-rw-r--r-- 10067 libntruprime-20240825/command/ntruprime-test_kem_sntrup953.c raw
/* ----- kem/sntrup953, derived from supercop/crypto_kem/try.c */
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <stdint.h>
#include <ntruprime.h>
#include "ntruprime_test.h"
#define fail ((ok = 0),printf)
static const char *kem_sntrup953_checksums[] = {
"6f497ec200d79d3a509f5b6ba13489ca97ce9bf9238e07c9079b62e77112828c",
"f09bd596d313fce6981b8d8135205442866823f295e68195257fa035188727c5",
} ;
static int (*crypto_kem_keypair)(unsigned char *,unsigned char *);
static int (*crypto_kem_enc)(unsigned char *,unsigned char *,const unsigned char *);
static int (*crypto_kem_dec)(unsigned char *,const unsigned char *,const unsigned char *);
#define crypto_kem_SECRETKEYBYTES ntruprime_kem_sntrup953_SECRETKEYBYTES
#define crypto_kem_PUBLICKEYBYTES ntruprime_kem_sntrup953_PUBLICKEYBYTES
#define crypto_kem_CIPHERTEXTBYTES ntruprime_kem_sntrup953_CIPHERTEXTBYTES
#define crypto_kem_BYTES ntruprime_kem_sntrup953_BYTES
static void *storage_kem_sntrup953_p;
static unsigned char *test_kem_sntrup953_p;
static void *storage_kem_sntrup953_s;
static unsigned char *test_kem_sntrup953_s;
static void *storage_kem_sntrup953_k;
static unsigned char *test_kem_sntrup953_k;
static void *storage_kem_sntrup953_c;
static unsigned char *test_kem_sntrup953_c;
static void *storage_kem_sntrup953_t;
static unsigned char *test_kem_sntrup953_t;
static void *storage_kem_sntrup953_p2;
static unsigned char *test_kem_sntrup953_p2;
static void *storage_kem_sntrup953_s2;
static unsigned char *test_kem_sntrup953_s2;
static void *storage_kem_sntrup953_k2;
static unsigned char *test_kem_sntrup953_k2;
static void *storage_kem_sntrup953_c2;
static unsigned char *test_kem_sntrup953_c2;
static void *storage_kem_sntrup953_t2;
static unsigned char *test_kem_sntrup953_t2;
static void test_kem_sntrup953_impl(long long impl)
{
unsigned char *p = test_kem_sntrup953_p;
unsigned char *s = test_kem_sntrup953_s;
unsigned char *k = test_kem_sntrup953_k;
unsigned char *c = test_kem_sntrup953_c;
unsigned char *t = test_kem_sntrup953_t;
unsigned char *p2 = test_kem_sntrup953_p2;
unsigned char *s2 = test_kem_sntrup953_s2;
unsigned char *k2 = test_kem_sntrup953_k2;
unsigned char *c2 = test_kem_sntrup953_c2;
unsigned char *t2 = test_kem_sntrup953_t2;
long long plen = crypto_kem_PUBLICKEYBYTES;
long long slen = crypto_kem_SECRETKEYBYTES;
long long klen = crypto_kem_BYTES;
long long clen = crypto_kem_CIPHERTEXTBYTES;
long long tlen = crypto_kem_BYTES;
if (targeti && strcmp(targeti,".") && strcmp(targeti,ntruprime_dispatch_kem_sntrup953_implementation(impl))) return;
if (targetn && atol(targetn) != impl) return;
if (impl >= 0) {
crypto_kem_keypair = ntruprime_dispatch_kem_sntrup953_keypair(impl);
crypto_kem_enc = ntruprime_dispatch_kem_sntrup953_enc(impl);
crypto_kem_dec = ntruprime_dispatch_kem_sntrup953_dec(impl);
printf("kem_sntrup953 %lld implementation %s compiler %s\n",impl,ntruprime_dispatch_kem_sntrup953_implementation(impl),ntruprime_dispatch_kem_sntrup953_compiler(impl));
} else {
crypto_kem_keypair = ntruprime_kem_sntrup953_keypair;
crypto_kem_enc = ntruprime_kem_sntrup953_enc;
crypto_kem_dec = ntruprime_kem_sntrup953_dec;
printf("kem_sntrup953 selected implementation %s compiler %s\n",ntruprime_kem_sntrup953_implementation(),ntruprime_kem_sntrup953_compiler());
}
for (long long checksumbig = 0;checksumbig < 2;++checksumbig) {
long long loops = checksumbig ? 64 : 8;
checksum_clear();
for (long long loop = 0;loop < loops;++loop) {
int result;
output_prepare(p2,p,plen);
output_prepare(s2,s,slen);
result = crypto_kem_keypair(p,s);
public(&result,sizeof result);
if (result != 0) fail("failure: crypto_kem_keypair returns nonzero\n");
public(p,plen);
public(s,slen);
checksum(p,plen);
checksum(s,slen);
output_compare(p2,p,plen,"crypto_kem_keypair");
output_compare(s2,s,slen,"crypto_kem_keypair");
output_prepare(c2,c,clen);
output_prepare(k2,k,klen);
memcpy(p2,p,plen);
double_canary(p2,p,plen);
secret(p,plen);
result = crypto_kem_enc(c,k,p);
public(&result,sizeof result);
if (result != 0) fail("failure: crypto_kem_enc returns nonzero\n");
public(p,plen);
public(c,clen);
public(k,klen);
checksum(c,clen);
checksum(k,klen);
output_compare(c2,c,clen,"crypto_kem_enc");
output_compare(k2,k,klen,"crypto_kem_enc");
input_compare(p2,p,plen,"crypto_kem_enc");
output_prepare(t2,t,tlen);
memcpy(c2,c,clen);
double_canary(c2,c,clen);
memcpy(s2,s,slen);
double_canary(s2,s,slen);
secret(c,clen);
secret(s,slen);
result = crypto_kem_dec(t,c,s);
public(&result,sizeof result);
if (result != 0) fail("failure: crypto_kem_dec returns nonzero\n");
public(c,clen);
public(s,slen);
public(t,tlen);
if (memcmp(t,k,klen) != 0) fail("failure: crypto_kem_dec does not match k\n");
checksum(t,tlen);
output_compare(t2,t,tlen,"crypto_kem_dec");
input_compare(c2,c,clen,"crypto_kem_dec");
input_compare(s2,s,slen,"crypto_kem_dec");
double_canary(t2,t,tlen);
double_canary(c2,c,clen);
double_canary(s2,s,slen);
secret(c2,clen);
secret(s2,slen);
result = crypto_kem_dec(t2,c2,s2);
public(&result,sizeof result);
if (result != 0) fail("failure: crypto_kem_dec returns nonzero\n");
public(c2,clen);
public(s2,slen);
public(t2,tlen);
if (memcmp(t2,t,tlen) != 0) fail("failure: crypto_kem_dec is nondeterministic\n");
double_canary(t2,t,tlen);
double_canary(c2,c,clen);
double_canary(s2,s,slen);
secret(c2,clen);
secret(s,slen);
result = crypto_kem_dec(c2,c2,s);
public(&result,sizeof result);
if (result != 0) fail("failure: crypto_kem_dec with c=t overlap returns nonzero\n");
public(c2,tlen);
public(s,slen);
if (memcmp(c2,t,tlen) != 0) fail("failure: crypto_kem_dec does not handle c=t overlap\n");
memcpy(c2,c,clen);
secret(c,clen);
secret(s2,slen);
result = crypto_kem_dec(s2,c,s2);
public(&result,sizeof result);
if (result != 0) fail("failure: crypto_kem_dec with s=t overlap returns nonzero\n");
public(s2,tlen);
public(c,clen);
if (memcmp(s2,t,tlen) != 0) fail("failure: crypto_kem_dec does not handle s=t overlap\n");
memcpy(s2,s,slen);
c[myrandom() % clen] += 1 + (myrandom() % 255);
if (crypto_kem_dec(t,c,s) == 0)
checksum(t,tlen);
else
checksum(c,clen);
c[myrandom() % clen] += 1 + (myrandom() % 255);
if (crypto_kem_dec(t,c,s) == 0)
checksum(t,tlen);
else
checksum(c,clen);
c[myrandom() % clen] += 1 + (myrandom() % 255);
if (crypto_kem_dec(t,c,s) == 0)
checksum(t,tlen);
else
checksum(c,clen);
}
checksum_expected(kem_sntrup953_checksums[checksumbig]);
}
}
void test_kem_sntrup953(void)
{
long long maxalloc = 0;
if (targeto && strcmp(targeto,"kem")) return;
if (targetp && strcmp(targetp,"sntrup953")) return;
storage_kem_sntrup953_p = callocplus(crypto_kem_PUBLICKEYBYTES);
test_kem_sntrup953_p = aligned(storage_kem_sntrup953_p,crypto_kem_PUBLICKEYBYTES);
if (crypto_kem_PUBLICKEYBYTES > maxalloc) maxalloc = crypto_kem_PUBLICKEYBYTES;
storage_kem_sntrup953_s = callocplus(crypto_kem_SECRETKEYBYTES);
test_kem_sntrup953_s = aligned(storage_kem_sntrup953_s,crypto_kem_SECRETKEYBYTES);
if (crypto_kem_SECRETKEYBYTES > maxalloc) maxalloc = crypto_kem_SECRETKEYBYTES;
storage_kem_sntrup953_k = callocplus(crypto_kem_BYTES);
test_kem_sntrup953_k = aligned(storage_kem_sntrup953_k,crypto_kem_BYTES);
if (crypto_kem_BYTES > maxalloc) maxalloc = crypto_kem_BYTES;
storage_kem_sntrup953_c = callocplus(crypto_kem_CIPHERTEXTBYTES);
test_kem_sntrup953_c = aligned(storage_kem_sntrup953_c,crypto_kem_CIPHERTEXTBYTES);
if (crypto_kem_CIPHERTEXTBYTES > maxalloc) maxalloc = crypto_kem_CIPHERTEXTBYTES;
storage_kem_sntrup953_t = callocplus(crypto_kem_BYTES);
test_kem_sntrup953_t = aligned(storage_kem_sntrup953_t,crypto_kem_BYTES);
if (crypto_kem_BYTES > maxalloc) maxalloc = crypto_kem_BYTES;
storage_kem_sntrup953_p2 = callocplus(maxalloc);
test_kem_sntrup953_p2 = aligned(storage_kem_sntrup953_p2,crypto_kem_PUBLICKEYBYTES);
storage_kem_sntrup953_s2 = callocplus(maxalloc);
test_kem_sntrup953_s2 = aligned(storage_kem_sntrup953_s2,crypto_kem_SECRETKEYBYTES);
storage_kem_sntrup953_k2 = callocplus(maxalloc);
test_kem_sntrup953_k2 = aligned(storage_kem_sntrup953_k2,crypto_kem_BYTES);
storage_kem_sntrup953_c2 = callocplus(maxalloc);
test_kem_sntrup953_c2 = aligned(storage_kem_sntrup953_c2,crypto_kem_CIPHERTEXTBYTES);
storage_kem_sntrup953_t2 = callocplus(maxalloc);
test_kem_sntrup953_t2 = aligned(storage_kem_sntrup953_t2,crypto_kem_BYTES);
for (long long offset = 0;offset < 2;++offset) {
if (targetoffset && atol(targetoffset) != offset) continue;
if (offset && valgrind) break;
printf("kem_sntrup953 offset %lld\n",offset);
for (long long impl = -1;impl < ntruprime_numimpl_kem_sntrup953();++impl)
forked(test_kem_sntrup953_impl,impl);
++test_kem_sntrup953_p;
++test_kem_sntrup953_s;
++test_kem_sntrup953_k;
++test_kem_sntrup953_c;
++test_kem_sntrup953_t;
++test_kem_sntrup953_p2;
++test_kem_sntrup953_s2;
++test_kem_sntrup953_k2;
++test_kem_sntrup953_c2;
++test_kem_sntrup953_t2;
}
free(storage_kem_sntrup953_t2);
free(storage_kem_sntrup953_c2);
free(storage_kem_sntrup953_k2);
free(storage_kem_sntrup953_s2);
free(storage_kem_sntrup953_p2);
free(storage_kem_sntrup953_t);
free(storage_kem_sntrup953_c);
free(storage_kem_sntrup953_k);
free(storage_kem_sntrup953_s);
free(storage_kem_sntrup953_p);
}
#undef crypto_kem_SECRETKEYBYTES
#undef crypto_kem_PUBLICKEYBYTES
#undef crypto_kem_CIPHERTEXTBYTES
#undef crypto_kem_BYTES