crypto/ecc/ecp_test.c

f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers/*
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * ***** BEGIN LICENSE BLOCK *****
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * Version: MPL 1.1/GPL 2.0/LGPL 2.1
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers *
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * The contents of this file are subject to the Mozilla Public License Version
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * 1.1 (the "License"); you may not use this file except in compliance with
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * the License. You may obtain a copy of the License at
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * http://www.mozilla.org/MPL/
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers *
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * Software distributed under the License is distributed on an "AS IS" basis,
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * for the specific language governing rights and limitations under the
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * License.
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers *
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * The Original Code is the elliptic curve math library for prime field curves.
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers *
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * The Initial Developer of the Original Code is
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * Sun Microsystems, Inc.
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * Portions created by the Initial Developer are Copyright (C) 2003
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * the Initial Developer. All Rights Reserved.
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers *
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * Contributor(s):
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers *   Douglas Stebila <douglas@stebila.ca>, Sun Microsystems Laboratories
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers *
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * Alternatively, the contents of this file may be used under the terms of
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * either the GNU General Public License Version 2 or later (the "GPL"), or
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * in which case the provisions of the GPL or the LGPL are applicable instead
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * of those above. If you wish to allow use of your version of this file only
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * under the terms of either the GPL or the LGPL, and not to allow others to
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * use your version of this file under the terms of the MPL, indicate your
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * decision by deleting the provisions above and replace them with the notice
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * and other provisions required by the GPL or the LGPL. If you do not delete
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * the provisions above, a recipient may use your version of this file under
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * the terms of any one of the MPL, the GPL or the LGPL.
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers *
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * ***** END LICENSE BLOCK ***** */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers/*
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * Copyright 2007 Sun Microsystems, Inc.  All rights reserved.
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * Use is subject to license terms.
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers *
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * Sun elects to use this software under the MPL license.
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#pragma ident   "%Z%%M% %I% %E% SMI"
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#ifdef _KERNEL
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/types.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/systm.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/param.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/modctl.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/ddi.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/crypto/spi.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/sysmacros.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/strsun.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/md5.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/sha1.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/sha2.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/random.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/conf.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/devops.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/sunddi.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/varargs.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/kmem.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/kstat.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/crypto/common.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#else
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <stdio.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <string.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <strings.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <assert.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <time.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/time.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include <sys/resource.h>
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#endif /* _KERNEL */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include "mpi.h"
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include "mplogic.h"
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include "mpprime.h"
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include "ecl.h"
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include "ecl-curve.h"
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include "ecp.h"
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include "ecc_impl.h"
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#include "ec.h"
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#ifndef KM_SLEEP
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#define KM_SLEEP    0
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#endif
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#ifndef _KERNEL
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers/* Time k repetitions of operation op. */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#define M_TimeOperation(op, k) { \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    double dStart, dNow, dUserTime; \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    struct rusage ru; \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    int i; \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    getrusage(RUSAGE_SELF, &ru); \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    dStart = (double)ru.ru_utime.tv_sec+(double)ru.ru_utime.tv_usec*0.000001; \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    for (i = 0; i < k; i++) { \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        { op; } \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }; \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    getrusage(RUSAGE_SELF, &ru); \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    dNow = (double)ru.ru_utime.tv_sec+(double)ru.ru_utime.tv_usec*0.000001; \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    dUserTime = dNow-dStart; \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (dUserTime) printf("    %-45s k: %6i, t: %6.2f sec\n", #op, k, dUserTime); \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers}
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#else
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#define M_TimeOperation(op, k)
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#endif
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers/* Test curve using generic field arithmetic. */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#define ECTEST_GENERIC_GFP(name_c, name) \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    printf("Testing %s using generic implementation...\n", name_c); \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    params = EC_GetNamedCurveParams(name, KM_SLEEP); \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (params == NULL) { \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers            printf("  Error: could not construct params.\n"); \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers            res = MP_NO; \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers            goto CLEANUP; \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    } \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECGroup_free(group); \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    group = ECGroup_fromHex(params, KM_SLEEP); \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (group == NULL) { \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  Error: could not construct group.\n"); \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        res = MP_NO; \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        goto CLEANUP; \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    } \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK( ectest_curve_GFp(group, ectestPrint, ectestTime, 1, KM_SLEEP) ); \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    printf("... okay.\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers/* Test curve using specific field arithmetic. */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#define ECTEST_NAMED_GFP(name_c, name) \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    printf("Testing %s using specific implementation...\n", name_c); \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECGroup_free(group); \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    group = ECGroup_fromName(name, KM_SLEEP); \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (group == NULL) { \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  Warning: could not construct group.\n"); \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("... failed; continuing with remaining tests.\n"); \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    } else { \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK( ectest_curve_GFp(group, ectestPrint, ectestTime, 0, KM_SLEEP) ); \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("... okay.\n"); \
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers/* Performs basic tests of elliptic curve cryptography over prime fields.
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * If tests fail, then it prints an error message, aborts, and returns an
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * error code. Otherwise, returns 0. */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowersint
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowersectest_curve_GFp(ECGroup *group, int ectestPrint, int ectestTime,
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers                 int generic, int kmflag)
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers{
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    mp_int one, order_1, gx, gy, rx, ry, n;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    int size;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    mp_err res;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    char s[1000];
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    /* initialize values */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(mp_init(&one, kmflag));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(mp_init(&order_1, kmflag));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(mp_init(&gx, kmflag));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(mp_init(&gy, kmflag));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(mp_init(&rx, kmflag));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(mp_init(&ry, kmflag));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(mp_init(&n, kmflag));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(mp_set_int(&one, 1));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(mp_sub(&group->order, &one, &order_1));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    /* encode base point */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (group->meth->field_dec) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(group->meth->field_dec(&group->genx, &gx, group->meth));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(group->meth->field_dec(&group->geny, &gy, group->meth));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    } else {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_copy(&group->genx, &gx));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_copy(&group->geny, &gy));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (ectestPrint) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        /* output base point */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  base point P:\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_toradix(&gx, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_toradix(&gy, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        if (group->meth->field_enc) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers            printf("  base point P (encoded):\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers            MP_CHECKOK(mp_toradix(&group->genx, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers            printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers            MP_CHECKOK(mp_toradix(&group->geny, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers            printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#ifdef ECL_ENABLE_GFP_PT_MUL_AFF
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    /* multiply base point by order - 1 and check for negative of base
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers     * point */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(ec_GFp_pt_mul_aff
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers               (&order_1, &group->genx, &group->geny, &rx, &ry, group));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (ectestPrint) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  (order-1)*P (affine):\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_toradix(&rx, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_toradix(&ry, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(group->meth->field_neg(&ry, &ry, group->meth));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if ((mp_cmp(&rx, &group->genx) != 0)
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        || (mp_cmp(&ry, &group->geny) != 0)) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  Error: invalid result (expected (- base point)).\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        res = MP_NO;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        goto CLEANUP;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#endif
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#ifdef ECL_ENABLE_GFP_PT_MUL_AFF
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    /* multiply base point by order - 1 and check for negative of base
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers     * point */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(ec_GFp_pt_mul_jac
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers               (&order_1, &group->genx, &group->geny, &rx, &ry, group));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (ectestPrint) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  (order-1)*P (jacobian):\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_toradix(&rx, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_toradix(&ry, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(group->meth->field_neg(&ry, &ry, group->meth));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if ((mp_cmp(&rx, &group->genx) != 0)
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        || (mp_cmp(&ry, &group->geny) != 0)) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  Error: invalid result (expected (- base point)).\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        res = MP_NO;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        goto CLEANUP;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#endif
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    /* multiply base point by order - 1 and check for negative of base
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers     * point */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(ECPoint_mul(group, &order_1, NULL, NULL, &rx, &ry));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (ectestPrint) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  (order-1)*P (ECPoint_mul):\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_toradix(&rx, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_toradix(&ry, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(mp_submod(&group->meth->irr, &ry, &group->meth->irr, &ry));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if ((mp_cmp(&rx, &gx) != 0) || (mp_cmp(&ry, &gy) != 0)) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  Error: invalid result (expected (- base point)).\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        res = MP_NO;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        goto CLEANUP;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    /* multiply base point by order - 1 and check for negative of base
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers     * point */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(ECPoint_mul(group, &order_1, &gx, &gy, &rx, &ry));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (ectestPrint) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  (order-1)*P (ECPoint_mul):\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_toradix(&rx, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_toradix(&ry, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(mp_submod(&group->meth->irr, &ry, &group->meth->irr, &ry));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if ((mp_cmp(&rx, &gx) != 0) || (mp_cmp(&ry, &gy) != 0)) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  Error: invalid result (expected (- base point)).\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        res = MP_NO;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        goto CLEANUP;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#ifdef ECL_ENABLE_GFP_PT_MUL_AFF
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    /* multiply base point by order and check for point at infinity */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(ec_GFp_pt_mul_aff
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers               (&group->order, &group->genx, &group->geny, &rx, &ry,
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers                group));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (ectestPrint) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  (order)*P (affine):\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_toradix(&rx, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_toradix(&ry, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (ec_GFp_pt_is_inf_aff(&rx, &ry) != MP_YES) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  Error: invalid result (expected point at infinity).\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        res = MP_NO;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        goto CLEANUP;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#endif
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#ifdef ECL_ENABLE_GFP_PT_MUL_JAC
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    /* multiply base point by order and check for point at infinity */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(ec_GFp_pt_mul_jac
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers               (&group->order, &group->genx, &group->geny, &rx, &ry,
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers                group));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (ectestPrint) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  (order)*P (jacobian):\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_toradix(&rx, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_toradix(&ry, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (ec_GFp_pt_is_inf_aff(&rx, &ry) != MP_YES) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  Error: invalid result (expected point at infinity).\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        res = MP_NO;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        goto CLEANUP;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#endif
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    /* multiply base point by order and check for point at infinity */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(ECPoint_mul(group, &group->order, NULL, NULL, &rx, &ry));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (ectestPrint) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  (order)*P (ECPoint_mul):\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_toradix(&rx, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_toradix(&ry, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (ec_GFp_pt_is_inf_aff(&rx, &ry) != MP_YES) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  Error: invalid result (expected point at infinity).\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        res = MP_NO;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        goto CLEANUP;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    /* multiply base point by order and check for point at infinity */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(ECPoint_mul(group, &group->order, &gx, &gy, &rx, &ry));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (ectestPrint) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  (order)*P (ECPoint_mul):\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_toradix(&rx, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_toradix(&ry, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (ec_GFp_pt_is_inf_aff(&rx, &ry) != MP_YES) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  Error: invalid result (expected point at infinity).\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        res = MP_NO;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        goto CLEANUP;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    /* check that (order-1)P + (order-1)P + P == (order-1)P */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(ECPoints_mul
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers               (group, &order_1, &order_1, &gx, &gy, &rx, &ry));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(ECPoints_mul(group, &one, &one, &rx, &ry, &rx, &ry));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (ectestPrint) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers            ("  (order-1)*P + (order-1)*P + P == (order-1)*P (ECPoints_mul):\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_toradix(&rx, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mp_toradix(&ry, s, 16));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("    %s\n", s);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(mp_submod(&group->meth->irr, &ry, &group->meth->irr, &ry));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if ((mp_cmp(&rx, &gx) != 0) || (mp_cmp(&ry, &gy) != 0)) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  Error: invalid result (expected (- base point)).\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        res = MP_NO;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        goto CLEANUP;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    /* test validate_point function */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (ECPoint_validate(group, &gx, &gy) != MP_YES) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  Error: validate point on base point failed.\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        res = MP_NO;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        goto CLEANUP;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    MP_CHECKOK(mp_add_d(&gy, 1, &ry));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (ECPoint_validate(group, &gx, &ry) != MP_NO) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  Error: validate point on invalid point passed.\n");
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        res = MP_NO;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        goto CLEANUP;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (ectestTime) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        /* compute random scalar */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        size = mpl_significant_bits(&group->meth->irr);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        if (size < MP_OKAY) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers            goto CLEANUP;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(mpp_random_size(&n, (size + ECL_BITS - 1) / ECL_BITS));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        MP_CHECKOK(group->meth->field_mod(&n, &n, group->meth));
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        /* timed test */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        if (generic) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#ifdef ECL_ENABLE_GFP_PT_MUL_AFF
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers            M_TimeOperation(MP_CHECKOK
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers                            (ec_GFp_pt_mul_aff
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers                             (&n, &group->genx, &group->geny, &rx, &ry,
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers                              group)), 100);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#endif
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers            M_TimeOperation(MP_CHECKOK
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers                            (ECPoint_mul(group, &n, NULL, NULL, &rx, &ry)),
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers                            100);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers            M_TimeOperation(MP_CHECKOK
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers                            (ECPoints_mul
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers                             (group, &n, &n, &gx, &gy, &rx, &ry)), 100);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        } else {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers            M_TimeOperation(MP_CHECKOK
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers                            (ECPoint_mul(group, &n, NULL, NULL, &rx, &ry)),
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers                            100);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers            M_TimeOperation(MP_CHECKOK
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers                            (ECPoint_mul(group, &n, &gx, &gy, &rx, &ry)),
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers                            100);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers            M_TimeOperation(MP_CHECKOK
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers                            (ECPoints_mul
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers                             (group, &n, &n, &gx, &gy, &rx, &ry)), 100);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers  CLEANUP:
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    mp_clear(&one);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    mp_clear(&order_1);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    mp_clear(&gx);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    mp_clear(&gy);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    mp_clear(&rx);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    mp_clear(&ry);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    mp_clear(&n);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (res != MP_OKAY) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#ifdef _KERNEL
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  Error: exiting with error value 0x%x\n", res);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#else
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("  Error: exiting with error value %i\n", res);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#endif
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    return res;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers}
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers/* Performs tests of elliptic curve cryptography over prime fields If
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * tests fail, then it prints an error message, aborts, and returns an
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers * error code. Otherwise, returns 0. */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowersint
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowersecp_test()
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers{
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    int ectestTime = 0;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    int ectestPrint = 0;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    int i;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECGroup *group = NULL;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECCurveParams *params = NULL;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    mp_err res;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    /* generic arithmetic tests */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_GENERIC_GFP("SECP-160R1", ECCurve_SECG_PRIME_160R1);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    /* specific arithmetic tests */
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("NIST-P192", ECCurve_NIST_P192);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("NIST-P224", ECCurve_NIST_P224);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("NIST-P256", ECCurve_NIST_P256);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("NIST-P384", ECCurve_NIST_P384);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("NIST-P521", ECCurve_NIST_P521);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("ANSI X9.62 PRIME192v1", ECCurve_X9_62_PRIME_192V1);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("ANSI X9.62 PRIME192v2", ECCurve_X9_62_PRIME_192V2);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("ANSI X9.62 PRIME192v3", ECCurve_X9_62_PRIME_192V3);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("ANSI X9.62 PRIME239v1", ECCurve_X9_62_PRIME_239V1);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("ANSI X9.62 PRIME239v2", ECCurve_X9_62_PRIME_239V2);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("ANSI X9.62 PRIME239v3", ECCurve_X9_62_PRIME_239V3);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("ANSI X9.62 PRIME256v1", ECCurve_X9_62_PRIME_256V1);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("SECP-112R1", ECCurve_SECG_PRIME_112R1);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("SECP-112R2", ECCurve_SECG_PRIME_112R2);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("SECP-128R1", ECCurve_SECG_PRIME_128R1);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("SECP-128R2", ECCurve_SECG_PRIME_128R2);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("SECP-160K1", ECCurve_SECG_PRIME_160K1);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("SECP-160R1", ECCurve_SECG_PRIME_160R1);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("SECP-160R2", ECCurve_SECG_PRIME_160R2);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("SECP-192K1", ECCurve_SECG_PRIME_192K1);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("SECP-192R1", ECCurve_SECG_PRIME_192R1);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("SECP-224K1", ECCurve_SECG_PRIME_224K1);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("SECP-224R1", ECCurve_SECG_PRIME_224R1);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("SECP-256K1", ECCurve_SECG_PRIME_256K1);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("SECP-256R1", ECCurve_SECG_PRIME_256R1);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("SECP-384R1", ECCurve_SECG_PRIME_384R1);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("SECP-521R1", ECCurve_SECG_PRIME_521R1);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("WTLS-6 (112)", ECCurve_WTLS_6);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("WTLS-7 (160)", ECCurve_WTLS_7);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("WTLS-8 (112)", ECCurve_WTLS_8);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("WTLS-9 (160)", ECCurve_WTLS_9);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECTEST_NAMED_GFP("WTLS-12 (224)", ECCurve_WTLS_12);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers  CLEANUP:
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    EC_FreeCurveParams(params);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    ECGroup_free(group);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    if (res != MP_OKAY) {
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#ifdef _KERNEL
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("Error: exiting with error value 0x%x\n", res);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#else
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers        printf("Error: exiting with error value %i\n", res);
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers#endif
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    }
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers    return res;
f9fbec18f5b458b560ecf45d3db8e8bd56bf6942mcpowers}