diff options
Diffstat (limited to 'src/lib/libcrypto/ec/ecp_methods.c')
| -rw-r--r-- | src/lib/libcrypto/ec/ecp_methods.c | 79 |
1 files changed, 10 insertions, 69 deletions
diff --git a/src/lib/libcrypto/ec/ecp_methods.c b/src/lib/libcrypto/ec/ecp_methods.c index b2ecc7e17a..7bdeb351da 100644 --- a/src/lib/libcrypto/ec/ecp_methods.c +++ b/src/lib/libcrypto/ec/ecp_methods.c | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: ecp_methods.c,v 1.18 2025/01/05 16:07:08 tb Exp $ */ | 1 | /* $OpenBSD: ecp_methods.c,v 1.19 2025/01/06 10:56:46 tb Exp $ */ |
| 2 | /* Includes code written by Lenka Fibikova <fibikova@exp-math.uni-essen.de> | 2 | /* Includes code written by Lenka Fibikova <fibikova@exp-math.uni-essen.de> |
| 3 | * for the OpenSSL project. | 3 | * for the OpenSSL project. |
| 4 | * Includes code written by Bodo Moeller for the OpenSSL project. | 4 | * Includes code written by Bodo Moeller for the OpenSSL project. |
| @@ -124,23 +124,6 @@ ec_encode_scalar(const EC_GROUP *group, BIGNUM *bn, const BIGNUM *x, BN_CTX *ctx | |||
| 124 | } | 124 | } |
| 125 | 125 | ||
| 126 | static int | 126 | static int |
| 127 | ec_encode_z_coordinate(const EC_GROUP *group, BIGNUM *bn, int *is_one, | ||
| 128 | const BIGNUM *z, BN_CTX *ctx) | ||
| 129 | { | ||
| 130 | if (!BN_nnmod(bn, z, group->p, ctx)) | ||
| 131 | return 0; | ||
| 132 | |||
| 133 | *is_one = BN_is_one(bn); | ||
| 134 | if (*is_one && group->meth->field_set_to_one != NULL) | ||
| 135 | return group->meth->field_set_to_one(group, bn, ctx); | ||
| 136 | |||
| 137 | if (group->meth->field_encode != NULL) | ||
| 138 | return group->meth->field_encode(group, bn, bn, ctx); | ||
| 139 | |||
| 140 | return 1; | ||
| 141 | } | ||
| 142 | |||
| 143 | static int | ||
| 144 | ec_group_set_curve(EC_GROUP *group, | 127 | ec_group_set_curve(EC_GROUP *group, |
| 145 | const BIGNUM *p, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx) | 128 | const BIGNUM *p, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx) |
| 146 | { | 129 | { |
| @@ -262,48 +245,23 @@ ec_group_check_discriminant(const EC_GROUP *group, BN_CTX *ctx) | |||
| 262 | } | 245 | } |
| 263 | 246 | ||
| 264 | static int | 247 | static int |
| 265 | ec_set_Jprojective_coordinates(const EC_GROUP *group, EC_POINT *point, | 248 | ec_point_set_affine_coordinates(const EC_GROUP *group, EC_POINT *point, |
| 266 | const BIGNUM *x, const BIGNUM *y, const BIGNUM *z, BN_CTX *ctx) | 249 | const BIGNUM *x, const BIGNUM *y, BN_CTX *ctx) |
| 267 | { | 250 | { |
| 268 | int ret = 0; | 251 | int ret = 0; |
| 269 | 252 | ||
| 270 | /* | 253 | if (x == NULL || y == NULL) { |
| 271 | * Setting individual coordinates allows the creation of bad points. | 254 | ECerror(ERR_R_PASSED_NULL_PARAMETER); |
| 272 | * EC_POINT_set_Jprojective_coordinates() checks at the API boundary. | 255 | goto err; |
| 273 | */ | ||
| 274 | |||
| 275 | if (x != NULL) { | ||
| 276 | if (!ec_encode_scalar(group, point->X, x, ctx)) | ||
| 277 | goto err; | ||
| 278 | } | ||
| 279 | if (y != NULL) { | ||
| 280 | if (!ec_encode_scalar(group, point->Y, y, ctx)) | ||
| 281 | goto err; | ||
| 282 | } | ||
| 283 | if (z != NULL) { | ||
| 284 | if (!ec_encode_z_coordinate(group, point->Z, &point->Z_is_one, | ||
| 285 | z, ctx)) | ||
| 286 | goto err; | ||
| 287 | } | 256 | } |
| 288 | 257 | ||
| 289 | ret = 1; | 258 | if (!ec_encode_scalar(group, point->X, x, ctx)) |
| 290 | |||
| 291 | err: | ||
| 292 | return ret; | ||
| 293 | } | ||
| 294 | |||
| 295 | static int | ||
| 296 | ec_get_Jprojective_coordinates(const EC_GROUP *group, const EC_POINT *point, | ||
| 297 | BIGNUM *x, BIGNUM *y, BIGNUM *z, BN_CTX *ctx) | ||
| 298 | { | ||
| 299 | int ret = 0; | ||
| 300 | |||
| 301 | if (!ec_decode_scalar(group, x, point->X, ctx)) | ||
| 302 | goto err; | 259 | goto err; |
| 303 | if (!ec_decode_scalar(group, y, point->Y, ctx)) | 260 | if (!ec_encode_scalar(group, point->Y, y, ctx)) |
| 304 | goto err; | 261 | goto err; |
| 305 | if (!ec_decode_scalar(group, z, point->Z, ctx)) | 262 | if (!ec_encode_scalar(group, point->Z, BN_value_one(), ctx)) |
| 306 | goto err; | 263 | goto err; |
| 264 | point->Z_is_one = 1; | ||
| 307 | 265 | ||
| 308 | ret = 1; | 266 | ret = 1; |
| 309 | 267 | ||
| @@ -312,19 +270,6 @@ ec_get_Jprojective_coordinates(const EC_GROUP *group, const EC_POINT *point, | |||
| 312 | } | 270 | } |
| 313 | 271 | ||
| 314 | static int | 272 | static int |
| 315 | ec_point_set_affine_coordinates(const EC_GROUP *group, EC_POINT *point, | ||
| 316 | const BIGNUM *x, const BIGNUM *y, BN_CTX *ctx) | ||
| 317 | { | ||
| 318 | if (x == NULL || y == NULL) { | ||
| 319 | /* unlike for projective coordinates, we do not tolerate this */ | ||
| 320 | ECerror(ERR_R_PASSED_NULL_PARAMETER); | ||
| 321 | return 0; | ||
| 322 | } | ||
| 323 | return EC_POINT_set_Jprojective_coordinates(group, point, x, y, | ||
| 324 | BN_value_one(), ctx); | ||
| 325 | } | ||
| 326 | |||
| 327 | static int | ||
| 328 | ec_point_get_affine_coordinates(const EC_GROUP *group, const EC_POINT *point, | 273 | ec_point_get_affine_coordinates(const EC_GROUP *group, const EC_POINT *point, |
| 329 | BIGNUM *x, BIGNUM *y, BN_CTX *ctx) | 274 | BIGNUM *x, BIGNUM *y, BN_CTX *ctx) |
| 330 | { | 275 | { |
| @@ -1652,8 +1597,6 @@ static const EC_METHOD ec_GFp_simple_method = { | |||
| 1652 | .group_get_degree = ec_group_get_degree, | 1597 | .group_get_degree = ec_group_get_degree, |
| 1653 | .group_order_bits = ec_group_simple_order_bits, | 1598 | .group_order_bits = ec_group_simple_order_bits, |
| 1654 | .group_check_discriminant = ec_group_check_discriminant, | 1599 | .group_check_discriminant = ec_group_check_discriminant, |
| 1655 | .point_set_Jprojective_coordinates = ec_set_Jprojective_coordinates, | ||
| 1656 | .point_get_Jprojective_coordinates = ec_get_Jprojective_coordinates, | ||
| 1657 | .point_set_affine_coordinates = ec_point_set_affine_coordinates, | 1600 | .point_set_affine_coordinates = ec_point_set_affine_coordinates, |
| 1658 | .point_get_affine_coordinates = ec_point_get_affine_coordinates, | 1601 | .point_get_affine_coordinates = ec_point_get_affine_coordinates, |
| 1659 | .point_set_compressed_coordinates = ec_set_compressed_coordinates, | 1602 | .point_set_compressed_coordinates = ec_set_compressed_coordinates, |
| @@ -1687,8 +1630,6 @@ static const EC_METHOD ec_GFp_mont_method = { | |||
| 1687 | .group_get_degree = ec_group_get_degree, | 1630 | .group_get_degree = ec_group_get_degree, |
| 1688 | .group_order_bits = ec_group_simple_order_bits, | 1631 | .group_order_bits = ec_group_simple_order_bits, |
| 1689 | .group_check_discriminant = ec_group_check_discriminant, | 1632 | .group_check_discriminant = ec_group_check_discriminant, |
| 1690 | .point_set_Jprojective_coordinates = ec_set_Jprojective_coordinates, | ||
| 1691 | .point_get_Jprojective_coordinates = ec_get_Jprojective_coordinates, | ||
| 1692 | .point_set_affine_coordinates = ec_point_set_affine_coordinates, | 1633 | .point_set_affine_coordinates = ec_point_set_affine_coordinates, |
| 1693 | .point_get_affine_coordinates = ec_point_get_affine_coordinates, | 1634 | .point_get_affine_coordinates = ec_point_get_affine_coordinates, |
| 1694 | .point_set_compressed_coordinates = ec_set_compressed_coordinates, | 1635 | .point_set_compressed_coordinates = ec_set_compressed_coordinates, |
