mbedtls

mirror of https://github.com/yuzu-mirror/mbedtls.git synced 2025-12-06 07:12:32 +01:00

Author	SHA1	Message	Date
Tom Cosgrove	be7209db1f	Remove unnecessary casts Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-09-15 14:32:38 +01:00
Tom Cosgrove	50c477bd6b	Use S and sum (rather than X/expected) in mpi_core_add_if() Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-09-15 14:28:30 +01:00
Tom Cosgrove	1feb5ac1b7	Switch to using TEST_LE_S() and TEST_LE_U() in tests Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-09-15 14:22:35 +01:00
Tom Cosgrove	2b177926ad	Use ASSERT_ALLOC() in tests Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-09-15 14:07:18 +01:00
Manuel Pégourié-Gonnard	18dff1f226	Merge pull request #5871 from superna9999/4153-psa-expose-ec-j-pake Expose ECJPAKE through the PSA Crypto API	2022-09-15 09:25:55 +02:00
Andrzej Kurek	d8705bc7b7	Add tests for the newly created ad-hoc EC J-PAKE KDF Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-09-14 08:39:41 -04:00
Przemek Stekiel	40afdd2791	Make use of MBEDTLS_MAX_HASH_SIZE macro Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-09-06 14:18:45 +02:00
Neil Armstrong	2a73f21878	Fixup expected status handling in ecjpake_setup() and add more coverage for psa_pake_set_password_key() Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-09-06 11:34:54 +02:00
Neil Armstrong	78c4e8e9cb	Make ecjpake_do_round() return void and use TEST_ASSERT with a descriptive text instead of returning a value Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-09-05 18:08:13 +02:00
Neil Armstrong	51009d7297	Add comment in ecjpake_do_round() explaining input errors can be detected any time in the input sequence Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-09-05 17:59:54 +02:00
Andrzej Kurek	c502210291	Adjust pkparse test dependencies Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-09-02 15:33:20 -04:00
Tom Cosgrove	1135b20064	Add mbedtls_mpi_core_add_if() tests for when inputs are aliased Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-09-02 11:46:18 +01:00
Tom Cosgrove	42dfac6ae8	Rename variables and update comments in mpi_core_mla test Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-09-02 11:27:39 +01:00
Tom Cosgrove	a043aeb95c	Rename variables and update comments in mpi_core_sub test Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-09-02 11:27:39 +01:00
Tom Cosgrove	eceb4ccfc3	Rename variables and update comments in mpi_core_add_if test Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-09-02 11:27:31 +01:00
Tom Cosgrove	1b2947a614	Remove mbedtls_ prefix from bignum test cases Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-09-02 10:24:55 +01:00
Andrzej Kurek	7a32072038	Setup / deinitialize PSA in pk tests only if no MD is used Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-09-02 04:07:15 -04:00
Andrzej Kurek	26909f348f	Add PSA initialization and teardown to tests using pkcs5 If PSA is defined and there is no MD - an initialization is required. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-09-02 04:05:37 -04:00
Andrzej Kurek	ed98e95c81	Adjust pkcs5 test dependencies Hashing via PSA is now supported Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-09-02 04:03:25 -04:00
Andrzej Kurek	dd36c76f09	Provide a version of pkcs5_pbkdf2_hmac without MD usage Use the new implementation locally Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-09-02 04:03:25 -04:00
Manuel Pégourié-Gonnard	97fc247d6a	Merge pull request #6232 from AndrzejKurek/pkcs12-no-md Remove MD dependency from pkcs12 module	2022-09-02 09:43:13 +02:00
Tuvshinzaya Erdenekhuu	7714368667	Remove unused variable Signed-off-by: Tuvshinzaya Erdenekhuu <tuvshinzaya.erdenekhuu@arm.com>	2022-09-01 17:11:14 +01:00
Tuvshinzaya Erdenekhuu	08b223443f	Add new tests Signed-off-by: Tuvshinzaya Erdenekhuu <tuvshinzaya.erdenekhuu@arm.com>	2022-09-01 16:18:00 +01:00
Tuvshinzaya Erdenekhuu	fe7524de03	Make minor style change Signed-off-by: Tuvshinzaya Erdenekhuu <tuvshinzaya.erdenekhuu@arm.com>	2022-09-01 16:07:18 +01:00
Tom Cosgrove	b0fb17a829	Use ASSERT_COMPARE() instead of memcmp() in new tests Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-09-01 15:04:43 +01:00
Andrzej Kurek	7bd12c5d5e	Remove MD dependency from pkcs12 module Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-09-01 08:57:41 -04:00
Tom Cosgrove	9339f05a81	Swap arguments of TEST_EQUAL() where it improves readability Especially for a sequence of similar lines of test code, or where the result of an expression is being compared to a short integer (especially 0 or 1). Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-09-01 13:02:53 +01:00
Manuel Pégourié-Gonnard	0777ec1625	Merge pull request #6109 from superna9999/6100-crash-in-test-suite-x509write Crash in test suite x509write config full no seedfile	2022-09-01 11:18:30 +02:00
Tuvshinzaya Erdenekhuu	7e2e2a9762	Add new checks in rsa_invalid_param test This new checks covers previous commits Signed-off-by: Tuvshinzaya Erdenekhuu <tuvshinzaya.erdenekhuu@arm.com>	2022-08-31 10:15:59 +01:00
Tuvshinzaya Erdenekhuu	61f1372b8c	Remove unused variables from shax.function Signed-off-by: Tuvshinzaya Erdenekhuu <tuvshinzaya.erdenekhuu@arm.com>	2022-08-31 10:15:25 +01:00
Tuvshinzaya Erdenekhuu	ca6fde2e1f	Enable invalid param test in sha512 Signed-off-by: Tuvshinzaya Erdenekhuu <tuvshinzaya.erdenekhuu@arm.com>	2022-08-31 10:15:25 +01:00
Tuvshinzaya Erdenekhuu	1db192bc5a	Enable invalid param test in sha256 Signed-off-by: Tuvshinzaya Erdenekhuu <tuvshinzaya.erdenekhuu@arm.com>	2022-08-31 10:15:25 +01:00
Tuvshinzaya Erdenekhuu	d5ebedffd0	Removed unused variable in cipher test Signed-off-by: Tuvshinzaya Erdenekhuu <tuvshinzaya.erdenekhuu@arm.com>	2022-08-31 10:14:57 +01:00
Tuvshinzaya Erdenekhuu	104eb7f4a8	Enabled invalid param test for gcm Signed-off-by: Tuvshinzaya Erdenekhuu <tuvshinzaya.erdenekhuu@arm.com>	2022-08-31 10:14:57 +01:00
Tuvshinzaya Erdenekhuu	6c68927948	Enabled invalid param test for cipher Signed-off-by: Tuvshinzaya Erdenekhuu <tuvshinzaya.erdenekhuu@arm.com>	2022-08-31 10:14:57 +01:00
Tuvshinzaya Erdenekhuu	c7d7220814	Enabled invalid param test in camellia Signed-off-by: Tuvshinzaya Erdenekhuu <tuvshinzaya.erdenekhuu@arm.com>	2022-08-31 10:14:57 +01:00
Tuvshinzaya Erdenekhuu	c855bf5285	Enabled invalid param test for aes Signed-off-by: Tuvshinzaya Erdenekhuu <tuvshinzaya.erdenekhuu@arm.com>	2022-08-31 10:14:57 +01:00
Tuvshinzaya Erdenekhuu	0050b918f0	Added new tests in pk_invalid_param Signed-off-by: Tuvshinzaya Erdenekhuu <tuvshinzaya.erdenekhuu@arm.com>	2022-08-31 10:14:25 +01:00
Tuvshinzaya Erdenekhuu	ed99ed34f3	Add spaces to comply with coding style Signed-off-by: Tuvshinzaya Erdenekhuu <tuvshinzaya.erdenekhuu@arm.com>	2022-08-31 10:14:25 +01:00
Tuvshinzaya Erdenekhuu	c388af63e4	Remove extra spacings Signed-off-by: Tuvshinzaya Erdenekhuu <tuvshinzaya.erdenekhuu@arm.com>	2022-08-31 10:14:25 +01:00
Tuvshinzaya Erdenekhuu	79bf51a109	Add new test for invalid param in pk.c Signed-off-by: Tuvshinzaya Erdenekhuu <tuvshinzaya.erdenekhuu@arm.com>	2022-08-31 10:14:25 +01:00
Neil Armstrong	e5fdf20a79	Make ecjpake_rounds test depends on PSA_WANT_ALG_TLS12_PSK_TO_MS Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-08-31 10:49:18 +02:00
Neil Armstrong	eae1dfcc46	Change to more efficient error injection in ecjpake_do_round() Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-08-31 10:49:18 +02:00
Neil Armstrong	db5b960a7e	Permit any psa_pake_input() step to fail when error injected in input Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-08-31 10:49:18 +02:00
Neil Armstrong	75673abef5	Only build ecjpake_do_round() is PSA_WANT_ALG_JPAKE is defined Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-08-31 10:49:18 +02:00
Neil Armstrong	8c2e8a6cda	Add ecjpake_rounds_inject tests to exercise error injection Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-08-31 10:49:18 +02:00
Neil Armstrong	f983caf6c4	Move JPAKE rounds into a common function, add reordering and error injection Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-08-31 10:49:18 +02:00
Neil Armstrong	1e855601ca	Fix psa_pake_get_implicit_key() state & add corresponding tests in ecjpake_rounds() Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-08-31 10:49:18 +02:00
Neil Armstrong	a557cb8c8b	Fixing XXX_ALG_ECJPAKE to XXX_ALG_JPAKE to match specification Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-08-31 10:49:18 +02:00
Neil Armstrong	a24278a74a	Add invalid hash ecjpake_setup() test case Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-08-31 10:49:18 +02:00
Neil Armstrong	9c8b492052	Add advanced psa_pake_input/psa_pake_output test in ecjpake_setup() test Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-08-31 10:49:18 +02:00
Neil Armstrong	50de0ae0c4	Add check calling psa_pake_setup() on an already initialized operation in ecjpake_setup() test Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-08-31 10:49:18 +02:00
Neil Armstrong	98506ab677	Add checks for INVALID_ARGUMENT for psa_pake_output/psa_pake_input in ecjpake_setup() test Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-08-31 10:49:18 +02:00
Neil Armstrong	645cccd6a8	Add checks for BAD_STATE before calling psa_pake_setup() in ecjpake_setup() test Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-08-31 10:49:18 +02:00
Neil Armstrong	707d9574f8	Add checks for psa_pake_set_user/psa_pake_set_peer in test_suite_psa_crypto Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-08-31 10:49:18 +02:00
Neil Armstrong	ebd9a03743	Cleanup PSA pake test dependency Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-08-31 10:49:18 +02:00
Neil Armstrong	d597bc705f	Add PSA PAKE tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-08-31 10:49:18 +02:00
Manuel Pégourié-Gonnard	bf22a2500b	Merge pull request #6208 from AndrzejKurek/tls-tests-no-md-structured Remove the dependency on MD from TLS 1.2 tests	2022-08-30 12:34:37 +02:00
Dave Rodgman	e2b772d1b6	Fix whitespace, missing const Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-08-30 10:25:45 +01:00
Dave Rodgman	5f3f0d06e6	Address minor review comments Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-08-30 10:25:45 +01:00
Dave Rodgman	ec9f6b4de1	Fix minor compile errors Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-08-30 10:25:45 +01:00
Nicholas Wilson	ca841d32db	Add test for mbedtls_x509write_crt_set_ext_key_usage, and fix reversed order Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-08-30 10:25:43 +01:00
Werner Lewis	c4afef7f46	Use spec values as-is for test data Spec values are now always used for test data, and conversion to internal representation is done in the test function. Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-08-25 10:32:30 +01:00
Tom Cosgrove	b2c06f4acf	Remove stale comment, and fix whitespace issue Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-08-24 17:45:58 +01:00
Tom Cosgrove	f0ffb1585a	Have mbedtls_mpi_montg_init() take the modulus, rather than just its least significant limb Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-08-24 11:17:15 +01:00
Tom Cosgrove	9384284530	Use mbedtls_mpi_core_montmul() in mpi_montmul() Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-08-23 16:29:32 +01:00
Tom Cosgrove	f334d9622b	Add unit tests for bignum_new.c:mbedtls_mpi_core_montmul() These tests are also used to test the existing mpi_montmul() function (which too is renamed with mbedtls_ prefix). Some of these are replays of captured invocations during unit test runs. Others are generated. They use a mixture of primes and odd numbers for N, with four randomly-generated cases for each N. The lines in the .data file were generated by the following script ``` #!/usr/bin/env perl # # mpi-test-core-montmul.pl - generate MPI tests in Perl for mbedtls_mpi_core_montmul() # use strict; use warnings; use Math::BigInt; use sort 'stable'; generate_tests(); sub generate_tests { generate_mbedtls_mpi_core_montmul(); } # XXX mbedtls_mpi_grow() and mbedtls_mpi_shrink() work in little-endian manner # \brief Montgomery multiplication: X = A * B * R^-1 mod N (HAC 14.36) # # \param[out] X The destination MPI, as a big endian array of length \p n. # On successful completion, X contains the result of # the multiplication A * B * R^-1 mod N where # R = (2^ciL)^n. # \param[in] A Big endian presentation of first operand. # Must have exactly \p n limbs. # \param[in] B Big endian presentation of second operand. # \param[in] B_len The number of limbs in \p B. # \param[in] N Big endian presentation of the modulus. # This must be odd and have exactly \p n limbs. # \param[in] n The number of limbs in \p X, \p A, \p N. # \param mm The Montgomery constant for \p N: -N^-1 mod 2^ciL. # This can be calculated by `mbedtls_mpi_montg_init()`. # \param[in,out] T Temporary storage of size at least 2n+1 limbs. # Its initial content is unused and # its final content is indeterminate. # # void mbedtls_mpi_core_montmul( mbedtls_mpi_uint X, # const mbedtls_mpi_uint A, # const mbedtls_mpi_uint B, size_t B_len, # const mbedtls_mpi_uint N, size_t n, # mbedtls_mpi_uint mm, mbedtls_mpi_uint T ); sub generate_mbedtls_mpi_core_montmul { my $sub_name = (caller(0))[3]; # e.g. main::generate_mbedtls_mpi_sub_mpi my ($ignore, $test_name) = split("main::generate_", $sub_name); my @cases = (); my @replay = ( # [ limbsAN_4, limbsB_4, limbsAN_8, limbsB_8, hexA, hexB, hexN, hexExpected ] [ 2, 1, 1, 1, "19", "1", "1D", "18" ], [ 2, 1, 1, 1, "7", "1", "9", "1" ], [ 2, 1, 1, 1, "4", "1", "9", "7" ], #montmul: #A.n = 3 #A.p = FFFE000000008004 # 0000000000007FFC # 0000000000000000 #B.n = 1 #B.p = 0000000000000001 #N.n = 3 #N.p = 0000000000000001 # 0000000000008000 # 0000000000000000 #mm = FFFFFFFFFFFFFFFF #res.n = 3 #res.p = EFFF9FFF3FFF8001 # 0000000000007FFF # 0000000000000000 #[ "MBEDTLS_HAVE_INT32", 3, 1, 3, "7FFCFFFE000000008004", "1", "80000000000000000001", "2000C001800100000000" ], #[ "MBEDTLS_HAVE_INT64", 3, 1, 3, "7FFCFFFE000000008004", "1", "80000000000000000001", "7FFFEFFF9FFF3FFF8001" ], [ 12, 1, 6, 1, "3C246D0E059A93A266288A7718419EC741661B474C58C032C5EDAF92709402B07CC8C7CE0B781C641A1EA8DB2F4343", "1", "66A198186C18C10B2F5ED9B522752A9830B69916E535C8F047518A889A43A594B6BED27A168D31D4A52F88925AA8F5", "36E139AEA55215609D2816998ED020BBBD96C37890F65171D948E9BC7CBAA4D9325D24D6A3C12710F10A09FA08AB87" ], #A.n = 5 #A.p = 340E918CE03C6211 # 9888165CB75BFA1F # FCCE74B999E470CA # 1E442976B0E63D64 # 0000000000000000 #B.n = 1 #B.p = 0000000000000001 #N.n = 4 #N.p = 8054B3D124D0E561 # 92A338655DCE4CA8 # E28581ECD892E0F5 # B3A119602EE213CD #mm = E41CFB909805815F #res.n = 5 #res.p = 0E65383B59F8CA5B # B103B17A2EEF84E6 # F23BC08FD0801C55 # 38EB7749F4A5DA80 # 0000000000000000 [ 8, 1, 4, 1, "1E442976B0E63D64FCCE74B999E470CA9888165CB75BFA1F340E918CE03C6211", "1", "B3A119602EE213CDE28581ECD892E0F592A338655DCE4CA88054B3D124D0E561", "38EB7749F4A5DA80F23BC08FD0801C55B103B17A2EEF84E60E65383B59F8CA5B" ], #A.n = 12 #A.p = 542306BCA7A2366E # D2780B2B4968F8D8 # CBDFC696104353E4 # 7776839B0AC9DB23 # B7E125BE407E7415 # D711917FD7537E13 # 82392870D6D08F87 # D83ED5FA38560FFB # 9994B0FED1D2A8D3 # 63C65413F57249F5 # 007CF5AC97304E0B # 0000000000000000 #B.n = 1 #B.p = 0000000000000001 #N.n = 11 #N.p = E1AD22CEB7BA0123 # 32B2A6AA42ADA923 # C56C62082912B661 # C6F0EAD752500A32 # DBC8D651793E93C9 # 0B2F60D99CC1950C # 5B4CDCB5734C58F9 # 09D3CB5BC5585472 # 9A2C2BE12ED487A8 # BE09A8111926AAA3 # 0284139EA19C139E #mm = C02E2164B293C975 #res.n = 12 #res.p = F6B14471839D8D31 # FF843ED3B17C44D7 # 1C3D52C7CB9E0BA6 # 82F3590C866BF9F8 # 49C371DB2A4FB164 # 964ECA2527A031ED # FAACEC6982E0E5BE # 1F70C4CB2426AEE1 # 2C92B02886267AB4 # 0630B14113BEAD74 # 01E4426A3D6C425F # 0000000000000000 [ 22, 1, 11, 1, "7CF5AC97304E0B63C65413F57249F59994B0FED1D2A8D3D83ED5FA38560FFB82392870D6D08F87D711917FD7537E13B7E125BE407E74157776839B0AC9DB23CBDFC696104353E4D2780B2B4968F8D8542306BCA7A2366E", "1", "284139EA19C139EBE09A8111926AAA39A2C2BE12ED487A809D3CB5BC55854725B4CDCB5734C58F90B2F60D99CC1950CDBC8D651793E93C9C6F0EAD752500A32C56C62082912B66132B2A6AA42ADA923E1AD22CEB7BA0123", "1E4426A3D6C425F0630B14113BEAD742C92B02886267AB41F70C4CB2426AEE1FAACEC6982E0E5BE964ECA2527A031ED49C371DB2A4FB16482F3590C866BF9F81C3D52C7CB9E0BA6FF843ED3B17C44D7F6B14471839D8D31" ], ); for my $c (@replay) { # For all of these, la4 = 2 * la8, so $xh4 == $xh8 (so we just have $xh) my ($la4, $lb4, $la8, $lb8, $ah, $bh, $nh, $xh) = @$c; # limbs(A), limbs(B), limbs(N), (A, B, N, expected) hex my $a = Math::BigInt->from_hex($ah); my $b = Math::BigInt->from_hex($bh); my $n = Math::BigInt->from_hex($nh); my $desc = "$test_name #NUMBER (replay)"; # mbedtls_mpi_core_montmul:mpiSize:limbs(A,N):limbs(B):<A>:<B>:<N>:<expected4>:<expected8> # (just repeat $xh, as la4 = 2 * la8, so $xh4 == $xh8) my $case = output($test_name, $la4, $lb4, $la8, $lb8, str($ah), str($bh), str($nh), str($xh), str($xh)); push(@cases, [$case, $desc]); } # see mpi-modmul-gen.pl for the source of these test cases my @generate = ( # [ hexN, hexA, hexB, info ] [ "3", "2", "2", "" ], [ "3", "1", "2", "" ], [ "3", "2", "1", "" ], [ "7", "6", "5", "" ], [ "7", "3", "4", "" ], [ "7", "1", "6", "" ], [ "7", "5", "6", "" ], [ "B", "3", "4", "" ], [ "B", "7", "4", "" ], [ "B", "9", "7", "" ], [ "B", "2", "a", "" ], [ "29", "25", "16", "(0x29 is prime)" ], [ "29", "8", "28", "" ], [ "29", "18", "21", "" ], [ "29", "15", "f", "" ], [ "FF", "e2", "ea", "" ], [ "FF", "43", "72", "" ], [ "FF", "d8", "70", "" ], [ "FF", "3c", "7c", "" ], [ "101", "99", "b9", "(0x101 is prime)" ], [ "101", "65", "b2", "" ], [ "101", "81", "32", "" ], [ "101", "51", "dd", "" ], [ "38B", "d5", "143", "(0x38B is prime)" ], [ "38B", "3d", "387", "" ], [ "38B", "160", "2e5", "" ], [ "38B", "10f", "137", "" ], [ "8003", "7dac", "25a", "(0x8003 is prime)" ], [ "8003", "6f1c", "3286", "" ], [ "8003", "59ed", "2f3f", "" ], [ "8003", "6893", "736d", "" ], [ "10001", "d199", "2832", "(0x10001 is prime)" ], [ "10001", "c3b2", "3e5b", "" ], [ "10001", "abe4", "214e", "" ], [ "10001", "4360", "a05d", "" ], [ "7F7F7", "3f5a1", "165b2", "" ], [ "7F7F7", "3bd29", "37863", "" ], [ "7F7F7", "60c47", "64819", "" ], [ "7F7F7", "16584", "12c49", "" ], [ "800009", "1ff03f", "610347", "(0x800009 is prime)" ], [ "800009", "340fd5", "19812e", "" ], [ "800009", "3fe2e8", "4d0dc7", "" ], [ "800009", "40356", "e6392", "" ], [ "100002B", "dd8a1d", "266c0e", "(0x100002B is prime)" ], [ "100002B", "3fa1cb", "847fd6", "" ], [ "100002B", "5f439d", "5c3196", "" ], [ "100002B", "18d645", "f72dc6", "" ], [ "37EEE9D", "20051ad", "37def6e", "(0x37EEE9D is prime)" ], [ "37EEE9D", "2ec140b", "3580dbf", "" ], [ "37EEE9D", "1d91b46", "190d4fc", "" ], [ "37EEE9D", "34e488d", "1224d24", "" ], [ "8000000B", "2a4fe2cb", "263466a9", "(0x8000000B is prime)" ], [ "8000000B", "5643fe94", "29a1aefa", "" ], [ "8000000B", "29633513", "7b007ac4", "" ], [ "8000000B", "2439cef5", "5c9d5a47", "" ], [ "8CD626B9", "4de3cfaa", "50dea178", "(0x8CD626B9 is prime)" ], [ "8CD626B9", "b8b8563", "10dbbbac", "" ], [ "8CD626B9", "4e8a6151", "5574ec19", "" ], [ "8CD626B9", "69224878", "309cfc23", "" ], [ "10000000F", "fb6f7fb6", "afb05423", "(0x10000000F is prime)" ], [ "10000000F", "8391a243", "26034dcd", "" ], [ "10000000F", "d26b98c", "14b2d6aa", "" ], [ "10000000F", "6b9f1371", "a21daf1d", "" ], [ "174876E7E9", "9f49435ad", "c8264ade8", "0x174876E7E9 is prime (dec) 99999999977" ], [ "174876E7E9", "c402da434", "1fb427acf", "" ], [ "174876E7E9", "f6ebc2bb1", "1096d39f2a", "" ], [ "174876E7E9", "153b7f7b6b", "878fda8ff", "" ], [ "8000000017", "2c1adbb8d6", "4384d2d3c6", "(0x8000000017 is prime)" ], [ "8000000017", "2e4f9cf5fb", "794f3443d9", "" ], [ "8000000017", "149e495582", "3802b8f7b7", "" ], [ "8000000017", "7b9d49df82", "69c68a442a", "" ], [ "864CB9076D", "683a134600", "6dd80ea9f6", "(0x864CB9076D is prime)" ], [ "864CB9076D", "13a870ff0d", "59b099694a", "" ], [ "864CB9076D", "37d06b0e63", "4d2147e46f", "" ], [ "864CB9076D", "661714f8f4", "22e55df507", "" ], [ "F7F7F7F7F7", "2f0a96363", "52693307b4", "" ], [ "F7F7F7F7F7", "3c85078e64", "f2275ecb6d", "" ], [ "F7F7F7F7F7", "352dae68d1", "707775b4c6", "" ], [ "F7F7F7F7F7", "37ae0f3e0b", "912113040f", "" ], [ "1000000000F", "6dada15e31", "f58ed9eff7", "(0x1000000000F is prime)" ], [ "1000000000F", "69627a7c89", "cfb5ebd13d", "" ], [ "1000000000F", "a5e1ad239b", "afc030c731", "" ], [ "1000000000F", "f1cc45f4c5", "c64ad607c8", "" ], [ "800000000005", "2ebad87d2e31", "4c72d90bca78", "(0x800000000005 is prime)" ], [ "800000000005", "a30b3cc50d", "29ac4fe59490", "" ], [ "800000000005", "33674e9647b4", "5ec7ee7e72d3", "" ], [ "800000000005", "3d956f474f61", "74070040257d", "" ], [ "800795D9BA47", "48348e3717d6", "43fcb4399571", "(0x800795D9BA47 is prime)" ], [ "800795D9BA47", "5234c03cc99b", "2f3cccb87803", "" ], [ "800795D9BA47", "3ed13db194ab", "44b8f4ba7030", "" ], [ "800795D9BA47", "1c11e843bfdb", "95bd1b47b08", "" ], [ "1000000000015", "a81d11cb81fd", "1e5753a3f33d", "(0x1000000000015 is prime)" ], [ "1000000000015", "688c4db99232", "36fc0cf7ed", "" ], [ "1000000000015", "f0720cc07e07", "fc76140ed903", "" ], [ "1000000000015", "2ec61f8d17d1", "d270c85e36d2", "" ], [ "100000000000051", "6a24cd3ab63820", "ed4aad55e5e348", "(0x100000000000051 is prime)" ], [ "100000000000051", "e680c160d3b248", "31e0d8840ed510", "" ], [ "100000000000051", "a80637e9aebc38", "bb81decc4e1738", "" ], [ "100000000000051", "9afa5a59e9d630", "be9e65a6d42938", "" ], [ "ABCDEF0123456789", "ab5e104eeb71c000", "2cffbd639e9fea00", "" ], [ "ABCDEF0123456789", "197b867547f68a00", "44b796cf94654800", "" ], [ "ABCDEF0123456789", "329f9483a04f2c00", "9892f76961d0f000", "" ], [ "ABCDEF0123456789", "4a2e12dfb4545000", "1aa3e89a69794500", "" ], [ "25A55A46E5DA99C71C7", "8b9acdf013d140f000", "12e4ceaefabdf2b2f00", "0x25A55A46E5DA99C71C7 is the 3rd repunit prime (dec) 11111111111111111111111" ], [ "25A55A46E5DA99C71C7", "1b8d960ea277e3f5500", "14418aa980e37dd000", "" ], [ "25A55A46E5DA99C71C7", "7314524977e8075980", "8172fa45618ccd0d80", "" ], [ "25A55A46E5DA99C71C7", "ca14f031769be63580", "147a2f3cf2964ca9400", "" ], [ "314DC643FB763F2B8C0E2DE00879", "18532ba119d5cd0cf39735c0000", "25f9838e31634844924733000000", "0x314DC643FB763F2B8C0E2DE00879 is (dec)99999999977^3" ], [ "314DC643FB763F2B8C0E2DE00879", "a56e2d2517519e3970e70c40000", "ec27428d4bb380458588fa80000", "" ], [ "314DC643FB763F2B8C0E2DE00879", "1cb5e8257710e8653fff33a00000", "15fdd42fe440fd3a1d121380000", "" ], [ "314DC643FB763F2B8C0E2DE00879", "e50d07a65fc6f93e538ce040000", "1f4b059ca609f3ce597f61240000", "" ], [ "47BF19662275FA2F6845C74942ED1D852E521", "1ea3ade786a095d978d387f30df9f20000000", "127c448575f04af5a367a7be06c7da0000000", "0x47BF19662275FA2F6845C74942ED1D852E521 is (dec) 99999999977^4" ], [ "47BF19662275FA2F6845C74942ED1D852E521", "16e15b0ca82764e72e38357b1f10a20000000", "43e2355d8514bbe22b0838fdc3983a0000000", "" ], [ "47BF19662275FA2F6845C74942ED1D852E521", "be39332529d93f25c3d116c004c620000000", "5cccec42370a0a2c89c6772da801a0000000", "" ], [ "47BF19662275FA2F6845C74942ED1D852E521", "ecaa468d90de0eeda474d39b3e1fc0000000", "1e714554018de6dc0fe576bfd3b5660000000", "" ], [ "97EDD86E4B5C4592C6D32064AC55C888A7245F07CA3CC455E07C931", "32298816711c5dce46f9ba06e775c4bedfc770e6700000000000000", "8ee751fd5fb24f0b4a653cb3a0c8b7d9e724574d168000000000000", "0x97EDD86E4B5C4592C6D32064AC55C888A7245F07CA3CC455E07C931 is (dec) 99999999977^6" ], [ "97EDD86E4B5C4592C6D32064AC55C888A7245F07CA3CC455E07C931", "29213b9df3cfd15f4b428645b67b677c29d1378d810000000000000", "6cbb732c65e10a28872394dfdd1936d5171c3c3aac0000000000000", "" ], [ "97EDD86E4B5C4592C6D32064AC55C888A7245F07CA3CC455E07C931", "6f18db06ad4abc52c0c50643dd13098abccd4a232f0000000000000", "7e6bf41f2a86098ad51f98dfc10490ba3e8081bc830000000000000", "" ], [ "97EDD86E4B5C4592C6D32064AC55C888A7245F07CA3CC455E07C931", "62d3286cd706ad9d73caff63f1722775d7e8c731208000000000000", "530f7ba02ae2b04c2fe3e3d27ec095925631a6c2528000000000000", "" ], [ "DD15FE80B731872AC104DB37832F7E75A244AA2631BC87885B861E8F20375499", "a6c6503e3c031fdbf6009a89ed60582b7233c5a85de28b16000000000000000", "75c8ed18270b583f16d442a467d32bf95c5e491e9b8523798000000000000000", "0xDD15FE80B731872AC104DB37832F7E75A244AA2631BC87885B861E8F20375499 is (dec) 99999999977^7" ], [ "DD15FE80B731872AC104DB37832F7E75A244AA2631BC87885B861E8F20375499", "bf84d1f85cf6b51e04d2c8f4ffd03532d852053cf99b387d4000000000000000", "397ba5a743c349f4f28bc583ecd5f06e0a25f9c6d98f09134000000000000000", "" ], [ "DD15FE80B731872AC104DB37832F7E75A244AA2631BC87885B861E8F20375499", "6db11c3a4152ed1a2aa6fa34b0903ec82ea1b88908dcb482000000000000000", "ac8ac576a74ad6ca48f201bf89f77350ce86e821358d85920000000000000000", "" ], [ "DD15FE80B731872AC104DB37832F7E75A244AA2631BC87885B861E8F20375499", "3001d96d7fe8b733f33687646fc3017e3ac417eb32e0ec708000000000000000", "925ddbdac4174e8321a48a32f79640e8cf7ec6f46ea235a80000000000000000", "" ], [ "141B8EBD9009F84C241879A1F680FACCED355DA36C498F73E96E880CF78EA5F96146380E41", "1029048755f2e60dd98c8de6d9989226b6bb4f0db8e46bd1939de560000000000000000000", "51bb7270b2e25cec0301a03e8275213bb6c2f6e6ec93d4d46d36ca0000000000000000000", "0x141B8EBD9009F84C241879A1F680FACCED355DA36C498F73E96E880CF78EA5F96146380E41 is 99999999977^8" ], [ "141B8EBD9009F84C241879A1F680FACCED355DA36C498F73E96E880CF78EA5F96146380E41", "1c5337ff982b3ad6611257dbff5bbd7a9920ba2d4f5838a0cc681ce000000000000000000", "520c5d049ca4702031ba728591b665c4d4ccd3b2b86864d4c160fd2000000000000000000", "" ], [ "141B8EBD9009F84C241879A1F680FACCED355DA36C498F73E96E880CF78EA5F96146380E41", "57074dfa00e42f6555bae624b7f0209f218adf57f73ed34ab0ff90c000000000000000000", "41eb14b6c07bfd3d1fe4f4a610c17cc44fcfcda695db040e011065000000000000000000", "" ], [ "141B8EBD9009F84C241879A1F680FACCED355DA36C498F73E96E880CF78EA5F96146380E41", "d8ed7feed2fe855e6997ad6397f776158573d425031bf085a615784000000000000000000", "6f121dcd18c578ab5e229881006007bb6d319b179f11015fe958b9c000000000000000000", "" ], [ "2A94608DE88B6D5E9F8920F5ABB06B24CC35AE1FBACC87D075C621C3E2833EC902713E40F51E3B3C214EDFABC451", "2a462b156180ea5fe550d3758c764e06fae54e626b5f503265a09df76edbdfbfa1e6000000000000000000000000", "1136f41d1879fd4fb9e49e0943a46b6704d77c068ee237c3121f9071cfd3e6a00315800000000000000000000000", "0x2A94608DE88B6D5E9F8920F5ABB06B24CC35AE1FBACC87D075C621C3E2833EC902713E40F51E3B3C214EDFABC451 is (dec) 99999999977^10" ], [ "2A94608DE88B6D5E9F8920F5ABB06B24CC35AE1FBACC87D075C621C3E2833EC902713E40F51E3B3C214EDFABC451", "c1ac3800dfb3c6954dea391d206200cf3c47f795bf4a5603b4cb88ae7e574de4740800000000000000000000000", "c0d16eda0549ede42fa0deb4635f7b7ce061fadea02ee4d85cba4c4f7096034193c800000000000000000000000", "" ], [ "2A94608DE88B6D5E9F8920F5ABB06B24CC35AE1FBACC87D075C621C3E2833EC902713E40F51E3B3C214EDFABC451", "19e45bb7633094d272588ad2e43bcb3ee341991c6731b6fa9d47c4018d7ce7bba5ee800000000000000000000000", "1e4f83166ae59f6b9cc8fd3e7677ed8bfc01bb99c98bd3eb084246b64c1e18c3365b800000000000000000000000", "" ], [ "2A94608DE88B6D5E9F8920F5ABB06B24CC35AE1FBACC87D075C621C3E2833EC902713E40F51E3B3C214EDFABC451", "1aa93395fad5f9b7f20b8f9028a054c0bb7c11bb8520e6a95e5a34f06cb70bcdd01a800000000000000000000000", "54b45afa5d4310192f8d224634242dd7dcfb342318df3d9bd37b4c614788ba13b8b000000000000000000000000", "" ], [ "8335616AED761F1F7F44E6BD49E807B82E3BF2BF11BFA6AF813C808DBF33DBFA11DABD6E6144BEF37C6800000000000000000000000000000000051", "544f2628a28cfb5ce0a1b7180ee66b49716f1d9476c466c57f0c4b2308991784306d48f78686115ee19e25400000000000000000000000000000000", "677eb31ef8d66c120fa872a60cd47f6e10cbfdf94f90501bd7883cba03d185be0a0148d1625745e9c4c827300000000000000000000000000000000", "0x8335616AED761F1F7F44E6BD49E807B82E3BF2BF11BFA6AF813C808DBF33DBFA11DABD6E6144BEF37C6800000000000000000000000000000000051 is prime, (dec) 10^143 + 3^4" ], [ "8335616AED761F1F7F44E6BD49E807B82E3BF2BF11BFA6AF813C808DBF33DBFA11DABD6E6144BEF37C6800000000000000000000000000000000051", "76bb3470985174915e9993522aec989666908f9e8cf5cb9f037bf4aee33d8865cb6464174795d07e30015b80000000000000000000000000000000", "6aaaf60d5784dcef612d133613b179a317532ecca0eed40b8ad0c01e6d4a6d8c79a52af190abd51739009a900000000000000000000000000000000", "" ], [ "8335616AED761F1F7F44E6BD49E807B82E3BF2BF11BFA6AF813C808DBF33DBFA11DABD6E6144BEF37C6800000000000000000000000000000000051", "6cfdd6e60912e441d2d1fc88f421b533f0103a5322ccd3f4db84861643ad63fd63d1d8cfbc1d498162786ba00000000000000000000000000000000", "1177246ec5e93814816465e7f8f248b350d954439d35b2b5d75d917218e7fd5fb4c2f6d0667f9467fdcf33400000000000000000000000000000000", "" ], [ "8335616AED761F1F7F44E6BD49E807B82E3BF2BF11BFA6AF813C808DBF33DBFA11DABD6E6144BEF37C6800000000000000000000000000000000051", "7a09a0b0f8bbf8057116fb0277a9bdf3a91b5eaa8830d448081510d8973888be5a9f0ad04facb69aa3715f00000000000000000000000000000000", "764dec6c05a1c0d87b649efa5fd94c91ea28bffb4725d4ab4b33f1a3e8e3b314d799020e244a835a145ec9800000000000000000000000000000000", "" ], ); my %described = (); for my $g (@generate) { my ($nh, $ah, $bh, $info) = @$g; my $a = Math::BigInt->from_hex($ah); my $b = Math::BigInt->from_hex($bh); my $n = Math::BigInt->from_hex($nh); my $ln4 = mpi4s($n); my $la4 = mpi4s($a); my $lb4 = mpi4s($b); my $ln8 = mpi8s($n); my $la8 = mpi8s($a); my $lb8 = mpi8s($b); my $r4 = bound_mpi4($n->copy()); my $i4 = $r4->copy()->bmodinv($n); my $x4 = $a * $b * $i4; $x4->bmod($n); my $xh4 = Math::BigInt->new($x4)->to_hex(); my $r8 = bound_mpi8($n->copy()); my $i8 = $r8->copy()->bmodinv($n); my $x8 = $a * $b * $i8; $x8->bmod($n); my $xh8 = Math::BigInt->new($x8)->to_hex(); die("") if $la4 > $ln4 \|\| $la8 > $ln8; my $desc = "$test_name #NUMBER (gen)"; if ($ln4 > 1) { if (!$described{"2-MPI4"}) { $desc .= " (start of 2-MPI 4-byte bignums)"; $described{"2-MPI4"} = 1; } } if ($ln8 > 1) { if (!$described{"2-MPI8"}) { $desc .= " (start of 2-MPI 8-byte bignums)"; $described{"2-MPI8"} = 1; } } if (length($info) && !$described{$info}) { $desc .= " " . $info; $described{$info} = 1; } my $case = output($test_name, $ln4, $lb4, $ln8, $lb8, str($ah), str($bh), str($nh), str($xh4), str($xh8)); #push(@cases, [$case, $desc, "MBEDTLS_HAVE_INT64"]); -- now doing it differently push(@cases, [$case, $desc]); } output_cases("", @cases); } sub output_cases { my ($explain, @cases) = @_; my $count = 1; for my $c (@cases) { my ($case, $desc, $dep) = @$c; $desc =~ s/NUMBER/$count/; $count++; if (defined($explain) && $desc =~ /EXPLAIN/) { $desc =~ s/EXPLAIN/$explain/; $explain = ""; } my $depends = ""; $depends = "depends_on:$dep\n" if defined($dep) && length($dep); print <<EOF; $desc $depends$case EOF } } # The first number (a power of 2) that won't fit in the number of MPIs # needed for the given number sub bound_mpi4 { my $one = Math::BigInt->new(1); # blsft modifies caller return $one->blsft(bits_mpi4($_[0])); } sub bound_mpi8 { my $one = Math::BigInt->new(1); # blsft modifies caller return $one->blsft(bits_mpi8($_[0])); } # How many bits (a multiple of 32) needed to store the specified number # when using 4-byte MPIs sub bits_mpi4 { return 32 * mpi4s($_[0]); } # How many bits (a multiple of 64) needed to store the specified number # when using 8-byte MPIs sub bits_mpi8 { return 64 * mpi8s($_[0]); } # How many 4-byte MPIs needed to store the specified number sub mpi4s { my ($n) = @_; my $h = $n->to_hex(); return int((length($h) + 7) / 8); } # How many 8-byte MPIs needed to store the specified number sub mpi8s { my ($n) = @_; my $h = $n->to_hex(); return int((length($h) + 15) / 16); } sub output { #run_test(@_); return join(":", @_); } sub str { return '"' . $_[0] . '"'; } ``` The data for the generated test cases (@generate) for mpi-test-core-montmul.pl was created by ``` #!/usr/bin/env perl # # mpi-modmul-gen.pl - randomly generate test cases for mpi-test-core-montmul.pl # use strict; use warnings; use Math::BigInt; use sort 'stable'; my %seen = (); my @primes = ( "3", "7", "B", "29", "101", "38B", "8003", "10001", "800009", "100002B", "37EEE9D", "8000000B", "8CD626B9", # From here they require > 1 4-byte MPI "10000000F", "174876E7E9", "8000000017", "864CB9076D", "1000000000F", "800000000005", "800795D9BA47", "1000000000015", "100000000000051", # From here they require > 1 8-byte MPI "25A55A46E5DA99C71C7", # this is 11111111111111111111111 decimal # 10^143 + 3^4: (which is prime) # 100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081 "8335616AED761F1F7F44E6BD49E807B82E3BF2BF11BFA6AF813C808DBF33DBFA11DABD6E6144BEF37C6800000000000000000000000000000000051", ); my %prime = map { $_ => 1 } @primes; my @moduli = ( [ "3", "" ], [ "7", "" ], [ "B", "" ], [ "29", "" ], [ "FF", "" ], [ "101", "" ], [ "38B", "" ], [ "8003", "" ], [ "10001", "" ], [ "7F7F7", "" ], [ "800009", "" ], [ "100002B", "" ], [ "37EEE9D", "" ], [ "8000000B", "" ], [ "8CD626B9", "" ], [ "10000000F", "" ], [ "174876E7E9", "0x174876E7E9 is prime (dec) 99999999977" ], [ "8000000017", "" ], [ "864CB9076D", "" ], [ "F7F7F7F7F7", "" ], [ "1000000000F", "" ], [ "800000000005", "" ], [ "800795D9BA47", "" ], [ "1000000000015", "" ], [ "100000000000051", "" ], [ "ABCDEF0123456789", "" ], [ "25A55A46E5DA99C71C7", "0x25A55A46E5DA99C71C7 is the 3rd repunit prime (dec) 11111111111111111111111" ], [ "314DC643FB763F2B8C0E2DE00879", "0x314DC643FB763F2B8C0E2DE00879 is (dec)99999999977^3" ], [ "47BF19662275FA2F6845C74942ED1D852E521", "0x47BF19662275FA2F6845C74942ED1D852E521 is (dec) 99999999977^4" ], [ "97EDD86E4B5C4592C6D32064AC55C888A7245F07CA3CC455E07C931", "0x97EDD86E4B5C4592C6D32064AC55C888A7245F07CA3CC455E07C931 is (dec) 99999999977^6" ], [ "DD15FE80B731872AC104DB37832F7E75A244AA2631BC87885B861E8F20375499", "0xDD15FE80B731872AC104DB37832F7E75A244AA2631BC87885B861E8F20375499 is (dec) 99999999977^7" ], [ "141B8EBD9009F84C241879A1F680FACCED355DA36C498F73E96E880CF78EA5F96146380E41", "0x141B8EBD9009F84C241879A1F680FACCED355DA36C498F73E96E880CF78EA5F96146380E41 is 99999999977^8" ], [ "2A94608DE88B6D5E9F8920F5ABB06B24CC35AE1FBACC87D075C621C3E2833EC902713E40F51E3B3C214EDFABC451", "0x2A94608DE88B6D5E9F8920F5ABB06B24CC35AE1FBACC87D075C621C3E2833EC902713E40F51E3B3C214EDFABC451 is (dec) 99999999977^10" ], [ "8335616AED761F1F7F44E6BD49E807B82E3BF2BF11BFA6AF813C808DBF33DBFA11DABD6E6144BEF37C6800000000000000000000000000000000051", "0x8335616AED761F1F7F44E6BD49E807B82E3BF2BF11BFA6AF813C808DBF33DBFA11DABD6E6144BEF37C6800000000000000000000000000000000051 is prime, (dec) 10^143 + 3^4" ], # 100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081 ); #99999999977^2: #ibase=16 ; obase=10 ; 174876E7E9174876E7E9 #99999999977^3: #ibase=16 ; obase=10 ; 174876E7E9174876E7E9*174876E7E9 #99999999977^2: 21E19E0C58BACE25211 #99999999977^3: 314DC643FB763F2B8C0E2DE00879 #99999999977^4: 47BF19662275FA2F6845C74942ED1D852E521 #99999999977^5: 6867A5A664437D20ED7941408583AADA2193CE95695209 #99999999977^6: 97EDD86E4B5C4592C6D32064AC55C888A7245F07CA3CC455E07C931 #99999999977^7: DD15FE80B731872AC104DB37832F7E75A244AA2631BC87885B861E8F20375499 #99999999977^8: 141B8EBD9009F84C241879A1F680FACCED355DA36C498F73E96E880CF78EA5F96146380E41 #99999999977^9: 1D42AEA1837AA78C6339224E9B39A483E4AAAF12CE7752E1EA1681082CBC8AB056A36B6299557D7A029 #99999999977^10: 2A94608DE88B6D5E9F8920F5ABB06B24CC35AE1FBACC87D075C621C3E2833EC902713E40F51E3B3C214EDFABC451 my %mentioned = (); for my $mod (@moduli) { my ($nh, $info) = @$mod; my $n = Math::BigInt->from_hex($nh); my $xxx = $n->to_hex(); die("$xxx != $nh") unless lc($xxx) eq lc($nh); my $cases = ($n < 5) ? 3 : 4; for (my $case = 0; $case < $cases; $case++) { my ($a, $b); for ($a = 0; $a == 0; ) { $a = int(rand($n)); } for ($b = 0; $b == 0; ) { $b = int(rand($n)); } my $cstr = "$a\|$b\|$n"; if (exists($seen{$cstr})) { # don't repeat ourselves $case--; next; } $seen{$cstr} = 1; my $ah = Math::BigInt->new($a)->to_hex(); my $bh = Math::BigInt->new($b)->to_hex(); my $desc = ""; if (length($info)) { $desc = $info if !$mentioned{$info}; $mentioned{$info} = 1; } elsif (length($nh) > 1 && $prime{$nh} && !$mentioned{$nh}) { $desc = "(0x$nh is prime)"; $mentioned{$nh} = 1; } print <<EOF; [ "$nh", "$ah", "$bh", "$desc" ], EOF } } ``` Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-08-23 16:29:00 +01:00
Tom Cosgrove	79b70f6394	Make a public version of mpi_montg_init() in bignum_new.c and add unit tests The unit tests were created by capturing runs of the existing function during execution of existing unit tests. Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-08-23 16:28:32 +01:00
Tom Cosgrove	659c84add9	Add unit tests for the new function mbedtls_mpi_core_mla() in bignum_new.c The test cases use the following MPI values: 0 1 fffe ffffffff 100000000 20000000000000 ffffffffffffffff 10000000000000000 1234567890abcdef0 fffffffffffffffffefefefefefefefe 100000000000000000000000000000000 1234567890abcdef01234567890abcdef0 ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff 1234567890abcdef01234567890abcdef01234567890abcdef01234567890abcdef0 4df72d07b4b71c8dacb6cffa954f8d88254b6277099308baf003fab73227f34029643b5a263f66e0d3c3fa297ef71755efd53b8fb6cb812c6bbf7bcf179298bd9947c4c8b14324140a2c0f5fad7958a69050a987a6096e9f055fb38edf0c5889eca4a0cfa99b45fbdeee4c696b328ddceae4723945901ec025076b12b and the following scalars. The .data files include two sets of results (final accumulator and carry) for the cases sizeof(mbedtls_mpi_uint) == 4 or 8. 0 3 fe ff ffff 10000 ffffffff 100000000 7f7f7f7f7f7f7f7f 8000000000000000 fffffffffffffffe The lines in the .data file were generated by the following script #!/usr/bin/env perl # # mpi-test-core-mla.pl - generate/run MPI tests in Perl for mbedtls_mpi_core_mla() # use strict; use warnings; use Math::BigInt; use sort 'stable'; my @mla_mpis = qw( 0 1 fffe ffffffff 100000000 20000000000000 ffffffffffffffff 10000000000000000 1234567890abcdef0 fffffffffffffffffefefefefefefefe 100000000000000000000000000000000 1234567890abcdef01234567890abcdef0 ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff 1234567890abcdef01234567890abcdef01234567890abcdef01234567890abcdef0 4df72d07b4b71c8dacb6cffa954f8d88254b6277099308baf003fab73227f34029643b5a263f66e0d3c3fa297ef71755efd53b8fb6cb812c6bbf7bcf179298bd9947c4c8b14324140a2c0f5fad7958a69050a987a6096e9f055fb38edf0c5889eca4a0cfa99b45fbdeee4c696b328ddceae4723945901ec025076b12b ); my @mla_scalars = qw( 0 3 fe ff ffff 10000 ffffffff 100000000 7f7f7f7f7f7f7f7f 8000000000000000 fffffffffffffffe ); my @mla_full_mpis = qw( 0 1 3 f fe ff 100 ff00 fffe ffff 10000 fffffffe ffffffff 100000000 1f7f7f7f7f7f7f 8000000000000000 fefefefefefefefe fffffffffffffffe ffffffffffffffff 10000000000000000 1234567890abcdef0 fffffffffffffffffefefefefefefefe fffffffffffffffffffffffffffffffe ffffffffffffffffffffffffffffffff 100000000000000000000000000000000 1234567890abcdef01234567890abcdef0 fffffffffffffffffffffffffffffffffffffffffffffffffefefefefefefefe fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff 10000000000000000000000000000000000000000000000000000000000000000 1234567890abcdef01234567890abcdef01234567890abcdef01234567890abcdef0 4df72d07b4b71c8dacb6cffa954f8d88254b6277099308baf003fab73227f34029643b5a263f66e0d3c3fa297ef71755efd53b8fb6cb812c6bbf7bcf179298bd9947c4c8b14324140a2c0f5fad7958a69050a987a6096e9f055fb38edf0c5889eca4a0cfa99b45fbdeee4c696b328ddceae4723945901ec025076b12b ); my @mla_full_scalars = qw( 0 1 3 f fe ff 100 ff00 fffe ffff 10000 fffffffe ffffffff 100000000 8000000000000000 fefefefefefefefe fffffffffffffffe ffffffffffffffff ); generate_tests(); sub generate_tests { generate_mbedtls_mpi_core_mla(); } sub generate_mbedtls_mpi_core_mla { my $sub_name = (caller(0))[3]; # e.g. main::generate_mbedtls_mpi_sub_mpi my ($ignore, $test_name) = split("main::generate_", $sub_name); my @cases = (); for my $ah (@mla_mpis) { for my $bh (@mla_mpis) { for my $ch (@mla_scalars) { # a += b * c (c is scalar) # a_len >= b_len. need carry out. my $a = Math::BigInt->from_hex($ah); my $b = Math::BigInt->from_hex($bh); my $c = Math::BigInt->from_hex($ch); my $max = ($a > $b) ? $a : $b; my $bound4 = bound_mpi4($max); my $bound8 = bound_mpi8($max); my $r = $a + $b * $c; my ($r4, $cy4) = ($r->copy(), 0); my ($r8, $cy8) = ($r->copy(), 0); ($cy4, $r4) = $r4->bdiv($bound4); ($cy8, $r8) = $r8->bdiv($bound8); my $rh4 = $r4->to_hex(); my $rh8 = $r8->to_hex(); my $cyh4 = $cy4->to_hex(); my $cyh8 = $cy8->to_hex(); # If the scalar c is too big for 1 x 4-byte MPI, we can only run this test on a system with 8-byte MPIs my $depends = mpi4s($c) > 1 ? "MBEDTLS_HAVE_INT64" : ""; my $desc = "$test_name #NUMBER: 0x$ah + 0x$bh * 0x$ch = (0x$rh4, carry 0x$cyh4)/(0x$rh8, carry 0x$cyh8)EXPLAIN"; my $case = output($test_name, str($ah), str($bh), str($ch), str($rh4), str($cyh4), str($rh8), str($cyh8)); push(@cases, [$case, $desc, $depends]); } } } output_cases(" (for when sizeof(mbedtls_mpi_uint) == 4/8)", @cases); } sub output_cases { my ($explain, @cases) = @_; my $count = 1; for my $c (@cases) { my ($case, $desc, $dep) = @$c; $desc =~ s/NUMBER/$count/; $count++; if (defined($explain) && $desc =~ /EXPLAIN/) { $desc =~ s/EXPLAIN/$explain/; $explain = ""; } my $depends = ""; $depends = "depends_on:$dep\n" if defined($dep) && length($dep); print <<EOF; $desc $depends$case EOF } } # The first number (a power of 2) that won't fit in the number of MPIs # needed for the given number sub bound_mpi4 { my $one = Math::BigInt->new(1); # blsft modifies caller return $one->blsft(bits_mpi4($_[0])); } sub bound_mpi8 { my $one = Math::BigInt->new(1); # blsft modifies caller return $one->blsft(bits_mpi8($_[0])); } # How many bits (a multiple of 32) needed to store the specified number # when using 4-byte MPIs sub bits_mpi4 { return 32 * mpi4s($_[0]); } # How many bits (a multiple of 64) needed to store the specified number # when using 8-byte MPIs sub bits_mpi8 { return 64 * mpi8s($_[0]); } # How many 4-byte MPIs needed to store the specified number sub mpi4s { my ($n) = @_; my $h = $n->to_hex(); return int((length($h) + 7) / 8); } # How many 8-byte MPIs needed to store the specified number sub mpi8s { my ($n) = @_; my $h = $n->to_hex(); return int((length($h) + 15) / 16); } sub output { #run_test(@_); return join(":", @_); } sub str { return '"' . $_[0] . '"'; } Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-08-23 16:28:01 +01:00
Tom Cosgrove	2a65b85928	Add unit tests for the new function mbedtls_mpi_core_sub() in bignum_new.c The test cases use the following MPI values. The .data file includes two results, for the cases when sizeof(mbedtls_mpi_uint) == 4 or 8. 0 1 3 f fe ff 100 ff00 fffe ffff 10000 fffffffe ffffffff 100000000 1f7f7f7f7f7f7f 8000000000000000 fefefefefefefefe fffffffffffffffe ffffffffffffffff 10000000000000000 1234567890abcdef0 fffffffffffffffffefefefefefefefe fffffffffffffffffffffffffffffffe ffffffffffffffffffffffffffffffff 100000000000000000000000000000000 1234567890abcdef01234567890abcdef0 fffffffffffffffffffffffffffffffffffffffffffffffffefefefefefefefe fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff 10000000000000000000000000000000000000000000000000000000000000000 1234567890abcdef01234567890abcdef01234567890abcdef01234567890abcdef0 4df72d07b4b71c8dacb6cffa954f8d88254b6277099308baf003fab73227f34029643b5a263f66e0d3c3fa297ef71755efd53b8fb6cb812c6bbf7bcf179298bd9947c4c8b14324140a2c0f5fad7958a69050a987a6096e9f055fb38edf0c5889eca4a0cfa99b45fbdeee4c696b328ddceae4723945901ec025076b12b The lines in the .data file were generated by the following script #!/usr/bin/env perl # # mpi-test-core-sub.pl - generate/run MPI tests in Perl for mbedtls_mpi_core_sub() # use strict; use warnings; use Math::BigInt; use sort 'stable'; my @sub_mpis = qw( 0 1 3 f fe ff 100 ff00 fffe ffff 10000 fffffffe ffffffff 100000000 1f7f7f7f7f7f7f 8000000000000000 fefefefefefefefe fffffffffffffffe ffffffffffffffff 10000000000000000 1234567890abcdef0 fffffffffffffffffefefefefefefefe fffffffffffffffffffffffffffffffe ffffffffffffffffffffffffffffffff 100000000000000000000000000000000 1234567890abcdef01234567890abcdef0 fffffffffffffffffffffffffffffffffffffffffffffffffefefefefefefefe fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff 10000000000000000000000000000000000000000000000000000000000000000 1234567890abcdef01234567890abcdef01234567890abcdef01234567890abcdef0 4df72d07b4b71c8dacb6cffa954f8d88254b6277099308baf003fab73227f34029643b5a263f66e0d3c3fa297ef71755efd53b8fb6cb812c6bbf7bcf179298bd9947c4c8b14324140a2c0f5fad7958a69050a987a6096e9f055fb38edf0c5889eca4a0cfa99b45fbdeee4c696b328ddceae4723945901ec025076b12b ); generate_tests(); sub generate_tests { generate_mbedtls_mpi_core_sub(); } sub generate_mbedtls_mpi_core_sub { my $sub_name = (caller(0))[3]; # e.g. main::generate_mbedtls_mpi_sub_mpi my ($ignore, $test_name) = split("main::generate_", $sub_name); my @cases = (); for my $ah (@sub_mpis) { for my $bh (@sub_mpis) { my $a = Math::BigInt->from_hex($ah); my $b = Math::BigInt->from_hex($bh); my ($rh4, $rh8, $carry); if ($a >= $b) { my $r = $a - $b; $rh4 = $rh8 = $r->to_hex(); $carry = 0; } else { my $r4 = bound_mpi4($b) + $a - $b; my $r8 = bound_mpi8($b) + $a - $b; $rh4 = $r4->to_hex(); $rh8 = $r8->to_hex(); $carry = 1; } my $desc = "$test_name #NUMBER: 0x$ah - 0x$bh = 0x$rh4/${rh8}EXPLAIN, carry ${carry}"; my $case = output($test_name, str($ah), str($bh), str($rh4), str($rh8), $carry); push(@cases, [$case, $desc]); } } output_cases(" (for when sizeof(mbedtls_mpi_uint) == 4/8)", @cases); } sub output_cases { my ($explain, @cases) = @_; my $count = 1; for my $c (@cases) { my ($case, $desc, $dep) = @$c; $desc =~ s/NUMBER/$count/; $count++; if (defined($explain) && $desc =~ /EXPLAIN/) { $desc =~ s/EXPLAIN/$explain/; $explain = ""; } my $depends = ""; $depends = "depends_on:$dep\n" if defined($dep) && length($dep); print <<EOF; $desc $depends$case EOF } } # The first number (a power of 2) that won't fit in the number of MPIs # needed for the given number sub bound_mpi4 { my $one = Math::BigInt->new(1); # blsft modifies caller return $one->blsft(bits_mpi4($_[0])); } sub bound_mpi8 { my $one = Math::BigInt->new(1); # blsft modifies caller return $one->blsft(bits_mpi8($_[0])); } # How many bits (a multiple of 32) needed to store the specified number # when using 4-byte MPIs sub bits_mpi4 { return 32 * mpi4s($_[0]); } # How many bits (a multiple of 64) needed to store the specified number # when using 8-byte MPIs sub bits_mpi8 { return 64 * mpi8s($_[0]); } # How many 4-byte MPIs needed to store the specified number sub mpi4s { my ($n) = @_; my $h = $n->to_hex(); return int((length($h) + 7) / 8); } # How many 8-byte MPIs needed to store the specified number sub mpi8s { my ($n) = @_; my $h = $n->to_hex(); return int((length($h) + 15) / 16); } sub output { return join(":", @_); } sub str { return '"' . $_[0] . '"'; } Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-08-23 16:27:18 +01:00
Tom Cosgrove	0cc78658c3	Add unit tests for the new function mbedtls_mpi_core_add_if() in bignum_new.c The test cases use the following MPI values. The .data file only includes those (a, b) values where a <= b, and gives the sum unconditionally; the test code exercises a >= b and cond == 0 using these values. The .data file gives two values for the carry out, which are for when sizeof(mbedtls_mpi_uint) == 4 or 8. 0 1 3 f fe ff 100 ff00 fffe ffff 10000 fffffffe ffffffff 100000000 1f7f7f7f7f7f7f 8000000000000000 fefefefefefefefe fffffffffffffffe ffffffffffffffff 10000000000000000 1234567890abcdef0 fffffffffffffffffefefefefefefefe fffffffffffffffffffffffffffffffe ffffffffffffffffffffffffffffffff 100000000000000000000000000000000 1234567890abcdef01234567890abcdef0 fffffffffffffffffffffffffffffffffffffffffffffffffefefefefefefefe fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff 10000000000000000000000000000000000000000000000000000000000000000 1234567890abcdef01234567890abcdef01234567890abcdef01234567890abcdef0 4df72d07b4b71c8dacb6cffa954f8d88254b6277099308baf003fab73227f34029643b5a263f66e0d3c3fa297ef71755efd53b8fb6cb812c6bbf7bcf179298bd9947c4c8b14324140a2c0f5fad7958a69050a987a6096e9f055fb38edf0c5889eca4a0cfa99b45fbdeee4c696b328ddceae4723945901ec025076b12b The lines in the .data file were generated by the following script ``` #!/usr/bin/env perl # # mpi-test-core-add-if.pl - generate MPI tests in Perl for mbedtls_mpi_core_add_if() # use strict; use warnings; use Math::BigInt; use sort 'stable'; my @add_mpis = qw( 0 1 3 f fe ff 100 ff00 fffe ffff 10000 fffffffe ffffffff 100000000 1f7f7f7f7f7f7f 8000000000000000 fefefefefefefefe fffffffffffffffe ffffffffffffffff 10000000000000000 1234567890abcdef0 fffffffffffffffffefefefefefefefe fffffffffffffffffffffffffffffffe ffffffffffffffffffffffffffffffff 100000000000000000000000000000000 1234567890abcdef01234567890abcdef0 fffffffffffffffffffffffffffffffffffffffffffffffffefefefefefefefe fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff 10000000000000000000000000000000000000000000000000000000000000000 1234567890abcdef01234567890abcdef01234567890abcdef01234567890abcdef0 4df72d07b4b71c8dacb6cffa954f8d88254b6277099308baf003fab73227f34029643b5a263f66e0d3c3fa297ef71755efd53b8fb6cb812c6bbf7bcf179298bd9947c4c8b14324140a2c0f5fad7958a69050a987a6096e9f055fb38edf0c5889eca4a0cfa99b45fbdeee4c696b328ddceae4723945901ec025076b12b ); generate_tests(); sub generate_tests { generate_mbedtls_mpi_core_add_if(); } sub generate_mbedtls_mpi_core_add_if { my $sub_name = (caller(0))[3]; # e.g. main::generate_mbedtls_mpi_add_mpi my ($ignore, $test_name) = split("main::generate_", $sub_name); my @cases = (); for my $ah (@add_mpis) { for my $bh (@add_mpis) { my $a = Math::BigInt->from_hex($ah); my $b = Math::BigInt->from_hex($bh); next if $a > $b; # don't need to repeat test cases # $b is the larger (or equal) of the two numbers. That's the number of limbs # we'll be using. my $bound4 = bound_mpi4($b); my $bound8 = bound_mpi8($b); my $r = $a + $b; my ($r4, $carry4) = ($r->copy(), 0); my ($r8, $carry8) = ($r->copy(), 0); ($carry4, $r4) = $r4->bdiv($bound4); ($carry8, $r8) = $r8->bdiv($bound8); my $rh4 = $r4->to_hex(); my $rh8 = $r8->to_hex(); my $desc = "$test_name #NUMBER: 0x$ah + 0x$bh = (0x$rh4, carry $carry4)/(0x$rh8, carry $carry8)EXPLAIN"; my $case = output($test_name, str($ah), str($bh), str($rh4), $carry4, str($rh8), $carry8); push(@cases, [$case, $desc]); } } output_cases(" (for when sizeof(mbedtls_mpi_uint) == 4/8)", @cases); } sub output_cases { my ($explain, @cases) = @_; my $count = 1; for my $c (@cases) { my ($case, $desc, $dep) = @$c; $desc =~ s/NUMBER/$count/; $count++; if (defined($explain) && $desc =~ /EXPLAIN/) { $desc =~ s/EXPLAIN/$explain/; $explain = ""; } my $depends = ""; $depends = "depends_on:$dep\n" if defined($dep) && length($dep); print <<EOF; $desc $depends$case EOF } } # The first number (a power of 2) that won't fit in the number of MPIs # needed for the given number sub bound_mpi4 { my $one = Math::BigInt->new(1); # blsft modifies caller return $one->blsft(bits_mpi4($_[0])); } sub bound_mpi8 { my $one = Math::BigInt->new(1); # blsft modifies caller return $one->blsft(bits_mpi8($_[0])); } # How many bits (a multiple of 32) needed to store the specified number # when using 4-byte MPIs sub bits_mpi4 { return 32 * mpi4s($_[0]); } # How many bits (a multiple of 64) needed to store the specified number # when using 8-byte MPIs sub bits_mpi8 { return 64 * mpi8s($_[0]); } # How many 4-byte MPIs needed to store the specified number sub mpi4s { my ($n) = @_; my $h = $n->to_hex(); return int((length($h) + 7) / 8); } # How many 8-byte MPIs needed to store the specified number sub mpi8s { my ($n) = @_; my $h = $n->to_hex(); return int((length($h) + 15) / 16); } sub output { return join(":", @_); } sub str { return '"' . $_[0] . '"'; } ``` Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-08-23 16:26:52 +01:00
Andrzej Kurek	32bd063773	test_suite_ssl: Add minimal handshake requirements Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-08-23 05:42:44 -04:00
Andrzej Kurek	299b1d6c93	Remove unnecessary `psa/crypto.h` include This is now included in `legacy_or_psa.h`. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-08-23 05:42:33 -04:00
Andrzej Kurek	cccb044804	Style & formatting fixes Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-08-23 05:26:02 -04:00
Janos Follath	645ff5b8ff	Merge pull request #6095 from gabor-mezei-arm/6016_add_new_modulus_and_residue_structures Add the new modulus and the residue structures with low level I/O operations	2022-08-23 09:02:43 +01:00
Andrzej Kurek	21b6870301	test_suite_ssl: remove unnecessary usage of mbedtls_md_get_size Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-08-22 17:46:50 -04:00
Andrzej Kurek	8c95ac4500	Add missing dependencies / alternatives A number of places lacked the necessary dependencies on one of the used features: MD, key exchange with certificate, entropy, or ETM. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-08-22 17:46:50 -04:00
Andrzej Kurek	7bb8bab457	Update SHA and MD5 dependencies in the SSL tests The same elements are now also used when MBEDTLS_USE_PSA_CRYPTO is defined and respective SHA / MD5 defines are missing. A new set of macros added in #6065 is used to reflect these dependencies. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-08-22 17:46:50 -04:00
Andrzej Kurek	635c2c2be5	test_suite_ssl: replace CTR_DRBG with a fake rng source This way there are less dependencies in the SSL test suite. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-08-22 17:46:50 -04:00
Gilles Peskine	e5018c97f9	Merge pull request #6195 from superna9999/6149-driver-only-hashes-ec-j-pake Driver-only hashes: EC J-PAKE	2022-08-22 17:28:15 +02:00
Gilles Peskine	194556034d	Merge pull request #6169 from tom-cosgrove-arm/fix-incorrect-use-of-mbedtls_ecp_group_id Fix incorrect use of mbedtls_ecp_group_id in test_suite_ssl.function	2022-08-22 17:26:18 +02:00
Janos Follath	6b8e0c2884	Bignum: make tests more readable Signed-off-by: Janos Follath <janos.follath@arm.com>	2022-08-22 09:54:25 +01:00
Janos Follath	494a6d22bd	Bignum tests: use TEST_EQUAL TEST_EQUAL(), has the benefit of outputting the values that don't match, which can make debugging simpler. Scope: - Recently added new test functions - Checks making sure the test case/data is consistent is out of scope - Only checks where printing the values is likely to be helpful Signed-off-by: Janos Follath <janos.follath@arm.com>	2022-08-22 09:40:01 +01:00
Przemek Stekiel	07c0f12302	test_suite_pem.data: change MBEDTLS_CMAC_C->MBEDTLS_CIPHER_MODE_CBC dependency MBEDTLS_CMAC_C dependency is ivalid. "PEM read (unknown encryption algorithm)" needs MBEDTLS_CIPHER_MODE_CBC dependency as otherwise this test is failing in test_when_no_ciphersuites_have_mac configuration because mbedtls_pem_read_buffer() returns a different error (MBEDTLS_ERR_PEM_FEATURE_UNAVAILABLE). Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-08-20 14:24:04 +02:00
Janos Follath	deb8030e9f	Improve mbedtls_mpi_core_lt_ct() unit tests - Improve test descriptions - Add more test cases with return value of 1 - Remove the mbedtls prefix from the test function Signed-off-by: Janos Follath <janos.follath@arm.com>	2022-08-19 13:32:17 +01:00
Neil Armstrong	01a7d310d5	Make ecjpake test suite depend on MBEDTLS_HAS_ALG_SHA_256_VIA_MD_OR_PSA Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-08-19 14:03:02 +02:00
Dave Rodgman	5d7a235efe	Simplify test for ecdsa_verify Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-08-19 11:26:32 +01:00
Dave Rodgman	b153c6c31b	Improve test descriptions Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-08-19 11:17:36 +01:00
Dave Rodgman	cd57a61fec	Paramaterise ecdsa_verify test case more clearly Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-08-19 11:17:35 +01:00
Dave Rodgman	b44c72861f	Minor tidy-up Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-08-19 11:16:37 +01:00
Dave Rodgman	66bcadb47d	Fix duplicate test names Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-08-19 11:16:37 +01:00
Dave Rodgman	56cfb31dd1	Add missing newlines Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-08-19 11:16:37 +01:00
Dave Rodgman	1fdb8e8c17	Add unit tests for ECDSA with invalid public key Add tests for a case in ECDSA signing where an invalid public key is accepted in signature verification. Test data taken from the OSS-fuzz issue, and additional generated with python-ecdsa. Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-08-19 11:16:24 +01:00
Tom Cosgrove	a327b52427	Fix incorrect use of mbedtls_ecp_group_id in test_suite_ssl.function MBEDTLS_SSL_IANA_TLS_GROUP_SECP192R1 and friends are not members of the mbedtls_ecp_group_id enum Found by clang's -Wassign-enum Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>	2022-08-19 10:50:26 +01:00
Neil Armstrong	0d76341eac	Remove md_info by md_type in ecjpake context, use mbedtls_hash_info_get_size() to get hash length Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-08-19 11:49:22 +02:00
Przemek Stekiel	bc0509a36b	test_suite_pem, test_suite_pkparse: Adjust dependecies Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-08-19 10:15:56 +02:00
Przemek Stekiel	76b753bbb7	Change the dependencies in pem.c to xxx_BASED_ON_USE_PSA and related files This is done to be able to bild test_psa_crypto_config_accel_hash component where MD5 is only available accelerated (PSA_WANT_ALG_MD5 is enabled and MBEDTLS_MD5_C is disabled) but MBEDTLS_USE_PSA_CRYPTO is disabled. So the build should not attempt to enable pem_pbkdf1. Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-08-19 10:15:56 +02:00
Przemek Stekiel	81799fd9d8	pem.c, test_suite_pem: fix dependency MBEDTLS_HAS_ALG_MD5_VIA_MD_OR_PSA->MBEDTLS_HAS_ALG_MD5_VIA_LOWLEVEL_OR_PSA * Comparing before-default -> after-default * x509parse: total 723; skipped 26 -> 26 x509write: total 41; skipped 8 -> 8 pem: total 13; skipped 0 -> 0 oid: total 28; skipped 0 -> 0 * Comparing before-full -> after-full * x509parse: total 723; skipped 25 -> 25 x509write: total 41; skipped 0 -> 0 pem: total 13; skipped 0 -> 0 oid: total 28; skipped 0 -> 0 * Comparing reference -> drivers * x509parse: total 723; skipped 89 -> 89 x509write: total 41; skipped 3 -> 3 pem: total 13; skipped 0 -> 0 oid: total 28; skipped 0 -> 0 Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-08-19 10:15:56 +02:00
Przemek Stekiel	2c70a0d9e0	test_suite_oid: Replace MBEDTLS_MD5_C and MBEDTLS_SHAxxx_C with the corresponding MBEDTLS_HAS_ALG_xxx_VIA_LOWLEVEL_OR_PSA * Comparing before-default -> after-default * x509parse: total 723; skipped 26 -> 26 x509write: total 41; skipped 8 -> 8 pem: total 13; skipped 0 -> 0 oid: total 28; skipped 0 -> 0 * Comparing before-full -> after-full * x509parse: total 723; skipped 25 -> 25 x509write: total 41; skipped 0 -> 0 pem: total 13; skipped 0 -> 0 oid: total 28; skipped 0 -> 0 * Comparing reference -> drivers * x509parse: total 723; skipped 89 -> 89 x509write: total 41; skipped 3 -> 3 pem: total 13; skipped 0 -> 0 oid: total 28; skipped 0 -> 0 Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-08-19 10:15:56 +02:00
Przemek Stekiel	050819c19e	test_suite_x509write: Move MBEDTLS_HAS_ALG_SHA_1_VIA_MD_OR_PSA dependency for x509_crt_check to .function file mbedtls_x509write_crt_set_subject_key_identifier() requires MBEDTLS_HAS_ALG_SHA_1_VIA_MD_OR_PSA Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-08-19 10:15:56 +02:00
Przemek Stekiel	41b742f84d	test_suite_pem: Adapt dependencies for MD Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-08-19 10:15:56 +02:00
Przemek Stekiel	f8087e5ffd	x509_crt_check: remove MBEDTLS_SHA1_C dependency from .function file (already handed in .data file) Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-08-19 10:15:56 +02:00
Przemek Stekiel	d34f8c36b8	x509 tests: adjust dependencies * Comparing before-default -> after-default * x509parse: total 723; skipped 26 -> 26 x509write: total 41; skipped 8 -> 8 * Comparing before-full -> after-full * x509parse: total 723; skipped 25 -> 25 x509write: total 41; skipped 0 -> 0 Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-08-19 10:15:56 +02:00
Jerry Yu	e28d9745a1	fix coding style issues Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-08-18 15:44:03 +08:00
Jerry Yu	5b7c7caee6	fix wrong condition issues Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-08-18 11:28:41 +08:00
Dave Rodgman	96a4be990f	Merge pull request #6177 from AndrzejKurek/ecdsa-no-md Adjust hash dependencies in `test_suite_ecdsa`	2022-08-16 09:55:02 +01:00
Dave Rodgman	a7448bf19d	Merge pull request #6141 from mpg/driver-hashes-rsa-v21 Driver hashes rsa v21	2022-08-16 09:52:39 +01:00
Werner Lewis	e54046c9c2	Add test for ECP group metadata Test cases added to check curve parameters and information for each curve supported. Expected parameters are taken from references: SEC 2 for NIST, RFC 5639 for Brainpool, and RFC 7748 for curve25519/curve448. Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-08-15 14:28:20 +01:00
Janos Follath	816206439a	Bignum: Improve style - Instead of macros, use direct calculations for array sizes - Move variable declarations closer to first use Signed-off-by: Janos Follath <janos.follath@arm.com>	2022-08-15 11:35:46 +01:00
Gabor Mezei	7f0817884e	Unify mpi mod raw read/write test with the other tests Use 32 bit limbs instead of 64 bit. Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>	2022-08-12 18:00:33 +02:00
Gabor Mezei	89e31460db	Typo Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>	2022-08-12 15:36:56 +02:00
Janos Follath	6318468183	Improve bignum documentation Signed-off-by: Janos Follath <janos.follath@arm.com>	2022-08-11 17:42:59 +01:00
Andrzej Kurek	1af61cb75b	Introduce a new macro for hash size in ecdsa tests Previously these tests depended on the definition from inside the MD module, which in turn could be 32 or 64 bytes depending on whether MBEDTLS_SHA512_C was defined. This is unnecessary, so a constant is itnroduced instead. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-08-11 09:19:42 -04:00
Janos Follath	9dfb5621ff	Test little endian core I/O with odd limbs Signed-off-by: Janos Follath <janos.follath@arm.com>	2022-08-11 12:15:55 +01:00
Janos Follath	1cb3b976c3	Test big endian core I/O with odd limbs Signed-off-by: Janos Follath <janos.follath@arm.com>	2022-08-11 12:06:14 +01:00
Manuel Pégourié-Gonnard	7d5271608b	Fix undeclared dependencies on SHA-1 Previously the whole .function file had a global dependency on MBEDTLS_SHA1_C. This hasn't been correct for a long time: - on principle, dependency declarations in .function files are for compile-time dependencies; - in practice, a number of test cases do not depend on SHA-1, as they only use SHA-256 or SHA-512 - those cases should not be skipped in builds without SHA-1; - this was "taken advantage of" to skip dependency declarations for test cases that only depended on SHA-1. The previous commit removed the global dependency on SHA1_C; as a result the test cases that actually depend on SHA-1 were not skipped in builds without SHA-1. This commit fixes that by adding dependency declarations where they belong: in the .data file. All cases compute hashes using MD is available, or PSA otherwise; so MD_OR_PSA is appropriate here. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-08-11 12:50:06 +02:00
Manuel Pégourié-Gonnard	e741c61d54	Adjust dependencies in test_suite_pkcs1_v21 sed -i -f md_or_psa_hash.sed \ tests/suites/test_suite_pkcs1_v21.data tests/suites/test_suite_pk.data with md_or_psa_hash.sed containing: s/MBEDTLS_MD5_C/MBEDTLS_HAS_ALG_MD5_VIA_MD_OR_PSA/g s/MBEDTLS_RIPEMD160_C/MBEDTLS_HAS_ALG_RIPEMD160_VIA_MD_OR_PSA/g s/MBEDTLS_SHA1_C/MBEDTLS_HAS_ALG_SHA_1_VIA_MD_OR_PSA/g s/MBEDTLS_SHA224_C/MBEDTLS_HAS_ALG_SHA_224_VIA_MD_OR_PSA/g s/MBEDTLS_SHA256_C/MBEDTLS_HAS_ALG_SHA_256_VIA_MD_OR_PSA/g s/MBEDTLS_SHA384_C/MBEDTLS_HAS_ALG_SHA_384_VIA_MD_OR_PSA/g s/MBEDTLS_SHA512_C/MBEDTLS_HAS_ALG_SHA_512_VIA_MD_OR_PSA/g (The only lines in pk.data that still had old-style dependencies where the ones about PKCS1_V21.) Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-08-11 12:50:06 +02:00
Janos Follath	d0895708e2	Bignum: move internal constants to headers Now that the check_names script allows it, we can do so. Signed-off-by: Janos Follath <janos.follath@arm.com>	2022-08-10 13:32:16 +01:00
Werner Lewis	3b09739c1b	Add test case for mbedtls_ecp_set_zero Tests function with various ECP point conditions, covering freshly initialized, zeroed, non-zero, and freed points. Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-08-08 17:22:55 +01:00
Janos Follath	1694969a0a	Bignum: Add tests for modulus setup and free Signed-off-by: Janos Follath <janos.follath@arm.com>	2022-08-08 13:37:20 +01:00
Neil Armstrong	a97f1ac5f9	Initialize mbedtls_x509write_csr struct before USE_PSA_INIT(), mbedtls_x509write_csr_free() will crash if uninitialized When USE_PSA_INIT() failed because lack of seedfile, mbedtls_x509write_csr_free() crashed when called on an unitialized mbedtls_x509write_csr struct. This moves mbedtls_x509write_csr_init before calling USE_PSA_INIT(), which could probably fail, and uses the same flow in x509_csr_check() and x509_csr_check_opaque(). Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-08-08 13:54:47 +02:00
Andrzej Kurek	9f42c0683c	Adjust hash dependencies in `test_suite_ecdsa` Only deterministic tests require SHA256 now. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-08-08 07:31:48 -04:00
Gabor Mezei	a200f6f855	Add macro definitions to the tests Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>	2022-08-05 17:10:51 +01:00
Gabor Mezei	23a1ce90ec	Add tests for mbedtls_mpi_mod_raw read/write functions Signed-off-by: Gabor Mezei <gabor.mezei@arm.com>	2022-08-05 17:10:47 +01:00
Janos Follath	23bdeca64d	Add core constant time comparison Unfortunately reusing the new function from the signed constant time comparison is not trivial. One option would be to do temporary conditional swaps which would prevent qualifying input to const. Another way would be to add an additional flag for the sign and make it an integral part of the computation, which would defeat the purpose of having an unsigned core comparison. Going with two separate function for now and the signed version can be retired/compiled out with the legacy API eventually. The new function in theory could be placed into either `library/constant_time.c` or `library/bignum_new.c`. Going with the first as the other functions in the second are not constant time yet and this distinction seems more valuable for new (as opposed to belonging to the `_core` functions. Signed-off-by: Janos Follath <janos.follath@arm.com>	2022-08-05 17:08:52 +01:00
Janos Follath	91dc67d31c	Allow (NULL, 0) as a representation of 0 - We don't check for NULL pointers this deep in the library - Accessing a NULL pointer when the limb number is 0 as a mistake is the very similar to any other out of bounds access - We could potentially mandate at least 1 limb representation for 0 but we either would need to enforce it or the implementation would be less robust. - Allowing zero limb representation - (NULL, 0) in particular - for zero is present in the legacy interface, if we disallow it, the compatibility code will need to deal with this (more code size and opportunities for mistakes) In summary, interpreting (NULL, 0) as the number zero in the core interface is the least of the two evils. Signed-off-by: Janos Follath <janos.follath@arm.com>	2022-08-05 17:08:52 +01:00
Janos Follath	6ff3536de5	Add tests for little endian core I/O Signed-off-by: Janos Follath <janos.follath@arm.com>	2022-08-05 17:08:49 +01:00
Janos Follath	f1d617deb8	Add tests for big endian core I/O The test case where there were extra limbs in the MPI failed and this commit contains the corresponding fix as well. (We used to use the minimum required limbs instead of the actual limbs present.) Signed-off-by: Janos Follath <janos.follath@arm.com>	2022-08-05 17:06:31 +01:00
Gilles Peskine	b4983d4556	Merge pull request #6164 from mprse/md_ssl_test Avoid use of MD in SSL test suite	2022-08-05 11:02:44 +02:00
Gilles Peskine	f860f3742b	Merge pull request #6070 from wernerlewis/bignum_test_radix Remove radix argument from bignum test functions	2022-08-05 11:01:07 +02:00
Gilles Peskine	57d4c11c44	Merge pull request #6165 from mprse/md_x509_test Avoid use of MD in X.509 write test suite	2022-08-04 10:11:03 +02:00
Gilles Peskine	07e7fe516b	Merge pull request #6088 from tuvshinzayaArm/validation_remove_change_curve Validation remove and change in files related to curve in library	2022-08-03 13:05:16 +02:00
Werner Lewis	dc47fe71df	Use upper case for bignum string comparison Test data which is compared as a hex string now uses upper case to match output of mbedtls_mpi_write_string() output. This removes usage of strcasecmp(). Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-08-01 15:17:45 +01:00
Werner Lewis	3ccc116c35	Apply test data changes for conflicting cases Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-08-01 15:17:45 +01:00
Werner Lewis	a453c14a12	Remove radix arguments from tests added in 3.2 Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-08-01 15:07:14 +01:00
Werner Lewis	efda01fb8c	Fix formatting in bignum test functions Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-08-01 15:07:14 +01:00
Werner Lewis	f65a327111	Remove remaining bignum radix args Functions which are not covered by script, changes made to use radix 16. Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-08-01 15:07:14 +01:00
Werner Lewis	9802d36168	Remove radix arg from bignum tests Cases where radix was explictly declared are removed in most cases, replaced using script. bignum arguments are represented as hexadecimal strings. This reduces clutter in test data and makes bit patterns clearer. Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-08-01 15:07:14 +01:00
Werner Lewis	19b4cd893c	Remove radix arg from mbedtls_test_read_mpi All uses have radix argument removed, using script. Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-08-01 15:05:24 +01:00
Przemek Stekiel	54a544600f	test_suite_x509write: use psa_hash_compute() instead mbedtls_md() Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-08-01 16:03:17 +02:00
Przemek Stekiel	cc59c998d8	test_suite_ssl: make PSA build independent on MD module Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-08-01 14:29:56 +02:00
Manuel Pégourié-Gonnard	1e48445aa0	Merge pull request #6104 from superna9999/6097-remove-useless-md-in-test Remove useless use of MD in test functions	2022-07-28 11:35:56 +02:00
Dave Rodgman	aba26d0099	Merge pull request #5963 from tom-daubney-arm/remove_ssl_compression_new Remove use of SSL session compression	2022-07-28 10:28:23 +01:00
Manuel Pégourié-Gonnard	f6b8c3297a	Merge pull request #6065 from mpg/explore2 Driver-only hashes: RSA 1.5 and PK + strategy doc	2022-07-28 10:43:38 +02:00
Tuvshinzaya Erdenekhuu	fb389dde58	Enable invalid param test for ecp Signed-off-by: Tuvshinzaya Erdenekhuu <tuvshinzaya.erdenekhuu@arm.com>	2022-07-27 15:23:02 +01:00
Tuvshinzaya Erdenekhuu	8df9603e73	Enable invalid param test for ecjpake Signed-off-by: Tuvshinzaya Erdenekhuu <tuvshinzaya.erdenekhuu@arm.com>	2022-07-27 15:20:22 +01:00
Tuvshinzaya Erdenekhuu	2392419c9d	Enable invalid param test in ecdh.c Signed-off-by: Tuvshinzaya Erdenekhuu <tuvshinzaya.erdenekhuu@arm.com>	2022-07-27 15:19:46 +01:00
Thomas Daubney	20f89a9605	Remove uses of SSL compression Remove or modify current uses of session compression. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2022-07-26 16:13:03 +01:00
Jerry Yu	6ac7c0349a	TLS 1.3: Add session test checks Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-07-22 23:09:40 +08:00
Jerry Yu	bc7c1a4260	fix typo/format/name issues Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-07-22 23:09:40 +08:00
Jerry Yu	f092629997	Add save load test for tls13 Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-07-22 23:08:43 +08:00
Jerry Yu	a180f99a55	Add load-save tests for tls13 Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-07-22 23:08:43 +08:00
Jerry Yu	1ac476cc1e	Add save buf size test for tls13 Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-07-22 23:08:43 +08:00
Jerry Yu	6e8fec2908	add session serialization load buf Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-07-22 23:08:43 +08:00
Jerry Yu	534ff400d4	Add serialize_version_check for tls13 Add population session also Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-07-22 23:08:43 +08:00
Manuel Pégourié-Gonnard	0aabb6d8b9	Fix dependency in test_suite_pk When USE_PSA is disabled and ECDSA_DETERMINISTIC is enabled, generating ECDSA signatures via PK requires use of the hash via the MD layer (in HMAC-DRBG, used by deterministic ECDSA). When USE_PSA is enabled, ECDSA signatures via PK go through PSA which always uses non-deterministic ECDSA, so does not rely on HMAC-DRBG/MD. The condition used here is slightly too strong, but expressing exactly the optimal condition seems more effort than it's worth for just 3 test cases. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-07-22 10:55:06 +02:00
Dave Rodgman	87276a326f	Merge pull request #5952 from tuvshinzayaArm/add-missing-break Add missing break	2022-07-21 15:25:40 +01:00
Manuel Pégourié-Gonnard	db2c80402a	Fix dependencies in test_suite_pk Using VIA_MD_OR_PSA_BASED_ON_USE_PSA was justified by the fact that until a few commits ago, the test functions here computed hashes using either MD or PSA, depending on whether USE_PSA was defined (which itself was justified by the loose reasoning that "PK is USE_PSA territory"). A few commits ago, test code stopped computing hashes because the hash values became part of the test data. PK itself does not compute hashes. As a result, VIA_MD_OR_PSA_BASED_ON_USE_PSA is no longer justified. There are now two kinds of tests: - those that only rely on hash data (ECDSA, RSA PKCS#1 v1.5) should depend on VIA_LOWLEVEL_OR_PSA as that is the minimal dependency, hence the one used for data - those that were the layer below PK will internally compute a hash (RSA PKCS#1 v2.1): currently this hash is always computed using MD (on which MBEDTLS_PKCS1_V21 depends), so legacy dependencies like MBEDTLS_SHA256_C should be used for now. The previous dependency was morally wrong, it didn't show in the driver-only tests only because PKCS#1 v2.1 is disabled in this test for now. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-07-21 13:34:46 +02:00
Manuel Pégourié-Gonnard	73692b7537	Rework macros expressing dependencies Fix usage with sed: s/MBEDTLS_OR_PSA_WANT_$[A-Z_0-9]$/MBEDTLS_HAS_\1_VIA_LOWLEVEL_OR_PSA/ s/MBEDTLS_USE_PSA_WANT_$[A-Z_0-9]$/MBEDTLS_HAS_\1_VIA_MD_OR_PSA_BASED_ON_USE_PSA/ Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-07-21 12:11:53 +02:00
Dave Rodgman	7085aa42ee	Merge pull request #5896 from wernerlewis/aes_shallow_copy Refactor AES context to be shallow-copyable	2022-07-20 15:16:37 +01:00
Neil Armstrong	0270b9f5a4	Rm useless use of MD in PKCS#1v2.1 test functions We had a message in the data file, and were computing its hash in the test function. It is more efficient (and simpler when it comes to dependencies) to directly have the message hash in the data file. It was probably this way because some test vectors provide the message for the sake of all-in-one implementation that hash-and-sign at once. But our API gets a hash as the input and signs it. In unit tests, this should be reflected in the signature of the test function, which should take a hash as input. The changes to the .data file were done using the following python script: import hashlib suite = 'pkcs1_v21' functions = { 'pkcs1_rsassa_pss_sign': (6, 8), 'pkcs1_rsassa_pss_verify': (4, 6), 'pkcs1_rsassa_pss_verify_ext': (4, 8), } def hash_ctx(s): if s == 'MBEDTLS_MD_MD5': return hashlib.md5() if s == 'MBEDTLS_MD_SHA1': return hashlib.sha1() if s == 'MBEDTLS_MD_SHA224': return hashlib.sha224() if s == 'MBEDTLS_MD_SHA256': return hashlib.sha256() if s == 'MBEDTLS_MD_SHA384': return hashlib.sha384() if s == 'MBEDTLS_MD_SHA512': return hashlib.sha512() def fix(l): parts = l.rstrip().split(":") fun = parts[0] if fun not in functions: return l (digest_idx, msg_idx) = functions[fun] alg_str = parts[digest_idx] if alg_str == "MBEDTLS_MD_NONE": return l h = hash_ctx(alg_str) msg_str = parts[msg_idx] msg_hex = msg_str[1:-1] msg = bytes.fromhex(msg_hex) h.update(msg) msg_hash = h.hexdigest() msg_hash_str = '"' + msg_hash + '"' parts[msg_idx] = msg_hash_str return ":".join(parts) + '\n' filename = 'tests/suites/test_suite_' + suite + '.data' with open(filename) as f: lines = f.readlines() lines = [fix(l) for l in lines] with open(filename, 'w') as f: f.writelines(lines) Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-07-20 09:34:20 +02:00
Jerry Yu	a357cf4d4c	Rename new_session_ticket state Both client and server side use `MBEDTLS_SSL_NEW_SESSION_TICKET` now Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-07-20 11:07:29 +08:00
Neil Armstrong	5ea65173fb	Rm useless use of MD in ECDSA test functions We had a message in the data file, and were computing its hash in the test function. It is more efficient (and simpler when it comes to dependencies) to directly have the message hash in the data file. It was probably this way because some test vectors provide the message for the sake of all-in-one implementation that hash-and-sign at once. But our API gets a hash as the input and signs it. In unit tests, this should be reflected in the signature of the test function, which should take a hash as input. The changes to the .data file were done using the following python script: import hashlib suite = 'ecdsa' functions = { 'ecdsa_det_test_vectors': (3, 4), 'ecdsa_write_restart': (3, 4), } def hash_ctx(s): if s == 'MBEDTLS_MD_MD5': return hashlib.md5() if s == 'MBEDTLS_MD_SHA1': return hashlib.sha1() if s == 'MBEDTLS_MD_SHA224': return hashlib.sha224() if s == 'MBEDTLS_MD_SHA256': return hashlib.sha256() if s == 'MBEDTLS_MD_SHA384': return hashlib.sha384() if s == 'MBEDTLS_MD_SHA512': return hashlib.sha512() def fix(l): parts = l.rstrip().split(":") fun = parts[0] if fun not in functions: return l (alg_idx, msg_idx) = functions[fun] alg_str = parts[alg_idx] if alg_str == "MBEDTLS_MD_NONE": return l h = hash_ctx(alg_str) msg_str = parts[msg_idx][1:-1] h.update(msg_str.encode('ascii')) msg_hash = h.hexdigest() msg_hash_str = '"' + msg_hash.upper() + '"' parts[msg_idx] = msg_hash_str return ":".join(parts) + '\n' filename = 'tests/suites/test_suite_' + suite + '.data' with open(filename) as f: lines = f.readlines() lines = [fix(l) for l in lines] with open(filename, 'w') as f: f.writelines(lines) Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-07-19 21:03:29 +02:00
Manuel Pégourié-Gonnard	abac037a7b	Migrate from old inline to new actual function. This is mostly: sed -i 's/mbedtls_psa_translate_md/mbedtls_hash_info_psa_from_md/' \ library/.c tests/suites/.function This should be good for code size as the old inline function was used from 10 translation units inside the library, so we have 10 copies at least. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-07-18 21:28:38 +02:00
Manuel Pégourié-Gonnard	4772884133	New internal module for managing hash information Using static inline functions is bad for code size; the function from md_internal.h was already used from 3 different C files, so already was copied at least 3 times in the library, and this would only get worse over time. Use actual functions, and also share the actual data between them. Provide a consistent set of operations. Conversion to/from human-readable string was omitted for now but could be added later if needed. In the future, this can be used to replace other similar (inline) functions that are currently scattered, including (but perhaps not limited to): - mbedtls_psa_translate_md() from psa_util.h - mbedtls_md_info_from_psa() (indirectly) from psa_crypto_hash.h - get_md_alg_from_psa() from psa_crypto_rsa.c Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-07-18 21:28:38 +02:00
Manuel Pégourié-Gonnard	4608c48b0c	Rm useless use of MD in PK test functions Same rationale as previous "Rm useless use of MD" commits. Here the first two test functions were already not depending on MD_C, but the new version is much simpler, as it avoids having two versions of the code depending on the value of USE_PSA. Changes to the data file generated with the following Python script: import hashlib suite = 'pk' functions = { 'pk_rsa_verify_test_vec': (2, 1, True), 'pk_rsa_verify_ext_test_vec': (2, 1, True), 'pk_sign_verify_restart': (6, 7, False), } def hash_ctx(s): if s == 'MBEDTLS_MD_MD5': return hashlib.md5() if s == 'MBEDTLS_MD_SHA1': return hashlib.sha1() if s == 'MBEDTLS_MD_SHA224': return hashlib.sha224() if s == 'MBEDTLS_MD_SHA256': return hashlib.sha256() if s == 'MBEDTLS_MD_SHA384': return hashlib.sha384() if s == 'MBEDTLS_MD_SHA512': return hashlib.sha512() if s == 'MBEDTLS_MD_RIPEMD160': return hashlib.new("ripemd160") def fix(l): parts = l.rstrip().split(":") fun = parts[0] if fun not in functions: return l (alg_idx, msg_idx, is_hex) = functions[fun] alg_str = parts[alg_idx] if alg_str == "MBEDTLS_MD_NONE" or alg_str == "255": return l h = hash_ctx(alg_str) msg_str = parts[msg_idx][1:-1] msg = bytes.fromhex(msg_str) if is_hex else bytes(msg_str, 'ascii') h.update(msg) msg_hash = h.hexdigest() msg_hash_str = '"' + msg_hash + '"' parts[msg_idx] = msg_hash_str return ":".join(parts) + '\n' filename = 'tests/suites/test_suite_' + suite + '.data' with open(filename) as f: lines = f.readlines() lines = [fix(l) for l in lines] with open(filename, 'w') as f: f.writelines(lines) Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-07-18 10:55:56 +02:00
Manuel Pégourié-Gonnard	5ef4e8d9b9	Don't depend on strong entropy for RSA tests Tests are not here to demonstrate best practice, but to test a specific part of the code. Using an RNG provided by the test framework also makes the test code more focused on what we actually mean to test. This brings the number of tests skipped in test_suite_rsa in test_psa_crypto_config_accel_hash_use_psa down to 0 (from 50). Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-07-16 08:57:19 +02:00
Manuel Pégourié-Gonnard	1d1174a5c3	Rm spurious declared dependency in test_suite_rsa Probably the result of copy-pasting: the test functions actually don't use those modules at all. This brings the number of tests skipped in test_suite_rsa in test_psa_crypto_config_accel_hash_use_psa down to 50 (from 61). Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-07-16 08:41:34 +02:00
Manuel Pégourié-Gonnard	236c4e22f7	Adjust test dependencies after last commit This brings the number of tests skipped in test_suite_rsa in test_psa_crypto_config_accel_hash_use_psa down to 61 (from 117). The changes to the test data file were generated with: sed -i -f or_psa_hash.sed tests/suites/test_suite_rsa.data with or_psa_hash.sed containing: s/MBEDTLS_MD5_C/MBEDTLS_OR_PSA_WANT_ALG_MD5/g s/MBEDTLS_RIPEMD160_C/MBEDTLS_OR_PSA_WANT_ALG_RIPEMD160/g s/MBEDTLS_SHA1_C/MBEDTLS_OR_PSA_WANT_ALG_SHA_1/g s/MBEDTLS_SHA224_C/MBEDTLS_OR_PSA_WANT_ALG_SHA_224/g s/MBEDTLS_SHA256_C/MBEDTLS_OR_PSA_WANT_ALG_SHA_256/g s/MBEDTLS_SHA384_C/MBEDTLS_OR_PSA_WANT_ALG_SHA_384/g s/MBEDTLS_SHA512_C/MBEDTLS_OR_PSA_WANT_ALG_SHA_512/g Here the MBEDTLS_OR_PSA_xxx macros are the right choice as we just need data about the hashes to be available. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-07-16 08:38:35 +02:00
Manuel Pégourié-Gonnard	a4aa12f0a1	Rm useless use of MD in RSA test functions Same rationale as two commits ago. Changes to the data file generated with the following script: import hashlib suite = 'rsa' functions = { 'mbedtls_rsa_pkcs1_sign': (3, 1), 'mbedtls_rsa_pkcs1_verify': (3, 1), } def hash_ctx(s): if s == 'MBEDTLS_MD_MD5': return hashlib.md5() if s == 'MBEDTLS_MD_SHA1': return hashlib.sha1() if s == 'MBEDTLS_MD_SHA224': return hashlib.sha224() if s == 'MBEDTLS_MD_SHA256': return hashlib.sha256() if s == 'MBEDTLS_MD_SHA384': return hashlib.sha384() if s == 'MBEDTLS_MD_SHA512': return hashlib.sha512() if s == 'MBEDTLS_MD_RIPEMD160': return hashlib.new("ripemd160") def fix(l): parts = l.rstrip().split(":") fun = parts[0] if fun not in functions: return l (alg_idx, msg_idx) = functions[fun] alg_str = parts[alg_idx] if alg_str == "MBEDTLS_MD_NONE" or alg_str == "255": return l h = hash_ctx(alg_str) msg_str = parts[msg_idx] msg_hex = msg_str[1:-1] msg = bytes.fromhex(msg_hex) h.update(msg) msg_hash = h.hexdigest() msg_hash_str = '"' + msg_hash + '"' parts[msg_idx] = msg_hash_str return ":".join(parts) + '\n' filename = 'tests/suites/test_suite_' + suite + '.data' with open(filename) as f: lines = f.readlines() lines = [fix(l) for l in lines] with open(filename, 'w') as f: f.writelines(lines) Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-07-16 08:20:26 +02:00
Manuel Pégourié-Gonnard	5ce9959185	Adjust test dependencies after last commit This brings the number of tests skipped in test_suite_pkcs1_v15 in test_psa_crypto_config_accel_hash_use_psa to 0. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-07-16 08:07:51 +02:00
Manuel Pégourié-Gonnard	a9e1d9953e	Rm useless use of MD in PKCS#1v1.5 test functions We had a message in the data file, and were computing its hash in the test function. It is more efficient (and simpler when it comes to dependencies) to directly have the message hash in the data file. It was probably this way because some test vectors provide the message for the sake of all-in-one implementation that hash-and-sign at once. But our API gets a hash as the input and signs it. In unit tests, this should be reflected in the signature of the test function, which should take a hash as input. The changes to the .data file were done using the following python script: import hashlib suite = 'pkcs1_v15' functions = { 'pkcs1_rsassa_v15_sign': (10, 12), 'pkcs1_rsassa_v15_verify': (6, 8), } def hash_ctx(s): if s == 'MBEDTLS_MD_MD5': return hashlib.md5() if s == 'MBEDTLS_MD_SHA1': return hashlib.sha1() if s == 'MBEDTLS_MD_SHA224': return hashlib.sha224() if s == 'MBEDTLS_MD_SHA256': return hashlib.sha256() if s == 'MBEDTLS_MD_SHA384': return hashlib.sha384() if s == 'MBEDTLS_MD_SHA512': return hashlib.sha512() def fix(l): parts = l.rstrip().split(":") fun = parts[0] if fun not in functions: return l (alg_idx, msg_idx) = functions[fun] alg_str = parts[alg_idx] if alg_str == "MBEDTLS_MD_NONE": return l h = hash_ctx(alg_str) msg_str = parts[msg_idx] msg_hex = msg_str[1:-1] msg = bytes.fromhex(msg_hex) h.update(msg) msg_hash = h.hexdigest() msg_hash_str = '"' + msg_hash + '"' parts[msg_idx] = msg_hash_str return ":".join(parts) + '\n' filename = 'tests/suites/test_suite_' + suite + '.data' with open(filename) as f: lines = f.readlines() lines = [fix(l) for l in lines] with open(filename, 'w') as f: f.writelines(lines) Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-07-16 08:07:02 +02:00
Manuel Pégourié-Gonnard	4c1087f474	Use MBEDTLS_OR_PSA_WANT_xxx in test_suite_rsa The encrypt/decrypt cases don't depend on actually computing a hash, just on information about it being available, and this information is guarded by MBEDTLS_OR_PSA_WANT_xxx. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-07-15 12:08:14 +02:00
Manuel Pégourié-Gonnard	3637c516a4	Refine dependencies in test_suite_pkcs1_v15 Having the whole .function file depend on SHA-1 was wrong: dependencies in .function files are for compile-time dependencies all functions in this file build just fine without SHA-1. It's just some tests cases that do need SHA-1 at runtime, use dependencies on those specific tests in the .data file then. This reduces the number of cases skipped in this test suite in test_psa_crypto_config_accel_hash_use_psa from 28 (all of them) down to 12 (those that actually use SHA-1 as opposed to no hash). Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-07-13 12:41:36 +02:00
Paul Elliott	81c69b547a	Revert "Revert "Revert "Add generated files for 3.2.0 release""" This reverts commit `185d24ba0e`. Signed-off-by: Paul Elliott <paul.elliott@arm.com>	2022-07-12 11:29:34 +01:00
Paul Elliott	cd08ba0326	Bump version to 3.2.1 Signed-off-by: Paul Elliott <paul.elliott@arm.com>	2022-07-12 10:51:55 +01:00
Dave Rodgman	185d24ba0e	Revert "Revert "Add generated files for 3.2.0 release"" This reverts commit `7adb8cbc0e`. Signed-off-by: Paul Elliott <paul.elliott@arm.com>	2022-07-12 10:51:44 +01:00
Manuel Pégourié-Gonnard	bbd0dc6cbd	Fix hash-specific dependencies of test_suite_pk Applied: sed -i -f use_psa_hash.sed tests/suites/test_suite_pk.* with use_psa_hash.sed as follows: s/MBEDTLS_MD5_C/MBEDTLS_USE_PSA_WANT_ALG_MD5/g s/MBEDTLS_RIPEMD160_C/MBEDTLS_USE_PSA_WANT_ALG_RIPEMD160/g s/MBEDTLS_SHA1_C/MBEDTLS_USE_PSA_WANT_ALG_SHA_1/g s/MBEDTLS_SHA224_C/MBEDTLS_USE_PSA_WANT_ALG_SHA_224/g s/MBEDTLS_SHA256_C/MBEDTLS_USE_PSA_WANT_ALG_SHA_256/g s/MBEDTLS_SHA384_C/MBEDTLS_USE_PSA_WANT_ALG_SHA_384/g s/MBEDTLS_SHA512_C/MBEDTLS_USE_PSA_WANT_ALG_SHA_512/g With this commit, test_suite_pk achieves parity between: - crypto_full minus PKCS#1v2.1 - same minus MD (from all.sh's test_crypto_full_no_md) and between: - default config plus use_psa minus PKCS#1v2.1 - same with accelerators (test_psa_crypto_config_accel_hash_use_psa) Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-07-12 11:11:20 +02:00
Manuel Pégourié-Gonnard	abcfa90276	PK test functions don't depend on software SHA-256 Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-07-12 11:11:20 +02:00
Manuel Pégourié-Gonnard	2d08ea49c8	Some PK test functions no longer depend on MD Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-07-12 11:11:20 +02:00
Manuel Pégourié-Gonnard	043c8c5de8	Add USE_PSA version of PK test functions While at it, also fix buffer size for functions that already depend on USE_PSA: it should be PSA_HASH_MAX_SIZE for functions that always use PSA, and the new macro MBEDTLS_USE_PSA_MD_MAX_SIZE for functions that use it or not depending on USE_PSA. The only case where MBEDTLS_MD_MAX_SIZE is OK is when the function always uses MD - currently this is the case with pk_sign_verify_restart() as it is incompatible with USE_PSA anyway. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-07-12 11:11:20 +02:00
Manuel Pégourié-Gonnard	e496c6273e	Sort out MD dependencies in RSA tests When MD is only used to compute a size, use md_internal.h instead. When it's actually used to compute a hash, mark the test function as depending on it. This is probably suboptimal in the long run, and we might want to either adapt the code so that it can use PSA Crypto instead, or just pre-compute the hash in the test data. Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-07-12 11:11:19 +02:00
Manuel Pégourié-Gonnard	6a0a160f99	Avoid a dependency on MD in test_suite_pk Signed-off-by: Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com>	2022-07-12 11:11:18 +02:00
Paul Elliott	7adb8cbc0e	Revert "Add generated files for 3.2.0 release" This reverts commit `cb21f2eab3`. Signed-off-by: Paul Elliott <paul.elliott@arm.com>	2022-07-11 18:18:30 +01:00
Paul Elliott	cb21f2eab3	Add generated files for 3.2.0 release Signed-off-by: Paul Elliott <paul.elliott@arm.com>	2022-07-11 13:56:01 +01:00
Paul Elliott	20362cd1ca	Bump library and so versions for 3.2.0 release Signed-off-by: Paul Elliott <paul.elliott@arm.com>	2022-07-11 13:56:01 +01:00
Paul Elliott	9a8d78419f	Fixup test tls13_server_certificate_msg_invalid_vector_len The parameters for init_handshake_options had changed on the development branch after this test was created, so fixing up this test in order to correct build failures after merge. Signed-off-by: Paul Elliott <paul.elliott@arm.com>	2022-07-11 11:34:14 +01:00
Ronald Cron	ce7d76e2ee	Merge remote-tracking branch 'mbedtls-restricted/development-restricted' into mbedtls-3.2.0rc0-pr	2022-07-11 10:22:37 +02:00
Andrzej Kurek	ddb8cd601d	test_suite_ssl: Fix handshake options cleanup Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-07-04 16:07:28 -04:00
Andrzej Kurek	9dc4402afa	test_suite_ssl: zeroize the cache pointer in case if the struct memory gets reused Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-07-04 10:40:15 -04:00
Andrzej Kurek	1e085686ec	test_suite_ssl: remove unnecessary user data checks Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-07-04 10:40:09 -04:00
Andrzej Kurek	3d0d501517	test_suite_ssl: prefer ASSERT_ALLOC over malloc Fix formatting for option initialization Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-07-04 10:39:34 -04:00
Andrzej Kurek	92d7417d89	Formatting fixes Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-07-04 10:21:59 -04:00
Andrzej Kurek	e11acb2c9b	test_suite_ssl: add proper cache cleanup Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-07-04 10:21:59 -04:00
Andrzej Kurek	e8ad0d7d42	Disable bad session id length test in TLS 1.3 Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-07-04 10:21:59 -04:00
Andrzej Kurek	456a109edb	test_suite_ssl: add required dependencies for default handshake parameters Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-07-04 10:21:59 -04:00
Andrzej Kurek	6e518ab086	test_suite_ssl: add missing options cleanup Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-07-04 10:21:59 -04:00
Andrzej Kurek	ed58b50ea6	test_suite_ssl: add missing MBEDTLS_SSL_SERVER_C dependency Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-07-04 10:21:59 -04:00
Andrzej Kurek	626a931bb9	test_suite_ssl: Add missing arguments in endpoint initialization Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-07-04 10:21:59 -04:00
Andrzej Kurek	514683abdc	Add a test with a bad session_id_len that makes cache setting fail Force a bad session_id_len before handshake wrapup. This should result in a forced jump to a clean up of a serialized session. Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-07-04 10:18:29 -04:00
Andrzej Kurek	780dc18f74	Refactor test_suite_ssl tests to enable cache setting Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-07-04 10:18:28 -04:00
Manuel Pégourié-Gonnard	4d7af2aee0	Merge pull request #5835 from superna9999/5831-tls-1-2-ciphersuite-selection Permissions 2a: TLS 1.2 ciphersuite selection	2022-07-04 12:37:02 +02:00
Ronald Cron	0e39ece23f	Merge pull request #5916 from yuhaoth/pr/tls13-refactor-get-sig-alg-from-pk Refactor signature algorithm chooser	2022-07-04 09:10:08 +02:00
Neil Armstrong	6931e439e4	Fix Handshake select ECDH-RSA- test dependencies Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-07-01 18:30:10 +02:00
Manuel Pégourié-Gonnard	790ab52ee0	Merge pull request #5962 from gilles-peskine-arm/storage-format-doc-202206 Documentation about storage format compatibility	2022-07-01 12:21:17 +02:00
Ronald Cron	cb67e1a890	Merge pull request #5917 from gilles-peskine-arm/asn1write-0-fix Improve ASN.1 write tests	2022-06-30 15:42:16 +02:00
Neil Armstrong	b2c3b5be2d	Fix depends on handshake_ciphersuite_select tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-06-30 10:49:04 +02:00
Neil Armstrong	db13497490	Reorganize & add more handshake_ciphersuite_select to test all MBEDTLS_KEY_EXCHANGE_XXX cases Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-06-30 09:06:28 +02:00
Paul Elliott	f6a56cf5ff	Merge pull request #939 from ronald-cron-arm/tls13-add-missing-overread-check TLS 1.3: Add missing overread check	2022-06-29 17:01:14 +01:00
Werner Lewis	ec0193d019	Update test to cover move-decrypt sequence Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-06-29 16:17:50 +01:00
Werner Lewis	dd76ef359d	Refactor AES context to be shallow-copyable Replace RK pointer in AES context with a buffer offset, to allow shallow copying. Fixes #2147. Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-06-29 16:17:50 +01:00
Dave Rodgman	5b50f38f92	Merge pull request #934 from gilles-peskine-arm/mpi-0-mod-2 Fix null pointer dereference in mpi_mod_int(0, 2)	2022-06-29 15:02:59 +01:00
Jerry Yu	a0bb906c9f	fix handshake_version test fail. when both tls13 and tls12 are enabled, the test will fail. Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-06-29 16:16:09 +08:00
Gilles Peskine	d86abf2392	Merge pull request #5861 from wernerlewis/csr_subject_comma Fix output of commas and other special characters in X509 DN values	2022-06-28 21:00:49 +02:00
Neil Armstrong	2407279fa4	Add tests with specific hash for handshake_ciphersuite_select positive tests Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-06-28 18:12:17 +02:00
Neil Armstrong	8c52ed8d1e	Add negative testing of ciphersuite selection using Opaque algs & usage Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-06-28 18:12:17 +02:00
Ronald Cron	585cd70d04	tests: ssl: Fix coverity deadcode issue Signed-off-by: Ronald Cron <ronald.cron@arm.com>	2022-06-28 09:21:13 +02:00
Ronald Cron	b94854f8e3	Merge pull request #5973 from ronald-cron-arm/tls13-misc-tests TLS 1.3: Enable and add tests	2022-06-28 09:15:17 +02:00
Gilles Peskine	5969a4b5e0	Don't call memcpy(NULL, 0) which has undefined behavior Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2022-06-27 23:59:53 +02:00
Dave Rodgman	f5b7082f6e	Merge pull request #5811 from polhenarejos/bug_x448 Fix order value for curve x448	2022-06-27 13:47:24 +01:00
Werner Lewis	9b0e940135	Fix case where final special char exceeds buffer Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-06-27 12:01:22 +01:00
Werner Lewis	31ecb9600a	Add tests for exceeded buffer size Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-06-27 11:23:43 +01:00
Werner Lewis	b33dacdb50	Fix parsing of special chars in X509 DN values Use escape mechanism defined in RFC 1779 when parsing commas and other special characters in X509 DN values. Resolves failures when generating a certificate with a CSR containing a comma in subject value. Fixes #769. Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-06-27 11:19:50 +01:00
Ronald Cron	cf600bc07c	Comment fixes Signed-off-by: Ronald Cron <ronald.cron@arm.com>	2022-06-27 09:28:49 +02:00
Ronald Cron	e7b9b6b380	tls13: Add checks of overread check failures In Certificate message parsing tests with invalid vector lengths, add checks that the parsing failed on the expected overread check. Signed-off-by: Ronald Cron <ronald.cron@arm.com>	2022-06-27 09:28:49 +02:00
Ronald Cron	e3dac4aaa1	tls13: Add Certificate msg parsing tests with invalid vector lengths Signed-off-by: Ronald Cron <ronald.cron@arm.com>	2022-06-27 09:28:42 +02:00
Ronald Cron	21a1b2d374	Enable "Sending app data" SSL unit tests for TLS 1.3 Signed-off-by: Ronald Cron <ronald.cron@arm.com>	2022-06-24 12:06:46 +02:00
Manuel Pégourié-Gonnard	93a7f7d7f8	Merge pull request #5954 from wernerlewis/x509_next_merged Add mbedtls_x509_dn_get_next function	2022-06-24 09:59:22 +02:00
Werner Lewis	3e5585b45d	Replace TEST_ASSERT macro uses Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-06-23 15:12:10 +01:00
Werner Lewis	ac80a66395	Reduce buffer sizes to expected size Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-06-23 15:11:50 +01:00
Przemek Stekiel	0c9e74bd55	Remove mbedtls_psa_hkdf_expand() and mbedtls_psa_hkdf_extract() tests Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-06-21 07:22:33 +02:00
Gilles Peskine	e0469b5908	Merge pull request #931 from AndrzejKurek/clihlo_cookie_pxy_fix Add a client hello cookie_len overflow test	2022-06-20 19:35:54 +02:00
Gilles Peskine	76851ae3a6	Add warnings to test code and data about storage format stability Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2022-06-20 19:10:35 +02:00
Gilles Peskine	36aeb7f163	Merge pull request #5834 from mprse/HKDF_1 HKDF 1: PSA: implement HKDF_Expand and HKDF_Extract algorithms	2022-06-20 15:27:46 +02:00
Werner Lewis	12657cdcc6	Remove binary int use Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-06-20 11:57:35 +01:00
Werner Lewis	90c46c376b	Use consistent test case names Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-06-20 11:53:17 +01:00
Werner Lewis	b3acb053fb	Add mbedtls_x509_dn_get_next function Allow iteration through relative DNs when X509 name contains multi- value RDNs. Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-06-17 16:40:55 +01:00
Dave Rodgman	eb8570f174	Fix missing newline Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-06-17 14:59:36 +01:00
Dave Rodgman	5cab9dafb7	fix whitespace Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-06-17 13:48:29 +01:00
Dave Rodgman	57080461f7	Add test-case for checking curve order Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>	2022-06-17 13:42:40 +01:00
Tuvshinzaya Erdenekhuu	8988e23690	Add missing break In ''int execute_tests( int argc , const char ** argv )'' function, switch case is missing break statement. Signed-off-by: Tuvshinzaya Erdenekhuu <tuvshinzaya.erdenekhuu@arm.com>	2022-06-17 10:55:42 +01:00
Gilles Peskine	6194053feb	ASN.1: test that we can parse what we can write In asn1_write tests, when there's a parsing function corresponding to the write function, call it and check that it can parse what we wrote. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2022-06-15 21:17:25 +02:00
Gilles Peskine	b7e215f6bc	Fix copypasta in test data Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2022-06-15 21:16:42 +02:00
Andrzej Kurek	ca35f5bed0	test_suite_ssl: Use a zero fragment offset in a test with a too short record Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-06-15 07:19:40 -04:00
Przemek Stekiel	6c9fd61565	exercise_key_agreement_key: add special handling for HKDF_EXPAND Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-06-14 14:41:42 +02:00
Gilles Peskine	2c2730a372	ASN.1 write tests: test with larger buffer Test with the output buffer size up to and including the expected output size plus one. `... < expected->len + 1` was evidently a mistake. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2022-06-10 20:15:44 +02:00
Gilles Peskine	321a08944b	Fix bug whereby 0 was written as 0200 rather than 020100 0200 is not just non-DER, it's completely invalid, since there has to be a sign bit. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2022-06-10 20:13:33 +02:00
Gilles Peskine	c9a30fba74	Add MPI write tests when the MPI object has a leading zero limb Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2022-06-10 20:13:07 +02:00
Gilles Peskine	0ab804a794	Fix mismatch between test data and test description Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2022-06-10 20:12:25 +02:00
Gilles Peskine	d8579b7673	Uncomment mbedtls_asn1_write_mpi tests with leading 1 bit mbedtls_asn1_write_mpi() correctly handles the sign bit, so there's no reason not to test that it's handled correctly. Fix copypasta in test data that was commented out. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2022-06-10 20:10:37 +02:00
Gilles Peskine	ae25bb043c	Fix null pointer dereference in mpi_mod_int(0, 2) Fix a null pointer dereference when performing some operations on zero represented with 0 limbs: mbedtls_mpi_mod_int() dividing by 2, or mbedtls_mpi_write_string() in base 2. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2022-06-09 19:32:46 +02:00
Andrzej Kurek	ed4d217874	Add missing test dependencies for cookie parsing Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-06-08 11:57:57 -04:00
Andrzej Kurek	078e9bcda6	Add the mbedtls prefix to ssl_check_dtls_clihlo_cookie Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-06-08 11:47:33 -04:00
Dave Rodgman	11930699f1	Merge pull request #5827 from wernerlewis/time_utc Use ASN1 UTC tags for dates before 2000	2022-06-08 13:54:19 +01:00
Paul Elliott	5f2bc754d6	Merge pull request #5792 from yuhaoth/pr/add-tls13-moving-state-tests Pr/add-tls13-moving-state-tests	2022-06-08 13:39:52 +01:00
Przemek Stekiel	b088a900f4	test_suite_psa_crypto_storage_format: disable KA(ECDH,HKDF_EXTRACT/EXPAND...) test cases Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-06-07 15:34:18 +02:00
Ronald Cron	00e5eaad62	test: ssl: Remove more TLS 1.2 dependencies in handshake state tests That way the concerned tests are also run in the TLS 1.3 only configuration where a TLS 1.3 handshake is performed. Signed-off-by: Ronald Cron <ronald.cron@arm.com>	2022-06-07 11:14:01 +02:00
Ronald Cron	bdddaef9bb	test: ssl: Enable client authentication in handshake state tests The endpoint initialization function was setting up a certificate but the client certificate was not used because client authentication was not enabled (not enabled in the default SSL server configuration). Signed-off-by: Ronald Cron <ronald.cron@arm.com>	2022-06-07 11:13:49 +02:00
Dave Rodgman	4b55a89327	Merge pull request #5887 from tom-daubney-arm/mbedtls_x509_crt_ext_types_accessor Add accessor for x509 certificate extension types	2022-06-06 21:51:38 +01:00
Andrzej Kurek	cfb01948c8	Add cookie parsing tests to test_suite_ssl Signed-off-by: Andrzej Kurek <andrzej.kurek@arm.com>	2022-06-06 15:29:15 -04:00
Thomas Daubney	5c9c2ce86d	Add correct test dependencies Functions called within the test mean that MBEDTLS_X509_CRT_PARSE_C is a test dependency and so is declared in this commit. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2022-06-06 16:36:43 +01:00
Thomas Daubney	a5f39e0ec2	Move accessor definition Move the definition of the accessor so that it is not defined within the MBEDTLS_X509_CRT_WRITE_C guards. Thus remove the dependency from the test and test cases. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2022-06-06 15:42:32 +01:00
Przemek Stekiel	66867731aa	derive_output tests: fix output key length to be consistent with teh description Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-06-06 11:26:02 +02:00
Przemek Stekiel	cde3f783f5	Make info valid only after secret for HKDF-EXPAND + adapt tests Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-06-06 11:26:02 +02:00
Przemek Stekiel	0586f4c4ea	Make salt mandatory for HKDF-EXTRACT + adapt tests Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-06-06 11:25:43 +02:00
Jerry Yu	6994e3e0c2	fix various issues Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-06-06 11:50:49 +08:00
Przemek Stekiel	0e99391afe	derive_output test: fix output key bit length Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-06-03 16:18:15 +02:00
Przemek Stekiel	3e8249cde0	Add PSA_WANT_ALG_HKDF_EXPAND, PSA_WANT_ALG_HKDF_EXTRACT, adapt code and dependencies Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-06-03 16:18:15 +02:00
Przemek Stekiel	f0f0bd068b	test_suite_psa_crypto_metadata: add test cases for the HKDF-Extract/Expand algorithms Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-06-03 16:18:15 +02:00
Werner Lewis	acd01e58a3	Use ASN1 UTC tags for dates before 2000 Signed-off-by: Werner Lewis <werner.lewis@arm.com>	2022-06-01 16:24:28 +01:00
Jerry Yu	f2d32e6c3d	fix tls13_only test fail Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-06-01 18:05:18 +08:00
Thomas Daubney	3ff4fc6997	Add test data Add two test cases for accessor test. One test where desired ext type is presentent and the other of when the ext type is not present. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2022-06-01 10:23:50 +01:00
Thomas Daubney	bd5466ab7e	Add test for accessor Add test logic for accessor. Signed-off-by: Thomas Daubney <thomas.daubney@arm.com>	2022-06-01 10:23:50 +01:00
Jerry Yu	7bf3358a2d	Remove duplicated tests Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-06-01 16:55:17 +08:00
Jerry Yu	1443537da3	fix test fail when WANT_READ/WRITE returned Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-06-01 15:53:31 +08:00
Jerry Yu	66537f40b6	fix certificate request fail Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-05-31 19:53:05 +08:00
Jerry Yu	1e7c438b67	remove tls1.3 dependancy Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-05-31 19:51:38 +08:00
Gilles Peskine	09858ae664	Merge pull request #5813 from mprse/deprecate_mbedtls_cipher_setup_psa Deprecate mbedtls_cipher_setup_psa()	2022-05-31 10:56:52 +02:00
Jerry Yu	66adf3155c	Update comments Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-05-31 15:23:29 +08:00
Jerry Yu	df0a71a0b0	Add handshake version test Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-05-31 15:06:04 +08:00
Jerry Yu	b3d86de3ea	fix hanshake wrapup fail Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-05-31 15:06:04 +08:00
Jerry Yu	df65b66003	Add handshake over test Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-05-31 15:06:04 +08:00
Jerry Yu	85e5c81c37	fix check test cases fail Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-05-31 15:06:04 +08:00
Jerry Yu	d9d049d180	revert dbg config Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-05-31 15:06:04 +08:00
Jerry Yu	d8c57feaf9	Add moving state test for TLS1.3 Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-05-31 15:06:04 +08:00
Jerry Yu	023ff7acb1	Move dependes_on of move handshakes state Prepare share move_handshake_state function with TLSv1.3 Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>	2022-05-31 15:06:04 +08:00
Manuel Pégourié-Gonnard	69e348db85	Merge pull request #5833 from superna9999/5826-create-mbedtls-pk-can-do-psa Permissions 1: create `mbedtls_pk_can_do_ext()`	2022-05-23 10:58:32 +02:00
Neil Armstrong	c661ff51c9	Fix pk_can_do_ext tests with non-opaque keys Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-05-20 09:49:04 +02:00
Neil Armstrong	5c5b116a49	Add pk_can_do_ext test for non-opaque keys Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-05-19 18:07:53 +02:00
Przemek Stekiel	476d9c45b8	Use MBEDTLS_TEST_DEPRECATED only in tests Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-05-19 14:11:06 +02:00
Przemek Stekiel	fcdd023ba6	derive_output tests: add invalid input secret test for HKDF-Expand Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-05-19 10:28:58 +02:00
Neil Armstrong	8eb0afb726	Remove duplicate pk_can_do_ext test Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-05-17 14:58:11 +02:00
Neil Armstrong	408f6a60a3	Add usage parameter to mbedtls_pk_can_do_ext() Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-05-17 14:23:20 +02:00
Neil Armstrong	434d4eb74f	Remove invalid comments in pk_can_do_ext() Signed-off-by: Neil Armstrong <narmstrong@baylibre.com>	2022-05-17 11:58:22 +02:00
Gilles Peskine	7be11a790d	Use TEST_LE_U in some places where it applies Systematically replace "TEST_ASSERT( $x <= $y )" by "TEST_LE_U( $x, $y )" in test_suite_psa_crypto. In this file, all occurrences of this pattern are size_t so unsigned. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2022-05-16 19:37:53 +02:00
Gilles Peskine	3ff25443c8	Separate the validation of the size macros and of the function Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2022-05-16 19:33:11 +02:00
Gilles Peskine	d4a258a08f	Improve PSA_RAW_KEY_AGREEMENT_OUTPUT_SIZE validation We want to check: 1. actual output <= PSA_RAW_KEY_AGREEMENT_OUTPUT_SIZE (the output fits if the caller uses the key-specific buffer size macro) 2. actual output <= PSA_RAW_KEY_AGREEMENT_OUTPUT_MAX_SIZE (the output fits if the caller uses the generic buffer size macro) 3. PSA_RAW_KEY_AGREEMENT_OUTPUT_SIZE <= PSA_RAW_KEY_AGREEMENT_OUTPUT_MAX_SIZE (consistency in the calculation) We were only testing (1) and (2). Test (3) as well. (1) and (3) together imply (2) so there's no need to test (2). Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2022-05-16 19:33:11 +02:00
Gilles Peskine	992bee8b6e	Test psa_raw_key_agreement with a larger/smaller buffer Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>	2022-05-16 19:33:11 +02:00
Gilles Peskine	9b7e29663f	Merge pull request #4211 from ccawley2011/mingw Fix compilation with MinGW32	2022-05-16 12:30:37 +02:00
Przemek Stekiel	e58ca8bb5e	Add MBEDTLS_TEST_DEPRECATED dependency Signed-off-by: Przemek Stekiel <przemyslaw.stekiel@mobica.com>	2022-05-13 15:48:41 +02:00

... 4 5 6 7 8 ...

4481 commits