123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149 |
- /*
- * Copyright (C) 2016 Intel Corporation. All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- *
- * * Redistributions of source code must retain the above copyright
- * notice, this list of conditions and the following disclaimer.
- * * Redistributions in binary form must reproduce the above copyright
- * notice, this list of conditions and the following disclaimer in
- * the documentation and/or other materials provided with the
- * distribution.
- * * Neither the name of Intel Corporation nor the names of its
- * contributors may be used to endorse or promote products derived
- * from this software without specific prior written permission.
- *
- * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
- * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
- * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
- * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
- * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
- * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
- * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
- * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
- * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
- * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
- * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
- *
- */
- #include "owndefs.h"
- #include "owncp.h"
- #include "pcpeccp.h"
- #include "pcpeccppoint.h"
- #include "pcpeccpmethod.h"
- #include "pcpeccpmethodcom.h"
- /*F*
- // Name: ippsECCPSignDSA
- //
- // Purpose: Signing of message representative.
- // (DSA version).
- //
- // Returns: Reason:
- // ippStsNullPtrErr NULL == pECC
- // NULL == pMsgDigest
- // NULL == pPrivate
- // NULL == pSignX
- // NULL == pSignY
- //
- // ippStsContextMatchErr illegal pECC->idCtx
- // illegal pMsgDigest->idCtx
- // illegal pPrivate->idCtx
- // illegal pSignX->idCtx
- // illegal pSignY->idCtx
- //
- // ippStsMessageErr MsgDigest >= order
- //
- // ippStsRangeErr not enough room for:
- // signX
- // signY
- //
- // ippStsEphemeralKeyErr (0==signX) || (0==signY)
- //
- // ippStsNoErr no errors
- //
- // Parameters:
- // pMsgDigest pointer to the message representative to be signed
- // pPrivate pointer to the regular private key
- // pSignX,pSignY pointer to the signature
- // pECC pointer to the ECCP context
- //
- // Note:
- // - ephemeral key pair extracted from pECC and
- // must be generated and before ippsECCPDSASign() usage
- // - ephemeral key pair destroy before exit
- //
- *F*/
- IPPFUN(IppStatus, ippsECCPSignDSA,(const IppsBigNumState* pMsgDigest,
- const IppsBigNumState* pPrivate,
- IppsBigNumState* pSignX, IppsBigNumState* pSignY,
- IppsECCPState* pECC))
- {
- /* test pECC */
- IPP_BAD_PTR1_RET(pECC);
- /* use aligned EC context */
- pECC = (IppsECCPState*)( IPP_ALIGNED_PTR(pECC, ALIGN_VAL) );
- IPP_BADARG_RET(!ECP_VALID_ID(pECC), ippStsContextMatchErr);
- /* test private key*/
- IPP_BAD_PTR1_RET(pPrivate);
- pPrivate = (IppsBigNumState*)( IPP_ALIGNED_PTR(pPrivate, ALIGN_VAL) );
- IPP_BADARG_RET(!BN_VALID_ID(pPrivate), ippStsContextMatchErr);
- /* test message representative */
- IPP_BAD_PTR1_RET(pMsgDigest);
- pMsgDigest = (IppsBigNumState*)( IPP_ALIGNED_PTR(pMsgDigest, ALIGN_VAL) );
- IPP_BADARG_RET(!BN_VALID_ID(pMsgDigest), ippStsContextMatchErr);
- IPP_BADARG_RET((0<=cpBN_cmp(pMsgDigest, ECP_ORDER(pECC))), ippStsMessageErr);
- /* test signature */
- IPP_BAD_PTR2_RET(pSignX,pSignY);
- pSignX = (IppsBigNumState*)( IPP_ALIGNED_PTR(pSignX, ALIGN_VAL) );
- pSignY = (IppsBigNumState*)( IPP_ALIGNED_PTR(pSignY, ALIGN_VAL) );
- IPP_BADARG_RET(!BN_VALID_ID(pSignX), ippStsContextMatchErr);
- IPP_BADARG_RET(!BN_VALID_ID(pSignY), ippStsContextMatchErr);
- IPP_BADARG_RET((BN_ROOM(pSignX)*BITSIZE(BNU_CHUNK_T)<ECP_ORDBITS(pECC)), ippStsRangeErr);
- IPP_BADARG_RET((BN_ROOM(pSignY)*BITSIZE(BNU_CHUNK_T)<ECP_ORDBITS(pECC)), ippStsRangeErr);
- {
- IppsMontState* rMont = ECP_RMONT(pECC);
- IppsBigNumState* pOrder = ECP_ORDER(pECC);
- BigNumNode* pList = ECP_BNCTX(pECC);
- IppsBigNumState* pTmp = cpBigNumListGet(&pList);
- /* extract ephemeral public key (X component only) */
- ECP_METHOD(pECC)->GetPointAffine(pTmp, NULL, ECP_PUBLIC_E(pECC), pECC, pList);
- /*
- // compute
- // signX = eph_pub_x (mod order)
- */
- PMA_mod(pSignX, pTmp, pOrder);
- if( !IsZero_BN(pSignX) ) {
- IppsBigNumState* pEncMsg = cpBigNumListGet(&pList);
- IppsBigNumState* pEncSignX = cpBigNumListGet(&pList);
- PMA_enc(pEncMsg, (IppsBigNumState*)pMsgDigest, rMont);
- PMA_enc(pEncSignX, pSignX, rMont);
- /*
- // compute
- // signY = (1/eph_private)*(pMsgDigest + private*signX) (mod order)
- */
- PMA_inv(pSignY, ECP_PRIVATE_E(pECC), pOrder);
- PMA_enc(ECP_PRIVATE_E(pECC), pPrivate, rMont);
- PMA_mule(pTmp, ECP_PRIVATE_E(pECC), pEncSignX, rMont);
- PMA_add(pTmp, pTmp, pEncMsg, pOrder);
- PMA_mule(pSignY, pSignY, pTmp, rMont);
- if( !IsZero_BN(pSignY) )
- return ippStsNoErr;
- }
- return ippStsEphemeralKeyErr;
- }
- }
|