sw/device/tests/crypto/ecdsa_p256_functest.c

// Copyright lowRISC contributors.
// Licensed under the Apache License, Version 2.0, see LICENSE for details.
// SPDX-License-Identifier: Apache-2.0

#include "sw/device/lib/crypto/drivers/hmac.h"
#include "sw/device/lib/crypto/drivers/otbn.h"
#include "sw/device/lib/crypto/impl/ecdsa_p256/ecdsa_p256.h"
#include "sw/device/lib/crypto/impl/status.h"
#include "sw/device/lib/runtime/log.h"
#include "sw/device/lib/testing/entropy_testutils.h"
#include "sw/device/lib/testing/test_framework/check.h"
#include "sw/device/lib/testing/test_framework/ottf_main.h"

// Message
static const char kMessage[] = "test message";

// Digest of the test message above.
ecdsa_p256_message_digest_t digest;

static const ecdsa_p256_public_key_t kPublicKey = {
    // Public key x-coordinate (Q.x)
    .x = {0x558bb24e, 0x246288eb, 0x9e1bbff2, 0xa7094ad8, 0xcd926786,
          0x075d07ca, 0xac2de782, 0x1f791431},
    // Public key y-coordinate (Q.y)
    .y = {0x23e49c27, 0xfaa21024, 0xf17353bd, 0x40f008a5, 0x2155c09e,
          0x5954f0a4, 0x155f3e00, 0x874bc63c},
};

// Private key (d) in two shares
static const ecdsa_p256_private_key_t kPrivateKey = {
    .d0 = {0xaf57b4cd, 0x744c9f1c, 0x8b7e0c02, 0x283e93e9, 0x0d18f00c,
           0xda0b6cf4, 0x8fe6bb7a, 0x5545a0b7, 0x00000000, 0x00000000},
    // TODO(#15409): add real data here to ensure the second share is
    // incorporated.
    .d1 = {0},
};

static void compute_digest(void) {
  // Compute the SHA-256 digest using the HMAC device.
  hmac_sha256_init();
  CHECK_STATUS_OK(hmac_sha256_update(&kMessage, sizeof(kMessage) - 1));
  hmac_digest_t hmac_digest;
  CHECK_STATUS_OK(hmac_sha256_final(&hmac_digest));

  // Copy digest into the destination array.
  memcpy(digest.h, hmac_digest.digest, sizeof(hmac_digest.digest));
}

status_t sign_then_verify_test(void) {
  ecdsa_p256_signature_t signature;
  hardened_bool_t verificationResult;

  // Spin until OTBN is idle.
  TRY(otbn_busy_wait_for_done());

  // Generate a signature for the message
  LOG_INFO("Signing...");
  TRY(ecdsa_p256_sign(&digest, &kPrivateKey, &signature));

  // Verify the signature
  LOG_INFO("Verifying...");
  TRY(ecdsa_p256_verify(&signature, &digest, &kPublicKey, &verificationResult));

  // Signature verification is expected to succeed
  CHECK(verificationResult == kHardenedBoolTrue);

  return OTCRYPTO_OK;
}

OTTF_DEFINE_TEST_CONFIG();

bool test_main(void) {
  entropy_testutils_auto_mode_init();

  compute_digest();

  status_t err = sign_then_verify_test();
  if (!status_ok(err)) {
    // If there was an error, print the OTBN error bits and instruction count.
    LOG_INFO("OTBN error bits: 0x%08x", otbn_err_bits_get());
    LOG_INFO("OTBN instruction count: 0x%08x", otbn_instruction_count_get());
    // Print the error.
    CHECK_STATUS_OK(err);
    return false;
  }

  return true;
}