1085 int eddsa_siglen(u16 p_bit_len, u16 q_bit_len, u8 hsize, u8 blocksize, u8 *siglen)
1092 		  (hsize <= MAX_DIGEST_SIZE) && (blocksize <= MAX_BLOCK_SIZE), ret, err);
1094 	(*siglen) = (u8)EDDSA_SIGLEN(hsize);
1235 	u8 hsize, hash_size;  local
1285 	hsize = h->digest_size;
1286 	r_len = EDDSA_R_LEN(hsize);
1287 	s_len = EDDSA_S_LEN(hsize);
1302 	MUST_HAVE((siglen == EDDSA_SIGLEN(hsize)) && (siglen == (r_len + s_len)), ret, err);
1308 		use_message_pre_hash_hsize = hsize;
1335 	MUST_HAVE((hash_size == hsize), ret, err);
1353 	ret = h->hfunc_update(&(ctx->sign_data.eddsa.h_ctx), &hash[hsize / 2], hsize / 2); EG(ret, err);
1356 	MUST_HAVE((use_message_pre_hash_hsize <= hsize), ret, err);
1363 	dbg_buf_print("h(h || m)", hash, hsize);
1366 	ret = eddsa_decode_integer(&r, hash, hsize); EG(ret, err);
1481 	dbg_buf_print("h(R || PubKey || PH(m))", hash, hsize);
1483 	ret = eddsa_decode_integer(&S, hash, hsize); EG(ret, err);
1486 	hsize = sizeof(hash);
1487 	ret = eddsa_get_digest_from_priv_key(hash, &hsize, priv_key); EG(ret, err);
1489 	ret = eddsa_compute_s(&s, hash, hsize); EG(ret, err);
1522 	VAR_ZEROIFY(hsize);
1580 	u8 hsize, hash_size;  local
1633 	hsize = h->digest_size;
1634 	r_len = EDDSA_R_LEN(hsize);
1635 	s_len = EDDSA_S_LEN(hsize);
1650 	MUST_HAVE((siglen == EDDSA_SIGLEN(hsize)) && (siglen == (r_len + s_len)), ret, err);
1656 		use_message_pre_hash_hsize = hsize;
1679 	MUST_HAVE((hash_size == hsize), ret, err);
1701 	ret = h->hfunc_update(&h_ctx, &hash[hsize / 2], hsize / 2); EG(ret, err);
1711 	dbg_buf_print("h(h || PH(m))", hash, hsize);
1714 	ret = eddsa_decode_integer(&r, hash, hsize); EG(ret, err);
1839 	dbg_buf_print("h(R || PubKey || PH(m))", hash, hsize);
1841 	ret = eddsa_decode_integer(&S, hash, hsize); EG(ret, err);
1844 	hsize = sizeof(hash);
1845 	ret = eddsa_get_digest_from_priv_key(hash, &hsize, priv_key); EG(ret, err);
1846 	ret = eddsa_compute_s(&s, hash, hsize); EG(ret, err);
1879 	VAR_ZEROIFY(hsize);
1926 	u16 hsize;  local
1959 	hsize = ctx->h->digest_size;
1976 	MUST_HAVE((siglen == EDDSA_SIGLEN(hsize)), ret, err);
1977 	MUST_HAVE((siglen == (EDDSA_R_LEN(hsize) + EDDSA_S_LEN(hsize))), ret, err);
2009 			      EDDSA_R_LEN(hsize), key_type); EG(ret, err);
2014 	ret = ctx->h->hfunc_update(h_ctx, &sig[0], EDDSA_R_LEN(hsize)); EG(ret, err);
2018 	ret = eddsa_decode_integer(S, &sig[EDDSA_R_LEN(hsize)], EDDSA_S_LEN(hsize)); EG(ret, err);
2043 	MUST_HAVE((EDDSA_R_LEN(hsize) <= sizeof(buff)), ret, err);
2045 	ret = eddsa_encode_point(&A, alpha_edwards, buff, EDDSA_R_LEN(hsize), key_type); EG(ret, err);
2048 	ret = ctx->h->hfunc_update(h_ctx, buff, EDDSA_R_LEN(hsize)); EG(ret, err);
2134 	u16 hsize;  local
2163 	hsize = ctx->h->digest_size;
2178 		use_message_pre_hash_hsize = hsize;
2195 	MUST_HAVE((hsize <= sizeof(hash)), ret, err);
2203 		MUST_HAVE((use_message_pre_hash_hsize <= hsize), ret, err);
2207 	dbg_buf_print("hash = H(R || A || PH(M))", hash, hsize);
2210 	ret = eddsa_decode_integer(&h, hash, hsize); EG(ret, err);
2258 	VAR_ZEROIFY(hsize);
2293 	u16 hsize;  local
2333 	hsize = hm->digest_size;
2340 		use_message_pre_hash_hsize = hsize;
2391 		ret = nn_get_random_len(&z, (hsize / 4)); EG(ret, err);
2403 		MUST_HAVE((siglen == EDDSA_SIGLEN(hsize)), ret, err);
2404 		MUST_HAVE((siglen == (EDDSA_R_LEN(hsize) + EDDSA_S_LEN(hsize))), ret, err);
2436 				      EDDSA_R_LEN(hsize), key_type); EG(ret, err);
2441 		ret = hm->hfunc_update(&h_ctx, &sig[0], EDDSA_R_LEN(hsize)); EG(ret, err);
2450 		ret = eddsa_decode_integer(&S, &sig[EDDSA_R_LEN(hsize)], EDDSA_S_LEN(hsize)); EG(ret, err);
2480 		MUST_HAVE((EDDSA_R_LEN(hsize) <= sizeof(hash)), ret, err);
2482 		ret = eddsa_encode_point(&A, alpha_edwards, hash, EDDSA_R_LEN(hsize), key_type); EG(ret, err);
2485 		ret = hm->hfunc_update(&h_ctx, hash, EDDSA_R_LEN(hsize)); EG(ret, err);
2491 			MUST_HAVE((use_message_pre_hash_hsize <= hsize), ret, err);
2498 		dbg_buf_print("hash = H(R || A || PH(M))", hash, hsize);
2501 		ret = eddsa_decode_integer(&h, hash, hsize); EG(ret, err);
2595 	u16 hsize;  local
2669 	hsize = hm->digest_size;
2676 		use_message_pre_hash_hsize = hsize;
2727 		ret = nn_get_random_len(&z, (hsize / 4)); EG(ret, err);
2739 		MUST_HAVE((siglen == EDDSA_SIGLEN(hsize)), ret, err);
2740 		MUST_HAVE((siglen == (EDDSA_R_LEN(hsize) + EDDSA_S_LEN(hsize))), ret, err);
2772 				      EDDSA_R_LEN(hsize), key_type); EG(ret, err);
2777 		ret = hm->hfunc_update(&h_ctx, &sig[0], EDDSA_R_LEN(hsize)); EG(ret, err);
2785 		ret = eddsa_decode_integer(&S, &sig[EDDSA_R_LEN(hsize)], EDDSA_S_LEN(hsize)); EG(ret, err);
2816 		MUST_HAVE((EDDSA_R_LEN(hsize) <= sizeof(hash)), ret, err);
2818 		ret = eddsa_encode_point(&A, alpha_edwards, hash, EDDSA_R_LEN(hsize), key_type); EG(ret, err);
2821 		ret = hm->hfunc_update(&h_ctx, hash, EDDSA_R_LEN(hsize)); EG(ret, err);
2827 			MUST_HAVE((use_message_pre_hash_hsize <= hsize), ret, err);
2834 		dbg_buf_print("hash = H(R || A || PH(M))", hash, hsize);
2837 		ret = eddsa_decode_integer(&elements[num + i].number, hash, hsize); EG(ret, err);