7#include <botan/internal/ec_inner_pc.h>
9#include <botan/mem_ops.h>
16 throw Invalid_State(
"Failed conversion to EC_Scalar_Data_PC");
26 return this->
group()->order_bytes();
30 return std::make_unique<EC_Scalar_Data_PC>(this->
group(), this->
value());
34 auto& pcurve = this->
group()->pcurve();
35 return pcurve.scalar_is_zero(m_v);
39 auto& pcurve =
group()->pcurve();
40 return pcurve.scalar_equal(m_v,
checked_ref(other).m_v);
49 m_v = m_group->pcurve().scalar_square(m_v);
53 return std::make_unique<EC_Scalar_Data_PC>(m_group, m_group->pcurve().scalar_negate(m_v));
57 return std::make_unique<EC_Scalar_Data_PC>(m_group, m_group->pcurve().scalar_invert(m_v));
61 return std::make_unique<EC_Scalar_Data_PC>(m_group, m_group->pcurve().scalar_invert_vartime(m_v));
65 return std::make_unique<EC_Scalar_Data_PC>(m_group,
group()->pcurve().scalar_add(m_v,
checked_ref(other).m_v));
69 return std::make_unique<EC_Scalar_Data_PC>(m_group,
group()->pcurve().scalar_sub(m_v,
checked_ref(other).m_v));
73 return std::make_unique<EC_Scalar_Data_PC>(m_group,
group()->pcurve().scalar_mul(m_v,
checked_ref(other).m_v));
78 m_group->pcurve().serialize_scalar(
bytes, m_v);
83 m_group(std::move(
group)), m_pt(std::move(pt)) {
84 auto& pcurve = m_group->pcurve();
86 if(!pcurve.affine_point_is_identity(m_pt)) {
87 m_xy.resize(1 + 2 * field_element_bytes());
88 pcurve.serialize_point(m_xy, m_pt);
95 throw Invalid_State(
"Failed conversion to EC_AffinePoint_Data_PC");
101 return std::make_unique<EC_AffinePoint_Data_PC>(m_group, m_pt);
112 auto& pcurve = m_group->pcurve();
113 auto pt = pcurve.point_to_affine(pcurve.mul(m_pt, k, rng));
114 return std::make_unique<EC_AffinePoint_Data_PC>(m_group, std::move(pt));
121 return m_group->pcurve().mul_x_only(m_pt, k, rng);
125 return m_group->pcurve().field_element_bytes();
136 copy_mem(bytes, std::span{m_xy}.subspan(1, fe_bytes));
143 copy_mem(bytes, std::span{m_xy}.subspan(1 + fe_bytes, fe_bytes));
150 copy_mem(bytes, std::span{m_xy}.last(2 * fe_bytes));
157 const bool y_is_odd = (m_xy.back() & 0x01) == 0x01;
160 stuffer.
append(y_is_odd ? 0x03 : 0x02);
167 BOTAN_ARG_CHECK(bytes.size() == 1 + 2 * fe_bytes,
"Invalid output size");
171#if defined(BOTAN_HAS_LEGACY_EC_POINT)
172EC_Point EC_AffinePoint_Data_PC::to_legacy_point()
const {
177 return EC_Point(m_group->curve(),
189 m_tbl = m_group->pcurve().mul2_setup_g(pt_q.value());
199 auto& pcurve = m_group->pcurve();
201 if(
auto pt = pcurve.mul2_vartime(*m_tbl, x.value(), y.value())) {
202 return std::make_unique<EC_AffinePoint_Data_PC>(m_group, pcurve.point_to_affine(*pt));
217 return m_group->pcurve().mul2_vartime_x_mod_order_eq(*m_tbl, v.value(), x.value(), y.value());
#define BOTAN_STATE_CHECK(expr)
#define BOTAN_ARG_CHECK(expr, msg)
static BigInt from_bytes(std::span< const uint8_t > bytes)
Helper class to ease in-place marshalling of concatenated fixed-length values.
constexpr void append(std::span< const uint8_t > buffer)
constexpr std::span< uint8_t > next(size_t bytes)
std::unique_ptr< EC_AffinePoint_Data > mul(const EC_Scalar_Data &scalar, RandomNumberGenerator &rng) const override
size_t field_element_bytes() const override
secure_vector< uint8_t > mul_x_only(const EC_Scalar_Data &scalar, RandomNumberGenerator &rng) const override
void serialize_uncompressed_to(std::span< uint8_t > bytes) const override
void serialize_xy_to(std::span< uint8_t > bytes) const override
std::unique_ptr< EC_AffinePoint_Data > clone() const override
const std::shared_ptr< const EC_Group_Data > & group() const override
EC_AffinePoint_Data_PC(std::shared_ptr< const EC_Group_Data > group, PCurve::PrimeOrderCurve::AffinePoint pt)
bool is_identity() const override
void serialize_x_to(std::span< uint8_t > bytes) const override
void serialize_y_to(std::span< uint8_t > bytes) const override
static const EC_AffinePoint_Data_PC & checked_ref(const EC_AffinePoint_Data &data)
void serialize_compressed_to(std::span< uint8_t > bytes) const override
virtual const std::shared_ptr< const EC_Group_Data > & group() const =0
bool mul2_vartime_x_mod_order_eq(const EC_Scalar_Data &v, const EC_Scalar_Data &x, const EC_Scalar_Data &y) const override
EC_Mul2Table_Data_PC(const EC_AffinePoint_Data &q)
std::unique_ptr< EC_AffinePoint_Data > mul2_vartime(const EC_Scalar_Data &x, const EC_Scalar_Data &y) const override
void serialize_to(std::span< uint8_t > bytes) const override
std::unique_ptr< EC_Scalar_Data > invert() const override
void assign(const EC_Scalar_Data &y) override
size_t bytes() const override
static const EC_Scalar_Data_PC & checked_ref(const EC_Scalar_Data &data)
std::unique_ptr< EC_Scalar_Data > sub(const EC_Scalar_Data &other) const override
bool is_eq(const EC_Scalar_Data &y) const override
void square_self() override
std::unique_ptr< EC_Scalar_Data > clone() const override
EC_Scalar_Data_PC(std::shared_ptr< const EC_Group_Data > group, PCurve::PrimeOrderCurve::Scalar v)
std::unique_ptr< EC_Scalar_Data > mul(const EC_Scalar_Data &other) const override
const std::shared_ptr< const EC_Group_Data > & group() const override
std::unique_ptr< EC_Scalar_Data > negate() const override
bool is_zero() const override
std::unique_ptr< EC_Scalar_Data > add(const EC_Scalar_Data &other) const override
std::unique_ptr< EC_Scalar_Data > invert_vartime() const override
const auto & value() const
virtual const std::shared_ptr< const EC_Group_Data > & group() const =0
std::vector< T, secure_allocator< T > > secure_vector
constexpr void copy_mem(T *out, const T *in, size_t n)