blob: 0c51b10e850a898f7013ccadd677f6f900d01b80 [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +01002#include <polarssl/ecp.h>
Paul Bakkerdbd443d2013-08-16 13:38:47 +02003
4#define POLARSSL_ECP_PF_UNKNOWN -1
Paul Bakker33b43f12013-08-20 11:48:36 +02005/* END_HEADER */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +01006
Paul Bakker33b43f12013-08-20 11:48:36 +02007/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnarda0f07472013-08-23 16:35:32 +02008 * depends_on:POLARSSL_ECP_C
Paul Bakker33b43f12013-08-20 11:48:36 +02009 * END_DEPENDENCIES
10 */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010011
Paul Bakker33b43f12013-08-20 11:48:36 +020012/* BEGIN_CASE */
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010013void ecp_curve_info( int id, int tls_id, int size, char *name )
14{
15 const ecp_curve_info *by_id, *by_tls, *by_name;
16
17 TEST_ASSERT( ( by_id = ecp_curve_info_from_grp_id( id ) ) != NULL );
18 TEST_ASSERT( ( by_tls = ecp_curve_info_from_tls_id( tls_id ) ) != NULL );
19 TEST_ASSERT( ( by_name = ecp_curve_info_from_name( name ) ) != NULL );
20
21 TEST_ASSERT( by_id == by_tls );
22 TEST_ASSERT( by_id == by_name );
23
24 TEST_ASSERT( by_id->size == size );
25}
26/* END_CASE */
27
28/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +020029void ecp_small_add( int a_zero, char *x_a, char *y_a, int b_zero, char *x_b,
30 char *y_b, int c_zero, int x_c, int y_c )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010031{
32 ecp_group grp;
33 ecp_point A, B, C;
34
35 ecp_group_init( &grp );
36 ecp_point_init( &A ); ecp_point_init( &B ); ecp_point_init( &C );
37
38 TEST_ASSERT( ecp_group_read_string( &grp, 10,
39 "47", "4", "17", "42", "13" ) == 0 );
40
Paul Bakker33b43f12013-08-20 11:48:36 +020041 if( a_zero )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010042 ecp_set_zero( &A );
43 else
Paul Bakker33b43f12013-08-20 11:48:36 +020044 TEST_ASSERT( ecp_point_read_string( &A, 10, x_a, y_a ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010045
Paul Bakker33b43f12013-08-20 11:48:36 +020046 if( b_zero )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010047 ecp_set_zero( &B );
48 else
Paul Bakker33b43f12013-08-20 11:48:36 +020049 TEST_ASSERT( ecp_point_read_string( &B, 10, x_b, y_b ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010050
51 TEST_ASSERT( ecp_add( &grp, &C, &A, &B ) == 0 );
52
Paul Bakker33b43f12013-08-20 11:48:36 +020053 if( c_zero )
Manuel Pégourié-Gonnard1c2782c2012-11-19 20:16:28 +010054 TEST_ASSERT( mpi_cmp_int( &C.Z, 0 ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010055 else
56 {
Paul Bakker33b43f12013-08-20 11:48:36 +020057 TEST_ASSERT( mpi_cmp_int( &C.X, x_c ) == 0 );
58 TEST_ASSERT( mpi_cmp_int( &C.Y, y_c ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010059 }
60
61 TEST_ASSERT( ecp_add( &grp, &C, &B, &A ) == 0 );
62
Paul Bakker33b43f12013-08-20 11:48:36 +020063 if( c_zero )
Manuel Pégourié-Gonnard1c2782c2012-11-19 20:16:28 +010064 TEST_ASSERT( mpi_cmp_int( &C.Z, 0 ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010065 else
66 {
Paul Bakker33b43f12013-08-20 11:48:36 +020067 TEST_ASSERT( mpi_cmp_int( &C.X, x_c ) == 0 );
68 TEST_ASSERT( mpi_cmp_int( &C.Y, y_c ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010069 }
70
71 ecp_group_free( &grp );
72 ecp_point_free( &A ); ecp_point_free( &B ); ecp_point_free( &C );
73}
Paul Bakker33b43f12013-08-20 11:48:36 +020074/* END_CASE */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010075
Paul Bakker33b43f12013-08-20 11:48:36 +020076/* BEGIN_CASE */
77void ecp_small_sub( int a_zero, char *x_a, char *y_a, int b_zero, char *x_b,
78 char *y_b, int c_zero, int x_c, int y_c )
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +010079{
80 ecp_group grp;
81 ecp_point A, B, C;
82
83 ecp_group_init( &grp );
84 ecp_point_init( &A ); ecp_point_init( &B ); ecp_point_init( &C );
85
86 TEST_ASSERT( ecp_group_read_string( &grp, 10,
87 "47", "4", "17", "42", "13" ) == 0 );
88
Paul Bakker33b43f12013-08-20 11:48:36 +020089 if( a_zero )
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +010090 ecp_set_zero( &A );
91 else
Paul Bakker33b43f12013-08-20 11:48:36 +020092 TEST_ASSERT( ecp_point_read_string( &A, 10, x_a, y_a ) == 0 );
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +010093
Paul Bakker33b43f12013-08-20 11:48:36 +020094 if( b_zero )
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +010095 ecp_set_zero( &B );
96 else
Paul Bakker33b43f12013-08-20 11:48:36 +020097 TEST_ASSERT( ecp_point_read_string( &B, 10, x_b, y_b ) == 0 );
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +010098
99 TEST_ASSERT( ecp_sub( &grp, &C, &A, &B ) == 0 );
100
Paul Bakker33b43f12013-08-20 11:48:36 +0200101 if( c_zero )
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +0100102 TEST_ASSERT( mpi_cmp_int( &C.Z, 0 ) == 0 );
103 else
104 {
Paul Bakker33b43f12013-08-20 11:48:36 +0200105 TEST_ASSERT( mpi_cmp_int( &C.X, x_c ) == 0 );
106 TEST_ASSERT( mpi_cmp_int( &C.Y, y_c ) == 0 );
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +0100107 }
108
109 ecp_group_free( &grp );
110 ecp_point_free( &A ); ecp_point_free( &B ); ecp_point_free( &C );
111}
Paul Bakker33b43f12013-08-20 11:48:36 +0200112/* END_CASE */
Manuel Pégourié-Gonnard9674fd02012-11-19 21:23:27 +0100113
Paul Bakker33b43f12013-08-20 11:48:36 +0200114/* BEGIN_CASE */
115void ecp_small_mul( int m_str, int r_zero, int x_r, int y_r, int ret )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100116{
117 ecp_group grp;
118 ecp_point R;
119 mpi m;
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200120 rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100121
122 ecp_group_init( &grp );
123 ecp_point_init( &R );
124 mpi_init( &m );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200125 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100126
127 TEST_ASSERT( ecp_group_read_string( &grp, 10,
128 "47", "4", "17", "42", "13" ) == 0 );
129
Paul Bakker33b43f12013-08-20 11:48:36 +0200130 TEST_ASSERT( mpi_lset( &m, m_str ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100131
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200132 TEST_ASSERT( ecp_mul( &grp, &R, &m, &grp.G, NULL, NULL ) == ret );
133
Manuel Pégourié-Gonnardff27b7c2013-11-21 09:28:03 +0100134 if( ret == 0 )
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200135 {
Manuel Pégourié-Gonnardff27b7c2013-11-21 09:28:03 +0100136 if( r_zero )
137 TEST_ASSERT( mpi_cmp_int( &R.Z, 0 ) == 0 );
138 else
139 {
140 TEST_ASSERT( mpi_cmp_int( &R.X, x_r ) == 0 );
141 TEST_ASSERT( mpi_cmp_int( &R.Y, y_r ) == 0 );
142 }
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200143 }
144
145 /* try again with randomization */
146 ecp_point_free( &R );
147
148 TEST_ASSERT( ecp_mul( &grp, &R, &m, &grp.G,
149 &rnd_pseudo_rand, &rnd_info ) == ret );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100150
Manuel Pégourié-Gonnardff27b7c2013-11-21 09:28:03 +0100151 if( ret == 0 )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100152 {
Manuel Pégourié-Gonnardff27b7c2013-11-21 09:28:03 +0100153 if( r_zero )
154 TEST_ASSERT( mpi_cmp_int( &R.Z, 0 ) == 0 );
155 else
156 {
157 TEST_ASSERT( mpi_cmp_int( &R.X, x_r ) == 0 );
158 TEST_ASSERT( mpi_cmp_int( &R.Y, y_r ) == 0 );
159 }
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100160 }
161
162 ecp_group_free( &grp );
163 ecp_point_free( &R );
164 mpi_free( &m );
165}
Paul Bakker33b43f12013-08-20 11:48:36 +0200166/* END_CASE */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100167
Paul Bakker33b43f12013-08-20 11:48:36 +0200168/* BEGIN_CASE */
169void ecp_small_check_pub( int x, int y, int z, int ret )
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100170{
171 ecp_group grp;
172 ecp_point P;
173
174 ecp_group_init( &grp );
175 ecp_point_init( &P );
176
177 TEST_ASSERT( ecp_group_read_string( &grp, 10,
178 "47", "4", "17", "42", "13" ) == 0 );
179
Paul Bakker33b43f12013-08-20 11:48:36 +0200180 TEST_ASSERT( mpi_lset( &P.X, x ) == 0 );
181 TEST_ASSERT( mpi_lset( &P.Y, y ) == 0 );
182 TEST_ASSERT( mpi_lset( &P.Z, z ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100183
Paul Bakker33b43f12013-08-20 11:48:36 +0200184 TEST_ASSERT( ecp_check_pubkey( &grp, &P ) == ret );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100185
186 ecp_group_free( &grp );
187 ecp_point_free( &P );
188}
Paul Bakker33b43f12013-08-20 11:48:36 +0200189/* END_CASE */
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100190
Paul Bakker33b43f12013-08-20 11:48:36 +0200191/* BEGIN_CASE */
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100192void ecp_check_pub_mx( int grp_id, char *key_hex, int ret )
193{
194 ecp_group grp;
195 ecp_point P;
196
197 ecp_group_init( &grp );
198 ecp_point_init( &P );
199
200 TEST_ASSERT( ecp_use_known_dp( &grp, grp_id ) == 0 );
201
202 TEST_ASSERT( mpi_read_string( &P.X, 16, key_hex ) == 0 );
203 TEST_ASSERT( mpi_lset( &P.Z, 1 ) == 0 );
204
205 TEST_ASSERT( ecp_check_pubkey( &grp, &P ) == ret );
206
207 ecp_group_free( &grp );
208 ecp_point_free( &P );
209}
210/* END_CASE */
211
212/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +0200213void ecp_test_vect( int id, char *dA_str, char *xA_str, char *yA_str,
214 char *dB_str, char *xB_str, char *yB_str, char *xZ_str,
215 char *yZ_str )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100216{
217 ecp_group grp;
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100218 ecp_point R;
219 mpi dA, xA, yA, dB, xB, yB, xZ, yZ;
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200220 rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100221
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100222 ecp_group_init( &grp ); ecp_point_init( &R );
223 mpi_init( &dA ); mpi_init( &xA ); mpi_init( &yA ); mpi_init( &dB );
224 mpi_init( &xB ); mpi_init( &yB ); mpi_init( &xZ ); mpi_init( &yZ );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200225 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100226
Paul Bakker33b43f12013-08-20 11:48:36 +0200227 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100228
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100229 TEST_ASSERT( ecp_check_pubkey( &grp, &grp.G ) == 0 );
230
Paul Bakker33b43f12013-08-20 11:48:36 +0200231 TEST_ASSERT( mpi_read_string( &dA, 16, dA_str ) == 0 );
232 TEST_ASSERT( mpi_read_string( &xA, 16, xA_str ) == 0 );
233 TEST_ASSERT( mpi_read_string( &yA, 16, yA_str ) == 0 );
234 TEST_ASSERT( mpi_read_string( &dB, 16, dB_str ) == 0 );
235 TEST_ASSERT( mpi_read_string( &xB, 16, xB_str ) == 0 );
236 TEST_ASSERT( mpi_read_string( &yB, 16, yB_str ) == 0 );
237 TEST_ASSERT( mpi_read_string( &xZ, 16, xZ_str ) == 0 );
238 TEST_ASSERT( mpi_read_string( &yZ, 16, yZ_str ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100239
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200240 TEST_ASSERT( ecp_mul( &grp, &R, &dA, &grp.G,
241 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100242 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xA ) == 0 );
243 TEST_ASSERT( mpi_cmp_mpi( &R.Y, &yA ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100244 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200245 TEST_ASSERT( ecp_mul( &grp, &R, &dB, &R, NULL, NULL ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100246 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xZ ) == 0 );
247 TEST_ASSERT( mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100248 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100249
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200250 TEST_ASSERT( ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100251 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xB ) == 0 );
252 TEST_ASSERT( mpi_cmp_mpi( &R.Y, &yB ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100253 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200254 TEST_ASSERT( ecp_mul( &grp, &R, &dA, &R,
255 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100256 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xZ ) == 0 );
257 TEST_ASSERT( mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100258 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100259
260 ecp_group_free( &grp ); ecp_point_free( &R );
261 mpi_free( &dA ); mpi_free( &xA ); mpi_free( &yA ); mpi_free( &dB );
262 mpi_free( &xB ); mpi_free( &yB ); mpi_free( &xZ ); mpi_free( &yZ );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100263}
Paul Bakker33b43f12013-08-20 11:48:36 +0200264/* END_CASE */
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100265
Paul Bakker33b43f12013-08-20 11:48:36 +0200266/* BEGIN_CASE */
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100267void ecp_test_vec_x( int id, char *dA_hex, char *xA_hex,
268 char *dB_hex, char *xB_hex, char *xS_hex )
269{
270 ecp_group grp;
271 ecp_point R;
272 mpi dA, xA, dB, xB, xS;
273 rnd_pseudo_info rnd_info;
274
275 ecp_group_init( &grp ); ecp_point_init( &R );
276 mpi_init( &dA ); mpi_init( &xA );
277 mpi_init( &dB ); mpi_init( &xB );
278 mpi_init( &xS );
279 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
280
281 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
282
283 TEST_ASSERT( ecp_check_pubkey( &grp, &grp.G ) == 0 );
284
285 TEST_ASSERT( mpi_read_string( &dA, 16, dA_hex ) == 0 );
286 TEST_ASSERT( mpi_read_string( &dB, 16, dB_hex ) == 0 );
287 TEST_ASSERT( mpi_read_string( &xA, 16, xA_hex ) == 0 );
288 TEST_ASSERT( mpi_read_string( &xB, 16, xB_hex ) == 0 );
289 TEST_ASSERT( mpi_read_string( &xS, 16, xS_hex ) == 0 );
290
291 TEST_ASSERT( ecp_mul( &grp, &R, &dA, &grp.G,
292 &rnd_pseudo_rand, &rnd_info ) == 0 );
293 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
294 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xA ) == 0 );
295
296 TEST_ASSERT( ecp_mul( &grp, &R, &dB, &R,
297 &rnd_pseudo_rand, &rnd_info ) == 0 );
298 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
299 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xS ) == 0 );
300
Manuel Pégourié-Gonnard357ff652013-12-04 18:39:17 +0100301 TEST_ASSERT( ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100302 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
303 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xB ) == 0 );
304
Manuel Pégourié-Gonnard357ff652013-12-04 18:39:17 +0100305 TEST_ASSERT( ecp_mul( &grp, &R, &dA, &R, NULL, NULL ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100306 TEST_ASSERT( ecp_check_pubkey( &grp, &R ) == 0 );
307 TEST_ASSERT( mpi_cmp_mpi( &R.X, &xS ) == 0 );
308
309 ecp_group_free( &grp ); ecp_point_free( &R );
310 mpi_free( &dA ); mpi_free( &xA );
311 mpi_free( &dB ); mpi_free( &xB );
312 mpi_free( &xS );
313}
314/* END_CASE */
315
316/* BEGIN_CASE */
Paul Bakker33b43f12013-08-20 11:48:36 +0200317void ecp_fast_mod( int id, char *N_str )
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100318{
319 ecp_group grp;
320 mpi N, R;
321
322 mpi_init( &N ); mpi_init( &R );
323 ecp_group_init( &grp );
324
Paul Bakker33b43f12013-08-20 11:48:36 +0200325 TEST_ASSERT( mpi_read_string( &N, 16, N_str ) == 0 );
Manuel Pégourié-Gonnarde783f062013-10-21 14:52:21 +0200326 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
327 TEST_ASSERT( grp.modp != NULL );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100328
329 /*
330 * Store correct result before we touch N
331 */
332 TEST_ASSERT( mpi_mod_mpi( &R, &N, &grp.P ) == 0 );
333
334 TEST_ASSERT( grp.modp( &N ) == 0 );
335 TEST_ASSERT( mpi_msb( &N ) <= grp.pbits + 3 );
336
337 /*
Paul Bakkerd8b0c5e2014-04-11 15:31:33 +0200338 * Use mod rather than addition/subtraction in case previous test fails
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100339 */
340 TEST_ASSERT( mpi_mod_mpi( &N, &N, &grp.P ) == 0 );
341 TEST_ASSERT( mpi_cmp_mpi( &N, &R ) == 0 );
342
343 mpi_free( &N ); mpi_free( &R );
344 ecp_group_free( &grp );
345}
Paul Bakker33b43f12013-08-20 11:48:36 +0200346/* END_CASE */
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100347
Paul Bakker33b43f12013-08-20 11:48:36 +0200348/* BEGIN_CASE */
349void ecp_write_binary( int id, char *x, char *y, char *z, int format,
350 char *out, int blen, int ret )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100351{
352 ecp_group grp;
353 ecp_point P;
354 unsigned char buf[256], str[512];
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100355 size_t olen;
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100356
357 memset( buf, 0, sizeof( buf ) );
358 memset( str, 0, sizeof( str ) );
359
360 ecp_group_init( &grp ); ecp_point_init( &P );
361
Paul Bakker33b43f12013-08-20 11:48:36 +0200362 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100363
Paul Bakker33b43f12013-08-20 11:48:36 +0200364 TEST_ASSERT( mpi_read_string( &P.X, 16, x ) == 0 );
365 TEST_ASSERT( mpi_read_string( &P.Y, 16, y ) == 0 );
366 TEST_ASSERT( mpi_read_string( &P.Z, 16, z ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100367
Paul Bakker33b43f12013-08-20 11:48:36 +0200368 TEST_ASSERT( ecp_point_write_binary( &grp, &P, format,
369 &olen, buf, blen ) == ret );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100370
Paul Bakker33b43f12013-08-20 11:48:36 +0200371 if( ret == 0 )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100372 {
Manuel Pégourié-Gonnard37d218a2012-11-24 15:19:55 +0100373 hexify( str, buf, olen );
Paul Bakker33b43f12013-08-20 11:48:36 +0200374 TEST_ASSERT( strcasecmp( (char *) str, out ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100375 }
376
377 ecp_group_free( &grp ); ecp_point_free( &P );
378}
Paul Bakker33b43f12013-08-20 11:48:36 +0200379/* END_CASE */
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100380
Paul Bakker33b43f12013-08-20 11:48:36 +0200381/* BEGIN_CASE */
382void ecp_read_binary( int id, char *input, char *x, char *y, char *z,
383 int ret )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100384{
385 ecp_group grp;
386 ecp_point P;
387 mpi X, Y, Z;
388 int ilen;
389 unsigned char buf[256];
390
391 memset( buf, 0, sizeof( buf ) );
392
393 ecp_group_init( &grp ); ecp_point_init( &P );
394 mpi_init( &X ); mpi_init( &Y ); mpi_init( &Z );
395
Paul Bakker33b43f12013-08-20 11:48:36 +0200396 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100397
Paul Bakker33b43f12013-08-20 11:48:36 +0200398 TEST_ASSERT( mpi_read_string( &X, 16, x ) == 0 );
399 TEST_ASSERT( mpi_read_string( &Y, 16, y ) == 0 );
400 TEST_ASSERT( mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100401
Paul Bakker33b43f12013-08-20 11:48:36 +0200402 ilen = unhexify( buf, input );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100403
Paul Bakker33b43f12013-08-20 11:48:36 +0200404 TEST_ASSERT( ecp_point_read_binary( &grp, &P, buf, ilen ) == ret );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100405
Paul Bakker33b43f12013-08-20 11:48:36 +0200406 if( ret == 0 )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100407 {
408 TEST_ASSERT( mpi_cmp_mpi( &P.X, &X ) == 0 );
409 TEST_ASSERT( mpi_cmp_mpi( &P.Y, &Y ) == 0 );
410 TEST_ASSERT( mpi_cmp_mpi( &P.Z, &Z ) == 0 );
411 }
412
413 ecp_group_free( &grp ); ecp_point_free( &P );
414 mpi_free( &X ); mpi_free( &Y ); mpi_free( &Z );
415}
Paul Bakker33b43f12013-08-20 11:48:36 +0200416/* END_CASE */
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100417
Paul Bakker33b43f12013-08-20 11:48:36 +0200418/* BEGIN_CASE */
419void ecp_tls_read_point( int id, char *input, char *x, char *y, char *z,
420 int ret )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100421{
422 ecp_group grp;
423 ecp_point P;
424 mpi X, Y, Z;
425 size_t ilen;
426 unsigned char buf[256];
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100427 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100428
429 memset( buf, 0, sizeof( buf ) );
430
431 ecp_group_init( &grp ); ecp_point_init( &P );
432 mpi_init( &X ); mpi_init( &Y ); mpi_init( &Z );
433
Paul Bakker33b43f12013-08-20 11:48:36 +0200434 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100435
Paul Bakker33b43f12013-08-20 11:48:36 +0200436 TEST_ASSERT( mpi_read_string( &X, 16, x ) == 0 );
437 TEST_ASSERT( mpi_read_string( &Y, 16, y ) == 0 );
438 TEST_ASSERT( mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100439
Paul Bakker33b43f12013-08-20 11:48:36 +0200440 ilen = unhexify( buf, input );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100441
Paul Bakker33b43f12013-08-20 11:48:36 +0200442 TEST_ASSERT( ecp_tls_read_point( &grp, &P, &vbuf, ilen ) == ret );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100443
Paul Bakker33b43f12013-08-20 11:48:36 +0200444 if( ret == 0 )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100445 {
446 TEST_ASSERT( mpi_cmp_mpi( &P.X, &X ) == 0 );
447 TEST_ASSERT( mpi_cmp_mpi( &P.Y, &Y ) == 0 );
448 TEST_ASSERT( mpi_cmp_mpi( &P.Z, &Z ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100449 TEST_ASSERT( *vbuf == 0x00 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100450 }
451
452 ecp_group_free( &grp ); ecp_point_free( &P );
453 mpi_free( &X ); mpi_free( &Y ); mpi_free( &Z );
454}
Paul Bakker33b43f12013-08-20 11:48:36 +0200455/* END_CASE */
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100456
Paul Bakker33b43f12013-08-20 11:48:36 +0200457/* BEGIN_CASE */
458void ecp_tls_write_read_point( int id )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100459{
460 ecp_group grp;
461 ecp_point pt;
462 unsigned char buf[256];
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100463 const unsigned char *vbuf;
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100464 size_t olen;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100465
466 ecp_group_init( &grp );
467 ecp_point_init( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100468
Paul Bakker33b43f12013-08-20 11:48:36 +0200469 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100470
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100471 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100472 TEST_ASSERT( ecp_tls_write_point( &grp, &grp.G,
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100473 POLARSSL_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100474 TEST_ASSERT( ecp_tls_read_point( &grp, &pt, &vbuf, olen )
Manuel Pégourié-Gonnardc042cf02014-03-26 14:12:20 +0100475 == POLARSSL_ERR_ECP_FEATURE_UNAVAILABLE );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100476 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100477
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100478 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100479 TEST_ASSERT( ecp_tls_write_point( &grp, &grp.G,
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100480 POLARSSL_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100481 TEST_ASSERT( ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100482 TEST_ASSERT( mpi_cmp_mpi( &grp.G.X, &pt.X ) == 0 );
483 TEST_ASSERT( mpi_cmp_mpi( &grp.G.Y, &pt.Y ) == 0 );
484 TEST_ASSERT( mpi_cmp_mpi( &grp.G.Z, &pt.Z ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100485 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100486
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100487 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100488 TEST_ASSERT( ecp_set_zero( &pt ) == 0 );
489 TEST_ASSERT( ecp_tls_write_point( &grp, &pt,
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100490 POLARSSL_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100491 TEST_ASSERT( ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100492 TEST_ASSERT( ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100493 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100494
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100495 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100496 TEST_ASSERT( ecp_set_zero( &pt ) == 0 );
497 TEST_ASSERT( ecp_tls_write_point( &grp, &pt,
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100498 POLARSSL_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100499 TEST_ASSERT( ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100500 TEST_ASSERT( ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100501 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100502
503 ecp_group_free( &grp );
504 ecp_point_free( &pt );
505}
Paul Bakker33b43f12013-08-20 11:48:36 +0200506/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100507
Paul Bakker33b43f12013-08-20 11:48:36 +0200508/* BEGIN_CASE */
509void ecp_tls_read_group( char *record, int result, int bits )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100510{
511 ecp_group grp;
512 unsigned char buf[10];
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100513 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100514 int len, ret;
515
516 ecp_group_init( &grp );
517 memset( buf, 0x00, sizeof( buf ) );
518
Paul Bakker33b43f12013-08-20 11:48:36 +0200519 len = unhexify( buf, record );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100520
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100521 ret = ecp_tls_read_group( &grp, &vbuf, len );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100522
Paul Bakker33b43f12013-08-20 11:48:36 +0200523 TEST_ASSERT( ret == result );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100524 if( ret == 0)
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100525 {
Paul Bakker33b43f12013-08-20 11:48:36 +0200526 TEST_ASSERT( mpi_msb( &grp.P ) == (size_t) bits );
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100527 TEST_ASSERT( *vbuf == 0x00 );
528 }
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100529
530 ecp_group_free( &grp );
531}
Paul Bakker33b43f12013-08-20 11:48:36 +0200532/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100533
Paul Bakker33b43f12013-08-20 11:48:36 +0200534/* BEGIN_CASE */
535void ecp_tls_write_read_group( int id )
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100536{
537 ecp_group grp1, grp2;
538 unsigned char buf[10];
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100539 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100540 size_t len;
541 int ret;
542
543 ecp_group_init( &grp1 );
544 ecp_group_init( &grp2 );
545 memset( buf, 0x00, sizeof( buf ) );
546
Paul Bakker33b43f12013-08-20 11:48:36 +0200547 TEST_ASSERT( ecp_use_known_dp( &grp1, id ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100548
549 TEST_ASSERT( ecp_tls_write_group( &grp1, &len, buf, 10 ) == 0 );
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100550 TEST_ASSERT( ( ret = ecp_tls_read_group( &grp2, &vbuf, len ) ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100551
552 if( ret == 0 )
553 {
554 TEST_ASSERT( mpi_cmp_mpi( &grp1.N, &grp2.N ) == 0 );
555 TEST_ASSERT( grp1.id == grp2.id );
556 }
557
558 ecp_group_free( &grp1 );
559 ecp_group_free( &grp2 );
560}
Paul Bakker33b43f12013-08-20 11:48:36 +0200561/* END_CASE */
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100562
Paul Bakker33b43f12013-08-20 11:48:36 +0200563/* BEGIN_CASE */
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100564void ecp_check_privkey( int id, char *key_hex, int ret )
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200565{
566 ecp_group grp;
567 mpi d;
568
569 ecp_group_init( &grp );
570 mpi_init( &d );
571
Paul Bakker33b43f12013-08-20 11:48:36 +0200572 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100573 TEST_ASSERT( mpi_read_string( &d, 16, key_hex ) == 0 );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200574
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100575 TEST_ASSERT( ecp_check_privkey( &grp, &d ) == ret );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200576
577 ecp_group_free( &grp );
578 mpi_free( &d );
579}
Paul Bakker33b43f12013-08-20 11:48:36 +0200580/* END_CASE */
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200581
Paul Bakker33b43f12013-08-20 11:48:36 +0200582/* BEGIN_CASE */
583void ecp_gen_keypair( int id )
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100584{
585 ecp_group grp;
586 ecp_point Q;
587 mpi d;
588 rnd_pseudo_info rnd_info;
589
590 ecp_group_init( &grp );
591 ecp_point_init( &Q );
592 mpi_init( &d );
593 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
594
Paul Bakker33b43f12013-08-20 11:48:36 +0200595 TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100596
597 TEST_ASSERT( ecp_gen_keypair( &grp, &d, &Q, &rnd_pseudo_rand, &rnd_info )
598 == 0 );
599
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200600 TEST_ASSERT( ecp_check_pubkey( &grp, &Q ) == 0 );
Paul Bakker8ea6c612013-07-16 17:15:03 +0200601 TEST_ASSERT( ecp_check_privkey( &grp, &d ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100602
603 ecp_group_free( &grp );
604 ecp_point_free( &Q );
605 mpi_free( &d );
606}
Paul Bakker33b43f12013-08-20 11:48:36 +0200607/* END_CASE */
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100608
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100609/* BEGIN_CASE */
610void ecp_gen_key( int id )
611{
612 ecp_keypair key;
613 rnd_pseudo_info rnd_info;
614
615 ecp_keypair_init( &key );
616 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
617
618 TEST_ASSERT( ecp_gen_key( id, &key, &rnd_pseudo_rand, &rnd_info ) == 0 );
619
620 TEST_ASSERT( ecp_check_pubkey( &key.grp, &key.Q ) == 0 );
621 TEST_ASSERT( ecp_check_privkey( &key.grp, &key.d ) == 0 );
622
623 ecp_keypair_free( &key );
624}
625/* END_CASE */
626
Manuel Pégourié-Gonnard20140162013-10-10 12:48:03 +0200627/* BEGIN_CASE depends_on:POLARSSL_SELF_TEST */
Paul Bakker33b43f12013-08-20 11:48:36 +0200628void ecp_selftest()
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100629{
630 TEST_ASSERT( ecp_self_test( 0 ) == 0 );
631}
Paul Bakker33b43f12013-08-20 11:48:36 +0200632/* END_CASE */