test/test_MPIN.js - incubator-milagro-crypto-js - Git at Google

 /*
 Licensed to the Apache Software Foundation (ASF) under one
 or more contributor license agreements.  See the NOTICE file
 distributed with this work for additional information
 regarding copyright ownership.  The ASF licenses this file
 to you under the Apache License, Version 2.0 (the
 "License"); you may not use this file except in compliance
 with the License.  You may obtain a copy of the License at

   http://www.apache.org/licenses/LICENSE-2.0

 Unless required by applicable law or agreed to in writing,
 software distributed under the License is distributed on an
 "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 KIND, either express or implied.  See the License for the
 specific language governing permissions and limitations
 under the License.
 */

 /* Test MPIN - test driver and function exerciser for MPIN API Functions */

 var CTX = require("../index");

 var chai = require('chai');

 var expect = chai.expect;

 // Curves for test
 var pf_curves = ['BN254', 'BN254CX', 'BLS381', 'BLS383', 'BLS461', 'FP256BN', 'FP512BN', 'BLS24', 'BLS48'];

 // Curves for test with test vectors
 var tv_curves = ['BN254CX'];

 hextobytes = function(value_hex) {
     // "use strict";
     var len, byte_value, i;

     len = value_hex.length;
     byte_value = [];

     for (i = 0; i < len; i += 2) {
         byte_value[(i / 2)] = parseInt(value_hex.substr(i, 2), 16);
     }
     return byte_value;
 };

 pf_curves.forEach(function(curve) {

     describe('TEST MPIN ' + curve, function() {

         var ctx = new CTX(curve),
             rng = new ctx.RAND(),
             MPIN, EGS, EFS, G1S, G2S,
             S1 = [],
             S2 = [],
             SST1 = [],
             SST2 = [],
             TOKEN1 = [],
             TOKEN2 = [],
             PERMIT1 = [],
             PERMIT2 = [],
             SST = [],
             TOKEN = [],
             bakSECRET = [],
             SECRET = [],
             PERMIT = [],
             SEC = [],
             xID = [],
             xCID = [],
             X = [],
             Y = [],
             E = [],
             F = [],
             HCID = [],
             rHCID = [],
             HID = [],
             HTID = [],

             G1 = [],
             G2 = [],
             R = [],
             Z = [],
             W = [],
             T = [],
             CK = [],
             SK = [],

             sha = ctx.ECP.HASH_TYPE,

             IDstr = "testUser@milagro.com",
             pin = 1234,
             pin2 = 2345,
             CLIENT_ID, date;

         if (ctx.ECP.CURVE_PAIRING_TYPE === 1 | ctx.ECP.CURVE_PAIRING_TYPE === 2) {
             MPIN = ctx.MPIN;
             G2S = 4 * MPIN.EFS;
         } else if (ctx.ECP.CURVE_PAIRING_TYPE === 3) {
             MPIN = ctx.MPIN192;
             G2S = 8 * MPIN.EFS;
         } else if (ctx.ECP.CURVE_PAIRING_TYPE === 4) {
             MPIN = ctx.MPIN256;
             G2S = 16 * MPIN.EFS;
         }
         EGS = MPIN.EGS;
         EFS = MPIN.EFS;
         G1S = 2 * EFS + 1;

         before(function(done) {
             this.timeout(0);

             var RAW = [];
             rng.clean();
             for (var j = 0; j < 100; j++) RAW[j] = j;
             rng.seed(100, RAW);

             /* Trusted Authorities set-up */
             MPIN.RANDOM_GENERATE(rng, S1);
             MPIN.RANDOM_GENERATE(rng, S2);

             /* Create Client Identity */
             CLIENT_ID = MPIN.stringtobytes(IDstr);
             HCID = MPIN.HASH_ID(sha, CLIENT_ID); /* Either Client or TA calculates Hash(ID) - you decide! */
             ctx.ECP.mapit(HCID).toBytes(rHCID);

             /* Client and Server are issued secrets by the DTAs */
             MPIN.GET_SERVER_SECRET(S1, SST1);
             MPIN.GET_SERVER_SECRET(S2, SST2);
             MPIN.RECOMBINE_G2(SST1, SST2, SST);

             MPIN.GET_CLIENT_SECRET(S1, HCID, TOKEN1);
             MPIN.GET_CLIENT_SECRET(S2, HCID, TOKEN2);
             MPIN.RECOMBINE_G1(TOKEN1, TOKEN2, TOKEN);

             SECRET = TOKEN.slice();
             MPIN.EXTRACT_PIN(sha, CLIENT_ID, pin, TOKEN);
             MPIN.PRECOMPUTE(TOKEN, HCID, G1, G2);

             /* Client gets "Time Token" permit from DTA */
             date = MPIN.today();
             MPIN.GET_CLIENT_PERMIT(sha, date, S1, HCID, PERMIT1);
             MPIN.GET_CLIENT_PERMIT(sha, date, S2, HCID, PERMIT2);
             MPIN.RECOMBINE_G1(PERMIT1,PERMIT2,PERMIT);

             /* This encoding makes Time permit look random - Elligator squared */
             MPIN.ENCODING(rng, PERMIT);
             MPIN.DECODING(PERMIT);

             done();
         });

         it('test extract/restore factors', function(done) {
             bakSECRET = SECRET.slice();
             MPIN.EXTRACT_FACTOR(sha, CLIENT_ID, pin%MPIN.MAXPIN,MPIN.PBLEN,SECRET);
             MPIN.RESTORE_FACTOR(sha, CLIENT_ID, pin%MPIN.MAXPIN,MPIN.PBLEN,SECRET);
             expect(MPIN.comparebytes(SECRET,bakSECRET)).to.be.true;
             done();
         })

         it('test MPin (Full) One Pass', function(done) {
             this.timeout(0);

             date = 0;
             CK = [];
             SK = [];

             var pxID = xID;
             var pxCID = null;
             var pHID = HID;
             var pHTID = null;
             var pE = null;
             var pF = null;
             var pPERMIT = null;
             var prHID = HCID;

             timeValue = MPIN.GET_TIME();

             rtn = MPIN.CLIENT(sha, date, CLIENT_ID, rng, X, pin, TOKEN, SEC, pxID, pxCID, pPERMIT, timeValue, Y);
             expect(rtn).to.be.equal(0);

             MPIN.GET_G1_MULTIPLE(rng, 1, R, prHID, Z); /* Also Send Z=r.ID to Server, remember random r */

             rtn = MPIN.SERVER(sha, date, pHID, pHTID, Y, SST, pxID, pxCID, SEC, pE, pF, CLIENT_ID, timeValue);
             expect(rtn).to.be.equal(0);

             MPIN.GET_G1_MULTIPLE(rng, 1, W, prHID, T); /* Also send T=w.ID to client, remember random w  */

             H = MPIN.HASH_ALL(sha, prHID, pxID, pxCID, SEC, Y, Z, T);
             rtn = MPIN.CLIENT_KEY(sha, G1, G2, pin, R, X, H, T, CK);
             expect(rtn).to.be.equal(0);

             H = MPIN.HASH_ALL(sha, prHID, pxID, pxCID, SEC, Y, Z, T);
             rtn = MPIN.SERVER_KEY(sha, Z, SST, W, H, pHID, pxID, pxCID, SK);
             expect(rtn).to.be.equal(0);
             expect(MPIN.bytestostring(CK)).to.be.equal(MPIN.bytestostring(SK));
             done();
         });

         it('test MPin (Full) Two Pass', function(done) {
             this.timeout(0);

             /* Set configuration */
             date = 0;
             CK = [];
             SK = [];

             var pxID = xID;
             var pxCID = null;
             var pHID = HID;
             var pHTID = null;
             var pE = null;
             var pF = null;
             var pPERMIT = null;
             var prHID = rHCID;

             rtn = MPIN.CLIENT_1(sha, date, CLIENT_ID, rng, X, pin, TOKEN, SEC, pxID, pxCID, pPERMIT);
             expect(rtn).to.be.equal(0);

             rtn = MPIN.GET_G1_MULTIPLE(rng, 0, R, prHID, Z); /* Also Send Z=r.ID to Server, remember random r */
             expect(rtn).to.be.equal(0);

             /* Server calculates H(ID) and H(T|H(ID)) (if time permits enabled), and maps them to points on the curve HID and HTID resp. */
             MPIN.SERVER_1(sha, date, CLIENT_ID, pHID, pHTID);

             /* Server generates Random number Y and sends it to Client */
             MPIN.RANDOM_GENERATE(rng, Y);

             rtn = MPIN.GET_G1_MULTIPLE(rng, 0, W, prHID, T); /* Also send T=w.ID to client, remember random w  */
             expect(rtn).to.be.equal(0);

             /* Client Second Pass: Inputs Client secret SEC, x and y. Outputs -(x+y)*SEC */
             rtn = MPIN.CLIENT_2(X, Y, SEC);
             expect(rtn).to.be.equal(0);

             /* Server Second pass. Inputs hashed client id, random Y, -(x+y)*SEC, xID and xCID and Server secret SST. E and F help kangaroos to find error. */
             /* If PIN error not required, set E and F = NULL */
             rtn = MPIN.SERVER_2(date, pHID, pHTID, Y, SST, pxID, pxCID, SEC, pE, pF);
             expect(rtn).to.be.equal(0);

             H = MPIN.HASH_ALL(sha, prHID, pxID, pxCID, SEC, Y, Z, T);
             rtn = MPIN.CLIENT_KEY(sha, G1, G2, pin, R, X, H, T, CK);
             expect(rtn).to.be.equal(0);

             H = MPIN.HASH_ALL(sha, prHID, pxID, pxCID, SEC, Y, Z, T);
             MPIN.SERVER_KEY(sha, Z, SST, W, H, pHID, pxID, pxCID, SK);
             expect(MPIN.bytestostring(CK)).to.be.equal(MPIN.bytestostring(SK));
             expect(rtn).to.be.equal(0);

             done();
         });

         it('test MPin Time Permits', function(done) {
             this.timeout(0);

             date = MPIN.today();
             var pxID = null;
             var pxCID = xCID;
             var pHID = HID;
             var pHTID = HTID;
             var pPERMIT = PERMIT;

             rtn = MPIN.CLIENT_1(sha, date, CLIENT_ID, rng, X, pin, TOKEN, SEC, pxID, pxCID, pPERMIT);
             expect(rtn).to.be.equal(0);

             /* Server calculates H(ID) and H(T|H(ID)) (if time permits enabled), and maps them to points on the curve HID and HTID resp. */
             MPIN.SERVER_1(sha, date, CLIENT_ID, pHID, pHTID);

             /* Server generates Random number Y and sends it to Client */
             MPIN.RANDOM_GENERATE(rng, Y);

             /* Client Second Pass: Inputs Client secret SEC, x and y. Outputs -(x+y)*SEC */
             rtn = MPIN.CLIENT_2(X, Y, SEC);
             expect(rtn).to.be.equal(0);

             /* Server Second pass. Inputs hashed client id, random Y, -(x+y)*SEC, xID and xCID and Server secret SST. E and F help kangaroos to find error. */
             /* If PIN error not required, set E and F = NULL */
             rtn = MPIN.SERVER_2(date, pHID, pHTID, Y, SST, pxID, pxCID, SEC, null, null);
             expect(rtn).to.be.equal(0);

             done();

         });

       	it('test MPin bad PIN', function(done) {
             this.timeout(0);

             date = 0
             var pxID = xID;
             var pxCID = null;
             var pHID = HID;
             var pHTID = null;
             var pPERMIT = null;

             timeValue = MPIN.GET_TIME();

             rtn = MPIN.CLIENT(sha, date, CLIENT_ID, rng, X, pin2, TOKEN, SEC, pxID, pxCID, pPERMIT, timeValue, Y);
             expect(rtn).to.be.equal(0);

             rtn = MPIN.SERVER(sha, date, pHID, pHTID, Y, SST, pxID, pxCID, SEC, E, F, CLIENT_ID, timeValue);
             expect(rtn).to.be.equal(MPIN.BAD_PIN);

             done();
         });

         it('test MPin Kangaroo', function(done) {
             this.timeout(0);

             /* Retrieve PIN error from bad PIN test*/
             rtn = MPIN.KANGAROO(E,F);
             expect(rtn).to.be.equal(pin2-pin);

             done();
         });

         if (tv_curves.indexOf(curve) != -1) {

             var vectors = require('../testVectors/mpin/MPIN_' + curve + '.json');
             var sha = ctx.ECP.HASH_TYPE;
             var CS = [];
             var TP = [];
             var TP1bytes = [];
             var TP2bytes = [];
             var TPbytes = [];
             var CS1bytes = [];
             var CS2bytes = [];
             var CSbytes = [];

             it('test Combine Shares in G1 ' + curve + ' with Test Vectors', function(done) {
                 this.timeout(0);

                 vectors.forEach(function(vector) {
                     CS1bytes = hextobytes(vector.CS1);
                     CS2bytes = hextobytes(vector.CS2);
                     CSbytes = hextobytes(vector.CLIENT_SECRET);
                     MPIN.RECOMBINE_G1(CS1bytes, CS2bytes, CS);
                     expect(MPIN.comparebytes(CS,CSbytes)).to.be.equal(true);

                     TP1bytes = hextobytes(vector.TP1);
                     TP2bytes = hextobytes(vector.TP2);
                     TPbytes = hextobytes(vector.TIME_PERMIT);
                     MPIN.RECOMBINE_G1(TP1bytes, TP2bytes, TP);
                     expect(MPIN.comparebytes(TP,TPbytes)).to.be.equal(true);
                 });

                 done();
             });

             it('test MPin Two Passes ' + curve + ' with Test Vectors', function(done) {
                 this.timeout(0);

                 xID = [];
                 xCID = [];
                 SEC = [];
                 Y = [];

                 vectors.forEach(function(vector) {
                     var rtn = MPIN.CLIENT_1(sha, vector.DATE, hextobytes(vector.MPIN_ID_HEX), null, hextobytes(vector.X), vector.PIN2, hextobytes(vector.TOKEN), SEC, xID, xCID, hextobytes(vector.TIME_PERMIT));
                     expect(rtn).to.be.equal(0);
                     expect(MPIN.bytestostring(xID)).to.be.equal(vector.U);
                     expect(MPIN.bytestostring(xCID)).to.be.equal(vector.UT);

                     var rtn = MPIN.CLIENT_2(hextobytes(vector.X), hextobytes(vector.Y), SEC);
                     expect(rtn).to.be.equal(0);
                     expect(MPIN.bytestostring(SEC)).to.be.equal(vector.V);
                 });

                 done();
             });

             it('test MPin One Pass ' + curve + ' with Test Vectors', function(done) {
                 this.timeout(0);

                 xID = [];
                 SEC = [];
                 Y = [];

                 vectors = require('../testVectors/mpin/MPIN_ONE_PASS_' + curve + '.json');

                 vectors.forEach(function(vector) {
                     var rtn = MPIN.CLIENT(sha, 0, hextobytes(vector.MPIN_ID_HEX), null, hextobytes(vector.X), vector.PIN2, hextobytes(vector.TOKEN), SEC, xID, null, null, vector.TimeValue, Y);
                     expect(rtn).to.be.equal(0);
                     expect(MPIN.bytestostring(xID)).to.be.equal(vector.U);
                     expect(MPIN.bytestostring(SEC)).to.be.equal(vector.SEC);
                 });

                 done();
             });
         }
     });
 });
	/*
	Licensed to the Apache Software Foundation (ASF) under one
	or more contributor license agreements. See the NOTICE file
	distributed with this work for additional information
	regarding copyright ownership. The ASF licenses this file
	to you under the Apache License, Version 2.0 (the
	"License"); you may not use this file except in compliance
	with the License. You may obtain a copy of the License at

	http://www.apache.org/licenses/LICENSE-2.0

	Unless required by applicable law or agreed to in writing,
	software distributed under the License is distributed on an
	"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
	KIND, either express or implied. See the License for the
	specific language governing permissions and limitations
	under the License.
	*/

	/* Test MPIN - test driver and function exerciser for MPIN API Functions */

	var CTX = require("../index");

	var chai = require('chai');

	var expect = chai.expect;

	// Curves for test
	var pf_curves = ['BN254', 'BN254CX', 'BLS381', 'BLS383', 'BLS461', 'FP256BN', 'FP512BN', 'BLS24', 'BLS48'];

	// Curves for test with test vectors
	var tv_curves = ['BN254CX'];

	hextobytes = function(value_hex) {
	// "use strict";
	var len, byte_value, i;

	len = value_hex.length;
	byte_value = [];

	for (i = 0; i < len; i += 2) {
	byte_value[(i / 2)] = parseInt(value_hex.substr(i, 2), 16);
	}
	return byte_value;
	};

	pf_curves.forEach(function(curve) {

	describe('TEST MPIN ' + curve, function() {

	var ctx = new CTX(curve),
	rng = new ctx.RAND(),
	MPIN, EGS, EFS, G1S, G2S,
	S1 = [],
	S2 = [],
	SST1 = [],
	SST2 = [],
	TOKEN1 = [],
	TOKEN2 = [],
	PERMIT1 = [],
	PERMIT2 = [],
	SST = [],
	TOKEN = [],
	bakSECRET = [],
	SECRET = [],
	PERMIT = [],
	SEC = [],
	xID = [],
	xCID = [],
	X = [],
	Y = [],
	E = [],
	F = [],
	HCID = [],
	rHCID = [],
	HID = [],
	HTID = [],

	G1 = [],
	G2 = [],
	R = [],
	Z = [],
	W = [],
	T = [],
	CK = [],
	SK = [],

	sha = ctx.ECP.HASH_TYPE,

	IDstr = "testUser@milagro.com",
	pin = 1234,
	pin2 = 2345,
	CLIENT_ID, date;

	if (ctx.ECP.CURVE_PAIRING_TYPE === 1 \| ctx.ECP.CURVE_PAIRING_TYPE === 2) {
	MPIN = ctx.MPIN;
	G2S = 4 * MPIN.EFS;
	} else if (ctx.ECP.CURVE_PAIRING_TYPE === 3) {
	MPIN = ctx.MPIN192;
	G2S = 8 * MPIN.EFS;
	} else if (ctx.ECP.CURVE_PAIRING_TYPE === 4) {
	MPIN = ctx.MPIN256;
	G2S = 16 * MPIN.EFS;
	}
	EGS = MPIN.EGS;
	EFS = MPIN.EFS;
	G1S = 2 * EFS + 1;

	before(function(done) {
	this.timeout(0);

	var RAW = [];
	rng.clean();
	for (var j = 0; j < 100; j++) RAW[j] = j;
	rng.seed(100, RAW);

	/* Trusted Authorities set-up */
	MPIN.RANDOM_GENERATE(rng, S1);
	MPIN.RANDOM_GENERATE(rng, S2);

	/* Create Client Identity */
	CLIENT_ID = MPIN.stringtobytes(IDstr);
	HCID = MPIN.HASH_ID(sha, CLIENT_ID); /* Either Client or TA calculates Hash(ID) - you decide! */
	ctx.ECP.mapit(HCID).toBytes(rHCID);

	/* Client and Server are issued secrets by the DTAs */
	MPIN.GET_SERVER_SECRET(S1, SST1);
	MPIN.GET_SERVER_SECRET(S2, SST2);
	MPIN.RECOMBINE_G2(SST1, SST2, SST);

	MPIN.GET_CLIENT_SECRET(S1, HCID, TOKEN1);
	MPIN.GET_CLIENT_SECRET(S2, HCID, TOKEN2);
	MPIN.RECOMBINE_G1(TOKEN1, TOKEN2, TOKEN);

	SECRET = TOKEN.slice();
	MPIN.EXTRACT_PIN(sha, CLIENT_ID, pin, TOKEN);
	MPIN.PRECOMPUTE(TOKEN, HCID, G1, G2);

	/* Client gets "Time Token" permit from DTA */
	date = MPIN.today();
	MPIN.GET_CLIENT_PERMIT(sha, date, S1, HCID, PERMIT1);
	MPIN.GET_CLIENT_PERMIT(sha, date, S2, HCID, PERMIT2);
	MPIN.RECOMBINE_G1(PERMIT1,PERMIT2,PERMIT);

	/* This encoding makes Time permit look random - Elligator squared */
	MPIN.ENCODING(rng, PERMIT);
	MPIN.DECODING(PERMIT);

	done();
	});

	it('test extract/restore factors', function(done) {
	bakSECRET = SECRET.slice();
	MPIN.EXTRACT_FACTOR(sha, CLIENT_ID, pin%MPIN.MAXPIN,MPIN.PBLEN,SECRET);
	MPIN.RESTORE_FACTOR(sha, CLIENT_ID, pin%MPIN.MAXPIN,MPIN.PBLEN,SECRET);
	expect(MPIN.comparebytes(SECRET,bakSECRET)).to.be.true;
	done();
	})

	it('test MPin (Full) One Pass', function(done) {
	this.timeout(0);

	date = 0;
	CK = [];
	SK = [];

	var pxID = xID;
	var pxCID = null;
	var pHID = HID;
	var pHTID = null;
	var pE = null;
	var pF = null;
	var pPERMIT = null;
	var prHID = HCID;

	timeValue = MPIN.GET_TIME();

	rtn = MPIN.CLIENT(sha, date, CLIENT_ID, rng, X, pin, TOKEN, SEC, pxID, pxCID, pPERMIT, timeValue, Y);
	expect(rtn).to.be.equal(0);

	MPIN.GET_G1_MULTIPLE(rng, 1, R, prHID, Z); /* Also Send Z=r.ID to Server, remember random r */

	rtn = MPIN.SERVER(sha, date, pHID, pHTID, Y, SST, pxID, pxCID, SEC, pE, pF, CLIENT_ID, timeValue);
	expect(rtn).to.be.equal(0);

	MPIN.GET_G1_MULTIPLE(rng, 1, W, prHID, T); /* Also send T=w.ID to client, remember random w */

	H = MPIN.HASH_ALL(sha, prHID, pxID, pxCID, SEC, Y, Z, T);
	rtn = MPIN.CLIENT_KEY(sha, G1, G2, pin, R, X, H, T, CK);
	expect(rtn).to.be.equal(0);

	H = MPIN.HASH_ALL(sha, prHID, pxID, pxCID, SEC, Y, Z, T);
	rtn = MPIN.SERVER_KEY(sha, Z, SST, W, H, pHID, pxID, pxCID, SK);
	expect(rtn).to.be.equal(0);
	expect(MPIN.bytestostring(CK)).to.be.equal(MPIN.bytestostring(SK));
	done();
	});

	it('test MPin (Full) Two Pass', function(done) {
	this.timeout(0);

	/* Set configuration */
	date = 0;
	CK = [];
	SK = [];

	var pxID = xID;
	var pxCID = null;
	var pHID = HID;
	var pHTID = null;
	var pE = null;
	var pF = null;
	var pPERMIT = null;
	var prHID = rHCID;

	rtn = MPIN.CLIENT_1(sha, date, CLIENT_ID, rng, X, pin, TOKEN, SEC, pxID, pxCID, pPERMIT);
	expect(rtn).to.be.equal(0);

	rtn = MPIN.GET_G1_MULTIPLE(rng, 0, R, prHID, Z); /* Also Send Z=r.ID to Server, remember random r */
	expect(rtn).to.be.equal(0);

	/* Server calculates H(ID) and H(T\|H(ID)) (if time permits enabled), and maps them to points on the curve HID and HTID resp. */
	MPIN.SERVER_1(sha, date, CLIENT_ID, pHID, pHTID);

	/* Server generates Random number Y and sends it to Client */
	MPIN.RANDOM_GENERATE(rng, Y);

	rtn = MPIN.GET_G1_MULTIPLE(rng, 0, W, prHID, T); /* Also send T=w.ID to client, remember random w */
	expect(rtn).to.be.equal(0);

	/* Client Second Pass: Inputs Client secret SEC, x and y. Outputs -(x+y)SEC /
	rtn = MPIN.CLIENT_2(X, Y, SEC);
	expect(rtn).to.be.equal(0);

	/* Server Second pass. Inputs hashed client id, random Y, -(x+y)SEC, xID and xCID and Server secret SST. E and F help kangaroos to find error. /
	/* If PIN error not required, set E and F = NULL */
	rtn = MPIN.SERVER_2(date, pHID, pHTID, Y, SST, pxID, pxCID, SEC, pE, pF);
	expect(rtn).to.be.equal(0);

	H = MPIN.HASH_ALL(sha, prHID, pxID, pxCID, SEC, Y, Z, T);
	rtn = MPIN.CLIENT_KEY(sha, G1, G2, pin, R, X, H, T, CK);
	expect(rtn).to.be.equal(0);

	H = MPIN.HASH_ALL(sha, prHID, pxID, pxCID, SEC, Y, Z, T);
	MPIN.SERVER_KEY(sha, Z, SST, W, H, pHID, pxID, pxCID, SK);
	expect(MPIN.bytestostring(CK)).to.be.equal(MPIN.bytestostring(SK));
	expect(rtn).to.be.equal(0);

	done();
	});

	it('test MPin Time Permits', function(done) {
	this.timeout(0);

	date = MPIN.today();
	var pxID = null;
	var pxCID = xCID;
	var pHID = HID;
	var pHTID = HTID;
	var pPERMIT = PERMIT;

	rtn = MPIN.CLIENT_1(sha, date, CLIENT_ID, rng, X, pin, TOKEN, SEC, pxID, pxCID, pPERMIT);
	expect(rtn).to.be.equal(0);

	/* Server calculates H(ID) and H(T\|H(ID)) (if time permits enabled), and maps them to points on the curve HID and HTID resp. */
	MPIN.SERVER_1(sha, date, CLIENT_ID, pHID, pHTID);

	/* Server generates Random number Y and sends it to Client */
	MPIN.RANDOM_GENERATE(rng, Y);

	/* Client Second Pass: Inputs Client secret SEC, x and y. Outputs -(x+y)SEC /
	rtn = MPIN.CLIENT_2(X, Y, SEC);
	expect(rtn).to.be.equal(0);

	/* Server Second pass. Inputs hashed client id, random Y, -(x+y)SEC, xID and xCID and Server secret SST. E and F help kangaroos to find error. /
	/* If PIN error not required, set E and F = NULL */
	rtn = MPIN.SERVER_2(date, pHID, pHTID, Y, SST, pxID, pxCID, SEC, null, null);
	expect(rtn).to.be.equal(0);

	done();

	});

	it('test MPin bad PIN', function(done) {
	this.timeout(0);

	date = 0
	var pxID = xID;
	var pxCID = null;
	var pHID = HID;
	var pHTID = null;
	var pPERMIT = null;

	timeValue = MPIN.GET_TIME();

	rtn = MPIN.CLIENT(sha, date, CLIENT_ID, rng, X, pin2, TOKEN, SEC, pxID, pxCID, pPERMIT, timeValue, Y);
	expect(rtn).to.be.equal(0);

	rtn = MPIN.SERVER(sha, date, pHID, pHTID, Y, SST, pxID, pxCID, SEC, E, F, CLIENT_ID, timeValue);
	expect(rtn).to.be.equal(MPIN.BAD_PIN);

	done();
	});

	it('test MPin Kangaroo', function(done) {
	this.timeout(0);

	/* Retrieve PIN error from bad PIN test*/
	rtn = MPIN.KANGAROO(E,F);
	expect(rtn).to.be.equal(pin2-pin);

	done();
	});

	if (tv_curves.indexOf(curve) != -1) {

	var vectors = require('../testVectors/mpin/MPIN_' + curve + '.json');
	var sha = ctx.ECP.HASH_TYPE;
	var CS = [];
	var TP = [];
	var TP1bytes = [];
	var TP2bytes = [];
	var TPbytes = [];
	var CS1bytes = [];
	var CS2bytes = [];
	var CSbytes = [];

	it('test Combine Shares in G1 ' + curve + ' with Test Vectors', function(done) {
	this.timeout(0);

	vectors.forEach(function(vector) {
	CS1bytes = hextobytes(vector.CS1);
	CS2bytes = hextobytes(vector.CS2);
	CSbytes = hextobytes(vector.CLIENT_SECRET);
	MPIN.RECOMBINE_G1(CS1bytes, CS2bytes, CS);
	expect(MPIN.comparebytes(CS,CSbytes)).to.be.equal(true);

	TP1bytes = hextobytes(vector.TP1);
	TP2bytes = hextobytes(vector.TP2);
	TPbytes = hextobytes(vector.TIME_PERMIT);
	MPIN.RECOMBINE_G1(TP1bytes, TP2bytes, TP);
	expect(MPIN.comparebytes(TP,TPbytes)).to.be.equal(true);
	});

	done();
	});

	it('test MPin Two Passes ' + curve + ' with Test Vectors', function(done) {
	this.timeout(0);

	xID = [];
	xCID = [];
	SEC = [];
	Y = [];

	vectors.forEach(function(vector) {
	var rtn = MPIN.CLIENT_1(sha, vector.DATE, hextobytes(vector.MPIN_ID_HEX), null, hextobytes(vector.X), vector.PIN2, hextobytes(vector.TOKEN), SEC, xID, xCID, hextobytes(vector.TIME_PERMIT));
	expect(rtn).to.be.equal(0);
	expect(MPIN.bytestostring(xID)).to.be.equal(vector.U);
	expect(MPIN.bytestostring(xCID)).to.be.equal(vector.UT);

	var rtn = MPIN.CLIENT_2(hextobytes(vector.X), hextobytes(vector.Y), SEC);
	expect(rtn).to.be.equal(0);
	expect(MPIN.bytestostring(SEC)).to.be.equal(vector.V);
	});

	done();
	});

	it('test MPin One Pass ' + curve + ' with Test Vectors', function(done) {
	this.timeout(0);

	xID = [];
	SEC = [];
	Y = [];

	vectors = require('../testVectors/mpin/MPIN_ONE_PASS_' + curve + '.json');

	vectors.forEach(function(vector) {
	var rtn = MPIN.CLIENT(sha, 0, hextobytes(vector.MPIN_ID_HEX), null, hextobytes(vector.X), vector.PIN2, hextobytes(vector.TOKEN), SEC, xID, null, null, vector.TimeValue, Y);
	expect(rtn).to.be.equal(0);
	expect(MPIN.bytestostring(xID)).to.be.equal(vector.U);
	expect(MPIN.bytestostring(SEC)).to.be.equal(vector.SEC);
	});

	done();
	});
	}
	});
	});