]> git.ipfire.org Git - thirdparty/openssl.git/commit
More EVP ECC testing: positive and negative
authorBilly Brumley <bbrumley@gmail.com>
Thu, 28 Jun 2018 07:59:08 +0000 (10:59 +0300)
committerAndy Polyakov <appro@openssl.org>
Fri, 29 Jun 2018 10:29:12 +0000 (12:29 +0200)
commit249330de0250bc598d20d383bab37d150cdad239
treebc878e56ef1f4342e8b24f8990ba3b11870068d2
parent8eab767a718f44ccba9888eeb81a5328cff47bab
More EVP ECC testing: positive and negative

1. For every named curve, two "golden" keypair positive tests.
2. Also two "golden" stock ECDH positive tests.
3. For named curves with non-trivial cofactors, additionally two "golden"
   ECC CDH positive tests.
4. For named curves with non-trivial cofactors, additionally two negative
   tests.

There is some overlap with existing EVP tests, especially for the NIST
curves (for example, positive testing ECC CDH KATs for NIST curves).

"Golden" here means all the values are independent from OpenSSL's ECC
code. I used sage to calculate them. What comes from OpenSSL is:

1. The OIDs (parsed by tooling)
2. The curve parameters (parsing ecparam output with tooling)

The values inside the PEMs (private keys, public keys) and shared keys
are from sage. The PEMs themselves are the output of asn1parse, with
input taken from sage.

Reviewed-by: Andy Polyakov <appro@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6608)
test/recipes/30-test_evp.t
test/recipes/30-test_evp_data/evppkey_ecc.txt [new file with mode: 0644]