1*62c56f98SSadaf Ebrahimi /**
2*62c56f98SSadaf Ebrahimi * \file bignum_helpers.c
3*62c56f98SSadaf Ebrahimi *
4*62c56f98SSadaf Ebrahimi * \brief This file contains the prototypes of helper functions for
5*62c56f98SSadaf Ebrahimi * bignum-related testing.
6*62c56f98SSadaf Ebrahimi */
7*62c56f98SSadaf Ebrahimi
8*62c56f98SSadaf Ebrahimi /*
9*62c56f98SSadaf Ebrahimi * Copyright The Mbed TLS Contributors
10*62c56f98SSadaf Ebrahimi * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
11*62c56f98SSadaf Ebrahimi */
12*62c56f98SSadaf Ebrahimi
13*62c56f98SSadaf Ebrahimi #define MBEDTLS_ALLOW_PRIVATE_ACCESS
14*62c56f98SSadaf Ebrahimi #include <test/bignum_helpers.h>
15*62c56f98SSadaf Ebrahimi
16*62c56f98SSadaf Ebrahimi #if defined(MBEDTLS_BIGNUM_C)
17*62c56f98SSadaf Ebrahimi
18*62c56f98SSadaf Ebrahimi #include <stdlib.h>
19*62c56f98SSadaf Ebrahimi #include <string.h>
20*62c56f98SSadaf Ebrahimi
21*62c56f98SSadaf Ebrahimi #include <mbedtls/bignum.h>
22*62c56f98SSadaf Ebrahimi #include <bignum_core.h>
23*62c56f98SSadaf Ebrahimi #include <bignum_mod.h>
24*62c56f98SSadaf Ebrahimi #include <bignum_mod_raw.h>
25*62c56f98SSadaf Ebrahimi
26*62c56f98SSadaf Ebrahimi #include <test/helpers.h>
27*62c56f98SSadaf Ebrahimi #include <test/macros.h>
28*62c56f98SSadaf Ebrahimi
mbedtls_test_read_mpi_core(mbedtls_mpi_uint ** pX,size_t * plimbs,const char * input)29*62c56f98SSadaf Ebrahimi int mbedtls_test_read_mpi_core(mbedtls_mpi_uint **pX, size_t *plimbs,
30*62c56f98SSadaf Ebrahimi const char *input)
31*62c56f98SSadaf Ebrahimi {
32*62c56f98SSadaf Ebrahimi /* Sanity check */
33*62c56f98SSadaf Ebrahimi if (*pX != NULL) {
34*62c56f98SSadaf Ebrahimi return MBEDTLS_ERR_MPI_BAD_INPUT_DATA;
35*62c56f98SSadaf Ebrahimi }
36*62c56f98SSadaf Ebrahimi
37*62c56f98SSadaf Ebrahimi size_t hex_len = strlen(input);
38*62c56f98SSadaf Ebrahimi size_t byte_len = (hex_len + 1) / 2;
39*62c56f98SSadaf Ebrahimi *plimbs = CHARS_TO_LIMBS(byte_len);
40*62c56f98SSadaf Ebrahimi
41*62c56f98SSadaf Ebrahimi /* A core bignum is not allowed to be empty. Forbid it as test data,
42*62c56f98SSadaf Ebrahimi * this way static analyzers have a chance of knowing we don't expect
43*62c56f98SSadaf Ebrahimi * the bignum functions to support empty inputs. */
44*62c56f98SSadaf Ebrahimi if (*plimbs == 0) {
45*62c56f98SSadaf Ebrahimi return MBEDTLS_ERR_MPI_BAD_INPUT_DATA;
46*62c56f98SSadaf Ebrahimi }
47*62c56f98SSadaf Ebrahimi
48*62c56f98SSadaf Ebrahimi *pX = mbedtls_calloc(*plimbs, sizeof(**pX));
49*62c56f98SSadaf Ebrahimi if (*pX == NULL) {
50*62c56f98SSadaf Ebrahimi return MBEDTLS_ERR_MPI_ALLOC_FAILED;
51*62c56f98SSadaf Ebrahimi }
52*62c56f98SSadaf Ebrahimi
53*62c56f98SSadaf Ebrahimi unsigned char *byte_start = (unsigned char *) *pX;
54*62c56f98SSadaf Ebrahimi if (byte_len % sizeof(mbedtls_mpi_uint) != 0) {
55*62c56f98SSadaf Ebrahimi byte_start += sizeof(mbedtls_mpi_uint) - byte_len % sizeof(mbedtls_mpi_uint);
56*62c56f98SSadaf Ebrahimi }
57*62c56f98SSadaf Ebrahimi if ((hex_len & 1) != 0) {
58*62c56f98SSadaf Ebrahimi /* mbedtls_test_unhexify wants an even number of hex digits */
59*62c56f98SSadaf Ebrahimi TEST_ASSERT(mbedtls_test_ascii2uc(*input, byte_start) == 0);
60*62c56f98SSadaf Ebrahimi ++byte_start;
61*62c56f98SSadaf Ebrahimi ++input;
62*62c56f98SSadaf Ebrahimi --byte_len;
63*62c56f98SSadaf Ebrahimi }
64*62c56f98SSadaf Ebrahimi TEST_ASSERT(mbedtls_test_unhexify(byte_start,
65*62c56f98SSadaf Ebrahimi byte_len,
66*62c56f98SSadaf Ebrahimi input,
67*62c56f98SSadaf Ebrahimi &byte_len) == 0);
68*62c56f98SSadaf Ebrahimi
69*62c56f98SSadaf Ebrahimi mbedtls_mpi_core_bigendian_to_host(*pX, *plimbs);
70*62c56f98SSadaf Ebrahimi return 0;
71*62c56f98SSadaf Ebrahimi
72*62c56f98SSadaf Ebrahimi exit:
73*62c56f98SSadaf Ebrahimi mbedtls_free(*pX);
74*62c56f98SSadaf Ebrahimi return MBEDTLS_ERR_MPI_BAD_INPUT_DATA;
75*62c56f98SSadaf Ebrahimi }
76*62c56f98SSadaf Ebrahimi
77*62c56f98SSadaf Ebrahimi #if defined(MBEDTLS_ECP_WITH_MPI_UINT)
mbedtls_test_read_mpi_modulus(mbedtls_mpi_mod_modulus * N,const char * s,mbedtls_mpi_mod_rep_selector int_rep)78*62c56f98SSadaf Ebrahimi int mbedtls_test_read_mpi_modulus(mbedtls_mpi_mod_modulus *N,
79*62c56f98SSadaf Ebrahimi const char *s,
80*62c56f98SSadaf Ebrahimi mbedtls_mpi_mod_rep_selector int_rep)
81*62c56f98SSadaf Ebrahimi {
82*62c56f98SSadaf Ebrahimi mbedtls_mpi_uint *p = NULL;
83*62c56f98SSadaf Ebrahimi size_t limbs = 0;
84*62c56f98SSadaf Ebrahimi if (N->limbs != 0) {
85*62c56f98SSadaf Ebrahimi return MBEDTLS_ERR_MPI_BAD_INPUT_DATA;
86*62c56f98SSadaf Ebrahimi }
87*62c56f98SSadaf Ebrahimi int ret = mbedtls_test_read_mpi_core(&p, &limbs, s);
88*62c56f98SSadaf Ebrahimi if (ret != 0) {
89*62c56f98SSadaf Ebrahimi return ret;
90*62c56f98SSadaf Ebrahimi }
91*62c56f98SSadaf Ebrahimi
92*62c56f98SSadaf Ebrahimi switch (int_rep) {
93*62c56f98SSadaf Ebrahimi case MBEDTLS_MPI_MOD_REP_MONTGOMERY:
94*62c56f98SSadaf Ebrahimi ret = mbedtls_mpi_mod_modulus_setup(N, p, limbs);
95*62c56f98SSadaf Ebrahimi break;
96*62c56f98SSadaf Ebrahimi case MBEDTLS_MPI_MOD_REP_OPT_RED:
97*62c56f98SSadaf Ebrahimi ret = mbedtls_mpi_mod_optred_modulus_setup(N, p, limbs, NULL);
98*62c56f98SSadaf Ebrahimi break;
99*62c56f98SSadaf Ebrahimi default:
100*62c56f98SSadaf Ebrahimi ret = MBEDTLS_ERR_MPI_BAD_INPUT_DATA;
101*62c56f98SSadaf Ebrahimi break;
102*62c56f98SSadaf Ebrahimi }
103*62c56f98SSadaf Ebrahimi if (ret != 0) {
104*62c56f98SSadaf Ebrahimi mbedtls_free(p);
105*62c56f98SSadaf Ebrahimi }
106*62c56f98SSadaf Ebrahimi return ret;
107*62c56f98SSadaf Ebrahimi }
108*62c56f98SSadaf Ebrahimi
mbedtls_test_mpi_mod_modulus_free_with_limbs(mbedtls_mpi_mod_modulus * N)109*62c56f98SSadaf Ebrahimi void mbedtls_test_mpi_mod_modulus_free_with_limbs(mbedtls_mpi_mod_modulus *N)
110*62c56f98SSadaf Ebrahimi {
111*62c56f98SSadaf Ebrahimi mbedtls_free((mbedtls_mpi_uint *) N->p);
112*62c56f98SSadaf Ebrahimi mbedtls_mpi_mod_modulus_free(N);
113*62c56f98SSadaf Ebrahimi }
114*62c56f98SSadaf Ebrahimi #endif /* MBEDTLS_ECP_WITH_MPI_UINT */
115*62c56f98SSadaf Ebrahimi
mbedtls_test_read_mpi(mbedtls_mpi * X,const char * s)116*62c56f98SSadaf Ebrahimi int mbedtls_test_read_mpi(mbedtls_mpi *X, const char *s)
117*62c56f98SSadaf Ebrahimi {
118*62c56f98SSadaf Ebrahimi int negative = 0;
119*62c56f98SSadaf Ebrahimi /* Always set the sign bit to -1 if the input has a minus sign, even for 0.
120*62c56f98SSadaf Ebrahimi * This creates an invalid representation, which mbedtls_mpi_read_string()
121*62c56f98SSadaf Ebrahimi * avoids but we want to be able to create that in test data. */
122*62c56f98SSadaf Ebrahimi if (s[0] == '-') {
123*62c56f98SSadaf Ebrahimi ++s;
124*62c56f98SSadaf Ebrahimi negative = 1;
125*62c56f98SSadaf Ebrahimi }
126*62c56f98SSadaf Ebrahimi /* mbedtls_mpi_read_string() currently retains leading zeros.
127*62c56f98SSadaf Ebrahimi * It always allocates at least one limb for the value 0. */
128*62c56f98SSadaf Ebrahimi if (s[0] == 0) {
129*62c56f98SSadaf Ebrahimi mbedtls_mpi_free(X);
130*62c56f98SSadaf Ebrahimi return 0;
131*62c56f98SSadaf Ebrahimi }
132*62c56f98SSadaf Ebrahimi int ret = mbedtls_mpi_read_string(X, 16, s);
133*62c56f98SSadaf Ebrahimi if (ret != 0) {
134*62c56f98SSadaf Ebrahimi return ret;
135*62c56f98SSadaf Ebrahimi }
136*62c56f98SSadaf Ebrahimi if (negative) {
137*62c56f98SSadaf Ebrahimi if (mbedtls_mpi_cmp_int(X, 0) == 0) {
138*62c56f98SSadaf Ebrahimi ++mbedtls_test_case_uses_negative_0;
139*62c56f98SSadaf Ebrahimi }
140*62c56f98SSadaf Ebrahimi X->s = -1;
141*62c56f98SSadaf Ebrahimi }
142*62c56f98SSadaf Ebrahimi return 0;
143*62c56f98SSadaf Ebrahimi }
144*62c56f98SSadaf Ebrahimi
145*62c56f98SSadaf Ebrahimi #endif /* MBEDTLS_BIGNUM_C */
146