1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
|
//go:build (!purego && arm64) || (!purego && amd64)
// +build !purego,arm64 !purego,amd64
package p384
import (
"bytes"
"crypto/elliptic"
"crypto/rand"
"math/big"
"testing"
"github.com/cloudflare/circl/internal/test"
)
func TestInternals(t *testing.T) {
t.Run("reduceScalar", func(t *testing.T) {
var c curve
order := c.Params().N
var buffer [3 * sizeFp]byte
for i := 0; i < sizeFp; i++ {
buffer[i] = 0xFF
}
_, err := rand.Read(buffer[sizeFp:])
if err != nil {
t.Fatal(err)
}
for i := 0; i < 3*sizeFp; i++ {
k := buffer[:i]
got := c.reduceScalar(k)
bigK := new(big.Int).SetBytes(k)
bigK.Mod(bigK, order)
want := bigK.FillBytes(make([]byte, sizeFp))
if !bytes.Equal(got, want) {
test.ReportError(t, got, want, k)
}
}
})
t.Run("absolute", func(t *testing.T) {
cases := []int32{-2, -1, 0, 1, 2}
expected := []int32{2, 1, 0, 1, 2}
for i := range cases {
got := absolute(cases[i])
want := expected[i]
if got != want {
test.ReportError(t, got, want, cases[i])
}
}
})
t.Run("toOdd", func(t *testing.T) {
var c curve
k := []byte{0xF0}
oddK, _ := c.toOdd(k)
got := len(oddK)
want := 48
if got != want {
test.ReportError(t, got, want)
}
oddK[sizeFp-1] = 0x0
smallOddK, _ := c.toOdd(oddK)
got = len(smallOddK)
want = 48
if got != want {
test.ReportError(t, got, want)
}
})
t.Run("special k", func(t *testing.T) {
cases := []struct { // known cases that require complete addition
w uint
k int
}{
{w: 2, k: 2},
{w: 5, k: 6},
{w: 6, k: 38},
{w: 7, k: 102},
{w: 9, k: 230},
{w: 12, k: 742},
{w: 14, k: 4838},
{w: 17, k: 21222},
{w: 19, k: 152294},
}
var c curve
StdCurve := elliptic.P384()
params := StdCurve.Params()
for _, caseI := range cases {
k := big.NewInt(int64(caseI.k)).Bytes()
gotX, gotY := c.scalarMultOmega(params.Gx, params.Gy, k, caseI.w)
wantX, wantY := StdCurve.ScalarMult(params.Gx, params.Gy, k)
if gotX.Cmp(wantX) != 0 {
test.ReportError(t, gotX, wantX, caseI)
}
if gotY.Cmp(wantY) != 0 {
test.ReportError(t, gotY, wantY, caseI)
}
}
})
}
|
