1 /* crypto/ec/ec_curve.c */ 2 /* 3 * Written by Nils Larsch for the OpenSSL project. 4 */ 5 /* ==================================================================== 6 * Copyright (c) 1998-2010 The OpenSSL Project. All rights reserved. 7 * 8 * Redistribution and use in source and binary forms, with or without 9 * modification, are permitted provided that the following conditions 10 * are met: 11 * 12 * 1. Redistributions of source code must retain the above copyright 13 * notice, this list of conditions and the following disclaimer. 14 * 15 * 2. Redistributions in binary form must reproduce the above copyright 16 * notice, this list of conditions and the following disclaimer in 17 * the documentation and/or other materials provided with the 18 * distribution. 19 * 20 * 3. All advertising materials mentioning features or use of this 21 * software must display the following acknowledgment: 22 * "This product includes software developed by the OpenSSL Project 23 * for use in the OpenSSL Toolkit. (http://www.openssl.org/)" 24 * 25 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to 26 * endorse or promote products derived from this software without 27 * prior written permission. For written permission, please contact 28 * openssl-core (at) openssl.org. 29 * 30 * 5. Products derived from this software may not be called "OpenSSL" 31 * nor may "OpenSSL" appear in their names without prior written 32 * permission of the OpenSSL Project. 33 * 34 * 6. Redistributions of any form whatsoever must retain the following 35 * acknowledgment: 36 * "This product includes software developed by the OpenSSL Project 37 * for use in the OpenSSL Toolkit (http://www.openssl.org/)" 38 * 39 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY 40 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 41 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 42 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR 43 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, 44 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 45 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; 46 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 47 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, 48 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 49 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED 50 * OF THE POSSIBILITY OF SUCH DAMAGE. 51 * ==================================================================== 52 * 53 * This product includes cryptographic software written by Eric Young 54 * (eay (at) cryptsoft.com). This product includes software written by Tim 55 * Hudson (tjh (at) cryptsoft.com). 56 * 57 */ 58 /* ==================================================================== 59 * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED. 60 * 61 * Portions of the attached software ("Contribution") are developed by 62 * SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project. 63 * 64 * The Contribution is licensed pursuant to the OpenSSL open source 65 * license provided above. 66 * 67 * The elliptic curve binary polynomial software is originally written by 68 * Sheueling Chang Shantz and Douglas Stebila of Sun Microsystems Laboratories. 69 * 70 */ 71 72 #include "ec_lcl.h" 73 #include <openssl/err.h> 74 #include <openssl/obj_mac.h> 75 #include <openssl/opensslconf.h> 76 77 typedef struct { 78 int field_type, /* either NID_X9_62_prime_field or 79 * NID_X9_62_characteristic_two_field */ 80 seed_len, 81 param_len; 82 unsigned int cofactor; /* promoted to BN_ULONG */ 83 } EC_CURVE_DATA; 84 85 /* the nist prime curves */ 86 static const struct { EC_CURVE_DATA h; unsigned char data[20+24*6]; } 87 _EC_NIST_PRIME_192 = { 88 { NID_X9_62_prime_field,20,24,1 }, 89 { 0x30,0x45,0xAE,0x6F,0xC8,0x42,0x2F,0x64,0xED,0x57, /* seed */ 90 0x95,0x28,0xD3,0x81,0x20,0xEA,0xE1,0x21,0x96,0xD5, 91 92 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* p */ 93 0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xFF,0xFF, 94 0xFF,0xFF,0xFF,0xFF, 95 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* a */ 96 0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xFF,0xFF, 97 0xFF,0xFF,0xFF,0xFC, 98 0x64,0x21,0x05,0x19,0xE5,0x9C,0x80,0xE7,0x0F,0xA7, /* b */ 99 0xE9,0xAB,0x72,0x24,0x30,0x49,0xFE,0xB8,0xDE,0xEC, 100 0xC1,0x46,0xB9,0xB1, 101 0x18,0x8D,0xA8,0x0E,0xB0,0x30,0x90,0xF6,0x7C,0xBF, /* x */ 102 0x20,0xEB,0x43,0xA1,0x88,0x00,0xF4,0xFF,0x0A,0xFD, 103 0x82,0xFF,0x10,0x12, 104 0x07,0x19,0x2b,0x95,0xff,0xc8,0xda,0x78,0x63,0x10, /* y */ 105 0x11,0xed,0x6b,0x24,0xcd,0xd5,0x73,0xf9,0x77,0xa1, 106 0x1e,0x79,0x48,0x11, 107 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* order */ 108 0xFF,0xFF,0x99,0xDE,0xF8,0x36,0x14,0x6B,0xC9,0xB1, 109 0xB4,0xD2,0x28,0x31 } 110 }; 111 112 static const struct { EC_CURVE_DATA h; unsigned char data[20+28*6]; } 113 _EC_NIST_PRIME_224 = { 114 { NID_X9_62_prime_field,20,28,1 }, 115 { 0xBD,0x71,0x34,0x47,0x99,0xD5,0xC7,0xFC,0xDC,0x45, /* seed */ 116 0xB5,0x9F,0xA3,0xB9,0xAB,0x8F,0x6A,0x94,0x8B,0xC5, 117 118 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* p */ 119 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0x00,0x00,0x00,0x00, 120 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01, 121 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* a */ 122 0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xFF,0xFF, 123 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFE, 124 0xB4,0x05,0x0A,0x85,0x0C,0x04,0xB3,0xAB,0xF5,0x41, /* b */ 125 0x32,0x56,0x50,0x44,0xB0,0xB7,0xD7,0xBF,0xD8,0xBA, 126 0x27,0x0B,0x39,0x43,0x23,0x55,0xFF,0xB4, 127 0xB7,0x0E,0x0C,0xBD,0x6B,0xB4,0xBF,0x7F,0x32,0x13, /* x */ 128 0x90,0xB9,0x4A,0x03,0xC1,0xD3,0x56,0xC2,0x11,0x22, 129 0x34,0x32,0x80,0xD6,0x11,0x5C,0x1D,0x21, 130 0xbd,0x37,0x63,0x88,0xb5,0xf7,0x23,0xfb,0x4c,0x22, /* y */ 131 0xdf,0xe6,0xcd,0x43,0x75,0xa0,0x5a,0x07,0x47,0x64, 132 0x44,0xd5,0x81,0x99,0x85,0x00,0x7e,0x34, 133 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* order */ 134 0xFF,0xFF,0xFF,0xFF,0x16,0xA2,0xE0,0xB8,0xF0,0x3E, 135 0x13,0xDD,0x29,0x45,0x5C,0x5C,0x2A,0x3D } 136 }; 137 138 static const struct { EC_CURVE_DATA h; unsigned char data[20+48*6]; } 139 _EC_NIST_PRIME_384 = { 140 { NID_X9_62_prime_field,20,48,1 }, 141 { 0xA3,0x35,0x92,0x6A,0xA3,0x19,0xA2,0x7A,0x1D,0x00, /* seed */ 142 0x89,0x6A,0x67,0x73,0xA4,0x82,0x7A,0xCD,0xAC,0x73, 143 144 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* p */ 145 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 146 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 147 0xFF,0xFE,0xFF,0xFF,0xFF,0xFF,0x00,0x00,0x00,0x00, 148 0x00,0x00,0x00,0x00,0xFF,0xFF,0xFF,0xFF, 149 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* a */ 150 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 151 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 152 0xFF,0xFE,0xFF,0xFF,0xFF,0xFF,0x00,0x00,0x00,0x00, 153 0x00,0x00,0x00,0x00,0xFF,0xFF,0xFF,0xFC, 154 0xB3,0x31,0x2F,0xA7,0xE2,0x3E,0xE7,0xE4,0x98,0x8E, /* b */ 155 0x05,0x6B,0xE3,0xF8,0x2D,0x19,0x18,0x1D,0x9C,0x6E, 156 0xFE,0x81,0x41,0x12,0x03,0x14,0x08,0x8F,0x50,0x13, 157 0x87,0x5A,0xC6,0x56,0x39,0x8D,0x8A,0x2E,0xD1,0x9D, 158 0x2A,0x85,0xC8,0xED,0xD3,0xEC,0x2A,0xEF, 159 0xAA,0x87,0xCA,0x22,0xBE,0x8B,0x05,0x37,0x8E,0xB1, /* x */ 160 0xC7,0x1E,0xF3,0x20,0xAD,0x74,0x6E,0x1D,0x3B,0x62, 161 0x8B,0xA7,0x9B,0x98,0x59,0xF7,0x41,0xE0,0x82,0x54, 162 0x2A,0x38,0x55,0x02,0xF2,0x5D,0xBF,0x55,0x29,0x6C, 163 0x3A,0x54,0x5E,0x38,0x72,0x76,0x0A,0xB7, 164 0x36,0x17,0xde,0x4a,0x96,0x26,0x2c,0x6f,0x5d,0x9e, /* y */ 165 0x98,0xbf,0x92,0x92,0xdc,0x29,0xf8,0xf4,0x1d,0xbd, 166 0x28,0x9a,0x14,0x7c,0xe9,0xda,0x31,0x13,0xb5,0xf0, 167 0xb8,0xc0,0x0a,0x60,0xb1,0xce,0x1d,0x7e,0x81,0x9d, 168 0x7a,0x43,0x1d,0x7c,0x90,0xea,0x0e,0x5f, 169 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* order */ 170 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 171 0xFF,0xFF,0xFF,0xFF,0xC7,0x63,0x4D,0x81,0xF4,0x37, 172 0x2D,0xDF,0x58,0x1A,0x0D,0xB2,0x48,0xB0,0xA7,0x7A, 173 0xEC,0xEC,0x19,0x6A,0xCC,0xC5,0x29,0x73 } 174 }; 175 176 static const struct { EC_CURVE_DATA h; unsigned char data[20+66*6]; } 177 _EC_NIST_PRIME_521 = { 178 { NID_X9_62_prime_field,20,66,1 }, 179 { 0xD0,0x9E,0x88,0x00,0x29,0x1C,0xB8,0x53,0x96,0xCC, /* seed */ 180 0x67,0x17,0x39,0x32,0x84,0xAA,0xA0,0xDA,0x64,0xBA, 181 182 0x01,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* p */ 183 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 184 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 185 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 186 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 187 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 188 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 189 0x01,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* a */ 190 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 191 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 192 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 193 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 194 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 195 0xFF,0xFF,0xFF,0xFF,0xFF,0xFC, 196 0x00,0x51,0x95,0x3E,0xB9,0x61,0x8E,0x1C,0x9A,0x1F, /* b */ 197 0x92,0x9A,0x21,0xA0,0xB6,0x85,0x40,0xEE,0xA2,0xDA, 198 0x72,0x5B,0x99,0xB3,0x15,0xF3,0xB8,0xB4,0x89,0x91, 199 0x8E,0xF1,0x09,0xE1,0x56,0x19,0x39,0x51,0xEC,0x7E, 200 0x93,0x7B,0x16,0x52,0xC0,0xBD,0x3B,0xB1,0xBF,0x07, 201 0x35,0x73,0xDF,0x88,0x3D,0x2C,0x34,0xF1,0xEF,0x45, 202 0x1F,0xD4,0x6B,0x50,0x3F,0x00, 203 0x00,0xC6,0x85,0x8E,0x06,0xB7,0x04,0x04,0xE9,0xCD, /* x */ 204 0x9E,0x3E,0xCB,0x66,0x23,0x95,0xB4,0x42,0x9C,0x64, 205 0x81,0x39,0x05,0x3F,0xB5,0x21,0xF8,0x28,0xAF,0x60, 206 0x6B,0x4D,0x3D,0xBA,0xA1,0x4B,0x5E,0x77,0xEF,0xE7, 207 0x59,0x28,0xFE,0x1D,0xC1,0x27,0xA2,0xFF,0xA8,0xDE, 208 0x33,0x48,0xB3,0xC1,0x85,0x6A,0x42,0x9B,0xF9,0x7E, 209 0x7E,0x31,0xC2,0xE5,0xBD,0x66, 210 0x01,0x18,0x39,0x29,0x6a,0x78,0x9a,0x3b,0xc0,0x04, /* y */ 211 0x5c,0x8a,0x5f,0xb4,0x2c,0x7d,0x1b,0xd9,0x98,0xf5, 212 0x44,0x49,0x57,0x9b,0x44,0x68,0x17,0xaf,0xbd,0x17, 213 0x27,0x3e,0x66,0x2c,0x97,0xee,0x72,0x99,0x5e,0xf4, 214 0x26,0x40,0xc5,0x50,0xb9,0x01,0x3f,0xad,0x07,0x61, 215 0x35,0x3c,0x70,0x86,0xa2,0x72,0xc2,0x40,0x88,0xbe, 216 0x94,0x76,0x9f,0xd1,0x66,0x50, 217 0x01,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* order */ 218 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 219 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 220 0xFF,0xFF,0xFF,0xFA,0x51,0x86,0x87,0x83,0xBF,0x2F, 221 0x96,0x6B,0x7F,0xCC,0x01,0x48,0xF7,0x09,0xA5,0xD0, 222 0x3B,0xB5,0xC9,0xB8,0x89,0x9C,0x47,0xAE,0xBB,0x6F, 223 0xB7,0x1E,0x91,0x38,0x64,0x09 } 224 }; 225 226 /* the x9.62 prime curves (minus the nist prime curves) */ 227 static const struct { EC_CURVE_DATA h; unsigned char data[20+24*6]; } 228 _EC_X9_62_PRIME_192V2 = { 229 { NID_X9_62_prime_field,20,24,1 }, 230 { 0x31,0xA9,0x2E,0xE2,0x02,0x9F,0xD1,0x0D,0x90,0x1B, /* seed */ 231 0x11,0x3E,0x99,0x07,0x10,0xF0,0xD2,0x1A,0xC6,0xB6, 232 233 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* p */ 234 0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xFF,0xFF, 235 0xFF,0xFF,0xFF,0xFF, 236 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* a */ 237 0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xFF,0xFF, 238 0xFF,0xFF,0xFF,0xFC, 239 0xCC,0x22,0xD6,0xDF,0xB9,0x5C,0x6B,0x25,0xE4,0x9C, /* b */ 240 0x0D,0x63,0x64,0xA4,0xE5,0x98,0x0C,0x39,0x3A,0xA2, 241 0x16,0x68,0xD9,0x53, 242 0xEE,0xA2,0xBA,0xE7,0xE1,0x49,0x78,0x42,0xF2,0xDE, /* x */ 243 0x77,0x69,0xCF,0xE9,0xC9,0x89,0xC0,0x72,0xAD,0x69, 244 0x6F,0x48,0x03,0x4A, 245 0x65,0x74,0xd1,0x1d,0x69,0xb6,0xec,0x7a,0x67,0x2b, /* y */ 246 0xb8,0x2a,0x08,0x3d,0xf2,0xf2,0xb0,0x84,0x7d,0xe9, 247 0x70,0xb2,0xde,0x15, 248 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* order */ 249 0xFF,0xFE,0x5F,0xB1,0xA7,0x24,0xDC,0x80,0x41,0x86, 250 0x48,0xD8,0xDD,0x31 } 251 }; 252 253 static const struct { EC_CURVE_DATA h; unsigned char data[20+24*6]; } 254 _EC_X9_62_PRIME_192V3 = { 255 { NID_X9_62_prime_field,20,24,1 }, 256 { 0xC4,0x69,0x68,0x44,0x35,0xDE,0xB3,0x78,0xC4,0xB6, /* seed */ 257 0x5C,0xA9,0x59,0x1E,0x2A,0x57,0x63,0x05,0x9A,0x2E, 258 259 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* p */ 260 0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xFF,0xFF, 261 0xFF,0xFF,0xFF,0xFF, 262 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* a */ 263 0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xFF,0xFF, 264 0xFF,0xFF,0xFF,0xFC, 265 0x22,0x12,0x3D,0xC2,0x39,0x5A,0x05,0xCA,0xA7,0x42, /* b */ 266 0x3D,0xAE,0xCC,0xC9,0x47,0x60,0xA7,0xD4,0x62,0x25, 267 0x6B,0xD5,0x69,0x16, 268 0x7D,0x29,0x77,0x81,0x00,0xC6,0x5A,0x1D,0xA1,0x78, /* x */ 269 0x37,0x16,0x58,0x8D,0xCE,0x2B,0x8B,0x4A,0xEE,0x8E, 270 0x22,0x8F,0x18,0x96, 271 0x38,0xa9,0x0f,0x22,0x63,0x73,0x37,0x33,0x4b,0x49, /* y */ 272 0xdc,0xb6,0x6a,0x6d,0xc8,0xf9,0x97,0x8a,0xca,0x76, 273 0x48,0xa9,0x43,0xb0, 274 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* order */ 275 0xFF,0xFF,0x7A,0x62,0xD0,0x31,0xC8,0x3F,0x42,0x94, 276 0xF6,0x40,0xEC,0x13 } 277 }; 278 279 static const struct { EC_CURVE_DATA h; unsigned char data[20+30*6]; } 280 _EC_X9_62_PRIME_239V1 = { 281 { NID_X9_62_prime_field,20,30,1 }, 282 { 0xE4,0x3B,0xB4,0x60,0xF0,0xB8,0x0C,0xC0,0xC0,0xB0, /* seed */ 283 0x75,0x79,0x8E,0x94,0x80,0x60,0xF8,0x32,0x1B,0x7D, 284 285 0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* p */ 286 0xFF,0xFF,0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0x80,0x00, 287 0x00,0x00,0x00,0x00,0x7F,0xFF,0xFF,0xFF,0xFF,0xFF, 288 289 0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* a */ 290 0xFF,0xFF,0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0x80,0x00, 291 0x00,0x00,0x00,0x00,0x7F,0xFF,0xFF,0xFF,0xFF,0xFC, 292 293 0x6B,0x01,0x6C,0x3B,0xDC,0xF1,0x89,0x41,0xD0,0xD6, /* b */ 294 0x54,0x92,0x14,0x75,0xCA,0x71,0xA9,0xDB,0x2F,0xB2, 295 0x7D,0x1D,0x37,0x79,0x61,0x85,0xC2,0x94,0x2C,0x0A, 296 297 0x0F,0xFA,0x96,0x3C,0xDC,0xA8,0x81,0x6C,0xCC,0x33, /* x */ 298 0xB8,0x64,0x2B,0xED,0xF9,0x05,0xC3,0xD3,0x58,0x57, 299 0x3D,0x3F,0x27,0xFB,0xBD,0x3B,0x3C,0xB9,0xAA,0xAF, 300 301 0x7d,0xeb,0xe8,0xe4,0xe9,0x0a,0x5d,0xae,0x6e,0x40, /* y */ 302 0x54,0xca,0x53,0x0b,0xa0,0x46,0x54,0xb3,0x68,0x18, 303 0xce,0x22,0x6b,0x39,0xfc,0xcb,0x7b,0x02,0xf1,0xae, 304 305 0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* order */ 306 0xFF,0xFF,0x7F,0xFF,0xFF,0x9E,0x5E,0x9A,0x9F,0x5D, 307 0x90,0x71,0xFB,0xD1,0x52,0x26,0x88,0x90,0x9D,0x0B } 308 }; 309 310 static const struct { EC_CURVE_DATA h; unsigned char data[20+30*6]; } 311 _EC_X9_62_PRIME_239V2 = { 312 { NID_X9_62_prime_field,20,30,1 }, 313 { 0xE8,0xB4,0x01,0x16,0x04,0x09,0x53,0x03,0xCA,0x3B, /* seed */ 314 0x80,0x99,0x98,0x2B,0xE0,0x9F,0xCB,0x9A,0xE6,0x16, 315 316 0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* p */ 317 0xFF,0xFF,0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0x80,0x00, 318 0x00,0x00,0x00,0x00,0x7F,0xFF,0xFF,0xFF,0xFF,0xFF, 319 320 0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* a */ 321 0xFF,0xFF,0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0x80,0x00, 322 0x00,0x00,0x00,0x00,0x7F,0xFF,0xFF,0xFF,0xFF,0xFC, 323 324 0x61,0x7F,0xAB,0x68,0x32,0x57,0x6C,0xBB,0xFE,0xD5, /* b */ 325 0x0D,0x99,0xF0,0x24,0x9C,0x3F,0xEE,0x58,0xB9,0x4B, 326 0xA0,0x03,0x8C,0x7A,0xE8,0x4C,0x8C,0x83,0x2F,0x2C, 327 328 0x38,0xAF,0x09,0xD9,0x87,0x27,0x70,0x51,0x20,0xC9, /* x */ 329 0x21,0xBB,0x5E,0x9E,0x26,0x29,0x6A,0x3C,0xDC,0xF2, 330 0xF3,0x57,0x57,0xA0,0xEA,0xFD,0x87,0xB8,0x30,0xE7, 331 332 0x5b,0x01,0x25,0xe4,0xdb,0xea,0x0e,0xc7,0x20,0x6d, /* y */ 333 0xa0,0xfc,0x01,0xd9,0xb0,0x81,0x32,0x9f,0xb5,0x55, 334 0xde,0x6e,0xf4,0x60,0x23,0x7d,0xff,0x8b,0xe4,0xba, 335 336 0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* order */ 337 0xFF,0xFF,0x80,0x00,0x00,0xCF,0xA7,0xE8,0x59,0x43, 338 0x77,0xD4,0x14,0xC0,0x38,0x21,0xBC,0x58,0x20,0x63 } 339 }; 340 341 static const struct { EC_CURVE_DATA h; unsigned char data[20+30*6]; } 342 _EC_X9_62_PRIME_239V3 = { 343 { NID_X9_62_prime_field,20,30,1 }, 344 { 0x7D,0x73,0x74,0x16,0x8F,0xFE,0x34,0x71,0xB6,0x0A, /* seed */ 345 0x85,0x76,0x86,0xA1,0x94,0x75,0xD3,0xBF,0xA2,0xFF, 346 347 0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* p */ 348 0xFF,0xFF,0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0x80,0x00, 349 0x00,0x00,0x00,0x00,0x7F,0xFF,0xFF,0xFF,0xFF,0xFF, 350 351 0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* a */ 352 0xFF,0xFF,0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0x80,0x00, 353 0x00,0x00,0x00,0x00,0x7F,0xFF,0xFF,0xFF,0xFF,0xFC, 354 355 0x25,0x57,0x05,0xFA,0x2A,0x30,0x66,0x54,0xB1,0xF4, /* b */ 356 0xCB,0x03,0xD6,0xA7,0x50,0xA3,0x0C,0x25,0x01,0x02, 357 0xD4,0x98,0x87,0x17,0xD9,0xBA,0x15,0xAB,0x6D,0x3E, 358 359 0x67,0x68,0xAE,0x8E,0x18,0xBB,0x92,0xCF,0xCF,0x00, /* x */ 360 0x5C,0x94,0x9A,0xA2,0xC6,0xD9,0x48,0x53,0xD0,0xE6, 361 0x60,0xBB,0xF8,0x54,0xB1,0xC9,0x50,0x5F,0xE9,0x5A, 362 363 0x16,0x07,0xe6,0x89,0x8f,0x39,0x0c,0x06,0xbc,0x1d, /* y */ 364 0x55,0x2b,0xad,0x22,0x6f,0x3b,0x6f,0xcf,0xe4,0x8b, 365 0x6e,0x81,0x84,0x99,0xaf,0x18,0xe3,0xed,0x6c,0xf3, 366 367 0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* order */ 368 0xFF,0xFF,0x7F,0xFF,0xFF,0x97,0x5D,0xEB,0x41,0xB3, 369 0xA6,0x05,0x7C,0x3C,0x43,0x21,0x46,0x52,0x65,0x51 } 370 }; 371 372 373 static const struct { EC_CURVE_DATA h; unsigned char data[20+32*6]; } 374 _EC_X9_62_PRIME_256V1 = { 375 { NID_X9_62_prime_field,20,32,1 }, 376 { 0xC4,0x9D,0x36,0x08,0x86,0xE7,0x04,0x93,0x6A,0x66, /* seed */ 377 0x78,0xE1,0x13,0x9D,0x26,0xB7,0x81,0x9F,0x7E,0x90, 378 379 0xFF,0xFF,0xFF,0xFF,0x00,0x00,0x00,0x01,0x00,0x00, /* p */ 380 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 381 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 382 0xFF,0xFF, 383 0xFF,0xFF,0xFF,0xFF,0x00,0x00,0x00,0x01,0x00,0x00, /* a */ 384 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 385 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 386 0xFF,0xFC, 387 0x5A,0xC6,0x35,0xD8,0xAA,0x3A,0x93,0xE7,0xB3,0xEB, /* b */ 388 0xBD,0x55,0x76,0x98,0x86,0xBC,0x65,0x1D,0x06,0xB0, 389 0xCC,0x53,0xB0,0xF6,0x3B,0xCE,0x3C,0x3E,0x27,0xD2, 390 0x60,0x4B, 391 0x6B,0x17,0xD1,0xF2,0xE1,0x2C,0x42,0x47,0xF8,0xBC, /* x */ 392 0xE6,0xE5,0x63,0xA4,0x40,0xF2,0x77,0x03,0x7D,0x81, 393 0x2D,0xEB,0x33,0xA0,0xF4,0xA1,0x39,0x45,0xD8,0x98, 394 0xC2,0x96, 395 0x4f,0xe3,0x42,0xe2,0xfe,0x1a,0x7f,0x9b,0x8e,0xe7, /* y */ 396 0xeb,0x4a,0x7c,0x0f,0x9e,0x16,0x2b,0xce,0x33,0x57, 397 0x6b,0x31,0x5e,0xce,0xcb,0xb6,0x40,0x68,0x37,0xbf, 398 0x51,0xf5, 399 0xFF,0xFF,0xFF,0xFF,0x00,0x00,0x00,0x00,0xFF,0xFF, /* order */ 400 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xBC,0xE6,0xFA,0xAD, 401 0xA7,0x17,0x9E,0x84,0xF3,0xB9,0xCA,0xC2,0xFC,0x63, 402 0x25,0x51 } 403 }; 404 405 /* the secg prime curves (minus the nist and x9.62 prime curves) */ 406 static const struct { EC_CURVE_DATA h; unsigned char data[20+14*6]; } 407 _EC_SECG_PRIME_112R1 = { 408 { NID_X9_62_prime_field,20,14,1 }, 409 { 0x00,0xF5,0x0B,0x02,0x8E,0x4D,0x69,0x6E,0x67,0x68, /* seed */ 410 0x75,0x61,0x51,0x75,0x29,0x04,0x72,0x78,0x3F,0xB1, 411 412 0xDB,0x7C,0x2A,0xBF,0x62,0xE3,0x5E,0x66,0x80,0x76, /* p */ 413 0xBE,0xAD,0x20,0x8B, 414 0xDB,0x7C,0x2A,0xBF,0x62,0xE3,0x5E,0x66,0x80,0x76, /* a */ 415 0xBE,0xAD,0x20,0x88, 416 0x65,0x9E,0xF8,0xBA,0x04,0x39,0x16,0xEE,0xDE,0x89, /* b */ 417 0x11,0x70,0x2B,0x22, 418 0x09,0x48,0x72,0x39,0x99,0x5A,0x5E,0xE7,0x6B,0x55, /* x */ 419 0xF9,0xC2,0xF0,0x98, 420 0xa8,0x9c,0xe5,0xaf,0x87,0x24,0xc0,0xa2,0x3e,0x0e, /* y */ 421 0x0f,0xf7,0x75,0x00, 422 0xDB,0x7C,0x2A,0xBF,0x62,0xE3,0x5E,0x76,0x28,0xDF, /* order */ 423 0xAC,0x65,0x61,0xC5 } 424 }; 425 426 static const struct { EC_CURVE_DATA h; unsigned char data[20+14*6]; } 427 _EC_SECG_PRIME_112R2 = { 428 { NID_X9_62_prime_field,20,14,4 }, 429 { 0x00,0x27,0x57,0xA1,0x11,0x4D,0x69,0x6E,0x67,0x68, /* seed */ 430 0x75,0x61,0x51,0x75,0x53,0x16,0xC0,0x5E,0x0B,0xD4, 431 432 0xDB,0x7C,0x2A,0xBF,0x62,0xE3,0x5E,0x66,0x80,0x76, /* p */ 433 0xBE,0xAD,0x20,0x8B, 434 0x61,0x27,0xC2,0x4C,0x05,0xF3,0x8A,0x0A,0xAA,0xF6, /* a */ 435 0x5C,0x0E,0xF0,0x2C, 436 0x51,0xDE,0xF1,0x81,0x5D,0xB5,0xED,0x74,0xFC,0xC3, /* b */ 437 0x4C,0x85,0xD7,0x09, 438 0x4B,0xA3,0x0A,0xB5,0xE8,0x92,0xB4,0xE1,0x64,0x9D, /* x */ 439 0xD0,0x92,0x86,0x43, 440 0xad,0xcd,0x46,0xf5,0x88,0x2e,0x37,0x47,0xde,0xf3, /* y */ 441 0x6e,0x95,0x6e,0x97, 442 0x36,0xDF,0x0A,0xAF,0xD8,0xB8,0xD7,0x59,0x7C,0xA1, /* order */ 443 0x05,0x20,0xD0,0x4B } 444 }; 445 446 static const struct { EC_CURVE_DATA h; unsigned char data[20+16*6]; } 447 _EC_SECG_PRIME_128R1 = { 448 { NID_X9_62_prime_field,20,16,1 }, 449 { 0x00,0x0E,0x0D,0x4D,0x69,0x6E,0x67,0x68,0x75,0x61, /* seed */ 450 0x51,0x75,0x0C,0xC0,0x3A,0x44,0x73,0xD0,0x36,0x79, 451 452 0xFF,0xFF,0xFF,0xFD,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* p */ 453 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 454 0xFF,0xFF,0xFF,0xFD,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* a */ 455 0xFF,0xFF,0xFF,0xFF,0xFF,0xFC, 456 0xE8,0x75,0x79,0xC1,0x10,0x79,0xF4,0x3D,0xD8,0x24, /* b */ 457 0x99,0x3C,0x2C,0xEE,0x5E,0xD3, 458 0x16,0x1F,0xF7,0x52,0x8B,0x89,0x9B,0x2D,0x0C,0x28, /* x */ 459 0x60,0x7C,0xA5,0x2C,0x5B,0x86, 460 0xcf,0x5a,0xc8,0x39,0x5b,0xaf,0xeb,0x13,0xc0,0x2d, /* y */ 461 0xa2,0x92,0xdd,0xed,0x7a,0x83, 462 0xFF,0xFF,0xFF,0xFE,0x00,0x00,0x00,0x00,0x75,0xA3, /* order */ 463 0x0D,0x1B,0x90,0x38,0xA1,0x15 } 464 }; 465 466 static const struct { EC_CURVE_DATA h; unsigned char data[20+16*6]; } 467 _EC_SECG_PRIME_128R2 = { 468 { NID_X9_62_prime_field,20,16,4 }, 469 { 0x00,0x4D,0x69,0x6E,0x67,0x68,0x75,0x61,0x51,0x75, /* seed */ 470 0x12,0xD8,0xF0,0x34,0x31,0xFC,0xE6,0x3B,0x88,0xF4, 471 472 0xFF,0xFF,0xFF,0xFD,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* p */ 473 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 474 0xD6,0x03,0x19,0x98,0xD1,0xB3,0xBB,0xFE,0xBF,0x59, /* a */ 475 0xCC,0x9B,0xBF,0xF9,0xAE,0xE1, 476 0x5E,0xEE,0xFC,0xA3,0x80,0xD0,0x29,0x19,0xDC,0x2C, /* b */ 477 0x65,0x58,0xBB,0x6D,0x8A,0x5D, 478 0x7B,0x6A,0xA5,0xD8,0x5E,0x57,0x29,0x83,0xE6,0xFB, /* x */ 479 0x32,0xA7,0xCD,0xEB,0xC1,0x40, 480 0x27,0xb6,0x91,0x6a,0x89,0x4d,0x3a,0xee,0x71,0x06, /* y */ 481 0xfe,0x80,0x5f,0xc3,0x4b,0x44, 482 0x3F,0xFF,0xFF,0xFF,0x7F,0xFF,0xFF,0xFF,0xBE,0x00, /* order */ 483 0x24,0x72,0x06,0x13,0xB5,0xA3 } 484 }; 485 486 static const struct { EC_CURVE_DATA h; unsigned char data[0+21*6]; } 487 _EC_SECG_PRIME_160K1 = { 488 { NID_X9_62_prime_field,0,21,1 }, 489 { /* no seed */ 490 0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* p */ 491 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xAC, 492 0x73, 493 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 494 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 495 0x00, 496 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* b */ 497 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 498 0x07, 499 0x00,0x3B,0x4C,0x38,0x2C,0xE3,0x7A,0xA1,0x92,0xA4, /* x */ 500 0x01,0x9E,0x76,0x30,0x36,0xF4,0xF5,0xDD,0x4D,0x7E, 501 0xBB, 502 0x00,0x93,0x8c,0xf9,0x35,0x31,0x8f,0xdc,0xed,0x6b, /* y */ 503 0xc2,0x82,0x86,0x53,0x17,0x33,0xc3,0xf0,0x3c,0x4f, 504 0xee, 505 0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* order */ 506 0x01,0xB8,0xFA,0x16,0xDF,0xAB,0x9A,0xCA,0x16,0xB6, 507 0xB3 } 508 }; 509 510 static const struct { EC_CURVE_DATA h; unsigned char data[20+21*6]; } 511 _EC_SECG_PRIME_160R1 = { 512 { NID_X9_62_prime_field,20,21,1 }, 513 { 0x10,0x53,0xCD,0xE4,0x2C,0x14,0xD6,0x96,0xE6,0x76, /* seed */ 514 0x87,0x56,0x15,0x17,0x53,0x3B,0xF3,0xF8,0x33,0x45, 515 516 0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* p */ 517 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0x7F,0xFF,0xFF, 518 0xFF, 519 0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* a */ 520 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0x7F,0xFF,0xFF, 521 0xFC, 522 0x00,0x1C,0x97,0xBE,0xFC,0x54,0xBD,0x7A,0x8B,0x65, /* b */ 523 0xAC,0xF8,0x9F,0x81,0xD4,0xD4,0xAD,0xC5,0x65,0xFA, 524 0x45, 525 0x00,0x4A,0x96,0xB5,0x68,0x8E,0xF5,0x73,0x28,0x46, /* x */ 526 0x64,0x69,0x89,0x68,0xC3,0x8B,0xB9,0x13,0xCB,0xFC, 527 0x82, 528 0x00,0x23,0xa6,0x28,0x55,0x31,0x68,0x94,0x7d,0x59, /* y */ 529 0xdc,0xc9,0x12,0x04,0x23,0x51,0x37,0x7a,0xc5,0xfb, 530 0x32, 531 0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* order */ 532 0x01,0xF4,0xC8,0xF9,0x27,0xAE,0xD3,0xCA,0x75,0x22, 533 0x57 } 534 }; 535 536 static const struct { EC_CURVE_DATA h; unsigned char data[20+21*6]; } 537 _EC_SECG_PRIME_160R2 = { 538 { NID_X9_62_prime_field,20,21,1 }, 539 { 0xB9,0x9B,0x99,0xB0,0x99,0xB3,0x23,0xE0,0x27,0x09, /* seed */ 540 0xA4,0xD6,0x96,0xE6,0x76,0x87,0x56,0x15,0x17,0x51, 541 542 0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* p */ 543 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xAC, 544 0x73, 545 0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* a */ 546 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xAC, 547 0x70, 548 0x00,0xB4,0xE1,0x34,0xD3,0xFB,0x59,0xEB,0x8B,0xAB, /* b */ 549 0x57,0x27,0x49,0x04,0x66,0x4D,0x5A,0xF5,0x03,0x88, 550 0xBA, 551 0x00,0x52,0xDC,0xB0,0x34,0x29,0x3A,0x11,0x7E,0x1F, /* x */ 552 0x4F,0xF1,0x1B,0x30,0xF7,0x19,0x9D,0x31,0x44,0xCE, 553 0x6D, 554 0x00,0xfe,0xaf,0xfe,0xf2,0xe3,0x31,0xf2,0x96,0xe0, /* y */ 555 0x71,0xfa,0x0d,0xf9,0x98,0x2c,0xfe,0xa7,0xd4,0x3f, 556 0x2e, 557 0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* order */ 558 0x00,0x35,0x1E,0xE7,0x86,0xA8,0x18,0xF3,0xA1,0xA1, 559 0x6B } 560 }; 561 562 static const struct { EC_CURVE_DATA h; unsigned char data[0+24*6]; } 563 _EC_SECG_PRIME_192K1 = { 564 { NID_X9_62_prime_field,0,24,1 }, 565 { /* no seed */ 566 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* p */ 567 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFE, 568 0xFF,0xFF,0xEE,0x37, 569 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 570 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 571 0x00,0x00,0x00,0x00, 572 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* b */ 573 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 574 0x00,0x00,0x00,0x03, 575 0xDB,0x4F,0xF1,0x0E,0xC0,0x57,0xE9,0xAE,0x26,0xB0, /* x */ 576 0x7D,0x02,0x80,0xB7,0xF4,0x34,0x1D,0xA5,0xD1,0xB1, 577 0xEA,0xE0,0x6C,0x7D, 578 0x9b,0x2f,0x2f,0x6d,0x9c,0x56,0x28,0xa7,0x84,0x41, /* y */ 579 0x63,0xd0,0x15,0xbe,0x86,0x34,0x40,0x82,0xaa,0x88, 580 0xd9,0x5e,0x2f,0x9d, 581 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* order */ 582 0xFF,0xFE,0x26,0xF2,0xFC,0x17,0x0F,0x69,0x46,0x6A, 583 0x74,0xDE,0xFD,0x8D } 584 }; 585 586 static const struct { EC_CURVE_DATA h; unsigned char data[0+29*6]; } 587 _EC_SECG_PRIME_224K1 = { 588 { NID_X9_62_prime_field,0,29,1 }, 589 { /* no seed */ 590 0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* p */ 591 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 592 0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xE5,0x6D, 593 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 594 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 595 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 596 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* b */ 597 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 598 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x05, 599 0x00,0xA1,0x45,0x5B,0x33,0x4D,0xF0,0x99,0xDF,0x30, /* x */ 600 0xFC,0x28,0xA1,0x69,0xA4,0x67,0xE9,0xE4,0x70,0x75, 601 0xA9,0x0F,0x7E,0x65,0x0E,0xB6,0xB7,0xA4,0x5C, 602 0x00,0x7e,0x08,0x9f,0xed,0x7f,0xba,0x34,0x42,0x82, /* y */ 603 0xca,0xfb,0xd6,0xf7,0xe3,0x19,0xf7,0xc0,0xb0,0xbd, 604 0x59,0xe2,0xca,0x4b,0xdb,0x55,0x6d,0x61,0xa5, 605 0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* order */ 606 0x00,0x00,0x00,0x00,0x01,0xDC,0xE8,0xD2,0xEC,0x61, 607 0x84,0xCA,0xF0,0xA9,0x71,0x76,0x9F,0xB1,0xF7 } 608 }; 609 610 static const struct { EC_CURVE_DATA h; unsigned char data[0+32*6]; } 611 _EC_SECG_PRIME_256K1 = { 612 { NID_X9_62_prime_field,0,32,1 }, 613 { /* no seed */ 614 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* p */ 615 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 616 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF, 617 0xFC,0x2F, 618 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 619 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 620 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 621 0x00,0x00, 622 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* b */ 623 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 624 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 625 0x00,0x07, 626 0x79,0xBE,0x66,0x7E,0xF9,0xDC,0xBB,0xAC,0x55,0xA0, /* x */ 627 0x62,0x95,0xCE,0x87,0x0B,0x07,0x02,0x9B,0xFC,0xDB, 628 0x2D,0xCE,0x28,0xD9,0x59,0xF2,0x81,0x5B,0x16,0xF8, 629 0x17,0x98, 630 0x48,0x3a,0xda,0x77,0x26,0xa3,0xc4,0x65,0x5d,0xa4, /* y */ 631 0xfb,0xfc,0x0e,0x11,0x08,0xa8,0xfd,0x17,0xb4,0x48, 632 0xa6,0x85,0x54,0x19,0x9c,0x47,0xd0,0x8f,0xfb,0x10, 633 0xd4,0xb8, 634 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* order */ 635 0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xBA,0xAE,0xDC,0xE6, 636 0xAF,0x48,0xA0,0x3B,0xBF,0xD2,0x5E,0x8C,0xD0,0x36, 637 0x41,0x41 } 638 }; 639 640 /* some wap/wtls curves */ 641 static const struct { EC_CURVE_DATA h; unsigned char data[0+15*6]; } 642 _EC_WTLS_8 = { 643 { NID_X9_62_prime_field,0,15,1 }, 644 { /* no seed */ 645 0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* p */ 646 0xFF,0xFF,0xFF,0xFD,0xE7, 647 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 648 0x00,0x00,0x00,0x00,0x00, 649 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* b */ 650 0x00,0x00,0x00,0x00,0x03, 651 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* x */ 652 0x00,0x00,0x00,0x00,0x01, 653 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* y */ 654 0x00,0x00,0x00,0x00,0x02, 655 0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0xEC,0xEA, /* order */ 656 0x55,0x1A,0xD8,0x37,0xE9 } 657 }; 658 659 static const struct { EC_CURVE_DATA h; unsigned char data[0+21*6]; } 660 _EC_WTLS_9 = { 661 { NID_X9_62_prime_field,0,21,1 }, 662 { /* no seed */ 663 0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* p */ 664 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFC,0x80, 665 0x8F, 666 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 667 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 668 0x00, 669 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* b */ 670 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 671 0x03, 672 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* x */ 673 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 674 0x01, 675 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* y */ 676 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 677 0x02, 678 0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* order */ 679 0x01,0xCD,0xC9,0x8A,0xE0,0xE2,0xDE,0x57,0x4A,0xBF, 680 0x33 } 681 }; 682 683 static const struct { EC_CURVE_DATA h; unsigned char data[0+28*6]; } 684 _EC_WTLS_12 = { 685 { NID_X9_62_prime_field,0,28,1 }, 686 { /* no seed */ 687 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* p */ 688 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0x00,0x00,0x00,0x00, 689 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01, 690 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* a */ 691 0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0xFF,0xFF,0xFF,0xFF, 692 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFE, 693 0xB4,0x05,0x0A,0x85,0x0C,0x04,0xB3,0xAB,0xF5,0x41, /* b */ 694 0x32,0x56,0x50,0x44,0xB0,0xB7,0xD7,0xBF,0xD8,0xBA, 695 0x27,0x0B,0x39,0x43,0x23,0x55,0xFF,0xB4, 696 0xB7,0x0E,0x0C,0xBD,0x6B,0xB4,0xBF,0x7F,0x32,0x13, /* x */ 697 0x90,0xB9,0x4A,0x03,0xC1,0xD3,0x56,0xC2,0x11,0x22, 698 0x34,0x32,0x80,0xD6,0x11,0x5C,0x1D,0x21, 699 0xbd,0x37,0x63,0x88,0xb5,0xf7,0x23,0xfb,0x4c,0x22, /* y */ 700 0xdf,0xe6,0xcd,0x43,0x75,0xa0,0x5a,0x07,0x47,0x64, 701 0x44,0xd5,0x81,0x99,0x85,0x00,0x7e,0x34, 702 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* order */ 703 0xFF,0xFF,0xFF,0xFF,0x16,0xA2,0xE0,0xB8,0xF0,0x3E, 704 0x13,0xDD,0x29,0x45,0x5C,0x5C,0x2A,0x3D } 705 }; 706 707 #ifndef OPENSSL_NO_EC2M 708 709 /* characteristic two curves */ 710 static const struct { EC_CURVE_DATA h; unsigned char data[20+15*6]; } 711 _EC_SECG_CHAR2_113R1 = { 712 { NID_X9_62_characteristic_two_field,20,15,2 }, 713 { 0x10,0xE7,0x23,0xAB,0x14,0xD6,0x96,0xE6,0x76,0x87, /* seed */ 714 0x56,0x15,0x17,0x56,0xFE,0xBF,0x8F,0xCB,0x49,0xA9, 715 716 0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 717 0x00,0x00,0x00,0x02,0x01, 718 0x00,0x30,0x88,0x25,0x0C,0xA6,0xE7,0xC7,0xFE,0x64, /* a */ 719 0x9C,0xE8,0x58,0x20,0xF7, 720 0x00,0xE8,0xBE,0xE4,0xD3,0xE2,0x26,0x07,0x44,0x18, /* b */ 721 0x8B,0xE0,0xE9,0xC7,0x23, 722 0x00,0x9D,0x73,0x61,0x6F,0x35,0xF4,0xAB,0x14,0x07, /* x */ 723 0xD7,0x35,0x62,0xC1,0x0F, 724 0x00,0xA5,0x28,0x30,0x27,0x79,0x58,0xEE,0x84,0xD1, /* y */ 725 0x31,0x5E,0xD3,0x18,0x86, 726 0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0xD9,0xCC, /* order */ 727 0xEC,0x8A,0x39,0xE5,0x6F } 728 }; 729 730 static const struct { EC_CURVE_DATA h; unsigned char data[20+15*6]; } 731 _EC_SECG_CHAR2_113R2 = { 732 { NID_X9_62_characteristic_two_field,20,15,2 }, 733 { 0x10,0xC0,0xFB,0x15,0x76,0x08,0x60,0xDE,0xF1,0xEE, /* seed */ 734 0xF4,0xD6,0x96,0xE6,0x76,0x87,0x56,0x15,0x17,0x5D, 735 736 0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 737 0x00,0x00,0x00,0x02,0x01, 738 0x00,0x68,0x99,0x18,0xDB,0xEC,0x7E,0x5A,0x0D,0xD6, /* a */ 739 0xDF,0xC0,0xAA,0x55,0xC7, 740 0x00,0x95,0xE9,0xA9,0xEC,0x9B,0x29,0x7B,0xD4,0xBF, /* b */ 741 0x36,0xE0,0x59,0x18,0x4F, 742 0x01,0xA5,0x7A,0x6A,0x7B,0x26,0xCA,0x5E,0xF5,0x2F, /* x */ 743 0xCD,0xB8,0x16,0x47,0x97, 744 0x00,0xB3,0xAD,0xC9,0x4E,0xD1,0xFE,0x67,0x4C,0x06, /* y */ 745 0xE6,0x95,0xBA,0xBA,0x1D, 746 0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0x08,0x78, /* order */ 747 0x9B,0x24,0x96,0xAF,0x93 } 748 }; 749 750 static const struct { EC_CURVE_DATA h; unsigned char data[20+17*6]; } 751 _EC_SECG_CHAR2_131R1 = { 752 { NID_X9_62_characteristic_two_field,20,17,2 }, 753 { 0x4D,0x69,0x6E,0x67,0x68,0x75,0x61,0x51,0x75,0x98, /* seed */ 754 0x5B,0xD3,0xAD,0xBA,0xDA,0x21,0xB4,0x3A,0x97,0xE2, 755 756 0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 757 0x00,0x00,0x00,0x00,0x00,0x01,0x0D, 758 0x07,0xA1,0x1B,0x09,0xA7,0x6B,0x56,0x21,0x44,0x41, /* a */ 759 0x8F,0xF3,0xFF,0x8C,0x25,0x70,0xB8, 760 0x02,0x17,0xC0,0x56,0x10,0x88,0x4B,0x63,0xB9,0xC6, /* b */ 761 0xC7,0x29,0x16,0x78,0xF9,0xD3,0x41, 762 0x00,0x81,0xBA,0xF9,0x1F,0xDF,0x98,0x33,0xC4,0x0F, /* x */ 763 0x9C,0x18,0x13,0x43,0x63,0x83,0x99, 764 0x07,0x8C,0x6E,0x7E,0xA3,0x8C,0x00,0x1F,0x73,0xC8, /* y */ 765 0x13,0x4B,0x1B,0x4E,0xF9,0xE1,0x50, 766 0x04,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x02,0x31, /* order */ 767 0x23,0x95,0x3A,0x94,0x64,0xB5,0x4D } 768 }; 769 770 static const struct { EC_CURVE_DATA h; unsigned char data[20+17*6]; } 771 _EC_SECG_CHAR2_131R2 = { 772 { NID_X9_62_characteristic_two_field,20,17,2 }, 773 { 0x98,0x5B,0xD3,0xAD,0xBA,0xD4,0xD6,0x96,0xE6,0x76, /* seed */ 774 0x87,0x56,0x15,0x17,0x5A,0x21,0xB4,0x3A,0x97,0xE3, 775 776 0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 777 0x00,0x00,0x00,0x00,0x00,0x01,0x0D, 778 0x03,0xE5,0xA8,0x89,0x19,0xD7,0xCA,0xFC,0xBF,0x41, /* a */ 779 0x5F,0x07,0xC2,0x17,0x65,0x73,0xB2, 780 0x04,0xB8,0x26,0x6A,0x46,0xC5,0x56,0x57,0xAC,0x73, /* b */ 781 0x4C,0xE3,0x8F,0x01,0x8F,0x21,0x92, 782 0x03,0x56,0xDC,0xD8,0xF2,0xF9,0x50,0x31,0xAD,0x65, /* x */ 783 0x2D,0x23,0x95,0x1B,0xB3,0x66,0xA8, 784 0x06,0x48,0xF0,0x6D,0x86,0x79,0x40,0xA5,0x36,0x6D, /* y */ 785 0x9E,0x26,0x5D,0xE9,0xEB,0x24,0x0F, 786 0x04,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0x69, /* order */ 787 0x54,0xA2,0x33,0x04,0x9B,0xA9,0x8F } 788 }; 789 790 static const struct { EC_CURVE_DATA h; unsigned char data[0+21*6]; } 791 _EC_NIST_CHAR2_163K = { 792 { NID_X9_62_characteristic_two_field,0,21,2 }, 793 { /* no seed */ 794 0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 795 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 796 0xC9, 797 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 798 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 799 0x01, 800 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* b */ 801 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 802 0x01, 803 0x02,0xFE,0x13,0xC0,0x53,0x7B,0xBC,0x11,0xAC,0xAA, /* x */ 804 0x07,0xD7,0x93,0xDE,0x4E,0x6D,0x5E,0x5C,0x94,0xEE, 805 0xE8, 806 0x02,0x89,0x07,0x0F,0xB0,0x5D,0x38,0xFF,0x58,0x32, /* y */ 807 0x1F,0x2E,0x80,0x05,0x36,0xD5,0x38,0xCC,0xDA,0xA3, 808 0xD9, 809 0x04,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* order */ 810 0x02,0x01,0x08,0xA2,0xE0,0xCC,0x0D,0x99,0xF8,0xA5, 811 0xEF } 812 }; 813 814 static const struct { EC_CURVE_DATA h; unsigned char data[0+21*6]; } 815 _EC_SECG_CHAR2_163R1 = { 816 { NID_X9_62_characteristic_two_field,0,21,2 }, 817 { /* no seed */ 818 #if 0 819 /* The algorithm used to derive the curve parameters from 820 * the seed used here is slightly different than the 821 * algorithm described in X9.62 . */ 822 0x24,0xB7,0xB1,0x37,0xC8,0xA1,0x4D,0x69,0x6E,0x67, 823 0x68,0x75,0x61,0x51,0x75,0x6F,0xD0,0xDA,0x2E,0x5C, 824 #endif 825 0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 826 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 827 0xC9, 828 0x07,0xB6,0x88,0x2C,0xAA,0xEF,0xA8,0x4F,0x95,0x54, /* a */ 829 0xFF,0x84,0x28,0xBD,0x88,0xE2,0x46,0xD2,0x78,0x2A, 830 0xE2, 831 0x07,0x13,0x61,0x2D,0xCD,0xDC,0xB4,0x0A,0xAB,0x94, /* b */ 832 0x6B,0xDA,0x29,0xCA,0x91,0xF7,0x3A,0xF9,0x58,0xAF, 833 0xD9, 834 0x03,0x69,0x97,0x96,0x97,0xAB,0x43,0x89,0x77,0x89, /* x */ 835 0x56,0x67,0x89,0x56,0x7F,0x78,0x7A,0x78,0x76,0xA6, 836 0x54, 837 0x00,0x43,0x5E,0xDB,0x42,0xEF,0xAF,0xB2,0x98,0x9D, /* y */ 838 0x51,0xFE,0xFC,0xE3,0xC8,0x09,0x88,0xF4,0x1F,0xF8, 839 0x83, 840 0x03,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* order */ 841 0xFF,0x48,0xAA,0xB6,0x89,0xC2,0x9C,0xA7,0x10,0x27, 842 0x9B } 843 }; 844 845 static const struct { EC_CURVE_DATA h; unsigned char data[0+21*6]; } 846 _EC_NIST_CHAR2_163B = { 847 { NID_X9_62_characteristic_two_field,0,21,2 }, 848 { /* no seed */ 849 #if 0 850 /* The seed here was used to created the curve parameters in normal 851 * basis representation (and not the polynomial representation used here) */ 852 0x85,0xE2,0x5B,0xFE,0x5C,0x86,0x22,0x6C,0xDB,0x12, 853 0x01,0x6F,0x75,0x53,0xF9,0xD0,0xE6,0x93,0xA2,0x68, 854 #endif 855 0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 856 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 857 0xC9, 858 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 859 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 860 0x01, 861 0x02,0x0A,0x60,0x19,0x07,0xB8,0xC9,0x53,0xCA,0x14, /* b */ 862 0x81,0xEB,0x10,0x51,0x2F,0x78,0x74,0x4A,0x32,0x05, 863 0xFD, 864 0x03,0xF0,0xEB,0xA1,0x62,0x86,0xA2,0xD5,0x7E,0xA0, /* x */ 865 0x99,0x11,0x68,0xD4,0x99,0x46,0x37,0xE8,0x34,0x3E, 866 0x36, 867 0x00,0xD5,0x1F,0xBC,0x6C,0x71,0xA0,0x09,0x4F,0xA2, /* y */ 868 0xCD,0xD5,0x45,0xB1,0x1C,0x5C,0x0C,0x79,0x73,0x24, 869 0xF1, 870 0x04,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* order */ 871 0x02,0x92,0xFE,0x77,0xE7,0x0C,0x12,0xA4,0x23,0x4C, 872 0x33 } 873 }; 874 875 static const struct { EC_CURVE_DATA h; unsigned char data[20+25*6]; } 876 _EC_SECG_CHAR2_193R1 = { 877 { NID_X9_62_characteristic_two_field,20,25,2 }, 878 { 0x10,0x3F,0xAE,0xC7,0x4D,0x69,0x6E,0x67,0x68,0x75, /* seed */ 879 0x61,0x51,0x75,0x77,0x7F,0xC5,0xB1,0x91,0xEF,0x30, 880 881 0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 882 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 883 0x00,0x00,0x00,0x80,0x01, 884 0x00,0x17,0x85,0x8F,0xEB,0x7A,0x98,0x97,0x51,0x69, /* a */ 885 0xE1,0x71,0xF7,0x7B,0x40,0x87,0xDE,0x09,0x8A,0xC8, 886 0xA9,0x11,0xDF,0x7B,0x01, 887 0x00,0xFD,0xFB,0x49,0xBF,0xE6,0xC3,0xA8,0x9F,0xAC, /* b */ 888 0xAD,0xAA,0x7A,0x1E,0x5B,0xBC,0x7C,0xC1,0xC2,0xE5, 889 0xD8,0x31,0x47,0x88,0x14, 890 0x01,0xF4,0x81,0xBC,0x5F,0x0F,0xF8,0x4A,0x74,0xAD, /* x */ 891 0x6C,0xDF,0x6F,0xDE,0xF4,0xBF,0x61,0x79,0x62,0x53, 892 0x72,0xD8,0xC0,0xC5,0xE1, 893 0x00,0x25,0xE3,0x99,0xF2,0x90,0x37,0x12,0xCC,0xF3, /* y */ 894 0xEA,0x9E,0x3A,0x1A,0xD1,0x7F,0xB0,0xB3,0x20,0x1B, 895 0x6A,0xF7,0xCE,0x1B,0x05, 896 0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* order */ 897 0x00,0x00,0x00,0xC7,0xF3,0x4A,0x77,0x8F,0x44,0x3A, 898 0xCC,0x92,0x0E,0xBA,0x49 } 899 }; 900 901 static const struct { EC_CURVE_DATA h; unsigned char data[20+25*6]; } 902 _EC_SECG_CHAR2_193R2 = { 903 { NID_X9_62_characteristic_two_field,20,25,2 }, 904 { 0x10,0xB7,0xB4,0xD6,0x96,0xE6,0x76,0x87,0x56,0x15, /* seed */ 905 0x17,0x51,0x37,0xC8,0xA1,0x6F,0xD0,0xDA,0x22,0x11, 906 907 0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 908 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 909 0x00,0x00,0x00,0x80,0x01, 910 0x01,0x63,0xF3,0x5A,0x51,0x37,0xC2,0xCE,0x3E,0xA6, /* a */ 911 0xED,0x86,0x67,0x19,0x0B,0x0B,0xC4,0x3E,0xCD,0x69, 912 0x97,0x77,0x02,0x70,0x9B, 913 0x00,0xC9,0xBB,0x9E,0x89,0x27,0xD4,0xD6,0x4C,0x37, /* b */ 914 0x7E,0x2A,0xB2,0x85,0x6A,0x5B,0x16,0xE3,0xEF,0xB7, 915 0xF6,0x1D,0x43,0x16,0xAE, 916 0x00,0xD9,0xB6,0x7D,0x19,0x2E,0x03,0x67,0xC8,0x03, /* x */ 917 0xF3,0x9E,0x1A,0x7E,0x82,0xCA,0x14,0xA6,0x51,0x35, 918 0x0A,0xAE,0x61,0x7E,0x8F, 919 0x01,0xCE,0x94,0x33,0x56,0x07,0xC3,0x04,0xAC,0x29, /* y */ 920 0xE7,0xDE,0xFB,0xD9,0xCA,0x01,0xF5,0x96,0xF9,0x27, 921 0x22,0x4C,0xDE,0xCF,0x6C, 922 0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* order */ 923 0x00,0x00,0x01,0x5A,0xAB,0x56,0x1B,0x00,0x54,0x13, 924 0xCC,0xD4,0xEE,0x99,0xD5 } 925 }; 926 927 static const struct { EC_CURVE_DATA h; unsigned char data[0+30*6]; } 928 _EC_NIST_CHAR2_233K = { 929 { NID_X9_62_characteristic_two_field,0,30,4 }, 930 { /* no seed */ 931 0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 932 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 933 0x04,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01, 934 935 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 936 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 937 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 938 939 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* b */ 940 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 941 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01, 942 943 0x01,0x72,0x32,0xBA,0x85,0x3A,0x7E,0x73,0x1A,0xF1, /* x */ 944 0x29,0xF2,0x2F,0xF4,0x14,0x95,0x63,0xA4,0x19,0xC2, 945 0x6B,0xF5,0x0A,0x4C,0x9D,0x6E,0xEF,0xAD,0x61,0x26, 946 947 0x01,0xDB,0x53,0x7D,0xEC,0xE8,0x19,0xB7,0xF7,0x0F, /* y */ 948 0x55,0x5A,0x67,0xC4,0x27,0xA8,0xCD,0x9B,0xF1,0x8A, 949 0xEB,0x9B,0x56,0xE0,0xC1,0x10,0x56,0xFA,0xE6,0xA3, 950 951 0x00,0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* order */ 952 0x00,0x00,0x00,0x00,0x00,0x06,0x9D,0x5B,0xB9,0x15, 953 0xBC,0xD4,0x6E,0xFB,0x1A,0xD5,0xF1,0x73,0xAB,0xDF } 954 }; 955 956 static const struct { EC_CURVE_DATA h; unsigned char data[20+30*6]; } 957 _EC_NIST_CHAR2_233B = { 958 { NID_X9_62_characteristic_two_field,20,30,2 }, 959 { 0x74,0xD5,0x9F,0xF0,0x7F,0x6B,0x41,0x3D,0x0E,0xA1, /* seed */ 960 0x4B,0x34,0x4B,0x20,0xA2,0xDB,0x04,0x9B,0x50,0xC3, 961 962 0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 963 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 964 0x04,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01, 965 966 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 967 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 968 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01, 969 970 0x00,0x66,0x64,0x7E,0xDE,0x6C,0x33,0x2C,0x7F,0x8C, /* b */ 971 0x09,0x23,0xBB,0x58,0x21,0x3B,0x33,0x3B,0x20,0xE9, 972 0xCE,0x42,0x81,0xFE,0x11,0x5F,0x7D,0x8F,0x90,0xAD, 973 974 0x00,0xFA,0xC9,0xDF,0xCB,0xAC,0x83,0x13,0xBB,0x21, /* x */ 975 0x39,0xF1,0xBB,0x75,0x5F,0xEF,0x65,0xBC,0x39,0x1F, 976 0x8B,0x36,0xF8,0xF8,0xEB,0x73,0x71,0xFD,0x55,0x8B, 977 978 0x01,0x00,0x6A,0x08,0xA4,0x19,0x03,0x35,0x06,0x78, /* y */ 979 0xE5,0x85,0x28,0xBE,0xBF,0x8A,0x0B,0xEF,0xF8,0x67, 980 0xA7,0xCA,0x36,0x71,0x6F,0x7E,0x01,0xF8,0x10,0x52, 981 982 0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* order */ 983 0x00,0x00,0x00,0x00,0x00,0x13,0xE9,0x74,0xE7,0x2F, 984 0x8A,0x69,0x22,0x03,0x1D,0x26,0x03,0xCF,0xE0,0xD7 } 985 }; 986 987 static const struct { EC_CURVE_DATA h; unsigned char data[0+30*6]; } 988 _EC_SECG_CHAR2_239K1 = { 989 { NID_X9_62_characteristic_two_field,0,30,4 }, 990 { /* no seed */ 991 0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 992 0x40,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 993 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01, 994 995 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 996 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 997 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 998 999 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* b */ 1000 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1001 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01, 1002 1003 0x29,0xA0,0xB6,0xA8,0x87,0xA9,0x83,0xE9,0x73,0x09, /* x */ 1004 0x88,0xA6,0x87,0x27,0xA8,0xB2,0xD1,0x26,0xC4,0x4C, 1005 0xC2,0xCC,0x7B,0x2A,0x65,0x55,0x19,0x30,0x35,0xDC, 1006 1007 0x76,0x31,0x08,0x04,0xF1,0x2E,0x54,0x9B,0xDB,0x01, /* y */ 1008 0x1C,0x10,0x30,0x89,0xE7,0x35,0x10,0xAC,0xB2,0x75, 1009 0xFC,0x31,0x2A,0x5D,0xC6,0xB7,0x65,0x53,0xF0,0xCA, 1010 1011 0x20,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* order */ 1012 0x00,0x00,0x00,0x00,0x00,0x5A,0x79,0xFE,0xC6,0x7C, 1013 0xB6,0xE9,0x1F,0x1C,0x1D,0xA8,0x00,0xE4,0x78,0xA5 } 1014 }; 1015 1016 static const struct { EC_CURVE_DATA h; unsigned char data[0+36*6]; } 1017 _EC_NIST_CHAR2_283K = { 1018 { NID_X9_62_characteristic_two_field,0,36,4 }, 1019 { /* no seed */ 1020 0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1021 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1022 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1023 0x00,0x00,0x00,0x00,0x10,0xA1, 1024 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 1025 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1026 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1027 0x00,0x00,0x00,0x00,0x00,0x00, 1028 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* b */ 1029 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1030 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1031 0x00,0x00,0x00,0x00,0x00,0x01, 1032 0x05,0x03,0x21,0x3F,0x78,0xCA,0x44,0x88,0x3F,0x1A, /* x */ 1033 0x3B,0x81,0x62,0xF1,0x88,0xE5,0x53,0xCD,0x26,0x5F, 1034 0x23,0xC1,0x56,0x7A,0x16,0x87,0x69,0x13,0xB0,0xC2, 1035 0xAC,0x24,0x58,0x49,0x28,0x36, 1036 0x01,0xCC,0xDA,0x38,0x0F,0x1C,0x9E,0x31,0x8D,0x90, /* y */ 1037 0xF9,0x5D,0x07,0xE5,0x42,0x6F,0xE8,0x7E,0x45,0xC0, 1038 0xE8,0x18,0x46,0x98,0xE4,0x59,0x62,0x36,0x4E,0x34, 1039 0x11,0x61,0x77,0xDD,0x22,0x59, 1040 0x01,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* order */ 1041 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xE9,0xAE, 1042 0x2E,0xD0,0x75,0x77,0x26,0x5D,0xFF,0x7F,0x94,0x45, 1043 0x1E,0x06,0x1E,0x16,0x3C,0x61 } 1044 }; 1045 1046 static const struct { EC_CURVE_DATA h; unsigned char data[20+36*6]; } 1047 _EC_NIST_CHAR2_283B = { 1048 { NID_X9_62_characteristic_two_field,20,36,2 }, 1049 { 0x77,0xE2,0xB0,0x73,0x70,0xEB,0x0F,0x83,0x2A,0x6D, /* no seed */ 1050 0xD5,0xB6,0x2D,0xFC,0x88,0xCD,0x06,0xBB,0x84,0xBE, 1051 1052 0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1053 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1054 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1055 0x00,0x00,0x00,0x00,0x10,0xA1, 1056 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 1057 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1058 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1059 0x00,0x00,0x00,0x00,0x00,0x01, 1060 0x02,0x7B,0x68,0x0A,0xC8,0xB8,0x59,0x6D,0xA5,0xA4, /* b */ 1061 0xAF,0x8A,0x19,0xA0,0x30,0x3F,0xCA,0x97,0xFD,0x76, 1062 0x45,0x30,0x9F,0xA2,0xA5,0x81,0x48,0x5A,0xF6,0x26, 1063 0x3E,0x31,0x3B,0x79,0xA2,0xF5, 1064 0x05,0xF9,0x39,0x25,0x8D,0xB7,0xDD,0x90,0xE1,0x93, /* x */ 1065 0x4F,0x8C,0x70,0xB0,0xDF,0xEC,0x2E,0xED,0x25,0xB8, 1066 0x55,0x7E,0xAC,0x9C,0x80,0xE2,0xE1,0x98,0xF8,0xCD, 1067 0xBE,0xCD,0x86,0xB1,0x20,0x53, 1068 0x03,0x67,0x68,0x54,0xFE,0x24,0x14,0x1C,0xB9,0x8F, /* y */ 1069 0xE6,0xD4,0xB2,0x0D,0x02,0xB4,0x51,0x6F,0xF7,0x02, 1070 0x35,0x0E,0xDD,0xB0,0x82,0x67,0x79,0xC8,0x13,0xF0, 1071 0xDF,0x45,0xBE,0x81,0x12,0xF4, 1072 0x03,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* order */ 1073 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xEF,0x90, 1074 0x39,0x96,0x60,0xFC,0x93,0x8A,0x90,0x16,0x5B,0x04, 1075 0x2A,0x7C,0xEF,0xAD,0xB3,0x07 } 1076 }; 1077 1078 static const struct { EC_CURVE_DATA h; unsigned char data[0+52*6]; } 1079 _EC_NIST_CHAR2_409K = { 1080 { NID_X9_62_characteristic_two_field,0,52,4 }, 1081 { /* no seed */ 1082 0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1083 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1084 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1085 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1086 0x00,0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1087 0x00,0x01, 1088 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 1089 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1090 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1091 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1092 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1093 0x00,0x00, 1094 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* b */ 1095 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1096 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1097 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1098 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1099 0x00,0x01, 1100 0x00,0x60,0xF0,0x5F,0x65,0x8F,0x49,0xC1,0xAD,0x3A, /* x */ 1101 0xB1,0x89,0x0F,0x71,0x84,0x21,0x0E,0xFD,0x09,0x87, 1102 0xE3,0x07,0xC8,0x4C,0x27,0xAC,0xCF,0xB8,0xF9,0xF6, 1103 0x7C,0xC2,0xC4,0x60,0x18,0x9E,0xB5,0xAA,0xAA,0x62, 1104 0xEE,0x22,0x2E,0xB1,0xB3,0x55,0x40,0xCF,0xE9,0x02, 1105 0x37,0x46, 1106 0x01,0xE3,0x69,0x05,0x0B,0x7C,0x4E,0x42,0xAC,0xBA, /* y */ 1107 0x1D,0xAC,0xBF,0x04,0x29,0x9C,0x34,0x60,0x78,0x2F, 1108 0x91,0x8E,0xA4,0x27,0xE6,0x32,0x51,0x65,0xE9,0xEA, 1109 0x10,0xE3,0xDA,0x5F,0x6C,0x42,0xE9,0xC5,0x52,0x15, 1110 0xAA,0x9C,0xA2,0x7A,0x58,0x63,0xEC,0x48,0xD8,0xE0, 1111 0x28,0x6B, 1112 0x00,0x7F,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* order */ 1113 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 1114 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFE,0x5F,0x83,0xB2, 1115 0xD4,0xEA,0x20,0x40,0x0E,0xC4,0x55,0x7D,0x5E,0xD3, 1116 0xE3,0xE7,0xCA,0x5B,0x4B,0x5C,0x83,0xB8,0xE0,0x1E, 1117 0x5F,0xCF } 1118 }; 1119 1120 static const struct { EC_CURVE_DATA h; unsigned char data[20+52*6]; } 1121 _EC_NIST_CHAR2_409B = { 1122 { NID_X9_62_characteristic_two_field,20,52,2 }, 1123 { 0x40,0x99,0xB5,0xA4,0x57,0xF9,0xD6,0x9F,0x79,0x21, /* seed */ 1124 0x3D,0x09,0x4C,0x4B,0xCD,0x4D,0x42,0x62,0x21,0x0B, 1125 1126 0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1127 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1128 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1129 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1130 0x00,0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1131 0x00,0x01, 1132 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 1133 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1134 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1135 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1136 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1137 0x00,0x01, 1138 0x00,0x21,0xA5,0xC2,0xC8,0xEE,0x9F,0xEB,0x5C,0x4B, /* b */ 1139 0x9A,0x75,0x3B,0x7B,0x47,0x6B,0x7F,0xD6,0x42,0x2E, 1140 0xF1,0xF3,0xDD,0x67,0x47,0x61,0xFA,0x99,0xD6,0xAC, 1141 0x27,0xC8,0xA9,0xA1,0x97,0xB2,0x72,0x82,0x2F,0x6C, 1142 0xD5,0x7A,0x55,0xAA,0x4F,0x50,0xAE,0x31,0x7B,0x13, 1143 0x54,0x5F, 1144 0x01,0x5D,0x48,0x60,0xD0,0x88,0xDD,0xB3,0x49,0x6B, /* x */ 1145 0x0C,0x60,0x64,0x75,0x62,0x60,0x44,0x1C,0xDE,0x4A, 1146 0xF1,0x77,0x1D,0x4D,0xB0,0x1F,0xFE,0x5B,0x34,0xE5, 1147 0x97,0x03,0xDC,0x25,0x5A,0x86,0x8A,0x11,0x80,0x51, 1148 0x56,0x03,0xAE,0xAB,0x60,0x79,0x4E,0x54,0xBB,0x79, 1149 0x96,0xA7, 1150 0x00,0x61,0xB1,0xCF,0xAB,0x6B,0xE5,0xF3,0x2B,0xBF, /* y */ 1151 0xA7,0x83,0x24,0xED,0x10,0x6A,0x76,0x36,0xB9,0xC5, 1152 0xA7,0xBD,0x19,0x8D,0x01,0x58,0xAA,0x4F,0x54,0x88, 1153 0xD0,0x8F,0x38,0x51,0x4F,0x1F,0xDF,0x4B,0x4F,0x40, 1154 0xD2,0x18,0x1B,0x36,0x81,0xC3,0x64,0xBA,0x02,0x73, 1155 0xC7,0x06, 1156 0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* order */ 1157 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1158 0x00,0x00,0x00,0x00,0x00,0x00,0x01,0xE2,0xAA,0xD6, 1159 0xA6,0x12,0xF3,0x33,0x07,0xBE,0x5F,0xA4,0x7C,0x3C, 1160 0x9E,0x05,0x2F,0x83,0x81,0x64,0xCD,0x37,0xD9,0xA2, 1161 0x11,0x73 } 1162 }; 1163 1164 static const struct { EC_CURVE_DATA h; unsigned char data[0+72*6]; } 1165 _EC_NIST_CHAR2_571K = { 1166 { NID_X9_62_characteristic_two_field,0,72,4 }, 1167 { /* no seed */ 1168 0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1169 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1170 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1171 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1172 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1173 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1174 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1175 0x04,0x25, 1176 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 1177 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1178 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1179 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1180 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1181 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1182 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1183 0x00,0x00, 1184 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* b */ 1185 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1186 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1187 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1188 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1189 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1190 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1191 0x00,0x01, 1192 0x02,0x6E,0xB7,0xA8,0x59,0x92,0x3F,0xBC,0x82,0x18, /* x */ 1193 0x96,0x31,0xF8,0x10,0x3F,0xE4,0xAC,0x9C,0xA2,0x97, 1194 0x00,0x12,0xD5,0xD4,0x60,0x24,0x80,0x48,0x01,0x84, 1195 0x1C,0xA4,0x43,0x70,0x95,0x84,0x93,0xB2,0x05,0xE6, 1196 0x47,0xDA,0x30,0x4D,0xB4,0xCE,0xB0,0x8C,0xBB,0xD1, 1197 0xBA,0x39,0x49,0x47,0x76,0xFB,0x98,0x8B,0x47,0x17, 1198 0x4D,0xCA,0x88,0xC7,0xE2,0x94,0x52,0x83,0xA0,0x1C, 1199 0x89,0x72, 1200 0x03,0x49,0xDC,0x80,0x7F,0x4F,0xBF,0x37,0x4F,0x4A, /* y */ 1201 0xEA,0xDE,0x3B,0xCA,0x95,0x31,0x4D,0xD5,0x8C,0xEC, 1202 0x9F,0x30,0x7A,0x54,0xFF,0xC6,0x1E,0xFC,0x00,0x6D, 1203 0x8A,0x2C,0x9D,0x49,0x79,0xC0,0xAC,0x44,0xAE,0xA7, 1204 0x4F,0xBE,0xBB,0xB9,0xF7,0x72,0xAE,0xDC,0xB6,0x20, 1205 0xB0,0x1A,0x7B,0xA7,0xAF,0x1B,0x32,0x04,0x30,0xC8, 1206 0x59,0x19,0x84,0xF6,0x01,0xCD,0x4C,0x14,0x3E,0xF1, 1207 0xC7,0xA3, 1208 0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* order */ 1209 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1210 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1211 0x00,0x00,0x00,0x00,0x00,0x00,0x13,0x18,0x50,0xE1, 1212 0xF1,0x9A,0x63,0xE4,0xB3,0x91,0xA8,0xDB,0x91,0x7F, 1213 0x41,0x38,0xB6,0x30,0xD8,0x4B,0xE5,0xD6,0x39,0x38, 1214 0x1E,0x91,0xDE,0xB4,0x5C,0xFE,0x77,0x8F,0x63,0x7C, 1215 0x10,0x01 } 1216 }; 1217 1218 static const struct { EC_CURVE_DATA h; unsigned char data[20+72*6]; } 1219 _EC_NIST_CHAR2_571B = { 1220 { NID_X9_62_characteristic_two_field,20,72,2 }, 1221 { 0x2A,0xA0,0x58,0xF7,0x3A,0x0E,0x33,0xAB,0x48,0x6B, /* seed */ 1222 0x0F,0x61,0x04,0x10,0xC5,0x3A,0x7F,0x13,0x23,0x10, 1223 1224 0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1225 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1226 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1227 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1228 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1229 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1230 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1231 0x04,0x25, 1232 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 1233 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1234 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1235 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1236 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1237 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1238 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1239 0x00,0x01, 1240 0x02,0xF4,0x0E,0x7E,0x22,0x21,0xF2,0x95,0xDE,0x29, /* b */ 1241 0x71,0x17,0xB7,0xF3,0xD6,0x2F,0x5C,0x6A,0x97,0xFF, 1242 0xCB,0x8C,0xEF,0xF1,0xCD,0x6B,0xA8,0xCE,0x4A,0x9A, 1243 0x18,0xAD,0x84,0xFF,0xAB,0xBD,0x8E,0xFA,0x59,0x33, 1244 0x2B,0xE7,0xAD,0x67,0x56,0xA6,0x6E,0x29,0x4A,0xFD, 1245 0x18,0x5A,0x78,0xFF,0x12,0xAA,0x52,0x0E,0x4D,0xE7, 1246 0x39,0xBA,0xCA,0x0C,0x7F,0xFE,0xFF,0x7F,0x29,0x55, 1247 0x72,0x7A, 1248 0x03,0x03,0x00,0x1D,0x34,0xB8,0x56,0x29,0x6C,0x16, /* x */ 1249 0xC0,0xD4,0x0D,0x3C,0xD7,0x75,0x0A,0x93,0xD1,0xD2, 1250 0x95,0x5F,0xA8,0x0A,0xA5,0xF4,0x0F,0xC8,0xDB,0x7B, 1251 0x2A,0xBD,0xBD,0xE5,0x39,0x50,0xF4,0xC0,0xD2,0x93, 1252 0xCD,0xD7,0x11,0xA3,0x5B,0x67,0xFB,0x14,0x99,0xAE, 1253 0x60,0x03,0x86,0x14,0xF1,0x39,0x4A,0xBF,0xA3,0xB4, 1254 0xC8,0x50,0xD9,0x27,0xE1,0xE7,0x76,0x9C,0x8E,0xEC, 1255 0x2D,0x19, 1256 0x03,0x7B,0xF2,0x73,0x42,0xDA,0x63,0x9B,0x6D,0xCC, /* y */ 1257 0xFF,0xFE,0xB7,0x3D,0x69,0xD7,0x8C,0x6C,0x27,0xA6, 1258 0x00,0x9C,0xBB,0xCA,0x19,0x80,0xF8,0x53,0x39,0x21, 1259 0xE8,0xA6,0x84,0x42,0x3E,0x43,0xBA,0xB0,0x8A,0x57, 1260 0x62,0x91,0xAF,0x8F,0x46,0x1B,0xB2,0xA8,0xB3,0x53, 1261 0x1D,0x2F,0x04,0x85,0xC1,0x9B,0x16,0xE2,0xF1,0x51, 1262 0x6E,0x23,0xDD,0x3C,0x1A,0x48,0x27,0xAF,0x1B,0x8A, 1263 0xC1,0x5B, 1264 0x03,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* order */ 1265 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 1266 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, 1267 0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xE6,0x61,0xCE,0x18, 1268 0xFF,0x55,0x98,0x73,0x08,0x05,0x9B,0x18,0x68,0x23, 1269 0x85,0x1E,0xC7,0xDD,0x9C,0xA1,0x16,0x1D,0xE9,0x3D, 1270 0x51,0x74,0xD6,0x6E,0x83,0x82,0xE9,0xBB,0x2F,0xE8, 1271 0x4E,0x47 } 1272 }; 1273 1274 static const struct { EC_CURVE_DATA h; unsigned char data[20+21*6]; } 1275 _EC_X9_62_CHAR2_163V1 = { 1276 { NID_X9_62_characteristic_two_field,20,21,2 }, 1277 { 0xD2,0xC0,0xFB,0x15,0x76,0x08,0x60,0xDE,0xF1,0xEE, 1278 0xF4,0xD6,0x96,0xE6,0x76,0x87,0x56,0x15,0x17,0x54, /* seed */ 1279 1280 0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1281 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01, 1282 0x07, 1283 0x07,0x25,0x46,0xB5,0x43,0x52,0x34,0xA4,0x22,0xE0, /* a */ 1284 0x78,0x96,0x75,0xF4,0x32,0xC8,0x94,0x35,0xDE,0x52, 1285 0x42, 1286 0x00,0xC9,0x51,0x7D,0x06,0xD5,0x24,0x0D,0x3C,0xFF, /* b */ 1287 0x38,0xC7,0x4B,0x20,0xB6,0xCD,0x4D,0x6F,0x9D,0xD4, 1288 0xD9, 1289 0x07,0xAF,0x69,0x98,0x95,0x46,0x10,0x3D,0x79,0x32, /* x */ 1290 0x9F,0xCC,0x3D,0x74,0x88,0x0F,0x33,0xBB,0xE8,0x03, 1291 0xCB, 1292 0x01,0xEC,0x23,0x21,0x1B,0x59,0x66,0xAD,0xEA,0x1D, /* y */ 1293 0x3F,0x87,0xF7,0xEA,0x58,0x48,0xAE,0xF0,0xB7,0xCA, 1294 0x9F, 1295 0x04,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* order */ 1296 0x01,0xE6,0x0F,0xC8,0x82,0x1C,0xC7,0x4D,0xAE,0xAF, 1297 0xC1 } 1298 }; 1299 1300 static const struct { EC_CURVE_DATA h; unsigned char data[20+21*6]; } 1301 _EC_X9_62_CHAR2_163V2 = { 1302 { NID_X9_62_characteristic_two_field,20,21,2 }, 1303 { 0x53,0x81,0x4C,0x05,0x0D,0x44,0xD6,0x96,0xE6,0x76, /* seed */ 1304 0x87,0x56,0x15,0x17,0x58,0x0C,0xA4,0xE2,0x9F,0xFD, 1305 1306 0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1307 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01, 1308 0x07, 1309 0x01,0x08,0xB3,0x9E,0x77,0xC4,0xB1,0x08,0xBE,0xD9, /* a */ 1310 0x81,0xED,0x0E,0x89,0x0E,0x11,0x7C,0x51,0x1C,0xF0, 1311 0x72, 1312 0x06,0x67,0xAC,0xEB,0x38,0xAF,0x4E,0x48,0x8C,0x40, /* b */ 1313 0x74,0x33,0xFF,0xAE,0x4F,0x1C,0x81,0x16,0x38,0xDF, 1314 0x20, 1315 0x00,0x24,0x26,0x6E,0x4E,0xB5,0x10,0x6D,0x0A,0x96, /* x */ 1316 0x4D,0x92,0xC4,0x86,0x0E,0x26,0x71,0xDB,0x9B,0x6C, 1317 0xC5, 1318 0x07,0x9F,0x68,0x4D,0xDF,0x66,0x84,0xC5,0xCD,0x25, /* y */ 1319 0x8B,0x38,0x90,0x02,0x1B,0x23,0x86,0xDF,0xD1,0x9F, 1320 0xC5, 1321 0x03,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* order */ 1322 0xFD,0xF6,0x4D,0xE1,0x15,0x1A,0xDB,0xB7,0x8F,0x10, 1323 0xA7 } 1324 }; 1325 1326 static const struct { EC_CURVE_DATA h; unsigned char data[20+21*6]; } 1327 _EC_X9_62_CHAR2_163V3 = { 1328 { NID_X9_62_characteristic_two_field,20,21,2 }, 1329 { 0x50,0xCB,0xF1,0xD9,0x5C,0xA9,0x4D,0x69,0x6E,0x67, /* seed */ 1330 0x68,0x75,0x61,0x51,0x75,0xF1,0x6A,0x36,0xA3,0xB8, 1331 1332 0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1333 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01, 1334 0x07, 1335 0x07,0xA5,0x26,0xC6,0x3D,0x3E,0x25,0xA2,0x56,0xA0, /* a */ 1336 0x07,0x69,0x9F,0x54,0x47,0xE3,0x2A,0xE4,0x56,0xB5, 1337 0x0E, 1338 0x03,0xF7,0x06,0x17,0x98,0xEB,0x99,0xE2,0x38,0xFD, /* b */ 1339 0x6F,0x1B,0xF9,0x5B,0x48,0xFE,0xEB,0x48,0x54,0x25, 1340 0x2B, 1341 0x02,0xF9,0xF8,0x7B,0x7C,0x57,0x4D,0x0B,0xDE,0xCF, /* x */ 1342 0x8A,0x22,0xE6,0x52,0x47,0x75,0xF9,0x8C,0xDE,0xBD, 1343 0xCB, 1344 0x05,0xB9,0x35,0x59,0x0C,0x15,0x5E,0x17,0xEA,0x48, /* y */ 1345 0xEB,0x3F,0xF3,0x71,0x8B,0x89,0x3D,0xF5,0x9A,0x05, 1346 0xD0, 1347 0x03,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* order */ 1348 0xFE,0x1A,0xEE,0x14,0x0F,0x11,0x0A,0xFF,0x96,0x13, 1349 0x09 } 1350 }; 1351 1352 static const struct { EC_CURVE_DATA h; unsigned char data[0+23*6]; } 1353 _EC_X9_62_CHAR2_176V1 = { 1354 { NID_X9_62_characteristic_two_field,0,23,0xFF6E }, 1355 { /* no seed */ 1356 0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1357 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x08,0x00,0x00, 1358 0x00,0x00,0x07, 1359 0x00,0xE4,0xE6,0xDB,0x29,0x95,0x06,0x5C,0x40,0x7D, /* a */ 1360 0x9D,0x39,0xB8,0xD0,0x96,0x7B,0x96,0x70,0x4B,0xA8, 1361 0xE9,0xC9,0x0B, 1362 0x00,0x5D,0xDA,0x47,0x0A,0xBE,0x64,0x14,0xDE,0x8E, /* b */ 1363 0xC1,0x33,0xAE,0x28,0xE9,0xBB,0xD7,0xFC,0xEC,0x0A, 1364 0xE0,0xFF,0xF2, 1365 0x00,0x8D,0x16,0xC2,0x86,0x67,0x98,0xB6,0x00,0xF9, /* x */ 1366 0xF0,0x8B,0xB4,0xA8,0xE8,0x60,0xF3,0x29,0x8C,0xE0, 1367 0x4A,0x57,0x98, 1368 0x00,0x6F,0xA4,0x53,0x9C,0x2D,0xAD,0xDD,0xD6,0xBA, /* y */ 1369 0xB5,0x16,0x7D,0x61,0xB4,0x36,0xE1,0xD9,0x2B,0xB1, 1370 0x6A,0x56,0x2C, 1371 0x00,0x00,0x01,0x00,0x92,0x53,0x73,0x97,0xEC,0xA4, /* order */ 1372 0xF6,0x14,0x57,0x99,0xD6,0x2B,0x0A,0x19,0xCE,0x06, 1373 0xFE,0x26,0xAD } 1374 }; 1375 1376 static const struct { EC_CURVE_DATA h; unsigned char data[20+24*6]; } 1377 _EC_X9_62_CHAR2_191V1 = { 1378 { NID_X9_62_characteristic_two_field,20,24,2 }, 1379 { 0x4E,0x13,0xCA,0x54,0x27,0x44,0xD6,0x96,0xE6,0x76, /* seed */ 1380 0x87,0x56,0x15,0x17,0x55,0x2F,0x27,0x9A,0x8C,0x84, 1381 1382 0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1383 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1384 0x00,0x00,0x02,0x01, 1385 0x28,0x66,0x53,0x7B,0x67,0x67,0x52,0x63,0x6A,0x68, /* a */ 1386 0xF5,0x65,0x54,0xE1,0x26,0x40,0x27,0x6B,0x64,0x9E, 1387 0xF7,0x52,0x62,0x67, 1388 0x2E,0x45,0xEF,0x57,0x1F,0x00,0x78,0x6F,0x67,0xB0, /* b */ 1389 0x08,0x1B,0x94,0x95,0xA3,0xD9,0x54,0x62,0xF5,0xDE, 1390 0x0A,0xA1,0x85,0xEC, 1391 0x36,0xB3,0xDA,0xF8,0xA2,0x32,0x06,0xF9,0xC4,0xF2, /* x */ 1392 0x99,0xD7,0xB2,0x1A,0x9C,0x36,0x91,0x37,0xF2,0xC8, 1393 0x4A,0xE1,0xAA,0x0D, 1394 0x76,0x5B,0xE7,0x34,0x33,0xB3,0xF9,0x5E,0x33,0x29, /* y */ 1395 0x32,0xE7,0x0E,0xA2,0x45,0xCA,0x24,0x18,0xEA,0x0E, 1396 0xF9,0x80,0x18,0xFB, 1397 0x40,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* order */ 1398 0x00,0x00,0x04,0xA2,0x0E,0x90,0xC3,0x90,0x67,0xC8, 1399 0x93,0xBB,0xB9,0xA5 } 1400 }; 1401 1402 static const struct { EC_CURVE_DATA h; unsigned char data[20+24*6]; } 1403 _EC_X9_62_CHAR2_191V2 = { 1404 { NID_X9_62_characteristic_two_field,20,24,4 }, 1405 { 0x08,0x71,0xEF,0x2F,0xEF,0x24,0xD6,0x96,0xE6,0x76, /* seed */ 1406 0x87,0x56,0x15,0x17,0x58,0xBE,0xE0,0xD9,0x5C,0x15, 1407 1408 0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1409 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1410 0x00,0x00,0x02,0x01, 1411 0x40,0x10,0x28,0x77,0x4D,0x77,0x77,0xC7,0xB7,0x66, /* a */ 1412 0x6D,0x13,0x66,0xEA,0x43,0x20,0x71,0x27,0x4F,0x89, 1413 0xFF,0x01,0xE7,0x18, 1414 0x06,0x20,0x04,0x8D,0x28,0xBC,0xBD,0x03,0xB6,0x24, /* b */ 1415 0x9C,0x99,0x18,0x2B,0x7C,0x8C,0xD1,0x97,0x00,0xC3, 1416 0x62,0xC4,0x6A,0x01, 1417 0x38,0x09,0xB2,0xB7,0xCC,0x1B,0x28,0xCC,0x5A,0x87, /* x */ 1418 0x92,0x6A,0xAD,0x83,0xFD,0x28,0x78,0x9E,0x81,0xE2, 1419 0xC9,0xE3,0xBF,0x10, 1420 0x17,0x43,0x43,0x86,0x62,0x6D,0x14,0xF3,0xDB,0xF0, /* y */ 1421 0x17,0x60,0xD9,0x21,0x3A,0x3E,0x1C,0xF3,0x7A,0xEC, 1422 0x43,0x7D,0x66,0x8A, 1423 0x20,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* order */ 1424 0x00,0x00,0x50,0x50,0x8C,0xB8,0x9F,0x65,0x28,0x24, 1425 0xE0,0x6B,0x81,0x73 } 1426 }; 1427 1428 static const struct { EC_CURVE_DATA h; unsigned char data[20+24*6]; } 1429 _EC_X9_62_CHAR2_191V3 = { 1430 { NID_X9_62_characteristic_two_field,20,24,6 }, 1431 { 0xE0,0x53,0x51,0x2D,0xC6,0x84,0xD6,0x96,0xE6,0x76, /* seed */ 1432 0x87,0x56,0x15,0x17,0x50,0x67,0xAE,0x78,0x6D,0x1F, 1433 1434 0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1435 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1436 0x00,0x00,0x02,0x01, 1437 0x6C,0x01,0x07,0x47,0x56,0x09,0x91,0x22,0x22,0x10, /* a */ 1438 0x56,0x91,0x1C,0x77,0xD7,0x7E,0x77,0xA7,0x77,0xE7, 1439 0xE7,0xE7,0x7F,0xCB, 1440 0x71,0xFE,0x1A,0xF9,0x26,0xCF,0x84,0x79,0x89,0xEF, /* b */ 1441 0xEF,0x8D,0xB4,0x59,0xF6,0x63,0x94,0xD9,0x0F,0x32, 1442 0xAD,0x3F,0x15,0xE8, 1443 0x37,0x5D,0x4C,0xE2,0x4F,0xDE,0x43,0x44,0x89,0xDE, /* x */ 1444 0x87,0x46,0xE7,0x17,0x86,0x01,0x50,0x09,0xE6,0x6E, 1445 0x38,0xA9,0x26,0xDD, 1446 0x54,0x5A,0x39,0x17,0x61,0x96,0x57,0x5D,0x98,0x59, /* y */ 1447 0x99,0x36,0x6E,0x6A,0xD3,0x4C,0xE0,0xA7,0x7C,0xD7, 1448 0x12,0x7B,0x06,0xBE, 1449 0x15,0x55,0x55,0x55,0x55,0x55,0x55,0x55,0x55,0x55, /* order */ 1450 0x55,0x55,0x61,0x0C,0x0B,0x19,0x68,0x12,0xBF,0xB6, 1451 0x28,0x8A,0x3E,0xA3 } 1452 }; 1453 1454 static const struct { EC_CURVE_DATA h; unsigned char data[0+27*6]; } 1455 _EC_X9_62_CHAR2_208W1 = { 1456 { NID_X9_62_characteristic_two_field,0,27,0xFE48 }, 1457 { /* no seed */ 1458 0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1459 0x00,0x00,0x00,0x00,0x00,0x00,0x08,0x00,0x00,0x00, 1460 0x00,0x00,0x00,0x00,0x00,0x00,0x07, 1461 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 1462 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1463 0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1464 0x00,0xC8,0x61,0x9E,0xD4,0x5A,0x62,0xE6,0x21,0x2E, /* b */ 1465 0x11,0x60,0x34,0x9E,0x2B,0xFA,0x84,0x44,0x39,0xFA, 1466 0xFC,0x2A,0x3F,0xD1,0x63,0x8F,0x9E, 1467 0x00,0x89,0xFD,0xFB,0xE4,0xAB,0xE1,0x93,0xDF,0x95, /* x */ 1468 0x59,0xEC,0xF0,0x7A,0xC0,0xCE,0x78,0x55,0x4E,0x27, 1469 0x84,0xEB,0x8C,0x1E,0xD1,0xA5,0x7A, 1470 0x00,0x0F,0x55,0xB5,0x1A,0x06,0xE7,0x8E,0x9A,0xC3, /* y */ 1471 0x8A,0x03,0x5F,0xF5,0x20,0xD8,0xB0,0x17,0x81,0xBE, 1472 0xB1,0xA6,0xBB,0x08,0x61,0x7D,0xE3, 1473 0x00,0x00,0x01,0x01,0xBA,0xF9,0x5C,0x97,0x23,0xC5, /* order */ 1474 0x7B,0x6C,0x21,0xDA,0x2E,0xFF,0x2D,0x5E,0xD5,0x88, 1475 0xBD,0xD5,0x71,0x7E,0x21,0x2F,0x9D } 1476 }; 1477 1478 static const struct { EC_CURVE_DATA h; unsigned char data[20+30*6]; } 1479 _EC_X9_62_CHAR2_239V1 = { 1480 { NID_X9_62_characteristic_two_field,20,30,4 }, 1481 { 0xD3,0x4B,0x9A,0x4D,0x69,0x6E,0x67,0x68,0x75,0x61, /* seed */ 1482 0x51,0x75,0xCA,0x71,0xB9,0x20,0xBF,0xEF,0xB0,0x5D, 1483 1484 0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1485 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1486 0x00,0x00,0x00,0x00,0x00,0x10,0x00,0x00,0x00,0x01, 1487 1488 0x32,0x01,0x08,0x57,0x07,0x7C,0x54,0x31,0x12,0x3A, /* a */ 1489 0x46,0xB8,0x08,0x90,0x67,0x56,0xF5,0x43,0x42,0x3E, 1490 0x8D,0x27,0x87,0x75,0x78,0x12,0x57,0x78,0xAC,0x76, 1491 1492 0x79,0x04,0x08,0xF2,0xEE,0xDA,0xF3,0x92,0xB0,0x12, /* b */ 1493 0xED,0xEF,0xB3,0x39,0x2F,0x30,0xF4,0x32,0x7C,0x0C, 1494 0xA3,0xF3,0x1F,0xC3,0x83,0xC4,0x22,0xAA,0x8C,0x16, 1495 1496 0x57,0x92,0x70,0x98,0xFA,0x93,0x2E,0x7C,0x0A,0x96, /* x */ 1497 0xD3,0xFD,0x5B,0x70,0x6E,0xF7,0xE5,0xF5,0xC1,0x56, 1498 0xE1,0x6B,0x7E,0x7C,0x86,0x03,0x85,0x52,0xE9,0x1D, 1499 1500 0x61,0xD8,0xEE,0x50,0x77,0xC3,0x3F,0xEC,0xF6,0xF1, /* y */ 1501 0xA1,0x6B,0x26,0x8D,0xE4,0x69,0xC3,0xC7,0x74,0x4E, 1502 0xA9,0xA9,0x71,0x64,0x9F,0xC7,0xA9,0x61,0x63,0x05, 1503 1504 0x20,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* order */ 1505 0x00,0x00,0x00,0x00,0x00,0x0F,0x4D,0x42,0xFF,0xE1, 1506 0x49,0x2A,0x49,0x93,0xF1,0xCA,0xD6,0x66,0xE4,0x47 } 1507 }; 1508 1509 static const struct { EC_CURVE_DATA h; unsigned char data[20+30*6]; } 1510 _EC_X9_62_CHAR2_239V2 = { 1511 { NID_X9_62_characteristic_two_field,20,30,6 }, 1512 { 0x2A,0xA6,0x98,0x2F,0xDF,0xA4,0xD6,0x96,0xE6,0x76, /* seed */ 1513 0x87,0x56,0x15,0x17,0x5D,0x26,0x67,0x27,0x27,0x7D, 1514 1515 0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1516 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1517 0x00,0x00,0x00,0x00,0x00,0x10,0x00,0x00,0x00,0x01, 1518 1519 0x42,0x30,0x01,0x77,0x57,0xA7,0x67,0xFA,0xE4,0x23, /* a */ 1520 0x98,0x56,0x9B,0x74,0x63,0x25,0xD4,0x53,0x13,0xAF, 1521 0x07,0x66,0x26,0x64,0x79,0xB7,0x56,0x54,0xE6,0x5F, 1522 1523 0x50,0x37,0xEA,0x65,0x41,0x96,0xCF,0xF0,0xCD,0x82, /* b */ 1524 0xB2,0xC1,0x4A,0x2F,0xCF,0x2E,0x3F,0xF8,0x77,0x52, 1525 0x85,0xB5,0x45,0x72,0x2F,0x03,0xEA,0xCD,0xB7,0x4B, 1526 1527 0x28,0xF9,0xD0,0x4E,0x90,0x00,0x69,0xC8,0xDC,0x47, /* x */ 1528 0xA0,0x85,0x34,0xFE,0x76,0xD2,0xB9,0x00,0xB7,0xD7, 1529 0xEF,0x31,0xF5,0x70,0x9F,0x20,0x0C,0x4C,0xA2,0x05, 1530 1531 0x56,0x67,0x33,0x4C,0x45,0xAF,0xF3,0xB5,0xA0,0x3B, /* y */ 1532 0xAD,0x9D,0xD7,0x5E,0x2C,0x71,0xA9,0x93,0x62,0x56, 1533 0x7D,0x54,0x53,0xF7,0xFA,0x6E,0x22,0x7E,0xC8,0x33, 1534 1535 0x15,0x55,0x55,0x55,0x55,0x55,0x55,0x55,0x55,0x55, /* order */ 1536 0x55,0x55,0x55,0x55,0x55,0x3C,0x6F,0x28,0x85,0x25, 1537 0x9C,0x31,0xE3,0xFC,0xDF,0x15,0x46,0x24,0x52,0x2D } 1538 }; 1539 1540 static const struct { EC_CURVE_DATA h; unsigned char data[20+30*6]; } 1541 _EC_X9_62_CHAR2_239V3 = { 1542 { NID_X9_62_characteristic_two_field,20,30,0xA }, 1543 { 0x9E,0x07,0x6F,0x4D,0x69,0x6E,0x67,0x68,0x75,0x61, /* seed */ 1544 0x51,0x75,0xE1,0x1E,0x9F,0xDD,0x77,0xF9,0x20,0x41, 1545 1546 0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1547 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1548 0x00,0x00,0x00,0x00,0x00,0x10,0x00,0x00,0x00,0x01, 1549 1550 0x01,0x23,0x87,0x74,0x66,0x6A,0x67,0x76,0x6D,0x66, /* a */ 1551 0x76,0xF7,0x78,0xE6,0x76,0xB6,0x69,0x99,0x17,0x66, 1552 0x66,0xE6,0x87,0x66,0x6D,0x87,0x66,0xC6,0x6A,0x9F, 1553 1554 0x6A,0x94,0x19,0x77,0xBA,0x9F,0x6A,0x43,0x51,0x99, /* b */ 1555 0xAC,0xFC,0x51,0x06,0x7E,0xD5,0x87,0xF5,0x19,0xC5, 1556 0xEC,0xB5,0x41,0xB8,0xE4,0x41,0x11,0xDE,0x1D,0x40, 1557 1558 0x70,0xF6,0xE9,0xD0,0x4D,0x28,0x9C,0x4E,0x89,0x91, /* x */ 1559 0x3C,0xE3,0x53,0x0B,0xFD,0xE9,0x03,0x97,0x7D,0x42, 1560 0xB1,0x46,0xD5,0x39,0xBF,0x1B,0xDE,0x4E,0x9C,0x92, 1561 1562 0x2E,0x5A,0x0E,0xAF,0x6E,0x5E,0x13,0x05,0xB9,0x00, /* y */ 1563 0x4D,0xCE,0x5C,0x0E,0xD7,0xFE,0x59,0xA3,0x56,0x08, 1564 0xF3,0x38,0x37,0xC8,0x16,0xD8,0x0B,0x79,0xF4,0x61, 1565 1566 0x0C,0xCC,0xCC,0xCC,0xCC,0xCC,0xCC,0xCC,0xCC,0xCC, /* order */ 1567 0xCC,0xCC,0xCC,0xCC,0xCC,0xAC,0x49,0x12,0xD2,0xD9, 1568 0xDF,0x90,0x3E,0xF9,0x88,0x8B,0x8A,0x0E,0x4C,0xFF } 1569 }; 1570 1571 static const struct { EC_CURVE_DATA h; unsigned char data[0+35*6]; } 1572 _EC_X9_62_CHAR2_272W1 = { 1573 { NID_X9_62_characteristic_two_field,0,35,0xFF06 }, 1574 { /* no seed */ 1575 0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1576 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1577 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0x00,0x00, 1578 0x00,0x00,0x00,0x00,0x0B, 1579 0x00,0x91,0xA0,0x91,0xF0,0x3B,0x5F,0xBA,0x4A,0xB2, /* a */ 1580 0xCC,0xF4,0x9C,0x4E,0xDD,0x22,0x0F,0xB0,0x28,0x71, 1581 0x2D,0x42,0xBE,0x75,0x2B,0x2C,0x40,0x09,0x4D,0xBA, 1582 0xCD,0xB5,0x86,0xFB,0x20, 1583 0x00,0x71,0x67,0xEF,0xC9,0x2B,0xB2,0xE3,0xCE,0x7C, /* b */ 1584 0x8A,0xAA,0xFF,0x34,0xE1,0x2A,0x9C,0x55,0x70,0x03, 1585 0xD7,0xC7,0x3A,0x6F,0xAF,0x00,0x3F,0x99,0xF6,0xCC, 1586 0x84,0x82,0xE5,0x40,0xF7, 1587 0x00,0x61,0x08,0xBA,0xBB,0x2C,0xEE,0xBC,0xF7,0x87, /* x */ 1588 0x05,0x8A,0x05,0x6C,0xBE,0x0C,0xFE,0x62,0x2D,0x77, 1589 0x23,0xA2,0x89,0xE0,0x8A,0x07,0xAE,0x13,0xEF,0x0D, 1590 0x10,0xD1,0x71,0xDD,0x8D, 1591 0x00,0x10,0xC7,0x69,0x57,0x16,0x85,0x1E,0xEF,0x6B, /* y */ 1592 0xA7,0xF6,0x87,0x2E,0x61,0x42,0xFB,0xD2,0x41,0xB8, 1593 0x30,0xFF,0x5E,0xFC,0xAC,0xEC,0xCA,0xB0,0x5E,0x02, 1594 0x00,0x5D,0xDE,0x9D,0x23, 1595 0x00,0x00,0x01,0x00,0xFA,0xF5,0x13,0x54,0xE0,0xE3, /* order */ 1596 0x9E,0x48,0x92,0xDF,0x6E,0x31,0x9C,0x72,0xC8,0x16, 1597 0x16,0x03,0xFA,0x45,0xAA,0x7B,0x99,0x8A,0x16,0x7B, 1598 0x8F,0x1E,0x62,0x95,0x21 } 1599 }; 1600 1601 static const struct { EC_CURVE_DATA h; unsigned char data[0+39*6]; } 1602 _EC_X9_62_CHAR2_304W1 = { 1603 { NID_X9_62_characteristic_two_field,0,39,0xFE2E }, 1604 { /* no seed */ 1605 0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1606 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1607 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1608 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x08,0x07, 1609 0x00,0xFD,0x0D,0x69,0x31,0x49,0xA1,0x18,0xF6,0x51, /* a */ 1610 0xE6,0xDC,0xE6,0x80,0x20,0x85,0x37,0x7E,0x5F,0x88, 1611 0x2D,0x1B,0x51,0x0B,0x44,0x16,0x00,0x74,0xC1,0x28, 1612 0x80,0x78,0x36,0x5A,0x03,0x96,0xC8,0xE6,0x81, 1613 0x00,0xBD,0xDB,0x97,0xE5,0x55,0xA5,0x0A,0x90,0x8E, /* b */ 1614 0x43,0xB0,0x1C,0x79,0x8E,0xA5,0xDA,0xA6,0x78,0x8F, 1615 0x1E,0xA2,0x79,0x4E,0xFC,0xF5,0x71,0x66,0xB8,0xC1, 1616 0x40,0x39,0x60,0x1E,0x55,0x82,0x73,0x40,0xBE, 1617 0x00,0x19,0x7B,0x07,0x84,0x5E,0x9B,0xE2,0xD9,0x6A, /* x */ 1618 0xDB,0x0F,0x5F,0x3C,0x7F,0x2C,0xFF,0xBD,0x7A,0x3E, 1619 0xB8,0xB6,0xFE,0xC3,0x5C,0x7F,0xD6,0x7F,0x26,0xDD, 1620 0xF6,0x28,0x5A,0x64,0x4F,0x74,0x0A,0x26,0x14, 1621 0x00,0xE1,0x9F,0xBE,0xB7,0x6E,0x0D,0xA1,0x71,0x51, /* y */ 1622 0x7E,0xCF,0x40,0x1B,0x50,0x28,0x9B,0xF0,0x14,0x10, 1623 0x32,0x88,0x52,0x7A,0x9B,0x41,0x6A,0x10,0x5E,0x80, 1624 0x26,0x0B,0x54,0x9F,0xDC,0x1B,0x92,0xC0,0x3B, 1625 0x00,0x00,0x01,0x01,0xD5,0x56,0x57,0x2A,0xAB,0xAC, /* order */ 1626 0x80,0x01,0x01,0xD5,0x56,0x57,0x2A,0xAB,0xAC,0x80, 1627 0x01,0x02,0x2D,0x5C,0x91,0xDD,0x17,0x3F,0x8F,0xB5, 1628 0x61,0xDA,0x68,0x99,0x16,0x44,0x43,0x05,0x1D } 1629 }; 1630 1631 static const struct { EC_CURVE_DATA h; unsigned char data[20+45*6]; } 1632 _EC_X9_62_CHAR2_359V1 = { 1633 { NID_X9_62_characteristic_two_field,20,45,0x4C }, 1634 { 0x2B,0x35,0x49,0x20,0xB7,0x24,0xD6,0x96,0xE6,0x76, /* seed */ 1635 0x87,0x56,0x15,0x17,0x58,0x5B,0xA1,0x33,0x2D,0xC6, 1636 1637 0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1638 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1639 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1640 0x00,0x00,0x00,0x00,0x00,0x00,0x10,0x00,0x00,0x00, 1641 0x00,0x00,0x00,0x00,0x01, 1642 0x56,0x67,0x67,0x6A,0x65,0x4B,0x20,0x75,0x4F,0x35, /* a */ 1643 0x6E,0xA9,0x20,0x17,0xD9,0x46,0x56,0x7C,0x46,0x67, 1644 0x55,0x56,0xF1,0x95,0x56,0xA0,0x46,0x16,0xB5,0x67, 1645 0xD2,0x23,0xA5,0xE0,0x56,0x56,0xFB,0x54,0x90,0x16, 1646 0xA9,0x66,0x56,0xA5,0x57, 1647 0x24,0x72,0xE2,0xD0,0x19,0x7C,0x49,0x36,0x3F,0x1F, /* b */ 1648 0xE7,0xF5,0xB6,0xDB,0x07,0x5D,0x52,0xB6,0x94,0x7D, 1649 0x13,0x5D,0x8C,0xA4,0x45,0x80,0x5D,0x39,0xBC,0x34, 1650 0x56,0x26,0x08,0x96,0x87,0x74,0x2B,0x63,0x29,0xE7, 1651 0x06,0x80,0x23,0x19,0x88, 1652 0x3C,0x25,0x8E,0xF3,0x04,0x77,0x67,0xE7,0xED,0xE0, /* x */ 1653 0xF1,0xFD,0xAA,0x79,0xDA,0xEE,0x38,0x41,0x36,0x6A, 1654 0x13,0x2E,0x16,0x3A,0xCE,0xD4,0xED,0x24,0x01,0xDF, 1655 0x9C,0x6B,0xDC,0xDE,0x98,0xE8,0xE7,0x07,0xC0,0x7A, 1656 0x22,0x39,0xB1,0xB0,0x97, 1657 0x53,0xD7,0xE0,0x85,0x29,0x54,0x70,0x48,0x12,0x1E, /* y */ 1658 0x9C,0x95,0xF3,0x79,0x1D,0xD8,0x04,0x96,0x39,0x48, 1659 0xF3,0x4F,0xAE,0x7B,0xF4,0x4E,0xA8,0x23,0x65,0xDC, 1660 0x78,0x68,0xFE,0x57,0xE4,0xAE,0x2D,0xE2,0x11,0x30, 1661 0x5A,0x40,0x71,0x04,0xBD, 1662 0x01,0xAF,0x28,0x6B,0xCA,0x1A,0xF2,0x86,0xBC,0xA1, /* order */ 1663 0xAF,0x28,0x6B,0xCA,0x1A,0xF2,0x86,0xBC,0xA1,0xAF, 1664 0x28,0x6B,0xC9,0xFB,0x8F,0x6B,0x85,0xC5,0x56,0x89, 1665 0x2C,0x20,0xA7,0xEB,0x96,0x4F,0xE7,0x71,0x9E,0x74, 1666 0xF4,0x90,0x75,0x8D,0x3B } 1667 }; 1668 1669 static const struct { EC_CURVE_DATA h; unsigned char data[0+47*6]; } 1670 _EC_X9_62_CHAR2_368W1 = { 1671 { NID_X9_62_characteristic_two_field,0,47,0xFF70 }, 1672 { /* no seed */ 1673 0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1674 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1675 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1676 0x00,0x00,0x00,0x00,0x00,0x00,0x20,0x00,0x00,0x00, 1677 0x00,0x00,0x00,0x00,0x00,0x00,0x07, 1678 0x00,0xE0,0xD2,0xEE,0x25,0x09,0x52,0x06,0xF5,0xE2, /* a */ 1679 0xA4,0xF9,0xED,0x22,0x9F,0x1F,0x25,0x6E,0x79,0xA0, 1680 0xE2,0xB4,0x55,0x97,0x0D,0x8D,0x0D,0x86,0x5B,0xD9, 1681 0x47,0x78,0xC5,0x76,0xD6,0x2F,0x0A,0xB7,0x51,0x9C, 1682 0xCD,0x2A,0x1A,0x90,0x6A,0xE3,0x0D, 1683 0x00,0xFC,0x12,0x17,0xD4,0x32,0x0A,0x90,0x45,0x2C, /* b */ 1684 0x76,0x0A,0x58,0xED,0xCD,0x30,0xC8,0xDD,0x06,0x9B, 1685 0x3C,0x34,0x45,0x38,0x37,0xA3,0x4E,0xD5,0x0C,0xB5, 1686 0x49,0x17,0xE1,0xC2,0x11,0x2D,0x84,0xD1,0x64,0xF4, 1687 0x44,0xF8,0xF7,0x47,0x86,0x04,0x6A, 1688 0x00,0x10,0x85,0xE2,0x75,0x53,0x81,0xDC,0xCC,0xE3, /* x */ 1689 0xC1,0x55,0x7A,0xFA,0x10,0xC2,0xF0,0xC0,0xC2,0x82, 1690 0x56,0x46,0xC5,0xB3,0x4A,0x39,0x4C,0xBC,0xFA,0x8B, 1691 0xC1,0x6B,0x22,0xE7,0xE7,0x89,0xE9,0x27,0xBE,0x21, 1692 0x6F,0x02,0xE1,0xFB,0x13,0x6A,0x5F, 1693 0x00,0x7B,0x3E,0xB1,0xBD,0xDC,0xBA,0x62,0xD5,0xD8, /* y */ 1694 0xB2,0x05,0x9B,0x52,0x57,0x97,0xFC,0x73,0x82,0x2C, 1695 0x59,0x05,0x9C,0x62,0x3A,0x45,0xFF,0x38,0x43,0xCE, 1696 0xE8,0xF8,0x7C,0xD1,0x85,0x5A,0xDA,0xA8,0x1E,0x2A, 1697 0x07,0x50,0xB8,0x0F,0xDA,0x23,0x10, 1698 0x00,0x00,0x01,0x00,0x90,0x51,0x2D,0xA9,0xAF,0x72, /* order */ 1699 0xB0,0x83,0x49,0xD9,0x8A,0x5D,0xD4,0xC7,0xB0,0x53, 1700 0x2E,0xCA,0x51,0xCE,0x03,0xE2,0xD1,0x0F,0x3B,0x7A, 1701 0xC5,0x79,0xBD,0x87,0xE9,0x09,0xAE,0x40,0xA6,0xF1, 1702 0x31,0xE9,0xCF,0xCE,0x5B,0xD9,0x67 } 1703 }; 1704 1705 static const struct { EC_CURVE_DATA h; unsigned char data[0+54*6]; } 1706 _EC_X9_62_CHAR2_431R1 = { 1707 { NID_X9_62_characteristic_two_field,0,54,0x2760 }, 1708 { /* no seed */ 1709 0x80,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1710 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1711 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1712 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0x00, 1713 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1714 0x00,0x00,0x00,0x01, 1715 0x1A,0x82,0x7E,0xF0,0x0D,0xD6,0xFC,0x0E,0x23,0x4C, /* a */ 1716 0xAF,0x04,0x6C,0x6A,0x5D,0x8A,0x85,0x39,0x5B,0x23, 1717 0x6C,0xC4,0xAD,0x2C,0xF3,0x2A,0x0C,0xAD,0xBD,0xC9, 1718 0xDD,0xF6,0x20,0xB0,0xEB,0x99,0x06,0xD0,0x95,0x7F, 1719 0x6C,0x6F,0xEA,0xCD,0x61,0x54,0x68,0xDF,0x10,0x4D, 1720 0xE2,0x96,0xCD,0x8F, 1721 0x10,0xD9,0xB4,0xA3,0xD9,0x04,0x7D,0x8B,0x15,0x43, /* b */ 1722 0x59,0xAB,0xFB,0x1B,0x7F,0x54,0x85,0xB0,0x4C,0xEB, 1723 0x86,0x82,0x37,0xDD,0xC9,0xDE,0xDA,0x98,0x2A,0x67, 1724 0x9A,0x5A,0x91,0x9B,0x62,0x6D,0x4E,0x50,0xA8,0xDD, 1725 0x73,0x1B,0x10,0x7A,0x99,0x62,0x38,0x1F,0xB5,0xD8, 1726 0x07,0xBF,0x26,0x18, 1727 0x12,0x0F,0xC0,0x5D,0x3C,0x67,0xA9,0x9D,0xE1,0x61, /* x */ 1728 0xD2,0xF4,0x09,0x26,0x22,0xFE,0xCA,0x70,0x1B,0xE4, 1729 0xF5,0x0F,0x47,0x58,0x71,0x4E,0x8A,0x87,0xBB,0xF2, 1730 0xA6,0x58,0xEF,0x8C,0x21,0xE7,0xC5,0xEF,0xE9,0x65, 1731 0x36,0x1F,0x6C,0x29,0x99,0xC0,0xC2,0x47,0xB0,0xDB, 1732 0xD7,0x0C,0xE6,0xB7, 1733 0x20,0xD0,0xAF,0x89,0x03,0xA9,0x6F,0x8D,0x5F,0xA2, /* y */ 1734 0xC2,0x55,0x74,0x5D,0x3C,0x45,0x1B,0x30,0x2C,0x93, 1735 0x46,0xD9,0xB7,0xE4,0x85,0xE7,0xBC,0xE4,0x1F,0x6B, 1736 0x59,0x1F,0x3E,0x8F,0x6A,0xDD,0xCB,0xB0,0xBC,0x4C, 1737 0x2F,0x94,0x7A,0x7D,0xE1,0xA8,0x9B,0x62,0x5D,0x6A, 1738 0x59,0x8B,0x37,0x60, 1739 0x00,0x03,0x40,0x34,0x03,0x40,0x34,0x03,0x40,0x34, /* order */ 1740 0x03,0x40,0x34,0x03,0x40,0x34,0x03,0x40,0x34,0x03, 1741 0x40,0x34,0x03,0x40,0x34,0x03,0x40,0x34,0x03,0x23, 1742 0xC3,0x13,0xFA,0xB5,0x05,0x89,0x70,0x3B,0x5E,0xC6, 1743 0x8D,0x35,0x87,0xFE,0xC6,0x0D,0x16,0x1C,0xC1,0x49, 1744 0xC1,0xAD,0x4A,0x91 } 1745 }; 1746 1747 static const struct { EC_CURVE_DATA h; unsigned char data[0+15*6]; } 1748 _EC_WTLS_1 = { 1749 { NID_X9_62_characteristic_two_field,0,15,2 }, 1750 { /* no seed */ 1751 0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1752 0x00,0x00,0x00,0x02,0x01, 1753 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 1754 0x00,0x00,0x00,0x00,0x01, 1755 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* b */ 1756 0x00,0x00,0x00,0x00,0x01, 1757 0x01,0x66,0x79,0x79,0xA4,0x0B,0xA4,0x97,0xE5,0xD5, /* x */ 1758 0xC2,0x70,0x78,0x06,0x17, 1759 0x00,0xF4,0x4B,0x4A,0xF1,0xEC,0xC2,0x63,0x0E,0x08, /* y */ 1760 0x78,0x5C,0xEB,0xCC,0x15, 1761 0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFD,0xBF, /* order */ 1762 0x91,0xAF,0x6D,0xEA,0x73 } 1763 }; 1764 1765 /* IPSec curves */ 1766 /* NOTE: The of curves over a extension field of non prime degree 1767 * is not recommended (Weil-descent). 1768 * As the group order is not a prime this curve is not suitable 1769 * for ECDSA. 1770 */ 1771 static const struct { EC_CURVE_DATA h; unsigned char data[0+20*6]; } 1772 _EC_IPSEC_155_ID3 = { 1773 { NID_X9_62_characteristic_two_field,0,20,3 }, 1774 { /* no seed */ 1775 0x08,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1776 0x00,0x00,0x40,0x00,0x00,0x00,0x00,0x00,0x00,0x01, 1777 1778 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 1779 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1780 1781 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* b */ 1782 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x07,0x33,0x8f, 1783 1784 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* x */ 1785 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x7b, 1786 1787 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* y */ 1788 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x01,0xc8, 1789 1790 0x02,0xAA,0xAA,0xAA,0xAA,0xAA,0xAA,0xAA,0xAA,0xAA, /* order */ 1791 0xC7,0xF3,0xC7,0x88,0x1B,0xD0,0x86,0x8F,0xA8,0x6C } 1792 }; 1793 1794 /* NOTE: The of curves over a extension field of non prime degree 1795 * is not recommended (Weil-descent). 1796 * As the group order is not a prime this curve is not suitable 1797 * for ECDSA. 1798 */ 1799 static const struct { EC_CURVE_DATA h; unsigned char data[0+24*6]; } 1800 _EC_IPSEC_185_ID4 = { 1801 { NID_X9_62_characteristic_two_field,0,24,2 }, 1802 { /* no seed */ 1803 0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* p */ 1804 0x00,0x00,0x00,0x00,0x00,0x20,0x00,0x00,0x00,0x00, 1805 0x00,0x00,0x00,0x01, 1806 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* a */ 1807 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1808 0x00,0x00,0x00,0x00, 1809 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* b */ 1810 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1811 0x00,0x00,0x1e,0xe9, 1812 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* x */ 1813 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1814 0x00,0x00,0x00,0x18, 1815 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, /* y */ 1816 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00, 1817 0x00,0x00,0x00,0x0d, 1818 0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF, /* order */ 1819 0xFF,0xFF,0xED,0xF9,0x7C,0x44,0xDB,0x9F,0x24,0x20, 1820 0xBA,0xFC,0xA7,0x5E } 1821 }; 1822 1823 #endif 1824 1825 typedef struct _ec_list_element_st { 1826 int nid; 1827 const EC_CURVE_DATA *data; 1828 const EC_METHOD *(*meth)(void); 1829 const char *comment; 1830 } ec_list_element; 1831 1832 static const ec_list_element curve_list[] = { 1833 /* prime field curves */ 1834 /* secg curves */ 1835 { NID_secp112r1, &_EC_SECG_PRIME_112R1.h, 0, "SECG/WTLS curve over a 112 bit prime field" }, 1836 { NID_secp112r2, &_EC_SECG_PRIME_112R2.h, 0, "SECG curve over a 112 bit prime field" }, 1837 { NID_secp128r1, &_EC_SECG_PRIME_128R1.h, 0, "SECG curve over a 128 bit prime field" }, 1838 { NID_secp128r2, &_EC_SECG_PRIME_128R2.h, 0, "SECG curve over a 128 bit prime field" }, 1839 { NID_secp160k1, &_EC_SECG_PRIME_160K1.h, 0, "SECG curve over a 160 bit prime field" }, 1840 { NID_secp160r1, &_EC_SECG_PRIME_160R1.h, 0, "SECG curve over a 160 bit prime field" }, 1841 { NID_secp160r2, &_EC_SECG_PRIME_160R2.h, 0, "SECG/WTLS curve over a 160 bit prime field" }, 1842 /* SECG secp192r1 is the same as X9.62 prime192v1 and hence omitted */ 1843 { NID_secp192k1, &_EC_SECG_PRIME_192K1.h, 0, "SECG curve over a 192 bit prime field" }, 1844 { NID_secp224k1, &_EC_SECG_PRIME_224K1.h, 0, "SECG curve over a 224 bit prime field" }, 1845 #ifndef OPENSSL_NO_EC_NISTP_64_GCC_128 1846 { NID_secp224r1, &_EC_NIST_PRIME_224.h, EC_GFp_nistp224_method, "NIST/SECG curve over a 224 bit prime field" }, 1847 #else 1848 { NID_secp224r1, &_EC_NIST_PRIME_224.h, 0, "NIST/SECG curve over a 224 bit prime field" }, 1849 #endif 1850 { NID_secp256k1, &_EC_SECG_PRIME_256K1.h, 0, "SECG curve over a 256 bit prime field" }, 1851 /* SECG secp256r1 is the same as X9.62 prime256v1 and hence omitted */ 1852 { NID_secp384r1, &_EC_NIST_PRIME_384.h, 0, "NIST/SECG curve over a 384 bit prime field" }, 1853 #ifndef OPENSSL_NO_EC_NISTP_64_GCC_128 1854 { NID_secp521r1, &_EC_NIST_PRIME_521.h, EC_GFp_nistp521_method, "NIST/SECG curve over a 521 bit prime field" }, 1855 #else 1856 { NID_secp521r1, &_EC_NIST_PRIME_521.h, 0, "NIST/SECG curve over a 521 bit prime field" }, 1857 #endif 1858 /* X9.62 curves */ 1859 { NID_X9_62_prime192v1, &_EC_NIST_PRIME_192.h, 0, "NIST/X9.62/SECG curve over a 192 bit prime field" }, 1860 { NID_X9_62_prime192v2, &_EC_X9_62_PRIME_192V2.h, 0, "X9.62 curve over a 192 bit prime field" }, 1861 { NID_X9_62_prime192v3, &_EC_X9_62_PRIME_192V3.h, 0, "X9.62 curve over a 192 bit prime field" }, 1862 { NID_X9_62_prime239v1, &_EC_X9_62_PRIME_239V1.h, 0, "X9.62 curve over a 239 bit prime field" }, 1863 { NID_X9_62_prime239v2, &_EC_X9_62_PRIME_239V2.h, 0, "X9.62 curve over a 239 bit prime field" }, 1864 { NID_X9_62_prime239v3, &_EC_X9_62_PRIME_239V3.h, 0, "X9.62 curve over a 239 bit prime field" }, 1865 #ifndef OPENSSL_NO_EC_NISTP_64_GCC_128 1866 { NID_X9_62_prime256v1, &_EC_X9_62_PRIME_256V1.h, EC_GFp_nistp256_method, "X9.62/SECG curve over a 256 bit prime field" }, 1867 #else 1868 { NID_X9_62_prime256v1, &_EC_X9_62_PRIME_256V1.h, 0, "X9.62/SECG curve over a 256 bit prime field" }, 1869 #endif 1870 #ifndef OPENSSL_NO_EC2M 1871 /* characteristic two field curves */ 1872 /* NIST/SECG curves */ 1873 { NID_sect113r1, &_EC_SECG_CHAR2_113R1.h, 0, "SECG curve over a 113 bit binary field" }, 1874 { NID_sect113r2, &_EC_SECG_CHAR2_113R2.h, 0, "SECG curve over a 113 bit binary field" }, 1875 { NID_sect131r1, &_EC_SECG_CHAR2_131R1.h, 0, "SECG/WTLS curve over a 131 bit binary field" }, 1876 { NID_sect131r2, &_EC_SECG_CHAR2_131R2.h, 0, "SECG curve over a 131 bit binary field" }, 1877 { NID_sect163k1, &_EC_NIST_CHAR2_163K.h, 0, "NIST/SECG/WTLS curve over a 163 bit binary field" }, 1878 { NID_sect163r1, &_EC_SECG_CHAR2_163R1.h, 0, "SECG curve over a 163 bit binary field" }, 1879 { NID_sect163r2, &_EC_NIST_CHAR2_163B.h, 0, "NIST/SECG curve over a 163 bit binary field" }, 1880 { NID_sect193r1, &_EC_SECG_CHAR2_193R1.h, 0, "SECG curve over a 193 bit binary field" }, 1881 { NID_sect193r2, &_EC_SECG_CHAR2_193R2.h, 0, "SECG curve over a 193 bit binary field" }, 1882 { NID_sect233k1, &_EC_NIST_CHAR2_233K.h, 0, "NIST/SECG/WTLS curve over a 233 bit binary field" }, 1883 { NID_sect233r1, &_EC_NIST_CHAR2_233B.h, 0, "NIST/SECG/WTLS curve over a 233 bit binary field" }, 1884 { NID_sect239k1, &_EC_SECG_CHAR2_239K1.h, 0, "SECG curve over a 239 bit binary field" }, 1885 { NID_sect283k1, &_EC_NIST_CHAR2_283K.h, 0, "NIST/SECG curve over a 283 bit binary field" }, 1886 { NID_sect283r1, &_EC_NIST_CHAR2_283B.h, 0, "NIST/SECG curve over a 283 bit binary field" }, 1887 { NID_sect409k1, &_EC_NIST_CHAR2_409K.h, 0, "NIST/SECG curve over a 409 bit binary field" }, 1888 { NID_sect409r1, &_EC_NIST_CHAR2_409B.h, 0, "NIST/SECG curve over a 409 bit binary field" }, 1889 { NID_sect571k1, &_EC_NIST_CHAR2_571K.h, 0, "NIST/SECG curve over a 571 bit binary field" }, 1890 { NID_sect571r1, &_EC_NIST_CHAR2_571B.h, 0, "NIST/SECG curve over a 571 bit binary field" }, 1891 /* X9.62 curves */ 1892 { NID_X9_62_c2pnb163v1, &_EC_X9_62_CHAR2_163V1.h, 0, "X9.62 curve over a 163 bit binary field" }, 1893 { NID_X9_62_c2pnb163v2, &_EC_X9_62_CHAR2_163V2.h, 0, "X9.62 curve over a 163 bit binary field" }, 1894 { NID_X9_62_c2pnb163v3, &_EC_X9_62_CHAR2_163V3.h, 0, "X9.62 curve over a 163 bit binary field" }, 1895 { NID_X9_62_c2pnb176v1, &_EC_X9_62_CHAR2_176V1.h, 0, "X9.62 curve over a 176 bit binary field" }, 1896 { NID_X9_62_c2tnb191v1, &_EC_X9_62_CHAR2_191V1.h, 0, "X9.62 curve over a 191 bit binary field" }, 1897 { NID_X9_62_c2tnb191v2, &_EC_X9_62_CHAR2_191V2.h, 0, "X9.62 curve over a 191 bit binary field" }, 1898 { NID_X9_62_c2tnb191v3, &_EC_X9_62_CHAR2_191V3.h, 0, "X9.62 curve over a 191 bit binary field" }, 1899 { NID_X9_62_c2pnb208w1, &_EC_X9_62_CHAR2_208W1.h, 0, "X9.62 curve over a 208 bit binary field" }, 1900 { NID_X9_62_c2tnb239v1, &_EC_X9_62_CHAR2_239V1.h, 0, "X9.62 curve over a 239 bit binary field" }, 1901 { NID_X9_62_c2tnb239v2, &_EC_X9_62_CHAR2_239V2.h, 0, "X9.62 curve over a 239 bit binary field" }, 1902 { NID_X9_62_c2tnb239v3, &_EC_X9_62_CHAR2_239V3.h, 0, "X9.62 curve over a 239 bit binary field" }, 1903 { NID_X9_62_c2pnb272w1, &_EC_X9_62_CHAR2_272W1.h, 0, "X9.62 curve over a 272 bit binary field" }, 1904 { NID_X9_62_c2pnb304w1, &_EC_X9_62_CHAR2_304W1.h, 0, "X9.62 curve over a 304 bit binary field" }, 1905 { NID_X9_62_c2tnb359v1, &_EC_X9_62_CHAR2_359V1.h, 0, "X9.62 curve over a 359 bit binary field" }, 1906 { NID_X9_62_c2pnb368w1, &_EC_X9_62_CHAR2_368W1.h, 0, "X9.62 curve over a 368 bit binary field" }, 1907 { NID_X9_62_c2tnb431r1, &_EC_X9_62_CHAR2_431R1.h, 0, "X9.62 curve over a 431 bit binary field" }, 1908 /* the WAP/WTLS curves 1909 * [unlike SECG, spec has its own OIDs for curves from X9.62] */ 1910 { NID_wap_wsg_idm_ecid_wtls1, &_EC_WTLS_1.h, 0, "WTLS curve over a 113 bit binary field" }, 1911 { NID_wap_wsg_idm_ecid_wtls3, &_EC_NIST_CHAR2_163K.h, 0, "NIST/SECG/WTLS curve over a 163 bit binary field" }, 1912 { NID_wap_wsg_idm_ecid_wtls4, &_EC_SECG_CHAR2_113R1.h, 0, "SECG curve over a 113 bit binary field" }, 1913 { NID_wap_wsg_idm_ecid_wtls5, &_EC_X9_62_CHAR2_163V1.h, 0, "X9.62 curve over a 163 bit binary field" }, 1914 #endif 1915 { NID_wap_wsg_idm_ecid_wtls6, &_EC_SECG_PRIME_112R1.h, 0, "SECG/WTLS curve over a 112 bit prime field" }, 1916 { NID_wap_wsg_idm_ecid_wtls7, &_EC_SECG_PRIME_160R2.h, 0, "SECG/WTLS curve over a 160 bit prime field" }, 1917 { NID_wap_wsg_idm_ecid_wtls8, &_EC_WTLS_8.h, 0, "WTLS curve over a 112 bit prime field" }, 1918 { NID_wap_wsg_idm_ecid_wtls9, &_EC_WTLS_9.h, 0, "WTLS curve over a 160 bit prime field" }, 1919 #ifndef OPENSSL_NO_EC2M 1920 { NID_wap_wsg_idm_ecid_wtls10, &_EC_NIST_CHAR2_233K.h, 0, "NIST/SECG/WTLS curve over a 233 bit binary field" }, 1921 { NID_wap_wsg_idm_ecid_wtls11, &_EC_NIST_CHAR2_233B.h, 0, "NIST/SECG/WTLS curve over a 233 bit binary field" }, 1922 #endif 1923 { NID_wap_wsg_idm_ecid_wtls12, &_EC_WTLS_12.h, 0, "WTLS curvs over a 224 bit prime field" }, 1924 #ifndef OPENSSL_NO_EC2M 1925 /* IPSec curves */ 1926 { NID_ipsec3, &_EC_IPSEC_155_ID3.h, 0, "\n\tIPSec/IKE/Oakley curve #3 over a 155 bit binary field.\n" 1927 "\tNot suitable for ECDSA.\n\tQuestionable extension field!" }, 1928 { NID_ipsec4, &_EC_IPSEC_185_ID4.h, 0, "\n\tIPSec/IKE/Oakley curve #4 over a 185 bit binary field.\n" 1929 "\tNot suitable for ECDSA.\n\tQuestionable extension field!" }, 1930 #endif 1931 }; 1932 1933 #define curve_list_length (sizeof(curve_list)/sizeof(ec_list_element)) 1934 1935 static EC_GROUP *ec_group_new_from_data(const ec_list_element curve) 1936 { 1937 EC_GROUP *group=NULL; 1938 EC_POINT *P=NULL; 1939 BN_CTX *ctx=NULL; 1940 BIGNUM *p=NULL, *a=NULL, *b=NULL, *x=NULL, *y=NULL, *order=NULL; 1941 int ok=0; 1942 int seed_len,param_len; 1943 const EC_METHOD *meth; 1944 const EC_CURVE_DATA *data; 1945 const unsigned char *params; 1946 1947 if ((ctx = BN_CTX_new()) == NULL) 1948 { 1949 ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_MALLOC_FAILURE); 1950 goto err; 1951 } 1952 1953 data = curve.data; 1954 seed_len = data->seed_len; 1955 param_len = data->param_len; 1956 params = (const unsigned char *)(data+1); /* skip header */ 1957 params += seed_len; /* skip seed */ 1958 1959 if (!(p = BN_bin2bn(params+0*param_len, param_len, NULL)) 1960 || !(a = BN_bin2bn(params+1*param_len, param_len, NULL)) 1961 || !(b = BN_bin2bn(params+2*param_len, param_len, NULL))) 1962 { 1963 ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_BN_LIB); 1964 goto err; 1965 } 1966 1967 if (curve.meth != 0) 1968 { 1969 meth = curve.meth(); 1970 if (((group = EC_GROUP_new(meth)) == NULL) || 1971 (!(group->meth->group_set_curve(group, p, a, b, ctx)))) 1972 { 1973 ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_EC_LIB); 1974 goto err; 1975 } 1976 } 1977 else if (data->field_type == NID_X9_62_prime_field) 1978 { 1979 if ((group = EC_GROUP_new_curve_GFp(p, a, b, ctx)) == NULL) 1980 { 1981 ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_EC_LIB); 1982 goto err; 1983 } 1984 } 1985 #ifndef OPENSSL_NO_EC2M 1986 else /* field_type == NID_X9_62_characteristic_two_field */ 1987 { 1988 if ((group = EC_GROUP_new_curve_GF2m(p, a, b, ctx)) == NULL) 1989 { 1990 ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_EC_LIB); 1991 goto err; 1992 } 1993 } 1994 #endif 1995 1996 if ((P = EC_POINT_new(group)) == NULL) 1997 { 1998 ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_EC_LIB); 1999 goto err; 2000 } 2001 2002 if (!(x = BN_bin2bn(params+3*param_len, param_len, NULL)) 2003 || !(y = BN_bin2bn(params+4*param_len, param_len, NULL))) 2004 { 2005 ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_BN_LIB); 2006 goto err; 2007 } 2008 if (!EC_POINT_set_affine_coordinates_GFp(group, P, x, y, ctx)) 2009 { 2010 ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_EC_LIB); 2011 goto err; 2012 } 2013 if (!(order = BN_bin2bn(params+5*param_len, param_len, NULL)) 2014 || !BN_set_word(x, (BN_ULONG)data->cofactor)) 2015 { 2016 ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_BN_LIB); 2017 goto err; 2018 } 2019 if (!EC_GROUP_set_generator(group, P, order, x)) 2020 { 2021 ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_EC_LIB); 2022 goto err; 2023 } 2024 if (seed_len) 2025 { 2026 if (!EC_GROUP_set_seed(group, params-seed_len, seed_len)) 2027 { 2028 ECerr(EC_F_EC_GROUP_NEW_FROM_DATA, ERR_R_EC_LIB); 2029 goto err; 2030 } 2031 } 2032 ok=1; 2033 err: 2034 if (!ok) 2035 { 2036 EC_GROUP_free(group); 2037 group = NULL; 2038 } 2039 if (P) 2040 EC_POINT_free(P); 2041 if (ctx) 2042 BN_CTX_free(ctx); 2043 if (p) 2044 BN_free(p); 2045 if (a) 2046 BN_free(a); 2047 if (b) 2048 BN_free(b); 2049 if (order) 2050 BN_free(order); 2051 if (x) 2052 BN_free(x); 2053 if (y) 2054 BN_free(y); 2055 return group; 2056 } 2057 2058 EC_GROUP *EC_GROUP_new_by_curve_name(int nid) 2059 { 2060 size_t i; 2061 EC_GROUP *ret = NULL; 2062 2063 if (nid <= 0) 2064 return NULL; 2065 2066 for (i=0; i<curve_list_length; i++) 2067 if (curve_list[i].nid == nid) 2068 { 2069 ret = ec_group_new_from_data(curve_list[i]); 2070 break; 2071 } 2072 2073 if (ret == NULL) 2074 { 2075 ECerr(EC_F_EC_GROUP_NEW_BY_CURVE_NAME, EC_R_UNKNOWN_GROUP); 2076 return NULL; 2077 } 2078 2079 EC_GROUP_set_curve_name(ret, nid); 2080 2081 return ret; 2082 } 2083 2084 size_t EC_get_builtin_curves(EC_builtin_curve *r, size_t nitems) 2085 { 2086 size_t i, min; 2087 2088 if (r == NULL || nitems == 0) 2089 return curve_list_length; 2090 2091 min = nitems < curve_list_length ? nitems : curve_list_length; 2092 2093 for (i = 0; i < min; i++) 2094 { 2095 r[i].nid = curve_list[i].nid; 2096 r[i].comment = curve_list[i].comment; 2097 } 2098 2099 return curve_list_length; 2100 } 2101
