c8ab1900ed
- audit/CMakeLists.txt: increase test timeouts for ASan/QEMU environments wycheproof_ecdsa/ecdh 300->1200s, batch_randomness 120->600s, ct_verif_formal 300->1200s, fiat_crypto_linkage 300->900s - cpu/fuzz: add fuzz_field.cpp, fuzz_scalar.cpp, fuzz_point.cpp targets for ClusterFuzzLite (previously missing, caused build failure) - audit-report.yml: accept AUDIT-READY verdict (unified_audit_runner outputs this when total_fail==0, not PASS) - release.yml: migrate cosign from deprecated --output-signature/ --output-certificate to --bundle API (cosign v2.4+ requirement) - ci.yml: restructure ROCm job -- remove 30GB container image, install HIP SDK directly via apt after freeing disk space
61 lines
1.8 KiB
C++
61 lines
1.8 KiB
C++
// ============================================================================
|
|
// Fuzz target: field arithmetic invariants
|
|
// Input: 64 bytes -> two 32-byte field elements (a, b)
|
|
// ============================================================================
|
|
#include <cstdint>
|
|
#include <cstring>
|
|
#include <array>
|
|
#include "secp256k1/field.hpp"
|
|
|
|
using secp256k1::fast::FieldElement;
|
|
|
|
extern "C" int LLVMFuzzerTestOneInput(const uint8_t* data, size_t size) {
|
|
if (size < 64) return 0;
|
|
|
|
std::array<uint8_t, 32> buf_a{}, buf_b{};
|
|
std::memcpy(buf_a.data(), data, 32);
|
|
std::memcpy(buf_b.data(), data + 32, 32);
|
|
|
|
auto a = FieldElement::from_bytes(buf_a);
|
|
auto b = FieldElement::from_bytes(buf_b);
|
|
|
|
// -- Commutativity: a + b == b + a
|
|
auto sum1 = a + b;
|
|
auto sum2 = b + a;
|
|
if (!(sum1 == sum2)) __builtin_trap();
|
|
|
|
// -- Commutativity: a * b == b * a
|
|
auto prod1 = a * b;
|
|
auto prod2 = b * a;
|
|
if (!(prod1 == prod2)) __builtin_trap();
|
|
|
|
// -- Associativity: (a + b) - b == a
|
|
auto diff = sum1 - b;
|
|
if (!(diff == a)) __builtin_trap();
|
|
|
|
// -- Square: a * a == a.square()
|
|
auto sq1 = a * a;
|
|
auto sq2 = a.square();
|
|
if (!(sq1 == sq2)) __builtin_trap();
|
|
|
|
// -- Inverse: a * a^-1 == 1 (if a != 0)
|
|
auto zero = FieldElement::zero();
|
|
if (!(a == zero)) {
|
|
auto inv = a.inverse();
|
|
auto should_be_one = a * inv;
|
|
if (!(should_be_one == FieldElement::one())) __builtin_trap();
|
|
}
|
|
|
|
// -- Negation: a + (-a) == 0
|
|
auto neg = a.negate();
|
|
auto should_be_zero = a + neg;
|
|
if (!(should_be_zero == zero)) __builtin_trap();
|
|
|
|
// -- Serialization round-trip
|
|
auto bytes_out = a.to_bytes();
|
|
auto a_back = FieldElement::from_bytes(bytes_out);
|
|
if (!(a_back == a)) __builtin_trap();
|
|
|
|
return 0;
|
|
}
|