dropbear: libtommath/bn_mp_sqrtmod

annotate libtommath/bn_mp_sqrtmod_prime.c @ 1715:3974f087d9c0

Disallow leading lines before the ident for server (#102) Per RFC4253 4.2 clients must be able to process other lines of data before the version string, server behavior is not defined neither with MUST/SHOULD nor with MAY. If server process up to 50 lines too - it may cause too long hanging session with invalid/evil client that consume host resources and potentially may lead to DDoS on poor embedded boxes. Let's require first line from client to be version string and fail early if it's not - matches both RFC and real OpenSSH behavior.

author	Vladislav Grishenko <themiron@users.noreply.github.com>
date	Mon, 15 Jun 2020 18:22:18 +0500
parents	1051e4eea25a
children

rev	line source
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	1 #include "tommath_private.h"
1436 60fc6476e044 Update to libtommath v1.0 Matt Johnston <matt@ucc.asn.au> parents: diff changeset	2 #ifdef BN_MP_SQRTMOD_PRIME_C
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	3 /* LibTomMath, multiple-precision integer library -- Tom St Denis */
1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	4 /* SPDX-License-Identifier: Unlicense */
1436 60fc6476e044 Update to libtommath v1.0 Matt Johnston <matt@ucc.asn.au> parents: diff changeset	5
60fc6476e044 Update to libtommath v1.0 Matt Johnston <matt@ucc.asn.au> parents: diff changeset	6 /* Tonelli-Shanks algorithm
60fc6476e044 Update to libtommath v1.0 Matt Johnston <matt@ucc.asn.au> parents: diff changeset	7 * https://en.wikipedia.org/wiki/Tonelli%E2%80%93Shanks_algorithm
60fc6476e044 Update to libtommath v1.0 Matt Johnston <matt@ucc.asn.au> parents: diff changeset	8 * https://gmplib.org/list-archives/gmp-discuss/2013-April/005300.html
60fc6476e044 Update to libtommath v1.0 Matt Johnston <matt@ucc.asn.au> parents: diff changeset	9 *
60fc6476e044 Update to libtommath v1.0 Matt Johnston <matt@ucc.asn.au> parents: diff changeset	10 */
60fc6476e044 Update to libtommath v1.0 Matt Johnston <matt@ucc.asn.au> parents: diff changeset	11
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	12 mp_err mp_sqrtmod_prime(const mp_int n, const mp_int prime, mp_int *ret)
1436 60fc6476e044 Update to libtommath v1.0 Matt Johnston <matt@ucc.asn.au> parents: diff changeset	13 {
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	14 mp_err err;
1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	15 int legendre;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	16 mp_int t1, C, Q, S, Z, M, T, R, two;
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	17 mp_digit i;
1436 60fc6476e044 Update to libtommath v1.0 Matt Johnston <matt@ucc.asn.au> parents: diff changeset	18
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	19 /* first handle the simple cases */
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	20 if (mp_cmp_d(n, 0uL) == MP_EQ) {
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	21 mp_zero(ret);
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	22 return MP_OKAY;
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	23 }
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	24 if (mp_cmp_d(prime, 2uL) == MP_EQ) return MP_VAL; /* prime must be odd */
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	25 if ((err = mp_kronecker(n, prime, &legendre)) != MP_OKAY) return err;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	26 if (legendre == -1) return MP_VAL; /* quadratic non-residue mod prime */
1436 60fc6476e044 Update to libtommath v1.0 Matt Johnston <matt@ucc.asn.au> parents: diff changeset	27
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	28 if ((err = mp_init_multi(&t1, &C, &Q, &S, &Z, &M, &T, &R, &two, NULL)) != MP_OKAY) {
1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	29 return err;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	30 }
1436 60fc6476e044 Update to libtommath v1.0 Matt Johnston <matt@ucc.asn.au> parents: diff changeset	31
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	32 /* SPECIAL CASE: if prime mod 4 == 3
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	33 * compute directly: err = n^(prime+1)/4 mod prime
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	34 * Handbook of Applied Cryptography algorithm 3.36
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	35 */
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	36 if ((err = mp_mod_d(prime, 4uL, &i)) != MP_OKAY) goto cleanup;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	37 if (i == 3u) {
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	38 if ((err = mp_add_d(prime, 1uL, &t1)) != MP_OKAY) goto cleanup;
1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	39 if ((err = mp_div_2(&t1, &t1)) != MP_OKAY) goto cleanup;
1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	40 if ((err = mp_div_2(&t1, &t1)) != MP_OKAY) goto cleanup;
1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	41 if ((err = mp_exptmod(n, &t1, prime, ret)) != MP_OKAY) goto cleanup;
1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	42 err = MP_OKAY;
1436 60fc6476e044 Update to libtommath v1.0 Matt Johnston <matt@ucc.asn.au> parents: diff changeset	43 goto cleanup;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	44 }
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	45
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	46 /* NOW: Tonelli-Shanks algorithm */
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	47
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	48 /* factor out powers of 2 from prime-1, defining Q and S as: prime-1 = Q2^S /
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	49 if ((err = mp_copy(prime, &Q)) != MP_OKAY) goto cleanup;
1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	50 if ((err = mp_sub_d(&Q, 1uL, &Q)) != MP_OKAY) goto cleanup;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	51 /* Q = prime - 1 */
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	52 mp_zero(&S);
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	53 /* S = 0 */
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	54 while (MP_IS_EVEN(&Q)) {
1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	55 if ((err = mp_div_2(&Q, &Q)) != MP_OKAY) goto cleanup;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	56 /* Q = Q / 2 */
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	57 if ((err = mp_add_d(&S, 1uL, &S)) != MP_OKAY) goto cleanup;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	58 /* S = S + 1 */
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	59 }
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	60
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	61 /* find a Z such that the Legendre symbol (Z\|prime) == -1 */
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	62 mp_set_u32(&Z, 2u);
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	63 /* Z = 2 */
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	64 for (;;) {
1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	65 if ((err = mp_kronecker(&Z, prime, &legendre)) != MP_OKAY) goto cleanup;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	66 if (legendre == -1) break;
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	67 if ((err = mp_add_d(&Z, 1uL, &Z)) != MP_OKAY) goto cleanup;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	68 /* Z = Z + 1 */
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	69 }
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	70
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	71 if ((err = mp_exptmod(&Z, &Q, prime, &C)) != MP_OKAY) goto cleanup;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	72 /* C = Z ^ Q mod prime */
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	73 if ((err = mp_add_d(&Q, 1uL, &t1)) != MP_OKAY) goto cleanup;
1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	74 if ((err = mp_div_2(&t1, &t1)) != MP_OKAY) goto cleanup;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	75 /* t1 = (Q + 1) / 2 */
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	76 if ((err = mp_exptmod(n, &t1, prime, &R)) != MP_OKAY) goto cleanup;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	77 /* R = n ^ ((Q + 1) / 2) mod prime */
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	78 if ((err = mp_exptmod(n, &Q, prime, &T)) != MP_OKAY) goto cleanup;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	79 /* T = n ^ Q mod prime */
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	80 if ((err = mp_copy(&S, &M)) != MP_OKAY) goto cleanup;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	81 /* M = S */
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	82 mp_set_u32(&two, 2u);
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	83
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	84 for (;;) {
1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	85 if ((err = mp_copy(&T, &t1)) != MP_OKAY) goto cleanup;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	86 i = 0;
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	87 for (;;) {
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	88 if (mp_cmp_d(&t1, 1uL) == MP_EQ) break;
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	89 if ((err = mp_exptmod(&t1, &two, prime, &t1)) != MP_OKAY) goto cleanup;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	90 i++;
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	91 }
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	92 if (i == 0u) {
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	93 if ((err = mp_copy(&R, ret)) != MP_OKAY) goto cleanup;
1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	94 err = MP_OKAY;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	95 goto cleanup;
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	96 }
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	97 if ((err = mp_sub_d(&M, i, &t1)) != MP_OKAY) goto cleanup;
1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	98 if ((err = mp_sub_d(&t1, 1uL, &t1)) != MP_OKAY) goto cleanup;
1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	99 if ((err = mp_exptmod(&two, &t1, prime, &t1)) != MP_OKAY) goto cleanup;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	100 /* t1 = 2 ^ (M - i - 1) */
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	101 if ((err = mp_exptmod(&C, &t1, prime, &t1)) != MP_OKAY) goto cleanup;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	102 /* t1 = C ^ (2 ^ (M - i - 1)) mod prime */
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	103 if ((err = mp_sqrmod(&t1, prime, &C)) != MP_OKAY) goto cleanup;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	104 /* C = (t1 * t1) mod prime */
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	105 if ((err = mp_mulmod(&R, &t1, prime, &R)) != MP_OKAY) goto cleanup;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	106 /* R = (R * t1) mod prime */
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	107 if ((err = mp_mulmod(&T, &C, prime, &T)) != MP_OKAY) goto cleanup;
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	108 /* T = (T * C) mod prime */
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	109 mp_set(&M, i);
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	110 /* M = i */
f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	111 }
1436 60fc6476e044 Update to libtommath v1.0 Matt Johnston <matt@ucc.asn.au> parents: diff changeset	112
60fc6476e044 Update to libtommath v1.0 Matt Johnston <matt@ucc.asn.au> parents: diff changeset	113 cleanup:
1655 f52919ffd3b1 update ltm to 1.1.0 and enable FIPS 186.4 compliant key-generation (#79) Steffen Jaeckel <s_jaeckel@gmx.de> parents: 1436 diff changeset	114 mp_clear_multi(&t1, &C, &Q, &S, &Z, &M, &T, &R, &two, NULL);
1692 1051e4eea25a Update LibTomMath to 1.2.0 (#84) Steffen Jaeckel <s@jaeckel.eu> parents: 1655 diff changeset	115 return err;
1436 60fc6476e044 Update to libtommath v1.0 Matt Johnston <matt@ucc.asn.au> parents: diff changeset	116 }
60fc6476e044 Update to libtommath v1.0 Matt Johnston <matt@ucc.asn.au> parents: diff changeset	117
60fc6476e044 Update to libtommath v1.0 Matt Johnston <matt@ucc.asn.au> parents: diff changeset	118 #endif

Mercurial > dropbear

annotate libtommath/bn_mp_sqrtmod_prime.c @ 1715:3974f087d9c0