2 * Copyright 2017 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the OpenSSL licenses, (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 * https://www.openssl.org/source/license.html
8 * or in the file LICENSE in the source distribution.
11 #include <internal/nelem.h>
19 #define NUM_REPEATS "1000000"
21 static int64_t num_repeats;
22 static int print_mode = 0;
25 # include <openssl/ec.h>
26 # include <openssl/err.h>
27 # include <openssl/obj_mac.h>
28 # include <openssl/objects.h>
29 # include <openssl/rand.h>
30 # include <openssl/bn.h>
31 # include <openssl/opensslconf.h>
33 static const char *kP256DefaultResult =
34 "A1E24B223B8E81BC1FFF99BAFB909EDB895FACDE7D6DA5EF5E7B3255FB378E0F";
37 * Perform a deterministic walk on the curve, by starting from |point| and
38 * using the X-coordinate of the previous point as the next scalar for
39 * point multiplication.
40 * Returns the X-coordinate of the end result or NULL on error.
42 static BIGNUM *walk_curve(const EC_GROUP *group, EC_POINT *point, int64_t num)
44 BIGNUM *scalar = NULL;
47 if (!TEST_ptr(scalar = BN_new())
48 || !TEST_true(EC_POINT_get_affine_coordinates_GFp(group, point,
53 for (i = 0; i < num; i++) {
54 if (!TEST_true(EC_POINT_mul(group, point, NULL, point, scalar, NULL))
55 || !TEST_true(EC_POINT_get_affine_coordinates_GFp(group, point,
67 static int test_curve(void)
69 EC_GROUP *group = NULL;
70 EC_POINT *point = NULL;
71 BIGNUM *result = NULL, *expected_result = NULL;
75 * We currently hard-code P-256, though adaptation to other curves.
76 * would be straightforward.
78 if (!TEST_ptr(group = EC_GROUP_new_by_curve_name(NID_X9_62_prime256v1))
79 || !TEST_ptr(point = EC_POINT_dup(EC_GROUP_get0_generator(group),
81 || !TEST_ptr(result = walk_curve(group, point, num_repeats)))
85 BN_print(bio_out, result);
86 BIO_printf(bio_out, "\n");
89 if (!TEST_true(BN_hex2bn(&expected_result, kP256DefaultResult))
90 || !TEST_ptr(expected_result)
91 || !TEST_BN_eq(result, expected_result))
100 BN_free(expected_result);
105 static int atoi64(const char *in, int64_t *result)
109 for ( ; *in != '\0'; in++) {
122 * Stress test the curve. If the '-num' argument is given, runs the loop
123 * |num| times and prints the resulting X-coordinate. Otherwise runs the test
124 * the default number of times and compares against the expected result.
126 int setup_tests(void)
130 if (!atoi64(NUM_REPEATS, &num_repeats)) {
131 TEST_error("Cannot parse " NUM_REPEATS);
135 * TODO(openssl-team): code under test/ should be able to reuse the option
136 * parsing framework currently in apps/.
138 p = test_get_option_argument("-num");
140 if (!atoi64(p, &num_repeats)
146 #ifndef OPENSSL_NO_EC
147 ADD_TEST(test_curve);