crypto/openssh/schnorr.c

265 	BIGNUM *h = NULL, *g_xh = NULL, *g_r = NULL, *gx_q = NULL;
281 	h = g_xh = g_r = expected = NULL;
286 	if ((g_xh = BN_new()) == NULL ||
307 	SCHNORR_DEBUG_BN((g_xh, "%s: g_xh = ", __func__));
315 	/* g_xh = (g^x)^h */
316 	if (BN_mod_exp(g_xh, g_x, h, grp_p, bn_ctx) == -1) {
320 	SCHNORR_DEBUG_BN((g_xh, "%s: g_xh = ", __func__));
329 	/* expected = g^r * g_xh */
330 	if (BN_mod_mul(expected, g_r, g_xh, grp_p, bn_ctx) == -1) {
344 	if (g_xh != NULL)
345 		BN_clear_free(g_xh);