diff options
author | Niels Möller <nisse@lysator.liu.se> | 2019-12-17 22:59:57 +0100 |
---|---|---|
committer | Niels Möller <nisse@lysator.liu.se> | 2019-12-18 08:18:04 +0100 |
commit | 923cc6ae98fc1da9cbd98ba8f8fcaf5240967221 (patch) | |
tree | 692c7a9bcec73798398911c623813d184d840e56 /ecc-add-ehh.c | |
parent | 6d455c6d3c6a7011fb51f38bb9423a7aff34f00b (diff) | |
download | nettle-923cc6ae98fc1da9cbd98ba8f8fcaf5240967221.tar.gz |
Rename add and dup functions for Edwards curves.
Diffstat (limited to 'ecc-add-ehh.c')
-rw-r--r-- | ecc-add-ehh.c | 78 |
1 files changed, 0 insertions, 78 deletions
diff --git a/ecc-add-ehh.c b/ecc-add-ehh.c index ee8f9cb0..bdd827ba 100644 --- a/ecc-add-ehh.c +++ b/ecc-add-ehh.c @@ -55,84 +55,6 @@ ecc_add_ehh (const struct ecc_curve *ecc, #define z3 (r + 2*ecc->p.size) /* Formulas (from djb, - http://www.hyperelliptic.org/EFD/g1p/auto-twisted-projective.html#addition-add-2008-bbjlp): - - Computation Operation Live variables - - C = x1*x2 mul C - D = y1*y2 mul C, D - T = (x1+y1)(x2+y2) - C - D, mul C, D, T - E = b*C*D 2 mul C, E, T (Replace C <-- D - C) - A = z1*z2 mul A, C, E, T - B = A^2 sqr A, B, C, E, T - F = B - E A, B, C, E, F, T - G = B + E A, C, F, G, T - x3 = A*F*T 2 mul A, C, G - y3 = A*G*(D+C) 2 mul F, G - z3 = F*G mul - - 11M + S - - We have different sign for E, hence swapping F and G, because our - ecc->b corresponds to -b above. - */ -#define C scratch -#define D (scratch + ecc->p.size) -#define T (scratch + 2*ecc->p.size) -#define E (scratch + 3*ecc->p.size) -#define A (scratch + 4*ecc->p.size) -#define B (scratch + 5*ecc->p.size) -#define F D -#define G E - - ecc_modp_mul (ecc, C, x1, x2); - ecc_modp_mul (ecc, D, y1, y2); - ecc_modp_add (ecc, A, x1, y1); - ecc_modp_add (ecc, B, x2, y2); - ecc_modp_mul (ecc, T, A, B); - ecc_modp_sub (ecc, T, T, C); - ecc_modp_sub (ecc, T, T, D); - ecc_modp_mul (ecc, x3, C, D); - ecc_modp_mul (ecc, E, x3, ecc->b); - ecc_modp_add (ecc, C, D, C); - - ecc_modp_mul (ecc, A, z1, z2); - ecc_modp_sqr (ecc, B, A); - - ecc_modp_sub (ecc, F, B, E); - ecc_modp_add (ecc, G, B, E); - - /* x3 */ - ecc_modp_mul (ecc, B, G, T); - ecc_modp_mul (ecc, x3, B, A); - - /* y3 */ - ecc_modp_mul (ecc, B, F, C); - ecc_modp_mul (ecc, y3, B, A); - - /* z3 */ - ecc_modp_mul (ecc, B, F, G); - mpn_copyi (z3, B, ecc->p.size); -} - -void -ecc_add_ehh_untwisted (const struct ecc_curve *ecc, - mp_limb_t *r, const mp_limb_t *p, const mp_limb_t *q, - mp_limb_t *scratch) -{ -#define x1 p -#define y1 (p + ecc->p.size) -#define z1 (p + 2*ecc->p.size) - -#define x2 q -#define y2 (q + ecc->p.size) -#define z2 (q + 2*ecc->p.size) - -#define x3 r -#define y3 (r + ecc->p.size) -#define z3 (r + 2*ecc->p.size) - - /* Formulas (from djb, http://www.hyperelliptic.org/EFD/g1p/auto-edwards-projective.html#addition-add-2007-bl): Computation Operation Live variables |