aboutsummaryrefslogtreecommitdiffstats
path: root/src/tests/test_ecdsa.cpp
Commit message (Collapse)AuthorAgeFilesLines
* Support recovering ECDSA public key from message/signature pairJack Lloyd2018-12-101-0/+50
| | | | | | See http://www.secg.org/sec1-v2.pdf section 4.1.6 Closes #664
* Add ECDSA tests from WycheproofJack Lloyd2018-05-311-0/+41
|
* Make the tests VarMap an actual type instead of a hashmap typedef.Jack Lloyd2018-05-291-9/+9
|
* Shift ECDSA inputs to match OpenSSL behaviorJack Lloyd2018-03-211-0/+33
| | | | See also GH #986
* Use shared representation of EC_GroupJack Lloyd2018-01-311-1/+1
| | | | Hide CurveGFp with an eye for eventual removal
* Add final annotations as appropriate in the test codeJack Lloyd2017-09-221-3/+3
|
* Allow signature using `Raw(hashname)`Jack Lloyd2017-08-151-1/+1
| | | | | | This confirms the message is exactly the size of the expected hash, and also causes RFC 6979 nonces to be generated using the specified hash. See also https://github.com/riboseinc/rnp/issues/367
* Fix issue signing an ECDSA hash of all-zeros (GH #1143)Jack Lloyd2017-08-071-1/+4
| | | | | The tests were generated by Botan but I was able to verify the resulting signatures using Golang's ecdsa module.
* Reformat code with astyle + fix code styleTomasz Frydrych2017-05-011-13/+24
|
* Add ECDSA key tests from Google's project WycheproofRené Korthaus2017-02-121-10/+10
|
* Add test vectors for invalid ECDSA public keys from FIPS 186-4René Korthaus2017-02-121-0/+1
|
* Add test vectors for invalid ECDSA public keys from FIPS 186-2René Korthaus2017-02-121-0/+39
|
* Minor refactoring of Text_Based_TestJack Lloyd2016-12-191-2/+2
| | | | | | Turns out astyle has some bugs wrt C++11 initialize lists. Rather than having astyle mangle all of the tests, convert to using a string which is split once at the start instead of a vector of keys.
* Test PK key creation via create_private_key APIJack Lloyd2016-10-311-8/+1
|
* Pubkey tests should express category [ci skip]René Korthaus2016-10-241-1/+1
|
* Added ecdsa_keygen for frp256v1Simon Cogliani2016-08-011-1/+1
|
* Add support probabilistic DSA & ECDSARené Korthaus2016-05-081-1/+17
| | | | | | | Adds support for probabilistic, aka the standard, DSA and ECDSA. Can be enabled by disabling the rfc6979 module. Includes test vectors from NIST CAVP. Adds rfc6979 to the list of prohibited modules in BSI policy.
* Add --data-dir option to test commandJack Lloyd2015-12-201-1/+1
| | | | | | | Understand using '-' on the command line to mean stdin Fix last few unit tests that wanted to write to the filesystem; removes outdata directory.
* Update and consolidate the test framework.Jack Lloyd2015-11-111-45/+49
| | | | | | | | | | | The tests previously had used 4 to 6 different schemes internally (the vec file reader framework, Catch, the old InSiTo Boost.Test tests, the PK/BigInt tests which escaped the rewrite in 1.11.7, plus a number of one-offs). Converge on a design that works everywhere, and update all the things. Fix also a few bugs found by the test changes: SHA-512-256 name incorrect, OpenSSL RC4 name incorrect, signature of FFI function botan_pubkey_destroy was wrong.
* FixJack Lloyd2015-10-191-2/+2
|
* ECDSA KATs only work for base implJack Lloyd2015-10-191-2/+2
| | | | | OpenSSL doesn't use RFC 6979 nonces, so if openssl was enabled ECDSA tests would fail.
* Avoid concatination of charsSimon Warta2015-09-221-1/+1
| | | | | | | Ever tried? auto str = "some long string"; auto str2 = str + '\n'; It's not with the brainfuck finding the bug.
* Add power analysis countermeasures for ECC point multiplications.Jack Lloyd2015-08-211-3/+2
| | | | | | | | The plain PointGFp operator* now uses Montgomery ladder exclusively. Adds a blinded point multiply algorithm which uses exponent and point randomization, as well as a Montgomery ladder technique that takes a random walk of the possible addition chains for k.
* Fix TEST_DATA_DIRSimon Warta2015-07-151-1/+1
|
* Make Botan compile when only some modules are enabledSimon Warta2015-07-031-52/+8
| | | | Fixes #146.
* Replace \n by std::endl in tests to ensure proper flushingSimon Warta2015-06-191-2/+2
| | | | | | | - Remove additional newlines in CHECK_MESSAGE call - Remove redundant output of algo in aead_test() Closes #115
* Ensure all files have copyright and license info.lloyd2015-01-101-0/+6
| | | | | Update license header line to specify the terms and refer to the file, neither of which it included before.
* Add Brainpool and secp160r1 ECDSA testslloyd2015-01-051-1/+2
|
* All tests now share an RNG. Uses system RNG if availablelloyd2014-12-281-2/+2
|
* Implement RFC 6979 determinstic signatures for DSA and ECDSA.lloyd2014-12-101-1/+1
| | | | | Drop the GNU MP engine. Its implementations were potentially faster in some scenarios but not well protected against side channels.
* Add some secp256k1 KATs and a randomized ECC test suggested inlloyd2014-10-101-0/+48
| | | | http://crypto.stackexchange.com/questions/784
* More fixes for minified buildslloyd2014-02-091-8/+5
|
* Fix minimized builds. Patch by Markus Wanner sent to botan-devellloyd2014-02-081-0/+6
|
* Split up docs into the reference manual, the website, and everything else.lloyd2014-01-101-0/+52
| | | | | | | | | | | Add `website` target to makefile. Some progress towards fixing minimized builds. TLS now hard requires ECDSA and GCM since otherwise a minimized build has only insecure options. Remove boost_thread dependency in command line tool
* Rename test sourceslloyd2014-01-071-52/+0
|
* Split up public key tests and data, use new test frameworklloyd2014-01-051-461/+23
|
* Shuffle things around. Add NIST X.509 test to build.lloyd2014-01-011-0/+490