Gleb Klochkov
/
Climatcontroll_Main
Important changes to repositories hosted on mbed.com
Mbed hosted mercurial repositories are deprecated and are due to be permanently deleted in July 2026.
To keep a copy of this software download the repository Zip archive or clone locally using Mercurial.
It is also possible to export all your personal repositories from the account settings page.
mbed-os/features/mbedtls/src/ecjpake.c@0:2f0e1e23c242, 2018-04-13 (annotated)
- Committer:
- glebiuskv
- Date:
- Fri Apr 13 08:53:46 2018 +0000
- Revision:
- 0:2f0e1e23c242
initial
Who changed what in which revision?
| User | Revision | Line number | New contents of line |
|---|---|---|---|
| glebiuskv | 0:2f0e1e23c242 | 1 | /* |
| glebiuskv | 0:2f0e1e23c242 | 2 | * Elliptic curve J-PAKE |
| glebiuskv | 0:2f0e1e23c242 | 3 | * |
| glebiuskv | 0:2f0e1e23c242 | 4 | * Copyright (C) 2006-2015, ARM Limited, All Rights Reserved |
| glebiuskv | 0:2f0e1e23c242 | 5 | * SPDX-License-Identifier: Apache-2.0 |
| glebiuskv | 0:2f0e1e23c242 | 6 | * |
| glebiuskv | 0:2f0e1e23c242 | 7 | * Licensed under the Apache License, Version 2.0 (the "License"); you may |
| glebiuskv | 0:2f0e1e23c242 | 8 | * not use this file except in compliance with the License. |
| glebiuskv | 0:2f0e1e23c242 | 9 | * You may obtain a copy of the License at |
| glebiuskv | 0:2f0e1e23c242 | 10 | * |
| glebiuskv | 0:2f0e1e23c242 | 11 | * http://www.apache.org/licenses/LICENSE-2.0 |
| glebiuskv | 0:2f0e1e23c242 | 12 | * |
| glebiuskv | 0:2f0e1e23c242 | 13 | * Unless required by applicable law or agreed to in writing, software |
| glebiuskv | 0:2f0e1e23c242 | 14 | * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
| glebiuskv | 0:2f0e1e23c242 | 15 | * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| glebiuskv | 0:2f0e1e23c242 | 16 | * See the License for the specific language governing permissions and |
| glebiuskv | 0:2f0e1e23c242 | 17 | * limitations under the License. |
| glebiuskv | 0:2f0e1e23c242 | 18 | * |
| glebiuskv | 0:2f0e1e23c242 | 19 | * This file is part of mbed TLS (https://tls.mbed.org) |
| glebiuskv | 0:2f0e1e23c242 | 20 | */ |
| glebiuskv | 0:2f0e1e23c242 | 21 | |
| glebiuskv | 0:2f0e1e23c242 | 22 | /* |
| glebiuskv | 0:2f0e1e23c242 | 23 | * References in the code are to the Thread v1.0 Specification, |
| glebiuskv | 0:2f0e1e23c242 | 24 | * available to members of the Thread Group http://threadgroup.org/ |
| glebiuskv | 0:2f0e1e23c242 | 25 | */ |
| glebiuskv | 0:2f0e1e23c242 | 26 | |
| glebiuskv | 0:2f0e1e23c242 | 27 | #if !defined(MBEDTLS_CONFIG_FILE) |
| glebiuskv | 0:2f0e1e23c242 | 28 | #include "mbedtls/config.h" |
| glebiuskv | 0:2f0e1e23c242 | 29 | #else |
| glebiuskv | 0:2f0e1e23c242 | 30 | #include MBEDTLS_CONFIG_FILE |
| glebiuskv | 0:2f0e1e23c242 | 31 | #endif |
| glebiuskv | 0:2f0e1e23c242 | 32 | |
| glebiuskv | 0:2f0e1e23c242 | 33 | #if defined(MBEDTLS_ECJPAKE_C) |
| glebiuskv | 0:2f0e1e23c242 | 34 | |
| glebiuskv | 0:2f0e1e23c242 | 35 | #include "mbedtls/ecjpake.h" |
| glebiuskv | 0:2f0e1e23c242 | 36 | |
| glebiuskv | 0:2f0e1e23c242 | 37 | #include <string.h> |
| glebiuskv | 0:2f0e1e23c242 | 38 | |
| glebiuskv | 0:2f0e1e23c242 | 39 | #if !defined(MBEDTLS_ECJPAKE_ALT) |
| glebiuskv | 0:2f0e1e23c242 | 40 | |
| glebiuskv | 0:2f0e1e23c242 | 41 | /* |
| glebiuskv | 0:2f0e1e23c242 | 42 | * Convert a mbedtls_ecjpake_role to identifier string |
| glebiuskv | 0:2f0e1e23c242 | 43 | */ |
| glebiuskv | 0:2f0e1e23c242 | 44 | static const char * const ecjpake_id[] = { |
| glebiuskv | 0:2f0e1e23c242 | 45 | "client", |
| glebiuskv | 0:2f0e1e23c242 | 46 | "server" |
| glebiuskv | 0:2f0e1e23c242 | 47 | }; |
| glebiuskv | 0:2f0e1e23c242 | 48 | |
| glebiuskv | 0:2f0e1e23c242 | 49 | #define ID_MINE ( ecjpake_id[ ctx->role ] ) |
| glebiuskv | 0:2f0e1e23c242 | 50 | #define ID_PEER ( ecjpake_id[ 1 - ctx->role ] ) |
| glebiuskv | 0:2f0e1e23c242 | 51 | |
| glebiuskv | 0:2f0e1e23c242 | 52 | /* |
| glebiuskv | 0:2f0e1e23c242 | 53 | * Initialize context |
| glebiuskv | 0:2f0e1e23c242 | 54 | */ |
| glebiuskv | 0:2f0e1e23c242 | 55 | void mbedtls_ecjpake_init( mbedtls_ecjpake_context *ctx ) |
| glebiuskv | 0:2f0e1e23c242 | 56 | { |
| glebiuskv | 0:2f0e1e23c242 | 57 | if( ctx == NULL ) |
| glebiuskv | 0:2f0e1e23c242 | 58 | return; |
| glebiuskv | 0:2f0e1e23c242 | 59 | |
| glebiuskv | 0:2f0e1e23c242 | 60 | ctx->md_info = NULL; |
| glebiuskv | 0:2f0e1e23c242 | 61 | mbedtls_ecp_group_init( &ctx->grp ); |
| glebiuskv | 0:2f0e1e23c242 | 62 | ctx->point_format = MBEDTLS_ECP_PF_UNCOMPRESSED; |
| glebiuskv | 0:2f0e1e23c242 | 63 | |
| glebiuskv | 0:2f0e1e23c242 | 64 | mbedtls_ecp_point_init( &ctx->Xm1 ); |
| glebiuskv | 0:2f0e1e23c242 | 65 | mbedtls_ecp_point_init( &ctx->Xm2 ); |
| glebiuskv | 0:2f0e1e23c242 | 66 | mbedtls_ecp_point_init( &ctx->Xp1 ); |
| glebiuskv | 0:2f0e1e23c242 | 67 | mbedtls_ecp_point_init( &ctx->Xp2 ); |
| glebiuskv | 0:2f0e1e23c242 | 68 | mbedtls_ecp_point_init( &ctx->Xp ); |
| glebiuskv | 0:2f0e1e23c242 | 69 | |
| glebiuskv | 0:2f0e1e23c242 | 70 | mbedtls_mpi_init( &ctx->xm1 ); |
| glebiuskv | 0:2f0e1e23c242 | 71 | mbedtls_mpi_init( &ctx->xm2 ); |
| glebiuskv | 0:2f0e1e23c242 | 72 | mbedtls_mpi_init( &ctx->s ); |
| glebiuskv | 0:2f0e1e23c242 | 73 | } |
| glebiuskv | 0:2f0e1e23c242 | 74 | |
| glebiuskv | 0:2f0e1e23c242 | 75 | /* |
| glebiuskv | 0:2f0e1e23c242 | 76 | * Free context |
| glebiuskv | 0:2f0e1e23c242 | 77 | */ |
| glebiuskv | 0:2f0e1e23c242 | 78 | void mbedtls_ecjpake_free( mbedtls_ecjpake_context *ctx ) |
| glebiuskv | 0:2f0e1e23c242 | 79 | { |
| glebiuskv | 0:2f0e1e23c242 | 80 | if( ctx == NULL ) |
| glebiuskv | 0:2f0e1e23c242 | 81 | return; |
| glebiuskv | 0:2f0e1e23c242 | 82 | |
| glebiuskv | 0:2f0e1e23c242 | 83 | ctx->md_info = NULL; |
| glebiuskv | 0:2f0e1e23c242 | 84 | mbedtls_ecp_group_free( &ctx->grp ); |
| glebiuskv | 0:2f0e1e23c242 | 85 | |
| glebiuskv | 0:2f0e1e23c242 | 86 | mbedtls_ecp_point_free( &ctx->Xm1 ); |
| glebiuskv | 0:2f0e1e23c242 | 87 | mbedtls_ecp_point_free( &ctx->Xm2 ); |
| glebiuskv | 0:2f0e1e23c242 | 88 | mbedtls_ecp_point_free( &ctx->Xp1 ); |
| glebiuskv | 0:2f0e1e23c242 | 89 | mbedtls_ecp_point_free( &ctx->Xp2 ); |
| glebiuskv | 0:2f0e1e23c242 | 90 | mbedtls_ecp_point_free( &ctx->Xp ); |
| glebiuskv | 0:2f0e1e23c242 | 91 | |
| glebiuskv | 0:2f0e1e23c242 | 92 | mbedtls_mpi_free( &ctx->xm1 ); |
| glebiuskv | 0:2f0e1e23c242 | 93 | mbedtls_mpi_free( &ctx->xm2 ); |
| glebiuskv | 0:2f0e1e23c242 | 94 | mbedtls_mpi_free( &ctx->s ); |
| glebiuskv | 0:2f0e1e23c242 | 95 | } |
| glebiuskv | 0:2f0e1e23c242 | 96 | |
| glebiuskv | 0:2f0e1e23c242 | 97 | /* |
| glebiuskv | 0:2f0e1e23c242 | 98 | * Setup context |
| glebiuskv | 0:2f0e1e23c242 | 99 | */ |
| glebiuskv | 0:2f0e1e23c242 | 100 | int mbedtls_ecjpake_setup( mbedtls_ecjpake_context *ctx, |
| glebiuskv | 0:2f0e1e23c242 | 101 | mbedtls_ecjpake_role role, |
| glebiuskv | 0:2f0e1e23c242 | 102 | mbedtls_md_type_t hash, |
| glebiuskv | 0:2f0e1e23c242 | 103 | mbedtls_ecp_group_id curve, |
| glebiuskv | 0:2f0e1e23c242 | 104 | const unsigned char *secret, |
| glebiuskv | 0:2f0e1e23c242 | 105 | size_t len ) |
| glebiuskv | 0:2f0e1e23c242 | 106 | { |
| glebiuskv | 0:2f0e1e23c242 | 107 | int ret; |
| glebiuskv | 0:2f0e1e23c242 | 108 | |
| glebiuskv | 0:2f0e1e23c242 | 109 | ctx->role = role; |
| glebiuskv | 0:2f0e1e23c242 | 110 | |
| glebiuskv | 0:2f0e1e23c242 | 111 | if( ( ctx->md_info = mbedtls_md_info_from_type( hash ) ) == NULL ) |
| glebiuskv | 0:2f0e1e23c242 | 112 | return( MBEDTLS_ERR_MD_FEATURE_UNAVAILABLE ); |
| glebiuskv | 0:2f0e1e23c242 | 113 | |
| glebiuskv | 0:2f0e1e23c242 | 114 | MBEDTLS_MPI_CHK( mbedtls_ecp_group_load( &ctx->grp, curve ) ); |
| glebiuskv | 0:2f0e1e23c242 | 115 | |
| glebiuskv | 0:2f0e1e23c242 | 116 | MBEDTLS_MPI_CHK( mbedtls_mpi_read_binary( &ctx->s, secret, len ) ); |
| glebiuskv | 0:2f0e1e23c242 | 117 | |
| glebiuskv | 0:2f0e1e23c242 | 118 | cleanup: |
| glebiuskv | 0:2f0e1e23c242 | 119 | if( ret != 0 ) |
| glebiuskv | 0:2f0e1e23c242 | 120 | mbedtls_ecjpake_free( ctx ); |
| glebiuskv | 0:2f0e1e23c242 | 121 | |
| glebiuskv | 0:2f0e1e23c242 | 122 | return( ret ); |
| glebiuskv | 0:2f0e1e23c242 | 123 | } |
| glebiuskv | 0:2f0e1e23c242 | 124 | |
| glebiuskv | 0:2f0e1e23c242 | 125 | /* |
| glebiuskv | 0:2f0e1e23c242 | 126 | * Check if context is ready for use |
| glebiuskv | 0:2f0e1e23c242 | 127 | */ |
| glebiuskv | 0:2f0e1e23c242 | 128 | int mbedtls_ecjpake_check( const mbedtls_ecjpake_context *ctx ) |
| glebiuskv | 0:2f0e1e23c242 | 129 | { |
| glebiuskv | 0:2f0e1e23c242 | 130 | if( ctx->md_info == NULL || |
| glebiuskv | 0:2f0e1e23c242 | 131 | ctx->grp.id == MBEDTLS_ECP_DP_NONE || |
| glebiuskv | 0:2f0e1e23c242 | 132 | ctx->s.p == NULL ) |
| glebiuskv | 0:2f0e1e23c242 | 133 | { |
| glebiuskv | 0:2f0e1e23c242 | 134 | return( MBEDTLS_ERR_ECP_BAD_INPUT_DATA ); |
| glebiuskv | 0:2f0e1e23c242 | 135 | } |
| glebiuskv | 0:2f0e1e23c242 | 136 | |
| glebiuskv | 0:2f0e1e23c242 | 137 | return( 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 138 | } |
| glebiuskv | 0:2f0e1e23c242 | 139 | |
| glebiuskv | 0:2f0e1e23c242 | 140 | /* |
| glebiuskv | 0:2f0e1e23c242 | 141 | * Write a point plus its length to a buffer |
| glebiuskv | 0:2f0e1e23c242 | 142 | */ |
| glebiuskv | 0:2f0e1e23c242 | 143 | static int ecjpake_write_len_point( unsigned char **p, |
| glebiuskv | 0:2f0e1e23c242 | 144 | const unsigned char *end, |
| glebiuskv | 0:2f0e1e23c242 | 145 | const mbedtls_ecp_group *grp, |
| glebiuskv | 0:2f0e1e23c242 | 146 | const int pf, |
| glebiuskv | 0:2f0e1e23c242 | 147 | const mbedtls_ecp_point *P ) |
| glebiuskv | 0:2f0e1e23c242 | 148 | { |
| glebiuskv | 0:2f0e1e23c242 | 149 | int ret; |
| glebiuskv | 0:2f0e1e23c242 | 150 | size_t len; |
| glebiuskv | 0:2f0e1e23c242 | 151 | |
| glebiuskv | 0:2f0e1e23c242 | 152 | /* Need at least 4 for length plus 1 for point */ |
| glebiuskv | 0:2f0e1e23c242 | 153 | if( end < *p || end - *p < 5 ) |
| glebiuskv | 0:2f0e1e23c242 | 154 | return( MBEDTLS_ERR_ECP_BUFFER_TOO_SMALL ); |
| glebiuskv | 0:2f0e1e23c242 | 155 | |
| glebiuskv | 0:2f0e1e23c242 | 156 | ret = mbedtls_ecp_point_write_binary( grp, P, pf, |
| glebiuskv | 0:2f0e1e23c242 | 157 | &len, *p + 4, end - ( *p + 4 ) ); |
| glebiuskv | 0:2f0e1e23c242 | 158 | if( ret != 0 ) |
| glebiuskv | 0:2f0e1e23c242 | 159 | return( ret ); |
| glebiuskv | 0:2f0e1e23c242 | 160 | |
| glebiuskv | 0:2f0e1e23c242 | 161 | (*p)[0] = (unsigned char)( ( len >> 24 ) & 0xFF ); |
| glebiuskv | 0:2f0e1e23c242 | 162 | (*p)[1] = (unsigned char)( ( len >> 16 ) & 0xFF ); |
| glebiuskv | 0:2f0e1e23c242 | 163 | (*p)[2] = (unsigned char)( ( len >> 8 ) & 0xFF ); |
| glebiuskv | 0:2f0e1e23c242 | 164 | (*p)[3] = (unsigned char)( ( len ) & 0xFF ); |
| glebiuskv | 0:2f0e1e23c242 | 165 | |
| glebiuskv | 0:2f0e1e23c242 | 166 | *p += 4 + len; |
| glebiuskv | 0:2f0e1e23c242 | 167 | |
| glebiuskv | 0:2f0e1e23c242 | 168 | return( 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 169 | } |
| glebiuskv | 0:2f0e1e23c242 | 170 | |
| glebiuskv | 0:2f0e1e23c242 | 171 | /* |
| glebiuskv | 0:2f0e1e23c242 | 172 | * Size of the temporary buffer for ecjpake_hash: |
| glebiuskv | 0:2f0e1e23c242 | 173 | * 3 EC points plus their length, plus ID and its length (4 + 6 bytes) |
| glebiuskv | 0:2f0e1e23c242 | 174 | */ |
| glebiuskv | 0:2f0e1e23c242 | 175 | #define ECJPAKE_HASH_BUF_LEN ( 3 * ( 4 + MBEDTLS_ECP_MAX_PT_LEN ) + 4 + 6 ) |
| glebiuskv | 0:2f0e1e23c242 | 176 | |
| glebiuskv | 0:2f0e1e23c242 | 177 | /* |
| glebiuskv | 0:2f0e1e23c242 | 178 | * Compute hash for ZKP (7.4.2.2.2.1) |
| glebiuskv | 0:2f0e1e23c242 | 179 | */ |
| glebiuskv | 0:2f0e1e23c242 | 180 | static int ecjpake_hash( const mbedtls_md_info_t *md_info, |
| glebiuskv | 0:2f0e1e23c242 | 181 | const mbedtls_ecp_group *grp, |
| glebiuskv | 0:2f0e1e23c242 | 182 | const int pf, |
| glebiuskv | 0:2f0e1e23c242 | 183 | const mbedtls_ecp_point *G, |
| glebiuskv | 0:2f0e1e23c242 | 184 | const mbedtls_ecp_point *V, |
| glebiuskv | 0:2f0e1e23c242 | 185 | const mbedtls_ecp_point *X, |
| glebiuskv | 0:2f0e1e23c242 | 186 | const char *id, |
| glebiuskv | 0:2f0e1e23c242 | 187 | mbedtls_mpi *h ) |
| glebiuskv | 0:2f0e1e23c242 | 188 | { |
| glebiuskv | 0:2f0e1e23c242 | 189 | int ret; |
| glebiuskv | 0:2f0e1e23c242 | 190 | unsigned char buf[ECJPAKE_HASH_BUF_LEN]; |
| glebiuskv | 0:2f0e1e23c242 | 191 | unsigned char *p = buf; |
| glebiuskv | 0:2f0e1e23c242 | 192 | const unsigned char *end = buf + sizeof( buf ); |
| glebiuskv | 0:2f0e1e23c242 | 193 | const size_t id_len = strlen( id ); |
| glebiuskv | 0:2f0e1e23c242 | 194 | unsigned char hash[MBEDTLS_MD_MAX_SIZE]; |
| glebiuskv | 0:2f0e1e23c242 | 195 | |
| glebiuskv | 0:2f0e1e23c242 | 196 | /* Write things to temporary buffer */ |
| glebiuskv | 0:2f0e1e23c242 | 197 | MBEDTLS_MPI_CHK( ecjpake_write_len_point( &p, end, grp, pf, G ) ); |
| glebiuskv | 0:2f0e1e23c242 | 198 | MBEDTLS_MPI_CHK( ecjpake_write_len_point( &p, end, grp, pf, V ) ); |
| glebiuskv | 0:2f0e1e23c242 | 199 | MBEDTLS_MPI_CHK( ecjpake_write_len_point( &p, end, grp, pf, X ) ); |
| glebiuskv | 0:2f0e1e23c242 | 200 | |
| glebiuskv | 0:2f0e1e23c242 | 201 | if( end - p < 4 ) |
| glebiuskv | 0:2f0e1e23c242 | 202 | return( MBEDTLS_ERR_ECP_BUFFER_TOO_SMALL ); |
| glebiuskv | 0:2f0e1e23c242 | 203 | |
| glebiuskv | 0:2f0e1e23c242 | 204 | *p++ = (unsigned char)( ( id_len >> 24 ) & 0xFF ); |
| glebiuskv | 0:2f0e1e23c242 | 205 | *p++ = (unsigned char)( ( id_len >> 16 ) & 0xFF ); |
| glebiuskv | 0:2f0e1e23c242 | 206 | *p++ = (unsigned char)( ( id_len >> 8 ) & 0xFF ); |
| glebiuskv | 0:2f0e1e23c242 | 207 | *p++ = (unsigned char)( ( id_len ) & 0xFF ); |
| glebiuskv | 0:2f0e1e23c242 | 208 | |
| glebiuskv | 0:2f0e1e23c242 | 209 | if( end < p || (size_t)( end - p ) < id_len ) |
| glebiuskv | 0:2f0e1e23c242 | 210 | return( MBEDTLS_ERR_ECP_BUFFER_TOO_SMALL ); |
| glebiuskv | 0:2f0e1e23c242 | 211 | |
| glebiuskv | 0:2f0e1e23c242 | 212 | memcpy( p, id, id_len ); |
| glebiuskv | 0:2f0e1e23c242 | 213 | p += id_len; |
| glebiuskv | 0:2f0e1e23c242 | 214 | |
| glebiuskv | 0:2f0e1e23c242 | 215 | /* Compute hash */ |
| glebiuskv | 0:2f0e1e23c242 | 216 | mbedtls_md( md_info, buf, p - buf, hash ); |
| glebiuskv | 0:2f0e1e23c242 | 217 | |
| glebiuskv | 0:2f0e1e23c242 | 218 | /* Turn it into an integer mod n */ |
| glebiuskv | 0:2f0e1e23c242 | 219 | MBEDTLS_MPI_CHK( mbedtls_mpi_read_binary( h, hash, |
| glebiuskv | 0:2f0e1e23c242 | 220 | mbedtls_md_get_size( md_info ) ) ); |
| glebiuskv | 0:2f0e1e23c242 | 221 | MBEDTLS_MPI_CHK( mbedtls_mpi_mod_mpi( h, h, &grp->N ) ); |
| glebiuskv | 0:2f0e1e23c242 | 222 | |
| glebiuskv | 0:2f0e1e23c242 | 223 | cleanup: |
| glebiuskv | 0:2f0e1e23c242 | 224 | return( ret ); |
| glebiuskv | 0:2f0e1e23c242 | 225 | } |
| glebiuskv | 0:2f0e1e23c242 | 226 | |
| glebiuskv | 0:2f0e1e23c242 | 227 | /* |
| glebiuskv | 0:2f0e1e23c242 | 228 | * Parse a ECShnorrZKP (7.4.2.2.2) and verify it (7.4.2.3.3) |
| glebiuskv | 0:2f0e1e23c242 | 229 | */ |
| glebiuskv | 0:2f0e1e23c242 | 230 | static int ecjpake_zkp_read( const mbedtls_md_info_t *md_info, |
| glebiuskv | 0:2f0e1e23c242 | 231 | const mbedtls_ecp_group *grp, |
| glebiuskv | 0:2f0e1e23c242 | 232 | const int pf, |
| glebiuskv | 0:2f0e1e23c242 | 233 | const mbedtls_ecp_point *G, |
| glebiuskv | 0:2f0e1e23c242 | 234 | const mbedtls_ecp_point *X, |
| glebiuskv | 0:2f0e1e23c242 | 235 | const char *id, |
| glebiuskv | 0:2f0e1e23c242 | 236 | const unsigned char **p, |
| glebiuskv | 0:2f0e1e23c242 | 237 | const unsigned char *end ) |
| glebiuskv | 0:2f0e1e23c242 | 238 | { |
| glebiuskv | 0:2f0e1e23c242 | 239 | int ret; |
| glebiuskv | 0:2f0e1e23c242 | 240 | mbedtls_ecp_point V, VV; |
| glebiuskv | 0:2f0e1e23c242 | 241 | mbedtls_mpi r, h; |
| glebiuskv | 0:2f0e1e23c242 | 242 | size_t r_len; |
| glebiuskv | 0:2f0e1e23c242 | 243 | |
| glebiuskv | 0:2f0e1e23c242 | 244 | mbedtls_ecp_point_init( &V ); |
| glebiuskv | 0:2f0e1e23c242 | 245 | mbedtls_ecp_point_init( &VV ); |
| glebiuskv | 0:2f0e1e23c242 | 246 | mbedtls_mpi_init( &r ); |
| glebiuskv | 0:2f0e1e23c242 | 247 | mbedtls_mpi_init( &h ); |
| glebiuskv | 0:2f0e1e23c242 | 248 | |
| glebiuskv | 0:2f0e1e23c242 | 249 | /* |
| glebiuskv | 0:2f0e1e23c242 | 250 | * struct { |
| glebiuskv | 0:2f0e1e23c242 | 251 | * ECPoint V; |
| glebiuskv | 0:2f0e1e23c242 | 252 | * opaque r<1..2^8-1>; |
| glebiuskv | 0:2f0e1e23c242 | 253 | * } ECSchnorrZKP; |
| glebiuskv | 0:2f0e1e23c242 | 254 | */ |
| glebiuskv | 0:2f0e1e23c242 | 255 | if( end < *p ) |
| glebiuskv | 0:2f0e1e23c242 | 256 | return( MBEDTLS_ERR_ECP_BAD_INPUT_DATA ); |
| glebiuskv | 0:2f0e1e23c242 | 257 | |
| glebiuskv | 0:2f0e1e23c242 | 258 | MBEDTLS_MPI_CHK( mbedtls_ecp_tls_read_point( grp, &V, p, end - *p ) ); |
| glebiuskv | 0:2f0e1e23c242 | 259 | |
| glebiuskv | 0:2f0e1e23c242 | 260 | if( end < *p || (size_t)( end - *p ) < 1 ) |
| glebiuskv | 0:2f0e1e23c242 | 261 | { |
| glebiuskv | 0:2f0e1e23c242 | 262 | ret = MBEDTLS_ERR_ECP_BAD_INPUT_DATA; |
| glebiuskv | 0:2f0e1e23c242 | 263 | goto cleanup; |
| glebiuskv | 0:2f0e1e23c242 | 264 | } |
| glebiuskv | 0:2f0e1e23c242 | 265 | |
| glebiuskv | 0:2f0e1e23c242 | 266 | r_len = *(*p)++; |
| glebiuskv | 0:2f0e1e23c242 | 267 | |
| glebiuskv | 0:2f0e1e23c242 | 268 | if( end < *p || (size_t)( end - *p ) < r_len ) |
| glebiuskv | 0:2f0e1e23c242 | 269 | { |
| glebiuskv | 0:2f0e1e23c242 | 270 | ret = MBEDTLS_ERR_ECP_BAD_INPUT_DATA; |
| glebiuskv | 0:2f0e1e23c242 | 271 | goto cleanup; |
| glebiuskv | 0:2f0e1e23c242 | 272 | } |
| glebiuskv | 0:2f0e1e23c242 | 273 | |
| glebiuskv | 0:2f0e1e23c242 | 274 | MBEDTLS_MPI_CHK( mbedtls_mpi_read_binary( &r, *p, r_len ) ); |
| glebiuskv | 0:2f0e1e23c242 | 275 | *p += r_len; |
| glebiuskv | 0:2f0e1e23c242 | 276 | |
| glebiuskv | 0:2f0e1e23c242 | 277 | /* |
| glebiuskv | 0:2f0e1e23c242 | 278 | * Verification |
| glebiuskv | 0:2f0e1e23c242 | 279 | */ |
| glebiuskv | 0:2f0e1e23c242 | 280 | MBEDTLS_MPI_CHK( ecjpake_hash( md_info, grp, pf, G, &V, X, id, &h ) ); |
| glebiuskv | 0:2f0e1e23c242 | 281 | MBEDTLS_MPI_CHK( mbedtls_ecp_muladd( (mbedtls_ecp_group *) grp, |
| glebiuskv | 0:2f0e1e23c242 | 282 | &VV, &h, X, &r, G ) ); |
| glebiuskv | 0:2f0e1e23c242 | 283 | |
| glebiuskv | 0:2f0e1e23c242 | 284 | if( mbedtls_ecp_point_cmp( &VV, &V ) != 0 ) |
| glebiuskv | 0:2f0e1e23c242 | 285 | { |
| glebiuskv | 0:2f0e1e23c242 | 286 | ret = MBEDTLS_ERR_ECP_VERIFY_FAILED; |
| glebiuskv | 0:2f0e1e23c242 | 287 | goto cleanup; |
| glebiuskv | 0:2f0e1e23c242 | 288 | } |
| glebiuskv | 0:2f0e1e23c242 | 289 | |
| glebiuskv | 0:2f0e1e23c242 | 290 | cleanup: |
| glebiuskv | 0:2f0e1e23c242 | 291 | mbedtls_ecp_point_free( &V ); |
| glebiuskv | 0:2f0e1e23c242 | 292 | mbedtls_ecp_point_free( &VV ); |
| glebiuskv | 0:2f0e1e23c242 | 293 | mbedtls_mpi_free( &r ); |
| glebiuskv | 0:2f0e1e23c242 | 294 | mbedtls_mpi_free( &h ); |
| glebiuskv | 0:2f0e1e23c242 | 295 | |
| glebiuskv | 0:2f0e1e23c242 | 296 | return( ret ); |
| glebiuskv | 0:2f0e1e23c242 | 297 | } |
| glebiuskv | 0:2f0e1e23c242 | 298 | |
| glebiuskv | 0:2f0e1e23c242 | 299 | /* |
| glebiuskv | 0:2f0e1e23c242 | 300 | * Generate ZKP (7.4.2.3.2) and write it as ECSchnorrZKP (7.4.2.2.2) |
| glebiuskv | 0:2f0e1e23c242 | 301 | */ |
| glebiuskv | 0:2f0e1e23c242 | 302 | static int ecjpake_zkp_write( const mbedtls_md_info_t *md_info, |
| glebiuskv | 0:2f0e1e23c242 | 303 | const mbedtls_ecp_group *grp, |
| glebiuskv | 0:2f0e1e23c242 | 304 | const int pf, |
| glebiuskv | 0:2f0e1e23c242 | 305 | const mbedtls_ecp_point *G, |
| glebiuskv | 0:2f0e1e23c242 | 306 | const mbedtls_mpi *x, |
| glebiuskv | 0:2f0e1e23c242 | 307 | const mbedtls_ecp_point *X, |
| glebiuskv | 0:2f0e1e23c242 | 308 | const char *id, |
| glebiuskv | 0:2f0e1e23c242 | 309 | unsigned char **p, |
| glebiuskv | 0:2f0e1e23c242 | 310 | const unsigned char *end, |
| glebiuskv | 0:2f0e1e23c242 | 311 | int (*f_rng)(void *, unsigned char *, size_t), |
| glebiuskv | 0:2f0e1e23c242 | 312 | void *p_rng ) |
| glebiuskv | 0:2f0e1e23c242 | 313 | { |
| glebiuskv | 0:2f0e1e23c242 | 314 | int ret; |
| glebiuskv | 0:2f0e1e23c242 | 315 | mbedtls_ecp_point V; |
| glebiuskv | 0:2f0e1e23c242 | 316 | mbedtls_mpi v; |
| glebiuskv | 0:2f0e1e23c242 | 317 | mbedtls_mpi h; /* later recycled to hold r */ |
| glebiuskv | 0:2f0e1e23c242 | 318 | size_t len; |
| glebiuskv | 0:2f0e1e23c242 | 319 | |
| glebiuskv | 0:2f0e1e23c242 | 320 | if( end < *p ) |
| glebiuskv | 0:2f0e1e23c242 | 321 | return( MBEDTLS_ERR_ECP_BUFFER_TOO_SMALL ); |
| glebiuskv | 0:2f0e1e23c242 | 322 | |
| glebiuskv | 0:2f0e1e23c242 | 323 | mbedtls_ecp_point_init( &V ); |
| glebiuskv | 0:2f0e1e23c242 | 324 | mbedtls_mpi_init( &v ); |
| glebiuskv | 0:2f0e1e23c242 | 325 | mbedtls_mpi_init( &h ); |
| glebiuskv | 0:2f0e1e23c242 | 326 | |
| glebiuskv | 0:2f0e1e23c242 | 327 | /* Compute signature */ |
| glebiuskv | 0:2f0e1e23c242 | 328 | MBEDTLS_MPI_CHK( mbedtls_ecp_gen_keypair_base( (mbedtls_ecp_group *) grp, |
| glebiuskv | 0:2f0e1e23c242 | 329 | G, &v, &V, f_rng, p_rng ) ); |
| glebiuskv | 0:2f0e1e23c242 | 330 | MBEDTLS_MPI_CHK( ecjpake_hash( md_info, grp, pf, G, &V, X, id, &h ) ); |
| glebiuskv | 0:2f0e1e23c242 | 331 | MBEDTLS_MPI_CHK( mbedtls_mpi_mul_mpi( &h, &h, x ) ); /* x*h */ |
| glebiuskv | 0:2f0e1e23c242 | 332 | MBEDTLS_MPI_CHK( mbedtls_mpi_sub_mpi( &h, &v, &h ) ); /* v - x*h */ |
| glebiuskv | 0:2f0e1e23c242 | 333 | MBEDTLS_MPI_CHK( mbedtls_mpi_mod_mpi( &h, &h, &grp->N ) ); /* r */ |
| glebiuskv | 0:2f0e1e23c242 | 334 | |
| glebiuskv | 0:2f0e1e23c242 | 335 | /* Write it out */ |
| glebiuskv | 0:2f0e1e23c242 | 336 | MBEDTLS_MPI_CHK( mbedtls_ecp_tls_write_point( grp, &V, |
| glebiuskv | 0:2f0e1e23c242 | 337 | pf, &len, *p, end - *p ) ); |
| glebiuskv | 0:2f0e1e23c242 | 338 | *p += len; |
| glebiuskv | 0:2f0e1e23c242 | 339 | |
| glebiuskv | 0:2f0e1e23c242 | 340 | len = mbedtls_mpi_size( &h ); /* actually r */ |
| glebiuskv | 0:2f0e1e23c242 | 341 | if( end < *p || (size_t)( end - *p ) < 1 + len || len > 255 ) |
| glebiuskv | 0:2f0e1e23c242 | 342 | { |
| glebiuskv | 0:2f0e1e23c242 | 343 | ret = MBEDTLS_ERR_ECP_BUFFER_TOO_SMALL; |
| glebiuskv | 0:2f0e1e23c242 | 344 | goto cleanup; |
| glebiuskv | 0:2f0e1e23c242 | 345 | } |
| glebiuskv | 0:2f0e1e23c242 | 346 | |
| glebiuskv | 0:2f0e1e23c242 | 347 | *(*p)++ = (unsigned char)( len & 0xFF ); |
| glebiuskv | 0:2f0e1e23c242 | 348 | MBEDTLS_MPI_CHK( mbedtls_mpi_write_binary( &h, *p, len ) ); /* r */ |
| glebiuskv | 0:2f0e1e23c242 | 349 | *p += len; |
| glebiuskv | 0:2f0e1e23c242 | 350 | |
| glebiuskv | 0:2f0e1e23c242 | 351 | cleanup: |
| glebiuskv | 0:2f0e1e23c242 | 352 | mbedtls_ecp_point_free( &V ); |
| glebiuskv | 0:2f0e1e23c242 | 353 | mbedtls_mpi_free( &v ); |
| glebiuskv | 0:2f0e1e23c242 | 354 | mbedtls_mpi_free( &h ); |
| glebiuskv | 0:2f0e1e23c242 | 355 | |
| glebiuskv | 0:2f0e1e23c242 | 356 | return( ret ); |
| glebiuskv | 0:2f0e1e23c242 | 357 | } |
| glebiuskv | 0:2f0e1e23c242 | 358 | |
| glebiuskv | 0:2f0e1e23c242 | 359 | /* |
| glebiuskv | 0:2f0e1e23c242 | 360 | * Parse a ECJPAKEKeyKP (7.4.2.2.1) and check proof |
| glebiuskv | 0:2f0e1e23c242 | 361 | * Output: verified public key X |
| glebiuskv | 0:2f0e1e23c242 | 362 | */ |
| glebiuskv | 0:2f0e1e23c242 | 363 | static int ecjpake_kkp_read( const mbedtls_md_info_t *md_info, |
| glebiuskv | 0:2f0e1e23c242 | 364 | const mbedtls_ecp_group *grp, |
| glebiuskv | 0:2f0e1e23c242 | 365 | const int pf, |
| glebiuskv | 0:2f0e1e23c242 | 366 | const mbedtls_ecp_point *G, |
| glebiuskv | 0:2f0e1e23c242 | 367 | mbedtls_ecp_point *X, |
| glebiuskv | 0:2f0e1e23c242 | 368 | const char *id, |
| glebiuskv | 0:2f0e1e23c242 | 369 | const unsigned char **p, |
| glebiuskv | 0:2f0e1e23c242 | 370 | const unsigned char *end ) |
| glebiuskv | 0:2f0e1e23c242 | 371 | { |
| glebiuskv | 0:2f0e1e23c242 | 372 | int ret; |
| glebiuskv | 0:2f0e1e23c242 | 373 | |
| glebiuskv | 0:2f0e1e23c242 | 374 | if( end < *p ) |
| glebiuskv | 0:2f0e1e23c242 | 375 | return( MBEDTLS_ERR_ECP_BAD_INPUT_DATA ); |
| glebiuskv | 0:2f0e1e23c242 | 376 | |
| glebiuskv | 0:2f0e1e23c242 | 377 | /* |
| glebiuskv | 0:2f0e1e23c242 | 378 | * struct { |
| glebiuskv | 0:2f0e1e23c242 | 379 | * ECPoint X; |
| glebiuskv | 0:2f0e1e23c242 | 380 | * ECSchnorrZKP zkp; |
| glebiuskv | 0:2f0e1e23c242 | 381 | * } ECJPAKEKeyKP; |
| glebiuskv | 0:2f0e1e23c242 | 382 | */ |
| glebiuskv | 0:2f0e1e23c242 | 383 | MBEDTLS_MPI_CHK( mbedtls_ecp_tls_read_point( grp, X, p, end - *p ) ); |
| glebiuskv | 0:2f0e1e23c242 | 384 | if( mbedtls_ecp_is_zero( X ) ) |
| glebiuskv | 0:2f0e1e23c242 | 385 | { |
| glebiuskv | 0:2f0e1e23c242 | 386 | ret = MBEDTLS_ERR_ECP_INVALID_KEY; |
| glebiuskv | 0:2f0e1e23c242 | 387 | goto cleanup; |
| glebiuskv | 0:2f0e1e23c242 | 388 | } |
| glebiuskv | 0:2f0e1e23c242 | 389 | |
| glebiuskv | 0:2f0e1e23c242 | 390 | MBEDTLS_MPI_CHK( ecjpake_zkp_read( md_info, grp, pf, G, X, id, p, end ) ); |
| glebiuskv | 0:2f0e1e23c242 | 391 | |
| glebiuskv | 0:2f0e1e23c242 | 392 | cleanup: |
| glebiuskv | 0:2f0e1e23c242 | 393 | return( ret ); |
| glebiuskv | 0:2f0e1e23c242 | 394 | } |
| glebiuskv | 0:2f0e1e23c242 | 395 | |
| glebiuskv | 0:2f0e1e23c242 | 396 | /* |
| glebiuskv | 0:2f0e1e23c242 | 397 | * Generate an ECJPAKEKeyKP |
| glebiuskv | 0:2f0e1e23c242 | 398 | * Output: the serialized structure, plus private/public key pair |
| glebiuskv | 0:2f0e1e23c242 | 399 | */ |
| glebiuskv | 0:2f0e1e23c242 | 400 | static int ecjpake_kkp_write( const mbedtls_md_info_t *md_info, |
| glebiuskv | 0:2f0e1e23c242 | 401 | const mbedtls_ecp_group *grp, |
| glebiuskv | 0:2f0e1e23c242 | 402 | const int pf, |
| glebiuskv | 0:2f0e1e23c242 | 403 | const mbedtls_ecp_point *G, |
| glebiuskv | 0:2f0e1e23c242 | 404 | mbedtls_mpi *x, |
| glebiuskv | 0:2f0e1e23c242 | 405 | mbedtls_ecp_point *X, |
| glebiuskv | 0:2f0e1e23c242 | 406 | const char *id, |
| glebiuskv | 0:2f0e1e23c242 | 407 | unsigned char **p, |
| glebiuskv | 0:2f0e1e23c242 | 408 | const unsigned char *end, |
| glebiuskv | 0:2f0e1e23c242 | 409 | int (*f_rng)(void *, unsigned char *, size_t), |
| glebiuskv | 0:2f0e1e23c242 | 410 | void *p_rng ) |
| glebiuskv | 0:2f0e1e23c242 | 411 | { |
| glebiuskv | 0:2f0e1e23c242 | 412 | int ret; |
| glebiuskv | 0:2f0e1e23c242 | 413 | size_t len; |
| glebiuskv | 0:2f0e1e23c242 | 414 | |
| glebiuskv | 0:2f0e1e23c242 | 415 | if( end < *p ) |
| glebiuskv | 0:2f0e1e23c242 | 416 | return( MBEDTLS_ERR_ECP_BUFFER_TOO_SMALL ); |
| glebiuskv | 0:2f0e1e23c242 | 417 | |
| glebiuskv | 0:2f0e1e23c242 | 418 | /* Generate key (7.4.2.3.1) and write it out */ |
| glebiuskv | 0:2f0e1e23c242 | 419 | MBEDTLS_MPI_CHK( mbedtls_ecp_gen_keypair_base( (mbedtls_ecp_group *) grp, G, x, X, |
| glebiuskv | 0:2f0e1e23c242 | 420 | f_rng, p_rng ) ); |
| glebiuskv | 0:2f0e1e23c242 | 421 | MBEDTLS_MPI_CHK( mbedtls_ecp_tls_write_point( grp, X, |
| glebiuskv | 0:2f0e1e23c242 | 422 | pf, &len, *p, end - *p ) ); |
| glebiuskv | 0:2f0e1e23c242 | 423 | *p += len; |
| glebiuskv | 0:2f0e1e23c242 | 424 | |
| glebiuskv | 0:2f0e1e23c242 | 425 | /* Generate and write proof */ |
| glebiuskv | 0:2f0e1e23c242 | 426 | MBEDTLS_MPI_CHK( ecjpake_zkp_write( md_info, grp, pf, G, x, X, id, |
| glebiuskv | 0:2f0e1e23c242 | 427 | p, end, f_rng, p_rng ) ); |
| glebiuskv | 0:2f0e1e23c242 | 428 | |
| glebiuskv | 0:2f0e1e23c242 | 429 | cleanup: |
| glebiuskv | 0:2f0e1e23c242 | 430 | return( ret ); |
| glebiuskv | 0:2f0e1e23c242 | 431 | } |
| glebiuskv | 0:2f0e1e23c242 | 432 | |
| glebiuskv | 0:2f0e1e23c242 | 433 | /* |
| glebiuskv | 0:2f0e1e23c242 | 434 | * Read a ECJPAKEKeyKPPairList (7.4.2.3) and check proofs |
| glebiuskv | 0:2f0e1e23c242 | 435 | * Ouputs: verified peer public keys Xa, Xb |
| glebiuskv | 0:2f0e1e23c242 | 436 | */ |
| glebiuskv | 0:2f0e1e23c242 | 437 | static int ecjpake_kkpp_read( const mbedtls_md_info_t *md_info, |
| glebiuskv | 0:2f0e1e23c242 | 438 | const mbedtls_ecp_group *grp, |
| glebiuskv | 0:2f0e1e23c242 | 439 | const int pf, |
| glebiuskv | 0:2f0e1e23c242 | 440 | const mbedtls_ecp_point *G, |
| glebiuskv | 0:2f0e1e23c242 | 441 | mbedtls_ecp_point *Xa, |
| glebiuskv | 0:2f0e1e23c242 | 442 | mbedtls_ecp_point *Xb, |
| glebiuskv | 0:2f0e1e23c242 | 443 | const char *id, |
| glebiuskv | 0:2f0e1e23c242 | 444 | const unsigned char *buf, |
| glebiuskv | 0:2f0e1e23c242 | 445 | size_t len ) |
| glebiuskv | 0:2f0e1e23c242 | 446 | { |
| glebiuskv | 0:2f0e1e23c242 | 447 | int ret; |
| glebiuskv | 0:2f0e1e23c242 | 448 | const unsigned char *p = buf; |
| glebiuskv | 0:2f0e1e23c242 | 449 | const unsigned char *end = buf + len; |
| glebiuskv | 0:2f0e1e23c242 | 450 | |
| glebiuskv | 0:2f0e1e23c242 | 451 | /* |
| glebiuskv | 0:2f0e1e23c242 | 452 | * struct { |
| glebiuskv | 0:2f0e1e23c242 | 453 | * ECJPAKEKeyKP ecjpake_key_kp_pair_list[2]; |
| glebiuskv | 0:2f0e1e23c242 | 454 | * } ECJPAKEKeyKPPairList; |
| glebiuskv | 0:2f0e1e23c242 | 455 | */ |
| glebiuskv | 0:2f0e1e23c242 | 456 | MBEDTLS_MPI_CHK( ecjpake_kkp_read( md_info, grp, pf, G, Xa, id, &p, end ) ); |
| glebiuskv | 0:2f0e1e23c242 | 457 | MBEDTLS_MPI_CHK( ecjpake_kkp_read( md_info, grp, pf, G, Xb, id, &p, end ) ); |
| glebiuskv | 0:2f0e1e23c242 | 458 | |
| glebiuskv | 0:2f0e1e23c242 | 459 | if( p != end ) |
| glebiuskv | 0:2f0e1e23c242 | 460 | ret = MBEDTLS_ERR_ECP_BAD_INPUT_DATA; |
| glebiuskv | 0:2f0e1e23c242 | 461 | |
| glebiuskv | 0:2f0e1e23c242 | 462 | cleanup: |
| glebiuskv | 0:2f0e1e23c242 | 463 | return( ret ); |
| glebiuskv | 0:2f0e1e23c242 | 464 | } |
| glebiuskv | 0:2f0e1e23c242 | 465 | |
| glebiuskv | 0:2f0e1e23c242 | 466 | /* |
| glebiuskv | 0:2f0e1e23c242 | 467 | * Generate a ECJPAKEKeyKPPairList |
| glebiuskv | 0:2f0e1e23c242 | 468 | * Outputs: the serialized structure, plus two private/public key pairs |
| glebiuskv | 0:2f0e1e23c242 | 469 | */ |
| glebiuskv | 0:2f0e1e23c242 | 470 | static int ecjpake_kkpp_write( const mbedtls_md_info_t *md_info, |
| glebiuskv | 0:2f0e1e23c242 | 471 | const mbedtls_ecp_group *grp, |
| glebiuskv | 0:2f0e1e23c242 | 472 | const int pf, |
| glebiuskv | 0:2f0e1e23c242 | 473 | const mbedtls_ecp_point *G, |
| glebiuskv | 0:2f0e1e23c242 | 474 | mbedtls_mpi *xm1, |
| glebiuskv | 0:2f0e1e23c242 | 475 | mbedtls_ecp_point *Xa, |
| glebiuskv | 0:2f0e1e23c242 | 476 | mbedtls_mpi *xm2, |
| glebiuskv | 0:2f0e1e23c242 | 477 | mbedtls_ecp_point *Xb, |
| glebiuskv | 0:2f0e1e23c242 | 478 | const char *id, |
| glebiuskv | 0:2f0e1e23c242 | 479 | unsigned char *buf, |
| glebiuskv | 0:2f0e1e23c242 | 480 | size_t len, |
| glebiuskv | 0:2f0e1e23c242 | 481 | size_t *olen, |
| glebiuskv | 0:2f0e1e23c242 | 482 | int (*f_rng)(void *, unsigned char *, size_t), |
| glebiuskv | 0:2f0e1e23c242 | 483 | void *p_rng ) |
| glebiuskv | 0:2f0e1e23c242 | 484 | { |
| glebiuskv | 0:2f0e1e23c242 | 485 | int ret; |
| glebiuskv | 0:2f0e1e23c242 | 486 | unsigned char *p = buf; |
| glebiuskv | 0:2f0e1e23c242 | 487 | const unsigned char *end = buf + len; |
| glebiuskv | 0:2f0e1e23c242 | 488 | |
| glebiuskv | 0:2f0e1e23c242 | 489 | MBEDTLS_MPI_CHK( ecjpake_kkp_write( md_info, grp, pf, G, xm1, Xa, id, |
| glebiuskv | 0:2f0e1e23c242 | 490 | &p, end, f_rng, p_rng ) ); |
| glebiuskv | 0:2f0e1e23c242 | 491 | MBEDTLS_MPI_CHK( ecjpake_kkp_write( md_info, grp, pf, G, xm2, Xb, id, |
| glebiuskv | 0:2f0e1e23c242 | 492 | &p, end, f_rng, p_rng ) ); |
| glebiuskv | 0:2f0e1e23c242 | 493 | |
| glebiuskv | 0:2f0e1e23c242 | 494 | *olen = p - buf; |
| glebiuskv | 0:2f0e1e23c242 | 495 | |
| glebiuskv | 0:2f0e1e23c242 | 496 | cleanup: |
| glebiuskv | 0:2f0e1e23c242 | 497 | return( ret ); |
| glebiuskv | 0:2f0e1e23c242 | 498 | } |
| glebiuskv | 0:2f0e1e23c242 | 499 | |
| glebiuskv | 0:2f0e1e23c242 | 500 | /* |
| glebiuskv | 0:2f0e1e23c242 | 501 | * Read and process the first round message |
| glebiuskv | 0:2f0e1e23c242 | 502 | */ |
| glebiuskv | 0:2f0e1e23c242 | 503 | int mbedtls_ecjpake_read_round_one( mbedtls_ecjpake_context *ctx, |
| glebiuskv | 0:2f0e1e23c242 | 504 | const unsigned char *buf, |
| glebiuskv | 0:2f0e1e23c242 | 505 | size_t len ) |
| glebiuskv | 0:2f0e1e23c242 | 506 | { |
| glebiuskv | 0:2f0e1e23c242 | 507 | return( ecjpake_kkpp_read( ctx->md_info, &ctx->grp, ctx->point_format, |
| glebiuskv | 0:2f0e1e23c242 | 508 | &ctx->grp.G, |
| glebiuskv | 0:2f0e1e23c242 | 509 | &ctx->Xp1, &ctx->Xp2, ID_PEER, |
| glebiuskv | 0:2f0e1e23c242 | 510 | buf, len ) ); |
| glebiuskv | 0:2f0e1e23c242 | 511 | } |
| glebiuskv | 0:2f0e1e23c242 | 512 | |
| glebiuskv | 0:2f0e1e23c242 | 513 | /* |
| glebiuskv | 0:2f0e1e23c242 | 514 | * Generate and write the first round message |
| glebiuskv | 0:2f0e1e23c242 | 515 | */ |
| glebiuskv | 0:2f0e1e23c242 | 516 | int mbedtls_ecjpake_write_round_one( mbedtls_ecjpake_context *ctx, |
| glebiuskv | 0:2f0e1e23c242 | 517 | unsigned char *buf, size_t len, size_t *olen, |
| glebiuskv | 0:2f0e1e23c242 | 518 | int (*f_rng)(void *, unsigned char *, size_t), |
| glebiuskv | 0:2f0e1e23c242 | 519 | void *p_rng ) |
| glebiuskv | 0:2f0e1e23c242 | 520 | { |
| glebiuskv | 0:2f0e1e23c242 | 521 | return( ecjpake_kkpp_write( ctx->md_info, &ctx->grp, ctx->point_format, |
| glebiuskv | 0:2f0e1e23c242 | 522 | &ctx->grp.G, |
| glebiuskv | 0:2f0e1e23c242 | 523 | &ctx->xm1, &ctx->Xm1, &ctx->xm2, &ctx->Xm2, |
| glebiuskv | 0:2f0e1e23c242 | 524 | ID_MINE, buf, len, olen, f_rng, p_rng ) ); |
| glebiuskv | 0:2f0e1e23c242 | 525 | } |
| glebiuskv | 0:2f0e1e23c242 | 526 | |
| glebiuskv | 0:2f0e1e23c242 | 527 | /* |
| glebiuskv | 0:2f0e1e23c242 | 528 | * Compute the sum of three points R = A + B + C |
| glebiuskv | 0:2f0e1e23c242 | 529 | */ |
| glebiuskv | 0:2f0e1e23c242 | 530 | static int ecjpake_ecp_add3( mbedtls_ecp_group *grp, mbedtls_ecp_point *R, |
| glebiuskv | 0:2f0e1e23c242 | 531 | const mbedtls_ecp_point *A, |
| glebiuskv | 0:2f0e1e23c242 | 532 | const mbedtls_ecp_point *B, |
| glebiuskv | 0:2f0e1e23c242 | 533 | const mbedtls_ecp_point *C ) |
| glebiuskv | 0:2f0e1e23c242 | 534 | { |
| glebiuskv | 0:2f0e1e23c242 | 535 | int ret; |
| glebiuskv | 0:2f0e1e23c242 | 536 | mbedtls_mpi one; |
| glebiuskv | 0:2f0e1e23c242 | 537 | |
| glebiuskv | 0:2f0e1e23c242 | 538 | mbedtls_mpi_init( &one ); |
| glebiuskv | 0:2f0e1e23c242 | 539 | |
| glebiuskv | 0:2f0e1e23c242 | 540 | MBEDTLS_MPI_CHK( mbedtls_mpi_lset( &one, 1 ) ); |
| glebiuskv | 0:2f0e1e23c242 | 541 | MBEDTLS_MPI_CHK( mbedtls_ecp_muladd( grp, R, &one, A, &one, B ) ); |
| glebiuskv | 0:2f0e1e23c242 | 542 | MBEDTLS_MPI_CHK( mbedtls_ecp_muladd( grp, R, &one, R, &one, C ) ); |
| glebiuskv | 0:2f0e1e23c242 | 543 | |
| glebiuskv | 0:2f0e1e23c242 | 544 | cleanup: |
| glebiuskv | 0:2f0e1e23c242 | 545 | mbedtls_mpi_free( &one ); |
| glebiuskv | 0:2f0e1e23c242 | 546 | |
| glebiuskv | 0:2f0e1e23c242 | 547 | return( ret ); |
| glebiuskv | 0:2f0e1e23c242 | 548 | } |
| glebiuskv | 0:2f0e1e23c242 | 549 | |
| glebiuskv | 0:2f0e1e23c242 | 550 | /* |
| glebiuskv | 0:2f0e1e23c242 | 551 | * Read and process second round message (C: 7.4.2.5, S: 7.4.2.6) |
| glebiuskv | 0:2f0e1e23c242 | 552 | */ |
| glebiuskv | 0:2f0e1e23c242 | 553 | int mbedtls_ecjpake_read_round_two( mbedtls_ecjpake_context *ctx, |
| glebiuskv | 0:2f0e1e23c242 | 554 | const unsigned char *buf, |
| glebiuskv | 0:2f0e1e23c242 | 555 | size_t len ) |
| glebiuskv | 0:2f0e1e23c242 | 556 | { |
| glebiuskv | 0:2f0e1e23c242 | 557 | int ret; |
| glebiuskv | 0:2f0e1e23c242 | 558 | const unsigned char *p = buf; |
| glebiuskv | 0:2f0e1e23c242 | 559 | const unsigned char *end = buf + len; |
| glebiuskv | 0:2f0e1e23c242 | 560 | mbedtls_ecp_group grp; |
| glebiuskv | 0:2f0e1e23c242 | 561 | mbedtls_ecp_point G; /* C: GB, S: GA */ |
| glebiuskv | 0:2f0e1e23c242 | 562 | |
| glebiuskv | 0:2f0e1e23c242 | 563 | mbedtls_ecp_group_init( &grp ); |
| glebiuskv | 0:2f0e1e23c242 | 564 | mbedtls_ecp_point_init( &G ); |
| glebiuskv | 0:2f0e1e23c242 | 565 | |
| glebiuskv | 0:2f0e1e23c242 | 566 | /* |
| glebiuskv | 0:2f0e1e23c242 | 567 | * Server: GA = X3 + X4 + X1 (7.4.2.6.1) |
| glebiuskv | 0:2f0e1e23c242 | 568 | * Client: GB = X1 + X2 + X3 (7.4.2.5.1) |
| glebiuskv | 0:2f0e1e23c242 | 569 | * Unified: G = Xm1 + Xm2 + Xp1 |
| glebiuskv | 0:2f0e1e23c242 | 570 | * We need that before parsing in order to check Xp as we read it |
| glebiuskv | 0:2f0e1e23c242 | 571 | */ |
| glebiuskv | 0:2f0e1e23c242 | 572 | MBEDTLS_MPI_CHK( ecjpake_ecp_add3( &ctx->grp, &G, |
| glebiuskv | 0:2f0e1e23c242 | 573 | &ctx->Xm1, &ctx->Xm2, &ctx->Xp1 ) ); |
| glebiuskv | 0:2f0e1e23c242 | 574 | |
| glebiuskv | 0:2f0e1e23c242 | 575 | /* |
| glebiuskv | 0:2f0e1e23c242 | 576 | * struct { |
| glebiuskv | 0:2f0e1e23c242 | 577 | * ECParameters curve_params; // only client reading server msg |
| glebiuskv | 0:2f0e1e23c242 | 578 | * ECJPAKEKeyKP ecjpake_key_kp; |
| glebiuskv | 0:2f0e1e23c242 | 579 | * } Client/ServerECJPAKEParams; |
| glebiuskv | 0:2f0e1e23c242 | 580 | */ |
| glebiuskv | 0:2f0e1e23c242 | 581 | if( ctx->role == MBEDTLS_ECJPAKE_CLIENT ) |
| glebiuskv | 0:2f0e1e23c242 | 582 | { |
| glebiuskv | 0:2f0e1e23c242 | 583 | MBEDTLS_MPI_CHK( mbedtls_ecp_tls_read_group( &grp, &p, len ) ); |
| glebiuskv | 0:2f0e1e23c242 | 584 | if( grp.id != ctx->grp.id ) |
| glebiuskv | 0:2f0e1e23c242 | 585 | { |
| glebiuskv | 0:2f0e1e23c242 | 586 | ret = MBEDTLS_ERR_ECP_FEATURE_UNAVAILABLE; |
| glebiuskv | 0:2f0e1e23c242 | 587 | goto cleanup; |
| glebiuskv | 0:2f0e1e23c242 | 588 | } |
| glebiuskv | 0:2f0e1e23c242 | 589 | } |
| glebiuskv | 0:2f0e1e23c242 | 590 | |
| glebiuskv | 0:2f0e1e23c242 | 591 | MBEDTLS_MPI_CHK( ecjpake_kkp_read( ctx->md_info, &ctx->grp, |
| glebiuskv | 0:2f0e1e23c242 | 592 | ctx->point_format, |
| glebiuskv | 0:2f0e1e23c242 | 593 | &G, &ctx->Xp, ID_PEER, &p, end ) ); |
| glebiuskv | 0:2f0e1e23c242 | 594 | |
| glebiuskv | 0:2f0e1e23c242 | 595 | if( p != end ) |
| glebiuskv | 0:2f0e1e23c242 | 596 | { |
| glebiuskv | 0:2f0e1e23c242 | 597 | ret = MBEDTLS_ERR_ECP_BAD_INPUT_DATA; |
| glebiuskv | 0:2f0e1e23c242 | 598 | goto cleanup; |
| glebiuskv | 0:2f0e1e23c242 | 599 | } |
| glebiuskv | 0:2f0e1e23c242 | 600 | |
| glebiuskv | 0:2f0e1e23c242 | 601 | cleanup: |
| glebiuskv | 0:2f0e1e23c242 | 602 | mbedtls_ecp_group_free( &grp ); |
| glebiuskv | 0:2f0e1e23c242 | 603 | mbedtls_ecp_point_free( &G ); |
| glebiuskv | 0:2f0e1e23c242 | 604 | |
| glebiuskv | 0:2f0e1e23c242 | 605 | return( ret ); |
| glebiuskv | 0:2f0e1e23c242 | 606 | } |
| glebiuskv | 0:2f0e1e23c242 | 607 | |
| glebiuskv | 0:2f0e1e23c242 | 608 | /* |
| glebiuskv | 0:2f0e1e23c242 | 609 | * Compute R = +/- X * S mod N, taking care not to leak S |
| glebiuskv | 0:2f0e1e23c242 | 610 | */ |
| glebiuskv | 0:2f0e1e23c242 | 611 | static int ecjpake_mul_secret( mbedtls_mpi *R, int sign, |
| glebiuskv | 0:2f0e1e23c242 | 612 | const mbedtls_mpi *X, |
| glebiuskv | 0:2f0e1e23c242 | 613 | const mbedtls_mpi *S, |
| glebiuskv | 0:2f0e1e23c242 | 614 | const mbedtls_mpi *N, |
| glebiuskv | 0:2f0e1e23c242 | 615 | int (*f_rng)(void *, unsigned char *, size_t), |
| glebiuskv | 0:2f0e1e23c242 | 616 | void *p_rng ) |
| glebiuskv | 0:2f0e1e23c242 | 617 | { |
| glebiuskv | 0:2f0e1e23c242 | 618 | int ret; |
| glebiuskv | 0:2f0e1e23c242 | 619 | mbedtls_mpi b; /* Blinding value, then s + N * blinding */ |
| glebiuskv | 0:2f0e1e23c242 | 620 | |
| glebiuskv | 0:2f0e1e23c242 | 621 | mbedtls_mpi_init( &b ); |
| glebiuskv | 0:2f0e1e23c242 | 622 | |
| glebiuskv | 0:2f0e1e23c242 | 623 | /* b = s + rnd-128-bit * N */ |
| glebiuskv | 0:2f0e1e23c242 | 624 | MBEDTLS_MPI_CHK( mbedtls_mpi_fill_random( &b, 16, f_rng, p_rng ) ); |
| glebiuskv | 0:2f0e1e23c242 | 625 | MBEDTLS_MPI_CHK( mbedtls_mpi_mul_mpi( &b, &b, N ) ); |
| glebiuskv | 0:2f0e1e23c242 | 626 | MBEDTLS_MPI_CHK( mbedtls_mpi_add_mpi( &b, &b, S ) ); |
| glebiuskv | 0:2f0e1e23c242 | 627 | |
| glebiuskv | 0:2f0e1e23c242 | 628 | /* R = sign * X * b mod N */ |
| glebiuskv | 0:2f0e1e23c242 | 629 | MBEDTLS_MPI_CHK( mbedtls_mpi_mul_mpi( R, X, &b ) ); |
| glebiuskv | 0:2f0e1e23c242 | 630 | R->s *= sign; |
| glebiuskv | 0:2f0e1e23c242 | 631 | MBEDTLS_MPI_CHK( mbedtls_mpi_mod_mpi( R, R, N ) ); |
| glebiuskv | 0:2f0e1e23c242 | 632 | |
| glebiuskv | 0:2f0e1e23c242 | 633 | cleanup: |
| glebiuskv | 0:2f0e1e23c242 | 634 | mbedtls_mpi_free( &b ); |
| glebiuskv | 0:2f0e1e23c242 | 635 | |
| glebiuskv | 0:2f0e1e23c242 | 636 | return( ret ); |
| glebiuskv | 0:2f0e1e23c242 | 637 | } |
| glebiuskv | 0:2f0e1e23c242 | 638 | |
| glebiuskv | 0:2f0e1e23c242 | 639 | /* |
| glebiuskv | 0:2f0e1e23c242 | 640 | * Generate and write the second round message (S: 7.4.2.5, C: 7.4.2.6) |
| glebiuskv | 0:2f0e1e23c242 | 641 | */ |
| glebiuskv | 0:2f0e1e23c242 | 642 | int mbedtls_ecjpake_write_round_two( mbedtls_ecjpake_context *ctx, |
| glebiuskv | 0:2f0e1e23c242 | 643 | unsigned char *buf, size_t len, size_t *olen, |
| glebiuskv | 0:2f0e1e23c242 | 644 | int (*f_rng)(void *, unsigned char *, size_t), |
| glebiuskv | 0:2f0e1e23c242 | 645 | void *p_rng ) |
| glebiuskv | 0:2f0e1e23c242 | 646 | { |
| glebiuskv | 0:2f0e1e23c242 | 647 | int ret; |
| glebiuskv | 0:2f0e1e23c242 | 648 | mbedtls_ecp_point G; /* C: GA, S: GB */ |
| glebiuskv | 0:2f0e1e23c242 | 649 | mbedtls_ecp_point Xm; /* C: Xc, S: Xs */ |
| glebiuskv | 0:2f0e1e23c242 | 650 | mbedtls_mpi xm; /* C: xc, S: xs */ |
| glebiuskv | 0:2f0e1e23c242 | 651 | unsigned char *p = buf; |
| glebiuskv | 0:2f0e1e23c242 | 652 | const unsigned char *end = buf + len; |
| glebiuskv | 0:2f0e1e23c242 | 653 | size_t ec_len; |
| glebiuskv | 0:2f0e1e23c242 | 654 | |
| glebiuskv | 0:2f0e1e23c242 | 655 | mbedtls_ecp_point_init( &G ); |
| glebiuskv | 0:2f0e1e23c242 | 656 | mbedtls_ecp_point_init( &Xm ); |
| glebiuskv | 0:2f0e1e23c242 | 657 | mbedtls_mpi_init( &xm ); |
| glebiuskv | 0:2f0e1e23c242 | 658 | |
| glebiuskv | 0:2f0e1e23c242 | 659 | /* |
| glebiuskv | 0:2f0e1e23c242 | 660 | * First generate private/public key pair (S: 7.4.2.5.1, C: 7.4.2.6.1) |
| glebiuskv | 0:2f0e1e23c242 | 661 | * |
| glebiuskv | 0:2f0e1e23c242 | 662 | * Client: GA = X1 + X3 + X4 | xs = x2 * s | Xc = xc * GA |
| glebiuskv | 0:2f0e1e23c242 | 663 | * Server: GB = X3 + X1 + X2 | xs = x4 * s | Xs = xs * GB |
| glebiuskv | 0:2f0e1e23c242 | 664 | * Unified: G = Xm1 + Xp1 + Xp2 | xm = xm2 * s | Xm = xm * G |
| glebiuskv | 0:2f0e1e23c242 | 665 | */ |
| glebiuskv | 0:2f0e1e23c242 | 666 | MBEDTLS_MPI_CHK( ecjpake_ecp_add3( &ctx->grp, &G, |
| glebiuskv | 0:2f0e1e23c242 | 667 | &ctx->Xp1, &ctx->Xp2, &ctx->Xm1 ) ); |
| glebiuskv | 0:2f0e1e23c242 | 668 | MBEDTLS_MPI_CHK( ecjpake_mul_secret( &xm, 1, &ctx->xm2, &ctx->s, |
| glebiuskv | 0:2f0e1e23c242 | 669 | &ctx->grp.N, f_rng, p_rng ) ); |
| glebiuskv | 0:2f0e1e23c242 | 670 | MBEDTLS_MPI_CHK( mbedtls_ecp_mul( &ctx->grp, &Xm, &xm, &G, f_rng, p_rng ) ); |
| glebiuskv | 0:2f0e1e23c242 | 671 | |
| glebiuskv | 0:2f0e1e23c242 | 672 | /* |
| glebiuskv | 0:2f0e1e23c242 | 673 | * Now write things out |
| glebiuskv | 0:2f0e1e23c242 | 674 | * |
| glebiuskv | 0:2f0e1e23c242 | 675 | * struct { |
| glebiuskv | 0:2f0e1e23c242 | 676 | * ECParameters curve_params; // only server writing its message |
| glebiuskv | 0:2f0e1e23c242 | 677 | * ECJPAKEKeyKP ecjpake_key_kp; |
| glebiuskv | 0:2f0e1e23c242 | 678 | * } Client/ServerECJPAKEParams; |
| glebiuskv | 0:2f0e1e23c242 | 679 | */ |
| glebiuskv | 0:2f0e1e23c242 | 680 | if( ctx->role == MBEDTLS_ECJPAKE_SERVER ) |
| glebiuskv | 0:2f0e1e23c242 | 681 | { |
| glebiuskv | 0:2f0e1e23c242 | 682 | if( end < p ) |
| glebiuskv | 0:2f0e1e23c242 | 683 | { |
| glebiuskv | 0:2f0e1e23c242 | 684 | ret = MBEDTLS_ERR_ECP_BUFFER_TOO_SMALL; |
| glebiuskv | 0:2f0e1e23c242 | 685 | goto cleanup; |
| glebiuskv | 0:2f0e1e23c242 | 686 | } |
| glebiuskv | 0:2f0e1e23c242 | 687 | MBEDTLS_MPI_CHK( mbedtls_ecp_tls_write_group( &ctx->grp, &ec_len, |
| glebiuskv | 0:2f0e1e23c242 | 688 | p, end - p ) ); |
| glebiuskv | 0:2f0e1e23c242 | 689 | p += ec_len; |
| glebiuskv | 0:2f0e1e23c242 | 690 | } |
| glebiuskv | 0:2f0e1e23c242 | 691 | |
| glebiuskv | 0:2f0e1e23c242 | 692 | if( end < p ) |
| glebiuskv | 0:2f0e1e23c242 | 693 | { |
| glebiuskv | 0:2f0e1e23c242 | 694 | ret = MBEDTLS_ERR_ECP_BUFFER_TOO_SMALL; |
| glebiuskv | 0:2f0e1e23c242 | 695 | goto cleanup; |
| glebiuskv | 0:2f0e1e23c242 | 696 | } |
| glebiuskv | 0:2f0e1e23c242 | 697 | MBEDTLS_MPI_CHK( mbedtls_ecp_tls_write_point( &ctx->grp, &Xm, |
| glebiuskv | 0:2f0e1e23c242 | 698 | ctx->point_format, &ec_len, p, end - p ) ); |
| glebiuskv | 0:2f0e1e23c242 | 699 | p += ec_len; |
| glebiuskv | 0:2f0e1e23c242 | 700 | |
| glebiuskv | 0:2f0e1e23c242 | 701 | MBEDTLS_MPI_CHK( ecjpake_zkp_write( ctx->md_info, &ctx->grp, |
| glebiuskv | 0:2f0e1e23c242 | 702 | ctx->point_format, |
| glebiuskv | 0:2f0e1e23c242 | 703 | &G, &xm, &Xm, ID_MINE, |
| glebiuskv | 0:2f0e1e23c242 | 704 | &p, end, f_rng, p_rng ) ); |
| glebiuskv | 0:2f0e1e23c242 | 705 | |
| glebiuskv | 0:2f0e1e23c242 | 706 | *olen = p - buf; |
| glebiuskv | 0:2f0e1e23c242 | 707 | |
| glebiuskv | 0:2f0e1e23c242 | 708 | cleanup: |
| glebiuskv | 0:2f0e1e23c242 | 709 | mbedtls_ecp_point_free( &G ); |
| glebiuskv | 0:2f0e1e23c242 | 710 | mbedtls_ecp_point_free( &Xm ); |
| glebiuskv | 0:2f0e1e23c242 | 711 | mbedtls_mpi_free( &xm ); |
| glebiuskv | 0:2f0e1e23c242 | 712 | |
| glebiuskv | 0:2f0e1e23c242 | 713 | return( ret ); |
| glebiuskv | 0:2f0e1e23c242 | 714 | } |
| glebiuskv | 0:2f0e1e23c242 | 715 | |
| glebiuskv | 0:2f0e1e23c242 | 716 | /* |
| glebiuskv | 0:2f0e1e23c242 | 717 | * Derive PMS (7.4.2.7 / 7.4.2.8) |
| glebiuskv | 0:2f0e1e23c242 | 718 | */ |
| glebiuskv | 0:2f0e1e23c242 | 719 | int mbedtls_ecjpake_derive_secret( mbedtls_ecjpake_context *ctx, |
| glebiuskv | 0:2f0e1e23c242 | 720 | unsigned char *buf, size_t len, size_t *olen, |
| glebiuskv | 0:2f0e1e23c242 | 721 | int (*f_rng)(void *, unsigned char *, size_t), |
| glebiuskv | 0:2f0e1e23c242 | 722 | void *p_rng ) |
| glebiuskv | 0:2f0e1e23c242 | 723 | { |
| glebiuskv | 0:2f0e1e23c242 | 724 | int ret; |
| glebiuskv | 0:2f0e1e23c242 | 725 | mbedtls_ecp_point K; |
| glebiuskv | 0:2f0e1e23c242 | 726 | mbedtls_mpi m_xm2_s, one; |
| glebiuskv | 0:2f0e1e23c242 | 727 | unsigned char kx[MBEDTLS_ECP_MAX_BYTES]; |
| glebiuskv | 0:2f0e1e23c242 | 728 | size_t x_bytes; |
| glebiuskv | 0:2f0e1e23c242 | 729 | |
| glebiuskv | 0:2f0e1e23c242 | 730 | *olen = mbedtls_md_get_size( ctx->md_info ); |
| glebiuskv | 0:2f0e1e23c242 | 731 | if( len < *olen ) |
| glebiuskv | 0:2f0e1e23c242 | 732 | return( MBEDTLS_ERR_ECP_BUFFER_TOO_SMALL ); |
| glebiuskv | 0:2f0e1e23c242 | 733 | |
| glebiuskv | 0:2f0e1e23c242 | 734 | mbedtls_ecp_point_init( &K ); |
| glebiuskv | 0:2f0e1e23c242 | 735 | mbedtls_mpi_init( &m_xm2_s ); |
| glebiuskv | 0:2f0e1e23c242 | 736 | mbedtls_mpi_init( &one ); |
| glebiuskv | 0:2f0e1e23c242 | 737 | |
| glebiuskv | 0:2f0e1e23c242 | 738 | MBEDTLS_MPI_CHK( mbedtls_mpi_lset( &one, 1 ) ); |
| glebiuskv | 0:2f0e1e23c242 | 739 | |
| glebiuskv | 0:2f0e1e23c242 | 740 | /* |
| glebiuskv | 0:2f0e1e23c242 | 741 | * Client: K = ( Xs - X4 * x2 * s ) * x2 |
| glebiuskv | 0:2f0e1e23c242 | 742 | * Server: K = ( Xc - X2 * x4 * s ) * x4 |
| glebiuskv | 0:2f0e1e23c242 | 743 | * Unified: K = ( Xp - Xp2 * xm2 * s ) * xm2 |
| glebiuskv | 0:2f0e1e23c242 | 744 | */ |
| glebiuskv | 0:2f0e1e23c242 | 745 | MBEDTLS_MPI_CHK( ecjpake_mul_secret( &m_xm2_s, -1, &ctx->xm2, &ctx->s, |
| glebiuskv | 0:2f0e1e23c242 | 746 | &ctx->grp.N, f_rng, p_rng ) ); |
| glebiuskv | 0:2f0e1e23c242 | 747 | MBEDTLS_MPI_CHK( mbedtls_ecp_muladd( &ctx->grp, &K, |
| glebiuskv | 0:2f0e1e23c242 | 748 | &one, &ctx->Xp, |
| glebiuskv | 0:2f0e1e23c242 | 749 | &m_xm2_s, &ctx->Xp2 ) ); |
| glebiuskv | 0:2f0e1e23c242 | 750 | MBEDTLS_MPI_CHK( mbedtls_ecp_mul( &ctx->grp, &K, &ctx->xm2, &K, |
| glebiuskv | 0:2f0e1e23c242 | 751 | f_rng, p_rng ) ); |
| glebiuskv | 0:2f0e1e23c242 | 752 | |
| glebiuskv | 0:2f0e1e23c242 | 753 | /* PMS = SHA-256( K.X ) */ |
| glebiuskv | 0:2f0e1e23c242 | 754 | x_bytes = ( ctx->grp.pbits + 7 ) / 8; |
| glebiuskv | 0:2f0e1e23c242 | 755 | MBEDTLS_MPI_CHK( mbedtls_mpi_write_binary( &K.X, kx, x_bytes ) ); |
| glebiuskv | 0:2f0e1e23c242 | 756 | MBEDTLS_MPI_CHK( mbedtls_md( ctx->md_info, kx, x_bytes, buf ) ); |
| glebiuskv | 0:2f0e1e23c242 | 757 | |
| glebiuskv | 0:2f0e1e23c242 | 758 | cleanup: |
| glebiuskv | 0:2f0e1e23c242 | 759 | mbedtls_ecp_point_free( &K ); |
| glebiuskv | 0:2f0e1e23c242 | 760 | mbedtls_mpi_free( &m_xm2_s ); |
| glebiuskv | 0:2f0e1e23c242 | 761 | mbedtls_mpi_free( &one ); |
| glebiuskv | 0:2f0e1e23c242 | 762 | |
| glebiuskv | 0:2f0e1e23c242 | 763 | return( ret ); |
| glebiuskv | 0:2f0e1e23c242 | 764 | } |
| glebiuskv | 0:2f0e1e23c242 | 765 | |
| glebiuskv | 0:2f0e1e23c242 | 766 | #undef ID_MINE |
| glebiuskv | 0:2f0e1e23c242 | 767 | #undef ID_PEER |
| glebiuskv | 0:2f0e1e23c242 | 768 | |
| glebiuskv | 0:2f0e1e23c242 | 769 | #endif /* ! MBEDTLS_ECJPAKE_ALT */ |
| glebiuskv | 0:2f0e1e23c242 | 770 | |
| glebiuskv | 0:2f0e1e23c242 | 771 | #if defined(MBEDTLS_SELF_TEST) |
| glebiuskv | 0:2f0e1e23c242 | 772 | |
| glebiuskv | 0:2f0e1e23c242 | 773 | #if defined(MBEDTLS_PLATFORM_C) |
| glebiuskv | 0:2f0e1e23c242 | 774 | #include "mbedtls/platform.h" |
| glebiuskv | 0:2f0e1e23c242 | 775 | #else |
| glebiuskv | 0:2f0e1e23c242 | 776 | #include <stdio.h> |
| glebiuskv | 0:2f0e1e23c242 | 777 | #define mbedtls_printf printf |
| glebiuskv | 0:2f0e1e23c242 | 778 | #endif |
| glebiuskv | 0:2f0e1e23c242 | 779 | |
| glebiuskv | 0:2f0e1e23c242 | 780 | #if !defined(MBEDTLS_ECP_DP_SECP256R1_ENABLED) || \ |
| glebiuskv | 0:2f0e1e23c242 | 781 | !defined(MBEDTLS_SHA256_C) |
| glebiuskv | 0:2f0e1e23c242 | 782 | int mbedtls_ecjpake_self_test( int verbose ) |
| glebiuskv | 0:2f0e1e23c242 | 783 | { |
| glebiuskv | 0:2f0e1e23c242 | 784 | (void) verbose; |
| glebiuskv | 0:2f0e1e23c242 | 785 | return( 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 786 | } |
| glebiuskv | 0:2f0e1e23c242 | 787 | #else |
| glebiuskv | 0:2f0e1e23c242 | 788 | |
| glebiuskv | 0:2f0e1e23c242 | 789 | static const unsigned char ecjpake_test_password[] = { |
| glebiuskv | 0:2f0e1e23c242 | 790 | 0x74, 0x68, 0x72, 0x65, 0x61, 0x64, 0x6a, 0x70, 0x61, 0x6b, 0x65, 0x74, |
| glebiuskv | 0:2f0e1e23c242 | 791 | 0x65, 0x73, 0x74 |
| glebiuskv | 0:2f0e1e23c242 | 792 | }; |
| glebiuskv | 0:2f0e1e23c242 | 793 | |
| glebiuskv | 0:2f0e1e23c242 | 794 | static const unsigned char ecjpake_test_x1[] = { |
| glebiuskv | 0:2f0e1e23c242 | 795 | 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, |
| glebiuskv | 0:2f0e1e23c242 | 796 | 0x0d, 0x0e, 0x0f, 0x10, 0x11, 0x12, 0x13, 0x14, 0x15, 0x16, 0x17, 0x18, |
| glebiuskv | 0:2f0e1e23c242 | 797 | 0x19, 0x1a, 0x1b, 0x1c, 0x1d, 0x1e, 0x1f, 0x21 |
| glebiuskv | 0:2f0e1e23c242 | 798 | }; |
| glebiuskv | 0:2f0e1e23c242 | 799 | |
| glebiuskv | 0:2f0e1e23c242 | 800 | static const unsigned char ecjpake_test_x2[] = { |
| glebiuskv | 0:2f0e1e23c242 | 801 | 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67, 0x68, 0x69, 0x6a, 0x6b, 0x6c, |
| glebiuskv | 0:2f0e1e23c242 | 802 | 0x6d, 0x6e, 0x6f, 0x70, 0x71, 0x72, 0x73, 0x74, 0x75, 0x76, 0x77, 0x78, |
| glebiuskv | 0:2f0e1e23c242 | 803 | 0x79, 0x7a, 0x7b, 0x7c, 0x7d, 0x7e, 0x7f, 0x81 |
| glebiuskv | 0:2f0e1e23c242 | 804 | }; |
| glebiuskv | 0:2f0e1e23c242 | 805 | |
| glebiuskv | 0:2f0e1e23c242 | 806 | static const unsigned char ecjpake_test_x3[] = { |
| glebiuskv | 0:2f0e1e23c242 | 807 | 0x61, 0x62, 0x63, 0x64, 0x65, 0x66, 0x67, 0x68, 0x69, 0x6a, 0x6b, 0x6c, |
| glebiuskv | 0:2f0e1e23c242 | 808 | 0x6d, 0x6e, 0x6f, 0x70, 0x71, 0x72, 0x73, 0x74, 0x75, 0x76, 0x77, 0x78, |
| glebiuskv | 0:2f0e1e23c242 | 809 | 0x79, 0x7a, 0x7b, 0x7c, 0x7d, 0x7e, 0x7f, 0x81 |
| glebiuskv | 0:2f0e1e23c242 | 810 | }; |
| glebiuskv | 0:2f0e1e23c242 | 811 | |
| glebiuskv | 0:2f0e1e23c242 | 812 | static const unsigned char ecjpake_test_x4[] = { |
| glebiuskv | 0:2f0e1e23c242 | 813 | 0xc1, 0xc2, 0xc3, 0xc4, 0xc5, 0xc6, 0xc7, 0xc8, 0xc9, 0xca, 0xcb, 0xcc, |
| glebiuskv | 0:2f0e1e23c242 | 814 | 0xcd, 0xce, 0xcf, 0xd0, 0xd1, 0xd2, 0xd3, 0xd4, 0xd5, 0xd6, 0xd7, 0xd8, |
| glebiuskv | 0:2f0e1e23c242 | 815 | 0xd9, 0xda, 0xdb, 0xdc, 0xdd, 0xde, 0xdf, 0xe1 |
| glebiuskv | 0:2f0e1e23c242 | 816 | }; |
| glebiuskv | 0:2f0e1e23c242 | 817 | |
| glebiuskv | 0:2f0e1e23c242 | 818 | static const unsigned char ecjpake_test_cli_one[] = { |
| glebiuskv | 0:2f0e1e23c242 | 819 | 0x41, 0x04, 0xac, 0xcf, 0x01, 0x06, 0xef, 0x85, 0x8f, 0xa2, 0xd9, 0x19, |
| glebiuskv | 0:2f0e1e23c242 | 820 | 0x33, 0x13, 0x46, 0x80, 0x5a, 0x78, 0xb5, 0x8b, 0xba, 0xd0, 0xb8, 0x44, |
| glebiuskv | 0:2f0e1e23c242 | 821 | 0xe5, 0xc7, 0x89, 0x28, 0x79, 0x14, 0x61, 0x87, 0xdd, 0x26, 0x66, 0xad, |
| glebiuskv | 0:2f0e1e23c242 | 822 | 0xa7, 0x81, 0xbb, 0x7f, 0x11, 0x13, 0x72, 0x25, 0x1a, 0x89, 0x10, 0x62, |
| glebiuskv | 0:2f0e1e23c242 | 823 | 0x1f, 0x63, 0x4d, 0xf1, 0x28, 0xac, 0x48, 0xe3, 0x81, 0xfd, 0x6e, 0xf9, |
| glebiuskv | 0:2f0e1e23c242 | 824 | 0x06, 0x07, 0x31, 0xf6, 0x94, 0xa4, 0x41, 0x04, 0x1d, 0xd0, 0xbd, 0x5d, |
| glebiuskv | 0:2f0e1e23c242 | 825 | 0x45, 0x66, 0xc9, 0xbe, 0xd9, 0xce, 0x7d, 0xe7, 0x01, 0xb5, 0xe8, 0x2e, |
| glebiuskv | 0:2f0e1e23c242 | 826 | 0x08, 0xe8, 0x4b, 0x73, 0x04, 0x66, 0x01, 0x8a, 0xb9, 0x03, 0xc7, 0x9e, |
| glebiuskv | 0:2f0e1e23c242 | 827 | 0xb9, 0x82, 0x17, 0x22, 0x36, 0xc0, 0xc1, 0x72, 0x8a, 0xe4, 0xbf, 0x73, |
| glebiuskv | 0:2f0e1e23c242 | 828 | 0x61, 0x0d, 0x34, 0xde, 0x44, 0x24, 0x6e, 0xf3, 0xd9, 0xc0, 0x5a, 0x22, |
| glebiuskv | 0:2f0e1e23c242 | 829 | 0x36, 0xfb, 0x66, 0xa6, 0x58, 0x3d, 0x74, 0x49, 0x30, 0x8b, 0xab, 0xce, |
| glebiuskv | 0:2f0e1e23c242 | 830 | 0x20, 0x72, 0xfe, 0x16, 0x66, 0x29, 0x92, 0xe9, 0x23, 0x5c, 0x25, 0x00, |
| glebiuskv | 0:2f0e1e23c242 | 831 | 0x2f, 0x11, 0xb1, 0x50, 0x87, 0xb8, 0x27, 0x38, 0xe0, 0x3c, 0x94, 0x5b, |
| glebiuskv | 0:2f0e1e23c242 | 832 | 0xf7, 0xa2, 0x99, 0x5d, 0xda, 0x1e, 0x98, 0x34, 0x58, 0x41, 0x04, 0x7e, |
| glebiuskv | 0:2f0e1e23c242 | 833 | 0xa6, 0xe3, 0xa4, 0x48, 0x70, 0x37, 0xa9, 0xe0, 0xdb, 0xd7, 0x92, 0x62, |
| glebiuskv | 0:2f0e1e23c242 | 834 | 0xb2, 0xcc, 0x27, 0x3e, 0x77, 0x99, 0x30, 0xfc, 0x18, 0x40, 0x9a, 0xc5, |
| glebiuskv | 0:2f0e1e23c242 | 835 | 0x36, 0x1c, 0x5f, 0xe6, 0x69, 0xd7, 0x02, 0xe1, 0x47, 0x79, 0x0a, 0xeb, |
| glebiuskv | 0:2f0e1e23c242 | 836 | 0x4c, 0xe7, 0xfd, 0x65, 0x75, 0xab, 0x0f, 0x6c, 0x7f, 0xd1, 0xc3, 0x35, |
| glebiuskv | 0:2f0e1e23c242 | 837 | 0x93, 0x9a, 0xa8, 0x63, 0xba, 0x37, 0xec, 0x91, 0xb7, 0xe3, 0x2b, 0xb0, |
| glebiuskv | 0:2f0e1e23c242 | 838 | 0x13, 0xbb, 0x2b, 0x41, 0x04, 0xa4, 0x95, 0x58, 0xd3, 0x2e, 0xd1, 0xeb, |
| glebiuskv | 0:2f0e1e23c242 | 839 | 0xfc, 0x18, 0x16, 0xaf, 0x4f, 0xf0, 0x9b, 0x55, 0xfc, 0xb4, 0xca, 0x47, |
| glebiuskv | 0:2f0e1e23c242 | 840 | 0xb2, 0xa0, 0x2d, 0x1e, 0x7c, 0xaf, 0x11, 0x79, 0xea, 0x3f, 0xe1, 0x39, |
| glebiuskv | 0:2f0e1e23c242 | 841 | 0x5b, 0x22, 0xb8, 0x61, 0x96, 0x40, 0x16, 0xfa, 0xba, 0xf7, 0x2c, 0x97, |
| glebiuskv | 0:2f0e1e23c242 | 842 | 0x56, 0x95, 0xd9, 0x3d, 0x4d, 0xf0, 0xe5, 0x19, 0x7f, 0xe9, 0xf0, 0x40, |
| glebiuskv | 0:2f0e1e23c242 | 843 | 0x63, 0x4e, 0xd5, 0x97, 0x64, 0x93, 0x77, 0x87, 0xbe, 0x20, 0xbc, 0x4d, |
| glebiuskv | 0:2f0e1e23c242 | 844 | 0xee, 0xbb, 0xf9, 0xb8, 0xd6, 0x0a, 0x33, 0x5f, 0x04, 0x6c, 0xa3, 0xaa, |
| glebiuskv | 0:2f0e1e23c242 | 845 | 0x94, 0x1e, 0x45, 0x86, 0x4c, 0x7c, 0xad, 0xef, 0x9c, 0xf7, 0x5b, 0x3d, |
| glebiuskv | 0:2f0e1e23c242 | 846 | 0x8b, 0x01, 0x0e, 0x44, 0x3e, 0xf0 |
| glebiuskv | 0:2f0e1e23c242 | 847 | }; |
| glebiuskv | 0:2f0e1e23c242 | 848 | |
| glebiuskv | 0:2f0e1e23c242 | 849 | static const unsigned char ecjpake_test_srv_one[] = { |
| glebiuskv | 0:2f0e1e23c242 | 850 | 0x41, 0x04, 0x7e, 0xa6, 0xe3, 0xa4, 0x48, 0x70, 0x37, 0xa9, 0xe0, 0xdb, |
| glebiuskv | 0:2f0e1e23c242 | 851 | 0xd7, 0x92, 0x62, 0xb2, 0xcc, 0x27, 0x3e, 0x77, 0x99, 0x30, 0xfc, 0x18, |
| glebiuskv | 0:2f0e1e23c242 | 852 | 0x40, 0x9a, 0xc5, 0x36, 0x1c, 0x5f, 0xe6, 0x69, 0xd7, 0x02, 0xe1, 0x47, |
| glebiuskv | 0:2f0e1e23c242 | 853 | 0x79, 0x0a, 0xeb, 0x4c, 0xe7, 0xfd, 0x65, 0x75, 0xab, 0x0f, 0x6c, 0x7f, |
| glebiuskv | 0:2f0e1e23c242 | 854 | 0xd1, 0xc3, 0x35, 0x93, 0x9a, 0xa8, 0x63, 0xba, 0x37, 0xec, 0x91, 0xb7, |
| glebiuskv | 0:2f0e1e23c242 | 855 | 0xe3, 0x2b, 0xb0, 0x13, 0xbb, 0x2b, 0x41, 0x04, 0x09, 0xf8, 0x5b, 0x3d, |
| glebiuskv | 0:2f0e1e23c242 | 856 | 0x20, 0xeb, 0xd7, 0x88, 0x5c, 0xe4, 0x64, 0xc0, 0x8d, 0x05, 0x6d, 0x64, |
| glebiuskv | 0:2f0e1e23c242 | 857 | 0x28, 0xfe, 0x4d, 0xd9, 0x28, 0x7a, 0xa3, 0x65, 0xf1, 0x31, 0xf4, 0x36, |
| glebiuskv | 0:2f0e1e23c242 | 858 | 0x0f, 0xf3, 0x86, 0xd8, 0x46, 0x89, 0x8b, 0xc4, 0xb4, 0x15, 0x83, 0xc2, |
| glebiuskv | 0:2f0e1e23c242 | 859 | 0xa5, 0x19, 0x7f, 0x65, 0xd7, 0x87, 0x42, 0x74, 0x6c, 0x12, 0xa5, 0xec, |
| glebiuskv | 0:2f0e1e23c242 | 860 | 0x0a, 0x4f, 0xfe, 0x2f, 0x27, 0x0a, 0x75, 0x0a, 0x1d, 0x8f, 0xb5, 0x16, |
| glebiuskv | 0:2f0e1e23c242 | 861 | 0x20, 0x93, 0x4d, 0x74, 0xeb, 0x43, 0xe5, 0x4d, 0xf4, 0x24, 0xfd, 0x96, |
| glebiuskv | 0:2f0e1e23c242 | 862 | 0x30, 0x6c, 0x01, 0x17, 0xbf, 0x13, 0x1a, 0xfa, 0xbf, 0x90, 0xa9, 0xd3, |
| glebiuskv | 0:2f0e1e23c242 | 863 | 0x3d, 0x11, 0x98, 0xd9, 0x05, 0x19, 0x37, 0x35, 0x14, 0x41, 0x04, 0x19, |
| glebiuskv | 0:2f0e1e23c242 | 864 | 0x0a, 0x07, 0x70, 0x0f, 0xfa, 0x4b, 0xe6, 0xae, 0x1d, 0x79, 0xee, 0x0f, |
| glebiuskv | 0:2f0e1e23c242 | 865 | 0x06, 0xae, 0xb5, 0x44, 0xcd, 0x5a, 0xdd, 0xaa, 0xbe, 0xdf, 0x70, 0xf8, |
| glebiuskv | 0:2f0e1e23c242 | 866 | 0x62, 0x33, 0x21, 0x33, 0x2c, 0x54, 0xf3, 0x55, 0xf0, 0xfb, 0xfe, 0xc7, |
| glebiuskv | 0:2f0e1e23c242 | 867 | 0x83, 0xed, 0x35, 0x9e, 0x5d, 0x0b, 0xf7, 0x37, 0x7a, 0x0f, 0xc4, 0xea, |
| glebiuskv | 0:2f0e1e23c242 | 868 | 0x7a, 0xce, 0x47, 0x3c, 0x9c, 0x11, 0x2b, 0x41, 0xcc, 0xd4, 0x1a, 0xc5, |
| glebiuskv | 0:2f0e1e23c242 | 869 | 0x6a, 0x56, 0x12, 0x41, 0x04, 0x36, 0x0a, 0x1c, 0xea, 0x33, 0xfc, 0xe6, |
| glebiuskv | 0:2f0e1e23c242 | 870 | 0x41, 0x15, 0x64, 0x58, 0xe0, 0xa4, 0xea, 0xc2, 0x19, 0xe9, 0x68, 0x31, |
| glebiuskv | 0:2f0e1e23c242 | 871 | 0xe6, 0xae, 0xbc, 0x88, 0xb3, 0xf3, 0x75, 0x2f, 0x93, 0xa0, 0x28, 0x1d, |
| glebiuskv | 0:2f0e1e23c242 | 872 | 0x1b, 0xf1, 0xfb, 0x10, 0x60, 0x51, 0xdb, 0x96, 0x94, 0xa8, 0xd6, 0xe8, |
| glebiuskv | 0:2f0e1e23c242 | 873 | 0x62, 0xa5, 0xef, 0x13, 0x24, 0xa3, 0xd9, 0xe2, 0x78, 0x94, 0xf1, 0xee, |
| glebiuskv | 0:2f0e1e23c242 | 874 | 0x4f, 0x7c, 0x59, 0x19, 0x99, 0x65, 0xa8, 0xdd, 0x4a, 0x20, 0x91, 0x84, |
| glebiuskv | 0:2f0e1e23c242 | 875 | 0x7d, 0x2d, 0x22, 0xdf, 0x3e, 0xe5, 0x5f, 0xaa, 0x2a, 0x3f, 0xb3, 0x3f, |
| glebiuskv | 0:2f0e1e23c242 | 876 | 0xd2, 0xd1, 0xe0, 0x55, 0xa0, 0x7a, 0x7c, 0x61, 0xec, 0xfb, 0x8d, 0x80, |
| glebiuskv | 0:2f0e1e23c242 | 877 | 0xec, 0x00, 0xc2, 0xc9, 0xeb, 0x12 |
| glebiuskv | 0:2f0e1e23c242 | 878 | }; |
| glebiuskv | 0:2f0e1e23c242 | 879 | |
| glebiuskv | 0:2f0e1e23c242 | 880 | static const unsigned char ecjpake_test_srv_two[] = { |
| glebiuskv | 0:2f0e1e23c242 | 881 | 0x03, 0x00, 0x17, 0x41, 0x04, 0x0f, 0xb2, 0x2b, 0x1d, 0x5d, 0x11, 0x23, |
| glebiuskv | 0:2f0e1e23c242 | 882 | 0xe0, 0xef, 0x9f, 0xeb, 0x9d, 0x8a, 0x2e, 0x59, 0x0a, 0x1f, 0x4d, 0x7c, |
| glebiuskv | 0:2f0e1e23c242 | 883 | 0xed, 0x2c, 0x2b, 0x06, 0x58, 0x6e, 0x8f, 0x2a, 0x16, 0xd4, 0xeb, 0x2f, |
| glebiuskv | 0:2f0e1e23c242 | 884 | 0xda, 0x43, 0x28, 0xa2, 0x0b, 0x07, 0xd8, 0xfd, 0x66, 0x76, 0x54, 0xca, |
| glebiuskv | 0:2f0e1e23c242 | 885 | 0x18, 0xc5, 0x4e, 0x32, 0xa3, 0x33, 0xa0, 0x84, 0x54, 0x51, 0xe9, 0x26, |
| glebiuskv | 0:2f0e1e23c242 | 886 | 0xee, 0x88, 0x04, 0xfd, 0x7a, 0xf0, 0xaa, 0xa7, 0xa6, 0x41, 0x04, 0x55, |
| glebiuskv | 0:2f0e1e23c242 | 887 | 0x16, 0xea, 0x3e, 0x54, 0xa0, 0xd5, 0xd8, 0xb2, 0xce, 0x78, 0x6b, 0x38, |
| glebiuskv | 0:2f0e1e23c242 | 888 | 0xd3, 0x83, 0x37, 0x00, 0x29, 0xa5, 0xdb, 0xe4, 0x45, 0x9c, 0x9d, 0xd6, |
| glebiuskv | 0:2f0e1e23c242 | 889 | 0x01, 0xb4, 0x08, 0xa2, 0x4a, 0xe6, 0x46, 0x5c, 0x8a, 0xc9, 0x05, 0xb9, |
| glebiuskv | 0:2f0e1e23c242 | 890 | 0xeb, 0x03, 0xb5, 0xd3, 0x69, 0x1c, 0x13, 0x9e, 0xf8, 0x3f, 0x1c, 0xd4, |
| glebiuskv | 0:2f0e1e23c242 | 891 | 0x20, 0x0f, 0x6c, 0x9c, 0xd4, 0xec, 0x39, 0x22, 0x18, 0xa5, 0x9e, 0xd2, |
| glebiuskv | 0:2f0e1e23c242 | 892 | 0x43, 0xd3, 0xc8, 0x20, 0xff, 0x72, 0x4a, 0x9a, 0x70, 0xb8, 0x8c, 0xb8, |
| glebiuskv | 0:2f0e1e23c242 | 893 | 0x6f, 0x20, 0xb4, 0x34, 0xc6, 0x86, 0x5a, 0xa1, 0xcd, 0x79, 0x06, 0xdd, |
| glebiuskv | 0:2f0e1e23c242 | 894 | 0x7c, 0x9b, 0xce, 0x35, 0x25, 0xf5, 0x08, 0x27, 0x6f, 0x26, 0x83, 0x6c |
| glebiuskv | 0:2f0e1e23c242 | 895 | }; |
| glebiuskv | 0:2f0e1e23c242 | 896 | |
| glebiuskv | 0:2f0e1e23c242 | 897 | static const unsigned char ecjpake_test_cli_two[] = { |
| glebiuskv | 0:2f0e1e23c242 | 898 | 0x41, 0x04, 0x69, 0xd5, 0x4e, 0xe8, 0x5e, 0x90, 0xce, 0x3f, 0x12, 0x46, |
| glebiuskv | 0:2f0e1e23c242 | 899 | 0x74, 0x2d, 0xe5, 0x07, 0xe9, 0x39, 0xe8, 0x1d, 0x1d, 0xc1, 0xc5, 0xcb, |
| glebiuskv | 0:2f0e1e23c242 | 900 | 0x98, 0x8b, 0x58, 0xc3, 0x10, 0xc9, 0xfd, 0xd9, 0x52, 0x4d, 0x93, 0x72, |
| glebiuskv | 0:2f0e1e23c242 | 901 | 0x0b, 0x45, 0x54, 0x1c, 0x83, 0xee, 0x88, 0x41, 0x19, 0x1d, 0xa7, 0xce, |
| glebiuskv | 0:2f0e1e23c242 | 902 | 0xd8, 0x6e, 0x33, 0x12, 0xd4, 0x36, 0x23, 0xc1, 0xd6, 0x3e, 0x74, 0x98, |
| glebiuskv | 0:2f0e1e23c242 | 903 | 0x9a, 0xba, 0x4a, 0xff, 0xd1, 0xee, 0x41, 0x04, 0x07, 0x7e, 0x8c, 0x31, |
| glebiuskv | 0:2f0e1e23c242 | 904 | 0xe2, 0x0e, 0x6b, 0xed, 0xb7, 0x60, 0xc1, 0x35, 0x93, 0xe6, 0x9f, 0x15, |
| glebiuskv | 0:2f0e1e23c242 | 905 | 0xbe, 0x85, 0xc2, 0x7d, 0x68, 0xcd, 0x09, 0xcc, 0xb8, 0xc4, 0x18, 0x36, |
| glebiuskv | 0:2f0e1e23c242 | 906 | 0x08, 0x91, 0x7c, 0x5c, 0x3d, 0x40, 0x9f, 0xac, 0x39, 0xfe, 0xfe, 0xe8, |
| glebiuskv | 0:2f0e1e23c242 | 907 | 0x2f, 0x72, 0x92, 0xd3, 0x6f, 0x0d, 0x23, 0xe0, 0x55, 0x91, 0x3f, 0x45, |
| glebiuskv | 0:2f0e1e23c242 | 908 | 0xa5, 0x2b, 0x85, 0xdd, 0x8a, 0x20, 0x52, 0xe9, 0xe1, 0x29, 0xbb, 0x4d, |
| glebiuskv | 0:2f0e1e23c242 | 909 | 0x20, 0x0f, 0x01, 0x1f, 0x19, 0x48, 0x35, 0x35, 0xa6, 0xe8, 0x9a, 0x58, |
| glebiuskv | 0:2f0e1e23c242 | 910 | 0x0c, 0x9b, 0x00, 0x03, 0xba, 0xf2, 0x14, 0x62, 0xec, 0xe9, 0x1a, 0x82, |
| glebiuskv | 0:2f0e1e23c242 | 911 | 0xcc, 0x38, 0xdb, 0xdc, 0xae, 0x60, 0xd9, 0xc5, 0x4c |
| glebiuskv | 0:2f0e1e23c242 | 912 | }; |
| glebiuskv | 0:2f0e1e23c242 | 913 | |
| glebiuskv | 0:2f0e1e23c242 | 914 | static const unsigned char ecjpake_test_pms[] = { |
| glebiuskv | 0:2f0e1e23c242 | 915 | 0xf3, 0xd4, 0x7f, 0x59, 0x98, 0x44, 0xdb, 0x92, 0xa5, 0x69, 0xbb, 0xe7, |
| glebiuskv | 0:2f0e1e23c242 | 916 | 0x98, 0x1e, 0x39, 0xd9, 0x31, 0xfd, 0x74, 0x3b, 0xf2, 0x2e, 0x98, 0xf9, |
| glebiuskv | 0:2f0e1e23c242 | 917 | 0xb4, 0x38, 0xf7, 0x19, 0xd3, 0xc4, 0xf3, 0x51 |
| glebiuskv | 0:2f0e1e23c242 | 918 | }; |
| glebiuskv | 0:2f0e1e23c242 | 919 | |
| glebiuskv | 0:2f0e1e23c242 | 920 | /* Load my private keys and generate the correponding public keys */ |
| glebiuskv | 0:2f0e1e23c242 | 921 | static int ecjpake_test_load( mbedtls_ecjpake_context *ctx, |
| glebiuskv | 0:2f0e1e23c242 | 922 | const unsigned char *xm1, size_t len1, |
| glebiuskv | 0:2f0e1e23c242 | 923 | const unsigned char *xm2, size_t len2 ) |
| glebiuskv | 0:2f0e1e23c242 | 924 | { |
| glebiuskv | 0:2f0e1e23c242 | 925 | int ret; |
| glebiuskv | 0:2f0e1e23c242 | 926 | |
| glebiuskv | 0:2f0e1e23c242 | 927 | MBEDTLS_MPI_CHK( mbedtls_mpi_read_binary( &ctx->xm1, xm1, len1 ) ); |
| glebiuskv | 0:2f0e1e23c242 | 928 | MBEDTLS_MPI_CHK( mbedtls_mpi_read_binary( &ctx->xm2, xm2, len2 ) ); |
| glebiuskv | 0:2f0e1e23c242 | 929 | MBEDTLS_MPI_CHK( mbedtls_ecp_mul( &ctx->grp, &ctx->Xm1, &ctx->xm1, |
| glebiuskv | 0:2f0e1e23c242 | 930 | &ctx->grp.G, NULL, NULL ) ); |
| glebiuskv | 0:2f0e1e23c242 | 931 | MBEDTLS_MPI_CHK( mbedtls_ecp_mul( &ctx->grp, &ctx->Xm2, &ctx->xm2, |
| glebiuskv | 0:2f0e1e23c242 | 932 | &ctx->grp.G, NULL, NULL ) ); |
| glebiuskv | 0:2f0e1e23c242 | 933 | |
| glebiuskv | 0:2f0e1e23c242 | 934 | cleanup: |
| glebiuskv | 0:2f0e1e23c242 | 935 | return( ret ); |
| glebiuskv | 0:2f0e1e23c242 | 936 | } |
| glebiuskv | 0:2f0e1e23c242 | 937 | |
| glebiuskv | 0:2f0e1e23c242 | 938 | /* For tests we don't need a secure RNG; |
| glebiuskv | 0:2f0e1e23c242 | 939 | * use the LGC from Numerical Recipes for simplicity */ |
| glebiuskv | 0:2f0e1e23c242 | 940 | static int ecjpake_lgc( void *p, unsigned char *out, size_t len ) |
| glebiuskv | 0:2f0e1e23c242 | 941 | { |
| glebiuskv | 0:2f0e1e23c242 | 942 | static uint32_t x = 42; |
| glebiuskv | 0:2f0e1e23c242 | 943 | (void) p; |
| glebiuskv | 0:2f0e1e23c242 | 944 | |
| glebiuskv | 0:2f0e1e23c242 | 945 | while( len > 0 ) |
| glebiuskv | 0:2f0e1e23c242 | 946 | { |
| glebiuskv | 0:2f0e1e23c242 | 947 | size_t use_len = len > 4 ? 4 : len; |
| glebiuskv | 0:2f0e1e23c242 | 948 | x = 1664525 * x + 1013904223; |
| glebiuskv | 0:2f0e1e23c242 | 949 | memcpy( out, &x, use_len ); |
| glebiuskv | 0:2f0e1e23c242 | 950 | out += use_len; |
| glebiuskv | 0:2f0e1e23c242 | 951 | len -= use_len; |
| glebiuskv | 0:2f0e1e23c242 | 952 | } |
| glebiuskv | 0:2f0e1e23c242 | 953 | |
| glebiuskv | 0:2f0e1e23c242 | 954 | return( 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 955 | } |
| glebiuskv | 0:2f0e1e23c242 | 956 | |
| glebiuskv | 0:2f0e1e23c242 | 957 | #define TEST_ASSERT( x ) \ |
| glebiuskv | 0:2f0e1e23c242 | 958 | do { \ |
| glebiuskv | 0:2f0e1e23c242 | 959 | if( x ) \ |
| glebiuskv | 0:2f0e1e23c242 | 960 | ret = 0; \ |
| glebiuskv | 0:2f0e1e23c242 | 961 | else \ |
| glebiuskv | 0:2f0e1e23c242 | 962 | { \ |
| glebiuskv | 0:2f0e1e23c242 | 963 | ret = 1; \ |
| glebiuskv | 0:2f0e1e23c242 | 964 | goto cleanup; \ |
| glebiuskv | 0:2f0e1e23c242 | 965 | } \ |
| glebiuskv | 0:2f0e1e23c242 | 966 | } while( 0 ) |
| glebiuskv | 0:2f0e1e23c242 | 967 | |
| glebiuskv | 0:2f0e1e23c242 | 968 | /* |
| glebiuskv | 0:2f0e1e23c242 | 969 | * Checkup routine |
| glebiuskv | 0:2f0e1e23c242 | 970 | */ |
| glebiuskv | 0:2f0e1e23c242 | 971 | int mbedtls_ecjpake_self_test( int verbose ) |
| glebiuskv | 0:2f0e1e23c242 | 972 | { |
| glebiuskv | 0:2f0e1e23c242 | 973 | int ret; |
| glebiuskv | 0:2f0e1e23c242 | 974 | mbedtls_ecjpake_context cli; |
| glebiuskv | 0:2f0e1e23c242 | 975 | mbedtls_ecjpake_context srv; |
| glebiuskv | 0:2f0e1e23c242 | 976 | unsigned char buf[512], pms[32]; |
| glebiuskv | 0:2f0e1e23c242 | 977 | size_t len, pmslen; |
| glebiuskv | 0:2f0e1e23c242 | 978 | |
| glebiuskv | 0:2f0e1e23c242 | 979 | mbedtls_ecjpake_init( &cli ); |
| glebiuskv | 0:2f0e1e23c242 | 980 | mbedtls_ecjpake_init( &srv ); |
| glebiuskv | 0:2f0e1e23c242 | 981 | |
| glebiuskv | 0:2f0e1e23c242 | 982 | if( verbose != 0 ) |
| glebiuskv | 0:2f0e1e23c242 | 983 | mbedtls_printf( " ECJPAKE test #0 (setup): " ); |
| glebiuskv | 0:2f0e1e23c242 | 984 | |
| glebiuskv | 0:2f0e1e23c242 | 985 | TEST_ASSERT( mbedtls_ecjpake_setup( &cli, MBEDTLS_ECJPAKE_CLIENT, |
| glebiuskv | 0:2f0e1e23c242 | 986 | MBEDTLS_MD_SHA256, MBEDTLS_ECP_DP_SECP256R1, |
| glebiuskv | 0:2f0e1e23c242 | 987 | ecjpake_test_password, |
| glebiuskv | 0:2f0e1e23c242 | 988 | sizeof( ecjpake_test_password ) ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 989 | |
| glebiuskv | 0:2f0e1e23c242 | 990 | TEST_ASSERT( mbedtls_ecjpake_setup( &srv, MBEDTLS_ECJPAKE_SERVER, |
| glebiuskv | 0:2f0e1e23c242 | 991 | MBEDTLS_MD_SHA256, MBEDTLS_ECP_DP_SECP256R1, |
| glebiuskv | 0:2f0e1e23c242 | 992 | ecjpake_test_password, |
| glebiuskv | 0:2f0e1e23c242 | 993 | sizeof( ecjpake_test_password ) ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 994 | |
| glebiuskv | 0:2f0e1e23c242 | 995 | if( verbose != 0 ) |
| glebiuskv | 0:2f0e1e23c242 | 996 | mbedtls_printf( "passed\n" ); |
| glebiuskv | 0:2f0e1e23c242 | 997 | |
| glebiuskv | 0:2f0e1e23c242 | 998 | if( verbose != 0 ) |
| glebiuskv | 0:2f0e1e23c242 | 999 | mbedtls_printf( " ECJPAKE test #1 (random handshake): " ); |
| glebiuskv | 0:2f0e1e23c242 | 1000 | |
| glebiuskv | 0:2f0e1e23c242 | 1001 | TEST_ASSERT( mbedtls_ecjpake_write_round_one( &cli, |
| glebiuskv | 0:2f0e1e23c242 | 1002 | buf, sizeof( buf ), &len, ecjpake_lgc, NULL ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 1003 | |
| glebiuskv | 0:2f0e1e23c242 | 1004 | TEST_ASSERT( mbedtls_ecjpake_read_round_one( &srv, buf, len ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 1005 | |
| glebiuskv | 0:2f0e1e23c242 | 1006 | TEST_ASSERT( mbedtls_ecjpake_write_round_one( &srv, |
| glebiuskv | 0:2f0e1e23c242 | 1007 | buf, sizeof( buf ), &len, ecjpake_lgc, NULL ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 1008 | |
| glebiuskv | 0:2f0e1e23c242 | 1009 | TEST_ASSERT( mbedtls_ecjpake_read_round_one( &cli, buf, len ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 1010 | |
| glebiuskv | 0:2f0e1e23c242 | 1011 | TEST_ASSERT( mbedtls_ecjpake_write_round_two( &srv, |
| glebiuskv | 0:2f0e1e23c242 | 1012 | buf, sizeof( buf ), &len, ecjpake_lgc, NULL ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 1013 | |
| glebiuskv | 0:2f0e1e23c242 | 1014 | TEST_ASSERT( mbedtls_ecjpake_read_round_two( &cli, buf, len ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 1015 | |
| glebiuskv | 0:2f0e1e23c242 | 1016 | TEST_ASSERT( mbedtls_ecjpake_derive_secret( &cli, |
| glebiuskv | 0:2f0e1e23c242 | 1017 | pms, sizeof( pms ), &pmslen, ecjpake_lgc, NULL ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 1018 | |
| glebiuskv | 0:2f0e1e23c242 | 1019 | TEST_ASSERT( mbedtls_ecjpake_write_round_two( &cli, |
| glebiuskv | 0:2f0e1e23c242 | 1020 | buf, sizeof( buf ), &len, ecjpake_lgc, NULL ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 1021 | |
| glebiuskv | 0:2f0e1e23c242 | 1022 | TEST_ASSERT( mbedtls_ecjpake_read_round_two( &srv, buf, len ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 1023 | |
| glebiuskv | 0:2f0e1e23c242 | 1024 | TEST_ASSERT( mbedtls_ecjpake_derive_secret( &srv, |
| glebiuskv | 0:2f0e1e23c242 | 1025 | buf, sizeof( buf ), &len, ecjpake_lgc, NULL ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 1026 | |
| glebiuskv | 0:2f0e1e23c242 | 1027 | TEST_ASSERT( len == pmslen ); |
| glebiuskv | 0:2f0e1e23c242 | 1028 | TEST_ASSERT( memcmp( buf, pms, len ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 1029 | |
| glebiuskv | 0:2f0e1e23c242 | 1030 | if( verbose != 0 ) |
| glebiuskv | 0:2f0e1e23c242 | 1031 | mbedtls_printf( "passed\n" ); |
| glebiuskv | 0:2f0e1e23c242 | 1032 | |
| glebiuskv | 0:2f0e1e23c242 | 1033 | if( verbose != 0 ) |
| glebiuskv | 0:2f0e1e23c242 | 1034 | mbedtls_printf( " ECJPAKE test #2 (reference handshake): " ); |
| glebiuskv | 0:2f0e1e23c242 | 1035 | |
| glebiuskv | 0:2f0e1e23c242 | 1036 | /* Simulate generation of round one */ |
| glebiuskv | 0:2f0e1e23c242 | 1037 | MBEDTLS_MPI_CHK( ecjpake_test_load( &cli, |
| glebiuskv | 0:2f0e1e23c242 | 1038 | ecjpake_test_x1, sizeof( ecjpake_test_x1 ), |
| glebiuskv | 0:2f0e1e23c242 | 1039 | ecjpake_test_x2, sizeof( ecjpake_test_x2 ) ) ); |
| glebiuskv | 0:2f0e1e23c242 | 1040 | |
| glebiuskv | 0:2f0e1e23c242 | 1041 | MBEDTLS_MPI_CHK( ecjpake_test_load( &srv, |
| glebiuskv | 0:2f0e1e23c242 | 1042 | ecjpake_test_x3, sizeof( ecjpake_test_x3 ), |
| glebiuskv | 0:2f0e1e23c242 | 1043 | ecjpake_test_x4, sizeof( ecjpake_test_x4 ) ) ); |
| glebiuskv | 0:2f0e1e23c242 | 1044 | |
| glebiuskv | 0:2f0e1e23c242 | 1045 | /* Read round one */ |
| glebiuskv | 0:2f0e1e23c242 | 1046 | TEST_ASSERT( mbedtls_ecjpake_read_round_one( &srv, |
| glebiuskv | 0:2f0e1e23c242 | 1047 | ecjpake_test_cli_one, |
| glebiuskv | 0:2f0e1e23c242 | 1048 | sizeof( ecjpake_test_cli_one ) ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 1049 | |
| glebiuskv | 0:2f0e1e23c242 | 1050 | TEST_ASSERT( mbedtls_ecjpake_read_round_one( &cli, |
| glebiuskv | 0:2f0e1e23c242 | 1051 | ecjpake_test_srv_one, |
| glebiuskv | 0:2f0e1e23c242 | 1052 | sizeof( ecjpake_test_srv_one ) ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 1053 | |
| glebiuskv | 0:2f0e1e23c242 | 1054 | /* Skip generation of round two, read round two */ |
| glebiuskv | 0:2f0e1e23c242 | 1055 | TEST_ASSERT( mbedtls_ecjpake_read_round_two( &cli, |
| glebiuskv | 0:2f0e1e23c242 | 1056 | ecjpake_test_srv_two, |
| glebiuskv | 0:2f0e1e23c242 | 1057 | sizeof( ecjpake_test_srv_two ) ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 1058 | |
| glebiuskv | 0:2f0e1e23c242 | 1059 | TEST_ASSERT( mbedtls_ecjpake_read_round_two( &srv, |
| glebiuskv | 0:2f0e1e23c242 | 1060 | ecjpake_test_cli_two, |
| glebiuskv | 0:2f0e1e23c242 | 1061 | sizeof( ecjpake_test_cli_two ) ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 1062 | |
| glebiuskv | 0:2f0e1e23c242 | 1063 | /* Server derives PMS */ |
| glebiuskv | 0:2f0e1e23c242 | 1064 | TEST_ASSERT( mbedtls_ecjpake_derive_secret( &srv, |
| glebiuskv | 0:2f0e1e23c242 | 1065 | buf, sizeof( buf ), &len, ecjpake_lgc, NULL ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 1066 | |
| glebiuskv | 0:2f0e1e23c242 | 1067 | TEST_ASSERT( len == sizeof( ecjpake_test_pms ) ); |
| glebiuskv | 0:2f0e1e23c242 | 1068 | TEST_ASSERT( memcmp( buf, ecjpake_test_pms, len ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 1069 | |
| glebiuskv | 0:2f0e1e23c242 | 1070 | memset( buf, 0, len ); /* Avoid interferences with next step */ |
| glebiuskv | 0:2f0e1e23c242 | 1071 | |
| glebiuskv | 0:2f0e1e23c242 | 1072 | /* Client derives PMS */ |
| glebiuskv | 0:2f0e1e23c242 | 1073 | TEST_ASSERT( mbedtls_ecjpake_derive_secret( &cli, |
| glebiuskv | 0:2f0e1e23c242 | 1074 | buf, sizeof( buf ), &len, ecjpake_lgc, NULL ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 1075 | |
| glebiuskv | 0:2f0e1e23c242 | 1076 | TEST_ASSERT( len == sizeof( ecjpake_test_pms ) ); |
| glebiuskv | 0:2f0e1e23c242 | 1077 | TEST_ASSERT( memcmp( buf, ecjpake_test_pms, len ) == 0 ); |
| glebiuskv | 0:2f0e1e23c242 | 1078 | |
| glebiuskv | 0:2f0e1e23c242 | 1079 | if( verbose != 0 ) |
| glebiuskv | 0:2f0e1e23c242 | 1080 | mbedtls_printf( "passed\n" ); |
| glebiuskv | 0:2f0e1e23c242 | 1081 | |
| glebiuskv | 0:2f0e1e23c242 | 1082 | cleanup: |
| glebiuskv | 0:2f0e1e23c242 | 1083 | mbedtls_ecjpake_free( &cli ); |
| glebiuskv | 0:2f0e1e23c242 | 1084 | mbedtls_ecjpake_free( &srv ); |
| glebiuskv | 0:2f0e1e23c242 | 1085 | |
| glebiuskv | 0:2f0e1e23c242 | 1086 | if( ret != 0 ) |
| glebiuskv | 0:2f0e1e23c242 | 1087 | { |
| glebiuskv | 0:2f0e1e23c242 | 1088 | if( verbose != 0 ) |
| glebiuskv | 0:2f0e1e23c242 | 1089 | mbedtls_printf( "failed\n" ); |
| glebiuskv | 0:2f0e1e23c242 | 1090 | |
| glebiuskv | 0:2f0e1e23c242 | 1091 | ret = 1; |
| glebiuskv | 0:2f0e1e23c242 | 1092 | } |
| glebiuskv | 0:2f0e1e23c242 | 1093 | |
| glebiuskv | 0:2f0e1e23c242 | 1094 | if( verbose != 0 ) |
| glebiuskv | 0:2f0e1e23c242 | 1095 | mbedtls_printf( "\n" ); |
| glebiuskv | 0:2f0e1e23c242 | 1096 | |
| glebiuskv | 0:2f0e1e23c242 | 1097 | return( ret ); |
| glebiuskv | 0:2f0e1e23c242 | 1098 | } |
| glebiuskv | 0:2f0e1e23c242 | 1099 | |
| glebiuskv | 0:2f0e1e23c242 | 1100 | #undef TEST_ASSERT |
| glebiuskv | 0:2f0e1e23c242 | 1101 | |
| glebiuskv | 0:2f0e1e23c242 | 1102 | #endif /* MBEDTLS_ECP_DP_SECP256R1_ENABLED && MBEDTLS_SHA256_C */ |
| glebiuskv | 0:2f0e1e23c242 | 1103 | |
| glebiuskv | 0:2f0e1e23c242 | 1104 | #endif /* MBEDTLS_SELF_TEST */ |
| glebiuskv | 0:2f0e1e23c242 | 1105 | |
| glebiuskv | 0:2f0e1e23c242 | 1106 | #endif /* MBEDTLS_ECJPAKE_C */ |