diff options
author | Niels Möller <nisse@lysator.liu.se> | 2019-12-17 22:59:57 +0100 |
---|---|---|
committer | Niels Möller <nisse@lysator.liu.se> | 2019-12-18 08:18:04 +0100 |
commit | 923cc6ae98fc1da9cbd98ba8f8fcaf5240967221 (patch) | |
tree | 692c7a9bcec73798398911c623813d184d840e56 /ecc-add-eh.c | |
parent | 6d455c6d3c6a7011fb51f38bb9423a7aff34f00b (diff) | |
download | nettle-923cc6ae98fc1da9cbd98ba8f8fcaf5240967221.tar.gz |
Rename add and dup functions for Edwards curves.
Diffstat (limited to 'ecc-add-eh.c')
-rw-r--r-- | ecc-add-eh.c | 74 |
1 files changed, 0 insertions, 74 deletions
diff --git a/ecc-add-eh.c b/ecc-add-eh.c index 85e06648..8e6b82ab 100644 --- a/ecc-add-eh.c +++ b/ecc-add-eh.c @@ -55,80 +55,6 @@ ecc_add_eh (const struct ecc_curve *ecc, #define z3 (r + 2*ecc->p.size) /* Formulas (from djb, - http://www.hyperelliptic.org/EFD/g1p/auto-twisted-projective.html#addition-madd-2008-bbjlp - - Computation Operation Live variables - - C = x1*x2 mul C - D = y1*y2 mul C, D - T = (x1+y1)*(x2+y2) mul C, D, T - - C - D - E = b*C*D 2 mul C, E, T (Replace C <-- D+C) - B = z1^2 sqr B, C, E, T - F = B - E B, C, E, F, T - G = B + E C, F, G, T - x3 = z1 * F * T 2 mul C, F, G, T - y3 = z1*G*(D+C) 2 mul F, G - z3 = F*G mul - - 10M + 1S - - We have different sign for E, hence swapping F and G, because our - ecc->b corresponds to -b above. - */ -#define C (scratch) -#define D (scratch + 1*ecc->p.size) -#define T (scratch + 2*ecc->p.size) -#define E (scratch + 3*ecc->p.size) -#define B (scratch + 4*ecc->p.size) -#define F D -#define G E - - ecc_modp_mul (ecc, C, x1, x2); - ecc_modp_mul (ecc, D, y1, y2); - ecc_modp_add (ecc, x3, x1, y1); - ecc_modp_add (ecc, y3, x2, y2); - ecc_modp_mul (ecc, T, x3, y3); - ecc_modp_sub (ecc, T, T, C); - ecc_modp_sub (ecc, T, T, D); - ecc_modp_mul (ecc, x3, C, D); - ecc_modp_mul (ecc, E, x3, ecc->b); - - ecc_modp_add (ecc, C, D, C); - ecc_modp_sqr (ecc, B, z1); - ecc_modp_sub (ecc, F, B, E); - ecc_modp_add (ecc, G, B, E); - - /* x3 */ - ecc_modp_mul (ecc, B, G, T); - ecc_modp_mul (ecc, x3, B, z1); - - /* y3 */ - ecc_modp_mul (ecc, B, F, z1); - ecc_modp_mul (ecc, y3, B, C); /* Clobbers z1 in case r == p. */ - - /* z3 */ - ecc_modp_mul (ecc, B, F, G); - mpn_copyi (z3, B, ecc->p.size); -} - -void -ecc_add_eh_untwisted (const struct ecc_curve *ecc, - mp_limb_t *r, const mp_limb_t *p, const mp_limb_t *q, - mp_limb_t *scratch) -{ -#define x1 p -#define y1 (p + ecc->p.size) -#define z1 (p + 2*ecc->p.size) - -#define x2 q -#define y2 (q + ecc->p.size) - -#define x3 r -#define y3 (r + ecc->p.size) -#define z3 (r + 2*ecc->p.size) - - /* Formulas (from djb, http://www.hyperelliptic.org/EFD/g1p/auto-edwards-projective.html#doubling-dbl-2007-bl): Computation Operation Live variables |