j3d1/bearssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

New "i15" implementation of big integers (faster, and constant-time, on ARM Cortex M0/M0+); imported into EC, ECDSA, RSA.

Browse source
This commit is contained in:
Thomas Pornin 2017-01-04 19:21:09 +01:00
parent 6dd8c51ba7
commit 28e4e120b8
29 changed files with 2993 additions and 326 deletions
Download patch file Download diff file Expand all files Collapse all files

54
test/test_crypto.c
View file

@ -4367,6 +4367,14 @@ test_RSA_sign(const char *name, br_rsa_private fpriv,
fflush(stdout);
}
static void
test_RSA_i15(void)
{
test_RSA_core("RSA i15 core", &br_rsa_i15_public, &br_rsa_i15_private);
test_RSA_sign("RSA i15 sign", &br_rsa_i15_private,
&br_rsa_i15_pkcs1_sign, &br_rsa_i15_pkcs1_vrfy);
}
static void
test_RSA_i31(void)
{
@ -4813,6 +4821,15 @@ test_EC_KAT(const char *name, const br_ec_impl *impl, uint32_t curve_mask)
fflush(stdout);
}
static void
test_EC_prime_i15(void)
{
test_EC_KAT("EC_prime_i15", &br_ec_prime_i15,
(uint32_t)1 << BR_EC_secp256r1
| (uint32_t)1 << BR_EC_secp384r1
| (uint32_t)1 << BR_EC_secp521r1);
}
static void
test_EC_prime_i31(void)
{
@ -5201,7 +5218,8 @@ const ecdsa_kat_vector ECDSA_KAT[] = {
};
static void
test_ECDSA_KAT(br_ecdsa_sign sign, br_ecdsa_vrfy vrfy, int asn1)
test_ECDSA_KAT(const br_ec_impl *iec,
br_ecdsa_sign sign, br_ecdsa_vrfy vrfy, int asn1)
{
size_t u;
@ -5228,28 +5246,28 @@ test_ECDSA_KAT(br_ecdsa_sign sign, br_ecdsa_vrfy vrfy, int asn1)
sig_len = hextobin(sig, kv->sraw);
}
if (vrfy(&br_ec_prime_i31, hash, hash_len,
if (vrfy(iec, hash, hash_len,
kv->pub, sig, sig_len) != 1)
{
fprintf(stderr, "ECDSA KAT verify failed (1)\n");
exit(EXIT_FAILURE);
}
hash[0] ^= 0x80;
if (vrfy(&br_ec_prime_i31, hash, hash_len,
if (vrfy(iec, hash, hash_len,
kv->pub, sig, sig_len) != 0)
{
fprintf(stderr, "ECDSA KAT verify shoud have failed\n");
exit(EXIT_FAILURE);
}
hash[0] ^= 0x80;
if (vrfy(&br_ec_prime_i31, hash, hash_len,
if (vrfy(iec, hash, hash_len,
kv->pub, sig, sig_len) != 1)
{
fprintf(stderr, "ECDSA KAT verify failed (2)\n");
exit(EXIT_FAILURE);
}
sig2_len = sign(&br_ec_prime_i31, kv->hf, hash, kv->priv, sig2);
sig2_len = sign(iec, kv->hf, hash, kv->priv, sig2);
if (sig2_len == 0) {
fprintf(stderr, "ECDSA KAT sign failed\n");
exit(EXIT_FAILURE);
@ -5271,10 +5289,29 @@ test_ECDSA_i31(void)
fflush(stdout);
printf("[raw]");
fflush(stdout);
test_ECDSA_KAT(&br_ecdsa_i31_sign_raw, &br_ecdsa_i31_vrfy_raw, 0);
test_ECDSA_KAT(&br_ec_prime_i31,
&br_ecdsa_i31_sign_raw, &br_ecdsa_i31_vrfy_raw, 0);
printf(" [asn1]");
fflush(stdout);
test_ECDSA_KAT(&br_ecdsa_i31_sign_asn1, &br_ecdsa_i31_vrfy_asn1, 1);
test_ECDSA_KAT(&br_ec_prime_i31,
&br_ecdsa_i31_sign_asn1, &br_ecdsa_i31_vrfy_asn1, 1);
printf(" done.\n");
fflush(stdout);
}
static void
test_ECDSA_i15(void)
{
printf("Test ECDSA/i15: ");
fflush(stdout);
printf("[raw]");
fflush(stdout);
test_ECDSA_KAT(&br_ec_prime_i15,
&br_ecdsa_i15_sign_raw, &br_ecdsa_i15_vrfy_raw, 0);
printf(" [asn1]");
fflush(stdout);
test_ECDSA_KAT(&br_ec_prime_i31,
&br_ecdsa_i15_sign_asn1, &br_ecdsa_i15_vrfy_asn1, 1);
printf(" done.\n");
fflush(stdout);
}
@ -5343,14 +5380,17 @@ static const struct {
STU(DES_ct),
STU(ChaCha20_ct),
STU(Poly1305_ctmul),
STU(RSA_i15),
STU(RSA_i31),
STU(RSA_i32),
STU(GHASH_ctmul),
STU(GHASH_ctmul32),
STU(GHASH_ctmul64),
STU(EC_prime_i15),
STU(EC_prime_i31),
STU(EC_p256_i15),
/* STU(EC_prime_i32), */
STU(ECDSA_i15),
STU(ECDSA_i31),
{ 0, 0 }
};

38
test/test_speed.c
View file

@ -557,6 +557,13 @@ test_speed_rsa_inner(char *name,
}
}
static void
test_speed_rsa_i15(void)
{
test_speed_rsa_inner("RSA i15",
&br_rsa_i15_public, &br_rsa_i15_private);
}
static void
test_speed_rsa_i31(void)
{
@ -616,7 +623,16 @@ test_speed_ec_inner(const char *name,
static void
test_speed_ec_p256_i15(void)
{
test_speed_ec_inner("EC i15 P-256", &br_ec_p256_i15, &br_secp256r1);
test_speed_ec_inner("EC i15/spec P-256",
&br_ec_p256_i15, &br_secp256r1);
}
static void
test_speed_ec_prime_i15(void)
{
test_speed_ec_inner("EC i15 P-256", &br_ec_prime_i15, &br_secp256r1);
test_speed_ec_inner("EC i15 P-384", &br_ec_prime_i15, &br_secp384r1);
test_speed_ec_inner("EC i15 P-521", &br_ec_prime_i15, &br_secp521r1);
}
static void
@ -712,6 +728,23 @@ test_speed_ecdsa_inner(const char *name,
}
}
static void
test_speed_ecdsa_i15(void)
{
test_speed_ecdsa_inner("ECDSA i15 P-256",
&br_ec_prime_i15, &br_secp256r1,
&br_ecdsa_i15_sign_asn1,
&br_ecdsa_i15_vrfy_asn1);
test_speed_ecdsa_inner("ECDSA i15 P-384",
&br_ec_prime_i15, &br_secp384r1,
&br_ecdsa_i15_sign_asn1,
&br_ecdsa_i15_vrfy_asn1);
test_speed_ecdsa_inner("ECDSA i15 P-521",
&br_ec_prime_i15, &br_secp521r1,
&br_ecdsa_i15_sign_asn1,
&br_ecdsa_i15_vrfy_asn1);
}
static void
test_speed_ecdsa_i31(void)
{
@ -1134,10 +1167,13 @@ static const struct {
STU(poly1305_ctmul),
STU(rsa_i15),
STU(rsa_i31),
STU(rsa_i32),
STU(ec_p256_i15),
STU(ec_prime_i15),
STU(ec_prime_i31),
STU(ecdsa_i15),
STU(ecdsa_i31),
STU(i31)