1 /*

     2  * Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

     3  * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER.

     4  *

     5  * This code is free software; you can redistribute it and/or modify it

     6  * under the terms of the GNU General Public License version 2 only, as

     7  * published by the Free Software Foundation.

     8  *

     9  * This code is distributed in the hope that it will be useful, but WITHOUT

    10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or

    11  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License

    12  * version 2 for more details (a copy is included in the LICENSE file that

    13  * accompanied this code).

    14  *

    15  * You should have received a copy of the GNU General Public License version

    16  * 2 along with this work; if not, write to the Free Software Foundation,

    17  * Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

    18  *

    19  * Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA

    20  * or visit www.oracle.com if you need additional information or have any

    21  * questions.

    22  */

    23 

    24 /**

    25  * @test

    26  * @bug 6405536

    27  * @summary basic test of ECDSA signatures for P-256 and P-384 from the

    28  * example data in "Suite B Implementer's Guide to FIPS 186-3".

    29  * @library ..

    30  * @library ../../../../java/security/testlibrary

    31  * @compile -XDignore.symbol.file TestECDH2.java

    32  * @run main TestECDH2

    33  */

    34 

    35 import java.io.*;

    36 import java.util.*;

    37 import java.math.BigInteger;

    38 

    39 import java.security.*;

    40 import java.security.spec.*;

    41 import java.security.interfaces.*;

    42 import javax.crypto.*;

    43 

    44 import sun.security.ec.NamedCurve;

    45 

    46 public class TestECDH2 extends PKCS11Test {

    47 

    48     // values of the keys we use for the tests

    49 

    50     // keypair using NIST P-256

    51     private final static String privD256 = "70a12c2db16845ed56ff68cfc21a472b3f04d7d6851bf6349f2d7d5b3452b38a";

    52     private final static String pubX256 = "8101ece47464a6ead70cf69a6e2bd3d88691a3262d22cba4f7635eaff26680a8";

    53     private final static String pubY256 = "d8a12ba61d599235f67d9cb4d58f1783d3ca43e78f0a5abaa624079936c0c3a9";

    54 

    55     // keypair using NIST P-384

    56     private final static String privD384 = "c838b85253ef8dc7394fa5808a5183981c7deef5a69ba8f4f2117ffea39cfcd90e95f6cbc854abacab701d50c1f3cf24";

    57     private final static String pubX384 = "1fbac8eebd0cbf35640b39efe0808dd774debff20a2a329e91713baf7d7f3c3e81546d883730bee7e48678f857b02ca0";

    58     private final static String pubY384 = "eb213103bd68ce343365a8a4c3d4555fa385f5330203bdd76ffad1f3affb95751c132007e1b240353cb0a4cf1693bdf9";

    59 

    60     private KeyFactory kf = null;

    61     private KeyPairGenerator kpg = null;

    62 

    63     private static void testKeyAgreement(KeyPair kpA, KeyPair kpB, Provider p)

    64         throws Exception {

    65         KeyAgreement ka1 = KeyAgreement.getInstance("ECDH", p);

    66         ka1.init(kpA.getPrivate());

    67         ka1.doPhase(kpB.getPublic(), true);

    68         byte[] s1 = ka1.generateSecret();

    69 

    70         KeyAgreement ka2 = KeyAgreement.getInstance("ECDH", p);

    71         ka2.init(kpB.getPrivate());

    72         ka2.doPhase(kpA.getPublic(), true);

    73         byte[] s2 = ka2.generateSecret();

    74         if (Arrays.equals(s1, s2) == false) {

    75             System.out.println("expected: " + toString(s1));

    76             System.out.println("actual:   " + toString(s2));

    77             throw new Exception("Generated secrets do not match");

    78         }

    79     }

    80 

    81     private KeyPair genECKeyPair(String curvName, String privD, String pubX,

    82                                  String pubY) throws Exception {

    83         ECParameterSpec ecParams = NamedCurve.getECParameterSpec(curvName);

    84         ECPrivateKeySpec privKeySpec =

    85             new ECPrivateKeySpec(new BigInteger(privD, 16), ecParams);

    86         ECPublicKeySpec pubKeySpec =

    87             new ECPublicKeySpec(new ECPoint(new BigInteger(pubX, 16),

    88                                             new BigInteger(pubY, 16)),

    89                                 ecParams);

    90         PrivateKey privKey = kf.generatePrivate(privKeySpec);

    91         PublicKey pubKey = kf.generatePublic(pubKeySpec);

    92         return new KeyPair(pubKey, privKey);

    93     }

    94     private KeyPair genECKeyPair(String curvName) throws Exception {

    95         ECGenParameterSpec genParams = new ECGenParameterSpec(curvName);

    96         kpg.initialize(genParams, null);

    97         return kpg.generateKeyPair();

    98     }

    99     public static void main(String[] args) throws Exception {

   100         main(new TestECDH2());

   101     }

   102 

   103     public void main(Provider provider) throws Exception {

   104         if (provider.getService("KeyAgreement", "ECDH") == null) {

   105             System.out.println("ECDH not supported, skipping");

   106             return;

   107         }

   108 

   109         kf = KeyFactory.getInstance("EC", provider);

   110         kpg = KeyPairGenerator.getInstance("EC", provider);

   111 

   112         System.out.println("Testing against NIST P-256");

   113 

   114         long start = System.currentTimeMillis();

   115         KeyPair kp256A = genECKeyPair("secp256r1", privD256, pubX256, pubY256);

   116         KeyPair kp256B = genECKeyPair("secp256r1");

   117         testKeyAgreement(kp256A, kp256B, provider);

   118 

   119         System.out.println("Testing against NIST P-384");

   120         KeyPair kp384A = genECKeyPair("secp384r1", privD384, pubX384, pubY384);

   121         KeyPair kp384B = genECKeyPair("secp384r1");

   122         testKeyAgreement(kp384A, kp384B, provider);

   123 

   124         long stop = System.currentTimeMillis();

   125         System.out.println("All tests passed (" + (stop - start) + " ms).");

   126     }

   127 }