Lines Matching full:eg

80 	ret = local_memset(out_pub, 0, sizeof(ec_pub_key)); EG(ret, err);  in ecrdsa_init_pub_key()
82 ret = priv_key_check_initialized_and_type(in_priv, ECRDSA); EG(ret, err); in ecrdsa_init_pub_key()
91 ret = prj_pt_mul_blind(&(out_pub->y), &(in_priv->x), G); EG(ret, err); in ecrdsa_init_pub_key()
154 ret = sig_sign_check_initialized(ctx); EG(ret, err); in _ecrdsa_sign_init()
157 ret = key_pair_check_initialized_and_type(ctx->key_pair, ECRDSA); EG(ret, err); in _ecrdsa_sign_init()
166 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in _ecrdsa_sign_init()
167 ret = ctx->h->hfunc_init(&(ctx->sign_data.ecrdsa.h_ctx)); EG(ret, err); in _ecrdsa_sign_init()
185 ret = sig_sign_check_initialized(ctx); EG(ret, err); in _ecrdsa_sign_update()
189 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in _ecrdsa_sign_update()
222 ret = sig_sign_check_initialized(ctx); EG(ret, err); in _ecrdsa_sign_finalize()
226 ret = local_memset(&kG, 0, sizeof(prj_pt)); EG(ret, err); in _ecrdsa_sign_finalize()
240 ret = nn_cmp(x, q, &cmp); EG(ret, err); in _ecrdsa_sign_finalize()
263 ret = ctx->rand(&k, q); EG(ret, err); in _ecrdsa_sign_finalize()
269 ret = nn_get_random_mod(&b, q); EG(ret, err); in _ecrdsa_sign_finalize()
276 ret = prj_pt_mul_blind(&kG, &k, G); EG(ret, err); in _ecrdsa_sign_finalize()
278 ret = prj_pt_mul(&kG, &k, G); EG(ret, err); in _ecrdsa_sign_finalize()
280 ret = prj_pt_unique(&kG, &kG); EG(ret, err); in _ecrdsa_sign_finalize()
285 ret = nn_mod(&r, &(kG.X.fp_val), q); EG(ret, err); in _ecrdsa_sign_finalize()
288 ret = nn_iszero(&r, &iszero); EG(ret, err); in _ecrdsa_sign_finalize()
295 ret = nn_export_to_buf(sig, r_len, &r); EG(ret, err); in _ecrdsa_sign_finalize()
298 ret = local_memset(h_buf, 0, hsize); EG(ret, err); in _ecrdsa_sign_finalize()
300 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in _ecrdsa_sign_finalize()
301 ret = ctx->h->hfunc_finalize(&(ctx->sign_data.ecrdsa.h_ctx), h_buf); EG(ret, err); in _ecrdsa_sign_finalize()
307 ret = _reverse_endianness(h_buf, hsize); EG(ret, err); in _ecrdsa_sign_finalize()
309 ret = nn_init_from_buf(&e, h_buf, hsize); EG(ret, err); in _ecrdsa_sign_finalize()
310 ret = local_memset(h_buf, 0, hsize); EG(ret, err); in _ecrdsa_sign_finalize()
311 ret = nn_mod(&e, &e, q); EG(ret, err); in _ecrdsa_sign_finalize()
312 ret = nn_iszero(&e, &iszero); EG(ret, err); in _ecrdsa_sign_finalize()
314 ret = nn_inc(&e, &e); EG(ret, err); in _ecrdsa_sign_finalize()
320 ret = nn_mod_mul(&r, &r, &b, q); EG(ret, err); in _ecrdsa_sign_finalize()
321 ret = nn_mod_mul(&e, &e, &b, q); EG(ret, err); in _ecrdsa_sign_finalize()
325 ret = nn_mod_mul(&rx, &r, x, q); EG(ret, err); in _ecrdsa_sign_finalize()
326 ret = nn_mod_mul(&ke, &k, &e, q); EG(ret, err); in _ecrdsa_sign_finalize()
327 ret = nn_mod_add(&s, &rx, &ke, q); EG(ret, err); in _ecrdsa_sign_finalize()
333 ret = nn_modinv_fermat(&binv, &b, q); EG(ret, err); in _ecrdsa_sign_finalize()
334 ret = nn_mod_mul(&s, &s, &binv, q); EG(ret, err); in _ecrdsa_sign_finalize()
338 ret = nn_iszero(&s, &iszero); EG(ret, err); in _ecrdsa_sign_finalize()
428 ret = sig_verify_check_initialized(ctx); EG(ret, err); in _ecrdsa_verify_init()
431 ret = pub_key_check_initialized_and_type(ctx->pub_key, ECRDSA); EG(ret, err); in _ecrdsa_verify_init()
444 ret = nn_init_from_buf(&r, sig, r_len); EG(ret, err); in _ecrdsa_verify_init()
445 ret = nn_init_from_buf(&s, sig + r_len, s_len); EG(ret, err); in _ecrdsa_verify_init()
446 ret = nn_iszero(&s, &iszero1); EG(ret, err); in _ecrdsa_verify_init()
447 ret = nn_iszero(&r, &iszero2); EG(ret, err); in _ecrdsa_verify_init()
448 ret = nn_cmp(&s, q, &cmp1); EG(ret, err); in _ecrdsa_verify_init()
449 ret = nn_cmp(&s, q, &cmp2); EG(ret, err); in _ecrdsa_verify_init()
453 ret = nn_copy(&(ctx->verify_data.ecrdsa.r), &r); EG(ret, err); in _ecrdsa_verify_init()
454 ret = nn_copy(&(ctx->verify_data.ecrdsa.s), &s); EG(ret, err); in _ecrdsa_verify_init()
456 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in _ecrdsa_verify_init()
457 ret = ctx->h->hfunc_init(&(ctx->verify_data.ecrdsa.h_ctx)); EG(ret, err); in _ecrdsa_verify_init()
485 ret = sig_verify_check_initialized(ctx); EG(ret, err); in _ecrdsa_verify_update()
490 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in _ecrdsa_verify_update()
521 ret = sig_verify_check_initialized(ctx); EG(ret, err); in _ecrdsa_verify_finalize()
525 ret = local_memset(&uG, 0, sizeof(prj_pt)); EG(ret, err); in _ecrdsa_verify_finalize()
526 ret = local_memset(&vY, 0, sizeof(prj_pt)); EG(ret, err); in _ecrdsa_verify_finalize()
537 ret = local_memset(h_buf, 0, hsize); EG(ret, err); in _ecrdsa_verify_finalize()
539 ret = hash_mapping_callbacks_sanity_check(ctx->h); EG(ret, err); in _ecrdsa_verify_finalize()
540 ret = ctx->h->hfunc_finalize(&(ctx->verify_data.ecrdsa.h_ctx), h_buf); EG(ret, err); in _ecrdsa_verify_finalize()
546 ret = _reverse_endianness(h_buf, hsize); EG(ret, err); in _ecrdsa_verify_finalize()
550 ret = nn_init_from_buf(&h, h_buf, hsize); EG(ret, err); in _ecrdsa_verify_finalize()
551 ret = local_memset(h_buf, 0, hsize); EG(ret, err); in _ecrdsa_verify_finalize()
552 ret = nn_mod(&h, &h, q); EG(ret, err); /* h = OS2I(h) mod q */ in _ecrdsa_verify_finalize()
553 ret = nn_iszero(&h, &iszero); EG(ret, err); in _ecrdsa_verify_finalize()
555 ret = nn_inc(&h, &h); EG(ret, err); in _ecrdsa_verify_finalize()
557 ret = nn_modinv(&e, &h, q); EG(ret, err); /* e = h^-1 mod q */ in _ecrdsa_verify_finalize()
560 ret = nn_mod_mul(&u, &e, s, q); EG(ret, err); in _ecrdsa_verify_finalize()
569 ret = nn_mod_mul(&e, &e, r, q); EG(ret, err); in _ecrdsa_verify_finalize()
570 ret = nn_mod_neg(&v, &e, q); EG(ret, err); in _ecrdsa_verify_finalize()
573 ret = prj_pt_mul(&uG, &u, G); EG(ret, err); in _ecrdsa_verify_finalize()
574 ret = prj_pt_mul(&vY, &v, Y); EG(ret, err); in _ecrdsa_verify_finalize()
575 ret = prj_pt_add(Wprime, &uG, &vY); EG(ret, err); in _ecrdsa_verify_finalize()
576 ret = prj_pt_unique(Wprime, Wprime); EG(ret, err); in _ecrdsa_verify_finalize()
581 ret = nn_mod(&r_prime, &(Wprime->X.fp_val), q); EG(ret, err); in _ecrdsa_verify_finalize()
584 ret = nn_cmp(r, &r_prime, &cmp); EG(ret, err); in _ecrdsa_verify_finalize()