Botan 3.5.0
Crypto and TLS for C&
|
#include <pcurves_wrap.h>
Classes | |
class | PrecomputedMul2TableC |
Public Types | |
typedef std::shared_ptr< const PrimeOrderCurve > | CurvePtr |
typedef std::array< word, StorageWords > | StorageUnit |
Public Member Functions | |
bool | affine_point_is_identity (const AffinePoint &pt) const override |
Scalar | base_point_mul_x_mod_order (const Scalar &scalar, RandomNumberGenerator &rng) const override |
std::optional< AffinePoint > | deserialize_point (std::span< const uint8_t > bytes) const override |
std::optional< Scalar > | deserialize_scalar (std::span< const uint8_t > bytes) const override |
size_t | field_element_bytes () const override |
AffinePoint | generator () const override |
Return the standard generator. | |
ProjectivePoint | hash_to_curve (std::string_view hash, std::span< const uint8_t > input, std::span< const uint8_t > domain_sep, bool random_oracle) const override |
ProjectivePoint | mul (const AffinePoint &pt, const Scalar &scalar, RandomNumberGenerator &rng) const override |
std::unique_ptr< const PrecomputedMul2Table > | mul2_setup (const AffinePoint &x, const AffinePoint &y) const override |
Setup a table for 2-ary multiplication. | |
std::optional< ProjectivePoint > | mul2_vartime (const PrecomputedMul2Table &tableb, const Scalar &s1, const Scalar &s2) const override |
std::optional< Scalar > | mul2_vartime_x_mod_order (const PrecomputedMul2Table &tableb, const Scalar &s1, const Scalar &s2) const override |
ProjectivePoint | mul_by_g (const Scalar &scalar, RandomNumberGenerator &rng) const override |
size_t | order_bits () const override |
Return the bit length of the group order. | |
ProjectivePoint | point_add (const ProjectivePoint &a, const ProjectivePoint &b) const override |
ProjectivePoint | point_add_mixed (const ProjectivePoint &a, const AffinePoint &b) const override |
ProjectivePoint | point_double (const ProjectivePoint &pt) const override |
ProjectivePoint | point_negate (const ProjectivePoint &pt) const override |
AffinePoint | point_to_affine (const ProjectivePoint &pt) const override |
ProjectivePoint | point_to_projective (const AffinePoint &pt) const override |
PrimeOrderCurveImpl () | |
Scalar | random_scalar (RandomNumberGenerator &rng) const override |
Scalar | scalar_add (const Scalar &a, const Scalar &b) const override |
size_t | scalar_bytes () const override |
Return the byte length of the scalar element. | |
bool | scalar_equal (const Scalar &a, const Scalar &b) const override |
Scalar | scalar_from_bits_with_trunc (std::span< const uint8_t > bytes) const override |
Scalar | scalar_from_u32 (uint32_t x) const override |
std::optional< Scalar > | scalar_from_wide_bytes (std::span< const uint8_t > bytes) const override |
Scalar | scalar_invert (const Scalar &s) const override |
bool | scalar_is_zero (const Scalar &s) const override |
Scalar | scalar_mul (const Scalar &a, const Scalar &b) const override |
Scalar | scalar_negate (const Scalar &s) const override |
Scalar | scalar_one () const override |
Scalar | scalar_square (const Scalar &s) const override |
Scalar | scalar_sub (const Scalar &a, const Scalar &b) const override |
Scalar | scalar_zero () const override |
void | serialize_point (std::span< uint8_t > bytes, const AffinePoint &pt) const override |
void | serialize_point_compressed (std::span< uint8_t > bytes, const AffinePoint &pt) const override |
void | serialize_point_x (std::span< uint8_t > bytes, const AffinePoint &pt) const override |
void | serialize_scalar (std::span< uint8_t > bytes, const Scalar &scalar) const override |
Static Public Member Functions | |
static std::shared_ptr< const PrimeOrderCurve > | from_id (PrimeOrderCurveId id) |
static std::shared_ptr< const PrimeOrderCurve > | from_name (std::string_view name) |
static std::shared_ptr< const PrimeOrderCurve > | instance () |
Static Public Attributes | |
static const size_t | MaximumBitLength = 521 |
static const size_t | MaximumByteLength = (MaximumBitLength + 7) / 8 |
static const size_t | StorageWords = (MaximumByteLength + sizeof(word) - 1) / sizeof(word) |
Number of words used to store MaximumByteLength. | |
Definition at line 16 of file pcurves_wrap.h.
|
inherited |
|
inherited |
|
inline |
Definition at line 215 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 117 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Base point multiplication, returning only the x coordinate modulo the group order
Multiply by the standard generator point g, then extract the x coordinate as an integer, then reduce the x coordinate modulo the group order
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 88 of file pcurves_wrap.h.
References Botan::PrecomputedBaseMulTable< C, W >::mul(), and Botan::PCurve::PrimeOrderCurve::ProjectivePoint::to_affine().
|
inlineoverridevirtual |
Deserialize a point
Both compressed and uncompressed encodings are accepted
Note that the deprecated "hybrid" encoding is not supported here
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 164 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Deserialize a scalar
This function requires the input length be exactly scalar_bytes long; it does not accept inputs that are shorter, or with excess leading zero padding bytes.
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 142 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Return the byte length of a field element
Each point consists of two field elements
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 38 of file pcurves_wrap.h.
|
staticinherited |
Definition at line 80 of file pcurves.cpp.
References Botan::PCurve::PCurveInstance::brainpool256r1(), Botan::PCurve::PrimeOrderCurveId::brainpool256r1, Botan::PCurve::PCurveInstance::brainpool384r1(), Botan::PCurve::PrimeOrderCurveId::brainpool384r1, Botan::PCurve::PCurveInstance::brainpool512r1(), Botan::PCurve::PrimeOrderCurveId::brainpool512r1, Botan::PCurve::PCurveInstance::frp256v1(), Botan::PCurve::PrimeOrderCurveId::frp256v1, Botan::PCurve::PCurveInstance::secp256k1(), Botan::PCurve::PrimeOrderCurveId::secp256k1, Botan::PCurve::PCurveInstance::secp256r1(), Botan::PCurve::PrimeOrderCurveId::secp256r1, Botan::PCurve::PCurveInstance::secp384r1(), Botan::PCurve::PrimeOrderCurveId::secp384r1, Botan::PCurve::PCurveInstance::secp521r1(), Botan::PCurve::PrimeOrderCurveId::secp521r1, Botan::PCurve::PCurveInstance::sm2p256v1(), and Botan::PCurve::PrimeOrderCurveId::sm2p256v1.
Referenced by Botan::hash_to_curve_sswu().
|
inlinestaticinherited |
Definition at line 44 of file pcurves.h.
References name.
|
inlineoverridevirtual |
Return the standard generator.
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 95 of file pcurves_wrap.h.
|
inlineoverridevirtual |
RFC 9380 hash to curve
This is currently only supported for a few specific curves
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 172 of file pcurves_wrap.h.
References Botan::hash_to_curve_sswu().
|
inlinestatic |
Definition at line 217 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Generic point multiplication
Multiply an arbitrary point by a scalar
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 44 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Setup a table for 2-ary multiplication.
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 49 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Perform 2-ary multiplication (variable time)
Compute s1*pt1 + s2*pt2 in variable time
Returns nullopt if the produced point is the point at infinity
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 54 of file pcurves_wrap.h.
References Botan::WindowedMul2Table< C, W >::mul2_vartime(), and Botan::PCurve::PrimeOrderCurveImpl< C >::PrecomputedMul2TableC::table().
|
inlineoverridevirtual |
Perform 2-ary multiplication (variable time), reducing x modulo order
Compute s1*pt1 + s2*pt2 in variable time, then extract the x coordinate of the result, and reduce x modulo the group order
Returns nullopt if the produced point is the point at infinity
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 70 of file pcurves_wrap.h.
References Botan::WindowedMul2Table< C, W >::mul2_vartime(), Botan::PCurve::PrimeOrderCurveImpl< C >::PrecomputedMul2TableC::table(), and Botan::PCurve::PrimeOrderCurve::ProjectivePoint::to_affine().
|
inlineoverridevirtual |
Base point multiplication
Multiply by the standard generator point g
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 40 of file pcurves_wrap.h.
References Botan::PrecomputedBaseMulTable< C, W >::mul().
|
inlineoverridevirtual |
Return the bit length of the group order.
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 34 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 107 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 111 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 105 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 115 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 97 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 101 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Return a new random scalar
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 213 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 183 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Return the byte length of the scalar element.
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 36 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 203 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Deserialize a scalar using ECDSA truncation rules
ECDSA and other signature schemes use a specific rule for converting a hash output into a scalar.
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 152 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Return a small scalar
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 211 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Reduce an integer modulo the group order
The input can be at most twice the bit length of the order; if larger than this nullopt is returned
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 156 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 197 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 201 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 191 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 199 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Return the scalar one
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 209 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 195 of file pcurves_wrap.h.
References Botan::square().
|
inlineoverridevirtual |
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 187 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Return the scalar zero
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 207 of file pcurves_wrap.h.
|
inlineoverridevirtual |
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 121 of file pcurves_wrap.h.
References BOTAN_ARG_CHECK.
|
inlineoverridevirtual |
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 126 of file pcurves_wrap.h.
References BOTAN_ARG_CHECK.
|
inlineoverridevirtual |
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 132 of file pcurves_wrap.h.
References BOTAN_ARG_CHECK.
|
inlineoverridevirtual |
Implements Botan::PCurve::PrimeOrderCurve.
Definition at line 137 of file pcurves_wrap.h.
References BOTAN_ARG_CHECK.
|
staticinherited |
|
staticinherited |
|
staticinherited |