Coverage Report

Created: 2024-06-28 06:19

/src/cryptofuzz/modules/wolfcrypt/bn_ops.cpp
Line
Count
Source (jump to first uncovered line)
1
#include <cryptofuzz/util.h>
2
#include <cryptofuzz/repository.h>
3
#include <fuzzing/datasource/id.hpp>
4
#include <type_traits>
5
6
#include "bn_ops.h"
7
8
4.72k
#define GET_WHICH(max) uint8_t which = 0; try { which = ds.Get<uint8_t>(); which %= ((max)+1); } catch ( ... ) { }
9
165
#define GET_OPTIONAL_BN() (ds.Get<bool>() ? bn.GetDestPtr(3) : nullptr)
10
11
namespace cryptofuzz {
12
namespace module {
13
14
namespace wolfCrypt_detail {
15
    WC_RNG* GetRNG(void);
16
    WC_RNG* GetSystemRNG(void);
17
}
18
19
namespace wolfCrypt_bignum {
20
21
namespace wolfCrypt_bignum_detail {
22
23
    template <class ReturnType>
24
5.91k
    static ReturnType assertRet(const ReturnType ret) {
25
5.91k
        static_assert(std::is_same<ReturnType, int>());
26
27
5.91k
        if ( ret > 0 ) {
28
0
            CF_ASSERT(0, "Result of mp_* function is not negative or zero");
29
0
        }
30
31
5.91k
        return ret;
32
5.91k
    }
33
6.04k
#define MP_CHECK_EQ(expr, res) CF_CHECK_EQ(::cryptofuzz::module::wolfCrypt_bignum::wolfCrypt_bignum_detail::assertRet(expr), res);
34
35
584
    static int compare(Bignum& A, Bignum& B, Datasource& ds) {
36
584
        util::HintBignumOpt(A.ToDecString());
37
584
        util::HintBignumOpt(B.ToDecString());
38
39
584
        bool swap = false;
40
584
        try {
41
584
            swap = ds.Get<bool>();
42
584
        } catch ( ... ) { }
43
44
584
        if ( swap == false ) {
45
448
            return mp_cmp(A.GetPtr(), B.GetPtr());
46
448
        } else {
47
136
            const auto ret = mp_cmp(B.GetPtr(), A.GetPtr());
48
49
            /* Because the operands were swapped, invert the result */
50
136
            if ( ret == MP_LT ) {
51
67
                return MP_GT;
52
69
            } else if ( ret == MP_GT ) {
53
61
                return MP_LT;
54
61
            } else {
55
8
                return ret;
56
8
            }
57
136
        }
58
584
    }
59
60
#if !defined(WOLFSSL_SP_MATH) && (!defined(USE_FAST_MATH) || defined(WOLFSSL_SP_MATH_ALL))
61
22
    static std::optional<int> isPowerOf2(Bignum& A, Datasource& ds) {
62
22
        std::optional<int> ret = std::nullopt;
63
22
        wolfCrypt_bignum::Bignum tmp(ds);
64
65
22
        auto numBits = mp_count_bits(A.GetPtr());
66
22
        CF_CHECK_GTE(numBits, 1);
67
21
        numBits--;
68
21
        MP_CHECK_EQ(mp_copy(A.GetPtr(), tmp.GetPtr()), MP_OKAY);
69
#if defined(USE_FAST_MATH) || defined(USE_INTEGER_HEAP_MATH)
70
        CF_NORET(mp_rshb(tmp.GetPtr(), numBits));
71
#else
72
20
        MP_CHECK_EQ(mp_rshb(tmp.GetPtr(), numBits), MP_OKAY);
73
20
#endif
74
20
        MP_CHECK_EQ(mp_mul_2d(tmp.GetPtr(), numBits, tmp.GetPtr()), MP_OKAY);
75
76
19
        {
77
            /* Use the nearest exponent of 2 as a hint for the mutator */
78
19
            const auto s = tmp.ToDecString();
79
80
19
            util::HintBignumOpt(s);
81
19
        }
82
83
19
        CF_CHECK_EQ(compare(A, tmp, ds), MP_EQ);
84
85
5
        ret = numBits;
86
22
end:
87
22
        return ret;
88
5
    }
89
#endif
90
91
    bool montgomery_reduce(
92
            fuzzing::datasource::Datasource& ds,
93
            mp_int* res,
94
            mp_int* a,
95
88
            const mp_digit b) {
96
88
        bool ret = false;
97
98
88
        bool which = false;
99
88
        try {
100
88
            which = ds.Get<bool>();
101
88
        } catch ( ... ) { }
102
103
88
        if ( which == false ) {
104
80
            MP_CHECK_EQ(mp_montgomery_reduce(res, a, b), MP_OKAY);
105
63
        } else {
106
8
            MP_CHECK_EQ(mp_montgomery_reduce_ct(res, a, b), MP_OKAY);
107
7
        }
108
109
70
        ret = true;
110
88
end:
111
112
88
        return ret;
113
70
    }
114
}
115
116
93
bool Add::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
117
93
    bool ret = false;
118
119
93
    GET_WHICH(1);
120
93
    switch ( which ) {
121
53
        case    0:
122
53
            MP_CHECK_EQ(mp_add(bn[0].GetPtr(), bn[1].GetPtr(), bn.GetResPtr()), MP_OKAY);
123
52
            CF_CHECK_TRUE(bn.CopyResult(res));
124
52
            ret = true;
125
52
            break;
126
40
        case    1:
127
40
            {
128
40
                const auto op = bn[1].AsUnsigned<mp_digit>();
129
40
                CF_CHECK_NE(op, std::nullopt);
130
31
                MP_CHECK_EQ(mp_add_d(bn[0].GetPtr(), *op, bn.GetResPtr()), MP_OKAY);
131
30
                CF_CHECK_TRUE(bn.CopyResult(res));
132
30
                ret = true;
133
30
            }
134
0
            break;
135
93
    }
136
137
93
end:
138
93
    return ret;
139
93
}
140
141
253
bool Sub::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
142
253
    bool ret = false;
143
144
253
#if defined(WOLFSSL_SP_MATH) || defined(WOLFSSL_SP_MATH_ALL)
145
    /* SP math cannot represent negative numbers, so ensure the result
146
     * of the subtracton is always >= 0.
147
     *
148
     * Still run the subtraction operation to see if this can cause
149
     * memory errors, but don't return the result.
150
     */
151
253
    bool negative = false;
152
253
    if ( wolfCrypt_bignum_detail::compare(bn[0], bn[1], ds) == MP_LT) {
153
79
        negative = true;
154
79
    }
155
253
#endif
156
157
253
    GET_WHICH(1);
158
253
    switch ( which ) {
159
189
        case    0:
160
189
            MP_CHECK_EQ(mp_sub(bn[0].GetPtr(), bn[1].GetPtr(), bn.GetResPtr()), MP_OKAY);
161
182
            CF_CHECK_TRUE(bn.CopyResult(res));
162
182
            ret = true;
163
182
            break;
164
64
        case    1:
165
64
            {
166
64
                const auto op = bn[1].AsUnsigned<mp_digit>();
167
64
                CF_CHECK_NE(op, std::nullopt);
168
50
                MP_CHECK_EQ(mp_sub_d(bn[0].GetPtr(), *op, bn.GetResPtr()), MP_OKAY);
169
48
                CF_CHECK_TRUE(bn.CopyResult(res));
170
48
                ret = true;
171
48
            }
172
0
            break;
173
253
    }
174
175
253
end:
176
253
#if defined(WOLFSSL_SP_MATH) || defined(WOLFSSL_SP_MATH_ALL)
177
253
    if ( negative == true ) {
178
79
        return false;
179
79
    }
180
174
#endif
181
174
    return ret;
182
253
}
183
184
94
bool Mul::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
185
94
    bool ret = false;
186
187
94
    GET_WHICH(3);
188
94
    switch ( which ) {
189
50
        case    0:
190
50
            MP_CHECK_EQ(mp_mul(bn[0].GetPtr(), bn[1].GetPtr(), bn.GetResPtr()), MP_OKAY);
191
45
            CF_CHECK_TRUE(bn.CopyResult(res));
192
45
            ret = true;
193
45
            break;
194
20
        case    1:
195
20
            {
196
20
                const auto op = bn[1].AsUnsigned<mp_digit>();
197
20
                CF_CHECK_NE(op, std::nullopt);
198
16
                MP_CHECK_EQ(mp_mul_d(bn[0].GetPtr(), *op, bn.GetResPtr()), MP_OKAY);
199
15
                CF_CHECK_TRUE(bn.CopyResult(res));
200
15
                ret = true;
201
15
            }
202
0
            break;
203
0
#if !defined(USE_FAST_MATH) && !defined(WOLFSSL_SP_MATH)
204
9
        case    2:
205
9
            util::HintBignum("2");
206
9
            CF_CHECK_EQ(mp_cmp_d(bn[1].GetPtr(), 2), MP_EQ);
207
0
            MP_CHECK_EQ(mp_mul_2(bn[0].GetPtr(), bn.GetResPtr()), MP_OKAY);
208
0
            CF_CHECK_TRUE(bn.CopyResult(res));
209
0
            ret = true;
210
0
            break;
211
0
#endif
212
15
        case    3:
213
15
            {
214
15
                const auto numBits = mp_cnt_lsb(bn[1].GetPtr());
215
15
                CF_CHECK_GTE(numBits, DIGIT_BIT);
216
6
                CF_CHECK_EQ(numBits % DIGIT_BIT, 0);
217
218
1
                wolfCrypt_bignum::Bignum multiplier(ds);
219
1
                MP_CHECK_EQ(mp_2expt(multiplier.GetPtr(), numBits), MP_OKAY);
220
1
                CF_CHECK_EQ(wolfCrypt_bignum_detail::compare(bn[1], multiplier, ds), MP_EQ);
221
222
0
                MP_CHECK_EQ(mp_lshd(bn.GetDestPtr(0), numBits / DIGIT_BIT), MP_OKAY);
223
0
                MP_CHECK_EQ(mp_copy(bn[0].GetPtr(), res.GetPtr()), MP_OKAY);
224
0
                ret = true;
225
0
            }
226
0
            break;
227
94
    }
228
229
94
end:
230
94
    return ret;
231
94
}
232
233
301
bool Div::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
234
301
    (void)ds;
235
301
    bool ret = false;
236
237
301
    GET_WHICH(3);
238
301
    switch ( which ) {
239
165
        case    0:
240
165
            {
241
165
                auto r = bn.GetResPtr();
242
165
                auto optional_bn = GET_OPTIONAL_BN();
243
165
                if ( optional_bn == r ) {
244
                    /* Prevent that the two result pointers are equal */
245
8
                    optional_bn = nullptr;
246
8
                }
247
165
                MP_CHECK_EQ(mp_div(bn[0].GetPtr(), bn[1].GetPtr(), r, optional_bn), MP_OKAY);
248
155
                CF_CHECK_TRUE(bn.CopyResult(res));
249
155
            }
250
0
            break;
251
37
        case    1:
252
37
#if !defined(WOLFSSL_SP_MATH)
253
37
            util::HintBignum("2");
254
37
            CF_CHECK_EQ(mp_cmp_d(bn[1].GetPtr(), 2), MP_EQ);
255
5
            MP_CHECK_EQ(mp_div_2(bn[0].GetPtr(), bn.GetResPtr()), MP_OKAY);
256
4
            CF_CHECK_TRUE(bn.CopyResult(res));
257
4
            break;
258
0
#endif
259
0
#if !defined(USE_FAST_MATH)
260
20
        case    2:
261
20
            {
262
20
                mp_digit remainder;
263
20
                util::HintBignum("3");
264
20
                CF_CHECK_EQ(mp_cmp_d(bn[1].GetPtr(), 3), MP_EQ);
265
0
                MP_CHECK_EQ(mp_div_3(bn[0].GetPtr(), bn.GetResPtr(), ds.Get<bool>() ? &remainder : nullptr), MP_OKAY);
266
0
                CF_CHECK_TRUE(bn.CopyResult(res));
267
0
            }
268
0
            break;
269
0
#endif
270
0
#if defined(WOLFSSL_SP_MATH_ALL)
271
79
        case    3:
272
79
            {
273
79
                const auto divisor = bn[1].AsUnsigned<mp_digit>();
274
79
                mp_digit remainder;
275
79
                CF_CHECK_NE(divisor, std::nullopt);
276
66
                MP_CHECK_EQ(mp_div_d(bn[0].GetPtr(), *divisor, bn.GetResPtr(), ds.Get<bool>() ? &remainder : nullptr), MP_OKAY);
277
62
                CF_CHECK_TRUE(bn.CopyResult(res));
278
62
            }
279
0
#endif
280
62
        default:
281
62
            goto end;
282
301
    }
283
284
    /* wolfCrypt uses different rounding logic with negative divisior.
285
     * The result is still computed, but don't return it
286
     */
287
42
    CF_CHECK_EQ(mp_isneg(bn[0].GetPtr()), 0);
288
289
42
    ret = true;
290
291
175
end:
292
175
    return ret;
293
42
}
294
295
1.60k
bool ExpMod::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
296
1.60k
    bool ret = false;
297
298
1.60k
    try {
299
1.60k
        switch ( ds.Get<uint8_t>() % 5 ) {
300
99
            case    0:
301
99
            {
302
99
                auto data = ds.GetData(0, 1024 / 8, 1024 / 8);
303
                /* Odd */
304
99
                data[1024 / 8 - 1] |= 1;
305
99
                util::HintBignum(util::BinToDec(data));
306
99
            }
307
99
            break;
308
40
            case    1:
309
40
            {
310
40
                auto data = ds.GetData(0, 1536 / 8, 1536 / 8);
311
40
                data[1536 / 8 - 1] |= 1;
312
40
                util::HintBignum(util::BinToDec(data));
313
40
            }
314
40
            break;
315
70
            case    2:
316
70
            {
317
70
                auto data = ds.GetData(0, 2048 / 8, 2048 / 8);
318
70
                data[2048 / 8 - 1] |= 1;
319
70
                util::HintBignum(util::BinToDec(data));
320
70
            }
321
70
            break;
322
84
            case    3:
323
84
            {
324
84
                auto data = ds.GetData(0, 3072 / 8, 3072 / 8);
325
84
                data[3072 / 8 - 1] |= 1;
326
84
                util::HintBignum(util::BinToDec(data));
327
84
            }
328
84
            break;
329
36
            case    4:
330
36
            {
331
36
                auto data = ds.GetData(0, 4096 / 8, 4096 / 8);
332
36
                data[4096 / 8 - 1] |= 1;
333
36
                util::HintBignum(util::BinToDec(data));
334
36
            }
335
36
            break;
336
1.60k
        }
337
1.60k
    } catch ( fuzzing::datasource::Datasource::OutOfData ) {
338
1.41k
    }
339
340
1.60k
    bool return_result = false;
341
342
#if defined(WOLFSSL_SP_MATH)
343
    return_result = true;
344
#else
345
1.60k
    if (
346
1.60k
            !mp_iszero(bn[1].GetPtr()) &&
347
1.60k
            !mp_isneg(bn[0].GetPtr()) &&
348
1.60k
            !mp_isneg(bn[1].GetPtr()) &&
349
1.60k
            !mp_isneg(bn[2].GetPtr()) ) {
350
1.56k
            return_result = true;
351
1.56k
    }
352
1.60k
#endif
353
354
355
1.60k
    GET_WHICH(9);
356
1.60k
    switch ( which ) {
357
1.39k
        case    0:
358
1.39k
            MP_CHECK_EQ(mp_exptmod(bn[0].GetPtr(), bn[1].GetPtr(), bn[2].GetPtr(), bn.GetResPtr()), MP_OKAY);
359
1.00k
            CF_CHECK_TRUE(bn.CopyResult(res));
360
1.00k
            break;
361
0
#if defined(WOLFSSL_SP_MATH_ALL) || defined(USE_FAST_MATH)
362
106
        case    1:
363
106
            MP_CHECK_EQ(mp_exptmod_nct(bn[0].GetPtr(), bn[1].GetPtr(), bn[2].GetPtr(), bn.GetResPtr()), MP_OKAY);
364
47
            CF_CHECK_TRUE(bn.CopyResult(res));
365
47
            break;
366
0
#endif
367
31
        case    2:
368
31
            MP_CHECK_EQ(mp_exptmod_ex(bn[0].GetPtr(), bn[1].GetPtr(), bn[1].GetPtr()->used, bn[2].GetPtr(), bn.GetResPtr()), MP_OKAY);
369
5
            CF_CHECK_TRUE(bn.CopyResult(res));
370
5
            break;
371
#if defined(WOLFSSL_SP_MATH)
372
            /* ZD 15548 */
373
#if !defined(__aarch64__)
374
        case    3:
375
            MP_CHECK_EQ(sp_ModExp_1024(bn[0].GetPtr(), bn[1].GetPtr(), bn[2].GetPtr(), bn.GetResPtr()), MP_OKAY);
376
            CF_CHECK_TRUE(bn.CopyResult(res));
377
            break;
378
#endif
379
        case    4:
380
            MP_CHECK_EQ(sp_ModExp_1536(bn[0].GetPtr(), bn[1].GetPtr(), bn[2].GetPtr(), bn.GetResPtr()), MP_OKAY);
381
            CF_CHECK_TRUE(bn.CopyResult(res));
382
            break;
383
        case    5:
384
            MP_CHECK_EQ(sp_ModExp_2048(bn[0].GetPtr(), bn[1].GetPtr(), bn[2].GetPtr(), bn.GetResPtr()), MP_OKAY);
385
            CF_CHECK_TRUE(bn.CopyResult(res));
386
            break;
387
        case    6:
388
            MP_CHECK_EQ(sp_ModExp_3072(bn[0].GetPtr(), bn[1].GetPtr(), bn[2].GetPtr(), bn.GetResPtr()), MP_OKAY);
389
            CF_CHECK_TRUE(bn.CopyResult(res));
390
            break;
391
#if !defined(__i386__)
392
        case    7:
393
            MP_CHECK_EQ(sp_ModExp_4096(bn[0].GetPtr(), bn[1].GetPtr(), bn[2].GetPtr(), bn.GetResPtr()), MP_OKAY);
394
            CF_CHECK_TRUE(bn.CopyResult(res));
395
            break;
396
#endif
397
#endif
398
#if !defined(WOLFSSL_SP_MATH) && !defined(WOLFSSL_SP_MATH_ALL) && !defined(USE_FAST_MATH)
399
        case    8:
400
            MP_CHECK_EQ(mp_exptmod_fast(bn[0].GetPtr(), bn[1].GetPtr(), bn[2].GetPtr(), bn.GetResPtr(), 0), MP_OKAY);
401
            CF_CHECK_TRUE(bn.CopyResult(res));
402
            break;
403
#endif
404
#if !defined(WOLFSSL_SP_MATH) && !defined(WOLFSSL_SP_MATH_ALL) && !defined(USE_FAST_MATH)
405
        case    9:
406
            {
407
                util::HintBignum("2");
408
                CF_CHECK_EQ(mp_cmp_d(bn[0].GetPtr(), 2), MP_EQ);
409
                MP_CHECK_EQ(mp_exptmod_base_2(bn[1].GetPtr(), bn[2].GetPtr(), bn.GetResPtr()), MP_OKAY);
410
                CF_CHECK_TRUE(bn.CopyResult(res));
411
            }
412
            break;
413
#endif
414
74
        default:
415
74
            goto end;
416
1.60k
    }
417
418
1.05k
    CF_CHECK_TRUE(return_result);
419
420
1.01k
    ret = true;
421
422
1.60k
end:
423
1.60k
    return ret;
424
1.01k
}
425
426
109
bool Sqr::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
427
109
    (void)ds;
428
429
109
    bool ret = false;
430
431
109
    MP_CHECK_EQ(mp_sqr(bn[0].GetPtr(), bn.GetResPtr()), MP_OKAY);
432
77
    CF_CHECK_TRUE(bn.CopyResult(res));
433
434
77
    ret = true;
435
436
109
end:
437
109
    return ret;
438
77
}
439
440
824
bool GCD::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
441
824
    (void)ds;
442
824
    (void)res;
443
824
    (void)bn;
444
445
824
    bool ret = false;
446
447
    /* mp_gcd does not support negative numbers */
448
824
    CF_CHECK_NE(mp_cmp_d(bn[0].GetPtr(), 0), MP_LT);
449
824
    CF_CHECK_NE(mp_cmp_d(bn[1].GetPtr(), 0), MP_LT);
450
451
824
    MP_CHECK_EQ(mp_gcd(bn[0].GetPtr(), bn[1].GetPtr(), bn.GetResPtr()), MP_OKAY);
452
790
    CF_CHECK_TRUE(bn.CopyResult(res));
453
454
790
    ret = true;
455
456
824
end:
457
824
    return ret;
458
790
}
459
460
1.60k
bool InvMod::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
461
1.60k
    (void)ds;
462
463
1.60k
    bool ret = false;
464
465
1.60k
    GET_WHICH(1);
466
467
1.60k
    switch ( which ) {
468
1.35k
        case    0:
469
1.35k
            MP_CHECK_EQ(mp_invmod(bn[0].GetPtr(), bn[1].GetPtr(), bn.GetResPtr()), MP_OKAY);
470
546
            CF_CHECK_TRUE(bn.CopyResult(res));
471
546
            break;
472
0
#define HAVE_MP_INVMOD_MONT_CT 1
473
474
#if defined(USE_INTEGER_HEAP_MATH)
475
 /* Heapmath does not have mp_invmod_mont_ct */
476
 #undef HAVE_MP_INVMOD_MONT_CT
477
#elif defined(WOLFSSL_SP_MATH) && !defined(WOLFSSL_SP_INVMOD_MONT_CT)
478
 /* SP math has mp_invmod_mont_ct only if WOLFSSL_SP_INVMOD_MONT_CT is defined */
479
 #undef HAVE_MP_INVMOD_MONT_CT
480
#endif
481
482
0
#if defined(HAVE_MP_INVMOD_MONT_CT)
483
245
        case    1:
484
245
            {
485
245
                mp_digit mp;
486
245
                wolfCrypt_bignum::Bignum tmp1(ds);
487
245
                wolfCrypt_bignum::Bignum tmp2(ds);
488
245
                int is_prime;
489
490
                /* Modulus must be > 2 and prime */
491
245
                CF_CHECK_EQ(mp_cmp_d(bn[1].GetPtr(), 2), MP_GT);
492
244
                MP_CHECK_EQ(mp_prime_is_prime_ex(bn[1].GetPtr(), 30, &is_prime, wolfCrypt_detail::GetRNG()), MP_OKAY);
493
204
                CF_CHECK_EQ(is_prime, 1);
494
495
111
                MP_CHECK_EQ(mp_montgomery_setup(bn[1].GetPtr(), &mp), MP_OKAY);
496
111
                MP_CHECK_EQ(mp_montgomery_calc_normalization(tmp1.GetPtr(), bn[1].GetPtr()), MP_OKAY);
497
106
                MP_CHECK_EQ(mp_mulmod(bn[0].GetPtr(), tmp1.GetPtr(), bn[1].GetPtr(), tmp2.GetPtr()), MP_OKAY);
498
103
                MP_CHECK_EQ(mp_invmod_mont_ct(tmp2.GetPtr(), bn[1].GetPtr(), res.GetPtr(), mp), MP_OKAY);
499
71
                CF_CHECK_TRUE(wolfCrypt_bignum_detail::montgomery_reduce(ds, res.GetPtr(), bn[1].GetPtr(), mp));
500
55
            }
501
0
            break;
502
0
#undef HAVE_MP_INVMOD_MONT_CT
503
0
#endif
504
505
0
#if !defined(USE_FAST_MATH) && !defined(WOLFSSL_SP_MATH)
506
#if 0
507
        case    2:
508
            MP_CHECK_EQ(mp_invmod_slow(bn[0].GetPtr(), bn[1].GetPtr(), res.GetPtr()), MP_OKAY);
509
            break;
510
#endif
511
0
#endif
512
0
        default:
513
0
            goto end;
514
1.60k
    }
515
516
601
    ret = true;
517
518
1.60k
end:
519
1.60k
    return ret;
520
601
}
521
522
148
bool Cmp::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
523
148
    bool ret = false;
524
525
148
    int cmpRes = 0;
526
148
    GET_WHICH(1);
527
148
    switch ( which ) {
528
116
        case    0:
529
116
            cmpRes = wolfCrypt_bignum_detail::compare(bn[0], bn[1], ds);
530
116
            break;
531
32
        case    1:
532
32
            {
533
32
                const auto op = bn[1].AsUnsigned<mp_digit>();
534
32
                CF_CHECK_NE(op, std::nullopt);
535
23
                cmpRes = mp_cmp_d(bn[0].GetPtr(), *op);
536
23
            }
537
0
            break;
538
0
        default:
539
0
            goto end;
540
148
    }
541
542
139
    switch ( cmpRes ) {
543
74
        case    MP_GT:
544
74
            CF_CHECK_EQ( res.Set("1"), true);
545
74
            break;
546
54
        case    MP_LT:
547
54
            CF_CHECK_EQ( res.Set("-1"), true);
548
54
            break;
549
11
        case    MP_EQ:
550
11
            CF_CHECK_EQ( res.Set("0"), true);
551
11
            break;
552
0
        default:
553
0
            CF_ASSERT(0, "Compare result is not one of (MP_GT, MP_LT, MP_EQ)");
554
139
    }
555
556
139
    ret = true;
557
558
148
end:
559
148
    return ret;
560
139
}
561
562
0
bool Abs::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
563
0
    (void)ds;
564
565
0
    bool ret = false;
566
567
0
    MP_CHECK_EQ(mp_abs(bn[0].GetPtr(), bn.GetResPtr()), MP_OKAY);
568
0
    CF_CHECK_TRUE(bn.CopyResult(res));
569
570
0
    ret = true;
571
572
0
end:
573
0
    return ret;
574
0
}
575
576
0
bool Neg::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
577
0
    (void)ds;
578
0
    bool ret = false;
579
580
0
#if defined(WOLFSSL_SP_MATH) || defined(WOLFSSL_SP_MATH_ALL)
581
0
    (void)res;
582
0
    (void)bn;
583
#else
584
    CF_CHECK_EQ(res.Set("0"), true);
585
    MP_CHECK_EQ(mp_sub(res.GetPtr(), bn[0].GetPtr(), res.GetPtr()), MP_OKAY);
586
587
    ret = true;
588
589
end:
590
#endif
591
592
0
    return ret;
593
0
}
594
595
134
bool RShift::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
596
134
    bool ret = false;
597
598
134
    std::optional<uint64_t> _numBits;
599
134
    int numBits;
600
601
134
    GET_WHICH(2);
602
134
    CF_CHECK_NE(_numBits = bn[1].AsUint64(), std::nullopt);
603
127
    CF_CHECK_LTE(_numBits, 2147483647);
604
605
111
    numBits = *_numBits;
606
607
111
    switch ( which ) {
608
71
        case    0:
609
71
            MP_CHECK_EQ(mp_copy(bn[0].GetPtr(), res.GetPtr()), MP_OKAY);
610
#if defined(USE_FAST_MATH) || defined(USE_INTEGER_HEAP_MATH)
611
            CF_NORET(mp_rshb(res.GetPtr(), numBits));
612
#else
613
70
            MP_CHECK_EQ(mp_rshb(res.GetPtr(), numBits), MP_OKAY);
614
70
#endif
615
70
            ret = true;
616
70
            break;
617
0
#if !defined(WOLFSSL_SP_MATH)
618
25
        case    1:
619
25
            MP_CHECK_EQ(mp_div_2d(bn[0].GetPtr(), numBits, res.GetPtr(), GET_OPTIONAL_BN()), MP_OKAY);
620
21
            ret = true;
621
21
            break;
622
0
#endif
623
0
#if !defined(WOLFSSL_SP_MATH)
624
15
        case    2:
625
15
            {
626
                /* Check if number of bits to shift is a multiple of a full digit */
627
15
                CF_CHECK_EQ(numBits % (sizeof(mp_digit) * 8), 0);
628
629
12
                MP_CHECK_EQ(mp_copy(bn[0].GetPtr(), res.GetPtr()), MP_OKAY);
630
631
11
                const auto numDigits = numBits / (sizeof(mp_digit) * 8);
632
11
                CF_NORET(mp_rshd(res.GetPtr(), numDigits));
633
634
11
                ret = true;
635
11
            }
636
0
            break;
637
111
#endif
638
111
    }
639
640
133
end:
641
642
133
    return ret;
643
111
}
644
645
54
bool LShift1::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
646
54
    (void)ds;
647
648
54
    bool ret = false;
649
650
#if defined(WOLFSSL_SP_MATH)
651
    (void)res;
652
    (void)bn;
653
#else
654
54
    MP_CHECK_EQ(mp_mul_2d(bn[0].GetPtr(), 1, bn.GetResPtr()), MP_OKAY);
655
48
    CF_CHECK_TRUE(bn.CopyResult(res));
656
657
48
    ret = true;
658
659
54
end:
660
54
#endif
661
662
54
    return ret;
663
48
}
664
665
0
bool IsNeg::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
666
0
    (void)ds;
667
668
0
    bool ret = false;
669
670
0
#if defined(WOLFSSL_SP_MATH) || defined(WOLFSSL_SP_MATH_ALL)
671
0
    (void)res;
672
0
    (void)bn;
673
#else
674
    CF_CHECK_EQ( res.Set( std::to_string(mp_isneg(bn[0].GetPtr()) ? 1 : 0) ), true);
675
676
    ret = true;
677
678
end:
679
#endif
680
0
    return ret;
681
0
}
682
683
0
bool IsEq::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
684
0
    bool ret = false;
685
686
0
    const bool isEq = wolfCrypt_bignum_detail::compare(bn[0], bn[1], ds) == MP_EQ;
687
0
    CF_CHECK_EQ( res.Set( std::to_string(isEq ? 1 : 0) ), true);
688
689
0
    ret = true;
690
691
0
end:
692
0
    return ret;
693
0
}
694
695
8
bool IsZero::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
696
8
    (void)ds;
697
698
8
    bool ret = false;
699
700
8
    CF_CHECK_EQ( res.Set( std::to_string(mp_iszero(bn[0].GetPtr()) ? 1 : 0) ), true);
701
702
8
    ret = true;
703
704
8
end:
705
8
    return ret;
706
8
}
707
708
51
bool IsOne::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
709
51
    (void)ds;
710
711
51
    bool ret = false;
712
713
51
    CF_CHECK_EQ( res.Set( std::to_string(mp_isone(bn[0].GetPtr()) ? 1 : 0) ), true);
714
715
51
    ret = true;
716
717
51
end:
718
51
    return ret;
719
51
}
720
721
65
bool MulMod::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
722
65
    (void)ds;
723
724
65
    bool ret = false;
725
726
65
    MP_CHECK_EQ(mp_mulmod(bn[0].GetPtr(), bn[1].GetPtr(), bn[2].GetPtr(), bn.GetResPtr()), MP_OKAY);
727
46
    CF_CHECK_TRUE(bn.CopyResult(res));
728
729
46
    ret = true;
730
731
65
end:
732
65
    return ret;
733
46
}
734
735
135
bool AddMod::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
736
135
    bool ret = false;
737
738
#if defined(WOLFSSL_SP_MATH)
739
    (void)ds;
740
    (void)res;
741
    (void)bn;
742
#else
743
135
    GET_WHICH(1);
744
135
    switch ( which ) {
745
95
        case    0:
746
95
            MP_CHECK_EQ(mp_addmod(bn[0].GetPtr(), bn[1].GetPtr(), bn[2].GetPtr(), bn.GetResPtr()), MP_OKAY);
747
83
            CF_CHECK_TRUE(bn.CopyResult(res));
748
83
            break;
749
40
        case    1:
750
            /* mp_addmod_ct does not support negative numbers */
751
40
            CF_CHECK_NE(mp_cmp_d(bn[0].GetPtr(), 0), MP_LT);
752
40
            CF_CHECK_NE(mp_cmp_d(bn[1].GetPtr(), 0), MP_LT);
753
40
            CF_CHECK_NE(mp_cmp_d(bn[2].GetPtr(), 0), MP_LT);
754
755
40
            CF_CHECK_EQ(wolfCrypt_bignum_detail::compare(bn[0], bn[1], ds), MP_LT)
756
26
            CF_CHECK_EQ(wolfCrypt_bignum_detail::compare(bn[1], bn[2], ds), MP_LT)
757
26
            MP_CHECK_EQ(mp_addmod_ct(bn[0].GetPtr(), bn[1].GetPtr(), bn[2].GetPtr(), bn.GetResPtr()), MP_OKAY);
758
20
            CF_CHECK_TRUE(bn.CopyResult(res));
759
8
            break;
760
0
        default:
761
0
            goto end;
762
135
    }
763
764
91
    ret = true;
765
766
135
end:
767
135
#endif
768
135
    return ret;
769
91
}
770
771
200
bool SubMod::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
772
200
    bool ret = false;
773
774
#if defined(WOLFSSL_SP_MATH)
775
    (void)ds;
776
    (void)res;
777
    (void)bn;
778
#else
779
200
    GET_WHICH(1);
780
200
    switch ( which ) {
781
142
        case    0:
782
142
            MP_CHECK_EQ(mp_submod(bn[0].GetPtr(), bn[1].GetPtr(), bn[2].GetPtr(), bn.GetResPtr()), MP_OKAY);
783
125
            CF_CHECK_TRUE(bn.CopyResult(res));
784
125
            break;
785
58
        case    1:
786
            /* mp_submod_ct does not support negative numbers */
787
58
            CF_CHECK_NE(mp_cmp_d(bn[0].GetPtr(), 0), MP_LT);
788
58
            CF_CHECK_NE(mp_cmp_d(bn[1].GetPtr(), 0), MP_LT);
789
58
            CF_CHECK_NE(mp_cmp_d(bn[2].GetPtr(), 0), MP_LT);
790
791
            /* mp_submod_ct documentation states that:
792
             *
793
             * A < modulo
794
             * B < modulo
795
             */
796
58
            CF_CHECK_EQ(wolfCrypt_bignum_detail::compare(bn[0], bn[2], ds), MP_LT)
797
46
            CF_CHECK_EQ(wolfCrypt_bignum_detail::compare(bn[1], bn[2], ds), MP_LT)
798
799
66
            MP_CHECK_EQ(mp_submod_ct(bn[0].GetPtr(), bn[1].GetPtr(), bn[2].GetPtr(), bn.GetResPtr()), MP_OKAY);
800
66
            CF_CHECK_TRUE(bn.CopyResult(res));
801
31
            break;
802
0
        default:
803
0
            goto end;
804
200
    }
805
806
156
    ret = true;
807
808
200
end:
809
200
#endif
810
200
    return ret;
811
156
}
812
813
0
bool SqrMod::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
814
0
    (void)ds;
815
816
0
    bool ret = false;
817
818
0
    MP_CHECK_EQ(mp_sqrmod(bn[0].GetPtr(), bn[1].GetPtr(), bn.GetResPtr()), MP_OKAY);
819
0
    CF_CHECK_TRUE(bn.CopyResult(res));
820
821
0
    ret = true;
822
823
0
end:
824
0
    return ret;
825
0
}
826
827
81
bool Bit::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
828
81
    (void)ds;
829
81
    bool ret = false;
830
831
#if defined(WOLFSSL_SP_MATH)
832
    (void)res;
833
    (void)bn;
834
#else
835
81
    std::optional<uint64_t> _bitPos;
836
81
#if defined(WOLFSSL_SP_MATH_ALL)
837
81
    unsigned int bitPos;
838
#else
839
    mp_digit bitPos;
840
#endif
841
81
    int isBitSet;
842
843
81
    CF_CHECK_NE(_bitPos = bn[1].AsUint64(), std::nullopt);
844
845
65
    bitPos = *_bitPos;
846
    /* Ensure no truncation has occurred */
847
65
    CF_CHECK_EQ(bitPos, *_bitPos);
848
849
26
    CF_CHECK_GTE(isBitSet = mp_is_bit_set(bn[0].GetPtr(), bitPos), 0);
850
26
    CF_CHECK_EQ( res.Set(isBitSet ? "1" : "0"), true);
851
852
26
    ret = true;
853
854
81
end:
855
81
#endif
856
81
    return ret;
857
26
}
858
859
0
bool CmpAbs::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
860
0
    (void)ds;
861
0
    (void)res;
862
0
    (void)bn;
863
864
    /* TODO */
865
866
0
    bool ret = false;
867
868
0
    return ret;
869
0
}
870
871
0
bool SetBit::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
872
0
    (void)ds;
873
0
    bool ret = false;
874
875
0
    std::optional<uint64_t> _bitPos;
876
0
    mp_digit bitPos;
877
878
0
    CF_CHECK_NE(_bitPos = bn[1].AsUint64(), std::nullopt);
879
880
0
    bitPos = *_bitPos;
881
    /* Ensure no truncation has occurred */
882
0
    CF_CHECK_EQ(bitPos, *_bitPos);
883
884
0
    MP_CHECK_EQ(mp_copy(bn[0].GetPtr(), res.GetPtr()), MP_OKAY);
885
0
    MP_CHECK_EQ(mp_set_bit(res.GetPtr(), bitPos), MP_OKAY);
886
887
0
    ret = true;
888
889
0
end:
890
0
    return ret;
891
0
}
892
893
0
bool LCM::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
894
0
#if \
895
0
    defined(WOLFSSL_SP_MATH) || \
896
0
    (defined(WOLFSSL_SP_MATH_ALL) && \
897
0
        !(!defined(NO_RSA) && defined(WOLFSSL_KEY_GEN) && !defined(WC_RSA_BLINDING)) \
898
0
    )
899
0
    (void)ds;
900
0
    (void)res;
901
0
    (void)bn;
902
0
    return false;
903
#else
904
    (void)ds;
905
906
    bool ret = false;
907
908
    /* mp_lcm does not support negative numbers */
909
    CF_CHECK_NE(mp_cmp_d(bn[0].GetPtr(), 0), MP_LT);
910
    CF_CHECK_NE(mp_cmp_d(bn[1].GetPtr(), 0), MP_LT);
911
912
    MP_CHECK_EQ(mp_lcm(bn[0].GetPtr(), bn[1].GetPtr(), bn.GetResPtr()), MP_OKAY);
913
    CF_CHECK_TRUE(bn.CopyResult(res));
914
915
    ret = true;
916
917
end:
918
    return ret;
919
#endif
920
0
}
921
922
152
bool Mod::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
923
152
    bool ret = false;
924
925
152
    GET_WHICH(4);
926
152
    switch ( which ) {
927
68
        case    0:
928
68
            MP_CHECK_EQ(mp_mod(bn[0].GetPtr(), bn[1].GetPtr(), bn.GetResPtr()), MP_OKAY);
929
66
            CF_CHECK_TRUE(bn.CopyResult(res));
930
66
            break;
931
0
#if !defined(WOLFSSL_SP_MATH)
932
12
        case    1:
933
12
            {
934
                /* Input must not be negative */
935
12
                CF_CHECK_NE(mp_cmp_d(bn[0].GetPtr(), 0), MP_LT);
936
937
12
                const auto op = bn[1].AsUnsigned<mp_digit>();
938
12
                CF_CHECK_NE(op, std::nullopt);
939
11
                mp_digit modResult;
940
11
                MP_CHECK_EQ(mp_mod_d(bn[0].GetPtr(), *op, &modResult), MP_OKAY);
941
10
                CF_CHECK_EQ(res.Set(std::to_string(modResult)), true);
942
10
            }
943
0
            break;
944
26
        case    2:
945
26
            {
946
                /* mp_div_2_mod_ct does not support negative numbers */
947
26
                CF_CHECK_NE(mp_cmp_d(bn[0].GetPtr(), 0), MP_LT);
948
26
                CF_CHECK_NE(mp_cmp_d(bn[0].GetPtr(), 0), MP_LT);
949
950
                /* bn[0] *= 2 */
951
26
                MP_CHECK_EQ(mp_mul_d(bn[0].GetPtr(), 2, bn.GetDestPtr(0)), MP_OKAY);
952
953
25
                CF_CHECK_EQ(wolfCrypt_bignum_detail::compare(bn[0], bn[1], ds), MP_LT)
954
25
                MP_CHECK_EQ(mp_div_2_mod_ct(bn[0].GetPtr(), bn[1].GetPtr(), bn.GetResPtr()), MP_OKAY);
955
23
                CF_CHECK_TRUE(bn.CopyResult(res));
956
11
            }
957
0
            break;
958
24
        case    3:
959
24
            {
960
24
                mp_digit mp;
961
24
                wolfCrypt_bignum::Bignum tmp(ds);
962
963
24
                MP_CHECK_EQ(mp_montgomery_setup(bn[1].GetPtr(), &mp), MP_OKAY);
964
22
                MP_CHECK_EQ(mp_montgomery_calc_normalization(tmp.GetPtr(), bn[1].GetPtr()), MP_OKAY);
965
20
                MP_CHECK_EQ(mp_mulmod(bn[0].GetPtr(), tmp.GetPtr(), bn[1].GetPtr(), res.GetPtr()), MP_OKAY);
966
17
                CF_CHECK_TRUE(wolfCrypt_bignum_detail::montgomery_reduce(ds, res.GetPtr(), bn[1].GetPtr(), mp));
967
15
            }
968
0
            break;
969
0
#endif
970
0
#if !defined(WOLFSSL_SP_MATH) && (!defined(USE_FAST_MATH) || defined(WOLFSSL_SP_MATH_ALL))
971
22
        case    4:
972
22
            {
973
22
                std::optional<int> exponent = std::nullopt;
974
975
                /* Negative modulo not supported */
976
22
                CF_CHECK_NE(mp_cmp_d(bn[1].GetPtr(), 0), MP_LT);
977
978
22
                CF_CHECK_NE(exponent = wolfCrypt_bignum_detail::isPowerOf2(bn[1], ds), std::nullopt);
979
980
5
                MP_CHECK_EQ(mp_mod_2d(bn[0].GetPtr(), *exponent, bn.GetResPtr()), MP_OKAY);
981
5
                CF_CHECK_TRUE(bn.CopyResult(res));
982
5
            }
983
0
            break;
984
0
#endif
985
0
        default:
986
0
            goto end;
987
152
    }
988
989
107
    ret = true;
990
991
152
end:
992
152
    return ret;
993
107
}
994
995
0
bool IsEven::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
996
0
    (void)ds;
997
998
0
    bool ret = false;
999
1000
0
    CF_CHECK_EQ(mp_iszero(bn[0].GetPtr()), false);
1001
1002
0
    CF_CHECK_EQ( res.Set( std::to_string(mp_iseven(bn[0].GetPtr()) ? 1 : 0) ), true);
1003
1004
0
    ret = true;
1005
1006
0
end:
1007
1008
0
    return ret;
1009
0
}
1010
1011
9
bool IsOdd::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
1012
9
    (void)ds;
1013
1014
9
    bool ret = false;
1015
1016
9
    CF_CHECK_EQ( res.Set( std::to_string(mp_isodd(bn[0].GetPtr()) ? 1 : 0) ), true);
1017
1018
9
    ret = true;
1019
1020
9
end:
1021
1022
9
    return ret;
1023
9
}
1024
1025
0
bool MSB::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
1026
0
    (void)ds;
1027
1028
0
    bool ret = false;
1029
1030
0
    const int bit = mp_leading_bit(bn[0].GetPtr());
1031
1032
0
    CF_ASSERT(bit == 0 || bit == 1, "mp_leading_bit result is not one of (0, 1)");
1033
1034
0
    CF_CHECK_EQ( res.Set( std::to_string(bit) ), true);
1035
1036
0
    ret = true;
1037
1038
0
end:
1039
1040
0
    return ret;
1041
0
}
1042
1043
60
bool NumBits::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
1044
60
    (void)ds;
1045
1046
60
    bool ret = false;
1047
1048
60
    const auto numBits = mp_count_bits(bn[0].GetPtr());
1049
1050
60
    CF_ASSERT(numBits >= 0, "mp_count_bits result is negative");
1051
1052
60
    CF_CHECK_EQ( res.Set( std::to_string(numBits) ), true);
1053
1054
60
    ret = true;
1055
1056
60
end:
1057
60
    return ret;
1058
60
}
1059
1060
0
bool Set::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
1061
0
    bool ret = false;
1062
1063
0
    GET_WHICH(3);
1064
0
    switch ( which ) {
1065
0
        case    0:
1066
0
            MP_CHECK_EQ(mp_copy(bn[0].GetPtr(), bn.GetResPtr()), MP_OKAY);
1067
0
            CF_CHECK_TRUE(bn.CopyResult(res));
1068
0
            ret = true;
1069
0
            break;
1070
0
        case    1:
1071
0
            {
1072
                /* See ZD 16084 */
1073
0
                CF_CHECK_LTE(mp_count_bits(bn[0].GetPtr()), DIGIT_BIT);
1074
1075
0
                const auto op = bn[0].AsUnsigned<mp_digit>();
1076
0
                CF_CHECK_NE(op, std::nullopt);
1077
0
                MP_CHECK_EQ(mp_set(bn.GetResPtr(), *op), MP_OKAY);
1078
0
                CF_CHECK_TRUE(bn.CopyResult(res));
1079
0
                ret = true;
1080
0
            }
1081
0
            break;
1082
0
        case    2:
1083
0
            {
1084
                /* mp_exch alters the value of bn[0], so invalidate the cache. */
1085
0
                bn.InvalidateCache();
1086
1087
                /* mp_exch always returns a value */
1088
0
                MP_CHECK_EQ(mp_exch(bn.GetResPtr(), bn[0].GetPtr()), MP_OKAY);
1089
0
                CF_CHECK_TRUE(bn.CopyResult(res));
1090
1091
0
                ret = true;
1092
0
            }
1093
0
            break;
1094
0
        case    3:
1095
0
            {
1096
0
                const auto op = bn[0].AsUnsigned<unsigned long>();
1097
0
                CF_CHECK_NE(op, std::nullopt);
1098
0
                MP_CHECK_EQ(mp_set_int(bn.GetResPtr(), *op), MP_OKAY);
1099
0
                CF_CHECK_TRUE(bn.CopyResult(res));
1100
0
                ret = true;
1101
0
            }
1102
0
            break;
1103
0
    }
1104
1105
0
end:
1106
0
    return ret;
1107
0
}
1108
1109
0
bool Exp2::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
1110
0
    (void)ds;
1111
1112
0
    bool ret = false;
1113
1114
0
    const auto exponent = bn[0].AsUnsigned<unsigned int>();
1115
0
    CF_CHECK_NE(exponent, std::nullopt);
1116
#if defined(USE_FAST_MATH) && !defined(WOLFSSL_SP_MATH) && !defined(WOLFSSL_SP_MATH_ALL)
1117
    CF_CHECK_LT(*exponent / DIGIT_BIT, FP_SIZE);
1118
#endif
1119
0
    MP_CHECK_EQ(mp_2expt(bn.GetResPtr(), *exponent), MP_OKAY);
1120
0
    CF_CHECK_TRUE(bn.CopyResult(res));
1121
1122
0
    ret = true;
1123
1124
0
end:
1125
1126
0
    return ret;
1127
0
}
1128
1129
0
bool NumLSZeroBits::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
1130
0
    (void)ds;
1131
1132
0
    bool ret = false;
1133
1134
#if (defined(USE_FAST_MATH) && !defined(HAVE_COMP_KEY))
1135
    (void)res;
1136
    (void)bn;
1137
#else
1138
0
    const auto numBits = mp_cnt_lsb(bn[0].GetPtr());
1139
1140
0
    CF_ASSERT(numBits >= 0, "mp_cnt_lsb result is negative");
1141
1142
0
    CF_CHECK_EQ( res.Set( std::to_string(numBits) ), true);
1143
1144
0
    ret = true;
1145
1146
0
end:
1147
0
#endif
1148
1149
0
    return ret;
1150
0
}
1151
1152
0
bool CondSet::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
1153
0
    (void)ds;
1154
1155
0
    bool ret = false;
1156
1157
0
    const int doCopy = mp_iszero(bn[1].GetPtr()) ? 0 : 1;
1158
0
    CF_CHECK_EQ(res.Set("0"), true);
1159
0
    MP_CHECK_EQ(mp_cond_copy(bn[0].GetPtr(), doCopy, res.GetPtr()), MP_OKAY);
1160
1161
0
    ret = true;
1162
1163
0
end:
1164
0
    return ret;
1165
0
}
1166
1167
0
bool Rand::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
1168
0
    (void)ds;
1169
0
    (void)bn;
1170
1171
0
    bool ret = false;
1172
1173
0
    GET_WHICH(1);
1174
0
    switch ( which ) {
1175
0
        case    0:
1176
0
            {
1177
0
                const auto len = ds.Get<uint16_t>() % 512;
1178
0
                MP_CHECK_EQ(mp_rand(res.GetPtr(), len, wolfCrypt_detail::GetRNG()), MP_OKAY);
1179
0
                ret = true;
1180
0
            }
1181
0
            break;
1182
0
        case    1:
1183
0
            {
1184
0
                const auto len = ds.Get<uint16_t>() % 100;
1185
0
                MP_CHECK_EQ(mp_rand_prime(res.GetPtr(), len, wolfCrypt_detail::GetRNG(), nullptr), MP_OKAY);
1186
0
                ret = true;
1187
0
            }
1188
0
            break;
1189
0
    }
1190
1191
0
end:
1192
0
    return ret;
1193
0
}
1194
1195
8
bool Zero::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
1196
8
    (void)bn;
1197
1198
8
    GET_WHICH(1);
1199
8
    switch ( which ) {
1200
3
        case    0:
1201
3
            CF_NORET(mp_zero(res.GetPtr()));
1202
3
            break;
1203
5
        case    1:
1204
5
            CF_NORET(mp_forcezero(res.GetPtr()));
1205
5
            break;
1206
8
    }
1207
1208
8
    return true;
1209
8
}
1210
1211
0
bool Prime::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
1212
0
    (void)bn;
1213
1214
0
    bool ret = false;
1215
1216
0
    uint16_t len = 2;
1217
0
    try {
1218
        /* Cap at 100; much larger will timeout */
1219
0
        len = ds.Get<uint16_t>() % 100;
1220
0
    } catch ( ... ) { }
1221
1222
0
    MP_CHECK_EQ(mp_rand_prime(res.GetPtr(), len, wolfCrypt_detail::GetRNG(), nullptr), MP_OKAY);
1223
1224
0
    ret = true;
1225
1226
0
end:
1227
0
    return ret;
1228
0
}
1229
1230
0
bool IsPrime::Run(Datasource& ds, Bignum& res, BignumCluster& bn) const {
1231
0
    (void)ds;
1232
1233
0
    bool ret = false;
1234
1235
0
    int r;
1236
1237
    /* Prevent timeouts */
1238
0
    CF_CHECK_LTE(mp_count_bits(bn[0].GetPtr()), 1000);
1239
1240
    /* Must be system RNG; otherwise the fuzzer will PRNG seeds that will
1241
     * incorrectly regard a prime as composite.
1242
     */
1243
0
    CF_CHECK_EQ(mp_prime_is_prime_ex(bn[0].GetPtr(), 256, &r, wolfCrypt_detail::GetSystemRNG()), MP_OKAY);
1244
0
    CF_CHECK_EQ( res.Set( std::to_string(r) ), true);
1245
1246
0
    ret = true;
1247
1248
0
end:
1249
0
    return ret;
1250
0
}
1251
1252
1253
} /* namespace wolfCrypt_bignum */
1254
} /* namespace module */
1255
} /* namespace cryptofuzz */