diff options
| author | Nicola Tuveri <nic.tuv@gmail.com> | 2018-07-14 00:55:01 +0300 |
|---|---|---|
| committer | Matt Caswell <matt@openssl.org> | 2018-07-16 10:17:40 +0100 |
| commit | f45846f50036343778d7575578e7115e92a3fce1 (patch) | |
| tree | c799ac47c288635e12cd1175a148b2385748149c /include | |
| parent | 66b0bca887eb4ad1f5758e56c45905fb3fc36667 (diff) | |
EC2M Lopez-Dahab ladder implementation
This commit uses the new ladder scaffold to implement a specialized
ladder step based on differential addition-and-doubling in mixed
Lopez-Dahab projective coordinates, modified to independently blind the
operands.
The arithmetic in `ladder_pre`, `ladder_step` and `ladder_post` is
auto generated with tooling:
- see, e.g., "Guide to ECC" Alg 3.40 for reference about the
`ladder_pre` implementation;
- see https://www.hyperelliptic.org/EFD/g12o/auto-code/shortw/xz/ladder/mladd-2003-s.op3
for the differential addition-and-doubling formulas implemented in
`ladder_step`;
- see, e.g., "Fast Multiplication on Elliptic Curves over GF(2**m)
without Precomputation" (Lopez and Dahab, CHES 1999) Appendix Alg Mxy
for the `ladder_post` implementation to recover the `(x,y)` result in
affine coordinates.
Co-authored-by: Billy Brumley <bbrumley@gmail.com>
Co-authored-by: Sohaib ul Hassan <soh.19.hassan@gmail.com>
Reviewed-by: Andy Polyakov <appro@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6690)
Diffstat (limited to 'include')
| -rw-r--r-- | include/openssl/ecerr.h | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/include/openssl/ecerr.h b/include/openssl/ecerr.h index cd73c8c9c1..ec5fe0f854 100644 --- a/include/openssl/ecerr.h +++ b/include/openssl/ecerr.h @@ -64,6 +64,8 @@ int ERR_load_EC_strings(void); # define EC_F_EC_GF2M_MONTGOMERY_POINT_MULTIPLY 208 # define EC_F_EC_GF2M_SIMPLE_GROUP_CHECK_DISCRIMINANT 159 # define EC_F_EC_GF2M_SIMPLE_GROUP_SET_CURVE 195 +# define EC_F_EC_GF2M_SIMPLE_LADDER_POST 285 +# define EC_F_EC_GF2M_SIMPLE_LADDER_PRE 288 # define EC_F_EC_GF2M_SIMPLE_OCT2POINT 160 # define EC_F_EC_GF2M_SIMPLE_POINT2OCT 161 # define EC_F_EC_GF2M_SIMPLE_POINT_GET_AFFINE_COORDINATES 162 |