<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
<meta http-equiv="X-UA-Compatible" content="IE=9"/>
<meta name="generator" content="Doxygen 1.8.5"/>
<title>PolarSSL v1.3.8: ecp_curves.c Source File</title>
<link href="tabs.css" rel="stylesheet" type="text/css"/>
<script type="text/javascript" src="jquery.js"></script>
<script type="text/javascript" src="dynsections.js"></script>
<link href="doxygen.css" rel="stylesheet" type="text/css" />
</head>
<body>
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
<div id="titlearea">
<table cellspacing="0" cellpadding="0">
<tbody>
<tr style="height: 56px;">
<td style="padding-left: 0.5em;">
<div id="projectname">PolarSSL v1.3.8
</div>
</td>
</tr>
</tbody>
</table>
</div>
<!-- end header part -->
<!-- Generated by Doxygen 1.8.5 -->
<div id="navrow1" class="tabs">
<ul class="tablist">
<li><a href="index.html"><span>Main Page</span></a></li>
<li><a href="modules.html"><span>Modules</span></a></li>
<li><a href="annotated.html"><span>Data Structures</span></a></li>
<li class="current"><a href="files.html"><span>Files</span></a></li>
</ul>
</div>
<div id="navrow2" class="tabs2">
<ul class="tablist">
<li><a href="files.html"><span>File List</span></a></li>
<li><a href="globals.html"><span>Globals</span></a></li>
</ul>
</div>
<div id="nav-path" class="navpath">
<ul>
<li class="navelem"><a class="el" href="dir_4478130ea462cc4195c75f9e6ba20061.html">library</a></li> </ul>
</div>
</div><!-- top -->
<div class="header">
<div class="headertitle">
<div class="title">ecp_curves.c</div> </div>
</div><!--header-->
<div class="contents">
<a href="ecp__curves_8c.html">Go to the documentation of this file.</a><div class="fragment"><div class="line"><a name="l00001"></a><span class="lineno"> 1</span> <span class="comment">/*</span></div>
<div class="line"><a name="l00002"></a><span class="lineno"> 2</span> <span class="comment"> * Elliptic curves over GF(p): curve-specific data and functions</span></div>
<div class="line"><a name="l00003"></a><span class="lineno"> 3</span> <span class="comment"> *</span></div>
<div class="line"><a name="l00004"></a><span class="lineno"> 4</span> <span class="comment"> * Copyright (C) 2006-2014, Brainspark B.V.</span></div>
<div class="line"><a name="l00005"></a><span class="lineno"> 5</span> <span class="comment"> *</span></div>
<div class="line"><a name="l00006"></a><span class="lineno"> 6</span> <span class="comment"> * This file is part of PolarSSL (http://www.polarssl.org)</span></div>
<div class="line"><a name="l00007"></a><span class="lineno"> 7</span> <span class="comment"> * Lead Maintainer: Paul Bakker <polarssl_maintainer at polarssl.org></span></div>
<div class="line"><a name="l00008"></a><span class="lineno"> 8</span> <span class="comment"> *</span></div>
<div class="line"><a name="l00009"></a><span class="lineno"> 9</span> <span class="comment"> * All rights reserved.</span></div>
<div class="line"><a name="l00010"></a><span class="lineno"> 10</span> <span class="comment"> *</span></div>
<div class="line"><a name="l00011"></a><span class="lineno"> 11</span> <span class="comment"> * This program is free software; you can redistribute it and/or modify</span></div>
<div class="line"><a name="l00012"></a><span class="lineno"> 12</span> <span class="comment"> * it under the terms of the GNU General Public License as published by</span></div>
<div class="line"><a name="l00013"></a><span class="lineno"> 13</span> <span class="comment"> * the Free Software Foundation; either version 2 of the License, or</span></div>
<div class="line"><a name="l00014"></a><span class="lineno"> 14</span> <span class="comment"> * (at your option) any later version.</span></div>
<div class="line"><a name="l00015"></a><span class="lineno"> 15</span> <span class="comment"> *</span></div>
<div class="line"><a name="l00016"></a><span class="lineno"> 16</span> <span class="comment"> * This program is distributed in the hope that it will be useful,</span></div>
<div class="line"><a name="l00017"></a><span class="lineno"> 17</span> <span class="comment"> * but WITHOUT ANY WARRANTY; without even the implied warranty of</span></div>
<div class="line"><a name="l00018"></a><span class="lineno"> 18</span> <span class="comment"> * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the</span></div>
<div class="line"><a name="l00019"></a><span class="lineno"> 19</span> <span class="comment"> * GNU General Public License for more details.</span></div>
<div class="line"><a name="l00020"></a><span class="lineno"> 20</span> <span class="comment"> *</span></div>
<div class="line"><a name="l00021"></a><span class="lineno"> 21</span> <span class="comment"> * You should have received a copy of the GNU General Public License along</span></div>
<div class="line"><a name="l00022"></a><span class="lineno"> 22</span> <span class="comment"> * with this program; if not, write to the Free Software Foundation, Inc.,</span></div>
<div class="line"><a name="l00023"></a><span class="lineno"> 23</span> <span class="comment"> * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.</span></div>
<div class="line"><a name="l00024"></a><span class="lineno"> 24</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00025"></a><span class="lineno"> 25</span> </div>
<div class="line"><a name="l00026"></a><span class="lineno"> 26</span> <span class="preprocessor">#if !defined(POLARSSL_CONFIG_FILE)</span></div>
<div class="line"><a name="l00027"></a><span class="lineno"> 27</span> <span class="preprocessor"></span><span class="preprocessor">#include "<a class="code" href="config_8h.html">polarssl/config.h</a>"</span></div>
<div class="line"><a name="l00028"></a><span class="lineno"> 28</span> <span class="preprocessor">#else</span></div>
<div class="line"><a name="l00029"></a><span class="lineno"> 29</span> <span class="preprocessor"></span><span class="preprocessor">#include POLARSSL_CONFIG_FILE</span></div>
<div class="line"><a name="l00030"></a><span class="lineno"> 30</span> <span class="preprocessor"></span><span class="preprocessor">#endif</span></div>
<div class="line"><a name="l00031"></a><span class="lineno"> 31</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00032"></a><span class="lineno"> 32</span> <span class="preprocessor">#if defined(POLARSSL_ECP_C)</span></div>
<div class="line"><a name="l00033"></a><span class="lineno"> 33</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00034"></a><span class="lineno"> 34</span> <span class="preprocessor">#include "<a class="code" href="ecp_8h.html">polarssl/ecp.h</a>"</span></div>
<div class="line"><a name="l00035"></a><span class="lineno"> 35</span> </div>
<div class="line"><a name="l00036"></a><span class="lineno"> 36</span> <span class="preprocessor">#if defined(_MSC_VER) && !defined(inline)</span></div>
<div class="line"><a name="l00037"></a><span class="lineno"> 37</span> <span class="preprocessor"></span><span class="preprocessor">#define inline _inline</span></div>
<div class="line"><a name="l00038"></a><span class="lineno"> 38</span> <span class="preprocessor"></span><span class="preprocessor">#else</span></div>
<div class="line"><a name="l00039"></a><span class="lineno"> 39</span> <span class="preprocessor"></span><span class="preprocessor">#if defined(__ARMCC_VERSION) && !defined(inline)</span></div>
<div class="line"><a name="l00040"></a><span class="lineno"> 40</span> <span class="preprocessor"></span><span class="preprocessor">#define inline __inline</span></div>
<div class="line"><a name="l00041"></a><span class="lineno"> 41</span> <span class="preprocessor"></span><span class="preprocessor">#endif </span><span class="comment">/* __ARMCC_VERSION */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00042"></a><span class="lineno"> 42</span> <span class="preprocessor"></span><span class="preprocessor">#endif </span><span class="comment">/*_MSC_VER */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00043"></a><span class="lineno"> 43</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00044"></a><span class="lineno"> 44</span> <span class="comment">/*</span></div>
<div class="line"><a name="l00045"></a><span class="lineno"> 45</span> <span class="comment"> * Conversion macros for embedded constants:</span></div>
<div class="line"><a name="l00046"></a><span class="lineno"> 46</span> <span class="comment"> * build lists of t_uint's from lists of unsigned char's grouped by 8, 4 or 2</span></div>
<div class="line"><a name="l00047"></a><span class="lineno"> 47</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00048"></a><span class="lineno"> 48</span> <span class="preprocessor">#if defined(POLARSSL_HAVE_INT8)</span></div>
<div class="line"><a name="l00049"></a><span class="lineno"> 49</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00050"></a><span class="lineno"> 50</span> <span class="preprocessor">#define BYTES_TO_T_UINT_8( a, b, c, d, e, f, g, h ) \</span></div>
<div class="line"><a name="l00051"></a><span class="lineno"> 51</span> <span class="preprocessor"> a, b, c, d, e, f, g, h</span></div>
<div class="line"><a name="l00052"></a><span class="lineno"> 52</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00053"></a><span class="lineno"> 53</span> <span class="preprocessor">#define BYTES_TO_T_UINT_4( a, b, c, d ) \</span></div>
<div class="line"><a name="l00054"></a><span class="lineno"> 54</span> <span class="preprocessor"> a, b, c, d</span></div>
<div class="line"><a name="l00055"></a><span class="lineno"> 55</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00056"></a><span class="lineno"> 56</span> <span class="preprocessor">#define BYTES_TO_T_UINT_2( a, b ) \</span></div>
<div class="line"><a name="l00057"></a><span class="lineno"> 57</span> <span class="preprocessor"> a, b</span></div>
<div class="line"><a name="l00058"></a><span class="lineno"> 58</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00059"></a><span class="lineno"> 59</span> <span class="preprocessor">#elif defined(POLARSSL_HAVE_INT16)</span></div>
<div class="line"><a name="l00060"></a><span class="lineno"> 60</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00061"></a><span class="lineno"> 61</span> <span class="preprocessor">#define BYTES_TO_T_UINT_2( a, b ) \</span></div>
<div class="line"><a name="l00062"></a><span class="lineno"> 62</span> <span class="preprocessor"> ( (t_uint) a << 0 ) | \</span></div>
<div class="line"><a name="l00063"></a><span class="lineno"> 63</span> <span class="preprocessor"> ( (t_uint) b << 8 )</span></div>
<div class="line"><a name="l00064"></a><span class="lineno"> 64</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00065"></a><span class="lineno"> 65</span> <span class="preprocessor">#define BYTES_TO_T_UINT_4( a, b, c, d ) \</span></div>
<div class="line"><a name="l00066"></a><span class="lineno"> 66</span> <span class="preprocessor"> BYTES_TO_T_UINT_2( a, b ), \</span></div>
<div class="line"><a name="l00067"></a><span class="lineno"> 67</span> <span class="preprocessor"> BYTES_TO_T_UINT_2( c, d )</span></div>
<div class="line"><a name="l00068"></a><span class="lineno"> 68</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00069"></a><span class="lineno"> 69</span> <span class="preprocessor">#define BYTES_TO_T_UINT_8( a, b, c, d, e, f, g, h ) \</span></div>
<div class="line"><a name="l00070"></a><span class="lineno"> 70</span> <span class="preprocessor"> BYTES_TO_T_UINT_2( a, b ), \</span></div>
<div class="line"><a name="l00071"></a><span class="lineno"> 71</span> <span class="preprocessor"> BYTES_TO_T_UINT_2( c, d ), \</span></div>
<div class="line"><a name="l00072"></a><span class="lineno"> 72</span> <span class="preprocessor"> BYTES_TO_T_UINT_2( e, f ), \</span></div>
<div class="line"><a name="l00073"></a><span class="lineno"> 73</span> <span class="preprocessor"> BYTES_TO_T_UINT_2( g, h )</span></div>
<div class="line"><a name="l00074"></a><span class="lineno"> 74</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00075"></a><span class="lineno"> 75</span> <span class="preprocessor">#elif defined(POLARSSL_HAVE_INT32)</span></div>
<div class="line"><a name="l00076"></a><span class="lineno"> 76</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00077"></a><span class="lineno"> 77</span> <span class="preprocessor">#define BYTES_TO_T_UINT_4( a, b, c, d ) \</span></div>
<div class="line"><a name="l00078"></a><span class="lineno"> 78</span> <span class="preprocessor"> ( (t_uint) a << 0 ) | \</span></div>
<div class="line"><a name="l00079"></a><span class="lineno"> 79</span> <span class="preprocessor"> ( (t_uint) b << 8 ) | \</span></div>
<div class="line"><a name="l00080"></a><span class="lineno"> 80</span> <span class="preprocessor"> ( (t_uint) c << 16 ) | \</span></div>
<div class="line"><a name="l00081"></a><span class="lineno"> 81</span> <span class="preprocessor"> ( (t_uint) d << 24 )</span></div>
<div class="line"><a name="l00082"></a><span class="lineno"> 82</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00083"></a><span class="lineno"> 83</span> <span class="preprocessor">#define BYTES_TO_T_UINT_2( a, b ) \</span></div>
<div class="line"><a name="l00084"></a><span class="lineno"> 84</span> <span class="preprocessor"> BYTES_TO_T_UINT_4( a, b, 0, 0 )</span></div>
<div class="line"><a name="l00085"></a><span class="lineno"> 85</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00086"></a><span class="lineno"> 86</span> <span class="preprocessor">#define BYTES_TO_T_UINT_8( a, b, c, d, e, f, g, h ) \</span></div>
<div class="line"><a name="l00087"></a><span class="lineno"> 87</span> <span class="preprocessor"> BYTES_TO_T_UINT_4( a, b, c, d ), \</span></div>
<div class="line"><a name="l00088"></a><span class="lineno"> 88</span> <span class="preprocessor"> BYTES_TO_T_UINT_4( e, f, g, h )</span></div>
<div class="line"><a name="l00089"></a><span class="lineno"> 89</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00090"></a><span class="lineno"> 90</span> <span class="preprocessor">#else </span><span class="comment">/* 64-bits */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00091"></a><span class="lineno"> 91</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00092"></a><span class="lineno"> 92</span> <span class="preprocessor">#define BYTES_TO_T_UINT_8( a, b, c, d, e, f, g, h ) \</span></div>
<div class="line"><a name="l00093"></a><span class="lineno"> 93</span> <span class="preprocessor"> ( (t_uint) a << 0 ) | \</span></div>
<div class="line"><a name="l00094"></a><span class="lineno"> 94</span> <span class="preprocessor"> ( (t_uint) b << 8 ) | \</span></div>
<div class="line"><a name="l00095"></a><span class="lineno"> 95</span> <span class="preprocessor"> ( (t_uint) c << 16 ) | \</span></div>
<div class="line"><a name="l00096"></a><span class="lineno"> 96</span> <span class="preprocessor"> ( (t_uint) d << 24 ) | \</span></div>
<div class="line"><a name="l00097"></a><span class="lineno"> 97</span> <span class="preprocessor"> ( (t_uint) e << 32 ) | \</span></div>
<div class="line"><a name="l00098"></a><span class="lineno"> 98</span> <span class="preprocessor"> ( (t_uint) f << 40 ) | \</span></div>
<div class="line"><a name="l00099"></a><span class="lineno"> 99</span> <span class="preprocessor"> ( (t_uint) g << 48 ) | \</span></div>
<div class="line"><a name="l00100"></a><span class="lineno"> 100</span> <span class="preprocessor"> ( (t_uint) h << 56 )</span></div>
<div class="line"><a name="l00101"></a><span class="lineno"> 101</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00102"></a><span class="lineno"> 102</span> <span class="preprocessor">#define BYTES_TO_T_UINT_4( a, b, c, d ) \</span></div>
<div class="line"><a name="l00103"></a><span class="lineno"> 103</span> <span class="preprocessor"> BYTES_TO_T_UINT_8( a, b, c, d, 0, 0, 0, 0 )</span></div>
<div class="line"><a name="l00104"></a><span class="lineno"> 104</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00105"></a><span class="lineno"> 105</span> <span class="preprocessor">#define BYTES_TO_T_UINT_2( a, b ) \</span></div>
<div class="line"><a name="l00106"></a><span class="lineno"> 106</span> <span class="preprocessor"> BYTES_TO_T_UINT_8( a, b, 0, 0, 0, 0, 0, 0 )</span></div>
<div class="line"><a name="l00107"></a><span class="lineno"> 107</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00108"></a><span class="lineno"> 108</span> <span class="preprocessor">#endif </span><span class="comment">/* bits in t_uint */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00109"></a><span class="lineno"> 109</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00110"></a><span class="lineno"> 110</span> <span class="comment">/*</span></div>
<div class="line"><a name="l00111"></a><span class="lineno"> 111</span> <span class="comment"> * Note: the constants are in little-endian order</span></div>
<div class="line"><a name="l00112"></a><span class="lineno"> 112</span> <span class="comment"> * to be directly usable in MPIs</span></div>
<div class="line"><a name="l00113"></a><span class="lineno"> 113</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00114"></a><span class="lineno"> 114</span> </div>
<div class="line"><a name="l00115"></a><span class="lineno"> 115</span> <span class="comment">/*</span></div>
<div class="line"><a name="l00116"></a><span class="lineno"> 116</span> <span class="comment"> * Domain parameters for secp192r1</span></div>
<div class="line"><a name="l00117"></a><span class="lineno"> 117</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00118"></a><span class="lineno"> 118</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP192R1_ENABLED)</span></div>
<div class="line"><a name="l00119"></a><span class="lineno"> 119</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp192r1_p[] = {</div>
<div class="line"><a name="l00120"></a><span class="lineno"> 120</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00121"></a><span class="lineno"> 121</span>  BYTES_TO_T_UINT_8( 0xFE, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00122"></a><span class="lineno"> 122</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00123"></a><span class="lineno"> 123</span> };</div>
<div class="line"><a name="l00124"></a><span class="lineno"> 124</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp192r1_b[] = {</div>
<div class="line"><a name="l00125"></a><span class="lineno"> 125</span>  BYTES_TO_T_UINT_8( 0xB1, 0xB9, 0x46, 0xC1, 0xEC, 0xDE, 0xB8, 0xFE ),</div>
<div class="line"><a name="l00126"></a><span class="lineno"> 126</span>  BYTES_TO_T_UINT_8( 0x49, 0x30, 0x24, 0x72, 0xAB, 0xE9, 0xA7, 0x0F ),</div>
<div class="line"><a name="l00127"></a><span class="lineno"> 127</span>  BYTES_TO_T_UINT_8( 0xE7, 0x80, 0x9C, 0xE5, 0x19, 0x05, 0x21, 0x64 ),</div>
<div class="line"><a name="l00128"></a><span class="lineno"> 128</span> };</div>
<div class="line"><a name="l00129"></a><span class="lineno"> 129</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp192r1_gx[] = {</div>
<div class="line"><a name="l00130"></a><span class="lineno"> 130</span>  BYTES_TO_T_UINT_8( 0x12, 0x10, 0xFF, 0x82, 0xFD, 0x0A, 0xFF, 0xF4 ),</div>
<div class="line"><a name="l00131"></a><span class="lineno"> 131</span>  BYTES_TO_T_UINT_8( 0x00, 0x88, 0xA1, 0x43, 0xEB, 0x20, 0xBF, 0x7C ),</div>
<div class="line"><a name="l00132"></a><span class="lineno"> 132</span>  BYTES_TO_T_UINT_8( 0xF6, 0x90, 0x30, 0xB0, 0x0E, 0xA8, 0x8D, 0x18 ),</div>
<div class="line"><a name="l00133"></a><span class="lineno"> 133</span> };</div>
<div class="line"><a name="l00134"></a><span class="lineno"> 134</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp192r1_gy[] = {</div>
<div class="line"><a name="l00135"></a><span class="lineno"> 135</span>  BYTES_TO_T_UINT_8( 0x11, 0x48, 0x79, 0x1E, 0xA1, 0x77, 0xF9, 0x73 ),</div>
<div class="line"><a name="l00136"></a><span class="lineno"> 136</span>  BYTES_TO_T_UINT_8( 0xD5, 0xCD, 0x24, 0x6B, 0xED, 0x11, 0x10, 0x63 ),</div>
<div class="line"><a name="l00137"></a><span class="lineno"> 137</span>  BYTES_TO_T_UINT_8( 0x78, 0xDA, 0xC8, 0xFF, 0x95, 0x2B, 0x19, 0x07 ),</div>
<div class="line"><a name="l00138"></a><span class="lineno"> 138</span> };</div>
<div class="line"><a name="l00139"></a><span class="lineno"> 139</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp192r1_n[] = {</div>
<div class="line"><a name="l00140"></a><span class="lineno"> 140</span>  BYTES_TO_T_UINT_8( 0x31, 0x28, 0xD2, 0xB4, 0xB1, 0xC9, 0x6B, 0x14 ),</div>
<div class="line"><a name="l00141"></a><span class="lineno"> 141</span>  BYTES_TO_T_UINT_8( 0x36, 0xF8, 0xDE, 0x99, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00142"></a><span class="lineno"> 142</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00143"></a><span class="lineno"> 143</span> };</div>
<div class="line"><a name="l00144"></a><span class="lineno"> 144</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP192R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00145"></a><span class="lineno"> 145</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00146"></a><span class="lineno"> 146</span> <span class="comment">/*</span></div>
<div class="line"><a name="l00147"></a><span class="lineno"> 147</span> <span class="comment"> * Domain parameters for secp224r1</span></div>
<div class="line"><a name="l00148"></a><span class="lineno"> 148</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00149"></a><span class="lineno"> 149</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP224R1_ENABLED)</span></div>
<div class="line"><a name="l00150"></a><span class="lineno"> 150</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp224r1_p[] = {</div>
<div class="line"><a name="l00151"></a><span class="lineno"> 151</span>  BYTES_TO_T_UINT_8( 0x01, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ),</div>
<div class="line"><a name="l00152"></a><span class="lineno"> 152</span>  BYTES_TO_T_UINT_8( 0x00, 0x00, 0x00, 0x00, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00153"></a><span class="lineno"> 153</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00154"></a><span class="lineno"> 154</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0x00, 0x00, 0x00, 0x00 ),</div>
<div class="line"><a name="l00155"></a><span class="lineno"> 155</span> };</div>
<div class="line"><a name="l00156"></a><span class="lineno"> 156</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp224r1_b[] = {</div>
<div class="line"><a name="l00157"></a><span class="lineno"> 157</span>  BYTES_TO_T_UINT_8( 0xB4, 0xFF, 0x55, 0x23, 0x43, 0x39, 0x0B, 0x27 ),</div>
<div class="line"><a name="l00158"></a><span class="lineno"> 158</span>  BYTES_TO_T_UINT_8( 0xBA, 0xD8, 0xBF, 0xD7, 0xB7, 0xB0, 0x44, 0x50 ),</div>
<div class="line"><a name="l00159"></a><span class="lineno"> 159</span>  BYTES_TO_T_UINT_8( 0x56, 0x32, 0x41, 0xF5, 0xAB, 0xB3, 0x04, 0x0C ),</div>
<div class="line"><a name="l00160"></a><span class="lineno"> 160</span>  BYTES_TO_T_UINT_4( 0x85, 0x0A, 0x05, 0xB4 ),</div>
<div class="line"><a name="l00161"></a><span class="lineno"> 161</span> };</div>
<div class="line"><a name="l00162"></a><span class="lineno"> 162</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp224r1_gx[] = {</div>
<div class="line"><a name="l00163"></a><span class="lineno"> 163</span>  BYTES_TO_T_UINT_8( 0x21, 0x1D, 0x5C, 0x11, 0xD6, 0x80, 0x32, 0x34 ),</div>
<div class="line"><a name="l00164"></a><span class="lineno"> 164</span>  BYTES_TO_T_UINT_8( 0x22, 0x11, 0xC2, 0x56, 0xD3, 0xC1, 0x03, 0x4A ),</div>
<div class="line"><a name="l00165"></a><span class="lineno"> 165</span>  BYTES_TO_T_UINT_8( 0xB9, 0x90, 0x13, 0x32, 0x7F, 0xBF, 0xB4, 0x6B ),</div>
<div class="line"><a name="l00166"></a><span class="lineno"> 166</span>  BYTES_TO_T_UINT_4( 0xBD, 0x0C, 0x0E, 0xB7 ),</div>
<div class="line"><a name="l00167"></a><span class="lineno"> 167</span> };</div>
<div class="line"><a name="l00168"></a><span class="lineno"> 168</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp224r1_gy[] = {</div>
<div class="line"><a name="l00169"></a><span class="lineno"> 169</span>  BYTES_TO_T_UINT_8( 0x34, 0x7E, 0x00, 0x85, 0x99, 0x81, 0xD5, 0x44 ),</div>
<div class="line"><a name="l00170"></a><span class="lineno"> 170</span>  BYTES_TO_T_UINT_8( 0x64, 0x47, 0x07, 0x5A, 0xA0, 0x75, 0x43, 0xCD ),</div>
<div class="line"><a name="l00171"></a><span class="lineno"> 171</span>  BYTES_TO_T_UINT_8( 0xE6, 0xDF, 0x22, 0x4C, 0xFB, 0x23, 0xF7, 0xB5 ),</div>
<div class="line"><a name="l00172"></a><span class="lineno"> 172</span>  BYTES_TO_T_UINT_4( 0x88, 0x63, 0x37, 0xBD ),</div>
<div class="line"><a name="l00173"></a><span class="lineno"> 173</span> };</div>
<div class="line"><a name="l00174"></a><span class="lineno"> 174</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp224r1_n[] = {</div>
<div class="line"><a name="l00175"></a><span class="lineno"> 175</span>  BYTES_TO_T_UINT_8( 0x3D, 0x2A, 0x5C, 0x5C, 0x45, 0x29, 0xDD, 0x13 ),</div>
<div class="line"><a name="l00176"></a><span class="lineno"> 176</span>  BYTES_TO_T_UINT_8( 0x3E, 0xF0, 0xB8, 0xE0, 0xA2, 0x16, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00177"></a><span class="lineno"> 177</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00178"></a><span class="lineno"> 178</span>  BYTES_TO_T_UINT_4( 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00179"></a><span class="lineno"> 179</span> };</div>
<div class="line"><a name="l00180"></a><span class="lineno"> 180</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP224R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00181"></a><span class="lineno"> 181</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00182"></a><span class="lineno"> 182</span> <span class="comment">/*</span></div>
<div class="line"><a name="l00183"></a><span class="lineno"> 183</span> <span class="comment"> * Domain parameters for secp256r1</span></div>
<div class="line"><a name="l00184"></a><span class="lineno"> 184</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00185"></a><span class="lineno"> 185</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP256R1_ENABLED)</span></div>
<div class="line"><a name="l00186"></a><span class="lineno"> 186</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp256r1_p[] = {</div>
<div class="line"><a name="l00187"></a><span class="lineno"> 187</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00188"></a><span class="lineno"> 188</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0x00, 0x00, 0x00, 0x00 ),</div>
<div class="line"><a name="l00189"></a><span class="lineno"> 189</span>  BYTES_TO_T_UINT_8( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ),</div>
<div class="line"><a name="l00190"></a><span class="lineno"> 190</span>  BYTES_TO_T_UINT_8( 0x01, 0x00, 0x00, 0x00, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00191"></a><span class="lineno"> 191</span> };</div>
<div class="line"><a name="l00192"></a><span class="lineno"> 192</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp256r1_b[] = {</div>
<div class="line"><a name="l00193"></a><span class="lineno"> 193</span>  BYTES_TO_T_UINT_8( 0x4B, 0x60, 0xD2, 0x27, 0x3E, 0x3C, 0xCE, 0x3B ),</div>
<div class="line"><a name="l00194"></a><span class="lineno"> 194</span>  BYTES_TO_T_UINT_8( 0xF6, 0xB0, 0x53, 0xCC, 0xB0, 0x06, 0x1D, 0x65 ),</div>
<div class="line"><a name="l00195"></a><span class="lineno"> 195</span>  BYTES_TO_T_UINT_8( 0xBC, 0x86, 0x98, 0x76, 0x55, 0xBD, 0xEB, 0xB3 ),</div>
<div class="line"><a name="l00196"></a><span class="lineno"> 196</span>  BYTES_TO_T_UINT_8( 0xE7, 0x93, 0x3A, 0xAA, 0xD8, 0x35, 0xC6, 0x5A ),</div>
<div class="line"><a name="l00197"></a><span class="lineno"> 197</span> };</div>
<div class="line"><a name="l00198"></a><span class="lineno"> 198</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp256r1_gx[] = {</div>
<div class="line"><a name="l00199"></a><span class="lineno"> 199</span>  BYTES_TO_T_UINT_8( 0x96, 0xC2, 0x98, 0xD8, 0x45, 0x39, 0xA1, 0xF4 ),</div>
<div class="line"><a name="l00200"></a><span class="lineno"> 200</span>  BYTES_TO_T_UINT_8( 0xA0, 0x33, 0xEB, 0x2D, 0x81, 0x7D, 0x03, 0x77 ),</div>
<div class="line"><a name="l00201"></a><span class="lineno"> 201</span>  BYTES_TO_T_UINT_8( 0xF2, 0x40, 0xA4, 0x63, 0xE5, 0xE6, 0xBC, 0xF8 ),</div>
<div class="line"><a name="l00202"></a><span class="lineno"> 202</span>  BYTES_TO_T_UINT_8( 0x47, 0x42, 0x2C, 0xE1, 0xF2, 0xD1, 0x17, 0x6B ),</div>
<div class="line"><a name="l00203"></a><span class="lineno"> 203</span> };</div>
<div class="line"><a name="l00204"></a><span class="lineno"> 204</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp256r1_gy[] = {</div>
<div class="line"><a name="l00205"></a><span class="lineno"> 205</span>  BYTES_TO_T_UINT_8( 0xF5, 0x51, 0xBF, 0x37, 0x68, 0x40, 0xB6, 0xCB ),</div>
<div class="line"><a name="l00206"></a><span class="lineno"> 206</span>  BYTES_TO_T_UINT_8( 0xCE, 0x5E, 0x31, 0x6B, 0x57, 0x33, 0xCE, 0x2B ),</div>
<div class="line"><a name="l00207"></a><span class="lineno"> 207</span>  BYTES_TO_T_UINT_8( 0x16, 0x9E, 0x0F, 0x7C, 0x4A, 0xEB, 0xE7, 0x8E ),</div>
<div class="line"><a name="l00208"></a><span class="lineno"> 208</span>  BYTES_TO_T_UINT_8( 0x9B, 0x7F, 0x1A, 0xFE, 0xE2, 0x42, 0xE3, 0x4F ),</div>
<div class="line"><a name="l00209"></a><span class="lineno"> 209</span> };</div>
<div class="line"><a name="l00210"></a><span class="lineno"> 210</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp256r1_n[] = {</div>
<div class="line"><a name="l00211"></a><span class="lineno"> 211</span>  BYTES_TO_T_UINT_8( 0x51, 0x25, 0x63, 0xFC, 0xC2, 0xCA, 0xB9, 0xF3 ),</div>
<div class="line"><a name="l00212"></a><span class="lineno"> 212</span>  BYTES_TO_T_UINT_8( 0x84, 0x9E, 0x17, 0xA7, 0xAD, 0xFA, 0xE6, 0xBC ),</div>
<div class="line"><a name="l00213"></a><span class="lineno"> 213</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00214"></a><span class="lineno"> 214</span>  BYTES_TO_T_UINT_8( 0x00, 0x00, 0x00, 0x00, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00215"></a><span class="lineno"> 215</span> };</div>
<div class="line"><a name="l00216"></a><span class="lineno"> 216</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP256R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00217"></a><span class="lineno"> 217</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00218"></a><span class="lineno"> 218</span> <span class="comment">/*</span></div>
<div class="line"><a name="l00219"></a><span class="lineno"> 219</span> <span class="comment"> * Domain parameters for secp384r1</span></div>
<div class="line"><a name="l00220"></a><span class="lineno"> 220</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00221"></a><span class="lineno"> 221</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP384R1_ENABLED)</span></div>
<div class="line"><a name="l00222"></a><span class="lineno"> 222</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp384r1_p[] = {</div>
<div class="line"><a name="l00223"></a><span class="lineno"> 223</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0x00, 0x00, 0x00, 0x00 ),</div>
<div class="line"><a name="l00224"></a><span class="lineno"> 224</span>  BYTES_TO_T_UINT_8( 0x00, 0x00, 0x00, 0x00, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00225"></a><span class="lineno"> 225</span>  BYTES_TO_T_UINT_8( 0xFE, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00226"></a><span class="lineno"> 226</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00227"></a><span class="lineno"> 227</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00228"></a><span class="lineno"> 228</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00229"></a><span class="lineno"> 229</span> };</div>
<div class="line"><a name="l00230"></a><span class="lineno"> 230</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp384r1_b[] = {</div>
<div class="line"><a name="l00231"></a><span class="lineno"> 231</span>  BYTES_TO_T_UINT_8( 0xEF, 0x2A, 0xEC, 0xD3, 0xED, 0xC8, 0x85, 0x2A ),</div>
<div class="line"><a name="l00232"></a><span class="lineno"> 232</span>  BYTES_TO_T_UINT_8( 0x9D, 0xD1, 0x2E, 0x8A, 0x8D, 0x39, 0x56, 0xC6 ),</div>
<div class="line"><a name="l00233"></a><span class="lineno"> 233</span>  BYTES_TO_T_UINT_8( 0x5A, 0x87, 0x13, 0x50, 0x8F, 0x08, 0x14, 0x03 ),</div>
<div class="line"><a name="l00234"></a><span class="lineno"> 234</span>  BYTES_TO_T_UINT_8( 0x12, 0x41, 0x81, 0xFE, 0x6E, 0x9C, 0x1D, 0x18 ),</div>
<div class="line"><a name="l00235"></a><span class="lineno"> 235</span>  BYTES_TO_T_UINT_8( 0x19, 0x2D, 0xF8, 0xE3, 0x6B, 0x05, 0x8E, 0x98 ),</div>
<div class="line"><a name="l00236"></a><span class="lineno"> 236</span>  BYTES_TO_T_UINT_8( 0xE4, 0xE7, 0x3E, 0xE2, 0xA7, 0x2F, 0x31, 0xB3 ),</div>
<div class="line"><a name="l00237"></a><span class="lineno"> 237</span> };</div>
<div class="line"><a name="l00238"></a><span class="lineno"> 238</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp384r1_gx[] = {</div>
<div class="line"><a name="l00239"></a><span class="lineno"> 239</span>  BYTES_TO_T_UINT_8( 0xB7, 0x0A, 0x76, 0x72, 0x38, 0x5E, 0x54, 0x3A ),</div>
<div class="line"><a name="l00240"></a><span class="lineno"> 240</span>  BYTES_TO_T_UINT_8( 0x6C, 0x29, 0x55, 0xBF, 0x5D, 0xF2, 0x02, 0x55 ),</div>
<div class="line"><a name="l00241"></a><span class="lineno"> 241</span>  BYTES_TO_T_UINT_8( 0x38, 0x2A, 0x54, 0x82, 0xE0, 0x41, 0xF7, 0x59 ),</div>
<div class="line"><a name="l00242"></a><span class="lineno"> 242</span>  BYTES_TO_T_UINT_8( 0x98, 0x9B, 0xA7, 0x8B, 0x62, 0x3B, 0x1D, 0x6E ),</div>
<div class="line"><a name="l00243"></a><span class="lineno"> 243</span>  BYTES_TO_T_UINT_8( 0x74, 0xAD, 0x20, 0xF3, 0x1E, 0xC7, 0xB1, 0x8E ),</div>
<div class="line"><a name="l00244"></a><span class="lineno"> 244</span>  BYTES_TO_T_UINT_8( 0x37, 0x05, 0x8B, 0xBE, 0x22, 0xCA, 0x87, 0xAA ),</div>
<div class="line"><a name="l00245"></a><span class="lineno"> 245</span> };</div>
<div class="line"><a name="l00246"></a><span class="lineno"> 246</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp384r1_gy[] = {</div>
<div class="line"><a name="l00247"></a><span class="lineno"> 247</span>  BYTES_TO_T_UINT_8( 0x5F, 0x0E, 0xEA, 0x90, 0x7C, 0x1D, 0x43, 0x7A ),</div>
<div class="line"><a name="l00248"></a><span class="lineno"> 248</span>  BYTES_TO_T_UINT_8( 0x9D, 0x81, 0x7E, 0x1D, 0xCE, 0xB1, 0x60, 0x0A ),</div>
<div class="line"><a name="l00249"></a><span class="lineno"> 249</span>  BYTES_TO_T_UINT_8( 0xC0, 0xB8, 0xF0, 0xB5, 0x13, 0x31, 0xDA, 0xE9 ),</div>
<div class="line"><a name="l00250"></a><span class="lineno"> 250</span>  BYTES_TO_T_UINT_8( 0x7C, 0x14, 0x9A, 0x28, 0xBD, 0x1D, 0xF4, 0xF8 ),</div>
<div class="line"><a name="l00251"></a><span class="lineno"> 251</span>  BYTES_TO_T_UINT_8( 0x29, 0xDC, 0x92, 0x92, 0xBF, 0x98, 0x9E, 0x5D ),</div>
<div class="line"><a name="l00252"></a><span class="lineno"> 252</span>  BYTES_TO_T_UINT_8( 0x6F, 0x2C, 0x26, 0x96, 0x4A, 0xDE, 0x17, 0x36 ),</div>
<div class="line"><a name="l00253"></a><span class="lineno"> 253</span> };</div>
<div class="line"><a name="l00254"></a><span class="lineno"> 254</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp384r1_n[] = {</div>
<div class="line"><a name="l00255"></a><span class="lineno"> 255</span>  BYTES_TO_T_UINT_8( 0x73, 0x29, 0xC5, 0xCC, 0x6A, 0x19, 0xEC, 0xEC ),</div>
<div class="line"><a name="l00256"></a><span class="lineno"> 256</span>  BYTES_TO_T_UINT_8( 0x7A, 0xA7, 0xB0, 0x48, 0xB2, 0x0D, 0x1A, 0x58 ),</div>
<div class="line"><a name="l00257"></a><span class="lineno"> 257</span>  BYTES_TO_T_UINT_8( 0xDF, 0x2D, 0x37, 0xF4, 0x81, 0x4D, 0x63, 0xC7 ),</div>
<div class="line"><a name="l00258"></a><span class="lineno"> 258</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00259"></a><span class="lineno"> 259</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00260"></a><span class="lineno"> 260</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00261"></a><span class="lineno"> 261</span> };</div>
<div class="line"><a name="l00262"></a><span class="lineno"> 262</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP384R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00263"></a><span class="lineno"> 263</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00264"></a><span class="lineno"> 264</span> <span class="comment">/*</span></div>
<div class="line"><a name="l00265"></a><span class="lineno"> 265</span> <span class="comment"> * Domain parameters for secp521r1</span></div>
<div class="line"><a name="l00266"></a><span class="lineno"> 266</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00267"></a><span class="lineno"> 267</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP521R1_ENABLED)</span></div>
<div class="line"><a name="l00268"></a><span class="lineno"> 268</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp521r1_p[] = {</div>
<div class="line"><a name="l00269"></a><span class="lineno"> 269</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00270"></a><span class="lineno"> 270</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00271"></a><span class="lineno"> 271</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00272"></a><span class="lineno"> 272</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00273"></a><span class="lineno"> 273</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00274"></a><span class="lineno"> 274</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00275"></a><span class="lineno"> 275</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00276"></a><span class="lineno"> 276</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00277"></a><span class="lineno"> 277</span>  BYTES_TO_T_UINT_2( 0xFF, 0x01 ),</div>
<div class="line"><a name="l00278"></a><span class="lineno"> 278</span> };</div>
<div class="line"><a name="l00279"></a><span class="lineno"> 279</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp521r1_b[] = {</div>
<div class="line"><a name="l00280"></a><span class="lineno"> 280</span>  BYTES_TO_T_UINT_8( 0x00, 0x3F, 0x50, 0x6B, 0xD4, 0x1F, 0x45, 0xEF ),</div>
<div class="line"><a name="l00281"></a><span class="lineno"> 281</span>  BYTES_TO_T_UINT_8( 0xF1, 0x34, 0x2C, 0x3D, 0x88, 0xDF, 0x73, 0x35 ),</div>
<div class="line"><a name="l00282"></a><span class="lineno"> 282</span>  BYTES_TO_T_UINT_8( 0x07, 0xBF, 0xB1, 0x3B, 0xBD, 0xC0, 0x52, 0x16 ),</div>
<div class="line"><a name="l00283"></a><span class="lineno"> 283</span>  BYTES_TO_T_UINT_8( 0x7B, 0x93, 0x7E, 0xEC, 0x51, 0x39, 0x19, 0x56 ),</div>
<div class="line"><a name="l00284"></a><span class="lineno"> 284</span>  BYTES_TO_T_UINT_8( 0xE1, 0x09, 0xF1, 0x8E, 0x91, 0x89, 0xB4, 0xB8 ),</div>
<div class="line"><a name="l00285"></a><span class="lineno"> 285</span>  BYTES_TO_T_UINT_8( 0xF3, 0x15, 0xB3, 0x99, 0x5B, 0x72, 0xDA, 0xA2 ),</div>
<div class="line"><a name="l00286"></a><span class="lineno"> 286</span>  BYTES_TO_T_UINT_8( 0xEE, 0x40, 0x85, 0xB6, 0xA0, 0x21, 0x9A, 0x92 ),</div>
<div class="line"><a name="l00287"></a><span class="lineno"> 287</span>  BYTES_TO_T_UINT_8( 0x1F, 0x9A, 0x1C, 0x8E, 0x61, 0xB9, 0x3E, 0x95 ),</div>
<div class="line"><a name="l00288"></a><span class="lineno"> 288</span>  BYTES_TO_T_UINT_2( 0x51, 0x00 ),</div>
<div class="line"><a name="l00289"></a><span class="lineno"> 289</span> };</div>
<div class="line"><a name="l00290"></a><span class="lineno"> 290</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp521r1_gx[] = {</div>
<div class="line"><a name="l00291"></a><span class="lineno"> 291</span>  BYTES_TO_T_UINT_8( 0x66, 0xBD, 0xE5, 0xC2, 0x31, 0x7E, 0x7E, 0xF9 ),</div>
<div class="line"><a name="l00292"></a><span class="lineno"> 292</span>  BYTES_TO_T_UINT_8( 0x9B, 0x42, 0x6A, 0x85, 0xC1, 0xB3, 0x48, 0x33 ),</div>
<div class="line"><a name="l00293"></a><span class="lineno"> 293</span>  BYTES_TO_T_UINT_8( 0xDE, 0xA8, 0xFF, 0xA2, 0x27, 0xC1, 0x1D, 0xFE ),</div>
<div class="line"><a name="l00294"></a><span class="lineno"> 294</span>  BYTES_TO_T_UINT_8( 0x28, 0x59, 0xE7, 0xEF, 0x77, 0x5E, 0x4B, 0xA1 ),</div>
<div class="line"><a name="l00295"></a><span class="lineno"> 295</span>  BYTES_TO_T_UINT_8( 0xBA, 0x3D, 0x4D, 0x6B, 0x60, 0xAF, 0x28, 0xF8 ),</div>
<div class="line"><a name="l00296"></a><span class="lineno"> 296</span>  BYTES_TO_T_UINT_8( 0x21, 0xB5, 0x3F, 0x05, 0x39, 0x81, 0x64, 0x9C ),</div>
<div class="line"><a name="l00297"></a><span class="lineno"> 297</span>  BYTES_TO_T_UINT_8( 0x42, 0xB4, 0x95, 0x23, 0x66, 0xCB, 0x3E, 0x9E ),</div>
<div class="line"><a name="l00298"></a><span class="lineno"> 298</span>  BYTES_TO_T_UINT_8( 0xCD, 0xE9, 0x04, 0x04, 0xB7, 0x06, 0x8E, 0x85 ),</div>
<div class="line"><a name="l00299"></a><span class="lineno"> 299</span>  BYTES_TO_T_UINT_2( 0xC6, 0x00 ),</div>
<div class="line"><a name="l00300"></a><span class="lineno"> 300</span> };</div>
<div class="line"><a name="l00301"></a><span class="lineno"> 301</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp521r1_gy[] = {</div>
<div class="line"><a name="l00302"></a><span class="lineno"> 302</span>  BYTES_TO_T_UINT_8( 0x50, 0x66, 0xD1, 0x9F, 0x76, 0x94, 0xBE, 0x88 ),</div>
<div class="line"><a name="l00303"></a><span class="lineno"> 303</span>  BYTES_TO_T_UINT_8( 0x40, 0xC2, 0x72, 0xA2, 0x86, 0x70, 0x3C, 0x35 ),</div>
<div class="line"><a name="l00304"></a><span class="lineno"> 304</span>  BYTES_TO_T_UINT_8( 0x61, 0x07, 0xAD, 0x3F, 0x01, 0xB9, 0x50, 0xC5 ),</div>
<div class="line"><a name="l00305"></a><span class="lineno"> 305</span>  BYTES_TO_T_UINT_8( 0x40, 0x26, 0xF4, 0x5E, 0x99, 0x72, 0xEE, 0x97 ),</div>
<div class="line"><a name="l00306"></a><span class="lineno"> 306</span>  BYTES_TO_T_UINT_8( 0x2C, 0x66, 0x3E, 0x27, 0x17, 0xBD, 0xAF, 0x17 ),</div>
<div class="line"><a name="l00307"></a><span class="lineno"> 307</span>  BYTES_TO_T_UINT_8( 0x68, 0x44, 0x9B, 0x57, 0x49, 0x44, 0xF5, 0x98 ),</div>
<div class="line"><a name="l00308"></a><span class="lineno"> 308</span>  BYTES_TO_T_UINT_8( 0xD9, 0x1B, 0x7D, 0x2C, 0xB4, 0x5F, 0x8A, 0x5C ),</div>
<div class="line"><a name="l00309"></a><span class="lineno"> 309</span>  BYTES_TO_T_UINT_8( 0x04, 0xC0, 0x3B, 0x9A, 0x78, 0x6A, 0x29, 0x39 ),</div>
<div class="line"><a name="l00310"></a><span class="lineno"> 310</span>  BYTES_TO_T_UINT_2( 0x18, 0x01 ),</div>
<div class="line"><a name="l00311"></a><span class="lineno"> 311</span> };</div>
<div class="line"><a name="l00312"></a><span class="lineno"> 312</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp521r1_n[] = {</div>
<div class="line"><a name="l00313"></a><span class="lineno"> 313</span>  BYTES_TO_T_UINT_8( 0x09, 0x64, 0x38, 0x91, 0x1E, 0xB7, 0x6F, 0xBB ),</div>
<div class="line"><a name="l00314"></a><span class="lineno"> 314</span>  BYTES_TO_T_UINT_8( 0xAE, 0x47, 0x9C, 0x89, 0xB8, 0xC9, 0xB5, 0x3B ),</div>
<div class="line"><a name="l00315"></a><span class="lineno"> 315</span>  BYTES_TO_T_UINT_8( 0xD0, 0xA5, 0x09, 0xF7, 0x48, 0x01, 0xCC, 0x7F ),</div>
<div class="line"><a name="l00316"></a><span class="lineno"> 316</span>  BYTES_TO_T_UINT_8( 0x6B, 0x96, 0x2F, 0xBF, 0x83, 0x87, 0x86, 0x51 ),</div>
<div class="line"><a name="l00317"></a><span class="lineno"> 317</span>  BYTES_TO_T_UINT_8( 0xFA, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00318"></a><span class="lineno"> 318</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00319"></a><span class="lineno"> 319</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00320"></a><span class="lineno"> 320</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00321"></a><span class="lineno"> 321</span>  BYTES_TO_T_UINT_2( 0xFF, 0x01 ),</div>
<div class="line"><a name="l00322"></a><span class="lineno"> 322</span> };</div>
<div class="line"><a name="l00323"></a><span class="lineno"> 323</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP521R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00324"></a><span class="lineno"> 324</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00325"></a><span class="lineno"> 325</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP192K1_ENABLED)</span></div>
<div class="line"><a name="l00326"></a><span class="lineno"> 326</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp192k1_p[] = {</div>
<div class="line"><a name="l00327"></a><span class="lineno"> 327</span>  BYTES_TO_T_UINT_8( 0x37, 0xEE, 0xFF, 0xFF, 0xFE, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00328"></a><span class="lineno"> 328</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00329"></a><span class="lineno"> 329</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00330"></a><span class="lineno"> 330</span> };</div>
<div class="line"><a name="l00331"></a><span class="lineno"> 331</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp192k1_a[] = {</div>
<div class="line"><a name="l00332"></a><span class="lineno"> 332</span>  BYTES_TO_T_UINT_2( 0x00, 0x00 ),</div>
<div class="line"><a name="l00333"></a><span class="lineno"> 333</span> };</div>
<div class="line"><a name="l00334"></a><span class="lineno"> 334</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp192k1_b[] = {</div>
<div class="line"><a name="l00335"></a><span class="lineno"> 335</span>  BYTES_TO_T_UINT_2( 0x03, 0x00 ),</div>
<div class="line"><a name="l00336"></a><span class="lineno"> 336</span> };</div>
<div class="line"><a name="l00337"></a><span class="lineno"> 337</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp192k1_gx[] = {</div>
<div class="line"><a name="l00338"></a><span class="lineno"> 338</span>  BYTES_TO_T_UINT_8( 0x7D, 0x6C, 0xE0, 0xEA, 0xB1, 0xD1, 0xA5, 0x1D ),</div>
<div class="line"><a name="l00339"></a><span class="lineno"> 339</span>  BYTES_TO_T_UINT_8( 0x34, 0xF4, 0xB7, 0x80, 0x02, 0x7D, 0xB0, 0x26 ),</div>
<div class="line"><a name="l00340"></a><span class="lineno"> 340</span>  BYTES_TO_T_UINT_8( 0xAE, 0xE9, 0x57, 0xC0, 0x0E, 0xF1, 0x4F, 0xDB ),</div>
<div class="line"><a name="l00341"></a><span class="lineno"> 341</span> };</div>
<div class="line"><a name="l00342"></a><span class="lineno"> 342</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp192k1_gy[] = {</div>
<div class="line"><a name="l00343"></a><span class="lineno"> 343</span>  BYTES_TO_T_UINT_8( 0x9D, 0x2F, 0x5E, 0xD9, 0x88, 0xAA, 0x82, 0x40 ),</div>
<div class="line"><a name="l00344"></a><span class="lineno"> 344</span>  BYTES_TO_T_UINT_8( 0x34, 0x86, 0xBE, 0x15, 0xD0, 0x63, 0x41, 0x84 ),</div>
<div class="line"><a name="l00345"></a><span class="lineno"> 345</span>  BYTES_TO_T_UINT_8( 0xA7, 0x28, 0x56, 0x9C, 0x6D, 0x2F, 0x2F, 0x9B ),</div>
<div class="line"><a name="l00346"></a><span class="lineno"> 346</span> };</div>
<div class="line"><a name="l00347"></a><span class="lineno"> 347</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp192k1_n[] = {</div>
<div class="line"><a name="l00348"></a><span class="lineno"> 348</span>  BYTES_TO_T_UINT_8( 0x8D, 0xFD, 0xDE, 0x74, 0x6A, 0x46, 0x69, 0x0F ),</div>
<div class="line"><a name="l00349"></a><span class="lineno"> 349</span>  BYTES_TO_T_UINT_8( 0x17, 0xFC, 0xF2, 0x26, 0xFE, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00350"></a><span class="lineno"> 350</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00351"></a><span class="lineno"> 351</span> };</div>
<div class="line"><a name="l00352"></a><span class="lineno"> 352</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP192K1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00353"></a><span class="lineno"> 353</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00354"></a><span class="lineno"> 354</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP224K1_ENABLED)</span></div>
<div class="line"><a name="l00355"></a><span class="lineno"> 355</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp224k1_p[] = {</div>
<div class="line"><a name="l00356"></a><span class="lineno"> 356</span>  BYTES_TO_T_UINT_8( 0x6D, 0xE5, 0xFF, 0xFF, 0xFE, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00357"></a><span class="lineno"> 357</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00358"></a><span class="lineno"> 358</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00359"></a><span class="lineno"> 359</span>  BYTES_TO_T_UINT_4( 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00360"></a><span class="lineno"> 360</span> };</div>
<div class="line"><a name="l00361"></a><span class="lineno"> 361</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp224k1_a[] = {</div>
<div class="line"><a name="l00362"></a><span class="lineno"> 362</span>  BYTES_TO_T_UINT_2( 0x00, 0x00 ),</div>
<div class="line"><a name="l00363"></a><span class="lineno"> 363</span> };</div>
<div class="line"><a name="l00364"></a><span class="lineno"> 364</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp224k1_b[] = {</div>
<div class="line"><a name="l00365"></a><span class="lineno"> 365</span>  BYTES_TO_T_UINT_2( 0x05, 0x00 ),</div>
<div class="line"><a name="l00366"></a><span class="lineno"> 366</span> };</div>
<div class="line"><a name="l00367"></a><span class="lineno"> 367</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp224k1_gx[] = {</div>
<div class="line"><a name="l00368"></a><span class="lineno"> 368</span>  BYTES_TO_T_UINT_8( 0x5C, 0xA4, 0xB7, 0xB6, 0x0E, 0x65, 0x7E, 0x0F ),</div>
<div class="line"><a name="l00369"></a><span class="lineno"> 369</span>  BYTES_TO_T_UINT_8( 0xA9, 0x75, 0x70, 0xE4, 0xE9, 0x67, 0xA4, 0x69 ),</div>
<div class="line"><a name="l00370"></a><span class="lineno"> 370</span>  BYTES_TO_T_UINT_8( 0xA1, 0x28, 0xFC, 0x30, 0xDF, 0x99, 0xF0, 0x4D ),</div>
<div class="line"><a name="l00371"></a><span class="lineno"> 371</span>  BYTES_TO_T_UINT_4( 0x33, 0x5B, 0x45, 0xA1 ),</div>
<div class="line"><a name="l00372"></a><span class="lineno"> 372</span> };</div>
<div class="line"><a name="l00373"></a><span class="lineno"> 373</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp224k1_gy[] = {</div>
<div class="line"><a name="l00374"></a><span class="lineno"> 374</span>  BYTES_TO_T_UINT_8( 0xA5, 0x61, 0x6D, 0x55, 0xDB, 0x4B, 0xCA, 0xE2 ),</div>
<div class="line"><a name="l00375"></a><span class="lineno"> 375</span>  BYTES_TO_T_UINT_8( 0x59, 0xBD, 0xB0, 0xC0, 0xF7, 0x19, 0xE3, 0xF7 ),</div>
<div class="line"><a name="l00376"></a><span class="lineno"> 376</span>  BYTES_TO_T_UINT_8( 0xD6, 0xFB, 0xCA, 0x82, 0x42, 0x34, 0xBA, 0x7F ),</div>
<div class="line"><a name="l00377"></a><span class="lineno"> 377</span>  BYTES_TO_T_UINT_4( 0xED, 0x9F, 0x08, 0x7E ),</div>
<div class="line"><a name="l00378"></a><span class="lineno"> 378</span> };</div>
<div class="line"><a name="l00379"></a><span class="lineno"> 379</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp224k1_n[] = {</div>
<div class="line"><a name="l00380"></a><span class="lineno"> 380</span>  BYTES_TO_T_UINT_8( 0xF7, 0xB1, 0x9F, 0x76, 0x71, 0xA9, 0xF0, 0xCA ),</div>
<div class="line"><a name="l00381"></a><span class="lineno"> 381</span>  BYTES_TO_T_UINT_8( 0x84, 0x61, 0xEC, 0xD2, 0xE8, 0xDC, 0x01, 0x00 ),</div>
<div class="line"><a name="l00382"></a><span class="lineno"> 382</span>  BYTES_TO_T_UINT_8( 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 ),</div>
<div class="line"><a name="l00383"></a><span class="lineno"> 383</span>  BYTES_TO_T_UINT_8( 0x00, 0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00 ),</div>
<div class="line"><a name="l00384"></a><span class="lineno"> 384</span> };</div>
<div class="line"><a name="l00385"></a><span class="lineno"> 385</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP224K1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00386"></a><span class="lineno"> 386</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00387"></a><span class="lineno"> 387</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP256K1_ENABLED)</span></div>
<div class="line"><a name="l00388"></a><span class="lineno"> 388</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp256k1_p[] = {</div>
<div class="line"><a name="l00389"></a><span class="lineno"> 389</span>  BYTES_TO_T_UINT_8( 0x2F, 0xFC, 0xFF, 0xFF, 0xFE, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00390"></a><span class="lineno"> 390</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00391"></a><span class="lineno"> 391</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00392"></a><span class="lineno"> 392</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00393"></a><span class="lineno"> 393</span> };</div>
<div class="line"><a name="l00394"></a><span class="lineno"> 394</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp256k1_a[] = {</div>
<div class="line"><a name="l00395"></a><span class="lineno"> 395</span>  BYTES_TO_T_UINT_2( 0x00, 0x00 ),</div>
<div class="line"><a name="l00396"></a><span class="lineno"> 396</span> };</div>
<div class="line"><a name="l00397"></a><span class="lineno"> 397</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp256k1_b[] = {</div>
<div class="line"><a name="l00398"></a><span class="lineno"> 398</span>  BYTES_TO_T_UINT_2( 0x07, 0x00 ),</div>
<div class="line"><a name="l00399"></a><span class="lineno"> 399</span> };</div>
<div class="line"><a name="l00400"></a><span class="lineno"> 400</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp256k1_gx[] = {</div>
<div class="line"><a name="l00401"></a><span class="lineno"> 401</span>  BYTES_TO_T_UINT_8( 0x98, 0x17, 0xF8, 0x16, 0x5B, 0x81, 0xF2, 0x59 ),</div>
<div class="line"><a name="l00402"></a><span class="lineno"> 402</span>  BYTES_TO_T_UINT_8( 0xD9, 0x28, 0xCE, 0x2D, 0xDB, 0xFC, 0x9B, 0x02 ),</div>
<div class="line"><a name="l00403"></a><span class="lineno"> 403</span>  BYTES_TO_T_UINT_8( 0x07, 0x0B, 0x87, 0xCE, 0x95, 0x62, 0xA0, 0x55 ),</div>
<div class="line"><a name="l00404"></a><span class="lineno"> 404</span>  BYTES_TO_T_UINT_8( 0xAC, 0xBB, 0xDC, 0xF9, 0x7E, 0x66, 0xBE, 0x79 ),</div>
<div class="line"><a name="l00405"></a><span class="lineno"> 405</span> };</div>
<div class="line"><a name="l00406"></a><span class="lineno"> 406</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp256k1_gy[] = {</div>
<div class="line"><a name="l00407"></a><span class="lineno"> 407</span>  BYTES_TO_T_UINT_8( 0xB8, 0xD4, 0x10, 0xFB, 0x8F, 0xD0, 0x47, 0x9C ),</div>
<div class="line"><a name="l00408"></a><span class="lineno"> 408</span>  BYTES_TO_T_UINT_8( 0x19, 0x54, 0x85, 0xA6, 0x48, 0xB4, 0x17, 0xFD ),</div>
<div class="line"><a name="l00409"></a><span class="lineno"> 409</span>  BYTES_TO_T_UINT_8( 0xA8, 0x08, 0x11, 0x0E, 0xFC, 0xFB, 0xA4, 0x5D ),</div>
<div class="line"><a name="l00410"></a><span class="lineno"> 410</span>  BYTES_TO_T_UINT_8( 0x65, 0xC4, 0xA3, 0x26, 0x77, 0xDA, 0x3A, 0x48 ),</div>
<div class="line"><a name="l00411"></a><span class="lineno"> 411</span> };</div>
<div class="line"><a name="l00412"></a><span class="lineno"> 412</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> secp256k1_n[] = {</div>
<div class="line"><a name="l00413"></a><span class="lineno"> 413</span>  BYTES_TO_T_UINT_8( 0x41, 0x41, 0x36, 0xD0, 0x8C, 0x5E, 0xD2, 0xBF ),</div>
<div class="line"><a name="l00414"></a><span class="lineno"> 414</span>  BYTES_TO_T_UINT_8( 0x3B, 0xA0, 0x48, 0xAF, 0xE6, 0xDC, 0xAE, 0xBA ),</div>
<div class="line"><a name="l00415"></a><span class="lineno"> 415</span>  BYTES_TO_T_UINT_8( 0xFE, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00416"></a><span class="lineno"> 416</span>  BYTES_TO_T_UINT_8( 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF ),</div>
<div class="line"><a name="l00417"></a><span class="lineno"> 417</span> };</div>
<div class="line"><a name="l00418"></a><span class="lineno"> 418</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP256K1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00419"></a><span class="lineno"> 419</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00420"></a><span class="lineno"> 420</span> <span class="comment">/*</span></div>
<div class="line"><a name="l00421"></a><span class="lineno"> 421</span> <span class="comment"> * Domain parameters for brainpoolP256r1 (RFC 5639 3.4)</span></div>
<div class="line"><a name="l00422"></a><span class="lineno"> 422</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00423"></a><span class="lineno"> 423</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_BP256R1_ENABLED)</span></div>
<div class="line"><a name="l00424"></a><span class="lineno"> 424</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> brainpoolP256r1_p[] = {</div>
<div class="line"><a name="l00425"></a><span class="lineno"> 425</span>  BYTES_TO_T_UINT_8( 0x77, 0x53, 0x6E, 0x1F, 0x1D, 0x48, 0x13, 0x20 ),</div>
<div class="line"><a name="l00426"></a><span class="lineno"> 426</span>  BYTES_TO_T_UINT_8( 0x28, 0x20, 0x26, 0xD5, 0x23, 0xF6, 0x3B, 0x6E ),</div>
<div class="line"><a name="l00427"></a><span class="lineno"> 427</span>  BYTES_TO_T_UINT_8( 0x72, 0x8D, 0x83, 0x9D, 0x90, 0x0A, 0x66, 0x3E ),</div>
<div class="line"><a name="l00428"></a><span class="lineno"> 428</span>  BYTES_TO_T_UINT_8( 0xBC, 0xA9, 0xEE, 0xA1, 0xDB, 0x57, 0xFB, 0xA9 ),</div>
<div class="line"><a name="l00429"></a><span class="lineno"> 429</span> };</div>
<div class="line"><a name="l00430"></a><span class="lineno"> 430</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> brainpoolP256r1_a[] = {</div>
<div class="line"><a name="l00431"></a><span class="lineno"> 431</span>  BYTES_TO_T_UINT_8( 0xD9, 0xB5, 0x30, 0xF3, 0x44, 0x4B, 0x4A, 0xE9 ),</div>
<div class="line"><a name="l00432"></a><span class="lineno"> 432</span>  BYTES_TO_T_UINT_8( 0x6C, 0x5C, 0xDC, 0x26, 0xC1, 0x55, 0x80, 0xFB ),</div>
<div class="line"><a name="l00433"></a><span class="lineno"> 433</span>  BYTES_TO_T_UINT_8( 0xE7, 0xFF, 0x7A, 0x41, 0x30, 0x75, 0xF6, 0xEE ),</div>
<div class="line"><a name="l00434"></a><span class="lineno"> 434</span>  BYTES_TO_T_UINT_8( 0x57, 0x30, 0x2C, 0xFC, 0x75, 0x09, 0x5A, 0x7D ),</div>
<div class="line"><a name="l00435"></a><span class="lineno"> 435</span> };</div>
<div class="line"><a name="l00436"></a><span class="lineno"> 436</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> brainpoolP256r1_b[] = {</div>
<div class="line"><a name="l00437"></a><span class="lineno"> 437</span>  BYTES_TO_T_UINT_8( 0xB6, 0x07, 0x8C, 0xFF, 0x18, 0xDC, 0xCC, 0x6B ),</div>
<div class="line"><a name="l00438"></a><span class="lineno"> 438</span>  BYTES_TO_T_UINT_8( 0xCE, 0xE1, 0xF7, 0x5C, 0x29, 0x16, 0x84, 0x95 ),</div>
<div class="line"><a name="l00439"></a><span class="lineno"> 439</span>  BYTES_TO_T_UINT_8( 0xBF, 0x7C, 0xD7, 0xBB, 0xD9, 0xB5, 0x30, 0xF3 ),</div>
<div class="line"><a name="l00440"></a><span class="lineno"> 440</span>  BYTES_TO_T_UINT_8( 0x44, 0x4B, 0x4A, 0xE9, 0x6C, 0x5C, 0xDC, 0x26 ),</div>
<div class="line"><a name="l00441"></a><span class="lineno"> 441</span> };</div>
<div class="line"><a name="l00442"></a><span class="lineno"> 442</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> brainpoolP256r1_gx[] = {</div>
<div class="line"><a name="l00443"></a><span class="lineno"> 443</span>  BYTES_TO_T_UINT_8( 0x62, 0x32, 0xCE, 0x9A, 0xBD, 0x53, 0x44, 0x3A ),</div>
<div class="line"><a name="l00444"></a><span class="lineno"> 444</span>  BYTES_TO_T_UINT_8( 0xC2, 0x23, 0xBD, 0xE3, 0xE1, 0x27, 0xDE, 0xB9 ),</div>
<div class="line"><a name="l00445"></a><span class="lineno"> 445</span>  BYTES_TO_T_UINT_8( 0xAF, 0xB7, 0x81, 0xFC, 0x2F, 0x48, 0x4B, 0x2C ),</div>
<div class="line"><a name="l00446"></a><span class="lineno"> 446</span>  BYTES_TO_T_UINT_8( 0xCB, 0x57, 0x7E, 0xCB, 0xB9, 0xAE, 0xD2, 0x8B ),</div>
<div class="line"><a name="l00447"></a><span class="lineno"> 447</span> };</div>
<div class="line"><a name="l00448"></a><span class="lineno"> 448</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> brainpoolP256r1_gy[] = {</div>
<div class="line"><a name="l00449"></a><span class="lineno"> 449</span>  BYTES_TO_T_UINT_8( 0x97, 0x69, 0x04, 0x2F, 0xC7, 0x54, 0x1D, 0x5C ),</div>
<div class="line"><a name="l00450"></a><span class="lineno"> 450</span>  BYTES_TO_T_UINT_8( 0x54, 0x8E, 0xED, 0x2D, 0x13, 0x45, 0x77, 0xC2 ),</div>
<div class="line"><a name="l00451"></a><span class="lineno"> 451</span>  BYTES_TO_T_UINT_8( 0xC9, 0x1D, 0x61, 0x14, 0x1A, 0x46, 0xF8, 0x97 ),</div>
<div class="line"><a name="l00452"></a><span class="lineno"> 452</span>  BYTES_TO_T_UINT_8( 0xFD, 0xC4, 0xDA, 0xC3, 0x35, 0xF8, 0x7E, 0x54 ),</div>
<div class="line"><a name="l00453"></a><span class="lineno"> 453</span> };</div>
<div class="line"><a name="l00454"></a><span class="lineno"> 454</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> brainpoolP256r1_n[] = {</div>
<div class="line"><a name="l00455"></a><span class="lineno"> 455</span>  BYTES_TO_T_UINT_8( 0xA7, 0x56, 0x48, 0x97, 0x82, 0x0E, 0x1E, 0x90 ),</div>
<div class="line"><a name="l00456"></a><span class="lineno"> 456</span>  BYTES_TO_T_UINT_8( 0xF7, 0xA6, 0x61, 0xB5, 0xA3, 0x7A, 0x39, 0x8C ),</div>
<div class="line"><a name="l00457"></a><span class="lineno"> 457</span>  BYTES_TO_T_UINT_8( 0x71, 0x8D, 0x83, 0x9D, 0x90, 0x0A, 0x66, 0x3E ),</div>
<div class="line"><a name="l00458"></a><span class="lineno"> 458</span>  BYTES_TO_T_UINT_8( 0xBC, 0xA9, 0xEE, 0xA1, 0xDB, 0x57, 0xFB, 0xA9 ),</div>
<div class="line"><a name="l00459"></a><span class="lineno"> 459</span> };</div>
<div class="line"><a name="l00460"></a><span class="lineno"> 460</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_BP256R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00461"></a><span class="lineno"> 461</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00462"></a><span class="lineno"> 462</span> <span class="comment">/*</span></div>
<div class="line"><a name="l00463"></a><span class="lineno"> 463</span> <span class="comment"> * Domain parameters for brainpoolP384r1 (RFC 5639 3.6)</span></div>
<div class="line"><a name="l00464"></a><span class="lineno"> 464</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00465"></a><span class="lineno"> 465</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_BP384R1_ENABLED)</span></div>
<div class="line"><a name="l00466"></a><span class="lineno"> 466</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> brainpoolP384r1_p[] = {</div>
<div class="line"><a name="l00467"></a><span class="lineno"> 467</span>  BYTES_TO_T_UINT_8( 0x53, 0xEC, 0x07, 0x31, 0x13, 0x00, 0x47, 0x87 ),</div>
<div class="line"><a name="l00468"></a><span class="lineno"> 468</span>  BYTES_TO_T_UINT_8( 0x71, 0x1A, 0x1D, 0x90, 0x29, 0xA7, 0xD3, 0xAC ),</div>
<div class="line"><a name="l00469"></a><span class="lineno"> 469</span>  BYTES_TO_T_UINT_8( 0x23, 0x11, 0xB7, 0x7F, 0x19, 0xDA, 0xB1, 0x12 ),</div>
<div class="line"><a name="l00470"></a><span class="lineno"> 470</span>  BYTES_TO_T_UINT_8( 0xB4, 0x56, 0x54, 0xED, 0x09, 0x71, 0x2F, 0x15 ),</div>
<div class="line"><a name="l00471"></a><span class="lineno"> 471</span>  BYTES_TO_T_UINT_8( 0xDF, 0x41, 0xE6, 0x50, 0x7E, 0x6F, 0x5D, 0x0F ),</div>
<div class="line"><a name="l00472"></a><span class="lineno"> 472</span>  BYTES_TO_T_UINT_8( 0x28, 0x6D, 0x38, 0xA3, 0x82, 0x1E, 0xB9, 0x8C ),</div>
<div class="line"><a name="l00473"></a><span class="lineno"> 473</span> };</div>
<div class="line"><a name="l00474"></a><span class="lineno"> 474</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> brainpoolP384r1_a[] = {</div>
<div class="line"><a name="l00475"></a><span class="lineno"> 475</span>  BYTES_TO_T_UINT_8( 0x26, 0x28, 0xCE, 0x22, 0xDD, 0xC7, 0xA8, 0x04 ),</div>
<div class="line"><a name="l00476"></a><span class="lineno"> 476</span>  BYTES_TO_T_UINT_8( 0xEB, 0xD4, 0x3A, 0x50, 0x4A, 0x81, 0xA5, 0x8A ),</div>
<div class="line"><a name="l00477"></a><span class="lineno"> 477</span>  BYTES_TO_T_UINT_8( 0x0F, 0xF9, 0x91, 0xBA, 0xEF, 0x65, 0x91, 0x13 ),</div>
<div class="line"><a name="l00478"></a><span class="lineno"> 478</span>  BYTES_TO_T_UINT_8( 0x87, 0x27, 0xB2, 0x4F, 0x8E, 0xA2, 0xBE, 0xC2 ),</div>
<div class="line"><a name="l00479"></a><span class="lineno"> 479</span>  BYTES_TO_T_UINT_8( 0xA0, 0xAF, 0x05, 0xCE, 0x0A, 0x08, 0x72, 0x3C ),</div>
<div class="line"><a name="l00480"></a><span class="lineno"> 480</span>  BYTES_TO_T_UINT_8( 0x0C, 0x15, 0x8C, 0x3D, 0xC6, 0x82, 0xC3, 0x7B ),</div>
<div class="line"><a name="l00481"></a><span class="lineno"> 481</span> };</div>
<div class="line"><a name="l00482"></a><span class="lineno"> 482</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> brainpoolP384r1_b[] = {</div>
<div class="line"><a name="l00483"></a><span class="lineno"> 483</span>  BYTES_TO_T_UINT_8( 0x11, 0x4C, 0x50, 0xFA, 0x96, 0x86, 0xB7, 0x3A ),</div>
<div class="line"><a name="l00484"></a><span class="lineno"> 484</span>  BYTES_TO_T_UINT_8( 0x94, 0xC9, 0xDB, 0x95, 0x02, 0x39, 0xB4, 0x7C ),</div>
<div class="line"><a name="l00485"></a><span class="lineno"> 485</span>  BYTES_TO_T_UINT_8( 0xD5, 0x62, 0xEB, 0x3E, 0xA5, 0x0E, 0x88, 0x2E ),</div>
<div class="line"><a name="l00486"></a><span class="lineno"> 486</span>  BYTES_TO_T_UINT_8( 0xA6, 0xD2, 0xDC, 0x07, 0xE1, 0x7D, 0xB7, 0x2F ),</div>
<div class="line"><a name="l00487"></a><span class="lineno"> 487</span>  BYTES_TO_T_UINT_8( 0x7C, 0x44, 0xF0, 0x16, 0x54, 0xB5, 0x39, 0x8B ),</div>
<div class="line"><a name="l00488"></a><span class="lineno"> 488</span>  BYTES_TO_T_UINT_8( 0x26, 0x28, 0xCE, 0x22, 0xDD, 0xC7, 0xA8, 0x04 ),</div>
<div class="line"><a name="l00489"></a><span class="lineno"> 489</span> };</div>
<div class="line"><a name="l00490"></a><span class="lineno"> 490</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> brainpoolP384r1_gx[] = {</div>
<div class="line"><a name="l00491"></a><span class="lineno"> 491</span>  BYTES_TO_T_UINT_8( 0x1E, 0xAF, 0xD4, 0x47, 0xE2, 0xB2, 0x87, 0xEF ),</div>
<div class="line"><a name="l00492"></a><span class="lineno"> 492</span>  BYTES_TO_T_UINT_8( 0xAA, 0x46, 0xD6, 0x36, 0x34, 0xE0, 0x26, 0xE8 ),</div>
<div class="line"><a name="l00493"></a><span class="lineno"> 493</span>  BYTES_TO_T_UINT_8( 0xE8, 0x10, 0xBD, 0x0C, 0xFE, 0xCA, 0x7F, 0xDB ),</div>
<div class="line"><a name="l00494"></a><span class="lineno"> 494</span>  BYTES_TO_T_UINT_8( 0xE3, 0x4F, 0xF1, 0x7E, 0xE7, 0xA3, 0x47, 0x88 ),</div>
<div class="line"><a name="l00495"></a><span class="lineno"> 495</span>  BYTES_TO_T_UINT_8( 0x6B, 0x3F, 0xC1, 0xB7, 0x81, 0x3A, 0xA6, 0xA2 ),</div>
<div class="line"><a name="l00496"></a><span class="lineno"> 496</span>  BYTES_TO_T_UINT_8( 0xFF, 0x45, 0xCF, 0x68, 0xF0, 0x64, 0x1C, 0x1D ),</div>
<div class="line"><a name="l00497"></a><span class="lineno"> 497</span> };</div>
<div class="line"><a name="l00498"></a><span class="lineno"> 498</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> brainpoolP384r1_gy[] = {</div>
<div class="line"><a name="l00499"></a><span class="lineno"> 499</span>  BYTES_TO_T_UINT_8( 0x15, 0x53, 0x3C, 0x26, 0x41, 0x03, 0x82, 0x42 ),</div>
<div class="line"><a name="l00500"></a><span class="lineno"> 500</span>  BYTES_TO_T_UINT_8( 0x11, 0x81, 0x91, 0x77, 0x21, 0x46, 0x46, 0x0E ),</div>
<div class="line"><a name="l00501"></a><span class="lineno"> 501</span>  BYTES_TO_T_UINT_8( 0x28, 0x29, 0x91, 0xF9, 0x4F, 0x05, 0x9C, 0xE1 ),</div>
<div class="line"><a name="l00502"></a><span class="lineno"> 502</span>  BYTES_TO_T_UINT_8( 0x64, 0x58, 0xEC, 0xFE, 0x29, 0x0B, 0xB7, 0x62 ),</div>
<div class="line"><a name="l00503"></a><span class="lineno"> 503</span>  BYTES_TO_T_UINT_8( 0x52, 0xD5, 0xCF, 0x95, 0x8E, 0xEB, 0xB1, 0x5C ),</div>
<div class="line"><a name="l00504"></a><span class="lineno"> 504</span>  BYTES_TO_T_UINT_8( 0xA4, 0xC2, 0xF9, 0x20, 0x75, 0x1D, 0xBE, 0x8A ),</div>
<div class="line"><a name="l00505"></a><span class="lineno"> 505</span> };</div>
<div class="line"><a name="l00506"></a><span class="lineno"> 506</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> brainpoolP384r1_n[] = {</div>
<div class="line"><a name="l00507"></a><span class="lineno"> 507</span>  BYTES_TO_T_UINT_8( 0x65, 0x65, 0x04, 0xE9, 0x02, 0x32, 0x88, 0x3B ),</div>
<div class="line"><a name="l00508"></a><span class="lineno"> 508</span>  BYTES_TO_T_UINT_8( 0x10, 0xC3, 0x7F, 0x6B, 0xAF, 0xB6, 0x3A, 0xCF ),</div>
<div class="line"><a name="l00509"></a><span class="lineno"> 509</span>  BYTES_TO_T_UINT_8( 0xA7, 0x25, 0x04, 0xAC, 0x6C, 0x6E, 0x16, 0x1F ),</div>
<div class="line"><a name="l00510"></a><span class="lineno"> 510</span>  BYTES_TO_T_UINT_8( 0xB3, 0x56, 0x54, 0xED, 0x09, 0x71, 0x2F, 0x15 ),</div>
<div class="line"><a name="l00511"></a><span class="lineno"> 511</span>  BYTES_TO_T_UINT_8( 0xDF, 0x41, 0xE6, 0x50, 0x7E, 0x6F, 0x5D, 0x0F ),</div>
<div class="line"><a name="l00512"></a><span class="lineno"> 512</span>  BYTES_TO_T_UINT_8( 0x28, 0x6D, 0x38, 0xA3, 0x82, 0x1E, 0xB9, 0x8C ),</div>
<div class="line"><a name="l00513"></a><span class="lineno"> 513</span> };</div>
<div class="line"><a name="l00514"></a><span class="lineno"> 514</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_BP384R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00515"></a><span class="lineno"> 515</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00516"></a><span class="lineno"> 516</span> <span class="comment">/*</span></div>
<div class="line"><a name="l00517"></a><span class="lineno"> 517</span> <span class="comment"> * Domain parameters for brainpoolP512r1 (RFC 5639 3.7)</span></div>
<div class="line"><a name="l00518"></a><span class="lineno"> 518</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00519"></a><span class="lineno"> 519</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_BP512R1_ENABLED)</span></div>
<div class="line"><a name="l00520"></a><span class="lineno"> 520</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> brainpoolP512r1_p[] = {</div>
<div class="line"><a name="l00521"></a><span class="lineno"> 521</span>  BYTES_TO_T_UINT_8( 0xF3, 0x48, 0x3A, 0x58, 0x56, 0x60, 0xAA, 0x28 ),</div>
<div class="line"><a name="l00522"></a><span class="lineno"> 522</span>  BYTES_TO_T_UINT_8( 0x85, 0xC6, 0x82, 0x2D, 0x2F, 0xFF, 0x81, 0x28 ),</div>
<div class="line"><a name="l00523"></a><span class="lineno"> 523</span>  BYTES_TO_T_UINT_8( 0xE6, 0x80, 0xA3, 0xE6, 0x2A, 0xA1, 0xCD, 0xAE ),</div>
<div class="line"><a name="l00524"></a><span class="lineno"> 524</span>  BYTES_TO_T_UINT_8( 0x42, 0x68, 0xC6, 0x9B, 0x00, 0x9B, 0x4D, 0x7D ),</div>
<div class="line"><a name="l00525"></a><span class="lineno"> 525</span>  BYTES_TO_T_UINT_8( 0x71, 0x08, 0x33, 0x70, 0xCA, 0x9C, 0x63, 0xD6 ),</div>
<div class="line"><a name="l00526"></a><span class="lineno"> 526</span>  BYTES_TO_T_UINT_8( 0x0E, 0xD2, 0xC9, 0xB3, 0xB3, 0x8D, 0x30, 0xCB ),</div>
<div class="line"><a name="l00527"></a><span class="lineno"> 527</span>  BYTES_TO_T_UINT_8( 0x07, 0xFC, 0xC9, 0x33, 0xAE, 0xE6, 0xD4, 0x3F ),</div>
<div class="line"><a name="l00528"></a><span class="lineno"> 528</span>  BYTES_TO_T_UINT_8( 0x8B, 0xC4, 0xE9, 0xDB, 0xB8, 0x9D, 0xDD, 0xAA ),</div>
<div class="line"><a name="l00529"></a><span class="lineno"> 529</span> };</div>
<div class="line"><a name="l00530"></a><span class="lineno"> 530</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> brainpoolP512r1_a[] = {</div>
<div class="line"><a name="l00531"></a><span class="lineno"> 531</span>  BYTES_TO_T_UINT_8( 0xCA, 0x94, 0xFC, 0x77, 0x4D, 0xAC, 0xC1, 0xE7 ),</div>
<div class="line"><a name="l00532"></a><span class="lineno"> 532</span>  BYTES_TO_T_UINT_8( 0xB9, 0xC7, 0xF2, 0x2B, 0xA7, 0x17, 0x11, 0x7F ),</div>
<div class="line"><a name="l00533"></a><span class="lineno"> 533</span>  BYTES_TO_T_UINT_8( 0xB5, 0xC8, 0x9A, 0x8B, 0xC9, 0xF1, 0x2E, 0x0A ),</div>
<div class="line"><a name="l00534"></a><span class="lineno"> 534</span>  BYTES_TO_T_UINT_8( 0xA1, 0x3A, 0x25, 0xA8, 0x5A, 0x5D, 0xED, 0x2D ),</div>
<div class="line"><a name="l00535"></a><span class="lineno"> 535</span>  BYTES_TO_T_UINT_8( 0xBC, 0x63, 0x98, 0xEA, 0xCA, 0x41, 0x34, 0xA8 ),</div>
<div class="line"><a name="l00536"></a><span class="lineno"> 536</span>  BYTES_TO_T_UINT_8( 0x10, 0x16, 0xF9, 0x3D, 0x8D, 0xDD, 0xCB, 0x94 ),</div>
<div class="line"><a name="l00537"></a><span class="lineno"> 537</span>  BYTES_TO_T_UINT_8( 0xC5, 0x4C, 0x23, 0xAC, 0x45, 0x71, 0x32, 0xE2 ),</div>
<div class="line"><a name="l00538"></a><span class="lineno"> 538</span>  BYTES_TO_T_UINT_8( 0x89, 0x3B, 0x60, 0x8B, 0x31, 0xA3, 0x30, 0x78 ),</div>
<div class="line"><a name="l00539"></a><span class="lineno"> 539</span> };</div>
<div class="line"><a name="l00540"></a><span class="lineno"> 540</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> brainpoolP512r1_b[] = {</div>
<div class="line"><a name="l00541"></a><span class="lineno"> 541</span>  BYTES_TO_T_UINT_8( 0x23, 0xF7, 0x16, 0x80, 0x63, 0xBD, 0x09, 0x28 ),</div>
<div class="line"><a name="l00542"></a><span class="lineno"> 542</span>  BYTES_TO_T_UINT_8( 0xDD, 0xE5, 0xBA, 0x5E, 0xB7, 0x50, 0x40, 0x98 ),</div>
<div class="line"><a name="l00543"></a><span class="lineno"> 543</span>  BYTES_TO_T_UINT_8( 0x67, 0x3E, 0x08, 0xDC, 0xCA, 0x94, 0xFC, 0x77 ),</div>
<div class="line"><a name="l00544"></a><span class="lineno"> 544</span>  BYTES_TO_T_UINT_8( 0x4D, 0xAC, 0xC1, 0xE7, 0xB9, 0xC7, 0xF2, 0x2B ),</div>
<div class="line"><a name="l00545"></a><span class="lineno"> 545</span>  BYTES_TO_T_UINT_8( 0xA7, 0x17, 0x11, 0x7F, 0xB5, 0xC8, 0x9A, 0x8B ),</div>
<div class="line"><a name="l00546"></a><span class="lineno"> 546</span>  BYTES_TO_T_UINT_8( 0xC9, 0xF1, 0x2E, 0x0A, 0xA1, 0x3A, 0x25, 0xA8 ),</div>
<div class="line"><a name="l00547"></a><span class="lineno"> 547</span>  BYTES_TO_T_UINT_8( 0x5A, 0x5D, 0xED, 0x2D, 0xBC, 0x63, 0x98, 0xEA ),</div>
<div class="line"><a name="l00548"></a><span class="lineno"> 548</span>  BYTES_TO_T_UINT_8( 0xCA, 0x41, 0x34, 0xA8, 0x10, 0x16, 0xF9, 0x3D ),</div>
<div class="line"><a name="l00549"></a><span class="lineno"> 549</span> };</div>
<div class="line"><a name="l00550"></a><span class="lineno"> 550</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> brainpoolP512r1_gx[] = {</div>
<div class="line"><a name="l00551"></a><span class="lineno"> 551</span>  BYTES_TO_T_UINT_8( 0x22, 0xF8, 0xB9, 0xBC, 0x09, 0x22, 0x35, 0x8B ),</div>
<div class="line"><a name="l00552"></a><span class="lineno"> 552</span>  BYTES_TO_T_UINT_8( 0x68, 0x5E, 0x6A, 0x40, 0x47, 0x50, 0x6D, 0x7C ),</div>
<div class="line"><a name="l00553"></a><span class="lineno"> 553</span>  BYTES_TO_T_UINT_8( 0x5F, 0x7D, 0xB9, 0x93, 0x7B, 0x68, 0xD1, 0x50 ),</div>
<div class="line"><a name="l00554"></a><span class="lineno"> 554</span>  BYTES_TO_T_UINT_8( 0x8D, 0xD4, 0xD0, 0xE2, 0x78, 0x1F, 0x3B, 0xFF ),</div>
<div class="line"><a name="l00555"></a><span class="lineno"> 555</span>  BYTES_TO_T_UINT_8( 0x8E, 0x09, 0xD0, 0xF4, 0xEE, 0x62, 0x3B, 0xB4 ),</div>
<div class="line"><a name="l00556"></a><span class="lineno"> 556</span>  BYTES_TO_T_UINT_8( 0xC1, 0x16, 0xD9, 0xB5, 0x70, 0x9F, 0xED, 0x85 ),</div>
<div class="line"><a name="l00557"></a><span class="lineno"> 557</span>  BYTES_TO_T_UINT_8( 0x93, 0x6A, 0x4C, 0x9C, 0x2E, 0x32, 0x21, 0x5A ),</div>
<div class="line"><a name="l00558"></a><span class="lineno"> 558</span>  BYTES_TO_T_UINT_8( 0x64, 0xD9, 0x2E, 0xD8, 0xBD, 0xE4, 0xAE, 0x81 ),</div>
<div class="line"><a name="l00559"></a><span class="lineno"> 559</span> };</div>
<div class="line"><a name="l00560"></a><span class="lineno"> 560</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> brainpoolP512r1_gy[] = {</div>
<div class="line"><a name="l00561"></a><span class="lineno"> 561</span>  BYTES_TO_T_UINT_8( 0x92, 0x08, 0xD8, 0x3A, 0x0F, 0x1E, 0xCD, 0x78 ),</div>
<div class="line"><a name="l00562"></a><span class="lineno"> 562</span>  BYTES_TO_T_UINT_8( 0x06, 0x54, 0xF0, 0xA8, 0x2F, 0x2B, 0xCA, 0xD1 ),</div>
<div class="line"><a name="l00563"></a><span class="lineno"> 563</span>  BYTES_TO_T_UINT_8( 0xAE, 0x63, 0x27, 0x8A, 0xD8, 0x4B, 0xCA, 0x5B ),</div>
<div class="line"><a name="l00564"></a><span class="lineno"> 564</span>  BYTES_TO_T_UINT_8( 0x5E, 0x48, 0x5F, 0x4A, 0x49, 0xDE, 0xDC, 0xB2 ),</div>
<div class="line"><a name="l00565"></a><span class="lineno"> 565</span>  BYTES_TO_T_UINT_8( 0x11, 0x81, 0x1F, 0x88, 0x5B, 0xC5, 0x00, 0xA0 ),</div>
<div class="line"><a name="l00566"></a><span class="lineno"> 566</span>  BYTES_TO_T_UINT_8( 0x1A, 0x7B, 0xA5, 0x24, 0x00, 0xF7, 0x09, 0xF2 ),</div>
<div class="line"><a name="l00567"></a><span class="lineno"> 567</span>  BYTES_TO_T_UINT_8( 0xFD, 0x22, 0x78, 0xCF, 0xA9, 0xBF, 0xEA, 0xC0 ),</div>
<div class="line"><a name="l00568"></a><span class="lineno"> 568</span>  BYTES_TO_T_UINT_8( 0xEC, 0x32, 0x63, 0x56, 0x5D, 0x38, 0xDE, 0x7D ),</div>
<div class="line"><a name="l00569"></a><span class="lineno"> 569</span> };</div>
<div class="line"><a name="l00570"></a><span class="lineno"> 570</span> <span class="keyword">static</span> <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> brainpoolP512r1_n[] = {</div>
<div class="line"><a name="l00571"></a><span class="lineno"> 571</span>  BYTES_TO_T_UINT_8( 0x69, 0x00, 0xA9, 0x9C, 0x82, 0x96, 0x87, 0xB5 ),</div>
<div class="line"><a name="l00572"></a><span class="lineno"> 572</span>  BYTES_TO_T_UINT_8( 0xDD, 0xDA, 0x5D, 0x08, 0x81, 0xD3, 0xB1, 0x1D ),</div>
<div class="line"><a name="l00573"></a><span class="lineno"> 573</span>  BYTES_TO_T_UINT_8( 0x47, 0x10, 0xAC, 0x7F, 0x19, 0x61, 0x86, 0x41 ),</div>
<div class="line"><a name="l00574"></a><span class="lineno"> 574</span>  BYTES_TO_T_UINT_8( 0x19, 0x26, 0xA9, 0x4C, 0x41, 0x5C, 0x3E, 0x55 ),</div>
<div class="line"><a name="l00575"></a><span class="lineno"> 575</span>  BYTES_TO_T_UINT_8( 0x70, 0x08, 0x33, 0x70, 0xCA, 0x9C, 0x63, 0xD6 ),</div>
<div class="line"><a name="l00576"></a><span class="lineno"> 576</span>  BYTES_TO_T_UINT_8( 0x0E, 0xD2, 0xC9, 0xB3, 0xB3, 0x8D, 0x30, 0xCB ),</div>
<div class="line"><a name="l00577"></a><span class="lineno"> 577</span>  BYTES_TO_T_UINT_8( 0x07, 0xFC, 0xC9, 0x33, 0xAE, 0xE6, 0xD4, 0x3F ),</div>
<div class="line"><a name="l00578"></a><span class="lineno"> 578</span>  BYTES_TO_T_UINT_8( 0x8B, 0xC4, 0xE9, 0xDB, 0xB8, 0x9D, 0xDD, 0xAA ),</div>
<div class="line"><a name="l00579"></a><span class="lineno"> 579</span> };</div>
<div class="line"><a name="l00580"></a><span class="lineno"> 580</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_BP512R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00581"></a><span class="lineno"> 581</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00582"></a><span class="lineno"> 582</span> <span class="comment">/*</span></div>
<div class="line"><a name="l00583"></a><span class="lineno"> 583</span> <span class="comment"> * Create an MPI from embedded constants</span></div>
<div class="line"><a name="l00584"></a><span class="lineno"> 584</span> <span class="comment"> * (assumes len is an exact multiple of sizeof t_uint)</span></div>
<div class="line"><a name="l00585"></a><span class="lineno"> 585</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00586"></a><span class="lineno"> 586</span> <span class="keyword">static</span> <span class="keyword">inline</span> <span class="keywordtype">void</span> ecp_mpi_load( <a class="code" href="structmpi.html">mpi</a> *X, <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> *p, <span class="keywordtype">size_t</span> len )</div>
<div class="line"><a name="l00587"></a><span class="lineno"> 587</span> {</div>
<div class="line"><a name="l00588"></a><span class="lineno"> 588</span>  X-><a class="code" href="structmpi.html#ad44e921903bdc7fcc1cadad14784a59a">s</a> = 1;</div>
<div class="line"><a name="l00589"></a><span class="lineno"> 589</span>  X-><a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> = len / <span class="keyword">sizeof</span>( <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> );</div>
<div class="line"><a name="l00590"></a><span class="lineno"> 590</span>  X-><a class="code" href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">p</a> = (<a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> *) p;</div>
<div class="line"><a name="l00591"></a><span class="lineno"> 591</span> }</div>
<div class="line"><a name="l00592"></a><span class="lineno"> 592</span> </div>
<div class="line"><a name="l00593"></a><span class="lineno"> 593</span> <span class="comment">/*</span></div>
<div class="line"><a name="l00594"></a><span class="lineno"> 594</span> <span class="comment"> * Set an MPI to static value 1</span></div>
<div class="line"><a name="l00595"></a><span class="lineno"> 595</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00596"></a><span class="lineno"> 596</span> <span class="keyword">static</span> <span class="keyword">inline</span> <span class="keywordtype">void</span> ecp_mpi_set1( <a class="code" href="structmpi.html">mpi</a> *X )</div>
<div class="line"><a name="l00597"></a><span class="lineno"> 597</span> {</div>
<div class="line"><a name="l00598"></a><span class="lineno"> 598</span>  <span class="keyword">static</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> one[] = { 1 };</div>
<div class="line"><a name="l00599"></a><span class="lineno"> 599</span>  X-><a class="code" href="structmpi.html#ad44e921903bdc7fcc1cadad14784a59a">s</a> = 1;</div>
<div class="line"><a name="l00600"></a><span class="lineno"> 600</span>  X-><a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> = 1;</div>
<div class="line"><a name="l00601"></a><span class="lineno"> 601</span>  X-><a class="code" href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">p</a> = one;</div>
<div class="line"><a name="l00602"></a><span class="lineno"> 602</span> }</div>
<div class="line"><a name="l00603"></a><span class="lineno"> 603</span> </div>
<div class="line"><a name="l00604"></a><span class="lineno"> 604</span> <span class="comment">/*</span></div>
<div class="line"><a name="l00605"></a><span class="lineno"> 605</span> <span class="comment"> * Make group available from embedded constants</span></div>
<div class="line"><a name="l00606"></a><span class="lineno"> 606</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00607"></a><span class="lineno"> 607</span> <span class="keyword">static</span> <span class="keywordtype">int</span> ecp_group_load( <a class="code" href="structecp__group.html">ecp_group</a> *grp,</div>
<div class="line"><a name="l00608"></a><span class="lineno"> 608</span>  <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> *p, <span class="keywordtype">size_t</span> plen,</div>
<div class="line"><a name="l00609"></a><span class="lineno"> 609</span>  <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> *a, <span class="keywordtype">size_t</span> alen,</div>
<div class="line"><a name="l00610"></a><span class="lineno"> 610</span>  <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> *b, <span class="keywordtype">size_t</span> blen,</div>
<div class="line"><a name="l00611"></a><span class="lineno"> 611</span>  <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> *gx, <span class="keywordtype">size_t</span> gxlen,</div>
<div class="line"><a name="l00612"></a><span class="lineno"> 612</span>  <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> *gy, <span class="keywordtype">size_t</span> gylen,</div>
<div class="line"><a name="l00613"></a><span class="lineno"> 613</span>  <span class="keyword">const</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> *n, <span class="keywordtype">size_t</span> nlen)</div>
<div class="line"><a name="l00614"></a><span class="lineno"> 614</span> {</div>
<div class="line"><a name="l00615"></a><span class="lineno"> 615</span>  ecp_mpi_load( &grp-><a class="code" href="structecp__group.html#aa743e0f6bdba64120247a92f8edf1318">P</a>, p, plen );</div>
<div class="line"><a name="l00616"></a><span class="lineno"> 616</span>  <span class="keywordflow">if</span>( a != NULL )</div>
<div class="line"><a name="l00617"></a><span class="lineno"> 617</span>  ecp_mpi_load( &grp-><a class="code" href="structecp__group.html#a1164b1ffac0af85f9bc89b35497036f9">A</a>, a, alen );</div>
<div class="line"><a name="l00618"></a><span class="lineno"> 618</span>  ecp_mpi_load( &grp-><a class="code" href="structecp__group.html#a83383f769f7a7b0067bd8eb237b30bec">B</a>, b, blen );</div>
<div class="line"><a name="l00619"></a><span class="lineno"> 619</span>  ecp_mpi_load( &grp-><a class="code" href="structecp__group.html#a6b424e0dbad7d3c900375a2ff0154b95">N</a>, n, nlen );</div>
<div class="line"><a name="l00620"></a><span class="lineno"> 620</span> </div>
<div class="line"><a name="l00621"></a><span class="lineno"> 621</span>  ecp_mpi_load( &grp-><a class="code" href="structecp__group.html#adb738e2c6df3c75c4b30b2b1c3e61256">G</a>.<a class="code" href="structecp__point.html#ad22ad099567064b38af5a1f2f58f0acc">X</a>, gx, gxlen );</div>
<div class="line"><a name="l00622"></a><span class="lineno"> 622</span>  ecp_mpi_load( &grp-><a class="code" href="structecp__group.html#adb738e2c6df3c75c4b30b2b1c3e61256">G</a>.<a class="code" href="structecp__point.html#a2fb634222dcf49c352f922a1b07e254e">Y</a>, gy, gylen );</div>
<div class="line"><a name="l00623"></a><span class="lineno"> 623</span>  ecp_mpi_set1( &grp-><a class="code" href="structecp__group.html#adb738e2c6df3c75c4b30b2b1c3e61256">G</a>.<a class="code" href="structecp__point.html#a9770fb9d831f0b15c8bda07600ee8144">Z</a> );</div>
<div class="line"><a name="l00624"></a><span class="lineno"> 624</span> </div>
<div class="line"><a name="l00625"></a><span class="lineno"> 625</span>  grp-><a class="code" href="structecp__group.html#a3a813481e3d2548e372bab92c50f4d48">pbits</a> = <a class="code" href="bignum_8h.html#a4d461a7bff5a31df34bbf93ec00ab886">mpi_msb</a>( &grp-><a class="code" href="structecp__group.html#aa743e0f6bdba64120247a92f8edf1318">P</a> );</div>
<div class="line"><a name="l00626"></a><span class="lineno"> 626</span>  grp-><a class="code" href="structecp__group.html#a372ef0b2cbf3232760e108e5b97c8a3e">nbits</a> = <a class="code" href="bignum_8h.html#a4d461a7bff5a31df34bbf93ec00ab886">mpi_msb</a>( &grp-><a class="code" href="structecp__group.html#a6b424e0dbad7d3c900375a2ff0154b95">N</a> );</div>
<div class="line"><a name="l00627"></a><span class="lineno"> 627</span> </div>
<div class="line"><a name="l00628"></a><span class="lineno"> 628</span>  grp-><a class="code" href="structecp__group.html#af88943414b51c063db7077e833a3f293">h</a> = 1;</div>
<div class="line"><a name="l00629"></a><span class="lineno"> 629</span> </div>
<div class="line"><a name="l00630"></a><span class="lineno"> 630</span>  <span class="keywordflow">return</span>( 0 );</div>
<div class="line"><a name="l00631"></a><span class="lineno"> 631</span> }</div>
<div class="line"><a name="l00632"></a><span class="lineno"> 632</span> </div>
<div class="line"><a name="l00633"></a><span class="lineno"> 633</span> <span class="preprocessor">#if defined(POLARSSL_ECP_NIST_OPTIM)</span></div>
<div class="line"><a name="l00634"></a><span class="lineno"> 634</span> <span class="preprocessor"></span><span class="comment">/* Forward declarations */</span></div>
<div class="line"><a name="l00635"></a><span class="lineno"> 635</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP192R1_ENABLED)</span></div>
<div class="line"><a name="l00636"></a><span class="lineno"> 636</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keywordtype">int</span> ecp_mod_p192( <a class="code" href="structmpi.html">mpi</a> * );</div>
<div class="line"><a name="l00637"></a><span class="lineno"> 637</span> <span class="preprocessor">#endif</span></div>
<div class="line"><a name="l00638"></a><span class="lineno"> 638</span> <span class="preprocessor"></span><span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP224R1_ENABLED)</span></div>
<div class="line"><a name="l00639"></a><span class="lineno"> 639</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keywordtype">int</span> ecp_mod_p224( <a class="code" href="structmpi.html">mpi</a> * );</div>
<div class="line"><a name="l00640"></a><span class="lineno"> 640</span> <span class="preprocessor">#endif</span></div>
<div class="line"><a name="l00641"></a><span class="lineno"> 641</span> <span class="preprocessor"></span><span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP256R1_ENABLED)</span></div>
<div class="line"><a name="l00642"></a><span class="lineno"> 642</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keywordtype">int</span> ecp_mod_p256( <a class="code" href="structmpi.html">mpi</a> * );</div>
<div class="line"><a name="l00643"></a><span class="lineno"> 643</span> <span class="preprocessor">#endif</span></div>
<div class="line"><a name="l00644"></a><span class="lineno"> 644</span> <span class="preprocessor"></span><span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP384R1_ENABLED)</span></div>
<div class="line"><a name="l00645"></a><span class="lineno"> 645</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keywordtype">int</span> ecp_mod_p384( <a class="code" href="structmpi.html">mpi</a> * );</div>
<div class="line"><a name="l00646"></a><span class="lineno"> 646</span> <span class="preprocessor">#endif</span></div>
<div class="line"><a name="l00647"></a><span class="lineno"> 647</span> <span class="preprocessor"></span><span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP521R1_ENABLED)</span></div>
<div class="line"><a name="l00648"></a><span class="lineno"> 648</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keywordtype">int</span> ecp_mod_p521( <a class="code" href="structmpi.html">mpi</a> * );</div>
<div class="line"><a name="l00649"></a><span class="lineno"> 649</span> <span class="preprocessor">#endif</span></div>
<div class="line"><a name="l00650"></a><span class="lineno"> 650</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00651"></a><span class="lineno"> 651</span> <span class="preprocessor">#define NIST_MODP( P ) grp->modp = ecp_mod_ ## P;</span></div>
<div class="line"><a name="l00652"></a><span class="lineno"> 652</span> <span class="preprocessor"></span><span class="preprocessor">#else</span></div>
<div class="line"><a name="l00653"></a><span class="lineno"> 653</span> <span class="preprocessor"></span><span class="preprocessor">#define NIST_MODP( P )</span></div>
<div class="line"><a name="l00654"></a><span class="lineno"> 654</span> <span class="preprocessor"></span><span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_NIST_OPTIM */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00655"></a><span class="lineno"> 655</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00656"></a><span class="lineno"> 656</span> <span class="comment">/* Additional forward declarations */</span></div>
<div class="line"><a name="l00657"></a><span class="lineno"> 657</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_M255_ENABLED)</span></div>
<div class="line"><a name="l00658"></a><span class="lineno"> 658</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keywordtype">int</span> ecp_mod_p255( <a class="code" href="structmpi.html">mpi</a> * );</div>
<div class="line"><a name="l00659"></a><span class="lineno"> 659</span> <span class="preprocessor">#endif</span></div>
<div class="line"><a name="l00660"></a><span class="lineno"> 660</span> <span class="preprocessor"></span><span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP192K1_ENABLED)</span></div>
<div class="line"><a name="l00661"></a><span class="lineno"> 661</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keywordtype">int</span> ecp_mod_p192k1( <a class="code" href="structmpi.html">mpi</a> * );</div>
<div class="line"><a name="l00662"></a><span class="lineno"> 662</span> <span class="preprocessor">#endif</span></div>
<div class="line"><a name="l00663"></a><span class="lineno"> 663</span> <span class="preprocessor"></span><span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP224K1_ENABLED)</span></div>
<div class="line"><a name="l00664"></a><span class="lineno"> 664</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keywordtype">int</span> ecp_mod_p224k1( <a class="code" href="structmpi.html">mpi</a> * );</div>
<div class="line"><a name="l00665"></a><span class="lineno"> 665</span> <span class="preprocessor">#endif</span></div>
<div class="line"><a name="l00666"></a><span class="lineno"> 666</span> <span class="preprocessor"></span><span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP256K1_ENABLED)</span></div>
<div class="line"><a name="l00667"></a><span class="lineno"> 667</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keywordtype">int</span> ecp_mod_p256k1( <a class="code" href="structmpi.html">mpi</a> * );</div>
<div class="line"><a name="l00668"></a><span class="lineno"> 668</span> <span class="preprocessor">#endif</span></div>
<div class="line"><a name="l00669"></a><span class="lineno"> 669</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00670"></a><span class="lineno"> 670</span> <span class="preprocessor">#define LOAD_GROUP_A( G ) ecp_group_load( grp, \</span></div>
<div class="line"><a name="l00671"></a><span class="lineno"> 671</span> <span class="preprocessor"> G ## _p, sizeof( G ## _p ), \</span></div>
<div class="line"><a name="l00672"></a><span class="lineno"> 672</span> <span class="preprocessor"> G ## _a, sizeof( G ## _a ), \</span></div>
<div class="line"><a name="l00673"></a><span class="lineno"> 673</span> <span class="preprocessor"> G ## _b, sizeof( G ## _b ), \</span></div>
<div class="line"><a name="l00674"></a><span class="lineno"> 674</span> <span class="preprocessor"> G ## _gx, sizeof( G ## _gx ), \</span></div>
<div class="line"><a name="l00675"></a><span class="lineno"> 675</span> <span class="preprocessor"> G ## _gy, sizeof( G ## _gy ), \</span></div>
<div class="line"><a name="l00676"></a><span class="lineno"> 676</span> <span class="preprocessor"> G ## _n, sizeof( G ## _n ) )</span></div>
<div class="line"><a name="l00677"></a><span class="lineno"> 677</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00678"></a><span class="lineno"> 678</span> <span class="preprocessor">#define LOAD_GROUP( G ) ecp_group_load( grp, \</span></div>
<div class="line"><a name="l00679"></a><span class="lineno"> 679</span> <span class="preprocessor"> G ## _p, sizeof( G ## _p ), \</span></div>
<div class="line"><a name="l00680"></a><span class="lineno"> 680</span> <span class="preprocessor"> NULL, 0, \</span></div>
<div class="line"><a name="l00681"></a><span class="lineno"> 681</span> <span class="preprocessor"> G ## _b, sizeof( G ## _b ), \</span></div>
<div class="line"><a name="l00682"></a><span class="lineno"> 682</span> <span class="preprocessor"> G ## _gx, sizeof( G ## _gx ), \</span></div>
<div class="line"><a name="l00683"></a><span class="lineno"> 683</span> <span class="preprocessor"> G ## _gy, sizeof( G ## _gy ), \</span></div>
<div class="line"><a name="l00684"></a><span class="lineno"> 684</span> <span class="preprocessor"> G ## _n, sizeof( G ## _n ) )</span></div>
<div class="line"><a name="l00685"></a><span class="lineno"> 685</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00686"></a><span class="lineno"> 686</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_M255_ENABLED)</span></div>
<div class="line"><a name="l00687"></a><span class="lineno"> 687</span> <span class="preprocessor"></span><span class="comment">/*</span></div>
<div class="line"><a name="l00688"></a><span class="lineno"> 688</span> <span class="comment"> * Specialized function for creating the Curve25519 group</span></div>
<div class="line"><a name="l00689"></a><span class="lineno"> 689</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00690"></a><span class="lineno"> 690</span> <span class="keyword">static</span> <span class="keywordtype">int</span> ecp_use_curve25519( <a class="code" href="structecp__group.html">ecp_group</a> *grp )</div>
<div class="line"><a name="l00691"></a><span class="lineno"> 691</span> {</div>
<div class="line"><a name="l00692"></a><span class="lineno"> 692</span>  <span class="keywordtype">int</span> ret;</div>
<div class="line"><a name="l00693"></a><span class="lineno"> 693</span> </div>
<div class="line"><a name="l00694"></a><span class="lineno"> 694</span>  <span class="comment">/* Actually ( A + 2 ) / 4 */</span></div>
<div class="line"><a name="l00695"></a><span class="lineno"> 695</span>  <a class="code" href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a>( <a class="code" href="bignum_8h.html#a752d12c301f4e5df56f17e9bc8d78d74">mpi_read_string</a>( &grp-><a class="code" href="structecp__group.html#a1164b1ffac0af85f9bc89b35497036f9">A</a>, 16, <span class="stringliteral">"01DB42"</span> ) );</div>
<div class="line"><a name="l00696"></a><span class="lineno"> 696</span> </div>
<div class="line"><a name="l00697"></a><span class="lineno"> 697</span>  <span class="comment">/* P = 2^255 - 19 */</span></div>
<div class="line"><a name="l00698"></a><span class="lineno"> 698</span>  <a class="code" href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a>( <a class="code" href="bignum_8h.html#a007d6236aebb0ff4a3d92ce8f525a3ae">mpi_lset</a>( &grp-><a class="code" href="structecp__group.html#aa743e0f6bdba64120247a92f8edf1318">P</a>, 1 ) );</div>
<div class="line"><a name="l00699"></a><span class="lineno"> 699</span>  <a class="code" href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a>( <a class="code" href="bignum_8h.html#a17537330dbe685ca867e52479a8ef7c3">mpi_shift_l</a>( &grp-><a class="code" href="structecp__group.html#aa743e0f6bdba64120247a92f8edf1318">P</a>, 255 ) );</div>
<div class="line"><a name="l00700"></a><span class="lineno"> 700</span>  <a class="code" href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a>( <a class="code" href="bignum_8h.html#acfdf0f6effb7f976a2f90844c492e160">mpi_sub_int</a>( &grp-><a class="code" href="structecp__group.html#aa743e0f6bdba64120247a92f8edf1318">P</a>, &grp-><a class="code" href="structecp__group.html#aa743e0f6bdba64120247a92f8edf1318">P</a>, 19 ) );</div>
<div class="line"><a name="l00701"></a><span class="lineno"> 701</span>  grp-><a class="code" href="structecp__group.html#a3a813481e3d2548e372bab92c50f4d48">pbits</a> = <a class="code" href="bignum_8h.html#a4d461a7bff5a31df34bbf93ec00ab886">mpi_msb</a>( &grp-><a class="code" href="structecp__group.html#aa743e0f6bdba64120247a92f8edf1318">P</a> );</div>
<div class="line"><a name="l00702"></a><span class="lineno"> 702</span> </div>
<div class="line"><a name="l00703"></a><span class="lineno"> 703</span>  <span class="comment">/* Y intentionaly not set, since we use x/z coordinates.</span></div>
<div class="line"><a name="l00704"></a><span class="lineno"> 704</span> <span class="comment"> * This is used as a marker to identify Montgomery curves! */</span></div>
<div class="line"><a name="l00705"></a><span class="lineno"> 705</span>  <a class="code" href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a>( <a class="code" href="bignum_8h.html#a007d6236aebb0ff4a3d92ce8f525a3ae">mpi_lset</a>( &grp-><a class="code" href="structecp__group.html#adb738e2c6df3c75c4b30b2b1c3e61256">G</a>.<a class="code" href="structecp__point.html#ad22ad099567064b38af5a1f2f58f0acc">X</a>, 9 ) );</div>
<div class="line"><a name="l00706"></a><span class="lineno"> 706</span>  <a class="code" href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a>( <a class="code" href="bignum_8h.html#a007d6236aebb0ff4a3d92ce8f525a3ae">mpi_lset</a>( &grp-><a class="code" href="structecp__group.html#adb738e2c6df3c75c4b30b2b1c3e61256">G</a>.<a class="code" href="structecp__point.html#a9770fb9d831f0b15c8bda07600ee8144">Z</a>, 1 ) );</div>
<div class="line"><a name="l00707"></a><span class="lineno"> 707</span>  <a class="code" href="bignum_8h.html#ae1f6507671587755e46bbf0afcae6a8c">mpi_free</a>( &grp-><a class="code" href="structecp__group.html#adb738e2c6df3c75c4b30b2b1c3e61256">G</a>.<a class="code" href="structecp__point.html#a2fb634222dcf49c352f922a1b07e254e">Y</a> );</div>
<div class="line"><a name="l00708"></a><span class="lineno"> 708</span> </div>
<div class="line"><a name="l00709"></a><span class="lineno"> 709</span>  <span class="comment">/* Actually, the required msb for private keys */</span></div>
<div class="line"><a name="l00710"></a><span class="lineno"> 710</span>  grp-><a class="code" href="structecp__group.html#a372ef0b2cbf3232760e108e5b97c8a3e">nbits</a> = 254;</div>
<div class="line"><a name="l00711"></a><span class="lineno"> 711</span> </div>
<div class="line"><a name="l00712"></a><span class="lineno"> 712</span> cleanup:</div>
<div class="line"><a name="l00713"></a><span class="lineno"> 713</span>  <span class="keywordflow">if</span>( ret != 0 )</div>
<div class="line"><a name="l00714"></a><span class="lineno"> 714</span>  <a class="code" href="ecp_8h.html#acbb816c782b4d903a0f0fac9b9d7e748">ecp_group_free</a>( grp );</div>
<div class="line"><a name="l00715"></a><span class="lineno"> 715</span> </div>
<div class="line"><a name="l00716"></a><span class="lineno"> 716</span>  <span class="keywordflow">return</span>( ret );</div>
<div class="line"><a name="l00717"></a><span class="lineno"> 717</span> }</div>
<div class="line"><a name="l00718"></a><span class="lineno"> 718</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_M255_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00719"></a><span class="lineno"> 719</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00720"></a><span class="lineno"> 720</span> <span class="comment">/*</span></div>
<div class="line"><a name="l00721"></a><span class="lineno"> 721</span> <span class="comment"> * Set a group using well-known domain parameters</span></div>
<div class="line"><a name="l00722"></a><span class="lineno"> 722</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00723"></a><span class="lineno"> 723</span> <span class="keywordtype">int</span> <a class="code" href="ecp_8h.html#af245b6e35c32a231e18bf335de7de774">ecp_use_known_dp</a>( <a class="code" href="structecp__group.html">ecp_group</a> *grp, <a class="code" href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2">ecp_group_id</a> <span class="keywordtype">id</span> )</div>
<div class="line"><a name="l00724"></a><span class="lineno"> 724</span> {</div>
<div class="line"><a name="l00725"></a><span class="lineno"> 725</span>  <a class="code" href="ecp_8h.html#acbb816c782b4d903a0f0fac9b9d7e748">ecp_group_free</a>( grp );</div>
<div class="line"><a name="l00726"></a><span class="lineno"> 726</span> </div>
<div class="line"><a name="l00727"></a><span class="lineno"> 727</span>  grp-><a class="code" href="structecp__group.html#a8f7b8f453c94152dcb7227639511f323">id</a> = id;</div>
<div class="line"><a name="l00728"></a><span class="lineno"> 728</span> </div>
<div class="line"><a name="l00729"></a><span class="lineno"> 729</span>  <span class="keywordflow">switch</span>( <span class="keywordtype">id</span> )</div>
<div class="line"><a name="l00730"></a><span class="lineno"> 730</span>  {</div>
<div class="line"><a name="l00731"></a><span class="lineno"> 731</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP192R1_ENABLED)</span></div>
<div class="line"><a name="l00732"></a><span class="lineno"> 732</span> <span class="preprocessor"></span> <span class="keywordflow">case</span> <a class="code" href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2ad7b0489f0d40a4f1c1b143d401977a2f">POLARSSL_ECP_DP_SECP192R1</a>:</div>
<div class="line"><a name="l00733"></a><span class="lineno"> 733</span>  NIST_MODP( p192 );</div>
<div class="line"><a name="l00734"></a><span class="lineno"> 734</span>  <span class="keywordflow">return</span>( LOAD_GROUP( secp192r1 ) );</div>
<div class="line"><a name="l00735"></a><span class="lineno"> 735</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP192R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00736"></a><span class="lineno"> 736</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00737"></a><span class="lineno"> 737</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP224R1_ENABLED)</span></div>
<div class="line"><a name="l00738"></a><span class="lineno"> 738</span> <span class="preprocessor"></span> <span class="keywordflow">case</span> <a class="code" href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2aa8b959db9beb4ac3fe805dd4caec6924">POLARSSL_ECP_DP_SECP224R1</a>:</div>
<div class="line"><a name="l00739"></a><span class="lineno"> 739</span>  NIST_MODP( p224 );</div>
<div class="line"><a name="l00740"></a><span class="lineno"> 740</span>  <span class="keywordflow">return</span>( LOAD_GROUP( secp224r1 ) );</div>
<div class="line"><a name="l00741"></a><span class="lineno"> 741</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP224R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00742"></a><span class="lineno"> 742</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00743"></a><span class="lineno"> 743</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP256R1_ENABLED)</span></div>
<div class="line"><a name="l00744"></a><span class="lineno"> 744</span> <span class="preprocessor"></span> <span class="keywordflow">case</span> <a class="code" href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2a13f6d2a908ca7d322ceb2a5d9f4dea6f">POLARSSL_ECP_DP_SECP256R1</a>:</div>
<div class="line"><a name="l00745"></a><span class="lineno"> 745</span>  NIST_MODP( p256 );</div>
<div class="line"><a name="l00746"></a><span class="lineno"> 746</span>  <span class="keywordflow">return</span>( LOAD_GROUP( secp256r1 ) );</div>
<div class="line"><a name="l00747"></a><span class="lineno"> 747</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP256R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00748"></a><span class="lineno"> 748</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00749"></a><span class="lineno"> 749</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP384R1_ENABLED)</span></div>
<div class="line"><a name="l00750"></a><span class="lineno"> 750</span> <span class="preprocessor"></span> <span class="keywordflow">case</span> <a class="code" href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2a5c29d432a997b609e72af045b89609f0">POLARSSL_ECP_DP_SECP384R1</a>:</div>
<div class="line"><a name="l00751"></a><span class="lineno"> 751</span>  NIST_MODP( p384 );</div>
<div class="line"><a name="l00752"></a><span class="lineno"> 752</span>  <span class="keywordflow">return</span>( LOAD_GROUP( secp384r1 ) );</div>
<div class="line"><a name="l00753"></a><span class="lineno"> 753</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP384R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00754"></a><span class="lineno"> 754</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00755"></a><span class="lineno"> 755</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP521R1_ENABLED)</span></div>
<div class="line"><a name="l00756"></a><span class="lineno"> 756</span> <span class="preprocessor"></span> <span class="keywordflow">case</span> <a class="code" href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2a0dbfef81c231c728a458d4a62b219f44">POLARSSL_ECP_DP_SECP521R1</a>:</div>
<div class="line"><a name="l00757"></a><span class="lineno"> 757</span>  NIST_MODP( p521 );</div>
<div class="line"><a name="l00758"></a><span class="lineno"> 758</span>  <span class="keywordflow">return</span>( LOAD_GROUP( secp521r1 ) );</div>
<div class="line"><a name="l00759"></a><span class="lineno"> 759</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP521R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00760"></a><span class="lineno"> 760</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00761"></a><span class="lineno"> 761</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP192K1_ENABLED)</span></div>
<div class="line"><a name="l00762"></a><span class="lineno"> 762</span> <span class="preprocessor"></span> <span class="keywordflow">case</span> <a class="code" href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2a0b278617b5b1d73d288a094f3d62617a">POLARSSL_ECP_DP_SECP192K1</a>:</div>
<div class="line"><a name="l00763"></a><span class="lineno"> 763</span>  grp-><a class="code" href="structecp__group.html#afcdbaba12db0549629c81baeba2fd738">modp</a> = ecp_mod_p192k1;</div>
<div class="line"><a name="l00764"></a><span class="lineno"> 764</span>  <span class="keywordflow">return</span>( LOAD_GROUP_A( secp192k1 ) );</div>
<div class="line"><a name="l00765"></a><span class="lineno"> 765</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP192K1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00766"></a><span class="lineno"> 766</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00767"></a><span class="lineno"> 767</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP224K1_ENABLED)</span></div>
<div class="line"><a name="l00768"></a><span class="lineno"> 768</span> <span class="preprocessor"></span> <span class="keywordflow">case</span> <a class="code" href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2a56360e39b811e7f040eb30179451c706">POLARSSL_ECP_DP_SECP224K1</a>:</div>
<div class="line"><a name="l00769"></a><span class="lineno"> 769</span>  grp-><a class="code" href="structecp__group.html#afcdbaba12db0549629c81baeba2fd738">modp</a> = ecp_mod_p224k1;</div>
<div class="line"><a name="l00770"></a><span class="lineno"> 770</span>  <span class="keywordflow">return</span>( LOAD_GROUP_A( secp224k1 ) );</div>
<div class="line"><a name="l00771"></a><span class="lineno"> 771</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP224K1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00772"></a><span class="lineno"> 772</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00773"></a><span class="lineno"> 773</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP256K1_ENABLED)</span></div>
<div class="line"><a name="l00774"></a><span class="lineno"> 774</span> <span class="preprocessor"></span> <span class="keywordflow">case</span> <a class="code" href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2a7e82b353163bf3307dc5dc5e67e21751">POLARSSL_ECP_DP_SECP256K1</a>:</div>
<div class="line"><a name="l00775"></a><span class="lineno"> 775</span>  grp-><a class="code" href="structecp__group.html#afcdbaba12db0549629c81baeba2fd738">modp</a> = ecp_mod_p256k1;</div>
<div class="line"><a name="l00776"></a><span class="lineno"> 776</span>  <span class="keywordflow">return</span>( LOAD_GROUP_A( secp256k1 ) );</div>
<div class="line"><a name="l00777"></a><span class="lineno"> 777</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP256K1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00778"></a><span class="lineno"> 778</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00779"></a><span class="lineno"> 779</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_BP256R1_ENABLED)</span></div>
<div class="line"><a name="l00780"></a><span class="lineno"> 780</span> <span class="preprocessor"></span> <span class="keywordflow">case</span> <a class="code" href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2aed9d986cfbd5e9c7ef26293e43cd3429">POLARSSL_ECP_DP_BP256R1</a>:</div>
<div class="line"><a name="l00781"></a><span class="lineno"> 781</span>  <span class="keywordflow">return</span>( LOAD_GROUP_A( brainpoolP256r1 ) );</div>
<div class="line"><a name="l00782"></a><span class="lineno"> 782</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_BP256R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00783"></a><span class="lineno"> 783</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00784"></a><span class="lineno"> 784</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_BP384R1_ENABLED)</span></div>
<div class="line"><a name="l00785"></a><span class="lineno"> 785</span> <span class="preprocessor"></span> <span class="keywordflow">case</span> <a class="code" href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2a439f3384e485525b216e3e29c69c45cc">POLARSSL_ECP_DP_BP384R1</a>:</div>
<div class="line"><a name="l00786"></a><span class="lineno"> 786</span>  <span class="keywordflow">return</span>( LOAD_GROUP_A( brainpoolP384r1 ) );</div>
<div class="line"><a name="l00787"></a><span class="lineno"> 787</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_BP384R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00788"></a><span class="lineno"> 788</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00789"></a><span class="lineno"> 789</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_BP512R1_ENABLED)</span></div>
<div class="line"><a name="l00790"></a><span class="lineno"> 790</span> <span class="preprocessor"></span> <span class="keywordflow">case</span> <a class="code" href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2aeeb07a2080f671337ce152e41404dc01">POLARSSL_ECP_DP_BP512R1</a>:</div>
<div class="line"><a name="l00791"></a><span class="lineno"> 791</span>  <span class="keywordflow">return</span>( LOAD_GROUP_A( brainpoolP512r1 ) );</div>
<div class="line"><a name="l00792"></a><span class="lineno"> 792</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_BP512R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00793"></a><span class="lineno"> 793</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00794"></a><span class="lineno"> 794</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_M255_ENABLED)</span></div>
<div class="line"><a name="l00795"></a><span class="lineno"> 795</span> <span class="preprocessor"></span> <span class="keywordflow">case</span> <a class="code" href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2a4d83a75b39303fc11e35adaa56e0034d">POLARSSL_ECP_DP_M255</a>:</div>
<div class="line"><a name="l00796"></a><span class="lineno"> 796</span>  grp-><a class="code" href="structecp__group.html#afcdbaba12db0549629c81baeba2fd738">modp</a> = ecp_mod_p255;</div>
<div class="line"><a name="l00797"></a><span class="lineno"> 797</span>  <span class="keywordflow">return</span>( ecp_use_curve25519( grp ) );</div>
<div class="line"><a name="l00798"></a><span class="lineno"> 798</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_M255_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00799"></a><span class="lineno"> 799</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00800"></a><span class="lineno"> 800</span>  <span class="keywordflow">default</span>:</div>
<div class="line"><a name="l00801"></a><span class="lineno"> 801</span>  <a class="code" href="ecp_8h.html#acbb816c782b4d903a0f0fac9b9d7e748">ecp_group_free</a>( grp );</div>
<div class="line"><a name="l00802"></a><span class="lineno"> 802</span>  <span class="keywordflow">return</span>( <a class="code" href="ecp_8h.html#a87be7bf7e5b042e8ee3b73dbe5f3cc3a">POLARSSL_ERR_ECP_FEATURE_UNAVAILABLE</a> );</div>
<div class="line"><a name="l00803"></a><span class="lineno"> 803</span>  }</div>
<div class="line"><a name="l00804"></a><span class="lineno"> 804</span> }</div>
<div class="line"><a name="l00805"></a><span class="lineno"> 805</span> </div>
<div class="line"><a name="l00806"></a><span class="lineno"> 806</span> <span class="preprocessor">#if defined(POLARSSL_ECP_NIST_OPTIM)</span></div>
<div class="line"><a name="l00807"></a><span class="lineno"> 807</span> <span class="preprocessor"></span><span class="comment">/*</span></div>
<div class="line"><a name="l00808"></a><span class="lineno"> 808</span> <span class="comment"> * Fast reduction modulo the primes used by the NIST curves.</span></div>
<div class="line"><a name="l00809"></a><span class="lineno"> 809</span> <span class="comment"> *</span></div>
<div class="line"><a name="l00810"></a><span class="lineno"> 810</span> <span class="comment"> * These functions are critical for speed, but not needed for correct</span></div>
<div class="line"><a name="l00811"></a><span class="lineno"> 811</span> <span class="comment"> * operations. So, we make the choice to heavily rely on the internals of our</span></div>
<div class="line"><a name="l00812"></a><span class="lineno"> 812</span> <span class="comment"> * bignum library, which creates a tight coupling between these functions and</span></div>
<div class="line"><a name="l00813"></a><span class="lineno"> 813</span> <span class="comment"> * our MPI implementation. However, the coupling between the ECP module and</span></div>
<div class="line"><a name="l00814"></a><span class="lineno"> 814</span> <span class="comment"> * MPI remains loose, since these functions can be deactivated at will.</span></div>
<div class="line"><a name="l00815"></a><span class="lineno"> 815</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00816"></a><span class="lineno"> 816</span> </div>
<div class="line"><a name="l00817"></a><span class="lineno"> 817</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP192R1_ENABLED)</span></div>
<div class="line"><a name="l00818"></a><span class="lineno"> 818</span> <span class="preprocessor"></span><span class="comment">/*</span></div>
<div class="line"><a name="l00819"></a><span class="lineno"> 819</span> <span class="comment"> * Compared to the way things are presented in FIPS 186-3 D.2,</span></div>
<div class="line"><a name="l00820"></a><span class="lineno"> 820</span> <span class="comment"> * we proceed in columns, from right (least significant chunk) to left,</span></div>
<div class="line"><a name="l00821"></a><span class="lineno"> 821</span> <span class="comment"> * adding chunks to N in place, and keeping a carry for the next chunk.</span></div>
<div class="line"><a name="l00822"></a><span class="lineno"> 822</span> <span class="comment"> * This avoids moving things around in memory, and uselessly adding zeros,</span></div>
<div class="line"><a name="l00823"></a><span class="lineno"> 823</span> <span class="comment"> * compared to the more straightforward, line-oriented approach.</span></div>
<div class="line"><a name="l00824"></a><span class="lineno"> 824</span> <span class="comment"> *</span></div>
<div class="line"><a name="l00825"></a><span class="lineno"> 825</span> <span class="comment"> * For this prime we need to handle data in chunks of 64 bits.</span></div>
<div class="line"><a name="l00826"></a><span class="lineno"> 826</span> <span class="comment"> * Since this is always a multiple of our basic t_uint, we can</span></div>
<div class="line"><a name="l00827"></a><span class="lineno"> 827</span> <span class="comment"> * use a t_uint * to designate such a chunk, and small loops to handle it.</span></div>
<div class="line"><a name="l00828"></a><span class="lineno"> 828</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00829"></a><span class="lineno"> 829</span> </div>
<div class="line"><a name="l00830"></a><span class="lineno"> 830</span> <span class="comment">/* Add 64-bit chunks (dst += src) and update carry */</span></div>
<div class="line"><a name="l00831"></a><span class="lineno"> 831</span> <span class="keyword">static</span> <span class="keyword">inline</span> <span class="keywordtype">void</span> add64( <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> *dst, <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> *src, <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> *carry )</div>
<div class="line"><a name="l00832"></a><span class="lineno"> 832</span> {</div>
<div class="line"><a name="l00833"></a><span class="lineno"> 833</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> i;</div>
<div class="line"><a name="l00834"></a><span class="lineno"> 834</span>  <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> c = 0;</div>
<div class="line"><a name="l00835"></a><span class="lineno"> 835</span>  <span class="keywordflow">for</span>( i = 0; i < 8 / <span class="keyword">sizeof</span>( <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> ); i++, dst++, src++ )</div>
<div class="line"><a name="l00836"></a><span class="lineno"> 836</span>  {</div>
<div class="line"><a name="l00837"></a><span class="lineno"> 837</span>  *dst += c; c = ( *dst < c );</div>
<div class="line"><a name="l00838"></a><span class="lineno"> 838</span>  *dst += *src; c += ( *dst < *src );</div>
<div class="line"><a name="l00839"></a><span class="lineno"> 839</span>  }</div>
<div class="line"><a name="l00840"></a><span class="lineno"> 840</span>  *carry += c;</div>
<div class="line"><a name="l00841"></a><span class="lineno"> 841</span> }</div>
<div class="line"><a name="l00842"></a><span class="lineno"> 842</span> </div>
<div class="line"><a name="l00843"></a><span class="lineno"> 843</span> <span class="comment">/* Add carry to a 64-bit chunk and update carry */</span></div>
<div class="line"><a name="l00844"></a><span class="lineno"> 844</span> <span class="keyword">static</span> <span class="keyword">inline</span> <span class="keywordtype">void</span> carry64( <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> *dst, <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> *carry )</div>
<div class="line"><a name="l00845"></a><span class="lineno"> 845</span> {</div>
<div class="line"><a name="l00846"></a><span class="lineno"> 846</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> i;</div>
<div class="line"><a name="l00847"></a><span class="lineno"> 847</span>  <span class="keywordflow">for</span>( i = 0; i < 8 / <span class="keyword">sizeof</span>( <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> ); i++, dst++ )</div>
<div class="line"><a name="l00848"></a><span class="lineno"> 848</span>  {</div>
<div class="line"><a name="l00849"></a><span class="lineno"> 849</span>  *dst += *carry;</div>
<div class="line"><a name="l00850"></a><span class="lineno"> 850</span>  *carry = ( *dst < *carry );</div>
<div class="line"><a name="l00851"></a><span class="lineno"> 851</span>  }</div>
<div class="line"><a name="l00852"></a><span class="lineno"> 852</span> }</div>
<div class="line"><a name="l00853"></a><span class="lineno"> 853</span> </div>
<div class="line"><a name="l00854"></a><span class="lineno"> 854</span> <span class="preprocessor">#define WIDTH 8 / sizeof( t_uint )</span></div>
<div class="line"><a name="l00855"></a><span class="lineno"> 855</span> <span class="preprocessor"></span><span class="preprocessor">#define A( i ) N->p + i * WIDTH</span></div>
<div class="line"><a name="l00856"></a><span class="lineno"> 856</span> <span class="preprocessor"></span><span class="preprocessor">#define ADD( i ) add64( p, A( i ), &c )</span></div>
<div class="line"><a name="l00857"></a><span class="lineno"> 857</span> <span class="preprocessor"></span><span class="preprocessor">#define NEXT p += WIDTH; carry64( p, &c )</span></div>
<div class="line"><a name="l00858"></a><span class="lineno"> 858</span> <span class="preprocessor"></span><span class="preprocessor">#define LAST p += WIDTH; *p = c; while( ++p < end ) *p = 0</span></div>
<div class="line"><a name="l00859"></a><span class="lineno"> 859</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00860"></a><span class="lineno"> 860</span> <span class="comment">/*</span></div>
<div class="line"><a name="l00861"></a><span class="lineno"> 861</span> <span class="comment"> * Fast quasi-reduction modulo p192 (FIPS 186-3 D.2.1)</span></div>
<div class="line"><a name="l00862"></a><span class="lineno"> 862</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00863"></a><span class="lineno"> 863</span> <span class="keyword">static</span> <span class="keywordtype">int</span> ecp_mod_p192( <a class="code" href="structmpi.html">mpi</a> *N )</div>
<div class="line"><a name="l00864"></a><span class="lineno"> 864</span> {</div>
<div class="line"><a name="l00865"></a><span class="lineno"> 865</span>  <span class="keywordtype">int</span> ret;</div>
<div class="line"><a name="l00866"></a><span class="lineno"> 866</span>  <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> c = 0;</div>
<div class="line"><a name="l00867"></a><span class="lineno"> 867</span>  <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> *p, *end;</div>
<div class="line"><a name="l00868"></a><span class="lineno"> 868</span> </div>
<div class="line"><a name="l00869"></a><span class="lineno"> 869</span>  <span class="comment">/* Make sure we have enough blocks so that A(5) is legal */</span></div>
<div class="line"><a name="l00870"></a><span class="lineno"> 870</span>  <a class="code" href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a>( <a class="code" href="bignum_8h.html#ac585f00fc9be270de074e8fbfb508d6a">mpi_grow</a>( N, 6 * WIDTH ) );</div>
<div class="line"><a name="l00871"></a><span class="lineno"> 871</span> </div>
<div class="line"><a name="l00872"></a><span class="lineno"> 872</span>  p = N-><a class="code" href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">p</a>;</div>
<div class="line"><a name="l00873"></a><span class="lineno"> 873</span>  end = p + N-><a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a>;</div>
<div class="line"><a name="l00874"></a><span class="lineno"> 874</span> </div>
<div class="line"><a name="l00875"></a><span class="lineno"> 875</span>  ADD( 3 ); ADD( 5 ); NEXT; <span class="comment">// A0 += A3 + A5</span></div>
<div class="line"><a name="l00876"></a><span class="lineno"> 876</span>  ADD( 3 ); ADD( 4 ); ADD( 5 ); NEXT; <span class="comment">// A1 += A3 + A4 + A5</span></div>
<div class="line"><a name="l00877"></a><span class="lineno"> 877</span>  ADD( 4 ); ADD( 5 ); LAST; <span class="comment">// A2 += A4 + A5</span></div>
<div class="line"><a name="l00878"></a><span class="lineno"> 878</span> </div>
<div class="line"><a name="l00879"></a><span class="lineno"> 879</span> cleanup:</div>
<div class="line"><a name="l00880"></a><span class="lineno"> 880</span>  <span class="keywordflow">return</span>( ret );</div>
<div class="line"><a name="l00881"></a><span class="lineno"> 881</span> }</div>
<div class="line"><a name="l00882"></a><span class="lineno"> 882</span> </div>
<div class="line"><a name="l00883"></a><span class="lineno"> 883</span> <span class="preprocessor">#undef WIDTH</span></div>
<div class="line"><a name="l00884"></a><span class="lineno"> 884</span> <span class="preprocessor"></span><span class="preprocessor">#undef A</span></div>
<div class="line"><a name="l00885"></a><span class="lineno"> 885</span> <span class="preprocessor"></span><span class="preprocessor">#undef ADD</span></div>
<div class="line"><a name="l00886"></a><span class="lineno"> 886</span> <span class="preprocessor"></span><span class="preprocessor">#undef NEXT</span></div>
<div class="line"><a name="l00887"></a><span class="lineno"> 887</span> <span class="preprocessor"></span><span class="preprocessor">#undef LAST</span></div>
<div class="line"><a name="l00888"></a><span class="lineno"> 888</span> <span class="preprocessor"></span><span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP192R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00889"></a><span class="lineno"> 889</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00890"></a><span class="lineno"> 890</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP224R1_ENABLED) || \</span></div>
<div class="line"><a name="l00891"></a><span class="lineno"> 891</span> <span class="preprocessor"> defined(POLARSSL_ECP_DP_SECP256R1_ENABLED) || \</span></div>
<div class="line"><a name="l00892"></a><span class="lineno"> 892</span> <span class="preprocessor"> defined(POLARSSL_ECP_DP_SECP384R1_ENABLED)</span></div>
<div class="line"><a name="l00893"></a><span class="lineno"> 893</span> <span class="preprocessor"></span><span class="comment">/*</span></div>
<div class="line"><a name="l00894"></a><span class="lineno"> 894</span> <span class="comment"> * The reader is advised to first understand ecp_mod_p192() since the same</span></div>
<div class="line"><a name="l00895"></a><span class="lineno"> 895</span> <span class="comment"> * general structure is used here, but with additional complications:</span></div>
<div class="line"><a name="l00896"></a><span class="lineno"> 896</span> <span class="comment"> * (1) chunks of 32 bits, and (2) subtractions.</span></div>
<div class="line"><a name="l00897"></a><span class="lineno"> 897</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00898"></a><span class="lineno"> 898</span> </div>
<div class="line"><a name="l00899"></a><span class="lineno"> 899</span> <span class="comment">/*</span></div>
<div class="line"><a name="l00900"></a><span class="lineno"> 900</span> <span class="comment"> * For these primes, we need to handle data in chunks of 32 bits.</span></div>
<div class="line"><a name="l00901"></a><span class="lineno"> 901</span> <span class="comment"> * This makes it more complicated if we use 64 bits limbs in MPI,</span></div>
<div class="line"><a name="l00902"></a><span class="lineno"> 902</span> <span class="comment"> * which prevents us from using a uniform access method as for p192.</span></div>
<div class="line"><a name="l00903"></a><span class="lineno"> 903</span> <span class="comment"> *</span></div>
<div class="line"><a name="l00904"></a><span class="lineno"> 904</span> <span class="comment"> * So, we define a mini abstraction layer to access 32 bit chunks,</span></div>
<div class="line"><a name="l00905"></a><span class="lineno"> 905</span> <span class="comment"> * load them in 'cur' for work, and store them back from 'cur' when done.</span></div>
<div class="line"><a name="l00906"></a><span class="lineno"> 906</span> <span class="comment"> *</span></div>
<div class="line"><a name="l00907"></a><span class="lineno"> 907</span> <span class="comment"> * While at it, also define the size of N in terms of 32-bit chunks.</span></div>
<div class="line"><a name="l00908"></a><span class="lineno"> 908</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00909"></a><span class="lineno"> 909</span> <span class="preprocessor">#define LOAD32 cur = A( i );</span></div>
<div class="line"><a name="l00910"></a><span class="lineno"> 910</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00911"></a><span class="lineno"> 911</span> <span class="preprocessor">#if defined(POLARSSL_HAVE_INT8) </span><span class="comment">/* 8 bit */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00912"></a><span class="lineno"> 912</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00913"></a><span class="lineno"> 913</span> <span class="preprocessor">#define MAX32 N->n / 4</span></div>
<div class="line"><a name="l00914"></a><span class="lineno"> 914</span> <span class="preprocessor"></span><span class="preprocessor">#define A( j ) (uint32_t)( N->p[4*j+0] ) | \</span></div>
<div class="line"><a name="l00915"></a><span class="lineno"> 915</span> <span class="preprocessor"> ( N->p[4*j+1] << 8 ) | \</span></div>
<div class="line"><a name="l00916"></a><span class="lineno"> 916</span> <span class="preprocessor"> ( N->p[4*j+2] << 16 ) | \</span></div>
<div class="line"><a name="l00917"></a><span class="lineno"> 917</span> <span class="preprocessor"> ( N->p[4*j+3] << 24 )</span></div>
<div class="line"><a name="l00918"></a><span class="lineno"> 918</span> <span class="preprocessor"></span><span class="preprocessor">#define STORE32 N->p[4*i+0] = (t_uint)( cur ); \</span></div>
<div class="line"><a name="l00919"></a><span class="lineno"> 919</span> <span class="preprocessor"> N->p[4*i+1] = (t_uint)( cur >> 8 ); \</span></div>
<div class="line"><a name="l00920"></a><span class="lineno"> 920</span> <span class="preprocessor"> N->p[4*i+2] = (t_uint)( cur >> 16 ); \</span></div>
<div class="line"><a name="l00921"></a><span class="lineno"> 921</span> <span class="preprocessor"> N->p[4*i+3] = (t_uint)( cur >> 24 );</span></div>
<div class="line"><a name="l00922"></a><span class="lineno"> 922</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00923"></a><span class="lineno"> 923</span> <span class="preprocessor">#elif defined(POLARSSL_HAVE_INT16) </span><span class="comment">/* 16 bit */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00924"></a><span class="lineno"> 924</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00925"></a><span class="lineno"> 925</span> <span class="preprocessor">#define MAX32 N->n / 2</span></div>
<div class="line"><a name="l00926"></a><span class="lineno"> 926</span> <span class="preprocessor"></span><span class="preprocessor">#define A( j ) (uint32_t)( N->p[2*j] ) | ( N->p[2*j+1] << 16 )</span></div>
<div class="line"><a name="l00927"></a><span class="lineno"> 927</span> <span class="preprocessor"></span><span class="preprocessor">#define STORE32 N->p[2*i+0] = (t_uint)( cur ); \</span></div>
<div class="line"><a name="l00928"></a><span class="lineno"> 928</span> <span class="preprocessor"> N->p[2*i+1] = (t_uint)( cur >> 16 );</span></div>
<div class="line"><a name="l00929"></a><span class="lineno"> 929</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00930"></a><span class="lineno"> 930</span> <span class="preprocessor">#elif defined(POLARSSL_HAVE_INT32) </span><span class="comment">/* 32 bit */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00931"></a><span class="lineno"> 931</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00932"></a><span class="lineno"> 932</span> <span class="preprocessor">#define MAX32 N->n</span></div>
<div class="line"><a name="l00933"></a><span class="lineno"> 933</span> <span class="preprocessor"></span><span class="preprocessor">#define A( j ) N->p[j]</span></div>
<div class="line"><a name="l00934"></a><span class="lineno"> 934</span> <span class="preprocessor"></span><span class="preprocessor">#define STORE32 N->p[i] = cur;</span></div>
<div class="line"><a name="l00935"></a><span class="lineno"> 935</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00936"></a><span class="lineno"> 936</span> <span class="preprocessor">#else </span><span class="comment">/* 64-bit */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00937"></a><span class="lineno"> 937</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00938"></a><span class="lineno"> 938</span> <span class="preprocessor">#define MAX32 N->n * 2</span></div>
<div class="line"><a name="l00939"></a><span class="lineno"> 939</span> <span class="preprocessor"></span><span class="preprocessor">#define A( j ) j % 2 ? (uint32_t)( N->p[j/2] >> 32 ) : (uint32_t)( N->p[j/2] )</span></div>
<div class="line"><a name="l00940"></a><span class="lineno"> 940</span> <span class="preprocessor"></span><span class="preprocessor">#define STORE32 \</span></div>
<div class="line"><a name="l00941"></a><span class="lineno"> 941</span> <span class="preprocessor"> if( i % 2 ) { \</span></div>
<div class="line"><a name="l00942"></a><span class="lineno"> 942</span> <span class="preprocessor"> N->p[i/2] &= 0x00000000FFFFFFFF; \</span></div>
<div class="line"><a name="l00943"></a><span class="lineno"> 943</span> <span class="preprocessor"> N->p[i/2] |= ((t_uint) cur) << 32; \</span></div>
<div class="line"><a name="l00944"></a><span class="lineno"> 944</span> <span class="preprocessor"> } else { \</span></div>
<div class="line"><a name="l00945"></a><span class="lineno"> 945</span> <span class="preprocessor"> N->p[i/2] &= 0xFFFFFFFF00000000; \</span></div>
<div class="line"><a name="l00946"></a><span class="lineno"> 946</span> <span class="preprocessor"> N->p[i/2] |= (t_uint) cur; \</span></div>
<div class="line"><a name="l00947"></a><span class="lineno"> 947</span> <span class="preprocessor"> }</span></div>
<div class="line"><a name="l00948"></a><span class="lineno"> 948</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00949"></a><span class="lineno"> 949</span> <span class="preprocessor">#endif </span><span class="comment">/* sizeof( t_uint ) */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l00950"></a><span class="lineno"> 950</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00951"></a><span class="lineno"> 951</span> <span class="comment">/*</span></div>
<div class="line"><a name="l00952"></a><span class="lineno"> 952</span> <span class="comment"> * Helpers for addition and subtraction of chunks, with signed carry.</span></div>
<div class="line"><a name="l00953"></a><span class="lineno"> 953</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00954"></a><span class="lineno"> 954</span> <span class="keyword">static</span> <span class="keyword">inline</span> <span class="keywordtype">void</span> add32( uint32_t *dst, uint32_t src, <span class="keywordtype">signed</span> <span class="keywordtype">char</span> *carry )</div>
<div class="line"><a name="l00955"></a><span class="lineno"> 955</span> {</div>
<div class="line"><a name="l00956"></a><span class="lineno"> 956</span>  *dst += src;</div>
<div class="line"><a name="l00957"></a><span class="lineno"> 957</span>  *carry += ( *dst < src );</div>
<div class="line"><a name="l00958"></a><span class="lineno"> 958</span> }</div>
<div class="line"><a name="l00959"></a><span class="lineno"> 959</span> </div>
<div class="line"><a name="l00960"></a><span class="lineno"> 960</span> <span class="keyword">static</span> <span class="keyword">inline</span> <span class="keywordtype">void</span> sub32( uint32_t *dst, uint32_t src, <span class="keywordtype">signed</span> <span class="keywordtype">char</span> *carry )</div>
<div class="line"><a name="l00961"></a><span class="lineno"> 961</span> {</div>
<div class="line"><a name="l00962"></a><span class="lineno"> 962</span>  *carry -= ( *dst < src );</div>
<div class="line"><a name="l00963"></a><span class="lineno"> 963</span>  *dst -= src;</div>
<div class="line"><a name="l00964"></a><span class="lineno"> 964</span> }</div>
<div class="line"><a name="l00965"></a><span class="lineno"> 965</span> </div>
<div class="line"><a name="l00966"></a><span class="lineno"> 966</span> <span class="preprocessor">#define ADD( j ) add32( &cur, A( j ), &c );</span></div>
<div class="line"><a name="l00967"></a><span class="lineno"> 967</span> <span class="preprocessor"></span><span class="preprocessor">#define SUB( j ) sub32( &cur, A( j ), &c );</span></div>
<div class="line"><a name="l00968"></a><span class="lineno"> 968</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00969"></a><span class="lineno"> 969</span> <span class="comment">/*</span></div>
<div class="line"><a name="l00970"></a><span class="lineno"> 970</span> <span class="comment"> * Helpers for the main 'loop'</span></div>
<div class="line"><a name="l00971"></a><span class="lineno"> 971</span> <span class="comment"> * (see fix_negative for the motivation of C)</span></div>
<div class="line"><a name="l00972"></a><span class="lineno"> 972</span> <span class="comment"> */</span></div>
<div class="line"><a name="l00973"></a><span class="lineno"> 973</span> <span class="preprocessor">#define INIT( b ) \</span></div>
<div class="line"><a name="l00974"></a><span class="lineno"> 974</span> <span class="preprocessor"> int ret; \</span></div>
<div class="line"><a name="l00975"></a><span class="lineno"> 975</span> <span class="preprocessor"> signed char c = 0, cc; \</span></div>
<div class="line"><a name="l00976"></a><span class="lineno"> 976</span> <span class="preprocessor"> uint32_t cur; \</span></div>
<div class="line"><a name="l00977"></a><span class="lineno"> 977</span> <span class="preprocessor"> size_t i = 0, bits = b; \</span></div>
<div class="line"><a name="l00978"></a><span class="lineno"> 978</span> <span class="preprocessor"> mpi C; \</span></div>
<div class="line"><a name="l00979"></a><span class="lineno"> 979</span> <span class="preprocessor"> t_uint Cp[ b / 8 / sizeof( t_uint) + 1 ]; \</span></div>
<div class="line"><a name="l00980"></a><span class="lineno"> 980</span> <span class="preprocessor"> \</span></div>
<div class="line"><a name="l00981"></a><span class="lineno"> 981</span> <span class="preprocessor"> C.s = 1; \</span></div>
<div class="line"><a name="l00982"></a><span class="lineno"> 982</span> <span class="preprocessor"> C.n = b / 8 / sizeof( t_uint) + 1; \</span></div>
<div class="line"><a name="l00983"></a><span class="lineno"> 983</span> <span class="preprocessor"> C.p = Cp; \</span></div>
<div class="line"><a name="l00984"></a><span class="lineno"> 984</span> <span class="preprocessor"> memset( Cp, 0, C.n * sizeof( t_uint ) ); \</span></div>
<div class="line"><a name="l00985"></a><span class="lineno"> 985</span> <span class="preprocessor"> \</span></div>
<div class="line"><a name="l00986"></a><span class="lineno"> 986</span> <span class="preprocessor"> MPI_CHK( mpi_grow( N, b * 2 / 8 / sizeof( t_uint ) ) ); \</span></div>
<div class="line"><a name="l00987"></a><span class="lineno"> 987</span> <span class="preprocessor"> LOAD32;</span></div>
<div class="line"><a name="l00988"></a><span class="lineno"> 988</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00989"></a><span class="lineno"> 989</span> <span class="preprocessor">#define NEXT \</span></div>
<div class="line"><a name="l00990"></a><span class="lineno"> 990</span> <span class="preprocessor"> STORE32; i++; LOAD32; \</span></div>
<div class="line"><a name="l00991"></a><span class="lineno"> 991</span> <span class="preprocessor"> cc = c; c = 0; \</span></div>
<div class="line"><a name="l00992"></a><span class="lineno"> 992</span> <span class="preprocessor"> if( cc < 0 ) \</span></div>
<div class="line"><a name="l00993"></a><span class="lineno"> 993</span> <span class="preprocessor"> sub32( &cur, -cc, &c ); \</span></div>
<div class="line"><a name="l00994"></a><span class="lineno"> 994</span> <span class="preprocessor"> else \</span></div>
<div class="line"><a name="l00995"></a><span class="lineno"> 995</span> <span class="preprocessor"> add32( &cur, cc, &c ); \</span></div>
<div class="line"><a name="l00996"></a><span class="lineno"> 996</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l00997"></a><span class="lineno"> 997</span> <span class="preprocessor"></span><span class="preprocessor">#define LAST \</span></div>
<div class="line"><a name="l00998"></a><span class="lineno"> 998</span> <span class="preprocessor"> STORE32; i++; \</span></div>
<div class="line"><a name="l00999"></a><span class="lineno"> 999</span> <span class="preprocessor"> cur = c > 0 ? c : 0; STORE32; \</span></div>
<div class="line"><a name="l01000"></a><span class="lineno"> 1000</span> <span class="preprocessor"> cur = 0; while( ++i < MAX32 ) { STORE32; } \</span></div>
<div class="line"><a name="l01001"></a><span class="lineno"> 1001</span> <span class="preprocessor"> if( c < 0 ) fix_negative( N, c, &C, bits );</span></div>
<div class="line"><a name="l01002"></a><span class="lineno"> 1002</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l01003"></a><span class="lineno"> 1003</span> <span class="comment">/*</span></div>
<div class="line"><a name="l01004"></a><span class="lineno"> 1004</span> <span class="comment"> * If the result is negative, we get it in the form</span></div>
<div class="line"><a name="l01005"></a><span class="lineno"> 1005</span> <span class="comment"> * c * 2^(bits + 32) + N, with c negative and N positive shorter than 'bits'</span></div>
<div class="line"><a name="l01006"></a><span class="lineno"> 1006</span> <span class="comment"> */</span></div>
<div class="line"><a name="l01007"></a><span class="lineno"> 1007</span> <span class="keyword">static</span> <span class="keyword">inline</span> <span class="keywordtype">int</span> fix_negative( <a class="code" href="structmpi.html">mpi</a> *N, <span class="keywordtype">signed</span> <span class="keywordtype">char</span> c, <a class="code" href="structmpi.html">mpi</a> *C, <span class="keywordtype">size_t</span> bits )</div>
<div class="line"><a name="l01008"></a><span class="lineno"> 1008</span> {</div>
<div class="line"><a name="l01009"></a><span class="lineno"> 1009</span>  <span class="keywordtype">int</span> ret;</div>
<div class="line"><a name="l01010"></a><span class="lineno"> 1010</span> </div>
<div class="line"><a name="l01011"></a><span class="lineno"> 1011</span>  <span class="comment">/* C = - c * 2^(bits + 32) */</span></div>
<div class="line"><a name="l01012"></a><span class="lineno"> 1012</span> <span class="preprocessor">#if !defined(POLARSSL_HAVE_INT64)</span></div>
<div class="line"><a name="l01013"></a><span class="lineno"> 1013</span> <span class="preprocessor"></span> ((void) bits);</div>
<div class="line"><a name="l01014"></a><span class="lineno"> 1014</span> <span class="preprocessor">#else</span></div>
<div class="line"><a name="l01015"></a><span class="lineno"> 1015</span> <span class="preprocessor"></span> <span class="keywordflow">if</span>( bits == 224 )</div>
<div class="line"><a name="l01016"></a><span class="lineno"> 1016</span>  C-><a class="code" href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">p</a>[ C-><a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> - 1 ] = ((<a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a>) -c) << 32;</div>
<div class="line"><a name="l01017"></a><span class="lineno"> 1017</span>  <span class="keywordflow">else</span></div>
<div class="line"><a name="l01018"></a><span class="lineno"> 1018</span> <span class="preprocessor">#endif</span></div>
<div class="line"><a name="l01019"></a><span class="lineno"> 1019</span> <span class="preprocessor"></span> C-><a class="code" href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">p</a>[ C-><a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> - 1 ] = (<a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a>) -c;</div>
<div class="line"><a name="l01020"></a><span class="lineno"> 1020</span> </div>
<div class="line"><a name="l01021"></a><span class="lineno"> 1021</span>  <span class="comment">/* N = - ( C - N ) */</span></div>
<div class="line"><a name="l01022"></a><span class="lineno"> 1022</span>  <a class="code" href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a>( <a class="code" href="bignum_8h.html#a19d09ef62c09539feb7f9b3045cfb1fe">mpi_sub_abs</a>( N, C, N ) );</div>
<div class="line"><a name="l01023"></a><span class="lineno"> 1023</span>  N-><a class="code" href="structmpi.html#ad44e921903bdc7fcc1cadad14784a59a">s</a> = -1;</div>
<div class="line"><a name="l01024"></a><span class="lineno"> 1024</span> </div>
<div class="line"><a name="l01025"></a><span class="lineno"> 1025</span> cleanup:</div>
<div class="line"><a name="l01026"></a><span class="lineno"> 1026</span> </div>
<div class="line"><a name="l01027"></a><span class="lineno"> 1027</span>  <span class="keywordflow">return</span>( ret );</div>
<div class="line"><a name="l01028"></a><span class="lineno"> 1028</span> }</div>
<div class="line"><a name="l01029"></a><span class="lineno"> 1029</span> </div>
<div class="line"><a name="l01030"></a><span class="lineno"> 1030</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP224R1_ENABLED)</span></div>
<div class="line"><a name="l01031"></a><span class="lineno"> 1031</span> <span class="preprocessor"></span><span class="comment">/*</span></div>
<div class="line"><a name="l01032"></a><span class="lineno"> 1032</span> <span class="comment"> * Fast quasi-reduction modulo p224 (FIPS 186-3 D.2.2)</span></div>
<div class="line"><a name="l01033"></a><span class="lineno"> 1033</span> <span class="comment"> */</span></div>
<div class="line"><a name="l01034"></a><span class="lineno"> 1034</span> <span class="keyword">static</span> <span class="keywordtype">int</span> ecp_mod_p224( <a class="code" href="structmpi.html">mpi</a> *N )</div>
<div class="line"><a name="l01035"></a><span class="lineno"> 1035</span> {</div>
<div class="line"><a name="l01036"></a><span class="lineno"> 1036</span>  INIT( 224 );</div>
<div class="line"><a name="l01037"></a><span class="lineno"> 1037</span> </div>
<div class="line"><a name="l01038"></a><span class="lineno"> 1038</span>  SUB( 7 ); SUB( 11 ); NEXT; <span class="comment">// A0 += -A7 - A11</span></div>
<div class="line"><a name="l01039"></a><span class="lineno"> 1039</span>  SUB( 8 ); SUB( 12 ); NEXT; <span class="comment">// A1 += -A8 - A12</span></div>
<div class="line"><a name="l01040"></a><span class="lineno"> 1040</span>  SUB( 9 ); SUB( 13 ); NEXT; <span class="comment">// A2 += -A9 - A13</span></div>
<div class="line"><a name="l01041"></a><span class="lineno"> 1041</span>  SUB( 10 ); ADD( 7 ); ADD( 11 ); NEXT; <span class="comment">// A3 += -A10 + A7 + A11</span></div>
<div class="line"><a name="l01042"></a><span class="lineno"> 1042</span>  SUB( 11 ); ADD( 8 ); ADD( 12 ); NEXT; <span class="comment">// A4 += -A11 + A8 + A12</span></div>
<div class="line"><a name="l01043"></a><span class="lineno"> 1043</span>  SUB( 12 ); ADD( 9 ); ADD( 13 ); NEXT; <span class="comment">// A5 += -A12 + A9 + A13</span></div>
<div class="line"><a name="l01044"></a><span class="lineno"> 1044</span>  SUB( 13 ); ADD( 10 ); LAST; <span class="comment">// A6 += -A13 + A10</span></div>
<div class="line"><a name="l01045"></a><span class="lineno"> 1045</span> </div>
<div class="line"><a name="l01046"></a><span class="lineno"> 1046</span> cleanup:</div>
<div class="line"><a name="l01047"></a><span class="lineno"> 1047</span>  <span class="keywordflow">return</span>( ret );</div>
<div class="line"><a name="l01048"></a><span class="lineno"> 1048</span> }</div>
<div class="line"><a name="l01049"></a><span class="lineno"> 1049</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP224R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l01050"></a><span class="lineno"> 1050</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l01051"></a><span class="lineno"> 1051</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP256R1_ENABLED)</span></div>
<div class="line"><a name="l01052"></a><span class="lineno"> 1052</span> <span class="preprocessor"></span><span class="comment">/*</span></div>
<div class="line"><a name="l01053"></a><span class="lineno"> 1053</span> <span class="comment"> * Fast quasi-reduction modulo p256 (FIPS 186-3 D.2.3)</span></div>
<div class="line"><a name="l01054"></a><span class="lineno"> 1054</span> <span class="comment"> */</span></div>
<div class="line"><a name="l01055"></a><span class="lineno"> 1055</span> <span class="keyword">static</span> <span class="keywordtype">int</span> ecp_mod_p256( <a class="code" href="structmpi.html">mpi</a> *N )</div>
<div class="line"><a name="l01056"></a><span class="lineno"> 1056</span> {</div>
<div class="line"><a name="l01057"></a><span class="lineno"> 1057</span>  INIT( 256 );</div>
<div class="line"><a name="l01058"></a><span class="lineno"> 1058</span> </div>
<div class="line"><a name="l01059"></a><span class="lineno"> 1059</span>  ADD( 8 ); ADD( 9 );</div>
<div class="line"><a name="l01060"></a><span class="lineno"> 1060</span>  SUB( 11 ); SUB( 12 ); SUB( 13 ); SUB( 14 ); NEXT; <span class="comment">// A0</span></div>
<div class="line"><a name="l01061"></a><span class="lineno"> 1061</span> </div>
<div class="line"><a name="l01062"></a><span class="lineno"> 1062</span>  ADD( 9 ); ADD( 10 );</div>
<div class="line"><a name="l01063"></a><span class="lineno"> 1063</span>  SUB( 12 ); SUB( 13 ); SUB( 14 ); SUB( 15 ); NEXT; <span class="comment">// A1</span></div>
<div class="line"><a name="l01064"></a><span class="lineno"> 1064</span> </div>
<div class="line"><a name="l01065"></a><span class="lineno"> 1065</span>  ADD( 10 ); ADD( 11 );</div>
<div class="line"><a name="l01066"></a><span class="lineno"> 1066</span>  SUB( 13 ); SUB( 14 ); SUB( 15 ); NEXT; <span class="comment">// A2</span></div>
<div class="line"><a name="l01067"></a><span class="lineno"> 1067</span> </div>
<div class="line"><a name="l01068"></a><span class="lineno"> 1068</span>  ADD( 11 ); ADD( 11 ); ADD( 12 ); ADD( 12 ); ADD( 13 );</div>
<div class="line"><a name="l01069"></a><span class="lineno"> 1069</span>  SUB( 15 ); SUB( 8 ); SUB( 9 ); NEXT; <span class="comment">// A3</span></div>
<div class="line"><a name="l01070"></a><span class="lineno"> 1070</span> </div>
<div class="line"><a name="l01071"></a><span class="lineno"> 1071</span>  ADD( 12 ); ADD( 12 ); ADD( 13 ); ADD( 13 ); ADD( 14 );</div>
<div class="line"><a name="l01072"></a><span class="lineno"> 1072</span>  SUB( 9 ); SUB( 10 ); NEXT; <span class="comment">// A4</span></div>
<div class="line"><a name="l01073"></a><span class="lineno"> 1073</span> </div>
<div class="line"><a name="l01074"></a><span class="lineno"> 1074</span>  ADD( 13 ); ADD( 13 ); ADD( 14 ); ADD( 14 ); ADD( 15 );</div>
<div class="line"><a name="l01075"></a><span class="lineno"> 1075</span>  SUB( 10 ); SUB( 11 ); NEXT; <span class="comment">// A5</span></div>
<div class="line"><a name="l01076"></a><span class="lineno"> 1076</span> </div>
<div class="line"><a name="l01077"></a><span class="lineno"> 1077</span>  ADD( 14 ); ADD( 14 ); ADD( 15 ); ADD( 15 ); ADD( 14 ); ADD( 13 );</div>
<div class="line"><a name="l01078"></a><span class="lineno"> 1078</span>  SUB( 8 ); SUB( 9 ); NEXT; <span class="comment">// A6</span></div>
<div class="line"><a name="l01079"></a><span class="lineno"> 1079</span> </div>
<div class="line"><a name="l01080"></a><span class="lineno"> 1080</span>  ADD( 15 ); ADD( 15 ); ADD( 15 ); ADD( 8 );</div>
<div class="line"><a name="l01081"></a><span class="lineno"> 1081</span>  SUB( 10 ); SUB( 11 ); SUB( 12 ); SUB( 13 ); LAST; <span class="comment">// A7</span></div>
<div class="line"><a name="l01082"></a><span class="lineno"> 1082</span> </div>
<div class="line"><a name="l01083"></a><span class="lineno"> 1083</span> cleanup:</div>
<div class="line"><a name="l01084"></a><span class="lineno"> 1084</span>  <span class="keywordflow">return</span>( ret );</div>
<div class="line"><a name="l01085"></a><span class="lineno"> 1085</span> }</div>
<div class="line"><a name="l01086"></a><span class="lineno"> 1086</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP256R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l01087"></a><span class="lineno"> 1087</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l01088"></a><span class="lineno"> 1088</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP384R1_ENABLED)</span></div>
<div class="line"><a name="l01089"></a><span class="lineno"> 1089</span> <span class="preprocessor"></span><span class="comment">/*</span></div>
<div class="line"><a name="l01090"></a><span class="lineno"> 1090</span> <span class="comment"> * Fast quasi-reduction modulo p384 (FIPS 186-3 D.2.4)</span></div>
<div class="line"><a name="l01091"></a><span class="lineno"> 1091</span> <span class="comment"> */</span></div>
<div class="line"><a name="l01092"></a><span class="lineno"> 1092</span> <span class="keyword">static</span> <span class="keywordtype">int</span> ecp_mod_p384( <a class="code" href="structmpi.html">mpi</a> *N )</div>
<div class="line"><a name="l01093"></a><span class="lineno"> 1093</span> {</div>
<div class="line"><a name="l01094"></a><span class="lineno"> 1094</span>  INIT( 384 );</div>
<div class="line"><a name="l01095"></a><span class="lineno"> 1095</span> </div>
<div class="line"><a name="l01096"></a><span class="lineno"> 1096</span>  ADD( 12 ); ADD( 21 ); ADD( 20 );</div>
<div class="line"><a name="l01097"></a><span class="lineno"> 1097</span>  SUB( 23 ); NEXT; <span class="comment">// A0</span></div>
<div class="line"><a name="l01098"></a><span class="lineno"> 1098</span> </div>
<div class="line"><a name="l01099"></a><span class="lineno"> 1099</span>  ADD( 13 ); ADD( 22 ); ADD( 23 );</div>
<div class="line"><a name="l01100"></a><span class="lineno"> 1100</span>  SUB( 12 ); SUB( 20 ); NEXT; <span class="comment">// A2</span></div>
<div class="line"><a name="l01101"></a><span class="lineno"> 1101</span> </div>
<div class="line"><a name="l01102"></a><span class="lineno"> 1102</span>  ADD( 14 ); ADD( 23 );</div>
<div class="line"><a name="l01103"></a><span class="lineno"> 1103</span>  SUB( 13 ); SUB( 21 ); NEXT; <span class="comment">// A2</span></div>
<div class="line"><a name="l01104"></a><span class="lineno"> 1104</span> </div>
<div class="line"><a name="l01105"></a><span class="lineno"> 1105</span>  ADD( 15 ); ADD( 12 ); ADD( 20 ); ADD( 21 );</div>
<div class="line"><a name="l01106"></a><span class="lineno"> 1106</span>  SUB( 14 ); SUB( 22 ); SUB( 23 ); NEXT; <span class="comment">// A3</span></div>
<div class="line"><a name="l01107"></a><span class="lineno"> 1107</span> </div>
<div class="line"><a name="l01108"></a><span class="lineno"> 1108</span>  ADD( 21 ); ADD( 21 ); ADD( 16 ); ADD( 13 ); ADD( 12 ); ADD( 20 ); ADD( 22 );</div>
<div class="line"><a name="l01109"></a><span class="lineno"> 1109</span>  SUB( 15 ); SUB( 23 ); SUB( 23 ); NEXT; <span class="comment">// A4</span></div>
<div class="line"><a name="l01110"></a><span class="lineno"> 1110</span> </div>
<div class="line"><a name="l01111"></a><span class="lineno"> 1111</span>  ADD( 22 ); ADD( 22 ); ADD( 17 ); ADD( 14 ); ADD( 13 ); ADD( 21 ); ADD( 23 );</div>
<div class="line"><a name="l01112"></a><span class="lineno"> 1112</span>  SUB( 16 ); NEXT; <span class="comment">// A5</span></div>
<div class="line"><a name="l01113"></a><span class="lineno"> 1113</span> </div>
<div class="line"><a name="l01114"></a><span class="lineno"> 1114</span>  ADD( 23 ); ADD( 23 ); ADD( 18 ); ADD( 15 ); ADD( 14 ); ADD( 22 );</div>
<div class="line"><a name="l01115"></a><span class="lineno"> 1115</span>  SUB( 17 ); NEXT; <span class="comment">// A6</span></div>
<div class="line"><a name="l01116"></a><span class="lineno"> 1116</span> </div>
<div class="line"><a name="l01117"></a><span class="lineno"> 1117</span>  ADD( 19 ); ADD( 16 ); ADD( 15 ); ADD( 23 );</div>
<div class="line"><a name="l01118"></a><span class="lineno"> 1118</span>  SUB( 18 ); NEXT; <span class="comment">// A7</span></div>
<div class="line"><a name="l01119"></a><span class="lineno"> 1119</span> </div>
<div class="line"><a name="l01120"></a><span class="lineno"> 1120</span>  ADD( 20 ); ADD( 17 ); ADD( 16 );</div>
<div class="line"><a name="l01121"></a><span class="lineno"> 1121</span>  SUB( 19 ); NEXT; <span class="comment">// A8</span></div>
<div class="line"><a name="l01122"></a><span class="lineno"> 1122</span> </div>
<div class="line"><a name="l01123"></a><span class="lineno"> 1123</span>  ADD( 21 ); ADD( 18 ); ADD( 17 );</div>
<div class="line"><a name="l01124"></a><span class="lineno"> 1124</span>  SUB( 20 ); NEXT; <span class="comment">// A9</span></div>
<div class="line"><a name="l01125"></a><span class="lineno"> 1125</span> </div>
<div class="line"><a name="l01126"></a><span class="lineno"> 1126</span>  ADD( 22 ); ADD( 19 ); ADD( 18 );</div>
<div class="line"><a name="l01127"></a><span class="lineno"> 1127</span>  SUB( 21 ); NEXT; <span class="comment">// A10</span></div>
<div class="line"><a name="l01128"></a><span class="lineno"> 1128</span> </div>
<div class="line"><a name="l01129"></a><span class="lineno"> 1129</span>  ADD( 23 ); ADD( 20 ); ADD( 19 );</div>
<div class="line"><a name="l01130"></a><span class="lineno"> 1130</span>  SUB( 22 ); LAST; <span class="comment">// A11</span></div>
<div class="line"><a name="l01131"></a><span class="lineno"> 1131</span> </div>
<div class="line"><a name="l01132"></a><span class="lineno"> 1132</span> cleanup:</div>
<div class="line"><a name="l01133"></a><span class="lineno"> 1133</span>  <span class="keywordflow">return</span>( ret );</div>
<div class="line"><a name="l01134"></a><span class="lineno"> 1134</span> }</div>
<div class="line"><a name="l01135"></a><span class="lineno"> 1135</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP384R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l01136"></a><span class="lineno"> 1136</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l01137"></a><span class="lineno"> 1137</span> <span class="preprocessor">#undef A</span></div>
<div class="line"><a name="l01138"></a><span class="lineno"> 1138</span> <span class="preprocessor"></span><span class="preprocessor">#undef LOAD32</span></div>
<div class="line"><a name="l01139"></a><span class="lineno"> 1139</span> <span class="preprocessor"></span><span class="preprocessor">#undef STORE32</span></div>
<div class="line"><a name="l01140"></a><span class="lineno"> 1140</span> <span class="preprocessor"></span><span class="preprocessor">#undef MAX32</span></div>
<div class="line"><a name="l01141"></a><span class="lineno"> 1141</span> <span class="preprocessor"></span><span class="preprocessor">#undef INIT</span></div>
<div class="line"><a name="l01142"></a><span class="lineno"> 1142</span> <span class="preprocessor"></span><span class="preprocessor">#undef NEXT</span></div>
<div class="line"><a name="l01143"></a><span class="lineno"> 1143</span> <span class="preprocessor"></span><span class="preprocessor">#undef LAST</span></div>
<div class="line"><a name="l01144"></a><span class="lineno"> 1144</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l01145"></a><span class="lineno"> 1145</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP224R1_ENABLED ||</span></div>
<div class="line"><a name="l01146"></a><span class="lineno"> 1146</span> <span class="comment"> POLARSSL_ECP_DP_SECP256R1_ENABLED ||</span></div>
<div class="line"><a name="l01147"></a><span class="lineno"> 1147</span> <span class="comment"> POLARSSL_ECP_DP_SECP384R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l01148"></a><span class="lineno"> 1148</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l01149"></a><span class="lineno"> 1149</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP521R1_ENABLED)</span></div>
<div class="line"><a name="l01150"></a><span class="lineno"> 1150</span> <span class="preprocessor"></span><span class="comment">/*</span></div>
<div class="line"><a name="l01151"></a><span class="lineno"> 1151</span> <span class="comment"> * Here we have an actual Mersenne prime, so things are more straightforward.</span></div>
<div class="line"><a name="l01152"></a><span class="lineno"> 1152</span> <span class="comment"> * However, chunks are aligned on a 'weird' boundary (521 bits).</span></div>
<div class="line"><a name="l01153"></a><span class="lineno"> 1153</span> <span class="comment"> */</span></div>
<div class="line"><a name="l01154"></a><span class="lineno"> 1154</span> </div>
<div class="line"><a name="l01155"></a><span class="lineno"> 1155</span> <span class="comment">/* Size of p521 in terms of t_uint */</span></div>
<div class="line"><a name="l01156"></a><span class="lineno"> 1156</span> <span class="preprocessor">#define P521_WIDTH ( 521 / 8 / sizeof( t_uint ) + 1 )</span></div>
<div class="line"><a name="l01157"></a><span class="lineno"> 1157</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l01158"></a><span class="lineno"> 1158</span> <span class="comment">/* Bits to keep in the most significant t_uint */</span></div>
<div class="line"><a name="l01159"></a><span class="lineno"> 1159</span> <span class="preprocessor">#if defined(POLARSSL_HAVE_INT8)</span></div>
<div class="line"><a name="l01160"></a><span class="lineno"> 1160</span> <span class="preprocessor"></span><span class="preprocessor">#define P521_MASK 0x01</span></div>
<div class="line"><a name="l01161"></a><span class="lineno"> 1161</span> <span class="preprocessor"></span><span class="preprocessor">#else</span></div>
<div class="line"><a name="l01162"></a><span class="lineno"> 1162</span> <span class="preprocessor"></span><span class="preprocessor">#define P521_MASK 0x01FF</span></div>
<div class="line"><a name="l01163"></a><span class="lineno"> 1163</span> <span class="preprocessor"></span><span class="preprocessor">#endif</span></div>
<div class="line"><a name="l01164"></a><span class="lineno"> 1164</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l01165"></a><span class="lineno"> 1165</span> <span class="comment">/*</span></div>
<div class="line"><a name="l01166"></a><span class="lineno"> 1166</span> <span class="comment"> * Fast quasi-reduction modulo p521 (FIPS 186-3 D.2.5)</span></div>
<div class="line"><a name="l01167"></a><span class="lineno"> 1167</span> <span class="comment"> * Write N as A1 + 2^521 A0, return A0 + A1</span></div>
<div class="line"><a name="l01168"></a><span class="lineno"> 1168</span> <span class="comment"> */</span></div>
<div class="line"><a name="l01169"></a><span class="lineno"> 1169</span> <span class="keyword">static</span> <span class="keywordtype">int</span> ecp_mod_p521( <a class="code" href="structmpi.html">mpi</a> *N )</div>
<div class="line"><a name="l01170"></a><span class="lineno"> 1170</span> {</div>
<div class="line"><a name="l01171"></a><span class="lineno"> 1171</span>  <span class="keywordtype">int</span> ret;</div>
<div class="line"><a name="l01172"></a><span class="lineno"> 1172</span>  <span class="keywordtype">size_t</span> i;</div>
<div class="line"><a name="l01173"></a><span class="lineno"> 1173</span>  <a class="code" href="structmpi.html">mpi</a> M;</div>
<div class="line"><a name="l01174"></a><span class="lineno"> 1174</span>  <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> Mp[P521_WIDTH + 1];</div>
<div class="line"><a name="l01175"></a><span class="lineno"> 1175</span>  <span class="comment">/* Worst case for the size of M is when t_uint is 16 bits:</span></div>
<div class="line"><a name="l01176"></a><span class="lineno"> 1176</span> <span class="comment"> * we need to hold bits 513 to 1056, which is 34 limbs, that is</span></div>
<div class="line"><a name="l01177"></a><span class="lineno"> 1177</span> <span class="comment"> * P521_WIDTH + 1. Otherwise P521_WIDTH is enough. */</span></div>
<div class="line"><a name="l01178"></a><span class="lineno"> 1178</span> </div>
<div class="line"><a name="l01179"></a><span class="lineno"> 1179</span>  <span class="keywordflow">if</span>( N-><a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> < P521_WIDTH )</div>
<div class="line"><a name="l01180"></a><span class="lineno"> 1180</span>  <span class="keywordflow">return</span>( 0 );</div>
<div class="line"><a name="l01181"></a><span class="lineno"> 1181</span> </div>
<div class="line"><a name="l01182"></a><span class="lineno"> 1182</span>  <span class="comment">/* M = A1 */</span></div>
<div class="line"><a name="l01183"></a><span class="lineno"> 1183</span>  M.<a class="code" href="structmpi.html#ad44e921903bdc7fcc1cadad14784a59a">s</a> = 1;</div>
<div class="line"><a name="l01184"></a><span class="lineno"> 1184</span>  M.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> = N-><a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> - ( P521_WIDTH - 1 );</div>
<div class="line"><a name="l01185"></a><span class="lineno"> 1185</span>  <span class="keywordflow">if</span>( M.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> > P521_WIDTH + 1 )</div>
<div class="line"><a name="l01186"></a><span class="lineno"> 1186</span>  M.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> = P521_WIDTH + 1;</div>
<div class="line"><a name="l01187"></a><span class="lineno"> 1187</span>  M.<a class="code" href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">p</a> = Mp;</div>
<div class="line"><a name="l01188"></a><span class="lineno"> 1188</span>  memcpy( Mp, N-><a class="code" href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">p</a> + P521_WIDTH - 1, M.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> * <span class="keyword">sizeof</span>( <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> ) );</div>
<div class="line"><a name="l01189"></a><span class="lineno"> 1189</span>  <a class="code" href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a>( <a class="code" href="bignum_8h.html#a01de1543da79d0ad0f58916d608f6ff8">mpi_shift_r</a>( &M, 521 % ( 8 * <span class="keyword">sizeof</span>( <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> ) ) ) );</div>
<div class="line"><a name="l01190"></a><span class="lineno"> 1190</span> </div>
<div class="line"><a name="l01191"></a><span class="lineno"> 1191</span>  <span class="comment">/* N = A0 */</span></div>
<div class="line"><a name="l01192"></a><span class="lineno"> 1192</span>  N-><a class="code" href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">p</a>[P521_WIDTH - 1] &= P521_MASK;</div>
<div class="line"><a name="l01193"></a><span class="lineno"> 1193</span>  <span class="keywordflow">for</span>( i = P521_WIDTH; i < N-><a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a>; i++ )</div>
<div class="line"><a name="l01194"></a><span class="lineno"> 1194</span>  N-><a class="code" href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">p</a>[i] = 0;</div>
<div class="line"><a name="l01195"></a><span class="lineno"> 1195</span> </div>
<div class="line"><a name="l01196"></a><span class="lineno"> 1196</span>  <span class="comment">/* N = A0 + A1 */</span></div>
<div class="line"><a name="l01197"></a><span class="lineno"> 1197</span>  <a class="code" href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a>( <a class="code" href="bignum_8h.html#a5d1cf13ed3c825b61e0b04085ec30f40">mpi_add_abs</a>( N, N, &M ) );</div>
<div class="line"><a name="l01198"></a><span class="lineno"> 1198</span> </div>
<div class="line"><a name="l01199"></a><span class="lineno"> 1199</span> cleanup:</div>
<div class="line"><a name="l01200"></a><span class="lineno"> 1200</span>  <span class="keywordflow">return</span>( ret );</div>
<div class="line"><a name="l01201"></a><span class="lineno"> 1201</span> }</div>
<div class="line"><a name="l01202"></a><span class="lineno"> 1202</span> </div>
<div class="line"><a name="l01203"></a><span class="lineno"> 1203</span> <span class="preprocessor">#undef P521_WIDTH</span></div>
<div class="line"><a name="l01204"></a><span class="lineno"> 1204</span> <span class="preprocessor"></span><span class="preprocessor">#undef P521_MASK</span></div>
<div class="line"><a name="l01205"></a><span class="lineno"> 1205</span> <span class="preprocessor"></span><span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP521R1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l01206"></a><span class="lineno"> 1206</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l01207"></a><span class="lineno"> 1207</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_NIST_OPTIM */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l01208"></a><span class="lineno"> 1208</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l01209"></a><span class="lineno"> 1209</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_M255_ENABLED)</span></div>
<div class="line"><a name="l01210"></a><span class="lineno"> 1210</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l01211"></a><span class="lineno"> 1211</span> <span class="comment">/* Size of p255 in terms of t_uint */</span></div>
<div class="line"><a name="l01212"></a><span class="lineno"> 1212</span> <span class="preprocessor">#define P255_WIDTH ( 255 / 8 / sizeof( t_uint ) + 1 )</span></div>
<div class="line"><a name="l01213"></a><span class="lineno"> 1213</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l01214"></a><span class="lineno"> 1214</span> <span class="comment">/*</span></div>
<div class="line"><a name="l01215"></a><span class="lineno"> 1215</span> <span class="comment"> * Fast quasi-reduction modulo p255 = 2^255 - 19</span></div>
<div class="line"><a name="l01216"></a><span class="lineno"> 1216</span> <span class="comment"> * Write N as A0 + 2^255 A1, return A0 + 19 * A1</span></div>
<div class="line"><a name="l01217"></a><span class="lineno"> 1217</span> <span class="comment"> */</span></div>
<div class="line"><a name="l01218"></a><span class="lineno"> 1218</span> <span class="keyword">static</span> <span class="keywordtype">int</span> ecp_mod_p255( <a class="code" href="structmpi.html">mpi</a> *N )</div>
<div class="line"><a name="l01219"></a><span class="lineno"> 1219</span> {</div>
<div class="line"><a name="l01220"></a><span class="lineno"> 1220</span>  <span class="keywordtype">int</span> ret;</div>
<div class="line"><a name="l01221"></a><span class="lineno"> 1221</span>  <span class="keywordtype">size_t</span> i;</div>
<div class="line"><a name="l01222"></a><span class="lineno"> 1222</span>  <a class="code" href="structmpi.html">mpi</a> M;</div>
<div class="line"><a name="l01223"></a><span class="lineno"> 1223</span>  <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> Mp[P255_WIDTH + 2];</div>
<div class="line"><a name="l01224"></a><span class="lineno"> 1224</span> </div>
<div class="line"><a name="l01225"></a><span class="lineno"> 1225</span>  <span class="keywordflow">if</span>( N-><a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> < P255_WIDTH )</div>
<div class="line"><a name="l01226"></a><span class="lineno"> 1226</span>  <span class="keywordflow">return</span>( 0 );</div>
<div class="line"><a name="l01227"></a><span class="lineno"> 1227</span> </div>
<div class="line"><a name="l01228"></a><span class="lineno"> 1228</span>  <span class="comment">/* M = A1 */</span></div>
<div class="line"><a name="l01229"></a><span class="lineno"> 1229</span>  M.<a class="code" href="structmpi.html#ad44e921903bdc7fcc1cadad14784a59a">s</a> = 1;</div>
<div class="line"><a name="l01230"></a><span class="lineno"> 1230</span>  M.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> = N-><a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> - ( P255_WIDTH - 1 );</div>
<div class="line"><a name="l01231"></a><span class="lineno"> 1231</span>  <span class="keywordflow">if</span>( M.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> > P255_WIDTH + 1 )</div>
<div class="line"><a name="l01232"></a><span class="lineno"> 1232</span>  M.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> = P255_WIDTH + 1;</div>
<div class="line"><a name="l01233"></a><span class="lineno"> 1233</span>  M.<a class="code" href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">p</a> = Mp;</div>
<div class="line"><a name="l01234"></a><span class="lineno"> 1234</span>  memset( Mp, 0, <span class="keyword">sizeof</span> Mp );</div>
<div class="line"><a name="l01235"></a><span class="lineno"> 1235</span>  memcpy( Mp, N-><a class="code" href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">p</a> + P255_WIDTH - 1, M.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> * <span class="keyword">sizeof</span>( <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> ) );</div>
<div class="line"><a name="l01236"></a><span class="lineno"> 1236</span>  <a class="code" href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a>( <a class="code" href="bignum_8h.html#a01de1543da79d0ad0f58916d608f6ff8">mpi_shift_r</a>( &M, 255 % ( 8 * <span class="keyword">sizeof</span>( <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> ) ) ) );</div>
<div class="line"><a name="l01237"></a><span class="lineno"> 1237</span>  M.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a>++; <span class="comment">/* Make room for multiplication by 19 */</span></div>
<div class="line"><a name="l01238"></a><span class="lineno"> 1238</span> </div>
<div class="line"><a name="l01239"></a><span class="lineno"> 1239</span>  <span class="comment">/* N = A0 */</span></div>
<div class="line"><a name="l01240"></a><span class="lineno"> 1240</span>  <a class="code" href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a>( <a class="code" href="bignum_8h.html#ac70dd057e989b021c4a535470d6afec9">mpi_set_bit</a>( N, 255, 0 ) );</div>
<div class="line"><a name="l01241"></a><span class="lineno"> 1241</span>  <span class="keywordflow">for</span>( i = P255_WIDTH; i < N-><a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a>; i++ )</div>
<div class="line"><a name="l01242"></a><span class="lineno"> 1242</span>  N-><a class="code" href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">p</a>[i] = 0;</div>
<div class="line"><a name="l01243"></a><span class="lineno"> 1243</span> </div>
<div class="line"><a name="l01244"></a><span class="lineno"> 1244</span>  <span class="comment">/* N = A0 + 19 * A1 */</span></div>
<div class="line"><a name="l01245"></a><span class="lineno"> 1245</span>  <a class="code" href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a>( <a class="code" href="bignum_8h.html#a79ee36f6e38e4de6d24047bd685747b4">mpi_mul_int</a>( &M, &M, 19 ) );</div>
<div class="line"><a name="l01246"></a><span class="lineno"> 1246</span>  <a class="code" href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a>( <a class="code" href="bignum_8h.html#a5d1cf13ed3c825b61e0b04085ec30f40">mpi_add_abs</a>( N, N, &M ) );</div>
<div class="line"><a name="l01247"></a><span class="lineno"> 1247</span> </div>
<div class="line"><a name="l01248"></a><span class="lineno"> 1248</span> cleanup:</div>
<div class="line"><a name="l01249"></a><span class="lineno"> 1249</span>  <span class="keywordflow">return</span>( ret );</div>
<div class="line"><a name="l01250"></a><span class="lineno"> 1250</span> }</div>
<div class="line"><a name="l01251"></a><span class="lineno"> 1251</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_M255_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l01252"></a><span class="lineno"> 1252</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l01253"></a><span class="lineno"> 1253</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP192K1_ENABLED) || \</span></div>
<div class="line"><a name="l01254"></a><span class="lineno"> 1254</span> <span class="preprocessor"> defined(POLARSSL_ECP_DP_SECP224K1_ENABLED) || \</span></div>
<div class="line"><a name="l01255"></a><span class="lineno"> 1255</span> <span class="preprocessor"> defined(POLARSSL_ECP_DP_SECP256K1_ENABLED)</span></div>
<div class="line"><a name="l01256"></a><span class="lineno"> 1256</span> <span class="preprocessor"></span><span class="comment">/*</span></div>
<div class="line"><a name="l01257"></a><span class="lineno"> 1257</span> <span class="comment"> * Fast quasi-reduction modulo P = 2^s - R,</span></div>
<div class="line"><a name="l01258"></a><span class="lineno"> 1258</span> <span class="comment"> * with R about 33 bits, used by the Koblitz curves.</span></div>
<div class="line"><a name="l01259"></a><span class="lineno"> 1259</span> <span class="comment"> *</span></div>
<div class="line"><a name="l01260"></a><span class="lineno"> 1260</span> <span class="comment"> * Write N as A0 + 2^224 A1, return A0 + R * A1.</span></div>
<div class="line"><a name="l01261"></a><span class="lineno"> 1261</span> <span class="comment"> * Actually do two passes, since R is big.</span></div>
<div class="line"><a name="l01262"></a><span class="lineno"> 1262</span> <span class="comment"> */</span></div>
<div class="line"><a name="l01263"></a><span class="lineno"> 1263</span> <span class="preprocessor">#define P_KOBLITZ_MAX ( 256 / 8 / sizeof( t_uint ) ) // Max limbs in P</span></div>
<div class="line"><a name="l01264"></a><span class="lineno"> 1264</span> <span class="preprocessor"></span><span class="preprocessor">#define P_KOBLITZ_R ( 8 / sizeof( t_uint ) ) // Limbs in R</span></div>
<div class="line"><a name="l01265"></a><span class="lineno"> 1265</span> <span class="preprocessor"></span><span class="keyword">static</span> <span class="keyword">inline</span> <span class="keywordtype">int</span> ecp_mod_koblitz( <a class="code" href="structmpi.html">mpi</a> *N, <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> *Rp, <span class="keywordtype">size_t</span> p_limbs,</div>
<div class="line"><a name="l01266"></a><span class="lineno"> 1266</span>  <span class="keywordtype">size_t</span> adjust, <span class="keywordtype">size_t</span> shift, <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> mask )</div>
<div class="line"><a name="l01267"></a><span class="lineno"> 1267</span> {</div>
<div class="line"><a name="l01268"></a><span class="lineno"> 1268</span>  <span class="keywordtype">int</span> ret;</div>
<div class="line"><a name="l01269"></a><span class="lineno"> 1269</span>  <span class="keywordtype">size_t</span> i;</div>
<div class="line"><a name="l01270"></a><span class="lineno"> 1270</span>  <a class="code" href="structmpi.html">mpi</a> M, R;</div>
<div class="line"><a name="l01271"></a><span class="lineno"> 1271</span>  <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> Mp[P_KOBLITZ_MAX + P_KOBLITZ_R];</div>
<div class="line"><a name="l01272"></a><span class="lineno"> 1272</span> </div>
<div class="line"><a name="l01273"></a><span class="lineno"> 1273</span>  <span class="keywordflow">if</span>( N-><a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> < p_limbs )</div>
<div class="line"><a name="l01274"></a><span class="lineno"> 1274</span>  <span class="keywordflow">return</span>( 0 );</div>
<div class="line"><a name="l01275"></a><span class="lineno"> 1275</span> </div>
<div class="line"><a name="l01276"></a><span class="lineno"> 1276</span>  <span class="comment">/* Init R */</span></div>
<div class="line"><a name="l01277"></a><span class="lineno"> 1277</span>  R.<a class="code" href="structmpi.html#ad44e921903bdc7fcc1cadad14784a59a">s</a> = 1;</div>
<div class="line"><a name="l01278"></a><span class="lineno"> 1278</span>  R.<a class="code" href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">p</a> = Rp;</div>
<div class="line"><a name="l01279"></a><span class="lineno"> 1279</span>  R.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> = P_KOBLITZ_R;</div>
<div class="line"><a name="l01280"></a><span class="lineno"> 1280</span> </div>
<div class="line"><a name="l01281"></a><span class="lineno"> 1281</span>  <span class="comment">/* Common setup for M */</span></div>
<div class="line"><a name="l01282"></a><span class="lineno"> 1282</span>  M.<a class="code" href="structmpi.html#ad44e921903bdc7fcc1cadad14784a59a">s</a> = 1;</div>
<div class="line"><a name="l01283"></a><span class="lineno"> 1283</span>  M.<a class="code" href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">p</a> = Mp;</div>
<div class="line"><a name="l01284"></a><span class="lineno"> 1284</span> </div>
<div class="line"><a name="l01285"></a><span class="lineno"> 1285</span>  <span class="comment">/* M = A1 */</span></div>
<div class="line"><a name="l01286"></a><span class="lineno"> 1286</span>  M.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> = N-><a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> - ( p_limbs - adjust );</div>
<div class="line"><a name="l01287"></a><span class="lineno"> 1287</span>  <span class="keywordflow">if</span>( M.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> > p_limbs + adjust )</div>
<div class="line"><a name="l01288"></a><span class="lineno"> 1288</span>  M.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> = p_limbs + adjust;</div>
<div class="line"><a name="l01289"></a><span class="lineno"> 1289</span>  memset( Mp, 0, <span class="keyword">sizeof</span> Mp );</div>
<div class="line"><a name="l01290"></a><span class="lineno"> 1290</span>  memcpy( Mp, N-><a class="code" href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">p</a> + p_limbs - adjust, M.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> * <span class="keyword">sizeof</span>( <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> ) );</div>
<div class="line"><a name="l01291"></a><span class="lineno"> 1291</span>  <span class="keywordflow">if</span>( shift != 0 )</div>
<div class="line"><a name="l01292"></a><span class="lineno"> 1292</span>  <a class="code" href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a>( <a class="code" href="bignum_8h.html#a01de1543da79d0ad0f58916d608f6ff8">mpi_shift_r</a>( &M, shift ) );</div>
<div class="line"><a name="l01293"></a><span class="lineno"> 1293</span>  M.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> += R.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> - adjust; <span class="comment">/* Make room for multiplication by R */</span></div>
<div class="line"><a name="l01294"></a><span class="lineno"> 1294</span> </div>
<div class="line"><a name="l01295"></a><span class="lineno"> 1295</span>  <span class="comment">/* N = A0 */</span></div>
<div class="line"><a name="l01296"></a><span class="lineno"> 1296</span>  <span class="keywordflow">if</span>( mask != 0 )</div>
<div class="line"><a name="l01297"></a><span class="lineno"> 1297</span>  N-><a class="code" href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">p</a>[p_limbs - 1] &= mask;</div>
<div class="line"><a name="l01298"></a><span class="lineno"> 1298</span>  <span class="keywordflow">for</span>( i = p_limbs; i < N-><a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a>; i++ )</div>
<div class="line"><a name="l01299"></a><span class="lineno"> 1299</span>  N-><a class="code" href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">p</a>[i] = 0;</div>
<div class="line"><a name="l01300"></a><span class="lineno"> 1300</span> </div>
<div class="line"><a name="l01301"></a><span class="lineno"> 1301</span>  <span class="comment">/* N = A0 + R * A1 */</span></div>
<div class="line"><a name="l01302"></a><span class="lineno"> 1302</span>  <a class="code" href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a>( <a class="code" href="bignum_8h.html#ab63bfb07b27db84268491cd7d68bddc0">mpi_mul_mpi</a>( &M, &M, &R ) );</div>
<div class="line"><a name="l01303"></a><span class="lineno"> 1303</span>  <a class="code" href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a>( <a class="code" href="bignum_8h.html#a5d1cf13ed3c825b61e0b04085ec30f40">mpi_add_abs</a>( N, N, &M ) );</div>
<div class="line"><a name="l01304"></a><span class="lineno"> 1304</span> </div>
<div class="line"><a name="l01305"></a><span class="lineno"> 1305</span>  <span class="comment">/* Second pass */</span></div>
<div class="line"><a name="l01306"></a><span class="lineno"> 1306</span> </div>
<div class="line"><a name="l01307"></a><span class="lineno"> 1307</span>  <span class="comment">/* M = A1 */</span></div>
<div class="line"><a name="l01308"></a><span class="lineno"> 1308</span>  M.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> = N-><a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> - ( p_limbs - adjust );</div>
<div class="line"><a name="l01309"></a><span class="lineno"> 1309</span>  <span class="keywordflow">if</span>( M.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> > p_limbs + adjust )</div>
<div class="line"><a name="l01310"></a><span class="lineno"> 1310</span>  M.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> = p_limbs + adjust;</div>
<div class="line"><a name="l01311"></a><span class="lineno"> 1311</span>  memset( Mp, 0, <span class="keyword">sizeof</span> Mp );</div>
<div class="line"><a name="l01312"></a><span class="lineno"> 1312</span>  memcpy( Mp, N-><a class="code" href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">p</a> + p_limbs - adjust, M.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> * <span class="keyword">sizeof</span>( <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> ) );</div>
<div class="line"><a name="l01313"></a><span class="lineno"> 1313</span>  <span class="keywordflow">if</span>( shift != 0 )</div>
<div class="line"><a name="l01314"></a><span class="lineno"> 1314</span>  <a class="code" href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a>( <a class="code" href="bignum_8h.html#a01de1543da79d0ad0f58916d608f6ff8">mpi_shift_r</a>( &M, shift ) );</div>
<div class="line"><a name="l01315"></a><span class="lineno"> 1315</span>  M.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> += R.<a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a> - adjust; <span class="comment">/* Make room for multiplication by R */</span></div>
<div class="line"><a name="l01316"></a><span class="lineno"> 1316</span> </div>
<div class="line"><a name="l01317"></a><span class="lineno"> 1317</span>  <span class="comment">/* N = A0 */</span></div>
<div class="line"><a name="l01318"></a><span class="lineno"> 1318</span>  <span class="keywordflow">if</span>( mask != 0 )</div>
<div class="line"><a name="l01319"></a><span class="lineno"> 1319</span>  N-><a class="code" href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">p</a>[p_limbs - 1] &= mask;</div>
<div class="line"><a name="l01320"></a><span class="lineno"> 1320</span>  <span class="keywordflow">for</span>( i = p_limbs; i < N-><a class="code" href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">n</a>; i++ )</div>
<div class="line"><a name="l01321"></a><span class="lineno"> 1321</span>  N-><a class="code" href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">p</a>[i] = 0;</div>
<div class="line"><a name="l01322"></a><span class="lineno"> 1322</span> </div>
<div class="line"><a name="l01323"></a><span class="lineno"> 1323</span>  <span class="comment">/* N = A0 + R * A1 */</span></div>
<div class="line"><a name="l01324"></a><span class="lineno"> 1324</span>  <a class="code" href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a>( <a class="code" href="bignum_8h.html#ab63bfb07b27db84268491cd7d68bddc0">mpi_mul_mpi</a>( &M, &M, &R ) );</div>
<div class="line"><a name="l01325"></a><span class="lineno"> 1325</span>  <a class="code" href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a>( <a class="code" href="bignum_8h.html#a5d1cf13ed3c825b61e0b04085ec30f40">mpi_add_abs</a>( N, N, &M ) );</div>
<div class="line"><a name="l01326"></a><span class="lineno"> 1326</span> </div>
<div class="line"><a name="l01327"></a><span class="lineno"> 1327</span> cleanup:</div>
<div class="line"><a name="l01328"></a><span class="lineno"> 1328</span>  <span class="keywordflow">return</span>( ret );</div>
<div class="line"><a name="l01329"></a><span class="lineno"> 1329</span> }</div>
<div class="line"><a name="l01330"></a><span class="lineno"> 1330</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP192K1_ENABLED) ||</span></div>
<div class="line"><a name="l01331"></a><span class="lineno"> 1331</span> <span class="comment"> POLARSSL_ECP_DP_SECP224K1_ENABLED) ||</span></div>
<div class="line"><a name="l01332"></a><span class="lineno"> 1332</span> <span class="comment"> POLARSSL_ECP_DP_SECP256K1_ENABLED) */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l01333"></a><span class="lineno"> 1333</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l01334"></a><span class="lineno"> 1334</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP192K1_ENABLED)</span></div>
<div class="line"><a name="l01335"></a><span class="lineno"> 1335</span> <span class="preprocessor"></span><span class="comment">/*</span></div>
<div class="line"><a name="l01336"></a><span class="lineno"> 1336</span> <span class="comment"> * Fast quasi-reduction modulo p192k1 = 2^192 - R,</span></div>
<div class="line"><a name="l01337"></a><span class="lineno"> 1337</span> <span class="comment"> * with R = 2^32 + 2^12 + 2^8 + 2^7 + 2^6 + 2^3 + 1 = 0x0100001119</span></div>
<div class="line"><a name="l01338"></a><span class="lineno"> 1338</span> <span class="comment"> */</span></div>
<div class="line"><a name="l01339"></a><span class="lineno"> 1339</span> <span class="keyword">static</span> <span class="keywordtype">int</span> ecp_mod_p192k1( <a class="code" href="structmpi.html">mpi</a> *N )</div>
<div class="line"><a name="l01340"></a><span class="lineno"> 1340</span> {</div>
<div class="line"><a name="l01341"></a><span class="lineno"> 1341</span>  <span class="keyword">static</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> Rp[] = {</div>
<div class="line"><a name="l01342"></a><span class="lineno"> 1342</span>  BYTES_TO_T_UINT_8( 0xC9, 0x11, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00 ) };</div>
<div class="line"><a name="l01343"></a><span class="lineno"> 1343</span> </div>
<div class="line"><a name="l01344"></a><span class="lineno"> 1344</span>  <span class="keywordflow">return</span>( ecp_mod_koblitz( N, Rp, 192 / 8 / <span class="keyword">sizeof</span>( <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> ), 0, 0, 0 ) );</div>
<div class="line"><a name="l01345"></a><span class="lineno"> 1345</span> }</div>
<div class="line"><a name="l01346"></a><span class="lineno"> 1346</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP192K1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l01347"></a><span class="lineno"> 1347</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l01348"></a><span class="lineno"> 1348</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP224K1_ENABLED)</span></div>
<div class="line"><a name="l01349"></a><span class="lineno"> 1349</span> <span class="preprocessor"></span><span class="comment">/*</span></div>
<div class="line"><a name="l01350"></a><span class="lineno"> 1350</span> <span class="comment"> * Fast quasi-reduction modulo p224k1 = 2^224 - R,</span></div>
<div class="line"><a name="l01351"></a><span class="lineno"> 1351</span> <span class="comment"> * with R = 2^32 + 2^12 + 2^11 + 2^9 + 2^7 + 2^4 + 2 + 1 = 0x0100001A93</span></div>
<div class="line"><a name="l01352"></a><span class="lineno"> 1352</span> <span class="comment"> */</span></div>
<div class="line"><a name="l01353"></a><span class="lineno"> 1353</span> <span class="keyword">static</span> <span class="keywordtype">int</span> ecp_mod_p224k1( <a class="code" href="structmpi.html">mpi</a> *N )</div>
<div class="line"><a name="l01354"></a><span class="lineno"> 1354</span> {</div>
<div class="line"><a name="l01355"></a><span class="lineno"> 1355</span>  <span class="keyword">static</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> Rp[] = {</div>
<div class="line"><a name="l01356"></a><span class="lineno"> 1356</span>  BYTES_TO_T_UINT_8( 0x93, 0x1A, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00 ) };</div>
<div class="line"><a name="l01357"></a><span class="lineno"> 1357</span> </div>
<div class="line"><a name="l01358"></a><span class="lineno"> 1358</span> <span class="preprocessor">#if defined(POLARSSL_HAVE_INT64)</span></div>
<div class="line"><a name="l01359"></a><span class="lineno"> 1359</span> <span class="preprocessor"></span> <span class="keywordflow">return</span>( ecp_mod_koblitz( N, Rp, 4, 1, 32, 0xFFFFFFFF ) );</div>
<div class="line"><a name="l01360"></a><span class="lineno"> 1360</span> <span class="preprocessor">#else</span></div>
<div class="line"><a name="l01361"></a><span class="lineno"> 1361</span> <span class="preprocessor"></span> <span class="keywordflow">return</span>( ecp_mod_koblitz( N, Rp, 224 / 8 / <span class="keyword">sizeof</span>( <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> ), 0, 0, 0 ) );</div>
<div class="line"><a name="l01362"></a><span class="lineno"> 1362</span> <span class="preprocessor">#endif</span></div>
<div class="line"><a name="l01363"></a><span class="lineno"> 1363</span> <span class="preprocessor"></span>}</div>
<div class="line"><a name="l01364"></a><span class="lineno"> 1364</span> </div>
<div class="line"><a name="l01365"></a><span class="lineno"> 1365</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP224K1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l01366"></a><span class="lineno"> 1366</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l01367"></a><span class="lineno"> 1367</span> <span class="preprocessor">#if defined(POLARSSL_ECP_DP_SECP256K1_ENABLED)</span></div>
<div class="line"><a name="l01368"></a><span class="lineno"> 1368</span> <span class="preprocessor"></span><span class="comment">/*</span></div>
<div class="line"><a name="l01369"></a><span class="lineno"> 1369</span> <span class="comment"> * Fast quasi-reduction modulo p256k1 = 2^256 - R,</span></div>
<div class="line"><a name="l01370"></a><span class="lineno"> 1370</span> <span class="comment"> * with R = 2^32 + 2^9 + 2^8 + 2^7 + 2^6 + 2^4 + 1 = 0x01000003D1</span></div>
<div class="line"><a name="l01371"></a><span class="lineno"> 1371</span> <span class="comment"> */</span></div>
<div class="line"><a name="l01372"></a><span class="lineno"> 1372</span> <span class="keyword">static</span> <span class="keywordtype">int</span> ecp_mod_p256k1( <a class="code" href="structmpi.html">mpi</a> *N )</div>
<div class="line"><a name="l01373"></a><span class="lineno"> 1373</span> {</div>
<div class="line"><a name="l01374"></a><span class="lineno"> 1374</span>  <span class="keyword">static</span> <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> Rp[] = {</div>
<div class="line"><a name="l01375"></a><span class="lineno"> 1375</span>  BYTES_TO_T_UINT_8( 0xD1, 0x03, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00 ) };</div>
<div class="line"><a name="l01376"></a><span class="lineno"> 1376</span>  <span class="keywordflow">return</span>( ecp_mod_koblitz( N, Rp, 256 / 8 / <span class="keyword">sizeof</span>( <a class="code" href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a> ), 0, 0, 0 ) );</div>
<div class="line"><a name="l01377"></a><span class="lineno"> 1377</span> }</div>
<div class="line"><a name="l01378"></a><span class="lineno"> 1378</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_DP_SECP256K1_ENABLED */</span><span class="preprocessor"></span></div>
<div class="line"><a name="l01379"></a><span class="lineno"> 1379</span> <span class="preprocessor"></span></div>
<div class="line"><a name="l01380"></a><span class="lineno"> 1380</span> <span class="preprocessor">#endif </span><span class="comment">/* POLARSSL_ECP_C */</span><span class="preprocessor"></span></div>
<div class="ttc" id="structecp__group_html_a3a813481e3d2548e372bab92c50f4d48"><div class="ttname"><a href="structecp__group.html#a3a813481e3d2548e372bab92c50f4d48">ecp_group::pbits</a></div><div class="ttdeci">size_t pbits</div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00144">ecp.h:144</a></div></div>
<div class="ttc" id="ecp_8h_html_a751fce96f17826537221248b4ed5cbd2a13f6d2a908ca7d322ceb2a5d9f4dea6f"><div class="ttname"><a href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2a13f6d2a908ca7d322ceb2a5d9f4dea6f">POLARSSL_ECP_DP_SECP256R1</a></div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00062">ecp.h:62</a></div></div>
<div class="ttc" id="bignum_8h_html_ad5d1464f801a0e7d2ed32a8f8dc2ccc9"><div class="ttname"><a href="bignum_8h.html#ad5d1464f801a0e7d2ed32a8f8dc2ccc9">t_uint</a></div><div class="ttdeci">uint32_t t_uint</div><div class="ttdef"><b>Definition:</b> <a href="bignum_8h_source.html#l00160">bignum.h:160</a></div></div>
<div class="ttc" id="ecp_8h_html"><div class="ttname"><a href="ecp_8h.html">ecp.h</a></div><div class="ttdoc">Elliptic curves over GF(p) </div></div>
<div class="ttc" id="structmpi_html_ad44e921903bdc7fcc1cadad14784a59a"><div class="ttname"><a href="structmpi.html#ad44e921903bdc7fcc1cadad14784a59a">mpi::s</a></div><div class="ttdeci">int s</div><div class="ttdef"><b>Definition:</b> <a href="bignum_8h_source.html#l00184">bignum.h:184</a></div></div>
<div class="ttc" id="bignum_8h_html_a19d09ef62c09539feb7f9b3045cfb1fe"><div class="ttname"><a href="bignum_8h.html#a19d09ef62c09539feb7f9b3045cfb1fe">mpi_sub_abs</a></div><div class="ttdeci">int mpi_sub_abs(mpi *X, const mpi *A, const mpi *B)</div><div class="ttdoc">Unsigned subtraction: X = |A| - |B|. </div></div>
<div class="ttc" id="structecp__group_html_aa743e0f6bdba64120247a92f8edf1318"><div class="ttname"><a href="structecp__group.html#aa743e0f6bdba64120247a92f8edf1318">ecp_group::P</a></div><div class="ttdeci">mpi P</div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00139">ecp.h:139</a></div></div>
<div class="ttc" id="ecp_8h_html_a751fce96f17826537221248b4ed5cbd2aa8b959db9beb4ac3fe805dd4caec6924"><div class="ttname"><a href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2aa8b959db9beb4ac3fe805dd4caec6924">POLARSSL_ECP_DP_SECP224R1</a></div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00061">ecp.h:61</a></div></div>
<div class="ttc" id="structecp__group_html_afcdbaba12db0549629c81baeba2fd738"><div class="ttname"><a href="structecp__group.html#afcdbaba12db0549629c81baeba2fd738">ecp_group::modp</a></div><div class="ttdeci">int(* modp)(mpi *)</div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00147">ecp.h:147</a></div></div>
<div class="ttc" id="structecp__group_html"><div class="ttname"><a href="structecp__group.html">ecp_group</a></div><div class="ttdoc">ECP group structure. </div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00136">ecp.h:136</a></div></div>
<div class="ttc" id="config_8h_html"><div class="ttname"><a href="config_8h.html">config.h</a></div><div class="ttdoc">Configuration options (set of defines) </div></div>
<div class="ttc" id="structecp__group_html_af88943414b51c063db7077e833a3f293"><div class="ttname"><a href="structecp__group.html#af88943414b51c063db7077e833a3f293">ecp_group::h</a></div><div class="ttdeci">unsigned int h</div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00146">ecp.h:146</a></div></div>
<div class="ttc" id="ecp_8h_html_a751fce96f17826537221248b4ed5cbd2aeeb07a2080f671337ce152e41404dc01"><div class="ttname"><a href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2aeeb07a2080f671337ce152e41404dc01">POLARSSL_ECP_DP_BP512R1</a></div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00067">ecp.h:67</a></div></div>
<div class="ttc" id="bignum_8h_html_a007d6236aebb0ff4a3d92ce8f525a3ae"><div class="ttname"><a href="bignum_8h.html#a007d6236aebb0ff4a3d92ce8f525a3ae">mpi_lset</a></div><div class="ttdeci">int mpi_lset(mpi *X, t_sint z)</div><div class="ttdoc">Set value from integer. </div></div>
<div class="ttc" id="structmpi_html"><div class="ttname"><a href="structmpi.html">mpi</a></div><div class="ttdoc">MPI structure. </div><div class="ttdef"><b>Definition:</b> <a href="bignum_8h_source.html#l00182">bignum.h:182</a></div></div>
<div class="ttc" id="ecp_8h_html_a87be7bf7e5b042e8ee3b73dbe5f3cc3a"><div class="ttname"><a href="ecp_8h.html#a87be7bf7e5b042e8ee3b73dbe5f3cc3a">POLARSSL_ERR_ECP_FEATURE_UNAVAILABLE</a></div><div class="ttdeci">#define POLARSSL_ERR_ECP_FEATURE_UNAVAILABLE</div><div class="ttdoc">Requested curve not available. </div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00037">ecp.h:37</a></div></div>
<div class="ttc" id="structecp__point_html_ad22ad099567064b38af5a1f2f58f0acc"><div class="ttname"><a href="structecp__point.html#ad22ad099567064b38af5a1f2f58f0acc">ecp_point::X</a></div><div class="ttdeci">mpi X</div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00106">ecp.h:106</a></div></div>
<div class="ttc" id="bignum_8h_html_a01de1543da79d0ad0f58916d608f6ff8"><div class="ttname"><a href="bignum_8h.html#a01de1543da79d0ad0f58916d608f6ff8">mpi_shift_r</a></div><div class="ttdeci">int mpi_shift_r(mpi *X, size_t count)</div><div class="ttdoc">Right-shift: X &gt;&gt;= count. </div></div>
<div class="ttc" id="ecp_8h_html_a751fce96f17826537221248b4ed5cbd2ad7b0489f0d40a4f1c1b143d401977a2f"><div class="ttname"><a href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2ad7b0489f0d40a4f1c1b143d401977a2f">POLARSSL_ECP_DP_SECP192R1</a></div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00060">ecp.h:60</a></div></div>
<div class="ttc" id="ecp_8h_html_a751fce96f17826537221248b4ed5cbd2a4d83a75b39303fc11e35adaa56e0034d"><div class="ttname"><a href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2a4d83a75b39303fc11e35adaa56e0034d">POLARSSL_ECP_DP_M255</a></div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00069">ecp.h:69</a></div></div>
<div class="ttc" id="structecp__group_html_adb738e2c6df3c75c4b30b2b1c3e61256"><div class="ttname"><a href="structecp__group.html#adb738e2c6df3c75c4b30b2b1c3e61256">ecp_group::G</a></div><div class="ttdeci">ecp_point G</div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00142">ecp.h:142</a></div></div>
<div class="ttc" id="structecp__group_html_a8f7b8f453c94152dcb7227639511f323"><div class="ttname"><a href="structecp__group.html#a8f7b8f453c94152dcb7227639511f323">ecp_group::id</a></div><div class="ttdeci">ecp_group_id id</div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00138">ecp.h:138</a></div></div>
<div class="ttc" id="ecp_8h_html_a751fce96f17826537221248b4ed5cbd2a0dbfef81c231c728a458d4a62b219f44"><div class="ttname"><a href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2a0dbfef81c231c728a458d4a62b219f44">POLARSSL_ECP_DP_SECP521R1</a></div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00064">ecp.h:64</a></div></div>
<div class="ttc" id="structecp__group_html_a83383f769f7a7b0067bd8eb237b30bec"><div class="ttname"><a href="structecp__group.html#a83383f769f7a7b0067bd8eb237b30bec">ecp_group::B</a></div><div class="ttdeci">mpi B</div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00141">ecp.h:141</a></div></div>
<div class="ttc" id="structecp__group_html_a6b424e0dbad7d3c900375a2ff0154b95"><div class="ttname"><a href="structecp__group.html#a6b424e0dbad7d3c900375a2ff0154b95">ecp_group::N</a></div><div class="ttdeci">mpi N</div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00143">ecp.h:143</a></div></div>
<div class="ttc" id="bignum_8h_html_ae1f6507671587755e46bbf0afcae6a8c"><div class="ttname"><a href="bignum_8h.html#ae1f6507671587755e46bbf0afcae6a8c">mpi_free</a></div><div class="ttdeci">void mpi_free(mpi *X)</div><div class="ttdoc">Unallocate one MPI. </div></div>
<div class="ttc" id="bignum_8h_html_a79ee36f6e38e4de6d24047bd685747b4"><div class="ttname"><a href="bignum_8h.html#a79ee36f6e38e4de6d24047bd685747b4">mpi_mul_int</a></div><div class="ttdeci">int mpi_mul_int(mpi *X, const mpi *A, t_sint b)</div><div class="ttdoc">Baseline multiplication: X = A * b Note: despite the functon signature, b is treated as a t_uint...</div></div>
<div class="ttc" id="ecp_8h_html_acbb816c782b4d903a0f0fac9b9d7e748"><div class="ttname"><a href="ecp_8h.html#acbb816c782b4d903a0f0fac9b9d7e748">ecp_group_free</a></div><div class="ttdeci">void ecp_group_free(ecp_group *grp)</div><div class="ttdoc">Free the components of an ECP group. </div></div>
<div class="ttc" id="bignum_8h_html_ac585f00fc9be270de074e8fbfb508d6a"><div class="ttname"><a href="bignum_8h.html#ac585f00fc9be270de074e8fbfb508d6a">mpi_grow</a></div><div class="ttdeci">int mpi_grow(mpi *X, size_t nblimbs)</div><div class="ttdoc">Enlarge to the specified number of limbs. </div></div>
<div class="ttc" id="ecp_8h_html_a751fce96f17826537221248b4ed5cbd2a439f3384e485525b216e3e29c69c45cc"><div class="ttname"><a href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2a439f3384e485525b216e3e29c69c45cc">POLARSSL_ECP_DP_BP384R1</a></div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00066">ecp.h:66</a></div></div>
<div class="ttc" id="bignum_8h_html_a4d461a7bff5a31df34bbf93ec00ab886"><div class="ttname"><a href="bignum_8h.html#a4d461a7bff5a31df34bbf93ec00ab886">mpi_msb</a></div><div class="ttdeci">size_t mpi_msb(const mpi *X)</div><div class="ttdoc">Return the number of bits up to and including the most significant &#39;1&#39; bit&#39;. </div></div>
<div class="ttc" id="ecp_8h_html_af245b6e35c32a231e18bf335de7de774"><div class="ttname"><a href="ecp_8h.html#af245b6e35c32a231e18bf335de7de774">ecp_use_known_dp</a></div><div class="ttdeci">int ecp_use_known_dp(ecp_group *grp, ecp_group_id index)</div><div class="ttdoc">Set a group using well-known domain parameters. </div></div>
<div class="ttc" id="bignum_8h_html_a5d1cf13ed3c825b61e0b04085ec30f40"><div class="ttname"><a href="bignum_8h.html#a5d1cf13ed3c825b61e0b04085ec30f40">mpi_add_abs</a></div><div class="ttdeci">int mpi_add_abs(mpi *X, const mpi *A, const mpi *B)</div><div class="ttdoc">Unsigned addition: X = |A| + |B|. </div></div>
<div class="ttc" id="bignum_8h_html_a752d12c301f4e5df56f17e9bc8d78d74"><div class="ttname"><a href="bignum_8h.html#a752d12c301f4e5df56f17e9bc8d78d74">mpi_read_string</a></div><div class="ttdeci">int mpi_read_string(mpi *X, int radix, const char *s)</div><div class="ttdoc">Import from an ASCII string. </div></div>
<div class="ttc" id="structmpi_html_aaeeabe339c1cc40d05bdb026666404f8"><div class="ttname"><a href="structmpi.html#aaeeabe339c1cc40d05bdb026666404f8">mpi::p</a></div><div class="ttdeci">t_uint * p</div><div class="ttdef"><b>Definition:</b> <a href="bignum_8h_source.html#l00186">bignum.h:186</a></div></div>
<div class="ttc" id="structecp__group_html_a1164b1ffac0af85f9bc89b35497036f9"><div class="ttname"><a href="structecp__group.html#a1164b1ffac0af85f9bc89b35497036f9">ecp_group::A</a></div><div class="ttdeci">mpi A</div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00140">ecp.h:140</a></div></div>
<div class="ttc" id="ecp_8h_html_a751fce96f17826537221248b4ed5cbd2"><div class="ttname"><a href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2">ecp_group_id</a></div><div class="ttdeci">ecp_group_id</div><div class="ttdoc">Domain parameters (curve, subgroup and generator) identifiers. </div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00057">ecp.h:57</a></div></div>
<div class="ttc" id="structecp__group_html_a372ef0b2cbf3232760e108e5b97c8a3e"><div class="ttname"><a href="structecp__group.html#a372ef0b2cbf3232760e108e5b97c8a3e">ecp_group::nbits</a></div><div class="ttdeci">size_t nbits</div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00145">ecp.h:145</a></div></div>
<div class="ttc" id="structecp__point_html_a2fb634222dcf49c352f922a1b07e254e"><div class="ttname"><a href="structecp__point.html#a2fb634222dcf49c352f922a1b07e254e">ecp_point::Y</a></div><div class="ttdeci">mpi Y</div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00107">ecp.h:107</a></div></div>
<div class="ttc" id="structmpi_html_acc8d6d92112b326fcac7c6eff002feb1"><div class="ttname"><a href="structmpi.html#acc8d6d92112b326fcac7c6eff002feb1">mpi::n</a></div><div class="ttdeci">size_t n</div><div class="ttdef"><b>Definition:</b> <a href="bignum_8h_source.html#l00185">bignum.h:185</a></div></div>
<div class="ttc" id="ecp_8h_html_a751fce96f17826537221248b4ed5cbd2a7e82b353163bf3307dc5dc5e67e21751"><div class="ttname"><a href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2a7e82b353163bf3307dc5dc5e67e21751">POLARSSL_ECP_DP_SECP256K1</a></div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00074">ecp.h:74</a></div></div>
<div class="ttc" id="ecp_8h_html_a751fce96f17826537221248b4ed5cbd2a0b278617b5b1d73d288a094f3d62617a"><div class="ttname"><a href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2a0b278617b5b1d73d288a094f3d62617a">POLARSSL_ECP_DP_SECP192K1</a></div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00072">ecp.h:72</a></div></div>
<div class="ttc" id="ecp_8h_html_a751fce96f17826537221248b4ed5cbd2aed9d986cfbd5e9c7ef26293e43cd3429"><div class="ttname"><a href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2aed9d986cfbd5e9c7ef26293e43cd3429">POLARSSL_ECP_DP_BP256R1</a></div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00065">ecp.h:65</a></div></div>
<div class="ttc" id="structecp__point_html_a9770fb9d831f0b15c8bda07600ee8144"><div class="ttname"><a href="structecp__point.html#a9770fb9d831f0b15c8bda07600ee8144">ecp_point::Z</a></div><div class="ttdeci">mpi Z</div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00108">ecp.h:108</a></div></div>
<div class="ttc" id="bignum_8h_html_a17537330dbe685ca867e52479a8ef7c3"><div class="ttname"><a href="bignum_8h.html#a17537330dbe685ca867e52479a8ef7c3">mpi_shift_l</a></div><div class="ttdeci">int mpi_shift_l(mpi *X, size_t count)</div><div class="ttdoc">Left-shift: X &lt;&lt;= count. </div></div>
<div class="ttc" id="ecp_8h_html_a751fce96f17826537221248b4ed5cbd2a5c29d432a997b609e72af045b89609f0"><div class="ttname"><a href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2a5c29d432a997b609e72af045b89609f0">POLARSSL_ECP_DP_SECP384R1</a></div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00063">ecp.h:63</a></div></div>
<div class="ttc" id="bignum_8h_html_ab63bfb07b27db84268491cd7d68bddc0"><div class="ttname"><a href="bignum_8h.html#ab63bfb07b27db84268491cd7d68bddc0">mpi_mul_mpi</a></div><div class="ttdeci">int mpi_mul_mpi(mpi *X, const mpi *A, const mpi *B)</div><div class="ttdoc">Baseline multiplication: X = A * B. </div></div>
<div class="ttc" id="ecp_8h_html_a751fce96f17826537221248b4ed5cbd2a56360e39b811e7f040eb30179451c706"><div class="ttname"><a href="ecp_8h.html#a751fce96f17826537221248b4ed5cbd2a56360e39b811e7f040eb30179451c706">POLARSSL_ECP_DP_SECP224K1</a></div><div class="ttdef"><b>Definition:</b> <a href="ecp_8h_source.html#l00073">ecp.h:73</a></div></div>
<div class="ttc" id="bignum_8h_html_ac70dd057e989b021c4a535470d6afec9"><div class="ttname"><a href="bignum_8h.html#ac70dd057e989b021c4a535470d6afec9">mpi_set_bit</a></div><div class="ttdeci">int mpi_set_bit(mpi *X, size_t pos, unsigned char val)</div><div class="ttdoc">Set a bit of X to a specific value of 0 or 1. </div></div>
<div class="ttc" id="bignum_8h_html_acfdf0f6effb7f976a2f90844c492e160"><div class="ttname"><a href="bignum_8h.html#acfdf0f6effb7f976a2f90844c492e160">mpi_sub_int</a></div><div class="ttdeci">int mpi_sub_int(mpi *X, const mpi *A, t_sint b)</div><div class="ttdoc">Signed subtraction: X = A - b. </div></div>
<div class="ttc" id="bignum_8h_html_a024b186dd3608bcbcfc9dd36212a18ec"><div class="ttname"><a href="bignum_8h.html#a024b186dd3608bcbcfc9dd36212a18ec">MPI_CHK</a></div><div class="ttdeci">#define MPI_CHK(f)</div><div class="ttdef"><b>Definition:</b> <a href="bignum_8h_source.html#l00065">bignum.h:65</a></div></div>
</div><!-- fragment --></div><!-- contents -->
<!-- start footer part -->
<hr class="footer"/><address class="footer"><small>
Generated on Thu Jul 31 2014 11:35:51 for PolarSSL v1.3.8 by  <a href="http://www.doxygen.org/index.html">
<img class="footer" src="doxygen.png" alt="doxygen"/>
</a> 1.8.5
</small></address>
</body>
</html>
