Lines Matching refs:EG
86 ret = local_memcpy(&priv_, priv, sizeof(kcdsa_priv_key)); EG(ret, err); in kcdsa_compute_pub_from_priv()
88 ret = nn_modinv_fermat(&(priv_.x), &(priv_.x), &(priv_.q)); EG(ret, err); in kcdsa_compute_pub_from_priv()
165 ret = local_memset(&pub, 0, sizeof(kcdsa_pub_key)); EG(ret, err); in kcdsa_sign()
166 ret = local_memset(hash, 0, sizeof(hash)); EG(ret, err); in kcdsa_sign()
167 ret = local_memset(pi_buf, 0, sizeof(pi_buf)); EG(ret, err); in kcdsa_sign()
176 ret = nn_check_initialized(p); EG(ret, err); in kcdsa_sign()
177 ret = nn_check_initialized(q); EG(ret, err); in kcdsa_sign()
178 ret = nn_check_initialized(g); EG(ret, err); in kcdsa_sign()
179 ret = nn_check_initialized(x); EG(ret, err); in kcdsa_sign()
182 ret = nn_bitlen(p, &alpha); EG(ret, err); in kcdsa_sign()
184 ret = nn_bitlen(q, &beta); EG(ret, err); in kcdsa_sign()
186 ret = gen_hash_get_hash_sizes(kcdsa_hash, &hlen, &block_size); EG(ret, err); in kcdsa_sign()
203 ret = kcdsa_compute_pub_from_priv(&pub, priv); EG(ret, err); in kcdsa_sign()
209 ret = _os2ip(&k, nonce, noncelen); EG(ret, err); in kcdsa_sign()
212 ret = nn_get_random_mod(&k, q); EG(ret, err); in kcdsa_sign()
216 ret = nn_copy(&k_, &k); EG(ret, err); in kcdsa_sign()
219 ret = _blind_scalar(&k_, q, &k_); EG(ret, err); in kcdsa_sign()
221 ret = _fix_scalar_msb(&k_, q, &k_); EG(ret, err); in kcdsa_sign()
225 ret = nn_init(pi, 0); EG(ret, err); in kcdsa_sign()
227 ret = nn_mod_pow(pi, g, &k_, p); EG(ret, err); in kcdsa_sign()
232 ret = _i2osp(pi, pi_buf, (u16)BYTECEIL(alpha)); EG(ret, err); in kcdsa_sign()
237 ret = gen_hash_init(&hash_ctx, kcdsa_hash); EG(ret, err); in kcdsa_sign()
238 ret = gen_hash_update(&hash_ctx, pi_buf, (u16)BYTECEIL(alpha), kcdsa_hash); EG(ret, err); in kcdsa_sign()
240 ret = gen_hash_final(&hash_ctx, sig, kcdsa_hash); EG(ret, err); in kcdsa_sign()
243 ret = _i2osp(y, pi_buf, (u16)BYTECEIL(alpha)); EG(ret, err); in kcdsa_sign()
244 ret = buf_lshift(pi_buf, (u16)BYTECEIL(alpha), (u16)(BYTECEIL(alpha) - block_size)); EG(ret, err); in kcdsa_sign()
245 ret = gen_hash_init(&hash_ctx, kcdsa_hash); EG(ret, err); in kcdsa_sign()
246 ret = gen_hash_update(&hash_ctx, pi_buf, block_size, kcdsa_hash); EG(ret, err); in kcdsa_sign()
247 ret = gen_hash_update(&hash_ctx, msg, msglen, kcdsa_hash); EG(ret, err); in kcdsa_sign()
248 ret = gen_hash_final(&hash_ctx, hash, kcdsa_hash); EG(ret, err); in kcdsa_sign()
252 ret = _os2ip(&s, hash, hlen); EG(ret, err); in kcdsa_sign()
257 ret = gen_hash_init(&hash_ctx, kcdsa_hash); EG(ret, err); in kcdsa_sign()
258 ret = gen_hash_update(&hash_ctx, pi_buf, (u16)BYTECEIL(alpha), kcdsa_hash); EG(ret, err); in kcdsa_sign()
260 ret = gen_hash_final(&hash_ctx, hash, kcdsa_hash); EG(ret, err); in kcdsa_sign()
262 ret = buf_lshift(hash, hlen, (u16)(hlen - BYTECEIL(beta))); EG(ret, err); in kcdsa_sign()
263 ret = local_memcpy(sig, hash, (u16)BYTECEIL(beta)); EG(ret, err); in kcdsa_sign()
266 ret = _i2osp(y, pi_buf, (u16)BYTECEIL(alpha)); EG(ret, err); in kcdsa_sign()
267 ret = buf_lshift(pi_buf, (u16)BYTECEIL(alpha), (u16)(BYTECEIL(alpha) - block_size)); EG(ret, err); in kcdsa_sign()
268 ret = gen_hash_init(&hash_ctx, kcdsa_hash); EG(ret, err); in kcdsa_sign()
269 ret = gen_hash_update(&hash_ctx, pi_buf, block_size, kcdsa_hash); EG(ret, err); in kcdsa_sign()
270 ret = gen_hash_update(&hash_ctx, msg, msglen, kcdsa_hash); EG(ret, err); in kcdsa_sign()
271 ret = gen_hash_final(&hash_ctx, hash, kcdsa_hash); EG(ret, err); in kcdsa_sign()
273 ret = buf_lshift(hash, hlen, (u16)(hlen - BYTECEIL(beta))); EG(ret, err); in kcdsa_sign()
277 ret = _os2ip(&s, hash, (u16)BYTECEIL(beta)); EG(ret, err); in kcdsa_sign()
281 ret = nn_mod(&s, &s, q); EG(ret, err); in kcdsa_sign()
286 ret = nn_get_random_mod(&b, q); EG(ret, err); in kcdsa_sign()
288 ret = nn_mod_mul(&s, &s, &b, q); EG(ret, err); in kcdsa_sign()
290 ret = nn_mod_mul(&k, &k, &b, q); EG(ret, err); in kcdsa_sign()
296 ret = nn_modinv_fermat(&b, &b, q); EG(ret, err); in kcdsa_sign()
300 ret = nn_mod_sub(&s, &k, &s, q); EG(ret, err); in kcdsa_sign()
301 ret = nn_mod_mul(&s, &s, x, q); EG(ret, err); in kcdsa_sign()
305 ret = nn_mod_mul(&s, &s, &b, q); EG(ret, err); in kcdsa_sign()
308 ret = nn_iszero(&s, &iszero); EG(ret, err); in kcdsa_sign()
372 ret = local_memset(pi_buf, 0, sizeof(pi_buf)); EG(ret, err); in kcdsa_verify()
373 ret = local_memset(hash, 0, sizeof(hash)); EG(ret, err); in kcdsa_verify()
382 ret = nn_check_initialized(p); EG(ret, err); in kcdsa_verify()
383 ret = nn_check_initialized(q); EG(ret, err); in kcdsa_verify()
384 ret = nn_check_initialized(g); EG(ret, err); in kcdsa_verify()
385 ret = nn_check_initialized(y); EG(ret, err); in kcdsa_verify()
388 ret = nn_bitlen(p, &alpha); EG(ret, err); in kcdsa_verify()
390 ret = nn_bitlen(q, &beta); EG(ret, err); in kcdsa_verify()
392 ret = gen_hash_get_hash_sizes(kcdsa_hash, &hlen, &block_size); EG(ret, err); in kcdsa_verify()
409 ret = _os2ip(&s, sig + curr_rlen, (u16)(siglen - curr_rlen)); EG(ret, err); in kcdsa_verify()
412 ret = nn_iszero(&s, &iszero); EG(ret, err); in kcdsa_verify()
415 ret = nn_cmp(&s, q, &cmp); EG(ret, err); in kcdsa_verify()
419 ret = nn_init(&u, 0); EG(ret, err); in kcdsa_verify()
420 ret = nn_init(&pi, 0); EG(ret, err); in kcdsa_verify()
427 ret = _i2osp(y, pi_buf, (u16)BYTECEIL(alpha)); EG(ret, err); in kcdsa_verify()
428 ret = buf_lshift(pi_buf, (u16)BYTECEIL(alpha), (u16)(BYTECEIL(alpha) - block_size)); EG(ret, err); in kcdsa_verify()
429 ret = gen_hash_init(&hash_ctx, kcdsa_hash); EG(ret, err); in kcdsa_verify()
430 ret = gen_hash_update(&hash_ctx, pi_buf, block_size, kcdsa_hash); EG(ret, err); in kcdsa_verify()
431 ret = gen_hash_update(&hash_ctx, msg, msglen, kcdsa_hash); EG(ret, err); in kcdsa_verify()
432 ret = gen_hash_final(&hash_ctx, hash, kcdsa_hash); EG(ret, err); in kcdsa_verify()
436 ret = _os2ip(&v, hash, hlen); EG(ret, err); in kcdsa_verify()
442 ret = _i2osp(y, pi_buf, (u16)BYTECEIL(alpha)); EG(ret, err); in kcdsa_verify()
443 ret = buf_lshift(pi_buf, (u16)BYTECEIL(alpha), (u16)(BYTECEIL(alpha) - block_size)); EG(ret, err); in kcdsa_verify()
444 ret = gen_hash_init(&hash_ctx, kcdsa_hash); EG(ret, err); in kcdsa_verify()
445 ret = gen_hash_update(&hash_ctx, pi_buf, block_size, kcdsa_hash); EG(ret, err); in kcdsa_verify()
446 ret = gen_hash_update(&hash_ctx, msg, msglen, kcdsa_hash); EG(ret, err); in kcdsa_verify()
447 ret = gen_hash_final(&hash_ctx, hash, kcdsa_hash); EG(ret, err); in kcdsa_verify()
449 ret = buf_lshift(hash, hlen, (u16)(hlen - BYTECEIL(beta))); EG(ret, err); in kcdsa_verify()
453 ret = _os2ip(&v, hash, (u16)BYTECEIL(beta)); EG(ret, err); in kcdsa_verify()
457 ret = nn_mod(&v, &v, q); EG(ret, err); in kcdsa_verify()
463 ret = _nn_mod_pow_insecure(&u, y, &s, p); EG(ret, err); in kcdsa_verify()
465 ret = _nn_mod_pow_insecure(&pi, g, &v, p); EG(ret, err); in kcdsa_verify()
467 ret = nn_mod_mul(&pi, &pi, &u, p); EG(ret, err); in kcdsa_verify()
472 ret = _i2osp(&pi, pi_buf, (u16)BYTECEIL(alpha)); EG(ret, err); in kcdsa_verify()
476 ret = gen_hash_init(&hash_ctx, kcdsa_hash); EG(ret, err); in kcdsa_verify()
477 ret = gen_hash_update(&hash_ctx, pi_buf, (u16)BYTECEIL(alpha), kcdsa_hash); EG(ret, err); in kcdsa_verify()
479 ret = gen_hash_final(&hash_ctx, hash, kcdsa_hash); EG(ret, err); in kcdsa_verify()
483 ret = gen_hash_init(&hash_ctx, kcdsa_hash); EG(ret, err); in kcdsa_verify()
484 ret = gen_hash_update(&hash_ctx, pi_buf, (u16)BYTECEIL(alpha), kcdsa_hash); EG(ret, err); in kcdsa_verify()
486 ret = gen_hash_final(&hash_ctx, hash, kcdsa_hash); EG(ret, err); in kcdsa_verify()
488 ret = buf_lshift(hash, hlen, (u16)(hlen - BYTECEIL(beta))); EG(ret, err); in kcdsa_verify()
492 ret = are_equal(sig, hash, curr_rlen, &cmp); EG(ret, err); in kcdsa_verify()
743 …ret = kcdsa_import_priv_key(&priv, p, sizeof(p), q, sizeof(q), g, sizeof(g), x, sizeof(x)); EG(ret… in main()
744 …ret = kcdsa_import_pub_key(&pub, p, sizeof(p), q, sizeof(q), g, sizeof(g), y, sizeof(y)); EG(ret, … in main()
745 ret = kcdsa_compute_pub_from_priv(&pub2, &priv); EG(ret, err); in main()
749 …_sign(&priv, msg, sizeof(msg)-1, nonce, sizeof(nonce), sig, sizeof(sig), kcdsa_hash); EG(ret, err); in main()