7#include <botan/internal/ec_inner_bn.h>
9#include <botan/internal/mod_inv.h>
16 throw Invalid_State(
"Failed conversion to EC_Scalar_Data_BN");
26 return this->
group()->order_bytes();
30 return std::make_unique<EC_Scalar_Data_BN>(this->
group(), this->
value());
46 m_group->mod_order().square(m_v);
50 return std::make_unique<EC_Scalar_Data_BN>(m_group, m_group->mod_order().reduce(-m_v));
62 return std::make_unique<EC_Scalar_Data_BN>(m_group, m_group->mod_order().reduce(m_v +
checked_ref(other).
value()));
66 return std::make_unique<EC_Scalar_Data_BN>(m_group, m_group->mod_order().reduce(m_v -
checked_ref(other).
value()));
70 return std::make_unique<EC_Scalar_Data_BN>(m_group, m_group->mod_order().multiply(m_v,
checked_ref(other).
value()));
79 m_group(std::move(group)), m_pt(std::move(pt)) {
82 m_xy = m_pt.xy_bytes();
87 std::span<const uint8_t> pt) :
88 m_group(std::move(group)) {
97 return std::make_unique<EC_AffinePoint_Data_BN>(m_group, m_pt);
106 std::vector<BigInt>& ws)
const {
117 const auto order = m_group->order() * m_group->cofactor();
118 auto pt =
mul.mul(bn.value(), rng, order, ws);
119 return std::make_unique<EC_AffinePoint_Data_BN>(m_group, std::move(pt));
124 std::vector<BigInt>& ws)
const {
135 const auto order = m_group->order() * m_group->cofactor();
136 auto pt =
mul.mul(bn.value(), rng, order, ws);
141 return m_group->p_bytes();
152 copy_mem(bytes, std::span{m_xy}.first(fe_bytes));
159 copy_mem(bytes, std::span{m_xy}.last(fe_bytes));
173 const bool y_is_odd = (m_xy[m_xy.size() - 1] & 0x01) == 0x01;
176 stuffer.
append(y_is_odd ? 0x03 : 0x02);
183 BOTAN_ARG_CHECK(bytes.size() == 1 + 2 * fe_bytes,
"Invalid output size");
190 m_group(g.group()), m_tbl(g.to_legacy_point(), h.to_legacy_point()) {
200 auto pt = m_tbl.
multi_exp(bn_x.value(), bn_y.value());
205 return std::make_unique<EC_AffinePoint_Data_BN>(m_group, std::move(pt));
216 const auto pt = m_tbl.
multi_exp(bn_x.value(), bn_y.value());
#define BOTAN_STATE_CHECK(expr)
#define BOTAN_ASSERT_NONNULL(ptr)
#define BOTAN_ARG_CHECK(expr, msg)
void serialize_to(std::span< uint8_t > out) const
Helper class to ease in-place marshalling of concatenated fixed-length values.
constexpr void append(std::span< const uint8_t > buffer)
constexpr std::span< uint8_t > next(size_t bytes)
void serialize_x_to(std::span< uint8_t > bytes) const override
const std::shared_ptr< const EC_Group_Data > & group() const override
secure_vector< uint8_t > mul_x_only(const EC_Scalar_Data &scalar, RandomNumberGenerator &rng, std::vector< BigInt > &ws) const override
EC_AffinePoint_Data_BN(std::shared_ptr< const EC_Group_Data > group, EC_Point pt)
void serialize_compressed_to(std::span< uint8_t > bytes) const override
std::unique_ptr< EC_AffinePoint_Data > mul(const EC_Scalar_Data &scalar, RandomNumberGenerator &rng, std::vector< BigInt > &ws) const override
std::unique_ptr< EC_AffinePoint_Data > clone() const override
size_t field_element_bytes() const override
bool is_identity() const override
void serialize_y_to(std::span< uint8_t > bytes) const override
void serialize_xy_to(std::span< uint8_t > bytes) const override
void serialize_uncompressed_to(std::span< uint8_t > bytes) const override
virtual const std::shared_ptr< const EC_Group_Data > & group() const =0
EC_Mul2Table_Data_BN(const EC_AffinePoint_Data &g, const EC_AffinePoint_Data &h)
bool mul2_vartime_x_mod_order_eq(const EC_Scalar_Data &v, const EC_Scalar_Data &x, const EC_Scalar_Data &y) const override
std::unique_ptr< EC_AffinePoint_Data > mul2_vartime(const EC_Scalar_Data &x, const EC_Scalar_Data &y) const override
EC_Point multi_exp(const BigInt &k1, const BigInt &k2) const
secure_vector< uint8_t > xy_bytes() const
bool _is_x_eq_to_v_mod_order(const BigInt &v) const
std::unique_ptr< EC_Scalar_Data > invert() const override
std::unique_ptr< EC_Scalar_Data > clone() const override
std::unique_ptr< EC_Scalar_Data > negate() const override
const std::shared_ptr< const EC_Group_Data > & group() const override
bool is_zero() const override
std::unique_ptr< EC_Scalar_Data > sub(const EC_Scalar_Data &other) const override
void square_self() override
std::unique_ptr< EC_Scalar_Data > add(const EC_Scalar_Data &other) const override
std::unique_ptr< EC_Scalar_Data > mul(const EC_Scalar_Data &other) const override
const BigInt & value() const
void serialize_to(std::span< uint8_t > bytes) const override
static const EC_Scalar_Data_BN & checked_ref(const EC_Scalar_Data &data)
bool is_eq(const EC_Scalar_Data &y) const override
std::unique_ptr< EC_Scalar_Data > invert_vartime() const override
void assign(const EC_Scalar_Data &y) override
size_t bytes() const override
virtual const std::shared_ptr< const EC_Group_Data > & group() const =0
BigInt inverse_mod_public_prime(const BigInt &x, const BigInt &p)
std::vector< T, secure_allocator< T > > secure_vector
constexpr void copy_mem(T *out, const T *in, size_t n)
EC_Point OS2ECP(std::span< const uint8_t > data, const CurveGFp &curve)