xref: /freebsd-src/crypto/libecc/src/fp/fp_mul_redc1.c (revision f0865ec9906d5a18fa2a3b61381f22ce16e606ad)
1*f0865ec9SKyle Evans /*
2*f0865ec9SKyle Evans  *  Copyright (C) 2017 - This file is part of libecc project
3*f0865ec9SKyle Evans  *
4*f0865ec9SKyle Evans  *  Authors:
5*f0865ec9SKyle Evans  *      Ryad BENADJILA <ryadbenadjila@gmail.com>
6*f0865ec9SKyle Evans  *      Arnaud EBALARD <arnaud.ebalard@ssi.gouv.fr>
7*f0865ec9SKyle Evans  *      Jean-Pierre FLORI <jean-pierre.flori@ssi.gouv.fr>
8*f0865ec9SKyle Evans  *
9*f0865ec9SKyle Evans  *  Contributors:
10*f0865ec9SKyle Evans  *      Nicolas VIVET <nicolas.vivet@ssi.gouv.fr>
11*f0865ec9SKyle Evans  *      Karim KHALFALLAH <karim.khalfallah@ssi.gouv.fr>
12*f0865ec9SKyle Evans  *
13*f0865ec9SKyle Evans  *  This software is licensed under a dual BSD and GPL v2 license.
14*f0865ec9SKyle Evans  *  See LICENSE file at the root folder of the project.
15*f0865ec9SKyle Evans  */
16*f0865ec9SKyle Evans #include <libecc/fp/fp_mul_redc1.h>
17*f0865ec9SKyle Evans 
18*f0865ec9SKyle Evans /*
19*f0865ec9SKyle Evans  * Internal helper performing Montgomery multiplication. The function returns
20*f0865ec9SKyle Evans  * 0 on success, -1 on error.
21*f0865ec9SKyle Evans  *
22*f0865ec9SKyle Evans  * CAUTION: the function does not check input parameters. Those checks MUST be
23*f0865ec9SKyle Evans  * performed by the caller.
24*f0865ec9SKyle Evans  */
25*f0865ec9SKyle Evans ATTRIBUTE_WARN_UNUSED_RET static inline int _fp_mul_redc1(nn_t out, nn_src_t in1, nn_src_t in2,
26*f0865ec9SKyle Evans 				 fp_ctx_src_t ctx)
27*f0865ec9SKyle Evans {
28*f0865ec9SKyle Evans 	return nn_mul_redc1(out, in1, in2, &(ctx->p), ctx->mpinv);
29*f0865ec9SKyle Evans }
30*f0865ec9SKyle Evans 
31*f0865ec9SKyle Evans /*
32*f0865ec9SKyle Evans  * Compute out = in1 * in2 mod (p) in redcified form.
33*f0865ec9SKyle Evans  *
34*f0865ec9SKyle Evans  * Exported version based on previous one, that sanity checks input parameters.
35*f0865ec9SKyle Evans  * The function returns 0 on success, -1 on error.
36*f0865ec9SKyle Evans  *
37*f0865ec9SKyle Evans  * Aliasing is supported.
38*f0865ec9SKyle Evans  */
39*f0865ec9SKyle Evans int fp_mul_redc1(fp_t out, fp_src_t in1, fp_src_t in2)
40*f0865ec9SKyle Evans {
41*f0865ec9SKyle Evans 	int ret;
42*f0865ec9SKyle Evans 
43*f0865ec9SKyle Evans 	ret = fp_check_initialized(in1); EG(ret, err);
44*f0865ec9SKyle Evans 	ret = fp_check_initialized(in2); EG(ret, err);
45*f0865ec9SKyle Evans 	ret = fp_check_initialized(out); EG(ret, err);
46*f0865ec9SKyle Evans 
47*f0865ec9SKyle Evans 	MUST_HAVE((out->ctx == in1->ctx), ret, err);
48*f0865ec9SKyle Evans 	MUST_HAVE((out->ctx == in2->ctx), ret, err);
49*f0865ec9SKyle Evans 
50*f0865ec9SKyle Evans 	ret = _fp_mul_redc1(&(out->fp_val), &(in1->fp_val), &(in2->fp_val),
51*f0865ec9SKyle Evans 			    out->ctx);
52*f0865ec9SKyle Evans 
53*f0865ec9SKyle Evans err:
54*f0865ec9SKyle Evans 	return ret;
55*f0865ec9SKyle Evans }
56*f0865ec9SKyle Evans 
57*f0865ec9SKyle Evans /*
58*f0865ec9SKyle Evans  * Compute out = in * in mod (p) in redcified form.
59*f0865ec9SKyle Evans  *
60*f0865ec9SKyle Evans  * Aliasing is supported.
61*f0865ec9SKyle Evans  */
62*f0865ec9SKyle Evans int fp_sqr_redc1(fp_t out, fp_src_t in)
63*f0865ec9SKyle Evans {
64*f0865ec9SKyle Evans 	return fp_mul_redc1(out, in, in);
65*f0865ec9SKyle Evans }
66*f0865ec9SKyle Evans 
67*f0865ec9SKyle Evans /*
68*f0865ec9SKyle Evans  * Compute out = redcified form of in.
69*f0865ec9SKyle Evans  * redcify could be done by shifting and division by p. The function returns 0
70*f0865ec9SKyle Evans  * on success, -1 on error.
71*f0865ec9SKyle Evans  *
72*f0865ec9SKyle Evans  * Aliasing is supported.
73*f0865ec9SKyle Evans  */
74*f0865ec9SKyle Evans int fp_redcify(fp_t out, fp_src_t in)
75*f0865ec9SKyle Evans {
76*f0865ec9SKyle Evans 	int ret;
77*f0865ec9SKyle Evans 
78*f0865ec9SKyle Evans 	ret = fp_check_initialized(in); EG(ret, err);
79*f0865ec9SKyle Evans 	ret = fp_check_initialized(out); EG(ret, err);
80*f0865ec9SKyle Evans 
81*f0865ec9SKyle Evans 	MUST_HAVE((out->ctx == in->ctx), ret, err);
82*f0865ec9SKyle Evans 
83*f0865ec9SKyle Evans 	ret = _fp_mul_redc1(&(out->fp_val), &(in->fp_val), &(out->ctx->r_square),
84*f0865ec9SKyle Evans 			    out->ctx);
85*f0865ec9SKyle Evans 
86*f0865ec9SKyle Evans err:
87*f0865ec9SKyle Evans 	return ret;
88*f0865ec9SKyle Evans }
89*f0865ec9SKyle Evans 
90*f0865ec9SKyle Evans /*
91*f0865ec9SKyle Evans  * Compute out = unredcified form of in.
92*f0865ec9SKyle Evans  * The function returns 0 on success, -1 on error.
93*f0865ec9SKyle Evans  *
94*f0865ec9SKyle Evans  * Aliasing is supported.
95*f0865ec9SKyle Evans  */
96*f0865ec9SKyle Evans int fp_unredcify(fp_t out, fp_src_t in)
97*f0865ec9SKyle Evans {
98*f0865ec9SKyle Evans 	int ret;
99*f0865ec9SKyle Evans 	nn one;
100*f0865ec9SKyle Evans 	one.magic = WORD(0);
101*f0865ec9SKyle Evans 
102*f0865ec9SKyle Evans 	ret = fp_check_initialized(in); EG(ret, err);
103*f0865ec9SKyle Evans 	ret = fp_check_initialized(out); EG(ret, err);
104*f0865ec9SKyle Evans 	ret = nn_init(&one, 0);  EG(ret, err);
105*f0865ec9SKyle Evans 	ret = nn_one(&one); EG(ret, err);
106*f0865ec9SKyle Evans 	ret = _fp_mul_redc1(&(out->fp_val), &(in->fp_val), &one, out->ctx);
107*f0865ec9SKyle Evans 
108*f0865ec9SKyle Evans err:
109*f0865ec9SKyle Evans 	nn_uninit(&one);
110*f0865ec9SKyle Evans 
111*f0865ec9SKyle Evans 	return ret;
112*f0865ec9SKyle Evans }
113