1*f0865ec9SKyle Evans /* 2*f0865ec9SKyle Evans * Copyright (C) 2017 - This file is part of libecc project 3*f0865ec9SKyle Evans * 4*f0865ec9SKyle Evans * Authors: 5*f0865ec9SKyle Evans * Ryad BENADJILA <ryadbenadjila@gmail.com> 6*f0865ec9SKyle Evans * Arnaud EBALARD <arnaud.ebalard@ssi.gouv.fr> 7*f0865ec9SKyle Evans * Jean-Pierre FLORI <jean-pierre.flori@ssi.gouv.fr> 8*f0865ec9SKyle Evans * 9*f0865ec9SKyle Evans * Contributors: 10*f0865ec9SKyle Evans * Nicolas VIVET <nicolas.vivet@ssi.gouv.fr> 11*f0865ec9SKyle Evans * Karim KHALFALLAH <karim.khalfallah@ssi.gouv.fr> 12*f0865ec9SKyle Evans * 13*f0865ec9SKyle Evans * This software is licensed under a dual BSD and GPL v2 license. 14*f0865ec9SKyle Evans * See LICENSE file at the root folder of the project. 15*f0865ec9SKyle Evans */ 16*f0865ec9SKyle Evans #include <libecc/fp/fp_mul_redc1.h> 17*f0865ec9SKyle Evans 18*f0865ec9SKyle Evans /* 19*f0865ec9SKyle Evans * Internal helper performing Montgomery multiplication. The function returns 20*f0865ec9SKyle Evans * 0 on success, -1 on error. 21*f0865ec9SKyle Evans * 22*f0865ec9SKyle Evans * CAUTION: the function does not check input parameters. Those checks MUST be 23*f0865ec9SKyle Evans * performed by the caller. 24*f0865ec9SKyle Evans */ 25*f0865ec9SKyle Evans ATTRIBUTE_WARN_UNUSED_RET static inline int _fp_mul_redc1(nn_t out, nn_src_t in1, nn_src_t in2, 26*f0865ec9SKyle Evans fp_ctx_src_t ctx) 27*f0865ec9SKyle Evans { 28*f0865ec9SKyle Evans return nn_mul_redc1(out, in1, in2, &(ctx->p), ctx->mpinv); 29*f0865ec9SKyle Evans } 30*f0865ec9SKyle Evans 31*f0865ec9SKyle Evans /* 32*f0865ec9SKyle Evans * Compute out = in1 * in2 mod (p) in redcified form. 33*f0865ec9SKyle Evans * 34*f0865ec9SKyle Evans * Exported version based on previous one, that sanity checks input parameters. 35*f0865ec9SKyle Evans * The function returns 0 on success, -1 on error. 36*f0865ec9SKyle Evans * 37*f0865ec9SKyle Evans * Aliasing is supported. 38*f0865ec9SKyle Evans */ 39*f0865ec9SKyle Evans int fp_mul_redc1(fp_t out, fp_src_t in1, fp_src_t in2) 40*f0865ec9SKyle Evans { 41*f0865ec9SKyle Evans int ret; 42*f0865ec9SKyle Evans 43*f0865ec9SKyle Evans ret = fp_check_initialized(in1); EG(ret, err); 44*f0865ec9SKyle Evans ret = fp_check_initialized(in2); EG(ret, err); 45*f0865ec9SKyle Evans ret = fp_check_initialized(out); EG(ret, err); 46*f0865ec9SKyle Evans 47*f0865ec9SKyle Evans MUST_HAVE((out->ctx == in1->ctx), ret, err); 48*f0865ec9SKyle Evans MUST_HAVE((out->ctx == in2->ctx), ret, err); 49*f0865ec9SKyle Evans 50*f0865ec9SKyle Evans ret = _fp_mul_redc1(&(out->fp_val), &(in1->fp_val), &(in2->fp_val), 51*f0865ec9SKyle Evans out->ctx); 52*f0865ec9SKyle Evans 53*f0865ec9SKyle Evans err: 54*f0865ec9SKyle Evans return ret; 55*f0865ec9SKyle Evans } 56*f0865ec9SKyle Evans 57*f0865ec9SKyle Evans /* 58*f0865ec9SKyle Evans * Compute out = in * in mod (p) in redcified form. 59*f0865ec9SKyle Evans * 60*f0865ec9SKyle Evans * Aliasing is supported. 61*f0865ec9SKyle Evans */ 62*f0865ec9SKyle Evans int fp_sqr_redc1(fp_t out, fp_src_t in) 63*f0865ec9SKyle Evans { 64*f0865ec9SKyle Evans return fp_mul_redc1(out, in, in); 65*f0865ec9SKyle Evans } 66*f0865ec9SKyle Evans 67*f0865ec9SKyle Evans /* 68*f0865ec9SKyle Evans * Compute out = redcified form of in. 69*f0865ec9SKyle Evans * redcify could be done by shifting and division by p. The function returns 0 70*f0865ec9SKyle Evans * on success, -1 on error. 71*f0865ec9SKyle Evans * 72*f0865ec9SKyle Evans * Aliasing is supported. 73*f0865ec9SKyle Evans */ 74*f0865ec9SKyle Evans int fp_redcify(fp_t out, fp_src_t in) 75*f0865ec9SKyle Evans { 76*f0865ec9SKyle Evans int ret; 77*f0865ec9SKyle Evans 78*f0865ec9SKyle Evans ret = fp_check_initialized(in); EG(ret, err); 79*f0865ec9SKyle Evans ret = fp_check_initialized(out); EG(ret, err); 80*f0865ec9SKyle Evans 81*f0865ec9SKyle Evans MUST_HAVE((out->ctx == in->ctx), ret, err); 82*f0865ec9SKyle Evans 83*f0865ec9SKyle Evans ret = _fp_mul_redc1(&(out->fp_val), &(in->fp_val), &(out->ctx->r_square), 84*f0865ec9SKyle Evans out->ctx); 85*f0865ec9SKyle Evans 86*f0865ec9SKyle Evans err: 87*f0865ec9SKyle Evans return ret; 88*f0865ec9SKyle Evans } 89*f0865ec9SKyle Evans 90*f0865ec9SKyle Evans /* 91*f0865ec9SKyle Evans * Compute out = unredcified form of in. 92*f0865ec9SKyle Evans * The function returns 0 on success, -1 on error. 93*f0865ec9SKyle Evans * 94*f0865ec9SKyle Evans * Aliasing is supported. 95*f0865ec9SKyle Evans */ 96*f0865ec9SKyle Evans int fp_unredcify(fp_t out, fp_src_t in) 97*f0865ec9SKyle Evans { 98*f0865ec9SKyle Evans int ret; 99*f0865ec9SKyle Evans nn one; 100*f0865ec9SKyle Evans one.magic = WORD(0); 101*f0865ec9SKyle Evans 102*f0865ec9SKyle Evans ret = fp_check_initialized(in); EG(ret, err); 103*f0865ec9SKyle Evans ret = fp_check_initialized(out); EG(ret, err); 104*f0865ec9SKyle Evans ret = nn_init(&one, 0); EG(ret, err); 105*f0865ec9SKyle Evans ret = nn_one(&one); EG(ret, err); 106*f0865ec9SKyle Evans ret = _fp_mul_redc1(&(out->fp_val), &(in->fp_val), &one, out->ctx); 107*f0865ec9SKyle Evans 108*f0865ec9SKyle Evans err: 109*f0865ec9SKyle Evans nn_uninit(&one); 110*f0865ec9SKyle Evans 111*f0865ec9SKyle Evans return ret; 112*f0865ec9SKyle Evans } 113