blob: 22d92b6dfe1ce8802bf93f7cf25f0aad4245a5b3 [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/ecdsa.h"
Paul Bakker33b43f12013-08-20 11:48:36 +02003/* END_HEADER */
Manuel Pégourié-Gonnardd1c71502013-01-26 19:09:07 +01004
Paul Bakker33b43f12013-08-20 11:48:36 +02005/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006 * depends_on:MBEDTLS_ECDSA_C
Paul Bakker33b43f12013-08-20 11:48:36 +02007 * END_DEPENDENCIES
8 */
Manuel Pégourié-Gonnardd1c71502013-01-26 19:09:07 +01009
Hanno Beckeraf05a902018-12-14 16:43:38 +000010/* BEGIN_CASE depends_on:MBEDTLS_CHECK_PARAMS:!MBEDTLS_PARAM_FAILED_ALT */
11void ecdsa_invalid_param( )
12{
13 mbedtls_ecdsa_context ctx;
14 mbedtls_ecp_keypair key;
15 mbedtls_ecp_group grp;
16 mbedtls_ecp_group_id valid_group = MBEDTLS_ECP_DP_SECP192R1;
17 mbedtls_ecp_point P;
18 mbedtls_md_type_t valid_md = MBEDTLS_MD_SHA256;
19 mbedtls_mpi m;
20 size_t slen;
21 unsigned char buf[42] = { 0 };
22
23 TEST_INVALID_PARAM( mbedtls_ecdsa_init( NULL ) );
24 TEST_VALID_PARAM( mbedtls_ecdsa_free( NULL ) );
25
26#if defined(MBEDTLS_ECP_RESTARTABLE)
27 TEST_INVALID_PARAM( mbedtls_ecdsa_restart_init( NULL ) );
28 TEST_VALID_PARAM( mbedtls_ecdsa_restart_free( NULL ) );
29#endif /* MBEDTLS_ECP_RESTARTABLE */
30
31 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
32 mbedtls_ecdsa_sign( NULL, &m, &m, &m,
33 buf, sizeof( buf ),
34 rnd_std_rand, NULL ) );
35 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
36 mbedtls_ecdsa_sign( &grp, NULL, &m, &m,
37 buf, sizeof( buf ),
38 rnd_std_rand, NULL ) );
39 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
40 mbedtls_ecdsa_sign( &grp, &m, NULL, &m,
41 buf, sizeof( buf ),
42 rnd_std_rand, NULL ) );
43 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
44 mbedtls_ecdsa_sign( &grp, &m, &m, NULL,
45 buf, sizeof( buf ),
46 rnd_std_rand, NULL ) );
47 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
48 mbedtls_ecdsa_sign( &grp, &m, &m, &m,
49 NULL, sizeof( buf ),
50 rnd_std_rand, NULL ) );
51 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
52 mbedtls_ecdsa_sign( &grp, &m, &m, &m,
53 buf, sizeof( buf ),
54 NULL, NULL ) );
55
56#if defined(MBEDTLS_ECDSA_DETERMINISTIC)
57 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
58 mbedtls_ecdsa_sign_det( NULL, &m, &m, &m,
59 buf, sizeof( buf ),
60 valid_md ) );
61 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
62 mbedtls_ecdsa_sign_det( &grp, NULL, &m, &m,
63 buf, sizeof( buf ),
64 valid_md ) );
65 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
66 mbedtls_ecdsa_sign_det( &grp, &m, NULL, &m,
67 buf, sizeof( buf ),
68 valid_md ) );
69 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
70 mbedtls_ecdsa_sign_det( &grp, &m, &m, NULL,
71 buf, sizeof( buf ),
72 valid_md ) );
73 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
74 mbedtls_ecdsa_sign_det( &grp, &m, &m, &m,
75 NULL, sizeof( buf ),
76 valid_md ) );
77#endif /* MBEDTLS_ECDSA_DETERMINISTIC */
78
79 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
80 mbedtls_ecdsa_verify( NULL,
81 buf, sizeof( buf ),
82 &P, &m, &m ) );
83 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
84 mbedtls_ecdsa_verify( &grp,
85 NULL, sizeof( buf ),
86 &P, &m, &m ) );
87 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
88 mbedtls_ecdsa_verify( &grp,
89 buf, sizeof( buf ),
90 NULL, &m, &m ) );
91 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
92 mbedtls_ecdsa_verify( &grp,
93 buf, sizeof( buf ),
94 &P, NULL, &m ) );
95 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
96 mbedtls_ecdsa_verify( &grp,
97 buf, sizeof( buf ),
98 &P, &m, NULL ) );
99
100 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
101 mbedtls_ecdsa_write_signature( NULL,
102 valid_md,
103 buf, sizeof( buf ),
104 buf, &slen,
105 rnd_std_rand,
106 NULL ) );
107 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
108 mbedtls_ecdsa_write_signature( &ctx,
109 valid_md,
110 NULL, sizeof( buf ),
111 buf, &slen,
112 rnd_std_rand,
113 NULL ) );
114 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
115 mbedtls_ecdsa_write_signature( &ctx,
116 valid_md,
117 buf, sizeof( buf ),
118 NULL, &slen,
119 rnd_std_rand,
120 NULL ) );
121 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
122 mbedtls_ecdsa_write_signature( &ctx,
123 valid_md,
124 buf, sizeof( buf ),
125 buf, NULL,
126 rnd_std_rand,
127 NULL ) );
128
129 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
130 mbedtls_ecdsa_write_signature_restartable( NULL,
131 valid_md,
132 buf, sizeof( buf ),
133 buf, &slen,
134 rnd_std_rand,
135 NULL, NULL ) );
136 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
137 mbedtls_ecdsa_write_signature_restartable( &ctx,
138 valid_md,
139 NULL, sizeof( buf ),
140 buf, &slen,
141 rnd_std_rand,
142 NULL, NULL ) );
143 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
144 mbedtls_ecdsa_write_signature_restartable( &ctx,
145 valid_md,
146 buf, sizeof( buf ),
147 NULL, &slen,
148 rnd_std_rand,
149 NULL, NULL ) );
150 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
151 mbedtls_ecdsa_write_signature_restartable( &ctx,
152 valid_md,
153 buf, sizeof( buf ),
154 buf, NULL,
155 rnd_std_rand,
156 NULL, NULL ) );
157
Hanno Beckeraf05a902018-12-14 16:43:38 +0000158 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
159 mbedtls_ecdsa_read_signature( NULL,
160 buf, sizeof( buf ),
161 buf, sizeof( buf ) ) );
162 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
163 mbedtls_ecdsa_read_signature( &ctx,
164 NULL, sizeof( buf ),
165 buf, sizeof( buf ) ) );
166 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
167 mbedtls_ecdsa_read_signature( &ctx,
168 buf, sizeof( buf ),
169 NULL, sizeof( buf ) ) );
170
171 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
172 mbedtls_ecdsa_read_signature_restartable( NULL,
173 buf, sizeof( buf ),
174 buf, sizeof( buf ),
175 NULL ) );
176 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
177 mbedtls_ecdsa_read_signature_restartable( &ctx,
178 NULL, sizeof( buf ),
179 buf, sizeof( buf ),
180 NULL ) );
181 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
182 mbedtls_ecdsa_read_signature_restartable( &ctx,
183 buf, sizeof( buf ),
184 NULL, sizeof( buf ),
185 NULL ) );
186
187 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
188 mbedtls_ecdsa_genkey( NULL, valid_group,
189 rnd_std_rand, NULL ) );
190 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
191 mbedtls_ecdsa_genkey( &ctx, valid_group,
192 NULL, NULL ) );
193
194
195 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
196 mbedtls_ecdsa_from_keypair( NULL, &key ) );
197 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
198 mbedtls_ecdsa_from_keypair( &ctx, NULL ) );
199
200exit:
201 return;
202}
203/* END_CASE */
204
Paul Bakker33b43f12013-08-20 11:48:36 +0200205/* BEGIN_CASE */
206void ecdsa_prim_random( int id )
Manuel Pégourié-Gonnardd1c71502013-01-26 19:09:07 +0100207{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200208 mbedtls_ecp_group grp;
209 mbedtls_ecp_point Q;
210 mbedtls_mpi d, r, s;
Manuel Pégourié-Gonnardd1c71502013-01-26 19:09:07 +0100211 rnd_pseudo_info rnd_info;
Ron Eldor7a977882018-11-19 13:45:22 +0200212 unsigned char buf[MBEDTLS_MD_MAX_SIZE];
Manuel Pégourié-Gonnardd1c71502013-01-26 19:09:07 +0100213
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200214 mbedtls_ecp_group_init( &grp );
215 mbedtls_ecp_point_init( &Q );
216 mbedtls_mpi_init( &d ); mbedtls_mpi_init( &r ); mbedtls_mpi_init( &s );
Manuel Pégourié-Gonnardd1c71502013-01-26 19:09:07 +0100217 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
Manuel Pégourié-Gonnard450a1632013-01-27 09:08:18 +0100218 memset( buf, 0, sizeof( buf ) );
Manuel Pégourié-Gonnardd1c71502013-01-26 19:09:07 +0100219
220 /* prepare material for signature */
221 TEST_ASSERT( rnd_pseudo_rand( &rnd_info, buf, sizeof( buf ) ) == 0 );
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200222 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200223 TEST_ASSERT( mbedtls_ecp_gen_keypair( &grp, &d, &Q, &rnd_pseudo_rand, &rnd_info )
Manuel Pégourié-Gonnardd1c71502013-01-26 19:09:07 +0100224 == 0 );
225
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200226 TEST_ASSERT( mbedtls_ecdsa_sign( &grp, &r, &s, &d, buf, sizeof( buf ),
Manuel Pégourié-Gonnardd1c71502013-01-26 19:09:07 +0100227 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200228 TEST_ASSERT( mbedtls_ecdsa_verify( &grp, buf, sizeof( buf ), &Q, &r, &s ) == 0 );
Manuel Pégourié-Gonnardd1c71502013-01-26 19:09:07 +0100229
Paul Bakkerbd51b262014-07-10 15:26:12 +0200230exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200231 mbedtls_ecp_group_free( &grp );
232 mbedtls_ecp_point_free( &Q );
233 mbedtls_mpi_free( &d ); mbedtls_mpi_free( &r ); mbedtls_mpi_free( &s );
Manuel Pégourié-Gonnardd1c71502013-01-26 19:09:07 +0100234}
Paul Bakker33b43f12013-08-20 11:48:36 +0200235/* END_CASE */
Manuel Pégourié-Gonnard602a8972013-01-27 08:10:28 +0100236
Paul Bakker33b43f12013-08-20 11:48:36 +0200237/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100238void ecdsa_prim_test_vectors( int id, char * d_str, char * xQ_str,
Azim Khan5fcca462018-06-29 11:05:32 +0100239 char * yQ_str, data_t * rnd_buf,
240 data_t * hash, char * r_str, char * s_str,
Azim Khanf1aaec92017-05-30 14:23:15 +0100241 int result )
Manuel Pégourié-Gonnard602a8972013-01-27 08:10:28 +0100242{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200243 mbedtls_ecp_group grp;
244 mbedtls_ecp_point Q;
245 mbedtls_mpi d, r, s, r_check, s_check;
Manuel Pégourié-Gonnardfae079e2014-01-06 11:00:07 +0100246 rnd_buf_info rnd_info;
Manuel Pégourié-Gonnard602a8972013-01-27 08:10:28 +0100247
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200248 mbedtls_ecp_group_init( &grp );
249 mbedtls_ecp_point_init( &Q );
250 mbedtls_mpi_init( &d ); mbedtls_mpi_init( &r ); mbedtls_mpi_init( &s );
251 mbedtls_mpi_init( &r_check ); mbedtls_mpi_init( &s_check );
Manuel Pégourié-Gonnard602a8972013-01-27 08:10:28 +0100252
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200253 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200254 TEST_ASSERT( mbedtls_ecp_point_read_string( &Q, 16, xQ_str, yQ_str ) == 0 );
255 TEST_ASSERT( mbedtls_mpi_read_string( &d, 16, d_str ) == 0 );
256 TEST_ASSERT( mbedtls_mpi_read_string( &r_check, 16, r_str ) == 0 );
257 TEST_ASSERT( mbedtls_mpi_read_string( &s_check, 16, s_str ) == 0 );
Azim Khand30ca132017-06-09 04:32:58 +0100258 rnd_info.buf = rnd_buf->x;
259 rnd_info.length = rnd_buf->len;
Manuel Pégourié-Gonnard602a8972013-01-27 08:10:28 +0100260
Azim Khand30ca132017-06-09 04:32:58 +0100261 /* Fix rnd_buf->x by shifting it left if necessary */
Manuel Pégourié-Gonnardfae079e2014-01-06 11:00:07 +0100262 if( grp.nbits % 8 != 0 )
263 {
264 unsigned char shift = 8 - ( grp.nbits % 8 );
265 size_t i;
266
267 for( i = 0; i < rnd_info.length - 1; i++ )
Azim Khand30ca132017-06-09 04:32:58 +0100268 rnd_buf->x[i] = rnd_buf->x[i] << shift | rnd_buf->x[i+1] >> ( 8 - shift );
Manuel Pégourié-Gonnardfae079e2014-01-06 11:00:07 +0100269
Azim Khand30ca132017-06-09 04:32:58 +0100270 rnd_buf->x[rnd_info.length-1] <<= shift;
Manuel Pégourié-Gonnardfae079e2014-01-06 11:00:07 +0100271 }
272
Azim Khand30ca132017-06-09 04:32:58 +0100273 TEST_ASSERT( mbedtls_ecdsa_sign( &grp, &r, &s, &d, hash->x, hash->len,
Darryl Greenf5bcbed2017-11-17 17:09:31 +0000274 rnd_buffer_rand, &rnd_info ) == result );
Manuel Pégourié-Gonnard602a8972013-01-27 08:10:28 +0100275
Darryl Greenf5bcbed2017-11-17 17:09:31 +0000276 if ( result == 0)
277 {
278 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &r, &r_check ) == 0 );
279 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &s, &s_check ) == 0 );
Manuel Pégourié-Gonnard602a8972013-01-27 08:10:28 +0100280
Azim Khand30ca132017-06-09 04:32:58 +0100281 TEST_ASSERT( mbedtls_ecdsa_verify( &grp, hash->x, hash->len, &Q, &r_check, &s_check ) == 0 );
Manuel Pégourié-Gonnardd0a66cc2018-06-13 09:53:21 +0200282
283 TEST_ASSERT( mbedtls_mpi_sub_int( &r, &r, 1 ) == 0 );
284 TEST_ASSERT( mbedtls_mpi_add_int( &s, &s, 1 ) == 0 );
285
Manuel Pégourié-Gonnard125af942018-09-11 11:08:12 +0200286 TEST_ASSERT( mbedtls_ecdsa_verify( &grp, hash->x, hash->len,
Manuel Pégourié-Gonnardd0a66cc2018-06-13 09:53:21 +0200287 &Q, &r, &s_check ) == MBEDTLS_ERR_ECP_VERIFY_FAILED );
Manuel Pégourié-Gonnard125af942018-09-11 11:08:12 +0200288 TEST_ASSERT( mbedtls_ecdsa_verify( &grp, hash->x, hash->len,
Manuel Pégourié-Gonnardd0a66cc2018-06-13 09:53:21 +0200289 &Q, &r_check, &s ) == MBEDTLS_ERR_ECP_VERIFY_FAILED );
Manuel Pégourié-Gonnard125af942018-09-11 11:08:12 +0200290 TEST_ASSERT( mbedtls_ecdsa_verify( &grp, hash->x, hash->len,
Manuel Pégourié-Gonnardd0a66cc2018-06-13 09:53:21 +0200291 &grp.G, &r_check, &s_check ) == MBEDTLS_ERR_ECP_VERIFY_FAILED );
Darryl Greenf5bcbed2017-11-17 17:09:31 +0000292 }
Manuel Pégourié-Gonnard602a8972013-01-27 08:10:28 +0100293
Paul Bakkerbd51b262014-07-10 15:26:12 +0200294exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200295 mbedtls_ecp_group_free( &grp );
296 mbedtls_ecp_point_free( &Q );
297 mbedtls_mpi_free( &d ); mbedtls_mpi_free( &r ); mbedtls_mpi_free( &s );
298 mbedtls_mpi_free( &r_check ); mbedtls_mpi_free( &s_check );
Manuel Pégourié-Gonnard602a8972013-01-27 08:10:28 +0100299}
Paul Bakker33b43f12013-08-20 11:48:36 +0200300/* END_CASE */
Manuel Pégourié-Gonnardb694b482013-08-08 13:30:57 +0200301
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200302/* BEGIN_CASE depends_on:MBEDTLS_ECDSA_DETERMINISTIC */
Azim Khanf1aaec92017-05-30 14:23:15 +0100303void ecdsa_det_test_vectors( int id, char * d_str, int md_alg, char * msg,
304 char * r_str, char * s_str )
Manuel Pégourié-Gonnard4daaef72014-01-06 14:25:56 +0100305{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200306 mbedtls_ecp_group grp;
307 mbedtls_mpi d, r, s, r_check, s_check;
308 unsigned char hash[MBEDTLS_MD_MAX_SIZE];
Manuel Pégourié-Gonnard4daaef72014-01-06 14:25:56 +0100309 size_t hlen;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200310 const mbedtls_md_info_t *md_info;
Manuel Pégourié-Gonnard4daaef72014-01-06 14:25:56 +0100311
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200312 mbedtls_ecp_group_init( &grp );
313 mbedtls_mpi_init( &d ); mbedtls_mpi_init( &r ); mbedtls_mpi_init( &s );
314 mbedtls_mpi_init( &r_check ); mbedtls_mpi_init( &s_check );
Manuel Pégourié-Gonnard4daaef72014-01-06 14:25:56 +0100315 memset( hash, 0, sizeof( hash ) );
316
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200317 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200318 TEST_ASSERT( mbedtls_mpi_read_string( &d, 16, d_str ) == 0 );
319 TEST_ASSERT( mbedtls_mpi_read_string( &r_check, 16, r_str ) == 0 );
320 TEST_ASSERT( mbedtls_mpi_read_string( &s_check, 16, s_str ) == 0 );
Manuel Pégourié-Gonnard4daaef72014-01-06 14:25:56 +0100321
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200322 md_info = mbedtls_md_info_from_type( md_alg );
Paul Bakker94b916c2014-04-17 16:07:20 +0200323 TEST_ASSERT( md_info != NULL );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200324 hlen = mbedtls_md_get_size( md_info );
Hanno Becker198611d2018-10-17 13:58:19 +0100325 TEST_ASSERT( mbedtls_md( md_info, (const unsigned char *) msg,
326 strlen( msg ), hash ) == 0 );
Manuel Pégourié-Gonnard4daaef72014-01-06 14:25:56 +0100327
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200328 TEST_ASSERT( mbedtls_ecdsa_sign_det( &grp, &r, &s, &d, hash, hlen, md_alg ) == 0 );
Manuel Pégourié-Gonnard4daaef72014-01-06 14:25:56 +0100329
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200330 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &r, &r_check ) == 0 );
331 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &s, &s_check ) == 0 );
Manuel Pégourié-Gonnard4daaef72014-01-06 14:25:56 +0100332
Paul Bakkerbd51b262014-07-10 15:26:12 +0200333exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200334 mbedtls_ecp_group_free( &grp );
335 mbedtls_mpi_free( &d ); mbedtls_mpi_free( &r ); mbedtls_mpi_free( &s );
336 mbedtls_mpi_free( &r_check ); mbedtls_mpi_free( &s_check );
Manuel Pégourié-Gonnard4daaef72014-01-06 14:25:56 +0100337}
338/* END_CASE */
339
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200340/* BEGIN_CASE depends_on:MBEDTLS_SHA256_C */
Manuel Pégourié-Gonnardb694b482013-08-08 13:30:57 +0200341void ecdsa_write_read_random( int id )
342{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200343 mbedtls_ecdsa_context ctx;
Manuel Pégourié-Gonnardb694b482013-08-08 13:30:57 +0200344 rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnarddfdcac92015-03-31 11:41:42 +0200345 unsigned char hash[32];
Manuel Pégourié-Gonnardb694b482013-08-08 13:30:57 +0200346 unsigned char sig[200];
347 size_t sig_len, i;
348
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200349 mbedtls_ecdsa_init( &ctx );
Manuel Pégourié-Gonnardb694b482013-08-08 13:30:57 +0200350 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
351 memset( hash, 0, sizeof( hash ) );
352 memset( sig, 0x2a, sizeof( sig ) );
353
354 /* prepare material for signature */
355 TEST_ASSERT( rnd_pseudo_rand( &rnd_info, hash, sizeof( hash ) ) == 0 );
356
357 /* generate signing key */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200358 TEST_ASSERT( mbedtls_ecdsa_genkey( &ctx, id, &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnardb694b482013-08-08 13:30:57 +0200359
360 /* generate and write signature, then read and verify it */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200361 TEST_ASSERT( mbedtls_ecdsa_write_signature( &ctx, MBEDTLS_MD_SHA256,
Manuel Pégourié-Gonnarddfdcac92015-03-31 11:41:42 +0200362 hash, sizeof( hash ),
Manuel Pégourié-Gonnardb694b482013-08-08 13:30:57 +0200363 sig, &sig_len, &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200364 TEST_ASSERT( mbedtls_ecdsa_read_signature( &ctx, hash, sizeof( hash ),
Manuel Pégourié-Gonnardb694b482013-08-08 13:30:57 +0200365 sig, sig_len ) == 0 );
366
367 /* check we didn't write past the announced length */
368 for( i = sig_len; i < sizeof( sig ); i++ )
369 TEST_ASSERT( sig[i] == 0x2a );
370
371 /* try verification with invalid length */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200372 TEST_ASSERT( mbedtls_ecdsa_read_signature( &ctx, hash, sizeof( hash ),
Manuel Pégourié-Gonnardb694b482013-08-08 13:30:57 +0200373 sig, sig_len - 1 ) != 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200374 TEST_ASSERT( mbedtls_ecdsa_read_signature( &ctx, hash, sizeof( hash ),
Manuel Pégourié-Gonnardb694b482013-08-08 13:30:57 +0200375 sig, sig_len + 1 ) != 0 );
376
377 /* try invalid sequence tag */
378 sig[0]++;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200379 TEST_ASSERT( mbedtls_ecdsa_read_signature( &ctx, hash, sizeof( hash ),
Manuel Pégourié-Gonnardb694b482013-08-08 13:30:57 +0200380 sig, sig_len ) != 0 );
381 sig[0]--;
382
383 /* try modifying r */
384 sig[10]++;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200385 TEST_ASSERT( mbedtls_ecdsa_read_signature( &ctx, hash, sizeof( hash ),
Manuel Pégourié-Gonnard1ed25052017-04-21 10:04:02 +0200386 sig, sig_len ) == MBEDTLS_ERR_ECP_VERIFY_FAILED );
Manuel Pégourié-Gonnardb694b482013-08-08 13:30:57 +0200387 sig[10]--;
388
389 /* try modifying s */
390 sig[sig_len - 1]++;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200391 TEST_ASSERT( mbedtls_ecdsa_read_signature( &ctx, hash, sizeof( hash ),
Manuel Pégourié-Gonnard1ed25052017-04-21 10:04:02 +0200392 sig, sig_len ) == MBEDTLS_ERR_ECP_VERIFY_FAILED );
Manuel Pégourié-Gonnardb694b482013-08-08 13:30:57 +0200393 sig[sig_len - 1]--;
394
Paul Bakkerbd51b262014-07-10 15:26:12 +0200395exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200396 mbedtls_ecdsa_free( &ctx );
Manuel Pégourié-Gonnardb694b482013-08-08 13:30:57 +0200397}
398/* END_CASE */
Manuel Pégourié-Gonnard937340b2014-01-06 10:27:16 +0100399
Manuel Pégourié-Gonnard722e5152017-04-21 11:04:47 +0200400/* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE */
401void ecdsa_read_restart( int id, char *k_str, char *h_str, char *s_str,
402 int max_ops, int min_restart, int max_restart )
403{
404 mbedtls_ecdsa_context ctx;
405 mbedtls_ecdsa_restart_ctx rs_ctx;
406 unsigned char hash[64];
407 unsigned char sig[200];
408 unsigned char pk[65];
409 size_t sig_len, hash_len, pk_len;
410 int ret, cnt_restart;
411
412 mbedtls_ecdsa_init( &ctx );
413 mbedtls_ecdsa_restart_init( &rs_ctx );
414
415 hash_len = unhexify(hash, h_str);
416 sig_len = unhexify(sig, s_str);
417 pk_len = unhexify(pk, k_str);
418
419 TEST_ASSERT( mbedtls_ecp_group_load( &ctx.grp, id ) == 0 );
420 TEST_ASSERT( mbedtls_ecp_point_read_binary( &ctx.grp, &ctx.Q, pk, pk_len ) == 0 );
421
422 mbedtls_ecp_set_max_ops( max_ops );
423
424 cnt_restart = 0;
425 do {
426 ret = mbedtls_ecdsa_read_signature_restartable( &ctx,
427 hash, hash_len, sig, sig_len, &rs_ctx );
428 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restart );
429
430 TEST_ASSERT( ret == 0 );
431 TEST_ASSERT( cnt_restart >= min_restart );
432 TEST_ASSERT( cnt_restart <= max_restart );
433
434 /* try modifying r */
435 sig[10]++;
436 do {
437 ret = mbedtls_ecdsa_read_signature_restartable( &ctx,
438 hash, hash_len, sig, sig_len, &rs_ctx );
439 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
440 TEST_ASSERT( ret == MBEDTLS_ERR_ECP_VERIFY_FAILED );
441 sig[10]--;
442
443 /* try modifying s */
444 sig[sig_len - 1]++;
445 do {
446 ret = mbedtls_ecdsa_read_signature_restartable( &ctx,
447 hash, hash_len, sig, sig_len, &rs_ctx );
448 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
449 TEST_ASSERT( ret == MBEDTLS_ERR_ECP_VERIFY_FAILED );
450 sig[sig_len - 1]--;
451
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200452 /* Do we leak memory when aborting an operation?
453 * This test only makes sense when we actually restart */
454 if( min_restart > 0 )
455 {
456 ret = mbedtls_ecdsa_read_signature_restartable( &ctx,
457 hash, hash_len, sig, sig_len, &rs_ctx );
458 TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
459 }
Manuel Pégourié-Gonnard722e5152017-04-21 11:04:47 +0200460
461exit:
462 mbedtls_ecdsa_free( &ctx );
463 mbedtls_ecdsa_restart_free( &rs_ctx );
464}
465/* END_CASE */
Manuel Pégourié-Gonnardeb402f32017-04-25 10:57:30 +0200466
467/* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE:MBEDTLS_ECDSA_DETERMINISTIC */
468void ecdsa_write_restart( int id, char *d_str, int md_alg,
469 char *msg, char *sig_str,
470 int max_ops, int min_restart, int max_restart )
471{
472 int ret, cnt_restart;
473 mbedtls_ecdsa_restart_ctx rs_ctx;
474 mbedtls_ecdsa_context ctx;
475 unsigned char hash[MBEDTLS_MD_MAX_SIZE];
476 unsigned char sig[MBEDTLS_ECDSA_MAX_LEN];
477 unsigned char sig_check[MBEDTLS_ECDSA_MAX_LEN];
478 size_t hlen, slen, slen_check;
479 const mbedtls_md_info_t *md_info;
480
481 mbedtls_ecdsa_restart_init( &rs_ctx );
482 mbedtls_ecdsa_init( &ctx );
483 memset( hash, 0, sizeof( hash ) );
484 memset( sig, 0, sizeof( sig ) );
485 memset( sig_check, 0, sizeof( sig_check ) );
486
487 TEST_ASSERT( mbedtls_ecp_group_load( &ctx.grp, id ) == 0 );
488 TEST_ASSERT( mbedtls_mpi_read_string( &ctx.d, 16, d_str ) == 0 );
489 slen_check = unhexify( sig_check, sig_str );
490
491 md_info = mbedtls_md_info_from_type( md_alg );
492 TEST_ASSERT( md_info != NULL );
493
494 hlen = mbedtls_md_get_size( md_info );
495 mbedtls_md( md_info, (const unsigned char *) msg, strlen( msg ), hash );
496
497 mbedtls_ecp_set_max_ops( max_ops );
498
499 slen = sizeof( sig );
500 cnt_restart = 0;
501 do {
502 ret = mbedtls_ecdsa_write_signature_restartable( &ctx,
503 md_alg, hash, hlen, sig, &slen, NULL, NULL, &rs_ctx );
504 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restart );
505
506 TEST_ASSERT( ret == 0 );
507 TEST_ASSERT( slen == slen_check );
508 TEST_ASSERT( memcmp( sig, sig_check, slen ) == 0 );
509
510 TEST_ASSERT( cnt_restart >= min_restart );
511 TEST_ASSERT( cnt_restart <= max_restart );
512
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200513 /* Do we leak memory when aborting an operation?
514 * This test only makes sense when we actually restart */
515 if( min_restart > 0 )
516 {
517 ret = mbedtls_ecdsa_write_signature_restartable( &ctx,
518 md_alg, hash, hlen, sig, &slen, NULL, NULL, &rs_ctx );
519 TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
520 }
Manuel Pégourié-Gonnardeb402f32017-04-25 10:57:30 +0200521
522exit:
523 mbedtls_ecdsa_restart_free( &rs_ctx );
524 mbedtls_ecdsa_free( &ctx );
525}
526/* END_CASE */