• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1/* BEGIN_HEADER */
2#include "mbedtls/ecp.h"
3
4#define ECP_PF_UNKNOWN     -1
5
6#define ECP_PT_RESET( x )           \
7    mbedtls_ecp_point_free( x );    \
8    mbedtls_ecp_point_init( x );
9/* END_HEADER */
10
11/* BEGIN_DEPENDENCIES
12 * depends_on:MBEDTLS_ECP_C
13 * END_DEPENDENCIES
14 */
15
16/* BEGIN_CASE */
17void ecp_valid_param( )
18{
19    TEST_VALID_PARAM( mbedtls_ecp_group_free( NULL ) );
20    TEST_VALID_PARAM( mbedtls_ecp_keypair_free( NULL ) );
21    TEST_VALID_PARAM( mbedtls_ecp_point_free( NULL ) );
22
23#if defined(MBEDTLS_ECP_RESTARTABLE)
24    TEST_VALID_PARAM( mbedtls_ecp_restart_free( NULL ) );
25#endif /* MBEDTLS_ECP_RESTARTABLE */
26
27exit:
28    return;
29}
30/* END_CASE */
31
32/* BEGIN_CASE depends_on:MBEDTLS_CHECK_PARAMS:!MBEDTLS_PARAM_FAILED_ALT */
33void ecp_invalid_param( )
34{
35    mbedtls_ecp_group grp;
36    mbedtls_ecp_keypair kp;
37    mbedtls_ecp_point P;
38    mbedtls_mpi m;
39    const char *x = "deadbeef";
40    int valid_fmt   = MBEDTLS_ECP_PF_UNCOMPRESSED;
41    int invalid_fmt = 42;
42    size_t olen;
43    unsigned char buf[42] = { 0 };
44    const unsigned char *null_buf = NULL;
45    mbedtls_ecp_group_id valid_group = MBEDTLS_ECP_DP_SECP192R1;
46#if defined(MBEDTLS_ECP_RESTARTABLE)
47    mbedtls_ecp_restart_ctx restart_ctx;
48#endif /* MBEDTLS_ECP_RESTARTABLE */
49
50    TEST_INVALID_PARAM( mbedtls_ecp_point_init( NULL ) );
51    TEST_INVALID_PARAM( mbedtls_ecp_keypair_init( NULL ) );
52    TEST_INVALID_PARAM( mbedtls_ecp_group_init( NULL ) );
53
54#if defined(MBEDTLS_ECP_RESTARTABLE)
55    TEST_INVALID_PARAM( mbedtls_ecp_restart_init( NULL ) );
56    TEST_INVALID_PARAM( mbedtls_ecp_check_budget( NULL, &restart_ctx, 42 ) );
57#endif /* MBEDTLS_ECP_RESTARTABLE */
58
59    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
60                            mbedtls_ecp_copy( NULL, &P ) );
61    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
62                            mbedtls_ecp_copy( &P, NULL ) );
63
64    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
65                            mbedtls_ecp_group_copy( NULL, &grp ) );
66    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
67                            mbedtls_ecp_group_copy( &grp, NULL ) );
68
69    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
70                            mbedtls_ecp_gen_privkey( NULL,
71                                                     &m,
72                                                     rnd_std_rand,
73                                                     NULL ) );
74    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
75                            mbedtls_ecp_gen_privkey( &grp,
76                                                     NULL,
77                                                     rnd_std_rand,
78                                                     NULL ) );
79    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
80                            mbedtls_ecp_gen_privkey( &grp,
81                                                     &m,
82                                                     NULL,
83                                                     NULL ) );
84
85    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
86                            mbedtls_ecp_set_zero( NULL ) );
87    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
88                            mbedtls_ecp_is_zero( NULL ) );
89
90    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
91                            mbedtls_ecp_point_cmp( NULL, &P ) );
92    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
93                            mbedtls_ecp_point_cmp( &P, NULL ) );
94
95    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
96                            mbedtls_ecp_point_read_string( NULL, 2,
97                                                           x, x ) );
98    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
99                            mbedtls_ecp_point_read_string( &P, 2,
100                                                           NULL, x ) );
101    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
102                            mbedtls_ecp_point_read_string( &P, 2,
103                                                           x, NULL ) );
104
105    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
106                            mbedtls_ecp_point_write_binary( NULL, &P,
107                                                      valid_fmt,
108                                                      &olen,
109                                                      buf, sizeof( buf ) ) );
110    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
111                            mbedtls_ecp_point_write_binary( &grp, NULL,
112                                                      valid_fmt,
113                                                      &olen,
114                                                      buf, sizeof( buf ) ) );
115    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
116                            mbedtls_ecp_point_write_binary( &grp, &P,
117                                                      invalid_fmt,
118                                                      &olen,
119                                                      buf, sizeof( buf ) ) );
120    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
121                            mbedtls_ecp_point_write_binary( &grp, &P,
122                                                      valid_fmt,
123                                                      NULL,
124                                                      buf, sizeof( buf ) ) );
125    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
126                            mbedtls_ecp_point_write_binary( &grp, &P,
127                                                      valid_fmt,
128                                                      &olen,
129                                                      NULL, sizeof( buf ) ) );
130
131    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
132                            mbedtls_ecp_point_read_binary( NULL, &P, buf,
133                                                     sizeof( buf ) ) );
134    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
135                            mbedtls_ecp_point_read_binary( &grp, NULL, buf,
136                                                     sizeof( buf ) ) );
137    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
138                            mbedtls_ecp_point_read_binary( &grp, &P, NULL,
139                                                     sizeof( buf ) ) );
140
141    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
142                            mbedtls_ecp_tls_read_point( NULL, &P,
143                                                 (const unsigned char **) &buf,
144                                                 sizeof( buf ) ) );
145    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
146                            mbedtls_ecp_tls_read_point( &grp, NULL,
147                                                 (const unsigned char **) &buf,
148                                                 sizeof( buf ) ) );
149    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
150                            mbedtls_ecp_tls_read_point( &grp, &P, &null_buf,
151                                                        sizeof( buf ) ) );
152    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
153                            mbedtls_ecp_tls_read_point( &grp, &P, NULL,
154                                                    sizeof( buf ) ) );
155
156    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
157                            mbedtls_ecp_tls_write_point( NULL, &P,
158                                                     valid_fmt,
159                                                     &olen,
160                                                     buf,
161                                                     sizeof( buf ) ) );
162    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
163                            mbedtls_ecp_tls_write_point( &grp, NULL,
164                                                     valid_fmt,
165                                                     &olen,
166                                                     buf,
167                                                     sizeof( buf ) ) );
168    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
169                            mbedtls_ecp_tls_write_point( &grp, &P,
170                                                     invalid_fmt,
171                                                     &olen,
172                                                     buf,
173                                                     sizeof( buf ) ) );
174    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
175                            mbedtls_ecp_tls_write_point( &grp, &P,
176                                                     valid_fmt,
177                                                     NULL,
178                                                     buf,
179                                                     sizeof( buf ) ) );
180    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
181                            mbedtls_ecp_tls_write_point( &grp, &P,
182                                                     valid_fmt,
183                                                     &olen,
184                                                     NULL,
185                                                     sizeof( buf ) ) );
186
187    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
188                            mbedtls_ecp_group_load( NULL, valid_group ) );
189
190    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
191                            mbedtls_ecp_tls_read_group( NULL,
192                                                 (const unsigned char **) &buf,
193                                                 sizeof( buf ) ) );
194    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
195                            mbedtls_ecp_tls_read_group( &grp, NULL,
196                                                        sizeof( buf ) ) );
197    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
198                            mbedtls_ecp_tls_read_group( &grp, &null_buf,
199                                                        sizeof( buf ) ) );
200
201    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
202                            mbedtls_ecp_tls_read_group_id( NULL,
203                                                 (const unsigned char **) &buf,
204                                                 sizeof( buf ) ) );
205    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
206                            mbedtls_ecp_tls_read_group_id( &valid_group, NULL,
207                                                        sizeof( buf ) ) );
208    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
209                            mbedtls_ecp_tls_read_group_id( &valid_group,
210                                                           &null_buf,
211                                                           sizeof( buf ) ) );
212
213    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
214                            mbedtls_ecp_tls_write_group( NULL, &olen,
215                                                       buf, sizeof( buf ) ) );
216    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
217                            mbedtls_ecp_tls_write_group( &grp, NULL,
218                                                       buf, sizeof( buf ) ) );
219    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
220                            mbedtls_ecp_tls_write_group( &grp, &olen,
221                                                       NULL, sizeof( buf ) ) );
222
223    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
224                            mbedtls_ecp_mul( NULL, &P, &m, &P,
225                                             rnd_std_rand, NULL ) );
226    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
227                            mbedtls_ecp_mul( &grp, NULL, &m, &P,
228                                             rnd_std_rand, NULL ) );
229    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
230                            mbedtls_ecp_mul( &grp, &P, NULL, &P,
231                                             rnd_std_rand, NULL ) );
232    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
233                            mbedtls_ecp_mul( &grp, &P, &m, NULL,
234                                             rnd_std_rand, NULL ) );
235
236    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
237                            mbedtls_ecp_mul_restartable( NULL, &P, &m, &P,
238                                                 rnd_std_rand, NULL , NULL ) );
239    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
240                            mbedtls_ecp_mul_restartable( &grp, NULL, &m, &P,
241                                                 rnd_std_rand, NULL , NULL ) );
242    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
243                            mbedtls_ecp_mul_restartable( &grp, &P, NULL, &P,
244                                                 rnd_std_rand, NULL , NULL ) );
245    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
246                            mbedtls_ecp_mul_restartable( &grp, &P, &m, NULL,
247                                                 rnd_std_rand, NULL , NULL ) );
248
249    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
250                            mbedtls_ecp_muladd( NULL, &P, &m, &P,
251                                                &m, &P ) );
252    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
253                            mbedtls_ecp_muladd( &grp, NULL, &m, &P,
254                                                &m, &P ) );
255    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
256                            mbedtls_ecp_muladd( &grp, &P, NULL, &P,
257                                                &m, &P ) );
258    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
259                            mbedtls_ecp_muladd( &grp, &P, &m, NULL,
260                                                &m, &P ) );
261    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
262                            mbedtls_ecp_muladd( &grp, &P, &m, &P,
263                                                NULL, &P ) );
264    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
265                            mbedtls_ecp_muladd( &grp, &P, &m, &P,
266                                                &m, NULL ) );
267
268    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
269                            mbedtls_ecp_muladd_restartable( NULL, &P, &m, &P,
270                                                            &m, &P, NULL ) );
271    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
272                            mbedtls_ecp_muladd_restartable( &grp, NULL, &m, &P,
273                                                            &m, &P, NULL ) );
274    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
275                            mbedtls_ecp_muladd_restartable( &grp, &P, NULL, &P,
276                                                            &m, &P, NULL ) );
277    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
278                            mbedtls_ecp_muladd_restartable( &grp, &P, &m, NULL,
279                                                            &m, &P, NULL ) );
280    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
281                            mbedtls_ecp_muladd_restartable( &grp, &P, &m, &P,
282                                                            NULL, &P, NULL ) );
283    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
284                            mbedtls_ecp_muladd_restartable( &grp, &P, &m, &P,
285                                                            &m, NULL, NULL ) );
286
287    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
288                            mbedtls_ecp_check_pubkey( NULL, &P ) );
289    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
290                            mbedtls_ecp_check_pubkey( &grp, NULL ) );
291
292    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
293                            mbedtls_ecp_check_pub_priv( NULL, &kp ) );
294    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
295                            mbedtls_ecp_check_pub_priv( &kp, NULL ) );
296
297    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
298                            mbedtls_ecp_check_privkey( NULL, &m ) );
299    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
300                            mbedtls_ecp_check_privkey( &grp, NULL ) );
301
302    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
303                            mbedtls_ecp_gen_keypair_base( NULL, &P,
304                                                          &m, &P,
305                                                          rnd_std_rand,
306                                                          NULL ) );
307    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
308                            mbedtls_ecp_gen_keypair_base( &grp, NULL,
309                                                          &m, &P,
310                                                          rnd_std_rand,
311                                                          NULL ) );
312    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
313                            mbedtls_ecp_gen_keypair_base( &grp, &P,
314                                                          NULL, &P,
315                                                          rnd_std_rand,
316                                                          NULL ) );
317    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
318                            mbedtls_ecp_gen_keypair_base( &grp, &P,
319                                                          &m, NULL,
320                                                          rnd_std_rand,
321                                                          NULL ) );
322    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
323                            mbedtls_ecp_gen_keypair_base( &grp, &P,
324                                                          &m, &P,
325                                                          NULL,
326                                                          NULL ) );
327
328    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
329                            mbedtls_ecp_gen_keypair( NULL,
330                                                     &m, &P,
331                                                     rnd_std_rand,
332                                                     NULL ) );
333    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
334                            mbedtls_ecp_gen_keypair( &grp,
335                                                     NULL, &P,
336                                                     rnd_std_rand,
337                                                     NULL ) );
338    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
339                            mbedtls_ecp_gen_keypair( &grp,
340                                                     &m, NULL,
341                                                     rnd_std_rand,
342                                                     NULL ) );
343    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
344                            mbedtls_ecp_gen_keypair( &grp,
345                                                     &m, &P,
346                                                     NULL,
347                                                     NULL ) );
348
349    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
350                            mbedtls_ecp_gen_key( valid_group, NULL,
351                                                 rnd_std_rand, NULL ) );
352    TEST_INVALID_PARAM_RET( MBEDTLS_ERR_ECP_BAD_INPUT_DATA,
353                            mbedtls_ecp_gen_key( valid_group, &kp,
354                                                 NULL, NULL ) );
355
356exit:
357    return;
358}
359/* END_CASE */
360
361/* BEGIN_CASE */
362void mbedtls_ecp_curve_info( int id, int tls_id, int size, char * name )
363{
364    const mbedtls_ecp_curve_info *by_id, *by_tls, *by_name;
365
366    by_id   = mbedtls_ecp_curve_info_from_grp_id( id     );
367    by_tls  = mbedtls_ecp_curve_info_from_tls_id( tls_id );
368    by_name = mbedtls_ecp_curve_info_from_name(   name   );
369    TEST_ASSERT( by_id   != NULL );
370    TEST_ASSERT( by_tls  != NULL );
371    TEST_ASSERT( by_name != NULL );
372
373    TEST_ASSERT( by_id == by_tls  );
374    TEST_ASSERT( by_id == by_name );
375
376    TEST_ASSERT( by_id->bit_size == size );
377}
378/* END_CASE */
379
380/* BEGIN_CASE */
381void ecp_check_pub( int grp_id, char * x_hex, char * y_hex, char * z_hex,
382                    int ret )
383{
384    mbedtls_ecp_group grp;
385    mbedtls_ecp_point P;
386
387    mbedtls_ecp_group_init( &grp );
388    mbedtls_ecp_point_init( &P );
389
390    TEST_ASSERT( mbedtls_ecp_group_load( &grp, grp_id ) == 0 );
391
392    TEST_ASSERT( mbedtls_mpi_read_string( &P.X, 16, x_hex ) == 0 );
393    TEST_ASSERT( mbedtls_mpi_read_string( &P.Y, 16, y_hex ) == 0 );
394    TEST_ASSERT( mbedtls_mpi_read_string( &P.Z, 16, z_hex ) == 0 );
395
396    TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &P ) == ret );
397
398exit:
399    mbedtls_ecp_group_free( &grp );
400    mbedtls_ecp_point_free( &P );
401}
402/* END_CASE */
403
404/* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE */
405void ecp_test_vect_restart( int id,
406                            char *dA_str, char *xA_str, char *yA_str,
407                            char *dB_str,  char *xZ_str, char *yZ_str,
408                            int max_ops, int min_restarts, int max_restarts )
409{
410    /*
411     * Test for early restart. Based on test vectors like ecp_test_vect(),
412     * but for the sake of simplicity only does half of each side. It's
413     * important to test both base point and random point, though, as memory
414     * management is different in each case.
415     *
416     * Don't try using too precise bounds for restarts as the exact number
417     * will depend on settings such as MBEDTLS_ECP_FIXED_POINT_OPTIM and
418     * MBEDTLS_ECP_WINDOW_SIZE, as well as implementation details that may
419     * change in the future. A factor 2 is a minimum safety margin.
420     *
421     * For reference, with mbed TLS 2.4 and default settings, for P-256:
422     * - Random point mult:     ~3250M
423     * - Cold base point mult:  ~3300M
424     * - Hot base point mult:   ~1100M
425     * With MBEDTLS_ECP_WINDOW_SIZE set to 2 (minimum):
426     * - Random point mult:     ~3850M
427     */
428    mbedtls_ecp_restart_ctx ctx;
429    mbedtls_ecp_group grp;
430    mbedtls_ecp_point R, P;
431    mbedtls_mpi dA, xA, yA, dB, xZ, yZ;
432    int cnt_restarts;
433    int ret;
434
435    mbedtls_ecp_restart_init( &ctx );
436    mbedtls_ecp_group_init( &grp );
437    mbedtls_ecp_point_init( &R ); mbedtls_ecp_point_init( &P );
438    mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); mbedtls_mpi_init( &yA );
439    mbedtls_mpi_init( &dB ); mbedtls_mpi_init( &xZ ); mbedtls_mpi_init( &yZ );
440
441    TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
442
443    TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_str ) == 0 );
444    TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_str ) == 0 );
445    TEST_ASSERT( mbedtls_mpi_read_string( &yA, 16, yA_str ) == 0 );
446
447    TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_str ) == 0 );
448    TEST_ASSERT( mbedtls_mpi_read_string( &xZ, 16, xZ_str ) == 0 );
449    TEST_ASSERT( mbedtls_mpi_read_string( &yZ, 16, yZ_str ) == 0 );
450
451    mbedtls_ecp_set_max_ops( (unsigned) max_ops );
452
453    /* Base point case */
454    cnt_restarts = 0;
455    do {
456        ECP_PT_RESET( &R );
457        ret = mbedtls_ecp_mul_restartable( &grp, &R, &dA, &grp.G, NULL, NULL, &ctx );
458    } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
459
460    TEST_ASSERT( ret == 0 );
461    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
462    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yA ) == 0 );
463
464    TEST_ASSERT( cnt_restarts >= min_restarts );
465    TEST_ASSERT( cnt_restarts <= max_restarts );
466
467    /* Non-base point case */
468    mbedtls_ecp_copy( &P, &R );
469    cnt_restarts = 0;
470    do {
471        ECP_PT_RESET( &R );
472        ret = mbedtls_ecp_mul_restartable( &grp, &R, &dB, &P, NULL, NULL, &ctx );
473    } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
474
475    TEST_ASSERT( ret == 0 );
476    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
477    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
478
479    TEST_ASSERT( cnt_restarts >= min_restarts );
480    TEST_ASSERT( cnt_restarts <= max_restarts );
481
482    /* Do we leak memory when aborting an operation?
483     * This test only makes sense when we actually restart */
484    if( min_restarts > 0 )
485    {
486        ret = mbedtls_ecp_mul_restartable( &grp, &R, &dB, &P, NULL, NULL, &ctx );
487        TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
488    }
489
490exit:
491    mbedtls_ecp_restart_free( &ctx );
492    mbedtls_ecp_group_free( &grp );
493    mbedtls_ecp_point_free( &R ); mbedtls_ecp_point_free( &P );
494    mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); mbedtls_mpi_free( &yA );
495    mbedtls_mpi_free( &dB ); mbedtls_mpi_free( &xZ ); mbedtls_mpi_free( &yZ );
496}
497/* END_CASE */
498
499/* BEGIN_CASE depends_on:MBEDTLS_ECP_RESTARTABLE */
500void ecp_muladd_restart( int id, char *xR_str, char *yR_str,
501                         char *u1_str, char *u2_str,
502                         char *xQ_str, char *yQ_str,
503                         int max_ops, int min_restarts, int max_restarts )
504{
505    /*
506     * Compute R = u1 * G + u2 * Q
507     * (test vectors mostly taken from ECDSA intermediate results)
508     *
509     * See comments at the top of ecp_test_vect_restart()
510     */
511    mbedtls_ecp_restart_ctx ctx;
512    mbedtls_ecp_group grp;
513    mbedtls_ecp_point R, Q;
514    mbedtls_mpi u1, u2, xR, yR;
515    int cnt_restarts;
516    int ret;
517
518    mbedtls_ecp_restart_init( &ctx );
519    mbedtls_ecp_group_init( &grp );
520    mbedtls_ecp_point_init( &R );
521    mbedtls_ecp_point_init( &Q );
522    mbedtls_mpi_init( &u1 ); mbedtls_mpi_init( &u2 );
523    mbedtls_mpi_init( &xR ); mbedtls_mpi_init( &yR );
524
525    TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
526
527    TEST_ASSERT( mbedtls_mpi_read_string( &u1, 16, u1_str ) == 0 );
528    TEST_ASSERT( mbedtls_mpi_read_string( &u2, 16, u2_str ) == 0 );
529    TEST_ASSERT( mbedtls_mpi_read_string( &xR, 16, xR_str ) == 0 );
530    TEST_ASSERT( mbedtls_mpi_read_string( &yR, 16, yR_str ) == 0 );
531
532    TEST_ASSERT( mbedtls_mpi_read_string( &Q.X, 16, xQ_str ) == 0 );
533    TEST_ASSERT( mbedtls_mpi_read_string( &Q.Y, 16, yQ_str ) == 0 );
534    TEST_ASSERT( mbedtls_mpi_lset( &Q.Z, 1 ) == 0 );
535
536    mbedtls_ecp_set_max_ops( (unsigned) max_ops );
537
538    cnt_restarts = 0;
539    do {
540        ECP_PT_RESET( &R );
541        ret = mbedtls_ecp_muladd_restartable( &grp, &R,
542                                              &u1, &grp.G, &u2, &Q, &ctx );
543    } while( ret == MBEDTLS_ERR_ECP_IN_PROGRESS && ++cnt_restarts );
544
545    TEST_ASSERT( ret == 0 );
546    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xR ) == 0 );
547    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yR ) == 0 );
548
549    TEST_ASSERT( cnt_restarts >= min_restarts );
550    TEST_ASSERT( cnt_restarts <= max_restarts );
551
552    /* Do we leak memory when aborting an operation?
553     * This test only makes sense when we actually restart */
554    if( min_restarts > 0 )
555    {
556        ret = mbedtls_ecp_muladd_restartable( &grp, &R,
557                                              &u1, &grp.G, &u2, &Q, &ctx );
558        TEST_ASSERT( ret == MBEDTLS_ERR_ECP_IN_PROGRESS );
559    }
560
561exit:
562    mbedtls_ecp_restart_free( &ctx );
563    mbedtls_ecp_group_free( &grp );
564    mbedtls_ecp_point_free( &R );
565    mbedtls_ecp_point_free( &Q );
566    mbedtls_mpi_free( &u1 ); mbedtls_mpi_free( &u2 );
567    mbedtls_mpi_free( &xR ); mbedtls_mpi_free( &yR );
568}
569/* END_CASE */
570
571/* BEGIN_CASE */
572void ecp_test_vect( int id, char * dA_str, char * xA_str, char * yA_str,
573                    char * dB_str, char * xB_str, char * yB_str,
574                    char * xZ_str, char * yZ_str )
575{
576    mbedtls_ecp_group grp;
577    mbedtls_ecp_point R;
578    mbedtls_mpi dA, xA, yA, dB, xB, yB, xZ, yZ;
579    rnd_pseudo_info rnd_info;
580
581    mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
582    mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA ); mbedtls_mpi_init( &yA ); mbedtls_mpi_init( &dB );
583    mbedtls_mpi_init( &xB ); mbedtls_mpi_init( &yB ); mbedtls_mpi_init( &xZ ); mbedtls_mpi_init( &yZ );
584    memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
585
586    TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
587
588    TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
589
590    TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_str ) == 0 );
591    TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_str ) == 0 );
592    TEST_ASSERT( mbedtls_mpi_read_string( &yA, 16, yA_str ) == 0 );
593    TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_str ) == 0 );
594    TEST_ASSERT( mbedtls_mpi_read_string( &xB, 16, xB_str ) == 0 );
595    TEST_ASSERT( mbedtls_mpi_read_string( &yB, 16, yB_str ) == 0 );
596    TEST_ASSERT( mbedtls_mpi_read_string( &xZ, 16, xZ_str ) == 0 );
597    TEST_ASSERT( mbedtls_mpi_read_string( &yZ, 16, yZ_str ) == 0 );
598
599    TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G,
600                          &rnd_pseudo_rand, &rnd_info ) == 0 );
601    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
602    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yA ) == 0 );
603    TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
604    TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R, NULL, NULL ) == 0 );
605    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
606    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
607    TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
608
609    TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
610    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 );
611    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yB ) == 0 );
612    TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
613    TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R,
614                          &rnd_pseudo_rand, &rnd_info ) == 0 );
615    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xZ ) == 0 );
616    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.Y, &yZ ) == 0 );
617    TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
618
619exit:
620    mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
621    mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA ); mbedtls_mpi_free( &yA ); mbedtls_mpi_free( &dB );
622    mbedtls_mpi_free( &xB ); mbedtls_mpi_free( &yB ); mbedtls_mpi_free( &xZ ); mbedtls_mpi_free( &yZ );
623}
624/* END_CASE */
625
626/* BEGIN_CASE */
627void ecp_test_vec_x( int id, char * dA_hex, char * xA_hex, char * dB_hex,
628                     char * xB_hex, char * xS_hex )
629{
630    mbedtls_ecp_group grp;
631    mbedtls_ecp_point R;
632    mbedtls_mpi dA, xA, dB, xB, xS;
633    rnd_pseudo_info rnd_info;
634
635    mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &R );
636    mbedtls_mpi_init( &dA ); mbedtls_mpi_init( &xA );
637    mbedtls_mpi_init( &dB ); mbedtls_mpi_init( &xB );
638    mbedtls_mpi_init( &xS );
639    memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
640
641    TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
642
643    TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
644
645    TEST_ASSERT( mbedtls_mpi_read_string( &dA, 16, dA_hex ) == 0 );
646    TEST_ASSERT( mbedtls_mpi_read_string( &dB, 16, dB_hex ) == 0 );
647    TEST_ASSERT( mbedtls_mpi_read_string( &xA, 16, xA_hex ) == 0 );
648    TEST_ASSERT( mbedtls_mpi_read_string( &xB, 16, xB_hex ) == 0 );
649    TEST_ASSERT( mbedtls_mpi_read_string( &xS, 16, xS_hex ) == 0 );
650
651    TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &grp.G,
652                          &rnd_pseudo_rand, &rnd_info ) == 0 );
653    TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
654    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xA ) == 0 );
655
656    TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &R,
657                          &rnd_pseudo_rand, &rnd_info ) == 0 );
658    TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
659    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 );
660
661    TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dB, &grp.G, NULL, NULL ) == 0 );
662    TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
663    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xB ) == 0 );
664
665    TEST_ASSERT( mbedtls_ecp_mul( &grp, &R, &dA, &R, NULL, NULL ) == 0 );
666    TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &R ) == 0 );
667    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &R.X, &xS ) == 0 );
668
669exit:
670    mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &R );
671    mbedtls_mpi_free( &dA ); mbedtls_mpi_free( &xA );
672    mbedtls_mpi_free( &dB ); mbedtls_mpi_free( &xB );
673    mbedtls_mpi_free( &xS );
674}
675/* END_CASE */
676
677/* BEGIN_CASE */
678void ecp_test_mul_rng( int id, data_t * d_hex)
679{
680    mbedtls_ecp_group grp;
681    mbedtls_mpi d;
682    mbedtls_ecp_point Q;
683
684    mbedtls_ecp_group_init( &grp ); mbedtls_mpi_init( &d );
685    mbedtls_ecp_point_init( &Q );
686
687    TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
688
689    TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &grp.G ) == 0 );
690
691    TEST_ASSERT( mbedtls_mpi_read_binary( &d, d_hex->x, d_hex->len ) == 0 );
692
693    TEST_ASSERT( mbedtls_ecp_mul( &grp, &Q, &d, &grp.G, &rnd_zero_rand, NULL )
694                 == MBEDTLS_ERR_ECP_RANDOM_FAILED );
695
696exit:
697    mbedtls_ecp_group_free( &grp ); mbedtls_mpi_free( &d );
698    mbedtls_ecp_point_free( &Q );
699}
700/* END_CASE */
701
702/* BEGIN_CASE */
703void ecp_fast_mod( int id, char * N_str )
704{
705    mbedtls_ecp_group grp;
706    mbedtls_mpi N, R;
707
708    mbedtls_mpi_init( &N ); mbedtls_mpi_init( &R );
709    mbedtls_ecp_group_init( &grp );
710
711    TEST_ASSERT( mbedtls_mpi_read_string( &N, 16, N_str ) == 0 );
712    TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
713    TEST_ASSERT( grp.modp != NULL );
714
715    /*
716     * Store correct result before we touch N
717     */
718    TEST_ASSERT( mbedtls_mpi_mod_mpi( &R, &N, &grp.P ) == 0 );
719
720    TEST_ASSERT( grp.modp( &N ) == 0 );
721    TEST_ASSERT( mbedtls_mpi_bitlen( &N ) <= grp.pbits + 3 );
722
723    /*
724     * Use mod rather than addition/subtraction in case previous test fails
725     */
726    TEST_ASSERT( mbedtls_mpi_mod_mpi( &N, &N, &grp.P ) == 0 );
727    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &N, &R ) == 0 );
728
729exit:
730    mbedtls_mpi_free( &N ); mbedtls_mpi_free( &R );
731    mbedtls_ecp_group_free( &grp );
732}
733/* END_CASE */
734
735/* BEGIN_CASE */
736void ecp_write_binary( int id, char * x, char * y, char * z, int format,
737                       data_t * out, int blen, int ret )
738{
739    mbedtls_ecp_group grp;
740    mbedtls_ecp_point P;
741    unsigned char buf[256];
742    size_t olen;
743
744    memset( buf, 0, sizeof( buf ) );
745
746    mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
747
748    TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
749
750    TEST_ASSERT( mbedtls_mpi_read_string( &P.X, 16, x ) == 0 );
751    TEST_ASSERT( mbedtls_mpi_read_string( &P.Y, 16, y ) == 0 );
752    TEST_ASSERT( mbedtls_mpi_read_string( &P.Z, 16, z ) == 0 );
753
754    TEST_ASSERT( mbedtls_ecp_point_write_binary( &grp, &P, format,
755                                   &olen, buf, blen ) == ret );
756
757    if( ret == 0 )
758    {
759        TEST_ASSERT( mbedtls_test_hexcmp( buf, out->x, olen, out->len ) == 0 );
760    }
761
762exit:
763    mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
764}
765/* END_CASE */
766
767/* BEGIN_CASE */
768void ecp_read_binary( int id, data_t * buf, char * x, char * y, char * z,
769                      int ret )
770{
771    mbedtls_ecp_group grp;
772    mbedtls_ecp_point P;
773    mbedtls_mpi X, Y, Z;
774
775
776    mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
777    mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z );
778
779    TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
780
781    TEST_ASSERT( mbedtls_mpi_read_string( &X, 16, x ) == 0 );
782    TEST_ASSERT( mbedtls_mpi_read_string( &Y, 16, y ) == 0 );
783    TEST_ASSERT( mbedtls_mpi_read_string( &Z, 16, z ) == 0 );
784
785    TEST_ASSERT( mbedtls_ecp_point_read_binary( &grp, &P, buf->x, buf->len ) == ret );
786
787    if( ret == 0 )
788    {
789        TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 );
790        TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 );
791        TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 );
792    }
793
794exit:
795    mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
796    mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z );
797}
798/* END_CASE */
799
800/* BEGIN_CASE */
801void mbedtls_ecp_tls_read_point( int id, data_t * buf, char * x, char * y,
802                                 char * z, int ret )
803{
804    mbedtls_ecp_group grp;
805    mbedtls_ecp_point P;
806    mbedtls_mpi X, Y, Z;
807    const unsigned char *vbuf = buf->x;
808
809
810    mbedtls_ecp_group_init( &grp ); mbedtls_ecp_point_init( &P );
811    mbedtls_mpi_init( &X ); mbedtls_mpi_init( &Y ); mbedtls_mpi_init( &Z );
812
813    TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
814
815    TEST_ASSERT( mbedtls_mpi_read_string( &X, 16, x ) == 0 );
816    TEST_ASSERT( mbedtls_mpi_read_string( &Y, 16, y ) == 0 );
817    TEST_ASSERT( mbedtls_mpi_read_string( &Z, 16, z ) == 0 );
818
819    TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &P, &vbuf, buf->len ) == ret );
820
821    if( ret == 0 )
822    {
823        TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.X, &X ) == 0 );
824        TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Y, &Y ) == 0 );
825        TEST_ASSERT( mbedtls_mpi_cmp_mpi( &P.Z, &Z ) == 0 );
826        TEST_ASSERT( (uint32_t)( vbuf - buf->x ) == buf->len );
827    }
828
829exit:
830    mbedtls_ecp_group_free( &grp ); mbedtls_ecp_point_free( &P );
831    mbedtls_mpi_free( &X ); mbedtls_mpi_free( &Y ); mbedtls_mpi_free( &Z );
832}
833/* END_CASE */
834
835/* BEGIN_CASE */
836void ecp_tls_write_read_point( int id )
837{
838    mbedtls_ecp_group grp;
839    mbedtls_ecp_point pt;
840    unsigned char buf[256];
841    const unsigned char *vbuf;
842    size_t olen;
843
844    mbedtls_ecp_group_init( &grp );
845    mbedtls_ecp_point_init( &pt );
846
847    TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
848
849    memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
850    TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G,
851                    MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
852    TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen )
853                 == MBEDTLS_ERR_ECP_FEATURE_UNAVAILABLE );
854    TEST_ASSERT( vbuf == buf + olen );
855
856    memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
857    TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &grp.G,
858                    MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
859    TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
860    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.X, &pt.X ) == 0 );
861    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Y, &pt.Y ) == 0 );
862    TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp.G.Z, &pt.Z ) == 0 );
863    TEST_ASSERT( vbuf == buf + olen );
864
865    memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
866    TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 );
867    TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt,
868                    MBEDTLS_ECP_PF_COMPRESSED, &olen, buf, 256 ) == 0 );
869    TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
870    TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) );
871    TEST_ASSERT( vbuf == buf + olen );
872
873    memset( buf, 0x00, sizeof( buf ) ); vbuf = buf;
874    TEST_ASSERT( mbedtls_ecp_set_zero( &pt ) == 0 );
875    TEST_ASSERT( mbedtls_ecp_tls_write_point( &grp, &pt,
876                    MBEDTLS_ECP_PF_UNCOMPRESSED, &olen, buf, 256 ) == 0 );
877    TEST_ASSERT( mbedtls_ecp_tls_read_point( &grp, &pt, &vbuf, olen ) == 0 );
878    TEST_ASSERT( mbedtls_ecp_is_zero( &pt ) );
879    TEST_ASSERT( vbuf == buf + olen );
880
881exit:
882    mbedtls_ecp_group_free( &grp );
883    mbedtls_ecp_point_free( &pt );
884}
885/* END_CASE */
886
887/* BEGIN_CASE */
888void mbedtls_ecp_tls_read_group( data_t * buf, int result, int bits,
889                                 int record_len )
890{
891    mbedtls_ecp_group grp;
892    const unsigned char *vbuf = buf->x;
893    int ret;
894
895    mbedtls_ecp_group_init( &grp );
896
897    ret = mbedtls_ecp_tls_read_group( &grp, &vbuf, buf->len );
898
899    TEST_ASSERT( ret == result );
900    if( ret == 0)
901    {
902        TEST_ASSERT( mbedtls_mpi_bitlen( &grp.P ) == (size_t) bits );
903        TEST_ASSERT( vbuf - buf->x ==  record_len);
904    }
905
906exit:
907    mbedtls_ecp_group_free( &grp );
908}
909/* END_CASE */
910
911/* BEGIN_CASE */
912void ecp_tls_write_read_group( int id )
913{
914    mbedtls_ecp_group grp1, grp2;
915    unsigned char buf[10];
916    const unsigned char *vbuf = buf;
917    size_t len;
918    int ret;
919
920    mbedtls_ecp_group_init( &grp1 );
921    mbedtls_ecp_group_init( &grp2 );
922    memset( buf, 0x00, sizeof( buf ) );
923
924    TEST_ASSERT( mbedtls_ecp_group_load( &grp1, id ) == 0 );
925
926    TEST_ASSERT( mbedtls_ecp_tls_write_group( &grp1, &len, buf, 10 ) == 0 );
927    ret = mbedtls_ecp_tls_read_group( &grp2, &vbuf, len );
928    TEST_ASSERT( ret == 0 );
929
930    if( ret == 0 )
931    {
932        TEST_ASSERT( mbedtls_mpi_cmp_mpi( &grp1.N, &grp2.N ) == 0 );
933        TEST_ASSERT( grp1.id == grp2.id );
934    }
935
936exit:
937    mbedtls_ecp_group_free( &grp1 );
938    mbedtls_ecp_group_free( &grp2 );
939}
940/* END_CASE */
941
942/* BEGIN_CASE */
943void mbedtls_ecp_check_privkey( int id, char * key_hex, int ret )
944{
945    mbedtls_ecp_group grp;
946    mbedtls_mpi d;
947
948    mbedtls_ecp_group_init( &grp );
949    mbedtls_mpi_init( &d );
950
951    TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
952    TEST_ASSERT( mbedtls_mpi_read_string( &d, 16, key_hex ) == 0 );
953
954    TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == ret );
955
956exit:
957    mbedtls_ecp_group_free( &grp );
958    mbedtls_mpi_free( &d );
959}
960/* END_CASE */
961
962/* BEGIN_CASE */
963void mbedtls_ecp_check_pub_priv( int id_pub, char * Qx_pub, char * Qy_pub,
964                                 int id, char * d, char * Qx, char * Qy,
965                                 int ret )
966{
967    mbedtls_ecp_keypair pub, prv;
968
969    mbedtls_ecp_keypair_init( &pub );
970    mbedtls_ecp_keypair_init( &prv );
971
972    if( id_pub != MBEDTLS_ECP_DP_NONE )
973        TEST_ASSERT( mbedtls_ecp_group_load( &pub.grp, id_pub ) == 0 );
974    TEST_ASSERT( mbedtls_ecp_point_read_string( &pub.Q, 16, Qx_pub, Qy_pub ) == 0 );
975
976    if( id != MBEDTLS_ECP_DP_NONE )
977        TEST_ASSERT( mbedtls_ecp_group_load( &prv.grp, id ) == 0 );
978    TEST_ASSERT( mbedtls_ecp_point_read_string( &prv.Q, 16, Qx, Qy ) == 0 );
979    TEST_ASSERT( mbedtls_mpi_read_string( &prv.d, 16, d ) == 0 );
980
981    TEST_ASSERT( mbedtls_ecp_check_pub_priv( &pub, &prv ) == ret );
982
983exit:
984    mbedtls_ecp_keypair_free( &pub );
985    mbedtls_ecp_keypair_free( &prv );
986}
987/* END_CASE */
988
989/* BEGIN_CASE */
990void mbedtls_ecp_gen_keypair( int id )
991{
992    mbedtls_ecp_group grp;
993    mbedtls_ecp_point Q;
994    mbedtls_mpi d;
995    rnd_pseudo_info rnd_info;
996
997    mbedtls_ecp_group_init( &grp );
998    mbedtls_ecp_point_init( &Q );
999    mbedtls_mpi_init( &d );
1000    memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
1001
1002    TEST_ASSERT( mbedtls_ecp_group_load( &grp, id ) == 0 );
1003
1004    TEST_ASSERT( mbedtls_ecp_gen_keypair( &grp, &d, &Q, &rnd_pseudo_rand, &rnd_info )
1005                 == 0 );
1006
1007    TEST_ASSERT( mbedtls_ecp_check_pubkey( &grp, &Q ) == 0 );
1008    TEST_ASSERT( mbedtls_ecp_check_privkey( &grp, &d ) == 0 );
1009
1010exit:
1011    mbedtls_ecp_group_free( &grp );
1012    mbedtls_ecp_point_free( &Q );
1013    mbedtls_mpi_free( &d );
1014}
1015/* END_CASE */
1016
1017/* BEGIN_CASE */
1018void mbedtls_ecp_gen_key( int id )
1019{
1020    mbedtls_ecp_keypair key;
1021    rnd_pseudo_info rnd_info;
1022
1023    mbedtls_ecp_keypair_init( &key );
1024    memset( &rnd_info, 0x00, sizeof( rnd_pseudo_info ) );
1025
1026    TEST_ASSERT( mbedtls_ecp_gen_key( id, &key, &rnd_pseudo_rand, &rnd_info ) == 0 );
1027
1028    TEST_ASSERT( mbedtls_ecp_check_pubkey( &key.grp, &key.Q ) == 0 );
1029    TEST_ASSERT( mbedtls_ecp_check_privkey( &key.grp, &key.d ) == 0 );
1030
1031exit:
1032    mbedtls_ecp_keypair_free( &key );
1033}
1034/* END_CASE */
1035
1036/* BEGIN_CASE depends_on:MBEDTLS_SELF_TEST */
1037void ecp_selftest(  )
1038{
1039    TEST_ASSERT( mbedtls_ecp_self_test( 1 ) == 0 );
1040}
1041/* END_CASE */
1042