ec2_smpl.c revision 7b476c43f6a45574eb34697244b592e7b09f05a3
15faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org/* crypto/ec/ec2_smpl.c */ 25faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org/* ==================================================================== 35faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED. 45faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org * 55faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org * The Elliptic Curve Public-Key Crypto Library (ECC Code) included 65faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org * herein is developed by SUN MICROSYSTEMS, INC., and is contributed 75faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org * to the OpenSSL project. 85faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org * 95faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org * The ECC Code is licensed pursuant to the OpenSSL open source 105faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org * license provided below. 118b0e8ac5f582de80356019406e2975079bf0829dcommit-bot@chromium.org * 128b0e8ac5f582de80356019406e2975079bf0829dcommit-bot@chromium.org * The software is originally written by Sheueling Chang Shantz and 135faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org * Douglas Stebila of Sun Microsystems Laboratories. 148640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org * 155faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org */ 163bc16c8bc1ecb9ac4450f58093cc9e3edb8a50b8senorblanco@chromium.org/* ==================================================================== 17ac9779234ef7a8cf3d791ab7690ef8c388662836joshualitt * Copyright (c) 1998-2005 The OpenSSL Project. All rights reserved. 183bc16c8bc1ecb9ac4450f58093cc9e3edb8a50b8senorblanco@chromium.org * 193bc16c8bc1ecb9ac4450f58093cc9e3edb8a50b8senorblanco@chromium.org * Redistribution and use in source and binary forms, with or without 20aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * modification, are permitted provided that the following conditions 21aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * are met: 22aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * 23aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * 1. Redistributions of source code must retain the above copyright 247938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org * notice, this list of conditions and the following disclaimer. 257938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org * 267938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org * 2. Redistributions in binary form must reproduce the above copyright 277938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org * notice, this list of conditions and the following disclaimer in 287938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org * the documentation and/or other materials provided with the 29cac5fd597f6e2495f50aaa6bcbe3dadc56f0b977commit-bot@chromium.org * distribution. 307938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org * 317938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org * 3. All advertising materials mentioning features or use of this 327938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org * software must display the following acknowledgment: 335e5f948b6b363dbfc8c076d8ff0c6b8e9ea99958senorblanco * "This product includes software developed by the OpenSSL Project 345e5f948b6b363dbfc8c076d8ff0c6b8e9ea99958senorblanco * for use in the OpenSSL Toolkit. (http://www.openssl.org/)" 355e5f948b6b363dbfc8c076d8ff0c6b8e9ea99958senorblanco * 365faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to 375faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org * endorse or promote products derived from this software without 385faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org * prior written permission. For written permission, please contact 39cac5fd597f6e2495f50aaa6bcbe3dadc56f0b977commit-bot@chromium.org * openssl-core@openssl.org. 408640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org * 418640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org * 5. Products derived from this software may not be called "OpenSSL" 42aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * nor may "OpenSSL" appear in their names without prior written 435faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org * permission of the OpenSSL Project. 445faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org * 453bc16c8bc1ecb9ac4450f58093cc9e3edb8a50b8senorblanco@chromium.org * 6. Redistributions of any form whatsoever must retain the following 46cac5fd597f6e2495f50aaa6bcbe3dadc56f0b977commit-bot@chromium.org * acknowledgment: 47cac5fd597f6e2495f50aaa6bcbe3dadc56f0b977commit-bot@chromium.org * "This product includes software developed by the OpenSSL Project 485faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org * for use in the OpenSSL Toolkit (http://www.openssl.org/)" 495faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org * 50aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY 51aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 52aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 53aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR 54aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 55aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 56aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 57aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 58aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 59aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 60aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED 61aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * OF THE POSSIBILITY OF SUCH DAMAGE. 62aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * ==================================================================== 63aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * 64aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * This product includes cryptographic software written by Eric Young 65aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * (eay@cryptsoft.com). This product includes software written by Tim 66aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * Hudson (tjh@cryptsoft.com). 67aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White * 68aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White */ 69aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White 70aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White#include <openssl/err.h> 71aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White 72aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White#include "ec_lcl.h" 73aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White 74aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White 759fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reedconst EC_METHOD *EC_GF2m_simple_method(void) 769fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed { 779fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed static const EC_METHOD ret = { 789fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed NID_X9_62_characteristic_two_field, 799fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed ec_GF2m_simple_group_init, 809fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed ec_GF2m_simple_group_finish, 819fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed ec_GF2m_simple_group_clear_finish, 829fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed ec_GF2m_simple_group_copy, 839fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed ec_GF2m_simple_group_set_curve, 849fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed ec_GF2m_simple_group_get_curve, 859fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed ec_GF2m_simple_group_get_degree, 869fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed ec_GF2m_simple_group_check_discriminant, 879fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed ec_GF2m_simple_point_init, 888b0e8ac5f582de80356019406e2975079bf0829dcommit-bot@chromium.org ec_GF2m_simple_point_finish, 89ce33d60187718e7bb01944ee130c9f5d9fb335eccommit-bot@chromium.org ec_GF2m_simple_point_clear_finish, 905faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org ec_GF2m_simple_point_copy, 915faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org ec_GF2m_simple_point_set_to_infinity, 92d594dbec0407343b7ac13af9c4580ec5933ab060commit-bot@chromium.org 0 /* set_Jprojective_coordinates_GFp */, 93d594dbec0407343b7ac13af9c4580ec5933ab060commit-bot@chromium.org 0 /* get_Jprojective_coordinates_GFp */, 94d594dbec0407343b7ac13af9c4580ec5933ab060commit-bot@chromium.org ec_GF2m_simple_point_set_affine_coordinates, 95d594dbec0407343b7ac13af9c4580ec5933ab060commit-bot@chromium.org ec_GF2m_simple_point_get_affine_coordinates, 96aafcb54f27d30c63602a0a0232f0b9fc8b310d19Stephen White ec_GF2m_simple_set_compressed_coordinates, 97025128811219dc45fd99b6c4d1d14f833cf7a26ecommit-bot@chromium.org ec_GF2m_simple_point2oct, 98d594dbec0407343b7ac13af9c4580ec5933ab060commit-bot@chromium.org ec_GF2m_simple_oct2point, 99025128811219dc45fd99b6c4d1d14f833cf7a26ecommit-bot@chromium.org ec_GF2m_simple_add, 100025128811219dc45fd99b6c4d1d14f833cf7a26ecommit-bot@chromium.org ec_GF2m_simple_dbl, 101d594dbec0407343b7ac13af9c4580ec5933ab060commit-bot@chromium.org ec_GF2m_simple_invert, 102d594dbec0407343b7ac13af9c4580ec5933ab060commit-bot@chromium.org ec_GF2m_simple_is_at_infinity, 103d594dbec0407343b7ac13af9c4580ec5933ab060commit-bot@chromium.org ec_GF2m_simple_is_on_curve, 1045faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org ec_GF2m_simple_cmp, 1055faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org ec_GF2m_simple_make_affine, 106cac5fd597f6e2495f50aaa6bcbe3dadc56f0b977commit-bot@chromium.org ec_GF2m_simple_points_make_affine, 107cac5fd597f6e2495f50aaa6bcbe3dadc56f0b977commit-bot@chromium.org 1085faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org /* the following three method functions are defined in ec2_mult.c */ 1098640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org ec_GF2m_simple_mul, 110d594dbec0407343b7ac13af9c4580ec5933ab060commit-bot@chromium.org ec_GF2m_precompute_mult, 111d594dbec0407343b7ac13af9c4580ec5933ab060commit-bot@chromium.org ec_GF2m_have_precompute_mult, 112c0b7e10c6a68f59e1653e6c18e6bc954b3c3f0cfcommit-bot@chromium.org 11356d135c03e1d38f0b9e17d79a3cbf8db2a915086sugoi ec_GF2m_simple_field_mul, 11456d135c03e1d38f0b9e17d79a3cbf8db2a915086sugoi ec_GF2m_simple_field_sqr, 11556d135c03e1d38f0b9e17d79a3cbf8db2a915086sugoi ec_GF2m_simple_field_div, 1165faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org 0 /* field_encode */, 1179fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed 0 /* field_decode */, 1189fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed 0 /* field_set_to_one */ }; 1199fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed 1209fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed return &ret; 1219fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed } 1229fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed 1239fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed 1249fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed/* Initialize a GF(2^m)-based EC_GROUP structure. 1259fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed * Note that all other members are handled by EC_GROUP_new. 1269fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed */ 1279fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reedint ec_GF2m_simple_group_init(EC_GROUP *group) 1289fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed { 1299fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed BN_init(&group->field); 1309fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed BN_init(&group->a); 1319fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed BN_init(&group->b); 1329fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed return 1; 1339fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed } 1349fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed 1359fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed 1369fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed/* Free a GF(2^m)-based EC_GROUP structure. 1379fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed * Note that all other members are handled by EC_GROUP_free. 1389fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed */ 1399fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reedvoid ec_GF2m_simple_group_finish(EC_GROUP *group) 1409fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed { 1419fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed BN_free(&group->field); 1425e5f948b6b363dbfc8c076d8ff0c6b8e9ea99958senorblanco BN_free(&group->a); 1439fa60daad4d5f54c0dbe3dbcc7608a8f6d721187reed BN_free(&group->b); 1445faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org } 1458b0e8ac5f582de80356019406e2975079bf0829dcommit-bot@chromium.org 1465faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org 1475faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org/* Clear and free a GF(2^m)-based EC_GROUP structure. 1485faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org * Note that all other members are handled by EC_GROUP_clear_free. 1495faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org */ 1505faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.orgvoid ec_GF2m_simple_group_clear_finish(EC_GROUP *group) 1515faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org { 152cac5fd597f6e2495f50aaa6bcbe3dadc56f0b977commit-bot@chromium.org BN_clear_free(&group->field); 153cac5fd597f6e2495f50aaa6bcbe3dadc56f0b977commit-bot@chromium.org BN_clear_free(&group->a); 1545faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org BN_clear_free(&group->b); 1558640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org group->poly[0] = 0; 1565faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org group->poly[1] = 0; 1575faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org group->poly[2] = 0; 1585faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org group->poly[3] = 0; 1595faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org group->poly[4] = 0; 1605faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org group->poly[5] = -1; 1615faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org } 1625faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org 1635faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org 1647938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org/* Copy a GF(2^m)-based EC_GROUP structure. 1655faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org * Note that all other members are handled by EC_GROUP_copy. 1665faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org */ 1675faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.orgint ec_GF2m_simple_group_copy(EC_GROUP *dest, const EC_GROUP *src) 1685faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org { 1695faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org int i; 1705faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org if (!BN_copy(&dest->field, &src->field)) return 0; 1717938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org if (!BN_copy(&dest->a, &src->a)) return 0; 1727938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org if (!BN_copy(&dest->b, &src->b)) return 0; 1737938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org dest->poly[0] = src->poly[0]; 1745faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org dest->poly[1] = src->poly[1]; 1755faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org dest->poly[2] = src->poly[2]; 1765faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org dest->poly[3] = src->poly[3]; 1775faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org dest->poly[4] = src->poly[4]; 1785faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org dest->poly[5] = src->poly[5]; 1795faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org if (bn_wexpand(&dest->a, (int)(dest->poly[0] + BN_BITS2 - 1) / BN_BITS2) == NULL) return 0; 1807938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org if (bn_wexpand(&dest->b, (int)(dest->poly[0] + BN_BITS2 - 1) / BN_BITS2) == NULL) return 0; 1817938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org for (i = dest->a.top; i < dest->a.dmax; i++) dest->a.d[i] = 0; 1827938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org for (i = dest->b.top; i < dest->b.dmax; i++) dest->b.d[i] = 0; 1837938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org return 1; 1847938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org } 1855faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org 1867938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org 1877938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org/* Set the curve parameters of an EC_GROUP structure. */ 1885faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.orgint ec_GF2m_simple_group_set_curve(EC_GROUP *group, 1895faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org const BIGNUM *p, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx) 1905faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org { 1915faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org int ret = 0, i; 1925faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org 1935faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org /* group->field */ 1945faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org if (!BN_copy(&group->field, p)) goto err; 1957938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org i = BN_GF2m_poly2arr(&group->field, group->poly, 6) - 1; 1967938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org if ((i != 5) && (i != 3)) 1975faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org { 1985faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org ECerr(EC_F_EC_GF2M_SIMPLE_GROUP_SET_CURVE, EC_R_UNSUPPORTED_FIELD); 1995faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org goto err; 2005faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org } 2015faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org 2025faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org /* group->a */ 2035faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org if (!BN_GF2m_mod_arr(&group->a, a, group->poly)) goto err; 2048640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org if(bn_wexpand(&group->a, (int)(group->poly[0] + BN_BITS2 - 1) / BN_BITS2) == NULL) goto err; 2057938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org for (i = group->a.top; i < group->a.dmax; i++) group->a.d[i] = 0; 2067938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org 2078c7372bbe8949f2864bd3d9df00d85c5669a74b1senorblanco@chromium.org /* group->b */ 208ae761f7545d8ebf181d220169afac2056b057b8ccommit-bot@chromium.org if (!BN_GF2m_mod_arr(&group->b, b, group->poly)) goto err; 2098c7372bbe8949f2864bd3d9df00d85c5669a74b1senorblanco@chromium.org if(bn_wexpand(&group->b, (int)(group->poly[0] + BN_BITS2 - 1) / BN_BITS2) == NULL) goto err; 2108c7372bbe8949f2864bd3d9df00d85c5669a74b1senorblanco@chromium.org for (i = group->b.top; i < group->b.dmax; i++) group->b.d[i] = 0; 2119195743aac79a4fa82059ab614b9795f215475f7senorblanco@chromium.org 2129195743aac79a4fa82059ab614b9795f215475f7senorblanco@chromium.org ret = 1; 2135faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org err: 2147938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org return ret; 2155faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org } 2165faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org 2175faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org 2185faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org/* Get the curve parameters of an EC_GROUP structure. 2197938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org * If p, a, or b are NULL then there values will not be set but the method will return with success. 220cac5fd597f6e2495f50aaa6bcbe3dadc56f0b977commit-bot@chromium.org */ 221cac5fd597f6e2495f50aaa6bcbe3dadc56f0b977commit-bot@chromium.orgint ec_GF2m_simple_group_get_curve(const EC_GROUP *group, BIGNUM *p, BIGNUM *a, BIGNUM *b, BN_CTX *ctx) 2227938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org { 2235faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org int ret = 0; 2248640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org 2258640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org if (p != NULL) 2268640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org { 2275faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org if (!BN_copy(p, &group->field)) return 0; 2285faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org } 2295faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org 2305faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org if (a != NULL) 2315faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org { 2328640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org if (!BN_copy(a, &group->a)) goto err; 2338640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org } 2343bc16c8bc1ecb9ac4450f58093cc9e3edb8a50b8senorblanco@chromium.org 235cc9471c36d3967270f7eb26f8b53ce0f17bc9fbbsenorblanco@chromium.org if (b != NULL) 236cc9471c36d3967270f7eb26f8b53ce0f17bc9fbbsenorblanco@chromium.org { 237cc9471c36d3967270f7eb26f8b53ce0f17bc9fbbsenorblanco@chromium.org if (!BN_copy(b, &group->b)) goto err; 2388640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org } 2397938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org 2408640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org ret = 1; 2418640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org 2428640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org err: 2438640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org return ret; 2445faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org } 2455faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org 2465faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org 2475faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org/* Gets the degree of the field. For a curve over GF(2^m) this is the value m. */ 2488640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.orgint ec_GF2m_simple_group_get_degree(const EC_GROUP *group) 2497938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org { 2507938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org return BN_num_bits(&group->field)-1; 2517938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org } 252ae761f7545d8ebf181d220169afac2056b057b8ccommit-bot@chromium.org 2538640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org 2547938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org/* Checks the discriminant of the curve. 2558640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org * y^2 + x*y = x^3 + a*x^2 + b is an elliptic curve <=> b != 0 (mod p) 2567938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org */ 2578640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.orgint ec_GF2m_simple_group_check_discriminant(const EC_GROUP *group, BN_CTX *ctx) 2588640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org { 2598640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org int ret = 0; 2607938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org BIGNUM *b; 2617938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org BN_CTX *new_ctx = NULL; 2627938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org 263ae761f7545d8ebf181d220169afac2056b057b8ccommit-bot@chromium.org if (ctx == NULL) 2647938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org { 2655faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org ctx = new_ctx = BN_CTX_new(); 2665faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org if (ctx == NULL) 2677938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org { 2687938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org ECerr(EC_F_EC_GF2M_SIMPLE_GROUP_CHECK_DISCRIMINANT, ERR_R_MALLOC_FAILURE); 2697938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org goto err; 270ae761f7545d8ebf181d220169afac2056b057b8ccommit-bot@chromium.org } 2715faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org } 2725faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org BN_CTX_start(ctx); 2737938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org b = BN_CTX_get(ctx); 2745faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org if (b == NULL) goto err; 2755faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org 2767938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org if (!BN_GF2m_mod_arr(b, &group->b, group->poly)) goto err; 2775faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org 2785faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org /* check the discriminant: 2797938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org * y^2 + x*y = x^3 + a*x^2 + b is an elliptic curve <=> b != 0 (mod p) 2805faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org */ 2815faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org if (BN_is_zero(b)) goto err; 2825faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org 2835faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org ret = 1; 284377c14a1e648f4427bd11474fad8ac264d98aff2senorblanco@chromium.org 2858640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.orgerr: 2868640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org if (ctx != NULL) 2878640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org BN_CTX_end(ctx); 2888640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org if (new_ctx != NULL) 2898640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org BN_CTX_free(new_ctx); 2908640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org return ret; 2918640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org } 2928640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org 2938640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org 294848250415eddc54075f7eb8795e8db79e749c6abreed/* Initializes an EC_POINT. */ 2958640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.orgint ec_GF2m_simple_point_init(EC_POINT *point) 2968640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org { 2978640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org BN_init(&point->X); 2988640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org BN_init(&point->Y); 2998640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org BN_init(&point->Z); 3008640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org return 1; 3018640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org } 3028640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org 3038640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org 3048640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org/* Frees an EC_POINT. */ 3058640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.orgvoid ec_GF2m_simple_point_finish(EC_POINT *point) 3068640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org { 3075faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org BN_free(&point->X); 3085faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org BN_free(&point->Y); 3094cb543d6057b692e1099e9f115155f0bf323a0c8senorblanco@chromium.org BN_free(&point->Z); 3105faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org } 311ae761f7545d8ebf181d220169afac2056b057b8ccommit-bot@chromium.org 31268400767be5f72e4b9750ccc8bcf0078d42869a7senorblanco@chromium.org 3136776b82d466fa93ccffd251fdf556fe058395444senorblanco@chromium.org/* Clears and frees an EC_POINT. */ 3144cb543d6057b692e1099e9f115155f0bf323a0c8senorblanco@chromium.orgvoid ec_GF2m_simple_point_clear_finish(EC_POINT *point) 31568400767be5f72e4b9750ccc8bcf0078d42869a7senorblanco@chromium.org { 31668400767be5f72e4b9750ccc8bcf0078d42869a7senorblanco@chromium.org BN_clear_free(&point->X); 31768400767be5f72e4b9750ccc8bcf0078d42869a7senorblanco@chromium.org BN_clear_free(&point->Y); 31828fcae2ec77eb16a79e155f8d788b20457f1c951commit-bot@chromium.org BN_clear_free(&point->Z); 3195faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org point->Z_is_one = 0; 3205faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org } 3215faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org 3227938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org 323118252962f89a80db661a0544f1bd61cbaab6321senorblanco@chromium.org/* Copy the contents of one EC_POINT into another. Assumes dest is initialized. */ 3247938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.orgint ec_GF2m_simple_point_copy(EC_POINT *dest, const EC_POINT *src) 3257938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org { 3267938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org if (!BN_copy(&dest->X, &src->X)) return 0; 3278640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org if (!BN_copy(&dest->Y, &src->Y)) return 0; 3288640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org if (!BN_copy(&dest->Z, &src->Z)) return 0; 3298640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org dest->Z_is_one = src->Z_is_one; 3308640d5024d57da5508bdf7585849e3b1f1cb365bsenorblanco@chromium.org 3315faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org return 1; 3325faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org } 3335faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org 3345faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org 3355faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org/* Set an EC_POINT to the point at infinity. 336848250415eddc54075f7eb8795e8db79e749c6abreed * A point at infinity is represented by having Z=0. 337cd3b15ca6364a04b0eeeb4f89c7daa8aefe854c8commit-bot@chromium.org */ 338cd3b15ca6364a04b0eeeb4f89c7daa8aefe854c8commit-bot@chromium.orgint ec_GF2m_simple_point_set_to_infinity(const EC_GROUP *group, EC_POINT *point) 3395faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org { 3406776b82d466fa93ccffd251fdf556fe058395444senorblanco@chromium.org point->Z_is_one = 0; 3416776b82d466fa93ccffd251fdf556fe058395444senorblanco@chromium.org BN_zero(&point->Z); 3426776b82d466fa93ccffd251fdf556fe058395444senorblanco@chromium.org return 1; 343cac5fd597f6e2495f50aaa6bcbe3dadc56f0b977commit-bot@chromium.org } 344cac5fd597f6e2495f50aaa6bcbe3dadc56f0b977commit-bot@chromium.org 3457938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org 3467938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org/* Set the coordinates of an EC_POINT using affine coordinates. 3477938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org * Note that the simple implementation only uses affine coordinates. 3487938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org */ 3497938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.orgint ec_GF2m_simple_point_set_affine_coordinates(const EC_GROUP *group, EC_POINT *point, 3507938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org const BIGNUM *x, const BIGNUM *y, BN_CTX *ctx) 3517938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org { 3525faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org int ret = 0; 3537938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org if (x == NULL || y == NULL) 3547938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org { 3557938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org ECerr(EC_F_EC_GF2M_SIMPLE_POINT_SET_AFFINE_COORDINATES, ERR_R_PASSED_NULL_PARAMETER); 3567938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org return 0; 3577938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org } 3587938bae14af94c1d48d122a2d686e123b66411a7senorblanco@chromium.org 3595faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org if (!BN_copy(&point->X, x)) goto err; 3605faa2dc266ec933b3961f985e5718236f1ecbe47senorblanco@chromium.org BN_set_negative(&point->X, 0); 3613bc16c8bc1ecb9ac4450f58093cc9e3edb8a50b8senorblanco@chromium.org if (!BN_copy(&point->Y, y)) goto err; 3620a5c233e3b911232c0d6f9a88ded99ecf88b8a97senorblanco@chromium.org BN_set_negative(&point->Y, 0); 3630a5c233e3b911232c0d6f9a88ded99ecf88b8a97senorblanco@chromium.org if (!BN_copy(&point->Z, BN_value_one())) goto err; 3640a5c233e3b911232c0d6f9a88ded99ecf88b8a97senorblanco@chromium.org BN_set_negative(&point->Z, 0); 3650a5c233e3b911232c0d6f9a88ded99ecf88b8a97senorblanco@chromium.org point->Z_is_one = 1; 3660a5c233e3b911232c0d6f9a88ded99ecf88b8a97senorblanco@chromium.org ret = 1; 3670a5c233e3b911232c0d6f9a88ded99ecf88b8a97senorblanco@chromium.org 3680a5c233e3b911232c0d6f9a88ded99ecf88b8a97senorblanco@chromium.org err: 3690a5c233e3b911232c0d6f9a88ded99ecf88b8a97senorblanco@chromium.org return ret; 3700a5c233e3b911232c0d6f9a88ded99ecf88b8a97senorblanco@chromium.org } 3710a5c233e3b911232c0d6f9a88ded99ecf88b8a97senorblanco@chromium.org 3720a5c233e3b911232c0d6f9a88ded99ecf88b8a97senorblanco@chromium.org 3730a5c233e3b911232c0d6f9a88ded99ecf88b8a97senorblanco@chromium.org/* Gets the affine coordinates of an EC_POINT. 3740a5c233e3b911232c0d6f9a88ded99ecf88b8a97senorblanco@chromium.org * Note that the simple implementation only uses affine coordinates. 3753bc16c8bc1ecb9ac4450f58093cc9e3edb8a50b8senorblanco@chromium.org */ 3763bc16c8bc1ecb9ac4450f58093cc9e3edb8a50b8senorblanco@chromium.orgint ec_GF2m_simple_point_get_affine_coordinates(const EC_GROUP *group, const EC_POINT *point, 3775ae5fc59b27a48711e514b3ede548b228e393e9bjoshualitt BIGNUM *x, BIGNUM *y, BN_CTX *ctx) 378ac9779234ef7a8cf3d791ab7690ef8c388662836joshualitt { 3795ae5fc59b27a48711e514b3ede548b228e393e9bjoshualitt int ret = 0; 3805ae5fc59b27a48711e514b3ede548b228e393e9bjoshualitt 3815ae5fc59b27a48711e514b3ede548b228e393e9bjoshualitt if (EC_POINT_is_at_infinity(group, point)) 3825ae5fc59b27a48711e514b3ede548b228e393e9bjoshualitt { 3835ae5fc59b27a48711e514b3ede548b228e393e9bjoshualitt ECerr(EC_F_EC_GF2M_SIMPLE_POINT_GET_AFFINE_COORDINATES, EC_R_POINT_AT_INFINITY); 3845ae5fc59b27a48711e514b3ede548b228e393e9bjoshualitt return 0; 3855ae5fc59b27a48711e514b3ede548b228e393e9bjoshualitt } 3865ae5fc59b27a48711e514b3ede548b228e393e9bjoshualitt 3875ae5fc59b27a48711e514b3ede548b228e393e9bjoshualitt if (BN_cmp(&point->Z, BN_value_one())) 3885ae5fc59b27a48711e514b3ede548b228e393e9bjoshualitt { 3895ae5fc59b27a48711e514b3ede548b228e393e9bjoshualitt ECerr(EC_F_EC_GF2M_SIMPLE_POINT_GET_AFFINE_COORDINATES, ERR_R_SHOULD_NOT_HAVE_BEEN_CALLED); 3903bc16c8bc1ecb9ac4450f58093cc9e3edb8a50b8senorblanco@chromium.org return 0; 3913bc16c8bc1ecb9ac4450f58093cc9e3edb8a50b8senorblanco@chromium.org } 392b0a8a377f832c59cee939ad721e1f87d378b7142joshualitt if (x != NULL) 393b0a8a377f832c59cee939ad721e1f87d378b7142joshualitt { 394b0a8a377f832c59cee939ad721e1f87d378b7142joshualitt if (!BN_copy(x, &point->X)) goto err; 395b0a8a377f832c59cee939ad721e1f87d378b7142joshualitt BN_set_negative(x, 0); 396b0a8a377f832c59cee939ad721e1f87d378b7142joshualitt } 397d043ccee3788ea4192806bd8c94484ed003fa828senorblanco@chromium.org if (y != NULL) 3983bc16c8bc1ecb9ac4450f58093cc9e3edb8a50b8senorblanco@chromium.org { 399d043ccee3788ea4192806bd8c94484ed003fa828senorblanco@chromium.org if (!BN_copy(y, &point->Y)) goto err; 400b0a8a377f832c59cee939ad721e1f87d378b7142joshualitt BN_set_negative(y, 0); 401b0a8a377f832c59cee939ad721e1f87d378b7142joshualitt } 402b0a8a377f832c59cee939ad721e1f87d378b7142joshualitt ret = 1; 403b0a8a377f832c59cee939ad721e1f87d378b7142joshualitt 404b0a8a377f832c59cee939ad721e1f87d378b7142joshualitt err: 405b0a8a377f832c59cee939ad721e1f87d378b7142joshualitt return ret; 406b0a8a377f832c59cee939ad721e1f87d378b7142joshualitt } 407b0a8a377f832c59cee939ad721e1f87d378b7142joshualitt 408b0a8a377f832c59cee939ad721e1f87d378b7142joshualitt 409d043ccee3788ea4192806bd8c94484ed003fa828senorblanco@chromium.org/* Calculates and sets the affine coordinates of an EC_POINT from the given 4103bc16c8bc1ecb9ac4450f58093cc9e3edb8a50b8senorblanco@chromium.org * compressed coordinates. Uses algorithm 2.3.4 of SEC 1. 4113bc16c8bc1ecb9ac4450f58093cc9e3edb8a50b8senorblanco@chromium.org * Note that the simple implementation only uses affine coordinates. 412 * 413 * The method is from the following publication: 414 * 415 * Harper, Menezes, Vanstone: 416 * "Public-Key Cryptosystems with Very Small Key Lengths", 417 * EUROCRYPT '92, Springer-Verlag LNCS 658, 418 * published February 1993 419 * 420 * US Patents 6,141,420 and 6,618,483 (Vanstone, Mullin, Agnew) describe 421 * the same method, but claim no priority date earlier than July 29, 1994 422 * (and additionally fail to cite the EUROCRYPT '92 publication as prior art). 423 */ 424int ec_GF2m_simple_set_compressed_coordinates(const EC_GROUP *group, EC_POINT *point, 425 const BIGNUM *x_, int y_bit, BN_CTX *ctx) 426 { 427 BN_CTX *new_ctx = NULL; 428 BIGNUM *tmp, *x, *y, *z; 429 int ret = 0, z0; 430 431 /* clear error queue */ 432 ERR_clear_error(); 433 434 if (ctx == NULL) 435 { 436 ctx = new_ctx = BN_CTX_new(); 437 if (ctx == NULL) 438 return 0; 439 } 440 441 y_bit = (y_bit != 0) ? 1 : 0; 442 443 BN_CTX_start(ctx); 444 tmp = BN_CTX_get(ctx); 445 x = BN_CTX_get(ctx); 446 y = BN_CTX_get(ctx); 447 z = BN_CTX_get(ctx); 448 if (z == NULL) goto err; 449 450 if (!BN_GF2m_mod_arr(x, x_, group->poly)) goto err; 451 if (BN_is_zero(x)) 452 { 453 if (!BN_GF2m_mod_sqrt_arr(y, &group->b, group->poly, ctx)) goto err; 454 } 455 else 456 { 457 if (!group->meth->field_sqr(group, tmp, x, ctx)) goto err; 458 if (!group->meth->field_div(group, tmp, &group->b, tmp, ctx)) goto err; 459 if (!BN_GF2m_add(tmp, &group->a, tmp)) goto err; 460 if (!BN_GF2m_add(tmp, x, tmp)) goto err; 461 if (!BN_GF2m_mod_solve_quad_arr(z, tmp, group->poly, ctx)) 462 { 463 unsigned long err = ERR_peek_last_error(); 464 465 if (ERR_GET_LIB(err) == ERR_LIB_BN && ERR_GET_REASON(err) == BN_R_NO_SOLUTION) 466 { 467 ERR_clear_error(); 468 ECerr(EC_F_EC_GF2M_SIMPLE_SET_COMPRESSED_COORDINATES, EC_R_INVALID_COMPRESSED_POINT); 469 } 470 else 471 ECerr(EC_F_EC_GF2M_SIMPLE_SET_COMPRESSED_COORDINATES, ERR_R_BN_LIB); 472 goto err; 473 } 474 z0 = (BN_is_odd(z)) ? 1 : 0; 475 if (!group->meth->field_mul(group, y, x, z, ctx)) goto err; 476 if (z0 != y_bit) 477 { 478 if (!BN_GF2m_add(y, y, x)) goto err; 479 } 480 } 481 482 if (!EC_POINT_set_affine_coordinates_GF2m(group, point, x, y, ctx)) goto err; 483 484 ret = 1; 485 486 err: 487 BN_CTX_end(ctx); 488 if (new_ctx != NULL) 489 BN_CTX_free(new_ctx); 490 return ret; 491 } 492 493 494/* Converts an EC_POINT to an octet string. 495 * If buf is NULL, the encoded length will be returned. 496 * If the length len of buf is smaller than required an error will be returned. 497 */ 498size_t ec_GF2m_simple_point2oct(const EC_GROUP *group, const EC_POINT *point, point_conversion_form_t form, 499 unsigned char *buf, size_t len, BN_CTX *ctx) 500 { 501 size_t ret; 502 BN_CTX *new_ctx = NULL; 503 int used_ctx = 0; 504 BIGNUM *x, *y, *yxi; 505 size_t field_len, i, skip; 506 507 if ((form != POINT_CONVERSION_COMPRESSED) 508 && (form != POINT_CONVERSION_UNCOMPRESSED) 509 && (form != POINT_CONVERSION_HYBRID)) 510 { 511 ECerr(EC_F_EC_GF2M_SIMPLE_POINT2OCT, EC_R_INVALID_FORM); 512 goto err; 513 } 514 515 if (EC_POINT_is_at_infinity(group, point)) 516 { 517 /* encodes to a single 0 octet */ 518 if (buf != NULL) 519 { 520 if (len < 1) 521 { 522 ECerr(EC_F_EC_GF2M_SIMPLE_POINT2OCT, EC_R_BUFFER_TOO_SMALL); 523 return 0; 524 } 525 buf[0] = 0; 526 } 527 return 1; 528 } 529 530 531 /* ret := required output buffer length */ 532 field_len = (EC_GROUP_get_degree(group) + 7) / 8; 533 ret = (form == POINT_CONVERSION_COMPRESSED) ? 1 + field_len : 1 + 2*field_len; 534 535 /* if 'buf' is NULL, just return required length */ 536 if (buf != NULL) 537 { 538 if (len < ret) 539 { 540 ECerr(EC_F_EC_GF2M_SIMPLE_POINT2OCT, EC_R_BUFFER_TOO_SMALL); 541 goto err; 542 } 543 544 if (ctx == NULL) 545 { 546 ctx = new_ctx = BN_CTX_new(); 547 if (ctx == NULL) 548 return 0; 549 } 550 551 BN_CTX_start(ctx); 552 used_ctx = 1; 553 x = BN_CTX_get(ctx); 554 y = BN_CTX_get(ctx); 555 yxi = BN_CTX_get(ctx); 556 if (yxi == NULL) goto err; 557 558 if (!EC_POINT_get_affine_coordinates_GF2m(group, point, x, y, ctx)) goto err; 559 560 buf[0] = form; 561 if ((form != POINT_CONVERSION_UNCOMPRESSED) && !BN_is_zero(x)) 562 { 563 if (!group->meth->field_div(group, yxi, y, x, ctx)) goto err; 564 if (BN_is_odd(yxi)) buf[0]++; 565 } 566 567 i = 1; 568 569 skip = field_len - BN_num_bytes(x); 570 if (skip > field_len) 571 { 572 ECerr(EC_F_EC_GF2M_SIMPLE_POINT2OCT, ERR_R_INTERNAL_ERROR); 573 goto err; 574 } 575 while (skip > 0) 576 { 577 buf[i++] = 0; 578 skip--; 579 } 580 skip = BN_bn2bin(x, buf + i); 581 i += skip; 582 if (i != 1 + field_len) 583 { 584 ECerr(EC_F_EC_GF2M_SIMPLE_POINT2OCT, ERR_R_INTERNAL_ERROR); 585 goto err; 586 } 587 588 if (form == POINT_CONVERSION_UNCOMPRESSED || form == POINT_CONVERSION_HYBRID) 589 { 590 skip = field_len - BN_num_bytes(y); 591 if (skip > field_len) 592 { 593 ECerr(EC_F_EC_GF2M_SIMPLE_POINT2OCT, ERR_R_INTERNAL_ERROR); 594 goto err; 595 } 596 while (skip > 0) 597 { 598 buf[i++] = 0; 599 skip--; 600 } 601 skip = BN_bn2bin(y, buf + i); 602 i += skip; 603 } 604 605 if (i != ret) 606 { 607 ECerr(EC_F_EC_GF2M_SIMPLE_POINT2OCT, ERR_R_INTERNAL_ERROR); 608 goto err; 609 } 610 } 611 612 if (used_ctx) 613 BN_CTX_end(ctx); 614 if (new_ctx != NULL) 615 BN_CTX_free(new_ctx); 616 return ret; 617 618 err: 619 if (used_ctx) 620 BN_CTX_end(ctx); 621 if (new_ctx != NULL) 622 BN_CTX_free(new_ctx); 623 return 0; 624 } 625 626 627/* Converts an octet string representation to an EC_POINT. 628 * Note that the simple implementation only uses affine coordinates. 629 */ 630int ec_GF2m_simple_oct2point(const EC_GROUP *group, EC_POINT *point, 631 const unsigned char *buf, size_t len, BN_CTX *ctx) 632 { 633 point_conversion_form_t form; 634 int y_bit; 635 BN_CTX *new_ctx = NULL; 636 BIGNUM *x, *y, *yxi; 637 size_t field_len, enc_len; 638 int ret = 0; 639 640 if (len == 0) 641 { 642 ECerr(EC_F_EC_GF2M_SIMPLE_OCT2POINT, EC_R_BUFFER_TOO_SMALL); 643 return 0; 644 } 645 form = buf[0]; 646 y_bit = form & 1; 647 form = form & ~1U; 648 if ((form != 0) && (form != POINT_CONVERSION_COMPRESSED) 649 && (form != POINT_CONVERSION_UNCOMPRESSED) 650 && (form != POINT_CONVERSION_HYBRID)) 651 { 652 ECerr(EC_F_EC_GF2M_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING); 653 return 0; 654 } 655 if ((form == 0 || form == POINT_CONVERSION_UNCOMPRESSED) && y_bit) 656 { 657 ECerr(EC_F_EC_GF2M_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING); 658 return 0; 659 } 660 661 if (form == 0) 662 { 663 if (len != 1) 664 { 665 ECerr(EC_F_EC_GF2M_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING); 666 return 0; 667 } 668 669 return EC_POINT_set_to_infinity(group, point); 670 } 671 672 field_len = (EC_GROUP_get_degree(group) + 7) / 8; 673 enc_len = (form == POINT_CONVERSION_COMPRESSED) ? 1 + field_len : 1 + 2*field_len; 674 675 if (len != enc_len) 676 { 677 ECerr(EC_F_EC_GF2M_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING); 678 return 0; 679 } 680 681 if (ctx == NULL) 682 { 683 ctx = new_ctx = BN_CTX_new(); 684 if (ctx == NULL) 685 return 0; 686 } 687 688 BN_CTX_start(ctx); 689 x = BN_CTX_get(ctx); 690 y = BN_CTX_get(ctx); 691 yxi = BN_CTX_get(ctx); 692 if (yxi == NULL) goto err; 693 694 if (!BN_bin2bn(buf + 1, field_len, x)) goto err; 695 if (BN_ucmp(x, &group->field) >= 0) 696 { 697 ECerr(EC_F_EC_GF2M_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING); 698 goto err; 699 } 700 701 if (form == POINT_CONVERSION_COMPRESSED) 702 { 703 if (!EC_POINT_set_compressed_coordinates_GF2m(group, point, x, y_bit, ctx)) goto err; 704 } 705 else 706 { 707 if (!BN_bin2bn(buf + 1 + field_len, field_len, y)) goto err; 708 if (BN_ucmp(y, &group->field) >= 0) 709 { 710 ECerr(EC_F_EC_GF2M_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING); 711 goto err; 712 } 713 if (form == POINT_CONVERSION_HYBRID) 714 { 715 if (!group->meth->field_div(group, yxi, y, x, ctx)) goto err; 716 if (y_bit != BN_is_odd(yxi)) 717 { 718 ECerr(EC_F_EC_GF2M_SIMPLE_OCT2POINT, EC_R_INVALID_ENCODING); 719 goto err; 720 } 721 } 722 723 if (!EC_POINT_set_affine_coordinates_GF2m(group, point, x, y, ctx)) goto err; 724 } 725 726 if (!EC_POINT_is_on_curve(group, point, ctx)) /* test required by X9.62 */ 727 { 728 ECerr(EC_F_EC_GF2M_SIMPLE_OCT2POINT, EC_R_POINT_IS_NOT_ON_CURVE); 729 goto err; 730 } 731 732 ret = 1; 733 734 err: 735 BN_CTX_end(ctx); 736 if (new_ctx != NULL) 737 BN_CTX_free(new_ctx); 738 return ret; 739 } 740 741 742/* Computes a + b and stores the result in r. r could be a or b, a could be b. 743 * Uses algorithm A.10.2 of IEEE P1363. 744 */ 745int ec_GF2m_simple_add(const EC_GROUP *group, EC_POINT *r, const EC_POINT *a, const EC_POINT *b, BN_CTX *ctx) 746 { 747 BN_CTX *new_ctx = NULL; 748 BIGNUM *x0, *y0, *x1, *y1, *x2, *y2, *s, *t; 749 int ret = 0; 750 751 if (EC_POINT_is_at_infinity(group, a)) 752 { 753 if (!EC_POINT_copy(r, b)) return 0; 754 return 1; 755 } 756 757 if (EC_POINT_is_at_infinity(group, b)) 758 { 759 if (!EC_POINT_copy(r, a)) return 0; 760 return 1; 761 } 762 763 if (ctx == NULL) 764 { 765 ctx = new_ctx = BN_CTX_new(); 766 if (ctx == NULL) 767 return 0; 768 } 769 770 BN_CTX_start(ctx); 771 x0 = BN_CTX_get(ctx); 772 y0 = BN_CTX_get(ctx); 773 x1 = BN_CTX_get(ctx); 774 y1 = BN_CTX_get(ctx); 775 x2 = BN_CTX_get(ctx); 776 y2 = BN_CTX_get(ctx); 777 s = BN_CTX_get(ctx); 778 t = BN_CTX_get(ctx); 779 if (t == NULL) goto err; 780 781 if (a->Z_is_one) 782 { 783 if (!BN_copy(x0, &a->X)) goto err; 784 if (!BN_copy(y0, &a->Y)) goto err; 785 } 786 else 787 { 788 if (!EC_POINT_get_affine_coordinates_GF2m(group, a, x0, y0, ctx)) goto err; 789 } 790 if (b->Z_is_one) 791 { 792 if (!BN_copy(x1, &b->X)) goto err; 793 if (!BN_copy(y1, &b->Y)) goto err; 794 } 795 else 796 { 797 if (!EC_POINT_get_affine_coordinates_GF2m(group, b, x1, y1, ctx)) goto err; 798 } 799 800 801 if (BN_GF2m_cmp(x0, x1)) 802 { 803 if (!BN_GF2m_add(t, x0, x1)) goto err; 804 if (!BN_GF2m_add(s, y0, y1)) goto err; 805 if (!group->meth->field_div(group, s, s, t, ctx)) goto err; 806 if (!group->meth->field_sqr(group, x2, s, ctx)) goto err; 807 if (!BN_GF2m_add(x2, x2, &group->a)) goto err; 808 if (!BN_GF2m_add(x2, x2, s)) goto err; 809 if (!BN_GF2m_add(x2, x2, t)) goto err; 810 } 811 else 812 { 813 if (BN_GF2m_cmp(y0, y1) || BN_is_zero(x1)) 814 { 815 if (!EC_POINT_set_to_infinity(group, r)) goto err; 816 ret = 1; 817 goto err; 818 } 819 if (!group->meth->field_div(group, s, y1, x1, ctx)) goto err; 820 if (!BN_GF2m_add(s, s, x1)) goto err; 821 822 if (!group->meth->field_sqr(group, x2, s, ctx)) goto err; 823 if (!BN_GF2m_add(x2, x2, s)) goto err; 824 if (!BN_GF2m_add(x2, x2, &group->a)) goto err; 825 } 826 827 if (!BN_GF2m_add(y2, x1, x2)) goto err; 828 if (!group->meth->field_mul(group, y2, y2, s, ctx)) goto err; 829 if (!BN_GF2m_add(y2, y2, x2)) goto err; 830 if (!BN_GF2m_add(y2, y2, y1)) goto err; 831 832 if (!EC_POINT_set_affine_coordinates_GF2m(group, r, x2, y2, ctx)) goto err; 833 834 ret = 1; 835 836 err: 837 BN_CTX_end(ctx); 838 if (new_ctx != NULL) 839 BN_CTX_free(new_ctx); 840 return ret; 841 } 842 843 844/* Computes 2 * a and stores the result in r. r could be a. 845 * Uses algorithm A.10.2 of IEEE P1363. 846 */ 847int ec_GF2m_simple_dbl(const EC_GROUP *group, EC_POINT *r, const EC_POINT *a, BN_CTX *ctx) 848 { 849 return ec_GF2m_simple_add(group, r, a, a, ctx); 850 } 851 852 853int ec_GF2m_simple_invert(const EC_GROUP *group, EC_POINT *point, BN_CTX *ctx) 854 { 855 if (EC_POINT_is_at_infinity(group, point) || BN_is_zero(&point->Y)) 856 /* point is its own inverse */ 857 return 1; 858 859 if (!EC_POINT_make_affine(group, point, ctx)) return 0; 860 return BN_GF2m_add(&point->Y, &point->X, &point->Y); 861 } 862 863 864/* Indicates whether the given point is the point at infinity. */ 865int ec_GF2m_simple_is_at_infinity(const EC_GROUP *group, const EC_POINT *point) 866 { 867 return BN_is_zero(&point->Z); 868 } 869 870 871/* Determines whether the given EC_POINT is an actual point on the curve defined 872 * in the EC_GROUP. A point is valid if it satisfies the Weierstrass equation: 873 * y^2 + x*y = x^3 + a*x^2 + b. 874 */ 875int ec_GF2m_simple_is_on_curve(const EC_GROUP *group, const EC_POINT *point, BN_CTX *ctx) 876 { 877 int ret = -1; 878 BN_CTX *new_ctx = NULL; 879 BIGNUM *lh, *y2; 880 int (*field_mul)(const EC_GROUP *, BIGNUM *, const BIGNUM *, const BIGNUM *, BN_CTX *); 881 int (*field_sqr)(const EC_GROUP *, BIGNUM *, const BIGNUM *, BN_CTX *); 882 883 if (EC_POINT_is_at_infinity(group, point)) 884 return 1; 885 886 field_mul = group->meth->field_mul; 887 field_sqr = group->meth->field_sqr; 888 889 /* only support affine coordinates */ 890 if (!point->Z_is_one) return -1; 891 892 if (ctx == NULL) 893 { 894 ctx = new_ctx = BN_CTX_new(); 895 if (ctx == NULL) 896 return -1; 897 } 898 899 BN_CTX_start(ctx); 900 y2 = BN_CTX_get(ctx); 901 lh = BN_CTX_get(ctx); 902 if (lh == NULL) goto err; 903 904 /* We have a curve defined by a Weierstrass equation 905 * y^2 + x*y = x^3 + a*x^2 + b. 906 * <=> x^3 + a*x^2 + x*y + b + y^2 = 0 907 * <=> ((x + a) * x + y ) * x + b + y^2 = 0 908 */ 909 if (!BN_GF2m_add(lh, &point->X, &group->a)) goto err; 910 if (!field_mul(group, lh, lh, &point->X, ctx)) goto err; 911 if (!BN_GF2m_add(lh, lh, &point->Y)) goto err; 912 if (!field_mul(group, lh, lh, &point->X, ctx)) goto err; 913 if (!BN_GF2m_add(lh, lh, &group->b)) goto err; 914 if (!field_sqr(group, y2, &point->Y, ctx)) goto err; 915 if (!BN_GF2m_add(lh, lh, y2)) goto err; 916 ret = BN_is_zero(lh); 917 err: 918 if (ctx) BN_CTX_end(ctx); 919 if (new_ctx) BN_CTX_free(new_ctx); 920 return ret; 921 } 922 923 924/* Indicates whether two points are equal. 925 * Return values: 926 * -1 error 927 * 0 equal (in affine coordinates) 928 * 1 not equal 929 */ 930int ec_GF2m_simple_cmp(const EC_GROUP *group, const EC_POINT *a, const EC_POINT *b, BN_CTX *ctx) 931 { 932 BIGNUM *aX, *aY, *bX, *bY; 933 BN_CTX *new_ctx = NULL; 934 int ret = -1; 935 936 if (EC_POINT_is_at_infinity(group, a)) 937 { 938 return EC_POINT_is_at_infinity(group, b) ? 0 : 1; 939 } 940 941 if (EC_POINT_is_at_infinity(group, b)) 942 return 1; 943 944 if (a->Z_is_one && b->Z_is_one) 945 { 946 return ((BN_cmp(&a->X, &b->X) == 0) && BN_cmp(&a->Y, &b->Y) == 0) ? 0 : 1; 947 } 948 949 if (ctx == NULL) 950 { 951 ctx = new_ctx = BN_CTX_new(); 952 if (ctx == NULL) 953 return -1; 954 } 955 956 BN_CTX_start(ctx); 957 aX = BN_CTX_get(ctx); 958 aY = BN_CTX_get(ctx); 959 bX = BN_CTX_get(ctx); 960 bY = BN_CTX_get(ctx); 961 if (bY == NULL) goto err; 962 963 if (!EC_POINT_get_affine_coordinates_GF2m(group, a, aX, aY, ctx)) goto err; 964 if (!EC_POINT_get_affine_coordinates_GF2m(group, b, bX, bY, ctx)) goto err; 965 ret = ((BN_cmp(aX, bX) == 0) && BN_cmp(aY, bY) == 0) ? 0 : 1; 966 967 err: 968 if (ctx) BN_CTX_end(ctx); 969 if (new_ctx) BN_CTX_free(new_ctx); 970 return ret; 971 } 972 973 974/* Forces the given EC_POINT to internally use affine coordinates. */ 975int ec_GF2m_simple_make_affine(const EC_GROUP *group, EC_POINT *point, BN_CTX *ctx) 976 { 977 BN_CTX *new_ctx = NULL; 978 BIGNUM *x, *y; 979 int ret = 0; 980 981 if (point->Z_is_one || EC_POINT_is_at_infinity(group, point)) 982 return 1; 983 984 if (ctx == NULL) 985 { 986 ctx = new_ctx = BN_CTX_new(); 987 if (ctx == NULL) 988 return 0; 989 } 990 991 BN_CTX_start(ctx); 992 x = BN_CTX_get(ctx); 993 y = BN_CTX_get(ctx); 994 if (y == NULL) goto err; 995 996 if (!EC_POINT_get_affine_coordinates_GF2m(group, point, x, y, ctx)) goto err; 997 if (!BN_copy(&point->X, x)) goto err; 998 if (!BN_copy(&point->Y, y)) goto err; 999 if (!BN_one(&point->Z)) goto err; 1000 1001 ret = 1; 1002 1003 err: 1004 if (ctx) BN_CTX_end(ctx); 1005 if (new_ctx) BN_CTX_free(new_ctx); 1006 return ret; 1007 } 1008 1009 1010/* Forces each of the EC_POINTs in the given array to use affine coordinates. */ 1011int ec_GF2m_simple_points_make_affine(const EC_GROUP *group, size_t num, EC_POINT *points[], BN_CTX *ctx) 1012 { 1013 size_t i; 1014 1015 for (i = 0; i < num; i++) 1016 { 1017 if (!group->meth->make_affine(group, points[i], ctx)) return 0; 1018 } 1019 1020 return 1; 1021 } 1022 1023 1024/* Wrapper to simple binary polynomial field multiplication implementation. */ 1025int ec_GF2m_simple_field_mul(const EC_GROUP *group, BIGNUM *r, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx) 1026 { 1027 return BN_GF2m_mod_mul_arr(r, a, b, group->poly, ctx); 1028 } 1029 1030 1031/* Wrapper to simple binary polynomial field squaring implementation. */ 1032int ec_GF2m_simple_field_sqr(const EC_GROUP *group, BIGNUM *r, const BIGNUM *a, BN_CTX *ctx) 1033 { 1034 return BN_GF2m_mod_sqr_arr(r, a, group->poly, ctx); 1035 } 1036 1037 1038/* Wrapper to simple binary polynomial field division implementation. */ 1039int ec_GF2m_simple_field_div(const EC_GROUP *group, BIGNUM *r, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx) 1040 { 1041 return BN_GF2m_mod_div(r, a, b, &group->field, ctx); 1042 } 1043