blob: 0b2e0299151644208178f43dacec0344b79e293c [file] [log] [blame]
Paul Bakker33b43f12013-08-20 11:48:36 +02001/* BEGIN_HEADER */
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +00002#include "mbedtls/ecp.h"
Paul Bakkerdbd443d2013-08-16 13:38:47 +02003
Manuel Pégourié-Gonnard6c7af4c2015-04-03 16:41:52 +02004#define ECP_PF_UNKNOWN -1
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +02005
6#define ECP_PT_RESET( x ) \
7 mbedtls_ecp_point_free( x ); \
8 mbedtls_ecp_point_init( x );
Paul Bakker33b43f12013-08-20 11:48:36 +02009/* END_HEADER */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010010
Paul Bakker33b43f12013-08-20 11:48:36 +020011/* BEGIN_DEPENDENCIES
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020012 * depends_on:MBEDTLS_ECP_C
Paul Bakker33b43f12013-08-20 11:48:36 +020013 * END_DEPENDENCIES
14 */
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +010015
Hanno Becker57b684f2018-12-18 12:50:02 +000016/* BEGIN_CASE */
17void ecp_valid_param( )
18{
Hanno Becker807c1072018-12-18 23:45:14 +000019 TEST_VALID_PARAM( mbedtls_ecp_group_free( NULL ) );
Hanno Becker57b684f2018-12-18 12:50:02 +000020 TEST_VALID_PARAM( mbedtls_ecp_keypair_free( NULL ) );
21 TEST_VALID_PARAM( mbedtls_ecp_point_free( NULL ) );
22
23#if defined(MBEDTLS_ECP_RESTARTABLE)
24 TEST_VALID_PARAM( mbedtls_ecp_restart_free( NULL ) );
25#endif /* MBEDTLS_ECP_RESTARTABLE */
26
27exit:
28 return;
29}
30/* END_CASE */
31
Hanno Becker12dff032018-12-14 15:08:13 +000032/* BEGIN_CASE depends_on:MBEDTLS_CHECK_PARAMS:!MBEDTLS_PARAM_FAILED_ALT */
33void ecp_invalid_param( )
34{
35 mbedtls_ecp_group grp;
36 mbedtls_ecp_keypair kp;
37 mbedtls_ecp_point P;
38 mbedtls_mpi m;
39 const char *x = "deadbeef";
40 int valid_fmt = MBEDTLS_ECP_PF_UNCOMPRESSED;
41 int invalid_fmt = 42;
42 size_t olen;
43 unsigned char buf[42] = { 0 };
44 const unsigned char *null_buf = NULL;
45 mbedtls_ecp_group_id valid_group = MBEDTLS_ECP_DP_SECP192R1;
Andrzej Kureked68b312019-02-11 03:44:29 -050046#if defined(MBEDTLS_ECP_RESTARTABLE)
Hanno Becker0a4fa9b2018-12-18 23:45:29 +000047 mbedtls_ecp_restart_ctx restart_ctx;
Andrzej Kureked68b312019-02-11 03:44:29 -050048#endif /* MBEDTLS_ECP_RESTARTABLE */
Hanno Becker12dff032018-12-14 15:08:13 +000049
50 TEST_INVALID_PARAM( mbedtls_ecp_point_init( NULL ) );
51 TEST_INVALID_PARAM( mbedtls_ecp_keypair_init( NULL ) );
Hanno Becker807c1072018-12-18 23:45:14 +000052 TEST_INVALID_PARAM( mbedtls_ecp_group_init( NULL ) );
Hanno Becker12dff032018-12-14 15:08:13 +000053
Hanno Becker12dff032018-12-14 15:08:13 +000054#if defined(MBEDTLS_ECP_RESTARTABLE)
55 TEST_INVALID_PARAM( mbedtls_ecp_restart_init( NULL ) );
Hanno Becker0a4fa9b2018-12-18 23:45:29 +000056 TEST_INVALID_PARAM( mbedtls_ecp_check_budget( NULL, &restart_ctx, 42 ) );
Hanno Becker12dff032018-12-14 15:08:13 +000057#endif /* MBEDTLS_ECP_RESTARTABLE */
58
59 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
60 mbedtls_ecp_copy( NULL, &P ) );
61 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
62 mbedtls_ecp_copy( &P, NULL ) );
63
64 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
65 mbedtls_ecp_group_copy( NULL, &grp ) );
66 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
67 mbedtls_ecp_group_copy( &grp, NULL ) );
68
69 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
Hanno Becker549e4552018-12-18 23:45:43 +000070 mbedtls_ecp_gen_privkey( NULL,
71 &m,
72 rnd_std_rand,
73 NULL ) );
74 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
75 mbedtls_ecp_gen_privkey( &grp,
76 NULL,
77 rnd_std_rand,
78 NULL ) );
79 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
80 mbedtls_ecp_gen_privkey( &grp,
81 &m,
82 NULL,
83 NULL ) );
84
85 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
Hanno Becker12dff032018-12-14 15:08:13 +000086 mbedtls_ecp_set_zero( NULL ) );
87 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
88 mbedtls_ecp_is_zero( NULL ) );
89
90 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
91 mbedtls_ecp_point_cmp( NULL, &P ) );
92 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
93 mbedtls_ecp_point_cmp( &P, NULL ) );
94
95 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
96 mbedtls_ecp_point_read_string( NULL, 2,
97 x, x ) );
98 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
99 mbedtls_ecp_point_read_string( &P, 2,
100 NULL, x ) );
101 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
102 mbedtls_ecp_point_read_string( &P, 2,
103 x, NULL ) );
104
105 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
106 mbedtls_ecp_point_write_binary( NULL, &P,
107 valid_fmt,
108 &olen,
109 buf, sizeof( buf ) ) );
110 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
111 mbedtls_ecp_point_write_binary( &grp, NULL,
112 valid_fmt,
113 &olen,
114 buf, sizeof( buf ) ) );
115 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
116 mbedtls_ecp_point_write_binary( &grp, &P,
117 invalid_fmt,
118 &olen,
119 buf, sizeof( buf ) ) );
120 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
121 mbedtls_ecp_point_write_binary( &grp, &P,
122 valid_fmt,
123 NULL,
124 buf, sizeof( buf ) ) );
125 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
126 mbedtls_ecp_point_write_binary( &grp, &P,
127 valid_fmt,
128 &olen,
129 NULL, sizeof( buf ) ) );
130
131 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
132 mbedtls_ecp_point_read_binary( NULL, &P, buf,
133 sizeof( buf ) ) );
134 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
135 mbedtls_ecp_point_read_binary( &grp, NULL, buf,
136 sizeof( buf ) ) );
137 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
138 mbedtls_ecp_point_read_binary( &grp, &P, NULL,
139 sizeof( buf ) ) );
140
141 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
142 mbedtls_ecp_tls_read_point( NULL, &P,
143 (const unsigned char **) &buf,
144 sizeof( buf ) ) );
145 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
146 mbedtls_ecp_tls_read_point( &grp, NULL,
147 (const unsigned char **) &buf,
148 sizeof( buf ) ) );
149 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
150 mbedtls_ecp_tls_read_point( &grp, &P, &null_buf,
151 sizeof( buf ) ) );
152 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
153 mbedtls_ecp_tls_read_point( &grp, &P, NULL,
154 sizeof( buf ) ) );
155
156 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
157 mbedtls_ecp_tls_write_point( NULL, &P,
158 valid_fmt,
159 &olen,
160 buf,
161 sizeof( buf ) ) );
162 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
163 mbedtls_ecp_tls_write_point( &grp, NULL,
164 valid_fmt,
165 &olen,
166 buf,
167 sizeof( buf ) ) );
168 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
169 mbedtls_ecp_tls_write_point( &grp, &P,
170 invalid_fmt,
171 &olen,
172 buf,
173 sizeof( buf ) ) );
174 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
175 mbedtls_ecp_tls_write_point( &grp, &P,
176 valid_fmt,
177 NULL,
178 buf,
179 sizeof( buf ) ) );
180 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
181 mbedtls_ecp_tls_write_point( &grp, &P,
182 valid_fmt,
183 &olen,
184 NULL,
185 sizeof( buf ) ) );
186
187 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
188 mbedtls_ecp_group_load( NULL, valid_group ) );
189
190 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
191 mbedtls_ecp_tls_read_group( NULL,
192 (const unsigned char **) &buf,
193 sizeof( buf ) ) );
194 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
195 mbedtls_ecp_tls_read_group( &grp, NULL,
196 sizeof( buf ) ) );
197 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
198 mbedtls_ecp_tls_read_group( &grp, &null_buf,
199 sizeof( buf ) ) );
200
201 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
202 mbedtls_ecp_tls_read_group_id( NULL,
203 (const unsigned char **) &buf,
204 sizeof( buf ) ) );
205 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
206 mbedtls_ecp_tls_read_group_id( &valid_group, NULL,
207 sizeof( buf ) ) );
208 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
209 mbedtls_ecp_tls_read_group_id( &valid_group,
210 &null_buf,
211 sizeof( buf ) ) );
212
213 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
214 mbedtls_ecp_tls_write_group( NULL, &olen,
215 buf, sizeof( buf ) ) );
216 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
217 mbedtls_ecp_tls_write_group( &grp, NULL,
218 buf, sizeof( buf ) ) );
219 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
220 mbedtls_ecp_tls_write_group( &grp, &olen,
221 NULL, sizeof( buf ) ) );
222
223 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
224 mbedtls_ecp_mul( NULL, &P, &m, &P,
225 rnd_std_rand, NULL ) );
226 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
227 mbedtls_ecp_mul( &grp, NULL, &m, &P,
228 rnd_std_rand, NULL ) );
229 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
230 mbedtls_ecp_mul( &grp, &P, NULL, &P,
231 rnd_std_rand, NULL ) );
232 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
233 mbedtls_ecp_mul( &grp, &P, &m, NULL,
234 rnd_std_rand, NULL ) );
235
236 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
237 mbedtls_ecp_mul_restartable( NULL, &P, &m, &P,
238 rnd_std_rand, NULL , NULL ) );
239 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
240 mbedtls_ecp_mul_restartable( &grp, NULL, &m, &P,
241 rnd_std_rand, NULL , NULL ) );
242 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
243 mbedtls_ecp_mul_restartable( &grp, &P, NULL, &P,
244 rnd_std_rand, NULL , NULL ) );
245 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
246 mbedtls_ecp_mul_restartable( &grp, &P, &m, NULL,
247 rnd_std_rand, NULL , NULL ) );
248
249 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
250 mbedtls_ecp_muladd( NULL, &P, &m, &P,
251 &m, &P ) );
252 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
253 mbedtls_ecp_muladd( &grp, NULL, &m, &P,
254 &m, &P ) );
255 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
256 mbedtls_ecp_muladd( &grp, &P, NULL, &P,
257 &m, &P ) );
258 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
259 mbedtls_ecp_muladd( &grp, &P, &m, NULL,
260 &m, &P ) );
261 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
262 mbedtls_ecp_muladd( &grp, &P, &m, &P,
263 NULL, &P ) );
264 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
265 mbedtls_ecp_muladd( &grp, &P, &m, &P,
266 &m, NULL ) );
267
268 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
269 mbedtls_ecp_muladd_restartable( NULL, &P, &m, &P,
270 &m, &P, NULL ) );
271 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
272 mbedtls_ecp_muladd_restartable( &grp, NULL, &m, &P,
273 &m, &P, NULL ) );
274 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
275 mbedtls_ecp_muladd_restartable( &grp, &P, NULL, &P,
276 &m, &P, NULL ) );
277 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
278 mbedtls_ecp_muladd_restartable( &grp, &P, &m, NULL,
279 &m, &P, NULL ) );
280 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
281 mbedtls_ecp_muladd_restartable( &grp, &P, &m, &P,
282 NULL, &P, NULL ) );
283 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
284 mbedtls_ecp_muladd_restartable( &grp, &P, &m, &P,
285 &m, NULL, NULL ) );
286
287 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
288 mbedtls_ecp_check_pubkey( NULL, &P ) );
289 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
290 mbedtls_ecp_check_pubkey( &grp, NULL ) );
291
292 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
Hanno Becker19595352018-12-18 23:54:04 +0000293 mbedtls_ecp_check_pub_priv( NULL, &kp ) );
294 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
295 mbedtls_ecp_check_pub_priv( &kp, NULL ) );
296
297 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
Hanno Becker12dff032018-12-14 15:08:13 +0000298 mbedtls_ecp_check_privkey( NULL, &m ) );
299 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
300 mbedtls_ecp_check_privkey( &grp, NULL ) );
301
302 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
303 mbedtls_ecp_gen_keypair_base( NULL, &P,
304 &m, &P,
305 rnd_std_rand,
306 NULL ) );
307 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
308 mbedtls_ecp_gen_keypair_base( &grp, NULL,
309 &m, &P,
310 rnd_std_rand,
311 NULL ) );
312 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
313 mbedtls_ecp_gen_keypair_base( &grp, &P,
314 NULL, &P,
315 rnd_std_rand,
316 NULL ) );
317 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
318 mbedtls_ecp_gen_keypair_base( &grp, &P,
319 &m, NULL,
320 rnd_std_rand,
321 NULL ) );
322 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
323 mbedtls_ecp_gen_keypair_base( &grp, &P,
324 &m, &P,
325 NULL,
326 NULL ) );
327
328 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
329 mbedtls_ecp_gen_keypair( NULL,
330 &m, &P,
331 rnd_std_rand,
332 NULL ) );
333 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
334 mbedtls_ecp_gen_keypair( &grp,
335 NULL, &P,
336 rnd_std_rand,
337 NULL ) );
338 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
339 mbedtls_ecp_gen_keypair( &grp,
340 &m, NULL,
341 rnd_std_rand,
342 NULL ) );
343 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
344 mbedtls_ecp_gen_keypair( &grp,
345 &m, &P,
346 NULL,
347 NULL ) );
348
349 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
350 mbedtls_ecp_gen_key( valid_group, NULL,
351 rnd_std_rand, NULL ) );
352 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
353 mbedtls_ecp_gen_key( valid_group, &kp,
354 NULL, NULL ) );
355
356exit:
357 return;
358}
359/* END_CASE */
360
Paul Bakker33b43f12013-08-20 11:48:36 +0200361/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100362void mbedtls_ecp_curve_info( int id, int tls_id, int size, char * name )
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +0100363{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200364 const mbedtls_ecp_curve_info *by_id, *by_tls, *by_name;
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +0100365
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200366 by_id = mbedtls_ecp_curve_info_from_grp_id( id );
367 by_tls = mbedtls_ecp_curve_info_from_tls_id( tls_id );
368 by_name = mbedtls_ecp_curve_info_from_name( name );
Paul Bakker94b916c2014-04-17 16:07:20 +0200369 TEST_ASSERT( by_id != NULL );
370 TEST_ASSERT( by_tls != NULL );
371 TEST_ASSERT( by_name != NULL );
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +0100372
373 TEST_ASSERT( by_id == by_tls );
374 TEST_ASSERT( by_id == by_name );
375
Manuel Pégourié-Gonnard797f48a2015-06-18 15:45:05 +0200376 TEST_ASSERT( by_id->bit_size == size );
Manuel Pégourié-Gonnard0267e3d2013-11-30 15:10:14 +0100377}
378/* END_CASE */
379
380/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100381void ecp_check_pub( int grp_id, char * x_hex, char * y_hex, char * z_hex,
382 int ret )
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100383{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200384 mbedtls_ecp_group grp;
385 mbedtls_ecp_point P;
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100386
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200387 mbedtls_ecp_group_init( &grp );
388 mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100389
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200390 TEST_ASSERT( mbedtls_ecp_group_load( &grp, grp_id ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100391
Janos Follath28fff142017-01-27 15:51:14 +0000392 TEST_ASSERT( mbedtls_mpi_read_string( &P.X, 16, x_hex ) == 0 );
393 TEST_ASSERT( mbedtls_mpi_read_string( &P.Y, 16, y_hex ) == 0 );
394 TEST_ASSERT( mbedtls_mpi_read_string( &P.Z, 16, z_hex ) == 0 );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100395
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200396 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &P ) == ret );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100397
Paul Bakkerbd51b262014-07-10 15:26:12 +0200398exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200399 mbedtls_ecp_group_free( &grp );
400 mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100401}
402/* END_CASE */
403
Manuel Pégourié-Gonnard4b9c51e2017-04-20 15:50:26 +0200404/* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE */
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100405void ecp_test_vect_restart( int id,
406 char *dA_str, char *xA_str, char *yA_str,
407 char *dB_str, char *xZ_str, char *yZ_str,
408 int max_ops, int min_restarts, int max_restarts )
409{
410 /*
411 * Test for early restart. Based on test vectors like ecp_test_vect(),
412 * but for the sake of simplicity only does half of each side. It's
413 * important to test both base point and random point, though, as memory
414 * management is different in each case.
415 *
416 * Don't try using too precise bounds for restarts as the exact number
417 * will depend on settings such as MBEDTLS_ECP_FIXED_POINT_OPTIM and
418 * MBEDTLS_ECP_WINDOW_SIZE, as well as implementation details that may
419 * change in the future. A factor 2 is a minimum safety margin.
420 *
421 * For reference, with mbed TLS 2.4 and default settings, for P-256:
Manuel Pégourié-Gonnard9c5c78f2017-03-20 14:13:07 +0100422 * - Random point mult: ~3250M
423 * - Cold base point mult: ~3300M
424 * - Hot base point mult: ~1100M
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100425 * With MBEDTLS_ECP_WINDOW_SIZE set to 2 (minimum):
Manuel Pégourié-Gonnard9c5c78f2017-03-20 14:13:07 +0100426 * - Random point mult: ~3850M
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100427 */
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +0200428 mbedtls_ecp_restart_ctx ctx;
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100429 mbedtls_ecp_group grp;
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200430 mbedtls_ecp_point R, P;
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100431 mbedtls_mpi dA, xA, yA, dB, xZ, yZ;
432 int cnt_restarts;
433 int ret;
434
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +0200435 mbedtls_ecp_restart_init( &ctx );
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200436 mbedtls_ecp_group_init( &grp );
437 mbedtls_ecp_point_init( &R ); mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100438 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); mbedtls_mpi_init( &yA );
439 mbedtls_mpi_init( &dB ); mbedtls_mpi_init( &xZ ); mbedtls_mpi_init( &yZ );
440
441 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
442
443 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_str ) == 0 );
444 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_str ) == 0 );
445 TEST_ASSERT( mbedtls_mpi_read_string( &yA, 16, yA_str ) == 0 );
446
447 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_str ) == 0 );
448 TEST_ASSERT( mbedtls_mpi_read_string( &xZ, 16, xZ_str ) == 0 );
449 TEST_ASSERT( mbedtls_mpi_read_string( &yZ, 16, yZ_str ) == 0 );
450
451 mbedtls_ecp_set_max_ops( (unsigned) max_ops );
452
453 /* Base point case */
454 cnt_restarts = 0;
455 do {
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200456 ECP_PT_RESET( &R );
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +0200457 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dA, &grp.G, NULL, NULL, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200458 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100459
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200460 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100461 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
462 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yA ) == 0 );
463
464 TEST_ASSERT( cnt_restarts >= min_restarts );
465 TEST_ASSERT( cnt_restarts <= max_restarts );
466
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100467 /* Non-base point case */
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200468 mbedtls_ecp_copy( &P, &R );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100469 cnt_restarts = 0;
470 do {
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200471 ECP_PT_RESET( &R );
472 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dB, &P, NULL, NULL, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200473 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100474
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200475 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100476 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
477 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
478
479 TEST_ASSERT( cnt_restarts >= min_restarts );
480 TEST_ASSERT( cnt_restarts <= max_restarts );
481
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200482 /* Do we leak memory when aborting an operation?
483 * This test only makes sense when we actually restart */
484 if( min_restarts > 0 )
485 {
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200486 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dB, &P, NULL, NULL, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200487 TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
488 }
Manuel Pégourié-Gonnard77af79a2017-03-14 10:58:00 +0100489
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100490exit:
Manuel Pégourié-Gonnardb739a712017-04-19 10:11:56 +0200491 mbedtls_ecp_restart_free( &ctx );
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200492 mbedtls_ecp_group_free( &grp );
493 mbedtls_ecp_point_free( &R ); mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnard510d5ca2017-03-08 11:41:47 +0100494 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); mbedtls_mpi_free( &yA );
495 mbedtls_mpi_free( &dB ); mbedtls_mpi_free( &xZ ); mbedtls_mpi_free( &yZ );
496}
497/* END_CASE */
498
Manuel Pégourié-Gonnard4b9c51e2017-04-20 15:50:26 +0200499/* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE */
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200500void ecp_muladd_restart( int id, char *xR_str, char *yR_str,
501 char *u1_str, char *u2_str,
502 char *xQ_str, char *yQ_str,
503 int max_ops, int min_restarts, int max_restarts )
504{
505 /*
506 * Compute R = u1 * G + u2 * Q
507 * (test vectors mostly taken from ECDSA intermediate results)
508 *
509 * See comments at the top of ecp_test_vect_restart()
510 */
511 mbedtls_ecp_restart_ctx ctx;
512 mbedtls_ecp_group grp;
513 mbedtls_ecp_point R, Q;
514 mbedtls_mpi u1, u2, xR, yR;
515 int cnt_restarts;
516 int ret;
517
518 mbedtls_ecp_restart_init( &ctx );
519 mbedtls_ecp_group_init( &grp );
520 mbedtls_ecp_point_init( &R );
521 mbedtls_ecp_point_init( &Q );
522 mbedtls_mpi_init( &u1 ); mbedtls_mpi_init( &u2 );
523 mbedtls_mpi_init( &xR ); mbedtls_mpi_init( &yR );
524
525 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
526
527 TEST_ASSERT( mbedtls_mpi_read_string( &u1, 16, u1_str ) == 0 );
528 TEST_ASSERT( mbedtls_mpi_read_string( &u2, 16, u2_str ) == 0 );
529 TEST_ASSERT( mbedtls_mpi_read_string( &xR, 16, xR_str ) == 0 );
530 TEST_ASSERT( mbedtls_mpi_read_string( &yR, 16, yR_str ) == 0 );
531
532 TEST_ASSERT( mbedtls_mpi_read_string( &Q.X, 16, xQ_str ) == 0 );
533 TEST_ASSERT( mbedtls_mpi_read_string( &Q.Y, 16, yQ_str ) == 0 );
534 TEST_ASSERT( mbedtls_mpi_lset( &Q.Z, 1 ) == 0 );
535
536 mbedtls_ecp_set_max_ops( (unsigned) max_ops );
537
538 cnt_restarts = 0;
539 do {
Manuel Pégourié-Gonnard7a28e992018-10-16 11:22:45 +0200540 ECP_PT_RESET( &R );
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200541 ret = mbedtls_ecp_muladd_restartable( &grp, &R,
542 &u1, &grp.G, &u2, &Q, &ctx );
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200543 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200544
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200545 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200546 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xR ) == 0 );
547 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yR ) == 0 );
548
549 TEST_ASSERT( cnt_restarts >= min_restarts );
550 TEST_ASSERT( cnt_restarts <= max_restarts );
551
Manuel Pégourié-Gonnard46ba7f32017-08-28 12:20:39 +0200552 /* Do we leak memory when aborting an operation?
553 * This test only makes sense when we actually restart */
554 if( min_restarts > 0 )
555 {
556 ret = mbedtls_ecp_muladd_restartable( &grp, &R,
557 &u1, &grp.G, &u2, &Q, &ctx );
558 TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
559 }
Manuel Pégourié-Gonnard54dd6522017-04-20 13:36:18 +0200560
561exit:
562 mbedtls_ecp_restart_free( &ctx );
563 mbedtls_ecp_group_free( &grp );
564 mbedtls_ecp_point_free( &R );
565 mbedtls_ecp_point_free( &Q );
566 mbedtls_mpi_free( &u1 ); mbedtls_mpi_free( &u2 );
567 mbedtls_mpi_free( &xR ); mbedtls_mpi_free( &yR );
568}
569/* END_CASE */
570
Manuel Pégourié-Gonnard312d2e82013-12-04 11:08:01 +0100571/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100572void ecp_test_vect( int id, char * dA_str, char * xA_str, char * yA_str,
573 char * dB_str, char * xB_str, char * yB_str,
574 char * xZ_str, char * yZ_str )
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100575{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200576 mbedtls_ecp_group grp;
577 mbedtls_ecp_point R;
578 mbedtls_mpi dA, xA, yA, dB, xB, yB, xZ, yZ;
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200579 rnd_pseudo_info rnd_info;
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100580
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200581 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
582 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); mbedtls_mpi_init( &yA ); mbedtls_mpi_init( &dB );
583 mbedtls_mpi_init( &xB ); mbedtls_mpi_init( &yB ); mbedtls_mpi_init( &xZ ); mbedtls_mpi_init( &yZ );
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200584 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100585
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200586 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100587
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200588 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
Manuel Pégourié-Gonnard1c330572012-11-24 12:05:44 +0100589
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200590 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_str ) == 0 );
591 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_str ) == 0 );
592 TEST_ASSERT( mbedtls_mpi_read_string( &yA, 16, yA_str ) == 0 );
593 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_str ) == 0 );
594 TEST_ASSERT( mbedtls_mpi_read_string( &xB, 16, xB_str ) == 0 );
595 TEST_ASSERT( mbedtls_mpi_read_string( &yB, 16, yB_str ) == 0 );
596 TEST_ASSERT( mbedtls_mpi_read_string( &xZ, 16, xZ_str ) == 0 );
597 TEST_ASSERT( mbedtls_mpi_read_string( &yZ, 16, yZ_str ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100598
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200599 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G,
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200600 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200601 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
602 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yA ) == 0 );
603 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
604 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R, NULL, NULL ) == 0 );
605 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
606 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
607 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100608
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200609 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
610 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 );
611 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yB ) == 0 );
612 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
613 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R,
Manuel Pégourié-Gonnarde09d2f82013-09-02 14:29:09 +0200614 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200615 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
616 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
617 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
Manuel Pégourié-Gonnarde739f012012-11-07 12:24:22 +0100618
Paul Bakkerbd51b262014-07-10 15:26:12 +0200619exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200620 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
621 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); mbedtls_mpi_free( &yA ); mbedtls_mpi_free( &dB );
622 mbedtls_mpi_free( &xB ); mbedtls_mpi_free( &yB ); mbedtls_mpi_free( &xZ ); mbedtls_mpi_free( &yZ );
Manuel Pégourié-Gonnard4b8c3f22012-11-07 21:39:45 +0100623}
Paul Bakker33b43f12013-08-20 11:48:36 +0200624/* END_CASE */
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100625
Paul Bakker33b43f12013-08-20 11:48:36 +0200626/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100627void ecp_test_vec_x( int id, char * dA_hex, char * xA_hex, char * dB_hex,
628 char * xB_hex, char * xS_hex )
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100629{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200630 mbedtls_ecp_group grp;
631 mbedtls_ecp_point R;
632 mbedtls_mpi dA, xA, dB, xB, xS;
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100633 rnd_pseudo_info rnd_info;
634
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200635 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
636 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA );
637 mbedtls_mpi_init( &dB ); mbedtls_mpi_init( &xB );
638 mbedtls_mpi_init( &xS );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100639 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
640
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200641 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100642
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200643 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100644
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200645 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_hex ) == 0 );
646 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_hex ) == 0 );
647 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_hex ) == 0 );
648 TEST_ASSERT( mbedtls_mpi_read_string( &xB, 16, xB_hex ) == 0 );
649 TEST_ASSERT( mbedtls_mpi_read_string( &xS, 16, xS_hex ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100650
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200651 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G,
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100652 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200653 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
654 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100655
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200656 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R,
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100657 &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200658 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
659 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100660
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200661 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
662 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
663 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100664
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200665 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R, NULL, NULL ) == 0 );
666 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
667 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100668
Paul Bakkerbd51b262014-07-10 15:26:12 +0200669exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200670 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
671 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA );
672 mbedtls_mpi_free( &dB ); mbedtls_mpi_free( &xB );
673 mbedtls_mpi_free( &xS );
Manuel Pégourié-Gonnarda0179b82013-12-04 11:49:20 +0100674}
675/* END_CASE */
676
677/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100678void ecp_fast_mod( int id, char * N_str )
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100679{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200680 mbedtls_ecp_group grp;
681 mbedtls_mpi N, R;
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100682
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200683 mbedtls_mpi_init( &N ); mbedtls_mpi_init( &R );
684 mbedtls_ecp_group_init( &grp );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100685
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200686 TEST_ASSERT( mbedtls_mpi_read_string( &N, 16, N_str ) == 0 );
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200687 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde783f062013-10-21 14:52:21 +0200688 TEST_ASSERT( grp.modp != NULL );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100689
690 /*
691 * Store correct result before we touch N
692 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200693 TEST_ASSERT( mbedtls_mpi_mod_mpi( &R, &N, &grp.P ) == 0 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100694
695 TEST_ASSERT( grp.modp( &N ) == 0 );
Manuel Pégourié-Gonnardc0696c22015-06-18 16:47:17 +0200696 TEST_ASSERT( mbedtls_mpi_bitlen( &N ) <= grp.pbits + 3 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100697
698 /*
Paul Bakkerd8b0c5e2014-04-11 15:31:33 +0200699 * Use mod rather than addition/subtraction in case previous test fails
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100700 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200701 TEST_ASSERT( mbedtls_mpi_mod_mpi( &N, &N, &grp.P ) == 0 );
702 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &N, &R ) == 0 );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100703
Paul Bakkerbd51b262014-07-10 15:26:12 +0200704exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200705 mbedtls_mpi_free( &N ); mbedtls_mpi_free( &R );
706 mbedtls_ecp_group_free( &grp );
Manuel Pégourié-Gonnard84338242012-11-11 20:45:18 +0100707}
Paul Bakker33b43f12013-08-20 11:48:36 +0200708/* END_CASE */
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +0100709
Paul Bakker33b43f12013-08-20 11:48:36 +0200710/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100711void ecp_write_binary( int id, char * x, char * y, char * z, int format,
Azim Khan5fcca462018-06-29 11:05:32 +0100712 data_t * out, int blen, int ret )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100713{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200714 mbedtls_ecp_group grp;
715 mbedtls_ecp_point P;
Azim Khanf1aaec92017-05-30 14:23:15 +0100716 unsigned char buf[256];
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100717 size_t olen;
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100718
719 memset( buf, 0, sizeof( buf ) );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100720
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200721 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100722
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200723 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100724
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200725 TEST_ASSERT( mbedtls_mpi_read_string( &P.X, 16, x ) == 0 );
726 TEST_ASSERT( mbedtls_mpi_read_string( &P.Y, 16, y ) == 0 );
727 TEST_ASSERT( mbedtls_mpi_read_string( &P.Z, 16, z ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100728
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200729 TEST_ASSERT( mbedtls_ecp_point_write_binary( &grp, &P, format,
Paul Bakker33b43f12013-08-20 11:48:36 +0200730 &olen, buf, blen ) == ret );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100731
Paul Bakker33b43f12013-08-20 11:48:36 +0200732 if( ret == 0 )
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100733 {
Azim Khand30ca132017-06-09 04:32:58 +0100734 TEST_ASSERT( hexcmp( buf, out->x, olen, out->len ) == 0 );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100735 }
736
Paul Bakkerbd51b262014-07-10 15:26:12 +0200737exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200738 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100739}
Paul Bakker33b43f12013-08-20 11:48:36 +0200740/* END_CASE */
Manuel Pégourié-Gonnarde19feb52012-11-24 14:10:14 +0100741
Paul Bakker33b43f12013-08-20 11:48:36 +0200742/* BEGIN_CASE */
Azim Khan5fcca462018-06-29 11:05:32 +0100743void ecp_read_binary( int id, data_t * buf, char * x, char * y, char * z,
Paul Bakker33b43f12013-08-20 11:48:36 +0200744 int ret )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100745{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200746 mbedtls_ecp_group grp;
747 mbedtls_ecp_point P;
748 mbedtls_mpi X, Y, Z;
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100749
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100750
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200751 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
752 mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100753
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200754 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100755
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200756 TEST_ASSERT( mbedtls_mpi_read_string( &X, 16, x ) == 0 );
757 TEST_ASSERT( mbedtls_mpi_read_string( &Y, 16, y ) == 0 );
758 TEST_ASSERT( mbedtls_mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100759
Azim Khand30ca132017-06-09 04:32:58 +0100760 TEST_ASSERT( mbedtls_ecp_point_read_binary( &grp, &P, buf->x, buf->len ) == ret );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100761
Paul Bakker33b43f12013-08-20 11:48:36 +0200762 if( ret == 0 )
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100763 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200764 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 );
765 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 );
766 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100767 }
768
Paul Bakkerbd51b262014-07-10 15:26:12 +0200769exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200770 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
771 mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z );
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100772}
Paul Bakker33b43f12013-08-20 11:48:36 +0200773/* END_CASE */
Manuel Pégourié-Gonnard5e402d82012-11-24 16:19:42 +0100774
Paul Bakker33b43f12013-08-20 11:48:36 +0200775/* BEGIN_CASE */
Azim Khan5fcca462018-06-29 11:05:32 +0100776void mbedtls_ecp_tls_read_point( int id, data_t * buf, char * x, char * y,
Azim Khand30ca132017-06-09 04:32:58 +0100777 char * z, int ret )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100778{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200779 mbedtls_ecp_group grp;
780 mbedtls_ecp_point P;
781 mbedtls_mpi X, Y, Z;
Azim Khand30ca132017-06-09 04:32:58 +0100782 const unsigned char *vbuf = buf->x;
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100783
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100784
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200785 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
786 mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100787
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200788 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100789
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200790 TEST_ASSERT( mbedtls_mpi_read_string( &X, 16, x ) == 0 );
791 TEST_ASSERT( mbedtls_mpi_read_string( &Y, 16, y ) == 0 );
792 TEST_ASSERT( mbedtls_mpi_read_string( &Z, 16, z ) == 0 );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100793
Azim Khand30ca132017-06-09 04:32:58 +0100794 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &P, &vbuf, buf->len ) == ret );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100795
Paul Bakker33b43f12013-08-20 11:48:36 +0200796 if( ret == 0 )
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100797 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200798 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 );
799 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 );
800 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 );
Azim Khand30ca132017-06-09 04:32:58 +0100801 TEST_ASSERT( (uint32_t)( vbuf - buf->x ) == buf->len );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100802 }
803
Paul Bakkerbd51b262014-07-10 15:26:12 +0200804exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200805 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
806 mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z );
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100807}
Paul Bakker33b43f12013-08-20 11:48:36 +0200808/* END_CASE */
Manuel Pégourié-Gonnard8c16f962013-02-10 13:00:20 +0100809
Paul Bakker33b43f12013-08-20 11:48:36 +0200810/* BEGIN_CASE */
811void ecp_tls_write_read_point( int id )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100812{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200813 mbedtls_ecp_group grp;
814 mbedtls_ecp_point pt;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100815 unsigned char buf[256];
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100816 const unsigned char *vbuf;
Manuel Pégourié-Gonnard420f1eb2013-02-10 12:22:46 +0100817 size_t olen;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100818
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200819 mbedtls_ecp_group_init( &grp );
820 mbedtls_ecp_point_init( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100821
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200822 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100823
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100824 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200825 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G,
826 MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
827 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen )
828 == MBEDTLS_ERR_ECP_FEATURE_UNAVAILABLE );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100829 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100830
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100831 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200832 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G,
833 MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
834 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
835 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.X, &pt.X ) == 0 );
836 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Y, &pt.Y ) == 0 );
837 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Z, &pt.Z ) == 0 );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100838 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100839
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100840 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200841 TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 );
842 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt,
843 MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
844 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
845 TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100846 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100847
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100848 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200849 TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 );
850 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt,
851 MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
852 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
853 TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) );
Manuel Pégourié-Gonnard98f51812013-02-10 13:38:29 +0100854 TEST_ASSERT( vbuf == buf + olen );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100855
Paul Bakkerbd51b262014-07-10 15:26:12 +0200856exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200857 mbedtls_ecp_group_free( &grp );
858 mbedtls_ecp_point_free( &pt );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100859}
Paul Bakker33b43f12013-08-20 11:48:36 +0200860/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100861
Paul Bakker33b43f12013-08-20 11:48:36 +0200862/* BEGIN_CASE */
Azim Khan5fcca462018-06-29 11:05:32 +0100863void mbedtls_ecp_tls_read_group( data_t * buf, int result, int bits,
Azim Khand30ca132017-06-09 04:32:58 +0100864 int record_len )
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100865{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200866 mbedtls_ecp_group grp;
Azim Khand30ca132017-06-09 04:32:58 +0100867 const unsigned char *vbuf = buf->x;
Azim Khanf1aaec92017-05-30 14:23:15 +0100868 int ret;
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100869
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200870 mbedtls_ecp_group_init( &grp );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100871
Azim Khand30ca132017-06-09 04:32:58 +0100872 ret = mbedtls_ecp_tls_read_group( &grp, &vbuf, buf->len );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100873
Paul Bakker33b43f12013-08-20 11:48:36 +0200874 TEST_ASSERT( ret == result );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100875 if( ret == 0)
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100876 {
Manuel Pégourié-Gonnardc0696c22015-06-18 16:47:17 +0200877 TEST_ASSERT( mbedtls_mpi_bitlen( &grp.P ) == (size_t) bits );
Azim Khand30ca132017-06-09 04:32:58 +0100878 TEST_ASSERT( vbuf - buf->x == record_len);
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100879 }
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100880
Paul Bakkerbd51b262014-07-10 15:26:12 +0200881exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200882 mbedtls_ecp_group_free( &grp );
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100883}
Paul Bakker33b43f12013-08-20 11:48:36 +0200884/* END_CASE */
Manuel Pégourié-Gonnard6282aca2013-02-10 11:15:11 +0100885
Paul Bakker33b43f12013-08-20 11:48:36 +0200886/* BEGIN_CASE */
887void ecp_tls_write_read_group( int id )
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100888{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200889 mbedtls_ecp_group grp1, grp2;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100890 unsigned char buf[10];
Manuel Pégourié-Gonnard7c145c62013-02-10 13:20:52 +0100891 const unsigned char *vbuf = buf;
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100892 size_t len;
893 int ret;
894
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200895 mbedtls_ecp_group_init( &grp1 );
896 mbedtls_ecp_group_init( &grp2 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100897 memset( buf, 0x00, sizeof( buf ) );
898
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200899 TEST_ASSERT( mbedtls_ecp_group_load( &grp1, id ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100900
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200901 TEST_ASSERT( mbedtls_ecp_tls_write_group( &grp1, &len, buf, 10 ) == 0 );
902 ret = mbedtls_ecp_tls_read_group( &grp2, &vbuf, len );
Paul Bakker94b916c2014-04-17 16:07:20 +0200903 TEST_ASSERT( ret == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100904
905 if( ret == 0 )
906 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200907 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp1.N, &grp2.N ) == 0 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100908 TEST_ASSERT( grp1.id == grp2.id );
909 }
910
Paul Bakkerbd51b262014-07-10 15:26:12 +0200911exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200912 mbedtls_ecp_group_free( &grp1 );
913 mbedtls_ecp_group_free( &grp2 );
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100914}
Paul Bakker33b43f12013-08-20 11:48:36 +0200915/* END_CASE */
Manuel Pégourié-Gonnard46106a92013-02-10 12:51:17 +0100916
Paul Bakker33b43f12013-08-20 11:48:36 +0200917/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100918void mbedtls_ecp_check_privkey( int id, char * key_hex, int ret )
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200919{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200920 mbedtls_ecp_group grp;
921 mbedtls_mpi d;
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200922
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200923 mbedtls_ecp_group_init( &grp );
924 mbedtls_mpi_init( &d );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200925
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200926 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200927 TEST_ASSERT( mbedtls_mpi_read_string( &d, 16, key_hex ) == 0 );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200928
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200929 TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == ret );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200930
Paul Bakkerbd51b262014-07-10 15:26:12 +0200931exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200932 mbedtls_ecp_group_free( &grp );
933 mbedtls_mpi_free( &d );
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200934}
Paul Bakker33b43f12013-08-20 11:48:36 +0200935/* END_CASE */
Manuel Pégourié-Gonnardc8dc2952013-07-01 14:06:13 +0200936
Paul Bakker33b43f12013-08-20 11:48:36 +0200937/* BEGIN_CASE */
Azim Khanf1aaec92017-05-30 14:23:15 +0100938void mbedtls_ecp_check_pub_priv( int id_pub, char * Qx_pub, char * Qy_pub,
939 int id, char * d, char * Qx, char * Qy,
940 int ret )
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100941{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200942 mbedtls_ecp_keypair pub, prv;
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100943
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200944 mbedtls_ecp_keypair_init( &pub );
945 mbedtls_ecp_keypair_init( &prv );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100946
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200947 if( id_pub != MBEDTLS_ECP_DP_NONE )
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200948 TEST_ASSERT( mbedtls_ecp_group_load( &pub.grp, id_pub ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200949 TEST_ASSERT( mbedtls_ecp_point_read_string( &pub.Q, 16, Qx_pub, Qy_pub ) == 0 );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100950
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200951 if( id != MBEDTLS_ECP_DP_NONE )
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200952 TEST_ASSERT( mbedtls_ecp_group_load( &prv.grp, id ) == 0 );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200953 TEST_ASSERT( mbedtls_ecp_point_read_string( &prv.Q, 16, Qx, Qy ) == 0 );
954 TEST_ASSERT( mbedtls_mpi_read_string( &prv.d, 16, d ) == 0 );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100955
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200956 TEST_ASSERT( mbedtls_ecp_check_pub_priv( &pub, &prv ) == ret );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100957
958exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200959 mbedtls_ecp_keypair_free( &pub );
960 mbedtls_ecp_keypair_free( &prv );
Manuel Pégourié-Gonnard30668d62014-11-06 15:25:32 +0100961}
962/* END_CASE */
963
964/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200965void mbedtls_ecp_gen_keypair( int id )
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100966{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200967 mbedtls_ecp_group grp;
968 mbedtls_ecp_point Q;
969 mbedtls_mpi d;
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100970 rnd_pseudo_info rnd_info;
971
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200972 mbedtls_ecp_group_init( &grp );
973 mbedtls_ecp_point_init( &Q );
974 mbedtls_mpi_init( &d );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100975 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
976
Manuel Pégourié-Gonnarde3a062b2015-05-11 18:46:47 +0200977 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100978
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200979 TEST_ASSERT( mbedtls_ecp_gen_keypair( &grp, &d, &Q, &rnd_pseudo_rand, &rnd_info )
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100980 == 0 );
981
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200982 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &Q ) == 0 );
983 TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == 0 );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100984
Paul Bakkerbd51b262014-07-10 15:26:12 +0200985exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200986 mbedtls_ecp_group_free( &grp );
987 mbedtls_ecp_point_free( &Q );
988 mbedtls_mpi_free( &d );
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100989}
Paul Bakker33b43f12013-08-20 11:48:36 +0200990/* END_CASE */
Manuel Pégourié-Gonnard45a035a2013-01-26 14:42:45 +0100991
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100992/* BEGIN_CASE */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200993void mbedtls_ecp_gen_key( int id )
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100994{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200995 mbedtls_ecp_keypair key;
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100996 rnd_pseudo_info rnd_info;
997
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200998 mbedtls_ecp_keypair_init( &key );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +0100999 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
1000
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001001 TEST_ASSERT( mbedtls_ecp_gen_key( id, &key, &rnd_pseudo_rand, &rnd_info ) == 0 );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +01001002
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001003 TEST_ASSERT( mbedtls_ecp_check_pubkey( &key.grp, &key.Q ) == 0 );
1004 TEST_ASSERT( mbedtls_ecp_check_privkey( &key.grp, &key.d ) == 0 );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +01001005
Paul Bakkerbd51b262014-07-10 15:26:12 +02001006exit:
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001007 mbedtls_ecp_keypair_free( &key );
Manuel Pégourié-Gonnard104ee1d2013-11-30 14:13:16 +01001008}
1009/* END_CASE */
1010
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001011/* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST */
Azim Khanf1aaec92017-05-30 14:23:15 +01001012void ecp_selftest( )
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +01001013{
Andres AG93012e82016-09-09 09:10:28 +01001014 TEST_ASSERT( mbedtls_ecp_self_test( 1 ) == 0 );
Manuel Pégourié-Gonnardb4a310b2012-11-13 20:57:00 +01001015}
Paul Bakker33b43f12013-08-20 11:48:36 +02001016/* END_CASE */