2022-09-30 14:02:16 +02:00
|
|
|
/* BEGIN_HEADER */
|
|
|
|
#include "mbedtls/bignum.h"
|
|
|
|
#include "mbedtls/entropy.h"
|
|
|
|
#include "bignum_mod.h"
|
|
|
|
#include "constant_time_internal.h"
|
|
|
|
#include "test/constant_flow.h"
|
|
|
|
/* END_HEADER */
|
|
|
|
|
|
|
|
/* BEGIN_DEPENDENCIES
|
|
|
|
* depends_on:MBEDTLS_BIGNUM_C
|
|
|
|
* END_DEPENDENCIES
|
|
|
|
*/
|
|
|
|
|
|
|
|
/* BEGIN_CASE */
|
2022-11-24 19:20:26 +01:00
|
|
|
void mpi_mod_setup( int int_rep, int iret )
|
2022-09-30 14:02:16 +02:00
|
|
|
{
|
|
|
|
#define MLIMBS 8
|
|
|
|
mbedtls_mpi_uint mp[MLIMBS];
|
|
|
|
mbedtls_mpi_mod_modulus m;
|
|
|
|
int ret;
|
|
|
|
|
2022-10-27 16:58:02 +02:00
|
|
|
memset( mp, 0xFF, sizeof(mp) );
|
2022-09-30 14:02:16 +02:00
|
|
|
|
|
|
|
mbedtls_mpi_mod_modulus_init( &m );
|
2022-11-24 19:20:26 +01:00
|
|
|
ret = mbedtls_mpi_mod_modulus_setup( &m, mp, MLIMBS, int_rep );
|
2022-09-30 14:02:16 +02:00
|
|
|
TEST_EQUAL( ret, iret );
|
|
|
|
|
2022-10-19 02:48:32 +02:00
|
|
|
/* Only test if the constants have been set-up */
|
|
|
|
if ( ret == 0 && int_rep == MBEDTLS_MPI_MOD_REP_MONTGOMERY )
|
|
|
|
{
|
|
|
|
/* Test that the consts have been calculated */
|
|
|
|
TEST_ASSERT( m.rep.mont.rr != NULL );
|
|
|
|
TEST_ASSERT( m.rep.mont.mm != 0 );
|
|
|
|
|
|
|
|
}
|
|
|
|
|
2022-09-30 14:02:16 +02:00
|
|
|
/* Address sanitiser should catch if we try to free mp */
|
|
|
|
mbedtls_mpi_mod_modulus_free( &m );
|
|
|
|
|
|
|
|
/* Make sure that the modulus doesn't have reference to mp anymore */
|
|
|
|
TEST_ASSERT( m.p != mp );
|
|
|
|
|
2022-10-19 02:48:32 +02:00
|
|
|
/* Only test if the constants have been set-up */
|
|
|
|
if ( ret == 0 && int_rep == MBEDTLS_MPI_MOD_REP_MONTGOMERY )
|
|
|
|
{
|
|
|
|
/* Verify the data and pointers allocated have been properly wiped */
|
|
|
|
TEST_ASSERT( m.rep.mont.rr == NULL );
|
|
|
|
TEST_ASSERT( m.rep.mont.mm == 0 );
|
|
|
|
}
|
2022-09-30 14:02:16 +02:00
|
|
|
exit:
|
|
|
|
/* It should be safe to call an mbedtls free several times */
|
|
|
|
mbedtls_mpi_mod_modulus_free( &m );
|
|
|
|
|
|
|
|
#undef MLIMBS
|
|
|
|
}
|
|
|
|
/* END_CASE */
|
2022-11-02 15:35:17 +01:00
|
|
|
|
|
|
|
/* BEGIN MERGE SLOT 1 */
|
|
|
|
|
|
|
|
/* END MERGE SLOT 1 */
|
|
|
|
|
|
|
|
/* BEGIN MERGE SLOT 2 */
|
|
|
|
|
|
|
|
/* END MERGE SLOT 2 */
|
|
|
|
|
|
|
|
/* BEGIN MERGE SLOT 3 */
|
|
|
|
|
|
|
|
/* END MERGE SLOT 3 */
|
|
|
|
|
|
|
|
/* BEGIN MERGE SLOT 4 */
|
|
|
|
|
|
|
|
/* END MERGE SLOT 4 */
|
|
|
|
|
|
|
|
/* BEGIN MERGE SLOT 5 */
|
|
|
|
|
|
|
|
/* END MERGE SLOT 5 */
|
|
|
|
|
|
|
|
/* BEGIN MERGE SLOT 6 */
|
|
|
|
|
|
|
|
/* END MERGE SLOT 6 */
|
|
|
|
|
|
|
|
/* BEGIN MERGE SLOT 7 */
|
2022-11-10 17:56:02 +01:00
|
|
|
/* BEGIN_CASE */
|
2022-11-24 10:09:47 +01:00
|
|
|
void mpi_residue_setup( char * input_X, char * input_Y, int ret )
|
2022-11-16 17:29:15 +01:00
|
|
|
{
|
|
|
|
mbedtls_mpi_uint *N = NULL;
|
|
|
|
mbedtls_mpi_uint *R = NULL;
|
2022-11-24 10:09:47 +01:00
|
|
|
size_t n_limbs, r_limbs;
|
2022-11-16 17:29:15 +01:00
|
|
|
mbedtls_mpi_mod_modulus m;
|
|
|
|
mbedtls_mpi_mod_residue r;
|
|
|
|
|
|
|
|
mbedtls_mpi_mod_modulus_init( &m );
|
|
|
|
|
2022-11-24 10:09:47 +01:00
|
|
|
/* Allocate the memory for intermediate data structures */
|
|
|
|
TEST_EQUAL( 0, mbedtls_test_read_mpi_core( &N, &n_limbs, input_X ) );
|
|
|
|
TEST_EQUAL( 0, mbedtls_test_read_mpi_core( &R, &r_limbs, input_Y ) );
|
|
|
|
|
2022-11-16 17:29:15 +01:00
|
|
|
TEST_EQUAL( 0, mbedtls_mpi_mod_modulus_setup( &m, N, n_limbs,
|
2022-11-24 19:20:26 +01:00
|
|
|
MBEDTLS_MPI_MOD_REP_MONTGOMERY ) );
|
2022-11-16 17:29:15 +01:00
|
|
|
|
2022-11-24 10:09:47 +01:00
|
|
|
TEST_EQUAL( ret, mbedtls_mpi_mod_residue_setup( &r, &m, R , r_limbs ) );
|
2022-11-16 17:29:15 +01:00
|
|
|
|
|
|
|
exit:
|
|
|
|
mbedtls_mpi_mod_modulus_free( &m );
|
|
|
|
mbedtls_free( N );
|
|
|
|
mbedtls_free( R );
|
|
|
|
}
|
|
|
|
/* END_CASE */
|
2022-11-24 10:09:47 +01:00
|
|
|
|
2022-11-16 17:29:15 +01:00
|
|
|
/* BEGIN_CASE */
|
2022-11-10 17:56:02 +01:00
|
|
|
void mpi_mod_io_neg( )
|
|
|
|
{
|
|
|
|
mbedtls_mpi_uint *N = NULL;
|
|
|
|
mbedtls_mpi_uint *R = NULL;
|
|
|
|
mbedtls_mpi_uint *N2 = NULL;
|
|
|
|
mbedtls_mpi_uint *R2 = NULL;
|
|
|
|
unsigned char *r_buff = NULL;
|
|
|
|
|
|
|
|
size_t n_limbs, r_limbs, n2_limbs, r2_limbs;
|
|
|
|
|
|
|
|
mbedtls_mpi_mod_modulus m;
|
|
|
|
mbedtls_mpi_mod_residue r;
|
|
|
|
mbedtls_mpi_mod_modulus m2;
|
|
|
|
mbedtls_mpi_mod_residue rn = { NULL, 0 };
|
|
|
|
|
2022-11-24 12:04:11 +01:00
|
|
|
const char *hex_residue_single = "01";
|
|
|
|
const char *hex_modulus_single = "fe";
|
|
|
|
const char *hex_residue_multi = "7ffffffffffffffffffffffffffffff0";
|
|
|
|
const char *hex_modulus_multi = "7ffffffffffffffffffffffffffffff1";
|
|
|
|
|
2022-11-10 17:56:02 +01:00
|
|
|
const size_t buff_bytes = 1024;
|
|
|
|
|
2022-11-25 16:57:04 +01:00
|
|
|
mbedtls_mpi_mod_modulus_init( &m );
|
|
|
|
mbedtls_mpi_mod_modulus_init( &m2 );
|
|
|
|
|
2022-11-10 17:56:02 +01:00
|
|
|
/* Allocate the memory for intermediate data structures */
|
2022-11-24 12:04:11 +01:00
|
|
|
TEST_EQUAL( 0, mbedtls_test_read_mpi_core( &N, &n_limbs, hex_modulus_single ) );
|
|
|
|
TEST_EQUAL( 0, mbedtls_test_read_mpi_core( &R, &r_limbs, hex_residue_single ) );
|
|
|
|
TEST_EQUAL( 0, mbedtls_test_read_mpi_core( &N2, &n2_limbs, hex_modulus_multi ) );
|
|
|
|
TEST_EQUAL( 0, mbedtls_test_read_mpi_core( &R2, &r2_limbs, hex_residue_multi ) );
|
2022-11-10 17:56:02 +01:00
|
|
|
|
|
|
|
/* Allocate more than required space on buffer so we can test for input_r > mpi */
|
|
|
|
ASSERT_ALLOC( r_buff, buff_bytes );
|
|
|
|
memset( r_buff, 0x1, 1 );
|
|
|
|
|
2022-11-24 19:02:46 +01:00
|
|
|
mbedtls_mpi_mod_ext_rep endian = MBEDTLS_MPI_MOD_EXT_REP_LE;
|
2022-11-10 17:56:02 +01:00
|
|
|
TEST_EQUAL( 0, mbedtls_mpi_mod_modulus_setup( &m, N, n_limbs,
|
2022-11-24 19:20:26 +01:00
|
|
|
MBEDTLS_MPI_MOD_REP_MONTGOMERY ) );
|
2022-11-10 17:56:02 +01:00
|
|
|
|
|
|
|
TEST_EQUAL( 0, mbedtls_mpi_mod_residue_setup( &r, &m, R , n_limbs ) );
|
|
|
|
|
|
|
|
/* Pass for input_r < modulo */
|
2022-11-24 19:02:46 +01:00
|
|
|
TEST_EQUAL( 0, mbedtls_mpi_mod_read( &r, &m, r_buff, 1, endian ) );
|
2022-11-10 17:56:02 +01:00
|
|
|
|
2022-11-24 12:04:11 +01:00
|
|
|
/* Pass for input_r == modulo -1 */
|
2022-11-10 17:56:02 +01:00
|
|
|
memset( r_buff, 0xfd, buff_bytes );
|
2022-11-24 19:02:46 +01:00
|
|
|
TEST_EQUAL( 0, mbedtls_mpi_mod_read( &r, &m, r_buff, 1, endian ) );
|
2022-11-10 17:56:02 +01:00
|
|
|
|
|
|
|
/* modulo->p == NULL || residue->p == NULL ( m2 has not been set-up ) */
|
2022-11-24 19:02:46 +01:00
|
|
|
TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
|
|
|
|
mbedtls_mpi_mod_read( &r, &m2, r_buff, 1, endian ) );
|
|
|
|
TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
|
|
|
|
mbedtls_mpi_mod_read( &rn, &m, r_buff, 1, endian ) );
|
|
|
|
TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
|
|
|
|
mbedtls_mpi_mod_write( &r, &m2, r_buff, 1, endian ) );
|
|
|
|
TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
|
|
|
|
mbedtls_mpi_mod_write( &rn, &m, r_buff, 1, endian ) );
|
2022-11-10 17:56:02 +01:00
|
|
|
|
|
|
|
/* Fail for r_limbs < m->limbs */
|
|
|
|
r.limbs = m.limbs - 1;
|
2022-11-24 19:02:46 +01:00
|
|
|
TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
|
|
|
|
mbedtls_mpi_mod_read( &r, &m, r_buff, 1, endian ) );
|
|
|
|
TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
|
|
|
|
mbedtls_mpi_mod_write( &rn, &m, r_buff, 1, endian ) );
|
2022-11-10 17:56:02 +01:00
|
|
|
r.limbs = r_limbs;
|
|
|
|
|
|
|
|
/* Fail if input_r >= modulo m */
|
|
|
|
/* input_r = modulo */
|
|
|
|
memset( r_buff, 0xfe, buff_bytes );
|
2022-11-24 19:02:46 +01:00
|
|
|
TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
|
|
|
|
mbedtls_mpi_mod_read( &r, &m, r_buff, 1, endian ) );
|
2022-11-10 17:56:02 +01:00
|
|
|
|
|
|
|
/* input_r > modulo */
|
|
|
|
memset( r_buff, 0xff, buff_bytes );
|
2022-11-24 19:02:46 +01:00
|
|
|
TEST_EQUAL( MBEDTLS_ERR_MPI_BAD_INPUT_DATA,
|
|
|
|
mbedtls_mpi_mod_read( &r, &m, r_buff, 1, endian ) );
|
2022-11-10 17:56:02 +01:00
|
|
|
|
|
|
|
/* Data too large to fit */
|
2022-11-24 19:02:46 +01:00
|
|
|
TEST_EQUAL( MBEDTLS_ERR_MPI_BUFFER_TOO_SMALL,
|
|
|
|
mbedtls_mpi_mod_read( &r, &m, r_buff, buff_bytes, endian ) );
|
2022-11-10 17:56:02 +01:00
|
|
|
|
|
|
|
/* Read the two limbs input data into a larger modulus and residue */
|
|
|
|
TEST_EQUAL( 0, mbedtls_mpi_mod_modulus_setup( &m2, N2, n2_limbs,
|
2022-11-24 19:20:26 +01:00
|
|
|
MBEDTLS_MPI_MOD_REP_MONTGOMERY ) );
|
2022-11-10 17:56:02 +01:00
|
|
|
rn.p = R2;
|
|
|
|
rn.limbs = r2_limbs;
|
2022-11-24 19:02:46 +01:00
|
|
|
TEST_EQUAL( MBEDTLS_ERR_MPI_BUFFER_TOO_SMALL,
|
|
|
|
mbedtls_mpi_mod_write( &rn, &m2, r_buff, 1, endian ) );
|
2022-11-02 15:35:17 +01:00
|
|
|
|
2022-11-10 17:56:02 +01:00
|
|
|
exit:
|
|
|
|
mbedtls_mpi_mod_modulus_free( &m );
|
|
|
|
mbedtls_mpi_mod_modulus_free( &m2 );
|
|
|
|
mbedtls_free( N );
|
|
|
|
mbedtls_free( R );
|
|
|
|
mbedtls_free( N2 );
|
|
|
|
mbedtls_free( R2 );
|
|
|
|
mbedtls_free( r_buff );
|
|
|
|
}
|
|
|
|
/* END_CASE */
|
|
|
|
|
|
|
|
/* BEGIN_CASE */
|
2022-11-24 19:02:46 +01:00
|
|
|
void mpi_mod_io( char * input_N, data_t * input_A, int endian )
|
2022-11-10 17:56:02 +01:00
|
|
|
{
|
|
|
|
mbedtls_mpi_uint *N = NULL;
|
|
|
|
mbedtls_mpi_uint *R = NULL;
|
|
|
|
unsigned char *r_buff = NULL;
|
|
|
|
mbedtls_mpi_mod_modulus m;
|
|
|
|
mbedtls_mpi_mod_residue r;
|
|
|
|
size_t n_limbs, n_bytes, a_bytes;
|
|
|
|
|
2022-11-25 16:57:04 +01:00
|
|
|
mbedtls_mpi_mod_modulus_init( &m );
|
|
|
|
|
2022-11-10 17:56:02 +01:00
|
|
|
/* Read inputs */
|
|
|
|
TEST_EQUAL( 0, mbedtls_test_read_mpi_core( &N, &n_limbs, input_N ) );
|
|
|
|
n_bytes = n_limbs * sizeof( mbedtls_mpi_uint );
|
|
|
|
a_bytes = input_A->len * sizeof( char );
|
|
|
|
|
|
|
|
/* Allocate the memory for intermediate data structures */
|
|
|
|
ASSERT_ALLOC( R, n_bytes );
|
|
|
|
ASSERT_ALLOC( r_buff, a_bytes );
|
|
|
|
|
|
|
|
/* Test that input's size is not greater to modulo's */
|
|
|
|
TEST_LE_U(a_bytes, n_bytes );
|
|
|
|
|
|
|
|
/* Init Structures */
|
2022-11-24 19:20:26 +01:00
|
|
|
TEST_EQUAL( 0, mbedtls_mpi_mod_modulus_setup( &m, N, n_limbs,
|
2022-11-10 17:56:02 +01:00
|
|
|
MBEDTLS_MPI_MOD_REP_MONTGOMERY ) );
|
|
|
|
|
|
|
|
/* Enforcing p_limbs >= m->limbs */
|
2022-11-24 19:02:46 +01:00
|
|
|
TEST_EQUAL( 0, mbedtls_mpi_mod_residue_setup( &r, &m, R, n_limbs ) );
|
2022-11-10 17:56:02 +01:00
|
|
|
|
2022-11-24 19:02:46 +01:00
|
|
|
TEST_EQUAL( 0, mbedtls_mpi_mod_read( &r, &m, input_A->x, input_A->len,
|
|
|
|
endian ) );
|
2022-11-10 17:56:02 +01:00
|
|
|
|
2022-11-24 19:02:46 +01:00
|
|
|
TEST_EQUAL( 0, mbedtls_mpi_mod_write( &r, &m, r_buff, a_bytes,
|
|
|
|
endian ) );
|
2022-11-10 17:56:02 +01:00
|
|
|
|
|
|
|
ASSERT_COMPARE( r_buff, a_bytes, input_A->x, a_bytes );
|
|
|
|
exit:
|
|
|
|
mbedtls_mpi_mod_modulus_free( &m );
|
|
|
|
mbedtls_free( N );
|
|
|
|
mbedtls_free( R );
|
|
|
|
mbedtls_free( r_buff );
|
|
|
|
}
|
|
|
|
/* END_CASE */
|
2022-11-02 15:35:17 +01:00
|
|
|
/* END MERGE SLOT 7 */
|
|
|
|
|
|
|
|
/* BEGIN MERGE SLOT 8 */
|
|
|
|
|
|
|
|
/* END MERGE SLOT 8 */
|
|
|
|
|
|
|
|
/* BEGIN MERGE SLOT 9 */
|
|
|
|
|
|
|
|
/* END MERGE SLOT 9 */
|
|
|
|
|
|
|
|
/* BEGIN MERGE SLOT 10 */
|
|
|
|
|
|
|
|
/* END MERGE SLOT 10 */
|