1 files changed, 247 insertions, 0 deletions
diff --git a/libraries/spongycastle/prov/src/test/java/org/spongycastle/jce/provider/test/ECNRTest.java b/libraries/spongycastle/prov/src/test/java/org/spongycastle/jce/provider/test/ECNRTest.java
new file mode 100644
index 000000000..6e9b4033e
--- /dev/null
+++ b/libraries/spongycastle/prov/src/test/java/org/spongycastle/jce/provider/test/ECNRTest.java
@@ -0,0 +1,247 @@
+package org.spongycastle.jce.provider.test;
+
+import java.io.ByteArrayInputStream;
+import java.io.IOException;
+import java.math.BigInteger;
+import java.security.KeyFactory;
+import java.security.PrivateKey;
+import java.security.PublicKey;
+import java.security.SecureRandom;
+import java.security.Security;
+import java.security.Signature;
+
+import org.spongycastle.asn1.ASN1InputStream;
+import org.spongycastle.asn1.ASN1Sequence;
+import org.spongycastle.asn1.DERInteger;
+import org.spongycastle.jce.provider.BouncyCastleProvider;
+import org.spongycastle.jce.spec.ECParameterSpec;
+import org.spongycastle.jce.spec.ECPrivateKeySpec;
+import org.spongycastle.jce.spec.ECPublicKeySpec;
+import org.spongycastle.math.ec.ECCurve;
+import org.spongycastle.util.BigIntegers;
+import org.spongycastle.util.encoders.Hex;
+import org.spongycastle.util.test.FixedSecureRandom;
+import org.spongycastle.util.test.SimpleTest;
+
+public class ECNRTest
+    extends SimpleTest
+{
+    byte[] k1 = Hex.decode("d5014e4b60ef2ba8b6211b4062ba3224e0427dd3");
+    byte[] k2 = Hex.decode("345e8d05c075c3a508df729a1685690e68fcfb8c8117847e89063bca1f85d968fd281540b6e13bd1af989a1fbf17e06462bf511f9d0b140fb48ac1b1baa5bded");
+
+    SecureRandom    random = new FixedSecureRandom(new byte[][] { k1, k2 });
+    
+    /**
+     * X9.62 - 1998,<br>
+     * J.3.2, Page 155, ECDSA over the field Fp<br>
+     * an example with 239 bit prime
+     */
+    private void testECNR239bitPrime()
+        throws Exception
+    {
+        BigInteger r = new BigInteger("308636143175167811492623515537541734843573549327605293463169625072911693");
+        BigInteger s = new BigInteger("852401710738814635664888632022555967400445256405412579597015412971797143");
+
+        byte[] kData = BigIntegers.asUnsignedByteArray(new BigInteger("700000017569056646655505781757157107570501575775705779575555657156756655"));
+        
+        SecureRandom    k = new FixedSecureRandom(kData);
+
+        ECCurve curve = new ECCurve.Fp(
+            new BigInteger("883423532389192164791648750360308885314476597252960362792450860609699839"), // q
+            new BigInteger("7fffffffffffffffffffffff7fffffffffff8000000000007ffffffffffc", 16), // a
+            new BigInteger("6b016c3bdcf18941d0d654921475ca71a9db2fb27d1d37796185c2942c0a", 16)); // b
+
+        ECParameterSpec spec = new ECParameterSpec(
+            curve,
+            curve.decodePoint(Hex.decode("020ffa963cdca8816ccc33b8642bedf905c3d358573d3f27fbbd3b3cb9aaaf")), // G
+            new BigInteger("883423532389192164791648750360308884807550341691627752275345424702807307")); // n
+        
+
+        ECPrivateKeySpec priKey = new ECPrivateKeySpec(
+            new BigInteger("876300101507107567501066130761671078357010671067781776716671676178726717"), // d
+            spec);
+
+        ECPublicKeySpec pubKey = new ECPublicKeySpec(
+            curve.decodePoint(Hex.decode("025b6dc53bc61a2548ffb0f671472de6c9521a9d2d2534e65abfcbd5fe0c70")), // Q
+            spec);
+
+        Signature           sgr = Signature.getInstance("SHA1withECNR", "SC");
+        KeyFactory          f = KeyFactory.getInstance("ECDSA", "SC");
+
+        byte[] message = new byte[] { (byte)'a', (byte)'b', (byte)'c' };
+        
+        checkSignature(239, priKey, pubKey, sgr, k, message, r, s);
+    }
+    
+    // -------------------------------------------------------------------------
+    
+    /**
+     * X9.62 - 1998,<br>
+     * Page 104-105, ECDSA over the field Fp<br>
+     * an example with 192 bit prime
+     */
+    private void testECNR192bitPrime()
+        throws Exception
+    {
+        BigInteger r  = new BigInteger("2474388605162950674935076940284692598330235697454145648371");
+        BigInteger s  = new BigInteger("2997192822503471356158280167065034437828486078932532073836");
+
+        byte[] kData = BigIntegers.asUnsignedByteArray(new BigInteger("dcc5d1f1020906df2782360d36b2de7a17ece37d503784af", 16));
+        
+        SecureRandom    k = new FixedSecureRandom(kData);
+
+        ECCurve.Fp curve = new ECCurve.Fp(
+            new BigInteger("6277101735386680763835789423207666416083908700390324961279"), // q (or p)
+            new BigInteger("FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFC", 16),   // a
+            new BigInteger("64210519E59C80E70FA7E9AB72243049FEB8DEECC146B9B1", 16));  // b
+        
+        ECParameterSpec spec = new ECParameterSpec(
+            curve,
+            curve.decodePoint(Hex.decode("03188DA80EB03090F67CBF20EB43A18800F4FF0AFD82FF1012")), // G
+            new BigInteger("6277101735386680763835789423176059013767194773182842284081")); // n
+        
+
+        ECPrivateKeySpec priKey = new ECPrivateKeySpec(
+            new BigInteger("651056770906015076056810763456358567190100156695615665659"), // d
+            spec);
+
+        ECPublicKeySpec pubKey = new ECPublicKeySpec(
+            curve.decodePoint(Hex.decode("0262B12D60690CDCF330BABAB6E69763B471F994DD702D16A5")), // Q
+            spec);
+
+        Signature           sgr = Signature.getInstance("SHA1withECNR", "SC");
+        KeyFactory          f = KeyFactory.getInstance("ECDSA", "SC");
+
+        byte[] message = new byte[] { (byte)'a', (byte)'b', (byte)'c' };
+        
+        checkSignature(192, priKey, pubKey, sgr, k, message, r, s);
+    }
+    
+    // -------------------------------------------------------------------------
+    
+    /**
+     * SEC 2: Recommended Elliptic Curve Domain Parameters - September 2000,<br>
+     * Page 17-19, Recommended 521-bit Elliptic Curve Domain Parameters over Fp<br>
+     * an ECC example with a 521 bit prime and a 512 bit hash
+     */
+    private void testECNR521bitPrime()
+        throws Exception
+    {
+        BigInteger r  = new BigInteger("1820641608112320695747745915744708800944302281118541146383656165330049339564439316345159057453301092391897040509935100825960342573871340486684575368150970954");
+        BigInteger s  = new BigInteger("6358277176448326821136601602749690343031826490505780896013143436153111780706227024847359990383467115737705919410755190867632280059161174165591324242446800763");
+
+        byte[] kData = BigIntegers.asUnsignedByteArray(new BigInteger("cdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef", 16));
+        
+        SecureRandom    k = new FixedSecureRandom(kData);
+
+        ECCurve.Fp curve = new ECCurve.Fp(
+            new BigInteger("6864797660130609714981900799081393217269435300143305409394463459185543183397656052122559640661454554977296311391480858037121987999716643812574028291115057151"), // q (or p)
+            new BigInteger("01FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFC", 16),   // a
+            new BigInteger("0051953EB9618E1C9A1F929A21A0B68540EEA2DA725B99B315F3B8B489918EF109E156193951EC7E937B1652C0BD3BB1BF073573DF883D2C34F1EF451FD46B503F00", 16));  // b
+        
+        ECParameterSpec spec = new ECParameterSpec(
+            curve,
+            curve.decodePoint(Hex.decode("0200C6858E06B70404E9CD9E3ECB662395B4429C648139053FB521F828AF606B4D3DBAA14B5E77EFE75928FE1DC127A2FFA8DE3348B3C1856A429BF97E7E31C2E5BD66")), // G
+            new BigInteger("01FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFA51868783BF2F966B7FCC0148F709A5D03BB5C9B8899C47AEBB6FB71E91386409", 16)); // n
+        
+
+        ECPrivateKeySpec priKey = new ECPrivateKeySpec(
+            new BigInteger("5769183828869504557786041598510887460263120754767955773309066354712783118202294874205844512909370791582896372147797293913785865682804434049019366394746072023"), // d
+            spec);
+
+        ECPublicKeySpec pubKey = new ECPublicKeySpec(
+            curve.decodePoint(Hex.decode("02006BFDD2C9278B63C92D6624F151C9D7A822CC75BD983B17D25D74C26740380022D3D8FAF304781E416175EADF4ED6E2B47142D2454A7AC7801DD803CF44A4D1F0AC")), // Q
+            spec);
+
+        Signature           sgr = Signature.getInstance("SHA512withECNR", "SC");
+        byte[] message = new byte[] { (byte)'a', (byte)'b', (byte)'c' };
+        
+        checkSignature(521, priKey, pubKey, sgr, k, message, r, s);
+    }
+
+    private void checkSignature(
+        int size,
+        ECPrivateKeySpec priKey, 
+        ECPublicKeySpec pubKey, 
+        Signature sgr,
+        SecureRandom k, 
+        byte[] message, 
+        BigInteger r, 
+        BigInteger s)
+        throws Exception
+    {
+        KeyFactory          f = KeyFactory.getInstance("ECDSA", "SC");
+        PrivateKey          sKey = f.generatePrivate(priKey);
+        PublicKey           vKey = f.generatePublic(pubKey);
+
+        sgr.initSign(sKey, k);
+
+        sgr.update(message);
+
+        byte[]  sigBytes = sgr.sign();
+
+        sgr.initVerify(vKey);
+
+        sgr.update(message);
+
+        if (!sgr.verify(sigBytes))
+        {
+            fail(size + " bit EC verification failed");
+        }
+
+        BigInteger[]  sig = derDecode(sigBytes);
+
+        if (!r.equals(sig[0]))
+        {
+            fail(size + "bit"
+                + ": r component wrong." + System.getProperty("line.separator")
+                + " expecting: " + r + System.getProperty("line.separator")
+                + " got      : " + sig[0]);
+        }
+
+        if (!s.equals(sig[1]))
+        {
+            fail(size + "bit"
+                + ": s component wrong." + System.getProperty("line.separator")
+                + " expecting: " + s + System.getProperty("line.separator")
+                + " got      : " + sig[1]);
+        }
+    }
+
+    protected BigInteger[] derDecode(
+        byte[]  encoding)
+        throws IOException
+    {
+        ByteArrayInputStream    bIn = new ByteArrayInputStream(encoding);
+        ASN1InputStream         aIn = new ASN1InputStream(bIn);
+        ASN1Sequence            s = (ASN1Sequence)aIn.readObject();
+
+        BigInteger[]            sig = new BigInteger[2];
+
+        sig[0] = ((DERInteger)s.getObjectAt(0)).getValue();
+        sig[1] = ((DERInteger)s.getObjectAt(1)).getValue();
+
+        return sig;
+    }
+
+    public String getName()
+    {
+        return "ECNR";
+    }
+
+    public void performTest()
+        throws Exception
+    {
+        testECNR192bitPrime();
+        testECNR239bitPrime();
+        testECNR521bitPrime();
+    }
+
+    public static void main(
+        String[]    args)
+    {
+        Security.addProvider(new BouncyCastleProvider());
+
+        runTest(new ECNRTest());
+    }
+}