commit 8b59049407f337cf9813f9012a81f6587e6c4d98
author Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> Mon Aug 14 18:04:19 2017 +0200
committer Manuel Pégourié-Gonnard <manuel.pegourie-gonnard@arm.com> Tue Aug 15 10:45:09 2017 +0200
tree e13cb0ece56684aedb1fd6cef098e1e1173715ed
parent c11e4baa6336073cf9432a7bca8ced78465c4a04

Make verify() actually restartable

tests/suites/test_suite_x509parse.function

diff --git a/tests/suites/test_suite_x509parse.function b/tests/suites/test_suite_x509parse.function
index f899eb0..c12aaef 100644
--- a/tests/suites/test_suite_x509parse.function
+++ b/tests/suites/test_suite_x509parse.function
@@ -272,6 +272,16 @@
     mbedtls_x509_crt ca;
     uint32_t flags = 0;
 
+    /*
+     * See comments on ecp_test_vect_restart() for op count precision.
+     *
+     * For reference, with mbed TLS 2.6 and default settings:
+     * - ecdsa_verify() for P-256:  ~  6700
+     * - ecdsa_verify() for P-384:  ~ 18800
+     * - x509_verify() for server5 -> test-ca2:             ~ 18800
+     * - x509_verify() for server10 -> int-ca3 -> int-ca2:  ~ 25500
+     */
+
     mbedtls_x509_crt_restart_init( &rs_ctx );
     mbedtls_x509_crt_init( &crt );
     mbedtls_x509_crt_init( &ca );