@pytest.mark.parametrize(
"input_data",
# Test vectors from the reference spec (from the cryptography team)
vectors_from_file("fail-mul_G2_bls.json")
+ [
pytest.param(
PointG2((1, 0), (0, 0)) + Scalar(0),
id="invalid_point_a_1",
),
pytest.param(
PointG2((0, 1), (0, 0)) + Scalar(0),
id="invalid_point_a_2",
),
pytest.param(
PointG2((0, 0), (1, 0)) + Scalar(0),
id="invalid_point_a_3",
),
pytest.param(
PointG2((0, 0), (0, 1)) + Scalar(0),
id="invalid_point_a_4",
),
pytest.param(
PointG2((Spec.P, 0), (0, 0)) + Scalar(0),
id="x_1_equal_to_p_times_0",
),
pytest.param(
PointG2((0, Spec.P), (0, 0)) + Scalar(0),
id="x_2_equal_to_p_times_0",
),
pytest.param(
PointG2((0, 0), (Spec.P, 0)) + Scalar(0),
id="y_1_equal_to_p_times_0",
),
pytest.param(
PointG2((0, 0), (0, Spec.P)) + Scalar(0),
id="y_2_equal_to_p_times_0",
),
pytest.param(
PointG2((Spec.P + 1, 0), (0, 0)) + Scalar(0),
id="x1_above_modulus_times_0",
),
pytest.param(
PointG2(
(0x01, 0), # x coordinate in Fp2 (1 + 0i)
(0x07, 0), # y coordinate satisfying y^2 = x^3 + 5 in Fp2
)
+ Scalar(0),
id="point_on_wrong_curve_times_0",
),
pytest.param(
b"\x80" + bytes(Spec.INF_G2)[1:] + Scalar(0),
id="invalid_encoding",
),
pytest.param(
(Spec.INF_G2 + Scalar(0))[:-1],
id="input_too_short",
),
pytest.param(
b"\x00" + (Spec.INF_G2 + Scalar(0)),
id="input_too_long",
),
pytest.param(
b"",
id="zero_length_input",
),
pytest.param(
b"\x00" * 160,
id="all_zero_160_bytes",
),
pytest.param(
b"\xff" + b"\x00" * 127 + b"\xff" + b"\x00" * 31,
id="bad_inf_flag_with_scalar",
),
pytest.param(
b"\xc0" + b"\x00" * 127 + b"\x00" * 32,
id="comp_instead_of_uncomp_with_scalar",
),
pytest.param(
Spec.G1 + Spec.G1,
id="g1_input_invalid_length",
),
pytest.param(
Spec.G2 + Spec.G2,
id="g2_input_invalid_length",
),
pytest.param(
Spec.G2,
id="g2_truncated_input",
),
pytest.param(
Spec.INF_G2 + Scalar(0).x.to_bytes(30, byteorder="big"),
id="inf_with_short_scalar",
),
pytest.param(
Spec.INF_G2 + Scalar(0).x.to_bytes(34, byteorder="big"),
id="inf_with_long_scalar",
),
pytest.param(
Spec.INF_G2 + (b"\x01" + b"\x00" * 32),
id="scalar_too_large_bytes",
),
pytest.param(
Spec.P2 + (b"\x01" + b"\x00" * 32),
id="scalar_too_large_bytes_with_point",
),
pytest.param(
Spec.G2 + (b"\x01\x23\x45"),
id="scalar_too_small_bytes",
),
pytest.param(
Scalar(1) + Scalar(1),
id="two_scalars",
),
pytest.param(
bytes(Spec.G2) + bytes(Scalar(0))[128:],
id="mixed_g2_scalar_truncated",
),
pytest.param(
PointG2(
(Spec.P2.x[0] | Spec.MAX_FP_BIT_SET, Spec.P2.x[1]), Spec.P2.y
)
+ Scalar(1),
id="non_zero_byte_16_boundary_violation_x1",
),
pytest.param(
PointG2(
(Spec.P2.x[0], Spec.P2.x[1] | Spec.MAX_FP_BIT_SET), Spec.P2.y
)
+ Scalar(1),
id="non_zero_byte_16_boundary_violation_x2",
),
pytest.param(
PointG2(
Spec.P2.x, (Spec.P2.y[0] | Spec.MAX_FP_BIT_SET, Spec.P2.y[1])
)
+ Scalar(1),
id="non_zero_byte_16_boundary_violation_y1",
),
pytest.param(
PointG2(
Spec.P2.x, (Spec.P2.y[0], Spec.P2.y[1] | Spec.MAX_FP_BIT_SET)
)
+ Scalar(1),
id="non_zero_byte_16_boundary_violation_y2",
),
# Not in the r-order subgroup test cases.
pytest.param(
Spec.P2_NOT_IN_SUBGROUP + Scalar(0),
id="not_in_subgroup_times_0",
),
pytest.param(
Spec.P2_NOT_IN_SUBGROUP + Scalar(1),
id="not_in_subgroup_times_1",
),
pytest.param(
Spec.P2_NOT_IN_SUBGROUP + Scalar(2),
id="not_in_subgroup_times_2",
),
pytest.param(
Spec.P2_NOT_IN_SUBGROUP + Scalar(3),
id="not_in_subgroup_times_3",
),
pytest.param(
Scalar(Spec.Q) + Spec.P2_NOT_IN_SUBGROUP,
id="q_times_not_in_subgroup",
),
pytest.param(
Spec.P2_NOT_IN_SUBGROUP + Scalar(Spec.Q - 1),
id="not_in_subgroup_times_q_minus_1",
),
pytest.param(
Spec.P2_NOT_IN_SUBGROUP + Scalar(Spec.Q + 1),
id="not_in_subgroup_times_q_plus_1",
),
# More not in the r-order subgroup test cases, but using random
# generated points.
pytest.param(
G2_POINTS_NOT_IN_SUBGROUP[0] + Scalar(1),
id="rand_not_in_subgroup_0_times_1",
),
pytest.param(
Scalar(2) + G2_POINTS_NOT_IN_SUBGROUP[1],
id="2_times_rand_not_in_subgroup_1",
),
pytest.param(
G2_POINTS_NOT_IN_SUBGROUP[2] + Scalar(Spec.Q),
id="rand_not_in_subgroup_2_times_q",
),
pytest.param(
Scalar(0) + G2_POINTS_NOT_IN_SUBGROUP[3],
id="0_times_rand_not_in_subgroup_3",
),
pytest.param(
G2_POINTS_NOT_IN_SUBGROUP[4] + Scalar(2**255 - 1),
id="rand_not_in_subgroup_4_times_large_scalar",
),
# Not on the curve cases using random generated points.
pytest.param(
G2_POINTS_NOT_ON_CURVE[0] + Scalar(1),
id="rand_not_on_curve_0_times_1",
),
pytest.param(
G2_POINTS_NOT_ON_CURVE[1] + Scalar(2),
id="rand_not_on_curve_1_times_2",
),
pytest.param(
G2_POINTS_NOT_ON_CURVE[2] + Scalar(Spec.Q),
id="rand_not_on_curve_2_times_q",
),
pytest.param(
G2_POINTS_NOT_ON_CURVE[3] + Scalar(0),
id="rand_not_on_curve_3_times_0",
),
pytest.param(
G2_POINTS_NOT_ON_CURVE[4] + Scalar(Spec.Q - 1),
id="rand_not_on_curve_4_times_q_minus_1",
),
],
)
@pytest.mark.parametrize("expected_output", [Spec.INVALID], ids=[""])
def test_invalid(
state_test: StateTestFiller,
pre: Alloc,
post: dict,
tx: Transaction,
) -> None:
"""Negative tests for the BLS12_G2MUL precompile."""
state_test(
env=Environment(),
pre=pre,
tx=tx,
post=post,
)