fixed s256

Author: deatil

elliptic/e521/e521.go

@@ -0,0 +1,22 @@
+package e521
+
+import (
+    "sync"
+    "encoding/asn1"
+)
+
+// see doc
+// https://www.gov.br/iti/pt-br/assuntos/legislacao/documentos-principais/IN2022_22_DOC_ICP_01.01_assinado.pdf
+// https://eprint.iacr.org/2013/647
+
+var (
+    // E-521 EdDSA curve oid
+    OIDE521 = asn1.ObjectIdentifier{1, 3, 6, 1, 4, 1, 44588, 2, 1}
+)
+
+var once sync.Once
+
+func E521() *E521Curve {
+    once.Do(initAll)
+    return e521
+}

elliptic/e521/e521_curves.go

@@ -0,0 +1,30 @@
+package e521
+
+import (
+    "math/big"
+)
+
+var e521 *E521Curve
+
+func initAll() {
+    initE521()
+}
+
+func initE521() {
+    e521 = &E521Curve{
+        Name:    "E-521",
+        P:       bigFromHex("1ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff"),
+        N:       bigFromHex("7ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffd15b6c64746fc85f736b8af5e7ec53f04fbd8c4569a8f1f4540ea2435f5180d6b"),
+        D:       bigFromHex("1fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffa4331"),
+        Gx:      bigFromHex("752cb45c48648b189df90cb2296b2878a3bfd9f42fc6c818ec8bf3c9c0c6203913f6ecc5ccc72434b1ae949d568fc99c6059d0fb13364838aa302a940a2f19ba6c"),
+        Gy:      bigFromHex("0c"),
+        BitSize: 521,
+    }
+}
+
+func bigFromHex(s string) (i *big.Int) {
+    i = new(big.Int)
+    i.SetString(s, 16)
+
+    return
+}

elliptic/e521/e521_test.go

@@ -0,0 +1,146 @@
+package e521
+
+import (
+    "fmt"
+    "testing"
+    "math/big"
+    "crypto/elliptic"
+
+    cryptobin_test "github.com/deatil/go-cryptobin/tool/test"
+)
+
+func bigintFromHex(s string) *big.Int {
+    result, _ := new(big.Int).SetString(s, 16)
+
+    return result
+}
+
+func Test_Interface(t *testing.T) {
+    var _ elliptic.Curve = (*E521Curve)(nil)
+}
+
+func Test_Curve_Add(t *testing.T) {
+    {
+        a1 := bigintFromHex("135e8ba63870ade80365ee6b6832d971a83c8519310bed795809637bd61e4d54676d0823d7a95d26291be2742994d833b16d306dcea0574b57924aac6b62552ef81")
+        b1 := bigintFromHex("d6e622c17fb2723b47ef82f0a704694689c96c5cc12f24b42a735b89283c6bd47fe0596dff8841603414b8b3a5c681d72750e03a807f6668a008738876e2f1fcde")
+        a2 := bigintFromHex("10ffba2f442444980490d51fb67b6b29f30a96e00aeebb058fb396f1d56862925f84a403612cf7a32586abe1e8085f44e28426a2f0684c9e7adbfaf99bd2788aad0")
+        b2 := bigintFromHex("5d33e51bfe1cbb3c263ad569b213be723a45920ac38070147d8d85c1779b4fe4eaa0912a17765f2d87bb2ac27106fb8d019152c373e9ea060f591c1d85141cc830")
+
+        xx, yy := E521().Add(a1, b1, a2, b2)
+
+        xx2 := fmt.Sprintf("%x", xx.Bytes())
+        yy2 := fmt.Sprintf("%x", yy.Bytes())
+
+        xxcheck := "01c48fda4d86a4610f4211f0f7bf4f5fdfe0da463028bd86b4827fd26717404fa8eb0433cdd040611a776a3de97a1f4882dbb5688984ad48739d9d48eaeee413f644"
+        yycheck := "01a7c2f2d27327cb4a53894392198c9a5b6563c43c92912f90b0efe86d618770a9d7911573919c0a37942e6a7fc484dd59b917849c6c2e9a400f9bb7c46486fe9c4a"
+
+        if xx2 != xxcheck {
+            t.Errorf("xx fail, got %s, want %s", xx2, xxcheck)
+        }
+        if yy2 != yycheck {
+            t.Errorf("yy fail, got %s, want %s", yy2, yycheck)
+        }
+    }
+
+    {
+        a1 := bigintFromHex("135e8ba63870ade80365ee6b6832d971a83c8519310bed795809637bd61e4d54676d0823d7a95d26291be2742994d833b16d306dcea0574b57924aac6b62552ef81")
+        b1 := bigintFromHex("d6e622c17fb2723b47ef82f0a704694689c96c5cc12f24b42a735b89283c6bd47fe0596dff8841603414b8b3a5c681d72750e03a807f6668a008738876e2f1fcde")
+
+        xx, yy := E521().Add(a1, b1, a1, b1)
+
+        xx2 := fmt.Sprintf("%x", xx.Bytes())
+        yy2 := fmt.Sprintf("%x", yy.Bytes())
+
+        xxcheck := "019f5208229540e4292ac78b021184e00ee1cc5d0c15edf9b9d05d7466fcc93d38c5afa8ab13db1fab07163fe91ad2d0a6aca4377995230e4a685e6d19c1e0457594"
+        yycheck := "01fbce936f5787a4a778aeaece860985404b226ad1de63ded30ec88acd2335686022c2622f1abf537a21d8685b7c3d590980fa358640279761e0e50d8eae6ac5e716"
+
+        if xx2 != xxcheck {
+            t.Errorf("xx fail, got %s, want %s", xx2, xxcheck)
+        }
+        if yy2 != yycheck {
+            t.Errorf("yy fail, got %s, want %s", yy2, yycheck)
+        }
+    }
+
+    {
+        a1 := bigintFromHex("135e8ba63870ade80365ee6b6832d971a83c8519310bed795809637bd61e4d54676d0823d7a95d26291be2742994d833b16d306dcea0574b57924aac6b62552ef81")
+        b1 := bigintFromHex("d6e622c17fb2723b47ef82f0a704694689c96c5cc12f24b42a735b89283c6bd47fe0596dff8841603414b8b3a5c681d72750e03a807f6668a008738876e2f1fcde")
+
+        xx, yy := E521().Double(a1, b1)
+
+        xx2 := fmt.Sprintf("%x", xx.Bytes())
+        yy2 := fmt.Sprintf("%x", yy.Bytes())
+
+        xxcheck := "019f5208229540e4292ac78b021184e00ee1cc5d0c15edf9b9d05d7466fcc93d38c5afa8ab13db1fab07163fe91ad2d0a6aca4377995230e4a685e6d19c1e0457594"
+        yycheck := "01fbce936f5787a4a778aeaece860985404b226ad1de63ded30ec88acd2335686022c2622f1abf537a21d8685b7c3d590980fa358640279761e0e50d8eae6ac5e716"
+
+        if xx2 != xxcheck {
+            t.Errorf("xx fail, got %s, want %s", xx2, xxcheck)
+        }
+        if yy2 != yycheck {
+            t.Errorf("yy fail, got %s, want %s", yy2, yycheck)
+        }
+    }
+
+}
+
+func Test_Curve_ScalarMult(t *testing.T) {
+    {
+        a1 := bigintFromHex("135e8ba63870ade80365ee6b6832d971a83c8519310bed795809637bd61e4d54676d0823d7a95d26291be2742994d833b16d306dcea0574b57924aac6b62552ef81")
+        b1 := bigintFromHex("d6e622c17fb2723b47ef82f0a704694689c96c5cc12f24b42a735b89283c6bd47fe0596dff8841603414b8b3a5c681d72750e03a807f6668a008738876e2f1fcde")
+        k := bigintFromHex("10ffba2f442444980490d51fb67b6b29f30a96e00aeebb058fb396f1d56862925f84a403612cf7a32586abe1e8085f44e28426a2f0684c9e7adbfaf99bd2788aad0")
+
+        xx, yy := E521().ScalarMult(a1, b1, k.Bytes())
+
+        xx2 := fmt.Sprintf("%x", xx.Bytes())
+        yy2 := fmt.Sprintf("%x", yy.Bytes())
+
+        xxcheck := "462780410d3830461ea02f5f99df2ff32dd093667dadb782c7736d40f7d9863f7d7994c64718264d4aa5cec9ade662738e459c15ecf835776a0f31548a06ef4417"
+        yycheck := "0119c56a9485cc6124b17571e09e84b6895d7cd9babf7cfee1b24339845b7d8f0807a433f3c11fe20788b412dac23ebb6b80183f45ea8ebdddd0e10990d43672bd2b"
+
+        if xx2 != xxcheck {
+            t.Errorf("ScalarMult xx fail, got %s, want %s", xx2, xxcheck)
+        }
+        if yy2 != yycheck {
+            t.Errorf("ScalarMult yy fail, got %s, want %s", yy2, yycheck)
+        }
+    }
+
+    {
+        k := bigintFromHex("10ffba2f442444980490d51fb67b6b29f30a96e00aeebb058fb396f1d56862925f84a403612cf7a32586abe1e8085f44e28426a2f0684c9e7adbfaf99bd2788aad0")
+
+        xx, yy := E521().ScalarBaseMult(k.Bytes())
+
+        xx2 := fmt.Sprintf("%x", xx.Bytes())
+        yy2 := fmt.Sprintf("%x", yy.Bytes())
+
+        xxcheck := "dc597d107588c5bcac37864a12ad8e601bd531747da45b102af45f1716f170ee48adc8aa25034f62d2245acc0c8802386663a1705c8df877e02c610ba7b8b68eb4"
+        yycheck := "01a912a13ddd30d259e0676b791c1560f98dea1ab00761282d04a933d6d54e74dab79cce5cf226881b14b18188465607cb49860fd20bbbb7b0f40911b6b0bdc73fe9"
+
+        if xx2 != xxcheck {
+            t.Errorf("ScalarBaseMult xx fail, got %s, want %s", xx2, xxcheck)
+        }
+        if yy2 != yycheck {
+            t.Errorf("ScalarBaseMult yy fail, got %s, want %s", yy2, yycheck)
+        }
+    }
+
+}
+
+func Test_MarshalCompressed(t *testing.T) {
+    a1 := bigintFromHex("135e8ba63870ade80365ee6b6832d971a83c8519310bed795809637bd61e4d54676d0823d7a95d26291be2742994d833b16d306dcea0574b57924aac6b62552ef81")
+    b1 := bigintFromHex("d6e622c17fb2723b47ef82f0a704694689c96c5cc12f24b42a735b89283c6bd47fe0596dff8841603414b8b3a5c681d72750e03a807f6668a008738876e2f1fcde")
+
+    m := MarshalCompressed(E521(), a1, b1)
+
+    m2 := fmt.Sprintf("%x", m)
+    mcheck := "0300d6e622c17fb2723b47ef82f0a704694689c96c5cc12f24b42a735b89283c6bd47fe0596dff8841603414b8b3a5c681d72750e03a807f6668a008738876e2f1fcde"
+
+    cryptobin_test.Equal(t, mcheck, m2)
+
+    mcheck2 := bigintFromHex(mcheck).Bytes()
+
+    x, y := UnmarshalCompressed(E521(), mcheck2)
+    cryptobin_test.Equal(t, a1, x)
+    cryptobin_test.Equal(t, b1, y)
+}