Lines Matching full:eg

40 	ret = local_memset(out_pub, 0, sizeof(ec_pub_key)); EG(ret, err);  in ecfsdsa_init_pub_key()
42 ret = priv_key_check_initialized_and_type(in_priv, ECFSDSA); EG(ret, err); in ecfsdsa_init_pub_key()
51 ret = prj_pt_mul_blind(&(out_pub->y), &(in_priv->x), G); EG(ret, err); in ecfsdsa_init_pub_key()
134 ret = sig_sign_check_initialized(ctx); EG(ret, err); in _ecfsdsa_sign_init()
137 ret = local_memset(&kG, 0, sizeof(prj_pt)); EG(ret, err); in _ecfsdsa_sign_init()
140 ret = key_pair_check_initialized_and_type(ctx->key_pair, ECFSDSA); EG(ret, err); in _ecfsdsa_sign_init()
173 ret = ctx->rand(k, q); EG(ret, err); in _ecfsdsa_sign_init()
178 ret = prj_pt_mul_blind(&kG, k, G); EG(ret, err); in _ecfsdsa_sign_init()
180 ret = prj_pt_mul(&kG, k, G); EG(ret, err); in _ecfsdsa_sign_init()
182 ret = prj_pt_unique(&kG, &kG); EG(ret, err); in _ecfsdsa_sign_init()
188 ret = fp_export_to_buf(r, p_len, &(kG.X)); EG(ret, err); in _ecfsdsa_sign_init()
189 ret = fp_export_to_buf(r + p_len, p_len, &(kG.Y)); EG(ret, err); in _ecfsdsa_sign_init()
208 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in _ecfsdsa_sign_init()
209 ret = ctx->h->hfunc_init(&(ctx->sign_data.ecfsdsa.h_ctx)); EG(ret, err); in _ecfsdsa_sign_init()
211 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in _ecfsdsa_sign_init()
212 ret = ctx->h->hfunc_update(&(ctx->sign_data.ecfsdsa.h_ctx), r, r_len); EG(ret, err); in _ecfsdsa_sign_init()
242 ret = sig_sign_check_initialized(ctx); EG(ret, err); in _ecfsdsa_sign_update()
247 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in _ecfsdsa_sign_update()
248 ret = ctx->h->hfunc_update(&(ctx->sign_data.ecfsdsa.h_ctx), chunk, chunklen); EG(ret, err); in _ecfsdsa_sign_update()
278 ret = sig_sign_check_initialized(ctx); EG(ret, err); in _ecfsdsa_sign_finalize()
295 ret = nn_cmp(x, q, &cmp); EG(ret, err); in _ecfsdsa_sign_finalize()
304 ret = nn_get_random_mod(&b, q); EG(ret, err); in _ecfsdsa_sign_finalize()
309 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in _ecfsdsa_sign_finalize()
312 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in _ecfsdsa_sign_finalize()
313 ret = ctx->h->hfunc_finalize(&(ctx->sign_data.ecfsdsa.h_ctx), e_buf); EG(ret, err); in _ecfsdsa_sign_finalize()
317 ret = nn_init_from_buf(&e, e_buf, hsize); EG(ret, err); in _ecfsdsa_sign_finalize()
318 ret = local_memset(e_buf, 0, hsize); EG(ret, err); in _ecfsdsa_sign_finalize()
319 ret = nn_mod(&e, &e, q); EG(ret, err); in _ecfsdsa_sign_finalize()
323 ret = nn_mod_mul(&e, &e, &b, q); EG(ret, err); in _ecfsdsa_sign_finalize()
326 ret = nn_mod_mul(&ex, &e, x, q); EG(ret, err); in _ecfsdsa_sign_finalize()
329 ret = nn_mod_mul(&s, k, &b, q); EG(ret, err); in _ecfsdsa_sign_finalize()
330 ret = nn_mod_add(&s, &s, &ex, q); EG(ret, err); in _ecfsdsa_sign_finalize()
332 ret = nn_mod_add(&s, k, &ex, q); EG(ret, err); in _ecfsdsa_sign_finalize()
339 ret = nn_modinv_fermat(&binv, &b, q); EG(ret, err); in _ecfsdsa_sign_finalize()
340 ret = nn_mod_mul(&s, &s, &binv, q); EG(ret, err); in _ecfsdsa_sign_finalize()
353 ret = local_memcpy(sig, r, r_len); EG(ret, err); in _ecfsdsa_sign_finalize()
354 ret = local_memset(r, 0, r_len); EG(ret, err); in _ecfsdsa_sign_finalize()
430 ret = sig_verify_check_initialized(ctx); EG(ret, err); in _ecfsdsa_verify_init()
433 ret = pub_key_check_initialized_and_type(ctx->pub_key, ECFSDSA); EG(ret, err); in _ecfsdsa_verify_init()
453 ret = fp_init(&rx, ctx->pub_key->params->ec_curve.a.ctx); EG(ret, err); in _ecfsdsa_verify_init()
454 ret = fp_import_from_buf(&rx, r, p_len); EG(ret, err); in _ecfsdsa_verify_init()
455 ret = fp_init(&ry, ctx->pub_key->params->ec_curve.a.ctx); EG(ret, err); in _ecfsdsa_verify_init()
456 ret = fp_import_from_buf(&ry, r + p_len, p_len); EG(ret, err); in _ecfsdsa_verify_init()
459 ret = is_on_shortw_curve(&rx, &ry, &(ctx->pub_key->params->ec_curve), &on_curve); EG(ret, err); in _ecfsdsa_verify_init()
465 ret = nn_init_from_buf(s, sig + r_len, s_len); EG(ret, err); in _ecfsdsa_verify_init()
468 ret = nn_iszero(s, &iszero); EG(ret, err); in _ecfsdsa_verify_init()
469 ret = nn_cmp(s, q, &cmp); EG(ret, err); in _ecfsdsa_verify_init()
475 ret = local_memcpy(&(ctx->verify_data.ecfsdsa.r), r, r_len); EG(ret, err); in _ecfsdsa_verify_init()
477 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in _ecfsdsa_verify_init()
478 ret = ctx->h->hfunc_init(&(ctx->verify_data.ecfsdsa.h_ctx)); EG(ret, err); in _ecfsdsa_verify_init()
481 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in _ecfsdsa_verify_init()
482 ret = ctx->h->hfunc_update(&(ctx->verify_data.ecfsdsa.h_ctx), r, r_len); EG(ret, err); in _ecfsdsa_verify_init()
523 ret = sig_verify_check_initialized(ctx); EG(ret, err); in _ecfsdsa_verify_update()
528 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in _ecfsdsa_verify_update()
561 ret = sig_verify_check_initialized(ctx); EG(ret, err); in _ecfsdsa_verify_finalize()
565 ret = local_memset(&sG, 0, sizeof(prj_pt)); EG(ret, err); in _ecfsdsa_verify_finalize()
566 ret = local_memset(&eY, 0, sizeof(prj_pt)); EG(ret, err); in _ecfsdsa_verify_finalize()
581 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in _ecfsdsa_verify_finalize()
582 ret = ctx->h->hfunc_finalize(&(ctx->verify_data.ecfsdsa.h_ctx), e_buf); EG(ret, err); in _ecfsdsa_verify_finalize()
590 ret = nn_init_from_buf(&tmp, e_buf, hsize); EG(ret, err); in _ecfsdsa_verify_finalize()
591 ret = local_memset(e_buf, 0, hsize); EG(ret, err); in _ecfsdsa_verify_finalize()
592 ret = nn_mod(&tmp, &tmp, q); EG(ret, err); in _ecfsdsa_verify_finalize()
594 ret = nn_mod_neg(&e, &tmp, q); EG(ret, err); in _ecfsdsa_verify_finalize()
597 ret = prj_pt_mul(&sG, s, G); EG(ret, err); in _ecfsdsa_verify_finalize()
598 ret = prj_pt_mul(&eY, &e, Y); EG(ret, err); in _ecfsdsa_verify_finalize()
599 ret = prj_pt_add(Wprime, &sG, &eY); EG(ret, err); in _ecfsdsa_verify_finalize()
600 ret = prj_pt_unique(Wprime, Wprime); EG(ret, err); in _ecfsdsa_verify_finalize()
603 ret = fp_export_to_buf(r_prime, p_len, &(Wprime->X)); EG(ret, err); in _ecfsdsa_verify_finalize()
604 ret = fp_export_to_buf(r_prime + p_len, p_len, &(Wprime->Y)); EG(ret, err); in _ecfsdsa_verify_finalize()
609 ret = are_equal(r, r_prime, r_len, &check); EG(ret, err); in _ecfsdsa_verify_finalize()
691 ret = local_memset(hash, 0, sizeof(hash)); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
697 ret = get_hash_by_type(hash_type, &hm); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
705 ret = pub_key_check_initialized_and_type(pub_keys[i], ECFSDSA); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
734 ret = nn_init(&S_sum, 0); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
735 ret = prj_pt_init(&W_sum, shortw_curve); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
736 ret = prj_pt_zero(&W_sum); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
737 ret = prj_pt_init(&Y_sum, shortw_curve); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
738 ret = prj_pt_zero(&Y_sum); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
739 ret = prj_pt_init(&Tmp, shortw_curve); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
740 ret = nn_init(&e, 0); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
741 ret = nn_init(&a, 0); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
745 ret = nn_get_random_mod(&a, q); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
749 ret = nn_init_from_buf(&S, &sig[2 * p_len], q_len); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
750 ret = nn_cmp(&S, q, &cmp); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
758 ret = nn_mod_mul(&S, &a, &S, q); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
760 &S, q); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
768 ret = prj_pt_copy(Y, pub_key_y); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
769 ret = prj_pt_unique(Y, Y); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
773 ret = hm->hfunc_init(&h_ctx); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
774 ret = hm->hfunc_update(&h_ctx, &sig[0], (u32)(2 * p_len)); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
775 ret = hm->hfunc_update(&h_ctx, m[i], m_len[i]); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
776 ret = hm->hfunc_finalize(&h_ctx, hash); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
778 ret = nn_init_from_buf(&e, hash, hsize); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
779 ret = nn_mod(&e, &e, q); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
780 ret = nn_mod_neg(&e, &e, q); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
785 ret = nn_mod_mul(&e, &e, &a, q); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
787 ret = _prj_pt_unprotected_mult(Y, &e, Y); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
790 ret = prj_pt_add(&Y_sum, &Y_sum, Y); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
795 ret = prj_pt_import_from_aff_buf(W, &sig[0], (u16)(2 * p_len), shortw_curve); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
798 ret = nn_mod_neg(&a, &a, q); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
799 ret = _prj_pt_unprotected_mult(W, &a, W); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
802 ret = prj_pt_add(&W_sum, &W_sum, W); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
809 ret = _prj_pt_unprotected_mult(&Tmp, &S_sum, G); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
811 ret = prj_pt_add(&Tmp, &Tmp, &W_sum); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
812 ret = prj_pt_add(&Tmp, &Tmp, &Y_sum); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
814 ret = prj_pt_iszero(&Tmp, &iszero); EG(ret, err); in _ecfsdsa_verify_batch_no_memory()
878 ret = local_memset(hash, 0, sizeof(hash)); EG(ret, err); in _ecfsdsa_verify_batch()
917 ret = get_hash_by_type(hash_type, &hm); EG(ret, err); in _ecfsdsa_verify_batch()
925 ret = pub_key_check_initialized_and_type(pub_keys[i], ECFSDSA); EG(ret, err); in _ecfsdsa_verify_batch()
954 ret = nn_init(&a, 0); EG(ret, err); in _ecfsdsa_verify_batch()
955 ret = nn_init(&elements[(2 * num)].number, 0); EG(ret, err); in _ecfsdsa_verify_batch()
956 ret = prj_pt_copy(&elements[(2 * num)].point, G); EG(ret, err); in _ecfsdsa_verify_batch()
960 ret = nn_get_random_mod(&a, q); EG(ret, err); in _ecfsdsa_verify_batch()
964 ret = nn_init_from_buf(&S, &sig[2 * p_len], q_len); EG(ret, err); in _ecfsdsa_verify_batch()
965 ret = nn_cmp(&S, q, &cmp); EG(ret, err); in _ecfsdsa_verify_batch()
973 ret = nn_mod_mul(&S, &a, &S, q); EG(ret, err); in _ecfsdsa_verify_batch()
975 &S, q); EG(ret, err); in _ecfsdsa_verify_batch()
983 ret = prj_pt_copy(Y, pub_key_y); EG(ret, err); in _ecfsdsa_verify_batch()
984 ret = prj_pt_unique(Y, Y); EG(ret, err); in _ecfsdsa_verify_batch()
989 ret = nn_init(e, 0); EG(ret, err); in _ecfsdsa_verify_batch()
990 ret = hm->hfunc_init(&h_ctx); EG(ret, err); in _ecfsdsa_verify_batch()
991 ret = hm->hfunc_update(&h_ctx, &sig[0], (u32)(2 * p_len)); EG(ret, err); in _ecfsdsa_verify_batch()
992 ret = hm->hfunc_update(&h_ctx, m[i], m_len[i]); EG(ret, err); in _ecfsdsa_verify_batch()
993 ret = hm->hfunc_finalize(&h_ctx, hash); EG(ret, err); in _ecfsdsa_verify_batch()
995 ret = nn_init_from_buf(e, hash, hsize); EG(ret, err); in _ecfsdsa_verify_batch()
996 ret = nn_mod(e, e, q); EG(ret, err); in _ecfsdsa_verify_batch()
997 ret = nn_mod_neg(e, e, q); EG(ret, err); in _ecfsdsa_verify_batch()
1002 ret = nn_mod_mul(e, e, &a, q); EG(ret, err); in _ecfsdsa_verify_batch()
1007 ret = prj_pt_import_from_aff_buf(W, &sig[0], (u16)(2 * p_len), shortw_curve); EG(ret, err); in _ecfsdsa_verify_batch()
1008 ret = nn_init(&elements[i].number, 0); EG(ret, err); in _ecfsdsa_verify_batch()
1009 ret = nn_copy(&elements[i].number, &a); EG(ret, err); in _ecfsdsa_verify_batch()
1010 ret = nn_mod_neg(&elements[i].number, &elements[i].number, q); EG(ret, err); in _ecfsdsa_verify_batch()
1026 hash_type, adata, adata_len); EG(ret, err); in _ecfsdsa_verify_batch()
1036 ret = prj_pt_iszero(&elements[elements[0].index].point, &iszero); EG(ret, err); in _ecfsdsa_verify_batch()
1068 scratch_pad_area, scratch_pad_area_len); EG(ret, err); in ecfsdsa_verify_batch()
1073 hash_type, adata, adata_len); EG(ret, err); in ecfsdsa_verify_batch()