Add constant time tests

Author: jesseposner

src/ctime_tests.c

@@ -47,6 +47,10 @@
 #include "../include/secp256k1_musig.h"
 #endif
 
+#ifdef ENABLE_MODULE_FROST
+#include "include/secp256k1_frost.h"
+#endif
+
 static void run_tests(secp256k1_context *ctx, unsigned char *key);
 
 int main(void) {
@@ -349,4 +353,79 @@ static void run_tests(secp256k1_context *ctx, unsigned char *key) {
         CHECK(ret == 1);
     }
 #endif
+
+#ifdef ENABLE_MODULE_FROST
+    {
+        secp256k1_xonly_pubkey pk;
+        unsigned char session_id[32];
+        secp256k1_frost_secnonce secnonce[2];
+        secp256k1_frost_pubnonce pubnonce[2];
+        const secp256k1_frost_pubnonce *pubnonce_ptr[2];
+        secp256k1_frost_tweak_cache cache;
+        secp256k1_frost_session session;
+        secp256k1_frost_partial_sig partial_sig;
+        const secp256k1_frost_partial_sig *partial_sig_ptr[1];
+        unsigned char extra_input[32];
+        unsigned char sec_adaptor[32];
+        secp256k1_pubkey adaptor;
+        unsigned char pre_sig[64];
+        int nonce_parity;
+        secp256k1_frost_share shares[2];
+        secp256k1_pubkey pubshares[2];
+        size_t ids[2];
+
+        pubnonce_ptr[0] = &pubnonce[0];
+        pubnonce_ptr[1] = &pubnonce[1];
+        SECP256K1_CHECKMEM_DEFINE(key, 32);
+        memcpy(extra_input, key, sizeof(extra_input));
+        extra_input[0] = extra_input[0] + 1;
+        memcpy(sec_adaptor, key, sizeof(sec_adaptor));
+        sec_adaptor[0] = extra_input[0] + 2;
+        memcpy(session_id, key, sizeof(session_id));
+        session_id[0] = session_id[0] + 3;
+        partial_sig_ptr[0] = &partial_sig;
+        ids[0] = 1;
+        ids[1] = 2;
+
+        /* shares_gen */
+        SECP256K1_CHECKMEM_UNDEFINE(key, 32);
+        ret = secp256k1_frost_shares_trusted_gen(ctx, shares, pubshares, &pk, key, 2, 2);
+        SECP256K1_CHECKMEM_DEFINE(&ret, sizeof(ret));
+        CHECK(ret == 1);
+        SECP256K1_CHECKMEM_UNDEFINE(&shares[0], sizeof(shares[0]));
+        SECP256K1_CHECKMEM_UNDEFINE(&shares[1], sizeof(shares[1]));
+        /* nonce_gen */
+        SECP256K1_CHECKMEM_UNDEFINE(session_id, sizeof(session_id));
+        CHECK(secp256k1_ec_pubkey_create(ctx, &adaptor, sec_adaptor));
+        SECP256K1_CHECKMEM_UNDEFINE(extra_input, sizeof(extra_input));
+        SECP256K1_CHECKMEM_UNDEFINE(sec_adaptor, sizeof(sec_adaptor));
+        CHECK(secp256k1_frost_pubkey_tweak(ctx, &cache, &pk) == 1);
+        ret = secp256k1_frost_nonce_gen(ctx, &secnonce[0], &pubnonce[0], session_id, &shares[0], msg, &pk, extra_input);
+        SECP256K1_CHECKMEM_DEFINE(&ret, sizeof(ret));
+        CHECK(ret == 1);
+        ret = secp256k1_frost_nonce_gen(ctx, &secnonce[1], &pubnonce[1], session_id, &shares[1], msg, &pk, extra_input);
+        SECP256K1_CHECKMEM_DEFINE(&ret, sizeof(ret));
+        CHECK(ret == 1);
+        /* partial_sign */
+        CHECK(secp256k1_frost_nonce_process(ctx, &session, pubnonce_ptr, 2, msg, &pk, 1, ids, &cache, &adaptor) == 1);
+        ret = secp256k1_keypair_create(ctx, &keypair, key);
+        SECP256K1_CHECKMEM_DEFINE(&ret, sizeof(ret));
+        CHECK(ret == 1);
+        ret = secp256k1_frost_partial_sign(ctx, &partial_sig, &secnonce[0], &shares[0], &session, &cache);
+        SECP256K1_CHECKMEM_DEFINE(&ret, sizeof(ret));
+        CHECK(ret == 1);
+        /* adapt */
+        SECP256K1_CHECKMEM_DEFINE(&partial_sig, sizeof(partial_sig));
+        CHECK(secp256k1_frost_partial_sig_agg(ctx, pre_sig, &session, partial_sig_ptr, 1));
+        SECP256K1_CHECKMEM_DEFINE(pre_sig, sizeof(pre_sig));
+        CHECK(secp256k1_frost_nonce_parity(ctx, &nonce_parity, &session));
+        ret = secp256k1_frost_adapt(ctx, sig, pre_sig, sec_adaptor, nonce_parity);
+        SECP256K1_CHECKMEM_DEFINE(&ret, sizeof(ret));
+        CHECK(ret == 1);
+        /* extract_adaptor */
+        ret = secp256k1_frost_extract_adaptor(ctx, sec_adaptor, sig, pre_sig, nonce_parity);
+        SECP256K1_CHECKMEM_DEFINE(&ret, sizeof(ret));
+        CHECK(ret == 1);
+    }
+#endif
 }