( cnt_restarts >= min_restarts );
514 TEST_ASSERT( cnt_restarts <= max_restarts );
515
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200516 /* Do we leak memory when aborting an operation?
517 * This test only makes sense when we actually restart */
518 if( min_restarts > 0 )
519 {
520 ret = mbedtls_ecp_muladd_restartable( &grp, &R,
521 &u1, &grp.G, &u2, &Q, &ctx );
522 TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
523 }
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200524
525exit:
526 mbedtls_ecp_restart_free( &ctx );
527 mbedtls_ecp_group_free( &grp );
528 mbedtls_ecp_point_free( &R );
529 mbedtls_ecp_point_free( &Q );
530 mbedtls_mpi_free( &u1 ); mbedtls_mpi_free( &u2 );
531 mbedtls_mpi_free( &xR ); mbedtls_mpi_free( &yR );
532}
533/* END_CASE */
534
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100535/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100536void ecp_test_vect( int id, char * dA_str, char * xA_str, char * yA_str,
537 char * dB_str, char * xB_str, char * yB_str,
538 char * xZ_str, char * yZ_str )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100539{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200540 mbedtls_ecp_group grp;
541 mbedtls_ecp_point R;
542 mbedtls_mpi dA, xA, yA, dB, xB, yB, xZ, yZ;
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200543 rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100544
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200545 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
546 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); mbedtls_mpi_init( &yA ); mbedtls_mpi_init( &dB );
547 mbedtls_mpi_init( &xB ); mbedtls_mpi_init( &yB ); mbedtls_mpi_init( &xZ ); mbedtls_mpi_init( &yZ );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200548 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100549
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200550 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100551
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200552 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100553
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200554 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_str ) == 0 );
555 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_str ) == 0 );
556 TEST_ASSERT( mbedtls_mpi_read_string( &yA, 16, yA_str ) == 0 );
557 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_str ) == 0 );
558 TEST_ASSERT( mbedtls_mpi_read_string( &xB, 16, xB_str ) == 0 );
559 TEST_ASSERT( mbedtls_mpi_read_string( &yB, 16, yB_str ) == 0 );
560 TEST_ASSERT( mbedtls_mpi_read_string( &xZ, 16, xZ_str ) == 0 );
561 TEST_ASSERT( mbedtls_mpi_read_string( &yZ, 16, yZ_str ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100562
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200563 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G,
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200564 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200565 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
566 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yA ) == 0 );
567 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
568 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R, NULL, NULL ) == 0 );
569 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
570 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
571 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100572
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200573 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
574 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 );
575 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yB ) == 0 );
576 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
577 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R,
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200578 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200579 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
580 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
581 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100582
Paul Bakkerbd51b262014-07-10 15:26:12 +0200583exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200584 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
585 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); mbedtls_mpi_free( &yA ); mbedtls_mpi_free( &dB );
586 mbedtls_mpi_free( &xB ); mbedtls_mpi_free( &yB ); mbedtls_mpi_free( &xZ ); mbedtls_mpi_free( &yZ );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100587}
Paul Bakker33b43f12013-08-20 11:48:36 +0200588/* END_CASE */
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100589
Paul Bakker33b43f12013-08-20 11:48:36 +0200590/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100591void ecp_test_vec_x( int id, char * dA_hex, char * xA_hex, char * dB_hex,
592 char * xB_hex, char * xS_hex )
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100593{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200594 mbedtls_ecp_group grp;
595 mbedtls_ecp_point R;
596 mbedtls_mpi dA, xA, dB, xB, xS;
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100597 rnd_pseudo_info rnd_info;
598
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200599 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
600 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA );
601 mbedtls_mpi_init( &dB ); mbedtls_mpi_init( &xB );
602 mbedtls_mpi_init( &xS );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100603 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
604
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200605 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100606
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200607 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100608
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200609 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_hex ) == 0 );
610 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_hex ) == 0 );
611 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_hex ) == 0 );
612 TEST_ASSERT( mbedtls_mpi_read_string( &xB, 16, xB_hex ) == 0 );
613 TEST_ASSERT( mbedtls_mpi_read_string( &xS, 16, xS_hex ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100614
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200615 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G,
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100616 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200617 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
618 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100619
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200620 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R,
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100621 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200622 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
623 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100624
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200625 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
626 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
627 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100628
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200629 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R, NULL, NULL ) == 0 );
630 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
631 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100632
Paul Bakkerbd51b262014-07-10 15:26:12 +0200633exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200634 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
635 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA );
636 mbedtls_mpi_free( &dB ); mbedtls_mpi_free( &xB );
637 mbedtls_mpi_free( &xS );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100638}
639/* END_CASE */
640
641/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100642void ecp_fast_mod( int id, char * N_str )
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100643{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200644 mbedtls_ecp_group grp;
645 mbedtls_mpi N, R;
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100646
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200647 mbedtls_mpi_init( &N ); mbedtls_mpi_init( &R );
648 mbedtls_ecp_group_init( &grp );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100649
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200650 TEST_ASSERT( mbedtls_mpi_read_string( &N, 16, N_str ) == 0 );
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200651 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde783f062013-10-21 14:52:21 +0200652 TEST_ASSERT( grp.modp != NULL );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100653
654 /*
655 * Store correct result before we touch N
656 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200657 TEST_ASSERT( mbedtls_mpi_mod_mpi( &R, &N, &grp.P ) == 0 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100658
659 TEST_ASSERT( grp.modp( &N ) == 0 );
Manuel Pégourié-Gonnardc0696c22015-06-18 16:47:17 +0200660 TEST_ASSERT( mbedtls_mpi_bitlen( &N ) <= grp.pbits + 3 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100661
662 /*
Paul Bakkerd8b0c5e2014-04-11 15:31:33 +0200663 * Use mod rather than addition/subtraction in case previous test fails
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100664 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200665 TEST_ASSERT( mbedtls_mpi_mod_mpi( &N, &N, &grp.P ) == 0 );
666 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &N, &R ) == 0 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100667
Paul Bakkerbd51b262014-07-10 15:26:12 +0200668exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200669 mbedtls_mpi_free( &N ); mbedtls_mpi_free( &R );
670 mbedtls_ecp_group_free( &grp );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100671}
Paul Bakker33b43f12013-08-20 11:48:36 +0200672/* END_CASE */
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100673
Paul Bakker33b43f12013-08-20 11:48:36 +0200674/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100675void ecp_write_binary( int id, char * x, char * y, char * z, int format,
Azim Khan5fcca462018-06-29 11:05:32 +0100676 data_t * out, int blen, int ret )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100677{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200678 mbedtls_ecp_group grp;
679 mbedtls_ecp_point P;
Azim Khanf1aaec92017-05-30 14:23:15 +0100680 unsigned char buf[256];
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100681 size_t olen;
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100682
683 memset( buf, 0, sizeof( buf ) );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100684
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200685 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100686
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200687 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100688
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200689 TEST_ASSERT( mbedtls_mpi_read_string( &P.X, 16, x ) == 0 );
690 TEST_ASSERT( mbedtls_mpi_read_string( &P.Y, 16, y ) == 0 );
691 TEST_ASSERT( mbedtls_mpi_read_string( &P.Z, 16, z ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100692
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200693 TEST_ASSERT( mbedtls_ecp_point_write_binary( &grp, &P, format,
Paul Bakker33b43f12013-08-20 11:48:36 +0200694 &olen, buf, blen ) == ret );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100695
Paul Bakker33b43f12013-08-20 11:48:36 +0200696 if( ret == 0 )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100697 {
Azim Khand30ca132017-06-09 04:32:58 +0100698 TEST_ASSERT( hexcmp( buf, out->x, olen, out->len ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100699 }
700
Paul Bakkerbd51b262014-07-10 15:26:12 +0200701exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200702 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100703}
Paul Bakker33b43f12013-08-20 11:48:36 +0200704/* END_CASE */
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100705
Paul Bakker33b43f12013-08-20 11:48:36 +0200706/* BEGIN_CASE */
Azim Khan5fcca462018-06-29 11:05:32 +0100707void ecp_read_binary( int id, data_t * buf, char * x, char * y, char * z,
Paul Bakker33b43f12013-08-20 11:48:36 +0200708 int ret )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100709{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200710 mbedtls_ecp_group grp;
711 mbedtls_ecp_point P;
712 mbedtls_mpi X, Y, Z;
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100713
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100714
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200715 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
716 mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100717
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200718 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100719
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200720 TEST_ASSERT( mbedtls_mpi_read_string( &X, 16, x ) == 0 );
721 TEST_ASSERT( mbedtls_mpi_read_string( &Y, 16, y ) == 0 );
722 TEST_ASSERT( mbedtls_mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100723
Azim Khand30ca132017-06-09 04:32:58 +0100724 TEST_ASSERT( mbedtls_ecp_point_read_binary( &grp, &P, buf->x, buf->len ) == ret );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100725
Paul Bakker33b43f12013-08-20 11:48:36 +0200726 if( ret == 0 )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100727 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200728 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 );
729 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 );
730 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100731 }
732
Paul Bakkerbd51b262014-07-10 15:26:12 +0200733exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200734 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
735 mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100736}
Paul Bakker33b43f12013-08-20 11:48:36 +0200737/* END_CASE */
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100738
Paul Bakker33b43f12013-08-20 11:48:36 +0200739/* BEGIN_CASE */
Azim Khan5fcca462018-06-29 11:05:32 +0100740void mbedtls_ecp_tls_read_point( int id, data_t * buf, char * x, char * y,
Azim Khand30ca132017-06-09 04:32:58 +0100741 char * z, int ret )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100742{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200743 mbedtls_ecp_group grp;
744 mbedtls_ecp_point P;
745 mbedtls_mpi X, Y, Z;
Azim Khand30ca132017-06-09 04:32:58 +0100746 const unsigned char *vbuf = buf->x;
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100747
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100748
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200749 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
750 mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100751
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200752 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100753
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200754 TEST_ASSERT( mbedtls_mpi_read_string( &X, 16, x ) == 0 );
755 TEST_ASSERT( mbedtls_mpi_read_string( &Y, 16, y ) == 0 );
756 TEST_ASSERT( mbedtls_mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100757
Azim Khand30ca132017-06-09 04:32:58 +0100758 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &P, &vbuf, buf->len ) == ret );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100759
Paul Bakker33b43f12013-08-20 11:48:36 +0200760 if( ret == 0 )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100761 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200762 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 );
763 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 );
764 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 );
Azim Khand30ca132017-06-09 04:32:58 +0100765 TEST_ASSERT( (uint32_t)( vbuf - buf->x ) == buf->len );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100766 }
767
Paul Bakkerbd51b262014-07-10 15:26:12 +0200768exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200769 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
770 mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100771}
Paul Bakker33b43f12013-08-20 11:48:36 +0200772/* END_CASE */
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100773
Paul Bakker33b43f12013-08-20 11:48:36 +0200774/* BEGIN_CASE */
775void ecp_tls_write_read_point( int id )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100776{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200777 mbedtls_ecp_group grp;
778 mbedtls_ecp_point pt;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100779 unsigned char buf[256];
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100780 const unsigned char *vbuf;
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100781 size_t olen;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100782
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200783 mbedtls_ecp_group_init( &grp );
784 mbedtls_ecp_point_init( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100785
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200786 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100787
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100788 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200789 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G,
790 MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
791 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen )
792 == MBEDTLS_ERR_ECP_FEATURE_UNAVAILABLE );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100793 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100794
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100795 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200796 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G,
797 MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
798 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
799 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.X, &pt.X ) == 0 );
800 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Y, &pt.Y ) == 0 );
801 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Z, &pt.Z ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100802 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100803
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100804 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200805 TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 );
806 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt,
807 MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
808 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
809 TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100810 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100811
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100812 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200813 TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 );
814 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt,
815 MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
816 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
817 TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100818 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100819
Paul Bakkerbd51b262014-07-10 15:26:12 +0200820exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200821 mbedtls_ecp_group_free( &grp );
822 mbedtls_ecp_point_free( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100823}
Paul Bakker33b43f12013-08-20 11:48:36 +0200824/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100825
Paul Bakker33b43f12013-08-20 11:48:36 +0200826/* BEGIN_CASE */
Azim Khan5fcca462018-06-29 11:05:32 +0100827void mbedtls_ecp_tls_read_group( data_t * buf, int result, int bits,
Azim Khand30ca132017-06-09 04:32:58 +0100828 int record_len )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100829{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200830 mbedtls_ecp_group grp;
Azim Khand30ca132017-06-09 04:32:58 +0100831 const unsigned char *vbuf = buf->x;
Azim Khanf1aaec92017-05-30 14:23:15 +0100832 int ret;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100833
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200834 mbedtls_ecp_group_init( &grp );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100835
Azim Khand30ca132017-06-09 04:32:58 +0100836 ret = mbedtls_ecp_tls_read_group( &grp, &vbuf, buf->len );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100837
Paul Bakker33b43f12013-08-20 11:48:36 +0200838 TEST_ASSERT( ret == result );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100839 if( ret == 0)
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100840 {
Manuel Pégourié-Gonnardc0696c22015-06-18 16:47:17 +0200841 TEST_ASSERT( mbedtls_mpi_bitlen( &grp.P ) == (size_t) bits );
Azim Khand30ca132017-06-09 04:32:58 +0100842 TEST_ASSERT( vbuf - buf->x == record_len);
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100843 }
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100844
Paul Bakkerbd51b262014-07-10 15:26:12 +0200845exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200846 mbedtls_ecp_group_free( &grp );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100847}
Paul Bakker33b43f12013-08-20 11:48:36 +0200848/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100849
Paul Bakker33b43f12013-08-20 11:48:36 +0200850/* BEGIN_CASE */
851void ecp_tls_write_read_group( int id )
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100852{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200853 mbedtls_ecp_group grp1, grp2;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100854 unsigned char buf[10];
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100855 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100856 size_t len;
857 int ret;
858
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200859 mbedtls_ecp_group_init( &grp1 );
860 mbedtls_ecp_group_init( &grp2 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100861 memset( buf, 0x00, sizeof( buf ) );
862
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200863 TEST_ASSERT( mbedtls_ecp_group_load( &grp1, id ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100864
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200865 TEST_ASSERT( mbedtls_ecp_tls_write_group( &grp1, &len, buf, 10 ) == 0 );
866 ret = mbedtls_ecp_tls_read_group( &grp2, &vbuf, len );
Paul Bakker94b916c2014-04-17 16:07:20 +0200867 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100868
869 if( ret == 0 )
870 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200871 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp1.N, &grp2.N ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100872 TEST_ASSERT( grp1.id == grp2.id );
873 }
874
Paul Bakkerbd51b262014-07-10 15:26:12 +0200875exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200876 mbedtls_ecp_group_free( &grp1 );
877 mbedtls_ecp_group_free( &grp2 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100878}
Paul Bakker33b43f12013-08-20 11:48:36 +0200879/* END_CASE */
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100880
Paul Bakker33b43f12013-08-20 11:48:36 +0200881/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100882void mbedtls_ecp_check_privkey( int id, char * key_hex, int ret )
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200883{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200884 mbedtls_ecp_group grp;
885 mbedtls_mpi d;
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200886
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200887 mbedtls_ecp_group_init( &grp );
888 mbedtls_mpi_init( &d );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200889
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200890 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200891 TEST_ASSERT( mbedtls_mpi_read_string( &d, 16, key_hex ) == 0 );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200892
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200893 TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == ret );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200894
Paul Bakkerbd51b262014-07-10 15:26:12 +0200895exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200896 mbedtls_ecp_group_free( &grp );
897 mbedtls_mpi_free( &d );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200898}
Paul Bakker33b43f12013-08-20 11:48:36 +0200899/* END_CASE */
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200900
Paul Bakker33b43f12013-08-20 11:48:36 +0200901/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100902void mbedtls_ecp_check_pub_priv( int id_pub, char * Qx_pub, char * Qy_pub,
903 int id, char * d, char * Qx, char * Qy,
904 int ret )
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100905{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200906 mbedtls_ecp_keypair pub, prv;
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100907
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200908 mbedtls_ecp_keypair_init( &pub );
909 mbedtls_ecp_keypair_init( &prv );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100910
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200911 if( id_pub != MBEDTLS_ECP_DP_NONE )
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200912 TEST_ASSERT( mbedtls_ecp_group_load( &pub.grp, id_pub ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200913 TEST_ASSERT( mbedtls_ecp_point_read_string( &pub.Q, 16, Qx_pub, Qy_pub ) == 0 );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100914
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200915 if( id != MBEDTLS_ECP_DP_NONE )
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200916 TEST_ASSERT( mbedtls_ecp_group_load( &prv.grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200917 TEST_ASSERT( mbedtls_ecp_point_read_string( &prv.Q, 16, Qx, Qy ) == 0 );
918 TEST_ASSERT( mbedtls_mpi_read_string( &prv.d, 16, d ) == 0 );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100919
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200920 TEST_ASSERT( mbedtls_ecp_check_pub_priv( &pub, &prv ) == ret );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100921
922exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200923 mbedtls_ecp_keypair_free( &pub );
924 mbedtls_ecp_keypair_free( &prv );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100925}
926/* END_CASE */
927
928/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200929void mbedtls_ecp_gen_keypair( int id )
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100930{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200931 mbedtls_ecp_group grp;
932 mbedtls_ecp_point Q;
933 mbedtls_mpi d;
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100934 rnd_pseudo_info rnd_info;
935
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200936 mbedtls_ecp_group_init( &grp );
937 mbedtls_ecp_point_init( &Q );
938 mbedtls_mpi_init( &d );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100939 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
940
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200941 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100942
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200943 TEST_ASSERT( mbedtls_ecp_gen_keypair( &grp, &d, &Q, &rnd_pseudo_rand, &rnd_info )
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100944 == 0 );
945
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200946 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &Q ) == 0 );
947 TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100948
Paul Bakkerbd51b262014-07-10 15:26:12 +0200949exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200950 mbedtls_ecp_group_free( &grp );
951 mbedtls_ecp_point_free( &Q );
952 mbedtls_mpi_free( &d );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100953}
Paul Bakker33b43f12013-08-20 11:48:36 +0200954/* END_CASE */
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100955
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100956/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200957void mbedtls_ecp_gen_key( int id )
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100958{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200959 mbedtls_ecp_keypair key;
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100960 rnd_pseudo_info rnd_info;
961
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200962 mbedtls_ecp_keypair_init( &key );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100963 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
964
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200965 TEST_ASSERT( mbedtls_ecp_gen_key( id, &key, &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100966
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200967 TEST_ASSERT( mbedtls_ecp_check_pubkey( &key.grp, &key.Q ) == 0 );
968 TEST_ASSERT( mbedtls_ecp_check_privkey( &key.grp, &key.d ) == 0 );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100969
Paul Bakkerbd51b262014-07-10 15:26:12 +0200970exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200971 mbedtls_ecp_keypair_free( &key );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100972}
973/* END_CASE */
974
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200975/* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST */
Azim Khanf1aaec92017-05-30 14:23:15 +0100976void ecp_selftest( )
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100977{
Andres AG93012e82016-09-09 09:10:28 +0100978 TEST_ASSERT( mbedtls_ecp_self_test( 1 ) == 0 );
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100979}
Paul Bakker33b43f12013-08-20 11:48:36 +0200980/* END_CASE */