crypto/ec/ecp_nistp521.c

1476  * generator, using certain (large) precomputed multiples in g_pre_comp.
1483                       const felem g_pre_comp[16][3])
1515             select_point(bits, 16, g_pre_comp, tmp);
1564     felem g_pre_comp[16][3];
1628     memset(ret->g_pre_comp, 0, sizeof(ret->g_pre_comp));
1822     felem(*g_pre_comp)[3] = NULL;
1844             g_pre_comp = &pre->g_pre_comp[0];
1847             g_pre_comp = (felem(*)[3]) gmul;
1852         if (!felem_to_BN(x, g_pre_comp[1][0]) ||
1853             !felem_to_BN(y, g_pre_comp[1][1]) ||
1854             !felem_to_BN(z, g_pre_comp[1][2])) {
1984                   (const felem(*)[3])g_pre_comp);
2053         memcpy(pre->g_pre_comp, gmul, sizeof(pre->g_pre_comp));
2056     if ((!BN_to_felem(pre->g_pre_comp[1][0], &group->generator->X)) ||
2057         (!BN_to_felem(pre->g_pre_comp[1][1], &group->generator->Y)) ||
2058         (!BN_to_felem(pre->g_pre_comp[1][2], &group->generator->Z)))
2062         point_double(pre->g_pre_comp[2 * i][0], pre->g_pre_comp[2 * i][1],
2063                      pre->g_pre_comp[2 * i][2], pre->g_pre_comp[i][0],
2064                      pre->g_pre_comp[i][1], pre->g_pre_comp[i][2]);
2066             point_double(pre->g_pre_comp[2 * i][0],
2067                          pre->g_pre_comp[2 * i][1],
2068                          pre->g_pre_comp[2 * i][2],
2069                          pre->g_pre_comp[2 * i][0],
2070                          pre->g_pre_comp[2 * i][1],
2071                          pre->g_pre_comp[2 * i][2]);
2074     /* g_pre_comp[0] is the point at infinity */
2075     memset(pre->g_pre_comp[0], 0, sizeof(pre->g_pre_comp[0]));
2078     point_add(pre->g_pre_comp[6][0], pre->g_pre_comp[6][1],
2079               pre->g_pre_comp[6][2], pre->g_pre_comp[4][0],
2080               pre->g_pre_comp[4][1], pre->g_pre_comp[4][2],
2081               0, pre->g_pre_comp[2][0], pre->g_pre_comp[2][1],
2082               pre->g_pre_comp[2][2]);
2084     point_add(pre->g_pre_comp[10][0], pre->g_pre_comp[10][1],
2085               pre->g_pre_comp[10][2], pre->g_pre_comp[8][0],
2086               pre->g_pre_comp[8][1], pre->g_pre_comp[8][2],
2087               0, pre->g_pre_comp[2][0], pre->g_pre_comp[2][1],
2088               pre->g_pre_comp[2][2]);
2090     point_add(pre->g_pre_comp[12][0], pre->g_pre_comp[12][1],
2091               pre->g_pre_comp[12][2], pre->g_pre_comp[8][0],
2092               pre->g_pre_comp[8][1], pre->g_pre_comp[8][2],
2093               0, pre->g_pre_comp[4][0], pre->g_pre_comp[4][1],
2094               pre->g_pre_comp[4][2]);
2096     point_add(pre->g_pre_comp[14][0], pre->g_pre_comp[14][1],
2097               pre->g_pre_comp[14][2], pre->g_pre_comp[12][0],
2098               pre->g_pre_comp[12][1], pre->g_pre_comp[12][2],
2099               0, pre->g_pre_comp[2][0], pre->g_pre_comp[2][1],
2100               pre->g_pre_comp[2][2]);
2103         point_add(pre->g_pre_comp[2 * i + 1][0],
2104                   pre->g_pre_comp[2 * i + 1][1],
2105                   pre->g_pre_comp[2 * i + 1][2], pre->g_pre_comp[2 * i][0],
2106                   pre->g_pre_comp[2 * i][1], pre->g_pre_comp[2 * i][2], 0,
2107                   pre->g_pre_comp[1][0], pre->g_pre_comp[1][1],
2108                   pre->g_pre_comp[1][2]);
2110     make_points_affine(15, &(pre->g_pre_comp[1]), tmp_felems);