saymrwulf/curve25519-dalek-source
1
0
Fork 0
mirror of https://github.com/saymrwulf/curve25519-dalek-source.git synced 2026-09-04 20:24:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Test decompressing an invalid montgomery point

Browse source
This commit is contained in:
Henry de Valence 2017-01-02 09:24:58 -05:00
parent 45fbcb45f6
commit 19d452c2dc
1 changed files with 15 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

15
src/curve.rs
View file

@ -1067,6 +1067,21 @@ mod test {
assert_eq!(bp_compressed_edwards, BASE_CMPRSSD);
}
/// If u = -1, then v^2 = u*(u^2+486662*u+1) = 486660.
/// But 486660 is nonsquare mod p, so this should fail.
///
/// XXX what does Signal do here?
#[test]
#[should_panic]
fn test_u_minus_one_monty() {
let mut m1 = FieldElement::zero();
m1[0] = -1;
let m1_bytes = m1.to_bytes();
let div_by_zero_u = CompressedMontgomeryU(m1_bytes);
let p = div_by_zero_u.decompress().unwrap();
println!("{:?}", p);
}
/// Test round-trip decompression for the basepoint.
#[test]
fn test_basepoint_decompression_compression() {