]>
Commit | Line | Data |
---|---|---|
2556aec5 | 1 | /* |
1212818e | 2 | * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved. |
2556aec5 RS |
3 | * |
4 | * Licensed under the OpenSSL licenses, (the "License"); | |
5 | * you may not use this file except in compliance with the License. | |
6 | * You may obtain a copy of the License at | |
7 | * https://www.openssl.org/source/license.html | |
8 | * or in the file LICENSE in the source distribution. | |
9 | */ | |
10 | ||
176db6dc | 11 | #include "internal/nelem.h" |
2556aec5 RS |
12 | #include "testutil.h" |
13 | ||
14 | #include <stdio.h> | |
15 | #include <stdlib.h> | |
16 | #include <string.h> | |
17 | #include <ctype.h> | |
18 | ||
19 | #define NUM_REPEATS "1000000" | |
20 | ||
21 | static int64_t num_repeats; | |
22 | static int print_mode = 0; | |
23 | ||
24 | #ifndef OPENSSL_NO_EC | |
25 | # include <openssl/ec.h> | |
26 | # include <openssl/err.h> | |
27 | # include <openssl/obj_mac.h> | |
28 | # include <openssl/objects.h> | |
29 | # include <openssl/rand.h> | |
30 | # include <openssl/bn.h> | |
31 | # include <openssl/opensslconf.h> | |
32 | ||
33 | static const char *kP256DefaultResult = | |
34 | "A1E24B223B8E81BC1FFF99BAFB909EDB895FACDE7D6DA5EF5E7B3255FB378E0F"; | |
35 | ||
36 | /* | |
37 | * Perform a deterministic walk on the curve, by starting from |point| and | |
38 | * using the X-coordinate of the previous point as the next scalar for | |
39 | * point multiplication. | |
40 | * Returns the X-coordinate of the end result or NULL on error. | |
41 | */ | |
42 | static BIGNUM *walk_curve(const EC_GROUP *group, EC_POINT *point, int64_t num) | |
43 | { | |
44 | BIGNUM *scalar = NULL; | |
45 | int64_t i; | |
46 | ||
47 | if (!TEST_ptr(scalar = BN_new()) | |
9cc570d4 MC |
48 | || !TEST_true(EC_POINT_get_affine_coordinates(group, point, scalar, |
49 | NULL, NULL))) | |
2556aec5 RS |
50 | goto err; |
51 | ||
52 | for (i = 0; i < num; i++) { | |
53 | if (!TEST_true(EC_POINT_mul(group, point, NULL, point, scalar, NULL)) | |
9cc570d4 MC |
54 | || !TEST_true(EC_POINT_get_affine_coordinates(group, point, |
55 | scalar, | |
56 | NULL, NULL))) | |
2556aec5 RS |
57 | goto err; |
58 | } | |
59 | return scalar; | |
60 | ||
61 | err: | |
62 | BN_free(scalar); | |
63 | return NULL; | |
64 | } | |
65 | ||
31a80694 | 66 | static int test_curve(void) |
2556aec5 RS |
67 | { |
68 | EC_GROUP *group = NULL; | |
69 | EC_POINT *point = NULL; | |
70 | BIGNUM *result = NULL, *expected_result = NULL; | |
71 | int ret = 0; | |
72 | ||
73 | /* | |
74 | * We currently hard-code P-256, though adaptation to other curves. | |
75 | * would be straightforward. | |
76 | */ | |
77 | if (!TEST_ptr(group = EC_GROUP_new_by_curve_name(NID_X9_62_prime256v1)) | |
78 | || !TEST_ptr(point = EC_POINT_dup(EC_GROUP_get0_generator(group), | |
79 | group)) | |
80 | || !TEST_ptr(result = walk_curve(group, point, num_repeats))) | |
81 | return 0; | |
82 | ||
83 | if (print_mode) { | |
84 | BN_print(bio_out, result); | |
85 | BIO_printf(bio_out, "\n"); | |
86 | ret = 1; | |
87 | } else { | |
88 | if (!TEST_true(BN_hex2bn(&expected_result, kP256DefaultResult)) | |
89 | || !TEST_ptr(expected_result) | |
90 | || !TEST_BN_eq(result, expected_result)) | |
91 | goto err; | |
92 | ret = 1; | |
93 | } | |
94 | ||
95 | err: | |
96 | EC_GROUP_free(group); | |
97 | EC_POINT_free(point); | |
98 | BN_free(result); | |
99 | BN_free(expected_result); | |
100 | return ret; | |
101 | } | |
102 | #endif | |
103 | ||
104 | static int atoi64(const char *in, int64_t *result) | |
105 | { | |
106 | int64_t ret = 0; | |
107 | ||
108 | for ( ; *in != '\0'; in++) { | |
109 | char c = *in; | |
110 | ||
00dfbaad | 111 | if (!isdigit((unsigned char)c)) |
2556aec5 RS |
112 | return 0; |
113 | ret *= 10; | |
114 | ret += (c - '0'); | |
115 | } | |
116 | *result = ret; | |
117 | return 1; | |
118 | } | |
119 | ||
120 | /* | |
121 | * Stress test the curve. If the '-num' argument is given, runs the loop | |
122 | * |num| times and prints the resulting X-coordinate. Otherwise runs the test | |
123 | * the default number of times and compares against the expected result. | |
124 | */ | |
ad887416 | 125 | int setup_tests(void) |
2556aec5 | 126 | { |
ad887416 | 127 | const char *p; |
2556aec5 RS |
128 | |
129 | if (!atoi64(NUM_REPEATS, &num_repeats)) { | |
130 | TEST_error("Cannot parse " NUM_REPEATS); | |
ad887416 | 131 | return 0; |
2556aec5 RS |
132 | } |
133 | /* | |
134 | * TODO(openssl-team): code under test/ should be able to reuse the option | |
135 | * parsing framework currently in apps/. | |
136 | */ | |
ad887416 P |
137 | p = test_get_option_argument("-num"); |
138 | if (p != NULL) { | |
139 | if (!atoi64(p, &num_repeats) | |
140 | || num_repeats < 0) | |
141 | return 0; | |
142 | print_mode = 1; | |
2556aec5 RS |
143 | } |
144 | ||
145 | #ifndef OPENSSL_NO_EC | |
146 | ADD_TEST(test_curve); | |
147 | #endif | |
ad887416 | 148 | return 1; |
2556aec5 | 149 | } |