frost/secp256k1-zkp
3
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Verify num=openssl initialization and check repeatability

Browse Source
This commit is contained in:
Pieter Wuille 2014-10-26 05:38:54 -07:00
parent b650ab50f7
commit bff11e9112
No known key found for this signature in database
GPG Key ID: 57896D2FF8F0B657
3 changed files with 107 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/num_openssl.h
View File

@ -9,6 +9,9 @@
typedef struct { typedef struct {
BIGNUM bn; BIGNUM bn;
#ifdef VERIFY
void* init;
#endif
} secp256k1_num_t; } secp256k1_num_t;
#endif #endif

102
src/num_openssl_impl.h
View File

@ -15,22 +15,40 @@
#include "num.h" #include "num.h"
void static secp256k1_num_init(secp256k1_num_t *r) { void static secp256k1_num_init(secp256k1_num_t *r) {
#ifdef VERIFY
VERIFY_CHECK(r->init != r);
r->init = r;
#endif
BN_init(&r->bn); BN_init(&r->bn);
} }
void static secp256k1_num_free(secp256k1_num_t *r) { void static secp256k1_num_free(secp256k1_num_t *r) {
#ifdef VERIFY
VERIFY_CHECK(r->init == r);
r->init = NULL;
#endif
BN_free(&r->bn); BN_free(&r->bn);
} }
void static secp256k1_num_clear(secp256k1_num_t *r) { void static secp256k1_num_clear(secp256k1_num_t *r) {
#ifdef VERIFY
VERIFY_CHECK(r->init == r);
#endif
BN_clear(&r->bn); BN_clear(&r->bn);
} }
void static secp256k1_num_copy(secp256k1_num_t *r, const secp256k1_num_t *a) { void static secp256k1_num_copy(secp256k1_num_t *r, const secp256k1_num_t *a) {
#ifdef VERIFY
VERIFY_CHECK(r->init == r);
VERIFY_CHECK(a->init == a);
#endif
BN_copy(&r->bn, &a->bn); BN_copy(&r->bn, &a->bn);
} }
void static secp256k1_num_get_bin(unsigned char *r, unsigned int rlen, const secp256k1_num_t *a) { void static secp256k1_num_get_bin(unsigned char *r, unsigned int rlen, const secp256k1_num_t *a) {
#ifdef VERIFY
VERIFY_CHECK(a->init == a);
#endif
unsigned int size = BN_num_bytes(&a->bn); unsigned int size = BN_num_bytes(&a->bn);
VERIFY_CHECK(size <= rlen); VERIFY_CHECK(size <= rlen);
memset(r,0,rlen); memset(r,0,rlen);
@ -38,91 +56,164 @@ void static secp256k1_num_get_bin(unsigned char *r, unsigned int rlen, const sec
} }
void static secp256k1_num_set_bin(secp256k1_num_t *r, const unsigned char *a, unsigned int alen) { void static secp256k1_num_set_bin(secp256k1_num_t *r, const unsigned char *a, unsigned int alen) {
#ifdef VERIFY
VERIFY_CHECK(r->init == r);
#endif
BN_bin2bn(a, alen, &r->bn); BN_bin2bn(a, alen, &r->bn);
} }
void static secp256k1_num_set_int(secp256k1_num_t *r, int a) { void static secp256k1_num_set_int(secp256k1_num_t *r, int a) {
#ifdef VERIFY
VERIFY_CHECK(r->init == r);
#endif
BN_set_word(&r->bn, a < 0 ? -a : a); BN_set_word(&r->bn, a < 0 ? -a : a);
BN_set_negative(&r->bn, a < 0); BN_set_negative(&r->bn, a < 0);
} }
void static secp256k1_num_mod_inverse(secp256k1_num_t *r, const secp256k1_num_t *a, const secp256k1_num_t *m) { void static secp256k1_num_mod_inverse(secp256k1_num_t *r, const secp256k1_num_t *a, const secp256k1_num_t *m) {
#ifdef VERIFY
VERIFY_CHECK(r->init == r);
VERIFY_CHECK(a->init == a);
VERIFY_CHECK(m->init == m);
#endif
BN_CTX *ctx = BN_CTX_new(); BN_CTX *ctx = BN_CTX_new();
BN_mod_inverse(&r->bn, &a->bn, &m->bn, ctx); BN_mod_inverse(&r->bn, &a->bn, &m->bn, ctx);
BN_CTX_free(ctx); BN_CTX_free(ctx);
} }
void static secp256k1_num_mod_mul(secp256k1_num_t *r, const secp256k1_num_t *a, const secp256k1_num_t *b, const secp256k1_num_t *m) { void static secp256k1_num_mod_mul(secp256k1_num_t *r, const secp256k1_num_t *a, const secp256k1_num_t *b, const secp256k1_num_t *m) {
#ifdef VERIFY
VERIFY_CHECK(r->init == r);
VERIFY_CHECK(a->init == a);
VERIFY_CHECK(b->init == b);
VERIFY_CHECK(m->init == m);
#endif
BN_CTX *ctx = BN_CTX_new(); BN_CTX *ctx = BN_CTX_new();
BN_mod_mul(&r->bn, &a->bn, &b->bn, &m->bn, ctx); BN_mod_mul(&r->bn, &a->bn, &b->bn, &m->bn, ctx);
BN_CTX_free(ctx); BN_CTX_free(ctx);
} }
int static secp256k1_num_cmp(const secp256k1_num_t *a, const secp256k1_num_t *b) { int static secp256k1_num_cmp(const secp256k1_num_t *a, const secp256k1_num_t *b) {
#ifdef VERIFY
VERIFY_CHECK(a->init == a);
VERIFY_CHECK(b->init == b);
#endif
return BN_ucmp(&a->bn, &b->bn); return BN_ucmp(&a->bn, &b->bn);
} }
int static secp256k1_num_eq(const secp256k1_num_t *a, const secp256k1_num_t *b) { int static secp256k1_num_eq(const secp256k1_num_t *a, const secp256k1_num_t *b) {
#ifdef VERIFY
VERIFY_CHECK(a->init == a);
VERIFY_CHECK(b->init == b);
#endif
return BN_cmp(&a->bn, &b->bn) == 0; return BN_cmp(&a->bn, &b->bn) == 0;
} }
void static secp256k1_num_add(secp256k1_num_t *r, const secp256k1_num_t *a, const secp256k1_num_t *b) { void static secp256k1_num_add(secp256k1_num_t *r, const secp256k1_num_t *a, const secp256k1_num_t *b) {
#ifdef VERIFY
VERIFY_CHECK(r->init == r);
VERIFY_CHECK(a->init == a);
VERIFY_CHECK(b->init == b);
#endif
BN_add(&r->bn, &a->bn, &b->bn); BN_add(&r->bn, &a->bn, &b->bn);
} }
void static secp256k1_num_sub(secp256k1_num_t *r, const secp256k1_num_t *a, const secp256k1_num_t *b) { void static secp256k1_num_sub(secp256k1_num_t *r, const secp256k1_num_t *a, const secp256k1_num_t *b) {
#ifdef VERIFY
VERIFY_CHECK(r->init == r);
VERIFY_CHECK(a->init == a);
VERIFY_CHECK(b->init == b);
#endif
BN_sub(&r->bn, &a->bn, &b->bn); BN_sub(&r->bn, &a->bn, &b->bn);
} }
void static secp256k1_num_mul(secp256k1_num_t *r, const secp256k1_num_t *a, const secp256k1_num_t *b) { void static secp256k1_num_mul(secp256k1_num_t *r, const secp256k1_num_t *a, const secp256k1_num_t *b) {
#ifdef VERIFY
VERIFY_CHECK(r->init == r);
VERIFY_CHECK(a->init == a);
VERIFY_CHECK(b->init == b);
#endif
BN_CTX *ctx = BN_CTX_new(); BN_CTX *ctx = BN_CTX_new();
BN_mul(&r->bn, &a->bn, &b->bn, ctx); BN_mul(&r->bn, &a->bn, &b->bn, ctx);
BN_CTX_free(ctx); BN_CTX_free(ctx);
} }
void static secp256k1_num_div(secp256k1_num_t *r, const secp256k1_num_t *a, const secp256k1_num_t *b) { void static secp256k1_num_div(secp256k1_num_t *r, const secp256k1_num_t *a, const secp256k1_num_t *b) {
#ifdef VERIFY
VERIFY_CHECK(r->init == r);
VERIFY_CHECK(a->init == a);
VERIFY_CHECK(b->init == b);
#endif
BN_CTX *ctx = BN_CTX_new(); BN_CTX *ctx = BN_CTX_new();
BN_div(&r->bn, NULL, &a->bn, &b->bn, ctx); BN_div(&r->bn, NULL, &a->bn, &b->bn, ctx);
BN_CTX_free(ctx); BN_CTX_free(ctx);
} }
void static secp256k1_num_mod(secp256k1_num_t *r, const secp256k1_num_t *m) { void static secp256k1_num_mod(secp256k1_num_t *r, const secp256k1_num_t *m) {
#ifdef VERIFY
VERIFY_CHECK(r->init == r);
VERIFY_CHECK(m->init == m);
#endif
BN_CTX *ctx = BN_CTX_new(); BN_CTX *ctx = BN_CTX_new();
BN_nnmod(&r->bn, &r->bn, &m->bn, ctx); BN_nnmod(&r->bn, &r->bn, &m->bn, ctx);
BN_CTX_free(ctx); BN_CTX_free(ctx);
} }
int static secp256k1_num_bits(const secp256k1_num_t *a) { int static secp256k1_num_bits(const secp256k1_num_t *a) {
#ifdef VERIFY
VERIFY_CHECK(a->init == a);
#endif
return BN_num_bits(&a->bn); return BN_num_bits(&a->bn);
} }
int static secp256k1_num_shift(secp256k1_num_t *r, int bits) { int static secp256k1_num_shift(secp256k1_num_t *r, int bits) {
#ifdef VERIFY
VERIFY_CHECK(r->init == r);
#endif
int ret = BN_is_zero(&r->bn) ? 0 : r->bn.d[0] & ((1 << bits) - 1); int ret = BN_is_zero(&r->bn) ? 0 : r->bn.d[0] & ((1 << bits) - 1);
BN_rshift(&r->bn, &r->bn, bits); BN_rshift(&r->bn, &r->bn, bits);
return ret; return ret;
} }
int static secp256k1_num_is_zero(const secp256k1_num_t *a) { int static secp256k1_num_is_zero(const secp256k1_num_t *a) {
#ifdef VERIFY
VERIFY_CHECK(a->init == a);
#endif
return BN_is_zero(&a->bn); return BN_is_zero(&a->bn);
} }
int static secp256k1_num_is_odd(const secp256k1_num_t *a) { int static secp256k1_num_is_odd(const secp256k1_num_t *a) {
#ifdef VERIFY
VERIFY_CHECK(a->init == a);
#endif
return BN_is_odd(&a->bn); return BN_is_odd(&a->bn);
} }
int static secp256k1_num_is_neg(const secp256k1_num_t *a) { int static secp256k1_num_is_neg(const secp256k1_num_t *a) {
#ifdef VERIFY
VERIFY_CHECK(a->init == a);
#endif
return BN_is_negative(&a->bn); return BN_is_negative(&a->bn);
} }
int static secp256k1_num_get_bit(const secp256k1_num_t *a, int pos) { int static secp256k1_num_get_bit(const secp256k1_num_t *a, int pos) {
#ifdef VERIFY
VERIFY_CHECK(a->init == a);
#endif
return BN_is_bit_set(&a->bn, pos); return BN_is_bit_set(&a->bn, pos);
} }
void static secp256k1_num_inc(secp256k1_num_t *r) { void static secp256k1_num_inc(secp256k1_num_t *r) {
#ifdef VERIFY
VERIFY_CHECK(r->init == r);
#endif
BN_add_word(&r->bn, 1); BN_add_word(&r->bn, 1);
} }
void static secp256k1_num_set_hex(secp256k1_num_t *r, const char *a, int alen) { void static secp256k1_num_set_hex(secp256k1_num_t *r, const char *a, int alen) {
#ifdef VERIFY
VERIFY_CHECK(r->init == r);
#endif
char *str = (char*)malloc(alen+1); char *str = (char*)malloc(alen+1);
memcpy(str, a, alen); memcpy(str, a, alen);
str[alen] = 0; str[alen] = 0;
@ -132,6 +223,9 @@ void static secp256k1_num_set_hex(secp256k1_num_t *r, const char *a, int alen) {
} }
void static secp256k1_num_get_hex(char *r, int rlen, const secp256k1_num_t *a) { void static secp256k1_num_get_hex(char *r, int rlen, const secp256k1_num_t *a) {
#ifdef VERIFY
VERIFY_CHECK(a->init == a);
#endif
char *str = BN_bn2hex(&a->bn); char *str = BN_bn2hex(&a->bn);
int len = strlen(str); int len = strlen(str);
VERIFY_CHECK(rlen >= len); VERIFY_CHECK(rlen >= len);
@ -142,12 +236,20 @@ void static secp256k1_num_get_hex(char *r, int rlen, const secp256k1_num_t *a) {
} }
void static secp256k1_num_split(secp256k1_num_t *rl, secp256k1_num_t *rh, const secp256k1_num_t *a, int bits) { void static secp256k1_num_split(secp256k1_num_t *rl, secp256k1_num_t *rh, const secp256k1_num_t *a, int bits) {
#ifdef VERIFY
VERIFY_CHECK(a->init == a);
VERIFY_CHECK(rl->init == rl);
VERIFY_CHECK(rh->init == rh);
#endif
BN_copy(&rl->bn, &a->bn); BN_copy(&rl->bn, &a->bn);
BN_rshift(&rh->bn, &a->bn, bits); BN_rshift(&rh->bn, &a->bn, bits);
BN_mask_bits(&rl->bn, bits); BN_mask_bits(&rl->bn, bits);
} }
void static secp256k1_num_negate(secp256k1_num_t *r) { void static secp256k1_num_negate(secp256k1_num_t *r) {
#ifdef VERIFY
VERIFY_CHECK(r->init == r);
#endif
BN_set_negative(&r->bn, !BN_is_negative(&r->bn)); BN_set_negative(&r->bn, !BN_is_negative(&r->bn));
} }

2
src/tests.c
View File

@ -746,6 +746,8 @@ int main(int argc, char **argv) {
run_ecdsa_openssl(); run_ecdsa_openssl();
#endif #endif
printf("random run = %llu\n", (unsigned long long)secp256k1_rand32() + (unsigned long long)secp256k1_rand32() << 32);
// shutdown // shutdown
secp256k1_stop(); secp256k1_stop();
return 0; return 0;