forked from rweather/arduinolibs
-
Notifications
You must be signed in to change notification settings - Fork 4
/
Copy pathP521.h
112 lines (87 loc) · 4.13 KB
/
P521.h
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
/*
* Copyright (C) 2016 Southern Storm Software, Pty Ltd.
*
* Permission is hereby granted, free of charge, to any person obtaining a
* copy of this software and associated documentation files (the "Software"),
* to deal in the Software without restriction, including without limitation
* the rights to use, copy, modify, merge, publish, distribute, sublicense,
* and/or sell copies of the Software, and to permit persons to whom the
* Software is furnished to do so, subject to the following conditions:
*
* The above copyright notice and this permission notice shall be included
* in all copies or substantial portions of the Software.
*
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
* OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
* FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
* DEALINGS IN THE SOFTWARE.
*/
#ifndef CRYPTO_P521_h
#define CRYPTO_P521_h
#include "BigNumberUtil.h"
class Hash;
class P521
{
public:
static bool eval(uint8_t result[132], const uint8_t f[66], const uint8_t point[132]);
static void dh1(uint8_t k[132], uint8_t f[66]);
static bool dh2(const uint8_t k[132], uint8_t f[66]);
static void sign(uint8_t signature[132], const uint8_t privateKey[66],
const void *message, size_t len, Hash *hash = 0);
static bool verify(const uint8_t signature[132],
const uint8_t publicKey[132],
const void *message, size_t len, Hash *hash = 0);
static void generatePrivateKey(uint8_t privateKey[66]);
static void derivePublicKey(uint8_t publicKey[132], const uint8_t privateKey[66]);
static bool isValidPrivateKey(const uint8_t privateKey[66]);
static bool isValidPublicKey(const uint8_t publicKey[132]);
static bool isValidCurvePoint(const uint8_t point[132])
{
return isValidPublicKey(point);
}
#if defined(TEST_P521_FIELD_OPS)
public:
#else
private:
#endif
static void evaluate(limb_t *x, limb_t *y, const uint8_t f[66]);
static void addAffine(limb_t *x1, limb_t *y1,
const limb_t *x2, const limb_t *y2);
static bool validate(const limb_t *x, const limb_t *y);
static bool inRange(const limb_t *x);
static void reduce(limb_t *result, const limb_t *x);
static void reduceQuick(limb_t *x);
static void mulNoReduce(limb_t *result, const limb_t *x, const limb_t *y);
static void mul(limb_t *result, const limb_t *x, const limb_t *y);
static void square(limb_t *result, const limb_t *x)
{
mul(result, x, x);
}
static void mulLiteral(limb_t *result, const limb_t *x, limb_t y);
static void add(limb_t *result, const limb_t *x, const limb_t *y);
static void sub(limb_t *result, const limb_t *x, const limb_t *y);
static void dblPoint(limb_t *xout, limb_t *yout, limb_t *zout,
const limb_t *xin, const limb_t *yin,
const limb_t *zin);
static void addPoint(limb_t *xout, limb_t *yout, limb_t *zout,
const limb_t *x1, const limb_t *y1,
const limb_t *z1, const limb_t *x2,
const limb_t *y2);
static void cmove(limb_t select, limb_t *x, const limb_t *y);
static void cmove1(limb_t select, limb_t *x);
static void recip(limb_t *result, const limb_t *x);
static void reduceQ(limb_t *result, const limb_t *r);
static void mulQ(limb_t *result, const limb_t *x, const limb_t *y);
static void recipQ(limb_t *result, const limb_t *x);
static void generateK(uint8_t k[66], const uint8_t hm[66],
const uint8_t x[66], Hash *hash, uint64_t count);
static void generateK(uint8_t k[66], const uint8_t hm[66],
const uint8_t x[66], uint64_t count);
// Constructor and destructor are private - cannot instantiate this class.
P521() {}
~P521() {}
};
#endif