Gabor Mezei | f049dbf | 2022-07-18 23:02:33 +0200 | [diff] [blame] | 1 | /** |
| 2 | * Internal bignum functions |
| 3 | * |
| 4 | * Copyright The Mbed TLS Contributors |
| 5 | * SPDX-License-Identifier: Apache-2.0 |
| 6 | * |
| 7 | * Licensed under the Apache License, Version 2.0 (the "License"); you may |
| 8 | * not use this file except in compliance with the License. |
| 9 | * You may obtain a copy of the License at |
| 10 | * |
| 11 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 12 | * |
| 13 | * Unless required by applicable law or agreed to in writing, software |
| 14 | * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
| 15 | * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 16 | * See the License for the specific language governing permissions and |
| 17 | * limitations under the License. |
| 18 | */ |
| 19 | |
| 20 | #include "common.h" |
| 21 | |
| 22 | #if defined(MBEDTLS_BIGNUM_C) |
| 23 | |
Gabor Mezei | b903070 | 2022-07-18 23:09:45 +0200 | [diff] [blame] | 24 | #include <string.h> |
| 25 | |
| 26 | #include "mbedtls/platform_util.h" |
Gabor Mezei | f049dbf | 2022-07-18 23:02:33 +0200 | [diff] [blame] | 27 | #include "mbedtls/error.h" |
| 28 | #include "mbedtls/bignum.h" |
Gabor Mezei | b903070 | 2022-07-18 23:09:45 +0200 | [diff] [blame] | 29 | #include "bignum_core.h" |
Gabor Mezei | f049dbf | 2022-07-18 23:02:33 +0200 | [diff] [blame] | 30 | #include "bignum_mod.h" |
Gabor Mezei | c5328cf | 2022-07-18 23:13:13 +0200 | [diff] [blame] | 31 | #include "bignum_mod_raw.h" |
Janos Follath | 8b718b5 | 2022-07-25 11:31:02 +0100 | [diff] [blame] | 32 | #include "constant_time_internal.h" |
Gabor Mezei | f049dbf | 2022-07-18 23:02:33 +0200 | [diff] [blame] | 33 | |
Janos Follath | ba5c139 | 2022-07-19 13:42:07 +0100 | [diff] [blame] | 34 | #if defined(MBEDTLS_PLATFORM_C) |
| 35 | #include "mbedtls/platform.h" |
| 36 | #else |
| 37 | #include <stdio.h> |
| 38 | #include <stdlib.h> |
Gabor Mezei | e66b1d4 | 2022-08-02 11:49:59 +0200 | [diff] [blame] | 39 | #define mbedtls_printf printf |
| 40 | #define mbedtls_calloc calloc |
| 41 | #define mbedtls_free free |
Janos Follath | ba5c139 | 2022-07-19 13:42:07 +0100 | [diff] [blame] | 42 | #endif |
| 43 | |
Gabor Mezei | f049dbf | 2022-07-18 23:02:33 +0200 | [diff] [blame] | 44 | int mbedtls_mpi_mod_residue_setup( mbedtls_mpi_mod_residue *r, |
| 45 | mbedtls_mpi_mod_modulus *m, |
Janos Follath | 8b718b5 | 2022-07-25 11:31:02 +0100 | [diff] [blame] | 46 | mbedtls_mpi_uint *p, |
| 47 | size_t pn ) |
Gabor Mezei | f049dbf | 2022-07-18 23:02:33 +0200 | [diff] [blame] | 48 | { |
Janos Follath | 8b718b5 | 2022-07-25 11:31:02 +0100 | [diff] [blame] | 49 | if( p == NULL || m == NULL || r == NULL ) |
| 50 | return( MBEDTLS_ERR_MPI_BAD_INPUT_DATA ); |
| 51 | |
| 52 | if( pn < m->n || !mbedtls_mpi_core_lt_ct( m->p, p, pn ) ) |
Gabor Mezei | f049dbf | 2022-07-18 23:02:33 +0200 | [diff] [blame] | 53 | return( MBEDTLS_ERR_MPI_BAD_INPUT_DATA ); |
| 54 | |
| 55 | r->n = m->n; |
Janos Follath | 8b718b5 | 2022-07-25 11:31:02 +0100 | [diff] [blame] | 56 | r->p = p; |
Gabor Mezei | f049dbf | 2022-07-18 23:02:33 +0200 | [diff] [blame] | 57 | |
| 58 | return( 0 ); |
| 59 | } |
| 60 | |
Gabor Mezei | 37b0636 | 2022-08-02 17:22:18 +0200 | [diff] [blame] | 61 | void mbedtls_mpi_mod_residue_release( mbedtls_mpi_mod_residue *r ) |
| 62 | { |
| 63 | if ( r == NULL ) |
| 64 | return; |
| 65 | |
| 66 | r->n = 0; |
| 67 | r->p = NULL; |
| 68 | } |
| 69 | |
Gabor Mezei | f049dbf | 2022-07-18 23:02:33 +0200 | [diff] [blame] | 70 | void mbedtls_mpi_mod_modulus_init( mbedtls_mpi_mod_modulus *m ) |
| 71 | { |
| 72 | if ( m == NULL ) |
| 73 | return; |
| 74 | |
Janos Follath | 281ccda | 2022-07-19 13:14:36 +0100 | [diff] [blame] | 75 | m->p = NULL; |
| 76 | m->n = 0; |
| 77 | m->plen = 0; |
| 78 | m->ext_rep = MBEDTLS_MPI_MOD_EXT_REP_INVALID; |
| 79 | m->int_rep = MBEDTLS_MPI_MOD_REP_INVALID; |
Gabor Mezei | f049dbf | 2022-07-18 23:02:33 +0200 | [diff] [blame] | 80 | } |
| 81 | |
| 82 | void mbedtls_mpi_mod_modulus_free( mbedtls_mpi_mod_modulus *m ) |
| 83 | { |
| 84 | if ( m == NULL ) |
| 85 | return; |
| 86 | |
Janos Follath | ba5c139 | 2022-07-19 13:42:07 +0100 | [diff] [blame] | 87 | switch( m->int_rep ) |
| 88 | { |
| 89 | case MBEDTLS_MPI_MOD_REP_MONTGOMERY: |
| 90 | mbedtls_free( m->rep.mont ); break; |
| 91 | case MBEDTLS_MPI_MOD_REP_OPT_RED: |
Gabor Mezei | d8f5bc2 | 2022-08-02 11:51:25 +0200 | [diff] [blame] | 92 | mbedtls_free( m->rep.ored ); break; |
Janos Follath | ba5c139 | 2022-07-19 13:42:07 +0100 | [diff] [blame] | 93 | default: |
| 94 | break; |
| 95 | } |
| 96 | |
Gabor Mezei | f049dbf | 2022-07-18 23:02:33 +0200 | [diff] [blame] | 97 | m->p = NULL; |
| 98 | m->n = 0; |
| 99 | m->plen = 0; |
Janos Follath | 281ccda | 2022-07-19 13:14:36 +0100 | [diff] [blame] | 100 | m->ext_rep = MBEDTLS_MPI_MOD_EXT_REP_INVALID; |
| 101 | m->int_rep = MBEDTLS_MPI_MOD_REP_INVALID; |
Gabor Mezei | f049dbf | 2022-07-18 23:02:33 +0200 | [diff] [blame] | 102 | } |
| 103 | |
| 104 | int mbedtls_mpi_mod_modulus_setup( mbedtls_mpi_mod_modulus *m, |
Gabor Mezei | 535f36d | 2022-08-02 11:50:44 +0200 | [diff] [blame] | 105 | mbedtls_mpi_uint *p, |
| 106 | size_t pn, |
Gabor Mezei | f049dbf | 2022-07-18 23:02:33 +0200 | [diff] [blame] | 107 | int ext_rep, |
| 108 | int int_rep ) |
| 109 | { |
Janos Follath | ba5c139 | 2022-07-19 13:42:07 +0100 | [diff] [blame] | 110 | int ret = 0; |
| 111 | |
Gabor Mezei | 535f36d | 2022-08-02 11:50:44 +0200 | [diff] [blame] | 112 | if ( p == NULL || m == NULL ) |
Gabor Mezei | f049dbf | 2022-07-18 23:02:33 +0200 | [diff] [blame] | 113 | return( MBEDTLS_ERR_MPI_BAD_INPUT_DATA ); |
| 114 | |
Gabor Mezei | 535f36d | 2022-08-02 11:50:44 +0200 | [diff] [blame] | 115 | m->p = p; |
| 116 | m->n = pn; |
| 117 | m->plen = mbedtls_mpi_core_bitlen( p, pn ); |
Gabor Mezei | f049dbf | 2022-07-18 23:02:33 +0200 | [diff] [blame] | 118 | |
Janos Follath | ba5c139 | 2022-07-19 13:42:07 +0100 | [diff] [blame] | 119 | switch( ext_rep ) |
| 120 | { |
| 121 | case MBEDTLS_MPI_MOD_EXT_REP_LE: |
| 122 | case MBEDTLS_MPI_MOD_EXT_REP_BE: |
| 123 | m->ext_rep = ext_rep; break; |
| 124 | default: |
| 125 | ret = MBEDTLS_ERR_MPI_BAD_INPUT_DATA; |
| 126 | goto exit; |
| 127 | } |
| 128 | |
| 129 | switch( int_rep ) |
| 130 | { |
| 131 | case MBEDTLS_MPI_MOD_REP_MONTGOMERY: |
| 132 | m->int_rep = int_rep; |
| 133 | m->rep.mont = NULL; break; |
| 134 | case MBEDTLS_MPI_MOD_REP_OPT_RED: |
| 135 | m->int_rep = int_rep; |
| 136 | m->rep.ored = NULL; break; |
| 137 | default: |
| 138 | ret = MBEDTLS_ERR_MPI_BAD_INPUT_DATA; |
| 139 | goto exit; |
| 140 | } |
| 141 | |
| 142 | exit: |
| 143 | |
| 144 | if( ret != 0 ) |
| 145 | { |
| 146 | mbedtls_mpi_mod_modulus_free( m ); |
| 147 | } |
| 148 | |
| 149 | return( ret ); |
Gabor Mezei | f049dbf | 2022-07-18 23:02:33 +0200 | [diff] [blame] | 150 | } |
| 151 | |
Gabor Mezei | c5328cf | 2022-07-18 23:13:13 +0200 | [diff] [blame] | 152 | int mbedtls_mpi_mod_raw_read( mbedtls_mpi_uint *X, |
| 153 | mbedtls_mpi_mod_modulus *m, |
| 154 | unsigned char *buf, |
| 155 | size_t buflen ) |
| 156 | { |
Janos Follath | 8b718b5 | 2022-07-25 11:31:02 +0100 | [diff] [blame] | 157 | int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED; |
| 158 | |
Gabor Mezei | c0b9304 | 2022-08-02 11:52:37 +0200 | [diff] [blame] | 159 | if( m->ext_rep == MBEDTLS_MPI_MOD_EXT_REP_LE ) |
Janos Follath | 8b718b5 | 2022-07-25 11:31:02 +0100 | [diff] [blame] | 160 | ret = mbedtls_mpi_core_read_le( X, m->n, buf, buflen ); |
Gabor Mezei | c5328cf | 2022-07-18 23:13:13 +0200 | [diff] [blame] | 161 | |
Gabor Mezei | c0b9304 | 2022-08-02 11:52:37 +0200 | [diff] [blame] | 162 | else if( m->ext_rep == MBEDTLS_MPI_MOD_EXT_REP_BE ) |
Janos Follath | 8b718b5 | 2022-07-25 11:31:02 +0100 | [diff] [blame] | 163 | ret = mbedtls_mpi_core_read_be( X, m->n, buf, buflen ); |
Gabor Mezei | c5328cf | 2022-07-18 23:13:13 +0200 | [diff] [blame] | 164 | else |
| 165 | return( MBEDTLS_ERR_MPI_BAD_INPUT_DATA ); |
| 166 | |
Janos Follath | 8b718b5 | 2022-07-25 11:31:02 +0100 | [diff] [blame] | 167 | if( ret != 0 ) |
| 168 | goto cleanup; |
| 169 | |
| 170 | if( !mbedtls_mpi_core_lt_ct( X, m->p, m->n ) ) |
| 171 | { |
| 172 | ret = MBEDTLS_ERR_MPI_BAD_INPUT_DATA; |
| 173 | goto cleanup; |
| 174 | } |
| 175 | |
| 176 | cleanup: |
| 177 | |
| 178 | return( ret ); |
Gabor Mezei | c5328cf | 2022-07-18 23:13:13 +0200 | [diff] [blame] | 179 | } |
| 180 | |
| 181 | int mbedtls_mpi_mod_raw_write( mbedtls_mpi_uint *X, |
| 182 | mbedtls_mpi_mod_modulus *m, |
| 183 | unsigned char *buf, |
| 184 | size_t buflen ) |
| 185 | { |
Gabor Mezei | c0b9304 | 2022-08-02 11:52:37 +0200 | [diff] [blame] | 186 | if( m->ext_rep == MBEDTLS_MPI_MOD_EXT_REP_LE ) |
Gabor Mezei | c5328cf | 2022-07-18 23:13:13 +0200 | [diff] [blame] | 187 | return mbedtls_mpi_core_write_le( X, m->n, buf, buflen ); |
| 188 | |
Gabor Mezei | c0b9304 | 2022-08-02 11:52:37 +0200 | [diff] [blame] | 189 | else if( m->ext_rep == MBEDTLS_MPI_MOD_EXT_REP_BE ) |
Gabor Mezei | c5328cf | 2022-07-18 23:13:13 +0200 | [diff] [blame] | 190 | return mbedtls_mpi_core_write_be( X, m->n, buf, buflen ); |
| 191 | |
| 192 | else |
| 193 | return( MBEDTLS_ERR_MPI_BAD_INPUT_DATA ); |
| 194 | |
| 195 | return( 0 ); |
| 196 | } |
| 197 | |
Gabor Mezei | f049dbf | 2022-07-18 23:02:33 +0200 | [diff] [blame] | 198 | #endif /* MBEDTLS_BIGNUM_C */ |