# $Id: gdsa,v 1.2 2004/04/08 01:36:16 mdw Exp $
#
# Tests for abstract-group implementation of DSA

sign {
  # --- A simple and small test ---

  "prime {
    0xc9c7feaeaedb16505389c5582df1858d0fdb3eecfe61c230d612661bef8c1bc5,
    0x84d192cd06ae59691897fa409da6198d5269325d,
    0x5cd41fc97d0db5322bab7d659354db2ed9f88e39d2c6fae9f29acab5a522131e
  }"
  sha
  0x1234
  "An example message"
  0x649b1058e0fe7ee849d3cb00b8ec3053ad0793b8
  0x2718bf488b981992b164e664224dd00ca1ed4e1c
  0x5c085679fbfa9ee806781bdbd86a67dbf14df640;

  # --- The FIPS186-1 test vector ---

  "prime {
    0x8df2a494492276aa3d25759bb06869cbeac0d83afb8d0cf7cbb8324f0d7882e5d0762fc5b7210eafc2e9adac32ab7aac49693dfbf83724c2ec0736ee31c80291,
    0xc773218c737ec8ee993b4f2ded30f48edace915f,
    0x626d027839ea0a13413163a55b4cb500299d5522956cefcb3bff10f399ce2c2e71cb9de5fa24babf58e5b79521925c9cc42e9f6f464b088cc572af53e6d78802
  }"
  sha
  0x2070b3223dba372fde1c0ffc7b2e3b498b260614
  "abc"
  0x358dad571462710f50e254cf1a376b2bdeaadfbf
  0x8bac1ab66410435cb7181f95b16ab97c92b341c0
  0x41e2345f1f56df2458f426d155b4ba2db6dcd8c8;

  # --- A test I made up ---

  "prime {
    0xdde5808744e1cd37c88667e7033694b2513a7429f035f11c0bafc4dff2b96a672bd0a3ca16aba2ea526df00c8571106ba4a1d83eb62605fc9274ab70bef0a111cd070cca2d8b10edf042d6c44f863c36fabea8bb0d7340eb8c169da27a4b0ba2713c166152a0244235093391c5f71aee8c03dcaf2335a2e4689ccb27ba365ec7,
    0xfd367bd179b5425ef9bb1f51d7d9a916e58288f9,
    0x65985e4c2d6027a8afdeb9b44cc619e1c4d46bde873e0d4b45325412a2f8365e51245324f888704295fe8233a6666624d9a4701172dbfcab5c9643e1caab79eb2a0c85284d1b858688b8f16804326321f53a723502a6d6ae08dcbffccf2187a799f6281c2478ef0faed5c5c80adeabc5ee435cff8b9ae0b603e47fb08d73b014
  }"
  sha
  0x23a252f60bae4907a8ed5b6203e2b1da32848cd9
  "A message signed with a 1024-bit DSA key."
  0x12ccb231683a3d9c13dca6fe882349537eebfd03
  0x2a301061ac185440fbf595f8f7d894158b8d1897
  0x51aedaa73cb8d47e07281d14dda5ea8c0ddf7503;

  # --- Elliptic curve test vectors ---

  "ec { nist-b163 }" sha 0x1234
  "An example message"
  0x649b1058e0fe7ee849d3cb00b8ec3053ad0793b8
  0x12e2f4e865bf6e034712b4f2ba6f3c825452d6419
  0x30e0d918fde3a33781f984b877f8501356b6fbae9;

  "ec { secp160r1 }" sha
  0xaa374ffc3ce144e6b073307972cb6d57b2a4e982
  "abc"
  0x7b012db7681a3f28b9185c8b2ac5d528decd52da
  0xce2873e5be449563391feb47ddcba2dc16379191
  0x3480ec1371a091a464b31ce47df0cb8aa2d98b54;

  "ec { sect163k1 }" sha
  0x3a41434aa99c2ef40c8495b2ed9739cb2155a1e0d
  "abc"
  0xa40b301cc315c257d51d442234f5aff8189d2b6c
  0x994d2c41aa30e52952aea8462370471b2b0a34ac
  0x152f95ca15da1997a8c449e00cd2aa2accb988d7f;

  ## This one's from P1363:
  ##   http://grouper.ieee.org/groups/1363/P1363/testvector.txt
  "ec { ansi-c2tnb191v1 }" sha
  0x340562e1dda332f9d2aec168249b5696ee39d0ed4d03760f
  "abc"
  0x3eeace72b4919d991738d521879f787cb590aff8189d2b69
  0x038e5a11fb55e4c65471dcd4998452b1e02d8af7099bb930
  0x0c9a08c34468c244b4e5d6b21b3c68362807416020328b6e;

  "ec { nist-p256 }" sha256
  0x7fb838a8a0a95046b9d9d9fb4440f7bbc1a7bd3b4e853fc92d4e1588719986aa
  "An example message"
  0x8d68905434b020ccb849e17a03a5c441d2a104aaf523699c1cc7a93174d21d9c
  0xb30f954bfb624041e56f09ece884c17c74f866c24149bba0712303a9530142a6
  0x1076bd32f298aaffa8c6242d881d928b1c4e0f5ad7e8ce3c4d815fe348a9666a;

  # --- Test for over-long hash ---

  "ec { sect131r1 }" sha
  0x85bd9fd28a7e7f915891208fbb2b05c0
  "An example message"
  0xee98d38c001731403af6fbf77356f8ea
  0x1cba36e768c0247d537a744b7ea62e3b9
  0x216e5d02a0b1fb11d6d2fc4b383dcb168;
}

verify {
  # --- A simple and small test ---

  "prime {
    0xc9c7feaeaedb16505389c5582df1858d0fdb3eecfe61c230d612661bef8c1bc5,
    0x84d192cd06ae59691897fa409da6198d5269325d,
    0x5cd41fc97d0db5322bab7d659354db2ed9f88e39d2c6fae9f29acab5a522131e
  }"
  sha
  0x51812af9600c89ffe0f73902eb09015c03b4e0fbf6ccf073931c12f9aad1fb47
  "An example message"
  0x2718bf488b981992b164e664224dd00ca1ed4e1c
  0x5c085679fbfa9ee806781bdbd86a67dbf14df640
  0;

  "prime {
    0xc9c7feaeaedb16505389c5582df1858d0fdb3eecfe61c230d612661bef8c1bc5,
    0x84d192cd06ae59691897fa409da6198d5269325d,
    0x5cd41fc97d0db5322bab7d659354db2ed9f88e39d2c6fae9f29acab5a522131e
  }"
  sha
  0x51812af9600c89ffe0f73902eb09015c03b4e0fbf6ccf073931c12f9aad1fb47
  "An example messag"
  0x2718bf488b981992b164e664224dd00ca1ed4e1c
  0x5c085679fbfa9ee806781bdbd86a67dbf14df640
  -1;

  "prime {
    0xc9c7feaeaedb16505389c5582df1858d0fdb3eecfe61c230d612661bef8c1bc5,
    0x84d192cd06ae59691897fa409da6198d5269325d,
    0x5cd41fc97d0db5322bab7d659354db2ed9f88e39d2c6fae9f29acab5a522131e
  }"
  sha
  0x51812af9600c89ffe0f73902eb09015c03b4e0fbf6ccf073931c12f9aad1fb47
  "An example message"
  0x2718bf488b981992b164e664224dd00ca1ed4e1c
  0x5c085679fbfa9ee806781bdbd86a67dbf14df641
  -1;

  "prime {
    0xc9c7feaeaedb16505389c5582df1858d0fdb3eecfe61c230d612661bef8c1bc5,
    0x84d192cd06ae59691897fa409da6198d5269325d,
    0x5cd41fc97d0db5322bab7d659354db2ed9f88e39d2c6fae9f29acab5a522131e
  }"
  sha
  0x51812af9600c89ffe0f73902eb09015c03b4e0fbf6ccf073931c12f9aad1fb47
  "An example message"
  0x2718bf488b981992b164e664224dd00ca1ed4e1c
  0xe0d9e94702a8f8511f10161c7610816943b7289d
  -1;

  # --- The FIPS186-1 test vector ---

  "prime {
    0x8df2a494492276aa3d25759bb06869cbeac0d83afb8d0cf7cbb8324f0d7882e5d0762fc5b7210eafc2e9adac32ab7aac49693dfbf83724c2ec0736ee31c80291,
    0xc773218c737ec8ee993b4f2ded30f48edace915f,
    0x626d027839ea0a13413163a55b4cb500299d5522956cefcb3bff10f399ce2c2e71cb9de5fa24babf58e5b79521925c9cc42e9f6f464b088cc572af53e6d78802
  }"
  sha
  0x19131871d75b1612a819f29d78d1b0d7346f7aa77bb62a859bfd6c5675da9d212d3a36ef1672ef660b8c7c255cc0ec74858fba33f44c06699630a76b030ee333
  "abc"
  0x8bac1ab66410435cb7181f95b16ab97c92b341c0
  0x41e2345f1f56df2458f426d155b4ba2db6dcd8c8
  0;

  # --- A test I made up ---

  "prime {
    0xdde5808744e1cd37c88667e7033694b2513a7429f035f11c0bafc4dff2b96a672bd0a3ca16aba2ea526df00c8571106ba4a1d83eb62605fc9274ab70bef0a111cd070cca2d8b10edf042d6c44f863c36fabea8bb0d7340eb8c169da27a4b0ba2713c166152a0244235093391c5f71aee8c03dcaf2335a2e4689ccb27ba365ec7,
    0xfd367bd179b5425ef9bb1f51d7d9a916e58288f9,
    0x65985e4c2d6027a8afdeb9b44cc619e1c4d46bde873e0d4b45325412a2f8365e51245324f888704295fe8233a6666624d9a4701172dbfcab5c9643e1caab79eb2a0c85284d1b858688b8f16804326321f53a723502a6d6ae08dcbffccf2187a799f6281c2478ef0faed5c5c80adeabc5ee435cff8b9ae0b603e47fb08d73b014
  }"
  sha
  0x9720498d8ec1208585635faaf952c1204c37119acccc64ed7942867be24770e33db39ffcfa1194549ead8495a7918a20e15144e68125860ef4f8c1a3d771bad690938bdb2c8817e2b89a8fc615d067084a7a2f2f9280e15fb9ccebfe713584260d5ed30545b69745d7b22977bfd44d60d7c5e657aab1c79dc5cb33ff29ee9074
  "A message signed with a 1024-bit DSA key."
  0x2a301061ac185440fbf595f8f7d894158b8d1897
  0x51aedaa73cb8d47e07281d14dda5ea8c0ddf7503
  0;

  # --- Elliptic curve test vectors ---

  "ec { nist-b163 }" sha
  "0x1e7d847d0331a794852ded2b96c71d82e61f9bb4c,
    0x1a2370ab2e63f5aa8f348fbe83c0415a7d8ee207b"
  "An example message"
  0x12e2f4e865bf6e034712b4f2ba6f3c825452d6419
  0x30e0d918fde3a33781f984b877f8501356b6fbae9
  0;

  "ec { secp160r1 }" sha
  "0x51b4496fecc406ed0e75a24a3c03206251419dc0,
    0xc28dcb4b73a514b468d793894f381ccc1756aa6c"
  "abc"
  0xce2873e5be449563391feb47ddcba2dc16379191
  0x3480ec1371a091a464b31ce47df0cb8aa2d98b54
  0;

  "ec { sect163k1 }" sha
  "0x037d529fa37e42195f10111127ffb2bb38644806bc,
    0x0447026eee8b34157f3eb51be5185d2be0249ed776"
  "abc"
  0x994d2c41aa30e52952aea8462370471b2b0a34ac
  0x152f95ca15da1997a8c449e00cd2aa2accb988d7f
  0;

  ## This one's from P1363:
  ##   http://grouper.ieee.org/groups/1363/P1363/testvector.txt
  "ec { ansi-c2tnb191v1 }" sha
  "0x5de37e756bd55d72e3768cb396ffeb962614dea4ce28a2e7,
    0x55c0e0e02f5fb132caf416ef85b229bbb8e1352003125ba1"
  "abc"
  0x038e5a11fb55e4c65471dcd4998452b1e02d8af7099bb930
  0x0c9a08c34468c244b4e5d6b21b3c68362807416020328b6e
  0;

  "ec { nist-p256 }" sha256
  "0xcc2aecbc5c5f6d72cd7b937279d72a732abcf880ea47e012ebec77ddbca6ed40,
    0x90f99cd799abc0ea571d0e02bad80f8323050b1adbdbff50060b6e1e6ebd8611"
  "An example message"
  0xb30f954bfb624041e56f09ece884c17c74f866c24149bba0712303a9530142a6
  0x1076bd32f298aaffa8c6242d881d928b1c4e0f5ad7e8ce3c4d815fe348a9666a
  0;

  # --- Test for over-long hash ---

  "ec { sect131r1 }" sha
  "0x2218ba2b57a7821be97c0015b797d82fe, 0x666aed14fd7a2abf867c6fa222ab26fcc"
  "An example message"
  0x1cba36e768c0247d537a744b7ea62e3b9
  0x216e5d02a0b1fb11d6d2fc4b383dcb168
  0;

  "ec { sect131r1 }" sha
  "0x2218ba2b57a7821be97c0015b797d82fe, 0x666aed14fd7a2abf867c6fa222ab26fcc"
  "An example messag"
  0x1cba36e768c0247d537a744b7ea62e3b9
  0x216e5d02a0b1fb11d6d2fc4b383dcb168
  -1;

  "ec { nist-b163 }" sha512
  "0x385a32536d1cb46d10cf3034a3dd39eb25e4f5123,
    0x29ee1edfa37d0f306c4da17b8d883f01ce3be4d46"
  "qpwmoeqpofaosdaspdpqoweopdoagnqornifnasd"
  0x0231b6a807f6af1aee0598768b3fabb863d14a7f8d
  0x01c2f638e9dffe03b562e48ca4e1a380cf8c3055f1
  0;
}