blob: 1e8e31aa803cd8265da646f12e6c5ceabec655eb [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +01002#include <polarssl/ecp.h>
Paul Bakkerdbd443d2013-08-16 13:38:47 +02003
4#define POLARSSL_ECP_PF_UNKNOWN -1
Paul Bakker33b43f12013-08-20 11:48:36 +02005/* END_HEADER */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +01006
Paul Bakker33b43f12013-08-20 11:48:36 +02007/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnarda0f07472013-08-23 16:35:32 +02008 * depends_on:POLARSSL_ECP_C
Paul Bakker33b43f12013-08-20 11:48:36 +02009 * END_DEPENDENCIES
10 */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010011
Paul Bakker33b43f12013-08-20 11:48:36 +020012/* BEGIN_CASE */
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010013void ecp_curve_info( int id, int tls_id, int size, char *name )
14{
15 const ecp_curve_info *by_id, *by_tls, *by_name;
16
Paul Bakker94b916c2014-04-17 16:07:20 +020017 by_id = ecp_curve_info_from_grp_id( id );
18 by_tls = ecp_curve_info_from_tls_id( tls_id );
19 by_name = ecp_curve_info_from_name( name );
20 TEST_ASSERT( by_id != NULL );
21 TEST_ASSERT( by_tls != NULL );
22 TEST_ASSERT( by_name != NULL );
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010023
24 TEST_ASSERT( by_id == by_tls );
25 TEST_ASSERT( by_id == by_name );
26
27 TEST_ASSERT( by_id->size == size );
28}
29/* END_CASE */
30
31/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +020032void ecp_small_add( int a_zero, char *x_a, char *y_a, int b_zero, char *x_b,
33 char *y_b, int c_zero, int x_c, int y_c )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010034{
35 ecp_group grp;
36 ecp_point A, B, C;
37
38 ecp_group_init( &grp );
39 ecp_point_init( &A ); ecp_point_init( &B ); ecp_point_init( &C );
40
41 TEST_ASSERT( ecp_group_read_string( &grp, 10,
42 "47", "4", "17", "42", "13" ) == 0 );
43
Paul Bakker33b43f12013-08-20 11:48:36 +020044 if( a_zero )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010045 ecp_set_zero( &A );
46 else
Paul Bakker33b43f12013-08-20 11:48:36 +020047 TEST_ASSERT( ecp_point_read_string( &A, 10, x_a, y_a ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010048
Paul Bakker33b43f12013-08-20 11:48:36 +020049 if( b_zero )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010050 ecp_set_zero( &B );
51 else
Paul Bakker33b43f12013-08-20 11:48:36 +020052 TEST_ASSERT( ecp_point_read_string( &B, 10, x_b, y_b ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010053
54 TEST_ASSERT( ecp_add( &grp, &C, &A, &B ) == 0 );
55
Paul Bakker33b43f12013-08-20 11:48:36 +020056 if( c_zero )
Manuel Pégourié-Gonnard1c2782c2012-11-19 20:16:28 +010057 TEST_ASSERT( mpi_cmp_int( &C.Z, 0 ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010058 else
59 {
Paul Bakker33b43f12013-08-20 11:48:36 +020060 TEST_ASSERT( mpi_cmp_int( &C.X, x_c ) == 0 );
61 TEST_ASSERT( mpi_cmp_int( &C.Y, y_c ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010062 }
63
64 TEST_ASSERT( ecp_add( &grp, &C, &B, &A ) == 0 );
65
Paul Bakker33b43f12013-08-20 11:48:36 +020066 if( c_zero )
Manuel Pégourié-Gonnard1c2782c2012-11-19 20:16:28 +010067 TEST_ASSERT( mpi_cmp_int( &C.Z, 0 ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010068 else
69 {
Paul Bakker33b43f12013-08-20 11:48:36 +020070 TEST_ASSERT( mpi_cmp_int( &C.X, x_c ) == 0 );
71 TEST_ASSERT( mpi_cmp_int( &C.Y, y_c ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010072 }
73
74 ecp_group_free( &grp );
75 ecp_point_free( &A ); ecp_point_free( &B ); ecp_point_free( &C );
76}
Paul Bakker33b43f12013-08-20 11:48:36 +020077/* END_CASE */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010078
Paul Bakker33b43f12013-08-20 11:48:36 +020079/* BEGIN_CASE */
80void ecp_small_sub( int a_zero, char *x_a, char *y_a, int b_zero, char *x_b,
81 char *y_b, int c_zero, int x_c, int y_c )
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +010082{
83 ecp_group grp;
84 ecp_point A, B, C;
85
86 ecp_group_init( &grp );
87 ecp_point_init( &A ); ecp_point_init( &B ); ecp_point_init( &C );
88
89 TEST_ASSERT( ecp_group_read_string( &grp, 10,
90 "47", "4", "17", "42", "13" ) == 0 );
91
Paul Bakker33b43f12013-08-20 11:48:36 +020092 if( a_zero )
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +010093 ecp_set_zero( &A );
94 else
Paul Bakker33b43f12013-08-20 11:48:36 +020095 TEST_ASSERT( ecp_point_read_string( &A, 10, x_a, y_a ) == 0 );
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +010096
Paul Bakker33b43f12013-08-20 11:48:36 +020097 if( b_zero )
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +010098 ecp_set_zero( &B );
99 else
Paul Bakker33b43f12013-08-20 11:48:36 +0200100 TEST_ASSERT( ecp_point_read_string( &B, 10, x_b, y_b ) == 0 );
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +0100101
102 TEST_ASSERT( ecp_sub( &grp, &C, &A, &B ) == 0 );
103
Paul Bakker33b43f12013-08-20 11:48:36 +0200104 if( c_zero )
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +0100105 TEST_ASSERT( mpi_cmp_int( &C.Z, 0 ) == 0 );
106 else
107 {
Paul Bakker33b43f12013-08-20 11:48:36 +0200108 TEST_ASSERT( mpi_cmp_int( &C.X, x_c ) == 0 );
109 TEST_ASSERT( mpi_cmp_int( &C.Y, y_c ) == 0 );
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +0100110 }
111
112 ecp_group_free( &grp );
113 ecp_point_free( &A ); ecp_point_free( &B ); ecp_point_free( &C );
114}
Paul Bakker33b43f12013-08-20 11:48:36 +0200115/* END_CASE */
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +0100116
Paul Bakker33b43f12013-08-20 11:48:36 +0200117/* BEGIN_CASE */
118void ecp_small_mul( int m_str, int r_zero, int x_r, int y_r, int ret )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100119{
120 ecp_group grp;
121 ecp_point R;
122 mpi m;
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200123 rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100124
125 ecp_group_init( &grp );
126 ecp_point_init( &R );
127 mpi_init( &m );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200128 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100129
130 TEST_ASSERT( ecp_group_read_string( &grp, 10,
131 "47", "4", "17", "42", "13" ) == 0 );
132
Paul Bakker33b43f12013-08-20 11:48:36 +0200133 TEST_ASSERT( mpi_lset( &m, m_str ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100134
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200135 TEST_ASSERT( ecp_mul( &grp, &R, &m, &grp.G, NULL, NULL ) == ret );
136
Manuel Pégourié-Gonnardff27b7c2013-11-21 09:28:03 +0100137 if( ret == 0 )
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200138 {
Manuel Pégourié-Gonnardff27b7c2013-11-21 09:28:03 +0100139 if( r_zero )
140 TEST_ASSERT( mpi_cmp_int( &R.Z, 0 ) == 0 );
141 else
142 {
143 TEST_ASSERT( mpi_cmp_int( &R.X, x_r ) == 0 );
144 TEST_ASSERT( mpi_cmp_int( &R.Y, y_r ) == 0 );
145 }
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200146 }
147
148 /* try again with randomization */
149 ecp_point_free( &R );
150
151 TEST_ASSERT( ecp_mul( &grp, &R, &m, &grp.G,
152 &rnd_pseudo_rand, &rnd_info ) == ret );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100153
Manuel Pégourié-Gonnardff27b7c2013-11-21 09:28:03 +0100154 if( ret == 0 )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100155 {
Manuel Pégourié-Gonnardff27b7c2013-11-21 09:28:03 +0100156 if( r_zero )
157 TEST_ASSERT( mpi_cmp_int( &R.Z, 0 ) == 0 );
158 else
159 {
160 TEST_ASSERT( mpi_cmp_int( &R.X, x_r ) == 0 );
161 TEST_ASSERT( mpi_cmp_int( &R.Y, y_r ) == 0 );
162 }
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100163 }
164
165 ecp_group_free( &grp );
166 ecp_point_free( &R );
167 mpi_free( &m );
168}
Paul Bakker33b43f12013-08-20 11:48:36 +0200169/* END_CASE */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100170
Paul Bakker33b43f12013-08-20 11:48:36 +0200171/* BEGIN_CASE */
172void ecp_small_check_pub( int x, int y, int z, int ret )
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100173{
174 ecp_group grp;
175 ecp_point P;
176
177 ecp_group_init( &grp );
178 ecp_point_init( &P );
179
180 TEST_ASSERT( ecp_group_read_string( &grp, 10,
181 "47", "4", "17", "42", "13" ) == 0 );
182
Paul Bakker33b43f12013-08-20 11:48:36 +0200183 TEST_ASSERT( mpi_lset( &P.X, x ) == 0 );
184 TEST_ASSERT( mpi_lset( &P.Y, y ) == 0 );
185 TEST_ASSERT( mpi_lset( &P.Z, z ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100186
Paul Bakker33b43f12013-08-20 11:48:36 +0200187 TEST_ASSERT( ecp_check_pubkey( &grp, &P ) == ret );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100188
189 ecp_group_free( &grp );
190 ecp_point_free( &P );
191}
Paul Bakker33b43f12013-08-20 11:48:36 +0200192/* END_CASE */
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100193
Paul Bakker33b43f12013-08-20 11:48:36 +0200194/* BEGIN_CASE */
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100195void ecp_check_pub_mx( int grp_id, char *key_hex, int ret )
196{
197 ecp_group grp;
198 ecp_point P;
199
200 ecp_group_init( &grp );
201 ecp_point_init( &P );
202
203 TEST_ASSERT( ecp_use_known_dp( &grp, grp_id ) == 0 );
204
205 TEST_ASSERT( mpi_read_string( &P.X, 16, key_hex ) == 0 );
206 TEST_ASSERT( mpi_lset( &P.Z, 1 ) == 0 );
207
208 TEST_ASSERT( ecp_check_pubkey( &grp, &P ) == ret );
209
210 ecp_group_free( &grp );
211 ecp_point_free( &P );
212}
213/* END_CASE */
214
215/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +0200216void ecp_test_vect( int id, char *dA_str, char *xA_str, char *yA_str,
217 char *dB_str, char *xB_str, char *yB_str, char *xZ_str,
218 char *yZ_str )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100219{
220 ecp_group grp;
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100221 ecp_point R;
222 mpi dA, xA, yA, dB, xB, yB, xZ, yZ;
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200223 rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100224
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100225 ecp_group_init( &grp ); ecp_point_init( &R );
226 mpi_init( &dA ); mpi_init( &xA ); mpi_init( &yA ); mpi_init( &dB );
227 mpi_init( &xB ); mpi_init( &yB ); mpi_init( &xZ ); mpi_init( &yZ );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200228 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100229
Paul Bakker33b43f12013-08-20 11:48:36 +0200230 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100231
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100232 TEST_ASSERT( ecp_check_pubkey( &grp, &grp.G ) == 0 );
233
Paul Bakker33b43f12013-08-20 11:48:36 +0200234 TEST_ASSERT( mpi_read_string( &dA, 16, dA_str ) == 0 );
235 TEST_ASSERT( mpi_read_string( &xA, 16, xA_str ) == 0 );
236 TEST_ASSERT( mpi_read_string( &yA, 16, yA_str ) == 0 );
237 TEST_ASSERT( mpi_read_string( &dB, 16, dB_str ) == 0 );
238 TEST_ASSERT( mpi_read_string( &xB, 16, xB_str ) == 0 );
239 TEST_ASSERT( mpi_read_string( &yB, 16, yB_str ) == 0 );
240 TEST_ASSERT( mpi_read_string( &xZ, 16, xZ_str ) == 0 );
241 TEST_ASSERT( mpi_read_string( &yZ, 16, yZ_str ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100242
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200243 TEST_ASSERT( ecp_mul( &grp, &R, &dA, &grp.G,
244 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100245 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xA ) == 0 );
246 TEST_ASSERT( mpi_cmp_mpi( &R.Y, &yA ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100247 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200248 TEST_ASSERT( ecp_mul( &grp, &R, &dB, &R, NULL, NULL ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100249 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xZ ) == 0 );
250 TEST_ASSERT( mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100251 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100252
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200253 TEST_ASSERT( ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100254 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xB ) == 0 );
255 TEST_ASSERT( mpi_cmp_mpi( &R.Y, &yB ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100256 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200257 TEST_ASSERT( ecp_mul( &grp, &R, &dA, &R,
258 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100259 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xZ ) == 0 );
260 TEST_ASSERT( mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100261 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100262
263 ecp_group_free( &grp ); ecp_point_free( &R );
264 mpi_free( &dA ); mpi_free( &xA ); mpi_free( &yA ); mpi_free( &dB );
265 mpi_free( &xB ); mpi_free( &yB ); mpi_free( &xZ ); mpi_free( &yZ );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100266}
Paul Bakker33b43f12013-08-20 11:48:36 +0200267/* END_CASE */
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100268
Paul Bakker33b43f12013-08-20 11:48:36 +0200269/* BEGIN_CASE */
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100270void ecp_test_vec_x( int id, char *dA_hex, char *xA_hex,
271 char *dB_hex, char *xB_hex, char *xS_hex )
272{
273 ecp_group grp;
274 ecp_point R;
275 mpi dA, xA, dB, xB, xS;
276 rnd_pseudo_info rnd_info;
277
278 ecp_group_init( &grp ); ecp_point_init( &R );
279 mpi_init( &dA ); mpi_init( &xA );
280 mpi_init( &dB ); mpi_init( &xB );
281 mpi_init( &xS );
282 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
283
284 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
285
286 TEST_ASSERT( ecp_check_pubkey( &grp, &grp.G ) == 0 );
287
288 TEST_ASSERT( mpi_read_string( &dA, 16, dA_hex ) == 0 );
289 TEST_ASSERT( mpi_read_string( &dB, 16, dB_hex ) == 0 );
290 TEST_ASSERT( mpi_read_string( &xA, 16, xA_hex ) == 0 );
291 TEST_ASSERT( mpi_read_string( &xB, 16, xB_hex ) == 0 );
292 TEST_ASSERT( mpi_read_string( &xS, 16, xS_hex ) == 0 );
293
294 TEST_ASSERT( ecp_mul( &grp, &R, &dA, &grp.G,
295 &rnd_pseudo_rand, &rnd_info ) == 0 );
296 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
297 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xA ) == 0 );
298
299 TEST_ASSERT( ecp_mul( &grp, &R, &dB, &R,
300 &rnd_pseudo_rand, &rnd_info ) == 0 );
301 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
302 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xS ) == 0 );
303
Manuel Pégourié-Gonnard357ff652013-12-04 18:39:17 +0100304 TEST_ASSERT( ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100305 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
306 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xB ) == 0 );
307
Manuel Pégourié-Gonnard357ff652013-12-04 18:39:17 +0100308 TEST_ASSERT( ecp_mul( &grp, &R, &dA, &R, NULL, NULL ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100309 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
310 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xS ) == 0 );
311
312 ecp_group_free( &grp ); ecp_point_free( &R );
313 mpi_free( &dA ); mpi_free( &xA );
314 mpi_free( &dB ); mpi_free( &xB );
315 mpi_free( &xS );
316}
317/* END_CASE */
318
319/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +0200320void ecp_fast_mod( int id, char *N_str )
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100321{
322 ecp_group grp;
323 mpi N, R;
324
325 mpi_init( &N ); mpi_init( &R );
326 ecp_group_init( &grp );
327
Paul Bakker33b43f12013-08-20 11:48:36 +0200328 TEST_ASSERT( mpi_read_string( &N, 16, N_str ) == 0 );
Manuel Pégourié-Gonnarde783f062013-10-21 14:52:21 +0200329 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
330 TEST_ASSERT( grp.modp != NULL );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100331
332 /*
333 * Store correct result before we touch N
334 */
335 TEST_ASSERT( mpi_mod_mpi( &R, &N, &grp.P ) == 0 );
336
337 TEST_ASSERT( grp.modp( &N ) == 0 );
338 TEST_ASSERT( mpi_msb( &N ) <= grp.pbits + 3 );
339
340 /*
Paul Bakkerd8b0c5e2014-04-11 15:31:33 +0200341 * Use mod rather than addition/subtraction in case previous test fails
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100342 */
343 TEST_ASSERT( mpi_mod_mpi( &N, &N, &grp.P ) == 0 );
344 TEST_ASSERT( mpi_cmp_mpi( &N, &R ) == 0 );
345
346 mpi_free( &N ); mpi_free( &R );
347 ecp_group_free( &grp );
348}
Paul Bakker33b43f12013-08-20 11:48:36 +0200349/* END_CASE */
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100350
Paul Bakker33b43f12013-08-20 11:48:36 +0200351/* BEGIN_CASE */
352void ecp_write_binary( int id, char *x, char *y, char *z, int format,
353 char *out, int blen, int ret )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100354{
355 ecp_group grp;
356 ecp_point P;
357 unsigned char buf[256], str[512];
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100358 size_t olen;
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100359
360 memset( buf, 0, sizeof( buf ) );
361 memset( str, 0, sizeof( str ) );
362
363 ecp_group_init( &grp ); ecp_point_init( &P );
364
Paul Bakker33b43f12013-08-20 11:48:36 +0200365 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100366
Paul Bakker33b43f12013-08-20 11:48:36 +0200367 TEST_ASSERT( mpi_read_string( &P.X, 16, x ) == 0 );
368 TEST_ASSERT( mpi_read_string( &P.Y, 16, y ) == 0 );
369 TEST_ASSERT( mpi_read_string( &P.Z, 16, z ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100370
Paul Bakker33b43f12013-08-20 11:48:36 +0200371 TEST_ASSERT( ecp_point_write_binary( &grp, &P, format,
372 &olen, buf, blen ) == ret );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100373
Paul Bakker33b43f12013-08-20 11:48:36 +0200374 if( ret == 0 )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100375 {
Manuel Pégourié-Gonnard37d218a2012-11-24 15:19:55 +0100376 hexify( str, buf, olen );
Paul Bakker33b43f12013-08-20 11:48:36 +0200377 TEST_ASSERT( strcasecmp( (char *) str, out ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100378 }
379
380 ecp_group_free( &grp ); ecp_point_free( &P );
381}
Paul Bakker33b43f12013-08-20 11:48:36 +0200382/* END_CASE */
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100383
Paul Bakker33b43f12013-08-20 11:48:36 +0200384/* BEGIN_CASE */
385void ecp_read_binary( int id, char *input, char *x, char *y, char *z,
386 int ret )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100387{
388 ecp_group grp;
389 ecp_point P;
390 mpi X, Y, Z;
391 int ilen;
392 unsigned char buf[256];
393
394 memset( buf, 0, sizeof( buf ) );
395
396 ecp_group_init( &grp ); ecp_point_init( &P );
397 mpi_init( &X ); mpi_init( &Y ); mpi_init( &Z );
398
Paul Bakker33b43f12013-08-20 11:48:36 +0200399 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100400
Paul Bakker33b43f12013-08-20 11:48:36 +0200401 TEST_ASSERT( mpi_read_string( &X, 16, x ) == 0 );
402 TEST_ASSERT( mpi_read_string( &Y, 16, y ) == 0 );
403 TEST_ASSERT( mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100404
Paul Bakker33b43f12013-08-20 11:48:36 +0200405 ilen = unhexify( buf, input );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100406
Paul Bakker33b43f12013-08-20 11:48:36 +0200407 TEST_ASSERT( ecp_point_read_binary( &grp, &P, buf, ilen ) == ret );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100408
Paul Bakker33b43f12013-08-20 11:48:36 +0200409 if( ret == 0 )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100410 {
411 TEST_ASSERT( mpi_cmp_mpi( &P.X, &X ) == 0 );
412 TEST_ASSERT( mpi_cmp_mpi( &P.Y, &Y ) == 0 );
413 TEST_ASSERT( mpi_cmp_mpi( &P.Z, &Z ) == 0 );
414 }
415
416 ecp_group_free( &grp ); ecp_point_free( &P );
417 mpi_free( &X ); mpi_free( &Y ); mpi_free( &Z );
418}
Paul Bakker33b43f12013-08-20 11:48:36 +0200419/* END_CASE */
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100420
Paul Bakker33b43f12013-08-20 11:48:36 +0200421/* BEGIN_CASE */
422void ecp_tls_read_point( int id, char *input, char *x, char *y, char *z,
423 int ret )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100424{
425 ecp_group grp;
426 ecp_point P;
427 mpi X, Y, Z;
428 size_t ilen;
429 unsigned char buf[256];
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100430 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100431
432 memset( buf, 0, sizeof( buf ) );
433
434 ecp_group_init( &grp ); ecp_point_init( &P );
435 mpi_init( &X ); mpi_init( &Y ); mpi_init( &Z );
436
Paul Bakker33b43f12013-08-20 11:48:36 +0200437 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100438
Paul Bakker33b43f12013-08-20 11:48:36 +0200439 TEST_ASSERT( mpi_read_string( &X, 16, x ) == 0 );
440 TEST_ASSERT( mpi_read_string( &Y, 16, y ) == 0 );
441 TEST_ASSERT( mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100442
Paul Bakker33b43f12013-08-20 11:48:36 +0200443 ilen = unhexify( buf, input );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100444
Paul Bakker33b43f12013-08-20 11:48:36 +0200445 TEST_ASSERT( ecp_tls_read_point( &grp, &P, &vbuf, ilen ) == ret );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100446
Paul Bakker33b43f12013-08-20 11:48:36 +0200447 if( ret == 0 )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100448 {
449 TEST_ASSERT( mpi_cmp_mpi( &P.X, &X ) == 0 );
450 TEST_ASSERT( mpi_cmp_mpi( &P.Y, &Y ) == 0 );
451 TEST_ASSERT( mpi_cmp_mpi( &P.Z, &Z ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100452 TEST_ASSERT( *vbuf == 0x00 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100453 }
454
455 ecp_group_free( &grp ); ecp_point_free( &P );
456 mpi_free( &X ); mpi_free( &Y ); mpi_free( &Z );
457}
Paul Bakker33b43f12013-08-20 11:48:36 +0200458/* END_CASE */
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100459
Paul Bakker33b43f12013-08-20 11:48:36 +0200460/* BEGIN_CASE */
461void ecp_tls_write_read_point( int id )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100462{
463 ecp_group grp;
464 ecp_point pt;
465 unsigned char buf[256];
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100466 const unsigned char *vbuf;
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100467 size_t olen;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100468
469 ecp_group_init( &grp );
470 ecp_point_init( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100471
Paul Bakker33b43f12013-08-20 11:48:36 +0200472 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100473
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100474 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100475 TEST_ASSERT( ecp_tls_write_point( &grp, &grp.G,
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100476 POLARSSL_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100477 TEST_ASSERT( ecp_tls_read_point( &grp, &pt, &vbuf, olen )
Manuel Pégourié-Gonnardc042cf02014-03-26 14:12:20 +0100478 == POLARSSL_ERR_ECP_FEATURE_UNAVAILABLE );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100479 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100480
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100481 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100482 TEST_ASSERT( ecp_tls_write_point( &grp, &grp.G,
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100483 POLARSSL_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100484 TEST_ASSERT( ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100485 TEST_ASSERT( mpi_cmp_mpi( &grp.G.X, &pt.X ) == 0 );
486 TEST_ASSERT( mpi_cmp_mpi( &grp.G.Y, &pt.Y ) == 0 );
487 TEST_ASSERT( mpi_cmp_mpi( &grp.G.Z, &pt.Z ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100488 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100489
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100490 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100491 TEST_ASSERT( ecp_set_zero( &pt ) == 0 );
492 TEST_ASSERT( ecp_tls_write_point( &grp, &pt,
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100493 POLARSSL_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100494 TEST_ASSERT( ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100495 TEST_ASSERT( ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100496 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100497
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100498 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100499 TEST_ASSERT( ecp_set_zero( &pt ) == 0 );
500 TEST_ASSERT( ecp_tls_write_point( &grp, &pt,
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100501 POLARSSL_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100502 TEST_ASSERT( ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100503 TEST_ASSERT( ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100504 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100505
506 ecp_group_free( &grp );
507 ecp_point_free( &pt );
508}
Paul Bakker33b43f12013-08-20 11:48:36 +0200509/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100510
Paul Bakker33b43f12013-08-20 11:48:36 +0200511/* BEGIN_CASE */
512void ecp_tls_read_group( char *record, int result, int bits )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100513{
514 ecp_group grp;
515 unsigned char buf[10];
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100516 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100517 int len, ret;
518
519 ecp_group_init( &grp );
520 memset( buf, 0x00, sizeof( buf ) );
521
Paul Bakker33b43f12013-08-20 11:48:36 +0200522 len = unhexify( buf, record );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100523
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100524 ret = ecp_tls_read_group( &grp, &vbuf, len );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100525
Paul Bakker33b43f12013-08-20 11:48:36 +0200526 TEST_ASSERT( ret == result );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100527 if( ret == 0)
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100528 {
Paul Bakker33b43f12013-08-20 11:48:36 +0200529 TEST_ASSERT( mpi_msb( &grp.P ) == (size_t) bits );
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100530 TEST_ASSERT( *vbuf == 0x00 );
531 }
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100532
533 ecp_group_free( &grp );
534}
Paul Bakker33b43f12013-08-20 11:48:36 +0200535/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100536
Paul Bakker33b43f12013-08-20 11:48:36 +0200537/* BEGIN_CASE */
538void ecp_tls_write_read_group( int id )
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100539{
540 ecp_group grp1, grp2;
541 unsigned char buf[10];
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100542 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100543 size_t len;
544 int ret;
545
546 ecp_group_init( &grp1 );
547 ecp_group_init( &grp2 );
548 memset( buf, 0x00, sizeof( buf ) );
549
Paul Bakker33b43f12013-08-20 11:48:36 +0200550 TEST_ASSERT( ecp_use_known_dp( &grp1, id ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100551
552 TEST_ASSERT( ecp_tls_write_group( &grp1, &len, buf, 10 ) == 0 );
Paul Bakker94b916c2014-04-17 16:07:20 +0200553 ret = ecp_tls_read_group( &grp2, &vbuf, len );
554 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100555
556 if( ret == 0 )
557 {
558 TEST_ASSERT( mpi_cmp_mpi( &grp1.N, &grp2.N ) == 0 );
559 TEST_ASSERT( grp1.id == grp2.id );
560 }
561
562 ecp_group_free( &grp1 );
563 ecp_group_free( &grp2 );
564}
Paul Bakker33b43f12013-08-20 11:48:36 +0200565/* END_CASE */
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100566
Paul Bakker33b43f12013-08-20 11:48:36 +0200567/* BEGIN_CASE */
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100568void ecp_check_privkey( int id, char *key_hex, int ret )
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200569{
570 ecp_group grp;
571 mpi d;
572
573 ecp_group_init( &grp );
574 mpi_init( &d );
575
Paul Bakker33b43f12013-08-20 11:48:36 +0200576 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100577 TEST_ASSERT( mpi_read_string( &d, 16, key_hex ) == 0 );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200578
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100579 TEST_ASSERT( ecp_check_privkey( &grp, &d ) == ret );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200580
581 ecp_group_free( &grp );
582 mpi_free( &d );
583}
Paul Bakker33b43f12013-08-20 11:48:36 +0200584/* END_CASE */
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200585
Paul Bakker33b43f12013-08-20 11:48:36 +0200586/* BEGIN_CASE */
587void ecp_gen_keypair( int id )
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100588{
589 ecp_group grp;
590 ecp_point Q;
591 mpi d;
592 rnd_pseudo_info rnd_info;
593
594 ecp_group_init( &grp );
595 ecp_point_init( &Q );
596 mpi_init( &d );
597 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
598
Paul Bakker33b43f12013-08-20 11:48:36 +0200599 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100600
601 TEST_ASSERT( ecp_gen_keypair( &grp, &d, &Q, &rnd_pseudo_rand, &rnd_info )
602 == 0 );
603
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200604 TEST_ASSERT( ecp_check_pubkey( &grp, &Q ) == 0 );
Paul Bakker8ea6c612013-07-16 17:15:03 +0200605 TEST_ASSERT( ecp_check_privkey( &grp, &d ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100606
607 ecp_group_free( &grp );
608 ecp_point_free( &Q );
609 mpi_free( &d );
610}
Paul Bakker33b43f12013-08-20 11:48:36 +0200611/* END_CASE */
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100612
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100613/* BEGIN_CASE */
614void ecp_gen_key( int id )
615{
616 ecp_keypair key;
617 rnd_pseudo_info rnd_info;
618
619 ecp_keypair_init( &key );
620 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
621
622 TEST_ASSERT( ecp_gen_key( id, &key, &rnd_pseudo_rand, &rnd_info ) == 0 );
623
624 TEST_ASSERT( ecp_check_pubkey( &key.grp, &key.Q ) == 0 );
625 TEST_ASSERT( ecp_check_privkey( &key.grp, &key.d ) == 0 );
626
627 ecp_keypair_free( &key );
628}
629/* END_CASE */
630
Manuel Pégourié-Gonnard20140162013-10-10 12:48:03 +0200631/* BEGIN_CASE depends_on:POLARSSL_SELF_TEST */
Paul Bakker33b43f12013-08-20 11:48:36 +0200632void ecp_selftest()
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100633{
634 TEST_ASSERT( ecp_self_test( 0 ) == 0 );
635}
Paul Bakker33b43f12013-08-20 11:48:36 +0200636/* END_CASE */