1*f0865ec9SKyle Evans /*
2*f0865ec9SKyle Evans * Copyright (C) 2017 - This file is part of libecc project
3*f0865ec9SKyle Evans *
4*f0865ec9SKyle Evans * Authors:
5*f0865ec9SKyle Evans * Ryad BENADJILA <ryadbenadjila@gmail.com>
6*f0865ec9SKyle Evans * Arnaud EBALARD <arnaud.ebalard@ssi.gouv.fr>
7*f0865ec9SKyle Evans * Jean-Pierre FLORI <jean-pierre.flori@ssi.gouv.fr>
8*f0865ec9SKyle Evans *
9*f0865ec9SKyle Evans * Contributors:
10*f0865ec9SKyle Evans * Nicolas VIVET <nicolas.vivet@ssi.gouv.fr>
11*f0865ec9SKyle Evans * Karim KHALFALLAH <karim.khalfallah@ssi.gouv.fr>
12*f0865ec9SKyle Evans *
13*f0865ec9SKyle Evans * This software is licensed under a dual BSD and GPL v2 license.
14*f0865ec9SKyle Evans * See LICENSE file at the root folder of the project.
15*f0865ec9SKyle Evans */
16*f0865ec9SKyle Evans #include <libecc/fp/fp_mul_redc1.h>
17*f0865ec9SKyle Evans
18*f0865ec9SKyle Evans /*
19*f0865ec9SKyle Evans * Internal helper performing Montgomery multiplication. The function returns
20*f0865ec9SKyle Evans * 0 on success, -1 on error.
21*f0865ec9SKyle Evans *
22*f0865ec9SKyle Evans * CAUTION: the function does not check input parameters. Those checks MUST be
23*f0865ec9SKyle Evans * performed by the caller.
24*f0865ec9SKyle Evans */
_fp_mul_redc1(nn_t out,nn_src_t in1,nn_src_t in2,fp_ctx_src_t ctx)25*f0865ec9SKyle Evans ATTRIBUTE_WARN_UNUSED_RET static inline int _fp_mul_redc1(nn_t out, nn_src_t in1, nn_src_t in2,
26*f0865ec9SKyle Evans fp_ctx_src_t ctx)
27*f0865ec9SKyle Evans {
28*f0865ec9SKyle Evans return nn_mul_redc1(out, in1, in2, &(ctx->p), ctx->mpinv);
29*f0865ec9SKyle Evans }
30*f0865ec9SKyle Evans
31*f0865ec9SKyle Evans /*
32*f0865ec9SKyle Evans * Compute out = in1 * in2 mod (p) in redcified form.
33*f0865ec9SKyle Evans *
34*f0865ec9SKyle Evans * Exported version based on previous one, that sanity checks input parameters.
35*f0865ec9SKyle Evans * The function returns 0 on success, -1 on error.
36*f0865ec9SKyle Evans *
37*f0865ec9SKyle Evans * Aliasing is supported.
38*f0865ec9SKyle Evans */
fp_mul_redc1(fp_t out,fp_src_t in1,fp_src_t in2)39*f0865ec9SKyle Evans int fp_mul_redc1(fp_t out, fp_src_t in1, fp_src_t in2)
40*f0865ec9SKyle Evans {
41*f0865ec9SKyle Evans int ret;
42*f0865ec9SKyle Evans
43*f0865ec9SKyle Evans ret = fp_check_initialized(in1); EG(ret, err);
44*f0865ec9SKyle Evans ret = fp_check_initialized(in2); EG(ret, err);
45*f0865ec9SKyle Evans ret = fp_check_initialized(out); EG(ret, err);
46*f0865ec9SKyle Evans
47*f0865ec9SKyle Evans MUST_HAVE((out->ctx == in1->ctx), ret, err);
48*f0865ec9SKyle Evans MUST_HAVE((out->ctx == in2->ctx), ret, err);
49*f0865ec9SKyle Evans
50*f0865ec9SKyle Evans ret = _fp_mul_redc1(&(out->fp_val), &(in1->fp_val), &(in2->fp_val),
51*f0865ec9SKyle Evans out->ctx);
52*f0865ec9SKyle Evans
53*f0865ec9SKyle Evans err:
54*f0865ec9SKyle Evans return ret;
55*f0865ec9SKyle Evans }
56*f0865ec9SKyle Evans
57*f0865ec9SKyle Evans /*
58*f0865ec9SKyle Evans * Compute out = in * in mod (p) in redcified form.
59*f0865ec9SKyle Evans *
60*f0865ec9SKyle Evans * Aliasing is supported.
61*f0865ec9SKyle Evans */
fp_sqr_redc1(fp_t out,fp_src_t in)62*f0865ec9SKyle Evans int fp_sqr_redc1(fp_t out, fp_src_t in)
63*f0865ec9SKyle Evans {
64*f0865ec9SKyle Evans return fp_mul_redc1(out, in, in);
65*f0865ec9SKyle Evans }
66*f0865ec9SKyle Evans
67*f0865ec9SKyle Evans /*
68*f0865ec9SKyle Evans * Compute out = redcified form of in.
69*f0865ec9SKyle Evans * redcify could be done by shifting and division by p. The function returns 0
70*f0865ec9SKyle Evans * on success, -1 on error.
71*f0865ec9SKyle Evans *
72*f0865ec9SKyle Evans * Aliasing is supported.
73*f0865ec9SKyle Evans */
fp_redcify(fp_t out,fp_src_t in)74*f0865ec9SKyle Evans int fp_redcify(fp_t out, fp_src_t in)
75*f0865ec9SKyle Evans {
76*f0865ec9SKyle Evans int ret;
77*f0865ec9SKyle Evans
78*f0865ec9SKyle Evans ret = fp_check_initialized(in); EG(ret, err);
79*f0865ec9SKyle Evans ret = fp_check_initialized(out); EG(ret, err);
80*f0865ec9SKyle Evans
81*f0865ec9SKyle Evans MUST_HAVE((out->ctx == in->ctx), ret, err);
82*f0865ec9SKyle Evans
83*f0865ec9SKyle Evans ret = _fp_mul_redc1(&(out->fp_val), &(in->fp_val), &(out->ctx->r_square),
84*f0865ec9SKyle Evans out->ctx);
85*f0865ec9SKyle Evans
86*f0865ec9SKyle Evans err:
87*f0865ec9SKyle Evans return ret;
88*f0865ec9SKyle Evans }
89*f0865ec9SKyle Evans
90*f0865ec9SKyle Evans /*
91*f0865ec9SKyle Evans * Compute out = unredcified form of in.
92*f0865ec9SKyle Evans * The function returns 0 on success, -1 on error.
93*f0865ec9SKyle Evans *
94*f0865ec9SKyle Evans * Aliasing is supported.
95*f0865ec9SKyle Evans */
fp_unredcify(fp_t out,fp_src_t in)96*f0865ec9SKyle Evans int fp_unredcify(fp_t out, fp_src_t in)
97*f0865ec9SKyle Evans {
98*f0865ec9SKyle Evans int ret;
99*f0865ec9SKyle Evans nn one;
100*f0865ec9SKyle Evans one.magic = WORD(0);
101*f0865ec9SKyle Evans
102*f0865ec9SKyle Evans ret = fp_check_initialized(in); EG(ret, err);
103*f0865ec9SKyle Evans ret = fp_check_initialized(out); EG(ret, err);
104*f0865ec9SKyle Evans ret = nn_init(&one, 0); EG(ret, err);
105*f0865ec9SKyle Evans ret = nn_one(&one); EG(ret, err);
106*f0865ec9SKyle Evans ret = _fp_mul_redc1(&(out->fp_val), &(in->fp_val), &one, out->ctx);
107*f0865ec9SKyle Evans
108*f0865ec9SKyle Evans err:
109*f0865ec9SKyle Evans nn_uninit(&one);
110*f0865ec9SKyle Evans
111*f0865ec9SKyle Evans return ret;
112*f0865ec9SKyle Evans }
113