diff options
Diffstat (limited to 'src/lib/libcrypto/ec/ecp_methods.c')
-rw-r--r-- | src/lib/libcrypto/ec/ecp_methods.c | 79 |
1 files changed, 10 insertions, 69 deletions
diff --git a/src/lib/libcrypto/ec/ecp_methods.c b/src/lib/libcrypto/ec/ecp_methods.c index b2ecc7e17a..7bdeb351da 100644 --- a/src/lib/libcrypto/ec/ecp_methods.c +++ b/src/lib/libcrypto/ec/ecp_methods.c | |||
@@ -1,4 +1,4 @@ | |||
1 | /* $OpenBSD: ecp_methods.c,v 1.18 2025/01/05 16:07:08 tb Exp $ */ | 1 | /* $OpenBSD: ecp_methods.c,v 1.19 2025/01/06 10:56:46 tb Exp $ */ |
2 | /* Includes code written by Lenka Fibikova <fibikova@exp-math.uni-essen.de> | 2 | /* Includes code written by Lenka Fibikova <fibikova@exp-math.uni-essen.de> |
3 | * for the OpenSSL project. | 3 | * for the OpenSSL project. |
4 | * Includes code written by Bodo Moeller for the OpenSSL project. | 4 | * Includes code written by Bodo Moeller for the OpenSSL project. |
@@ -124,23 +124,6 @@ ec_encode_scalar(const EC_GROUP *group, BIGNUM *bn, const BIGNUM *x, BN_CTX *ctx | |||
124 | } | 124 | } |
125 | 125 | ||
126 | static int | 126 | static int |
127 | ec_encode_z_coordinate(const EC_GROUP *group, BIGNUM *bn, int *is_one, | ||
128 | const BIGNUM *z, BN_CTX *ctx) | ||
129 | { | ||
130 | if (!BN_nnmod(bn, z, group->p, ctx)) | ||
131 | return 0; | ||
132 | |||
133 | *is_one = BN_is_one(bn); | ||
134 | if (*is_one && group->meth->field_set_to_one != NULL) | ||
135 | return group->meth->field_set_to_one(group, bn, ctx); | ||
136 | |||
137 | if (group->meth->field_encode != NULL) | ||
138 | return group->meth->field_encode(group, bn, bn, ctx); | ||
139 | |||
140 | return 1; | ||
141 | } | ||
142 | |||
143 | static int | ||
144 | ec_group_set_curve(EC_GROUP *group, | 127 | ec_group_set_curve(EC_GROUP *group, |
145 | const BIGNUM *p, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx) | 128 | const BIGNUM *p, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx) |
146 | { | 129 | { |
@@ -262,48 +245,23 @@ ec_group_check_discriminant(const EC_GROUP *group, BN_CTX *ctx) | |||
262 | } | 245 | } |
263 | 246 | ||
264 | static int | 247 | static int |
265 | ec_set_Jprojective_coordinates(const EC_GROUP *group, EC_POINT *point, | 248 | ec_point_set_affine_coordinates(const EC_GROUP *group, EC_POINT *point, |
266 | const BIGNUM *x, const BIGNUM *y, const BIGNUM *z, BN_CTX *ctx) | 249 | const BIGNUM *x, const BIGNUM *y, BN_CTX *ctx) |
267 | { | 250 | { |
268 | int ret = 0; | 251 | int ret = 0; |
269 | 252 | ||
270 | /* | 253 | if (x == NULL || y == NULL) { |
271 | * Setting individual coordinates allows the creation of bad points. | 254 | ECerror(ERR_R_PASSED_NULL_PARAMETER); |
272 | * EC_POINT_set_Jprojective_coordinates() checks at the API boundary. | 255 | goto err; |
273 | */ | ||
274 | |||
275 | if (x != NULL) { | ||
276 | if (!ec_encode_scalar(group, point->X, x, ctx)) | ||
277 | goto err; | ||
278 | } | ||
279 | if (y != NULL) { | ||
280 | if (!ec_encode_scalar(group, point->Y, y, ctx)) | ||
281 | goto err; | ||
282 | } | ||
283 | if (z != NULL) { | ||
284 | if (!ec_encode_z_coordinate(group, point->Z, &point->Z_is_one, | ||
285 | z, ctx)) | ||
286 | goto err; | ||
287 | } | 256 | } |
288 | 257 | ||
289 | ret = 1; | 258 | if (!ec_encode_scalar(group, point->X, x, ctx)) |
290 | |||
291 | err: | ||
292 | return ret; | ||
293 | } | ||
294 | |||
295 | static int | ||
296 | ec_get_Jprojective_coordinates(const EC_GROUP *group, const EC_POINT *point, | ||
297 | BIGNUM *x, BIGNUM *y, BIGNUM *z, BN_CTX *ctx) | ||
298 | { | ||
299 | int ret = 0; | ||
300 | |||
301 | if (!ec_decode_scalar(group, x, point->X, ctx)) | ||
302 | goto err; | 259 | goto err; |
303 | if (!ec_decode_scalar(group, y, point->Y, ctx)) | 260 | if (!ec_encode_scalar(group, point->Y, y, ctx)) |
304 | goto err; | 261 | goto err; |
305 | if (!ec_decode_scalar(group, z, point->Z, ctx)) | 262 | if (!ec_encode_scalar(group, point->Z, BN_value_one(), ctx)) |
306 | goto err; | 263 | goto err; |
264 | point->Z_is_one = 1; | ||
307 | 265 | ||
308 | ret = 1; | 266 | ret = 1; |
309 | 267 | ||
@@ -312,19 +270,6 @@ ec_get_Jprojective_coordinates(const EC_GROUP *group, const EC_POINT *point, | |||
312 | } | 270 | } |
313 | 271 | ||
314 | static int | 272 | static int |
315 | ec_point_set_affine_coordinates(const EC_GROUP *group, EC_POINT *point, | ||
316 | const BIGNUM *x, const BIGNUM *y, BN_CTX *ctx) | ||
317 | { | ||
318 | if (x == NULL || y == NULL) { | ||
319 | /* unlike for projective coordinates, we do not tolerate this */ | ||
320 | ECerror(ERR_R_PASSED_NULL_PARAMETER); | ||
321 | return 0; | ||
322 | } | ||
323 | return EC_POINT_set_Jprojective_coordinates(group, point, x, y, | ||
324 | BN_value_one(), ctx); | ||
325 | } | ||
326 | |||
327 | static int | ||
328 | ec_point_get_affine_coordinates(const EC_GROUP *group, const EC_POINT *point, | 273 | ec_point_get_affine_coordinates(const EC_GROUP *group, const EC_POINT *point, |
329 | BIGNUM *x, BIGNUM *y, BN_CTX *ctx) | 274 | BIGNUM *x, BIGNUM *y, BN_CTX *ctx) |
330 | { | 275 | { |
@@ -1652,8 +1597,6 @@ static const EC_METHOD ec_GFp_simple_method = { | |||
1652 | .group_get_degree = ec_group_get_degree, | 1597 | .group_get_degree = ec_group_get_degree, |
1653 | .group_order_bits = ec_group_simple_order_bits, | 1598 | .group_order_bits = ec_group_simple_order_bits, |
1654 | .group_check_discriminant = ec_group_check_discriminant, | 1599 | .group_check_discriminant = ec_group_check_discriminant, |
1655 | .point_set_Jprojective_coordinates = ec_set_Jprojective_coordinates, | ||
1656 | .point_get_Jprojective_coordinates = ec_get_Jprojective_coordinates, | ||
1657 | .point_set_affine_coordinates = ec_point_set_affine_coordinates, | 1600 | .point_set_affine_coordinates = ec_point_set_affine_coordinates, |
1658 | .point_get_affine_coordinates = ec_point_get_affine_coordinates, | 1601 | .point_get_affine_coordinates = ec_point_get_affine_coordinates, |
1659 | .point_set_compressed_coordinates = ec_set_compressed_coordinates, | 1602 | .point_set_compressed_coordinates = ec_set_compressed_coordinates, |
@@ -1687,8 +1630,6 @@ static const EC_METHOD ec_GFp_mont_method = { | |||
1687 | .group_get_degree = ec_group_get_degree, | 1630 | .group_get_degree = ec_group_get_degree, |
1688 | .group_order_bits = ec_group_simple_order_bits, | 1631 | .group_order_bits = ec_group_simple_order_bits, |
1689 | .group_check_discriminant = ec_group_check_discriminant, | 1632 | .group_check_discriminant = ec_group_check_discriminant, |
1690 | .point_set_Jprojective_coordinates = ec_set_Jprojective_coordinates, | ||
1691 | .point_get_Jprojective_coordinates = ec_get_Jprojective_coordinates, | ||
1692 | .point_set_affine_coordinates = ec_point_set_affine_coordinates, | 1633 | .point_set_affine_coordinates = ec_point_set_affine_coordinates, |
1693 | .point_get_affine_coordinates = ec_point_get_affine_coordinates, | 1634 | .point_get_affine_coordinates = ec_point_get_affine_coordinates, |
1694 | .point_set_compressed_coordinates = ec_set_compressed_coordinates, | 1635 | .point_set_compressed_coordinates = ec_set_compressed_coordinates, |