65 	MUST_HAVE((h != NULL) && (h_ctx != NULL), ret, err);  in dom()
67 	MUST_HAVE((x <= 255) && (olen_y <= 255), ret, err);  in dom()
220 	MUST_HAVE((key_pair != NULL), ret, err);  in eddsa_key_pair_sanity_check()
223 	MUST_HAVE((key_pair->priv_key.key_type == key_pair->pub_key.key_type), ret, err);  in eddsa_key_pair_sanity_check()
238 	MUST_HAVE((buf != NULL), ret, err);  in eddsa_decode_integer()
239 	MUST_HAVE((sizeof(buf_little_endian) >= buf_size), ret, err);  in eddsa_decode_integer()
268 	MUST_HAVE((buf != NULL), ret, err);  in eddsa_encode_integer()
273 	MUST_HAVE((((u32)blen) <= (8 * (u32)buf_size)), ret, err);  in eddsa_encode_integer()
298 	MUST_HAVE((digest != NULL), ret, err);  in eddsa_compute_s()
299 	MUST_HAVE(((digest_size % 2) == 0), ret, err);  in eddsa_compute_s()
315 	MUST_HAVE(((digest != NULL) && (digest_size != NULL)), ret, err);  in eddsa_get_digest_from_priv_key()
318 	MUST_HAVE(((hash_type = get_eddsa_hash_type(in_priv->key_type)) != UNKNOWN_HASH_ALG), ret, err);  in eddsa_get_digest_from_priv_key()
320 	MUST_HAVE((hash != NULL), ret, err);  in eddsa_get_digest_from_priv_key()
323 	MUST_HAVE(((*digest_size) >= hash->digest_size), ret, err);  in eddsa_get_digest_from_priv_key()
344 	MUST_HAVE((buf != NULL), ret, err);  in eddsa_encode_point()
417 	MUST_HAVE((buflen > 1), ret, err);  in eddsa_encode_point()
444 	MUST_HAVE((buf != NULL), ret, err);  in eddsa_decode_point()
453 	MUST_HAVE((sizeof(buf_little_endian) >= buflen), ret, err);  in eddsa_decode_point()
456 	MUST_HAVE((buflen > 1), ret, err);  in eddsa_decode_point()
516 	MUST_HAVE(!(iszero && (x_0 == 1)), ret, err);  in eddsa_decode_point()
583 	MUST_HAVE((buf != NULL), ret, err);  in eddsa_derive_priv_key_hash()
586 	MUST_HAVE(((hash_type = get_eddsa_hash_type(in_priv->key_type)) != UNKNOWN_HASH_ALG), ret, err);  in eddsa_derive_priv_key_hash()
588 	MUST_HAVE((hash != NULL), ret, err);  in eddsa_derive_priv_key_hash()
592 	MUST_HAVE((sizeof(x_buf) >= (hash->digest_size / 2)), ret, err);  in eddsa_derive_priv_key_hash()
598 	MUST_HAVE((buflen >= hash->digest_size), ret, err);  in eddsa_derive_priv_key_hash()
628 	MUST_HAVE(((hash_type = get_eddsa_hash_type(priv_key->key_type)) != UNKNOWN_HASH_ALG), ret, err);  in eddsa_derive_priv_key()
633 	MUST_HAVE(((2 * priv_key->params->ec_fp.p_bitlen) < (8 * (bitcnt_t)digest_size)), ret, err);  in eddsa_derive_priv_key()
634 	MUST_HAVE(((digest_size % 2) == 0), ret, err);  in eddsa_derive_priv_key()
635 	MUST_HAVE((digest_size <= sizeof(digest)), ret, err);  in eddsa_derive_priv_key()
647 	MUST_HAVE((cmp == 0), ret, err);  in eddsa_derive_priv_key()
649 	MUST_HAVE((cofactor == (0x1 << 2)) || (cofactor == (0x1 << 3)), ret, err);  in eddsa_derive_priv_key()
667 		MUST_HAVE((digest_size / 2) >= 2, ret, err);  in eddsa_derive_priv_key()
709 	MUST_HAVE(((hash_type = get_eddsa_hash_type(priv_key->key_type)) != UNKNOWN_HASH_ALG), ret, err);  in eddsa_gen_priv_key()
714 	MUST_HAVE(((2 * priv_key->params->ec_fp.p_bitlen) < (8 * (bitcnt_t)digest_size)), ret, err);  in eddsa_gen_priv_key()
715 	MUST_HAVE(((digest_size % 2) == 0), ret, err);  in eddsa_gen_priv_key()
750 	MUST_HAVE((priv_key != NULL) && (buf != NULL) && (shortw_curve_params != NULL), ret, err);  in eddsa_import_priv_key()
756 	MUST_HAVE((hash_type != UNKNOWN_HASH_ALG), ret, err);  in eddsa_import_priv_key()
762 	MUST_HAVE((blen <= (8 * ((bitcnt_t)digest_size / 2))), ret, err);  in eddsa_import_priv_key()
801 	MUST_HAVE(out_pub != NULL, ret, err);  in eddsa_init_pub_key()
813 	MUST_HAVE(((hash_type = get_eddsa_hash_type(in_priv->key_type)) != UNKNOWN_HASH_ALG), ret, err);  in eddsa_init_pub_key()
823 	MUST_HAVE((digest_size == digest_size_), ret, err);  in eddsa_init_pub_key()
893 	MUST_HAVE((pub_key != NULL) && (shortw_curve_params != NULL) && (buf != NULL), ret, err);
898 		MUST_HAVE((buflen == EDDSA25519_PUB_KEY_ENCODED_LEN), ret, err);
903 		MUST_HAVE((buflen == EDDSA448_PUB_KEY_ENCODED_LEN), ret, err);
987 	MUST_HAVE((buf != NULL), ret, err);
1000 		MUST_HAVE((buflen == EDDSA25519_PUB_KEY_ENCODED_LEN), ret, err);
1005 		MUST_HAVE((buflen == EDDSA448_PUB_KEY_ENCODED_LEN), ret, err);
1038 	MUST_HAVE((kp != NULL), ret, err);
1061 	MUST_HAVE((message != NULL) && (digest != NULL) && (digest_size != NULL), ret, err);
1063 	MUST_HAVE(((hash_type = get_eddsa_hash_type(sig_type)) != UNKNOWN_HASH_ALG), ret, err);
1066 	MUST_HAVE((hash != NULL), ret, err);
1069 	MUST_HAVE(((*digest_size) >= hash->digest_size), ret, err);
1089 	MUST_HAVE((siglen != NULL), ret, err);
1090 	MUST_HAVE((p_bit_len <= CURVES_MAX_P_BIT_LEN) &&
1111 	MUST_HAVE((((void *)(A)) != NULL) && ((A)->magic == EDDSA_SIGN_MAGIC), ret, err)
1141 	MUST_HAVE((use_message_pre_hash == 1), ret, err);
1146 …MUST_HAVE((h != NULL) && (h->digest_size <= MAX_DIGEST_SIZE) && (h->block_size <= MAX_BLOCK_SIZE),…
1149 …MUST_HAVE((key_type == key_pair->pub_key.key_type) && (h->type == get_eddsa_hash_type(key_type)), …
1155 	MUST_HAVE(blen <= (8 * h->digest_size), ret, err);
1191 	MUST_HAVE((chunk != NULL), ret, err);
1206 	MUST_HAVE(use_message_pre_hash == 1, ret, err);
1209 	MUST_HAVE((ctx->h->type == get_eddsa_hash_type(key_type)), ret, err);
1265 	MUST_HAVE((sig != NULL), ret, err);
1277 …MUST_HAVE((key_type == ctx->key_pair->pub_key.key_type) && (ctx->h->type == get_eddsa_hash_type(ke…
1302 	MUST_HAVE((siglen == EDDSA_SIGLEN(hsize)) && (siglen == (r_len + s_len)), ret, err);
1321 	MUST_HAVE((use_message_pre_hash == 1), ret, err);
1335 	MUST_HAVE((hash_size == hsize), ret, err);
1356 	MUST_HAVE((use_message_pre_hash_hsize <= hsize), ret, err);
1444 	MUST_HAVE((r_len <= siglen), ret, err);
1468 	MUST_HAVE(r_len <= sizeof(hash), ret, err);
1507 	MUST_HAVE((s_len <= (siglen - r_len)), ret, err);
1600 	MUST_HAVE((rand == NULL), ret, err);
1617 	MUST_HAVE((h != NULL), ret, err);
1618 	MUST_HAVE((get_eddsa_hash_type(sig_type) == hash_type), ret, err);
1620 	MUST_HAVE(key_type == sig_type, ret, err);
1621 …MUST_HAVE((h != NULL) && (h->digest_size <= MAX_DIGEST_SIZE) && (h->block_size <= MAX_BLOCK_SIZE),…
1626 	MUST_HAVE((blen <= (8 * h->digest_size)), ret, err);
1650 	MUST_HAVE((siglen == EDDSA_SIGLEN(hsize)) && (siglen == (r_len + s_len)), ret, err);
1672 		MUST_HAVE(use_message_pre_hash_hsize <= hash_size, ret, err);
1679 	MUST_HAVE((hash_size == hsize), ret, err);
1686 		MUST_HAVE(adata != NULL, ret, err);
1792 	MUST_HAVE((r_len <= siglen), ret, err);
1802 		MUST_HAVE((adata != NULL), ret, err);
1823 	MUST_HAVE((r_len <= sizeof(hash)), ret, err);
1863 	MUST_HAVE((s_len <= (siglen - r_len)), ret, err);
1913 	MUST_HAVE((((void *)(A)) != NULL) && ((A)->magic == EDDSA_VERIFY_MAGIC), ret, err)
1942 	MUST_HAVE((sig != NULL), ret, err);
1953 …MUST_HAVE((ctx->h != NULL) && (ctx->h->digest_size <= MAX_DIGEST_SIZE) && (ctx->h->block_size <= M…
1973 	MUST_HAVE((ctx->h->type == get_eddsa_hash_type(key_type)), ret, err);
1976 	MUST_HAVE((siglen == EDDSA_SIGLEN(hsize)), ret, err);
1977 	MUST_HAVE((siglen == (EDDSA_R_LEN(hsize) + EDDSA_S_LEN(hsize))), ret, err);
1987 		MUST_HAVE((ctx->adata != NULL), ret, err);
2021 	MUST_HAVE((cmp < 0), ret, err);
2038 	MUST_HAVE((!iszero), ret, err);
2043 	MUST_HAVE((EDDSA_R_LEN(hsize) <= sizeof(buff)), ret, err);
2096 	MUST_HAVE(ctx->h->type == get_eddsa_hash_type(key_type), ret, err);
2172 	MUST_HAVE((ctx->h->type == get_eddsa_hash_type(key_type)), ret, err);
2193 	MUST_HAVE((cmp < 0), ret, err);
2195 	MUST_HAVE((hsize <= sizeof(hash)), ret, err);
2203 		MUST_HAVE((use_message_pre_hash_hsize <= hsize), ret, err);
2314 	MUST_HAVE((s != NULL) && (pub_keys != NULL) && (m != NULL) && (adata != NULL), ret, err);
2316 	MUST_HAVE((num > 0), ret, err);
2329 	MUST_HAVE((pub_key0 != NULL), ret, err);
2334 	MUST_HAVE((hm != NULL), ret, err);
2363 		MUST_HAVE((pub_key->params) == (pub_key0->params), ret, err);
2376 		MUST_HAVE((key_type == sig_type), ret, err);
2398 		MUST_HAVE((hash_type == get_eddsa_hash_type(key_type)), ret, err);
2403 		MUST_HAVE((siglen == EDDSA_SIGLEN(hsize)), ret, err);
2404 		MUST_HAVE((siglen == (EDDSA_R_LEN(hsize) + EDDSA_S_LEN(hsize))), ret, err);
2414 			MUST_HAVE((adata[i] != NULL), ret, err);
2453 		MUST_HAVE((cmp < 0), ret, err);
2475 		MUST_HAVE((!iszero), ret, err);
2480 		MUST_HAVE((EDDSA_R_LEN(hsize) <= sizeof(hash)), ret, err);
2491 			MUST_HAVE((use_message_pre_hash_hsize <= hsize), ret, err);
2527 	MUST_HAVE((gen_cofactor != NULL) && (q != NULL) && (G != NULL), ret, err);
2618 	MUST_HAVE((s != NULL) && (pub_keys != NULL) && (m != NULL) && (adata != NULL), ret, err);
2619 	MUST_HAVE((scratch_pad_area_len != NULL), ret, err);
2620 	MUST_HAVE(((2 * num) >= num), ret, err);
2621 	MUST_HAVE(((2 * num) + 1) >= num, ret, err);
2642 	MUST_HAVE((expected_len < 0xffffffff), ret, err);
2653 		MUST_HAVE((*scratch_pad_area_len) >= expected_len, ret, err);
2665 	MUST_HAVE((pub_key0 != NULL), ret, err);
2670 	MUST_HAVE((hm != NULL), ret, err);
2690 	MUST_HAVE((num >= 1), ret, err);
2701 		MUST_HAVE((pub_key->params) == (pub_key0->params), ret, err);
2715 		MUST_HAVE((key_type == sig_type), ret, err);
2734 		MUST_HAVE((hash_type == get_eddsa_hash_type(key_type)), ret, err);
2739 		MUST_HAVE((siglen == EDDSA_SIGLEN(hsize)), ret, err);
2740 		MUST_HAVE((siglen == (EDDSA_R_LEN(hsize) + EDDSA_S_LEN(hsize))), ret, err);
2750 			MUST_HAVE((adata[i] != NULL), ret, err);
2788 		MUST_HAVE((cmp < 0), ret, err);
2811 		MUST_HAVE((!iszero), ret, err);
2816 		MUST_HAVE((EDDSA_R_LEN(hsize) <= sizeof(hash)), ret, err);
2827 			MUST_HAVE((use_message_pre_hash_hsize <= hsize), ret, err);
2857 	MUST_HAVE((gen_cofactor != NULL) && (q != NULL) && (G != NULL) && (q_bit_len != 0), ret, err);
2915                 MUST_HAVE((scratch_pad_area_len != NULL), ret, err);