ecc-mul-a-test.c 2.27 KB
Newer Older
Niels Möller's avatar
Niels Möller committed
1 2
#include "testutils.h"

3 4 5 6 7 8 9 10
#if NETTLE_USE_MINI_GMP
void
test_main (void)
{
  SKIP();
}
#else /* ! NETTLE_USE_MINI_GMP */

Niels Möller's avatar
Niels Möller committed
11 12 13
void
test_main (void)
{
14
  gmp_randstate_t rands;
Niels Möller's avatar
Niels Möller committed
15 16 17
  mpz_t r;
  unsigned i;

18
  gmp_randinit_default (rands);
Niels Möller's avatar
Niels Möller committed
19 20 21 22 23 24 25 26 27 28 29 30 31 32 33
  mpz_init (r);
  
  for (i = 0; ecc_curves[i]; i++)
    {
      const struct ecc_curve *ecc = ecc_curves[i];
      mp_size_t size = ecc_size (ecc);
      mp_limb_t *p = xalloc_limbs (ecc_size_j (ecc));
      mp_limb_t *q = xalloc_limbs (ecc_size_j (ecc));
      mp_limb_t *n = xalloc_limbs (size);
      mp_limb_t *scratch = xalloc_limbs (ecc_mul_a_itch (ecc));
      unsigned j;
      
      mpn_zero (n, size);

      n[0] = 1;
34
      ecc_mul_a (ecc, p, n, ecc->g, scratch);
35
      ecc_j_to_a (ecc, 0, p, p, scratch);
Niels Möller's avatar
Niels Möller committed
36 37 38 39 40 41

      if (mpn_cmp (p, ecc->g, 2*size != 0))
	die ("curve %d: ecc_mul_a with n = 1 failed.\n", ecc->bit_size);

      for (n[0] = 2; n[0] <= 4; n[0]++)
	{
42
	  ecc_mul_a (ecc, p, n, ecc->g, scratch);
Niels Möller's avatar
Niels Möller committed
43 44 45 46 47
	  test_ecc_mul_j (i, n[0], p);
	}

      /* (order - 1) * g = - g */
      mpn_sub_1 (n, ecc->q, size, 1);
48
      ecc_mul_a (ecc, p, n, ecc->g, scratch);
49
      ecc_j_to_a (ecc, 0, p, p, scratch);
Niels Möller's avatar
Niels Möller committed
50 51 52 53 54 55 56 57 58 59 60 61
      mpn_sub_n (p + size, ecc->p, p + size, size);
      if (mpn_cmp (p, ecc->g, 2*size) != 0)
	{
	  fprintf (stderr, "ecc_mul_a with n = order - 1 failed.\n");
	  abort ();
	}

      mpn_zero (n, size);

      for (j = 0; j < 100; j++)
	{
	  if (j & 1)
62
	    mpz_rrandomb (r, rands, size * GMP_NUMB_BITS);
Niels Möller's avatar
Niels Möller committed
63
	  else
64
	    mpz_urandomb (r, rands, size * GMP_NUMB_BITS);
Niels Möller's avatar
Niels Möller committed
65 66

	  /* Reduce so that (almost surely) n < q */
67
	  mpz_limbs_copy (n, r, size);
Niels Möller's avatar
Niels Möller committed
68 69
	  n[size - 1] %= ecc->q[size - 1];

70
	  ecc_mul_a (ecc, p, n, ecc->g, scratch);
71
	  ecc_j_to_a (ecc, 0, p, p, scratch);
Niels Möller's avatar
Niels Möller committed
72 73

	  ecc_mul_g (ecc, q, n, scratch);
74
	  ecc_j_to_a (ecc, 0, q, q, scratch);
Niels Möller's avatar
Niels Möller committed
75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95

	  if (mpn_cmp (p, q, 2*size))
	    {
	      gmp_fprintf (stderr,
			   "Different results from ecc_mul_a and ecc_mul_g.\n"
			   " bits = %u\n"
			   " n = %Nx\n",
			   ecc->bit_size, n, size);
	      gmp_fprintf (stderr, "p = %Nx,\n    %Nx\n",
			   p, size, p + size, size);
	      gmp_fprintf (stderr, "q = %Nx,\n    %Nx\n",
			   q, size, q + size, size);
	      abort ();
	    }
	}
      free (n);
      free (p);
      free (q);
      free (scratch);
    }
  mpz_clear (r); 
96
  gmp_randclear (rands);
Niels Möller's avatar
Niels Möller committed
97
}
98
#endif /* ! NETTLE_USE_MINI_GMP */