test_eddsa.py 24 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578
  1. #
  2. # Copyright (c) 2022, Legrandin <helderijs@gmail.com>
  3. # All rights reserved.
  4. #
  5. # Redistribution and use in source and binary forms, with or without
  6. # modification, are permitted provided that the following conditions
  7. # are met:
  8. #
  9. # 1. Redistributions of source code must retain the above copyright
  10. # notice, this list of conditions and the following disclaimer.
  11. # 2. Redistributions in binary form must reproduce the above copyright
  12. # notice, this list of conditions and the following disclaimer in
  13. # the documentation and/or other materials provided with the
  14. # distribution.
  15. #
  16. # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  17. # "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
  18. # LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
  19. # FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
  20. # COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
  21. # INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
  22. # BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
  23. # LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
  24. # CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  25. # LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
  26. # ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
  27. # POSSIBILITY OF SUCH DAMAGE.
  28. # ===================================================================
  29. import unittest
  30. from binascii import unhexlify
  31. from Crypto.PublicKey import ECC
  32. from Crypto.Signature import eddsa
  33. from Crypto.Hash import SHA512, SHAKE256
  34. from Crypto.SelfTest.st_common import list_test_cases
  35. from Crypto.SelfTest.loader import load_test_vectors_wycheproof
  36. from Crypto.Util.number import bytes_to_long
  37. rfc8032_tv_str = (
  38. # 7.1 Ed25519
  39. (
  40. "9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60",
  41. "d75a980182b10ab7d54bfed3c964073a0ee172f3daa62325af021a68f707511a",
  42. "",
  43. None,
  44. "",
  45. "e5564300c360ac729086e2cc806e828a"
  46. "84877f1eb8e5d974d873e06522490155"
  47. "5fb8821590a33bacc61e39701cf9b46b"
  48. "d25bf5f0595bbe24655141438e7a100b"
  49. ),
  50. (
  51. "4ccd089b28ff96da9db6c346ec114e0f5b8a319f35aba624da8cf6ed4fb8a6fb",
  52. "3d4017c3e843895a92b70aa74d1b7ebc9c982ccf2ec4968cc0cd55f12af4660c",
  53. "72",
  54. None,
  55. "",
  56. "92a009a9f0d4cab8720e820b5f642540"
  57. "a2b27b5416503f8fb3762223ebdb69da"
  58. "085ac1e43e15996e458f3613d0f11d8c"
  59. "387b2eaeb4302aeeb00d291612bb0c00"
  60. ),
  61. (
  62. "c5aa8df43f9f837bedb7442f31dcb7b166d38535076f094b85ce3a2e0b4458f7",
  63. "fc51cd8e6218a1a38da47ed00230f0580816ed13ba3303ac5deb911548908025",
  64. "af82",
  65. None,
  66. "",
  67. "6291d657deec24024827e69c3abe01a3"
  68. "0ce548a284743a445e3680d7db5ac3ac"
  69. "18ff9b538d16f290ae67f760984dc659"
  70. "4a7c15e9716ed28dc027beceea1ec40a"
  71. ),
  72. (
  73. "f5e5767cf153319517630f226876b86c8160cc583bc013744c6bf255f5cc0ee5",
  74. "278117fc144c72340f67d0f2316e8386ceffbf2b2428c9c51fef7c597f1d426e",
  75. "08b8b2b733424243760fe426a4b54908"
  76. "632110a66c2f6591eabd3345e3e4eb98"
  77. "fa6e264bf09efe12ee50f8f54e9f77b1"
  78. "e355f6c50544e23fb1433ddf73be84d8"
  79. "79de7c0046dc4996d9e773f4bc9efe57"
  80. "38829adb26c81b37c93a1b270b20329d"
  81. "658675fc6ea534e0810a4432826bf58c"
  82. "941efb65d57a338bbd2e26640f89ffbc"
  83. "1a858efcb8550ee3a5e1998bd177e93a"
  84. "7363c344fe6b199ee5d02e82d522c4fe"
  85. "ba15452f80288a821a579116ec6dad2b"
  86. "3b310da903401aa62100ab5d1a36553e"
  87. "06203b33890cc9b832f79ef80560ccb9"
  88. "a39ce767967ed628c6ad573cb116dbef"
  89. "efd75499da96bd68a8a97b928a8bbc10"
  90. "3b6621fcde2beca1231d206be6cd9ec7"
  91. "aff6f6c94fcd7204ed3455c68c83f4a4"
  92. "1da4af2b74ef5c53f1d8ac70bdcb7ed1"
  93. "85ce81bd84359d44254d95629e9855a9"
  94. "4a7c1958d1f8ada5d0532ed8a5aa3fb2"
  95. "d17ba70eb6248e594e1a2297acbbb39d"
  96. "502f1a8c6eb6f1ce22b3de1a1f40cc24"
  97. "554119a831a9aad6079cad88425de6bd"
  98. "e1a9187ebb6092cf67bf2b13fd65f270"
  99. "88d78b7e883c8759d2c4f5c65adb7553"
  100. "878ad575f9fad878e80a0c9ba63bcbcc"
  101. "2732e69485bbc9c90bfbd62481d9089b"
  102. "eccf80cfe2df16a2cf65bd92dd597b07"
  103. "07e0917af48bbb75fed413d238f5555a"
  104. "7a569d80c3414a8d0859dc65a46128ba"
  105. "b27af87a71314f318c782b23ebfe808b"
  106. "82b0ce26401d2e22f04d83d1255dc51a"
  107. "ddd3b75a2b1ae0784504df543af8969b"
  108. "e3ea7082ff7fc9888c144da2af58429e"
  109. "c96031dbcad3dad9af0dcbaaaf268cb8"
  110. "fcffead94f3c7ca495e056a9b47acdb7"
  111. "51fb73e666c6c655ade8297297d07ad1"
  112. "ba5e43f1bca32301651339e22904cc8c"
  113. "42f58c30c04aafdb038dda0847dd988d"
  114. "cda6f3bfd15c4b4c4525004aa06eeff8"
  115. "ca61783aacec57fb3d1f92b0fe2fd1a8"
  116. "5f6724517b65e614ad6808d6f6ee34df"
  117. "f7310fdc82aebfd904b01e1dc54b2927"
  118. "094b2db68d6f903b68401adebf5a7e08"
  119. "d78ff4ef5d63653a65040cf9bfd4aca7"
  120. "984a74d37145986780fc0b16ac451649"
  121. "de6188a7dbdf191f64b5fc5e2ab47b57"
  122. "f7f7276cd419c17a3ca8e1b939ae49e4"
  123. "88acba6b965610b5480109c8b17b80e1"
  124. "b7b750dfc7598d5d5011fd2dcc5600a3"
  125. "2ef5b52a1ecc820e308aa342721aac09"
  126. "43bf6686b64b2579376504ccc493d97e"
  127. "6aed3fb0f9cd71a43dd497f01f17c0e2"
  128. "cb3797aa2a2f256656168e6c496afc5f"
  129. "b93246f6b1116398a346f1a641f3b041"
  130. "e989f7914f90cc2c7fff357876e506b5"
  131. "0d334ba77c225bc307ba537152f3f161"
  132. "0e4eafe595f6d9d90d11faa933a15ef1"
  133. "369546868a7f3a45a96768d40fd9d034"
  134. "12c091c6315cf4fde7cb68606937380d"
  135. "b2eaaa707b4c4185c32eddcdd306705e"
  136. "4dc1ffc872eeee475a64dfac86aba41c"
  137. "0618983f8741c5ef68d3a101e8a3b8ca"
  138. "c60c905c15fc910840b94c00a0b9d0",
  139. None,
  140. "",
  141. "0aab4c900501b3e24d7cdf4663326a3a"
  142. "87df5e4843b2cbdb67cbf6e460fec350"
  143. "aa5371b1508f9f4528ecea23c436d94b"
  144. "5e8fcd4f681e30a6ac00a9704a188a03"
  145. ),
  146. # 7.2 Ed25519ctx
  147. (
  148. "0305334e381af78f141cb666f6199f57"
  149. "bc3495335a256a95bd2a55bf546663f6",
  150. "dfc9425e4f968f7f0c29f0259cf5f9ae"
  151. "d6851c2bb4ad8bfb860cfee0ab248292",
  152. "f726936d19c800494e3fdaff20b276a8",
  153. None,
  154. "666f6f",
  155. "55a4cc2f70a54e04288c5f4cd1e45a7b"
  156. "b520b36292911876cada7323198dd87a"
  157. "8b36950b95130022907a7fb7c4e9b2d5"
  158. "f6cca685a587b4b21f4b888e4e7edb0d"
  159. ),
  160. (
  161. "0305334e381af78f141cb666f6199f57"
  162. "bc3495335a256a95bd2a55bf546663f6",
  163. "dfc9425e4f968f7f0c29f0259cf5f9ae"
  164. "d6851c2bb4ad8bfb860cfee0ab248292",
  165. "f726936d19c800494e3fdaff20b276a8",
  166. None,
  167. "626172",
  168. "fc60d5872fc46b3aa69f8b5b4351d580"
  169. "8f92bcc044606db097abab6dbcb1aee3"
  170. "216c48e8b3b66431b5b186d1d28f8ee1"
  171. "5a5ca2df6668346291c2043d4eb3e90d"
  172. ),
  173. (
  174. "0305334e381af78f141cb666f6199f57"
  175. "bc3495335a256a95bd2a55bf546663f6",
  176. "dfc9425e4f968f7f0c29f0259cf5f9ae"
  177. "d6851c2bb4ad8bfb860cfee0ab248292",
  178. "508e9e6882b979fea900f62adceaca35",
  179. None,
  180. "666f6f",
  181. "8b70c1cc8310e1de20ac53ce28ae6e72"
  182. "07f33c3295e03bb5c0732a1d20dc6490"
  183. "8922a8b052cf99b7c4fe107a5abb5b2c"
  184. "4085ae75890d02df26269d8945f84b0b"
  185. ),
  186. (
  187. "ab9c2853ce297ddab85c993b3ae14bca"
  188. "d39b2c682beabc27d6d4eb20711d6560",
  189. "0f1d1274943b91415889152e893d80e9"
  190. "3275a1fc0b65fd71b4b0dda10ad7d772",
  191. "f726936d19c800494e3fdaff20b276a8",
  192. None,
  193. "666f6f",
  194. "21655b5f1aa965996b3f97b3c849eafb"
  195. "a922a0a62992f73b3d1b73106a84ad85"
  196. "e9b86a7b6005ea868337ff2d20a7f5fb"
  197. "d4cd10b0be49a68da2b2e0dc0ad8960f"
  198. ),
  199. # 7.3 Ed25519ph
  200. (
  201. "833fe62409237b9d62ec77587520911e"
  202. "9a759cec1d19755b7da901b96dca3d42",
  203. "ec172b93ad5e563bf4932c70e1245034"
  204. "c35467ef2efd4d64ebf819683467e2bf",
  205. "616263",
  206. SHA512,
  207. "",
  208. "98a70222f0b8121aa9d30f813d683f80"
  209. "9e462b469c7ff87639499bb94e6dae41"
  210. "31f85042463c2a355a2003d062adf5aa"
  211. "a10b8c61e636062aaad11c2a26083406"
  212. ),
  213. # 7.4 Ed448
  214. (
  215. "6c82a562cb808d10d632be89c8513ebf6c929f34ddfa8c9f63c9960ef6e348a3"
  216. "528c8a3fcc2f044e39a3fc5b94492f8f032e7549a20098f95b",
  217. "5fd7449b59b461fd2ce787ec616ad46a1da1342485a70e1f8a0ea75d80e96778"
  218. "edf124769b46c7061bd6783df1e50f6cd1fa1abeafe8256180",
  219. "",
  220. None,
  221. "",
  222. "533a37f6bbe457251f023c0d88f976ae2dfb504a843e34d2074fd823d41a591f"
  223. "2b233f034f628281f2fd7a22ddd47d7828c59bd0a21bfd3980ff0d2028d4b18a"
  224. "9df63e006c5d1c2d345b925d8dc00b4104852db99ac5c7cdda8530a113a0f4db"
  225. "b61149f05a7363268c71d95808ff2e652600"
  226. ),
  227. (
  228. "c4eab05d357007c632f3dbb48489924d552b08fe0c353a0d4a1f00acda2c463a"
  229. "fbea67c5e8d2877c5e3bc397a659949ef8021e954e0a12274e",
  230. "43ba28f430cdff456ae531545f7ecd0ac834a55d9358c0372bfa0c6c6798c086"
  231. "6aea01eb00742802b8438ea4cb82169c235160627b4c3a9480",
  232. "03",
  233. None,
  234. "",
  235. "26b8f91727bd62897af15e41eb43c377efb9c610d48f2335cb0bd0087810f435"
  236. "2541b143c4b981b7e18f62de8ccdf633fc1bf037ab7cd779805e0dbcc0aae1cb"
  237. "cee1afb2e027df36bc04dcecbf154336c19f0af7e0a6472905e799f1953d2a0f"
  238. "f3348ab21aa4adafd1d234441cf807c03a00",
  239. ),
  240. (
  241. "c4eab05d357007c632f3dbb48489924d552b08fe0c353a0d4a1f00acda2c463a"
  242. "fbea67c5e8d2877c5e3bc397a659949ef8021e954e0a12274e",
  243. "43ba28f430cdff456ae531545f7ecd0ac834a55d9358c0372bfa0c6c6798c086"
  244. "6aea01eb00742802b8438ea4cb82169c235160627b4c3a9480",
  245. "03",
  246. None,
  247. "666f6f",
  248. "d4f8f6131770dd46f40867d6fd5d5055de43541f8c5e35abbcd001b32a89f7d2"
  249. "151f7647f11d8ca2ae279fb842d607217fce6e042f6815ea000c85741de5c8da"
  250. "1144a6a1aba7f96de42505d7a7298524fda538fccbbb754f578c1cad10d54d0d"
  251. "5428407e85dcbc98a49155c13764e66c3c00",
  252. ),
  253. (
  254. "cd23d24f714274e744343237b93290f511f6425f98e64459ff203e8985083ffd"
  255. "f60500553abc0e05cd02184bdb89c4ccd67e187951267eb328",
  256. "dcea9e78f35a1bf3499a831b10b86c90aac01cd84b67a0109b55a36e9328b1e3"
  257. "65fce161d71ce7131a543ea4cb5f7e9f1d8b00696447001400",
  258. "0c3e544074ec63b0265e0c",
  259. None,
  260. "",
  261. "1f0a8888ce25e8d458a21130879b840a9089d999aaba039eaf3e3afa090a09d3"
  262. "89dba82c4ff2ae8ac5cdfb7c55e94d5d961a29fe0109941e00b8dbdeea6d3b05"
  263. "1068df7254c0cdc129cbe62db2dc957dbb47b51fd3f213fb8698f064774250a5"
  264. "028961c9bf8ffd973fe5d5c206492b140e00",
  265. ),
  266. (
  267. "258cdd4ada32ed9c9ff54e63756ae582fb8fab2ac721f2c8e676a72768513d93"
  268. "9f63dddb55609133f29adf86ec9929dccb52c1c5fd2ff7e21b",
  269. "3ba16da0c6f2cc1f30187740756f5e798d6bc5fc015d7c63cc9510ee3fd44adc"
  270. "24d8e968b6e46e6f94d19b945361726bd75e149ef09817f580",
  271. "64a65f3cdedcdd66811e2915",
  272. None,
  273. "",
  274. "7eeeab7c4e50fb799b418ee5e3197ff6bf15d43a14c34389b59dd1a7b1b85b4a"
  275. "e90438aca634bea45e3a2695f1270f07fdcdf7c62b8efeaf00b45c2c96ba457e"
  276. "b1a8bf075a3db28e5c24f6b923ed4ad747c3c9e03c7079efb87cb110d3a99861"
  277. "e72003cbae6d6b8b827e4e6c143064ff3c00",
  278. ),
  279. (
  280. "7ef4e84544236752fbb56b8f31a23a10e42814f5f55ca037cdcc11c64c9a3b29"
  281. "49c1bb60700314611732a6c2fea98eebc0266a11a93970100e",
  282. "b3da079b0aa493a5772029f0467baebee5a8112d9d3a22532361da294f7bb381"
  283. "5c5dc59e176b4d9f381ca0938e13c6c07b174be65dfa578e80",
  284. "64a65f3cdedcdd66811e2915e7",
  285. None,
  286. "",
  287. "6a12066f55331b6c22acd5d5bfc5d71228fbda80ae8dec26bdd306743c5027cb"
  288. "4890810c162c027468675ecf645a83176c0d7323a2ccde2d80efe5a1268e8aca"
  289. "1d6fbc194d3f77c44986eb4ab4177919ad8bec33eb47bbb5fc6e28196fd1caf5"
  290. "6b4e7e0ba5519234d047155ac727a1053100",
  291. ),
  292. (
  293. "d65df341ad13e008567688baedda8e9dcdc17dc024974ea5b4227b6530e339bf"
  294. "f21f99e68ca6968f3cca6dfe0fb9f4fab4fa135d5542ea3f01",
  295. "df9705f58edbab802c7f8363cfe5560ab1c6132c20a9f1dd163483a26f8ac53a"
  296. "39d6808bf4a1dfbd261b099bb03b3fb50906cb28bd8a081f00",
  297. "bd0f6a3747cd561bdddf4640a332461a4a30a12a434cd0bf40d766d9c6d458e5"
  298. "512204a30c17d1f50b5079631f64eb3112182da3005835461113718d1a5ef944",
  299. None,
  300. "",
  301. "554bc2480860b49eab8532d2a533b7d578ef473eeb58c98bb2d0e1ce488a98b1"
  302. "8dfde9b9b90775e67f47d4a1c3482058efc9f40d2ca033a0801b63d45b3b722e"
  303. "f552bad3b4ccb667da350192b61c508cf7b6b5adadc2c8d9a446ef003fb05cba"
  304. "5f30e88e36ec2703b349ca229c2670833900",
  305. ),
  306. (
  307. "2ec5fe3c17045abdb136a5e6a913e32ab75ae68b53d2fc149b77e504132d3756"
  308. "9b7e766ba74a19bd6162343a21c8590aa9cebca9014c636df5",
  309. "79756f014dcfe2079f5dd9e718be4171e2ef2486a08f25186f6bff43a9936b9b"
  310. "fe12402b08ae65798a3d81e22e9ec80e7690862ef3d4ed3a00",
  311. "15777532b0bdd0d1389f636c5f6b9ba734c90af572877e2d272dd078aa1e567c"
  312. "fa80e12928bb542330e8409f3174504107ecd5efac61ae7504dabe2a602ede89"
  313. "e5cca6257a7c77e27a702b3ae39fc769fc54f2395ae6a1178cab4738e543072f"
  314. "c1c177fe71e92e25bf03e4ecb72f47b64d0465aaea4c7fad372536c8ba516a60"
  315. "39c3c2a39f0e4d832be432dfa9a706a6e5c7e19f397964ca4258002f7c0541b5"
  316. "90316dbc5622b6b2a6fe7a4abffd96105eca76ea7b98816af0748c10df048ce0"
  317. "12d901015a51f189f3888145c03650aa23ce894c3bd889e030d565071c59f409"
  318. "a9981b51878fd6fc110624dcbcde0bf7a69ccce38fabdf86f3bef6044819de11",
  319. None,
  320. "",
  321. "c650ddbb0601c19ca11439e1640dd931f43c518ea5bea70d3dcde5f4191fe53f"
  322. "00cf966546b72bcc7d58be2b9badef28743954e3a44a23f880e8d4f1cfce2d7a"
  323. "61452d26da05896f0a50da66a239a8a188b6d825b3305ad77b73fbac0836ecc6"
  324. "0987fd08527c1a8e80d5823e65cafe2a3d00",
  325. ),
  326. (
  327. "872d093780f5d3730df7c212664b37b8a0f24f56810daa8382cd4fa3f77634ec"
  328. "44dc54f1c2ed9bea86fafb7632d8be199ea165f5ad55dd9ce8",
  329. "a81b2e8a70a5ac94ffdbcc9badfc3feb0801f258578bb114ad44ece1ec0e799d"
  330. "a08effb81c5d685c0c56f64eecaef8cdf11cc38737838cf400",
  331. "6ddf802e1aae4986935f7f981ba3f0351d6273c0a0c22c9c0e8339168e675412"
  332. "a3debfaf435ed651558007db4384b650fcc07e3b586a27a4f7a00ac8a6fec2cd"
  333. "86ae4bf1570c41e6a40c931db27b2faa15a8cedd52cff7362c4e6e23daec0fbc"
  334. "3a79b6806e316efcc7b68119bf46bc76a26067a53f296dafdbdc11c77f7777e9"
  335. "72660cf4b6a9b369a6665f02e0cc9b6edfad136b4fabe723d2813db3136cfde9"
  336. "b6d044322fee2947952e031b73ab5c603349b307bdc27bc6cb8b8bbd7bd32321"
  337. "9b8033a581b59eadebb09b3c4f3d2277d4f0343624acc817804728b25ab79717"
  338. "2b4c5c21a22f9c7839d64300232eb66e53f31c723fa37fe387c7d3e50bdf9813"
  339. "a30e5bb12cf4cd930c40cfb4e1fc622592a49588794494d56d24ea4b40c89fc0"
  340. "596cc9ebb961c8cb10adde976a5d602b1c3f85b9b9a001ed3c6a4d3b1437f520"
  341. "96cd1956d042a597d561a596ecd3d1735a8d570ea0ec27225a2c4aaff26306d1"
  342. "526c1af3ca6d9cf5a2c98f47e1c46db9a33234cfd4d81f2c98538a09ebe76998"
  343. "d0d8fd25997c7d255c6d66ece6fa56f11144950f027795e653008f4bd7ca2dee"
  344. "85d8e90f3dc315130ce2a00375a318c7c3d97be2c8ce5b6db41a6254ff264fa6"
  345. "155baee3b0773c0f497c573f19bb4f4240281f0b1f4f7be857a4e59d416c06b4"
  346. "c50fa09e1810ddc6b1467baeac5a3668d11b6ecaa901440016f389f80acc4db9"
  347. "77025e7f5924388c7e340a732e554440e76570f8dd71b7d640b3450d1fd5f041"
  348. "0a18f9a3494f707c717b79b4bf75c98400b096b21653b5d217cf3565c9597456"
  349. "f70703497a078763829bc01bb1cbc8fa04eadc9a6e3f6699587a9e75c94e5bab"
  350. "0036e0b2e711392cff0047d0d6b05bd2a588bc109718954259f1d86678a579a3"
  351. "120f19cfb2963f177aeb70f2d4844826262e51b80271272068ef5b3856fa8535"
  352. "aa2a88b2d41f2a0e2fda7624c2850272ac4a2f561f8f2f7a318bfd5caf969614"
  353. "9e4ac824ad3460538fdc25421beec2cc6818162d06bbed0c40a387192349db67"
  354. "a118bada6cd5ab0140ee273204f628aad1c135f770279a651e24d8c14d75a605"
  355. "9d76b96a6fd857def5e0b354b27ab937a5815d16b5fae407ff18222c6d1ed263"
  356. "be68c95f32d908bd895cd76207ae726487567f9a67dad79abec316f683b17f2d"
  357. "02bf07e0ac8b5bc6162cf94697b3c27cd1fea49b27f23ba2901871962506520c"
  358. "392da8b6ad0d99f7013fbc06c2c17a569500c8a7696481c1cd33e9b14e40b82e"
  359. "79a5f5db82571ba97bae3ad3e0479515bb0e2b0f3bfcd1fd33034efc6245eddd"
  360. "7ee2086ddae2600d8ca73e214e8c2b0bdb2b047c6a464a562ed77b73d2d841c4"
  361. "b34973551257713b753632efba348169abc90a68f42611a40126d7cb21b58695"
  362. "568186f7e569d2ff0f9e745d0487dd2eb997cafc5abf9dd102e62ff66cba87",
  363. None,
  364. "",
  365. "e301345a41a39a4d72fff8df69c98075a0cc082b802fc9b2b6bc503f926b65bd"
  366. "df7f4c8f1cb49f6396afc8a70abe6d8aef0db478d4c6b2970076c6a0484fe76d"
  367. "76b3a97625d79f1ce240e7c576750d295528286f719b413de9ada3e8eb78ed57"
  368. "3603ce30d8bb761785dc30dbc320869e1a00"
  369. ),
  370. # 7.5 Ed448ph
  371. (
  372. "833fe62409237b9d62ec77587520911e9a759cec1d19755b7da901b96dca3d42"
  373. "ef7822e0d5104127dc05d6dbefde69e3ab2cec7c867c6e2c49",
  374. "259b71c19f83ef77a7abd26524cbdb3161b590a48f7d17de3ee0ba9c52beb743"
  375. "c09428a131d6b1b57303d90d8132c276d5ed3d5d01c0f53880",
  376. "616263",
  377. SHAKE256,
  378. "",
  379. "822f6901f7480f3d5f562c592994d9693602875614483256505600bbc281ae38"
  380. "1f54d6bce2ea911574932f52a4e6cadd78769375ec3ffd1b801a0d9b3f4030cd"
  381. "433964b6457ea39476511214f97469b57dd32dbc560a9a94d00bff07620464a3"
  382. "ad203df7dc7ce360c3cd3696d9d9fab90f00"
  383. ),
  384. (
  385. "833fe62409237b9d62ec77587520911e9a759cec1d19755b7da901b96dca3d42"
  386. "ef7822e0d5104127dc05d6dbefde69e3ab2cec7c867c6e2c49",
  387. "259b71c19f83ef77a7abd26524cbdb3161b590a48f7d17de3ee0ba9c52beb743"
  388. "c09428a131d6b1b57303d90d8132c276d5ed3d5d01c0f53880",
  389. "616263",
  390. SHAKE256,
  391. "666f6f",
  392. "c32299d46ec8ff02b54540982814dce9a05812f81962b649d528095916a2aa48"
  393. "1065b1580423ef927ecf0af5888f90da0f6a9a85ad5dc3f280d91224ba9911a3"
  394. "653d00e484e2ce232521481c8658df304bb7745a73514cdb9bf3e15784ab7128"
  395. "4f8d0704a608c54a6b62d97beb511d132100",
  396. ),
  397. )
  398. rfc8032_tv_bytes = []
  399. for tv_str in rfc8032_tv_str:
  400. rfc8032_tv_bytes.append([unhexlify(i) if isinstance(i, str) else i for i in tv_str])
  401. class TestEdDSA(unittest.TestCase):
  402. def test_sign(self):
  403. for sk, _, msg, hashmod, ctx, exp_signature in rfc8032_tv_bytes:
  404. key = eddsa.import_private_key(sk)
  405. signer = eddsa.new(key, 'rfc8032', context=ctx)
  406. if hashmod is None:
  407. # PureEdDSA
  408. signature = signer.sign(msg)
  409. else:
  410. # HashEdDSA
  411. hashobj = hashmod.new(msg)
  412. signature = signer.sign(hashobj)
  413. self.assertEqual(exp_signature, signature)
  414. def test_verify(self):
  415. for _, pk, msg, hashmod, ctx, exp_signature in rfc8032_tv_bytes:
  416. key = eddsa.import_public_key(pk)
  417. verifier = eddsa.new(key, 'rfc8032', context=ctx)
  418. if hashmod is None:
  419. # PureEdDSA
  420. verifier.verify(msg, exp_signature)
  421. else:
  422. # HashEdDSA
  423. hashobj = hashmod.new(msg)
  424. verifier.verify(hashobj, exp_signature)
  425. def test_negative(self):
  426. key = ECC.generate(curve="ed25519")
  427. self.assertRaises(ValueError, eddsa.new, key, 'rfc9999')
  428. nist_key = ECC.generate(curve="p256")
  429. self.assertRaises(ValueError, eddsa.new, nist_key, 'rfc8032')
  430. class TestExport_Ed25519(unittest.TestCase):
  431. def test_raw(self):
  432. key = ECC.generate(curve="Ed25519")
  433. x, y = key.pointQ.xy
  434. raw = bytearray(key._export_eddsa())
  435. sign_x = raw[31] >> 7
  436. raw[31] &= 0x7F
  437. yt = bytes_to_long(raw[::-1])
  438. self.assertEqual(y, yt)
  439. self.assertEqual(x & 1, sign_x)
  440. key = ECC.construct(point_x=0, point_y=1, curve="Ed25519")
  441. out = key._export_eddsa()
  442. self.assertEqual(b'\x01' + b'\x00' * 31, out)
  443. class TestExport_Ed448(unittest.TestCase):
  444. def test_raw(self):
  445. key = ECC.generate(curve="Ed448")
  446. x, y = key.pointQ.xy
  447. raw = bytearray(key._export_eddsa())
  448. sign_x = raw[56] >> 7
  449. raw[56] &= 0x7F
  450. yt = bytes_to_long(raw[::-1])
  451. self.assertEqual(y, yt)
  452. self.assertEqual(x & 1, sign_x)
  453. key = ECC.construct(point_x=0, point_y=1, curve="Ed448")
  454. out = key._export_eddsa()
  455. self.assertEqual(b'\x01' + b'\x00' * 56, out)
  456. class TestImport_Ed25519(unittest.TestCase):
  457. def test_raw(self):
  458. Px = 24407857220263921307776619664228778204996144802740950419837658238229122415920
  459. Py = 56480760040633817885061096979765646085062883740629155052073094891081309750690
  460. encoded = b'\xa2\x05\xd6\x00\xe1 \xe1\xc0\xff\x96\xee?V\x8e\xba/\xd3\x89\x06\xd7\xc4c\xe8$\xc2d\xd7a1\xfa\xde|'
  461. key = eddsa.import_public_key(encoded)
  462. self.assertEqual(Py, key.pointQ.y)
  463. self.assertEqual(Px, key.pointQ.x)
  464. encoded = b'\x01' + b'\x00' * 31
  465. key = eddsa.import_public_key(encoded)
  466. self.assertEqual(1, key.pointQ.y)
  467. self.assertEqual(0, key.pointQ.x)
  468. class TestImport_Ed448(unittest.TestCase):
  469. def test_raw(self):
  470. Px = 0x153f42025aba3b0daecaa5cd79458b3146c7c9378c16c17b4a59bc3561113d90c169045bc12966c3f93e140c2ca0a3acc33d9205b9daf9b1
  471. Py = 0x38f5c0015d3dedd576c232810dd90373b5b1d631a12894c043b7be529cbae03ede177d8fa490b56131dbcb2465d2aba777ef839fc1719b25
  472. encoded = unhexlify("259b71c19f83ef77a7abd26524cbdb31"
  473. "61b590a48f7d17de3ee0ba9c52beb743"
  474. "c09428a131d6b1b57303d90d8132c276"
  475. "d5ed3d5d01c0f53880")
  476. key = eddsa.import_public_key(encoded)
  477. self.assertEqual(Py, key.pointQ.y)
  478. self.assertEqual(Px, key.pointQ.x)
  479. encoded = b'\x01' + b'\x00' * 56
  480. key = eddsa.import_public_key(encoded)
  481. self.assertEqual(1, key.pointQ.y)
  482. self.assertEqual(0, key.pointQ.x)
  483. class TestVectorsEdDSAWycheproof(unittest.TestCase):
  484. def add_tests(self, filename):
  485. def pk(group):
  486. elem = group['key']['pk']
  487. return unhexlify(elem)
  488. def sk(group):
  489. elem = group['key']['sk']
  490. return unhexlify(elem)
  491. result = load_test_vectors_wycheproof(("Signature", "wycheproof"),
  492. filename,
  493. "Wycheproof ECDSA signature (%s)"
  494. % filename,
  495. group_tag={'pk': pk, 'sk': sk})
  496. self.tv += result
  497. def setUp(self):
  498. self.tv = []
  499. self.add_tests("eddsa_test.json")
  500. self.add_tests("ed448_test.json")
  501. def test_sign(self, tv):
  502. if not tv.valid:
  503. return
  504. self._id = "Wycheproof EdDSA Sign Test #%d (%s, %s)" % (tv.id, tv.comment, tv.filename)
  505. key = eddsa.import_private_key(tv.sk)
  506. signer = eddsa.new(key, 'rfc8032')
  507. signature = signer.sign(tv.msg)
  508. self.assertEqual(signature, tv.sig)
  509. def test_verify(self, tv):
  510. self._id = "Wycheproof EdDSA Verify Test #%d (%s, %s)" % (tv.id, tv.comment, tv.filename)
  511. key = eddsa.import_public_key(tv.pk)
  512. verifier = eddsa.new(key, 'rfc8032')
  513. try:
  514. verifier.verify(tv.msg, tv.sig)
  515. except ValueError:
  516. assert not tv.valid
  517. else:
  518. assert tv.valid
  519. def runTest(self):
  520. for tv in self.tv:
  521. self.test_sign(tv)
  522. self.test_verify(tv)
  523. def get_tests(config={}):
  524. tests = []
  525. tests += list_test_cases(TestExport_Ed25519)
  526. tests += list_test_cases(TestExport_Ed448)
  527. tests += list_test_cases(TestImport_Ed25519)
  528. tests += list_test_cases(TestImport_Ed448)
  529. tests += list_test_cases(TestEdDSA)
  530. tests += [TestVectorsEdDSAWycheproof()]
  531. return tests
  532. if __name__ == '__main__':
  533. def suite():
  534. return unittest.TestSuite(get_tests())
  535. unittest.main(defaultTest='suite')