1 /******************************************************************************* 2 * Copyright 2003-2018 Intel Corporation 3 * All Rights Reserved. 4 * 5 * If this software was obtained under the Intel Simplified Software License, 6 * the following terms apply: 7 * 8 * The source code, information and material ("Material") contained herein is 9 * owned by Intel Corporation or its suppliers or licensors, and title to such 10 * Material remains with Intel Corporation or its suppliers or licensors. The 11 * Material contains proprietary information of Intel or its suppliers and 12 * licensors. The Material is protected by worldwide copyright laws and treaty 13 * provisions. No part of the Material may be used, copied, reproduced, 14 * modified, published, uploaded, posted, transmitted, distributed or disclosed 15 * in any way without Intel's prior express written permission. No license under 16 * any patent, copyright or other intellectual property rights in the Material 17 * is granted to or conferred upon you, either expressly, by implication, 18 * inducement, estoppel or otherwise. Any license under such intellectual 19 * property rights must be express and approved by Intel in writing. 20 * 21 * Unless otherwise agreed by Intel in writing, you may not remove or alter this 22 * notice or any other notice embedded in Materials by Intel or Intel's 23 * suppliers or licensors in any way. 24 * 25 * 26 * If this software was obtained under the Apache License, Version 2.0 (the 27 * "License"), the following terms apply: 28 * 29 * You may not use this file except in compliance with the License. You may 30 * obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 31 * 32 * 33 * Unless required by applicable law or agreed to in writing, software 34 * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT 35 * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 36 * 37 * See the License for the specific language governing permissions and 38 * limitations under the License. 39 *******************************************************************************/ 40 41 /* 42 // 43 // Purpose: 44 // Cryptography Primitive. 45 // EC over Prime Finite Field (EC Key Generation) 46 // 47 // Contents: 48 // ippsECCPGenKeyPair() 49 // 50 // 51 */ 52 53 #include "owndefs.h" 54 #include "owncp.h" 55 #include "pcpeccp.h" 56 57 58 /*F* 59 // Name: ippsECCPGenKeyPair 60 // 61 // Purpose: Generate (private,public) Key Pair 62 // 63 // Returns: Reason: 64 // ippStsNullPtrErr NULL == pEC 65 // NULL == pPrivate 66 // NULL == pPublic 67 // 68 // ippStsContextMatchErr illegal pEC->idCtx 69 // illegal pPrivate->idCtx 70 // illegal pPublic->idCtx 71 // 72 // ippStsNoErr no errors 73 // 74 // Parameters: 75 // pPrivate pointer to the resultant private key 76 // pPublic pointer to the resultant public key 77 // pEC pointer to the ECCP context 78 // rndFunc Specified Random Generator. 79 // pRndParam Pointer to the Random Generator context. 80 // 81 *F*/ 82 IPPFUN(IppStatus, ippsECCPGenKeyPair, (IppsBigNumState* pPrivate, IppsECCPPointState* pPublic, 83 IppsECCPState* pEC, 84 IppBitSupplier rndFunc, void* pRndParam)) 85 { 86 IPP_BAD_PTR2_RET(pEC, rndFunc); 87 88 /* use aligned EC context */ 89 pEC = (IppsGFpECState*)( IPP_ALIGNED_PTR(pEC, ECGFP_ALIGNMENT) ); 90 IPP_BADARG_RET(!ECP_TEST_ID(pEC), ippStsContextMatchErr); 91 92 /* test private/public keys */ 93 IPP_BAD_PTR2_RET(pPrivate,pPublic); 94 pPrivate = (IppsBigNumState*)( IPP_ALIGNED_PTR(pPrivate, ALIGN_VAL) ); 95 IPP_BADARG_RET(!BN_VALID_ID(pPrivate), ippStsContextMatchErr); 96 IPP_BADARG_RET((BN_ROOM(pPrivate)*BITSIZE(BNU_CHUNK_T)<ECP_ORDBITSIZE(pEC)), ippStsSizeErr); 97 98 IPP_BADARG_RET( !ECP_POINT_TEST_ID(pPublic), ippStsContextMatchErr ); 99 IPP_BADARG_RET(ECP_POINT_FELEN(pPublic)<GFP_FELEN(GFP_PMA(ECP_GFP(pEC))), ippStsRangeErr); 100 101 { 102 /* generate random private key X: 0 < X < R */ 103 gsModEngine* pModEngine =ECP_MONT_R(pEC); 104 BNU_CHUNK_T* pOrder = MOD_MODULUS(pModEngine); 105 int orderBitLen = ECP_ORDBITSIZE(pEC); 106 int orderLen = BITS_BNU_CHUNK(orderBitLen); 107 108 BNU_CHUNK_T* pX = BN_NUMBER(pPrivate); 109 int nsX = BITS_BNU_CHUNK(orderBitLen); 110 BNU_CHUNK_T xMask = MASK_BNU_CHUNK(orderBitLen); 111 112 IppStatus sts; 113 do { 114 sts = rndFunc((Ipp32u*)pX, orderBitLen, pRndParam); 115 if(ippStsNoErr != sts) 116 break; 117 pX[nsX-1] &= xMask; 118 } while( (1 == cpEqu_BNU_CHUNK(pX, nsX, 0)) || 119 (0 <= cpCmp_BNU(pX, nsX, pOrder, orderLen)) ); 120 121 if(ippStsNoErr != sts) 122 return ippStsErr; 123 124 /* set up private */ 125 BN_SIGN(pPrivate) = ippBigNumPOS; 126 FIX_BNU(pX, nsX); 127 BN_SIZE(pPrivate) = nsX; 128 129 /* calculate public key */ 130 gfec_MulBasePoint(pPublic, pX, nsX, pEC, (Ipp8u*)ECP_SBUFFER(pEC)); 131 132 return ippStsNoErr; 133 } 134 } 135