Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 1 | /* BEGIN_HEADER */ |
Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 2 | #include "mbedtls/ecdh.h" |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 3 | /* END_HEADER */ |
Manuel Pégourié-Gonnard | 61ce13b | 2013-01-26 16:20:32 +0100 | [diff] [blame] | 4 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 5 | /* BEGIN_DEPENDENCIES |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 6 | * depends_on:MBEDTLS_ECDH_C |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 7 | * END_DEPENDENCIES |
| 8 | */ |
Manuel Pégourié-Gonnard | 61ce13b | 2013-01-26 16:20:32 +0100 | [diff] [blame] | 9 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 10 | /* BEGIN_CASE */ |
| 11 | void ecdh_primitive_random( int id ) |
Manuel Pégourié-Gonnard | 61ce13b | 2013-01-26 16:20:32 +0100 | [diff] [blame] | 12 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 13 | mbedtls_ecp_group grp; |
| 14 | mbedtls_ecp_point qA, qB; |
| 15 | mbedtls_mpi dA, dB, zA, zB; |
Manuel Pégourié-Gonnard | 61ce13b | 2013-01-26 16:20:32 +0100 | [diff] [blame] | 16 | rnd_pseudo_info rnd_info; |
| 17 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 18 | mbedtls_ecp_group_init( &grp ); |
| 19 | mbedtls_ecp_point_init( &qA ); mbedtls_ecp_point_init( &qB ); |
| 20 | mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &dB ); |
| 21 | mbedtls_mpi_init( &zA ); mbedtls_mpi_init( &zB ); |
Manuel Pégourié-Gonnard | 61ce13b | 2013-01-26 16:20:32 +0100 | [diff] [blame] | 22 | memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) ); |
| 23 | |
Manuel Pégourié-Gonnard | e3a062b | 2015-05-11 18:46:47 +0200 | [diff] [blame] | 24 | TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 ); |
Manuel Pégourié-Gonnard | 61ce13b | 2013-01-26 16:20:32 +0100 | [diff] [blame] | 25 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 26 | TEST_ASSERT( mbedtls_ecdh_gen_public( &grp, &dA, &qA, &rnd_pseudo_rand, &rnd_info ) |
Manuel Pégourié-Gonnard | 61ce13b | 2013-01-26 16:20:32 +0100 | [diff] [blame] | 27 | == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 28 | TEST_ASSERT( mbedtls_ecdh_gen_public( &grp, &dB, &qB, &rnd_pseudo_rand, &rnd_info ) |
Manuel Pégourié-Gonnard | 61ce13b | 2013-01-26 16:20:32 +0100 | [diff] [blame] | 29 | == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 30 | TEST_ASSERT( mbedtls_ecdh_compute_shared( &grp, &zA, &qB, &dA, |
Manuel Pégourié-Gonnard | e09d2f8 | 2013-09-02 14:29:09 +0200 | [diff] [blame] | 31 | &rnd_pseudo_rand, &rnd_info ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 32 | TEST_ASSERT( mbedtls_ecdh_compute_shared( &grp, &zB, &qA, &dB, |
Manuel Pégourié-Gonnard | e09d2f8 | 2013-09-02 14:29:09 +0200 | [diff] [blame] | 33 | NULL, NULL ) == 0 ); |
Manuel Pégourié-Gonnard | 61ce13b | 2013-01-26 16:20:32 +0100 | [diff] [blame] | 34 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 35 | TEST_ASSERT( mbedtls_mpi_cmp_mpi( &zA, &zB ) == 0 ); |
Manuel Pégourié-Gonnard | 61ce13b | 2013-01-26 16:20:32 +0100 | [diff] [blame] | 36 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 37 | exit: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 38 | mbedtls_ecp_group_free( &grp ); |
| 39 | mbedtls_ecp_point_free( &qA ); mbedtls_ecp_point_free( &qB ); |
| 40 | mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &dB ); |
| 41 | mbedtls_mpi_free( &zA ); mbedtls_mpi_free( &zB ); |
Manuel Pégourié-Gonnard | 61ce13b | 2013-01-26 16:20:32 +0100 | [diff] [blame] | 42 | } |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 43 | /* END_CASE */ |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 44 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 45 | /* BEGIN_CASE */ |
Azim Khan | 5fcca46 | 2018-06-29 11:05:32 +0100 | [diff] [blame] | 46 | void ecdh_primitive_testvec( int id, data_t * rnd_buf_A, char * xA_str, |
| 47 | char * yA_str, data_t * rnd_buf_B, |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 48 | char * xB_str, char * yB_str, char * z_str ) |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 49 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 50 | mbedtls_ecp_group grp; |
| 51 | mbedtls_ecp_point qA, qB; |
| 52 | mbedtls_mpi dA, dB, zA, zB, check; |
Manuel Pégourié-Gonnard | 544416a | 2014-01-23 16:55:18 +0100 | [diff] [blame] | 53 | rnd_buf_info rnd_info_A, rnd_info_B; |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 54 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 55 | mbedtls_ecp_group_init( &grp ); |
| 56 | mbedtls_ecp_point_init( &qA ); mbedtls_ecp_point_init( &qB ); |
| 57 | mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &dB ); |
| 58 | mbedtls_mpi_init( &zA ); mbedtls_mpi_init( &zB ); mbedtls_mpi_init( &check ); |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 59 | |
Manuel Pégourié-Gonnard | e3a062b | 2015-05-11 18:46:47 +0200 | [diff] [blame] | 60 | TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 ); |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 61 | |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 62 | rnd_info_A.buf = rnd_buf_A->x; |
| 63 | rnd_info_A.length = rnd_buf_A->len; |
Manuel Pégourié-Gonnard | 544416a | 2014-01-23 16:55:18 +0100 | [diff] [blame] | 64 | |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 65 | /* Fix rnd_buf_A->x by shifting it left if necessary */ |
Manuel Pégourié-Gonnard | 544416a | 2014-01-23 16:55:18 +0100 | [diff] [blame] | 66 | if( grp.nbits % 8 != 0 ) |
| 67 | { |
| 68 | unsigned char shift = 8 - ( grp.nbits % 8 ); |
| 69 | size_t i; |
| 70 | |
| 71 | for( i = 0; i < rnd_info_A.length - 1; i++ ) |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 72 | rnd_buf_A->x[i] = rnd_buf_A->x[i] << shift |
| 73 | | rnd_buf_A->x[i+1] >> ( 8 - shift ); |
Manuel Pégourié-Gonnard | 544416a | 2014-01-23 16:55:18 +0100 | [diff] [blame] | 74 | |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 75 | rnd_buf_A->x[rnd_info_A.length-1] <<= shift; |
Manuel Pégourié-Gonnard | 544416a | 2014-01-23 16:55:18 +0100 | [diff] [blame] | 76 | } |
| 77 | |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 78 | rnd_info_B.buf = rnd_buf_B->x; |
| 79 | rnd_info_B.length = rnd_buf_B->len; |
Manuel Pégourié-Gonnard | 544416a | 2014-01-23 16:55:18 +0100 | [diff] [blame] | 80 | |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 81 | /* Fix rnd_buf_B->x by shifting it left if necessary */ |
Manuel Pégourié-Gonnard | 544416a | 2014-01-23 16:55:18 +0100 | [diff] [blame] | 82 | if( grp.nbits % 8 != 0 ) |
| 83 | { |
| 84 | unsigned char shift = 8 - ( grp.nbits % 8 ); |
| 85 | size_t i; |
| 86 | |
| 87 | for( i = 0; i < rnd_info_B.length - 1; i++ ) |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 88 | rnd_buf_B->x[i] = rnd_buf_B->x[i] << shift |
| 89 | | rnd_buf_B->x[i+1] >> ( 8 - shift ); |
Manuel Pégourié-Gonnard | 544416a | 2014-01-23 16:55:18 +0100 | [diff] [blame] | 90 | |
Azim Khan | d30ca13 | 2017-06-09 04:32:58 +0100 | [diff] [blame] | 91 | rnd_buf_B->x[rnd_info_B.length-1] <<= shift; |
Manuel Pégourié-Gonnard | 544416a | 2014-01-23 16:55:18 +0100 | [diff] [blame] | 92 | } |
| 93 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 94 | TEST_ASSERT( mbedtls_ecdh_gen_public( &grp, &dA, &qA, |
Manuel Pégourié-Gonnard | 544416a | 2014-01-23 16:55:18 +0100 | [diff] [blame] | 95 | rnd_buffer_rand, &rnd_info_A ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 96 | TEST_ASSERT( ! mbedtls_ecp_is_zero( &qA ) ); |
| 97 | TEST_ASSERT( mbedtls_mpi_read_string( &check, 16, xA_str ) == 0 ); |
| 98 | TEST_ASSERT( mbedtls_mpi_cmp_mpi( &qA.X, &check ) == 0 ); |
| 99 | TEST_ASSERT( mbedtls_mpi_read_string( &check, 16, yA_str ) == 0 ); |
| 100 | TEST_ASSERT( mbedtls_mpi_cmp_mpi( &qA.Y, &check ) == 0 ); |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 101 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 102 | TEST_ASSERT( mbedtls_ecdh_gen_public( &grp, &dB, &qB, |
Manuel Pégourié-Gonnard | 544416a | 2014-01-23 16:55:18 +0100 | [diff] [blame] | 103 | rnd_buffer_rand, &rnd_info_B ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 104 | TEST_ASSERT( ! mbedtls_ecp_is_zero( &qB ) ); |
| 105 | TEST_ASSERT( mbedtls_mpi_read_string( &check, 16, xB_str ) == 0 ); |
| 106 | TEST_ASSERT( mbedtls_mpi_cmp_mpi( &qB.X, &check ) == 0 ); |
| 107 | TEST_ASSERT( mbedtls_mpi_read_string( &check, 16, yB_str ) == 0 ); |
| 108 | TEST_ASSERT( mbedtls_mpi_cmp_mpi( &qB.Y, &check ) == 0 ); |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 109 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 110 | TEST_ASSERT( mbedtls_mpi_read_string( &check, 16, z_str ) == 0 ); |
| 111 | TEST_ASSERT( mbedtls_ecdh_compute_shared( &grp, &zA, &qB, &dA, NULL, NULL ) == 0 ); |
| 112 | TEST_ASSERT( mbedtls_mpi_cmp_mpi( &zA, &check ) == 0 ); |
| 113 | TEST_ASSERT( mbedtls_ecdh_compute_shared( &grp, &zB, &qA, &dB, NULL, NULL ) == 0 ); |
| 114 | TEST_ASSERT( mbedtls_mpi_cmp_mpi( &zB, &check ) == 0 ); |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 115 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 116 | exit: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 117 | mbedtls_ecp_group_free( &grp ); |
| 118 | mbedtls_ecp_point_free( &qA ); mbedtls_ecp_point_free( &qB ); |
| 119 | mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &dB ); |
| 120 | mbedtls_mpi_free( &zA ); mbedtls_mpi_free( &zB ); mbedtls_mpi_free( &check ); |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 121 | } |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 122 | /* END_CASE */ |
Manuel Pégourié-Gonnard | 854fbd7 | 2013-02-11 20:28:55 +0100 | [diff] [blame] | 123 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 124 | /* BEGIN_CASE */ |
| 125 | void ecdh_exchange( int id ) |
Manuel Pégourié-Gonnard | 854fbd7 | 2013-02-11 20:28:55 +0100 | [diff] [blame] | 126 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 127 | mbedtls_ecdh_context srv, cli; |
Manuel Pégourié-Gonnard | 854fbd7 | 2013-02-11 20:28:55 +0100 | [diff] [blame] | 128 | unsigned char buf[1000]; |
| 129 | const unsigned char *vbuf; |
| 130 | size_t len; |
| 131 | rnd_pseudo_info rnd_info; |
Janos Follath | 36c5f7f | 2018-10-30 14:08:52 +0000 | [diff] [blame^] | 132 | unsigned char res_buf[1000]; |
| 133 | size_t res_len; |
Manuel Pégourié-Gonnard | 854fbd7 | 2013-02-11 20:28:55 +0100 | [diff] [blame] | 134 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 135 | mbedtls_ecdh_init( &srv ); |
| 136 | mbedtls_ecdh_init( &cli ); |
Manuel Pégourié-Gonnard | 854fbd7 | 2013-02-11 20:28:55 +0100 | [diff] [blame] | 137 | memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) ); |
| 138 | |
Janos Follath | fc03e8d | 2018-10-04 17:17:54 +0100 | [diff] [blame] | 139 | TEST_ASSERT( mbedtls_ecdh_setup( &srv, id ) == 0 ); |
Manuel Pégourié-Gonnard | 854fbd7 | 2013-02-11 20:28:55 +0100 | [diff] [blame] | 140 | |
| 141 | memset( buf, 0x00, sizeof( buf ) ); vbuf = buf; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 142 | TEST_ASSERT( mbedtls_ecdh_make_params( &srv, &len, buf, 1000, |
Janos Follath | fc03e8d | 2018-10-04 17:17:54 +0100 | [diff] [blame] | 143 | &rnd_pseudo_rand, &rnd_info ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 144 | TEST_ASSERT( mbedtls_ecdh_read_params( &cli, &vbuf, buf + len ) == 0 ); |
Manuel Pégourié-Gonnard | 854fbd7 | 2013-02-11 20:28:55 +0100 | [diff] [blame] | 145 | |
Manuel Pégourié-Gonnard | 424fda5 | 2013-02-11 22:05:42 +0100 | [diff] [blame] | 146 | memset( buf, 0x00, sizeof( buf ) ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 147 | TEST_ASSERT( mbedtls_ecdh_make_public( &cli, &len, buf, 1000, |
Janos Follath | fc03e8d | 2018-10-04 17:17:54 +0100 | [diff] [blame] | 148 | &rnd_pseudo_rand, &rnd_info ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 149 | TEST_ASSERT( mbedtls_ecdh_read_public( &srv, buf, len ) == 0 ); |
Manuel Pégourié-Gonnard | 5cceb41 | 2013-02-11 21:51:45 +0100 | [diff] [blame] | 150 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 151 | TEST_ASSERT( mbedtls_ecdh_calc_secret( &srv, &len, buf, 1000, |
Janos Follath | 36c5f7f | 2018-10-30 14:08:52 +0000 | [diff] [blame^] | 152 | &rnd_pseudo_rand, &rnd_info ) == 0 ); |
| 153 | TEST_ASSERT( mbedtls_ecdh_calc_secret( &cli, &res_len, res_buf, 1000, |
| 154 | NULL, NULL ) == 0 ); |
| 155 | TEST_ASSERT( len == res_len ); |
| 156 | TEST_ASSERT( memcmp( buf, res_buf, len ) == 0 ); |
Manuel Pégourié-Gonnard | 424fda5 | 2013-02-11 22:05:42 +0100 | [diff] [blame] | 157 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 158 | exit: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 159 | mbedtls_ecdh_free( &srv ); |
| 160 | mbedtls_ecdh_free( &cli ); |
Manuel Pégourié-Gonnard | 854fbd7 | 2013-02-11 20:28:55 +0100 | [diff] [blame] | 161 | } |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 162 | /* END_CASE */ |
Manuel Pégourié-Gonnard | 71b2c53 | 2017-04-27 10:38:52 +0200 | [diff] [blame] | 163 | |
| 164 | /* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE */ |
| 165 | void ecdh_restart( int id, char *dA_str, char *dB_str, char *z_str, |
Manuel Pégourié-Gonnard | 23e4162 | 2017-05-18 12:35:37 +0200 | [diff] [blame] | 166 | int enable, int max_ops, int min_restart, int max_restart ) |
Manuel Pégourié-Gonnard | 71b2c53 | 2017-04-27 10:38:52 +0200 | [diff] [blame] | 167 | { |
| 168 | int ret; |
| 169 | mbedtls_ecdh_context srv, cli; |
| 170 | unsigned char buf[1000]; |
| 171 | const unsigned char *vbuf; |
| 172 | size_t len; |
| 173 | unsigned char z[MBEDTLS_ECP_MAX_BYTES]; |
| 174 | size_t z_len; |
| 175 | unsigned char rnd_buf_A[MBEDTLS_ECP_MAX_BYTES]; |
| 176 | unsigned char rnd_buf_B[MBEDTLS_ECP_MAX_BYTES]; |
| 177 | rnd_buf_info rnd_info_A, rnd_info_B; |
| 178 | int cnt_restart; |
Janos Follath | 36c5f7f | 2018-10-30 14:08:52 +0000 | [diff] [blame^] | 179 | mbedtls_ecp_group grp; |
Manuel Pégourié-Gonnard | 71b2c53 | 2017-04-27 10:38:52 +0200 | [diff] [blame] | 180 | |
Janos Follath | 36c5f7f | 2018-10-30 14:08:52 +0000 | [diff] [blame^] | 181 | mbedtls_ecp_group_init( &grp ); |
Manuel Pégourié-Gonnard | 71b2c53 | 2017-04-27 10:38:52 +0200 | [diff] [blame] | 182 | mbedtls_ecdh_init( &srv ); |
| 183 | mbedtls_ecdh_init( &cli ); |
| 184 | |
| 185 | z_len = unhexify( z, z_str ); |
| 186 | |
| 187 | rnd_info_A.buf = rnd_buf_A; |
| 188 | rnd_info_A.length = unhexify( rnd_buf_A, dA_str ); |
| 189 | |
| 190 | rnd_info_B.buf = rnd_buf_B; |
| 191 | rnd_info_B.length = unhexify( rnd_buf_B, dB_str ); |
| 192 | |
Janos Follath | 36c5f7f | 2018-10-30 14:08:52 +0000 | [diff] [blame^] | 193 | /* The ECDH context is not guaranteed ot have an mbedtls_ecp_group structure |
| 194 | * in every configuration, therefore we load it separately. */ |
| 195 | TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 ); |
Manuel Pégourié-Gonnard | 71b2c53 | 2017-04-27 10:38:52 +0200 | [diff] [blame] | 196 | |
Janos Follath | 36c5f7f | 2018-10-30 14:08:52 +0000 | [diff] [blame^] | 197 | /* Otherwise we would have to fix the random buffer, |
| 198 | * as in ecdh_primitive_testvec. */ |
| 199 | TEST_ASSERT( grp.nbits % 8 == 0 ); |
| 200 | |
| 201 | TEST_ASSERT( mbedtls_ecdh_setup( &srv, id ) == 0 ); |
Manuel Pégourié-Gonnard | 71b2c53 | 2017-04-27 10:38:52 +0200 | [diff] [blame] | 202 | |
Manuel Pégourié-Gonnard | 23e4162 | 2017-05-18 12:35:37 +0200 | [diff] [blame] | 203 | /* set up restart parameters */ |
Manuel Pégourié-Gonnard | 71b2c53 | 2017-04-27 10:38:52 +0200 | [diff] [blame] | 204 | mbedtls_ecp_set_max_ops( max_ops ); |
| 205 | |
Janos Follath | 36c5f7f | 2018-10-30 14:08:52 +0000 | [diff] [blame^] | 206 | if( enable ) |
Manuel Pégourié-Gonnard | 23e4162 | 2017-05-18 12:35:37 +0200 | [diff] [blame] | 207 | { |
| 208 | mbedtls_ecdh_enable_restart( &srv ); |
| 209 | mbedtls_ecdh_enable_restart( &cli ); |
| 210 | } |
| 211 | |
Manuel Pégourié-Gonnard | 71b2c53 | 2017-04-27 10:38:52 +0200 | [diff] [blame] | 212 | /* server writes its paramaters */ |
| 213 | memset( buf, 0x00, sizeof( buf ) ); |
| 214 | len = 0; |
| 215 | |
| 216 | cnt_restart = 0; |
| 217 | do { |
| 218 | ret = mbedtls_ecdh_make_params( &srv, &len, buf, sizeof( buf ), |
| 219 | rnd_buffer_rand, &rnd_info_A ); |
| 220 | } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restart ); |
| 221 | |
| 222 | TEST_ASSERT( ret == 0 ); |
| 223 | TEST_ASSERT( cnt_restart >= min_restart ); |
| 224 | TEST_ASSERT( cnt_restart <= max_restart ); |
| 225 | |
| 226 | /* client read server params */ |
| 227 | vbuf = buf; |
| 228 | TEST_ASSERT( mbedtls_ecdh_read_params( &cli, &vbuf, buf + len ) == 0 ); |
| 229 | |
| 230 | /* client writes its key share */ |
| 231 | memset( buf, 0x00, sizeof( buf ) ); |
| 232 | len = 0; |
| 233 | |
| 234 | cnt_restart = 0; |
| 235 | do { |
| 236 | ret = mbedtls_ecdh_make_public( &cli, &len, buf, sizeof( buf ), |
| 237 | rnd_buffer_rand, &rnd_info_B ); |
| 238 | } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restart ); |
| 239 | |
| 240 | TEST_ASSERT( ret == 0 ); |
| 241 | TEST_ASSERT( cnt_restart >= min_restart ); |
| 242 | TEST_ASSERT( cnt_restart <= max_restart ); |
| 243 | |
| 244 | /* server reads client key share */ |
| 245 | TEST_ASSERT( mbedtls_ecdh_read_public( &srv, buf, len ) == 0 ); |
| 246 | |
| 247 | /* server computes shared secret */ |
| 248 | memset( buf, 0, sizeof( buf ) ); |
| 249 | len = 0; |
| 250 | |
| 251 | cnt_restart = 0; |
| 252 | do { |
| 253 | ret = mbedtls_ecdh_calc_secret( &srv, &len, buf, sizeof( buf ), |
| 254 | NULL, NULL ); |
| 255 | } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restart ); |
| 256 | |
| 257 | TEST_ASSERT( ret == 0 ); |
| 258 | TEST_ASSERT( cnt_restart >= min_restart ); |
| 259 | TEST_ASSERT( cnt_restart <= max_restart ); |
| 260 | |
| 261 | TEST_ASSERT( len == z_len ); |
| 262 | TEST_ASSERT( memcmp( buf, z, len ) == 0 ); |
| 263 | |
| 264 | /* client computes shared secret */ |
| 265 | memset( buf, 0, sizeof( buf ) ); |
| 266 | len = 0; |
| 267 | |
| 268 | cnt_restart = 0; |
| 269 | do { |
| 270 | ret = mbedtls_ecdh_calc_secret( &cli, &len, buf, sizeof( buf ), |
| 271 | NULL, NULL ); |
| 272 | } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restart ); |
| 273 | |
| 274 | TEST_ASSERT( ret == 0 ); |
| 275 | TEST_ASSERT( cnt_restart >= min_restart ); |
| 276 | TEST_ASSERT( cnt_restart <= max_restart ); |
| 277 | |
| 278 | TEST_ASSERT( len == z_len ); |
| 279 | TEST_ASSERT( memcmp( buf, z, len ) == 0 ); |
| 280 | |
| 281 | exit: |
Janos Follath | 36c5f7f | 2018-10-30 14:08:52 +0000 | [diff] [blame^] | 282 | mbedtls_ecp_group_free( &grp ); |
Manuel Pégourié-Gonnard | 71b2c53 | 2017-04-27 10:38:52 +0200 | [diff] [blame] | 283 | mbedtls_ecdh_free( &srv ); |
| 284 | mbedtls_ecdh_free( &cli ); |
| 285 | } |
| 286 | /* END_CASE */ |
Janos Follath | fc03e8d | 2018-10-04 17:17:54 +0100 | [diff] [blame] | 287 | |
Janos Follath | 36c5f7f | 2018-10-30 14:08:52 +0000 | [diff] [blame^] | 288 | /* BEGIN_CASE depends_on:MBEDTLS_ECDH_LEGACY_CONTEXT */ |
Janos Follath | fc03e8d | 2018-10-04 17:17:54 +0100 | [diff] [blame] | 289 | void ecdh_exchange_legacy( int id ) |
| 290 | { |
| 291 | mbedtls_ecdh_context srv, cli; |
| 292 | unsigned char buf[1000]; |
| 293 | const unsigned char *vbuf; |
| 294 | size_t len; |
| 295 | |
| 296 | rnd_pseudo_info rnd_info; |
| 297 | |
| 298 | mbedtls_ecdh_init( &srv ); |
| 299 | mbedtls_ecdh_init( &cli ); |
| 300 | memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) ); |
| 301 | |
| 302 | TEST_ASSERT( mbedtls_ecp_group_load( &srv.grp, id ) == 0 ); |
| 303 | |
| 304 | memset( buf, 0x00, sizeof( buf ) ); vbuf = buf; |
| 305 | TEST_ASSERT( mbedtls_ecdh_make_params( &srv, &len, buf, 1000, |
| 306 | &rnd_pseudo_rand, &rnd_info ) == 0 ); |
| 307 | TEST_ASSERT( mbedtls_ecdh_read_params( &cli, &vbuf, buf + len ) == 0 ); |
| 308 | |
| 309 | memset( buf, 0x00, sizeof( buf ) ); |
| 310 | TEST_ASSERT( mbedtls_ecdh_make_public( &cli, &len, buf, 1000, |
| 311 | &rnd_pseudo_rand, &rnd_info ) == 0 ); |
| 312 | TEST_ASSERT( mbedtls_ecdh_read_public( &srv, buf, len ) == 0 ); |
| 313 | |
| 314 | TEST_ASSERT( mbedtls_ecdh_calc_secret( &srv, &len, buf, 1000, |
| 315 | &rnd_pseudo_rand, &rnd_info ) == 0 ); |
| 316 | TEST_ASSERT( mbedtls_ecdh_calc_secret( &cli, &len, buf, 1000, NULL, |
| 317 | NULL ) == 0 ); |
| 318 | TEST_ASSERT( mbedtls_mpi_cmp_mpi( &srv.z, &cli.z ) == 0 ); |
| 319 | |
| 320 | exit: |
| 321 | mbedtls_ecdh_free( &srv ); |
| 322 | mbedtls_ecdh_free( &cli ); |
| 323 | } |
| 324 | /* END_CASE */ |