|
Packit |
c4476c |
/*
|
|
Packit |
c4476c |
* Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.
|
|
Packit |
c4476c |
*
|
|
Packit |
c4476c |
* Licensed under the OpenSSL licenses, (the "License");
|
|
Packit |
c4476c |
* you may not use this file except in compliance with the License.
|
|
Packit |
c4476c |
* You may obtain a copy of the License at
|
|
Packit |
c4476c |
* https://www.openssl.org/source/license.html
|
|
Packit |
c4476c |
* or in the file LICENSE in the source distribution.
|
|
Packit |
c4476c |
*/
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
#include "internal/nelem.h"
|
|
Packit |
c4476c |
#include "testutil.h"
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
#include <stdio.h>
|
|
Packit |
c4476c |
#include <stdlib.h>
|
|
Packit |
c4476c |
#include <string.h>
|
|
Packit |
c4476c |
#include <ctype.h>
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
#define NUM_REPEATS "1000000"
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
static int64_t num_repeats;
|
|
Packit |
c4476c |
static int print_mode = 0;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
#ifndef OPENSSL_NO_EC
|
|
Packit |
c4476c |
# include <openssl/ec.h>
|
|
Packit |
c4476c |
# include <openssl/err.h>
|
|
Packit |
c4476c |
# include <openssl/obj_mac.h>
|
|
Packit |
c4476c |
# include <openssl/objects.h>
|
|
Packit |
c4476c |
# include <openssl/rand.h>
|
|
Packit |
c4476c |
# include <openssl/bn.h>
|
|
Packit |
c4476c |
# include <openssl/opensslconf.h>
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
static const char *kP256DefaultResult =
|
|
Packit |
c4476c |
"A1E24B223B8E81BC1FFF99BAFB909EDB895FACDE7D6DA5EF5E7B3255FB378E0F";
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
/*
|
|
Packit |
c4476c |
* Perform a deterministic walk on the curve, by starting from |point| and
|
|
Packit |
c4476c |
* using the X-coordinate of the previous point as the next scalar for
|
|
Packit |
c4476c |
* point multiplication.
|
|
Packit |
c4476c |
* Returns the X-coordinate of the end result or NULL on error.
|
|
Packit |
c4476c |
*/
|
|
Packit |
c4476c |
static BIGNUM *walk_curve(const EC_GROUP *group, EC_POINT *point, int64_t num)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
BIGNUM *scalar = NULL;
|
|
Packit |
c4476c |
int64_t i;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if (!TEST_ptr(scalar = BN_new())
|
|
Packit |
c4476c |
|| !TEST_true(EC_POINT_get_affine_coordinates(group, point, scalar,
|
|
Packit |
c4476c |
NULL, NULL)))
|
|
Packit |
c4476c |
goto err;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
for (i = 0; i < num; i++) {
|
|
Packit |
c4476c |
if (!TEST_true(EC_POINT_mul(group, point, NULL, point, scalar, NULL))
|
|
Packit |
c4476c |
|| !TEST_true(EC_POINT_get_affine_coordinates(group, point,
|
|
Packit |
c4476c |
scalar,
|
|
Packit |
c4476c |
NULL, NULL)))
|
|
Packit |
c4476c |
goto err;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
return scalar;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
err:
|
|
Packit |
c4476c |
BN_free(scalar);
|
|
Packit |
c4476c |
return NULL;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
static int test_curve(void)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
EC_GROUP *group = NULL;
|
|
Packit |
c4476c |
EC_POINT *point = NULL;
|
|
Packit |
c4476c |
BIGNUM *result = NULL, *expected_result = NULL;
|
|
Packit |
c4476c |
int ret = 0;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
/*
|
|
Packit |
c4476c |
* We currently hard-code P-256, though adaptation to other curves.
|
|
Packit |
c4476c |
* would be straightforward.
|
|
Packit |
c4476c |
*/
|
|
Packit |
c4476c |
if (!TEST_ptr(group = EC_GROUP_new_by_curve_name(NID_X9_62_prime256v1))
|
|
Packit |
c4476c |
|| !TEST_ptr(point = EC_POINT_dup(EC_GROUP_get0_generator(group),
|
|
Packit |
c4476c |
group))
|
|
Packit |
c4476c |
|| !TEST_ptr(result = walk_curve(group, point, num_repeats)))
|
|
Packit |
c4476c |
return 0;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if (print_mode) {
|
|
Packit |
c4476c |
BN_print(bio_out, result);
|
|
Packit |
c4476c |
BIO_printf(bio_out, "\n");
|
|
Packit |
c4476c |
ret = 1;
|
|
Packit |
c4476c |
} else {
|
|
Packit |
c4476c |
if (!TEST_true(BN_hex2bn(&expected_result, kP256DefaultResult))
|
|
Packit |
c4476c |
|| !TEST_ptr(expected_result)
|
|
Packit |
c4476c |
|| !TEST_BN_eq(result, expected_result))
|
|
Packit |
c4476c |
goto err;
|
|
Packit |
c4476c |
ret = 1;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
err:
|
|
Packit |
c4476c |
EC_GROUP_free(group);
|
|
Packit |
c4476c |
EC_POINT_free(point);
|
|
Packit |
c4476c |
BN_free(result);
|
|
Packit |
c4476c |
BN_free(expected_result);
|
|
Packit |
c4476c |
return ret;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
#endif
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
static int atoi64(const char *in, int64_t *result)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
int64_t ret = 0;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
for ( ; *in != '\0'; in++) {
|
|
Packit |
c4476c |
char c = *in;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if (!isdigit((unsigned char)c))
|
|
Packit |
c4476c |
return 0;
|
|
Packit |
c4476c |
ret *= 10;
|
|
Packit |
c4476c |
ret += (c - '0');
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
*result = ret;
|
|
Packit |
c4476c |
return 1;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
/*
|
|
Packit |
c4476c |
* Stress test the curve. If the '-num' argument is given, runs the loop
|
|
Packit |
c4476c |
* |num| times and prints the resulting X-coordinate. Otherwise runs the test
|
|
Packit |
c4476c |
* the default number of times and compares against the expected result.
|
|
Packit |
c4476c |
*/
|
|
Packit |
c4476c |
int setup_tests(void)
|
|
Packit |
c4476c |
{
|
|
Packit |
c4476c |
const char *p;
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
if (!atoi64(NUM_REPEATS, &num_repeats)) {
|
|
Packit |
c4476c |
TEST_error("Cannot parse " NUM_REPEATS);
|
|
Packit |
c4476c |
return 0;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
/*
|
|
Packit |
c4476c |
* TODO(openssl-team): code under test/ should be able to reuse the option
|
|
Packit |
c4476c |
* parsing framework currently in apps/.
|
|
Packit |
c4476c |
*/
|
|
Packit |
c4476c |
p = test_get_option_argument("-num");
|
|
Packit |
c4476c |
if (p != NULL) {
|
|
Packit |
c4476c |
if (!atoi64(p, &num_repeats)
|
|
Packit |
c4476c |
|| num_repeats < 0)
|
|
Packit |
c4476c |
return 0;
|
|
Packit |
c4476c |
print_mode = 1;
|
|
Packit |
c4476c |
}
|
|
Packit |
c4476c |
|
|
Packit |
c4476c |
#ifndef OPENSSL_NO_EC
|
|
Packit |
c4476c |
ADD_TEST(test_curve);
|
|
Packit |
c4476c |
#endif
|
|
Packit |
c4476c |
return 1;
|
|
Packit |
c4476c |
}
|