Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 1 | /* BEGIN_HEADER */ |
Manuel Pégourié-Gonnard | d1c7150 | 2013-01-26 19:09:07 +0100 | [diff] [blame] | 2 | #include <polarssl/ecdsa.h> |
Manuel Pégourié-Gonnard | 7446833 | 2013-10-21 13:56:40 +0200 | [diff] [blame] | 3 | #define WANT_NOT_RND_MPI |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 4 | /* END_HEADER */ |
Manuel Pégourié-Gonnard | d1c7150 | 2013-01-26 19:09:07 +0100 | [diff] [blame] | 5 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 6 | /* BEGIN_DEPENDENCIES |
Manuel Pégourié-Gonnard | a0f0747 | 2013-08-23 16:35:32 +0200 | [diff] [blame] | 7 | * depends_on:POLARSSL_ECDSA_C |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 8 | * END_DEPENDENCIES |
| 9 | */ |
Manuel Pégourié-Gonnard | d1c7150 | 2013-01-26 19:09:07 +0100 | [diff] [blame] | 10 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 11 | /* BEGIN_CASE */ |
| 12 | void ecdsa_prim_random( int id ) |
Manuel Pégourié-Gonnard | d1c7150 | 2013-01-26 19:09:07 +0100 | [diff] [blame] | 13 | { |
| 14 | ecp_group grp; |
| 15 | ecp_point Q; |
| 16 | mpi d, r, s; |
| 17 | rnd_pseudo_info rnd_info; |
| 18 | unsigned char buf[66]; |
| 19 | |
| 20 | ecp_group_init( &grp ); |
| 21 | ecp_point_init( &Q ); |
| 22 | mpi_init( &d ); mpi_init( &r ); mpi_init( &s ); |
| 23 | memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) ); |
Manuel Pégourié-Gonnard | 450a163 | 2013-01-27 09:08:18 +0100 | [diff] [blame] | 24 | memset( buf, 0, sizeof( buf ) ); |
Manuel Pégourié-Gonnard | d1c7150 | 2013-01-26 19:09:07 +0100 | [diff] [blame] | 25 | |
| 26 | /* prepare material for signature */ |
| 27 | TEST_ASSERT( rnd_pseudo_rand( &rnd_info, buf, sizeof( buf ) ) == 0 ); |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 28 | TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 ); |
Manuel Pégourié-Gonnard | d1c7150 | 2013-01-26 19:09:07 +0100 | [diff] [blame] | 29 | TEST_ASSERT( ecp_gen_keypair( &grp, &d, &Q, &rnd_pseudo_rand, &rnd_info ) |
| 30 | == 0 ); |
| 31 | |
| 32 | TEST_ASSERT( ecdsa_sign( &grp, &r, &s, &d, buf, sizeof( buf ), |
| 33 | &rnd_pseudo_rand, &rnd_info ) == 0 ); |
| 34 | TEST_ASSERT( ecdsa_verify( &grp, buf, sizeof( buf ), &Q, &r, &s ) == 0 ); |
| 35 | |
| 36 | ecp_group_free( &grp ); |
| 37 | ecp_point_free( &Q ); |
| 38 | mpi_free( &d ); mpi_free( &r ); mpi_free( &s ); |
| 39 | } |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 40 | /* END_CASE */ |
Manuel Pégourié-Gonnard | 602a897 | 2013-01-27 08:10:28 +0100 | [diff] [blame] | 41 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 42 | /* BEGIN_CASE */ |
| 43 | void ecdsa_prim_test_vectors( int id, char *d_str, char *xQ_str, char *yQ_str, |
| 44 | char *k_str, char *hash_str, char *r_str, |
| 45 | char *s_str ) |
Manuel Pégourié-Gonnard | 602a897 | 2013-01-27 08:10:28 +0100 | [diff] [blame] | 46 | { |
| 47 | ecp_group grp; |
| 48 | ecp_point Q; |
| 49 | mpi d, r, s, r_check, s_check; |
Manuel Pégourié-Gonnard | fae079e | 2014-01-06 11:00:07 +0100 | [diff] [blame^] | 50 | unsigned char hash[66], rnd_buf[66]; |
| 51 | size_t hlen; |
| 52 | rnd_buf_info rnd_info; |
Manuel Pégourié-Gonnard | 602a897 | 2013-01-27 08:10:28 +0100 | [diff] [blame] | 53 | |
| 54 | ecp_group_init( &grp ); |
| 55 | ecp_point_init( &Q ); |
| 56 | mpi_init( &d ); mpi_init( &r ); mpi_init( &s ); |
| 57 | mpi_init( &r_check ); mpi_init( &s_check ); |
Manuel Pégourié-Gonnard | fae079e | 2014-01-06 11:00:07 +0100 | [diff] [blame^] | 58 | memset( hash, 0, sizeof( hash ) ); |
| 59 | memset( rnd_buf, 0, sizeof( rnd_buf ) ); |
Manuel Pégourié-Gonnard | 602a897 | 2013-01-27 08:10:28 +0100 | [diff] [blame] | 60 | |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 61 | TEST_ASSERT( ecp_use_known_dp( &grp, id ) == 0 ); |
| 62 | TEST_ASSERT( ecp_point_read_string( &Q, 16, xQ_str, yQ_str ) == 0 ); |
| 63 | TEST_ASSERT( mpi_read_string( &d, 16, d_str ) == 0 ); |
| 64 | TEST_ASSERT( mpi_read_string( &r_check, 16, r_str ) == 0 ); |
| 65 | TEST_ASSERT( mpi_read_string( &s_check, 16, s_str ) == 0 ); |
Manuel Pégourié-Gonnard | fae079e | 2014-01-06 11:00:07 +0100 | [diff] [blame^] | 66 | hlen = unhexify(hash, hash_str); |
| 67 | rnd_info.buf = rnd_buf; |
| 68 | rnd_info.length = unhexify( rnd_buf, k_str ); |
Manuel Pégourié-Gonnard | 602a897 | 2013-01-27 08:10:28 +0100 | [diff] [blame] | 69 | |
Manuel Pégourié-Gonnard | fae079e | 2014-01-06 11:00:07 +0100 | [diff] [blame^] | 70 | /* Fix rnd_buf by shifting it left if necessary */ |
| 71 | if( grp.nbits % 8 != 0 ) |
| 72 | { |
| 73 | unsigned char shift = 8 - ( grp.nbits % 8 ); |
| 74 | size_t i; |
| 75 | |
| 76 | for( i = 0; i < rnd_info.length - 1; i++ ) |
| 77 | rnd_buf[i] = rnd_buf[i] << shift | rnd_buf[i+1] >> ( 8 - shift ); |
| 78 | |
| 79 | rnd_buf[rnd_info.length-1] <<= shift; |
| 80 | } |
| 81 | |
| 82 | TEST_ASSERT( ecdsa_sign( &grp, &r, &s, &d, hash, hlen, |
| 83 | rnd_buffer_rand, &rnd_info ) == 0 ); |
Manuel Pégourié-Gonnard | 602a897 | 2013-01-27 08:10:28 +0100 | [diff] [blame] | 84 | |
| 85 | TEST_ASSERT( mpi_cmp_mpi( &r, &r_check ) == 0 ); |
| 86 | TEST_ASSERT( mpi_cmp_mpi( &s, &s_check ) == 0 ); |
| 87 | |
Manuel Pégourié-Gonnard | fae079e | 2014-01-06 11:00:07 +0100 | [diff] [blame^] | 88 | TEST_ASSERT( ecdsa_verify( &grp, hash, hlen, &Q, &r_check, &s_check ) == 0 ); |
Manuel Pégourié-Gonnard | 602a897 | 2013-01-27 08:10:28 +0100 | [diff] [blame] | 89 | |
| 90 | ecp_group_free( &grp ); |
| 91 | ecp_point_free( &Q ); |
| 92 | mpi_free( &d ); mpi_free( &r ); mpi_free( &s ); |
| 93 | mpi_free( &r_check ); mpi_free( &s_check ); |
| 94 | } |
Paul Bakker | 33b43f1 | 2013-08-20 11:48:36 +0200 | [diff] [blame] | 95 | /* END_CASE */ |
Manuel Pégourié-Gonnard | b694b48 | 2013-08-08 13:30:57 +0200 | [diff] [blame] | 96 | |
| 97 | /* BEGIN_CASE */ |
| 98 | void ecdsa_write_read_random( int id ) |
| 99 | { |
| 100 | ecdsa_context ctx; |
| 101 | rnd_pseudo_info rnd_info; |
| 102 | unsigned char hash[66]; |
| 103 | unsigned char sig[200]; |
| 104 | size_t sig_len, i; |
| 105 | |
| 106 | ecdsa_init( &ctx ); |
| 107 | memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) ); |
| 108 | memset( hash, 0, sizeof( hash ) ); |
| 109 | memset( sig, 0x2a, sizeof( sig ) ); |
| 110 | |
| 111 | /* prepare material for signature */ |
| 112 | TEST_ASSERT( rnd_pseudo_rand( &rnd_info, hash, sizeof( hash ) ) == 0 ); |
| 113 | |
| 114 | /* generate signing key */ |
Manuel Pégourié-Gonnard | 8eebd01 | 2013-08-09 16:21:34 +0200 | [diff] [blame] | 115 | TEST_ASSERT( ecdsa_genkey( &ctx, id, &rnd_pseudo_rand, &rnd_info ) == 0 ); |
Manuel Pégourié-Gonnard | b694b48 | 2013-08-08 13:30:57 +0200 | [diff] [blame] | 116 | |
| 117 | /* generate and write signature, then read and verify it */ |
| 118 | TEST_ASSERT( ecdsa_write_signature( &ctx, hash, sizeof( hash ), |
| 119 | sig, &sig_len, &rnd_pseudo_rand, &rnd_info ) == 0 ); |
| 120 | TEST_ASSERT( ecdsa_read_signature( &ctx, hash, sizeof( hash ), |
| 121 | sig, sig_len ) == 0 ); |
| 122 | |
| 123 | /* check we didn't write past the announced length */ |
| 124 | for( i = sig_len; i < sizeof( sig ); i++ ) |
| 125 | TEST_ASSERT( sig[i] == 0x2a ); |
| 126 | |
| 127 | /* try verification with invalid length */ |
| 128 | TEST_ASSERT( ecdsa_read_signature( &ctx, hash, sizeof( hash ), |
| 129 | sig, sig_len - 1 ) != 0 ); |
| 130 | TEST_ASSERT( ecdsa_read_signature( &ctx, hash, sizeof( hash ), |
| 131 | sig, sig_len + 1 ) != 0 ); |
| 132 | |
| 133 | /* try invalid sequence tag */ |
| 134 | sig[0]++; |
| 135 | TEST_ASSERT( ecdsa_read_signature( &ctx, hash, sizeof( hash ), |
| 136 | sig, sig_len ) != 0 ); |
| 137 | sig[0]--; |
| 138 | |
| 139 | /* try modifying r */ |
| 140 | sig[10]++; |
| 141 | TEST_ASSERT( ecdsa_read_signature( &ctx, hash, sizeof( hash ), |
| 142 | sig, sig_len ) != 0 ); |
| 143 | sig[10]--; |
| 144 | |
| 145 | /* try modifying s */ |
| 146 | sig[sig_len - 1]++; |
| 147 | TEST_ASSERT( ecdsa_read_signature( &ctx, hash, sizeof( hash ), |
| 148 | sig, sig_len ) != 0 ); |
| 149 | sig[sig_len - 1]--; |
| 150 | |
| 151 | ecdsa_free( &ctx ); |
| 152 | } |
| 153 | /* END_CASE */ |