blob: 8b23f139fc62a27ef783f9e5c88076fa88dc6501 [file] [log] [blame]
Gabor Mezeif049dbf2022-07-18 23:02:33 +02001/**
2 * Internal bignum functions
3 *
4 * Copyright The Mbed TLS Contributors
5 * SPDX-License-Identifier: Apache-2.0
6 *
7 * Licensed under the Apache License, Version 2.0 (the "License"); you may
8 * not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
15 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
18 */
19
20#include "common.h"
21
22#if defined(MBEDTLS_BIGNUM_C)
23
Gabor Mezeib9030702022-07-18 23:09:45 +020024#include <string.h>
25
26#include "mbedtls/platform_util.h"
Gabor Mezeif049dbf2022-07-18 23:02:33 +020027#include "mbedtls/error.h"
28#include "mbedtls/bignum.h"
Gabor Mezeib9030702022-07-18 23:09:45 +020029#include "bignum_core.h"
Gabor Mezeif049dbf2022-07-18 23:02:33 +020030#include "bignum_mod.h"
Gabor Mezeic5328cf2022-07-18 23:13:13 +020031#include "bignum_mod_raw.h"
Janos Follath8b718b52022-07-25 11:31:02 +010032#include "constant_time_internal.h"
Gabor Mezeif049dbf2022-07-18 23:02:33 +020033
Janos Follathba5c1392022-07-19 13:42:07 +010034#if defined(MBEDTLS_PLATFORM_C)
35#include "mbedtls/platform.h"
36#else
37#include <stdio.h>
38#include <stdlib.h>
Gabor Mezeie66b1d42022-08-02 11:49:59 +020039#define mbedtls_printf printf
40#define mbedtls_calloc calloc
41#define mbedtls_free free
Janos Follathba5c1392022-07-19 13:42:07 +010042#endif
43
Gabor Mezeif049dbf2022-07-18 23:02:33 +020044int mbedtls_mpi_mod_residue_setup( mbedtls_mpi_mod_residue *r,
45 mbedtls_mpi_mod_modulus *m,
Janos Follath8b718b52022-07-25 11:31:02 +010046 mbedtls_mpi_uint *p,
47 size_t pn )
Gabor Mezeif049dbf2022-07-18 23:02:33 +020048{
Janos Follath8b718b52022-07-25 11:31:02 +010049 if( p == NULL || m == NULL || r == NULL )
50 return( MBEDTLS_ERR_MPI_BAD_INPUT_DATA );
51
52 if( pn < m->n || !mbedtls_mpi_core_lt_ct( m->p, p, pn ) )
Gabor Mezeif049dbf2022-07-18 23:02:33 +020053 return( MBEDTLS_ERR_MPI_BAD_INPUT_DATA );
54
55 r->n = m->n;
Janos Follath8b718b52022-07-25 11:31:02 +010056 r->p = p;
Gabor Mezeif049dbf2022-07-18 23:02:33 +020057
58 return( 0 );
59}
60
Gabor Mezei37b06362022-08-02 17:22:18 +020061void mbedtls_mpi_mod_residue_release( mbedtls_mpi_mod_residue *r )
62{
63 if ( r == NULL )
64 return;
65
66 r->n = 0;
67 r->p = NULL;
68}
69
Gabor Mezeif049dbf2022-07-18 23:02:33 +020070void mbedtls_mpi_mod_modulus_init( mbedtls_mpi_mod_modulus *m )
71{
72 if ( m == NULL )
73 return;
74
Janos Follath281ccda2022-07-19 13:14:36 +010075 m->p = NULL;
76 m->n = 0;
77 m->plen = 0;
78 m->ext_rep = MBEDTLS_MPI_MOD_EXT_REP_INVALID;
79 m->int_rep = MBEDTLS_MPI_MOD_REP_INVALID;
Gabor Mezeif049dbf2022-07-18 23:02:33 +020080}
81
82void mbedtls_mpi_mod_modulus_free( mbedtls_mpi_mod_modulus *m )
83{
84 if ( m == NULL )
85 return;
86
Janos Follathba5c1392022-07-19 13:42:07 +010087 switch( m->int_rep )
88 {
89 case MBEDTLS_MPI_MOD_REP_MONTGOMERY:
90 mbedtls_free( m->rep.mont ); break;
91 case MBEDTLS_MPI_MOD_REP_OPT_RED:
Gabor Mezeid8f5bc22022-08-02 11:51:25 +020092 mbedtls_free( m->rep.ored ); break;
Janos Follathba5c1392022-07-19 13:42:07 +010093 default:
94 break;
95 }
96
Gabor Mezeif049dbf2022-07-18 23:02:33 +020097 m->p = NULL;
98 m->n = 0;
99 m->plen = 0;
Janos Follath281ccda2022-07-19 13:14:36 +0100100 m->ext_rep = MBEDTLS_MPI_MOD_EXT_REP_INVALID;
101 m->int_rep = MBEDTLS_MPI_MOD_REP_INVALID;
Gabor Mezeif049dbf2022-07-18 23:02:33 +0200102}
103
104int mbedtls_mpi_mod_modulus_setup( mbedtls_mpi_mod_modulus *m,
Gabor Mezei535f36d2022-08-02 11:50:44 +0200105 mbedtls_mpi_uint *p,
106 size_t pn,
Gabor Mezeif049dbf2022-07-18 23:02:33 +0200107 int ext_rep,
108 int int_rep )
109{
Janos Follathba5c1392022-07-19 13:42:07 +0100110 int ret = 0;
111
Gabor Mezei535f36d2022-08-02 11:50:44 +0200112 if ( p == NULL || m == NULL )
Gabor Mezeif049dbf2022-07-18 23:02:33 +0200113 return( MBEDTLS_ERR_MPI_BAD_INPUT_DATA );
114
Gabor Mezei535f36d2022-08-02 11:50:44 +0200115 m->p = p;
116 m->n = pn;
117 m->plen = mbedtls_mpi_core_bitlen( p, pn );
Gabor Mezeif049dbf2022-07-18 23:02:33 +0200118
Janos Follathba5c1392022-07-19 13:42:07 +0100119 switch( ext_rep )
120 {
121 case MBEDTLS_MPI_MOD_EXT_REP_LE:
122 case MBEDTLS_MPI_MOD_EXT_REP_BE:
123 m->ext_rep = ext_rep; break;
124 default:
125 ret = MBEDTLS_ERR_MPI_BAD_INPUT_DATA;
126 goto exit;
127 }
128
129 switch( int_rep )
130 {
131 case MBEDTLS_MPI_MOD_REP_MONTGOMERY:
132 m->int_rep = int_rep;
133 m->rep.mont = NULL; break;
134 case MBEDTLS_MPI_MOD_REP_OPT_RED:
135 m->int_rep = int_rep;
136 m->rep.ored = NULL; break;
137 default:
138 ret = MBEDTLS_ERR_MPI_BAD_INPUT_DATA;
139 goto exit;
140 }
141
142exit:
143
144 if( ret != 0 )
145 {
146 mbedtls_mpi_mod_modulus_free( m );
147 }
148
149 return( ret );
Gabor Mezeif049dbf2022-07-18 23:02:33 +0200150}
151
Gabor Mezeic5328cf2022-07-18 23:13:13 +0200152int mbedtls_mpi_mod_raw_read( mbedtls_mpi_uint *X,
153 mbedtls_mpi_mod_modulus *m,
154 unsigned char *buf,
155 size_t buflen )
156{
Janos Follath8b718b52022-07-25 11:31:02 +0100157 int ret = MBEDTLS_ERR_ERROR_CORRUPTION_DETECTED;
158
Gabor Mezeic0b93042022-08-02 11:52:37 +0200159 if( m->ext_rep == MBEDTLS_MPI_MOD_EXT_REP_LE )
Janos Follath8b718b52022-07-25 11:31:02 +0100160 ret = mbedtls_mpi_core_read_le( X, m->n, buf, buflen );
Gabor Mezeic5328cf2022-07-18 23:13:13 +0200161
Gabor Mezeic0b93042022-08-02 11:52:37 +0200162 else if( m->ext_rep == MBEDTLS_MPI_MOD_EXT_REP_BE )
Janos Follath8b718b52022-07-25 11:31:02 +0100163 ret = mbedtls_mpi_core_read_be( X, m->n, buf, buflen );
Gabor Mezeic5328cf2022-07-18 23:13:13 +0200164 else
165 return( MBEDTLS_ERR_MPI_BAD_INPUT_DATA );
166
Janos Follath8b718b52022-07-25 11:31:02 +0100167 if( ret != 0 )
168 goto cleanup;
169
170 if( !mbedtls_mpi_core_lt_ct( X, m->p, m->n ) )
171 {
172 ret = MBEDTLS_ERR_MPI_BAD_INPUT_DATA;
173 goto cleanup;
174 }
175
176cleanup:
177
178 return( ret );
Gabor Mezeic5328cf2022-07-18 23:13:13 +0200179}
180
181int mbedtls_mpi_mod_raw_write( mbedtls_mpi_uint *X,
182 mbedtls_mpi_mod_modulus *m,
183 unsigned char *buf,
184 size_t buflen )
185{
Gabor Mezeic0b93042022-08-02 11:52:37 +0200186 if( m->ext_rep == MBEDTLS_MPI_MOD_EXT_REP_LE )
Gabor Mezeic5328cf2022-07-18 23:13:13 +0200187 return mbedtls_mpi_core_write_le( X, m->n, buf, buflen );
188
Gabor Mezeic0b93042022-08-02 11:52:37 +0200189 else if( m->ext_rep == MBEDTLS_MPI_MOD_EXT_REP_BE )
Gabor Mezeic5328cf2022-07-18 23:13:13 +0200190 return mbedtls_mpi_core_write_be( X, m->n, buf, buflen );
191
192 else
193 return( MBEDTLS_ERR_MPI_BAD_INPUT_DATA );
194
195 return( 0 );
196}
197
Gabor Mezeif049dbf2022-07-18 23:02:33 +0200198#endif /* MBEDTLS_BIGNUM_C */