1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
|
/*
* (C) 2014,2015 Jack Lloyd
*
* Botan is released under the Simplified BSD License (see license.txt)
*/
#include "tests.h"
#if defined(BOTAN_HAS_CURVE_25519)
#include "test_pubkey.h"
#include <botan/curve25519.h>
#include <botan/pkcs8.h>
#endif
namespace Botan_Tests {
#if defined(BOTAN_HAS_CURVE_25519)
class Curve25519_Sclarmult_Tests : public Text_Based_Test
{
public:
Curve25519_Sclarmult_Tests() : Text_Based_Test(
Test::data_file("pubkey/c25519_scalar.vec"),
{"Secret","Basepoint","Out"})
{}
Test::Result run_one_test(const std::string&, const VarMap& vars) override
{
const std::vector<uint8_t> secret = get_req_bin(vars, "Secret");
const std::vector<uint8_t> basepoint = get_req_bin(vars, "Basepoint");
const std::vector<uint8_t> expected = get_req_bin(vars, "Out");
std::vector<byte> got(32);
Botan::curve25519_donna(got.data(), secret.data(), basepoint.data());
Test::Result result("Curve25519 scalarmult");
result.test_eq("basemult", got, expected);
return result;
}
};
class Curve25519_Roundtrip_Test : public Test
{
public:
std::vector<Test::Result> run()
{
std::vector<Test::Result> results;
for(size_t i = 0; i <= Test::soak_level(); ++i)
{
Test::Result result("Curve25519 roundtrip");
Botan::Curve25519_PrivateKey a_priv_gen(Test::rng());
Botan::Curve25519_PrivateKey b_priv_gen(Test::rng());
const std::string a_pass = "alice pass";
const std::string b_pass = "bob pass";
// Then serialize to encrypted storage
const auto pbe_time = std::chrono::milliseconds(10);
const std::string a_priv_pem = Botan::PKCS8::PEM_encode(a_priv_gen, Test::rng(), a_pass, pbe_time);
const std::string b_priv_pem = Botan::PKCS8::PEM_encode(b_priv_gen, Test::rng(), b_pass, pbe_time);
// Reload back into memory
Botan::DataSource_Memory a_priv_ds(a_priv_pem);
Botan::DataSource_Memory b_priv_ds(b_priv_pem);
std::unique_ptr<Botan::Private_Key> a_priv(Botan::PKCS8::load_key(a_priv_ds, Test::rng(), [a_pass]() { return a_pass; }));
std::unique_ptr<Botan::Private_Key> b_priv(Botan::PKCS8::load_key(b_priv_ds, Test::rng(), b_pass));
// Export public keys as PEM
const std::string a_pub_pem = Botan::X509::PEM_encode(*a_priv);
const std::string b_pub_pem = Botan::X509::PEM_encode(*b_priv);
Botan::DataSource_Memory a_pub_ds(a_pub_pem);
Botan::DataSource_Memory b_pub_ds(b_pub_pem);
std::unique_ptr<Botan::Public_Key> a_pub(Botan::X509::load_key(a_pub_ds));
std::unique_ptr<Botan::Public_Key> b_pub(Botan::X509::load_key(b_pub_ds));
Botan::Curve25519_PublicKey* a_pub_key = dynamic_cast<Botan::Curve25519_PublicKey*>(a_pub.get());
Botan::Curve25519_PublicKey* b_pub_key = dynamic_cast<Botan::Curve25519_PublicKey*>(b_pub.get());
Botan::PK_Key_Agreement a_ka(*a_priv, "KDF2(SHA-256)");
Botan::PK_Key_Agreement b_ka(*b_priv, "KDF2(SHA-256)");
const std::string context = "shared context value";
Botan::SymmetricKey a_key = a_ka.derive_key(32, b_pub_key->public_value(), context);
Botan::SymmetricKey b_key = b_ka.derive_key(32, a_pub_key->public_value(), context);
if(!result.test_eq("key agreement", a_key.bits_of(), b_key.bits_of()))
{
result.test_note(a_priv_pem);
result.test_note(b_priv_pem);
}
results.push_back(result);
}
return results;
}
};
class Curve25519_Keygen_Tests : public PK_Key_Generation_Test
{
public:
std::vector<std::string> keygen_params() const override { return { "" }; }
std::unique_ptr<Botan::Private_Key> make_key(Botan::RandomNumberGenerator& rng,
const std::string&) const override
{
std::unique_ptr<Botan::Private_Key> key(new Botan::Curve25519_PrivateKey(rng));
return key;
}
};
BOTAN_REGISTER_TEST("curve25519_scalar", Curve25519_Sclarmult_Tests);
BOTAN_REGISTER_TEST("curve25519_rt", Curve25519_Roundtrip_Test);
BOTAN_REGISTER_TEST("curve25519_keygen", Curve25519_Keygen_Tests);
#endif
}
|
