commit ab38b7081621e7da04a7929acaaed04e0de1c6a8
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Mon Nov 05 17:34:55 2012 +0100
committer Paul Bakker <p.j.bakker@polarssl.org> Wed Jan 16 16:31:50 2013 +0100
tree fc6ee96710201cccd2253564b9b0f1d324d910c2
parent b505c2796c2aaacc4ab999066871b20263aa01a0

Fixed add_generic

library/ecp.c

diff --git a/library/ecp.c b/library/ecp.c
index 242316b..99d57cd 100644
--- a/library/ecp.c
+++ b/library/ecp.c
@@ -154,6 +154,8 @@
     return( ret );
 }
 
+#define dbg(X)  printf(#X " = %s%lu\n", X.s < 0 ? "-" : "", X.p[0])
+
 /*
  * Addition: R = P + Q, generic case (P != Q, P != 0, Q != 0, R != 0)
  * Cf SEC1 v2 p. 7, item 4
@@ -162,10 +164,10 @@
                             const ecp_point *P, const ecp_point *Q )
 {
     int ret = 0;
-    mpi DX, DY, K, L, LL, M, X, Y;
+    mpi DX, DY, K, L, LL, X, Y;
 
     mpi_init( &DX ); mpi_init( &DY ); mpi_init( &K ); mpi_init( &L );
-    mpi_init( &LL ); mpi_init( &M ); mpi_init( &X ); mpi_init( &Y );
+    mpi_init( &LL ); mpi_init( &X ); mpi_init( &Y );
 
     /*
      * L = (Q.Y - P.Y) / (Q.X - P.X)  mod p
@@ -178,19 +180,21 @@
 
     /*
      * LL = L^2  mod p
-     * M  = L^2 - Q.X
      * X  = L^2 - P.X - Q.X
      */
     MPI_CHK( mpi_mul_mpi( &LL, &L, &L ) );
     MPI_CHK( mpi_mod_mpi( &LL, &LL, &grp->P ) );
-    MPI_CHK( mpi_sub_mpi( &M, &LL, &Q->X ) );
-    MPI_CHK( mpi_sub_mpi( &X, &M, &P->X ) );
 
     /*
-     * Y = L * (P.X - X) - P.Y = L * (-M) - P.Y
+     * X  = L^2 - P.X - Q.X
      */
-    MPI_CHK( mpi_copy( &Y, &M ) );
-    Y.s = - Y.s;
+    MPI_CHK( mpi_sub_mpi( &X, &LL, &P->X ) );
+    MPI_CHK( mpi_sub_mpi( &X, &X,  &Q->X ) );
+
+    /*
+     * Y = L * (P.X - X) - P.Y
+     */
+    MPI_CHK( mpi_sub_mpi( &Y, &P->X, &X) );
     MPI_CHK( mpi_mul_mpi( &Y, &Y, &L ) );
     MPI_CHK( mpi_sub_mpi( &Y, &Y, &P->Y ) );
 
@@ -204,7 +208,7 @@
 cleanup:
 
     mpi_free( &DX ); mpi_free( &DY ); mpi_free( &K ); mpi_free( &L );
-    mpi_free( &LL ); mpi_free( &M ); mpi_free( &X ); mpi_free( &Y );
+    mpi_free( &LL ); mpi_free( &X ); mpi_free( &Y );
 
     return( ret );
 }
@@ -276,14 +280,14 @@
 }
 
 /*
- * Print a point assuming its components are small
+ * Print a point assuming its coordinates are small
  */
 static void ecp_point_print( const ecp_point *P )
 {
     if( P->is_zero )
-        printf("zero\n");
+        printf( "zero\n" );
     else
-        printf("(%lu, %lu)\n", P->X.p[0], P->Y.p[0]);
+        printf( "(%lu, %lu)\n", P->X.p[0], P->Y.p[0] );
 }
 
 
@@ -302,7 +306,11 @@
     ecp_point O, A, B, C, D, E, F, G, TMP;
     ecp_point *add_tbl[][3] =
     {
-        {&O, &O, &O},
+        {&O, &O, &O}, {&O, &A, &A}, {&A, &O, &A},
+        {&A, &A, &O}, {&B, &C, &O}, {&C, &B, &O},
+        {&A, &D, &E}, {&D, &A, &E},
+        {&B, &D, &F}, {&D, &B, &F},
+        // {&D, &D, &G},
     };
 
     ecp_group_init( &grp );
@@ -330,10 +338,10 @@
         {
             if( verbose != 0 )
             {
-                printf(" failed\n");
-                printf("        GOT: ");
+                printf(" failed (%u)\n", i );
+                printf( "        GOT: " );
                 ecp_point_print( &TMP );
-                printf("   EXPECTED: ");
+                printf( "   EXPECTED: " );
                 ecp_point_print( add_tbl[i][2] );
             }