blob: 3e4ac8b616f6ca50dbe8144f9d6fec8e9a60ca76 [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/*
2 * Benchmark demonstration program
3 *
Bence Szépkúti1e148272020-08-07 13:07:28 +02004 * Copyright The Mbed TLS Contributors
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02005 * SPDX-License-Identifier: Apache-2.0
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
8 * not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
Paul Bakker5121ce52009-01-03 21:22:43 +000018 */
19
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020020#if !defined(MBEDTLS_CONFIG_FILE)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000021#include "mbedtls/config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020022#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020023#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020024#endif
Paul Bakker5121ce52009-01-03 21:22:43 +000025
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000026#include "mbedtls/platform.h"
Christoph M. Wintersteigercc91fe22019-02-20 18:06:00 +000027#if !defined(MBEDTLS_PLATFORM_C)
Rich Evans18b78c72015-02-11 14:06:19 +000028#include <stdio.h>
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +010029#include <stdlib.h>
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020030#define mbedtls_exit exit
31#define mbedtls_printf printf
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020032#define mbedtls_free free
Rich Evansf90016a2015-01-19 14:26:37 +000033#endif
34
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020035#if !defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnard714929b2015-02-16 17:32:47 +000036int main( void )
37{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020038 mbedtls_printf("MBEDTLS_TIMING_C not defined.\n");
k-stachowiak776521a2019-05-23 09:46:47 +020039 mbedtls_exit( 0 );
Manuel Pégourié-Gonnard714929b2015-02-16 17:32:47 +000040}
41#else
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +010042
Manuel Pégourié-Gonnard714929b2015-02-16 17:32:47 +000043#include <string.h>
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +020044#include <stdlib.h>
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +010045
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000046#include "mbedtls/timing.h"
Paul Bakker5121ce52009-01-03 21:22:43 +000047
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000048#include "mbedtls/md4.h"
49#include "mbedtls/md5.h"
50#include "mbedtls/ripemd160.h"
51#include "mbedtls/sha1.h"
52#include "mbedtls/sha256.h"
53#include "mbedtls/sha512.h"
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +010054
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000055#include "mbedtls/arc4.h"
56#include "mbedtls/des.h"
57#include "mbedtls/aes.h"
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +010058#include "mbedtls/aria.h"
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000059#include "mbedtls/blowfish.h"
60#include "mbedtls/camellia.h"
Daniel King34b822c2016-05-15 17:28:08 -030061#include "mbedtls/chacha20.h"
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000062#include "mbedtls/gcm.h"
63#include "mbedtls/ccm.h"
Manuel Pégourié-Gonnardd6aea182018-05-09 10:21:28 +020064#include "mbedtls/chachapoly.h"
Simon Butcher549dc3d2016-10-05 14:14:19 +010065#include "mbedtls/cmac.h"
Daniel Kingadc32c02016-05-16 18:25:45 -030066#include "mbedtls/poly1305.h"
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +010067
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000068#include "mbedtls/ctr_drbg.h"
69#include "mbedtls/hmac_drbg.h"
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +010070
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000071#include "mbedtls/rsa.h"
72#include "mbedtls/dhm.h"
73#include "mbedtls/ecdsa.h"
74#include "mbedtls/ecdh.h"
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +010075
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000076#include "mbedtls/error.h"
Paul Bakker5121ce52009-01-03 21:22:43 +000077
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020078#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000079#include "mbedtls/memory_buffer_alloc.h"
Rich Evans18b78c72015-02-11 14:06:19 +000080#endif
81
Manuel Pégourié-Gonnard714929b2015-02-16 17:32:47 +000082/*
83 * For heap usage estimates, we need an estimate of the overhead per allocated
84 * block. ptmalloc2/3 (used in gnu libc for instance) uses 2 size_t per block,
85 * so use that as our baseline.
86 */
87#define MEM_BLOCK_OVERHEAD ( 2 * sizeof( size_t ) )
88
89/*
Manuel Pégourié-Gonnardb2a18a22015-05-27 16:29:56 +020090 * Size to use for the alloc buffer if MEMORY_BUFFER_ALLOC_C is defined.
Manuel Pégourié-Gonnard714929b2015-02-16 17:32:47 +000091 */
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +010092#define HEAP_SIZE (1u << 16) /* 64k */
Manuel Pégourié-Gonnard714929b2015-02-16 17:32:47 +000093
Paul Bakker02faf452011-11-29 11:23:58 +000094#define BUFSIZE 1024
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +010095#define HEADER_FORMAT " %-24s : "
Gergely Budaia5d336b2014-01-27 23:27:06 +010096#define TITLE_LEN 25
Manuel Pégourié-Gonnard6c5abfa2015-02-13 14:12:07 +000097
Rich Evans85b05ec2015-02-12 11:37:29 +000098#define OPTIONS \
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +020099 "md4, md5, ripemd160, sha1, sha256, sha512,\n" \
Daniel King34b822c2016-05-15 17:28:08 -0300100 "arc4, des3, des, camellia, blowfish, chacha20,\n" \
Zhai Zhaoxuane22da992020-05-09 23:50:32 +0800101 "aes_cbc, aes_gcm, aes_ccm, aes_xts, chachapoly,\n" \
Daniel Kingadc32c02016-05-16 18:25:45 -0300102 "aes_cmac, des3_cmac, poly1305\n" \
Mateusz Starzyk0fdcc8e2021-01-29 16:46:31 +0100103 "ctr_drbg, hmac_drbg\n" \
Rich Evans85b05ec2015-02-12 11:37:29 +0000104 "rsa, dhm, ecdsa, ecdh.\n"
105
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200106#if defined(MBEDTLS_ERROR_C)
Rich Evans85b05ec2015-02-12 11:37:29 +0000107#define PRINT_ERROR \
Simon Butcherb981b162016-10-06 10:27:22 +0100108 mbedtls_strerror( ret, ( char * )tmp, sizeof( tmp ) ); \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200109 mbedtls_printf( "FAILED: %s\n", tmp );
Rich Evans85b05ec2015-02-12 11:37:29 +0000110#else
111#define PRINT_ERROR \
Kenneth Soerensen518d4352020-04-01 17:22:45 +0200112 mbedtls_printf( "FAILED: -0x%04x\n", (unsigned int) -ret );
Rich Evans85b05ec2015-02-12 11:37:29 +0000113#endif
114
115#define TIME_AND_TSC( TITLE, CODE ) \
116do { \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200117 unsigned long ii, jj, tsc; \
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200118 int ret = 0; \
Rich Evans85b05ec2015-02-12 11:37:29 +0000119 \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200120 mbedtls_printf( HEADER_FORMAT, TITLE ); \
Rich Evans85b05ec2015-02-12 11:37:29 +0000121 fflush( stdout ); \
122 \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200123 mbedtls_set_alarm( 1 ); \
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200124 for( ii = 1; ret == 0 && ! mbedtls_timing_alarmed; ii++ ) \
Rich Evans85b05ec2015-02-12 11:37:29 +0000125 { \
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200126 ret = CODE; \
Rich Evans85b05ec2015-02-12 11:37:29 +0000127 } \
128 \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200129 tsc = mbedtls_timing_hardclock(); \
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200130 for( jj = 0; ret == 0 && jj < 1024; jj++ ) \
Rich Evans85b05ec2015-02-12 11:37:29 +0000131 { \
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200132 ret = CODE; \
Rich Evans85b05ec2015-02-12 11:37:29 +0000133 } \
134 \
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200135 if( ret != 0 ) \
136 { \
137 PRINT_ERROR; \
138 } \
139 else \
140 { \
141 mbedtls_printf( "%9lu KiB/s, %9lu cycles/byte\n", \
142 ii * BUFSIZE / 1024, \
143 ( mbedtls_timing_hardclock() - tsc ) \
144 / ( jj * BUFSIZE ) ); \
145 } \
Rich Evans85b05ec2015-02-12 11:37:29 +0000146} while( 0 )
147
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200148#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C) && defined(MBEDTLS_MEMORY_DEBUG)
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100149
Manuel Pégourié-Gonnard5edd3882020-04-09 10:40:03 +0200150/* How much space to reserve for the title when printing heap usage results.
151 * Updated manually as the output of the following command:
152 *
153 * sed -n 's/.*[T]IME_PUBLIC.*"\(.*\)",/\1/p' programs/test/benchmark.c |
154 * awk '{print length+2}' | sort -rn | head -n1
155 *
156 * This computes the maximum length of a title +2 (because we appends "/s").
157 * (If the value is too small, the only consequence is poor alignement.) */
158#define TITLE_SPACE 16
159
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100160#define MEMORY_MEASURE_INIT \
161 size_t max_used, max_blocks, max_bytes; \
162 size_t prv_used, prv_blocks; \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200163 mbedtls_memory_buffer_alloc_cur_get( &prv_used, &prv_blocks ); \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200164 mbedtls_memory_buffer_alloc_max_reset( );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100165
166#define MEMORY_MEASURE_PRINT( title_len ) \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200167 mbedtls_memory_buffer_alloc_max_get( &max_used, &max_blocks ); \
Manuel Pégourié-Gonnard5edd3882020-04-09 10:40:03 +0200168 ii = TITLE_SPACE > (title_len) ? TITLE_SPACE - (title_len) : 1; \
169 while( ii-- ) mbedtls_printf( " " ); \
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100170 max_used -= prv_used; \
171 max_blocks -= prv_blocks; \
172 max_bytes = max_used + MEM_BLOCK_OVERHEAD * max_blocks; \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200173 mbedtls_printf( "%6u heap bytes", (unsigned) max_bytes );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100174
175#else
Manuel Pégourié-Gonnarde579dab2015-01-29 16:28:44 +0000176#define MEMORY_MEASURE_INIT
177#define MEMORY_MEASURE_PRINT( title_len )
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100178#endif
179
Rich Evans85b05ec2015-02-12 11:37:29 +0000180#define TIME_PUBLIC( TITLE, TYPE, CODE ) \
181do { \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200182 unsigned long ii; \
Rich Evans85b05ec2015-02-12 11:37:29 +0000183 int ret; \
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100184 MEMORY_MEASURE_INIT; \
Rich Evans85b05ec2015-02-12 11:37:29 +0000185 \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200186 mbedtls_printf( HEADER_FORMAT, TITLE ); \
Rich Evans85b05ec2015-02-12 11:37:29 +0000187 fflush( stdout ); \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200188 mbedtls_set_alarm( 3 ); \
Rich Evans85b05ec2015-02-12 11:37:29 +0000189 \
190 ret = 0; \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200191 for( ii = 1; ! mbedtls_timing_alarmed && ! ret ; ii++ ) \
Rich Evans85b05ec2015-02-12 11:37:29 +0000192 { \
193 CODE; \
194 } \
195 \
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000196 if( ret == MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED ) \
197 { \
198 mbedtls_printf( "Feature Not Supported. Skipping.\n" ); \
199 ret = 0; \
200 } \
201 else if( ret != 0 ) \
Rich Evans85b05ec2015-02-12 11:37:29 +0000202 { \
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100203 PRINT_ERROR; \
Rich Evans85b05ec2015-02-12 11:37:29 +0000204 } \
205 else \
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100206 { \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200207 mbedtls_printf( "%6lu " TYPE "/s", ii / 3 ); \
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100208 MEMORY_MEASURE_PRINT( sizeof( TYPE ) + 1 ); \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200209 mbedtls_printf( "\n" ); \
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100210 } \
Rich Evans85b05ec2015-02-12 11:37:29 +0000211} while( 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +0000212
Paul Bakkera3d195c2011-11-27 21:07:34 +0000213static int myrand( void *rng_state, unsigned char *output, size_t len )
Paul Bakker5121ce52009-01-03 21:22:43 +0000214{
Paul Bakkera3d195c2011-11-27 21:07:34 +0000215 size_t use_len;
216 int rnd;
217
Paul Bakker5121ce52009-01-03 21:22:43 +0000218 if( rng_state != NULL )
219 rng_state = NULL;
220
Paul Bakkera3d195c2011-11-27 21:07:34 +0000221 while( len > 0 )
222 {
223 use_len = len;
224 if( use_len > sizeof(int) )
225 use_len = sizeof(int);
226
227 rnd = rand();
228 memcpy( output, &rnd, use_len );
229 output += use_len;
230 len -= use_len;
231 }
232
233 return( 0 );
Paul Bakker5121ce52009-01-03 21:22:43 +0000234}
235
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000236#define CHECK_AND_CONTINUE( R ) \
237 { \
Gilles Peskineb14c4a52019-02-11 18:23:42 +0100238 int CHECK_AND_CONTINUE_ret = ( R ); \
239 if( CHECK_AND_CONTINUE_ret == MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED ) { \
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000240 mbedtls_printf( "Feature not supported. Skipping.\n" ); \
241 continue; \
242 } \
Gilles Peskineb14c4a52019-02-11 18:23:42 +0100243 else if( CHECK_AND_CONTINUE_ret != 0 ) { \
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000244 mbedtls_exit( 1 ); \
245 } \
246 }
Christoph M. Wintersteiger3dca1a42018-12-14 11:54:59 +0000247
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100248/*
249 * Clear some memory that was used to prepare the context
250 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200251#if defined(MBEDTLS_ECP_C)
252void ecp_clear_precomputed( mbedtls_ecp_group *grp )
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100253{
254 if( grp->T != NULL )
255 {
256 size_t i;
257 for( i = 0; i < grp->T_size; i++ )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200258 mbedtls_ecp_point_free( &grp->T[i] );
259 mbedtls_free( grp->T );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100260 }
261 grp->T = NULL;
262 grp->T_size = 0;
263}
264#else
265#define ecp_clear_precomputed( g )
266#endif
267
Gilles Peskine28f62f62020-07-24 02:06:46 +0200268#if defined(MBEDTLS_ECP_C)
269static int set_ecp_curve( const char *string, mbedtls_ecp_curve_info *curve )
270{
271 const mbedtls_ecp_curve_info *found =
272 mbedtls_ecp_curve_info_from_name( string );
273 if( found != NULL )
274 {
275 *curve = *found;
276 return( 1 );
277 }
278 else
279 return( 0 );
280}
281#endif
282
Paul Bakker5121ce52009-01-03 21:22:43 +0000283unsigned char buf[BUFSIZE];
284
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200285typedef struct {
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200286 char md4, md5, ripemd160, sha1, sha256, sha512,
Simon Butcher549dc3d2016-10-05 14:14:19 +0100287 arc4, des3, des,
Manuel Pégourié-Gonnard0dadba22018-06-19 11:11:15 +0200288 aes_cbc, aes_gcm, aes_ccm, aes_xts, chachapoly,
Manuel Pégourié-Gonnardd6aea182018-05-09 10:21:28 +0200289 aes_cmac, des3_cmac,
Manuel Pégourié-Gonnard39b19042018-06-07 12:01:33 +0200290 aria, camellia, blowfish, chacha20,
Daniel Kingadc32c02016-05-16 18:25:45 -0300291 poly1305,
Mateusz Starzyk0fdcc8e2021-01-29 16:46:31 +0100292 ctr_drbg, hmac_drbg,
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200293 rsa, dhm, ecdsa, ecdh;
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200294} todo_list;
295
Simon Butcher63cb97e2018-12-06 17:43:31 +0000296
Paul Bakkercce9d772011-11-18 14:26:47 +0000297int main( int argc, char *argv[] )
Paul Bakker5690efc2011-05-26 13:16:06 +0000298{
Manuel Pégourié-Gonnard71e75dc2014-12-19 18:05:43 +0100299 int i;
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200300 unsigned char tmp[200];
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200301 char title[TITLE_LEN];
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200302 todo_list todo;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200303#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Manuel Pégourié-Gonnardb2a18a22015-05-27 16:29:56 +0200304 unsigned char alloc_buf[HEAP_SIZE] = { 0 };
Manuel Pégourié-Gonnard128657d2014-12-18 16:35:52 +0000305#endif
Gilles Peskine28f62f62020-07-24 02:06:46 +0200306#if defined(MBEDTLS_ECP_C)
307 mbedtls_ecp_curve_info single_curve[2] = {
308 { MBEDTLS_ECP_DP_NONE, 0, 0, NULL },
309 { MBEDTLS_ECP_DP_NONE, 0, 0, NULL },
310 };
311 const mbedtls_ecp_curve_info *curve_list = mbedtls_ecp_curve_list( );
312#endif
313
314#if defined(MBEDTLS_ECP_C)
315 (void) curve_list; /* Unused in some configurations where no benchmark uses ECC */
316#endif
Paul Bakkercce9d772011-11-18 14:26:47 +0000317
Manuel Pégourié-Gonnardc439e7b2015-03-03 13:12:00 +0000318 if( argc <= 1 )
319 {
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200320 memset( &todo, 1, sizeof( todo ) );
Manuel Pégourié-Gonnardc439e7b2015-03-03 13:12:00 +0000321 }
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200322 else
323 {
324 memset( &todo, 0, sizeof( todo ) );
325
326 for( i = 1; i < argc; i++ )
327 {
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200328 if( strcmp( argv[i], "md4" ) == 0 )
329 todo.md4 = 1;
330 else if( strcmp( argv[i], "md5" ) == 0 )
331 todo.md5 = 1;
332 else if( strcmp( argv[i], "ripemd160" ) == 0 )
333 todo.ripemd160 = 1;
334 else if( strcmp( argv[i], "sha1" ) == 0 )
335 todo.sha1 = 1;
336 else if( strcmp( argv[i], "sha256" ) == 0 )
337 todo.sha256 = 1;
338 else if( strcmp( argv[i], "sha512" ) == 0 )
339 todo.sha512 = 1;
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200340 else if( strcmp( argv[i], "arc4" ) == 0 )
341 todo.arc4 = 1;
342 else if( strcmp( argv[i], "des3" ) == 0 )
343 todo.des3 = 1;
344 else if( strcmp( argv[i], "des" ) == 0 )
345 todo.des = 1;
346 else if( strcmp( argv[i], "aes_cbc" ) == 0 )
347 todo.aes_cbc = 1;
Aorimn5f778012016-06-09 23:22:58 +0200348 else if( strcmp( argv[i], "aes_xts" ) == 0 )
349 todo.aes_xts = 1;
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200350 else if( strcmp( argv[i], "aes_gcm" ) == 0 )
351 todo.aes_gcm = 1;
Manuel Pégourié-Gonnard58d78a82014-05-07 12:03:02 +0200352 else if( strcmp( argv[i], "aes_ccm" ) == 0 )
353 todo.aes_ccm = 1;
Manuel Pégourié-Gonnardd6aea182018-05-09 10:21:28 +0200354 else if( strcmp( argv[i], "chachapoly" ) == 0 )
355 todo.chachapoly = 1;
Simon Butcher549dc3d2016-10-05 14:14:19 +0100356 else if( strcmp( argv[i], "aes_cmac" ) == 0 )
357 todo.aes_cmac = 1;
358 else if( strcmp( argv[i], "des3_cmac" ) == 0 )
359 todo.des3_cmac = 1;
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +0100360 else if( strcmp( argv[i], "aria" ) == 0 )
361 todo.aria = 1;
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200362 else if( strcmp( argv[i], "camellia" ) == 0 )
363 todo.camellia = 1;
364 else if( strcmp( argv[i], "blowfish" ) == 0 )
365 todo.blowfish = 1;
Daniel King34b822c2016-05-15 17:28:08 -0300366 else if( strcmp( argv[i], "chacha20" ) == 0 )
367 todo.chacha20 = 1;
Daniel Kingadc32c02016-05-16 18:25:45 -0300368 else if( strcmp( argv[i], "poly1305" ) == 0 )
369 todo.poly1305 = 1;
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200370 else if( strcmp( argv[i], "ctr_drbg" ) == 0 )
371 todo.ctr_drbg = 1;
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100372 else if( strcmp( argv[i], "hmac_drbg" ) == 0 )
373 todo.hmac_drbg = 1;
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200374 else if( strcmp( argv[i], "rsa" ) == 0 )
375 todo.rsa = 1;
376 else if( strcmp( argv[i], "dhm" ) == 0 )
377 todo.dhm = 1;
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200378 else if( strcmp( argv[i], "ecdsa" ) == 0 )
379 todo.ecdsa = 1;
380 else if( strcmp( argv[i], "ecdh" ) == 0 )
381 todo.ecdh = 1;
Gilles Peskine28f62f62020-07-24 02:06:46 +0200382#if defined(MBEDTLS_ECP_C)
383 else if( set_ecp_curve( argv[i], single_curve ) )
384 curve_list = single_curve;
385#endif
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200386 else
387 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200388 mbedtls_printf( "Unrecognized option: %s\n", argv[i] );
389 mbedtls_printf( "Available options: " OPTIONS );
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200390 }
391 }
392 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000393
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200394 mbedtls_printf( "\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +0000395
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200396#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Manuel Pégourié-Gonnardb2a18a22015-05-27 16:29:56 +0200397 mbedtls_memory_buffer_alloc_init( alloc_buf, sizeof( alloc_buf ) );
Manuel Pégourié-Gonnard128657d2014-12-18 16:35:52 +0000398#endif
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200399 memset( buf, 0xAA, sizeof( buf ) );
Paul Bakkerdf71dd12014-04-17 16:03:48 +0200400 memset( tmp, 0xBB, sizeof( tmp ) );
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200401
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200402#if defined(MBEDTLS_MD4_C)
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200403 if( todo.md4 )
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100404 TIME_AND_TSC( "MD4", mbedtls_md4_ret( buf, BUFSIZE, tmp ) );
Paul Bakker5121ce52009-01-03 21:22:43 +0000405#endif
406
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200407#if defined(MBEDTLS_MD5_C)
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200408 if( todo.md5 )
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100409 TIME_AND_TSC( "MD5", mbedtls_md5_ret( buf, BUFSIZE, tmp ) );
Paul Bakker5121ce52009-01-03 21:22:43 +0000410#endif
411
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200412#if defined(MBEDTLS_RIPEMD160_C)
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200413 if( todo.ripemd160 )
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100414 TIME_AND_TSC( "RIPEMD160", mbedtls_ripemd160_ret( buf, BUFSIZE, tmp ) );
Manuel Pégourié-Gonnard01b0b382014-01-17 14:29:46 +0100415#endif
416
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200417#if defined(MBEDTLS_SHA1_C)
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200418 if( todo.sha1 )
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100419 TIME_AND_TSC( "SHA-1", mbedtls_sha1_ret( buf, BUFSIZE, tmp ) );
Paul Bakker5121ce52009-01-03 21:22:43 +0000420#endif
421
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200422#if defined(MBEDTLS_SHA256_C)
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200423 if( todo.sha256 )
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100424 TIME_AND_TSC( "SHA-256", mbedtls_sha256_ret( buf, BUFSIZE, tmp, 0 ) );
Paul Bakker5121ce52009-01-03 21:22:43 +0000425#endif
426
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200427#if defined(MBEDTLS_SHA512_C)
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200428 if( todo.sha512 )
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100429 TIME_AND_TSC( "SHA-512", mbedtls_sha512_ret( buf, BUFSIZE, tmp, 0 ) );
Paul Bakker3a3c3c22009-02-09 22:33:30 +0000430#endif
431
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200432#if defined(MBEDTLS_ARC4_C)
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200433 if( todo.arc4 )
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200434 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200435 mbedtls_arc4_context arc4;
436 mbedtls_arc4_init( &arc4 );
437 mbedtls_arc4_setup( &arc4, tmp, 32 );
438 TIME_AND_TSC( "ARC4", mbedtls_arc4_crypt( &arc4, BUFSIZE, buf, buf ) );
439 mbedtls_arc4_free( &arc4 );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200440 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000441#endif
442
Simon Butcher549dc3d2016-10-05 14:14:19 +0100443#if defined(MBEDTLS_DES_C)
444#if defined(MBEDTLS_CIPHER_MODE_CBC)
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200445 if( todo.des3 )
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200446 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200447 mbedtls_des3_context des3;
448 mbedtls_des3_init( &des3 );
449 mbedtls_des3_set3key_enc( &des3, tmp );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200450 TIME_AND_TSC( "3DES",
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200451 mbedtls_des3_crypt_cbc( &des3, MBEDTLS_DES_ENCRYPT, BUFSIZE, tmp, buf, buf ) );
452 mbedtls_des3_free( &des3 );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200453 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000454
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200455 if( todo.des )
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200456 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200457 mbedtls_des_context des;
458 mbedtls_des_init( &des );
459 mbedtls_des_setkey_enc( &des, tmp );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200460 TIME_AND_TSC( "DES",
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200461 mbedtls_des_crypt_cbc( &des, MBEDTLS_DES_ENCRYPT, BUFSIZE, tmp, buf, buf ) );
462 mbedtls_des_free( &des );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200463 }
Simon Butcher549dc3d2016-10-05 14:14:19 +0100464
465#endif /* MBEDTLS_CIPHER_MODE_CBC */
466#if defined(MBEDTLS_CMAC_C)
467 if( todo.des3_cmac )
468 {
469 unsigned char output[8];
470 const mbedtls_cipher_info_t *cipher_info;
471
472 memset( buf, 0, sizeof( buf ) );
473 memset( tmp, 0, sizeof( tmp ) );
474
475 cipher_info = mbedtls_cipher_info_from_type( MBEDTLS_CIPHER_DES_EDE3_ECB );
476
477 TIME_AND_TSC( "3DES-CMAC",
Simon Butcherb981b162016-10-06 10:27:22 +0100478 mbedtls_cipher_cmac( cipher_info, tmp, 192, buf,
479 BUFSIZE, output ) );
Simon Butcher549dc3d2016-10-05 14:14:19 +0100480 }
481#endif /* MBEDTLS_CMAC_C */
482#endif /* MBEDTLS_DES_C */
Paul Bakker5121ce52009-01-03 21:22:43 +0000483
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200484#if defined(MBEDTLS_AES_C)
485#if defined(MBEDTLS_CIPHER_MODE_CBC)
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200486 if( todo.aes_cbc )
Paul Bakker5121ce52009-01-03 21:22:43 +0000487 {
Manuel Pégourié-Gonnard71e75dc2014-12-19 18:05:43 +0100488 int keysize;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200489 mbedtls_aes_context aes;
490 mbedtls_aes_init( &aes );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200491 for( keysize = 128; keysize <= 256; keysize += 64 )
492 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200493 mbedtls_snprintf( title, sizeof( title ), "AES-CBC-%d", keysize );
Paul Bakker5121ce52009-01-03 21:22:43 +0000494
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200495 memset( buf, 0, sizeof( buf ) );
496 memset( tmp, 0, sizeof( tmp ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200497 mbedtls_aes_setkey_enc( &aes, tmp, keysize );
Paul Bakker5121ce52009-01-03 21:22:43 +0000498
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200499 TIME_AND_TSC( title,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200500 mbedtls_aes_crypt_cbc( &aes, MBEDTLS_AES_ENCRYPT, BUFSIZE, tmp, buf, buf ) );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200501 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200502 mbedtls_aes_free( &aes );
Paul Bakker5121ce52009-01-03 21:22:43 +0000503 }
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200504#endif
Aorimn5f778012016-06-09 23:22:58 +0200505#if defined(MBEDTLS_CIPHER_MODE_XTS)
506 if( todo.aes_xts )
507 {
508 int keysize;
Jaeden Amero9366feb2018-05-29 18:55:17 +0100509 mbedtls_aes_xts_context ctx;
510
511 mbedtls_aes_xts_init( &ctx );
512 for( keysize = 128; keysize <= 256; keysize += 128 )
Aorimn5f778012016-06-09 23:22:58 +0200513 {
514 mbedtls_snprintf( title, sizeof( title ), "AES-XTS-%d", keysize );
515
516 memset( buf, 0, sizeof( buf ) );
517 memset( tmp, 0, sizeof( tmp ) );
Jaeden Amero9366feb2018-05-29 18:55:17 +0100518 mbedtls_aes_xts_setkey_enc( &ctx, tmp, keysize * 2 );
Aorimn5f778012016-06-09 23:22:58 +0200519
520 TIME_AND_TSC( title,
Jaeden Amero9366feb2018-05-29 18:55:17 +0100521 mbedtls_aes_crypt_xts( &ctx, MBEDTLS_AES_ENCRYPT, BUFSIZE,
522 tmp, buf, buf ) );
523
524 mbedtls_aes_xts_free( &ctx );
Aorimn5f778012016-06-09 23:22:58 +0200525 }
Aorimn5f778012016-06-09 23:22:58 +0200526 }
527#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200528#if defined(MBEDTLS_GCM_C)
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200529 if( todo.aes_gcm )
Paul Bakker89e80c92012-03-20 13:50:09 +0000530 {
Manuel Pégourié-Gonnard71e75dc2014-12-19 18:05:43 +0100531 int keysize;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200532 mbedtls_gcm_context gcm;
Manuel Pégourié-Gonnardc34e8dd2015-04-28 21:42:17 +0200533
534 mbedtls_gcm_init( &gcm );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200535 for( keysize = 128; keysize <= 256; keysize += 64 )
536 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200537 mbedtls_snprintf( title, sizeof( title ), "AES-GCM-%d", keysize );
Paul Bakker89e80c92012-03-20 13:50:09 +0000538
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200539 memset( buf, 0, sizeof( buf ) );
540 memset( tmp, 0, sizeof( tmp ) );
Manuel Pégourié-Gonnardc34e8dd2015-04-28 21:42:17 +0200541 mbedtls_gcm_setkey( &gcm, MBEDTLS_CIPHER_ID_AES, tmp, keysize );
Paul Bakker89e80c92012-03-20 13:50:09 +0000542
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200543 TIME_AND_TSC( title,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200544 mbedtls_gcm_crypt_and_tag( &gcm, MBEDTLS_GCM_ENCRYPT, BUFSIZE, tmp,
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200545 12, NULL, 0, buf, buf, 16, tmp ) );
Paul Bakkerf70fe812013-12-16 16:43:10 +0100546
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200547 mbedtls_gcm_free( &gcm );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200548 }
Paul Bakker89e80c92012-03-20 13:50:09 +0000549 }
550#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200551#if defined(MBEDTLS_CCM_C)
Manuel Pégourié-Gonnard58d78a82014-05-07 12:03:02 +0200552 if( todo.aes_ccm )
553 {
Manuel Pégourié-Gonnard71e75dc2014-12-19 18:05:43 +0100554 int keysize;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200555 mbedtls_ccm_context ccm;
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +0200556
557 mbedtls_ccm_init( &ccm );
Manuel Pégourié-Gonnard58d78a82014-05-07 12:03:02 +0200558 for( keysize = 128; keysize <= 256; keysize += 64 )
559 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200560 mbedtls_snprintf( title, sizeof( title ), "AES-CCM-%d", keysize );
Manuel Pégourié-Gonnard58d78a82014-05-07 12:03:02 +0200561
562 memset( buf, 0, sizeof( buf ) );
563 memset( tmp, 0, sizeof( tmp ) );
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +0200564 mbedtls_ccm_setkey( &ccm, MBEDTLS_CIPHER_ID_AES, tmp, keysize );
Manuel Pégourié-Gonnard58d78a82014-05-07 12:03:02 +0200565
566 TIME_AND_TSC( title,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200567 mbedtls_ccm_encrypt_and_tag( &ccm, BUFSIZE, tmp,
Manuel Pégourié-Gonnard58d78a82014-05-07 12:03:02 +0200568 12, NULL, 0, buf, buf, tmp, 16 ) );
569
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200570 mbedtls_ccm_free( &ccm );
Manuel Pégourié-Gonnard58d78a82014-05-07 12:03:02 +0200571 }
572 }
573#endif
Manuel Pégourié-Gonnardd6aea182018-05-09 10:21:28 +0200574#if defined(MBEDTLS_CHACHAPOLY_C)
575 if( todo.chachapoly )
576 {
577 mbedtls_chachapoly_context chachapoly;
578
579 mbedtls_chachapoly_init( &chachapoly );
580 memset( buf, 0, sizeof( buf ) );
581 memset( tmp, 0, sizeof( tmp ) );
582
583 mbedtls_snprintf( title, sizeof( title ), "ChaCha20-Poly1305" );
584
585 mbedtls_chachapoly_setkey( &chachapoly, tmp );
586
587 TIME_AND_TSC( title,
Manuel Pégourié-Gonnard3dc62a02018-06-04 12:18:19 +0200588 mbedtls_chachapoly_encrypt_and_tag( &chachapoly,
589 BUFSIZE, tmp, NULL, 0, buf, buf, tmp ) );
Manuel Pégourié-Gonnardd6aea182018-05-09 10:21:28 +0200590
591 mbedtls_chachapoly_free( &chachapoly );
592 }
593#endif
Simon Butcher549dc3d2016-10-05 14:14:19 +0100594#if defined(MBEDTLS_CMAC_C)
595 if( todo.aes_cmac )
596 {
597 unsigned char output[16];
598 const mbedtls_cipher_info_t *cipher_info;
599 mbedtls_cipher_type_t cipher_type;
600 int keysize;
601
602 for( keysize = 128, cipher_type = MBEDTLS_CIPHER_AES_128_ECB;
603 keysize <= 256;
604 keysize += 64, cipher_type++ )
605 {
606 mbedtls_snprintf( title, sizeof( title ), "AES-CMAC-%d", keysize );
607
608 memset( buf, 0, sizeof( buf ) );
609 memset( tmp, 0, sizeof( tmp ) );
610
611 cipher_info = mbedtls_cipher_info_from_type( cipher_type );
612
613 TIME_AND_TSC( title,
Andres AGa592dcc2016-10-06 15:23:39 +0100614 mbedtls_cipher_cmac( cipher_info, tmp, keysize,
615 buf, BUFSIZE, output ) );
Simon Butcher549dc3d2016-10-05 14:14:19 +0100616 }
617
618 memset( buf, 0, sizeof( buf ) );
619 memset( tmp, 0, sizeof( tmp ) );
620 TIME_AND_TSC( "AES-CMAC-PRF-128",
Simon Butcherb981b162016-10-06 10:27:22 +0100621 mbedtls_aes_cmac_prf_128( tmp, 16, buf, BUFSIZE,
622 output ) );
Simon Butcher549dc3d2016-10-05 14:14:19 +0100623 }
624#endif /* MBEDTLS_CMAC_C */
625#endif /* MBEDTLS_AES_C */
Paul Bakker5121ce52009-01-03 21:22:43 +0000626
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +0100627#if defined(MBEDTLS_ARIA_C) && defined(MBEDTLS_CIPHER_MODE_CBC)
628 if( todo.aria )
629 {
630 int keysize;
631 mbedtls_aria_context aria;
632 mbedtls_aria_init( &aria );
633 for( keysize = 128; keysize <= 256; keysize += 64 )
634 {
635 mbedtls_snprintf( title, sizeof( title ), "ARIA-CBC-%d", keysize );
636
637 memset( buf, 0, sizeof( buf ) );
638 memset( tmp, 0, sizeof( tmp ) );
639 mbedtls_aria_setkey_enc( &aria, tmp, keysize );
640
641 TIME_AND_TSC( title,
642 mbedtls_aria_crypt_cbc( &aria, MBEDTLS_ARIA_ENCRYPT,
643 BUFSIZE, tmp, buf, buf ) );
644 }
645 mbedtls_aria_free( &aria );
646 }
647#endif
648
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200649#if defined(MBEDTLS_CAMELLIA_C) && defined(MBEDTLS_CIPHER_MODE_CBC)
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200650 if( todo.camellia )
Paul Bakker38119b12009-01-10 23:31:23 +0000651 {
Manuel Pégourié-Gonnard71e75dc2014-12-19 18:05:43 +0100652 int keysize;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200653 mbedtls_camellia_context camellia;
654 mbedtls_camellia_init( &camellia );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200655 for( keysize = 128; keysize <= 256; keysize += 64 )
656 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200657 mbedtls_snprintf( title, sizeof( title ), "CAMELLIA-CBC-%d", keysize );
Paul Bakker38119b12009-01-10 23:31:23 +0000658
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200659 memset( buf, 0, sizeof( buf ) );
660 memset( tmp, 0, sizeof( tmp ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200661 mbedtls_camellia_setkey_enc( &camellia, tmp, keysize );
Paul Bakker38119b12009-01-10 23:31:23 +0000662
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200663 TIME_AND_TSC( title,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200664 mbedtls_camellia_crypt_cbc( &camellia, MBEDTLS_CAMELLIA_ENCRYPT,
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200665 BUFSIZE, tmp, buf, buf ) );
666 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200667 mbedtls_camellia_free( &camellia );
Paul Bakker38119b12009-01-10 23:31:23 +0000668 }
669#endif
670
Daniel King34b822c2016-05-15 17:28:08 -0300671#if defined(MBEDTLS_CHACHA20_C)
672 if ( todo.chacha20 )
673 {
674 TIME_AND_TSC( "ChaCha20", mbedtls_chacha20_crypt( buf, buf, 0U, BUFSIZE, buf, buf ) );
675 }
676#endif
677
Daniel Kingadc32c02016-05-16 18:25:45 -0300678#if defined(MBEDTLS_POLY1305_C)
679 if ( todo.poly1305 )
680 {
Manuel Pégourié-Gonnardb1ac5e72018-05-09 09:25:00 +0200681 TIME_AND_TSC( "Poly1305", mbedtls_poly1305_mac( buf, buf, BUFSIZE, buf ) );
Daniel Kingadc32c02016-05-16 18:25:45 -0300682 }
683#endif
684
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200685#if defined(MBEDTLS_BLOWFISH_C) && defined(MBEDTLS_CIPHER_MODE_CBC)
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200686 if( todo.blowfish )
Paul Bakker3d58fe82012-07-04 17:15:31 +0000687 {
Manuel Pégourié-Gonnard71e75dc2014-12-19 18:05:43 +0100688 int keysize;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200689 mbedtls_blowfish_context blowfish;
690 mbedtls_blowfish_init( &blowfish );
Paul Bakker8cfd9d82014-06-18 11:16:11 +0200691
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200692 for( keysize = 128; keysize <= 256; keysize += 64 )
693 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200694 mbedtls_snprintf( title, sizeof( title ), "BLOWFISH-CBC-%d", keysize );
Paul Bakker3d58fe82012-07-04 17:15:31 +0000695
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200696 memset( buf, 0, sizeof( buf ) );
697 memset( tmp, 0, sizeof( tmp ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200698 mbedtls_blowfish_setkey( &blowfish, tmp, keysize );
Paul Bakker3d58fe82012-07-04 17:15:31 +0000699
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200700 TIME_AND_TSC( title,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200701 mbedtls_blowfish_crypt_cbc( &blowfish, MBEDTLS_BLOWFISH_ENCRYPT, BUFSIZE,
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200702 tmp, buf, buf ) );
703 }
Paul Bakker8cfd9d82014-06-18 11:16:11 +0200704
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200705 mbedtls_blowfish_free( &blowfish );
Paul Bakker3d58fe82012-07-04 17:15:31 +0000706 }
707#endif
708
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200709#if defined(MBEDTLS_CTR_DRBG_C)
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200710 if( todo.ctr_drbg )
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200711 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200712 mbedtls_ctr_drbg_context ctr_drbg;
Paul Bakker02faf452011-11-29 11:23:58 +0000713
Manuel Pégourié-Gonnard8d128ef2015-04-28 22:38:08 +0200714 mbedtls_ctr_drbg_init( &ctr_drbg );
Manuel Pégourié-Gonnard8d128ef2015-04-28 22:38:08 +0200715 if( mbedtls_ctr_drbg_seed( &ctr_drbg, myrand, NULL, NULL, 0 ) != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200716 mbedtls_exit(1);
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200717 TIME_AND_TSC( "CTR_DRBG (NOPR)",
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200718 mbedtls_ctr_drbg_random( &ctr_drbg, buf, BUFSIZE ) );
Gilles Peskinedb0cb252019-10-28 17:28:46 +0100719 mbedtls_ctr_drbg_free( &ctr_drbg );
Paul Bakker02faf452011-11-29 11:23:58 +0000720
Gilles Peskinedb0cb252019-10-28 17:28:46 +0100721 mbedtls_ctr_drbg_init( &ctr_drbg );
Manuel Pégourié-Gonnard8d128ef2015-04-28 22:38:08 +0200722 if( mbedtls_ctr_drbg_seed( &ctr_drbg, myrand, NULL, NULL, 0 ) != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200723 mbedtls_exit(1);
724 mbedtls_ctr_drbg_set_prediction_resistance( &ctr_drbg, MBEDTLS_CTR_DRBG_PR_ON );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200725 TIME_AND_TSC( "CTR_DRBG (PR)",
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200726 mbedtls_ctr_drbg_random( &ctr_drbg, buf, BUFSIZE ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200727 mbedtls_ctr_drbg_free( &ctr_drbg );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200728 }
Paul Bakker02faf452011-11-29 11:23:58 +0000729#endif
730
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200731#if defined(MBEDTLS_HMAC_DRBG_C)
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100732 if( todo.hmac_drbg )
733 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200734 mbedtls_hmac_drbg_context hmac_drbg;
735 const mbedtls_md_info_t *md_info;
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100736
Manuel Pégourié-Gonnardf9e94812015-04-28 22:07:14 +0200737 mbedtls_hmac_drbg_init( &hmac_drbg );
738
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200739#if defined(MBEDTLS_SHA1_C)
740 if( ( md_info = mbedtls_md_info_from_type( MBEDTLS_MD_SHA1 ) ) == NULL )
741 mbedtls_exit(1);
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100742
Manuel Pégourié-Gonnardf9e94812015-04-28 22:07:14 +0200743 if( mbedtls_hmac_drbg_seed( &hmac_drbg, md_info, myrand, NULL, NULL, 0 ) != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200744 mbedtls_exit(1);
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100745 TIME_AND_TSC( "HMAC_DRBG SHA-1 (NOPR)",
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200746 mbedtls_hmac_drbg_random( &hmac_drbg, buf, BUFSIZE ) );
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100747
Manuel Pégourié-Gonnardf9e94812015-04-28 22:07:14 +0200748 if( mbedtls_hmac_drbg_seed( &hmac_drbg, md_info, myrand, NULL, NULL, 0 ) != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200749 mbedtls_exit(1);
750 mbedtls_hmac_drbg_set_prediction_resistance( &hmac_drbg,
751 MBEDTLS_HMAC_DRBG_PR_ON );
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100752 TIME_AND_TSC( "HMAC_DRBG SHA-1 (PR)",
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200753 mbedtls_hmac_drbg_random( &hmac_drbg, buf, BUFSIZE ) );
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100754#endif
755
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200756#if defined(MBEDTLS_SHA256_C)
757 if( ( md_info = mbedtls_md_info_from_type( MBEDTLS_MD_SHA256 ) ) == NULL )
758 mbedtls_exit(1);
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100759
Manuel Pégourié-Gonnardf9e94812015-04-28 22:07:14 +0200760 if( mbedtls_hmac_drbg_seed( &hmac_drbg, md_info, myrand, NULL, NULL, 0 ) != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200761 mbedtls_exit(1);
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100762 TIME_AND_TSC( "HMAC_DRBG SHA-256 (NOPR)",
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200763 mbedtls_hmac_drbg_random( &hmac_drbg, buf, BUFSIZE ) );
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100764
Manuel Pégourié-Gonnardf9e94812015-04-28 22:07:14 +0200765 if( mbedtls_hmac_drbg_seed( &hmac_drbg, md_info, myrand, NULL, NULL, 0 ) != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200766 mbedtls_exit(1);
767 mbedtls_hmac_drbg_set_prediction_resistance( &hmac_drbg,
768 MBEDTLS_HMAC_DRBG_PR_ON );
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100769 TIME_AND_TSC( "HMAC_DRBG SHA-256 (PR)",
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200770 mbedtls_hmac_drbg_random( &hmac_drbg, buf, BUFSIZE ) );
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100771#endif
Ron Eldor278af452018-06-20 18:40:21 +0300772 mbedtls_hmac_drbg_free( &hmac_drbg );
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100773 }
774#endif
775
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200776#if defined(MBEDTLS_RSA_C) && defined(MBEDTLS_GENPRIME)
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200777 if( todo.rsa )
Paul Bakker5121ce52009-01-03 21:22:43 +0000778 {
Manuel Pégourié-Gonnard71e75dc2014-12-19 18:05:43 +0100779 int keysize;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200780 mbedtls_rsa_context rsa;
Manuel Pégourié-Gonnarda6dbddc2015-07-06 11:20:33 +0200781 for( keysize = 2048; keysize <= 4096; keysize *= 2 )
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200782 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200783 mbedtls_snprintf( title, sizeof( title ), "RSA-%d", keysize );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200784
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200785 mbedtls_rsa_init( &rsa, MBEDTLS_RSA_PKCS_V15, 0 );
786 mbedtls_rsa_gen_key( &rsa, myrand, NULL, keysize, 65537 );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200787
788 TIME_PUBLIC( title, " public",
789 buf[0] = 0;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200790 ret = mbedtls_rsa_public( &rsa, buf, buf ) );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200791
792 TIME_PUBLIC( title, "private",
793 buf[0] = 0;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200794 ret = mbedtls_rsa_private( &rsa, myrand, NULL, buf, buf ) );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200795
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200796 mbedtls_rsa_free( &rsa );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200797 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000798 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000799#endif
800
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200801#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_BIGNUM_C)
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200802 if( todo.dhm )
Manuel Pégourié-Gonnarde870c0a2012-11-08 11:31:48 +0100803 {
Manuel Pégourié-Gonnard4f3368e2015-07-19 15:01:28 +0200804 int dhm_sizes[] = { 2048, 3072 };
Brendan Shankse61514d2018-03-08 17:40:56 -0800805 static const unsigned char dhm_P_2048[] =
Hanno Beckerb9539212017-10-04 13:13:34 +0100806 MBEDTLS_DHM_RFC3526_MODP_2048_P_BIN;
Brendan Shankse61514d2018-03-08 17:40:56 -0800807 static const unsigned char dhm_P_3072[] =
Hanno Beckerb9539212017-10-04 13:13:34 +0100808 MBEDTLS_DHM_RFC3526_MODP_3072_P_BIN;
Brendan Shankse61514d2018-03-08 17:40:56 -0800809 static const unsigned char dhm_G_2048[] =
Hanno Beckerb9539212017-10-04 13:13:34 +0100810 MBEDTLS_DHM_RFC3526_MODP_2048_G_BIN;
Brendan Shankse61514d2018-03-08 17:40:56 -0800811 static const unsigned char dhm_G_3072[] =
Hanno Beckerb9539212017-10-04 13:13:34 +0100812 MBEDTLS_DHM_RFC3526_MODP_3072_G_BIN;
813
814 const unsigned char *dhm_P[] = { dhm_P_2048, dhm_P_3072 };
815 const size_t dhm_P_size[] = { sizeof( dhm_P_2048 ),
816 sizeof( dhm_P_3072 ) };
817
818 const unsigned char *dhm_G[] = { dhm_G_2048, dhm_G_3072 };
819 const size_t dhm_G_size[] = { sizeof( dhm_G_2048 ),
820 sizeof( dhm_G_3072 ) };
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200821
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200822 mbedtls_dhm_context dhm;
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200823 size_t olen;
Manuel Pégourié-Gonnard4f3368e2015-07-19 15:01:28 +0200824 for( i = 0; (size_t) i < sizeof( dhm_sizes ) / sizeof( dhm_sizes[0] ); i++ )
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200825 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200826 mbedtls_dhm_init( &dhm );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200827
Hanno Beckerb9539212017-10-04 13:13:34 +0100828 if( mbedtls_mpi_read_binary( &dhm.P, dhm_P[i],
829 dhm_P_size[i] ) != 0 ||
830 mbedtls_mpi_read_binary( &dhm.G, dhm_G[i],
831 dhm_G_size[i] ) != 0 )
Paul Bakkercbe3d0d2014-04-17 16:00:59 +0200832 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200833 mbedtls_exit( 1 );
Paul Bakkercbe3d0d2014-04-17 16:00:59 +0200834 }
835
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200836 dhm.len = mbedtls_mpi_size( &dhm.P );
837 mbedtls_dhm_make_public( &dhm, (int) dhm.len, buf, dhm.len, myrand, NULL );
838 if( mbedtls_mpi_copy( &dhm.GY, &dhm.GX ) != 0 )
839 mbedtls_exit( 1 );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200840
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200841 mbedtls_snprintf( title, sizeof( title ), "DHE-%d", dhm_sizes[i] );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200842 TIME_PUBLIC( title, "handshake",
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200843 ret |= mbedtls_dhm_make_public( &dhm, (int) dhm.len, buf, dhm.len,
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200844 myrand, NULL );
Manuel Pégourié-Gonnard33352052015-06-02 16:17:08 +0100845 ret |= mbedtls_dhm_calc_secret( &dhm, buf, sizeof( buf ), &olen, myrand, NULL ) );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200846
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200847 mbedtls_snprintf( title, sizeof( title ), "DH-%d", dhm_sizes[i] );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200848 TIME_PUBLIC( title, "handshake",
Manuel Pégourié-Gonnard33352052015-06-02 16:17:08 +0100849 ret |= mbedtls_dhm_calc_secret( &dhm, buf, sizeof( buf ), &olen, myrand, NULL ) );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200850
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200851 mbedtls_dhm_free( &dhm );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200852 }
Manuel Pégourié-Gonnarde870c0a2012-11-08 11:31:48 +0100853 }
Manuel Pégourié-Gonnarde870c0a2012-11-08 11:31:48 +0100854#endif
855
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200856#if defined(MBEDTLS_ECDSA_C) && defined(MBEDTLS_SHA256_C)
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200857 if( todo.ecdsa )
858 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200859 mbedtls_ecdsa_context ecdsa;
860 const mbedtls_ecp_curve_info *curve_info;
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200861 size_t sig_len;
862
863 memset( buf, 0x2A, sizeof( buf ) );
864
Gilles Peskine28f62f62020-07-24 02:06:46 +0200865 for( curve_info = curve_list;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200866 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200867 curve_info++ )
868 {
Christoph M. Wintersteiger8cd4fba2019-02-15 12:34:40 +0000869 if( ! mbedtls_ecdsa_can_do( curve_info->grp_id ) )
Christoph M. Wintersteiger6a1a9e42019-01-07 13:47:30 +0000870 continue;
871
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200872 mbedtls_ecdsa_init( &ecdsa );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200873
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200874 if( mbedtls_ecdsa_genkey( &ecdsa, curve_info->grp_id, myrand, NULL ) != 0 )
875 mbedtls_exit( 1 );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100876 ecp_clear_precomputed( &ecdsa.grp );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200877
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200878 mbedtls_snprintf( title, sizeof( title ), "ECDSA-%s",
Manuel Pégourié-Gonnard56cd3192013-09-17 17:23:07 +0200879 curve_info->name );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200880 TIME_PUBLIC( title, "sign",
Manuel Pégourié-Gonnard797f48a2015-06-18 15:45:05 +0200881 ret = mbedtls_ecdsa_write_signature( &ecdsa, MBEDTLS_MD_SHA256, buf, curve_info->bit_size,
Manuel Pégourié-Gonnard56cd3192013-09-17 17:23:07 +0200882 tmp, &sig_len, myrand, NULL ) );
883
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200884 mbedtls_ecdsa_free( &ecdsa );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100885 }
886
Gilles Peskine28f62f62020-07-24 02:06:46 +0200887 for( curve_info = curve_list;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200888 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100889 curve_info++ )
890 {
Christoph M. Wintersteiger8cd4fba2019-02-15 12:34:40 +0000891 if( ! mbedtls_ecdsa_can_do( curve_info->grp_id ) )
Christoph M. Wintersteiger6a1a9e42019-01-07 13:47:30 +0000892 continue;
893
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200894 mbedtls_ecdsa_init( &ecdsa );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100895
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200896 if( mbedtls_ecdsa_genkey( &ecdsa, curve_info->grp_id, myrand, NULL ) != 0 ||
Manuel Pégourié-Gonnard797f48a2015-06-18 15:45:05 +0200897 mbedtls_ecdsa_write_signature( &ecdsa, MBEDTLS_MD_SHA256, buf, curve_info->bit_size,
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100898 tmp, &sig_len, myrand, NULL ) != 0 )
899 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200900 mbedtls_exit( 1 );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100901 }
902 ecp_clear_precomputed( &ecdsa.grp );
903
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200904 mbedtls_snprintf( title, sizeof( title ), "ECDSA-%s",
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100905 curve_info->name );
Manuel Pégourié-Gonnard56cd3192013-09-17 17:23:07 +0200906 TIME_PUBLIC( title, "verify",
Manuel Pégourié-Gonnard797f48a2015-06-18 15:45:05 +0200907 ret = mbedtls_ecdsa_read_signature( &ecdsa, buf, curve_info->bit_size,
Manuel Pégourié-Gonnard56cd3192013-09-17 17:23:07 +0200908 tmp, sig_len ) );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200909
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200910 mbedtls_ecdsa_free( &ecdsa );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200911 }
912 }
913#endif
914
Janos Follath52735ef2018-08-15 10:19:16 +0100915#if defined(MBEDTLS_ECDH_C) && defined(MBEDTLS_ECDH_LEGACY_CONTEXT)
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200916 if( todo.ecdh )
917 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200918 mbedtls_ecdh_context ecdh;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200919 mbedtls_mpi z;
Nicholas Wilson08f3ef12015-11-10 13:10:01 +0000920 const mbedtls_ecp_curve_info montgomery_curve_list[] = {
921#if defined(MBEDTLS_ECP_DP_CURVE25519_ENABLED)
922 { MBEDTLS_ECP_DP_CURVE25519, 0, 0, "Curve25519" },
Manuel Pégourié-Gonnard85391f22015-02-05 09:54:48 +0000923#endif
Nicholas Wilson08f3ef12015-11-10 13:10:01 +0000924#if defined(MBEDTLS_ECP_DP_CURVE448_ENABLED)
925 { MBEDTLS_ECP_DP_CURVE448, 0, 0, "Curve448" },
926#endif
927 { MBEDTLS_ECP_DP_NONE, 0, 0, 0 }
928 };
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200929 const mbedtls_ecp_curve_info *curve_info;
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200930 size_t olen;
Gilles Peskine28f62f62020-07-24 02:06:46 +0200931 const mbedtls_ecp_curve_info *selected_montgomery_curve_list =
932 montgomery_curve_list;
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200933
Gilles Peskine28f62f62020-07-24 02:06:46 +0200934 if( curve_list == (const mbedtls_ecp_curve_info*) &single_curve )
935 {
936 mbedtls_ecp_group grp;
937 mbedtls_ecp_group_init( &grp );
938 if( mbedtls_ecp_group_load( &grp, curve_list->grp_id ) != 0 )
939 mbedtls_exit( 1 );
940 if( mbedtls_ecp_get_type( &grp ) == MBEDTLS_ECP_TYPE_MONTGOMERY )
941 selected_montgomery_curve_list = single_curve;
942 else /* empty list */
943 selected_montgomery_curve_list = single_curve + 1;
944 mbedtls_ecp_group_free( &grp );
945 }
946
947 for( curve_info = curve_list;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200948 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200949 curve_info++ )
950 {
Gilles Peskinec6c7c492019-02-11 18:41:27 +0100951 if( ! mbedtls_ecdh_can_do( curve_info->grp_id ) )
952 continue;
953
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200954 mbedtls_ecdh_init( &ecdh );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200955
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000956 CHECK_AND_CONTINUE( mbedtls_ecp_group_load( &ecdh.grp, curve_info->grp_id ) );
957 CHECK_AND_CONTINUE( mbedtls_ecdh_make_public( &ecdh, &olen, buf, sizeof( buf),
958 myrand, NULL ) );
959 CHECK_AND_CONTINUE( mbedtls_ecp_copy( &ecdh.Qp, &ecdh.Q ) );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100960 ecp_clear_precomputed( &ecdh.grp );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200961
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200962 mbedtls_snprintf( title, sizeof( title ), "ECDHE-%s",
Manuel Pégourié-Gonnard56cd3192013-09-17 17:23:07 +0200963 curve_info->name );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200964 TIME_PUBLIC( title, "handshake",
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000965 CHECK_AND_CONTINUE( mbedtls_ecdh_make_public( &ecdh, &olen, buf, sizeof( buf),
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200966 myrand, NULL ) );
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000967 CHECK_AND_CONTINUE( mbedtls_ecdh_calc_secret( &ecdh, &olen, buf, sizeof( buf ),
968 myrand, NULL ) ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200969 mbedtls_ecdh_free( &ecdh );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100970 }
971
Nicholas Wilson08f3ef12015-11-10 13:10:01 +0000972 /* Montgomery curves need to be handled separately */
Gilles Peskine28f62f62020-07-24 02:06:46 +0200973 for ( curve_info = selected_montgomery_curve_list;
Nicholas Wilson08f3ef12015-11-10 13:10:01 +0000974 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
975 curve_info++ )
Manuel Pégourié-Gonnard85391f22015-02-05 09:54:48 +0000976 {
Nicholas Wilson08f3ef12015-11-10 13:10:01 +0000977 mbedtls_ecdh_init( &ecdh );
978 mbedtls_mpi_init( &z );
979
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000980 CHECK_AND_CONTINUE( mbedtls_ecp_group_load( &ecdh.grp, curve_info->grp_id ) );
981 CHECK_AND_CONTINUE( mbedtls_ecdh_gen_public( &ecdh.grp, &ecdh.d, &ecdh.Qp, myrand, NULL ) );
Nicholas Wilson08f3ef12015-11-10 13:10:01 +0000982
983 mbedtls_snprintf( title, sizeof(title), "ECDHE-%s",
984 curve_info->name );
985 TIME_PUBLIC( title, "handshake",
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000986 CHECK_AND_CONTINUE( mbedtls_ecdh_gen_public( &ecdh.grp, &ecdh.d, &ecdh.Q,
987 myrand, NULL ) );
988 CHECK_AND_CONTINUE( mbedtls_ecdh_compute_shared( &ecdh.grp, &z, &ecdh.Qp, &ecdh.d,
989 myrand, NULL ) ) );
Nicholas Wilson08f3ef12015-11-10 13:10:01 +0000990
991 mbedtls_ecdh_free( &ecdh );
992 mbedtls_mpi_free( &z );
Manuel Pégourié-Gonnard85391f22015-02-05 09:54:48 +0000993 }
994
Gilles Peskine28f62f62020-07-24 02:06:46 +0200995 for( curve_info = curve_list;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200996 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100997 curve_info++ )
998 {
Gilles Peskinec6c7c492019-02-11 18:41:27 +0100999 if( ! mbedtls_ecdh_can_do( curve_info->grp_id ) )
1000 continue;
1001
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001002 mbedtls_ecdh_init( &ecdh );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +01001003
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +00001004 CHECK_AND_CONTINUE( mbedtls_ecp_group_load( &ecdh.grp, curve_info->grp_id ) );
1005 CHECK_AND_CONTINUE( mbedtls_ecdh_make_public( &ecdh, &olen, buf, sizeof( buf),
1006 myrand, NULL ) );
1007 CHECK_AND_CONTINUE( mbedtls_ecp_copy( &ecdh.Qp, &ecdh.Q ) );
1008 CHECK_AND_CONTINUE( mbedtls_ecdh_make_public( &ecdh, &olen, buf, sizeof( buf),
1009 myrand, NULL ) );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +01001010 ecp_clear_precomputed( &ecdh.grp );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +02001011
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001012 mbedtls_snprintf( title, sizeof( title ), "ECDH-%s",
Manuel Pégourié-Gonnard56cd3192013-09-17 17:23:07 +02001013 curve_info->name );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +02001014 TIME_PUBLIC( title, "handshake",
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +00001015 CHECK_AND_CONTINUE( mbedtls_ecdh_calc_secret( &ecdh, &olen, buf, sizeof( buf ),
1016 myrand, NULL ) ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001017 mbedtls_ecdh_free( &ecdh );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +02001018 }
Manuel Pégourié-Gonnard85391f22015-02-05 09:54:48 +00001019
Nicholas Wilson08f3ef12015-11-10 13:10:01 +00001020 /* Montgomery curves need to be handled separately */
Gilles Peskine28f62f62020-07-24 02:06:46 +02001021 for ( curve_info = selected_montgomery_curve_list;
Nicholas Wilson08f3ef12015-11-10 13:10:01 +00001022 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
1023 curve_info++)
Manuel Pégourié-Gonnard85391f22015-02-05 09:54:48 +00001024 {
Nicholas Wilson08f3ef12015-11-10 13:10:01 +00001025 mbedtls_ecdh_init( &ecdh );
1026 mbedtls_mpi_init( &z );
1027
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +00001028 CHECK_AND_CONTINUE( mbedtls_ecp_group_load( &ecdh.grp, curve_info->grp_id ) );
1029 CHECK_AND_CONTINUE( mbedtls_ecdh_gen_public( &ecdh.grp, &ecdh.d, &ecdh.Qp,
1030 myrand, NULL ) );
1031 CHECK_AND_CONTINUE( mbedtls_ecdh_gen_public( &ecdh.grp, &ecdh.d, &ecdh.Q, myrand, NULL ) );
Nicholas Wilson08f3ef12015-11-10 13:10:01 +00001032
1033 mbedtls_snprintf( title, sizeof(title), "ECDH-%s",
1034 curve_info->name );
1035 TIME_PUBLIC( title, "handshake",
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +00001036 CHECK_AND_CONTINUE( mbedtls_ecdh_compute_shared( &ecdh.grp, &z, &ecdh.Qp, &ecdh.d,
1037 myrand, NULL ) ) );
Nicholas Wilson08f3ef12015-11-10 13:10:01 +00001038
1039 mbedtls_ecdh_free( &ecdh );
1040 mbedtls_mpi_free( &z );
Manuel Pégourié-Gonnard85391f22015-02-05 09:54:48 +00001041 }
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +02001042 }
1043#endif
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +01001044
Christoph M. Wintersteigere50b9702018-12-14 11:03:02 +00001045#if defined(MBEDTLS_ECDH_C)
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001046 if( todo.ecdh )
1047 {
1048 mbedtls_ecdh_context ecdh_srv, ecdh_cli;
1049 unsigned char buf_srv[BUFSIZE], buf_cli[BUFSIZE];
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001050 const mbedtls_ecp_curve_info *curve_info;
1051 size_t olen;
1052
1053 for( curve_info = curve_list;
1054 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
1055 curve_info++ )
1056 {
Gilles Peskinec6c7c492019-02-11 18:41:27 +01001057 if( ! mbedtls_ecdh_can_do( curve_info->grp_id ) )
1058 continue;
1059
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001060 mbedtls_ecdh_init( &ecdh_srv );
Christoph M. Wintersteiger12f359f2019-02-26 12:26:04 +00001061 mbedtls_ecdh_init( &ecdh_cli );
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001062
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001063 mbedtls_snprintf( title, sizeof( title ), "ECDHE-%s", curve_info->name );
Christoph M. Wintersteiger0b931022018-12-06 17:15:12 +00001064 TIME_PUBLIC( title, "full handshake",
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001065 const unsigned char * p_srv = buf_srv;
Christoph M. Wintersteiger12f359f2019-02-26 12:26:04 +00001066
Christoph M. Wintersteiger5d536cd2019-02-20 17:26:42 +00001067 CHECK_AND_CONTINUE( mbedtls_ecdh_setup( &ecdh_srv, curve_info->grp_id ) );
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +00001068 CHECK_AND_CONTINUE( mbedtls_ecdh_make_params( &ecdh_srv, &olen, buf_srv, sizeof( buf_srv ), myrand, NULL ) );
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001069
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +00001070 CHECK_AND_CONTINUE( mbedtls_ecdh_read_params( &ecdh_cli, &p_srv, p_srv + olen ) );
1071 CHECK_AND_CONTINUE( mbedtls_ecdh_make_public( &ecdh_cli, &olen, buf_cli, sizeof( buf_cli ), myrand, NULL ) );
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001072
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +00001073 CHECK_AND_CONTINUE( mbedtls_ecdh_read_public( &ecdh_srv, buf_cli, olen ) );
1074 CHECK_AND_CONTINUE( mbedtls_ecdh_calc_secret( &ecdh_srv, &olen, buf_srv, sizeof( buf_srv ), myrand, NULL ) );
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001075
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +00001076 CHECK_AND_CONTINUE( mbedtls_ecdh_calc_secret( &ecdh_cli, &olen, buf_cli, sizeof( buf_cli ), myrand, NULL ) );
Christoph M. Wintersteiger5d536cd2019-02-20 17:26:42 +00001077 mbedtls_ecdh_free( &ecdh_cli );
Christoph M. Wintersteiger12f359f2019-02-26 12:26:04 +00001078
Christoph M. Wintersteiger5d536cd2019-02-20 17:26:42 +00001079 mbedtls_ecdh_free( &ecdh_srv );
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001080 );
1081
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001082 }
1083 }
1084#endif
1085
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001086 mbedtls_printf( "\n" );
Paul Bakker1d4da2e2009-10-25 12:36:53 +00001087
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001088#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
1089 mbedtls_memory_buffer_alloc_free();
Manuel Pégourié-Gonnard128657d2014-12-18 16:35:52 +00001090#endif
1091
Paul Bakkercce9d772011-11-18 14:26:47 +00001092#if defined(_WIN32)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001093 mbedtls_printf( " Press Enter to exit this program.\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001094 fflush( stdout ); getchar();
1095#endif
1096
k-stachowiak776521a2019-05-23 09:46:47 +02001097 mbedtls_exit( 0 );
Paul Bakker5121ce52009-01-03 21:22:43 +00001098}
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +02001099
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001100#endif /* MBEDTLS_TIMING_C */