org.bouncycastle.crypto.hash2curve.test

Class BLS12_381PairingTest

java.lang.Object

junit.framework.Assert

junit.framework.TestCase

org.bouncycastle.crypto.hash2curve.test.BLS12_381PairingTest

All Implemented Interfaces:

junit.framework.Test

public class BLS12_381PairingTest
extends junit.framework.TestCase

Bilinearity-based correctness tests for the BLS12-381 optimal ate pairing.

Without external KAT vectors at hand, these tests validate the pairing via its defining algebraic properties:

• Identity: e(O, Q) == 1 and e(P, O) == 1.
• Non-degeneracy: e(G1, G2) != 1.
• Subgroup membership: e(P, Q)^r == 1 (output is in GT, the order-r subgroup of Fp^12).
• Bilinearity in G1: e(a*P, Q) == e(P, Q)^a.
• Bilinearity in G2: e(P, b*Q) == e(P, Q)^b.
• Full bilinearity: e(a*P, b*Q) == e(P, Q)^(a*b).
• Symmetry of the bilinear pairing in this swap pattern: e(a*P, Q) == e(P, a*Q).

Together these uniquely identify a non-degenerate bilinear pairing on G1 x G2 -> GT up to a constant factor; correctness of the constant factor (which depends on the twist convention) requires comparing against an external reference and is left to a follow-on slice that adds KAT vectors.

Constructor Summary

Constructors

Constructor and Description
BLS12_381PairingTest()

Method Summary

Modifier and Type	Method and Description
void	testBilinearityInG1()
void	testBilinearityInG2()
void	testFullBilinearity()
void	testGtSubgroupMembership()
void	testHardPartMatchesNaiveModPow() Confirms the Hayashida-Hayasaka-Teruya /3 hard-part chain produces the canonical f^((p^4 - p^2 + 1) / r) (no cube factor), by direct comparison against a naive Fp12Element.modPow(java.math.BigInteger) on the full hard exponent.
void	testHardPartOfIdentity() The identity compresses to all zeros, so the compressed (Karabina) powers in the hard part cannot decompress it and must fall back to plain cyclotomic squaring.
void	testIdentityG1()
void	testIdentityG2()
void	testKnownAnswers()
void	testMultiPairAllInfinityReturnsOne()
void	testMultiPairMixedInfinitySkips()
void	testMultiPairRejectsLengthMismatch()
void	testNonDegeneracy()
void	testScalarSwap()

Methods inherited from class junit.framework.TestCase

assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertFalse, assertFalse, assertNotNull, assertNotNull, assertNotSame, assertNotSame, assertNull, assertNull, assertSame, assertSame, assertTrue, assertTrue, countTestCases, createResult, fail, fail, failNotEquals, failNotSame, failSame, format, getName, run, run, runBare, runTest, setName, setUp, tearDown, toString

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

BLS12_381PairingTest

public BLS12_381PairingTest()

Method Detail

testIdentityG1

public void testIdentityG1()

testIdentityG2

public void testIdentityG2()

testNonDegeneracy

public void testNonDegeneracy()

testGtSubgroupMembership

public void testGtSubgroupMembership()

testHardPartMatchesNaiveModPow

public void testHardPartMatchesNaiveModPow()

Confirms the Hayashida-Hayasaka-Teruya /3 hard-part chain produces the canonical f^((p^4 - p^2 + 1) / r) (no cube factor), by direct comparison against a naive Fp12Element.modPow(java.math.BigInteger) on the full hard exponent. Catches any algebra error in the chain that would otherwise hide behind bilinearity (which holds even when the pairing differs from canonical by a fixed power coprime to r).

testHardPartOfIdentity

public void testHardPartOfIdentity()

The identity compresses to all zeros, so the compressed (Karabina) powers in the hard part cannot decompress it and must fall back to plain cyclotomic squaring.

testBilinearityInG1

public void testBilinearityInG1()

testBilinearityInG2

public void testBilinearityInG2()

testFullBilinearity

public void testFullBilinearity()

testScalarSwap

public void testScalarSwap()

testMultiPairRejectsLengthMismatch

public void testMultiPairRejectsLengthMismatch()

testMultiPairAllInfinityReturnsOne

public void testMultiPairAllInfinityReturnsOne()

testMultiPairMixedInfinitySkips

public void testMultiPairMixedInfinitySkips()

testKnownAnswers

public void testKnownAnswers()