Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 1 | /* BEGIN_HEADER */ |
Rich Evans | ce2f237 | 2015-02-06 13:57:42 +0000 | [diff] [blame] | 2 | #include "polarssl/ecdh.h" |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 3 | /* END_HEADER */ |
Manuel Pégourié-Gonnard | 61ce13b | 2013-01-26 16:20:32 +0100 | [diff] [blame] | 4 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 5 | /* BEGIN_DEPENDENCIES |
Manuel Pégourié-Gonnard | a0f0747 | 2013-08-23 16:35:32 +0200 | [diff] [blame] | 6 | * depends_on:POLARSSL_ECDH_C |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 7 | * END_DEPENDENCIES |
| 8 | */ |
Manuel Pégourié-Gonnard | 61ce13b | 2013-01-26 16:20:32 +0100 | [diff] [blame] | 9 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 10 | /* BEGIN_CASE */ |
| 11 | void ecdh_primitive_random( int id ) |
Manuel Pégourié-Gonnard | 61ce13b | 2013-01-26 16:20:32 +0100 | [diff] [blame] | 12 | { |
| 13 | ecp_group grp; |
| 14 | ecp_point qA, qB; |
| 15 | mpi dA, dB, zA, zB; |
| 16 | rnd_pseudo_info rnd_info; |
| 17 | |
| 18 | ecp_group_init( &grp ); |
| 19 | ecp_point_init( &qA ); ecp_point_init( &qB ); |
| 20 | mpi_init( &dA ); mpi_init( &dB ); |
| 21 | mpi_init( &zA ); mpi_init( &zB ); |
| 22 | memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) ); |
| 23 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 24 | TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 ); |
Manuel Pégourié-Gonnard | 61ce13b | 2013-01-26 16:20:32 +0100 | [diff] [blame] | 25 | |
| 26 | TEST_ASSERT( ecdh_gen_public( &grp, &dA, &qA, &rnd_pseudo_rand, &rnd_info ) |
| 27 | == 0 ); |
| 28 | TEST_ASSERT( ecdh_gen_public( &grp, &dB, &qB, &rnd_pseudo_rand, &rnd_info ) |
| 29 | == 0 ); |
Manuel Pégourié-Gonnard | e09d2f8 | 2013-09-02 14:29:09 +0200 | [diff] [blame] | 30 | TEST_ASSERT( ecdh_compute_shared( &grp, &zA, &qB, &dA, |
| 31 | &rnd_pseudo_rand, &rnd_info ) == 0 ); |
| 32 | TEST_ASSERT( ecdh_compute_shared( &grp, &zB, &qA, &dB, |
| 33 | NULL, NULL ) == 0 ); |
Manuel Pégourié-Gonnard | 61ce13b | 2013-01-26 16:20:32 +0100 | [diff] [blame] | 34 | |
| 35 | TEST_ASSERT( mpi_cmp_mpi( &zA, &zB ) == 0 ); |
| 36 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 37 | exit: |
Manuel Pégourié-Gonnard | 61ce13b | 2013-01-26 16:20:32 +0100 | [diff] [blame] | 38 | ecp_group_free( &grp ); |
| 39 | ecp_point_free( &qA ); ecp_point_free( &qB ); |
| 40 | mpi_free( &dA ); mpi_free( &dB ); |
| 41 | mpi_free( &zA ); mpi_free( &zB ); |
| 42 | } |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 43 | /* END_CASE */ |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 44 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 45 | /* BEGIN_CASE */ |
| 46 | void ecdh_primitive_testvec( int id, char *dA_str, char *xA_str, char *yA_str, |
| 47 | char *dB_str, char *xB_str, char *yB_str, |
| 48 | char *z_str ) |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 49 | { |
| 50 | ecp_group grp; |
| 51 | ecp_point qA, qB; |
| 52 | mpi dA, dB, zA, zB, check; |
Manuel Pégourié-Gonnard | 544416a | 2014-01-23 16:55:18 +0100 | [diff] [blame] | 53 | unsigned char rnd_buf_A[POLARSSL_ECP_MAX_BYTES]; |
| 54 | unsigned char rnd_buf_B[POLARSSL_ECP_MAX_BYTES]; |
| 55 | rnd_buf_info rnd_info_A, rnd_info_B; |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 56 | |
| 57 | ecp_group_init( &grp ); |
| 58 | ecp_point_init( &qA ); ecp_point_init( &qB ); |
| 59 | mpi_init( &dA ); mpi_init( &dB ); |
| 60 | mpi_init( &zA ); mpi_init( &zB ); mpi_init( &check ); |
| 61 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 62 | TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 ); |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 63 | |
Manuel Pégourié-Gonnard | 544416a | 2014-01-23 16:55:18 +0100 | [diff] [blame] | 64 | rnd_info_A.buf = rnd_buf_A; |
| 65 | rnd_info_A.length = unhexify( rnd_buf_A, dA_str ); |
| 66 | |
| 67 | /* Fix rnd_buf_A by shifting it left if necessary */ |
| 68 | if( grp.nbits % 8 != 0 ) |
| 69 | { |
| 70 | unsigned char shift = 8 - ( grp.nbits % 8 ); |
| 71 | size_t i; |
| 72 | |
| 73 | for( i = 0; i < rnd_info_A.length - 1; i++ ) |
| 74 | rnd_buf_A[i] = rnd_buf_A[i] << shift |
| 75 | | rnd_buf_A[i+1] >> ( 8 - shift ); |
| 76 | |
| 77 | rnd_buf_A[rnd_info_A.length-1] <<= shift; |
| 78 | } |
| 79 | |
| 80 | rnd_info_B.buf = rnd_buf_B; |
| 81 | rnd_info_B.length = unhexify( rnd_buf_B, dB_str ); |
| 82 | |
| 83 | /* Fix rnd_buf_B by shifting it left if necessary */ |
| 84 | if( grp.nbits % 8 != 0 ) |
| 85 | { |
| 86 | unsigned char shift = 8 - ( grp.nbits % 8 ); |
| 87 | size_t i; |
| 88 | |
| 89 | for( i = 0; i < rnd_info_B.length - 1; i++ ) |
| 90 | rnd_buf_B[i] = rnd_buf_B[i] << shift |
| 91 | | rnd_buf_B[i+1] >> ( 8 - shift ); |
| 92 | |
| 93 | rnd_buf_B[rnd_info_B.length-1] <<= shift; |
| 94 | } |
| 95 | |
| 96 | TEST_ASSERT( ecdh_gen_public( &grp, &dA, &qA, |
| 97 | rnd_buffer_rand, &rnd_info_A ) == 0 ); |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 98 | TEST_ASSERT( ! ecp_is_zero( &qA ) ); |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 99 | TEST_ASSERT( mpi_read_string( &check, 16, xA_str ) == 0 ); |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 100 | TEST_ASSERT( mpi_cmp_mpi( &qA.X, &check ) == 0 ); |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 101 | TEST_ASSERT( mpi_read_string( &check, 16, yA_str ) == 0 ); |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 102 | TEST_ASSERT( mpi_cmp_mpi( &qA.Y, &check ) == 0 ); |
| 103 | |
Manuel Pégourié-Gonnard | 544416a | 2014-01-23 16:55:18 +0100 | [diff] [blame] | 104 | TEST_ASSERT( ecdh_gen_public( &grp, &dB, &qB, |
| 105 | rnd_buffer_rand, &rnd_info_B ) == 0 ); |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 106 | TEST_ASSERT( ! ecp_is_zero( &qB ) ); |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 107 | TEST_ASSERT( mpi_read_string( &check, 16, xB_str ) == 0 ); |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 108 | TEST_ASSERT( mpi_cmp_mpi( &qB.X, &check ) == 0 ); |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 109 | TEST_ASSERT( mpi_read_string( &check, 16, yB_str ) == 0 ); |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 110 | TEST_ASSERT( mpi_cmp_mpi( &qB.Y, &check ) == 0 ); |
| 111 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 112 | TEST_ASSERT( mpi_read_string( &check, 16, z_str ) == 0 ); |
Manuel Pégourié-Gonnard | e09d2f8 | 2013-09-02 14:29:09 +0200 | [diff] [blame] | 113 | TEST_ASSERT( ecdh_compute_shared( &grp, &zA, &qB, &dA, NULL, NULL ) == 0 ); |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 114 | TEST_ASSERT( mpi_cmp_mpi( &zA, &check ) == 0 ); |
Manuel Pégourié-Gonnard | e09d2f8 | 2013-09-02 14:29:09 +0200 | [diff] [blame] | 115 | TEST_ASSERT( ecdh_compute_shared( &grp, &zB, &qA, &dB, NULL, NULL ) == 0 ); |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 116 | TEST_ASSERT( mpi_cmp_mpi( &zB, &check ) == 0 ); |
| 117 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 118 | exit: |
Manuel Pégourié-Gonnard | 007b717 | 2013-01-27 08:56:21 +0100 | [diff] [blame] | 119 | ecp_group_free( &grp ); |
| 120 | ecp_point_free( &qA ); ecp_point_free( &qB ); |
| 121 | mpi_free( &dA ); mpi_free( &dB ); |
| 122 | mpi_free( &zA ); mpi_free( &zB ); mpi_free( &check ); |
| 123 | } |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 124 | /* END_CASE */ |
Manuel Pégourié-Gonnard | 854fbd7 | 2013-02-11 20:28:55 +0100 | [diff] [blame] | 125 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 126 | /* BEGIN_CASE */ |
| 127 | void ecdh_exchange( int id ) |
Manuel Pégourié-Gonnard | 854fbd7 | 2013-02-11 20:28:55 +0100 | [diff] [blame] | 128 | { |
| 129 | ecdh_context srv, cli; |
| 130 | unsigned char buf[1000]; |
| 131 | const unsigned char *vbuf; |
| 132 | size_t len; |
| 133 | rnd_pseudo_info rnd_info; |
| 134 | |
| 135 | ecdh_init( &srv ); |
| 136 | ecdh_init( &cli ); |
| 137 | memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) ); |
| 138 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 139 | TEST_ASSERT( ecp_use_known_dp( &srv.grp, id ) == 0 ); |
Manuel Pégourié-Gonnard | 854fbd7 | 2013-02-11 20:28:55 +0100 | [diff] [blame] | 140 | |
| 141 | memset( buf, 0x00, sizeof( buf ) ); vbuf = buf; |
| 142 | TEST_ASSERT( ecdh_make_params( &srv, &len, buf, 1000, |
| 143 | &rnd_pseudo_rand, &rnd_info ) == 0 ); |
| 144 | TEST_ASSERT( ecdh_read_params( &cli, &vbuf, buf + len ) == 0 ); |
| 145 | |
Manuel Pégourié-Gonnard | 424fda5 | 2013-02-11 22:05:42 +0100 | [diff] [blame] | 146 | memset( buf, 0x00, sizeof( buf ) ); |
Manuel Pégourié-Gonnard | 5cceb41 | 2013-02-11 21:51:45 +0100 | [diff] [blame] | 147 | TEST_ASSERT( ecdh_make_public( &cli, &len, buf, 1000, |
| 148 | &rnd_pseudo_rand, &rnd_info ) == 0 ); |
| 149 | TEST_ASSERT( ecdh_read_public( &srv, buf, len ) == 0 ); |
| 150 | |
Manuel Pégourié-Gonnard | e09d2f8 | 2013-09-02 14:29:09 +0200 | [diff] [blame] | 151 | TEST_ASSERT( ecdh_calc_secret( &srv, &len, buf, 1000, |
| 152 | &rnd_pseudo_rand, &rnd_info ) == 0 ); |
| 153 | TEST_ASSERT( ecdh_calc_secret( &cli, &len, buf, 1000, NULL, NULL ) == 0 ); |
Manuel Pégourié-Gonnard | 424fda5 | 2013-02-11 22:05:42 +0100 | [diff] [blame] | 154 | TEST_ASSERT( mpi_cmp_mpi( &srv.z, &cli.z ) == 0 ); |
| 155 | |
Paul Bakker | bd51b26 | 2014-07-10 15:26:12 +0200 | [diff] [blame] | 156 | exit: |
Manuel Pégourié-Gonnard | 854fbd7 | 2013-02-11 20:28:55 +0100 | [diff] [blame] | 157 | ecdh_free( &srv ); |
| 158 | ecdh_free( &cli ); |
| 159 | } |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 160 | /* END_CASE */ |