1/* BEGIN_HEADER */ 2#include "mbedtls/ecp.h" 3 4#define ECP_PF_UNKNOWN -1 5 6#define ECP_PT_RESET( x ) \ 7 mbedtls_ecp_point_free( x ); \ 8 mbedtls_ecp_point_init( x ); 9/* END_HEADER */ 10 11/* BEGIN_DEPENDENCIES 12 * depends_on:MBEDTLS_ECP_C 13 * END_DEPENDENCIES 14 */ 15 16/* BEGIN_CASE */ 17void ecp_valid_param( ) 18{ 19 TEST_VALID_PARAM( mbedtls_ecp_group_free( NULL ) ); 20 TEST_VALID_PARAM( mbedtls_ecp_keypair_free( NULL ) ); 21 TEST_VALID_PARAM( mbedtls_ecp_point_free( NULL ) ); 22 23#if defined(MBEDTLS_ECP_RESTARTABLE) 24 TEST_VALID_PARAM( mbedtls_ecp_restart_free( NULL ) ); 25#endif /* MBEDTLS_ECP_RESTARTABLE */ 26 27exit: 28 return; 29} 30/* END_CASE */ 31 32/* BEGIN_CASE depends_on:MBEDTLS_CHECK_PARAMS:!MBEDTLS_PARAM_FAILED_ALT */ 33void ecp_invalid_param( ) 34{ 35 mbedtls_ecp_group grp; 36 mbedtls_ecp_keypair kp; 37 mbedtls_ecp_point P; 38 mbedtls_mpi m; 39 const char *x = "deadbeef"; 40 int valid_fmt = MBEDTLS_ECP_PF_UNCOMPRESSED; 41 int invalid_fmt = 42; 42 size_t olen; 43 unsigned char buf[42] = { 0 }; 44 const unsigned char *null_buf = NULL; 45 mbedtls_ecp_group_id valid_group = MBEDTLS_ECP_DP_SECP192R1; 46#if defined(MBEDTLS_ECP_RESTARTABLE) 47 mbedtls_ecp_restart_ctx restart_ctx; 48#endif /* MBEDTLS_ECP_RESTARTABLE */ 49 50 TEST_INVALID_PARAM( mbedtls_ecp_point_init( NULL ) ); 51 TEST_INVALID_PARAM( mbedtls_ecp_keypair_init( NULL ) ); 52 TEST_INVALID_PARAM( mbedtls_ecp_group_init( NULL ) ); 53 54#if defined(MBEDTLS_ECP_RESTARTABLE) 55 TEST_INVALID_PARAM( mbedtls_ecp_restart_init( NULL ) ); 56 TEST_INVALID_PARAM( mbedtls_ecp_check_budget( NULL, &restart_ctx, 42 ) ); 57#endif /* MBEDTLS_ECP_RESTARTABLE */ 58 59 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 60 mbedtls_ecp_copy( NULL, &P ) ); 61 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 62 mbedtls_ecp_copy( &P, NULL ) ); 63 64 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 65 mbedtls_ecp_group_copy( NULL, &grp ) ); 66 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 67 mbedtls_ecp_group_copy( &grp, NULL ) ); 68 69 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 70 mbedtls_ecp_gen_privkey( NULL, 71 &m, 72 rnd_std_rand, 73 NULL ) ); 74 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 75 mbedtls_ecp_gen_privkey( &grp, 76 NULL, 77 rnd_std_rand, 78 NULL ) ); 79 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 80 mbedtls_ecp_gen_privkey( &grp, 81 &m, 82 NULL, 83 NULL ) ); 84 85 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 86 mbedtls_ecp_set_zero( NULL ) ); 87 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 88 mbedtls_ecp_is_zero( NULL ) ); 89 90 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 91 mbedtls_ecp_point_cmp( NULL, &P ) ); 92 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 93 mbedtls_ecp_point_cmp( &P, NULL ) ); 94 95 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 96 mbedtls_ecp_point_read_string( NULL, 2, 97 x, x ) ); 98 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 99 mbedtls_ecp_point_read_string( &P, 2, 100 NULL, x ) ); 101 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 102 mbedtls_ecp_point_read_string( &P, 2, 103 x, NULL ) ); 104 105 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 106 mbedtls_ecp_point_write_binary( NULL, &P, 107 valid_fmt, 108 &olen, 109 buf, sizeof( buf ) ) ); 110 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 111 mbedtls_ecp_point_write_binary( &grp, NULL, 112 valid_fmt, 113 &olen, 114 buf, sizeof( buf ) ) ); 115 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 116 mbedtls_ecp_point_write_binary( &grp, &P, 117 invalid_fmt, 118 &olen, 119 buf, sizeof( buf ) ) ); 120 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 121 mbedtls_ecp_point_write_binary( &grp, &P, 122 valid_fmt, 123 NULL, 124 buf, sizeof( buf ) ) ); 125 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 126 mbedtls_ecp_point_write_binary( &grp, &P, 127 valid_fmt, 128 &olen, 129 NULL, sizeof( buf ) ) ); 130 131 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 132 mbedtls_ecp_point_read_binary( NULL, &P, buf, 133 sizeof( buf ) ) ); 134 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 135 mbedtls_ecp_point_read_binary( &grp, NULL, buf, 136 sizeof( buf ) ) ); 137 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 138 mbedtls_ecp_point_read_binary( &grp, &P, NULL, 139 sizeof( buf ) ) ); 140 141 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 142 mbedtls_ecp_tls_read_point( NULL, &P, 143 (const unsigned char **) &buf, 144 sizeof( buf ) ) ); 145 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 146 mbedtls_ecp_tls_read_point( &grp, NULL, 147 (const unsigned char **) &buf, 148 sizeof( buf ) ) ); 149 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 150 mbedtls_ecp_tls_read_point( &grp, &P, &null_buf, 151 sizeof( buf ) ) ); 152 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 153 mbedtls_ecp_tls_read_point( &grp, &P, NULL, 154 sizeof( buf ) ) ); 155 156 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 157 mbedtls_ecp_tls_write_point( NULL, &P, 158 valid_fmt, 159 &olen, 160 buf, 161 sizeof( buf ) ) ); 162 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 163 mbedtls_ecp_tls_write_point( &grp, NULL, 164 valid_fmt, 165 &olen, 166 buf, 167 sizeof( buf ) ) ); 168 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 169 mbedtls_ecp_tls_write_point( &grp, &P, 170 invalid_fmt, 171 &olen, 172 buf, 173 sizeof( buf ) ) ); 174 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 175 mbedtls_ecp_tls_write_point( &grp, &P, 176 valid_fmt, 177 NULL, 178 buf, 179 sizeof( buf ) ) ); 180 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 181 mbedtls_ecp_tls_write_point( &grp, &P, 182 valid_fmt, 183 &olen, 184 NULL, 185 sizeof( buf ) ) ); 186 187 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 188 mbedtls_ecp_group_load( NULL, valid_group ) ); 189 190 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 191 mbedtls_ecp_tls_read_group( NULL, 192 (const unsigned char **) &buf, 193 sizeof( buf ) ) ); 194 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 195 mbedtls_ecp_tls_read_group( &grp, NULL, 196 sizeof( buf ) ) ); 197 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 198 mbedtls_ecp_tls_read_group( &grp, &null_buf, 199 sizeof( buf ) ) ); 200 201 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 202 mbedtls_ecp_tls_read_group_id( NULL, 203 (const unsigned char **) &buf, 204 sizeof( buf ) ) ); 205 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 206 mbedtls_ecp_tls_read_group_id( &valid_group, NULL, 207 sizeof( buf ) ) ); 208 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 209 mbedtls_ecp_tls_read_group_id( &valid_group, 210 &null_buf, 211 sizeof( buf ) ) ); 212 213 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 214 mbedtls_ecp_tls_write_group( NULL, &olen, 215 buf, sizeof( buf ) ) ); 216 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 217 mbedtls_ecp_tls_write_group( &grp, NULL, 218 buf, sizeof( buf ) ) ); 219 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 220 mbedtls_ecp_tls_write_group( &grp, &olen, 221 NULL, sizeof( buf ) ) ); 222 223 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 224 mbedtls_ecp_mul( NULL, &P, &m, &P, 225 rnd_std_rand, NULL ) ); 226 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 227 mbedtls_ecp_mul( &grp, NULL, &m, &P, 228 rnd_std_rand, NULL ) ); 229 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 230 mbedtls_ecp_mul( &grp, &P, NULL, &P, 231 rnd_std_rand, NULL ) ); 232 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 233 mbedtls_ecp_mul( &grp, &P, &m, NULL, 234 rnd_std_rand, NULL ) ); 235 236 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 237 mbedtls_ecp_mul_restartable( NULL, &P, &m, &P, 238 rnd_std_rand, NULL , NULL ) ); 239 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 240 mbedtls_ecp_mul_restartable( &grp, NULL, &m, &P, 241 rnd_std_rand, NULL , NULL ) ); 242 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 243 mbedtls_ecp_mul_restartable( &grp, &P, NULL, &P, 244 rnd_std_rand, NULL , NULL ) ); 245 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 246 mbedtls_ecp_mul_restartable( &grp, &P, &m, NULL, 247 rnd_std_rand, NULL , NULL ) ); 248 249 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 250 mbedtls_ecp_muladd( NULL, &P, &m, &P, 251 &m, &P ) ); 252 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 253 mbedtls_ecp_muladd( &grp, NULL, &m, &P, 254 &m, &P ) ); 255 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 256 mbedtls_ecp_muladd( &grp, &P, NULL, &P, 257 &m, &P ) ); 258 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 259 mbedtls_ecp_muladd( &grp, &P, &m, NULL, 260 &m, &P ) ); 261 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 262 mbedtls_ecp_muladd( &grp, &P, &m, &P, 263 NULL, &P ) ); 264 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 265 mbedtls_ecp_muladd( &grp, &P, &m, &P, 266 &m, NULL ) ); 267 268 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 269 mbedtls_ecp_muladd_restartable( NULL, &P, &m, &P, 270 &m, &P, NULL ) ); 271 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 272 mbedtls_ecp_muladd_restartable( &grp, NULL, &m, &P, 273 &m, &P, NULL ) ); 274 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 275 mbedtls_ecp_muladd_restartable( &grp, &P, NULL, &P, 276 &m, &P, NULL ) ); 277 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 278 mbedtls_ecp_muladd_restartable( &grp, &P, &m, NULL, 279 &m, &P, NULL ) ); 280 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 281 mbedtls_ecp_muladd_restartable( &grp, &P, &m, &P, 282 NULL, &P, NULL ) ); 283 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 284 mbedtls_ecp_muladd_restartable( &grp, &P, &m, &P, 285 &m, NULL, NULL ) ); 286 287 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 288 mbedtls_ecp_check_pubkey( NULL, &P ) ); 289 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 290 mbedtls_ecp_check_pubkey( &grp, NULL ) ); 291 292 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 293 mbedtls_ecp_check_pub_priv( NULL, &kp ) ); 294 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 295 mbedtls_ecp_check_pub_priv( &kp, NULL ) ); 296 297 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 298 mbedtls_ecp_check_privkey( NULL, &m ) ); 299 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 300 mbedtls_ecp_check_privkey( &grp, NULL ) ); 301 302 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 303 mbedtls_ecp_gen_keypair_base( NULL, &P, 304 &m, &P, 305 rnd_std_rand, 306 NULL ) ); 307 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 308 mbedtls_ecp_gen_keypair_base( &grp, NULL, 309 &m, &P, 310 rnd_std_rand, 311 NULL ) ); 312 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 313 mbedtls_ecp_gen_keypair_base( &grp, &P, 314 NULL, &P, 315 rnd_std_rand, 316 NULL ) ); 317 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 318 mbedtls_ecp_gen_keypair_base( &grp, &P, 319 &m, NULL, 320 rnd_std_rand, 321 NULL ) ); 322 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 323 mbedtls_ecp_gen_keypair_base( &grp, &P, 324 &m, &P, 325 NULL, 326 NULL ) ); 327 328 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 329 mbedtls_ecp_gen_keypair( NULL, 330 &m, &P, 331 rnd_std_rand, 332 NULL ) ); 333 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 334 mbedtls_ecp_gen_keypair( &grp, 335 NULL, &P, 336 rnd_std_rand, 337 NULL ) ); 338 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 339 mbedtls_ecp_gen_keypair( &grp, 340 &m, NULL, 341 rnd_std_rand, 342 NULL ) ); 343 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 344 mbedtls_ecp_gen_keypair( &grp, 345 &m, &P, 346 NULL, 347 NULL ) ); 348 349 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 350 mbedtls_ecp_gen_key( valid_group, NULL, 351 rnd_std_rand, NULL ) ); 352 TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA, 353 mbedtls_ecp_gen_key( valid_group, &kp, 354 NULL, NULL ) ); 355 356exit: 357 return; 358} 359/* END_CASE */ 360 361/* BEGIN_CASE */ 362void mbedtls_ecp_curve_info( int id, int tls_id, int size, char * name ) 363{ 364 const mbedtls_ecp_curve_info *by_id, *by_tls, *by_name; 365 366 by_id = mbedtls_ecp_curve_info_from_grp_id( id ); 367 by_tls = mbedtls_ecp_curve_info_from_tls_id( tls_id ); 368 by_name = mbedtls_ecp_curve_info_from_name( name ); 369 TEST_ASSERT( by_id != NULL ); 370 TEST_ASSERT( by_tls != NULL ); 371 TEST_ASSERT( by_name != NULL ); 372 373 TEST_ASSERT( by_id == by_tls ); 374 TEST_ASSERT( by_id == by_name ); 375 376 TEST_ASSERT( by_id->bit_size == size ); 377} 378/* END_CASE */ 379 380/* BEGIN_CASE */ 381void ecp_check_pub( int grp_id, char * x_hex, char * y_hex, char * z_hex, 382 int ret ) 383{ 384 mbedtls_ecp_group grp; 385 mbedtls_ecp_point P; 386 387 mbedtls_ecp_group_init( &grp ); 388 mbedtls_ecp_point_init( &P ); 389 390 TEST_ASSERT( mbedtls_ecp_group_load( &grp, grp_id ) == 0 ); 391 392 TEST_ASSERT( mbedtls_mpi_read_string( &P.X, 16, x_hex ) == 0 ); 393 TEST_ASSERT( mbedtls_mpi_read_string( &P.Y, 16, y_hex ) == 0 ); 394 TEST_ASSERT( mbedtls_mpi_read_string( &P.Z, 16, z_hex ) == 0 ); 395 396 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &P ) == ret ); 397 398exit: 399 mbedtls_ecp_group_free( &grp ); 400 mbedtls_ecp_point_free( &P ); 401} 402/* END_CASE */ 403 404/* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE */ 405void ecp_test_vect_restart( int id, 406 char *dA_str, char *xA_str, char *yA_str, 407 char *dB_str, char *xZ_str, char *yZ_str, 408 int max_ops, int min_restarts, int max_restarts ) 409{ 410 /* 411 * Test for early restart. Based on test vectors like ecp_test_vect(), 412 * but for the sake of simplicity only does half of each side. It's 413 * important to test both base point and random point, though, as memory 414 * management is different in each case. 415 * 416 * Don't try using too precise bounds for restarts as the exact number 417 * will depend on settings such as MBEDTLS_ECP_FIXED_POINT_OPTIM and 418 * MBEDTLS_ECP_WINDOW_SIZE, as well as implementation details that may 419 * change in the future. A factor 2 is a minimum safety margin. 420 * 421 * For reference, with mbed TLS 2.4 and default settings, for P-256: 422 * - Random point mult: ~3250M 423 * - Cold base point mult: ~3300M 424 * - Hot base point mult: ~1100M 425 * With MBEDTLS_ECP_WINDOW_SIZE set to 2 (minimum): 426 * - Random point mult: ~3850M 427 */ 428 mbedtls_ecp_restart_ctx ctx; 429 mbedtls_ecp_group grp; 430 mbedtls_ecp_point R, P; 431 mbedtls_mpi dA, xA, yA, dB, xZ, yZ; 432 int cnt_restarts; 433 int ret; 434 435 mbedtls_ecp_restart_init( &ctx ); 436 mbedtls_ecp_group_init( &grp ); 437 mbedtls_ecp_point_init( &R ); mbedtls_ecp_point_init( &P ); 438 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); mbedtls_mpi_init( &yA ); 439 mbedtls_mpi_init( &dB ); mbedtls_mpi_init( &xZ ); mbedtls_mpi_init( &yZ ); 440 441 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 ); 442 443 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_str ) == 0 ); 444 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_str ) == 0 ); 445 TEST_ASSERT( mbedtls_mpi_read_string( &yA, 16, yA_str ) == 0 ); 446 447 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_str ) == 0 ); 448 TEST_ASSERT( mbedtls_mpi_read_string( &xZ, 16, xZ_str ) == 0 ); 449 TEST_ASSERT( mbedtls_mpi_read_string( &yZ, 16, yZ_str ) == 0 ); 450 451 mbedtls_ecp_set_max_ops( (unsigned) max_ops ); 452 453 /* Base point case */ 454 cnt_restarts = 0; 455 do { 456 ECP_PT_RESET( &R ); 457 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dA, &grp.G, NULL, NULL, &ctx ); 458 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts ); 459 460 TEST_ASSERT( ret == 0 ); 461 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 ); 462 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yA ) == 0 ); 463 464 TEST_ASSERT( cnt_restarts >= min_restarts ); 465 TEST_ASSERT( cnt_restarts <= max_restarts ); 466 467 /* Non-base point case */ 468 mbedtls_ecp_copy( &P, &R ); 469 cnt_restarts = 0; 470 do { 471 ECP_PT_RESET( &R ); 472 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dB, &P, NULL, NULL, &ctx ); 473 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts ); 474 475 TEST_ASSERT( ret == 0 ); 476 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 ); 477 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 ); 478 479 TEST_ASSERT( cnt_restarts >= min_restarts ); 480 TEST_ASSERT( cnt_restarts <= max_restarts ); 481 482 /* Do we leak memory when aborting an operation? 483 * This test only makes sense when we actually restart */ 484 if( min_restarts > 0 ) 485 { 486 ret = mbedtls_ecp_mul_restartable( &grp, &R, &dB, &P, NULL, NULL, &ctx ); 487 TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS ); 488 } 489 490exit: 491 mbedtls_ecp_restart_free( &ctx ); 492 mbedtls_ecp_group_free( &grp ); 493 mbedtls_ecp_point_free( &R ); mbedtls_ecp_point_free( &P ); 494 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); mbedtls_mpi_free( &yA ); 495 mbedtls_mpi_free( &dB ); mbedtls_mpi_free( &xZ ); mbedtls_mpi_free( &yZ ); 496} 497/* END_CASE */ 498 499/* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE */ 500void ecp_muladd_restart( int id, char *xR_str, char *yR_str, 501 char *u1_str, char *u2_str, 502 char *xQ_str, char *yQ_str, 503 int max_ops, int min_restarts, int max_restarts ) 504{ 505 /* 506 * Compute R = u1 * G + u2 * Q 507 * (test vectors mostly taken from ECDSA intermediate results) 508 * 509 * See comments at the top of ecp_test_vect_restart() 510 */ 511 mbedtls_ecp_restart_ctx ctx; 512 mbedtls_ecp_group grp; 513 mbedtls_ecp_point R, Q; 514 mbedtls_mpi u1, u2, xR, yR; 515 int cnt_restarts; 516 int ret; 517 518 mbedtls_ecp_restart_init( &ctx ); 519 mbedtls_ecp_group_init( &grp ); 520 mbedtls_ecp_point_init( &R ); 521 mbedtls_ecp_point_init( &Q ); 522 mbedtls_mpi_init( &u1 ); mbedtls_mpi_init( &u2 ); 523 mbedtls_mpi_init( &xR ); mbedtls_mpi_init( &yR ); 524 525 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 ); 526 527 TEST_ASSERT( mbedtls_mpi_read_string( &u1, 16, u1_str ) == 0 ); 528 TEST_ASSERT( mbedtls_mpi_read_string( &u2, 16, u2_str ) == 0 ); 529 TEST_ASSERT( mbedtls_mpi_read_string( &xR, 16, xR_str ) == 0 ); 530 TEST_ASSERT( mbedtls_mpi_read_string( &yR, 16, yR_str ) == 0 ); 531 532 TEST_ASSERT( mbedtls_mpi_read_string( &Q.X, 16, xQ_str ) == 0 ); 533 TEST_ASSERT( mbedtls_mpi_read_string( &Q.Y, 16, yQ_str ) == 0 ); 534 TEST_ASSERT( mbedtls_mpi_lset( &Q.Z, 1 ) == 0 ); 535 536 mbedtls_ecp_set_max_ops( (unsigned) max_ops ); 537 538 cnt_restarts = 0; 539 do { 540 ECP_PT_RESET( &R ); 541 ret = mbedtls_ecp_muladd_restartable( &grp, &R, 542 &u1, &grp.G, &u2, &Q, &ctx ); 543 } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts ); 544 545 TEST_ASSERT( ret == 0 ); 546 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xR ) == 0 ); 547 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yR ) == 0 ); 548 549 TEST_ASSERT( cnt_restarts >= min_restarts ); 550 TEST_ASSERT( cnt_restarts <= max_restarts ); 551 552 /* Do we leak memory when aborting an operation? 553 * This test only makes sense when we actually restart */ 554 if( min_restarts > 0 ) 555 { 556 ret = mbedtls_ecp_muladd_restartable( &grp, &R, 557 &u1, &grp.G, &u2, &Q, &ctx ); 558 TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS ); 559 } 560 561exit: 562 mbedtls_ecp_restart_free( &ctx ); 563 mbedtls_ecp_group_free( &grp ); 564 mbedtls_ecp_point_free( &R ); 565 mbedtls_ecp_point_free( &Q ); 566 mbedtls_mpi_free( &u1 ); mbedtls_mpi_free( &u2 ); 567 mbedtls_mpi_free( &xR ); mbedtls_mpi_free( &yR ); 568} 569/* END_CASE */ 570 571/* BEGIN_CASE */ 572void ecp_test_vect( int id, char * dA_str, char * xA_str, char * yA_str, 573 char * dB_str, char * xB_str, char * yB_str, 574 char * xZ_str, char * yZ_str ) 575{ 576 mbedtls_ecp_group grp; 577 mbedtls_ecp_point R; 578 mbedtls_mpi dA, xA, yA, dB, xB, yB, xZ, yZ; 579 rnd_pseudo_info rnd_info; 580 581 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R ); 582 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); mbedtls_mpi_init( &yA ); mbedtls_mpi_init( &dB ); 583 mbedtls_mpi_init( &xB ); mbedtls_mpi_init( &yB ); mbedtls_mpi_init( &xZ ); mbedtls_mpi_init( &yZ ); 584 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) ); 585 586 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 ); 587 588 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 ); 589 590 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_str ) == 0 ); 591 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_str ) == 0 ); 592 TEST_ASSERT( mbedtls_mpi_read_string( &yA, 16, yA_str ) == 0 ); 593 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_str ) == 0 ); 594 TEST_ASSERT( mbedtls_mpi_read_string( &xB, 16, xB_str ) == 0 ); 595 TEST_ASSERT( mbedtls_mpi_read_string( &yB, 16, yB_str ) == 0 ); 596 TEST_ASSERT( mbedtls_mpi_read_string( &xZ, 16, xZ_str ) == 0 ); 597 TEST_ASSERT( mbedtls_mpi_read_string( &yZ, 16, yZ_str ) == 0 ); 598 599 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G, 600 &rnd_pseudo_rand, &rnd_info ) == 0 ); 601 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 ); 602 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yA ) == 0 ); 603 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 ); 604 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R, NULL, NULL ) == 0 ); 605 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 ); 606 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 ); 607 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 ); 608 609 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 ); 610 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 ); 611 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yB ) == 0 ); 612 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 ); 613 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R, 614 &rnd_pseudo_rand, &rnd_info ) == 0 ); 615 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 ); 616 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 ); 617 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 ); 618 619exit: 620 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R ); 621 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); mbedtls_mpi_free( &yA ); mbedtls_mpi_free( &dB ); 622 mbedtls_mpi_free( &xB ); mbedtls_mpi_free( &yB ); mbedtls_mpi_free( &xZ ); mbedtls_mpi_free( &yZ ); 623} 624/* END_CASE */ 625 626/* BEGIN_CASE */ 627void ecp_test_vec_x( int id, char * dA_hex, char * xA_hex, char * dB_hex, 628 char * xB_hex, char * xS_hex ) 629{ 630 mbedtls_ecp_group grp; 631 mbedtls_ecp_point R; 632 mbedtls_mpi dA, xA, dB, xB, xS; 633 rnd_pseudo_info rnd_info; 634 635 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R ); 636 mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); 637 mbedtls_mpi_init( &dB ); mbedtls_mpi_init( &xB ); 638 mbedtls_mpi_init( &xS ); 639 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) ); 640 641 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 ); 642 643 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 ); 644 645 TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_hex ) == 0 ); 646 TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_hex ) == 0 ); 647 TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_hex ) == 0 ); 648 TEST_ASSERT( mbedtls_mpi_read_string( &xB, 16, xB_hex ) == 0 ); 649 TEST_ASSERT( mbedtls_mpi_read_string( &xS, 16, xS_hex ) == 0 ); 650 651 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G, 652 &rnd_pseudo_rand, &rnd_info ) == 0 ); 653 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 ); 654 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 ); 655 656 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R, 657 &rnd_pseudo_rand, &rnd_info ) == 0 ); 658 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 ); 659 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 ); 660 661 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 ); 662 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 ); 663 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 ); 664 665 TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R, NULL, NULL ) == 0 ); 666 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 ); 667 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 ); 668 669exit: 670 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R ); 671 mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); 672 mbedtls_mpi_free( &dB ); mbedtls_mpi_free( &xB ); 673 mbedtls_mpi_free( &xS ); 674} 675/* END_CASE */ 676 677/* BEGIN_CASE */ 678void ecp_fast_mod( int id, char * N_str ) 679{ 680 mbedtls_ecp_group grp; 681 mbedtls_mpi N, R; 682 683 mbedtls_mpi_init( &N ); mbedtls_mpi_init( &R ); 684 mbedtls_ecp_group_init( &grp ); 685 686 TEST_ASSERT( mbedtls_mpi_read_string( &N, 16, N_str ) == 0 ); 687 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 ); 688 TEST_ASSERT( grp.modp != NULL ); 689 690 /* 691 * Store correct result before we touch N 692 */ 693 TEST_ASSERT( mbedtls_mpi_mod_mpi( &R, &N, &grp.P ) == 0 ); 694 695 TEST_ASSERT( grp.modp( &N ) == 0 ); 696 TEST_ASSERT( mbedtls_mpi_bitlen( &N ) <= grp.pbits + 3 ); 697 698 /* 699 * Use mod rather than addition/subtraction in case previous test fails 700 */ 701 TEST_ASSERT( mbedtls_mpi_mod_mpi( &N, &N, &grp.P ) == 0 ); 702 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &N, &R ) == 0 ); 703 704exit: 705 mbedtls_mpi_free( &N ); mbedtls_mpi_free( &R ); 706 mbedtls_ecp_group_free( &grp ); 707} 708/* END_CASE */ 709 710/* BEGIN_CASE */ 711void ecp_write_binary( int id, char * x, char * y, char * z, int format, 712 data_t * out, int blen, int ret ) 713{ 714 mbedtls_ecp_group grp; 715 mbedtls_ecp_point P; 716 unsigned char buf[256]; 717 size_t olen; 718 719 memset( buf, 0, sizeof( buf ) ); 720 721 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P ); 722 723 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 ); 724 725 TEST_ASSERT( mbedtls_mpi_read_string( &P.X, 16, x ) == 0 ); 726 TEST_ASSERT( mbedtls_mpi_read_string( &P.Y, 16, y ) == 0 ); 727 TEST_ASSERT( mbedtls_mpi_read_string( &P.Z, 16, z ) == 0 ); 728 729 TEST_ASSERT( mbedtls_ecp_point_write_binary( &grp, &P, format, 730 &olen, buf, blen ) == ret ); 731 732 if( ret == 0 ) 733 { 734 TEST_ASSERT( hexcmp( buf, out->x, olen, out->len ) == 0 ); 735 } 736 737exit: 738 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P ); 739} 740/* END_CASE */ 741 742/* BEGIN_CASE */ 743void ecp_read_binary( int id, data_t * buf, char * x, char * y, char * z, 744 int ret ) 745{ 746 mbedtls_ecp_group grp; 747 mbedtls_ecp_point P; 748 mbedtls_mpi X, Y, Z; 749 750 751 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P ); 752 mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z ); 753 754 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 ); 755 756 TEST_ASSERT( mbedtls_mpi_read_string( &X, 16, x ) == 0 ); 757 TEST_ASSERT( mbedtls_mpi_read_string( &Y, 16, y ) == 0 ); 758 TEST_ASSERT( mbedtls_mpi_read_string( &Z, 16, z ) == 0 ); 759 760 TEST_ASSERT( mbedtls_ecp_point_read_binary( &grp, &P, buf->x, buf->len ) == ret ); 761 762 if( ret == 0 ) 763 { 764 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 ); 765 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 ); 766 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 ); 767 } 768 769exit: 770 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P ); 771 mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z ); 772} 773/* END_CASE */ 774 775/* BEGIN_CASE */ 776void mbedtls_ecp_tls_read_point( int id, data_t * buf, char * x, char * y, 777 char * z, int ret ) 778{ 779 mbedtls_ecp_group grp; 780 mbedtls_ecp_point P; 781 mbedtls_mpi X, Y, Z; 782 const unsigned char *vbuf = buf->x; 783 784 785 mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P ); 786 mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z ); 787 788 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 ); 789 790 TEST_ASSERT( mbedtls_mpi_read_string( &X, 16, x ) == 0 ); 791 TEST_ASSERT( mbedtls_mpi_read_string( &Y, 16, y ) == 0 ); 792 TEST_ASSERT( mbedtls_mpi_read_string( &Z, 16, z ) == 0 ); 793 794 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &P, &vbuf, buf->len ) == ret ); 795 796 if( ret == 0 ) 797 { 798 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 ); 799 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 ); 800 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 ); 801 TEST_ASSERT( (uint32_t)( vbuf - buf->x ) == buf->len ); 802 } 803 804exit: 805 mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P ); 806 mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z ); 807} 808/* END_CASE */ 809 810/* BEGIN_CASE */ 811void ecp_tls_write_read_point( int id ) 812{ 813 mbedtls_ecp_group grp; 814 mbedtls_ecp_point pt; 815 unsigned char buf[256]; 816 const unsigned char *vbuf; 817 size_t olen; 818 819 mbedtls_ecp_group_init( &grp ); 820 mbedtls_ecp_point_init( &pt ); 821 822 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 ); 823 824 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf; 825 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G, 826 MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 ); 827 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) 828 == MBEDTLS_ERR_ECP_FEATURE_UNAVAILABLE ); 829 TEST_ASSERT( vbuf == buf + olen ); 830 831 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf; 832 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G, 833 MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 ); 834 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 ); 835 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.X, &pt.X ) == 0 ); 836 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Y, &pt.Y ) == 0 ); 837 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Z, &pt.Z ) == 0 ); 838 TEST_ASSERT( vbuf == buf + olen ); 839 840 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf; 841 TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 ); 842 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt, 843 MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 ); 844 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 ); 845 TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) ); 846 TEST_ASSERT( vbuf == buf + olen ); 847 848 memset( buf, 0x00, sizeof( buf ) ); vbuf = buf; 849 TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 ); 850 TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt, 851 MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 ); 852 TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 ); 853 TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) ); 854 TEST_ASSERT( vbuf == buf + olen ); 855 856exit: 857 mbedtls_ecp_group_free( &grp ); 858 mbedtls_ecp_point_free( &pt ); 859} 860/* END_CASE */ 861 862/* BEGIN_CASE */ 863void mbedtls_ecp_tls_read_group( data_t * buf, int result, int bits, 864 int record_len ) 865{ 866 mbedtls_ecp_group grp; 867 const unsigned char *vbuf = buf->x; 868 int ret; 869 870 mbedtls_ecp_group_init( &grp ); 871 872 ret = mbedtls_ecp_tls_read_group( &grp, &vbuf, buf->len ); 873 874 TEST_ASSERT( ret == result ); 875 if( ret == 0) 876 { 877 TEST_ASSERT( mbedtls_mpi_bitlen( &grp.P ) == (size_t) bits ); 878 TEST_ASSERT( vbuf - buf->x == record_len); 879 } 880 881exit: 882 mbedtls_ecp_group_free( &grp ); 883} 884/* END_CASE */ 885 886/* BEGIN_CASE */ 887void ecp_tls_write_read_group( int id ) 888{ 889 mbedtls_ecp_group grp1, grp2; 890 unsigned char buf[10]; 891 const unsigned char *vbuf = buf; 892 size_t len; 893 int ret; 894 895 mbedtls_ecp_group_init( &grp1 ); 896 mbedtls_ecp_group_init( &grp2 ); 897 memset( buf, 0x00, sizeof( buf ) ); 898 899 TEST_ASSERT( mbedtls_ecp_group_load( &grp1, id ) == 0 ); 900 901 TEST_ASSERT( mbedtls_ecp_tls_write_group( &grp1, &len, buf, 10 ) == 0 ); 902 ret = mbedtls_ecp_tls_read_group( &grp2, &vbuf, len ); 903 TEST_ASSERT( ret == 0 ); 904 905 if( ret == 0 ) 906 { 907 TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp1.N, &grp2.N ) == 0 ); 908 TEST_ASSERT( grp1.id == grp2.id ); 909 } 910 911exit: 912 mbedtls_ecp_group_free( &grp1 ); 913 mbedtls_ecp_group_free( &grp2 ); 914} 915/* END_CASE */ 916 917/* BEGIN_CASE */ 918void mbedtls_ecp_check_privkey( int id, char * key_hex, int ret ) 919{ 920 mbedtls_ecp_group grp; 921 mbedtls_mpi d; 922 923 mbedtls_ecp_group_init( &grp ); 924 mbedtls_mpi_init( &d ); 925 926 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 ); 927 TEST_ASSERT( mbedtls_mpi_read_string( &d, 16, key_hex ) == 0 ); 928 929 TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == ret ); 930 931exit: 932 mbedtls_ecp_group_free( &grp ); 933 mbedtls_mpi_free( &d ); 934} 935/* END_CASE */ 936 937/* BEGIN_CASE */ 938void mbedtls_ecp_check_pub_priv( int id_pub, char * Qx_pub, char * Qy_pub, 939 int id, char * d, char * Qx, char * Qy, 940 int ret ) 941{ 942 mbedtls_ecp_keypair pub, prv; 943 944 mbedtls_ecp_keypair_init( &pub ); 945 mbedtls_ecp_keypair_init( &prv ); 946 947 if( id_pub != MBEDTLS_ECP_DP_NONE ) 948 TEST_ASSERT( mbedtls_ecp_group_load( &pub.grp, id_pub ) == 0 ); 949 TEST_ASSERT( mbedtls_ecp_point_read_string( &pub.Q, 16, Qx_pub, Qy_pub ) == 0 ); 950 951 if( id != MBEDTLS_ECP_DP_NONE ) 952 TEST_ASSERT( mbedtls_ecp_group_load( &prv.grp, id ) == 0 ); 953 TEST_ASSERT( mbedtls_ecp_point_read_string( &prv.Q, 16, Qx, Qy ) == 0 ); 954 TEST_ASSERT( mbedtls_mpi_read_string( &prv.d, 16, d ) == 0 ); 955 956 TEST_ASSERT( mbedtls_ecp_check_pub_priv( &pub, &prv ) == ret ); 957 958exit: 959 mbedtls_ecp_keypair_free( &pub ); 960 mbedtls_ecp_keypair_free( &prv ); 961} 962/* END_CASE */ 963 964/* BEGIN_CASE */ 965void mbedtls_ecp_gen_keypair( int id ) 966{ 967 mbedtls_ecp_group grp; 968 mbedtls_ecp_point Q; 969 mbedtls_mpi d; 970 rnd_pseudo_info rnd_info; 971 972 mbedtls_ecp_group_init( &grp ); 973 mbedtls_ecp_point_init( &Q ); 974 mbedtls_mpi_init( &d ); 975 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) ); 976 977 TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 ); 978 979 TEST_ASSERT( mbedtls_ecp_gen_keypair( &grp, &d, &Q, &rnd_pseudo_rand, &rnd_info ) 980 == 0 ); 981 982 TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &Q ) == 0 ); 983 TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == 0 ); 984 985exit: 986 mbedtls_ecp_group_free( &grp ); 987 mbedtls_ecp_point_free( &Q ); 988 mbedtls_mpi_free( &d ); 989} 990/* END_CASE */ 991 992/* BEGIN_CASE */ 993void mbedtls_ecp_gen_key( int id ) 994{ 995 mbedtls_ecp_keypair key; 996 rnd_pseudo_info rnd_info; 997 998 mbedtls_ecp_keypair_init( &key ); 999 memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) ); 1000 1001 TEST_ASSERT( mbedtls_ecp_gen_key( id, &key, &rnd_pseudo_rand, &rnd_info ) == 0 ); 1002 1003 TEST_ASSERT( mbedtls_ecp_check_pubkey( &key.grp, &key.Q ) == 0 ); 1004 TEST_ASSERT( mbedtls_ecp_check_privkey( &key.grp, &key.d ) == 0 ); 1005 1006exit: 1007 mbedtls_ecp_keypair_free( &key ); 1008} 1009/* END_CASE */ 1010 1011/* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST */ 1012void ecp_selftest( ) 1013{ 1014 TEST_ASSERT( mbedtls_ecp_self_test( 1 ) == 0 ); 1015} 1016/* END_CASE */ 1017