commit a1c142d168e08d2f0a4dc860d24dfeef769b5829
author Fabio Utzig <utzig@apache.org> Fri Jan 03 08:28:11 2020 -0300
committer Fabio Utzig <utzig@utzig.org> Tue Feb 04 06:09:01 2020 -0300
tree 4a9cf9ab6f498aaf672b9133c10690e7500653e0
parent e4fe4633ffc128c8cdee1802d8294f315633f952

Add Tinycrypt based SHA-512 for ED25519

Add option to build ed25519 with tinycrypt; enable tinycrypt based
sha-512 for ed25519 sim tests.

Signed-off-by: Fabio Utzig <utzig@apache.org>

ext/fiat/src/curve25519.c

diff --git a/ext/fiat/src/curve25519.c b/ext/fiat/src/curve25519.c
index 0215caf..84f6bcf 100644
--- a/ext/fiat/src/curve25519.c
+++ b/ext/fiat/src/curve25519.c
@@ -31,8 +31,16 @@
 #include <string.h>
 #include <stdint.h>
 
+#include <mcuboot_config/mcuboot_config.h>
+
+#if defined(MCUBOOT_USE_MBED_TLS)
 #include <mbedtls/platform_util.h>
 #include <mbedtls/sha512.h>
+#else
+#include <tinycrypt/constants.h>
+#include <tinycrypt/utils.h>
+#include <tinycrypt/sha512.h>
+#endif
 
 #include "curve25519.h"
 // Various pre-computed constants.
@@ -126,12 +134,20 @@
 
 // h = 0
 static void fe_0(fe *h) {
+#if defined(MCUBOOT_USE_MBED_TLS)
   mbedtls_platform_zeroize(h, sizeof(fe));
+#else
+  _set(h, 0, sizeof(fe));
+#endif
 }
 
 // h = 1
 static void fe_1(fe *h) {
+#if defined(MCUBOOT_USE_MBED_TLS)
   mbedtls_platform_zeroize(h, sizeof(fe));
+#else
+  _set(h, 0, sizeof(fe));
+#endif
   h->v[0] = 1;
 }
 
@@ -1074,9 +1090,13 @@
     }
   }
 
+#if defined(MCUBOOT_USE_MBED_TLS)
+
   mbedtls_sha512_context ctx;
-  mbedtls_sha512_init(&ctx);
   int ret;
+
+  mbedtls_sha512_init(&ctx);
+
   ret = mbedtls_sha512_starts_ret(&ctx, 0);
   assert(ret == 0);
 
@@ -1092,6 +1112,27 @@
   assert(ret == 0);
   mbedtls_sha512_free(&ctx);
 
+#else
+
+  struct tc_sha512_state_struct s;
+  int rc;
+
+  rc = tc_sha512_init(&s);
+  assert(rc == TC_CRYPTO_SUCCESS);
+
+  rc = tc_sha512_update(&s, signature, 32);
+  assert(rc == TC_CRYPTO_SUCCESS);
+  rc = tc_sha512_update(&s, public_key, 32);
+  assert(rc == TC_CRYPTO_SUCCESS);
+  rc = tc_sha512_update(&s, message, message_len);
+  assert(rc == TC_CRYPTO_SUCCESS);
+
+  uint8_t h[TC_SHA512_DIGEST_SIZE];
+  rc = tc_sha512_final(h, &s);
+  assert(rc == TC_CRYPTO_SUCCESS);
+
+#endif
+
   x25519_sc_reduce(h);
 
   ge_p2 R;