Lines Matching full:eg
89 ret = nn_init_from_buf(&(pub->n), n, nlen); EG(ret, err); in rsa_import_pub_key()
113 ret = nn_init_from_buf(&(priv->key.s.n), n, nlen); EG(ret, err); in rsa_import_simple_priv_key()
114 ret = nn_init_from_buf(&(priv->key.s.d), d, dlen); EG(ret, err); in rsa_import_simple_priv_key()
118 ret = nn_init_from_buf(&(priv->key.s_pq.n), n, nlen); EG(ret, err); in rsa_import_simple_priv_key()
119 ret = nn_init_from_buf(&(priv->key.s_pq.d), d, dlen); EG(ret, err); in rsa_import_simple_priv_key()
120 ret = nn_init_from_buf(&(priv->key.s_pq.p), p, plen); EG(ret, err); in rsa_import_simple_priv_key()
121 ret = nn_init_from_buf(&(priv->key.s_pq.q), q, qlen); EG(ret, err); in rsa_import_simple_priv_key()
146 ret = nn_init_from_buf(&(priv->key.crt.p), p, plen); EG(ret, err); in rsa_import_crt_priv_key()
147 ret = nn_init_from_buf(&(priv->key.crt.q), q, qlen); EG(ret, err); in rsa_import_crt_priv_key()
148 ret = nn_init_from_buf(&(priv->key.crt.dP), dP, dPlen); EG(ret, err); in rsa_import_crt_priv_key()
149 ret = nn_init_from_buf(&(priv->key.crt.dQ), dQ, dQlen); EG(ret, err); in rsa_import_crt_priv_key()
150 ret = nn_init_from_buf(&(priv->key.crt.qInv), qInv, qInvlen); EG(ret, err); in rsa_import_crt_priv_key()
166 ret = nn_init_from_buf(&(cur->r), coeffs[i], coeffslens[i]); EG(ret, err); in rsa_import_crt_priv_key()
167 ret = nn_init_from_buf(&(cur->d), coeffs[i + 1], coeffslens[i + 1]); EG(ret, err); in rsa_import_crt_priv_key()
168 ret = nn_init_from_buf(&(cur->t), coeffs[i + 2], coeffslens[i + 2]); EG(ret, err); in rsa_import_crt_priv_key()
227 ret = nn_check_initialized(n); EG(ret, err); in rsaep()
228 ret = nn_check_initialized(e); EG(ret, err); in rsaep()
259 ret = nn_init(&b, 0); EG(ret, err); in _rsa_blind_exponent()
260 ret = nn_init(out, 0); EG(ret, err); in _rsa_blind_exponent()
262 ret = nn_one(out); EG(ret, err); in _rsa_blind_exponent()
263 ret = nn_lshift(out, out, bits); EG(ret, err); in _rsa_blind_exponent()
264 ret = nn_iszero(out, &check); EG(ret, err); in _rsa_blind_exponent()
269 ret = nn_get_random_mod(&b, out); EG(ret, err); in _rsa_blind_exponent()
272 ret = nn_copy(out, mod); EG(ret, err); in _rsa_blind_exponent()
273 ret = nn_dec(out, out); EG(ret, err); in _rsa_blind_exponent()
274 ret = nn_mul(&b, &b, out); EG(ret, err); in _rsa_blind_exponent()
277 ret = nn_mul(&b, &b, mod); EG(ret, err); in _rsa_blind_exponent()
305 ret = nn_init(&m_i, 0); EG(ret, err); in rsadp_crt_coeffs()
306 ret = nn_init(&h, 0); EG(ret, err); in rsadp_crt_coeffs()
307 ret = nn_init(&R, 0); EG(ret, err); in rsadp_crt_coeffs()
312 ret = nn_copy(&R, &(priv->key.crt.coeffs[0].r)); EG(ret, err); in rsadp_crt_coeffs()
321 ret = nn_check_initialized(r_i_1); EG(ret, err); in rsadp_crt_coeffs()
322 ret = nn_check_initialized(r_i); EG(ret, err); in rsadp_crt_coeffs()
323 ret = nn_check_initialized(d_i); EG(ret, err); in rsadp_crt_coeffs()
324 ret = nn_check_initialized(t_i); EG(ret, err); in rsadp_crt_coeffs()
328 ret = _rsa_blind_exponent(d_i, r_i, &h, (bitcnt_t)RSA_EXPONENT_BLINDING_SIZE, 1); EG(ret, err); in rsadp_crt_coeffs()
329 ret = nn_mod_pow(&m_i, c, &h, r_i); EG(ret, err); in rsadp_crt_coeffs()
331 ret = nn_mod_pow(&m_i, c, d_i, r_i); EG(ret, err); in rsadp_crt_coeffs()
334 ret = nn_mul(&R, &R, r_i_1); EG(ret, err); in rsadp_crt_coeffs()
336 ret = nn_mod(&h, m, r_i); EG(ret, err); in rsadp_crt_coeffs()
337 ret = nn_mod_sub(&h, &m_i, &h, r_i); EG(ret, err); in rsadp_crt_coeffs()
338 ret = nn_mod_mul(&h, &h, t_i, r_i); EG(ret, err); in rsadp_crt_coeffs()
340 ret = nn_mul(&h, &R, &h); EG(ret, err); in rsadp_crt_coeffs()
341 ret = nn_add(m, m, &h); EG(ret, err); in rsadp_crt_coeffs()
365 ret = nn_init(&m_1, 0); EG(ret, err); in rsadp_crt()
366 ret = nn_init(&m_2, 0); EG(ret, err); in rsadp_crt()
367 ret = nn_init(&h, 0); EG(ret, err); in rsadp_crt()
368 ret = nn_init(&msb_fixed, 0); EG(ret, err); in rsadp_crt()
379 ret = nn_check_initialized(p); EG(ret, err); in rsadp_crt()
380 ret = nn_check_initialized(q); EG(ret, err); in rsadp_crt()
381 ret = nn_check_initialized(dP); EG(ret, err); in rsadp_crt()
382 ret = nn_check_initialized(dQ); EG(ret, err); in rsadp_crt()
383 ret = nn_check_initialized(qInv); EG(ret, err); in rsadp_crt()
387 ret = _rsa_blind_exponent(dP, p, &h, (bitcnt_t)RSA_EXPONENT_BLINDING_SIZE, 1); EG(ret, err); in rsadp_crt()
388 ret = nn_mod_pow(&m_1, c, &h, p); EG(ret, err); in rsadp_crt()
390 ret = nn_mod_pow(&m_1, c, dP, p); EG(ret, err); in rsadp_crt()
394 ret = _rsa_blind_exponent(dQ, q, &h, (bitcnt_t)RSA_EXPONENT_BLINDING_SIZE, 1); EG(ret, err); in rsadp_crt()
395 ret = nn_mod_pow(&m_2, c, &h, q); EG(ret, err); in rsadp_crt()
397 ret = nn_mod_pow(&m_2, c, dQ, q); EG(ret, err); in rsadp_crt()
400 ret = nn_mod(&h, &m_2, p); EG(ret, err); in rsadp_crt()
401 ret = nn_mod_sub(&h, &m_1, &h, p); EG(ret, err); in rsadp_crt()
402 ret = nn_mod_mul(&h, &h, qInv, p); EG(ret, err); in rsadp_crt()
404 ret = nn_mul(m, &h, q); EG(ret, err); in rsadp_crt()
405 ret = nn_add(m, &m_2, m); EG(ret, err); in rsadp_crt()
447 ret = nn_check_initialized(n); EG(ret, err); in rsadp_nocrt()
448 ret = nn_check_initialized(d); EG(ret, err); in rsadp_nocrt()
461 ret = nn_init(&b1, 0); EG(ret, err); in rsadp_nocrt()
462 ret = nn_init(&b2, 0); EG(ret, err); in rsadp_nocrt()
463 ret = nn_dec(&b1, p); EG(ret, err); in rsadp_nocrt()
464 ret = nn_dec(&b2, q); EG(ret, err); in rsadp_nocrt()
465 ret = nn_mul(&b1, &b1, &b2); EG(ret, err); in rsadp_nocrt()
466 ret = _rsa_blind_exponent(d, &b1, &b2, (bitcnt_t)RSA_EXPONENT_BLINDING_SIZE, 0); EG(ret, err); in rsadp_nocrt()
467 ret = nn_mod_pow(m, c, &b2, n); EG(ret, err); in rsadp_nocrt()
501 ret = rsadp_nocrt(priv, c, m); EG(ret, err); in rsadp()
504 ret = rsadp_crt(priv, c, m); EG(ret, err); in rsadp()
537 ret = nn_init(&b, 0); EG(ret, err); in rsadp_hardened()
538 ret = nn_init(&binv, 0); EG(ret, err); in rsadp_hardened()
541 ret = nn_get_random_mod(&b, n); EG(ret, err); in rsadp_hardened()
545 ret = _nn_mod_pow_insecure(m, &b, e, n); EG(ret, err); in rsadp_hardened()
547 ret = nn_mod_mul(&b, m, c, n); EG(ret, err); in rsadp_hardened()
550 ret = rsadp(priv, &b, m); EG(ret, err); in rsadp_hardened()
553 ret = nn_mod_mul(m, m, &binv, n); EG(ret, err); in rsadp_hardened()
558 ret = rsaep(pub, m, &b); EG(ret, err); in rsadp_hardened()
559 ret = nn_cmp(c, &b, &check); EG(ret, err); in rsadp_hardened()
616 ret = local_memcpy(digestinfo, _digestinfo, sizeof(_digestinfo)); EG(ret, err); in rsa_digestinfo_from_hash()
625 ret = local_memcpy(digestinfo, _digestinfo, sizeof(_digestinfo)); EG(ret, err); in rsa_digestinfo_from_hash()
634 ret = local_memcpy(digestinfo, _digestinfo, sizeof(_digestinfo)); EG(ret, err); in rsa_digestinfo_from_hash()
643 ret = local_memcpy(digestinfo, _digestinfo, sizeof(_digestinfo)); EG(ret, err); in rsa_digestinfo_from_hash()
652 ret = local_memcpy(digestinfo, _digestinfo, sizeof(_digestinfo)); EG(ret, err); in rsa_digestinfo_from_hash()
661 ret = local_memcpy(digestinfo, _digestinfo, sizeof(_digestinfo)); EG(ret, err); in rsa_digestinfo_from_hash()
670 ret = local_memcpy(digestinfo, _digestinfo, sizeof(_digestinfo)); EG(ret, err); in rsa_digestinfo_from_hash()
679 ret = local_memcpy(digestinfo, _digestinfo, sizeof(_digestinfo)); EG(ret, err); in rsa_digestinfo_from_hash()
688 ret = local_memcpy(digestinfo, _digestinfo, sizeof(_digestinfo)); EG(ret, err); in rsa_digestinfo_from_hash()
697 ret = local_memcpy(digestinfo, _digestinfo, sizeof(_digestinfo)); EG(ret, err); in rsa_digestinfo_from_hash()
706 ret = local_memcpy(digestinfo, _digestinfo, sizeof(_digestinfo)); EG(ret, err); in rsa_digestinfo_from_hash()
715 ret = local_memcpy(digestinfo, _digestinfo, sizeof(_digestinfo)); EG(ret, err); in rsa_digestinfo_from_hash()
730 ret = local_memcpy(digestinfo, _digestinfo, sizeof(_digestinfo)); EG(ret, err); in rsa_digestinfo_from_hash()
739 ret = local_memcpy(digestinfo, _digestinfo, sizeof(_digestinfo)); EG(ret, err); in rsa_digestinfo_from_hash()
748 ret = local_memcpy(digestinfo, _digestinfo, sizeof(_digestinfo)); EG(ret, err); in rsa_digestinfo_from_hash()
757 ret = local_memcpy(digestinfo, _digestinfo, sizeof(_digestinfo)); EG(ret, err); in rsa_digestinfo_from_hash()
769 ret = local_memcpy(digestinfo, _digestinfo, sizeof(_digestinfo)); EG(ret, err); in rsa_digestinfo_from_hash()
799 ret = local_memset(C, 0, sizeof(C)); EG(ret, err); in _mgf1()
800 ret = local_memset(digest, 0, sizeof(digest)); EG(ret, err); in _mgf1()
805 ret = gen_hash_get_hash_sizes(mgf_hash_type, &hlen, &block_size); EG(ret, err); in _mgf1()
821 ret = gen_hash_hfunc_scattered(input, ilens, digest, mgf_hash_type); EG(ret, err); in _mgf1()
822 ret = local_memcpy(&mask[c * hlen], digest, (u32)(masklen % hlen)); EG(ret, err); in _mgf1()
824 ret = gen_hash_hfunc_scattered(input, ilens, &mask[c * hlen], mgf_hash_type); EG(ret, err); in _mgf1()
859 ret = local_memset(mhash, 0, sizeof(mhash)); EG(ret, err); in emsa_pss_encode()
860 ret = local_memset(h, 0, sizeof(h)); EG(ret, err); in emsa_pss_encode()
861 ret = local_memset(salt, 0, sizeof(salt)); EG(ret, err); in emsa_pss_encode()
862 ret = local_memset(zeroes, 0, sizeof(zeroes)); EG(ret, err); in emsa_pss_encode()
863 ret = local_memset(ilens_, 0, sizeof(ilens_)); EG(ret, err); in emsa_pss_encode()
877 ret = gen_hash_get_hash_sizes(gen_hash_type, &hlen, &block_size); EG(ret, err); in emsa_pss_encode()
887 ret = gen_hash_hfunc_scattered(input, ilens, mhash, gen_hash_type); EG(ret, err); in emsa_pss_encode()
896 ret = local_memcpy(salt, forced_salt, saltlen); EG(ret, err); in emsa_pss_encode()
902 ret = get_random(salt, (u16)saltlen); EG(ret, err); in emsa_pss_encode()
908 ret = gen_hash_hfunc_scattered(input_, ilens_, h, gen_hash_type); EG(ret, err); in emsa_pss_encode()
915 ret = _mgf1(h, hlen, dbmask, dblen, mgf_hash_type); EG(ret, err); in emsa_pss_encode()
944 ret = local_memcpy(&em[dblen], h, hlen); EG(ret, err); in emsa_pss_encode()
981 ret = local_memset(mhash, 0, sizeof(mhash)); EG(ret, err); in emsa_pss_verify()
982 ret = local_memset(h_, 0, sizeof(h_)); EG(ret, err); in emsa_pss_verify()
983 ret = local_memset(dbmask, 0, sizeof(dbmask)); EG(ret, err); in emsa_pss_verify()
984 ret = local_memset(zeroes, 0, sizeof(zeroes)); EG(ret, err); in emsa_pss_verify()
985 ret = local_memset(input_, 0, sizeof(input_)); EG(ret, err); in emsa_pss_verify()
986 ret = local_memset(ilens_, 0, sizeof(ilens_)); EG(ret, err); in emsa_pss_verify()
992 ret = gen_hash_get_hash_sizes(gen_hash_type, &hlen, &block_size); EG(ret, err); in emsa_pss_verify()
996 ret = gen_hash_hfunc_scattered(input, ilens, mhash, gen_hash_type); EG(ret, err); in emsa_pss_verify()
1026 ret = _mgf1(h, hlen, dbmask, dblen, mgf_hash_type); EG(ret, err); in emsa_pss_verify()
1063 ret = gen_hash_hfunc_scattered(input_, ilens_, h_, gen_hash_type); EG(ret, err); in emsa_pss_verify()
1066 ret = are_equal(h, h_, hlen, &cmp); EG(ret, err); in emsa_pss_verify()
1089 ret = local_memset(digest, 0, sizeof(digest)); EG(ret, err); in emsa_pkcs1_v1_5_encode()
1092 ret = gen_hash_get_hash_sizes(gen_hash_type, &digest_size, &block_size); EG(ret, err); in emsa_pkcs1_v1_5_encode()
1094 ret = gen_hash_hfunc_scattered(input, ilens, digest, gen_hash_type); EG(ret, err); in emsa_pkcs1_v1_5_encode()
1107 ret = rsa_digestinfo_from_hash(gen_hash_type, em, &digestinfo_len); EG(ret, err); in emsa_pkcs1_v1_5_encode()
1115 ret = rsa_digestinfo_from_hash(gen_hash_type, &em[emlen - tlen], &digestinfo_len); EG(ret, err); in emsa_pkcs1_v1_5_encode()
1116 ret = local_memcpy(&em[emlen - tlen + digestinfo_len], digest, digest_size); EG(ret, err); in emsa_pkcs1_v1_5_encode()
1162 ret = get_random(&rand_byte, 1); EG(ret, err); in rsaes_pkcs1_v1_5_encrypt()
1173 ret = local_memcpy(&em[2], forced_seed, seedlen); EG(ret, err); in rsaes_pkcs1_v1_5_encrypt()
1176 ret = local_memcpy(&em[k - mlen], m, mlen); EG(ret, err); in rsaes_pkcs1_v1_5_encrypt()
1181 ret = rsa_os2ip(&m_, em, (u16)k); EG(ret, err); in rsaes_pkcs1_v1_5_encrypt()
1183 ret = rsaep(pub, &m_, &c_); EG(ret, err); in rsaes_pkcs1_v1_5_encrypt()
1185 ret = rsa_i2osp(&c_, c, (u16)k); EG(ret, err); in rsaes_pkcs1_v1_5_encrypt()
1223 ret = rsa_os2ip(&c_, c, clen); EG(ret, err); in _rsaes_pkcs1_v1_5_decrypt()
1226 ret = rsadp_hardened(priv, pub, &c_, &m_); EG(ret, err); in _rsaes_pkcs1_v1_5_decrypt()
1229 ret = rsadp(priv, &c_, &m_); EG(ret, err); in _rsaes_pkcs1_v1_5_decrypt()
1233 ret = rsa_i2osp(&m_, em, (u16)k); EG(ret, err); in _rsaes_pkcs1_v1_5_decrypt()
1323 ret = local_memset(seed, 0, sizeof(seed)); EG(ret, err); in rsaes_oaep_encrypt()
1324 ret = local_memset(db, 0, sizeof(db)); EG(ret, err); in rsaes_oaep_encrypt()
1325 ret = local_memset(dbmask, 0, sizeof(dbmask)); EG(ret, err); in rsaes_oaep_encrypt()
1331 ret = gen_hash_get_hash_sizes(gen_hash_type, &hlen, &block_size); EG(ret, err); in rsaes_oaep_encrypt()
1351 ret = gen_hash_hfunc_scattered(input, ilens, &db[0], gen_hash_type); EG(ret, err); in rsaes_oaep_encrypt()
1371 ret = local_memcpy(seed, forced_seed, seedlen); EG(ret, err); in rsaes_oaep_encrypt()
1374 ret = get_random(seed, hlen); EG(ret, err); in rsaes_oaep_encrypt()
1379 ret = _mgf1(seed, hlen, dbmask, khlen, mgf_hash_type); EG(ret, err); in rsaes_oaep_encrypt()
1386 ret = _mgf1(maskeddb, (u16)khlen, seedmask, hlen, mgf_hash_type); EG(ret, err); in rsaes_oaep_encrypt()
1397 ret = rsa_os2ip(&m_, em, (u16)k); EG(ret, err); in rsaes_oaep_encrypt()
1399 ret = rsaep(pub, &m_, &c_); EG(ret, err); in rsaes_oaep_encrypt()
1401 ret = rsa_i2osp(&c_, c, (u16)k); EG(ret, err); in rsaes_oaep_encrypt()
1443 ret = local_memset(lhash, 0, sizeof(lhash)); EG(ret, err); in _rsaes_oaep_decrypt()
1444 ret = local_memset(seedmask, 0, sizeof(seedmask)); EG(ret, err); in _rsaes_oaep_decrypt()
1445 ret = local_memset(dbmask, 0, sizeof(dbmask)); EG(ret, err); in _rsaes_oaep_decrypt()
1451 ret = gen_hash_get_hash_sizes(gen_hash_type, &hlen, &block_size); EG(ret, err); in _rsaes_oaep_decrypt()
1460 ret = rsa_os2ip(&c_, c, clen); EG(ret, err); in _rsaes_oaep_decrypt()
1463 ret = rsadp_hardened(priv, pub, &c_, &m_); EG(ret, err); in _rsaes_oaep_decrypt()
1466 ret = rsadp(priv, &c_, &m_); EG(ret, err); in _rsaes_oaep_decrypt()
1470 ret = rsa_i2osp(&m_, em, (u16)k); EG(ret, err); in _rsaes_oaep_decrypt()
1481 ret = gen_hash_hfunc_scattered(input, ilens, lhash, gen_hash_type); EG(ret, err); in _rsaes_oaep_decrypt()
1488 ret = _mgf1(maskeddb, (u16)khlen, seedmask, hlen, mgf_hash_type); EG(ret, err); in _rsaes_oaep_decrypt()
1495 ret = _mgf1(seed, hlen, dbmask, khlen, mgf_hash_type); EG(ret, err); in _rsaes_oaep_decrypt()
1597 ret = emsa_pkcs1_v1_5_encode(m, mlen, em, (u16)k, gen_hash_type); EG(ret, err); in _rsassa_pkcs1_v1_5_sign()
1600 ret = rsa_os2ip(&m_, em, (u16)k); EG(ret, err); in _rsassa_pkcs1_v1_5_sign()
1603 ret = rsasp1_hardened(priv, pub, &m_, &s_); EG(ret, err); in _rsassa_pkcs1_v1_5_sign()
1606 ret = rsasp1(priv, &m_, &s_); EG(ret, err); in _rsassa_pkcs1_v1_5_sign()
1659 ret = local_memset(em, 0, sizeof(em)); EG(ret, err); in rsassa_pkcs1_v1_5_verify()
1660 ret = local_memset(em_, 0, sizeof(em_)); EG(ret, err); in rsassa_pkcs1_v1_5_verify()
1672 ret = rsa_os2ip(&s_, s, slen); EG(ret, err); in rsassa_pkcs1_v1_5_verify()
1674 ret = rsavp1(pub, &s_, &m_); EG(ret, err); in rsassa_pkcs1_v1_5_verify()
1677 ret = rsa_i2osp(&m_, em, slen); EG(ret, err); in rsassa_pkcs1_v1_5_verify()
1680 ret = emsa_pkcs1_v1_5_encode(m, mlen, em_, (u16)k, gen_hash_type); EG(ret, err); in rsassa_pkcs1_v1_5_verify()
1683 ret = are_equal(em, em_, (u16)k, &cmp); EG(ret, err); in rsassa_pkcs1_v1_5_verify()
1721 …len, em, (modbits - 1), &emsize, gen_hash_type, mgf_hash_type, saltlen, forced_salt); EG(ret, err); in _rsassa_pss_sign()
1727 ret = rsa_os2ip(&m_, em, (u16)emsize); EG(ret, err); in _rsassa_pss_sign()
1730 ret = rsasp1_hardened(priv, pub, &m_, &s_); EG(ret, err); in _rsassa_pss_sign()
1733 ret = rsasp1(priv, &m_, &s_); EG(ret, err); in _rsassa_pss_sign()
1794 ret = local_memset(em, 0, sizeof(em)); EG(ret, err); in rsassa_pss_verify()
1801 ret = rsa_os2ip(&s_, s, slen); EG(ret, err); in rsassa_pss_verify()
1803 ret = rsavp1(pub, &s_, &m_); EG(ret, err); in rsassa_pss_verify()
1813 ret = rsa_i2osp(&m_, em, (u16)emlen); EG(ret, err); in rsassa_pss_verify()
1856 ret = gen_hash_get_hash_sizes(gen_hash_type, &hlen, &block_size); EG(ret, err); in _rsa_iso9796_2_sign_recover()
1868 ret = gen_hash_init(&hctx, gen_hash_type); EG(ret, err); in _rsa_iso9796_2_sign_recover()
1869 ret = gen_hash_update(&hctx, m, mlen, gen_hash_type); EG(ret, err); in _rsa_iso9796_2_sign_recover()
1870 ret = gen_hash_final(&hctx, &s[k - 1 - hlen], gen_hash_type); EG(ret, err); in _rsa_iso9796_2_sign_recover()
1873 ret = local_memcpy(&s[1], m, m1len_); EG(ret, err); in _rsa_iso9796_2_sign_recover()
1886 ret = rsa_os2ip(&m_, s, k); EG(ret, err); in _rsa_iso9796_2_sign_recover()
1889 ret = rsasp1_hardened(priv, pub, &m_, &s_); EG(ret, err); in _rsa_iso9796_2_sign_recover()
1892 ret = rsasp1(priv, &m_, &s_); EG(ret, err); in _rsa_iso9796_2_sign_recover()
1963 ret = local_memset(X, 0, sizeof(X)); EG(ret, err); in rsa_iso9796_2_verify_recover()
1964 ret = local_memset(H, 0, sizeof(H)); EG(ret, err); in rsa_iso9796_2_verify_recover()
1970 ret = gen_hash_get_hash_sizes(gen_hash_type, &hlen, &block_size); EG(ret, err); in rsa_iso9796_2_verify_recover()
1981 ret = rsa_os2ip(&s_, s, slen); EG(ret, err); in rsa_iso9796_2_verify_recover()
1983 ret = rsavp1(pub, &s_, &m_); EG(ret, err); in rsa_iso9796_2_verify_recover()
1986 ret = rsa_i2osp(&m_, X, slen); EG(ret, err); in rsa_iso9796_2_verify_recover()
2000 ret = gen_hash_init(&hctx, gen_hash_type); EG(ret, err); in rsa_iso9796_2_verify_recover()
2001 ret = gen_hash_update(&hctx, &X[1], m1len_, gen_hash_type); EG(ret, err); in rsa_iso9796_2_verify_recover()
2002 ret = gen_hash_update(&hctx, m2, m2len, gen_hash_type); EG(ret, err); in rsa_iso9796_2_verify_recover()
2003 ret = gen_hash_final(&hctx, H, gen_hash_type); EG(ret, err); in rsa_iso9796_2_verify_recover()
2006 ret = are_equal(H, &X[1 + m1len_], (u16)hlen, &cmp); EG(ret, err); in rsa_iso9796_2_verify_recover()
2013 ret = local_memcpy(m1, &X[1], (*m1len)); EG(ret, err); in rsa_iso9796_2_verify_recover()