blob: e32f9c5755a190fa84d28d99969bf661ed2fb3da [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/rsa.h"
3#include "mbedtls/md.h"
Paul Bakker33b43f12013-08-20 11:48:36 +02004/* END_HEADER */
Paul Bakker9dcc3222011-03-08 14:16:06 +00005
Paul Bakker33b43f12013-08-20 11:48:36 +02006/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02007 * depends_on:MBEDTLS_PKCS1_V21:MBEDTLS_RSA_C:MBEDTLS_SHA1_C
Paul Bakker33b43f12013-08-20 11:48:36 +02008 * END_DEPENDENCIES
9 */
Paul Bakker5690efc2011-05-26 13:16:06 +000010
Paul Bakker33b43f12013-08-20 11:48:36 +020011/* BEGIN_CASE */
Cédric Meuterbc13cd92020-12-28 14:39:33 +010012void pkcs1_rsaes_oaep_encrypt( int mod, data_t * input_N, data_t * input_E,
13 int hash, data_t * message_str, data_t * rnd_buf,
Ronald Cronac6ae352020-06-26 14:33:03 +020014 data_t * result_str, int result )
Paul Bakker9dcc3222011-03-08 14:16:06 +000015{
Ron Eldor5b8f1202018-11-22 15:49:49 +020016 unsigned char output[256];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020017 mbedtls_rsa_context ctx;
Ronald Cron351f0ee2020-06-10 12:12:18 +020018 mbedtls_test_rnd_buf_info info;
Hanno Becker6326a6d2017-08-23 06:38:22 +010019 mbedtls_mpi N, E;
Paul Bakker9dcc3222011-03-08 14:16:06 +000020
Azim Khand30ca132017-06-09 04:32:58 +010021 info.buf = rnd_buf->x;
22 info.length = rnd_buf->len;
Paul Bakker9dcc3222011-03-08 14:16:06 +000023
Hanno Becker6326a6d2017-08-23 06:38:22 +010024 mbedtls_mpi_init( &N ); mbedtls_mpi_init( &E );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020025 mbedtls_rsa_init( &ctx, MBEDTLS_RSA_PKCS_V21, hash );
Ron Eldor5b8f1202018-11-22 15:49:49 +020026 memset( output, 0x00, sizeof( output ) );
Paul Bakker9dcc3222011-03-08 14:16:06 +000027
Cédric Meuterbc13cd92020-12-28 14:39:33 +010028 TEST_ASSERT( mbedtls_mpi_read_binary( &N, input_N->x, input_N->len ) == 0 );
29 TEST_ASSERT( mbedtls_mpi_read_binary( &E, input_E->x, input_E->len ) == 0 );
Hanno Becker6326a6d2017-08-23 06:38:22 +010030 TEST_ASSERT( mbedtls_rsa_import( &ctx, &N, NULL, NULL, NULL, &E ) == 0 );
31 TEST_ASSERT( mbedtls_rsa_get_len( &ctx ) == (size_t) ( ( mod + 7 ) / 8 ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020032 TEST_ASSERT( mbedtls_rsa_check_pubkey( &ctx ) == 0 );
Paul Bakker9dcc3222011-03-08 14:16:06 +000033
Gilles Peskine85a6dd42018-10-15 16:32:42 +020034 if( message_str->len == 0 )
35 message_str->x = NULL;
Ronald Cron6c5bd7f2020-06-10 14:08:26 +020036 TEST_ASSERT( mbedtls_rsa_pkcs1_encrypt( &ctx,
37 &mbedtls_test_rnd_buffer_rand,
38 &info, MBEDTLS_RSA_PUBLIC,
39 message_str->len, message_str->x,
40 output ) == result );
Paul Bakker33b43f12013-08-20 11:48:36 +020041 if( result == 0 )
Paul Bakker9dcc3222011-03-08 14:16:06 +000042 {
Cédric Meuter6882b462021-01-10 11:31:12 +010043 ASSERT_COMPARE( output, ctx.len, result_str->x, result_str->len );
Paul Bakker9dcc3222011-03-08 14:16:06 +000044 }
Paul Bakker58ef6ec2013-01-03 11:33:48 +010045
Paul Bakkerbd51b262014-07-10 15:26:12 +020046exit:
Hanno Becker6326a6d2017-08-23 06:38:22 +010047 mbedtls_mpi_free( &N ); mbedtls_mpi_free( &E );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020048 mbedtls_rsa_free( &ctx );
Paul Bakker9dcc3222011-03-08 14:16:06 +000049}
Paul Bakker33b43f12013-08-20 11:48:36 +020050/* END_CASE */
Paul Bakker9dcc3222011-03-08 14:16:06 +000051
Paul Bakker33b43f12013-08-20 11:48:36 +020052/* BEGIN_CASE */
Cédric Meuterbc13cd92020-12-28 14:39:33 +010053void pkcs1_rsaes_oaep_decrypt( int mod, data_t * input_P, data_t * input_Q,
54 data_t * input_N, data_t * input_E, int hash,
55 data_t * result_str, char * seed, data_t * message_str,
Azim Khand30ca132017-06-09 04:32:58 +010056 int result )
Paul Bakker9dcc3222011-03-08 14:16:06 +000057{
Ron Eldor5b8f1202018-11-22 15:49:49 +020058 unsigned char output[64];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020059 mbedtls_rsa_context ctx;
Paul Bakkerf4a3f302011-04-24 15:53:29 +000060 size_t output_len;
Ronald Cron351f0ee2020-06-10 12:12:18 +020061 mbedtls_test_rnd_pseudo_info rnd_info;
Hanno Becker6326a6d2017-08-23 06:38:22 +010062 mbedtls_mpi N, P, Q, E;
Paul Bakkerdbd443d2013-08-16 13:38:47 +020063 ((void) seed);
Paul Bakker9dcc3222011-03-08 14:16:06 +000064
Hanno Becker6326a6d2017-08-23 06:38:22 +010065 mbedtls_mpi_init( &N ); mbedtls_mpi_init( &P );
66 mbedtls_mpi_init( &Q ); mbedtls_mpi_init( &E );
67
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020068 mbedtls_rsa_init( &ctx, MBEDTLS_RSA_PKCS_V21, hash );
Paul Bakker9dcc3222011-03-08 14:16:06 +000069
Ron Eldor5b8f1202018-11-22 15:49:49 +020070 memset( output, 0x00, sizeof( output ) );
Ronald Cron351f0ee2020-06-10 12:12:18 +020071 memset( &rnd_info, 0, sizeof( mbedtls_test_rnd_pseudo_info ) );
Paul Bakker9dcc3222011-03-08 14:16:06 +000072
Cédric Meuterbc13cd92020-12-28 14:39:33 +010073 TEST_ASSERT( mbedtls_mpi_read_binary( &P, input_P->x, input_P->len ) == 0 );
74 TEST_ASSERT( mbedtls_mpi_read_binary( &Q, input_Q->x, input_Q->len ) == 0 );
75 TEST_ASSERT( mbedtls_mpi_read_binary( &N, input_N->x, input_N->len ) == 0 );
76 TEST_ASSERT( mbedtls_mpi_read_binary( &E, input_E->x, input_E->len ) == 0 );
Paul Bakker548957d2013-08-30 10:30:02 +020077
Hanno Becker6326a6d2017-08-23 06:38:22 +010078 TEST_ASSERT( mbedtls_rsa_import( &ctx, &N, &P, &Q, NULL, &E ) == 0 );
79 TEST_ASSERT( mbedtls_rsa_get_len( &ctx ) == (size_t) ( ( mod + 7 ) / 8 ) );
Hanno Becker7f25f852017-10-10 16:56:22 +010080 TEST_ASSERT( mbedtls_rsa_complete( &ctx ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020081 TEST_ASSERT( mbedtls_rsa_check_privkey( &ctx ) == 0 );
Paul Bakker9dcc3222011-03-08 14:16:06 +000082
Ronald Cronac6ae352020-06-26 14:33:03 +020083 if( result_str->len == 0 )
Paul Bakker9dcc3222011-03-08 14:16:06 +000084 {
Ronald Cron6c5bd7f2020-06-10 14:08:26 +020085 TEST_ASSERT( mbedtls_rsa_pkcs1_decrypt( &ctx,
86 &mbedtls_test_rnd_pseudo_rand,
87 &rnd_info,
88 MBEDTLS_RSA_PRIVATE,
89 &output_len, message_str->x,
90 NULL, 0 ) == result );
Gilles Peskine85a6dd42018-10-15 16:32:42 +020091 }
92 else
93 {
Ronald Cron6c5bd7f2020-06-10 14:08:26 +020094 TEST_ASSERT( mbedtls_rsa_pkcs1_decrypt( &ctx,
95 &mbedtls_test_rnd_pseudo_rand,
96 &rnd_info,
97 MBEDTLS_RSA_PRIVATE,
98 &output_len, message_str->x,
99 output,
Ron Eldor5b8f1202018-11-22 15:49:49 +0200100 sizeof( output ) ) == result );
Gilles Peskine85a6dd42018-10-15 16:32:42 +0200101 if( result == 0 )
102 {
Cédric Meuter6882b462021-01-10 11:31:12 +0100103 ASSERT_COMPARE( output, output_len, result_str->x, result_str->len );
Gilles Peskine85a6dd42018-10-15 16:32:42 +0200104 }
Paul Bakker9dcc3222011-03-08 14:16:06 +0000105 }
Paul Bakker6c591fa2011-05-05 11:49:20 +0000106
Paul Bakkerbd51b262014-07-10 15:26:12 +0200107exit:
Hanno Becker6326a6d2017-08-23 06:38:22 +0100108 mbedtls_mpi_free( &N ); mbedtls_mpi_free( &P );
109 mbedtls_mpi_free( &Q ); mbedtls_mpi_free( &E );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200110 mbedtls_rsa_free( &ctx );
Paul Bakker9dcc3222011-03-08 14:16:06 +0000111}
Paul Bakker33b43f12013-08-20 11:48:36 +0200112/* END_CASE */
Paul Bakker9dcc3222011-03-08 14:16:06 +0000113
Paul Bakker33b43f12013-08-20 11:48:36 +0200114/* BEGIN_CASE */
Cédric Meuterbc13cd92020-12-28 14:39:33 +0100115void pkcs1_rsassa_pss_sign( int mod, data_t * input_P, data_t * input_Q,
116 data_t * input_N, data_t * input_E, int digest,
117 int hash, data_t * message_str, data_t * rnd_buf,
Cédric Meuter61adfd62021-01-10 11:52:39 +0100118 data_t * result_str, int fixed_salt_length,
119 int result )
Cédric Meuter668a78d2020-04-30 11:57:04 +0200120{
121 unsigned char hash_result[MBEDTLS_MD_MAX_SIZE];
122 unsigned char output[512];
123 mbedtls_rsa_context ctx;
124 mbedtls_test_rnd_buf_info info;
125 mbedtls_mpi N, P, Q, E;
126
127 info.buf = rnd_buf->x;
128 info.length = rnd_buf->len;
129
130 mbedtls_mpi_init( &N ); mbedtls_mpi_init( &P );
131 mbedtls_mpi_init( &Q ); mbedtls_mpi_init( &E );
132 mbedtls_rsa_init( &ctx, MBEDTLS_RSA_PKCS_V21, hash );
133
134 memset( hash_result, 0x00, sizeof( hash_result ) );
135 memset( output, 0x00, sizeof( output ) );
136
Cédric Meuterbc13cd92020-12-28 14:39:33 +0100137 TEST_ASSERT( mbedtls_mpi_read_binary( &P, input_P->x, input_P->len ) == 0 );
138 TEST_ASSERT( mbedtls_mpi_read_binary( &Q, input_Q->x, input_Q->len ) == 0 );
139 TEST_ASSERT( mbedtls_mpi_read_binary( &N, input_N->x, input_N->len ) == 0 );
140 TEST_ASSERT( mbedtls_mpi_read_binary( &E, input_E->x, input_E->len ) == 0 );
Cédric Meuter668a78d2020-04-30 11:57:04 +0200141
142 TEST_ASSERT( mbedtls_rsa_import( &ctx, &N, &P, &Q, NULL, &E ) == 0 );
143 TEST_ASSERT( mbedtls_rsa_get_len( &ctx ) == (size_t) ( ( mod + 7 ) / 8 ) );
144 TEST_ASSERT( mbedtls_rsa_complete( &ctx ) == 0 );
145 TEST_ASSERT( mbedtls_rsa_check_privkey( &ctx ) == 0 );
146
Cédric Meuter668a78d2020-04-30 11:57:04 +0200147 if( mbedtls_md_info_from_type( digest ) != NULL )
148 TEST_ASSERT( mbedtls_md( mbedtls_md_info_from_type( digest ), message_str->x, message_str->len, hash_result ) == 0 );
149
Cédric Meuter61adfd62021-01-10 11:52:39 +0100150 if (fixed_salt_length == MBEDTLS_RSA_SALT_LEN_ANY)
151 {
152 TEST_ASSERT( mbedtls_rsa_pkcs1_sign( &ctx, &mbedtls_test_rnd_buffer_rand,
153 &info, MBEDTLS_RSA_PRIVATE, digest, 0,
154 hash_result, output ) == result );
155 if( result == 0 )
156 {
157 ASSERT_COMPARE( output, ctx.len, result_str->x, result_str->len );
158 }
159
160 info.buf = rnd_buf->x;
161 info.length = rnd_buf->len;
162 }
163
164 TEST_ASSERT( mbedtls_rsa_rsassa_pss_sign_ext( &ctx, &mbedtls_test_rnd_buffer_rand,
165 &info, digest, 0, hash_result,
166 fixed_salt_length, output ) == result );
Cédric Meuter668a78d2020-04-30 11:57:04 +0200167 if( result == 0 )
168 {
Cédric Meuter6882b462021-01-10 11:31:12 +0100169 ASSERT_COMPARE( output, ctx.len, result_str->x, result_str->len );
Cédric Meuter668a78d2020-04-30 11:57:04 +0200170 }
Cédric Meuter61adfd62021-01-10 11:52:39 +0100171
Cédric Meuter668a78d2020-04-30 11:57:04 +0200172
173exit:
174 mbedtls_mpi_free( &N ); mbedtls_mpi_free( &P );
175 mbedtls_mpi_free( &Q ); mbedtls_mpi_free( &E );
176 mbedtls_rsa_free( &ctx );
177}
178/* END_CASE */
179
180/* BEGIN_CASE */
Cédric Meuterbc13cd92020-12-28 14:39:33 +0100181void pkcs1_rsassa_pss_verify( int mod, data_t * input_N, data_t * input_E,
182 int digest, int hash, data_t * message_str,
183 char * salt, data_t * result_str, int result )
Paul Bakker9dcc3222011-03-08 14:16:06 +0000184{
Ron Eldor5b8f1202018-11-22 15:49:49 +0200185 unsigned char hash_result[MBEDTLS_MD_MAX_SIZE];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200186 mbedtls_rsa_context ctx;
Hanno Becker6326a6d2017-08-23 06:38:22 +0100187 mbedtls_mpi N, E;
Paul Bakkerdbd443d2013-08-16 13:38:47 +0200188 ((void) salt);
Paul Bakker9dcc3222011-03-08 14:16:06 +0000189
Hanno Becker6326a6d2017-08-23 06:38:22 +0100190 mbedtls_mpi_init( &N ); mbedtls_mpi_init( &E );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200191 mbedtls_rsa_init( &ctx, MBEDTLS_RSA_PKCS_V21, hash );
Ron Eldor5b8f1202018-11-22 15:49:49 +0200192 memset( hash_result, 0x00, sizeof( hash_result ) );
Paul Bakker9dcc3222011-03-08 14:16:06 +0000193
Cédric Meuterbc13cd92020-12-28 14:39:33 +0100194 TEST_ASSERT( mbedtls_mpi_read_binary( &N, input_N->x, input_N->len ) == 0 );
195 TEST_ASSERT( mbedtls_mpi_read_binary( &E, input_E->x, input_E->len ) == 0 );
Paul Bakker9dcc3222011-03-08 14:16:06 +0000196
Hanno Becker6326a6d2017-08-23 06:38:22 +0100197 TEST_ASSERT( mbedtls_rsa_import( &ctx, &N, NULL, NULL, NULL, &E ) == 0 );
198 TEST_ASSERT( mbedtls_rsa_get_len( &ctx ) == (size_t) ( ( mod + 7 ) / 8 ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200199 TEST_ASSERT( mbedtls_rsa_check_pubkey( &ctx ) == 0 );
Paul Bakker9dcc3222011-03-08 14:16:06 +0000200
Paul Bakker9dcc3222011-03-08 14:16:06 +0000201
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200202 if( mbedtls_md_info_from_type( digest ) != NULL )
Azim Khand30ca132017-06-09 04:32:58 +0100203 TEST_ASSERT( mbedtls_md( mbedtls_md_info_from_type( digest ), message_str->x, message_str->len, hash_result ) == 0 );
Paul Bakker9dcc3222011-03-08 14:16:06 +0000204
Azim Khand30ca132017-06-09 04:32:58 +0100205 TEST_ASSERT( mbedtls_rsa_pkcs1_verify( &ctx, NULL, NULL, MBEDTLS_RSA_PUBLIC, digest, 0, hash_result, result_str->x ) == result );
Paul Bakker58ef6ec2013-01-03 11:33:48 +0100206
Paul Bakkerbd51b262014-07-10 15:26:12 +0200207exit:
Hanno Becker6326a6d2017-08-23 06:38:22 +0100208 mbedtls_mpi_free( &N ); mbedtls_mpi_free( &E );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200209 mbedtls_rsa_free( &ctx );
Paul Bakker9dcc3222011-03-08 14:16:06 +0000210}
Paul Bakker33b43f12013-08-20 11:48:36 +0200211/* END_CASE */
Manuel Pégourié-Gonnard5ec628a2014-06-03 11:44:06 +0200212
213/* BEGIN_CASE */
Cédric Meuterbc13cd92020-12-28 14:39:33 +0100214void pkcs1_rsassa_pss_verify_ext( int mod, data_t * input_N, data_t * input_E,
Manuel Pégourié-Gonnard5ec628a2014-06-03 11:44:06 +0200215 int msg_digest_id, int ctx_hash,
216 int mgf_hash, int salt_len,
Azim Khan5fcca462018-06-29 11:05:32 +0100217 data_t * message_str,
218 data_t * result_str, int result_simple,
Manuel Pégourié-Gonnard5ec628a2014-06-03 11:44:06 +0200219 int result_full )
220{
Ron Eldor5b8f1202018-11-22 15:49:49 +0200221 unsigned char hash_result[MBEDTLS_MD_MAX_SIZE];
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200222 mbedtls_rsa_context ctx;
Azim Khanf1aaec92017-05-30 14:23:15 +0100223 size_t hash_len;
Hanno Becker6326a6d2017-08-23 06:38:22 +0100224 mbedtls_mpi N, E;
Manuel Pégourié-Gonnard5ec628a2014-06-03 11:44:06 +0200225
Hanno Becker6326a6d2017-08-23 06:38:22 +0100226 mbedtls_mpi_init( &N ); mbedtls_mpi_init( &E );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200227 mbedtls_rsa_init( &ctx, MBEDTLS_RSA_PKCS_V21, ctx_hash );
Ron Eldor5b8f1202018-11-22 15:49:49 +0200228 memset( hash_result, 0x00, sizeof( hash_result ) );
Manuel Pégourié-Gonnard5ec628a2014-06-03 11:44:06 +0200229
Cédric Meuterbc13cd92020-12-28 14:39:33 +0100230 TEST_ASSERT( mbedtls_mpi_read_binary( &N, input_N->x, input_N->len ) == 0 );
231 TEST_ASSERT( mbedtls_mpi_read_binary( &E, input_E->x, input_E->len ) == 0 );
Manuel Pégourié-Gonnard5ec628a2014-06-03 11:44:06 +0200232
Hanno Becker6326a6d2017-08-23 06:38:22 +0100233 TEST_ASSERT( mbedtls_rsa_import( &ctx, &N, NULL, NULL, NULL, &E ) == 0 );
234 TEST_ASSERT( mbedtls_rsa_get_len( &ctx ) == (size_t) ( ( mod + 7 ) / 8 ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200235 TEST_ASSERT( mbedtls_rsa_check_pubkey( &ctx ) == 0 );
Manuel Pégourié-Gonnard5ec628a2014-06-03 11:44:06 +0200236
Manuel Pégourié-Gonnard5ec628a2014-06-03 11:44:06 +0200237
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200238 if( msg_digest_id != MBEDTLS_MD_NONE )
Manuel Pégourié-Gonnard5ec628a2014-06-03 11:44:06 +0200239 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200240 TEST_ASSERT( mbedtls_md( mbedtls_md_info_from_type( msg_digest_id ),
Azim Khand30ca132017-06-09 04:32:58 +0100241 message_str->x, message_str->len, hash_result ) == 0 );
Manuel Pégourié-Gonnard5ec628a2014-06-03 11:44:06 +0200242 hash_len = 0;
243 }
244 else
245 {
Azim Khand30ca132017-06-09 04:32:58 +0100246 memcpy( hash_result, message_str->x, message_str->len );
247 hash_len = message_str->len;
Manuel Pégourié-Gonnard5ec628a2014-06-03 11:44:06 +0200248 }
249
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200250 TEST_ASSERT( mbedtls_rsa_pkcs1_verify( &ctx, NULL, NULL, MBEDTLS_RSA_PUBLIC,
Manuel Pégourié-Gonnard5ec628a2014-06-03 11:44:06 +0200251 msg_digest_id, hash_len, hash_result,
Azim Khand30ca132017-06-09 04:32:58 +0100252 result_str->x ) == result_simple );
Manuel Pégourié-Gonnard5ec628a2014-06-03 11:44:06 +0200253
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200254 TEST_ASSERT( mbedtls_rsa_rsassa_pss_verify_ext( &ctx, NULL, NULL, MBEDTLS_RSA_PUBLIC,
Manuel Pégourié-Gonnard5ec628a2014-06-03 11:44:06 +0200255 msg_digest_id, hash_len, hash_result,
256 mgf_hash, salt_len,
Azim Khand30ca132017-06-09 04:32:58 +0100257 result_str->x ) == result_full );
Manuel Pégourié-Gonnard5ec628a2014-06-03 11:44:06 +0200258
Paul Bakkerbd51b262014-07-10 15:26:12 +0200259exit:
Hanno Becker6326a6d2017-08-23 06:38:22 +0100260 mbedtls_mpi_free( &N ); mbedtls_mpi_free( &E );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200261 mbedtls_rsa_free( &ctx );
Manuel Pégourié-Gonnard5ec628a2014-06-03 11:44:06 +0200262}
263/* END_CASE */