diff options
author | Theo Buehler <tb@openbsd.org> | 2023-04-11 19:43:49 +0200 |
---|---|---|
committer | Jun Aruga <jaruga@redhat.com> | 2023-06-05 12:38:54 +0200 |
commit | 93548ae9597ba40d3f8b564f6a948ce55b432e30 (patch) | |
tree | 806ecffd1e95aaf91eba82e4af6ff782184c3ac7 | |
parent | 3456770a4219bdf8e97ef8d4b5c2afa05d715bf1 (diff) | |
download | ruby-openssl-93548ae9597ba40d3f8b564f6a948ce55b432e30.tar.gz |
Fix modular square root test with LibreSSL >= 3.8
If x is a modular square root of a (mod p) then so is (p - x). Both
answers are valid. In particular, both 2 and 3 are valid square roots
of 4 (mod 5). Do not assume that a particular square root is chosen by
the algorithm. Indeed, the algorithm in OpenSSL and LibreSSL <= 3.7
returns a non-deterministic answer in many cases. LibreSSL 3.8 and
later will always return the smaller of the two possible answers. This
breaks the current test case.
Instead of checking for a particular square root, check that the square
of the claimed square root is the given value. This is always true. Add
the simplest test case where the answer is indeed non-deterministic.
-rw-r--r-- | test/openssl/test_bn.rb | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/test/openssl/test_bn.rb b/test/openssl/test_bn.rb index 77af1409..ea88ff06 100644 --- a/test/openssl/test_bn.rb +++ b/test/openssl/test_bn.rb @@ -175,7 +175,9 @@ class OpenSSL::TestBN < OpenSSL::TestCase end def test_mod_sqrt - assert_equal(3, 4.to_bn.mod_sqrt(5)) + assert_equal(4, 4.to_bn.mod_sqrt(5).mod_sqr(5)) + # One of 189484 or 326277 is returned as a square root of 2 (mod 515761). + assert_equal(2, 2.to_bn.mod_sqrt(515761).mod_sqr(515761)) assert_equal(0, 5.to_bn.mod_sqrt(5)) assert_raise(OpenSSL::BNError) { 3.to_bn.mod_sqrt(5) } end |