Mercurial > dropbear

comparison libtomcrypt/src/pk/ecc/ecc_sign_hash.c @ 1710:1ff2a1034c52

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Fix whitespace changes vs upstream libtomcrypt
author Matt Johnston <matt@ucc.asn.au>
date Wed, 10 Jun 2020 23:01:33 +0800
parents 8305ebe45940
children e9dba7abd939
comparison
equal deleted inserted replaced
1709:04155ce30759 1710:1ff2a1034c52
12 #if defined(LTC_MECC) && defined(LTC_DER) 12 #if defined(LTC_MECC) && defined(LTC_DER)
13 13
14 /** 14 /**
15 @file ecc_sign_hash.c 15 @file ecc_sign_hash.c
16 ECC Crypto, Tom St Denis 16 ECC Crypto, Tom St Denis
17 */ 17 */
18 18
19 static int _ecc_sign_hash(const unsigned char *in, unsigned long inlen, 19 static int _ecc_sign_hash(const unsigned char *in, unsigned long inlen,
20 unsigned char *out, unsigned long *outlen, 20 unsigned char *out, unsigned long *outlen,
21 prng_state *prng, int wprng, ecc_key *key, int sigformat) 21 prng_state *prng, int wprng, ecc_key *key, int sigformat)
22 { 22 {
23 ecc_key pubkey; 23 ecc_key pubkey;
24 void *r, *s, *e, *p; 24 void *r, *s, *e, *p;
25 int err, max_iterations = LTC_PK_MAX_RETRIES; 25 int err, max_iterations = LTC_PK_MAX_RETRIES;
33 33
34 /* is this a private key? */ 34 /* is this a private key? */
35 if (key->type != PK_PRIVATE) { 35 if (key->type != PK_PRIVATE) {
36 return CRYPT_PK_NOT_PRIVATE; 36 return CRYPT_PK_NOT_PRIVATE;
37 } 37 }
38 38
39 /* is the IDX valid ? */ 39 /* is the IDX valid ? */
40 if (ltc_ecc_is_valid_idx(key->idx) != 1) { 40 if (ltc_ecc_is_valid_idx(key->idx) != 1) {
41 return CRYPT_PK_INVALID_TYPE; 41 return CRYPT_PK_INVALID_TYPE;
42 } 42 }
43 43
44 if ((err = prng_is_valid(wprng)) != CRYPT_OK) { 44 if ((err = prng_is_valid(wprng)) != CRYPT_OK) {
45 return err; 45 return err;
46 } 46 }
47 47
48 /* init the bignums */ 48 /* init the bignums */
49 if ((err = mp_init_multi(&r, &s, &p, &e, NULL)) != CRYPT_OK) { 49 if ((err = mp_init_multi(&r, &s, &p, &e, NULL)) != CRYPT_OK) {
50 return err; 50 return err;
51 } 51 }
52 if ((err = mp_read_radix(p, (char *)key->dp->order, 16)) != CRYPT_OK) { goto errnokey; } 52 if ((err = mp_read_radix(p, (char *)key->dp->order, 16)) != CRYPT_OK) { goto errnokey; }
53 53
54 /* get the hash and load it as a bignum into 'e' */ 54 /* get the hash and load it as a bignum into 'e' */
55 pbits = mp_count_bits(p); 55 pbits = mp_count_bits(p);
56 pbytes = (pbits+7) >> 3; 56 pbytes = (pbits+7) >> 3;
57 if (pbits > inlen*8) { 57 if (pbits > inlen*8) {
75 if ((err = ecc_make_key_ex(prng, wprng, &pubkey, key->dp)) != CRYPT_OK) { 75 if ((err = ecc_make_key_ex(prng, wprng, &pubkey, key->dp)) != CRYPT_OK) {
76 goto errnokey; 76 goto errnokey;
77 } 77 }
78 78
79 /* find r = x1 mod n */ 79 /* find r = x1 mod n */
80 if ((err = mp_mod(pubkey.pubkey.x, p, r)) != CRYPT_OK) { goto error; } 80 if ((err = mp_mod(pubkey.pubkey.x, p, r)) != CRYPT_OK) { goto error; }
81 81
82 if (mp_iszero(r) == LTC_MP_YES) { 82 if (mp_iszero(r) == LTC_MP_YES) {
83 ecc_free(&pubkey); 83 ecc_free(&pubkey);
84 } else { 84 } else {
85 /* find s = (e + xr)/k */ 85 /* find s = (e + xr)/k */
86 if ((err = mp_invmod(pubkey.k, p, pubkey.k)) != CRYPT_OK) { goto error; } /* k = 1/k */ 86 if ((err = mp_invmod(pubkey.k, p, pubkey.k)) != CRYPT_OK) { goto error; } /* k = 1/k */
87 if ((err = mp_mulmod(key->k, r, p, s)) != CRYPT_OK) { goto error; } /* s = xr */ 87 if ((err = mp_mulmod(key->k, r, p, s)) != CRYPT_OK) { goto error; } /* s = xr */
88 if ((err = mp_add(e, s, s)) != CRYPT_OK) { goto error; } /* s = e + xr */ 88 if ((err = mp_add(e, s, s)) != CRYPT_OK) { goto error; } /* s = e + xr */
89 if ((err = mp_mod(s, p, s)) != CRYPT_OK) { goto error; } /* s = e + xr */ 89 if ((err = mp_mod(s, p, s)) != CRYPT_OK) { goto error; } /* s = e + xr */
90 if ((err = mp_mulmod(s, pubkey.k, p, s)) != CRYPT_OK) { goto error; } /* s = (e + xr)/k */ 90 if ((err = mp_mulmod(s, pubkey.k, p, s)) != CRYPT_OK) { goto error; } /* s = (e + xr)/k */
91 ecc_free(&pubkey); 91 ecc_free(&pubkey);
92 if (mp_iszero(s) == LTC_MP_NO) { 92 if (mp_iszero(s) == LTC_MP_NO) {
93 break; 93 break;
94 } 94 }
95 } 95 }
96 } while (--max_iterations > 0); 96 } while (--max_iterations > 0);
97 97
98 if (max_iterations == 0) { 98 if (max_iterations == 0) {
99 goto errnokey; 99 goto errnokey;
110 *outlen = 2*pbytes; 110 *outlen = 2*pbytes;
111 err = CRYPT_OK; 111 err = CRYPT_OK;
112 } 112 }
113 else { 113 else {
114 /* store as ASN.1 SEQUENCE { r, s -- integer } */ 114 /* store as ASN.1 SEQUENCE { r, s -- integer } */
115 err = der_encode_sequence_multi(out, outlen, 115 err = der_encode_sequence_multi(out, outlen,
116 LTC_ASN1_INTEGER, 1UL, r, 116 LTC_ASN1_INTEGER, 1UL, r,
117 LTC_ASN1_INTEGER, 1UL, s, 117 LTC_ASN1_INTEGER, 1UL, s,
118 LTC_ASN1_EOL, 0UL, NULL); 118 LTC_ASN1_EOL, 0UL, NULL);
119 } 119 }
120 goto errnokey; 120 goto errnokey;
121 error: 121 error:
122 ecc_free(&pubkey); 122 ecc_free(&pubkey);
123 errnokey: 123 errnokey:
124 mp_clear_multi(r, s, p, e, NULL); 124 mp_clear_multi(r, s, p, e, NULL);
125 return err; 125 return err;
126 } 126 }
127 127
128 /** 128 /**
129 Sign a message digest 129 Sign a message digest
130 @param in The message digest to sign 130 @param in The message digest to sign