crypto/ec/ecp_nistp256.c

1647  * generator, using certain (large) precomputed multiples in g_pre_comp.
1654                       const smallfelem g_pre_comp[2][16][3])
1686             select_point(bits, 16, g_pre_comp[1], tmp);
1705             select_point(bits, 16, g_pre_comp[0], tmp);
1752     smallfelem g_pre_comp[2][16][3];
1816     memset(ret->g_pre_comp, 0, sizeof(ret->g_pre_comp));
2011     const smallfelem(*g_pre_comp)[16][3] = NULL;
2033             g_pre_comp = (const smallfelem(*)[16][3])pre->g_pre_comp;
2036             g_pre_comp = &gmul[0];
2041         if (!smallfelem_to_BN(x, g_pre_comp[0][1][0]) ||
2042             !smallfelem_to_BN(y, g_pre_comp[0][1][1]) ||
2043             !smallfelem_to_BN(z, g_pre_comp[0][1][2])) {
2173                   mixed, (const smallfelem(*)[17][3])pre_comp, g_pre_comp);
2243         memcpy(pre->g_pre_comp, gmul, sizeof(pre->g_pre_comp));
2250     felem_shrink(pre->g_pre_comp[0][1][0], x_tmp);
2251     felem_shrink(pre->g_pre_comp[0][1][1], y_tmp);
2252     felem_shrink(pre->g_pre_comp[0][1][2], z_tmp);
2258         point_double_small(pre->g_pre_comp[1][i][0], pre->g_pre_comp[1][i][1],
2259                            pre->g_pre_comp[1][i][2], pre->g_pre_comp[0][i][0],
2260                            pre->g_pre_comp[0][i][1],
2261                            pre->g_pre_comp[0][i][2]);
2263             point_double_small(pre->g_pre_comp[1][i][0],
2264                                pre->g_pre_comp[1][i][1],
2265                                pre->g_pre_comp[1][i][2],
2266                                pre->g_pre_comp[1][i][0],
2267                                pre->g_pre_comp[1][i][1],
2268                                pre->g_pre_comp[1][i][2]);
2272         point_double_small(pre->g_pre_comp[0][2 * i][0],
2273                            pre->g_pre_comp[0][2 * i][1],
2274                            pre->g_pre_comp[0][2 * i][2],
2275                            pre->g_pre_comp[1][i][0], pre->g_pre_comp[1][i][1],
2276                            pre->g_pre_comp[1][i][2]);
2278             point_double_small(pre->g_pre_comp[0][2 * i][0],
2279                                pre->g_pre_comp[0][2 * i][1],
2280                                pre->g_pre_comp[0][2 * i][2],
2281                                pre->g_pre_comp[0][2 * i][0],
2282                                pre->g_pre_comp[0][2 * i][1],
2283                                pre->g_pre_comp[0][2 * i][2]);
2287         /* g_pre_comp[i][0] is the point at infinity */
2288         memset(pre->g_pre_comp[i][0], 0, sizeof(pre->g_pre_comp[i][0]));
2291         point_add_small(pre->g_pre_comp[i][6][0], pre->g_pre_comp[i][6][1],
2292                         pre->g_pre_comp[i][6][2], pre->g_pre_comp[i][4][0],
2293                         pre->g_pre_comp[i][4][1], pre->g_pre_comp[i][4][2],
2294                         pre->g_pre_comp[i][2][0], pre->g_pre_comp[i][2][1],
2295                         pre->g_pre_comp[i][2][2]);
2297         point_add_small(pre->g_pre_comp[i][10][0], pre->g_pre_comp[i][10][1],
2298                         pre->g_pre_comp[i][10][2], pre->g_pre_comp[i][8][0],
2299                         pre->g_pre_comp[i][8][1], pre->g_pre_comp[i][8][2],
2300                         pre->g_pre_comp[i][2][0], pre->g_pre_comp[i][2][1],
2301                         pre->g_pre_comp[i][2][2]);
2303         point_add_small(pre->g_pre_comp[i][12][0], pre->g_pre_comp[i][12][1],
2304                         pre->g_pre_comp[i][12][2], pre->g_pre_comp[i][8][0],
2305                         pre->g_pre_comp[i][8][1], pre->g_pre_comp[i][8][2],
2306                         pre->g_pre_comp[i][4][0], pre->g_pre_comp[i][4][1],
2307                         pre->g_pre_comp[i][4][2]);
2311         point_add_small(pre->g_pre_comp[i][14][0], pre->g_pre_comp[i][14][1],
2312                         pre->g_pre_comp[i][14][2], pre->g_pre_comp[i][12][0],
2313                         pre->g_pre_comp[i][12][1], pre->g_pre_comp[i][12][2],
2314                         pre->g_pre_comp[i][2][0], pre->g_pre_comp[i][2][1],
2315                         pre->g_pre_comp[i][2][2]);
2318             point_add_small(pre->g_pre_comp[i][2 * j + 1][0],
2319                             pre->g_pre_comp[i][2 * j + 1][1],
2320                             pre->g_pre_comp[i][2 * j + 1][2],
2321                             pre->g_pre_comp[i][2 * j][0],
2322                             pre->g_pre_comp[i][2 * j][1],
2323                             pre->g_pre_comp[i][2 * j][2],
2324                             pre->g_pre_comp[i][1][0],
2325                             pre->g_pre_comp[i][1][1],
2326                             pre->g_pre_comp[i][1][2]);
2329     make_points_affine(31, &(pre->g_pre_comp[0][1]), tmp_smallfelems);