Xuyi Wang / wolfSSL

Important changes to repositories hosted on mbed.com

Mbed hosted mercurial repositories are deprecated and are due to be permanently deleted in July 2026.

To keep a copy of this software download the repository Zip archive or clone locally using Mercurial.

It is also possible to export all your personal repositories from the account settings page.

Dependents:   OS

wolfcrypt/src/ecc.c@16:048e5e270a58, 2019-11-19 (annotated)

Committer:
sPymbed
Date:
Tue Nov 19 14:32:16 2019 +0000
Revision:
16:048e5e270a58
Parent:
15:117db924cf7c 
working ssl

Who changed what in which revision?

UserRevisionLine numberNew contents of line
wolfSSL 15:117db924cf7c 1 /* ecc.c
wolfSSL 15:117db924cf7c 2 *
wolfSSL 15:117db924cf7c 3 * Copyright (C) 2006-2017 wolfSSL Inc.
wolfSSL 15:117db924cf7c 4 *
wolfSSL 15:117db924cf7c 5 * This file is part of wolfSSL.
wolfSSL 15:117db924cf7c 6 *
wolfSSL 15:117db924cf7c 7 * wolfSSL is free software; you can redistribute it and/or modify
wolfSSL 15:117db924cf7c 8 * it under the terms of the GNU General Public License as published by
wolfSSL 15:117db924cf7c 9 * the Free Software Foundation; either version 2 of the License, or
wolfSSL 15:117db924cf7c 10 * (at your option) any later version.
wolfSSL 15:117db924cf7c 11 *
wolfSSL 15:117db924cf7c 12 * wolfSSL is distributed in the hope that it will be useful,
wolfSSL 15:117db924cf7c 13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
wolfSSL 15:117db924cf7c 14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
wolfSSL 15:117db924cf7c 15 * GNU General Public License for more details.
wolfSSL 15:117db924cf7c 16 *
wolfSSL 15:117db924cf7c 17 * You should have received a copy of the GNU General Public License
wolfSSL 15:117db924cf7c 18 * along with this program; if not, write to the Free Software
wolfSSL 15:117db924cf7c 19 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA
wolfSSL 15:117db924cf7c 20 */
wolfSSL 15:117db924cf7c 21
wolfSSL 15:117db924cf7c 22
wolfSSL 15:117db924cf7c 23
wolfSSL 15:117db924cf7c 24 #ifdef HAVE_CONFIG_H
wolfSSL 15:117db924cf7c 25 #include <config.h>
wolfSSL 15:117db924cf7c 26 #endif
wolfSSL 15:117db924cf7c 27
wolfSSL 15:117db924cf7c 28 /* in case user set HAVE_ECC there */
wolfSSL 15:117db924cf7c 29 #include <wolfssl/wolfcrypt/settings.h>
wolfSSL 15:117db924cf7c 30
wolfSSL 15:117db924cf7c 31 /*
wolfSSL 15:117db924cf7c 32 Possible ECC enable options:
wolfSSL 15:117db924cf7c 33 * HAVE_ECC: Overall control of ECC default: on
wolfSSL 15:117db924cf7c 34 * HAVE_ECC_ENCRYPT: ECC encrypt/decrypt w/AES and HKDF default: off
wolfSSL 15:117db924cf7c 35 * HAVE_ECC_SIGN: ECC sign default: on
wolfSSL 15:117db924cf7c 36 * HAVE_ECC_VERIFY: ECC verify default: on
wolfSSL 15:117db924cf7c 37 * HAVE_ECC_DHE: ECC build shared secret default: on
wolfSSL 15:117db924cf7c 38 * HAVE_ECC_CDH: ECC cofactor DH shared secret default: off
wolfSSL 15:117db924cf7c 39 * HAVE_ECC_KEY_IMPORT: ECC Key import default: on
wolfSSL 15:117db924cf7c 40 * HAVE_ECC_KEY_EXPORT: ECC Key export default: on
wolfSSL 15:117db924cf7c 41 * ECC_SHAMIR: Enables Shamir calc method default: on
wolfSSL 15:117db924cf7c 42 * HAVE_COMP_KEY: Enables compressed key default: off
wolfSSL 15:117db924cf7c 43 * WOLFSSL_VALIDATE_ECC_IMPORT: Validate ECC key on import default: off
wolfSSL 15:117db924cf7c 44 * WOLFSSL_VALIDATE_ECC_KEYGEN: Validate ECC key gen default: off
wolfSSL 15:117db924cf7c 45 * WOLFSSL_CUSTOM_CURVES: Allow non-standard curves. default: off
wolfSSL 15:117db924cf7c 46 * Includes the curve "a" variable in calculation
wolfSSL 15:117db924cf7c 47 * ECC_DUMP_OID: Enables dump of OID encoding and sum default: off
wolfSSL 15:117db924cf7c 48 * ECC_CACHE_CURVE: Enables cache of curve info to improve perofrmance
wolfSSL 15:117db924cf7c 49 default: off
wolfSSL 15:117db924cf7c 50 * FP_ECC: ECC Fixed Point Cache default: off
wolfSSL 15:117db924cf7c 51 * USE_ECC_B_PARAM: Enable ECC curve B param default: off
wolfSSL 15:117db924cf7c 52 (on for HAVE_COMP_KEY)
wolfSSL 15:117db924cf7c 53 */
wolfSSL 15:117db924cf7c 54
wolfSSL 15:117db924cf7c 55 /*
wolfSSL 15:117db924cf7c 56 ECC Curve Types:
wolfSSL 15:117db924cf7c 57 * NO_ECC_SECP Disables SECP curves default: off (not defined)
wolfSSL 15:117db924cf7c 58 * HAVE_ECC_SECPR2 Enables SECP R2 curves default: off
wolfSSL 15:117db924cf7c 59 * HAVE_ECC_SECPR3 Enables SECP R3 curves default: off
wolfSSL 15:117db924cf7c 60 * HAVE_ECC_BRAINPOOL Enables Brainpool curves default: off
wolfSSL 15:117db924cf7c 61 * HAVE_ECC_KOBLITZ Enables Koblitz curves default: off
wolfSSL 15:117db924cf7c 62 */
wolfSSL 15:117db924cf7c 63
wolfSSL 15:117db924cf7c 64 /*
wolfSSL 15:117db924cf7c 65 ECC Curve Sizes:
wolfSSL 15:117db924cf7c 66 * ECC_USER_CURVES: Allows custom combination of key sizes below
wolfSSL 15:117db924cf7c 67 * HAVE_ALL_CURVES: Enable all key sizes (on unless ECC_USER_CURVES is defined)
wolfSSL 15:117db924cf7c 68 * HAVE_ECC112: 112 bit key
wolfSSL 15:117db924cf7c 69 * HAVE_ECC128: 128 bit key
wolfSSL 15:117db924cf7c 70 * HAVE_ECC160: 160 bit key
wolfSSL 15:117db924cf7c 71 * HAVE_ECC192: 192 bit key
wolfSSL 15:117db924cf7c 72 * HAVE_ECC224: 224 bit key
wolfSSL 15:117db924cf7c 73 * HAVE_ECC239: 239 bit key
wolfSSL 15:117db924cf7c 74 * NO_ECC256: Disables 256 bit key (on by default)
wolfSSL 15:117db924cf7c 75 * HAVE_ECC320: 320 bit key
wolfSSL 15:117db924cf7c 76 * HAVE_ECC384: 384 bit key
wolfSSL 15:117db924cf7c 77 * HAVE_ECC512: 512 bit key
wolfSSL 15:117db924cf7c 78 * HAVE_ECC521: 521 bit key
wolfSSL 15:117db924cf7c 79 */
wolfSSL 15:117db924cf7c 80
wolfSSL 15:117db924cf7c 81
wolfSSL 15:117db924cf7c 82 #ifdef HAVE_ECC
wolfSSL 15:117db924cf7c 83
wolfSSL 15:117db924cf7c 84 /* Make sure custom curves is enabled for Brainpool or Koblitz curve types */
wolfSSL 15:117db924cf7c 85 #if (defined(HAVE_ECC_BRAINPOOL) || defined(HAVE_ECC_KOBLITZ)) &&\
wolfSSL 15:117db924cf7c 86 !defined(WOLFSSL_CUSTOM_CURVES)
wolfSSL 15:117db924cf7c 87 #error Brainpool and Koblitz curves requires WOLFSSL_CUSTOM_CURVES
wolfSSL 15:117db924cf7c 88 #endif
wolfSSL 15:117db924cf7c 89
wolfSSL 15:117db924cf7c 90 /* Make sure ASN is enabled for ECC sign/verify */
wolfSSL 15:117db924cf7c 91 #if (defined(HAVE_ECC_SIGN) || defined(HAVE_ECC_VERIFY)) && defined(NO_ASN)
wolfSSL 15:117db924cf7c 92 #error ASN must be enabled for ECC sign/verify
wolfSSL 15:117db924cf7c 93 #endif
wolfSSL 15:117db924cf7c 94
wolfSSL 15:117db924cf7c 95
wolfSSL 15:117db924cf7c 96 #if defined(HAVE_FIPS_VERSION) && (HAVE_FIPS_VERSION >= 2)
wolfSSL 15:117db924cf7c 97 /* set NO_WRAPPERS before headers, use direct internal f()s not wrappers */
wolfSSL 15:117db924cf7c 98 #define FIPS_NO_WRAPPERS
wolfSSL 15:117db924cf7c 99
wolfSSL 15:117db924cf7c 100 #ifdef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 101 #pragma code_seg(".fipsA$f")
wolfSSL 15:117db924cf7c 102 #pragma const_seg(".fipsB$f")
wolfSSL 15:117db924cf7c 103 #endif
wolfSSL 15:117db924cf7c 104 #endif
wolfSSL 15:117db924cf7c 105
wolfSSL 15:117db924cf7c 106 #include <wolfssl/wolfcrypt/ecc.h>
wolfSSL 15:117db924cf7c 107 #include <wolfssl/wolfcrypt/asn.h>
wolfSSL 15:117db924cf7c 108 #include <wolfssl/wolfcrypt/error-crypt.h>
wolfSSL 15:117db924cf7c 109 #include <wolfssl/wolfcrypt/logging.h>
wolfSSL 15:117db924cf7c 110 #include <wolfssl/wolfcrypt/types.h>
wolfSSL 15:117db924cf7c 111
wolfSSL 15:117db924cf7c 112 #ifdef WOLFSSL_HAVE_SP_ECC
wolfSSL 15:117db924cf7c 113 #include <wolfssl/wolfcrypt/sp.h>
wolfSSL 15:117db924cf7c 114 #endif
wolfSSL 15:117db924cf7c 115
wolfSSL 15:117db924cf7c 116 #ifdef HAVE_ECC_ENCRYPT
wolfSSL 15:117db924cf7c 117 #include <wolfssl/wolfcrypt/hmac.h>
wolfSSL 15:117db924cf7c 118 #include <wolfssl/wolfcrypt/aes.h>
wolfSSL 15:117db924cf7c 119 #endif
wolfSSL 15:117db924cf7c 120
wolfSSL 15:117db924cf7c 121 #ifdef HAVE_X963_KDF
wolfSSL 15:117db924cf7c 122 #include <wolfssl/wolfcrypt/hash.h>
wolfSSL 15:117db924cf7c 123 #endif
wolfSSL 15:117db924cf7c 124
wolfSSL 15:117db924cf7c 125 #ifdef WOLF_CRYPTO_DEV
wolfSSL 15:117db924cf7c 126 #include <wolfssl/wolfcrypt/cryptodev.h>
wolfSSL 15:117db924cf7c 127 #endif
wolfSSL 15:117db924cf7c 128
wolfSSL 15:117db924cf7c 129 #ifdef NO_INLINE
wolfSSL 15:117db924cf7c 130 #include <wolfssl/wolfcrypt/misc.h>
wolfSSL 15:117db924cf7c 131 #else
wolfSSL 15:117db924cf7c 132 #define WOLFSSL_MISC_INCLUDED
wolfSSL 15:117db924cf7c 133 #include <wolfcrypt/src/misc.c>
wolfSSL 15:117db924cf7c 134 #endif
wolfSSL 15:117db924cf7c 135
wolfSSL 15:117db924cf7c 136 #if defined(FREESCALE_LTC_ECC)
wolfSSL 15:117db924cf7c 137 #include <wolfssl/wolfcrypt/port/nxp/ksdk_port.h>
wolfSSL 15:117db924cf7c 138 #endif
wolfSSL 15:117db924cf7c 139
wolfSSL 15:117db924cf7c 140 #ifdef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 141 #define GEN_MEM_ERR MP_MEM
wolfSSL 15:117db924cf7c 142 #elif defined(USE_FAST_MATH)
wolfSSL 15:117db924cf7c 143 #define GEN_MEM_ERR FP_MEM
wolfSSL 15:117db924cf7c 144 #else
wolfSSL 15:117db924cf7c 145 #define GEN_MEM_ERR MP_MEM
wolfSSL 15:117db924cf7c 146 #endif
wolfSSL 15:117db924cf7c 147
wolfSSL 15:117db924cf7c 148
wolfSSL 15:117db924cf7c 149 /* internal ECC states */
wolfSSL 15:117db924cf7c 150 enum {
wolfSSL 15:117db924cf7c 151 ECC_STATE_NONE = 0,
wolfSSL 15:117db924cf7c 152
wolfSSL 15:117db924cf7c 153 ECC_STATE_SHARED_SEC_GEN,
wolfSSL 15:117db924cf7c 154 ECC_STATE_SHARED_SEC_RES,
wolfSSL 15:117db924cf7c 155
wolfSSL 15:117db924cf7c 156 ECC_STATE_SIGN_DO,
wolfSSL 15:117db924cf7c 157 ECC_STATE_SIGN_ENCODE,
wolfSSL 15:117db924cf7c 158
wolfSSL 15:117db924cf7c 159 ECC_STATE_VERIFY_DECODE,
wolfSSL 15:117db924cf7c 160 ECC_STATE_VERIFY_DO,
wolfSSL 15:117db924cf7c 161 ECC_STATE_VERIFY_RES,
wolfSSL 15:117db924cf7c 162 };
wolfSSL 15:117db924cf7c 163
wolfSSL 15:117db924cf7c 164
wolfSSL 15:117db924cf7c 165 /* map
wolfSSL 15:117db924cf7c 166 ptmul -> mulmod
wolfSSL 15:117db924cf7c 167 */
wolfSSL 15:117db924cf7c 168
wolfSSL 15:117db924cf7c 169 /* 256-bit curve on by default whether user curves or not */
wolfSSL 15:117db924cf7c 170 #if defined(HAVE_ECC112) || defined(HAVE_ALL_CURVES)
wolfSSL 15:117db924cf7c 171 #define ECC112
wolfSSL 15:117db924cf7c 172 #endif
wolfSSL 15:117db924cf7c 173 #if defined(HAVE_ECC128) || defined(HAVE_ALL_CURVES)
wolfSSL 15:117db924cf7c 174 #define ECC128
wolfSSL 15:117db924cf7c 175 #endif
wolfSSL 15:117db924cf7c 176 #if defined(HAVE_ECC160) || defined(HAVE_ALL_CURVES)
wolfSSL 15:117db924cf7c 177 #define ECC160
wolfSSL 15:117db924cf7c 178 #endif
wolfSSL 15:117db924cf7c 179 #if defined(HAVE_ECC192) || defined(HAVE_ALL_CURVES)
wolfSSL 15:117db924cf7c 180 #define ECC192
wolfSSL 15:117db924cf7c 181 #endif
wolfSSL 15:117db924cf7c 182 #if defined(HAVE_ECC224) || defined(HAVE_ALL_CURVES)
wolfSSL 15:117db924cf7c 183 #define ECC224
wolfSSL 15:117db924cf7c 184 #endif
wolfSSL 15:117db924cf7c 185 #if defined(HAVE_ECC239) || defined(HAVE_ALL_CURVES)
wolfSSL 15:117db924cf7c 186 #define ECC239
wolfSSL 15:117db924cf7c 187 #endif
wolfSSL 15:117db924cf7c 188 #if !defined(NO_ECC256) || defined(HAVE_ALL_CURVES)
wolfSSL 15:117db924cf7c 189 #define ECC256
wolfSSL 15:117db924cf7c 190 #endif
wolfSSL 15:117db924cf7c 191 #if defined(HAVE_ECC320) || defined(HAVE_ALL_CURVES)
wolfSSL 15:117db924cf7c 192 #define ECC320
wolfSSL 15:117db924cf7c 193 #endif
wolfSSL 15:117db924cf7c 194 #if defined(HAVE_ECC384) || defined(HAVE_ALL_CURVES)
wolfSSL 15:117db924cf7c 195 #define ECC384
wolfSSL 15:117db924cf7c 196 #endif
wolfSSL 15:117db924cf7c 197 #if defined(HAVE_ECC512) || defined(HAVE_ALL_CURVES)
wolfSSL 15:117db924cf7c 198 #define ECC512
wolfSSL 15:117db924cf7c 199 #endif
wolfSSL 15:117db924cf7c 200 #if defined(HAVE_ECC521) || defined(HAVE_ALL_CURVES)
wolfSSL 15:117db924cf7c 201 #define ECC521
wolfSSL 15:117db924cf7c 202 #endif
wolfSSL 15:117db924cf7c 203
wolfSSL 15:117db924cf7c 204 /* The encoded OID's for ECC curves */
wolfSSL 15:117db924cf7c 205 #ifdef ECC112
wolfSSL 15:117db924cf7c 206 #ifndef NO_ECC_SECP
wolfSSL 15:117db924cf7c 207 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 208 #define CODED_SECP112R1 {1,3,132,0,6}
wolfSSL 15:117db924cf7c 209 #define CODED_SECP112R1_SZ 5
wolfSSL 15:117db924cf7c 210 #else
wolfSSL 15:117db924cf7c 211 #define CODED_SECP112R1 {0x2B,0x81,0x04,0x00,0x06}
wolfSSL 15:117db924cf7c 212 #define CODED_SECP112R1_SZ 5
wolfSSL 15:117db924cf7c 213 #endif
wolfSSL 15:117db924cf7c 214 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 215 static const ecc_oid_t ecc_oid_secp112r1[] = CODED_SECP112R1;
wolfSSL 15:117db924cf7c 216 #else
wolfSSL 15:117db924cf7c 217 #define ecc_oid_secp112r1 CODED_SECP112R1
wolfSSL 15:117db924cf7c 218 #endif
wolfSSL 15:117db924cf7c 219 #define ecc_oid_secp112r1_sz CODED_SECP112R1_SZ
wolfSSL 15:117db924cf7c 220 #endif /* !NO_ECC_SECP */
wolfSSL 15:117db924cf7c 221 #ifdef HAVE_ECC_SECPR2
wolfSSL 15:117db924cf7c 222 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 223 #define CODED_SECP112R2 {1,3,132,0,7}
wolfSSL 15:117db924cf7c 224 #define CODED_SECP112R2_SZ 5
wolfSSL 15:117db924cf7c 225 #else
wolfSSL 15:117db924cf7c 226 #define CODED_SECP112R2 {0x2B,0x81,0x04,0x00,0x07}
wolfSSL 15:117db924cf7c 227 #define CODED_SECP112R2_SZ 5
wolfSSL 15:117db924cf7c 228 #endif
wolfSSL 15:117db924cf7c 229 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 230 static const ecc_oid_t ecc_oid_secp112r2[] = CODED_SECP112R2;
wolfSSL 15:117db924cf7c 231 #else
wolfSSL 15:117db924cf7c 232 #define ecc_oid_secp112r2 CODED_SECP112R2
wolfSSL 15:117db924cf7c 233 #endif
wolfSSL 15:117db924cf7c 234 #define ecc_oid_secp112r2_sz CODED_SECP112R2_SZ
wolfSSL 15:117db924cf7c 235 #endif /* HAVE_ECC_SECPR2 */
wolfSSL 15:117db924cf7c 236 #endif /* ECC112 */
wolfSSL 15:117db924cf7c 237 #ifdef ECC128
wolfSSL 15:117db924cf7c 238 #ifndef NO_ECC_SECP
wolfSSL 15:117db924cf7c 239 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 240 #define CODED_SECP128R1 {1,3,132,0,28}
wolfSSL 15:117db924cf7c 241 #define CODED_SECP128R1_SZ 5
wolfSSL 15:117db924cf7c 242 #else
wolfSSL 15:117db924cf7c 243 #define CODED_SECP128R1 {0x2B,0x81,0x04,0x00,0x1C}
wolfSSL 15:117db924cf7c 244 #define CODED_SECP128R1_SZ 5
wolfSSL 15:117db924cf7c 245 #endif
wolfSSL 15:117db924cf7c 246 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 247 static const ecc_oid_t ecc_oid_secp128r1[] = CODED_SECP128R1;
wolfSSL 15:117db924cf7c 248 #else
wolfSSL 15:117db924cf7c 249 #define ecc_oid_secp128r1 CODED_SECP128R1
wolfSSL 15:117db924cf7c 250 #endif
wolfSSL 15:117db924cf7c 251 #define ecc_oid_secp128r1_sz CODED_SECP128R1_SZ
wolfSSL 15:117db924cf7c 252 #endif /* !NO_ECC_SECP */
wolfSSL 15:117db924cf7c 253 #ifdef HAVE_ECC_SECPR2
wolfSSL 15:117db924cf7c 254 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 255 #define CODED_SECP128R2 {1,3,132,0,29}
wolfSSL 15:117db924cf7c 256 #define CODED_SECP128R2_SZ 5
wolfSSL 15:117db924cf7c 257 #else
wolfSSL 15:117db924cf7c 258 #define CODED_SECP128R2 {0x2B,0x81,0x04,0x00,0x1D}
wolfSSL 15:117db924cf7c 259 #define CODED_SECP128R2_SZ 5
wolfSSL 15:117db924cf7c 260 #endif
wolfSSL 15:117db924cf7c 261 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 262 static const ecc_oid_t ecc_oid_secp128r2[] = CODED_SECP128R2;
wolfSSL 15:117db924cf7c 263 #else
wolfSSL 15:117db924cf7c 264 #define ecc_oid_secp128r2 CODED_SECP128R2
wolfSSL 15:117db924cf7c 265 #endif
wolfSSL 15:117db924cf7c 266 #define ecc_oid_secp128r2_sz CODED_SECP128R2_SZ
wolfSSL 15:117db924cf7c 267 #endif /* HAVE_ECC_SECPR2 */
wolfSSL 15:117db924cf7c 268 #endif /* ECC128 */
wolfSSL 15:117db924cf7c 269 #ifdef ECC160
wolfSSL 15:117db924cf7c 270 #ifndef NO_ECC_SECP
wolfSSL 15:117db924cf7c 271 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 272 #define CODED_SECP160R1 {1,3,132,0,8}
wolfSSL 15:117db924cf7c 273 #define CODED_SECP160R1_SZ 5
wolfSSL 15:117db924cf7c 274 #else
wolfSSL 15:117db924cf7c 275 #define CODED_SECP160R1 {0x2B,0x81,0x04,0x00,0x08}
wolfSSL 15:117db924cf7c 276 #define CODED_SECP160R1_SZ 5
wolfSSL 15:117db924cf7c 277 #endif
wolfSSL 15:117db924cf7c 278 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 279 static const ecc_oid_t ecc_oid_secp160r1[] = CODED_SECP160R1;
wolfSSL 15:117db924cf7c 280 #else
wolfSSL 15:117db924cf7c 281 #define ecc_oid_secp160r1 CODED_SECP160R1
wolfSSL 15:117db924cf7c 282 #endif
wolfSSL 15:117db924cf7c 283 #define ecc_oid_secp160r1_sz CODED_SECP160R1_SZ
wolfSSL 15:117db924cf7c 284 #endif /* !NO_ECC_SECP */
wolfSSL 15:117db924cf7c 285 #ifdef HAVE_ECC_SECPR2
wolfSSL 15:117db924cf7c 286 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 287 #define CODED_SECP160R2 {1,3,132,0,30}
wolfSSL 15:117db924cf7c 288 #define CODED_SECP160R1_SZ 5
wolfSSL 15:117db924cf7c 289 #else
wolfSSL 15:117db924cf7c 290 #define CODED_SECP160R2 {0x2B,0x81,0x04,0x00,0x1E}
wolfSSL 15:117db924cf7c 291 #define CODED_SECP160R2_SZ 5
wolfSSL 15:117db924cf7c 292 #endif
wolfSSL 15:117db924cf7c 293 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 294 static const ecc_oid_t ecc_oid_secp160r2[] = CODED_SECP160R2;
wolfSSL 15:117db924cf7c 295 #else
wolfSSL 15:117db924cf7c 296 #define ecc_oid_secp160r2 CODED_SECP160R2
wolfSSL 15:117db924cf7c 297 #endif
wolfSSL 15:117db924cf7c 298 #define ecc_oid_secp160r2_sz CODED_SECP160R2_SZ
wolfSSL 15:117db924cf7c 299 #endif /* HAVE_ECC_SECPR2 */
wolfSSL 15:117db924cf7c 300 #ifdef HAVE_ECC_KOBLITZ
wolfSSL 15:117db924cf7c 301 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 302 #define CODED_SECP160K1 {1,3,132,0,9}
wolfSSL 15:117db924cf7c 303 #define CODED_SECP160K1_SZ 5
wolfSSL 15:117db924cf7c 304 #else
wolfSSL 15:117db924cf7c 305 #define CODED_SECP160K1 {0x2B,0x81,0x04,0x00,0x09}
wolfSSL 15:117db924cf7c 306 #define CODED_SECP160K1_SZ 5
wolfSSL 15:117db924cf7c 307 #endif
wolfSSL 15:117db924cf7c 308 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 309 static const ecc_oid_t ecc_oid_secp160k1[] = CODED_SECP160K1;
wolfSSL 15:117db924cf7c 310 #else
wolfSSL 15:117db924cf7c 311 #define ecc_oid_secp160k1 CODED_SECP160K1
wolfSSL 15:117db924cf7c 312 #endif
wolfSSL 15:117db924cf7c 313 #define ecc_oid_secp160k1_sz CODED_SECP160K1_SZ
wolfSSL 15:117db924cf7c 314 #endif /* HAVE_ECC_KOBLITZ */
wolfSSL 15:117db924cf7c 315 #ifdef HAVE_ECC_BRAINPOOL
wolfSSL 15:117db924cf7c 316 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 317 #define CODED_BRAINPOOLP160R1 {1,3,36,3,3,2,8,1,1,1}
wolfSSL 15:117db924cf7c 318 #define CODED_BRAINPOOLP160R1_SZ 10
wolfSSL 15:117db924cf7c 319 #else
wolfSSL 15:117db924cf7c 320 #define CODED_BRAINPOOLP160R1 {0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x01}
wolfSSL 15:117db924cf7c 321 #define CODED_BRAINPOOLP160R1_SZ 9
wolfSSL 15:117db924cf7c 322 #endif
wolfSSL 15:117db924cf7c 323 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 324 static const ecc_oid_t ecc_oid_brainpoolp160r1[] = CODED_BRAINPOOLP160R1;
wolfSSL 15:117db924cf7c 325 #else
wolfSSL 15:117db924cf7c 326 #define ecc_oid_brainpoolp160r1 CODED_BRAINPOOLP160R1
wolfSSL 15:117db924cf7c 327 #endif
wolfSSL 15:117db924cf7c 328 #define ecc_oid_brainpoolp160r1_sz CODED_BRAINPOOLP160R1_SZ
wolfSSL 15:117db924cf7c 329 #endif /* HAVE_ECC_BRAINPOOL */
wolfSSL 15:117db924cf7c 330 #endif /* ECC160 */
wolfSSL 15:117db924cf7c 331 #ifdef ECC192
wolfSSL 15:117db924cf7c 332 #ifndef NO_ECC_SECP
wolfSSL 15:117db924cf7c 333 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 334 #define CODED_SECP192R1 {1,2,840,10045,3,1,1}
wolfSSL 15:117db924cf7c 335 #define CODED_SECP192R1_SZ 7
wolfSSL 15:117db924cf7c 336 #else
wolfSSL 15:117db924cf7c 337 #define CODED_SECP192R1 {0x2A,0x86,0x48,0xCE,0x3D,0x03,0x01,0x01}
wolfSSL 15:117db924cf7c 338 #define CODED_SECP192R1_SZ 8
wolfSSL 15:117db924cf7c 339 #endif
wolfSSL 15:117db924cf7c 340 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 341 static const ecc_oid_t ecc_oid_secp192r1[] = CODED_SECP192R1;
wolfSSL 15:117db924cf7c 342 #else
wolfSSL 15:117db924cf7c 343 #define ecc_oid_secp192r1 CODED_SECP192R1
wolfSSL 15:117db924cf7c 344 #endif
wolfSSL 15:117db924cf7c 345 #define ecc_oid_secp192r1_sz CODED_SECP192R1_SZ
wolfSSL 15:117db924cf7c 346 #endif /* !NO_ECC_SECP */
wolfSSL 15:117db924cf7c 347 #ifdef HAVE_ECC_SECPR2
wolfSSL 15:117db924cf7c 348 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 349 #define CODED_PRIME192V2 {1,2,840,10045,3,1,2}
wolfSSL 15:117db924cf7c 350 #define CODED_PRIME192V2_SZ 7
wolfSSL 15:117db924cf7c 351 #else
wolfSSL 15:117db924cf7c 352 #define CODED_PRIME192V2 {0x2A,0x86,0x48,0xCE,0x3D,0x03,0x01,0x02}
wolfSSL 15:117db924cf7c 353 #define CODED_PRIME192V2_SZ 8
wolfSSL 15:117db924cf7c 354 #endif
wolfSSL 15:117db924cf7c 355 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 356 static const ecc_oid_t ecc_oid_prime192v2[] = CODED_PRIME192V2;
wolfSSL 15:117db924cf7c 357 #else
wolfSSL 15:117db924cf7c 358 #define ecc_oid_prime192v2 CODED_PRIME192V2
wolfSSL 15:117db924cf7c 359 #endif
wolfSSL 15:117db924cf7c 360 #define ecc_oid_prime192v2_sz CODED_PRIME192V2_SZ
wolfSSL 15:117db924cf7c 361 #endif /* HAVE_ECC_SECPR2 */
wolfSSL 15:117db924cf7c 362 #ifdef HAVE_ECC_SECPR3
wolfSSL 15:117db924cf7c 363 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 364 #define CODED_PRIME192V3 {1,2,840,10045,3,1,3}
wolfSSL 15:117db924cf7c 365 #define CODED_PRIME192V3_SZ 7
wolfSSL 15:117db924cf7c 366 #else
wolfSSL 15:117db924cf7c 367 #define CODED_PRIME192V3 {0x2A,0x86,0x48,0xCE,0x3D,0x03,0x01,0x03}
wolfSSL 15:117db924cf7c 368 #define CODED_PRIME192V3_SZ 8
wolfSSL 15:117db924cf7c 369 #endif
wolfSSL 15:117db924cf7c 370 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 371 static const ecc_oid_t ecc_oid_prime192v3[] = CODED_PRIME192V3;
wolfSSL 15:117db924cf7c 372 #else
wolfSSL 15:117db924cf7c 373 #define ecc_oid_prime192v3 CODED_PRIME192V3
wolfSSL 15:117db924cf7c 374 #endif
wolfSSL 15:117db924cf7c 375 #define ecc_oid_prime192v3_sz CODED_PRIME192V3_SZ
wolfSSL 15:117db924cf7c 376 #endif /* HAVE_ECC_SECPR3 */
wolfSSL 15:117db924cf7c 377 #ifdef HAVE_ECC_KOBLITZ
wolfSSL 15:117db924cf7c 378 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 379 #define CODED_SECP192K1 {1,3,132,0,31}
wolfSSL 15:117db924cf7c 380 #define CODED_SECP192K1_SZ 5
wolfSSL 15:117db924cf7c 381 #else
wolfSSL 15:117db924cf7c 382 #define CODED_SECP192K1 {0x2B,0x81,0x04,0x00,0x1F}
wolfSSL 15:117db924cf7c 383 #define CODED_SECP192K1_SZ 5
wolfSSL 15:117db924cf7c 384 #endif
wolfSSL 15:117db924cf7c 385 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 386 static const ecc_oid_t ecc_oid_secp192k1[] = CODED_SECP192K1;
wolfSSL 15:117db924cf7c 387 #else
wolfSSL 15:117db924cf7c 388 #define ecc_oid_secp192k1 CODED_SECP192K1
wolfSSL 15:117db924cf7c 389 #endif
wolfSSL 15:117db924cf7c 390 #define ecc_oid_secp192k1_sz CODED_SECP192K1_SZ
wolfSSL 15:117db924cf7c 391 #endif /* HAVE_ECC_KOBLITZ */
wolfSSL 15:117db924cf7c 392 #ifdef HAVE_ECC_BRAINPOOL
wolfSSL 15:117db924cf7c 393 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 394 #define CODED_BRAINPOOLP192R1 {1,3,36,3,3,2,8,1,1,3}
wolfSSL 15:117db924cf7c 395 #define CODED_BRAINPOOLP192R1_SZ 10
wolfSSL 15:117db924cf7c 396 #else
wolfSSL 15:117db924cf7c 397 #define CODED_BRAINPOOLP192R1 {0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x03}
wolfSSL 15:117db924cf7c 398 #define CODED_BRAINPOOLP192R1_SZ 9
wolfSSL 15:117db924cf7c 399 #endif
wolfSSL 15:117db924cf7c 400 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 401 static const ecc_oid_t ecc_oid_brainpoolp192r1[] = CODED_BRAINPOOLP192R1;
wolfSSL 15:117db924cf7c 402 #else
wolfSSL 15:117db924cf7c 403 #define ecc_oid_brainpoolp192r1 CODED_BRAINPOOLP192R1
wolfSSL 15:117db924cf7c 404 #endif
wolfSSL 15:117db924cf7c 405 #define ecc_oid_brainpoolp192r1_sz CODED_BRAINPOOLP192R1_SZ
wolfSSL 15:117db924cf7c 406 #endif /* HAVE_ECC_BRAINPOOL */
wolfSSL 15:117db924cf7c 407 #endif /* ECC192 */
wolfSSL 15:117db924cf7c 408 #ifdef ECC224
wolfSSL 15:117db924cf7c 409 #ifndef NO_ECC_SECP
wolfSSL 15:117db924cf7c 410 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 411 #define CODED_SECP224R1 {1,3,132,0,33}
wolfSSL 15:117db924cf7c 412 #define CODED_SECP224R1_SZ 5
wolfSSL 15:117db924cf7c 413 #else
wolfSSL 15:117db924cf7c 414 #define CODED_SECP224R1 {0x2B,0x81,0x04,0x00,0x21}
wolfSSL 15:117db924cf7c 415 #define CODED_SECP224R1_SZ 5
wolfSSL 15:117db924cf7c 416 #endif
wolfSSL 15:117db924cf7c 417 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 418 static const ecc_oid_t ecc_oid_secp224r1[] = CODED_SECP224R1;
wolfSSL 15:117db924cf7c 419 #else
wolfSSL 15:117db924cf7c 420 #define ecc_oid_secp224r1 CODED_SECP224R1
wolfSSL 15:117db924cf7c 421 #endif
wolfSSL 15:117db924cf7c 422 #define ecc_oid_secp224r1_sz CODED_SECP224R1_SZ
wolfSSL 15:117db924cf7c 423 #endif /* !NO_ECC_SECP */
wolfSSL 15:117db924cf7c 424 #ifdef HAVE_ECC_KOBLITZ
wolfSSL 15:117db924cf7c 425 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 426 #define CODED_SECP224K1 {1,3,132,0,32}
wolfSSL 15:117db924cf7c 427 #define CODED_SECP224K1_SZ 5
wolfSSL 15:117db924cf7c 428 #else
wolfSSL 15:117db924cf7c 429 #define CODED_SECP224K1 {0x2B,0x81,0x04,0x00,0x20}
wolfSSL 15:117db924cf7c 430 #define CODED_SECP224K1_SZ 5
wolfSSL 15:117db924cf7c 431 #endif
wolfSSL 15:117db924cf7c 432 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 433 static const ecc_oid_t ecc_oid_secp224k1[] = CODED_SECP224K1;
wolfSSL 15:117db924cf7c 434 #else
wolfSSL 15:117db924cf7c 435 #define ecc_oid_secp224k1 CODED_SECP224K1
wolfSSL 15:117db924cf7c 436 #endif
wolfSSL 15:117db924cf7c 437 #define ecc_oid_secp224k1_sz CODED_SECP224K1_SZ
wolfSSL 15:117db924cf7c 438 #endif /* HAVE_ECC_KOBLITZ */
wolfSSL 15:117db924cf7c 439 #ifdef HAVE_ECC_BRAINPOOL
wolfSSL 15:117db924cf7c 440 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 441 #define CODED_BRAINPOOLP224R1 {1,3,36,3,3,2,8,1,1,5}
wolfSSL 15:117db924cf7c 442 #define CODED_BRAINPOOLP224R1_SZ 10
wolfSSL 15:117db924cf7c 443 #else
wolfSSL 15:117db924cf7c 444 #define CODED_BRAINPOOLP224R1 {0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x05}
wolfSSL 15:117db924cf7c 445 #define CODED_BRAINPOOLP224R1_SZ 9
wolfSSL 15:117db924cf7c 446 #endif
wolfSSL 15:117db924cf7c 447 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 448 static const ecc_oid_t ecc_oid_brainpoolp224r1[] = CODED_BRAINPOOLP224R1;
wolfSSL 15:117db924cf7c 449 #else
wolfSSL 15:117db924cf7c 450 #define ecc_oid_brainpoolp224r1 CODED_BRAINPOOLP224R1
wolfSSL 15:117db924cf7c 451 #endif
wolfSSL 15:117db924cf7c 452 #define ecc_oid_brainpoolp224r1_sz CODED_BRAINPOOLP224R1_SZ
wolfSSL 15:117db924cf7c 453 #endif /* HAVE_ECC_BRAINPOOL */
wolfSSL 15:117db924cf7c 454 #endif /* ECC224 */
wolfSSL 15:117db924cf7c 455 #ifdef ECC239
wolfSSL 15:117db924cf7c 456 #ifndef NO_ECC_SECP
wolfSSL 15:117db924cf7c 457 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 458 #define CODED_PRIME239V1 {1,2,840,10045,3,1,4}
wolfSSL 15:117db924cf7c 459 #define CODED_PRIME239V1_SZ 7
wolfSSL 15:117db924cf7c 460 #else
wolfSSL 15:117db924cf7c 461 #define CODED_PRIME239V1 {0x2A,0x86,0x48,0xCE,0x3D,0x03,0x01,0x04}
wolfSSL 15:117db924cf7c 462 #define CODED_PRIME239V1_SZ 8
wolfSSL 15:117db924cf7c 463 #endif
wolfSSL 15:117db924cf7c 464 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 465 static const ecc_oid_t ecc_oid_prime239v1[] = CODED_PRIME239V1;
wolfSSL 15:117db924cf7c 466 #else
wolfSSL 15:117db924cf7c 467 #define ecc_oid_prime239v1 CODED_PRIME239V1
wolfSSL 15:117db924cf7c 468 #endif
wolfSSL 15:117db924cf7c 469 #define ecc_oid_prime239v1_sz CODED_PRIME239V1_SZ
wolfSSL 15:117db924cf7c 470 #endif /* !NO_ECC_SECP */
wolfSSL 15:117db924cf7c 471 #ifdef HAVE_ECC_SECPR2
wolfSSL 15:117db924cf7c 472 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 473 #define CODED_PRIME239V2 {1,2,840,10045,3,1,5}
wolfSSL 15:117db924cf7c 474 #define CODED_PRIME239V2_SZ 7
wolfSSL 15:117db924cf7c 475 #else
wolfSSL 15:117db924cf7c 476 #define CODED_PRIME239V2 {0x2A,0x86,0x48,0xCE,0x3D,0x03,0x01,0x05}
wolfSSL 15:117db924cf7c 477 #define CODED_PRIME239V2_SZ 8
wolfSSL 15:117db924cf7c 478 #endif
wolfSSL 15:117db924cf7c 479 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 480 static const ecc_oid_t ecc_oid_prime239v2[] = CODED_PRIME239V2;
wolfSSL 15:117db924cf7c 481 #else
wolfSSL 15:117db924cf7c 482 #define ecc_oid_prime239v2 CODED_PRIME239V2
wolfSSL 15:117db924cf7c 483 #endif
wolfSSL 15:117db924cf7c 484 #define ecc_oid_prime239v2_sz CODED_PRIME239V2_SZ
wolfSSL 15:117db924cf7c 485 #endif /* HAVE_ECC_SECPR2 */
wolfSSL 15:117db924cf7c 486 #ifdef HAVE_ECC_SECPR3
wolfSSL 15:117db924cf7c 487 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 488 #define CODED_PRIME239V3 {1,2,840,10045,3,1,6}
wolfSSL 15:117db924cf7c 489 #define CODED_PRIME239V3_SZ 7
wolfSSL 15:117db924cf7c 490 #else
wolfSSL 15:117db924cf7c 491 #define CODED_PRIME239V3 {0x2A,0x86,0x48,0xCE,0x3D,0x03,0x01,0x06}
wolfSSL 15:117db924cf7c 492 #define CODED_PRIME239V3_SZ 8
wolfSSL 15:117db924cf7c 493 #endif
wolfSSL 15:117db924cf7c 494 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 495 static const ecc_oid_t ecc_oid_prime239v3[] = CODED_PRIME239V3;
wolfSSL 15:117db924cf7c 496 #else
wolfSSL 15:117db924cf7c 497 #define ecc_oid_prime239v3 CODED_PRIME239V3
wolfSSL 15:117db924cf7c 498 #endif
wolfSSL 15:117db924cf7c 499 #define ecc_oid_prime239v3_sz CODED_PRIME239V3_SZ
wolfSSL 15:117db924cf7c 500 #endif /* HAVE_ECC_SECPR3 */
wolfSSL 15:117db924cf7c 501 #endif /* ECC239 */
wolfSSL 15:117db924cf7c 502 #ifdef ECC256
wolfSSL 15:117db924cf7c 503 #ifndef NO_ECC_SECP
wolfSSL 15:117db924cf7c 504 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 505 #define CODED_SECP256R1 {1,2,840,10045,3,1,7}
wolfSSL 15:117db924cf7c 506 #define CODED_SECP256R1_SZ 7
wolfSSL 15:117db924cf7c 507 #else
wolfSSL 15:117db924cf7c 508 #define CODED_SECP256R1 {0x2A,0x86,0x48,0xCE,0x3D,0x03,0x01,0x07}
wolfSSL 15:117db924cf7c 509 #define CODED_SECP256R1_SZ 8
wolfSSL 15:117db924cf7c 510 #endif
wolfSSL 15:117db924cf7c 511 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 512 static const ecc_oid_t ecc_oid_secp256r1[] = CODED_SECP256R1;
wolfSSL 15:117db924cf7c 513 #else
wolfSSL 15:117db924cf7c 514 #define ecc_oid_secp256r1 CODED_SECP256R1
wolfSSL 15:117db924cf7c 515 #endif
wolfSSL 15:117db924cf7c 516 #define ecc_oid_secp256r1_sz CODED_SECP256R1_SZ
wolfSSL 15:117db924cf7c 517 #endif /* !NO_ECC_SECP */
wolfSSL 15:117db924cf7c 518 #ifdef HAVE_ECC_KOBLITZ
wolfSSL 15:117db924cf7c 519 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 520 #define CODED_SECP256K1 {1,3,132,0,10}
wolfSSL 15:117db924cf7c 521 #define CODED_SECP256K1_SZ 5
wolfSSL 15:117db924cf7c 522 #else
wolfSSL 15:117db924cf7c 523 #define CODED_SECP256K1 {0x2B,0x81,0x04,0x00,0x0A}
wolfSSL 15:117db924cf7c 524 #define CODED_SECP256K1_SZ 5
wolfSSL 15:117db924cf7c 525 #endif
wolfSSL 15:117db924cf7c 526 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 527 static const ecc_oid_t ecc_oid_secp256k1[] = CODED_SECP256K1;
wolfSSL 15:117db924cf7c 528 #else
wolfSSL 15:117db924cf7c 529 #define ecc_oid_secp256k1 CODED_SECP256K1
wolfSSL 15:117db924cf7c 530 #endif
wolfSSL 15:117db924cf7c 531 #define ecc_oid_secp256k1_sz CODED_SECP256K1_SZ
wolfSSL 15:117db924cf7c 532 #endif /* HAVE_ECC_KOBLITZ */
wolfSSL 15:117db924cf7c 533 #ifdef HAVE_ECC_BRAINPOOL
wolfSSL 15:117db924cf7c 534 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 535 #define CODED_BRAINPOOLP256R1 {1,3,36,3,3,2,8,1,1,7}
wolfSSL 15:117db924cf7c 536 #define CODED_BRAINPOOLP256R1_SZ 10
wolfSSL 15:117db924cf7c 537 #else
wolfSSL 15:117db924cf7c 538 #define CODED_BRAINPOOLP256R1 {0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x07}
wolfSSL 15:117db924cf7c 539 #define CODED_BRAINPOOLP256R1_SZ 9
wolfSSL 15:117db924cf7c 540 #endif
wolfSSL 15:117db924cf7c 541 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 542 static const ecc_oid_t ecc_oid_brainpoolp256r1[] = CODED_BRAINPOOLP256R1;
wolfSSL 15:117db924cf7c 543 #else
wolfSSL 15:117db924cf7c 544 #define ecc_oid_brainpoolp256r1 CODED_BRAINPOOLP256R1
wolfSSL 15:117db924cf7c 545 #endif
wolfSSL 15:117db924cf7c 546 #define ecc_oid_brainpoolp256r1_sz CODED_BRAINPOOLP256R1_SZ
wolfSSL 15:117db924cf7c 547 #endif /* HAVE_ECC_BRAINPOOL */
wolfSSL 15:117db924cf7c 548 #endif /* ECC256 */
wolfSSL 15:117db924cf7c 549 #ifdef ECC320
wolfSSL 15:117db924cf7c 550 #ifdef HAVE_ECC_BRAINPOOL
wolfSSL 15:117db924cf7c 551 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 552 #define CODED_BRAINPOOLP320R1 {1,3,36,3,3,2,8,1,1,9}
wolfSSL 15:117db924cf7c 553 #define CODED_BRAINPOOLP320R1_SZ 10
wolfSSL 15:117db924cf7c 554 #else
wolfSSL 15:117db924cf7c 555 #define CODED_BRAINPOOLP320R1 {0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x09}
wolfSSL 15:117db924cf7c 556 #define CODED_BRAINPOOLP320R1_SZ 9
wolfSSL 15:117db924cf7c 557 #endif
wolfSSL 15:117db924cf7c 558 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 559 static const ecc_oid_t ecc_oid_brainpoolp320r1[] = CODED_BRAINPOOLP320R1;
wolfSSL 15:117db924cf7c 560 #else
wolfSSL 15:117db924cf7c 561 #define ecc_oid_brainpoolp320r1 CODED_BRAINPOOLP320R1
wolfSSL 15:117db924cf7c 562 #endif
wolfSSL 15:117db924cf7c 563 #define ecc_oid_brainpoolp320r1_sz CODED_BRAINPOOLP320R1_SZ
wolfSSL 15:117db924cf7c 564 #endif /* HAVE_ECC_BRAINPOOL */
wolfSSL 15:117db924cf7c 565 #endif /* ECC320 */
wolfSSL 15:117db924cf7c 566 #ifdef ECC384
wolfSSL 15:117db924cf7c 567 #ifndef NO_ECC_SECP
wolfSSL 15:117db924cf7c 568 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 569 #define CODED_SECP384R1 {1,3,132,0,34}
wolfSSL 15:117db924cf7c 570 #define CODED_SECP384R1_SZ 5
wolfSSL 15:117db924cf7c 571 #else
wolfSSL 15:117db924cf7c 572 #define CODED_SECP384R1 {0x2B,0x81,0x04,0x00,0x22}
wolfSSL 15:117db924cf7c 573 #define CODED_SECP384R1_SZ 5
wolfSSL 15:117db924cf7c 574 #endif
wolfSSL 15:117db924cf7c 575 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 576 static const ecc_oid_t ecc_oid_secp384r1[] = CODED_SECP384R1;
wolfSSL 15:117db924cf7c 577 #define CODED_SECP384R1_OID ecc_oid_secp384r1
wolfSSL 15:117db924cf7c 578 #else
wolfSSL 15:117db924cf7c 579 #define ecc_oid_secp384r1 CODED_SECP384R1
wolfSSL 15:117db924cf7c 580 #endif
wolfSSL 15:117db924cf7c 581 #define ecc_oid_secp384r1_sz CODED_SECP384R1_SZ
wolfSSL 15:117db924cf7c 582 #endif /* !NO_ECC_SECP */
wolfSSL 15:117db924cf7c 583 #ifdef HAVE_ECC_BRAINPOOL
wolfSSL 15:117db924cf7c 584 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 585 #define CODED_BRAINPOOLP384R1 {1,3,36,3,3,2,8,1,1,11}
wolfSSL 15:117db924cf7c 586 #define CODED_BRAINPOOLP384R1_SZ 10
wolfSSL 15:117db924cf7c 587 #else
wolfSSL 15:117db924cf7c 588 #define CODED_BRAINPOOLP384R1 {0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x0B}
wolfSSL 15:117db924cf7c 589 #define CODED_BRAINPOOLP384R1_SZ 9
wolfSSL 15:117db924cf7c 590 #endif
wolfSSL 15:117db924cf7c 591 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 592 static const ecc_oid_t ecc_oid_brainpoolp384r1[] = CODED_BRAINPOOLP384R1;
wolfSSL 15:117db924cf7c 593 #else
wolfSSL 15:117db924cf7c 594 #define ecc_oid_brainpoolp384r1 CODED_BRAINPOOLP384R1
wolfSSL 15:117db924cf7c 595 #endif
wolfSSL 15:117db924cf7c 596 #define ecc_oid_brainpoolp384r1_sz CODED_BRAINPOOLP384R1_SZ
wolfSSL 15:117db924cf7c 597 #endif /* HAVE_ECC_BRAINPOOL */
wolfSSL 15:117db924cf7c 598 #endif /* ECC384 */
wolfSSL 15:117db924cf7c 599 #ifdef ECC512
wolfSSL 15:117db924cf7c 600 #ifdef HAVE_ECC_BRAINPOOL
wolfSSL 15:117db924cf7c 601 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 602 #define CODED_BRAINPOOLP512R1 {1,3,36,3,3,2,8,1,1,13}
wolfSSL 15:117db924cf7c 603 #define CODED_BRAINPOOLP512R1_SZ 10
wolfSSL 15:117db924cf7c 604 #else
wolfSSL 15:117db924cf7c 605 #define CODED_BRAINPOOLP512R1 {0x2B,0x24,0x03,0x03,0x02,0x08,0x01,0x01,0x0D}
wolfSSL 15:117db924cf7c 606 #define CODED_BRAINPOOLP512R1_SZ 9
wolfSSL 15:117db924cf7c 607 #endif
wolfSSL 15:117db924cf7c 608 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 609 static const ecc_oid_t ecc_oid_brainpoolp512r1[] = CODED_BRAINPOOLP512R1;
wolfSSL 15:117db924cf7c 610 #else
wolfSSL 15:117db924cf7c 611 #define ecc_oid_brainpoolp512r1 CODED_BRAINPOOLP512R1
wolfSSL 15:117db924cf7c 612 #endif
wolfSSL 15:117db924cf7c 613 #define ecc_oid_brainpoolp512r1_sz CODED_BRAINPOOLP512R1_SZ
wolfSSL 15:117db924cf7c 614 #endif /* HAVE_ECC_BRAINPOOL */
wolfSSL 15:117db924cf7c 615 #endif /* ECC512 */
wolfSSL 15:117db924cf7c 616 #ifdef ECC521
wolfSSL 15:117db924cf7c 617 #ifndef NO_ECC_SECP
wolfSSL 15:117db924cf7c 618 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 619 #define CODED_SECP521R1 {1,3,132,0,35}
wolfSSL 15:117db924cf7c 620 #define CODED_SECP521R1_SZ 5
wolfSSL 15:117db924cf7c 621 #else
wolfSSL 15:117db924cf7c 622 #define CODED_SECP521R1 {0x2B,0x81,0x04,0x00,0x23}
wolfSSL 15:117db924cf7c 623 #define CODED_SECP521R1_SZ 5
wolfSSL 15:117db924cf7c 624 #endif
wolfSSL 15:117db924cf7c 625 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 626 static const ecc_oid_t ecc_oid_secp521r1[] = CODED_SECP521R1;
wolfSSL 15:117db924cf7c 627 #else
wolfSSL 15:117db924cf7c 628 #define ecc_oid_secp521r1 CODED_SECP521R1
wolfSSL 15:117db924cf7c 629 #endif
wolfSSL 15:117db924cf7c 630 #define ecc_oid_secp521r1_sz CODED_SECP521R1_SZ
wolfSSL 15:117db924cf7c 631 #endif /* !NO_ECC_SECP */
wolfSSL 15:117db924cf7c 632 #endif /* ECC521 */
wolfSSL 15:117db924cf7c 633
wolfSSL 15:117db924cf7c 634
wolfSSL 15:117db924cf7c 635 /* This holds the key settings.
wolfSSL 15:117db924cf7c 636 ***MUST*** be organized by size from smallest to largest. */
wolfSSL 15:117db924cf7c 637
wolfSSL 15:117db924cf7c 638 const ecc_set_type ecc_sets[] = {
wolfSSL 15:117db924cf7c 639 #ifdef ECC112
wolfSSL 15:117db924cf7c 640 #ifndef NO_ECC_SECP
wolfSSL 15:117db924cf7c 641 {
wolfSSL 15:117db924cf7c 642 14, /* size/bytes */
wolfSSL 15:117db924cf7c 643 ECC_SECP112R1, /* ID */
wolfSSL 15:117db924cf7c 644 "SECP112R1", /* curve name */
wolfSSL 15:117db924cf7c 645 "DB7C2ABF62E35E668076BEAD208B", /* prime */
wolfSSL 15:117db924cf7c 646 "DB7C2ABF62E35E668076BEAD2088", /* A */
wolfSSL 15:117db924cf7c 647 "659EF8BA043916EEDE8911702B22", /* B */
wolfSSL 15:117db924cf7c 648 "DB7C2ABF62E35E7628DFAC6561C5", /* order */
wolfSSL 15:117db924cf7c 649 "9487239995A5EE76B55F9C2F098", /* Gx */
wolfSSL 15:117db924cf7c 650 "A89CE5AF8724C0A23E0E0FF77500", /* Gy */
wolfSSL 15:117db924cf7c 651 ecc_oid_secp112r1, /* oid/oidSz */
wolfSSL 15:117db924cf7c 652 ecc_oid_secp112r1_sz,
wolfSSL 15:117db924cf7c 653 ECC_SECP112R1_OID, /* oid sum */
wolfSSL 15:117db924cf7c 654 1, /* cofactor */
wolfSSL 15:117db924cf7c 655 },
wolfSSL 15:117db924cf7c 656 #endif /* !NO_ECC_SECP */
wolfSSL 15:117db924cf7c 657 #ifdef HAVE_ECC_SECPR2
wolfSSL 15:117db924cf7c 658 {
wolfSSL 15:117db924cf7c 659 14, /* size/bytes */
wolfSSL 15:117db924cf7c 660 ECC_SECP112R2, /* ID */
wolfSSL 15:117db924cf7c 661 "SECP112R2", /* curve name */
wolfSSL 15:117db924cf7c 662 "DB7C2ABF62E35E668076BEAD208B", /* prime */
wolfSSL 15:117db924cf7c 663 "6127C24C05F38A0AAAF65C0EF02C", /* A */
wolfSSL 15:117db924cf7c 664 "51DEF1815DB5ED74FCC34C85D709", /* B */
wolfSSL 15:117db924cf7c 665 "36DF0AAFD8B8D7597CA10520D04B", /* order */
wolfSSL 15:117db924cf7c 666 "4BA30AB5E892B4E1649DD0928643", /* Gx */
wolfSSL 15:117db924cf7c 667 "ADCD46F5882E3747DEF36E956E97", /* Gy */
wolfSSL 15:117db924cf7c 668 ecc_oid_secp112r2, /* oid/oidSz */
wolfSSL 15:117db924cf7c 669 ecc_oid_secp112r2_sz,
wolfSSL 15:117db924cf7c 670 ECC_SECP112R2_OID, /* oid sum */
wolfSSL 15:117db924cf7c 671 4, /* cofactor */
wolfSSL 15:117db924cf7c 672 },
wolfSSL 15:117db924cf7c 673 #endif /* HAVE_ECC_SECPR2 */
wolfSSL 15:117db924cf7c 674 #endif /* ECC112 */
wolfSSL 15:117db924cf7c 675 #ifdef ECC128
wolfSSL 15:117db924cf7c 676 #ifndef NO_ECC_SECP
wolfSSL 15:117db924cf7c 677 {
wolfSSL 15:117db924cf7c 678 16, /* size/bytes */
wolfSSL 15:117db924cf7c 679 ECC_SECP128R1, /* ID */
wolfSSL 15:117db924cf7c 680 "SECP128R1", /* curve name */
wolfSSL 15:117db924cf7c 681 "FFFFFFFDFFFFFFFFFFFFFFFFFFFFFFFF", /* prime */
wolfSSL 15:117db924cf7c 682 "FFFFFFFDFFFFFFFFFFFFFFFFFFFFFFFC", /* A */
wolfSSL 15:117db924cf7c 683 "E87579C11079F43DD824993C2CEE5ED3", /* B */
wolfSSL 15:117db924cf7c 684 "FFFFFFFE0000000075A30D1B9038A115", /* order */
wolfSSL 15:117db924cf7c 685 "161FF7528B899B2D0C28607CA52C5B86", /* Gx */
wolfSSL 15:117db924cf7c 686 "CF5AC8395BAFEB13C02DA292DDED7A83", /* Gy */
wolfSSL 15:117db924cf7c 687 ecc_oid_secp128r1, /* oid/oidSz */
wolfSSL 15:117db924cf7c 688 ecc_oid_secp128r1_sz,
wolfSSL 15:117db924cf7c 689 ECC_SECP128R1_OID, /* oid sum */
wolfSSL 15:117db924cf7c 690 1, /* cofactor */
wolfSSL 15:117db924cf7c 691 },
wolfSSL 15:117db924cf7c 692 #endif /* !NO_ECC_SECP */
wolfSSL 15:117db924cf7c 693 #ifdef HAVE_ECC_SECPR2
wolfSSL 15:117db924cf7c 694 {
wolfSSL 15:117db924cf7c 695 16, /* size/bytes */
wolfSSL 15:117db924cf7c 696 ECC_SECP128R2, /* ID */
wolfSSL 15:117db924cf7c 697 "SECP128R2", /* curve name */
wolfSSL 15:117db924cf7c 698 "FFFFFFFDFFFFFFFFFFFFFFFFFFFFFFFF", /* prime */
wolfSSL 15:117db924cf7c 699 "D6031998D1B3BBFEBF59CC9BBFF9AEE1", /* A */
wolfSSL 15:117db924cf7c 700 "5EEEFCA380D02919DC2C6558BB6D8A5D", /* B */
wolfSSL 15:117db924cf7c 701 "3FFFFFFF7FFFFFFFBE0024720613B5A3", /* order */
wolfSSL 15:117db924cf7c 702 "7B6AA5D85E572983E6FB32A7CDEBC140", /* Gx */
wolfSSL 15:117db924cf7c 703 "27B6916A894D3AEE7106FE805FC34B44", /* Gy */
wolfSSL 15:117db924cf7c 704 ecc_oid_secp128r2, /* oid/oidSz */
wolfSSL 15:117db924cf7c 705 ecc_oid_secp128r2_sz,
wolfSSL 15:117db924cf7c 706 ECC_SECP128R2_OID, /* oid sum */
wolfSSL 15:117db924cf7c 707 4, /* cofactor */
wolfSSL 15:117db924cf7c 708 },
wolfSSL 15:117db924cf7c 709 #endif /* HAVE_ECC_SECPR2 */
wolfSSL 15:117db924cf7c 710 #endif /* ECC128 */
wolfSSL 15:117db924cf7c 711 #ifdef ECC160
wolfSSL 15:117db924cf7c 712 #ifndef NO_ECC_SECP
wolfSSL 15:117db924cf7c 713 {
wolfSSL 15:117db924cf7c 714 20, /* size/bytes */
wolfSSL 15:117db924cf7c 715 ECC_SECP160R1, /* ID */
wolfSSL 15:117db924cf7c 716 "SECP160R1", /* curve name */
wolfSSL 15:117db924cf7c 717 "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF7FFFFFFF", /* prime */
wolfSSL 15:117db924cf7c 718 "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF7FFFFFFC", /* A */
wolfSSL 15:117db924cf7c 719 "1C97BEFC54BD7A8B65ACF89F81D4D4ADC565FA45", /* B */
wolfSSL 15:117db924cf7c 720 "100000000000000000001F4C8F927AED3CA752257",/* order */
wolfSSL 15:117db924cf7c 721 "4A96B5688EF573284664698968C38BB913CBFC82", /* Gx */
wolfSSL 15:117db924cf7c 722 "23A628553168947D59DCC912042351377AC5FB32", /* Gy */
wolfSSL 15:117db924cf7c 723 ecc_oid_secp160r1, /* oid/oidSz */
wolfSSL 15:117db924cf7c 724 ecc_oid_secp160r1_sz,
wolfSSL 15:117db924cf7c 725 ECC_SECP160R1_OID, /* oid sum */
wolfSSL 15:117db924cf7c 726 1, /* cofactor */
wolfSSL 15:117db924cf7c 727 },
wolfSSL 15:117db924cf7c 728 #endif /* !NO_ECC_SECP */
wolfSSL 15:117db924cf7c 729 #ifdef HAVE_ECC_SECPR2
wolfSSL 15:117db924cf7c 730 {
wolfSSL 15:117db924cf7c 731 20, /* size/bytes */
wolfSSL 15:117db924cf7c 732 ECC_SECP160R2, /* ID */
wolfSSL 15:117db924cf7c 733 "SECP160R2", /* curve name */
wolfSSL 15:117db924cf7c 734 "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFAC73", /* prime */
wolfSSL 15:117db924cf7c 735 "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFAC70", /* A */
wolfSSL 15:117db924cf7c 736 "B4E134D3FB59EB8BAB57274904664D5AF50388BA", /* B */
wolfSSL 15:117db924cf7c 737 "100000000000000000000351EE786A818F3A1A16B",/* order */
wolfSSL 15:117db924cf7c 738 "52DCB034293A117E1F4FF11B30F7199D3144CE6D", /* Gx */
wolfSSL 15:117db924cf7c 739 "FEAFFEF2E331F296E071FA0DF9982CFEA7D43F2E", /* Gy */
wolfSSL 15:117db924cf7c 740 ecc_oid_secp160r2, /* oid/oidSz */
wolfSSL 15:117db924cf7c 741 ecc_oid_secp160r2_sz,
wolfSSL 15:117db924cf7c 742 ECC_SECP160R2_OID, /* oid sum */
wolfSSL 15:117db924cf7c 743 1, /* cofactor */
wolfSSL 15:117db924cf7c 744 },
wolfSSL 15:117db924cf7c 745 #endif /* HAVE_ECC_SECPR2 */
wolfSSL 15:117db924cf7c 746 #ifdef HAVE_ECC_KOBLITZ
wolfSSL 15:117db924cf7c 747 {
wolfSSL 15:117db924cf7c 748 20, /* size/bytes */
wolfSSL 15:117db924cf7c 749 ECC_SECP160K1, /* ID */
wolfSSL 15:117db924cf7c 750 "SECP160K1", /* curve name */
wolfSSL 15:117db924cf7c 751 "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFAC73", /* prime */
wolfSSL 15:117db924cf7c 752 "0000000000000000000000000000000000000000", /* A */
wolfSSL 15:117db924cf7c 753 "0000000000000000000000000000000000000007", /* B */
wolfSSL 15:117db924cf7c 754 "100000000000000000001B8FA16DFAB9ACA16B6B3",/* order */
wolfSSL 15:117db924cf7c 755 "3B4C382CE37AA192A4019E763036F4F5DD4D7EBB", /* Gx */
wolfSSL 15:117db924cf7c 756 "938CF935318FDCED6BC28286531733C3F03C4FEE", /* Gy */
wolfSSL 15:117db924cf7c 757 ecc_oid_secp160k1, /* oid/oidSz */
wolfSSL 15:117db924cf7c 758 ecc_oid_secp160k1_sz,
wolfSSL 15:117db924cf7c 759 ECC_SECP160K1_OID, /* oid sum */
wolfSSL 15:117db924cf7c 760 1, /* cofactor */
wolfSSL 15:117db924cf7c 761 },
wolfSSL 15:117db924cf7c 762 #endif /* HAVE_ECC_KOBLITZ */
wolfSSL 15:117db924cf7c 763 #ifdef HAVE_ECC_BRAINPOOL
wolfSSL 15:117db924cf7c 764 {
wolfSSL 15:117db924cf7c 765 20, /* size/bytes */
wolfSSL 15:117db924cf7c 766 ECC_BRAINPOOLP160R1, /* ID */
wolfSSL 15:117db924cf7c 767 "BRAINPOOLP160R1", /* curve name */
wolfSSL 15:117db924cf7c 768 "E95E4A5F737059DC60DFC7AD95B3D8139515620F", /* prime */
wolfSSL 15:117db924cf7c 769 "340E7BE2A280EB74E2BE61BADA745D97E8F7C300", /* A */
wolfSSL 15:117db924cf7c 770 "1E589A8595423412134FAA2DBDEC95C8D8675E58", /* B */
wolfSSL 15:117db924cf7c 771 "E95E4A5F737059DC60DF5991D45029409E60FC09", /* order */
wolfSSL 15:117db924cf7c 772 "BED5AF16EA3F6A4F62938C4631EB5AF7BDBCDBC3", /* Gx */
wolfSSL 15:117db924cf7c 773 "1667CB477A1A8EC338F94741669C976316DA6321", /* Gy */
wolfSSL 15:117db924cf7c 774 ecc_oid_brainpoolp160r1, /* oid/oidSz */
wolfSSL 15:117db924cf7c 775 ecc_oid_brainpoolp160r1_sz,
wolfSSL 15:117db924cf7c 776 ECC_BRAINPOOLP160R1_OID, /* oid sum */
wolfSSL 15:117db924cf7c 777 1, /* cofactor */
wolfSSL 15:117db924cf7c 778 },
wolfSSL 15:117db924cf7c 779 #endif /* HAVE_ECC_BRAINPOOL */
wolfSSL 15:117db924cf7c 780 #endif /* ECC160 */
wolfSSL 15:117db924cf7c 781 #ifdef ECC192
wolfSSL 15:117db924cf7c 782 #ifndef NO_ECC_SECP
wolfSSL 15:117db924cf7c 783 {
wolfSSL 15:117db924cf7c 784 24, /* size/bytes */
wolfSSL 15:117db924cf7c 785 ECC_SECP192R1, /* ID */
wolfSSL 15:117db924cf7c 786 "SECP192R1", /* curve name */
wolfSSL 15:117db924cf7c 787 "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFF", /* prime */
wolfSSL 15:117db924cf7c 788 "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFC", /* A */
wolfSSL 15:117db924cf7c 789 "64210519E59C80E70FA7E9AB72243049FEB8DEECC146B9B1", /* B */
wolfSSL 15:117db924cf7c 790 "FFFFFFFFFFFFFFFFFFFFFFFF99DEF836146BC9B1B4D22831", /* order */
wolfSSL 15:117db924cf7c 791 "188DA80EB03090F67CBF20EB43A18800F4FF0AFD82FF1012", /* Gx */
wolfSSL 15:117db924cf7c 792 "7192B95FFC8DA78631011ED6B24CDD573F977A11E794811", /* Gy */
wolfSSL 15:117db924cf7c 793 ecc_oid_secp192r1, /* oid/oidSz */
wolfSSL 15:117db924cf7c 794 ecc_oid_secp192r1_sz,
wolfSSL 15:117db924cf7c 795 ECC_SECP192R1_OID, /* oid sum */
wolfSSL 15:117db924cf7c 796 1, /* cofactor */
wolfSSL 15:117db924cf7c 797 },
wolfSSL 15:117db924cf7c 798 #endif /* !NO_ECC_SECP */
wolfSSL 15:117db924cf7c 799 #ifdef HAVE_ECC_SECPR2
wolfSSL 15:117db924cf7c 800 {
wolfSSL 15:117db924cf7c 801 24, /* size/bytes */
wolfSSL 15:117db924cf7c 802 ECC_PRIME192V2, /* ID */
wolfSSL 15:117db924cf7c 803 "PRIME192V2", /* curve name */
wolfSSL 15:117db924cf7c 804 "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFF", /* prime */
wolfSSL 15:117db924cf7c 805 "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFC", /* A */
wolfSSL 15:117db924cf7c 806 "CC22D6DFB95C6B25E49C0D6364A4E5980C393AA21668D953", /* B */
wolfSSL 15:117db924cf7c 807 "FFFFFFFFFFFFFFFFFFFFFFFE5FB1A724DC80418648D8DD31", /* order */
wolfSSL 15:117db924cf7c 808 "EEA2BAE7E1497842F2DE7769CFE9C989C072AD696F48034A", /* Gx */
wolfSSL 15:117db924cf7c 809 "6574D11D69B6EC7A672BB82A083DF2F2B0847DE970B2DE15", /* Gy */
wolfSSL 15:117db924cf7c 810 ecc_oid_prime192v2, /* oid/oidSz */
wolfSSL 15:117db924cf7c 811 ecc_oid_prime192v2_sz,
wolfSSL 15:117db924cf7c 812 ECC_PRIME192V2_OID, /* oid sum */
wolfSSL 15:117db924cf7c 813 1, /* cofactor */
wolfSSL 15:117db924cf7c 814 },
wolfSSL 15:117db924cf7c 815 #endif /* HAVE_ECC_SECPR2 */
wolfSSL 15:117db924cf7c 816 #ifdef HAVE_ECC_SECPR3
wolfSSL 15:117db924cf7c 817 {
wolfSSL 15:117db924cf7c 818 24, /* size/bytes */
wolfSSL 15:117db924cf7c 819 ECC_PRIME192V3, /* ID */
wolfSSL 15:117db924cf7c 820 "PRIME192V3", /* curve name */
wolfSSL 15:117db924cf7c 821 "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFF", /* prime */
wolfSSL 15:117db924cf7c 822 "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFC", /* A */
wolfSSL 15:117db924cf7c 823 "22123DC2395A05CAA7423DAECCC94760A7D462256BD56916", /* B */
wolfSSL 15:117db924cf7c 824 "FFFFFFFFFFFFFFFFFFFFFFFF7A62D031C83F4294F640EC13", /* order */
wolfSSL 15:117db924cf7c 825 "7D29778100C65A1DA1783716588DCE2B8B4AEE8E228F1896", /* Gx */
wolfSSL 15:117db924cf7c 826 "38A90F22637337334B49DCB66A6DC8F9978ACA7648A943B0", /* Gy */
wolfSSL 15:117db924cf7c 827 ecc_oid_prime192v3, /* oid/oidSz */
wolfSSL 15:117db924cf7c 828 ecc_oid_prime192v3_sz,
wolfSSL 15:117db924cf7c 829 ECC_PRIME192V3_OID, /* oid sum */
wolfSSL 15:117db924cf7c 830 1, /* cofactor */
wolfSSL 15:117db924cf7c 831 },
wolfSSL 15:117db924cf7c 832 #endif /* HAVE_ECC_SECPR3 */
wolfSSL 15:117db924cf7c 833 #ifdef HAVE_ECC_KOBLITZ
wolfSSL 15:117db924cf7c 834 {
wolfSSL 15:117db924cf7c 835 24, /* size/bytes */
wolfSSL 15:117db924cf7c 836 ECC_SECP192K1, /* ID */
wolfSSL 15:117db924cf7c 837 "SECP192K1", /* curve name */
wolfSSL 15:117db924cf7c 838 "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFEE37", /* prime */
wolfSSL 15:117db924cf7c 839 "000000000000000000000000000000000000000000000000", /* A */
wolfSSL 15:117db924cf7c 840 "000000000000000000000000000000000000000000000003", /* B */
wolfSSL 15:117db924cf7c 841 "FFFFFFFFFFFFFFFFFFFFFFFE26F2FC170F69466A74DEFD8D", /* order */
wolfSSL 15:117db924cf7c 842 "DB4FF10EC057E9AE26B07D0280B7F4341DA5D1B1EAE06C7D", /* Gx */
wolfSSL 15:117db924cf7c 843 "9B2F2F6D9C5628A7844163D015BE86344082AA88D95E2F9D", /* Gy */
wolfSSL 15:117db924cf7c 844 ecc_oid_secp192k1, /* oid/oidSz */
wolfSSL 15:117db924cf7c 845 ecc_oid_secp192k1_sz,
wolfSSL 15:117db924cf7c 846 ECC_SECP192K1_OID, /* oid sum */
wolfSSL 15:117db924cf7c 847 1, /* cofactor */
wolfSSL 15:117db924cf7c 848 },
wolfSSL 15:117db924cf7c 849 #endif /* HAVE_ECC_KOBLITZ */
wolfSSL 15:117db924cf7c 850 #ifdef HAVE_ECC_BRAINPOOL
wolfSSL 15:117db924cf7c 851 {
wolfSSL 15:117db924cf7c 852 24, /* size/bytes */
wolfSSL 15:117db924cf7c 853 ECC_BRAINPOOLP192R1, /* ID */
wolfSSL 15:117db924cf7c 854 "BRAINPOOLP192R1", /* curve name */
wolfSSL 15:117db924cf7c 855 "C302F41D932A36CDA7A3463093D18DB78FCE476DE1A86297", /* prime */
wolfSSL 15:117db924cf7c 856 "6A91174076B1E0E19C39C031FE8685C1CAE040E5C69A28EF", /* A */
wolfSSL 15:117db924cf7c 857 "469A28EF7C28CCA3DC721D044F4496BCCA7EF4146FBF25C9", /* B */
wolfSSL 15:117db924cf7c 858 "C302F41D932A36CDA7A3462F9E9E916B5BE8F1029AC4ACC1", /* order */
wolfSSL 15:117db924cf7c 859 "C0A0647EAAB6A48753B033C56CB0F0900A2F5C4853375FD6", /* Gx */
wolfSSL 15:117db924cf7c 860 "14B690866ABD5BB88B5F4828C1490002E6773FA2FA299B8F", /* Gy */
wolfSSL 15:117db924cf7c 861 ecc_oid_brainpoolp192r1, /* oid/oidSz */
wolfSSL 15:117db924cf7c 862 ecc_oid_brainpoolp192r1_sz,
wolfSSL 15:117db924cf7c 863 ECC_BRAINPOOLP192R1_OID, /* oid sum */
wolfSSL 15:117db924cf7c 864 1, /* cofactor */
wolfSSL 15:117db924cf7c 865 },
wolfSSL 15:117db924cf7c 866 #endif /* HAVE_ECC_BRAINPOOL */
wolfSSL 15:117db924cf7c 867 #endif /* ECC192 */
wolfSSL 15:117db924cf7c 868 #ifdef ECC224
wolfSSL 15:117db924cf7c 869 #ifndef NO_ECC_SECP
wolfSSL 15:117db924cf7c 870 {
wolfSSL 15:117db924cf7c 871 28, /* size/bytes */
wolfSSL 15:117db924cf7c 872 ECC_SECP224R1, /* ID */
wolfSSL 15:117db924cf7c 873 "SECP224R1", /* curve name */
wolfSSL 15:117db924cf7c 874 "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF000000000000000000000001", /* prime */
wolfSSL 15:117db924cf7c 875 "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFFFFFFFFFFFFFFFFFE", /* A */
wolfSSL 15:117db924cf7c 876 "B4050A850C04B3ABF54132565044B0B7D7BFD8BA270B39432355FFB4", /* B */
wolfSSL 15:117db924cf7c 877 "FFFFFFFFFFFFFFFFFFFFFFFFFFFF16A2E0B8F03E13DD29455C5C2A3D", /* order */
wolfSSL 15:117db924cf7c 878 "B70E0CBD6BB4BF7F321390B94A03C1D356C21122343280D6115C1D21", /* Gx */
wolfSSL 15:117db924cf7c 879 "BD376388B5F723FB4C22DFE6CD4375A05A07476444D5819985007E34", /* Gy */
wolfSSL 15:117db924cf7c 880 ecc_oid_secp224r1, /* oid/oidSz */
wolfSSL 15:117db924cf7c 881 ecc_oid_secp224r1_sz,
wolfSSL 15:117db924cf7c 882 ECC_SECP224R1_OID, /* oid sum */
wolfSSL 15:117db924cf7c 883 1, /* cofactor */
wolfSSL 15:117db924cf7c 884 },
wolfSSL 15:117db924cf7c 885 #endif /* !NO_ECC_SECP */
wolfSSL 15:117db924cf7c 886 #ifdef HAVE_ECC_KOBLITZ
wolfSSL 15:117db924cf7c 887 {
wolfSSL 15:117db924cf7c 888 28, /* size/bytes */
wolfSSL 15:117db924cf7c 889 ECC_SECP224K1, /* ID */
wolfSSL 15:117db924cf7c 890 "SECP224K1", /* curve name */
wolfSSL 15:117db924cf7c 891 "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFE56D", /* prime */
wolfSSL 15:117db924cf7c 892 "00000000000000000000000000000000000000000000000000000000", /* A */
wolfSSL 15:117db924cf7c 893 "00000000000000000000000000000000000000000000000000000005", /* B */
wolfSSL 15:117db924cf7c 894 "10000000000000000000000000001DCE8D2EC6184CAF0A971769FB1F7",/* order */
wolfSSL 15:117db924cf7c 895 "A1455B334DF099DF30FC28A169A467E9E47075A90F7E650EB6B7A45C", /* Gx */
wolfSSL 15:117db924cf7c 896 "7E089FED7FBA344282CAFBD6F7E319F7C0B0BD59E2CA4BDB556D61A5", /* Gy */
wolfSSL 15:117db924cf7c 897 ecc_oid_secp224k1, /* oid/oidSz */
wolfSSL 15:117db924cf7c 898 ecc_oid_secp224k1_sz,
wolfSSL 15:117db924cf7c 899 ECC_SECP224K1_OID, /* oid sum */
wolfSSL 15:117db924cf7c 900 1, /* cofactor */
wolfSSL 15:117db924cf7c 901 },
wolfSSL 15:117db924cf7c 902 #endif /* HAVE_ECC_KOBLITZ */
wolfSSL 15:117db924cf7c 903 #ifdef HAVE_ECC_BRAINPOOL
wolfSSL 15:117db924cf7c 904 {
wolfSSL 15:117db924cf7c 905 28, /* size/bytes */
wolfSSL 15:117db924cf7c 906 ECC_BRAINPOOLP224R1, /* ID */
wolfSSL 15:117db924cf7c 907 "BRAINPOOLP224R1", /* curve name */
wolfSSL 15:117db924cf7c 908 "D7C134AA264366862A18302575D1D787B09F075797DA89F57EC8C0FF", /* prime */
wolfSSL 15:117db924cf7c 909 "68A5E62CA9CE6C1C299803A6C1530B514E182AD8B0042A59CAD29F43", /* A */
wolfSSL 15:117db924cf7c 910 "2580F63CCFE44138870713B1A92369E33E2135D266DBB372386C400B", /* B */
wolfSSL 15:117db924cf7c 911 "D7C134AA264366862A18302575D0FB98D116BC4B6DDEBCA3A5A7939F", /* order */
wolfSSL 15:117db924cf7c 912 "0D9029AD2C7E5CF4340823B2A87DC68C9E4CE3174C1E6EFDEE12C07D", /* Gx */
wolfSSL 15:117db924cf7c 913 "58AA56F772C0726F24C6B89E4ECDAC24354B9E99CAA3F6D3761402CD", /* Gy */
wolfSSL 15:117db924cf7c 914 ecc_oid_brainpoolp224r1, /* oid/oidSz */
wolfSSL 15:117db924cf7c 915 ecc_oid_brainpoolp224r1_sz,
wolfSSL 15:117db924cf7c 916 ECC_BRAINPOOLP224R1_OID, /* oid sum */
wolfSSL 15:117db924cf7c 917 1, /* cofactor */
wolfSSL 15:117db924cf7c 918 },
wolfSSL 15:117db924cf7c 919 #endif /* HAVE_ECC_BRAINPOOL */
wolfSSL 15:117db924cf7c 920 #endif /* ECC224 */
wolfSSL 15:117db924cf7c 921 #ifdef ECC239
wolfSSL 15:117db924cf7c 922 #ifndef NO_ECC_SECP
wolfSSL 15:117db924cf7c 923 {
wolfSSL 15:117db924cf7c 924 30, /* size/bytes */
wolfSSL 15:117db924cf7c 925 ECC_PRIME239V1, /* ID */
wolfSSL 15:117db924cf7c 926 "PRIME239V1", /* curve name */
wolfSSL 15:117db924cf7c 927 "7FFFFFFFFFFFFFFFFFFFFFFF7FFFFFFFFFFF8000000000007FFFFFFFFFFF", /* prime */
wolfSSL 15:117db924cf7c 928 "7FFFFFFFFFFFFFFFFFFFFFFF7FFFFFFFFFFF8000000000007FFFFFFFFFFC", /* A */
wolfSSL 15:117db924cf7c 929 "6B016C3BDCF18941D0D654921475CA71A9DB2FB27D1D37796185C2942C0A", /* B */
wolfSSL 15:117db924cf7c 930 "7FFFFFFFFFFFFFFFFFFFFFFF7FFFFF9E5E9A9F5D9071FBD1522688909D0B", /* order */
wolfSSL 15:117db924cf7c 931 "0FFA963CDCA8816CCC33B8642BEDF905C3D358573D3F27FBBD3B3CB9AAAF", /* Gx */
wolfSSL 15:117db924cf7c 932 "7DEBE8E4E90A5DAE6E4054CA530BA04654B36818CE226B39FCCB7B02F1AE", /* Gy */
wolfSSL 15:117db924cf7c 933 ecc_oid_prime239v1, /* oid/oidSz */
wolfSSL 15:117db924cf7c 934 ecc_oid_prime239v1_sz,
wolfSSL 15:117db924cf7c 935 ECC_PRIME239V1_OID, /* oid sum */
wolfSSL 15:117db924cf7c 936 1, /* cofactor */
wolfSSL 15:117db924cf7c 937 },
wolfSSL 15:117db924cf7c 938 #endif /* !NO_ECC_SECP */
wolfSSL 15:117db924cf7c 939 #ifdef HAVE_ECC_SECPR2
wolfSSL 15:117db924cf7c 940 {
wolfSSL 15:117db924cf7c 941 30, /* size/bytes */
wolfSSL 15:117db924cf7c 942 ECC_PRIME239V2, /* ID */
wolfSSL 15:117db924cf7c 943 "PRIME239V2", /* curve name */
wolfSSL 15:117db924cf7c 944 "7FFFFFFFFFFFFFFFFFFFFFFF7FFFFFFFFFFF8000000000007FFFFFFFFFFF", /* prime */
wolfSSL 15:117db924cf7c 945 "7FFFFFFFFFFFFFFFFFFFFFFF7FFFFFFFFFFF8000000000007FFFFFFFFFFC", /* A */
wolfSSL 15:117db924cf7c 946 "617FAB6832576CBBFED50D99F0249C3FEE58B94BA0038C7AE84C8C832F2C", /* B */
wolfSSL 15:117db924cf7c 947 "7FFFFFFFFFFFFFFFFFFFFFFF800000CFA7E8594377D414C03821BC582063", /* order */
wolfSSL 15:117db924cf7c 948 "38AF09D98727705120C921BB5E9E26296A3CDCF2F35757A0EAFD87B830E7", /* Gx */
wolfSSL 15:117db924cf7c 949 "5B0125E4DBEA0EC7206DA0FC01D9B081329FB555DE6EF460237DFF8BE4BA", /* Gy */
wolfSSL 15:117db924cf7c 950 ecc_oid_prime239v2, /* oid/oidSz */
wolfSSL 15:117db924cf7c 951 ecc_oid_prime239v2_sz,
wolfSSL 15:117db924cf7c 952 ECC_PRIME239V2_OID, /* oid sum */
wolfSSL 15:117db924cf7c 953 1, /* cofactor */
wolfSSL 15:117db924cf7c 954 },
wolfSSL 15:117db924cf7c 955 #endif /* HAVE_ECC_SECPR2 */
wolfSSL 15:117db924cf7c 956 #ifdef HAVE_ECC_SECPR3
wolfSSL 15:117db924cf7c 957 {
wolfSSL 15:117db924cf7c 958 30, /* size/bytes */
wolfSSL 15:117db924cf7c 959 ECC_PRIME239V3, /* ID */
wolfSSL 15:117db924cf7c 960 "PRIME239V3", /* curve name */
wolfSSL 15:117db924cf7c 961 "7FFFFFFFFFFFFFFFFFFFFFFF7FFFFFFFFFFF8000000000007FFFFFFFFFFF", /* prime */
wolfSSL 15:117db924cf7c 962 "7FFFFFFFFFFFFFFFFFFFFFFF7FFFFFFFFFFF8000000000007FFFFFFFFFFC", /* A */
wolfSSL 15:117db924cf7c 963 "255705FA2A306654B1F4CB03D6A750A30C250102D4988717D9BA15AB6D3E", /* B */
wolfSSL 15:117db924cf7c 964 "7FFFFFFFFFFFFFFFFFFFFFFF7FFFFF975DEB41B3A6057C3C432146526551", /* order */
wolfSSL 15:117db924cf7c 965 "6768AE8E18BB92CFCF005C949AA2C6D94853D0E660BBF854B1C9505FE95A", /* Gx */
wolfSSL 15:117db924cf7c 966 "1607E6898F390C06BC1D552BAD226F3B6FCFE48B6E818499AF18E3ED6CF3", /* Gy */
wolfSSL 15:117db924cf7c 967 ecc_oid_prime239v3, /* oid/oidSz */
wolfSSL 15:117db924cf7c 968 ecc_oid_prime239v3_sz,
wolfSSL 15:117db924cf7c 969 ECC_PRIME239V3_OID, /* oid sum */
wolfSSL 15:117db924cf7c 970 1, /* cofactor */
wolfSSL 15:117db924cf7c 971 },
wolfSSL 15:117db924cf7c 972 #endif /* HAVE_ECC_SECPR3 */
wolfSSL 15:117db924cf7c 973 #endif /* ECC239 */
wolfSSL 15:117db924cf7c 974 #ifdef ECC256
wolfSSL 15:117db924cf7c 975 #ifndef NO_ECC_SECP
wolfSSL 15:117db924cf7c 976 {
wolfSSL 15:117db924cf7c 977 32, /* size/bytes */
wolfSSL 15:117db924cf7c 978 ECC_SECP256R1, /* ID */
wolfSSL 15:117db924cf7c 979 "SECP256R1", /* curve name */
wolfSSL 15:117db924cf7c 980 "FFFFFFFF00000001000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFF", /* prime */
wolfSSL 15:117db924cf7c 981 "FFFFFFFF00000001000000000000000000000000FFFFFFFFFFFFFFFFFFFFFFFC", /* A */
wolfSSL 15:117db924cf7c 982 "5AC635D8AA3A93E7B3EBBD55769886BC651D06B0CC53B0F63BCE3C3E27D2604B", /* B */
wolfSSL 15:117db924cf7c 983 "FFFFFFFF00000000FFFFFFFFFFFFFFFFBCE6FAADA7179E84F3B9CAC2FC632551", /* order */
wolfSSL 15:117db924cf7c 984 "6B17D1F2E12C4247F8BCE6E563A440F277037D812DEB33A0F4A13945D898C296", /* Gx */
wolfSSL 15:117db924cf7c 985 "4FE342E2FE1A7F9B8EE7EB4A7C0F9E162BCE33576B315ECECBB6406837BF51F5", /* Gy */
wolfSSL 15:117db924cf7c 986 ecc_oid_secp256r1, /* oid/oidSz */
wolfSSL 15:117db924cf7c 987 ecc_oid_secp256r1_sz,
wolfSSL 15:117db924cf7c 988 ECC_SECP256R1_OID, /* oid sum */
wolfSSL 15:117db924cf7c 989 1, /* cofactor */
wolfSSL 15:117db924cf7c 990 },
wolfSSL 15:117db924cf7c 991 #endif /* !NO_ECC_SECP */
wolfSSL 15:117db924cf7c 992 #ifdef HAVE_ECC_KOBLITZ
wolfSSL 15:117db924cf7c 993 {
wolfSSL 15:117db924cf7c 994 32, /* size/bytes */
wolfSSL 15:117db924cf7c 995 ECC_SECP256K1, /* ID */
wolfSSL 15:117db924cf7c 996 "SECP256K1", /* curve name */
wolfSSL 15:117db924cf7c 997 "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFC2F", /* prime */
wolfSSL 15:117db924cf7c 998 "0000000000000000000000000000000000000000000000000000000000000000", /* A */
wolfSSL 15:117db924cf7c 999 "0000000000000000000000000000000000000000000000000000000000000007", /* B */
wolfSSL 15:117db924cf7c 1000 "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141", /* order */
wolfSSL 15:117db924cf7c 1001 "79BE667EF9DCBBAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F81798", /* Gx */
wolfSSL 15:117db924cf7c 1002 "483ADA7726A3C4655DA4FBFC0E1108A8FD17B448A68554199C47D08FFB10D4B8", /* Gy */
wolfSSL 15:117db924cf7c 1003 ecc_oid_secp256k1, /* oid/oidSz */
wolfSSL 15:117db924cf7c 1004 ecc_oid_secp256k1_sz,
wolfSSL 15:117db924cf7c 1005 ECC_SECP256K1_OID, /* oid sum */
wolfSSL 15:117db924cf7c 1006 1, /* cofactor */
wolfSSL 15:117db924cf7c 1007 },
wolfSSL 15:117db924cf7c 1008 #endif /* HAVE_ECC_KOBLITZ */
wolfSSL 15:117db924cf7c 1009 #ifdef HAVE_ECC_BRAINPOOL
wolfSSL 15:117db924cf7c 1010 {
wolfSSL 15:117db924cf7c 1011 32, /* size/bytes */
wolfSSL 15:117db924cf7c 1012 ECC_BRAINPOOLP256R1, /* ID */
wolfSSL 15:117db924cf7c 1013 "BRAINPOOLP256R1", /* curve name */
wolfSSL 15:117db924cf7c 1014 "A9FB57DBA1EEA9BC3E660A909D838D726E3BF623D52620282013481D1F6E5377", /* prime */
wolfSSL 15:117db924cf7c 1015 "7D5A0975FC2C3057EEF67530417AFFE7FB8055C126DC5C6CE94A4B44F330B5D9", /* A */
wolfSSL 15:117db924cf7c 1016 "26DC5C6CE94A4B44F330B5D9BBD77CBF958416295CF7E1CE6BCCDC18FF8C07B6", /* B */
wolfSSL 15:117db924cf7c 1017 "A9FB57DBA1EEA9BC3E660A909D838D718C397AA3B561A6F7901E0E82974856A7", /* order */
wolfSSL 15:117db924cf7c 1018 "8BD2AEB9CB7E57CB2C4B482FFC81B7AFB9DE27E1E3BD23C23A4453BD9ACE3262", /* Gx */
wolfSSL 15:117db924cf7c 1019 "547EF835C3DAC4FD97F8461A14611DC9C27745132DED8E545C1D54C72F046997", /* Gy */
wolfSSL 15:117db924cf7c 1020 ecc_oid_brainpoolp256r1, /* oid/oidSz */
wolfSSL 15:117db924cf7c 1021 ecc_oid_brainpoolp256r1_sz,
wolfSSL 15:117db924cf7c 1022 ECC_BRAINPOOLP256R1_OID, /* oid sum */
wolfSSL 15:117db924cf7c 1023 1, /* cofactor */
wolfSSL 15:117db924cf7c 1024 },
wolfSSL 15:117db924cf7c 1025 #endif /* HAVE_ECC_BRAINPOOL */
wolfSSL 15:117db924cf7c 1026 #endif /* ECC256 */
wolfSSL 15:117db924cf7c 1027 #ifdef ECC320
wolfSSL 15:117db924cf7c 1028 #ifdef HAVE_ECC_BRAINPOOL
wolfSSL 15:117db924cf7c 1029 {
wolfSSL 15:117db924cf7c 1030 40, /* size/bytes */
wolfSSL 15:117db924cf7c 1031 ECC_BRAINPOOLP320R1, /* ID */
wolfSSL 15:117db924cf7c 1032 "BRAINPOOLP320R1", /* curve name */
wolfSSL 15:117db924cf7c 1033 "D35E472036BC4FB7E13C785ED201E065F98FCFA6F6F40DEF4F92B9EC7893EC28FCD412B1F1B32E27", /* prime */
wolfSSL 15:117db924cf7c 1034 "3EE30B568FBAB0F883CCEBD46D3F3BB8A2A73513F5EB79DA66190EB085FFA9F492F375A97D860EB4", /* A */
wolfSSL 15:117db924cf7c 1035 "520883949DFDBC42D3AD198640688A6FE13F41349554B49ACC31DCCD884539816F5EB4AC8FB1F1A6", /* B */
wolfSSL 15:117db924cf7c 1036 "D35E472036BC4FB7E13C785ED201E065F98FCFA5B68F12A32D482EC7EE8658E98691555B44C59311", /* order */
wolfSSL 15:117db924cf7c 1037 "43BD7E9AFB53D8B85289BCC48EE5BFE6F20137D10A087EB6E7871E2A10A599C710AF8D0D39E20611", /* Gx */
wolfSSL 15:117db924cf7c 1038 "14FDD05545EC1CC8AB4093247F77275E0743FFED117182EAA9C77877AAAC6AC7D35245D1692E8EE1", /* Gy */
wolfSSL 15:117db924cf7c 1039 ecc_oid_brainpoolp320r1, ecc_oid_brainpoolp320r1_sz, /* oid/oidSz */
wolfSSL 15:117db924cf7c 1040 ECC_BRAINPOOLP320R1_OID, /* oid sum */
wolfSSL 15:117db924cf7c 1041 1, /* cofactor */
wolfSSL 15:117db924cf7c 1042 },
wolfSSL 15:117db924cf7c 1043 #endif /* HAVE_ECC_BRAINPOOL */
wolfSSL 15:117db924cf7c 1044 #endif /* ECC320 */
wolfSSL 15:117db924cf7c 1045 #ifdef ECC384
wolfSSL 15:117db924cf7c 1046 #ifndef NO_ECC_SECP
wolfSSL 15:117db924cf7c 1047 {
wolfSSL 15:117db924cf7c 1048 48, /* size/bytes */
wolfSSL 15:117db924cf7c 1049 ECC_SECP384R1, /* ID */
wolfSSL 15:117db924cf7c 1050 "SECP384R1", /* curve name */
wolfSSL 15:117db924cf7c 1051 "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFF0000000000000000FFFFFFFF", /* prime */
wolfSSL 15:117db924cf7c 1052 "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEFFFFFFFF0000000000000000FFFFFFFC", /* A */
wolfSSL 15:117db924cf7c 1053 "B3312FA7E23EE7E4988E056BE3F82D19181D9C6EFE8141120314088F5013875AC656398D8A2ED19D2A85C8EDD3EC2AEF", /* B */
wolfSSL 15:117db924cf7c 1054 "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFC7634D81F4372DDF581A0DB248B0A77AECEC196ACCC52973", /* order */
wolfSSL 15:117db924cf7c 1055 "AA87CA22BE8B05378EB1C71EF320AD746E1D3B628BA79B9859F741E082542A385502F25DBF55296C3A545E3872760AB7", /* Gx */
wolfSSL 15:117db924cf7c 1056 "3617DE4A96262C6F5D9E98BF9292DC29F8F41DBD289A147CE9DA3113B5F0B8C00A60B1CE1D7E819D7A431D7C90EA0E5F", /* Gy */
wolfSSL 15:117db924cf7c 1057 ecc_oid_secp384r1, ecc_oid_secp384r1_sz, /* oid/oidSz */
wolfSSL 15:117db924cf7c 1058 ECC_SECP384R1_OID, /* oid sum */
wolfSSL 15:117db924cf7c 1059 1, /* cofactor */
wolfSSL 15:117db924cf7c 1060 },
wolfSSL 15:117db924cf7c 1061 #endif /* !NO_ECC_SECP */
wolfSSL 15:117db924cf7c 1062 #ifdef HAVE_ECC_BRAINPOOL
wolfSSL 15:117db924cf7c 1063 {
wolfSSL 15:117db924cf7c 1064 48, /* size/bytes */
wolfSSL 15:117db924cf7c 1065 ECC_BRAINPOOLP384R1, /* ID */
wolfSSL 15:117db924cf7c 1066 "BRAINPOOLP384R1", /* curve name */
wolfSSL 15:117db924cf7c 1067 "8CB91E82A3386D280F5D6F7E50E641DF152F7109ED5456B412B1DA197FB71123ACD3A729901D1A71874700133107EC53", /* prime */
wolfSSL 15:117db924cf7c 1068 "7BC382C63D8C150C3C72080ACE05AFA0C2BEA28E4FB22787139165EFBA91F90F8AA5814A503AD4EB04A8C7DD22CE2826", /* A */
wolfSSL 15:117db924cf7c 1069 "04A8C7DD22CE28268B39B55416F0447C2FB77DE107DCD2A62E880EA53EEB62D57CB4390295DBC9943AB78696FA504C11", /* B */
wolfSSL 15:117db924cf7c 1070 "8CB91E82A3386D280F5D6F7E50E641DF152F7109ED5456B31F166E6CAC0425A7CF3AB6AF6B7FC3103B883202E9046565", /* order */
wolfSSL 15:117db924cf7c 1071 "1D1C64F068CF45FFA2A63A81B7C13F6B8847A3E77EF14FE3DB7FCAFE0CBD10E8E826E03436D646AAEF87B2E247D4AF1E", /* Gx */
wolfSSL 15:117db924cf7c 1072 "8ABE1D7520F9C2A45CB1EB8E95CFD55262B70B29FEEC5864E19C054FF99129280E4646217791811142820341263C5315", /* Gy */
wolfSSL 15:117db924cf7c 1073 ecc_oid_brainpoolp384r1, ecc_oid_brainpoolp384r1_sz, /* oid/oidSz */
wolfSSL 15:117db924cf7c 1074 ECC_BRAINPOOLP384R1_OID, /* oid sum */
wolfSSL 15:117db924cf7c 1075 1, /* cofactor */
wolfSSL 15:117db924cf7c 1076 },
wolfSSL 15:117db924cf7c 1077 #endif /* HAVE_ECC_BRAINPOOL */
wolfSSL 15:117db924cf7c 1078 #endif /* ECC384 */
wolfSSL 15:117db924cf7c 1079 #ifdef ECC512
wolfSSL 15:117db924cf7c 1080 #ifdef HAVE_ECC_BRAINPOOL
wolfSSL 15:117db924cf7c 1081 {
wolfSSL 15:117db924cf7c 1082 64, /* size/bytes */
wolfSSL 15:117db924cf7c 1083 ECC_BRAINPOOLP512R1, /* ID */
wolfSSL 15:117db924cf7c 1084 "BRAINPOOLP512R1", /* curve name */
wolfSSL 15:117db924cf7c 1085 "AADD9DB8DBE9C48B3FD4E6AE33C9FC07CB308DB3B3C9D20ED6639CCA703308717D4D9B009BC66842AECDA12AE6A380E62881FF2F2D82C68528AA6056583A48F3", /* prime */
wolfSSL 15:117db924cf7c 1086 "7830A3318B603B89E2327145AC234CC594CBDD8D3DF91610A83441CAEA9863BC2DED5D5AA8253AA10A2EF1C98B9AC8B57F1117A72BF2C7B9E7C1AC4D77FC94CA", /* A */
wolfSSL 15:117db924cf7c 1087 "3DF91610A83441CAEA9863BC2DED5D5AA8253AA10A2EF1C98B9AC8B57F1117A72BF2C7B9E7C1AC4D77FC94CADC083E67984050B75EBAE5DD2809BD638016F723", /* B */
wolfSSL 15:117db924cf7c 1088 "AADD9DB8DBE9C48B3FD4E6AE33C9FC07CB308DB3B3C9D20ED6639CCA70330870553E5C414CA92619418661197FAC10471DB1D381085DDADDB58796829CA90069", /* order */
wolfSSL 15:117db924cf7c 1089 "81AEE4BDD82ED9645A21322E9C4C6A9385ED9F70B5D916C1B43B62EEF4D0098EFF3B1F78E2D0D48D50D1687B93B97D5F7C6D5047406A5E688B352209BCB9F822", /* Gx */
wolfSSL 15:117db924cf7c 1090 "7DDE385D566332ECC0EABFA9CF7822FDF209F70024A57B1AA000C55B881F8111B2DCDE494A5F485E5BCA4BD88A2763AED1CA2B2FA8F0540678CD1E0F3AD80892", /* Gy */
wolfSSL 15:117db924cf7c 1091 ecc_oid_brainpoolp512r1, ecc_oid_brainpoolp512r1_sz, /* oid/oidSz */
wolfSSL 15:117db924cf7c 1092 ECC_BRAINPOOLP512R1_OID, /* oid sum */
wolfSSL 15:117db924cf7c 1093 1, /* cofactor */
wolfSSL 15:117db924cf7c 1094 },
wolfSSL 15:117db924cf7c 1095 #endif /* HAVE_ECC_BRAINPOOL */
wolfSSL 15:117db924cf7c 1096 #endif /* ECC512 */
wolfSSL 15:117db924cf7c 1097 #ifdef ECC521
wolfSSL 15:117db924cf7c 1098 #ifndef NO_ECC_SECP
wolfSSL 15:117db924cf7c 1099 {
wolfSSL 15:117db924cf7c 1100 66, /* size/bytes */
wolfSSL 15:117db924cf7c 1101 ECC_SECP521R1, /* ID */
wolfSSL 15:117db924cf7c 1102 "SECP521R1", /* curve name */
wolfSSL 15:117db924cf7c 1103 "1FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF", /* prime */
wolfSSL 15:117db924cf7c 1104 "1FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFC", /* A */
wolfSSL 15:117db924cf7c 1105 "51953EB9618E1C9A1F929A21A0B68540EEA2DA725B99B315F3B8B489918EF109E156193951EC7E937B1652C0BD3BB1BF073573DF883D2C34F1EF451FD46B503F00", /* B */
wolfSSL 15:117db924cf7c 1106 "1FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFA51868783BF2F966B7FCC0148F709A5D03BB5C9B8899C47AEBB6FB71E91386409", /* order */
wolfSSL 15:117db924cf7c 1107 "C6858E06B70404E9CD9E3ECB662395B4429C648139053FB521F828AF606B4D3DBAA14B5E77EFE75928FE1DC127A2FFA8DE3348B3C1856A429BF97E7E31C2E5BD66", /* Gx */
wolfSSL 15:117db924cf7c 1108 "11839296A789A3BC0045C8A5FB42C7D1BD998F54449579B446817AFBD17273E662C97EE72995EF42640C550B9013FAD0761353C7086A272C24088BE94769FD16650", /* Gy */
wolfSSL 15:117db924cf7c 1109 ecc_oid_secp521r1, ecc_oid_secp521r1_sz, /* oid/oidSz */
wolfSSL 15:117db924cf7c 1110 ECC_SECP521R1_OID, /* oid sum */
wolfSSL 15:117db924cf7c 1111 1, /* cofactor */
wolfSSL 15:117db924cf7c 1112 },
wolfSSL 15:117db924cf7c 1113 #endif /* !NO_ECC_SECP */
wolfSSL 15:117db924cf7c 1114 #endif /* ECC521 */
wolfSSL 15:117db924cf7c 1115 #if defined(WOLFSSL_CUSTOM_CURVES) && defined(ECC_CACHE_CURVE)
wolfSSL 15:117db924cf7c 1116 /* place holder for custom curve index for cache */
wolfSSL 15:117db924cf7c 1117 {
wolfSSL 15:117db924cf7c 1118 1, /* non-zero */
wolfSSL 15:117db924cf7c 1119 ECC_CURVE_CUSTOM,
wolfSSL 15:117db924cf7c 1120 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 1121 NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
wolfSSL 15:117db924cf7c 1122 #else
wolfSSL 15:117db924cf7c 1123 0, 0, 0, 0, 0, 0, 0, 0,
wolfSSL 15:117db924cf7c 1124 #endif
wolfSSL 15:117db924cf7c 1125 0, 0, 0
wolfSSL 15:117db924cf7c 1126 },
wolfSSL 15:117db924cf7c 1127 #endif
wolfSSL 15:117db924cf7c 1128 {
wolfSSL 15:117db924cf7c 1129 0, -1,
wolfSSL 15:117db924cf7c 1130 #ifndef USE_WINDOWS_API
wolfSSL 15:117db924cf7c 1131 NULL, NULL, NULL, NULL, NULL, NULL, NULL, NULL,
wolfSSL 15:117db924cf7c 1132 #else
wolfSSL 15:117db924cf7c 1133 0, 0, 0, 0, 0, 0, 0, 0,
wolfSSL 15:117db924cf7c 1134 #endif
wolfSSL 15:117db924cf7c 1135 0, 0, 0
wolfSSL 15:117db924cf7c 1136 }
wolfSSL 15:117db924cf7c 1137 };
wolfSSL 15:117db924cf7c 1138 #define ECC_SET_COUNT (sizeof(ecc_sets)/sizeof(ecc_set_type))
wolfSSL 15:117db924cf7c 1139
wolfSSL 15:117db924cf7c 1140
wolfSSL 15:117db924cf7c 1141 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 1142 /* encoded OID cache */
wolfSSL 15:117db924cf7c 1143 typedef struct {
wolfSSL 15:117db924cf7c 1144 word32 oidSz;
wolfSSL 15:117db924cf7c 1145 byte oid[ECC_MAX_OID_LEN];
wolfSSL 15:117db924cf7c 1146 } oid_cache_t;
wolfSSL 15:117db924cf7c 1147 static oid_cache_t ecc_oid_cache[ECC_SET_COUNT];
wolfSSL 15:117db924cf7c 1148 #endif
wolfSSL 15:117db924cf7c 1149
wolfSSL 15:117db924cf7c 1150
wolfSSL 15:117db924cf7c 1151 #ifdef HAVE_COMP_KEY
wolfSSL 15:117db924cf7c 1152 static int wc_ecc_export_x963_compressed(ecc_key*, byte* out, word32* outLen);
wolfSSL 15:117db924cf7c 1153 #endif
wolfSSL 15:117db924cf7c 1154
wolfSSL 15:117db924cf7c 1155 #ifdef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 1156 typedef void* ecc_curve_spec;
wolfSSL 15:117db924cf7c 1157 #else
wolfSSL 15:117db924cf7c 1158
wolfSSL 15:117db924cf7c 1159 #if defined(WOLFSSL_VALIDATE_ECC_KEYGEN) || !defined(WOLFSSL_SP_MATH)
wolfSSL 15:117db924cf7c 1160 static int ecc_check_pubkey_order(ecc_key* key, ecc_point* pubkey, mp_int* a,
wolfSSL 15:117db924cf7c 1161 mp_int* prime, mp_int* order);
wolfSSL 15:117db924cf7c 1162 #endif
wolfSSL 15:117db924cf7c 1163
wolfSSL 15:117db924cf7c 1164 int mp_jacobi(mp_int* a, mp_int* n, int* c);
wolfSSL 15:117db924cf7c 1165 int mp_sqrtmod_prime(mp_int* n, mp_int* prime, mp_int* ret);
wolfSSL 15:117db924cf7c 1166
wolfSSL 15:117db924cf7c 1167
wolfSSL 15:117db924cf7c 1168 /* Curve Specs */
wolfSSL 15:117db924cf7c 1169 typedef struct ecc_curve_spec {
wolfSSL 15:117db924cf7c 1170 const ecc_set_type* dp;
wolfSSL 15:117db924cf7c 1171
wolfSSL 15:117db924cf7c 1172 mp_int* prime;
wolfSSL 15:117db924cf7c 1173 mp_int* Af;
wolfSSL 15:117db924cf7c 1174 #ifdef USE_ECC_B_PARAM
wolfSSL 15:117db924cf7c 1175 mp_int* Bf;
wolfSSL 15:117db924cf7c 1176 #endif
wolfSSL 15:117db924cf7c 1177 mp_int* order;
wolfSSL 15:117db924cf7c 1178 mp_int* Gx;
wolfSSL 15:117db924cf7c 1179 mp_int* Gy;
wolfSSL 15:117db924cf7c 1180
wolfSSL 15:117db924cf7c 1181 #ifdef ECC_CACHE_CURVE
wolfSSL 15:117db924cf7c 1182 mp_int prime_lcl;
wolfSSL 15:117db924cf7c 1183 mp_int Af_lcl;
wolfSSL 15:117db924cf7c 1184 #ifdef USE_ECC_B_PARAM
wolfSSL 15:117db924cf7c 1185 mp_int Bf_lcl;
wolfSSL 15:117db924cf7c 1186 #endif
wolfSSL 15:117db924cf7c 1187 mp_int order_lcl;
wolfSSL 15:117db924cf7c 1188 mp_int Gx_lcl;
wolfSSL 15:117db924cf7c 1189 mp_int Gy_lcl;
wolfSSL 15:117db924cf7c 1190 #else
wolfSSL 15:117db924cf7c 1191 mp_int* spec_ints;
wolfSSL 15:117db924cf7c 1192 word32 spec_count;
wolfSSL 15:117db924cf7c 1193 word32 spec_use;
wolfSSL 15:117db924cf7c 1194 #endif
wolfSSL 15:117db924cf7c 1195
wolfSSL 15:117db924cf7c 1196 byte load_mask;
wolfSSL 15:117db924cf7c 1197 } ecc_curve_spec;
wolfSSL 15:117db924cf7c 1198
wolfSSL 15:117db924cf7c 1199 enum ecc_curve_load_mask {
wolfSSL 15:117db924cf7c 1200 ECC_CURVE_FIELD_NONE = 0x00,
wolfSSL 15:117db924cf7c 1201 ECC_CURVE_FIELD_PRIME = 0x01,
wolfSSL 15:117db924cf7c 1202 ECC_CURVE_FIELD_AF = 0x02,
wolfSSL 15:117db924cf7c 1203 #ifdef USE_ECC_B_PARAM
wolfSSL 15:117db924cf7c 1204 ECC_CURVE_FIELD_BF = 0x04,
wolfSSL 15:117db924cf7c 1205 #endif
wolfSSL 15:117db924cf7c 1206 ECC_CURVE_FIELD_ORDER = 0x08,
wolfSSL 15:117db924cf7c 1207 ECC_CURVE_FIELD_GX = 0x10,
wolfSSL 15:117db924cf7c 1208 ECC_CURVE_FIELD_GY = 0x20,
wolfSSL 15:117db924cf7c 1209 #ifdef USE_ECC_B_PARAM
wolfSSL 15:117db924cf7c 1210 ECC_CURVE_FIELD_ALL = 0x3F,
wolfSSL 15:117db924cf7c 1211 ECC_CURVE_FIELD_COUNT = 6,
wolfSSL 15:117db924cf7c 1212 #else
wolfSSL 15:117db924cf7c 1213 ECC_CURVE_FIELD_ALL = 0x3B,
wolfSSL 15:117db924cf7c 1214 ECC_CURVE_FIELD_COUNT = 5,
wolfSSL 15:117db924cf7c 1215 #endif
wolfSSL 15:117db924cf7c 1216 };
wolfSSL 15:117db924cf7c 1217
wolfSSL 15:117db924cf7c 1218 #ifdef ECC_CACHE_CURVE
wolfSSL 15:117db924cf7c 1219 /* cache (mp_int) of the curve parameters */
wolfSSL 15:117db924cf7c 1220 static ecc_curve_spec* ecc_curve_spec_cache[ECC_SET_COUNT];
wolfSSL 15:117db924cf7c 1221 #ifndef SINGLE_THREADED
wolfSSL 15:117db924cf7c 1222 static wolfSSL_Mutex ecc_curve_cache_mutex;
wolfSSL 15:117db924cf7c 1223 #endif
wolfSSL 15:117db924cf7c 1224
wolfSSL 15:117db924cf7c 1225 #define DECLARE_CURVE_SPECS(curve, intcount) ecc_curve_spec* curve = NULL
wolfSSL 15:117db924cf7c 1226 #define ALLOC_CURVE_SPECS(intcount)
wolfSSL 15:117db924cf7c 1227 #define FREE_CURVE_SPECS()
wolfSSL 15:117db924cf7c 1228 #elif defined(WOLFSSL_SMALL_STACK)
wolfSSL 15:117db924cf7c 1229 #define DECLARE_CURVE_SPECS(curve, intcount) \
wolfSSL 15:117db924cf7c 1230 mp_int* spec_ints = NULL; \
wolfSSL 15:117db924cf7c 1231 ecc_curve_spec curve_lcl; \
wolfSSL 15:117db924cf7c 1232 ecc_curve_spec* curve = &curve_lcl; \
wolfSSL 15:117db924cf7c 1233 XMEMSET(curve, 0, sizeof(ecc_curve_spec)); \
wolfSSL 15:117db924cf7c 1234 curve->spec_count = intcount
wolfSSL 15:117db924cf7c 1235
wolfSSL 15:117db924cf7c 1236 #define ALLOC_CURVE_SPECS(intcount) \
wolfSSL 15:117db924cf7c 1237 spec_ints = (mp_int*)XMALLOC(sizeof(mp_int) * (intcount), NULL, \
wolfSSL 15:117db924cf7c 1238 DYNAMIC_TYPE_ECC); \
wolfSSL 15:117db924cf7c 1239 if (spec_ints == NULL) \
wolfSSL 15:117db924cf7c 1240 return MEMORY_E; \
wolfSSL 15:117db924cf7c 1241 curve->spec_ints = spec_ints
wolfSSL 15:117db924cf7c 1242 #define FREE_CURVE_SPECS() \
wolfSSL 15:117db924cf7c 1243 XFREE(spec_ints, NULL, DYNAMIC_TYPE_ECC)
wolfSSL 15:117db924cf7c 1244 #else
wolfSSL 15:117db924cf7c 1245 #define DECLARE_CURVE_SPECS(curve, intcount) \
wolfSSL 15:117db924cf7c 1246 mp_int spec_ints[(intcount)]; \
wolfSSL 15:117db924cf7c 1247 ecc_curve_spec curve_lcl; \
wolfSSL 15:117db924cf7c 1248 ecc_curve_spec* curve = &curve_lcl; \
wolfSSL 15:117db924cf7c 1249 XMEMSET(curve, 0, sizeof(ecc_curve_spec)); \
wolfSSL 15:117db924cf7c 1250 curve->spec_ints = spec_ints; \
wolfSSL 15:117db924cf7c 1251 curve->spec_count = intcount
wolfSSL 15:117db924cf7c 1252 #define ALLOC_CURVE_SPECS(intcount)
wolfSSL 15:117db924cf7c 1253 #define FREE_CURVE_SPECS()
wolfSSL 15:117db924cf7c 1254 #endif /* ECC_CACHE_CURVE */
wolfSSL 15:117db924cf7c 1255
wolfSSL 15:117db924cf7c 1256 static void _wc_ecc_curve_free(ecc_curve_spec* curve)
wolfSSL 15:117db924cf7c 1257 {
wolfSSL 15:117db924cf7c 1258 if (curve == NULL) {
wolfSSL 15:117db924cf7c 1259 return;
wolfSSL 15:117db924cf7c 1260 }
wolfSSL 15:117db924cf7c 1261
wolfSSL 15:117db924cf7c 1262 if (curve->load_mask & ECC_CURVE_FIELD_PRIME)
wolfSSL 15:117db924cf7c 1263 mp_clear(curve->prime);
wolfSSL 15:117db924cf7c 1264 if (curve->load_mask & ECC_CURVE_FIELD_AF)
wolfSSL 15:117db924cf7c 1265 mp_clear(curve->Af);
wolfSSL 15:117db924cf7c 1266 #ifdef USE_ECC_B_PARAM
wolfSSL 15:117db924cf7c 1267 if (curve->load_mask & ECC_CURVE_FIELD_BF)
wolfSSL 15:117db924cf7c 1268 mp_clear(curve->Bf);
wolfSSL 15:117db924cf7c 1269 #endif
wolfSSL 15:117db924cf7c 1270 if (curve->load_mask & ECC_CURVE_FIELD_ORDER)
wolfSSL 15:117db924cf7c 1271 mp_clear(curve->order);
wolfSSL 15:117db924cf7c 1272 if (curve->load_mask & ECC_CURVE_FIELD_GX)
wolfSSL 15:117db924cf7c 1273 mp_clear(curve->Gx);
wolfSSL 15:117db924cf7c 1274 if (curve->load_mask & ECC_CURVE_FIELD_GY)
wolfSSL 15:117db924cf7c 1275 mp_clear(curve->Gy);
wolfSSL 15:117db924cf7c 1276
wolfSSL 15:117db924cf7c 1277 curve->load_mask = 0;
wolfSSL 15:117db924cf7c 1278 }
wolfSSL 15:117db924cf7c 1279
wolfSSL 15:117db924cf7c 1280 static void wc_ecc_curve_free(ecc_curve_spec* curve)
wolfSSL 15:117db924cf7c 1281 {
wolfSSL 15:117db924cf7c 1282 /* don't free cached curves */
wolfSSL 15:117db924cf7c 1283 #ifndef ECC_CACHE_CURVE
wolfSSL 15:117db924cf7c 1284 _wc_ecc_curve_free(curve);
wolfSSL 15:117db924cf7c 1285 #endif
wolfSSL 15:117db924cf7c 1286 (void)curve;
wolfSSL 15:117db924cf7c 1287 }
wolfSSL 15:117db924cf7c 1288
wolfSSL 15:117db924cf7c 1289 static int wc_ecc_curve_load_item(const char* src, mp_int** dst,
wolfSSL 15:117db924cf7c 1290 ecc_curve_spec* curve, byte mask)
wolfSSL 15:117db924cf7c 1291 {
wolfSSL 15:117db924cf7c 1292 int err;
wolfSSL 15:117db924cf7c 1293
wolfSSL 15:117db924cf7c 1294 #ifndef ECC_CACHE_CURVE
wolfSSL 15:117db924cf7c 1295 /* get mp_int from temp */
wolfSSL 15:117db924cf7c 1296 if (curve->spec_use >= curve->spec_count) {
wolfSSL 15:117db924cf7c 1297 WOLFSSL_MSG("Invalid DECLARE_CURVE_SPECS count");
wolfSSL 15:117db924cf7c 1298 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 1299 }
wolfSSL 15:117db924cf7c 1300 *dst = &curve->spec_ints[curve->spec_use++];
wolfSSL 15:117db924cf7c 1301 #endif
wolfSSL 15:117db924cf7c 1302
wolfSSL 15:117db924cf7c 1303 err = mp_init(*dst);
wolfSSL 15:117db924cf7c 1304 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 1305 curve->load_mask |= mask;
wolfSSL 15:117db924cf7c 1306
wolfSSL 15:117db924cf7c 1307 err = mp_read_radix(*dst, src, MP_RADIX_HEX);
wolfSSL 15:117db924cf7c 1308
wolfSSL 15:117db924cf7c 1309 #ifdef HAVE_WOLF_BIGINT
wolfSSL 15:117db924cf7c 1310 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1311 err = wc_mp_to_bigint(*dst, &(*dst)->raw);
wolfSSL 15:117db924cf7c 1312 #endif
wolfSSL 15:117db924cf7c 1313 }
wolfSSL 15:117db924cf7c 1314 return err;
wolfSSL 15:117db924cf7c 1315 }
wolfSSL 15:117db924cf7c 1316
wolfSSL 15:117db924cf7c 1317 static int wc_ecc_curve_load(const ecc_set_type* dp, ecc_curve_spec** pCurve,
wolfSSL 15:117db924cf7c 1318 byte load_mask)
wolfSSL 15:117db924cf7c 1319 {
wolfSSL 15:117db924cf7c 1320 int ret = 0, x;
wolfSSL 15:117db924cf7c 1321 ecc_curve_spec* curve;
wolfSSL 15:117db924cf7c 1322 byte load_items = 0; /* mask of items to load */
wolfSSL 15:117db924cf7c 1323
wolfSSL 15:117db924cf7c 1324 if (dp == NULL || pCurve == NULL)
wolfSSL 15:117db924cf7c 1325 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 1326
wolfSSL 15:117db924cf7c 1327 #ifdef ECC_CACHE_CURVE
wolfSSL 15:117db924cf7c 1328 x = wc_ecc_get_curve_idx(dp->id);
wolfSSL 15:117db924cf7c 1329 if (x == ECC_CURVE_INVALID)
wolfSSL 15:117db924cf7c 1330 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 1331
wolfSSL 15:117db924cf7c 1332 #if !defined(SINGLE_THREADED)
wolfSSL 15:117db924cf7c 1333 ret = wc_LockMutex(&ecc_curve_cache_mutex);
wolfSSL 15:117db924cf7c 1334 if (ret != 0) {
wolfSSL 15:117db924cf7c 1335 return ret;
wolfSSL 15:117db924cf7c 1336 }
wolfSSL 15:117db924cf7c 1337 #endif
wolfSSL 15:117db924cf7c 1338
wolfSSL 15:117db924cf7c 1339 /* make sure cache has been allocated */
wolfSSL 15:117db924cf7c 1340 if (ecc_curve_spec_cache[x] == NULL) {
wolfSSL 15:117db924cf7c 1341 ecc_curve_spec_cache[x] = (ecc_curve_spec*)XMALLOC(
wolfSSL 15:117db924cf7c 1342 sizeof(ecc_curve_spec), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1343 if (ecc_curve_spec_cache[x] == NULL) {
wolfSSL 15:117db924cf7c 1344 #if defined(ECC_CACHE_CURVE) && !defined(SINGLE_THREADED)
wolfSSL 15:117db924cf7c 1345 wc_UnLockMutex(&ecc_curve_cache_mutex);
wolfSSL 15:117db924cf7c 1346 #endif
wolfSSL 15:117db924cf7c 1347 return MEMORY_E;
wolfSSL 15:117db924cf7c 1348 }
wolfSSL 15:117db924cf7c 1349 XMEMSET(ecc_curve_spec_cache[x], 0, sizeof(ecc_curve_spec));
wolfSSL 15:117db924cf7c 1350 }
wolfSSL 15:117db924cf7c 1351
wolfSSL 15:117db924cf7c 1352 /* set curve pointer to cache */
wolfSSL 15:117db924cf7c 1353 *pCurve = ecc_curve_spec_cache[x];
wolfSSL 15:117db924cf7c 1354
wolfSSL 15:117db924cf7c 1355 #endif /* ECC_CACHE_CURVE */
wolfSSL 15:117db924cf7c 1356 curve = *pCurve;
wolfSSL 15:117db924cf7c 1357
wolfSSL 15:117db924cf7c 1358 /* make sure the curve is initialized */
wolfSSL 15:117db924cf7c 1359 if (curve->dp != dp) {
wolfSSL 15:117db924cf7c 1360 curve->load_mask = 0;
wolfSSL 15:117db924cf7c 1361
wolfSSL 15:117db924cf7c 1362 #ifdef ECC_CACHE_CURVE
wolfSSL 15:117db924cf7c 1363 curve->prime = &curve->prime_lcl;
wolfSSL 15:117db924cf7c 1364 curve->Af = &curve->Af_lcl;
wolfSSL 15:117db924cf7c 1365 #ifdef USE_ECC_B_PARAM
wolfSSL 15:117db924cf7c 1366 curve->Bf = &curve->Bf_lcl;
wolfSSL 15:117db924cf7c 1367 #endif
wolfSSL 15:117db924cf7c 1368 curve->order = &curve->order_lcl;
wolfSSL 15:117db924cf7c 1369 curve->Gx = &curve->Gx_lcl;
wolfSSL 15:117db924cf7c 1370 curve->Gy = &curve->Gy_lcl;
wolfSSL 15:117db924cf7c 1371 #endif
wolfSSL 15:117db924cf7c 1372 }
wolfSSL 15:117db924cf7c 1373 curve->dp = dp; /* set dp info */
wolfSSL 15:117db924cf7c 1374
wolfSSL 15:117db924cf7c 1375 /* determine items to load */
wolfSSL 15:117db924cf7c 1376 load_items = (((byte)~(word32)curve->load_mask) & load_mask);
wolfSSL 15:117db924cf7c 1377 curve->load_mask |= load_items;
wolfSSL 15:117db924cf7c 1378
wolfSSL 15:117db924cf7c 1379 /* load items */
wolfSSL 15:117db924cf7c 1380 x = 0;
wolfSSL 15:117db924cf7c 1381 if (load_items & ECC_CURVE_FIELD_PRIME)
wolfSSL 15:117db924cf7c 1382 x += wc_ecc_curve_load_item(dp->prime, &curve->prime, curve,
wolfSSL 15:117db924cf7c 1383 ECC_CURVE_FIELD_PRIME);
wolfSSL 15:117db924cf7c 1384 if (load_items & ECC_CURVE_FIELD_AF)
wolfSSL 15:117db924cf7c 1385 x += wc_ecc_curve_load_item(dp->Af, &curve->Af, curve,
wolfSSL 15:117db924cf7c 1386 ECC_CURVE_FIELD_AF);
wolfSSL 15:117db924cf7c 1387 #ifdef USE_ECC_B_PARAM
wolfSSL 15:117db924cf7c 1388 if (load_items & ECC_CURVE_FIELD_BF)
wolfSSL 15:117db924cf7c 1389 x += wc_ecc_curve_load_item(dp->Bf, &curve->Bf, curve,
wolfSSL 15:117db924cf7c 1390 ECC_CURVE_FIELD_BF);
wolfSSL 15:117db924cf7c 1391 #endif
wolfSSL 15:117db924cf7c 1392 if (load_items & ECC_CURVE_FIELD_ORDER)
wolfSSL 15:117db924cf7c 1393 x += wc_ecc_curve_load_item(dp->order, &curve->order, curve,
wolfSSL 15:117db924cf7c 1394 ECC_CURVE_FIELD_ORDER);
wolfSSL 15:117db924cf7c 1395 if (load_items & ECC_CURVE_FIELD_GX)
wolfSSL 15:117db924cf7c 1396 x += wc_ecc_curve_load_item(dp->Gx, &curve->Gx, curve,
wolfSSL 15:117db924cf7c 1397 ECC_CURVE_FIELD_GX);
wolfSSL 15:117db924cf7c 1398 if (load_items & ECC_CURVE_FIELD_GY)
wolfSSL 15:117db924cf7c 1399 x += wc_ecc_curve_load_item(dp->Gy, &curve->Gy, curve,
wolfSSL 15:117db924cf7c 1400 ECC_CURVE_FIELD_GY);
wolfSSL 15:117db924cf7c 1401
wolfSSL 15:117db924cf7c 1402 /* check for error */
wolfSSL 15:117db924cf7c 1403 if (x != 0) {
wolfSSL 15:117db924cf7c 1404 wc_ecc_curve_free(curve);
wolfSSL 15:117db924cf7c 1405 ret = MP_READ_E;
wolfSSL 15:117db924cf7c 1406 }
wolfSSL 15:117db924cf7c 1407
wolfSSL 15:117db924cf7c 1408 #if defined(ECC_CACHE_CURVE) && !defined(SINGLE_THREADED)
wolfSSL 15:117db924cf7c 1409 wc_UnLockMutex(&ecc_curve_cache_mutex);
wolfSSL 15:117db924cf7c 1410 #endif
wolfSSL 15:117db924cf7c 1411
wolfSSL 15:117db924cf7c 1412 return ret;
wolfSSL 15:117db924cf7c 1413 }
wolfSSL 15:117db924cf7c 1414
wolfSSL 15:117db924cf7c 1415 #ifdef ECC_CACHE_CURVE
wolfSSL 15:117db924cf7c 1416 int wc_ecc_curve_cache_init(void)
wolfSSL 15:117db924cf7c 1417 {
wolfSSL 15:117db924cf7c 1418 int ret = 0;
wolfSSL 15:117db924cf7c 1419 #if defined(ECC_CACHE_CURVE) && !defined(SINGLE_THREADED)
wolfSSL 15:117db924cf7c 1420 ret = wc_InitMutex(&ecc_curve_cache_mutex);
wolfSSL 15:117db924cf7c 1421 #endif
wolfSSL 15:117db924cf7c 1422 return ret;
wolfSSL 15:117db924cf7c 1423 }
wolfSSL 15:117db924cf7c 1424
wolfSSL 15:117db924cf7c 1425 void wc_ecc_curve_cache_free(void)
wolfSSL 15:117db924cf7c 1426 {
wolfSSL 15:117db924cf7c 1427 int x;
wolfSSL 15:117db924cf7c 1428
wolfSSL 15:117db924cf7c 1429 /* free all ECC curve caches */
wolfSSL 15:117db924cf7c 1430 for (x = 0; x < (int)ECC_SET_COUNT; x++) {
wolfSSL 15:117db924cf7c 1431 if (ecc_curve_spec_cache[x]) {
wolfSSL 15:117db924cf7c 1432 _wc_ecc_curve_free(ecc_curve_spec_cache[x]);
wolfSSL 15:117db924cf7c 1433 XFREE(ecc_curve_spec_cache[x], NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1434 ecc_curve_spec_cache[x] = NULL;
wolfSSL 15:117db924cf7c 1435 }
wolfSSL 15:117db924cf7c 1436 }
wolfSSL 15:117db924cf7c 1437
wolfSSL 15:117db924cf7c 1438 #if defined(ECC_CACHE_CURVE) && !defined(SINGLE_THREADED)
wolfSSL 15:117db924cf7c 1439 wc_FreeMutex(&ecc_curve_cache_mutex);
wolfSSL 15:117db924cf7c 1440 #endif
wolfSSL 15:117db924cf7c 1441 }
wolfSSL 15:117db924cf7c 1442 #endif /* ECC_CACHE_CURVE */
wolfSSL 15:117db924cf7c 1443
wolfSSL 15:117db924cf7c 1444 #endif /* WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 1445
wolfSSL 15:117db924cf7c 1446
wolfSSL 15:117db924cf7c 1447 /* Retrieve the curve name for the ECC curve id.
wolfSSL 15:117db924cf7c 1448 *
wolfSSL 15:117db924cf7c 1449 * curve_id The id of the curve.
wolfSSL 15:117db924cf7c 1450 * returns the name stored from the curve if available, otherwise NULL.
wolfSSL 15:117db924cf7c 1451 */
wolfSSL 15:117db924cf7c 1452 const char* wc_ecc_get_name(int curve_id)
wolfSSL 15:117db924cf7c 1453 {
wolfSSL 15:117db924cf7c 1454 int curve_idx = wc_ecc_get_curve_idx(curve_id);
wolfSSL 15:117db924cf7c 1455 if (curve_idx == ECC_CURVE_INVALID)
wolfSSL 15:117db924cf7c 1456 return NULL;
wolfSSL 15:117db924cf7c 1457 return ecc_sets[curve_idx].name;
wolfSSL 15:117db924cf7c 1458 }
wolfSSL 15:117db924cf7c 1459
wolfSSL 15:117db924cf7c 1460 int wc_ecc_set_curve(ecc_key* key, int keysize, int curve_id)
wolfSSL 15:117db924cf7c 1461 {
wolfSSL 15:117db924cf7c 1462 if (keysize <= 0 && curve_id < 0) {
wolfSSL 15:117db924cf7c 1463 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 1464 }
wolfSSL 15:117db924cf7c 1465
wolfSSL 15:117db924cf7c 1466 if (keysize > ECC_MAXSIZE) {
wolfSSL 15:117db924cf7c 1467 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 1468 }
wolfSSL 15:117db924cf7c 1469
wolfSSL 15:117db924cf7c 1470 /* handle custom case */
wolfSSL 15:117db924cf7c 1471 if (key->idx != ECC_CUSTOM_IDX) {
wolfSSL 15:117db924cf7c 1472 int x;
wolfSSL 15:117db924cf7c 1473
wolfSSL 15:117db924cf7c 1474 /* default values */
wolfSSL 15:117db924cf7c 1475 key->idx = 0;
wolfSSL 15:117db924cf7c 1476 key->dp = NULL;
wolfSSL 15:117db924cf7c 1477
wolfSSL 15:117db924cf7c 1478 /* find ecc_set based on curve_id or key size */
wolfSSL 15:117db924cf7c 1479 for (x = 0; ecc_sets[x].size != 0; x++) {
wolfSSL 15:117db924cf7c 1480 if (curve_id > ECC_CURVE_DEF) {
wolfSSL 15:117db924cf7c 1481 if (curve_id == ecc_sets[x].id)
wolfSSL 15:117db924cf7c 1482 break;
wolfSSL 15:117db924cf7c 1483 }
wolfSSL 15:117db924cf7c 1484 else if (keysize <= ecc_sets[x].size) {
wolfSSL 15:117db924cf7c 1485 break;
wolfSSL 15:117db924cf7c 1486 }
wolfSSL 15:117db924cf7c 1487 }
wolfSSL 15:117db924cf7c 1488 if (ecc_sets[x].size == 0) {
wolfSSL 15:117db924cf7c 1489 WOLFSSL_MSG("ECC Curve not found");
wolfSSL 15:117db924cf7c 1490 return ECC_CURVE_OID_E;
wolfSSL 15:117db924cf7c 1491 }
wolfSSL 15:117db924cf7c 1492
wolfSSL 15:117db924cf7c 1493 key->idx = x;
wolfSSL 15:117db924cf7c 1494 key->dp = &ecc_sets[x];
wolfSSL 15:117db924cf7c 1495 }
wolfSSL 15:117db924cf7c 1496
wolfSSL 15:117db924cf7c 1497 return 0;
wolfSSL 15:117db924cf7c 1498 }
wolfSSL 15:117db924cf7c 1499
wolfSSL 15:117db924cf7c 1500
wolfSSL 15:117db924cf7c 1501 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 1502 static void alt_fp_init(fp_int* a)
wolfSSL 15:117db924cf7c 1503 {
wolfSSL 15:117db924cf7c 1504 a->size = FP_SIZE_ECC;
wolfSSL 15:117db924cf7c 1505 fp_zero(a);
wolfSSL 15:117db924cf7c 1506 }
wolfSSL 15:117db924cf7c 1507 #endif /* ALT_ECC_SIZE */
wolfSSL 15:117db924cf7c 1508
wolfSSL 15:117db924cf7c 1509
wolfSSL 15:117db924cf7c 1510 #ifndef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 1511
wolfSSL 15:117db924cf7c 1512 #if !defined(WOLFSSL_SP_MATH) || defined(WOLFSSL_PUBLIC_ECC_ADD_DBL)
wolfSSL 15:117db924cf7c 1513
wolfSSL 15:117db924cf7c 1514 /**
wolfSSL 15:117db924cf7c 1515 Add two ECC points
wolfSSL 15:117db924cf7c 1516 P The point to add
wolfSSL 15:117db924cf7c 1517 Q The point to add
wolfSSL 15:117db924cf7c 1518 R [out] The destination of the double
wolfSSL 15:117db924cf7c 1519 a ECC curve parameter a
wolfSSL 15:117db924cf7c 1520 modulus The modulus of the field the ECC curve is in
wolfSSL 15:117db924cf7c 1521 mp The "b" value from montgomery_setup()
wolfSSL 15:117db924cf7c 1522 return MP_OKAY on success
wolfSSL 15:117db924cf7c 1523 */
wolfSSL 15:117db924cf7c 1524 int ecc_projective_add_point(ecc_point* P, ecc_point* Q, ecc_point* R,
wolfSSL 15:117db924cf7c 1525 mp_int* a, mp_int* modulus, mp_digit mp)
wolfSSL 15:117db924cf7c 1526 {
wolfSSL 15:117db924cf7c 1527 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 1528 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 1529 mp_int* t1 = NULL;
wolfSSL 15:117db924cf7c 1530 mp_int* t2 = NULL;
wolfSSL 15:117db924cf7c 1531 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 1532 mp_int* rx = NULL;
wolfSSL 15:117db924cf7c 1533 mp_int* ry = NULL;
wolfSSL 15:117db924cf7c 1534 mp_int* rz = NULL;
wolfSSL 15:117db924cf7c 1535 #endif
wolfSSL 15:117db924cf7c 1536 #else
wolfSSL 15:117db924cf7c 1537 mp_int t1[1], t2[1];
wolfSSL 15:117db924cf7c 1538 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 1539 mp_int rx[1], ry[1], rz[1];
wolfSSL 15:117db924cf7c 1540 #endif
wolfSSL 15:117db924cf7c 1541 #endif
wolfSSL 15:117db924cf7c 1542 mp_int *x, *y, *z;
wolfSSL 15:117db924cf7c 1543 int err;
wolfSSL 15:117db924cf7c 1544
wolfSSL 15:117db924cf7c 1545 if (P == NULL || Q == NULL || R == NULL || modulus == NULL) {
wolfSSL 15:117db924cf7c 1546 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 1547 }
wolfSSL 15:117db924cf7c 1548
wolfSSL 15:117db924cf7c 1549 /* if Q == R then swap P and Q, so we don't require a local x,y,z */
wolfSSL 15:117db924cf7c 1550 if (Q == R) {
wolfSSL 15:117db924cf7c 1551 ecc_point* tPt = P;
wolfSSL 15:117db924cf7c 1552 P = Q;
wolfSSL 15:117db924cf7c 1553 Q = tPt;
wolfSSL 15:117db924cf7c 1554 }
wolfSSL 15:117db924cf7c 1555
wolfSSL 15:117db924cf7c 1556 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 1557 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 1558 if (R->key != NULL) {
wolfSSL 15:117db924cf7c 1559 t1 = R->key->t1;
wolfSSL 15:117db924cf7c 1560 t2 = R->key->t2;
wolfSSL 15:117db924cf7c 1561 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 1562 rx = R->key->x;
wolfSSL 15:117db924cf7c 1563 ry = R->key->y;
wolfSSL 15:117db924cf7c 1564 rz = R->key->z;
wolfSSL 15:117db924cf7c 1565 #endif
wolfSSL 15:117db924cf7c 1566 }
wolfSSL 15:117db924cf7c 1567 else
wolfSSL 15:117db924cf7c 1568 #endif /* WOLFSSL_SMALL_STACK_CACHE */
wolfSSL 15:117db924cf7c 1569 {
wolfSSL 15:117db924cf7c 1570 t1 = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1571 t2 = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1572 if (t1 == NULL || t2 == NULL) {
wolfSSL 15:117db924cf7c 1573 XFREE(t1, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1574 XFREE(t2, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1575 return MEMORY_E;
wolfSSL 15:117db924cf7c 1576 }
wolfSSL 15:117db924cf7c 1577 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 1578 rx = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1579 ry = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1580 rz = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1581 if (rx == NULL || ry == NULL || rz == NULL) {
wolfSSL 15:117db924cf7c 1582 XFREE(rz, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1583 XFREE(ry, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1584 XFREE(rx, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1585 XFREE(t2, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1586 XFREE(t1, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1587 return MEMORY_E;
wolfSSL 15:117db924cf7c 1588 }
wolfSSL 15:117db924cf7c 1589 #endif
wolfSSL 15:117db924cf7c 1590 }
wolfSSL 15:117db924cf7c 1591 #endif /* WOLFSSL_SMALL_STACK */
wolfSSL 15:117db924cf7c 1592
wolfSSL 15:117db924cf7c 1593 if ((err = mp_init_multi(t1, t2, NULL, NULL, NULL, NULL)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 1594 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 1595 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 1596 if (R->key == NULL)
wolfSSL 15:117db924cf7c 1597 #endif
wolfSSL 15:117db924cf7c 1598 {
wolfSSL 15:117db924cf7c 1599 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 1600 XFREE(rz, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1601 XFREE(ry, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1602 XFREE(rx, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1603 #endif
wolfSSL 15:117db924cf7c 1604 XFREE(t2, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1605 XFREE(t1, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1606 }
wolfSSL 15:117db924cf7c 1607 #endif
wolfSSL 15:117db924cf7c 1608 return err;
wolfSSL 15:117db924cf7c 1609 }
wolfSSL 15:117db924cf7c 1610
wolfSSL 15:117db924cf7c 1611 /* should we dbl instead? */
wolfSSL 15:117db924cf7c 1612 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1613 err = mp_sub(modulus, Q->y, t1);
wolfSSL 15:117db924cf7c 1614 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 1615 if ( (mp_cmp(P->x, Q->x) == MP_EQ) &&
wolfSSL 15:117db924cf7c 1616 (get_digit_count(Q->z) && mp_cmp(P->z, Q->z) == MP_EQ) &&
wolfSSL 15:117db924cf7c 1617 (mp_cmp(P->y, Q->y) == MP_EQ || mp_cmp(P->y, t1) == MP_EQ)) {
wolfSSL 15:117db924cf7c 1618 mp_clear(t1);
wolfSSL 15:117db924cf7c 1619 mp_clear(t2);
wolfSSL 15:117db924cf7c 1620 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 1621 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 1622 if (R->key == NULL)
wolfSSL 15:117db924cf7c 1623 #endif
wolfSSL 15:117db924cf7c 1624 {
wolfSSL 15:117db924cf7c 1625 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 1626 XFREE(rz, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1627 XFREE(ry, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1628 XFREE(rx, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1629 #endif
wolfSSL 15:117db924cf7c 1630 XFREE(t2, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1631 XFREE(t1, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1632 }
wolfSSL 15:117db924cf7c 1633 #endif
wolfSSL 15:117db924cf7c 1634 return ecc_projective_dbl_point(P, R, a, modulus, mp);
wolfSSL 15:117db924cf7c 1635 }
wolfSSL 15:117db924cf7c 1636 }
wolfSSL 15:117db924cf7c 1637
wolfSSL 15:117db924cf7c 1638 if (err != MP_OKAY) {
wolfSSL 15:117db924cf7c 1639 goto done;
wolfSSL 15:117db924cf7c 1640 }
wolfSSL 15:117db924cf7c 1641
wolfSSL 15:117db924cf7c 1642 /* If use ALT_ECC_SIZE we need to use local stack variable since
wolfSSL 15:117db924cf7c 1643 ecc_point x,y,z is reduced size */
wolfSSL 15:117db924cf7c 1644 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 1645 /* Use local stack variable */
wolfSSL 15:117db924cf7c 1646 x = rx;
wolfSSL 15:117db924cf7c 1647 y = ry;
wolfSSL 15:117db924cf7c 1648 z = rz;
wolfSSL 15:117db924cf7c 1649
wolfSSL 15:117db924cf7c 1650 if ((err = mp_init_multi(x, y, z, NULL, NULL, NULL)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 1651 goto done;
wolfSSL 15:117db924cf7c 1652 }
wolfSSL 15:117db924cf7c 1653 #else
wolfSSL 15:117db924cf7c 1654 /* Use destination directly */
wolfSSL 15:117db924cf7c 1655 x = R->x;
wolfSSL 15:117db924cf7c 1656 y = R->y;
wolfSSL 15:117db924cf7c 1657 z = R->z;
wolfSSL 15:117db924cf7c 1658 #endif
wolfSSL 15:117db924cf7c 1659
wolfSSL 15:117db924cf7c 1660 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1661 err = mp_copy(P->x, x);
wolfSSL 15:117db924cf7c 1662 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1663 err = mp_copy(P->y, y);
wolfSSL 15:117db924cf7c 1664 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1665 err = mp_copy(P->z, z);
wolfSSL 15:117db924cf7c 1666
wolfSSL 15:117db924cf7c 1667 /* if Z is one then these are no-operations */
wolfSSL 15:117db924cf7c 1668 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 1669 if (!mp_iszero(Q->z)) {
wolfSSL 15:117db924cf7c 1670 /* T1 = Z' * Z' */
wolfSSL 15:117db924cf7c 1671 err = mp_sqr(Q->z, t1);
wolfSSL 15:117db924cf7c 1672 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1673 err = mp_montgomery_reduce(t1, modulus, mp);
wolfSSL 15:117db924cf7c 1674
wolfSSL 15:117db924cf7c 1675 /* X = X * T1 */
wolfSSL 15:117db924cf7c 1676 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1677 err = mp_mul(t1, x, x);
wolfSSL 15:117db924cf7c 1678 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1679 err = mp_montgomery_reduce(x, modulus, mp);
wolfSSL 15:117db924cf7c 1680
wolfSSL 15:117db924cf7c 1681 /* T1 = Z' * T1 */
wolfSSL 15:117db924cf7c 1682 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1683 err = mp_mul(Q->z, t1, t1);
wolfSSL 15:117db924cf7c 1684 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1685 err = mp_montgomery_reduce(t1, modulus, mp);
wolfSSL 15:117db924cf7c 1686
wolfSSL 15:117db924cf7c 1687 /* Y = Y * T1 */
wolfSSL 15:117db924cf7c 1688 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1689 err = mp_mul(t1, y, y);
wolfSSL 15:117db924cf7c 1690 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1691 err = mp_montgomery_reduce(y, modulus, mp);
wolfSSL 15:117db924cf7c 1692 }
wolfSSL 15:117db924cf7c 1693 }
wolfSSL 15:117db924cf7c 1694
wolfSSL 15:117db924cf7c 1695 /* T1 = Z*Z */
wolfSSL 15:117db924cf7c 1696 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1697 err = mp_sqr(z, t1);
wolfSSL 15:117db924cf7c 1698 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1699 err = mp_montgomery_reduce(t1, modulus, mp);
wolfSSL 15:117db924cf7c 1700
wolfSSL 15:117db924cf7c 1701 /* T2 = X' * T1 */
wolfSSL 15:117db924cf7c 1702 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1703 err = mp_mul(Q->x, t1, t2);
wolfSSL 15:117db924cf7c 1704 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1705 err = mp_montgomery_reduce(t2, modulus, mp);
wolfSSL 15:117db924cf7c 1706
wolfSSL 15:117db924cf7c 1707 /* T1 = Z * T1 */
wolfSSL 15:117db924cf7c 1708 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1709 err = mp_mul(z, t1, t1);
wolfSSL 15:117db924cf7c 1710 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1711 err = mp_montgomery_reduce(t1, modulus, mp);
wolfSSL 15:117db924cf7c 1712
wolfSSL 15:117db924cf7c 1713 /* T1 = Y' * T1 */
wolfSSL 15:117db924cf7c 1714 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1715 err = mp_mul(Q->y, t1, t1);
wolfSSL 15:117db924cf7c 1716 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1717 err = mp_montgomery_reduce(t1, modulus, mp);
wolfSSL 15:117db924cf7c 1718
wolfSSL 15:117db924cf7c 1719 /* Y = Y - T1 */
wolfSSL 15:117db924cf7c 1720 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1721 err = mp_sub(y, t1, y);
wolfSSL 15:117db924cf7c 1722 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 1723 if (mp_isneg(y))
wolfSSL 15:117db924cf7c 1724 err = mp_add(y, modulus, y);
wolfSSL 15:117db924cf7c 1725 }
wolfSSL 15:117db924cf7c 1726 /* T1 = 2T1 */
wolfSSL 15:117db924cf7c 1727 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1728 err = mp_add(t1, t1, t1);
wolfSSL 15:117db924cf7c 1729 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 1730 if (mp_cmp(t1, modulus) != MP_LT)
wolfSSL 15:117db924cf7c 1731 err = mp_sub(t1, modulus, t1);
wolfSSL 15:117db924cf7c 1732 }
wolfSSL 15:117db924cf7c 1733 /* T1 = Y + T1 */
wolfSSL 15:117db924cf7c 1734 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1735 err = mp_add(t1, y, t1);
wolfSSL 15:117db924cf7c 1736 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 1737 if (mp_cmp(t1, modulus) != MP_LT)
wolfSSL 15:117db924cf7c 1738 err = mp_sub(t1, modulus, t1);
wolfSSL 15:117db924cf7c 1739 }
wolfSSL 15:117db924cf7c 1740 /* X = X - T2 */
wolfSSL 15:117db924cf7c 1741 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1742 err = mp_sub(x, t2, x);
wolfSSL 15:117db924cf7c 1743 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 1744 if (mp_isneg(x))
wolfSSL 15:117db924cf7c 1745 err = mp_add(x, modulus, x);
wolfSSL 15:117db924cf7c 1746 }
wolfSSL 15:117db924cf7c 1747 /* T2 = 2T2 */
wolfSSL 15:117db924cf7c 1748 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1749 err = mp_add(t2, t2, t2);
wolfSSL 15:117db924cf7c 1750 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 1751 if (mp_cmp(t2, modulus) != MP_LT)
wolfSSL 15:117db924cf7c 1752 err = mp_sub(t2, modulus, t2);
wolfSSL 15:117db924cf7c 1753 }
wolfSSL 15:117db924cf7c 1754 /* T2 = X + T2 */
wolfSSL 15:117db924cf7c 1755 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1756 err = mp_add(t2, x, t2);
wolfSSL 15:117db924cf7c 1757 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 1758 if (mp_cmp(t2, modulus) != MP_LT)
wolfSSL 15:117db924cf7c 1759 err = mp_sub(t2, modulus, t2);
wolfSSL 15:117db924cf7c 1760 }
wolfSSL 15:117db924cf7c 1761
wolfSSL 15:117db924cf7c 1762 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 1763 if (!mp_iszero(Q->z)) {
wolfSSL 15:117db924cf7c 1764 /* Z = Z * Z' */
wolfSSL 15:117db924cf7c 1765 err = mp_mul(z, Q->z, z);
wolfSSL 15:117db924cf7c 1766 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1767 err = mp_montgomery_reduce(z, modulus, mp);
wolfSSL 15:117db924cf7c 1768 }
wolfSSL 15:117db924cf7c 1769 }
wolfSSL 15:117db924cf7c 1770
wolfSSL 15:117db924cf7c 1771 /* Z = Z * X */
wolfSSL 15:117db924cf7c 1772 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1773 err = mp_mul(z, x, z);
wolfSSL 15:117db924cf7c 1774 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1775 err = mp_montgomery_reduce(z, modulus, mp);
wolfSSL 15:117db924cf7c 1776
wolfSSL 15:117db924cf7c 1777 /* T1 = T1 * X */
wolfSSL 15:117db924cf7c 1778 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1779 err = mp_mul(t1, x, t1);
wolfSSL 15:117db924cf7c 1780 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1781 err = mp_montgomery_reduce(t1, modulus, mp);
wolfSSL 15:117db924cf7c 1782
wolfSSL 15:117db924cf7c 1783 /* X = X * X */
wolfSSL 15:117db924cf7c 1784 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1785 err = mp_sqr(x, x);
wolfSSL 15:117db924cf7c 1786 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1787 err = mp_montgomery_reduce(x, modulus, mp);
wolfSSL 15:117db924cf7c 1788
wolfSSL 15:117db924cf7c 1789 /* T2 = T2 * x */
wolfSSL 15:117db924cf7c 1790 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1791 err = mp_mul(t2, x, t2);
wolfSSL 15:117db924cf7c 1792 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1793 err = mp_montgomery_reduce(t2, modulus, mp);
wolfSSL 15:117db924cf7c 1794
wolfSSL 15:117db924cf7c 1795 /* T1 = T1 * X */
wolfSSL 15:117db924cf7c 1796 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1797 err = mp_mul(t1, x, t1);
wolfSSL 15:117db924cf7c 1798 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1799 err = mp_montgomery_reduce(t1, modulus, mp);
wolfSSL 15:117db924cf7c 1800
wolfSSL 15:117db924cf7c 1801 /* X = Y*Y */
wolfSSL 15:117db924cf7c 1802 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1803 err = mp_sqr(y, x);
wolfSSL 15:117db924cf7c 1804 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1805 err = mp_montgomery_reduce(x, modulus, mp);
wolfSSL 15:117db924cf7c 1806
wolfSSL 15:117db924cf7c 1807 /* X = X - T2 */
wolfSSL 15:117db924cf7c 1808 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1809 err = mp_sub(x, t2, x);
wolfSSL 15:117db924cf7c 1810 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 1811 if (mp_isneg(x))
wolfSSL 15:117db924cf7c 1812 err = mp_add(x, modulus, x);
wolfSSL 15:117db924cf7c 1813 }
wolfSSL 15:117db924cf7c 1814 /* T2 = T2 - X */
wolfSSL 15:117db924cf7c 1815 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1816 err = mp_sub(t2, x, t2);
wolfSSL 15:117db924cf7c 1817 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 1818 if (mp_isneg(t2))
wolfSSL 15:117db924cf7c 1819 err = mp_add(t2, modulus, t2);
wolfSSL 15:117db924cf7c 1820 }
wolfSSL 15:117db924cf7c 1821 /* T2 = T2 - X */
wolfSSL 15:117db924cf7c 1822 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1823 err = mp_sub(t2, x, t2);
wolfSSL 15:117db924cf7c 1824 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 1825 if (mp_isneg(t2))
wolfSSL 15:117db924cf7c 1826 err = mp_add(t2, modulus, t2);
wolfSSL 15:117db924cf7c 1827 }
wolfSSL 15:117db924cf7c 1828 /* T2 = T2 * Y */
wolfSSL 15:117db924cf7c 1829 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1830 err = mp_mul(t2, y, t2);
wolfSSL 15:117db924cf7c 1831 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1832 err = mp_montgomery_reduce(t2, modulus, mp);
wolfSSL 15:117db924cf7c 1833
wolfSSL 15:117db924cf7c 1834 /* Y = T2 - T1 */
wolfSSL 15:117db924cf7c 1835 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1836 err = mp_sub(t2, t1, y);
wolfSSL 15:117db924cf7c 1837 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 1838 if (mp_isneg(y))
wolfSSL 15:117db924cf7c 1839 err = mp_add(y, modulus, y);
wolfSSL 15:117db924cf7c 1840 }
wolfSSL 15:117db924cf7c 1841 /* Y = Y/2 */
wolfSSL 15:117db924cf7c 1842 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 1843 if (mp_isodd(y) == MP_YES)
wolfSSL 15:117db924cf7c 1844 err = mp_add(y, modulus, y);
wolfSSL 15:117db924cf7c 1845 }
wolfSSL 15:117db924cf7c 1846 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1847 err = mp_div_2(y, y);
wolfSSL 15:117db924cf7c 1848
wolfSSL 15:117db924cf7c 1849 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 1850 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1851 err = mp_copy(x, R->x);
wolfSSL 15:117db924cf7c 1852 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1853 err = mp_copy(y, R->y);
wolfSSL 15:117db924cf7c 1854 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 1855 err = mp_copy(z, R->z);
wolfSSL 15:117db924cf7c 1856 #endif
wolfSSL 15:117db924cf7c 1857
wolfSSL 15:117db924cf7c 1858 done:
wolfSSL 15:117db924cf7c 1859
wolfSSL 15:117db924cf7c 1860 /* clean up */
wolfSSL 15:117db924cf7c 1861 mp_clear(t1);
wolfSSL 15:117db924cf7c 1862 mp_clear(t2);
wolfSSL 15:117db924cf7c 1863 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 1864 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 1865 if (R->key == NULL)
wolfSSL 15:117db924cf7c 1866 #endif
wolfSSL 15:117db924cf7c 1867 {
wolfSSL 15:117db924cf7c 1868 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 1869 XFREE(rz, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1870 XFREE(ry, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1871 XFREE(rx, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1872 #endif
wolfSSL 15:117db924cf7c 1873 XFREE(t2, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1874 XFREE(t1, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1875 }
wolfSSL 15:117db924cf7c 1876 #endif
wolfSSL 15:117db924cf7c 1877
wolfSSL 15:117db924cf7c 1878 return err;
wolfSSL 15:117db924cf7c 1879 #else
wolfSSL 15:117db924cf7c 1880 if (P == NULL || Q == NULL || R == NULL || modulus == NULL) {
wolfSSL 15:117db924cf7c 1881 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 1882 }
wolfSSL 15:117db924cf7c 1883
wolfSSL 15:117db924cf7c 1884 (void)a;
wolfSSL 15:117db924cf7c 1885 (void)mp;
wolfSSL 15:117db924cf7c 1886
wolfSSL 15:117db924cf7c 1887 return sp_ecc_proj_add_point_256(P->x, P->y, P->z, Q->x, Q->y, Q->z,
wolfSSL 15:117db924cf7c 1888 R->x, R->y, R->z);
wolfSSL 15:117db924cf7c 1889 #endif
wolfSSL 15:117db924cf7c 1890 }
wolfSSL 15:117db924cf7c 1891
wolfSSL 15:117db924cf7c 1892 /* ### Point doubling in Jacobian coordinate system ###
wolfSSL 15:117db924cf7c 1893 *
wolfSSL 15:117db924cf7c 1894 * let us have a curve: y^2 = x^3 + a*x + b
wolfSSL 15:117db924cf7c 1895 * in Jacobian coordinates it becomes: y^2 = x^3 + a*x*z^4 + b*z^6
wolfSSL 15:117db924cf7c 1896 *
wolfSSL 15:117db924cf7c 1897 * The doubling of P = (Xp, Yp, Zp) is given by R = (Xr, Yr, Zr) where:
wolfSSL 15:117db924cf7c 1898 * Xr = M^2 - 2*S
wolfSSL 15:117db924cf7c 1899 * Yr = M * (S - Xr) - 8*T
wolfSSL 15:117db924cf7c 1900 * Zr = 2 * Yp * Zp
wolfSSL 15:117db924cf7c 1901 *
wolfSSL 15:117db924cf7c 1902 * M = 3 * Xp^2 + a*Zp^4
wolfSSL 15:117db924cf7c 1903 * T = Yp^4
wolfSSL 15:117db924cf7c 1904 * S = 4 * Xp * Yp^2
wolfSSL 15:117db924cf7c 1905 *
wolfSSL 15:117db924cf7c 1906 * SPECIAL CASE: when a == 3 we can compute M as
wolfSSL 15:117db924cf7c 1907 * M = 3 * (Xp^2 - Zp^4) = 3 * (Xp + Zp^2) * (Xp - Zp^2)
wolfSSL 15:117db924cf7c 1908 */
wolfSSL 15:117db924cf7c 1909
wolfSSL 15:117db924cf7c 1910 /**
wolfSSL 15:117db924cf7c 1911 Double an ECC point
wolfSSL 15:117db924cf7c 1912 P The point to double
wolfSSL 15:117db924cf7c 1913 R [out] The destination of the double
wolfSSL 15:117db924cf7c 1914 a ECC curve parameter a
wolfSSL 15:117db924cf7c 1915 modulus The modulus of the field the ECC curve is in
wolfSSL 15:117db924cf7c 1916 mp The "b" value from montgomery_setup()
wolfSSL 15:117db924cf7c 1917 return MP_OKAY on success
wolfSSL 15:117db924cf7c 1918 */
wolfSSL 15:117db924cf7c 1919 int ecc_projective_dbl_point(ecc_point *P, ecc_point *R, mp_int* a,
wolfSSL 15:117db924cf7c 1920 mp_int* modulus, mp_digit mp)
wolfSSL 15:117db924cf7c 1921 {
wolfSSL 15:117db924cf7c 1922 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 1923 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 1924 mp_int* t1 = NULL;
wolfSSL 15:117db924cf7c 1925 mp_int* t2 = NULL;
wolfSSL 15:117db924cf7c 1926 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 1927 mp_int* rx = NULL;
wolfSSL 15:117db924cf7c 1928 mp_int* ry = NULL;
wolfSSL 15:117db924cf7c 1929 mp_int* rz = NULL;
wolfSSL 15:117db924cf7c 1930 #endif
wolfSSL 15:117db924cf7c 1931 #else
wolfSSL 15:117db924cf7c 1932 mp_int t1[1], t2[1];
wolfSSL 15:117db924cf7c 1933 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 1934 mp_int rx[1], ry[1], rz[1];
wolfSSL 15:117db924cf7c 1935 #endif
wolfSSL 15:117db924cf7c 1936 #endif
wolfSSL 15:117db924cf7c 1937 mp_int *x, *y, *z;
wolfSSL 15:117db924cf7c 1938 int err;
wolfSSL 15:117db924cf7c 1939
wolfSSL 15:117db924cf7c 1940 if (P == NULL || R == NULL || modulus == NULL)
wolfSSL 15:117db924cf7c 1941 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 1942
wolfSSL 15:117db924cf7c 1943 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 1944 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 1945 if (R->key != NULL) {
wolfSSL 15:117db924cf7c 1946 t1 = R->key->t1;
wolfSSL 15:117db924cf7c 1947 t2 = R->key->t2;
wolfSSL 15:117db924cf7c 1948 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 1949 rx = R->key->x;
wolfSSL 15:117db924cf7c 1950 ry = R->key->y;
wolfSSL 15:117db924cf7c 1951 rz = R->key->z;
wolfSSL 15:117db924cf7c 1952 #endif
wolfSSL 15:117db924cf7c 1953 }
wolfSSL 15:117db924cf7c 1954 else
wolfSSL 15:117db924cf7c 1955 #endif /* WOLFSSL_SMALL_STACK_CACHE */
wolfSSL 15:117db924cf7c 1956 {
wolfSSL 15:117db924cf7c 1957 t1 = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1958 t2 = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1959 if (t1 == NULL || t2 == NULL) {
wolfSSL 15:117db924cf7c 1960 XFREE(t2, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1961 XFREE(t1, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1962 return MEMORY_E;
wolfSSL 15:117db924cf7c 1963 }
wolfSSL 15:117db924cf7c 1964 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 1965 rx = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1966 ry = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1967 rz = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1968 if (rx == NULL || ry == NULL || rz == NULL) {
wolfSSL 15:117db924cf7c 1969 XFREE(rz, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1970 XFREE(ry, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1971 XFREE(rx, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1972 XFREE(t2, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1973 XFREE(t1, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1974 return MEMORY_E;
wolfSSL 15:117db924cf7c 1975 }
wolfSSL 15:117db924cf7c 1976 #endif
wolfSSL 15:117db924cf7c 1977 }
wolfSSL 15:117db924cf7c 1978 #endif
wolfSSL 15:117db924cf7c 1979
wolfSSL 15:117db924cf7c 1980 if ((err = mp_init_multi(t1, t2, NULL, NULL, NULL, NULL)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 1981 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 1982 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 1983 if (R->key == NULL)
wolfSSL 15:117db924cf7c 1984 #endif
wolfSSL 15:117db924cf7c 1985 {
wolfSSL 15:117db924cf7c 1986 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 1987 XFREE(rz, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1988 XFREE(ry, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1989 XFREE(rx, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1990 #endif
wolfSSL 15:117db924cf7c 1991 XFREE(t2, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1992 XFREE(t1, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 1993 }
wolfSSL 15:117db924cf7c 1994 #endif
wolfSSL 15:117db924cf7c 1995 return err;
wolfSSL 15:117db924cf7c 1996 }
wolfSSL 15:117db924cf7c 1997
wolfSSL 15:117db924cf7c 1998 /* If use ALT_ECC_SIZE we need to use local stack variable since
wolfSSL 15:117db924cf7c 1999 ecc_point x,y,z is reduced size */
wolfSSL 15:117db924cf7c 2000 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 2001 /* Use local stack variable */
wolfSSL 15:117db924cf7c 2002 x = rx;
wolfSSL 15:117db924cf7c 2003 y = ry;
wolfSSL 15:117db924cf7c 2004 z = rz;
wolfSSL 15:117db924cf7c 2005
wolfSSL 15:117db924cf7c 2006 if ((err = mp_init_multi(x, y, z, NULL, NULL, NULL)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 2007 mp_clear(t1);
wolfSSL 15:117db924cf7c 2008 mp_clear(t2);
wolfSSL 15:117db924cf7c 2009 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 2010 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 2011 if (R->key == NULL)
wolfSSL 15:117db924cf7c 2012 #endif
wolfSSL 15:117db924cf7c 2013 {
wolfSSL 15:117db924cf7c 2014 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 2015 XFREE(rz, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2016 XFREE(ry, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2017 XFREE(rx, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2018 #endif
wolfSSL 15:117db924cf7c 2019 XFREE(t2, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2020 XFREE(t1, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2021 }
wolfSSL 15:117db924cf7c 2022 #endif
wolfSSL 15:117db924cf7c 2023 return err;
wolfSSL 15:117db924cf7c 2024 }
wolfSSL 15:117db924cf7c 2025 #else
wolfSSL 15:117db924cf7c 2026 /* Use destination directly */
wolfSSL 15:117db924cf7c 2027 x = R->x;
wolfSSL 15:117db924cf7c 2028 y = R->y;
wolfSSL 15:117db924cf7c 2029 z = R->z;
wolfSSL 15:117db924cf7c 2030 #endif
wolfSSL 15:117db924cf7c 2031
wolfSSL 15:117db924cf7c 2032 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2033 err = mp_copy(P->x, x);
wolfSSL 15:117db924cf7c 2034 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2035 err = mp_copy(P->y, y);
wolfSSL 15:117db924cf7c 2036 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2037 err = mp_copy(P->z, z);
wolfSSL 15:117db924cf7c 2038
wolfSSL 15:117db924cf7c 2039 /* T1 = Z * Z */
wolfSSL 15:117db924cf7c 2040 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2041 err = mp_sqr(z, t1);
wolfSSL 15:117db924cf7c 2042 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2043 err = mp_montgomery_reduce(t1, modulus, mp);
wolfSSL 15:117db924cf7c 2044
wolfSSL 15:117db924cf7c 2045 /* Z = Y * Z */
wolfSSL 15:117db924cf7c 2046 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2047 err = mp_mul(z, y, z);
wolfSSL 15:117db924cf7c 2048 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2049 err = mp_montgomery_reduce(z, modulus, mp);
wolfSSL 15:117db924cf7c 2050
wolfSSL 15:117db924cf7c 2051 /* Z = 2Z */
wolfSSL 15:117db924cf7c 2052 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2053 err = mp_add(z, z, z);
wolfSSL 15:117db924cf7c 2054 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 2055 if (mp_cmp(z, modulus) != MP_LT)
wolfSSL 15:117db924cf7c 2056 err = mp_sub(z, modulus, z);
wolfSSL 15:117db924cf7c 2057 }
wolfSSL 15:117db924cf7c 2058
wolfSSL 15:117db924cf7c 2059 /* Determine if curve "a" should be used in calc */
wolfSSL 15:117db924cf7c 2060 #ifdef WOLFSSL_CUSTOM_CURVES
wolfSSL 15:117db924cf7c 2061 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 2062 /* Use a and prime to determine if a == 3 */
wolfSSL 15:117db924cf7c 2063 err = mp_submod(modulus, a, modulus, t2);
wolfSSL 15:117db924cf7c 2064 }
wolfSSL 15:117db924cf7c 2065 if (err == MP_OKAY && mp_cmp_d(t2, 3) != MP_EQ) {
wolfSSL 15:117db924cf7c 2066 /* use "a" in calc */
wolfSSL 15:117db924cf7c 2067
wolfSSL 15:117db924cf7c 2068 /* T2 = T1 * T1 */
wolfSSL 15:117db924cf7c 2069 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2070 err = mp_sqr(t1, t2);
wolfSSL 15:117db924cf7c 2071 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2072 err = mp_montgomery_reduce(t2, modulus, mp);
wolfSSL 15:117db924cf7c 2073 /* T1 = T2 * a */
wolfSSL 15:117db924cf7c 2074 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2075 err = mp_mulmod(t2, a, modulus, t1);
wolfSSL 15:117db924cf7c 2076 /* T2 = X * X */
wolfSSL 15:117db924cf7c 2077 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2078 err = mp_sqr(x, t2);
wolfSSL 15:117db924cf7c 2079 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2080 err = mp_montgomery_reduce(t2, modulus, mp);
wolfSSL 15:117db924cf7c 2081 /* T1 = T2 + T1 */
wolfSSL 15:117db924cf7c 2082 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2083 err = mp_add(t1, t2, t1);
wolfSSL 15:117db924cf7c 2084 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 2085 if (mp_cmp(t1, modulus) != MP_LT)
wolfSSL 15:117db924cf7c 2086 err = mp_sub(t1, modulus, t1);
wolfSSL 15:117db924cf7c 2087 }
wolfSSL 15:117db924cf7c 2088 /* T1 = T2 + T1 */
wolfSSL 15:117db924cf7c 2089 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2090 err = mp_add(t1, t2, t1);
wolfSSL 15:117db924cf7c 2091 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 2092 if (mp_cmp(t1, modulus) != MP_LT)
wolfSSL 15:117db924cf7c 2093 err = mp_sub(t1, modulus, t1);
wolfSSL 15:117db924cf7c 2094 }
wolfSSL 15:117db924cf7c 2095 /* T1 = T2 + T1 */
wolfSSL 15:117db924cf7c 2096 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2097 err = mp_add(t1, t2, t1);
wolfSSL 15:117db924cf7c 2098 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 2099 if (mp_cmp(t1, modulus) != MP_LT)
wolfSSL 15:117db924cf7c 2100 err = mp_sub(t1, modulus, t1);
wolfSSL 15:117db924cf7c 2101 }
wolfSSL 15:117db924cf7c 2102 }
wolfSSL 15:117db924cf7c 2103 else
wolfSSL 15:117db924cf7c 2104 #endif /* WOLFSSL_CUSTOM_CURVES */
wolfSSL 15:117db924cf7c 2105 {
wolfSSL 15:117db924cf7c 2106 /* assumes "a" == 3 */
wolfSSL 15:117db924cf7c 2107 (void)a;
wolfSSL 15:117db924cf7c 2108
wolfSSL 15:117db924cf7c 2109 /* T2 = X - T1 */
wolfSSL 15:117db924cf7c 2110 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2111 err = mp_sub(x, t1, t2);
wolfSSL 15:117db924cf7c 2112 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 2113 if (mp_isneg(t2))
wolfSSL 15:117db924cf7c 2114 err = mp_add(t2, modulus, t2);
wolfSSL 15:117db924cf7c 2115 }
wolfSSL 15:117db924cf7c 2116 /* T1 = X + T1 */
wolfSSL 15:117db924cf7c 2117 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2118 err = mp_add(t1, x, t1);
wolfSSL 15:117db924cf7c 2119 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 2120 if (mp_cmp(t1, modulus) != MP_LT)
wolfSSL 15:117db924cf7c 2121 err = mp_sub(t1, modulus, t1);
wolfSSL 15:117db924cf7c 2122 }
wolfSSL 15:117db924cf7c 2123 /* T2 = T1 * T2 */
wolfSSL 15:117db924cf7c 2124 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2125 err = mp_mul(t1, t2, t2);
wolfSSL 15:117db924cf7c 2126 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2127 err = mp_montgomery_reduce(t2, modulus, mp);
wolfSSL 15:117db924cf7c 2128
wolfSSL 15:117db924cf7c 2129 /* T1 = 2T2 */
wolfSSL 15:117db924cf7c 2130 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2131 err = mp_add(t2, t2, t1);
wolfSSL 15:117db924cf7c 2132 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 2133 if (mp_cmp(t1, modulus) != MP_LT)
wolfSSL 15:117db924cf7c 2134 err = mp_sub(t1, modulus, t1);
wolfSSL 15:117db924cf7c 2135 }
wolfSSL 15:117db924cf7c 2136 /* T1 = T1 + T2 */
wolfSSL 15:117db924cf7c 2137 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2138 err = mp_add(t1, t2, t1);
wolfSSL 15:117db924cf7c 2139 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 2140 if (mp_cmp(t1, modulus) != MP_LT)
wolfSSL 15:117db924cf7c 2141 err = mp_sub(t1, modulus, t1);
wolfSSL 15:117db924cf7c 2142 }
wolfSSL 15:117db924cf7c 2143 }
wolfSSL 15:117db924cf7c 2144
wolfSSL 15:117db924cf7c 2145 /* Y = 2Y */
wolfSSL 15:117db924cf7c 2146 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2147 err = mp_add(y, y, y);
wolfSSL 15:117db924cf7c 2148 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 2149 if (mp_cmp(y, modulus) != MP_LT)
wolfSSL 15:117db924cf7c 2150 err = mp_sub(y, modulus, y);
wolfSSL 15:117db924cf7c 2151 }
wolfSSL 15:117db924cf7c 2152 /* Y = Y * Y */
wolfSSL 15:117db924cf7c 2153 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2154 err = mp_sqr(y, y);
wolfSSL 15:117db924cf7c 2155 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2156 err = mp_montgomery_reduce(y, modulus, mp);
wolfSSL 15:117db924cf7c 2157
wolfSSL 15:117db924cf7c 2158 /* T2 = Y * Y */
wolfSSL 15:117db924cf7c 2159 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2160 err = mp_sqr(y, t2);
wolfSSL 15:117db924cf7c 2161 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2162 err = mp_montgomery_reduce(t2, modulus, mp);
wolfSSL 15:117db924cf7c 2163
wolfSSL 15:117db924cf7c 2164 /* T2 = T2/2 */
wolfSSL 15:117db924cf7c 2165 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 2166 if (mp_isodd(t2) == MP_YES)
wolfSSL 15:117db924cf7c 2167 err = mp_add(t2, modulus, t2);
wolfSSL 15:117db924cf7c 2168 }
wolfSSL 15:117db924cf7c 2169 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2170 err = mp_div_2(t2, t2);
wolfSSL 15:117db924cf7c 2171
wolfSSL 15:117db924cf7c 2172 /* Y = Y * X */
wolfSSL 15:117db924cf7c 2173 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2174 err = mp_mul(y, x, y);
wolfSSL 15:117db924cf7c 2175 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2176 err = mp_montgomery_reduce(y, modulus, mp);
wolfSSL 15:117db924cf7c 2177
wolfSSL 15:117db924cf7c 2178 /* X = T1 * T1 */
wolfSSL 15:117db924cf7c 2179 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2180 err = mp_sqr(t1, x);
wolfSSL 15:117db924cf7c 2181 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2182 err = mp_montgomery_reduce(x, modulus, mp);
wolfSSL 15:117db924cf7c 2183
wolfSSL 15:117db924cf7c 2184 /* X = X - Y */
wolfSSL 15:117db924cf7c 2185 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2186 err = mp_sub(x, y, x);
wolfSSL 15:117db924cf7c 2187 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 2188 if (mp_isneg(x))
wolfSSL 15:117db924cf7c 2189 err = mp_add(x, modulus, x);
wolfSSL 15:117db924cf7c 2190 }
wolfSSL 15:117db924cf7c 2191 /* X = X - Y */
wolfSSL 15:117db924cf7c 2192 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2193 err = mp_sub(x, y, x);
wolfSSL 15:117db924cf7c 2194 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 2195 if (mp_isneg(x))
wolfSSL 15:117db924cf7c 2196 err = mp_add(x, modulus, x);
wolfSSL 15:117db924cf7c 2197 }
wolfSSL 15:117db924cf7c 2198
wolfSSL 15:117db924cf7c 2199 /* Y = Y - X */
wolfSSL 15:117db924cf7c 2200 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2201 err = mp_sub(y, x, y);
wolfSSL 15:117db924cf7c 2202 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 2203 if (mp_isneg(y))
wolfSSL 15:117db924cf7c 2204 err = mp_add(y, modulus, y);
wolfSSL 15:117db924cf7c 2205 }
wolfSSL 15:117db924cf7c 2206 /* Y = Y * T1 */
wolfSSL 15:117db924cf7c 2207 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2208 err = mp_mul(y, t1, y);
wolfSSL 15:117db924cf7c 2209 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2210 err = mp_montgomery_reduce(y, modulus, mp);
wolfSSL 15:117db924cf7c 2211
wolfSSL 15:117db924cf7c 2212 /* Y = Y - T2 */
wolfSSL 15:117db924cf7c 2213 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2214 err = mp_sub(y, t2, y);
wolfSSL 15:117db924cf7c 2215 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 2216 if (mp_isneg(y))
wolfSSL 15:117db924cf7c 2217 err = mp_add(y, modulus, y);
wolfSSL 15:117db924cf7c 2218 }
wolfSSL 15:117db924cf7c 2219
wolfSSL 15:117db924cf7c 2220 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 2221 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2222 err = mp_copy(x, R->x);
wolfSSL 15:117db924cf7c 2223 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2224 err = mp_copy(y, R->y);
wolfSSL 15:117db924cf7c 2225 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2226 err = mp_copy(z, R->z);
wolfSSL 15:117db924cf7c 2227 #endif
wolfSSL 15:117db924cf7c 2228
wolfSSL 15:117db924cf7c 2229 /* clean up */
wolfSSL 15:117db924cf7c 2230 mp_clear(t1);
wolfSSL 15:117db924cf7c 2231 mp_clear(t2);
wolfSSL 15:117db924cf7c 2232
wolfSSL 15:117db924cf7c 2233 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 2234 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 2235 if (R->key == NULL)
wolfSSL 15:117db924cf7c 2236 #endif
wolfSSL 15:117db924cf7c 2237 {
wolfSSL 15:117db924cf7c 2238 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 2239 XFREE(rz, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2240 XFREE(ry, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2241 XFREE(rx, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2242 #endif
wolfSSL 15:117db924cf7c 2243 XFREE(t2, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2244 XFREE(t1, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2245 }
wolfSSL 15:117db924cf7c 2246 #endif
wolfSSL 15:117db924cf7c 2247
wolfSSL 15:117db924cf7c 2248 return err;
wolfSSL 15:117db924cf7c 2249 #else
wolfSSL 15:117db924cf7c 2250 if (P == NULL || R == NULL || modulus == NULL)
wolfSSL 15:117db924cf7c 2251 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 2252
wolfSSL 15:117db924cf7c 2253 (void)a;
wolfSSL 15:117db924cf7c 2254 (void)mp;
wolfSSL 15:117db924cf7c 2255
wolfSSL 15:117db924cf7c 2256 return sp_ecc_proj_dbl_point_256(P->x, P->y, P->z, R->x, R->y, R->z);
wolfSSL 15:117db924cf7c 2257 #endif
wolfSSL 15:117db924cf7c 2258 }
wolfSSL 15:117db924cf7c 2259
wolfSSL 15:117db924cf7c 2260
wolfSSL 15:117db924cf7c 2261 /**
wolfSSL 15:117db924cf7c 2262 Map a projective jacbobian point back to affine space
wolfSSL 15:117db924cf7c 2263 P [in/out] The point to map
wolfSSL 15:117db924cf7c 2264 modulus The modulus of the field the ECC curve is in
wolfSSL 15:117db924cf7c 2265 mp The "b" value from montgomery_setup()
wolfSSL 15:117db924cf7c 2266 return MP_OKAY on success
wolfSSL 15:117db924cf7c 2267 */
wolfSSL 15:117db924cf7c 2268 int ecc_map(ecc_point* P, mp_int* modulus, mp_digit mp)
wolfSSL 15:117db924cf7c 2269 {
wolfSSL 15:117db924cf7c 2270 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 2271 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 2272 mp_int* t1 = NULL;
wolfSSL 15:117db924cf7c 2273 mp_int* t2 = NULL;
wolfSSL 15:117db924cf7c 2274 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 2275 mp_int* rx = NULL;
wolfSSL 15:117db924cf7c 2276 mp_int* ry = NULL;
wolfSSL 15:117db924cf7c 2277 mp_int* rz = NULL;
wolfSSL 15:117db924cf7c 2278 #endif
wolfSSL 15:117db924cf7c 2279 #else
wolfSSL 15:117db924cf7c 2280 mp_int t1[1], t2[1];
wolfSSL 15:117db924cf7c 2281 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 2282 mp_int rx[1], ry[1], rz[1];
wolfSSL 15:117db924cf7c 2283 #endif
wolfSSL 15:117db924cf7c 2284 #endif /* WOLFSSL_SMALL_STACK */
wolfSSL 15:117db924cf7c 2285 mp_int *x, *y, *z;
wolfSSL 15:117db924cf7c 2286 int err;
wolfSSL 15:117db924cf7c 2287
wolfSSL 15:117db924cf7c 2288 if (P == NULL || modulus == NULL)
wolfSSL 15:117db924cf7c 2289 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 2290
wolfSSL 15:117db924cf7c 2291 /* special case for point at infinity */
wolfSSL 15:117db924cf7c 2292 if (mp_cmp_d(P->z, 0) == MP_EQ) {
wolfSSL 15:117db924cf7c 2293 err = mp_set(P->x, 0);
wolfSSL 15:117db924cf7c 2294 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2295 err = mp_set(P->y, 0);
wolfSSL 15:117db924cf7c 2296 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2297 err = mp_set(P->z, 1);
wolfSSL 15:117db924cf7c 2298 return err;
wolfSSL 15:117db924cf7c 2299 }
wolfSSL 15:117db924cf7c 2300
wolfSSL 15:117db924cf7c 2301 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 2302 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 2303 if (P->key != NULL) {
wolfSSL 15:117db924cf7c 2304 t1 = P->key->t1;
wolfSSL 15:117db924cf7c 2305 t2 = P->key->t2;
wolfSSL 15:117db924cf7c 2306 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 2307 rx = P->key->x;
wolfSSL 15:117db924cf7c 2308 ry = P->key->y;
wolfSSL 15:117db924cf7c 2309 rz = P->key->z;
wolfSSL 15:117db924cf7c 2310 #endif
wolfSSL 15:117db924cf7c 2311 }
wolfSSL 15:117db924cf7c 2312 else
wolfSSL 15:117db924cf7c 2313 #endif /* WOLFSSL_SMALL_STACK_CACHE */
wolfSSL 15:117db924cf7c 2314 {
wolfSSL 15:117db924cf7c 2315 t1 = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2316 t2 = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2317 if (t1 == NULL || t2 == NULL) {
wolfSSL 15:117db924cf7c 2318 XFREE(t2, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2319 XFREE(t1, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2320 return MEMORY_E;
wolfSSL 15:117db924cf7c 2321 }
wolfSSL 15:117db924cf7c 2322 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 2323 rx = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2324 ry = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2325 rz = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2326 if (rx == NULL || ry == NULL || rz == NULL) {
wolfSSL 15:117db924cf7c 2327 XFREE(rz, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2328 XFREE(ry, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2329 XFREE(rx, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2330 XFREE(t2, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2331 XFREE(t1, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2332 return MEMORY_E;
wolfSSL 15:117db924cf7c 2333 }
wolfSSL 15:117db924cf7c 2334 #endif
wolfSSL 15:117db924cf7c 2335 }
wolfSSL 15:117db924cf7c 2336 #endif /* WOLFSSL_SMALL_STACK */
wolfSSL 15:117db924cf7c 2337
wolfSSL 15:117db924cf7c 2338 if ((err = mp_init_multi(t1, t2, NULL, NULL, NULL, NULL)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 2339 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 2340 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 2341 if (P->key == NULL)
wolfSSL 15:117db924cf7c 2342 #endif
wolfSSL 15:117db924cf7c 2343 {
wolfSSL 15:117db924cf7c 2344 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 2345 XFREE(rz, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2346 XFREE(ry, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2347 XFREE(rx, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2348 #endif
wolfSSL 15:117db924cf7c 2349 XFREE(t2, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2350 XFREE(t1, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2351 }
wolfSSL 15:117db924cf7c 2352 #endif
wolfSSL 15:117db924cf7c 2353 return MEMORY_E;
wolfSSL 15:117db924cf7c 2354 }
wolfSSL 15:117db924cf7c 2355
wolfSSL 15:117db924cf7c 2356 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 2357 /* Use local stack variable */
wolfSSL 15:117db924cf7c 2358 x = rx;
wolfSSL 15:117db924cf7c 2359 y = ry;
wolfSSL 15:117db924cf7c 2360 z = rz;
wolfSSL 15:117db924cf7c 2361
wolfSSL 15:117db924cf7c 2362 if ((err = mp_init_multi(x, y, z, NULL, NULL, NULL)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 2363 goto done;
wolfSSL 15:117db924cf7c 2364 }
wolfSSL 15:117db924cf7c 2365
wolfSSL 15:117db924cf7c 2366 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2367 err = mp_copy(P->x, x);
wolfSSL 15:117db924cf7c 2368 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2369 err = mp_copy(P->y, y);
wolfSSL 15:117db924cf7c 2370 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2371 err = mp_copy(P->z, z);
wolfSSL 15:117db924cf7c 2372
wolfSSL 15:117db924cf7c 2373 if (err != MP_OKAY) {
wolfSSL 15:117db924cf7c 2374 goto done;
wolfSSL 15:117db924cf7c 2375 }
wolfSSL 15:117db924cf7c 2376 #else
wolfSSL 15:117db924cf7c 2377 /* Use destination directly */
wolfSSL 15:117db924cf7c 2378 x = P->x;
wolfSSL 15:117db924cf7c 2379 y = P->y;
wolfSSL 15:117db924cf7c 2380 z = P->z;
wolfSSL 15:117db924cf7c 2381 #endif
wolfSSL 15:117db924cf7c 2382
wolfSSL 15:117db924cf7c 2383 /* first map z back to normal */
wolfSSL 15:117db924cf7c 2384 err = mp_montgomery_reduce(z, modulus, mp);
wolfSSL 15:117db924cf7c 2385
wolfSSL 15:117db924cf7c 2386 /* get 1/z */
wolfSSL 15:117db924cf7c 2387 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2388 err = mp_invmod(z, modulus, t1);
wolfSSL 15:117db924cf7c 2389
wolfSSL 15:117db924cf7c 2390 /* get 1/z^2 and 1/z^3 */
wolfSSL 15:117db924cf7c 2391 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2392 err = mp_sqr(t1, t2);
wolfSSL 15:117db924cf7c 2393 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2394 err = mp_mod(t2, modulus, t2);
wolfSSL 15:117db924cf7c 2395 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2396 err = mp_mul(t1, t2, t1);
wolfSSL 15:117db924cf7c 2397 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2398 err = mp_mod(t1, modulus, t1);
wolfSSL 15:117db924cf7c 2399
wolfSSL 15:117db924cf7c 2400 /* multiply against x/y */
wolfSSL 15:117db924cf7c 2401 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2402 err = mp_mul(x, t2, x);
wolfSSL 15:117db924cf7c 2403 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2404 err = mp_montgomery_reduce(x, modulus, mp);
wolfSSL 15:117db924cf7c 2405 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2406 err = mp_mul(y, t1, y);
wolfSSL 15:117db924cf7c 2407 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2408 err = mp_montgomery_reduce(y, modulus, mp);
wolfSSL 15:117db924cf7c 2409
wolfSSL 15:117db924cf7c 2410 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2411 err = mp_set(z, 1);
wolfSSL 15:117db924cf7c 2412
wolfSSL 15:117db924cf7c 2413 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 2414 /* return result */
wolfSSL 15:117db924cf7c 2415 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2416 err = mp_copy(x, P->x);
wolfSSL 15:117db924cf7c 2417 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2418 err = mp_copy(y, P->y);
wolfSSL 15:117db924cf7c 2419 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2420 err = mp_copy(z, P->z);
wolfSSL 15:117db924cf7c 2421
wolfSSL 15:117db924cf7c 2422 done:
wolfSSL 15:117db924cf7c 2423 #endif
wolfSSL 15:117db924cf7c 2424
wolfSSL 15:117db924cf7c 2425 /* clean up */
wolfSSL 15:117db924cf7c 2426 mp_clear(t1);
wolfSSL 15:117db924cf7c 2427 mp_clear(t2);
wolfSSL 15:117db924cf7c 2428
wolfSSL 15:117db924cf7c 2429 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 2430 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 2431 if (P->key == NULL)
wolfSSL 15:117db924cf7c 2432 #endif
wolfSSL 15:117db924cf7c 2433 {
wolfSSL 15:117db924cf7c 2434 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 2435 XFREE(rz, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2436 XFREE(ry, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2437 XFREE(rx, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2438 #endif
wolfSSL 15:117db924cf7c 2439 XFREE(t2, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2440 XFREE(t1, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2441 }
wolfSSL 15:117db924cf7c 2442 #endif
wolfSSL 15:117db924cf7c 2443
wolfSSL 15:117db924cf7c 2444 return err;
wolfSSL 15:117db924cf7c 2445 #else
wolfSSL 15:117db924cf7c 2446 if (P == NULL || modulus == NULL)
wolfSSL 15:117db924cf7c 2447 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 2448
wolfSSL 15:117db924cf7c 2449 (void)mp;
wolfSSL 15:117db924cf7c 2450
wolfSSL 15:117db924cf7c 2451 return sp_ecc_map_256(P->x, P->y, P->z);
wolfSSL 15:117db924cf7c 2452 #endif
wolfSSL 15:117db924cf7c 2453 }
wolfSSL 15:117db924cf7c 2454
wolfSSL 15:117db924cf7c 2455 #endif /* !WOLFSSL_SP_MATH || WOLFSSL_PUBLIC_ECC_ADD_DBL */
wolfSSL 15:117db924cf7c 2456
wolfSSL 15:117db924cf7c 2457 #if !defined(FREESCALE_LTC_ECC)
wolfSSL 15:117db924cf7c 2458
wolfSSL 15:117db924cf7c 2459 #if !defined(FP_ECC) || !defined(WOLFSSL_SP_MATH)
wolfSSL 15:117db924cf7c 2460 /**
wolfSSL 15:117db924cf7c 2461 Perform a point multiplication
wolfSSL 15:117db924cf7c 2462 k The scalar to multiply by
wolfSSL 15:117db924cf7c 2463 G The base point
wolfSSL 15:117db924cf7c 2464 R [out] Destination for kG
wolfSSL 15:117db924cf7c 2465 a ECC curve parameter a
wolfSSL 15:117db924cf7c 2466 modulus The modulus of the field the ECC curve is in
wolfSSL 15:117db924cf7c 2467 map Boolean whether to map back to affine or not
wolfSSL 15:117db924cf7c 2468 (1==map, 0 == leave in projective)
wolfSSL 15:117db924cf7c 2469 return MP_OKAY on success
wolfSSL 15:117db924cf7c 2470 */
wolfSSL 15:117db924cf7c 2471 #ifdef FP_ECC
wolfSSL 15:117db924cf7c 2472 static int normal_ecc_mulmod(mp_int* k, ecc_point *G, ecc_point *R,
wolfSSL 15:117db924cf7c 2473 mp_int* a, mp_int* modulus, int map,
wolfSSL 15:117db924cf7c 2474 void* heap)
wolfSSL 15:117db924cf7c 2475 #else
wolfSSL 15:117db924cf7c 2476 int wc_ecc_mulmod_ex(mp_int* k, ecc_point *G, ecc_point *R,
wolfSSL 15:117db924cf7c 2477 mp_int* a, mp_int* modulus, int map,
wolfSSL 15:117db924cf7c 2478 void* heap)
wolfSSL 15:117db924cf7c 2479 #endif
wolfSSL 15:117db924cf7c 2480 {
wolfSSL 15:117db924cf7c 2481 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 2482 #ifndef ECC_TIMING_RESISTANT
wolfSSL 15:117db924cf7c 2483 /* size of sliding window, don't change this! */
wolfSSL 15:117db924cf7c 2484 #define WINSIZE 4
wolfSSL 15:117db924cf7c 2485 #define M_POINTS 8
wolfSSL 15:117db924cf7c 2486 int first = 1, bitbuf = 0, bitcpy = 0, j;
wolfSSL 15:117db924cf7c 2487 #else
wolfSSL 15:117db924cf7c 2488 #define M_POINTS 3
wolfSSL 15:117db924cf7c 2489 #endif
wolfSSL 15:117db924cf7c 2490
wolfSSL 15:117db924cf7c 2491 ecc_point *tG, *M[M_POINTS];
wolfSSL 15:117db924cf7c 2492 int i, err;
wolfSSL 15:117db924cf7c 2493 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 2494 mp_int* mu = NULL;
wolfSSL 15:117db924cf7c 2495 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 2496 ecc_key key;
wolfSSL 15:117db924cf7c 2497 #endif
wolfSSL 15:117db924cf7c 2498 #else
wolfSSL 15:117db924cf7c 2499 mp_int mu[1];
wolfSSL 15:117db924cf7c 2500 #endif
wolfSSL 15:117db924cf7c 2501 mp_digit mp;
wolfSSL 15:117db924cf7c 2502 mp_digit buf;
wolfSSL 15:117db924cf7c 2503 int bitcnt = 0, mode = 0, digidx = 0;
wolfSSL 15:117db924cf7c 2504
wolfSSL 15:117db924cf7c 2505 if (k == NULL || G == NULL || R == NULL || modulus == NULL) {
wolfSSL 15:117db924cf7c 2506 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 2507 }
wolfSSL 15:117db924cf7c 2508
wolfSSL 15:117db924cf7c 2509 /* init variables */
wolfSSL 15:117db924cf7c 2510 tG = NULL;
wolfSSL 15:117db924cf7c 2511 XMEMSET(M, 0, sizeof(M));
wolfSSL 15:117db924cf7c 2512 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 2513 mu = (mp_int*)XMALLOC(sizeof(mp_int), heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2514 if (mu == NULL)
wolfSSL 15:117db924cf7c 2515 return MEMORY_E;
wolfSSL 15:117db924cf7c 2516 #endif
wolfSSL 15:117db924cf7c 2517 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 2518 key.t1 = (mp_int*)XMALLOC(sizeof(mp_int), heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2519 key.t2 = (mp_int*)XMALLOC(sizeof(mp_int), heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2520 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 2521 key.x = (mp_int*)XMALLOC(sizeof(mp_int), heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2522 key.y = (mp_int*)XMALLOC(sizeof(mp_int), heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2523 key.z = (mp_int*)XMALLOC(sizeof(mp_int), heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2524 #endif
wolfSSL 15:117db924cf7c 2525 if (key.t1 == NULL || key.t2 == NULL
wolfSSL 15:117db924cf7c 2526 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 2527 || key.x == NULL || key.y == NULL || key.z == NULL
wolfSSL 15:117db924cf7c 2528 #endif
wolfSSL 15:117db924cf7c 2529 ) {
wolfSSL 15:117db924cf7c 2530 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 2531 XFREE(key.z, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2532 XFREE(key.y, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2533 XFREE(key.x, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2534 #endif
wolfSSL 15:117db924cf7c 2535 XFREE(key.t2, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2536 XFREE(key.t1, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2537 XFREE(mu, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2538 return MEMORY_E;
wolfSSL 15:117db924cf7c 2539 }
wolfSSL 15:117db924cf7c 2540 #endif /* WOLFSSL_SMALL_STACK_CACHE */
wolfSSL 15:117db924cf7c 2541
wolfSSL 15:117db924cf7c 2542 /* init montgomery reduction */
wolfSSL 15:117db924cf7c 2543 if ((err = mp_montgomery_setup(modulus, &mp)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 2544 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 2545 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 2546 XFREE(key.z, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2547 XFREE(key.y, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2548 XFREE(key.x, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2549 #endif
wolfSSL 15:117db924cf7c 2550 XFREE(key.t2, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2551 XFREE(key.t1, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2552 #endif /* WOLFSSL_SMALL_STACK_CACHE */
wolfSSL 15:117db924cf7c 2553 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 2554 XFREE(mu, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2555 #endif
wolfSSL 15:117db924cf7c 2556 return err;
wolfSSL 15:117db924cf7c 2557 }
wolfSSL 15:117db924cf7c 2558
wolfSSL 15:117db924cf7c 2559 if ((err = mp_init(mu)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 2560 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 2561 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 2562 XFREE(key.z, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2563 XFREE(key.y, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2564 XFREE(key.x, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2565 #endif
wolfSSL 15:117db924cf7c 2566 XFREE(key.t2, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2567 XFREE(key.t1, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2568 #endif /* WOLFSSL_SMALL_STACK_CACHE */
wolfSSL 15:117db924cf7c 2569 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 2570 XFREE(mu, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2571 #endif
wolfSSL 15:117db924cf7c 2572 return err;
wolfSSL 15:117db924cf7c 2573 }
wolfSSL 15:117db924cf7c 2574 if ((err = mp_montgomery_calc_normalization(mu, modulus)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 2575 mp_clear(mu);
wolfSSL 15:117db924cf7c 2576 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 2577 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 2578 XFREE(key.z, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2579 XFREE(key.y, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2580 XFREE(key.x, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2581 #endif
wolfSSL 15:117db924cf7c 2582 XFREE(key.t2, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2583 XFREE(key.t1, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2584 #endif /* WOLFSSL_SMALL_STACK_CACHE */
wolfSSL 15:117db924cf7c 2585 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 2586 XFREE(mu, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2587 #endif
wolfSSL 15:117db924cf7c 2588 return err;
wolfSSL 15:117db924cf7c 2589 }
wolfSSL 15:117db924cf7c 2590
wolfSSL 15:117db924cf7c 2591 /* alloc ram for window temps */
wolfSSL 15:117db924cf7c 2592 for (i = 0; i < M_POINTS; i++) {
wolfSSL 15:117db924cf7c 2593 M[i] = wc_ecc_new_point_h(heap);
wolfSSL 15:117db924cf7c 2594 if (M[i] == NULL) {
wolfSSL 15:117db924cf7c 2595 mp_clear(mu);
wolfSSL 15:117db924cf7c 2596 err = MEMORY_E; goto exit;
wolfSSL 15:117db924cf7c 2597 }
wolfSSL 15:117db924cf7c 2598 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 2599 M[i]->key = &key;
wolfSSL 15:117db924cf7c 2600 #endif
wolfSSL 15:117db924cf7c 2601 }
wolfSSL 15:117db924cf7c 2602
wolfSSL 15:117db924cf7c 2603 /* make a copy of G in case R==G */
wolfSSL 15:117db924cf7c 2604 tG = wc_ecc_new_point_h(heap);
wolfSSL 15:117db924cf7c 2605 if (tG == NULL)
wolfSSL 15:117db924cf7c 2606 err = MEMORY_E;
wolfSSL 15:117db924cf7c 2607
wolfSSL 15:117db924cf7c 2608 /* tG = G and convert to montgomery */
wolfSSL 15:117db924cf7c 2609 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 2610 if (mp_cmp_d(mu, 1) == MP_EQ) {
wolfSSL 15:117db924cf7c 2611 err = mp_copy(G->x, tG->x);
wolfSSL 15:117db924cf7c 2612 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2613 err = mp_copy(G->y, tG->y);
wolfSSL 15:117db924cf7c 2614 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2615 err = mp_copy(G->z, tG->z);
wolfSSL 15:117db924cf7c 2616 } else {
wolfSSL 15:117db924cf7c 2617 err = mp_mulmod(G->x, mu, modulus, tG->x);
wolfSSL 15:117db924cf7c 2618 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2619 err = mp_mulmod(G->y, mu, modulus, tG->y);
wolfSSL 15:117db924cf7c 2620 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2621 err = mp_mulmod(G->z, mu, modulus, tG->z);
wolfSSL 15:117db924cf7c 2622 }
wolfSSL 15:117db924cf7c 2623 }
wolfSSL 15:117db924cf7c 2624
wolfSSL 15:117db924cf7c 2625 /* done with mu */
wolfSSL 15:117db924cf7c 2626 mp_clear(mu);
wolfSSL 15:117db924cf7c 2627
wolfSSL 15:117db924cf7c 2628 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 2629 R->key = &key;
wolfSSL 15:117db924cf7c 2630 #endif
wolfSSL 15:117db924cf7c 2631 #ifndef ECC_TIMING_RESISTANT
wolfSSL 15:117db924cf7c 2632
wolfSSL 15:117db924cf7c 2633 /* calc the M tab, which holds kG for k==8..15 */
wolfSSL 15:117db924cf7c 2634 /* M[0] == 8G */
wolfSSL 15:117db924cf7c 2635 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2636 err = ecc_projective_dbl_point(tG, M[0], a, modulus, mp);
wolfSSL 15:117db924cf7c 2637 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2638 err = ecc_projective_dbl_point(M[0], M[0], a, modulus, mp);
wolfSSL 15:117db924cf7c 2639 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2640 err = ecc_projective_dbl_point(M[0], M[0], a, modulus, mp);
wolfSSL 15:117db924cf7c 2641
wolfSSL 15:117db924cf7c 2642 /* now find (8+k)G for k=1..7 */
wolfSSL 15:117db924cf7c 2643 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2644 for (j = 9; j < 16; j++) {
wolfSSL 15:117db924cf7c 2645 err = ecc_projective_add_point(M[j-9], tG, M[j-M_POINTS], a,
wolfSSL 15:117db924cf7c 2646 modulus, mp);
wolfSSL 15:117db924cf7c 2647 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 2648 }
wolfSSL 15:117db924cf7c 2649
wolfSSL 15:117db924cf7c 2650 /* setup sliding window */
wolfSSL 15:117db924cf7c 2651 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 2652 mode = 0;
wolfSSL 15:117db924cf7c 2653 bitcnt = 1;
wolfSSL 15:117db924cf7c 2654 buf = 0;
wolfSSL 15:117db924cf7c 2655 digidx = get_digit_count(k) - 1;
wolfSSL 15:117db924cf7c 2656 bitcpy = bitbuf = 0;
wolfSSL 15:117db924cf7c 2657 first = 1;
wolfSSL 15:117db924cf7c 2658
wolfSSL 15:117db924cf7c 2659 /* perform ops */
wolfSSL 15:117db924cf7c 2660 for (;;) {
wolfSSL 15:117db924cf7c 2661 /* grab next digit as required */
wolfSSL 15:117db924cf7c 2662 if (--bitcnt == 0) {
wolfSSL 15:117db924cf7c 2663 if (digidx == -1) {
wolfSSL 15:117db924cf7c 2664 break;
wolfSSL 15:117db924cf7c 2665 }
wolfSSL 15:117db924cf7c 2666 buf = get_digit(k, digidx);
wolfSSL 15:117db924cf7c 2667 bitcnt = (int) DIGIT_BIT;
wolfSSL 15:117db924cf7c 2668 --digidx;
wolfSSL 15:117db924cf7c 2669 }
wolfSSL 15:117db924cf7c 2670
wolfSSL 15:117db924cf7c 2671 /* grab the next msb from the ltiplicand */
wolfSSL 15:117db924cf7c 2672 i = (int)(buf >> (DIGIT_BIT - 1)) & 1;
wolfSSL 15:117db924cf7c 2673 buf <<= 1;
wolfSSL 15:117db924cf7c 2674
wolfSSL 15:117db924cf7c 2675 /* skip leading zero bits */
wolfSSL 15:117db924cf7c 2676 if (mode == 0 && i == 0)
wolfSSL 15:117db924cf7c 2677 continue;
wolfSSL 15:117db924cf7c 2678
wolfSSL 15:117db924cf7c 2679 /* if the bit is zero and mode == 1 then we double */
wolfSSL 15:117db924cf7c 2680 if (mode == 1 && i == 0) {
wolfSSL 15:117db924cf7c 2681 err = ecc_projective_dbl_point(R, R, a, modulus, mp);
wolfSSL 15:117db924cf7c 2682 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 2683 continue;
wolfSSL 15:117db924cf7c 2684 }
wolfSSL 15:117db924cf7c 2685
wolfSSL 15:117db924cf7c 2686 /* else we add it to the window */
wolfSSL 15:117db924cf7c 2687 bitbuf |= (i << (WINSIZE - ++bitcpy));
wolfSSL 15:117db924cf7c 2688 mode = 2;
wolfSSL 15:117db924cf7c 2689
wolfSSL 15:117db924cf7c 2690 if (bitcpy == WINSIZE) {
wolfSSL 15:117db924cf7c 2691 /* if this is the first window we do a simple copy */
wolfSSL 15:117db924cf7c 2692 if (first == 1) {
wolfSSL 15:117db924cf7c 2693 /* R = kG [k = first window] */
wolfSSL 15:117db924cf7c 2694 err = mp_copy(M[bitbuf-M_POINTS]->x, R->x);
wolfSSL 15:117db924cf7c 2695 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 2696
wolfSSL 15:117db924cf7c 2697 err = mp_copy(M[bitbuf-M_POINTS]->y, R->y);
wolfSSL 15:117db924cf7c 2698 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 2699
wolfSSL 15:117db924cf7c 2700 err = mp_copy(M[bitbuf-M_POINTS]->z, R->z);
wolfSSL 15:117db924cf7c 2701 first = 0;
wolfSSL 15:117db924cf7c 2702 } else {
wolfSSL 15:117db924cf7c 2703 /* normal window */
wolfSSL 15:117db924cf7c 2704 /* ok window is filled so double as required and add */
wolfSSL 15:117db924cf7c 2705 /* double first */
wolfSSL 15:117db924cf7c 2706 for (j = 0; j < WINSIZE; j++) {
wolfSSL 15:117db924cf7c 2707 err = ecc_projective_dbl_point(R, R, a, modulus, mp);
wolfSSL 15:117db924cf7c 2708 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 2709 }
wolfSSL 15:117db924cf7c 2710 if (err != MP_OKAY) break; /* out of first for(;;) */
wolfSSL 15:117db924cf7c 2711
wolfSSL 15:117db924cf7c 2712 /* then add, bitbuf will be 8..15 [8..2^WINSIZE] guaranteed */
wolfSSL 15:117db924cf7c 2713 err = ecc_projective_add_point(R, M[bitbuf-M_POINTS], R, a,
wolfSSL 15:117db924cf7c 2714 modulus, mp);
wolfSSL 15:117db924cf7c 2715 }
wolfSSL 15:117db924cf7c 2716 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 2717 /* empty window and reset */
wolfSSL 15:117db924cf7c 2718 bitcpy = bitbuf = 0;
wolfSSL 15:117db924cf7c 2719 mode = 1;
wolfSSL 15:117db924cf7c 2720 }
wolfSSL 15:117db924cf7c 2721 }
wolfSSL 15:117db924cf7c 2722 }
wolfSSL 15:117db924cf7c 2723
wolfSSL 15:117db924cf7c 2724 /* if bits remain then double/add */
wolfSSL 15:117db924cf7c 2725 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 2726 if (mode == 2 && bitcpy > 0) {
wolfSSL 15:117db924cf7c 2727 /* double then add */
wolfSSL 15:117db924cf7c 2728 for (j = 0; j < bitcpy; j++) {
wolfSSL 15:117db924cf7c 2729 /* only double if we have had at least one add first */
wolfSSL 15:117db924cf7c 2730 if (first == 0) {
wolfSSL 15:117db924cf7c 2731 err = ecc_projective_dbl_point(R, R, a, modulus, mp);
wolfSSL 15:117db924cf7c 2732 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 2733 }
wolfSSL 15:117db924cf7c 2734
wolfSSL 15:117db924cf7c 2735 bitbuf <<= 1;
wolfSSL 15:117db924cf7c 2736 if ((bitbuf & (1 << WINSIZE)) != 0) {
wolfSSL 15:117db924cf7c 2737 if (first == 1) {
wolfSSL 15:117db924cf7c 2738 /* first add, so copy */
wolfSSL 15:117db924cf7c 2739 err = mp_copy(tG->x, R->x);
wolfSSL 15:117db924cf7c 2740 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 2741
wolfSSL 15:117db924cf7c 2742 err = mp_copy(tG->y, R->y);
wolfSSL 15:117db924cf7c 2743 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 2744
wolfSSL 15:117db924cf7c 2745 err = mp_copy(tG->z, R->z);
wolfSSL 15:117db924cf7c 2746 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 2747 first = 0;
wolfSSL 15:117db924cf7c 2748 } else {
wolfSSL 15:117db924cf7c 2749 /* then add */
wolfSSL 15:117db924cf7c 2750 err = ecc_projective_add_point(R, tG, R, a, modulus,
wolfSSL 15:117db924cf7c 2751 mp);
wolfSSL 15:117db924cf7c 2752 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 2753 }
wolfSSL 15:117db924cf7c 2754 }
wolfSSL 15:117db924cf7c 2755 }
wolfSSL 15:117db924cf7c 2756 }
wolfSSL 15:117db924cf7c 2757 }
wolfSSL 15:117db924cf7c 2758
wolfSSL 15:117db924cf7c 2759 #undef WINSIZE
wolfSSL 15:117db924cf7c 2760
wolfSSL 15:117db924cf7c 2761 #else /* ECC_TIMING_RESISTANT */
wolfSSL 15:117db924cf7c 2762
wolfSSL 15:117db924cf7c 2763 /* calc the M tab */
wolfSSL 15:117db924cf7c 2764 /* M[0] == G */
wolfSSL 15:117db924cf7c 2765 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2766 err = mp_copy(tG->x, M[0]->x);
wolfSSL 15:117db924cf7c 2767 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2768 err = mp_copy(tG->y, M[0]->y);
wolfSSL 15:117db924cf7c 2769 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2770 err = mp_copy(tG->z, M[0]->z);
wolfSSL 15:117db924cf7c 2771
wolfSSL 15:117db924cf7c 2772 /* M[1] == 2G */
wolfSSL 15:117db924cf7c 2773 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2774 err = ecc_projective_dbl_point(tG, M[1], a, modulus, mp);
wolfSSL 15:117db924cf7c 2775
wolfSSL 15:117db924cf7c 2776 /* setup sliding window */
wolfSSL 15:117db924cf7c 2777 mode = 0;
wolfSSL 15:117db924cf7c 2778 bitcnt = 1;
wolfSSL 15:117db924cf7c 2779 buf = 0;
wolfSSL 15:117db924cf7c 2780 digidx = get_digit_count(k) - 1;
wolfSSL 15:117db924cf7c 2781
wolfSSL 15:117db924cf7c 2782 /* perform ops */
wolfSSL 15:117db924cf7c 2783 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 2784 for (;;) {
wolfSSL 15:117db924cf7c 2785 /* grab next digit as required */
wolfSSL 15:117db924cf7c 2786 if (--bitcnt == 0) {
wolfSSL 15:117db924cf7c 2787 if (digidx == -1) {
wolfSSL 15:117db924cf7c 2788 break;
wolfSSL 15:117db924cf7c 2789 }
wolfSSL 15:117db924cf7c 2790 buf = get_digit(k, digidx);
wolfSSL 15:117db924cf7c 2791 bitcnt = (int)DIGIT_BIT;
wolfSSL 15:117db924cf7c 2792 --digidx;
wolfSSL 15:117db924cf7c 2793 }
wolfSSL 15:117db924cf7c 2794
wolfSSL 15:117db924cf7c 2795 /* grab the next msb from the multiplicand */
wolfSSL 15:117db924cf7c 2796 i = (buf >> (DIGIT_BIT - 1)) & 1;
wolfSSL 15:117db924cf7c 2797 buf <<= 1;
wolfSSL 15:117db924cf7c 2798
wolfSSL 15:117db924cf7c 2799 if (mode == 0 && i == 0) {
wolfSSL 15:117db924cf7c 2800 /* timing resistant - dummy operations */
wolfSSL 15:117db924cf7c 2801 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2802 err = ecc_projective_add_point(M[0], M[1], M[2], a, modulus,
wolfSSL 15:117db924cf7c 2803 mp);
wolfSSL 15:117db924cf7c 2804 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2805 err = ecc_projective_dbl_point(M[1], M[2], a, modulus, mp);
wolfSSL 15:117db924cf7c 2806 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2807 continue;
wolfSSL 15:117db924cf7c 2808 }
wolfSSL 15:117db924cf7c 2809
wolfSSL 15:117db924cf7c 2810 if (mode == 0 && i == 1) {
wolfSSL 15:117db924cf7c 2811 mode = 1;
wolfSSL 15:117db924cf7c 2812 /* timing resistant - dummy operations */
wolfSSL 15:117db924cf7c 2813 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2814 err = ecc_projective_add_point(M[0], M[1], M[2], a, modulus,
wolfSSL 15:117db924cf7c 2815 mp);
wolfSSL 15:117db924cf7c 2816 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2817 err = ecc_projective_dbl_point(M[1], M[2], a, modulus, mp);
wolfSSL 15:117db924cf7c 2818 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2819 continue;
wolfSSL 15:117db924cf7c 2820 }
wolfSSL 15:117db924cf7c 2821
wolfSSL 15:117db924cf7c 2822 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2823 err = ecc_projective_add_point(M[0], M[1], M[i^1], a, modulus,
wolfSSL 15:117db924cf7c 2824 mp);
wolfSSL 15:117db924cf7c 2825 #ifdef WC_NO_CACHE_RESISTANT
wolfSSL 15:117db924cf7c 2826 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2827 err = ecc_projective_dbl_point(M[i], M[i], a, modulus, mp);
wolfSSL 15:117db924cf7c 2828 #else
wolfSSL 15:117db924cf7c 2829 /* instead of using M[i] for double, which leaks key bit to cache
wolfSSL 15:117db924cf7c 2830 * monitor, use M[2] as temp, make sure address calc is constant,
wolfSSL 15:117db924cf7c 2831 * keep M[0] and M[1] in cache */
wolfSSL 15:117db924cf7c 2832 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2833 err = mp_copy((mp_int*)
wolfSSL 15:117db924cf7c 2834 ( ((wolfssl_word)M[0]->x & wc_off_on_addr[i^1]) +
wolfSSL 15:117db924cf7c 2835 ((wolfssl_word)M[1]->x & wc_off_on_addr[i])),
wolfSSL 15:117db924cf7c 2836 M[2]->x);
wolfSSL 15:117db924cf7c 2837 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2838 err = mp_copy((mp_int*)
wolfSSL 15:117db924cf7c 2839 ( ((wolfssl_word)M[0]->y & wc_off_on_addr[i^1]) +
wolfSSL 15:117db924cf7c 2840 ((wolfssl_word)M[1]->y & wc_off_on_addr[i])),
wolfSSL 15:117db924cf7c 2841 M[2]->y);
wolfSSL 15:117db924cf7c 2842 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2843 err = mp_copy((mp_int*)
wolfSSL 15:117db924cf7c 2844 ( ((wolfssl_word)M[0]->z & wc_off_on_addr[i^1]) +
wolfSSL 15:117db924cf7c 2845 ((wolfssl_word)M[1]->z & wc_off_on_addr[i])),
wolfSSL 15:117db924cf7c 2846 M[2]->z);
wolfSSL 15:117db924cf7c 2847 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2848 err = ecc_projective_dbl_point(M[2], M[2], a, modulus, mp);
wolfSSL 15:117db924cf7c 2849 /* copy M[2] back to M[i] */
wolfSSL 15:117db924cf7c 2850 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2851 err = mp_copy(M[2]->x,
wolfSSL 15:117db924cf7c 2852 (mp_int*)
wolfSSL 15:117db924cf7c 2853 ( ((wolfssl_word)M[0]->x & wc_off_on_addr[i^1]) +
wolfSSL 15:117db924cf7c 2854 ((wolfssl_word)M[1]->x & wc_off_on_addr[i])) );
wolfSSL 15:117db924cf7c 2855 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2856 err = mp_copy(M[2]->y,
wolfSSL 15:117db924cf7c 2857 (mp_int*)
wolfSSL 15:117db924cf7c 2858 ( ((wolfssl_word)M[0]->y & wc_off_on_addr[i^1]) +
wolfSSL 15:117db924cf7c 2859 ((wolfssl_word)M[1]->y & wc_off_on_addr[i])) );
wolfSSL 15:117db924cf7c 2860 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2861 err = mp_copy(M[2]->z,
wolfSSL 15:117db924cf7c 2862 (mp_int*)
wolfSSL 15:117db924cf7c 2863 ( ((wolfssl_word)M[0]->z & wc_off_on_addr[i^1]) +
wolfSSL 15:117db924cf7c 2864 ((wolfssl_word)M[1]->z & wc_off_on_addr[i])) );
wolfSSL 15:117db924cf7c 2865 if (err != MP_OKAY)
wolfSSL 15:117db924cf7c 2866 break;
wolfSSL 15:117db924cf7c 2867 #endif /* WC_NO_CACHE_RESISTANT */
wolfSSL 15:117db924cf7c 2868 } /* end for */
wolfSSL 15:117db924cf7c 2869 }
wolfSSL 15:117db924cf7c 2870
wolfSSL 15:117db924cf7c 2871 /* copy result out */
wolfSSL 15:117db924cf7c 2872 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2873 err = mp_copy(M[0]->x, R->x);
wolfSSL 15:117db924cf7c 2874 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2875 err = mp_copy(M[0]->y, R->y);
wolfSSL 15:117db924cf7c 2876 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 2877 err = mp_copy(M[0]->z, R->z);
wolfSSL 15:117db924cf7c 2878
wolfSSL 15:117db924cf7c 2879 #endif /* ECC_TIMING_RESISTANT */
wolfSSL 15:117db924cf7c 2880
wolfSSL 15:117db924cf7c 2881 /* map R back from projective space */
wolfSSL 15:117db924cf7c 2882 if (err == MP_OKAY && map)
wolfSSL 15:117db924cf7c 2883 err = ecc_map(R, modulus, mp);
wolfSSL 15:117db924cf7c 2884
wolfSSL 15:117db924cf7c 2885 exit:
wolfSSL 15:117db924cf7c 2886
wolfSSL 15:117db924cf7c 2887 /* done */
wolfSSL 15:117db924cf7c 2888 wc_ecc_del_point_h(tG, heap);
wolfSSL 15:117db924cf7c 2889 for (i = 0; i < M_POINTS; i++) {
wolfSSL 15:117db924cf7c 2890 wc_ecc_del_point_h(M[i], heap);
wolfSSL 15:117db924cf7c 2891 }
wolfSSL 15:117db924cf7c 2892 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 2893 R->key = NULL;
wolfSSL 15:117db924cf7c 2894 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 2895 XFREE(key.z, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2896 XFREE(key.y, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2897 XFREE(key.x, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2898 #endif
wolfSSL 15:117db924cf7c 2899 XFREE(key.t2, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2900 XFREE(key.t1, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2901 #endif /* WOLFSSL_SMALL_STACK_CACHE */
wolfSSL 15:117db924cf7c 2902 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 2903 XFREE(mu, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2904 #endif
wolfSSL 15:117db924cf7c 2905
wolfSSL 15:117db924cf7c 2906 return err;
wolfSSL 15:117db924cf7c 2907 #else
wolfSSL 15:117db924cf7c 2908 if (k == NULL || G == NULL || R == NULL || modulus == NULL) {
wolfSSL 15:117db924cf7c 2909 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 2910 }
wolfSSL 15:117db924cf7c 2911
wolfSSL 15:117db924cf7c 2912 (void)a;
wolfSSL 15:117db924cf7c 2913
wolfSSL 15:117db924cf7c 2914 return sp_ecc_mulmod_256(k, G, R, map, heap);
wolfSSL 15:117db924cf7c 2915 #endif
wolfSSL 15:117db924cf7c 2916 }
wolfSSL 15:117db924cf7c 2917
wolfSSL 15:117db924cf7c 2918 #endif /* !FP_ECC || !WOLFSSL_SP_MATH */
wolfSSL 15:117db924cf7c 2919
wolfSSL 15:117db924cf7c 2920 #endif /* !FREESCALE_LTC_ECC */
wolfSSL 15:117db924cf7c 2921
wolfSSL 15:117db924cf7c 2922 /** ECC Fixed Point mulmod global
wolfSSL 15:117db924cf7c 2923 k The multiplicand
wolfSSL 15:117db924cf7c 2924 G Base point to multiply
wolfSSL 15:117db924cf7c 2925 R [out] Destination of product
wolfSSL 15:117db924cf7c 2926 a ECC curve parameter a
wolfSSL 15:117db924cf7c 2927 modulus The modulus for the curve
wolfSSL 15:117db924cf7c 2928 map [boolean] If non-zero maps the point back to affine co-ordinates,
wolfSSL 15:117db924cf7c 2929 otherwise it's left in jacobian-montgomery form
wolfSSL 15:117db924cf7c 2930 return MP_OKAY if successful
wolfSSL 15:117db924cf7c 2931 */
wolfSSL 15:117db924cf7c 2932 int wc_ecc_mulmod(mp_int* k, ecc_point *G, ecc_point *R, mp_int* a,
wolfSSL 15:117db924cf7c 2933 mp_int* modulus, int map)
wolfSSL 15:117db924cf7c 2934 {
wolfSSL 15:117db924cf7c 2935 return wc_ecc_mulmod_ex(k, G, R, a, modulus, map, NULL);
wolfSSL 15:117db924cf7c 2936 }
wolfSSL 15:117db924cf7c 2937
wolfSSL 15:117db924cf7c 2938 #endif /* !WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 2939
wolfSSL 15:117db924cf7c 2940 /**
wolfSSL 15:117db924cf7c 2941 * use a heap hint when creating new ecc_point
wolfSSL 15:117db924cf7c 2942 * return an allocated point on success or NULL on failure
wolfSSL 15:117db924cf7c 2943 */
wolfSSL 15:117db924cf7c 2944 ecc_point* wc_ecc_new_point_h(void* heap)
wolfSSL 15:117db924cf7c 2945 {
wolfSSL 15:117db924cf7c 2946 ecc_point* p;
wolfSSL 15:117db924cf7c 2947
wolfSSL 15:117db924cf7c 2948 (void)heap;
wolfSSL 15:117db924cf7c 2949
wolfSSL 15:117db924cf7c 2950 p = (ecc_point*)XMALLOC(sizeof(ecc_point), heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2951 if (p == NULL) {
wolfSSL 15:117db924cf7c 2952 return NULL;
wolfSSL 15:117db924cf7c 2953 }
wolfSSL 15:117db924cf7c 2954 XMEMSET(p, 0, sizeof(ecc_point));
wolfSSL 15:117db924cf7c 2955
wolfSSL 15:117db924cf7c 2956 #ifndef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 2957 if (mp_init_multi(p->x, p->y, p->z, NULL, NULL, NULL) != MP_OKAY) {
wolfSSL 15:117db924cf7c 2958 XFREE(p, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2959 return NULL;
wolfSSL 15:117db924cf7c 2960 }
wolfSSL 15:117db924cf7c 2961 #else
wolfSSL 15:117db924cf7c 2962 p->x = (mp_int*)&p->xyz[0];
wolfSSL 15:117db924cf7c 2963 p->y = (mp_int*)&p->xyz[1];
wolfSSL 15:117db924cf7c 2964 p->z = (mp_int*)&p->xyz[2];
wolfSSL 15:117db924cf7c 2965 alt_fp_init(p->x);
wolfSSL 15:117db924cf7c 2966 alt_fp_init(p->y);
wolfSSL 15:117db924cf7c 2967 alt_fp_init(p->z);
wolfSSL 15:117db924cf7c 2968 #endif
wolfSSL 15:117db924cf7c 2969
wolfSSL 15:117db924cf7c 2970 return p;
wolfSSL 15:117db924cf7c 2971 }
wolfSSL 15:117db924cf7c 2972
wolfSSL 15:117db924cf7c 2973
wolfSSL 15:117db924cf7c 2974 /**
wolfSSL 15:117db924cf7c 2975 Allocate a new ECC point
wolfSSL 15:117db924cf7c 2976 return A newly allocated point or NULL on error
wolfSSL 15:117db924cf7c 2977 */
wolfSSL 15:117db924cf7c 2978 ecc_point* wc_ecc_new_point(void)
wolfSSL 15:117db924cf7c 2979 {
wolfSSL 15:117db924cf7c 2980 return wc_ecc_new_point_h(NULL);
wolfSSL 15:117db924cf7c 2981 }
wolfSSL 15:117db924cf7c 2982
wolfSSL 15:117db924cf7c 2983
wolfSSL 15:117db924cf7c 2984 void wc_ecc_del_point_h(ecc_point* p, void* heap)
wolfSSL 15:117db924cf7c 2985 {
wolfSSL 15:117db924cf7c 2986 /* prevents free'ing null arguments */
wolfSSL 15:117db924cf7c 2987 if (p != NULL) {
wolfSSL 15:117db924cf7c 2988 mp_clear(p->x);
wolfSSL 15:117db924cf7c 2989 mp_clear(p->y);
wolfSSL 15:117db924cf7c 2990 mp_clear(p->z);
wolfSSL 15:117db924cf7c 2991 XFREE(p, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 2992 }
wolfSSL 15:117db924cf7c 2993 (void)heap;
wolfSSL 15:117db924cf7c 2994 }
wolfSSL 15:117db924cf7c 2995
wolfSSL 15:117db924cf7c 2996
wolfSSL 15:117db924cf7c 2997 /** Free an ECC point from memory
wolfSSL 15:117db924cf7c 2998 p The point to free
wolfSSL 15:117db924cf7c 2999 */
wolfSSL 15:117db924cf7c 3000 void wc_ecc_del_point(ecc_point* p)
wolfSSL 15:117db924cf7c 3001 {
wolfSSL 15:117db924cf7c 3002 wc_ecc_del_point_h(p, NULL);
wolfSSL 15:117db924cf7c 3003 }
wolfSSL 15:117db924cf7c 3004
wolfSSL 15:117db924cf7c 3005
wolfSSL 15:117db924cf7c 3006 /** Copy the value of a point to an other one
wolfSSL 15:117db924cf7c 3007 p The point to copy
wolfSSL 15:117db924cf7c 3008 r The created point
wolfSSL 15:117db924cf7c 3009 */
wolfSSL 15:117db924cf7c 3010 int wc_ecc_copy_point(ecc_point* p, ecc_point *r)
wolfSSL 15:117db924cf7c 3011 {
wolfSSL 15:117db924cf7c 3012 int ret;
wolfSSL 15:117db924cf7c 3013
wolfSSL 15:117db924cf7c 3014 /* prevents null arguments */
wolfSSL 15:117db924cf7c 3015 if (p == NULL || r == NULL)
wolfSSL 15:117db924cf7c 3016 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 3017
wolfSSL 15:117db924cf7c 3018 ret = mp_copy(p->x, r->x);
wolfSSL 15:117db924cf7c 3019 if (ret != MP_OKAY)
wolfSSL 15:117db924cf7c 3020 return ret;
wolfSSL 15:117db924cf7c 3021 ret = mp_copy(p->y, r->y);
wolfSSL 15:117db924cf7c 3022 if (ret != MP_OKAY)
wolfSSL 15:117db924cf7c 3023 return ret;
wolfSSL 15:117db924cf7c 3024 ret = mp_copy(p->z, r->z);
wolfSSL 15:117db924cf7c 3025 if (ret != MP_OKAY)
wolfSSL 15:117db924cf7c 3026 return ret;
wolfSSL 15:117db924cf7c 3027
wolfSSL 15:117db924cf7c 3028 return MP_OKAY;
wolfSSL 15:117db924cf7c 3029 }
wolfSSL 15:117db924cf7c 3030
wolfSSL 15:117db924cf7c 3031 /** Compare the value of a point with an other one
wolfSSL 15:117db924cf7c 3032 a The point to compare
wolfSSL 15:117db924cf7c 3033 b The other point to compare
wolfSSL 15:117db924cf7c 3034
wolfSSL 15:117db924cf7c 3035 return MP_EQ if equal, MP_LT/MP_GT if not, < 0 in case of error
wolfSSL 15:117db924cf7c 3036 */
wolfSSL 15:117db924cf7c 3037 int wc_ecc_cmp_point(ecc_point* a, ecc_point *b)
wolfSSL 15:117db924cf7c 3038 {
wolfSSL 15:117db924cf7c 3039 int ret;
wolfSSL 15:117db924cf7c 3040
wolfSSL 15:117db924cf7c 3041 /* prevents null arguments */
wolfSSL 15:117db924cf7c 3042 if (a == NULL || b == NULL)
wolfSSL 15:117db924cf7c 3043 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 3044
wolfSSL 15:117db924cf7c 3045 ret = mp_cmp(a->x, b->x);
wolfSSL 15:117db924cf7c 3046 if (ret != MP_EQ)
wolfSSL 15:117db924cf7c 3047 return ret;
wolfSSL 15:117db924cf7c 3048 ret = mp_cmp(a->y, b->y);
wolfSSL 15:117db924cf7c 3049 if (ret != MP_EQ)
wolfSSL 15:117db924cf7c 3050 return ret;
wolfSSL 15:117db924cf7c 3051 ret = mp_cmp(a->z, b->z);
wolfSSL 15:117db924cf7c 3052 if (ret != MP_EQ)
wolfSSL 15:117db924cf7c 3053 return ret;
wolfSSL 15:117db924cf7c 3054
wolfSSL 15:117db924cf7c 3055 return MP_EQ;
wolfSSL 15:117db924cf7c 3056 }
wolfSSL 15:117db924cf7c 3057
wolfSSL 15:117db924cf7c 3058
wolfSSL 15:117db924cf7c 3059 /** Returns whether an ECC idx is valid or not
wolfSSL 15:117db924cf7c 3060 n The idx number to check
wolfSSL 15:117db924cf7c 3061 return 1 if valid, 0 if not
wolfSSL 15:117db924cf7c 3062 */
wolfSSL 15:117db924cf7c 3063 int wc_ecc_is_valid_idx(int n)
wolfSSL 15:117db924cf7c 3064 {
wolfSSL 15:117db924cf7c 3065 int x;
wolfSSL 15:117db924cf7c 3066
wolfSSL 15:117db924cf7c 3067 for (x = 0; ecc_sets[x].size != 0; x++)
wolfSSL 15:117db924cf7c 3068 ;
wolfSSL 15:117db924cf7c 3069 /* -1 is a valid index --- indicating that the domain params
wolfSSL 15:117db924cf7c 3070 were supplied by the user */
wolfSSL 15:117db924cf7c 3071 if ((n >= ECC_CUSTOM_IDX) && (n < x)) {
wolfSSL 15:117db924cf7c 3072 return 1;
wolfSSL 15:117db924cf7c 3073 }
wolfSSL 15:117db924cf7c 3074
wolfSSL 15:117db924cf7c 3075 return 0;
wolfSSL 15:117db924cf7c 3076 }
wolfSSL 15:117db924cf7c 3077
wolfSSL 15:117db924cf7c 3078 int wc_ecc_get_curve_idx(int curve_id)
wolfSSL 15:117db924cf7c 3079 {
wolfSSL 15:117db924cf7c 3080 int curve_idx;
wolfSSL 15:117db924cf7c 3081 for (curve_idx = 0; ecc_sets[curve_idx].size != 0; curve_idx++) {
wolfSSL 15:117db924cf7c 3082 if (curve_id == ecc_sets[curve_idx].id)
wolfSSL 15:117db924cf7c 3083 break;
wolfSSL 15:117db924cf7c 3084 }
wolfSSL 15:117db924cf7c 3085 if (ecc_sets[curve_idx].size == 0) {
wolfSSL 15:117db924cf7c 3086 return ECC_CURVE_INVALID;
wolfSSL 15:117db924cf7c 3087 }
wolfSSL 15:117db924cf7c 3088 return curve_idx;
wolfSSL 15:117db924cf7c 3089 }
wolfSSL 15:117db924cf7c 3090
wolfSSL 15:117db924cf7c 3091 int wc_ecc_get_curve_id(int curve_idx)
wolfSSL 15:117db924cf7c 3092 {
wolfSSL 15:117db924cf7c 3093 if (wc_ecc_is_valid_idx(curve_idx)) {
wolfSSL 15:117db924cf7c 3094 return ecc_sets[curve_idx].id;
wolfSSL 15:117db924cf7c 3095 }
wolfSSL 15:117db924cf7c 3096 return ECC_CURVE_INVALID;
wolfSSL 15:117db924cf7c 3097 }
wolfSSL 15:117db924cf7c 3098
wolfSSL 15:117db924cf7c 3099 /* Returns the curve size that corresponds to a given ecc_curve_id identifier
wolfSSL 15:117db924cf7c 3100 *
wolfSSL 15:117db924cf7c 3101 * id curve id, from ecc_curve_id enum in ecc.h
wolfSSL 15:117db924cf7c 3102 * return curve size, from ecc_sets[] on success, negative on error
wolfSSL 15:117db924cf7c 3103 */
wolfSSL 15:117db924cf7c 3104 int wc_ecc_get_curve_size_from_id(int curve_id)
wolfSSL 15:117db924cf7c 3105 {
wolfSSL 15:117db924cf7c 3106 int curve_idx = wc_ecc_get_curve_idx(curve_id);
wolfSSL 15:117db924cf7c 3107 if (curve_idx == ECC_CURVE_INVALID)
wolfSSL 15:117db924cf7c 3108 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 3109 return ecc_sets[curve_idx].size;
wolfSSL 15:117db924cf7c 3110 }
wolfSSL 15:117db924cf7c 3111
wolfSSL 15:117db924cf7c 3112 /* Returns the curve index that corresponds to a given curve name in
wolfSSL 15:117db924cf7c 3113 * ecc_sets[] of ecc.c
wolfSSL 15:117db924cf7c 3114 *
wolfSSL 15:117db924cf7c 3115 * name curve name, from ecc_sets[].name in ecc.c
wolfSSL 15:117db924cf7c 3116 * return curve index in ecc_sets[] on success, negative on error
wolfSSL 15:117db924cf7c 3117 */
wolfSSL 15:117db924cf7c 3118 int wc_ecc_get_curve_idx_from_name(const char* curveName)
wolfSSL 15:117db924cf7c 3119 {
wolfSSL 15:117db924cf7c 3120 int curve_idx;
wolfSSL 15:117db924cf7c 3121 word32 len;
wolfSSL 15:117db924cf7c 3122
wolfSSL 15:117db924cf7c 3123 if (curveName == NULL)
wolfSSL 15:117db924cf7c 3124 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 3125
wolfSSL 15:117db924cf7c 3126 len = (word32)XSTRLEN(curveName);
wolfSSL 15:117db924cf7c 3127
wolfSSL 15:117db924cf7c 3128 for (curve_idx = 0; ecc_sets[curve_idx].size != 0; curve_idx++) {
wolfSSL 15:117db924cf7c 3129 if (ecc_sets[curve_idx].name &&
wolfSSL 15:117db924cf7c 3130 XSTRNCASECMP(ecc_sets[curve_idx].name, curveName, len) == 0) {
wolfSSL 15:117db924cf7c 3131 break;
wolfSSL 15:117db924cf7c 3132 }
wolfSSL 15:117db924cf7c 3133 }
wolfSSL 15:117db924cf7c 3134 if (ecc_sets[curve_idx].size == 0) {
wolfSSL 15:117db924cf7c 3135 WOLFSSL_MSG("ecc_set curve name not found");
wolfSSL 15:117db924cf7c 3136 return ECC_CURVE_INVALID;
wolfSSL 15:117db924cf7c 3137 }
wolfSSL 15:117db924cf7c 3138 return curve_idx;
wolfSSL 15:117db924cf7c 3139 }
wolfSSL 15:117db924cf7c 3140
wolfSSL 15:117db924cf7c 3141 /* Returns the curve size that corresponds to a given curve name,
wolfSSL 15:117db924cf7c 3142 * as listed in ecc_sets[] of ecc.c.
wolfSSL 15:117db924cf7c 3143 *
wolfSSL 15:117db924cf7c 3144 * name curve name, from ecc_sets[].name in ecc.c
wolfSSL 15:117db924cf7c 3145 * return curve size, from ecc_sets[] on success, negative on error
wolfSSL 15:117db924cf7c 3146 */
wolfSSL 15:117db924cf7c 3147 int wc_ecc_get_curve_size_from_name(const char* curveName)
wolfSSL 15:117db924cf7c 3148 {
wolfSSL 15:117db924cf7c 3149 int curve_idx;
wolfSSL 15:117db924cf7c 3150
wolfSSL 15:117db924cf7c 3151 if (curveName == NULL)
wolfSSL 15:117db924cf7c 3152 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 3153
wolfSSL 15:117db924cf7c 3154 curve_idx = wc_ecc_get_curve_idx_from_name(curveName);
wolfSSL 15:117db924cf7c 3155 if (curve_idx < 0)
wolfSSL 15:117db924cf7c 3156 return curve_idx;
wolfSSL 15:117db924cf7c 3157
wolfSSL 15:117db924cf7c 3158 return ecc_sets[curve_idx].size;
wolfSSL 15:117db924cf7c 3159 }
wolfSSL 15:117db924cf7c 3160
wolfSSL 15:117db924cf7c 3161 /* Returns the curve id that corresponds to a given curve name,
wolfSSL 15:117db924cf7c 3162 * as listed in ecc_sets[] of ecc.c.
wolfSSL 15:117db924cf7c 3163 *
wolfSSL 15:117db924cf7c 3164 * name curve name, from ecc_sets[].name in ecc.c
wolfSSL 15:117db924cf7c 3165 * return curve id, from ecc_sets[] on success, negative on error
wolfSSL 15:117db924cf7c 3166 */
wolfSSL 15:117db924cf7c 3167 int wc_ecc_get_curve_id_from_name(const char* curveName)
wolfSSL 15:117db924cf7c 3168 {
wolfSSL 15:117db924cf7c 3169 int curve_idx;
wolfSSL 15:117db924cf7c 3170
wolfSSL 15:117db924cf7c 3171 if (curveName == NULL)
wolfSSL 15:117db924cf7c 3172 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 3173
wolfSSL 15:117db924cf7c 3174 curve_idx = wc_ecc_get_curve_idx_from_name(curveName);
wolfSSL 15:117db924cf7c 3175 if (curve_idx < 0)
wolfSSL 15:117db924cf7c 3176 return curve_idx;
wolfSSL 15:117db924cf7c 3177
wolfSSL 15:117db924cf7c 3178 return ecc_sets[curve_idx].id;
wolfSSL 15:117db924cf7c 3179 }
wolfSSL 15:117db924cf7c 3180
wolfSSL 15:117db924cf7c 3181 /* Compares a curve parameter (hex, from ecc_sets[]) to given input
wolfSSL 15:117db924cf7c 3182 * parameter (byte array) for equality.
wolfSSL 15:117db924cf7c 3183 *
wolfSSL 15:117db924cf7c 3184 * Returns MP_EQ on success, negative on error */
wolfSSL 15:117db924cf7c 3185 static int wc_ecc_cmp_param(const char* curveParam,
wolfSSL 15:117db924cf7c 3186 const byte* param, word32 paramSz)
wolfSSL 15:117db924cf7c 3187 {
wolfSSL 15:117db924cf7c 3188 int err = MP_OKAY;
wolfSSL 15:117db924cf7c 3189 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 3190 mp_int* a = NULL;
wolfSSL 15:117db924cf7c 3191 mp_int* b = NULL;
wolfSSL 15:117db924cf7c 3192 #else
wolfSSL 15:117db924cf7c 3193 mp_int a[1], b[1];
wolfSSL 15:117db924cf7c 3194 #endif
wolfSSL 15:117db924cf7c 3195
wolfSSL 15:117db924cf7c 3196 if (param == NULL || curveParam == NULL)
wolfSSL 15:117db924cf7c 3197 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 3198
wolfSSL 15:117db924cf7c 3199 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 3200 a = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 3201 if (a == NULL)
wolfSSL 15:117db924cf7c 3202 return MEMORY_E;
wolfSSL 15:117db924cf7c 3203 b = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 3204 if (b == NULL) {
wolfSSL 15:117db924cf7c 3205 XFREE(a, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 3206 return MEMORY_E;
wolfSSL 15:117db924cf7c 3207 }
wolfSSL 15:117db924cf7c 3208 #endif
wolfSSL 15:117db924cf7c 3209
wolfSSL 15:117db924cf7c 3210 if ((err = mp_init_multi(a, b, NULL, NULL, NULL, NULL)) != MP_OKAY)
wolfSSL 15:117db924cf7c 3211 return err;
wolfSSL 15:117db924cf7c 3212
wolfSSL 15:117db924cf7c 3213 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3214 err = mp_read_unsigned_bin(a, param, paramSz);
wolfSSL 15:117db924cf7c 3215
wolfSSL 15:117db924cf7c 3216 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3217 err = mp_read_radix(b, curveParam, MP_RADIX_HEX);
wolfSSL 15:117db924cf7c 3218
wolfSSL 15:117db924cf7c 3219 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 3220 if (mp_cmp(a, b) != MP_EQ) {
wolfSSL 15:117db924cf7c 3221 err = -1;
wolfSSL 15:117db924cf7c 3222 } else {
wolfSSL 15:117db924cf7c 3223 err = MP_EQ;
wolfSSL 15:117db924cf7c 3224 }
wolfSSL 15:117db924cf7c 3225 }
wolfSSL 15:117db924cf7c 3226
wolfSSL 15:117db924cf7c 3227 mp_clear(a);
wolfSSL 15:117db924cf7c 3228 mp_clear(b);
wolfSSL 15:117db924cf7c 3229 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 3230 XFREE(b, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 3231 XFREE(a, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 3232 #endif
wolfSSL 15:117db924cf7c 3233
wolfSSL 15:117db924cf7c 3234 return err;
wolfSSL 15:117db924cf7c 3235 }
wolfSSL 15:117db924cf7c 3236
wolfSSL 15:117db924cf7c 3237 /* Returns the curve id in ecc_sets[] that corresponds to a given set of
wolfSSL 15:117db924cf7c 3238 * curve parameters.
wolfSSL 15:117db924cf7c 3239 *
wolfSSL 15:117db924cf7c 3240 * fieldSize the field size in bits
wolfSSL 15:117db924cf7c 3241 * prime prime of the finite field
wolfSSL 15:117db924cf7c 3242 * primeSz size of prime in octets
wolfSSL 15:117db924cf7c 3243 * Af first coefficient a of the curve
wolfSSL 15:117db924cf7c 3244 * AfSz size of Af in octets
wolfSSL 15:117db924cf7c 3245 * Bf second coefficient b of the curve
wolfSSL 15:117db924cf7c 3246 * BfSz size of Bf in octets
wolfSSL 15:117db924cf7c 3247 * order curve order
wolfSSL 15:117db924cf7c 3248 * orderSz size of curve in octets
wolfSSL 15:117db924cf7c 3249 * Gx affine x coordinate of base point
wolfSSL 15:117db924cf7c 3250 * GxSz size of Gx in octets
wolfSSL 15:117db924cf7c 3251 * Gy affine y coordinate of base point
wolfSSL 15:117db924cf7c 3252 * GySz size of Gy in octets
wolfSSL 15:117db924cf7c 3253 * cofactor curve cofactor
wolfSSL 15:117db924cf7c 3254 *
wolfSSL 15:117db924cf7c 3255 * return curve id, from ecc_sets[] on success, negative on error
wolfSSL 15:117db924cf7c 3256 */
wolfSSL 15:117db924cf7c 3257 int wc_ecc_get_curve_id_from_params(int fieldSize,
wolfSSL 15:117db924cf7c 3258 const byte* prime, word32 primeSz, const byte* Af, word32 AfSz,
wolfSSL 15:117db924cf7c 3259 const byte* Bf, word32 BfSz, const byte* order, word32 orderSz,
wolfSSL 15:117db924cf7c 3260 const byte* Gx, word32 GxSz, const byte* Gy, word32 GySz, int cofactor)
wolfSSL 15:117db924cf7c 3261 {
wolfSSL 15:117db924cf7c 3262 int idx;
wolfSSL 15:117db924cf7c 3263 int curveSz;
wolfSSL 15:117db924cf7c 3264
wolfSSL 15:117db924cf7c 3265 if (prime == NULL || Af == NULL || Bf == NULL || order == NULL ||
wolfSSL 15:117db924cf7c 3266 Gx == NULL || Gy == NULL)
wolfSSL 15:117db924cf7c 3267 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 3268
wolfSSL 15:117db924cf7c 3269 curveSz = (fieldSize + 1) / 8; /* round up */
wolfSSL 15:117db924cf7c 3270
wolfSSL 15:117db924cf7c 3271 for (idx = 0; ecc_sets[idx].size != 0; idx++) {
wolfSSL 15:117db924cf7c 3272 if (curveSz == ecc_sets[idx].size) {
wolfSSL 15:117db924cf7c 3273 if ((wc_ecc_cmp_param(ecc_sets[idx].prime, prime,
wolfSSL 15:117db924cf7c 3274 primeSz) == MP_EQ) &&
wolfSSL 15:117db924cf7c 3275 (wc_ecc_cmp_param(ecc_sets[idx].Af, Af, AfSz) == MP_EQ) &&
wolfSSL 15:117db924cf7c 3276 (wc_ecc_cmp_param(ecc_sets[idx].Bf, Bf, BfSz) == MP_EQ) &&
wolfSSL 15:117db924cf7c 3277 (wc_ecc_cmp_param(ecc_sets[idx].order, order,
wolfSSL 15:117db924cf7c 3278 orderSz) == MP_EQ) &&
wolfSSL 15:117db924cf7c 3279 (wc_ecc_cmp_param(ecc_sets[idx].Gx, Gx, GxSz) == MP_EQ) &&
wolfSSL 15:117db924cf7c 3280 (wc_ecc_cmp_param(ecc_sets[idx].Gy, Gy, GySz) == MP_EQ) &&
wolfSSL 15:117db924cf7c 3281 (cofactor == ecc_sets[idx].cofactor)) {
wolfSSL 15:117db924cf7c 3282 break;
wolfSSL 15:117db924cf7c 3283 }
wolfSSL 15:117db924cf7c 3284 }
wolfSSL 15:117db924cf7c 3285 }
wolfSSL 15:117db924cf7c 3286
wolfSSL 15:117db924cf7c 3287 if (ecc_sets[idx].size == 0)
wolfSSL 15:117db924cf7c 3288 return ECC_CURVE_INVALID;
wolfSSL 15:117db924cf7c 3289
wolfSSL 15:117db924cf7c 3290 return ecc_sets[idx].id;
wolfSSL 15:117db924cf7c 3291 }
wolfSSL 15:117db924cf7c 3292
wolfSSL 15:117db924cf7c 3293
wolfSSL 15:117db924cf7c 3294 #ifdef WOLFSSL_ASYNC_CRYPT
wolfSSL 15:117db924cf7c 3295 static WC_INLINE int wc_ecc_alloc_mpint(ecc_key* key, mp_int** mp)
wolfSSL 15:117db924cf7c 3296 {
wolfSSL 15:117db924cf7c 3297 if (key == NULL || mp == NULL)
wolfSSL 15:117db924cf7c 3298 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 3299 if (*mp == NULL) {
wolfSSL 15:117db924cf7c 3300 *mp = (mp_int*)XMALLOC(sizeof(mp_int), key->heap, DYNAMIC_TYPE_BIGINT);
wolfSSL 15:117db924cf7c 3301 if (*mp == NULL) {
wolfSSL 15:117db924cf7c 3302 return MEMORY_E;
wolfSSL 15:117db924cf7c 3303 }
wolfSSL 15:117db924cf7c 3304 XMEMSET(*mp, 0, sizeof(mp_int));
wolfSSL 15:117db924cf7c 3305 }
wolfSSL 15:117db924cf7c 3306 return 0;
wolfSSL 15:117db924cf7c 3307 }
wolfSSL 15:117db924cf7c 3308 static WC_INLINE void wc_ecc_free_mpint(ecc_key* key, mp_int** mp)
wolfSSL 15:117db924cf7c 3309 {
wolfSSL 15:117db924cf7c 3310 if (key && mp && *mp) {
wolfSSL 15:117db924cf7c 3311 mp_clear(*mp);
wolfSSL 15:117db924cf7c 3312 XFREE(*mp, key->heap, DYNAMIC_TYPE_BIGINT);
wolfSSL 15:117db924cf7c 3313 *mp = NULL;
wolfSSL 15:117db924cf7c 3314 }
wolfSSL 15:117db924cf7c 3315 }
wolfSSL 15:117db924cf7c 3316
wolfSSL 15:117db924cf7c 3317 static int wc_ecc_alloc_async(ecc_key* key)
wolfSSL 15:117db924cf7c 3318 {
wolfSSL 15:117db924cf7c 3319 int err = wc_ecc_alloc_mpint(key, &key->r);
wolfSSL 15:117db924cf7c 3320 if (err == 0)
wolfSSL 15:117db924cf7c 3321 err = wc_ecc_alloc_mpint(key, &key->s);
wolfSSL 15:117db924cf7c 3322 return err;
wolfSSL 15:117db924cf7c 3323 }
wolfSSL 15:117db924cf7c 3324
wolfSSL 15:117db924cf7c 3325 static void wc_ecc_free_async(ecc_key* key)
wolfSSL 15:117db924cf7c 3326 {
wolfSSL 15:117db924cf7c 3327 wc_ecc_free_mpint(key, &key->r);
wolfSSL 15:117db924cf7c 3328 wc_ecc_free_mpint(key, &key->s);
wolfSSL 15:117db924cf7c 3329 #ifdef HAVE_CAVIUM_V
wolfSSL 15:117db924cf7c 3330 wc_ecc_free_mpint(key, &key->e);
wolfSSL 15:117db924cf7c 3331 wc_ecc_free_mpint(key, &key->signK);
wolfSSL 15:117db924cf7c 3332 #endif /* HAVE_CAVIUM_V */
wolfSSL 15:117db924cf7c 3333 }
wolfSSL 15:117db924cf7c 3334 #endif /* WOLFSSL_ASYNC_CRYPT */
wolfSSL 15:117db924cf7c 3335
wolfSSL 15:117db924cf7c 3336
wolfSSL 15:117db924cf7c 3337 #ifdef HAVE_ECC_DHE
wolfSSL 15:117db924cf7c 3338 /**
wolfSSL 15:117db924cf7c 3339 Create an ECC shared secret between two keys
wolfSSL 15:117db924cf7c 3340 private_key The private ECC key (heap hint based off of private key)
wolfSSL 15:117db924cf7c 3341 public_key The public key
wolfSSL 15:117db924cf7c 3342 out [out] Destination of the shared secret
wolfSSL 15:117db924cf7c 3343 Conforms to EC-DH from ANSI X9.63
wolfSSL 15:117db924cf7c 3344 outlen [in/out] The max size and resulting size of the shared secret
wolfSSL 15:117db924cf7c 3345 return MP_OKAY if successful
wolfSSL 15:117db924cf7c 3346 */
wolfSSL 15:117db924cf7c 3347 int wc_ecc_shared_secret(ecc_key* private_key, ecc_key* public_key, byte* out,
wolfSSL 15:117db924cf7c 3348 word32* outlen)
wolfSSL 15:117db924cf7c 3349 {
wolfSSL 15:117db924cf7c 3350 int err;
wolfSSL 15:117db924cf7c 3351
wolfSSL 15:117db924cf7c 3352 if (private_key == NULL || public_key == NULL || out == NULL ||
wolfSSL 15:117db924cf7c 3353 outlen == NULL) {
wolfSSL 15:117db924cf7c 3354 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 3355 }
wolfSSL 15:117db924cf7c 3356
wolfSSL 15:117db924cf7c 3357 #ifdef WOLF_CRYPTO_DEV
wolfSSL 15:117db924cf7c 3358 if (private_key->devId != INVALID_DEVID) {
wolfSSL 15:117db924cf7c 3359 err = wc_CryptoDev_Ecdh(private_key, public_key, out, outlen);
wolfSSL 15:117db924cf7c 3360 if (err != NOT_COMPILED_IN)
wolfSSL 15:117db924cf7c 3361 return err;
wolfSSL 15:117db924cf7c 3362 }
wolfSSL 15:117db924cf7c 3363 #endif
wolfSSL 15:117db924cf7c 3364
wolfSSL 15:117db924cf7c 3365 /* type valid? */
wolfSSL 15:117db924cf7c 3366 if (private_key->type != ECC_PRIVATEKEY &&
wolfSSL 15:117db924cf7c 3367 private_key->type != ECC_PRIVATEKEY_ONLY) {
wolfSSL 15:117db924cf7c 3368 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 3369 }
wolfSSL 15:117db924cf7c 3370
wolfSSL 15:117db924cf7c 3371 /* Verify domain params supplied */
wolfSSL 15:117db924cf7c 3372 if (wc_ecc_is_valid_idx(private_key->idx) == 0 ||
wolfSSL 15:117db924cf7c 3373 wc_ecc_is_valid_idx(public_key->idx) == 0) {
wolfSSL 15:117db924cf7c 3374 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 3375 }
wolfSSL 15:117db924cf7c 3376
wolfSSL 15:117db924cf7c 3377 /* Verify curve id matches */
wolfSSL 15:117db924cf7c 3378 if (private_key->dp->id != public_key->dp->id) {
wolfSSL 15:117db924cf7c 3379 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 3380 }
wolfSSL 15:117db924cf7c 3381
wolfSSL 15:117db924cf7c 3382 #ifdef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 3383 err = atcatls_ecdh(private_key->slot, public_key->pubkey_raw, out);
wolfSSL 15:117db924cf7c 3384 if (err != ATCA_SUCCESS) {
wolfSSL 15:117db924cf7c 3385 err = BAD_COND_E;
wolfSSL 15:117db924cf7c 3386 }
wolfSSL 15:117db924cf7c 3387 *outlen = private_key->dp->size;
wolfSSL 15:117db924cf7c 3388 #else
wolfSSL 15:117db924cf7c 3389 err = wc_ecc_shared_secret_ex(private_key, &public_key->pubkey, out, outlen);
wolfSSL 15:117db924cf7c 3390 #endif /* WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 3391
wolfSSL 15:117db924cf7c 3392 return err;
wolfSSL 15:117db924cf7c 3393 }
wolfSSL 15:117db924cf7c 3394
wolfSSL 15:117db924cf7c 3395
wolfSSL 15:117db924cf7c 3396 #ifndef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 3397
wolfSSL 15:117db924cf7c 3398 static int wc_ecc_shared_secret_gen_sync(ecc_key* private_key, ecc_point* point,
wolfSSL 15:117db924cf7c 3399 byte* out, word32* outlen, ecc_curve_spec* curve)
wolfSSL 15:117db924cf7c 3400 {
wolfSSL 15:117db924cf7c 3401 int err;
wolfSSL 15:117db924cf7c 3402 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 3403 ecc_point* result = NULL;
wolfSSL 15:117db924cf7c 3404 word32 x = 0;
wolfSSL 15:117db924cf7c 3405 #endif
wolfSSL 15:117db924cf7c 3406 mp_int* k = &private_key->k;
wolfSSL 15:117db924cf7c 3407 #ifdef HAVE_ECC_CDH
wolfSSL 15:117db924cf7c 3408 mp_int k_lcl;
wolfSSL 15:117db924cf7c 3409
wolfSSL 15:117db924cf7c 3410 /* if cofactor flag has been set */
wolfSSL 15:117db924cf7c 3411 if (private_key->flags & WC_ECC_FLAG_COFACTOR) {
wolfSSL 15:117db924cf7c 3412 mp_digit cofactor = (mp_digit)private_key->dp->cofactor;
wolfSSL 15:117db924cf7c 3413 /* only perform cofactor calc if not equal to 1 */
wolfSSL 15:117db924cf7c 3414 if (cofactor != 1) {
wolfSSL 15:117db924cf7c 3415 k = &k_lcl;
wolfSSL 15:117db924cf7c 3416 if (mp_init(k) != MP_OKAY)
wolfSSL 15:117db924cf7c 3417 return MEMORY_E;
wolfSSL 15:117db924cf7c 3418 /* multiply cofactor times private key "k" */
wolfSSL 15:117db924cf7c 3419 err = mp_mul_d(&private_key->k, cofactor, k);
wolfSSL 15:117db924cf7c 3420 if (err != MP_OKAY) {
wolfSSL 15:117db924cf7c 3421 mp_clear(k);
wolfSSL 15:117db924cf7c 3422 return err;
wolfSSL 15:117db924cf7c 3423 }
wolfSSL 15:117db924cf7c 3424 }
wolfSSL 15:117db924cf7c 3425 }
wolfSSL 15:117db924cf7c 3426 #endif
wolfSSL 15:117db924cf7c 3427
wolfSSL 15:117db924cf7c 3428 #ifdef WOLFSSL_HAVE_SP_ECC
wolfSSL 15:117db924cf7c 3429 #ifndef WOLFSSL_SP_NO_256
wolfSSL 15:117db924cf7c 3430 if (private_key->idx != ECC_CUSTOM_IDX &&
wolfSSL 15:117db924cf7c 3431 ecc_sets[private_key->idx].id == ECC_SECP256R1) {
wolfSSL 15:117db924cf7c 3432 err = sp_ecc_secret_gen_256(k, point, out, outlen, private_key->heap);
wolfSSL 15:117db924cf7c 3433 }
wolfSSL 15:117db924cf7c 3434 else
wolfSSL 15:117db924cf7c 3435 #endif
wolfSSL 15:117db924cf7c 3436 #endif
wolfSSL 15:117db924cf7c 3437 #ifdef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 3438 {
wolfSSL 15:117db924cf7c 3439 err = WC_KEY_SIZE_E;
wolfSSL 15:117db924cf7c 3440
wolfSSL 15:117db924cf7c 3441 (void)curve;
wolfSSL 15:117db924cf7c 3442 }
wolfSSL 15:117db924cf7c 3443 #else
wolfSSL 15:117db924cf7c 3444 {
wolfSSL 15:117db924cf7c 3445 /* make new point */
wolfSSL 15:117db924cf7c 3446 result = wc_ecc_new_point_h(private_key->heap);
wolfSSL 15:117db924cf7c 3447 if (result == NULL) {
wolfSSL 15:117db924cf7c 3448 #ifdef HAVE_ECC_CDH
wolfSSL 15:117db924cf7c 3449 if (k == &k_lcl)
wolfSSL 15:117db924cf7c 3450 mp_clear(k);
wolfSSL 15:117db924cf7c 3451 #endif
wolfSSL 15:117db924cf7c 3452 return MEMORY_E;
wolfSSL 15:117db924cf7c 3453 }
wolfSSL 15:117db924cf7c 3454
wolfSSL 15:117db924cf7c 3455 err = wc_ecc_mulmod_ex(k, point, result, curve->Af, curve->prime, 1,
wolfSSL 15:117db924cf7c 3456 private_key->heap);
wolfSSL 15:117db924cf7c 3457 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 3458 x = mp_unsigned_bin_size(curve->prime);
wolfSSL 15:117db924cf7c 3459 if (*outlen < x) {
wolfSSL 15:117db924cf7c 3460 err = BUFFER_E;
wolfSSL 15:117db924cf7c 3461 }
wolfSSL 15:117db924cf7c 3462 }
wolfSSL 15:117db924cf7c 3463
wolfSSL 15:117db924cf7c 3464 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 3465 XMEMSET(out, 0, x);
wolfSSL 15:117db924cf7c 3466 err = mp_to_unsigned_bin(result->x,out +
wolfSSL 15:117db924cf7c 3467 (x - mp_unsigned_bin_size(result->x)));
wolfSSL 15:117db924cf7c 3468 }
wolfSSL 15:117db924cf7c 3469 *outlen = x;
wolfSSL 15:117db924cf7c 3470
wolfSSL 15:117db924cf7c 3471 wc_ecc_del_point_h(result, private_key->heap);
wolfSSL 15:117db924cf7c 3472 }
wolfSSL 15:117db924cf7c 3473 #endif
wolfSSL 15:117db924cf7c 3474 #ifdef HAVE_ECC_CDH
wolfSSL 15:117db924cf7c 3475 if (k == &k_lcl)
wolfSSL 15:117db924cf7c 3476 mp_clear(k);
wolfSSL 15:117db924cf7c 3477 #endif
wolfSSL 15:117db924cf7c 3478
wolfSSL 15:117db924cf7c 3479 return err;
wolfSSL 15:117db924cf7c 3480 }
wolfSSL 15:117db924cf7c 3481
wolfSSL 15:117db924cf7c 3482 #if defined(WOLFSSL_ASYNC_CRYPT) && defined(WC_ASYNC_ENABLE_ECC)
wolfSSL 15:117db924cf7c 3483 static int wc_ecc_shared_secret_gen_async(ecc_key* private_key,
wolfSSL 15:117db924cf7c 3484 ecc_point* point, byte* out, word32 *outlen,
wolfSSL 15:117db924cf7c 3485 ecc_curve_spec* curve)
wolfSSL 15:117db924cf7c 3486 {
wolfSSL 15:117db924cf7c 3487 int err;
wolfSSL 15:117db924cf7c 3488
wolfSSL 15:117db924cf7c 3489 #if defined(HAVE_CAVIUM_V) || defined(HAVE_INTEL_QA)
wolfSSL 15:117db924cf7c 3490 #ifdef HAVE_CAVIUM_V
wolfSSL 15:117db924cf7c 3491 /* verify the curve is supported by hardware */
wolfSSL 15:117db924cf7c 3492 if (NitroxEccIsCurveSupported(private_key))
wolfSSL 15:117db924cf7c 3493 #endif
wolfSSL 15:117db924cf7c 3494 {
wolfSSL 15:117db924cf7c 3495 word32 keySz = private_key->dp->size;
wolfSSL 15:117db924cf7c 3496
wolfSSL 15:117db924cf7c 3497 /* sync public key x/y */
wolfSSL 15:117db924cf7c 3498 err = wc_mp_to_bigint_sz(&private_key->k, &private_key->k.raw, keySz);
wolfSSL 15:117db924cf7c 3499 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3500 err = wc_mp_to_bigint_sz(point->x, &point->x->raw, keySz);
wolfSSL 15:117db924cf7c 3501 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3502 err = wc_mp_to_bigint_sz(point->y, &point->y->raw, keySz);
wolfSSL 15:117db924cf7c 3503 #ifdef HAVE_CAVIUM_V
wolfSSL 15:117db924cf7c 3504 /* allocate buffer for output */
wolfSSL 15:117db924cf7c 3505 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3506 err = wc_ecc_alloc_mpint(private_key, &private_key->e);
wolfSSL 15:117db924cf7c 3507 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3508 err = wc_bigint_alloc(&private_key->e->raw,
wolfSSL 15:117db924cf7c 3509 NitroxEccGetSize(private_key)*2);
wolfSSL 15:117db924cf7c 3510 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3511 err = NitroxEcdh(private_key,
wolfSSL 15:117db924cf7c 3512 &private_key->k.raw, &point->x->raw, &point->y->raw,
wolfSSL 15:117db924cf7c 3513 private_key->e->raw.buf, &private_key->e->raw.len,
wolfSSL 15:117db924cf7c 3514 &curve->prime->raw);
wolfSSL 15:117db924cf7c 3515 #else
wolfSSL 15:117db924cf7c 3516 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3517 err = wc_ecc_curve_load(private_key->dp, &curve, ECC_CURVE_FIELD_BF);
wolfSSL 15:117db924cf7c 3518 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3519 err = IntelQaEcdh(&private_key->asyncDev,
wolfSSL 15:117db924cf7c 3520 &private_key->k.raw, &point->x->raw, &point->y->raw,
wolfSSL 15:117db924cf7c 3521 out, outlen,
wolfSSL 15:117db924cf7c 3522 &curve->Af->raw, &curve->Bf->raw, &curve->prime->raw,
wolfSSL 15:117db924cf7c 3523 private_key->dp->cofactor);
wolfSSL 15:117db924cf7c 3524 #endif
wolfSSL 15:117db924cf7c 3525 return err;
wolfSSL 15:117db924cf7c 3526 }
wolfSSL 15:117db924cf7c 3527 #elif defined(WOLFSSL_ASYNC_CRYPT_TEST)
wolfSSL 15:117db924cf7c 3528 if (wc_AsyncTestInit(&private_key->asyncDev, ASYNC_TEST_ECC_SHARED_SEC)) {
wolfSSL 15:117db924cf7c 3529 WC_ASYNC_TEST* testDev = &private_key->asyncDev.test;
wolfSSL 15:117db924cf7c 3530 testDev->eccSharedSec.private_key = private_key;
wolfSSL 15:117db924cf7c 3531 testDev->eccSharedSec.public_point = point;
wolfSSL 15:117db924cf7c 3532 testDev->eccSharedSec.out = out;
wolfSSL 15:117db924cf7c 3533 testDev->eccSharedSec.outLen = outlen;
wolfSSL 15:117db924cf7c 3534 return WC_PENDING_E;
wolfSSL 15:117db924cf7c 3535 }
wolfSSL 15:117db924cf7c 3536 #endif
wolfSSL 15:117db924cf7c 3537
wolfSSL 15:117db924cf7c 3538 /* use sync in other cases */
wolfSSL 15:117db924cf7c 3539 err = wc_ecc_shared_secret_gen_sync(private_key, point, out, outlen, curve);
wolfSSL 15:117db924cf7c 3540
wolfSSL 15:117db924cf7c 3541 return err;
wolfSSL 15:117db924cf7c 3542 }
wolfSSL 15:117db924cf7c 3543 #endif /* WOLFSSL_ASYNC_CRYPT */
wolfSSL 15:117db924cf7c 3544
wolfSSL 15:117db924cf7c 3545 int wc_ecc_shared_secret_gen(ecc_key* private_key, ecc_point* point,
wolfSSL 15:117db924cf7c 3546 byte* out, word32 *outlen)
wolfSSL 15:117db924cf7c 3547 {
wolfSSL 15:117db924cf7c 3548 int err;
wolfSSL 15:117db924cf7c 3549 DECLARE_CURVE_SPECS(curve, 2);
wolfSSL 15:117db924cf7c 3550
wolfSSL 15:117db924cf7c 3551 if (private_key == NULL || point == NULL || out == NULL ||
wolfSSL 15:117db924cf7c 3552 outlen == NULL) {
wolfSSL 15:117db924cf7c 3553 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 3554 }
wolfSSL 15:117db924cf7c 3555
wolfSSL 15:117db924cf7c 3556 ALLOC_CURVE_SPECS(2);
wolfSSL 15:117db924cf7c 3557
wolfSSL 15:117db924cf7c 3558 /* load curve info */
wolfSSL 15:117db924cf7c 3559 err = wc_ecc_curve_load(private_key->dp, &curve,
wolfSSL 15:117db924cf7c 3560 (ECC_CURVE_FIELD_PRIME | ECC_CURVE_FIELD_AF));
wolfSSL 15:117db924cf7c 3561 if (err != MP_OKAY) {
wolfSSL 15:117db924cf7c 3562 FREE_CURVE_SPECS();
wolfSSL 15:117db924cf7c 3563 return err;
wolfSSL 15:117db924cf7c 3564 }
wolfSSL 15:117db924cf7c 3565
wolfSSL 15:117db924cf7c 3566 #if defined(WOLFSSL_ASYNC_CRYPT) && defined(WC_ASYNC_ENABLE_ECC)
wolfSSL 15:117db924cf7c 3567 if (private_key->asyncDev.marker == WOLFSSL_ASYNC_MARKER_ECC) {
wolfSSL 15:117db924cf7c 3568 err = wc_ecc_shared_secret_gen_async(private_key, point,
wolfSSL 15:117db924cf7c 3569 out, outlen, curve);
wolfSSL 15:117db924cf7c 3570 }
wolfSSL 15:117db924cf7c 3571 else
wolfSSL 15:117db924cf7c 3572 #endif
wolfSSL 15:117db924cf7c 3573 {
wolfSSL 15:117db924cf7c 3574 err = wc_ecc_shared_secret_gen_sync(private_key, point,
wolfSSL 15:117db924cf7c 3575 out, outlen, curve);
wolfSSL 15:117db924cf7c 3576 }
wolfSSL 15:117db924cf7c 3577
wolfSSL 15:117db924cf7c 3578 wc_ecc_curve_free(curve);
wolfSSL 15:117db924cf7c 3579 FREE_CURVE_SPECS();
wolfSSL 15:117db924cf7c 3580
wolfSSL 15:117db924cf7c 3581 return err;
wolfSSL 15:117db924cf7c 3582 }
wolfSSL 15:117db924cf7c 3583
wolfSSL 15:117db924cf7c 3584 /**
wolfSSL 15:117db924cf7c 3585 Create an ECC shared secret between private key and public point
wolfSSL 15:117db924cf7c 3586 private_key The private ECC key (heap hint based on private key)
wolfSSL 15:117db924cf7c 3587 point The point to use (public key)
wolfSSL 15:117db924cf7c 3588 out [out] Destination of the shared secret
wolfSSL 15:117db924cf7c 3589 Conforms to EC-DH from ANSI X9.63
wolfSSL 15:117db924cf7c 3590 outlen [in/out] The max size and resulting size of the shared secret
wolfSSL 15:117db924cf7c 3591 return MP_OKAY if successful
wolfSSL 15:117db924cf7c 3592 */
wolfSSL 15:117db924cf7c 3593 int wc_ecc_shared_secret_ex(ecc_key* private_key, ecc_point* point,
wolfSSL 15:117db924cf7c 3594 byte* out, word32 *outlen)
wolfSSL 15:117db924cf7c 3595 {
wolfSSL 15:117db924cf7c 3596 int err;
wolfSSL 15:117db924cf7c 3597
wolfSSL 15:117db924cf7c 3598 if (private_key == NULL || point == NULL || out == NULL ||
wolfSSL 15:117db924cf7c 3599 outlen == NULL) {
wolfSSL 15:117db924cf7c 3600 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 3601 }
wolfSSL 15:117db924cf7c 3602
wolfSSL 15:117db924cf7c 3603 /* type valid? */
wolfSSL 15:117db924cf7c 3604 if (private_key->type != ECC_PRIVATEKEY &&
wolfSSL 15:117db924cf7c 3605 private_key->type != ECC_PRIVATEKEY_ONLY) {
wolfSSL 15:117db924cf7c 3606 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 3607 }
wolfSSL 15:117db924cf7c 3608
wolfSSL 15:117db924cf7c 3609 /* Verify domain params supplied */
wolfSSL 15:117db924cf7c 3610 if (wc_ecc_is_valid_idx(private_key->idx) == 0)
wolfSSL 15:117db924cf7c 3611 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 3612
wolfSSL 15:117db924cf7c 3613 switch(private_key->state) {
wolfSSL 15:117db924cf7c 3614 case ECC_STATE_NONE:
wolfSSL 15:117db924cf7c 3615 case ECC_STATE_SHARED_SEC_GEN:
wolfSSL 15:117db924cf7c 3616 private_key->state = ECC_STATE_SHARED_SEC_GEN;
wolfSSL 15:117db924cf7c 3617
wolfSSL 15:117db924cf7c 3618 err = wc_ecc_shared_secret_gen(private_key, point, out, outlen);
wolfSSL 15:117db924cf7c 3619 if (err < 0) {
wolfSSL 15:117db924cf7c 3620 break;
wolfSSL 15:117db924cf7c 3621 }
wolfSSL 15:117db924cf7c 3622 FALL_THROUGH;
wolfSSL 15:117db924cf7c 3623
wolfSSL 15:117db924cf7c 3624 case ECC_STATE_SHARED_SEC_RES:
wolfSSL 15:117db924cf7c 3625 private_key->state = ECC_STATE_SHARED_SEC_RES;
wolfSSL 15:117db924cf7c 3626 #if defined(WOLFSSL_ASYNC_CRYPT) && defined(WC_ASYNC_ENABLE_ECC)
wolfSSL 15:117db924cf7c 3627 if (private_key->asyncDev.marker == WOLFSSL_ASYNC_MARKER_ECC) {
wolfSSL 15:117db924cf7c 3628 #ifdef HAVE_CAVIUM_V
wolfSSL 15:117db924cf7c 3629 /* verify the curve is supported by hardware */
wolfSSL 15:117db924cf7c 3630 if (NitroxEccIsCurveSupported(private_key)) {
wolfSSL 15:117db924cf7c 3631 /* copy output */
wolfSSL 15:117db924cf7c 3632 *outlen = private_key->dp->size;
wolfSSL 15:117db924cf7c 3633 XMEMCPY(out, private_key->e->raw.buf, *outlen);
wolfSSL 15:117db924cf7c 3634 }
wolfSSL 15:117db924cf7c 3635 #endif /* HAVE_CAVIUM_V */
wolfSSL 15:117db924cf7c 3636 }
wolfSSL 15:117db924cf7c 3637 #endif /* WOLFSSL_ASYNC_CRYPT */
wolfSSL 15:117db924cf7c 3638 err = 0;
wolfSSL 15:117db924cf7c 3639 break;
wolfSSL 15:117db924cf7c 3640
wolfSSL 15:117db924cf7c 3641 default:
wolfSSL 15:117db924cf7c 3642 err = BAD_STATE_E;
wolfSSL 15:117db924cf7c 3643 } /* switch */
wolfSSL 15:117db924cf7c 3644
wolfSSL 15:117db924cf7c 3645 /* if async pending then return and skip done cleanup below */
wolfSSL 15:117db924cf7c 3646 if (err == WC_PENDING_E) {
wolfSSL 15:117db924cf7c 3647 private_key->state++;
wolfSSL 15:117db924cf7c 3648 return err;
wolfSSL 15:117db924cf7c 3649 }
wolfSSL 15:117db924cf7c 3650
wolfSSL 15:117db924cf7c 3651 /* cleanup */
wolfSSL 15:117db924cf7c 3652 #ifdef WOLFSSL_ASYNC_CRYPT
wolfSSL 15:117db924cf7c 3653 wc_ecc_free_async(private_key);
wolfSSL 15:117db924cf7c 3654 #endif
wolfSSL 15:117db924cf7c 3655 private_key->state = ECC_STATE_NONE;
wolfSSL 15:117db924cf7c 3656
wolfSSL 15:117db924cf7c 3657 return err;
wolfSSL 15:117db924cf7c 3658 }
wolfSSL 15:117db924cf7c 3659 #endif /* !WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 3660 #endif /* HAVE_ECC_DHE */
wolfSSL 15:117db924cf7c 3661
wolfSSL 15:117db924cf7c 3662
wolfSSL 15:117db924cf7c 3663 #ifndef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 3664 /* return 1 if point is at infinity, 0 if not, < 0 on error */
wolfSSL 15:117db924cf7c 3665 int wc_ecc_point_is_at_infinity(ecc_point* p)
wolfSSL 15:117db924cf7c 3666 {
wolfSSL 15:117db924cf7c 3667 if (p == NULL)
wolfSSL 15:117db924cf7c 3668 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 3669
wolfSSL 15:117db924cf7c 3670 if (get_digit_count(p->x) == 0 && get_digit_count(p->y) == 0)
wolfSSL 15:117db924cf7c 3671 return 1;
wolfSSL 15:117db924cf7c 3672
wolfSSL 15:117db924cf7c 3673 return 0;
wolfSSL 15:117db924cf7c 3674 }
wolfSSL 15:117db924cf7c 3675
wolfSSL 15:117db924cf7c 3676 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 3677 /* generate random and ensure its greater than 0 and less than order */
wolfSSL 15:117db924cf7c 3678 static int wc_ecc_gen_k(WC_RNG* rng, int size, mp_int* k, mp_int* order)
wolfSSL 15:117db924cf7c 3679 {
wolfSSL 15:117db924cf7c 3680 int err;
wolfSSL 15:117db924cf7c 3681 DECLARE_VAR(buf, byte, ECC_MAXSIZE_GEN, rng->heap);
wolfSSL 15:117db924cf7c 3682
wolfSSL 15:117db924cf7c 3683 /*generate 8 extra bytes to mitigate bias from the modulo operation below*/
wolfSSL 15:117db924cf7c 3684 /*see section A.1.2 in 'Suite B Implementor's Guide to FIPS 186-3 (ECDSA)'*/
wolfSSL 15:117db924cf7c 3685 size += 8;
wolfSSL 15:117db924cf7c 3686
wolfSSL 15:117db924cf7c 3687 /* make up random string */
wolfSSL 15:117db924cf7c 3688 err = wc_RNG_GenerateBlock(rng, buf, size);
wolfSSL 15:117db924cf7c 3689
wolfSSL 15:117db924cf7c 3690 /* load random buffer data into k */
wolfSSL 15:117db924cf7c 3691 if (err == 0)
wolfSSL 15:117db924cf7c 3692 err = mp_read_unsigned_bin(k, (byte*)buf, size);
wolfSSL 15:117db924cf7c 3693
wolfSSL 15:117db924cf7c 3694 /* the key should be smaller than the order of base point */
wolfSSL 15:117db924cf7c 3695 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 3696 if (mp_cmp(k, order) != MP_LT) {
wolfSSL 15:117db924cf7c 3697 err = mp_mod(k, order, k);
wolfSSL 15:117db924cf7c 3698 }
wolfSSL 15:117db924cf7c 3699 }
wolfSSL 15:117db924cf7c 3700
wolfSSL 15:117db924cf7c 3701 /* quick sanity check to make sure we're not dealing with a 0 key */
wolfSSL 15:117db924cf7c 3702 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 3703 if (mp_iszero(k) == MP_YES)
wolfSSL 15:117db924cf7c 3704 err = MP_ZERO_E;
wolfSSL 15:117db924cf7c 3705 }
wolfSSL 15:117db924cf7c 3706
wolfSSL 15:117db924cf7c 3707 ForceZero(buf, ECC_MAXSIZE);
wolfSSL 15:117db924cf7c 3708 FREE_VAR(buf, rng->heap);
wolfSSL 15:117db924cf7c 3709
wolfSSL 15:117db924cf7c 3710 return err;
wolfSSL 15:117db924cf7c 3711 }
wolfSSL 15:117db924cf7c 3712 #endif
wolfSSL 15:117db924cf7c 3713 #endif /* !WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 3714
wolfSSL 15:117db924cf7c 3715 static WC_INLINE void wc_ecc_reset(ecc_key* key)
wolfSSL 15:117db924cf7c 3716 {
wolfSSL 15:117db924cf7c 3717 /* make sure required key variables are reset */
wolfSSL 15:117db924cf7c 3718 key->state = ECC_STATE_NONE;
wolfSSL 15:117db924cf7c 3719 }
wolfSSL 15:117db924cf7c 3720
wolfSSL 15:117db924cf7c 3721
wolfSSL 15:117db924cf7c 3722 /* create the public ECC key from a private key
wolfSSL 15:117db924cf7c 3723 *
wolfSSL 15:117db924cf7c 3724 * key an initialized private key to generate public part from
wolfSSL 15:117db924cf7c 3725 * curveIn [in]curve for key, can be NULL
wolfSSL 15:117db924cf7c 3726 * pubOut [out]ecc_point holding the public key, if NULL then public key part
wolfSSL 15:117db924cf7c 3727 * is cached in key instead.
wolfSSL 15:117db924cf7c 3728 *
wolfSSL 15:117db924cf7c 3729 * Note this function is local to the file because of the argument type
wolfSSL 15:117db924cf7c 3730 * ecc_curve_spec. Having this argument allows for not having to load the
wolfSSL 15:117db924cf7c 3731 * curve type multiple times when generating a key with wc_ecc_make_key().
wolfSSL 15:117db924cf7c 3732 *
wolfSSL 15:117db924cf7c 3733 * returns MP_OKAY on success
wolfSSL 15:117db924cf7c 3734 */
wolfSSL 15:117db924cf7c 3735 static int wc_ecc_make_pub_ex(ecc_key* key, ecc_curve_spec* curveIn,
wolfSSL 15:117db924cf7c 3736 ecc_point* pubOut)
wolfSSL 15:117db924cf7c 3737 {
wolfSSL 15:117db924cf7c 3738 int err = MP_OKAY;
wolfSSL 15:117db924cf7c 3739 #ifndef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 3740 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 3741 ecc_point* base = NULL;
wolfSSL 15:117db924cf7c 3742 #endif
wolfSSL 15:117db924cf7c 3743 ecc_point* pub;
wolfSSL 15:117db924cf7c 3744 DECLARE_CURVE_SPECS(curve, ECC_CURVE_FIELD_COUNT);
wolfSSL 15:117db924cf7c 3745 #endif
wolfSSL 15:117db924cf7c 3746
wolfSSL 15:117db924cf7c 3747 if (key == NULL) {
wolfSSL 15:117db924cf7c 3748 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 3749 }
wolfSSL 15:117db924cf7c 3750
wolfSSL 15:117db924cf7c 3751 #ifndef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 3752
wolfSSL 15:117db924cf7c 3753 /* if ecc_point passed in then use it as output for public key point */
wolfSSL 15:117db924cf7c 3754 if (pubOut != NULL) {
wolfSSL 15:117db924cf7c 3755 pub = pubOut;
wolfSSL 15:117db924cf7c 3756 }
wolfSSL 15:117db924cf7c 3757 else {
wolfSSL 15:117db924cf7c 3758 /* caching public key making it a ECC_PRIVATEKEY instead of
wolfSSL 15:117db924cf7c 3759 ECC_PRIVATEKEY_ONLY */
wolfSSL 15:117db924cf7c 3760 pub = &key->pubkey;
wolfSSL 15:117db924cf7c 3761 key->type = ECC_PRIVATEKEY_ONLY;
wolfSSL 15:117db924cf7c 3762 }
wolfSSL 15:117db924cf7c 3763
wolfSSL 15:117db924cf7c 3764 /* avoid loading the curve unless it is not passed in */
wolfSSL 15:117db924cf7c 3765 if (curveIn != NULL) {
wolfSSL 15:117db924cf7c 3766 curve = curveIn;
wolfSSL 15:117db924cf7c 3767 }
wolfSSL 15:117db924cf7c 3768 else {
wolfSSL 15:117db924cf7c 3769 ALLOC_CURVE_SPECS(ECC_CURVE_FIELD_COUNT);
wolfSSL 15:117db924cf7c 3770
wolfSSL 15:117db924cf7c 3771 /* load curve info */
wolfSSL 15:117db924cf7c 3772 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3773 err = wc_ecc_curve_load(key->dp, &curve, ECC_CURVE_FIELD_ALL);
wolfSSL 15:117db924cf7c 3774 }
wolfSSL 15:117db924cf7c 3775
wolfSSL 15:117db924cf7c 3776 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 3777 #ifndef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 3778 err = mp_init_multi(pub->x, pub->y, pub->z, NULL, NULL, NULL);
wolfSSL 15:117db924cf7c 3779 #else
wolfSSL 15:117db924cf7c 3780 pub->x = (mp_int*)&pub->xyz[0];
wolfSSL 15:117db924cf7c 3781 pub->y = (mp_int*)&pub->xyz[1];
wolfSSL 15:117db924cf7c 3782 pub->z = (mp_int*)&pub->xyz[2];
wolfSSL 15:117db924cf7c 3783 alt_fp_init(pub->x);
wolfSSL 15:117db924cf7c 3784 alt_fp_init(pub->y);
wolfSSL 15:117db924cf7c 3785 alt_fp_init(pub->z);
wolfSSL 15:117db924cf7c 3786 #endif
wolfSSL 15:117db924cf7c 3787 }
wolfSSL 15:117db924cf7c 3788
wolfSSL 15:117db924cf7c 3789
wolfSSL 15:117db924cf7c 3790 #ifdef WOLFSSL_HAVE_SP_ECC
wolfSSL 15:117db924cf7c 3791 #ifndef WOLFSSL_SP_NO_256
wolfSSL 15:117db924cf7c 3792 if (key->idx != ECC_CUSTOM_IDX && ecc_sets[key->idx].id == ECC_SECP256R1) {
wolfSSL 15:117db924cf7c 3793 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3794 err = sp_ecc_mulmod_base_256(&key->k, pub, 1, key->heap);
wolfSSL 15:117db924cf7c 3795 }
wolfSSL 15:117db924cf7c 3796 else
wolfSSL 15:117db924cf7c 3797 #endif
wolfSSL 15:117db924cf7c 3798 #endif
wolfSSL 15:117db924cf7c 3799 #ifdef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 3800 err = WC_KEY_SIZE_E;
wolfSSL 15:117db924cf7c 3801 #else
wolfSSL 15:117db924cf7c 3802 {
wolfSSL 15:117db924cf7c 3803 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 3804 base = wc_ecc_new_point_h(key->heap);
wolfSSL 15:117db924cf7c 3805 if (base == NULL)
wolfSSL 15:117db924cf7c 3806 err = MEMORY_E;
wolfSSL 15:117db924cf7c 3807 }
wolfSSL 15:117db924cf7c 3808 /* read in the x/y for this key */
wolfSSL 15:117db924cf7c 3809 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3810 err = mp_copy(curve->Gx, base->x);
wolfSSL 15:117db924cf7c 3811 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3812 err = mp_copy(curve->Gy, base->y);
wolfSSL 15:117db924cf7c 3813 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3814 err = mp_set(base->z, 1);
wolfSSL 15:117db924cf7c 3815
wolfSSL 15:117db924cf7c 3816 /* make the public key */
wolfSSL 15:117db924cf7c 3817 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 3818 err = wc_ecc_mulmod_ex(&key->k, base, pub, curve->Af, curve->prime,
wolfSSL 15:117db924cf7c 3819 1, key->heap);
wolfSSL 15:117db924cf7c 3820 }
wolfSSL 15:117db924cf7c 3821
wolfSSL 15:117db924cf7c 3822 wc_ecc_del_point_h(base, key->heap);
wolfSSL 15:117db924cf7c 3823 }
wolfSSL 15:117db924cf7c 3824 #endif
wolfSSL 15:117db924cf7c 3825
wolfSSL 15:117db924cf7c 3826 #ifdef WOLFSSL_VALIDATE_ECC_KEYGEN
wolfSSL 15:117db924cf7c 3827 /* validate the public key, order * pubkey = point at infinity */
wolfSSL 15:117db924cf7c 3828 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3829 err = ecc_check_pubkey_order(key, pub, curve->Af, curve->prime,
wolfSSL 15:117db924cf7c 3830 curve->order);
wolfSSL 15:117db924cf7c 3831 #endif /* WOLFSSL_VALIDATE_KEYGEN */
wolfSSL 15:117db924cf7c 3832
wolfSSL 15:117db924cf7c 3833 if (err != MP_OKAY) {
wolfSSL 15:117db924cf7c 3834 /* clean up if failed */
wolfSSL 15:117db924cf7c 3835 #ifndef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 3836 mp_clear(pub->x);
wolfSSL 15:117db924cf7c 3837 mp_clear(pub->y);
wolfSSL 15:117db924cf7c 3838 mp_clear(pub->z);
wolfSSL 15:117db924cf7c 3839 #endif
wolfSSL 15:117db924cf7c 3840 }
wolfSSL 15:117db924cf7c 3841
wolfSSL 15:117db924cf7c 3842 /* free up local curve */
wolfSSL 15:117db924cf7c 3843 if (curveIn == NULL) {
wolfSSL 15:117db924cf7c 3844 wc_ecc_curve_free(curve);
wolfSSL 15:117db924cf7c 3845 #ifndef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 3846 FREE_CURVE_SPECS();
wolfSSL 15:117db924cf7c 3847 #endif
wolfSSL 15:117db924cf7c 3848 }
wolfSSL 15:117db924cf7c 3849
wolfSSL 15:117db924cf7c 3850 #else
wolfSSL 15:117db924cf7c 3851 (void)curveIn;
wolfSSL 15:117db924cf7c 3852 #endif /* WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 3853
wolfSSL 15:117db924cf7c 3854 /* change key state if public part is cached */
wolfSSL 15:117db924cf7c 3855 if (key->type == ECC_PRIVATEKEY_ONLY && pubOut == NULL) {
wolfSSL 15:117db924cf7c 3856 key->type = ECC_PRIVATEKEY;
wolfSSL 15:117db924cf7c 3857 }
wolfSSL 15:117db924cf7c 3858
wolfSSL 15:117db924cf7c 3859 return err;
wolfSSL 15:117db924cf7c 3860 }
wolfSSL 15:117db924cf7c 3861
wolfSSL 15:117db924cf7c 3862
wolfSSL 15:117db924cf7c 3863 /* create the public ECC key from a private key
wolfSSL 15:117db924cf7c 3864 *
wolfSSL 15:117db924cf7c 3865 * key an initialized private key to generate public part from
wolfSSL 15:117db924cf7c 3866 * pubOut [out]ecc_point holding the public key, if NULL then public key part
wolfSSL 15:117db924cf7c 3867 * is cached in key instead.
wolfSSL 15:117db924cf7c 3868 *
wolfSSL 15:117db924cf7c 3869 *
wolfSSL 15:117db924cf7c 3870 * returns MP_OKAY on success
wolfSSL 15:117db924cf7c 3871 */
wolfSSL 15:117db924cf7c 3872 int wc_ecc_make_pub(ecc_key* key, ecc_point* pubOut)
wolfSSL 15:117db924cf7c 3873 {
wolfSSL 15:117db924cf7c 3874 WOLFSSL_ENTER("wc_ecc_make_pub");
wolfSSL 15:117db924cf7c 3875
wolfSSL 15:117db924cf7c 3876 return wc_ecc_make_pub_ex(key, NULL, pubOut);
wolfSSL 15:117db924cf7c 3877 }
wolfSSL 15:117db924cf7c 3878
wolfSSL 15:117db924cf7c 3879
wolfSSL 15:117db924cf7c 3880 int wc_ecc_make_key_ex(WC_RNG* rng, int keysize, ecc_key* key, int curve_id)
wolfSSL 15:117db924cf7c 3881 {
wolfSSL 15:117db924cf7c 3882 int err;
wolfSSL 15:117db924cf7c 3883 #ifndef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 3884 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 3885 DECLARE_CURVE_SPECS(curve, ECC_CURVE_FIELD_COUNT);
wolfSSL 15:117db924cf7c 3886 #endif
wolfSSL 15:117db924cf7c 3887 #endif
wolfSSL 15:117db924cf7c 3888
wolfSSL 15:117db924cf7c 3889 if (key == NULL || rng == NULL) {
wolfSSL 15:117db924cf7c 3890 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 3891 }
wolfSSL 15:117db924cf7c 3892
wolfSSL 15:117db924cf7c 3893 /* make sure required variables are reset */
wolfSSL 15:117db924cf7c 3894 wc_ecc_reset(key);
wolfSSL 15:117db924cf7c 3895
wolfSSL 15:117db924cf7c 3896 err = wc_ecc_set_curve(key, keysize, curve_id);
wolfSSL 15:117db924cf7c 3897 if (err != 0) {
wolfSSL 15:117db924cf7c 3898 return err;
wolfSSL 15:117db924cf7c 3899 }
wolfSSL 15:117db924cf7c 3900
wolfSSL 15:117db924cf7c 3901 #if defined(WOLFSSL_ASYNC_CRYPT) && defined(WC_ASYNC_ENABLE_ECC)
wolfSSL 15:117db924cf7c 3902 if (key->asyncDev.marker == WOLFSSL_ASYNC_MARKER_ECC) {
wolfSSL 15:117db924cf7c 3903 #ifdef HAVE_CAVIUM
wolfSSL 15:117db924cf7c 3904 /* TODO: Not implemented */
wolfSSL 15:117db924cf7c 3905 #elif defined(HAVE_INTEL_QA)
wolfSSL 15:117db924cf7c 3906 /* TODO: Not implemented */
wolfSSL 15:117db924cf7c 3907 #else
wolfSSL 15:117db924cf7c 3908 if (wc_AsyncTestInit(&key->asyncDev, ASYNC_TEST_ECC_MAKE)) {
wolfSSL 15:117db924cf7c 3909 WC_ASYNC_TEST* testDev = &key->asyncDev.test;
wolfSSL 15:117db924cf7c 3910 testDev->eccMake.rng = rng;
wolfSSL 15:117db924cf7c 3911 testDev->eccMake.key = key;
wolfSSL 15:117db924cf7c 3912 testDev->eccMake.size = keysize;
wolfSSL 15:117db924cf7c 3913 testDev->eccMake.curve_id = curve_id;
wolfSSL 15:117db924cf7c 3914 return WC_PENDING_E;
wolfSSL 15:117db924cf7c 3915 }
wolfSSL 15:117db924cf7c 3916 #endif
wolfSSL 15:117db924cf7c 3917 }
wolfSSL 15:117db924cf7c 3918 #endif /* WOLFSSL_ASYNC_CRYPT */
wolfSSL 15:117db924cf7c 3919
wolfSSL 15:117db924cf7c 3920 #ifdef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 3921 key->type = ECC_PRIVATEKEY;
wolfSSL 15:117db924cf7c 3922 err = atcatls_create_key(key->slot, key->pubkey_raw);
wolfSSL 15:117db924cf7c 3923 if (err != ATCA_SUCCESS) {
wolfSSL 15:117db924cf7c 3924 err = BAD_COND_E;
wolfSSL 15:117db924cf7c 3925 }
wolfSSL 15:117db924cf7c 3926
wolfSSL 15:117db924cf7c 3927 /* populate key->pubkey */
wolfSSL 15:117db924cf7c 3928 err = mp_read_unsigned_bin(key->pubkey.x, key->pubkey_raw,
wolfSSL 15:117db924cf7c 3929 ECC_MAX_CRYPTO_HW_SIZE);
wolfSSL 15:117db924cf7c 3930 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3931 err = mp_read_unsigned_bin(key->pubkey.y,
wolfSSL 15:117db924cf7c 3932 key->pubkey_raw + ECC_MAX_CRYPTO_HW_SIZE,
wolfSSL 15:117db924cf7c 3933 ECC_MAX_CRYPTO_HW_SIZE);
wolfSSL 15:117db924cf7c 3934 #else
wolfSSL 15:117db924cf7c 3935
wolfSSL 15:117db924cf7c 3936 #ifdef WOLFSSL_HAVE_SP_ECC
wolfSSL 15:117db924cf7c 3937 #ifndef WOLFSSL_SP_NO_256
wolfSSL 15:117db924cf7c 3938 if (key->idx != ECC_CUSTOM_IDX && ecc_sets[key->idx].id == ECC_SECP256R1) {
wolfSSL 15:117db924cf7c 3939 err = sp_ecc_make_key_256(rng, &key->k, &key->pubkey, key->heap);
wolfSSL 15:117db924cf7c 3940 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3941 key->type = ECC_PRIVATEKEY;
wolfSSL 15:117db924cf7c 3942 }
wolfSSL 15:117db924cf7c 3943 else
wolfSSL 15:117db924cf7c 3944 #endif
wolfSSL 15:117db924cf7c 3945 #endif
wolfSSL 15:117db924cf7c 3946 #ifdef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 3947 err = WC_KEY_SIZE_E;
wolfSSL 15:117db924cf7c 3948 #else
wolfSSL 15:117db924cf7c 3949 {
wolfSSL 15:117db924cf7c 3950 ALLOC_CURVE_SPECS(ECC_CURVE_FIELD_COUNT);
wolfSSL 15:117db924cf7c 3951
wolfSSL 15:117db924cf7c 3952 /* setup the key variables */
wolfSSL 15:117db924cf7c 3953 err = mp_init(&key->k);
wolfSSL 15:117db924cf7c 3954
wolfSSL 15:117db924cf7c 3955 /* load curve info */
wolfSSL 15:117db924cf7c 3956 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3957 err = wc_ecc_curve_load(key->dp, &curve, ECC_CURVE_FIELD_ALL);
wolfSSL 15:117db924cf7c 3958
wolfSSL 15:117db924cf7c 3959 /* generate k */
wolfSSL 15:117db924cf7c 3960 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3961 err = wc_ecc_gen_k(rng, key->dp->size, &key->k, curve->order);
wolfSSL 15:117db924cf7c 3962
wolfSSL 15:117db924cf7c 3963 /* generate public key from k */
wolfSSL 15:117db924cf7c 3964 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3965 err = wc_ecc_make_pub_ex(key, curve, NULL);
wolfSSL 15:117db924cf7c 3966
wolfSSL 15:117db924cf7c 3967 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 3968 key->type = ECC_PRIVATEKEY;
wolfSSL 15:117db924cf7c 3969
wolfSSL 15:117db924cf7c 3970 /* cleanup these on failure case only */
wolfSSL 15:117db924cf7c 3971 if (err != MP_OKAY) {
wolfSSL 15:117db924cf7c 3972 /* clean up */
wolfSSL 15:117db924cf7c 3973 mp_forcezero(&key->k);
wolfSSL 15:117db924cf7c 3974 }
wolfSSL 15:117db924cf7c 3975
wolfSSL 15:117db924cf7c 3976 /* cleanup allocations */
wolfSSL 15:117db924cf7c 3977 wc_ecc_curve_free(curve);
wolfSSL 15:117db924cf7c 3978 #ifndef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 3979 FREE_CURVE_SPECS();
wolfSSL 15:117db924cf7c 3980 #endif
wolfSSL 15:117db924cf7c 3981 }
wolfSSL 15:117db924cf7c 3982 #endif
wolfSSL 15:117db924cf7c 3983
wolfSSL 15:117db924cf7c 3984 #endif /* WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 3985
wolfSSL 15:117db924cf7c 3986 return err;
wolfSSL 15:117db924cf7c 3987 }
wolfSSL 15:117db924cf7c 3988
wolfSSL 15:117db924cf7c 3989 #ifdef ECC_DUMP_OID
wolfSSL 15:117db924cf7c 3990 /* Optional dump of encoded OID for adding new curves */
wolfSSL 15:117db924cf7c 3991 static int mOidDumpDone;
wolfSSL 15:117db924cf7c 3992 static void wc_ecc_dump_oids(void)
wolfSSL 15:117db924cf7c 3993 {
wolfSSL 15:117db924cf7c 3994 int x;
wolfSSL 15:117db924cf7c 3995
wolfSSL 15:117db924cf7c 3996 if (mOidDumpDone) {
wolfSSL 15:117db924cf7c 3997 return;
wolfSSL 15:117db924cf7c 3998 }
wolfSSL 15:117db924cf7c 3999
wolfSSL 15:117db924cf7c 4000 /* find matching OID sum (based on encoded value) */
wolfSSL 15:117db924cf7c 4001 for (x = 0; ecc_sets[x].size != 0; x++) {
wolfSSL 15:117db924cf7c 4002 int i;
wolfSSL 15:117db924cf7c 4003 byte* oid;
wolfSSL 15:117db924cf7c 4004 word32 oidSz, sum = 0;
wolfSSL 15:117db924cf7c 4005
wolfSSL 15:117db924cf7c 4006 printf("ECC %s (%d):\n", ecc_sets[x].name, x);
wolfSSL 15:117db924cf7c 4007
wolfSSL 15:117db924cf7c 4008 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 4009 byte oidEnc[ECC_MAX_OID_LEN];
wolfSSL 15:117db924cf7c 4010
wolfSSL 15:117db924cf7c 4011 oid = oidEnc;
wolfSSL 15:117db924cf7c 4012 oidSz = ECC_MAX_OID_LEN;
wolfSSL 15:117db924cf7c 4013
wolfSSL 15:117db924cf7c 4014 printf("OID: ");
wolfSSL 15:117db924cf7c 4015 for (i = 0; i < (int)ecc_sets[x].oidSz; i++) {
wolfSSL 15:117db924cf7c 4016 printf("%d.", ecc_sets[x].oid[i]);
wolfSSL 15:117db924cf7c 4017 }
wolfSSL 15:117db924cf7c 4018 printf("\n");
wolfSSL 15:117db924cf7c 4019
wolfSSL 15:117db924cf7c 4020 EncodeObjectId(ecc_sets[x].oid, ecc_sets[x].oidSz, oidEnc, &oidSz);
wolfSSL 15:117db924cf7c 4021 #else
wolfSSL 15:117db924cf7c 4022 oid = (byte*)ecc_sets[x].oid;
wolfSSL 15:117db924cf7c 4023 oidSz = ecc_sets[x].oidSz;
wolfSSL 15:117db924cf7c 4024 #endif
wolfSSL 15:117db924cf7c 4025
wolfSSL 15:117db924cf7c 4026 printf("OID Encoded: ");
wolfSSL 15:117db924cf7c 4027 for (i = 0; i < (int)oidSz; i++) {
wolfSSL 15:117db924cf7c 4028 printf("0x%02X,", oid[i]);
wolfSSL 15:117db924cf7c 4029 }
wolfSSL 15:117db924cf7c 4030 printf("\n");
wolfSSL 15:117db924cf7c 4031
wolfSSL 15:117db924cf7c 4032 for (i = 0; i < (int)oidSz; i++) {
wolfSSL 15:117db924cf7c 4033 sum += oid[i];
wolfSSL 15:117db924cf7c 4034 }
wolfSSL 15:117db924cf7c 4035 printf("Sum: %d\n", sum);
wolfSSL 15:117db924cf7c 4036
wolfSSL 15:117db924cf7c 4037 /* validate sum */
wolfSSL 15:117db924cf7c 4038 if (ecc_sets[x].oidSum != sum) {
wolfSSL 15:117db924cf7c 4039 printf(" Sum %d Not Valid!\n", ecc_sets[x].oidSum);
wolfSSL 15:117db924cf7c 4040 }
wolfSSL 15:117db924cf7c 4041 }
wolfSSL 15:117db924cf7c 4042 mOidDumpDone = 1;
wolfSSL 15:117db924cf7c 4043 }
wolfSSL 15:117db924cf7c 4044 #endif /* ECC_DUMP_OID */
wolfSSL 15:117db924cf7c 4045
wolfSSL 15:117db924cf7c 4046 /**
wolfSSL 15:117db924cf7c 4047 Make a new ECC key
wolfSSL 15:117db924cf7c 4048 rng An active RNG state
wolfSSL 15:117db924cf7c 4049 keysize The keysize for the new key (in octets from 20 to 65 bytes)
wolfSSL 15:117db924cf7c 4050 key [out] Destination of the newly created key
wolfSSL 15:117db924cf7c 4051 return MP_OKAY if successful,
wolfSSL 15:117db924cf7c 4052 upon error all allocated memory will be freed
wolfSSL 15:117db924cf7c 4053 */
wolfSSL 15:117db924cf7c 4054 int wc_ecc_make_key(WC_RNG* rng, int keysize, ecc_key* key)
wolfSSL 15:117db924cf7c 4055 {
wolfSSL 15:117db924cf7c 4056 return wc_ecc_make_key_ex(rng, keysize, key, ECC_CURVE_DEF);
wolfSSL 15:117db924cf7c 4057 }
wolfSSL 15:117db924cf7c 4058
wolfSSL 15:117db924cf7c 4059 /* Setup dynamic pointers if using normal math for proper freeing */
wolfSSL 15:117db924cf7c 4060 int wc_ecc_init_ex(ecc_key* key, void* heap, int devId)
wolfSSL 15:117db924cf7c 4061 {
wolfSSL 15:117db924cf7c 4062 int ret = 0;
wolfSSL 15:117db924cf7c 4063
wolfSSL 15:117db924cf7c 4064 if (key == NULL) {
wolfSSL 15:117db924cf7c 4065 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 4066 }
wolfSSL 15:117db924cf7c 4067
wolfSSL 15:117db924cf7c 4068 #ifdef ECC_DUMP_OID
wolfSSL 15:117db924cf7c 4069 wc_ecc_dump_oids();
wolfSSL 15:117db924cf7c 4070 #endif
wolfSSL 15:117db924cf7c 4071
wolfSSL 15:117db924cf7c 4072 XMEMSET(key, 0, sizeof(ecc_key));
wolfSSL 15:117db924cf7c 4073 key->state = ECC_STATE_NONE;
wolfSSL 15:117db924cf7c 4074
wolfSSL 15:117db924cf7c 4075 #if defined(PLUTON_CRYPTO_ECC) || defined(WOLF_CRYPTO_DEV)
wolfSSL 15:117db924cf7c 4076 key->devId = devId;
wolfSSL 15:117db924cf7c 4077 #else
wolfSSL 15:117db924cf7c 4078 (void)devId;
wolfSSL 15:117db924cf7c 4079 #endif
wolfSSL 15:117db924cf7c 4080
wolfSSL 15:117db924cf7c 4081 #ifdef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 4082 key->slot = atmel_ecc_alloc();
wolfSSL 15:117db924cf7c 4083 if (key->slot == ATECC_INVALID_SLOT) {
wolfSSL 15:117db924cf7c 4084 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 4085 }
wolfSSL 15:117db924cf7c 4086 #else
wolfSSL 15:117db924cf7c 4087 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 4088 key->pubkey.x = (mp_int*)&key->pubkey.xyz[0];
wolfSSL 15:117db924cf7c 4089 key->pubkey.y = (mp_int*)&key->pubkey.xyz[1];
wolfSSL 15:117db924cf7c 4090 key->pubkey.z = (mp_int*)&key->pubkey.xyz[2];
wolfSSL 15:117db924cf7c 4091 alt_fp_init(key->pubkey.x);
wolfSSL 15:117db924cf7c 4092 alt_fp_init(key->pubkey.y);
wolfSSL 15:117db924cf7c 4093 alt_fp_init(key->pubkey.z);
wolfSSL 15:117db924cf7c 4094 ret = mp_init(&key->k);
wolfSSL 15:117db924cf7c 4095 #else
wolfSSL 15:117db924cf7c 4096 ret = mp_init_multi(&key->k, key->pubkey.x, key->pubkey.y, key->pubkey.z,
wolfSSL 15:117db924cf7c 4097 NULL, NULL);
wolfSSL 15:117db924cf7c 4098 #endif /* ALT_ECC_SIZE */
wolfSSL 15:117db924cf7c 4099 if (ret != MP_OKAY) {
wolfSSL 15:117db924cf7c 4100 return MEMORY_E;
wolfSSL 15:117db924cf7c 4101 }
wolfSSL 15:117db924cf7c 4102 #endif /* WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 4103
wolfSSL 15:117db924cf7c 4104 #ifdef WOLFSSL_HEAP_TEST
wolfSSL 15:117db924cf7c 4105 key->heap = (void*)WOLFSSL_HEAP_TEST;
wolfSSL 15:117db924cf7c 4106 #else
wolfSSL 15:117db924cf7c 4107 key->heap = heap;
wolfSSL 15:117db924cf7c 4108 #endif
wolfSSL 15:117db924cf7c 4109
wolfSSL 15:117db924cf7c 4110 #if defined(WOLFSSL_ASYNC_CRYPT) && defined(WC_ASYNC_ENABLE_ECC)
wolfSSL 15:117db924cf7c 4111 /* handle as async */
wolfSSL 15:117db924cf7c 4112 ret = wolfAsync_DevCtxInit(&key->asyncDev, WOLFSSL_ASYNC_MARKER_ECC,
wolfSSL 15:117db924cf7c 4113 key->heap, devId);
wolfSSL 15:117db924cf7c 4114 #endif
wolfSSL 15:117db924cf7c 4115
wolfSSL 15:117db924cf7c 4116 return ret;
wolfSSL 15:117db924cf7c 4117 }
wolfSSL 15:117db924cf7c 4118
wolfSSL 15:117db924cf7c 4119 int wc_ecc_init(ecc_key* key)
wolfSSL 15:117db924cf7c 4120 {
wolfSSL 15:117db924cf7c 4121 return wc_ecc_init_ex(key, NULL, INVALID_DEVID);
wolfSSL 15:117db924cf7c 4122 }
wolfSSL 15:117db924cf7c 4123
wolfSSL 15:117db924cf7c 4124 int wc_ecc_set_flags(ecc_key* key, word32 flags)
wolfSSL 15:117db924cf7c 4125 {
wolfSSL 15:117db924cf7c 4126 if (key == NULL) {
wolfSSL 15:117db924cf7c 4127 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 4128 }
wolfSSL 15:117db924cf7c 4129 key->flags |= flags;
wolfSSL 15:117db924cf7c 4130 return 0;
wolfSSL 15:117db924cf7c 4131 }
wolfSSL 15:117db924cf7c 4132
wolfSSL 15:117db924cf7c 4133 #ifdef HAVE_ECC_SIGN
wolfSSL 15:117db924cf7c 4134
wolfSSL 15:117db924cf7c 4135 #ifndef NO_ASN
wolfSSL 15:117db924cf7c 4136
wolfSSL 15:117db924cf7c 4137 #if defined(WOLFSSL_ATECC508A) || defined(PLUTON_CRYPTO_ECC)
wolfSSL 15:117db924cf7c 4138 static int wc_ecc_sign_hash_hw(const byte* in, word32 inlen,
wolfSSL 15:117db924cf7c 4139 mp_int* r, mp_int* s, byte* out, word32 *outlen, WC_RNG* rng,
wolfSSL 15:117db924cf7c 4140 ecc_key* key)
wolfSSL 15:117db924cf7c 4141 {
wolfSSL 15:117db924cf7c 4142 int err;
wolfSSL 15:117db924cf7c 4143
wolfSSL 15:117db924cf7c 4144 #ifdef PLUTON_CRYPTO_ECC
wolfSSL 15:117db924cf7c 4145 if (key->devId != INVALID_DEVID) /* use hardware */
wolfSSL 15:117db924cf7c 4146 #endif
wolfSSL 15:117db924cf7c 4147 {
wolfSSL 15:117db924cf7c 4148 word32 keysize = (word32)key->dp->size;
wolfSSL 15:117db924cf7c 4149
wolfSSL 15:117db924cf7c 4150 /* Check args */
wolfSSL 15:117db924cf7c 4151 if (keysize > ECC_MAX_CRYPTO_HW_SIZE || inlen != keysize ||
wolfSSL 15:117db924cf7c 4152 *outlen < keysize*2) {
wolfSSL 15:117db924cf7c 4153 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 4154 }
wolfSSL 15:117db924cf7c 4155
wolfSSL 15:117db924cf7c 4156 #if defined(WOLFSSL_ATECC508A)
wolfSSL 15:117db924cf7c 4157 /* Sign: Result is 32-bytes of R then 32-bytes of S */
wolfSSL 15:117db924cf7c 4158 err = atcatls_sign(key->slot, in, out);
wolfSSL 15:117db924cf7c 4159 if (err != ATCA_SUCCESS) {
wolfSSL 15:117db924cf7c 4160 return BAD_COND_E;
wolfSSL 15:117db924cf7c 4161 }
wolfSSL 15:117db924cf7c 4162 #elif defined(PLUTON_CRYPTO_ECC)
wolfSSL 15:117db924cf7c 4163 {
wolfSSL 15:117db924cf7c 4164 /* perform ECC sign */
wolfSSL 15:117db924cf7c 4165 word32 raw_sig_size = *outlen;
wolfSSL 15:117db924cf7c 4166 err = Crypto_EccSign(in, inlen, out, &raw_sig_size);
wolfSSL 15:117db924cf7c 4167 if (err != CRYPTO_RES_SUCCESS || raw_sig_size != keysize*2){
wolfSSL 15:117db924cf7c 4168 return BAD_COND_E;
wolfSSL 15:117db924cf7c 4169 }
wolfSSL 15:117db924cf7c 4170 }
wolfSSL 15:117db924cf7c 4171 #endif
wolfSSL 15:117db924cf7c 4172
wolfSSL 15:117db924cf7c 4173 /* Load R and S */
wolfSSL 15:117db924cf7c 4174 err = mp_read_unsigned_bin(r, &out[0], keysize);
wolfSSL 15:117db924cf7c 4175 if (err != MP_OKAY) {
wolfSSL 15:117db924cf7c 4176 return err;
wolfSSL 15:117db924cf7c 4177 }
wolfSSL 15:117db924cf7c 4178 err = mp_read_unsigned_bin(s, &out[keysize], keysize);
wolfSSL 15:117db924cf7c 4179 if (err != MP_OKAY) {
wolfSSL 15:117db924cf7c 4180 return err;
wolfSSL 15:117db924cf7c 4181 }
wolfSSL 15:117db924cf7c 4182
wolfSSL 15:117db924cf7c 4183 /* Check for zeros */
wolfSSL 15:117db924cf7c 4184 if (mp_iszero(r) || mp_iszero(s)) {
wolfSSL 15:117db924cf7c 4185 return MP_ZERO_E;
wolfSSL 15:117db924cf7c 4186 }
wolfSSL 15:117db924cf7c 4187 }
wolfSSL 15:117db924cf7c 4188 #ifdef PLUTON_CRYPTO_ECC
wolfSSL 15:117db924cf7c 4189 else {
wolfSSL 15:117db924cf7c 4190 err = wc_ecc_sign_hash_ex(in, inlen, rng, key, r, s);
wolfSSL 15:117db924cf7c 4191 }
wolfSSL 15:117db924cf7c 4192 #endif
wolfSSL 15:117db924cf7c 4193 (void)rng;
wolfSSL 15:117db924cf7c 4194
wolfSSL 15:117db924cf7c 4195 return err;
wolfSSL 15:117db924cf7c 4196 }
wolfSSL 15:117db924cf7c 4197 #endif /* WOLFSSL_ATECC508A || PLUTON_CRYPTO_ECC */
wolfSSL 15:117db924cf7c 4198
wolfSSL 15:117db924cf7c 4199 /**
wolfSSL 15:117db924cf7c 4200 Sign a message digest
wolfSSL 15:117db924cf7c 4201 in The message digest to sign
wolfSSL 15:117db924cf7c 4202 inlen The length of the digest
wolfSSL 15:117db924cf7c 4203 out [out] The destination for the signature
wolfSSL 15:117db924cf7c 4204 outlen [in/out] The max size and resulting size of the signature
wolfSSL 15:117db924cf7c 4205 key A private ECC key
wolfSSL 15:117db924cf7c 4206 return MP_OKAY if successful
wolfSSL 15:117db924cf7c 4207 */
wolfSSL 15:117db924cf7c 4208 int wc_ecc_sign_hash(const byte* in, word32 inlen, byte* out, word32 *outlen,
wolfSSL 15:117db924cf7c 4209 WC_RNG* rng, ecc_key* key)
wolfSSL 15:117db924cf7c 4210 {
wolfSSL 15:117db924cf7c 4211 int err;
wolfSSL 15:117db924cf7c 4212 mp_int *r = NULL, *s = NULL;
wolfSSL 15:117db924cf7c 4213 #if !defined(WOLFSSL_ASYNC_CRYPT) && !defined(WOLFSSL_SMALL_STACK)
wolfSSL 15:117db924cf7c 4214 mp_int r_lcl, s_lcl;
wolfSSL 15:117db924cf7c 4215 #endif
wolfSSL 15:117db924cf7c 4216
wolfSSL 15:117db924cf7c 4217 if (in == NULL || out == NULL || outlen == NULL || key == NULL ||
wolfSSL 15:117db924cf7c 4218 rng == NULL) {
wolfSSL 15:117db924cf7c 4219 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 4220 }
wolfSSL 15:117db924cf7c 4221
wolfSSL 15:117db924cf7c 4222 #ifdef WOLF_CRYPTO_DEV
wolfSSL 15:117db924cf7c 4223 if (key->devId != INVALID_DEVID) {
wolfSSL 15:117db924cf7c 4224 err = wc_CryptoDev_EccSign(in, inlen, out, outlen, rng, key);
wolfSSL 15:117db924cf7c 4225 if (err != NOT_COMPILED_IN)
wolfSSL 15:117db924cf7c 4226 return err;
wolfSSL 15:117db924cf7c 4227 }
wolfSSL 15:117db924cf7c 4228 #endif
wolfSSL 15:117db924cf7c 4229
wolfSSL 15:117db924cf7c 4230 #ifdef WOLFSSL_ASYNC_CRYPT
wolfSSL 15:117db924cf7c 4231 err = wc_ecc_alloc_async(key);
wolfSSL 15:117db924cf7c 4232 if (err != 0)
wolfSSL 15:117db924cf7c 4233 return err;
wolfSSL 15:117db924cf7c 4234 r = key->r;
wolfSSL 15:117db924cf7c 4235 s = key->s;
wolfSSL 15:117db924cf7c 4236 #elif !defined(WOLFSSL_SMALL_STACK)
wolfSSL 15:117db924cf7c 4237 r = &r_lcl;
wolfSSL 15:117db924cf7c 4238 s = &s_lcl;
wolfSSL 15:117db924cf7c 4239 #else
wolfSSL 15:117db924cf7c 4240 r = (mp_int*)XMALLOC(sizeof(mp_int), key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4241 if (r == NULL)
wolfSSL 15:117db924cf7c 4242 return MEMORY_E;
wolfSSL 15:117db924cf7c 4243 s = (mp_int*)XMALLOC(sizeof(mp_int), key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4244 if (s == NULL) {
wolfSSL 15:117db924cf7c 4245 XFREE(r, key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4246 return MEMORY_E;
wolfSSL 15:117db924cf7c 4247 }
wolfSSL 15:117db924cf7c 4248 #endif
wolfSSL 15:117db924cf7c 4249
wolfSSL 15:117db924cf7c 4250 switch(key->state) {
wolfSSL 15:117db924cf7c 4251 case ECC_STATE_NONE:
wolfSSL 15:117db924cf7c 4252 case ECC_STATE_SIGN_DO:
wolfSSL 15:117db924cf7c 4253 key->state = ECC_STATE_SIGN_DO;
wolfSSL 15:117db924cf7c 4254
wolfSSL 15:117db924cf7c 4255 if ((err = mp_init_multi(r, s, NULL, NULL, NULL, NULL)) != MP_OKAY){
wolfSSL 15:117db924cf7c 4256 break;
wolfSSL 15:117db924cf7c 4257 }
wolfSSL 15:117db924cf7c 4258
wolfSSL 15:117db924cf7c 4259 /* hardware crypto */
wolfSSL 15:117db924cf7c 4260 #if defined(WOLFSSL_ATECC508A) || defined(PLUTON_CRYPTO_ECC)
wolfSSL 15:117db924cf7c 4261 err = wc_ecc_sign_hash_hw(in, inlen, r, s, out, outlen, rng, key);
wolfSSL 15:117db924cf7c 4262 #else
wolfSSL 15:117db924cf7c 4263 err = wc_ecc_sign_hash_ex(in, inlen, rng, key, r, s);
wolfSSL 15:117db924cf7c 4264 #endif
wolfSSL 15:117db924cf7c 4265 if (err < 0) {
wolfSSL 15:117db924cf7c 4266 break;
wolfSSL 15:117db924cf7c 4267 }
wolfSSL 15:117db924cf7c 4268
wolfSSL 15:117db924cf7c 4269 FALL_THROUGH;
wolfSSL 15:117db924cf7c 4270
wolfSSL 15:117db924cf7c 4271 case ECC_STATE_SIGN_ENCODE:
wolfSSL 15:117db924cf7c 4272 key->state = ECC_STATE_SIGN_ENCODE;
wolfSSL 15:117db924cf7c 4273
wolfSSL 15:117db924cf7c 4274 #if defined(WOLFSSL_ASYNC_CRYPT) && defined(WC_ASYNC_ENABLE_ECC)
wolfSSL 15:117db924cf7c 4275 if (key->asyncDev.marker == WOLFSSL_ASYNC_MARKER_ECC) {
wolfSSL 15:117db924cf7c 4276 #ifdef HAVE_CAVIUM_V
wolfSSL 15:117db924cf7c 4277 /* Nitrox requires r and s in sep buffer, so split it */
wolfSSL 15:117db924cf7c 4278 NitroxEccRsSplit(key, &r->raw, &s->raw);
wolfSSL 15:117db924cf7c 4279 #endif
wolfSSL 15:117db924cf7c 4280 #ifndef WOLFSSL_ASYNC_CRYPT_TEST
wolfSSL 15:117db924cf7c 4281 /* only do this if not simulator, since it overwrites result */
wolfSSL 15:117db924cf7c 4282 wc_bigint_to_mp(&r->raw, r);
wolfSSL 15:117db924cf7c 4283 wc_bigint_to_mp(&s->raw, s);
wolfSSL 15:117db924cf7c 4284 #endif
wolfSSL 15:117db924cf7c 4285 }
wolfSSL 15:117db924cf7c 4286 #endif /* WOLFSSL_ASYNC_CRYPT */
wolfSSL 15:117db924cf7c 4287
wolfSSL 15:117db924cf7c 4288 /* encoded with DSA header */
wolfSSL 15:117db924cf7c 4289 err = StoreECC_DSA_Sig(out, outlen, r, s);
wolfSSL 15:117db924cf7c 4290
wolfSSL 15:117db924cf7c 4291 /* done with R/S */
wolfSSL 15:117db924cf7c 4292 mp_clear(r);
wolfSSL 15:117db924cf7c 4293 mp_clear(s);
wolfSSL 15:117db924cf7c 4294 #if !defined(WOLFSSL_ASYNC_CRYPT) && defined(WOLFSSL_SMALL_STACK)
wolfSSL 15:117db924cf7c 4295 XFREE(s, key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4296 XFREE(r, key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4297 #endif
wolfSSL 15:117db924cf7c 4298 break;
wolfSSL 15:117db924cf7c 4299
wolfSSL 15:117db924cf7c 4300 default:
wolfSSL 15:117db924cf7c 4301 err = BAD_STATE_E;
wolfSSL 15:117db924cf7c 4302 break;
wolfSSL 15:117db924cf7c 4303 }
wolfSSL 15:117db924cf7c 4304
wolfSSL 15:117db924cf7c 4305 /* if async pending then return and skip done cleanup below */
wolfSSL 15:117db924cf7c 4306 if (err == WC_PENDING_E) {
wolfSSL 15:117db924cf7c 4307 key->state++;
wolfSSL 15:117db924cf7c 4308 return err;
wolfSSL 15:117db924cf7c 4309 }
wolfSSL 15:117db924cf7c 4310
wolfSSL 15:117db924cf7c 4311 /* cleanup */
wolfSSL 15:117db924cf7c 4312 #ifdef WOLFSSL_ASYNC_CRYPT
wolfSSL 15:117db924cf7c 4313 wc_ecc_free_async(key);
wolfSSL 15:117db924cf7c 4314 #endif
wolfSSL 15:117db924cf7c 4315 key->state = ECC_STATE_NONE;
wolfSSL 15:117db924cf7c 4316
wolfSSL 15:117db924cf7c 4317 return err;
wolfSSL 15:117db924cf7c 4318 }
wolfSSL 15:117db924cf7c 4319 #endif /* !NO_ASN */
wolfSSL 15:117db924cf7c 4320
wolfSSL 15:117db924cf7c 4321 #ifndef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 4322 /**
wolfSSL 15:117db924cf7c 4323 Sign a message digest
wolfSSL 15:117db924cf7c 4324 in The message digest to sign
wolfSSL 15:117db924cf7c 4325 inlen The length of the digest
wolfSSL 15:117db924cf7c 4326 key A private ECC key
wolfSSL 15:117db924cf7c 4327 r [out] The destination for r component of the signature
wolfSSL 15:117db924cf7c 4328 s [out] The destination for s component of the signature
wolfSSL 15:117db924cf7c 4329 return MP_OKAY if successful
wolfSSL 15:117db924cf7c 4330 */
wolfSSL 15:117db924cf7c 4331 int wc_ecc_sign_hash_ex(const byte* in, word32 inlen, WC_RNG* rng,
wolfSSL 15:117db924cf7c 4332 ecc_key* key, mp_int *r, mp_int *s)
wolfSSL 15:117db924cf7c 4333 {
wolfSSL 15:117db924cf7c 4334 int err;
wolfSSL 15:117db924cf7c 4335 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 4336 mp_int* e;
wolfSSL 15:117db924cf7c 4337 #if (!defined(WOLFSSL_ASYNC_CRYPT) || !defined(HAVE_CAVIUM_V)) && \
wolfSSL 15:117db924cf7c 4338 !defined(WOLFSSL_SMALL_STACK)
wolfSSL 15:117db924cf7c 4339 mp_int e_lcl;
wolfSSL 15:117db924cf7c 4340 #endif
wolfSSL 15:117db924cf7c 4341 DECLARE_CURVE_SPECS(curve, 1);
wolfSSL 15:117db924cf7c 4342 #endif /* !WOLFSSL_SP_MATH */
wolfSSL 15:117db924cf7c 4343
wolfSSL 15:117db924cf7c 4344 if (in == NULL || r == NULL || s == NULL || key == NULL || rng == NULL)
wolfSSL 15:117db924cf7c 4345 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 4346
wolfSSL 15:117db924cf7c 4347 /* is this a private key? */
wolfSSL 15:117db924cf7c 4348 if (key->type != ECC_PRIVATEKEY && key->type != ECC_PRIVATEKEY_ONLY) {
wolfSSL 15:117db924cf7c 4349 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 4350 }
wolfSSL 15:117db924cf7c 4351
wolfSSL 15:117db924cf7c 4352 /* is the IDX valid ? */
wolfSSL 15:117db924cf7c 4353 if (wc_ecc_is_valid_idx(key->idx) != 1) {
wolfSSL 15:117db924cf7c 4354 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 4355 }
wolfSSL 15:117db924cf7c 4356
wolfSSL 15:117db924cf7c 4357 #ifdef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 4358 if (key->idx != ECC_CUSTOM_IDX && ecc_sets[key->idx].id == ECC_SECP256R1)
wolfSSL 15:117db924cf7c 4359 return sp_ecc_sign_256(in, inlen, rng, &key->k, r, s, key->heap);
wolfSSL 15:117db924cf7c 4360 else
wolfSSL 15:117db924cf7c 4361 return WC_KEY_SIZE_E;
wolfSSL 15:117db924cf7c 4362 #else
wolfSSL 15:117db924cf7c 4363 #ifdef WOLFSSL_HAVE_SP_ECC
wolfSSL 15:117db924cf7c 4364 #if defined(WOLFSSL_ASYNC_CRYPT) && defined(WC_ASYNC_ENABLE_ECC) && \
wolfSSL 15:117db924cf7c 4365 defined(WOLFSSL_ASYNC_CRYPT_TEST)
wolfSSL 15:117db924cf7c 4366 if (key->asyncDev.marker != WOLFSSL_ASYNC_MARKER_ECC)
wolfSSL 15:117db924cf7c 4367 #endif
wolfSSL 15:117db924cf7c 4368 {
wolfSSL 15:117db924cf7c 4369 #ifndef WOLFSSL_SP_NO_256
wolfSSL 15:117db924cf7c 4370 if (key->idx != ECC_CUSTOM_IDX && ecc_sets[key->idx].id == ECC_SECP256R1)
wolfSSL 15:117db924cf7c 4371 return sp_ecc_sign_256(in, inlen, rng, &key->k, r, s, key->heap);
wolfSSL 15:117db924cf7c 4372 #endif
wolfSSL 15:117db924cf7c 4373 }
wolfSSL 15:117db924cf7c 4374 #endif /* WOLFSSL_HAVE_SP_ECC */
wolfSSL 15:117db924cf7c 4375
wolfSSL 15:117db924cf7c 4376
wolfSSL 15:117db924cf7c 4377 #if defined(WOLFSSL_ASYNC_CRYPT) && defined(WC_ASYNC_ENABLE_ECC) && \
wolfSSL 15:117db924cf7c 4378 defined(WOLFSSL_ASYNC_CRYPT_TEST)
wolfSSL 15:117db924cf7c 4379 if (key->asyncDev.marker == WOLFSSL_ASYNC_MARKER_ECC) {
wolfSSL 15:117db924cf7c 4380 if (wc_AsyncTestInit(&key->asyncDev, ASYNC_TEST_ECC_SIGN)) {
wolfSSL 15:117db924cf7c 4381 WC_ASYNC_TEST* testDev = &key->asyncDev.test;
wolfSSL 15:117db924cf7c 4382 testDev->eccSign.in = in;
wolfSSL 15:117db924cf7c 4383 testDev->eccSign.inSz = inlen;
wolfSSL 15:117db924cf7c 4384 testDev->eccSign.rng = rng;
wolfSSL 15:117db924cf7c 4385 testDev->eccSign.key = key;
wolfSSL 15:117db924cf7c 4386 testDev->eccSign.r = r;
wolfSSL 15:117db924cf7c 4387 testDev->eccSign.s = s;
wolfSSL 15:117db924cf7c 4388 return WC_PENDING_E;
wolfSSL 15:117db924cf7c 4389 }
wolfSSL 15:117db924cf7c 4390 }
wolfSSL 15:117db924cf7c 4391 #endif
wolfSSL 15:117db924cf7c 4392
wolfSSL 15:117db924cf7c 4393 ALLOC_CURVE_SPECS(1);
wolfSSL 15:117db924cf7c 4394
wolfSSL 15:117db924cf7c 4395 #if defined(WOLFSSL_ASYNC_CRYPT) && defined(HAVE_CAVIUM_V)
wolfSSL 15:117db924cf7c 4396 err = wc_ecc_alloc_mpint(key, &key->e);
wolfSSL 15:117db924cf7c 4397 if (err != 0) {
wolfSSL 15:117db924cf7c 4398 FREE_CURVE_SPECS();
wolfSSL 15:117db924cf7c 4399 return err;
wolfSSL 15:117db924cf7c 4400 }
wolfSSL 15:117db924cf7c 4401 e = key->e;
wolfSSL 15:117db924cf7c 4402 #elif !defined(WOLFSSL_SMALL_STACK)
wolfSSL 15:117db924cf7c 4403 e = &e_lcl;
wolfSSL 15:117db924cf7c 4404 #else
wolfSSL 15:117db924cf7c 4405 e = (mp_int*)XMALLOC(sizeof(mp_int), key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4406 if (e == NULL) {
wolfSSL 15:117db924cf7c 4407 FREE_CURVE_SPECS();
wolfSSL 15:117db924cf7c 4408 return MEMORY_E;
wolfSSL 15:117db924cf7c 4409 }
wolfSSL 15:117db924cf7c 4410 #endif
wolfSSL 15:117db924cf7c 4411
wolfSSL 15:117db924cf7c 4412 /* get the hash and load it as a bignum into 'e' */
wolfSSL 15:117db924cf7c 4413 /* init the bignums */
wolfSSL 15:117db924cf7c 4414 if ((err = mp_init(e)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 4415 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 4416 XFREE(e, key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4417 #endif
wolfSSL 15:117db924cf7c 4418 FREE_CURVE_SPECS();
wolfSSL 15:117db924cf7c 4419 return err;
wolfSSL 15:117db924cf7c 4420 }
wolfSSL 15:117db924cf7c 4421
wolfSSL 15:117db924cf7c 4422 /* load curve info */
wolfSSL 15:117db924cf7c 4423 err = wc_ecc_curve_load(key->dp, &curve, ECC_CURVE_FIELD_ORDER);
wolfSSL 15:117db924cf7c 4424
wolfSSL 15:117db924cf7c 4425 /* load digest into e */
wolfSSL 15:117db924cf7c 4426 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 4427 /* we may need to truncate if hash is longer than key size */
wolfSSL 15:117db924cf7c 4428 word32 orderBits = mp_count_bits(curve->order);
wolfSSL 15:117db924cf7c 4429
wolfSSL 15:117db924cf7c 4430 /* truncate down to byte size, may be all that's needed */
wolfSSL 15:117db924cf7c 4431 if ((WOLFSSL_BIT_SIZE * inlen) > orderBits)
wolfSSL 15:117db924cf7c 4432 inlen = (orderBits + WOLFSSL_BIT_SIZE - 1) / WOLFSSL_BIT_SIZE;
wolfSSL 15:117db924cf7c 4433 err = mp_read_unsigned_bin(e, (byte*)in, inlen);
wolfSSL 15:117db924cf7c 4434
wolfSSL 15:117db924cf7c 4435 /* may still need bit truncation too */
wolfSSL 15:117db924cf7c 4436 if (err == MP_OKAY && (WOLFSSL_BIT_SIZE * inlen) > orderBits)
wolfSSL 15:117db924cf7c 4437 mp_rshb(e, WOLFSSL_BIT_SIZE - (orderBits & 0x7));
wolfSSL 15:117db924cf7c 4438 }
wolfSSL 15:117db924cf7c 4439
wolfSSL 15:117db924cf7c 4440 /* make up a key and export the public copy */
wolfSSL 15:117db924cf7c 4441 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 4442 int loop_check = 0;
wolfSSL 15:117db924cf7c 4443 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 4444 ecc_key* pubkey = NULL;
wolfSSL 15:117db924cf7c 4445 #else
wolfSSL 15:117db924cf7c 4446 ecc_key pubkey[1];
wolfSSL 15:117db924cf7c 4447 #endif
wolfSSL 15:117db924cf7c 4448
wolfSSL 15:117db924cf7c 4449 #if defined(WOLFSSL_ASYNC_CRYPT) && defined(WC_ASYNC_ENABLE_ECC)
wolfSSL 15:117db924cf7c 4450 if (key->asyncDev.marker == WOLFSSL_ASYNC_MARKER_ECC) {
wolfSSL 15:117db924cf7c 4451 #if defined(HAVE_CAVIUM_V) || defined(HAVE_INTEL_QA)
wolfSSL 15:117db924cf7c 4452 #ifdef HAVE_CAVIUM_V
wolfSSL 15:117db924cf7c 4453 if (NitroxEccIsCurveSupported(key))
wolfSSL 15:117db924cf7c 4454 #endif
wolfSSL 15:117db924cf7c 4455 {
wolfSSL 15:117db924cf7c 4456 word32 keySz = key->dp->size;
wolfSSL 15:117db924cf7c 4457 mp_int* k;
wolfSSL 15:117db924cf7c 4458 #ifdef HAVE_CAVIUM_V
wolfSSL 15:117db924cf7c 4459 err = wc_ecc_alloc_mpint(key, &key->signK);
wolfSSL 15:117db924cf7c 4460 if (err != 0)
wolfSSL 15:117db924cf7c 4461 return err;
wolfSSL 15:117db924cf7c 4462 k = key->signK;
wolfSSL 15:117db924cf7c 4463 #else
wolfSSL 15:117db924cf7c 4464 mp_int k_lcl;
wolfSSL 15:117db924cf7c 4465 k = &k_lcl;
wolfSSL 15:117db924cf7c 4466 #endif
wolfSSL 15:117db924cf7c 4467
wolfSSL 15:117db924cf7c 4468 err = mp_init(k);
wolfSSL 15:117db924cf7c 4469
wolfSSL 15:117db924cf7c 4470 /* make sure r and s are allocated */
wolfSSL 15:117db924cf7c 4471 #ifdef HAVE_CAVIUM_V
wolfSSL 15:117db924cf7c 4472 /* Nitrox V needs single buffer for R and S */
wolfSSL 15:117db924cf7c 4473 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4474 err = wc_bigint_alloc(&key->r->raw, NitroxEccGetSize(key)*2);
wolfSSL 15:117db924cf7c 4475 /* Nitrox V only needs Prime and Order */
wolfSSL 15:117db924cf7c 4476 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4477 err = wc_ecc_curve_load(key->dp, &curve,
wolfSSL 15:117db924cf7c 4478 (ECC_CURVE_FIELD_PRIME | ECC_CURVE_FIELD_ORDER));
wolfSSL 15:117db924cf7c 4479 #else
wolfSSL 15:117db924cf7c 4480 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4481 err = wc_bigint_alloc(&key->r->raw, key->dp->size);
wolfSSL 15:117db924cf7c 4482 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4483 err = wc_ecc_curve_load(key->dp, &curve, ECC_CURVE_FIELD_ALL);
wolfSSL 15:117db924cf7c 4484 #endif
wolfSSL 15:117db924cf7c 4485 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4486 err = wc_bigint_alloc(&key->s->raw, key->dp->size);
wolfSSL 15:117db924cf7c 4487
wolfSSL 15:117db924cf7c 4488 /* load e and k */
wolfSSL 15:117db924cf7c 4489 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4490 err = wc_mp_to_bigint_sz(e, &e->raw, keySz);
wolfSSL 15:117db924cf7c 4491 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4492 err = wc_mp_to_bigint_sz(&key->k, &key->k.raw, keySz);
wolfSSL 15:117db924cf7c 4493 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4494 err = wc_ecc_gen_k(rng, key->dp->size, k, curve->order);
wolfSSL 15:117db924cf7c 4495 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4496 err = wc_mp_to_bigint_sz(k, &k->raw, keySz);
wolfSSL 15:117db924cf7c 4497
wolfSSL 15:117db924cf7c 4498 #ifdef HAVE_CAVIUM_V
wolfSSL 15:117db924cf7c 4499 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4500 err = NitroxEcdsaSign(key, &e->raw, &key->k.raw, &k->raw,
wolfSSL 15:117db924cf7c 4501 &r->raw, &s->raw, &curve->prime->raw, &curve->order->raw);
wolfSSL 15:117db924cf7c 4502 #else
wolfSSL 15:117db924cf7c 4503 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4504 err = IntelQaEcdsaSign(&key->asyncDev, &e->raw, &key->k.raw,
wolfSSL 15:117db924cf7c 4505 &k->raw, &r->raw, &s->raw, &curve->Af->raw, &curve->Bf->raw,
wolfSSL 15:117db924cf7c 4506 &curve->prime->raw, &curve->order->raw, &curve->Gx->raw,
wolfSSL 15:117db924cf7c 4507 &curve->Gy->raw);
wolfSSL 15:117db924cf7c 4508 #endif
wolfSSL 15:117db924cf7c 4509
wolfSSL 15:117db924cf7c 4510 #ifndef HAVE_CAVIUM_V
wolfSSL 15:117db924cf7c 4511 mp_clear(e);
wolfSSL 15:117db924cf7c 4512 mp_clear(k);
wolfSSL 15:117db924cf7c 4513 #endif
wolfSSL 15:117db924cf7c 4514 wc_ecc_curve_free(curve);
wolfSSL 15:117db924cf7c 4515 FREE_CURVE_SPECS();
wolfSSL 15:117db924cf7c 4516
wolfSSL 15:117db924cf7c 4517 return err;
wolfSSL 15:117db924cf7c 4518 }
wolfSSL 15:117db924cf7c 4519 #endif /* HAVE_CAVIUM_V || HAVE_INTEL_QA */
wolfSSL 15:117db924cf7c 4520 }
wolfSSL 15:117db924cf7c 4521 #endif /* WOLFSSL_ASYNC_CRYPT */
wolfSSL 15:117db924cf7c 4522
wolfSSL 15:117db924cf7c 4523 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 4524 pubkey = (ecc_key*)XMALLOC(sizeof(ecc_key), key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4525 if (pubkey == NULL)
wolfSSL 15:117db924cf7c 4526 err = MEMORY_E;
wolfSSL 15:117db924cf7c 4527 #endif
wolfSSL 15:117db924cf7c 4528
wolfSSL 15:117db924cf7c 4529 /* don't use async for key, since we don't support async return here */
wolfSSL 15:117db924cf7c 4530 if (err == MP_OKAY && (err = wc_ecc_init_ex(pubkey, key->heap,
wolfSSL 15:117db924cf7c 4531 INVALID_DEVID)) == MP_OKAY) {
wolfSSL 15:117db924cf7c 4532 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 4533 mp_int* b = NULL;
wolfSSL 15:117db924cf7c 4534 #else
wolfSSL 15:117db924cf7c 4535 mp_int b[1];
wolfSSL 15:117db924cf7c 4536 #endif
wolfSSL 15:117db924cf7c 4537
wolfSSL 15:117db924cf7c 4538 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 4539 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 4540 b = (mp_int*)XMALLOC(sizeof(mp_int), key->heap,
wolfSSL 15:117db924cf7c 4541 DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4542 if (b == NULL)
wolfSSL 15:117db924cf7c 4543 err = MEMORY_E;
wolfSSL 15:117db924cf7c 4544 }
wolfSSL 15:117db924cf7c 4545 #endif
wolfSSL 15:117db924cf7c 4546
wolfSSL 15:117db924cf7c 4547 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 4548 err = mp_init(b);
wolfSSL 15:117db924cf7c 4549 }
wolfSSL 15:117db924cf7c 4550
wolfSSL 15:117db924cf7c 4551 #ifdef WOLFSSL_CUSTOM_CURVES
wolfSSL 15:117db924cf7c 4552 /* if custom curve, apply params to pubkey */
wolfSSL 15:117db924cf7c 4553 if (err == MP_OKAY && key->idx == ECC_CUSTOM_IDX) {
wolfSSL 15:117db924cf7c 4554 err = wc_ecc_set_custom_curve(pubkey, key->dp);
wolfSSL 15:117db924cf7c 4555 }
wolfSSL 15:117db924cf7c 4556 #endif
wolfSSL 15:117db924cf7c 4557
wolfSSL 15:117db924cf7c 4558 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 4559 /* Generate blinding value - non-zero value. */
wolfSSL 15:117db924cf7c 4560 do {
wolfSSL 15:117db924cf7c 4561 if (++loop_check > 64) {
wolfSSL 15:117db924cf7c 4562 err = RNG_FAILURE_E;
wolfSSL 15:117db924cf7c 4563 break;
wolfSSL 15:117db924cf7c 4564 }
wolfSSL 15:117db924cf7c 4565
wolfSSL 15:117db924cf7c 4566 err = wc_ecc_gen_k(rng, key->dp->size, b, curve->order);
wolfSSL 15:117db924cf7c 4567 }
wolfSSL 15:117db924cf7c 4568 while (err == MP_ZERO_E);
wolfSSL 15:117db924cf7c 4569 loop_check = 0;
wolfSSL 15:117db924cf7c 4570 }
wolfSSL 15:117db924cf7c 4571
wolfSSL 15:117db924cf7c 4572 for (; err == MP_OKAY;) {
wolfSSL 15:117db924cf7c 4573 if (++loop_check > 64) {
wolfSSL 15:117db924cf7c 4574 err = RNG_FAILURE_E;
wolfSSL 15:117db924cf7c 4575 break;
wolfSSL 15:117db924cf7c 4576 }
wolfSSL 15:117db924cf7c 4577 err = wc_ecc_make_key_ex(rng, key->dp->size, pubkey,
wolfSSL 15:117db924cf7c 4578 key->dp->id);
wolfSSL 15:117db924cf7c 4579 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 4580
wolfSSL 15:117db924cf7c 4581 /* find r = x1 mod n */
wolfSSL 15:117db924cf7c 4582 err = mp_mod(pubkey->pubkey.x, curve->order, r);
wolfSSL 15:117db924cf7c 4583 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 4584
wolfSSL 15:117db924cf7c 4585 if (mp_iszero(r) == MP_YES) {
wolfSSL 15:117db924cf7c 4586 #ifndef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 4587 mp_clear(pubkey->pubkey.x);
wolfSSL 15:117db924cf7c 4588 mp_clear(pubkey->pubkey.y);
wolfSSL 15:117db924cf7c 4589 mp_clear(pubkey->pubkey.z);
wolfSSL 15:117db924cf7c 4590 #endif
wolfSSL 15:117db924cf7c 4591 mp_forcezero(&pubkey->k);
wolfSSL 15:117db924cf7c 4592 }
wolfSSL 15:117db924cf7c 4593 else {
wolfSSL 15:117db924cf7c 4594 /* find s = (e + xr)/k
wolfSSL 15:117db924cf7c 4595 = b.(e/k.b + x.r/k.b) */
wolfSSL 15:117db924cf7c 4596
wolfSSL 15:117db924cf7c 4597 /* k = k.b */
wolfSSL 15:117db924cf7c 4598 err = mp_mulmod(&pubkey->k, b, curve->order, &pubkey->k);
wolfSSL 15:117db924cf7c 4599 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 4600
wolfSSL 15:117db924cf7c 4601 /* k = 1/k.b */
wolfSSL 15:117db924cf7c 4602 err = mp_invmod(&pubkey->k, curve->order, &pubkey->k);
wolfSSL 15:117db924cf7c 4603 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 4604
wolfSSL 15:117db924cf7c 4605 /* s = x.r */
wolfSSL 15:117db924cf7c 4606 err = mp_mulmod(&key->k, r, curve->order, s);
wolfSSL 15:117db924cf7c 4607 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 4608
wolfSSL 15:117db924cf7c 4609 /* s = x.r/k.b */
wolfSSL 15:117db924cf7c 4610 err = mp_mulmod(&pubkey->k, s, curve->order, s);
wolfSSL 15:117db924cf7c 4611 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 4612
wolfSSL 15:117db924cf7c 4613 /* e = e/k.b */
wolfSSL 15:117db924cf7c 4614 err = mp_mulmod(&pubkey->k, e, curve->order, e);
wolfSSL 15:117db924cf7c 4615 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 4616
wolfSSL 15:117db924cf7c 4617 /* s = e/k.b + x.r/k.b
wolfSSL 15:117db924cf7c 4618 = (e + x.r)/k.b */
wolfSSL 15:117db924cf7c 4619 err = mp_add(e, s, s);
wolfSSL 15:117db924cf7c 4620 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 4621
wolfSSL 15:117db924cf7c 4622 /* s = b.(e + x.r)/k.b
wolfSSL 15:117db924cf7c 4623 = (e + x.r)/k */
wolfSSL 15:117db924cf7c 4624 err = mp_mulmod(s, b, curve->order, s);
wolfSSL 15:117db924cf7c 4625 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 4626
wolfSSL 15:117db924cf7c 4627 /* s = (e + xr)/k */
wolfSSL 15:117db924cf7c 4628 err = mp_mod(s, curve->order, s);
wolfSSL 15:117db924cf7c 4629 if (err != MP_OKAY) break;
wolfSSL 15:117db924cf7c 4630
wolfSSL 15:117db924cf7c 4631 if (mp_iszero(s) == MP_NO)
wolfSSL 15:117db924cf7c 4632 break;
wolfSSL 15:117db924cf7c 4633 }
wolfSSL 15:117db924cf7c 4634 }
wolfSSL 15:117db924cf7c 4635 mp_clear(b);
wolfSSL 15:117db924cf7c 4636 mp_free(b);
wolfSSL 15:117db924cf7c 4637 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 4638 XFREE(b, key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4639 #endif
wolfSSL 15:117db924cf7c 4640 wc_ecc_free(pubkey);
wolfSSL 15:117db924cf7c 4641 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 4642 XFREE(pubkey, key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4643 #endif
wolfSSL 15:117db924cf7c 4644 }
wolfSSL 15:117db924cf7c 4645 }
wolfSSL 15:117db924cf7c 4646
wolfSSL 15:117db924cf7c 4647 mp_clear(e);
wolfSSL 15:117db924cf7c 4648 wc_ecc_curve_free(curve);
wolfSSL 15:117db924cf7c 4649 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 4650 XFREE(e, key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4651 #endif
wolfSSL 15:117db924cf7c 4652 FREE_CURVE_SPECS();
wolfSSL 15:117db924cf7c 4653 #endif /* WOLFSSL_SP_MATH */
wolfSSL 15:117db924cf7c 4654
wolfSSL 15:117db924cf7c 4655 return err;
wolfSSL 15:117db924cf7c 4656 }
wolfSSL 15:117db924cf7c 4657 #endif /* WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 4658 #endif /* HAVE_ECC_SIGN */
wolfSSL 15:117db924cf7c 4659
wolfSSL 15:117db924cf7c 4660 #ifdef WOLFSSL_CUSTOM_CURVES
wolfSSL 15:117db924cf7c 4661 void wc_ecc_free_curve(const ecc_set_type* curve, void* heap)
wolfSSL 15:117db924cf7c 4662 {
wolfSSL 15:117db924cf7c 4663 if (curve->prime != NULL)
wolfSSL 15:117db924cf7c 4664 XFREE((void*)curve->prime, heap, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 4665 if (curve->Af != NULL)
wolfSSL 15:117db924cf7c 4666 XFREE((void*)curve->Af, heap, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 4667 if (curve->Bf != NULL)
wolfSSL 15:117db924cf7c 4668 XFREE((void*)curve->Bf, heap, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 4669 if (curve->order != NULL)
wolfSSL 15:117db924cf7c 4670 XFREE((void*)curve->order, heap, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 4671 if (curve->Gx != NULL)
wolfSSL 15:117db924cf7c 4672 XFREE((void*)curve->Gx, heap, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 4673 if (curve->Gy != NULL)
wolfSSL 15:117db924cf7c 4674 XFREE((void*)curve->Gy, heap, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 4675
wolfSSL 15:117db924cf7c 4676 XFREE((void*)curve, heap, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 4677
wolfSSL 15:117db924cf7c 4678 (void)heap;
wolfSSL 15:117db924cf7c 4679 }
wolfSSL 15:117db924cf7c 4680 #endif /* WOLFSSL_CUSTOM_CURVES */
wolfSSL 15:117db924cf7c 4681
wolfSSL 15:117db924cf7c 4682 /**
wolfSSL 15:117db924cf7c 4683 Free an ECC key from memory
wolfSSL 15:117db924cf7c 4684 key The key you wish to free
wolfSSL 15:117db924cf7c 4685 */
wolfSSL 15:117db924cf7c 4686 int wc_ecc_free(ecc_key* key)
wolfSSL 15:117db924cf7c 4687 {
wolfSSL 15:117db924cf7c 4688 if (key == NULL) {
wolfSSL 15:117db924cf7c 4689 return 0;
wolfSSL 15:117db924cf7c 4690 }
wolfSSL 15:117db924cf7c 4691
wolfSSL 15:117db924cf7c 4692 #ifdef WOLFSSL_ASYNC_CRYPT
wolfSSL 15:117db924cf7c 4693 #ifdef WC_ASYNC_ENABLE_ECC
wolfSSL 15:117db924cf7c 4694 wolfAsync_DevCtxFree(&key->asyncDev, WOLFSSL_ASYNC_MARKER_ECC);
wolfSSL 15:117db924cf7c 4695 #endif
wolfSSL 15:117db924cf7c 4696 wc_ecc_free_async(key);
wolfSSL 15:117db924cf7c 4697 #endif
wolfSSL 15:117db924cf7c 4698
wolfSSL 15:117db924cf7c 4699 #ifdef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 4700 atmel_ecc_free(key->slot);
wolfSSL 15:117db924cf7c 4701 key->slot = -1;
wolfSSL 15:117db924cf7c 4702 #else
wolfSSL 15:117db924cf7c 4703
wolfSSL 15:117db924cf7c 4704 mp_clear(key->pubkey.x);
wolfSSL 15:117db924cf7c 4705 mp_clear(key->pubkey.y);
wolfSSL 15:117db924cf7c 4706 mp_clear(key->pubkey.z);
wolfSSL 15:117db924cf7c 4707
wolfSSL 15:117db924cf7c 4708 mp_forcezero(&key->k);
wolfSSL 15:117db924cf7c 4709 #endif /* WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 4710
wolfSSL 15:117db924cf7c 4711 #ifdef WOLFSSL_CUSTOM_CURVES
wolfSSL 15:117db924cf7c 4712 if (key->deallocSet && key->dp != NULL)
wolfSSL 15:117db924cf7c 4713 wc_ecc_free_curve(key->dp, key->heap);
wolfSSL 15:117db924cf7c 4714 #endif
wolfSSL 15:117db924cf7c 4715
wolfSSL 15:117db924cf7c 4716 return 0;
wolfSSL 15:117db924cf7c 4717 }
wolfSSL 15:117db924cf7c 4718
wolfSSL 15:117db924cf7c 4719 #if !defined(WOLFSSL_SP_MATH) && !defined(WOLFSSL_ATECC508A)
wolfSSL 15:117db924cf7c 4720 #ifdef ECC_SHAMIR
wolfSSL 15:117db924cf7c 4721
wolfSSL 15:117db924cf7c 4722 /** Computes kA*A + kB*B = C using Shamir's Trick
wolfSSL 15:117db924cf7c 4723 A First point to multiply
wolfSSL 15:117db924cf7c 4724 kA What to multiple A by
wolfSSL 15:117db924cf7c 4725 B Second point to multiply
wolfSSL 15:117db924cf7c 4726 kB What to multiple B by
wolfSSL 15:117db924cf7c 4727 C [out] Destination point (can overlap with A or B)
wolfSSL 15:117db924cf7c 4728 a ECC curve parameter a
wolfSSL 15:117db924cf7c 4729 modulus Modulus for curve
wolfSSL 15:117db924cf7c 4730 return MP_OKAY on success
wolfSSL 15:117db924cf7c 4731 */
wolfSSL 15:117db924cf7c 4732 #ifdef FP_ECC
wolfSSL 15:117db924cf7c 4733 static int normal_ecc_mul2add(ecc_point* A, mp_int* kA,
wolfSSL 15:117db924cf7c 4734 ecc_point* B, mp_int* kB,
wolfSSL 15:117db924cf7c 4735 ecc_point* C, mp_int* a, mp_int* modulus,
wolfSSL 15:117db924cf7c 4736 void* heap)
wolfSSL 15:117db924cf7c 4737 #else
wolfSSL 15:117db924cf7c 4738 int ecc_mul2add(ecc_point* A, mp_int* kA,
wolfSSL 15:117db924cf7c 4739 ecc_point* B, mp_int* kB,
wolfSSL 15:117db924cf7c 4740 ecc_point* C, mp_int* a, mp_int* modulus,
wolfSSL 15:117db924cf7c 4741 void* heap)
wolfSSL 15:117db924cf7c 4742 #endif
wolfSSL 15:117db924cf7c 4743 {
wolfSSL 15:117db924cf7c 4744 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 4745 ecc_point** precomp = NULL;
wolfSSL 15:117db924cf7c 4746 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 4747 ecc_key key;
wolfSSL 15:117db924cf7c 4748 #endif
wolfSSL 15:117db924cf7c 4749 #else
wolfSSL 15:117db924cf7c 4750 ecc_point* precomp[SHAMIR_PRECOMP_SZ];
wolfSSL 15:117db924cf7c 4751 #endif
wolfSSL 15:117db924cf7c 4752 unsigned bitbufA, bitbufB, lenA, lenB, len, nA, nB, nibble;
wolfSSL 15:117db924cf7c 4753 unsigned char* tA;
wolfSSL 15:117db924cf7c 4754 unsigned char* tB;
wolfSSL 15:117db924cf7c 4755 int err = MP_OKAY, first, x, y;
wolfSSL 15:117db924cf7c 4756 mp_digit mp = 0;
wolfSSL 15:117db924cf7c 4757
wolfSSL 15:117db924cf7c 4758 /* argchks */
wolfSSL 15:117db924cf7c 4759 if (A == NULL || kA == NULL || B == NULL || kB == NULL || C == NULL ||
wolfSSL 15:117db924cf7c 4760 modulus == NULL) {
wolfSSL 15:117db924cf7c 4761 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 4762 }
wolfSSL 15:117db924cf7c 4763
wolfSSL 15:117db924cf7c 4764 /* allocate memory */
wolfSSL 15:117db924cf7c 4765 tA = (unsigned char*)XMALLOC(ECC_BUFSIZE, heap, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 4766 if (tA == NULL) {
wolfSSL 15:117db924cf7c 4767 return GEN_MEM_ERR;
wolfSSL 15:117db924cf7c 4768 }
wolfSSL 15:117db924cf7c 4769 tB = (unsigned char*)XMALLOC(ECC_BUFSIZE, heap, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 4770 if (tB == NULL) {
wolfSSL 15:117db924cf7c 4771 XFREE(tA, heap, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 4772 return GEN_MEM_ERR;
wolfSSL 15:117db924cf7c 4773 }
wolfSSL 15:117db924cf7c 4774 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 4775 precomp = (ecc_point**)XMALLOC(sizeof(ecc_point*) * SHAMIR_PRECOMP_SZ, heap,
wolfSSL 15:117db924cf7c 4776 DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 4777 if (precomp == NULL) {
wolfSSL 15:117db924cf7c 4778 XFREE(tB, heap, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 4779 XFREE(tA, heap, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 4780 return GEN_MEM_ERR;
wolfSSL 15:117db924cf7c 4781 }
wolfSSL 15:117db924cf7c 4782 #endif
wolfSSL 15:117db924cf7c 4783 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 4784 key.t1 = (mp_int*)XMALLOC(sizeof(mp_int), heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4785 key.t2 = (mp_int*)XMALLOC(sizeof(mp_int), heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4786 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 4787 key.x = (mp_int*)XMALLOC(sizeof(mp_int), heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4788 key.y = (mp_int*)XMALLOC(sizeof(mp_int), heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4789 key.z = (mp_int*)XMALLOC(sizeof(mp_int), heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4790 #endif
wolfSSL 15:117db924cf7c 4791 if (key.t1 == NULL || key.t2 == NULL
wolfSSL 15:117db924cf7c 4792 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 4793 || key.x == NULL || key.y == NULL || key.z == NULL
wolfSSL 15:117db924cf7c 4794 #endif
wolfSSL 15:117db924cf7c 4795 ) {
wolfSSL 15:117db924cf7c 4796 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 4797 XFREE(key.z, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4798 XFREE(key.y, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4799 XFREE(key.x, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4800 #endif
wolfSSL 15:117db924cf7c 4801 XFREE(key.t2, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4802 XFREE(key.t1, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4803 XFREE(precomp, heap, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 4804 XFREE(tB, heap, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 4805 XFREE(tA, heap, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 4806 return MEMORY_E;
wolfSSL 15:117db924cf7c 4807 }
wolfSSL 15:117db924cf7c 4808 C->key = &key;
wolfSSL 15:117db924cf7c 4809 #endif /* WOLFSSL_SMALL_STACK_CACHE */
wolfSSL 15:117db924cf7c 4810
wolfSSL 15:117db924cf7c 4811 /* init variables */
wolfSSL 15:117db924cf7c 4812 XMEMSET(tA, 0, ECC_BUFSIZE);
wolfSSL 15:117db924cf7c 4813 XMEMSET(tB, 0, ECC_BUFSIZE);
wolfSSL 15:117db924cf7c 4814 #ifndef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 4815 XMEMSET(precomp, 0, sizeof(precomp));
wolfSSL 15:117db924cf7c 4816 #else
wolfSSL 15:117db924cf7c 4817 XMEMSET(precomp, 0, sizeof(ecc_point*) * SHAMIR_PRECOMP_SZ);
wolfSSL 15:117db924cf7c 4818 #endif
wolfSSL 15:117db924cf7c 4819
wolfSSL 15:117db924cf7c 4820 /* get sizes */
wolfSSL 15:117db924cf7c 4821 lenA = mp_unsigned_bin_size(kA);
wolfSSL 15:117db924cf7c 4822 lenB = mp_unsigned_bin_size(kB);
wolfSSL 15:117db924cf7c 4823 len = MAX(lenA, lenB);
wolfSSL 15:117db924cf7c 4824
wolfSSL 15:117db924cf7c 4825 /* sanity check */
wolfSSL 15:117db924cf7c 4826 if ((lenA > ECC_BUFSIZE) || (lenB > ECC_BUFSIZE)) {
wolfSSL 15:117db924cf7c 4827 err = BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 4828 }
wolfSSL 15:117db924cf7c 4829
wolfSSL 15:117db924cf7c 4830 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 4831 /* extract and justify kA */
wolfSSL 15:117db924cf7c 4832 err = mp_to_unsigned_bin(kA, (len - lenA) + tA);
wolfSSL 15:117db924cf7c 4833
wolfSSL 15:117db924cf7c 4834 /* extract and justify kB */
wolfSSL 15:117db924cf7c 4835 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4836 err = mp_to_unsigned_bin(kB, (len - lenB) + tB);
wolfSSL 15:117db924cf7c 4837
wolfSSL 15:117db924cf7c 4838 /* allocate the table */
wolfSSL 15:117db924cf7c 4839 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 4840 for (x = 0; x < SHAMIR_PRECOMP_SZ; x++) {
wolfSSL 15:117db924cf7c 4841 precomp[x] = wc_ecc_new_point_h(heap);
wolfSSL 15:117db924cf7c 4842 if (precomp[x] == NULL) {
wolfSSL 15:117db924cf7c 4843 err = GEN_MEM_ERR;
wolfSSL 15:117db924cf7c 4844 break;
wolfSSL 15:117db924cf7c 4845 }
wolfSSL 15:117db924cf7c 4846 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 4847 precomp[x]->key = &key;
wolfSSL 15:117db924cf7c 4848 #endif
wolfSSL 15:117db924cf7c 4849 }
wolfSSL 15:117db924cf7c 4850 }
wolfSSL 15:117db924cf7c 4851 }
wolfSSL 15:117db924cf7c 4852
wolfSSL 15:117db924cf7c 4853 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4854 /* init montgomery reduction */
wolfSSL 15:117db924cf7c 4855 err = mp_montgomery_setup(modulus, &mp);
wolfSSL 15:117db924cf7c 4856
wolfSSL 15:117db924cf7c 4857 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 4858 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 4859 mp_int* mu = NULL;
wolfSSL 15:117db924cf7c 4860 #else
wolfSSL 15:117db924cf7c 4861 mp_int mu[1];
wolfSSL 15:117db924cf7c 4862 #endif
wolfSSL 15:117db924cf7c 4863 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 4864 mu = (mp_int*)XMALLOC(sizeof(mp_int), heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4865 if (mu == NULL)
wolfSSL 15:117db924cf7c 4866 err = MEMORY_E;
wolfSSL 15:117db924cf7c 4867 #endif
wolfSSL 15:117db924cf7c 4868 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 4869 err = mp_init(mu);
wolfSSL 15:117db924cf7c 4870 }
wolfSSL 15:117db924cf7c 4871 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 4872 err = mp_montgomery_calc_normalization(mu, modulus);
wolfSSL 15:117db924cf7c 4873
wolfSSL 15:117db924cf7c 4874 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4875 /* copy ones ... */
wolfSSL 15:117db924cf7c 4876 err = mp_mulmod(A->x, mu, modulus, precomp[1]->x);
wolfSSL 15:117db924cf7c 4877
wolfSSL 15:117db924cf7c 4878 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4879 err = mp_mulmod(A->y, mu, modulus, precomp[1]->y);
wolfSSL 15:117db924cf7c 4880 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4881 err = mp_mulmod(A->z, mu, modulus, precomp[1]->z);
wolfSSL 15:117db924cf7c 4882
wolfSSL 15:117db924cf7c 4883 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4884 err = mp_mulmod(B->x, mu, modulus, precomp[1<<2]->x);
wolfSSL 15:117db924cf7c 4885 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4886 err = mp_mulmod(B->y, mu, modulus, precomp[1<<2]->y);
wolfSSL 15:117db924cf7c 4887 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4888 err = mp_mulmod(B->z, mu, modulus, precomp[1<<2]->z);
wolfSSL 15:117db924cf7c 4889
wolfSSL 15:117db924cf7c 4890 /* done with mu */
wolfSSL 15:117db924cf7c 4891 mp_clear(mu);
wolfSSL 15:117db924cf7c 4892 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 4893 XFREE(mu, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 4894 #endif
wolfSSL 15:117db924cf7c 4895 }
wolfSSL 15:117db924cf7c 4896 }
wolfSSL 15:117db924cf7c 4897
wolfSSL 15:117db924cf7c 4898 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4899 /* precomp [i,0](A + B) table */
wolfSSL 15:117db924cf7c 4900 err = ecc_projective_dbl_point(precomp[1], precomp[2], a, modulus, mp);
wolfSSL 15:117db924cf7c 4901
wolfSSL 15:117db924cf7c 4902 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4903 err = ecc_projective_add_point(precomp[1], precomp[2], precomp[3],
wolfSSL 15:117db924cf7c 4904 a, modulus, mp);
wolfSSL 15:117db924cf7c 4905 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4906 /* precomp [0,i](A + B) table */
wolfSSL 15:117db924cf7c 4907 err = ecc_projective_dbl_point(precomp[1<<2], precomp[2<<2], a, modulus, mp);
wolfSSL 15:117db924cf7c 4908
wolfSSL 15:117db924cf7c 4909 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4910 err = ecc_projective_add_point(precomp[1<<2], precomp[2<<2], precomp[3<<2],
wolfSSL 15:117db924cf7c 4911 a, modulus, mp);
wolfSSL 15:117db924cf7c 4912
wolfSSL 15:117db924cf7c 4913 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 4914 /* precomp [i,j](A + B) table (i != 0, j != 0) */
wolfSSL 15:117db924cf7c 4915 for (x = 1; x < 4; x++) {
wolfSSL 15:117db924cf7c 4916 for (y = 1; y < 4; y++) {
wolfSSL 15:117db924cf7c 4917 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 4918 err = ecc_projective_add_point(precomp[x], precomp[(y<<2)],
wolfSSL 15:117db924cf7c 4919 precomp[x+(y<<2)], a, modulus, mp);
wolfSSL 15:117db924cf7c 4920 }
wolfSSL 15:117db924cf7c 4921 }
wolfSSL 15:117db924cf7c 4922 }
wolfSSL 15:117db924cf7c 4923 }
wolfSSL 15:117db924cf7c 4924
wolfSSL 15:117db924cf7c 4925 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 4926 nibble = 3;
wolfSSL 15:117db924cf7c 4927 first = 1;
wolfSSL 15:117db924cf7c 4928 bitbufA = tA[0];
wolfSSL 15:117db924cf7c 4929 bitbufB = tB[0];
wolfSSL 15:117db924cf7c 4930
wolfSSL 15:117db924cf7c 4931 /* for every byte of the multiplicands */
wolfSSL 15:117db924cf7c 4932 for (x = 0;; ) {
wolfSSL 15:117db924cf7c 4933 /* grab a nibble */
wolfSSL 15:117db924cf7c 4934 if (++nibble == 4) {
wolfSSL 15:117db924cf7c 4935 if (x == (int)len) break;
wolfSSL 15:117db924cf7c 4936 bitbufA = tA[x];
wolfSSL 15:117db924cf7c 4937 bitbufB = tB[x];
wolfSSL 15:117db924cf7c 4938 nibble = 0;
wolfSSL 15:117db924cf7c 4939 x++;
wolfSSL 15:117db924cf7c 4940 }
wolfSSL 15:117db924cf7c 4941
wolfSSL 15:117db924cf7c 4942 /* extract two bits from both, shift/update */
wolfSSL 15:117db924cf7c 4943 nA = (bitbufA >> 6) & 0x03;
wolfSSL 15:117db924cf7c 4944 nB = (bitbufB >> 6) & 0x03;
wolfSSL 15:117db924cf7c 4945 bitbufA = (bitbufA << 2) & 0xFF;
wolfSSL 15:117db924cf7c 4946 bitbufB = (bitbufB << 2) & 0xFF;
wolfSSL 15:117db924cf7c 4947
wolfSSL 15:117db924cf7c 4948 /* if both zero, if first, continue */
wolfSSL 15:117db924cf7c 4949 if ((nA == 0) && (nB == 0) && (first == 1)) {
wolfSSL 15:117db924cf7c 4950 continue;
wolfSSL 15:117db924cf7c 4951 }
wolfSSL 15:117db924cf7c 4952
wolfSSL 15:117db924cf7c 4953 /* double twice, only if this isn't the first */
wolfSSL 15:117db924cf7c 4954 if (first == 0) {
wolfSSL 15:117db924cf7c 4955 /* double twice */
wolfSSL 15:117db924cf7c 4956 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4957 err = ecc_projective_dbl_point(C, C, a, modulus, mp);
wolfSSL 15:117db924cf7c 4958 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4959 err = ecc_projective_dbl_point(C, C, a, modulus, mp);
wolfSSL 15:117db924cf7c 4960 else
wolfSSL 15:117db924cf7c 4961 break;
wolfSSL 15:117db924cf7c 4962 }
wolfSSL 15:117db924cf7c 4963
wolfSSL 15:117db924cf7c 4964 /* if not both zero */
wolfSSL 15:117db924cf7c 4965 if ((nA != 0) || (nB != 0)) {
wolfSSL 15:117db924cf7c 4966 if (first == 1) {
wolfSSL 15:117db924cf7c 4967 /* if first, copy from table */
wolfSSL 15:117db924cf7c 4968 first = 0;
wolfSSL 15:117db924cf7c 4969 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4970 err = mp_copy(precomp[nA + (nB<<2)]->x, C->x);
wolfSSL 15:117db924cf7c 4971
wolfSSL 15:117db924cf7c 4972 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4973 err = mp_copy(precomp[nA + (nB<<2)]->y, C->y);
wolfSSL 15:117db924cf7c 4974
wolfSSL 15:117db924cf7c 4975 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4976 err = mp_copy(precomp[nA + (nB<<2)]->z, C->z);
wolfSSL 15:117db924cf7c 4977 else
wolfSSL 15:117db924cf7c 4978 break;
wolfSSL 15:117db924cf7c 4979 } else {
wolfSSL 15:117db924cf7c 4980 /* if not first, add from table */
wolfSSL 15:117db924cf7c 4981 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4982 err = ecc_projective_add_point(C, precomp[nA + (nB<<2)], C,
wolfSSL 15:117db924cf7c 4983 a, modulus, mp);
wolfSSL 15:117db924cf7c 4984 else
wolfSSL 15:117db924cf7c 4985 break;
wolfSSL 15:117db924cf7c 4986 }
wolfSSL 15:117db924cf7c 4987 }
wolfSSL 15:117db924cf7c 4988 }
wolfSSL 15:117db924cf7c 4989 }
wolfSSL 15:117db924cf7c 4990
wolfSSL 15:117db924cf7c 4991 /* reduce to affine */
wolfSSL 15:117db924cf7c 4992 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 4993 err = ecc_map(C, modulus, mp);
wolfSSL 15:117db924cf7c 4994
wolfSSL 15:117db924cf7c 4995 /* clean up */
wolfSSL 15:117db924cf7c 4996 for (x = 0; x < SHAMIR_PRECOMP_SZ; x++) {
wolfSSL 15:117db924cf7c 4997 wc_ecc_del_point_h(precomp[x], heap);
wolfSSL 15:117db924cf7c 4998 }
wolfSSL 15:117db924cf7c 4999
wolfSSL 15:117db924cf7c 5000 ForceZero(tA, ECC_BUFSIZE);
wolfSSL 15:117db924cf7c 5001 ForceZero(tB, ECC_BUFSIZE);
wolfSSL 15:117db924cf7c 5002 #ifdef WOLFSSL_SMALL_STACK_CACHE
wolfSSL 15:117db924cf7c 5003 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 5004 XFREE(key.z, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5005 XFREE(key.y, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5006 XFREE(key.x, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5007 #endif
wolfSSL 15:117db924cf7c 5008 XFREE(key.t2, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5009 XFREE(key.t1, heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5010 C->key = NULL;
wolfSSL 15:117db924cf7c 5011 #endif
wolfSSL 15:117db924cf7c 5012 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 5013 XFREE(precomp, heap, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 5014 #endif
wolfSSL 15:117db924cf7c 5015 XFREE(tB, heap, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 5016 XFREE(tA, heap, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 5017
wolfSSL 15:117db924cf7c 5018 return err;
wolfSSL 15:117db924cf7c 5019 }
wolfSSL 15:117db924cf7c 5020
wolfSSL 15:117db924cf7c 5021 #endif /* ECC_SHAMIR */
wolfSSL 15:117db924cf7c 5022 #endif /* !WOLFSSL_SP_MATH && !WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 5023
wolfSSL 15:117db924cf7c 5024
wolfSSL 15:117db924cf7c 5025 #ifdef HAVE_ECC_VERIFY
wolfSSL 15:117db924cf7c 5026 #ifndef NO_ASN
wolfSSL 15:117db924cf7c 5027 /* verify
wolfSSL 15:117db924cf7c 5028 *
wolfSSL 15:117db924cf7c 5029 * w = s^-1 mod n
wolfSSL 15:117db924cf7c 5030 * u1 = xw
wolfSSL 15:117db924cf7c 5031 * u2 = rw
wolfSSL 15:117db924cf7c 5032 * X = u1*G + u2*Q
wolfSSL 15:117db924cf7c 5033 * v = X_x1 mod n
wolfSSL 15:117db924cf7c 5034 * accept if v == r
wolfSSL 15:117db924cf7c 5035 */
wolfSSL 15:117db924cf7c 5036
wolfSSL 15:117db924cf7c 5037 /**
wolfSSL 15:117db924cf7c 5038 Verify an ECC signature
wolfSSL 15:117db924cf7c 5039 sig The signature to verify
wolfSSL 15:117db924cf7c 5040 siglen The length of the signature (octets)
wolfSSL 15:117db924cf7c 5041 hash The hash (message digest) that was signed
wolfSSL 15:117db924cf7c 5042 hashlen The length of the hash (octets)
wolfSSL 15:117db924cf7c 5043 res Result of signature, 1==valid, 0==invalid
wolfSSL 15:117db924cf7c 5044 key The corresponding public ECC key
wolfSSL 15:117db924cf7c 5045 return MP_OKAY if successful (even if the signature is not valid)
wolfSSL 15:117db924cf7c 5046 */
wolfSSL 15:117db924cf7c 5047 int wc_ecc_verify_hash(const byte* sig, word32 siglen, const byte* hash,
wolfSSL 15:117db924cf7c 5048 word32 hashlen, int* res, ecc_key* key)
wolfSSL 15:117db924cf7c 5049 {
wolfSSL 15:117db924cf7c 5050 int err;
wolfSSL 15:117db924cf7c 5051 mp_int *r = NULL, *s = NULL;
wolfSSL 15:117db924cf7c 5052 #ifndef WOLFSSL_ASYNC_CRYPT
wolfSSL 15:117db924cf7c 5053 #ifndef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 5054 mp_int r_lcl[1], s_lcl[1];
wolfSSL 15:117db924cf7c 5055 #endif
wolfSSL 15:117db924cf7c 5056 #endif
wolfSSL 15:117db924cf7c 5057
wolfSSL 15:117db924cf7c 5058 if (sig == NULL || hash == NULL || res == NULL || key == NULL) {
wolfSSL 15:117db924cf7c 5059 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 5060 }
wolfSSL 15:117db924cf7c 5061
wolfSSL 15:117db924cf7c 5062 #ifdef WOLF_CRYPTO_DEV
wolfSSL 15:117db924cf7c 5063 if (key->devId != INVALID_DEVID) {
wolfSSL 15:117db924cf7c 5064 err = wc_CryptoDev_EccVerify(sig, siglen, hash, hashlen, res, key);
wolfSSL 15:117db924cf7c 5065 if (err != NOT_COMPILED_IN)
wolfSSL 15:117db924cf7c 5066 return err;
wolfSSL 15:117db924cf7c 5067 }
wolfSSL 15:117db924cf7c 5068 #endif
wolfSSL 15:117db924cf7c 5069
wolfSSL 15:117db924cf7c 5070 #ifdef WOLFSSL_ASYNC_CRYPT
wolfSSL 15:117db924cf7c 5071 err = wc_ecc_alloc_async(key);
wolfSSL 15:117db924cf7c 5072 if (err != 0)
wolfSSL 15:117db924cf7c 5073 return err;
wolfSSL 15:117db924cf7c 5074 r = key->r;
wolfSSL 15:117db924cf7c 5075 s = key->s;
wolfSSL 15:117db924cf7c 5076 #else
wolfSSL 15:117db924cf7c 5077 #ifndef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 5078 r = r_lcl;
wolfSSL 15:117db924cf7c 5079 s = s_lcl;
wolfSSL 15:117db924cf7c 5080 #else
wolfSSL 15:117db924cf7c 5081 r = (mp_int*)XMALLOC(sizeof(mp_int), key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5082 if (r == NULL)
wolfSSL 15:117db924cf7c 5083 return MEMORY_E;
wolfSSL 15:117db924cf7c 5084 s = (mp_int*)XMALLOC(sizeof(mp_int), key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5085 if (s == NULL) {
wolfSSL 15:117db924cf7c 5086 XFREE(r, key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5087 return MEMORY_E;
wolfSSL 15:117db924cf7c 5088 }
wolfSSL 15:117db924cf7c 5089 #endif
wolfSSL 15:117db924cf7c 5090 #endif
wolfSSL 15:117db924cf7c 5091
wolfSSL 15:117db924cf7c 5092 switch(key->state) {
wolfSSL 15:117db924cf7c 5093 case ECC_STATE_NONE:
wolfSSL 15:117db924cf7c 5094 case ECC_STATE_VERIFY_DECODE:
wolfSSL 15:117db924cf7c 5095 key->state = ECC_STATE_VERIFY_DECODE;
wolfSSL 15:117db924cf7c 5096
wolfSSL 15:117db924cf7c 5097 /* default to invalid signature */
wolfSSL 15:117db924cf7c 5098 *res = 0;
wolfSSL 15:117db924cf7c 5099
wolfSSL 15:117db924cf7c 5100 /* Note, DecodeECC_DSA_Sig() calls mp_init() on r and s.
wolfSSL 15:117db924cf7c 5101 * If either of those don't allocate correctly, none of
wolfSSL 15:117db924cf7c 5102 * the rest of this function will execute, and everything
wolfSSL 15:117db924cf7c 5103 * gets cleaned up at the end. */
wolfSSL 15:117db924cf7c 5104 /* decode DSA header */
wolfSSL 15:117db924cf7c 5105 err = DecodeECC_DSA_Sig(sig, siglen, r, s);
wolfSSL 15:117db924cf7c 5106 if (err < 0) {
wolfSSL 15:117db924cf7c 5107 break;
wolfSSL 15:117db924cf7c 5108 }
wolfSSL 15:117db924cf7c 5109 FALL_THROUGH;
wolfSSL 15:117db924cf7c 5110
wolfSSL 15:117db924cf7c 5111 case ECC_STATE_VERIFY_DO:
wolfSSL 15:117db924cf7c 5112 key->state = ECC_STATE_VERIFY_DO;
wolfSSL 15:117db924cf7c 5113
wolfSSL 15:117db924cf7c 5114 err = wc_ecc_verify_hash_ex(r, s, hash, hashlen, res, key);
wolfSSL 15:117db924cf7c 5115
wolfSSL 15:117db924cf7c 5116 #ifndef WOLFSSL_ASYNC_CRYPT
wolfSSL 15:117db924cf7c 5117 /* done with R/S */
wolfSSL 15:117db924cf7c 5118 mp_clear(r);
wolfSSL 15:117db924cf7c 5119 mp_clear(s);
wolfSSL 15:117db924cf7c 5120 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 5121 XFREE(s, key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5122 XFREE(r, key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5123 #endif
wolfSSL 15:117db924cf7c 5124 #endif
wolfSSL 15:117db924cf7c 5125
wolfSSL 15:117db924cf7c 5126 if (err < 0) {
wolfSSL 15:117db924cf7c 5127 break;
wolfSSL 15:117db924cf7c 5128 }
wolfSSL 15:117db924cf7c 5129 FALL_THROUGH;
wolfSSL 15:117db924cf7c 5130
wolfSSL 15:117db924cf7c 5131 case ECC_STATE_VERIFY_RES:
wolfSSL 15:117db924cf7c 5132 key->state = ECC_STATE_VERIFY_RES;
wolfSSL 15:117db924cf7c 5133 err = 0;
wolfSSL 15:117db924cf7c 5134 break;
wolfSSL 15:117db924cf7c 5135
wolfSSL 15:117db924cf7c 5136 default:
wolfSSL 15:117db924cf7c 5137 err = BAD_STATE_E;
wolfSSL 15:117db924cf7c 5138 }
wolfSSL 15:117db924cf7c 5139
wolfSSL 15:117db924cf7c 5140 /* if async pending then return and skip done cleanup below */
wolfSSL 15:117db924cf7c 5141 if (err == WC_PENDING_E) {
wolfSSL 15:117db924cf7c 5142 key->state++;
wolfSSL 15:117db924cf7c 5143 return err;
wolfSSL 15:117db924cf7c 5144 }
wolfSSL 15:117db924cf7c 5145
wolfSSL 15:117db924cf7c 5146 /* cleanup */
wolfSSL 15:117db924cf7c 5147 #ifdef WOLFSSL_ASYNC_CRYPT
wolfSSL 15:117db924cf7c 5148 wc_ecc_free_async(key);
wolfSSL 15:117db924cf7c 5149 #endif
wolfSSL 15:117db924cf7c 5150 key->state = ECC_STATE_NONE;
wolfSSL 15:117db924cf7c 5151
wolfSSL 15:117db924cf7c 5152 return err;
wolfSSL 15:117db924cf7c 5153 }
wolfSSL 15:117db924cf7c 5154 #endif /* !NO_ASN */
wolfSSL 15:117db924cf7c 5155
wolfSSL 15:117db924cf7c 5156
wolfSSL 15:117db924cf7c 5157 /**
wolfSSL 15:117db924cf7c 5158 Verify an ECC signature
wolfSSL 15:117db924cf7c 5159 r The signature R component to verify
wolfSSL 15:117db924cf7c 5160 s The signature S component to verify
wolfSSL 15:117db924cf7c 5161 hash The hash (message digest) that was signed
wolfSSL 15:117db924cf7c 5162 hashlen The length of the hash (octets)
wolfSSL 15:117db924cf7c 5163 res Result of signature, 1==valid, 0==invalid
wolfSSL 15:117db924cf7c 5164 key The corresponding public ECC key
wolfSSL 15:117db924cf7c 5165 return MP_OKAY if successful (even if the signature is not valid)
wolfSSL 15:117db924cf7c 5166 */
wolfSSL 15:117db924cf7c 5167 int wc_ecc_verify_hash_ex(mp_int *r, mp_int *s, const byte* hash,
wolfSSL 15:117db924cf7c 5168 word32 hashlen, int* res, ecc_key* key)
wolfSSL 15:117db924cf7c 5169 {
wolfSSL 15:117db924cf7c 5170 int err;
wolfSSL 15:117db924cf7c 5171 #ifdef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 5172 byte sigRS[ATECC_KEY_SIZE*2];
wolfSSL 15:117db924cf7c 5173 #elif !defined(WOLFSSL_SP_MATH)
wolfSSL 15:117db924cf7c 5174 int did_init = 0;
wolfSSL 15:117db924cf7c 5175 ecc_point *mG = NULL, *mQ = NULL;
wolfSSL 15:117db924cf7c 5176 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 5177 mp_int* v = NULL;
wolfSSL 15:117db924cf7c 5178 mp_int* w = NULL;
wolfSSL 15:117db924cf7c 5179 mp_int* u1 = NULL;
wolfSSL 15:117db924cf7c 5180 mp_int* u2 = NULL;
wolfSSL 15:117db924cf7c 5181 #if !defined(WOLFSSL_ASYNC_CRYPT) || !defined(HAVE_CAVIUM_V)
wolfSSL 15:117db924cf7c 5182 mp_int* e_lcl = NULL;
wolfSSL 15:117db924cf7c 5183 #endif
wolfSSL 15:117db924cf7c 5184 #else /* WOLFSSL_SMALL_STACK */
wolfSSL 15:117db924cf7c 5185 mp_int v[1];
wolfSSL 15:117db924cf7c 5186 mp_int w[1];
wolfSSL 15:117db924cf7c 5187 mp_int u1[1];
wolfSSL 15:117db924cf7c 5188 mp_int u2[1];
wolfSSL 15:117db924cf7c 5189 #if !defined(WOLFSSL_ASYNC_CRYPT) || !defined(HAVE_CAVIUM_V)
wolfSSL 15:117db924cf7c 5190 mp_int e_lcl[1];
wolfSSL 15:117db924cf7c 5191 #endif
wolfSSL 15:117db924cf7c 5192 #endif /* WOLFSSL_SMALL_STACK */
wolfSSL 15:117db924cf7c 5193 mp_int* e;
wolfSSL 15:117db924cf7c 5194 DECLARE_CURVE_SPECS(curve, ECC_CURVE_FIELD_COUNT);
wolfSSL 15:117db924cf7c 5195 #endif
wolfSSL 15:117db924cf7c 5196
wolfSSL 15:117db924cf7c 5197 if (r == NULL || s == NULL || hash == NULL || res == NULL || key == NULL)
wolfSSL 15:117db924cf7c 5198 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 5199
wolfSSL 15:117db924cf7c 5200 /* default to invalid signature */
wolfSSL 15:117db924cf7c 5201 *res = 0;
wolfSSL 15:117db924cf7c 5202
wolfSSL 15:117db924cf7c 5203 /* is the IDX valid ? */
wolfSSL 15:117db924cf7c 5204 if (wc_ecc_is_valid_idx(key->idx) != 1) {
wolfSSL 15:117db924cf7c 5205 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 5206 }
wolfSSL 15:117db924cf7c 5207
wolfSSL 15:117db924cf7c 5208 #if defined(WOLFSSL_ASYNC_CRYPT) && defined(WC_ASYNC_ENABLE_ECC) && \
wolfSSL 15:117db924cf7c 5209 defined(WOLFSSL_ASYNC_CRYPT_TEST)
wolfSSL 15:117db924cf7c 5210 if (key->asyncDev.marker == WOLFSSL_ASYNC_MARKER_ECC) {
wolfSSL 15:117db924cf7c 5211 if (wc_AsyncTestInit(&key->asyncDev, ASYNC_TEST_ECC_VERIFY)) {
wolfSSL 15:117db924cf7c 5212 WC_ASYNC_TEST* testDev = &key->asyncDev.test;
wolfSSL 15:117db924cf7c 5213 testDev->eccVerify.r = r;
wolfSSL 15:117db924cf7c 5214 testDev->eccVerify.s = s;
wolfSSL 15:117db924cf7c 5215 testDev->eccVerify.hash = hash;
wolfSSL 15:117db924cf7c 5216 testDev->eccVerify.hashlen = hashlen;
wolfSSL 15:117db924cf7c 5217 testDev->eccVerify.stat = res;
wolfSSL 15:117db924cf7c 5218 testDev->eccVerify.key = key;
wolfSSL 15:117db924cf7c 5219 return WC_PENDING_E;
wolfSSL 15:117db924cf7c 5220 }
wolfSSL 15:117db924cf7c 5221 }
wolfSSL 15:117db924cf7c 5222 #endif
wolfSSL 15:117db924cf7c 5223
wolfSSL 15:117db924cf7c 5224 #ifdef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 5225 /* Extract R and S */
wolfSSL 15:117db924cf7c 5226 err = mp_to_unsigned_bin(r, &sigRS[0]);
wolfSSL 15:117db924cf7c 5227 if (err != MP_OKAY) {
wolfSSL 15:117db924cf7c 5228 return err;
wolfSSL 15:117db924cf7c 5229 }
wolfSSL 15:117db924cf7c 5230 err = mp_to_unsigned_bin(s, &sigRS[ATECC_KEY_SIZE]);
wolfSSL 15:117db924cf7c 5231 if (err != MP_OKAY) {
wolfSSL 15:117db924cf7c 5232 return err;
wolfSSL 15:117db924cf7c 5233 }
wolfSSL 15:117db924cf7c 5234
wolfSSL 15:117db924cf7c 5235 err = atcatls_verify(hash, sigRS, key->pubkey_raw, (bool*)res);
wolfSSL 15:117db924cf7c 5236 if (err != ATCA_SUCCESS) {
wolfSSL 15:117db924cf7c 5237 return BAD_COND_E;
wolfSSL 15:117db924cf7c 5238 }
wolfSSL 15:117db924cf7c 5239 (void)hashlen;
wolfSSL 15:117db924cf7c 5240
wolfSSL 15:117db924cf7c 5241 #else
wolfSSL 15:117db924cf7c 5242 /* checking if private key with no public part */
wolfSSL 15:117db924cf7c 5243 if (key->type == ECC_PRIVATEKEY_ONLY) {
wolfSSL 15:117db924cf7c 5244 WOLFSSL_MSG("Verify called with private key, generating public part");
wolfSSL 15:117db924cf7c 5245 err = wc_ecc_make_pub_ex(key, NULL, NULL);
wolfSSL 15:117db924cf7c 5246 if (err != MP_OKAY) {
wolfSSL 15:117db924cf7c 5247 WOLFSSL_MSG("Unable to extract public key");
wolfSSL 15:117db924cf7c 5248 return err;
wolfSSL 15:117db924cf7c 5249 }
wolfSSL 15:117db924cf7c 5250 }
wolfSSL 15:117db924cf7c 5251
wolfSSL 15:117db924cf7c 5252 #ifdef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 5253 if (key->idx != ECC_CUSTOM_IDX && ecc_sets[key->idx].id == ECC_SECP256R1) {
wolfSSL 15:117db924cf7c 5254 return sp_ecc_verify_256(hash, hashlen, key->pubkey.x, key->pubkey.y,
wolfSSL 15:117db924cf7c 5255 key->pubkey.z, r, s, res, key->heap);
wolfSSL 15:117db924cf7c 5256 }
wolfSSL 15:117db924cf7c 5257 else
wolfSSL 15:117db924cf7c 5258 return WC_KEY_SIZE_E;
wolfSSL 15:117db924cf7c 5259 #else
wolfSSL 15:117db924cf7c 5260 #ifdef WOLFSSL_HAVE_SP_ECC
wolfSSL 15:117db924cf7c 5261 #ifndef WOLFSSL_SP_NO_256
wolfSSL 15:117db924cf7c 5262 #if defined(WOLFSSL_ASYNC_CRYPT) && defined(WC_ASYNC_ENABLE_ECC) && \
wolfSSL 15:117db924cf7c 5263 defined(WOLFSSL_ASYNC_CRYPT_TEST)
wolfSSL 15:117db924cf7c 5264 if (key->asyncDev.marker != WOLFSSL_ASYNC_MARKER_ECC)
wolfSSL 15:117db924cf7c 5265 #endif
wolfSSL 15:117db924cf7c 5266 {
wolfSSL 15:117db924cf7c 5267 if (key->idx != ECC_CUSTOM_IDX && ecc_sets[key->idx].id == ECC_SECP256R1)
wolfSSL 15:117db924cf7c 5268 return sp_ecc_verify_256(hash, hashlen, key->pubkey.x, key->pubkey.y,
wolfSSL 15:117db924cf7c 5269 key->pubkey.z,r, s, res, key->heap);
wolfSSL 15:117db924cf7c 5270 }
wolfSSL 15:117db924cf7c 5271 #endif /* WOLFSSL_SP_NO_256 */
wolfSSL 15:117db924cf7c 5272 #endif /* WOLFSSL_HAVE_SP_ECC */
wolfSSL 15:117db924cf7c 5273
wolfSSL 15:117db924cf7c 5274 ALLOC_CURVE_SPECS(ECC_CURVE_FIELD_COUNT);
wolfSSL 15:117db924cf7c 5275
wolfSSL 15:117db924cf7c 5276 #if defined(WOLFSSL_ASYNC_CRYPT) && defined(HAVE_CAVIUM_V)
wolfSSL 15:117db924cf7c 5277 err = wc_ecc_alloc_mpint(key, &key->e);
wolfSSL 15:117db924cf7c 5278 if (err != 0) {
wolfSSL 15:117db924cf7c 5279 FREE_CURVE_SPECS();
wolfSSL 15:117db924cf7c 5280 return err;
wolfSSL 15:117db924cf7c 5281 }
wolfSSL 15:117db924cf7c 5282 e = key->e;
wolfSSL 15:117db924cf7c 5283 #else
wolfSSL 15:117db924cf7c 5284 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 5285 e_lcl = (mp_int*)XMALLOC(sizeof(mp_int), key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5286 if (e_lcl == NULL) {
wolfSSL 15:117db924cf7c 5287 FREE_CURVE_SPECS();
wolfSSL 15:117db924cf7c 5288 return MEMORY_E;
wolfSSL 15:117db924cf7c 5289 }
wolfSSL 15:117db924cf7c 5290 #endif
wolfSSL 15:117db924cf7c 5291 e = e_lcl;
wolfSSL 15:117db924cf7c 5292 #endif
wolfSSL 15:117db924cf7c 5293
wolfSSL 15:117db924cf7c 5294 err = mp_init(e);
wolfSSL 15:117db924cf7c 5295 if (err != MP_OKAY)
wolfSSL 15:117db924cf7c 5296 return MEMORY_E;
wolfSSL 15:117db924cf7c 5297
wolfSSL 15:117db924cf7c 5298 /* read in the specs for this curve */
wolfSSL 15:117db924cf7c 5299 err = wc_ecc_curve_load(key->dp, &curve, ECC_CURVE_FIELD_ALL);
wolfSSL 15:117db924cf7c 5300
wolfSSL 15:117db924cf7c 5301 /* check for zero */
wolfSSL 15:117db924cf7c 5302 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 5303 if (mp_iszero(r) == MP_YES || mp_iszero(s) == MP_YES ||
wolfSSL 15:117db924cf7c 5304 mp_cmp(r, curve->order) != MP_LT ||
wolfSSL 15:117db924cf7c 5305 mp_cmp(s, curve->order) != MP_LT) {
wolfSSL 15:117db924cf7c 5306 err = MP_ZERO_E;
wolfSSL 15:117db924cf7c 5307 }
wolfSSL 15:117db924cf7c 5308 }
wolfSSL 15:117db924cf7c 5309
wolfSSL 15:117db924cf7c 5310 /* read hash */
wolfSSL 15:117db924cf7c 5311 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 5312 /* we may need to truncate if hash is longer than key size */
wolfSSL 15:117db924cf7c 5313 unsigned int orderBits = mp_count_bits(curve->order);
wolfSSL 15:117db924cf7c 5314
wolfSSL 15:117db924cf7c 5315 /* truncate down to byte size, may be all that's needed */
wolfSSL 15:117db924cf7c 5316 if ( (WOLFSSL_BIT_SIZE * hashlen) > orderBits)
wolfSSL 15:117db924cf7c 5317 hashlen = (orderBits + WOLFSSL_BIT_SIZE - 1) / WOLFSSL_BIT_SIZE;
wolfSSL 15:117db924cf7c 5318 err = mp_read_unsigned_bin(e, hash, hashlen);
wolfSSL 15:117db924cf7c 5319
wolfSSL 15:117db924cf7c 5320 /* may still need bit truncation too */
wolfSSL 15:117db924cf7c 5321 if (err == MP_OKAY && (WOLFSSL_BIT_SIZE * hashlen) > orderBits)
wolfSSL 15:117db924cf7c 5322 mp_rshb(e, WOLFSSL_BIT_SIZE - (orderBits & 0x7));
wolfSSL 15:117db924cf7c 5323 }
wolfSSL 15:117db924cf7c 5324
wolfSSL 15:117db924cf7c 5325 /* check for async hardware acceleration */
wolfSSL 15:117db924cf7c 5326 #if defined(WOLFSSL_ASYNC_CRYPT) && defined(WC_ASYNC_ENABLE_ECC)
wolfSSL 15:117db924cf7c 5327 if (key->asyncDev.marker == WOLFSSL_ASYNC_MARKER_ECC) {
wolfSSL 15:117db924cf7c 5328 #if defined(HAVE_CAVIUM_V) || defined(HAVE_INTEL_QA)
wolfSSL 15:117db924cf7c 5329 #ifdef HAVE_CAVIUM_V
wolfSSL 15:117db924cf7c 5330 if (NitroxEccIsCurveSupported(key))
wolfSSL 15:117db924cf7c 5331 #endif
wolfSSL 15:117db924cf7c 5332 {
wolfSSL 15:117db924cf7c 5333 word32 keySz = key->dp->size;
wolfSSL 15:117db924cf7c 5334
wolfSSL 15:117db924cf7c 5335 err = wc_mp_to_bigint_sz(e, &e->raw, keySz);
wolfSSL 15:117db924cf7c 5336 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5337 err = wc_mp_to_bigint_sz(key->pubkey.x, &key->pubkey.x->raw, keySz);
wolfSSL 15:117db924cf7c 5338 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5339 err = wc_mp_to_bigint_sz(key->pubkey.y, &key->pubkey.y->raw, keySz);
wolfSSL 15:117db924cf7c 5340 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5341 #ifdef HAVE_CAVIUM_V
wolfSSL 15:117db924cf7c 5342 err = NitroxEcdsaVerify(key, &e->raw, &key->pubkey.x->raw,
wolfSSL 15:117db924cf7c 5343 &key->pubkey.y->raw, &r->raw, &s->raw,
wolfSSL 15:117db924cf7c 5344 &curve->prime->raw, &curve->order->raw, res);
wolfSSL 15:117db924cf7c 5345 #else
wolfSSL 15:117db924cf7c 5346 err = IntelQaEcdsaVerify(&key->asyncDev, &e->raw, &key->pubkey.x->raw,
wolfSSL 15:117db924cf7c 5347 &key->pubkey.y->raw, &r->raw, &s->raw, &curve->Af->raw,
wolfSSL 15:117db924cf7c 5348 &curve->Bf->raw, &curve->prime->raw, &curve->order->raw,
wolfSSL 15:117db924cf7c 5349 &curve->Gx->raw, &curve->Gy->raw, res);
wolfSSL 15:117db924cf7c 5350 #endif
wolfSSL 15:117db924cf7c 5351
wolfSSL 15:117db924cf7c 5352 #ifndef HAVE_CAVIUM_V
wolfSSL 15:117db924cf7c 5353 mp_clear(e);
wolfSSL 15:117db924cf7c 5354 #endif
wolfSSL 15:117db924cf7c 5355 wc_ecc_curve_free(curve);
wolfSSL 15:117db924cf7c 5356 FREE_CURVE_SPECS();
wolfSSL 15:117db924cf7c 5357
wolfSSL 15:117db924cf7c 5358 return err;
wolfSSL 15:117db924cf7c 5359 }
wolfSSL 15:117db924cf7c 5360 #endif /* HAVE_CAVIUM_V || HAVE_INTEL_QA */
wolfSSL 15:117db924cf7c 5361 }
wolfSSL 15:117db924cf7c 5362 #endif /* WOLFSSL_ASYNC_CRYPT */
wolfSSL 15:117db924cf7c 5363
wolfSSL 15:117db924cf7c 5364 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 5365 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 5366 v = (mp_int*)XMALLOC(sizeof(mp_int), key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5367 if (v == NULL)
wolfSSL 15:117db924cf7c 5368 err = MEMORY_E;
wolfSSL 15:117db924cf7c 5369 }
wolfSSL 15:117db924cf7c 5370 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 5371 w = (mp_int*)XMALLOC(sizeof(mp_int), key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5372 if (w == NULL)
wolfSSL 15:117db924cf7c 5373 err = MEMORY_E;
wolfSSL 15:117db924cf7c 5374 }
wolfSSL 15:117db924cf7c 5375 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 5376 u1 = (mp_int*)XMALLOC(sizeof(mp_int), key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5377 if (u1 == NULL)
wolfSSL 15:117db924cf7c 5378 err = MEMORY_E;
wolfSSL 15:117db924cf7c 5379 }
wolfSSL 15:117db924cf7c 5380 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 5381 u2 = (mp_int*)XMALLOC(sizeof(mp_int), key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5382 if (u2 == NULL)
wolfSSL 15:117db924cf7c 5383 err = MEMORY_E;
wolfSSL 15:117db924cf7c 5384 }
wolfSSL 15:117db924cf7c 5385 #endif
wolfSSL 15:117db924cf7c 5386
wolfSSL 15:117db924cf7c 5387 /* allocate ints */
wolfSSL 15:117db924cf7c 5388 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 5389 if ((err = mp_init_multi(v, w, u1, u2, NULL, NULL)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 5390 err = MEMORY_E;
wolfSSL 15:117db924cf7c 5391 }
wolfSSL 15:117db924cf7c 5392 did_init = 1;
wolfSSL 15:117db924cf7c 5393 }
wolfSSL 15:117db924cf7c 5394
wolfSSL 15:117db924cf7c 5395 /* allocate points */
wolfSSL 15:117db924cf7c 5396 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 5397 mG = wc_ecc_new_point_h(key->heap);
wolfSSL 15:117db924cf7c 5398 mQ = wc_ecc_new_point_h(key->heap);
wolfSSL 15:117db924cf7c 5399 if (mQ == NULL || mG == NULL)
wolfSSL 15:117db924cf7c 5400 err = MEMORY_E;
wolfSSL 15:117db924cf7c 5401 }
wolfSSL 15:117db924cf7c 5402
wolfSSL 15:117db924cf7c 5403 /* w = s^-1 mod n */
wolfSSL 15:117db924cf7c 5404 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5405 err = mp_invmod(s, curve->order, w);
wolfSSL 15:117db924cf7c 5406
wolfSSL 15:117db924cf7c 5407 /* u1 = ew */
wolfSSL 15:117db924cf7c 5408 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5409 err = mp_mulmod(e, w, curve->order, u1);
wolfSSL 15:117db924cf7c 5410
wolfSSL 15:117db924cf7c 5411 /* u2 = rw */
wolfSSL 15:117db924cf7c 5412 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5413 err = mp_mulmod(r, w, curve->order, u2);
wolfSSL 15:117db924cf7c 5414
wolfSSL 15:117db924cf7c 5415 /* find mG and mQ */
wolfSSL 15:117db924cf7c 5416 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5417 err = mp_copy(curve->Gx, mG->x);
wolfSSL 15:117db924cf7c 5418 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5419 err = mp_copy(curve->Gy, mG->y);
wolfSSL 15:117db924cf7c 5420 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5421 err = mp_set(mG->z, 1);
wolfSSL 15:117db924cf7c 5422
wolfSSL 15:117db924cf7c 5423 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5424 err = mp_copy(key->pubkey.x, mQ->x);
wolfSSL 15:117db924cf7c 5425 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5426 err = mp_copy(key->pubkey.y, mQ->y);
wolfSSL 15:117db924cf7c 5427 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5428 err = mp_copy(key->pubkey.z, mQ->z);
wolfSSL 15:117db924cf7c 5429
wolfSSL 15:117db924cf7c 5430 #ifdef FREESCALE_LTC_ECC
wolfSSL 15:117db924cf7c 5431 /* use PKHA to compute u1*mG + u2*mQ */
wolfSSL 15:117db924cf7c 5432 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5433 err = wc_ecc_mulmod_ex(u1, mG, mG, curve->Af, curve->prime, 0, key->heap);
wolfSSL 15:117db924cf7c 5434 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5435 err = wc_ecc_mulmod_ex(u2, mQ, mQ, curve->Af, curve->prime, 0, key->heap);
wolfSSL 15:117db924cf7c 5436 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5437 err = wc_ecc_point_add(mG, mQ, mG, curve->prime);
wolfSSL 15:117db924cf7c 5438 #else
wolfSSL 15:117db924cf7c 5439 #ifndef ECC_SHAMIR
wolfSSL 15:117db924cf7c 5440 {
wolfSSL 15:117db924cf7c 5441 mp_digit mp = 0;
wolfSSL 15:117db924cf7c 5442
wolfSSL 15:117db924cf7c 5443 /* compute u1*mG + u2*mQ = mG */
wolfSSL 15:117db924cf7c 5444 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 5445 err = wc_ecc_mulmod_ex(u1, mG, mG, curve->Af, curve->prime, 0,
wolfSSL 15:117db924cf7c 5446 key->heap);
wolfSSL 15:117db924cf7c 5447 }
wolfSSL 15:117db924cf7c 5448 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 5449 err = wc_ecc_mulmod_ex(u2, mQ, mQ, curve->Af, curve->prime, 0,
wolfSSL 15:117db924cf7c 5450 key->heap);
wolfSSL 15:117db924cf7c 5451 }
wolfSSL 15:117db924cf7c 5452
wolfSSL 15:117db924cf7c 5453 /* find the montgomery mp */
wolfSSL 15:117db924cf7c 5454 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5455 err = mp_montgomery_setup(curve->prime, &mp);
wolfSSL 15:117db924cf7c 5456
wolfSSL 15:117db924cf7c 5457 /* add them */
wolfSSL 15:117db924cf7c 5458 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5459 err = ecc_projective_add_point(mQ, mG, mG, curve->Af,
wolfSSL 15:117db924cf7c 5460 curve->prime, mp);
wolfSSL 15:117db924cf7c 5461
wolfSSL 15:117db924cf7c 5462 /* reduce */
wolfSSL 15:117db924cf7c 5463 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5464 err = ecc_map(mG, curve->prime, mp);
wolfSSL 15:117db924cf7c 5465 }
wolfSSL 15:117db924cf7c 5466 #else
wolfSSL 15:117db924cf7c 5467 /* use Shamir's trick to compute u1*mG + u2*mQ using half the doubles */
wolfSSL 15:117db924cf7c 5468 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 5469 err = ecc_mul2add(mG, u1, mQ, u2, mG, curve->Af, curve->prime,
wolfSSL 15:117db924cf7c 5470 key->heap);
wolfSSL 15:117db924cf7c 5471 }
wolfSSL 15:117db924cf7c 5472 #endif /* ECC_SHAMIR */
wolfSSL 15:117db924cf7c 5473 #endif /* FREESCALE_LTC_ECC */
wolfSSL 15:117db924cf7c 5474 /* v = X_x1 mod n */
wolfSSL 15:117db924cf7c 5475 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5476 err = mp_mod(mG->x, curve->order, v);
wolfSSL 15:117db924cf7c 5477
wolfSSL 15:117db924cf7c 5478 /* does v == r */
wolfSSL 15:117db924cf7c 5479 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 5480 if (mp_cmp(v, r) == MP_EQ)
wolfSSL 15:117db924cf7c 5481 *res = 1;
wolfSSL 15:117db924cf7c 5482 }
wolfSSL 15:117db924cf7c 5483
wolfSSL 15:117db924cf7c 5484 /* cleanup */
wolfSSL 15:117db924cf7c 5485 wc_ecc_del_point_h(mG, key->heap);
wolfSSL 15:117db924cf7c 5486 wc_ecc_del_point_h(mQ, key->heap);
wolfSSL 15:117db924cf7c 5487
wolfSSL 15:117db924cf7c 5488 mp_clear(e);
wolfSSL 15:117db924cf7c 5489 if (did_init) {
wolfSSL 15:117db924cf7c 5490 mp_clear(v);
wolfSSL 15:117db924cf7c 5491 mp_clear(w);
wolfSSL 15:117db924cf7c 5492 mp_clear(u1);
wolfSSL 15:117db924cf7c 5493 mp_clear(u2);
wolfSSL 15:117db924cf7c 5494 }
wolfSSL 15:117db924cf7c 5495 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 5496 XFREE(u2, key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5497 XFREE(u1, key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5498 XFREE(w, key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5499 XFREE(v, key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5500 #if !defined(WOLFSSL_ASYNC_CRYPT) || !defined(HAVE_CAVIUM_V)
wolfSSL 15:117db924cf7c 5501 XFREE(e_lcl, key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5502 #endif
wolfSSL 15:117db924cf7c 5503 #endif
wolfSSL 15:117db924cf7c 5504
wolfSSL 15:117db924cf7c 5505 wc_ecc_curve_free(curve);
wolfSSL 15:117db924cf7c 5506 FREE_CURVE_SPECS();
wolfSSL 15:117db924cf7c 5507
wolfSSL 15:117db924cf7c 5508 #endif /* WOLFSSL_SP_MATH */
wolfSSL 15:117db924cf7c 5509 #endif /* WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 5510
wolfSSL 15:117db924cf7c 5511 return err;
wolfSSL 15:117db924cf7c 5512 }
wolfSSL 15:117db924cf7c 5513 #endif /* HAVE_ECC_VERIFY */
wolfSSL 15:117db924cf7c 5514
wolfSSL 15:117db924cf7c 5515 #ifdef HAVE_ECC_KEY_IMPORT
wolfSSL 15:117db924cf7c 5516 /* import point from der */
wolfSSL 15:117db924cf7c 5517 int wc_ecc_import_point_der(byte* in, word32 inLen, const int curve_idx,
wolfSSL 15:117db924cf7c 5518 ecc_point* point)
wolfSSL 15:117db924cf7c 5519 {
wolfSSL 15:117db924cf7c 5520 int err = 0;
wolfSSL 15:117db924cf7c 5521 #ifndef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 5522 int compressed = 0;
wolfSSL 15:117db924cf7c 5523 int keysize;
wolfSSL 15:117db924cf7c 5524 byte pointType;
wolfSSL 15:117db924cf7c 5525
wolfSSL 15:117db924cf7c 5526 if (in == NULL || point == NULL || (curve_idx < 0) ||
wolfSSL 15:117db924cf7c 5527 (wc_ecc_is_valid_idx(curve_idx) == 0))
wolfSSL 15:117db924cf7c 5528 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 5529
wolfSSL 15:117db924cf7c 5530 /* must be odd */
wolfSSL 15:117db924cf7c 5531 if ((inLen & 1) == 0) {
wolfSSL 15:117db924cf7c 5532 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 5533 }
wolfSSL 15:117db924cf7c 5534
wolfSSL 15:117db924cf7c 5535 /* init point */
wolfSSL 15:117db924cf7c 5536 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 5537 point->x = (mp_int*)&point->xyz[0];
wolfSSL 15:117db924cf7c 5538 point->y = (mp_int*)&point->xyz[1];
wolfSSL 15:117db924cf7c 5539 point->z = (mp_int*)&point->xyz[2];
wolfSSL 15:117db924cf7c 5540 alt_fp_init(point->x);
wolfSSL 15:117db924cf7c 5541 alt_fp_init(point->y);
wolfSSL 15:117db924cf7c 5542 alt_fp_init(point->z);
wolfSSL 15:117db924cf7c 5543 #else
wolfSSL 15:117db924cf7c 5544 err = mp_init_multi(point->x, point->y, point->z, NULL, NULL, NULL);
wolfSSL 15:117db924cf7c 5545 #endif
wolfSSL 15:117db924cf7c 5546 if (err != MP_OKAY)
wolfSSL 15:117db924cf7c 5547 return MEMORY_E;
wolfSSL 15:117db924cf7c 5548
wolfSSL 15:117db924cf7c 5549 /* check for point type (4, 2, or 3) */
wolfSSL 15:117db924cf7c 5550 pointType = in[0];
wolfSSL 15:117db924cf7c 5551 if (pointType != ECC_POINT_UNCOMP && pointType != ECC_POINT_COMP_EVEN &&
wolfSSL 15:117db924cf7c 5552 pointType != ECC_POINT_COMP_ODD) {
wolfSSL 15:117db924cf7c 5553 err = ASN_PARSE_E;
wolfSSL 15:117db924cf7c 5554 }
wolfSSL 15:117db924cf7c 5555
wolfSSL 15:117db924cf7c 5556 if (pointType == ECC_POINT_COMP_EVEN || pointType == ECC_POINT_COMP_ODD) {
wolfSSL 15:117db924cf7c 5557 #ifdef HAVE_COMP_KEY
wolfSSL 15:117db924cf7c 5558 compressed = 1;
wolfSSL 15:117db924cf7c 5559 #else
wolfSSL 15:117db924cf7c 5560 err = NOT_COMPILED_IN;
wolfSSL 15:117db924cf7c 5561 #endif
wolfSSL 15:117db924cf7c 5562 }
wolfSSL 15:117db924cf7c 5563
wolfSSL 15:117db924cf7c 5564 /* adjust to skip first byte */
wolfSSL 15:117db924cf7c 5565 inLen -= 1;
wolfSSL 15:117db924cf7c 5566 in += 1;
wolfSSL 15:117db924cf7c 5567
wolfSSL 15:117db924cf7c 5568 /* calculate key size based on inLen / 2 */
wolfSSL 15:117db924cf7c 5569 keysize = inLen>>1;
wolfSSL 15:117db924cf7c 5570
wolfSSL 15:117db924cf7c 5571 #ifdef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 5572 /* populate key->pubkey_raw */
wolfSSL 15:117db924cf7c 5573 XMEMCPY(key->pubkey_raw, (byte*)in, sizeof(key->pubkey_raw));
wolfSSL 15:117db924cf7c 5574 #endif
wolfSSL 15:117db924cf7c 5575
wolfSSL 15:117db924cf7c 5576 /* read data */
wolfSSL 15:117db924cf7c 5577 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5578 err = mp_read_unsigned_bin(point->x, (byte*)in, keysize);
wolfSSL 15:117db924cf7c 5579
wolfSSL 15:117db924cf7c 5580 #ifdef HAVE_COMP_KEY
wolfSSL 15:117db924cf7c 5581 if (err == MP_OKAY && compressed == 1) { /* build y */
wolfSSL 15:117db924cf7c 5582 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 5583 int did_init = 0;
wolfSSL 15:117db924cf7c 5584 mp_int t1, t2;
wolfSSL 15:117db924cf7c 5585 DECLARE_CURVE_SPECS(curve, 3);
wolfSSL 15:117db924cf7c 5586
wolfSSL 15:117db924cf7c 5587 ALLOC_CURVE_SPECS(3);
wolfSSL 15:117db924cf7c 5588
wolfSSL 15:117db924cf7c 5589 if (mp_init_multi(&t1, &t2, NULL, NULL, NULL, NULL) != MP_OKAY)
wolfSSL 15:117db924cf7c 5590 err = MEMORY_E;
wolfSSL 15:117db924cf7c 5591 else
wolfSSL 15:117db924cf7c 5592 did_init = 1;
wolfSSL 15:117db924cf7c 5593
wolfSSL 15:117db924cf7c 5594 /* load curve info */
wolfSSL 15:117db924cf7c 5595 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5596 err = wc_ecc_curve_load(&ecc_sets[curve_idx], &curve,
wolfSSL 15:117db924cf7c 5597 (ECC_CURVE_FIELD_PRIME | ECC_CURVE_FIELD_AF |
wolfSSL 15:117db924cf7c 5598 ECC_CURVE_FIELD_BF));
wolfSSL 15:117db924cf7c 5599
wolfSSL 15:117db924cf7c 5600 /* compute x^3 */
wolfSSL 15:117db924cf7c 5601 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5602 err = mp_sqr(point->x, &t1);
wolfSSL 15:117db924cf7c 5603 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5604 err = mp_mulmod(&t1, point->x, curve->prime, &t1);
wolfSSL 15:117db924cf7c 5605
wolfSSL 15:117db924cf7c 5606 /* compute x^3 + a*x */
wolfSSL 15:117db924cf7c 5607 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5608 err = mp_mulmod(curve->Af, point->x, curve->prime, &t2);
wolfSSL 15:117db924cf7c 5609 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5610 err = mp_add(&t1, &t2, &t1);
wolfSSL 15:117db924cf7c 5611
wolfSSL 15:117db924cf7c 5612 /* compute x^3 + a*x + b */
wolfSSL 15:117db924cf7c 5613 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5614 err = mp_add(&t1, curve->Bf, &t1);
wolfSSL 15:117db924cf7c 5615
wolfSSL 15:117db924cf7c 5616 /* compute sqrt(x^3 + a*x + b) */
wolfSSL 15:117db924cf7c 5617 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5618 err = mp_sqrtmod_prime(&t1, curve->prime, &t2);
wolfSSL 15:117db924cf7c 5619
wolfSSL 15:117db924cf7c 5620 /* adjust y */
wolfSSL 15:117db924cf7c 5621 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 5622 if ((mp_isodd(&t2) == MP_YES && pointType == ECC_POINT_COMP_ODD) ||
wolfSSL 15:117db924cf7c 5623 (mp_isodd(&t2) == MP_NO && pointType == ECC_POINT_COMP_EVEN)) {
wolfSSL 15:117db924cf7c 5624 err = mp_mod(&t2, curve->prime, point->y);
wolfSSL 15:117db924cf7c 5625 }
wolfSSL 15:117db924cf7c 5626 else {
wolfSSL 15:117db924cf7c 5627 err = mp_submod(curve->prime, &t2, curve->prime, point->y);
wolfSSL 15:117db924cf7c 5628 }
wolfSSL 15:117db924cf7c 5629 }
wolfSSL 15:117db924cf7c 5630
wolfSSL 15:117db924cf7c 5631 if (did_init) {
wolfSSL 15:117db924cf7c 5632 mp_clear(&t2);
wolfSSL 15:117db924cf7c 5633 mp_clear(&t1);
wolfSSL 15:117db924cf7c 5634 }
wolfSSL 15:117db924cf7c 5635
wolfSSL 15:117db924cf7c 5636 wc_ecc_curve_free(curve);
wolfSSL 15:117db924cf7c 5637 FREE_CURVE_SPECS();
wolfSSL 15:117db924cf7c 5638 #else
wolfSSL 15:117db924cf7c 5639 sp_ecc_uncompress_256(point->x, pointType, point->y);
wolfSSL 15:117db924cf7c 5640 #endif
wolfSSL 15:117db924cf7c 5641 }
wolfSSL 15:117db924cf7c 5642 #endif
wolfSSL 15:117db924cf7c 5643
wolfSSL 15:117db924cf7c 5644 if (err == MP_OKAY && compressed == 0)
wolfSSL 15:117db924cf7c 5645 err = mp_read_unsigned_bin(point->y, (byte*)in + keysize, keysize);
wolfSSL 15:117db924cf7c 5646 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5647 err = mp_set(point->z, 1);
wolfSSL 15:117db924cf7c 5648
wolfSSL 15:117db924cf7c 5649 if (err != MP_OKAY) {
wolfSSL 15:117db924cf7c 5650 mp_clear(point->x);
wolfSSL 15:117db924cf7c 5651 mp_clear(point->y);
wolfSSL 15:117db924cf7c 5652 mp_clear(point->z);
wolfSSL 15:117db924cf7c 5653 }
wolfSSL 15:117db924cf7c 5654
wolfSSL 15:117db924cf7c 5655 #else
wolfSSL 15:117db924cf7c 5656 err = NOT_COMPILED_IN;
wolfSSL 15:117db924cf7c 5657 (void)in;
wolfSSL 15:117db924cf7c 5658 (void)inLen;
wolfSSL 15:117db924cf7c 5659 (void)curve_idx;
wolfSSL 15:117db924cf7c 5660 (void)point;
wolfSSL 15:117db924cf7c 5661 #endif /* !WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 5662
wolfSSL 15:117db924cf7c 5663 return err;
wolfSSL 15:117db924cf7c 5664 }
wolfSSL 15:117db924cf7c 5665 #endif /* HAVE_ECC_KEY_IMPORT */
wolfSSL 15:117db924cf7c 5666
wolfSSL 15:117db924cf7c 5667 #ifdef HAVE_ECC_KEY_EXPORT
wolfSSL 15:117db924cf7c 5668 /* export point to der */
wolfSSL 15:117db924cf7c 5669 int wc_ecc_export_point_der(const int curve_idx, ecc_point* point, byte* out,
wolfSSL 15:117db924cf7c 5670 word32* outLen)
wolfSSL 15:117db924cf7c 5671 {
wolfSSL 15:117db924cf7c 5672 int ret = MP_OKAY;
wolfSSL 15:117db924cf7c 5673 word32 numlen;
wolfSSL 15:117db924cf7c 5674 #ifndef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 5675 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 5676 byte* buf;
wolfSSL 15:117db924cf7c 5677 #else
wolfSSL 15:117db924cf7c 5678 byte buf[ECC_BUFSIZE];
wolfSSL 15:117db924cf7c 5679 #endif
wolfSSL 15:117db924cf7c 5680 #endif /* !WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 5681
wolfSSL 15:117db924cf7c 5682 if ((curve_idx < 0) || (wc_ecc_is_valid_idx(curve_idx) == 0))
wolfSSL 15:117db924cf7c 5683 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 5684
wolfSSL 15:117db924cf7c 5685 /* return length needed only */
wolfSSL 15:117db924cf7c 5686 if (point != NULL && out == NULL && outLen != NULL) {
wolfSSL 15:117db924cf7c 5687 numlen = ecc_sets[curve_idx].size;
wolfSSL 15:117db924cf7c 5688 *outLen = 1 + 2*numlen;
wolfSSL 15:117db924cf7c 5689 return LENGTH_ONLY_E;
wolfSSL 15:117db924cf7c 5690 }
wolfSSL 15:117db924cf7c 5691
wolfSSL 15:117db924cf7c 5692 if (point == NULL || out == NULL || outLen == NULL)
wolfSSL 15:117db924cf7c 5693 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 5694
wolfSSL 15:117db924cf7c 5695 numlen = ecc_sets[curve_idx].size;
wolfSSL 15:117db924cf7c 5696
wolfSSL 15:117db924cf7c 5697 if (*outLen < (1 + 2*numlen)) {
wolfSSL 15:117db924cf7c 5698 *outLen = 1 + 2*numlen;
wolfSSL 15:117db924cf7c 5699 return BUFFER_E;
wolfSSL 15:117db924cf7c 5700 }
wolfSSL 15:117db924cf7c 5701
wolfSSL 15:117db924cf7c 5702 #ifdef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 5703 /* TODO: Implement equiv call to ATECC508A */
wolfSSL 15:117db924cf7c 5704 ret = BAD_COND_E;
wolfSSL 15:117db924cf7c 5705
wolfSSL 15:117db924cf7c 5706 #else
wolfSSL 15:117db924cf7c 5707
wolfSSL 15:117db924cf7c 5708 /* store byte point type */
wolfSSL 15:117db924cf7c 5709 out[0] = ECC_POINT_UNCOMP;
wolfSSL 15:117db924cf7c 5710
wolfSSL 15:117db924cf7c 5711 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 5712 buf = (byte*)XMALLOC(ECC_BUFSIZE, NULL, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 5713 if (buf == NULL)
wolfSSL 15:117db924cf7c 5714 return MEMORY_E;
wolfSSL 15:117db924cf7c 5715 #endif
wolfSSL 15:117db924cf7c 5716
wolfSSL 15:117db924cf7c 5717 /* pad and store x */
wolfSSL 15:117db924cf7c 5718 XMEMSET(buf, 0, ECC_BUFSIZE);
wolfSSL 15:117db924cf7c 5719 ret = mp_to_unsigned_bin(point->x, buf +
wolfSSL 15:117db924cf7c 5720 (numlen - mp_unsigned_bin_size(point->x)));
wolfSSL 15:117db924cf7c 5721 if (ret != MP_OKAY)
wolfSSL 15:117db924cf7c 5722 goto done;
wolfSSL 15:117db924cf7c 5723 XMEMCPY(out+1, buf, numlen);
wolfSSL 15:117db924cf7c 5724
wolfSSL 15:117db924cf7c 5725 /* pad and store y */
wolfSSL 15:117db924cf7c 5726 XMEMSET(buf, 0, ECC_BUFSIZE);
wolfSSL 15:117db924cf7c 5727 ret = mp_to_unsigned_bin(point->y, buf +
wolfSSL 15:117db924cf7c 5728 (numlen - mp_unsigned_bin_size(point->y)));
wolfSSL 15:117db924cf7c 5729 if (ret != MP_OKAY)
wolfSSL 15:117db924cf7c 5730 goto done;
wolfSSL 15:117db924cf7c 5731 XMEMCPY(out+1+numlen, buf, numlen);
wolfSSL 15:117db924cf7c 5732
wolfSSL 15:117db924cf7c 5733 *outLen = 1 + 2*numlen;
wolfSSL 15:117db924cf7c 5734
wolfSSL 15:117db924cf7c 5735 done:
wolfSSL 15:117db924cf7c 5736 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 5737 XFREE(buf, NULL, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 5738 #endif
wolfSSL 15:117db924cf7c 5739 #endif /* WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 5740
wolfSSL 15:117db924cf7c 5741 return ret;
wolfSSL 15:117db924cf7c 5742 }
wolfSSL 15:117db924cf7c 5743
wolfSSL 15:117db924cf7c 5744
wolfSSL 15:117db924cf7c 5745 /* export public ECC key in ANSI X9.63 format */
wolfSSL 15:117db924cf7c 5746 int wc_ecc_export_x963(ecc_key* key, byte* out, word32* outLen)
wolfSSL 15:117db924cf7c 5747 {
wolfSSL 15:117db924cf7c 5748 int ret = MP_OKAY;
wolfSSL 15:117db924cf7c 5749 word32 numlen;
wolfSSL 15:117db924cf7c 5750 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 5751 byte* buf;
wolfSSL 15:117db924cf7c 5752 #else
wolfSSL 15:117db924cf7c 5753 byte buf[ECC_BUFSIZE];
wolfSSL 15:117db924cf7c 5754 #endif
wolfSSL 15:117db924cf7c 5755 word32 pubxlen, pubylen;
wolfSSL 15:117db924cf7c 5756
wolfSSL 15:117db924cf7c 5757 /* return length needed only */
wolfSSL 15:117db924cf7c 5758 if (key != NULL && out == NULL && outLen != NULL) {
wolfSSL 15:117db924cf7c 5759 numlen = key->dp->size;
wolfSSL 15:117db924cf7c 5760 *outLen = 1 + 2*numlen;
wolfSSL 15:117db924cf7c 5761 return LENGTH_ONLY_E;
wolfSSL 15:117db924cf7c 5762 }
wolfSSL 15:117db924cf7c 5763
wolfSSL 15:117db924cf7c 5764 if (key == NULL || out == NULL || outLen == NULL)
wolfSSL 15:117db924cf7c 5765 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 5766
wolfSSL 15:117db924cf7c 5767 if (key->type == ECC_PRIVATEKEY_ONLY)
wolfSSL 15:117db924cf7c 5768 return ECC_PRIVATEONLY_E;
wolfSSL 15:117db924cf7c 5769
wolfSSL 15:117db924cf7c 5770 if (wc_ecc_is_valid_idx(key->idx) == 0) {
wolfSSL 15:117db924cf7c 5771 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 5772 }
wolfSSL 15:117db924cf7c 5773 numlen = key->dp->size;
wolfSSL 15:117db924cf7c 5774
wolfSSL 15:117db924cf7c 5775 /* verify room in out buffer */
wolfSSL 15:117db924cf7c 5776 if (*outLen < (1 + 2*numlen)) {
wolfSSL 15:117db924cf7c 5777 *outLen = 1 + 2*numlen;
wolfSSL 15:117db924cf7c 5778 return BUFFER_E;
wolfSSL 15:117db924cf7c 5779 }
wolfSSL 15:117db924cf7c 5780
wolfSSL 15:117db924cf7c 5781 /* verify public key length is less than key size */
wolfSSL 15:117db924cf7c 5782 pubxlen = mp_unsigned_bin_size(key->pubkey.x);
wolfSSL 15:117db924cf7c 5783 pubylen = mp_unsigned_bin_size(key->pubkey.y);
wolfSSL 15:117db924cf7c 5784 if ((pubxlen > numlen) || (pubylen > numlen)) {
wolfSSL 15:117db924cf7c 5785 WOLFSSL_MSG("Public key x/y invalid!");
wolfSSL 15:117db924cf7c 5786 return BUFFER_E;
wolfSSL 15:117db924cf7c 5787 }
wolfSSL 15:117db924cf7c 5788
wolfSSL 15:117db924cf7c 5789 /* store byte point type */
wolfSSL 15:117db924cf7c 5790 out[0] = ECC_POINT_UNCOMP;
wolfSSL 15:117db924cf7c 5791
wolfSSL 15:117db924cf7c 5792 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 5793 buf = (byte*)XMALLOC(ECC_BUFSIZE, NULL, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 5794 if (buf == NULL)
wolfSSL 15:117db924cf7c 5795 return MEMORY_E;
wolfSSL 15:117db924cf7c 5796 #endif
wolfSSL 15:117db924cf7c 5797
wolfSSL 15:117db924cf7c 5798 /* pad and store x */
wolfSSL 15:117db924cf7c 5799 XMEMSET(buf, 0, ECC_BUFSIZE);
wolfSSL 15:117db924cf7c 5800 ret = mp_to_unsigned_bin(key->pubkey.x, buf + (numlen - pubxlen));
wolfSSL 15:117db924cf7c 5801 if (ret != MP_OKAY)
wolfSSL 15:117db924cf7c 5802 goto done;
wolfSSL 15:117db924cf7c 5803 XMEMCPY(out+1, buf, numlen);
wolfSSL 15:117db924cf7c 5804
wolfSSL 15:117db924cf7c 5805 /* pad and store y */
wolfSSL 15:117db924cf7c 5806 XMEMSET(buf, 0, ECC_BUFSIZE);
wolfSSL 15:117db924cf7c 5807 ret = mp_to_unsigned_bin(key->pubkey.y, buf + (numlen - pubylen));
wolfSSL 15:117db924cf7c 5808 if (ret != MP_OKAY)
wolfSSL 15:117db924cf7c 5809 goto done;
wolfSSL 15:117db924cf7c 5810 XMEMCPY(out+1+numlen, buf, numlen);
wolfSSL 15:117db924cf7c 5811
wolfSSL 15:117db924cf7c 5812 *outLen = 1 + 2*numlen;
wolfSSL 15:117db924cf7c 5813
wolfSSL 15:117db924cf7c 5814 done:
wolfSSL 15:117db924cf7c 5815 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 5816 XFREE(buf, NULL, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 5817 #endif
wolfSSL 15:117db924cf7c 5818
wolfSSL 15:117db924cf7c 5819 return ret;
wolfSSL 15:117db924cf7c 5820 }
wolfSSL 15:117db924cf7c 5821
wolfSSL 15:117db924cf7c 5822
wolfSSL 15:117db924cf7c 5823 /* export public ECC key in ANSI X9.63 format, extended with
wolfSSL 15:117db924cf7c 5824 * compression option */
wolfSSL 15:117db924cf7c 5825 int wc_ecc_export_x963_ex(ecc_key* key, byte* out, word32* outLen,
wolfSSL 15:117db924cf7c 5826 int compressed)
wolfSSL 15:117db924cf7c 5827 {
wolfSSL 15:117db924cf7c 5828 if (compressed == 0)
wolfSSL 15:117db924cf7c 5829 return wc_ecc_export_x963(key, out, outLen);
wolfSSL 15:117db924cf7c 5830 #ifdef HAVE_COMP_KEY
wolfSSL 15:117db924cf7c 5831 else
wolfSSL 15:117db924cf7c 5832 return wc_ecc_export_x963_compressed(key, out, outLen);
wolfSSL 15:117db924cf7c 5833 #else
wolfSSL 15:117db924cf7c 5834 return NOT_COMPILED_IN;
wolfSSL 15:117db924cf7c 5835 #endif
wolfSSL 15:117db924cf7c 5836 }
wolfSSL 15:117db924cf7c 5837 #endif /* HAVE_ECC_KEY_EXPORT */
wolfSSL 15:117db924cf7c 5838
wolfSSL 15:117db924cf7c 5839
wolfSSL 15:117db924cf7c 5840 #ifndef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 5841
wolfSSL 15:117db924cf7c 5842 /* is ecc point on curve described by dp ? */
wolfSSL 15:117db924cf7c 5843 int wc_ecc_is_point(ecc_point* ecp, mp_int* a, mp_int* b, mp_int* prime)
wolfSSL 15:117db924cf7c 5844 {
wolfSSL 15:117db924cf7c 5845 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 5846 int err;
wolfSSL 15:117db924cf7c 5847 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 5848 mp_int* t1 = NULL;
wolfSSL 15:117db924cf7c 5849 mp_int* t2 = NULL;
wolfSSL 15:117db924cf7c 5850 #else
wolfSSL 15:117db924cf7c 5851 mp_int t1[1], t2[1];
wolfSSL 15:117db924cf7c 5852 #endif
wolfSSL 15:117db924cf7c 5853
wolfSSL 15:117db924cf7c 5854 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 5855 t1 = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5856 if (t1 == NULL)
wolfSSL 15:117db924cf7c 5857 return MEMORY_E;
wolfSSL 15:117db924cf7c 5858 t2 = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5859 if (t2 == NULL) {
wolfSSL 15:117db924cf7c 5860 XFREE(t1, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5861 return MEMORY_E;
wolfSSL 15:117db924cf7c 5862 }
wolfSSL 15:117db924cf7c 5863 #endif
wolfSSL 15:117db924cf7c 5864
wolfSSL 15:117db924cf7c 5865 if ((err = mp_init_multi(t1, t2, NULL, NULL, NULL, NULL)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 5866 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 5867 XFREE(t2, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5868 XFREE(t1, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5869 #endif
wolfSSL 15:117db924cf7c 5870 return err;
wolfSSL 15:117db924cf7c 5871 }
wolfSSL 15:117db924cf7c 5872
wolfSSL 15:117db924cf7c 5873 /* compute y^2 */
wolfSSL 15:117db924cf7c 5874 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5875 err = mp_sqr(ecp->y, t1);
wolfSSL 15:117db924cf7c 5876
wolfSSL 15:117db924cf7c 5877 /* compute x^3 */
wolfSSL 15:117db924cf7c 5878 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5879 err = mp_sqr(ecp->x, t2);
wolfSSL 15:117db924cf7c 5880 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5881 err = mp_mod(t2, prime, t2);
wolfSSL 15:117db924cf7c 5882 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5883 err = mp_mul(ecp->x, t2, t2);
wolfSSL 15:117db924cf7c 5884
wolfSSL 15:117db924cf7c 5885 /* compute y^2 - x^3 */
wolfSSL 15:117db924cf7c 5886 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5887 err = mp_sub(t1, t2, t1);
wolfSSL 15:117db924cf7c 5888
wolfSSL 15:117db924cf7c 5889 /* Determine if curve "a" should be used in calc */
wolfSSL 15:117db924cf7c 5890 #ifdef WOLFSSL_CUSTOM_CURVES
wolfSSL 15:117db924cf7c 5891 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 5892 /* Use a and prime to determine if a == 3 */
wolfSSL 15:117db924cf7c 5893 err = mp_set(t2, 0);
wolfSSL 15:117db924cf7c 5894 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5895 err = mp_submod(prime, a, prime, t2);
wolfSSL 15:117db924cf7c 5896 }
wolfSSL 15:117db924cf7c 5897 if (err == MP_OKAY && mp_cmp_d(t2, 3) != MP_EQ) {
wolfSSL 15:117db924cf7c 5898 /* compute y^2 - x^3 + a*x */
wolfSSL 15:117db924cf7c 5899 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5900 err = mp_mulmod(t2, ecp->x, prime, t2);
wolfSSL 15:117db924cf7c 5901 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5902 err = mp_addmod(t1, t2, prime, t1);
wolfSSL 15:117db924cf7c 5903 }
wolfSSL 15:117db924cf7c 5904 else
wolfSSL 15:117db924cf7c 5905 #endif /* WOLFSSL_CUSTOM_CURVES */
wolfSSL 15:117db924cf7c 5906 {
wolfSSL 15:117db924cf7c 5907 /* assumes "a" == 3 */
wolfSSL 15:117db924cf7c 5908 (void)a;
wolfSSL 15:117db924cf7c 5909
wolfSSL 15:117db924cf7c 5910 /* compute y^2 - x^3 + 3x */
wolfSSL 15:117db924cf7c 5911 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5912 err = mp_add(t1, ecp->x, t1);
wolfSSL 15:117db924cf7c 5913 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5914 err = mp_add(t1, ecp->x, t1);
wolfSSL 15:117db924cf7c 5915 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5916 err = mp_add(t1, ecp->x, t1);
wolfSSL 15:117db924cf7c 5917 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5918 err = mp_mod(t1, prime, t1);
wolfSSL 15:117db924cf7c 5919 }
wolfSSL 15:117db924cf7c 5920
wolfSSL 15:117db924cf7c 5921 /* adjust range (0, prime) */
wolfSSL 15:117db924cf7c 5922 while (err == MP_OKAY && mp_isneg(t1)) {
wolfSSL 15:117db924cf7c 5923 err = mp_add(t1, prime, t1);
wolfSSL 15:117db924cf7c 5924 }
wolfSSL 15:117db924cf7c 5925 while (err == MP_OKAY && mp_cmp(t1, prime) != MP_LT) {
wolfSSL 15:117db924cf7c 5926 err = mp_sub(t1, prime, t1);
wolfSSL 15:117db924cf7c 5927 }
wolfSSL 15:117db924cf7c 5928
wolfSSL 15:117db924cf7c 5929 /* compare to b */
wolfSSL 15:117db924cf7c 5930 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 5931 if (mp_cmp(t1, b) != MP_EQ) {
wolfSSL 15:117db924cf7c 5932 err = MP_VAL;
wolfSSL 15:117db924cf7c 5933 } else {
wolfSSL 15:117db924cf7c 5934 err = MP_OKAY;
wolfSSL 15:117db924cf7c 5935 }
wolfSSL 15:117db924cf7c 5936 }
wolfSSL 15:117db924cf7c 5937
wolfSSL 15:117db924cf7c 5938 mp_clear(t1);
wolfSSL 15:117db924cf7c 5939 mp_clear(t2);
wolfSSL 15:117db924cf7c 5940 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 5941 XFREE(t2, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5942 XFREE(t1, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 5943 #endif
wolfSSL 15:117db924cf7c 5944
wolfSSL 15:117db924cf7c 5945 return err;
wolfSSL 15:117db924cf7c 5946 #else
wolfSSL 15:117db924cf7c 5947 (void)a;
wolfSSL 15:117db924cf7c 5948 (void)b;
wolfSSL 15:117db924cf7c 5949 (void)prime;
wolfSSL 15:117db924cf7c 5950
wolfSSL 15:117db924cf7c 5951 return sp_ecc_is_point_256(ecp->x, ecp->y);
wolfSSL 15:117db924cf7c 5952 #endif
wolfSSL 15:117db924cf7c 5953 }
wolfSSL 15:117db924cf7c 5954
wolfSSL 15:117db924cf7c 5955 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 5956 /* validate privkey * generator == pubkey, 0 on success */
wolfSSL 15:117db924cf7c 5957 static int ecc_check_privkey_gen(ecc_key* key, mp_int* a, mp_int* prime)
wolfSSL 15:117db924cf7c 5958 {
wolfSSL 15:117db924cf7c 5959 int err = MP_OKAY;
wolfSSL 15:117db924cf7c 5960 ecc_point* base = NULL;
wolfSSL 15:117db924cf7c 5961 ecc_point* res = NULL;
wolfSSL 15:117db924cf7c 5962 DECLARE_CURVE_SPECS(curve, 2);
wolfSSL 15:117db924cf7c 5963
wolfSSL 15:117db924cf7c 5964 if (key == NULL)
wolfSSL 15:117db924cf7c 5965 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 5966
wolfSSL 15:117db924cf7c 5967 ALLOC_CURVE_SPECS(2);
wolfSSL 15:117db924cf7c 5968
wolfSSL 15:117db924cf7c 5969 res = wc_ecc_new_point_h(key->heap);
wolfSSL 15:117db924cf7c 5970 if (res == NULL)
wolfSSL 15:117db924cf7c 5971 err = MEMORY_E;
wolfSSL 15:117db924cf7c 5972
wolfSSL 15:117db924cf7c 5973 #ifdef WOLFSSL_HAVE_SP_ECC
wolfSSL 15:117db924cf7c 5974 #ifndef WOLFSSL_SP_NO_256
wolfSSL 15:117db924cf7c 5975 if (key->idx != ECC_CUSTOM_IDX && ecc_sets[key->idx].id == ECC_SECP256R1) {
wolfSSL 15:117db924cf7c 5976 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5977 err = sp_ecc_mulmod_base_256(&key->k, res, 1, key->heap);
wolfSSL 15:117db924cf7c 5978 }
wolfSSL 15:117db924cf7c 5979 else
wolfSSL 15:117db924cf7c 5980 #endif
wolfSSL 15:117db924cf7c 5981 #endif
wolfSSL 15:117db924cf7c 5982 {
wolfSSL 15:117db924cf7c 5983 base = wc_ecc_new_point_h(key->heap);
wolfSSL 15:117db924cf7c 5984 if (base == NULL)
wolfSSL 15:117db924cf7c 5985 err = MEMORY_E;
wolfSSL 15:117db924cf7c 5986
wolfSSL 15:117db924cf7c 5987 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 5988 /* load curve info */
wolfSSL 15:117db924cf7c 5989 err = wc_ecc_curve_load(key->dp, &curve,
wolfSSL 15:117db924cf7c 5990 (ECC_CURVE_FIELD_GX | ECC_CURVE_FIELD_GY));
wolfSSL 15:117db924cf7c 5991 }
wolfSSL 15:117db924cf7c 5992
wolfSSL 15:117db924cf7c 5993 /* set up base generator */
wolfSSL 15:117db924cf7c 5994 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5995 err = mp_copy(curve->Gx, base->x);
wolfSSL 15:117db924cf7c 5996 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5997 err = mp_copy(curve->Gy, base->y);
wolfSSL 15:117db924cf7c 5998 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 5999 err = mp_set(base->z, 1);
wolfSSL 15:117db924cf7c 6000
wolfSSL 15:117db924cf7c 6001 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6002 err = wc_ecc_mulmod_ex(&key->k, base, res, a, prime, 1, key->heap);
wolfSSL 15:117db924cf7c 6003 }
wolfSSL 15:117db924cf7c 6004
wolfSSL 15:117db924cf7c 6005 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 6006 /* compare result to public key */
wolfSSL 15:117db924cf7c 6007 if (mp_cmp(res->x, key->pubkey.x) != MP_EQ ||
wolfSSL 15:117db924cf7c 6008 mp_cmp(res->y, key->pubkey.y) != MP_EQ ||
wolfSSL 15:117db924cf7c 6009 mp_cmp(res->z, key->pubkey.z) != MP_EQ) {
wolfSSL 15:117db924cf7c 6010 /* didn't match */
wolfSSL 15:117db924cf7c 6011 err = ECC_PRIV_KEY_E;
wolfSSL 15:117db924cf7c 6012 }
wolfSSL 15:117db924cf7c 6013 }
wolfSSL 15:117db924cf7c 6014
wolfSSL 15:117db924cf7c 6015 wc_ecc_curve_free(curve);
wolfSSL 15:117db924cf7c 6016 wc_ecc_del_point_h(res, key->heap);
wolfSSL 15:117db924cf7c 6017 wc_ecc_del_point_h(base, key->heap);
wolfSSL 15:117db924cf7c 6018 FREE_CURVE_SPECS();
wolfSSL 15:117db924cf7c 6019
wolfSSL 15:117db924cf7c 6020 return err;
wolfSSL 15:117db924cf7c 6021 }
wolfSSL 15:117db924cf7c 6022 #endif
wolfSSL 15:117db924cf7c 6023
wolfSSL 15:117db924cf7c 6024 #ifdef WOLFSSL_VALIDATE_ECC_IMPORT
wolfSSL 15:117db924cf7c 6025
wolfSSL 15:117db924cf7c 6026 /* check privkey generator helper, creates prime needed */
wolfSSL 15:117db924cf7c 6027 static int ecc_check_privkey_gen_helper(ecc_key* key)
wolfSSL 15:117db924cf7c 6028 {
wolfSSL 15:117db924cf7c 6029 int err;
wolfSSL 15:117db924cf7c 6030 #ifndef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 6031 DECLARE_CURVE_SPECS(curve, 2);
wolfSSL 15:117db924cf7c 6032 #endif
wolfSSL 15:117db924cf7c 6033
wolfSSL 15:117db924cf7c 6034 if (key == NULL)
wolfSSL 15:117db924cf7c 6035 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 6036
wolfSSL 15:117db924cf7c 6037 #ifdef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 6038 /* TODO: Implement equiv call to ATECC508A */
wolfSSL 15:117db924cf7c 6039 err = BAD_COND_E;
wolfSSL 15:117db924cf7c 6040
wolfSSL 15:117db924cf7c 6041 #else
wolfSSL 15:117db924cf7c 6042 ALLOC_CURVE_SPECS(2);
wolfSSL 15:117db924cf7c 6043
wolfSSL 15:117db924cf7c 6044 /* load curve info */
wolfSSL 15:117db924cf7c 6045 err = wc_ecc_curve_load(key->dp, &curve,
wolfSSL 15:117db924cf7c 6046 (ECC_CURVE_FIELD_PRIME | ECC_CURVE_FIELD_AF));
wolfSSL 15:117db924cf7c 6047
wolfSSL 15:117db924cf7c 6048 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6049 err = ecc_check_privkey_gen(key, curve->Af, curve->prime);
wolfSSL 15:117db924cf7c 6050
wolfSSL 15:117db924cf7c 6051 wc_ecc_curve_free(curve);
wolfSSL 15:117db924cf7c 6052 FREE_CURVE_SPECS();
wolfSSL 15:117db924cf7c 6053
wolfSSL 15:117db924cf7c 6054 #endif /* WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 6055
wolfSSL 15:117db924cf7c 6056 return err;
wolfSSL 15:117db924cf7c 6057 }
wolfSSL 15:117db924cf7c 6058
wolfSSL 15:117db924cf7c 6059 #endif /* WOLFSSL_VALIDATE_ECC_IMPORT */
wolfSSL 15:117db924cf7c 6060
wolfSSL 15:117db924cf7c 6061
wolfSSL 15:117db924cf7c 6062 #if defined(WOLFSSL_VALIDATE_ECC_KEYGEN) || !defined(WOLFSSL_SP_MATH)
wolfSSL 15:117db924cf7c 6063 /* validate order * pubkey = point at infinity, 0 on success */
wolfSSL 15:117db924cf7c 6064 static int ecc_check_pubkey_order(ecc_key* key, ecc_point* pubkey, mp_int* a,
wolfSSL 15:117db924cf7c 6065 mp_int* prime, mp_int* order)
wolfSSL 15:117db924cf7c 6066 {
wolfSSL 15:117db924cf7c 6067 ecc_point* inf = NULL;
wolfSSL 15:117db924cf7c 6068 int err;
wolfSSL 15:117db924cf7c 6069
wolfSSL 15:117db924cf7c 6070 if (key == NULL)
wolfSSL 15:117db924cf7c 6071 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 6072
wolfSSL 15:117db924cf7c 6073 inf = wc_ecc_new_point_h(key->heap);
wolfSSL 15:117db924cf7c 6074 if (inf == NULL)
wolfSSL 15:117db924cf7c 6075 err = MEMORY_E;
wolfSSL 15:117db924cf7c 6076 else {
wolfSSL 15:117db924cf7c 6077 #ifdef WOLFSSL_HAVE_SP_ECC
wolfSSL 15:117db924cf7c 6078 #ifndef WOLFSSL_SP_NO_256
wolfSSL 15:117db924cf7c 6079 if (key->idx != ECC_CUSTOM_IDX &&
wolfSSL 15:117db924cf7c 6080 ecc_sets[key->idx].id == ECC_SECP256R1) {
wolfSSL 15:117db924cf7c 6081 err = sp_ecc_mulmod_256(order, pubkey, inf, 1, key->heap);
wolfSSL 15:117db924cf7c 6082 }
wolfSSL 15:117db924cf7c 6083 else
wolfSSL 15:117db924cf7c 6084 #endif
wolfSSL 15:117db924cf7c 6085 #endif
wolfSSL 15:117db924cf7c 6086 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 6087 err = wc_ecc_mulmod_ex(order, pubkey, inf, a, prime, 1, key->heap);
wolfSSL 15:117db924cf7c 6088 if (err == MP_OKAY && !wc_ecc_point_is_at_infinity(inf))
wolfSSL 15:117db924cf7c 6089 err = ECC_INF_E;
wolfSSL 15:117db924cf7c 6090 #else
wolfSSL 15:117db924cf7c 6091 (void)a;
wolfSSL 15:117db924cf7c 6092 (void)prime;
wolfSSL 15:117db924cf7c 6093
wolfSSL 15:117db924cf7c 6094 err = WC_KEY_SIZE_E;
wolfSSL 15:117db924cf7c 6095 #endif
wolfSSL 15:117db924cf7c 6096 }
wolfSSL 15:117db924cf7c 6097
wolfSSL 15:117db924cf7c 6098 wc_ecc_del_point_h(inf, key->heap);
wolfSSL 15:117db924cf7c 6099
wolfSSL 15:117db924cf7c 6100 return err;
wolfSSL 15:117db924cf7c 6101 }
wolfSSL 15:117db924cf7c 6102 #endif
wolfSSL 15:117db924cf7c 6103 #endif /* !WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 6104
wolfSSL 15:117db924cf7c 6105
wolfSSL 15:117db924cf7c 6106 /* perform sanity checks on ecc key validity, 0 on success */
wolfSSL 15:117db924cf7c 6107 int wc_ecc_check_key(ecc_key* key)
wolfSSL 15:117db924cf7c 6108 {
wolfSSL 15:117db924cf7c 6109 int err;
wolfSSL 15:117db924cf7c 6110 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 6111 #ifndef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 6112 mp_int* b = NULL;
wolfSSL 15:117db924cf7c 6113 #ifdef USE_ECC_B_PARAM
wolfSSL 15:117db924cf7c 6114 DECLARE_CURVE_SPECS(curve, 4);
wolfSSL 15:117db924cf7c 6115 #else
wolfSSL 15:117db924cf7c 6116 #ifndef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 6117 mp_int b_lcl;
wolfSSL 15:117db924cf7c 6118 #endif
wolfSSL 15:117db924cf7c 6119 DECLARE_CURVE_SPECS(curve, 3);
wolfSSL 15:117db924cf7c 6120 #endif /* USE_ECC_B_PARAM */
wolfSSL 15:117db924cf7c 6121 #endif /* WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 6122
wolfSSL 15:117db924cf7c 6123 if (key == NULL)
wolfSSL 15:117db924cf7c 6124 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 6125
wolfSSL 15:117db924cf7c 6126 #ifdef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 6127
wolfSSL 15:117db924cf7c 6128 if (key->slot == ATECC_INVALID_SLOT)
wolfSSL 15:117db924cf7c 6129 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 6130
wolfSSL 15:117db924cf7c 6131 err = 0; /* consider key check success on ECC508A */
wolfSSL 15:117db924cf7c 6132
wolfSSL 15:117db924cf7c 6133 #else
wolfSSL 15:117db924cf7c 6134 #ifdef USE_ECC_B_PARAM
wolfSSL 15:117db924cf7c 6135 ALLOC_CURVE_SPECS(4);
wolfSSL 15:117db924cf7c 6136 #else
wolfSSL 15:117db924cf7c 6137 ALLOC_CURVE_SPECS(3);
wolfSSL 15:117db924cf7c 6138 #ifndef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 6139 b = &b_lcl;
wolfSSL 15:117db924cf7c 6140 #else
wolfSSL 15:117db924cf7c 6141 b = (mp_int*)XMALLOC(sizeof(mp_int), key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6142 if (b == NULL) {
wolfSSL 15:117db924cf7c 6143 FREE_CURVE_SPECS();
wolfSSL 15:117db924cf7c 6144 return MEMORY_E;
wolfSSL 15:117db924cf7c 6145 }
wolfSSL 15:117db924cf7c 6146 #endif
wolfSSL 15:117db924cf7c 6147 XMEMSET(b, 0, sizeof(mp_int));
wolfSSL 15:117db924cf7c 6148 #endif
wolfSSL 15:117db924cf7c 6149
wolfSSL 15:117db924cf7c 6150 /* SP 800-56Ar3, section 5.6.2.3.3, process step 1 */
wolfSSL 15:117db924cf7c 6151 /* pubkey point cannot be at infinity */
wolfSSL 15:117db924cf7c 6152 if (wc_ecc_point_is_at_infinity(&key->pubkey)) {
wolfSSL 15:117db924cf7c 6153 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 6154 XFREE(b, key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6155 #endif
wolfSSL 15:117db924cf7c 6156 FREE_CURVE_SPECS();
wolfSSL 15:117db924cf7c 6157 return ECC_INF_E;
wolfSSL 15:117db924cf7c 6158 }
wolfSSL 15:117db924cf7c 6159
wolfSSL 15:117db924cf7c 6160 /* load curve info */
wolfSSL 15:117db924cf7c 6161 err = wc_ecc_curve_load(key->dp, &curve, (ECC_CURVE_FIELD_PRIME |
wolfSSL 15:117db924cf7c 6162 ECC_CURVE_FIELD_AF | ECC_CURVE_FIELD_ORDER
wolfSSL 15:117db924cf7c 6163 #ifdef USE_ECC_B_PARAM
wolfSSL 15:117db924cf7c 6164 | ECC_CURVE_FIELD_BF
wolfSSL 15:117db924cf7c 6165 #endif
wolfSSL 15:117db924cf7c 6166 ));
wolfSSL 15:117db924cf7c 6167
wolfSSL 15:117db924cf7c 6168 #ifndef USE_ECC_B_PARAM
wolfSSL 15:117db924cf7c 6169 /* load curve b parameter */
wolfSSL 15:117db924cf7c 6170 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6171 err = mp_init(b);
wolfSSL 15:117db924cf7c 6172 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6173 err = mp_read_radix(b, key->dp->Bf, MP_RADIX_HEX);
wolfSSL 15:117db924cf7c 6174 #else
wolfSSL 15:117db924cf7c 6175 b = curve->Bf;
wolfSSL 15:117db924cf7c 6176 #endif
wolfSSL 15:117db924cf7c 6177
wolfSSL 15:117db924cf7c 6178 /* SP 800-56Ar3, section 5.6.2.3.3, process step 2 */
wolfSSL 15:117db924cf7c 6179 /* Qx must be in the range [0, p-1] */
wolfSSL 15:117db924cf7c 6180 if (mp_cmp(key->pubkey.x, curve->prime) != MP_LT)
wolfSSL 15:117db924cf7c 6181 err = ECC_OUT_OF_RANGE_E;
wolfSSL 15:117db924cf7c 6182
wolfSSL 15:117db924cf7c 6183 /* Qy must be in the range [0, p-1] */
wolfSSL 15:117db924cf7c 6184 if (mp_cmp(key->pubkey.y, curve->prime) != MP_LT)
wolfSSL 15:117db924cf7c 6185 err = ECC_OUT_OF_RANGE_E;
wolfSSL 15:117db924cf7c 6186
wolfSSL 15:117db924cf7c 6187 /* SP 800-56Ar3, section 5.6.2.3.3, process steps 3 */
wolfSSL 15:117db924cf7c 6188 /* make sure point is actually on curve */
wolfSSL 15:117db924cf7c 6189 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6190 err = wc_ecc_is_point(&key->pubkey, curve->Af, b, curve->prime);
wolfSSL 15:117db924cf7c 6191
wolfSSL 15:117db924cf7c 6192 /* SP 800-56Ar3, section 5.6.2.3.3, process steps 4 */
wolfSSL 15:117db924cf7c 6193 /* pubkey * order must be at infinity */
wolfSSL 15:117db924cf7c 6194 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6195 err = ecc_check_pubkey_order(key, &key->pubkey, curve->Af, curve->prime,
wolfSSL 15:117db924cf7c 6196 curve->order);
wolfSSL 15:117db924cf7c 6197
wolfSSL 15:117db924cf7c 6198 /* SP 800-56Ar3, section 5.6.2.1.4, method (b) for ECC */
wolfSSL 15:117db924cf7c 6199 /* private * base generator must equal pubkey */
wolfSSL 15:117db924cf7c 6200 if (err == MP_OKAY && key->type == ECC_PRIVATEKEY)
wolfSSL 15:117db924cf7c 6201 err = ecc_check_privkey_gen(key, curve->Af, curve->prime);
wolfSSL 15:117db924cf7c 6202
wolfSSL 15:117db924cf7c 6203 wc_ecc_curve_free(curve);
wolfSSL 15:117db924cf7c 6204
wolfSSL 15:117db924cf7c 6205 #ifndef USE_ECC_B_PARAM
wolfSSL 15:117db924cf7c 6206 mp_clear(b);
wolfSSL 15:117db924cf7c 6207 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 6208 XFREE(b, key->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6209 #endif
wolfSSL 15:117db924cf7c 6210 #endif
wolfSSL 15:117db924cf7c 6211
wolfSSL 15:117db924cf7c 6212 FREE_CURVE_SPECS();
wolfSSL 15:117db924cf7c 6213
wolfSSL 15:117db924cf7c 6214 #endif /* WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 6215 #else
wolfSSL 15:117db924cf7c 6216 if (key == NULL)
wolfSSL 15:117db924cf7c 6217 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 6218
wolfSSL 15:117db924cf7c 6219 /* pubkey point cannot be at infinity */
wolfSSL 15:117db924cf7c 6220 if (key->idx != ECC_CUSTOM_IDX && ecc_sets[key->idx].id == ECC_SECP256R1) {
wolfSSL 15:117db924cf7c 6221 err = sp_ecc_check_key_256(key->pubkey.x, key->pubkey.y, &key->k,
wolfSSL 15:117db924cf7c 6222 key->heap);
wolfSSL 15:117db924cf7c 6223 }
wolfSSL 15:117db924cf7c 6224 else
wolfSSL 15:117db924cf7c 6225 err = WC_KEY_SIZE_E;
wolfSSL 15:117db924cf7c 6226 #endif
wolfSSL 15:117db924cf7c 6227
wolfSSL 15:117db924cf7c 6228 return err;
wolfSSL 15:117db924cf7c 6229 }
wolfSSL 15:117db924cf7c 6230
wolfSSL 15:117db924cf7c 6231 #ifdef HAVE_ECC_KEY_IMPORT
wolfSSL 15:117db924cf7c 6232 /* import public ECC key in ANSI X9.63 format */
wolfSSL 15:117db924cf7c 6233 int wc_ecc_import_x963_ex(const byte* in, word32 inLen, ecc_key* key,
wolfSSL 15:117db924cf7c 6234 int curve_id)
wolfSSL 15:117db924cf7c 6235 {
wolfSSL 15:117db924cf7c 6236 int err = MP_OKAY;
wolfSSL 15:117db924cf7c 6237 int compressed = 0;
wolfSSL 15:117db924cf7c 6238 int keysize = 0;
wolfSSL 15:117db924cf7c 6239 byte pointType;
wolfSSL 15:117db924cf7c 6240
wolfSSL 15:117db924cf7c 6241 if (in == NULL || key == NULL)
wolfSSL 15:117db924cf7c 6242 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 6243
wolfSSL 15:117db924cf7c 6244 /* must be odd */
wolfSSL 15:117db924cf7c 6245 if ((inLen & 1) == 0) {
wolfSSL 15:117db924cf7c 6246 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 6247 }
wolfSSL 15:117db924cf7c 6248
wolfSSL 15:117db924cf7c 6249 /* make sure required variables are reset */
wolfSSL 15:117db924cf7c 6250 wc_ecc_reset(key);
wolfSSL 15:117db924cf7c 6251
wolfSSL 15:117db924cf7c 6252 /* init key */
wolfSSL 15:117db924cf7c 6253 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 6254 key->pubkey.x = (mp_int*)&key->pubkey.xyz[0];
wolfSSL 15:117db924cf7c 6255 key->pubkey.y = (mp_int*)&key->pubkey.xyz[1];
wolfSSL 15:117db924cf7c 6256 key->pubkey.z = (mp_int*)&key->pubkey.xyz[2];
wolfSSL 15:117db924cf7c 6257 alt_fp_init(key->pubkey.x);
wolfSSL 15:117db924cf7c 6258 alt_fp_init(key->pubkey.y);
wolfSSL 15:117db924cf7c 6259 alt_fp_init(key->pubkey.z);
wolfSSL 15:117db924cf7c 6260 err = mp_init(&key->k);
wolfSSL 15:117db924cf7c 6261 #else
wolfSSL 15:117db924cf7c 6262 err = mp_init_multi(&key->k,
wolfSSL 15:117db924cf7c 6263 key->pubkey.x, key->pubkey.y, key->pubkey.z, NULL, NULL);
wolfSSL 15:117db924cf7c 6264 #endif
wolfSSL 15:117db924cf7c 6265 if (err != MP_OKAY)
wolfSSL 15:117db924cf7c 6266 return MEMORY_E;
wolfSSL 15:117db924cf7c 6267
wolfSSL 15:117db924cf7c 6268 /* check for point type (4, 2, or 3) */
wolfSSL 15:117db924cf7c 6269 pointType = in[0];
wolfSSL 15:117db924cf7c 6270 if (pointType != ECC_POINT_UNCOMP && pointType != ECC_POINT_COMP_EVEN &&
wolfSSL 15:117db924cf7c 6271 pointType != ECC_POINT_COMP_ODD) {
wolfSSL 15:117db924cf7c 6272 err = ASN_PARSE_E;
wolfSSL 15:117db924cf7c 6273 }
wolfSSL 15:117db924cf7c 6274
wolfSSL 15:117db924cf7c 6275 if (pointType == ECC_POINT_COMP_EVEN || pointType == ECC_POINT_COMP_ODD) {
wolfSSL 15:117db924cf7c 6276 #ifdef HAVE_COMP_KEY
wolfSSL 15:117db924cf7c 6277 compressed = 1;
wolfSSL 15:117db924cf7c 6278 #else
wolfSSL 15:117db924cf7c 6279 err = NOT_COMPILED_IN;
wolfSSL 15:117db924cf7c 6280 #endif
wolfSSL 15:117db924cf7c 6281 }
wolfSSL 15:117db924cf7c 6282
wolfSSL 15:117db924cf7c 6283 /* adjust to skip first byte */
wolfSSL 15:117db924cf7c 6284 inLen -= 1;
wolfSSL 15:117db924cf7c 6285 in += 1;
wolfSSL 15:117db924cf7c 6286
wolfSSL 15:117db924cf7c 6287 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 6288 #ifdef HAVE_COMP_KEY
wolfSSL 15:117db924cf7c 6289 /* adjust inLen if compressed */
wolfSSL 15:117db924cf7c 6290 if (compressed)
wolfSSL 15:117db924cf7c 6291 inLen = inLen*2 + 1; /* used uncompressed len */
wolfSSL 15:117db924cf7c 6292 #endif
wolfSSL 15:117db924cf7c 6293
wolfSSL 15:117db924cf7c 6294 /* determine key size */
wolfSSL 15:117db924cf7c 6295 keysize = (inLen>>1);
wolfSSL 15:117db924cf7c 6296 err = wc_ecc_set_curve(key, keysize, curve_id);
wolfSSL 15:117db924cf7c 6297 key->type = ECC_PUBLICKEY;
wolfSSL 15:117db924cf7c 6298 }
wolfSSL 15:117db924cf7c 6299
wolfSSL 15:117db924cf7c 6300 /* read data */
wolfSSL 15:117db924cf7c 6301 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6302 err = mp_read_unsigned_bin(key->pubkey.x, (byte*)in, keysize);
wolfSSL 15:117db924cf7c 6303
wolfSSL 15:117db924cf7c 6304 #ifdef HAVE_COMP_KEY
wolfSSL 15:117db924cf7c 6305 if (err == MP_OKAY && compressed == 1) { /* build y */
wolfSSL 15:117db924cf7c 6306 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 6307 mp_int t1, t2;
wolfSSL 15:117db924cf7c 6308 int did_init = 0;
wolfSSL 15:117db924cf7c 6309
wolfSSL 15:117db924cf7c 6310 DECLARE_CURVE_SPECS(curve, 3);
wolfSSL 15:117db924cf7c 6311 ALLOC_CURVE_SPECS(3);
wolfSSL 15:117db924cf7c 6312
wolfSSL 15:117db924cf7c 6313 if (mp_init_multi(&t1, &t2, NULL, NULL, NULL, NULL) != MP_OKAY)
wolfSSL 15:117db924cf7c 6314 err = MEMORY_E;
wolfSSL 15:117db924cf7c 6315 else
wolfSSL 15:117db924cf7c 6316 did_init = 1;
wolfSSL 15:117db924cf7c 6317
wolfSSL 15:117db924cf7c 6318 /* load curve info */
wolfSSL 15:117db924cf7c 6319 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6320 err = wc_ecc_curve_load(key->dp, &curve,
wolfSSL 15:117db924cf7c 6321 (ECC_CURVE_FIELD_PRIME | ECC_CURVE_FIELD_AF |
wolfSSL 15:117db924cf7c 6322 ECC_CURVE_FIELD_BF));
wolfSSL 15:117db924cf7c 6323
wolfSSL 15:117db924cf7c 6324 /* compute x^3 */
wolfSSL 15:117db924cf7c 6325 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6326 err = mp_sqr(key->pubkey.x, &t1);
wolfSSL 15:117db924cf7c 6327 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6328 err = mp_mulmod(&t1, key->pubkey.x, curve->prime, &t1);
wolfSSL 15:117db924cf7c 6329
wolfSSL 15:117db924cf7c 6330 /* compute x^3 + a*x */
wolfSSL 15:117db924cf7c 6331 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6332 err = mp_mulmod(curve->Af, key->pubkey.x, curve->prime, &t2);
wolfSSL 15:117db924cf7c 6333 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6334 err = mp_add(&t1, &t2, &t1);
wolfSSL 15:117db924cf7c 6335
wolfSSL 15:117db924cf7c 6336 /* compute x^3 + a*x + b */
wolfSSL 15:117db924cf7c 6337 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6338 err = mp_add(&t1, curve->Bf, &t1);
wolfSSL 15:117db924cf7c 6339
wolfSSL 15:117db924cf7c 6340 /* compute sqrt(x^3 + a*x + b) */
wolfSSL 15:117db924cf7c 6341 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6342 err = mp_sqrtmod_prime(&t1, curve->prime, &t2);
wolfSSL 15:117db924cf7c 6343
wolfSSL 15:117db924cf7c 6344 /* adjust y */
wolfSSL 15:117db924cf7c 6345 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 6346 if ((mp_isodd(&t2) == MP_YES && pointType == ECC_POINT_COMP_ODD) ||
wolfSSL 15:117db924cf7c 6347 (mp_isodd(&t2) == MP_NO && pointType == ECC_POINT_COMP_EVEN)) {
wolfSSL 15:117db924cf7c 6348 err = mp_mod(&t2, curve->prime, &t2);
wolfSSL 15:117db924cf7c 6349 }
wolfSSL 15:117db924cf7c 6350 else {
wolfSSL 15:117db924cf7c 6351 err = mp_submod(curve->prime, &t2, curve->prime, &t2);
wolfSSL 15:117db924cf7c 6352 }
wolfSSL 15:117db924cf7c 6353 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6354 err = mp_copy(&t2, key->pubkey.y);
wolfSSL 15:117db924cf7c 6355 }
wolfSSL 15:117db924cf7c 6356
wolfSSL 15:117db924cf7c 6357 if (did_init) {
wolfSSL 15:117db924cf7c 6358 mp_clear(&t2);
wolfSSL 15:117db924cf7c 6359 mp_clear(&t1);
wolfSSL 15:117db924cf7c 6360 }
wolfSSL 15:117db924cf7c 6361
wolfSSL 15:117db924cf7c 6362 wc_ecc_curve_free(curve);
wolfSSL 15:117db924cf7c 6363 FREE_CURVE_SPECS();
wolfSSL 15:117db924cf7c 6364 #else
wolfSSL 15:117db924cf7c 6365 sp_ecc_uncompress_256(key->pubkey.x, pointType, key->pubkey.y);
wolfSSL 15:117db924cf7c 6366 #endif
wolfSSL 15:117db924cf7c 6367 }
wolfSSL 15:117db924cf7c 6368 #endif /* HAVE_COMP_KEY */
wolfSSL 15:117db924cf7c 6369
wolfSSL 15:117db924cf7c 6370 if (err == MP_OKAY && compressed == 0)
wolfSSL 15:117db924cf7c 6371 err = mp_read_unsigned_bin(key->pubkey.y, (byte*)in + keysize, keysize);
wolfSSL 15:117db924cf7c 6372 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6373 err = mp_set(key->pubkey.z, 1);
wolfSSL 15:117db924cf7c 6374
wolfSSL 15:117db924cf7c 6375 #ifdef WOLFSSL_VALIDATE_ECC_IMPORT
wolfSSL 15:117db924cf7c 6376 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6377 err = wc_ecc_check_key(key);
wolfSSL 15:117db924cf7c 6378 #endif
wolfSSL 15:117db924cf7c 6379
wolfSSL 15:117db924cf7c 6380 if (err != MP_OKAY) {
wolfSSL 15:117db924cf7c 6381 mp_clear(key->pubkey.x);
wolfSSL 15:117db924cf7c 6382 mp_clear(key->pubkey.y);
wolfSSL 15:117db924cf7c 6383 mp_clear(key->pubkey.z);
wolfSSL 15:117db924cf7c 6384 mp_clear(&key->k);
wolfSSL 15:117db924cf7c 6385 }
wolfSSL 15:117db924cf7c 6386
wolfSSL 15:117db924cf7c 6387 return err;
wolfSSL 15:117db924cf7c 6388 }
wolfSSL 15:117db924cf7c 6389
wolfSSL 15:117db924cf7c 6390 int wc_ecc_import_x963(const byte* in, word32 inLen, ecc_key* key)
wolfSSL 15:117db924cf7c 6391 {
wolfSSL 15:117db924cf7c 6392 return wc_ecc_import_x963_ex(in, inLen, key, ECC_CURVE_DEF);
wolfSSL 15:117db924cf7c 6393 }
wolfSSL 15:117db924cf7c 6394 #endif /* HAVE_ECC_KEY_IMPORT */
wolfSSL 15:117db924cf7c 6395
wolfSSL 15:117db924cf7c 6396 #ifdef HAVE_ECC_KEY_EXPORT
wolfSSL 15:117db924cf7c 6397 /* export ecc private key only raw, outLen is in/out size
wolfSSL 15:117db924cf7c 6398 return MP_OKAY on success */
wolfSSL 15:117db924cf7c 6399 int wc_ecc_export_private_only(ecc_key* key, byte* out, word32* outLen)
wolfSSL 15:117db924cf7c 6400 {
wolfSSL 15:117db924cf7c 6401 word32 numlen;
wolfSSL 15:117db924cf7c 6402
wolfSSL 15:117db924cf7c 6403 if (key == NULL || out == NULL || outLen == NULL) {
wolfSSL 15:117db924cf7c 6404 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 6405 }
wolfSSL 15:117db924cf7c 6406
wolfSSL 15:117db924cf7c 6407 if (wc_ecc_is_valid_idx(key->idx) == 0) {
wolfSSL 15:117db924cf7c 6408 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 6409 }
wolfSSL 15:117db924cf7c 6410 numlen = key->dp->size;
wolfSSL 15:117db924cf7c 6411
wolfSSL 15:117db924cf7c 6412 if (*outLen < numlen) {
wolfSSL 15:117db924cf7c 6413 *outLen = numlen;
wolfSSL 15:117db924cf7c 6414 return BUFFER_E;
wolfSSL 15:117db924cf7c 6415 }
wolfSSL 15:117db924cf7c 6416 *outLen = numlen;
wolfSSL 15:117db924cf7c 6417 XMEMSET(out, 0, *outLen);
wolfSSL 15:117db924cf7c 6418
wolfSSL 15:117db924cf7c 6419 #ifdef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 6420 /* TODO: Implement equiv call to ATECC508A */
wolfSSL 15:117db924cf7c 6421 return BAD_COND_E;
wolfSSL 15:117db924cf7c 6422
wolfSSL 15:117db924cf7c 6423 #else
wolfSSL 15:117db924cf7c 6424
wolfSSL 15:117db924cf7c 6425 return mp_to_unsigned_bin(&key->k, out + (numlen -
wolfSSL 15:117db924cf7c 6426 mp_unsigned_bin_size(&key->k)));
wolfSSL 15:117db924cf7c 6427 #endif /* WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 6428 }
wolfSSL 15:117db924cf7c 6429
wolfSSL 15:117db924cf7c 6430
wolfSSL 15:117db924cf7c 6431 /* export ecc key to component form, d is optional if only exporting public
wolfSSL 15:117db924cf7c 6432 * return MP_OKAY on success */
wolfSSL 15:117db924cf7c 6433 static int wc_ecc_export_raw(ecc_key* key, byte* qx, word32* qxLen,
wolfSSL 15:117db924cf7c 6434 byte* qy, word32* qyLen, byte* d, word32* dLen)
wolfSSL 15:117db924cf7c 6435 {
wolfSSL 15:117db924cf7c 6436 int err;
wolfSSL 15:117db924cf7c 6437 byte exportPriv = 0;
wolfSSL 15:117db924cf7c 6438 word32 numLen;
wolfSSL 15:117db924cf7c 6439
wolfSSL 15:117db924cf7c 6440 if (key == NULL || qx == NULL || qxLen == NULL || qy == NULL ||
wolfSSL 15:117db924cf7c 6441 qyLen == NULL) {
wolfSSL 15:117db924cf7c 6442 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 6443 }
wolfSSL 15:117db924cf7c 6444
wolfSSL 15:117db924cf7c 6445 if (key->type == ECC_PRIVATEKEY_ONLY) {
wolfSSL 15:117db924cf7c 6446 return ECC_PRIVATEONLY_E;
wolfSSL 15:117db924cf7c 6447 }
wolfSSL 15:117db924cf7c 6448
wolfSSL 15:117db924cf7c 6449 if (wc_ecc_is_valid_idx(key->idx) == 0) {
wolfSSL 15:117db924cf7c 6450 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 6451 }
wolfSSL 15:117db924cf7c 6452 numLen = key->dp->size;
wolfSSL 15:117db924cf7c 6453
wolfSSL 15:117db924cf7c 6454 if (d != NULL) {
wolfSSL 15:117db924cf7c 6455 if (dLen == NULL || key->type != ECC_PRIVATEKEY)
wolfSSL 15:117db924cf7c 6456 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 6457 exportPriv = 1;
wolfSSL 15:117db924cf7c 6458 }
wolfSSL 15:117db924cf7c 6459
wolfSSL 15:117db924cf7c 6460 /* check public buffer sizes */
wolfSSL 15:117db924cf7c 6461 if ((*qxLen < numLen) || (*qyLen < numLen)) {
wolfSSL 15:117db924cf7c 6462 *qxLen = numLen;
wolfSSL 15:117db924cf7c 6463 *qyLen = numLen;
wolfSSL 15:117db924cf7c 6464 return BUFFER_E;
wolfSSL 15:117db924cf7c 6465 }
wolfSSL 15:117db924cf7c 6466
wolfSSL 15:117db924cf7c 6467 *qxLen = numLen;
wolfSSL 15:117db924cf7c 6468 *qyLen = numLen;
wolfSSL 15:117db924cf7c 6469
wolfSSL 15:117db924cf7c 6470 XMEMSET(qx, 0, *qxLen);
wolfSSL 15:117db924cf7c 6471 XMEMSET(qy, 0, *qyLen);
wolfSSL 15:117db924cf7c 6472
wolfSSL 15:117db924cf7c 6473 /* private d component */
wolfSSL 15:117db924cf7c 6474 if (exportPriv == 1) {
wolfSSL 15:117db924cf7c 6475
wolfSSL 15:117db924cf7c 6476 /* check private buffer size */
wolfSSL 15:117db924cf7c 6477 if (*dLen < numLen) {
wolfSSL 15:117db924cf7c 6478 *dLen = numLen;
wolfSSL 15:117db924cf7c 6479 return BUFFER_E;
wolfSSL 15:117db924cf7c 6480 }
wolfSSL 15:117db924cf7c 6481
wolfSSL 15:117db924cf7c 6482 *dLen = numLen;
wolfSSL 15:117db924cf7c 6483 XMEMSET(d, 0, *dLen);
wolfSSL 15:117db924cf7c 6484
wolfSSL 15:117db924cf7c 6485 #ifdef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 6486 /* TODO: Implement equiv call to ATECC508A */
wolfSSL 15:117db924cf7c 6487 return BAD_COND_E;
wolfSSL 15:117db924cf7c 6488
wolfSSL 15:117db924cf7c 6489 #else
wolfSSL 15:117db924cf7c 6490
wolfSSL 15:117db924cf7c 6491 /* private key, d */
wolfSSL 15:117db924cf7c 6492 err = mp_to_unsigned_bin(&key->k, d +
wolfSSL 15:117db924cf7c 6493 (numLen - mp_unsigned_bin_size(&key->k)));
wolfSSL 15:117db924cf7c 6494 if (err != MP_OKAY)
wolfSSL 15:117db924cf7c 6495 return err;
wolfSSL 15:117db924cf7c 6496 #endif /* WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 6497 }
wolfSSL 15:117db924cf7c 6498
wolfSSL 15:117db924cf7c 6499 /* public x component */
wolfSSL 15:117db924cf7c 6500 err = mp_to_unsigned_bin(key->pubkey.x, qx +
wolfSSL 15:117db924cf7c 6501 (numLen - mp_unsigned_bin_size(key->pubkey.x)));
wolfSSL 15:117db924cf7c 6502 if (err != MP_OKAY)
wolfSSL 15:117db924cf7c 6503 return err;
wolfSSL 15:117db924cf7c 6504
wolfSSL 15:117db924cf7c 6505 /* public y component */
wolfSSL 15:117db924cf7c 6506 err = mp_to_unsigned_bin(key->pubkey.y, qy +
wolfSSL 15:117db924cf7c 6507 (numLen - mp_unsigned_bin_size(key->pubkey.y)));
wolfSSL 15:117db924cf7c 6508 if (err != MP_OKAY)
wolfSSL 15:117db924cf7c 6509 return err;
wolfSSL 15:117db924cf7c 6510
wolfSSL 15:117db924cf7c 6511 return 0;
wolfSSL 15:117db924cf7c 6512 }
wolfSSL 15:117db924cf7c 6513
wolfSSL 15:117db924cf7c 6514
wolfSSL 15:117db924cf7c 6515 /* export public key to raw elements including public (Qx,Qy)
wolfSSL 15:117db924cf7c 6516 * return MP_OKAY on success, negative on error */
wolfSSL 15:117db924cf7c 6517 int wc_ecc_export_public_raw(ecc_key* key, byte* qx, word32* qxLen,
wolfSSL 15:117db924cf7c 6518 byte* qy, word32* qyLen)
wolfSSL 15:117db924cf7c 6519 {
wolfSSL 15:117db924cf7c 6520 return wc_ecc_export_raw(key, qx, qxLen, qy, qyLen, NULL, NULL);
wolfSSL 15:117db924cf7c 6521 }
wolfSSL 15:117db924cf7c 6522
wolfSSL 15:117db924cf7c 6523
wolfSSL 15:117db924cf7c 6524 /* export ecc key to raw elements including public (Qx,Qy) and private (d)
wolfSSL 15:117db924cf7c 6525 * return MP_OKAY on success, negative on error */
wolfSSL 15:117db924cf7c 6526 int wc_ecc_export_private_raw(ecc_key* key, byte* qx, word32* qxLen,
wolfSSL 15:117db924cf7c 6527 byte* qy, word32* qyLen, byte* d, word32* dLen)
wolfSSL 15:117db924cf7c 6528 {
wolfSSL 15:117db924cf7c 6529 /* sanitize d and dLen, other args are checked later */
wolfSSL 15:117db924cf7c 6530 if (d == NULL || dLen == NULL)
wolfSSL 15:117db924cf7c 6531 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 6532
wolfSSL 15:117db924cf7c 6533 return wc_ecc_export_raw(key, qx, qxLen, qy, qyLen, d, dLen);
wolfSSL 15:117db924cf7c 6534 }
wolfSSL 15:117db924cf7c 6535
wolfSSL 15:117db924cf7c 6536 #endif /* HAVE_ECC_KEY_EXPORT */
wolfSSL 15:117db924cf7c 6537
wolfSSL 15:117db924cf7c 6538 #ifdef HAVE_ECC_KEY_IMPORT
wolfSSL 15:117db924cf7c 6539 /* import private key, public part optional if (pub) passed as NULL */
wolfSSL 15:117db924cf7c 6540 int wc_ecc_import_private_key_ex(const byte* priv, word32 privSz,
wolfSSL 15:117db924cf7c 6541 const byte* pub, word32 pubSz, ecc_key* key,
wolfSSL 15:117db924cf7c 6542 int curve_id)
wolfSSL 15:117db924cf7c 6543 {
wolfSSL 15:117db924cf7c 6544 int ret;
wolfSSL 15:117db924cf7c 6545 word32 idx = 0;
wolfSSL 15:117db924cf7c 6546
wolfSSL 15:117db924cf7c 6547 if (key == NULL || priv == NULL)
wolfSSL 15:117db924cf7c 6548 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 6549
wolfSSL 15:117db924cf7c 6550 /* public optional, NULL if only importing private */
wolfSSL 15:117db924cf7c 6551 if (pub != NULL) {
wolfSSL 15:117db924cf7c 6552 ret = wc_ecc_import_x963_ex(pub, pubSz, key, curve_id);
wolfSSL 15:117db924cf7c 6553 if (ret < 0)
wolfSSL 15:117db924cf7c 6554 ret = wc_EccPublicKeyDecode(pub, &idx, key, pubSz);
wolfSSL 15:117db924cf7c 6555 key->type = ECC_PRIVATEKEY;
wolfSSL 15:117db924cf7c 6556 }
wolfSSL 15:117db924cf7c 6557 else {
wolfSSL 15:117db924cf7c 6558 /* make sure required variables are reset */
wolfSSL 15:117db924cf7c 6559 wc_ecc_reset(key);
wolfSSL 15:117db924cf7c 6560
wolfSSL 15:117db924cf7c 6561 /* set key size */
wolfSSL 15:117db924cf7c 6562 ret = wc_ecc_set_curve(key, privSz, curve_id);
wolfSSL 15:117db924cf7c 6563 key->type = ECC_PRIVATEKEY_ONLY;
wolfSSL 15:117db924cf7c 6564 }
wolfSSL 15:117db924cf7c 6565
wolfSSL 15:117db924cf7c 6566 if (ret != 0)
wolfSSL 15:117db924cf7c 6567 return ret;
wolfSSL 15:117db924cf7c 6568
wolfSSL 15:117db924cf7c 6569 #ifdef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 6570 /* TODO: Implement equiv call to ATECC508A */
wolfSSL 15:117db924cf7c 6571 return BAD_COND_E;
wolfSSL 15:117db924cf7c 6572
wolfSSL 15:117db924cf7c 6573 #else
wolfSSL 15:117db924cf7c 6574
wolfSSL 15:117db924cf7c 6575 ret = mp_read_unsigned_bin(&key->k, priv, privSz);
wolfSSL 15:117db924cf7c 6576
wolfSSL 15:117db924cf7c 6577 #endif /* WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 6578
wolfSSL 15:117db924cf7c 6579 #ifdef WOLFSSL_VALIDATE_ECC_IMPORT
wolfSSL 15:117db924cf7c 6580 if ((pub != NULL) && (ret == MP_OKAY))
wolfSSL 15:117db924cf7c 6581 /* public key needed to perform key validation */
wolfSSL 15:117db924cf7c 6582 ret = ecc_check_privkey_gen_helper(key);
wolfSSL 15:117db924cf7c 6583 #endif
wolfSSL 15:117db924cf7c 6584
wolfSSL 15:117db924cf7c 6585 return ret;
wolfSSL 15:117db924cf7c 6586 }
wolfSSL 15:117db924cf7c 6587
wolfSSL 15:117db924cf7c 6588 /* ecc private key import, public key in ANSI X9.63 format, private raw */
wolfSSL 15:117db924cf7c 6589 int wc_ecc_import_private_key(const byte* priv, word32 privSz, const byte* pub,
wolfSSL 15:117db924cf7c 6590 word32 pubSz, ecc_key* key)
wolfSSL 15:117db924cf7c 6591 {
wolfSSL 15:117db924cf7c 6592 return wc_ecc_import_private_key_ex(priv, privSz, pub, pubSz, key,
wolfSSL 15:117db924cf7c 6593 ECC_CURVE_DEF);
wolfSSL 15:117db924cf7c 6594 }
wolfSSL 15:117db924cf7c 6595 #endif /* HAVE_ECC_KEY_IMPORT */
wolfSSL 15:117db924cf7c 6596
wolfSSL 15:117db924cf7c 6597 #ifndef NO_ASN
wolfSSL 15:117db924cf7c 6598 /**
wolfSSL 15:117db924cf7c 6599 Convert ECC R,S to signature
wolfSSL 15:117db924cf7c 6600 r R component of signature
wolfSSL 15:117db924cf7c 6601 s S component of signature
wolfSSL 15:117db924cf7c 6602 out DER-encoded ECDSA signature
wolfSSL 15:117db924cf7c 6603 outlen [in/out] output buffer size, output signature size
wolfSSL 15:117db924cf7c 6604 return MP_OKAY on success
wolfSSL 15:117db924cf7c 6605 */
wolfSSL 15:117db924cf7c 6606 int wc_ecc_rs_to_sig(const char* r, const char* s, byte* out, word32* outlen)
wolfSSL 15:117db924cf7c 6607 {
wolfSSL 15:117db924cf7c 6608 int err;
wolfSSL 15:117db924cf7c 6609 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 6610 mp_int* rtmp = NULL;
wolfSSL 15:117db924cf7c 6611 mp_int* stmp = NULL;
wolfSSL 15:117db924cf7c 6612 #else
wolfSSL 15:117db924cf7c 6613 mp_int rtmp[1];
wolfSSL 15:117db924cf7c 6614 mp_int stmp[1];
wolfSSL 15:117db924cf7c 6615 #endif
wolfSSL 15:117db924cf7c 6616
wolfSSL 15:117db924cf7c 6617 if (r == NULL || s == NULL || out == NULL || outlen == NULL)
wolfSSL 15:117db924cf7c 6618 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 6619
wolfSSL 15:117db924cf7c 6620 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 6621 rtmp = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6622 if (rtmp == NULL)
wolfSSL 15:117db924cf7c 6623 return MEMORY_E;
wolfSSL 15:117db924cf7c 6624 stmp = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6625 if (stmp == NULL) {
wolfSSL 15:117db924cf7c 6626 XFREE(rtmp, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6627 return MEMORY_E;
wolfSSL 15:117db924cf7c 6628 }
wolfSSL 15:117db924cf7c 6629 #endif
wolfSSL 15:117db924cf7c 6630
wolfSSL 15:117db924cf7c 6631 err = mp_init_multi(rtmp, stmp, NULL, NULL, NULL, NULL);
wolfSSL 15:117db924cf7c 6632 if (err != MP_OKAY) {
wolfSSL 15:117db924cf7c 6633 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 6634 XFREE(stmp, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6635 XFREE(rtmp, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6636 #endif
wolfSSL 15:117db924cf7c 6637 return err;
wolfSSL 15:117db924cf7c 6638 }
wolfSSL 15:117db924cf7c 6639
wolfSSL 15:117db924cf7c 6640 err = mp_read_radix(rtmp, r, MP_RADIX_HEX);
wolfSSL 15:117db924cf7c 6641 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6642 err = mp_read_radix(stmp, s, MP_RADIX_HEX);
wolfSSL 15:117db924cf7c 6643
wolfSSL 15:117db924cf7c 6644 /* convert mp_ints to ECDSA sig, initializes rtmp and stmp internally */
wolfSSL 15:117db924cf7c 6645 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6646 err = StoreECC_DSA_Sig(out, outlen, rtmp, stmp);
wolfSSL 15:117db924cf7c 6647
wolfSSL 15:117db924cf7c 6648 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 6649 if (mp_iszero(rtmp) == MP_YES || mp_iszero(stmp) == MP_YES)
wolfSSL 15:117db924cf7c 6650 err = MP_ZERO_E;
wolfSSL 15:117db924cf7c 6651 }
wolfSSL 15:117db924cf7c 6652
wolfSSL 15:117db924cf7c 6653 mp_clear(rtmp);
wolfSSL 15:117db924cf7c 6654 mp_clear(stmp);
wolfSSL 15:117db924cf7c 6655 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 6656 XFREE(stmp, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6657 XFREE(rtmp, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6658 #endif
wolfSSL 15:117db924cf7c 6659
wolfSSL 15:117db924cf7c 6660 return err;
wolfSSL 15:117db924cf7c 6661 }
wolfSSL 15:117db924cf7c 6662
wolfSSL 15:117db924cf7c 6663 /**
wolfSSL 15:117db924cf7c 6664 Convert ECC R,S raw unsigned bin to signature
wolfSSL 15:117db924cf7c 6665 r R component of signature
wolfSSL 15:117db924cf7c 6666 rSz R size
wolfSSL 15:117db924cf7c 6667 s S component of signature
wolfSSL 15:117db924cf7c 6668 sSz S size
wolfSSL 15:117db924cf7c 6669 out DER-encoded ECDSA signature
wolfSSL 15:117db924cf7c 6670 outlen [in/out] output buffer size, output signature size
wolfSSL 15:117db924cf7c 6671 return MP_OKAY on success
wolfSSL 15:117db924cf7c 6672 */
wolfSSL 15:117db924cf7c 6673 int wc_ecc_rs_raw_to_sig(const byte* r, word32 rSz, const byte* s, word32 sSz,
wolfSSL 15:117db924cf7c 6674 byte* out, word32* outlen)
wolfSSL 15:117db924cf7c 6675 {
wolfSSL 15:117db924cf7c 6676 int err;
wolfSSL 15:117db924cf7c 6677 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 6678 mp_int* rtmp = NULL;
wolfSSL 15:117db924cf7c 6679 mp_int* stmp = NULL;
wolfSSL 15:117db924cf7c 6680 #else
wolfSSL 15:117db924cf7c 6681 mp_int rtmp[1];
wolfSSL 15:117db924cf7c 6682 mp_int stmp[1];
wolfSSL 15:117db924cf7c 6683 #endif
wolfSSL 15:117db924cf7c 6684
wolfSSL 15:117db924cf7c 6685 if (r == NULL || s == NULL || out == NULL || outlen == NULL)
wolfSSL 15:117db924cf7c 6686 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 6687
wolfSSL 15:117db924cf7c 6688 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 6689 rtmp = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6690 if (rtmp == NULL)
wolfSSL 15:117db924cf7c 6691 return MEMORY_E;
wolfSSL 15:117db924cf7c 6692 stmp = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6693 if (stmp == NULL) {
wolfSSL 15:117db924cf7c 6694 XFREE(rtmp, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6695 return MEMORY_E;
wolfSSL 15:117db924cf7c 6696 }
wolfSSL 15:117db924cf7c 6697 #endif
wolfSSL 15:117db924cf7c 6698
wolfSSL 15:117db924cf7c 6699 err = mp_init_multi(rtmp, stmp, NULL, NULL, NULL, NULL);
wolfSSL 15:117db924cf7c 6700 if (err != MP_OKAY) {
wolfSSL 15:117db924cf7c 6701 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 6702 XFREE(stmp, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6703 XFREE(rtmp, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6704 #endif
wolfSSL 15:117db924cf7c 6705 return err;
wolfSSL 15:117db924cf7c 6706 }
wolfSSL 15:117db924cf7c 6707
wolfSSL 15:117db924cf7c 6708 err = mp_read_unsigned_bin(rtmp, r, rSz);
wolfSSL 15:117db924cf7c 6709 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6710 err = mp_read_unsigned_bin(stmp, s, sSz);
wolfSSL 15:117db924cf7c 6711
wolfSSL 15:117db924cf7c 6712 /* convert mp_ints to ECDSA sig, initializes rtmp and stmp internally */
wolfSSL 15:117db924cf7c 6713 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6714 err = StoreECC_DSA_Sig(out, outlen, rtmp, stmp);
wolfSSL 15:117db924cf7c 6715
wolfSSL 15:117db924cf7c 6716 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 6717 if (mp_iszero(rtmp) == MP_YES || mp_iszero(stmp) == MP_YES)
wolfSSL 15:117db924cf7c 6718 err = MP_ZERO_E;
wolfSSL 15:117db924cf7c 6719 }
wolfSSL 15:117db924cf7c 6720
wolfSSL 15:117db924cf7c 6721 mp_clear(rtmp);
wolfSSL 15:117db924cf7c 6722 mp_clear(stmp);
wolfSSL 15:117db924cf7c 6723 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 6724 XFREE(stmp, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6725 XFREE(rtmp, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6726 #endif
wolfSSL 15:117db924cf7c 6727
wolfSSL 15:117db924cf7c 6728 return err;
wolfSSL 15:117db924cf7c 6729 }
wolfSSL 15:117db924cf7c 6730
wolfSSL 15:117db924cf7c 6731 /**
wolfSSL 15:117db924cf7c 6732 Convert ECC signature to R,S
wolfSSL 15:117db924cf7c 6733 sig DER-encoded ECDSA signature
wolfSSL 15:117db924cf7c 6734 sigLen length of signature in octets
wolfSSL 15:117db924cf7c 6735 r R component of signature
wolfSSL 15:117db924cf7c 6736 rLen [in/out] output "r" buffer size, output "r" size
wolfSSL 15:117db924cf7c 6737 s S component of signature
wolfSSL 15:117db924cf7c 6738 sLen [in/out] output "s" buffer size, output "s" size
wolfSSL 15:117db924cf7c 6739 return MP_OKAY on success, negative on error
wolfSSL 15:117db924cf7c 6740 */
wolfSSL 15:117db924cf7c 6741 int wc_ecc_sig_to_rs(const byte* sig, word32 sigLen, byte* r, word32* rLen,
wolfSSL 15:117db924cf7c 6742 byte* s, word32* sLen)
wolfSSL 15:117db924cf7c 6743 {
wolfSSL 15:117db924cf7c 6744 int err;
wolfSSL 15:117db924cf7c 6745 word32 x = 0;
wolfSSL 15:117db924cf7c 6746 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 6747 mp_int* rtmp = NULL;
wolfSSL 15:117db924cf7c 6748 mp_int* stmp = NULL;
wolfSSL 15:117db924cf7c 6749 #else
wolfSSL 15:117db924cf7c 6750 mp_int rtmp[1];
wolfSSL 15:117db924cf7c 6751 mp_int stmp[1];
wolfSSL 15:117db924cf7c 6752 #endif
wolfSSL 15:117db924cf7c 6753
wolfSSL 15:117db924cf7c 6754 if (sig == NULL || r == NULL || rLen == NULL || s == NULL || sLen == NULL)
wolfSSL 15:117db924cf7c 6755 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 6756
wolfSSL 15:117db924cf7c 6757 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 6758 rtmp = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6759 if (rtmp == NULL)
wolfSSL 15:117db924cf7c 6760 return MEMORY_E;
wolfSSL 15:117db924cf7c 6761 stmp = (mp_int*)XMALLOC(sizeof(mp_int), NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6762 if (stmp == NULL) {
wolfSSL 15:117db924cf7c 6763 XFREE(rtmp, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6764 return MEMORY_E;
wolfSSL 15:117db924cf7c 6765 }
wolfSSL 15:117db924cf7c 6766 #endif
wolfSSL 15:117db924cf7c 6767
wolfSSL 15:117db924cf7c 6768 err = DecodeECC_DSA_Sig(sig, sigLen, rtmp, stmp);
wolfSSL 15:117db924cf7c 6769
wolfSSL 15:117db924cf7c 6770 /* extract r */
wolfSSL 15:117db924cf7c 6771 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 6772 x = mp_unsigned_bin_size(rtmp);
wolfSSL 15:117db924cf7c 6773 if (*rLen < x)
wolfSSL 15:117db924cf7c 6774 err = BUFFER_E;
wolfSSL 15:117db924cf7c 6775
wolfSSL 15:117db924cf7c 6776 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 6777 *rLen = x;
wolfSSL 15:117db924cf7c 6778 err = mp_to_unsigned_bin(rtmp, r);
wolfSSL 15:117db924cf7c 6779 }
wolfSSL 15:117db924cf7c 6780 }
wolfSSL 15:117db924cf7c 6781
wolfSSL 15:117db924cf7c 6782 /* extract s */
wolfSSL 15:117db924cf7c 6783 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 6784 x = mp_unsigned_bin_size(stmp);
wolfSSL 15:117db924cf7c 6785 if (*sLen < x)
wolfSSL 15:117db924cf7c 6786 err = BUFFER_E;
wolfSSL 15:117db924cf7c 6787
wolfSSL 15:117db924cf7c 6788 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 6789 *sLen = x;
wolfSSL 15:117db924cf7c 6790 err = mp_to_unsigned_bin(stmp, s);
wolfSSL 15:117db924cf7c 6791 }
wolfSSL 15:117db924cf7c 6792 }
wolfSSL 15:117db924cf7c 6793
wolfSSL 15:117db924cf7c 6794 mp_clear(rtmp);
wolfSSL 15:117db924cf7c 6795 mp_clear(stmp);
wolfSSL 15:117db924cf7c 6796 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 6797 XFREE(stmp, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6798 XFREE(rtmp, NULL, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 6799 #endif
wolfSSL 15:117db924cf7c 6800
wolfSSL 15:117db924cf7c 6801 return err;
wolfSSL 15:117db924cf7c 6802 }
wolfSSL 15:117db924cf7c 6803 #endif /* !NO_ASN */
wolfSSL 15:117db924cf7c 6804
wolfSSL 15:117db924cf7c 6805 #ifdef HAVE_ECC_KEY_IMPORT
wolfSSL 15:117db924cf7c 6806 static int wc_ecc_import_raw_private(ecc_key* key, const char* qx,
wolfSSL 15:117db924cf7c 6807 const char* qy, const char* d, int curve_id, int encType)
wolfSSL 15:117db924cf7c 6808 {
wolfSSL 15:117db924cf7c 6809 int err = MP_OKAY;
wolfSSL 15:117db924cf7c 6810
wolfSSL 15:117db924cf7c 6811 /* if d is NULL, only import as public key using Qx,Qy */
wolfSSL 15:117db924cf7c 6812 if (key == NULL || qx == NULL || qy == NULL) {
wolfSSL 15:117db924cf7c 6813 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 6814 }
wolfSSL 15:117db924cf7c 6815
wolfSSL 15:117db924cf7c 6816 /* make sure required variables are reset */
wolfSSL 15:117db924cf7c 6817 wc_ecc_reset(key);
wolfSSL 15:117db924cf7c 6818
wolfSSL 15:117db924cf7c 6819 /* set curve type and index */
wolfSSL 15:117db924cf7c 6820 err = wc_ecc_set_curve(key, 0, curve_id);
wolfSSL 15:117db924cf7c 6821 if (err != 0) {
wolfSSL 15:117db924cf7c 6822 return err;
wolfSSL 15:117db924cf7c 6823 }
wolfSSL 15:117db924cf7c 6824
wolfSSL 15:117db924cf7c 6825 #ifdef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 6826 /* TODO: Implement equiv call to ATECC508A */
wolfSSL 15:117db924cf7c 6827 err = BAD_COND_E;
wolfSSL 15:117db924cf7c 6828 (void)d;
wolfSSL 15:117db924cf7c 6829 (void)encType;
wolfSSL 15:117db924cf7c 6830
wolfSSL 15:117db924cf7c 6831 #else
wolfSSL 15:117db924cf7c 6832
wolfSSL 15:117db924cf7c 6833 /* init key */
wolfSSL 15:117db924cf7c 6834 #ifdef ALT_ECC_SIZE
wolfSSL 15:117db924cf7c 6835 key->pubkey.x = (mp_int*)&key->pubkey.xyz[0];
wolfSSL 15:117db924cf7c 6836 key->pubkey.y = (mp_int*)&key->pubkey.xyz[1];
wolfSSL 15:117db924cf7c 6837 key->pubkey.z = (mp_int*)&key->pubkey.xyz[2];
wolfSSL 15:117db924cf7c 6838 alt_fp_init(key->pubkey.x);
wolfSSL 15:117db924cf7c 6839 alt_fp_init(key->pubkey.y);
wolfSSL 15:117db924cf7c 6840 alt_fp_init(key->pubkey.z);
wolfSSL 15:117db924cf7c 6841 err = mp_init(&key->k);
wolfSSL 15:117db924cf7c 6842 #else
wolfSSL 15:117db924cf7c 6843 err = mp_init_multi(&key->k, key->pubkey.x, key->pubkey.y, key->pubkey.z,
wolfSSL 15:117db924cf7c 6844 NULL, NULL);
wolfSSL 15:117db924cf7c 6845 #endif
wolfSSL 15:117db924cf7c 6846 if (err != MP_OKAY)
wolfSSL 15:117db924cf7c 6847 return MEMORY_E;
wolfSSL 15:117db924cf7c 6848
wolfSSL 15:117db924cf7c 6849 /* read Qx */
wolfSSL 15:117db924cf7c 6850 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 6851 if (encType == ECC_TYPE_HEX_STR)
wolfSSL 15:117db924cf7c 6852 err = mp_read_radix(key->pubkey.x, qx, MP_RADIX_HEX);
wolfSSL 15:117db924cf7c 6853 else
wolfSSL 15:117db924cf7c 6854 err = mp_read_unsigned_bin(key->pubkey.x, (const byte*)qx,
wolfSSL 15:117db924cf7c 6855 key->dp->size);
wolfSSL 15:117db924cf7c 6856 }
wolfSSL 15:117db924cf7c 6857
wolfSSL 15:117db924cf7c 6858 /* read Qy */
wolfSSL 15:117db924cf7c 6859 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 6860 if (encType == ECC_TYPE_HEX_STR)
wolfSSL 15:117db924cf7c 6861 err = mp_read_radix(key->pubkey.y, qy, MP_RADIX_HEX);
wolfSSL 15:117db924cf7c 6862 else
wolfSSL 15:117db924cf7c 6863 err = mp_read_unsigned_bin(key->pubkey.y, (const byte*)qy,
wolfSSL 15:117db924cf7c 6864 key->dp->size);
wolfSSL 15:117db924cf7c 6865
wolfSSL 15:117db924cf7c 6866 }
wolfSSL 15:117db924cf7c 6867
wolfSSL 15:117db924cf7c 6868 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6869 err = mp_set(key->pubkey.z, 1);
wolfSSL 15:117db924cf7c 6870
wolfSSL 15:117db924cf7c 6871 /* import private key */
wolfSSL 15:117db924cf7c 6872 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 6873 if (d != NULL) {
wolfSSL 15:117db924cf7c 6874 key->type = ECC_PRIVATEKEY;
wolfSSL 15:117db924cf7c 6875
wolfSSL 15:117db924cf7c 6876 if (encType == ECC_TYPE_HEX_STR)
wolfSSL 15:117db924cf7c 6877 err = mp_read_radix(&key->k, d, MP_RADIX_HEX);
wolfSSL 15:117db924cf7c 6878 else
wolfSSL 15:117db924cf7c 6879 err = mp_read_unsigned_bin(&key->k, (const byte*)d,
wolfSSL 15:117db924cf7c 6880 key->dp->size);
wolfSSL 15:117db924cf7c 6881
wolfSSL 15:117db924cf7c 6882 } else {
wolfSSL 15:117db924cf7c 6883 key->type = ECC_PUBLICKEY;
wolfSSL 15:117db924cf7c 6884 }
wolfSSL 15:117db924cf7c 6885 }
wolfSSL 15:117db924cf7c 6886
wolfSSL 15:117db924cf7c 6887 #ifdef WOLFSSL_VALIDATE_ECC_IMPORT
wolfSSL 15:117db924cf7c 6888 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 6889 err = wc_ecc_check_key(key);
wolfSSL 15:117db924cf7c 6890 #endif
wolfSSL 15:117db924cf7c 6891
wolfSSL 15:117db924cf7c 6892 if (err != MP_OKAY) {
wolfSSL 15:117db924cf7c 6893 mp_clear(key->pubkey.x);
wolfSSL 15:117db924cf7c 6894 mp_clear(key->pubkey.y);
wolfSSL 15:117db924cf7c 6895 mp_clear(key->pubkey.z);
wolfSSL 15:117db924cf7c 6896 mp_clear(&key->k);
wolfSSL 15:117db924cf7c 6897 }
wolfSSL 15:117db924cf7c 6898 #endif /* WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 6899
wolfSSL 15:117db924cf7c 6900 return err;
wolfSSL 15:117db924cf7c 6901 }
wolfSSL 15:117db924cf7c 6902
wolfSSL 15:117db924cf7c 6903 /**
wolfSSL 15:117db924cf7c 6904 Import raw ECC key
wolfSSL 15:117db924cf7c 6905 key The destination ecc_key structure
wolfSSL 15:117db924cf7c 6906 qx x component of the public key, as ASCII hex string
wolfSSL 15:117db924cf7c 6907 qy y component of the public key, as ASCII hex string
wolfSSL 15:117db924cf7c 6908 d private key, as ASCII hex string, optional if importing public
wolfSSL 15:117db924cf7c 6909 key only
wolfSSL 15:117db924cf7c 6910 dp Custom ecc_set_type
wolfSSL 15:117db924cf7c 6911 return MP_OKAY on success
wolfSSL 15:117db924cf7c 6912 */
wolfSSL 15:117db924cf7c 6913 int wc_ecc_import_raw_ex(ecc_key* key, const char* qx, const char* qy,
wolfSSL 15:117db924cf7c 6914 const char* d, int curve_id)
wolfSSL 15:117db924cf7c 6915 {
wolfSSL 15:117db924cf7c 6916 return wc_ecc_import_raw_private(key, qx, qy, d, curve_id,
wolfSSL 15:117db924cf7c 6917 ECC_TYPE_HEX_STR);
wolfSSL 15:117db924cf7c 6918
wolfSSL 15:117db924cf7c 6919 }
wolfSSL 15:117db924cf7c 6920
wolfSSL 15:117db924cf7c 6921 /* Import x, y and optional private (d) as unsigned binary */
wolfSSL 15:117db924cf7c 6922 int wc_ecc_import_unsigned(ecc_key* key, byte* qx, byte* qy,
wolfSSL 15:117db924cf7c 6923 byte* d, int curve_id)
wolfSSL 15:117db924cf7c 6924 {
wolfSSL 15:117db924cf7c 6925 return wc_ecc_import_raw_private(key, (const char*)qx, (const char*)qy,
wolfSSL 15:117db924cf7c 6926 (const char*)d, curve_id, ECC_TYPE_UNSIGNED_BIN);
wolfSSL 15:117db924cf7c 6927 }
wolfSSL 15:117db924cf7c 6928
wolfSSL 15:117db924cf7c 6929 /**
wolfSSL 15:117db924cf7c 6930 Import raw ECC key
wolfSSL 15:117db924cf7c 6931 key The destination ecc_key structure
wolfSSL 15:117db924cf7c 6932 qx x component of the public key, as ASCII hex string
wolfSSL 15:117db924cf7c 6933 qy y component of the public key, as ASCII hex string
wolfSSL 15:117db924cf7c 6934 d private key, as ASCII hex string, optional if importing public
wolfSSL 15:117db924cf7c 6935 key only
wolfSSL 15:117db924cf7c 6936 curveName ECC curve name, from ecc_sets[]
wolfSSL 15:117db924cf7c 6937 return MP_OKAY on success
wolfSSL 15:117db924cf7c 6938 */
wolfSSL 15:117db924cf7c 6939 int wc_ecc_import_raw(ecc_key* key, const char* qx, const char* qy,
wolfSSL 15:117db924cf7c 6940 const char* d, const char* curveName)
wolfSSL 15:117db924cf7c 6941 {
wolfSSL 15:117db924cf7c 6942 int err, x;
wolfSSL 15:117db924cf7c 6943
wolfSSL 15:117db924cf7c 6944 /* if d is NULL, only import as public key using Qx,Qy */
wolfSSL 15:117db924cf7c 6945 if (key == NULL || qx == NULL || qy == NULL || curveName == NULL) {
wolfSSL 15:117db924cf7c 6946 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 6947 }
wolfSSL 15:117db924cf7c 6948
wolfSSL 15:117db924cf7c 6949 /* set curve type and index */
wolfSSL 15:117db924cf7c 6950 for (x = 0; ecc_sets[x].size != 0; x++) {
wolfSSL 15:117db924cf7c 6951 if (XSTRNCMP(ecc_sets[x].name, curveName,
wolfSSL 15:117db924cf7c 6952 XSTRLEN(curveName)) == 0) {
wolfSSL 15:117db924cf7c 6953 break;
wolfSSL 15:117db924cf7c 6954 }
wolfSSL 15:117db924cf7c 6955 }
wolfSSL 15:117db924cf7c 6956
wolfSSL 15:117db924cf7c 6957 if (ecc_sets[x].size == 0) {
wolfSSL 15:117db924cf7c 6958 WOLFSSL_MSG("ecc_set curve name not found");
wolfSSL 15:117db924cf7c 6959 err = ASN_PARSE_E;
wolfSSL 15:117db924cf7c 6960 } else {
wolfSSL 15:117db924cf7c 6961 return wc_ecc_import_raw_private(key, qx, qy, d, ecc_sets[x].id,
wolfSSL 15:117db924cf7c 6962 ECC_TYPE_HEX_STR);
wolfSSL 15:117db924cf7c 6963 }
wolfSSL 15:117db924cf7c 6964
wolfSSL 15:117db924cf7c 6965 return err;
wolfSSL 15:117db924cf7c 6966 }
wolfSSL 15:117db924cf7c 6967 #endif /* HAVE_ECC_KEY_IMPORT */
wolfSSL 15:117db924cf7c 6968
wolfSSL 15:117db924cf7c 6969 /* key size in octets */
wolfSSL 15:117db924cf7c 6970 int wc_ecc_size(ecc_key* key)
wolfSSL 15:117db924cf7c 6971 {
wolfSSL 15:117db924cf7c 6972 if (key == NULL) return 0;
wolfSSL 15:117db924cf7c 6973
wolfSSL 15:117db924cf7c 6974 return key->dp->size;
wolfSSL 15:117db924cf7c 6975 }
wolfSSL 15:117db924cf7c 6976
wolfSSL 15:117db924cf7c 6977 int wc_ecc_sig_size_calc(int sz)
wolfSSL 15:117db924cf7c 6978 {
wolfSSL 15:117db924cf7c 6979 return (sz * 2) + SIG_HEADER_SZ + ECC_MAX_PAD_SZ;
wolfSSL 15:117db924cf7c 6980 }
wolfSSL 15:117db924cf7c 6981
wolfSSL 15:117db924cf7c 6982 /* worst case estimate, check actual return from wc_ecc_sign_hash for actual
wolfSSL 15:117db924cf7c 6983 value of signature size in octets */
wolfSSL 15:117db924cf7c 6984 int wc_ecc_sig_size(ecc_key* key)
wolfSSL 15:117db924cf7c 6985 {
wolfSSL 15:117db924cf7c 6986 int sz = wc_ecc_size(key);
wolfSSL 15:117db924cf7c 6987 if (sz <= 0)
wolfSSL 15:117db924cf7c 6988 return sz;
wolfSSL 15:117db924cf7c 6989
wolfSSL 15:117db924cf7c 6990 return wc_ecc_sig_size_calc(sz);
wolfSSL 15:117db924cf7c 6991 }
wolfSSL 15:117db924cf7c 6992
wolfSSL 15:117db924cf7c 6993
wolfSSL 15:117db924cf7c 6994 #ifdef FP_ECC
wolfSSL 15:117db924cf7c 6995
wolfSSL 15:117db924cf7c 6996 /* fixed point ECC cache */
wolfSSL 15:117db924cf7c 6997 /* number of entries in the cache */
wolfSSL 15:117db924cf7c 6998 #ifndef FP_ENTRIES
wolfSSL 15:117db924cf7c 6999 #define FP_ENTRIES 15
wolfSSL 15:117db924cf7c 7000 #endif
wolfSSL 15:117db924cf7c 7001
wolfSSL 15:117db924cf7c 7002 /* number of bits in LUT */
wolfSSL 15:117db924cf7c 7003 #ifndef FP_LUT
wolfSSL 15:117db924cf7c 7004 #define FP_LUT 8U
wolfSSL 15:117db924cf7c 7005 #endif
wolfSSL 15:117db924cf7c 7006
wolfSSL 15:117db924cf7c 7007 #ifdef ECC_SHAMIR
wolfSSL 15:117db924cf7c 7008 /* Sharmir requires a bigger LUT, TAO */
wolfSSL 15:117db924cf7c 7009 #if (FP_LUT > 12) || (FP_LUT < 4)
wolfSSL 15:117db924cf7c 7010 #error FP_LUT must be between 4 and 12 inclusively
wolfSSL 15:117db924cf7c 7011 #endif
wolfSSL 15:117db924cf7c 7012 #else
wolfSSL 15:117db924cf7c 7013 #if (FP_LUT > 12) || (FP_LUT < 2)
wolfSSL 15:117db924cf7c 7014 #error FP_LUT must be between 2 and 12 inclusively
wolfSSL 15:117db924cf7c 7015 #endif
wolfSSL 15:117db924cf7c 7016 #endif
wolfSSL 15:117db924cf7c 7017
wolfSSL 15:117db924cf7c 7018
wolfSSL 15:117db924cf7c 7019 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 7020
wolfSSL 15:117db924cf7c 7021 /** Our FP cache */
wolfSSL 15:117db924cf7c 7022 typedef struct {
wolfSSL 15:117db924cf7c 7023 ecc_point* g; /* cached COPY of base point */
wolfSSL 15:117db924cf7c 7024 ecc_point* LUT[1U<<FP_LUT]; /* fixed point lookup */
wolfSSL 15:117db924cf7c 7025 mp_int mu; /* copy of the montgomery constant */
wolfSSL 15:117db924cf7c 7026 int lru_count; /* amount of times this entry has been used */
wolfSSL 15:117db924cf7c 7027 int lock; /* flag to indicate cache eviction */
wolfSSL 15:117db924cf7c 7028 /* permitted (0) or not (1) */
wolfSSL 15:117db924cf7c 7029 } fp_cache_t;
wolfSSL 15:117db924cf7c 7030
wolfSSL 15:117db924cf7c 7031 /* if HAVE_THREAD_LS this cache is per thread, no locking needed */
wolfSSL 15:117db924cf7c 7032 static THREAD_LS_T fp_cache_t fp_cache[FP_ENTRIES];
wolfSSL 15:117db924cf7c 7033
wolfSSL 15:117db924cf7c 7034 #ifndef HAVE_THREAD_LS
wolfSSL 15:117db924cf7c 7035 static volatile int initMutex = 0; /* prevent multiple mutex inits */
wolfSSL 15:117db924cf7c 7036 static wolfSSL_Mutex ecc_fp_lock;
wolfSSL 15:117db924cf7c 7037 #endif /* HAVE_THREAD_LS */
wolfSSL 15:117db924cf7c 7038
wolfSSL 15:117db924cf7c 7039 /* simple table to help direct the generation of the LUT */
wolfSSL 15:117db924cf7c 7040 static const struct {
wolfSSL 15:117db924cf7c 7041 int ham, terma, termb;
wolfSSL 15:117db924cf7c 7042 } lut_orders[] = {
wolfSSL 15:117db924cf7c 7043 { 0, 0, 0 }, { 1, 0, 0 }, { 1, 0, 0 }, { 2, 1, 2 }, { 1, 0, 0 }, { 2, 1, 4 }, { 2, 2, 4 }, { 3, 3, 4 },
wolfSSL 15:117db924cf7c 7044 { 1, 0, 0 }, { 2, 1, 8 }, { 2, 2, 8 }, { 3, 3, 8 }, { 2, 4, 8 }, { 3, 5, 8 }, { 3, 6, 8 }, { 4, 7, 8 },
wolfSSL 15:117db924cf7c 7045 { 1, 0, 0 }, { 2, 1, 16 }, { 2, 2, 16 }, { 3, 3, 16 }, { 2, 4, 16 }, { 3, 5, 16 }, { 3, 6, 16 }, { 4, 7, 16 },
wolfSSL 15:117db924cf7c 7046 { 2, 8, 16 }, { 3, 9, 16 }, { 3, 10, 16 }, { 4, 11, 16 }, { 3, 12, 16 }, { 4, 13, 16 }, { 4, 14, 16 }, { 5, 15, 16 },
wolfSSL 15:117db924cf7c 7047 { 1, 0, 0 }, { 2, 1, 32 }, { 2, 2, 32 }, { 3, 3, 32 }, { 2, 4, 32 }, { 3, 5, 32 }, { 3, 6, 32 }, { 4, 7, 32 },
wolfSSL 15:117db924cf7c 7048 { 2, 8, 32 }, { 3, 9, 32 }, { 3, 10, 32 }, { 4, 11, 32 }, { 3, 12, 32 }, { 4, 13, 32 }, { 4, 14, 32 }, { 5, 15, 32 },
wolfSSL 15:117db924cf7c 7049 { 2, 16, 32 }, { 3, 17, 32 }, { 3, 18, 32 }, { 4, 19, 32 }, { 3, 20, 32 }, { 4, 21, 32 }, { 4, 22, 32 }, { 5, 23, 32 },
wolfSSL 15:117db924cf7c 7050 { 3, 24, 32 }, { 4, 25, 32 }, { 4, 26, 32 }, { 5, 27, 32 }, { 4, 28, 32 }, { 5, 29, 32 }, { 5, 30, 32 }, { 6, 31, 32 },
wolfSSL 15:117db924cf7c 7051 #if FP_LUT > 6
wolfSSL 15:117db924cf7c 7052 { 1, 0, 0 }, { 2, 1, 64 }, { 2, 2, 64 }, { 3, 3, 64 }, { 2, 4, 64 }, { 3, 5, 64 }, { 3, 6, 64 }, { 4, 7, 64 },
wolfSSL 15:117db924cf7c 7053 { 2, 8, 64 }, { 3, 9, 64 }, { 3, 10, 64 }, { 4, 11, 64 }, { 3, 12, 64 }, { 4, 13, 64 }, { 4, 14, 64 }, { 5, 15, 64 },
wolfSSL 15:117db924cf7c 7054 { 2, 16, 64 }, { 3, 17, 64 }, { 3, 18, 64 }, { 4, 19, 64 }, { 3, 20, 64 }, { 4, 21, 64 }, { 4, 22, 64 }, { 5, 23, 64 },
wolfSSL 15:117db924cf7c 7055 { 3, 24, 64 }, { 4, 25, 64 }, { 4, 26, 64 }, { 5, 27, 64 }, { 4, 28, 64 }, { 5, 29, 64 }, { 5, 30, 64 }, { 6, 31, 64 },
wolfSSL 15:117db924cf7c 7056 { 2, 32, 64 }, { 3, 33, 64 }, { 3, 34, 64 }, { 4, 35, 64 }, { 3, 36, 64 }, { 4, 37, 64 }, { 4, 38, 64 }, { 5, 39, 64 },
wolfSSL 15:117db924cf7c 7057 { 3, 40, 64 }, { 4, 41, 64 }, { 4, 42, 64 }, { 5, 43, 64 }, { 4, 44, 64 }, { 5, 45, 64 }, { 5, 46, 64 }, { 6, 47, 64 },
wolfSSL 15:117db924cf7c 7058 { 3, 48, 64 }, { 4, 49, 64 }, { 4, 50, 64 }, { 5, 51, 64 }, { 4, 52, 64 }, { 5, 53, 64 }, { 5, 54, 64 }, { 6, 55, 64 },
wolfSSL 15:117db924cf7c 7059 { 4, 56, 64 }, { 5, 57, 64 }, { 5, 58, 64 }, { 6, 59, 64 }, { 5, 60, 64 }, { 6, 61, 64 }, { 6, 62, 64 }, { 7, 63, 64 },
wolfSSL 15:117db924cf7c 7060 #if FP_LUT > 7
wolfSSL 15:117db924cf7c 7061 { 1, 0, 0 }, { 2, 1, 128 }, { 2, 2, 128 }, { 3, 3, 128 }, { 2, 4, 128 }, { 3, 5, 128 }, { 3, 6, 128 }, { 4, 7, 128 },
wolfSSL 15:117db924cf7c 7062 { 2, 8, 128 }, { 3, 9, 128 }, { 3, 10, 128 }, { 4, 11, 128 }, { 3, 12, 128 }, { 4, 13, 128 }, { 4, 14, 128 }, { 5, 15, 128 },
wolfSSL 15:117db924cf7c 7063 { 2, 16, 128 }, { 3, 17, 128 }, { 3, 18, 128 }, { 4, 19, 128 }, { 3, 20, 128 }, { 4, 21, 128 }, { 4, 22, 128 }, { 5, 23, 128 },
wolfSSL 15:117db924cf7c 7064 { 3, 24, 128 }, { 4, 25, 128 }, { 4, 26, 128 }, { 5, 27, 128 }, { 4, 28, 128 }, { 5, 29, 128 }, { 5, 30, 128 }, { 6, 31, 128 },
wolfSSL 15:117db924cf7c 7065 { 2, 32, 128 }, { 3, 33, 128 }, { 3, 34, 128 }, { 4, 35, 128 }, { 3, 36, 128 }, { 4, 37, 128 }, { 4, 38, 128 }, { 5, 39, 128 },
wolfSSL 15:117db924cf7c 7066 { 3, 40, 128 }, { 4, 41, 128 }, { 4, 42, 128 }, { 5, 43, 128 }, { 4, 44, 128 }, { 5, 45, 128 }, { 5, 46, 128 }, { 6, 47, 128 },
wolfSSL 15:117db924cf7c 7067 { 3, 48, 128 }, { 4, 49, 128 }, { 4, 50, 128 }, { 5, 51, 128 }, { 4, 52, 128 }, { 5, 53, 128 }, { 5, 54, 128 }, { 6, 55, 128 },
wolfSSL 15:117db924cf7c 7068 { 4, 56, 128 }, { 5, 57, 128 }, { 5, 58, 128 }, { 6, 59, 128 }, { 5, 60, 128 }, { 6, 61, 128 }, { 6, 62, 128 }, { 7, 63, 128 },
wolfSSL 15:117db924cf7c 7069 { 2, 64, 128 }, { 3, 65, 128 }, { 3, 66, 128 }, { 4, 67, 128 }, { 3, 68, 128 }, { 4, 69, 128 }, { 4, 70, 128 }, { 5, 71, 128 },
wolfSSL 15:117db924cf7c 7070 { 3, 72, 128 }, { 4, 73, 128 }, { 4, 74, 128 }, { 5, 75, 128 }, { 4, 76, 128 }, { 5, 77, 128 }, { 5, 78, 128 }, { 6, 79, 128 },
wolfSSL 15:117db924cf7c 7071 { 3, 80, 128 }, { 4, 81, 128 }, { 4, 82, 128 }, { 5, 83, 128 }, { 4, 84, 128 }, { 5, 85, 128 }, { 5, 86, 128 }, { 6, 87, 128 },
wolfSSL 15:117db924cf7c 7072 { 4, 88, 128 }, { 5, 89, 128 }, { 5, 90, 128 }, { 6, 91, 128 }, { 5, 92, 128 }, { 6, 93, 128 }, { 6, 94, 128 }, { 7, 95, 128 },
wolfSSL 15:117db924cf7c 7073 { 3, 96, 128 }, { 4, 97, 128 }, { 4, 98, 128 }, { 5, 99, 128 }, { 4, 100, 128 }, { 5, 101, 128 }, { 5, 102, 128 }, { 6, 103, 128 },
wolfSSL 15:117db924cf7c 7074 { 4, 104, 128 }, { 5, 105, 128 }, { 5, 106, 128 }, { 6, 107, 128 }, { 5, 108, 128 }, { 6, 109, 128 }, { 6, 110, 128 }, { 7, 111, 128 },
wolfSSL 15:117db924cf7c 7075 { 4, 112, 128 }, { 5, 113, 128 }, { 5, 114, 128 }, { 6, 115, 128 }, { 5, 116, 128 }, { 6, 117, 128 }, { 6, 118, 128 }, { 7, 119, 128 },
wolfSSL 15:117db924cf7c 7076 { 5, 120, 128 }, { 6, 121, 128 }, { 6, 122, 128 }, { 7, 123, 128 }, { 6, 124, 128 }, { 7, 125, 128 }, { 7, 126, 128 }, { 8, 127, 128 },
wolfSSL 15:117db924cf7c 7077 #if FP_LUT > 8
wolfSSL 15:117db924cf7c 7078 { 1, 0, 0 }, { 2, 1, 256 }, { 2, 2, 256 }, { 3, 3, 256 }, { 2, 4, 256 }, { 3, 5, 256 }, { 3, 6, 256 }, { 4, 7, 256 },
wolfSSL 15:117db924cf7c 7079 { 2, 8, 256 }, { 3, 9, 256 }, { 3, 10, 256 }, { 4, 11, 256 }, { 3, 12, 256 }, { 4, 13, 256 }, { 4, 14, 256 }, { 5, 15, 256 },
wolfSSL 15:117db924cf7c 7080 { 2, 16, 256 }, { 3, 17, 256 }, { 3, 18, 256 }, { 4, 19, 256 }, { 3, 20, 256 }, { 4, 21, 256 }, { 4, 22, 256 }, { 5, 23, 256 },
wolfSSL 15:117db924cf7c 7081 { 3, 24, 256 }, { 4, 25, 256 }, { 4, 26, 256 }, { 5, 27, 256 }, { 4, 28, 256 }, { 5, 29, 256 }, { 5, 30, 256 }, { 6, 31, 256 },
wolfSSL 15:117db924cf7c 7082 { 2, 32, 256 }, { 3, 33, 256 }, { 3, 34, 256 }, { 4, 35, 256 }, { 3, 36, 256 }, { 4, 37, 256 }, { 4, 38, 256 }, { 5, 39, 256 },
wolfSSL 15:117db924cf7c 7083 { 3, 40, 256 }, { 4, 41, 256 }, { 4, 42, 256 }, { 5, 43, 256 }, { 4, 44, 256 }, { 5, 45, 256 }, { 5, 46, 256 }, { 6, 47, 256 },
wolfSSL 15:117db924cf7c 7084 { 3, 48, 256 }, { 4, 49, 256 }, { 4, 50, 256 }, { 5, 51, 256 }, { 4, 52, 256 }, { 5, 53, 256 }, { 5, 54, 256 }, { 6, 55, 256 },
wolfSSL 15:117db924cf7c 7085 { 4, 56, 256 }, { 5, 57, 256 }, { 5, 58, 256 }, { 6, 59, 256 }, { 5, 60, 256 }, { 6, 61, 256 }, { 6, 62, 256 }, { 7, 63, 256 },
wolfSSL 15:117db924cf7c 7086 { 2, 64, 256 }, { 3, 65, 256 }, { 3, 66, 256 }, { 4, 67, 256 }, { 3, 68, 256 }, { 4, 69, 256 }, { 4, 70, 256 }, { 5, 71, 256 },
wolfSSL 15:117db924cf7c 7087 { 3, 72, 256 }, { 4, 73, 256 }, { 4, 74, 256 }, { 5, 75, 256 }, { 4, 76, 256 }, { 5, 77, 256 }, { 5, 78, 256 }, { 6, 79, 256 },
wolfSSL 15:117db924cf7c 7088 { 3, 80, 256 }, { 4, 81, 256 }, { 4, 82, 256 }, { 5, 83, 256 }, { 4, 84, 256 }, { 5, 85, 256 }, { 5, 86, 256 }, { 6, 87, 256 },
wolfSSL 15:117db924cf7c 7089 { 4, 88, 256 }, { 5, 89, 256 }, { 5, 90, 256 }, { 6, 91, 256 }, { 5, 92, 256 }, { 6, 93, 256 }, { 6, 94, 256 }, { 7, 95, 256 },
wolfSSL 15:117db924cf7c 7090 { 3, 96, 256 }, { 4, 97, 256 }, { 4, 98, 256 }, { 5, 99, 256 }, { 4, 100, 256 }, { 5, 101, 256 }, { 5, 102, 256 }, { 6, 103, 256 },
wolfSSL 15:117db924cf7c 7091 { 4, 104, 256 }, { 5, 105, 256 }, { 5, 106, 256 }, { 6, 107, 256 }, { 5, 108, 256 }, { 6, 109, 256 }, { 6, 110, 256 }, { 7, 111, 256 },
wolfSSL 15:117db924cf7c 7092 { 4, 112, 256 }, { 5, 113, 256 }, { 5, 114, 256 }, { 6, 115, 256 }, { 5, 116, 256 }, { 6, 117, 256 }, { 6, 118, 256 }, { 7, 119, 256 },
wolfSSL 15:117db924cf7c 7093 { 5, 120, 256 }, { 6, 121, 256 }, { 6, 122, 256 }, { 7, 123, 256 }, { 6, 124, 256 }, { 7, 125, 256 }, { 7, 126, 256 }, { 8, 127, 256 },
wolfSSL 15:117db924cf7c 7094 { 2, 128, 256 }, { 3, 129, 256 }, { 3, 130, 256 }, { 4, 131, 256 }, { 3, 132, 256 }, { 4, 133, 256 }, { 4, 134, 256 }, { 5, 135, 256 },
wolfSSL 15:117db924cf7c 7095 { 3, 136, 256 }, { 4, 137, 256 }, { 4, 138, 256 }, { 5, 139, 256 }, { 4, 140, 256 }, { 5, 141, 256 }, { 5, 142, 256 }, { 6, 143, 256 },
wolfSSL 15:117db924cf7c 7096 { 3, 144, 256 }, { 4, 145, 256 }, { 4, 146, 256 }, { 5, 147, 256 }, { 4, 148, 256 }, { 5, 149, 256 }, { 5, 150, 256 }, { 6, 151, 256 },
wolfSSL 15:117db924cf7c 7097 { 4, 152, 256 }, { 5, 153, 256 }, { 5, 154, 256 }, { 6, 155, 256 }, { 5, 156, 256 }, { 6, 157, 256 }, { 6, 158, 256 }, { 7, 159, 256 },
wolfSSL 15:117db924cf7c 7098 { 3, 160, 256 }, { 4, 161, 256 }, { 4, 162, 256 }, { 5, 163, 256 }, { 4, 164, 256 }, { 5, 165, 256 }, { 5, 166, 256 }, { 6, 167, 256 },
wolfSSL 15:117db924cf7c 7099 { 4, 168, 256 }, { 5, 169, 256 }, { 5, 170, 256 }, { 6, 171, 256 }, { 5, 172, 256 }, { 6, 173, 256 }, { 6, 174, 256 }, { 7, 175, 256 },
wolfSSL 15:117db924cf7c 7100 { 4, 176, 256 }, { 5, 177, 256 }, { 5, 178, 256 }, { 6, 179, 256 }, { 5, 180, 256 }, { 6, 181, 256 }, { 6, 182, 256 }, { 7, 183, 256 },
wolfSSL 15:117db924cf7c 7101 { 5, 184, 256 }, { 6, 185, 256 }, { 6, 186, 256 }, { 7, 187, 256 }, { 6, 188, 256 }, { 7, 189, 256 }, { 7, 190, 256 }, { 8, 191, 256 },
wolfSSL 15:117db924cf7c 7102 { 3, 192, 256 }, { 4, 193, 256 }, { 4, 194, 256 }, { 5, 195, 256 }, { 4, 196, 256 }, { 5, 197, 256 }, { 5, 198, 256 }, { 6, 199, 256 },
wolfSSL 15:117db924cf7c 7103 { 4, 200, 256 }, { 5, 201, 256 }, { 5, 202, 256 }, { 6, 203, 256 }, { 5, 204, 256 }, { 6, 205, 256 }, { 6, 206, 256 }, { 7, 207, 256 },
wolfSSL 15:117db924cf7c 7104 { 4, 208, 256 }, { 5, 209, 256 }, { 5, 210, 256 }, { 6, 211, 256 }, { 5, 212, 256 }, { 6, 213, 256 }, { 6, 214, 256 }, { 7, 215, 256 },
wolfSSL 15:117db924cf7c 7105 { 5, 216, 256 }, { 6, 217, 256 }, { 6, 218, 256 }, { 7, 219, 256 }, { 6, 220, 256 }, { 7, 221, 256 }, { 7, 222, 256 }, { 8, 223, 256 },
wolfSSL 15:117db924cf7c 7106 { 4, 224, 256 }, { 5, 225, 256 }, { 5, 226, 256 }, { 6, 227, 256 }, { 5, 228, 256 }, { 6, 229, 256 }, { 6, 230, 256 }, { 7, 231, 256 },
wolfSSL 15:117db924cf7c 7107 { 5, 232, 256 }, { 6, 233, 256 }, { 6, 234, 256 }, { 7, 235, 256 }, { 6, 236, 256 }, { 7, 237, 256 }, { 7, 238, 256 }, { 8, 239, 256 },
wolfSSL 15:117db924cf7c 7108 { 5, 240, 256 }, { 6, 241, 256 }, { 6, 242, 256 }, { 7, 243, 256 }, { 6, 244, 256 }, { 7, 245, 256 }, { 7, 246, 256 }, { 8, 247, 256 },
wolfSSL 15:117db924cf7c 7109 { 6, 248, 256 }, { 7, 249, 256 }, { 7, 250, 256 }, { 8, 251, 256 }, { 7, 252, 256 }, { 8, 253, 256 }, { 8, 254, 256 }, { 9, 255, 256 },
wolfSSL 15:117db924cf7c 7110 #if FP_LUT > 9
wolfSSL 15:117db924cf7c 7111 { 1, 0, 0 }, { 2, 1, 512 }, { 2, 2, 512 }, { 3, 3, 512 }, { 2, 4, 512 }, { 3, 5, 512 }, { 3, 6, 512 }, { 4, 7, 512 },
wolfSSL 15:117db924cf7c 7112 { 2, 8, 512 }, { 3, 9, 512 }, { 3, 10, 512 }, { 4, 11, 512 }, { 3, 12, 512 }, { 4, 13, 512 }, { 4, 14, 512 }, { 5, 15, 512 },
wolfSSL 15:117db924cf7c 7113 { 2, 16, 512 }, { 3, 17, 512 }, { 3, 18, 512 }, { 4, 19, 512 }, { 3, 20, 512 }, { 4, 21, 512 }, { 4, 22, 512 }, { 5, 23, 512 },
wolfSSL 15:117db924cf7c 7114 { 3, 24, 512 }, { 4, 25, 512 }, { 4, 26, 512 }, { 5, 27, 512 }, { 4, 28, 512 }, { 5, 29, 512 }, { 5, 30, 512 }, { 6, 31, 512 },
wolfSSL 15:117db924cf7c 7115 { 2, 32, 512 }, { 3, 33, 512 }, { 3, 34, 512 }, { 4, 35, 512 }, { 3, 36, 512 }, { 4, 37, 512 }, { 4, 38, 512 }, { 5, 39, 512 },
wolfSSL 15:117db924cf7c 7116 { 3, 40, 512 }, { 4, 41, 512 }, { 4, 42, 512 }, { 5, 43, 512 }, { 4, 44, 512 }, { 5, 45, 512 }, { 5, 46, 512 }, { 6, 47, 512 },
wolfSSL 15:117db924cf7c 7117 { 3, 48, 512 }, { 4, 49, 512 }, { 4, 50, 512 }, { 5, 51, 512 }, { 4, 52, 512 }, { 5, 53, 512 }, { 5, 54, 512 }, { 6, 55, 512 },
wolfSSL 15:117db924cf7c 7118 { 4, 56, 512 }, { 5, 57, 512 }, { 5, 58, 512 }, { 6, 59, 512 }, { 5, 60, 512 }, { 6, 61, 512 }, { 6, 62, 512 }, { 7, 63, 512 },
wolfSSL 15:117db924cf7c 7119 { 2, 64, 512 }, { 3, 65, 512 }, { 3, 66, 512 }, { 4, 67, 512 }, { 3, 68, 512 }, { 4, 69, 512 }, { 4, 70, 512 }, { 5, 71, 512 },
wolfSSL 15:117db924cf7c 7120 { 3, 72, 512 }, { 4, 73, 512 }, { 4, 74, 512 }, { 5, 75, 512 }, { 4, 76, 512 }, { 5, 77, 512 }, { 5, 78, 512 }, { 6, 79, 512 },
wolfSSL 15:117db924cf7c 7121 { 3, 80, 512 }, { 4, 81, 512 }, { 4, 82, 512 }, { 5, 83, 512 }, { 4, 84, 512 }, { 5, 85, 512 }, { 5, 86, 512 }, { 6, 87, 512 },
wolfSSL 15:117db924cf7c 7122 { 4, 88, 512 }, { 5, 89, 512 }, { 5, 90, 512 }, { 6, 91, 512 }, { 5, 92, 512 }, { 6, 93, 512 }, { 6, 94, 512 }, { 7, 95, 512 },
wolfSSL 15:117db924cf7c 7123 { 3, 96, 512 }, { 4, 97, 512 }, { 4, 98, 512 }, { 5, 99, 512 }, { 4, 100, 512 }, { 5, 101, 512 }, { 5, 102, 512 }, { 6, 103, 512 },
wolfSSL 15:117db924cf7c 7124 { 4, 104, 512 }, { 5, 105, 512 }, { 5, 106, 512 }, { 6, 107, 512 }, { 5, 108, 512 }, { 6, 109, 512 }, { 6, 110, 512 }, { 7, 111, 512 },
wolfSSL 15:117db924cf7c 7125 { 4, 112, 512 }, { 5, 113, 512 }, { 5, 114, 512 }, { 6, 115, 512 }, { 5, 116, 512 }, { 6, 117, 512 }, { 6, 118, 512 }, { 7, 119, 512 },
wolfSSL 15:117db924cf7c 7126 { 5, 120, 512 }, { 6, 121, 512 }, { 6, 122, 512 }, { 7, 123, 512 }, { 6, 124, 512 }, { 7, 125, 512 }, { 7, 126, 512 }, { 8, 127, 512 },
wolfSSL 15:117db924cf7c 7127 { 2, 128, 512 }, { 3, 129, 512 }, { 3, 130, 512 }, { 4, 131, 512 }, { 3, 132, 512 }, { 4, 133, 512 }, { 4, 134, 512 }, { 5, 135, 512 },
wolfSSL 15:117db924cf7c 7128 { 3, 136, 512 }, { 4, 137, 512 }, { 4, 138, 512 }, { 5, 139, 512 }, { 4, 140, 512 }, { 5, 141, 512 }, { 5, 142, 512 }, { 6, 143, 512 },
wolfSSL 15:117db924cf7c 7129 { 3, 144, 512 }, { 4, 145, 512 }, { 4, 146, 512 }, { 5, 147, 512 }, { 4, 148, 512 }, { 5, 149, 512 }, { 5, 150, 512 }, { 6, 151, 512 },
wolfSSL 15:117db924cf7c 7130 { 4, 152, 512 }, { 5, 153, 512 }, { 5, 154, 512 }, { 6, 155, 512 }, { 5, 156, 512 }, { 6, 157, 512 }, { 6, 158, 512 }, { 7, 159, 512 },
wolfSSL 15:117db924cf7c 7131 { 3, 160, 512 }, { 4, 161, 512 }, { 4, 162, 512 }, { 5, 163, 512 }, { 4, 164, 512 }, { 5, 165, 512 }, { 5, 166, 512 }, { 6, 167, 512 },
wolfSSL 15:117db924cf7c 7132 { 4, 168, 512 }, { 5, 169, 512 }, { 5, 170, 512 }, { 6, 171, 512 }, { 5, 172, 512 }, { 6, 173, 512 }, { 6, 174, 512 }, { 7, 175, 512 },
wolfSSL 15:117db924cf7c 7133 { 4, 176, 512 }, { 5, 177, 512 }, { 5, 178, 512 }, { 6, 179, 512 }, { 5, 180, 512 }, { 6, 181, 512 }, { 6, 182, 512 }, { 7, 183, 512 },
wolfSSL 15:117db924cf7c 7134 { 5, 184, 512 }, { 6, 185, 512 }, { 6, 186, 512 }, { 7, 187, 512 }, { 6, 188, 512 }, { 7, 189, 512 }, { 7, 190, 512 }, { 8, 191, 512 },
wolfSSL 15:117db924cf7c 7135 { 3, 192, 512 }, { 4, 193, 512 }, { 4, 194, 512 }, { 5, 195, 512 }, { 4, 196, 512 }, { 5, 197, 512 }, { 5, 198, 512 }, { 6, 199, 512 },
wolfSSL 15:117db924cf7c 7136 { 4, 200, 512 }, { 5, 201, 512 }, { 5, 202, 512 }, { 6, 203, 512 }, { 5, 204, 512 }, { 6, 205, 512 }, { 6, 206, 512 }, { 7, 207, 512 },
wolfSSL 15:117db924cf7c 7137 { 4, 208, 512 }, { 5, 209, 512 }, { 5, 210, 512 }, { 6, 211, 512 }, { 5, 212, 512 }, { 6, 213, 512 }, { 6, 214, 512 }, { 7, 215, 512 },
wolfSSL 15:117db924cf7c 7138 { 5, 216, 512 }, { 6, 217, 512 }, { 6, 218, 512 }, { 7, 219, 512 }, { 6, 220, 512 }, { 7, 221, 512 }, { 7, 222, 512 }, { 8, 223, 512 },
wolfSSL 15:117db924cf7c 7139 { 4, 224, 512 }, { 5, 225, 512 }, { 5, 226, 512 }, { 6, 227, 512 }, { 5, 228, 512 }, { 6, 229, 512 }, { 6, 230, 512 }, { 7, 231, 512 },
wolfSSL 15:117db924cf7c 7140 { 5, 232, 512 }, { 6, 233, 512 }, { 6, 234, 512 }, { 7, 235, 512 }, { 6, 236, 512 }, { 7, 237, 512 }, { 7, 238, 512 }, { 8, 239, 512 },
wolfSSL 15:117db924cf7c 7141 { 5, 240, 512 }, { 6, 241, 512 }, { 6, 242, 512 }, { 7, 243, 512 }, { 6, 244, 512 }, { 7, 245, 512 }, { 7, 246, 512 }, { 8, 247, 512 },
wolfSSL 15:117db924cf7c 7142 { 6, 248, 512 }, { 7, 249, 512 }, { 7, 250, 512 }, { 8, 251, 512 }, { 7, 252, 512 }, { 8, 253, 512 }, { 8, 254, 512 }, { 9, 255, 512 },
wolfSSL 15:117db924cf7c 7143 { 2, 256, 512 }, { 3, 257, 512 }, { 3, 258, 512 }, { 4, 259, 512 }, { 3, 260, 512 }, { 4, 261, 512 }, { 4, 262, 512 }, { 5, 263, 512 },
wolfSSL 15:117db924cf7c 7144 { 3, 264, 512 }, { 4, 265, 512 }, { 4, 266, 512 }, { 5, 267, 512 }, { 4, 268, 512 }, { 5, 269, 512 }, { 5, 270, 512 }, { 6, 271, 512 },
wolfSSL 15:117db924cf7c 7145 { 3, 272, 512 }, { 4, 273, 512 }, { 4, 274, 512 }, { 5, 275, 512 }, { 4, 276, 512 }, { 5, 277, 512 }, { 5, 278, 512 }, { 6, 279, 512 },
wolfSSL 15:117db924cf7c 7146 { 4, 280, 512 }, { 5, 281, 512 }, { 5, 282, 512 }, { 6, 283, 512 }, { 5, 284, 512 }, { 6, 285, 512 }, { 6, 286, 512 }, { 7, 287, 512 },
wolfSSL 15:117db924cf7c 7147 { 3, 288, 512 }, { 4, 289, 512 }, { 4, 290, 512 }, { 5, 291, 512 }, { 4, 292, 512 }, { 5, 293, 512 }, { 5, 294, 512 }, { 6, 295, 512 },
wolfSSL 15:117db924cf7c 7148 { 4, 296, 512 }, { 5, 297, 512 }, { 5, 298, 512 }, { 6, 299, 512 }, { 5, 300, 512 }, { 6, 301, 512 }, { 6, 302, 512 }, { 7, 303, 512 },
wolfSSL 15:117db924cf7c 7149 { 4, 304, 512 }, { 5, 305, 512 }, { 5, 306, 512 }, { 6, 307, 512 }, { 5, 308, 512 }, { 6, 309, 512 }, { 6, 310, 512 }, { 7, 311, 512 },
wolfSSL 15:117db924cf7c 7150 { 5, 312, 512 }, { 6, 313, 512 }, { 6, 314, 512 }, { 7, 315, 512 }, { 6, 316, 512 }, { 7, 317, 512 }, { 7, 318, 512 }, { 8, 319, 512 },
wolfSSL 15:117db924cf7c 7151 { 3, 320, 512 }, { 4, 321, 512 }, { 4, 322, 512 }, { 5, 323, 512 }, { 4, 324, 512 }, { 5, 325, 512 }, { 5, 326, 512 }, { 6, 327, 512 },
wolfSSL 15:117db924cf7c 7152 { 4, 328, 512 }, { 5, 329, 512 }, { 5, 330, 512 }, { 6, 331, 512 }, { 5, 332, 512 }, { 6, 333, 512 }, { 6, 334, 512 }, { 7, 335, 512 },
wolfSSL 15:117db924cf7c 7153 { 4, 336, 512 }, { 5, 337, 512 }, { 5, 338, 512 }, { 6, 339, 512 }, { 5, 340, 512 }, { 6, 341, 512 }, { 6, 342, 512 }, { 7, 343, 512 },
wolfSSL 15:117db924cf7c 7154 { 5, 344, 512 }, { 6, 345, 512 }, { 6, 346, 512 }, { 7, 347, 512 }, { 6, 348, 512 }, { 7, 349, 512 }, { 7, 350, 512 }, { 8, 351, 512 },
wolfSSL 15:117db924cf7c 7155 { 4, 352, 512 }, { 5, 353, 512 }, { 5, 354, 512 }, { 6, 355, 512 }, { 5, 356, 512 }, { 6, 357, 512 }, { 6, 358, 512 }, { 7, 359, 512 },
wolfSSL 15:117db924cf7c 7156 { 5, 360, 512 }, { 6, 361, 512 }, { 6, 362, 512 }, { 7, 363, 512 }, { 6, 364, 512 }, { 7, 365, 512 }, { 7, 366, 512 }, { 8, 367, 512 },
wolfSSL 15:117db924cf7c 7157 { 5, 368, 512 }, { 6, 369, 512 }, { 6, 370, 512 }, { 7, 371, 512 }, { 6, 372, 512 }, { 7, 373, 512 }, { 7, 374, 512 }, { 8, 375, 512 },
wolfSSL 15:117db924cf7c 7158 { 6, 376, 512 }, { 7, 377, 512 }, { 7, 378, 512 }, { 8, 379, 512 }, { 7, 380, 512 }, { 8, 381, 512 }, { 8, 382, 512 }, { 9, 383, 512 },
wolfSSL 15:117db924cf7c 7159 { 3, 384, 512 }, { 4, 385, 512 }, { 4, 386, 512 }, { 5, 387, 512 }, { 4, 388, 512 }, { 5, 389, 512 }, { 5, 390, 512 }, { 6, 391, 512 },
wolfSSL 15:117db924cf7c 7160 { 4, 392, 512 }, { 5, 393, 512 }, { 5, 394, 512 }, { 6, 395, 512 }, { 5, 396, 512 }, { 6, 397, 512 }, { 6, 398, 512 }, { 7, 399, 512 },
wolfSSL 15:117db924cf7c 7161 { 4, 400, 512 }, { 5, 401, 512 }, { 5, 402, 512 }, { 6, 403, 512 }, { 5, 404, 512 }, { 6, 405, 512 }, { 6, 406, 512 }, { 7, 407, 512 },
wolfSSL 15:117db924cf7c 7162 { 5, 408, 512 }, { 6, 409, 512 }, { 6, 410, 512 }, { 7, 411, 512 }, { 6, 412, 512 }, { 7, 413, 512 }, { 7, 414, 512 }, { 8, 415, 512 },
wolfSSL 15:117db924cf7c 7163 { 4, 416, 512 }, { 5, 417, 512 }, { 5, 418, 512 }, { 6, 419, 512 }, { 5, 420, 512 }, { 6, 421, 512 }, { 6, 422, 512 }, { 7, 423, 512 },
wolfSSL 15:117db924cf7c 7164 { 5, 424, 512 }, { 6, 425, 512 }, { 6, 426, 512 }, { 7, 427, 512 }, { 6, 428, 512 }, { 7, 429, 512 }, { 7, 430, 512 }, { 8, 431, 512 },
wolfSSL 15:117db924cf7c 7165 { 5, 432, 512 }, { 6, 433, 512 }, { 6, 434, 512 }, { 7, 435, 512 }, { 6, 436, 512 }, { 7, 437, 512 }, { 7, 438, 512 }, { 8, 439, 512 },
wolfSSL 15:117db924cf7c 7166 { 6, 440, 512 }, { 7, 441, 512 }, { 7, 442, 512 }, { 8, 443, 512 }, { 7, 444, 512 }, { 8, 445, 512 }, { 8, 446, 512 }, { 9, 447, 512 },
wolfSSL 15:117db924cf7c 7167 { 4, 448, 512 }, { 5, 449, 512 }, { 5, 450, 512 }, { 6, 451, 512 }, { 5, 452, 512 }, { 6, 453, 512 }, { 6, 454, 512 }, { 7, 455, 512 },
wolfSSL 15:117db924cf7c 7168 { 5, 456, 512 }, { 6, 457, 512 }, { 6, 458, 512 }, { 7, 459, 512 }, { 6, 460, 512 }, { 7, 461, 512 }, { 7, 462, 512 }, { 8, 463, 512 },
wolfSSL 15:117db924cf7c 7169 { 5, 464, 512 }, { 6, 465, 512 }, { 6, 466, 512 }, { 7, 467, 512 }, { 6, 468, 512 }, { 7, 469, 512 }, { 7, 470, 512 }, { 8, 471, 512 },
wolfSSL 15:117db924cf7c 7170 { 6, 472, 512 }, { 7, 473, 512 }, { 7, 474, 512 }, { 8, 475, 512 }, { 7, 476, 512 }, { 8, 477, 512 }, { 8, 478, 512 }, { 9, 479, 512 },
wolfSSL 15:117db924cf7c 7171 { 5, 480, 512 }, { 6, 481, 512 }, { 6, 482, 512 }, { 7, 483, 512 }, { 6, 484, 512 }, { 7, 485, 512 }, { 7, 486, 512 }, { 8, 487, 512 },
wolfSSL 15:117db924cf7c 7172 { 6, 488, 512 }, { 7, 489, 512 }, { 7, 490, 512 }, { 8, 491, 512 }, { 7, 492, 512 }, { 8, 493, 512 }, { 8, 494, 512 }, { 9, 495, 512 },
wolfSSL 15:117db924cf7c 7173 { 6, 496, 512 }, { 7, 497, 512 }, { 7, 498, 512 }, { 8, 499, 512 }, { 7, 500, 512 }, { 8, 501, 512 }, { 8, 502, 512 }, { 9, 503, 512 },
wolfSSL 15:117db924cf7c 7174 { 7, 504, 512 }, { 8, 505, 512 }, { 8, 506, 512 }, { 9, 507, 512 }, { 8, 508, 512 }, { 9, 509, 512 }, { 9, 510, 512 }, { 10, 511, 512 },
wolfSSL 15:117db924cf7c 7175 #if FP_LUT > 10
wolfSSL 15:117db924cf7c 7176 { 1, 0, 0 }, { 2, 1, 1024 }, { 2, 2, 1024 }, { 3, 3, 1024 }, { 2, 4, 1024 }, { 3, 5, 1024 }, { 3, 6, 1024 }, { 4, 7, 1024 },
wolfSSL 15:117db924cf7c 7177 { 2, 8, 1024 }, { 3, 9, 1024 }, { 3, 10, 1024 }, { 4, 11, 1024 }, { 3, 12, 1024 }, { 4, 13, 1024 }, { 4, 14, 1024 }, { 5, 15, 1024 },
wolfSSL 15:117db924cf7c 7178 { 2, 16, 1024 }, { 3, 17, 1024 }, { 3, 18, 1024 }, { 4, 19, 1024 }, { 3, 20, 1024 }, { 4, 21, 1024 }, { 4, 22, 1024 }, { 5, 23, 1024 },
wolfSSL 15:117db924cf7c 7179 { 3, 24, 1024 }, { 4, 25, 1024 }, { 4, 26, 1024 }, { 5, 27, 1024 }, { 4, 28, 1024 }, { 5, 29, 1024 }, { 5, 30, 1024 }, { 6, 31, 1024 },
wolfSSL 15:117db924cf7c 7180 { 2, 32, 1024 }, { 3, 33, 1024 }, { 3, 34, 1024 }, { 4, 35, 1024 }, { 3, 36, 1024 }, { 4, 37, 1024 }, { 4, 38, 1024 }, { 5, 39, 1024 },
wolfSSL 15:117db924cf7c 7181 { 3, 40, 1024 }, { 4, 41, 1024 }, { 4, 42, 1024 }, { 5, 43, 1024 }, { 4, 44, 1024 }, { 5, 45, 1024 }, { 5, 46, 1024 }, { 6, 47, 1024 },
wolfSSL 15:117db924cf7c 7182 { 3, 48, 1024 }, { 4, 49, 1024 }, { 4, 50, 1024 }, { 5, 51, 1024 }, { 4, 52, 1024 }, { 5, 53, 1024 }, { 5, 54, 1024 }, { 6, 55, 1024 },
wolfSSL 15:117db924cf7c 7183 { 4, 56, 1024 }, { 5, 57, 1024 }, { 5, 58, 1024 }, { 6, 59, 1024 }, { 5, 60, 1024 }, { 6, 61, 1024 }, { 6, 62, 1024 }, { 7, 63, 1024 },
wolfSSL 15:117db924cf7c 7184 { 2, 64, 1024 }, { 3, 65, 1024 }, { 3, 66, 1024 }, { 4, 67, 1024 }, { 3, 68, 1024 }, { 4, 69, 1024 }, { 4, 70, 1024 }, { 5, 71, 1024 },
wolfSSL 15:117db924cf7c 7185 { 3, 72, 1024 }, { 4, 73, 1024 }, { 4, 74, 1024 }, { 5, 75, 1024 }, { 4, 76, 1024 }, { 5, 77, 1024 }, { 5, 78, 1024 }, { 6, 79, 1024 },
wolfSSL 15:117db924cf7c 7186 { 3, 80, 1024 }, { 4, 81, 1024 }, { 4, 82, 1024 }, { 5, 83, 1024 }, { 4, 84, 1024 }, { 5, 85, 1024 }, { 5, 86, 1024 }, { 6, 87, 1024 },
wolfSSL 15:117db924cf7c 7187 { 4, 88, 1024 }, { 5, 89, 1024 }, { 5, 90, 1024 }, { 6, 91, 1024 }, { 5, 92, 1024 }, { 6, 93, 1024 }, { 6, 94, 1024 }, { 7, 95, 1024 },
wolfSSL 15:117db924cf7c 7188 { 3, 96, 1024 }, { 4, 97, 1024 }, { 4, 98, 1024 }, { 5, 99, 1024 }, { 4, 100, 1024 }, { 5, 101, 1024 }, { 5, 102, 1024 }, { 6, 103, 1024 },
wolfSSL 15:117db924cf7c 7189 { 4, 104, 1024 }, { 5, 105, 1024 }, { 5, 106, 1024 }, { 6, 107, 1024 }, { 5, 108, 1024 }, { 6, 109, 1024 }, { 6, 110, 1024 }, { 7, 111, 1024 },
wolfSSL 15:117db924cf7c 7190 { 4, 112, 1024 }, { 5, 113, 1024 }, { 5, 114, 1024 }, { 6, 115, 1024 }, { 5, 116, 1024 }, { 6, 117, 1024 }, { 6, 118, 1024 }, { 7, 119, 1024 },
wolfSSL 15:117db924cf7c 7191 { 5, 120, 1024 }, { 6, 121, 1024 }, { 6, 122, 1024 }, { 7, 123, 1024 }, { 6, 124, 1024 }, { 7, 125, 1024 }, { 7, 126, 1024 }, { 8, 127, 1024 },
wolfSSL 15:117db924cf7c 7192 { 2, 128, 1024 }, { 3, 129, 1024 }, { 3, 130, 1024 }, { 4, 131, 1024 }, { 3, 132, 1024 }, { 4, 133, 1024 }, { 4, 134, 1024 }, { 5, 135, 1024 },
wolfSSL 15:117db924cf7c 7193 { 3, 136, 1024 }, { 4, 137, 1024 }, { 4, 138, 1024 }, { 5, 139, 1024 }, { 4, 140, 1024 }, { 5, 141, 1024 }, { 5, 142, 1024 }, { 6, 143, 1024 },
wolfSSL 15:117db924cf7c 7194 { 3, 144, 1024 }, { 4, 145, 1024 }, { 4, 146, 1024 }, { 5, 147, 1024 }, { 4, 148, 1024 }, { 5, 149, 1024 }, { 5, 150, 1024 }, { 6, 151, 1024 },
wolfSSL 15:117db924cf7c 7195 { 4, 152, 1024 }, { 5, 153, 1024 }, { 5, 154, 1024 }, { 6, 155, 1024 }, { 5, 156, 1024 }, { 6, 157, 1024 }, { 6, 158, 1024 }, { 7, 159, 1024 },
wolfSSL 15:117db924cf7c 7196 { 3, 160, 1024 }, { 4, 161, 1024 }, { 4, 162, 1024 }, { 5, 163, 1024 }, { 4, 164, 1024 }, { 5, 165, 1024 }, { 5, 166, 1024 }, { 6, 167, 1024 },
wolfSSL 15:117db924cf7c 7197 { 4, 168, 1024 }, { 5, 169, 1024 }, { 5, 170, 1024 }, { 6, 171, 1024 }, { 5, 172, 1024 }, { 6, 173, 1024 }, { 6, 174, 1024 }, { 7, 175, 1024 },
wolfSSL 15:117db924cf7c 7198 { 4, 176, 1024 }, { 5, 177, 1024 }, { 5, 178, 1024 }, { 6, 179, 1024 }, { 5, 180, 1024 }, { 6, 181, 1024 }, { 6, 182, 1024 }, { 7, 183, 1024 },
wolfSSL 15:117db924cf7c 7199 { 5, 184, 1024 }, { 6, 185, 1024 }, { 6, 186, 1024 }, { 7, 187, 1024 }, { 6, 188, 1024 }, { 7, 189, 1024 }, { 7, 190, 1024 }, { 8, 191, 1024 },
wolfSSL 15:117db924cf7c 7200 { 3, 192, 1024 }, { 4, 193, 1024 }, { 4, 194, 1024 }, { 5, 195, 1024 }, { 4, 196, 1024 }, { 5, 197, 1024 }, { 5, 198, 1024 }, { 6, 199, 1024 },
wolfSSL 15:117db924cf7c 7201 { 4, 200, 1024 }, { 5, 201, 1024 }, { 5, 202, 1024 }, { 6, 203, 1024 }, { 5, 204, 1024 }, { 6, 205, 1024 }, { 6, 206, 1024 }, { 7, 207, 1024 },
wolfSSL 15:117db924cf7c 7202 { 4, 208, 1024 }, { 5, 209, 1024 }, { 5, 210, 1024 }, { 6, 211, 1024 }, { 5, 212, 1024 }, { 6, 213, 1024 }, { 6, 214, 1024 }, { 7, 215, 1024 },
wolfSSL 15:117db924cf7c 7203 { 5, 216, 1024 }, { 6, 217, 1024 }, { 6, 218, 1024 }, { 7, 219, 1024 }, { 6, 220, 1024 }, { 7, 221, 1024 }, { 7, 222, 1024 }, { 8, 223, 1024 },
wolfSSL 15:117db924cf7c 7204 { 4, 224, 1024 }, { 5, 225, 1024 }, { 5, 226, 1024 }, { 6, 227, 1024 }, { 5, 228, 1024 }, { 6, 229, 1024 }, { 6, 230, 1024 }, { 7, 231, 1024 },
wolfSSL 15:117db924cf7c 7205 { 5, 232, 1024 }, { 6, 233, 1024 }, { 6, 234, 1024 }, { 7, 235, 1024 }, { 6, 236, 1024 }, { 7, 237, 1024 }, { 7, 238, 1024 }, { 8, 239, 1024 },
wolfSSL 15:117db924cf7c 7206 { 5, 240, 1024 }, { 6, 241, 1024 }, { 6, 242, 1024 }, { 7, 243, 1024 }, { 6, 244, 1024 }, { 7, 245, 1024 }, { 7, 246, 1024 }, { 8, 247, 1024 },
wolfSSL 15:117db924cf7c 7207 { 6, 248, 1024 }, { 7, 249, 1024 }, { 7, 250, 1024 }, { 8, 251, 1024 }, { 7, 252, 1024 }, { 8, 253, 1024 }, { 8, 254, 1024 }, { 9, 255, 1024 },
wolfSSL 15:117db924cf7c 7208 { 2, 256, 1024 }, { 3, 257, 1024 }, { 3, 258, 1024 }, { 4, 259, 1024 }, { 3, 260, 1024 }, { 4, 261, 1024 }, { 4, 262, 1024 }, { 5, 263, 1024 },
wolfSSL 15:117db924cf7c 7209 { 3, 264, 1024 }, { 4, 265, 1024 }, { 4, 266, 1024 }, { 5, 267, 1024 }, { 4, 268, 1024 }, { 5, 269, 1024 }, { 5, 270, 1024 }, { 6, 271, 1024 },
wolfSSL 15:117db924cf7c 7210 { 3, 272, 1024 }, { 4, 273, 1024 }, { 4, 274, 1024 }, { 5, 275, 1024 }, { 4, 276, 1024 }, { 5, 277, 1024 }, { 5, 278, 1024 }, { 6, 279, 1024 },
wolfSSL 15:117db924cf7c 7211 { 4, 280, 1024 }, { 5, 281, 1024 }, { 5, 282, 1024 }, { 6, 283, 1024 }, { 5, 284, 1024 }, { 6, 285, 1024 }, { 6, 286, 1024 }, { 7, 287, 1024 },
wolfSSL 15:117db924cf7c 7212 { 3, 288, 1024 }, { 4, 289, 1024 }, { 4, 290, 1024 }, { 5, 291, 1024 }, { 4, 292, 1024 }, { 5, 293, 1024 }, { 5, 294, 1024 }, { 6, 295, 1024 },
wolfSSL 15:117db924cf7c 7213 { 4, 296, 1024 }, { 5, 297, 1024 }, { 5, 298, 1024 }, { 6, 299, 1024 }, { 5, 300, 1024 }, { 6, 301, 1024 }, { 6, 302, 1024 }, { 7, 303, 1024 },
wolfSSL 15:117db924cf7c 7214 { 4, 304, 1024 }, { 5, 305, 1024 }, { 5, 306, 1024 }, { 6, 307, 1024 }, { 5, 308, 1024 }, { 6, 309, 1024 }, { 6, 310, 1024 }, { 7, 311, 1024 },
wolfSSL 15:117db924cf7c 7215 { 5, 312, 1024 }, { 6, 313, 1024 }, { 6, 314, 1024 }, { 7, 315, 1024 }, { 6, 316, 1024 }, { 7, 317, 1024 }, { 7, 318, 1024 }, { 8, 319, 1024 },
wolfSSL 15:117db924cf7c 7216 { 3, 320, 1024 }, { 4, 321, 1024 }, { 4, 322, 1024 }, { 5, 323, 1024 }, { 4, 324, 1024 }, { 5, 325, 1024 }, { 5, 326, 1024 }, { 6, 327, 1024 },
wolfSSL 15:117db924cf7c 7217 { 4, 328, 1024 }, { 5, 329, 1024 }, { 5, 330, 1024 }, { 6, 331, 1024 }, { 5, 332, 1024 }, { 6, 333, 1024 }, { 6, 334, 1024 }, { 7, 335, 1024 },
wolfSSL 15:117db924cf7c 7218 { 4, 336, 1024 }, { 5, 337, 1024 }, { 5, 338, 1024 }, { 6, 339, 1024 }, { 5, 340, 1024 }, { 6, 341, 1024 }, { 6, 342, 1024 }, { 7, 343, 1024 },
wolfSSL 15:117db924cf7c 7219 { 5, 344, 1024 }, { 6, 345, 1024 }, { 6, 346, 1024 }, { 7, 347, 1024 }, { 6, 348, 1024 }, { 7, 349, 1024 }, { 7, 350, 1024 }, { 8, 351, 1024 },
wolfSSL 15:117db924cf7c 7220 { 4, 352, 1024 }, { 5, 353, 1024 }, { 5, 354, 1024 }, { 6, 355, 1024 }, { 5, 356, 1024 }, { 6, 357, 1024 }, { 6, 358, 1024 }, { 7, 359, 1024 },
wolfSSL 15:117db924cf7c 7221 { 5, 360, 1024 }, { 6, 361, 1024 }, { 6, 362, 1024 }, { 7, 363, 1024 }, { 6, 364, 1024 }, { 7, 365, 1024 }, { 7, 366, 1024 }, { 8, 367, 1024 },
wolfSSL 15:117db924cf7c 7222 { 5, 368, 1024 }, { 6, 369, 1024 }, { 6, 370, 1024 }, { 7, 371, 1024 }, { 6, 372, 1024 }, { 7, 373, 1024 }, { 7, 374, 1024 }, { 8, 375, 1024 },
wolfSSL 15:117db924cf7c 7223 { 6, 376, 1024 }, { 7, 377, 1024 }, { 7, 378, 1024 }, { 8, 379, 1024 }, { 7, 380, 1024 }, { 8, 381, 1024 }, { 8, 382, 1024 }, { 9, 383, 1024 },
wolfSSL 15:117db924cf7c 7224 { 3, 384, 1024 }, { 4, 385, 1024 }, { 4, 386, 1024 }, { 5, 387, 1024 }, { 4, 388, 1024 }, { 5, 389, 1024 }, { 5, 390, 1024 }, { 6, 391, 1024 },
wolfSSL 15:117db924cf7c 7225 { 4, 392, 1024 }, { 5, 393, 1024 }, { 5, 394, 1024 }, { 6, 395, 1024 }, { 5, 396, 1024 }, { 6, 397, 1024 }, { 6, 398, 1024 }, { 7, 399, 1024 },
wolfSSL 15:117db924cf7c 7226 { 4, 400, 1024 }, { 5, 401, 1024 }, { 5, 402, 1024 }, { 6, 403, 1024 }, { 5, 404, 1024 }, { 6, 405, 1024 }, { 6, 406, 1024 }, { 7, 407, 1024 },
wolfSSL 15:117db924cf7c 7227 { 5, 408, 1024 }, { 6, 409, 1024 }, { 6, 410, 1024 }, { 7, 411, 1024 }, { 6, 412, 1024 }, { 7, 413, 1024 }, { 7, 414, 1024 }, { 8, 415, 1024 },
wolfSSL 15:117db924cf7c 7228 { 4, 416, 1024 }, { 5, 417, 1024 }, { 5, 418, 1024 }, { 6, 419, 1024 }, { 5, 420, 1024 }, { 6, 421, 1024 }, { 6, 422, 1024 }, { 7, 423, 1024 },
wolfSSL 15:117db924cf7c 7229 { 5, 424, 1024 }, { 6, 425, 1024 }, { 6, 426, 1024 }, { 7, 427, 1024 }, { 6, 428, 1024 }, { 7, 429, 1024 }, { 7, 430, 1024 }, { 8, 431, 1024 },
wolfSSL 15:117db924cf7c 7230 { 5, 432, 1024 }, { 6, 433, 1024 }, { 6, 434, 1024 }, { 7, 435, 1024 }, { 6, 436, 1024 }, { 7, 437, 1024 }, { 7, 438, 1024 }, { 8, 439, 1024 },
wolfSSL 15:117db924cf7c 7231 { 6, 440, 1024 }, { 7, 441, 1024 }, { 7, 442, 1024 }, { 8, 443, 1024 }, { 7, 444, 1024 }, { 8, 445, 1024 }, { 8, 446, 1024 }, { 9, 447, 1024 },
wolfSSL 15:117db924cf7c 7232 { 4, 448, 1024 }, { 5, 449, 1024 }, { 5, 450, 1024 }, { 6, 451, 1024 }, { 5, 452, 1024 }, { 6, 453, 1024 }, { 6, 454, 1024 }, { 7, 455, 1024 },
wolfSSL 15:117db924cf7c 7233 { 5, 456, 1024 }, { 6, 457, 1024 }, { 6, 458, 1024 }, { 7, 459, 1024 }, { 6, 460, 1024 }, { 7, 461, 1024 }, { 7, 462, 1024 }, { 8, 463, 1024 },
wolfSSL 15:117db924cf7c 7234 { 5, 464, 1024 }, { 6, 465, 1024 }, { 6, 466, 1024 }, { 7, 467, 1024 }, { 6, 468, 1024 }, { 7, 469, 1024 }, { 7, 470, 1024 }, { 8, 471, 1024 },
wolfSSL 15:117db924cf7c 7235 { 6, 472, 1024 }, { 7, 473, 1024 }, { 7, 474, 1024 }, { 8, 475, 1024 }, { 7, 476, 1024 }, { 8, 477, 1024 }, { 8, 478, 1024 }, { 9, 479, 1024 },
wolfSSL 15:117db924cf7c 7236 { 5, 480, 1024 }, { 6, 481, 1024 }, { 6, 482, 1024 }, { 7, 483, 1024 }, { 6, 484, 1024 }, { 7, 485, 1024 }, { 7, 486, 1024 }, { 8, 487, 1024 },
wolfSSL 15:117db924cf7c 7237 { 6, 488, 1024 }, { 7, 489, 1024 }, { 7, 490, 1024 }, { 8, 491, 1024 }, { 7, 492, 1024 }, { 8, 493, 1024 }, { 8, 494, 1024 }, { 9, 495, 1024 },
wolfSSL 15:117db924cf7c 7238 { 6, 496, 1024 }, { 7, 497, 1024 }, { 7, 498, 1024 }, { 8, 499, 1024 }, { 7, 500, 1024 }, { 8, 501, 1024 }, { 8, 502, 1024 }, { 9, 503, 1024 },
wolfSSL 15:117db924cf7c 7239 { 7, 504, 1024 }, { 8, 505, 1024 }, { 8, 506, 1024 }, { 9, 507, 1024 }, { 8, 508, 1024 }, { 9, 509, 1024 }, { 9, 510, 1024 }, { 10, 511, 1024 },
wolfSSL 15:117db924cf7c 7240 { 2, 512, 1024 }, { 3, 513, 1024 }, { 3, 514, 1024 }, { 4, 515, 1024 }, { 3, 516, 1024 }, { 4, 517, 1024 }, { 4, 518, 1024 }, { 5, 519, 1024 },
wolfSSL 15:117db924cf7c 7241 { 3, 520, 1024 }, { 4, 521, 1024 }, { 4, 522, 1024 }, { 5, 523, 1024 }, { 4, 524, 1024 }, { 5, 525, 1024 }, { 5, 526, 1024 }, { 6, 527, 1024 },
wolfSSL 15:117db924cf7c 7242 { 3, 528, 1024 }, { 4, 529, 1024 }, { 4, 530, 1024 }, { 5, 531, 1024 }, { 4, 532, 1024 }, { 5, 533, 1024 }, { 5, 534, 1024 }, { 6, 535, 1024 },
wolfSSL 15:117db924cf7c 7243 { 4, 536, 1024 }, { 5, 537, 1024 }, { 5, 538, 1024 }, { 6, 539, 1024 }, { 5, 540, 1024 }, { 6, 541, 1024 }, { 6, 542, 1024 }, { 7, 543, 1024 },
wolfSSL 15:117db924cf7c 7244 { 3, 544, 1024 }, { 4, 545, 1024 }, { 4, 546, 1024 }, { 5, 547, 1024 }, { 4, 548, 1024 }, { 5, 549, 1024 }, { 5, 550, 1024 }, { 6, 551, 1024 },
wolfSSL 15:117db924cf7c 7245 { 4, 552, 1024 }, { 5, 553, 1024 }, { 5, 554, 1024 }, { 6, 555, 1024 }, { 5, 556, 1024 }, { 6, 557, 1024 }, { 6, 558, 1024 }, { 7, 559, 1024 },
wolfSSL 15:117db924cf7c 7246 { 4, 560, 1024 }, { 5, 561, 1024 }, { 5, 562, 1024 }, { 6, 563, 1024 }, { 5, 564, 1024 }, { 6, 565, 1024 }, { 6, 566, 1024 }, { 7, 567, 1024 },
wolfSSL 15:117db924cf7c 7247 { 5, 568, 1024 }, { 6, 569, 1024 }, { 6, 570, 1024 }, { 7, 571, 1024 }, { 6, 572, 1024 }, { 7, 573, 1024 }, { 7, 574, 1024 }, { 8, 575, 1024 },
wolfSSL 15:117db924cf7c 7248 { 3, 576, 1024 }, { 4, 577, 1024 }, { 4, 578, 1024 }, { 5, 579, 1024 }, { 4, 580, 1024 }, { 5, 581, 1024 }, { 5, 582, 1024 }, { 6, 583, 1024 },
wolfSSL 15:117db924cf7c 7249 { 4, 584, 1024 }, { 5, 585, 1024 }, { 5, 586, 1024 }, { 6, 587, 1024 }, { 5, 588, 1024 }, { 6, 589, 1024 }, { 6, 590, 1024 }, { 7, 591, 1024 },
wolfSSL 15:117db924cf7c 7250 { 4, 592, 1024 }, { 5, 593, 1024 }, { 5, 594, 1024 }, { 6, 595, 1024 }, { 5, 596, 1024 }, { 6, 597, 1024 }, { 6, 598, 1024 }, { 7, 599, 1024 },
wolfSSL 15:117db924cf7c 7251 { 5, 600, 1024 }, { 6, 601, 1024 }, { 6, 602, 1024 }, { 7, 603, 1024 }, { 6, 604, 1024 }, { 7, 605, 1024 }, { 7, 606, 1024 }, { 8, 607, 1024 },
wolfSSL 15:117db924cf7c 7252 { 4, 608, 1024 }, { 5, 609, 1024 }, { 5, 610, 1024 }, { 6, 611, 1024 }, { 5, 612, 1024 }, { 6, 613, 1024 }, { 6, 614, 1024 }, { 7, 615, 1024 },
wolfSSL 15:117db924cf7c 7253 { 5, 616, 1024 }, { 6, 617, 1024 }, { 6, 618, 1024 }, { 7, 619, 1024 }, { 6, 620, 1024 }, { 7, 621, 1024 }, { 7, 622, 1024 }, { 8, 623, 1024 },
wolfSSL 15:117db924cf7c 7254 { 5, 624, 1024 }, { 6, 625, 1024 }, { 6, 626, 1024 }, { 7, 627, 1024 }, { 6, 628, 1024 }, { 7, 629, 1024 }, { 7, 630, 1024 }, { 8, 631, 1024 },
wolfSSL 15:117db924cf7c 7255 { 6, 632, 1024 }, { 7, 633, 1024 }, { 7, 634, 1024 }, { 8, 635, 1024 }, { 7, 636, 1024 }, { 8, 637, 1024 }, { 8, 638, 1024 }, { 9, 639, 1024 },
wolfSSL 15:117db924cf7c 7256 { 3, 640, 1024 }, { 4, 641, 1024 }, { 4, 642, 1024 }, { 5, 643, 1024 }, { 4, 644, 1024 }, { 5, 645, 1024 }, { 5, 646, 1024 }, { 6, 647, 1024 },
wolfSSL 15:117db924cf7c 7257 { 4, 648, 1024 }, { 5, 649, 1024 }, { 5, 650, 1024 }, { 6, 651, 1024 }, { 5, 652, 1024 }, { 6, 653, 1024 }, { 6, 654, 1024 }, { 7, 655, 1024 },
wolfSSL 15:117db924cf7c 7258 { 4, 656, 1024 }, { 5, 657, 1024 }, { 5, 658, 1024 }, { 6, 659, 1024 }, { 5, 660, 1024 }, { 6, 661, 1024 }, { 6, 662, 1024 }, { 7, 663, 1024 },
wolfSSL 15:117db924cf7c 7259 { 5, 664, 1024 }, { 6, 665, 1024 }, { 6, 666, 1024 }, { 7, 667, 1024 }, { 6, 668, 1024 }, { 7, 669, 1024 }, { 7, 670, 1024 }, { 8, 671, 1024 },
wolfSSL 15:117db924cf7c 7260 { 4, 672, 1024 }, { 5, 673, 1024 }, { 5, 674, 1024 }, { 6, 675, 1024 }, { 5, 676, 1024 }, { 6, 677, 1024 }, { 6, 678, 1024 }, { 7, 679, 1024 },
wolfSSL 15:117db924cf7c 7261 { 5, 680, 1024 }, { 6, 681, 1024 }, { 6, 682, 1024 }, { 7, 683, 1024 }, { 6, 684, 1024 }, { 7, 685, 1024 }, { 7, 686, 1024 }, { 8, 687, 1024 },
wolfSSL 15:117db924cf7c 7262 { 5, 688, 1024 }, { 6, 689, 1024 }, { 6, 690, 1024 }, { 7, 691, 1024 }, { 6, 692, 1024 }, { 7, 693, 1024 }, { 7, 694, 1024 }, { 8, 695, 1024 },
wolfSSL 15:117db924cf7c 7263 { 6, 696, 1024 }, { 7, 697, 1024 }, { 7, 698, 1024 }, { 8, 699, 1024 }, { 7, 700, 1024 }, { 8, 701, 1024 }, { 8, 702, 1024 }, { 9, 703, 1024 },
wolfSSL 15:117db924cf7c 7264 { 4, 704, 1024 }, { 5, 705, 1024 }, { 5, 706, 1024 }, { 6, 707, 1024 }, { 5, 708, 1024 }, { 6, 709, 1024 }, { 6, 710, 1024 }, { 7, 711, 1024 },
wolfSSL 15:117db924cf7c 7265 { 5, 712, 1024 }, { 6, 713, 1024 }, { 6, 714, 1024 }, { 7, 715, 1024 }, { 6, 716, 1024 }, { 7, 717, 1024 }, { 7, 718, 1024 }, { 8, 719, 1024 },
wolfSSL 15:117db924cf7c 7266 { 5, 720, 1024 }, { 6, 721, 1024 }, { 6, 722, 1024 }, { 7, 723, 1024 }, { 6, 724, 1024 }, { 7, 725, 1024 }, { 7, 726, 1024 }, { 8, 727, 1024 },
wolfSSL 15:117db924cf7c 7267 { 6, 728, 1024 }, { 7, 729, 1024 }, { 7, 730, 1024 }, { 8, 731, 1024 }, { 7, 732, 1024 }, { 8, 733, 1024 }, { 8, 734, 1024 }, { 9, 735, 1024 },
wolfSSL 15:117db924cf7c 7268 { 5, 736, 1024 }, { 6, 737, 1024 }, { 6, 738, 1024 }, { 7, 739, 1024 }, { 6, 740, 1024 }, { 7, 741, 1024 }, { 7, 742, 1024 }, { 8, 743, 1024 },
wolfSSL 15:117db924cf7c 7269 { 6, 744, 1024 }, { 7, 745, 1024 }, { 7, 746, 1024 }, { 8, 747, 1024 }, { 7, 748, 1024 }, { 8, 749, 1024 }, { 8, 750, 1024 }, { 9, 751, 1024 },
wolfSSL 15:117db924cf7c 7270 { 6, 752, 1024 }, { 7, 753, 1024 }, { 7, 754, 1024 }, { 8, 755, 1024 }, { 7, 756, 1024 }, { 8, 757, 1024 }, { 8, 758, 1024 }, { 9, 759, 1024 },
wolfSSL 15:117db924cf7c 7271 { 7, 760, 1024 }, { 8, 761, 1024 }, { 8, 762, 1024 }, { 9, 763, 1024 }, { 8, 764, 1024 }, { 9, 765, 1024 }, { 9, 766, 1024 }, { 10, 767, 1024 },
wolfSSL 15:117db924cf7c 7272 { 3, 768, 1024 }, { 4, 769, 1024 }, { 4, 770, 1024 }, { 5, 771, 1024 }, { 4, 772, 1024 }, { 5, 773, 1024 }, { 5, 774, 1024 }, { 6, 775, 1024 },
wolfSSL 15:117db924cf7c 7273 { 4, 776, 1024 }, { 5, 777, 1024 }, { 5, 778, 1024 }, { 6, 779, 1024 }, { 5, 780, 1024 }, { 6, 781, 1024 }, { 6, 782, 1024 }, { 7, 783, 1024 },
wolfSSL 15:117db924cf7c 7274 { 4, 784, 1024 }, { 5, 785, 1024 }, { 5, 786, 1024 }, { 6, 787, 1024 }, { 5, 788, 1024 }, { 6, 789, 1024 }, { 6, 790, 1024 }, { 7, 791, 1024 },
wolfSSL 15:117db924cf7c 7275 { 5, 792, 1024 }, { 6, 793, 1024 }, { 6, 794, 1024 }, { 7, 795, 1024 }, { 6, 796, 1024 }, { 7, 797, 1024 }, { 7, 798, 1024 }, { 8, 799, 1024 },
wolfSSL 15:117db924cf7c 7276 { 4, 800, 1024 }, { 5, 801, 1024 }, { 5, 802, 1024 }, { 6, 803, 1024 }, { 5, 804, 1024 }, { 6, 805, 1024 }, { 6, 806, 1024 }, { 7, 807, 1024 },
wolfSSL 15:117db924cf7c 7277 { 5, 808, 1024 }, { 6, 809, 1024 }, { 6, 810, 1024 }, { 7, 811, 1024 }, { 6, 812, 1024 }, { 7, 813, 1024 }, { 7, 814, 1024 }, { 8, 815, 1024 },
wolfSSL 15:117db924cf7c 7278 { 5, 816, 1024 }, { 6, 817, 1024 }, { 6, 818, 1024 }, { 7, 819, 1024 }, { 6, 820, 1024 }, { 7, 821, 1024 }, { 7, 822, 1024 }, { 8, 823, 1024 },
wolfSSL 15:117db924cf7c 7279 { 6, 824, 1024 }, { 7, 825, 1024 }, { 7, 826, 1024 }, { 8, 827, 1024 }, { 7, 828, 1024 }, { 8, 829, 1024 }, { 8, 830, 1024 }, { 9, 831, 1024 },
wolfSSL 15:117db924cf7c 7280 { 4, 832, 1024 }, { 5, 833, 1024 }, { 5, 834, 1024 }, { 6, 835, 1024 }, { 5, 836, 1024 }, { 6, 837, 1024 }, { 6, 838, 1024 }, { 7, 839, 1024 },
wolfSSL 15:117db924cf7c 7281 { 5, 840, 1024 }, { 6, 841, 1024 }, { 6, 842, 1024 }, { 7, 843, 1024 }, { 6, 844, 1024 }, { 7, 845, 1024 }, { 7, 846, 1024 }, { 8, 847, 1024 },
wolfSSL 15:117db924cf7c 7282 { 5, 848, 1024 }, { 6, 849, 1024 }, { 6, 850, 1024 }, { 7, 851, 1024 }, { 6, 852, 1024 }, { 7, 853, 1024 }, { 7, 854, 1024 }, { 8, 855, 1024 },
wolfSSL 15:117db924cf7c 7283 { 6, 856, 1024 }, { 7, 857, 1024 }, { 7, 858, 1024 }, { 8, 859, 1024 }, { 7, 860, 1024 }, { 8, 861, 1024 }, { 8, 862, 1024 }, { 9, 863, 1024 },
wolfSSL 15:117db924cf7c 7284 { 5, 864, 1024 }, { 6, 865, 1024 }, { 6, 866, 1024 }, { 7, 867, 1024 }, { 6, 868, 1024 }, { 7, 869, 1024 }, { 7, 870, 1024 }, { 8, 871, 1024 },
wolfSSL 15:117db924cf7c 7285 { 6, 872, 1024 }, { 7, 873, 1024 }, { 7, 874, 1024 }, { 8, 875, 1024 }, { 7, 876, 1024 }, { 8, 877, 1024 }, { 8, 878, 1024 }, { 9, 879, 1024 },
wolfSSL 15:117db924cf7c 7286 { 6, 880, 1024 }, { 7, 881, 1024 }, { 7, 882, 1024 }, { 8, 883, 1024 }, { 7, 884, 1024 }, { 8, 885, 1024 }, { 8, 886, 1024 }, { 9, 887, 1024 },
wolfSSL 15:117db924cf7c 7287 { 7, 888, 1024 }, { 8, 889, 1024 }, { 8, 890, 1024 }, { 9, 891, 1024 }, { 8, 892, 1024 }, { 9, 893, 1024 }, { 9, 894, 1024 }, { 10, 895, 1024 },
wolfSSL 15:117db924cf7c 7288 { 4, 896, 1024 }, { 5, 897, 1024 }, { 5, 898, 1024 }, { 6, 899, 1024 }, { 5, 900, 1024 }, { 6, 901, 1024 }, { 6, 902, 1024 }, { 7, 903, 1024 },
wolfSSL 15:117db924cf7c 7289 { 5, 904, 1024 }, { 6, 905, 1024 }, { 6, 906, 1024 }, { 7, 907, 1024 }, { 6, 908, 1024 }, { 7, 909, 1024 }, { 7, 910, 1024 }, { 8, 911, 1024 },
wolfSSL 15:117db924cf7c 7290 { 5, 912, 1024 }, { 6, 913, 1024 }, { 6, 914, 1024 }, { 7, 915, 1024 }, { 6, 916, 1024 }, { 7, 917, 1024 }, { 7, 918, 1024 }, { 8, 919, 1024 },
wolfSSL 15:117db924cf7c 7291 { 6, 920, 1024 }, { 7, 921, 1024 }, { 7, 922, 1024 }, { 8, 923, 1024 }, { 7, 924, 1024 }, { 8, 925, 1024 }, { 8, 926, 1024 }, { 9, 927, 1024 },
wolfSSL 15:117db924cf7c 7292 { 5, 928, 1024 }, { 6, 929, 1024 }, { 6, 930, 1024 }, { 7, 931, 1024 }, { 6, 932, 1024 }, { 7, 933, 1024 }, { 7, 934, 1024 }, { 8, 935, 1024 },
wolfSSL 15:117db924cf7c 7293 { 6, 936, 1024 }, { 7, 937, 1024 }, { 7, 938, 1024 }, { 8, 939, 1024 }, { 7, 940, 1024 }, { 8, 941, 1024 }, { 8, 942, 1024 }, { 9, 943, 1024 },
wolfSSL 15:117db924cf7c 7294 { 6, 944, 1024 }, { 7, 945, 1024 }, { 7, 946, 1024 }, { 8, 947, 1024 }, { 7, 948, 1024 }, { 8, 949, 1024 }, { 8, 950, 1024 }, { 9, 951, 1024 },
wolfSSL 15:117db924cf7c 7295 { 7, 952, 1024 }, { 8, 953, 1024 }, { 8, 954, 1024 }, { 9, 955, 1024 }, { 8, 956, 1024 }, { 9, 957, 1024 }, { 9, 958, 1024 }, { 10, 959, 1024 },
wolfSSL 15:117db924cf7c 7296 { 5, 960, 1024 }, { 6, 961, 1024 }, { 6, 962, 1024 }, { 7, 963, 1024 }, { 6, 964, 1024 }, { 7, 965, 1024 }, { 7, 966, 1024 }, { 8, 967, 1024 },
wolfSSL 15:117db924cf7c 7297 { 6, 968, 1024 }, { 7, 969, 1024 }, { 7, 970, 1024 }, { 8, 971, 1024 }, { 7, 972, 1024 }, { 8, 973, 1024 }, { 8, 974, 1024 }, { 9, 975, 1024 },
wolfSSL 15:117db924cf7c 7298 { 6, 976, 1024 }, { 7, 977, 1024 }, { 7, 978, 1024 }, { 8, 979, 1024 }, { 7, 980, 1024 }, { 8, 981, 1024 }, { 8, 982, 1024 }, { 9, 983, 1024 },
wolfSSL 15:117db924cf7c 7299 { 7, 984, 1024 }, { 8, 985, 1024 }, { 8, 986, 1024 }, { 9, 987, 1024 }, { 8, 988, 1024 }, { 9, 989, 1024 }, { 9, 990, 1024 }, { 10, 991, 1024 },
wolfSSL 15:117db924cf7c 7300 { 6, 992, 1024 }, { 7, 993, 1024 }, { 7, 994, 1024 }, { 8, 995, 1024 }, { 7, 996, 1024 }, { 8, 997, 1024 }, { 8, 998, 1024 }, { 9, 999, 1024 },
wolfSSL 15:117db924cf7c 7301 { 7, 1000, 1024 }, { 8, 1001, 1024 }, { 8, 1002, 1024 }, { 9, 1003, 1024 }, { 8, 1004, 1024 }, { 9, 1005, 1024 }, { 9, 1006, 1024 }, { 10, 1007, 1024 },
wolfSSL 15:117db924cf7c 7302 { 7, 1008, 1024 }, { 8, 1009, 1024 }, { 8, 1010, 1024 }, { 9, 1011, 1024 }, { 8, 1012, 1024 }, { 9, 1013, 1024 }, { 9, 1014, 1024 }, { 10, 1015, 1024 },
wolfSSL 15:117db924cf7c 7303 { 8, 1016, 1024 }, { 9, 1017, 1024 }, { 9, 1018, 1024 }, { 10, 1019, 1024 }, { 9, 1020, 1024 }, { 10, 1021, 1024 }, { 10, 1022, 1024 }, { 11, 1023, 1024 },
wolfSSL 15:117db924cf7c 7304 #if FP_LUT > 11
wolfSSL 15:117db924cf7c 7305 { 1, 0, 0 }, { 2, 1, 2048 }, { 2, 2, 2048 }, { 3, 3, 2048 }, { 2, 4, 2048 }, { 3, 5, 2048 }, { 3, 6, 2048 }, { 4, 7, 2048 },
wolfSSL 15:117db924cf7c 7306 { 2, 8, 2048 }, { 3, 9, 2048 }, { 3, 10, 2048 }, { 4, 11, 2048 }, { 3, 12, 2048 }, { 4, 13, 2048 }, { 4, 14, 2048 }, { 5, 15, 2048 },
wolfSSL 15:117db924cf7c 7307 { 2, 16, 2048 }, { 3, 17, 2048 }, { 3, 18, 2048 }, { 4, 19, 2048 }, { 3, 20, 2048 }, { 4, 21, 2048 }, { 4, 22, 2048 }, { 5, 23, 2048 },
wolfSSL 15:117db924cf7c 7308 { 3, 24, 2048 }, { 4, 25, 2048 }, { 4, 26, 2048 }, { 5, 27, 2048 }, { 4, 28, 2048 }, { 5, 29, 2048 }, { 5, 30, 2048 }, { 6, 31, 2048 },
wolfSSL 15:117db924cf7c 7309 { 2, 32, 2048 }, { 3, 33, 2048 }, { 3, 34, 2048 }, { 4, 35, 2048 }, { 3, 36, 2048 }, { 4, 37, 2048 }, { 4, 38, 2048 }, { 5, 39, 2048 },
wolfSSL 15:117db924cf7c 7310 { 3, 40, 2048 }, { 4, 41, 2048 }, { 4, 42, 2048 }, { 5, 43, 2048 }, { 4, 44, 2048 }, { 5, 45, 2048 }, { 5, 46, 2048 }, { 6, 47, 2048 },
wolfSSL 15:117db924cf7c 7311 { 3, 48, 2048 }, { 4, 49, 2048 }, { 4, 50, 2048 }, { 5, 51, 2048 }, { 4, 52, 2048 }, { 5, 53, 2048 }, { 5, 54, 2048 }, { 6, 55, 2048 },
wolfSSL 15:117db924cf7c 7312 { 4, 56, 2048 }, { 5, 57, 2048 }, { 5, 58, 2048 }, { 6, 59, 2048 }, { 5, 60, 2048 }, { 6, 61, 2048 }, { 6, 62, 2048 }, { 7, 63, 2048 },
wolfSSL 15:117db924cf7c 7313 { 2, 64, 2048 }, { 3, 65, 2048 }, { 3, 66, 2048 }, { 4, 67, 2048 }, { 3, 68, 2048 }, { 4, 69, 2048 }, { 4, 70, 2048 }, { 5, 71, 2048 },
wolfSSL 15:117db924cf7c 7314 { 3, 72, 2048 }, { 4, 73, 2048 }, { 4, 74, 2048 }, { 5, 75, 2048 }, { 4, 76, 2048 }, { 5, 77, 2048 }, { 5, 78, 2048 }, { 6, 79, 2048 },
wolfSSL 15:117db924cf7c 7315 { 3, 80, 2048 }, { 4, 81, 2048 }, { 4, 82, 2048 }, { 5, 83, 2048 }, { 4, 84, 2048 }, { 5, 85, 2048 }, { 5, 86, 2048 }, { 6, 87, 2048 },
wolfSSL 15:117db924cf7c 7316 { 4, 88, 2048 }, { 5, 89, 2048 }, { 5, 90, 2048 }, { 6, 91, 2048 }, { 5, 92, 2048 }, { 6, 93, 2048 }, { 6, 94, 2048 }, { 7, 95, 2048 },
wolfSSL 15:117db924cf7c 7317 { 3, 96, 2048 }, { 4, 97, 2048 }, { 4, 98, 2048 }, { 5, 99, 2048 }, { 4, 100, 2048 }, { 5, 101, 2048 }, { 5, 102, 2048 }, { 6, 103, 2048 },
wolfSSL 15:117db924cf7c 7318 { 4, 104, 2048 }, { 5, 105, 2048 }, { 5, 106, 2048 }, { 6, 107, 2048 }, { 5, 108, 2048 }, { 6, 109, 2048 }, { 6, 110, 2048 }, { 7, 111, 2048 },
wolfSSL 15:117db924cf7c 7319 { 4, 112, 2048 }, { 5, 113, 2048 }, { 5, 114, 2048 }, { 6, 115, 2048 }, { 5, 116, 2048 }, { 6, 117, 2048 }, { 6, 118, 2048 }, { 7, 119, 2048 },
wolfSSL 15:117db924cf7c 7320 { 5, 120, 2048 }, { 6, 121, 2048 }, { 6, 122, 2048 }, { 7, 123, 2048 }, { 6, 124, 2048 }, { 7, 125, 2048 }, { 7, 126, 2048 }, { 8, 127, 2048 },
wolfSSL 15:117db924cf7c 7321 { 2, 128, 2048 }, { 3, 129, 2048 }, { 3, 130, 2048 }, { 4, 131, 2048 }, { 3, 132, 2048 }, { 4, 133, 2048 }, { 4, 134, 2048 }, { 5, 135, 2048 },
wolfSSL 15:117db924cf7c 7322 { 3, 136, 2048 }, { 4, 137, 2048 }, { 4, 138, 2048 }, { 5, 139, 2048 }, { 4, 140, 2048 }, { 5, 141, 2048 }, { 5, 142, 2048 }, { 6, 143, 2048 },
wolfSSL 15:117db924cf7c 7323 { 3, 144, 2048 }, { 4, 145, 2048 }, { 4, 146, 2048 }, { 5, 147, 2048 }, { 4, 148, 2048 }, { 5, 149, 2048 }, { 5, 150, 2048 }, { 6, 151, 2048 },
wolfSSL 15:117db924cf7c 7324 { 4, 152, 2048 }, { 5, 153, 2048 }, { 5, 154, 2048 }, { 6, 155, 2048 }, { 5, 156, 2048 }, { 6, 157, 2048 }, { 6, 158, 2048 }, { 7, 159, 2048 },
wolfSSL 15:117db924cf7c 7325 { 3, 160, 2048 }, { 4, 161, 2048 }, { 4, 162, 2048 }, { 5, 163, 2048 }, { 4, 164, 2048 }, { 5, 165, 2048 }, { 5, 166, 2048 }, { 6, 167, 2048 },
wolfSSL 15:117db924cf7c 7326 { 4, 168, 2048 }, { 5, 169, 2048 }, { 5, 170, 2048 }, { 6, 171, 2048 }, { 5, 172, 2048 }, { 6, 173, 2048 }, { 6, 174, 2048 }, { 7, 175, 2048 },
wolfSSL 15:117db924cf7c 7327 { 4, 176, 2048 }, { 5, 177, 2048 }, { 5, 178, 2048 }, { 6, 179, 2048 }, { 5, 180, 2048 }, { 6, 181, 2048 }, { 6, 182, 2048 }, { 7, 183, 2048 },
wolfSSL 15:117db924cf7c 7328 { 5, 184, 2048 }, { 6, 185, 2048 }, { 6, 186, 2048 }, { 7, 187, 2048 }, { 6, 188, 2048 }, { 7, 189, 2048 }, { 7, 190, 2048 }, { 8, 191, 2048 },
wolfSSL 15:117db924cf7c 7329 { 3, 192, 2048 }, { 4, 193, 2048 }, { 4, 194, 2048 }, { 5, 195, 2048 }, { 4, 196, 2048 }, { 5, 197, 2048 }, { 5, 198, 2048 }, { 6, 199, 2048 },
wolfSSL 15:117db924cf7c 7330 { 4, 200, 2048 }, { 5, 201, 2048 }, { 5, 202, 2048 }, { 6, 203, 2048 }, { 5, 204, 2048 }, { 6, 205, 2048 }, { 6, 206, 2048 }, { 7, 207, 2048 },
wolfSSL 15:117db924cf7c 7331 { 4, 208, 2048 }, { 5, 209, 2048 }, { 5, 210, 2048 }, { 6, 211, 2048 }, { 5, 212, 2048 }, { 6, 213, 2048 }, { 6, 214, 2048 }, { 7, 215, 2048 },
wolfSSL 15:117db924cf7c 7332 { 5, 216, 2048 }, { 6, 217, 2048 }, { 6, 218, 2048 }, { 7, 219, 2048 }, { 6, 220, 2048 }, { 7, 221, 2048 }, { 7, 222, 2048 }, { 8, 223, 2048 },
wolfSSL 15:117db924cf7c 7333 { 4, 224, 2048 }, { 5, 225, 2048 }, { 5, 226, 2048 }, { 6, 227, 2048 }, { 5, 228, 2048 }, { 6, 229, 2048 }, { 6, 230, 2048 }, { 7, 231, 2048 },
wolfSSL 15:117db924cf7c 7334 { 5, 232, 2048 }, { 6, 233, 2048 }, { 6, 234, 2048 }, { 7, 235, 2048 }, { 6, 236, 2048 }, { 7, 237, 2048 }, { 7, 238, 2048 }, { 8, 239, 2048 },
wolfSSL 15:117db924cf7c 7335 { 5, 240, 2048 }, { 6, 241, 2048 }, { 6, 242, 2048 }, { 7, 243, 2048 }, { 6, 244, 2048 }, { 7, 245, 2048 }, { 7, 246, 2048 }, { 8, 247, 2048 },
wolfSSL 15:117db924cf7c 7336 { 6, 248, 2048 }, { 7, 249, 2048 }, { 7, 250, 2048 }, { 8, 251, 2048 }, { 7, 252, 2048 }, { 8, 253, 2048 }, { 8, 254, 2048 }, { 9, 255, 2048 },
wolfSSL 15:117db924cf7c 7337 { 2, 256, 2048 }, { 3, 257, 2048 }, { 3, 258, 2048 }, { 4, 259, 2048 }, { 3, 260, 2048 }, { 4, 261, 2048 }, { 4, 262, 2048 }, { 5, 263, 2048 },
wolfSSL 15:117db924cf7c 7338 { 3, 264, 2048 }, { 4, 265, 2048 }, { 4, 266, 2048 }, { 5, 267, 2048 }, { 4, 268, 2048 }, { 5, 269, 2048 }, { 5, 270, 2048 }, { 6, 271, 2048 },
wolfSSL 15:117db924cf7c 7339 { 3, 272, 2048 }, { 4, 273, 2048 }, { 4, 274, 2048 }, { 5, 275, 2048 }, { 4, 276, 2048 }, { 5, 277, 2048 }, { 5, 278, 2048 }, { 6, 279, 2048 },
wolfSSL 15:117db924cf7c 7340 { 4, 280, 2048 }, { 5, 281, 2048 }, { 5, 282, 2048 }, { 6, 283, 2048 }, { 5, 284, 2048 }, { 6, 285, 2048 }, { 6, 286, 2048 }, { 7, 287, 2048 },
wolfSSL 15:117db924cf7c 7341 { 3, 288, 2048 }, { 4, 289, 2048 }, { 4, 290, 2048 }, { 5, 291, 2048 }, { 4, 292, 2048 }, { 5, 293, 2048 }, { 5, 294, 2048 }, { 6, 295, 2048 },
wolfSSL 15:117db924cf7c 7342 { 4, 296, 2048 }, { 5, 297, 2048 }, { 5, 298, 2048 }, { 6, 299, 2048 }, { 5, 300, 2048 }, { 6, 301, 2048 }, { 6, 302, 2048 }, { 7, 303, 2048 },
wolfSSL 15:117db924cf7c 7343 { 4, 304, 2048 }, { 5, 305, 2048 }, { 5, 306, 2048 }, { 6, 307, 2048 }, { 5, 308, 2048 }, { 6, 309, 2048 }, { 6, 310, 2048 }, { 7, 311, 2048 },
wolfSSL 15:117db924cf7c 7344 { 5, 312, 2048 }, { 6, 313, 2048 }, { 6, 314, 2048 }, { 7, 315, 2048 }, { 6, 316, 2048 }, { 7, 317, 2048 }, { 7, 318, 2048 }, { 8, 319, 2048 },
wolfSSL 15:117db924cf7c 7345 { 3, 320, 2048 }, { 4, 321, 2048 }, { 4, 322, 2048 }, { 5, 323, 2048 }, { 4, 324, 2048 }, { 5, 325, 2048 }, { 5, 326, 2048 }, { 6, 327, 2048 },
wolfSSL 15:117db924cf7c 7346 { 4, 328, 2048 }, { 5, 329, 2048 }, { 5, 330, 2048 }, { 6, 331, 2048 }, { 5, 332, 2048 }, { 6, 333, 2048 }, { 6, 334, 2048 }, { 7, 335, 2048 },
wolfSSL 15:117db924cf7c 7347 { 4, 336, 2048 }, { 5, 337, 2048 }, { 5, 338, 2048 }, { 6, 339, 2048 }, { 5, 340, 2048 }, { 6, 341, 2048 }, { 6, 342, 2048 }, { 7, 343, 2048 },
wolfSSL 15:117db924cf7c 7348 { 5, 344, 2048 }, { 6, 345, 2048 }, { 6, 346, 2048 }, { 7, 347, 2048 }, { 6, 348, 2048 }, { 7, 349, 2048 }, { 7, 350, 2048 }, { 8, 351, 2048 },
wolfSSL 15:117db924cf7c 7349 { 4, 352, 2048 }, { 5, 353, 2048 }, { 5, 354, 2048 }, { 6, 355, 2048 }, { 5, 356, 2048 }, { 6, 357, 2048 }, { 6, 358, 2048 }, { 7, 359, 2048 },
wolfSSL 15:117db924cf7c 7350 { 5, 360, 2048 }, { 6, 361, 2048 }, { 6, 362, 2048 }, { 7, 363, 2048 }, { 6, 364, 2048 }, { 7, 365, 2048 }, { 7, 366, 2048 }, { 8, 367, 2048 },
wolfSSL 15:117db924cf7c 7351 { 5, 368, 2048 }, { 6, 369, 2048 }, { 6, 370, 2048 }, { 7, 371, 2048 }, { 6, 372, 2048 }, { 7, 373, 2048 }, { 7, 374, 2048 }, { 8, 375, 2048 },
wolfSSL 15:117db924cf7c 7352 { 6, 376, 2048 }, { 7, 377, 2048 }, { 7, 378, 2048 }, { 8, 379, 2048 }, { 7, 380, 2048 }, { 8, 381, 2048 }, { 8, 382, 2048 }, { 9, 383, 2048 },
wolfSSL 15:117db924cf7c 7353 { 3, 384, 2048 }, { 4, 385, 2048 }, { 4, 386, 2048 }, { 5, 387, 2048 }, { 4, 388, 2048 }, { 5, 389, 2048 }, { 5, 390, 2048 }, { 6, 391, 2048 },
wolfSSL 15:117db924cf7c 7354 { 4, 392, 2048 }, { 5, 393, 2048 }, { 5, 394, 2048 }, { 6, 395, 2048 }, { 5, 396, 2048 }, { 6, 397, 2048 }, { 6, 398, 2048 }, { 7, 399, 2048 },
wolfSSL 15:117db924cf7c 7355 { 4, 400, 2048 }, { 5, 401, 2048 }, { 5, 402, 2048 }, { 6, 403, 2048 }, { 5, 404, 2048 }, { 6, 405, 2048 }, { 6, 406, 2048 }, { 7, 407, 2048 },
wolfSSL 15:117db924cf7c 7356 { 5, 408, 2048 }, { 6, 409, 2048 }, { 6, 410, 2048 }, { 7, 411, 2048 }, { 6, 412, 2048 }, { 7, 413, 2048 }, { 7, 414, 2048 }, { 8, 415, 2048 },
wolfSSL 15:117db924cf7c 7357 { 4, 416, 2048 }, { 5, 417, 2048 }, { 5, 418, 2048 }, { 6, 419, 2048 }, { 5, 420, 2048 }, { 6, 421, 2048 }, { 6, 422, 2048 }, { 7, 423, 2048 },
wolfSSL 15:117db924cf7c 7358 { 5, 424, 2048 }, { 6, 425, 2048 }, { 6, 426, 2048 }, { 7, 427, 2048 }, { 6, 428, 2048 }, { 7, 429, 2048 }, { 7, 430, 2048 }, { 8, 431, 2048 },
wolfSSL 15:117db924cf7c 7359 { 5, 432, 2048 }, { 6, 433, 2048 }, { 6, 434, 2048 }, { 7, 435, 2048 }, { 6, 436, 2048 }, { 7, 437, 2048 }, { 7, 438, 2048 }, { 8, 439, 2048 },
wolfSSL 15:117db924cf7c 7360 { 6, 440, 2048 }, { 7, 441, 2048 }, { 7, 442, 2048 }, { 8, 443, 2048 }, { 7, 444, 2048 }, { 8, 445, 2048 }, { 8, 446, 2048 }, { 9, 447, 2048 },
wolfSSL 15:117db924cf7c 7361 { 4, 448, 2048 }, { 5, 449, 2048 }, { 5, 450, 2048 }, { 6, 451, 2048 }, { 5, 452, 2048 }, { 6, 453, 2048 }, { 6, 454, 2048 }, { 7, 455, 2048 },
wolfSSL 15:117db924cf7c 7362 { 5, 456, 2048 }, { 6, 457, 2048 }, { 6, 458, 2048 }, { 7, 459, 2048 }, { 6, 460, 2048 }, { 7, 461, 2048 }, { 7, 462, 2048 }, { 8, 463, 2048 },
wolfSSL 15:117db924cf7c 7363 { 5, 464, 2048 }, { 6, 465, 2048 }, { 6, 466, 2048 }, { 7, 467, 2048 }, { 6, 468, 2048 }, { 7, 469, 2048 }, { 7, 470, 2048 }, { 8, 471, 2048 },
wolfSSL 15:117db924cf7c 7364 { 6, 472, 2048 }, { 7, 473, 2048 }, { 7, 474, 2048 }, { 8, 475, 2048 }, { 7, 476, 2048 }, { 8, 477, 2048 }, { 8, 478, 2048 }, { 9, 479, 2048 },
wolfSSL 15:117db924cf7c 7365 { 5, 480, 2048 }, { 6, 481, 2048 }, { 6, 482, 2048 }, { 7, 483, 2048 }, { 6, 484, 2048 }, { 7, 485, 2048 }, { 7, 486, 2048 }, { 8, 487, 2048 },
wolfSSL 15:117db924cf7c 7366 { 6, 488, 2048 }, { 7, 489, 2048 }, { 7, 490, 2048 }, { 8, 491, 2048 }, { 7, 492, 2048 }, { 8, 493, 2048 }, { 8, 494, 2048 }, { 9, 495, 2048 },
wolfSSL 15:117db924cf7c 7367 { 6, 496, 2048 }, { 7, 497, 2048 }, { 7, 498, 2048 }, { 8, 499, 2048 }, { 7, 500, 2048 }, { 8, 501, 2048 }, { 8, 502, 2048 }, { 9, 503, 2048 },
wolfSSL 15:117db924cf7c 7368 { 7, 504, 2048 }, { 8, 505, 2048 }, { 8, 506, 2048 }, { 9, 507, 2048 }, { 8, 508, 2048 }, { 9, 509, 2048 }, { 9, 510, 2048 }, { 10, 511, 2048 },
wolfSSL 15:117db924cf7c 7369 { 2, 512, 2048 }, { 3, 513, 2048 }, { 3, 514, 2048 }, { 4, 515, 2048 }, { 3, 516, 2048 }, { 4, 517, 2048 }, { 4, 518, 2048 }, { 5, 519, 2048 },
wolfSSL 15:117db924cf7c 7370 { 3, 520, 2048 }, { 4, 521, 2048 }, { 4, 522, 2048 }, { 5, 523, 2048 }, { 4, 524, 2048 }, { 5, 525, 2048 }, { 5, 526, 2048 }, { 6, 527, 2048 },
wolfSSL 15:117db924cf7c 7371 { 3, 528, 2048 }, { 4, 529, 2048 }, { 4, 530, 2048 }, { 5, 531, 2048 }, { 4, 532, 2048 }, { 5, 533, 2048 }, { 5, 534, 2048 }, { 6, 535, 2048 },
wolfSSL 15:117db924cf7c 7372 { 4, 536, 2048 }, { 5, 537, 2048 }, { 5, 538, 2048 }, { 6, 539, 2048 }, { 5, 540, 2048 }, { 6, 541, 2048 }, { 6, 542, 2048 }, { 7, 543, 2048 },
wolfSSL 15:117db924cf7c 7373 { 3, 544, 2048 }, { 4, 545, 2048 }, { 4, 546, 2048 }, { 5, 547, 2048 }, { 4, 548, 2048 }, { 5, 549, 2048 }, { 5, 550, 2048 }, { 6, 551, 2048 },
wolfSSL 15:117db924cf7c 7374 { 4, 552, 2048 }, { 5, 553, 2048 }, { 5, 554, 2048 }, { 6, 555, 2048 }, { 5, 556, 2048 }, { 6, 557, 2048 }, { 6, 558, 2048 }, { 7, 559, 2048 },
wolfSSL 15:117db924cf7c 7375 { 4, 560, 2048 }, { 5, 561, 2048 }, { 5, 562, 2048 }, { 6, 563, 2048 }, { 5, 564, 2048 }, { 6, 565, 2048 }, { 6, 566, 2048 }, { 7, 567, 2048 },
wolfSSL 15:117db924cf7c 7376 { 5, 568, 2048 }, { 6, 569, 2048 }, { 6, 570, 2048 }, { 7, 571, 2048 }, { 6, 572, 2048 }, { 7, 573, 2048 }, { 7, 574, 2048 }, { 8, 575, 2048 },
wolfSSL 15:117db924cf7c 7377 { 3, 576, 2048 }, { 4, 577, 2048 }, { 4, 578, 2048 }, { 5, 579, 2048 }, { 4, 580, 2048 }, { 5, 581, 2048 }, { 5, 582, 2048 }, { 6, 583, 2048 },
wolfSSL 15:117db924cf7c 7378 { 4, 584, 2048 }, { 5, 585, 2048 }, { 5, 586, 2048 }, { 6, 587, 2048 }, { 5, 588, 2048 }, { 6, 589, 2048 }, { 6, 590, 2048 }, { 7, 591, 2048 },
wolfSSL 15:117db924cf7c 7379 { 4, 592, 2048 }, { 5, 593, 2048 }, { 5, 594, 2048 }, { 6, 595, 2048 }, { 5, 596, 2048 }, { 6, 597, 2048 }, { 6, 598, 2048 }, { 7, 599, 2048 },
wolfSSL 15:117db924cf7c 7380 { 5, 600, 2048 }, { 6, 601, 2048 }, { 6, 602, 2048 }, { 7, 603, 2048 }, { 6, 604, 2048 }, { 7, 605, 2048 }, { 7, 606, 2048 }, { 8, 607, 2048 },
wolfSSL 15:117db924cf7c 7381 { 4, 608, 2048 }, { 5, 609, 2048 }, { 5, 610, 2048 }, { 6, 611, 2048 }, { 5, 612, 2048 }, { 6, 613, 2048 }, { 6, 614, 2048 }, { 7, 615, 2048 },
wolfSSL 15:117db924cf7c 7382 { 5, 616, 2048 }, { 6, 617, 2048 }, { 6, 618, 2048 }, { 7, 619, 2048 }, { 6, 620, 2048 }, { 7, 621, 2048 }, { 7, 622, 2048 }, { 8, 623, 2048 },
wolfSSL 15:117db924cf7c 7383 { 5, 624, 2048 }, { 6, 625, 2048 }, { 6, 626, 2048 }, { 7, 627, 2048 }, { 6, 628, 2048 }, { 7, 629, 2048 }, { 7, 630, 2048 }, { 8, 631, 2048 },
wolfSSL 15:117db924cf7c 7384 { 6, 632, 2048 }, { 7, 633, 2048 }, { 7, 634, 2048 }, { 8, 635, 2048 }, { 7, 636, 2048 }, { 8, 637, 2048 }, { 8, 638, 2048 }, { 9, 639, 2048 },
wolfSSL 15:117db924cf7c 7385 { 3, 640, 2048 }, { 4, 641, 2048 }, { 4, 642, 2048 }, { 5, 643, 2048 }, { 4, 644, 2048 }, { 5, 645, 2048 }, { 5, 646, 2048 }, { 6, 647, 2048 },
wolfSSL 15:117db924cf7c 7386 { 4, 648, 2048 }, { 5, 649, 2048 }, { 5, 650, 2048 }, { 6, 651, 2048 }, { 5, 652, 2048 }, { 6, 653, 2048 }, { 6, 654, 2048 }, { 7, 655, 2048 },
wolfSSL 15:117db924cf7c 7387 { 4, 656, 2048 }, { 5, 657, 2048 }, { 5, 658, 2048 }, { 6, 659, 2048 }, { 5, 660, 2048 }, { 6, 661, 2048 }, { 6, 662, 2048 }, { 7, 663, 2048 },
wolfSSL 15:117db924cf7c 7388 { 5, 664, 2048 }, { 6, 665, 2048 }, { 6, 666, 2048 }, { 7, 667, 2048 }, { 6, 668, 2048 }, { 7, 669, 2048 }, { 7, 670, 2048 }, { 8, 671, 2048 },
wolfSSL 15:117db924cf7c 7389 { 4, 672, 2048 }, { 5, 673, 2048 }, { 5, 674, 2048 }, { 6, 675, 2048 }, { 5, 676, 2048 }, { 6, 677, 2048 }, { 6, 678, 2048 }, { 7, 679, 2048 },
wolfSSL 15:117db924cf7c 7390 { 5, 680, 2048 }, { 6, 681, 2048 }, { 6, 682, 2048 }, { 7, 683, 2048 }, { 6, 684, 2048 }, { 7, 685, 2048 }, { 7, 686, 2048 }, { 8, 687, 2048 },
wolfSSL 15:117db924cf7c 7391 { 5, 688, 2048 }, { 6, 689, 2048 }, { 6, 690, 2048 }, { 7, 691, 2048 }, { 6, 692, 2048 }, { 7, 693, 2048 }, { 7, 694, 2048 }, { 8, 695, 2048 },
wolfSSL 15:117db924cf7c 7392 { 6, 696, 2048 }, { 7, 697, 2048 }, { 7, 698, 2048 }, { 8, 699, 2048 }, { 7, 700, 2048 }, { 8, 701, 2048 }, { 8, 702, 2048 }, { 9, 703, 2048 },
wolfSSL 15:117db924cf7c 7393 { 4, 704, 2048 }, { 5, 705, 2048 }, { 5, 706, 2048 }, { 6, 707, 2048 }, { 5, 708, 2048 }, { 6, 709, 2048 }, { 6, 710, 2048 }, { 7, 711, 2048 },
wolfSSL 15:117db924cf7c 7394 { 5, 712, 2048 }, { 6, 713, 2048 }, { 6, 714, 2048 }, { 7, 715, 2048 }, { 6, 716, 2048 }, { 7, 717, 2048 }, { 7, 718, 2048 }, { 8, 719, 2048 },
wolfSSL 15:117db924cf7c 7395 { 5, 720, 2048 }, { 6, 721, 2048 }, { 6, 722, 2048 }, { 7, 723, 2048 }, { 6, 724, 2048 }, { 7, 725, 2048 }, { 7, 726, 2048 }, { 8, 727, 2048 },
wolfSSL 15:117db924cf7c 7396 { 6, 728, 2048 }, { 7, 729, 2048 }, { 7, 730, 2048 }, { 8, 731, 2048 }, { 7, 732, 2048 }, { 8, 733, 2048 }, { 8, 734, 2048 }, { 9, 735, 2048 },
wolfSSL 15:117db924cf7c 7397 { 5, 736, 2048 }, { 6, 737, 2048 }, { 6, 738, 2048 }, { 7, 739, 2048 }, { 6, 740, 2048 }, { 7, 741, 2048 }, { 7, 742, 2048 }, { 8, 743, 2048 },
wolfSSL 15:117db924cf7c 7398 { 6, 744, 2048 }, { 7, 745, 2048 }, { 7, 746, 2048 }, { 8, 747, 2048 }, { 7, 748, 2048 }, { 8, 749, 2048 }, { 8, 750, 2048 }, { 9, 751, 2048 },
wolfSSL 15:117db924cf7c 7399 { 6, 752, 2048 }, { 7, 753, 2048 }, { 7, 754, 2048 }, { 8, 755, 2048 }, { 7, 756, 2048 }, { 8, 757, 2048 }, { 8, 758, 2048 }, { 9, 759, 2048 },
wolfSSL 15:117db924cf7c 7400 { 7, 760, 2048 }, { 8, 761, 2048 }, { 8, 762, 2048 }, { 9, 763, 2048 }, { 8, 764, 2048 }, { 9, 765, 2048 }, { 9, 766, 2048 }, { 10, 767, 2048 },
wolfSSL 15:117db924cf7c 7401 { 3, 768, 2048 }, { 4, 769, 2048 }, { 4, 770, 2048 }, { 5, 771, 2048 }, { 4, 772, 2048 }, { 5, 773, 2048 }, { 5, 774, 2048 }, { 6, 775, 2048 },
wolfSSL 15:117db924cf7c 7402 { 4, 776, 2048 }, { 5, 777, 2048 }, { 5, 778, 2048 }, { 6, 779, 2048 }, { 5, 780, 2048 }, { 6, 781, 2048 }, { 6, 782, 2048 }, { 7, 783, 2048 },
wolfSSL 15:117db924cf7c 7403 { 4, 784, 2048 }, { 5, 785, 2048 }, { 5, 786, 2048 }, { 6, 787, 2048 }, { 5, 788, 2048 }, { 6, 789, 2048 }, { 6, 790, 2048 }, { 7, 791, 2048 },
wolfSSL 15:117db924cf7c 7404 { 5, 792, 2048 }, { 6, 793, 2048 }, { 6, 794, 2048 }, { 7, 795, 2048 }, { 6, 796, 2048 }, { 7, 797, 2048 }, { 7, 798, 2048 }, { 8, 799, 2048 },
wolfSSL 15:117db924cf7c 7405 { 4, 800, 2048 }, { 5, 801, 2048 }, { 5, 802, 2048 }, { 6, 803, 2048 }, { 5, 804, 2048 }, { 6, 805, 2048 }, { 6, 806, 2048 }, { 7, 807, 2048 },
wolfSSL 15:117db924cf7c 7406 { 5, 808, 2048 }, { 6, 809, 2048 }, { 6, 810, 2048 }, { 7, 811, 2048 }, { 6, 812, 2048 }, { 7, 813, 2048 }, { 7, 814, 2048 }, { 8, 815, 2048 },
wolfSSL 15:117db924cf7c 7407 { 5, 816, 2048 }, { 6, 817, 2048 }, { 6, 818, 2048 }, { 7, 819, 2048 }, { 6, 820, 2048 }, { 7, 821, 2048 }, { 7, 822, 2048 }, { 8, 823, 2048 },
wolfSSL 15:117db924cf7c 7408 { 6, 824, 2048 }, { 7, 825, 2048 }, { 7, 826, 2048 }, { 8, 827, 2048 }, { 7, 828, 2048 }, { 8, 829, 2048 }, { 8, 830, 2048 }, { 9, 831, 2048 },
wolfSSL 15:117db924cf7c 7409 { 4, 832, 2048 }, { 5, 833, 2048 }, { 5, 834, 2048 }, { 6, 835, 2048 }, { 5, 836, 2048 }, { 6, 837, 2048 }, { 6, 838, 2048 }, { 7, 839, 2048 },
wolfSSL 15:117db924cf7c 7410 { 5, 840, 2048 }, { 6, 841, 2048 }, { 6, 842, 2048 }, { 7, 843, 2048 }, { 6, 844, 2048 }, { 7, 845, 2048 }, { 7, 846, 2048 }, { 8, 847, 2048 },
wolfSSL 15:117db924cf7c 7411 { 5, 848, 2048 }, { 6, 849, 2048 }, { 6, 850, 2048 }, { 7, 851, 2048 }, { 6, 852, 2048 }, { 7, 853, 2048 }, { 7, 854, 2048 }, { 8, 855, 2048 },
wolfSSL 15:117db924cf7c 7412 { 6, 856, 2048 }, { 7, 857, 2048 }, { 7, 858, 2048 }, { 8, 859, 2048 }, { 7, 860, 2048 }, { 8, 861, 2048 }, { 8, 862, 2048 }, { 9, 863, 2048 },
wolfSSL 15:117db924cf7c 7413 { 5, 864, 2048 }, { 6, 865, 2048 }, { 6, 866, 2048 }, { 7, 867, 2048 }, { 6, 868, 2048 }, { 7, 869, 2048 }, { 7, 870, 2048 }, { 8, 871, 2048 },
wolfSSL 15:117db924cf7c 7414 { 6, 872, 2048 }, { 7, 873, 2048 }, { 7, 874, 2048 }, { 8, 875, 2048 }, { 7, 876, 2048 }, { 8, 877, 2048 }, { 8, 878, 2048 }, { 9, 879, 2048 },
wolfSSL 15:117db924cf7c 7415 { 6, 880, 2048 }, { 7, 881, 2048 }, { 7, 882, 2048 }, { 8, 883, 2048 }, { 7, 884, 2048 }, { 8, 885, 2048 }, { 8, 886, 2048 }, { 9, 887, 2048 },
wolfSSL 15:117db924cf7c 7416 { 7, 888, 2048 }, { 8, 889, 2048 }, { 8, 890, 2048 }, { 9, 891, 2048 }, { 8, 892, 2048 }, { 9, 893, 2048 }, { 9, 894, 2048 }, { 10, 895, 2048 },
wolfSSL 15:117db924cf7c 7417 { 4, 896, 2048 }, { 5, 897, 2048 }, { 5, 898, 2048 }, { 6, 899, 2048 }, { 5, 900, 2048 }, { 6, 901, 2048 }, { 6, 902, 2048 }, { 7, 903, 2048 },
wolfSSL 15:117db924cf7c 7418 { 5, 904, 2048 }, { 6, 905, 2048 }, { 6, 906, 2048 }, { 7, 907, 2048 }, { 6, 908, 2048 }, { 7, 909, 2048 }, { 7, 910, 2048 }, { 8, 911, 2048 },
wolfSSL 15:117db924cf7c 7419 { 5, 912, 2048 }, { 6, 913, 2048 }, { 6, 914, 2048 }, { 7, 915, 2048 }, { 6, 916, 2048 }, { 7, 917, 2048 }, { 7, 918, 2048 }, { 8, 919, 2048 },
wolfSSL 15:117db924cf7c 7420 { 6, 920, 2048 }, { 7, 921, 2048 }, { 7, 922, 2048 }, { 8, 923, 2048 }, { 7, 924, 2048 }, { 8, 925, 2048 }, { 8, 926, 2048 }, { 9, 927, 2048 },
wolfSSL 15:117db924cf7c 7421 { 5, 928, 2048 }, { 6, 929, 2048 }, { 6, 930, 2048 }, { 7, 931, 2048 }, { 6, 932, 2048 }, { 7, 933, 2048 }, { 7, 934, 2048 }, { 8, 935, 2048 },
wolfSSL 15:117db924cf7c 7422 { 6, 936, 2048 }, { 7, 937, 2048 }, { 7, 938, 2048 }, { 8, 939, 2048 }, { 7, 940, 2048 }, { 8, 941, 2048 }, { 8, 942, 2048 }, { 9, 943, 2048 },
wolfSSL 15:117db924cf7c 7423 { 6, 944, 2048 }, { 7, 945, 2048 }, { 7, 946, 2048 }, { 8, 947, 2048 }, { 7, 948, 2048 }, { 8, 949, 2048 }, { 8, 950, 2048 }, { 9, 951, 2048 },
wolfSSL 15:117db924cf7c 7424 { 7, 952, 2048 }, { 8, 953, 2048 }, { 8, 954, 2048 }, { 9, 955, 2048 }, { 8, 956, 2048 }, { 9, 957, 2048 }, { 9, 958, 2048 }, { 10, 959, 2048 },
wolfSSL 15:117db924cf7c 7425 { 5, 960, 2048 }, { 6, 961, 2048 }, { 6, 962, 2048 }, { 7, 963, 2048 }, { 6, 964, 2048 }, { 7, 965, 2048 }, { 7, 966, 2048 }, { 8, 967, 2048 },
wolfSSL 15:117db924cf7c 7426 { 6, 968, 2048 }, { 7, 969, 2048 }, { 7, 970, 2048 }, { 8, 971, 2048 }, { 7, 972, 2048 }, { 8, 973, 2048 }, { 8, 974, 2048 }, { 9, 975, 2048 },
wolfSSL 15:117db924cf7c 7427 { 6, 976, 2048 }, { 7, 977, 2048 }, { 7, 978, 2048 }, { 8, 979, 2048 }, { 7, 980, 2048 }, { 8, 981, 2048 }, { 8, 982, 2048 }, { 9, 983, 2048 },
wolfSSL 15:117db924cf7c 7428 { 7, 984, 2048 }, { 8, 985, 2048 }, { 8, 986, 2048 }, { 9, 987, 2048 }, { 8, 988, 2048 }, { 9, 989, 2048 }, { 9, 990, 2048 }, { 10, 991, 2048 },
wolfSSL 15:117db924cf7c 7429 { 6, 992, 2048 }, { 7, 993, 2048 }, { 7, 994, 2048 }, { 8, 995, 2048 }, { 7, 996, 2048 }, { 8, 997, 2048 }, { 8, 998, 2048 }, { 9, 999, 2048 },
wolfSSL 15:117db924cf7c 7430 { 7, 1000, 2048 }, { 8, 1001, 2048 }, { 8, 1002, 2048 }, { 9, 1003, 2048 }, { 8, 1004, 2048 }, { 9, 1005, 2048 }, { 9, 1006, 2048 }, { 10, 1007, 2048 },
wolfSSL 15:117db924cf7c 7431 { 7, 1008, 2048 }, { 8, 1009, 2048 }, { 8, 1010, 2048 }, { 9, 1011, 2048 }, { 8, 1012, 2048 }, { 9, 1013, 2048 }, { 9, 1014, 2048 }, { 10, 1015, 2048 },
wolfSSL 15:117db924cf7c 7432 { 8, 1016, 2048 }, { 9, 1017, 2048 }, { 9, 1018, 2048 }, { 10, 1019, 2048 }, { 9, 1020, 2048 }, { 10, 1021, 2048 }, { 10, 1022, 2048 }, { 11, 1023, 2048 },
wolfSSL 15:117db924cf7c 7433 { 2, 1024, 2048 }, { 3, 1025, 2048 }, { 3, 1026, 2048 }, { 4, 1027, 2048 }, { 3, 1028, 2048 }, { 4, 1029, 2048 }, { 4, 1030, 2048 }, { 5, 1031, 2048 },
wolfSSL 15:117db924cf7c 7434 { 3, 1032, 2048 }, { 4, 1033, 2048 }, { 4, 1034, 2048 }, { 5, 1035, 2048 }, { 4, 1036, 2048 }, { 5, 1037, 2048 }, { 5, 1038, 2048 }, { 6, 1039, 2048 },
wolfSSL 15:117db924cf7c 7435 { 3, 1040, 2048 }, { 4, 1041, 2048 }, { 4, 1042, 2048 }, { 5, 1043, 2048 }, { 4, 1044, 2048 }, { 5, 1045, 2048 }, { 5, 1046, 2048 }, { 6, 1047, 2048 },
wolfSSL 15:117db924cf7c 7436 { 4, 1048, 2048 }, { 5, 1049, 2048 }, { 5, 1050, 2048 }, { 6, 1051, 2048 }, { 5, 1052, 2048 }, { 6, 1053, 2048 }, { 6, 1054, 2048 }, { 7, 1055, 2048 },
wolfSSL 15:117db924cf7c 7437 { 3, 1056, 2048 }, { 4, 1057, 2048 }, { 4, 1058, 2048 }, { 5, 1059, 2048 }, { 4, 1060, 2048 }, { 5, 1061, 2048 }, { 5, 1062, 2048 }, { 6, 1063, 2048 },
wolfSSL 15:117db924cf7c 7438 { 4, 1064, 2048 }, { 5, 1065, 2048 }, { 5, 1066, 2048 }, { 6, 1067, 2048 }, { 5, 1068, 2048 }, { 6, 1069, 2048 }, { 6, 1070, 2048 }, { 7, 1071, 2048 },
wolfSSL 15:117db924cf7c 7439 { 4, 1072, 2048 }, { 5, 1073, 2048 }, { 5, 1074, 2048 }, { 6, 1075, 2048 }, { 5, 1076, 2048 }, { 6, 1077, 2048 }, { 6, 1078, 2048 }, { 7, 1079, 2048 },
wolfSSL 15:117db924cf7c 7440 { 5, 1080, 2048 }, { 6, 1081, 2048 }, { 6, 1082, 2048 }, { 7, 1083, 2048 }, { 6, 1084, 2048 }, { 7, 1085, 2048 }, { 7, 1086, 2048 }, { 8, 1087, 2048 },
wolfSSL 15:117db924cf7c 7441 { 3, 1088, 2048 }, { 4, 1089, 2048 }, { 4, 1090, 2048 }, { 5, 1091, 2048 }, { 4, 1092, 2048 }, { 5, 1093, 2048 }, { 5, 1094, 2048 }, { 6, 1095, 2048 },
wolfSSL 15:117db924cf7c 7442 { 4, 1096, 2048 }, { 5, 1097, 2048 }, { 5, 1098, 2048 }, { 6, 1099, 2048 }, { 5, 1100, 2048 }, { 6, 1101, 2048 }, { 6, 1102, 2048 }, { 7, 1103, 2048 },
wolfSSL 15:117db924cf7c 7443 { 4, 1104, 2048 }, { 5, 1105, 2048 }, { 5, 1106, 2048 }, { 6, 1107, 2048 }, { 5, 1108, 2048 }, { 6, 1109, 2048 }, { 6, 1110, 2048 }, { 7, 1111, 2048 },
wolfSSL 15:117db924cf7c 7444 { 5, 1112, 2048 }, { 6, 1113, 2048 }, { 6, 1114, 2048 }, { 7, 1115, 2048 }, { 6, 1116, 2048 }, { 7, 1117, 2048 }, { 7, 1118, 2048 }, { 8, 1119, 2048 },
wolfSSL 15:117db924cf7c 7445 { 4, 1120, 2048 }, { 5, 1121, 2048 }, { 5, 1122, 2048 }, { 6, 1123, 2048 }, { 5, 1124, 2048 }, { 6, 1125, 2048 }, { 6, 1126, 2048 }, { 7, 1127, 2048 },
wolfSSL 15:117db924cf7c 7446 { 5, 1128, 2048 }, { 6, 1129, 2048 }, { 6, 1130, 2048 }, { 7, 1131, 2048 }, { 6, 1132, 2048 }, { 7, 1133, 2048 }, { 7, 1134, 2048 }, { 8, 1135, 2048 },
wolfSSL 15:117db924cf7c 7447 { 5, 1136, 2048 }, { 6, 1137, 2048 }, { 6, 1138, 2048 }, { 7, 1139, 2048 }, { 6, 1140, 2048 }, { 7, 1141, 2048 }, { 7, 1142, 2048 }, { 8, 1143, 2048 },
wolfSSL 15:117db924cf7c 7448 { 6, 1144, 2048 }, { 7, 1145, 2048 }, { 7, 1146, 2048 }, { 8, 1147, 2048 }, { 7, 1148, 2048 }, { 8, 1149, 2048 }, { 8, 1150, 2048 }, { 9, 1151, 2048 },
wolfSSL 15:117db924cf7c 7449 { 3, 1152, 2048 }, { 4, 1153, 2048 }, { 4, 1154, 2048 }, { 5, 1155, 2048 }, { 4, 1156, 2048 }, { 5, 1157, 2048 }, { 5, 1158, 2048 }, { 6, 1159, 2048 },
wolfSSL 15:117db924cf7c 7450 { 4, 1160, 2048 }, { 5, 1161, 2048 }, { 5, 1162, 2048 }, { 6, 1163, 2048 }, { 5, 1164, 2048 }, { 6, 1165, 2048 }, { 6, 1166, 2048 }, { 7, 1167, 2048 },
wolfSSL 15:117db924cf7c 7451 { 4, 1168, 2048 }, { 5, 1169, 2048 }, { 5, 1170, 2048 }, { 6, 1171, 2048 }, { 5, 1172, 2048 }, { 6, 1173, 2048 }, { 6, 1174, 2048 }, { 7, 1175, 2048 },
wolfSSL 15:117db924cf7c 7452 { 5, 1176, 2048 }, { 6, 1177, 2048 }, { 6, 1178, 2048 }, { 7, 1179, 2048 }, { 6, 1180, 2048 }, { 7, 1181, 2048 }, { 7, 1182, 2048 }, { 8, 1183, 2048 },
wolfSSL 15:117db924cf7c 7453 { 4, 1184, 2048 }, { 5, 1185, 2048 }, { 5, 1186, 2048 }, { 6, 1187, 2048 }, { 5, 1188, 2048 }, { 6, 1189, 2048 }, { 6, 1190, 2048 }, { 7, 1191, 2048 },
wolfSSL 15:117db924cf7c 7454 { 5, 1192, 2048 }, { 6, 1193, 2048 }, { 6, 1194, 2048 }, { 7, 1195, 2048 }, { 6, 1196, 2048 }, { 7, 1197, 2048 }, { 7, 1198, 2048 }, { 8, 1199, 2048 },
wolfSSL 15:117db924cf7c 7455 { 5, 1200, 2048 }, { 6, 1201, 2048 }, { 6, 1202, 2048 }, { 7, 1203, 2048 }, { 6, 1204, 2048 }, { 7, 1205, 2048 }, { 7, 1206, 2048 }, { 8, 1207, 2048 },
wolfSSL 15:117db924cf7c 7456 { 6, 1208, 2048 }, { 7, 1209, 2048 }, { 7, 1210, 2048 }, { 8, 1211, 2048 }, { 7, 1212, 2048 }, { 8, 1213, 2048 }, { 8, 1214, 2048 }, { 9, 1215, 2048 },
wolfSSL 15:117db924cf7c 7457 { 4, 1216, 2048 }, { 5, 1217, 2048 }, { 5, 1218, 2048 }, { 6, 1219, 2048 }, { 5, 1220, 2048 }, { 6, 1221, 2048 }, { 6, 1222, 2048 }, { 7, 1223, 2048 },
wolfSSL 15:117db924cf7c 7458 { 5, 1224, 2048 }, { 6, 1225, 2048 }, { 6, 1226, 2048 }, { 7, 1227, 2048 }, { 6, 1228, 2048 }, { 7, 1229, 2048 }, { 7, 1230, 2048 }, { 8, 1231, 2048 },
wolfSSL 15:117db924cf7c 7459 { 5, 1232, 2048 }, { 6, 1233, 2048 }, { 6, 1234, 2048 }, { 7, 1235, 2048 }, { 6, 1236, 2048 }, { 7, 1237, 2048 }, { 7, 1238, 2048 }, { 8, 1239, 2048 },
wolfSSL 15:117db924cf7c 7460 { 6, 1240, 2048 }, { 7, 1241, 2048 }, { 7, 1242, 2048 }, { 8, 1243, 2048 }, { 7, 1244, 2048 }, { 8, 1245, 2048 }, { 8, 1246, 2048 }, { 9, 1247, 2048 },
wolfSSL 15:117db924cf7c 7461 { 5, 1248, 2048 }, { 6, 1249, 2048 }, { 6, 1250, 2048 }, { 7, 1251, 2048 }, { 6, 1252, 2048 }, { 7, 1253, 2048 }, { 7, 1254, 2048 }, { 8, 1255, 2048 },
wolfSSL 15:117db924cf7c 7462 { 6, 1256, 2048 }, { 7, 1257, 2048 }, { 7, 1258, 2048 }, { 8, 1259, 2048 }, { 7, 1260, 2048 }, { 8, 1261, 2048 }, { 8, 1262, 2048 }, { 9, 1263, 2048 },
wolfSSL 15:117db924cf7c 7463 { 6, 1264, 2048 }, { 7, 1265, 2048 }, { 7, 1266, 2048 }, { 8, 1267, 2048 }, { 7, 1268, 2048 }, { 8, 1269, 2048 }, { 8, 1270, 2048 }, { 9, 1271, 2048 },
wolfSSL 15:117db924cf7c 7464 { 7, 1272, 2048 }, { 8, 1273, 2048 }, { 8, 1274, 2048 }, { 9, 1275, 2048 }, { 8, 1276, 2048 }, { 9, 1277, 2048 }, { 9, 1278, 2048 }, { 10, 1279, 2048 },
wolfSSL 15:117db924cf7c 7465 { 3, 1280, 2048 }, { 4, 1281, 2048 }, { 4, 1282, 2048 }, { 5, 1283, 2048 }, { 4, 1284, 2048 }, { 5, 1285, 2048 }, { 5, 1286, 2048 }, { 6, 1287, 2048 },
wolfSSL 15:117db924cf7c 7466 { 4, 1288, 2048 }, { 5, 1289, 2048 }, { 5, 1290, 2048 }, { 6, 1291, 2048 }, { 5, 1292, 2048 }, { 6, 1293, 2048 }, { 6, 1294, 2048 }, { 7, 1295, 2048 },
wolfSSL 15:117db924cf7c 7467 { 4, 1296, 2048 }, { 5, 1297, 2048 }, { 5, 1298, 2048 }, { 6, 1299, 2048 }, { 5, 1300, 2048 }, { 6, 1301, 2048 }, { 6, 1302, 2048 }, { 7, 1303, 2048 },
wolfSSL 15:117db924cf7c 7468 { 5, 1304, 2048 }, { 6, 1305, 2048 }, { 6, 1306, 2048 }, { 7, 1307, 2048 }, { 6, 1308, 2048 }, { 7, 1309, 2048 }, { 7, 1310, 2048 }, { 8, 1311, 2048 },
wolfSSL 15:117db924cf7c 7469 { 4, 1312, 2048 }, { 5, 1313, 2048 }, { 5, 1314, 2048 }, { 6, 1315, 2048 }, { 5, 1316, 2048 }, { 6, 1317, 2048 }, { 6, 1318, 2048 }, { 7, 1319, 2048 },
wolfSSL 15:117db924cf7c 7470 { 5, 1320, 2048 }, { 6, 1321, 2048 }, { 6, 1322, 2048 }, { 7, 1323, 2048 }, { 6, 1324, 2048 }, { 7, 1325, 2048 }, { 7, 1326, 2048 }, { 8, 1327, 2048 },
wolfSSL 15:117db924cf7c 7471 { 5, 1328, 2048 }, { 6, 1329, 2048 }, { 6, 1330, 2048 }, { 7, 1331, 2048 }, { 6, 1332, 2048 }, { 7, 1333, 2048 }, { 7, 1334, 2048 }, { 8, 1335, 2048 },
wolfSSL 15:117db924cf7c 7472 { 6, 1336, 2048 }, { 7, 1337, 2048 }, { 7, 1338, 2048 }, { 8, 1339, 2048 }, { 7, 1340, 2048 }, { 8, 1341, 2048 }, { 8, 1342, 2048 }, { 9, 1343, 2048 },
wolfSSL 15:117db924cf7c 7473 { 4, 1344, 2048 }, { 5, 1345, 2048 }, { 5, 1346, 2048 }, { 6, 1347, 2048 }, { 5, 1348, 2048 }, { 6, 1349, 2048 }, { 6, 1350, 2048 }, { 7, 1351, 2048 },
wolfSSL 15:117db924cf7c 7474 { 5, 1352, 2048 }, { 6, 1353, 2048 }, { 6, 1354, 2048 }, { 7, 1355, 2048 }, { 6, 1356, 2048 }, { 7, 1357, 2048 }, { 7, 1358, 2048 }, { 8, 1359, 2048 },
wolfSSL 15:117db924cf7c 7475 { 5, 1360, 2048 }, { 6, 1361, 2048 }, { 6, 1362, 2048 }, { 7, 1363, 2048 }, { 6, 1364, 2048 }, { 7, 1365, 2048 }, { 7, 1366, 2048 }, { 8, 1367, 2048 },
wolfSSL 15:117db924cf7c 7476 { 6, 1368, 2048 }, { 7, 1369, 2048 }, { 7, 1370, 2048 }, { 8, 1371, 2048 }, { 7, 1372, 2048 }, { 8, 1373, 2048 }, { 8, 1374, 2048 }, { 9, 1375, 2048 },
wolfSSL 15:117db924cf7c 7477 { 5, 1376, 2048 }, { 6, 1377, 2048 }, { 6, 1378, 2048 }, { 7, 1379, 2048 }, { 6, 1380, 2048 }, { 7, 1381, 2048 }, { 7, 1382, 2048 }, { 8, 1383, 2048 },
wolfSSL 15:117db924cf7c 7478 { 6, 1384, 2048 }, { 7, 1385, 2048 }, { 7, 1386, 2048 }, { 8, 1387, 2048 }, { 7, 1388, 2048 }, { 8, 1389, 2048 }, { 8, 1390, 2048 }, { 9, 1391, 2048 },
wolfSSL 15:117db924cf7c 7479 { 6, 1392, 2048 }, { 7, 1393, 2048 }, { 7, 1394, 2048 }, { 8, 1395, 2048 }, { 7, 1396, 2048 }, { 8, 1397, 2048 }, { 8, 1398, 2048 }, { 9, 1399, 2048 },
wolfSSL 15:117db924cf7c 7480 { 7, 1400, 2048 }, { 8, 1401, 2048 }, { 8, 1402, 2048 }, { 9, 1403, 2048 }, { 8, 1404, 2048 }, { 9, 1405, 2048 }, { 9, 1406, 2048 }, { 10, 1407, 2048 },
wolfSSL 15:117db924cf7c 7481 { 4, 1408, 2048 }, { 5, 1409, 2048 }, { 5, 1410, 2048 }, { 6, 1411, 2048 }, { 5, 1412, 2048 }, { 6, 1413, 2048 }, { 6, 1414, 2048 }, { 7, 1415, 2048 },
wolfSSL 15:117db924cf7c 7482 { 5, 1416, 2048 }, { 6, 1417, 2048 }, { 6, 1418, 2048 }, { 7, 1419, 2048 }, { 6, 1420, 2048 }, { 7, 1421, 2048 }, { 7, 1422, 2048 }, { 8, 1423, 2048 },
wolfSSL 15:117db924cf7c 7483 { 5, 1424, 2048 }, { 6, 1425, 2048 }, { 6, 1426, 2048 }, { 7, 1427, 2048 }, { 6, 1428, 2048 }, { 7, 1429, 2048 }, { 7, 1430, 2048 }, { 8, 1431, 2048 },
wolfSSL 15:117db924cf7c 7484 { 6, 1432, 2048 }, { 7, 1433, 2048 }, { 7, 1434, 2048 }, { 8, 1435, 2048 }, { 7, 1436, 2048 }, { 8, 1437, 2048 }, { 8, 1438, 2048 }, { 9, 1439, 2048 },
wolfSSL 15:117db924cf7c 7485 { 5, 1440, 2048 }, { 6, 1441, 2048 }, { 6, 1442, 2048 }, { 7, 1443, 2048 }, { 6, 1444, 2048 }, { 7, 1445, 2048 }, { 7, 1446, 2048 }, { 8, 1447, 2048 },
wolfSSL 15:117db924cf7c 7486 { 6, 1448, 2048 }, { 7, 1449, 2048 }, { 7, 1450, 2048 }, { 8, 1451, 2048 }, { 7, 1452, 2048 }, { 8, 1453, 2048 }, { 8, 1454, 2048 }, { 9, 1455, 2048 },
wolfSSL 15:117db924cf7c 7487 { 6, 1456, 2048 }, { 7, 1457, 2048 }, { 7, 1458, 2048 }, { 8, 1459, 2048 }, { 7, 1460, 2048 }, { 8, 1461, 2048 }, { 8, 1462, 2048 }, { 9, 1463, 2048 },
wolfSSL 15:117db924cf7c 7488 { 7, 1464, 2048 }, { 8, 1465, 2048 }, { 8, 1466, 2048 }, { 9, 1467, 2048 }, { 8, 1468, 2048 }, { 9, 1469, 2048 }, { 9, 1470, 2048 }, { 10, 1471, 2048 },
wolfSSL 15:117db924cf7c 7489 { 5, 1472, 2048 }, { 6, 1473, 2048 }, { 6, 1474, 2048 }, { 7, 1475, 2048 }, { 6, 1476, 2048 }, { 7, 1477, 2048 }, { 7, 1478, 2048 }, { 8, 1479, 2048 },
wolfSSL 15:117db924cf7c 7490 { 6, 1480, 2048 }, { 7, 1481, 2048 }, { 7, 1482, 2048 }, { 8, 1483, 2048 }, { 7, 1484, 2048 }, { 8, 1485, 2048 }, { 8, 1486, 2048 }, { 9, 1487, 2048 },
wolfSSL 15:117db924cf7c 7491 { 6, 1488, 2048 }, { 7, 1489, 2048 }, { 7, 1490, 2048 }, { 8, 1491, 2048 }, { 7, 1492, 2048 }, { 8, 1493, 2048 }, { 8, 1494, 2048 }, { 9, 1495, 2048 },
wolfSSL 15:117db924cf7c 7492 { 7, 1496, 2048 }, { 8, 1497, 2048 }, { 8, 1498, 2048 }, { 9, 1499, 2048 }, { 8, 1500, 2048 }, { 9, 1501, 2048 }, { 9, 1502, 2048 }, { 10, 1503, 2048 },
wolfSSL 15:117db924cf7c 7493 { 6, 1504, 2048 }, { 7, 1505, 2048 }, { 7, 1506, 2048 }, { 8, 1507, 2048 }, { 7, 1508, 2048 }, { 8, 1509, 2048 }, { 8, 1510, 2048 }, { 9, 1511, 2048 },
wolfSSL 15:117db924cf7c 7494 { 7, 1512, 2048 }, { 8, 1513, 2048 }, { 8, 1514, 2048 }, { 9, 1515, 2048 }, { 8, 1516, 2048 }, { 9, 1517, 2048 }, { 9, 1518, 2048 }, { 10, 1519, 2048 },
wolfSSL 15:117db924cf7c 7495 { 7, 1520, 2048 }, { 8, 1521, 2048 }, { 8, 1522, 2048 }, { 9, 1523, 2048 }, { 8, 1524, 2048 }, { 9, 1525, 2048 }, { 9, 1526, 2048 }, { 10, 1527, 2048 },
wolfSSL 15:117db924cf7c 7496 { 8, 1528, 2048 }, { 9, 1529, 2048 }, { 9, 1530, 2048 }, { 10, 1531, 2048 }, { 9, 1532, 2048 }, { 10, 1533, 2048 }, { 10, 1534, 2048 }, { 11, 1535, 2048 },
wolfSSL 15:117db924cf7c 7497 { 3, 1536, 2048 }, { 4, 1537, 2048 }, { 4, 1538, 2048 }, { 5, 1539, 2048 }, { 4, 1540, 2048 }, { 5, 1541, 2048 }, { 5, 1542, 2048 }, { 6, 1543, 2048 },
wolfSSL 15:117db924cf7c 7498 { 4, 1544, 2048 }, { 5, 1545, 2048 }, { 5, 1546, 2048 }, { 6, 1547, 2048 }, { 5, 1548, 2048 }, { 6, 1549, 2048 }, { 6, 1550, 2048 }, { 7, 1551, 2048 },
wolfSSL 15:117db924cf7c 7499 { 4, 1552, 2048 }, { 5, 1553, 2048 }, { 5, 1554, 2048 }, { 6, 1555, 2048 }, { 5, 1556, 2048 }, { 6, 1557, 2048 }, { 6, 1558, 2048 }, { 7, 1559, 2048 },
wolfSSL 15:117db924cf7c 7500 { 5, 1560, 2048 }, { 6, 1561, 2048 }, { 6, 1562, 2048 }, { 7, 1563, 2048 }, { 6, 1564, 2048 }, { 7, 1565, 2048 }, { 7, 1566, 2048 }, { 8, 1567, 2048 },
wolfSSL 15:117db924cf7c 7501 { 4, 1568, 2048 }, { 5, 1569, 2048 }, { 5, 1570, 2048 }, { 6, 1571, 2048 }, { 5, 1572, 2048 }, { 6, 1573, 2048 }, { 6, 1574, 2048 }, { 7, 1575, 2048 },
wolfSSL 15:117db924cf7c 7502 { 5, 1576, 2048 }, { 6, 1577, 2048 }, { 6, 1578, 2048 }, { 7, 1579, 2048 }, { 6, 1580, 2048 }, { 7, 1581, 2048 }, { 7, 1582, 2048 }, { 8, 1583, 2048 },
wolfSSL 15:117db924cf7c 7503 { 5, 1584, 2048 }, { 6, 1585, 2048 }, { 6, 1586, 2048 }, { 7, 1587, 2048 }, { 6, 1588, 2048 }, { 7, 1589, 2048 }, { 7, 1590, 2048 }, { 8, 1591, 2048 },
wolfSSL 15:117db924cf7c 7504 { 6, 1592, 2048 }, { 7, 1593, 2048 }, { 7, 1594, 2048 }, { 8, 1595, 2048 }, { 7, 1596, 2048 }, { 8, 1597, 2048 }, { 8, 1598, 2048 }, { 9, 1599, 2048 },
wolfSSL 15:117db924cf7c 7505 { 4, 1600, 2048 }, { 5, 1601, 2048 }, { 5, 1602, 2048 }, { 6, 1603, 2048 }, { 5, 1604, 2048 }, { 6, 1605, 2048 }, { 6, 1606, 2048 }, { 7, 1607, 2048 },
wolfSSL 15:117db924cf7c 7506 { 5, 1608, 2048 }, { 6, 1609, 2048 }, { 6, 1610, 2048 }, { 7, 1611, 2048 }, { 6, 1612, 2048 }, { 7, 1613, 2048 }, { 7, 1614, 2048 }, { 8, 1615, 2048 },
wolfSSL 15:117db924cf7c 7507 { 5, 1616, 2048 }, { 6, 1617, 2048 }, { 6, 1618, 2048 }, { 7, 1619, 2048 }, { 6, 1620, 2048 }, { 7, 1621, 2048 }, { 7, 1622, 2048 }, { 8, 1623, 2048 },
wolfSSL 15:117db924cf7c 7508 { 6, 1624, 2048 }, { 7, 1625, 2048 }, { 7, 1626, 2048 }, { 8, 1627, 2048 }, { 7, 1628, 2048 }, { 8, 1629, 2048 }, { 8, 1630, 2048 }, { 9, 1631, 2048 },
wolfSSL 15:117db924cf7c 7509 { 5, 1632, 2048 }, { 6, 1633, 2048 }, { 6, 1634, 2048 }, { 7, 1635, 2048 }, { 6, 1636, 2048 }, { 7, 1637, 2048 }, { 7, 1638, 2048 }, { 8, 1639, 2048 },
wolfSSL 15:117db924cf7c 7510 { 6, 1640, 2048 }, { 7, 1641, 2048 }, { 7, 1642, 2048 }, { 8, 1643, 2048 }, { 7, 1644, 2048 }, { 8, 1645, 2048 }, { 8, 1646, 2048 }, { 9, 1647, 2048 },
wolfSSL 15:117db924cf7c 7511 { 6, 1648, 2048 }, { 7, 1649, 2048 }, { 7, 1650, 2048 }, { 8, 1651, 2048 }, { 7, 1652, 2048 }, { 8, 1653, 2048 }, { 8, 1654, 2048 }, { 9, 1655, 2048 },
wolfSSL 15:117db924cf7c 7512 { 7, 1656, 2048 }, { 8, 1657, 2048 }, { 8, 1658, 2048 }, { 9, 1659, 2048 }, { 8, 1660, 2048 }, { 9, 1661, 2048 }, { 9, 1662, 2048 }, { 10, 1663, 2048 },
wolfSSL 15:117db924cf7c 7513 { 4, 1664, 2048 }, { 5, 1665, 2048 }, { 5, 1666, 2048 }, { 6, 1667, 2048 }, { 5, 1668, 2048 }, { 6, 1669, 2048 }, { 6, 1670, 2048 }, { 7, 1671, 2048 },
wolfSSL 15:117db924cf7c 7514 { 5, 1672, 2048 }, { 6, 1673, 2048 }, { 6, 1674, 2048 }, { 7, 1675, 2048 }, { 6, 1676, 2048 }, { 7, 1677, 2048 }, { 7, 1678, 2048 }, { 8, 1679, 2048 },
wolfSSL 15:117db924cf7c 7515 { 5, 1680, 2048 }, { 6, 1681, 2048 }, { 6, 1682, 2048 }, { 7, 1683, 2048 }, { 6, 1684, 2048 }, { 7, 1685, 2048 }, { 7, 1686, 2048 }, { 8, 1687, 2048 },
wolfSSL 15:117db924cf7c 7516 { 6, 1688, 2048 }, { 7, 1689, 2048 }, { 7, 1690, 2048 }, { 8, 1691, 2048 }, { 7, 1692, 2048 }, { 8, 1693, 2048 }, { 8, 1694, 2048 }, { 9, 1695, 2048 },
wolfSSL 15:117db924cf7c 7517 { 5, 1696, 2048 }, { 6, 1697, 2048 }, { 6, 1698, 2048 }, { 7, 1699, 2048 }, { 6, 1700, 2048 }, { 7, 1701, 2048 }, { 7, 1702, 2048 }, { 8, 1703, 2048 },
wolfSSL 15:117db924cf7c 7518 { 6, 1704, 2048 }, { 7, 1705, 2048 }, { 7, 1706, 2048 }, { 8, 1707, 2048 }, { 7, 1708, 2048 }, { 8, 1709, 2048 }, { 8, 1710, 2048 }, { 9, 1711, 2048 },
wolfSSL 15:117db924cf7c 7519 { 6, 1712, 2048 }, { 7, 1713, 2048 }, { 7, 1714, 2048 }, { 8, 1715, 2048 }, { 7, 1716, 2048 }, { 8, 1717, 2048 }, { 8, 1718, 2048 }, { 9, 1719, 2048 },
wolfSSL 15:117db924cf7c 7520 { 7, 1720, 2048 }, { 8, 1721, 2048 }, { 8, 1722, 2048 }, { 9, 1723, 2048 }, { 8, 1724, 2048 }, { 9, 1725, 2048 }, { 9, 1726, 2048 }, { 10, 1727, 2048 },
wolfSSL 15:117db924cf7c 7521 { 5, 1728, 2048 }, { 6, 1729, 2048 }, { 6, 1730, 2048 }, { 7, 1731, 2048 }, { 6, 1732, 2048 }, { 7, 1733, 2048 }, { 7, 1734, 2048 }, { 8, 1735, 2048 },
wolfSSL 15:117db924cf7c 7522 { 6, 1736, 2048 }, { 7, 1737, 2048 }, { 7, 1738, 2048 }, { 8, 1739, 2048 }, { 7, 1740, 2048 }, { 8, 1741, 2048 }, { 8, 1742, 2048 }, { 9, 1743, 2048 },
wolfSSL 15:117db924cf7c 7523 { 6, 1744, 2048 }, { 7, 1745, 2048 }, { 7, 1746, 2048 }, { 8, 1747, 2048 }, { 7, 1748, 2048 }, { 8, 1749, 2048 }, { 8, 1750, 2048 }, { 9, 1751, 2048 },
wolfSSL 15:117db924cf7c 7524 { 7, 1752, 2048 }, { 8, 1753, 2048 }, { 8, 1754, 2048 }, { 9, 1755, 2048 }, { 8, 1756, 2048 }, { 9, 1757, 2048 }, { 9, 1758, 2048 }, { 10, 1759, 2048 },
wolfSSL 15:117db924cf7c 7525 { 6, 1760, 2048 }, { 7, 1761, 2048 }, { 7, 1762, 2048 }, { 8, 1763, 2048 }, { 7, 1764, 2048 }, { 8, 1765, 2048 }, { 8, 1766, 2048 }, { 9, 1767, 2048 },
wolfSSL 15:117db924cf7c 7526 { 7, 1768, 2048 }, { 8, 1769, 2048 }, { 8, 1770, 2048 }, { 9, 1771, 2048 }, { 8, 1772, 2048 }, { 9, 1773, 2048 }, { 9, 1774, 2048 }, { 10, 1775, 2048 },
wolfSSL 15:117db924cf7c 7527 { 7, 1776, 2048 }, { 8, 1777, 2048 }, { 8, 1778, 2048 }, { 9, 1779, 2048 }, { 8, 1780, 2048 }, { 9, 1781, 2048 }, { 9, 1782, 2048 }, { 10, 1783, 2048 },
wolfSSL 15:117db924cf7c 7528 { 8, 1784, 2048 }, { 9, 1785, 2048 }, { 9, 1786, 2048 }, { 10, 1787, 2048 }, { 9, 1788, 2048 }, { 10, 1789, 2048 }, { 10, 1790, 2048 }, { 11, 1791, 2048 },
wolfSSL 15:117db924cf7c 7529 { 4, 1792, 2048 }, { 5, 1793, 2048 }, { 5, 1794, 2048 }, { 6, 1795, 2048 }, { 5, 1796, 2048 }, { 6, 1797, 2048 }, { 6, 1798, 2048 }, { 7, 1799, 2048 },
wolfSSL 15:117db924cf7c 7530 { 5, 1800, 2048 }, { 6, 1801, 2048 }, { 6, 1802, 2048 }, { 7, 1803, 2048 }, { 6, 1804, 2048 }, { 7, 1805, 2048 }, { 7, 1806, 2048 }, { 8, 1807, 2048 },
wolfSSL 15:117db924cf7c 7531 { 5, 1808, 2048 }, { 6, 1809, 2048 }, { 6, 1810, 2048 }, { 7, 1811, 2048 }, { 6, 1812, 2048 }, { 7, 1813, 2048 }, { 7, 1814, 2048 }, { 8, 1815, 2048 },
wolfSSL 15:117db924cf7c 7532 { 6, 1816, 2048 }, { 7, 1817, 2048 }, { 7, 1818, 2048 }, { 8, 1819, 2048 }, { 7, 1820, 2048 }, { 8, 1821, 2048 }, { 8, 1822, 2048 }, { 9, 1823, 2048 },
wolfSSL 15:117db924cf7c 7533 { 5, 1824, 2048 }, { 6, 1825, 2048 }, { 6, 1826, 2048 }, { 7, 1827, 2048 }, { 6, 1828, 2048 }, { 7, 1829, 2048 }, { 7, 1830, 2048 }, { 8, 1831, 2048 },
wolfSSL 15:117db924cf7c 7534 { 6, 1832, 2048 }, { 7, 1833, 2048 }, { 7, 1834, 2048 }, { 8, 1835, 2048 }, { 7, 1836, 2048 }, { 8, 1837, 2048 }, { 8, 1838, 2048 }, { 9, 1839, 2048 },
wolfSSL 15:117db924cf7c 7535 { 6, 1840, 2048 }, { 7, 1841, 2048 }, { 7, 1842, 2048 }, { 8, 1843, 2048 }, { 7, 1844, 2048 }, { 8, 1845, 2048 }, { 8, 1846, 2048 }, { 9, 1847, 2048 },
wolfSSL 15:117db924cf7c 7536 { 7, 1848, 2048 }, { 8, 1849, 2048 }, { 8, 1850, 2048 }, { 9, 1851, 2048 }, { 8, 1852, 2048 }, { 9, 1853, 2048 }, { 9, 1854, 2048 }, { 10, 1855, 2048 },
wolfSSL 15:117db924cf7c 7537 { 5, 1856, 2048 }, { 6, 1857, 2048 }, { 6, 1858, 2048 }, { 7, 1859, 2048 }, { 6, 1860, 2048 }, { 7, 1861, 2048 }, { 7, 1862, 2048 }, { 8, 1863, 2048 },
wolfSSL 15:117db924cf7c 7538 { 6, 1864, 2048 }, { 7, 1865, 2048 }, { 7, 1866, 2048 }, { 8, 1867, 2048 }, { 7, 1868, 2048 }, { 8, 1869, 2048 }, { 8, 1870, 2048 }, { 9, 1871, 2048 },
wolfSSL 15:117db924cf7c 7539 { 6, 1872, 2048 }, { 7, 1873, 2048 }, { 7, 1874, 2048 }, { 8, 1875, 2048 }, { 7, 1876, 2048 }, { 8, 1877, 2048 }, { 8, 1878, 2048 }, { 9, 1879, 2048 },
wolfSSL 15:117db924cf7c 7540 { 7, 1880, 2048 }, { 8, 1881, 2048 }, { 8, 1882, 2048 }, { 9, 1883, 2048 }, { 8, 1884, 2048 }, { 9, 1885, 2048 }, { 9, 1886, 2048 }, { 10, 1887, 2048 },
wolfSSL 15:117db924cf7c 7541 { 6, 1888, 2048 }, { 7, 1889, 2048 }, { 7, 1890, 2048 }, { 8, 1891, 2048 }, { 7, 1892, 2048 }, { 8, 1893, 2048 }, { 8, 1894, 2048 }, { 9, 1895, 2048 },
wolfSSL 15:117db924cf7c 7542 { 7, 1896, 2048 }, { 8, 1897, 2048 }, { 8, 1898, 2048 }, { 9, 1899, 2048 }, { 8, 1900, 2048 }, { 9, 1901, 2048 }, { 9, 1902, 2048 }, { 10, 1903, 2048 },
wolfSSL 15:117db924cf7c 7543 { 7, 1904, 2048 }, { 8, 1905, 2048 }, { 8, 1906, 2048 }, { 9, 1907, 2048 }, { 8, 1908, 2048 }, { 9, 1909, 2048 }, { 9, 1910, 2048 }, { 10, 1911, 2048 },
wolfSSL 15:117db924cf7c 7544 { 8, 1912, 2048 }, { 9, 1913, 2048 }, { 9, 1914, 2048 }, { 10, 1915, 2048 }, { 9, 1916, 2048 }, { 10, 1917, 2048 }, { 10, 1918, 2048 }, { 11, 1919, 2048 },
wolfSSL 15:117db924cf7c 7545 { 5, 1920, 2048 }, { 6, 1921, 2048 }, { 6, 1922, 2048 }, { 7, 1923, 2048 }, { 6, 1924, 2048 }, { 7, 1925, 2048 }, { 7, 1926, 2048 }, { 8, 1927, 2048 },
wolfSSL 15:117db924cf7c 7546 { 6, 1928, 2048 }, { 7, 1929, 2048 }, { 7, 1930, 2048 }, { 8, 1931, 2048 }, { 7, 1932, 2048 }, { 8, 1933, 2048 }, { 8, 1934, 2048 }, { 9, 1935, 2048 },
wolfSSL 15:117db924cf7c 7547 { 6, 1936, 2048 }, { 7, 1937, 2048 }, { 7, 1938, 2048 }, { 8, 1939, 2048 }, { 7, 1940, 2048 }, { 8, 1941, 2048 }, { 8, 1942, 2048 }, { 9, 1943, 2048 },
wolfSSL 15:117db924cf7c 7548 { 7, 1944, 2048 }, { 8, 1945, 2048 }, { 8, 1946, 2048 }, { 9, 1947, 2048 }, { 8, 1948, 2048 }, { 9, 1949, 2048 }, { 9, 1950, 2048 }, { 10, 1951, 2048 },
wolfSSL 15:117db924cf7c 7549 { 6, 1952, 2048 }, { 7, 1953, 2048 }, { 7, 1954, 2048 }, { 8, 1955, 2048 }, { 7, 1956, 2048 }, { 8, 1957, 2048 }, { 8, 1958, 2048 }, { 9, 1959, 2048 },
wolfSSL 15:117db924cf7c 7550 { 7, 1960, 2048 }, { 8, 1961, 2048 }, { 8, 1962, 2048 }, { 9, 1963, 2048 }, { 8, 1964, 2048 }, { 9, 1965, 2048 }, { 9, 1966, 2048 }, { 10, 1967, 2048 },
wolfSSL 15:117db924cf7c 7551 { 7, 1968, 2048 }, { 8, 1969, 2048 }, { 8, 1970, 2048 }, { 9, 1971, 2048 }, { 8, 1972, 2048 }, { 9, 1973, 2048 }, { 9, 1974, 2048 }, { 10, 1975, 2048 },
wolfSSL 15:117db924cf7c 7552 { 8, 1976, 2048 }, { 9, 1977, 2048 }, { 9, 1978, 2048 }, { 10, 1979, 2048 }, { 9, 1980, 2048 }, { 10, 1981, 2048 }, { 10, 1982, 2048 }, { 11, 1983, 2048 },
wolfSSL 15:117db924cf7c 7553 { 6, 1984, 2048 }, { 7, 1985, 2048 }, { 7, 1986, 2048 }, { 8, 1987, 2048 }, { 7, 1988, 2048 }, { 8, 1989, 2048 }, { 8, 1990, 2048 }, { 9, 1991, 2048 },
wolfSSL 15:117db924cf7c 7554 { 7, 1992, 2048 }, { 8, 1993, 2048 }, { 8, 1994, 2048 }, { 9, 1995, 2048 }, { 8, 1996, 2048 }, { 9, 1997, 2048 }, { 9, 1998, 2048 }, { 10, 1999, 2048 },
wolfSSL 15:117db924cf7c 7555 { 7, 2000, 2048 }, { 8, 2001, 2048 }, { 8, 2002, 2048 }, { 9, 2003, 2048 }, { 8, 2004, 2048 }, { 9, 2005, 2048 }, { 9, 2006, 2048 }, { 10, 2007, 2048 },
wolfSSL 15:117db924cf7c 7556 { 8, 2008, 2048 }, { 9, 2009, 2048 }, { 9, 2010, 2048 }, { 10, 2011, 2048 }, { 9, 2012, 2048 }, { 10, 2013, 2048 }, { 10, 2014, 2048 }, { 11, 2015, 2048 },
wolfSSL 15:117db924cf7c 7557 { 7, 2016, 2048 }, { 8, 2017, 2048 }, { 8, 2018, 2048 }, { 9, 2019, 2048 }, { 8, 2020, 2048 }, { 9, 2021, 2048 }, { 9, 2022, 2048 }, { 10, 2023, 2048 },
wolfSSL 15:117db924cf7c 7558 { 8, 2024, 2048 }, { 9, 2025, 2048 }, { 9, 2026, 2048 }, { 10, 2027, 2048 }, { 9, 2028, 2048 }, { 10, 2029, 2048 }, { 10, 2030, 2048 }, { 11, 2031, 2048 },
wolfSSL 15:117db924cf7c 7559 { 8, 2032, 2048 }, { 9, 2033, 2048 }, { 9, 2034, 2048 }, { 10, 2035, 2048 }, { 9, 2036, 2048 }, { 10, 2037, 2048 }, { 10, 2038, 2048 }, { 11, 2039, 2048 },
wolfSSL 15:117db924cf7c 7560 { 9, 2040, 2048 }, { 10, 2041, 2048 }, { 10, 2042, 2048 }, { 11, 2043, 2048 }, { 10, 2044, 2048 }, { 11, 2045, 2048 }, { 11, 2046, 2048 }, { 12, 2047, 2048 },
wolfSSL 15:117db924cf7c 7561 #endif
wolfSSL 15:117db924cf7c 7562 #endif
wolfSSL 15:117db924cf7c 7563 #endif
wolfSSL 15:117db924cf7c 7564 #endif
wolfSSL 15:117db924cf7c 7565 #endif
wolfSSL 15:117db924cf7c 7566 #endif
wolfSSL 15:117db924cf7c 7567 };
wolfSSL 15:117db924cf7c 7568
wolfSSL 15:117db924cf7c 7569
wolfSSL 15:117db924cf7c 7570 /* find a hole and free as required, return -1 if no hole found */
wolfSSL 15:117db924cf7c 7571 static int find_hole(void)
wolfSSL 15:117db924cf7c 7572 {
wolfSSL 15:117db924cf7c 7573 unsigned x;
wolfSSL 15:117db924cf7c 7574 int y, z;
wolfSSL 15:117db924cf7c 7575 for (z = -1, y = INT_MAX, x = 0; x < FP_ENTRIES; x++) {
wolfSSL 15:117db924cf7c 7576 if (fp_cache[x].lru_count < y && fp_cache[x].lock == 0) {
wolfSSL 15:117db924cf7c 7577 z = x;
wolfSSL 15:117db924cf7c 7578 y = fp_cache[x].lru_count;
wolfSSL 15:117db924cf7c 7579 }
wolfSSL 15:117db924cf7c 7580 }
wolfSSL 15:117db924cf7c 7581
wolfSSL 15:117db924cf7c 7582 /* decrease all */
wolfSSL 15:117db924cf7c 7583 for (x = 0; x < FP_ENTRIES; x++) {
wolfSSL 15:117db924cf7c 7584 if (fp_cache[x].lru_count > 3) {
wolfSSL 15:117db924cf7c 7585 --(fp_cache[x].lru_count);
wolfSSL 15:117db924cf7c 7586 }
wolfSSL 15:117db924cf7c 7587 }
wolfSSL 15:117db924cf7c 7588
wolfSSL 15:117db924cf7c 7589 /* free entry z */
wolfSSL 15:117db924cf7c 7590 if (z >= 0 && fp_cache[z].g) {
wolfSSL 15:117db924cf7c 7591 mp_clear(&fp_cache[z].mu);
wolfSSL 15:117db924cf7c 7592 wc_ecc_del_point(fp_cache[z].g);
wolfSSL 15:117db924cf7c 7593 fp_cache[z].g = NULL;
wolfSSL 15:117db924cf7c 7594 for (x = 0; x < (1U<<FP_LUT); x++) {
wolfSSL 15:117db924cf7c 7595 wc_ecc_del_point(fp_cache[z].LUT[x]);
wolfSSL 15:117db924cf7c 7596 fp_cache[z].LUT[x] = NULL;
wolfSSL 15:117db924cf7c 7597 }
wolfSSL 15:117db924cf7c 7598 fp_cache[z].lru_count = 0;
wolfSSL 15:117db924cf7c 7599 }
wolfSSL 15:117db924cf7c 7600 return z;
wolfSSL 15:117db924cf7c 7601 }
wolfSSL 15:117db924cf7c 7602
wolfSSL 15:117db924cf7c 7603 /* determine if a base is already in the cache and if so, where */
wolfSSL 15:117db924cf7c 7604 static int find_base(ecc_point* g)
wolfSSL 15:117db924cf7c 7605 {
wolfSSL 15:117db924cf7c 7606 int x;
wolfSSL 15:117db924cf7c 7607 for (x = 0; x < FP_ENTRIES; x++) {
wolfSSL 15:117db924cf7c 7608 if (fp_cache[x].g != NULL &&
wolfSSL 15:117db924cf7c 7609 mp_cmp(fp_cache[x].g->x, g->x) == MP_EQ &&
wolfSSL 15:117db924cf7c 7610 mp_cmp(fp_cache[x].g->y, g->y) == MP_EQ &&
wolfSSL 15:117db924cf7c 7611 mp_cmp(fp_cache[x].g->z, g->z) == MP_EQ) {
wolfSSL 15:117db924cf7c 7612 break;
wolfSSL 15:117db924cf7c 7613 }
wolfSSL 15:117db924cf7c 7614 }
wolfSSL 15:117db924cf7c 7615 if (x == FP_ENTRIES) {
wolfSSL 15:117db924cf7c 7616 x = -1;
wolfSSL 15:117db924cf7c 7617 }
wolfSSL 15:117db924cf7c 7618 return x;
wolfSSL 15:117db924cf7c 7619 }
wolfSSL 15:117db924cf7c 7620
wolfSSL 15:117db924cf7c 7621 /* add a new base to the cache */
wolfSSL 15:117db924cf7c 7622 static int add_entry(int idx, ecc_point *g)
wolfSSL 15:117db924cf7c 7623 {
wolfSSL 15:117db924cf7c 7624 unsigned x, y;
wolfSSL 15:117db924cf7c 7625
wolfSSL 15:117db924cf7c 7626 /* allocate base and LUT */
wolfSSL 15:117db924cf7c 7627 fp_cache[idx].g = wc_ecc_new_point();
wolfSSL 15:117db924cf7c 7628 if (fp_cache[idx].g == NULL) {
wolfSSL 15:117db924cf7c 7629 return GEN_MEM_ERR;
wolfSSL 15:117db924cf7c 7630 }
wolfSSL 15:117db924cf7c 7631
wolfSSL 15:117db924cf7c 7632 /* copy x and y */
wolfSSL 15:117db924cf7c 7633 if ((mp_copy(g->x, fp_cache[idx].g->x) != MP_OKAY) ||
wolfSSL 15:117db924cf7c 7634 (mp_copy(g->y, fp_cache[idx].g->y) != MP_OKAY) ||
wolfSSL 15:117db924cf7c 7635 (mp_copy(g->z, fp_cache[idx].g->z) != MP_OKAY)) {
wolfSSL 15:117db924cf7c 7636 wc_ecc_del_point(fp_cache[idx].g);
wolfSSL 15:117db924cf7c 7637 fp_cache[idx].g = NULL;
wolfSSL 15:117db924cf7c 7638 return GEN_MEM_ERR;
wolfSSL 15:117db924cf7c 7639 }
wolfSSL 15:117db924cf7c 7640
wolfSSL 15:117db924cf7c 7641 for (x = 0; x < (1U<<FP_LUT); x++) {
wolfSSL 15:117db924cf7c 7642 fp_cache[idx].LUT[x] = wc_ecc_new_point();
wolfSSL 15:117db924cf7c 7643 if (fp_cache[idx].LUT[x] == NULL) {
wolfSSL 15:117db924cf7c 7644 for (y = 0; y < x; y++) {
wolfSSL 15:117db924cf7c 7645 wc_ecc_del_point(fp_cache[idx].LUT[y]);
wolfSSL 15:117db924cf7c 7646 fp_cache[idx].LUT[y] = NULL;
wolfSSL 15:117db924cf7c 7647 }
wolfSSL 15:117db924cf7c 7648 wc_ecc_del_point(fp_cache[idx].g);
wolfSSL 15:117db924cf7c 7649 fp_cache[idx].g = NULL;
wolfSSL 15:117db924cf7c 7650 fp_cache[idx].lru_count = 0;
wolfSSL 15:117db924cf7c 7651 return GEN_MEM_ERR;
wolfSSL 15:117db924cf7c 7652 }
wolfSSL 15:117db924cf7c 7653 }
wolfSSL 15:117db924cf7c 7654
wolfSSL 15:117db924cf7c 7655 fp_cache[idx].lru_count = 0;
wolfSSL 15:117db924cf7c 7656
wolfSSL 15:117db924cf7c 7657 return MP_OKAY;
wolfSSL 15:117db924cf7c 7658 }
wolfSSL 15:117db924cf7c 7659 #endif
wolfSSL 15:117db924cf7c 7660
wolfSSL 15:117db924cf7c 7661 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 7662 /* build the LUT by spacing the bits of the input by #modulus/FP_LUT bits apart
wolfSSL 15:117db924cf7c 7663 *
wolfSSL 15:117db924cf7c 7664 * The algorithm builds patterns in increasing bit order by first making all
wolfSSL 15:117db924cf7c 7665 * single bit input patterns, then all two bit input patterns and so on
wolfSSL 15:117db924cf7c 7666 */
wolfSSL 15:117db924cf7c 7667 static int build_lut(int idx, mp_int* a, mp_int* modulus, mp_digit mp,
wolfSSL 15:117db924cf7c 7668 mp_int* mu)
wolfSSL 15:117db924cf7c 7669 {
wolfSSL 15:117db924cf7c 7670 int err;
wolfSSL 15:117db924cf7c 7671 unsigned x, y, bitlen, lut_gap;
wolfSSL 15:117db924cf7c 7672 mp_int tmp;
wolfSSL 15:117db924cf7c 7673
wolfSSL 15:117db924cf7c 7674 if (mp_init(&tmp) != MP_OKAY)
wolfSSL 15:117db924cf7c 7675 return GEN_MEM_ERR;
wolfSSL 15:117db924cf7c 7676
wolfSSL 15:117db924cf7c 7677 /* sanity check to make sure lut_order table is of correct size,
wolfSSL 15:117db924cf7c 7678 should compile out to a NOP if true */
wolfSSL 15:117db924cf7c 7679 if ((sizeof(lut_orders) / sizeof(lut_orders[0])) < (1U<<FP_LUT)) {
wolfSSL 15:117db924cf7c 7680 err = BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 7681 }
wolfSSL 15:117db924cf7c 7682 else {
wolfSSL 15:117db924cf7c 7683 /* get bitlen and round up to next multiple of FP_LUT */
wolfSSL 15:117db924cf7c 7684 bitlen = mp_unsigned_bin_size(modulus) << 3;
wolfSSL 15:117db924cf7c 7685 x = bitlen % FP_LUT;
wolfSSL 15:117db924cf7c 7686 if (x) {
wolfSSL 15:117db924cf7c 7687 bitlen += FP_LUT - x;
wolfSSL 15:117db924cf7c 7688 }
wolfSSL 15:117db924cf7c 7689 lut_gap = bitlen / FP_LUT;
wolfSSL 15:117db924cf7c 7690
wolfSSL 15:117db924cf7c 7691 /* init the mu */
wolfSSL 15:117db924cf7c 7692 err = mp_init_copy(&fp_cache[idx].mu, mu);
wolfSSL 15:117db924cf7c 7693 }
wolfSSL 15:117db924cf7c 7694
wolfSSL 15:117db924cf7c 7695 /* copy base */
wolfSSL 15:117db924cf7c 7696 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 7697 if ((mp_mulmod(fp_cache[idx].g->x, mu, modulus,
wolfSSL 15:117db924cf7c 7698 fp_cache[idx].LUT[1]->x) != MP_OKAY) ||
wolfSSL 15:117db924cf7c 7699 (mp_mulmod(fp_cache[idx].g->y, mu, modulus,
wolfSSL 15:117db924cf7c 7700 fp_cache[idx].LUT[1]->y) != MP_OKAY) ||
wolfSSL 15:117db924cf7c 7701 (mp_mulmod(fp_cache[idx].g->z, mu, modulus,
wolfSSL 15:117db924cf7c 7702 fp_cache[idx].LUT[1]->z) != MP_OKAY)) {
wolfSSL 15:117db924cf7c 7703 err = MP_MULMOD_E;
wolfSSL 15:117db924cf7c 7704 }
wolfSSL 15:117db924cf7c 7705 }
wolfSSL 15:117db924cf7c 7706
wolfSSL 15:117db924cf7c 7707 /* make all single bit entries */
wolfSSL 15:117db924cf7c 7708 for (x = 1; x < FP_LUT; x++) {
wolfSSL 15:117db924cf7c 7709 if (err != MP_OKAY)
wolfSSL 15:117db924cf7c 7710 break;
wolfSSL 15:117db924cf7c 7711 if ((mp_copy(fp_cache[idx].LUT[1<<(x-1)]->x,
wolfSSL 15:117db924cf7c 7712 fp_cache[idx].LUT[1<<x]->x) != MP_OKAY) ||
wolfSSL 15:117db924cf7c 7713 (mp_copy(fp_cache[idx].LUT[1<<(x-1)]->y,
wolfSSL 15:117db924cf7c 7714 fp_cache[idx].LUT[1<<x]->y) != MP_OKAY) ||
wolfSSL 15:117db924cf7c 7715 (mp_copy(fp_cache[idx].LUT[1<<(x-1)]->z,
wolfSSL 15:117db924cf7c 7716 fp_cache[idx].LUT[1<<x]->z) != MP_OKAY)){
wolfSSL 15:117db924cf7c 7717 err = MP_INIT_E;
wolfSSL 15:117db924cf7c 7718 break;
wolfSSL 15:117db924cf7c 7719 } else {
wolfSSL 15:117db924cf7c 7720
wolfSSL 15:117db924cf7c 7721 /* now double it bitlen/FP_LUT times */
wolfSSL 15:117db924cf7c 7722 for (y = 0; y < lut_gap; y++) {
wolfSSL 15:117db924cf7c 7723 if ((err = ecc_projective_dbl_point(fp_cache[idx].LUT[1<<x],
wolfSSL 15:117db924cf7c 7724 fp_cache[idx].LUT[1<<x], a, modulus, mp)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 7725 break;
wolfSSL 15:117db924cf7c 7726 }
wolfSSL 15:117db924cf7c 7727 }
wolfSSL 15:117db924cf7c 7728 }
wolfSSL 15:117db924cf7c 7729 }
wolfSSL 15:117db924cf7c 7730
wolfSSL 15:117db924cf7c 7731 /* now make all entries in increase order of hamming weight */
wolfSSL 15:117db924cf7c 7732 for (x = 2; x <= FP_LUT; x++) {
wolfSSL 15:117db924cf7c 7733 if (err != MP_OKAY)
wolfSSL 15:117db924cf7c 7734 break;
wolfSSL 15:117db924cf7c 7735 for (y = 0; y < (1UL<<FP_LUT); y++) {
wolfSSL 15:117db924cf7c 7736 if (lut_orders[y].ham != (int)x) continue;
wolfSSL 15:117db924cf7c 7737
wolfSSL 15:117db924cf7c 7738 /* perform the add */
wolfSSL 15:117db924cf7c 7739 if ((err = ecc_projective_add_point(
wolfSSL 15:117db924cf7c 7740 fp_cache[idx].LUT[lut_orders[y].terma],
wolfSSL 15:117db924cf7c 7741 fp_cache[idx].LUT[lut_orders[y].termb],
wolfSSL 15:117db924cf7c 7742 fp_cache[idx].LUT[y], a, modulus, mp)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 7743 break;
wolfSSL 15:117db924cf7c 7744 }
wolfSSL 15:117db924cf7c 7745 }
wolfSSL 15:117db924cf7c 7746 }
wolfSSL 15:117db924cf7c 7747
wolfSSL 15:117db924cf7c 7748 /* now map all entries back to affine space to make point addition faster */
wolfSSL 15:117db924cf7c 7749 for (x = 1; x < (1UL<<FP_LUT); x++) {
wolfSSL 15:117db924cf7c 7750 if (err != MP_OKAY)
wolfSSL 15:117db924cf7c 7751 break;
wolfSSL 15:117db924cf7c 7752
wolfSSL 15:117db924cf7c 7753 /* convert z to normal from montgomery */
wolfSSL 15:117db924cf7c 7754 err = mp_montgomery_reduce(fp_cache[idx].LUT[x]->z, modulus, mp);
wolfSSL 15:117db924cf7c 7755
wolfSSL 15:117db924cf7c 7756 /* invert it */
wolfSSL 15:117db924cf7c 7757 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 7758 err = mp_invmod(fp_cache[idx].LUT[x]->z, modulus,
wolfSSL 15:117db924cf7c 7759 fp_cache[idx].LUT[x]->z);
wolfSSL 15:117db924cf7c 7760
wolfSSL 15:117db924cf7c 7761 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 7762 /* now square it */
wolfSSL 15:117db924cf7c 7763 err = mp_sqrmod(fp_cache[idx].LUT[x]->z, modulus, &tmp);
wolfSSL 15:117db924cf7c 7764
wolfSSL 15:117db924cf7c 7765 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 7766 /* fix x */
wolfSSL 15:117db924cf7c 7767 err = mp_mulmod(fp_cache[idx].LUT[x]->x, &tmp, modulus,
wolfSSL 15:117db924cf7c 7768 fp_cache[idx].LUT[x]->x);
wolfSSL 15:117db924cf7c 7769
wolfSSL 15:117db924cf7c 7770 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 7771 /* get 1/z^3 */
wolfSSL 15:117db924cf7c 7772 err = mp_mulmod(&tmp, fp_cache[idx].LUT[x]->z, modulus, &tmp);
wolfSSL 15:117db924cf7c 7773
wolfSSL 15:117db924cf7c 7774 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 7775 /* fix y */
wolfSSL 15:117db924cf7c 7776 err = mp_mulmod(fp_cache[idx].LUT[x]->y, &tmp, modulus,
wolfSSL 15:117db924cf7c 7777 fp_cache[idx].LUT[x]->y);
wolfSSL 15:117db924cf7c 7778
wolfSSL 15:117db924cf7c 7779 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 7780 /* free z */
wolfSSL 15:117db924cf7c 7781 mp_clear(fp_cache[idx].LUT[x]->z);
wolfSSL 15:117db924cf7c 7782 }
wolfSSL 15:117db924cf7c 7783
wolfSSL 15:117db924cf7c 7784 mp_clear(&tmp);
wolfSSL 15:117db924cf7c 7785
wolfSSL 15:117db924cf7c 7786 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 7787 return MP_OKAY;
wolfSSL 15:117db924cf7c 7788
wolfSSL 15:117db924cf7c 7789 /* err cleanup */
wolfSSL 15:117db924cf7c 7790 for (y = 0; y < (1U<<FP_LUT); y++) {
wolfSSL 15:117db924cf7c 7791 wc_ecc_del_point(fp_cache[idx].LUT[y]);
wolfSSL 15:117db924cf7c 7792 fp_cache[idx].LUT[y] = NULL;
wolfSSL 15:117db924cf7c 7793 }
wolfSSL 15:117db924cf7c 7794 wc_ecc_del_point(fp_cache[idx].g);
wolfSSL 15:117db924cf7c 7795 fp_cache[idx].g = NULL;
wolfSSL 15:117db924cf7c 7796 fp_cache[idx].lru_count = 0;
wolfSSL 15:117db924cf7c 7797 mp_clear(&fp_cache[idx].mu);
wolfSSL 15:117db924cf7c 7798
wolfSSL 15:117db924cf7c 7799 return err;
wolfSSL 15:117db924cf7c 7800 }
wolfSSL 15:117db924cf7c 7801
wolfSSL 15:117db924cf7c 7802 /* perform a fixed point ECC mulmod */
wolfSSL 15:117db924cf7c 7803 static int accel_fp_mul(int idx, mp_int* k, ecc_point *R, mp_int* a,
wolfSSL 15:117db924cf7c 7804 mp_int* modulus, mp_digit mp, int map)
wolfSSL 15:117db924cf7c 7805 {
wolfSSL 15:117db924cf7c 7806 #define KB_SIZE 128
wolfSSL 15:117db924cf7c 7807
wolfSSL 15:117db924cf7c 7808 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 7809 unsigned char* kb = NULL;
wolfSSL 15:117db924cf7c 7810 #else
wolfSSL 15:117db924cf7c 7811 unsigned char kb[KB_SIZE];
wolfSSL 15:117db924cf7c 7812 #endif
wolfSSL 15:117db924cf7c 7813 int x, err;
wolfSSL 15:117db924cf7c 7814 unsigned y, z = 0, bitlen, bitpos, lut_gap, first;
wolfSSL 15:117db924cf7c 7815 mp_int tk, order;
wolfSSL 15:117db924cf7c 7816
wolfSSL 15:117db924cf7c 7817 if (mp_init_multi(&tk, &order, NULL, NULL, NULL, NULL) != MP_OKAY)
wolfSSL 15:117db924cf7c 7818 return MP_INIT_E;
wolfSSL 15:117db924cf7c 7819
wolfSSL 15:117db924cf7c 7820 /* if it's smaller than modulus we fine */
wolfSSL 15:117db924cf7c 7821 if (mp_unsigned_bin_size(k) > mp_unsigned_bin_size(modulus)) {
wolfSSL 15:117db924cf7c 7822 /* find order */
wolfSSL 15:117db924cf7c 7823 y = mp_unsigned_bin_size(modulus);
wolfSSL 15:117db924cf7c 7824 for (x = 0; ecc_sets[x].size; x++) {
wolfSSL 15:117db924cf7c 7825 if (y <= (unsigned)ecc_sets[x].size) break;
wolfSSL 15:117db924cf7c 7826 }
wolfSSL 15:117db924cf7c 7827
wolfSSL 15:117db924cf7c 7828 /* back off if we are on the 521 bit curve */
wolfSSL 15:117db924cf7c 7829 if (y == 66) --x;
wolfSSL 15:117db924cf7c 7830
wolfSSL 15:117db924cf7c 7831 if ((err = mp_read_radix(&order, ecc_sets[x].order,
wolfSSL 15:117db924cf7c 7832 MP_RADIX_HEX)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 7833 goto done;
wolfSSL 15:117db924cf7c 7834 }
wolfSSL 15:117db924cf7c 7835
wolfSSL 15:117db924cf7c 7836 /* k must be less than modulus */
wolfSSL 15:117db924cf7c 7837 if (mp_cmp(k, &order) != MP_LT) {
wolfSSL 15:117db924cf7c 7838 if ((err = mp_mod(k, &order, &tk)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 7839 goto done;
wolfSSL 15:117db924cf7c 7840 }
wolfSSL 15:117db924cf7c 7841 } else {
wolfSSL 15:117db924cf7c 7842 if ((err = mp_copy(k, &tk)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 7843 goto done;
wolfSSL 15:117db924cf7c 7844 }
wolfSSL 15:117db924cf7c 7845 }
wolfSSL 15:117db924cf7c 7846 } else {
wolfSSL 15:117db924cf7c 7847 if ((err = mp_copy(k, &tk)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 7848 goto done;
wolfSSL 15:117db924cf7c 7849 }
wolfSSL 15:117db924cf7c 7850 }
wolfSSL 15:117db924cf7c 7851
wolfSSL 15:117db924cf7c 7852 /* get bitlen and round up to next multiple of FP_LUT */
wolfSSL 15:117db924cf7c 7853 bitlen = mp_unsigned_bin_size(modulus) << 3;
wolfSSL 15:117db924cf7c 7854 x = bitlen % FP_LUT;
wolfSSL 15:117db924cf7c 7855 if (x) {
wolfSSL 15:117db924cf7c 7856 bitlen += FP_LUT - x;
wolfSSL 15:117db924cf7c 7857 }
wolfSSL 15:117db924cf7c 7858 lut_gap = bitlen / FP_LUT;
wolfSSL 15:117db924cf7c 7859
wolfSSL 15:117db924cf7c 7860 /* get the k value */
wolfSSL 15:117db924cf7c 7861 if (mp_unsigned_bin_size(&tk) > (int)(KB_SIZE - 2)) {
wolfSSL 15:117db924cf7c 7862 err = BUFFER_E; goto done;
wolfSSL 15:117db924cf7c 7863 }
wolfSSL 15:117db924cf7c 7864
wolfSSL 15:117db924cf7c 7865 /* store k */
wolfSSL 15:117db924cf7c 7866 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 7867 kb = (unsigned char*)XMALLOC(KB_SIZE, NULL, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 7868 if (kb == NULL) {
wolfSSL 15:117db924cf7c 7869 err = MEMORY_E; goto done;
wolfSSL 15:117db924cf7c 7870 }
wolfSSL 15:117db924cf7c 7871 #endif
wolfSSL 15:117db924cf7c 7872
wolfSSL 15:117db924cf7c 7873 XMEMSET(kb, 0, KB_SIZE);
wolfSSL 15:117db924cf7c 7874 if ((err = mp_to_unsigned_bin(&tk, kb)) == MP_OKAY) {
wolfSSL 15:117db924cf7c 7875 /* let's reverse kb so it's little endian */
wolfSSL 15:117db924cf7c 7876 x = 0;
wolfSSL 15:117db924cf7c 7877 y = mp_unsigned_bin_size(&tk);
wolfSSL 15:117db924cf7c 7878 if (y > 0) {
wolfSSL 15:117db924cf7c 7879 y -= 1;
wolfSSL 15:117db924cf7c 7880 }
wolfSSL 15:117db924cf7c 7881
wolfSSL 15:117db924cf7c 7882 while ((unsigned)x < y) {
wolfSSL 15:117db924cf7c 7883 z = kb[x]; kb[x] = kb[y]; kb[y] = (byte)z;
wolfSSL 15:117db924cf7c 7884 ++x; --y;
wolfSSL 15:117db924cf7c 7885 }
wolfSSL 15:117db924cf7c 7886
wolfSSL 15:117db924cf7c 7887 /* at this point we can start, yipee */
wolfSSL 15:117db924cf7c 7888 first = 1;
wolfSSL 15:117db924cf7c 7889 for (x = lut_gap-1; x >= 0; x--) {
wolfSSL 15:117db924cf7c 7890 /* extract FP_LUT bits from kb spread out by lut_gap bits and offset
wolfSSL 15:117db924cf7c 7891 by x bits from the start */
wolfSSL 15:117db924cf7c 7892 bitpos = x;
wolfSSL 15:117db924cf7c 7893 for (y = z = 0; y < FP_LUT; y++) {
wolfSSL 15:117db924cf7c 7894 z |= ((kb[bitpos>>3] >> (bitpos&7)) & 1) << y;
wolfSSL 15:117db924cf7c 7895 bitpos += lut_gap; /* it's y*lut_gap + x, but here we can avoid
wolfSSL 15:117db924cf7c 7896 the mult in each loop */
wolfSSL 15:117db924cf7c 7897 }
wolfSSL 15:117db924cf7c 7898
wolfSSL 15:117db924cf7c 7899 /* double if not first */
wolfSSL 15:117db924cf7c 7900 if (!first) {
wolfSSL 15:117db924cf7c 7901 if ((err = ecc_projective_dbl_point(R, R, a, modulus,
wolfSSL 15:117db924cf7c 7902 mp)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 7903 break;
wolfSSL 15:117db924cf7c 7904 }
wolfSSL 15:117db924cf7c 7905 }
wolfSSL 15:117db924cf7c 7906
wolfSSL 15:117db924cf7c 7907 /* add if not first, otherwise copy */
wolfSSL 15:117db924cf7c 7908 if (!first && z) {
wolfSSL 15:117db924cf7c 7909 if ((err = ecc_projective_add_point(R, fp_cache[idx].LUT[z], R,
wolfSSL 15:117db924cf7c 7910 a, modulus, mp)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 7911 break;
wolfSSL 15:117db924cf7c 7912 }
wolfSSL 15:117db924cf7c 7913 } else if (z) {
wolfSSL 15:117db924cf7c 7914 if ((mp_copy(fp_cache[idx].LUT[z]->x, R->x) != MP_OKAY) ||
wolfSSL 15:117db924cf7c 7915 (mp_copy(fp_cache[idx].LUT[z]->y, R->y) != MP_OKAY) ||
wolfSSL 15:117db924cf7c 7916 (mp_copy(&fp_cache[idx].mu, R->z) != MP_OKAY)) {
wolfSSL 15:117db924cf7c 7917 err = GEN_MEM_ERR;
wolfSSL 15:117db924cf7c 7918 break;
wolfSSL 15:117db924cf7c 7919 }
wolfSSL 15:117db924cf7c 7920 first = 0;
wolfSSL 15:117db924cf7c 7921 }
wolfSSL 15:117db924cf7c 7922 }
wolfSSL 15:117db924cf7c 7923 }
wolfSSL 15:117db924cf7c 7924
wolfSSL 15:117db924cf7c 7925 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 7926 (void) z; /* Acknowledge the unused assignment */
wolfSSL 15:117db924cf7c 7927 ForceZero(kb, KB_SIZE);
wolfSSL 15:117db924cf7c 7928
wolfSSL 15:117db924cf7c 7929 /* map R back from projective space */
wolfSSL 15:117db924cf7c 7930 if (map) {
wolfSSL 15:117db924cf7c 7931 err = ecc_map(R, modulus, mp);
wolfSSL 15:117db924cf7c 7932 } else {
wolfSSL 15:117db924cf7c 7933 err = MP_OKAY;
wolfSSL 15:117db924cf7c 7934 }
wolfSSL 15:117db924cf7c 7935 }
wolfSSL 15:117db924cf7c 7936
wolfSSL 15:117db924cf7c 7937 done:
wolfSSL 15:117db924cf7c 7938 /* cleanup */
wolfSSL 15:117db924cf7c 7939 mp_clear(&order);
wolfSSL 15:117db924cf7c 7940 mp_clear(&tk);
wolfSSL 15:117db924cf7c 7941
wolfSSL 15:117db924cf7c 7942 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 7943 XFREE(kb, NULL, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 7944 #endif
wolfSSL 15:117db924cf7c 7945
wolfSSL 15:117db924cf7c 7946 #undef KB_SIZE
wolfSSL 15:117db924cf7c 7947
wolfSSL 15:117db924cf7c 7948 return err;
wolfSSL 15:117db924cf7c 7949 }
wolfSSL 15:117db924cf7c 7950 #endif
wolfSSL 15:117db924cf7c 7951
wolfSSL 15:117db924cf7c 7952 #ifdef ECC_SHAMIR
wolfSSL 15:117db924cf7c 7953 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 7954 /* perform a fixed point ECC mulmod */
wolfSSL 15:117db924cf7c 7955 static int accel_fp_mul2add(int idx1, int idx2,
wolfSSL 15:117db924cf7c 7956 mp_int* kA, mp_int* kB,
wolfSSL 15:117db924cf7c 7957 ecc_point *R, mp_int* a,
wolfSSL 15:117db924cf7c 7958 mp_int* modulus, mp_digit mp)
wolfSSL 15:117db924cf7c 7959 {
wolfSSL 15:117db924cf7c 7960 #define KB_SIZE 128
wolfSSL 15:117db924cf7c 7961
wolfSSL 15:117db924cf7c 7962 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 7963 unsigned char* kb[2] = {NULL, NULL};
wolfSSL 15:117db924cf7c 7964 #else
wolfSSL 15:117db924cf7c 7965 unsigned char kb[2][KB_SIZE];
wolfSSL 15:117db924cf7c 7966 #endif
wolfSSL 15:117db924cf7c 7967 int x, err;
wolfSSL 15:117db924cf7c 7968 unsigned y, z, bitlen, bitpos, lut_gap, first, zA, zB;
wolfSSL 15:117db924cf7c 7969 mp_int tka, tkb, order;
wolfSSL 15:117db924cf7c 7970
wolfSSL 15:117db924cf7c 7971 if (mp_init_multi(&tka, &tkb, &order, NULL, NULL, NULL) != MP_OKAY)
wolfSSL 15:117db924cf7c 7972 return MP_INIT_E;
wolfSSL 15:117db924cf7c 7973
wolfSSL 15:117db924cf7c 7974 /* if it's smaller than modulus we fine */
wolfSSL 15:117db924cf7c 7975 if (mp_unsigned_bin_size(kA) > mp_unsigned_bin_size(modulus)) {
wolfSSL 15:117db924cf7c 7976 /* find order */
wolfSSL 15:117db924cf7c 7977 y = mp_unsigned_bin_size(modulus);
wolfSSL 15:117db924cf7c 7978 for (x = 0; ecc_sets[x].size; x++) {
wolfSSL 15:117db924cf7c 7979 if (y <= (unsigned)ecc_sets[x].size) break;
wolfSSL 15:117db924cf7c 7980 }
wolfSSL 15:117db924cf7c 7981
wolfSSL 15:117db924cf7c 7982 /* back off if we are on the 521 bit curve */
wolfSSL 15:117db924cf7c 7983 if (y == 66) --x;
wolfSSL 15:117db924cf7c 7984
wolfSSL 15:117db924cf7c 7985 if ((err = mp_read_radix(&order, ecc_sets[x].order,
wolfSSL 15:117db924cf7c 7986 MP_RADIX_HEX)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 7987 goto done;
wolfSSL 15:117db924cf7c 7988 }
wolfSSL 15:117db924cf7c 7989
wolfSSL 15:117db924cf7c 7990 /* kA must be less than modulus */
wolfSSL 15:117db924cf7c 7991 if (mp_cmp(kA, &order) != MP_LT) {
wolfSSL 15:117db924cf7c 7992 if ((err = mp_mod(kA, &order, &tka)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 7993 goto done;
wolfSSL 15:117db924cf7c 7994 }
wolfSSL 15:117db924cf7c 7995 } else {
wolfSSL 15:117db924cf7c 7996 if ((err = mp_copy(kA, &tka)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 7997 goto done;
wolfSSL 15:117db924cf7c 7998 }
wolfSSL 15:117db924cf7c 7999 }
wolfSSL 15:117db924cf7c 8000 } else {
wolfSSL 15:117db924cf7c 8001 if ((err = mp_copy(kA, &tka)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 8002 goto done;
wolfSSL 15:117db924cf7c 8003 }
wolfSSL 15:117db924cf7c 8004 }
wolfSSL 15:117db924cf7c 8005
wolfSSL 15:117db924cf7c 8006 /* if it's smaller than modulus we fine */
wolfSSL 15:117db924cf7c 8007 if (mp_unsigned_bin_size(kB) > mp_unsigned_bin_size(modulus)) {
wolfSSL 15:117db924cf7c 8008 /* find order */
wolfSSL 15:117db924cf7c 8009 y = mp_unsigned_bin_size(modulus);
wolfSSL 15:117db924cf7c 8010 for (x = 0; ecc_sets[x].size; x++) {
wolfSSL 15:117db924cf7c 8011 if (y <= (unsigned)ecc_sets[x].size) break;
wolfSSL 15:117db924cf7c 8012 }
wolfSSL 15:117db924cf7c 8013
wolfSSL 15:117db924cf7c 8014 /* back off if we are on the 521 bit curve */
wolfSSL 15:117db924cf7c 8015 if (y == 66) --x;
wolfSSL 15:117db924cf7c 8016
wolfSSL 15:117db924cf7c 8017 if ((err = mp_read_radix(&order, ecc_sets[x].order,
wolfSSL 15:117db924cf7c 8018 MP_RADIX_HEX)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 8019 goto done;
wolfSSL 15:117db924cf7c 8020 }
wolfSSL 15:117db924cf7c 8021
wolfSSL 15:117db924cf7c 8022 /* kB must be less than modulus */
wolfSSL 15:117db924cf7c 8023 if (mp_cmp(kB, &order) != MP_LT) {
wolfSSL 15:117db924cf7c 8024 if ((err = mp_mod(kB, &order, &tkb)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 8025 goto done;
wolfSSL 15:117db924cf7c 8026 }
wolfSSL 15:117db924cf7c 8027 } else {
wolfSSL 15:117db924cf7c 8028 if ((err = mp_copy(kB, &tkb)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 8029 goto done;
wolfSSL 15:117db924cf7c 8030 }
wolfSSL 15:117db924cf7c 8031 }
wolfSSL 15:117db924cf7c 8032 } else {
wolfSSL 15:117db924cf7c 8033 if ((err = mp_copy(kB, &tkb)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 8034 goto done;
wolfSSL 15:117db924cf7c 8035 }
wolfSSL 15:117db924cf7c 8036 }
wolfSSL 15:117db924cf7c 8037
wolfSSL 15:117db924cf7c 8038 /* get bitlen and round up to next multiple of FP_LUT */
wolfSSL 15:117db924cf7c 8039 bitlen = mp_unsigned_bin_size(modulus) << 3;
wolfSSL 15:117db924cf7c 8040 x = bitlen % FP_LUT;
wolfSSL 15:117db924cf7c 8041 if (x) {
wolfSSL 15:117db924cf7c 8042 bitlen += FP_LUT - x;
wolfSSL 15:117db924cf7c 8043 }
wolfSSL 15:117db924cf7c 8044 lut_gap = bitlen / FP_LUT;
wolfSSL 15:117db924cf7c 8045
wolfSSL 15:117db924cf7c 8046 /* get the k value */
wolfSSL 15:117db924cf7c 8047 if ((mp_unsigned_bin_size(&tka) > (int)(KB_SIZE - 2)) ||
wolfSSL 15:117db924cf7c 8048 (mp_unsigned_bin_size(&tkb) > (int)(KB_SIZE - 2)) ) {
wolfSSL 15:117db924cf7c 8049 err = BUFFER_E; goto done;
wolfSSL 15:117db924cf7c 8050 }
wolfSSL 15:117db924cf7c 8051
wolfSSL 15:117db924cf7c 8052 /* store k */
wolfSSL 15:117db924cf7c 8053 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 8054 kb[0] = (unsigned char*)XMALLOC(KB_SIZE, NULL, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 8055 if (kb[0] == NULL) {
wolfSSL 15:117db924cf7c 8056 err = MEMORY_E; goto done;
wolfSSL 15:117db924cf7c 8057 }
wolfSSL 15:117db924cf7c 8058 #endif
wolfSSL 15:117db924cf7c 8059
wolfSSL 15:117db924cf7c 8060 XMEMSET(kb[0], 0, KB_SIZE);
wolfSSL 15:117db924cf7c 8061 if ((err = mp_to_unsigned_bin(&tka, kb[0])) != MP_OKAY) {
wolfSSL 15:117db924cf7c 8062 goto done;
wolfSSL 15:117db924cf7c 8063 }
wolfSSL 15:117db924cf7c 8064
wolfSSL 15:117db924cf7c 8065 /* let's reverse kb so it's little endian */
wolfSSL 15:117db924cf7c 8066 x = 0;
wolfSSL 15:117db924cf7c 8067 y = mp_unsigned_bin_size(&tka);
wolfSSL 15:117db924cf7c 8068 if (y > 0) {
wolfSSL 15:117db924cf7c 8069 y -= 1;
wolfSSL 15:117db924cf7c 8070 }
wolfSSL 15:117db924cf7c 8071 mp_clear(&tka);
wolfSSL 15:117db924cf7c 8072 while ((unsigned)x < y) {
wolfSSL 15:117db924cf7c 8073 z = kb[0][x]; kb[0][x] = kb[0][y]; kb[0][y] = (byte)z;
wolfSSL 15:117db924cf7c 8074 ++x; --y;
wolfSSL 15:117db924cf7c 8075 }
wolfSSL 15:117db924cf7c 8076
wolfSSL 15:117db924cf7c 8077 /* store b */
wolfSSL 15:117db924cf7c 8078 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 8079 kb[1] = (unsigned char*)XMALLOC(KB_SIZE, NULL, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 8080 if (kb[1] == NULL) {
wolfSSL 15:117db924cf7c 8081 err = MEMORY_E; goto done;
wolfSSL 15:117db924cf7c 8082 }
wolfSSL 15:117db924cf7c 8083 #endif
wolfSSL 15:117db924cf7c 8084
wolfSSL 15:117db924cf7c 8085 XMEMSET(kb[1], 0, KB_SIZE);
wolfSSL 15:117db924cf7c 8086 if ((err = mp_to_unsigned_bin(&tkb, kb[1])) == MP_OKAY) {
wolfSSL 15:117db924cf7c 8087 x = 0;
wolfSSL 15:117db924cf7c 8088 y = mp_unsigned_bin_size(&tkb);
wolfSSL 15:117db924cf7c 8089 if (y > 0) {
wolfSSL 15:117db924cf7c 8090 y -= 1;
wolfSSL 15:117db924cf7c 8091 }
wolfSSL 15:117db924cf7c 8092
wolfSSL 15:117db924cf7c 8093 while ((unsigned)x < y) {
wolfSSL 15:117db924cf7c 8094 z = kb[1][x]; kb[1][x] = kb[1][y]; kb[1][y] = (byte)z;
wolfSSL 15:117db924cf7c 8095 ++x; --y;
wolfSSL 15:117db924cf7c 8096 }
wolfSSL 15:117db924cf7c 8097
wolfSSL 15:117db924cf7c 8098 /* at this point we can start, yipee */
wolfSSL 15:117db924cf7c 8099 first = 1;
wolfSSL 15:117db924cf7c 8100 for (x = lut_gap-1; x >= 0; x--) {
wolfSSL 15:117db924cf7c 8101 /* extract FP_LUT bits from kb spread out by lut_gap bits and
wolfSSL 15:117db924cf7c 8102 offset by x bits from the start */
wolfSSL 15:117db924cf7c 8103 bitpos = x;
wolfSSL 15:117db924cf7c 8104 for (y = zA = zB = 0; y < FP_LUT; y++) {
wolfSSL 15:117db924cf7c 8105 zA |= ((kb[0][bitpos>>3] >> (bitpos&7)) & 1) << y;
wolfSSL 15:117db924cf7c 8106 zB |= ((kb[1][bitpos>>3] >> (bitpos&7)) & 1) << y;
wolfSSL 15:117db924cf7c 8107 bitpos += lut_gap; /* it's y*lut_gap + x, but here we can avoid
wolfSSL 15:117db924cf7c 8108 the mult in each loop */
wolfSSL 15:117db924cf7c 8109 }
wolfSSL 15:117db924cf7c 8110
wolfSSL 15:117db924cf7c 8111 /* double if not first */
wolfSSL 15:117db924cf7c 8112 if (!first) {
wolfSSL 15:117db924cf7c 8113 if ((err = ecc_projective_dbl_point(R, R, a, modulus,
wolfSSL 15:117db924cf7c 8114 mp)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 8115 break;
wolfSSL 15:117db924cf7c 8116 }
wolfSSL 15:117db924cf7c 8117 }
wolfSSL 15:117db924cf7c 8118
wolfSSL 15:117db924cf7c 8119 /* add if not first, otherwise copy */
wolfSSL 15:117db924cf7c 8120 if (!first) {
wolfSSL 15:117db924cf7c 8121 if (zA) {
wolfSSL 15:117db924cf7c 8122 if ((err = ecc_projective_add_point(R, fp_cache[idx1].LUT[zA],
wolfSSL 15:117db924cf7c 8123 R, a, modulus, mp)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 8124 break;
wolfSSL 15:117db924cf7c 8125 }
wolfSSL 15:117db924cf7c 8126 }
wolfSSL 15:117db924cf7c 8127 if (zB) {
wolfSSL 15:117db924cf7c 8128 if ((err = ecc_projective_add_point(R, fp_cache[idx2].LUT[zB],
wolfSSL 15:117db924cf7c 8129 R, a, modulus, mp)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 8130 break;
wolfSSL 15:117db924cf7c 8131 }
wolfSSL 15:117db924cf7c 8132 }
wolfSSL 15:117db924cf7c 8133 } else {
wolfSSL 15:117db924cf7c 8134 if (zA) {
wolfSSL 15:117db924cf7c 8135 if ((mp_copy(fp_cache[idx1].LUT[zA]->x, R->x) != MP_OKAY) ||
wolfSSL 15:117db924cf7c 8136 (mp_copy(fp_cache[idx1].LUT[zA]->y, R->y) != MP_OKAY) ||
wolfSSL 15:117db924cf7c 8137 (mp_copy(&fp_cache[idx1].mu, R->z) != MP_OKAY)) {
wolfSSL 15:117db924cf7c 8138 err = GEN_MEM_ERR;
wolfSSL 15:117db924cf7c 8139 break;
wolfSSL 15:117db924cf7c 8140 }
wolfSSL 15:117db924cf7c 8141 first = 0;
wolfSSL 15:117db924cf7c 8142 }
wolfSSL 15:117db924cf7c 8143 if (zB && first == 0) {
wolfSSL 15:117db924cf7c 8144 if (zB) {
wolfSSL 15:117db924cf7c 8145 if ((err = ecc_projective_add_point(R,
wolfSSL 15:117db924cf7c 8146 fp_cache[idx2].LUT[zB], R, a, modulus, mp)) != MP_OKAY){
wolfSSL 15:117db924cf7c 8147 break;
wolfSSL 15:117db924cf7c 8148 }
wolfSSL 15:117db924cf7c 8149 }
wolfSSL 15:117db924cf7c 8150 } else if (zB && first == 1) {
wolfSSL 15:117db924cf7c 8151 if ((mp_copy(fp_cache[idx2].LUT[zB]->x, R->x) != MP_OKAY) ||
wolfSSL 15:117db924cf7c 8152 (mp_copy(fp_cache[idx2].LUT[zB]->y, R->y) != MP_OKAY) ||
wolfSSL 15:117db924cf7c 8153 (mp_copy(&fp_cache[idx2].mu, R->z) != MP_OKAY)) {
wolfSSL 15:117db924cf7c 8154 err = GEN_MEM_ERR;
wolfSSL 15:117db924cf7c 8155 break;
wolfSSL 15:117db924cf7c 8156 }
wolfSSL 15:117db924cf7c 8157 first = 0;
wolfSSL 15:117db924cf7c 8158 }
wolfSSL 15:117db924cf7c 8159 }
wolfSSL 15:117db924cf7c 8160 }
wolfSSL 15:117db924cf7c 8161 }
wolfSSL 15:117db924cf7c 8162
wolfSSL 15:117db924cf7c 8163 done:
wolfSSL 15:117db924cf7c 8164 /* cleanup */
wolfSSL 15:117db924cf7c 8165 mp_clear(&tkb);
wolfSSL 15:117db924cf7c 8166 mp_clear(&tka);
wolfSSL 15:117db924cf7c 8167 mp_clear(&order);
wolfSSL 15:117db924cf7c 8168
wolfSSL 15:117db924cf7c 8169 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 8170 if (kb[0])
wolfSSL 15:117db924cf7c 8171 #endif
wolfSSL 15:117db924cf7c 8172 ForceZero(kb[0], KB_SIZE);
wolfSSL 15:117db924cf7c 8173 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 8174 if (kb[1])
wolfSSL 15:117db924cf7c 8175 #endif
wolfSSL 15:117db924cf7c 8176 ForceZero(kb[1], KB_SIZE);
wolfSSL 15:117db924cf7c 8177
wolfSSL 15:117db924cf7c 8178 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 8179 XFREE(kb[0], NULL, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 8180 XFREE(kb[1], NULL, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 8181 #endif
wolfSSL 15:117db924cf7c 8182
wolfSSL 15:117db924cf7c 8183 #undef KB_SIZE
wolfSSL 15:117db924cf7c 8184
wolfSSL 15:117db924cf7c 8185 if (err != MP_OKAY)
wolfSSL 15:117db924cf7c 8186 return err;
wolfSSL 15:117db924cf7c 8187
wolfSSL 15:117db924cf7c 8188 return ecc_map(R, modulus, mp);
wolfSSL 15:117db924cf7c 8189 }
wolfSSL 15:117db924cf7c 8190
wolfSSL 15:117db924cf7c 8191
wolfSSL 15:117db924cf7c 8192 /** ECC Fixed Point mulmod global with heap hint used
wolfSSL 15:117db924cf7c 8193 Computes kA*A + kB*B = C using Shamir's Trick
wolfSSL 15:117db924cf7c 8194 A First point to multiply
wolfSSL 15:117db924cf7c 8195 kA What to multiple A by
wolfSSL 15:117db924cf7c 8196 B Second point to multiply
wolfSSL 15:117db924cf7c 8197 kB What to multiple B by
wolfSSL 15:117db924cf7c 8198 C [out] Destination point (can overlap with A or B)
wolfSSL 15:117db924cf7c 8199 a ECC curve parameter a
wolfSSL 15:117db924cf7c 8200 modulus Modulus for curve
wolfSSL 15:117db924cf7c 8201 return MP_OKAY on success
wolfSSL 15:117db924cf7c 8202 */
wolfSSL 15:117db924cf7c 8203 int ecc_mul2add(ecc_point* A, mp_int* kA,
wolfSSL 15:117db924cf7c 8204 ecc_point* B, mp_int* kB,
wolfSSL 15:117db924cf7c 8205 ecc_point* C, mp_int* a, mp_int* modulus, void* heap)
wolfSSL 15:117db924cf7c 8206 {
wolfSSL 15:117db924cf7c 8207 int idx1 = -1, idx2 = -1, err = MP_OKAY, mpInit = 0;
wolfSSL 15:117db924cf7c 8208 mp_digit mp;
wolfSSL 15:117db924cf7c 8209 mp_int mu;
wolfSSL 15:117db924cf7c 8210
wolfSSL 15:117db924cf7c 8211 err = mp_init(&mu);
wolfSSL 15:117db924cf7c 8212 if (err != MP_OKAY)
wolfSSL 15:117db924cf7c 8213 return err;
wolfSSL 15:117db924cf7c 8214
wolfSSL 15:117db924cf7c 8215 #ifndef HAVE_THREAD_LS
wolfSSL 15:117db924cf7c 8216 if (initMutex == 0) {
wolfSSL 15:117db924cf7c 8217 wc_InitMutex(&ecc_fp_lock);
wolfSSL 15:117db924cf7c 8218 initMutex = 1;
wolfSSL 15:117db924cf7c 8219 }
wolfSSL 15:117db924cf7c 8220 if (wc_LockMutex(&ecc_fp_lock) != 0)
wolfSSL 15:117db924cf7c 8221 return BAD_MUTEX_E;
wolfSSL 15:117db924cf7c 8222 #endif /* HAVE_THREAD_LS */
wolfSSL 15:117db924cf7c 8223
wolfSSL 15:117db924cf7c 8224 /* find point */
wolfSSL 15:117db924cf7c 8225 idx1 = find_base(A);
wolfSSL 15:117db924cf7c 8226
wolfSSL 15:117db924cf7c 8227 /* no entry? */
wolfSSL 15:117db924cf7c 8228 if (idx1 == -1) {
wolfSSL 15:117db924cf7c 8229 /* find hole and add it */
wolfSSL 15:117db924cf7c 8230 if ((idx1 = find_hole()) >= 0) {
wolfSSL 15:117db924cf7c 8231 err = add_entry(idx1, A);
wolfSSL 15:117db924cf7c 8232 }
wolfSSL 15:117db924cf7c 8233 }
wolfSSL 15:117db924cf7c 8234 if (err == MP_OKAY && idx1 != -1) {
wolfSSL 15:117db924cf7c 8235 /* increment LRU */
wolfSSL 15:117db924cf7c 8236 ++(fp_cache[idx1].lru_count);
wolfSSL 15:117db924cf7c 8237 }
wolfSSL 15:117db924cf7c 8238
wolfSSL 15:117db924cf7c 8239 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 8240 /* find point */
wolfSSL 15:117db924cf7c 8241 idx2 = find_base(B);
wolfSSL 15:117db924cf7c 8242
wolfSSL 15:117db924cf7c 8243 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 8244 /* no entry? */
wolfSSL 15:117db924cf7c 8245 if (idx2 == -1) {
wolfSSL 15:117db924cf7c 8246 /* find hole and add it */
wolfSSL 15:117db924cf7c 8247 if ((idx2 = find_hole()) >= 0)
wolfSSL 15:117db924cf7c 8248 err = add_entry(idx2, B);
wolfSSL 15:117db924cf7c 8249 }
wolfSSL 15:117db924cf7c 8250 }
wolfSSL 15:117db924cf7c 8251
wolfSSL 15:117db924cf7c 8252 if (err == MP_OKAY && idx2 != -1) {
wolfSSL 15:117db924cf7c 8253 /* increment LRU */
wolfSSL 15:117db924cf7c 8254 ++(fp_cache[idx2].lru_count);
wolfSSL 15:117db924cf7c 8255 }
wolfSSL 15:117db924cf7c 8256
wolfSSL 15:117db924cf7c 8257 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 8258 /* if it's 2 build the LUT, if it's higher just use the LUT */
wolfSSL 15:117db924cf7c 8259 if (idx1 >= 0 && fp_cache[idx1].lru_count == 2) {
wolfSSL 15:117db924cf7c 8260 /* compute mp */
wolfSSL 15:117db924cf7c 8261 err = mp_montgomery_setup(modulus, &mp);
wolfSSL 15:117db924cf7c 8262
wolfSSL 15:117db924cf7c 8263 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 8264 mpInit = 1;
wolfSSL 15:117db924cf7c 8265 err = mp_montgomery_calc_normalization(&mu, modulus);
wolfSSL 15:117db924cf7c 8266 }
wolfSSL 15:117db924cf7c 8267
wolfSSL 15:117db924cf7c 8268 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 8269 /* build the LUT */
wolfSSL 15:117db924cf7c 8270 err = build_lut(idx1, a, modulus, mp, &mu);
wolfSSL 15:117db924cf7c 8271 }
wolfSSL 15:117db924cf7c 8272 }
wolfSSL 15:117db924cf7c 8273
wolfSSL 15:117db924cf7c 8274 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 8275 /* if it's 2 build the LUT, if it's higher just use the LUT */
wolfSSL 15:117db924cf7c 8276 if (idx2 >= 0 && fp_cache[idx2].lru_count == 2) {
wolfSSL 15:117db924cf7c 8277 if (mpInit == 0) {
wolfSSL 15:117db924cf7c 8278 /* compute mp */
wolfSSL 15:117db924cf7c 8279 err = mp_montgomery_setup(modulus, &mp);
wolfSSL 15:117db924cf7c 8280 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 8281 mpInit = 1;
wolfSSL 15:117db924cf7c 8282 err = mp_montgomery_calc_normalization(&mu, modulus);
wolfSSL 15:117db924cf7c 8283 }
wolfSSL 15:117db924cf7c 8284 }
wolfSSL 15:117db924cf7c 8285
wolfSSL 15:117db924cf7c 8286 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 8287 /* build the LUT */
wolfSSL 15:117db924cf7c 8288 err = build_lut(idx2, a, modulus, mp, &mu);
wolfSSL 15:117db924cf7c 8289 }
wolfSSL 15:117db924cf7c 8290 }
wolfSSL 15:117db924cf7c 8291
wolfSSL 15:117db924cf7c 8292
wolfSSL 15:117db924cf7c 8293 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 8294 if (idx1 >=0 && idx2 >= 0 && fp_cache[idx1].lru_count >= 2 &&
wolfSSL 15:117db924cf7c 8295 fp_cache[idx2].lru_count >= 2) {
wolfSSL 15:117db924cf7c 8296 if (mpInit == 0) {
wolfSSL 15:117db924cf7c 8297 /* compute mp */
wolfSSL 15:117db924cf7c 8298 err = mp_montgomery_setup(modulus, &mp);
wolfSSL 15:117db924cf7c 8299 }
wolfSSL 15:117db924cf7c 8300 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 8301 err = accel_fp_mul2add(idx1, idx2, kA, kB, C, a, modulus, mp);
wolfSSL 15:117db924cf7c 8302 } else {
wolfSSL 15:117db924cf7c 8303 err = normal_ecc_mul2add(A, kA, B, kB, C, a, modulus, heap);
wolfSSL 15:117db924cf7c 8304 }
wolfSSL 15:117db924cf7c 8305 }
wolfSSL 15:117db924cf7c 8306
wolfSSL 15:117db924cf7c 8307 #ifndef HAVE_THREAD_LS
wolfSSL 15:117db924cf7c 8308 wc_UnLockMutex(&ecc_fp_lock);
wolfSSL 15:117db924cf7c 8309 #endif /* HAVE_THREAD_LS */
wolfSSL 15:117db924cf7c 8310 mp_clear(&mu);
wolfSSL 15:117db924cf7c 8311
wolfSSL 15:117db924cf7c 8312 return err;
wolfSSL 15:117db924cf7c 8313 }
wolfSSL 15:117db924cf7c 8314 #endif
wolfSSL 15:117db924cf7c 8315 #endif /* ECC_SHAMIR */
wolfSSL 15:117db924cf7c 8316
wolfSSL 15:117db924cf7c 8317 /** ECC Fixed Point mulmod global
wolfSSL 15:117db924cf7c 8318 k The multiplicand
wolfSSL 15:117db924cf7c 8319 G Base point to multiply
wolfSSL 15:117db924cf7c 8320 R [out] Destination of product
wolfSSL 15:117db924cf7c 8321 a ECC curve parameter a
wolfSSL 15:117db924cf7c 8322 modulus The modulus for the curve
wolfSSL 15:117db924cf7c 8323 map [boolean] If non-zero maps the point back to affine co-ordinates,
wolfSSL 15:117db924cf7c 8324 otherwise it's left in jacobian-montgomery form
wolfSSL 15:117db924cf7c 8325 return MP_OKAY if successful
wolfSSL 15:117db924cf7c 8326 */
wolfSSL 15:117db924cf7c 8327 int wc_ecc_mulmod_ex(mp_int* k, ecc_point *G, ecc_point *R, mp_int* a,
wolfSSL 15:117db924cf7c 8328 mp_int* modulus, int map, void* heap)
wolfSSL 15:117db924cf7c 8329 {
wolfSSL 15:117db924cf7c 8330 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 8331 int idx, err = MP_OKAY;
wolfSSL 15:117db924cf7c 8332 mp_digit mp;
wolfSSL 15:117db924cf7c 8333 mp_int mu;
wolfSSL 15:117db924cf7c 8334 int mpSetup = 0;
wolfSSL 15:117db924cf7c 8335
wolfSSL 15:117db924cf7c 8336 if (k == NULL || G == NULL || R == NULL || a == NULL || modulus == NULL) {
wolfSSL 15:117db924cf7c 8337 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 8338 }
wolfSSL 15:117db924cf7c 8339
wolfSSL 15:117db924cf7c 8340 if (mp_init(&mu) != MP_OKAY)
wolfSSL 15:117db924cf7c 8341 return MP_INIT_E;
wolfSSL 15:117db924cf7c 8342
wolfSSL 15:117db924cf7c 8343 #ifndef HAVE_THREAD_LS
wolfSSL 15:117db924cf7c 8344 if (initMutex == 0) {
wolfSSL 15:117db924cf7c 8345 wc_InitMutex(&ecc_fp_lock);
wolfSSL 15:117db924cf7c 8346 initMutex = 1;
wolfSSL 15:117db924cf7c 8347 }
wolfSSL 15:117db924cf7c 8348
wolfSSL 15:117db924cf7c 8349 if (wc_LockMutex(&ecc_fp_lock) != 0)
wolfSSL 15:117db924cf7c 8350 return BAD_MUTEX_E;
wolfSSL 15:117db924cf7c 8351 #endif /* HAVE_THREAD_LS */
wolfSSL 15:117db924cf7c 8352
wolfSSL 15:117db924cf7c 8353 /* find point */
wolfSSL 15:117db924cf7c 8354 idx = find_base(G);
wolfSSL 15:117db924cf7c 8355
wolfSSL 15:117db924cf7c 8356 /* no entry? */
wolfSSL 15:117db924cf7c 8357 if (idx == -1) {
wolfSSL 15:117db924cf7c 8358 /* find hole and add it */
wolfSSL 15:117db924cf7c 8359 idx = find_hole();
wolfSSL 15:117db924cf7c 8360
wolfSSL 15:117db924cf7c 8361 if (idx >= 0)
wolfSSL 15:117db924cf7c 8362 err = add_entry(idx, G);
wolfSSL 15:117db924cf7c 8363 }
wolfSSL 15:117db924cf7c 8364 if (err == MP_OKAY && idx >= 0) {
wolfSSL 15:117db924cf7c 8365 /* increment LRU */
wolfSSL 15:117db924cf7c 8366 ++(fp_cache[idx].lru_count);
wolfSSL 15:117db924cf7c 8367 }
wolfSSL 15:117db924cf7c 8368
wolfSSL 15:117db924cf7c 8369
wolfSSL 15:117db924cf7c 8370 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 8371 /* if it's 2 build the LUT, if it's higher just use the LUT */
wolfSSL 15:117db924cf7c 8372 if (idx >= 0 && fp_cache[idx].lru_count == 2) {
wolfSSL 15:117db924cf7c 8373 /* compute mp */
wolfSSL 15:117db924cf7c 8374 err = mp_montgomery_setup(modulus, &mp);
wolfSSL 15:117db924cf7c 8375
wolfSSL 15:117db924cf7c 8376 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 8377 /* compute mu */
wolfSSL 15:117db924cf7c 8378 mpSetup = 1;
wolfSSL 15:117db924cf7c 8379 err = mp_montgomery_calc_normalization(&mu, modulus);
wolfSSL 15:117db924cf7c 8380 }
wolfSSL 15:117db924cf7c 8381
wolfSSL 15:117db924cf7c 8382 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 8383 /* build the LUT */
wolfSSL 15:117db924cf7c 8384 err = build_lut(idx, a, modulus, mp, &mu);
wolfSSL 15:117db924cf7c 8385 }
wolfSSL 15:117db924cf7c 8386 }
wolfSSL 15:117db924cf7c 8387
wolfSSL 15:117db924cf7c 8388 if (err == MP_OKAY) {
wolfSSL 15:117db924cf7c 8389 if (idx >= 0 && fp_cache[idx].lru_count >= 2) {
wolfSSL 15:117db924cf7c 8390 if (mpSetup == 0) {
wolfSSL 15:117db924cf7c 8391 /* compute mp */
wolfSSL 15:117db924cf7c 8392 err = mp_montgomery_setup(modulus, &mp);
wolfSSL 15:117db924cf7c 8393 }
wolfSSL 15:117db924cf7c 8394 if (err == MP_OKAY)
wolfSSL 15:117db924cf7c 8395 err = accel_fp_mul(idx, k, R, a, modulus, mp, map);
wolfSSL 15:117db924cf7c 8396 } else {
wolfSSL 15:117db924cf7c 8397 err = normal_ecc_mulmod(k, G, R, a, modulus, map, heap);
wolfSSL 15:117db924cf7c 8398 }
wolfSSL 15:117db924cf7c 8399 }
wolfSSL 15:117db924cf7c 8400
wolfSSL 15:117db924cf7c 8401 #ifndef HAVE_THREAD_LS
wolfSSL 15:117db924cf7c 8402 wc_UnLockMutex(&ecc_fp_lock);
wolfSSL 15:117db924cf7c 8403 #endif /* HAVE_THREAD_LS */
wolfSSL 15:117db924cf7c 8404 mp_clear(&mu);
wolfSSL 15:117db924cf7c 8405
wolfSSL 15:117db924cf7c 8406 return err;
wolfSSL 15:117db924cf7c 8407 #else
wolfSSL 15:117db924cf7c 8408 if (k == NULL || G == NULL || R == NULL || a == NULL || modulus == NULL) {
wolfSSL 15:117db924cf7c 8409 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 8410 }
wolfSSL 15:117db924cf7c 8411
wolfSSL 15:117db924cf7c 8412 return sp_ecc_mulmod_256(k, G, R, map, heap);
wolfSSL 15:117db924cf7c 8413 #endif
wolfSSL 15:117db924cf7c 8414 }
wolfSSL 15:117db924cf7c 8415
wolfSSL 15:117db924cf7c 8416 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 8417 /* helper function for freeing the cache ...
wolfSSL 15:117db924cf7c 8418 must be called with the cache mutex locked */
wolfSSL 15:117db924cf7c 8419 static void wc_ecc_fp_free_cache(void)
wolfSSL 15:117db924cf7c 8420 {
wolfSSL 15:117db924cf7c 8421 unsigned x, y;
wolfSSL 15:117db924cf7c 8422 for (x = 0; x < FP_ENTRIES; x++) {
wolfSSL 15:117db924cf7c 8423 if (fp_cache[x].g != NULL) {
wolfSSL 15:117db924cf7c 8424 for (y = 0; y < (1U<<FP_LUT); y++) {
wolfSSL 15:117db924cf7c 8425 wc_ecc_del_point(fp_cache[x].LUT[y]);
wolfSSL 15:117db924cf7c 8426 fp_cache[x].LUT[y] = NULL;
wolfSSL 15:117db924cf7c 8427 }
wolfSSL 15:117db924cf7c 8428 wc_ecc_del_point(fp_cache[x].g);
wolfSSL 15:117db924cf7c 8429 fp_cache[x].g = NULL;
wolfSSL 15:117db924cf7c 8430 mp_clear(&fp_cache[x].mu);
wolfSSL 15:117db924cf7c 8431 fp_cache[x].lru_count = 0;
wolfSSL 15:117db924cf7c 8432 fp_cache[x].lock = 0;
wolfSSL 15:117db924cf7c 8433 }
wolfSSL 15:117db924cf7c 8434 }
wolfSSL 15:117db924cf7c 8435 }
wolfSSL 15:117db924cf7c 8436 #endif
wolfSSL 15:117db924cf7c 8437
wolfSSL 15:117db924cf7c 8438 /** Free the Fixed Point cache */
wolfSSL 15:117db924cf7c 8439 void wc_ecc_fp_free(void)
wolfSSL 15:117db924cf7c 8440 {
wolfSSL 15:117db924cf7c 8441 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 8442 #ifndef HAVE_THREAD_LS
wolfSSL 15:117db924cf7c 8443 if (initMutex == 0) {
wolfSSL 15:117db924cf7c 8444 wc_InitMutex(&ecc_fp_lock);
wolfSSL 15:117db924cf7c 8445 initMutex = 1;
wolfSSL 15:117db924cf7c 8446 }
wolfSSL 15:117db924cf7c 8447
wolfSSL 15:117db924cf7c 8448 if (wc_LockMutex(&ecc_fp_lock) == 0) {
wolfSSL 15:117db924cf7c 8449 #endif /* HAVE_THREAD_LS */
wolfSSL 15:117db924cf7c 8450
wolfSSL 15:117db924cf7c 8451 wc_ecc_fp_free_cache();
wolfSSL 15:117db924cf7c 8452
wolfSSL 15:117db924cf7c 8453 #ifndef HAVE_THREAD_LS
wolfSSL 15:117db924cf7c 8454 wc_UnLockMutex(&ecc_fp_lock);
wolfSSL 15:117db924cf7c 8455 wc_FreeMutex(&ecc_fp_lock);
wolfSSL 15:117db924cf7c 8456 initMutex = 0;
wolfSSL 15:117db924cf7c 8457 }
wolfSSL 15:117db924cf7c 8458 #endif /* HAVE_THREAD_LS */
wolfSSL 15:117db924cf7c 8459 #endif
wolfSSL 15:117db924cf7c 8460 }
wolfSSL 15:117db924cf7c 8461
wolfSSL 15:117db924cf7c 8462
wolfSSL 15:117db924cf7c 8463 #endif /* FP_ECC */
wolfSSL 15:117db924cf7c 8464
wolfSSL 15:117db924cf7c 8465 #ifdef HAVE_ECC_ENCRYPT
wolfSSL 15:117db924cf7c 8466
wolfSSL 15:117db924cf7c 8467
wolfSSL 15:117db924cf7c 8468 enum ecCliState {
wolfSSL 15:117db924cf7c 8469 ecCLI_INIT = 1,
wolfSSL 15:117db924cf7c 8470 ecCLI_SALT_GET = 2,
wolfSSL 15:117db924cf7c 8471 ecCLI_SALT_SET = 3,
wolfSSL 15:117db924cf7c 8472 ecCLI_SENT_REQ = 4,
wolfSSL 15:117db924cf7c 8473 ecCLI_RECV_RESP = 5,
wolfSSL 15:117db924cf7c 8474 ecCLI_BAD_STATE = 99
wolfSSL 15:117db924cf7c 8475 };
wolfSSL 15:117db924cf7c 8476
wolfSSL 15:117db924cf7c 8477 enum ecSrvState {
wolfSSL 15:117db924cf7c 8478 ecSRV_INIT = 1,
wolfSSL 15:117db924cf7c 8479 ecSRV_SALT_GET = 2,
wolfSSL 15:117db924cf7c 8480 ecSRV_SALT_SET = 3,
wolfSSL 15:117db924cf7c 8481 ecSRV_RECV_REQ = 4,
wolfSSL 15:117db924cf7c 8482 ecSRV_SENT_RESP = 5,
wolfSSL 15:117db924cf7c 8483 ecSRV_BAD_STATE = 99
wolfSSL 15:117db924cf7c 8484 };
wolfSSL 15:117db924cf7c 8485
wolfSSL 15:117db924cf7c 8486
wolfSSL 15:117db924cf7c 8487 struct ecEncCtx {
wolfSSL 15:117db924cf7c 8488 const byte* kdfSalt; /* optional salt for kdf */
wolfSSL 15:117db924cf7c 8489 const byte* kdfInfo; /* optional info for kdf */
wolfSSL 15:117db924cf7c 8490 const byte* macSalt; /* optional salt for mac */
wolfSSL 15:117db924cf7c 8491 word32 kdfSaltSz; /* size of kdfSalt */
wolfSSL 15:117db924cf7c 8492 word32 kdfInfoSz; /* size of kdfInfo */
wolfSSL 15:117db924cf7c 8493 word32 macSaltSz; /* size of macSalt */
wolfSSL 15:117db924cf7c 8494 void* heap; /* heap hint for memory used */
wolfSSL 15:117db924cf7c 8495 byte clientSalt[EXCHANGE_SALT_SZ]; /* for msg exchange */
wolfSSL 15:117db924cf7c 8496 byte serverSalt[EXCHANGE_SALT_SZ]; /* for msg exchange */
wolfSSL 15:117db924cf7c 8497 byte encAlgo; /* which encryption type */
wolfSSL 15:117db924cf7c 8498 byte kdfAlgo; /* which key derivation function type */
wolfSSL 15:117db924cf7c 8499 byte macAlgo; /* which mac function type */
wolfSSL 15:117db924cf7c 8500 byte protocol; /* are we REQ_RESP client or server ? */
wolfSSL 15:117db924cf7c 8501 byte cliSt; /* protocol state, for sanity checks */
wolfSSL 15:117db924cf7c 8502 byte srvSt; /* protocol state, for sanity checks */
wolfSSL 15:117db924cf7c 8503 };
wolfSSL 15:117db924cf7c 8504
wolfSSL 15:117db924cf7c 8505
wolfSSL 15:117db924cf7c 8506 const byte* wc_ecc_ctx_get_own_salt(ecEncCtx* ctx)
wolfSSL 15:117db924cf7c 8507 {
wolfSSL 15:117db924cf7c 8508 if (ctx == NULL || ctx->protocol == 0)
wolfSSL 15:117db924cf7c 8509 return NULL;
wolfSSL 15:117db924cf7c 8510
wolfSSL 15:117db924cf7c 8511 if (ctx->protocol == REQ_RESP_CLIENT) {
wolfSSL 15:117db924cf7c 8512 if (ctx->cliSt == ecCLI_INIT) {
wolfSSL 15:117db924cf7c 8513 ctx->cliSt = ecCLI_SALT_GET;
wolfSSL 15:117db924cf7c 8514 return ctx->clientSalt;
wolfSSL 15:117db924cf7c 8515 }
wolfSSL 15:117db924cf7c 8516 else {
wolfSSL 15:117db924cf7c 8517 ctx->cliSt = ecCLI_BAD_STATE;
wolfSSL 15:117db924cf7c 8518 return NULL;
wolfSSL 15:117db924cf7c 8519 }
wolfSSL 15:117db924cf7c 8520 }
wolfSSL 15:117db924cf7c 8521 else if (ctx->protocol == REQ_RESP_SERVER) {
wolfSSL 15:117db924cf7c 8522 if (ctx->srvSt == ecSRV_INIT) {
wolfSSL 15:117db924cf7c 8523 ctx->srvSt = ecSRV_SALT_GET;
wolfSSL 15:117db924cf7c 8524 return ctx->serverSalt;
wolfSSL 15:117db924cf7c 8525 }
wolfSSL 15:117db924cf7c 8526 else {
wolfSSL 15:117db924cf7c 8527 ctx->srvSt = ecSRV_BAD_STATE;
wolfSSL 15:117db924cf7c 8528 return NULL;
wolfSSL 15:117db924cf7c 8529 }
wolfSSL 15:117db924cf7c 8530 }
wolfSSL 15:117db924cf7c 8531
wolfSSL 15:117db924cf7c 8532 return NULL;
wolfSSL 15:117db924cf7c 8533 }
wolfSSL 15:117db924cf7c 8534
wolfSSL 15:117db924cf7c 8535
wolfSSL 15:117db924cf7c 8536 /* optional set info, can be called before or after set_peer_salt */
wolfSSL 15:117db924cf7c 8537 int wc_ecc_ctx_set_info(ecEncCtx* ctx, const byte* info, int sz)
wolfSSL 15:117db924cf7c 8538 {
wolfSSL 15:117db924cf7c 8539 if (ctx == NULL || info == 0 || sz < 0)
wolfSSL 15:117db924cf7c 8540 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 8541
wolfSSL 15:117db924cf7c 8542 ctx->kdfInfo = info;
wolfSSL 15:117db924cf7c 8543 ctx->kdfInfoSz = sz;
wolfSSL 15:117db924cf7c 8544
wolfSSL 15:117db924cf7c 8545 return 0;
wolfSSL 15:117db924cf7c 8546 }
wolfSSL 15:117db924cf7c 8547
wolfSSL 15:117db924cf7c 8548
wolfSSL 15:117db924cf7c 8549 static const char* exchange_info = "Secure Message Exchange";
wolfSSL 15:117db924cf7c 8550
wolfSSL 15:117db924cf7c 8551 int wc_ecc_ctx_set_peer_salt(ecEncCtx* ctx, const byte* salt)
wolfSSL 15:117db924cf7c 8552 {
wolfSSL 15:117db924cf7c 8553 byte tmp[EXCHANGE_SALT_SZ/2];
wolfSSL 15:117db924cf7c 8554 int halfSz = EXCHANGE_SALT_SZ/2;
wolfSSL 15:117db924cf7c 8555
wolfSSL 15:117db924cf7c 8556 if (ctx == NULL || ctx->protocol == 0 || salt == NULL)
wolfSSL 15:117db924cf7c 8557 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 8558
wolfSSL 15:117db924cf7c 8559 if (ctx->protocol == REQ_RESP_CLIENT) {
wolfSSL 15:117db924cf7c 8560 XMEMCPY(ctx->serverSalt, salt, EXCHANGE_SALT_SZ);
wolfSSL 15:117db924cf7c 8561 if (ctx->cliSt == ecCLI_SALT_GET)
wolfSSL 15:117db924cf7c 8562 ctx->cliSt = ecCLI_SALT_SET;
wolfSSL 15:117db924cf7c 8563 else {
wolfSSL 15:117db924cf7c 8564 ctx->cliSt = ecCLI_BAD_STATE;
wolfSSL 15:117db924cf7c 8565 return BAD_STATE_E;
wolfSSL 15:117db924cf7c 8566 }
wolfSSL 15:117db924cf7c 8567 }
wolfSSL 15:117db924cf7c 8568 else {
wolfSSL 15:117db924cf7c 8569 XMEMCPY(ctx->clientSalt, salt, EXCHANGE_SALT_SZ);
wolfSSL 15:117db924cf7c 8570 if (ctx->srvSt == ecSRV_SALT_GET)
wolfSSL 15:117db924cf7c 8571 ctx->srvSt = ecSRV_SALT_SET;
wolfSSL 15:117db924cf7c 8572 else {
wolfSSL 15:117db924cf7c 8573 ctx->srvSt = ecSRV_BAD_STATE;
wolfSSL 15:117db924cf7c 8574 return BAD_STATE_E;
wolfSSL 15:117db924cf7c 8575 }
wolfSSL 15:117db924cf7c 8576 }
wolfSSL 15:117db924cf7c 8577
wolfSSL 15:117db924cf7c 8578 /* mix half and half */
wolfSSL 15:117db924cf7c 8579 /* tmp stores 2nd half of client before overwrite */
wolfSSL 15:117db924cf7c 8580 XMEMCPY(tmp, ctx->clientSalt + halfSz, halfSz);
wolfSSL 15:117db924cf7c 8581 XMEMCPY(ctx->clientSalt + halfSz, ctx->serverSalt, halfSz);
wolfSSL 15:117db924cf7c 8582 XMEMCPY(ctx->serverSalt, tmp, halfSz);
wolfSSL 15:117db924cf7c 8583
wolfSSL 15:117db924cf7c 8584 ctx->kdfSalt = ctx->clientSalt;
wolfSSL 15:117db924cf7c 8585 ctx->kdfSaltSz = EXCHANGE_SALT_SZ;
wolfSSL 15:117db924cf7c 8586
wolfSSL 15:117db924cf7c 8587 ctx->macSalt = ctx->serverSalt;
wolfSSL 15:117db924cf7c 8588 ctx->macSaltSz = EXCHANGE_SALT_SZ;
wolfSSL 15:117db924cf7c 8589
wolfSSL 15:117db924cf7c 8590 if (ctx->kdfInfo == NULL) {
wolfSSL 15:117db924cf7c 8591 /* default info */
wolfSSL 15:117db924cf7c 8592 ctx->kdfInfo = (const byte*)exchange_info;
wolfSSL 15:117db924cf7c 8593 ctx->kdfInfoSz = EXCHANGE_INFO_SZ;
wolfSSL 15:117db924cf7c 8594 }
wolfSSL 15:117db924cf7c 8595
wolfSSL 15:117db924cf7c 8596 return 0;
wolfSSL 15:117db924cf7c 8597 }
wolfSSL 15:117db924cf7c 8598
wolfSSL 15:117db924cf7c 8599
wolfSSL 15:117db924cf7c 8600 static int ecc_ctx_set_salt(ecEncCtx* ctx, int flags, WC_RNG* rng)
wolfSSL 15:117db924cf7c 8601 {
wolfSSL 15:117db924cf7c 8602 byte* saltBuffer = NULL;
wolfSSL 15:117db924cf7c 8603
wolfSSL 15:117db924cf7c 8604 if (ctx == NULL || rng == NULL || flags == 0)
wolfSSL 15:117db924cf7c 8605 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 8606
wolfSSL 15:117db924cf7c 8607 saltBuffer = (flags == REQ_RESP_CLIENT) ? ctx->clientSalt : ctx->serverSalt;
wolfSSL 15:117db924cf7c 8608
wolfSSL 15:117db924cf7c 8609 return wc_RNG_GenerateBlock(rng, saltBuffer, EXCHANGE_SALT_SZ);
wolfSSL 15:117db924cf7c 8610 }
wolfSSL 15:117db924cf7c 8611
wolfSSL 15:117db924cf7c 8612
wolfSSL 15:117db924cf7c 8613 static void ecc_ctx_init(ecEncCtx* ctx, int flags)
wolfSSL 15:117db924cf7c 8614 {
wolfSSL 15:117db924cf7c 8615 if (ctx) {
wolfSSL 15:117db924cf7c 8616 XMEMSET(ctx, 0, sizeof(ecEncCtx));
wolfSSL 15:117db924cf7c 8617
wolfSSL 15:117db924cf7c 8618 ctx->encAlgo = ecAES_128_CBC;
wolfSSL 15:117db924cf7c 8619 ctx->kdfAlgo = ecHKDF_SHA256;
wolfSSL 15:117db924cf7c 8620 ctx->macAlgo = ecHMAC_SHA256;
wolfSSL 15:117db924cf7c 8621 ctx->protocol = (byte)flags;
wolfSSL 15:117db924cf7c 8622
wolfSSL 15:117db924cf7c 8623 if (flags == REQ_RESP_CLIENT)
wolfSSL 15:117db924cf7c 8624 ctx->cliSt = ecCLI_INIT;
wolfSSL 15:117db924cf7c 8625 if (flags == REQ_RESP_SERVER)
wolfSSL 15:117db924cf7c 8626 ctx->srvSt = ecSRV_INIT;
wolfSSL 15:117db924cf7c 8627 }
wolfSSL 15:117db924cf7c 8628 }
wolfSSL 15:117db924cf7c 8629
wolfSSL 15:117db924cf7c 8630
wolfSSL 15:117db924cf7c 8631 /* allow ecc context reset so user doesn't have to init/free for reuse */
wolfSSL 15:117db924cf7c 8632 int wc_ecc_ctx_reset(ecEncCtx* ctx, WC_RNG* rng)
wolfSSL 15:117db924cf7c 8633 {
wolfSSL 15:117db924cf7c 8634 if (ctx == NULL || rng == NULL)
wolfSSL 15:117db924cf7c 8635 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 8636
wolfSSL 15:117db924cf7c 8637 ecc_ctx_init(ctx, ctx->protocol);
wolfSSL 15:117db924cf7c 8638 return ecc_ctx_set_salt(ctx, ctx->protocol, rng);
wolfSSL 15:117db924cf7c 8639 }
wolfSSL 15:117db924cf7c 8640
wolfSSL 15:117db924cf7c 8641
wolfSSL 15:117db924cf7c 8642 ecEncCtx* wc_ecc_ctx_new_ex(int flags, WC_RNG* rng, void* heap)
wolfSSL 15:117db924cf7c 8643 {
wolfSSL 15:117db924cf7c 8644 int ret = 0;
wolfSSL 15:117db924cf7c 8645 ecEncCtx* ctx = (ecEncCtx*)XMALLOC(sizeof(ecEncCtx), heap,
wolfSSL 15:117db924cf7c 8646 DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 8647
wolfSSL 15:117db924cf7c 8648 if (ctx) {
wolfSSL 15:117db924cf7c 8649 ctx->protocol = (byte)flags;
wolfSSL 15:117db924cf7c 8650 ctx->heap = heap;
wolfSSL 15:117db924cf7c 8651 }
wolfSSL 15:117db924cf7c 8652
wolfSSL 15:117db924cf7c 8653 ret = wc_ecc_ctx_reset(ctx, rng);
wolfSSL 15:117db924cf7c 8654 if (ret != 0) {
wolfSSL 15:117db924cf7c 8655 wc_ecc_ctx_free(ctx);
wolfSSL 15:117db924cf7c 8656 ctx = NULL;
wolfSSL 15:117db924cf7c 8657 }
wolfSSL 15:117db924cf7c 8658
wolfSSL 15:117db924cf7c 8659 return ctx;
wolfSSL 15:117db924cf7c 8660 }
wolfSSL 15:117db924cf7c 8661
wolfSSL 15:117db924cf7c 8662
wolfSSL 15:117db924cf7c 8663 /* alloc/init and set defaults, return new Context */
wolfSSL 15:117db924cf7c 8664 ecEncCtx* wc_ecc_ctx_new(int flags, WC_RNG* rng)
wolfSSL 15:117db924cf7c 8665 {
wolfSSL 15:117db924cf7c 8666 return wc_ecc_ctx_new_ex(flags, rng, NULL);
wolfSSL 15:117db924cf7c 8667 }
wolfSSL 15:117db924cf7c 8668
wolfSSL 15:117db924cf7c 8669
wolfSSL 15:117db924cf7c 8670 /* free any resources, clear any keys */
wolfSSL 15:117db924cf7c 8671 void wc_ecc_ctx_free(ecEncCtx* ctx)
wolfSSL 15:117db924cf7c 8672 {
wolfSSL 15:117db924cf7c 8673 if (ctx) {
wolfSSL 15:117db924cf7c 8674 ForceZero(ctx, sizeof(ecEncCtx));
wolfSSL 15:117db924cf7c 8675 XFREE(ctx, ctx->heap, DYNAMIC_TYPE_ECC);
wolfSSL 15:117db924cf7c 8676 }
wolfSSL 15:117db924cf7c 8677 }
wolfSSL 15:117db924cf7c 8678
wolfSSL 15:117db924cf7c 8679
wolfSSL 15:117db924cf7c 8680 static int ecc_get_key_sizes(ecEncCtx* ctx, int* encKeySz, int* ivSz,
wolfSSL 15:117db924cf7c 8681 int* keysLen, word32* digestSz, word32* blockSz)
wolfSSL 15:117db924cf7c 8682 {
wolfSSL 15:117db924cf7c 8683 if (ctx) {
wolfSSL 15:117db924cf7c 8684 switch (ctx->encAlgo) {
wolfSSL 15:117db924cf7c 8685 case ecAES_128_CBC:
wolfSSL 15:117db924cf7c 8686 *encKeySz = KEY_SIZE_128;
wolfSSL 15:117db924cf7c 8687 *ivSz = IV_SIZE_128;
wolfSSL 15:117db924cf7c 8688 *blockSz = AES_BLOCK_SIZE;
wolfSSL 15:117db924cf7c 8689 break;
wolfSSL 15:117db924cf7c 8690 default:
wolfSSL 15:117db924cf7c 8691 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 8692 }
wolfSSL 15:117db924cf7c 8693
wolfSSL 15:117db924cf7c 8694 switch (ctx->macAlgo) {
wolfSSL 15:117db924cf7c 8695 case ecHMAC_SHA256:
wolfSSL 15:117db924cf7c 8696 *digestSz = WC_SHA256_DIGEST_SIZE;
wolfSSL 15:117db924cf7c 8697 break;
wolfSSL 15:117db924cf7c 8698 default:
wolfSSL 15:117db924cf7c 8699 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 8700 }
wolfSSL 15:117db924cf7c 8701 } else
wolfSSL 15:117db924cf7c 8702 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 8703
wolfSSL 15:117db924cf7c 8704 *keysLen = *encKeySz + *ivSz + *digestSz;
wolfSSL 15:117db924cf7c 8705
wolfSSL 15:117db924cf7c 8706 return 0;
wolfSSL 15:117db924cf7c 8707 }
wolfSSL 15:117db924cf7c 8708
wolfSSL 15:117db924cf7c 8709
wolfSSL 15:117db924cf7c 8710 /* ecc encrypt with shared secret run through kdf
wolfSSL 15:117db924cf7c 8711 ctx holds non default algos and inputs
wolfSSL 15:117db924cf7c 8712 msgSz should be the right size for encAlgo, i.e., already padded
wolfSSL 15:117db924cf7c 8713 return 0 on success */
wolfSSL 15:117db924cf7c 8714 int wc_ecc_encrypt(ecc_key* privKey, ecc_key* pubKey, const byte* msg,
wolfSSL 15:117db924cf7c 8715 word32 msgSz, byte* out, word32* outSz, ecEncCtx* ctx)
wolfSSL 15:117db924cf7c 8716 {
wolfSSL 15:117db924cf7c 8717 int ret = 0;
wolfSSL 15:117db924cf7c 8718 word32 blockSz;
wolfSSL 15:117db924cf7c 8719 word32 digestSz;
wolfSSL 15:117db924cf7c 8720 ecEncCtx localCtx;
wolfSSL 15:117db924cf7c 8721 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 8722 byte* sharedSecret;
wolfSSL 15:117db924cf7c 8723 byte* keys;
wolfSSL 15:117db924cf7c 8724 #else
wolfSSL 15:117db924cf7c 8725 byte sharedSecret[ECC_MAXSIZE]; /* 521 max size */
wolfSSL 15:117db924cf7c 8726 byte keys[ECC_BUFSIZE]; /* max size */
wolfSSL 15:117db924cf7c 8727 #endif
wolfSSL 15:117db924cf7c 8728 word32 sharedSz = ECC_MAXSIZE;
wolfSSL 15:117db924cf7c 8729 int keysLen;
wolfSSL 15:117db924cf7c 8730 int encKeySz;
wolfSSL 15:117db924cf7c 8731 int ivSz;
wolfSSL 15:117db924cf7c 8732 int offset = 0; /* keys offset if doing msg exchange */
wolfSSL 15:117db924cf7c 8733 byte* encKey;
wolfSSL 15:117db924cf7c 8734 byte* encIv;
wolfSSL 15:117db924cf7c 8735 byte* macKey;
wolfSSL 15:117db924cf7c 8736
wolfSSL 15:117db924cf7c 8737 if (privKey == NULL || pubKey == NULL || msg == NULL || out == NULL ||
wolfSSL 15:117db924cf7c 8738 outSz == NULL)
wolfSSL 15:117db924cf7c 8739 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 8740
wolfSSL 15:117db924cf7c 8741 if (ctx == NULL) { /* use defaults */
wolfSSL 15:117db924cf7c 8742 ecc_ctx_init(&localCtx, 0);
wolfSSL 15:117db924cf7c 8743 ctx = &localCtx;
wolfSSL 15:117db924cf7c 8744 }
wolfSSL 15:117db924cf7c 8745
wolfSSL 15:117db924cf7c 8746 ret = ecc_get_key_sizes(ctx, &encKeySz, &ivSz, &keysLen, &digestSz,
wolfSSL 15:117db924cf7c 8747 &blockSz);
wolfSSL 15:117db924cf7c 8748 if (ret != 0)
wolfSSL 15:117db924cf7c 8749 return ret;
wolfSSL 15:117db924cf7c 8750
wolfSSL 15:117db924cf7c 8751 if (ctx->protocol == REQ_RESP_SERVER) {
wolfSSL 15:117db924cf7c 8752 offset = keysLen;
wolfSSL 15:117db924cf7c 8753 keysLen *= 2;
wolfSSL 15:117db924cf7c 8754
wolfSSL 15:117db924cf7c 8755 if (ctx->srvSt != ecSRV_RECV_REQ)
wolfSSL 15:117db924cf7c 8756 return BAD_STATE_E;
wolfSSL 15:117db924cf7c 8757
wolfSSL 15:117db924cf7c 8758 ctx->srvSt = ecSRV_BAD_STATE; /* we're done no more ops allowed */
wolfSSL 15:117db924cf7c 8759 }
wolfSSL 15:117db924cf7c 8760 else if (ctx->protocol == REQ_RESP_CLIENT) {
wolfSSL 15:117db924cf7c 8761 if (ctx->cliSt != ecCLI_SALT_SET)
wolfSSL 15:117db924cf7c 8762 return BAD_STATE_E;
wolfSSL 15:117db924cf7c 8763
wolfSSL 15:117db924cf7c 8764 ctx->cliSt = ecCLI_SENT_REQ; /* only do this once */
wolfSSL 15:117db924cf7c 8765 }
wolfSSL 15:117db924cf7c 8766
wolfSSL 15:117db924cf7c 8767 if (keysLen > ECC_BUFSIZE) /* keys size */
wolfSSL 15:117db924cf7c 8768 return BUFFER_E;
wolfSSL 15:117db924cf7c 8769
wolfSSL 15:117db924cf7c 8770 if ( (msgSz%blockSz) != 0)
wolfSSL 15:117db924cf7c 8771 return BAD_PADDING_E;
wolfSSL 15:117db924cf7c 8772
wolfSSL 15:117db924cf7c 8773 if (*outSz < (msgSz + digestSz))
wolfSSL 15:117db924cf7c 8774 return BUFFER_E;
wolfSSL 15:117db924cf7c 8775
wolfSSL 15:117db924cf7c 8776 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 8777 sharedSecret = (byte*)XMALLOC(ECC_MAXSIZE, NULL, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 8778 if (sharedSecret == NULL)
wolfSSL 15:117db924cf7c 8779 return MEMORY_E;
wolfSSL 15:117db924cf7c 8780
wolfSSL 15:117db924cf7c 8781 keys = (byte*)XMALLOC(ECC_BUFSIZE, NULL, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 8782 if (keys == NULL) {
wolfSSL 15:117db924cf7c 8783 XFREE(sharedSecret, NULL, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 8784 return MEMORY_E;
wolfSSL 15:117db924cf7c 8785 }
wolfSSL 15:117db924cf7c 8786 #endif
wolfSSL 15:117db924cf7c 8787
wolfSSL 15:117db924cf7c 8788 do {
wolfSSL 15:117db924cf7c 8789 #if defined(WOLFSSL_ASYNC_CRYPT)
wolfSSL 15:117db924cf7c 8790 ret = wc_AsyncWait(ret, &privKey->asyncDev, WC_ASYNC_FLAG_CALL_AGAIN);
wolfSSL 15:117db924cf7c 8791 if (ret != 0)
wolfSSL 15:117db924cf7c 8792 break;
wolfSSL 15:117db924cf7c 8793 #endif
wolfSSL 15:117db924cf7c 8794 ret = wc_ecc_shared_secret(privKey, pubKey, sharedSecret, &sharedSz);
wolfSSL 15:117db924cf7c 8795 } while (ret == WC_PENDING_E);
wolfSSL 15:117db924cf7c 8796 if (ret == 0) {
wolfSSL 15:117db924cf7c 8797 switch (ctx->kdfAlgo) {
wolfSSL 15:117db924cf7c 8798 case ecHKDF_SHA256 :
wolfSSL 15:117db924cf7c 8799 ret = wc_HKDF(WC_SHA256, sharedSecret, sharedSz, ctx->kdfSalt,
wolfSSL 15:117db924cf7c 8800 ctx->kdfSaltSz, ctx->kdfInfo, ctx->kdfInfoSz,
wolfSSL 15:117db924cf7c 8801 keys, keysLen);
wolfSSL 15:117db924cf7c 8802 break;
wolfSSL 15:117db924cf7c 8803
wolfSSL 15:117db924cf7c 8804 default:
wolfSSL 15:117db924cf7c 8805 ret = BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 8806 break;
wolfSSL 15:117db924cf7c 8807 }
wolfSSL 15:117db924cf7c 8808 }
wolfSSL 15:117db924cf7c 8809
wolfSSL 15:117db924cf7c 8810 if (ret == 0) {
wolfSSL 15:117db924cf7c 8811 encKey = keys + offset;
wolfSSL 15:117db924cf7c 8812 encIv = encKey + encKeySz;
wolfSSL 15:117db924cf7c 8813 macKey = encKey + encKeySz + ivSz;
wolfSSL 15:117db924cf7c 8814
wolfSSL 15:117db924cf7c 8815 switch (ctx->encAlgo) {
wolfSSL 15:117db924cf7c 8816 case ecAES_128_CBC:
wolfSSL 15:117db924cf7c 8817 {
wolfSSL 15:117db924cf7c 8818 Aes aes;
wolfSSL 15:117db924cf7c 8819 ret = wc_AesSetKey(&aes, encKey, KEY_SIZE_128, encIv,
wolfSSL 15:117db924cf7c 8820 AES_ENCRYPTION);
wolfSSL 15:117db924cf7c 8821 if (ret != 0)
wolfSSL 15:117db924cf7c 8822 break;
wolfSSL 15:117db924cf7c 8823 ret = wc_AesCbcEncrypt(&aes, out, msg, msgSz);
wolfSSL 15:117db924cf7c 8824 #if defined(WOLFSSL_ASYNC_CRYPT)
wolfSSL 15:117db924cf7c 8825 ret = wc_AsyncWait(ret, &aes.asyncDev, WC_ASYNC_FLAG_NONE);
wolfSSL 15:117db924cf7c 8826 #endif
wolfSSL 15:117db924cf7c 8827 }
wolfSSL 15:117db924cf7c 8828 break;
wolfSSL 15:117db924cf7c 8829
wolfSSL 15:117db924cf7c 8830 default:
wolfSSL 15:117db924cf7c 8831 ret = BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 8832 break;
wolfSSL 15:117db924cf7c 8833 }
wolfSSL 15:117db924cf7c 8834 }
wolfSSL 15:117db924cf7c 8835
wolfSSL 15:117db924cf7c 8836 if (ret == 0) {
wolfSSL 15:117db924cf7c 8837 switch (ctx->macAlgo) {
wolfSSL 15:117db924cf7c 8838 case ecHMAC_SHA256:
wolfSSL 15:117db924cf7c 8839 {
wolfSSL 15:117db924cf7c 8840 Hmac hmac;
wolfSSL 15:117db924cf7c 8841 ret = wc_HmacInit(&hmac, NULL, INVALID_DEVID);
wolfSSL 15:117db924cf7c 8842 if (ret == 0) {
wolfSSL 15:117db924cf7c 8843 ret = wc_HmacSetKey(&hmac, WC_SHA256, macKey, WC_SHA256_DIGEST_SIZE);
wolfSSL 15:117db924cf7c 8844 if (ret == 0)
wolfSSL 15:117db924cf7c 8845 ret = wc_HmacUpdate(&hmac, out, msgSz);
wolfSSL 15:117db924cf7c 8846 if (ret == 0)
wolfSSL 15:117db924cf7c 8847 ret = wc_HmacUpdate(&hmac, ctx->macSalt, ctx->macSaltSz);
wolfSSL 15:117db924cf7c 8848 if (ret == 0)
wolfSSL 15:117db924cf7c 8849 ret = wc_HmacFinal(&hmac, out+msgSz);
wolfSSL 15:117db924cf7c 8850 wc_HmacFree(&hmac);
wolfSSL 15:117db924cf7c 8851 }
wolfSSL 15:117db924cf7c 8852 }
wolfSSL 15:117db924cf7c 8853 break;
wolfSSL 15:117db924cf7c 8854
wolfSSL 15:117db924cf7c 8855 default:
wolfSSL 15:117db924cf7c 8856 ret = BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 8857 break;
wolfSSL 15:117db924cf7c 8858 }
wolfSSL 15:117db924cf7c 8859 }
wolfSSL 15:117db924cf7c 8860
wolfSSL 15:117db924cf7c 8861 if (ret == 0)
wolfSSL 15:117db924cf7c 8862 *outSz = msgSz + digestSz;
wolfSSL 15:117db924cf7c 8863
wolfSSL 15:117db924cf7c 8864 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 8865 XFREE(sharedSecret, NULL, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 8866 XFREE(keys, NULL, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 8867 #endif
wolfSSL 15:117db924cf7c 8868
wolfSSL 15:117db924cf7c 8869 return ret;
wolfSSL 15:117db924cf7c 8870 }
wolfSSL 15:117db924cf7c 8871
wolfSSL 15:117db924cf7c 8872
wolfSSL 15:117db924cf7c 8873 /* ecc decrypt with shared secret run through kdf
wolfSSL 15:117db924cf7c 8874 ctx holds non default algos and inputs
wolfSSL 15:117db924cf7c 8875 return 0 on success */
wolfSSL 15:117db924cf7c 8876 int wc_ecc_decrypt(ecc_key* privKey, ecc_key* pubKey, const byte* msg,
wolfSSL 15:117db924cf7c 8877 word32 msgSz, byte* out, word32* outSz, ecEncCtx* ctx)
wolfSSL 15:117db924cf7c 8878 {
wolfSSL 15:117db924cf7c 8879 int ret = 0;
wolfSSL 15:117db924cf7c 8880 word32 blockSz;
wolfSSL 15:117db924cf7c 8881 word32 digestSz;
wolfSSL 15:117db924cf7c 8882 ecEncCtx localCtx;
wolfSSL 15:117db924cf7c 8883 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 8884 byte* sharedSecret;
wolfSSL 15:117db924cf7c 8885 byte* keys;
wolfSSL 15:117db924cf7c 8886 #else
wolfSSL 15:117db924cf7c 8887 byte sharedSecret[ECC_MAXSIZE]; /* 521 max size */
wolfSSL 15:117db924cf7c 8888 byte keys[ECC_BUFSIZE]; /* max size */
wolfSSL 15:117db924cf7c 8889 #endif
wolfSSL 15:117db924cf7c 8890 word32 sharedSz = ECC_MAXSIZE;
wolfSSL 15:117db924cf7c 8891 int keysLen;
wolfSSL 15:117db924cf7c 8892 int encKeySz;
wolfSSL 15:117db924cf7c 8893 int ivSz;
wolfSSL 15:117db924cf7c 8894 int offset = 0; /* in case using msg exchange */
wolfSSL 15:117db924cf7c 8895 byte* encKey;
wolfSSL 15:117db924cf7c 8896 byte* encIv;
wolfSSL 15:117db924cf7c 8897 byte* macKey;
wolfSSL 15:117db924cf7c 8898
wolfSSL 15:117db924cf7c 8899 if (privKey == NULL || pubKey == NULL || msg == NULL || out == NULL ||
wolfSSL 15:117db924cf7c 8900 outSz == NULL)
wolfSSL 15:117db924cf7c 8901 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 8902
wolfSSL 15:117db924cf7c 8903 if (ctx == NULL) { /* use defaults */
wolfSSL 15:117db924cf7c 8904 ecc_ctx_init(&localCtx, 0);
wolfSSL 15:117db924cf7c 8905 ctx = &localCtx;
wolfSSL 15:117db924cf7c 8906 }
wolfSSL 15:117db924cf7c 8907
wolfSSL 15:117db924cf7c 8908 ret = ecc_get_key_sizes(ctx, &encKeySz, &ivSz, &keysLen, &digestSz,
wolfSSL 15:117db924cf7c 8909 &blockSz);
wolfSSL 15:117db924cf7c 8910 if (ret != 0)
wolfSSL 15:117db924cf7c 8911 return ret;
wolfSSL 15:117db924cf7c 8912
wolfSSL 15:117db924cf7c 8913 if (ctx->protocol == REQ_RESP_CLIENT) {
wolfSSL 15:117db924cf7c 8914 offset = keysLen;
wolfSSL 15:117db924cf7c 8915 keysLen *= 2;
wolfSSL 15:117db924cf7c 8916
wolfSSL 15:117db924cf7c 8917 if (ctx->cliSt != ecCLI_SENT_REQ)
wolfSSL 15:117db924cf7c 8918 return BAD_STATE_E;
wolfSSL 15:117db924cf7c 8919
wolfSSL 15:117db924cf7c 8920 ctx->cliSt = ecSRV_BAD_STATE; /* we're done no more ops allowed */
wolfSSL 15:117db924cf7c 8921 }
wolfSSL 15:117db924cf7c 8922 else if (ctx->protocol == REQ_RESP_SERVER) {
wolfSSL 15:117db924cf7c 8923 if (ctx->srvSt != ecSRV_SALT_SET)
wolfSSL 15:117db924cf7c 8924 return BAD_STATE_E;
wolfSSL 15:117db924cf7c 8925
wolfSSL 15:117db924cf7c 8926 ctx->srvSt = ecSRV_RECV_REQ; /* only do this once */
wolfSSL 15:117db924cf7c 8927 }
wolfSSL 15:117db924cf7c 8928
wolfSSL 15:117db924cf7c 8929 if (keysLen > ECC_BUFSIZE) /* keys size */
wolfSSL 15:117db924cf7c 8930 return BUFFER_E;
wolfSSL 15:117db924cf7c 8931
wolfSSL 15:117db924cf7c 8932 if ( ((msgSz-digestSz) % blockSz) != 0)
wolfSSL 15:117db924cf7c 8933 return BAD_PADDING_E;
wolfSSL 15:117db924cf7c 8934
wolfSSL 15:117db924cf7c 8935 if (*outSz < (msgSz - digestSz))
wolfSSL 15:117db924cf7c 8936 return BUFFER_E;
wolfSSL 15:117db924cf7c 8937
wolfSSL 15:117db924cf7c 8938 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 8939 sharedSecret = (byte*)XMALLOC(ECC_MAXSIZE, NULL, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 8940 if (sharedSecret == NULL)
wolfSSL 15:117db924cf7c 8941 return MEMORY_E;
wolfSSL 15:117db924cf7c 8942
wolfSSL 15:117db924cf7c 8943 keys = (byte*)XMALLOC(ECC_BUFSIZE, NULL, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 8944 if (keys == NULL) {
wolfSSL 15:117db924cf7c 8945 XFREE(sharedSecret, NULL, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 8946 return MEMORY_E;
wolfSSL 15:117db924cf7c 8947 }
wolfSSL 15:117db924cf7c 8948 #endif
wolfSSL 15:117db924cf7c 8949
wolfSSL 15:117db924cf7c 8950 do {
wolfSSL 15:117db924cf7c 8951 #if defined(WOLFSSL_ASYNC_CRYPT)
wolfSSL 15:117db924cf7c 8952 ret = wc_AsyncWait(ret, &privKey->asyncDev, WC_ASYNC_FLAG_CALL_AGAIN);
wolfSSL 15:117db924cf7c 8953 if (ret != 0)
wolfSSL 15:117db924cf7c 8954 break;
wolfSSL 15:117db924cf7c 8955 #endif
wolfSSL 15:117db924cf7c 8956 ret = wc_ecc_shared_secret(privKey, pubKey, sharedSecret, &sharedSz);
wolfSSL 15:117db924cf7c 8957 } while (ret == WC_PENDING_E);
wolfSSL 15:117db924cf7c 8958 if (ret == 0) {
wolfSSL 15:117db924cf7c 8959 switch (ctx->kdfAlgo) {
wolfSSL 15:117db924cf7c 8960 case ecHKDF_SHA256 :
wolfSSL 15:117db924cf7c 8961 ret = wc_HKDF(WC_SHA256, sharedSecret, sharedSz, ctx->kdfSalt,
wolfSSL 15:117db924cf7c 8962 ctx->kdfSaltSz, ctx->kdfInfo, ctx->kdfInfoSz,
wolfSSL 15:117db924cf7c 8963 keys, keysLen);
wolfSSL 15:117db924cf7c 8964 break;
wolfSSL 15:117db924cf7c 8965
wolfSSL 15:117db924cf7c 8966 default:
wolfSSL 15:117db924cf7c 8967 ret = BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 8968 break;
wolfSSL 15:117db924cf7c 8969 }
wolfSSL 15:117db924cf7c 8970 }
wolfSSL 15:117db924cf7c 8971
wolfSSL 15:117db924cf7c 8972 if (ret == 0) {
wolfSSL 15:117db924cf7c 8973 encKey = keys + offset;
wolfSSL 15:117db924cf7c 8974 encIv = encKey + encKeySz;
wolfSSL 15:117db924cf7c 8975 macKey = encKey + encKeySz + ivSz;
wolfSSL 15:117db924cf7c 8976
wolfSSL 15:117db924cf7c 8977 switch (ctx->macAlgo) {
wolfSSL 15:117db924cf7c 8978 case ecHMAC_SHA256:
wolfSSL 15:117db924cf7c 8979 {
wolfSSL 15:117db924cf7c 8980 byte verify[WC_SHA256_DIGEST_SIZE];
wolfSSL 15:117db924cf7c 8981 Hmac hmac;
wolfSSL 15:117db924cf7c 8982
wolfSSL 15:117db924cf7c 8983 ret = wc_HmacInit(&hmac, NULL, INVALID_DEVID);
wolfSSL 15:117db924cf7c 8984 if (ret == 0) {
wolfSSL 15:117db924cf7c 8985 ret = wc_HmacSetKey(&hmac, WC_SHA256, macKey, WC_SHA256_DIGEST_SIZE);
wolfSSL 15:117db924cf7c 8986 if (ret == 0)
wolfSSL 15:117db924cf7c 8987 ret = wc_HmacUpdate(&hmac, msg, msgSz-digestSz);
wolfSSL 15:117db924cf7c 8988 if (ret == 0)
wolfSSL 15:117db924cf7c 8989 ret = wc_HmacUpdate(&hmac, ctx->macSalt, ctx->macSaltSz);
wolfSSL 15:117db924cf7c 8990 if (ret == 0)
wolfSSL 15:117db924cf7c 8991 ret = wc_HmacFinal(&hmac, verify);
wolfSSL 15:117db924cf7c 8992 if (ret == 0) {
wolfSSL 15:117db924cf7c 8993 if (XMEMCMP(verify, msg + msgSz - digestSz, digestSz) != 0)
wolfSSL 15:117db924cf7c 8994 ret = -1;
wolfSSL 15:117db924cf7c 8995 }
wolfSSL 15:117db924cf7c 8996
wolfSSL 15:117db924cf7c 8997 wc_HmacFree(&hmac);
wolfSSL 15:117db924cf7c 8998 }
wolfSSL 15:117db924cf7c 8999 break;
wolfSSL 15:117db924cf7c 9000 }
wolfSSL 15:117db924cf7c 9001
wolfSSL 15:117db924cf7c 9002 default:
wolfSSL 15:117db924cf7c 9003 ret = BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 9004 break;
wolfSSL 15:117db924cf7c 9005 }
wolfSSL 15:117db924cf7c 9006 }
wolfSSL 15:117db924cf7c 9007
wolfSSL 15:117db924cf7c 9008 if (ret == 0) {
wolfSSL 15:117db924cf7c 9009 switch (ctx->encAlgo) {
wolfSSL 15:117db924cf7c 9010 #ifdef HAVE_AES_CBC
wolfSSL 15:117db924cf7c 9011 case ecAES_128_CBC:
wolfSSL 15:117db924cf7c 9012 {
wolfSSL 15:117db924cf7c 9013 Aes aes;
wolfSSL 15:117db924cf7c 9014 ret = wc_AesSetKey(&aes, encKey, KEY_SIZE_128, encIv,
wolfSSL 15:117db924cf7c 9015 AES_DECRYPTION);
wolfSSL 15:117db924cf7c 9016 if (ret != 0)
wolfSSL 15:117db924cf7c 9017 break;
wolfSSL 15:117db924cf7c 9018 ret = wc_AesCbcDecrypt(&aes, out, msg, msgSz-digestSz);
wolfSSL 15:117db924cf7c 9019 #if defined(WOLFSSL_ASYNC_CRYPT)
wolfSSL 15:117db924cf7c 9020 ret = wc_AsyncWait(ret, &aes.asyncDev, WC_ASYNC_FLAG_NONE);
wolfSSL 15:117db924cf7c 9021 #endif
wolfSSL 15:117db924cf7c 9022 }
wolfSSL 15:117db924cf7c 9023 break;
wolfSSL 15:117db924cf7c 9024 #endif
wolfSSL 15:117db924cf7c 9025 default:
wolfSSL 15:117db924cf7c 9026 ret = BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 9027 break;
wolfSSL 15:117db924cf7c 9028 }
wolfSSL 15:117db924cf7c 9029 }
wolfSSL 15:117db924cf7c 9030
wolfSSL 15:117db924cf7c 9031 if (ret == 0)
wolfSSL 15:117db924cf7c 9032 *outSz = msgSz - digestSz;
wolfSSL 15:117db924cf7c 9033
wolfSSL 15:117db924cf7c 9034 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 9035 XFREE(sharedSecret, NULL, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 9036 XFREE(keys, NULL, DYNAMIC_TYPE_ECC_BUFFER);
wolfSSL 15:117db924cf7c 9037 #endif
wolfSSL 15:117db924cf7c 9038
wolfSSL 15:117db924cf7c 9039 return ret;
wolfSSL 15:117db924cf7c 9040 }
wolfSSL 15:117db924cf7c 9041
wolfSSL 15:117db924cf7c 9042
wolfSSL 15:117db924cf7c 9043 #endif /* HAVE_ECC_ENCRYPT */
wolfSSL 15:117db924cf7c 9044
wolfSSL 15:117db924cf7c 9045
wolfSSL 15:117db924cf7c 9046 #ifdef HAVE_COMP_KEY
wolfSSL 15:117db924cf7c 9047 #ifndef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 9048
wolfSSL 15:117db924cf7c 9049 #ifndef WOLFSSL_SP_MATH
wolfSSL 15:117db924cf7c 9050 int do_mp_jacobi(mp_int* a, mp_int* n, int* c);
wolfSSL 15:117db924cf7c 9051
wolfSSL 15:117db924cf7c 9052 int do_mp_jacobi(mp_int* a, mp_int* n, int* c)
wolfSSL 15:117db924cf7c 9053 {
wolfSSL 15:117db924cf7c 9054 int k, s, res;
wolfSSL 15:117db924cf7c 9055 int r = 0; /* initialize to help static analysis out */
wolfSSL 15:117db924cf7c 9056 mp_digit residue;
wolfSSL 15:117db924cf7c 9057
wolfSSL 15:117db924cf7c 9058 /* if a < 0 return MP_VAL */
wolfSSL 15:117db924cf7c 9059 if (mp_isneg(a) == MP_YES) {
wolfSSL 15:117db924cf7c 9060 return MP_VAL;
wolfSSL 15:117db924cf7c 9061 }
wolfSSL 15:117db924cf7c 9062
wolfSSL 15:117db924cf7c 9063 /* if n <= 0 return MP_VAL */
wolfSSL 15:117db924cf7c 9064 if (mp_cmp_d(n, 0) != MP_GT) {
wolfSSL 15:117db924cf7c 9065 return MP_VAL;
wolfSSL 15:117db924cf7c 9066 }
wolfSSL 15:117db924cf7c 9067
wolfSSL 15:117db924cf7c 9068 /* step 1. handle case of a == 0 */
wolfSSL 15:117db924cf7c 9069 if (mp_iszero (a) == MP_YES) {
wolfSSL 15:117db924cf7c 9070 /* special case of a == 0 and n == 1 */
wolfSSL 15:117db924cf7c 9071 if (mp_cmp_d (n, 1) == MP_EQ) {
wolfSSL 15:117db924cf7c 9072 *c = 1;
wolfSSL 15:117db924cf7c 9073 } else {
wolfSSL 15:117db924cf7c 9074 *c = 0;
wolfSSL 15:117db924cf7c 9075 }
wolfSSL 15:117db924cf7c 9076 return MP_OKAY;
wolfSSL 15:117db924cf7c 9077 }
wolfSSL 15:117db924cf7c 9078
wolfSSL 15:117db924cf7c 9079 /* step 2. if a == 1, return 1 */
wolfSSL 15:117db924cf7c 9080 if (mp_cmp_d (a, 1) == MP_EQ) {
wolfSSL 15:117db924cf7c 9081 *c = 1;
wolfSSL 15:117db924cf7c 9082 return MP_OKAY;
wolfSSL 15:117db924cf7c 9083 }
wolfSSL 15:117db924cf7c 9084
wolfSSL 15:117db924cf7c 9085 /* default */
wolfSSL 15:117db924cf7c 9086 s = 0;
wolfSSL 15:117db924cf7c 9087
wolfSSL 15:117db924cf7c 9088 /* divide out larger power of two */
wolfSSL 15:117db924cf7c 9089 k = mp_cnt_lsb(a);
wolfSSL 15:117db924cf7c 9090 res = mp_div_2d(a, k, a, NULL);
wolfSSL 15:117db924cf7c 9091
wolfSSL 15:117db924cf7c 9092 if (res == MP_OKAY) {
wolfSSL 15:117db924cf7c 9093 /* step 4. if e is even set s=1 */
wolfSSL 15:117db924cf7c 9094 if ((k & 1) == 0) {
wolfSSL 15:117db924cf7c 9095 s = 1;
wolfSSL 15:117db924cf7c 9096 } else {
wolfSSL 15:117db924cf7c 9097 /* else set s=1 if p = 1/7 (mod 8) or s=-1 if p = 3/5 (mod 8) */
wolfSSL 15:117db924cf7c 9098 residue = n->dp[0] & 7;
wolfSSL 15:117db924cf7c 9099
wolfSSL 15:117db924cf7c 9100 if (residue == 1 || residue == 7) {
wolfSSL 15:117db924cf7c 9101 s = 1;
wolfSSL 15:117db924cf7c 9102 } else if (residue == 3 || residue == 5) {
wolfSSL 15:117db924cf7c 9103 s = -1;
wolfSSL 15:117db924cf7c 9104 }
wolfSSL 15:117db924cf7c 9105 }
wolfSSL 15:117db924cf7c 9106
wolfSSL 15:117db924cf7c 9107 /* step 5. if p == 3 (mod 4) *and* a == 3 (mod 4) then s = -s */
wolfSSL 15:117db924cf7c 9108 if ( ((n->dp[0] & 3) == 3) && ((a->dp[0] & 3) == 3)) {
wolfSSL 15:117db924cf7c 9109 s = -s;
wolfSSL 15:117db924cf7c 9110 }
wolfSSL 15:117db924cf7c 9111 }
wolfSSL 15:117db924cf7c 9112
wolfSSL 15:117db924cf7c 9113 if (res == MP_OKAY) {
wolfSSL 15:117db924cf7c 9114 /* if a == 1 we're done */
wolfSSL 15:117db924cf7c 9115 if (mp_cmp_d(a, 1) == MP_EQ) {
wolfSSL 15:117db924cf7c 9116 *c = s;
wolfSSL 15:117db924cf7c 9117 } else {
wolfSSL 15:117db924cf7c 9118 /* n1 = n mod a */
wolfSSL 15:117db924cf7c 9119 res = mp_mod (n, a, n);
wolfSSL 15:117db924cf7c 9120 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9121 res = do_mp_jacobi(n, a, &r);
wolfSSL 15:117db924cf7c 9122
wolfSSL 15:117db924cf7c 9123 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9124 *c = s * r;
wolfSSL 15:117db924cf7c 9125 }
wolfSSL 15:117db924cf7c 9126 }
wolfSSL 15:117db924cf7c 9127
wolfSSL 15:117db924cf7c 9128 return res;
wolfSSL 15:117db924cf7c 9129 }
wolfSSL 15:117db924cf7c 9130
wolfSSL 15:117db924cf7c 9131
wolfSSL 15:117db924cf7c 9132 /* computes the jacobi c = (a | n) (or Legendre if n is prime)
wolfSSL 15:117db924cf7c 9133 * HAC pp. 73 Algorithm 2.149
wolfSSL 15:117db924cf7c 9134 * HAC is wrong here, as the special case of (0 | 1) is not
wolfSSL 15:117db924cf7c 9135 * handled correctly.
wolfSSL 15:117db924cf7c 9136 */
wolfSSL 15:117db924cf7c 9137 int mp_jacobi(mp_int* a, mp_int* n, int* c)
wolfSSL 15:117db924cf7c 9138 {
wolfSSL 15:117db924cf7c 9139 mp_int a1, n1;
wolfSSL 15:117db924cf7c 9140 int res;
wolfSSL 15:117db924cf7c 9141
wolfSSL 15:117db924cf7c 9142 /* step 3. write a = a1 * 2**k */
wolfSSL 15:117db924cf7c 9143 if ((res = mp_init_multi(&a1, &n1, NULL, NULL, NULL, NULL)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 9144 return res;
wolfSSL 15:117db924cf7c 9145 }
wolfSSL 15:117db924cf7c 9146
wolfSSL 15:117db924cf7c 9147 if ((res = mp_copy(a, &a1)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 9148 goto done;
wolfSSL 15:117db924cf7c 9149 }
wolfSSL 15:117db924cf7c 9150
wolfSSL 15:117db924cf7c 9151 if ((res = mp_copy(n, &n1)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 9152 goto done;
wolfSSL 15:117db924cf7c 9153 }
wolfSSL 15:117db924cf7c 9154
wolfSSL 15:117db924cf7c 9155 res = do_mp_jacobi(&a1, &n1, c);
wolfSSL 15:117db924cf7c 9156
wolfSSL 15:117db924cf7c 9157 done:
wolfSSL 15:117db924cf7c 9158 /* cleanup */
wolfSSL 15:117db924cf7c 9159 mp_clear(&n1);
wolfSSL 15:117db924cf7c 9160 mp_clear(&a1);
wolfSSL 15:117db924cf7c 9161
wolfSSL 15:117db924cf7c 9162 return res;
wolfSSL 15:117db924cf7c 9163 }
wolfSSL 15:117db924cf7c 9164
wolfSSL 15:117db924cf7c 9165
wolfSSL 15:117db924cf7c 9166 /* Solves the modular equation x^2 = n (mod p)
wolfSSL 15:117db924cf7c 9167 * where prime number is greater than 2 (odd prime).
wolfSSL 15:117db924cf7c 9168 * The result is returned in the third argument x
wolfSSL 15:117db924cf7c 9169 * the function returns MP_OKAY on success, MP_VAL or another error on failure
wolfSSL 15:117db924cf7c 9170 */
wolfSSL 15:117db924cf7c 9171 int mp_sqrtmod_prime(mp_int* n, mp_int* prime, mp_int* ret)
wolfSSL 15:117db924cf7c 9172 {
wolfSSL 15:117db924cf7c 9173 #ifdef SQRTMOD_USE_MOD_EXP
wolfSSL 15:117db924cf7c 9174 int res;
wolfSSL 15:117db924cf7c 9175
wolfSSL 15:117db924cf7c 9176 mp_int e;
wolfSSL 15:117db924cf7c 9177
wolfSSL 15:117db924cf7c 9178 res = mp_init(&e);
wolfSSL 15:117db924cf7c 9179 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9180 res = mp_add_d(prime, 1, &e);
wolfSSL 15:117db924cf7c 9181 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9182 res = mp_div_2d(&e, 2, &e, NULL);
wolfSSL 15:117db924cf7c 9183 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9184 res = mp_exptmod(n, &e, prime, ret);
wolfSSL 15:117db924cf7c 9185
wolfSSL 15:117db924cf7c 9186 mp_clear(&e);
wolfSSL 15:117db924cf7c 9187
wolfSSL 15:117db924cf7c 9188 return res;
wolfSSL 15:117db924cf7c 9189 #else
wolfSSL 15:117db924cf7c 9190 int res, legendre, done = 0;
wolfSSL 15:117db924cf7c 9191 mp_int t1, C, Q, S, Z, M, T, R, two;
wolfSSL 15:117db924cf7c 9192 mp_digit i;
wolfSSL 15:117db924cf7c 9193
wolfSSL 15:117db924cf7c 9194 /* first handle the simple cases n = 0 or n = 1 */
wolfSSL 15:117db924cf7c 9195 if (mp_cmp_d(n, 0) == MP_EQ) {
wolfSSL 15:117db924cf7c 9196 mp_zero(ret);
wolfSSL 15:117db924cf7c 9197 return MP_OKAY;
wolfSSL 15:117db924cf7c 9198 }
wolfSSL 15:117db924cf7c 9199 if (mp_cmp_d(n, 1) == MP_EQ) {
wolfSSL 15:117db924cf7c 9200 return mp_set(ret, 1);
wolfSSL 15:117db924cf7c 9201 }
wolfSSL 15:117db924cf7c 9202
wolfSSL 15:117db924cf7c 9203 /* prime must be odd */
wolfSSL 15:117db924cf7c 9204 if (mp_cmp_d(prime, 2) == MP_EQ) {
wolfSSL 15:117db924cf7c 9205 return MP_VAL;
wolfSSL 15:117db924cf7c 9206 }
wolfSSL 15:117db924cf7c 9207
wolfSSL 15:117db924cf7c 9208 /* is quadratic non-residue mod prime */
wolfSSL 15:117db924cf7c 9209 if ((res = mp_jacobi(n, prime, &legendre)) != MP_OKAY) {
wolfSSL 15:117db924cf7c 9210 return res;
wolfSSL 15:117db924cf7c 9211 }
wolfSSL 15:117db924cf7c 9212 if (legendre == -1) {
wolfSSL 15:117db924cf7c 9213 return MP_VAL;
wolfSSL 15:117db924cf7c 9214 }
wolfSSL 15:117db924cf7c 9215
wolfSSL 15:117db924cf7c 9216 if ((res = mp_init_multi(&t1, &C, &Q, &S, &Z, &M)) != MP_OKAY)
wolfSSL 15:117db924cf7c 9217 return res;
wolfSSL 15:117db924cf7c 9218
wolfSSL 15:117db924cf7c 9219 if ((res = mp_init_multi(&T, &R, &two, NULL, NULL, NULL))
wolfSSL 15:117db924cf7c 9220 != MP_OKAY) {
wolfSSL 15:117db924cf7c 9221 mp_clear(&t1); mp_clear(&C); mp_clear(&Q); mp_clear(&S); mp_clear(&Z);
wolfSSL 15:117db924cf7c 9222 mp_clear(&M);
wolfSSL 15:117db924cf7c 9223 return res;
wolfSSL 15:117db924cf7c 9224 }
wolfSSL 15:117db924cf7c 9225
wolfSSL 15:117db924cf7c 9226 /* SPECIAL CASE: if prime mod 4 == 3
wolfSSL 15:117db924cf7c 9227 * compute directly: res = n^(prime+1)/4 mod prime
wolfSSL 15:117db924cf7c 9228 * Handbook of Applied Cryptography algorithm 3.36
wolfSSL 15:117db924cf7c 9229 */
wolfSSL 15:117db924cf7c 9230 res = mp_mod_d(prime, 4, &i);
wolfSSL 15:117db924cf7c 9231 if (res == MP_OKAY && i == 3) {
wolfSSL 15:117db924cf7c 9232 res = mp_add_d(prime, 1, &t1);
wolfSSL 15:117db924cf7c 9233
wolfSSL 15:117db924cf7c 9234 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9235 res = mp_div_2(&t1, &t1);
wolfSSL 15:117db924cf7c 9236 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9237 res = mp_div_2(&t1, &t1);
wolfSSL 15:117db924cf7c 9238 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9239 res = mp_exptmod(n, &t1, prime, ret);
wolfSSL 15:117db924cf7c 9240
wolfSSL 15:117db924cf7c 9241 done = 1;
wolfSSL 15:117db924cf7c 9242 }
wolfSSL 15:117db924cf7c 9243
wolfSSL 15:117db924cf7c 9244 /* NOW: TonelliShanks algorithm */
wolfSSL 15:117db924cf7c 9245 if (res == MP_OKAY && done == 0) {
wolfSSL 15:117db924cf7c 9246
wolfSSL 15:117db924cf7c 9247 /* factor out powers of 2 from prime-1, defining Q and S
wolfSSL 15:117db924cf7c 9248 * as: prime-1 = Q*2^S */
wolfSSL 15:117db924cf7c 9249 /* Q = prime - 1 */
wolfSSL 15:117db924cf7c 9250 res = mp_copy(prime, &Q);
wolfSSL 15:117db924cf7c 9251 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9252 res = mp_sub_d(&Q, 1, &Q);
wolfSSL 15:117db924cf7c 9253
wolfSSL 15:117db924cf7c 9254 /* S = 0 */
wolfSSL 15:117db924cf7c 9255 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9256 mp_zero(&S);
wolfSSL 15:117db924cf7c 9257
wolfSSL 15:117db924cf7c 9258 while (res == MP_OKAY && mp_iseven(&Q) == MP_YES) {
wolfSSL 15:117db924cf7c 9259 /* Q = Q / 2 */
wolfSSL 15:117db924cf7c 9260 res = mp_div_2(&Q, &Q);
wolfSSL 15:117db924cf7c 9261
wolfSSL 15:117db924cf7c 9262 /* S = S + 1 */
wolfSSL 15:117db924cf7c 9263 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9264 res = mp_add_d(&S, 1, &S);
wolfSSL 15:117db924cf7c 9265 }
wolfSSL 15:117db924cf7c 9266
wolfSSL 15:117db924cf7c 9267 /* find a Z such that the Legendre symbol (Z|prime) == -1 */
wolfSSL 15:117db924cf7c 9268 /* Z = 2 */
wolfSSL 15:117db924cf7c 9269 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9270 res = mp_set_int(&Z, 2);
wolfSSL 15:117db924cf7c 9271
wolfSSL 15:117db924cf7c 9272 while (res == MP_OKAY) {
wolfSSL 15:117db924cf7c 9273 res = mp_jacobi(&Z, prime, &legendre);
wolfSSL 15:117db924cf7c 9274 if (res == MP_OKAY && legendre == -1)
wolfSSL 15:117db924cf7c 9275 break;
wolfSSL 15:117db924cf7c 9276
wolfSSL 15:117db924cf7c 9277 /* Z = Z + 1 */
wolfSSL 15:117db924cf7c 9278 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9279 res = mp_add_d(&Z, 1, &Z);
wolfSSL 15:117db924cf7c 9280 }
wolfSSL 15:117db924cf7c 9281
wolfSSL 15:117db924cf7c 9282 /* C = Z ^ Q mod prime */
wolfSSL 15:117db924cf7c 9283 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9284 res = mp_exptmod(&Z, &Q, prime, &C);
wolfSSL 15:117db924cf7c 9285
wolfSSL 15:117db924cf7c 9286 /* t1 = (Q + 1) / 2 */
wolfSSL 15:117db924cf7c 9287 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9288 res = mp_add_d(&Q, 1, &t1);
wolfSSL 15:117db924cf7c 9289 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9290 res = mp_div_2(&t1, &t1);
wolfSSL 15:117db924cf7c 9291
wolfSSL 15:117db924cf7c 9292 /* R = n ^ ((Q + 1) / 2) mod prime */
wolfSSL 15:117db924cf7c 9293 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9294 res = mp_exptmod(n, &t1, prime, &R);
wolfSSL 15:117db924cf7c 9295
wolfSSL 15:117db924cf7c 9296 /* T = n ^ Q mod prime */
wolfSSL 15:117db924cf7c 9297 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9298 res = mp_exptmod(n, &Q, prime, &T);
wolfSSL 15:117db924cf7c 9299
wolfSSL 15:117db924cf7c 9300 /* M = S */
wolfSSL 15:117db924cf7c 9301 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9302 res = mp_copy(&S, &M);
wolfSSL 15:117db924cf7c 9303
wolfSSL 15:117db924cf7c 9304 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9305 res = mp_set_int(&two, 2);
wolfSSL 15:117db924cf7c 9306
wolfSSL 15:117db924cf7c 9307 while (res == MP_OKAY && done == 0) {
wolfSSL 15:117db924cf7c 9308 res = mp_copy(&T, &t1);
wolfSSL 15:117db924cf7c 9309
wolfSSL 15:117db924cf7c 9310 /* reduce to 1 and count */
wolfSSL 15:117db924cf7c 9311 i = 0;
wolfSSL 15:117db924cf7c 9312 while (res == MP_OKAY) {
wolfSSL 15:117db924cf7c 9313 if (mp_cmp_d(&t1, 1) == MP_EQ)
wolfSSL 15:117db924cf7c 9314 break;
wolfSSL 15:117db924cf7c 9315 res = mp_exptmod(&t1, &two, prime, &t1);
wolfSSL 15:117db924cf7c 9316 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9317 i++;
wolfSSL 15:117db924cf7c 9318 }
wolfSSL 15:117db924cf7c 9319 if (res == MP_OKAY && i == 0) {
wolfSSL 15:117db924cf7c 9320 res = mp_copy(&R, ret);
wolfSSL 15:117db924cf7c 9321 done = 1;
wolfSSL 15:117db924cf7c 9322 }
wolfSSL 15:117db924cf7c 9323
wolfSSL 15:117db924cf7c 9324 if (done == 0) {
wolfSSL 15:117db924cf7c 9325 /* t1 = 2 ^ (M - i - 1) */
wolfSSL 15:117db924cf7c 9326 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9327 res = mp_sub_d(&M, i, &t1);
wolfSSL 15:117db924cf7c 9328 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9329 res = mp_sub_d(&t1, 1, &t1);
wolfSSL 15:117db924cf7c 9330 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9331 res = mp_exptmod(&two, &t1, prime, &t1);
wolfSSL 15:117db924cf7c 9332
wolfSSL 15:117db924cf7c 9333 /* t1 = C ^ (2 ^ (M - i - 1)) mod prime */
wolfSSL 15:117db924cf7c 9334 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9335 res = mp_exptmod(&C, &t1, prime, &t1);
wolfSSL 15:117db924cf7c 9336
wolfSSL 15:117db924cf7c 9337 /* C = (t1 * t1) mod prime */
wolfSSL 15:117db924cf7c 9338 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9339 res = mp_sqrmod(&t1, prime, &C);
wolfSSL 15:117db924cf7c 9340
wolfSSL 15:117db924cf7c 9341 /* R = (R * t1) mod prime */
wolfSSL 15:117db924cf7c 9342 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9343 res = mp_mulmod(&R, &t1, prime, &R);
wolfSSL 15:117db924cf7c 9344
wolfSSL 15:117db924cf7c 9345 /* T = (T * C) mod prime */
wolfSSL 15:117db924cf7c 9346 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9347 res = mp_mulmod(&T, &C, prime, &T);
wolfSSL 15:117db924cf7c 9348
wolfSSL 15:117db924cf7c 9349 /* M = i */
wolfSSL 15:117db924cf7c 9350 if (res == MP_OKAY)
wolfSSL 15:117db924cf7c 9351 res = mp_set(&M, i);
wolfSSL 15:117db924cf7c 9352 }
wolfSSL 15:117db924cf7c 9353 }
wolfSSL 15:117db924cf7c 9354 }
wolfSSL 15:117db924cf7c 9355
wolfSSL 15:117db924cf7c 9356 /* done */
wolfSSL 15:117db924cf7c 9357 mp_clear(&t1);
wolfSSL 15:117db924cf7c 9358 mp_clear(&C);
wolfSSL 15:117db924cf7c 9359 mp_clear(&Q);
wolfSSL 15:117db924cf7c 9360 mp_clear(&S);
wolfSSL 15:117db924cf7c 9361 mp_clear(&Z);
wolfSSL 15:117db924cf7c 9362 mp_clear(&M);
wolfSSL 15:117db924cf7c 9363 mp_clear(&T);
wolfSSL 15:117db924cf7c 9364 mp_clear(&R);
wolfSSL 15:117db924cf7c 9365 mp_clear(&two);
wolfSSL 15:117db924cf7c 9366
wolfSSL 15:117db924cf7c 9367 return res;
wolfSSL 15:117db924cf7c 9368 #endif
wolfSSL 15:117db924cf7c 9369 }
wolfSSL 15:117db924cf7c 9370 #endif
wolfSSL 15:117db924cf7c 9371 #endif /* !WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 9372
wolfSSL 15:117db924cf7c 9373
wolfSSL 15:117db924cf7c 9374 /* export public ECC key in ANSI X9.63 format compressed */
wolfSSL 15:117db924cf7c 9375 static int wc_ecc_export_x963_compressed(ecc_key* key, byte* out, word32* outLen)
wolfSSL 15:117db924cf7c 9376 {
wolfSSL 15:117db924cf7c 9377 word32 numlen;
wolfSSL 15:117db924cf7c 9378 int ret = MP_OKAY;
wolfSSL 15:117db924cf7c 9379
wolfSSL 15:117db924cf7c 9380 if (key == NULL || out == NULL || outLen == NULL)
wolfSSL 15:117db924cf7c 9381 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 9382
wolfSSL 15:117db924cf7c 9383 if (wc_ecc_is_valid_idx(key->idx) == 0) {
wolfSSL 15:117db924cf7c 9384 return ECC_BAD_ARG_E;
wolfSSL 15:117db924cf7c 9385 }
wolfSSL 15:117db924cf7c 9386 numlen = key->dp->size;
wolfSSL 15:117db924cf7c 9387
wolfSSL 15:117db924cf7c 9388 if (*outLen < (1 + numlen)) {
wolfSSL 15:117db924cf7c 9389 *outLen = 1 + numlen;
wolfSSL 15:117db924cf7c 9390 return BUFFER_E;
wolfSSL 15:117db924cf7c 9391 }
wolfSSL 15:117db924cf7c 9392
wolfSSL 15:117db924cf7c 9393 #ifdef WOLFSSL_ATECC508A
wolfSSL 15:117db924cf7c 9394 /* TODO: Implement equiv call to ATECC508A */
wolfSSL 15:117db924cf7c 9395 ret = BAD_COND_E;
wolfSSL 15:117db924cf7c 9396
wolfSSL 15:117db924cf7c 9397 #else
wolfSSL 15:117db924cf7c 9398
wolfSSL 15:117db924cf7c 9399 /* store first byte */
wolfSSL 15:117db924cf7c 9400 out[0] = mp_isodd(key->pubkey.y) == MP_YES ? ECC_POINT_COMP_ODD : ECC_POINT_COMP_EVEN;
wolfSSL 15:117db924cf7c 9401
wolfSSL 15:117db924cf7c 9402 /* pad and store x */
wolfSSL 15:117db924cf7c 9403 XMEMSET(out+1, 0, numlen);
wolfSSL 15:117db924cf7c 9404 ret = mp_to_unsigned_bin(key->pubkey.x,
wolfSSL 15:117db924cf7c 9405 out+1 + (numlen - mp_unsigned_bin_size(key->pubkey.x)));
wolfSSL 15:117db924cf7c 9406 *outLen = 1 + numlen;
wolfSSL 15:117db924cf7c 9407
wolfSSL 15:117db924cf7c 9408 #endif /* WOLFSSL_ATECC508A */
wolfSSL 15:117db924cf7c 9409
wolfSSL 15:117db924cf7c 9410 return ret;
wolfSSL 15:117db924cf7c 9411 }
wolfSSL 15:117db924cf7c 9412
wolfSSL 15:117db924cf7c 9413 #endif /* HAVE_COMP_KEY */
wolfSSL 15:117db924cf7c 9414
wolfSSL 15:117db924cf7c 9415
wolfSSL 15:117db924cf7c 9416 int wc_ecc_get_oid(word32 oidSum, const byte** oid, word32* oidSz)
wolfSSL 15:117db924cf7c 9417 {
wolfSSL 15:117db924cf7c 9418 int x;
wolfSSL 15:117db924cf7c 9419
wolfSSL 15:117db924cf7c 9420 if (oidSum == 0) {
wolfSSL 15:117db924cf7c 9421 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 9422 }
wolfSSL 15:117db924cf7c 9423
wolfSSL 15:117db924cf7c 9424 /* find matching OID sum (based on encoded value) */
wolfSSL 15:117db924cf7c 9425 for (x = 0; ecc_sets[x].size != 0; x++) {
wolfSSL 15:117db924cf7c 9426 if (ecc_sets[x].oidSum == oidSum) {
wolfSSL 15:117db924cf7c 9427 int ret = 0;
wolfSSL 15:117db924cf7c 9428 #ifdef HAVE_OID_ENCODING
wolfSSL 15:117db924cf7c 9429 /* check cache */
wolfSSL 15:117db924cf7c 9430 oid_cache_t* o = &ecc_oid_cache[x];
wolfSSL 15:117db924cf7c 9431 if (o->oidSz == 0) {
wolfSSL 15:117db924cf7c 9432 o->oidSz = sizeof(o->oid);
wolfSSL 15:117db924cf7c 9433 ret = EncodeObjectId(ecc_sets[x].oid, ecc_sets[x].oidSz,
wolfSSL 15:117db924cf7c 9434 o->oid, &o->oidSz);
wolfSSL 15:117db924cf7c 9435 }
wolfSSL 15:117db924cf7c 9436 if (oidSz) {
wolfSSL 15:117db924cf7c 9437 *oidSz = o->oidSz;
wolfSSL 15:117db924cf7c 9438 }
wolfSSL 15:117db924cf7c 9439 if (oid) {
wolfSSL 15:117db924cf7c 9440 *oid = o->oid;
wolfSSL 15:117db924cf7c 9441 }
wolfSSL 15:117db924cf7c 9442 #else
wolfSSL 15:117db924cf7c 9443 if (oidSz) {
wolfSSL 15:117db924cf7c 9444 *oidSz = ecc_sets[x].oidSz;
wolfSSL 15:117db924cf7c 9445 }
wolfSSL 15:117db924cf7c 9446 if (oid) {
wolfSSL 15:117db924cf7c 9447 *oid = ecc_sets[x].oid;
wolfSSL 15:117db924cf7c 9448 }
wolfSSL 15:117db924cf7c 9449 #endif
wolfSSL 15:117db924cf7c 9450 /* on success return curve id */
wolfSSL 15:117db924cf7c 9451 if (ret == 0) {
wolfSSL 15:117db924cf7c 9452 ret = ecc_sets[x].id;
wolfSSL 15:117db924cf7c 9453 }
wolfSSL 15:117db924cf7c 9454 return ret;
wolfSSL 15:117db924cf7c 9455 }
wolfSSL 15:117db924cf7c 9456 }
wolfSSL 15:117db924cf7c 9457
wolfSSL 15:117db924cf7c 9458 return NOT_COMPILED_IN;
wolfSSL 15:117db924cf7c 9459 }
wolfSSL 15:117db924cf7c 9460
wolfSSL 15:117db924cf7c 9461 #ifdef WOLFSSL_CUSTOM_CURVES
wolfSSL 15:117db924cf7c 9462 int wc_ecc_set_custom_curve(ecc_key* key, const ecc_set_type* dp)
wolfSSL 15:117db924cf7c 9463 {
wolfSSL 15:117db924cf7c 9464 if (key == NULL || dp == NULL) {
wolfSSL 15:117db924cf7c 9465 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 9466 }
wolfSSL 15:117db924cf7c 9467
wolfSSL 15:117db924cf7c 9468 key->idx = ECC_CUSTOM_IDX;
wolfSSL 15:117db924cf7c 9469 key->dp = dp;
wolfSSL 15:117db924cf7c 9470
wolfSSL 15:117db924cf7c 9471 return 0;
wolfSSL 15:117db924cf7c 9472 }
wolfSSL 15:117db924cf7c 9473 #endif /* WOLFSSL_CUSTOM_CURVES */
wolfSSL 15:117db924cf7c 9474
wolfSSL 15:117db924cf7c 9475 #ifdef HAVE_X963_KDF
wolfSSL 15:117db924cf7c 9476
wolfSSL 15:117db924cf7c 9477 static WC_INLINE void IncrementX963KdfCounter(byte* inOutCtr)
wolfSSL 15:117db924cf7c 9478 {
wolfSSL 15:117db924cf7c 9479 int i;
wolfSSL 15:117db924cf7c 9480
wolfSSL 15:117db924cf7c 9481 /* in network byte order so start at end and work back */
wolfSSL 15:117db924cf7c 9482 for (i = 3; i >= 0; i--) {
wolfSSL 15:117db924cf7c 9483 if (++inOutCtr[i]) /* we're done unless we overflow */
wolfSSL 15:117db924cf7c 9484 return;
wolfSSL 15:117db924cf7c 9485 }
wolfSSL 15:117db924cf7c 9486 }
wolfSSL 15:117db924cf7c 9487
wolfSSL 15:117db924cf7c 9488 /* ASN X9.63 Key Derivation Function (SEC1) */
wolfSSL 15:117db924cf7c 9489 int wc_X963_KDF(enum wc_HashType type, const byte* secret, word32 secretSz,
wolfSSL 15:117db924cf7c 9490 const byte* sinfo, word32 sinfoSz, byte* out, word32 outSz)
wolfSSL 15:117db924cf7c 9491 {
wolfSSL 15:117db924cf7c 9492 int ret, i;
wolfSSL 15:117db924cf7c 9493 int digestSz, copySz;
wolfSSL 15:117db924cf7c 9494 int remaining = outSz;
wolfSSL 15:117db924cf7c 9495 byte* outIdx;
wolfSSL 15:117db924cf7c 9496 byte counter[4];
wolfSSL 15:117db924cf7c 9497 byte tmp[WC_MAX_DIGEST_SIZE];
wolfSSL 15:117db924cf7c 9498
wolfSSL 15:117db924cf7c 9499 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 9500 wc_HashAlg* hash;
wolfSSL 15:117db924cf7c 9501 #else
wolfSSL 15:117db924cf7c 9502 wc_HashAlg hash[1];
wolfSSL 15:117db924cf7c 9503 #endif
wolfSSL 15:117db924cf7c 9504
wolfSSL 15:117db924cf7c 9505 if (secret == NULL || secretSz == 0 || out == NULL)
wolfSSL 15:117db924cf7c 9506 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 9507
wolfSSL 15:117db924cf7c 9508 /* X9.63 allowed algos only */
wolfSSL 15:117db924cf7c 9509 if (type != WC_HASH_TYPE_SHA && type != WC_HASH_TYPE_SHA224 &&
wolfSSL 15:117db924cf7c 9510 type != WC_HASH_TYPE_SHA256 && type != WC_HASH_TYPE_SHA384 &&
wolfSSL 15:117db924cf7c 9511 type != WC_HASH_TYPE_SHA512)
wolfSSL 15:117db924cf7c 9512 return BAD_FUNC_ARG;
wolfSSL 15:117db924cf7c 9513
wolfSSL 15:117db924cf7c 9514 digestSz = wc_HashGetDigestSize(type);
wolfSSL 15:117db924cf7c 9515 if (digestSz < 0)
wolfSSL 15:117db924cf7c 9516 return digestSz;
wolfSSL 15:117db924cf7c 9517
wolfSSL 15:117db924cf7c 9518 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 9519 hash = (wc_HashAlg*)XMALLOC(sizeof(wc_HashAlg), NULL,
wolfSSL 15:117db924cf7c 9520 DYNAMIC_TYPE_HASHES);
wolfSSL 15:117db924cf7c 9521 if (hash == NULL)
wolfSSL 15:117db924cf7c 9522 return MEMORY_E;
wolfSSL 15:117db924cf7c 9523 #endif
wolfSSL 15:117db924cf7c 9524
wolfSSL 15:117db924cf7c 9525 ret = wc_HashInit(hash, type);
wolfSSL 15:117db924cf7c 9526 if (ret != 0) {
wolfSSL 15:117db924cf7c 9527 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 9528 XFREE(hash, NULL, DYNAMIC_TYPE_HASHES);
wolfSSL 15:117db924cf7c 9529 #endif
wolfSSL 15:117db924cf7c 9530 return ret;
wolfSSL 15:117db924cf7c 9531 }
wolfSSL 15:117db924cf7c 9532
wolfSSL 15:117db924cf7c 9533 outIdx = out;
wolfSSL 15:117db924cf7c 9534 XMEMSET(counter, 0, sizeof(counter));
wolfSSL 15:117db924cf7c 9535
wolfSSL 15:117db924cf7c 9536 for (i = 1; remaining > 0; i++) {
wolfSSL 15:117db924cf7c 9537
wolfSSL 15:117db924cf7c 9538 IncrementX963KdfCounter(counter);
wolfSSL 15:117db924cf7c 9539
wolfSSL 15:117db924cf7c 9540 ret = wc_HashUpdate(hash, type, secret, secretSz);
wolfSSL 15:117db924cf7c 9541 if (ret != 0) {
wolfSSL 15:117db924cf7c 9542 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 9543 XFREE(hash, NULL, DYNAMIC_TYPE_HASHES);
wolfSSL 15:117db924cf7c 9544 #endif
wolfSSL 15:117db924cf7c 9545 return ret;
wolfSSL 15:117db924cf7c 9546 }
wolfSSL 15:117db924cf7c 9547
wolfSSL 15:117db924cf7c 9548 ret = wc_HashUpdate(hash, type, counter, sizeof(counter));
wolfSSL 15:117db924cf7c 9549 if (ret != 0) {
wolfSSL 15:117db924cf7c 9550 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 9551 XFREE(hash, NULL, DYNAMIC_TYPE_HASHES);
wolfSSL 15:117db924cf7c 9552 #endif
wolfSSL 15:117db924cf7c 9553 return ret;
wolfSSL 15:117db924cf7c 9554 }
wolfSSL 15:117db924cf7c 9555
wolfSSL 15:117db924cf7c 9556 if (sinfo) {
wolfSSL 15:117db924cf7c 9557 ret = wc_HashUpdate(hash, type, sinfo, sinfoSz);
wolfSSL 15:117db924cf7c 9558 if (ret != 0) {
wolfSSL 15:117db924cf7c 9559 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 9560 XFREE(hash, NULL, DYNAMIC_TYPE_HASHES);
wolfSSL 15:117db924cf7c 9561 #endif
wolfSSL 15:117db924cf7c 9562 return ret;
wolfSSL 15:117db924cf7c 9563 }
wolfSSL 15:117db924cf7c 9564 }
wolfSSL 15:117db924cf7c 9565
wolfSSL 15:117db924cf7c 9566 ret = wc_HashFinal(hash, type, tmp);
wolfSSL 15:117db924cf7c 9567 if (ret != 0) {
wolfSSL 15:117db924cf7c 9568 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 9569 XFREE(hash, NULL, DYNAMIC_TYPE_HASHES);
wolfSSL 15:117db924cf7c 9570 #endif
wolfSSL 15:117db924cf7c 9571 return ret;
wolfSSL 15:117db924cf7c 9572 }
wolfSSL 15:117db924cf7c 9573
wolfSSL 15:117db924cf7c 9574 copySz = min(remaining, digestSz);
wolfSSL 15:117db924cf7c 9575 XMEMCPY(outIdx, tmp, copySz);
wolfSSL 15:117db924cf7c 9576
wolfSSL 15:117db924cf7c 9577 remaining -= copySz;
wolfSSL 15:117db924cf7c 9578 outIdx += copySz;
wolfSSL 15:117db924cf7c 9579 }
wolfSSL 15:117db924cf7c 9580
wolfSSL 15:117db924cf7c 9581 #ifdef WOLFSSL_SMALL_STACK
wolfSSL 15:117db924cf7c 9582 XFREE(hash, NULL, DYNAMIC_TYPE_HASHES);
wolfSSL 15:117db924cf7c 9583 #endif
wolfSSL 15:117db924cf7c 9584
wolfSSL 15:117db924cf7c 9585 return 0;
wolfSSL 15:117db924cf7c 9586 }
wolfSSL 15:117db924cf7c 9587 #endif /* HAVE_X963_KDF */
wolfSSL 15:117db924cf7c 9588
wolfSSL 15:117db924cf7c 9589 #endif /* HAVE_ECC */
wolfSSL 15:117db924cf7c 9590