3 This file is part of the AVR-Crypto-Lib.
4 Copyright (C) 2006-2012 Daniel Otte (daniel.otte@rub.de)
6 This program is free software: you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation, either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
26 #include "random_dummy.h"
28 #include "hfal-basic.h"
31 #include "bigint_io.h"
34 uint8_t ecdsa_signature_alloc(ecdsa_signature_t *s, size_t length_B){
35 if(!(s->r.wordv = malloc(length_B))){
36 printf_P(PSTR("DBG: XXX <%S %s %d>\n"), PSTR(__FILE__), __func__, __LINE__);
39 if(!(s->s.wordv = malloc(length_B))){
40 printf_P(PSTR("DBG: XXX <%S %s %d>\n"), PSTR(__FILE__), __func__, __LINE__);
44 bigint_set_zero(&s->r);
45 bigint_set_zero(&s->s);
49 void ecdsa_signature_free(ecdsa_signature_t *s){
54 uint8_t ecdsa_sign_bigint(ecdsa_signature_t *s, const bigint_t *m,
55 const ecdsa_ctx_t *ctx, const bigint_t *k){
61 if(!(t.wordv = malloc(ctx->curve->p->length_W * 2 * sizeof(bigint_word_t)))){
62 printf_P(PSTR("DBG: XXX <%S %s %d>\n"), PSTR(__FILE__), __func__, __LINE__);
66 if(ecc_chudnovsky_point_alloc(&q.chudnovsky, ctx->curve->p->length_W * sizeof(bigint_word_t))){
68 printf_P(PSTR("item size: %u bytes\n"), ctx->curve->p->length_W * sizeof(bigint_word_t));
69 printf_P(PSTR("DBG: XXX <%S %s %d>\n"), PSTR(__FILE__), __func__, __LINE__);
73 ecc_chudnovsky_multiplication(&q.chudnovsky, k, ctx->basepoint, ctx->curve);
74 if(q.chudnovsky.x.length_W == 0){
75 printf_P(PSTR("DBG: XXX <%S %s %d>\n"), PSTR(__FILE__), __func__, __LINE__);
78 ecc_chudnovsky_to_affine_point(&q.affine, &q.chudnovsky, ctx->curve);
79 bigint_inverse(&s->s, k, ctx->curve->p);
81 printf_P(PSTR("x: "));
82 bigint_print_hex(&q.affine.x);
85 bigint_mul_u(&t, &q.affine.x, ctx->priv);
86 ctx->curve->reduce_p(&t);
88 printf_P(PSTR("msg: "));
91 printf_P(PSTR("k: "));
94 printf_P(PSTR("k-inv: "));
95 bigint_print_hex(&s->s);
97 printf_P(PSTR("t (1): "));
101 bigint_add_u(&t, &t, m);
102 ctx->curve->reduce_p(&t);
103 printf_P(PSTR("t (2): "));
104 bigint_print_hex(&t);
106 bigint_mul_u(&t, &t, &s->s);
107 ctx->curve->reduce_p(&t);
109 printf_P(PSTR("DBG: XXX <%S %s %d>\n"), PSTR(__FILE__), __func__, __LINE__);
112 bigint_copy(&s->r, &q.affine.x);
113 bigint_copy(&s->s, &t);
115 ecc_chudnovsky_point_free(&q.chudnovsky);
121 uint8_t ecdsa_sign_hash(ecdsa_signature_t *s, const void *hash,
122 size_t hash_len_B, const ecdsa_ctx_t *ctx,
123 const void *rand_in){
129 r_int.length_W = ctx->curve->p->length_W;
132 if(!(r_int.wordv = malloc(ctx->curve->p->length_W * sizeof(bigint_word_t)))){
136 r_int.wordv = (bigint_word_t*)rand_in;
138 bigint_adjust(&r_int);
141 m_int.length_W = ctx->curve->p->length_W;
142 m_int.wordv = malloc(m_int.length_W * sizeof(bigint_word_t));
143 if(m_int.wordv == NULL){
147 m_int.wordv[m_int.length_W - 1] = 0;
149 if(hash_len_B > m_int.length_W * sizeof(bigint_word_t)){
150 while(idx < m_int.length_W * sizeof(bigint_word_t)){
151 ((uint8_t*)m_int.wordv)[idx] = ((uint8_t*)hash)[m_int.length_W * sizeof(bigint_word_t) - idx - 1];
155 memset(m_int.wordv, 0, m_int.length_W * sizeof(bigint_word_t));
156 // idx += m_int.length_W * sizeof(bigint_word_t) - hash_len_B;
158 ((uint8_t*)m_int.wordv)[idx++] = ((uint8_t*)hash)[--hash_len_B];
161 bigint_adjust(&m_int);
166 i = ctx->curve->p->length_W * sizeof(bigint_word_t) - 1;
168 ((uint8_t*)r_int.wordv)[i] = prng_get_byte();
170 bigint_adjust(&r_int);
171 }while(bigint_cmp_u(&r_int, ctx->curve->p) >= 0);
173 }while((r = ecdsa_sign_bigint(s, &m_int, ctx, &r_int)) == 2 && (rand_in == NULL));
180 uint8_t ecdsa_sign_message(ecdsa_signature_t *s, const void *m, uint16_t m_len_b,
181 const hfdesc_t *hash_desc, const ecdsa_ctx_t *ctx,
182 const void *rand_in){
185 uint16_t hash_len = hfal_hash_getHashsize(hash_desc) / 8;
189 hash = malloc(hash_len);
193 hfal_hash_mem(hash_desc, hash, m, m_len_b);
194 ecdsa_sign_hash(s, hash, hash_len, ctx, rand_in);