eden-emu/mbedtls
20
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Have mbedtls_mpi_montg_init() take the modulus, rather than just its least significant limb

Browse source 
Signed-off-by: Tom Cosgrove <tom.cosgrove@arm.com>
This commit is contained in:
Tom Cosgrove 2022-08-24 11:17:15 +01:00
parent 958fd3dc0c
commit f0ffb1585a
4 changed files with 11 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

2
library/bignum.c
View file

@ -1550,7 +1550,7 @@ int mbedtls_mpi_mod_int( mbedtls_mpi_uint *r, const mbedtls_mpi *A, mbedtls_mpi_
*/
static void mpi_montg_init( mbedtls_mpi_uint *mm, const mbedtls_mpi *N )
{
*mm = mbedtls_mpi_montg_init( N->p[0] );
*mm = mbedtls_mpi_montg_init( N->p );
}
/** Montgomery multiplication: A = A * B * R^-1 mod N (HAC 14.36)

8
library/bignum_core.c
View file

@ -348,14 +348,14 @@ void mbedtls_mpi_core_montmul( mbedtls_mpi_uint *X,
/*
* Fast Montgomery initialization (thanks to Tom St Denis).
*/
mbedtls_mpi_uint mbedtls_mpi_montg_init( mbedtls_mpi_uint m0 )
mbedtls_mpi_uint mbedtls_mpi_montg_init( const mbedtls_mpi_uint *N )
{
mbedtls_mpi_uint x = m0;
mbedtls_mpi_uint x = N[0];
x += ( ( m0 + 2 ) & 4 ) << 1;
x += ( ( N[0] + 2 ) & 4 ) << 1;
for( unsigned int i = biL; i >= 8; i /= 2 )
x *= ( 2 - ( m0 * x ) );
x *= ( 2 - ( N[0] * x ) );
return( ~x + 1 );
}

8
library/bignum_core.h
View file

@ -186,12 +186,12 @@ void mbedtls_mpi_core_montmul( mbedtls_mpi_uint *X,
* \brief Calculate initialisation value for fast Montgomery modular
* multiplication
*
* \param m0 The least-significant mbedtls_mpi_uint from the modulus, which
* must be odd
* \param[in] N Little-endian presentation of the modulus. This must have
* at least one limb.
*
* \return The initialisation value for fast Montgomery modular multiplication
* \return The initialisation value for fast Montgomery modular multiplication
*/
mbedtls_mpi_uint mbedtls_mpi_montg_init( mbedtls_mpi_uint m0 );
mbedtls_mpi_uint mbedtls_mpi_montg_init( const mbedtls_mpi_uint *N );
/**
* \brief Perform a known-size multiply accumulate operation: d += b * s