summaryrefslogtreecommitdiff
path: root/ecc-add-eh.c
diff options
context:
space:
mode:
authorNiels Möller <nisse@lysator.liu.se>2019-12-17 22:59:57 +0100
committerNiels Möller <nisse@lysator.liu.se>2019-12-18 08:18:04 +0100
commit923cc6ae98fc1da9cbd98ba8f8fcaf5240967221 (patch)
tree692c7a9bcec73798398911c623813d184d840e56 /ecc-add-eh.c
parent6d455c6d3c6a7011fb51f38bb9423a7aff34f00b (diff)
downloadnettle-923cc6ae98fc1da9cbd98ba8f8fcaf5240967221.tar.gz
Rename add and dup functions for Edwards curves.
Diffstat (limited to 'ecc-add-eh.c')
-rw-r--r--ecc-add-eh.c74
1 files changed, 0 insertions, 74 deletions
diff --git a/ecc-add-eh.c b/ecc-add-eh.c
index 85e06648..8e6b82ab 100644
--- a/ecc-add-eh.c
+++ b/ecc-add-eh.c
@@ -55,80 +55,6 @@ ecc_add_eh (const struct ecc_curve *ecc,
#define z3 (r + 2*ecc->p.size)
/* Formulas (from djb,
- http://www.hyperelliptic.org/EFD/g1p/auto-twisted-projective.html#addition-madd-2008-bbjlp
-
- Computation Operation Live variables
-
- C = x1*x2 mul C
- D = y1*y2 mul C, D
- T = (x1+y1)*(x2+y2) mul C, D, T
- - C - D
- E = b*C*D 2 mul C, E, T (Replace C <-- D+C)
- B = z1^2 sqr B, C, E, T
- F = B - E B, C, E, F, T
- G = B + E C, F, G, T
- x3 = z1 * F * T 2 mul C, F, G, T
- y3 = z1*G*(D+C) 2 mul F, G
- z3 = F*G mul
-
- 10M + 1S
-
- We have different sign for E, hence swapping F and G, because our
- ecc->b corresponds to -b above.
- */
-#define C (scratch)
-#define D (scratch + 1*ecc->p.size)
-#define T (scratch + 2*ecc->p.size)
-#define E (scratch + 3*ecc->p.size)
-#define B (scratch + 4*ecc->p.size)
-#define F D
-#define G E
-
- ecc_modp_mul (ecc, C, x1, x2);
- ecc_modp_mul (ecc, D, y1, y2);
- ecc_modp_add (ecc, x3, x1, y1);
- ecc_modp_add (ecc, y3, x2, y2);
- ecc_modp_mul (ecc, T, x3, y3);
- ecc_modp_sub (ecc, T, T, C);
- ecc_modp_sub (ecc, T, T, D);
- ecc_modp_mul (ecc, x3, C, D);
- ecc_modp_mul (ecc, E, x3, ecc->b);
-
- ecc_modp_add (ecc, C, D, C);
- ecc_modp_sqr (ecc, B, z1);
- ecc_modp_sub (ecc, F, B, E);
- ecc_modp_add (ecc, G, B, E);
-
- /* x3 */
- ecc_modp_mul (ecc, B, G, T);
- ecc_modp_mul (ecc, x3, B, z1);
-
- /* y3 */
- ecc_modp_mul (ecc, B, F, z1);
- ecc_modp_mul (ecc, y3, B, C); /* Clobbers z1 in case r == p. */
-
- /* z3 */
- ecc_modp_mul (ecc, B, F, G);
- mpn_copyi (z3, B, ecc->p.size);
-}
-
-void
-ecc_add_eh_untwisted (const struct ecc_curve *ecc,
- mp_limb_t *r, const mp_limb_t *p, const mp_limb_t *q,
- mp_limb_t *scratch)
-{
-#define x1 p
-#define y1 (p + ecc->p.size)
-#define z1 (p + 2*ecc->p.size)
-
-#define x2 q
-#define y2 (q + ecc->p.size)
-
-#define x3 r
-#define y3 (r + ecc->p.size)
-#define z3 (r + 2*ecc->p.size)
-
- /* Formulas (from djb,
http://www.hyperelliptic.org/EFD/g1p/auto-edwards-projective.html#doubling-dbl-2007-bl):
Computation Operation Live variables