exptest.c 7.7 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249
  1. /* crypto/bn/exptest.c */
  2. /* Copyright (C) 1995-1998 Eric Young ([email protected])
  3. * All rights reserved.
  4. *
  5. * This package is an SSL implementation written
  6. * by Eric Young ([email protected]).
  7. * The implementation was written so as to conform with Netscapes SSL.
  8. *
  9. * This library is free for commercial and non-commercial use as long as
  10. * the following conditions are aheared to. The following conditions
  11. * apply to all code found in this distribution, be it the RC4, RSA,
  12. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  13. * included with this distribution is covered by the same copyright terms
  14. * except that the holder is Tim Hudson ([email protected]).
  15. *
  16. * Copyright remains Eric Young's, and as such any Copyright notices in
  17. * the code are not to be removed.
  18. * If this package is used in a product, Eric Young should be given attribution
  19. * as the author of the parts of the library used.
  20. * This can be in the form of a textual message at program startup or
  21. * in documentation (online or textual) provided with the package.
  22. *
  23. * Redistribution and use in source and binary forms, with or without
  24. * modification, are permitted provided that the following conditions
  25. * are met:
  26. * 1. Redistributions of source code must retain the copyright
  27. * notice, this list of conditions and the following disclaimer.
  28. * 2. Redistributions in binary form must reproduce the above copyright
  29. * notice, this list of conditions and the following disclaimer in the
  30. * documentation and/or other materials provided with the distribution.
  31. * 3. All advertising materials mentioning features or use of this software
  32. * must display the following acknowledgement:
  33. * "This product includes cryptographic software written by
  34. * Eric Young ([email protected])"
  35. * The word 'cryptographic' can be left out if the rouines from the library
  36. * being used are not cryptographic related :-).
  37. * 4. If you include any Windows specific code (or a derivative thereof) from
  38. * the apps directory (application code) you must include an acknowledgement:
  39. * "This product includes software written by Tim Hudson ([email protected])"
  40. *
  41. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51. * SUCH DAMAGE.
  52. *
  53. * The licence and distribution terms for any publically available version or
  54. * derivative of this code cannot be changed. i.e. this code cannot simply be
  55. * copied and put under another distribution licence
  56. * [including the GNU Public Licence.]
  57. */
  58. #include <stdio.h>
  59. #include <stdlib.h>
  60. #include <string.h>
  61. #include "../e_os.h"
  62. #include <openssl/bio.h>
  63. #include <openssl/bn.h>
  64. #include <openssl/rand.h>
  65. #include <openssl/err.h>
  66. #define NUM_BITS (BN_BITS*2)
  67. static const char rnd_seed[] =
  68. "string to make the random number generator think it has entropy";
  69. /*
  70. * test_exp_mod_zero tests that x**0 mod 1 == 0. It returns zero on success.
  71. */
  72. static int test_exp_mod_zero()
  73. {
  74. BIGNUM a, p, m;
  75. BIGNUM r;
  76. BN_CTX *ctx = BN_CTX_new();
  77. int ret = 1;
  78. BN_init(&m);
  79. BN_one(&m);
  80. BN_init(&a);
  81. BN_one(&a);
  82. BN_init(&p);
  83. BN_zero(&p);
  84. BN_init(&r);
  85. BN_mod_exp(&r, &a, &p, &m, ctx);
  86. BN_CTX_free(ctx);
  87. if (BN_is_zero(&r))
  88. ret = 0;
  89. else {
  90. printf("1**0 mod 1 = ");
  91. BN_print_fp(stdout, &r);
  92. printf(", should be 0\n");
  93. }
  94. BN_free(&r);
  95. BN_free(&a);
  96. BN_free(&p);
  97. BN_free(&m);
  98. return ret;
  99. }
  100. int main(int argc, char *argv[])
  101. {
  102. BN_CTX *ctx;
  103. BIO *out = NULL;
  104. int i, ret;
  105. unsigned char c;
  106. BIGNUM *r_mont, *r_mont_const, *r_recp, *r_simple, *a, *b, *m;
  107. RAND_seed(rnd_seed, sizeof rnd_seed); /* or BN_rand may fail, and we
  108. * don't even check its return
  109. * value (which we should) */
  110. ERR_load_BN_strings();
  111. ctx = BN_CTX_new();
  112. if (ctx == NULL)
  113. EXIT(1);
  114. r_mont = BN_new();
  115. r_mont_const = BN_new();
  116. r_recp = BN_new();
  117. r_simple = BN_new();
  118. a = BN_new();
  119. b = BN_new();
  120. m = BN_new();
  121. if ((r_mont == NULL) || (r_recp == NULL) || (a == NULL) || (b == NULL))
  122. goto err;
  123. out = BIO_new(BIO_s_file());
  124. if (out == NULL)
  125. EXIT(1);
  126. BIO_set_fp(out, stdout, BIO_NOCLOSE);
  127. for (i = 0; i < 200; i++) {
  128. RAND_bytes(&c, 1);
  129. c = (c % BN_BITS) - BN_BITS2;
  130. BN_rand(a, NUM_BITS + c, 0, 0);
  131. RAND_bytes(&c, 1);
  132. c = (c % BN_BITS) - BN_BITS2;
  133. BN_rand(b, NUM_BITS + c, 0, 0);
  134. RAND_bytes(&c, 1);
  135. c = (c % BN_BITS) - BN_BITS2;
  136. BN_rand(m, NUM_BITS + c, 0, 1);
  137. BN_mod(a, a, m, ctx);
  138. BN_mod(b, b, m, ctx);
  139. ret = BN_mod_exp_mont(r_mont, a, b, m, ctx, NULL);
  140. if (ret <= 0) {
  141. printf("BN_mod_exp_mont() problems\n");
  142. ERR_print_errors(out);
  143. EXIT(1);
  144. }
  145. ret = BN_mod_exp_recp(r_recp, a, b, m, ctx);
  146. if (ret <= 0) {
  147. printf("BN_mod_exp_recp() problems\n");
  148. ERR_print_errors(out);
  149. EXIT(1);
  150. }
  151. ret = BN_mod_exp_simple(r_simple, a, b, m, ctx);
  152. if (ret <= 0) {
  153. printf("BN_mod_exp_simple() problems\n");
  154. ERR_print_errors(out);
  155. EXIT(1);
  156. }
  157. ret = BN_mod_exp_mont_consttime(r_mont_const, a, b, m, ctx, NULL);
  158. if (ret <= 0) {
  159. printf("BN_mod_exp_mont_consttime() problems\n");
  160. ERR_print_errors(out);
  161. EXIT(1);
  162. }
  163. if (BN_cmp(r_simple, r_mont) == 0
  164. && BN_cmp(r_simple, r_recp) == 0
  165. && BN_cmp(r_simple, r_mont_const) == 0) {
  166. printf(".");
  167. fflush(stdout);
  168. } else {
  169. if (BN_cmp(r_simple, r_mont) != 0)
  170. printf("\nsimple and mont results differ\n");
  171. if (BN_cmp(r_simple, r_mont_const) != 0)
  172. printf("\nsimple and mont const time results differ\n");
  173. if (BN_cmp(r_simple, r_recp) != 0)
  174. printf("\nsimple and recp results differ\n");
  175. printf("a (%3d) = ", BN_num_bits(a));
  176. BN_print(out, a);
  177. printf("\nb (%3d) = ", BN_num_bits(b));
  178. BN_print(out, b);
  179. printf("\nm (%3d) = ", BN_num_bits(m));
  180. BN_print(out, m);
  181. printf("\nsimple =");
  182. BN_print(out, r_simple);
  183. printf("\nrecp =");
  184. BN_print(out, r_recp);
  185. printf("\nmont =");
  186. BN_print(out, r_mont);
  187. printf("\nmont_ct =");
  188. BN_print(out, r_mont_const);
  189. printf("\n");
  190. EXIT(1);
  191. }
  192. }
  193. BN_free(r_mont);
  194. BN_free(r_mont_const);
  195. BN_free(r_recp);
  196. BN_free(r_simple);
  197. BN_free(a);
  198. BN_free(b);
  199. BN_free(m);
  200. BN_CTX_free(ctx);
  201. ERR_remove_thread_state(NULL);
  202. CRYPTO_mem_leaks(out);
  203. BIO_free(out);
  204. printf("\n");
  205. if (test_exp_mod_zero() != 0)
  206. goto err;
  207. printf("done\n");
  208. EXIT(0);
  209. err:
  210. ERR_load_crypto_strings();
  211. ERR_print_errors(out);
  212. #ifdef OPENSSL_SYS_NETWARE
  213. printf("ERROR\n");
  214. #endif
  215. EXIT(1);
  216. return (1);
  217. }