2018-09-19 23:49:47 +00:00
|
|
|
// SPDX-License-Identifier: GPL-2.0
|
|
|
|
/*
|
2018-01-18 10:46:01 +00:00
|
|
|
* Copyright (C) 2018 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
|
2015-06-05 13:58:00 +00:00
|
|
|
*/
|
|
|
|
|
|
|
|
#include "curve25519.h"
|
|
|
|
|
|
|
|
#include <stdint.h>
|
|
|
|
#include <string.h>
|
|
|
|
|
2018-02-17 17:58:31 +00:00
|
|
|
#ifdef __linux__
|
|
|
|
#include <linux/types.h>
|
|
|
|
typedef __u64 u64;
|
|
|
|
typedef __u32 u32;
|
|
|
|
typedef __u8 u8;
|
|
|
|
typedef __s64 s64;
|
|
|
|
#else
|
|
|
|
typedef uint64_t u64, __le64;
|
|
|
|
typedef uint32_t u32, __le32;
|
2018-01-22 16:58:44 +00:00
|
|
|
typedef uint8_t u8;
|
|
|
|
typedef int64_t s64;
|
2018-02-17 17:58:31 +00:00
|
|
|
#endif
|
2018-02-05 11:23:10 +00:00
|
|
|
#if __BYTE_ORDER__ == __ORDER_BIG_ENDIAN__
|
|
|
|
#define le64_to_cpup(a) __builtin_bswap64(*(a))
|
|
|
|
#define le32_to_cpup(a) __builtin_bswap32(*(a))
|
|
|
|
#define cpu_to_le64(a) __builtin_bswap64(a)
|
|
|
|
#else
|
|
|
|
#define le64_to_cpup(a) (*(a))
|
|
|
|
#define le32_to_cpup(a) (*(a))
|
|
|
|
#define cpu_to_le64(a) (a)
|
|
|
|
#endif
|
2018-08-24 01:08:03 +00:00
|
|
|
#define get_unaligned_le32(a) le32_to_cpup((u32 *)(a))
|
|
|
|
#define get_unaligned_le64(a) le64_to_cpup((u64 *)(a))
|
|
|
|
#define put_unaligned_le64(s, d) *(u64 *)(d) = cpu_to_le64(s)
|
2015-06-05 13:58:00 +00:00
|
|
|
#ifndef __always_inline
|
|
|
|
#define __always_inline __inline __attribute__((__always_inline__))
|
|
|
|
#endif
|
2018-01-22 16:58:44 +00:00
|
|
|
#ifndef noinline
|
|
|
|
#define noinline __attribute__((noinline))
|
|
|
|
#endif
|
2018-01-18 10:46:01 +00:00
|
|
|
#ifndef __aligned
|
|
|
|
#define __aligned(x) __attribute__((aligned(x)))
|
|
|
|
#endif
|
2018-01-22 16:58:44 +00:00
|
|
|
#ifndef __force
|
|
|
|
#define __force
|
|
|
|
#endif
|
2018-01-31 14:58:17 +00:00
|
|
|
#define normalize_secret(a) curve25519_normalize_secret(a)
|
2018-01-18 10:46:01 +00:00
|
|
|
|
2018-01-22 16:58:44 +00:00
|
|
|
static noinline void memzero_explicit(void *s, size_t count)
|
2018-01-18 10:46:01 +00:00
|
|
|
{
|
2018-01-22 16:58:44 +00:00
|
|
|
memset(s, 0, count);
|
2018-02-26 23:49:16 +00:00
|
|
|
asm volatile("": :"r"(s) :"memory");
|
2015-06-05 13:58:00 +00:00
|
|
|
}
|
|
|
|
|
2018-01-22 16:58:44 +00:00
|
|
|
#ifdef __SIZEOF_INT128__
|
2018-08-29 05:50:35 +00:00
|
|
|
#include "../crypto/zinc/curve25519/curve25519-hacl64.h"
|
2018-02-01 18:15:28 +00:00
|
|
|
#else
|
2018-08-29 05:50:35 +00:00
|
|
|
#include "../crypto/zinc/curve25519/curve25519-fiat32.h"
|
2015-06-05 13:58:00 +00:00
|
|
|
#endif
|
|
|
|
|
2016-07-27 09:30:05 +00:00
|
|
|
void curve25519_generate_public(uint8_t pub[static CURVE25519_POINT_SIZE], const uint8_t secret[static CURVE25519_POINT_SIZE])
|
2015-06-05 13:58:00 +00:00
|
|
|
{
|
|
|
|
static const uint8_t basepoint[CURVE25519_POINT_SIZE] = { 9 };
|
2017-10-25 15:56:08 +00:00
|
|
|
|
2015-06-05 13:58:00 +00:00
|
|
|
curve25519(pub, secret, basepoint);
|
|
|
|
}
|
2018-01-22 16:58:44 +00:00
|
|
|
|
|
|
|
void curve25519(uint8_t mypublic[static CURVE25519_POINT_SIZE], const uint8_t secret[static CURVE25519_POINT_SIZE], const uint8_t basepoint[static CURVE25519_POINT_SIZE])
|
|
|
|
{
|
|
|
|
curve25519_generic(mypublic, secret, basepoint);
|
|
|
|
}
|