blob: 4e177ad832dff5dd6661322d3ccfb57111e8dfef [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +01002#include <polarssl/ecp.h>
Paul Bakkerdbd443d2013-08-16 13:38:47 +02003
4#define POLARSSL_ECP_PF_UNKNOWN -1
Paul Bakker33b43f12013-08-20 11:48:36 +02005/* END_HEADER */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +01006
Paul Bakker33b43f12013-08-20 11:48:36 +02007/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnarda0f07472013-08-23 16:35:32 +02008 * depends_on:POLARSSL_ECP_C
Paul Bakker33b43f12013-08-20 11:48:36 +02009 * END_DEPENDENCIES
10 */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010011
Paul Bakker33b43f12013-08-20 11:48:36 +020012/* BEGIN_CASE */
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010013void ecp_curve_info( int id, int tls_id, int size, char *name )
14{
15 const ecp_curve_info *by_id, *by_tls, *by_name;
16
17 TEST_ASSERT( ( by_id = ecp_curve_info_from_grp_id( id ) ) != NULL );
18 TEST_ASSERT( ( by_tls = ecp_curve_info_from_tls_id( tls_id ) ) != NULL );
19 TEST_ASSERT( ( by_name = ecp_curve_info_from_name( name ) ) != NULL );
20
21 TEST_ASSERT( by_id == by_tls );
22 TEST_ASSERT( by_id == by_name );
23
24 TEST_ASSERT( by_id->size == size );
25}
26/* END_CASE */
27
28/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +020029void ecp_small_add( int a_zero, char *x_a, char *y_a, int b_zero, char *x_b,
30 char *y_b, int c_zero, int x_c, int y_c )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010031{
32 ecp_group grp;
33 ecp_point A, B, C;
34
35 ecp_group_init( &grp );
36 ecp_point_init( &A ); ecp_point_init( &B ); ecp_point_init( &C );
37
38 TEST_ASSERT( ecp_group_read_string( &grp, 10,
39 "47", "4", "17", "42", "13" ) == 0 );
40
Paul Bakker33b43f12013-08-20 11:48:36 +020041 if( a_zero )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010042 ecp_set_zero( &A );
43 else
Paul Bakker33b43f12013-08-20 11:48:36 +020044 TEST_ASSERT( ecp_point_read_string( &A, 10, x_a, y_a ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010045
Paul Bakker33b43f12013-08-20 11:48:36 +020046 if( b_zero )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010047 ecp_set_zero( &B );
48 else
Paul Bakker33b43f12013-08-20 11:48:36 +020049 TEST_ASSERT( ecp_point_read_string( &B, 10, x_b, y_b ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010050
51 TEST_ASSERT( ecp_add( &grp, &C, &A, &B ) == 0 );
52
Paul Bakker33b43f12013-08-20 11:48:36 +020053 if( c_zero )
Manuel Pégourié-Gonnard1c2782c2012-11-19 20:16:28 +010054 TEST_ASSERT( mpi_cmp_int( &C.Z, 0 ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010055 else
56 {
Paul Bakker33b43f12013-08-20 11:48:36 +020057 TEST_ASSERT( mpi_cmp_int( &C.X, x_c ) == 0 );
58 TEST_ASSERT( mpi_cmp_int( &C.Y, y_c ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010059 }
60
61 TEST_ASSERT( ecp_add( &grp, &C, &B, &A ) == 0 );
62
Paul Bakker33b43f12013-08-20 11:48:36 +020063 if( c_zero )
Manuel Pégourié-Gonnard1c2782c2012-11-19 20:16:28 +010064 TEST_ASSERT( mpi_cmp_int( &C.Z, 0 ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010065 else
66 {
Paul Bakker33b43f12013-08-20 11:48:36 +020067 TEST_ASSERT( mpi_cmp_int( &C.X, x_c ) == 0 );
68 TEST_ASSERT( mpi_cmp_int( &C.Y, y_c ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010069 }
70
71 ecp_group_free( &grp );
72 ecp_point_free( &A ); ecp_point_free( &B ); ecp_point_free( &C );
73}
Paul Bakker33b43f12013-08-20 11:48:36 +020074/* END_CASE */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010075
Paul Bakker33b43f12013-08-20 11:48:36 +020076/* BEGIN_CASE */
77void ecp_small_sub( int a_zero, char *x_a, char *y_a, int b_zero, char *x_b,
78 char *y_b, int c_zero, int x_c, int y_c )
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +010079{
80 ecp_group grp;
81 ecp_point A, B, C;
82
83 ecp_group_init( &grp );
84 ecp_point_init( &A ); ecp_point_init( &B ); ecp_point_init( &C );
85
86 TEST_ASSERT( ecp_group_read_string( &grp, 10,
87 "47", "4", "17", "42", "13" ) == 0 );
88
Paul Bakker33b43f12013-08-20 11:48:36 +020089 if( a_zero )
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +010090 ecp_set_zero( &A );
91 else
Paul Bakker33b43f12013-08-20 11:48:36 +020092 TEST_ASSERT( ecp_point_read_string( &A, 10, x_a, y_a ) == 0 );
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +010093
Paul Bakker33b43f12013-08-20 11:48:36 +020094 if( b_zero )
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +010095 ecp_set_zero( &B );
96 else
Paul Bakker33b43f12013-08-20 11:48:36 +020097 TEST_ASSERT( ecp_point_read_string( &B, 10, x_b, y_b ) == 0 );
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +010098
99 TEST_ASSERT( ecp_sub( &grp, &C, &A, &B ) == 0 );
100
Paul Bakker33b43f12013-08-20 11:48:36 +0200101 if( c_zero )
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +0100102 TEST_ASSERT( mpi_cmp_int( &C.Z, 0 ) == 0 );
103 else
104 {
Paul Bakker33b43f12013-08-20 11:48:36 +0200105 TEST_ASSERT( mpi_cmp_int( &C.X, x_c ) == 0 );
106 TEST_ASSERT( mpi_cmp_int( &C.Y, y_c ) == 0 );
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +0100107 }
108
109 ecp_group_free( &grp );
110 ecp_point_free( &A ); ecp_point_free( &B ); ecp_point_free( &C );
111}
Paul Bakker33b43f12013-08-20 11:48:36 +0200112/* END_CASE */
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +0100113
Paul Bakker33b43f12013-08-20 11:48:36 +0200114/* BEGIN_CASE */
115void ecp_small_mul( int m_str, int r_zero, int x_r, int y_r, int ret )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100116{
117 ecp_group grp;
118 ecp_point R;
119 mpi m;
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200120 rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100121
122 ecp_group_init( &grp );
123 ecp_point_init( &R );
124 mpi_init( &m );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200125 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100126
127 TEST_ASSERT( ecp_group_read_string( &grp, 10,
128 "47", "4", "17", "42", "13" ) == 0 );
129
Paul Bakker33b43f12013-08-20 11:48:36 +0200130 TEST_ASSERT( mpi_lset( &m, m_str ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100131
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200132 TEST_ASSERT( ecp_mul( &grp, &R, &m, &grp.G, NULL, NULL ) == ret );
133
Manuel Pégourié-Gonnardff27b7c2013-11-21 09:28:03 +0100134 if( ret == 0 )
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200135 {
Manuel Pégourié-Gonnardff27b7c2013-11-21 09:28:03 +0100136 if( r_zero )
137 TEST_ASSERT( mpi_cmp_int( &R.Z, 0 ) == 0 );
138 else
139 {
140 TEST_ASSERT( mpi_cmp_int( &R.X, x_r ) == 0 );
141 TEST_ASSERT( mpi_cmp_int( &R.Y, y_r ) == 0 );
142 }
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200143 }
144
145 /* try again with randomization */
146 ecp_point_free( &R );
147
148 TEST_ASSERT( ecp_mul( &grp, &R, &m, &grp.G,
149 &rnd_pseudo_rand, &rnd_info ) == ret );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100150
Manuel Pégourié-Gonnardff27b7c2013-11-21 09:28:03 +0100151 if( ret == 0 )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100152 {
Manuel Pégourié-Gonnardff27b7c2013-11-21 09:28:03 +0100153 if( r_zero )
154 TEST_ASSERT( mpi_cmp_int( &R.Z, 0 ) == 0 );
155 else
156 {
157 TEST_ASSERT( mpi_cmp_int( &R.X, x_r ) == 0 );
158 TEST_ASSERT( mpi_cmp_int( &R.Y, y_r ) == 0 );
159 }
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100160 }
161
162 ecp_group_free( &grp );
163 ecp_point_free( &R );
164 mpi_free( &m );
165}
Paul Bakker33b43f12013-08-20 11:48:36 +0200166/* END_CASE */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100167
Paul Bakker33b43f12013-08-20 11:48:36 +0200168/* BEGIN_CASE */
169void ecp_small_check_pub( int x, int y, int z, int ret )
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100170{
171 ecp_group grp;
172 ecp_point P;
173
174 ecp_group_init( &grp );
175 ecp_point_init( &P );
176
177 TEST_ASSERT( ecp_group_read_string( &grp, 10,
178 "47", "4", "17", "42", "13" ) == 0 );
179
Paul Bakker33b43f12013-08-20 11:48:36 +0200180 TEST_ASSERT( mpi_lset( &P.X, x ) == 0 );
181 TEST_ASSERT( mpi_lset( &P.Y, y ) == 0 );
182 TEST_ASSERT( mpi_lset( &P.Z, z ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100183
Paul Bakker33b43f12013-08-20 11:48:36 +0200184 TEST_ASSERT( ecp_check_pubkey( &grp, &P ) == ret );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100185
186 ecp_group_free( &grp );
187 ecp_point_free( &P );
188}
Paul Bakker33b43f12013-08-20 11:48:36 +0200189/* END_CASE */
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100190
Paul Bakker33b43f12013-08-20 11:48:36 +0200191/* BEGIN_CASE */
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100192void ecp_check_pub_mx( int grp_id, char *key_hex, int ret )
193{
194 ecp_group grp;
195 ecp_point P;
196
197 ecp_group_init( &grp );
198 ecp_point_init( &P );
199
200 TEST_ASSERT( ecp_use_known_dp( &grp, grp_id ) == 0 );
201
202 TEST_ASSERT( mpi_read_string( &P.X, 16, key_hex ) == 0 );
203 TEST_ASSERT( mpi_lset( &P.Z, 1 ) == 0 );
204
205 TEST_ASSERT( ecp_check_pubkey( &grp, &P ) == ret );
206
207 ecp_group_free( &grp );
208 ecp_point_free( &P );
209}
210/* END_CASE */
211
212/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +0200213void ecp_test_vect( int id, char *dA_str, char *xA_str, char *yA_str,
214 char *dB_str, char *xB_str, char *yB_str, char *xZ_str,
215 char *yZ_str )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100216{
217 ecp_group grp;
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100218 ecp_point R;
219 mpi dA, xA, yA, dB, xB, yB, xZ, yZ;
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200220 rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100221
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100222 ecp_group_init( &grp ); ecp_point_init( &R );
223 mpi_init( &dA ); mpi_init( &xA ); mpi_init( &yA ); mpi_init( &dB );
224 mpi_init( &xB ); mpi_init( &yB ); mpi_init( &xZ ); mpi_init( &yZ );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200225 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100226
Paul Bakker33b43f12013-08-20 11:48:36 +0200227 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100228
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100229 TEST_ASSERT( ecp_check_pubkey( &grp, &grp.G ) == 0 );
230
Paul Bakker33b43f12013-08-20 11:48:36 +0200231 TEST_ASSERT( mpi_read_string( &dA, 16, dA_str ) == 0 );
232 TEST_ASSERT( mpi_read_string( &xA, 16, xA_str ) == 0 );
233 TEST_ASSERT( mpi_read_string( &yA, 16, yA_str ) == 0 );
234 TEST_ASSERT( mpi_read_string( &dB, 16, dB_str ) == 0 );
235 TEST_ASSERT( mpi_read_string( &xB, 16, xB_str ) == 0 );
236 TEST_ASSERT( mpi_read_string( &yB, 16, yB_str ) == 0 );
237 TEST_ASSERT( mpi_read_string( &xZ, 16, xZ_str ) == 0 );
238 TEST_ASSERT( mpi_read_string( &yZ, 16, yZ_str ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100239
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200240 TEST_ASSERT( ecp_mul( &grp, &R, &dA, &grp.G,
241 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100242 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xA ) == 0 );
243 TEST_ASSERT( mpi_cmp_mpi( &R.Y, &yA ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100244 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200245 TEST_ASSERT( ecp_mul( &grp, &R, &dB, &R, NULL, NULL ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100246 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xZ ) == 0 );
247 TEST_ASSERT( mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100248 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100249
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200250 TEST_ASSERT( ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100251 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xB ) == 0 );
252 TEST_ASSERT( mpi_cmp_mpi( &R.Y, &yB ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100253 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200254 TEST_ASSERT( ecp_mul( &grp, &R, &dA, &R,
255 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100256 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xZ ) == 0 );
257 TEST_ASSERT( mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100258 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100259
260 ecp_group_free( &grp ); ecp_point_free( &R );
261 mpi_free( &dA ); mpi_free( &xA ); mpi_free( &yA ); mpi_free( &dB );
262 mpi_free( &xB ); mpi_free( &yB ); mpi_free( &xZ ); mpi_free( &yZ );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100263}
Paul Bakker33b43f12013-08-20 11:48:36 +0200264/* END_CASE */
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100265
Paul Bakker33b43f12013-08-20 11:48:36 +0200266/* BEGIN_CASE */
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100267void ecp_test_vec_x( int id, char *dA_hex, char *xA_hex,
268 char *dB_hex, char *xB_hex, char *xS_hex )
269{
270 ecp_group grp;
271 ecp_point R;
272 mpi dA, xA, dB, xB, xS;
273 rnd_pseudo_info rnd_info;
274
275 ecp_group_init( &grp ); ecp_point_init( &R );
276 mpi_init( &dA ); mpi_init( &xA );
277 mpi_init( &dB ); mpi_init( &xB );
278 mpi_init( &xS );
279 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
280
281 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
282
283 TEST_ASSERT( ecp_check_pubkey( &grp, &grp.G ) == 0 );
284
285 TEST_ASSERT( mpi_read_string( &dA, 16, dA_hex ) == 0 );
286 TEST_ASSERT( mpi_read_string( &dB, 16, dB_hex ) == 0 );
287 TEST_ASSERT( mpi_read_string( &xA, 16, xA_hex ) == 0 );
288 TEST_ASSERT( mpi_read_string( &xB, 16, xB_hex ) == 0 );
289 TEST_ASSERT( mpi_read_string( &xS, 16, xS_hex ) == 0 );
290
291 TEST_ASSERT( ecp_mul( &grp, &R, &dA, &grp.G,
292 &rnd_pseudo_rand, &rnd_info ) == 0 );
293 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
294 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xA ) == 0 );
295
296 TEST_ASSERT( ecp_mul( &grp, &R, &dB, &R,
297 &rnd_pseudo_rand, &rnd_info ) == 0 );
298 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
299 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xS ) == 0 );
300
301 TEST_ASSERT( ecp_mul( &grp, &R, &dB, &grp.G,
302 &rnd_pseudo_rand, &rnd_info ) == 0 );
303 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
304 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xB ) == 0 );
305
306 TEST_ASSERT( ecp_mul( &grp, &R, &dA, &R,
307 &rnd_pseudo_rand, &rnd_info ) == 0 );
308 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
309 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xS ) == 0 );
310
311 ecp_group_free( &grp ); ecp_point_free( &R );
312 mpi_free( &dA ); mpi_free( &xA );
313 mpi_free( &dB ); mpi_free( &xB );
314 mpi_free( &xS );
315}
316/* END_CASE */
317
318/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +0200319void ecp_fast_mod( int id, char *N_str )
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100320{
321 ecp_group grp;
322 mpi N, R;
323
324 mpi_init( &N ); mpi_init( &R );
325 ecp_group_init( &grp );
326
Paul Bakker33b43f12013-08-20 11:48:36 +0200327 TEST_ASSERT( mpi_read_string( &N, 16, N_str ) == 0 );
Manuel Pégourié-Gonnarde783f062013-10-21 14:52:21 +0200328 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
329 TEST_ASSERT( grp.modp != NULL );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100330
331 /*
332 * Store correct result before we touch N
333 */
334 TEST_ASSERT( mpi_mod_mpi( &R, &N, &grp.P ) == 0 );
335
336 TEST_ASSERT( grp.modp( &N ) == 0 );
337 TEST_ASSERT( mpi_msb( &N ) <= grp.pbits + 3 );
338
339 /*
340 * Use mod rather than addition/substraction in case previous test fails
341 */
342 TEST_ASSERT( mpi_mod_mpi( &N, &N, &grp.P ) == 0 );
343 TEST_ASSERT( mpi_cmp_mpi( &N, &R ) == 0 );
344
345 mpi_free( &N ); mpi_free( &R );
346 ecp_group_free( &grp );
347}
Paul Bakker33b43f12013-08-20 11:48:36 +0200348/* END_CASE */
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100349
Paul Bakker33b43f12013-08-20 11:48:36 +0200350/* BEGIN_CASE */
351void ecp_write_binary( int id, char *x, char *y, char *z, int format,
352 char *out, int blen, int ret )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100353{
354 ecp_group grp;
355 ecp_point P;
356 unsigned char buf[256], str[512];
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100357 size_t olen;
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100358
359 memset( buf, 0, sizeof( buf ) );
360 memset( str, 0, sizeof( str ) );
361
362 ecp_group_init( &grp ); ecp_point_init( &P );
363
Paul Bakker33b43f12013-08-20 11:48:36 +0200364 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100365
Paul Bakker33b43f12013-08-20 11:48:36 +0200366 TEST_ASSERT( mpi_read_string( &P.X, 16, x ) == 0 );
367 TEST_ASSERT( mpi_read_string( &P.Y, 16, y ) == 0 );
368 TEST_ASSERT( mpi_read_string( &P.Z, 16, z ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100369
Paul Bakker33b43f12013-08-20 11:48:36 +0200370 TEST_ASSERT( ecp_point_write_binary( &grp, &P, format,
371 &olen, buf, blen ) == ret );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100372
Paul Bakker33b43f12013-08-20 11:48:36 +0200373 if( ret == 0 )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100374 {
Manuel Pégourié-Gonnard37d218a2012-11-24 15:19:55 +0100375 hexify( str, buf, olen );
Paul Bakker33b43f12013-08-20 11:48:36 +0200376 TEST_ASSERT( strcasecmp( (char *) str, out ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100377 }
378
379 ecp_group_free( &grp ); ecp_point_free( &P );
380}
Paul Bakker33b43f12013-08-20 11:48:36 +0200381/* END_CASE */
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100382
Paul Bakker33b43f12013-08-20 11:48:36 +0200383/* BEGIN_CASE */
384void ecp_read_binary( int id, char *input, char *x, char *y, char *z,
385 int ret )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100386{
387 ecp_group grp;
388 ecp_point P;
389 mpi X, Y, Z;
390 int ilen;
391 unsigned char buf[256];
392
393 memset( buf, 0, sizeof( buf ) );
394
395 ecp_group_init( &grp ); ecp_point_init( &P );
396 mpi_init( &X ); mpi_init( &Y ); mpi_init( &Z );
397
Paul Bakker33b43f12013-08-20 11:48:36 +0200398 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100399
Paul Bakker33b43f12013-08-20 11:48:36 +0200400 TEST_ASSERT( mpi_read_string( &X, 16, x ) == 0 );
401 TEST_ASSERT( mpi_read_string( &Y, 16, y ) == 0 );
402 TEST_ASSERT( mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100403
Paul Bakker33b43f12013-08-20 11:48:36 +0200404 ilen = unhexify( buf, input );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100405
Paul Bakker33b43f12013-08-20 11:48:36 +0200406 TEST_ASSERT( ecp_point_read_binary( &grp, &P, buf, ilen ) == ret );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100407
Paul Bakker33b43f12013-08-20 11:48:36 +0200408 if( ret == 0 )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100409 {
410 TEST_ASSERT( mpi_cmp_mpi( &P.X, &X ) == 0 );
411 TEST_ASSERT( mpi_cmp_mpi( &P.Y, &Y ) == 0 );
412 TEST_ASSERT( mpi_cmp_mpi( &P.Z, &Z ) == 0 );
413 }
414
415 ecp_group_free( &grp ); ecp_point_free( &P );
416 mpi_free( &X ); mpi_free( &Y ); mpi_free( &Z );
417}
Paul Bakker33b43f12013-08-20 11:48:36 +0200418/* END_CASE */
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100419
Paul Bakker33b43f12013-08-20 11:48:36 +0200420/* BEGIN_CASE */
421void ecp_tls_read_point( int id, char *input, char *x, char *y, char *z,
422 int ret )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100423{
424 ecp_group grp;
425 ecp_point P;
426 mpi X, Y, Z;
427 size_t ilen;
428 unsigned char buf[256];
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100429 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100430
431 memset( buf, 0, sizeof( buf ) );
432
433 ecp_group_init( &grp ); ecp_point_init( &P );
434 mpi_init( &X ); mpi_init( &Y ); mpi_init( &Z );
435
Paul Bakker33b43f12013-08-20 11:48:36 +0200436 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100437
Paul Bakker33b43f12013-08-20 11:48:36 +0200438 TEST_ASSERT( mpi_read_string( &X, 16, x ) == 0 );
439 TEST_ASSERT( mpi_read_string( &Y, 16, y ) == 0 );
440 TEST_ASSERT( mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100441
Paul Bakker33b43f12013-08-20 11:48:36 +0200442 ilen = unhexify( buf, input );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100443
Paul Bakker33b43f12013-08-20 11:48:36 +0200444 TEST_ASSERT( ecp_tls_read_point( &grp, &P, &vbuf, ilen ) == ret );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100445
Paul Bakker33b43f12013-08-20 11:48:36 +0200446 if( ret == 0 )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100447 {
448 TEST_ASSERT( mpi_cmp_mpi( &P.X, &X ) == 0 );
449 TEST_ASSERT( mpi_cmp_mpi( &P.Y, &Y ) == 0 );
450 TEST_ASSERT( mpi_cmp_mpi( &P.Z, &Z ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100451 TEST_ASSERT( *vbuf == 0x00 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100452 }
453
454 ecp_group_free( &grp ); ecp_point_free( &P );
455 mpi_free( &X ); mpi_free( &Y ); mpi_free( &Z );
456}
Paul Bakker33b43f12013-08-20 11:48:36 +0200457/* END_CASE */
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100458
Paul Bakker33b43f12013-08-20 11:48:36 +0200459/* BEGIN_CASE */
460void ecp_tls_write_read_point( int id )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100461{
462 ecp_group grp;
463 ecp_point pt;
464 unsigned char buf[256];
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100465 const unsigned char *vbuf;
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100466 size_t olen;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100467
468 ecp_group_init( &grp );
469 ecp_point_init( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100470
Paul Bakker33b43f12013-08-20 11:48:36 +0200471 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100472
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100473 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100474 TEST_ASSERT( ecp_tls_write_point( &grp, &grp.G,
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100475 POLARSSL_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100476 TEST_ASSERT( ecp_tls_read_point( &grp, &pt, &vbuf, olen )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100477 == POLARSSL_ERR_ECP_BAD_INPUT_DATA );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100478 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100479
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100480 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100481 TEST_ASSERT( ecp_tls_write_point( &grp, &grp.G,
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100482 POLARSSL_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100483 TEST_ASSERT( ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100484 TEST_ASSERT( mpi_cmp_mpi( &grp.G.X, &pt.X ) == 0 );
485 TEST_ASSERT( mpi_cmp_mpi( &grp.G.Y, &pt.Y ) == 0 );
486 TEST_ASSERT( mpi_cmp_mpi( &grp.G.Z, &pt.Z ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100487 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100488
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100489 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100490 TEST_ASSERT( ecp_set_zero( &pt ) == 0 );
491 TEST_ASSERT( ecp_tls_write_point( &grp, &pt,
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100492 POLARSSL_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100493 TEST_ASSERT( ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100494 TEST_ASSERT( ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100495 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100496
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100497 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100498 TEST_ASSERT( ecp_set_zero( &pt ) == 0 );
499 TEST_ASSERT( ecp_tls_write_point( &grp, &pt,
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100500 POLARSSL_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100501 TEST_ASSERT( ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100502 TEST_ASSERT( ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100503 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100504
505 ecp_group_free( &grp );
506 ecp_point_free( &pt );
507}
Paul Bakker33b43f12013-08-20 11:48:36 +0200508/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100509
Paul Bakker33b43f12013-08-20 11:48:36 +0200510/* BEGIN_CASE */
511void ecp_tls_read_group( char *record, int result, int bits )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100512{
513 ecp_group grp;
514 unsigned char buf[10];
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100515 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100516 int len, ret;
517
518 ecp_group_init( &grp );
519 memset( buf, 0x00, sizeof( buf ) );
520
Paul Bakker33b43f12013-08-20 11:48:36 +0200521 len = unhexify( buf, record );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100522
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100523 ret = ecp_tls_read_group( &grp, &vbuf, len );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100524
Paul Bakker33b43f12013-08-20 11:48:36 +0200525 TEST_ASSERT( ret == result );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100526 if( ret == 0)
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100527 {
Paul Bakker33b43f12013-08-20 11:48:36 +0200528 TEST_ASSERT( mpi_msb( &grp.P ) == (size_t) bits );
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100529 TEST_ASSERT( *vbuf == 0x00 );
530 }
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100531
532 ecp_group_free( &grp );
533}
Paul Bakker33b43f12013-08-20 11:48:36 +0200534/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100535
Paul Bakker33b43f12013-08-20 11:48:36 +0200536/* BEGIN_CASE */
537void ecp_tls_write_read_group( int id )
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100538{
539 ecp_group grp1, grp2;
540 unsigned char buf[10];
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100541 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100542 size_t len;
543 int ret;
544
545 ecp_group_init( &grp1 );
546 ecp_group_init( &grp2 );
547 memset( buf, 0x00, sizeof( buf ) );
548
Paul Bakker33b43f12013-08-20 11:48:36 +0200549 TEST_ASSERT( ecp_use_known_dp( &grp1, id ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100550
551 TEST_ASSERT( ecp_tls_write_group( &grp1, &len, buf, 10 ) == 0 );
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100552 TEST_ASSERT( ( ret = ecp_tls_read_group( &grp2, &vbuf, len ) ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100553
554 if( ret == 0 )
555 {
556 TEST_ASSERT( mpi_cmp_mpi( &grp1.N, &grp2.N ) == 0 );
557 TEST_ASSERT( grp1.id == grp2.id );
558 }
559
560 ecp_group_free( &grp1 );
561 ecp_group_free( &grp2 );
562}
Paul Bakker33b43f12013-08-20 11:48:36 +0200563/* END_CASE */
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100564
Paul Bakker33b43f12013-08-20 11:48:36 +0200565/* BEGIN_CASE */
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100566void ecp_check_privkey( int id, char *key_hex, int ret )
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200567{
568 ecp_group grp;
569 mpi d;
570
571 ecp_group_init( &grp );
572 mpi_init( &d );
573
Paul Bakker33b43f12013-08-20 11:48:36 +0200574 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100575 TEST_ASSERT( mpi_read_string( &d, 16, key_hex ) == 0 );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200576
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100577 TEST_ASSERT( ecp_check_privkey( &grp, &d ) == ret );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200578
579 ecp_group_free( &grp );
580 mpi_free( &d );
581}
Paul Bakker33b43f12013-08-20 11:48:36 +0200582/* END_CASE */
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200583
Paul Bakker33b43f12013-08-20 11:48:36 +0200584/* BEGIN_CASE */
585void ecp_gen_keypair( int id )
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100586{
587 ecp_group grp;
588 ecp_point Q;
589 mpi d;
590 rnd_pseudo_info rnd_info;
591
592 ecp_group_init( &grp );
593 ecp_point_init( &Q );
594 mpi_init( &d );
595 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
596
Paul Bakker33b43f12013-08-20 11:48:36 +0200597 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100598
599 TEST_ASSERT( ecp_gen_keypair( &grp, &d, &Q, &rnd_pseudo_rand, &rnd_info )
600 == 0 );
601
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200602 TEST_ASSERT( ecp_check_pubkey( &grp, &Q ) == 0 );
Paul Bakker8ea6c612013-07-16 17:15:03 +0200603 TEST_ASSERT( ecp_check_privkey( &grp, &d ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100604
605 ecp_group_free( &grp );
606 ecp_point_free( &Q );
607 mpi_free( &d );
608}
Paul Bakker33b43f12013-08-20 11:48:36 +0200609/* END_CASE */
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100610
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100611/* BEGIN_CASE */
612void ecp_gen_key( int id )
613{
614 ecp_keypair key;
615 rnd_pseudo_info rnd_info;
616
617 ecp_keypair_init( &key );
618 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
619
620 TEST_ASSERT( ecp_gen_key( id, &key, &rnd_pseudo_rand, &rnd_info ) == 0 );
621
622 TEST_ASSERT( ecp_check_pubkey( &key.grp, &key.Q ) == 0 );
623 TEST_ASSERT( ecp_check_privkey( &key.grp, &key.d ) == 0 );
624
625 ecp_keypair_free( &key );
626}
627/* END_CASE */
628
Manuel Pégourié-Gonnard20140162013-10-10 12:48:03 +0200629/* BEGIN_CASE depends_on:POLARSSL_SELF_TEST */
Paul Bakker33b43f12013-08-20 11:48:36 +0200630void ecp_selftest()
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100631{
632 TEST_ASSERT( ecp_self_test( 0 ) == 0 );
633}
Paul Bakker33b43f12013-08-20 11:48:36 +0200634/* END_CASE */