blob: 5c31c86b79fe4da091472d3506240c14a39bf1d9 [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/ecp.h"
Paul Bakkerdbd443d2013-08-16 13:38:47 +02003
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02004#define ECP_PF_UNKNOWN -1
Paul Bakker33b43f12013-08-20 11:48:36 +02005/* END_HEADER */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +01006
Paul Bakker33b43f12013-08-20 11:48:36 +02007/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02008 * depends_on:MBEDTLS_ECP_C
Paul Bakker33b43f12013-08-20 11:48:36 +02009 * END_DEPENDENCIES
10 */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010011
Paul Bakker33b43f12013-08-20 11:48:36 +020012/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020013void mbedtls_ecp_curve_info( int id, int tls_id, int size, char *name )
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010014{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020015 const mbedtls_ecp_curve_info *by_id, *by_tls, *by_name;
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010016
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020017 by_id = mbedtls_ecp_curve_info_from_grp_id( id );
18 by_tls = mbedtls_ecp_curve_info_from_tls_id( tls_id );
19 by_name = mbedtls_ecp_curve_info_from_name( name );
Paul Bakker94b916c2014-04-17 16:07:20 +020020 TEST_ASSERT( by_id != NULL );
21 TEST_ASSERT( by_tls != NULL );
22 TEST_ASSERT( by_name != NULL );
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010023
24 TEST_ASSERT( by_id == by_tls );
25 TEST_ASSERT( by_id == by_name );
26
27 TEST_ASSERT( by_id->size == size );
28}
29/* END_CASE */
30
31/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +020032void ecp_small_add( int a_zero, char *x_a, char *y_a, int b_zero, char *x_b,
33 char *y_b, int c_zero, int x_c, int y_c )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010034{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020035 mbedtls_ecp_group grp;
36 mbedtls_ecp_point A, B, C;
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010037
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020038 mbedtls_ecp_group_init( &grp );
39 mbedtls_ecp_point_init( &A ); mbedtls_ecp_point_init( &B ); mbedtls_ecp_point_init( &C );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010040
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020041 TEST_ASSERT( mbedtls_ecp_group_read_string( &grp, 10,
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010042 "47", "4", "17", "42", "13" ) == 0 );
43
Paul Bakker33b43f12013-08-20 11:48:36 +020044 if( a_zero )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020045 mbedtls_ecp_set_zero( &A );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010046 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020047 TEST_ASSERT( mbedtls_ecp_point_read_string( &A, 10, x_a, y_a ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010048
Paul Bakker33b43f12013-08-20 11:48:36 +020049 if( b_zero )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020050 mbedtls_ecp_set_zero( &B );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010051 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020052 TEST_ASSERT( mbedtls_ecp_point_read_string( &B, 10, x_b, y_b ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010053
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020054 TEST_ASSERT( mbedtls_ecp_add( &grp, &C, &A, &B ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010055
Paul Bakker33b43f12013-08-20 11:48:36 +020056 if( c_zero )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020057 TEST_ASSERT( mbedtls_mpi_cmp_int( &C.Z, 0 ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010058 else
59 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020060 TEST_ASSERT( mbedtls_mpi_cmp_int( &C.X, x_c ) == 0 );
61 TEST_ASSERT( mbedtls_mpi_cmp_int( &C.Y, y_c ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010062 }
63
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020064 TEST_ASSERT( mbedtls_ecp_add( &grp, &C, &B, &A ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010065
Paul Bakker33b43f12013-08-20 11:48:36 +020066 if( c_zero )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020067 TEST_ASSERT( mbedtls_mpi_cmp_int( &C.Z, 0 ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010068 else
69 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020070 TEST_ASSERT( mbedtls_mpi_cmp_int( &C.X, x_c ) == 0 );
71 TEST_ASSERT( mbedtls_mpi_cmp_int( &C.Y, y_c ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010072 }
73
Paul Bakkerbd51b262014-07-10 15:26:12 +020074exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020075 mbedtls_ecp_group_free( &grp );
76 mbedtls_ecp_point_free( &A ); mbedtls_ecp_point_free( &B ); mbedtls_ecp_point_free( &C );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010077}
Paul Bakker33b43f12013-08-20 11:48:36 +020078/* END_CASE */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010079
Paul Bakker33b43f12013-08-20 11:48:36 +020080/* BEGIN_CASE */
81void ecp_small_sub( int a_zero, char *x_a, char *y_a, int b_zero, char *x_b,
82 char *y_b, int c_zero, int x_c, int y_c )
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +010083{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020084 mbedtls_ecp_group grp;
85 mbedtls_ecp_point A, B, C;
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +010086
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020087 mbedtls_ecp_group_init( &grp );
88 mbedtls_ecp_point_init( &A ); mbedtls_ecp_point_init( &B ); mbedtls_ecp_point_init( &C );
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +010089
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020090 TEST_ASSERT( mbedtls_ecp_group_read_string( &grp, 10,
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +010091 "47", "4", "17", "42", "13" ) == 0 );
92
Paul Bakker33b43f12013-08-20 11:48:36 +020093 if( a_zero )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020094 mbedtls_ecp_set_zero( &A );
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +010095 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020096 TEST_ASSERT( mbedtls_ecp_point_read_string( &A, 10, x_a, y_a ) == 0 );
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +010097
Paul Bakker33b43f12013-08-20 11:48:36 +020098 if( b_zero )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020099 mbedtls_ecp_set_zero( &B );
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +0100100 else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200101 TEST_ASSERT( mbedtls_ecp_point_read_string( &B, 10, x_b, y_b ) == 0 );
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +0100102
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200103 TEST_ASSERT( mbedtls_ecp_sub( &grp, &C, &A, &B ) == 0 );
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +0100104
Paul Bakker33b43f12013-08-20 11:48:36 +0200105 if( c_zero )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200106 TEST_ASSERT( mbedtls_mpi_cmp_int( &C.Z, 0 ) == 0 );
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +0100107 else
108 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200109 TEST_ASSERT( mbedtls_mpi_cmp_int( &C.X, x_c ) == 0 );
110 TEST_ASSERT( mbedtls_mpi_cmp_int( &C.Y, y_c ) == 0 );
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +0100111 }
112
Paul Bakkerbd51b262014-07-10 15:26:12 +0200113exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200114 mbedtls_ecp_group_free( &grp );
115 mbedtls_ecp_point_free( &A ); mbedtls_ecp_point_free( &B ); mbedtls_ecp_point_free( &C );
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +0100116}
Paul Bakker33b43f12013-08-20 11:48:36 +0200117/* END_CASE */
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +0100118
Paul Bakker33b43f12013-08-20 11:48:36 +0200119/* BEGIN_CASE */
120void ecp_small_mul( int m_str, int r_zero, int x_r, int y_r, int ret )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100121{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200122 mbedtls_ecp_group grp;
123 mbedtls_ecp_point R;
124 mbedtls_mpi m;
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200125 rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100126
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200127 mbedtls_ecp_group_init( &grp );
128 mbedtls_ecp_point_init( &R );
129 mbedtls_mpi_init( &m );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200130 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100131
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200132 TEST_ASSERT( mbedtls_ecp_group_read_string( &grp, 10,
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100133 "47", "4", "17", "42", "13" ) == 0 );
134
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200135 TEST_ASSERT( mbedtls_mpi_lset( &m, m_str ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100136
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200137 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &m, &grp.G, NULL, NULL ) == ret );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200138
Manuel Pégourié-Gonnardff27b7c2013-11-21 09:28:03 +0100139 if( ret == 0 )
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200140 {
Manuel Pégourié-Gonnardff27b7c2013-11-21 09:28:03 +0100141 if( r_zero )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200142 TEST_ASSERT( mbedtls_mpi_cmp_int( &R.Z, 0 ) == 0 );
Manuel Pégourié-Gonnardff27b7c2013-11-21 09:28:03 +0100143 else
144 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200145 TEST_ASSERT( mbedtls_mpi_cmp_int( &R.X, x_r ) == 0 );
146 TEST_ASSERT( mbedtls_mpi_cmp_int( &R.Y, y_r ) == 0 );
Manuel Pégourié-Gonnardff27b7c2013-11-21 09:28:03 +0100147 }
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200148 }
149
150 /* try again with randomization */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200151 mbedtls_ecp_point_free( &R );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200152
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200153 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &m, &grp.G,
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200154 &rnd_pseudo_rand, &rnd_info ) == ret );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100155
Manuel Pégourié-Gonnardff27b7c2013-11-21 09:28:03 +0100156 if( ret == 0 )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100157 {
Manuel Pégourié-Gonnardff27b7c2013-11-21 09:28:03 +0100158 if( r_zero )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200159 TEST_ASSERT( mbedtls_mpi_cmp_int( &R.Z, 0 ) == 0 );
Manuel Pégourié-Gonnardff27b7c2013-11-21 09:28:03 +0100160 else
161 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200162 TEST_ASSERT( mbedtls_mpi_cmp_int( &R.X, x_r ) == 0 );
163 TEST_ASSERT( mbedtls_mpi_cmp_int( &R.Y, y_r ) == 0 );
Manuel Pégourié-Gonnardff27b7c2013-11-21 09:28:03 +0100164 }
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100165 }
166
Paul Bakkerbd51b262014-07-10 15:26:12 +0200167exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200168 mbedtls_ecp_group_free( &grp );
169 mbedtls_ecp_point_free( &R );
170 mbedtls_mpi_free( &m );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100171}
Paul Bakker33b43f12013-08-20 11:48:36 +0200172/* END_CASE */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100173
Paul Bakker33b43f12013-08-20 11:48:36 +0200174/* BEGIN_CASE */
175void ecp_small_check_pub( int x, int y, int z, int ret )
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100176{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200177 mbedtls_ecp_group grp;
178 mbedtls_ecp_point P;
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100179
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200180 mbedtls_ecp_group_init( &grp );
181 mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100182
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200183 TEST_ASSERT( mbedtls_ecp_group_read_string( &grp, 10,
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100184 "47", "4", "17", "42", "13" ) == 0 );
185
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200186 TEST_ASSERT( mbedtls_mpi_lset( &P.X, x ) == 0 );
187 TEST_ASSERT( mbedtls_mpi_lset( &P.Y, y ) == 0 );
188 TEST_ASSERT( mbedtls_mpi_lset( &P.Z, z ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100189
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200190 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &P ) == ret );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100191
Paul Bakkerbd51b262014-07-10 15:26:12 +0200192exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200193 mbedtls_ecp_group_free( &grp );
194 mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100195}
Paul Bakker33b43f12013-08-20 11:48:36 +0200196/* END_CASE */
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100197
Paul Bakker33b43f12013-08-20 11:48:36 +0200198/* BEGIN_CASE */
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100199void ecp_check_pub_mx( int grp_id, char *key_hex, int ret )
200{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200201 mbedtls_ecp_group grp;
202 mbedtls_ecp_point P;
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100203
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200204 mbedtls_ecp_group_init( &grp );
205 mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100206
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200207 TEST_ASSERT( mbedtls_ecp_use_known_dp( &grp, grp_id ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100208
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200209 TEST_ASSERT( mbedtls_mpi_read_string( &P.X, 16, key_hex ) == 0 );
210 TEST_ASSERT( mbedtls_mpi_lset( &P.Z, 1 ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100211
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200212 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &P ) == ret );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100213
Paul Bakkerbd51b262014-07-10 15:26:12 +0200214exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200215 mbedtls_ecp_group_free( &grp );
216 mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100217}
218/* END_CASE */
219
220/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +0200221void ecp_test_vect( int id, char *dA_str, char *xA_str, char *yA_str,
222 char *dB_str, char *xB_str, char *yB_str, char *xZ_str,
223 char *yZ_str )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100224{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200225 mbedtls_ecp_group grp;
226 mbedtls_ecp_point R;
227 mbedtls_mpi dA, xA, yA, dB, xB, yB, xZ, yZ;
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200228 rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100229
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200230 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
231 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); mbedtls_mpi_init( &yA ); mbedtls_mpi_init( &dB );
232 mbedtls_mpi_init( &xB ); mbedtls_mpi_init( &yB ); mbedtls_mpi_init( &xZ ); mbedtls_mpi_init( &yZ );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200233 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100234
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200235 TEST_ASSERT( mbedtls_ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100236
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200237 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100238
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200239 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_str ) == 0 );
240 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_str ) == 0 );
241 TEST_ASSERT( mbedtls_mpi_read_string( &yA, 16, yA_str ) == 0 );
242 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_str ) == 0 );
243 TEST_ASSERT( mbedtls_mpi_read_string( &xB, 16, xB_str ) == 0 );
244 TEST_ASSERT( mbedtls_mpi_read_string( &yB, 16, yB_str ) == 0 );
245 TEST_ASSERT( mbedtls_mpi_read_string( &xZ, 16, xZ_str ) == 0 );
246 TEST_ASSERT( mbedtls_mpi_read_string( &yZ, 16, yZ_str ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100247
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200248 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G,
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200249 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200250 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
251 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yA ) == 0 );
252 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
253 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R, NULL, NULL ) == 0 );
254 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
255 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
256 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100257
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200258 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
259 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 );
260 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yB ) == 0 );
261 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
262 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R,
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200263 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200264 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
265 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
266 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100267
Paul Bakkerbd51b262014-07-10 15:26:12 +0200268exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200269 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
270 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); mbedtls_mpi_free( &yA ); mbedtls_mpi_free( &dB );
271 mbedtls_mpi_free( &xB ); mbedtls_mpi_free( &yB ); mbedtls_mpi_free( &xZ ); mbedtls_mpi_free( &yZ );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100272}
Paul Bakker33b43f12013-08-20 11:48:36 +0200273/* END_CASE */
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100274
Paul Bakker33b43f12013-08-20 11:48:36 +0200275/* BEGIN_CASE */
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100276void ecp_test_vec_x( int id, char *dA_hex, char *xA_hex,
277 char *dB_hex, char *xB_hex, char *xS_hex )
278{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200279 mbedtls_ecp_group grp;
280 mbedtls_ecp_point R;
281 mbedtls_mpi dA, xA, dB, xB, xS;
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100282 rnd_pseudo_info rnd_info;
283
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200284 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
285 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA );
286 mbedtls_mpi_init( &dB ); mbedtls_mpi_init( &xB );
287 mbedtls_mpi_init( &xS );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100288 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
289
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200290 TEST_ASSERT( mbedtls_ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100291
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200292 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100293
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200294 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_hex ) == 0 );
295 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_hex ) == 0 );
296 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_hex ) == 0 );
297 TEST_ASSERT( mbedtls_mpi_read_string( &xB, 16, xB_hex ) == 0 );
298 TEST_ASSERT( mbedtls_mpi_read_string( &xS, 16, xS_hex ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100299
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200300 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G,
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100301 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200302 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
303 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100304
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200305 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R,
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100306 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200307 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
308 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100309
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200310 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
311 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
312 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100313
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200314 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R, NULL, NULL ) == 0 );
315 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
316 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100317
Paul Bakkerbd51b262014-07-10 15:26:12 +0200318exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200319 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
320 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA );
321 mbedtls_mpi_free( &dB ); mbedtls_mpi_free( &xB );
322 mbedtls_mpi_free( &xS );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100323}
324/* END_CASE */
325
326/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +0200327void ecp_fast_mod( int id, char *N_str )
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100328{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200329 mbedtls_ecp_group grp;
330 mbedtls_mpi N, R;
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100331
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200332 mbedtls_mpi_init( &N ); mbedtls_mpi_init( &R );
333 mbedtls_ecp_group_init( &grp );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100334
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200335 TEST_ASSERT( mbedtls_mpi_read_string( &N, 16, N_str ) == 0 );
336 TEST_ASSERT( mbedtls_ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde783f062013-10-21 14:52:21 +0200337 TEST_ASSERT( grp.modp != NULL );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100338
339 /*
340 * Store correct result before we touch N
341 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200342 TEST_ASSERT( mbedtls_mpi_mod_mpi( &R, &N, &grp.P ) == 0 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100343
344 TEST_ASSERT( grp.modp( &N ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200345 TEST_ASSERT( mbedtls_mpi_msb( &N ) <= grp.pbits + 3 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100346
347 /*
Paul Bakkerd8b0c5e2014-04-11 15:31:33 +0200348 * Use mod rather than addition/subtraction in case previous test fails
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100349 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200350 TEST_ASSERT( mbedtls_mpi_mod_mpi( &N, &N, &grp.P ) == 0 );
351 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &N, &R ) == 0 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100352
Paul Bakkerbd51b262014-07-10 15:26:12 +0200353exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200354 mbedtls_mpi_free( &N ); mbedtls_mpi_free( &R );
355 mbedtls_ecp_group_free( &grp );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100356}
Paul Bakker33b43f12013-08-20 11:48:36 +0200357/* END_CASE */
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100358
Paul Bakker33b43f12013-08-20 11:48:36 +0200359/* BEGIN_CASE */
360void ecp_write_binary( int id, char *x, char *y, char *z, int format,
361 char *out, int blen, int ret )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100362{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200363 mbedtls_ecp_group grp;
364 mbedtls_ecp_point P;
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100365 unsigned char buf[256], str[512];
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100366 size_t olen;
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100367
368 memset( buf, 0, sizeof( buf ) );
369 memset( str, 0, sizeof( str ) );
370
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200371 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100372
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200373 TEST_ASSERT( mbedtls_ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100374
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200375 TEST_ASSERT( mbedtls_mpi_read_string( &P.X, 16, x ) == 0 );
376 TEST_ASSERT( mbedtls_mpi_read_string( &P.Y, 16, y ) == 0 );
377 TEST_ASSERT( mbedtls_mpi_read_string( &P.Z, 16, z ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100378
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200379 TEST_ASSERT( mbedtls_ecp_point_write_binary( &grp, &P, format,
Paul Bakker33b43f12013-08-20 11:48:36 +0200380 &olen, buf, blen ) == ret );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100381
Paul Bakker33b43f12013-08-20 11:48:36 +0200382 if( ret == 0 )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100383 {
Manuel Pégourié-Gonnard37d218a2012-11-24 15:19:55 +0100384 hexify( str, buf, olen );
Paul Bakker33b43f12013-08-20 11:48:36 +0200385 TEST_ASSERT( strcasecmp( (char *) str, out ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100386 }
387
Paul Bakkerbd51b262014-07-10 15:26:12 +0200388exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200389 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100390}
Paul Bakker33b43f12013-08-20 11:48:36 +0200391/* END_CASE */
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100392
Paul Bakker33b43f12013-08-20 11:48:36 +0200393/* BEGIN_CASE */
394void ecp_read_binary( int id, char *input, char *x, char *y, char *z,
395 int ret )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100396{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200397 mbedtls_ecp_group grp;
398 mbedtls_ecp_point P;
399 mbedtls_mpi X, Y, Z;
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100400 int ilen;
401 unsigned char buf[256];
402
403 memset( buf, 0, sizeof( buf ) );
404
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200405 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
406 mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100407
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200408 TEST_ASSERT( mbedtls_ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100409
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200410 TEST_ASSERT( mbedtls_mpi_read_string( &X, 16, x ) == 0 );
411 TEST_ASSERT( mbedtls_mpi_read_string( &Y, 16, y ) == 0 );
412 TEST_ASSERT( mbedtls_mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100413
Paul Bakker33b43f12013-08-20 11:48:36 +0200414 ilen = unhexify( buf, input );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100415
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200416 TEST_ASSERT( mbedtls_ecp_point_read_binary( &grp, &P, buf, ilen ) == ret );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100417
Paul Bakker33b43f12013-08-20 11:48:36 +0200418 if( ret == 0 )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100419 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200420 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 );
421 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 );
422 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100423 }
424
Paul Bakkerbd51b262014-07-10 15:26:12 +0200425exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200426 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
427 mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100428}
Paul Bakker33b43f12013-08-20 11:48:36 +0200429/* END_CASE */
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100430
Paul Bakker33b43f12013-08-20 11:48:36 +0200431/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200432void mbedtls_ecp_tls_read_point( int id, char *input, char *x, char *y, char *z,
Paul Bakker33b43f12013-08-20 11:48:36 +0200433 int ret )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100434{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200435 mbedtls_ecp_group grp;
436 mbedtls_ecp_point P;
437 mbedtls_mpi X, Y, Z;
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100438 size_t ilen;
439 unsigned char buf[256];
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100440 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100441
442 memset( buf, 0, sizeof( buf ) );
443
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200444 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
445 mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100446
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200447 TEST_ASSERT( mbedtls_ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100448
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200449 TEST_ASSERT( mbedtls_mpi_read_string( &X, 16, x ) == 0 );
450 TEST_ASSERT( mbedtls_mpi_read_string( &Y, 16, y ) == 0 );
451 TEST_ASSERT( mbedtls_mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100452
Paul Bakker33b43f12013-08-20 11:48:36 +0200453 ilen = unhexify( buf, input );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100454
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200455 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &P, &vbuf, ilen ) == ret );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100456
Paul Bakker33b43f12013-08-20 11:48:36 +0200457 if( ret == 0 )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100458 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200459 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 );
460 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 );
461 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100462 TEST_ASSERT( *vbuf == 0x00 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100463 }
464
Paul Bakkerbd51b262014-07-10 15:26:12 +0200465exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200466 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
467 mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100468}
Paul Bakker33b43f12013-08-20 11:48:36 +0200469/* END_CASE */
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100470
Paul Bakker33b43f12013-08-20 11:48:36 +0200471/* BEGIN_CASE */
472void ecp_tls_write_read_point( int id )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100473{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200474 mbedtls_ecp_group grp;
475 mbedtls_ecp_point pt;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100476 unsigned char buf[256];
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100477 const unsigned char *vbuf;
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100478 size_t olen;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100479
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200480 mbedtls_ecp_group_init( &grp );
481 mbedtls_ecp_point_init( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100482
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200483 TEST_ASSERT( mbedtls_ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100484
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100485 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200486 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G,
487 MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
488 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen )
489 == MBEDTLS_ERR_ECP_FEATURE_UNAVAILABLE );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100490 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100491
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100492 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200493 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G,
494 MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
495 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
496 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.X, &pt.X ) == 0 );
497 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Y, &pt.Y ) == 0 );
498 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Z, &pt.Z ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100499 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100500
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100501 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200502 TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 );
503 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt,
504 MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
505 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
506 TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100507 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100508
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100509 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200510 TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 );
511 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt,
512 MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
513 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
514 TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100515 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100516
Paul Bakkerbd51b262014-07-10 15:26:12 +0200517exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200518 mbedtls_ecp_group_free( &grp );
519 mbedtls_ecp_point_free( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100520}
Paul Bakker33b43f12013-08-20 11:48:36 +0200521/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100522
Paul Bakker33b43f12013-08-20 11:48:36 +0200523/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200524void mbedtls_ecp_tls_read_group( char *record, int result, int bits )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100525{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200526 mbedtls_ecp_group grp;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100527 unsigned char buf[10];
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100528 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100529 int len, ret;
530
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200531 mbedtls_ecp_group_init( &grp );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100532 memset( buf, 0x00, sizeof( buf ) );
533
Paul Bakker33b43f12013-08-20 11:48:36 +0200534 len = unhexify( buf, record );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100535
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200536 ret = mbedtls_ecp_tls_read_group( &grp, &vbuf, len );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100537
Paul Bakker33b43f12013-08-20 11:48:36 +0200538 TEST_ASSERT( ret == result );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100539 if( ret == 0)
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100540 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200541 TEST_ASSERT( mbedtls_mpi_msb( &grp.P ) == (size_t) bits );
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100542 TEST_ASSERT( *vbuf == 0x00 );
543 }
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100544
Paul Bakkerbd51b262014-07-10 15:26:12 +0200545exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200546 mbedtls_ecp_group_free( &grp );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100547}
Paul Bakker33b43f12013-08-20 11:48:36 +0200548/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100549
Paul Bakker33b43f12013-08-20 11:48:36 +0200550/* BEGIN_CASE */
551void ecp_tls_write_read_group( int id )
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100552{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200553 mbedtls_ecp_group grp1, grp2;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100554 unsigned char buf[10];
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100555 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100556 size_t len;
557 int ret;
558
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200559 mbedtls_ecp_group_init( &grp1 );
560 mbedtls_ecp_group_init( &grp2 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100561 memset( buf, 0x00, sizeof( buf ) );
562
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200563 TEST_ASSERT( mbedtls_ecp_use_known_dp( &grp1, id ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100564
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200565 TEST_ASSERT( mbedtls_ecp_tls_write_group( &grp1, &len, buf, 10 ) == 0 );
566 ret = mbedtls_ecp_tls_read_group( &grp2, &vbuf, len );
Paul Bakker94b916c2014-04-17 16:07:20 +0200567 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100568
569 if( ret == 0 )
570 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200571 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp1.N, &grp2.N ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100572 TEST_ASSERT( grp1.id == grp2.id );
573 }
574
Paul Bakkerbd51b262014-07-10 15:26:12 +0200575exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200576 mbedtls_ecp_group_free( &grp1 );
577 mbedtls_ecp_group_free( &grp2 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100578}
Paul Bakker33b43f12013-08-20 11:48:36 +0200579/* END_CASE */
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100580
Paul Bakker33b43f12013-08-20 11:48:36 +0200581/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200582void mbedtls_ecp_check_privkey( int id, char *key_hex, int ret )
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200583{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200584 mbedtls_ecp_group grp;
585 mbedtls_mpi d;
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200586
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200587 mbedtls_ecp_group_init( &grp );
588 mbedtls_mpi_init( &d );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200589
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200590 TEST_ASSERT( mbedtls_ecp_use_known_dp( &grp, id ) == 0 );
591 TEST_ASSERT( mbedtls_mpi_read_string( &d, 16, key_hex ) == 0 );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200592
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200593 TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == ret );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200594
Paul Bakkerbd51b262014-07-10 15:26:12 +0200595exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200596 mbedtls_ecp_group_free( &grp );
597 mbedtls_mpi_free( &d );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200598}
Paul Bakker33b43f12013-08-20 11:48:36 +0200599/* END_CASE */
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200600
Paul Bakker33b43f12013-08-20 11:48:36 +0200601/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200602void mbedtls_ecp_check_pub_priv( int id_pub, char *Qx_pub, char *Qy_pub,
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100603 int id, char *d, char *Qx, char *Qy, int ret )
604{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200605 mbedtls_ecp_keypair pub, prv;
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100606
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200607 mbedtls_ecp_keypair_init( &pub );
608 mbedtls_ecp_keypair_init( &prv );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100609
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200610 if( id_pub != MBEDTLS_ECP_DP_NONE )
611 TEST_ASSERT( mbedtls_ecp_use_known_dp( &pub.grp, id_pub ) == 0 );
612 TEST_ASSERT( mbedtls_ecp_point_read_string( &pub.Q, 16, Qx_pub, Qy_pub ) == 0 );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100613
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200614 if( id != MBEDTLS_ECP_DP_NONE )
615 TEST_ASSERT( mbedtls_ecp_use_known_dp( &prv.grp, id ) == 0 );
616 TEST_ASSERT( mbedtls_ecp_point_read_string( &prv.Q, 16, Qx, Qy ) == 0 );
617 TEST_ASSERT( mbedtls_mpi_read_string( &prv.d, 16, d ) == 0 );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100618
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200619 TEST_ASSERT( mbedtls_ecp_check_pub_priv( &pub, &prv ) == ret );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100620
621exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200622 mbedtls_ecp_keypair_free( &pub );
623 mbedtls_ecp_keypair_free( &prv );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100624}
625/* END_CASE */
626
627/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200628void mbedtls_ecp_gen_keypair( int id )
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100629{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200630 mbedtls_ecp_group grp;
631 mbedtls_ecp_point Q;
632 mbedtls_mpi d;
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100633 rnd_pseudo_info rnd_info;
634
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200635 mbedtls_ecp_group_init( &grp );
636 mbedtls_ecp_point_init( &Q );
637 mbedtls_mpi_init( &d );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100638 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
639
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200640 TEST_ASSERT( mbedtls_ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100641
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200642 TEST_ASSERT( mbedtls_ecp_gen_keypair( &grp, &d, &Q, &rnd_pseudo_rand, &rnd_info )
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100643 == 0 );
644
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200645 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &Q ) == 0 );
646 TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100647
Paul Bakkerbd51b262014-07-10 15:26:12 +0200648exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200649 mbedtls_ecp_group_free( &grp );
650 mbedtls_ecp_point_free( &Q );
651 mbedtls_mpi_free( &d );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100652}
Paul Bakker33b43f12013-08-20 11:48:36 +0200653/* END_CASE */
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100654
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100655/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200656void mbedtls_ecp_gen_key( int id )
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100657{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200658 mbedtls_ecp_keypair key;
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100659 rnd_pseudo_info rnd_info;
660
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200661 mbedtls_ecp_keypair_init( &key );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100662 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
663
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200664 TEST_ASSERT( mbedtls_ecp_gen_key( id, &key, &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100665
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200666 TEST_ASSERT( mbedtls_ecp_check_pubkey( &key.grp, &key.Q ) == 0 );
667 TEST_ASSERT( mbedtls_ecp_check_privkey( &key.grp, &key.d ) == 0 );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100668
Paul Bakkerbd51b262014-07-10 15:26:12 +0200669exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200670 mbedtls_ecp_keypair_free( &key );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100671}
672/* END_CASE */
673
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200674/* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST */
Paul Bakker33b43f12013-08-20 11:48:36 +0200675void ecp_selftest()
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100676{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200677 TEST_ASSERT( mbedtls_ecp_self_test( 0 ) == 0 );
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100678}
Paul Bakker33b43f12013-08-20 11:48:36 +0200679/* END_CASE */