diff options
Diffstat (limited to 'crypto/ec/curve448/eddsa.c')
| -rw-r--r-- | crypto/ec/curve448/eddsa.c | 181 |
1 files changed, 97 insertions, 84 deletions
diff --git a/crypto/ec/curve448/eddsa.c b/crypto/ec/curve448/eddsa.c index d4c7f1562a..d04469989a 100644 --- a/crypto/ec/curve448/eddsa.c +++ b/crypto/ec/curve448/eddsa.c @@ -94,7 +94,8 @@ static c448_error_t hash_init_with_dom(OSSL_LIB_CTX *ctx, EVP_MD_CTX *hashctx, } /* In this file because it uses the hash */ -c448_error_t c448_ed448_convert_private_key_to_x448( +c448_error_t +ossl_c448_ed448_convert_private_key_to_x448( OSSL_LIB_CTX *ctx, uint8_t x[X448_PRIVATE_BYTES], const uint8_t ed [EDDSA_448_PRIVATE_BYTES], @@ -106,7 +107,8 @@ c448_error_t c448_ed448_convert_private_key_to_x448( EDDSA_448_PRIVATE_BYTES, propq); } -c448_error_t c448_ed448_derive_public_key( +c448_error_t +ossl_c448_ed448_derive_public_key( OSSL_LIB_CTX *ctx, uint8_t pubkey[EDDSA_448_PUBLIC_BYTES], const uint8_t privkey[EDDSA_448_PRIVATE_BYTES], @@ -126,8 +128,8 @@ c448_error_t c448_ed448_derive_public_key( clamp(secret_scalar_ser); - curve448_scalar_decode_long(secret_scalar, secret_scalar_ser, - sizeof(secret_scalar_ser)); + ossl_curve448_scalar_decode_long(secret_scalar, secret_scalar_ser, + sizeof(secret_scalar_ser)); /* * Since we are going to mul_by_cofactor during encoding, divide by it @@ -138,28 +140,29 @@ c448_error_t c448_ed448_derive_public_key( * we might start at 2 instead of 1. */ for (c = 1; c < C448_EDDSA_ENCODE_RATIO; c <<= 1) - curve448_scalar_halve(secret_scalar, secret_scalar); + ossl_curve448_scalar_halve(secret_scalar, secret_scalar); - curve448_precomputed_scalarmul(p, curve448_precomputed_base, secret_scalar); + ossl_curve448_precomputed_scalarmul(p, ossl_curve448_precomputed_base, + secret_scalar); - curve448_point_mul_by_ratio_and_encode_like_eddsa(pubkey, p); + ossl_curve448_point_mul_by_ratio_and_encode_like_eddsa(pubkey, p); /* Cleanup */ - curve448_scalar_destroy(secret_scalar); - curve448_point_destroy(p); + ossl_curve448_scalar_destroy(secret_scalar); + ossl_curve448_point_destroy(p); OPENSSL_cleanse(secret_scalar_ser, sizeof(secret_scalar_ser)); return C448_SUCCESS; } -c448_error_t c448_ed448_sign( - OSSL_LIB_CTX *ctx, - uint8_t signature[EDDSA_448_SIGNATURE_BYTES], - const uint8_t privkey[EDDSA_448_PRIVATE_BYTES], - const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES], - const uint8_t *message, size_t message_len, - uint8_t prehashed, const uint8_t *context, - size_t context_len, const char *propq) +c448_error_t +ossl_c448_ed448_sign(OSSL_LIB_CTX *ctx, + uint8_t signature[EDDSA_448_SIGNATURE_BYTES], + const uint8_t privkey[EDDSA_448_PRIVATE_BYTES], + const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES], + const uint8_t *message, size_t message_len, + uint8_t prehashed, const uint8_t *context, + size_t context_len, const char *propq) { curve448_scalar_t secret_scalar; EVP_MD_CTX *hashctx = EVP_MD_CTX_new(); @@ -183,8 +186,8 @@ c448_error_t c448_ed448_sign( EDDSA_448_PRIVATE_BYTES, propq)) goto err; clamp(expanded); - curve448_scalar_decode_long(secret_scalar, expanded, - EDDSA_448_PRIVATE_BYTES); + ossl_curve448_scalar_decode_long(secret_scalar, expanded, + EDDSA_448_PRIVATE_BYTES); /* Hash to create the nonce */ if (!hash_init_with_dom(ctx, hashctx, prehashed, 0, context, @@ -205,7 +208,7 @@ c448_error_t c448_ed448_sign( if (!EVP_DigestFinalXOF(hashctx, nonce, sizeof(nonce))) goto err; - curve448_scalar_decode_long(nonce_scalar, nonce, sizeof(nonce)); + ossl_curve448_scalar_decode_long(nonce_scalar, nonce, sizeof(nonce)); OPENSSL_cleanse(nonce, sizeof(nonce)); } @@ -214,15 +217,15 @@ c448_error_t c448_ed448_sign( curve448_scalar_t nonce_scalar_2; curve448_point_t p; - curve448_scalar_halve(nonce_scalar_2, nonce_scalar); + ossl_curve448_scalar_halve(nonce_scalar_2, nonce_scalar); for (c = 2; c < C448_EDDSA_ENCODE_RATIO; c <<= 1) - curve448_scalar_halve(nonce_scalar_2, nonce_scalar_2); + ossl_curve448_scalar_halve(nonce_scalar_2, nonce_scalar_2); - curve448_precomputed_scalarmul(p, curve448_precomputed_base, - nonce_scalar_2); - curve448_point_mul_by_ratio_and_encode_like_eddsa(nonce_point, p); - curve448_point_destroy(p); - curve448_scalar_destroy(nonce_scalar_2); + ossl_curve448_precomputed_scalarmul(p, ossl_curve448_precomputed_base, + nonce_scalar_2); + ossl_curve448_point_mul_by_ratio_and_encode_like_eddsa(nonce_point, p); + ossl_curve448_point_destroy(p); + ossl_curve448_scalar_destroy(nonce_scalar_2); } { @@ -237,22 +240,22 @@ c448_error_t c448_ed448_sign( || !EVP_DigestFinalXOF(hashctx, challenge, sizeof(challenge))) goto err; - curve448_scalar_decode_long(challenge_scalar, challenge, - sizeof(challenge)); + ossl_curve448_scalar_decode_long(challenge_scalar, challenge, + sizeof(challenge)); OPENSSL_cleanse(challenge, sizeof(challenge)); } - curve448_scalar_mul(challenge_scalar, challenge_scalar, secret_scalar); - curve448_scalar_add(challenge_scalar, challenge_scalar, nonce_scalar); + ossl_curve448_scalar_mul(challenge_scalar, challenge_scalar, secret_scalar); + ossl_curve448_scalar_add(challenge_scalar, challenge_scalar, nonce_scalar); OPENSSL_cleanse(signature, EDDSA_448_SIGNATURE_BYTES); memcpy(signature, nonce_point, sizeof(nonce_point)); - curve448_scalar_encode(&signature[EDDSA_448_PUBLIC_BYTES], - challenge_scalar); + ossl_curve448_scalar_encode(&signature[EDDSA_448_PUBLIC_BYTES], + challenge_scalar); - curve448_scalar_destroy(secret_scalar); - curve448_scalar_destroy(nonce_scalar); - curve448_scalar_destroy(challenge_scalar); + ossl_curve448_scalar_destroy(secret_scalar); + ossl_curve448_scalar_destroy(nonce_scalar); + ossl_curve448_scalar_destroy(challenge_scalar); ret = C448_SUCCESS; err: @@ -260,7 +263,8 @@ c448_error_t c448_ed448_sign( return ret; } -c448_error_t c448_ed448_sign_prehash( +c448_error_t +ossl_c448_ed448_sign_prehash( OSSL_LIB_CTX *ctx, uint8_t signature[EDDSA_448_SIGNATURE_BYTES], const uint8_t privkey[EDDSA_448_PRIVATE_BYTES], @@ -268,11 +272,12 @@ c448_error_t c448_ed448_sign_prehash( const uint8_t hash[64], const uint8_t *context, size_t context_len, const char *propq) { - return c448_ed448_sign(ctx, signature, privkey, pubkey, hash, 64, 1, - context, context_len, propq); + return ossl_c448_ed448_sign(ctx, signature, privkey, pubkey, hash, 64, 1, + context, context_len, propq); } -c448_error_t c448_ed448_verify( +c448_error_t +ossl_c448_ed448_verify( OSSL_LIB_CTX *ctx, const uint8_t signature[EDDSA_448_SIGNATURE_BYTES], const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES], @@ -310,13 +315,13 @@ c448_error_t c448_ed448_verify( return C448_FAILURE; error = - curve448_point_decode_like_eddsa_and_mul_by_ratio(pk_point, pubkey); + ossl_curve448_point_decode_like_eddsa_and_mul_by_ratio(pk_point, pubkey); if (C448_SUCCESS != error) return error; error = - curve448_point_decode_like_eddsa_and_mul_by_ratio(r_point, signature); + ossl_curve448_point_decode_like_eddsa_and_mul_by_ratio(r_point, signature); if (C448_SUCCESS != error) return error; @@ -337,74 +342,82 @@ c448_error_t c448_ed448_verify( } EVP_MD_CTX_free(hashctx); - curve448_scalar_decode_long(challenge_scalar, challenge, - sizeof(challenge)); + ossl_curve448_scalar_decode_long(challenge_scalar, challenge, + sizeof(challenge)); OPENSSL_cleanse(challenge, sizeof(challenge)); } - curve448_scalar_sub(challenge_scalar, curve448_scalar_zero, - challenge_scalar); + ossl_curve448_scalar_sub(challenge_scalar, ossl_curve448_scalar_zero, + challenge_scalar); - curve448_scalar_decode_long(response_scalar, - &signature[EDDSA_448_PUBLIC_BYTES], - EDDSA_448_PRIVATE_BYTES); + ossl_curve448_scalar_decode_long(response_scalar, + &signature[EDDSA_448_PUBLIC_BYTES], + EDDSA_448_PRIVATE_BYTES); /* pk_point = -c(x(P)) + (cx + k)G = kG */ - curve448_base_double_scalarmul_non_secret(pk_point, - response_scalar, - pk_point, challenge_scalar); - return c448_succeed_if(curve448_point_eq(pk_point, r_point)); + ossl_curve448_base_double_scalarmul_non_secret(pk_point, + response_scalar, + pk_point, challenge_scalar); + return c448_succeed_if(ossl_curve448_point_eq(pk_point, r_point)); } -c448_error_t c448_ed448_verify_prehash( +c448_error_t +ossl_c448_ed448_verify_prehash( OSSL_LIB_CTX *ctx, const uint8_t signature[EDDSA_448_SIGNATURE_BYTES], const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES], const uint8_t hash[64], const uint8_t *context, uint8_t context_len, const char *propq) { - return c448_ed448_verify(ctx, signature, pubkey, hash, 64, 1, context, - context_len, propq); + return ossl_c448_ed448_verify(ctx, signature, pubkey, hash, 64, 1, context, + context_len, propq); } -int ED448_sign(OSSL_LIB_CTX *ctx, uint8_t *out_sig, const uint8_t *message, - size_t message_len, const uint8_t public_key[57], - const uint8_t private_key[57], const uint8_t *context, - size_t context_len, const char *propq) +int +ossl_ed448_sign(OSSL_LIB_CTX *ctx, uint8_t *out_sig, const uint8_t *message, + size_t message_len, const uint8_t public_key[57], + const uint8_t private_key[57], const uint8_t *context, + size_t context_len, const char *propq) { - return c448_ed448_sign(ctx, out_sig, private_key, public_key, message, - message_len, 0, context, context_len,propq) - == C448_SUCCESS; + return ossl_c448_ed448_sign(ctx, out_sig, private_key, public_key, message, + message_len, 0, context, context_len, + propq) == C448_SUCCESS; } -int ED448_verify(OSSL_LIB_CTX *ctx, const uint8_t *message, size_t message_len, - const uint8_t signature[114], const uint8_t public_key[57], - const uint8_t *context, size_t context_len, const char *propq) +int +ossl_ed448_verify(OSSL_LIB_CTX *ctx, const uint8_t *message, size_t message_len, + const uint8_t signature[114], const uint8_t public_key[57], + const uint8_t *context, size_t context_len, const char *propq) { - return c448_ed448_verify(ctx, signature, public_key, message, message_len, - 0, context, (uint8_t)context_len, - propq) == C448_SUCCESS; + return ossl_c448_ed448_verify(ctx, signature, public_key, message, + message_len, 0, context, (uint8_t)context_len, + propq) == C448_SUCCESS; } -int ED448ph_sign(OSSL_LIB_CTX *ctx, uint8_t *out_sig, const uint8_t hash[64], - const uint8_t public_key[57], const uint8_t private_key[57], - const uint8_t *context, size_t context_len, const char *propq) +int +ossl_ed448ph_sign(OSSL_LIB_CTX *ctx, uint8_t *out_sig, const uint8_t hash[64], + const uint8_t public_key[57], const uint8_t private_key[57], + const uint8_t *context, size_t context_len, const char *propq) { - return c448_ed448_sign_prehash(ctx, out_sig, private_key, public_key, hash, - context, context_len, propq) == C448_SUCCESS; - + return ossl_c448_ed448_sign_prehash(ctx, out_sig, private_key, public_key, + hash, context, context_len, + propq) == C448_SUCCESS; } -int ED448ph_verify(OSSL_LIB_CTX *ctx, const uint8_t hash[64], - const uint8_t signature[114], const uint8_t public_key[57], - const uint8_t *context, size_t context_len, const char *propq) +int +ossl_ed448ph_verify(OSSL_LIB_CTX *ctx, const uint8_t hash[64], + const uint8_t signature[114], const uint8_t public_key[57], + const uint8_t *context, size_t context_len, + const char *propq) { - return c448_ed448_verify_prehash(ctx, signature, public_key, hash, context, - (uint8_t)context_len, propq) == C448_SUCCESS; + return ossl_c448_ed448_verify_prehash(ctx, signature, public_key, hash, + context, (uint8_t)context_len, + propq) == C448_SUCCESS; } -int ED448_public_from_private(OSSL_LIB_CTX *ctx, uint8_t out_public_key[57], - const uint8_t private_key[57], const char *propq) +int +ossl_ed448_public_from_private(OSSL_LIB_CTX *ctx, uint8_t out_public_key[57], + const uint8_t private_key[57], const char *propq) { - return c448_ed448_derive_public_key(ctx, out_public_key, private_key, propq) - == C448_SUCCESS; + return ossl_c448_ed448_derive_public_key(ctx, out_public_key, private_key, + propq) == C448_SUCCESS; } |