Lines Matching refs:ret

77 	int ret;  in _reverse_endianness()  local
79 MUST_HAVE((buf != NULL), ret, err); in _reverse_endianness()
89 ret = 0; in _reverse_endianness()
91 return ret; in _reverse_endianness()
99 int ret; in bign_get_oid_from_adata() local
102 MUST_HAVE((adata != NULL) && (oid_ptr != NULL) && (oid_len != NULL), ret, err); in bign_get_oid_from_adata()
103 MUST_HAVE((adata_len >= 4), ret, err); in bign_get_oid_from_adata()
108 MUST_HAVE(((*oid_len) + t_len) >= (t_len), ret, err); in bign_get_oid_from_adata()
109 MUST_HAVE(((*oid_len) + t_len) <= (adata_len - 4), ret, err); in bign_get_oid_from_adata()
112 ret = 0; in bign_get_oid_from_adata()
114 if(ret && (oid_ptr != NULL)){ in bign_get_oid_from_adata()
117 if(ret && (oid_len != NULL)){ in bign_get_oid_from_adata()
120 return ret; in bign_get_oid_from_adata()
125 int ret; in bign_get_t_from_adata() local
128 MUST_HAVE((adata != NULL) && (t_ptr != NULL) && (t_len != NULL), ret, err); in bign_get_t_from_adata()
129 MUST_HAVE((adata_len >= 4), ret, err); in bign_get_t_from_adata()
134 MUST_HAVE((oid_len + (*t_len)) >= (oid_len), ret, err); in bign_get_t_from_adata()
135 MUST_HAVE((oid_len + (*t_len)) <= (adata_len - 4), ret, err); in bign_get_t_from_adata()
138 ret = 0; in bign_get_t_from_adata()
140 if(ret && (t_ptr != NULL)){ in bign_get_t_from_adata()
143 if(ret && (t_len != NULL)){ in bign_get_t_from_adata()
146 return ret; in bign_get_t_from_adata()
151 int ret; in bign_set_adata() local
153 MUST_HAVE((adata != NULL), ret, err); in bign_set_adata()
155 MUST_HAVE((oid != NULL) || (oid_len == 0), ret, err); in bign_set_adata()
156 MUST_HAVE((t != NULL) || (t_len == 0), ret, err); in bign_set_adata()
157 MUST_HAVE((adata_len >= 4), ret, err); in bign_set_adata()
159 MUST_HAVE(((oid_len + t_len) >= oid_len), ret, err); in bign_set_adata()
160 MUST_HAVE(((adata_len - 4) >= (oid_len + t_len)), ret, err); in bign_set_adata()
165 ret = local_memcpy(&adata[4], oid, oid_len); EG(ret, err); in bign_set_adata()
173 ret = local_memcpy(&adata[4 + oid_len], t, t_len); EG(ret, err); in bign_set_adata()
180 ret = 0; in bign_set_adata()
182 return ret; in bign_set_adata()
204 int ret, cmp, iszero; in __bign_determinitic_nonce() local
219 MUST_HAVE((adata != NULL) && (h != NULL), ret, err); in __bign_determinitic_nonce()
220 ret = nn_check_initialized(q); EG(ret, err); in __bign_determinitic_nonce()
221 ret = nn_check_initialized(x); EG(ret, err); in __bign_determinitic_nonce()
223 ret = local_memset(theta, 0, sizeof(theta)); EG(ret, err); in __bign_determinitic_nonce()
224 ret = local_memset(FE2OS_D, 0, sizeof(FE2OS_D)); EG(ret, err); in __bign_determinitic_nonce()
225 ret = local_memset(r_bar, 0, sizeof(r_bar)); EG(ret, err); in __bign_determinitic_nonce()
233 ret = bign_get_oid_from_adata(adata, adata_len, &oid_ptr, &oid_len); EG(ret, err); in __bign_determinitic_nonce()
234 ret = bign_get_t_from_adata(adata, adata_len, &t_ptr, &t_len); EG(ret, err); in __bign_determinitic_nonce()
236 ret = belt_hash_init(&belt_hash_ctx); EG(ret, err); in __bign_determinitic_nonce()
237 ret = belt_hash_update(&belt_hash_ctx, oid_ptr, oid_len); EG(ret, err); in __bign_determinitic_nonce()
240 ret = local_memset(FE2OS_D, 0, sizeof(FE2OS_D)); EG(ret, err); in __bign_determinitic_nonce()
241 ret = nn_export_to_buf(&FE2OS_D[0], q_len, x); EG(ret, err); in __bign_determinitic_nonce()
242 ret = _reverse_endianness(&FE2OS_D[0], q_len); EG(ret, err); in __bign_determinitic_nonce()
244 ret = belt_hash_update(&belt_hash_ctx, &FE2OS_D[0], (u32)(2*l)); EG(ret, err); in __bign_determinitic_nonce()
246 ret = belt_hash_update(&belt_hash_ctx, t_ptr, t_len); EG(ret, err); in __bign_determinitic_nonce()
248 ret = belt_hash_final(&belt_hash_ctx, theta); EG(ret, err); in __bign_determinitic_nonce()
255 MUST_HAVE((hlen <= sizeof(r)), ret, err); in __bign_determinitic_nonce()
256 ret = local_memset(r, 0, sizeof(r)); in __bign_determinitic_nonce()
257 ret = local_memcpy(r, h, hlen); EG(ret, err); in __bign_determinitic_nonce()
276 ret = local_memset(s, 0, sizeof(s)); EG(ret, err); in __bign_determinitic_nonce()
285 ret = local_memcpy(&r[0], &r[BELT_BLOCK_LEN], (n - 2) * BELT_BLOCK_LEN); EG(ret, err); in __bign_determinitic_nonce()
288 ret = local_memset(i_block, 0, sizeof(i_block)); EG(ret, err); in __bign_determinitic_nonce()
296 ret = local_memcpy(&r[(n - 1) * BELT_BLOCK_LEN], s, BELT_BLOCK_LEN); EG(ret, err); in __bign_determinitic_nonce()
303 ret = local_memcpy(&r_bar[0], &r[0], r_bar_len); EG(ret, err); in __bign_determinitic_nonce()
315 MUST_HAVE((n * BELT_BLOCK_LEN) <= 0xffff, ret, err); in __bign_determinitic_nonce()
317 ret = local_memcpy(&r_bar[0], &r[0], r_bar_len); EG(ret, err); in __bign_determinitic_nonce()
319 ret = _reverse_endianness(&r_bar[0], r_bar_len); EG(ret, err); in __bign_determinitic_nonce()
320 ret = nn_init_from_buf(k, &r_bar[0], r_bar_len); EG(ret, err); in __bign_determinitic_nonce()
323 ret = nn_cmp(k, q, &cmp); EG(ret, err); in __bign_determinitic_nonce()
325 ret = nn_iszero(k, &iszero); EG(ret, err); in __bign_determinitic_nonce()
332 MUST_HAVE((i != 0), ret, err); in __bign_determinitic_nonce()
335 ret = 0; in __bign_determinitic_nonce()
341 return ret; in __bign_determinitic_nonce()
349 int ret, cmp; in __bign_init_pub_key() local
352 MUST_HAVE((out_pub != NULL), ret, err); in __bign_init_pub_key()
355 ret = local_memset(out_pub, 0, sizeof(ec_pub_key)); EG(ret, err); in __bign_init_pub_key()
357 ret = priv_key_check_initialized_and_type(in_priv, key_type); EG(ret, err); in __bign_init_pub_key()
361 MUST_HAVE((!nn_cmp(&(in_priv->x), q, &cmp)) && (cmp < 0), ret, err); in __bign_init_pub_key()
366 ret = prj_pt_mul_blind(&(out_pub->y), &(in_priv->x), G); EG(ret, err); in __bign_init_pub_key()
373 return ret; in __bign_init_pub_key()
378 int ret; in __bign_siglen() local
380 MUST_HAVE(siglen != NULL, ret, err); in __bign_siglen()
383 (hsize <= MAX_DIGEST_SIZE) && (blocksize <= MAX_BLOCK_SIZE), ret, err); in __bign_siglen()
385 ret = 0; in __bign_siglen()
388 return ret; in __bign_siglen()
407 #define BIGN_SIGN_CHECK_INITIALIZED(A, ret, err) \ argument
408 MUST_HAVE((((void *)(A)) != NULL) && ((A)->magic == BIGN_SIGN_MAGIC), ret, err)
412 int ret; in __bign_sign_init() local
415 ret = sig_sign_check_initialized(ctx); EG(ret, err); in __bign_sign_init()
418 ret = key_pair_check_initialized_and_type(ctx->key_pair, key_type); EG(ret, err); in __bign_sign_init()
421 (ctx->h->block_size <= MAX_BLOCK_SIZE), ret, err); in __bign_sign_init()
426 MUST_HAVE((ctx->adata != NULL) && (ctx->adata_len != 0), ret, err); in __bign_sign_init()
433 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in __bign_sign_init()
434 ret = ctx->h->hfunc_init(&(ctx->sign_data.bign.h_ctx)); EG(ret, err); in __bign_sign_init()
439 return ret; in __bign_sign_init()
445 int ret; in __bign_sign_update() local
453 ret = sig_sign_check_initialized(ctx); EG(ret, err); in __bign_sign_update()
454 BIGN_SIGN_CHECK_INITIALIZED(&(ctx->sign_data.bign), ret, err); in __bign_sign_update()
457 ret = key_pair_check_initialized_and_type(ctx->key_pair, key_type); EG(ret, err); in __bign_sign_update()
461 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in __bign_sign_update()
462 ret = ctx->h->hfunc_update(&(ctx->sign_data.bign.h_ctx), chunk, chunklen); in __bign_sign_update()
465 return ret; in __bign_sign_update()
471 int ret, cmp; in __bign_sign_finalize() local
500 ret = sig_sign_check_initialized(ctx); EG(ret, err); in __bign_sign_finalize()
501 BIGN_SIGN_CHECK_INITIALIZED(&(ctx->sign_data.bign), ret, err); in __bign_sign_finalize()
502 MUST_HAVE((sig != NULL), ret, err); in __bign_sign_finalize()
505 ret = key_pair_check_initialized_and_type(ctx->key_pair, key_type); EG(ret, err); in __bign_sign_finalize()
508 ret = local_memset(&kG, 0, sizeof(prj_pt)); EG(ret, err); in __bign_sign_finalize()
520 MUST_HAVE((priv_key->key_type == key_type), ret, err); in __bign_sign_finalize()
526 ret = nn_cmp(x, q, &cmp); EG(ret, err); in __bign_sign_finalize()
530 MUST_HAVE((cmp < 0), ret, err); in __bign_sign_finalize()
539 MUST_HAVE((siglen == BIGN_SIGLEN(q_bit_len)), ret, err); in __bign_sign_finalize()
544 MUST_HAVE((ctx->adata != NULL) && (ctx->adata_len != 0), ret, err); in __bign_sign_finalize()
547 ret = local_memset(hash, 0, hsize); EG(ret, err); in __bign_sign_finalize()
549 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in __bign_sign_finalize()
550 ret = ctx->h->hfunc_finalize(&(ctx->sign_data.bign.h_ctx), hash); EG(ret, err); in __bign_sign_finalize()
567 ret = -1; in __bign_sign_finalize()
576 ret = ctx->rand(&k, q); in __bign_sign_finalize()
583 ret = -1; in __bign_sign_finalize()
587ret = __bign_determinitic_nonce(&k, q, q_bit_len, &(priv_key->x), ctx->adata, ctx->adata_len, has… in __bign_sign_finalize()
592 ret = -1; in __bign_sign_finalize()
596 if (ret) { in __bign_sign_finalize()
597 ret = -1; in __bign_sign_finalize()
605 ret = nn_get_random_mod(&b, q); EG(ret, err); in __bign_sign_finalize()
609 ret = nn_modinv_fermat(&binv, &b, q); EG(ret, err); in __bign_sign_finalize()
617 ret = prj_pt_mul_blind(&kG, &k, G); EG(ret, err); in __bign_sign_finalize()
619 ret = prj_pt_mul(&kG, &k, G); EG(ret, err); in __bign_sign_finalize()
621 ret = prj_pt_unique(&kG, &kG); EG(ret, err); in __bign_sign_finalize()
627 ret = belt_hash_init(&belt_hash_ctx); EG(ret, err); in __bign_sign_finalize()
628 ret = bign_get_oid_from_adata(ctx->adata, ctx->adata_len, &oid_ptr, &oid_len); EG(ret, err); in __bign_sign_finalize()
629 ret = belt_hash_update(&belt_hash_ctx, oid_ptr, oid_len); EG(ret, err); in __bign_sign_finalize()
631 ret = local_memset(FE2OS_W, 0, sizeof(FE2OS_W)); EG(ret, err); in __bign_sign_finalize()
632 ret = fp_export_to_buf(&FE2OS_W[0], p_len, &(kG.X)); EG(ret, err); in __bign_sign_finalize()
633 ret = _reverse_endianness(&FE2OS_W[0], p_len); EG(ret, err); in __bign_sign_finalize()
634 ret = fp_export_to_buf(&FE2OS_W[p_len], p_len, &(kG.Y)); EG(ret, err); in __bign_sign_finalize()
635 ret = _reverse_endianness(&FE2OS_W[p_len], p_len); EG(ret, err); in __bign_sign_finalize()
637 ret = belt_hash_update(&belt_hash_ctx, &FE2OS_W[0], (u32)(2*l)); EG(ret, err); in __bign_sign_finalize()
639 ret = belt_hash_update(&belt_hash_ctx, hash, hsize); EG(ret, err); in __bign_sign_finalize()
641 ret = local_memset(hash_belt, 0, sizeof(hash_belt)); EG(ret, err); in __bign_sign_finalize()
642 ret = belt_hash_final(&belt_hash_ctx, hash_belt); EG(ret, err); in __bign_sign_finalize()
643 ret = local_memset(&sig[0], 0, l); EG(ret, err); in __bign_sign_finalize()
644 ret = local_memcpy(&sig[0], &hash_belt[0], LOCAL_MIN(l, BELT_HASH_DIGEST_SIZE)); EG(ret, err); in __bign_sign_finalize()
650 ret = _reverse_endianness(hash, hsize); EG(ret, err); in __bign_sign_finalize()
651 ret = nn_init_from_buf(&h, hash, hsize); EG(ret, err); in __bign_sign_finalize()
652 ret = nn_mod(&h, &h, q); EG(ret, err); in __bign_sign_finalize()
654 ret = local_memcpy(FE2OS_W, &sig[0], l); EG(ret, err); in __bign_sign_finalize()
655 ret = _reverse_endianness(FE2OS_W, l); EG(ret, err); in __bign_sign_finalize()
656 ret = nn_init_from_buf(&s1, FE2OS_W, l); EG(ret, err); in __bign_sign_finalize()
657 ret = nn_mod(&s1, &s1, q); EG(ret, err); in __bign_sign_finalize()
659 ret = nn_init(&tmp, 0); EG(ret, err); in __bign_sign_finalize()
660 ret = nn_one(&tmp); EG(ret, err); in __bign_sign_finalize()
661 ret = nn_lshift(&tmp, &tmp, (bitcnt_t)(8*l)); EG(ret, err); in __bign_sign_finalize()
662 ret = nn_mod(&tmp, &tmp, q); EG(ret, err); in __bign_sign_finalize()
663 ret = nn_mod_add(&s1, &s1, &tmp, q); EG(ret, err); in __bign_sign_finalize()
666 ret = nn_mod_mul(&s1, &s1, &b, q); EG(ret, err); in __bign_sign_finalize()
669 ret = nn_mod_mul(&h, &h, &b, q); EG(ret, err); in __bign_sign_finalize()
672 ret = nn_mod_mul(&k, &k, &b, q); EG(ret, err); in __bign_sign_finalize()
675 ret = nn_mod_mul(&s1, &s1, &(priv_key->x), q); EG(ret, err); in __bign_sign_finalize()
676 ret = nn_mod_sub(&s1, &k, &s1, q); EG(ret, err); in __bign_sign_finalize()
677 ret = nn_mod_sub(&s1, &s1, &h, q); EG(ret, err); in __bign_sign_finalize()
681 ret = nn_mod_mul(&s1, &s1, &binv, q); EG(ret, err); in __bign_sign_finalize()
686 ret = local_memset(hash, 0, hsize); EG(ret, err); in __bign_sign_finalize()
689 ret = nn_export_to_buf(&sig[l], (u16)BIGN_S1_LEN(q_bit_len), &s1); EG(ret, err); in __bign_sign_finalize()
690 ret = _reverse_endianness(&sig[l], (u16)BIGN_S1_LEN(q_bit_len)); in __bign_sign_finalize()
721 return ret; in __bign_sign_finalize()
739 #define BIGN_VERIFY_CHECK_INITIALIZED(A, ret, err) \ argument
740 MUST_HAVE((((void *)(A)) != NULL) && ((A)->magic == BIGN_VERIFY_MAGIC), ret, err)
751 int ret, cmp; in __bign_verify_init() local
754 ret = sig_verify_check_initialized(ctx); EG(ret, err); in __bign_verify_init()
756 ret = local_memset(TMP, 0, sizeof(TMP)); EG(ret, err); in __bign_verify_init()
759 ret = pub_key_check_initialized_and_type(ctx->pub_key, key_type); EG(ret, err); in __bign_verify_init()
761 (ctx->h->block_size <= MAX_BLOCK_SIZE), ret, err); in __bign_verify_init()
762 MUST_HAVE((sig != NULL), ret, err); in __bign_verify_init()
767 MUST_HAVE((ctx->adata != NULL) && (ctx->adata_len != 0), ret, err); in __bign_verify_init()
780 MUST_HAVE((siglen == BIGN_SIGLEN(q_bit_len)), ret, err); in __bign_verify_init()
783 ret = local_memcpy(s0_sig, sig, l); EG(ret, err); in __bign_verify_init()
786 ret = local_memcpy(&TMP[0], sig, l); EG(ret, err); in __bign_verify_init()
787 ret = _reverse_endianness(&TMP[0], l); EG(ret, err); in __bign_verify_init()
788 ret = nn_init_from_buf(s0, &TMP[0], l); EG(ret, err); in __bign_verify_init()
790 ret = local_memcpy(&TMP[0], &sig[l], (u32)BIGN_S1_LEN(q_bit_len)); EG(ret, err); in __bign_verify_init()
791 ret = _reverse_endianness(&TMP[0], (u16)BIGN_S1_LEN(q_bit_len)); EG(ret, err); in __bign_verify_init()
792 ret = nn_init_from_buf(s1, &TMP[0], (u8)BIGN_S1_LEN(q_bit_len)); EG(ret, err); in __bign_verify_init()
797 ret = nn_cmp(s1, q, &cmp); EG(ret, err); in __bign_verify_init()
798 MUST_HAVE((cmp < 0), ret, err); in __bign_verify_init()
802 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in __bign_verify_init()
803 ret = ctx->h->hfunc_init(&(ctx->verify_data.bign.h_ctx)); EG(ret, err); in __bign_verify_init()
814 return ret; in __bign_verify_init()
820 int ret; in __bign_verify_update() local
828 ret = sig_verify_check_initialized(ctx); EG(ret, err); in __bign_verify_update()
829 BIGN_VERIFY_CHECK_INITIALIZED(&(ctx->verify_data.bign), ret, err); in __bign_verify_update()
831 ret = pub_key_check_initialized_and_type(ctx->pub_key, key_type); EG(ret, err); in __bign_verify_update()
835 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in __bign_verify_update()
836 ret = ctx->h->hfunc_update(&(ctx->verify_data.bign.h_ctx), chunk, chunklen); in __bign_verify_update()
839 return ret; in __bign_verify_update()
859 int ret, iszero, cmp; in __bign_verify_finalize() local
874 ret = sig_verify_check_initialized(ctx); EG(ret, err); in __bign_verify_finalize()
875 BIGN_VERIFY_CHECK_INITIALIZED(&(ctx->verify_data.bign), ret, err); in __bign_verify_finalize()
877 ret = pub_key_check_initialized_and_type(ctx->pub_key, key_type); EG(ret, err); in __bign_verify_finalize()
882 MUST_HAVE((ctx->adata != NULL) && (ctx->adata_len != 0), ret, err); in __bign_verify_finalize()
885 ret = local_memset(&uG, 0, sizeof(prj_pt)); EG(ret, err); in __bign_verify_finalize()
886 ret = local_memset(&vY, 0, sizeof(prj_pt)); EG(ret, err); in __bign_verify_finalize()
901 MUST_HAVE((sizeof(t) == sizeof(ctx->verify_data.bign.s0_sig)), ret, err); in __bign_verify_finalize()
908 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in __bign_verify_finalize()
909 ret = ctx->h->hfunc_finalize(&(ctx->verify_data.bign.h_ctx), hash); EG(ret, err); in __bign_verify_finalize()
913 ret = _reverse_endianness(hash, hsize); EG(ret, err); in __bign_verify_finalize()
914 ret = nn_init_from_buf(&h, hash, hsize); EG(ret, err); in __bign_verify_finalize()
915 ret = nn_mod(&h, &h, q); EG(ret, err); in __bign_verify_finalize()
919 ret = _reverse_endianness(hash, hsize); EG(ret, err); in __bign_verify_finalize()
922 ret = nn_mod_add(&h, &h, s1, q); EG(ret, err); in __bign_verify_finalize()
924 ret = nn_init(&tmp, 0); EG(ret, err); in __bign_verify_finalize()
925 ret = nn_one(&tmp); EG(ret, err); in __bign_verify_finalize()
926 ret = nn_lshift(&tmp, &tmp, (bitcnt_t)(8*l)); EG(ret, err); in __bign_verify_finalize()
927 ret = nn_mod(&tmp, &tmp, q); EG(ret, err); in __bign_verify_finalize()
928 ret = nn_mod_add(&tmp, &tmp, s0, q); EG(ret, err); in __bign_verify_finalize()
931 ret = prj_pt_mul(&uG, &h, G); EG(ret, err); in __bign_verify_finalize()
932 ret = prj_pt_mul(&vY, &tmp, Y); EG(ret, err); in __bign_verify_finalize()
933 ret = prj_pt_add(W, &uG, &vY); EG(ret, err); in __bign_verify_finalize()
935 ret = prj_pt_iszero(W, &iszero); EG(ret, err); in __bign_verify_finalize()
936 MUST_HAVE((!iszero), ret, err); in __bign_verify_finalize()
937 ret = prj_pt_unique(W, W); EG(ret, err); in __bign_verify_finalize()
940 ret = belt_hash_init(&belt_hash_ctx); EG(ret, err); in __bign_verify_finalize()
941 ret = bign_get_oid_from_adata(ctx->adata, ctx->adata_len, &oid_ptr, &oid_len); EG(ret, err); in __bign_verify_finalize()
942 ret = belt_hash_update(&belt_hash_ctx, oid_ptr, oid_len); EG(ret, err); in __bign_verify_finalize()
944 ret = local_memset(FE2OS_W, 0, sizeof(FE2OS_W)); EG(ret, err); in __bign_verify_finalize()
945 ret = fp_export_to_buf(&FE2OS_W[0], p_len, &(W->X)); EG(ret, err); in __bign_verify_finalize()
946 ret = _reverse_endianness(&FE2OS_W[0], p_len); EG(ret, err); in __bign_verify_finalize()
947 ret = fp_export_to_buf(&FE2OS_W[p_len], p_len, &(W->Y)); EG(ret, err); in __bign_verify_finalize()
948 ret = _reverse_endianness(&FE2OS_W[p_len], p_len); EG(ret, err); in __bign_verify_finalize()
950 ret = belt_hash_update(&belt_hash_ctx, &FE2OS_W[0], (u32)(2*l)); EG(ret, err); in __bign_verify_finalize()
952 ret = belt_hash_update(&belt_hash_ctx, hash, hsize); EG(ret, err); in __bign_verify_finalize()
954 ret = local_memset(hash_belt, 0, sizeof(hash_belt)); EG(ret, err); in __bign_verify_finalize()
955 ret = belt_hash_final(&belt_hash_ctx, hash_belt); EG(ret, err); in __bign_verify_finalize()
956 ret = local_memset(&t[0], 0, l); EG(ret, err); in __bign_verify_finalize()
957 ret = local_memcpy(&t[0], &hash_belt[0], LOCAL_MIN(l, BELT_HASH_DIGEST_SIZE)); EG(ret, err); in __bign_verify_finalize()
960 ret = are_equal(t, s0_sig, l, &cmp); EG(ret, err); in __bign_verify_finalize()
961 ret = (cmp == 0) ? -1 : 0; in __bign_verify_finalize()
992 return ret; in __bign_verify_finalize()