diff options
| author | Niels Möller <nisse@lysator.liu.se> | 2021-03-13 16:45:34 +0100 |
|---|---|---|
| committer | Niels Möller <nisse@lysator.liu.se> | 2021-03-17 15:06:23 +0100 |
| commit | 63f222c60b03470c0005aa9bc4296fbf585f68b9 (patch) | |
| tree | be265331c908777cb8503ef9e009c7947867cfb9 | |
| parent | ae3801a0e5cce276c270973214385c86048d5f7b (diff) | |
| download | nettle-63f222c60b03470c0005aa9bc4296fbf585f68b9.tar.gz | |
Fix canonical reduction in gostdsa_vko.
* gostdsa-vko.c (gostdsa_vko): Use ecc_mod_mul_canonical to
compute the scalar used for ecc multiplication.
(cherry picked from commit b30e0ca6d2b41579a5b6a010fc54065d790e8d55)
| -rw-r--r-- | ChangeLog | 3 | ||||
| -rw-r--r-- | gostdsa-vko.c | 2 |
2 files changed, 4 insertions, 1 deletions
@@ -1,5 +1,8 @@ 2021-03-13 Niels Möller <nisse@lysator.liu.se> + * gostdsa-vko.c (gostdsa_vko): Use ecc_mod_mul_canonical to + compute the scalar used for ecc multiplication. + * eddsa-hash.c (_eddsa_hash): Ensure result is canonically reduced. Two of the three call sites need that. diff --git a/gostdsa-vko.c b/gostdsa-vko.c index a02d59a9..3dc42a1e 100644 --- a/gostdsa-vko.c +++ b/gostdsa-vko.c @@ -87,7 +87,7 @@ gostdsa_vko (const struct ecc_scalar *priv, if (mpn_zero_p (UKM, size)) UKM[0] = 1; - ecc_mod_mul (&ecc->q, TEMP, priv->p, UKM, TEMP); /* TEMP = UKM * priv */ + ecc_mod_mul_canonical (&ecc->q, TEMP, priv->p, UKM, TEMP); /* TEMP = UKM * priv */ ecc->mul (ecc, XYZ, TEMP, pub->p, scratch + 4*size); /* XYZ = UKM * priv * pub */ ecc->h_to_a (ecc, 0, TEMP, XYZ, scratch + 5*size); /* TEMP = XYZ */ mpn_get_base256_le (out, bsize, TEMP, size); |