Lines Matching refs:tmp
41 struct sae_temporary_data *tmp; in sae_set_group() local
49 tmp = sae->tmp = os_zalloc(sizeof(*tmp)); in sae_set_group()
50 if (tmp == NULL) in sae_set_group()
54 tmp->ec = crypto_ec_init(group); in sae_set_group()
55 if (tmp->ec) { in sae_set_group()
59 tmp->prime_len = crypto_ec_prime_len(tmp->ec); in sae_set_group()
60 tmp->prime = crypto_ec_get_prime(tmp->ec); in sae_set_group()
61 tmp->order = crypto_ec_get_order(tmp->ec); in sae_set_group()
66 tmp->dh = dh_groups_get(group); in sae_set_group()
67 if (tmp->dh) { in sae_set_group()
71 tmp->prime_len = tmp->dh->prime_len; in sae_set_group()
72 if (tmp->prime_len > SAE_MAX_PRIME_LEN) { in sae_set_group()
77 tmp->prime_buf = crypto_bignum_init_set(tmp->dh->prime, in sae_set_group()
78 tmp->prime_len); in sae_set_group()
79 if (tmp->prime_buf == NULL) { in sae_set_group()
83 tmp->prime = tmp->prime_buf; in sae_set_group()
85 tmp->order_buf = crypto_bignum_init_set(tmp->dh->order, in sae_set_group()
86 tmp->dh->order_len); in sae_set_group()
87 if (tmp->order_buf == NULL) { in sae_set_group()
91 tmp->order = tmp->order_buf; in sae_set_group()
105 struct sae_temporary_data *tmp; in sae_clear_temp_data() local
106 if (sae == NULL || sae->tmp == NULL) in sae_clear_temp_data()
108 tmp = sae->tmp; in sae_clear_temp_data()
109 crypto_ec_deinit(tmp->ec); in sae_clear_temp_data()
110 crypto_bignum_deinit(tmp->prime_buf, 0); in sae_clear_temp_data()
111 crypto_bignum_deinit(tmp->order_buf, 0); in sae_clear_temp_data()
112 crypto_bignum_deinit(tmp->sae_rand, 1); in sae_clear_temp_data()
113 crypto_bignum_deinit(tmp->pwe_ffc, 1); in sae_clear_temp_data()
114 crypto_bignum_deinit(tmp->own_commit_scalar, 0); in sae_clear_temp_data()
115 crypto_bignum_deinit(tmp->own_commit_element_ffc, 0); in sae_clear_temp_data()
116 crypto_bignum_deinit(tmp->peer_commit_element_ffc, 0); in sae_clear_temp_data()
117 crypto_ec_point_deinit(tmp->pwe_ecc, 1); in sae_clear_temp_data()
118 crypto_ec_point_deinit(tmp->own_commit_element_ecc, 0); in sae_clear_temp_data()
119 crypto_ec_point_deinit(tmp->peer_commit_element_ecc, 0); in sae_clear_temp_data()
120 wpabuf_free(tmp->anti_clogging_token); in sae_clear_temp_data()
121 os_free(tmp->pw_id); in sae_clear_temp_data()
122 bin_clear_free(tmp, sizeof(*tmp)); in sae_clear_temp_data()
123 sae->tmp = NULL; in sae_clear_temp_data()
151 int order_len_bits = crypto_bignum_bits(sae->tmp->order); in sae_get_rand()
167 crypto_bignum_cmp(bn, sae->tmp->order) >= 0) { in sae_get_rand()
181 crypto_bignum_deinit(sae->tmp->sae_rand, 1); in sae_get_rand_and_mask()
182 sae->tmp->sae_rand = sae_get_rand(sae); in sae_get_rand_and_mask()
183 if (sae->tmp->sae_rand == NULL) in sae_get_rand_and_mask()
209 u8 tmp[SAE_MAX_ECC_PRIME_LEN]; in get_rand_1_to_p_1() local
211 if (random_get_bytes(tmp, prime_len) < 0) in get_rand_1_to_p_1()
214 buf_shift_right(tmp, prime_len, 8 - prime_bits % 8); in get_rand_1_to_p_1()
215 if (os_memcmp(tmp, prime, prime_len) >= 0) in get_rand_1_to_p_1()
217 r = crypto_bignum_init_set(tmp, prime_len); in get_rand_1_to_p_1()
225 *r_odd = tmp[prime_len - 1] & 0x01; in get_rand_1_to_p_1()
241 size_t prime_len = sae->tmp->prime_len; in is_quadratic_residue_blind()
259 crypto_bignum_mulmod(y_sqr, r, sae->tmp->prime, num) < 0 || in is_quadratic_residue_blind()
260 crypto_bignum_mulmod(num, r, sae->tmp->prime, num) < 0) in is_quadratic_residue_blind()
278 crypto_bignum_mulmod(num, qr_or_qnr, sae->tmp->prime, num) < 0) in is_quadratic_residue_blind()
283 res = crypto_bignum_legendre(num, sae->tmp->prime); in is_quadratic_residue_blind()
311 bits = crypto_ec_prime_len_bits(sae->tmp->ec); in sae_test_pwd_seed_ecc()
313 prime, sae->tmp->prime_len, pwd_value, bits) < 0) in sae_test_pwd_seed_ecc()
316 buf_shift_right(pwd_value, sae->tmp->prime_len, 8 - bits % 8); in sae_test_pwd_seed_ecc()
318 pwd_value, sae->tmp->prime_len); in sae_test_pwd_seed_ecc()
320 if (const_time_memcmp(pwd_value, prime, sae->tmp->prime_len) >= 0) in sae_test_pwd_seed_ecc()
323 x_cand = crypto_bignum_init_set(pwd_value, sae->tmp->prime_len); in sae_test_pwd_seed_ecc()
326 y_sqr = crypto_ec_point_compute_y_sqr(sae->tmp->ec, x_cand); in sae_test_pwd_seed_ecc()
343 size_t bits = sae->tmp->prime_len * 8; in sae_test_pwd_seed_ffc()
353 sae->tmp->dh->prime, sae->tmp->prime_len, pwd_value, in sae_test_pwd_seed_ffc()
357 sae->tmp->prime_len); in sae_test_pwd_seed_ffc()
360 res = const_time_memcmp(pwd_value, sae->tmp->dh->prime, in sae_test_pwd_seed_ffc()
361 sae->tmp->prime_len); in sae_test_pwd_seed_ffc()
375 a = crypto_bignum_init_set(pwd_value, sae->tmp->prime_len); in sae_test_pwd_seed_ffc()
382 if (sae->tmp->dh->safe_prime) { in sae_test_pwd_seed_ffc()
394 crypto_bignum_sub(sae->tmp->prime, b, b) < 0 || in sae_test_pwd_seed_ffc()
395 crypto_bignum_div(b, sae->tmp->order, b) < 0) in sae_test_pwd_seed_ffc()
402 res = crypto_bignum_exptmod(a, b, sae->tmp->prime, pwe); in sae_test_pwd_seed_ffc()
435 u8 tmp[SAE_MAX_ECC_PRIME_LEN]; in get_random_qr_qnr() local
439 if (random_get_bytes(tmp, prime_len) < 0) in get_random_qr_qnr()
442 buf_shift_right(tmp, prime_len, 8 - prime_bits % 8); in get_random_qr_qnr()
443 if (os_memcmp(tmp, prime, prime_len) >= 0) in get_random_qr_qnr()
445 q = crypto_bignum_init_set(tmp, prime_len); in get_random_qr_qnr()
493 prime_len = sae->tmp->prime_len; in sae_derive_pwe_ecc()
494 if (crypto_bignum_to_bin(sae->tmp->prime, prime, sizeof(prime), in sae_derive_pwe_ecc()
497 bits = crypto_ec_prime_len_bits(sae->tmp->ec); in sae_derive_pwe_ecc()
503 if (get_random_qr_qnr(prime, prime_len, sae->tmp->prime, bits, in sae_derive_pwe_ecc()
592 if (!sae->tmp->pwe_ecc) in sae_derive_pwe_ecc()
593 sae->tmp->pwe_ecc = crypto_ec_point_init(sae->tmp->ec); in sae_derive_pwe_ecc()
594 if (!sae->tmp->pwe_ecc) in sae_derive_pwe_ecc()
597 res = crypto_ec_point_solve_y_coord(sae->tmp->ec, in sae_derive_pwe_ecc()
598 sae->tmp->pwe_ecc, x, in sae_derive_pwe_ecc()
641 size_t prime_len = sae->tmp->prime_len * 8; in sae_derive_pwe_ffc()
644 crypto_bignum_deinit(sae->tmp->pwe_ffc, 1); in sae_derive_pwe_ffc()
645 sae->tmp->pwe_ffc = NULL; in sae_derive_pwe_ffc()
714 sae->tmp->pwe_ffc = crypto_bignum_init_set(pwe_buf, prime_len); in sae_derive_pwe_ffc()
718 return sae->tmp->pwe_ffc ? 0 : -1; in sae_derive_pwe_ffc()
726 if (!sae->tmp->own_commit_element_ecc) { in sae_derive_commit_element_ecc()
727 sae->tmp->own_commit_element_ecc = in sae_derive_commit_element_ecc()
728 crypto_ec_point_init(sae->tmp->ec); in sae_derive_commit_element_ecc()
729 if (!sae->tmp->own_commit_element_ecc) in sae_derive_commit_element_ecc()
733 if (crypto_ec_point_mul(sae->tmp->ec, sae->tmp->pwe_ecc, mask, in sae_derive_commit_element_ecc()
734 sae->tmp->own_commit_element_ecc) < 0 || in sae_derive_commit_element_ecc()
735 crypto_ec_point_invert(sae->tmp->ec, in sae_derive_commit_element_ecc()
736 sae->tmp->own_commit_element_ecc) < 0) { in sae_derive_commit_element_ecc()
749 if (!sae->tmp->own_commit_element_ffc) { in sae_derive_commit_element_ffc()
750 sae->tmp->own_commit_element_ffc = crypto_bignum_init(); in sae_derive_commit_element_ffc()
751 if (!sae->tmp->own_commit_element_ffc) in sae_derive_commit_element_ffc()
755 if (crypto_bignum_exptmod(sae->tmp->pwe_ffc, mask, sae->tmp->prime, in sae_derive_commit_element_ffc()
756 sae->tmp->own_commit_element_ffc) < 0 || in sae_derive_commit_element_ffc()
757 crypto_bignum_inverse(sae->tmp->own_commit_element_ffc, in sae_derive_commit_element_ffc()
758 sae->tmp->prime, in sae_derive_commit_element_ffc()
759 sae->tmp->own_commit_element_ffc) < 0) { in sae_derive_commit_element_ffc()
793 if (!sae->tmp->own_commit_scalar) { in sae_derive_commit()
794 sae->tmp->own_commit_scalar = crypto_bignum_init(); in sae_derive_commit()
795 if (!sae->tmp->own_commit_scalar) in sae_derive_commit()
798 crypto_bignum_add(sae->tmp->sae_rand, mask, in sae_derive_commit()
799 sae->tmp->own_commit_scalar); in sae_derive_commit()
800 crypto_bignum_mod(sae->tmp->own_commit_scalar, sae->tmp->order, in sae_derive_commit()
801 sae->tmp->own_commit_scalar); in sae_derive_commit()
802 } while (crypto_bignum_is_zero(sae->tmp->own_commit_scalar) || in sae_derive_commit()
803 crypto_bignum_is_one(sae->tmp->own_commit_scalar)); in sae_derive_commit()
805 if ((sae->tmp->ec && sae_derive_commit_element_ecc(sae, mask) < 0) || in sae_derive_commit()
806 (sae->tmp->dh && sae_derive_commit_element_ffc(sae, mask) < 0)) in sae_derive_commit()
820 if (sae->tmp == NULL || in sae_prepare_commit()
821 (sae->tmp->ec && sae_derive_pwe_ecc(sae, addr1, addr2, password, in sae_prepare_commit()
824 (sae->tmp->dh && sae_derive_pwe_ffc(sae, addr1, addr2, password, in sae_prepare_commit()
838 K = crypto_ec_point_init(sae->tmp->ec); in sae_derive_k_ecc()
849 if (crypto_ec_point_mul(sae->tmp->ec, sae->tmp->pwe_ecc, in sae_derive_k_ecc()
851 crypto_ec_point_add(sae->tmp->ec, K, in sae_derive_k_ecc()
852 sae->tmp->peer_commit_element_ecc, K) < 0 || in sae_derive_k_ecc()
853 crypto_ec_point_mul(sae->tmp->ec, K, sae->tmp->sae_rand, K) < 0 || in sae_derive_k_ecc()
854 crypto_ec_point_is_at_infinity(sae->tmp->ec, K) || in sae_derive_k_ecc()
855 crypto_ec_point_to_bin(sae->tmp->ec, K, k, NULL) < 0) { in sae_derive_k_ecc()
860 wpa_hexdump_key(MSG_DEBUG, "SAE: k", k, sae->tmp->prime_len); in sae_derive_k_ecc()
885 if (crypto_bignum_exptmod(sae->tmp->pwe_ffc, sae->peer_commit_scalar, in sae_derive_k_ffc()
886 sae->tmp->prime, K) < 0 || in sae_derive_k_ffc()
887 crypto_bignum_mulmod(K, sae->tmp->peer_commit_element_ffc, in sae_derive_k_ffc()
888 sae->tmp->prime, K) < 0 || in sae_derive_k_ffc()
889 crypto_bignum_exptmod(K, sae->tmp->sae_rand, sae->tmp->prime, K) < 0 in sae_derive_k_ffc()
892 crypto_bignum_to_bin(K, k, SAE_MAX_PRIME_LEN, sae->tmp->prime_len) < in sae_derive_k_ffc()
898 wpa_hexdump_key(MSG_DEBUG, "SAE: k", k, sae->tmp->prime_len); in sae_derive_k_ffc()
912 struct crypto_bignum *tmp; in sae_derive_keys() local
915 tmp = crypto_bignum_init(); in sae_derive_keys()
916 if (tmp == NULL) in sae_derive_keys()
926 hmac_sha256(null_key, sizeof(null_key), k, sae->tmp->prime_len, in sae_derive_keys()
930 crypto_bignum_add(sae->tmp->own_commit_scalar, sae->peer_commit_scalar, in sae_derive_keys()
931 tmp); in sae_derive_keys()
932 crypto_bignum_mod(tmp, sae->tmp->order, tmp); in sae_derive_keys()
933 crypto_bignum_to_bin(tmp, val, sizeof(val), sae->tmp->prime_len); in sae_derive_keys()
936 val, sae->tmp->prime_len, keys, sizeof(keys)) < 0) in sae_derive_keys()
939 os_memcpy(sae->tmp->kck, keys, SAE_KCK_LEN); in sae_derive_keys()
943 wpa_hexdump_key(MSG_DEBUG, "SAE: KCK", sae->tmp->kck, SAE_KCK_LEN); in sae_derive_keys()
948 crypto_bignum_deinit(tmp, 0); in sae_derive_keys()
956 if (sae->tmp == NULL || in sae_process_commit()
957 (sae->tmp->ec && sae_derive_k_ecc(sae, k) < 0) || in sae_process_commit()
958 (sae->tmp->dh && sae_derive_k_ffc(sae, k) < 0) || in sae_process_commit()
970 if (sae->tmp == NULL) in sae_write_commit()
979 pos = wpabuf_put(buf, sae->tmp->prime_len); in sae_write_commit()
980 crypto_bignum_to_bin(sae->tmp->own_commit_scalar, pos, in sae_write_commit()
981 sae->tmp->prime_len, sae->tmp->prime_len); in sae_write_commit()
983 pos, sae->tmp->prime_len); in sae_write_commit()
984 if (sae->tmp->ec) { in sae_write_commit()
985 pos = wpabuf_put(buf, 2 * sae->tmp->prime_len); in sae_write_commit()
986 crypto_ec_point_to_bin(sae->tmp->ec, in sae_write_commit()
987 sae->tmp->own_commit_element_ecc, in sae_write_commit()
988 pos, pos + sae->tmp->prime_len); in sae_write_commit()
990 pos, sae->tmp->prime_len); in sae_write_commit()
992 pos + sae->tmp->prime_len, sae->tmp->prime_len); in sae_write_commit()
994 pos = wpabuf_put(buf, sae->tmp->prime_len); in sae_write_commit()
995 crypto_bignum_to_bin(sae->tmp->own_commit_element_ffc, pos, in sae_write_commit()
996 sae->tmp->prime_len, sae->tmp->prime_len); in sae_write_commit()
998 pos, sae->tmp->prime_len); in sae_write_commit()
1040 if (sae->tmp == NULL) { in sae_group_allowed()
1045 if (sae->tmp->dh && !allowed_groups) { in sae_group_allowed()
1077 scalar_elem_len = (sae->tmp->ec ? 3 : 2) * sae->tmp->prime_len; in sae_parse_commit_token()
1127 if (sae->tmp->prime_len > end - *pos) { in sae_parse_commit_scalar()
1132 peer_scalar = crypto_bignum_init_set(*pos, sae->tmp->prime_len); in sae_parse_commit_scalar()
1153 crypto_bignum_cmp(peer_scalar, sae->tmp->order) >= 0) { in sae_parse_commit_scalar()
1163 *pos, sae->tmp->prime_len); in sae_parse_commit_scalar()
1164 *pos += sae->tmp->prime_len; in sae_parse_commit_scalar()
1175 if (2 * sae->tmp->prime_len > end - *pos) { in sae_parse_commit_element_ecc()
1181 if (crypto_bignum_to_bin(sae->tmp->prime, prime, sizeof(prime), in sae_parse_commit_element_ecc()
1182 sae->tmp->prime_len) < 0) in sae_parse_commit_element_ecc()
1186 if (os_memcmp(*pos, prime, sae->tmp->prime_len) >= 0 || in sae_parse_commit_element_ecc()
1187 os_memcmp(*pos + sae->tmp->prime_len, prime, in sae_parse_commit_element_ecc()
1188 sae->tmp->prime_len) >= 0) { in sae_parse_commit_element_ecc()
1195 *pos, sae->tmp->prime_len); in sae_parse_commit_element_ecc()
1197 *pos + sae->tmp->prime_len, sae->tmp->prime_len); in sae_parse_commit_element_ecc()
1199 crypto_ec_point_deinit(sae->tmp->peer_commit_element_ecc, 0); in sae_parse_commit_element_ecc()
1200 sae->tmp->peer_commit_element_ecc = in sae_parse_commit_element_ecc()
1201 crypto_ec_point_from_bin(sae->tmp->ec, *pos); in sae_parse_commit_element_ecc()
1202 if (sae->tmp->peer_commit_element_ecc == NULL) in sae_parse_commit_element_ecc()
1205 if (!crypto_ec_point_is_on_curve(sae->tmp->ec, in sae_parse_commit_element_ecc()
1206 sae->tmp->peer_commit_element_ecc)) { in sae_parse_commit_element_ecc()
1211 *pos += 2 * sae->tmp->prime_len; in sae_parse_commit_element_ecc()
1223 if (sae->tmp->prime_len > end - *pos) { in sae_parse_commit_element_ffc()
1229 sae->tmp->prime_len); in sae_parse_commit_element_ffc()
1231 crypto_bignum_deinit(sae->tmp->peer_commit_element_ffc, 0); in sae_parse_commit_element_ffc()
1232 sae->tmp->peer_commit_element_ffc = in sae_parse_commit_element_ffc()
1233 crypto_bignum_init_set(*pos, sae->tmp->prime_len); in sae_parse_commit_element_ffc()
1234 if (sae->tmp->peer_commit_element_ffc == NULL) in sae_parse_commit_element_ffc()
1240 crypto_bignum_sub(sae->tmp->prime, one, res) || in sae_parse_commit_element_ffc()
1241 crypto_bignum_is_zero(sae->tmp->peer_commit_element_ffc) || in sae_parse_commit_element_ffc()
1242 crypto_bignum_is_one(sae->tmp->peer_commit_element_ffc) || in sae_parse_commit_element_ffc()
1243 crypto_bignum_cmp(sae->tmp->peer_commit_element_ffc, res) >= 0) { in sae_parse_commit_element_ffc()
1252 if (crypto_bignum_exptmod(sae->tmp->peer_commit_element_ffc, in sae_parse_commit_element_ffc()
1253 sae->tmp->order, sae->tmp->prime, res) < 0 || in sae_parse_commit_element_ffc()
1261 *pos += sae->tmp->prime_len; in sae_parse_commit_element_ffc()
1270 if (sae->tmp->dh) in sae_parse_commit_element()
1282 if (sae->tmp->pw_id) { in sae_parse_password_identifier()
1285 sae->tmp->pw_id); in sae_parse_password_identifier()
1288 os_free(sae->tmp->pw_id); in sae_parse_password_identifier()
1289 sae->tmp->pw_id = NULL; in sae_parse_password_identifier()
1293 if (sae->tmp->pw_id && in sae_parse_password_identifier()
1294 (pos[1] - 1 != (int) os_strlen(sae->tmp->pw_id) || in sae_parse_password_identifier()
1295 os_memcmp(sae->tmp->pw_id, pos + 3, pos[1] - 1) != 0)) { in sae_parse_password_identifier()
1298 sae->tmp->pw_id); in sae_parse_password_identifier()
1302 os_free(sae->tmp->pw_id); in sae_parse_password_identifier()
1303 sae->tmp->pw_id = os_malloc(pos[1]); in sae_parse_password_identifier()
1304 if (!sae->tmp->pw_id) in sae_parse_password_identifier()
1306 os_memcpy(sae->tmp->pw_id, pos + 3, pos[1] - 1); in sae_parse_password_identifier()
1307 sae->tmp->pw_id[pos[1] - 1] = '\0'; in sae_parse_password_identifier()
1309 sae->tmp->pw_id, pos[1] - 1); in sae_parse_password_identifier()
1350 if (!sae->tmp->own_commit_scalar || in sae_parse_commit()
1351 crypto_bignum_cmp(sae->tmp->own_commit_scalar, in sae_parse_commit()
1353 (sae->tmp->dh && in sae_parse_commit()
1354 (!sae->tmp->own_commit_element_ffc || in sae_parse_commit()
1355 crypto_bignum_cmp(sae->tmp->own_commit_element_ffc, in sae_parse_commit()
1356 sae->tmp->peer_commit_element_ffc) != 0)) || in sae_parse_commit()
1357 (sae->tmp->ec && in sae_parse_commit()
1358 (!sae->tmp->own_commit_element_ecc || in sae_parse_commit()
1359 crypto_ec_point_cmp(sae->tmp->ec, in sae_parse_commit()
1360 sae->tmp->own_commit_element_ecc, in sae_parse_commit()
1361 sae->tmp->peer_commit_element_ecc) != 0))) in sae_parse_commit()
1395 sae->tmp->prime_len); in sae_cn_confirm()
1397 len[1] = sae->tmp->prime_len; in sae_cn_confirm()
1401 sae->tmp->prime_len); in sae_cn_confirm()
1403 len[3] = sae->tmp->prime_len; in sae_cn_confirm()
1406 hmac_sha256_vector(sae->tmp->kck, sizeof(sae->tmp->kck), 5, addr, len, in sae_cn_confirm()
1421 crypto_ec_point_to_bin(sae->tmp->ec, element1, element_b1, in sae_cn_confirm_ecc()
1422 element_b1 + sae->tmp->prime_len); in sae_cn_confirm_ecc()
1423 crypto_ec_point_to_bin(sae->tmp->ec, element2, element_b2, in sae_cn_confirm_ecc()
1424 element_b2 + sae->tmp->prime_len); in sae_cn_confirm_ecc()
1426 sae_cn_confirm(sae, sc, scalar1, element_b1, 2 * sae->tmp->prime_len, in sae_cn_confirm_ecc()
1427 scalar2, element_b2, 2 * sae->tmp->prime_len, confirm); in sae_cn_confirm_ecc()
1442 sae->tmp->prime_len); in sae_cn_confirm_ffc()
1444 sae->tmp->prime_len); in sae_cn_confirm_ffc()
1446 sae_cn_confirm(sae, sc, scalar1, element_b1, sae->tmp->prime_len, in sae_cn_confirm_ffc()
1447 scalar2, element_b2, sae->tmp->prime_len, confirm); in sae_cn_confirm_ffc()
1455 if (sae->tmp == NULL) in sae_write_confirm()
1464 if (sae->tmp->ec) in sae_write_confirm()
1465 sae_cn_confirm_ecc(sae, sc, sae->tmp->own_commit_scalar, in sae_write_confirm()
1466 sae->tmp->own_commit_element_ecc, in sae_write_confirm()
1468 sae->tmp->peer_commit_element_ecc, in sae_write_confirm()
1471 sae_cn_confirm_ffc(sae, sc, sae->tmp->own_commit_scalar, in sae_write_confirm()
1472 sae->tmp->own_commit_element_ffc, in sae_write_confirm()
1474 sae->tmp->peer_commit_element_ffc, in sae_write_confirm()
1490 if (!sae->tmp || !sae->peer_commit_scalar || in sae_check_confirm()
1491 !sae->tmp->own_commit_scalar) { in sae_check_confirm()
1496 if (sae->tmp->ec) { in sae_check_confirm()
1497 if (!sae->tmp->peer_commit_element_ecc || in sae_check_confirm()
1498 !sae->tmp->own_commit_element_ecc) in sae_check_confirm()
1501 sae->tmp->peer_commit_element_ecc, in sae_check_confirm()
1502 sae->tmp->own_commit_scalar, in sae_check_confirm()
1503 sae->tmp->own_commit_element_ecc, in sae_check_confirm()
1506 if (!sae->tmp->peer_commit_element_ffc || in sae_check_confirm()
1507 !sae->tmp->own_commit_element_ffc) in sae_check_confirm()
1510 sae->tmp->peer_commit_element_ffc, in sae_check_confirm()
1511 sae->tmp->own_commit_scalar, in sae_check_confirm()
1512 sae->tmp->own_commit_element_ffc, in sae_check_confirm()