org.bouncycastle.pqc.crypto.test
Class NTRULPRimeTest

java.lang.Object
  junit.framework.Assert
      junit.framework.TestCase
          org.bouncycastle.pqc.crypto.test.NTRULPRimeTest

All Implemented Interfaces:

junit.framework.Test

public class NTRULPRimeTest

extends junit.framework.TestCase

Constructor Summary

NTRULPRimeTest()

Method Summary

void	testImplicitRejection() A ciphertext changed anywhere decapsulates, by implicit rejection, to the secret the reference derives from rho and the received ciphertext, SHA-512(0 | rho | ciphertext)[0:32], rather than the encapsulated one.
void	testKEM()

Methods inherited from class junit.framework.TestCase

countTestCases, createResult, getName, run, run, runBare, runTest, setName, setUp, tearDown, toString

Methods inherited from class junit.framework.Assert

assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertFalse, assertFalse, assertNotNull, assertNotNull, assertNotSame, assertNotSame, assertNull, assertNull, assertSame, assertSame, assertTrue, assertTrue, fail, fail

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

NTRULPRimeTest

public NTRULPRimeTest()

Method Detail

testKEM

public void testKEM()
             throws java.lang.Exception

Throws:

java.lang.Exception

testImplicitRejection

public void testImplicitRejection()

A ciphertext changed anywhere decapsulates, by implicit rejection, to the secret the reference derives from rho and the received ciphertext, SHA-512(0 | rho | ciphertext)[0:32], rather than the encapsulated one.

The secret used to be derived with prefix 1, as for a valid ciphertext, and from the re-encrypted ciphertext, which depends only on the decrypted r, so ciphertexts that decrypt to the same r - such as two that differ only in the confirmation hash - shared a rejection secret, telling an attacker so.