PolarSSL v1.3.3
bignum.h
Go to the documentation of this file.
1 
27 #ifndef POLARSSL_BIGNUM_H
28 #define POLARSSL_BIGNUM_H
29 
30 #include <stdio.h>
31 #include <string.h>
32 
33 #include "config.h"
34 
35 #if defined(_MSC_VER) && !defined(EFIX64) && !defined(EFI32)
36 #include <basetsd.h>
37 #if (_MSC_VER <= 1200)
38 typedef signed short int16_t;
39 typedef unsigned short uint16_t;
40 #else
41 typedef INT16 int16_t;
42 typedef UINT16 uint16_t;
43 #endif
44 typedef INT32 int32_t;
45 typedef INT64 int64_t;
46 typedef UINT32 uint32_t;
47 typedef UINT64 uint64_t;
48 #else
49 #include <inttypes.h>
50 #endif
51 
52 #define POLARSSL_ERR_MPI_FILE_IO_ERROR -0x0002
53 #define POLARSSL_ERR_MPI_BAD_INPUT_DATA -0x0004
54 #define POLARSSL_ERR_MPI_INVALID_CHARACTER -0x0006
55 #define POLARSSL_ERR_MPI_BUFFER_TOO_SMALL -0x0008
56 #define POLARSSL_ERR_MPI_NEGATIVE_VALUE -0x000A
57 #define POLARSSL_ERR_MPI_DIVISION_BY_ZERO -0x000C
58 #define POLARSSL_ERR_MPI_NOT_ACCEPTABLE -0x000E
59 #define POLARSSL_ERR_MPI_MALLOC_FAILED -0x0010
61 #define MPI_CHK(f) do { if( ( ret = f ) != 0 ) goto cleanup; } while( 0 )
62 
63 /*
64  * Maximum size MPIs are allowed to grow to in number of limbs.
65  */
66 #define POLARSSL_MPI_MAX_LIMBS 10000
67 
68 #if !defined(POLARSSL_CONFIG_OPTIONS)
69 /*
70  * Maximum window size used for modular exponentiation. Default: 6
71  * Minimum value: 1. Maximum value: 6.
72  *
73  * Result is an array of ( 2 << POLARSSL_MPI_WINDOW_SIZE ) MPIs used
74  * for the sliding window calculation. (So 64 by default)
75  *
76  * Reduction in size, reduces speed.
77  */
78 #define POLARSSL_MPI_WINDOW_SIZE 6
80 /*
81  * Maximum size of MPIs allowed in bits and bytes for user-MPIs.
82  * ( Default: 512 bytes => 4096 bits, Maximum tested: 2048 bytes => 16384 bits )
83  *
84  * Note: Calculations can results temporarily in larger MPIs. So the number
85  * of limbs required (POLARSSL_MPI_MAX_LIMBS) is higher.
86  */
87 #define POLARSSL_MPI_MAX_SIZE 512
89 #endif /* !POLARSSL_CONFIG_OPTIONS */
90 
91 #define POLARSSL_MPI_MAX_BITS ( 8 * POLARSSL_MPI_MAX_SIZE )
93 /*
94  * When reading from files with mpi_read_file() and writing to files with
95  * mpi_write_file() the buffer should have space
96  * for a (short) label, the MPI (in the provided radix), the newline
97  * characters and the '\0'.
98  *
99  * By default we assume at least a 10 char label, a minimum radix of 10
100  * (decimal) and a maximum of 4096 bit numbers (1234 decimal chars).
101  * Autosized at compile time for at least a 10 char label, a minimum radix
102  * of 10 (decimal) for a number of POLARSSL_MPI_MAX_BITS size.
103  *
104  * This used to be statically sized to 1250 for a maximum of 4096 bit
105  * numbers (1234 decimal chars).
106  *
107  * Calculate using the formula:
108  * POLARSSL_MPI_RW_BUFFER_SIZE = ceil(POLARSSL_MPI_MAX_BITS / ln(10) * ln(2)) +
109  * LabelSize + 6
110  */
111 #define POLARSSL_MPI_MAX_BITS_SCALE100 ( 100 * POLARSSL_MPI_MAX_BITS )
112 #define LN_2_DIV_LN_10_SCALE100 332
113 #define POLARSSL_MPI_RW_BUFFER_SIZE ( ((POLARSSL_MPI_MAX_BITS_SCALE100 + LN_2_DIV_LN_10_SCALE100 - 1) / LN_2_DIV_LN_10_SCALE100) + 10 + 6 )
114 
115 /*
116  * Define the base integer type, architecture-wise
117  */
118 #if defined(POLARSSL_HAVE_INT8)
119 typedef signed char t_sint;
120 typedef unsigned char t_uint;
121 typedef uint16_t t_udbl;
122 #define POLARSSL_HAVE_UDBL
123 #else
124 #if defined(POLARSSL_HAVE_INT16)
125 typedef int16_t t_sint;
126 typedef uint16_t t_uint;
127 typedef uint32_t t_udbl;
128 #define POLARSSL_HAVE_UDBL
129 #else
130  /*
131  * 32-bit integers can be forced on 64-bit arches (eg. for testing purposes)
132  * by defining POLARSSL_HAVE_INT32 and undefining POARSSL_HAVE_ASM
133  */
134  #if ( ! defined(POLARSSL_HAVE_INT32) && \
135  defined(_MSC_VER) && defined(_M_AMD64) )
136  #define POLARSSL_HAVE_INT64
137  typedef int64_t t_sint;
138  typedef uint64_t t_uint;
139  #else
140  #if ( ! defined(POLARSSL_HAVE_INT32) && \
141  defined(__GNUC__) && ( \
142  defined(__amd64__) || defined(__x86_64__) || \
143  defined(__ppc64__) || defined(__powerpc64__) || \
144  defined(__ia64__) || defined(__alpha__) || \
145  (defined(__sparc__) && defined(__arch64__)) || \
146  defined(__s390x__) ) )
147  #define POLARSSL_HAVE_INT64
148  typedef int64_t t_sint;
149  typedef uint64_t t_uint;
150  typedef unsigned int t_udbl __attribute__((mode(TI)));
151  #define POLARSSL_HAVE_UDBL
152  #else
153  #define POLARSSL_HAVE_INT32
154  typedef int32_t t_sint;
155  typedef uint32_t t_uint;
156  #if ( defined(_MSC_VER) && defined(_M_IX86) )
157  typedef uint64_t t_udbl;
158  #define POLARSSL_HAVE_UDBL
159  #else
160  #if defined( POLARSSL_HAVE_LONGLONG )
161  typedef unsigned long long t_udbl;
162  #define POLARSSL_HAVE_UDBL
163  #endif
164  #endif
165  #endif
166  #endif
167 #endif /* POLARSSL_HAVE_INT16 */
168 #endif /* POLARSSL_HAVE_INT8 */
169 
170 #ifdef __cplusplus
171 extern "C" {
172 #endif
173 
177 typedef struct
178 {
179  int s;
180  size_t n;
181  t_uint *p;
182 }
183 mpi;
184 
190 void mpi_init( mpi *X );
191 
197 void mpi_free( mpi *X );
198 
208 int mpi_grow( mpi *X, size_t nblimbs );
209 
219 int mpi_shrink( mpi *X, size_t nblimbs );
220 
230 int mpi_copy( mpi *X, const mpi *Y );
231 
238 void mpi_swap( mpi *X, mpi *Y );
239 
257 int mpi_safe_cond_assign( mpi *X, const mpi *Y, unsigned char assign );
258 
276 int mpi_safe_cond_swap( mpi *X, mpi *Y, unsigned char assign );
277 
287 int mpi_lset( mpi *X, t_sint z );
288 
297 int mpi_get_bit( const mpi *X, size_t pos );
298 
313 int mpi_set_bit( mpi *X, size_t pos, unsigned char val );
314 
323 size_t mpi_lsb( const mpi *X );
324 
333 size_t mpi_msb( const mpi *X );
334 
340 size_t mpi_size( const mpi *X );
341 
351 int mpi_read_string( mpi *X, int radix, const char *s );
352 
368 int mpi_write_string( const mpi *X, int radix, char *s, size_t *slen );
369 
370 #if defined(POLARSSL_FS_IO)
371 
382 int mpi_read_file( mpi *X, int radix, FILE *fin );
383 
396 int mpi_write_file( const char *p, const mpi *X, int radix, FILE *fout );
397 #endif /* POLARSSL_FS_IO */
398 
409 int mpi_read_binary( mpi *X, const unsigned char *buf, size_t buflen );
410 
421 int mpi_write_binary( const mpi *X, unsigned char *buf, size_t buflen );
422 
432 int mpi_shift_l( mpi *X, size_t count );
433 
443 int mpi_shift_r( mpi *X, size_t count );
444 
455 int mpi_cmp_abs( const mpi *X, const mpi *Y );
456 
467 int mpi_cmp_mpi( const mpi *X, const mpi *Y );
468 
479 int mpi_cmp_int( const mpi *X, t_sint z );
480 
491 int mpi_add_abs( mpi *X, const mpi *A, const mpi *B );
492 
503 int mpi_sub_abs( mpi *X, const mpi *A, const mpi *B );
504 
515 int mpi_add_mpi( mpi *X, const mpi *A, const mpi *B );
516 
527 int mpi_sub_mpi( mpi *X, const mpi *A, const mpi *B );
528 
539 int mpi_add_int( mpi *X, const mpi *A, t_sint b );
540 
551 int mpi_sub_int( mpi *X, const mpi *A, t_sint b );
552 
563 int mpi_mul_mpi( mpi *X, const mpi *A, const mpi *B );
564 
578 int mpi_mul_int( mpi *X, const mpi *A, t_sint b );
579 
594 int mpi_div_mpi( mpi *Q, mpi *R, const mpi *A, const mpi *B );
595 
610 int mpi_div_int( mpi *Q, mpi *R, const mpi *A, t_sint b );
611 
624 int mpi_mod_mpi( mpi *R, const mpi *A, const mpi *B );
625 
638 int mpi_mod_int( t_uint *r, const mpi *A, t_sint b );
639 
658 int mpi_exp_mod( mpi *X, const mpi *A, const mpi *E, const mpi *N, mpi *_RR );
659 
671 int mpi_fill_random( mpi *X, size_t size,
672  int (*f_rng)(void *, unsigned char *, size_t),
673  void *p_rng );
674 
685 int mpi_gcd( mpi *G, const mpi *A, const mpi *B );
686 
699 int mpi_inv_mod( mpi *X, const mpi *A, const mpi *N );
700 
712 int mpi_is_prime( mpi *X,
713  int (*f_rng)(void *, unsigned char *, size_t),
714  void *p_rng );
715 
729 int mpi_gen_prime( mpi *X, size_t nbits, int dh_flag,
730  int (*f_rng)(void *, unsigned char *, size_t),
731  void *p_rng );
732 
738 int mpi_self_test( int verbose );
739 
740 #ifdef __cplusplus
741 }
742 #endif
743 
744 #endif /* bignum.h */
int mpi_cmp_int(const mpi *X, t_sint z)
Compare signed values.
void mpi_swap(mpi *X, mpi *Y)
Swap the contents of X and Y.
int mpi_shrink(mpi *X, size_t nblimbs)
Resize down, keeping at least the specified number of limbs.
int mpi_safe_cond_assign(mpi *X, const mpi *Y, unsigned char assign)
Safe conditional assignement X = Y if assign is 1.
uint32_t t_uint
Definition: bignum.h:155
int mpi_div_int(mpi *Q, mpi *R, const mpi *A, t_sint b)
Division by int: A = Q * b + R.
int mpi_gcd(mpi *G, const mpi *A, const mpi *B)
Greatest common divisor: G = gcd(A, B)
int s
Definition: bignum.h:179
int mpi_fill_random(mpi *X, size_t size, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng)
Fill an MPI X with size bytes of random.
int mpi_sub_abs(mpi *X, const mpi *A, const mpi *B)
Unsigned subtraction: X = |A| - |B|.
int mpi_cmp_abs(const mpi *X, const mpi *Y)
Compare unsigned values.
Configuration options (set of defines)
int mpi_add_int(mpi *X, const mpi *A, t_sint b)
Signed addition: X = A + b.
int mpi_read_file(mpi *X, int radix, FILE *fin)
Read X from an opened file.
int mpi_div_mpi(mpi *Q, mpi *R, const mpi *A, const mpi *B)
Division by mpi: A = Q * B + R.
int mpi_lset(mpi *X, t_sint z)
Set value from integer.
int mpi_is_prime(mpi *X, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng)
Miller-Rabin primality test.
MPI structure.
Definition: bignum.h:177
int mpi_write_file(const char *p, const mpi *X, int radix, FILE *fout)
Write X into an opened file, or stdout if fout is NULL.
void mpi_init(mpi *X)
Initialize one MPI.
int mpi_cmp_mpi(const mpi *X, const mpi *Y)
Compare signed values.
unsigned long long t_udbl
Definition: bignum.h:161
int mpi_shift_r(mpi *X, size_t count)
Right-shift: X &gt;&gt;= count.
int mpi_add_mpi(mpi *X, const mpi *A, const mpi *B)
Signed addition: X = A + B.
asn1_buf val
The named value.
Definition: asn1.h:151
int mpi_write_string(const mpi *X, int radix, char *s, size_t *slen)
Export into an ASCII string.
int32_t t_sint
Definition: bignum.h:154
size_t mpi_lsb(const mpi *X)
Return the number of zero-bits before the least significant &#39;1&#39; bit.
int mpi_inv_mod(mpi *X, const mpi *A, const mpi *N)
Modular inverse: X = A^-1 mod N.
void mpi_free(mpi *X)
Unallocate one MPI.
int mpi_mul_int(mpi *X, const mpi *A, t_sint b)
Baseline multiplication: X = A * b Note: despite the functon signature, b is treated as a t_uint...
int mpi_grow(mpi *X, size_t nblimbs)
Enlarge to the specified number of limbs.
int mpi_mod_int(t_uint *r, const mpi *A, t_sint b)
Modulo: r = A mod b.
int mpi_exp_mod(mpi *X, const mpi *A, const mpi *E, const mpi *N, mpi *_RR)
Sliding-window exponentiation: X = A^E mod N.
int mpi_gen_prime(mpi *X, size_t nbits, int dh_flag, int(*f_rng)(void *, unsigned char *, size_t), void *p_rng)
Prime number generation.
size_t mpi_msb(const mpi *X)
Return the number of bits up to and including the most significant &#39;1&#39; bit&#39;.
int mpi_add_abs(mpi *X, const mpi *A, const mpi *B)
Unsigned addition: X = |A| + |B|.
int mpi_read_string(mpi *X, int radix, const char *s)
Import from an ASCII string.
t_uint * p
Definition: bignum.h:181
int mpi_read_binary(mpi *X, const unsigned char *buf, size_t buflen)
Import X from unsigned binary data, big endian.
int mpi_self_test(int verbose)
Checkup routine.
size_t mpi_size(const mpi *X)
Return the total size in bytes.
int mpi_copy(mpi *X, const mpi *Y)
Copy the contents of Y into X.
size_t n
Definition: bignum.h:180
int mpi_mod_mpi(mpi *R, const mpi *A, const mpi *B)
Modulo: R = A mod B.
int mpi_get_bit(const mpi *X, size_t pos)
Get a specific bit from X.
int mpi_write_binary(const mpi *X, unsigned char *buf, size_t buflen)
Export X into unsigned binary data, big endian.
int mpi_shift_l(mpi *X, size_t count)
Left-shift: X &lt;&lt;= count.
int mpi_safe_cond_swap(mpi *X, mpi *Y, unsigned char assign)
Safe conditional swap X &lt;-&gt; Y if swap is 1.
int mpi_mul_mpi(mpi *X, const mpi *A, const mpi *B)
Baseline multiplication: X = A * B.
int mpi_sub_mpi(mpi *X, const mpi *A, const mpi *B)
Signed subtraction: X = A - B.
int mpi_set_bit(mpi *X, size_t pos, unsigned char val)
Set a bit of X to a specific value of 0 or 1.
int mpi_sub_int(mpi *X, const mpi *A, t_sint b)
Signed subtraction: X = A - b.