blob: c60d0d34981dde2d262ae09a2c8693aa598fa2ea [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/ecp.h"
Paul Bakkerdbd443d2013-08-16 13:38:47 +02003
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02004#define ECP_PF_UNKNOWN -1
Paul Bakker33b43f12013-08-20 11:48:36 +02005/* END_HEADER */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +01006
Paul Bakker33b43f12013-08-20 11:48:36 +02007/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02008 * depends_on:MBEDTLS_ECP_C
Paul Bakker33b43f12013-08-20 11:48:36 +02009 * END_DEPENDENCIES
10 */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010011
Paul Bakker33b43f12013-08-20 11:48:36 +020012/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020013void mbedtls_ecp_curve_info( int id, int tls_id, int size, char *name )
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010014{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020015 const mbedtls_ecp_curve_info *by_id, *by_tls, *by_name;
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010016
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020017 by_id = mbedtls_ecp_curve_info_from_grp_id( id );
18 by_tls = mbedtls_ecp_curve_info_from_tls_id( tls_id );
19 by_name = mbedtls_ecp_curve_info_from_name( name );
Paul Bakker94b916c2014-04-17 16:07:20 +020020 TEST_ASSERT( by_id != NULL );
21 TEST_ASSERT( by_tls != NULL );
22 TEST_ASSERT( by_name != NULL );
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010023
24 TEST_ASSERT( by_id == by_tls );
25 TEST_ASSERT( by_id == by_name );
26
Manuel Pégourié-Gonnard797f48a2015-06-18 15:45:05 +020027 TEST_ASSERT( by_id->bit_size == size );
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010028}
29/* END_CASE */
30
31/* BEGIN_CASE */
Janos Follath28fff142017-01-27 15:51:14 +000032void ecp_check_pub( int grp_id, char *x_hex, char *y_hex, char *z_hex, int ret )
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010033{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020034 mbedtls_ecp_group grp;
35 mbedtls_ecp_point P;
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010036
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020037 mbedtls_ecp_group_init( &grp );
38 mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010039
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +020040 TEST_ASSERT( mbedtls_ecp_group_load( &grp, grp_id ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010041
Janos Follath28fff142017-01-27 15:51:14 +000042 TEST_ASSERT( mbedtls_mpi_read_string( &P.X, 16, x_hex ) == 0 );
43 TEST_ASSERT( mbedtls_mpi_read_string( &P.Y, 16, y_hex ) == 0 );
44 TEST_ASSERT( mbedtls_mpi_read_string( &P.Z, 16, z_hex ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010045
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020046 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &P ) == ret );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010047
Paul Bakkerbd51b262014-07-10 15:26:12 +020048exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020049 mbedtls_ecp_group_free( &grp );
50 mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010051}
52/* END_CASE */
53
Manuel Pégourié-Gonnard4b9c51e2017-04-20 15:50:26 +020054/* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE */
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +010055void ecp_test_vect_restart( int id,
56 char *dA_str, char *xA_str, char *yA_str,
57 char *dB_str, char *xZ_str, char *yZ_str,
58 int max_ops, int min_restarts, int max_restarts )
59{
60 /*
61 * Test for early restart. Based on test vectors like ecp_test_vect(),
62 * but for the sake of simplicity only does half of each side. It's
63 * important to test both base point and random point, though, as memory
64 * management is different in each case.
65 *
66 * Don't try using too precise bounds for restarts as the exact number
67 * will depend on settings such as MBEDTLS_ECP_FIXED_POINT_OPTIM and
68 * MBEDTLS_ECP_WINDOW_SIZE, as well as implementation details that may
69 * change in the future. A factor 2 is a minimum safety margin.
70 *
71 * For reference, with mbed TLS 2.4 and default settings, for P-256:
Manuel Pégourié-Gonnard9c5c78f2017-03-20 14:13:07 +010072 * - Random point mult: ~3250M
73 * - Cold base point mult: ~3300M
74 * - Hot base point mult: ~1100M
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +010075 * With MBEDTLS_ECP_WINDOW_SIZE set to 2 (minimum):
Manuel Pégourié-Gonnard9c5c78f2017-03-20 14:13:07 +010076 * - Random point mult: ~3850M
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +010077 */
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +020078 mbedtls_ecp_restart_ctx ctx;
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +010079 mbedtls_ecp_group grp;
80 mbedtls_ecp_point R;
81 mbedtls_mpi dA, xA, yA, dB, xZ, yZ;
82 int cnt_restarts;
83 int ret;
84
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +020085 mbedtls_ecp_restart_init( &ctx );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +010086 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
87 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); mbedtls_mpi_init( &yA );
88 mbedtls_mpi_init( &dB ); mbedtls_mpi_init( &xZ ); mbedtls_mpi_init( &yZ );
89
90 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
91
92 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_str ) == 0 );
93 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_str ) == 0 );
94 TEST_ASSERT( mbedtls_mpi_read_string( &yA, 16, yA_str ) == 0 );
95
96 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_str ) == 0 );
97 TEST_ASSERT( mbedtls_mpi_read_string( &xZ, 16, xZ_str ) == 0 );
98 TEST_ASSERT( mbedtls_mpi_read_string( &yZ, 16, yZ_str ) == 0 );
99
100 mbedtls_ecp_set_max_ops( (unsigned) max_ops );
101
102 /* Base point case */
103 cnt_restarts = 0;
104 do {
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +0200105 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dA, &grp.G, NULL, NULL, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200106 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100107
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200108 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100109 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
110 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yA ) == 0 );
111
112 TEST_ASSERT( cnt_restarts >= min_restarts );
113 TEST_ASSERT( cnt_restarts <= max_restarts );
114
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100115 /* Non-base point case */
116 cnt_restarts = 0;
117 do {
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +0200118 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dB, &R, NULL, NULL, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200119 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100120
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200121 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100122 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
123 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
124
125 TEST_ASSERT( cnt_restarts >= min_restarts );
126 TEST_ASSERT( cnt_restarts <= max_restarts );
127
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200128 /* Do we leak memory when aborting an operation?
129 * This test only makes sense when we actually restart */
130 if( min_restarts > 0 )
131 {
132 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dB, &R, NULL, NULL, &ctx );
133 TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
134 }
Manuel Pégourié-Gonnard77af79a2017-03-14 10:58:00 +0100135
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100136exit:
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +0200137 mbedtls_ecp_restart_free( &ctx );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100138 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
139 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); mbedtls_mpi_free( &yA );
140 mbedtls_mpi_free( &dB ); mbedtls_mpi_free( &xZ ); mbedtls_mpi_free( &yZ );
141}
142/* END_CASE */
143
Manuel Pégourié-Gonnard4b9c51e2017-04-20 15:50:26 +0200144/* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE */
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200145void ecp_muladd_restart( int id, char *xR_str, char *yR_str,
146 char *u1_str, char *u2_str,
147 char *xQ_str, char *yQ_str,
148 int max_ops, int min_restarts, int max_restarts )
149{
150 /*
151 * Compute R = u1 * G + u2 * Q
152 * (test vectors mostly taken from ECDSA intermediate results)
153 *
154 * See comments at the top of ecp_test_vect_restart()
155 */
156 mbedtls_ecp_restart_ctx ctx;
157 mbedtls_ecp_group grp;
158 mbedtls_ecp_point R, Q;
159 mbedtls_mpi u1, u2, xR, yR;
160 int cnt_restarts;
161 int ret;
162
163 mbedtls_ecp_restart_init( &ctx );
164 mbedtls_ecp_group_init( &grp );
165 mbedtls_ecp_point_init( &R );
166 mbedtls_ecp_point_init( &Q );
167 mbedtls_mpi_init( &u1 ); mbedtls_mpi_init( &u2 );
168 mbedtls_mpi_init( &xR ); mbedtls_mpi_init( &yR );
169
170 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
171
172 TEST_ASSERT( mbedtls_mpi_read_string( &u1, 16, u1_str ) == 0 );
173 TEST_ASSERT( mbedtls_mpi_read_string( &u2, 16, u2_str ) == 0 );
174 TEST_ASSERT( mbedtls_mpi_read_string( &xR, 16, xR_str ) == 0 );
175 TEST_ASSERT( mbedtls_mpi_read_string( &yR, 16, yR_str ) == 0 );
176
177 TEST_ASSERT( mbedtls_mpi_read_string( &Q.X, 16, xQ_str ) == 0 );
178 TEST_ASSERT( mbedtls_mpi_read_string( &Q.Y, 16, yQ_str ) == 0 );
179 TEST_ASSERT( mbedtls_mpi_lset( &Q.Z, 1 ) == 0 );
180
181 mbedtls_ecp_set_max_ops( (unsigned) max_ops );
182
183 cnt_restarts = 0;
184 do {
185 ret = mbedtls_ecp_muladd_restartable( &grp, &R,
186 &u1, &grp.G, &u2, &Q, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200187 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200188
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200189 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200190 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xR ) == 0 );
191 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yR ) == 0 );
192
193 TEST_ASSERT( cnt_restarts >= min_restarts );
194 TEST_ASSERT( cnt_restarts <= max_restarts );
195
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200196 /* Do we leak memory when aborting an operation?
197 * This test only makes sense when we actually restart */
198 if( min_restarts > 0 )
199 {
200 ret = mbedtls_ecp_muladd_restartable( &grp, &R,
201 &u1, &grp.G, &u2, &Q, &ctx );
202 TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
203 }
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200204
205exit:
206 mbedtls_ecp_restart_free( &ctx );
207 mbedtls_ecp_group_free( &grp );
208 mbedtls_ecp_point_free( &R );
209 mbedtls_ecp_point_free( &Q );
210 mbedtls_mpi_free( &u1 ); mbedtls_mpi_free( &u2 );
211 mbedtls_mpi_free( &xR ); mbedtls_mpi_free( &yR );
212}
213/* END_CASE */
214
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100215/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +0200216void ecp_test_vect( int id, char *dA_str, char *xA_str, char *yA_str,
217 char *dB_str, char *xB_str, char *yB_str, char *xZ_str,
218 char *yZ_str )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100219{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200220 mbedtls_ecp_group grp;
221 mbedtls_ecp_point R;
222 mbedtls_mpi dA, xA, yA, dB, xB, yB, xZ, yZ;
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200223 rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100224
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200225 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
226 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); mbedtls_mpi_init( &yA ); mbedtls_mpi_init( &dB );
227 mbedtls_mpi_init( &xB ); mbedtls_mpi_init( &yB ); mbedtls_mpi_init( &xZ ); mbedtls_mpi_init( &yZ );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200228 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100229
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200230 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100231
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200232 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100233
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200234 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_str ) == 0 );
235 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_str ) == 0 );
236 TEST_ASSERT( mbedtls_mpi_read_string( &yA, 16, yA_str ) == 0 );
237 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_str ) == 0 );
238 TEST_ASSERT( mbedtls_mpi_read_string( &xB, 16, xB_str ) == 0 );
239 TEST_ASSERT( mbedtls_mpi_read_string( &yB, 16, yB_str ) == 0 );
240 TEST_ASSERT( mbedtls_mpi_read_string( &xZ, 16, xZ_str ) == 0 );
241 TEST_ASSERT( mbedtls_mpi_read_string( &yZ, 16, yZ_str ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100242
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200243 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G,
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200244 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200245 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
246 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yA ) == 0 );
247 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
248 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R, NULL, NULL ) == 0 );
249 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
250 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
251 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100252
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200253 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
254 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 );
255 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yB ) == 0 );
256 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
257 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R,
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200258 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200259 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
260 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
261 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100262
Paul Bakkerbd51b262014-07-10 15:26:12 +0200263exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200264 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
265 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); mbedtls_mpi_free( &yA ); mbedtls_mpi_free( &dB );
266 mbedtls_mpi_free( &xB ); mbedtls_mpi_free( &yB ); mbedtls_mpi_free( &xZ ); mbedtls_mpi_free( &yZ );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100267}
Paul Bakker33b43f12013-08-20 11:48:36 +0200268/* END_CASE */
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100269
Paul Bakker33b43f12013-08-20 11:48:36 +0200270/* BEGIN_CASE */
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100271void ecp_test_vec_x( int id, char *dA_hex, char *xA_hex,
272 char *dB_hex, char *xB_hex, char *xS_hex )
273{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200274 mbedtls_ecp_group grp;
275 mbedtls_ecp_point R;
276 mbedtls_mpi dA, xA, dB, xB, xS;
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100277 rnd_pseudo_info rnd_info;
278
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200279 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
280 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA );
281 mbedtls_mpi_init( &dB ); mbedtls_mpi_init( &xB );
282 mbedtls_mpi_init( &xS );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100283 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
284
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200285 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100286
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200287 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100288
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200289 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_hex ) == 0 );
290 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_hex ) == 0 );
291 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_hex ) == 0 );
292 TEST_ASSERT( mbedtls_mpi_read_string( &xB, 16, xB_hex ) == 0 );
293 TEST_ASSERT( mbedtls_mpi_read_string( &xS, 16, xS_hex ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100294
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200295 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G,
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100296 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200297 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
298 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100299
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200300 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R,
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100301 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200302 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
303 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100304
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200305 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
306 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
307 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100308
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200309 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R, NULL, NULL ) == 0 );
310 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
311 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100312
Paul Bakkerbd51b262014-07-10 15:26:12 +0200313exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200314 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
315 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA );
316 mbedtls_mpi_free( &dB ); mbedtls_mpi_free( &xB );
317 mbedtls_mpi_free( &xS );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100318}
319/* END_CASE */
320
321/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +0200322void ecp_fast_mod( int id, char *N_str )
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100323{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200324 mbedtls_ecp_group grp;
325 mbedtls_mpi N, R;
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100326
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200327 mbedtls_mpi_init( &N ); mbedtls_mpi_init( &R );
328 mbedtls_ecp_group_init( &grp );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100329
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200330 TEST_ASSERT( mbedtls_mpi_read_string( &N, 16, N_str ) == 0 );
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200331 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde783f062013-10-21 14:52:21 +0200332 TEST_ASSERT( grp.modp != NULL );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100333
334 /*
335 * Store correct result before we touch N
336 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200337 TEST_ASSERT( mbedtls_mpi_mod_mpi( &R, &N, &grp.P ) == 0 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100338
339 TEST_ASSERT( grp.modp( &N ) == 0 );
Manuel Pégourié-Gonnardc0696c22015-06-18 16:47:17 +0200340 TEST_ASSERT( mbedtls_mpi_bitlen( &N ) <= grp.pbits + 3 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100341
342 /*
Paul Bakkerd8b0c5e2014-04-11 15:31:33 +0200343 * Use mod rather than addition/subtraction in case previous test fails
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100344 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200345 TEST_ASSERT( mbedtls_mpi_mod_mpi( &N, &N, &grp.P ) == 0 );
346 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &N, &R ) == 0 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100347
Paul Bakkerbd51b262014-07-10 15:26:12 +0200348exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200349 mbedtls_mpi_free( &N ); mbedtls_mpi_free( &R );
350 mbedtls_ecp_group_free( &grp );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100351}
Paul Bakker33b43f12013-08-20 11:48:36 +0200352/* END_CASE */
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100353
Paul Bakker33b43f12013-08-20 11:48:36 +0200354/* BEGIN_CASE */
355void ecp_write_binary( int id, char *x, char *y, char *z, int format,
356 char *out, int blen, int ret )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100357{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200358 mbedtls_ecp_group grp;
359 mbedtls_ecp_point P;
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100360 unsigned char buf[256], str[512];
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100361 size_t olen;
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100362
363 memset( buf, 0, sizeof( buf ) );
364 memset( str, 0, sizeof( str ) );
365
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200366 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100367
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200368 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100369
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200370 TEST_ASSERT( mbedtls_mpi_read_string( &P.X, 16, x ) == 0 );
371 TEST_ASSERT( mbedtls_mpi_read_string( &P.Y, 16, y ) == 0 );
372 TEST_ASSERT( mbedtls_mpi_read_string( &P.Z, 16, z ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100373
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200374 TEST_ASSERT( mbedtls_ecp_point_write_binary( &grp, &P, format,
Paul Bakker33b43f12013-08-20 11:48:36 +0200375 &olen, buf, blen ) == ret );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100376
Paul Bakker33b43f12013-08-20 11:48:36 +0200377 if( ret == 0 )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100378 {
Manuel Pégourié-Gonnard37d218a2012-11-24 15:19:55 +0100379 hexify( str, buf, olen );
Paul Bakker33b43f12013-08-20 11:48:36 +0200380 TEST_ASSERT( strcasecmp( (char *) str, out ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100381 }
382
Paul Bakkerbd51b262014-07-10 15:26:12 +0200383exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200384 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100385}
Paul Bakker33b43f12013-08-20 11:48:36 +0200386/* END_CASE */
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100387
Paul Bakker33b43f12013-08-20 11:48:36 +0200388/* BEGIN_CASE */
389void ecp_read_binary( int id, char *input, char *x, char *y, char *z,
390 int ret )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100391{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200392 mbedtls_ecp_group grp;
393 mbedtls_ecp_point P;
394 mbedtls_mpi X, Y, Z;
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100395 int ilen;
396 unsigned char buf[256];
397
398 memset( buf, 0, sizeof( buf ) );
399
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200400 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
401 mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100402
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200403 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100404
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200405 TEST_ASSERT( mbedtls_mpi_read_string( &X, 16, x ) == 0 );
406 TEST_ASSERT( mbedtls_mpi_read_string( &Y, 16, y ) == 0 );
407 TEST_ASSERT( mbedtls_mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100408
Paul Bakker33b43f12013-08-20 11:48:36 +0200409 ilen = unhexify( buf, input );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100410
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200411 TEST_ASSERT( mbedtls_ecp_point_read_binary( &grp, &P, buf, ilen ) == ret );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100412
Paul Bakker33b43f12013-08-20 11:48:36 +0200413 if( ret == 0 )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100414 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200415 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 );
416 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 );
417 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100418 }
419
Paul Bakkerbd51b262014-07-10 15:26:12 +0200420exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200421 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
422 mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100423}
Paul Bakker33b43f12013-08-20 11:48:36 +0200424/* END_CASE */
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100425
Paul Bakker33b43f12013-08-20 11:48:36 +0200426/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200427void mbedtls_ecp_tls_read_point( int id, char *input, char *x, char *y, char *z,
Paul Bakker33b43f12013-08-20 11:48:36 +0200428 int ret )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100429{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200430 mbedtls_ecp_group grp;
431 mbedtls_ecp_point P;
432 mbedtls_mpi X, Y, Z;
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100433 size_t ilen;
434 unsigned char buf[256];
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100435 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100436
437 memset( buf, 0, sizeof( buf ) );
438
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200439 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
440 mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100441
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200442 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100443
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200444 TEST_ASSERT( mbedtls_mpi_read_string( &X, 16, x ) == 0 );
445 TEST_ASSERT( mbedtls_mpi_read_string( &Y, 16, y ) == 0 );
446 TEST_ASSERT( mbedtls_mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100447
Paul Bakker33b43f12013-08-20 11:48:36 +0200448 ilen = unhexify( buf, input );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100449
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200450 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &P, &vbuf, ilen ) == ret );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100451
Paul Bakker33b43f12013-08-20 11:48:36 +0200452 if( ret == 0 )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100453 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200454 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 );
455 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 );
456 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100457 TEST_ASSERT( *vbuf == 0x00 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100458 }
459
Paul Bakkerbd51b262014-07-10 15:26:12 +0200460exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200461 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
462 mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100463}
Paul Bakker33b43f12013-08-20 11:48:36 +0200464/* END_CASE */
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100465
Paul Bakker33b43f12013-08-20 11:48:36 +0200466/* BEGIN_CASE */
467void ecp_tls_write_read_point( int id )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100468{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200469 mbedtls_ecp_group grp;
470 mbedtls_ecp_point pt;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100471 unsigned char buf[256];
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100472 const unsigned char *vbuf;
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100473 size_t olen;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100474
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200475 mbedtls_ecp_group_init( &grp );
476 mbedtls_ecp_point_init( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100477
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200478 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100479
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100480 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200481 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G,
482 MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
483 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen )
484 == MBEDTLS_ERR_ECP_FEATURE_UNAVAILABLE );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100485 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100486
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100487 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200488 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G,
489 MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
490 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
491 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.X, &pt.X ) == 0 );
492 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Y, &pt.Y ) == 0 );
493 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Z, &pt.Z ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100494 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100495
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100496 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200497 TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 );
498 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt,
499 MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
500 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
501 TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100502 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100503
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100504 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200505 TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 );
506 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt,
507 MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
508 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
509 TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100510 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100511
Paul Bakkerbd51b262014-07-10 15:26:12 +0200512exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200513 mbedtls_ecp_group_free( &grp );
514 mbedtls_ecp_point_free( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100515}
Paul Bakker33b43f12013-08-20 11:48:36 +0200516/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100517
Paul Bakker33b43f12013-08-20 11:48:36 +0200518/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200519void mbedtls_ecp_tls_read_group( char *record, int result, int bits )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100520{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200521 mbedtls_ecp_group grp;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100522 unsigned char buf[10];
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100523 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100524 int len, ret;
525
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200526 mbedtls_ecp_group_init( &grp );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100527 memset( buf, 0x00, sizeof( buf ) );
528
Paul Bakker33b43f12013-08-20 11:48:36 +0200529 len = unhexify( buf, record );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100530
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200531 ret = mbedtls_ecp_tls_read_group( &grp, &vbuf, len );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100532
Paul Bakker33b43f12013-08-20 11:48:36 +0200533 TEST_ASSERT( ret == result );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100534 if( ret == 0)
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100535 {
Manuel Pégourié-Gonnardc0696c22015-06-18 16:47:17 +0200536 TEST_ASSERT( mbedtls_mpi_bitlen( &grp.P ) == (size_t) bits );
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100537 TEST_ASSERT( *vbuf == 0x00 );
538 }
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100539
Paul Bakkerbd51b262014-07-10 15:26:12 +0200540exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200541 mbedtls_ecp_group_free( &grp );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100542}
Paul Bakker33b43f12013-08-20 11:48:36 +0200543/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100544
Paul Bakker33b43f12013-08-20 11:48:36 +0200545/* BEGIN_CASE */
546void ecp_tls_write_read_group( int id )
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100547{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200548 mbedtls_ecp_group grp1, grp2;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100549 unsigned char buf[10];
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100550 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100551 size_t len;
552 int ret;
553
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200554 mbedtls_ecp_group_init( &grp1 );
555 mbedtls_ecp_group_init( &grp2 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100556 memset( buf, 0x00, sizeof( buf ) );
557
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200558 TEST_ASSERT( mbedtls_ecp_group_load( &grp1, id ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100559
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200560 TEST_ASSERT( mbedtls_ecp_tls_write_group( &grp1, &len, buf, 10 ) == 0 );
561 ret = mbedtls_ecp_tls_read_group( &grp2, &vbuf, len );
Paul Bakker94b916c2014-04-17 16:07:20 +0200562 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100563
564 if( ret == 0 )
565 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200566 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp1.N, &grp2.N ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100567 TEST_ASSERT( grp1.id == grp2.id );
568 }
569
Paul Bakkerbd51b262014-07-10 15:26:12 +0200570exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200571 mbedtls_ecp_group_free( &grp1 );
572 mbedtls_ecp_group_free( &grp2 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100573}
Paul Bakker33b43f12013-08-20 11:48:36 +0200574/* END_CASE */
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100575
Paul Bakker33b43f12013-08-20 11:48:36 +0200576/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200577void mbedtls_ecp_check_privkey( int id, char *key_hex, int ret )
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200578{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200579 mbedtls_ecp_group grp;
580 mbedtls_mpi d;
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200581
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200582 mbedtls_ecp_group_init( &grp );
583 mbedtls_mpi_init( &d );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200584
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200585 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200586 TEST_ASSERT( mbedtls_mpi_read_string( &d, 16, key_hex ) == 0 );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200587
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200588 TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == ret );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200589
Paul Bakkerbd51b262014-07-10 15:26:12 +0200590exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200591 mbedtls_ecp_group_free( &grp );
592 mbedtls_mpi_free( &d );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200593}
Paul Bakker33b43f12013-08-20 11:48:36 +0200594/* END_CASE */
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200595
Paul Bakker33b43f12013-08-20 11:48:36 +0200596/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200597void mbedtls_ecp_check_pub_priv( int id_pub, char *Qx_pub, char *Qy_pub,
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100598 int id, char *d, char *Qx, char *Qy, int ret )
599{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200600 mbedtls_ecp_keypair pub, prv;
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100601
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200602 mbedtls_ecp_keypair_init( &pub );
603 mbedtls_ecp_keypair_init( &prv );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100604
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200605 if( id_pub != MBEDTLS_ECP_DP_NONE )
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200606 TEST_ASSERT( mbedtls_ecp_group_load( &pub.grp, id_pub ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200607 TEST_ASSERT( mbedtls_ecp_point_read_string( &pub.Q, 16, Qx_pub, Qy_pub ) == 0 );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100608
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200609 if( id != MBEDTLS_ECP_DP_NONE )
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200610 TEST_ASSERT( mbedtls_ecp_group_load( &prv.grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200611 TEST_ASSERT( mbedtls_ecp_point_read_string( &prv.Q, 16, Qx, Qy ) == 0 );
612 TEST_ASSERT( mbedtls_mpi_read_string( &prv.d, 16, d ) == 0 );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100613
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200614 TEST_ASSERT( mbedtls_ecp_check_pub_priv( &pub, &prv ) == ret );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100615
616exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200617 mbedtls_ecp_keypair_free( &pub );
618 mbedtls_ecp_keypair_free( &prv );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100619}
620/* END_CASE */
621
622/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200623void mbedtls_ecp_gen_keypair( int id )
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100624{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200625 mbedtls_ecp_group grp;
626 mbedtls_ecp_point Q;
627 mbedtls_mpi d;
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100628 rnd_pseudo_info rnd_info;
629
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200630 mbedtls_ecp_group_init( &grp );
631 mbedtls_ecp_point_init( &Q );
632 mbedtls_mpi_init( &d );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100633 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
634
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200635 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100636
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200637 TEST_ASSERT( mbedtls_ecp_gen_keypair( &grp, &d, &Q, &rnd_pseudo_rand, &rnd_info )
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100638 == 0 );
639
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200640 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &Q ) == 0 );
641 TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100642
Paul Bakkerbd51b262014-07-10 15:26:12 +0200643exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200644 mbedtls_ecp_group_free( &grp );
645 mbedtls_ecp_point_free( &Q );
646 mbedtls_mpi_free( &d );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100647}
Paul Bakker33b43f12013-08-20 11:48:36 +0200648/* END_CASE */
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100649
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100650/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200651void mbedtls_ecp_gen_key( int id )
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100652{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200653 mbedtls_ecp_keypair key;
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100654 rnd_pseudo_info rnd_info;
655
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200656 mbedtls_ecp_keypair_init( &key );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100657 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
658
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200659 TEST_ASSERT( mbedtls_ecp_gen_key( id, &key, &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100660
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200661 TEST_ASSERT( mbedtls_ecp_check_pubkey( &key.grp, &key.Q ) == 0 );
662 TEST_ASSERT( mbedtls_ecp_check_privkey( &key.grp, &key.d ) == 0 );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100663
Paul Bakkerbd51b262014-07-10 15:26:12 +0200664exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200665 mbedtls_ecp_keypair_free( &key );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100666}
667/* END_CASE */
668
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200669/* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST */
Paul Bakker33b43f12013-08-20 11:48:36 +0200670void ecp_selftest()
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100671{
Andres AG93012e82016-09-09 09:10:28 +0100672 TEST_ASSERT( mbedtls_ecp_self_test( 1 ) == 0 );
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100673}
Paul Bakker33b43f12013-08-20 11:48:36 +0200674/* END_CASE */