mirror of
https://github.com/espressif/mbedtls.git
synced 2025-07-13 18:20:30 +08:00
f80458a160
For easier maintenance the framework repository is flattened here and added to the forked branch in source format.
160 lines
7.5 KiB
Python
160 lines
7.5 KiB
Python
"""Base values and datasets for bignum generated tests and helper functions that
|
|
produced them."""
|
|
# Copyright The Mbed TLS Contributors
|
|
# SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
|
|
#
|
|
|
|
import random
|
|
|
|
# Functions calling these were used to produce test data and are here only for
|
|
# reproducibility, they are not used by the test generation framework/classes
|
|
try:
|
|
from Cryptodome.Util.number import isPrime, getPrime #type: ignore #pylint: disable=import-error
|
|
except ImportError:
|
|
pass
|
|
|
|
# Generated by bignum_common.gen_safe_prime(192,1)
|
|
SAFE_PRIME_192_BIT_SEED_1 = "d1c127a667786703830500038ebaef20e5a3e2dc378fb75b"
|
|
|
|
# First number generated by random.getrandbits(192) - seed(2,2), not a prime
|
|
RANDOM_192_BIT_SEED_2_NO1 = "177219d30e7a269fd95bafc8f2a4d27bdcf4bb99f4bea973"
|
|
|
|
# Second number generated by random.getrandbits(192) - seed(2,2), not a prime
|
|
RANDOM_192_BIT_SEED_2_NO2 = "cf1822ffbc6887782b491044d5e341245c6e433715ba2bdd"
|
|
|
|
# Third number generated by random.getrandbits(192) - seed(2,2), not a prime
|
|
RANDOM_192_BIT_SEED_2_NO3 = "3653f8dd9b1f282e4067c3584ee207f8da94e3e8ab73738f"
|
|
|
|
# Fourth number generated by random.getrandbits(192) - seed(2,2), not a prime
|
|
RANDOM_192_BIT_SEED_2_NO4 = "ffed9235288bc781ae66267594c9c9500925e4749b575bd1"
|
|
|
|
# Ninth number generated by random.getrandbits(192) - seed(2,2), not a prime
|
|
RANDOM_192_BIT_SEED_2_NO9 = "2a1be9cd8697bbd0e2520e33e44c50556c71c4a66148a86f"
|
|
|
|
# Generated by bignum_common.gen_safe_prime(1024,3)
|
|
SAFE_PRIME_1024_BIT_SEED_3 = ("c93ba7ec74d96f411ba008bdb78e63ff11bb5df46a51e16b"
|
|
"2c9d156f8e4e18abf5e052cb01f47d0d1925a77f60991577"
|
|
"e128fb6f52f34a27950a594baadd3d8057abeb222cf3cca9"
|
|
"62db16abf79f2ada5bd29ab2f51244bf295eff9f6aaba130"
|
|
"2efc449b128be75eeaca04bc3c1a155d11d14e8be32a2c82"
|
|
"87b3996cf6ad5223")
|
|
|
|
# First number generated by random.getrandbits(1024) - seed(4,2), not a prime
|
|
RANDOM_1024_BIT_SEED_4_NO1 = ("6905269ed6f0b09f165c8ce36e2f24b43000de01b2ed40ed"
|
|
"3addccb2c33be0ac79d679346d4ac7a5c3902b38963dc6e8"
|
|
"534f45738d048ec0f1099c6c3e1b258fd724452ccea71ff4"
|
|
"a14876aeaff1a098ca5996666ceab360512bd13110722311"
|
|
"710cf5327ac435a7a97c643656412a9b8a1abcd1a6916c74"
|
|
"da4f9fc3c6da5d7")
|
|
|
|
# Second number generated by random.getrandbits(1024) - seed(4,2), not a prime
|
|
RANDOM_1024_BIT_SEED_4_NO2 = ("f1cfd99216df648647adec26793d0e453f5082492d83a823"
|
|
"3fb62d2c81862fc9634f806fabf4a07c566002249b191bf4"
|
|
"d8441b5616332aca5f552773e14b0190d93936e1daca3c06"
|
|
"f5ff0c03bb5d7385de08caa1a08179104a25e4664f5253a0"
|
|
"2a3187853184ff27459142deccea264542a00403ce80c4b0"
|
|
"a4042bb3d4341aad")
|
|
|
|
# Third number generated by random.getrandbits(1024) - seed(4,2), not a prime
|
|
RANDOM_1024_BIT_SEED_4_NO3 = ("14c15c910b11ad28cc21ce88d0060cc54278c2614e1bcb38"
|
|
"3bb4a570294c4ea3738d243a6e58d5ca49c7b59b995253fd"
|
|
"6c79a3de69f85e3131f3b9238224b122c3e4a892d9196ada"
|
|
"4fcfa583e1df8af9b474c7e89286a1754abcb06ae8abb93f"
|
|
"01d89a024cdce7a6d7288ff68c320f89f1347e0cdd905ecf"
|
|
"d160c5d0ef412ed6")
|
|
|
|
# Fourth number generated by random.getrandbits(1024) - seed(4,2), not a prime
|
|
RANDOM_1024_BIT_SEED_4_NO4 = ("32decd6b8efbc170a26a25c852175b7a96b98b5fbf37a2be"
|
|
"6f98bca35b17b9662f0733c846bbe9e870ef55b1a1f65507"
|
|
"a2909cb633e238b4e9dd38b869ace91311021c9e32111ac1"
|
|
"ac7cc4a4ff4dab102522d53857c49391b36cc9aa78a330a1"
|
|
"a5e333cb88dcf94384d4cd1f47ca7883ff5a52f1a05885ac"
|
|
"7671863c0bdbc23a")
|
|
|
|
# Fifth number generated by random.getrandbits(1024) - seed(4,2), not a prime
|
|
RANDOM_1024_BIT_SEED_4_NO5 = ("53be4721f5b9e1f5acdac615bc20f6264922b9ccf469aef8"
|
|
"f6e7d078e55b85dd1525f363b281b8885b69dc230af5ac87"
|
|
"0692b534758240df4a7a03052d733dcdef40af2e54c0ce68"
|
|
"1f44ebd13cc75f3edcb285f89d8cf4d4950b16ffc3e1ac3b"
|
|
"4708d9893a973000b54a23020fc5b043d6e4a51519d9c9cc"
|
|
"52d32377e78131c1")
|
|
|
|
# Adding 192 bit and 1024 bit numbers because these are the shortest required
|
|
# for ECC and RSA respectively.
|
|
INPUTS_DEFAULT = [
|
|
"0", "1", # corner cases
|
|
"2", "3", # small primes
|
|
"4", # non-prime even
|
|
"38", # small random
|
|
SAFE_PRIME_192_BIT_SEED_1, # prime
|
|
RANDOM_192_BIT_SEED_2_NO1, # not a prime
|
|
RANDOM_192_BIT_SEED_2_NO2, # not a prime
|
|
SAFE_PRIME_1024_BIT_SEED_3, # prime
|
|
RANDOM_1024_BIT_SEED_4_NO1, # not a prime
|
|
RANDOM_1024_BIT_SEED_4_NO3, # not a prime
|
|
RANDOM_1024_BIT_SEED_4_NO2, # largest (not a prime)
|
|
]
|
|
|
|
ADD_SUB_DATA = [
|
|
"0", "1", "3", "f", "fe", "ff", "100", "ff00",
|
|
"fffe", "ffff", "10000", # 2^16 - 1, 2^16, 2^16 + 1
|
|
"fffffffe", "ffffffff", "100000000", # 2^32 - 1, 2^32, 2^32 + 1
|
|
"1f7f7f7f7f7f7f",
|
|
"8000000000000000", "fefefefefefefefe",
|
|
"fffffffffffffffe", "ffffffffffffffff", "10000000000000000", # 2^64 - 1, 2^64, 2^64 + 1
|
|
"1234567890abcdef0",
|
|
"fffffffffffffffffffffffe",
|
|
"ffffffffffffffffffffffff",
|
|
"1000000000000000000000000",
|
|
"fffffffffffffffffefefefefefefefe",
|
|
"fffffffffffffffffffffffffffffffe",
|
|
"ffffffffffffffffffffffffffffffff",
|
|
"100000000000000000000000000000000",
|
|
"1234567890abcdef01234567890abcdef0",
|
|
"fffffffffffffffffffffffffffffffffffffffffffffffffefefefefefefefe",
|
|
"fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffe",
|
|
"ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff",
|
|
"10000000000000000000000000000000000000000000000000000000000000000",
|
|
"1234567890abcdef01234567890abcdef01234567890abcdef01234567890abcdef0",
|
|
]
|
|
|
|
# Only odd moduli are present as in the new bignum code only odd moduli are
|
|
# supported for now.
|
|
MODULI_DEFAULT = [
|
|
"53", # safe prime
|
|
"45", # non-prime
|
|
SAFE_PRIME_192_BIT_SEED_1, # safe prime
|
|
RANDOM_192_BIT_SEED_2_NO4, # not a prime
|
|
SAFE_PRIME_1024_BIT_SEED_3, # safe prime
|
|
RANDOM_1024_BIT_SEED_4_NO5, # not a prime
|
|
]
|
|
|
|
# Some functions, e.g. mbedtls_mpi_mod_raw_inv_prime(), only support prime moduli.
|
|
ONLY_PRIME_MODULI = [
|
|
"53", # safe prime
|
|
"8ac72304057392b5", # 9999999997777777333 (longer, not safe, prime)
|
|
# The next prime has a different R in Montgomery form depending on
|
|
# whether 32- or 64-bit MPIs are used.
|
|
"152d02c7e14af67fe0bf", # 99999999999999999991999
|
|
SAFE_PRIME_192_BIT_SEED_1, # safe prime
|
|
SAFE_PRIME_1024_BIT_SEED_3, # safe prime
|
|
]
|
|
|
|
def __gen_safe_prime(bits, seed):
|
|
'''
|
|
Generate a safe prime.
|
|
|
|
This function is intended for generating constants offline and shouldn't be
|
|
used in test generation classes.
|
|
|
|
Requires pycryptodomex for getPrime and isPrime and python 3.9 or later for
|
|
randbytes.
|
|
'''
|
|
rng = random.Random()
|
|
# We want reproducibility across python versions
|
|
rng.seed(seed, version=2)
|
|
while True:
|
|
prime = 2*getPrime(bits-1, rng.randbytes)+1 #pylint: disable=no-member
|
|
if isPrime(prime, 1e-30):
|
|
return prime
|