usr.bin/ssh/ed25519.c

84 #define fe25519_square       crypto_sign_ed25519_ref_fe25519_square
120 static void fe25519_square(fe25519 *r, const fe25519 *x);
329 static void fe25519_square(fe25519 *r, const fe25519 *x)
348 	/* 2 */ fe25519_square(&z2,x);
349 	/* 4 */ fe25519_square(&t1,&z2);
350 	/* 8 */ fe25519_square(&t0,&t1);
353 	/* 22 */ fe25519_square(&t0,&z11);
356 	/* 2^6 - 2^1 */ fe25519_square(&t0,&z2_5_0);
357 	/* 2^7 - 2^2 */ fe25519_square(&t1,&t0);
358 	/* 2^8 - 2^3 */ fe25519_square(&t0,&t1);
359 	/* 2^9 - 2^4 */ fe25519_square(&t1,&t0);
360 	/* 2^10 - 2^5 */ fe25519_square(&t0,&t1);
363 	/* 2^11 - 2^1 */ fe25519_square(&t0,&z2_10_0);
364 	/* 2^12 - 2^2 */ fe25519_square(&t1,&t0);
365 	/* 2^20 - 2^10 */ for (i = 2;i < 10;i += 2) { fe25519_square(&t0,&t1); fe25519_square(&t1,&t0); }
368 	/* 2^21 - 2^1 */ fe25519_square(&t0,&z2_20_0);
369 	/* 2^22 - 2^2 */ fe25519_square(&t1,&t0);
370 	/* 2^40 - 2^20 */ for (i = 2;i < 20;i += 2) { fe25519_square(&t0,&t1); fe25519_square(&t1,&t0); }
373 	/* 2^41 - 2^1 */ fe25519_square(&t1,&t0);
374 	/* 2^42 - 2^2 */ fe25519_square(&t0,&t1);
375 	/* 2^50 - 2^10 */ for (i = 2;i < 10;i += 2) { fe25519_square(&t1,&t0); fe25519_square(&t0,&t1); }
378 	/* 2^51 - 2^1 */ fe25519_square(&t0,&z2_50_0);
379 	/* 2^52 - 2^2 */ fe25519_square(&t1,&t0);
380 	/* 2^100 - 2^50 */ for (i = 2;i < 50;i += 2) { fe25519_square(&t0,&t1); fe25519_square(&t1,&t0); }
383 	/* 2^101 - 2^1 */ fe25519_square(&t1,&z2_100_0);
384 	/* 2^102 - 2^2 */ fe25519_square(&t0,&t1);
385 	/* 2^200 - 2^100 */ for (i = 2;i < 100;i += 2) { fe25519_square(&t1,&t0); fe25519_square(&t0,&t1); }
388 	/* 2^201 - 2^1 */ fe25519_square(&t0,&t1);
389 	/* 2^202 - 2^2 */ fe25519_square(&t1,&t0);
390 	/* 2^250 - 2^50 */ for (i = 2;i < 50;i += 2) { fe25519_square(&t0,&t1); fe25519_square(&t1,&t0); }
393 	/* 2^251 - 2^1 */ fe25519_square(&t1,&t0);
394 	/* 2^252 - 2^2 */ fe25519_square(&t0,&t1);
395 	/* 2^253 - 2^3 */ fe25519_square(&t1,&t0);
396 	/* 2^254 - 2^4 */ fe25519_square(&t0,&t1);
397 	/* 2^255 - 2^5 */ fe25519_square(&t1,&t0);
414 	/* 2 */ fe25519_square(&z2,x);
415 	/* 4 */ fe25519_square(&t,&z2);
416 	/* 8 */ fe25519_square(&t,&t);
419 	/* 22 */ fe25519_square(&t,&z11);
422 	/* 2^6 - 2^1 */ fe25519_square(&t,&z2_5_0);
423 	/* 2^10 - 2^5 */ for (i = 1;i < 5;i++) { fe25519_square(&t,&t); }
426 	/* 2^11 - 2^1 */ fe25519_square(&t,&z2_10_0);
427 	/* 2^20 - 2^10 */ for (i = 1;i < 10;i++) { fe25519_square(&t,&t); }
430 	/* 2^21 - 2^1 */ fe25519_square(&t,&z2_20_0);
431 	/* 2^40 - 2^20 */ for (i = 1;i < 20;i++) { fe25519_square(&t,&t); }
434 	/* 2^41 - 2^1 */ fe25519_square(&t,&t);
435 	/* 2^50 - 2^10 */ for (i = 1;i < 10;i++) { fe25519_square(&t,&t); }
438 	/* 2^51 - 2^1 */ fe25519_square(&t,&z2_50_0);
439 	/* 2^100 - 2^50 */ for (i = 1;i < 50;i++) { fe25519_square(&t,&t); }
442 	/* 2^101 - 2^1 */ fe25519_square(&t,&z2_100_0);
443 	/* 2^200 - 2^100 */ for (i = 1;i < 100;i++) { fe25519_square(&t,&t); }
446 	/* 2^201 - 2^1 */ fe25519_square(&t,&t);
447 	/* 2^250 - 2^50 */ for (i = 1;i < 50;i++) { fe25519_square(&t,&t); }
450 	/* 2^251 - 2^1 */ fe25519_square(&t,&t);
451 	/* 2^252 - 2^2 */ fe25519_square(&t,&t);
1717   fe25519_square(&a, &p->x);
1718   fe25519_square(&b, &p->y);
1719   fe25519_square(&c, &p->z);
1724   fe25519_square(&r->x, &r->x);
1790   fe25519_square(&num, &r->y); /* x = y^2 */
1797   fe25519_square(&den2, &den);
1798   fe25519_square(&den4, &den2);
1811   fe25519_square(&chk, &r->x);
1817   fe25519_square(&chk, &r->x);