blob: 65c487ef88cfcf2e0065a287610bd5664e59075f [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/ecp.h"
Paul Bakkerdbd443d2013-08-16 13:38:47 +02003
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02004#define ECP_PF_UNKNOWN -1
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +02005
6#define ECP_PT_RESET( x ) \
7 mbedtls_ecp_point_free( x ); \
8 mbedtls_ecp_point_init( x );
Paul Bakker33b43f12013-08-20 11:48:36 +02009/* END_HEADER */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010010
Paul Bakker33b43f12013-08-20 11:48:36 +020011/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020012 * depends_on:MBEDTLS_ECP_C
Paul Bakker33b43f12013-08-20 11:48:36 +020013 * END_DEPENDENCIES
14 */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010015
Paul Bakker33b43f12013-08-20 11:48:36 +020016/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +010017void mbedtls_ecp_curve_info( int id, int tls_id, int size, char * name )
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010018{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020019 const mbedtls_ecp_curve_info *by_id, *by_tls, *by_name;
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010020
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020021 by_id = mbedtls_ecp_curve_info_from_grp_id( id );
22 by_tls = mbedtls_ecp_curve_info_from_tls_id( tls_id );
23 by_name = mbedtls_ecp_curve_info_from_name( name );
Paul Bakker94b916c2014-04-17 16:07:20 +020024 TEST_ASSERT( by_id != NULL );
25 TEST_ASSERT( by_tls != NULL );
26 TEST_ASSERT( by_name != NULL );
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010027
28 TEST_ASSERT( by_id == by_tls );
29 TEST_ASSERT( by_id == by_name );
30
Manuel Pégourié-Gonnard797f48a2015-06-18 15:45:05 +020031 TEST_ASSERT( by_id->bit_size == size );
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010032}
33/* END_CASE */
34
35/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +010036void ecp_check_pub( int grp_id, char * x_hex, char * y_hex, char * z_hex,
37 int ret )
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010038{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020039 mbedtls_ecp_group grp;
40 mbedtls_ecp_point P;
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010041
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020042 mbedtls_ecp_group_init( &grp );
43 mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010044
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +020045 TEST_ASSERT( mbedtls_ecp_group_load( &grp, grp_id ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010046
Janos Follath28fff142017-01-27 15:51:14 +000047 TEST_ASSERT( mbedtls_mpi_read_string( &P.X, 16, x_hex ) == 0 );
48 TEST_ASSERT( mbedtls_mpi_read_string( &P.Y, 16, y_hex ) == 0 );
49 TEST_ASSERT( mbedtls_mpi_read_string( &P.Z, 16, z_hex ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010050
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020051 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &P ) == ret );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010052
Paul Bakkerbd51b262014-07-10 15:26:12 +020053exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020054 mbedtls_ecp_group_free( &grp );
55 mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +010056}
57/* END_CASE */
58
Manuel Pégourié-Gonnard4b9c51e2017-04-20 15:50:26 +020059/* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE */
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +010060void ecp_test_vect_restart( int id,
61 char *dA_str, char *xA_str, char *yA_str,
62 char *dB_str, char *xZ_str, char *yZ_str,
63 int max_ops, int min_restarts, int max_restarts )
64{
65 /*
66 * Test for early restart. Based on test vectors like ecp_test_vect(),
67 * but for the sake of simplicity only does half of each side. It's
68 * important to test both base point and random point, though, as memory
69 * management is different in each case.
70 *
71 * Don't try using too precise bounds for restarts as the exact number
72 * will depend on settings such as MBEDTLS_ECP_FIXED_POINT_OPTIM and
73 * MBEDTLS_ECP_WINDOW_SIZE, as well as implementation details that may
74 * change in the future. A factor 2 is a minimum safety margin.
75 *
76 * For reference, with mbed TLS 2.4 and default settings, for P-256:
Manuel Pégourié-Gonnard9c5c78f2017-03-20 14:13:07 +010077 * - Random point mult: ~3250M
78 * - Cold base point mult: ~3300M
79 * - Hot base point mult: ~1100M
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +010080 * With MBEDTLS_ECP_WINDOW_SIZE set to 2 (minimum):
Manuel Pégourié-Gonnard9c5c78f2017-03-20 14:13:07 +010081 * - Random point mult: ~3850M
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +010082 */
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +020083 mbedtls_ecp_restart_ctx ctx;
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +010084 mbedtls_ecp_group grp;
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +020085 mbedtls_ecp_point R, P;
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +010086 mbedtls_mpi dA, xA, yA, dB, xZ, yZ;
87 int cnt_restarts;
88 int ret;
89
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +020090 mbedtls_ecp_restart_init( &ctx );
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +020091 mbedtls_ecp_group_init( &grp );
92 mbedtls_ecp_point_init( &R ); mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +010093 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); mbedtls_mpi_init( &yA );
94 mbedtls_mpi_init( &dB ); mbedtls_mpi_init( &xZ ); mbedtls_mpi_init( &yZ );
95
96 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
97
98 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_str ) == 0 );
99 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_str ) == 0 );
100 TEST_ASSERT( mbedtls_mpi_read_string( &yA, 16, yA_str ) == 0 );
101
102 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_str ) == 0 );
103 TEST_ASSERT( mbedtls_mpi_read_string( &xZ, 16, xZ_str ) == 0 );
104 TEST_ASSERT( mbedtls_mpi_read_string( &yZ, 16, yZ_str ) == 0 );
105
106 mbedtls_ecp_set_max_ops( (unsigned) max_ops );
107
108 /* Base point case */
109 cnt_restarts = 0;
110 do {
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200111 ECP_PT_RESET( &R );
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +0200112 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dA, &grp.G, NULL, NULL, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200113 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100114
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200115 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100116 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
117 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yA ) == 0 );
118
119 TEST_ASSERT( cnt_restarts >= min_restarts );
120 TEST_ASSERT( cnt_restarts <= max_restarts );
121
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100122 /* Non-base point case */
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200123 mbedtls_ecp_copy( &P, &R );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100124 cnt_restarts = 0;
125 do {
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200126 ECP_PT_RESET( &R );
127 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dB, &P, NULL, NULL, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200128 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100129
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200130 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100131 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
132 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
133
134 TEST_ASSERT( cnt_restarts >= min_restarts );
135 TEST_ASSERT( cnt_restarts <= max_restarts );
136
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200137 /* Do we leak memory when aborting an operation?
138 * This test only makes sense when we actually restart */
139 if( min_restarts > 0 )
140 {
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200141 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dB, &P, NULL, NULL, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200142 TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
143 }
Manuel Pégourié-Gonnard77af79a2017-03-14 10:58:00 +0100144
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100145exit:
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +0200146 mbedtls_ecp_restart_free( &ctx );
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200147 mbedtls_ecp_group_free( &grp );
148 mbedtls_ecp_point_free( &R ); mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100149 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); mbedtls_mpi_free( &yA );
150 mbedtls_mpi_free( &dB ); mbedtls_mpi_free( &xZ ); mbedtls_mpi_free( &yZ );
151}
152/* END_CASE */
153
Manuel Pégourié-Gonnard4b9c51e2017-04-20 15:50:26 +0200154/* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE */
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200155void ecp_muladd_restart( int id, char *xR_str, char *yR_str,
156 char *u1_str, char *u2_str,
157 char *xQ_str, char *yQ_str,
158 int max_ops, int min_restarts, int max_restarts )
159{
160 /*
161 * Compute R = u1 * G + u2 * Q
162 * (test vectors mostly taken from ECDSA intermediate results)
163 *
164 * See comments at the top of ecp_test_vect_restart()
165 */
166 mbedtls_ecp_restart_ctx ctx;
167 mbedtls_ecp_group grp;
168 mbedtls_ecp_point R, Q;
169 mbedtls_mpi u1, u2, xR, yR;
170 int cnt_restarts;
171 int ret;
172
173 mbedtls_ecp_restart_init( &ctx );
174 mbedtls_ecp_group_init( &grp );
175 mbedtls_ecp_point_init( &R );
176 mbedtls_ecp_point_init( &Q );
177 mbedtls_mpi_init( &u1 ); mbedtls_mpi_init( &u2 );
178 mbedtls_mpi_init( &xR ); mbedtls_mpi_init( &yR );
179
180 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
181
182 TEST_ASSERT( mbedtls_mpi_read_string( &u1, 16, u1_str ) == 0 );
183 TEST_ASSERT( mbedtls_mpi_read_string( &u2, 16, u2_str ) == 0 );
184 TEST_ASSERT( mbedtls_mpi_read_string( &xR, 16, xR_str ) == 0 );
185 TEST_ASSERT( mbedtls_mpi_read_string( &yR, 16, yR_str ) == 0 );
186
187 TEST_ASSERT( mbedtls_mpi_read_string( &Q.X, 16, xQ_str ) == 0 );
188 TEST_ASSERT( mbedtls_mpi_read_string( &Q.Y, 16, yQ_str ) == 0 );
189 TEST_ASSERT( mbedtls_mpi_lset( &Q.Z, 1 ) == 0 );
190
191 mbedtls_ecp_set_max_ops( (unsigned) max_ops );
192
193 cnt_restarts = 0;
194 do {
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200195 ECP_PT_RESET( &R );
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200196 ret = mbedtls_ecp_muladd_restartable( &grp, &R,
197 &u1, &grp.G, &u2, &Q, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200198 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200199
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200200 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200201 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xR ) == 0 );
202 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yR ) == 0 );
203
204 TEST_ASSERT( cnt_restarts >= min_restarts );
205 TEST_ASSERT( cnt_restarts <= max_restarts );
206
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200207 /* Do we leak memory when aborting an operation?
208 * This test only makes sense when we actually restart */
209 if( min_restarts > 0 )
210 {
211 ret = mbedtls_ecp_muladd_restartable( &grp, &R,
212 &u1, &grp.G, &u2, &Q, &ctx );
213 TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
214 }
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200215
216exit:
217 mbedtls_ecp_restart_free( &ctx );
218 mbedtls_ecp_group_free( &grp );
219 mbedtls_ecp_point_free( &R );
220 mbedtls_ecp_point_free( &Q );
221 mbedtls_mpi_free( &u1 ); mbedtls_mpi_free( &u2 );
222 mbedtls_mpi_free( &xR ); mbedtls_mpi_free( &yR );
223}
224/* END_CASE */
225
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100226/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100227void ecp_test_vect( int id, char * dA_str, char * xA_str, char * yA_str,
228 char * dB_str, char * xB_str, char * yB_str,
229 char * xZ_str, char * yZ_str )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100230{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200231 mbedtls_ecp_group grp;
232 mbedtls_ecp_point R;
233 mbedtls_mpi dA, xA, yA, dB, xB, yB, xZ, yZ;
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200234 rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100235
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200236 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
237 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); mbedtls_mpi_init( &yA ); mbedtls_mpi_init( &dB );
238 mbedtls_mpi_init( &xB ); mbedtls_mpi_init( &yB ); mbedtls_mpi_init( &xZ ); mbedtls_mpi_init( &yZ );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200239 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100240
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200241 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100242
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200243 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100244
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200245 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_str ) == 0 );
246 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_str ) == 0 );
247 TEST_ASSERT( mbedtls_mpi_read_string( &yA, 16, yA_str ) == 0 );
248 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_str ) == 0 );
249 TEST_ASSERT( mbedtls_mpi_read_string( &xB, 16, xB_str ) == 0 );
250 TEST_ASSERT( mbedtls_mpi_read_string( &yB, 16, yB_str ) == 0 );
251 TEST_ASSERT( mbedtls_mpi_read_string( &xZ, 16, xZ_str ) == 0 );
252 TEST_ASSERT( mbedtls_mpi_read_string( &yZ, 16, yZ_str ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100253
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200254 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G,
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200255 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200256 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
257 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yA ) == 0 );
258 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
259 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R, NULL, NULL ) == 0 );
260 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
261 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
262 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100263
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200264 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
265 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 );
266 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yB ) == 0 );
267 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
268 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R,
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200269 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200270 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
271 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
272 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100273
Paul Bakkerbd51b262014-07-10 15:26:12 +0200274exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200275 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
276 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); mbedtls_mpi_free( &yA ); mbedtls_mpi_free( &dB );
277 mbedtls_mpi_free( &xB ); mbedtls_mpi_free( &yB ); mbedtls_mpi_free( &xZ ); mbedtls_mpi_free( &yZ );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100278}
Paul Bakker33b43f12013-08-20 11:48:36 +0200279/* END_CASE */
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100280
Paul Bakker33b43f12013-08-20 11:48:36 +0200281/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100282void ecp_test_vec_x( int id, char * dA_hex, char * xA_hex, char * dB_hex,
283 char * xB_hex, char * xS_hex )
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100284{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200285 mbedtls_ecp_group grp;
286 mbedtls_ecp_point R;
287 mbedtls_mpi dA, xA, dB, xB, xS;
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100288 rnd_pseudo_info rnd_info;
289
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200290 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
291 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA );
292 mbedtls_mpi_init( &dB ); mbedtls_mpi_init( &xB );
293 mbedtls_mpi_init( &xS );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100294 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
295
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200296 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100297
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200298 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100299
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200300 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_hex ) == 0 );
301 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_hex ) == 0 );
302 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_hex ) == 0 );
303 TEST_ASSERT( mbedtls_mpi_read_string( &xB, 16, xB_hex ) == 0 );
304 TEST_ASSERT( mbedtls_mpi_read_string( &xS, 16, xS_hex ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100305
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200306 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G,
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100307 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200308 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
309 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100310
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200311 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R,
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100312 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200313 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
314 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100315
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200316 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
317 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
318 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100319
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200320 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R, NULL, NULL ) == 0 );
321 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
322 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100323
Paul Bakkerbd51b262014-07-10 15:26:12 +0200324exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200325 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
326 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA );
327 mbedtls_mpi_free( &dB ); mbedtls_mpi_free( &xB );
328 mbedtls_mpi_free( &xS );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100329}
330/* END_CASE */
331
332/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100333void ecp_fast_mod( int id, char * N_str )
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100334{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200335 mbedtls_ecp_group grp;
336 mbedtls_mpi N, R;
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100337
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200338 mbedtls_mpi_init( &N ); mbedtls_mpi_init( &R );
339 mbedtls_ecp_group_init( &grp );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100340
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200341 TEST_ASSERT( mbedtls_mpi_read_string( &N, 16, N_str ) == 0 );
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200342 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde783f062013-10-21 14:52:21 +0200343 TEST_ASSERT( grp.modp != NULL );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100344
345 /*
346 * Store correct result before we touch N
347 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200348 TEST_ASSERT( mbedtls_mpi_mod_mpi( &R, &N, &grp.P ) == 0 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100349
350 TEST_ASSERT( grp.modp( &N ) == 0 );
Manuel Pégourié-Gonnardc0696c22015-06-18 16:47:17 +0200351 TEST_ASSERT( mbedtls_mpi_bitlen( &N ) <= grp.pbits + 3 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100352
353 /*
Paul Bakkerd8b0c5e2014-04-11 15:31:33 +0200354 * Use mod rather than addition/subtraction in case previous test fails
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100355 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200356 TEST_ASSERT( mbedtls_mpi_mod_mpi( &N, &N, &grp.P ) == 0 );
357 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &N, &R ) == 0 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100358
Paul Bakkerbd51b262014-07-10 15:26:12 +0200359exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200360 mbedtls_mpi_free( &N ); mbedtls_mpi_free( &R );
361 mbedtls_ecp_group_free( &grp );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100362}
Paul Bakker33b43f12013-08-20 11:48:36 +0200363/* END_CASE */
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100364
Paul Bakker33b43f12013-08-20 11:48:36 +0200365/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100366void ecp_write_binary( int id, char * x, char * y, char * z, int format,
Azim Khan5fcca462018-06-29 11:05:32 +0100367 data_t * out, int blen, int ret )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100368{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200369 mbedtls_ecp_group grp;
370 mbedtls_ecp_point P;
Azim Khanf1aaec92017-05-30 14:23:15 +0100371 unsigned char buf[256];
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100372 size_t olen;
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100373
374 memset( buf, 0, sizeof( buf ) );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100375
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200376 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100377
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200378 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100379
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200380 TEST_ASSERT( mbedtls_mpi_read_string( &P.X, 16, x ) == 0 );
381 TEST_ASSERT( mbedtls_mpi_read_string( &P.Y, 16, y ) == 0 );
382 TEST_ASSERT( mbedtls_mpi_read_string( &P.Z, 16, z ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100383
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200384 TEST_ASSERT( mbedtls_ecp_point_write_binary( &grp, &P, format,
Paul Bakker33b43f12013-08-20 11:48:36 +0200385 &olen, buf, blen ) == ret );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100386
Paul Bakker33b43f12013-08-20 11:48:36 +0200387 if( ret == 0 )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100388 {
Azim Khand30ca132017-06-09 04:32:58 +0100389 TEST_ASSERT( hexcmp( buf, out->x, olen, out->len ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100390 }
391
Paul Bakkerbd51b262014-07-10 15:26:12 +0200392exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200393 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100394}
Paul Bakker33b43f12013-08-20 11:48:36 +0200395/* END_CASE */
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100396
Paul Bakker33b43f12013-08-20 11:48:36 +0200397/* BEGIN_CASE */
Azim Khan5fcca462018-06-29 11:05:32 +0100398void ecp_read_binary( int id, data_t * buf, char * x, char * y, char * z,
Paul Bakker33b43f12013-08-20 11:48:36 +0200399 int ret )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100400{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200401 mbedtls_ecp_group grp;
402 mbedtls_ecp_point P;
403 mbedtls_mpi X, Y, Z;
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100404
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100405
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200406 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
407 mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100408
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200409 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100410
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200411 TEST_ASSERT( mbedtls_mpi_read_string( &X, 16, x ) == 0 );
412 TEST_ASSERT( mbedtls_mpi_read_string( &Y, 16, y ) == 0 );
413 TEST_ASSERT( mbedtls_mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100414
Azim Khand30ca132017-06-09 04:32:58 +0100415 TEST_ASSERT( mbedtls_ecp_point_read_binary( &grp, &P, buf->x, buf->len ) == ret );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100416
Paul Bakker33b43f12013-08-20 11:48:36 +0200417 if( ret == 0 )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100418 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200419 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 );
420 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 );
421 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100422 }
423
Paul Bakkerbd51b262014-07-10 15:26:12 +0200424exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200425 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
426 mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100427}
Paul Bakker33b43f12013-08-20 11:48:36 +0200428/* END_CASE */
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100429
Paul Bakker33b43f12013-08-20 11:48:36 +0200430/* BEGIN_CASE */
Azim Khan5fcca462018-06-29 11:05:32 +0100431void mbedtls_ecp_tls_read_point( int id, data_t * buf, char * x, char * y,
Azim Khand30ca132017-06-09 04:32:58 +0100432 char * z, int ret )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100433{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200434 mbedtls_ecp_group grp;
435 mbedtls_ecp_point P;
436 mbedtls_mpi X, Y, Z;
Azim Khand30ca132017-06-09 04:32:58 +0100437 const unsigned char *vbuf = buf->x;
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100438
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100439
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200440 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
441 mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100442
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200443 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100444
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200445 TEST_ASSERT( mbedtls_mpi_read_string( &X, 16, x ) == 0 );
446 TEST_ASSERT( mbedtls_mpi_read_string( &Y, 16, y ) == 0 );
447 TEST_ASSERT( mbedtls_mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100448
Azim Khand30ca132017-06-09 04:32:58 +0100449 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &P, &vbuf, buf->len ) == ret );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100450
Paul Bakker33b43f12013-08-20 11:48:36 +0200451 if( ret == 0 )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100452 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200453 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 );
454 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 );
455 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 );
Azim Khand30ca132017-06-09 04:32:58 +0100456 TEST_ASSERT( (uint32_t)( vbuf - buf->x ) == buf->len );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100457 }
458
Paul Bakkerbd51b262014-07-10 15:26:12 +0200459exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200460 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
461 mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100462}
Paul Bakker33b43f12013-08-20 11:48:36 +0200463/* END_CASE */
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100464
Paul Bakker33b43f12013-08-20 11:48:36 +0200465/* BEGIN_CASE */
466void ecp_tls_write_read_point( int id )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100467{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200468 mbedtls_ecp_group grp;
469 mbedtls_ecp_point pt;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100470 unsigned char buf[256];
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100471 const unsigned char *vbuf;
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100472 size_t olen;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100473
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200474 mbedtls_ecp_group_init( &grp );
475 mbedtls_ecp_point_init( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100476
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200477 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100478
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100479 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200480 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G,
481 MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
482 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen )
483 == MBEDTLS_ERR_ECP_FEATURE_UNAVAILABLE );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100484 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100485
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100486 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200487 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G,
488 MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
489 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
490 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.X, &pt.X ) == 0 );
491 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Y, &pt.Y ) == 0 );
492 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Z, &pt.Z ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100493 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100494
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100495 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200496 TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 );
497 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt,
498 MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
499 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
500 TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100501 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100502
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100503 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200504 TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 );
505 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt,
506 MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
507 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
508 TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100509 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100510
Paul Bakkerbd51b262014-07-10 15:26:12 +0200511exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200512 mbedtls_ecp_group_free( &grp );
513 mbedtls_ecp_point_free( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100514}
Paul Bakker33b43f12013-08-20 11:48:36 +0200515/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100516
Paul Bakker33b43f12013-08-20 11:48:36 +0200517/* BEGIN_CASE */
Azim Khan5fcca462018-06-29 11:05:32 +0100518void mbedtls_ecp_tls_read_group( data_t * buf, int result, int bits,
Azim Khand30ca132017-06-09 04:32:58 +0100519 int record_len )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100520{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200521 mbedtls_ecp_group grp;
Azim Khand30ca132017-06-09 04:32:58 +0100522 const unsigned char *vbuf = buf->x;
Azim Khanf1aaec92017-05-30 14:23:15 +0100523 int ret;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100524
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200525 mbedtls_ecp_group_init( &grp );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100526
Azim Khand30ca132017-06-09 04:32:58 +0100527 ret = mbedtls_ecp_tls_read_group( &grp, &vbuf, buf->len );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100528
Paul Bakker33b43f12013-08-20 11:48:36 +0200529 TEST_ASSERT( ret == result );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100530 if( ret == 0)
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100531 {
Manuel Pégourié-Gonnardc0696c22015-06-18 16:47:17 +0200532 TEST_ASSERT( mbedtls_mpi_bitlen( &grp.P ) == (size_t) bits );
Azim Khand30ca132017-06-09 04:32:58 +0100533 TEST_ASSERT( vbuf - buf->x == record_len);
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100534 }
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100535
Paul Bakkerbd51b262014-07-10 15:26:12 +0200536exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200537 mbedtls_ecp_group_free( &grp );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100538}
Paul Bakker33b43f12013-08-20 11:48:36 +0200539/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100540
Paul Bakker33b43f12013-08-20 11:48:36 +0200541/* BEGIN_CASE */
542void ecp_tls_write_read_group( int id )
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100543{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200544 mbedtls_ecp_group grp1, grp2;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100545 unsigned char buf[10];
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100546 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100547 size_t len;
548 int ret;
549
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200550 mbedtls_ecp_group_init( &grp1 );
551 mbedtls_ecp_group_init( &grp2 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100552 memset( buf, 0x00, sizeof( buf ) );
553
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200554 TEST_ASSERT( mbedtls_ecp_group_load( &grp1, id ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100555
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200556 TEST_ASSERT( mbedtls_ecp_tls_write_group( &grp1, &len, buf, 10 ) == 0 );
557 ret = mbedtls_ecp_tls_read_group( &grp2, &vbuf, len );
Paul Bakker94b916c2014-04-17 16:07:20 +0200558 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100559
560 if( ret == 0 )
561 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200562 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp1.N, &grp2.N ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100563 TEST_ASSERT( grp1.id == grp2.id );
564 }
565
Paul Bakkerbd51b262014-07-10 15:26:12 +0200566exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200567 mbedtls_ecp_group_free( &grp1 );
568 mbedtls_ecp_group_free( &grp2 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100569}
Paul Bakker33b43f12013-08-20 11:48:36 +0200570/* END_CASE */
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100571
Paul Bakker33b43f12013-08-20 11:48:36 +0200572/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100573void mbedtls_ecp_check_privkey( int id, char * key_hex, int ret )
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200574{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200575 mbedtls_ecp_group grp;
576 mbedtls_mpi d;
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200577
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200578 mbedtls_ecp_group_init( &grp );
579 mbedtls_mpi_init( &d );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200580
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200581 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200582 TEST_ASSERT( mbedtls_mpi_read_string( &d, 16, key_hex ) == 0 );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200583
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200584 TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == ret );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200585
Paul Bakkerbd51b262014-07-10 15:26:12 +0200586exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200587 mbedtls_ecp_group_free( &grp );
588 mbedtls_mpi_free( &d );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200589}
Paul Bakker33b43f12013-08-20 11:48:36 +0200590/* END_CASE */
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200591
Paul Bakker33b43f12013-08-20 11:48:36 +0200592/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100593void mbedtls_ecp_check_pub_priv( int id_pub, char * Qx_pub, char * Qy_pub,
594 int id, char * d, char * Qx, char * Qy,
595 int ret )
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100596{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200597 mbedtls_ecp_keypair pub, prv;
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100598
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200599 mbedtls_ecp_keypair_init( &pub );
600 mbedtls_ecp_keypair_init( &prv );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100601
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200602 if( id_pub != MBEDTLS_ECP_DP_NONE )
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200603 TEST_ASSERT( mbedtls_ecp_group_load( &pub.grp, id_pub ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200604 TEST_ASSERT( mbedtls_ecp_point_read_string( &pub.Q, 16, Qx_pub, Qy_pub ) == 0 );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100605
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200606 if( id != MBEDTLS_ECP_DP_NONE )
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200607 TEST_ASSERT( mbedtls_ecp_group_load( &prv.grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200608 TEST_ASSERT( mbedtls_ecp_point_read_string( &prv.Q, 16, Qx, Qy ) == 0 );
609 TEST_ASSERT( mbedtls_mpi_read_string( &prv.d, 16, d ) == 0 );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100610
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200611 TEST_ASSERT( mbedtls_ecp_check_pub_priv( &pub, &prv ) == ret );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100612
613exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200614 mbedtls_ecp_keypair_free( &pub );
615 mbedtls_ecp_keypair_free( &prv );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100616}
617/* END_CASE */
618
619/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200620void mbedtls_ecp_gen_keypair( int id )
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100621{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200622 mbedtls_ecp_group grp;
623 mbedtls_ecp_point Q;
624 mbedtls_mpi d;
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100625 rnd_pseudo_info rnd_info;
626
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200627 mbedtls_ecp_group_init( &grp );
628 mbedtls_ecp_point_init( &Q );
629 mbedtls_mpi_init( &d );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100630 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
631
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200632 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100633
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200634 TEST_ASSERT( mbedtls_ecp_gen_keypair( &grp, &d, &Q, &rnd_pseudo_rand, &rnd_info )
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100635 == 0 );
636
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200637 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &Q ) == 0 );
638 TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100639
Paul Bakkerbd51b262014-07-10 15:26:12 +0200640exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200641 mbedtls_ecp_group_free( &grp );
642 mbedtls_ecp_point_free( &Q );
643 mbedtls_mpi_free( &d );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100644}
Paul Bakker33b43f12013-08-20 11:48:36 +0200645/* END_CASE */
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100646
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100647/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200648void mbedtls_ecp_gen_key( int id )
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100649{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200650 mbedtls_ecp_keypair key;
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100651 rnd_pseudo_info rnd_info;
652
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200653 mbedtls_ecp_keypair_init( &key );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100654 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
655
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200656 TEST_ASSERT( mbedtls_ecp_gen_key( id, &key, &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100657
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200658 TEST_ASSERT( mbedtls_ecp_check_pubkey( &key.grp, &key.Q ) == 0 );
659 TEST_ASSERT( mbedtls_ecp_check_privkey( &key.grp, &key.d ) == 0 );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100660
Paul Bakkerbd51b262014-07-10 15:26:12 +0200661exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200662 mbedtls_ecp_keypair_free( &key );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100663}
664/* END_CASE */
665
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200666/* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST */
Azim Khanf1aaec92017-05-30 14:23:15 +0100667void ecp_selftest( )
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100668{
Andres AG93012e82016-09-09 09:10:28 +0100669 TEST_ASSERT( mbedtls_ecp_self_test( 1 ) == 0 );
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100670}
Paul Bakker33b43f12013-08-20 11:48:36 +0200671/* END_CASE */