blob: 6a70e72877870ed11f4f0efb7acca3fd2aa2775a [file] [log] [blame]
Werner Lewis0c6ea122022-09-30 13:02:16 +01001/* BEGIN_HEADER */
2#include "mbedtls/bignum.h"
3#include "mbedtls/entropy.h"
4#include "bignum_mod.h"
5#include "constant_time_internal.h"
6#include "test/constant_flow.h"
Werner Lewis0c6ea122022-09-30 13:02:16 +01007/* END_HEADER */
8
9/* BEGIN_DEPENDENCIES
10 * depends_on:MBEDTLS_BIGNUM_C
11 * END_DEPENDENCIES
12 */
13
14/* BEGIN_CASE */
Janos Follath91295d22022-11-24 18:20:26 +000015void mpi_mod_setup( int int_rep, int iret )
Werner Lewis0c6ea122022-09-30 13:02:16 +010016{
17 #define MLIMBS 8
18 mbedtls_mpi_uint mp[MLIMBS];
19 mbedtls_mpi_mod_modulus m;
20 int ret;
21
Minos Galanakis4d4c98b2022-10-27 15:58:02 +010022 memset( mp, 0xFF, sizeof(mp) );
Werner Lewis0c6ea122022-09-30 13:02:16 +010023
24 mbedtls_mpi_mod_modulus_init( &m );
Janos Follath91295d22022-11-24 18:20:26 +000025 ret = mbedtls_mpi_mod_modulus_setup( &m, mp, MLIMBS, int_rep );
Werner Lewis0c6ea122022-09-30 13:02:16 +010026 TEST_EQUAL( ret, iret );
27
Minos Galanakisdd365a52022-10-19 01:48:32 +010028 /* Only test if the constants have been set-up */
29 if ( ret == 0 && int_rep == MBEDTLS_MPI_MOD_REP_MONTGOMERY )
30 {
31 /* Test that the consts have been calculated */
32 TEST_ASSERT( m.rep.mont.rr != NULL );
33 TEST_ASSERT( m.rep.mont.mm != 0 );
34
Minos Galanakisdd365a52022-10-19 01:48:32 +010035 }
36
Werner Lewis0c6ea122022-09-30 13:02:16 +010037 /* Address sanitiser should catch if we try to free mp */
38 mbedtls_mpi_mod_modulus_free( &m );
39
40 /* Make sure that the modulus doesn't have reference to mp anymore */
41 TEST_ASSERT( m.p != mp );
42
Minos Galanakisdd365a52022-10-19 01:48:32 +010043 /* Only test if the constants have been set-up */
44 if ( ret == 0 && int_rep == MBEDTLS_MPI_MOD_REP_MONTGOMERY )
45 {
Minos Galanakisdd365a52022-10-19 01:48:32 +010046 /* Verify the data and pointers allocated have been properly wiped */
47 TEST_ASSERT( m.rep.mont.rr == NULL );
48 TEST_ASSERT( m.rep.mont.mm == 0 );
Minos Galanakisdd365a52022-10-19 01:48:32 +010049 }
Werner Lewis0c6ea122022-09-30 13:02:16 +010050exit:
51 /* It should be safe to call an mbedtls free several times */
52 mbedtls_mpi_mod_modulus_free( &m );
53
54 #undef MLIMBS
55}
56/* END_CASE */
Janos Follath5933f692022-11-02 14:35:17 +000057
58/* BEGIN MERGE SLOT 1 */
59
60/* END MERGE SLOT 1 */
61
62/* BEGIN MERGE SLOT 2 */
63
64/* END MERGE SLOT 2 */
65
66/* BEGIN MERGE SLOT 3 */
67
68/* END MERGE SLOT 3 */
69
70/* BEGIN MERGE SLOT 4 */
71
72/* END MERGE SLOT 4 */
73
74/* BEGIN MERGE SLOT 5 */
75
76/* END MERGE SLOT 5 */
77
78/* BEGIN MERGE SLOT 6 */
79
80/* END MERGE SLOT 6 */
81
82/* BEGIN MERGE SLOT 7 */
Minos Galanakis8f242702022-11-10 16:56:02 +000083/* BEGIN_CASE */
Janos Follath91f3abd2022-11-26 11:47:14 +000084void mpi_residue_setup( char * input_N, char * input_R, int ret )
Minos Galanakisa17ad482022-11-16 16:29:15 +000085{
Minos Galanakisa17ad482022-11-16 16:29:15 +000086 mbedtls_mpi_uint *N = NULL;
87 mbedtls_mpi_uint *R = NULL;
Minos Galanakisaed832a2022-11-24 09:09:47 +000088 size_t n_limbs, r_limbs;
Minos Galanakisa17ad482022-11-16 16:29:15 +000089 mbedtls_mpi_mod_modulus m;
90 mbedtls_mpi_mod_residue r;
91
Minos Galanakisa17ad482022-11-16 16:29:15 +000092 mbedtls_mpi_mod_modulus_init( &m );
93
Minos Galanakisaed832a2022-11-24 09:09:47 +000094 /* Allocate the memory for intermediate data structures */
Janos Follath91f3abd2022-11-26 11:47:14 +000095 TEST_EQUAL( 0, mbedtls_test_read_mpi_core( &N, &n_limbs, input_N ) );
96 TEST_EQUAL( 0, mbedtls_test_read_mpi_core( &R, &r_limbs, input_R ) );
Minos Galanakisaed832a2022-11-24 09:09:47 +000097
Minos Galanakisa17ad482022-11-16 16:29:15 +000098 TEST_EQUAL( 0, mbedtls_mpi_mod_modulus_setup( &m, N, n_limbs,
Janos Follath91295d22022-11-24 18:20:26 +000099 MBEDTLS_MPI_MOD_REP_MONTGOMERY ) );
Minos Galanakisa17ad482022-11-16 16:29:15 +0000100
Minos Galanakisaed832a2022-11-24 09:09:47 +0000101 TEST_EQUAL( ret, mbedtls_mpi_mod_residue_setup( &r, &m, R , r_limbs ) );
Minos Galanakisa17ad482022-11-16 16:29:15 +0000102
Janos Follath91f3abd2022-11-26 11:47:14 +0000103 if ( ret == 0 )
104 {
105 TEST_EQUAL( r.limbs, r_limbs );
106 TEST_ASSERT( r.p == R );
107 }
108
Minos Galanakisa17ad482022-11-16 16:29:15 +0000109exit:
110 mbedtls_mpi_mod_modulus_free( &m );
111 mbedtls_free( N );
112 mbedtls_free( R );
Minos Galanakisa17ad482022-11-16 16:29:15 +0000113}
114/* END_CASE */
Minos Galanakisaed832a2022-11-24 09:09:47 +0000115
Minos Galanakisa17ad482022-11-16 16:29:15 +0000116/* BEGIN_CASE */
Janos Follath339b4392022-11-26 12:20:41 +0000117void mpi_mod_io_neg( char * input_N, data_t * buf, int ret )
Minos Galanakis8f242702022-11-10 16:56:02 +0000118{
Minos Galanakis8f242702022-11-10 16:56:02 +0000119 mbedtls_mpi_uint *N = NULL;
120 mbedtls_mpi_uint *R = NULL;
Minos Galanakis8f242702022-11-10 16:56:02 +0000121
122 mbedtls_mpi_mod_modulus m;
123 mbedtls_mpi_mod_residue r;
Minos Galanakis8f242702022-11-10 16:56:02 +0000124 mbedtls_mpi_mod_residue rn = { NULL, 0 };
Minos Galanakis96070a52022-11-25 19:32:10 +0000125 mbedtls_mpi_mod_ext_rep endian = MBEDTLS_MPI_MOD_EXT_REP_LE;
Minos Galanakis8f242702022-11-10 16:56:02 +0000126
Janos Follath799eaee2022-11-25 15:57:04 +0000127 mbedtls_mpi_mod_modulus_init( &m );
Janos Follath799eaee2022-11-25 15:57:04 +0000128
Janos Follath339b4392022-11-26 12:20:41 +0000129 size_t n_limbs;
Minos Galanakis96070a52022-11-25 19:32:10 +0000130 TEST_EQUAL( 0, mbedtls_test_read_mpi_core( &N, &n_limbs, input_N ) );
Janos Follath339b4392022-11-26 12:20:41 +0000131 size_t r_limbs = n_limbs;
132 ASSERT_ALLOC( R, r_limbs );
Minos Galanakis8f242702022-11-10 16:56:02 +0000133
Minos Galanakis96070a52022-11-25 19:32:10 +0000134 /* modulo->p == NULL || residue->p == NULL ( m has not been set-up ) */
Janos Follath3e3fc912022-11-24 18:02:46 +0000135 TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
Janos Follath566c91d2022-11-26 12:05:50 +0000136 mbedtls_mpi_mod_read( &r, &m, buf->x, buf->len, endian ) );
Minos Galanakis8f242702022-11-10 16:56:02 +0000137
Minos Galanakis96070a52022-11-25 19:32:10 +0000138 TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
Janos Follath566c91d2022-11-26 12:05:50 +0000139 mbedtls_mpi_mod_write( &r, &m, buf->x, buf->len, endian ) );
Minos Galanakis8f242702022-11-10 16:56:02 +0000140
Minos Galanakis96070a52022-11-25 19:32:10 +0000141 TEST_EQUAL( 0, mbedtls_mpi_mod_modulus_setup( &m, N, n_limbs,
142 MBEDTLS_MPI_MOD_REP_MONTGOMERY ) );
Janos Follath339b4392022-11-26 12:20:41 +0000143 TEST_EQUAL( 0, mbedtls_mpi_mod_residue_setup( &r, &m, R , r_limbs ) );
Minos Galanakis96070a52022-11-25 19:32:10 +0000144
145 /* modulo->p == NULL || residue->p == NULL ( m has been set-up ) */
146 TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
Janos Follath566c91d2022-11-26 12:05:50 +0000147 mbedtls_mpi_mod_read( &rn, &m, buf->x, buf->len, endian ) );
Minos Galanakis96070a52022-11-25 19:32:10 +0000148 TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
Janos Follath566c91d2022-11-26 12:05:50 +0000149 mbedtls_mpi_mod_write( &rn, &m, buf->x, buf->len, endian ) );
Minos Galanakis96070a52022-11-25 19:32:10 +0000150
151 /* Fail for r_limbs > m->limbs */
152 r.limbs = m.limbs + 1;
153 TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
Janos Follath566c91d2022-11-26 12:05:50 +0000154 mbedtls_mpi_mod_read( &r, &m, buf->x, buf->len, endian ) );
Minos Galanakis96070a52022-11-25 19:32:10 +0000155 TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
Janos Follath566c91d2022-11-26 12:05:50 +0000156 mbedtls_mpi_mod_write( &r, &m, buf->x, buf->len, endian ) );
Minos Galanakis96070a52022-11-25 19:32:10 +0000157 r.limbs = r_limbs;
158
159 /* Test the read */
Janos Follath566c91d2022-11-26 12:05:50 +0000160 TEST_EQUAL( ret, mbedtls_mpi_mod_read( &r, &m, buf->x, buf->len, endian ) );
Minos Galanakis96070a52022-11-25 19:32:10 +0000161
162 /* Test write overflow only when the representation is large and read is successful */
163 if (r.limbs > 1 && ret == 0)
164 TEST_EQUAL( MBEDTLS_ERR_MPI_BUFFER_TOO_SMALL,
Janos Follath566c91d2022-11-26 12:05:50 +0000165 mbedtls_mpi_mod_write( &r, &m, buf->x, 1, endian ) );
Minos Galanakis8f242702022-11-10 16:56:02 +0000166exit:
167 mbedtls_mpi_mod_modulus_free( &m );
Minos Galanakis8f242702022-11-10 16:56:02 +0000168 mbedtls_free( N );
169 mbedtls_free( R );
Minos Galanakis8f242702022-11-10 16:56:02 +0000170}
171/* END_CASE */
172
173/* BEGIN_CASE */
Janos Follath3e3fc912022-11-24 18:02:46 +0000174void mpi_mod_io( char * input_N, data_t * input_A, int endian )
Minos Galanakis8f242702022-11-10 16:56:02 +0000175{
176 mbedtls_mpi_uint *N = NULL;
177 mbedtls_mpi_uint *R = NULL;
178 unsigned char *r_buff = NULL;
179 mbedtls_mpi_mod_modulus m;
180 mbedtls_mpi_mod_residue r;
181 size_t n_limbs, n_bytes, a_bytes;
182
Janos Follath799eaee2022-11-25 15:57:04 +0000183 mbedtls_mpi_mod_modulus_init( &m );
184
Minos Galanakis8f242702022-11-10 16:56:02 +0000185 /* Read inputs */
186 TEST_EQUAL( 0, mbedtls_test_read_mpi_core( &N, &n_limbs, input_N ) );
187 n_bytes = n_limbs * sizeof( mbedtls_mpi_uint );
188 a_bytes = input_A->len * sizeof( char );
189
190 /* Allocate the memory for intermediate data structures */
191 ASSERT_ALLOC( R, n_bytes );
192 ASSERT_ALLOC( r_buff, a_bytes );
193
194 /* Test that input's size is not greater to modulo's */
195 TEST_LE_U(a_bytes, n_bytes );
196
197 /* Init Structures */
Janos Follath91295d22022-11-24 18:20:26 +0000198 TEST_EQUAL( 0, mbedtls_mpi_mod_modulus_setup( &m, N, n_limbs,
Minos Galanakis8f242702022-11-10 16:56:02 +0000199 MBEDTLS_MPI_MOD_REP_MONTGOMERY ) );
200
201 /* Enforcing p_limbs >= m->limbs */
Janos Follath3e3fc912022-11-24 18:02:46 +0000202 TEST_EQUAL( 0, mbedtls_mpi_mod_residue_setup( &r, &m, R, n_limbs ) );
Minos Galanakis8f242702022-11-10 16:56:02 +0000203
Janos Follath3e3fc912022-11-24 18:02:46 +0000204 TEST_EQUAL( 0, mbedtls_mpi_mod_read( &r, &m, input_A->x, input_A->len,
205 endian ) );
Minos Galanakis8f242702022-11-10 16:56:02 +0000206
Janos Follath3e3fc912022-11-24 18:02:46 +0000207 TEST_EQUAL( 0, mbedtls_mpi_mod_write( &r, &m, r_buff, a_bytes,
208 endian ) );
Minos Galanakis8f242702022-11-10 16:56:02 +0000209
210 ASSERT_COMPARE( r_buff, a_bytes, input_A->x, a_bytes );
211exit:
212 mbedtls_mpi_mod_modulus_free( &m );
213 mbedtls_free( N );
214 mbedtls_free( R );
215 mbedtls_free( r_buff );
216}
217/* END_CASE */
Janos Follath5933f692022-11-02 14:35:17 +0000218/* END MERGE SLOT 7 */
219
220/* BEGIN MERGE SLOT 8 */
221
222/* END MERGE SLOT 8 */
223
224/* BEGIN MERGE SLOT 9 */
225
226/* END MERGE SLOT 9 */
227
228/* BEGIN MERGE SLOT 10 */
229
230/* END MERGE SLOT 10 */