134 #define Z_INPUT_MAX_LEN (2 + SM2_MAX_ID_LEN + (6 * BYTECEIL(CURVES_MAX_P_BIT_LEN)))
231  *|   F  4. Compute W = (W_x,W_y) = kG
233  *|   F  6. If r is 0, restart the process at step 3.
318 	prj_pt kG;  in _sm2_sign_finalize()  local
326 	kG.magic = WORD(0);  in _sm2_sign_finalize()
339 	ret = local_memset(&kG, 0, sizeof(prj_pt)); EG(ret, err);  in _sm2_sign_finalize()
381 	/* 4. Compute W = (W_x,W_y) = kG */  in _sm2_sign_finalize()
383 	ret = prj_pt_mul_blind(&kG, &k, G); EG(ret, err);  in _sm2_sign_finalize()
385 	ret = prj_pt_mul(&kG, &k, G); EG(ret, err);  in _sm2_sign_finalize()
387 	ret = prj_pt_unique(&kG, &kG); EG(ret, err);  in _sm2_sign_finalize()
389 	dbg_nn_print("W_x", &(kG.X.fp_val));  in _sm2_sign_finalize()
390 	dbg_nn_print("W_y", &(kG.Y.fp_val));  in _sm2_sign_finalize()
396 	ret = nn_add(&tmp2, &tmp, &(kG.X.fp_val)); EG(ret, err);  in _sm2_sign_finalize()
400 	/* 6. If r is 0, restart the process at step 3. */  in _sm2_sign_finalize()
458 	prj_pt_uninit(&kG);  in _sm2_sign_finalize()
505  *|   F 6. Compute W' = sG + tY
669 	/* 6. Compute W' = sG + tY */  in _sm2_verify_finalize()