crypto/openssh/schnorr.c

119  * in public exponent g^x, under group defined by 'grp_p', 'grp_q' and 'grp_g'
129 schnorr_sign(const BIGNUM *grp_p, const BIGNUM *grp_q, const BIGNUM *grp_g,
173 	if (BN_mod_exp(g_v, grp_g, v, grp_p, bn_ctx) == -1) {
180 	if ((h = schnorr_hash(grp_p, grp_q, grp_g, hash_alg, g_v, g_x,
215  * in public exponent g^x, under group defined by 'grp_p', 'grp_q' and 'grp_g'
223 schnorr_sign_buf(const BIGNUM *grp_p, const BIGNUM *grp_q, const BIGNUM *grp_g,
230 	if (schnorr_sign(grp_p, grp_q, grp_g, SSH_DIGEST_SHA256,
255  * 'grp_g' using hash "hash_alg".
260 schnorr_verify(const BIGNUM *grp_p, const BIGNUM *grp_q, const BIGNUM *grp_g,
309 	if ((h = schnorr_hash(grp_p, grp_q, grp_g, hash_alg, e, g_x,
323 	if (BN_mod_exp(g_r, grp_g, r, grp_p, bn_ctx) == -1) {
355  * g_x (g^x) under group defined by 'grp_p', 'grp_q' and 'grp_g' using a
362     const BIGNUM *grp_g,
392 	ret = schnorr_verify(grp_p, grp_q, grp_g, SSH_DIGEST_SHA256,
542 modp_group_from_g_and_safe_p(const char *grp_g, const char *grp_p)
549 	    BN_hex2bn(&ret->g, grp_g) == 0)
578     const BIGNUM *grp_g, const BIGNUM *x)
590 	if (BN_mod_exp(g_x, grp_g, x, grp_p, bn_ctx) == -1)
592 	if (schnorr_sign_buf(grp_p, grp_q, grp_g, x, g_x, "junk", 4,
595 	if (schnorr_verify_buf(grp_p, grp_q, grp_g, g_x, "junk", 4,
598 	if (schnorr_verify_buf(grp_p, grp_q, grp_g, g_x, "JUNK", 4,
602 	if (schnorr_verify_buf(grp_p, grp_q, grp_g, g_x, "junk", 4,