bp384 0.14.0

Brainpool P-384 (brainpoolP384r1 and brainpoolP384t1) elliptic curves
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121

//! Field arithmetic modulo p = 0x8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53
//!
//! Arithmetic implementations have been synthesized using fiat-crypto.
//!
//! # License
//!
//! Copyright (c) 2015-2020 the fiat-crypto authors
//!
//! fiat-crypto is distributed under the terms of the MIT License, the
//! Apache License (Version 2.0), and the BSD 1-Clause License;
//! users may pick which license to apply.

use crate::U384;
use elliptic_curve::{
    bigint::cpubits,
    ff::PrimeField,
    ops::BatchInvert,
    subtle::{Choice, ConstantTimeEq, CtOption},
};

// TODO(tarcieri): remove this when we can use `const _` to silence warnings
cpubits! {
    32 => {
        #[cfg(not(bp384_backend = "bigint"))]
        #[path = "field/bp384_32.rs"]
        #[allow(
            dead_code,
            clippy::identity_op,
            clippy::needless_lifetimes,
            clippy::unnecessary_cast,
            clippy::too_many_arguments
        )]
        mod field_impl;
    }
    64 => {
        #[cfg(not(bp384_backend = "bigint"))]
        #[path = "field/bp384_64.rs"]
        #[allow(
            dead_code,
            clippy::identity_op,
            clippy::needless_lifetimes,
            clippy::unnecessary_cast,
            clippy::too_many_arguments
        )]
        mod field_impl;
    }
}

#[cfg(not(bp384_backend = "bigint"))]
use self::field_impl::*;

/// Constant representing the modulus serialized as hex.
const MODULUS_HEX: &str = "8cb91e82a3386d280f5d6f7e50e641df152f7109ed5456b412b1da197fb71123acd3a729901d1a71874700133107ec53";

primefield::monty_field_params! {
    name: FieldParams,
    modulus: MODULUS_HEX,
    uint: U384,
    byte_order: primefield::ByteOrder::BigEndian,
    multiplicative_generator: 3,
    doc: "Montgomery parameters for brainpoolP384's field modulus"
}

primefield::monty_field_element! {
    name: FieldElement,
    params: FieldParams,
    uint: U384,
    doc: "Element in the brainpoolP384 finite field modulo p"
}

#[cfg(bp384_backend = "bigint")]
primefield::monty_field_arithmetic! {
    name: FieldElement,
    params: FieldParams,
    uint: U384
}

#[cfg(not(bp384_backend = "bigint"))]
primefield::fiat_monty_field_arithmetic! {
    name: FieldElement,
    params: FieldParams,
    uint: U384,
    non_mont: fiat_bp384_non_montgomery_domain_field_element,
    mont: fiat_bp384_montgomery_domain_field_element,
    from_mont: fiat_bp384_from_montgomery,
    to_mont: fiat_bp384_to_montgomery,
    add: fiat_bp384_add,
    sub: fiat_bp384_sub,
    mul: fiat_bp384_mul,
    neg: fiat_bp384_opp,
    square: fiat_bp384_square,
    divstep_precomp: fiat_bp384_divstep_precomp,
    divstep: fiat_bp384_divstep,
    msat: fiat_bp384_msat,
    selectnz: fiat_bp384_selectznz
}

impl BatchInvert for FieldElement {}

#[cfg(test)]
mod tests {
    use super::{FieldElement, U384};
    #[cfg(not(bp384_backend = "bigint"))]
    use super::{
        FieldParams, fiat_bp384_montgomery_domain_field_element, fiat_bp384_msat,
        fiat_bp384_non_montgomery_domain_field_element, fiat_bp384_to_montgomery,
    };

    primefield::test_primefield!(FieldElement, U384);

    #[cfg(not(bp384_backend = "bigint"))]
    primefield::test_fiat_monty_field_arithmetic!(
        name: FieldElement,
        params: FieldParams,
        uint: U384,
        non_mont: fiat_bp384_non_montgomery_domain_field_element,
        mont: fiat_bp384_montgomery_domain_field_element,
        to_mont: fiat_bp384_to_montgomery,
        msat: fiat_bp384_msat
    );
}