aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--docs/TESTS.md2
-rw-r--r--src/cz/crcs/ectester/data/degenerate/brainpool.xml51
2 files changed, 49 insertions, 4 deletions
diff --git a/docs/TESTS.md b/docs/TESTS.md
index bd70206..5f4dd9c 100644
--- a/docs/TESTS.md
+++ b/docs/TESTS.md
@@ -109,7 +109,7 @@ Tests using known named curves froms several categories(SECG/NIST) against pre-g
`Y: x = 0`. ECDH should fail, a success here might mean the card does not check that the point lies on the correct curve
and uses a curve model vulnerable to such degenerate points.
-See [Degenerate Curve Attachs - Extending Invalid Curve Attacks to Edwards Curves and Other Models](https://eprint.iacr.org/2015/1233.pdf) for more information.
+See [Degenerate Curve Attacks - Extending Invalid Curve Attacks to Edwards Curves and Other Models](https://eprint.iacr.org/2015/1233.pdf) for more information.
For example:
```bash
diff --git a/src/cz/crcs/ectester/data/degenerate/brainpool.xml b/src/cz/crcs/ectester/data/degenerate/brainpool.xml
index 9dc860a..3dd2f54 100644
--- a/src/cz/crcs/ectester/data/degenerate/brainpool.xml
+++ b/src/cz/crcs/ectester/data/degenerate/brainpool.xml
@@ -310,8 +310,53 @@
<desc>generator of Fp^*</desc>
</pubkey>
-<!-- Points for brainpoolP512r1 and brainpoolP512t1 are missing
- due to the large size of the base field and it being hard
- to factor (p - 1). -->
+<pubkey>
+ <id>brainpoolP512r1/0</id>
+ <inline>0x00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000,0xaadd9db8dbe9c48b3fd4e6ae33c9fc07cb308db3b3c9d20ed6639cca703308717d4d9b009bc66842aecda12ae6a380e62881ff2f2d82c68528aa6056583a48f2</inline>
+ <curve>brainpool/brainpoolP512r1</curve>
+ <desc>degenerate order = 2</desc>
+</pubkey>
+<pubkey>
+ <id>brainpoolP512r1/1</id>
+ <inline>0x00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000,0x177c47f1f2bd3306efe5a93ed046a559abbb32424d5887e6c3f49c23c907c5a3b68aee1d7ae4247ba3491698c3c7c4dd9e105383f58984e45b4104cce042417b</inline>
+ <curve>brainpool/brainpoolP512r1</curve>
+ <desc>degenerate order = 7</desc>
+</pubkey>
+<pubkey>
+ <id>brainpoolP512r1/2</id>
+ <inline>0x00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000,0x9b9e9905d13f35cc5b6578523e0380be922803fa98bcde94c920aca572a8fb4a432520b51b0f9eb3d854aa14aa5ef9fcc4ac08bf06eaec4b98ffdf90244f67d7</inline>
+ <curve>brainpool/brainpoolP512r1</curve>
+ <desc>degenerate order = 61</desc>
+</pubkey>
+<pubkey>
+ <id>brainpoolP512r1/3</id>
+ <inline>0x00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000,0x77b03a217034dd2adcbcbfbdfe879b4ce1f0ecdd6025d1c3da80bef3e905a34bfdcb88362d553219b025cb8123698296c437411ecba452db94d829729def073e</inline>
+ <curve>brainpool/brainpoolP512r1</curve>
+ <desc>degenerate order = 329430728783919403</desc>
+</pubkey>
+<pubkey>
+ <id>brainpoolP512r1/4</id>
+ <inline>0x00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000,0x890e0b1d03bd78442f0144b752cce879cec7a069497a83a6dac714a37221fa282ef147385b796653c2b98c87c003a7285ee98f69ed3df135c6a59adf8f17be5a</inline>
+ <curve>brainpool/brainpoolP512r1</curve>
+ <desc>degenerate order = 18335424362847464339</desc>
+</pubkey>
+<pubkey>
+ <id>brainpoolP512r1/5</id>
+ <inline>0x00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000,0x25c0f1328c75876e338e66fb112cd47e8936c41b57dbf2c97de9c6bf300fb035bbcb20fb44046e6172c00939075da436b9c7d84941a9b98219fced6d9e17da64</inline>
+ <curve>brainpool/brainpoolP512r1</curve>
+ <desc>degenerate order = 120179186709126902983513742993</desc>
+</pubkey>
+<pubkey>
+ <id>brainpoolP512r1/6</id>
+ <inline>0x00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000,0x1d93c72f487fc4ad34cb0c522dda3a7067b1b5c11175fc90ebbd086f639cad2d30d345e5596a93136e48aad4226cdb1a320e4b0aa68da2ca62cd5fe51c601f8e</inline>
+ <curve>brainpool/brainpoolP512r1</curve>
+ <desc>degenerate order = 14435454750020088047685444818571282397270727096595623715684950293729763357371155607979</desc>
+</pubkey>
+<pubkey>
+ <id>brainpoolP512r1/gen</id>
+ <inline>0x00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000,0x00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002</inline>
+ <curve>brainpool/brainpoolP512r1</curve>
+ <desc>generator of Fp^*</desc>
+</pubkey>