2018-09-20 01:49:47 +02:00
|
|
|
// SPDX-License-Identifier: GPL-2.0
|
|
|
|
/*
|
2018-01-18 11:46:01 +01:00
|
|
|
* Copyright (C) 2018 Jason A. Donenfeld <Jason@zx2c4.com>. All Rights Reserved.
|
2015-06-05 15:58:00 +02:00
|
|
|
*/
|
|
|
|
|
|
|
|
#include "curve25519.h"
|
|
|
|
|
|
|
|
#include <stdint.h>
|
|
|
|
#include <string.h>
|
|
|
|
|
2018-02-17 18:58:31 +01:00
|
|
|
#ifdef __linux__
|
|
|
|
#include <linux/types.h>
|
|
|
|
typedef __u64 u64;
|
|
|
|
typedef __u32 u32;
|
|
|
|
typedef __u8 u8;
|
|
|
|
typedef __s64 s64;
|
|
|
|
#else
|
|
|
|
typedef uint64_t u64, __le64;
|
|
|
|
typedef uint32_t u32, __le32;
|
2018-01-22 17:58:44 +01:00
|
|
|
typedef uint8_t u8;
|
|
|
|
typedef int64_t s64;
|
2018-02-17 18:58:31 +01:00
|
|
|
#endif
|
2018-02-05 12:23:10 +01:00
|
|
|
#if __BYTE_ORDER__ == __ORDER_BIG_ENDIAN__
|
|
|
|
#define le64_to_cpup(a) __builtin_bswap64(*(a))
|
|
|
|
#define le32_to_cpup(a) __builtin_bswap32(*(a))
|
|
|
|
#define cpu_to_le64(a) __builtin_bswap64(a)
|
|
|
|
#else
|
|
|
|
#define le64_to_cpup(a) (*(a))
|
|
|
|
#define le32_to_cpup(a) (*(a))
|
|
|
|
#define cpu_to_le64(a) (a)
|
|
|
|
#endif
|
2018-08-24 03:08:03 +02:00
|
|
|
#define get_unaligned_le32(a) le32_to_cpup((u32 *)(a))
|
|
|
|
#define get_unaligned_le64(a) le64_to_cpup((u64 *)(a))
|
|
|
|
#define put_unaligned_le64(s, d) *(u64 *)(d) = cpu_to_le64(s)
|
2015-06-05 15:58:00 +02:00
|
|
|
#ifndef __always_inline
|
|
|
|
#define __always_inline __inline __attribute__((__always_inline__))
|
|
|
|
#endif
|
2018-01-22 17:58:44 +01:00
|
|
|
#ifndef noinline
|
|
|
|
#define noinline __attribute__((noinline))
|
|
|
|
#endif
|
2018-01-18 11:46:01 +01:00
|
|
|
#ifndef __aligned
|
|
|
|
#define __aligned(x) __attribute__((aligned(x)))
|
|
|
|
#endif
|
2018-01-22 17:58:44 +01:00
|
|
|
#ifndef __force
|
|
|
|
#define __force
|
|
|
|
#endif
|
2018-01-31 15:58:17 +01:00
|
|
|
#define normalize_secret(a) curve25519_normalize_secret(a)
|
2018-01-18 11:46:01 +01:00
|
|
|
|
2018-01-22 17:58:44 +01:00
|
|
|
static noinline void memzero_explicit(void *s, size_t count)
|
2018-01-18 11:46:01 +01:00
|
|
|
{
|
2018-01-22 17:58:44 +01:00
|
|
|
memset(s, 0, count);
|
2018-02-27 00:49:16 +01:00
|
|
|
asm volatile("": :"r"(s) :"memory");
|
2015-06-05 15:58:00 +02:00
|
|
|
}
|
|
|
|
|
2018-01-22 17:58:44 +01:00
|
|
|
#ifdef __SIZEOF_INT128__
|
2018-10-07 15:35:51 +02:00
|
|
|
#include "../crypto/zinc/curve25519/curve25519-hacl64.c"
|
2018-02-01 19:15:28 +01:00
|
|
|
#else
|
2018-10-07 15:35:51 +02:00
|
|
|
#include "../crypto/zinc/curve25519/curve25519-fiat32.c"
|
2015-06-05 15:58:00 +02:00
|
|
|
#endif
|
|
|
|
|
2018-09-24 22:02:13 +02:00
|
|
|
void curve25519_generate_public(uint8_t pub[static CURVE25519_KEY_SIZE], const uint8_t secret[static CURVE25519_KEY_SIZE])
|
2015-06-05 15:58:00 +02:00
|
|
|
{
|
2018-09-24 22:02:13 +02:00
|
|
|
static const uint8_t basepoint[CURVE25519_KEY_SIZE] = { 9 };
|
2017-10-25 17:56:08 +02:00
|
|
|
|
2015-06-05 15:58:00 +02:00
|
|
|
curve25519(pub, secret, basepoint);
|
|
|
|
}
|
2018-01-22 17:58:44 +01:00
|
|
|
|
2018-09-24 22:02:13 +02:00
|
|
|
void curve25519(uint8_t mypublic[static CURVE25519_KEY_SIZE], const uint8_t secret[static CURVE25519_KEY_SIZE], const uint8_t basepoint[static CURVE25519_KEY_SIZE])
|
2018-01-22 17:58:44 +01:00
|
|
|
{
|
|
|
|
curve25519_generic(mypublic, secret, basepoint);
|
|
|
|
}
|