1c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org/* crypto/ec/ecp_mont.c */ 2c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org/* 3c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * Originally written by Bodo Moeller for the OpenSSL project. 4c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org */ 5c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org/* ==================================================================== 6c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * Copyright (c) 1998-2001 The OpenSSL Project. All rights reserved. 7c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 8c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * Redistribution and use in source and binary forms, with or without 9c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * modification, are permitted provided that the following conditions 10c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * are met: 11c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 12c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 1. Redistributions of source code must retain the above copyright 13c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * notice, this list of conditions and the following disclaimer. 14c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 15c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 2. Redistributions in binary form must reproduce the above copyright 16c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * notice, this list of conditions and the following disclaimer in 17c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * the documentation and/or other materials provided with the 18c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * distribution. 19c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 20c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 3. All advertising materials mentioning features or use of this 21c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * software must display the following acknowledgment: 22c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * "This product includes software developed by the OpenSSL Project 23c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * for use in the OpenSSL Toolkit. (http://www.openssl.org/)" 24c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 25c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to 26c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * endorse or promote products derived from this software without 27c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * prior written permission. For written permission, please contact 28c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * openssl-core@openssl.org. 29c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 30c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 5. Products derived from this software may not be called "OpenSSL" 31c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * nor may "OpenSSL" appear in their names without prior written 32c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * permission of the OpenSSL Project. 33c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 34c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 6. Redistributions of any form whatsoever must retain the following 35c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * acknowledgment: 36c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * "This product includes software developed by the OpenSSL Project 37c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * for use in the OpenSSL Toolkit (http://www.openssl.org/)" 38c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 39c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY 40c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 41c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 42c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR 43c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 44c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 45c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 46c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 47c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 48c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 49c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED 50c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * OF THE POSSIBILITY OF SUCH DAMAGE. 51c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * ==================================================================== 52c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 53c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * This product includes cryptographic software written by Eric Young 54c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * (eay@cryptsoft.com). This product includes software written by Tim 55c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * Hudson (tjh@cryptsoft.com). 56c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * 57c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org */ 58c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org/* ==================================================================== 59c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED. 60c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * Portions of this software developed by SUN MICROSYSTEMS, INC., 61c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org * and contributed to the OpenSSL project. 62c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org */ 63c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 64c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org#include <openssl/err.h> 65c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 662c4508dfe2bc5b6296c01114ed11ddc64b7718c6digit@chromium.org#ifdef OPENSSL_FIPS 672c4508dfe2bc5b6296c01114ed11ddc64b7718c6digit@chromium.org#include <openssl/fips.h> 682c4508dfe2bc5b6296c01114ed11ddc64b7718c6digit@chromium.org#endif 692c4508dfe2bc5b6296c01114ed11ddc64b7718c6digit@chromium.org 70c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org#include "ec_lcl.h" 71c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 72c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 73c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgconst EC_METHOD *EC_GFp_mont_method(void) 74c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 752c4508dfe2bc5b6296c01114ed11ddc64b7718c6digit@chromium.org#ifdef OPENSSL_FIPS 762c4508dfe2bc5b6296c01114ed11ddc64b7718c6digit@chromium.org return fips_ec_gfp_mont_method(); 772c4508dfe2bc5b6296c01114ed11ddc64b7718c6digit@chromium.org#else 78c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org static const EC_METHOD ret = { 792c4508dfe2bc5b6296c01114ed11ddc64b7718c6digit@chromium.org EC_FLAGS_DEFAULT_OCT, 80c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org NID_X9_62_prime_field, 81c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_mont_group_init, 82c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_mont_group_finish, 83c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_mont_group_clear_finish, 84c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_mont_group_copy, 85c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_mont_group_set_curve, 86c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_group_get_curve, 87c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_group_get_degree, 88c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_group_check_discriminant, 89c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_point_init, 90c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_point_finish, 91c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_point_clear_finish, 92c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_point_copy, 93c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_point_set_to_infinity, 94c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_set_Jprojective_coordinates_GFp, 95c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_get_Jprojective_coordinates_GFp, 96c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_point_set_affine_coordinates, 97c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_point_get_affine_coordinates, 982c4508dfe2bc5b6296c01114ed11ddc64b7718c6digit@chromium.org 0,0,0, 99c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_add, 100c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_dbl, 101c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_invert, 102c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_is_at_infinity, 103c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_is_on_curve, 104c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_cmp, 105c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_make_affine, 106c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_points_make_affine, 107c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0 /* mul */, 108c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0 /* precompute_mult */, 109c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0 /* have_precompute_mult */, 110c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_mont_field_mul, 111c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_mont_field_sqr, 112c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 0 /* field_div */, 113c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_mont_field_encode, 114c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_mont_field_decode, 115c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_mont_field_set_to_one }; 116c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 117c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return &ret; 1182c4508dfe2bc5b6296c01114ed11ddc64b7718c6digit@chromium.org#endif 119c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 120c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 121c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 122c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgint ec_GFp_mont_group_init(EC_GROUP *group) 123c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 124c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org int ok; 125c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 126c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ok = ec_GFp_simple_group_init(group); 127c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org group->field_data1 = NULL; 128c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org group->field_data2 = NULL; 129c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return ok; 130c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 131c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 132c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 133c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgvoid ec_GFp_mont_group_finish(EC_GROUP *group) 134c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 135c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (group->field_data1 != NULL) 136c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 137c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org BN_MONT_CTX_free(group->field_data1); 138c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org group->field_data1 = NULL; 139c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 140c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (group->field_data2 != NULL) 141c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 142c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org BN_free(group->field_data2); 143c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org group->field_data2 = NULL; 144c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 145c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_group_finish(group); 146c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 147c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 148c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 149c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgvoid ec_GFp_mont_group_clear_finish(EC_GROUP *group) 150c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 151c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (group->field_data1 != NULL) 152c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 153c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org BN_MONT_CTX_free(group->field_data1); 154c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org group->field_data1 = NULL; 155c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 156c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (group->field_data2 != NULL) 157c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 158c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org BN_clear_free(group->field_data2); 159c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org group->field_data2 = NULL; 160c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 161c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ec_GFp_simple_group_clear_finish(group); 162c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 163c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 164c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 165c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgint ec_GFp_mont_group_copy(EC_GROUP *dest, const EC_GROUP *src) 166c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 167c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (dest->field_data1 != NULL) 168c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 169c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org BN_MONT_CTX_free(dest->field_data1); 170c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org dest->field_data1 = NULL; 171c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 172c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (dest->field_data2 != NULL) 173c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 174c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org BN_clear_free(dest->field_data2); 175c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org dest->field_data2 = NULL; 176c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 177c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 178c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (!ec_GFp_simple_group_copy(dest, src)) return 0; 179c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 180c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (src->field_data1 != NULL) 181c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 182c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org dest->field_data1 = BN_MONT_CTX_new(); 183c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (dest->field_data1 == NULL) return 0; 184c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (!BN_MONT_CTX_copy(dest->field_data1, src->field_data1)) goto err; 185c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 186c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (src->field_data2 != NULL) 187c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 188c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org dest->field_data2 = BN_dup(src->field_data2); 189c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (dest->field_data2 == NULL) goto err; 190c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 191c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 192c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return 1; 193c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 194c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org err: 195c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (dest->field_data1 != NULL) 196c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 197c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org BN_MONT_CTX_free(dest->field_data1); 198c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org dest->field_data1 = NULL; 199c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 200c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return 0; 201c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 202c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 203c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 204c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgint ec_GFp_mont_group_set_curve(EC_GROUP *group, const BIGNUM *p, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx) 205c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 206c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org BN_CTX *new_ctx = NULL; 207c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org BN_MONT_CTX *mont = NULL; 208c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org BIGNUM *one = NULL; 209c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org int ret = 0; 210c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 211c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (group->field_data1 != NULL) 212c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 213c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org BN_MONT_CTX_free(group->field_data1); 214c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org group->field_data1 = NULL; 215c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 216c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (group->field_data2 != NULL) 217c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 218c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org BN_free(group->field_data2); 219c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org group->field_data2 = NULL; 220c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 221c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 222c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (ctx == NULL) 223c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 224c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ctx = new_ctx = BN_CTX_new(); 225c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (ctx == NULL) 226c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return 0; 227c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 228c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 229c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org mont = BN_MONT_CTX_new(); 230c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (mont == NULL) goto err; 231c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (!BN_MONT_CTX_set(mont, p, ctx)) 232c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 233c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ECerr(EC_F_EC_GFP_MONT_GROUP_SET_CURVE, ERR_R_BN_LIB); 234c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org goto err; 235c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 236c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org one = BN_new(); 237c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (one == NULL) goto err; 238c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (!BN_to_montgomery(one, BN_value_one(), mont, ctx)) goto err; 239c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 240c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org group->field_data1 = mont; 241c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org mont = NULL; 242c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org group->field_data2 = one; 243c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org one = NULL; 244c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 245c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ret = ec_GFp_simple_group_set_curve(group, p, a, b, ctx); 246c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 247c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (!ret) 248c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 249c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org BN_MONT_CTX_free(group->field_data1); 250c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org group->field_data1 = NULL; 251c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org BN_free(group->field_data2); 252c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org group->field_data2 = NULL; 253c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 254c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 255c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org err: 256c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (new_ctx != NULL) 257c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org BN_CTX_free(new_ctx); 258c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (mont != NULL) 259c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org BN_MONT_CTX_free(mont); 260c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return ret; 261c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 262c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 263c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 264c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgint ec_GFp_mont_field_mul(const EC_GROUP *group, BIGNUM *r, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx) 265c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 266c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (group->field_data1 == NULL) 267c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 268c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ECerr(EC_F_EC_GFP_MONT_FIELD_MUL, EC_R_NOT_INITIALIZED); 269c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return 0; 270c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 271c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 272c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return BN_mod_mul_montgomery(r, a, b, group->field_data1, ctx); 273c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 274c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 275c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 276c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgint ec_GFp_mont_field_sqr(const EC_GROUP *group, BIGNUM *r, const BIGNUM *a, BN_CTX *ctx) 277c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 278c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (group->field_data1 == NULL) 279c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 280c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ECerr(EC_F_EC_GFP_MONT_FIELD_SQR, EC_R_NOT_INITIALIZED); 281c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return 0; 282c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 283c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 284c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return BN_mod_mul_montgomery(r, a, a, group->field_data1, ctx); 285c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 286c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 287c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 288c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgint ec_GFp_mont_field_encode(const EC_GROUP *group, BIGNUM *r, const BIGNUM *a, BN_CTX *ctx) 289c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 290c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (group->field_data1 == NULL) 291c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 292c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ECerr(EC_F_EC_GFP_MONT_FIELD_ENCODE, EC_R_NOT_INITIALIZED); 293c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return 0; 294c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 295c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 296c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return BN_to_montgomery(r, a, (BN_MONT_CTX *)group->field_data1, ctx); 297c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 298c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 299c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 300c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgint ec_GFp_mont_field_decode(const EC_GROUP *group, BIGNUM *r, const BIGNUM *a, BN_CTX *ctx) 301c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 302c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (group->field_data1 == NULL) 303c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 304c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ECerr(EC_F_EC_GFP_MONT_FIELD_DECODE, EC_R_NOT_INITIALIZED); 305c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return 0; 306c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 307c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 308c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return BN_from_montgomery(r, a, group->field_data1, ctx); 309c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 310c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 311c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 312c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.orgint ec_GFp_mont_field_set_to_one(const EC_GROUP *group, BIGNUM *r, BN_CTX *ctx) 313c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 314c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (group->field_data2 == NULL) 315c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org { 316c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org ECerr(EC_F_EC_GFP_MONT_FIELD_SET_TO_ONE, EC_R_NOT_INITIALIZED); 317c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return 0; 318c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 319c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org 320c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org if (!BN_copy(r, group->field_data2)) return 0; 321c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org return 1; 322c9490d33b98b7affb729b5f1db13cb0a348471aagl@chromium.org } 323