blob: 74e23875da92f42a8fc9dbf2186b11ec0893653d [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/ecp.h"
Paul Bakkerdbd443d2013-08-16 13:38:47 +02003
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02004#define ECP_PF_UNKNOWN -1
Paul Bakker33b43f12013-08-20 11:48:36 +02005/* END_HEADER */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +01006
Paul Bakker33b43f12013-08-20 11:48:36 +02007/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02008 * depends_on:MBEDTLS_ECP_C
Paul Bakker33b43f12013-08-20 11:48:36 +02009 * END_DEPENDENCIES
10 */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010011
Paul Bakker33b43f12013-08-20 11:48:36 +020012/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020013void mbedtls_ecp_curve_info( int id, int tls_id, int size, char *name )
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010014{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020015 const mbedtls_ecp_curve_info *by_id, *by_tls, *by_name;
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010016
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020017 by_id = mbedtls_ecp_curve_info_from_grp_id( id );
18 by_tls = mbedtls_ecp_curve_info_from_tls_id( tls_id );
19 by_name = mbedtls_ecp_curve_info_from_name( name );
Paul Bakker94b916c2014-04-17 16:07:20 +020020 TEST_ASSERT( by_id != NULL );
21 TEST_ASSERT( by_tls != NULL );
22 TEST_ASSERT( by_name != NULL );
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010023
24 TEST_ASSERT( by_id == by_tls );
25 TEST_ASSERT( by_id == by_name );
26
Manuel Pégourié-Gonnard797f48a2015-06-18 15:45:05 +020027 TEST_ASSERT( by_id->bit_size == size );
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010028}
29/* END_CASE */
30
31/* BEGIN_CASE */
Janos Follath28fff142017-01-27 15:51:14 +000032void ecp_check_pub( int grp_id, char *x_hex, char *y_hex, char *z_hex, int ret )
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010033{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020034 mbedtls_ecp_group grp;
35 mbedtls_ecp_point P;
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010036
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020037 mbedtls_ecp_group_init( &grp );
38 mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010039
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +020040 TEST_ASSERT( mbedtls_ecp_group_load( &grp, grp_id ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010041
Janos Follath28fff142017-01-27 15:51:14 +000042 TEST_ASSERT( mbedtls_mpi_read_string( &P.X, 16, x_hex ) == 0 );
43 TEST_ASSERT( mbedtls_mpi_read_string( &P.Y, 16, y_hex ) == 0 );
44 TEST_ASSERT( mbedtls_mpi_read_string( &P.Z, 16, z_hex ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010045
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020046 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &P ) == ret );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010047
Paul Bakkerbd51b262014-07-10 15:26:12 +020048exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020049 mbedtls_ecp_group_free( &grp );
50 mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010051}
52/* END_CASE */
53
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +010054/* BEGIN_CASE depends_on:MBEDTLS_ECP_EARLY_RETURN */
55void ecp_test_vect_restart( int id,
56 char *dA_str, char *xA_str, char *yA_str,
57 char *dB_str, char *xZ_str, char *yZ_str,
58 int max_ops, int min_restarts, int max_restarts )
59{
60 /*
61 * Test for early restart. Based on test vectors like ecp_test_vect(),
62 * but for the sake of simplicity only does half of each side. It's
63 * important to test both base point and random point, though, as memory
64 * management is different in each case.
65 *
66 * Don't try using too precise bounds for restarts as the exact number
67 * will depend on settings such as MBEDTLS_ECP_FIXED_POINT_OPTIM and
68 * MBEDTLS_ECP_WINDOW_SIZE, as well as implementation details that may
69 * change in the future. A factor 2 is a minimum safety margin.
70 *
71 * For reference, with mbed TLS 2.4 and default settings, for P-256:
72 * - Random point mult: ~3600M
73 * - Cold base point mult: ~3600M
74 * - Hot base point mult: ~1200M
75 * With MBEDTLS_ECP_WINDOW_SIZE set to 2 (minimum):
76 * - Random point mult: ~4200M
77 */
78 mbedtls_ecp_group grp;
79 mbedtls_ecp_point R;
80 mbedtls_mpi dA, xA, yA, dB, xZ, yZ;
81 int cnt_restarts;
82 int ret;
83
84 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
85 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); mbedtls_mpi_init( &yA );
86 mbedtls_mpi_init( &dB ); mbedtls_mpi_init( &xZ ); mbedtls_mpi_init( &yZ );
87
88 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
89
90 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_str ) == 0 );
91 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_str ) == 0 );
92 TEST_ASSERT( mbedtls_mpi_read_string( &yA, 16, yA_str ) == 0 );
93
94 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_str ) == 0 );
95 TEST_ASSERT( mbedtls_mpi_read_string( &xZ, 16, xZ_str ) == 0 );
96 TEST_ASSERT( mbedtls_mpi_read_string( &yZ, 16, yZ_str ) == 0 );
97
98 mbedtls_ecp_set_max_ops( (unsigned) max_ops );
99
100 /* Base point case */
101 cnt_restarts = 0;
102 do {
103 ret = mbedtls_ecp_mul( &grp, &R, &dA, &grp.G, NULL, NULL );
104 TEST_ASSERT( ret == 0 || ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
105
106 if( ret == MBEDTLS_ERR_ECP_IN_PROGRESS )
107 cnt_restarts++;
108 }
109 while( ret != 0 );
110
111 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
112 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yA ) == 0 );
113
114 TEST_ASSERT( cnt_restarts >= min_restarts );
115 TEST_ASSERT( cnt_restarts <= max_restarts );
116
117 /* Do we leak memory when doing it twice in a row? */
118 do {
119 ret = mbedtls_ecp_mul( &grp, &R, &dA, &grp.G, NULL, NULL );
120 TEST_ASSERT( ret == 0 || ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
121 }
122 while( ret != 0 );
123
124 /* Non-base point case */
125 cnt_restarts = 0;
126 do {
127 ret = mbedtls_ecp_mul( &grp, &R, &dB, &R, NULL, NULL );
128 TEST_ASSERT( ret == 0 || ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
129
130 if( ret == MBEDTLS_ERR_ECP_IN_PROGRESS )
131 cnt_restarts++;
132 }
133 while( ret != 0 );
134
135 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
136 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
137
138 TEST_ASSERT( cnt_restarts >= min_restarts );
139 TEST_ASSERT( cnt_restarts <= max_restarts );
140
141 /* Do we leak memory when doing it twice in a row? */
142 do {
143 ret = mbedtls_ecp_mul( &grp, &R, &dB, &R, NULL, NULL );
144 TEST_ASSERT( ret == 0 || ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
145 }
146 while( ret != 0 );
147
Manuel Pégourié-Gonnard77af79a2017-03-14 10:58:00 +0100148 /* Do we leak memory when not finishing an operation? */
149 ret = mbedtls_ecp_mul( &grp, &R, &dB, &R, NULL, NULL );
150 TEST_ASSERT( ret == 0 || ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
151
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100152exit:
153 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
154 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); mbedtls_mpi_free( &yA );
155 mbedtls_mpi_free( &dB ); mbedtls_mpi_free( &xZ ); mbedtls_mpi_free( &yZ );
156}
157/* END_CASE */
158
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100159/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +0200160void ecp_test_vect( int id, char *dA_str, char *xA_str, char *yA_str,
161 char *dB_str, char *xB_str, char *yB_str, char *xZ_str,
162 char *yZ_str )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100163{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200164 mbedtls_ecp_group grp;
165 mbedtls_ecp_point R;
166 mbedtls_mpi dA, xA, yA, dB, xB, yB, xZ, yZ;
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200167 rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100168
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200169 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
170 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); mbedtls_mpi_init( &yA ); mbedtls_mpi_init( &dB );
171 mbedtls_mpi_init( &xB ); mbedtls_mpi_init( &yB ); mbedtls_mpi_init( &xZ ); mbedtls_mpi_init( &yZ );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200172 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100173
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200174 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100175
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200176 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100177
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200178 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_str ) == 0 );
179 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_str ) == 0 );
180 TEST_ASSERT( mbedtls_mpi_read_string( &yA, 16, yA_str ) == 0 );
181 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_str ) == 0 );
182 TEST_ASSERT( mbedtls_mpi_read_string( &xB, 16, xB_str ) == 0 );
183 TEST_ASSERT( mbedtls_mpi_read_string( &yB, 16, yB_str ) == 0 );
184 TEST_ASSERT( mbedtls_mpi_read_string( &xZ, 16, xZ_str ) == 0 );
185 TEST_ASSERT( mbedtls_mpi_read_string( &yZ, 16, yZ_str ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100186
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200187 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G,
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200188 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200189 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
190 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yA ) == 0 );
191 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
192 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R, NULL, NULL ) == 0 );
193 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
194 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
195 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100196
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200197 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
198 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 );
199 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yB ) == 0 );
200 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
201 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R,
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200202 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200203 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
204 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
205 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100206
Paul Bakkerbd51b262014-07-10 15:26:12 +0200207exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200208 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
209 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); mbedtls_mpi_free( &yA ); mbedtls_mpi_free( &dB );
210 mbedtls_mpi_free( &xB ); mbedtls_mpi_free( &yB ); mbedtls_mpi_free( &xZ ); mbedtls_mpi_free( &yZ );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100211}
Paul Bakker33b43f12013-08-20 11:48:36 +0200212/* END_CASE */
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100213
Paul Bakker33b43f12013-08-20 11:48:36 +0200214/* BEGIN_CASE */
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100215void ecp_test_vec_x( int id, char *dA_hex, char *xA_hex,
216 char *dB_hex, char *xB_hex, char *xS_hex )
217{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200218 mbedtls_ecp_group grp;
219 mbedtls_ecp_point R;
220 mbedtls_mpi dA, xA, dB, xB, xS;
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100221 rnd_pseudo_info rnd_info;
222
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200223 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
224 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA );
225 mbedtls_mpi_init( &dB ); mbedtls_mpi_init( &xB );
226 mbedtls_mpi_init( &xS );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100227 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
228
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200229 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100230
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200231 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100232
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200233 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_hex ) == 0 );
234 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_hex ) == 0 );
235 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_hex ) == 0 );
236 TEST_ASSERT( mbedtls_mpi_read_string( &xB, 16, xB_hex ) == 0 );
237 TEST_ASSERT( mbedtls_mpi_read_string( &xS, 16, xS_hex ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100238
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200239 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G,
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100240 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200241 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
242 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100243
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200244 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R,
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100245 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200246 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
247 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100248
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200249 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
250 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
251 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100252
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200253 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R, NULL, NULL ) == 0 );
254 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
255 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100256
Paul Bakkerbd51b262014-07-10 15:26:12 +0200257exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200258 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
259 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA );
260 mbedtls_mpi_free( &dB ); mbedtls_mpi_free( &xB );
261 mbedtls_mpi_free( &xS );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100262}
263/* END_CASE */
264
265/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +0200266void ecp_fast_mod( int id, char *N_str )
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100267{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200268 mbedtls_ecp_group grp;
269 mbedtls_mpi N, R;
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100270
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200271 mbedtls_mpi_init( &N ); mbedtls_mpi_init( &R );
272 mbedtls_ecp_group_init( &grp );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100273
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200274 TEST_ASSERT( mbedtls_mpi_read_string( &N, 16, N_str ) == 0 );
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200275 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde783f062013-10-21 14:52:21 +0200276 TEST_ASSERT( grp.modp != NULL );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100277
278 /*
279 * Store correct result before we touch N
280 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200281 TEST_ASSERT( mbedtls_mpi_mod_mpi( &R, &N, &grp.P ) == 0 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100282
283 TEST_ASSERT( grp.modp( &N ) == 0 );
Manuel Pégourié-Gonnardc0696c22015-06-18 16:47:17 +0200284 TEST_ASSERT( mbedtls_mpi_bitlen( &N ) <= grp.pbits + 3 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100285
286 /*
Paul Bakkerd8b0c5e2014-04-11 15:31:33 +0200287 * Use mod rather than addition/subtraction in case previous test fails
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100288 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200289 TEST_ASSERT( mbedtls_mpi_mod_mpi( &N, &N, &grp.P ) == 0 );
290 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &N, &R ) == 0 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100291
Paul Bakkerbd51b262014-07-10 15:26:12 +0200292exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200293 mbedtls_mpi_free( &N ); mbedtls_mpi_free( &R );
294 mbedtls_ecp_group_free( &grp );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100295}
Paul Bakker33b43f12013-08-20 11:48:36 +0200296/* END_CASE */
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100297
Paul Bakker33b43f12013-08-20 11:48:36 +0200298/* BEGIN_CASE */
299void ecp_write_binary( int id, char *x, char *y, char *z, int format,
300 char *out, int blen, int ret )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100301{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200302 mbedtls_ecp_group grp;
303 mbedtls_ecp_point P;
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100304 unsigned char buf[256], str[512];
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100305 size_t olen;
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100306
307 memset( buf, 0, sizeof( buf ) );
308 memset( str, 0, sizeof( str ) );
309
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200310 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100311
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200312 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100313
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200314 TEST_ASSERT( mbedtls_mpi_read_string( &P.X, 16, x ) == 0 );
315 TEST_ASSERT( mbedtls_mpi_read_string( &P.Y, 16, y ) == 0 );
316 TEST_ASSERT( mbedtls_mpi_read_string( &P.Z, 16, z ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100317
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200318 TEST_ASSERT( mbedtls_ecp_point_write_binary( &grp, &P, format,
Paul Bakker33b43f12013-08-20 11:48:36 +0200319 &olen, buf, blen ) == ret );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100320
Paul Bakker33b43f12013-08-20 11:48:36 +0200321 if( ret == 0 )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100322 {
Manuel Pégourié-Gonnard37d218a2012-11-24 15:19:55 +0100323 hexify( str, buf, olen );
Paul Bakker33b43f12013-08-20 11:48:36 +0200324 TEST_ASSERT( strcasecmp( (char *) str, out ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100325 }
326
Paul Bakkerbd51b262014-07-10 15:26:12 +0200327exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200328 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100329}
Paul Bakker33b43f12013-08-20 11:48:36 +0200330/* END_CASE */
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100331
Paul Bakker33b43f12013-08-20 11:48:36 +0200332/* BEGIN_CASE */
333void ecp_read_binary( int id, char *input, char *x, char *y, char *z,
334 int ret )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100335{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200336 mbedtls_ecp_group grp;
337 mbedtls_ecp_point P;
338 mbedtls_mpi X, Y, Z;
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100339 int ilen;
340 unsigned char buf[256];
341
342 memset( buf, 0, sizeof( buf ) );
343
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200344 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
345 mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100346
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200347 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100348
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200349 TEST_ASSERT( mbedtls_mpi_read_string( &X, 16, x ) == 0 );
350 TEST_ASSERT( mbedtls_mpi_read_string( &Y, 16, y ) == 0 );
351 TEST_ASSERT( mbedtls_mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100352
Paul Bakker33b43f12013-08-20 11:48:36 +0200353 ilen = unhexify( buf, input );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100354
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200355 TEST_ASSERT( mbedtls_ecp_point_read_binary( &grp, &P, buf, ilen ) == ret );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100356
Paul Bakker33b43f12013-08-20 11:48:36 +0200357 if( ret == 0 )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100358 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200359 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 );
360 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 );
361 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100362 }
363
Paul Bakkerbd51b262014-07-10 15:26:12 +0200364exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200365 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
366 mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100367}
Paul Bakker33b43f12013-08-20 11:48:36 +0200368/* END_CASE */
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100369
Paul Bakker33b43f12013-08-20 11:48:36 +0200370/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200371void mbedtls_ecp_tls_read_point( int id, char *input, char *x, char *y, char *z,
Paul Bakker33b43f12013-08-20 11:48:36 +0200372 int ret )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100373{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200374 mbedtls_ecp_group grp;
375 mbedtls_ecp_point P;
376 mbedtls_mpi X, Y, Z;
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100377 size_t ilen;
378 unsigned char buf[256];
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100379 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100380
381 memset( buf, 0, sizeof( buf ) );
382
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200383 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
384 mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100385
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200386 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100387
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200388 TEST_ASSERT( mbedtls_mpi_read_string( &X, 16, x ) == 0 );
389 TEST_ASSERT( mbedtls_mpi_read_string( &Y, 16, y ) == 0 );
390 TEST_ASSERT( mbedtls_mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100391
Paul Bakker33b43f12013-08-20 11:48:36 +0200392 ilen = unhexify( buf, input );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100393
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200394 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &P, &vbuf, ilen ) == ret );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100395
Paul Bakker33b43f12013-08-20 11:48:36 +0200396 if( ret == 0 )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100397 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200398 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 );
399 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 );
400 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100401 TEST_ASSERT( *vbuf == 0x00 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100402 }
403
Paul Bakkerbd51b262014-07-10 15:26:12 +0200404exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200405 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
406 mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100407}
Paul Bakker33b43f12013-08-20 11:48:36 +0200408/* END_CASE */
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100409
Paul Bakker33b43f12013-08-20 11:48:36 +0200410/* BEGIN_CASE */
411void ecp_tls_write_read_point( int id )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100412{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200413 mbedtls_ecp_group grp;
414 mbedtls_ecp_point pt;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100415 unsigned char buf[256];
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100416 const unsigned char *vbuf;
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100417 size_t olen;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100418
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200419 mbedtls_ecp_group_init( &grp );
420 mbedtls_ecp_point_init( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100421
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200422 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100423
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100424 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200425 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G,
426 MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
427 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen )
428 == MBEDTLS_ERR_ECP_FEATURE_UNAVAILABLE );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100429 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100430
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100431 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200432 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G,
433 MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
434 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
435 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.X, &pt.X ) == 0 );
436 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Y, &pt.Y ) == 0 );
437 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Z, &pt.Z ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100438 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100439
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100440 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200441 TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 );
442 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt,
443 MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
444 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
445 TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100446 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100447
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100448 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200449 TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 );
450 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt,
451 MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
452 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
453 TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100454 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100455
Paul Bakkerbd51b262014-07-10 15:26:12 +0200456exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200457 mbedtls_ecp_group_free( &grp );
458 mbedtls_ecp_point_free( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100459}
Paul Bakker33b43f12013-08-20 11:48:36 +0200460/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100461
Paul Bakker33b43f12013-08-20 11:48:36 +0200462/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200463void mbedtls_ecp_tls_read_group( char *record, int result, int bits )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100464{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200465 mbedtls_ecp_group grp;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100466 unsigned char buf[10];
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100467 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100468 int len, ret;
469
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200470 mbedtls_ecp_group_init( &grp );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100471 memset( buf, 0x00, sizeof( buf ) );
472
Paul Bakker33b43f12013-08-20 11:48:36 +0200473 len = unhexify( buf, record );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100474
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200475 ret = mbedtls_ecp_tls_read_group( &grp, &vbuf, len );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100476
Paul Bakker33b43f12013-08-20 11:48:36 +0200477 TEST_ASSERT( ret == result );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100478 if( ret == 0)
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100479 {
Manuel Pégourié-Gonnardc0696c22015-06-18 16:47:17 +0200480 TEST_ASSERT( mbedtls_mpi_bitlen( &grp.P ) == (size_t) bits );
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100481 TEST_ASSERT( *vbuf == 0x00 );
482 }
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100483
Paul Bakkerbd51b262014-07-10 15:26:12 +0200484exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200485 mbedtls_ecp_group_free( &grp );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100486}
Paul Bakker33b43f12013-08-20 11:48:36 +0200487/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100488
Paul Bakker33b43f12013-08-20 11:48:36 +0200489/* BEGIN_CASE */
490void ecp_tls_write_read_group( int id )
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100491{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200492 mbedtls_ecp_group grp1, grp2;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100493 unsigned char buf[10];
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100494 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100495 size_t len;
496 int ret;
497
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200498 mbedtls_ecp_group_init( &grp1 );
499 mbedtls_ecp_group_init( &grp2 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100500 memset( buf, 0x00, sizeof( buf ) );
501
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200502 TEST_ASSERT( mbedtls_ecp_group_load( &grp1, id ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100503
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200504 TEST_ASSERT( mbedtls_ecp_tls_write_group( &grp1, &len, buf, 10 ) == 0 );
505 ret = mbedtls_ecp_tls_read_group( &grp2, &vbuf, len );
Paul Bakker94b916c2014-04-17 16:07:20 +0200506 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100507
508 if( ret == 0 )
509 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200510 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp1.N, &grp2.N ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100511 TEST_ASSERT( grp1.id == grp2.id );
512 }
513
Paul Bakkerbd51b262014-07-10 15:26:12 +0200514exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200515 mbedtls_ecp_group_free( &grp1 );
516 mbedtls_ecp_group_free( &grp2 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100517}
Paul Bakker33b43f12013-08-20 11:48:36 +0200518/* END_CASE */
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100519
Paul Bakker33b43f12013-08-20 11:48:36 +0200520/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200521void mbedtls_ecp_check_privkey( int id, char *key_hex, int ret )
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200522{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200523 mbedtls_ecp_group grp;
524 mbedtls_mpi d;
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200525
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200526 mbedtls_ecp_group_init( &grp );
527 mbedtls_mpi_init( &d );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200528
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200529 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200530 TEST_ASSERT( mbedtls_mpi_read_string( &d, 16, key_hex ) == 0 );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200531
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200532 TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == ret );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200533
Paul Bakkerbd51b262014-07-10 15:26:12 +0200534exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200535 mbedtls_ecp_group_free( &grp );
536 mbedtls_mpi_free( &d );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200537}
Paul Bakker33b43f12013-08-20 11:48:36 +0200538/* END_CASE */
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200539
Paul Bakker33b43f12013-08-20 11:48:36 +0200540/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200541void mbedtls_ecp_check_pub_priv( int id_pub, char *Qx_pub, char *Qy_pub,
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100542 int id, char *d, char *Qx, char *Qy, int ret )
543{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200544 mbedtls_ecp_keypair pub, prv;
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100545
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200546 mbedtls_ecp_keypair_init( &pub );
547 mbedtls_ecp_keypair_init( &prv );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100548
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200549 if( id_pub != MBEDTLS_ECP_DP_NONE )
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200550 TEST_ASSERT( mbedtls_ecp_group_load( &pub.grp, id_pub ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200551 TEST_ASSERT( mbedtls_ecp_point_read_string( &pub.Q, 16, Qx_pub, Qy_pub ) == 0 );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100552
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200553 if( id != MBEDTLS_ECP_DP_NONE )
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200554 TEST_ASSERT( mbedtls_ecp_group_load( &prv.grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200555 TEST_ASSERT( mbedtls_ecp_point_read_string( &prv.Q, 16, Qx, Qy ) == 0 );
556 TEST_ASSERT( mbedtls_mpi_read_string( &prv.d, 16, d ) == 0 );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100557
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200558 TEST_ASSERT( mbedtls_ecp_check_pub_priv( &pub, &prv ) == ret );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100559
560exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200561 mbedtls_ecp_keypair_free( &pub );
562 mbedtls_ecp_keypair_free( &prv );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100563}
564/* END_CASE */
565
566/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200567void mbedtls_ecp_gen_keypair( int id )
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100568{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200569 mbedtls_ecp_group grp;
570 mbedtls_ecp_point Q;
571 mbedtls_mpi d;
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100572 rnd_pseudo_info rnd_info;
573
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200574 mbedtls_ecp_group_init( &grp );
575 mbedtls_ecp_point_init( &Q );
576 mbedtls_mpi_init( &d );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100577 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
578
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200579 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100580
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200581 TEST_ASSERT( mbedtls_ecp_gen_keypair( &grp, &d, &Q, &rnd_pseudo_rand, &rnd_info )
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100582 == 0 );
583
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200584 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &Q ) == 0 );
585 TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100586
Paul Bakkerbd51b262014-07-10 15:26:12 +0200587exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200588 mbedtls_ecp_group_free( &grp );
589 mbedtls_ecp_point_free( &Q );
590 mbedtls_mpi_free( &d );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100591}
Paul Bakker33b43f12013-08-20 11:48:36 +0200592/* END_CASE */
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100593
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100594/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200595void mbedtls_ecp_gen_key( int id )
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100596{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200597 mbedtls_ecp_keypair key;
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100598 rnd_pseudo_info rnd_info;
599
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200600 mbedtls_ecp_keypair_init( &key );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100601 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
602
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200603 TEST_ASSERT( mbedtls_ecp_gen_key( id, &key, &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100604
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200605 TEST_ASSERT( mbedtls_ecp_check_pubkey( &key.grp, &key.Q ) == 0 );
606 TEST_ASSERT( mbedtls_ecp_check_privkey( &key.grp, &key.d ) == 0 );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100607
Paul Bakkerbd51b262014-07-10 15:26:12 +0200608exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200609 mbedtls_ecp_keypair_free( &key );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100610}
611/* END_CASE */
612
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200613/* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST */
Paul Bakker33b43f12013-08-20 11:48:36 +0200614void ecp_selftest()
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100615{
Andres AG93012e82016-09-09 09:10:28 +0100616 TEST_ASSERT( mbedtls_ecp_self_test( 1 ) == 0 );
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100617}
Paul Bakker33b43f12013-08-20 11:48:36 +0200618/* END_CASE */