blob: 025f3f83a014c4c5b932f2f4cded566af737332e [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/ecp.h"
Werner Lewise54046c2022-08-15 11:43:56 +01003#include "mbedtls/ecdsa.h"
4#include "mbedtls/ecdh.h"
Paul Bakkerdbd443d2013-08-16 13:38:47 +02005
Gilles Peskine618be2e2021-04-03 21:47:53 +02006#include "ecp_invasive.h"
7
8#if defined(MBEDTLS_TEST_HOOKS) && \
9 ( defined(MBEDTLS_ECP_DP_SECP224R1_ENABLED) || \
10 defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED) || \
11 defined(MBEDTLS_ECP_DP_SECP384R1_ENABLED) )
12#define HAVE_FIX_NEGATIVE
13#endif
14
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +020015#define ECP_PF_UNKNOWN -1
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +020016
17#define ECP_PT_RESET( x ) \
18 mbedtls_ecp_point_free( x ); \
19 mbedtls_ecp_point_init( x );
Gilles Peskine78880732021-03-29 21:32:16 +020020
Przemek Stekiel4b30feb2022-03-18 13:58:26 +010021/* Auxiliary function to compare two mbedtls_ecp_group objects. */
Przemek Stekiel6a478ef2022-03-28 07:25:12 +020022inline static int mbedtls_ecp_group_cmp( mbedtls_ecp_group *grp1,
23 mbedtls_ecp_group *grp2 )
Przemek Stekiel4b30feb2022-03-18 13:58:26 +010024{
Przemek Stekiel6a478ef2022-03-28 07:25:12 +020025 if( mbedtls_mpi_cmp_mpi( &grp1->P, &grp2->P ) != 0 )
Przemek Stekiel4b30feb2022-03-18 13:58:26 +010026 return 1;
Przemek Stekiel6a478ef2022-03-28 07:25:12 +020027 if( mbedtls_mpi_cmp_mpi( &grp1->A, &grp2->A ) != 0 )
Przemek Stekiel4b30feb2022-03-18 13:58:26 +010028 return 1;
Przemek Stekiel6a478ef2022-03-28 07:25:12 +020029 if( mbedtls_mpi_cmp_mpi( &grp1->B, &grp2->B ) != 0 )
Przemek Stekiel4b30feb2022-03-18 13:58:26 +010030 return 1;
Przemek Stekiel6a478ef2022-03-28 07:25:12 +020031 if( mbedtls_mpi_cmp_mpi( &grp1->N, &grp2->N ) != 0 )
Przemek Stekiel4b30feb2022-03-18 13:58:26 +010032 return 1;
Przemek Stekiel6a478ef2022-03-28 07:25:12 +020033 if( mbedtls_ecp_point_cmp( &grp1->G, &grp2->G ) != 0 )
Przemek Stekiel4b30feb2022-03-18 13:58:26 +010034 return 1;
Przemek Stekiel6a478ef2022-03-28 07:25:12 +020035 if( grp1->id != grp2->id )
Przemek Stekiel4b30feb2022-03-18 13:58:26 +010036 return 1;
Przemek Stekiel6a478ef2022-03-28 07:25:12 +020037 if( grp1->pbits != grp2->pbits )
Przemek Stekiel4b30feb2022-03-18 13:58:26 +010038 return 1;
Przemek Stekiel6a478ef2022-03-28 07:25:12 +020039 if( grp1->nbits != grp2->nbits )
Przemek Stekiel4b30feb2022-03-18 13:58:26 +010040 return 1;
Przemek Stekiel6a478ef2022-03-28 07:25:12 +020041 if( grp1->h != grp2->h )
Przemek Stekiel4b30feb2022-03-18 13:58:26 +010042 return 1;
Przemek Stekiel6a478ef2022-03-28 07:25:12 +020043 if( grp1->modp != grp2->modp )
Przemek Stekiel4b30feb2022-03-18 13:58:26 +010044 return 1;
Przemek Stekiel6a478ef2022-03-28 07:25:12 +020045 if( grp1->t_pre != grp2->t_pre )
Przemek Stekiel4b30feb2022-03-18 13:58:26 +010046 return 1;
Przemek Stekiel6a478ef2022-03-28 07:25:12 +020047 if( grp1->t_post != grp2->t_post )
Przemek Stekiel4b30feb2022-03-18 13:58:26 +010048 return 1;
Przemek Stekiel6a478ef2022-03-28 07:25:12 +020049 if( grp1->t_data != grp2->t_data )
Przemek Stekiel4b30feb2022-03-18 13:58:26 +010050 return 1;
Przemek Stekiel6a478ef2022-03-28 07:25:12 +020051 if( grp1->T_size != grp2->T_size )
Przemek Stekiel4b30feb2022-03-18 13:58:26 +010052 return 1;
Przemek Stekiel6a478ef2022-03-28 07:25:12 +020053 if( grp1->T != grp2->T )
Przemek Stekiel4b30feb2022-03-18 13:58:26 +010054 return 1;
55
56 return 0;
57}
58
Paul Bakker33b43f12013-08-20 11:48:36 +020059/* END_HEADER */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010060
Paul Bakker33b43f12013-08-20 11:48:36 +020061/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020062 * depends_on:MBEDTLS_ECP_C
Paul Bakker33b43f12013-08-20 11:48:36 +020063 * END_DEPENDENCIES
64 */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010065
Tuvshinzaya Erdenekhuufb389dd2022-07-27 15:23:02 +010066/* BEGIN_CASE */
Hanno Becker12dff032018-12-14 15:08:13 +000067void ecp_invalid_param( )
68{
69 mbedtls_ecp_group grp;
Hanno Becker12dff032018-12-14 15:08:13 +000070 mbedtls_ecp_point P;
Hanno Becker12dff032018-12-14 15:08:13 +000071 int invalid_fmt = 42;
72 size_t olen;
73 unsigned char buf[42] = { 0 };
Hanno Becker12dff032018-12-14 15:08:13 +000074
Ronald Cron875b5fb2021-05-21 08:50:00 +020075 TEST_EQUAL( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
Hanno Becker12dff032018-12-14 15:08:13 +000076 mbedtls_ecp_point_write_binary( &grp, &P,
77 invalid_fmt,
78 &olen,
79 buf, sizeof( buf ) ) );
Ronald Cron875b5fb2021-05-21 08:50:00 +020080 TEST_EQUAL( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
Hanno Becker12dff032018-12-14 15:08:13 +000081 mbedtls_ecp_tls_write_point( &grp, &P,
82 invalid_fmt,
83 &olen,
84 buf,
85 sizeof( buf ) ) );
Hanno Becker12dff032018-12-14 15:08:13 +000086
87exit:
88 return;
89}
90/* END_CASE */
91
Paul Bakker33b43f12013-08-20 11:48:36 +020092/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +010093void mbedtls_ecp_curve_info( int id, int tls_id, int size, char * name )
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010094{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020095 const mbedtls_ecp_curve_info *by_id, *by_tls, *by_name;
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +010096
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020097 by_id = mbedtls_ecp_curve_info_from_grp_id( id );
98 by_tls = mbedtls_ecp_curve_info_from_tls_id( tls_id );
99 by_name = mbedtls_ecp_curve_info_from_name( name );
Paul Bakker94b916c2014-04-17 16:07:20 +0200100 TEST_ASSERT( by_id != NULL );
101 TEST_ASSERT( by_tls != NULL );
102 TEST_ASSERT( by_name != NULL );
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +0100103
104 TEST_ASSERT( by_id == by_tls );
105 TEST_ASSERT( by_id == by_name );
106
Manuel Pégourié-Gonnard797f48a2015-06-18 15:45:05 +0200107 TEST_ASSERT( by_id->bit_size == size );
Gilles Peskine814d0122021-05-31 21:44:25 +0200108 TEST_ASSERT( size <= MBEDTLS_ECP_MAX_BITS );
109 TEST_ASSERT( size <= MBEDTLS_ECP_MAX_BYTES * 8 );
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +0100110}
111/* END_CASE */
112
113/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100114void ecp_check_pub( int grp_id, char * x_hex, char * y_hex, char * z_hex,
115 int ret )
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100116{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200117 mbedtls_ecp_group grp;
118 mbedtls_ecp_point P;
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100119
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200120 mbedtls_ecp_group_init( &grp );
121 mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100122
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200123 TEST_ASSERT( mbedtls_ecp_group_load( &grp, grp_id ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100124
Werner Lewis19b4cd82022-07-07 11:02:27 +0100125 TEST_ASSERT( mbedtls_test_read_mpi( &P.X, x_hex ) == 0 );
126 TEST_ASSERT( mbedtls_test_read_mpi( &P.Y, y_hex ) == 0 );
127 TEST_ASSERT( mbedtls_test_read_mpi( &P.Z, z_hex ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100128
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200129 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &P ) == ret );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100130
Paul Bakkerbd51b262014-07-10 15:26:12 +0200131exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200132 mbedtls_ecp_group_free( &grp );
133 mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100134}
135/* END_CASE */
136
Manuel Pégourié-Gonnard4b9c51e2017-04-20 15:50:26 +0200137/* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE */
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100138void ecp_test_vect_restart( int id,
139 char *dA_str, char *xA_str, char *yA_str,
140 char *dB_str, char *xZ_str, char *yZ_str,
141 int max_ops, int min_restarts, int max_restarts )
142{
143 /*
144 * Test for early restart. Based on test vectors like ecp_test_vect(),
145 * but for the sake of simplicity only does half of each side. It's
146 * important to test both base point and random point, though, as memory
147 * management is different in each case.
148 *
149 * Don't try using too precise bounds for restarts as the exact number
150 * will depend on settings such as MBEDTLS_ECP_FIXED_POINT_OPTIM and
151 * MBEDTLS_ECP_WINDOW_SIZE, as well as implementation details that may
152 * change in the future. A factor 2 is a minimum safety margin.
153 *
154 * For reference, with mbed TLS 2.4 and default settings, for P-256:
Manuel Pégourié-Gonnard9c5c78f2017-03-20 14:13:07 +0100155 * - Random point mult: ~3250M
156 * - Cold base point mult: ~3300M
157 * - Hot base point mult: ~1100M
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100158 * With MBEDTLS_ECP_WINDOW_SIZE set to 2 (minimum):
Manuel Pégourié-Gonnard9c5c78f2017-03-20 14:13:07 +0100159 * - Random point mult: ~3850M
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100160 */
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +0200161 mbedtls_ecp_restart_ctx ctx;
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100162 mbedtls_ecp_group grp;
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200163 mbedtls_ecp_point R, P;
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100164 mbedtls_mpi dA, xA, yA, dB, xZ, yZ;
165 int cnt_restarts;
166 int ret;
Manuel Pégourié-Gonnardaa3ed6f2021-06-15 11:29:26 +0200167 mbedtls_test_rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100168
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +0200169 mbedtls_ecp_restart_init( &ctx );
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200170 mbedtls_ecp_group_init( &grp );
171 mbedtls_ecp_point_init( &R ); mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100172 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); mbedtls_mpi_init( &yA );
173 mbedtls_mpi_init( &dB ); mbedtls_mpi_init( &xZ ); mbedtls_mpi_init( &yZ );
Manuel Pégourié-Gonnardaa3ed6f2021-06-15 11:29:26 +0200174 memset( &rnd_info, 0x00, sizeof( mbedtls_test_rnd_pseudo_info ) );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100175
176 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
177
Werner Lewis19b4cd82022-07-07 11:02:27 +0100178 TEST_ASSERT( mbedtls_test_read_mpi( &dA, dA_str ) == 0 );
179 TEST_ASSERT( mbedtls_test_read_mpi( &xA, xA_str ) == 0 );
180 TEST_ASSERT( mbedtls_test_read_mpi( &yA, yA_str ) == 0 );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100181
Werner Lewis19b4cd82022-07-07 11:02:27 +0100182 TEST_ASSERT( mbedtls_test_read_mpi( &dB, dB_str ) == 0 );
183 TEST_ASSERT( mbedtls_test_read_mpi( &xZ, xZ_str ) == 0 );
184 TEST_ASSERT( mbedtls_test_read_mpi( &yZ, yZ_str ) == 0 );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100185
186 mbedtls_ecp_set_max_ops( (unsigned) max_ops );
187
188 /* Base point case */
189 cnt_restarts = 0;
190 do {
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200191 ECP_PT_RESET( &R );
Manuel Pégourié-Gonnardaa3ed6f2021-06-15 11:29:26 +0200192 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dA, &grp.G,
193 &mbedtls_test_rnd_pseudo_rand, &rnd_info, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200194 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100195
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200196 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100197 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
198 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yA ) == 0 );
199
200 TEST_ASSERT( cnt_restarts >= min_restarts );
201 TEST_ASSERT( cnt_restarts <= max_restarts );
202
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100203 /* Non-base point case */
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200204 mbedtls_ecp_copy( &P, &R );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100205 cnt_restarts = 0;
206 do {
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200207 ECP_PT_RESET( &R );
Manuel Pégourié-Gonnardaa3ed6f2021-06-15 11:29:26 +0200208 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dB, &P,
209 &mbedtls_test_rnd_pseudo_rand, &rnd_info, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200210 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100211
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200212 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100213 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
214 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
215
216 TEST_ASSERT( cnt_restarts >= min_restarts );
217 TEST_ASSERT( cnt_restarts <= max_restarts );
218
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200219 /* Do we leak memory when aborting an operation?
220 * This test only makes sense when we actually restart */
221 if( min_restarts > 0 )
222 {
Manuel Pégourié-Gonnardaa3ed6f2021-06-15 11:29:26 +0200223 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dB, &P,
224 &mbedtls_test_rnd_pseudo_rand, &rnd_info, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200225 TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
226 }
Manuel Pégourié-Gonnard77af79a2017-03-14 10:58:00 +0100227
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100228exit:
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +0200229 mbedtls_ecp_restart_free( &ctx );
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200230 mbedtls_ecp_group_free( &grp );
231 mbedtls_ecp_point_free( &R ); mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100232 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); mbedtls_mpi_free( &yA );
233 mbedtls_mpi_free( &dB ); mbedtls_mpi_free( &xZ ); mbedtls_mpi_free( &yZ );
234}
235/* END_CASE */
236
Manuel Pégourié-Gonnard4b9c51e2017-04-20 15:50:26 +0200237/* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE */
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200238void ecp_muladd_restart( int id, char *xR_str, char *yR_str,
239 char *u1_str, char *u2_str,
240 char *xQ_str, char *yQ_str,
241 int max_ops, int min_restarts, int max_restarts )
242{
243 /*
244 * Compute R = u1 * G + u2 * Q
245 * (test vectors mostly taken from ECDSA intermediate results)
246 *
247 * See comments at the top of ecp_test_vect_restart()
248 */
249 mbedtls_ecp_restart_ctx ctx;
250 mbedtls_ecp_group grp;
251 mbedtls_ecp_point R, Q;
252 mbedtls_mpi u1, u2, xR, yR;
253 int cnt_restarts;
254 int ret;
255
256 mbedtls_ecp_restart_init( &ctx );
257 mbedtls_ecp_group_init( &grp );
258 mbedtls_ecp_point_init( &R );
259 mbedtls_ecp_point_init( &Q );
260 mbedtls_mpi_init( &u1 ); mbedtls_mpi_init( &u2 );
261 mbedtls_mpi_init( &xR ); mbedtls_mpi_init( &yR );
262
263 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
264
Werner Lewis19b4cd82022-07-07 11:02:27 +0100265 TEST_ASSERT( mbedtls_test_read_mpi( &u1, u1_str ) == 0 );
266 TEST_ASSERT( mbedtls_test_read_mpi( &u2, u2_str ) == 0 );
267 TEST_ASSERT( mbedtls_test_read_mpi( &xR, xR_str ) == 0 );
268 TEST_ASSERT( mbedtls_test_read_mpi( &yR, yR_str ) == 0 );
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200269
Werner Lewis19b4cd82022-07-07 11:02:27 +0100270 TEST_ASSERT( mbedtls_test_read_mpi( &Q.X, xQ_str ) == 0 );
271 TEST_ASSERT( mbedtls_test_read_mpi( &Q.Y, yQ_str ) == 0 );
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200272 TEST_ASSERT( mbedtls_mpi_lset( &Q.Z, 1 ) == 0 );
273
274 mbedtls_ecp_set_max_ops( (unsigned) max_ops );
275
276 cnt_restarts = 0;
277 do {
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200278 ECP_PT_RESET( &R );
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200279 ret = mbedtls_ecp_muladd_restartable( &grp, &R,
280 &u1, &grp.G, &u2, &Q, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200281 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200282
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200283 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200284 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xR ) == 0 );
285 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yR ) == 0 );
286
287 TEST_ASSERT( cnt_restarts >= min_restarts );
288 TEST_ASSERT( cnt_restarts <= max_restarts );
289
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200290 /* Do we leak memory when aborting an operation?
291 * This test only makes sense when we actually restart */
292 if( min_restarts > 0 )
293 {
294 ret = mbedtls_ecp_muladd_restartable( &grp, &R,
295 &u1, &grp.G, &u2, &Q, &ctx );
296 TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
297 }
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200298
299exit:
300 mbedtls_ecp_restart_free( &ctx );
301 mbedtls_ecp_group_free( &grp );
302 mbedtls_ecp_point_free( &R );
303 mbedtls_ecp_point_free( &Q );
304 mbedtls_mpi_free( &u1 ); mbedtls_mpi_free( &u2 );
305 mbedtls_mpi_free( &xR ); mbedtls_mpi_free( &yR );
306}
307/* END_CASE */
308
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100309/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100310void ecp_test_vect( int id, char * dA_str, char * xA_str, char * yA_str,
311 char * dB_str, char * xB_str, char * yB_str,
312 char * xZ_str, char * yZ_str )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100313{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200314 mbedtls_ecp_group grp;
315 mbedtls_ecp_point R;
316 mbedtls_mpi dA, xA, yA, dB, xB, yB, xZ, yZ;
Ronald Cron351f0ee2020-06-10 12:12:18 +0200317 mbedtls_test_rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100318
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200319 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
320 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); mbedtls_mpi_init( &yA ); mbedtls_mpi_init( &dB );
321 mbedtls_mpi_init( &xB ); mbedtls_mpi_init( &yB ); mbedtls_mpi_init( &xZ ); mbedtls_mpi_init( &yZ );
Ronald Cron351f0ee2020-06-10 12:12:18 +0200322 memset( &rnd_info, 0x00, sizeof( mbedtls_test_rnd_pseudo_info ) );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100323
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200324 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100325
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200326 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100327
Werner Lewis19b4cd82022-07-07 11:02:27 +0100328 TEST_ASSERT( mbedtls_test_read_mpi( &dA, dA_str ) == 0 );
329 TEST_ASSERT( mbedtls_test_read_mpi( &xA, xA_str ) == 0 );
330 TEST_ASSERT( mbedtls_test_read_mpi( &yA, yA_str ) == 0 );
331 TEST_ASSERT( mbedtls_test_read_mpi( &dB, dB_str ) == 0 );
332 TEST_ASSERT( mbedtls_test_read_mpi( &xB, xB_str ) == 0 );
333 TEST_ASSERT( mbedtls_test_read_mpi( &yB, yB_str ) == 0 );
334 TEST_ASSERT( mbedtls_test_read_mpi( &xZ, xZ_str ) == 0 );
335 TEST_ASSERT( mbedtls_test_read_mpi( &yZ, yZ_str ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100336
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200337 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G,
Ronald Cron351f0ee2020-06-10 12:12:18 +0200338 &mbedtls_test_rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200339 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
340 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yA ) == 0 );
341 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnardaa3ed6f2021-06-15 11:29:26 +0200342 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R,
343 &mbedtls_test_rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200344 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
345 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
346 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100347
Manuel Pégourié-Gonnardaa3ed6f2021-06-15 11:29:26 +0200348 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G,
349 &mbedtls_test_rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200350 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 );
351 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yB ) == 0 );
352 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
353 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R,
Ronald Cron351f0ee2020-06-10 12:12:18 +0200354 &mbedtls_test_rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200355 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
356 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
357 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100358
Paul Bakkerbd51b262014-07-10 15:26:12 +0200359exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200360 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
361 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); mbedtls_mpi_free( &yA ); mbedtls_mpi_free( &dB );
362 mbedtls_mpi_free( &xB ); mbedtls_mpi_free( &yB ); mbedtls_mpi_free( &xZ ); mbedtls_mpi_free( &yZ );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100363}
Paul Bakker33b43f12013-08-20 11:48:36 +0200364/* END_CASE */
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100365
Paul Bakker33b43f12013-08-20 11:48:36 +0200366/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100367void ecp_test_vec_x( int id, char * dA_hex, char * xA_hex, char * dB_hex,
368 char * xB_hex, char * xS_hex )
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100369{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200370 mbedtls_ecp_group grp;
371 mbedtls_ecp_point R;
372 mbedtls_mpi dA, xA, dB, xB, xS;
Ronald Cron351f0ee2020-06-10 12:12:18 +0200373 mbedtls_test_rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100374
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200375 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
376 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA );
377 mbedtls_mpi_init( &dB ); mbedtls_mpi_init( &xB );
378 mbedtls_mpi_init( &xS );
Ronald Cron351f0ee2020-06-10 12:12:18 +0200379 memset( &rnd_info, 0x00, sizeof( mbedtls_test_rnd_pseudo_info ) );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100380
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200381 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100382
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200383 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100384
Werner Lewis19b4cd82022-07-07 11:02:27 +0100385 TEST_ASSERT( mbedtls_test_read_mpi( &dA, dA_hex ) == 0 );
386 TEST_ASSERT( mbedtls_test_read_mpi( &dB, dB_hex ) == 0 );
387 TEST_ASSERT( mbedtls_test_read_mpi( &xA, xA_hex ) == 0 );
388 TEST_ASSERT( mbedtls_test_read_mpi( &xB, xB_hex ) == 0 );
389 TEST_ASSERT( mbedtls_test_read_mpi( &xS, xS_hex ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100390
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200391 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G,
Ronald Cron351f0ee2020-06-10 12:12:18 +0200392 &mbedtls_test_rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200393 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
394 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100395
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200396 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R,
Ronald Cron351f0ee2020-06-10 12:12:18 +0200397 &mbedtls_test_rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200398 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
399 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100400
Manuel Pégourié-Gonnardaa3ed6f2021-06-15 11:29:26 +0200401 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G,
402 &mbedtls_test_rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200403 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
404 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100405
Manuel Pégourié-Gonnardaa3ed6f2021-06-15 11:29:26 +0200406 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R,
407 &mbedtls_test_rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200408 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
409 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100410
Paul Bakkerbd51b262014-07-10 15:26:12 +0200411exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200412 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
413 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA );
414 mbedtls_mpi_free( &dB ); mbedtls_mpi_free( &xB );
415 mbedtls_mpi_free( &xS );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100416}
417/* END_CASE */
418
419/* BEGIN_CASE */
Janos Follath182b0b92019-04-26 14:28:19 +0100420void ecp_test_mul( int id, data_t * n_hex,
421 data_t * Px_hex, data_t * Py_hex, data_t * Pz_hex,
422 data_t * nPx_hex, data_t * nPy_hex, data_t * nPz_hex,
423 int expected_ret )
424{
425 mbedtls_ecp_group grp;
426 mbedtls_ecp_point P, nP, R;
427 mbedtls_mpi n;
Ronald Cron351f0ee2020-06-10 12:12:18 +0200428 mbedtls_test_rnd_pseudo_info rnd_info;
Janos Follath182b0b92019-04-26 14:28:19 +0100429
430 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
431 mbedtls_ecp_point_init( &P ); mbedtls_ecp_point_init( &nP );
432 mbedtls_mpi_init( &n );
Ronald Cron351f0ee2020-06-10 12:12:18 +0200433 memset( &rnd_info, 0x00, sizeof( mbedtls_test_rnd_pseudo_info ) );
Janos Follath182b0b92019-04-26 14:28:19 +0100434
435 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
436
437 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
438
439 TEST_ASSERT( mbedtls_mpi_read_binary( &n, n_hex->x, n_hex->len ) == 0 );
440
441 TEST_ASSERT( mbedtls_mpi_read_binary( &P.X, Px_hex->x, Px_hex->len ) == 0 );
442 TEST_ASSERT( mbedtls_mpi_read_binary( &P.Y, Py_hex->x, Py_hex->len ) == 0 );
443 TEST_ASSERT( mbedtls_mpi_read_binary( &P.Z, Pz_hex->x, Pz_hex->len ) == 0 );
444 TEST_ASSERT( mbedtls_mpi_read_binary( &nP.X, nPx_hex->x, nPx_hex->len )
445 == 0 );
446 TEST_ASSERT( mbedtls_mpi_read_binary( &nP.Y, nPy_hex->x, nPy_hex->len )
447 == 0 );
448 TEST_ASSERT( mbedtls_mpi_read_binary( &nP.Z, nPz_hex->x, nPz_hex->len )
449 == 0 );
450
451 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &n, &P,
Ronald Cron351f0ee2020-06-10 12:12:18 +0200452 &mbedtls_test_rnd_pseudo_rand, &rnd_info )
Janos Follath182b0b92019-04-26 14:28:19 +0100453 == expected_ret );
454
455 if( expected_ret == 0 )
456 {
457 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &nP.X, &R.X ) == 0 );
458 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &nP.Y, &R.Y ) == 0 );
459 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &nP.Z, &R.Z ) == 0 );
460 }
461
462exit:
463 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
464 mbedtls_ecp_point_free( &P ); mbedtls_ecp_point_free( &nP );
465 mbedtls_mpi_free( &n );
466}
467/* END_CASE */
468
469/* BEGIN_CASE */
Jonas923d5792020-05-13 14:22:45 +0900470void ecp_test_mul_rng( int id, data_t * d_hex)
471{
472 mbedtls_ecp_group grp;
473 mbedtls_mpi d;
474 mbedtls_ecp_point Q;
475
476 mbedtls_ecp_group_init( &grp ); mbedtls_mpi_init( &d );
477 mbedtls_ecp_point_init( &Q );
478
479 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
480
481 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
482
483 TEST_ASSERT( mbedtls_mpi_read_binary( &d, d_hex->x, d_hex->len ) == 0 );
484
Ronald Cron6c5bd7f2020-06-10 14:08:26 +0200485 TEST_ASSERT( mbedtls_ecp_mul( &grp, &Q, &d, &grp.G,
486 &mbedtls_test_rnd_zero_rand, NULL )
Jonas923d5792020-05-13 14:22:45 +0900487 == MBEDTLS_ERR_ECP_RANDOM_FAILED );
488
489exit:
490 mbedtls_ecp_group_free( &grp ); mbedtls_mpi_free( &d );
491 mbedtls_ecp_point_free( &Q );
492}
493/* END_CASE */
494
Gilles Peskineca91ee42021-04-03 18:31:01 +0200495/* BEGIN_CASE depends_on:MBEDTLS_ECP_SHORT_WEIERSTRASS_ENABLED */
496void ecp_muladd( int id,
497 data_t *u1_bin, data_t *P1_bin,
498 data_t *u2_bin, data_t *P2_bin,
499 data_t *expected_result )
500{
501 /* Compute R = u1 * P1 + u2 * P2 */
502 mbedtls_ecp_group grp;
503 mbedtls_ecp_point P1, P2, R;
504 mbedtls_mpi u1, u2;
505 uint8_t actual_result[MBEDTLS_ECP_MAX_PT_LEN];
506 size_t len;
507
508 mbedtls_ecp_group_init( &grp );
509 mbedtls_ecp_point_init( &P1 );
510 mbedtls_ecp_point_init( &P2 );
511 mbedtls_ecp_point_init( &R );
512 mbedtls_mpi_init( &u1 );
513 mbedtls_mpi_init( &u2 );
514
515 TEST_EQUAL( 0, mbedtls_ecp_group_load( &grp, id ) );
516 TEST_EQUAL( 0, mbedtls_mpi_read_binary( &u1, u1_bin->x, u1_bin->len ) );
517 TEST_EQUAL( 0, mbedtls_mpi_read_binary( &u2, u2_bin->x, u2_bin->len ) );
518 TEST_EQUAL( 0, mbedtls_ecp_point_read_binary( &grp, &P1,
519 P1_bin->x, P1_bin->len ) );
520 TEST_EQUAL( 0, mbedtls_ecp_point_read_binary( &grp, &P2,
521 P2_bin->x, P2_bin->len ) );
522
523 TEST_EQUAL( 0, mbedtls_ecp_muladd( &grp, &R, &u1, &P1, &u2, &P2 ) );
524 TEST_EQUAL( 0, mbedtls_ecp_point_write_binary(
525 &grp, &R, MBEDTLS_ECP_PF_UNCOMPRESSED,
526 &len, actual_result, sizeof( actual_result ) ) );
Gilles Peskine814d0122021-05-31 21:44:25 +0200527 TEST_ASSERT( len <= MBEDTLS_ECP_MAX_PT_LEN );
Gilles Peskineca91ee42021-04-03 18:31:01 +0200528
529 ASSERT_COMPARE( expected_result->x, expected_result->len,
530 actual_result, len );
531
532exit:
533 mbedtls_ecp_group_free( &grp );
534 mbedtls_ecp_point_free( &P1 );
535 mbedtls_ecp_point_free( &P2 );
536 mbedtls_ecp_point_free( &R );
537 mbedtls_mpi_free( &u1 );
538 mbedtls_mpi_free( &u2 );
539}
540/* END_CASE */
541
Jonas923d5792020-05-13 14:22:45 +0900542/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100543void ecp_fast_mod( int id, char * N_str )
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100544{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200545 mbedtls_ecp_group grp;
546 mbedtls_mpi N, R;
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100547
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200548 mbedtls_mpi_init( &N ); mbedtls_mpi_init( &R );
549 mbedtls_ecp_group_init( &grp );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100550
Werner Lewis19b4cd82022-07-07 11:02:27 +0100551 TEST_ASSERT( mbedtls_test_read_mpi( &N, N_str ) == 0 );
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200552 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde783f062013-10-21 14:52:21 +0200553 TEST_ASSERT( grp.modp != NULL );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100554
555 /*
556 * Store correct result before we touch N
557 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200558 TEST_ASSERT( mbedtls_mpi_mod_mpi( &R, &N, &grp.P ) == 0 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100559
560 TEST_ASSERT( grp.modp( &N ) == 0 );
Manuel Pégourié-Gonnardc0696c22015-06-18 16:47:17 +0200561 TEST_ASSERT( mbedtls_mpi_bitlen( &N ) <= grp.pbits + 3 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100562
563 /*
Paul Bakkerd8b0c5e2014-04-11 15:31:33 +0200564 * Use mod rather than addition/subtraction in case previous test fails
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100565 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200566 TEST_ASSERT( mbedtls_mpi_mod_mpi( &N, &N, &grp.P ) == 0 );
567 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &N, &R ) == 0 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100568
Paul Bakkerbd51b262014-07-10 15:26:12 +0200569exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200570 mbedtls_mpi_free( &N ); mbedtls_mpi_free( &R );
571 mbedtls_ecp_group_free( &grp );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100572}
Paul Bakker33b43f12013-08-20 11:48:36 +0200573/* END_CASE */
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100574
Paul Bakker33b43f12013-08-20 11:48:36 +0200575/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100576void ecp_write_binary( int id, char * x, char * y, char * z, int format,
Azim Khan5fcca462018-06-29 11:05:32 +0100577 data_t * out, int blen, int ret )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100578{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200579 mbedtls_ecp_group grp;
580 mbedtls_ecp_point P;
Azim Khanf1aaec92017-05-30 14:23:15 +0100581 unsigned char buf[256];
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100582 size_t olen;
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100583
584 memset( buf, 0, sizeof( buf ) );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100585
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200586 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100587
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200588 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100589
Werner Lewis19b4cd82022-07-07 11:02:27 +0100590 TEST_ASSERT( mbedtls_test_read_mpi( &P.X, x ) == 0 );
591 TEST_ASSERT( mbedtls_test_read_mpi( &P.Y, y ) == 0 );
592 TEST_ASSERT( mbedtls_test_read_mpi( &P.Z, z ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100593
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200594 TEST_ASSERT( mbedtls_ecp_point_write_binary( &grp, &P, format,
Paul Bakker33b43f12013-08-20 11:48:36 +0200595 &olen, buf, blen ) == ret );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100596
Paul Bakker33b43f12013-08-20 11:48:36 +0200597 if( ret == 0 )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100598 {
Gilles Peskine814d0122021-05-31 21:44:25 +0200599 TEST_ASSERT( olen <= MBEDTLS_ECP_MAX_PT_LEN );
Ronald Cronde70b162020-06-10 11:03:08 +0200600 TEST_ASSERT( mbedtls_test_hexcmp( buf, out->x, olen, out->len ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100601 }
602
Paul Bakkerbd51b262014-07-10 15:26:12 +0200603exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200604 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100605}
Paul Bakker33b43f12013-08-20 11:48:36 +0200606/* END_CASE */
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100607
Paul Bakker33b43f12013-08-20 11:48:36 +0200608/* BEGIN_CASE */
Azim Khan5fcca462018-06-29 11:05:32 +0100609void ecp_read_binary( int id, data_t * buf, char * x, char * y, char * z,
Paul Bakker33b43f12013-08-20 11:48:36 +0200610 int ret )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100611{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200612 mbedtls_ecp_group grp;
613 mbedtls_ecp_point P;
614 mbedtls_mpi X, Y, Z;
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100615
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100616
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200617 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
618 mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100619
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200620 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100621
Werner Lewis19b4cd82022-07-07 11:02:27 +0100622 TEST_ASSERT( mbedtls_test_read_mpi( &X, x ) == 0 );
623 TEST_ASSERT( mbedtls_test_read_mpi( &Y, y ) == 0 );
624 TEST_ASSERT( mbedtls_test_read_mpi( &Z, z ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100625
Azim Khand30ca132017-06-09 04:32:58 +0100626 TEST_ASSERT( mbedtls_ecp_point_read_binary( &grp, &P, buf->x, buf->len ) == ret );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100627
Paul Bakker33b43f12013-08-20 11:48:36 +0200628 if( ret == 0 )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100629 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200630 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 );
Janos Follathdf9295b2019-02-26 12:36:52 +0000631 if( mbedtls_ecp_get_type( &grp ) == MBEDTLS_ECP_TYPE_MONTGOMERY )
Janos Follath59b813c2019-02-13 10:44:06 +0000632 {
633 TEST_ASSERT( mbedtls_mpi_cmp_int( &Y, 0 ) == 0 );
634 TEST_ASSERT( P.Y.p == NULL );
635 TEST_ASSERT( mbedtls_mpi_cmp_int( &Z, 1 ) == 0 );
636 TEST_ASSERT( mbedtls_mpi_cmp_int( &P.Z, 1 ) == 0 );
637 }
638 else
639 {
640 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 );
641 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 );
642 }
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100643 }
644
Paul Bakkerbd51b262014-07-10 15:26:12 +0200645exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200646 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
647 mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100648}
Paul Bakker33b43f12013-08-20 11:48:36 +0200649/* END_CASE */
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100650
Paul Bakker33b43f12013-08-20 11:48:36 +0200651/* BEGIN_CASE */
Azim Khan5fcca462018-06-29 11:05:32 +0100652void mbedtls_ecp_tls_read_point( int id, data_t * buf, char * x, char * y,
Azim Khand30ca132017-06-09 04:32:58 +0100653 char * z, int ret )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100654{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200655 mbedtls_ecp_group grp;
656 mbedtls_ecp_point P;
657 mbedtls_mpi X, Y, Z;
Azim Khand30ca132017-06-09 04:32:58 +0100658 const unsigned char *vbuf = buf->x;
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100659
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100660
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200661 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
662 mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100663
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200664 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100665
Werner Lewis19b4cd82022-07-07 11:02:27 +0100666 TEST_ASSERT( mbedtls_test_read_mpi( &X, x ) == 0 );
667 TEST_ASSERT( mbedtls_test_read_mpi( &Y, y ) == 0 );
668 TEST_ASSERT( mbedtls_test_read_mpi( &Z, z ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100669
Azim Khand30ca132017-06-09 04:32:58 +0100670 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &P, &vbuf, buf->len ) == ret );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100671
Paul Bakker33b43f12013-08-20 11:48:36 +0200672 if( ret == 0 )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100673 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200674 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 );
675 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 );
676 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 );
Azim Khand30ca132017-06-09 04:32:58 +0100677 TEST_ASSERT( (uint32_t)( vbuf - buf->x ) == buf->len );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100678 }
679
Paul Bakkerbd51b262014-07-10 15:26:12 +0200680exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200681 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
682 mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100683}
Paul Bakker33b43f12013-08-20 11:48:36 +0200684/* END_CASE */
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100685
Paul Bakker33b43f12013-08-20 11:48:36 +0200686/* BEGIN_CASE */
687void ecp_tls_write_read_point( int id )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100688{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200689 mbedtls_ecp_group grp;
690 mbedtls_ecp_point pt;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100691 unsigned char buf[256];
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100692 const unsigned char *vbuf;
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100693 size_t olen;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100694
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200695 mbedtls_ecp_group_init( &grp );
696 mbedtls_ecp_point_init( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100697
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200698 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100699
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100700 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200701 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G,
702 MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
703 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen )
704 == MBEDTLS_ERR_ECP_FEATURE_UNAVAILABLE );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100705 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100706
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100707 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200708 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G,
709 MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
710 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
711 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.X, &pt.X ) == 0 );
712 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Y, &pt.Y ) == 0 );
713 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Z, &pt.Z ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100714 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100715
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100716 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200717 TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 );
718 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt,
719 MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
720 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
721 TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100722 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100723
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100724 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200725 TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 );
726 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt,
727 MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
728 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
729 TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100730 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100731
Paul Bakkerbd51b262014-07-10 15:26:12 +0200732exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200733 mbedtls_ecp_group_free( &grp );
734 mbedtls_ecp_point_free( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100735}
Paul Bakker33b43f12013-08-20 11:48:36 +0200736/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100737
Paul Bakker33b43f12013-08-20 11:48:36 +0200738/* BEGIN_CASE */
Azim Khan5fcca462018-06-29 11:05:32 +0100739void mbedtls_ecp_tls_read_group( data_t * buf, int result, int bits,
Azim Khand30ca132017-06-09 04:32:58 +0100740 int record_len )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100741{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200742 mbedtls_ecp_group grp;
Azim Khand30ca132017-06-09 04:32:58 +0100743 const unsigned char *vbuf = buf->x;
Azim Khanf1aaec92017-05-30 14:23:15 +0100744 int ret;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100745
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200746 mbedtls_ecp_group_init( &grp );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100747
Azim Khand30ca132017-06-09 04:32:58 +0100748 ret = mbedtls_ecp_tls_read_group( &grp, &vbuf, buf->len );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100749
Paul Bakker33b43f12013-08-20 11:48:36 +0200750 TEST_ASSERT( ret == result );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100751 if( ret == 0)
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100752 {
Manuel Pégourié-Gonnardc0696c22015-06-18 16:47:17 +0200753 TEST_ASSERT( mbedtls_mpi_bitlen( &grp.P ) == (size_t) bits );
Azim Khand30ca132017-06-09 04:32:58 +0100754 TEST_ASSERT( vbuf - buf->x == record_len);
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100755 }
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100756
Paul Bakkerbd51b262014-07-10 15:26:12 +0200757exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200758 mbedtls_ecp_group_free( &grp );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100759}
Paul Bakker33b43f12013-08-20 11:48:36 +0200760/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100761
Paul Bakker33b43f12013-08-20 11:48:36 +0200762/* BEGIN_CASE */
763void ecp_tls_write_read_group( int id )
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100764{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200765 mbedtls_ecp_group grp1, grp2;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100766 unsigned char buf[10];
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100767 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100768 size_t len;
769 int ret;
770
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200771 mbedtls_ecp_group_init( &grp1 );
772 mbedtls_ecp_group_init( &grp2 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100773 memset( buf, 0x00, sizeof( buf ) );
774
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200775 TEST_ASSERT( mbedtls_ecp_group_load( &grp1, id ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100776
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200777 TEST_ASSERT( mbedtls_ecp_tls_write_group( &grp1, &len, buf, 10 ) == 0 );
778 ret = mbedtls_ecp_tls_read_group( &grp2, &vbuf, len );
Paul Bakker94b916c2014-04-17 16:07:20 +0200779 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100780
781 if( ret == 0 )
782 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200783 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp1.N, &grp2.N ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100784 TEST_ASSERT( grp1.id == grp2.id );
785 }
786
Paul Bakkerbd51b262014-07-10 15:26:12 +0200787exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200788 mbedtls_ecp_group_free( &grp1 );
789 mbedtls_ecp_group_free( &grp2 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100790}
Paul Bakker33b43f12013-08-20 11:48:36 +0200791/* END_CASE */
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100792
Werner Lewise54046c2022-08-15 11:43:56 +0100793/* BEGIN_CASE depends_on:MBEDTLS_ECDH_C:MBEDTLS_ECDSA_C */
794void mbedtls_ecp_group_metadata( int id, int bit_size, int crv_type,
795 char* P, char* A, char* B,
796 char* G_x, char* G_y, char* N,
797 int tls_id )
798{
799 mbedtls_ecp_group grp, grp_read, grp_cpy;
800 const mbedtls_ecp_group_id *g_id;
801 const mbedtls_ecp_curve_info *crv, *crv_tls_id, *crv_name;
802
803 mbedtls_mpi exp_P, exp_A, exp_B, exp_G_x, exp_G_y, exp_N;
804
805 unsigned char buf[3], ecparameters[3] = { 3, 0, tls_id };
806 const unsigned char *vbuf = buf;
807 size_t olen;
808
809 mbedtls_ecp_group_init( &grp );
810 mbedtls_ecp_group_init( &grp_read );
811 mbedtls_ecp_group_init( &grp_cpy );
812
813 mbedtls_mpi_init( &exp_P );
814 mbedtls_mpi_init( &exp_A );
815 mbedtls_mpi_init( &exp_B );
816 mbedtls_mpi_init( &exp_G_x );
817 mbedtls_mpi_init( &exp_G_y );
818 mbedtls_mpi_init( &exp_N );
819
820 // Read expected parameters
821 TEST_EQUAL( mbedtls_test_read_mpi( &exp_P, P ), 0 );
822 TEST_EQUAL( mbedtls_test_read_mpi( &exp_A, A ), 0 );
823 TEST_EQUAL( mbedtls_test_read_mpi( &exp_G_x, G_x ), 0 );
824 TEST_EQUAL( mbedtls_test_read_mpi( &exp_N, N ), 0 );
825 TEST_EQUAL( mbedtls_test_read_mpi( &exp_B, B ), 0 );
826 TEST_EQUAL( mbedtls_test_read_mpi( &exp_G_y, G_y ), 0 );
827
828 // Load group
829 TEST_EQUAL( mbedtls_ecp_group_load( &grp, id ), 0 );
830
831 // Compare group with expected parameters
832 // A is NULL for SECPxxxR1 curves
833 // B and G_y are NULL for curve25519 and curve448
834 TEST_EQUAL( mbedtls_mpi_cmp_mpi( &exp_P, &grp.P ), 0 );
835 if( *A != 0 )
836 TEST_EQUAL( mbedtls_mpi_cmp_mpi( &exp_A, &grp.A ), 0 );
837 if( *B != 0 )
838 TEST_EQUAL( mbedtls_mpi_cmp_mpi( &exp_B, &grp.B ), 0 );
839 TEST_EQUAL( mbedtls_mpi_cmp_mpi( &exp_G_x, &grp.G.X ), 0 );
840 if( *G_y != 0 )
841 TEST_EQUAL( mbedtls_mpi_cmp_mpi( &exp_G_y, &grp.G.Y ), 0 );
842 TEST_EQUAL( mbedtls_mpi_cmp_mpi( &exp_N, &grp.N ), 0 );
843
844 // Load curve info and compare with known values
845 crv = mbedtls_ecp_curve_info_from_grp_id( id );
846 TEST_EQUAL( crv->grp_id, id );
847 TEST_EQUAL( crv->bit_size, bit_size );
848 TEST_EQUAL( crv->tls_id, tls_id );
849
850 // Load curve from TLS ID and name, and compare IDs
851 crv_tls_id = mbedtls_ecp_curve_info_from_tls_id( crv->tls_id );
852 crv_name = mbedtls_ecp_curve_info_from_name( crv->name );
853 TEST_EQUAL( crv_tls_id->grp_id, id );
854 TEST_EQUAL( crv_name->grp_id, id );
855
856 // Validate write_group against test data, read result
857 TEST_EQUAL( mbedtls_ecp_tls_write_group( &grp, &olen,
858 buf, sizeof( buf ) ),
859 0 );
860 TEST_EQUAL( mbedtls_test_hexcmp( buf, ecparameters, olen,
861 sizeof( ecparameters ) ),
862 0 );
863 TEST_EQUAL( mbedtls_ecp_tls_read_group( &grp_read, &vbuf, olen ),
864 0 );
865 TEST_EQUAL( grp_read.id, id );
866
867 // Check curve type, and if it can be used for ECDH/ECDSA
868 TEST_EQUAL( mbedtls_ecp_get_type( &grp ), crv_type );
869 TEST_EQUAL( mbedtls_ecdh_can_do( id ), 1 );
870 TEST_EQUAL( mbedtls_ecdsa_can_do( id ),
871 crv_type == MBEDTLS_ECP_TYPE_SHORT_WEIERSTRASS );
872
873 // Copy group and compare with original
874 TEST_EQUAL( mbedtls_ecp_group_copy( &grp_cpy, &grp ), 0 );
875 TEST_EQUAL( mbedtls_ecp_group_cmp( &grp, &grp_cpy ), 0 );
876
877 // Check curve is in curve list and group ID list
878 for( crv = mbedtls_ecp_curve_list( );
879 crv->grp_id != MBEDTLS_ECP_DP_NONE &&
880 crv->grp_id != (unsigned) id;
881 crv++ );
882 TEST_EQUAL( crv->grp_id, id );
883 for( g_id = mbedtls_ecp_grp_id_list( );
884 *g_id != MBEDTLS_ECP_DP_NONE && *g_id != (unsigned) id;
885 g_id++ );
886 TEST_EQUAL( *g_id, (unsigned) id );
887
888exit:
889 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_group_free( &grp_cpy );
890 mbedtls_ecp_group_free( &grp_read );
891 mbedtls_mpi_free( &exp_P ); mbedtls_mpi_free( &exp_A );
892 mbedtls_mpi_free( &exp_B ); mbedtls_mpi_free( &exp_G_x );
893 mbedtls_mpi_free( &exp_G_y ); mbedtls_mpi_free( &exp_N );
894}
895/* END_CASE */
896
Paul Bakker33b43f12013-08-20 11:48:36 +0200897/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100898void mbedtls_ecp_check_privkey( int id, char * key_hex, int ret )
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200899{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200900 mbedtls_ecp_group grp;
901 mbedtls_mpi d;
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200902
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200903 mbedtls_ecp_group_init( &grp );
904 mbedtls_mpi_init( &d );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200905
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200906 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Werner Lewis19b4cd82022-07-07 11:02:27 +0100907 TEST_ASSERT( mbedtls_test_read_mpi( &d, key_hex ) == 0 );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200908
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200909 TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == ret );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200910
Paul Bakkerbd51b262014-07-10 15:26:12 +0200911exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200912 mbedtls_ecp_group_free( &grp );
913 mbedtls_mpi_free( &d );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200914}
Paul Bakker33b43f12013-08-20 11:48:36 +0200915/* END_CASE */
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200916
Paul Bakker33b43f12013-08-20 11:48:36 +0200917/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100918void mbedtls_ecp_check_pub_priv( int id_pub, char * Qx_pub, char * Qy_pub,
919 int id, char * d, char * Qx, char * Qy,
920 int ret )
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100921{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200922 mbedtls_ecp_keypair pub, prv;
Manuel Pégourié-Gonnardf8c24bf2021-06-15 11:29:26 +0200923 mbedtls_test_rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100924
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200925 mbedtls_ecp_keypair_init( &pub );
926 mbedtls_ecp_keypair_init( &prv );
Manuel Pégourié-Gonnardf8c24bf2021-06-15 11:29:26 +0200927 memset( &rnd_info, 0x00, sizeof( mbedtls_test_rnd_pseudo_info ) );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100928
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200929 if( id_pub != MBEDTLS_ECP_DP_NONE )
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200930 TEST_ASSERT( mbedtls_ecp_group_load( &pub.grp, id_pub ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200931 TEST_ASSERT( mbedtls_ecp_point_read_string( &pub.Q, 16, Qx_pub, Qy_pub ) == 0 );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100932
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200933 if( id != MBEDTLS_ECP_DP_NONE )
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200934 TEST_ASSERT( mbedtls_ecp_group_load( &prv.grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200935 TEST_ASSERT( mbedtls_ecp_point_read_string( &prv.Q, 16, Qx, Qy ) == 0 );
Werner Lewis19b4cd82022-07-07 11:02:27 +0100936 TEST_ASSERT( mbedtls_test_read_mpi( &prv.d, d ) == 0 );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100937
Manuel Pégourié-Gonnardf8c24bf2021-06-15 11:29:26 +0200938 TEST_ASSERT( mbedtls_ecp_check_pub_priv( &pub, &prv,
939 &mbedtls_test_rnd_pseudo_rand, &rnd_info ) == ret );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100940
941exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200942 mbedtls_ecp_keypair_free( &pub );
943 mbedtls_ecp_keypair_free( &prv );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100944}
945/* END_CASE */
946
947/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200948void mbedtls_ecp_gen_keypair( int id )
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100949{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200950 mbedtls_ecp_group grp;
951 mbedtls_ecp_point Q;
952 mbedtls_mpi d;
Ronald Cron351f0ee2020-06-10 12:12:18 +0200953 mbedtls_test_rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100954
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200955 mbedtls_ecp_group_init( &grp );
956 mbedtls_ecp_point_init( &Q );
957 mbedtls_mpi_init( &d );
Ronald Cron351f0ee2020-06-10 12:12:18 +0200958 memset( &rnd_info, 0x00, sizeof( mbedtls_test_rnd_pseudo_info ) );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100959
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200960 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100961
Ronald Cron6c5bd7f2020-06-10 14:08:26 +0200962 TEST_ASSERT( mbedtls_ecp_gen_keypair( &grp, &d, &Q,
963 &mbedtls_test_rnd_pseudo_rand,
964 &rnd_info ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100965
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200966 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &Q ) == 0 );
967 TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100968
Paul Bakkerbd51b262014-07-10 15:26:12 +0200969exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200970 mbedtls_ecp_group_free( &grp );
971 mbedtls_ecp_point_free( &Q );
972 mbedtls_mpi_free( &d );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100973}
Paul Bakker33b43f12013-08-20 11:48:36 +0200974/* END_CASE */
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100975
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100976/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200977void mbedtls_ecp_gen_key( int id )
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100978{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200979 mbedtls_ecp_keypair key;
Ronald Cron351f0ee2020-06-10 12:12:18 +0200980 mbedtls_test_rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100981
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200982 mbedtls_ecp_keypair_init( &key );
Ronald Cron351f0ee2020-06-10 12:12:18 +0200983 memset( &rnd_info, 0x00, sizeof( mbedtls_test_rnd_pseudo_info ) );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100984
Ronald Cron6c5bd7f2020-06-10 14:08:26 +0200985 TEST_ASSERT( mbedtls_ecp_gen_key( id, &key,
986 &mbedtls_test_rnd_pseudo_rand,
987 &rnd_info ) == 0 );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100988
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200989 TEST_ASSERT( mbedtls_ecp_check_pubkey( &key.grp, &key.Q ) == 0 );
990 TEST_ASSERT( mbedtls_ecp_check_privkey( &key.grp, &key.d ) == 0 );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100991
Paul Bakkerbd51b262014-07-10 15:26:12 +0200992exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200993 mbedtls_ecp_keypair_free( &key );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100994}
995/* END_CASE */
996
Janos Follath171a7ef2019-02-15 16:17:45 +0000997/* BEGIN_CASE */
Steven Cooremande8593f2020-06-09 19:55:26 +0200998void mbedtls_ecp_read_key( int grp_id, data_t* in_key, int expected, int canonical )
Janos Follath171a7ef2019-02-15 16:17:45 +0000999{
1000 int ret = 0;
1001 mbedtls_ecp_keypair key;
Steven Cooremande8593f2020-06-09 19:55:26 +02001002 mbedtls_ecp_keypair key2;
Janos Follath171a7ef2019-02-15 16:17:45 +00001003
1004 mbedtls_ecp_keypair_init( &key );
Steven Cooremande8593f2020-06-09 19:55:26 +02001005 mbedtls_ecp_keypair_init( &key2 );
Janos Follath171a7ef2019-02-15 16:17:45 +00001006
1007 ret = mbedtls_ecp_read_key( grp_id, &key, in_key->x, in_key->len );
1008 TEST_ASSERT( ret == expected );
1009
1010 if( expected == 0 )
1011 {
1012 ret = mbedtls_ecp_check_privkey( &key.grp, &key.d );
1013 TEST_ASSERT( ret == 0 );
Steven Cooremande8593f2020-06-09 19:55:26 +02001014
1015 if( canonical )
1016 {
1017 unsigned char buf[MBEDTLS_ECP_MAX_BYTES];
Steven Cooremande8593f2020-06-09 19:55:26 +02001018
Steven Cooreman0024df62020-07-13 10:59:40 +02001019 ret = mbedtls_ecp_write_key( &key, buf, in_key->len );
Steven Cooremande8593f2020-06-09 19:55:26 +02001020 TEST_ASSERT( ret == 0 );
1021
Steven Cooremande8593f2020-06-09 19:55:26 +02001022 ASSERT_COMPARE( in_key->x, in_key->len,
Steven Cooremanc9b7f782020-06-11 17:00:36 +02001023 buf, in_key->len );
Steven Cooremande8593f2020-06-09 19:55:26 +02001024 }
1025 else
1026 {
1027 unsigned char export1[MBEDTLS_ECP_MAX_BYTES];
Steven Cooremande8593f2020-06-09 19:55:26 +02001028 unsigned char export2[MBEDTLS_ECP_MAX_BYTES];
Steven Cooremande8593f2020-06-09 19:55:26 +02001029
Steven Cooreman0024df62020-07-13 10:59:40 +02001030 ret = mbedtls_ecp_write_key( &key, export1, in_key->len );
Steven Cooremande8593f2020-06-09 19:55:26 +02001031 TEST_ASSERT( ret == 0 );
1032
1033 ret = mbedtls_ecp_read_key( grp_id, &key2, export1, in_key->len );
1034 TEST_ASSERT( ret == expected );
1035
Steven Cooreman0024df62020-07-13 10:59:40 +02001036 ret = mbedtls_ecp_write_key( &key2, export2, in_key->len );
Steven Cooremande8593f2020-06-09 19:55:26 +02001037 TEST_ASSERT( ret == 0 );
1038
Steven Cooremanc9b7f782020-06-11 17:00:36 +02001039 ASSERT_COMPARE( export1, in_key->len,
1040 export2, in_key->len );
Steven Cooremande8593f2020-06-09 19:55:26 +02001041 }
Janos Follath171a7ef2019-02-15 16:17:45 +00001042 }
1043
1044exit:
1045 mbedtls_ecp_keypair_free( &key );
Steven Cooremande8593f2020-06-09 19:55:26 +02001046 mbedtls_ecp_keypair_free( &key2 );
Janos Follath171a7ef2019-02-15 16:17:45 +00001047}
1048/* END_CASE */
1049
Gilles Peskine618be2e2021-04-03 21:47:53 +02001050/* BEGIN_CASE depends_on:HAVE_FIX_NEGATIVE */
1051void fix_negative( data_t *N_bin, int c, int bits )
1052{
1053 mbedtls_mpi C, M, N;
1054
1055 mbedtls_mpi_init( &C );
1056 mbedtls_mpi_init( &M );
1057 mbedtls_mpi_init( &N );
1058
Gilles Peskine392d1012021-04-09 15:46:51 +02001059 /* C = - c * 2^bits (positive since c is negative) */
Gilles Peskine618be2e2021-04-03 21:47:53 +02001060 TEST_EQUAL( 0, mbedtls_mpi_lset( &C, -c ) );
1061 TEST_EQUAL( 0, mbedtls_mpi_shift_l( &C, bits ) );
1062
1063 TEST_EQUAL( 0, mbedtls_mpi_read_binary( &N, N_bin->x, N_bin->len ) );
1064 TEST_EQUAL( 0, mbedtls_mpi_grow( &N, C.n ) );
1065
Gilles Peskine392d1012021-04-09 15:46:51 +02001066 /* M = N - C = - ( C - N ) (expected result of fix_negative) */
Gilles Peskine618be2e2021-04-03 21:47:53 +02001067 TEST_EQUAL( 0, mbedtls_mpi_sub_mpi( &M, &N, &C ) );
1068
1069 mbedtls_ecp_fix_negative( &N, c, bits );
1070
1071 TEST_EQUAL( 0, mbedtls_mpi_cmp_mpi( &N, &M ) );
1072
1073exit:
1074 mbedtls_mpi_free( &C );
1075 mbedtls_mpi_free( &M );
1076 mbedtls_mpi_free( &N );
1077}
1078/* END_CASE */
1079
Gilles Peskine6ff8a012021-03-24 12:01:02 +01001080/* BEGIN_CASE depends_on:MBEDTLS_TEST_HOOKS:MBEDTLS_ECP_MONTGOMERY_ENABLED */
1081void genkey_mx_known_answer( int bits, data_t *seed, data_t *expected )
1082{
1083 mbedtls_test_rnd_buf_info rnd_info;
1084 mbedtls_mpi d;
1085 int ret;
1086 uint8_t *actual = NULL;
1087
1088 mbedtls_mpi_init( &d );
1089 rnd_info.buf = seed->x;
1090 rnd_info.length = seed->len;
1091 rnd_info.fallback_f_rng = NULL;
1092 rnd_info.fallback_p_rng = NULL;
1093
1094 ASSERT_ALLOC( actual, expected->len );
1095
1096 ret = mbedtls_ecp_gen_privkey_mx( bits, &d,
1097 mbedtls_test_rnd_buffer_rand, &rnd_info );
1098
1099 if( expected->len == 0 )
1100 {
1101 /* Expecting an error (happens if there isn't enough randomness) */
1102 TEST_ASSERT( ret != 0 );
1103 }
1104 else
1105 {
1106 TEST_EQUAL( ret, 0 );
1107 TEST_EQUAL( (size_t) bits + 1, mbedtls_mpi_bitlen( &d ) );
1108 TEST_EQUAL( 0, mbedtls_mpi_write_binary( &d, actual, expected->len ) );
1109 /* Test the exact result. This assumes that the output of the
1110 * RNG is used in a specific way, which is overly constraining.
1111 * The advantage is that it's easier to test the expected properties
1112 * of the generated key:
1113 * - The most significant bit must be at a specific positions
1114 * (can be enforced by checking the bit-length).
1115 * - The least significant bits must have specific values
1116 * (can be enforced by checking these bits).
1117 * - Other bits must be random (by testing with different RNG outputs,
1118 * we validate that those bits are indeed influenced by the RNG). */
1119 ASSERT_COMPARE( expected->x, expected->len,
1120 actual, expected->len );
1121 }
1122
1123exit:
1124 mbedtls_free( actual );
1125 mbedtls_mpi_free( &d );
1126}
1127/* END_CASE */
1128
Werner Lewis3b097392022-08-08 11:53:45 +01001129/* BEGIN_CASE */
1130void ecp_set_zero( int id, data_t * P_bin )
1131{
1132 mbedtls_ecp_group grp;
1133 mbedtls_ecp_point pt, zero_pt, nonzero_pt;
1134
1135 mbedtls_ecp_group_init( &grp );
1136 mbedtls_ecp_point_init( &pt );
1137 mbedtls_ecp_point_init( &zero_pt );
1138 mbedtls_ecp_point_init( &nonzero_pt );
1139
1140 // Set zero and non-zero points for comparison
1141 TEST_EQUAL( mbedtls_ecp_set_zero( &zero_pt ), 0 );
1142 TEST_EQUAL( mbedtls_ecp_group_load( &grp, id ), 0 );
1143 TEST_EQUAL( mbedtls_ecp_point_read_binary( &grp, &nonzero_pt,
1144 P_bin->x, P_bin->len ), 0 );
1145 TEST_EQUAL( mbedtls_ecp_is_zero( &zero_pt ), 1 );
1146 TEST_EQUAL( mbedtls_ecp_is_zero( &nonzero_pt ), 0 );
1147
1148 // Test initialized point
1149 TEST_EQUAL( mbedtls_ecp_set_zero( &pt ), 0 );
1150 TEST_EQUAL( mbedtls_ecp_is_zero( &pt ), 1 );
1151 TEST_EQUAL( mbedtls_ecp_point_cmp( &zero_pt, &pt ), 0 );
1152 TEST_EQUAL( mbedtls_ecp_point_cmp( &nonzero_pt, &zero_pt ),
1153 MBEDTLS_ERR_ECP_BAD_INPUT_DATA );
1154
1155 // Test zeroed point
1156 TEST_EQUAL( mbedtls_ecp_set_zero( &pt ), 0 );
1157 TEST_EQUAL( mbedtls_ecp_is_zero( &pt ), 1 );
1158 TEST_EQUAL( mbedtls_ecp_point_cmp( &zero_pt, &pt ), 0 );
1159 TEST_EQUAL( mbedtls_ecp_point_cmp( &nonzero_pt, &pt ),
1160 MBEDTLS_ERR_ECP_BAD_INPUT_DATA );
1161
1162 // Set point to non-zero value
1163 TEST_EQUAL( mbedtls_ecp_point_read_binary( &grp, &pt,
1164 P_bin->x, P_bin->len ), 0 );
1165 TEST_EQUAL( mbedtls_ecp_is_zero( &pt ), 0 );
1166 TEST_EQUAL( mbedtls_ecp_point_cmp( &zero_pt, &pt ),
1167 MBEDTLS_ERR_ECP_BAD_INPUT_DATA );
1168 TEST_EQUAL( mbedtls_ecp_point_cmp( &nonzero_pt, &pt), 0 );
1169
1170 // Test non-zero point
1171 TEST_EQUAL( mbedtls_ecp_set_zero( &pt ), 0 );
1172 TEST_EQUAL( mbedtls_ecp_is_zero( &pt ), 1 );
1173 TEST_EQUAL( mbedtls_ecp_point_cmp( &zero_pt, &pt ), 0 );
1174 TEST_EQUAL( mbedtls_ecp_point_cmp( &nonzero_pt, &pt ),
1175 MBEDTLS_ERR_ECP_BAD_INPUT_DATA );
1176
1177 // Test freed non-zero point
1178 TEST_EQUAL( mbedtls_ecp_point_read_binary( &grp, &pt,
1179 P_bin->x, P_bin->len ), 0 );
1180 mbedtls_ecp_point_free( &pt );
1181 TEST_EQUAL( mbedtls_ecp_set_zero( &pt ), 0 );
1182 TEST_EQUAL( mbedtls_ecp_is_zero( &pt ), 1 );
1183 TEST_EQUAL( mbedtls_ecp_point_cmp( &zero_pt, &pt ), 0 );
1184 TEST_EQUAL( mbedtls_ecp_point_cmp( &nonzero_pt, &pt),
1185 MBEDTLS_ERR_ECP_BAD_INPUT_DATA );
1186
1187exit:
1188 mbedtls_ecp_group_free( &grp );
1189 mbedtls_ecp_point_free( &pt );
1190 mbedtls_ecp_point_free( &zero_pt );
1191 mbedtls_ecp_point_free( &nonzero_pt );
1192}
1193/* END_CASE */
1194
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001195/* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST */
Azim Khanf1aaec92017-05-30 14:23:15 +01001196void ecp_selftest( )
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +01001197{
Andres AG93012e82016-09-09 09:10:28 +01001198 TEST_ASSERT( mbedtls_ecp_self_test( 1 ) == 0 );
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +01001199}
Paul Bakker33b43f12013-08-20 11:48:36 +02001200/* END_CASE */
Przemek Stekiel4b30feb2022-03-18 13:58:26 +01001201
1202/* BEGIN_CASE */
1203void ecp_export( int id, char * Qx, char * Qy,char * d, int expected_ret, int invalid_grp )
1204{
1205 mbedtls_ecp_keypair key;
1206 mbedtls_ecp_group export_grp;
1207 mbedtls_mpi export_d;
1208 mbedtls_ecp_point export_Q;
1209
1210 mbedtls_ecp_group_init( &export_grp );
1211 mbedtls_ecp_group_init( &key.grp );
1212 mbedtls_mpi_init( &export_d );
1213 mbedtls_ecp_point_init( &export_Q );
1214
1215 mbedtls_ecp_keypair_init( &key );
1216 if( invalid_grp == 0 )
1217 TEST_ASSERT( mbedtls_ecp_group_load( &key.grp, id ) == 0 );
1218 TEST_ASSERT( mbedtls_ecp_point_read_string( &key.Q, 16, Qx, Qy ) == 0 );
Werner Lewis19b4cd82022-07-07 11:02:27 +01001219 TEST_ASSERT( mbedtls_test_read_mpi( &key.d, d ) == 0 );
Przemek Stekiel4b30feb2022-03-18 13:58:26 +01001220
1221 TEST_EQUAL( mbedtls_ecp_export( &key, &export_grp,
1222 &export_d, &export_Q ), expected_ret );
1223
1224 if( expected_ret == 0 )
1225 {
1226 TEST_EQUAL( mbedtls_ecp_point_cmp( &key.Q, &export_Q ), 0 );
1227 TEST_EQUAL( mbedtls_mpi_cmp_mpi( &key.d, &export_d ), 0 );
1228 TEST_EQUAL( mbedtls_ecp_group_cmp( &key.grp, &export_grp ), 0 );
1229 }
1230
1231exit:
1232 mbedtls_ecp_keypair_free( &key );
1233 mbedtls_ecp_group_free( &export_grp );
1234 mbedtls_mpi_free( &export_d );
1235 mbedtls_ecp_point_free( &export_Q );
1236}
1237/* END_CASE */
Dave Rodgman57080462022-06-17 13:41:18 +01001238
1239/* BEGIN_CASE */
1240void ecp_check_order( int id, char * expected_order_hex )
1241{
1242 mbedtls_ecp_group grp;
1243 mbedtls_mpi expected_n;
1244
1245 mbedtls_ecp_group_init( &grp );
1246 mbedtls_mpi_init( &expected_n );
1247
1248 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Werner Lewis19b4cd82022-07-07 11:02:27 +01001249 TEST_ASSERT( mbedtls_test_read_mpi( &expected_n, expected_order_hex ) == 0);
Dave Rodgman57080462022-06-17 13:41:18 +01001250
1251 // check sign bits are well-formed (i.e. 1 or -1) - see #5810
1252 TEST_ASSERT( grp.N.s == -1 || grp.N.s == 1);
1253 TEST_ASSERT( expected_n.s == -1 || expected_n.s == 1);
Dave Rodgman5cab9da2022-06-17 13:48:29 +01001254
Dave Rodgman57080462022-06-17 13:41:18 +01001255 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.N, &expected_n ) == 0 );
1256
1257exit:
1258 mbedtls_ecp_group_free( &grp );
1259 mbedtls_mpi_free( &expected_n );
1260}
Dave Rodgmaneb8570f2022-06-17 14:59:36 +01001261/* END_CASE */