org.bouncycastle.crypto.bls

Class BLS12_381G2HashToCurveTest

java.lang.Object

junit.framework.Assert

junit.framework.TestCase

org.bouncycastle.crypto.bls.BLS12_381G2HashToCurveTest

All Implemented Interfaces:

junit.framework.Test

public class BLS12_381G2HashToCurveTest
extends junit.framework.TestCase

Known-answer tests for BLS12381G2_XMD:SHA-256_SSWU_RO_ from RFC 9380 Appendix J.10.1. Each vector checks intermediate layers (u[0], u[1], Q0, Q1) before the final hashed point P, so a regression localises to the specific stage that broke.

Constructor Summary

Constructors

Constructor and Description
BLS12_381G2HashToCurveTest()

Method Summary

Modifier and Type	Method and Description
void	testClearCofactorMatchesHEff() The endomorphism-based cofactor clearing used by hash-to-curve must equal the plain multiplication by h_eff it replaces, for points outside and inside the subgroup and for infinity.
void	testFp2Sgn0SpecVectors()
void	testFp2Sqrt()
void	testFp2SqrtNullForAnotherNonSquare()
void	testFp2SqrtNullForNonSquare()
void	testFp2SqrtOfZeroIsZero()
void	testGenerator()
void	testJ101Vectors()
void	testSqrtOrSqrtZ() The Fp-based square root used by map-to-curve: for squares it returns a root of w, otherwise a root of Z*w, and its verdict agrees with the independent Fp2Element.isSquare().

Methods inherited from class junit.framework.TestCase

assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertEquals, assertFalse, assertFalse, assertNotNull, assertNotNull, assertNotSame, assertNotSame, assertNull, assertNull, assertSame, assertSame, assertTrue, assertTrue, countTestCases, createResult, fail, fail, failNotEquals, failNotSame, failSame, format, getName, run, run, runBare, runTest, setName, setUp, tearDown, toString

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Constructor Detail

BLS12_381G2HashToCurveTest

public BLS12_381G2HashToCurveTest()

Method Detail

testJ101Vectors

public void testJ101Vectors()

testClearCofactorMatchesHEff

public void testClearCofactorMatchesHEff()

The endomorphism-based cofactor clearing used by hash-to-curve must equal the plain multiplication by h_eff it replaces, for points outside and inside the subgroup and for infinity. The points outside come from map-to-curve itself, before its cofactor is cleared.

testGenerator

public void testGenerator()

testFp2Sqrt

public void testFp2Sqrt()

testFp2SqrtNullForNonSquare

public void testFp2SqrtNullForNonSquare()

testFp2SqrtNullForAnotherNonSquare

public void testFp2SqrtNullForAnotherNonSquare()

testFp2SqrtOfZeroIsZero

public void testFp2SqrtOfZeroIsZero()

testFp2Sgn0SpecVectors

public void testFp2Sgn0SpecVectors()

testSqrtOrSqrtZ

public void testSqrtOrSqrtZ()

The Fp-based square root used by map-to-curve: for squares it returns a root of w, otherwise a root of Z*w, and its verdict agrees with the independent Fp2Element.isSquare(). Covers the purely real inputs (square and non-square in Fp, so the root may be purely imaginary), zero, purely imaginary inputs and random ones.