#include "ecp_nistz256.h"
#include "../limbs/limbs.h"
#include <string.h>
#include "../internal.h"
#include "../bn/internal.h"
typedef Limb Elem[P256_LIMBS];
typedef Limb ScalarMont[P256_LIMBS];
typedef Limb Scalar[P256_LIMBS];
void GFp_p256_scalar_mul_mont(ScalarMont r, const ScalarMont a,
const ScalarMont b);
void GFp_p256_scalar_sqr_mont(ScalarMont r, const ScalarMont a);
void GFp_p256_scalar_sqr_rep_mont(ScalarMont r, const ScalarMont a, int rep);
#if defined(OPENSSL_ARM) || defined(OPENSSL_X86)
void GFp_nistz256_sqr_mont(Elem r, const Elem a) {
GFp_nistz256_mul_mont(r, a, a);
}
#endif
#if !defined(OPENSSL_X86_64)
void GFp_p256_scalar_mul_mont(ScalarMont r, const ScalarMont a,
const ScalarMont b) {
static const BN_ULONG N[] = {
TOBN(0xf3b9cac2, 0xfc632551),
TOBN(0xbce6faad, 0xa7179e84),
TOBN(0xffffffff, 0xffffffff),
TOBN(0xffffffff, 0x00000000),
};
static const BN_ULONG N_N0[] = {
BN_MONT_CTX_N0(0xccd1c8aa, 0xee00bc4f)
};
GFp_bn_mul_mont(r, a, b, N, N_N0, P256_LIMBS);
}
#endif
#if defined(OPENSSL_X86_64)
void GFp_p256_scalar_sqr_mont(ScalarMont r, const ScalarMont a) {
GFp_p256_scalar_sqr_rep_mont(r, a, 1);
}
#else
void GFp_p256_scalar_sqr_mont(ScalarMont r, const ScalarMont a) {
GFp_p256_scalar_mul_mont(r, a, a);
}
void GFp_p256_scalar_sqr_rep_mont(ScalarMont r, const ScalarMont a, int rep) {
assert(rep >= 1);
GFp_p256_scalar_sqr_mont(r, a);
for (int i = 1; i < rep; ++i) {
GFp_p256_scalar_sqr_mont(r, r);
}
}
#endif
#if !defined(OPENSSL_X86_64)
OPENSSL_COMPILE_ASSERT(sizeof(size_t) == sizeof(Limb),
size_t_and_gfp_limb_are_different_sizes);
void GFp_nistz256_select_w5(P256_POINT *out, const P256_POINT table[16],
int index) {
assert(index >= 0);
size_t index_as_size_t = (size_t)index;
alignas(32) Elem x; memset(x, 0, sizeof(x));
alignas(32) Elem y; memset(y, 0, sizeof(y));
alignas(32) Elem z; memset(z, 0, sizeof(z));
for (size_t i = 0; i < 16; ++i) {
Limb mask = constant_time_eq_size_t(index_as_size_t, i + 1);
for (size_t j = 0; j < P256_LIMBS; ++j) {
x[j] |= table[i].X[j] & mask;
y[j] |= table[i].Y[j] & mask;
z[j] |= table[i].Z[j] & mask;
}
}
memcpy(&out->X, x, sizeof(x));
memcpy(&out->Y, y, sizeof(y));
memcpy(&out->Z, z, sizeof(z));
}
void GFp_nistz256_select_w7(P256_POINT_AFFINE *out,
const P256_POINT_AFFINE table[64], int index) {
assert(index >= 0);
size_t index_as_size_t = (size_t)index;
alignas(32) Elem x; memset(x, 0, sizeof(x));
alignas(32) Elem y; memset(y, 0, sizeof(y));
for (size_t i = 0; i < 64; ++i) {
Limb mask = constant_time_eq_size_t(index_as_size_t, i + 1);
for (size_t j = 0; j < P256_LIMBS; ++j) {
x[j] |= table[i].X[j] & mask;
y[j] |= table[i].Y[j] & mask;
}
}
memcpy(out->X, x, sizeof(x));
memcpy(out->Y, y, sizeof(y));
}
#endif