blob: df6bb45f6f2dd0235e42b8af3be02b6431794131 [file] [log] [blame]
Werner Lewis0c6ea122022-09-30 13:02:16 +01001/* BEGIN_HEADER */
2#include "mbedtls/bignum.h"
3#include "mbedtls/entropy.h"
4#include "bignum_mod.h"
5#include "constant_time_internal.h"
6#include "test/constant_flow.h"
Werner Lewis0c6ea122022-09-30 13:02:16 +01007/* END_HEADER */
8
9/* BEGIN_DEPENDENCIES
10 * depends_on:MBEDTLS_BIGNUM_C
11 * END_DEPENDENCIES
12 */
13
14/* BEGIN_CASE */
Janos Follath91295d22022-11-24 18:20:26 +000015void mpi_mod_setup( int int_rep, int iret )
Werner Lewis0c6ea122022-09-30 13:02:16 +010016{
17 #define MLIMBS 8
18 mbedtls_mpi_uint mp[MLIMBS];
19 mbedtls_mpi_mod_modulus m;
20 int ret;
21
Minos Galanakis4d4c98b2022-10-27 15:58:02 +010022 memset( mp, 0xFF, sizeof(mp) );
Werner Lewis0c6ea122022-09-30 13:02:16 +010023
24 mbedtls_mpi_mod_modulus_init( &m );
Janos Follath91295d22022-11-24 18:20:26 +000025 ret = mbedtls_mpi_mod_modulus_setup( &m, mp, MLIMBS, int_rep );
Werner Lewis0c6ea122022-09-30 13:02:16 +010026 TEST_EQUAL( ret, iret );
27
Minos Galanakisdd365a52022-10-19 01:48:32 +010028 /* Only test if the constants have been set-up */
29 if ( ret == 0 && int_rep == MBEDTLS_MPI_MOD_REP_MONTGOMERY )
30 {
31 /* Test that the consts have been calculated */
32 TEST_ASSERT( m.rep.mont.rr != NULL );
33 TEST_ASSERT( m.rep.mont.mm != 0 );
34
Minos Galanakisdd365a52022-10-19 01:48:32 +010035 }
36
Werner Lewis0c6ea122022-09-30 13:02:16 +010037 /* Address sanitiser should catch if we try to free mp */
38 mbedtls_mpi_mod_modulus_free( &m );
39
40 /* Make sure that the modulus doesn't have reference to mp anymore */
41 TEST_ASSERT( m.p != mp );
42
Minos Galanakisdd365a52022-10-19 01:48:32 +010043 /* Only test if the constants have been set-up */
44 if ( ret == 0 && int_rep == MBEDTLS_MPI_MOD_REP_MONTGOMERY )
45 {
Minos Galanakisdd365a52022-10-19 01:48:32 +010046 /* Verify the data and pointers allocated have been properly wiped */
47 TEST_ASSERT( m.rep.mont.rr == NULL );
48 TEST_ASSERT( m.rep.mont.mm == 0 );
Minos Galanakisdd365a52022-10-19 01:48:32 +010049 }
Werner Lewis0c6ea122022-09-30 13:02:16 +010050exit:
51 /* It should be safe to call an mbedtls free several times */
52 mbedtls_mpi_mod_modulus_free( &m );
53
54 #undef MLIMBS
55}
56/* END_CASE */
Janos Follath5933f692022-11-02 14:35:17 +000057
58/* BEGIN MERGE SLOT 1 */
59
60/* END MERGE SLOT 1 */
61
62/* BEGIN MERGE SLOT 2 */
63
64/* END MERGE SLOT 2 */
65
66/* BEGIN MERGE SLOT 3 */
67
68/* END MERGE SLOT 3 */
69
70/* BEGIN MERGE SLOT 4 */
71
72/* END MERGE SLOT 4 */
73
74/* BEGIN MERGE SLOT 5 */
75
76/* END MERGE SLOT 5 */
77
78/* BEGIN MERGE SLOT 6 */
79
80/* END MERGE SLOT 6 */
81
82/* BEGIN MERGE SLOT 7 */
Minos Galanakis8f242702022-11-10 16:56:02 +000083/* BEGIN_CASE */
Janos Follath91f3abd2022-11-26 11:47:14 +000084void mpi_residue_setup( char * input_N, char * input_R, int ret )
Minos Galanakisa17ad482022-11-16 16:29:15 +000085{
Minos Galanakisa17ad482022-11-16 16:29:15 +000086 mbedtls_mpi_uint *N = NULL;
87 mbedtls_mpi_uint *R = NULL;
Minos Galanakisaed832a2022-11-24 09:09:47 +000088 size_t n_limbs, r_limbs;
Minos Galanakisa17ad482022-11-16 16:29:15 +000089 mbedtls_mpi_mod_modulus m;
90 mbedtls_mpi_mod_residue r;
91
Minos Galanakisa17ad482022-11-16 16:29:15 +000092 mbedtls_mpi_mod_modulus_init( &m );
93
Minos Galanakisaed832a2022-11-24 09:09:47 +000094 /* Allocate the memory for intermediate data structures */
Janos Follath91f3abd2022-11-26 11:47:14 +000095 TEST_EQUAL( 0, mbedtls_test_read_mpi_core( &N, &n_limbs, input_N ) );
96 TEST_EQUAL( 0, mbedtls_test_read_mpi_core( &R, &r_limbs, input_R ) );
Minos Galanakisaed832a2022-11-24 09:09:47 +000097
Minos Galanakisa17ad482022-11-16 16:29:15 +000098 TEST_EQUAL( 0, mbedtls_mpi_mod_modulus_setup( &m, N, n_limbs,
Janos Follath91295d22022-11-24 18:20:26 +000099 MBEDTLS_MPI_MOD_REP_MONTGOMERY ) );
Minos Galanakisa17ad482022-11-16 16:29:15 +0000100
Minos Galanakisaed832a2022-11-24 09:09:47 +0000101 TEST_EQUAL( ret, mbedtls_mpi_mod_residue_setup( &r, &m, R , r_limbs ) );
Minos Galanakisa17ad482022-11-16 16:29:15 +0000102
Janos Follath91f3abd2022-11-26 11:47:14 +0000103 if ( ret == 0 )
104 {
105 TEST_EQUAL( r.limbs, r_limbs );
106 TEST_ASSERT( r.p == R );
107 }
108
Minos Galanakisa17ad482022-11-16 16:29:15 +0000109exit:
110 mbedtls_mpi_mod_modulus_free( &m );
111 mbedtls_free( N );
112 mbedtls_free( R );
Minos Galanakisa17ad482022-11-16 16:29:15 +0000113}
114/* END_CASE */
Minos Galanakisaed832a2022-11-24 09:09:47 +0000115
Minos Galanakisa17ad482022-11-16 16:29:15 +0000116/* BEGIN_CASE */
Janos Follath339b4392022-11-26 12:20:41 +0000117void mpi_mod_io_neg( char * input_N, data_t * buf, int ret )
Minos Galanakis8f242702022-11-10 16:56:02 +0000118{
Minos Galanakis8f242702022-11-10 16:56:02 +0000119 mbedtls_mpi_uint *N = NULL;
120 mbedtls_mpi_uint *R = NULL;
Minos Galanakis8f242702022-11-10 16:56:02 +0000121
122 mbedtls_mpi_mod_modulus m;
123 mbedtls_mpi_mod_residue r;
Minos Galanakis8f242702022-11-10 16:56:02 +0000124 mbedtls_mpi_mod_residue rn = { NULL, 0 };
Minos Galanakis96070a52022-11-25 19:32:10 +0000125 mbedtls_mpi_mod_ext_rep endian = MBEDTLS_MPI_MOD_EXT_REP_LE;
Minos Galanakis8f242702022-11-10 16:56:02 +0000126
Janos Follath799eaee2022-11-25 15:57:04 +0000127 mbedtls_mpi_mod_modulus_init( &m );
Janos Follath799eaee2022-11-25 15:57:04 +0000128
Janos Follath339b4392022-11-26 12:20:41 +0000129 size_t n_limbs;
Minos Galanakis96070a52022-11-25 19:32:10 +0000130 TEST_EQUAL( 0, mbedtls_test_read_mpi_core( &N, &n_limbs, input_N ) );
Janos Follath339b4392022-11-26 12:20:41 +0000131 size_t r_limbs = n_limbs;
132 ASSERT_ALLOC( R, r_limbs );
Minos Galanakis8f242702022-11-10 16:56:02 +0000133
Minos Galanakis96070a52022-11-25 19:32:10 +0000134 /* modulo->p == NULL || residue->p == NULL ( m has not been set-up ) */
Janos Follath3e3fc912022-11-24 18:02:46 +0000135 TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
Janos Follath566c91d2022-11-26 12:05:50 +0000136 mbedtls_mpi_mod_read( &r, &m, buf->x, buf->len, endian ) );
Minos Galanakis8f242702022-11-10 16:56:02 +0000137
Minos Galanakis96070a52022-11-25 19:32:10 +0000138 TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
Janos Follath566c91d2022-11-26 12:05:50 +0000139 mbedtls_mpi_mod_write( &r, &m, buf->x, buf->len, endian ) );
Minos Galanakis8f242702022-11-10 16:56:02 +0000140
Minos Galanakis96070a52022-11-25 19:32:10 +0000141 TEST_EQUAL( 0, mbedtls_mpi_mod_modulus_setup( &m, N, n_limbs,
142 MBEDTLS_MPI_MOD_REP_MONTGOMERY ) );
Janos Follath339b4392022-11-26 12:20:41 +0000143 TEST_EQUAL( 0, mbedtls_mpi_mod_residue_setup( &r, &m, R , r_limbs ) );
Minos Galanakis96070a52022-11-25 19:32:10 +0000144
145 /* modulo->p == NULL || residue->p == NULL ( m has been set-up ) */
146 TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
Janos Follath566c91d2022-11-26 12:05:50 +0000147 mbedtls_mpi_mod_read( &rn, &m, buf->x, buf->len, endian ) );
Minos Galanakis96070a52022-11-25 19:32:10 +0000148 TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
Janos Follath566c91d2022-11-26 12:05:50 +0000149 mbedtls_mpi_mod_write( &rn, &m, buf->x, buf->len, endian ) );
Minos Galanakis96070a52022-11-25 19:32:10 +0000150
Janos Follathd7bb3522022-11-26 14:59:27 +0000151 /* Fail for r_limbs < m->limbs */
152 r.limbs--;
153 TEST_ASSERT( r.limbs < m.limbs );
Minos Galanakis96070a52022-11-25 19:32:10 +0000154 TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
Janos Follath566c91d2022-11-26 12:05:50 +0000155 mbedtls_mpi_mod_read( &r, &m, buf->x, buf->len, endian ) );
Minos Galanakis96070a52022-11-25 19:32:10 +0000156 TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
Janos Follath566c91d2022-11-26 12:05:50 +0000157 mbedtls_mpi_mod_write( &r, &m, buf->x, buf->len, endian ) );
Janos Follathd7bb3522022-11-26 14:59:27 +0000158 r.limbs++;
159
160 /* Fail for r_limbs > m->limbs */
161 m.limbs--;
162 TEST_ASSERT( r.limbs > m.limbs );
163 TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
164 mbedtls_mpi_mod_read( &r, &m, buf->x, buf->len, endian ) );
165 TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
166 mbedtls_mpi_mod_write( &r, &m, buf->x, buf->len, endian ) );
167 m.limbs++;
Minos Galanakis96070a52022-11-25 19:32:10 +0000168
169 /* Test the read */
Janos Follath566c91d2022-11-26 12:05:50 +0000170 TEST_EQUAL( ret, mbedtls_mpi_mod_read( &r, &m, buf->x, buf->len, endian ) );
Minos Galanakis96070a52022-11-25 19:32:10 +0000171
172 /* Test write overflow only when the representation is large and read is successful */
Janos Follath6ef582f2022-11-26 14:19:02 +0000173 if ( r.limbs > 1 && ret == 0 )
Minos Galanakis96070a52022-11-25 19:32:10 +0000174 TEST_EQUAL( MBEDTLS_ERR_MPI_BUFFER_TOO_SMALL,
Janos Follath566c91d2022-11-26 12:05:50 +0000175 mbedtls_mpi_mod_write( &r, &m, buf->x, 1, endian ) );
Janos Follathd7bb3522022-11-26 14:59:27 +0000176
Minos Galanakis8f242702022-11-10 16:56:02 +0000177exit:
Janos Follathd7bb3522022-11-26 14:59:27 +0000178 mbedtls_mpi_mod_residue_release( &r );
Minos Galanakis8f242702022-11-10 16:56:02 +0000179 mbedtls_mpi_mod_modulus_free( &m );
Minos Galanakis8f242702022-11-10 16:56:02 +0000180 mbedtls_free( N );
181 mbedtls_free( R );
Minos Galanakis8f242702022-11-10 16:56:02 +0000182}
183/* END_CASE */
184
185/* BEGIN_CASE */
Janos Follath3e3fc912022-11-24 18:02:46 +0000186void mpi_mod_io( char * input_N, data_t * input_A, int endian )
Minos Galanakis8f242702022-11-10 16:56:02 +0000187{
188 mbedtls_mpi_uint *N = NULL;
189 mbedtls_mpi_uint *R = NULL;
Janos Follath8dfc8c42022-11-26 15:39:02 +0000190 mbedtls_mpi_uint *R_COPY = NULL;
Minos Galanakis8f242702022-11-10 16:56:02 +0000191 unsigned char *r_buff = NULL;
192 mbedtls_mpi_mod_modulus m;
193 mbedtls_mpi_mod_residue r;
Janos Follath8dfc8c42022-11-26 15:39:02 +0000194 mbedtls_mpi_mod_residue r_copy;
Minos Galanakis8f242702022-11-10 16:56:02 +0000195 size_t n_limbs, n_bytes, a_bytes;
196
Janos Follath799eaee2022-11-25 15:57:04 +0000197 mbedtls_mpi_mod_modulus_init( &m );
198
Minos Galanakis8f242702022-11-10 16:56:02 +0000199 /* Read inputs */
200 TEST_EQUAL( 0, mbedtls_test_read_mpi_core( &N, &n_limbs, input_N ) );
201 n_bytes = n_limbs * sizeof( mbedtls_mpi_uint );
Janos Follath6ef582f2022-11-26 14:19:02 +0000202 a_bytes = input_A->len;
Minos Galanakis8f242702022-11-10 16:56:02 +0000203
204 /* Allocate the memory for intermediate data structures */
205 ASSERT_ALLOC( R, n_bytes );
Janos Follath8dfc8c42022-11-26 15:39:02 +0000206 ASSERT_ALLOC( R_COPY, n_bytes );
Minos Galanakis8f242702022-11-10 16:56:02 +0000207 ASSERT_ALLOC( r_buff, a_bytes );
208
209 /* Test that input's size is not greater to modulo's */
Janos Follath6ef582f2022-11-26 14:19:02 +0000210 TEST_LE_U( a_bytes, n_bytes );
Minos Galanakis8f242702022-11-10 16:56:02 +0000211
212 /* Init Structures */
Janos Follath91295d22022-11-24 18:20:26 +0000213 TEST_EQUAL( 0, mbedtls_mpi_mod_modulus_setup( &m, N, n_limbs,
Minos Galanakis8f242702022-11-10 16:56:02 +0000214 MBEDTLS_MPI_MOD_REP_MONTGOMERY ) );
215
216 /* Enforcing p_limbs >= m->limbs */
Janos Follath3e3fc912022-11-24 18:02:46 +0000217 TEST_EQUAL( 0, mbedtls_mpi_mod_residue_setup( &r, &m, R, n_limbs ) );
Minos Galanakis8f242702022-11-10 16:56:02 +0000218
Janos Follath3e3fc912022-11-24 18:02:46 +0000219 TEST_EQUAL( 0, mbedtls_mpi_mod_read( &r, &m, input_A->x, input_A->len,
220 endian ) );
Minos Galanakis8f242702022-11-10 16:56:02 +0000221
Janos Follath3e3fc912022-11-24 18:02:46 +0000222 TEST_EQUAL( 0, mbedtls_mpi_mod_write( &r, &m, r_buff, a_bytes,
223 endian ) );
Minos Galanakis8f242702022-11-10 16:56:02 +0000224
Janos Follath8dfc8c42022-11-26 15:39:02 +0000225 /* Make sure that writing didn't change the value of r */
226 TEST_EQUAL( 0, mbedtls_mpi_mod_residue_setup( &r_copy, &m, R_COPY, n_limbs ) );
227 TEST_EQUAL( 0, mbedtls_mpi_mod_read( &r_copy, &m, input_A->x, input_A->len,
228 endian ) );
229 ASSERT_COMPARE( r.p, r.limbs, r_copy.p, r_copy.limbs );
230
Minos Galanakis8f242702022-11-10 16:56:02 +0000231 ASSERT_COMPARE( r_buff, a_bytes, input_A->x, a_bytes );
232exit:
233 mbedtls_mpi_mod_modulus_free( &m );
234 mbedtls_free( N );
235 mbedtls_free( R );
Janos Follath8dfc8c42022-11-26 15:39:02 +0000236 mbedtls_free( R_COPY );
Minos Galanakis8f242702022-11-10 16:56:02 +0000237 mbedtls_free( r_buff );
238}
239/* END_CASE */
Janos Follath5933f692022-11-02 14:35:17 +0000240/* END MERGE SLOT 7 */
241
242/* BEGIN MERGE SLOT 8 */
243
244/* END MERGE SLOT 8 */
245
246/* BEGIN MERGE SLOT 9 */
247
248/* END MERGE SLOT 9 */
249
250/* BEGIN MERGE SLOT 10 */
251
252/* END MERGE SLOT 10 */