mirror of
https://github.com/guanzhi/GmSSL.git
synced 2026-05-06 16:36:16 +08:00
Add ECDSA with curve P-256
for TLS testing
This commit is contained in:
Zhi Guan
128
tests/bntest.c
Normal file
128
tests/bntest.c
Normal file
@@ -0,0 +1,128 @@
|
||||
/*
|
||||
* Copyright 2014-2026 The GmSSL Project. All Rights Reserved.
|
||||
*
|
||||
* Licensed under the Apache License, Version 2.0 (the License); you may
|
||||
* not use this file except in compliance with the License.
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*/
|
||||
|
||||
|
||||
#include <stdio.h>
|
||||
#include <string.h>
|
||||
#include <stdlib.h>
|
||||
#include <stdint.h>
|
||||
#include <gmssl/hex.h>
|
||||
#include <gmssl/rand.h>
|
||||
#include <gmssl/error.h>
|
||||
#include <gmssl/bn.h>
|
||||
|
||||
|
||||
static int test_print_consts(void)
|
||||
{
|
||||
// secp256r1 parameters
|
||||
char *p = "FFFFFFFF00000001000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFF";
|
||||
char *b = "5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b";
|
||||
char *x = "6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296";
|
||||
char *y = "4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5";
|
||||
char *n = "FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC632551";
|
||||
char *u_p = "0000000100000000fffffffffffffffefffffffefffffffeffffffff0000000000000003"; // floor(2^512/p)
|
||||
char *u_n = "0000000100000000fffffffffffffffeffffffff43190552df1a6c21012ffd85eedf9bfe"; // floor(2^512/n)
|
||||
|
||||
int k = 8;
|
||||
uint32_t bn[9];
|
||||
uint8_t buf[36];
|
||||
size_t len;
|
||||
|
||||
hex_to_bytes(p, 64, buf, &len);
|
||||
bn_from_bytes(bn, k, buf);
|
||||
bn_print(stderr, 0, 4, "p", bn, k);
|
||||
|
||||
hex_to_bytes(b, 64, buf, &len);
|
||||
bn_from_bytes(bn, k, buf);
|
||||
bn_print(stderr, 0, 4, "a", bn, k);
|
||||
|
||||
hex_to_bytes(x, 64, buf, &len);
|
||||
bn_from_bytes(bn, k, buf);
|
||||
bn_print(stderr, 0, 4, "x", bn, k);
|
||||
|
||||
hex_to_bytes(y, 64, buf, &len);
|
||||
bn_from_bytes(bn, k, buf);
|
||||
bn_print(stderr, 0, 4, "y", bn, k);
|
||||
|
||||
hex_to_bytes(n, 64, buf, &len);
|
||||
bn_from_bytes(bn, k, buf);
|
||||
bn_print(stderr, 0, 4, "n", bn, k);
|
||||
|
||||
hex_to_bytes(u_p, 72, buf, &len);
|
||||
bn_from_bytes(bn, k + 1, buf);
|
||||
bn_print(stderr, 0, 4, "u_p = 2^512//p", bn, k + 1);
|
||||
|
||||
hex_to_bytes(u_n, 72, buf, &len);
|
||||
bn_from_bytes(bn, k + 1, buf);
|
||||
bn_print(stderr, 0, 4, "u_n = 2^512//n", bn, k + 1);
|
||||
|
||||
printf("%s() ok\n", __FUNCTION__);
|
||||
return 1;
|
||||
}
|
||||
|
||||
static int test_secp256r1(void)
|
||||
{
|
||||
char *x_hex = "6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296";
|
||||
char *p_hex = "FFFFFFFF00000001000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFF";
|
||||
|
||||
int c;
|
||||
|
||||
uint32_t a[8];
|
||||
uint32_t r[8];
|
||||
uint8_t buf[32];
|
||||
size_t len;
|
||||
|
||||
hex_to_bytes(x_hex, 64, buf, &len);
|
||||
|
||||
bn_from_bytes(a, 8, buf);
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
bn_add(r, a, a, 8);
|
||||
bn_add(r, r, a, 8);
|
||||
|
||||
bn_print(stderr, 0, 4, "3*x", a, 8);
|
||||
|
||||
uint32_t p[8];
|
||||
|
||||
hex_to_bytes(p_hex, 64, buf, &len);
|
||||
bn_from_bytes(p, 8, buf);
|
||||
|
||||
|
||||
c = bn_sub(r, a, p, 8);
|
||||
printf("carray = %d\n", c);
|
||||
|
||||
|
||||
// 我知道了，这里有一个进位被忽略了
|
||||
if (bn_cmp(a, p, 8) >= 0) {
|
||||
error_print();
|
||||
} else {
|
||||
error_print();
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
printf("%s() ok\n", __FUNCTION__);
|
||||
return 1;
|
||||
}
|
||||
|
||||
int main(void)
|
||||
{
|
||||
if (test_print_consts() != 1) goto err;
|
||||
if (test_secp256r1() != 1) goto err;
|
||||
|
||||
printf("%s all tests passed\n", __FILE__);
|
||||
return 0;
|
||||
err:
|
||||
error_print();
|
||||
return 1;
|
||||
}
|
||||
92
tests/ecdsatest.c
Normal file
92
tests/ecdsatest.c
Normal file
@@ -0,0 +1,92 @@
|
||||
/*
|
||||
* Copyright 2014-2026 The GmSSL Project. All Rights Reserved.
|
||||
*
|
||||
* Licensed under the Apache License, Version 2.0 (the License); you may
|
||||
* not use this file except in compliance with the License.
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*/
|
||||
|
||||
|
||||
#include <stdio.h>
|
||||
#include <string.h>
|
||||
#include <stdlib.h>
|
||||
#include <stdint.h>
|
||||
#include <gmssl/bn.h>
|
||||
#include <gmssl/hex.h>
|
||||
#include <gmssl/rand.h>
|
||||
#include <gmssl/error.h>
|
||||
#include <gmssl/ecdsa.h>
|
||||
|
||||
/*
|
||||
d 0x5
|
||||
xP 0x51590b7a515140d2d784c85608668fdfef8c82fd1f5be52421554a0dc3d033ed
|
||||
yP 0xe0c17da8904a727d8ae1bf36bf8a79260d012f00d4d80888d1d0bb44fda16da4
|
||||
x1 0x5ecbe4d1a6330a44c8f7ef951d4bf165e6c6b721efada985fb41661bc6e7fd6c
|
||||
r 0x5ecbe4d1a6330a44c8f7ef951d4bf165e6c6b721efada985fb41661bc6e7fd6c
|
||||
s 0x48a928086a55111cf99d39f886293cff41a8dda957c43b0851846697f76199ef
|
||||
x1 0x5ecbe4d1a6330a44c8f7ef951d4bf165e6c6b721efada985fb41661bc6e7fd6c
|
||||
v 0x5ecbe4d1a6330a44c8f7ef951d4bf165e6c6b721efada985fb41661bc6e7fd6c
|
||||
*/
|
||||
|
||||
// 这个签名是没有问题的，看来验证签名是有问题的
|
||||
static int test_ecdsa(void)
|
||||
{
|
||||
SECP256R1_KEY key;
|
||||
ECDSA_SIGNATURE sig;
|
||||
uint8_t dgst[32];
|
||||
secp256r1_t d;
|
||||
secp256r1_t k;
|
||||
|
||||
// d = 5
|
||||
bn_set_word(d, 5, 8);
|
||||
secp256r1_key_set_private_key(&key, d);
|
||||
|
||||
secp256r1_key_generate(&key);
|
||||
|
||||
secp256r1_private_key_print(stderr, 0, 0, "private_key", &key);
|
||||
|
||||
// k = 3
|
||||
bn_set_word(k, 3, 8);
|
||||
|
||||
// e = 2
|
||||
memset(dgst, 0, 31);
|
||||
dgst[31] = 2;
|
||||
|
||||
/*
|
||||
if (ecdsa_do_sign_ex(&key, k, dgst, &sig) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
*/
|
||||
|
||||
if (ecdsa_do_sign(&key, dgst, &sig) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
|
||||
|
||||
secp256r1_print(stderr, 0, 0, "r", sig.r);
|
||||
secp256r1_print(stderr, 0, 0, "s", sig.s);
|
||||
|
||||
|
||||
if (ecdsa_do_verify(&key, dgst, &sig) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
printf("%s() ok\n", __FUNCTION__);
|
||||
return 1;
|
||||
}
|
||||
|
||||
int main(void)
|
||||
{
|
||||
if (test_ecdsa() != 1) goto err;
|
||||
|
||||
printf("%s all tests passed\n", __FILE__);
|
||||
return 0;
|
||||
err:
|
||||
error_print();
|
||||
return 1;
|
||||
}
|
||||
292
tests/secp256r1_keytest.c
Normal file
292
tests/secp256r1_keytest.c
Normal file
@@ -0,0 +1,292 @@
|
||||
/*
|
||||
* Copyright 2014-2026 The GmSSL Project. All Rights Reserved.
|
||||
*
|
||||
* Licensed under the Apache License, Version 2.0 (the License); you may
|
||||
* not use this file except in compliance with the License.
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*/
|
||||
|
||||
|
||||
#include <stdio.h>
|
||||
#include <string.h>
|
||||
#include <stdlib.h>
|
||||
#include <stdint.h>
|
||||
#include <gmssl/hex.h>
|
||||
#include <gmssl/rand.h>
|
||||
#include <gmssl/error.h>
|
||||
#include <gmssl/secp256r1_key.h>
|
||||
|
||||
|
||||
static int test_secp256r1_key_generate(void)
|
||||
{
|
||||
SECP256R1_KEY key;
|
||||
|
||||
if (secp256r1_key_generate(&key) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
secp256r1_public_key_print(stderr, 0, 4, "public_key", &key);
|
||||
secp256r1_private_key_print(stderr, 0, 4, "private_key", &key);
|
||||
secp256r1_key_cleanup(&key);
|
||||
secp256r1_private_key_print(stderr, 0, 4, "private_key", &key);
|
||||
|
||||
printf("%s() ok\n", __FUNCTION__);
|
||||
return 1;
|
||||
}
|
||||
|
||||
static int test_secp256r1_key_set_private_key(void)
|
||||
{
|
||||
SECP256R1_KEY key;
|
||||
secp256r1_t private_key;
|
||||
uint8_t bytes[32];
|
||||
size_t len;
|
||||
|
||||
// key = 1
|
||||
memset(bytes, 0, sizeof(bytes));
|
||||
bytes[31] = 1;
|
||||
secp256r1_from_32bytes(private_key, bytes);
|
||||
if (secp256r1_key_set_private_key(&key, private_key) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
secp256r1_private_key_print(stderr, 0, 4, "private_key = 1", &key);
|
||||
|
||||
|
||||
// key = n-1
|
||||
hex_to_bytes("FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC632550", 64, bytes, &len);
|
||||
secp256r1_from_32bytes(private_key, bytes);
|
||||
if (secp256r1_key_set_private_key(&key, private_key) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
|
||||
// key = 0, should fail
|
||||
memset(bytes, 0, sizeof(bytes));
|
||||
secp256r1_from_32bytes(private_key, bytes);
|
||||
if (secp256r1_key_set_private_key(&key, private_key) >= 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
// key = n, should fail
|
||||
hex_to_bytes("FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC632551", 64, bytes, &len);
|
||||
secp256r1_from_32bytes(private_key, bytes);
|
||||
if (secp256r1_key_set_private_key(&key, private_key) >= 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
// key = 0xff..f, should fail
|
||||
memset(bytes, 0xff, sizeof(bytes));
|
||||
secp256r1_from_32bytes(private_key, bytes);
|
||||
if (secp256r1_key_set_private_key(&key, private_key) >= 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
printf("%s() ok\n", __FUNCTION__);
|
||||
return 1;
|
||||
}
|
||||
|
||||
static int test_secp256r1_public_key_to_bytes(void)
|
||||
{
|
||||
SECP256R1_KEY key;
|
||||
SECP256R1_KEY key1;
|
||||
uint8_t bytes[512];
|
||||
uint8_t *p = bytes;
|
||||
const uint8_t *cp = bytes;
|
||||
size_t len = 0;
|
||||
|
||||
if (secp256r1_key_generate(&key) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (secp256r1_public_key_to_bytes(&key, &p, &len) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (secp256r1_public_key_from_bytes(&key1, &cp, &len) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (len) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (secp256r1_public_key_equ(&key, &key1) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
printf("%s() ok\n", __FUNCTION__);
|
||||
return 1;
|
||||
}
|
||||
|
||||
static int test_secp256r1_public_key_to_der(void)
|
||||
{
|
||||
SECP256R1_KEY key;
|
||||
SECP256R1_KEY key1;
|
||||
uint8_t bytes[512];
|
||||
uint8_t *p = bytes;
|
||||
const uint8_t *cp = bytes;
|
||||
size_t len = 0;
|
||||
|
||||
if (secp256r1_key_generate(&key) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (secp256r1_public_key_to_der(&key, &p, &len) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (secp256r1_public_key_from_der(&key1, &cp, &len) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (len) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (secp256r1_public_key_equ(&key, &key1) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
printf("%s() ok\n", __FUNCTION__);
|
||||
return 1;
|
||||
}
|
||||
|
||||
static int test_secp256r1_private_key_to_der(void)
|
||||
{
|
||||
SECP256R1_KEY key;
|
||||
SECP256R1_KEY key1;
|
||||
uint8_t bytes[512];
|
||||
uint8_t *p = bytes;
|
||||
const uint8_t *cp = bytes;
|
||||
size_t len = 0;
|
||||
|
||||
if (secp256r1_key_generate(&key) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (secp256r1_private_key_to_der(&key, &p, &len) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (secp256r1_private_key_from_der(&key1, &cp, &len) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (len) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (secp256r1_public_key_equ(&key, &key1) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
printf("%s() ok\n", __FUNCTION__);
|
||||
return 1;
|
||||
}
|
||||
|
||||
static int test_secp256r1_private_key_info_to_der(void)
|
||||
{
|
||||
SECP256R1_KEY key;
|
||||
SECP256R1_KEY key1;
|
||||
uint8_t bytes[512];
|
||||
uint8_t *p = bytes;
|
||||
const uint8_t *cp = bytes;
|
||||
size_t len = 0;
|
||||
const uint8_t *attrs;
|
||||
size_t attrslen;
|
||||
|
||||
if (secp256r1_key_generate(&key) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (secp256r1_private_key_info_to_der(&key, &p, &len) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (secp256r1_private_key_info_from_der(&key1, &attrs, &attrslen, &cp, &len) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (len) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (secp256r1_public_key_equ(&key, &key1) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
printf("%s() ok\n", __FUNCTION__);
|
||||
return 1;
|
||||
}
|
||||
|
||||
static int test_secp256r1_private_key_info_encrypt_to_der(void)
|
||||
{
|
||||
SECP256R1_KEY key;
|
||||
SECP256R1_KEY key1;
|
||||
uint8_t bytes[512];
|
||||
uint8_t *p = bytes;
|
||||
const uint8_t *cp = bytes;
|
||||
size_t len = 0;
|
||||
char *pass = "password";
|
||||
const uint8_t *attrs;
|
||||
size_t attrslen;
|
||||
|
||||
if (secp256r1_key_generate(&key) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (secp256r1_private_key_info_encrypt_to_der(&key, pass, &p, &len) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (secp256r1_private_key_info_decrypt_from_der(&key1, &attrs, &attrslen, pass, &cp, &len) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (len) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (secp256r1_public_key_equ(&key, &key1) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
printf("%s() ok\n", __FUNCTION__);
|
||||
return 1;
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
int main(void)
|
||||
{
|
||||
if (test_secp256r1_key_generate() != 1) goto err;
|
||||
// if (test_secp256r1_key_set_private_key() != 1) goto err;
|
||||
if (test_secp256r1_public_key_to_bytes() != 1) goto err;
|
||||
if (test_secp256r1_public_key_to_der() != 1) goto err;
|
||||
if (test_secp256r1_private_key_to_der() != 1) goto err;
|
||||
if (test_secp256r1_private_key_info_to_der() != 1) goto err;
|
||||
if (test_secp256r1_private_key_info_encrypt_to_der() != 1) goto err;
|
||||
|
||||
printf("%s all tests passed\n", __FILE__);
|
||||
return 0;
|
||||
err:
|
||||
error_print();
|
||||
return 1;
|
||||
}
|
||||
|
||||
481
tests/secp256r1test.c
Normal file
481
tests/secp256r1test.c
Normal file
@@ -0,0 +1,481 @@
|
||||
/*
|
||||
* Copyright 2014-2026 The GmSSL Project. All Rights Reserved.
|
||||
*
|
||||
* Licensed under the Apache License, Version 2.0 (the License); you may
|
||||
* not use this file except in compliance with the License.
|
||||
*
|
||||
* http://www.apache.org/licenses/LICENSE-2.0
|
||||
*/
|
||||
|
||||
|
||||
#include <stdio.h>
|
||||
#include <string.h>
|
||||
#include <stdlib.h>
|
||||
#include <stdint.h>
|
||||
#include <gmssl/hex.h>
|
||||
#include <gmssl/rand.h>
|
||||
#include <gmssl/error.h>
|
||||
#include <gmssl/secp256r1.h>
|
||||
|
||||
|
||||
static const char *secp256r1_p = "FFFFFFFF00000001000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFF";
|
||||
static const char *secp256r1_b = "5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b";
|
||||
static const char *secp256r1_x = "6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296";
|
||||
static const char *secp256r1_y = "4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5";
|
||||
static const char *secp256r1_n = "FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC632551";
|
||||
|
||||
static int test_secp256r1(void)
|
||||
{
|
||||
secp256r1_t a;
|
||||
secp256r1_t b;
|
||||
secp256r1_t r;
|
||||
uint8_t buf[32];
|
||||
|
||||
secp256r1_set_zero(a);
|
||||
if (!secp256r1_is_zero(a)) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
secp256r1_to_32bytes(a, buf);
|
||||
format_bytes(stderr, 0, 4, "0", buf, sizeof(buf));
|
||||
|
||||
secp256r1_set_one(b);
|
||||
if (!secp256r1_is_one(b)) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
secp256r1_to_32bytes(b, buf);
|
||||
format_bytes(stderr, 0, 4, "1", buf, sizeof(buf));
|
||||
|
||||
if (secp256r1_cmp(a, b) >= 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
printf("%s() ok\n", __FUNCTION__);
|
||||
return 1;
|
||||
}
|
||||
|
||||
|
||||
// 这个测试是有问题的，mod_add很多情况下是引发进位和借位的！
|
||||
static int test_secp256r1_modp(void)
|
||||
{
|
||||
secp256r1_t x;
|
||||
secp256r1_t y;
|
||||
secp256r1_t r;
|
||||
secp256r1_t v;
|
||||
uint8_t buf[32];
|
||||
size_t len;
|
||||
|
||||
hex_to_bytes("6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296", 64, buf, &len);
|
||||
secp256r1_from_32bytes(x, buf);
|
||||
|
||||
hex_to_bytes("4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5", 64, buf, &len);
|
||||
secp256r1_from_32bytes(y, buf);
|
||||
|
||||
secp256r1_modp_add(r, x, y);
|
||||
hex_to_bytes("bafb14d5df46c1e387a4d22fdfb3df08a2d1b0d8991c926fc05779ae1058148b", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_modp_dbl(r, x);
|
||||
hex_to_bytes("d62fa3e5c258848ff179cdcac74881e4ee06fb025bd66741e942728bb131852c", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_modp_tri(r, x);
|
||||
hex_to_bytes("414775d9a384c6d6ea36b4b02aecc2d7650a788289c19ae2dde3abd189ca47c3", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_modp_sub(r, x, y);
|
||||
hex_to_bytes("1b348f0fe311c2ac69d4fb9ae794a2dc4b354a29c2b9d4d228eaf8dda0d970a1", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_modp_sub(r, y, x);
|
||||
hex_to_bytes("e4cb70ef1cee3d54962b0465186b5d23b4cab5d73d462b2dd71507225f268f5e", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_modp_neg(r, x);
|
||||
hex_to_bytes("94e82e0c1ed3bdb90743191a9c5bbf0d88fc827fd214cc5f0b5ec6ba27673d69", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_modp_mul(r, x, y);
|
||||
hex_to_bytes("823cd15f6dd3c71933565064513a6b2bd183e554c6a08622f713ebbbface98be", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_modp_sqr(r, x);
|
||||
hex_to_bytes("98f6b84d29bef2b281819a5e0e3690d833b699495d694dd1002ae56c426b3f8c", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_modp_exp(r, x, y);
|
||||
hex_to_bytes("2f3db69bc9d93323c351f3e768d332806ad3a7652ea632e89e23312f7b5f9f96", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_modp_inv(r, x);
|
||||
hex_to_bytes("e060cbb088706d5d24936933b69b16ab707d656273744b65664c49e577f35238", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_modp_inv(r, y);
|
||||
hex_to_bytes("fa27a3da2c00618a828f8cd65c1a919effc67bf68b4dbb05bbdaa775c45d4034", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
printf("%s() ok\n", __FUNCTION__);
|
||||
return 1;
|
||||
}
|
||||
|
||||
|
||||
static int test_secp256r1_modn(void)
|
||||
{
|
||||
secp256r1_t x;
|
||||
secp256r1_t y;
|
||||
secp256r1_t r;
|
||||
secp256r1_t v;
|
||||
uint8_t buf[32];
|
||||
size_t len;
|
||||
|
||||
hex_to_bytes("d62fa3e5c258848ff179cdcac74881e4ee06fb025bd66741e942728bb131852c", 64, buf, &len);
|
||||
secp256r1_from_32bytes(x, buf);
|
||||
|
||||
hex_to_bytes("4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5", 64, buf, &len);
|
||||
secp256r1_from_32bytes(y, buf);
|
||||
|
||||
secp256r1_modn_add(r, x, y);
|
||||
hex_to_bytes("2612e6c9c073042a8061b91543581ffb5cee33ac1ff0278bc13ee830ec8db1d0", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_modn_dbl(r, x);
|
||||
hex_to_bytes("ac5f47cc84b1091ee2f39b958e9103ca1f26fb5710952ffedecb1a5465ffe507", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_modn_tri(r, x);
|
||||
hex_to_bytes("828eebb347098dadd46d696055d985af5046fbabc553f8bbd453c21d1ace44e2", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_modn_sub(r, x, y);
|
||||
hex_to_bytes("864c6102c43e04f46291e2804b38e3cec238c7aaf0a508731d8c322379723337", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_modn_sub(r, y, x);
|
||||
hex_to_bytes("79b39efc3bc1fb0c9d6e1d7fb4c71c30faae3302b6729611d62d989f82f0f21a", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_modn_neg(r, x);
|
||||
hex_to_bytes("29d05c193da77b710e86323538b77e1acedfffab4b4137430a7758374b31a025", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_modn_mul(r, x, y);
|
||||
hex_to_bytes("2a876a4e5df28cd6c2f3951aa6b65c55e2d6eb1883b463aee5d95035999c9a30", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_modn_mul(r, y, x);
|
||||
hex_to_bytes("2a876a4e5df28cd6c2f3951aa6b65c55e2d6eb1883b463aee5d95035999c9a30", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_modn_sqr(r, x);
|
||||
hex_to_bytes("22f25cab8043b82c9a5a6f0ca72c2122700737b557a11ba95ee80bddf671471f", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_modn_exp(r, x, y);
|
||||
hex_to_bytes("31e8d728b341541057e09242800bcd7321b523284104340f3ac3bedb55b516c7", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_modn_inv(r, x);
|
||||
hex_to_bytes("a546ddb0e12a46eedab8425e77558aa3e56b7fec1d73fd94c03235e2f2298172", 64, buf, &len);
|
||||
secp256r1_from_32bytes(v, buf);
|
||||
if (secp256r1_cmp(r, v) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
printf("%s() ok\n", __FUNCTION__);
|
||||
return 1;
|
||||
}
|
||||
|
||||
|
||||
|
||||
static int test_secp256r1_point_at_infinity(void)
|
||||
{
|
||||
SECP256R1_POINT P;
|
||||
secp256r1_point_set_infinity(&P);
|
||||
|
||||
if (!secp256r1_point_is_at_infinity(&P)) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
secp256r1_point_print(stderr, 0, 4, "point_at_infinity", &P);
|
||||
|
||||
if (!secp256r1_point_is_on_curve(&P)) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
printf("%s() ok\n", __FUNCTION__);
|
||||
return 1;
|
||||
}
|
||||
|
||||
static int test_secp256r1_point_set_xy(void)
|
||||
{
|
||||
SECP256R1_POINT P;
|
||||
secp256r1_t x;
|
||||
secp256r1_t y;
|
||||
secp256r1_t x1;
|
||||
secp256r1_t y1;
|
||||
uint8_t bytes[32];
|
||||
size_t len;
|
||||
|
||||
hex_to_bytes(secp256r1_x, 64, bytes, &len);
|
||||
secp256r1_from_32bytes(x, bytes);
|
||||
|
||||
hex_to_bytes(secp256r1_y, 64, bytes, &len);
|
||||
secp256r1_from_32bytes(y, bytes);
|
||||
|
||||
if (secp256r1_point_set_xy(&P, x, y) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
secp256r1_point_get_xy(&P, x1, y1);
|
||||
|
||||
if (secp256r1_cmp(x, x1) != 0
|
||||
|| secp256r1_cmp(y, y1) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
printf("%s() ok\n", __FUNCTION__);
|
||||
return 1;
|
||||
}
|
||||
|
||||
static int test_secp256r1_point_is_on_curve(void)
|
||||
{
|
||||
if (secp256r1_point_is_on_curve(&SECP256R1_POINT_G) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
printf("%s() ok\n", __FUNCTION__);
|
||||
return 1;
|
||||
}
|
||||
|
||||
|
||||
// 这两个计算是应该分开的！
|
||||
static int test_secp256r1_point_dbl_add(void)
|
||||
{
|
||||
SECP256R1_POINT P;
|
||||
SECP256R1_POINT Q;
|
||||
secp256r1_t x;
|
||||
secp256r1_t y;
|
||||
secp256r1_t x1;
|
||||
secp256r1_t y1;
|
||||
uint8_t bytes[32];
|
||||
size_t len;
|
||||
|
||||
// test 2*G
|
||||
secp256r1_point_dbl(&P, &SECP256R1_POINT_G);
|
||||
secp256r1_point_get_xy(&P, x, y);
|
||||
|
||||
secp256r1_point_print(stderr, 0, 4, "2*G", &P);
|
||||
|
||||
hex_to_bytes("7cf27b188d034f7e8a52380304b51ac3c08969e277f21b35a60b48fc47669978", 64, bytes, &len);
|
||||
secp256r1_from_32bytes(x1, bytes);
|
||||
hex_to_bytes("07775510db8ed040293d9ac69f7430dbba7dade63ce982299e04b79d227873d1", 64, bytes, &len);
|
||||
secp256r1_from_32bytes(y1, bytes);
|
||||
|
||||
if (secp256r1_cmp(x, x1) != 0 || secp256r1_cmp(y, y1) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
// test 2*G + G
|
||||
secp256r1_point_add(&Q, &P, &SECP256R1_POINT_G);
|
||||
secp256r1_point_get_xy(&Q, x, y);
|
||||
|
||||
hex_to_bytes("5ecbe4d1a6330a44c8f7ef951d4bf165e6c6b721efada985fb41661bc6e7fd6c", 64, bytes, &len);
|
||||
secp256r1_from_32bytes(x1, bytes);
|
||||
hex_to_bytes("8734640c4998ff7e374b06ce1a64a2ecd82ab036384fb83d9a79b127a27d5032", 64, bytes, &len);
|
||||
secp256r1_from_32bytes(y1, bytes);
|
||||
|
||||
if (secp256r1_cmp(x, x1) != 0 || secp256r1_cmp(y, y1) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
printf("%s() ok\n", __FUNCTION__);
|
||||
return 1;
|
||||
}
|
||||
|
||||
static const char *secp256r1_x_2G = "7cf27b188d034f7e8a52380304b51ac3c08969e277f21b35a60b48fc47669978";
|
||||
static const char *secp256r1_y_2G = "07775510db8ed040293d9ac69f7430dbba7dade63ce982299e04b79d227873d1";
|
||||
static const char *secp256r1_x_3G = "5ecbe4d1a6330a44c8f7ef951d4bf165e6c6b721efada985fb41661bc6e7fd6c";
|
||||
static const char *secp256r1_y_3G = "8734640c4998ff7e374b06ce1a64a2ecd82ab036384fb83d9a79b127a27d5032";
|
||||
|
||||
|
||||
static int test_secp256r1_point_mul(void)
|
||||
{
|
||||
SECP256R1_POINT P;
|
||||
secp256r1_t x;
|
||||
secp256r1_t y;
|
||||
secp256r1_t x1;
|
||||
secp256r1_t y1;
|
||||
secp256r1_t k;
|
||||
uint8_t bytes[32] = {0};
|
||||
size_t len;
|
||||
|
||||
// k = 3
|
||||
bytes[31] = 3;
|
||||
secp256r1_from_32bytes(k, bytes);
|
||||
|
||||
secp256r1_point_mul_generator(&P, k);
|
||||
secp256r1_point_get_xy(&P, x, y); // 这个必须返回错误啊，否则没办法判断是否为无穷远点呢！
|
||||
|
||||
hex_to_bytes(secp256r1_x_3G, 64, bytes, &len);
|
||||
secp256r1_from_32bytes(x1, bytes);
|
||||
hex_to_bytes(secp256r1_y_3G, 64, bytes, &len);
|
||||
secp256r1_from_32bytes(y1, bytes);
|
||||
|
||||
if (secp256r1_cmp(x, x1) != 0 || secp256r1_cmp(y, y1) != 0) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
// k = n
|
||||
hex_to_bytes(secp256r1_n, 64, bytes, &len);
|
||||
secp256r1_from_32bytes(k, bytes);
|
||||
|
||||
secp256r1_point_mul_generator(&P, k);
|
||||
|
||||
if (secp256r1_point_is_at_infinity(&P) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
|
||||
printf("%s() ok\n", __FUNCTION__);
|
||||
return 1;
|
||||
}
|
||||
|
||||
static int test_secp256r1_point_to_uncompressed_octets(void)
|
||||
{
|
||||
SECP256R1_POINT P;
|
||||
uint8_t octets[65];
|
||||
|
||||
|
||||
secp256r1_point_copy(&P, &SECP256R1_POINT_G);
|
||||
|
||||
if (secp256r1_point_to_uncompressed_octets(&P, octets) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
if (secp256r1_point_from_uncompressed_octets(&P, octets) != 1) {
|
||||
error_print();
|
||||
return -1;
|
||||
}
|
||||
|
||||
|
||||
printf("%s() ok\n", __FUNCTION__);
|
||||
return 1;
|
||||
}
|
||||
|
||||
|
||||
int main(void)
|
||||
{
|
||||
if (test_secp256r1() != 1) goto err;
|
||||
if (test_secp256r1_modp() != 1) goto err;
|
||||
if (test_secp256r1_modn() != 1) goto err;
|
||||
if (test_secp256r1_point_at_infinity() != 1) goto err;
|
||||
if (test_secp256r1_point_is_on_curve() != 1) goto err;
|
||||
if (test_secp256r1_point_set_xy() != 1) goto err;
|
||||
if (test_secp256r1_point_dbl_add() != 1) goto err;
|
||||
if (test_secp256r1_point_mul() != 1) goto err;
|
||||
if (test_secp256r1_point_to_uncompressed_octets() != 1) goto err;
|
||||
|
||||
|
||||
printf("%s all tests passed\n", __FILE__);
|
||||
return 0;
|
||||
err:
|
||||
error_print();
|
||||
return 1;
|
||||
}
|
||||
Reference in New Issue
Block a user