698 	u8 conf[SHA256_MAC_LEN], *cruft = NULL, *ptr;  in eap_pwd_perform_confirm_exchange()  local
729 	cruft = os_malloc(prime_len * 2);  in eap_pwd_perform_confirm_exchange()
730 	if (!cruft) {  in eap_pwd_perform_confirm_exchange()
748 	if (crypto_bignum_to_bin(data->k, cruft, prime_len, prime_len) < 0)  in eap_pwd_perform_confirm_exchange()
751 	eap_pwd_h_update(hash, cruft, prime_len);  in eap_pwd_perform_confirm_exchange()
755 				   cruft, cruft + prime_len) != 0) {  in eap_pwd_perform_confirm_exchange()
760 	eap_pwd_h_update(hash, cruft, prime_len * 2);  in eap_pwd_perform_confirm_exchange()
763 	if (crypto_bignum_to_bin(data->server_scalar, cruft, order_len,  in eap_pwd_perform_confirm_exchange()
767 	eap_pwd_h_update(hash, cruft, order_len);  in eap_pwd_perform_confirm_exchange()
770 	if (crypto_ec_point_to_bin(data->grp->group, data->my_element, cruft,  in eap_pwd_perform_confirm_exchange()
771 				   cruft + prime_len) != 0) {  in eap_pwd_perform_confirm_exchange()
776 	eap_pwd_h_update(hash, cruft, prime_len * 2);  in eap_pwd_perform_confirm_exchange()
779 	if (crypto_bignum_to_bin(data->my_scalar, cruft, order_len,  in eap_pwd_perform_confirm_exchange()
783 	eap_pwd_h_update(hash, cruft, order_len);  in eap_pwd_perform_confirm_exchange()
810 	if (crypto_bignum_to_bin(data->k, cruft, prime_len, prime_len) < 0)  in eap_pwd_perform_confirm_exchange()
813 	eap_pwd_h_update(hash, cruft, prime_len);  in eap_pwd_perform_confirm_exchange()
816 	if (crypto_ec_point_to_bin(data->grp->group, data->my_element, cruft,  in eap_pwd_perform_confirm_exchange()
817 				   cruft + prime_len) != 0) {  in eap_pwd_perform_confirm_exchange()
822 	eap_pwd_h_update(hash, cruft, prime_len * 2);  in eap_pwd_perform_confirm_exchange()
825 	if (crypto_bignum_to_bin(data->my_scalar, cruft, order_len,  in eap_pwd_perform_confirm_exchange()
829 	eap_pwd_h_update(hash, cruft, order_len);  in eap_pwd_perform_confirm_exchange()
833 				   cruft, cruft + prime_len) != 0) {  in eap_pwd_perform_confirm_exchange()
838 	eap_pwd_h_update(hash, cruft, prime_len * 2);  in eap_pwd_perform_confirm_exchange()
841 	if (crypto_bignum_to_bin(data->server_scalar, cruft, order_len,  in eap_pwd_perform_confirm_exchange()
845 	eap_pwd_h_update(hash, cruft, order_len);  in eap_pwd_perform_confirm_exchange()
869 	bin_clear_free(cruft, prime_len * 2);  in eap_pwd_perform_confirm_exchange()