Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 1 | /* BEGIN_HEADER */ |
Manuel Pégourié-Gonnard | 7f80997 | 2015-03-09 17:05:11 +0000 | [diff] [blame] | 2 | #include "mbedtls/ecdsa.h" |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 3 | /* END_HEADER */ |
Manuel Pégourié-Gonnard | d1c7150 | 2013-01-26 19:09:07 +0100 | [diff] [blame] | 4 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 5 | /* BEGIN_DEPENDENCIES |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 6 | * depends_on:MBEDTLS_ECDSA_C |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 7 | * END_DEPENDENCIES |
| 8 | */ |
Manuel Pégourié-Gonnard | d1c7150 | 2013-01-26 19:09:07 +0100 | [diff] [blame] | 9 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 10 | /* BEGIN_CASE */ |
| 11 | void ecdsa_prim_random( int id ) |
Manuel Pégourié-Gonnard | d1c7150 | 2013-01-26 19:09:07 +0100 | [diff] [blame] | 12 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 13 | mbedtls_ecp_group grp; |
| 14 | mbedtls_ecp_point Q; |
| 15 | mbedtls_mpi d, r, s; |
Manuel Pégourié-Gonnard | d1c7150 | 2013-01-26 19:09:07 +0100 | [diff] [blame] | 16 | rnd_pseudo_info rnd_info; |
| 17 | unsigned char buf[66]; |
| 18 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 19 | mbedtls_ecp_group_init( &grp ); |
| 20 | mbedtls_ecp_point_init( &Q ); |
| 21 | mbedtls_mpi_init( &d ); mbedtls_mpi_init( &r ); mbedtls_mpi_init( &s ); |
Manuel Pégourié-Gonnard | d1c7150 | 2013-01-26 19:09:07 +0100 | [diff] [blame] | 22 | memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) ); |
Manuel Pégourié-Gonnard | 450a163 | 2013-01-27 09:08:18 +0100 | [diff] [blame] | 23 | memset( buf, 0, sizeof( buf ) ); |
Manuel Pégourié-Gonnard | d1c7150 | 2013-01-26 19:09:07 +0100 | [diff] [blame] | 24 | |
| 25 | /* prepare material for signature */ |
| 26 | TEST_ASSERT( rnd_pseudo_rand( &rnd_info, buf, sizeof( buf ) ) == 0 ); |
Manuel Pégourié-Gonnard | e3a062b | 2015-05-11 18:46:47 +0200 | [diff] [blame] | 27 | TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 28 | TEST_ASSERT( mbedtls_ecp_gen_keypair( &grp, &d, &Q, &rnd_pseudo_rand, &rnd_info ) |
Manuel Pégourié-Gonnard | d1c7150 | 2013-01-26 19:09:07 +0100 | [diff] [blame] | 29 | == 0 ); |
| 30 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 31 | TEST_ASSERT( mbedtls_ecdsa_sign( &grp, &r, &s, &d, buf, sizeof( buf ), |
Manuel Pégourié-Gonnard | d1c7150 | 2013-01-26 19:09:07 +0100 | [diff] [blame] | 32 | &rnd_pseudo_rand, &rnd_info ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 33 | TEST_ASSERT( mbedtls_ecdsa_verify( &grp, buf, sizeof( buf ), &Q, &r, &s ) == 0 ); |
Manuel Pégourié-Gonnard | d1c7150 | 2013-01-26 19:09:07 +0100 | [diff] [blame] | 34 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 35 | exit: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 36 | mbedtls_ecp_group_free( &grp ); |
| 37 | mbedtls_ecp_point_free( &Q ); |
| 38 | mbedtls_mpi_free( &d ); mbedtls_mpi_free( &r ); mbedtls_mpi_free( &s ); |
Manuel Pégourié-Gonnard | d1c7150 | 2013-01-26 19:09:07 +0100 | [diff] [blame] | 39 | } |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 40 | /* END_CASE */ |
Manuel Pégourié-Gonnard | 602a897 | 2013-01-27 08:10:28 +0100 | [diff] [blame] | 41 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 42 | /* BEGIN_CASE */ |
| 43 | void ecdsa_prim_test_vectors( int id, char *d_str, char *xQ_str, char *yQ_str, |
| 44 | char *k_str, char *hash_str, char *r_str, |
| 45 | char *s_str ) |
Manuel Pégourié-Gonnard | 602a897 | 2013-01-27 08:10:28 +0100 | [diff] [blame] | 46 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 47 | mbedtls_ecp_group grp; |
| 48 | mbedtls_ecp_point Q; |
| 49 | mbedtls_mpi d, r, s, r_check, s_check; |
Manuel Pégourié-Gonnard | fae079e | 2014-01-06 11:00:07 +0100 | [diff] [blame] | 50 | unsigned char hash[66], rnd_buf[66]; |
| 51 | size_t hlen; |
| 52 | rnd_buf_info rnd_info; |
Manuel Pégourié-Gonnard | 602a897 | 2013-01-27 08:10:28 +0100 | [diff] [blame] | 53 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 54 | mbedtls_ecp_group_init( &grp ); |
| 55 | mbedtls_ecp_point_init( &Q ); |
| 56 | mbedtls_mpi_init( &d ); mbedtls_mpi_init( &r ); mbedtls_mpi_init( &s ); |
| 57 | mbedtls_mpi_init( &r_check ); mbedtls_mpi_init( &s_check ); |
Manuel Pégourié-Gonnard | fae079e | 2014-01-06 11:00:07 +0100 | [diff] [blame] | 58 | memset( hash, 0, sizeof( hash ) ); |
| 59 | memset( rnd_buf, 0, sizeof( rnd_buf ) ); |
Manuel Pégourié-Gonnard | 602a897 | 2013-01-27 08:10:28 +0100 | [diff] [blame] | 60 | |
Manuel Pégourié-Gonnard | e3a062b | 2015-05-11 18:46:47 +0200 | [diff] [blame] | 61 | TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 62 | TEST_ASSERT( mbedtls_ecp_point_read_string( &Q, 16, xQ_str, yQ_str ) == 0 ); |
| 63 | TEST_ASSERT( mbedtls_mpi_read_string( &d, 16, d_str ) == 0 ); |
| 64 | TEST_ASSERT( mbedtls_mpi_read_string( &r_check, 16, r_str ) == 0 ); |
| 65 | TEST_ASSERT( mbedtls_mpi_read_string( &s_check, 16, s_str ) == 0 ); |
Manuel Pégourié-Gonnard | fae079e | 2014-01-06 11:00:07 +0100 | [diff] [blame] | 66 | hlen = unhexify(hash, hash_str); |
| 67 | rnd_info.buf = rnd_buf; |
| 68 | rnd_info.length = unhexify( rnd_buf, k_str ); |
Manuel Pégourié-Gonnard | 602a897 | 2013-01-27 08:10:28 +0100 | [diff] [blame] | 69 | |
Manuel Pégourié-Gonnard | fae079e | 2014-01-06 11:00:07 +0100 | [diff] [blame] | 70 | /* Fix rnd_buf by shifting it left if necessary */ |
| 71 | if( grp.nbits % 8 != 0 ) |
| 72 | { |
| 73 | unsigned char shift = 8 - ( grp.nbits % 8 ); |
| 74 | size_t i; |
| 75 | |
| 76 | for( i = 0; i < rnd_info.length - 1; i++ ) |
| 77 | rnd_buf[i] = rnd_buf[i] << shift | rnd_buf[i+1] >> ( 8 - shift ); |
| 78 | |
| 79 | rnd_buf[rnd_info.length-1] <<= shift; |
| 80 | } |
| 81 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 82 | TEST_ASSERT( mbedtls_ecdsa_sign( &grp, &r, &s, &d, hash, hlen, |
Manuel Pégourié-Gonnard | fae079e | 2014-01-06 11:00:07 +0100 | [diff] [blame] | 83 | rnd_buffer_rand, &rnd_info ) == 0 ); |
Manuel Pégourié-Gonnard | 602a897 | 2013-01-27 08:10:28 +0100 | [diff] [blame] | 84 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 85 | TEST_ASSERT( mbedtls_mpi_cmp_mpi( &r, &r_check ) == 0 ); |
| 86 | TEST_ASSERT( mbedtls_mpi_cmp_mpi( &s, &s_check ) == 0 ); |
Manuel Pégourié-Gonnard | 602a897 | 2013-01-27 08:10:28 +0100 | [diff] [blame] | 87 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 88 | TEST_ASSERT( mbedtls_ecdsa_verify( &grp, hash, hlen, &Q, &r_check, &s_check ) == 0 ); |
Manuel Pégourié-Gonnard | 602a897 | 2013-01-27 08:10:28 +0100 | [diff] [blame] | 89 | |
Manuel Pégourié-Gonnard | 1ed2505 | 2017-04-21 10:04:02 +0200 | [diff] [blame] | 90 | TEST_ASSERT( mbedtls_mpi_sub_int( &r, &r, 1 ) == 0 ); |
| 91 | TEST_ASSERT( mbedtls_mpi_add_int( &s, &s, 1 ) == 0 ); |
| 92 | |
| 93 | TEST_ASSERT( mbedtls_ecdsa_verify( &grp, hash, hlen, |
| 94 | &Q, &r, &s_check ) == MBEDTLS_ERR_ECP_VERIFY_FAILED ); |
| 95 | TEST_ASSERT( mbedtls_ecdsa_verify( &grp, hash, hlen, |
| 96 | &Q, &r_check, &s ) == MBEDTLS_ERR_ECP_VERIFY_FAILED ); |
| 97 | TEST_ASSERT( mbedtls_ecdsa_verify( &grp, hash, hlen, |
| 98 | &grp.G, &r_check, &s_check ) == MBEDTLS_ERR_ECP_VERIFY_FAILED ); |
| 99 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 100 | exit: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 101 | mbedtls_ecp_group_free( &grp ); |
| 102 | mbedtls_ecp_point_free( &Q ); |
| 103 | mbedtls_mpi_free( &d ); mbedtls_mpi_free( &r ); mbedtls_mpi_free( &s ); |
| 104 | mbedtls_mpi_free( &r_check ); mbedtls_mpi_free( &s_check ); |
Manuel Pégourié-Gonnard | 602a897 | 2013-01-27 08:10:28 +0100 | [diff] [blame] | 105 | } |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 106 | /* END_CASE */ |
Manuel Pégourié-Gonnard | b694b48 | 2013-08-08 13:30:57 +0200 | [diff] [blame] | 107 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 108 | /* BEGIN_CASE depends_on:MBEDTLS_ECDSA_DETERMINISTIC */ |
Manuel Pégourié-Gonnard | 4daaef7 | 2014-01-06 14:25:56 +0100 | [diff] [blame] | 109 | void ecdsa_det_test_vectors( int id, char *d_str, int md_alg, |
| 110 | char *msg, char *r_str, char *s_str ) |
| 111 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 112 | mbedtls_ecp_group grp; |
| 113 | mbedtls_mpi d, r, s, r_check, s_check; |
| 114 | unsigned char hash[MBEDTLS_MD_MAX_SIZE]; |
Manuel Pégourié-Gonnard | 4daaef7 | 2014-01-06 14:25:56 +0100 | [diff] [blame] | 115 | size_t hlen; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 116 | const mbedtls_md_info_t *md_info; |
Manuel Pégourié-Gonnard | 4daaef7 | 2014-01-06 14:25:56 +0100 | [diff] [blame] | 117 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 118 | mbedtls_ecp_group_init( &grp ); |
| 119 | mbedtls_mpi_init( &d ); mbedtls_mpi_init( &r ); mbedtls_mpi_init( &s ); |
| 120 | mbedtls_mpi_init( &r_check ); mbedtls_mpi_init( &s_check ); |
Manuel Pégourié-Gonnard | 4daaef7 | 2014-01-06 14:25:56 +0100 | [diff] [blame] | 121 | memset( hash, 0, sizeof( hash ) ); |
| 122 | |
Manuel Pégourié-Gonnard | e3a062b | 2015-05-11 18:46:47 +0200 | [diff] [blame] | 123 | TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 124 | TEST_ASSERT( mbedtls_mpi_read_string( &d, 16, d_str ) == 0 ); |
| 125 | TEST_ASSERT( mbedtls_mpi_read_string( &r_check, 16, r_str ) == 0 ); |
| 126 | TEST_ASSERT( mbedtls_mpi_read_string( &s_check, 16, s_str ) == 0 ); |
Manuel Pégourié-Gonnard | 4daaef7 | 2014-01-06 14:25:56 +0100 | [diff] [blame] | 127 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 128 | md_info = mbedtls_md_info_from_type( md_alg ); |
Paul Bakker | 94b916c | 2014-04-17 16:07:20 +0200 | [diff] [blame] | 129 | TEST_ASSERT( md_info != NULL ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 130 | hlen = mbedtls_md_get_size( md_info ); |
| 131 | mbedtls_md( md_info, (const unsigned char *) msg, strlen( msg ), hash ); |
Manuel Pégourié-Gonnard | 4daaef7 | 2014-01-06 14:25:56 +0100 | [diff] [blame] | 132 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 133 | TEST_ASSERT( mbedtls_ecdsa_sign_det( &grp, &r, &s, &d, hash, hlen, md_alg ) == 0 ); |
Manuel Pégourié-Gonnard | 4daaef7 | 2014-01-06 14:25:56 +0100 | [diff] [blame] | 134 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 135 | TEST_ASSERT( mbedtls_mpi_cmp_mpi( &r, &r_check ) == 0 ); |
| 136 | TEST_ASSERT( mbedtls_mpi_cmp_mpi( &s, &s_check ) == 0 ); |
Manuel Pégourié-Gonnard | 4daaef7 | 2014-01-06 14:25:56 +0100 | [diff] [blame] | 137 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 138 | exit: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 139 | mbedtls_ecp_group_free( &grp ); |
| 140 | mbedtls_mpi_free( &d ); mbedtls_mpi_free( &r ); mbedtls_mpi_free( &s ); |
| 141 | mbedtls_mpi_free( &r_check ); mbedtls_mpi_free( &s_check ); |
Manuel Pégourié-Gonnard | 4daaef7 | 2014-01-06 14:25:56 +0100 | [diff] [blame] | 142 | } |
| 143 | /* END_CASE */ |
| 144 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 145 | /* BEGIN_CASE depends_on:MBEDTLS_SHA256_C */ |
Manuel Pégourié-Gonnard | b694b48 | 2013-08-08 13:30:57 +0200 | [diff] [blame] | 146 | void ecdsa_write_read_random( int id ) |
| 147 | { |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 148 | mbedtls_ecdsa_context ctx; |
Manuel Pégourié-Gonnard | b694b48 | 2013-08-08 13:30:57 +0200 | [diff] [blame] | 149 | rnd_pseudo_info rnd_info; |
Manuel Pégourié-Gonnard | dfdcac9 | 2015-03-31 11:41:42 +0200 | [diff] [blame] | 150 | unsigned char hash[32]; |
Manuel Pégourié-Gonnard | b694b48 | 2013-08-08 13:30:57 +0200 | [diff] [blame] | 151 | unsigned char sig[200]; |
| 152 | size_t sig_len, i; |
| 153 | |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 154 | mbedtls_ecdsa_init( &ctx ); |
Manuel Pégourié-Gonnard | b694b48 | 2013-08-08 13:30:57 +0200 | [diff] [blame] | 155 | memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) ); |
| 156 | memset( hash, 0, sizeof( hash ) ); |
| 157 | memset( sig, 0x2a, sizeof( sig ) ); |
| 158 | |
| 159 | /* prepare material for signature */ |
| 160 | TEST_ASSERT( rnd_pseudo_rand( &rnd_info, hash, sizeof( hash ) ) == 0 ); |
| 161 | |
| 162 | /* generate signing key */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 163 | TEST_ASSERT( mbedtls_ecdsa_genkey( &ctx, id, &rnd_pseudo_rand, &rnd_info ) == 0 ); |
Manuel Pégourié-Gonnard | b694b48 | 2013-08-08 13:30:57 +0200 | [diff] [blame] | 164 | |
| 165 | /* generate and write signature, then read and verify it */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 166 | TEST_ASSERT( mbedtls_ecdsa_write_signature( &ctx, MBEDTLS_MD_SHA256, |
Manuel Pégourié-Gonnard | dfdcac9 | 2015-03-31 11:41:42 +0200 | [diff] [blame] | 167 | hash, sizeof( hash ), |
Manuel Pégourié-Gonnard | b694b48 | 2013-08-08 13:30:57 +0200 | [diff] [blame] | 168 | sig, &sig_len, &rnd_pseudo_rand, &rnd_info ) == 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 169 | TEST_ASSERT( mbedtls_ecdsa_read_signature( &ctx, hash, sizeof( hash ), |
Manuel Pégourié-Gonnard | b694b48 | 2013-08-08 13:30:57 +0200 | [diff] [blame] | 170 | sig, sig_len ) == 0 ); |
| 171 | |
| 172 | /* check we didn't write past the announced length */ |
| 173 | for( i = sig_len; i < sizeof( sig ); i++ ) |
| 174 | TEST_ASSERT( sig[i] == 0x2a ); |
| 175 | |
| 176 | /* try verification with invalid length */ |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 177 | TEST_ASSERT( mbedtls_ecdsa_read_signature( &ctx, hash, sizeof( hash ), |
Manuel Pégourié-Gonnard | b694b48 | 2013-08-08 13:30:57 +0200 | [diff] [blame] | 178 | sig, sig_len - 1 ) != 0 ); |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 179 | TEST_ASSERT( mbedtls_ecdsa_read_signature( &ctx, hash, sizeof( hash ), |
Manuel Pégourié-Gonnard | b694b48 | 2013-08-08 13:30:57 +0200 | [diff] [blame] | 180 | sig, sig_len + 1 ) != 0 ); |
| 181 | |
| 182 | /* try invalid sequence tag */ |
| 183 | sig[0]++; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 184 | TEST_ASSERT( mbedtls_ecdsa_read_signature( &ctx, hash, sizeof( hash ), |
Manuel Pégourié-Gonnard | b694b48 | 2013-08-08 13:30:57 +0200 | [diff] [blame] | 185 | sig, sig_len ) != 0 ); |
| 186 | sig[0]--; |
| 187 | |
| 188 | /* try modifying r */ |
| 189 | sig[10]++; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 190 | TEST_ASSERT( mbedtls_ecdsa_read_signature( &ctx, hash, sizeof( hash ), |
Manuel Pégourié-Gonnard | 1ed2505 | 2017-04-21 10:04:02 +0200 | [diff] [blame] | 191 | sig, sig_len ) == MBEDTLS_ERR_ECP_VERIFY_FAILED ); |
Manuel Pégourié-Gonnard | b694b48 | 2013-08-08 13:30:57 +0200 | [diff] [blame] | 192 | sig[10]--; |
| 193 | |
| 194 | /* try modifying s */ |
| 195 | sig[sig_len - 1]++; |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 196 | TEST_ASSERT( mbedtls_ecdsa_read_signature( &ctx, hash, sizeof( hash ), |
Manuel Pégourié-Gonnard | 1ed2505 | 2017-04-21 10:04:02 +0200 | [diff] [blame] | 197 | sig, sig_len ) == MBEDTLS_ERR_ECP_VERIFY_FAILED ); |
Manuel Pégourié-Gonnard | b694b48 | 2013-08-08 13:30:57 +0200 | [diff] [blame] | 198 | sig[sig_len - 1]--; |
| 199 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 200 | exit: |
Manuel Pégourié-Gonnard | 2cf5a7c | 2015-04-08 12:49:31 +0200 | [diff] [blame] | 201 | mbedtls_ecdsa_free( &ctx ); |
Manuel Pégourié-Gonnard | b694b48 | 2013-08-08 13:30:57 +0200 | [diff] [blame] | 202 | } |
| 203 | /* END_CASE */ |
Manuel Pégourié-Gonnard | 937340b | 2014-01-06 10:27:16 +0100 | [diff] [blame] | 204 | |
Manuel Pégourié-Gonnard | 722e515 | 2017-04-21 11:04:47 +0200 | [diff] [blame] | 205 | /* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE */ |
| 206 | void ecdsa_read_restart( int id, char *k_str, char *h_str, char *s_str, |
| 207 | int max_ops, int min_restart, int max_restart ) |
| 208 | { |
| 209 | mbedtls_ecdsa_context ctx; |
| 210 | mbedtls_ecdsa_restart_ctx rs_ctx; |
| 211 | unsigned char hash[64]; |
| 212 | unsigned char sig[200]; |
| 213 | unsigned char pk[65]; |
| 214 | size_t sig_len, hash_len, pk_len; |
| 215 | int ret, cnt_restart; |
| 216 | |
| 217 | mbedtls_ecdsa_init( &ctx ); |
| 218 | mbedtls_ecdsa_restart_init( &rs_ctx ); |
| 219 | |
| 220 | hash_len = unhexify(hash, h_str); |
| 221 | sig_len = unhexify(sig, s_str); |
| 222 | pk_len = unhexify(pk, k_str); |
| 223 | |
| 224 | TEST_ASSERT( mbedtls_ecp_group_load( &ctx.grp, id ) == 0 ); |
| 225 | TEST_ASSERT( mbedtls_ecp_point_read_binary( &ctx.grp, &ctx.Q, pk, pk_len ) == 0 ); |
| 226 | |
| 227 | mbedtls_ecp_set_max_ops( max_ops ); |
| 228 | |
| 229 | cnt_restart = 0; |
| 230 | do { |
| 231 | ret = mbedtls_ecdsa_read_signature_restartable( &ctx, |
| 232 | hash, hash_len, sig, sig_len, &rs_ctx ); |
| 233 | } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restart ); |
| 234 | |
| 235 | TEST_ASSERT( ret == 0 ); |
| 236 | TEST_ASSERT( cnt_restart >= min_restart ); |
| 237 | TEST_ASSERT( cnt_restart <= max_restart ); |
| 238 | |
| 239 | /* try modifying r */ |
| 240 | sig[10]++; |
| 241 | do { |
| 242 | ret = mbedtls_ecdsa_read_signature_restartable( &ctx, |
| 243 | hash, hash_len, sig, sig_len, &rs_ctx ); |
| 244 | } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS ); |
| 245 | TEST_ASSERT( ret == MBEDTLS_ERR_ECP_VERIFY_FAILED ); |
| 246 | sig[10]--; |
| 247 | |
| 248 | /* try modifying s */ |
| 249 | sig[sig_len - 1]++; |
| 250 | do { |
| 251 | ret = mbedtls_ecdsa_read_signature_restartable( &ctx, |
| 252 | hash, hash_len, sig, sig_len, &rs_ctx ); |
| 253 | } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS ); |
| 254 | TEST_ASSERT( ret == MBEDTLS_ERR_ECP_VERIFY_FAILED ); |
| 255 | sig[sig_len - 1]--; |
| 256 | |
Manuel Pégourié-Gonnard | 46ba7f3 | 2017-08-28 12:20:39 +0200 | [diff] [blame^] | 257 | /* Do we leak memory when aborting an operation? |
| 258 | * This test only makes sense when we actually restart */ |
| 259 | if( min_restart > 0 ) |
| 260 | { |
| 261 | ret = mbedtls_ecdsa_read_signature_restartable( &ctx, |
| 262 | hash, hash_len, sig, sig_len, &rs_ctx ); |
| 263 | TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS ); |
| 264 | } |
Manuel Pégourié-Gonnard | 722e515 | 2017-04-21 11:04:47 +0200 | [diff] [blame] | 265 | |
| 266 | exit: |
| 267 | mbedtls_ecdsa_free( &ctx ); |
| 268 | mbedtls_ecdsa_restart_free( &rs_ctx ); |
| 269 | } |
| 270 | /* END_CASE */ |
Manuel Pégourié-Gonnard | eb402f3 | 2017-04-25 10:57:30 +0200 | [diff] [blame] | 271 | |
| 272 | /* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE:MBEDTLS_ECDSA_DETERMINISTIC */ |
| 273 | void ecdsa_write_restart( int id, char *d_str, int md_alg, |
| 274 | char *msg, char *sig_str, |
| 275 | int max_ops, int min_restart, int max_restart ) |
| 276 | { |
| 277 | int ret, cnt_restart; |
| 278 | mbedtls_ecdsa_restart_ctx rs_ctx; |
| 279 | mbedtls_ecdsa_context ctx; |
| 280 | unsigned char hash[MBEDTLS_MD_MAX_SIZE]; |
| 281 | unsigned char sig[MBEDTLS_ECDSA_MAX_LEN]; |
| 282 | unsigned char sig_check[MBEDTLS_ECDSA_MAX_LEN]; |
| 283 | size_t hlen, slen, slen_check; |
| 284 | const mbedtls_md_info_t *md_info; |
| 285 | |
| 286 | mbedtls_ecdsa_restart_init( &rs_ctx ); |
| 287 | mbedtls_ecdsa_init( &ctx ); |
| 288 | memset( hash, 0, sizeof( hash ) ); |
| 289 | memset( sig, 0, sizeof( sig ) ); |
| 290 | memset( sig_check, 0, sizeof( sig_check ) ); |
| 291 | |
| 292 | TEST_ASSERT( mbedtls_ecp_group_load( &ctx.grp, id ) == 0 ); |
| 293 | TEST_ASSERT( mbedtls_mpi_read_string( &ctx.d, 16, d_str ) == 0 ); |
| 294 | slen_check = unhexify( sig_check, sig_str ); |
| 295 | |
| 296 | md_info = mbedtls_md_info_from_type( md_alg ); |
| 297 | TEST_ASSERT( md_info != NULL ); |
| 298 | |
| 299 | hlen = mbedtls_md_get_size( md_info ); |
| 300 | mbedtls_md( md_info, (const unsigned char *) msg, strlen( msg ), hash ); |
| 301 | |
| 302 | mbedtls_ecp_set_max_ops( max_ops ); |
| 303 | |
| 304 | slen = sizeof( sig ); |
| 305 | cnt_restart = 0; |
| 306 | do { |
| 307 | ret = mbedtls_ecdsa_write_signature_restartable( &ctx, |
| 308 | md_alg, hash, hlen, sig, &slen, NULL, NULL, &rs_ctx ); |
| 309 | } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restart ); |
| 310 | |
| 311 | TEST_ASSERT( ret == 0 ); |
| 312 | TEST_ASSERT( slen == slen_check ); |
| 313 | TEST_ASSERT( memcmp( sig, sig_check, slen ) == 0 ); |
| 314 | |
| 315 | TEST_ASSERT( cnt_restart >= min_restart ); |
| 316 | TEST_ASSERT( cnt_restart <= max_restart ); |
| 317 | |
Manuel Pégourié-Gonnard | 46ba7f3 | 2017-08-28 12:20:39 +0200 | [diff] [blame^] | 318 | /* Do we leak memory when aborting an operation? |
| 319 | * This test only makes sense when we actually restart */ |
| 320 | if( min_restart > 0 ) |
| 321 | { |
| 322 | ret = mbedtls_ecdsa_write_signature_restartable( &ctx, |
| 323 | md_alg, hash, hlen, sig, &slen, NULL, NULL, &rs_ctx ); |
| 324 | TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS ); |
| 325 | } |
Manuel Pégourié-Gonnard | eb402f3 | 2017-04-25 10:57:30 +0200 | [diff] [blame] | 326 | |
| 327 | exit: |
| 328 | mbedtls_ecdsa_restart_free( &rs_ctx ); |
| 329 | mbedtls_ecdsa_free( &ctx ); |
| 330 | } |
| 331 | /* END_CASE */ |