abc/GmSSL
1
0
Fork 0
mirror of https://github.com/guanzhi/GmSSL.git synced 2026-05-30 22:44:06 +08:00
Code Issues Packages Projects Releases Wiki Activity

Update BN and EC module

Browse Source
This commit is contained in:
Zhi Guan
2019-02-24 06:15:22 +01:00
parent fb47201b7e
commit bf4c6920d9
8 changed files with 5536 additions and 5432 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
crypto/ec/ec_err.c
View File

@@ -178,6 +178,7 @@ static ERR_STRING_DATA EC_str_functs[] = {
{ERR_FUNC(EC_F_EC_KEY_SIMPLE_CHECK_KEY), "ec_key_simple_check_key"},
{ERR_FUNC(EC_F_EC_KEY_SIMPLE_OCT2PRIV), "ec_key_simple_oct2priv"},
{ERR_FUNC(EC_F_EC_KEY_SIMPLE_PRIV2OCT), "ec_key_simple_priv2oct"},
{ERR_FUNC(EC_F_EC_KEY_SPLIT), "EC_KEY_split"},
{ERR_FUNC(EC_F_EC_POINTS_MAKE_AFFINE), "EC_POINTs_make_affine"},
{ERR_FUNC(EC_F_EC_POINT_ADD), "EC_POINT_add"},
{ERR_FUNC(EC_F_EC_POINT_CMP), "EC_POINT_cmp"},
@@ -329,6 +330,7 @@ static ERR_STRING_DATA EC_str_reasons[] = {
"invalid sm2 kap checksum length"},
{ERR_REASON(EC_R_INVALID_SM2_KAP_CHECKSUM_VALUE),
"invalid sm2 kap checksum value"},
{ERR_REASON(EC_R_INVALID_SPLIT_PARAMETER), "invalid split parameter"},
{ERR_REASON(EC_R_INVALID_TRINOMIAL_BASIS), "invalid trinomial basis"},
{ERR_REASON(EC_R_INVALID_TYPE1CURVE), "invalid type1curve"},
{ERR_REASON(EC_R_INVALID_TYPE1_CURVE), "invalid type1 curve"},

98
crypto/ec/ec_key.c
View File

@@ -639,3 +639,101 @@ int EC_KEY_can_sign(const EC_KEY *eckey)
return 0;
return 1;
}
#define EC_KEY_MIN_SHARES 2
#define EC_KEY_MAX_SHARES 5
STACK_OF(EC_KEY) *EC_KEY_split(EC_KEY *ec_key, int k, int n)
{
STACK_OF(EC_KEY) *ret = NULL;
STACK_OF(EC_KEY) *keys = NULL;
STACK_OF(BIGNUM) *as = NULL;
const BIGNUM *order;
const BIGNUM *d;
EC_KEY *key = NULL; /* for stack */
BIGNUM *a = NULL; /* for stack */
BIGNUM *fx = NULL;
BIGNUM *ax = NULL;
BN_CTX *bn_ctx = NULL;
int i, x, xpow;
if (!(d = EC_KEY_get0_private_key(ec_key))
|| !(order = EC_GROUP_get0_order(EC_KEY_get0_group(ec_key)))) {
ECerr(EC_F_EC_KEY_SPLIT, EC_R_INVALID_PRIVATE_KEY);
return NULL;
}
if (k < EC_KEY_MIN_SHARES || k > n || n > EC_KEY_MAX_SHARES) {
ECerr(EC_F_EC_KEY_SPLIT, EC_R_INVALID_SPLIT_PARAMETER);
return NULL;
}
if (!(keys = sk_EC_KEY_new_null())
|| !(as = sk_BIGNUM_new_null())
|| !(fx = BN_new())
|| !(ax = BN_new())
|| !(bn_ctx = BN_CTX_new())) {
ECerr(EC_F_EC_KEY_SPLIT, ERR_R_MALLOC_FAILURE);
goto end;
}
/* a_i = rand(1, order), i = 0 .. k-1 */
for (i = 0; i < k; i++) {
if (!(a = BN_new())) {
ECerr(EC_F_EC_KEY_SPLIT, ERR_R_MALLOC_FAILURE);
goto end;
}
do {
if (!BN_rand_range(a, order)) {
ECerr(EC_F_EC_KEY_SPLIT, ERR_R_BN_LIB);
goto end;
}
} while (BN_is_zero(a));
if (!sk_BIGNUM_push(as, a)) {
ECerr(EC_F_EC_KEY_SPLIT, ERR_R_BN_LIB);
goto end;
}
a = NULL;
}
/* f(x) = d + a_0 * x^1 + ... + a_{k-1} * x^k, x = 1 .. n */
for (x = 1; x <= n; x++) {
if (!(key = EC_KEY_dup(ec_key))
|| !BN_copy(fx, d)) {
ECerr(EC_F_EC_KEY_SPLIT, ERR_R_MALLOC_FAILURE);
goto end;
}
xpow = x;
for (i = 0; i < k; i++) {
if (!BN_copy(ax, sk_BIGNUM_value(as, i))
|| !BN_mul_word(ax, xpow)
|| !BN_mod_add(fx, fx, ax, order, bn_ctx)) {
ECerr(EC_F_EC_KEY_SPLIT, ERR_R_BN_LIB);
goto end;
}
xpow *= x;
}
if (!EC_KEY_set_private_key(key, fx)
|| !sk_EC_KEY_push(keys, key)) {
ECerr(EC_F_EC_KEY_SPLIT, ERR_R_EC_LIB);
goto end;
}
key = NULL;
}
ret = keys;
keys = NULL;
end:
sk_EC_KEY_free(keys);
sk_BIGNUM_free(as);
EC_KEY_free(key);
BN_free(a);
BN_free(fx);
BN_free(ax);
BN_CTX_free(bn_ctx);
return ret;
}