66 lines
1.3 KiB
Go
66 lines
1.3 KiB
Go
// Copyright 2012 The Go Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
package curve25519
|
|
|
|
import (
|
|
"bytes"
|
|
"crypto/rand"
|
|
"fmt"
|
|
"testing"
|
|
)
|
|
|
|
const expectedHex = "89161fde887b2b53de549af483940106ecc114d6982daa98256de23bdf77661a"
|
|
|
|
func TestBaseScalarMult(t *testing.T) {
|
|
var a, b [32]byte
|
|
in := &a
|
|
out := &b
|
|
a[0] = 1
|
|
|
|
for i := 0; i < 200; i++ {
|
|
ScalarBaseMult(out, in)
|
|
in, out = out, in
|
|
}
|
|
|
|
result := fmt.Sprintf("%x", in[:])
|
|
if result != expectedHex {
|
|
t.Errorf("incorrect result: got %s, want %s", result, expectedHex)
|
|
}
|
|
}
|
|
|
|
// TestHighBitIgnored tests the following requirement in RFC 7748:
|
|
//
|
|
// When receiving such an array, implementations of X25519 (but not X448) MUST
|
|
// mask the most significant bit in the final byte.
|
|
//
|
|
// Regression test for issue #30095.
|
|
func TestHighBitIgnored(t *testing.T) {
|
|
var s, u [32]byte
|
|
rand.Read(s[:])
|
|
rand.Read(u[:])
|
|
|
|
var hi0, hi1 [32]byte
|
|
|
|
u[31] &= 0x7f
|
|
ScalarMult(&hi0, &s, &u)
|
|
|
|
u[31] |= 0x80
|
|
ScalarMult(&hi1, &s, &u)
|
|
|
|
if !bytes.Equal(hi0[:], hi1[:]) {
|
|
t.Errorf("high bit of group point should not affect result")
|
|
}
|
|
}
|
|
|
|
func BenchmarkScalarBaseMult(b *testing.B) {
|
|
var in, out [32]byte
|
|
in[0] = 1
|
|
|
|
b.SetBytes(32)
|
|
for i := 0; i < b.N; i++ {
|
|
ScalarBaseMult(&out, &in)
|
|
}
|
|
}
|