blob: 251cbb692e3c8eeace1c541125061815d064f0c7 [file] [log] [blame]
Paul Bakker5121ce52009-01-03 21:22:43 +00001/*
2 * Benchmark demonstration program
3 *
Bence Szépkúti1e148272020-08-07 13:07:28 +02004 * Copyright The Mbed TLS Contributors
Manuel Pégourié-Gonnard37ff1402015-09-04 14:21:07 +02005 * SPDX-License-Identifier: Apache-2.0
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
8 * not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
Paul Bakker5121ce52009-01-03 21:22:43 +000018 */
19
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020020#if !defined(MBEDTLS_CONFIG_FILE)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000021#include "mbedtls/config.h"
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020022#else
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020023#include MBEDTLS_CONFIG_FILE
Manuel Pégourié-Gonnardcef4ad22014-04-29 12:39:06 +020024#endif
Paul Bakker5121ce52009-01-03 21:22:43 +000025
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000026#include "mbedtls/platform.h"
Christoph M. Wintersteigercc91fe22019-02-20 18:06:00 +000027#if !defined(MBEDTLS_PLATFORM_C)
Rich Evans18b78c72015-02-11 14:06:19 +000028#include <stdio.h>
Manuel Pégourié-Gonnard3ef6a6d2018-12-10 14:31:45 +010029#include <stdlib.h>
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020030#define mbedtls_exit exit
31#define mbedtls_printf printf
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020032#define mbedtls_free free
Rich Evansf90016a2015-01-19 14:26:37 +000033#endif
34
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020035#if !defined(MBEDTLS_TIMING_C)
Manuel Pégourié-Gonnard714929b2015-02-16 17:32:47 +000036int main( void )
37{
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020038 mbedtls_printf("MBEDTLS_TIMING_C not defined.\n");
k-stachowiak776521a2019-05-23 09:46:47 +020039 mbedtls_exit( 0 );
Manuel Pégourié-Gonnard714929b2015-02-16 17:32:47 +000040}
41#else
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +010042
Manuel Pégourié-Gonnard714929b2015-02-16 17:32:47 +000043#include <string.h>
Manuel Pégourié-Gonnard7551cb92015-05-26 16:04:06 +020044#include <stdlib.h>
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +010045
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000046#include "mbedtls/timing.h"
Paul Bakker5121ce52009-01-03 21:22:43 +000047
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000048#include "mbedtls/md4.h"
49#include "mbedtls/md5.h"
50#include "mbedtls/ripemd160.h"
51#include "mbedtls/sha1.h"
52#include "mbedtls/sha256.h"
53#include "mbedtls/sha512.h"
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +010054
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000055#include "mbedtls/arc4.h"
56#include "mbedtls/des.h"
57#include "mbedtls/aes.h"
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +010058#include "mbedtls/aria.h"
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000059#include "mbedtls/blowfish.h"
60#include "mbedtls/camellia.h"
Daniel King34b822c2016-05-15 17:28:08 -030061#include "mbedtls/chacha20.h"
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000062#include "mbedtls/gcm.h"
63#include "mbedtls/ccm.h"
Manuel Pégourié-Gonnardd6aea182018-05-09 10:21:28 +020064#include "mbedtls/chachapoly.h"
Simon Butcher549dc3d2016-10-05 14:14:19 +010065#include "mbedtls/cmac.h"
Daniel Kingadc32c02016-05-16 18:25:45 -030066#include "mbedtls/poly1305.h"
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +010067
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000068#include "mbedtls/havege.h"
69#include "mbedtls/ctr_drbg.h"
70#include "mbedtls/hmac_drbg.h"
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +010071
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000072#include "mbedtls/rsa.h"
73#include "mbedtls/dhm.h"
74#include "mbedtls/ecdsa.h"
75#include "mbedtls/ecdh.h"
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +010076
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000077#include "mbedtls/error.h"
Paul Bakker5121ce52009-01-03 21:22:43 +000078
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +020079#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000080#include "mbedtls/memory_buffer_alloc.h"
Rich Evans18b78c72015-02-11 14:06:19 +000081#endif
82
Manuel Pégourié-Gonnard714929b2015-02-16 17:32:47 +000083/*
84 * For heap usage estimates, we need an estimate of the overhead per allocated
85 * block. ptmalloc2/3 (used in gnu libc for instance) uses 2 size_t per block,
86 * so use that as our baseline.
87 */
88#define MEM_BLOCK_OVERHEAD ( 2 * sizeof( size_t ) )
89
90/*
Manuel Pégourié-Gonnardb2a18a22015-05-27 16:29:56 +020091 * Size to use for the alloc buffer if MEMORY_BUFFER_ALLOC_C is defined.
Manuel Pégourié-Gonnard714929b2015-02-16 17:32:47 +000092 */
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +010093#define HEAP_SIZE (1u << 16) /* 64k */
Manuel Pégourié-Gonnard714929b2015-02-16 17:32:47 +000094
Paul Bakker02faf452011-11-29 11:23:58 +000095#define BUFSIZE 1024
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +010096#define HEADER_FORMAT " %-24s : "
Gergely Budaia5d336b2014-01-27 23:27:06 +010097#define TITLE_LEN 25
Manuel Pégourié-Gonnard6c5abfa2015-02-13 14:12:07 +000098
Rich Evans85b05ec2015-02-12 11:37:29 +000099#define OPTIONS \
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200100 "md4, md5, ripemd160, sha1, sha256, sha512,\n" \
Daniel King34b822c2016-05-15 17:28:08 -0300101 "arc4, des3, des, camellia, blowfish, chacha20,\n" \
Zhai Zhaoxuane22da992020-05-09 23:50:32 +0800102 "aes_cbc, aes_gcm, aes_ccm, aes_xts, chachapoly,\n" \
Daniel Kingadc32c02016-05-16 18:25:45 -0300103 "aes_cmac, des3_cmac, poly1305\n" \
Rich Evans85b05ec2015-02-12 11:37:29 +0000104 "havege, ctr_drbg, hmac_drbg\n" \
105 "rsa, dhm, ecdsa, ecdh.\n"
106
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200107#if defined(MBEDTLS_ERROR_C)
Rich Evans85b05ec2015-02-12 11:37:29 +0000108#define PRINT_ERROR \
Simon Butcherb981b162016-10-06 10:27:22 +0100109 mbedtls_strerror( ret, ( char * )tmp, sizeof( tmp ) ); \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200110 mbedtls_printf( "FAILED: %s\n", tmp );
Rich Evans85b05ec2015-02-12 11:37:29 +0000111#else
112#define PRINT_ERROR \
Kenneth Soerensen518d4352020-04-01 17:22:45 +0200113 mbedtls_printf( "FAILED: -0x%04x\n", (unsigned int) -ret );
Rich Evans85b05ec2015-02-12 11:37:29 +0000114#endif
115
116#define TIME_AND_TSC( TITLE, CODE ) \
117do { \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200118 unsigned long ii, jj, tsc; \
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200119 int ret = 0; \
Rich Evans85b05ec2015-02-12 11:37:29 +0000120 \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200121 mbedtls_printf( HEADER_FORMAT, TITLE ); \
Rich Evans85b05ec2015-02-12 11:37:29 +0000122 fflush( stdout ); \
123 \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200124 mbedtls_set_alarm( 1 ); \
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200125 for( ii = 1; ret == 0 && ! mbedtls_timing_alarmed; ii++ ) \
Rich Evans85b05ec2015-02-12 11:37:29 +0000126 { \
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200127 ret = CODE; \
Rich Evans85b05ec2015-02-12 11:37:29 +0000128 } \
129 \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200130 tsc = mbedtls_timing_hardclock(); \
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200131 for( jj = 0; ret == 0 && jj < 1024; jj++ ) \
Rich Evans85b05ec2015-02-12 11:37:29 +0000132 { \
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200133 ret = CODE; \
Rich Evans85b05ec2015-02-12 11:37:29 +0000134 } \
135 \
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200136 if( ret != 0 ) \
137 { \
138 PRINT_ERROR; \
139 } \
140 else \
141 { \
142 mbedtls_printf( "%9lu KiB/s, %9lu cycles/byte\n", \
143 ii * BUFSIZE / 1024, \
144 ( mbedtls_timing_hardclock() - tsc ) \
145 / ( jj * BUFSIZE ) ); \
146 } \
Rich Evans85b05ec2015-02-12 11:37:29 +0000147} while( 0 )
148
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200149#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C) && defined(MBEDTLS_MEMORY_DEBUG)
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100150
Manuel Pégourié-Gonnard5edd3882020-04-09 10:40:03 +0200151/* How much space to reserve for the title when printing heap usage results.
152 * Updated manually as the output of the following command:
153 *
154 * sed -n 's/.*[T]IME_PUBLIC.*"\(.*\)",/\1/p' programs/test/benchmark.c |
155 * awk '{print length+2}' | sort -rn | head -n1
156 *
157 * This computes the maximum length of a title +2 (because we appends "/s").
158 * (If the value is too small, the only consequence is poor alignement.) */
159#define TITLE_SPACE 16
160
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100161#define MEMORY_MEASURE_INIT \
162 size_t max_used, max_blocks, max_bytes; \
163 size_t prv_used, prv_blocks; \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200164 mbedtls_memory_buffer_alloc_cur_get( &prv_used, &prv_blocks ); \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200165 mbedtls_memory_buffer_alloc_max_reset( );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100166
167#define MEMORY_MEASURE_PRINT( title_len ) \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200168 mbedtls_memory_buffer_alloc_max_get( &max_used, &max_blocks ); \
Manuel Pégourié-Gonnard5edd3882020-04-09 10:40:03 +0200169 ii = TITLE_SPACE > (title_len) ? TITLE_SPACE - (title_len) : 1; \
170 while( ii-- ) mbedtls_printf( " " ); \
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100171 max_used -= prv_used; \
172 max_blocks -= prv_blocks; \
173 max_bytes = max_used + MEM_BLOCK_OVERHEAD * max_blocks; \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200174 mbedtls_printf( "%6u heap bytes", (unsigned) max_bytes );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100175
176#else
Manuel Pégourié-Gonnarde579dab2015-01-29 16:28:44 +0000177#define MEMORY_MEASURE_INIT
178#define MEMORY_MEASURE_PRINT( title_len )
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100179#endif
180
Rich Evans85b05ec2015-02-12 11:37:29 +0000181#define TIME_PUBLIC( TITLE, TYPE, CODE ) \
182do { \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200183 unsigned long ii; \
Rich Evans85b05ec2015-02-12 11:37:29 +0000184 int ret; \
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100185 MEMORY_MEASURE_INIT; \
Rich Evans85b05ec2015-02-12 11:37:29 +0000186 \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200187 mbedtls_printf( HEADER_FORMAT, TITLE ); \
Rich Evans85b05ec2015-02-12 11:37:29 +0000188 fflush( stdout ); \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200189 mbedtls_set_alarm( 3 ); \
Rich Evans85b05ec2015-02-12 11:37:29 +0000190 \
191 ret = 0; \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200192 for( ii = 1; ! mbedtls_timing_alarmed && ! ret ; ii++ ) \
Rich Evans85b05ec2015-02-12 11:37:29 +0000193 { \
194 CODE; \
195 } \
196 \
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000197 if( ret == MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED ) \
198 { \
199 mbedtls_printf( "Feature Not Supported. Skipping.\n" ); \
200 ret = 0; \
201 } \
202 else if( ret != 0 ) \
Rich Evans85b05ec2015-02-12 11:37:29 +0000203 { \
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100204 PRINT_ERROR; \
Rich Evans85b05ec2015-02-12 11:37:29 +0000205 } \
206 else \
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100207 { \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200208 mbedtls_printf( "%6lu " TYPE "/s", ii / 3 ); \
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100209 MEMORY_MEASURE_PRINT( sizeof( TYPE ) + 1 ); \
Manuel Pégourié-Gonnardea356662015-08-27 12:02:40 +0200210 mbedtls_printf( "\n" ); \
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100211 } \
Rich Evans85b05ec2015-02-12 11:37:29 +0000212} while( 0 )
Paul Bakker5121ce52009-01-03 21:22:43 +0000213
Paul Bakkera3d195c2011-11-27 21:07:34 +0000214static int myrand( void *rng_state, unsigned char *output, size_t len )
Paul Bakker5121ce52009-01-03 21:22:43 +0000215{
Paul Bakkera3d195c2011-11-27 21:07:34 +0000216 size_t use_len;
217 int rnd;
218
Paul Bakker5121ce52009-01-03 21:22:43 +0000219 if( rng_state != NULL )
220 rng_state = NULL;
221
Paul Bakkera3d195c2011-11-27 21:07:34 +0000222 while( len > 0 )
223 {
224 use_len = len;
225 if( use_len > sizeof(int) )
226 use_len = sizeof(int);
227
228 rnd = rand();
229 memcpy( output, &rnd, use_len );
230 output += use_len;
231 len -= use_len;
232 }
233
234 return( 0 );
Paul Bakker5121ce52009-01-03 21:22:43 +0000235}
236
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000237#define CHECK_AND_CONTINUE( R ) \
238 { \
Gilles Peskineb14c4a52019-02-11 18:23:42 +0100239 int CHECK_AND_CONTINUE_ret = ( R ); \
240 if( CHECK_AND_CONTINUE_ret == MBEDTLS_ERR_PLATFORM_FEATURE_UNSUPPORTED ) { \
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000241 mbedtls_printf( "Feature not supported. Skipping.\n" ); \
242 continue; \
243 } \
Gilles Peskineb14c4a52019-02-11 18:23:42 +0100244 else if( CHECK_AND_CONTINUE_ret != 0 ) { \
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000245 mbedtls_exit( 1 ); \
246 } \
247 }
Christoph M. Wintersteiger3dca1a42018-12-14 11:54:59 +0000248
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100249/*
250 * Clear some memory that was used to prepare the context
251 */
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200252#if defined(MBEDTLS_ECP_C)
253void ecp_clear_precomputed( mbedtls_ecp_group *grp )
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100254{
255 if( grp->T != NULL )
256 {
257 size_t i;
258 for( i = 0; i < grp->T_size; i++ )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200259 mbedtls_ecp_point_free( &grp->T[i] );
260 mbedtls_free( grp->T );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100261 }
262 grp->T = NULL;
263 grp->T_size = 0;
264}
265#else
266#define ecp_clear_precomputed( g )
267#endif
268
Paul Bakker5121ce52009-01-03 21:22:43 +0000269unsigned char buf[BUFSIZE];
270
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200271typedef struct {
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200272 char md4, md5, ripemd160, sha1, sha256, sha512,
Simon Butcher549dc3d2016-10-05 14:14:19 +0100273 arc4, des3, des,
Manuel Pégourié-Gonnard0dadba22018-06-19 11:11:15 +0200274 aes_cbc, aes_gcm, aes_ccm, aes_xts, chachapoly,
Manuel Pégourié-Gonnardd6aea182018-05-09 10:21:28 +0200275 aes_cmac, des3_cmac,
Manuel Pégourié-Gonnard39b19042018-06-07 12:01:33 +0200276 aria, camellia, blowfish, chacha20,
Daniel Kingadc32c02016-05-16 18:25:45 -0300277 poly1305,
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100278 havege, ctr_drbg, hmac_drbg,
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200279 rsa, dhm, ecdsa, ecdh;
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200280} todo_list;
281
Simon Butcher63cb97e2018-12-06 17:43:31 +0000282
Paul Bakkercce9d772011-11-18 14:26:47 +0000283int main( int argc, char *argv[] )
Paul Bakker5690efc2011-05-26 13:16:06 +0000284{
Manuel Pégourié-Gonnard71e75dc2014-12-19 18:05:43 +0100285 int i;
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200286 unsigned char tmp[200];
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200287 char title[TITLE_LEN];
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200288 todo_list todo;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200289#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Manuel Pégourié-Gonnardb2a18a22015-05-27 16:29:56 +0200290 unsigned char alloc_buf[HEAP_SIZE] = { 0 };
Manuel Pégourié-Gonnard128657d2014-12-18 16:35:52 +0000291#endif
Paul Bakkercce9d772011-11-18 14:26:47 +0000292
Manuel Pégourié-Gonnardc439e7b2015-03-03 13:12:00 +0000293 if( argc <= 1 )
294 {
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200295 memset( &todo, 1, sizeof( todo ) );
Manuel Pégourié-Gonnardc439e7b2015-03-03 13:12:00 +0000296 }
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200297 else
298 {
299 memset( &todo, 0, sizeof( todo ) );
300
301 for( i = 1; i < argc; i++ )
302 {
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200303 if( strcmp( argv[i], "md4" ) == 0 )
304 todo.md4 = 1;
305 else if( strcmp( argv[i], "md5" ) == 0 )
306 todo.md5 = 1;
307 else if( strcmp( argv[i], "ripemd160" ) == 0 )
308 todo.ripemd160 = 1;
309 else if( strcmp( argv[i], "sha1" ) == 0 )
310 todo.sha1 = 1;
311 else if( strcmp( argv[i], "sha256" ) == 0 )
312 todo.sha256 = 1;
313 else if( strcmp( argv[i], "sha512" ) == 0 )
314 todo.sha512 = 1;
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200315 else if( strcmp( argv[i], "arc4" ) == 0 )
316 todo.arc4 = 1;
317 else if( strcmp( argv[i], "des3" ) == 0 )
318 todo.des3 = 1;
319 else if( strcmp( argv[i], "des" ) == 0 )
320 todo.des = 1;
321 else if( strcmp( argv[i], "aes_cbc" ) == 0 )
322 todo.aes_cbc = 1;
Aorimn5f778012016-06-09 23:22:58 +0200323 else if( strcmp( argv[i], "aes_xts" ) == 0 )
324 todo.aes_xts = 1;
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200325 else if( strcmp( argv[i], "aes_gcm" ) == 0 )
326 todo.aes_gcm = 1;
Manuel Pégourié-Gonnard58d78a82014-05-07 12:03:02 +0200327 else if( strcmp( argv[i], "aes_ccm" ) == 0 )
328 todo.aes_ccm = 1;
Manuel Pégourié-Gonnardd6aea182018-05-09 10:21:28 +0200329 else if( strcmp( argv[i], "chachapoly" ) == 0 )
330 todo.chachapoly = 1;
Simon Butcher549dc3d2016-10-05 14:14:19 +0100331 else if( strcmp( argv[i], "aes_cmac" ) == 0 )
332 todo.aes_cmac = 1;
333 else if( strcmp( argv[i], "des3_cmac" ) == 0 )
334 todo.des3_cmac = 1;
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +0100335 else if( strcmp( argv[i], "aria" ) == 0 )
336 todo.aria = 1;
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200337 else if( strcmp( argv[i], "camellia" ) == 0 )
338 todo.camellia = 1;
339 else if( strcmp( argv[i], "blowfish" ) == 0 )
340 todo.blowfish = 1;
Daniel King34b822c2016-05-15 17:28:08 -0300341 else if( strcmp( argv[i], "chacha20" ) == 0 )
342 todo.chacha20 = 1;
Daniel Kingadc32c02016-05-16 18:25:45 -0300343 else if( strcmp( argv[i], "poly1305" ) == 0 )
344 todo.poly1305 = 1;
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200345 else if( strcmp( argv[i], "havege" ) == 0 )
346 todo.havege = 1;
347 else if( strcmp( argv[i], "ctr_drbg" ) == 0 )
348 todo.ctr_drbg = 1;
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100349 else if( strcmp( argv[i], "hmac_drbg" ) == 0 )
350 todo.hmac_drbg = 1;
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200351 else if( strcmp( argv[i], "rsa" ) == 0 )
352 todo.rsa = 1;
353 else if( strcmp( argv[i], "dhm" ) == 0 )
354 todo.dhm = 1;
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200355 else if( strcmp( argv[i], "ecdsa" ) == 0 )
356 todo.ecdsa = 1;
357 else if( strcmp( argv[i], "ecdh" ) == 0 )
358 todo.ecdh = 1;
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200359 else
360 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200361 mbedtls_printf( "Unrecognized option: %s\n", argv[i] );
362 mbedtls_printf( "Available options: " OPTIONS );
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200363 }
364 }
365 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000366
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200367 mbedtls_printf( "\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +0000368
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200369#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
Manuel Pégourié-Gonnardb2a18a22015-05-27 16:29:56 +0200370 mbedtls_memory_buffer_alloc_init( alloc_buf, sizeof( alloc_buf ) );
Manuel Pégourié-Gonnard128657d2014-12-18 16:35:52 +0000371#endif
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200372 memset( buf, 0xAA, sizeof( buf ) );
Paul Bakkerdf71dd12014-04-17 16:03:48 +0200373 memset( tmp, 0xBB, sizeof( tmp ) );
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200374
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200375#if defined(MBEDTLS_MD4_C)
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200376 if( todo.md4 )
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100377 TIME_AND_TSC( "MD4", mbedtls_md4_ret( buf, BUFSIZE, tmp ) );
Paul Bakker5121ce52009-01-03 21:22:43 +0000378#endif
379
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200380#if defined(MBEDTLS_MD5_C)
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200381 if( todo.md5 )
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100382 TIME_AND_TSC( "MD5", mbedtls_md5_ret( buf, BUFSIZE, tmp ) );
Paul Bakker5121ce52009-01-03 21:22:43 +0000383#endif
384
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200385#if defined(MBEDTLS_RIPEMD160_C)
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200386 if( todo.ripemd160 )
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100387 TIME_AND_TSC( "RIPEMD160", mbedtls_ripemd160_ret( buf, BUFSIZE, tmp ) );
Manuel Pégourié-Gonnard01b0b382014-01-17 14:29:46 +0100388#endif
389
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200390#if defined(MBEDTLS_SHA1_C)
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200391 if( todo.sha1 )
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100392 TIME_AND_TSC( "SHA-1", mbedtls_sha1_ret( buf, BUFSIZE, tmp ) );
Paul Bakker5121ce52009-01-03 21:22:43 +0000393#endif
394
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200395#if defined(MBEDTLS_SHA256_C)
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200396 if( todo.sha256 )
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100397 TIME_AND_TSC( "SHA-256", mbedtls_sha256_ret( buf, BUFSIZE, tmp, 0 ) );
Paul Bakker5121ce52009-01-03 21:22:43 +0000398#endif
399
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200400#if defined(MBEDTLS_SHA512_C)
Manuel Pégourié-Gonnarde85fef12015-05-11 19:21:39 +0200401 if( todo.sha512 )
Gilles Peskine9e4f77c2018-01-22 11:48:08 +0100402 TIME_AND_TSC( "SHA-512", mbedtls_sha512_ret( buf, BUFSIZE, tmp, 0 ) );
Paul Bakker3a3c3c22009-02-09 22:33:30 +0000403#endif
404
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200405#if defined(MBEDTLS_ARC4_C)
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200406 if( todo.arc4 )
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200407 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200408 mbedtls_arc4_context arc4;
409 mbedtls_arc4_init( &arc4 );
410 mbedtls_arc4_setup( &arc4, tmp, 32 );
411 TIME_AND_TSC( "ARC4", mbedtls_arc4_crypt( &arc4, BUFSIZE, buf, buf ) );
412 mbedtls_arc4_free( &arc4 );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200413 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000414#endif
415
Simon Butcher549dc3d2016-10-05 14:14:19 +0100416#if defined(MBEDTLS_DES_C)
417#if defined(MBEDTLS_CIPHER_MODE_CBC)
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200418 if( todo.des3 )
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200419 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200420 mbedtls_des3_context des3;
421 mbedtls_des3_init( &des3 );
422 mbedtls_des3_set3key_enc( &des3, tmp );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200423 TIME_AND_TSC( "3DES",
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200424 mbedtls_des3_crypt_cbc( &des3, MBEDTLS_DES_ENCRYPT, BUFSIZE, tmp, buf, buf ) );
425 mbedtls_des3_free( &des3 );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200426 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000427
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200428 if( todo.des )
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200429 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200430 mbedtls_des_context des;
431 mbedtls_des_init( &des );
432 mbedtls_des_setkey_enc( &des, tmp );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200433 TIME_AND_TSC( "DES",
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200434 mbedtls_des_crypt_cbc( &des, MBEDTLS_DES_ENCRYPT, BUFSIZE, tmp, buf, buf ) );
435 mbedtls_des_free( &des );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200436 }
Simon Butcher549dc3d2016-10-05 14:14:19 +0100437
438#endif /* MBEDTLS_CIPHER_MODE_CBC */
439#if defined(MBEDTLS_CMAC_C)
440 if( todo.des3_cmac )
441 {
442 unsigned char output[8];
443 const mbedtls_cipher_info_t *cipher_info;
444
445 memset( buf, 0, sizeof( buf ) );
446 memset( tmp, 0, sizeof( tmp ) );
447
448 cipher_info = mbedtls_cipher_info_from_type( MBEDTLS_CIPHER_DES_EDE3_ECB );
449
450 TIME_AND_TSC( "3DES-CMAC",
Simon Butcherb981b162016-10-06 10:27:22 +0100451 mbedtls_cipher_cmac( cipher_info, tmp, 192, buf,
452 BUFSIZE, output ) );
Simon Butcher549dc3d2016-10-05 14:14:19 +0100453 }
454#endif /* MBEDTLS_CMAC_C */
455#endif /* MBEDTLS_DES_C */
Paul Bakker5121ce52009-01-03 21:22:43 +0000456
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200457#if defined(MBEDTLS_AES_C)
458#if defined(MBEDTLS_CIPHER_MODE_CBC)
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200459 if( todo.aes_cbc )
Paul Bakker5121ce52009-01-03 21:22:43 +0000460 {
Manuel Pégourié-Gonnard71e75dc2014-12-19 18:05:43 +0100461 int keysize;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200462 mbedtls_aes_context aes;
463 mbedtls_aes_init( &aes );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200464 for( keysize = 128; keysize <= 256; keysize += 64 )
465 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200466 mbedtls_snprintf( title, sizeof( title ), "AES-CBC-%d", keysize );
Paul Bakker5121ce52009-01-03 21:22:43 +0000467
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200468 memset( buf, 0, sizeof( buf ) );
469 memset( tmp, 0, sizeof( tmp ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200470 mbedtls_aes_setkey_enc( &aes, tmp, keysize );
Paul Bakker5121ce52009-01-03 21:22:43 +0000471
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200472 TIME_AND_TSC( title,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200473 mbedtls_aes_crypt_cbc( &aes, MBEDTLS_AES_ENCRYPT, BUFSIZE, tmp, buf, buf ) );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200474 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200475 mbedtls_aes_free( &aes );
Paul Bakker5121ce52009-01-03 21:22:43 +0000476 }
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200477#endif
Aorimn5f778012016-06-09 23:22:58 +0200478#if defined(MBEDTLS_CIPHER_MODE_XTS)
479 if( todo.aes_xts )
480 {
481 int keysize;
Jaeden Amero9366feb2018-05-29 18:55:17 +0100482 mbedtls_aes_xts_context ctx;
483
484 mbedtls_aes_xts_init( &ctx );
485 for( keysize = 128; keysize <= 256; keysize += 128 )
Aorimn5f778012016-06-09 23:22:58 +0200486 {
487 mbedtls_snprintf( title, sizeof( title ), "AES-XTS-%d", keysize );
488
489 memset( buf, 0, sizeof( buf ) );
490 memset( tmp, 0, sizeof( tmp ) );
Jaeden Amero9366feb2018-05-29 18:55:17 +0100491 mbedtls_aes_xts_setkey_enc( &ctx, tmp, keysize * 2 );
Aorimn5f778012016-06-09 23:22:58 +0200492
493 TIME_AND_TSC( title,
Jaeden Amero9366feb2018-05-29 18:55:17 +0100494 mbedtls_aes_crypt_xts( &ctx, MBEDTLS_AES_ENCRYPT, BUFSIZE,
495 tmp, buf, buf ) );
496
497 mbedtls_aes_xts_free( &ctx );
Aorimn5f778012016-06-09 23:22:58 +0200498 }
Aorimn5f778012016-06-09 23:22:58 +0200499 }
500#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200501#if defined(MBEDTLS_GCM_C)
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200502 if( todo.aes_gcm )
Paul Bakker89e80c92012-03-20 13:50:09 +0000503 {
Manuel Pégourié-Gonnard71e75dc2014-12-19 18:05:43 +0100504 int keysize;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200505 mbedtls_gcm_context gcm;
Manuel Pégourié-Gonnardc34e8dd2015-04-28 21:42:17 +0200506
507 mbedtls_gcm_init( &gcm );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200508 for( keysize = 128; keysize <= 256; keysize += 64 )
509 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200510 mbedtls_snprintf( title, sizeof( title ), "AES-GCM-%d", keysize );
Paul Bakker89e80c92012-03-20 13:50:09 +0000511
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200512 memset( buf, 0, sizeof( buf ) );
513 memset( tmp, 0, sizeof( tmp ) );
Manuel Pégourié-Gonnardc34e8dd2015-04-28 21:42:17 +0200514 mbedtls_gcm_setkey( &gcm, MBEDTLS_CIPHER_ID_AES, tmp, keysize );
Paul Bakker89e80c92012-03-20 13:50:09 +0000515
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200516 TIME_AND_TSC( title,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200517 mbedtls_gcm_crypt_and_tag( &gcm, MBEDTLS_GCM_ENCRYPT, BUFSIZE, tmp,
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200518 12, NULL, 0, buf, buf, 16, tmp ) );
Paul Bakkerf70fe812013-12-16 16:43:10 +0100519
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200520 mbedtls_gcm_free( &gcm );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200521 }
Paul Bakker89e80c92012-03-20 13:50:09 +0000522 }
523#endif
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200524#if defined(MBEDTLS_CCM_C)
Manuel Pégourié-Gonnard58d78a82014-05-07 12:03:02 +0200525 if( todo.aes_ccm )
526 {
Manuel Pégourié-Gonnard71e75dc2014-12-19 18:05:43 +0100527 int keysize;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200528 mbedtls_ccm_context ccm;
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +0200529
530 mbedtls_ccm_init( &ccm );
Manuel Pégourié-Gonnard58d78a82014-05-07 12:03:02 +0200531 for( keysize = 128; keysize <= 256; keysize += 64 )
532 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200533 mbedtls_snprintf( title, sizeof( title ), "AES-CCM-%d", keysize );
Manuel Pégourié-Gonnard58d78a82014-05-07 12:03:02 +0200534
535 memset( buf, 0, sizeof( buf ) );
536 memset( tmp, 0, sizeof( tmp ) );
Manuel Pégourié-Gonnard6963ff02015-04-28 18:02:54 +0200537 mbedtls_ccm_setkey( &ccm, MBEDTLS_CIPHER_ID_AES, tmp, keysize );
Manuel Pégourié-Gonnard58d78a82014-05-07 12:03:02 +0200538
539 TIME_AND_TSC( title,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200540 mbedtls_ccm_encrypt_and_tag( &ccm, BUFSIZE, tmp,
Manuel Pégourié-Gonnard58d78a82014-05-07 12:03:02 +0200541 12, NULL, 0, buf, buf, tmp, 16 ) );
542
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200543 mbedtls_ccm_free( &ccm );
Manuel Pégourié-Gonnard58d78a82014-05-07 12:03:02 +0200544 }
545 }
546#endif
Manuel Pégourié-Gonnardd6aea182018-05-09 10:21:28 +0200547#if defined(MBEDTLS_CHACHAPOLY_C)
548 if( todo.chachapoly )
549 {
550 mbedtls_chachapoly_context chachapoly;
551
552 mbedtls_chachapoly_init( &chachapoly );
553 memset( buf, 0, sizeof( buf ) );
554 memset( tmp, 0, sizeof( tmp ) );
555
556 mbedtls_snprintf( title, sizeof( title ), "ChaCha20-Poly1305" );
557
558 mbedtls_chachapoly_setkey( &chachapoly, tmp );
559
560 TIME_AND_TSC( title,
Manuel Pégourié-Gonnard3dc62a02018-06-04 12:18:19 +0200561 mbedtls_chachapoly_encrypt_and_tag( &chachapoly,
562 BUFSIZE, tmp, NULL, 0, buf, buf, tmp ) );
Manuel Pégourié-Gonnardd6aea182018-05-09 10:21:28 +0200563
564 mbedtls_chachapoly_free( &chachapoly );
565 }
566#endif
Simon Butcher549dc3d2016-10-05 14:14:19 +0100567#if defined(MBEDTLS_CMAC_C)
568 if( todo.aes_cmac )
569 {
570 unsigned char output[16];
571 const mbedtls_cipher_info_t *cipher_info;
572 mbedtls_cipher_type_t cipher_type;
573 int keysize;
574
575 for( keysize = 128, cipher_type = MBEDTLS_CIPHER_AES_128_ECB;
576 keysize <= 256;
577 keysize += 64, cipher_type++ )
578 {
579 mbedtls_snprintf( title, sizeof( title ), "AES-CMAC-%d", keysize );
580
581 memset( buf, 0, sizeof( buf ) );
582 memset( tmp, 0, sizeof( tmp ) );
583
584 cipher_info = mbedtls_cipher_info_from_type( cipher_type );
585
586 TIME_AND_TSC( title,
Andres AGa592dcc2016-10-06 15:23:39 +0100587 mbedtls_cipher_cmac( cipher_info, tmp, keysize,
588 buf, BUFSIZE, output ) );
Simon Butcher549dc3d2016-10-05 14:14:19 +0100589 }
590
591 memset( buf, 0, sizeof( buf ) );
592 memset( tmp, 0, sizeof( tmp ) );
593 TIME_AND_TSC( "AES-CMAC-PRF-128",
Simon Butcherb981b162016-10-06 10:27:22 +0100594 mbedtls_aes_cmac_prf_128( tmp, 16, buf, BUFSIZE,
595 output ) );
Simon Butcher549dc3d2016-10-05 14:14:19 +0100596 }
597#endif /* MBEDTLS_CMAC_C */
598#endif /* MBEDTLS_AES_C */
Paul Bakker5121ce52009-01-03 21:22:43 +0000599
Manuel Pégourié-Gonnard62e813c2018-02-21 10:47:47 +0100600#if defined(MBEDTLS_ARIA_C) && defined(MBEDTLS_CIPHER_MODE_CBC)
601 if( todo.aria )
602 {
603 int keysize;
604 mbedtls_aria_context aria;
605 mbedtls_aria_init( &aria );
606 for( keysize = 128; keysize <= 256; keysize += 64 )
607 {
608 mbedtls_snprintf( title, sizeof( title ), "ARIA-CBC-%d", keysize );
609
610 memset( buf, 0, sizeof( buf ) );
611 memset( tmp, 0, sizeof( tmp ) );
612 mbedtls_aria_setkey_enc( &aria, tmp, keysize );
613
614 TIME_AND_TSC( title,
615 mbedtls_aria_crypt_cbc( &aria, MBEDTLS_ARIA_ENCRYPT,
616 BUFSIZE, tmp, buf, buf ) );
617 }
618 mbedtls_aria_free( &aria );
619 }
620#endif
621
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200622#if defined(MBEDTLS_CAMELLIA_C) && defined(MBEDTLS_CIPHER_MODE_CBC)
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200623 if( todo.camellia )
Paul Bakker38119b12009-01-10 23:31:23 +0000624 {
Manuel Pégourié-Gonnard71e75dc2014-12-19 18:05:43 +0100625 int keysize;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200626 mbedtls_camellia_context camellia;
627 mbedtls_camellia_init( &camellia );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200628 for( keysize = 128; keysize <= 256; keysize += 64 )
629 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200630 mbedtls_snprintf( title, sizeof( title ), "CAMELLIA-CBC-%d", keysize );
Paul Bakker38119b12009-01-10 23:31:23 +0000631
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200632 memset( buf, 0, sizeof( buf ) );
633 memset( tmp, 0, sizeof( tmp ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200634 mbedtls_camellia_setkey_enc( &camellia, tmp, keysize );
Paul Bakker38119b12009-01-10 23:31:23 +0000635
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200636 TIME_AND_TSC( title,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200637 mbedtls_camellia_crypt_cbc( &camellia, MBEDTLS_CAMELLIA_ENCRYPT,
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200638 BUFSIZE, tmp, buf, buf ) );
639 }
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200640 mbedtls_camellia_free( &camellia );
Paul Bakker38119b12009-01-10 23:31:23 +0000641 }
642#endif
643
Daniel King34b822c2016-05-15 17:28:08 -0300644#if defined(MBEDTLS_CHACHA20_C)
645 if ( todo.chacha20 )
646 {
647 TIME_AND_TSC( "ChaCha20", mbedtls_chacha20_crypt( buf, buf, 0U, BUFSIZE, buf, buf ) );
648 }
649#endif
650
Daniel Kingadc32c02016-05-16 18:25:45 -0300651#if defined(MBEDTLS_POLY1305_C)
652 if ( todo.poly1305 )
653 {
Manuel Pégourié-Gonnardb1ac5e72018-05-09 09:25:00 +0200654 TIME_AND_TSC( "Poly1305", mbedtls_poly1305_mac( buf, buf, BUFSIZE, buf ) );
Daniel Kingadc32c02016-05-16 18:25:45 -0300655 }
656#endif
657
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200658#if defined(MBEDTLS_BLOWFISH_C) && defined(MBEDTLS_CIPHER_MODE_CBC)
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200659 if( todo.blowfish )
Paul Bakker3d58fe82012-07-04 17:15:31 +0000660 {
Manuel Pégourié-Gonnard71e75dc2014-12-19 18:05:43 +0100661 int keysize;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200662 mbedtls_blowfish_context blowfish;
663 mbedtls_blowfish_init( &blowfish );
Paul Bakker8cfd9d82014-06-18 11:16:11 +0200664
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200665 for( keysize = 128; keysize <= 256; keysize += 64 )
666 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200667 mbedtls_snprintf( title, sizeof( title ), "BLOWFISH-CBC-%d", keysize );
Paul Bakker3d58fe82012-07-04 17:15:31 +0000668
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200669 memset( buf, 0, sizeof( buf ) );
670 memset( tmp, 0, sizeof( tmp ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200671 mbedtls_blowfish_setkey( &blowfish, tmp, keysize );
Paul Bakker3d58fe82012-07-04 17:15:31 +0000672
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200673 TIME_AND_TSC( title,
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200674 mbedtls_blowfish_crypt_cbc( &blowfish, MBEDTLS_BLOWFISH_ENCRYPT, BUFSIZE,
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200675 tmp, buf, buf ) );
676 }
Paul Bakker8cfd9d82014-06-18 11:16:11 +0200677
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200678 mbedtls_blowfish_free( &blowfish );
Paul Bakker3d58fe82012-07-04 17:15:31 +0000679 }
680#endif
681
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200682#if defined(MBEDTLS_HAVEGE_C)
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200683 if( todo.havege )
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200684 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200685 mbedtls_havege_state hs;
686 mbedtls_havege_init( &hs );
687 TIME_AND_TSC( "HAVEGE", mbedtls_havege_random( &hs, buf, BUFSIZE ) );
688 mbedtls_havege_free( &hs );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200689 }
Paul Bakker02faf452011-11-29 11:23:58 +0000690#endif
691
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200692#if defined(MBEDTLS_CTR_DRBG_C)
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200693 if( todo.ctr_drbg )
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200694 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200695 mbedtls_ctr_drbg_context ctr_drbg;
Paul Bakker02faf452011-11-29 11:23:58 +0000696
Manuel Pégourié-Gonnard8d128ef2015-04-28 22:38:08 +0200697 mbedtls_ctr_drbg_init( &ctr_drbg );
Manuel Pégourié-Gonnard8d128ef2015-04-28 22:38:08 +0200698 if( mbedtls_ctr_drbg_seed( &ctr_drbg, myrand, NULL, NULL, 0 ) != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200699 mbedtls_exit(1);
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200700 TIME_AND_TSC( "CTR_DRBG (NOPR)",
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200701 mbedtls_ctr_drbg_random( &ctr_drbg, buf, BUFSIZE ) );
Gilles Peskinedb0cb252019-10-28 17:28:46 +0100702 mbedtls_ctr_drbg_free( &ctr_drbg );
Paul Bakker02faf452011-11-29 11:23:58 +0000703
Gilles Peskinedb0cb252019-10-28 17:28:46 +0100704 mbedtls_ctr_drbg_init( &ctr_drbg );
Manuel Pégourié-Gonnard8d128ef2015-04-28 22:38:08 +0200705 if( mbedtls_ctr_drbg_seed( &ctr_drbg, myrand, NULL, NULL, 0 ) != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200706 mbedtls_exit(1);
707 mbedtls_ctr_drbg_set_prediction_resistance( &ctr_drbg, MBEDTLS_CTR_DRBG_PR_ON );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200708 TIME_AND_TSC( "CTR_DRBG (PR)",
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200709 mbedtls_ctr_drbg_random( &ctr_drbg, buf, BUFSIZE ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200710 mbedtls_ctr_drbg_free( &ctr_drbg );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200711 }
Paul Bakker02faf452011-11-29 11:23:58 +0000712#endif
713
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200714#if defined(MBEDTLS_HMAC_DRBG_C)
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100715 if( todo.hmac_drbg )
716 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200717 mbedtls_hmac_drbg_context hmac_drbg;
718 const mbedtls_md_info_t *md_info;
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100719
Manuel Pégourié-Gonnardf9e94812015-04-28 22:07:14 +0200720 mbedtls_hmac_drbg_init( &hmac_drbg );
721
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200722#if defined(MBEDTLS_SHA1_C)
723 if( ( md_info = mbedtls_md_info_from_type( MBEDTLS_MD_SHA1 ) ) == NULL )
724 mbedtls_exit(1);
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100725
Manuel Pégourié-Gonnardf9e94812015-04-28 22:07:14 +0200726 if( mbedtls_hmac_drbg_seed( &hmac_drbg, md_info, myrand, NULL, NULL, 0 ) != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200727 mbedtls_exit(1);
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100728 TIME_AND_TSC( "HMAC_DRBG SHA-1 (NOPR)",
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200729 mbedtls_hmac_drbg_random( &hmac_drbg, buf, BUFSIZE ) );
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100730
Manuel Pégourié-Gonnardf9e94812015-04-28 22:07:14 +0200731 if( mbedtls_hmac_drbg_seed( &hmac_drbg, md_info, myrand, NULL, NULL, 0 ) != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200732 mbedtls_exit(1);
733 mbedtls_hmac_drbg_set_prediction_resistance( &hmac_drbg,
734 MBEDTLS_HMAC_DRBG_PR_ON );
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100735 TIME_AND_TSC( "HMAC_DRBG SHA-1 (PR)",
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200736 mbedtls_hmac_drbg_random( &hmac_drbg, buf, BUFSIZE ) );
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100737#endif
738
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200739#if defined(MBEDTLS_SHA256_C)
740 if( ( md_info = mbedtls_md_info_from_type( MBEDTLS_MD_SHA256 ) ) == NULL )
741 mbedtls_exit(1);
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100742
Manuel Pégourié-Gonnardf9e94812015-04-28 22:07:14 +0200743 if( mbedtls_hmac_drbg_seed( &hmac_drbg, md_info, myrand, NULL, NULL, 0 ) != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200744 mbedtls_exit(1);
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100745 TIME_AND_TSC( "HMAC_DRBG SHA-256 (NOPR)",
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200746 mbedtls_hmac_drbg_random( &hmac_drbg, buf, BUFSIZE ) );
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100747
Manuel Pégourié-Gonnardf9e94812015-04-28 22:07:14 +0200748 if( mbedtls_hmac_drbg_seed( &hmac_drbg, md_info, myrand, NULL, NULL, 0 ) != 0 )
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200749 mbedtls_exit(1);
750 mbedtls_hmac_drbg_set_prediction_resistance( &hmac_drbg,
751 MBEDTLS_HMAC_DRBG_PR_ON );
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100752 TIME_AND_TSC( "HMAC_DRBG SHA-256 (PR)",
Manuel Pégourié-Gonnard51d7cfe2018-06-25 11:19:51 +0200753 mbedtls_hmac_drbg_random( &hmac_drbg, buf, BUFSIZE ) );
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100754#endif
Ron Eldor278af452018-06-20 18:40:21 +0300755 mbedtls_hmac_drbg_free( &hmac_drbg );
Manuel Pégourié-Gonnardfef0f8f2014-01-30 20:59:00 +0100756 }
757#endif
758
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200759#if defined(MBEDTLS_RSA_C) && defined(MBEDTLS_GENPRIME)
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200760 if( todo.rsa )
Paul Bakker5121ce52009-01-03 21:22:43 +0000761 {
Manuel Pégourié-Gonnard71e75dc2014-12-19 18:05:43 +0100762 int keysize;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200763 mbedtls_rsa_context rsa;
Manuel Pégourié-Gonnarda6dbddc2015-07-06 11:20:33 +0200764 for( keysize = 2048; keysize <= 4096; keysize *= 2 )
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200765 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200766 mbedtls_snprintf( title, sizeof( title ), "RSA-%d", keysize );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200767
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200768 mbedtls_rsa_init( &rsa, MBEDTLS_RSA_PKCS_V15, 0 );
769 mbedtls_rsa_gen_key( &rsa, myrand, NULL, keysize, 65537 );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200770
771 TIME_PUBLIC( title, " public",
772 buf[0] = 0;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200773 ret = mbedtls_rsa_public( &rsa, buf, buf ) );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200774
775 TIME_PUBLIC( title, "private",
776 buf[0] = 0;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200777 ret = mbedtls_rsa_private( &rsa, myrand, NULL, buf, buf ) );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200778
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200779 mbedtls_rsa_free( &rsa );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200780 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000781 }
Paul Bakker5121ce52009-01-03 21:22:43 +0000782#endif
783
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200784#if defined(MBEDTLS_DHM_C) && defined(MBEDTLS_BIGNUM_C)
Manuel Pégourié-Gonnarded7cbe92013-09-17 15:30:51 +0200785 if( todo.dhm )
Manuel Pégourié-Gonnarde870c0a2012-11-08 11:31:48 +0100786 {
Manuel Pégourié-Gonnard4f3368e2015-07-19 15:01:28 +0200787 int dhm_sizes[] = { 2048, 3072 };
Brendan Shankse61514d2018-03-08 17:40:56 -0800788 static const unsigned char dhm_P_2048[] =
Hanno Beckerb9539212017-10-04 13:13:34 +0100789 MBEDTLS_DHM_RFC3526_MODP_2048_P_BIN;
Brendan Shankse61514d2018-03-08 17:40:56 -0800790 static const unsigned char dhm_P_3072[] =
Hanno Beckerb9539212017-10-04 13:13:34 +0100791 MBEDTLS_DHM_RFC3526_MODP_3072_P_BIN;
Brendan Shankse61514d2018-03-08 17:40:56 -0800792 static const unsigned char dhm_G_2048[] =
Hanno Beckerb9539212017-10-04 13:13:34 +0100793 MBEDTLS_DHM_RFC3526_MODP_2048_G_BIN;
Brendan Shankse61514d2018-03-08 17:40:56 -0800794 static const unsigned char dhm_G_3072[] =
Hanno Beckerb9539212017-10-04 13:13:34 +0100795 MBEDTLS_DHM_RFC3526_MODP_3072_G_BIN;
796
797 const unsigned char *dhm_P[] = { dhm_P_2048, dhm_P_3072 };
798 const size_t dhm_P_size[] = { sizeof( dhm_P_2048 ),
799 sizeof( dhm_P_3072 ) };
800
801 const unsigned char *dhm_G[] = { dhm_G_2048, dhm_G_3072 };
802 const size_t dhm_G_size[] = { sizeof( dhm_G_2048 ),
803 sizeof( dhm_G_3072 ) };
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200804
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200805 mbedtls_dhm_context dhm;
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200806 size_t olen;
Manuel Pégourié-Gonnard4f3368e2015-07-19 15:01:28 +0200807 for( i = 0; (size_t) i < sizeof( dhm_sizes ) / sizeof( dhm_sizes[0] ); i++ )
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200808 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200809 mbedtls_dhm_init( &dhm );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200810
Hanno Beckerb9539212017-10-04 13:13:34 +0100811 if( mbedtls_mpi_read_binary( &dhm.P, dhm_P[i],
812 dhm_P_size[i] ) != 0 ||
813 mbedtls_mpi_read_binary( &dhm.G, dhm_G[i],
814 dhm_G_size[i] ) != 0 )
Paul Bakkercbe3d0d2014-04-17 16:00:59 +0200815 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200816 mbedtls_exit( 1 );
Paul Bakkercbe3d0d2014-04-17 16:00:59 +0200817 }
818
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200819 dhm.len = mbedtls_mpi_size( &dhm.P );
820 mbedtls_dhm_make_public( &dhm, (int) dhm.len, buf, dhm.len, myrand, NULL );
821 if( mbedtls_mpi_copy( &dhm.GY, &dhm.GX ) != 0 )
822 mbedtls_exit( 1 );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200823
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200824 mbedtls_snprintf( title, sizeof( title ), "DHE-%d", dhm_sizes[i] );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200825 TIME_PUBLIC( title, "handshake",
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200826 ret |= mbedtls_dhm_make_public( &dhm, (int) dhm.len, buf, dhm.len,
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200827 myrand, NULL );
Manuel Pégourié-Gonnard33352052015-06-02 16:17:08 +0100828 ret |= mbedtls_dhm_calc_secret( &dhm, buf, sizeof( buf ), &olen, myrand, NULL ) );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200829
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200830 mbedtls_snprintf( title, sizeof( title ), "DH-%d", dhm_sizes[i] );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200831 TIME_PUBLIC( title, "handshake",
Manuel Pégourié-Gonnard33352052015-06-02 16:17:08 +0100832 ret |= mbedtls_dhm_calc_secret( &dhm, buf, sizeof( buf ), &olen, myrand, NULL ) );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200833
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200834 mbedtls_dhm_free( &dhm );
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +0200835 }
Manuel Pégourié-Gonnarde870c0a2012-11-08 11:31:48 +0100836 }
Manuel Pégourié-Gonnarde870c0a2012-11-08 11:31:48 +0100837#endif
838
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200839#if defined(MBEDTLS_ECDSA_C) && defined(MBEDTLS_SHA256_C)
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200840 if( todo.ecdsa )
841 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200842 mbedtls_ecdsa_context ecdsa;
843 const mbedtls_ecp_curve_info *curve_info;
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200844 size_t sig_len;
845
846 memset( buf, 0x2A, sizeof( buf ) );
847
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200848 for( curve_info = mbedtls_ecp_curve_list();
849 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200850 curve_info++ )
851 {
Christoph M. Wintersteiger8cd4fba2019-02-15 12:34:40 +0000852 if( ! mbedtls_ecdsa_can_do( curve_info->grp_id ) )
Christoph M. Wintersteiger6a1a9e42019-01-07 13:47:30 +0000853 continue;
854
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200855 mbedtls_ecdsa_init( &ecdsa );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200856
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200857 if( mbedtls_ecdsa_genkey( &ecdsa, curve_info->grp_id, myrand, NULL ) != 0 )
858 mbedtls_exit( 1 );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100859 ecp_clear_precomputed( &ecdsa.grp );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200860
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200861 mbedtls_snprintf( title, sizeof( title ), "ECDSA-%s",
Manuel Pégourié-Gonnard56cd3192013-09-17 17:23:07 +0200862 curve_info->name );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200863 TIME_PUBLIC( title, "sign",
Manuel Pégourié-Gonnard797f48a2015-06-18 15:45:05 +0200864 ret = mbedtls_ecdsa_write_signature( &ecdsa, MBEDTLS_MD_SHA256, buf, curve_info->bit_size,
Manuel Pégourié-Gonnard56cd3192013-09-17 17:23:07 +0200865 tmp, &sig_len, myrand, NULL ) );
866
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200867 mbedtls_ecdsa_free( &ecdsa );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100868 }
869
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200870 for( curve_info = mbedtls_ecp_curve_list();
871 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100872 curve_info++ )
873 {
Christoph M. Wintersteiger8cd4fba2019-02-15 12:34:40 +0000874 if( ! mbedtls_ecdsa_can_do( curve_info->grp_id ) )
Christoph M. Wintersteiger6a1a9e42019-01-07 13:47:30 +0000875 continue;
876
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200877 mbedtls_ecdsa_init( &ecdsa );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100878
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200879 if( mbedtls_ecdsa_genkey( &ecdsa, curve_info->grp_id, myrand, NULL ) != 0 ||
Manuel Pégourié-Gonnard797f48a2015-06-18 15:45:05 +0200880 mbedtls_ecdsa_write_signature( &ecdsa, MBEDTLS_MD_SHA256, buf, curve_info->bit_size,
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100881 tmp, &sig_len, myrand, NULL ) != 0 )
882 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200883 mbedtls_exit( 1 );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100884 }
885 ecp_clear_precomputed( &ecdsa.grp );
886
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200887 mbedtls_snprintf( title, sizeof( title ), "ECDSA-%s",
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100888 curve_info->name );
Manuel Pégourié-Gonnard56cd3192013-09-17 17:23:07 +0200889 TIME_PUBLIC( title, "verify",
Manuel Pégourié-Gonnard797f48a2015-06-18 15:45:05 +0200890 ret = mbedtls_ecdsa_read_signature( &ecdsa, buf, curve_info->bit_size,
Manuel Pégourié-Gonnard56cd3192013-09-17 17:23:07 +0200891 tmp, sig_len ) );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200892
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200893 mbedtls_ecdsa_free( &ecdsa );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200894 }
895 }
896#endif
897
Janos Follath52735ef2018-08-15 10:19:16 +0100898#if defined(MBEDTLS_ECDH_C) && defined(MBEDTLS_ECDH_LEGACY_CONTEXT)
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200899 if( todo.ecdh )
900 {
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200901 mbedtls_ecdh_context ecdh;
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200902 mbedtls_mpi z;
Nicholas Wilson08f3ef12015-11-10 13:10:01 +0000903 const mbedtls_ecp_curve_info montgomery_curve_list[] = {
904#if defined(MBEDTLS_ECP_DP_CURVE25519_ENABLED)
905 { MBEDTLS_ECP_DP_CURVE25519, 0, 0, "Curve25519" },
Manuel Pégourié-Gonnard85391f22015-02-05 09:54:48 +0000906#endif
Nicholas Wilson08f3ef12015-11-10 13:10:01 +0000907#if defined(MBEDTLS_ECP_DP_CURVE448_ENABLED)
908 { MBEDTLS_ECP_DP_CURVE448, 0, 0, "Curve448" },
909#endif
910 { MBEDTLS_ECP_DP_NONE, 0, 0, 0 }
911 };
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200912 const mbedtls_ecp_curve_info *curve_info;
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200913 size_t olen;
914
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200915 for( curve_info = mbedtls_ecp_curve_list();
916 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200917 curve_info++ )
918 {
Gilles Peskinec6c7c492019-02-11 18:41:27 +0100919 if( ! mbedtls_ecdh_can_do( curve_info->grp_id ) )
920 continue;
921
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200922 mbedtls_ecdh_init( &ecdh );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200923
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000924 CHECK_AND_CONTINUE( mbedtls_ecp_group_load( &ecdh.grp, curve_info->grp_id ) );
925 CHECK_AND_CONTINUE( mbedtls_ecdh_make_public( &ecdh, &olen, buf, sizeof( buf),
926 myrand, NULL ) );
927 CHECK_AND_CONTINUE( mbedtls_ecp_copy( &ecdh.Qp, &ecdh.Q ) );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100928 ecp_clear_precomputed( &ecdh.grp );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200929
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200930 mbedtls_snprintf( title, sizeof( title ), "ECDHE-%s",
Manuel Pégourié-Gonnard56cd3192013-09-17 17:23:07 +0200931 curve_info->name );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200932 TIME_PUBLIC( title, "handshake",
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000933 CHECK_AND_CONTINUE( mbedtls_ecdh_make_public( &ecdh, &olen, buf, sizeof( buf),
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200934 myrand, NULL ) );
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000935 CHECK_AND_CONTINUE( mbedtls_ecdh_calc_secret( &ecdh, &olen, buf, sizeof( buf ),
936 myrand, NULL ) ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200937 mbedtls_ecdh_free( &ecdh );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100938 }
939
Nicholas Wilson08f3ef12015-11-10 13:10:01 +0000940 /* Montgomery curves need to be handled separately */
941 for ( curve_info = montgomery_curve_list;
942 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
943 curve_info++ )
Manuel Pégourié-Gonnard85391f22015-02-05 09:54:48 +0000944 {
Nicholas Wilson08f3ef12015-11-10 13:10:01 +0000945 mbedtls_ecdh_init( &ecdh );
946 mbedtls_mpi_init( &z );
947
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000948 CHECK_AND_CONTINUE( mbedtls_ecp_group_load( &ecdh.grp, curve_info->grp_id ) );
949 CHECK_AND_CONTINUE( mbedtls_ecdh_gen_public( &ecdh.grp, &ecdh.d, &ecdh.Qp, myrand, NULL ) );
Nicholas Wilson08f3ef12015-11-10 13:10:01 +0000950
951 mbedtls_snprintf( title, sizeof(title), "ECDHE-%s",
952 curve_info->name );
953 TIME_PUBLIC( title, "handshake",
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000954 CHECK_AND_CONTINUE( mbedtls_ecdh_gen_public( &ecdh.grp, &ecdh.d, &ecdh.Q,
955 myrand, NULL ) );
956 CHECK_AND_CONTINUE( mbedtls_ecdh_compute_shared( &ecdh.grp, &z, &ecdh.Qp, &ecdh.d,
957 myrand, NULL ) ) );
Nicholas Wilson08f3ef12015-11-10 13:10:01 +0000958
959 mbedtls_ecdh_free( &ecdh );
960 mbedtls_mpi_free( &z );
Manuel Pégourié-Gonnard85391f22015-02-05 09:54:48 +0000961 }
962
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200963 for( curve_info = mbedtls_ecp_curve_list();
964 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100965 curve_info++ )
966 {
Gilles Peskinec6c7c492019-02-11 18:41:27 +0100967 if( ! mbedtls_ecdh_can_do( curve_info->grp_id ) )
968 continue;
969
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200970 mbedtls_ecdh_init( &ecdh );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100971
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000972 CHECK_AND_CONTINUE( mbedtls_ecp_group_load( &ecdh.grp, curve_info->grp_id ) );
973 CHECK_AND_CONTINUE( mbedtls_ecdh_make_public( &ecdh, &olen, buf, sizeof( buf),
974 myrand, NULL ) );
975 CHECK_AND_CONTINUE( mbedtls_ecp_copy( &ecdh.Qp, &ecdh.Q ) );
976 CHECK_AND_CONTINUE( mbedtls_ecdh_make_public( &ecdh, &olen, buf, sizeof( buf),
977 myrand, NULL ) );
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +0100978 ecp_clear_precomputed( &ecdh.grp );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200979
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200980 mbedtls_snprintf( title, sizeof( title ), "ECDH-%s",
Manuel Pégourié-Gonnard56cd3192013-09-17 17:23:07 +0200981 curve_info->name );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200982 TIME_PUBLIC( title, "handshake",
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000983 CHECK_AND_CONTINUE( mbedtls_ecdh_calc_secret( &ecdh, &olen, buf, sizeof( buf ),
984 myrand, NULL ) ) );
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +0200985 mbedtls_ecdh_free( &ecdh );
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +0200986 }
Manuel Pégourié-Gonnard85391f22015-02-05 09:54:48 +0000987
Nicholas Wilson08f3ef12015-11-10 13:10:01 +0000988 /* Montgomery curves need to be handled separately */
989 for ( curve_info = montgomery_curve_list;
990 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
991 curve_info++)
Manuel Pégourié-Gonnard85391f22015-02-05 09:54:48 +0000992 {
Nicholas Wilson08f3ef12015-11-10 13:10:01 +0000993 mbedtls_ecdh_init( &ecdh );
994 mbedtls_mpi_init( &z );
995
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +0000996 CHECK_AND_CONTINUE( mbedtls_ecp_group_load( &ecdh.grp, curve_info->grp_id ) );
997 CHECK_AND_CONTINUE( mbedtls_ecdh_gen_public( &ecdh.grp, &ecdh.d, &ecdh.Qp,
998 myrand, NULL ) );
999 CHECK_AND_CONTINUE( mbedtls_ecdh_gen_public( &ecdh.grp, &ecdh.d, &ecdh.Q, myrand, NULL ) );
Nicholas Wilson08f3ef12015-11-10 13:10:01 +00001000
1001 mbedtls_snprintf( title, sizeof(title), "ECDH-%s",
1002 curve_info->name );
1003 TIME_PUBLIC( title, "handshake",
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +00001004 CHECK_AND_CONTINUE( mbedtls_ecdh_compute_shared( &ecdh.grp, &z, &ecdh.Qp, &ecdh.d,
1005 myrand, NULL ) ) );
Nicholas Wilson08f3ef12015-11-10 13:10:01 +00001006
1007 mbedtls_ecdh_free( &ecdh );
1008 mbedtls_mpi_free( &z );
Manuel Pégourié-Gonnard85391f22015-02-05 09:54:48 +00001009 }
Manuel Pégourié-Gonnardcc34f952013-09-17 16:04:08 +02001010 }
1011#endif
Manuel Pégourié-Gonnard50da0482014-12-19 12:10:37 +01001012
Christoph M. Wintersteigere50b9702018-12-14 11:03:02 +00001013#if defined(MBEDTLS_ECDH_C)
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001014 if( todo.ecdh )
1015 {
1016 mbedtls_ecdh_context ecdh_srv, ecdh_cli;
1017 unsigned char buf_srv[BUFSIZE], buf_cli[BUFSIZE];
1018 const mbedtls_ecp_curve_info * curve_list = mbedtls_ecp_curve_list();
1019 const mbedtls_ecp_curve_info *curve_info;
1020 size_t olen;
1021
1022 for( curve_info = curve_list;
1023 curve_info->grp_id != MBEDTLS_ECP_DP_NONE;
1024 curve_info++ )
1025 {
Gilles Peskinec6c7c492019-02-11 18:41:27 +01001026 if( ! mbedtls_ecdh_can_do( curve_info->grp_id ) )
1027 continue;
1028
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001029 mbedtls_ecdh_init( &ecdh_srv );
Christoph M. Wintersteiger12f359f2019-02-26 12:26:04 +00001030 mbedtls_ecdh_init( &ecdh_cli );
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001031
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001032 mbedtls_snprintf( title, sizeof( title ), "ECDHE-%s", curve_info->name );
Christoph M. Wintersteiger0b931022018-12-06 17:15:12 +00001033 TIME_PUBLIC( title, "full handshake",
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001034 const unsigned char * p_srv = buf_srv;
Christoph M. Wintersteiger12f359f2019-02-26 12:26:04 +00001035
Christoph M. Wintersteiger5d536cd2019-02-20 17:26:42 +00001036 CHECK_AND_CONTINUE( mbedtls_ecdh_setup( &ecdh_srv, curve_info->grp_id ) );
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +00001037 CHECK_AND_CONTINUE( mbedtls_ecdh_make_params( &ecdh_srv, &olen, buf_srv, sizeof( buf_srv ), myrand, NULL ) );
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001038
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +00001039 CHECK_AND_CONTINUE( mbedtls_ecdh_read_params( &ecdh_cli, &p_srv, p_srv + olen ) );
1040 CHECK_AND_CONTINUE( mbedtls_ecdh_make_public( &ecdh_cli, &olen, buf_cli, sizeof( buf_cli ), myrand, NULL ) );
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001041
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +00001042 CHECK_AND_CONTINUE( mbedtls_ecdh_read_public( &ecdh_srv, buf_cli, olen ) );
1043 CHECK_AND_CONTINUE( mbedtls_ecdh_calc_secret( &ecdh_srv, &olen, buf_srv, sizeof( buf_srv ), myrand, NULL ) );
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001044
Christoph M. Wintersteiger21411d22019-02-06 18:06:15 +00001045 CHECK_AND_CONTINUE( mbedtls_ecdh_calc_secret( &ecdh_cli, &olen, buf_cli, sizeof( buf_cli ), myrand, NULL ) );
Christoph M. Wintersteiger5d536cd2019-02-20 17:26:42 +00001046 mbedtls_ecdh_free( &ecdh_cli );
Christoph M. Wintersteiger12f359f2019-02-26 12:26:04 +00001047
Christoph M. Wintersteiger5d536cd2019-02-20 17:26:42 +00001048 mbedtls_ecdh_free( &ecdh_srv );
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001049 );
1050
Christoph M. Wintersteiger0bc9c692018-10-25 12:47:18 +01001051 }
1052 }
1053#endif
1054
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001055 mbedtls_printf( "\n" );
Paul Bakker1d4da2e2009-10-25 12:36:53 +00001056
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001057#if defined(MBEDTLS_MEMORY_BUFFER_ALLOC_C)
1058 mbedtls_memory_buffer_alloc_free();
Manuel Pégourié-Gonnard128657d2014-12-18 16:35:52 +00001059#endif
1060
Paul Bakkercce9d772011-11-18 14:26:47 +00001061#if defined(_WIN32)
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001062 mbedtls_printf( " Press Enter to exit this program.\n" );
Paul Bakker5121ce52009-01-03 21:22:43 +00001063 fflush( stdout ); getchar();
1064#endif
1065
k-stachowiak776521a2019-05-23 09:46:47 +02001066 mbedtls_exit( 0 );
Paul Bakker5121ce52009-01-03 21:22:43 +00001067}
Manuel Pégourié-Gonnard8271f2f2013-09-17 14:57:55 +02001068
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02001069#endif /* MBEDTLS_TIMING_C */