blob: a6de92cf5a3adf09d664344db88fc0bcfa16266a [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/*
2 * Benchmark demonstration program
3 *
Bence Szépkúti1e148272020-08-07 13:07:28 +02004 * Copyright The Mbed TLS Contributors
Dave Rodgmane3c05852023-11-03 12:21:36 +00005 * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
Paul Bakker5121ce52009-01-03 21:22:43 +00006 */
7
Mateusz Starzyk6c2e9b62021-05-19 17:54:54 +02008#define MBEDTLS_ALLOW_PRIVATE_ACCESS
9
Bence Szépkútic662b362021-05-27 11:25:03 +020010#include "mbedtls/build_info.h"
Paul Bakker5121ce52009-01-03 21:22:43 +000011
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000012#include "mbedtls/platform.h"
Rich Evansf90016a2015-01-19 14:26:37 +000013
Andrzej Kurek6056e7a2022-03-02 12:01:10 -050014#if !defined(MBEDTLS_HAVE_TIME)
Gilles Peskine449bd832023-01-11 14:50:10 +010015int main(void)
Manuel Pégourié-Gonnard714929b2015-02-16 17:32:47 +000016{
Andrzej Kurek6056e7a2022-03-02 12:01:10 -050017 mbedtls_printf("MBEDTLS_HAVE_TIME not defined.\n");
Gilles Peskine449bd832023-01-11 14:50:10 +010018 mbedtls_exit(0);
Manuel Pégourié-Gonnard714929b2015-02-16 17:32:47 +000019}
20#else
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +010021
Manuel Pégourié-Gonnard714929b2015-02-16 17:32:47 +000022#include <string.h>
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +020023#include <stdlib.h>
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +010024
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000025#include "mbedtls/md5.h"
26#include "mbedtls/ripemd160.h"
27#include "mbedtls/sha1.h"
28#include "mbedtls/sha256.h"
29#include "mbedtls/sha512.h"
Pol Henarejosebb36402022-05-20 14:26:00 +020030#include "mbedtls/sha3.h"
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +010031
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000032#include "mbedtls/des.h"
33#include "mbedtls/aes.h"
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +010034#include "mbedtls/aria.h"
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000035#include "mbedtls/camellia.h"
Daniel King34b822c2016-05-15 17:28:08 -030036#include "mbedtls/chacha20.h"
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000037#include "mbedtls/gcm.h"
38#include "mbedtls/ccm.h"
Manuel Pégourié-Gonnardd6aea182018-05-09 10:21:28 +020039#include "mbedtls/chachapoly.h"
Simon Butcher549dc3d2016-10-05 14:14:19 +010040#include "mbedtls/cmac.h"
Daniel Kingadc32c02016-05-16 18:25:45 -030041#include "mbedtls/poly1305.h"
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +010042
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000043#include "mbedtls/ctr_drbg.h"
44#include "mbedtls/hmac_drbg.h"
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +010045
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000046#include "mbedtls/rsa.h"
47#include "mbedtls/dhm.h"
48#include "mbedtls/ecdsa.h"
49#include "mbedtls/ecdh.h"
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +010050
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000051#include "mbedtls/error.h"
Paul Bakker5121ce52009-01-03 21:22:43 +000052
David Horstmanne3d8f312023-01-03 11:07:09 +000053/* *INDENT-OFF* */
TRodziewicz90f304f2021-06-11 11:56:47 +020054#ifndef asm
55#define asm __asm
56#endif
David Horstmanne3d8f312023-01-03 11:07:09 +000057/* *INDENT-ON* */
TRodziewicz90f304f2021-06-11 11:56:47 +020058
TRodziewiczd8540832021-06-10 15:16:50 +020059#if defined(_WIN32) && !defined(EFIX64) && !defined(EFI32)
60
61#include <windows.h>
62#include <process.h>
63
Gilles Peskine449bd832023-01-11 14:50:10 +010064struct _hr_time {
TRodziewiczd8540832021-06-10 15:16:50 +020065 LARGE_INTEGER start;
66};
67
68#else
69
70#include <unistd.h>
71#include <sys/types.h>
72#include <sys/time.h>
73#include <signal.h>
74#include <time.h>
75
Gilles Peskine449bd832023-01-11 14:50:10 +010076struct _hr_time {
TRodziewiczd8540832021-06-10 15:16:50 +020077 struct timeval start;
78};
79
80#endif /* _WIN32 && !EFIX64 && !EFI32 */
81
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020082#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000083#include "mbedtls/memory_buffer_alloc.h"
Rich Evans18b78c72015-02-11 14:06:19 +000084#endif
85
Gilles Peskine449bd832023-01-11 14:50:10 +010086static void mbedtls_set_alarm(int seconds);
TRodziewiczd8540832021-06-10 15:16:50 +020087
Manuel Pégourié-Gonnard714929b2015-02-16 17:32:47 +000088/*
89 * For heap usage estimates, we need an estimate of the overhead per allocated
90 * block. ptmalloc2/3 (used in gnu libc for instance) uses 2 size_t per block,
91 * so use that as our baseline.
92 */
Gilles Peskine449bd832023-01-11 14:50:10 +010093#define MEM_BLOCK_OVERHEAD (2 * sizeof(size_t))
Manuel Pégourié-Gonnard714929b2015-02-16 17:32:47 +000094
95/*
Manuel Pégourié-Gonnardb2a18a22015-05-27 16:29:56 +020096 * Size to use for the alloc buffer if MEMORY_BUFFER_ALLOC_C is defined.
Manuel Pégourié-Gonnard714929b2015-02-16 17:32:47 +000097 */
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +010098#define HEAP_SIZE (1u << 16) /* 64k */
Manuel Pégourié-Gonnard714929b2015-02-16 17:32:47 +000099
Paul Bakker02faf452011-11-29 11:23:58 +0000100#define BUFSIZE 1024
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100101#define HEADER_FORMAT " %-24s : "
Gergely Budaia5d336b2014-01-27 23:27:06 +0100102#define TITLE_LEN 25
Manuel Pégourié-Gonnard6c5abfa2015-02-13 14:12:07 +0000103
Rich Evans85b05ec2015-02-12 11:37:29 +0000104#define OPTIONS \
Pol Henarejosebb36402022-05-20 14:26:00 +0200105 "md5, ripemd160, sha1, sha256, sha512,\n" \
106 "sha3_224, sha3_256, sha3_384, sha3_512,\n" \
107 "des3, des, camellia, chacha20,\n" \
Zhai Zhaoxuane22da992020-05-09 23:50:32 +0800108 "aes_cbc, aes_gcm, aes_ccm, aes_xts, chachapoly,\n" \
Daniel Kingadc32c02016-05-16 18:25:45 -0300109 "aes_cmac, des3_cmac, poly1305\n" \
Pol Henarejosebb36402022-05-20 14:26:00 +0200110 "ctr_drbg, hmac_drbg\n" \
Rich Evans85b05ec2015-02-12 11:37:29 +0000111 "rsa, dhm, ecdsa, ecdh.\n"
112
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200113#if defined(MBEDTLS_ERROR_C)
Rich Evans85b05ec2015-02-12 11:37:29 +0000114#define PRINT_ERROR \
Gilles Peskine449bd832023-01-11 14:50:10 +0100115 mbedtls_strerror(ret, (char *) tmp, sizeof(tmp)); \
116 mbedtls_printf("FAILED: %s\n", tmp);
Rich Evans85b05ec2015-02-12 11:37:29 +0000117#else
118#define PRINT_ERROR \
Gilles Peskine449bd832023-01-11 14:50:10 +0100119 mbedtls_printf("FAILED: -0x%04x\n", (unsigned int) -ret);
Rich Evans85b05ec2015-02-12 11:37:29 +0000120#endif
121
Gilles Peskine449bd832023-01-11 14:50:10 +0100122#define TIME_AND_TSC(TITLE, CODE) \
123 do { \
124 unsigned long ii, jj, tsc; \
125 int ret = 0; \
Rich Evans85b05ec2015-02-12 11:37:29 +0000126 \
Gilles Peskine449bd832023-01-11 14:50:10 +0100127 mbedtls_printf(HEADER_FORMAT, TITLE); \
128 fflush(stdout); \
Rich Evans85b05ec2015-02-12 11:37:29 +0000129 \
Gilles Peskine449bd832023-01-11 14:50:10 +0100130 mbedtls_set_alarm(1); \
131 for (ii = 1; ret == 0 && !mbedtls_timing_alarmed; ii++) \
132 { \
133 ret = CODE; \
134 } \
Rich Evans85b05ec2015-02-12 11:37:29 +0000135 \
Gilles Peskine449bd832023-01-11 14:50:10 +0100136 tsc = mbedtls_timing_hardclock(); \
137 for (jj = 0; ret == 0 && jj < 1024; jj++) \
138 { \
139 ret = CODE; \
140 } \
Rich Evans85b05ec2015-02-12 11:37:29 +0000141 \
Gilles Peskine449bd832023-01-11 14:50:10 +0100142 if (ret != 0) \
143 { \
144 PRINT_ERROR; \
145 } \
146 else \
147 { \
148 mbedtls_printf("%9lu KiB/s, %9lu cycles/byte\n", \
149 ii * BUFSIZE / 1024, \
150 (mbedtls_timing_hardclock() - tsc) \
151 / (jj * BUFSIZE)); \
152 } \
153 } while (0)
Rich Evans85b05ec2015-02-12 11:37:29 +0000154
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200155#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C) && defined(MBEDTLS_MEMORY_DEBUG)
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100156
Manuel Pégourié-Gonnard5edd3882020-04-09 10:40:03 +0200157/* How much space to reserve for the title when printing heap usage results.
158 * Updated manually as the output of the following command:
159 *
160 * sed -n 's/.*[T]IME_PUBLIC.*"\(.*\)",/\1/p' programs/test/benchmark.c |
Manuel Pégourié-Gonnardbf5b46c2022-01-05 10:34:17 +0100161 * awk '{print length+3}' | sort -rn | head -n1
Manuel Pégourié-Gonnard5edd3882020-04-09 10:40:03 +0200162 *
Manuel Pégourié-Gonnardbf5b46c2022-01-05 10:34:17 +0100163 * This computes the maximum length of a title +3, because we appends "/s" and
164 * want at least one space. (If the value is too small, the only consequence
Shaun Case8b0ecbc2021-12-20 21:14:10 -0800165 * is poor alignment.) */
Manuel Pégourié-Gonnardbf5b46c2022-01-05 10:34:17 +0100166#define TITLE_SPACE 17
Manuel Pégourié-Gonnard5edd3882020-04-09 10:40:03 +0200167
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100168#define MEMORY_MEASURE_INIT \
169 size_t max_used, max_blocks, max_bytes; \
170 size_t prv_used, prv_blocks; \
Manuel Pégourié-Gonnard6ced0022022-01-05 10:05:54 +0100171 size_t alloc_cnt, free_cnt, prv_alloc, prv_free; \
Gilles Peskine449bd832023-01-11 14:50:10 +0100172 mbedtls_memory_buffer_alloc_cur_get(&prv_used, &prv_blocks); \
173 mbedtls_memory_buffer_alloc_max_reset();
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100174
Manuel Pégourié-Gonnardc4055442022-01-04 10:24:01 +0100175#define MEMORY_MEASURE_RESET \
Gilles Peskine449bd832023-01-11 14:50:10 +0100176 mbedtls_memory_buffer_alloc_count_get(&prv_alloc, &prv_free);
Manuel Pégourié-Gonnardc4055442022-01-04 10:24:01 +0100177
Gilles Peskine449bd832023-01-11 14:50:10 +0100178#define MEMORY_MEASURE_PRINT(title_len) \
179 mbedtls_memory_buffer_alloc_max_get(&max_used, &max_blocks); \
180 mbedtls_memory_buffer_alloc_count_get(&alloc_cnt, &free_cnt); \
Manuel Pégourié-Gonnard5edd3882020-04-09 10:40:03 +0200181 ii = TITLE_SPACE > (title_len) ? TITLE_SPACE - (title_len) : 1; \
Gilles Peskine449bd832023-01-11 14:50:10 +0100182 while (ii--) mbedtls_printf(" "); \
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100183 max_used -= prv_used; \
184 max_blocks -= prv_blocks; \
185 max_bytes = max_used + MEM_BLOCK_OVERHEAD * max_blocks; \
Gilles Peskine449bd832023-01-11 14:50:10 +0100186 mbedtls_printf("%6u heap bytes, %6u allocs", \
187 (unsigned) max_bytes, \
188 (unsigned) (alloc_cnt - prv_alloc));
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100189
190#else
Manuel Pégourié-Gonnarde579dab2015-01-29 16:28:44 +0000191#define MEMORY_MEASURE_INIT
Manuel Pégourié-Gonnardc4055442022-01-04 10:24:01 +0100192#define MEMORY_MEASURE_RESET
Gilles Peskine449bd832023-01-11 14:50:10 +0100193#define MEMORY_MEASURE_PRINT(title_len)
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100194#endif
195
Gilles Peskine449bd832023-01-11 14:50:10 +0100196#define TIME_PUBLIC(TITLE, TYPE, CODE) \
197 do { \
198 unsigned long ii; \
199 int ret; \
200 MEMORY_MEASURE_INIT; \
Rich Evans85b05ec2015-02-12 11:37:29 +0000201 \
Gilles Peskine449bd832023-01-11 14:50:10 +0100202 mbedtls_printf(HEADER_FORMAT, TITLE); \
203 fflush(stdout); \
204 mbedtls_set_alarm(3); \
Rich Evans85b05ec2015-02-12 11:37:29 +0000205 \
Gilles Peskine449bd832023-01-11 14:50:10 +0100206 ret = 0; \
207 for (ii = 1; !mbedtls_timing_alarmed && !ret; ii++) \
208 { \
209 MEMORY_MEASURE_RESET; \
210 CODE; \
211 } \
Rich Evans85b05ec2015-02-12 11:37:29 +0000212 \
Gilles Peskine449bd832023-01-11 14:50:10 +0100213 if (ret == MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED) \
214 { \
215 mbedtls_printf("Feature Not Supported. Skipping.\n"); \
216 ret = 0; \
217 } \
218 else if (ret != 0) \
219 { \
220 PRINT_ERROR; \
221 } \
222 else \
223 { \
224 mbedtls_printf("%6lu " TYPE "/s", ii / 3); \
225 MEMORY_MEASURE_PRINT(sizeof(TYPE) + 1); \
226 mbedtls_printf("\n"); \
227 } \
228 } while (0)
Paul Bakker5121ce52009-01-03 21:22:43 +0000229
TRodziewiczd8540832021-06-10 15:16:50 +0200230#if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
Gilles Peskine449bd832023-01-11 14:50:10 +0100231 (defined(_MSC_VER) && defined(_M_IX86)) || defined(__WATCOMC__)
TRodziewiczd8540832021-06-10 15:16:50 +0200232
233#define HAVE_HARDCLOCK
234
Gilles Peskine449bd832023-01-11 14:50:10 +0100235static unsigned long mbedtls_timing_hardclock(void)
TRodziewiczd8540832021-06-10 15:16:50 +0200236{
237 unsigned long tsc;
238 __asm rdtsc
Gilles Peskine449bd832023-01-11 14:50:10 +0100239 __asm mov[tsc], eax
240 return tsc;
TRodziewiczd8540832021-06-10 15:16:50 +0200241}
242#endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
243 ( _MSC_VER && _M_IX86 ) || __WATCOMC__ */
244
245/* some versions of mingw-64 have 32-bit longs even on x84_64 */
246#if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
Gilles Peskine449bd832023-01-11 14:50:10 +0100247 defined(__GNUC__) && (defined(__i386__) || ( \
248 (defined(__amd64__) || defined(__x86_64__)) && __SIZEOF_LONG__ == 4))
TRodziewiczd8540832021-06-10 15:16:50 +0200249
250#define HAVE_HARDCLOCK
251
Gilles Peskine449bd832023-01-11 14:50:10 +0100252static unsigned long mbedtls_timing_hardclock(void)
TRodziewiczd8540832021-06-10 15:16:50 +0200253{
254 unsigned long lo, hi;
Gilles Peskine449bd832023-01-11 14:50:10 +0100255 asm volatile ("rdtsc" : "=a" (lo), "=d" (hi));
256 return lo;
TRodziewiczd8540832021-06-10 15:16:50 +0200257}
258#endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
259 __GNUC__ && __i386__ */
260
261#if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
Gilles Peskine449bd832023-01-11 14:50:10 +0100262 defined(__GNUC__) && (defined(__amd64__) || defined(__x86_64__))
TRodziewiczd8540832021-06-10 15:16:50 +0200263
264#define HAVE_HARDCLOCK
265
Gilles Peskine449bd832023-01-11 14:50:10 +0100266static unsigned long mbedtls_timing_hardclock(void)
TRodziewiczd8540832021-06-10 15:16:50 +0200267{
268 unsigned long lo, hi;
Gilles Peskine449bd832023-01-11 14:50:10 +0100269 asm volatile ("rdtsc" : "=a" (lo), "=d" (hi));
270 return lo | (hi << 32);
TRodziewiczd8540832021-06-10 15:16:50 +0200271}
272#endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
273 __GNUC__ && ( __amd64__ || __x86_64__ ) */
274
275#if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
Gilles Peskine449bd832023-01-11 14:50:10 +0100276 defined(__GNUC__) && (defined(__powerpc__) || defined(__ppc__))
TRodziewiczd8540832021-06-10 15:16:50 +0200277
278#define HAVE_HARDCLOCK
279
Gilles Peskine449bd832023-01-11 14:50:10 +0100280static unsigned long mbedtls_timing_hardclock(void)
TRodziewiczd8540832021-06-10 15:16:50 +0200281{
282 unsigned long tbl, tbu0, tbu1;
283
Gilles Peskine449bd832023-01-11 14:50:10 +0100284 do {
285 asm volatile ("mftbu %0" : "=r" (tbu0));
286 asm volatile ("mftb %0" : "=r" (tbl));
287 asm volatile ("mftbu %0" : "=r" (tbu1));
288 } while (tbu0 != tbu1);
TRodziewiczd8540832021-06-10 15:16:50 +0200289
Gilles Peskine449bd832023-01-11 14:50:10 +0100290 return tbl;
TRodziewiczd8540832021-06-10 15:16:50 +0200291}
292#endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
293 __GNUC__ && ( __powerpc__ || __ppc__ ) */
294
295#if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
296 defined(__GNUC__) && defined(__sparc64__)
297
298#if defined(__OpenBSD__)
299#warning OpenBSD does not allow access to tick register using software version instead
300#else
301#define HAVE_HARDCLOCK
302
Gilles Peskine449bd832023-01-11 14:50:10 +0100303static unsigned long mbedtls_timing_hardclock(void)
TRodziewiczd8540832021-06-10 15:16:50 +0200304{
305 unsigned long tick;
Gilles Peskine449bd832023-01-11 14:50:10 +0100306 asm volatile ("rdpr %%tick, %0;" : "=&r" (tick));
307 return tick;
TRodziewiczd8540832021-06-10 15:16:50 +0200308}
309#endif /* __OpenBSD__ */
310#endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
311 __GNUC__ && __sparc64__ */
312
313#if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
314 defined(__GNUC__) && defined(__sparc__) && !defined(__sparc64__)
315
316#define HAVE_HARDCLOCK
317
Gilles Peskine449bd832023-01-11 14:50:10 +0100318static unsigned long mbedtls_timing_hardclock(void)
TRodziewiczd8540832021-06-10 15:16:50 +0200319{
320 unsigned long tick;
Gilles Peskine449bd832023-01-11 14:50:10 +0100321 asm volatile (".byte 0x83, 0x41, 0x00, 0x00");
322 asm volatile ("mov %%g1, %0" : "=r" (tick));
323 return tick;
TRodziewiczd8540832021-06-10 15:16:50 +0200324}
325#endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
326 __GNUC__ && __sparc__ && !__sparc64__ */
327
328#if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
329 defined(__GNUC__) && defined(__alpha__)
330
331#define HAVE_HARDCLOCK
332
Gilles Peskine449bd832023-01-11 14:50:10 +0100333static unsigned long mbedtls_timing_hardclock(void)
TRodziewiczd8540832021-06-10 15:16:50 +0200334{
335 unsigned long cc;
Gilles Peskine449bd832023-01-11 14:50:10 +0100336 asm volatile ("rpcc %0" : "=r" (cc));
337 return cc & 0xFFFFFFFF;
TRodziewiczd8540832021-06-10 15:16:50 +0200338}
339#endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
340 __GNUC__ && __alpha__ */
341
342#if !defined(HAVE_HARDCLOCK) && defined(MBEDTLS_HAVE_ASM) && \
343 defined(__GNUC__) && defined(__ia64__)
344
345#define HAVE_HARDCLOCK
346
Gilles Peskine449bd832023-01-11 14:50:10 +0100347static unsigned long mbedtls_timing_hardclock(void)
TRodziewiczd8540832021-06-10 15:16:50 +0200348{
349 unsigned long itc;
Gilles Peskine449bd832023-01-11 14:50:10 +0100350 asm volatile ("mov %0 = ar.itc" : "=r" (itc));
351 return itc;
TRodziewiczd8540832021-06-10 15:16:50 +0200352}
353#endif /* !HAVE_HARDCLOCK && MBEDTLS_HAVE_ASM &&
354 __GNUC__ && __ia64__ */
355
Martin Storsjö5c1479d2022-04-22 13:11:42 +0300356#if !defined(HAVE_HARDCLOCK) && defined(_WIN32) && \
TRodziewiczd8540832021-06-10 15:16:50 +0200357 !defined(EFIX64) && !defined(EFI32)
358
359#define HAVE_HARDCLOCK
360
Gilles Peskine449bd832023-01-11 14:50:10 +0100361static unsigned long mbedtls_timing_hardclock(void)
TRodziewiczd8540832021-06-10 15:16:50 +0200362{
363 LARGE_INTEGER offset;
364
Gilles Peskine449bd832023-01-11 14:50:10 +0100365 QueryPerformanceCounter(&offset);
TRodziewiczd8540832021-06-10 15:16:50 +0200366
Gilles Peskine449bd832023-01-11 14:50:10 +0100367 return (unsigned long) (offset.QuadPart);
TRodziewiczd8540832021-06-10 15:16:50 +0200368}
Martin Storsjö5c1479d2022-04-22 13:11:42 +0300369#endif /* !HAVE_HARDCLOCK && _WIN32 && !EFIX64 && !EFI32 */
TRodziewiczd8540832021-06-10 15:16:50 +0200370
371#if !defined(HAVE_HARDCLOCK)
372
373#define HAVE_HARDCLOCK
374
375static int hardclock_init = 0;
376static struct timeval tv_init;
377
Gilles Peskine449bd832023-01-11 14:50:10 +0100378static unsigned long mbedtls_timing_hardclock(void)
TRodziewiczd8540832021-06-10 15:16:50 +0200379{
380 struct timeval tv_cur;
381
Gilles Peskine449bd832023-01-11 14:50:10 +0100382 if (hardclock_init == 0) {
383 gettimeofday(&tv_init, NULL);
TRodziewiczd8540832021-06-10 15:16:50 +0200384 hardclock_init = 1;
385 }
386
Gilles Peskine449bd832023-01-11 14:50:10 +0100387 gettimeofday(&tv_cur, NULL);
388 return (tv_cur.tv_sec - tv_init.tv_sec) * 1000000U
389 + (tv_cur.tv_usec - tv_init.tv_usec);
TRodziewiczd8540832021-06-10 15:16:50 +0200390}
391#endif /* !HAVE_HARDCLOCK */
392
393volatile int mbedtls_timing_alarmed = 0;
394
395#if defined(_WIN32) && !defined(EFIX64) && !defined(EFI32)
396
397/* It's OK to use a global because alarm() is supposed to be global anyway */
398static DWORD alarmMs;
399
Gilles Peskine449bd832023-01-11 14:50:10 +0100400static void TimerProc(void *TimerContext)
TRodziewiczd8540832021-06-10 15:16:50 +0200401{
402 (void) TimerContext;
Gilles Peskine449bd832023-01-11 14:50:10 +0100403 Sleep(alarmMs);
TRodziewiczd8540832021-06-10 15:16:50 +0200404 mbedtls_timing_alarmed = 1;
405 /* _endthread will be called implicitly on return
Tom Cosgrove1797b052022-12-04 17:19:59 +0000406 * That ensures execution of thread function's epilogue */
TRodziewiczd8540832021-06-10 15:16:50 +0200407}
408
Gilles Peskine449bd832023-01-11 14:50:10 +0100409static void mbedtls_set_alarm(int seconds)
TRodziewiczd8540832021-06-10 15:16:50 +0200410{
Gilles Peskine449bd832023-01-11 14:50:10 +0100411 if (seconds == 0) {
TRodziewiczd8540832021-06-10 15:16:50 +0200412 /* No need to create a thread for this simple case.
413 * Also, this shorcut is more reliable at least on MinGW32 */
414 mbedtls_timing_alarmed = 1;
415 return;
416 }
417
418 mbedtls_timing_alarmed = 0;
419 alarmMs = seconds * 1000;
Gilles Peskine449bd832023-01-11 14:50:10 +0100420 (void) _beginthread(TimerProc, 0, NULL);
TRodziewiczd8540832021-06-10 15:16:50 +0200421}
422
423#else /* _WIN32 && !EFIX64 && !EFI32 */
424
Gilles Peskine449bd832023-01-11 14:50:10 +0100425static void sighandler(int signum)
TRodziewiczd8540832021-06-10 15:16:50 +0200426{
427 mbedtls_timing_alarmed = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100428 signal(signum, sighandler);
TRodziewiczd8540832021-06-10 15:16:50 +0200429}
430
Gilles Peskine449bd832023-01-11 14:50:10 +0100431static void mbedtls_set_alarm(int seconds)
TRodziewiczd8540832021-06-10 15:16:50 +0200432{
433 mbedtls_timing_alarmed = 0;
Gilles Peskine449bd832023-01-11 14:50:10 +0100434 signal(SIGALRM, sighandler);
435 alarm(seconds);
436 if (seconds == 0) {
TRodziewiczd8540832021-06-10 15:16:50 +0200437 /* alarm(0) cancelled any previous pending alarm, but the
438 handler won't fire, so raise the flag straight away. */
439 mbedtls_timing_alarmed = 1;
440 }
441}
442
443#endif /* _WIN32 && !EFIX64 && !EFI32 */
444
Gilles Peskine449bd832023-01-11 14:50:10 +0100445static int myrand(void *rng_state, unsigned char *output, size_t len)
Paul Bakker5121ce52009-01-03 21:22:43 +0000446{
Paul Bakkera3d195c2011-11-27 21:07:34 +0000447 size_t use_len;
448 int rnd;
449
Gilles Peskine449bd832023-01-11 14:50:10 +0100450 if (rng_state != NULL) {
Paul Bakker5121ce52009-01-03 21:22:43 +0000451 rng_state = NULL;
Gilles Peskine449bd832023-01-11 14:50:10 +0100452 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000453
Gilles Peskine449bd832023-01-11 14:50:10 +0100454 while (len > 0) {
Paul Bakkera3d195c2011-11-27 21:07:34 +0000455 use_len = len;
Gilles Peskine449bd832023-01-11 14:50:10 +0100456 if (use_len > sizeof(int)) {
Paul Bakkera3d195c2011-11-27 21:07:34 +0000457 use_len = sizeof(int);
Gilles Peskine449bd832023-01-11 14:50:10 +0100458 }
Paul Bakkera3d195c2011-11-27 21:07:34 +0000459
460 rnd = rand();
Gilles Peskine449bd832023-01-11 14:50:10 +0100461 memcpy(output, &rnd, use_len);
Paul Bakkera3d195c2011-11-27 21:07:34 +0000462 output += use_len;
463 len -= use_len;
464 }
465
Gilles Peskine449bd832023-01-11 14:50:10 +0100466 return 0;
Paul Bakker5121ce52009-01-03 21:22:43 +0000467}
468
Gilles Peskine449bd832023-01-11 14:50:10 +0100469#define CHECK_AND_CONTINUE(R) \
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000470 { \
Gilles Peskine449bd832023-01-11 14:50:10 +0100471 int CHECK_AND_CONTINUE_ret = (R); \
472 if (CHECK_AND_CONTINUE_ret == MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED) { \
473 mbedtls_printf("Feature not supported. Skipping.\n"); \
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000474 continue; \
475 } \
Gilles Peskine449bd832023-01-11 14:50:10 +0100476 else if (CHECK_AND_CONTINUE_ret != 0) { \
477 mbedtls_exit(1); \
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000478 } \
479 }
Christoph M. Wintersteiger3dca1a42018-12-14 11:54:59 +0000480
Gilles Peskine28f62f62020-07-24 02:06:46 +0200481#if defined(MBEDTLS_ECP_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100482static int set_ecp_curve(const char *string, mbedtls_ecp_curve_info *curve)
Gilles Peskine28f62f62020-07-24 02:06:46 +0200483{
484 const mbedtls_ecp_curve_info *found =
Gilles Peskine449bd832023-01-11 14:50:10 +0100485 mbedtls_ecp_curve_info_from_name(string);
486 if (found != NULL) {
Gilles Peskine28f62f62020-07-24 02:06:46 +0200487 *curve = *found;
Gilles Peskine449bd832023-01-11 14:50:10 +0100488 return 1;
489 } else {
490 return 0;
Gilles Peskine28f62f62020-07-24 02:06:46 +0200491 }
Gilles Peskine28f62f62020-07-24 02:06:46 +0200492}
493#endif
494
Paul Bakker5121ce52009-01-03 21:22:43 +0000495unsigned char buf[BUFSIZE];
496
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200497typedef struct {
TRodziewicz10e8cf52021-05-31 17:58:57 +0200498 char md5, ripemd160, sha1, sha256, sha512,
Pol Henarejosebb36402022-05-20 14:26:00 +0200499 sha3_224, sha3_256, sha3_384, sha3_512,
TRodziewicz10e8cf52021-05-31 17:58:57 +0200500 des3, des,
Manuel Pégourié-Gonnard0dadba22018-06-19 11:11:15 +0200501 aes_cbc, aes_gcm, aes_ccm, aes_xts, chachapoly,
Manuel Pégourié-Gonnardd6aea182018-05-09 10:21:28 +0200502 aes_cmac, des3_cmac,
TRodziewicz10e8cf52021-05-31 17:58:57 +0200503 aria, camellia, chacha20,
Daniel Kingadc32c02016-05-16 18:25:45 -0300504 poly1305,
Mateusz Starzyk0fdcc8e2021-01-29 16:46:31 +0100505 ctr_drbg, hmac_drbg,
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200506 rsa, dhm, ecdsa, ecdh;
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200507} todo_list;
508
Simon Butcher63cb97e2018-12-06 17:43:31 +0000509
Gilles Peskine449bd832023-01-11 14:50:10 +0100510int main(int argc, char *argv[])
Paul Bakker5690efc2011-05-26 13:16:06 +0000511{
Manuel Pégourié-Gonnard71e75dc2014-12-19 18:05:43 +0100512 int i;
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200513 unsigned char tmp[200];
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200514 char title[TITLE_LEN];
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200515 todo_list todo;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200516#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Manuel Pégourié-Gonnardb2a18a22015-05-27 16:29:56 +0200517 unsigned char alloc_buf[HEAP_SIZE] = { 0 };
Manuel Pégourié-Gonnard128657d2014-12-18 16:35:52 +0000518#endif
Gilles Peskine28f62f62020-07-24 02:06:46 +0200519#if defined(MBEDTLS_ECP_C)
520 mbedtls_ecp_curve_info single_curve[2] = {
521 { MBEDTLS_ECP_DP_NONE, 0, 0, NULL },
522 { MBEDTLS_ECP_DP_NONE, 0, 0, NULL },
523 };
Gilles Peskine449bd832023-01-11 14:50:10 +0100524 const mbedtls_ecp_curve_info *curve_list = mbedtls_ecp_curve_list();
Gilles Peskine28f62f62020-07-24 02:06:46 +0200525#endif
526
527#if defined(MBEDTLS_ECP_C)
528 (void) curve_list; /* Unused in some configurations where no benchmark uses ECC */
529#endif
Paul Bakkercce9d772011-11-18 14:26:47 +0000530
Gilles Peskine449bd832023-01-11 14:50:10 +0100531 if (argc <= 1) {
532 memset(&todo, 1, sizeof(todo));
533 } else {
534 memset(&todo, 0, sizeof(todo));
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200535
Gilles Peskine449bd832023-01-11 14:50:10 +0100536 for (i = 1; i < argc; i++) {
537 if (strcmp(argv[i], "md5") == 0) {
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200538 todo.md5 = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100539 } else if (strcmp(argv[i], "ripemd160") == 0) {
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200540 todo.ripemd160 = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100541 } else if (strcmp(argv[i], "sha1") == 0) {
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200542 todo.sha1 = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100543 } else if (strcmp(argv[i], "sha256") == 0) {
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200544 todo.sha256 = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100545 } else if (strcmp(argv[i], "sha512") == 0) {
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200546 todo.sha512 = 1;
Pol Henarejos4e747332023-02-07 19:55:31 +0100547 } else if (strcmp(argv[i], "sha3_224") == 0) {
Pol Henarejosebb36402022-05-20 14:26:00 +0200548 todo.sha3_224 = 1;
Pol Henarejos4e747332023-02-07 19:55:31 +0100549 } else if (strcmp(argv[i], "sha3_256") == 0) {
Pol Henarejosebb36402022-05-20 14:26:00 +0200550 todo.sha3_256 = 1;
Pol Henarejos4e747332023-02-07 19:55:31 +0100551 } else if (strcmp(argv[i], "sha3_384") == 0) {
Pol Henarejosebb36402022-05-20 14:26:00 +0200552 todo.sha3_384 = 1;
Pol Henarejos4e747332023-02-07 19:55:31 +0100553 } else if (strcmp(argv[i], "sha3_512") == 0) {
Pol Henarejosebb36402022-05-20 14:26:00 +0200554 todo.sha3_512 = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100555 } else if (strcmp(argv[i], "des3") == 0) {
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200556 todo.des3 = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100557 } else if (strcmp(argv[i], "des") == 0) {
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200558 todo.des = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100559 } else if (strcmp(argv[i], "aes_cbc") == 0) {
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200560 todo.aes_cbc = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100561 } else if (strcmp(argv[i], "aes_xts") == 0) {
Aorimn5f778012016-06-09 23:22:58 +0200562 todo.aes_xts = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100563 } else if (strcmp(argv[i], "aes_gcm") == 0) {
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200564 todo.aes_gcm = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100565 } else if (strcmp(argv[i], "aes_ccm") == 0) {
Manuel Pégourié-Gonnard58d78a82014-05-07 12:03:02 +0200566 todo.aes_ccm = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100567 } else if (strcmp(argv[i], "chachapoly") == 0) {
Manuel Pégourié-Gonnardd6aea182018-05-09 10:21:28 +0200568 todo.chachapoly = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100569 } else if (strcmp(argv[i], "aes_cmac") == 0) {
Simon Butcher549dc3d2016-10-05 14:14:19 +0100570 todo.aes_cmac = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100571 } else if (strcmp(argv[i], "des3_cmac") == 0) {
Simon Butcher549dc3d2016-10-05 14:14:19 +0100572 todo.des3_cmac = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100573 } else if (strcmp(argv[i], "aria") == 0) {
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +0100574 todo.aria = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100575 } else if (strcmp(argv[i], "camellia") == 0) {
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200576 todo.camellia = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100577 } else if (strcmp(argv[i], "chacha20") == 0) {
Daniel King34b822c2016-05-15 17:28:08 -0300578 todo.chacha20 = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100579 } else if (strcmp(argv[i], "poly1305") == 0) {
Daniel Kingadc32c02016-05-16 18:25:45 -0300580 todo.poly1305 = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100581 } else if (strcmp(argv[i], "ctr_drbg") == 0) {
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200582 todo.ctr_drbg = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100583 } else if (strcmp(argv[i], "hmac_drbg") == 0) {
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100584 todo.hmac_drbg = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100585 } else if (strcmp(argv[i], "rsa") == 0) {
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200586 todo.rsa = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100587 } else if (strcmp(argv[i], "dhm") == 0) {
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200588 todo.dhm = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100589 } else if (strcmp(argv[i], "ecdsa") == 0) {
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200590 todo.ecdsa = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100591 } else if (strcmp(argv[i], "ecdh") == 0) {
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200592 todo.ecdh = 1;
Gilles Peskine449bd832023-01-11 14:50:10 +0100593 }
Gilles Peskine28f62f62020-07-24 02:06:46 +0200594#if defined(MBEDTLS_ECP_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100595 else if (set_ecp_curve(argv[i], single_curve)) {
Gilles Peskine28f62f62020-07-24 02:06:46 +0200596 curve_list = single_curve;
Gilles Peskine449bd832023-01-11 14:50:10 +0100597 }
Gilles Peskine28f62f62020-07-24 02:06:46 +0200598#endif
Gilles Peskine449bd832023-01-11 14:50:10 +0100599 else {
600 mbedtls_printf("Unrecognized option: %s\n", argv[i]);
601 mbedtls_printf("Available options: " OPTIONS);
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200602 }
603 }
604 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000605
Gilles Peskine449bd832023-01-11 14:50:10 +0100606 mbedtls_printf("\n");
Paul Bakker5121ce52009-01-03 21:22:43 +0000607
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200608#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100609 mbedtls_memory_buffer_alloc_init(alloc_buf, sizeof(alloc_buf));
Manuel Pégourié-Gonnard128657d2014-12-18 16:35:52 +0000610#endif
Gilles Peskine449bd832023-01-11 14:50:10 +0100611 memset(buf, 0xAA, sizeof(buf));
612 memset(tmp, 0xBB, sizeof(tmp));
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200613
Manuel Pégourié-Gonnarda93aa582022-01-04 09:47:54 +0100614 /* Avoid "unused static function" warning in configurations without
615 * symmetric crypto. */
Manuel Pégourié-Gonnardcd4ad0c2022-01-05 09:54:37 +0100616 (void) mbedtls_timing_hardclock;
Manuel Pégourié-Gonnarda93aa582022-01-04 09:47:54 +0100617
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200618#if defined(MBEDTLS_MD5_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100619 if (todo.md5) {
620 TIME_AND_TSC("MD5", mbedtls_md5(buf, BUFSIZE, tmp));
621 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000622#endif
623
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200624#if defined(MBEDTLS_RIPEMD160_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100625 if (todo.ripemd160) {
626 TIME_AND_TSC("RIPEMD160", mbedtls_ripemd160(buf, BUFSIZE, tmp));
627 }
Manuel Pégourié-Gonnard01b0b382014-01-17 14:29:46 +0100628#endif
629
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200630#if defined(MBEDTLS_SHA1_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100631 if (todo.sha1) {
632 TIME_AND_TSC("SHA-1", mbedtls_sha1(buf, BUFSIZE, tmp));
633 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000634#endif
635
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200636#if defined(MBEDTLS_SHA256_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100637 if (todo.sha256) {
638 TIME_AND_TSC("SHA-256", mbedtls_sha256(buf, BUFSIZE, tmp, 0));
639 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000640#endif
641
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200642#if defined(MBEDTLS_SHA512_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100643 if (todo.sha512) {
644 TIME_AND_TSC("SHA-512", mbedtls_sha512(buf, BUFSIZE, tmp, 0));
645 }
Paul Bakker3a3c3c22009-02-09 22:33:30 +0000646#endif
Pol Henarejosebb36402022-05-20 14:26:00 +0200647#if defined(MBEDTLS_SHA3_C)
Pol Henarejosa6779282023-02-08 00:50:04 +0100648 if (todo.sha3_224) {
649 TIME_AND_TSC("SHA3-224", mbedtls_sha3(MBEDTLS_SHA3_224, buf, BUFSIZE, tmp, 28));
650 }
651 if (todo.sha3_256) {
652 TIME_AND_TSC("SHA3-256", mbedtls_sha3(MBEDTLS_SHA3_256, buf, BUFSIZE, tmp, 32));
653 }
654 if (todo.sha3_384) {
655 TIME_AND_TSC("SHA3-384", mbedtls_sha3(MBEDTLS_SHA3_384, buf, BUFSIZE, tmp, 48));
656 }
657 if (todo.sha3_512) {
658 TIME_AND_TSC("SHA3-512", mbedtls_sha3(MBEDTLS_SHA3_512, buf, BUFSIZE, tmp, 64));
659 }
Pol Henarejosebb36402022-05-20 14:26:00 +0200660#endif
Paul Bakker3a3c3c22009-02-09 22:33:30 +0000661
Simon Butcher549dc3d2016-10-05 14:14:19 +0100662#if defined(MBEDTLS_DES_C)
663#if defined(MBEDTLS_CIPHER_MODE_CBC)
Gilles Peskine449bd832023-01-11 14:50:10 +0100664 if (todo.des3) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200665 mbedtls_des3_context des3;
Gilles Peskine449bd832023-01-11 14:50:10 +0100666 mbedtls_des3_init(&des3);
667 if (mbedtls_des3_set3key_enc(&des3, tmp) != 0) {
668 mbedtls_exit(1);
669 }
670 TIME_AND_TSC("3DES",
671 mbedtls_des3_crypt_cbc(&des3, MBEDTLS_DES_ENCRYPT, BUFSIZE, tmp, buf, buf));
672 mbedtls_des3_free(&des3);
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200673 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000674
Gilles Peskine449bd832023-01-11 14:50:10 +0100675 if (todo.des) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200676 mbedtls_des_context des;
Gilles Peskine449bd832023-01-11 14:50:10 +0100677 mbedtls_des_init(&des);
678 if (mbedtls_des_setkey_enc(&des, tmp) != 0) {
679 mbedtls_exit(1);
680 }
681 TIME_AND_TSC("DES",
682 mbedtls_des_crypt_cbc(&des, MBEDTLS_DES_ENCRYPT, BUFSIZE, tmp, buf, buf));
683 mbedtls_des_free(&des);
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200684 }
Simon Butcher549dc3d2016-10-05 14:14:19 +0100685
686#endif /* MBEDTLS_CIPHER_MODE_CBC */
687#if defined(MBEDTLS_CMAC_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100688 if (todo.des3_cmac) {
Simon Butcher549dc3d2016-10-05 14:14:19 +0100689 unsigned char output[8];
690 const mbedtls_cipher_info_t *cipher_info;
691
Gilles Peskine449bd832023-01-11 14:50:10 +0100692 memset(buf, 0, sizeof(buf));
693 memset(tmp, 0, sizeof(tmp));
Simon Butcher549dc3d2016-10-05 14:14:19 +0100694
Gilles Peskine449bd832023-01-11 14:50:10 +0100695 cipher_info = mbedtls_cipher_info_from_type(MBEDTLS_CIPHER_DES_EDE3_ECB);
Simon Butcher549dc3d2016-10-05 14:14:19 +0100696
Gilles Peskine449bd832023-01-11 14:50:10 +0100697 TIME_AND_TSC("3DES-CMAC",
698 mbedtls_cipher_cmac(cipher_info, tmp, 192, buf,
699 BUFSIZE, output));
Simon Butcher549dc3d2016-10-05 14:14:19 +0100700 }
701#endif /* MBEDTLS_CMAC_C */
702#endif /* MBEDTLS_DES_C */
Paul Bakker5121ce52009-01-03 21:22:43 +0000703
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200704#if defined(MBEDTLS_AES_C)
705#if defined(MBEDTLS_CIPHER_MODE_CBC)
Gilles Peskine449bd832023-01-11 14:50:10 +0100706 if (todo.aes_cbc) {
Manuel Pégourié-Gonnard71e75dc2014-12-19 18:05:43 +0100707 int keysize;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200708 mbedtls_aes_context aes;
Gilles Peskine449bd832023-01-11 14:50:10 +0100709 mbedtls_aes_init(&aes);
710 for (keysize = 128; keysize <= 256; keysize += 64) {
711 mbedtls_snprintf(title, sizeof(title), "AES-CBC-%d", keysize);
Paul Bakker5121ce52009-01-03 21:22:43 +0000712
Gilles Peskine449bd832023-01-11 14:50:10 +0100713 memset(buf, 0, sizeof(buf));
714 memset(tmp, 0, sizeof(tmp));
715 CHECK_AND_CONTINUE(mbedtls_aes_setkey_enc(&aes, tmp, keysize));
Paul Bakker5121ce52009-01-03 21:22:43 +0000716
Gilles Peskine449bd832023-01-11 14:50:10 +0100717 TIME_AND_TSC(title,
718 mbedtls_aes_crypt_cbc(&aes, MBEDTLS_AES_ENCRYPT, BUFSIZE, tmp, buf, buf));
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200719 }
Gilles Peskine449bd832023-01-11 14:50:10 +0100720 mbedtls_aes_free(&aes);
Paul Bakker5121ce52009-01-03 21:22:43 +0000721 }
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200722#endif
Aorimn5f778012016-06-09 23:22:58 +0200723#if defined(MBEDTLS_CIPHER_MODE_XTS)
Gilles Peskine449bd832023-01-11 14:50:10 +0100724 if (todo.aes_xts) {
Aorimn5f778012016-06-09 23:22:58 +0200725 int keysize;
Jaeden Amero9366feb2018-05-29 18:55:17 +0100726 mbedtls_aes_xts_context ctx;
727
Gilles Peskine449bd832023-01-11 14:50:10 +0100728 mbedtls_aes_xts_init(&ctx);
729 for (keysize = 128; keysize <= 256; keysize += 128) {
730 mbedtls_snprintf(title, sizeof(title), "AES-XTS-%d", keysize);
Aorimn5f778012016-06-09 23:22:58 +0200731
Gilles Peskine449bd832023-01-11 14:50:10 +0100732 memset(buf, 0, sizeof(buf));
733 memset(tmp, 0, sizeof(tmp));
734 CHECK_AND_CONTINUE(mbedtls_aes_xts_setkey_enc(&ctx, tmp, keysize * 2));
Aorimn5f778012016-06-09 23:22:58 +0200735
Gilles Peskine449bd832023-01-11 14:50:10 +0100736 TIME_AND_TSC(title,
737 mbedtls_aes_crypt_xts(&ctx, MBEDTLS_AES_ENCRYPT, BUFSIZE,
738 tmp, buf, buf));
Jaeden Amero9366feb2018-05-29 18:55:17 +0100739
Gilles Peskine449bd832023-01-11 14:50:10 +0100740 mbedtls_aes_xts_free(&ctx);
Aorimn5f778012016-06-09 23:22:58 +0200741 }
Aorimn5f778012016-06-09 23:22:58 +0200742 }
743#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200744#if defined(MBEDTLS_GCM_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100745 if (todo.aes_gcm) {
Manuel Pégourié-Gonnard71e75dc2014-12-19 18:05:43 +0100746 int keysize;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200747 mbedtls_gcm_context gcm;
Manuel Pégourié-Gonnardc34e8dd2015-04-28 21:42:17 +0200748
Gilles Peskine449bd832023-01-11 14:50:10 +0100749 mbedtls_gcm_init(&gcm);
750 for (keysize = 128; keysize <= 256; keysize += 64) {
751 mbedtls_snprintf(title, sizeof(title), "AES-GCM-%d", keysize);
Paul Bakker89e80c92012-03-20 13:50:09 +0000752
Gilles Peskine449bd832023-01-11 14:50:10 +0100753 memset(buf, 0, sizeof(buf));
754 memset(tmp, 0, sizeof(tmp));
755 mbedtls_gcm_setkey(&gcm, MBEDTLS_CIPHER_ID_AES, tmp, keysize);
Paul Bakker89e80c92012-03-20 13:50:09 +0000756
Gilles Peskine449bd832023-01-11 14:50:10 +0100757 TIME_AND_TSC(title,
758 mbedtls_gcm_crypt_and_tag(&gcm, MBEDTLS_GCM_ENCRYPT, BUFSIZE, tmp,
759 12, NULL, 0, buf, buf, 16, tmp));
Paul Bakkerf70fe812013-12-16 16:43:10 +0100760
Gilles Peskine449bd832023-01-11 14:50:10 +0100761 mbedtls_gcm_free(&gcm);
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200762 }
Paul Bakker89e80c92012-03-20 13:50:09 +0000763 }
764#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200765#if defined(MBEDTLS_CCM_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100766 if (todo.aes_ccm) {
Manuel Pégourié-Gonnard71e75dc2014-12-19 18:05:43 +0100767 int keysize;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200768 mbedtls_ccm_context ccm;
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +0200769
Gilles Peskine449bd832023-01-11 14:50:10 +0100770 mbedtls_ccm_init(&ccm);
771 for (keysize = 128; keysize <= 256; keysize += 64) {
772 mbedtls_snprintf(title, sizeof(title), "AES-CCM-%d", keysize);
Manuel Pégourié-Gonnard58d78a82014-05-07 12:03:02 +0200773
Gilles Peskine449bd832023-01-11 14:50:10 +0100774 memset(buf, 0, sizeof(buf));
775 memset(tmp, 0, sizeof(tmp));
776 mbedtls_ccm_setkey(&ccm, MBEDTLS_CIPHER_ID_AES, tmp, keysize);
Manuel Pégourié-Gonnard58d78a82014-05-07 12:03:02 +0200777
Gilles Peskine449bd832023-01-11 14:50:10 +0100778 TIME_AND_TSC(title,
779 mbedtls_ccm_encrypt_and_tag(&ccm, BUFSIZE, tmp,
780 12, NULL, 0, buf, buf, tmp, 16));
Manuel Pégourié-Gonnard58d78a82014-05-07 12:03:02 +0200781
Gilles Peskine449bd832023-01-11 14:50:10 +0100782 mbedtls_ccm_free(&ccm);
Manuel Pégourié-Gonnard58d78a82014-05-07 12:03:02 +0200783 }
784 }
785#endif
Manuel Pégourié-Gonnardd6aea182018-05-09 10:21:28 +0200786#if defined(MBEDTLS_CHACHAPOLY_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100787 if (todo.chachapoly) {
Manuel Pégourié-Gonnardd6aea182018-05-09 10:21:28 +0200788 mbedtls_chachapoly_context chachapoly;
789
Gilles Peskine449bd832023-01-11 14:50:10 +0100790 mbedtls_chachapoly_init(&chachapoly);
791 memset(buf, 0, sizeof(buf));
792 memset(tmp, 0, sizeof(tmp));
Manuel Pégourié-Gonnardd6aea182018-05-09 10:21:28 +0200793
Gilles Peskine449bd832023-01-11 14:50:10 +0100794 mbedtls_snprintf(title, sizeof(title), "ChaCha20-Poly1305");
Manuel Pégourié-Gonnardd6aea182018-05-09 10:21:28 +0200795
Gilles Peskine449bd832023-01-11 14:50:10 +0100796 mbedtls_chachapoly_setkey(&chachapoly, tmp);
Manuel Pégourié-Gonnardd6aea182018-05-09 10:21:28 +0200797
Gilles Peskine449bd832023-01-11 14:50:10 +0100798 TIME_AND_TSC(title,
799 mbedtls_chachapoly_encrypt_and_tag(&chachapoly,
800 BUFSIZE, tmp, NULL, 0, buf, buf, tmp));
Manuel Pégourié-Gonnardd6aea182018-05-09 10:21:28 +0200801
Gilles Peskine449bd832023-01-11 14:50:10 +0100802 mbedtls_chachapoly_free(&chachapoly);
Manuel Pégourié-Gonnardd6aea182018-05-09 10:21:28 +0200803 }
804#endif
Simon Butcher549dc3d2016-10-05 14:14:19 +0100805#if defined(MBEDTLS_CMAC_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100806 if (todo.aes_cmac) {
Simon Butcher549dc3d2016-10-05 14:14:19 +0100807 unsigned char output[16];
808 const mbedtls_cipher_info_t *cipher_info;
809 mbedtls_cipher_type_t cipher_type;
810 int keysize;
811
Gilles Peskine449bd832023-01-11 14:50:10 +0100812 for (keysize = 128, cipher_type = MBEDTLS_CIPHER_AES_128_ECB;
Simon Butcher549dc3d2016-10-05 14:14:19 +0100813 keysize <= 256;
Gilles Peskine449bd832023-01-11 14:50:10 +0100814 keysize += 64, cipher_type++) {
815 mbedtls_snprintf(title, sizeof(title), "AES-CMAC-%d", keysize);
Simon Butcher549dc3d2016-10-05 14:14:19 +0100816
Gilles Peskine449bd832023-01-11 14:50:10 +0100817 memset(buf, 0, sizeof(buf));
818 memset(tmp, 0, sizeof(tmp));
Simon Butcher549dc3d2016-10-05 14:14:19 +0100819
Gilles Peskine449bd832023-01-11 14:50:10 +0100820 cipher_info = mbedtls_cipher_info_from_type(cipher_type);
Simon Butcher549dc3d2016-10-05 14:14:19 +0100821
Gilles Peskine449bd832023-01-11 14:50:10 +0100822 TIME_AND_TSC(title,
823 mbedtls_cipher_cmac(cipher_info, tmp, keysize,
824 buf, BUFSIZE, output));
Simon Butcher549dc3d2016-10-05 14:14:19 +0100825 }
826
Gilles Peskine449bd832023-01-11 14:50:10 +0100827 memset(buf, 0, sizeof(buf));
828 memset(tmp, 0, sizeof(tmp));
829 TIME_AND_TSC("AES-CMAC-PRF-128",
830 mbedtls_aes_cmac_prf_128(tmp, 16, buf, BUFSIZE,
831 output));
Simon Butcher549dc3d2016-10-05 14:14:19 +0100832 }
833#endif /* MBEDTLS_CMAC_C */
834#endif /* MBEDTLS_AES_C */
Paul Bakker5121ce52009-01-03 21:22:43 +0000835
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +0100836#if defined(MBEDTLS_ARIA_C) && defined(MBEDTLS_CIPHER_MODE_CBC)
Gilles Peskine449bd832023-01-11 14:50:10 +0100837 if (todo.aria) {
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +0100838 int keysize;
839 mbedtls_aria_context aria;
Gilles Peskine449bd832023-01-11 14:50:10 +0100840 mbedtls_aria_init(&aria);
841 for (keysize = 128; keysize <= 256; keysize += 64) {
842 mbedtls_snprintf(title, sizeof(title), "ARIA-CBC-%d", keysize);
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +0100843
Gilles Peskine449bd832023-01-11 14:50:10 +0100844 memset(buf, 0, sizeof(buf));
845 memset(tmp, 0, sizeof(tmp));
846 mbedtls_aria_setkey_enc(&aria, tmp, keysize);
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +0100847
Gilles Peskine449bd832023-01-11 14:50:10 +0100848 TIME_AND_TSC(title,
849 mbedtls_aria_crypt_cbc(&aria, MBEDTLS_ARIA_ENCRYPT,
850 BUFSIZE, tmp, buf, buf));
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +0100851 }
Gilles Peskine449bd832023-01-11 14:50:10 +0100852 mbedtls_aria_free(&aria);
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +0100853 }
854#endif
855
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200856#if defined(MBEDTLS_CAMELLIA_C) && defined(MBEDTLS_CIPHER_MODE_CBC)
Gilles Peskine449bd832023-01-11 14:50:10 +0100857 if (todo.camellia) {
Manuel Pégourié-Gonnard71e75dc2014-12-19 18:05:43 +0100858 int keysize;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200859 mbedtls_camellia_context camellia;
Gilles Peskine449bd832023-01-11 14:50:10 +0100860 mbedtls_camellia_init(&camellia);
861 for (keysize = 128; keysize <= 256; keysize += 64) {
862 mbedtls_snprintf(title, sizeof(title), "CAMELLIA-CBC-%d", keysize);
Paul Bakker38119b12009-01-10 23:31:23 +0000863
Gilles Peskine449bd832023-01-11 14:50:10 +0100864 memset(buf, 0, sizeof(buf));
865 memset(tmp, 0, sizeof(tmp));
866 mbedtls_camellia_setkey_enc(&camellia, tmp, keysize);
Paul Bakker38119b12009-01-10 23:31:23 +0000867
Gilles Peskine449bd832023-01-11 14:50:10 +0100868 TIME_AND_TSC(title,
869 mbedtls_camellia_crypt_cbc(&camellia, MBEDTLS_CAMELLIA_ENCRYPT,
870 BUFSIZE, tmp, buf, buf));
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200871 }
Gilles Peskine449bd832023-01-11 14:50:10 +0100872 mbedtls_camellia_free(&camellia);
Paul Bakker38119b12009-01-10 23:31:23 +0000873 }
874#endif
875
Daniel King34b822c2016-05-15 17:28:08 -0300876#if defined(MBEDTLS_CHACHA20_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100877 if (todo.chacha20) {
878 TIME_AND_TSC("ChaCha20", mbedtls_chacha20_crypt(buf, buf, 0U, BUFSIZE, buf, buf));
Daniel King34b822c2016-05-15 17:28:08 -0300879 }
880#endif
881
Daniel Kingadc32c02016-05-16 18:25:45 -0300882#if defined(MBEDTLS_POLY1305_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100883 if (todo.poly1305) {
884 TIME_AND_TSC("Poly1305", mbedtls_poly1305_mac(buf, buf, BUFSIZE, buf));
Daniel Kingadc32c02016-05-16 18:25:45 -0300885 }
886#endif
887
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200888#if defined(MBEDTLS_CTR_DRBG_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100889 if (todo.ctr_drbg) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200890 mbedtls_ctr_drbg_context ctr_drbg;
Paul Bakker02faf452011-11-29 11:23:58 +0000891
Gilles Peskine449bd832023-01-11 14:50:10 +0100892 mbedtls_ctr_drbg_init(&ctr_drbg);
893 if (mbedtls_ctr_drbg_seed(&ctr_drbg, myrand, NULL, NULL, 0) != 0) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200894 mbedtls_exit(1);
Gilles Peskine449bd832023-01-11 14:50:10 +0100895 }
896 TIME_AND_TSC("CTR_DRBG (NOPR)",
897 mbedtls_ctr_drbg_random(&ctr_drbg, buf, BUFSIZE));
898 mbedtls_ctr_drbg_free(&ctr_drbg);
Paul Bakker02faf452011-11-29 11:23:58 +0000899
Gilles Peskine449bd832023-01-11 14:50:10 +0100900 mbedtls_ctr_drbg_init(&ctr_drbg);
901 if (mbedtls_ctr_drbg_seed(&ctr_drbg, myrand, NULL, NULL, 0) != 0) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200902 mbedtls_exit(1);
Gilles Peskine449bd832023-01-11 14:50:10 +0100903 }
904 mbedtls_ctr_drbg_set_prediction_resistance(&ctr_drbg, MBEDTLS_CTR_DRBG_PR_ON);
905 TIME_AND_TSC("CTR_DRBG (PR)",
906 mbedtls_ctr_drbg_random(&ctr_drbg, buf, BUFSIZE));
907 mbedtls_ctr_drbg_free(&ctr_drbg);
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200908 }
Paul Bakker02faf452011-11-29 11:23:58 +0000909#endif
910
Andrzej Kurek68327742022-10-03 06:18:18 -0400911#if defined(MBEDTLS_HMAC_DRBG_C) && \
Gilles Peskine449bd832023-01-11 14:50:10 +0100912 (defined(MBEDTLS_SHA1_C) || defined(MBEDTLS_SHA256_C))
913 if (todo.hmac_drbg) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200914 mbedtls_hmac_drbg_context hmac_drbg;
915 const mbedtls_md_info_t *md_info;
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100916
Gilles Peskine449bd832023-01-11 14:50:10 +0100917 mbedtls_hmac_drbg_init(&hmac_drbg);
Manuel Pégourié-Gonnardf9e94812015-04-28 22:07:14 +0200918
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200919#if defined(MBEDTLS_SHA1_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100920 if ((md_info = mbedtls_md_info_from_type(MBEDTLS_MD_SHA1)) == NULL) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200921 mbedtls_exit(1);
Gilles Peskine449bd832023-01-11 14:50:10 +0100922 }
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100923
Gilles Peskine449bd832023-01-11 14:50:10 +0100924 if (mbedtls_hmac_drbg_seed(&hmac_drbg, md_info, myrand, NULL, NULL, 0) != 0) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200925 mbedtls_exit(1);
Gilles Peskine449bd832023-01-11 14:50:10 +0100926 }
927 TIME_AND_TSC("HMAC_DRBG SHA-1 (NOPR)",
928 mbedtls_hmac_drbg_random(&hmac_drbg, buf, BUFSIZE));
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100929
Gilles Peskine449bd832023-01-11 14:50:10 +0100930 if (mbedtls_hmac_drbg_seed(&hmac_drbg, md_info, myrand, NULL, NULL, 0) != 0) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200931 mbedtls_exit(1);
Gilles Peskine449bd832023-01-11 14:50:10 +0100932 }
933 mbedtls_hmac_drbg_set_prediction_resistance(&hmac_drbg,
934 MBEDTLS_HMAC_DRBG_PR_ON);
935 TIME_AND_TSC("HMAC_DRBG SHA-1 (PR)",
936 mbedtls_hmac_drbg_random(&hmac_drbg, buf, BUFSIZE));
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100937#endif
938
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200939#if defined(MBEDTLS_SHA256_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100940 if ((md_info = mbedtls_md_info_from_type(MBEDTLS_MD_SHA256)) == NULL) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200941 mbedtls_exit(1);
Gilles Peskine449bd832023-01-11 14:50:10 +0100942 }
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100943
Gilles Peskine449bd832023-01-11 14:50:10 +0100944 if (mbedtls_hmac_drbg_seed(&hmac_drbg, md_info, myrand, NULL, NULL, 0) != 0) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200945 mbedtls_exit(1);
Gilles Peskine449bd832023-01-11 14:50:10 +0100946 }
947 TIME_AND_TSC("HMAC_DRBG SHA-256 (NOPR)",
948 mbedtls_hmac_drbg_random(&hmac_drbg, buf, BUFSIZE));
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100949
Gilles Peskine449bd832023-01-11 14:50:10 +0100950 if (mbedtls_hmac_drbg_seed(&hmac_drbg, md_info, myrand, NULL, NULL, 0) != 0) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200951 mbedtls_exit(1);
Gilles Peskine449bd832023-01-11 14:50:10 +0100952 }
953 mbedtls_hmac_drbg_set_prediction_resistance(&hmac_drbg,
954 MBEDTLS_HMAC_DRBG_PR_ON);
955 TIME_AND_TSC("HMAC_DRBG SHA-256 (PR)",
956 mbedtls_hmac_drbg_random(&hmac_drbg, buf, BUFSIZE));
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100957#endif
Gilles Peskine449bd832023-01-11 14:50:10 +0100958 mbedtls_hmac_drbg_free(&hmac_drbg);
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100959 }
Andrzej Kurek68327742022-10-03 06:18:18 -0400960#endif /* MBEDTLS_HMAC_DRBG_C && ( MBEDTLS_SHA1_C || MBEDTLS_SHA256_C ) */
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100961
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200962#if defined(MBEDTLS_RSA_C) && defined(MBEDTLS_GENPRIME)
Gilles Peskine449bd832023-01-11 14:50:10 +0100963 if (todo.rsa) {
Manuel Pégourié-Gonnard71e75dc2014-12-19 18:05:43 +0100964 int keysize;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200965 mbedtls_rsa_context rsa;
Gilles Peskine449bd832023-01-11 14:50:10 +0100966 for (keysize = 2048; keysize <= 4096; keysize *= 2) {
967 mbedtls_snprintf(title, sizeof(title), "RSA-%d", keysize);
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200968
Gilles Peskine449bd832023-01-11 14:50:10 +0100969 mbedtls_rsa_init(&rsa);
970 mbedtls_rsa_gen_key(&rsa, myrand, NULL, keysize, 65537);
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200971
Gilles Peskine449bd832023-01-11 14:50:10 +0100972 TIME_PUBLIC(title, " public",
973 buf[0] = 0;
974 ret = mbedtls_rsa_public(&rsa, buf, buf));
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200975
Gilles Peskine449bd832023-01-11 14:50:10 +0100976 TIME_PUBLIC(title, "private",
977 buf[0] = 0;
978 ret = mbedtls_rsa_private(&rsa, myrand, NULL, buf, buf));
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200979
Gilles Peskine449bd832023-01-11 14:50:10 +0100980 mbedtls_rsa_free(&rsa);
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200981 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000982 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000983#endif
984
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200985#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_BIGNUM_C)
Gilles Peskine449bd832023-01-11 14:50:10 +0100986 if (todo.dhm) {
Manuel Pégourié-Gonnard4f3368e2015-07-19 15:01:28 +0200987 int dhm_sizes[] = { 2048, 3072 };
Brendan Shankse61514d2018-03-08 17:40:56 -0800988 static const unsigned char dhm_P_2048[] =
Hanno Beckerb9539212017-10-04 13:13:34 +0100989 MBEDTLS_DHM_RFC3526_MODP_2048_P_BIN;
Brendan Shankse61514d2018-03-08 17:40:56 -0800990 static const unsigned char dhm_P_3072[] =
Hanno Beckerb9539212017-10-04 13:13:34 +0100991 MBEDTLS_DHM_RFC3526_MODP_3072_P_BIN;
Brendan Shankse61514d2018-03-08 17:40:56 -0800992 static const unsigned char dhm_G_2048[] =
Hanno Beckerb9539212017-10-04 13:13:34 +0100993 MBEDTLS_DHM_RFC3526_MODP_2048_G_BIN;
Brendan Shankse61514d2018-03-08 17:40:56 -0800994 static const unsigned char dhm_G_3072[] =
Hanno Beckerb9539212017-10-04 13:13:34 +0100995 MBEDTLS_DHM_RFC3526_MODP_3072_G_BIN;
996
997 const unsigned char *dhm_P[] = { dhm_P_2048, dhm_P_3072 };
Gilles Peskine449bd832023-01-11 14:50:10 +0100998 const size_t dhm_P_size[] = { sizeof(dhm_P_2048),
999 sizeof(dhm_P_3072) };
Hanno Beckerb9539212017-10-04 13:13:34 +01001000
1001 const unsigned char *dhm_G[] = { dhm_G_2048, dhm_G_3072 };
Gilles Peskine449bd832023-01-11 14:50:10 +01001002 const size_t dhm_G_size[] = { sizeof(dhm_G_2048),
1003 sizeof(dhm_G_3072) };
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +02001004
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001005 mbedtls_dhm_context dhm;
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +02001006 size_t olen;
Gilles Peskine487bbf62021-05-27 22:17:07 +02001007 size_t n;
Gilles Peskine449bd832023-01-11 14:50:10 +01001008 for (i = 0; (size_t) i < sizeof(dhm_sizes) / sizeof(dhm_sizes[0]); i++) {
1009 mbedtls_dhm_init(&dhm);
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +02001010
Gilles Peskine449bd832023-01-11 14:50:10 +01001011 if (mbedtls_mpi_read_binary(&dhm.P, dhm_P[i],
1012 dhm_P_size[i]) != 0 ||
1013 mbedtls_mpi_read_binary(&dhm.G, dhm_G[i],
1014 dhm_G_size[i]) != 0) {
1015 mbedtls_exit(1);
Paul Bakkercbe3d0d2014-04-17 16:00:59 +02001016 }
1017
Gilles Peskine449bd832023-01-11 14:50:10 +01001018 n = mbedtls_mpi_size(&dhm.P);
1019 mbedtls_dhm_make_public(&dhm, (int) n, buf, n, myrand, NULL);
1020 if (mbedtls_mpi_copy(&dhm.GY, &dhm.GX) != 0) {
1021 mbedtls_exit(1);
1022 }
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +02001023
Gilles Peskine449bd832023-01-11 14:50:10 +01001024 mbedtls_snprintf(title, sizeof(title), "DHE-%d", dhm_sizes[i]);
1025 TIME_PUBLIC(title, "handshake",
1026 ret |= mbedtls_dhm_make_public(&dhm, (int) n, buf, n,
1027 myrand, NULL);
1028 ret |=
1029 mbedtls_dhm_calc_secret(&dhm, buf, sizeof(buf), &olen, myrand, NULL));
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +02001030
Gilles Peskine449bd832023-01-11 14:50:10 +01001031 mbedtls_snprintf(title, sizeof(title), "DH-%d", dhm_sizes[i]);
1032 TIME_PUBLIC(title, "handshake",
1033 ret |=
1034 mbedtls_dhm_calc_secret(&dhm, buf, sizeof(buf), &olen, myrand, NULL));
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +02001035
Gilles Peskine449bd832023-01-11 14:50:10 +01001036 mbedtls_dhm_free(&dhm);
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +02001037 }
Manuel Pégourié-Gonnarde870c0a2012-11-08 11:31:48 +01001038 }
Manuel Pégourié-Gonnarde870c0a2012-11-08 11:31:48 +01001039#endif
1040
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001041#if defined(MBEDTLS_ECDSA_C) && defined(MBEDTLS_SHA256_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01001042 if (todo.ecdsa) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001043 mbedtls_ecdsa_context ecdsa;
1044 const mbedtls_ecp_curve_info *curve_info;
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +02001045 size_t sig_len;
1046
Gilles Peskine449bd832023-01-11 14:50:10 +01001047 memset(buf, 0x2A, sizeof(buf));
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +02001048
Gilles Peskine449bd832023-01-11 14:50:10 +01001049 for (curve_info = curve_list;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001050 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
Gilles Peskine449bd832023-01-11 14:50:10 +01001051 curve_info++) {
1052 if (!mbedtls_ecdsa_can_do(curve_info->grp_id)) {
Christoph M. Wintersteiger6a1a9e42019-01-07 13:47:30 +00001053 continue;
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +01001054 }
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +01001055
Gilles Peskine449bd832023-01-11 14:50:10 +01001056 mbedtls_ecdsa_init(&ecdsa);
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +02001057
Gilles Peskine449bd832023-01-11 14:50:10 +01001058 if (mbedtls_ecdsa_genkey(&ecdsa, curve_info->grp_id, myrand, NULL) != 0) {
1059 mbedtls_exit(1);
1060 }
1061
1062 mbedtls_snprintf(title, sizeof(title), "ECDSA-%s",
1063 curve_info->name);
1064 TIME_PUBLIC(title,
1065 "sign",
1066 ret =
1067 mbedtls_ecdsa_write_signature(&ecdsa, MBEDTLS_MD_SHA256, buf,
1068 curve_info->bit_size,
1069 tmp, sizeof(tmp), &sig_len, myrand,
1070 NULL));
1071
1072 mbedtls_ecdsa_free(&ecdsa);
1073 }
1074
1075 for (curve_info = curve_list;
1076 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
1077 curve_info++) {
1078 if (!mbedtls_ecdsa_can_do(curve_info->grp_id)) {
1079 continue;
1080 }
1081
1082 mbedtls_ecdsa_init(&ecdsa);
1083
1084 if (mbedtls_ecdsa_genkey(&ecdsa, curve_info->grp_id, myrand, NULL) != 0 ||
1085 mbedtls_ecdsa_write_signature(&ecdsa, MBEDTLS_MD_SHA256, buf, curve_info->bit_size,
1086 tmp, sizeof(tmp), &sig_len, myrand, NULL) != 0) {
1087 mbedtls_exit(1);
1088 }
1089
1090 mbedtls_snprintf(title, sizeof(title), "ECDSA-%s",
1091 curve_info->name);
1092 TIME_PUBLIC(title, "verify",
1093 ret = mbedtls_ecdsa_read_signature(&ecdsa, buf, curve_info->bit_size,
1094 tmp, sig_len));
1095
1096 mbedtls_ecdsa_free(&ecdsa);
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +02001097 }
1098 }
1099#endif
1100
Janos Follath52735ef2018-08-15 10:19:16 +01001101#if defined(MBEDTLS_ECDH_C) && defined(MBEDTLS_ECDH_LEGACY_CONTEXT)
Gilles Peskine449bd832023-01-11 14:50:10 +01001102 if (todo.ecdh) {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001103 mbedtls_ecdh_context ecdh;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001104 mbedtls_mpi z;
Nicholas Wilson08f3ef12015-11-10 13:10:01 +00001105 const mbedtls_ecp_curve_info montgomery_curve_list[] = {
1106#if defined(MBEDTLS_ECP_DP_CURVE25519_ENABLED)
1107 { MBEDTLS_ECP_DP_CURVE25519, 0, 0, "Curve25519" },
Manuel Pégourié-Gonnard85391f22015-02-05 09:54:48 +00001108#endif
Nicholas Wilson08f3ef12015-11-10 13:10:01 +00001109#if defined(MBEDTLS_ECP_DP_CURVE448_ENABLED)
1110 { MBEDTLS_ECP_DP_CURVE448, 0, 0, "Curve448" },
1111#endif
1112 { MBEDTLS_ECP_DP_NONE, 0, 0, 0 }
1113 };
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001114 const mbedtls_ecp_curve_info *curve_info;
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +02001115 size_t olen;
Gilles Peskine28f62f62020-07-24 02:06:46 +02001116 const mbedtls_ecp_curve_info *selected_montgomery_curve_list =
1117 montgomery_curve_list;
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +02001118
Gilles Peskine449bd832023-01-11 14:50:10 +01001119 if (curve_list == (const mbedtls_ecp_curve_info *) &single_curve) {
Gilles Peskine28f62f62020-07-24 02:06:46 +02001120 mbedtls_ecp_group grp;
Gilles Peskine449bd832023-01-11 14:50:10 +01001121 mbedtls_ecp_group_init(&grp);
1122 if (mbedtls_ecp_group_load(&grp, curve_list->grp_id) != 0) {
1123 mbedtls_exit(1);
1124 }
1125 if (mbedtls_ecp_get_type(&grp) == MBEDTLS_ECP_TYPE_MONTGOMERY) {
Gilles Peskine28f62f62020-07-24 02:06:46 +02001126 selected_montgomery_curve_list = single_curve;
Gilles Peskine449bd832023-01-11 14:50:10 +01001127 } else { /* empty list */
Gilles Peskine28f62f62020-07-24 02:06:46 +02001128 selected_montgomery_curve_list = single_curve + 1;
Gilles Peskine449bd832023-01-11 14:50:10 +01001129 }
1130 mbedtls_ecp_group_free(&grp);
Gilles Peskine28f62f62020-07-24 02:06:46 +02001131 }
1132
Gilles Peskine449bd832023-01-11 14:50:10 +01001133 for (curve_info = curve_list;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001134 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
Gilles Peskine449bd832023-01-11 14:50:10 +01001135 curve_info++) {
1136 if (!mbedtls_ecdh_can_do(curve_info->grp_id)) {
Gilles Peskinec6c7c492019-02-11 18:41:27 +01001137 continue;
Gilles Peskine449bd832023-01-11 14:50:10 +01001138 }
Gilles Peskinec6c7c492019-02-11 18:41:27 +01001139
Gilles Peskine449bd832023-01-11 14:50:10 +01001140 mbedtls_ecdh_init(&ecdh);
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +02001141
Gilles Peskine449bd832023-01-11 14:50:10 +01001142 CHECK_AND_CONTINUE(mbedtls_ecp_group_load(&ecdh.grp, curve_info->grp_id));
1143 CHECK_AND_CONTINUE(mbedtls_ecdh_make_public(&ecdh, &olen, buf, sizeof(buf),
1144 myrand, NULL));
1145 CHECK_AND_CONTINUE(mbedtls_ecp_copy(&ecdh.Qp, &ecdh.Q));
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +02001146
Gilles Peskine449bd832023-01-11 14:50:10 +01001147 mbedtls_snprintf(title, sizeof(title), "ECDHE-%s",
1148 curve_info->name);
1149 TIME_PUBLIC(title, "handshake",
1150 CHECK_AND_CONTINUE(mbedtls_ecdh_make_public(&ecdh, &olen, buf, sizeof(buf),
1151 myrand, NULL));
1152 CHECK_AND_CONTINUE(mbedtls_ecdh_calc_secret(&ecdh, &olen, buf, sizeof(buf),
1153 myrand, NULL)));
1154 mbedtls_ecdh_free(&ecdh);
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +01001155 }
1156
Nicholas Wilson08f3ef12015-11-10 13:10:01 +00001157 /* Montgomery curves need to be handled separately */
Gilles Peskine449bd832023-01-11 14:50:10 +01001158 for (curve_info = selected_montgomery_curve_list;
1159 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
1160 curve_info++) {
1161 mbedtls_ecdh_init(&ecdh);
1162 mbedtls_mpi_init(&z);
Nicholas Wilson08f3ef12015-11-10 13:10:01 +00001163
Gilles Peskine449bd832023-01-11 14:50:10 +01001164 CHECK_AND_CONTINUE(mbedtls_ecp_group_load(&ecdh.grp, curve_info->grp_id));
1165 CHECK_AND_CONTINUE(mbedtls_ecdh_gen_public(&ecdh.grp, &ecdh.d, &ecdh.Qp, myrand, NULL));
Nicholas Wilson08f3ef12015-11-10 13:10:01 +00001166
Gilles Peskine449bd832023-01-11 14:50:10 +01001167 mbedtls_snprintf(title, sizeof(title), "ECDHE-%s",
1168 curve_info->name);
1169 TIME_PUBLIC(title, "handshake",
1170 CHECK_AND_CONTINUE(mbedtls_ecdh_gen_public(&ecdh.grp, &ecdh.d, &ecdh.Q,
1171 myrand, NULL));
1172 CHECK_AND_CONTINUE(mbedtls_ecdh_compute_shared(&ecdh.grp, &z, &ecdh.Qp,
1173 &ecdh.d,
1174 myrand, NULL)));
Nicholas Wilson08f3ef12015-11-10 13:10:01 +00001175
Gilles Peskine449bd832023-01-11 14:50:10 +01001176 mbedtls_ecdh_free(&ecdh);
1177 mbedtls_mpi_free(&z);
Manuel Pégourié-Gonnard85391f22015-02-05 09:54:48 +00001178 }
1179
Gilles Peskine449bd832023-01-11 14:50:10 +01001180 for (curve_info = curve_list;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001181 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
Gilles Peskine449bd832023-01-11 14:50:10 +01001182 curve_info++) {
1183 if (!mbedtls_ecdh_can_do(curve_info->grp_id)) {
Gilles Peskinec6c7c492019-02-11 18:41:27 +01001184 continue;
Gilles Peskine449bd832023-01-11 14:50:10 +01001185 }
Gilles Peskinec6c7c492019-02-11 18:41:27 +01001186
Gilles Peskine449bd832023-01-11 14:50:10 +01001187 mbedtls_ecdh_init(&ecdh);
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +01001188
Gilles Peskine449bd832023-01-11 14:50:10 +01001189 CHECK_AND_CONTINUE(mbedtls_ecp_group_load(&ecdh.grp, curve_info->grp_id));
1190 CHECK_AND_CONTINUE(mbedtls_ecdh_make_public(&ecdh, &olen, buf, sizeof(buf),
1191 myrand, NULL));
1192 CHECK_AND_CONTINUE(mbedtls_ecp_copy(&ecdh.Qp, &ecdh.Q));
1193 CHECK_AND_CONTINUE(mbedtls_ecdh_make_public(&ecdh, &olen, buf, sizeof(buf),
1194 myrand, NULL));
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +02001195
Gilles Peskine449bd832023-01-11 14:50:10 +01001196 mbedtls_snprintf(title, sizeof(title), "ECDH-%s",
1197 curve_info->name);
1198 TIME_PUBLIC(title, "handshake",
1199 CHECK_AND_CONTINUE(mbedtls_ecdh_calc_secret(&ecdh, &olen, buf, sizeof(buf),
1200 myrand, NULL)));
1201 mbedtls_ecdh_free(&ecdh);
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +02001202 }
Manuel Pégourié-Gonnard85391f22015-02-05 09:54:48 +00001203
Nicholas Wilson08f3ef12015-11-10 13:10:01 +00001204 /* Montgomery curves need to be handled separately */
Gilles Peskine449bd832023-01-11 14:50:10 +01001205 for (curve_info = selected_montgomery_curve_list;
1206 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
1207 curve_info++) {
1208 mbedtls_ecdh_init(&ecdh);
1209 mbedtls_mpi_init(&z);
Nicholas Wilson08f3ef12015-11-10 13:10:01 +00001210
Gilles Peskine449bd832023-01-11 14:50:10 +01001211 CHECK_AND_CONTINUE(mbedtls_ecp_group_load(&ecdh.grp, curve_info->grp_id));
1212 CHECK_AND_CONTINUE(mbedtls_ecdh_gen_public(&ecdh.grp, &ecdh.d, &ecdh.Qp,
1213 myrand, NULL));
1214 CHECK_AND_CONTINUE(mbedtls_ecdh_gen_public(&ecdh.grp, &ecdh.d, &ecdh.Q, myrand, NULL));
Nicholas Wilson08f3ef12015-11-10 13:10:01 +00001215
Gilles Peskine449bd832023-01-11 14:50:10 +01001216 mbedtls_snprintf(title, sizeof(title), "ECDH-%s",
1217 curve_info->name);
1218 TIME_PUBLIC(title, "handshake",
1219 CHECK_AND_CONTINUE(mbedtls_ecdh_compute_shared(&ecdh.grp, &z, &ecdh.Qp,
1220 &ecdh.d,
1221 myrand, NULL)));
Nicholas Wilson08f3ef12015-11-10 13:10:01 +00001222
Gilles Peskine449bd832023-01-11 14:50:10 +01001223 mbedtls_ecdh_free(&ecdh);
1224 mbedtls_mpi_free(&z);
Manuel Pégourié-Gonnard85391f22015-02-05 09:54:48 +00001225 }
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +02001226 }
1227#endif
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +01001228
Christoph M. Wintersteigere50b9702018-12-14 11:03:02 +00001229#if defined(MBEDTLS_ECDH_C)
Gilles Peskine449bd832023-01-11 14:50:10 +01001230 if (todo.ecdh) {
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001231 mbedtls_ecdh_context ecdh_srv, ecdh_cli;
1232 unsigned char buf_srv[BUFSIZE], buf_cli[BUFSIZE];
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001233 const mbedtls_ecp_curve_info *curve_info;
1234 size_t olen;
1235
Gilles Peskine449bd832023-01-11 14:50:10 +01001236 for (curve_info = curve_list;
1237 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
1238 curve_info++) {
1239 if (!mbedtls_ecdh_can_do(curve_info->grp_id)) {
Gilles Peskinec6c7c492019-02-11 18:41:27 +01001240 continue;
Gilles Peskine449bd832023-01-11 14:50:10 +01001241 }
Gilles Peskinec6c7c492019-02-11 18:41:27 +01001242
Gilles Peskine449bd832023-01-11 14:50:10 +01001243 mbedtls_ecdh_init(&ecdh_srv);
1244 mbedtls_ecdh_init(&ecdh_cli);
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001245
Gilles Peskine449bd832023-01-11 14:50:10 +01001246 mbedtls_snprintf(title, sizeof(title), "ECDHE-%s", curve_info->name);
1247 TIME_PUBLIC(title,
1248 "full handshake",
1249 const unsigned char *p_srv = buf_srv;
Christoph M. Wintersteiger12f359f2019-02-26 12:26:04 +00001250
Gilles Peskine449bd832023-01-11 14:50:10 +01001251 CHECK_AND_CONTINUE(mbedtls_ecdh_setup(&ecdh_srv, curve_info->grp_id));
1252 CHECK_AND_CONTINUE(mbedtls_ecdh_make_params(&ecdh_srv, &olen, buf_srv,
1253 sizeof(buf_srv), myrand, NULL));
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001254
Gilles Peskine449bd832023-01-11 14:50:10 +01001255 CHECK_AND_CONTINUE(mbedtls_ecdh_read_params(&ecdh_cli, &p_srv,
1256 p_srv + olen));
1257 CHECK_AND_CONTINUE(mbedtls_ecdh_make_public(&ecdh_cli, &olen, buf_cli,
1258 sizeof(buf_cli), myrand, NULL));
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001259
Gilles Peskine449bd832023-01-11 14:50:10 +01001260 CHECK_AND_CONTINUE(mbedtls_ecdh_read_public(&ecdh_srv, buf_cli, olen));
1261 CHECK_AND_CONTINUE(mbedtls_ecdh_calc_secret(&ecdh_srv, &olen, buf_srv,
1262 sizeof(buf_srv), myrand, NULL));
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001263
Gilles Peskine449bd832023-01-11 14:50:10 +01001264 CHECK_AND_CONTINUE(mbedtls_ecdh_calc_secret(&ecdh_cli, &olen, buf_cli,
1265 sizeof(buf_cli), myrand, NULL));
1266 mbedtls_ecdh_free(&ecdh_cli);
Christoph M. Wintersteiger12f359f2019-02-26 12:26:04 +00001267
Gilles Peskine449bd832023-01-11 14:50:10 +01001268 mbedtls_ecdh_free(&ecdh_srv);
1269 );
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001270
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001271 }
1272 }
1273#endif
1274
Gilles Peskine449bd832023-01-11 14:50:10 +01001275 mbedtls_printf("\n");
Paul Bakker1d4da2e2009-10-25 12:36:53 +00001276
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001277#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
1278 mbedtls_memory_buffer_alloc_free();
Manuel Pégourié-Gonnard128657d2014-12-18 16:35:52 +00001279#endif
1280
Gilles Peskine449bd832023-01-11 14:50:10 +01001281 mbedtls_exit(0);
Paul Bakker5121ce52009-01-03 21:22:43 +00001282}
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +02001283
Andrzej Kurek6056e7a2022-03-02 12:01:10 -05001284#endif /* MBEDTLS_HAVE_TIME */