crypto/openssh/schnorr.c

119  * in public exponent g^x, under group defined by 'grp_p', 'grp_q' and 'grp_g'
129 schnorr_sign(const BIGNUM *grp_p, const BIGNUM *grp_q, const BIGNUM *grp_g,
145 	if (BN_cmp(g_x, grp_p) >= 0) {
166 	if ((v = bn_rand_range_gt_one(grp_p)) == NULL) {
173 	if (BN_mod_exp(g_v, grp_g, v, grp_p, bn_ctx) == -1) {
180 	if ((h = schnorr_hash(grp_p, grp_q, grp_g, hash_alg, g_v, g_x,
215  * in public exponent g^x, under group defined by 'grp_p', 'grp_q' and 'grp_g'
223 schnorr_sign_buf(const BIGNUM *grp_p, const BIGNUM *grp_q, const BIGNUM *grp_g,
230 	if (schnorr_sign(grp_p, grp_q, grp_g, SSH_DIGEST_SHA256,
254  * public exponent g_x (g^x) under group defined by 'grp_p', 'grp_q' and
260 schnorr_verify(const BIGNUM *grp_p, const BIGNUM *grp_q, const BIGNUM *grp_g,
276 	if (BN_cmp(g_x, grp_p) >= 0) {
298 	if (BN_mod_exp(gx_q, g_x, grp_q, grp_p, bn_ctx) == -1) {
309 	if ((h = schnorr_hash(grp_p, grp_q, grp_g, hash_alg, e, g_x,
316 	if (BN_mod_exp(g_xh, g_x, h, grp_p, bn_ctx) == -1) {
323 	if (BN_mod_exp(g_r, grp_g, r, grp_p, bn_ctx) == -1) {
330 	if (BN_mod_mul(expected, g_r, g_xh, grp_p, bn_ctx) == -1) {
355  * g_x (g^x) under group defined by 'grp_p', 'grp_q' and 'grp_g' using a
361 schnorr_verify_buf(const BIGNUM *grp_p, const BIGNUM *grp_q,
392 	ret = schnorr_verify(grp_p, grp_q, grp_g, SSH_DIGEST_SHA256,
542 modp_group_from_g_and_safe_p(const char *grp_g, const char *grp_p)
548 	if (BN_hex2bn(&ret->p, grp_p) == 0 ||
577 schnorr_selftest_one(const BIGNUM *grp_p, const BIGNUM *grp_q,
590 	if (BN_mod_exp(g_x, grp_g, x, grp_p, bn_ctx) == -1)
592 	if (schnorr_sign_buf(grp_p, grp_q, grp_g, x, g_x, "junk", 4,
595 	if (schnorr_verify_buf(grp_p, grp_q, grp_g, g_x, "junk", 4,
598 	if (schnorr_verify_buf(grp_p, grp_q, grp_g, g_x, "JUNK", 4,
602 	if (schnorr_verify_buf(grp_p, grp_q, grp_g, g_x, "junk", 4,