diff options
| -rw-r--r-- | bench/ed25519_test_vectors.v | 91 | ||||
| -rw-r--r-- | bench/tb_base_point_multiplier.v | 261 |
2 files changed, 352 insertions, 0 deletions
diff --git a/bench/ed25519_test_vectors.v b/bench/ed25519_test_vectors.v new file mode 100644 index 0000000..019447a --- /dev/null +++ b/bench/ed25519_test_vectors.v @@ -0,0 +1,91 @@ +/* Values taken from RFC 8032 */ + + +/* + * TEST 1 + * + * private_key == 9d61b19deffd5a60ba844af492ec2cc44449c5697b326919703bac031cae7f60 + * + */ + +/* lower 256 bits of SHA512(private_key) */ +localparam [255:0] ED25519_D_HASHED_LSB_1 = + {32'h0FE94D90, 32'h06F020A5, 32'hA3C080D9, 32'h6827FFFD, + 32'h3C010AC0, 32'hF12E7A42, 32'hCB33284F, 32'h86837C35}; + +/* corresponding public key (reverse byte order, as-is from RFC) */ +localparam [255:0] ED25519_Q_Y_1 = + {32'hd75a9801, 32'h82b10ab7, 32'hd54bfed3, 32'hc964073a, + 32'h0ee172f3, 32'hdaa62325, 32'haf021a68, 32'hf707511a}; + + +/* + * TEST 2 + * + * private_key == 4ccd089b28ff96da9db6c346ec114e0f5b8a319f35aba624da8cf6ed4fb8a6fb + * + */ + +/* lower 256 bits of SHA512(private_key) */ +localparam [255:0] ED25519_D_HASHED_LSB_2 = + {32'h112e502e, 32'hb0249a25, 32'h5e1c827f, 32'h3b6b6c7f, + 32'h0a79f4ca, 32'h8575a915, 32'h28d58258, 32'hd79ebd6e}; + +/* corresponding public key (reverse byte order, as-is from RFC) */ +localparam [255:0] ED25519_Q_Y_2 = + {32'h3d4017c3, 32'he843895a, 32'h92b70aa7, 32'h4d1b7ebc, + 32'h9c982ccf, 32'h2ec4968c, 32'hc0cd55f1, 32'h2af4660c}; + + +/* + * TEST 3 + * + * private_key == c5aa8df43f9f837bedb7442f31dcb7b166d38535076f094b85ce3a2e0b4458f7 + * + */ + +/* lower 256 bits of SHA512(private_key) */ +localparam [255:0] ED25519_D_HASHED_LSB_3 = + {32'h9ca91e99, 32'h81a12513, 32'h1bf5c2c5, 32'h4e7f4dba, + 32'h113dc215, 32'h5ba52390, 32'h8402d95e, 32'h758b9a90}; + +/* corresponding public key (reverse byte order, as-is from RFC) */ +localparam [255:0] ED25519_Q_Y_3 = + {32'hfc51cd8e, 32'h6218a1a3, 32'h8da47ed0, 32'h0230f058, + 32'h0816ed13, 32'hba3303ac, 32'h5deb9115, 32'h48908025}; + + +/* + * TEST 4 + * + * private_key == f5e5767cf153319517630f226876b86c8160cc583bc013744c6bf255f5cc0ee5 + * + */ + +/* lower 256 bits of SHA512(private_key) */ +localparam [255:0] ED25519_D_HASHED_LSB_4 = + {32'hc8cc88f4, 32'h4f786eb8, 32'h6a0e2682, 32'h9ca4b304, + 32'haa44b27f, 32'hf2de6e4b, 32'hd386f80e, 32'h8d889c60}; + +/* corresponding public key (reverse byte order, as-is from RFC) */ +localparam [255:0] ED25519_Q_Y_4 = + {32'h278117fc, 32'h144c7234, 32'h0f67d0f2, 32'h316e8386, + 32'hceffbf2b, 32'h2428c9c5, 32'h1fef7c59, 32'h7f1d426e}; + + +/* + * TEST 5 + * + * private_key == + * + */ + +/* lower 256 bits of SHA512(private_key) */ +localparam [255:0] ED25519_D_HASHED_LSB_5 = + {32'h85b64172, 32'hc7528f1a, 32'hf4a5a85d, 32'hd6dbd872, + 32'h92a0079b, 32'hf113570b, 32'hec4be059, 32'h4fcedd30}; + +/* corresponding public key (reverse byte order, as-is from RFC) */ +localparam [255:0] ED25519_Q_Y_5 = + {32'hec172b93, 32'had5e563b, 32'hf4932c70, 32'he1245034, + 32'hc35467ef, 32'h2efd4d64, 32'hebf81968, 32'h3467e2bf}; diff --git a/bench/tb_base_point_multiplier.v b/bench/tb_base_point_multiplier.v new file mode 100644 index 0000000..7d8de3b --- /dev/null +++ b/bench/tb_base_point_multiplier.v @@ -0,0 +1,261 @@ +//------------------------------------------------------------------------------ +// +// tb_base_point_multiplier.v +// ----------------------------------------------------------------------------- +// Testbench for Ed25519 base point scalar multiplier. +// +// Authors: Pavel Shatov +// +// Copyright (c) 2018, NORDUnet A/S +// +// Redistribution and use in source and binary forms, with or without +// modification, are permitted provided that the following conditions are met: +// +// - Redistributions of source code must retain the above copyright notice, +// this list of conditions and the following disclaimer. +// +// - Redistributions in binary form must reproduce the above copyright notice, +// this list of conditions and the following disclaimer in the documentation +// and/or other materials provided with the distribution. +// +// - Neither the name of the NORDUnet nor the names of its contributors may be +// used to endorse or promote products derived from this software without +// specific prior written permission. +// +// THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" +// AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE +// IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE +// ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE +// LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR +// CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF +// SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS +// INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN +// CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) +// ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE +// POSSIBILITY OF SUCH DAMAGE. +// +//------------------------------------------------------------------------------ + +//------------------------------------------------------------------------------ +`timescale 1ns / 1ps +//------------------------------------------------------------------------------ + +module tb_base_point_multiplier; + + + // + // Test Vectors + // + `include "ed25519_test_vectors.v" + + + // + // Core Parameters + // + localparam WORD_COUNTER_WIDTH = 3; + localparam OPERAND_NUM_WORDS = 8; + + + // + // Clock (100 MHz) + // +`define CLOCK_PERIOD 10.0 +`define CLOCK_HALF_PERIOD (0.5 * `CLOCK_PERIOD) + + reg clk = 1'b0; + always #`CLOCK_HALF_PERIOD clk = ~clk; + + + // + // Inputs, Outputs + // + reg rst_n; + reg ena; + wire rdy; + + + // + // Buffers (K, QY) + // + wire [WORD_COUNTER_WIDTH-1:0] core_k_addr; + wire [WORD_COUNTER_WIDTH-1:0] core_qy_addr; + + wire core_qy_wren; + + wire [ 32-1:0] core_k_data; + wire [ 32-1:0] core_qy_data; + + reg [WORD_COUNTER_WIDTH-1:0] tb_k_addr; + reg [WORD_COUNTER_WIDTH-1:0] tb_qy_addr; + + reg tb_k_wren; + + reg [ 32-1:0] tb_k_data; + wire [ 32-1:0] tb_qy_data; + + bram_1rw_1ro_readfirst # (.MEM_WIDTH(32), .MEM_ADDR_BITS(WORD_COUNTER_WIDTH)) + bram_k + ( .clk(clk), + .a_addr(tb_k_addr), .a_wr(tb_k_wren), .a_in(tb_k_data), .a_out(), + .b_addr(core_k_addr), .b_out(core_k_data) + ); + + bram_1rw_1ro_readfirst # (.MEM_WIDTH(32), .MEM_ADDR_BITS(WORD_COUNTER_WIDTH)) + bram_qy + ( .clk(clk), + .a_addr(core_qy_addr), .a_wr(core_qy_wren), .a_in(core_qy_data), .a_out(), + .b_addr(tb_qy_addr), .b_out(tb_qy_data) + ); + + + // + // UUT + // + ed25519_multiplier uut + ( + .clk (clk), + .rst_n (rst_n), + + .ena (ena), + .rdy (rdy), + + .k_addr (core_k_addr), + .qy_addr (core_qy_addr), + + .qy_wren (core_qy_wren), + + .k_din (core_k_data), + .qy_dout (core_qy_data) + ); + + + // + // Testbench Routine + // + reg ok = 1; + initial begin + + /* initialize control inputs */ + rst_n = 0; + ena = 0; + + /* wait for some time */ + #200; + + /* de-assert reset */ + rst_n = 1; + + /* wait for some time */ + #100; + + /* run tests */ + $display("1. Q = d * G..."); + test_base_point_multiplier(ED25519_D_HASHED_LSB_1, ED25519_Q_Y_1); + + /* print result */ + if (ok) $display("tb_base_point_multiplier: SUCCESS"); + else $display("tb_base_point_multiplier: FAILURE"); + // + #10000; + // + //$finish; + // + end + + + // + // Test Task + // + task test_base_point_multiplier; + + input [255:0] k; + input [255:0] qy; + + reg [255:0] k_shreg; + reg [255:0] qy_shreg; + reg qy_ok; + + integer w; + + begin + + /* initialize result */ + qy_ok = 0; + + /* initialize shift registers */ + k_shreg = k; + + /* start filling memories */ + tb_k_wren = 1; + + /* write all the words */ + for (w=0; w<OPERAND_NUM_WORDS; w=w+1) begin + + /* set addresses */ + tb_k_addr = w[WORD_COUNTER_WIDTH-1:0]; + + /* set data words */ + tb_k_data = k_shreg[31:0]; + + /* shift inputs */ + k_shreg = {{32{1'bX}}, k_shreg[255:32]}; + + /* wait for 1 clock tick */ + #`CLOCK_PERIOD; + + end + + /* stop filling memories */ + tb_k_wren = 0; + + /* wipe addresses */ + tb_k_addr = {WORD_COUNTER_WIDTH{1'bX}}; + + /* wipe data words */ + tb_k_data = {32{1'bX}}; + + /* start operation */ + ena = 1; + + /* clear flag */ + #`CLOCK_PERIOD ena = 0; + + /* wait for operation to complete */ + while (!rdy) #`CLOCK_PERIOD; + +// /* read result */ +// for (w=0; w<OPERAND_NUM_WORDS; w=w+1) begin +// +// /* set address */ +// tb_qxy_addr = w[WORD_COUNTER_WIDTH-1:0]; +// +// /* wait for 1 clock tick */ +// #10; +// +// /* store data word */ +// qx_shreg = {tb_qx_data, qx_shreg[255:32]}; +// qy_shreg = {tb_qy_data, qy_shreg[255:32]}; +// +// end +// +// /* compare */ +// q_ok = (qx_shreg == qx) && +// (qy_shreg == qy); +// + /* display results */ + if (qy_ok) $display("test_base_point_multiplier(): CORRECT RESULT"); + else $display("test_base_point_multiplier(): WRONG RESULT"); + + /* update global flag */ + ok = ok & qy_ok; + + end + + endtask + +endmodule + + +//------------------------------------------------------------------------------ +// End-of-File +//------------------------------------------------------------------------------ |