1 /******************************************************************************* 2 * Copyright 2010-2018 Intel Corporation 3 * All Rights Reserved. 4 * 5 * If this software was obtained under the Intel Simplified Software License, 6 * the following terms apply: 7 * 8 * The source code, information and material ("Material") contained herein is 9 * owned by Intel Corporation or its suppliers or licensors, and title to such 10 * Material remains with Intel Corporation or its suppliers or licensors. The 11 * Material contains proprietary information of Intel or its suppliers and 12 * licensors. The Material is protected by worldwide copyright laws and treaty 13 * provisions. No part of the Material may be used, copied, reproduced, 14 * modified, published, uploaded, posted, transmitted, distributed or disclosed 15 * in any way without Intel's prior express written permission. No license under 16 * any patent, copyright or other intellectual property rights in the Material 17 * is granted to or conferred upon you, either expressly, by implication, 18 * inducement, estoppel or otherwise. Any license under such intellectual 19 * property rights must be express and approved by Intel in writing. 20 * 21 * Unless otherwise agreed by Intel in writing, you may not remove or alter this 22 * notice or any other notice embedded in Materials by Intel or Intel's 23 * suppliers or licensors in any way. 24 * 25 * 26 * If this software was obtained under the Apache License, Version 2.0 (the 27 * "License"), the following terms apply: 28 * 29 * You may not use this file except in compliance with the License. You may 30 * obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 31 * 32 * 33 * Unless required by applicable law or agreed to in writing, software 34 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT 35 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 36 * 37 * See the License for the specific language governing permissions and 38 * limitations under the License. 39 *******************************************************************************/ 40 41 /* 42 // Intel(R) Integrated Performance Primitives. Cryptography Primitives. 43 // EC over GF(p^m) definitinons 44 // 45 // Context: 46 // ippsGFpECSetSubgroup() 47 // 48 */ 49 50 #include "owndefs.h" 51 #include "owncp.h" 52 #include "pcpgfpecstuff.h" 53 #include "pcpeccp.h" 54 55 /*F* 56 // Name: ippsGFpECSetSubgroup 57 // 58 // Purpose: Sets up the parameters defining an elliptic curve points subgroup. 59 // 60 // Returns: Reason: 61 // ippStsNullPtrErr NULL == pEC 62 // NULL == pX 63 // NULL == pY 64 // NULL == pOrder 65 // NULL == pCofactor 66 // 67 // ippStsContextMatchErr invalid pEC->idCtx 68 // invalid pX->idCtx 69 // invalid pY->idCtx 70 // invalid pOrder->idCtx 71 // invalid pCofactor->idCtx 72 // 73 // ippStsBadArgErr pOrder <= 0 74 // pCofactor <= 0 75 // 76 // ippStsOutOfRangeErr GFPE_ROOM(pX)!=GFP_FELEN(pGFE) 77 // GFPE_ROOM(pY)!=GFP_FELEN(pGFE) 78 // 79 // ippStsRangeErr orderBitSize>maxOrderBits 80 // cofactorBitSize>elemLen*BITSIZE(BNU_CHUNK_T) 81 // 82 // ippStsNoErr no error 83 // 84 // Parameters: 85 // pX, pY Pointers to the X and Y coordinates of the base point of the elliptic curve 86 // pOrder Pointer to the big number context storing the order of the base point. 87 // pCofactor Pointer to the big number context storing the cofactor. 88 // pEC Pointer to the context of the elliptic curve. 89 // 90 *F*/ 91 92 IPPFUN(IppStatus, ippsGFpECSetSubgroup,(const IppsGFpElement* pX, const IppsGFpElement* pY, 93 const IppsBigNumState* pOrder, 94 const IppsBigNumState* pCofactor, 95 IppsGFpECState* pEC)) 96 { 97 IPP_BAD_PTR1_RET(pEC); 98 pEC = (IppsGFpECState*)( IPP_ALIGNED_PTR(pEC, ECGFP_ALIGNMENT) ); 99 IPP_BADARG_RET( !ECP_TEST_ID(pEC), ippStsContextMatchErr ); 100 101 IPP_BAD_PTR2_RET(pX, pY); 102 IPP_BADARG_RET( !GFPE_TEST_ID(pX), ippStsContextMatchErr ); 103 IPP_BADARG_RET( !GFPE_TEST_ID(pY), ippStsContextMatchErr ); 104 105 IPP_BAD_PTR2_RET(pOrder, pCofactor); 106 pOrder = (IppsBigNumState*)( IPP_ALIGNED_PTR(pOrder, BN_ALIGNMENT) ); 107 IPP_BADARG_RET(!BN_VALID_ID(pOrder), ippStsContextMatchErr); 108 IPP_BADARG_RET(BN_SIGN(pOrder)!= IppsBigNumPOS, ippStsBadArgErr); 109 110 pCofactor = (IppsBigNumState*)( IPP_ALIGNED_PTR(pCofactor, BN_ALIGNMENT) ); 111 IPP_BADARG_RET(!BN_VALID_ID(pCofactor), ippStsContextMatchErr); 112 IPP_BADARG_RET(BN_SIGN(pCofactor)!= IppsBigNumPOS, ippStsBadArgErr); 113 114 { 115 gsModEngine* pGFE = GFP_PMA(ECP_GFP(pEC)); 116 int elemLen = GFP_FELEN(pGFE); 117 118 IPP_BADARG_RET( GFPE_ROOM(pX)!=GFP_FELEN(pGFE), ippStsOutOfRangeErr); 119 IPP_BADARG_RET( GFPE_ROOM(pY)!=GFP_FELEN(pGFE), ippStsOutOfRangeErr); 120 121 gfec_SetPoint(ECP_G(pEC), GFPE_DATA(pX), GFPE_DATA(pY), pEC); 122 123 { 124 int maxOrderBits = 1+ cpGFpBasicDegreeExtension(pGFE) * GFP_FEBITLEN(cpGFpBasic(pGFE)); 125 BNU_CHUNK_T* pOrderData = BN_NUMBER(pOrder); 126 int orderLen= BN_SIZE(pOrder); 127 int orderBitSize = BITSIZE_BNU(pOrderData, orderLen); 128 IPP_BADARG_RET(orderBitSize>maxOrderBits, ippStsRangeErr) 129 130 /* set actual size of order and re-init engine */ 131 ECP_ORDBITSIZE(pEC) = orderBitSize; 132 gsModEngineInit(ECP_MONT_R(pEC),(Ipp32u*)pOrderData, orderBitSize, MONT_DEFAULT_POOL_LENGTH, gsModArithMont()); 133 } 134 135 { 136 BNU_CHUNK_T* pCofactorData = BN_NUMBER(pCofactor); 137 int cofactorLen= BN_SIZE(pCofactor); 138 int cofactorBitSize = BITSIZE_BNU(pCofactorData, cofactorLen); 139 IPP_BADARG_RET(cofactorBitSize>elemLen*BITSIZE(BNU_CHUNK_T), ippStsRangeErr) 140 COPY_BNU(ECP_COFACTOR(pEC), pCofactorData, cofactorLen); 141 } 142 143 ECP_SUBGROUP(pEC) = 1; 144 return ippStsNoErr; 145 } 146 } 147