]>
Commit | Line | Data |
---|---|---|
2556aec5 RS |
1 | /* |
2 | * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved. | |
3 | * | |
4 | * Licensed under the OpenSSL licenses, (the "License"); | |
5 | * you may not use this file except in compliance with the License. | |
6 | * You may obtain a copy of the License at | |
7 | * https://www.openssl.org/source/license.html | |
8 | * or in the file LICENSE in the source distribution. | |
9 | */ | |
10 | ||
176db6dc | 11 | #include "internal/nelem.h" |
2556aec5 RS |
12 | #include "testutil.h" |
13 | ||
14 | #include <stdio.h> | |
15 | #include <stdlib.h> | |
16 | #include <string.h> | |
17 | #include <ctype.h> | |
18 | ||
19 | #define NUM_REPEATS "1000000" | |
20 | ||
21 | static int64_t num_repeats; | |
22 | static int print_mode = 0; | |
23 | ||
24 | #ifndef OPENSSL_NO_EC | |
25 | # include <openssl/ec.h> | |
26 | # include <openssl/err.h> | |
27 | # include <openssl/obj_mac.h> | |
28 | # include <openssl/objects.h> | |
29 | # include <openssl/rand.h> | |
30 | # include <openssl/bn.h> | |
31 | # include <openssl/opensslconf.h> | |
32 | ||
33 | static const char *kP256DefaultResult = | |
34 | "A1E24B223B8E81BC1FFF99BAFB909EDB895FACDE7D6DA5EF5E7B3255FB378E0F"; | |
35 | ||
36 | /* | |
37 | * Perform a deterministic walk on the curve, by starting from |point| and | |
38 | * using the X-coordinate of the previous point as the next scalar for | |
39 | * point multiplication. | |
40 | * Returns the X-coordinate of the end result or NULL on error. | |
41 | */ | |
42 | static BIGNUM *walk_curve(const EC_GROUP *group, EC_POINT *point, int64_t num) | |
43 | { | |
44 | BIGNUM *scalar = NULL; | |
45 | int64_t i; | |
46 | ||
47 | if (!TEST_ptr(scalar = BN_new()) | |
48 | || !TEST_true(EC_POINT_get_affine_coordinates_GFp(group, point, | |
49 | scalar, | |
50 | NULL, NULL))) | |
51 | goto err; | |
52 | ||
53 | for (i = 0; i < num; i++) { | |
54 | if (!TEST_true(EC_POINT_mul(group, point, NULL, point, scalar, NULL)) | |
55 | || !TEST_true(EC_POINT_get_affine_coordinates_GFp(group, point, | |
56 | scalar, | |
57 | NULL, NULL))) | |
58 | goto err; | |
59 | } | |
60 | return scalar; | |
61 | ||
62 | err: | |
63 | BN_free(scalar); | |
64 | return NULL; | |
65 | } | |
66 | ||
31a80694 | 67 | static int test_curve(void) |
2556aec5 RS |
68 | { |
69 | EC_GROUP *group = NULL; | |
70 | EC_POINT *point = NULL; | |
71 | BIGNUM *result = NULL, *expected_result = NULL; | |
72 | int ret = 0; | |
73 | ||
74 | /* | |
75 | * We currently hard-code P-256, though adaptation to other curves. | |
76 | * would be straightforward. | |
77 | */ | |
78 | if (!TEST_ptr(group = EC_GROUP_new_by_curve_name(NID_X9_62_prime256v1)) | |
79 | || !TEST_ptr(point = EC_POINT_dup(EC_GROUP_get0_generator(group), | |
80 | group)) | |
81 | || !TEST_ptr(result = walk_curve(group, point, num_repeats))) | |
82 | return 0; | |
83 | ||
84 | if (print_mode) { | |
85 | BN_print(bio_out, result); | |
86 | BIO_printf(bio_out, "\n"); | |
87 | ret = 1; | |
88 | } else { | |
89 | if (!TEST_true(BN_hex2bn(&expected_result, kP256DefaultResult)) | |
90 | || !TEST_ptr(expected_result) | |
91 | || !TEST_BN_eq(result, expected_result)) | |
92 | goto err; | |
93 | ret = 1; | |
94 | } | |
95 | ||
96 | err: | |
97 | EC_GROUP_free(group); | |
98 | EC_POINT_free(point); | |
99 | BN_free(result); | |
100 | BN_free(expected_result); | |
101 | return ret; | |
102 | } | |
103 | #endif | |
104 | ||
105 | static int atoi64(const char *in, int64_t *result) | |
106 | { | |
107 | int64_t ret = 0; | |
108 | ||
109 | for ( ; *in != '\0'; in++) { | |
110 | char c = *in; | |
111 | ||
00dfbaad | 112 | if (!isdigit((unsigned char)c)) |
2556aec5 RS |
113 | return 0; |
114 | ret *= 10; | |
115 | ret += (c - '0'); | |
116 | } | |
117 | *result = ret; | |
118 | return 1; | |
119 | } | |
120 | ||
121 | /* | |
122 | * Stress test the curve. If the '-num' argument is given, runs the loop | |
123 | * |num| times and prints the resulting X-coordinate. Otherwise runs the test | |
124 | * the default number of times and compares against the expected result. | |
125 | */ | |
ad887416 | 126 | int setup_tests(void) |
2556aec5 | 127 | { |
ad887416 | 128 | const char *p; |
2556aec5 RS |
129 | |
130 | if (!atoi64(NUM_REPEATS, &num_repeats)) { | |
131 | TEST_error("Cannot parse " NUM_REPEATS); | |
ad887416 | 132 | return 0; |
2556aec5 RS |
133 | } |
134 | /* | |
135 | * TODO(openssl-team): code under test/ should be able to reuse the option | |
136 | * parsing framework currently in apps/. | |
137 | */ | |
ad887416 P |
138 | p = test_get_option_argument("-num"); |
139 | if (p != NULL) { | |
140 | if (!atoi64(p, &num_repeats) | |
141 | || num_repeats < 0) | |
142 | return 0; | |
143 | print_mode = 1; | |
2556aec5 RS |
144 | } |
145 | ||
146 | #ifndef OPENSSL_NO_EC | |
147 | ADD_TEST(test_curve); | |
148 | #endif | |
ad887416 | 149 | return 1; |
2556aec5 | 150 | } |