Barretenberg
The ZK-SNARK library at the core of Aztec
Loading...
Searching...
No Matches
ecdsa_tests_data.hpp
Go to the documentation of this file.
1#include <array>
2#include <cstdint>
3#include <stdexcept>
4#include <string>
5#include <vector>
6
7#include "barretenberg/ecc/curves/secp256k1/secp256k1.hpp"
8#include "barretenberg/ecc/curves/secp256r1/secp256r1.hpp"
9
10namespace bb::crypto {
11
12using namespace bb;
13using namespace bb::curve;
14
15template <class Curve> struct WycherproofTest {
16 using Fr = Curve::ScalarField;
17 using Fq = Curve::BaseField;
18
19 // Public Key
20 Fq x;
21 Fq y;
22
23 // Data
24 std::vector<uint8_t> message;
25 Fr r;
26 Fr s;
27 bool is_valid_signature;
28 std::string comment;
29};
30
31using WycherproofSecp256k1 = WycherproofTest<bb::curve::SECP256K1>;
32using WycherproofSecp256r1 = WycherproofTest<bb::curve::SECP256R1>;
33
38const std::vector<WycherproofSecp256k1> secp256k1_tests{
39 // Arithmetic error tests
40 WycherproofSecp256k1{
41 .x = WycherproofSecp256k1::Fq("0x02ef4d6d6cfd5a94f1d7784226e3e2a6c0a436c55839619f38fb4472b5f9ee77"),
42 .y = WycherproofSecp256k1::Fq("0x7eb4acd4eebda5cd72875ffd2a2f26229c2dc6b46500919a432c86739f3ae866"),
43 .message = { 0x31, 0x32, 0x33, 0x34, 0x30, 0x30 },
44 .r = WycherproofSecp256k1::Fr("0x0000000000000000000000000000000000000000000000000000000000000101"),
45 .s = WycherproofSecp256k1::Fr("0xc58b162c58b162c58b162c58b162c58a1b242973853e16db75c8a1a71da4d39d"),
46 .is_valid_signature = false,
47 .comment = "Arithmetic error, s is larger than (n+1)/2",
48 },
49 WycherproofSecp256k1{
50 .x = WycherproofSecp256k1::Fq("0xd6ef20be66c893f741a9bf90d9b74675d1c2a31296397acb3ef174fd0b300c65"),
51 .y = WycherproofSecp256k1::Fq("0x4a0c95478ca00399162d7f0f2dc89efdc2b28a30fbabe285857295a4b0c4e265"),
52 .message = { 0x31, 0x32, 0x33, 0x34, 0x30, 0x30 },
53 .r = WycherproofSecp256k1::Fr("0x00000000000000000000000000000000000000062522bbd3ecbe7c39e93e7c26"),
54 .s = WycherproofSecp256k1::Fr("0x783266e90f43dafe5cd9b3b0be86de22f9de83677d0f50713a468ec72fcf5d57"),
55 .is_valid_signature = true,
56 .comment = "Arithmetic error, r component is small",
57 },
58 // Point duplication tests
59 WycherproofSecp256k1{
60 .x = WycherproofSecp256k1::Fq("0x79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798"),
61 .y = WycherproofSecp256k1::Fq("0x483ada7726a3c4655da4fbfc0e1108a8fd17b448a68554199c47d08ffb10d4b8"),
62 .message = { 0x31, 0x32, 0x33, 0x34, 0x30, 0x30 },
63 .r = WycherproofSecp256k1::Fr("0xbb5a52f42f9c9261ed4361f59422a1e30036e7c32b270c8807a419feca605023"),
64 .s = WycherproofSecp256k1::Fr("0x2492492492492492492492492492492463cfd66a190a6008891e0d81d49a0952"),
65 .is_valid_signature = false,
66 .comment = "Point duplication, public key shares x-coordinates with generator",
67 },
68 // Edge case public key tests
69 WycherproofSecp256k1{
70 .x = WycherproofSecp256k1::Fq("0x6e823555452914099182c6b2c1d6f0b5d28d50ccd005af2ce1bba541aa40caff"),
71 .y = WycherproofSecp256k1::Fq("0x00000001060492d5a5673e0f25d8d50fb7e58c49d86d46d4216955e0aa3d40e1"),
72 .message = { 0x4d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65 },
73 .r = WycherproofSecp256k1::Fr("0x6d6a4f556ccce154e7fb9f19e76c3deca13d59cc2aeb4ecad968aab2ded45965"),
74 .s = WycherproofSecp256k1::Fr("0x53b9fa74803ede0fc4441bf683d56c564d3e274e09ccf47390badd1471c05fb7"),
75 .is_valid_signature = true,
76 .comment = "Edge case public key, y coordinate is small",
77 },
78 // Modular inverse edge case
79 WycherproofSecp256k1{
80 .x = WycherproofSecp256k1::Fq("0x9171fec3ca20806bc084f12f0760911b60990bd80e5b2a71ca03a048b20f837e"),
81 .y = WycherproofSecp256k1::Fq("0x634fd17863761b2958d2be4e149f8d3d7abbdc18be03f451ab6c17fa0a1f8330"),
82 .message = { 0x31, 0x32, 0x33, 0x34, 0x30, 0x30 },
83 .r = WycherproofSecp256k1::Fr("0x55555555555555555555555555555554e8e4f44ce51835693ff0ca2ef01215c1"),
84 .s = WycherproofSecp256k1::Fr("0x2736d76e412246e097148e2bf62915614eb7c428913a58eb5e9cd4674a9423de"),
85 .is_valid_signature = true,
86 .comment = "Modular inverse edge case",
87 },
88};
89
94const std::vector<WycherproofSecp256r1> secp256r1_tests{
95 // Arithmetic error test
96 WycherproofSecp256r1{
97 .x = WycherproofSecp256r1::Fq("0x8d3c2c2c3b765ba8289e6ac3812572a25bf75df62d87ab7330c3bdbad9ebfa5c"),
98 .y = WycherproofSecp256r1::Fq("0x4c6845442d66935b238578d43aec54f7caa1621d1af241d4632e0b780c423f5d"),
99 .message = { 0x31, 0x32, 0x33, 0x34, 0x30, 0x30 },
100 .r = WycherproofSecp256r1::Fr("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),
101 .s = WycherproofSecp256r1::Fr("0x16a4502e2781e11ac82cbc9d1edd8c981584d13e18411e2f6e0478c34416e3bb"),
102 .is_valid_signature = true,
103 .comment = "Arithmetic error",
104 },
105 // Point duplication test
106 WycherproofSecp256r1{
107 .x = WycherproofSecp256r1::Fq("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),
108 .y = WycherproofSecp256r1::Fq("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5"),
109 .message = { 0x31, 0x32, 0x33, 0x34, 0x30, 0x30 },
110 .r = WycherproofSecp256r1::Fr("0xbb5a52f42f9c9261ed4361f59422a1e30036e7c32b270c8807a419feca605023"),
111 .s = WycherproofSecp256r1::Fr("0x249249246db6db6ddb6db6db6db6db6dad4591868595a8ee6bf5f864ff7be0c2"),
112 .is_valid_signature = false,
113 .comment = "Point duplication, public key shares x-coordinates with generator",
114 },
115 // Edge case public key test
116 WycherproofSecp256r1{
117 .x = WycherproofSecp256r1::Fq("0x4f337ccfd67726a805e4f1600ae2849df3807eca117380239fbd816900000000"),
118 .y = WycherproofSecp256r1::Fq("0xed9dea124cc8c396416411e988c30f427eb504af43a3146cd5df7ea60666d685"),
119 .message = { 0x4d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65 },
120 .r = WycherproofSecp256r1::Fr("0x0fe774355c04d060f76d79fd7a772e421463489221bf0a33add0be9b1979110b"),
121 .s = WycherproofSecp256r1::Fr("0x500dcba1c69a8fbd43fa4f57f743ce124ca8b91a1f325f3fac6181175df55737"),
122 .is_valid_signature = true,
123 .comment = "Edge case public key, x-coordinate has many trailing zeros",
124 },
125 // Edge case public key test
126 WycherproofSecp256r1{
127 .x = WycherproofSecp256r1::Fq("0x2927b10512bae3eddcfe467828128bad2903269919f7086069c8c4df6c732838"),
128 .y = WycherproofSecp256r1::Fq("0xc7787964eaac00e5921fb1498a60f4606766b3d9685001558d1a974e7341513e"),
129 .message = { 0x4d, 0x65, 0x73, 0x73, 0x61, 0x67, 0x65 },
130 .r = WycherproofSecp256r1::Fr("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551"),
131 .s = WycherproofSecp256r1::Fr("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632550"),
132 .is_valid_signature = false,
133 .comment = "Signature with special case values r=n and s=n - 1",
134 },
135};
136} // namespace bb::crypto
bb::crypto::secp256r1_tests
const std::vector< WycherproofSecp256r1 > secp256r1_tests
Test for Secp256r1 ECDSA signatures taken from the Wycherproof project.
Definition ecdsa_tests_data.hpp:94
bb::crypto::secp256k1_tests
const std::vector< WycherproofSecp256k1 > secp256k1_tests
Test for Secp256k1 ECDSA signatures taken from the Wycherproof project.
Definition ecdsa_tests_data.hpp:38
bb
Entry point for Barretenberg command-line interface.
Definition api.hpp:5
std::get
constexpr decltype(auto) get(::tuplet::tuple< T... > &&t) noexcept
Definition tuple.hpp:13
bb::crypto::WycherproofTest::message
std::vector< uint8_t > message
Definition ecdsa_tests_data.hpp:24