daa/daa_verifier/verifier_transaction.c

400 	TSS_DAA_SIGNATURE_internal *signature = NULL;
453 	// allocation of signature
454 	signature = e_2_i_TSS_DAA_SIGNATURE( &signature_ext);
455 	if( signature == NULL) {
462 	sA = signature->sA;
484 	c = bi_set_as_nbin( signature->challenge_length, signature->challenge);
488 		if( bi_equals( signature->zeta, zeta_2_verify) == 0) {
540 	// exp = signature->sE + tmp1
541 	bi_add( exp, signature->sE, tmp1);
542 	// tmp1 = (signature->capitalT ^ exp) mod n
543 	bi_mod_exp( tmp1, signature->capitalT, exp, n);
547 	// tmp1=( issuer_pk->capitalR0 ^ signature->sF0) %  n
548 	bi_mod_exp( tmp1, issuer_pk->capitalR0, signature->sF0, n);
552 	// tmp1=( issuer_pk->capitalR1 ^ signature->sF1) %  n
553 	bi_mod_exp( tmp1, issuer_pk->capitalR1, signature->sF1, n);
557 	// tmp1=( issuer_pk->capitalS ^ signature->sV) %  n
558 	bi_mod_exp( tmp1, issuer_pk->capitalS, signature->sV, n);
660 	bi_shift_left( tmp1, signature->sF1, DAA_PARAM_SIZE_F_I);
661 	bi_add( exp, signature->sF0, tmp1);
663 	// pseudonym_projected = (signature->zeta ^ exp) % capital_gamma
664 	bi_mod_exp( pseudonym_projected, signature->zeta, exp, capital_gamma);
736 		signature->zeta,
737 		signature->capitalT,
749 			signature->nonce_tpm_length,
750 			dump_byte_array( signature->nonce_tpm_length, signature->nonce_tpm));
758 	EVP_DigestUpdate(mdctx, signature->nonce_tpm, signature->nonce_tpm_length);
781 	if( signature->challenge_length != len_hash ||
782 		memcmp( signature->challenge, hash, len_hash) != 0) {
785 				signature->challenge_length,
786 				dump_byte_array( signature->challenge_length, signature->challenge));
813 	if( !is_element_gamma( signature->zeta, issuer_pk)) {
820 	if( bi_length( signature->sF0) > bits) {
825 	if( bi_length( signature->sF1) > bits) {
840 	if( bi_length( signature->sE) > bits) {
854 	free_TSS_DAA_SIGNATURE_internal( signature);