BGN2/bgn2/src/PrivateKey.cpp

#include "PrivateKey.hpp"

extern const curvepoint_fp_t bn_curvegen;

PrivateKey::PrivateKey(const Fp& a, const Fp& b, const Fp& c, const Fp& d, const Fp& e, const Fp& f, const Fp& g, const Fp& h)
{
    set(a, b, c, d, e, f, g, h);
}

void PrivateKey::set(const Fp& a, const Fp& b, const Fp& c, const Fp& d, const Fp& e, const Fp& f, const Fp& g, const Fp& h)
{
    i1 = a;
    j1 = b;
    k1 = c;
    l1 = d;

    i2 = e;
    j2 = f;
    k2 = g;
    l2 = h;
}

void PrivateKey::set(string which, const Fp& input);
{
    if (which.length() != 2)
        return;

    bool var_is_1 = false;
    switch (which[1])
    {
        case '1':
            var_is_1 = true;
            break;

        case '2':
            break;

        default:
            return;
    }

    switch (which[0])
    {
        case 'i':
            if (var_is_1)
                i1 = input;
            else i2 = input;
            break;

        case 'j':
            if (var_is_1)
                j1 = input;
            else j2 = input;
            break;

        case 'k':
            if (var_is_1)
                k1 = input;
            else k2 = input;
            break;

        case 'l':
            if (var_is_1)
                l1 = input;
            else l2 = input;
            break;

        default:
            break;
    } 
}

Fp PrivateKey::get(string which) const
{
    if (which.length() != 2)
        return Fp();

    bool var_is_1 = false;
    switch (which[1])
    {
        case '1':
            var_is_1 = true;
            break;

        case '2':
            break;

        default:
            return Fp();
    }

    switch (which[0])
    {
        case 'i':
            return var_is_1 ? i1 : i2;

        case 'j':
            return var_is_1 ? j1 : j2;

        case 'k':
            return var_is_1 ? k1 : k2;

        case 'l':
            return var_is_1 ? l1 : l2;

        default:
            return Fp();
    } 
}

Bipoint<curvepoint_fp_t> PrivateKey::pi_1(const Bipoint<curvepoint_fp_t>& input) const
{
    Bipoint<curvepoint_fp_t> retval;
    curvepoint_fp_t temp1, temp2;
    
    const scalar_t i1_s = i1.to_scalar();
    const scalar_t j1_s = j1.to_scalar();
    const scalar_t k1_s = k1.to_scalar();
    const scalar_t l1_s = l1.to_scalar();


    curvepoint_fp_scalarmult_vartime(temp1, input[0], j1_s);
    curvepoint_fp_scalarmult_vartime(temp1, temp1, k1_s);
    curvepoint_fp_neg(temp1, temp1);
    curvepoint_fp_makeaffine(temp1);

    curvepoint_fp_scalarmult_vartime(temp2, input[1], i1_s);
    curvepoint_fp_scalarmult_vartime(temp2, temp2, k1_s);
    curvepoint_fp_makeaffine(temp2);

    curvepoint_fp_add_vartime(temp1, temp1, temp2);
    curvepoint_fp_makeaffine(temp1);
    curvepoint_fp_set(retval[0], temp1);
    

    curvepoint_fp_scalarmult_vartime(temp1, input[0], j1_s);
    curvepoint_fp_scalarmult_vartime(temp1, temp1, l1_s);
    curvepoint_fp_neg(temp1, temp1);
    curvepoint_fp_makeaffine(temp1);
    
    curvepoint_fp_scalarmult_vartime(temp2, input[1], i1_s);
    curvepoint_fp_scalarmult_vartime(temp2, temp2, l1_s);
    curvepoint_fp_makeaffine(temp2);
    
    curvepoint_fp_add_vartime(temp1, temp1, temp2);
    curvepoint_fp_makeaffine(temp1);
    curvepoint_fp_set(retval[1], temp1); 


    return retval;
}

Bipoint<twistpoint_fp2_t> PrivateKey::pi_2(const Bipoint<twistpoint_fp2_t>& input) const
{
    Bipoint<twistpoint_fp2_t> retval;
    twistpoint_fp2_t temp1, temp2;

    const scalar_t i2_s = i2.to_scalar();
    const scalar_t j2_s = j2.to_scalar();
    const scalar_t k2_s = k2.to_scalar();
    const scalar_t l2_s = l2.to_scalar();
    

    twistpoint_fp2_scalarmult_vartime(temp1, input[0], j2_s);
    twistpoint_fp2_scalarmult_vartime(temp1, temp1, k2_s);
    twistpoint_fp2_neg(temp1,temp1);
    twistpoint_fp2_makeaffine(temp1);
    
    twistpoint_fp2_scalarmult_vartime(temp2, input[1], i2_s);
    twistpoint_fp2_scalarmult_vartime(temp2, temp2, k2_s);
    twistpoint_fp2_makeaffine(temp2);

    twistpoint_fp2_add_vartime(temp1, temp1, temp2);
    twistpoint_fp2_makeaffine(temp1);
    twistpoint_fp2_set(retval[0], temp1);
    

    twistpoint_fp2_scalarmult_vartime(temp1, input[0], j2_s);
    twistpoint_fp2_scalarmult_vartime(temp1, temp1, l2_s);
    twistpoint_fp2_neg(temp1, temp1);      
    twistpoint_fp2_makeaffine(temp1);
    
    twistpoint_fp2_scalarmult_vartime(temp2, input[1], i2_s);
    twistpoint_fp2_scalarmult_vartime(temp2, temp2, l2_s);
    twistpoint_fp2_makeaffine(temp2);

    twistpoint_fp2_add_vartime(temp1, temp1, temp2);
    twistpoint_fp2_makeaffine(temp1);
    twistpoint_fp2_set(retval[1], temp1);


    return retval;     
}

Quadripoint PrivateKey::pi_T(const Quadripoint& input) const
{
    Quadripoint retval;
    fp12e_t temp1, temp2, temp3, temp4;

    const scalar_t i1_s = i1.to_scalar();
    const scalar_t j1_s = j1.to_scalar();
    const scalar_t k1_s = k1.to_scalar();
    const scalar_t l1_s = l1.to_scalar();
    const scalar_t i2_s = i2.to_scalar();
    const scalar_t j2_s = j2.to_scalar();
    const scalar_t k2_s = k2.to_scalar();
    const scalar_t l2_s = l2.to_scalar();


    fp12e_pow_vartime(temp1, input[0], j1_s);
    fp12e_pow_vartime(temp1, temp1, k1_s);
    fp12e_pow_vartime(temp1, temp1, j2_s); 
    fp12e_pow_vartime(temp1, temp1, k2_s);
    
    fp12e_invert(temp2, input[1]);
    fp12e_pow_vartime(temp2, temp2, j1_s);
    fp12e_pow_vartime(temp2, temp2, k1_s);
    fp12e_pow_vartime(temp2, temp2, i2_s);
    fp12e_pow_vartime(temp2, temp2, k2_s);

    fp12e_invert(temp3, input[2]);
    fp12e_pow_vartime(temp3, temp3, i1_s);
    fp12e_pow_vartime(temp3, temp3, k1_s);
    fp12e_pow_vartime(temp3, temp3, j2_s);
    fp12e_pow_vartime(temp3, temp3, k2_s);

    fp12e_pow_vartime(temp4, input[3], i1_s);
    fp12e_pow_vartime(temp4, temp4, k1_s);
    fp12e_pow_vartime(temp4, temp4, i2_s);
    fp12e_pow_vartime(temp4, temp4, k2_s);

    fp12e_mul(temp1, temp1, temp2);
    fp12e_mul(temp2, temp3, temp4);
    fp12e_mul(temp1, temp1, temp2);
    retval.set(temp1, 0);


    fp12e_pow_vartime(temp1, input[0], j1_s);
    fp12e_pow_vartime(temp1, temp1, k1_s);
    fp12e_pow_vartime(temp1, temp1, j2_s);
    fp12e_pow_vartime(temp1, temp1, l2_s);

    fp12e_pow_vartime(temp2, input[1], j1_s);
    fp12e_invert(temp2, temp2);
    fp12e_pow_vartime(temp2, temp2, k1_s);
    fp12e_pow_vartime(temp2, temp2, i2_s);
    fp12e_pow_vartime(temp2, temp2, l2_s);

    fp12e_pow_vartime(temp3, input[2], i1_s);
    fp12e_pow_vartime(temp3, temp3, k1_s);
    fp12e_pow_vartime(temp3, temp3, j2_s);
    fp12e_invert(temp3, temp3);
    fp12e_pow_vartime(temp3, temp3, l2_s);

    fp12e_pow_vartime(temp4, input[3], i1_s);
    fp12e_pow_vartime(temp4, temp4, k1_s);
    fp12e_pow_vartime(temp4, temp4, i2_s);
    fp12e_pow_vartime(temp4, temp4, l2_s);

    fp12e_mul(temp1, temp1, temp2);
    fp12e_mul(temp2, temp3, temp4);
    fp12e_mul(temp1, temp1, temp2);
    retval.set(temp1, 1);
    

    fp12e_pow_vartime(temp1, input[0], j1_s);
    fp12e_pow_vartime(temp1, temp1, l1_s);
    fp12e_pow_vartime(temp1, temp1, j2_s);
    fp12e_pow_vartime(temp1, temp1, k2_s);

    fp12e_pow_vartime(temp2, input[1], j1_s);
    fp12e_invert(temp2, temp2);
    fp12e_pow_vartime(temp2, temp2, l1_s);
    fp12e_pow_vartime(temp2, temp2, i2_s);
    fp12e_pow_vartime(temp2, temp2, k2_s);

    fp12e_pow_vartime(temp3, input[2], i1_s);
    fp12e_pow_vartime(temp3, temp3, l1_s);
    fp12e_pow_vartime(temp3, temp3, j2_s);
    fp12e_invert(temp3, temp3);
    fp12e_pow_vartime(temp3, temp3, k2_s);

    fp12e_pow_vartime(temp4, input[3], i1_s);
    fp12e_pow_vartime(temp4, temp4, l1_s);
    fp12e_pow_vartime(temp4, temp4, i2_s);
    fp12e_pow_vartime(temp4, temp4, k2_s);
    
    fp12e_mul(temp1, temp1, temp2);
    fp12e_mul(temp2, temp3, temp4);
    fp12e_mul(temp1, temp1, temp2);
    retval.set(temp1, 2);
    

    fp12e_pow_vartime(temp1, input[0], j1_s);
    fp12e_pow_vartime(temp1, temp1, l1_s);
    fp12e_pow_vartime(temp1, temp1, j2_s);
    fp12e_pow_vartime(temp1, temp1, l2_s);

    fp12e_pow_vartime(temp2, input[1], j1_s);
    fp12e_invert(temp2, temp2);
    fp12e_pow_vartime(temp2, temp2, l1_s);
    fp12e_pow_vartime(temp2, temp2, i2_s);
    fp12e_pow_vartime(temp2, temp2, l2_s);

    fp12e_pow_vartime(temp3, input[2], i1_s);
    fp12e_pow_vartime(temp3, temp3, l1_s);
    fp12e_pow_vartime(temp3, temp3, j2_s);
    fp12e_invert(temp3, temp3);
    fp12e_pow_vartime(temp3, temp3, l2_s);

    fp12e_pow_vartime(temp4, input[3], i1_s);
    fp12e_pow_vartime(temp4, temp4, l1_s);
    fp12e_pow_vartime(temp4, temp4, i2_s);
    fp12e_pow_vartime(temp4, temp4, l2_s);

    fp12e_mul(temp1, temp1, temp2);
    fp12e_mul(temp2, temp3, temp4);
    fp12e_mul(temp1, temp1, temp2);
    retval.set(temp1, 3);
    

    return retval;
}