blob: de61022b120e0a151f23cb51eda6d745f6060474 [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/ecp.h"
Paul Bakkerdbd443d2013-08-16 13:38:47 +02003
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02004#define ECP_PF_UNKNOWN -1
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +02005
6#define ECP_PT_RESET( x ) \
7 mbedtls_ecp_point_free( x ); \
8 mbedtls_ecp_point_init( x );
Paul Bakker33b43f12013-08-20 11:48:36 +02009/* END_HEADER */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010010
Paul Bakker33b43f12013-08-20 11:48:36 +020011/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020012 * depends_on:MBEDTLS_ECP_C
Paul Bakker33b43f12013-08-20 11:48:36 +020013 * END_DEPENDENCIES
14 */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010015
Hanno Becker57b684f2018-12-18 12:50:02 +000016/* BEGIN_CASE */
17void ecp_valid_param( )
18{
Hanno Becker807c1072018-12-18 23:45:14 +000019 TEST_VALID_PARAM( mbedtls_ecp_group_free( NULL ) );
Hanno Becker57b684f2018-12-18 12:50:02 +000020 TEST_VALID_PARAM( mbedtls_ecp_keypair_free( NULL ) );
21 TEST_VALID_PARAM( mbedtls_ecp_point_free( NULL ) );
22
23#if defined(MBEDTLS_ECP_RESTARTABLE)
24 TEST_VALID_PARAM( mbedtls_ecp_restart_free( NULL ) );
25#endif /* MBEDTLS_ECP_RESTARTABLE */
26
27exit:
28 return;
29}
30/* END_CASE */
31
Hanno Becker12dff032018-12-14 15:08:13 +000032/* BEGIN_CASE depends_on:MBEDTLS_CHECK_PARAMS:!MBEDTLS_PARAM_FAILED_ALT */
33void ecp_invalid_param( )
34{
35 mbedtls_ecp_group grp;
36 mbedtls_ecp_keypair kp;
37 mbedtls_ecp_point P;
38 mbedtls_mpi m;
39 const char *x = "deadbeef";
40 int valid_fmt = MBEDTLS_ECP_PF_UNCOMPRESSED;
41 int invalid_fmt = 42;
42 size_t olen;
43 unsigned char buf[42] = { 0 };
44 const unsigned char *null_buf = NULL;
45 mbedtls_ecp_group_id valid_group = MBEDTLS_ECP_DP_SECP192R1;
Hanno Becker0a4fa9b2018-12-18 23:45:29 +000046 mbedtls_ecp_restart_ctx restart_ctx;
Hanno Becker12dff032018-12-14 15:08:13 +000047
48 TEST_INVALID_PARAM( mbedtls_ecp_point_init( NULL ) );
49 TEST_INVALID_PARAM( mbedtls_ecp_keypair_init( NULL ) );
Hanno Becker807c1072018-12-18 23:45:14 +000050 TEST_INVALID_PARAM( mbedtls_ecp_group_init( NULL ) );
Hanno Becker12dff032018-12-14 15:08:13 +000051
Hanno Becker12dff032018-12-14 15:08:13 +000052#if defined(MBEDTLS_ECP_RESTARTABLE)
53 TEST_INVALID_PARAM( mbedtls_ecp_restart_init( NULL ) );
Hanno Becker0a4fa9b2018-12-18 23:45:29 +000054 TEST_INVALID_PARAM( mbedtls_ecp_check_budget( NULL, &restart_ctx, 42 ) );
Hanno Becker12dff032018-12-14 15:08:13 +000055#endif /* MBEDTLS_ECP_RESTARTABLE */
56
57 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
58 mbedtls_ecp_copy( NULL, &P ) );
59 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
60 mbedtls_ecp_copy( &P, NULL ) );
61
62 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
63 mbedtls_ecp_group_copy( NULL, &grp ) );
64 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
65 mbedtls_ecp_group_copy( &grp, NULL ) );
66
67 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
68 mbedtls_ecp_set_zero( NULL ) );
69 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
70 mbedtls_ecp_is_zero( NULL ) );
71
72 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
73 mbedtls_ecp_point_cmp( NULL, &P ) );
74 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
75 mbedtls_ecp_point_cmp( &P, NULL ) );
76
77 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
78 mbedtls_ecp_point_read_string( NULL, 2,
79 x, x ) );
80 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
81 mbedtls_ecp_point_read_string( &P, 2,
82 NULL, x ) );
83 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
84 mbedtls_ecp_point_read_string( &P, 2,
85 x, NULL ) );
86
87 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
88 mbedtls_ecp_point_write_binary( NULL, &P,
89 valid_fmt,
90 &olen,
91 buf, sizeof( buf ) ) );
92 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
93 mbedtls_ecp_point_write_binary( &grp, NULL,
94 valid_fmt,
95 &olen,
96 buf, sizeof( buf ) ) );
97 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
98 mbedtls_ecp_point_write_binary( &grp, &P,
99 invalid_fmt,
100 &olen,
101 buf, sizeof( buf ) ) );
102 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
103 mbedtls_ecp_point_write_binary( &grp, &P,
104 valid_fmt,
105 NULL,
106 buf, sizeof( buf ) ) );
107 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
108 mbedtls_ecp_point_write_binary( &grp, &P,
109 valid_fmt,
110 &olen,
111 NULL, sizeof( buf ) ) );
112
113 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
114 mbedtls_ecp_point_read_binary( NULL, &P, buf,
115 sizeof( buf ) ) );
116 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
117 mbedtls_ecp_point_read_binary( &grp, NULL, buf,
118 sizeof( buf ) ) );
119 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
120 mbedtls_ecp_point_read_binary( &grp, &P, NULL,
121 sizeof( buf ) ) );
122
123 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
124 mbedtls_ecp_tls_read_point( NULL, &P,
125 (const unsigned char **) &buf,
126 sizeof( buf ) ) );
127 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
128 mbedtls_ecp_tls_read_point( &grp, NULL,
129 (const unsigned char **) &buf,
130 sizeof( buf ) ) );
131 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
132 mbedtls_ecp_tls_read_point( &grp, &P, &null_buf,
133 sizeof( buf ) ) );
134 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
135 mbedtls_ecp_tls_read_point( &grp, &P, NULL,
136 sizeof( buf ) ) );
137
138 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
139 mbedtls_ecp_tls_write_point( NULL, &P,
140 valid_fmt,
141 &olen,
142 buf,
143 sizeof( buf ) ) );
144 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
145 mbedtls_ecp_tls_write_point( &grp, NULL,
146 valid_fmt,
147 &olen,
148 buf,
149 sizeof( buf ) ) );
150 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
151 mbedtls_ecp_tls_write_point( &grp, &P,
152 invalid_fmt,
153 &olen,
154 buf,
155 sizeof( buf ) ) );
156 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
157 mbedtls_ecp_tls_write_point( &grp, &P,
158 valid_fmt,
159 NULL,
160 buf,
161 sizeof( buf ) ) );
162 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
163 mbedtls_ecp_tls_write_point( &grp, &P,
164 valid_fmt,
165 &olen,
166 NULL,
167 sizeof( buf ) ) );
168
169 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
170 mbedtls_ecp_group_load( NULL, valid_group ) );
171
172 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
173 mbedtls_ecp_tls_read_group( NULL,
174 (const unsigned char **) &buf,
175 sizeof( buf ) ) );
176 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
177 mbedtls_ecp_tls_read_group( &grp, NULL,
178 sizeof( buf ) ) );
179 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
180 mbedtls_ecp_tls_read_group( &grp, &null_buf,
181 sizeof( buf ) ) );
182
183 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
184 mbedtls_ecp_tls_read_group_id( NULL,
185 (const unsigned char **) &buf,
186 sizeof( buf ) ) );
187 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
188 mbedtls_ecp_tls_read_group_id( &valid_group, NULL,
189 sizeof( buf ) ) );
190 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
191 mbedtls_ecp_tls_read_group_id( &valid_group,
192 &null_buf,
193 sizeof( buf ) ) );
194
195 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
196 mbedtls_ecp_tls_write_group( NULL, &olen,
197 buf, sizeof( buf ) ) );
198 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
199 mbedtls_ecp_tls_write_group( &grp, NULL,
200 buf, sizeof( buf ) ) );
201 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
202 mbedtls_ecp_tls_write_group( &grp, &olen,
203 NULL, sizeof( buf ) ) );
204
205 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
206 mbedtls_ecp_mul( NULL, &P, &m, &P,
207 rnd_std_rand, NULL ) );
208 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
209 mbedtls_ecp_mul( &grp, NULL, &m, &P,
210 rnd_std_rand, NULL ) );
211 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
212 mbedtls_ecp_mul( &grp, &P, NULL, &P,
213 rnd_std_rand, NULL ) );
214 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
215 mbedtls_ecp_mul( &grp, &P, &m, NULL,
216 rnd_std_rand, NULL ) );
217
218 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
219 mbedtls_ecp_mul_restartable( NULL, &P, &m, &P,
220 rnd_std_rand, NULL , NULL ) );
221 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
222 mbedtls_ecp_mul_restartable( &grp, NULL, &m, &P,
223 rnd_std_rand, NULL , NULL ) );
224 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
225 mbedtls_ecp_mul_restartable( &grp, &P, NULL, &P,
226 rnd_std_rand, NULL , NULL ) );
227 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
228 mbedtls_ecp_mul_restartable( &grp, &P, &m, NULL,
229 rnd_std_rand, NULL , NULL ) );
230
231 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
232 mbedtls_ecp_muladd( NULL, &P, &m, &P,
233 &m, &P ) );
234 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
235 mbedtls_ecp_muladd( &grp, NULL, &m, &P,
236 &m, &P ) );
237 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
238 mbedtls_ecp_muladd( &grp, &P, NULL, &P,
239 &m, &P ) );
240 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
241 mbedtls_ecp_muladd( &grp, &P, &m, NULL,
242 &m, &P ) );
243 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
244 mbedtls_ecp_muladd( &grp, &P, &m, &P,
245 NULL, &P ) );
246 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
247 mbedtls_ecp_muladd( &grp, &P, &m, &P,
248 &m, NULL ) );
249
250 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
251 mbedtls_ecp_muladd_restartable( NULL, &P, &m, &P,
252 &m, &P, NULL ) );
253 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
254 mbedtls_ecp_muladd_restartable( &grp, NULL, &m, &P,
255 &m, &P, NULL ) );
256 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
257 mbedtls_ecp_muladd_restartable( &grp, &P, NULL, &P,
258 &m, &P, NULL ) );
259 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
260 mbedtls_ecp_muladd_restartable( &grp, &P, &m, NULL,
261 &m, &P, NULL ) );
262 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
263 mbedtls_ecp_muladd_restartable( &grp, &P, &m, &P,
264 NULL, &P, NULL ) );
265 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
266 mbedtls_ecp_muladd_restartable( &grp, &P, &m, &P,
267 &m, NULL, NULL ) );
268
269 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
270 mbedtls_ecp_check_pubkey( NULL, &P ) );
271 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
272 mbedtls_ecp_check_pubkey( &grp, NULL ) );
273
274 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
275 mbedtls_ecp_check_privkey( NULL, &m ) );
276 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
277 mbedtls_ecp_check_privkey( &grp, NULL ) );
278
279 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
280 mbedtls_ecp_gen_keypair_base( NULL, &P,
281 &m, &P,
282 rnd_std_rand,
283 NULL ) );
284 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
285 mbedtls_ecp_gen_keypair_base( &grp, NULL,
286 &m, &P,
287 rnd_std_rand,
288 NULL ) );
289 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
290 mbedtls_ecp_gen_keypair_base( &grp, &P,
291 NULL, &P,
292 rnd_std_rand,
293 NULL ) );
294 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
295 mbedtls_ecp_gen_keypair_base( &grp, &P,
296 &m, NULL,
297 rnd_std_rand,
298 NULL ) );
299 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
300 mbedtls_ecp_gen_keypair_base( &grp, &P,
301 &m, &P,
302 NULL,
303 NULL ) );
304
305 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
306 mbedtls_ecp_gen_keypair( NULL,
307 &m, &P,
308 rnd_std_rand,
309 NULL ) );
310 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
311 mbedtls_ecp_gen_keypair( &grp,
312 NULL, &P,
313 rnd_std_rand,
314 NULL ) );
315 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
316 mbedtls_ecp_gen_keypair( &grp,
317 &m, NULL,
318 rnd_std_rand,
319 NULL ) );
320 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
321 mbedtls_ecp_gen_keypair( &grp,
322 &m, &P,
323 NULL,
324 NULL ) );
325
326 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
327 mbedtls_ecp_gen_key( valid_group, NULL,
328 rnd_std_rand, NULL ) );
329 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
330 mbedtls_ecp_gen_key( valid_group, &kp,
331 NULL, NULL ) );
332
333exit:
334 return;
335}
336/* END_CASE */
337
Paul Bakker33b43f12013-08-20 11:48:36 +0200338/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100339void mbedtls_ecp_curve_info( int id, int tls_id, int size, char * name )
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +0100340{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200341 const mbedtls_ecp_curve_info *by_id, *by_tls, *by_name;
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +0100342
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200343 by_id = mbedtls_ecp_curve_info_from_grp_id( id );
344 by_tls = mbedtls_ecp_curve_info_from_tls_id( tls_id );
345 by_name = mbedtls_ecp_curve_info_from_name( name );
Paul Bakker94b916c2014-04-17 16:07:20 +0200346 TEST_ASSERT( by_id != NULL );
347 TEST_ASSERT( by_tls != NULL );
348 TEST_ASSERT( by_name != NULL );
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +0100349
350 TEST_ASSERT( by_id == by_tls );
351 TEST_ASSERT( by_id == by_name );
352
Manuel Pégourié-Gonnard797f48a2015-06-18 15:45:05 +0200353 TEST_ASSERT( by_id->bit_size == size );
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +0100354}
355/* END_CASE */
356
357/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100358void ecp_check_pub( int grp_id, char * x_hex, char * y_hex, char * z_hex,
359 int ret )
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100360{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200361 mbedtls_ecp_group grp;
362 mbedtls_ecp_point P;
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100363
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200364 mbedtls_ecp_group_init( &grp );
365 mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100366
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200367 TEST_ASSERT( mbedtls_ecp_group_load( &grp, grp_id ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100368
Janos Follath28fff142017-01-27 15:51:14 +0000369 TEST_ASSERT( mbedtls_mpi_read_string( &P.X, 16, x_hex ) == 0 );
370 TEST_ASSERT( mbedtls_mpi_read_string( &P.Y, 16, y_hex ) == 0 );
371 TEST_ASSERT( mbedtls_mpi_read_string( &P.Z, 16, z_hex ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100372
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200373 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &P ) == ret );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100374
Paul Bakkerbd51b262014-07-10 15:26:12 +0200375exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200376 mbedtls_ecp_group_free( &grp );
377 mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100378}
379/* END_CASE */
380
Manuel Pégourié-Gonnard4b9c51e2017-04-20 15:50:26 +0200381/* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE */
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100382void ecp_test_vect_restart( int id,
383 char *dA_str, char *xA_str, char *yA_str,
384 char *dB_str, char *xZ_str, char *yZ_str,
385 int max_ops, int min_restarts, int max_restarts )
386{
387 /*
388 * Test for early restart. Based on test vectors like ecp_test_vect(),
389 * but for the sake of simplicity only does half of each side. It's
390 * important to test both base point and random point, though, as memory
391 * management is different in each case.
392 *
393 * Don't try using too precise bounds for restarts as the exact number
394 * will depend on settings such as MBEDTLS_ECP_FIXED_POINT_OPTIM and
395 * MBEDTLS_ECP_WINDOW_SIZE, as well as implementation details that may
396 * change in the future. A factor 2 is a minimum safety margin.
397 *
398 * For reference, with mbed TLS 2.4 and default settings, for P-256:
Manuel Pégourié-Gonnard9c5c78f2017-03-20 14:13:07 +0100399 * - Random point mult: ~3250M
400 * - Cold base point mult: ~3300M
401 * - Hot base point mult: ~1100M
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100402 * With MBEDTLS_ECP_WINDOW_SIZE set to 2 (minimum):
Manuel Pégourié-Gonnard9c5c78f2017-03-20 14:13:07 +0100403 * - Random point mult: ~3850M
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100404 */
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +0200405 mbedtls_ecp_restart_ctx ctx;
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100406 mbedtls_ecp_group grp;
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200407 mbedtls_ecp_point R, P;
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100408 mbedtls_mpi dA, xA, yA, dB, xZ, yZ;
409 int cnt_restarts;
410 int ret;
411
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +0200412 mbedtls_ecp_restart_init( &ctx );
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200413 mbedtls_ecp_group_init( &grp );
414 mbedtls_ecp_point_init( &R ); mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100415 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); mbedtls_mpi_init( &yA );
416 mbedtls_mpi_init( &dB ); mbedtls_mpi_init( &xZ ); mbedtls_mpi_init( &yZ );
417
418 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
419
420 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_str ) == 0 );
421 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_str ) == 0 );
422 TEST_ASSERT( mbedtls_mpi_read_string( &yA, 16, yA_str ) == 0 );
423
424 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_str ) == 0 );
425 TEST_ASSERT( mbedtls_mpi_read_string( &xZ, 16, xZ_str ) == 0 );
426 TEST_ASSERT( mbedtls_mpi_read_string( &yZ, 16, yZ_str ) == 0 );
427
428 mbedtls_ecp_set_max_ops( (unsigned) max_ops );
429
430 /* Base point case */
431 cnt_restarts = 0;
432 do {
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200433 ECP_PT_RESET( &R );
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +0200434 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dA, &grp.G, NULL, NULL, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200435 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100436
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200437 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100438 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
439 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yA ) == 0 );
440
441 TEST_ASSERT( cnt_restarts >= min_restarts );
442 TEST_ASSERT( cnt_restarts <= max_restarts );
443
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100444 /* Non-base point case */
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200445 mbedtls_ecp_copy( &P, &R );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100446 cnt_restarts = 0;
447 do {
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200448 ECP_PT_RESET( &R );
449 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dB, &P, NULL, NULL, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200450 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100451
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200452 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100453 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
454 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
455
456 TEST_ASSERT( cnt_restarts >= min_restarts );
457 TEST_ASSERT( cnt_restarts <= max_restarts );
458
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200459 /* Do we leak memory when aborting an operation?
460 * This test only makes sense when we actually restart */
461 if( min_restarts > 0 )
462 {
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200463 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dB, &P, NULL, NULL, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200464 TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
465 }
Manuel Pégourié-Gonnard77af79a2017-03-14 10:58:00 +0100466
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100467exit:
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +0200468 mbedtls_ecp_restart_free( &ctx );
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200469 mbedtls_ecp_group_free( &grp );
470 mbedtls_ecp_point_free( &R ); mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100471 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); mbedtls_mpi_free( &yA );
472 mbedtls_mpi_free( &dB ); mbedtls_mpi_free( &xZ ); mbedtls_mpi_free( &yZ );
473}
474/* END_CASE */
475
Manuel Pégourié-Gonnard4b9c51e2017-04-20 15:50:26 +0200476/* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE */
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200477void ecp_muladd_restart( int id, char *xR_str, char *yR_str,
478 char *u1_str, char *u2_str,
479 char *xQ_str, char *yQ_str,
480 int max_ops, int min_restarts, int max_restarts )
481{
482 /*
483 * Compute R = u1 * G + u2 * Q
484 * (test vectors mostly taken from ECDSA intermediate results)
485 *
486 * See comments at the top of ecp_test_vect_restart()
487 */
488 mbedtls_ecp_restart_ctx ctx;
489 mbedtls_ecp_group grp;
490 mbedtls_ecp_point R, Q;
491 mbedtls_mpi u1, u2, xR, yR;
492 int cnt_restarts;
493 int ret;
494
495 mbedtls_ecp_restart_init( &ctx );
496 mbedtls_ecp_group_init( &grp );
497 mbedtls_ecp_point_init( &R );
498 mbedtls_ecp_point_init( &Q );
499 mbedtls_mpi_init( &u1 ); mbedtls_mpi_init( &u2 );
500 mbedtls_mpi_init( &xR ); mbedtls_mpi_init( &yR );
501
502 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
503
504 TEST_ASSERT( mbedtls_mpi_read_string( &u1, 16, u1_str ) == 0 );
505 TEST_ASSERT( mbedtls_mpi_read_string( &u2, 16, u2_str ) == 0 );
506 TEST_ASSERT( mbedtls_mpi_read_string( &xR, 16, xR_str ) == 0 );
507 TEST_ASSERT( mbedtls_mpi_read_string( &yR, 16, yR_str ) == 0 );
508
509 TEST_ASSERT( mbedtls_mpi_read_string( &Q.X, 16, xQ_str ) == 0 );
510 TEST_ASSERT( mbedtls_mpi_read_string( &Q.Y, 16, yQ_str ) == 0 );
511 TEST_ASSERT( mbedtls_mpi_lset( &Q.Z, 1 ) == 0 );
512
513 mbedtls_ecp_set_max_ops( (unsigned) max_ops );
514
515 cnt_restarts = 0;
516 do {
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200517 ECP_PT_RESET( &R );
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200518 ret = mbedtls_ecp_muladd_restartable( &grp, &R,
519 &u1, &grp.G, &u2, &Q, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200520 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200521
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200522 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200523 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xR ) == 0 );
524 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yR ) == 0 );
525
526 TEST_ASSERT( cnt_restarts >= min_restarts );
527 TEST_ASSERT( cnt_restarts <= max_restarts );
528
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200529 /* Do we leak memory when aborting an operation?
530 * This test only makes sense when we actually restart */
531 if( min_restarts > 0 )
532 {
533 ret = mbedtls_ecp_muladd_restartable( &grp, &R,
534 &u1, &grp.G, &u2, &Q, &ctx );
535 TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
536 }
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200537
538exit:
539 mbedtls_ecp_restart_free( &ctx );
540 mbedtls_ecp_group_free( &grp );
541 mbedtls_ecp_point_free( &R );
542 mbedtls_ecp_point_free( &Q );
543 mbedtls_mpi_free( &u1 ); mbedtls_mpi_free( &u2 );
544 mbedtls_mpi_free( &xR ); mbedtls_mpi_free( &yR );
545}
546/* END_CASE */
547
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100548/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100549void ecp_test_vect( int id, char * dA_str, char * xA_str, char * yA_str,
550 char * dB_str, char * xB_str, char * yB_str,
551 char * xZ_str, char * yZ_str )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100552{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200553 mbedtls_ecp_group grp;
554 mbedtls_ecp_point R;
555 mbedtls_mpi dA, xA, yA, dB, xB, yB, xZ, yZ;
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200556 rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100557
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200558 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
559 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); mbedtls_mpi_init( &yA ); mbedtls_mpi_init( &dB );
560 mbedtls_mpi_init( &xB ); mbedtls_mpi_init( &yB ); mbedtls_mpi_init( &xZ ); mbedtls_mpi_init( &yZ );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200561 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100562
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200563 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100564
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200565 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100566
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200567 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_str ) == 0 );
568 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_str ) == 0 );
569 TEST_ASSERT( mbedtls_mpi_read_string( &yA, 16, yA_str ) == 0 );
570 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_str ) == 0 );
571 TEST_ASSERT( mbedtls_mpi_read_string( &xB, 16, xB_str ) == 0 );
572 TEST_ASSERT( mbedtls_mpi_read_string( &yB, 16, yB_str ) == 0 );
573 TEST_ASSERT( mbedtls_mpi_read_string( &xZ, 16, xZ_str ) == 0 );
574 TEST_ASSERT( mbedtls_mpi_read_string( &yZ, 16, yZ_str ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100575
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200576 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G,
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200577 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200578 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
579 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yA ) == 0 );
580 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
581 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R, NULL, NULL ) == 0 );
582 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
583 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
584 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100585
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200586 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
587 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 );
588 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yB ) == 0 );
589 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
590 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R,
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200591 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200592 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
593 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
594 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100595
Paul Bakkerbd51b262014-07-10 15:26:12 +0200596exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200597 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
598 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); mbedtls_mpi_free( &yA ); mbedtls_mpi_free( &dB );
599 mbedtls_mpi_free( &xB ); mbedtls_mpi_free( &yB ); mbedtls_mpi_free( &xZ ); mbedtls_mpi_free( &yZ );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100600}
Paul Bakker33b43f12013-08-20 11:48:36 +0200601/* END_CASE */
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100602
Paul Bakker33b43f12013-08-20 11:48:36 +0200603/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100604void ecp_test_vec_x( int id, char * dA_hex, char * xA_hex, char * dB_hex,
605 char * xB_hex, char * xS_hex )
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100606{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200607 mbedtls_ecp_group grp;
608 mbedtls_ecp_point R;
609 mbedtls_mpi dA, xA, dB, xB, xS;
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100610 rnd_pseudo_info rnd_info;
611
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200612 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
613 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA );
614 mbedtls_mpi_init( &dB ); mbedtls_mpi_init( &xB );
615 mbedtls_mpi_init( &xS );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100616 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
617
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200618 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100619
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200620 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100621
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200622 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_hex ) == 0 );
623 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_hex ) == 0 );
624 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_hex ) == 0 );
625 TEST_ASSERT( mbedtls_mpi_read_string( &xB, 16, xB_hex ) == 0 );
626 TEST_ASSERT( mbedtls_mpi_read_string( &xS, 16, xS_hex ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100627
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200628 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G,
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100629 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200630 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
631 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100632
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200633 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R,
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100634 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200635 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
636 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100637
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200638 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
639 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
640 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100641
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200642 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R, NULL, NULL ) == 0 );
643 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
644 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100645
Paul Bakkerbd51b262014-07-10 15:26:12 +0200646exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200647 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
648 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA );
649 mbedtls_mpi_free( &dB ); mbedtls_mpi_free( &xB );
650 mbedtls_mpi_free( &xS );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100651}
652/* END_CASE */
653
654/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100655void ecp_fast_mod( int id, char * N_str )
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100656{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200657 mbedtls_ecp_group grp;
658 mbedtls_mpi N, R;
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100659
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200660 mbedtls_mpi_init( &N ); mbedtls_mpi_init( &R );
661 mbedtls_ecp_group_init( &grp );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100662
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200663 TEST_ASSERT( mbedtls_mpi_read_string( &N, 16, N_str ) == 0 );
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200664 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde783f062013-10-21 14:52:21 +0200665 TEST_ASSERT( grp.modp != NULL );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100666
667 /*
668 * Store correct result before we touch N
669 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200670 TEST_ASSERT( mbedtls_mpi_mod_mpi( &R, &N, &grp.P ) == 0 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100671
672 TEST_ASSERT( grp.modp( &N ) == 0 );
Manuel Pégourié-Gonnardc0696c22015-06-18 16:47:17 +0200673 TEST_ASSERT( mbedtls_mpi_bitlen( &N ) <= grp.pbits + 3 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100674
675 /*
Paul Bakkerd8b0c5e2014-04-11 15:31:33 +0200676 * Use mod rather than addition/subtraction in case previous test fails
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100677 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200678 TEST_ASSERT( mbedtls_mpi_mod_mpi( &N, &N, &grp.P ) == 0 );
679 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &N, &R ) == 0 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100680
Paul Bakkerbd51b262014-07-10 15:26:12 +0200681exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200682 mbedtls_mpi_free( &N ); mbedtls_mpi_free( &R );
683 mbedtls_ecp_group_free( &grp );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100684}
Paul Bakker33b43f12013-08-20 11:48:36 +0200685/* END_CASE */
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100686
Paul Bakker33b43f12013-08-20 11:48:36 +0200687/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100688void ecp_write_binary( int id, char * x, char * y, char * z, int format,
Azim Khan5fcca462018-06-29 11:05:32 +0100689 data_t * out, int blen, int ret )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100690{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200691 mbedtls_ecp_group grp;
692 mbedtls_ecp_point P;
Azim Khanf1aaec92017-05-30 14:23:15 +0100693 unsigned char buf[256];
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100694 size_t olen;
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100695
696 memset( buf, 0, sizeof( buf ) );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100697
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200698 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100699
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200700 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100701
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200702 TEST_ASSERT( mbedtls_mpi_read_string( &P.X, 16, x ) == 0 );
703 TEST_ASSERT( mbedtls_mpi_read_string( &P.Y, 16, y ) == 0 );
704 TEST_ASSERT( mbedtls_mpi_read_string( &P.Z, 16, z ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100705
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200706 TEST_ASSERT( mbedtls_ecp_point_write_binary( &grp, &P, format,
Paul Bakker33b43f12013-08-20 11:48:36 +0200707 &olen, buf, blen ) == ret );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100708
Paul Bakker33b43f12013-08-20 11:48:36 +0200709 if( ret == 0 )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100710 {
Azim Khand30ca132017-06-09 04:32:58 +0100711 TEST_ASSERT( hexcmp( buf, out->x, olen, out->len ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100712 }
713
Paul Bakkerbd51b262014-07-10 15:26:12 +0200714exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200715 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100716}
Paul Bakker33b43f12013-08-20 11:48:36 +0200717/* END_CASE */
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100718
Paul Bakker33b43f12013-08-20 11:48:36 +0200719/* BEGIN_CASE */
Azim Khan5fcca462018-06-29 11:05:32 +0100720void ecp_read_binary( int id, data_t * buf, char * x, char * y, char * z,
Paul Bakker33b43f12013-08-20 11:48:36 +0200721 int ret )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100722{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200723 mbedtls_ecp_group grp;
724 mbedtls_ecp_point P;
725 mbedtls_mpi X, Y, Z;
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100726
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100727
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200728 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
729 mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100730
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200731 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100732
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200733 TEST_ASSERT( mbedtls_mpi_read_string( &X, 16, x ) == 0 );
734 TEST_ASSERT( mbedtls_mpi_read_string( &Y, 16, y ) == 0 );
735 TEST_ASSERT( mbedtls_mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100736
Azim Khand30ca132017-06-09 04:32:58 +0100737 TEST_ASSERT( mbedtls_ecp_point_read_binary( &grp, &P, buf->x, buf->len ) == ret );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100738
Paul Bakker33b43f12013-08-20 11:48:36 +0200739 if( ret == 0 )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100740 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200741 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 );
742 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 );
743 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100744 }
745
Paul Bakkerbd51b262014-07-10 15:26:12 +0200746exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200747 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
748 mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100749}
Paul Bakker33b43f12013-08-20 11:48:36 +0200750/* END_CASE */
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100751
Paul Bakker33b43f12013-08-20 11:48:36 +0200752/* BEGIN_CASE */
Azim Khan5fcca462018-06-29 11:05:32 +0100753void mbedtls_ecp_tls_read_point( int id, data_t * buf, char * x, char * y,
Azim Khand30ca132017-06-09 04:32:58 +0100754 char * z, int ret )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100755{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200756 mbedtls_ecp_group grp;
757 mbedtls_ecp_point P;
758 mbedtls_mpi X, Y, Z;
Azim Khand30ca132017-06-09 04:32:58 +0100759 const unsigned char *vbuf = buf->x;
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100760
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100761
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200762 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
763 mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100764
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200765 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100766
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200767 TEST_ASSERT( mbedtls_mpi_read_string( &X, 16, x ) == 0 );
768 TEST_ASSERT( mbedtls_mpi_read_string( &Y, 16, y ) == 0 );
769 TEST_ASSERT( mbedtls_mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100770
Azim Khand30ca132017-06-09 04:32:58 +0100771 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &P, &vbuf, buf->len ) == ret );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100772
Paul Bakker33b43f12013-08-20 11:48:36 +0200773 if( ret == 0 )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100774 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200775 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 );
776 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 );
777 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 );
Azim Khand30ca132017-06-09 04:32:58 +0100778 TEST_ASSERT( (uint32_t)( vbuf - buf->x ) == buf->len );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100779 }
780
Paul Bakkerbd51b262014-07-10 15:26:12 +0200781exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200782 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
783 mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100784}
Paul Bakker33b43f12013-08-20 11:48:36 +0200785/* END_CASE */
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100786
Paul Bakker33b43f12013-08-20 11:48:36 +0200787/* BEGIN_CASE */
788void ecp_tls_write_read_point( int id )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100789{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200790 mbedtls_ecp_group grp;
791 mbedtls_ecp_point pt;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100792 unsigned char buf[256];
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100793 const unsigned char *vbuf;
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100794 size_t olen;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100795
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200796 mbedtls_ecp_group_init( &grp );
797 mbedtls_ecp_point_init( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100798
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200799 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100800
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100801 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200802 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G,
803 MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
804 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen )
805 == MBEDTLS_ERR_ECP_FEATURE_UNAVAILABLE );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100806 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100807
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100808 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200809 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G,
810 MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
811 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
812 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.X, &pt.X ) == 0 );
813 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Y, &pt.Y ) == 0 );
814 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Z, &pt.Z ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100815 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100816
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100817 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200818 TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 );
819 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt,
820 MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
821 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
822 TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100823 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100824
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100825 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200826 TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 );
827 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt,
828 MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
829 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
830 TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100831 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100832
Paul Bakkerbd51b262014-07-10 15:26:12 +0200833exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200834 mbedtls_ecp_group_free( &grp );
835 mbedtls_ecp_point_free( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100836}
Paul Bakker33b43f12013-08-20 11:48:36 +0200837/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100838
Paul Bakker33b43f12013-08-20 11:48:36 +0200839/* BEGIN_CASE */
Azim Khan5fcca462018-06-29 11:05:32 +0100840void mbedtls_ecp_tls_read_group( data_t * buf, int result, int bits,
Azim Khand30ca132017-06-09 04:32:58 +0100841 int record_len )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100842{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200843 mbedtls_ecp_group grp;
Azim Khand30ca132017-06-09 04:32:58 +0100844 const unsigned char *vbuf = buf->x;
Azim Khanf1aaec92017-05-30 14:23:15 +0100845 int ret;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100846
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200847 mbedtls_ecp_group_init( &grp );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100848
Azim Khand30ca132017-06-09 04:32:58 +0100849 ret = mbedtls_ecp_tls_read_group( &grp, &vbuf, buf->len );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100850
Paul Bakker33b43f12013-08-20 11:48:36 +0200851 TEST_ASSERT( ret == result );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100852 if( ret == 0)
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100853 {
Manuel Pégourié-Gonnardc0696c22015-06-18 16:47:17 +0200854 TEST_ASSERT( mbedtls_mpi_bitlen( &grp.P ) == (size_t) bits );
Azim Khand30ca132017-06-09 04:32:58 +0100855 TEST_ASSERT( vbuf - buf->x == record_len);
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100856 }
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100857
Paul Bakkerbd51b262014-07-10 15:26:12 +0200858exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200859 mbedtls_ecp_group_free( &grp );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100860}
Paul Bakker33b43f12013-08-20 11:48:36 +0200861/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100862
Paul Bakker33b43f12013-08-20 11:48:36 +0200863/* BEGIN_CASE */
864void ecp_tls_write_read_group( int id )
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100865{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200866 mbedtls_ecp_group grp1, grp2;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100867 unsigned char buf[10];
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100868 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100869 size_t len;
870 int ret;
871
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200872 mbedtls_ecp_group_init( &grp1 );
873 mbedtls_ecp_group_init( &grp2 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100874 memset( buf, 0x00, sizeof( buf ) );
875
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200876 TEST_ASSERT( mbedtls_ecp_group_load( &grp1, id ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100877
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200878 TEST_ASSERT( mbedtls_ecp_tls_write_group( &grp1, &len, buf, 10 ) == 0 );
879 ret = mbedtls_ecp_tls_read_group( &grp2, &vbuf, len );
Paul Bakker94b916c2014-04-17 16:07:20 +0200880 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100881
882 if( ret == 0 )
883 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200884 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp1.N, &grp2.N ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100885 TEST_ASSERT( grp1.id == grp2.id );
886 }
887
Paul Bakkerbd51b262014-07-10 15:26:12 +0200888exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200889 mbedtls_ecp_group_free( &grp1 );
890 mbedtls_ecp_group_free( &grp2 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100891}
Paul Bakker33b43f12013-08-20 11:48:36 +0200892/* END_CASE */
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100893
Paul Bakker33b43f12013-08-20 11:48:36 +0200894/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100895void mbedtls_ecp_check_privkey( int id, char * key_hex, int ret )
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200896{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200897 mbedtls_ecp_group grp;
898 mbedtls_mpi d;
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200899
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200900 mbedtls_ecp_group_init( &grp );
901 mbedtls_mpi_init( &d );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200902
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200903 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200904 TEST_ASSERT( mbedtls_mpi_read_string( &d, 16, key_hex ) == 0 );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200905
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200906 TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == ret );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200907
Paul Bakkerbd51b262014-07-10 15:26:12 +0200908exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200909 mbedtls_ecp_group_free( &grp );
910 mbedtls_mpi_free( &d );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200911}
Paul Bakker33b43f12013-08-20 11:48:36 +0200912/* END_CASE */
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200913
Paul Bakker33b43f12013-08-20 11:48:36 +0200914/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100915void mbedtls_ecp_check_pub_priv( int id_pub, char * Qx_pub, char * Qy_pub,
916 int id, char * d, char * Qx, char * Qy,
917 int ret )
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100918{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200919 mbedtls_ecp_keypair pub, prv;
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100920
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200921 mbedtls_ecp_keypair_init( &pub );
922 mbedtls_ecp_keypair_init( &prv );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100923
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200924 if( id_pub != MBEDTLS_ECP_DP_NONE )
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200925 TEST_ASSERT( mbedtls_ecp_group_load( &pub.grp, id_pub ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200926 TEST_ASSERT( mbedtls_ecp_point_read_string( &pub.Q, 16, Qx_pub, Qy_pub ) == 0 );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100927
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200928 if( id != MBEDTLS_ECP_DP_NONE )
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200929 TEST_ASSERT( mbedtls_ecp_group_load( &prv.grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200930 TEST_ASSERT( mbedtls_ecp_point_read_string( &prv.Q, 16, Qx, Qy ) == 0 );
931 TEST_ASSERT( mbedtls_mpi_read_string( &prv.d, 16, d ) == 0 );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100932
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200933 TEST_ASSERT( mbedtls_ecp_check_pub_priv( &pub, &prv ) == ret );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100934
935exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200936 mbedtls_ecp_keypair_free( &pub );
937 mbedtls_ecp_keypair_free( &prv );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100938}
939/* END_CASE */
940
941/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200942void mbedtls_ecp_gen_keypair( int id )
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100943{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200944 mbedtls_ecp_group grp;
945 mbedtls_ecp_point Q;
946 mbedtls_mpi d;
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100947 rnd_pseudo_info rnd_info;
948
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200949 mbedtls_ecp_group_init( &grp );
950 mbedtls_ecp_point_init( &Q );
951 mbedtls_mpi_init( &d );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100952 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
953
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200954 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100955
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200956 TEST_ASSERT( mbedtls_ecp_gen_keypair( &grp, &d, &Q, &rnd_pseudo_rand, &rnd_info )
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100957 == 0 );
958
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200959 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &Q ) == 0 );
960 TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100961
Paul Bakkerbd51b262014-07-10 15:26:12 +0200962exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200963 mbedtls_ecp_group_free( &grp );
964 mbedtls_ecp_point_free( &Q );
965 mbedtls_mpi_free( &d );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100966}
Paul Bakker33b43f12013-08-20 11:48:36 +0200967/* END_CASE */
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100968
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100969/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200970void mbedtls_ecp_gen_key( int id )
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100971{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200972 mbedtls_ecp_keypair key;
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100973 rnd_pseudo_info rnd_info;
974
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200975 mbedtls_ecp_keypair_init( &key );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100976 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
977
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200978 TEST_ASSERT( mbedtls_ecp_gen_key( id, &key, &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100979
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200980 TEST_ASSERT( mbedtls_ecp_check_pubkey( &key.grp, &key.Q ) == 0 );
981 TEST_ASSERT( mbedtls_ecp_check_privkey( &key.grp, &key.d ) == 0 );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100982
Paul Bakkerbd51b262014-07-10 15:26:12 +0200983exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200984 mbedtls_ecp_keypair_free( &key );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100985}
986/* END_CASE */
987
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200988/* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST */
Azim Khanf1aaec92017-05-30 14:23:15 +0100989void ecp_selftest( )
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100990{
Andres AG93012e82016-09-09 09:10:28 +0100991 TEST_ASSERT( mbedtls_ecp_self_test( 1 ) == 0 );
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100992}
Paul Bakker33b43f12013-08-20 11:48:36 +0200993/* END_CASE */