Commit 6d0b5ee1 authored by Joseph Birr-Pixton's avatar Joseph Birr-Pixton Committed by Richard Levitte
Browse files

Improve testing of elliptic curve validation 



This involves:

- A directory of valid and invalid PEM-encoded curves.
  This is non-exhaustive and can be added to.
- A minor patch to 'openssl ecparam' to make it exit non-zero
  when curve validation fails.

- A test recipe is added in a separate commit.

Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
Reviewed-by: default avatarRichard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2544)
parent bf6af21e

test/recipes/15-test_ecparam_data/invalid/c2pnb208w1-reducible.pem

0 → 100644
+7 −0
Original line number Diff line number Diff line 
-----BEGIN EC PARAMETERS-----

MIGiAgEBMCUGByqGSM49AQIwGgICANAGCSqGSM49AQIDAzAJAgEBAgECAgE9MB8E

AQAEGshhntRaYuYhLhFgNJ4r+oREOfr8Kj/RY4+eBDUHSf375Kvhk9+VWezwesDO

eFVOJ4TrjB7RpXoPVbUaBueOmsOKA1/1INiwF4G+saa7CGF94wIZAQG6+VyXI8V7

bCHaLv8tXtWIvdVxfiEvnQIDAP5I

-----END EC PARAMETERS-----

test/recipes/15-test_ecparam_data/invalid/nistp256-nonprime.pem

0 → 100644
+8 −0
Original line number Diff line number Diff line 
-----BEGIN EC PARAMETERS-----

MIH3AgEBMCwGByqGSM49AQECIQD/////AAAAAQAAAAAAAAAAAAAAAP//////////

/////jBbBCD/////AAAAAQAAAAAAAAAAAAAAAP///////////////AQgWsY12Ko6

k+ez671VdpiGvGUdBrDMU7D2O848PifSYEsDFQDEnTYIhucEk2pmeOETnSa3gZ9+

kARBBGsX0fLhLEJH+Lzm5WOkQPJ3A32BLeszoPShOUXYmMKWT+NC4v4af5uO5+tK

fA+eFivOM1drMV7Oy7ZAaDe/UfUCIQD/////AAAAAP//////////vOb6racXnoTz

ucrC/GMlUQIBAQ==

-----END EC PARAMETERS-----

test/recipes/15-test_ecparam_data/invalid/nistp256-offcurve.pem

0 → 100644
+8 −0
Original line number Diff line number Diff line 
-----BEGIN EC PARAMETERS-----

MIH3AgEBMCwGByqGSM49AQECIQD/////AAAAAQAAAAAAAAAAAAAAAP//////////

/////zBbBCD/////AAAAAQAAAAAAAAAAAAAAAP//////////////+AQgWsY12Ko6

k+ez671VdpiGvGUdBrDMU7D2O848PifSYEsDFQDEnTYIhucEk2pmeOETnSa3gZ9+

kARBBGsX0fLhLEJH+Lzm5WOkQPJ3A32BLeszoPShOUXYmMKWT+NC4v4af5uO5+tK

fA+eFivOM1drMV7Oy7ZAaDe/UfUCIQD/////AAAAAP//////////vOb6racXnoTz

ucrC/GMlUQIBAQ==

-----END EC PARAMETERS-----

test/recipes/15-test_ecparam_data/invalid/nistp256-wrongorder.pem

0 → 100644
+8 −0
Original line number Diff line number Diff line 
-----BEGIN EC PARAMETERS-----

MIH3AgEBMCwGByqGSM49AQECIQD/////AAAAAQAAAAAAAAAAAAAAAP//////////

/////zBbBCD/////AAAAAQAAAAAAAAAAAAAAAP///////////////AQgWsY12Ko6

k+ez671VdpiGvGUdBrDMU7D2O848PifSYEsDFQDEnTYIhucEk2pmeOETnSa3gZ9+

kARBBGsX0fLhLEJH+Lzm5WOkQPJ3A32BLeszoPShOUXYmMKWT+NC4v4af5uO5+tK

fA+eFivOM1drMV7Oy7ZAaDe/UfUCIQD/////AAAAAP//////////vOb6racXnoTz

ucrC/SMlUQIBAQ==

-----END EC PARAMETERS-----

test/recipes/15-test_ecparam_data/valid/c2pnb163v1-explicit.pem

0 → 100644
+6 −0
Original line number Diff line number Diff line 
-----BEGIN EC PARAMETERS-----

MIG3AgEBMCUGByqGSM49AQIwGgICAKMGCSqGSM49AQIDAzAJAgEBAgECAgEIMEQE

FQclRrVDUjSkIuB4lnX0MsiUNd5SQgQUyVF9BtUkDTz/OMdLILbNTW+d1NkDFQDS

wPsVdghg3vHu9NaW5naHVhUXVAQrBAevaZiVRhA9eTKfzD10iA8zu+gDywHsIyEb

WWat6h0/h/fqWEiu8LfKnwIVBAAAAAAAAAAAAAHmD8iCHMdNrq/BAgEC

-----END EC PARAMETERS-----