src/eap_common/eap_pwd_common.c

88 int compute_password_element(EAP_PWD_group *grp, u16 num,
120 	grp->pwe = NULL;
121 	grp->order = NULL;
122 	grp->prime = NULL;
124 	if ((grp->group = EC_GROUP_new_by_curve_name(nid)) == NULL) {
131 	    ((grp->pwe = EC_POINT_new(grp->group)) == NULL) ||
132 	    ((grp->order = BN_new()) == NULL) ||
133 	    ((grp->prime = BN_new()) == NULL) ||
139 	if (!EC_GROUP_get_curve_GFp(grp->group, grp->prime, NULL, NULL, NULL))
145 	if (!EC_GROUP_get_order(grp->group, grp->order, NULL)) {
149 	if (!EC_GROUP_get_cofactor(grp->group, cofactor, NULL)) {
154 	primebitlen = BN_num_bits(grp->prime);
155 	primebytelen = BN_num_bytes(grp->prime);
208 		if (BN_ucmp(x_candidate, grp->prime) >= 0)
227 		if (!EC_POINT_set_compressed_coordinates_GFp(grp->group,
228 							     grp->pwe,
238 		if (!EC_POINT_is_on_curve(grp->group, grp->pwe, NULL)) {
245 			if (!EC_POINT_mul(grp->group, grp->pwe, NULL, grp->pwe,
251 			if (EC_POINT_is_at_infinity(grp->group, grp->pwe)) {
261 	grp->group_num = num;
264 		EC_GROUP_free(grp->group);
265 		grp->group = NULL;
266 		EC_POINT_free(grp->pwe);
267 		grp->pwe = NULL;
268 		BN_free(grp->order);
269 		grp->order = NULL;
270 		BN_free(grp->prime);
271 		grp->prime = NULL;
284 int compute_keys(EAP_PWD_group *grp, BN_CTX *bnctx, BIGNUM *k,
295 	if ((cruft = os_malloc(BN_num_bytes(grp->prime))) == NULL)
309 	offset = BN_num_bytes(grp->order) - BN_num_bytes(peer_scalar);
310 	os_memset(cruft, 0, BN_num_bytes(grp->prime));
312 	eap_pwd_h_update(hash, cruft, BN_num_bytes(grp->order));
313 	offset = BN_num_bytes(grp->order) - BN_num_bytes(server_scalar);
314 	os_memset(cruft, 0, BN_num_bytes(grp->prime));
316 	eap_pwd_h_update(hash, cruft, BN_num_bytes(grp->order));
325 	offset = BN_num_bytes(grp->prime) - BN_num_bytes(k);
326 	os_memset(cruft, 0, BN_num_bytes(grp->prime));
328 	eap_pwd_h_update(hash, cruft, BN_num_bytes(grp->prime));