mirror of
https://github.com/guanzhi/GmSSL.git
synced 2026-05-07 00:46:17 +08:00
158 lines
6.8 KiB
C
158 lines
6.8 KiB
C
/*
|
||
* Copyright 2014-2024 The GmSSL Project. All Rights Reserved.
|
||
*
|
||
* Licensed under the Apache License, Version 2.0 (the License); you may
|
||
* not use this file except in compliance with the License.
|
||
*
|
||
* http://www.apache.org/licenses/LICENSE-2.0
|
||
*/
|
||
|
||
|
||
|
||
#ifndef GMSSL_SM2_Z256_H
|
||
#define GMSSL_SM2_Z256_H
|
||
|
||
#include <stdio.h>
|
||
#include <stdint.h>
|
||
#include <stdlib.h>
|
||
|
||
#ifdef __cplusplus
|
||
extern "C" {
|
||
#endif
|
||
|
||
|
||
// z256 means compact presentation of uint256
|
||
typedef uint64_t sm2_z256_t[4];
|
||
|
||
|
||
void sm2_z256_set_one(sm2_z256_t r);
|
||
void sm2_z256_set_zero(sm2_z256_t r);
|
||
|
||
int sm2_z256_rand_range(uint64_t r[4], const uint64_t range[4]);
|
||
void sm2_z256_copy(uint64_t r[4], const uint64_t a[4]);
|
||
void sm2_z256_copy_conditional(uint64_t dst[4], const uint64_t src[4], uint64_t move);
|
||
void sm2_z256_from_bytes(uint64_t r[4], const uint8_t in[32]);
|
||
void sm2_z256_to_bytes(const uint64_t a[4], uint8_t out[32]);
|
||
int sm2_z256_cmp(const uint64_t a[4], const uint64_t b[4]);
|
||
uint64_t sm2_z256_is_zero(const uint64_t a[4]);
|
||
uint64_t sm2_z256_equ(const uint64_t a[4], const uint64_t b[4]);
|
||
void sm2_z256_rshift(uint64_t r[4], const uint64_t a[4], unsigned int nbits);
|
||
uint64_t sm2_z256_add(uint64_t r[4], const uint64_t a[4], const uint64_t b[4]);
|
||
uint64_t sm2_z256_sub(uint64_t r[4], const uint64_t a[4], const uint64_t b[4]);
|
||
void sm2_z256_mul(uint64_t r[8], const uint64_t a[4], const uint64_t b[4]);
|
||
int sm2_z256_get_booth(const uint64_t a[4], unsigned int window_size, int i);
|
||
void sm2_z256_from_hex(uint64_t r[4], const char *hex);
|
||
int sm2_z256_equ_hex(const uint64_t a[4], const char *hex);
|
||
int sm2_z256_print(FILE *fp, int ind, int fmt, const char *label, const sm2_z256_t a);
|
||
|
||
void sm2_z256_modp_add(uint64_t r[4], const uint64_t a[4], const uint64_t b[4]);
|
||
void sm2_z256_modp_dbl(uint64_t r[4], const uint64_t a[4]);
|
||
void sm2_z256_modp_tri(uint64_t r[4], const uint64_t a[4]);
|
||
void sm2_z256_modp_sub(uint64_t r[4], const uint64_t a[4], const uint64_t b[4]);
|
||
void sm2_z256_modp_neg(uint64_t r[4], const uint64_t a[4]);
|
||
void sm2_z256_modp_haf(uint64_t r[4], const uint64_t a[4]);
|
||
|
||
void sm2_z256_modp_to_mont(const uint64_t a[4], uint64_t r[4]);
|
||
void sm2_z256_modp_from_mont(uint64_t r[4], const uint64_t a[4]);
|
||
void sm2_z256_modp_mont_mul(uint64_t r[4], const uint64_t a[4], const uint64_t b[4]);
|
||
void sm2_z256_modp_mont_sqr(uint64_t r[4], const uint64_t a[4]);
|
||
void sm2_z256_modp_mont_exp(uint64_t r[4], const uint64_t a[4], const uint64_t e[4]);
|
||
void sm2_z256_modp_mont_inv(uint64_t r[4], const uint64_t a[4]);
|
||
int sm2_z256_modp_mont_sqrt(uint64_t r[4], const uint64_t a[4]);
|
||
|
||
void sm2_z256_modn_add(uint64_t r[4], const uint64_t a[4], const uint64_t b[4]);
|
||
void sm2_z256_modn_sub(uint64_t r[4], const uint64_t a[4], const uint64_t b[4]);
|
||
void sm2_z256_modn_neg(uint64_t r[4], const uint64_t a[4]);
|
||
void sm2_z256_modn_mul(uint64_t r[4], const uint64_t a[4], const uint64_t b[4]);
|
||
void sm2_z256_modn_sqr(uint64_t r[4], const uint64_t a[4]);
|
||
void sm2_z256_modn_exp(uint64_t r[4], const uint64_t a[4], const uint64_t e[4]);
|
||
void sm2_z256_modn_inv(uint64_t r[4], const uint64_t a[4]);
|
||
|
||
// 这些函数可能没有必要，因为mont几乎只需要用于modn_inv
|
||
void sm2_z256_modn_to_mont(const uint64_t a[4], uint64_t r[4]);
|
||
void sm2_z256_modn_from_mont(uint64_t r[4], const uint64_t a[4]);
|
||
void sm2_z256_modn_mont_mul(uint64_t r[4], const uint64_t a[4], const uint64_t b[4]);
|
||
void sm2_z256_modn_mont_sqr(uint64_t r[4], const uint64_t a[4]);
|
||
void sm2_z256_modn_mont_exp(uint64_t r[4], const uint64_t a[4], const uint64_t e[4]);
|
||
void sm2_z256_modn_mont_inv(uint64_t r[4], const uint64_t a[4]);
|
||
|
||
|
||
typedef struct {
|
||
uint64_t X[4];
|
||
uint64_t Y[4];
|
||
uint64_t Z[4];
|
||
} SM2_Z256_POINT;
|
||
|
||
void sm2_z256_point_set_infinity(SM2_Z256_POINT *P);
|
||
int sm2_z256_point_from_bytes(SM2_Z256_POINT *P, const uint8_t in[64]);
|
||
void sm2_z256_point_to_bytes(const SM2_Z256_POINT *P, uint8_t out[64]);
|
||
|
||
int sm2_z256_point_is_at_infinity(const SM2_Z256_POINT *P);
|
||
int sm2_z256_point_is_on_curve(const SM2_Z256_POINT *P);
|
||
int sm2_z256_point_equ(const SM2_Z256_POINT *P, const SM2_Z256_POINT *Q); // 这个要声明一下，Jacobian坐标系上一个点有不同的表示
|
||
void sm2_z256_point_get_xy(const SM2_Z256_POINT *P, uint64_t x[4], uint64_t y[4]);
|
||
|
||
|
||
void sm2_z256_point_dbl(SM2_Z256_POINT *R, const SM2_Z256_POINT *A);
|
||
void sm2_z256_point_add(SM2_Z256_POINT *r, const SM2_Z256_POINT *a, const SM2_Z256_POINT *b);
|
||
void sm2_z256_point_neg(SM2_Z256_POINT *R, const SM2_Z256_POINT *P);
|
||
void sm2_z256_point_sub(SM2_Z256_POINT *R, const SM2_Z256_POINT *A, const SM2_Z256_POINT *B);
|
||
void sm2_z256_point_get_affine(const SM2_Z256_POINT *P, uint64_t x[4], uint64_t y[4]);
|
||
int sm2_z256_point_print(FILE *fp, int fmt, int ind, const char *label, const SM2_Z256_POINT *P);
|
||
|
||
|
||
typedef struct {
|
||
uint64_t x[4];
|
||
uint64_t y[4];
|
||
} SM2_Z256_AFFINE_POINT;
|
||
|
||
void sm2_z256_point_copy_affine(SM2_Z256_POINT *R, const SM2_Z256_AFFINE_POINT *P);
|
||
void sm2_z256_point_add_affine(SM2_Z256_POINT *r, const SM2_Z256_POINT *a, const SM2_Z256_AFFINE_POINT *b);
|
||
void sm2_z256_point_sub_affine(SM2_Z256_POINT *R, const SM2_Z256_POINT *A, const SM2_Z256_AFFINE_POINT *B);
|
||
int sm2_z256_point_affine_print(FILE *fp, int fmt, int ind, const char *label, const SM2_Z256_AFFINE_POINT *P);
|
||
|
||
void sm2_z256_point_mul_generator(SM2_Z256_POINT *R, const uint64_t k[4]);
|
||
void sm2_z256_point_mul(SM2_Z256_POINT *R, const uint64_t k[4], const SM2_Z256_POINT *P);
|
||
void sm2_z256_point_mul_sum(SM2_Z256_POINT *R, const uint64_t t[4], const SM2_Z256_POINT *P, const uint64_t s[4]);
|
||
|
||
const uint64_t *sm2_z256_prime(void);
|
||
const uint64_t *sm2_z256_order(void);
|
||
const uint64_t *sm2_z256_order_minus_one(void);
|
||
const uint64_t *sm2_z256_one(void);
|
||
|
||
void sm2_z256_point_from_hex(SM2_Z256_POINT *P, const char *hex);
|
||
int sm2_z256_point_equ_hex(const SM2_Z256_POINT *P, const char *hex);
|
||
|
||
enum {
|
||
SM2_point_at_infinity = 0x00,
|
||
SM2_point_compressed_y_even = 0x02,
|
||
SM2_point_compressed_y_odd = 0x03,
|
||
SM2_point_uncompressed = 0x04,
|
||
SM2_point_uncompressed_y_even = 0x06,
|
||
SM2_point_uncompressed_y_odd = 0x07,
|
||
};
|
||
|
||
int sm2_z256_point_from_x_bytes(SM2_Z256_POINT *P, const uint8_t x_bytes[32], int y_is_odd);
|
||
int sm2_z256_point_from_hash(SM2_Z256_POINT *R, const uint8_t *data, size_t datalen, int y_is_odd);
|
||
int sm2_z256_point_from_octets(SM2_Z256_POINT *P, const uint8_t *in, size_t inlen);
|
||
|
||
int sm2_z256_point_to_uncompressed_octets(const SM2_Z256_POINT *P, uint8_t out[65]);
|
||
int sm2_z256_point_to_compressed_octets(const SM2_Z256_POINT *P, uint8_t out[33]);
|
||
int sm2_z256_point_from_octets(SM2_Z256_POINT *P, const uint8_t *in, size_t inlen);
|
||
|
||
/*
|
||
RFC 5480 Elliptic Curve Cryptography Subject Public Key Information
|
||
ECPoint ::= OCTET STRING
|
||
*/
|
||
#define SM2_POINT_MAX_SIZE (2 + 65)
|
||
int sm2_z256_point_to_der(const SM2_Z256_POINT *P, uint8_t **out, size_t *outlen);
|
||
int sm2_z256_point_from_der(SM2_Z256_POINT *P, const uint8_t **in, size_t *inlen);
|
||
int sm2_z256_point_print(FILE *fp, int fmt, int ind, const char *label, const SM2_Z256_POINT *P);
|
||
|
||
|
||
|
||
#ifdef __cplusplus
|
||
}
|
||
#endif
|
||
#endif
|