urcrypt_ed_add_scalarmult_scalarmult_base

This commit is contained in:
Paul Driver 2020-07-31 14:21:02 -07:00
parent cfb9b21018
commit 5b9f60fd2f
4 changed files with 50 additions and 47 deletions

View File

@ -2,61 +2,37 @@
** **
*/ */
#include "all.h" #include "all.h"
#include <urcrypt.h>
#include <ed25519.h>
#include <ge.h>
/* functions /* functions
*/ */
u3_noun u3_noun
u3qc_add_scalarmult_scalarmult_base(u3_atom a, u3qc_add_scalarmult_scalarmult_base(u3_atom a,
u3_atom a_point, u3_atom b,
u3_atom b) u3_atom c)
{ {
c3_y met_w; c3_w ate_w, bet_w, get_w;
met_w = u3r_met(3, a); if ( ((ate_w = u3r_met(3, a)) > 32) ||
if (met_w > 32) { ((bet_w = u3r_met(3, b)) > 32) ||
return u3m_bail(c3__fail); ((get_w = u3r_met(3, c)) > 32) ) {
return u3_none;
} }
c3_y a_y[32]; else {
c3_y a_y[32], b_y[32], c_y[32], out_y[32];
memset(a_y, 0, 32); memset(a_y, 0, 32);
u3r_bytes(0, met_w, a_y, a);
met_w = u3r_met(3, a_point);
if (met_w > 32) {
return u3m_bail(c3__fail);
}
c3_y a_point_y[32];
memset(a_point_y, 0, 32);
u3r_bytes(0, met_w, a_point_y, a_point);
met_w = u3r_met(3, b);
if (met_w > 32) {
return u3m_bail(c3__fail);
}
c3_y b_y[32];
memset(b_y, 0, 32); memset(b_y, 0, 32);
u3r_bytes(0, met_w, b_y, b); memset(c_y, 0, 32);
u3r_bytes(0, ate_w, a_y, a);
u3r_bytes(0, bet_w, b_y, b);
u3r_bytes(0, get_w, c_y, c);
ge_p3 A; return
if (ge_frombytes_negate_vartime(&A, a_point_y) != 0) { ( 0 == urcrypt_ed_add_scalarmult_scalarmult_base(a_y, b_y, c_y, out_y) )
return u3m_bail(c3__exit); ? u3i_bytes(32, out_y)
: u3_none;
} }
// Undo the negation from above. See add_scalar.c in the ed25519 distro.
fe_neg(A.X, A.X);
fe_neg(A.T, A.T);
ge_p2 r;
ge_double_scalarmult_vartime(&r, a_y, &A, b_y);
c3_y output_y[32];
ge_tobytes(output_y, &r);
return u3i_bytes(32, output_y);
} }
u3_noun u3_noun

View File

@ -4,7 +4,7 @@ PREFIX ?= ./out
################################################################################ ################################################################################
.PHONY: all test install clean .PHONY: all install clean
CFLAGS := $(CFLAGS) -O3 -Wall -Werror -pedantic -std=gnu99 CFLAGS := $(CFLAGS) -O3 -Wall -Werror -pedantic -std=gnu99
SOURCES = urcrypt.c urcrypt.h SOURCES = urcrypt.c urcrypt.h
@ -29,4 +29,4 @@ install: all
cp urcrypt.h $(PREFIX)/include/ cp urcrypt.h $(PREFIX)/include/
clean: clean:
rm -rf ./out rm urcrypt-static.o urcrypt-shared.o liburcrypt.a liburcrypt.so

View File

@ -57,6 +57,29 @@ urcrypt_ed_scalarmult_base(uint8_t a[32], uint8_t out[32])
ge_p3_tobytes(out, &R); ge_p3_tobytes(out, &R);
} }
int
urcrypt_ed_add_scalarmult_scalarmult_base(uint8_t a[32],
uint8_t a_point[32],
uint8_t b[32],
uint8_t out[32])
{
ge_p2 r;
ge_p3 A;
if (ge_frombytes_negate_vartime(&A, a_point) != 0) {
return -1;
}
// Undo the negation from above. See add_scalar.c in the ed25519 distro.
fe_neg(A.X, A.X);
fe_neg(A.T, A.T);
ge_double_scalarmult_vartime(&r, a, &A, b);
ge_tobytes(out, &r);
return 0;
}
void void
urcrypt_ed_sign(uint8_t *message, urcrypt_ed_sign(uint8_t *message,
size_t length, size_t length,

View File

@ -9,6 +9,10 @@
int urcrypt_ed_point_add(uint8_t a[32], uint8_t b[32], uint8_t out[32]); int urcrypt_ed_point_add(uint8_t a[32], uint8_t b[32], uint8_t out[32]);
int urcrypt_ed_scalarmult(uint8_t a[32], uint8_t b[32], uint8_t out[32]); int urcrypt_ed_scalarmult(uint8_t a[32], uint8_t b[32], uint8_t out[32]);
void urcrypt_ed_scalarmult_base(uint8_t a[32], uint8_t out[32]); void urcrypt_ed_scalarmult_base(uint8_t a[32], uint8_t out[32]);
int urcrypt_ed_add_scalarmult_scalarmult_base(uint8_t a[32],
uint8_t a_point[32],
uint8_t b[32],
uint8_t out[32]);
void urcrypt_ed_sign(uint8_t *message, void urcrypt_ed_sign(uint8_t *message,
size_t length, size_t length,
uint8_t seed[32], uint8_t seed[32],