318 	u8 conf[SHA256_MAC_LEN], *cruft = NULL, *ptr;  in eap_pwd_build_confirm_req()  local
334 	cruft = os_malloc(prime_len * 2);  in eap_pwd_build_confirm_req()
335 	if (!cruft) {  in eap_pwd_build_confirm_req()
355 	if (crypto_bignum_to_bin(data->k, cruft, prime_len, prime_len) < 0)  in eap_pwd_build_confirm_req()
358 	eap_pwd_h_update(hash, cruft, prime_len);  in eap_pwd_build_confirm_req()
361 	if (crypto_ec_point_to_bin(data->grp->group, data->my_element, cruft,  in eap_pwd_build_confirm_req()
362 				   cruft + prime_len) < 0) {  in eap_pwd_build_confirm_req()
367 	eap_pwd_h_update(hash, cruft, prime_len * 2);  in eap_pwd_build_confirm_req()
370 	if (crypto_bignum_to_bin(data->my_scalar, cruft, order_len,  in eap_pwd_build_confirm_req()
374 	eap_pwd_h_update(hash, cruft, order_len);  in eap_pwd_build_confirm_req()
377 	if (crypto_ec_point_to_bin(data->grp->group, data->peer_element, cruft,  in eap_pwd_build_confirm_req()
378 				   cruft + prime_len) < 0) {  in eap_pwd_build_confirm_req()
383 	eap_pwd_h_update(hash, cruft, prime_len * 2);  in eap_pwd_build_confirm_req()
386 	if (crypto_bignum_to_bin(data->peer_scalar, cruft, order_len,  in eap_pwd_build_confirm_req()
390 	eap_pwd_h_update(hash, cruft, order_len);  in eap_pwd_build_confirm_req()
394 	os_memset(cruft, 0, prime_len);  in eap_pwd_build_confirm_req()
395 	ptr = cruft;  in eap_pwd_build_confirm_req()
402 	eap_pwd_h_update(hash, cruft, ptr - cruft);  in eap_pwd_build_confirm_req()
416 	bin_clear_free(cruft, prime_len * 2);  in eap_pwd_build_confirm_req()
761 	u8 conf[SHA256_MAC_LEN], *cruft = NULL, *ptr;  in eap_pwd_process_confirm_resp()  local
784 	cruft = os_malloc(prime_len * 2);  in eap_pwd_process_confirm_resp()
785 	if (!cruft) {  in eap_pwd_process_confirm_resp()
799 	if (crypto_bignum_to_bin(data->k, cruft, prime_len, prime_len) < 0)  in eap_pwd_process_confirm_resp()
802 	eap_pwd_h_update(hash, cruft, prime_len);  in eap_pwd_process_confirm_resp()
805 	if (crypto_ec_point_to_bin(data->grp->group, data->peer_element, cruft,  in eap_pwd_process_confirm_resp()
806 				   cruft + prime_len) < 0) {  in eap_pwd_process_confirm_resp()
811 	eap_pwd_h_update(hash, cruft, prime_len * 2);  in eap_pwd_process_confirm_resp()
814 	if (crypto_bignum_to_bin(data->peer_scalar, cruft, order_len,  in eap_pwd_process_confirm_resp()
818 	eap_pwd_h_update(hash, cruft, order_len);  in eap_pwd_process_confirm_resp()
821 	if (crypto_ec_point_to_bin(data->grp->group, data->my_element, cruft,  in eap_pwd_process_confirm_resp()
822 				   cruft + prime_len) < 0) {  in eap_pwd_process_confirm_resp()
827 	eap_pwd_h_update(hash, cruft, prime_len * 2);  in eap_pwd_process_confirm_resp()
830 	if (crypto_bignum_to_bin(data->my_scalar, cruft, order_len,  in eap_pwd_process_confirm_resp()
834 	eap_pwd_h_update(hash, cruft, order_len);  in eap_pwd_process_confirm_resp()
860 	bin_clear_free(cruft, prime_len * 2);  in eap_pwd_process_confirm_resp()