core/25519: Use 51-bit limbs on platforms supporting 128 bit arithmetic
This commit is contained in:
Frank Denis
parent
bd82e08337
commit
bfd656b67b
@ -306,6 +306,9 @@
|
|||||||
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\fe.h" />
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\fe.h" />
|
||||||
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base2.h" />
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base2.h" />
|
||||||
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h" />
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h" />
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\fe.h" />
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\base2.h" />
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\base.h" />
|
||||||
<ClInclude Include="..\..\resource.h" />
|
<ClInclude Include="..\..\resource.h" />
|
||||||
</ItemGroup>
|
</ItemGroup>
|
||||||
<ItemGroup>
|
<ItemGroup>
|
||||||
|
|||||||
@ -707,6 +707,15 @@
|
|||||||
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h">
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h">
|
||||||
<Filter>crypto_core\curve25519\ref10\fe_25_5</Filter>
|
<Filter>crypto_core\curve25519\ref10\fe_25_5</Filter>
|
||||||
</ClInclude>
|
</ClInclude>
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\fe.h">
|
||||||
|
<Filter>crypto_core\curve25519\ref10\fe_51</Filter>
|
||||||
|
</ClInclude>
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\base2.h">
|
||||||
|
<Filter>crypto_core\curve25519\ref10\fe_51</Filter>
|
||||||
|
</ClInclude>
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\base.h">
|
||||||
|
<Filter>crypto_core\curve25519\ref10\fe_51</Filter>
|
||||||
|
</ClInclude>
|
||||||
</ItemGroup>
|
</ItemGroup>
|
||||||
<ItemGroup>
|
<ItemGroup>
|
||||||
<Filter Include="crypto_aead">
|
<Filter Include="crypto_aead">
|
||||||
@ -763,6 +772,9 @@
|
|||||||
<Filter Include="crypto_core\curve25519\ref10\fe_25_5">
|
<Filter Include="crypto_core\curve25519\ref10\fe_25_5">
|
||||||
<UniqueIdentifier>{e1a65ae7-b847-3441-bb23-e3eebbd63e9c}</UniqueIdentifier>
|
<UniqueIdentifier>{e1a65ae7-b847-3441-bb23-e3eebbd63e9c}</UniqueIdentifier>
|
||||||
</Filter>
|
</Filter>
|
||||||
|
<Filter Include="crypto_core\curve25519\ref10\fe_51">
|
||||||
|
<UniqueIdentifier>{b346bbaa-bfda-3fab-a0fe-ea02d7e61193}</UniqueIdentifier>
|
||||||
|
</Filter>
|
||||||
<Filter Include="crypto_core\hchacha20">
|
<Filter Include="crypto_core\hchacha20">
|
||||||
<UniqueIdentifier>{8b704d11-af1f-30c0-9981-479da6d88dc3}</UniqueIdentifier>
|
<UniqueIdentifier>{8b704d11-af1f-30c0-9981-479da6d88dc3}</UniqueIdentifier>
|
||||||
</Filter>
|
</Filter>
|
||||||
|
|||||||
@ -306,6 +306,9 @@
|
|||||||
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\fe.h" />
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\fe.h" />
|
||||||
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base2.h" />
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base2.h" />
|
||||||
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h" />
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h" />
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\fe.h" />
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\base2.h" />
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\base.h" />
|
||||||
<ClInclude Include="..\..\resource.h" />
|
<ClInclude Include="..\..\resource.h" />
|
||||||
</ItemGroup>
|
</ItemGroup>
|
||||||
<ItemGroup>
|
<ItemGroup>
|
||||||
|
|||||||
@ -707,6 +707,15 @@
|
|||||||
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h">
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h">
|
||||||
<Filter>crypto_core\curve25519\ref10\fe_25_5</Filter>
|
<Filter>crypto_core\curve25519\ref10\fe_25_5</Filter>
|
||||||
</ClInclude>
|
</ClInclude>
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\fe.h">
|
||||||
|
<Filter>crypto_core\curve25519\ref10\fe_51</Filter>
|
||||||
|
</ClInclude>
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\base2.h">
|
||||||
|
<Filter>crypto_core\curve25519\ref10\fe_51</Filter>
|
||||||
|
</ClInclude>
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\base.h">
|
||||||
|
<Filter>crypto_core\curve25519\ref10\fe_51</Filter>
|
||||||
|
</ClInclude>
|
||||||
</ItemGroup>
|
</ItemGroup>
|
||||||
<ItemGroup>
|
<ItemGroup>
|
||||||
<Filter Include="crypto_aead">
|
<Filter Include="crypto_aead">
|
||||||
@ -763,6 +772,9 @@
|
|||||||
<Filter Include="crypto_core\curve25519\ref10\fe_25_5">
|
<Filter Include="crypto_core\curve25519\ref10\fe_25_5">
|
||||||
<UniqueIdentifier>{e1a65ae7-b847-3441-bb23-e3eebbd63e9c}</UniqueIdentifier>
|
<UniqueIdentifier>{e1a65ae7-b847-3441-bb23-e3eebbd63e9c}</UniqueIdentifier>
|
||||||
</Filter>
|
</Filter>
|
||||||
|
<Filter Include="crypto_core\curve25519\ref10\fe_51">
|
||||||
|
<UniqueIdentifier>{b346bbaa-bfda-3fab-a0fe-ea02d7e61193}</UniqueIdentifier>
|
||||||
|
</Filter>
|
||||||
<Filter Include="crypto_core\hchacha20">
|
<Filter Include="crypto_core\hchacha20">
|
||||||
<UniqueIdentifier>{8b704d11-af1f-30c0-9981-479da6d88dc3}</UniqueIdentifier>
|
<UniqueIdentifier>{8b704d11-af1f-30c0-9981-479da6d88dc3}</UniqueIdentifier>
|
||||||
</Filter>
|
</Filter>
|
||||||
|
|||||||
@ -306,6 +306,9 @@
|
|||||||
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\fe.h" />
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\fe.h" />
|
||||||
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base2.h" />
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base2.h" />
|
||||||
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h" />
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h" />
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\fe.h" />
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\base2.h" />
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\base.h" />
|
||||||
<ClInclude Include="..\..\resource.h" />
|
<ClInclude Include="..\..\resource.h" />
|
||||||
</ItemGroup>
|
</ItemGroup>
|
||||||
<ItemGroup>
|
<ItemGroup>
|
||||||
|
|||||||
@ -707,6 +707,15 @@
|
|||||||
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h">
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h">
|
||||||
<Filter>crypto_core\curve25519\ref10\fe_25_5</Filter>
|
<Filter>crypto_core\curve25519\ref10\fe_25_5</Filter>
|
||||||
</ClInclude>
|
</ClInclude>
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\fe.h">
|
||||||
|
<Filter>crypto_core\curve25519\ref10\fe_51</Filter>
|
||||||
|
</ClInclude>
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\base2.h">
|
||||||
|
<Filter>crypto_core\curve25519\ref10\fe_51</Filter>
|
||||||
|
</ClInclude>
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\base.h">
|
||||||
|
<Filter>crypto_core\curve25519\ref10\fe_51</Filter>
|
||||||
|
</ClInclude>
|
||||||
</ItemGroup>
|
</ItemGroup>
|
||||||
<ItemGroup>
|
<ItemGroup>
|
||||||
<Filter Include="crypto_aead">
|
<Filter Include="crypto_aead">
|
||||||
@ -763,6 +772,9 @@
|
|||||||
<Filter Include="crypto_core\curve25519\ref10\fe_25_5">
|
<Filter Include="crypto_core\curve25519\ref10\fe_25_5">
|
||||||
<UniqueIdentifier>{e1a65ae7-b847-3441-bb23-e3eebbd63e9c}</UniqueIdentifier>
|
<UniqueIdentifier>{e1a65ae7-b847-3441-bb23-e3eebbd63e9c}</UniqueIdentifier>
|
||||||
</Filter>
|
</Filter>
|
||||||
|
<Filter Include="crypto_core\curve25519\ref10\fe_51">
|
||||||
|
<UniqueIdentifier>{b346bbaa-bfda-3fab-a0fe-ea02d7e61193}</UniqueIdentifier>
|
||||||
|
</Filter>
|
||||||
<Filter Include="crypto_core\hchacha20">
|
<Filter Include="crypto_core\hchacha20">
|
||||||
<UniqueIdentifier>{8b704d11-af1f-30c0-9981-479da6d88dc3}</UniqueIdentifier>
|
<UniqueIdentifier>{8b704d11-af1f-30c0-9981-479da6d88dc3}</UniqueIdentifier>
|
||||||
</Filter>
|
</Filter>
|
||||||
|
|||||||
@ -306,6 +306,9 @@
|
|||||||
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\fe.h" />
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\fe.h" />
|
||||||
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base2.h" />
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base2.h" />
|
||||||
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h" />
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h" />
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\fe.h" />
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\base2.h" />
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\base.h" />
|
||||||
<ClInclude Include="..\..\resource.h" />
|
<ClInclude Include="..\..\resource.h" />
|
||||||
</ItemGroup>
|
</ItemGroup>
|
||||||
<ItemGroup>
|
<ItemGroup>
|
||||||
|
|||||||
@ -707,6 +707,15 @@
|
|||||||
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h">
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h">
|
||||||
<Filter>crypto_core\curve25519\ref10\fe_25_5</Filter>
|
<Filter>crypto_core\curve25519\ref10\fe_25_5</Filter>
|
||||||
</ClInclude>
|
</ClInclude>
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\fe.h">
|
||||||
|
<Filter>crypto_core\curve25519\ref10\fe_51</Filter>
|
||||||
|
</ClInclude>
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\base2.h">
|
||||||
|
<Filter>crypto_core\curve25519\ref10\fe_51</Filter>
|
||||||
|
</ClInclude>
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\base.h">
|
||||||
|
<Filter>crypto_core\curve25519\ref10\fe_51</Filter>
|
||||||
|
</ClInclude>
|
||||||
</ItemGroup>
|
</ItemGroup>
|
||||||
<ItemGroup>
|
<ItemGroup>
|
||||||
<Filter Include="crypto_aead">
|
<Filter Include="crypto_aead">
|
||||||
@ -763,6 +772,9 @@
|
|||||||
<Filter Include="crypto_core\curve25519\ref10\fe_25_5">
|
<Filter Include="crypto_core\curve25519\ref10\fe_25_5">
|
||||||
<UniqueIdentifier>{e1a65ae7-b847-3441-bb23-e3eebbd63e9c}</UniqueIdentifier>
|
<UniqueIdentifier>{e1a65ae7-b847-3441-bb23-e3eebbd63e9c}</UniqueIdentifier>
|
||||||
</Filter>
|
</Filter>
|
||||||
|
<Filter Include="crypto_core\curve25519\ref10\fe_51">
|
||||||
|
<UniqueIdentifier>{b346bbaa-bfda-3fab-a0fe-ea02d7e61193}</UniqueIdentifier>
|
||||||
|
</Filter>
|
||||||
<Filter Include="crypto_core\hchacha20">
|
<Filter Include="crypto_core\hchacha20">
|
||||||
<UniqueIdentifier>{8b704d11-af1f-30c0-9981-479da6d88dc3}</UniqueIdentifier>
|
<UniqueIdentifier>{8b704d11-af1f-30c0-9981-479da6d88dc3}</UniqueIdentifier>
|
||||||
</Filter>
|
</Filter>
|
||||||
|
|||||||
@ -306,6 +306,9 @@
|
|||||||
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\fe.h" />
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\fe.h" />
|
||||||
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base2.h" />
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base2.h" />
|
||||||
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h" />
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h" />
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\fe.h" />
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\base2.h" />
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\base.h" />
|
||||||
<ClInclude Include="..\..\resource.h" />
|
<ClInclude Include="..\..\resource.h" />
|
||||||
</ItemGroup>
|
</ItemGroup>
|
||||||
<ItemGroup>
|
<ItemGroup>
|
||||||
|
|||||||
@ -707,6 +707,15 @@
|
|||||||
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h">
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h">
|
||||||
<Filter>crypto_core\curve25519\ref10\fe_25_5</Filter>
|
<Filter>crypto_core\curve25519\ref10\fe_25_5</Filter>
|
||||||
</ClInclude>
|
</ClInclude>
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\fe.h">
|
||||||
|
<Filter>crypto_core\curve25519\ref10\fe_51</Filter>
|
||||||
|
</ClInclude>
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\base2.h">
|
||||||
|
<Filter>crypto_core\curve25519\ref10\fe_51</Filter>
|
||||||
|
</ClInclude>
|
||||||
|
<ClInclude Include="..\..\..\..\src\libsodium\crypto_core\curve25519\ref10\fe_51\base.h">
|
||||||
|
<Filter>crypto_core\curve25519\ref10\fe_51</Filter>
|
||||||
|
</ClInclude>
|
||||||
</ItemGroup>
|
</ItemGroup>
|
||||||
<ItemGroup>
|
<ItemGroup>
|
||||||
<Filter Include="crypto_aead">
|
<Filter Include="crypto_aead">
|
||||||
@ -763,6 +772,9 @@
|
|||||||
<Filter Include="crypto_core\curve25519\ref10\fe_25_5">
|
<Filter Include="crypto_core\curve25519\ref10\fe_25_5">
|
||||||
<UniqueIdentifier>{e1a65ae7-b847-3441-bb23-e3eebbd63e9c}</UniqueIdentifier>
|
<UniqueIdentifier>{e1a65ae7-b847-3441-bb23-e3eebbd63e9c}</UniqueIdentifier>
|
||||||
</Filter>
|
</Filter>
|
||||||
|
<Filter Include="crypto_core\curve25519\ref10\fe_51">
|
||||||
|
<UniqueIdentifier>{b346bbaa-bfda-3fab-a0fe-ea02d7e61193}</UniqueIdentifier>
|
||||||
|
</Filter>
|
||||||
<Filter Include="crypto_core\hchacha20">
|
<Filter Include="crypto_core\hchacha20">
|
||||||
<UniqueIdentifier>{8b704d11-af1f-30c0-9981-479da6d88dc3}</UniqueIdentifier>
|
<UniqueIdentifier>{8b704d11-af1f-30c0-9981-479da6d88dc3}</UniqueIdentifier>
|
||||||
</Filter>
|
</Filter>
|
||||||
|
|||||||
@ -544,6 +544,9 @@
|
|||||||
<ClInclude Include="src\libsodium\crypto_core\curve25519\ref10\fe_25_5\fe.h" />
|
<ClInclude Include="src\libsodium\crypto_core\curve25519\ref10\fe_25_5\fe.h" />
|
||||||
<ClInclude Include="src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base2.h" />
|
<ClInclude Include="src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base2.h" />
|
||||||
<ClInclude Include="src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h" />
|
<ClInclude Include="src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h" />
|
||||||
|
<ClInclude Include="src\libsodium\crypto_core\curve25519\ref10\fe_51\fe.h" />
|
||||||
|
<ClInclude Include="src\libsodium\crypto_core\curve25519\ref10\fe_51\base2.h" />
|
||||||
|
<ClInclude Include="src\libsodium\crypto_core\curve25519\ref10\fe_51\base.h" />
|
||||||
<ClInclude Include="builds\msvc\resource.h" />
|
<ClInclude Include="builds\msvc\resource.h" />
|
||||||
</ItemGroup>
|
</ItemGroup>
|
||||||
<ItemGroup>
|
<ItemGroup>
|
||||||
|
|||||||
@ -698,5 +698,14 @@
|
|||||||
<ClInclude Include="src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h">
|
<ClInclude Include="src\libsodium\crypto_core\curve25519\ref10\fe_25_5\base.h">
|
||||||
<Filter>Header Files</Filter>
|
<Filter>Header Files</Filter>
|
||||||
</ClInclude>
|
</ClInclude>
|
||||||
|
<ClInclude Include="src\libsodium\crypto_core\curve25519\ref10\fe_51\fe.h">
|
||||||
|
<Filter>Header Files</Filter>
|
||||||
|
</ClInclude>
|
||||||
|
<ClInclude Include="src\libsodium\crypto_core\curve25519\ref10\fe_51\base2.h">
|
||||||
|
<Filter>Header Files</Filter>
|
||||||
|
</ClInclude>
|
||||||
|
<ClInclude Include="src\libsodium\crypto_core\curve25519\ref10\fe_51\base.h">
|
||||||
|
<Filter>Header Files</Filter>
|
||||||
|
</ClInclude>
|
||||||
</ItemGroup>
|
</ItemGroup>
|
||||||
</Project>
|
</Project>
|
||||||
|
|||||||
@ -12,9 +12,6 @@ libsodium_la_SOURCES = \
|
|||||||
crypto_box/crypto_box_easy.c \
|
crypto_box/crypto_box_easy.c \
|
||||||
crypto_box/crypto_box_seal.c \
|
crypto_box/crypto_box_seal.c \
|
||||||
crypto_box/curve25519xsalsa20poly1305/box_curve25519xsalsa20poly1305.c \
|
crypto_box/curve25519xsalsa20poly1305/box_curve25519xsalsa20poly1305.c \
|
||||||
crypto_core/curve25519/ref10/fe_25_5/base.h \
|
|
||||||
crypto_core/curve25519/ref10/fe_25_5/base2_25_5.h \
|
|
||||||
crypto_core/curve25519/ref10/fe_25_5/fe.h \
|
|
||||||
crypto_core/curve25519/ref10/curve25519_ref10.c \
|
crypto_core/curve25519/ref10/curve25519_ref10.c \
|
||||||
crypto_core/hchacha20/core_hchacha20.c \
|
crypto_core/hchacha20/core_hchacha20.c \
|
||||||
crypto_core/hsalsa20/ref2/core_hsalsa20_ref2.c \
|
crypto_core/hsalsa20/ref2/core_hsalsa20_ref2.c \
|
||||||
@ -111,10 +108,16 @@ endif
|
|||||||
|
|
||||||
if HAVE_TI_MODE
|
if HAVE_TI_MODE
|
||||||
libsodium_la_SOURCES += \
|
libsodium_la_SOURCES += \
|
||||||
|
crypto_core/curve25519/ref10/fe_51/base.h \
|
||||||
|
crypto_core/curve25519/ref10/fe_51/base2_25_5.h \
|
||||||
|
crypto_core/curve25519/ref10/fe_51/fe.h \
|
||||||
crypto_scalarmult/curve25519/donna_c64/curve25519_donna_c64.c \
|
crypto_scalarmult/curve25519/donna_c64/curve25519_donna_c64.c \
|
||||||
crypto_scalarmult/curve25519/donna_c64/curve25519_donna_c64.h
|
crypto_scalarmult/curve25519/donna_c64/curve25519_donna_c64.h
|
||||||
else
|
else
|
||||||
libsodium_la_SOURCES += \
|
libsodium_la_SOURCES += \
|
||||||
|
crypto_core/curve25519/ref10/fe_25_5/base.h \
|
||||||
|
crypto_core/curve25519/ref10/fe_25_5/base2_25_5.h \
|
||||||
|
crypto_core/curve25519/ref10/fe_25_5/fe.h \
|
||||||
crypto_scalarmult/curve25519/ref10/x25519_ref10.c \
|
crypto_scalarmult/curve25519/ref10/x25519_ref10.c \
|
||||||
crypto_scalarmult/curve25519/ref10/x25519_ref10.h
|
crypto_scalarmult/curve25519/ref10/x25519_ref10.h
|
||||||
endif
|
endif
|
||||||
|
|||||||
@ -32,7 +32,11 @@ load_4(const unsigned char *in)
|
|||||||
return result;
|
return result;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
#ifdef HAVE_TI_MODE
|
||||||
|
# include "fe_51/fe.h"
|
||||||
|
#else
|
||||||
# include "fe_25_5/fe.h"
|
# include "fe_25_5/fe.h"
|
||||||
|
#endif
|
||||||
|
|
||||||
void
|
void
|
||||||
fe_invert(fe out, const fe z)
|
fe_invert(fe out, const fe z)
|
||||||
@ -540,7 +544,11 @@ static void
|
|||||||
ge_select_base(ge_precomp *t, const int pos, const signed char b)
|
ge_select_base(ge_precomp *t, const int pos, const signed char b)
|
||||||
{
|
{
|
||||||
static const ge_precomp base[32][8] = { /* base[i][j] = (j+1)*256^i*B */
|
static const ge_precomp base[32][8] = { /* base[i][j] = (j+1)*256^i*B */
|
||||||
|
#ifdef HAVE_TI_MODE
|
||||||
|
# include "fe_51/base.h"
|
||||||
|
#else
|
||||||
# include "fe_25_5/base.h"
|
# include "fe_25_5/base.h"
|
||||||
|
#endif
|
||||||
};
|
};
|
||||||
ge_select(t, base[pos], b);
|
ge_select(t, base[pos], b);
|
||||||
}
|
}
|
||||||
@ -595,7 +603,11 @@ ge_double_scalarmult_vartime(ge_p2 *r, const unsigned char *a, const ge_p3 *A,
|
|||||||
const unsigned char *b)
|
const unsigned char *b)
|
||||||
{
|
{
|
||||||
static const ge_precomp Bi[8] = {
|
static const ge_precomp Bi[8] = {
|
||||||
|
#ifdef HAVE_TI_MODE
|
||||||
|
# include "fe_51/base2.h"
|
||||||
|
#else
|
||||||
# include "fe_25_5/base2.h"
|
# include "fe_25_5/base2.h"
|
||||||
|
#endif
|
||||||
};
|
};
|
||||||
signed char aslide[256];
|
signed char aslide[256];
|
||||||
signed char bslide[256];
|
signed char bslide[256];
|
||||||
|
|||||||
1127
src/libsodium/crypto_core/curve25519/ref10/fe_25_5/fe.h
Normal file
1127
src/libsodium/crypto_core/curve25519/ref10/fe_25_5/fe.h
Normal file
File diff suppressed because it is too large
Load Diff
1344
src/libsodium/crypto_core/curve25519/ref10/fe_51/base.h
Normal file
1344
src/libsodium/crypto_core/curve25519/ref10/fe_51/base.h
Normal file
File diff suppressed because it is too large
Load Diff
40
src/libsodium/crypto_core/curve25519/ref10/fe_51/base2.h
Normal file
40
src/libsodium/crypto_core/curve25519/ref10/fe_51/base2.h
Normal file
@ -0,0 +1,40 @@
|
|||||||
|
{
|
||||||
|
{ 1288382639258501, 245678601348599, 269427782077623, 1462984067271730, 137412439391563 },
|
||||||
|
{ 62697248952638, 204681361388450, 631292143396476, 338455783676468, 1213667448819585 },
|
||||||
|
{ 301289933810280, 1259582250014073, 1422107436869536, 796239922652654, 1953934009299142 }
|
||||||
|
},
|
||||||
|
{
|
||||||
|
{ 1601611775252272, 1720807796594148, 1132070835939856, 1260455018889551, 2147779492816911 },
|
||||||
|
{ 316559037616741, 2177824224946892, 1459442586438991, 1461528397712656, 751590696113597 },
|
||||||
|
{ 1850748884277385, 1200145853858453, 1068094770532492, 672251375690438, 1586055907191707 }
|
||||||
|
},
|
||||||
|
{
|
||||||
|
{ 769950342298419, 132954430919746, 844085933195555, 974092374476333, 726076285546016 },
|
||||||
|
{ 425251763115706, 608463272472562, 442562545713235, 837766094556764, 374555092627893 },
|
||||||
|
{ 1086255230780037, 274979815921559, 1960002765731872, 929474102396301, 1190409889297339 }
|
||||||
|
},
|
||||||
|
{
|
||||||
|
{ 665000864555967, 2065379846933859, 370231110385876, 350988370788628, 1233371373142985 },
|
||||||
|
{ 2019367628972465, 676711900706637, 110710997811333, 1108646842542025, 517791959672113 },
|
||||||
|
{ 965130719900578, 247011430587952, 526356006571389, 91986625355052, 2157223321444601 }
|
||||||
|
},
|
||||||
|
{
|
||||||
|
{ 1802695059465007, 1664899123557221, 593559490740857, 2160434469266659, 927570450755031 },
|
||||||
|
{ 1725674970513508, 1933645953859181, 1542344539275782, 1767788773573747, 1297447965928905 },
|
||||||
|
{ 1381809363726107, 1430341051343062, 2061843536018959, 1551778050872521, 2036394857967624 }
|
||||||
|
},
|
||||||
|
{
|
||||||
|
{ 1970894096313054, 528066325833207, 1619374932191227, 2207306624415883, 1169170329061080 },
|
||||||
|
{ 2070390218572616, 1458919061857835, 624171843017421, 1055332792707765, 433987520732508 },
|
||||||
|
{ 893653801273833, 1168026499324677, 1242553501121234, 1306366254304474, 1086752658510815 }
|
||||||
|
},
|
||||||
|
{
|
||||||
|
{ 213454002618221, 939771523987438, 1159882208056014, 317388369627517, 621213314200687 },
|
||||||
|
{ 1971678598905747, 338026507889165, 762398079972271, 655096486107477, 42299032696322 },
|
||||||
|
{ 177130678690680, 1754759263300204, 1864311296286618, 1180675631479880, 1292726903152791 }
|
||||||
|
},
|
||||||
|
{
|
||||||
|
{ 1913163449625248, 460779200291993, 2193883288642314, 1008900146920800, 1721983679009502 },
|
||||||
|
{ 1070401523076875, 1272492007800961, 1910153608563310, 2075579521696771, 1191169788841221 },
|
||||||
|
{ 692896803108118, 500174642072499, 2068223309439677, 1162190621851337, 1426986007309901 }
|
||||||
|
}
|
||||||
569
src/libsodium/crypto_core/curve25519/ref10/fe_51/fe.h
Normal file
569
src/libsodium/crypto_core/curve25519/ref10/fe_51/fe.h
Normal file
@ -0,0 +1,569 @@
|
|||||||
|
/* 37095705934669439343138083508754565189542113879843219016388785533085940283555 */
|
||||||
|
static const fe d = {
|
||||||
|
929955233495203, 466365720129213, 1662059464998953, 2033849074728123, 1442794654840575
|
||||||
|
};
|
||||||
|
|
||||||
|
/* 2 * d =
|
||||||
|
* 16295367250680780974490674513165176452449235426866156013048779062215315747161
|
||||||
|
*/
|
||||||
|
static const fe d2 = {
|
||||||
|
1859910466990425, 932731440258426, 1072319116312658, 1815898335770999, 633789495995903
|
||||||
|
};
|
||||||
|
|
||||||
|
/* sqrt(-1) */
|
||||||
|
static const fe sqrtm1 = {
|
||||||
|
1718705420411056, 234908883556509, 2233514472574048, 2117202627021982, 765476049583133
|
||||||
|
};
|
||||||
|
|
||||||
|
/*
|
||||||
|
h = 0
|
||||||
|
*/
|
||||||
|
|
||||||
|
void
|
||||||
|
fe_0(fe h)
|
||||||
|
{
|
||||||
|
memset(&h[0], 0, 5 * sizeof h[0]);
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
h = 1
|
||||||
|
*/
|
||||||
|
|
||||||
|
void
|
||||||
|
fe_1(fe h)
|
||||||
|
{
|
||||||
|
h[0] = 1;
|
||||||
|
memset(&h[1], 0, 4 * sizeof h[0]);
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
h = f + g
|
||||||
|
Can overlap h with f or g.
|
||||||
|
*/
|
||||||
|
|
||||||
|
void
|
||||||
|
fe_add(fe h, const fe f, const fe g)
|
||||||
|
{
|
||||||
|
uint64_t h0 = f[0] + g[0];
|
||||||
|
uint64_t h1 = f[1] + g[1];
|
||||||
|
uint64_t h2 = f[2] + g[2];
|
||||||
|
uint64_t h3 = f[3] + g[3];
|
||||||
|
uint64_t h4 = f[4] + g[4];
|
||||||
|
|
||||||
|
h[0] = h0;
|
||||||
|
h[1] = h1;
|
||||||
|
h[2] = h2;
|
||||||
|
h[3] = h3;
|
||||||
|
h[4] = h4;
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
h = f - g
|
||||||
|
*/
|
||||||
|
|
||||||
|
void
|
||||||
|
fe_sub(fe h, const fe f, const fe g)
|
||||||
|
{
|
||||||
|
const uint64_t mask = 0x7ffffffffffffULL;
|
||||||
|
uint64_t h0, h1, h2, h3, h4;
|
||||||
|
|
||||||
|
h0 = g[0];
|
||||||
|
h1 = g[1];
|
||||||
|
h2 = g[2];
|
||||||
|
h3 = g[3];
|
||||||
|
h4 = g[4];
|
||||||
|
|
||||||
|
h1 += h0 >> 51;
|
||||||
|
h0 &= mask;
|
||||||
|
h2 += h1 >> 51;
|
||||||
|
h1 &= mask;
|
||||||
|
h3 += h2 >> 51;
|
||||||
|
h2 &= mask;
|
||||||
|
h4 += h3 >> 51;
|
||||||
|
h3 &= mask;
|
||||||
|
h0 += 19ULL * (h4 >> 51);
|
||||||
|
h4 &= mask;
|
||||||
|
|
||||||
|
h0 = (f[0] + 0xfffffffffffdaULL) - h0;
|
||||||
|
h1 = (f[1] + 0xffffffffffffeULL) - h1;
|
||||||
|
h2 = (f[2] + 0xffffffffffffeULL) - h2;
|
||||||
|
h3 = (f[3] + 0xffffffffffffeULL) - h3;
|
||||||
|
h4 = (f[4] + 0xffffffffffffeULL) - h4;
|
||||||
|
|
||||||
|
h[0] = h0;
|
||||||
|
h[1] = h1;
|
||||||
|
h[2] = h2;
|
||||||
|
h[3] = h3;
|
||||||
|
h[4] = h4;
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
h = -f
|
||||||
|
*/
|
||||||
|
|
||||||
|
static void
|
||||||
|
fe_neg(fe h, const fe f)
|
||||||
|
{
|
||||||
|
fe zero;
|
||||||
|
|
||||||
|
fe_0(zero);
|
||||||
|
fe_sub(h, zero, f);
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
Replace (f,g) with (g,g) if b == 1;
|
||||||
|
replace (f,g) with (f,g) if b == 0.
|
||||||
|
*
|
||||||
|
Preconditions: b in {0,1}.
|
||||||
|
*/
|
||||||
|
|
||||||
|
static void
|
||||||
|
fe_cmov(fe f, const fe g, unsigned int b)
|
||||||
|
{
|
||||||
|
const uint64_t mask = (uint64_t) (-(int64_t) b);
|
||||||
|
|
||||||
|
uint64_t f0 = f[0];
|
||||||
|
uint64_t f1 = f[1];
|
||||||
|
uint64_t f2 = f[2];
|
||||||
|
uint64_t f3 = f[3];
|
||||||
|
uint64_t f4 = f[4];
|
||||||
|
|
||||||
|
uint64_t x0 = f0 ^ g[0];
|
||||||
|
uint64_t x1 = f1 ^ g[1];
|
||||||
|
uint64_t x2 = f2 ^ g[2];
|
||||||
|
uint64_t x3 = f3 ^ g[3];
|
||||||
|
uint64_t x4 = f4 ^ g[4];
|
||||||
|
|
||||||
|
x0 &= mask;
|
||||||
|
x1 &= mask;
|
||||||
|
x2 &= mask;
|
||||||
|
x3 &= mask;
|
||||||
|
x4 &= mask;
|
||||||
|
f[0] = f0 ^ x0;
|
||||||
|
f[1] = f1 ^ x1;
|
||||||
|
f[2] = f2 ^ x2;
|
||||||
|
f[3] = f3 ^ x3;
|
||||||
|
f[4] = f4 ^ x4;
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
h = f
|
||||||
|
*/
|
||||||
|
|
||||||
|
void
|
||||||
|
fe_copy(fe h, const fe f)
|
||||||
|
{
|
||||||
|
uint64_t f0 = f[0];
|
||||||
|
uint64_t f1 = f[1];
|
||||||
|
uint64_t f2 = f[2];
|
||||||
|
uint64_t f3 = f[3];
|
||||||
|
uint64_t f4 = f[4];
|
||||||
|
|
||||||
|
h[0] = f0;
|
||||||
|
h[1] = f1;
|
||||||
|
h[2] = f2;
|
||||||
|
h[3] = f3;
|
||||||
|
h[4] = f4;
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
Ignores top bit of h.
|
||||||
|
*/
|
||||||
|
|
||||||
|
void
|
||||||
|
fe_frombytes(fe h, const unsigned char *s)
|
||||||
|
{
|
||||||
|
const uint64_t mask = 0x7ffffffffffffULL;
|
||||||
|
uint64_t h0, h1, h2, h3, h4;
|
||||||
|
|
||||||
|
h0 = (LOAD64_LE(s ) ) & mask;
|
||||||
|
h1 = (LOAD64_LE(s + 6) >> 3) & mask;
|
||||||
|
h2 = (LOAD64_LE(s + 12) >> 6) & mask;
|
||||||
|
h3 = (LOAD64_LE(s + 19) >> 1) & mask;
|
||||||
|
h4 = (LOAD64_LE(s + 24) >> 12) & mask;
|
||||||
|
|
||||||
|
h[0] = h0;
|
||||||
|
h[1] = h1;
|
||||||
|
h[2] = h2;
|
||||||
|
h[3] = h3;
|
||||||
|
h[4] = h4;
|
||||||
|
}
|
||||||
|
|
||||||
|
static void
|
||||||
|
fe_reduce(fe h, const fe f)
|
||||||
|
{
|
||||||
|
const uint64_t mask = 0x7ffffffffffffULL;
|
||||||
|
uint128_t t[5];
|
||||||
|
|
||||||
|
t[0] = f[0];
|
||||||
|
t[1] = f[1];
|
||||||
|
t[2] = f[2];
|
||||||
|
t[3] = f[3];
|
||||||
|
t[4] = f[4];
|
||||||
|
|
||||||
|
t[1] += t[0] >> 51;
|
||||||
|
t[0] &= mask;
|
||||||
|
t[2] += t[1] >> 51;
|
||||||
|
t[1] &= mask;
|
||||||
|
t[3] += t[2] >> 51;
|
||||||
|
t[2] &= mask;
|
||||||
|
t[4] += t[3] >> 51;
|
||||||
|
t[3] &= mask;
|
||||||
|
t[0] += 19 * (t[4] >> 51);
|
||||||
|
t[4] &= mask;
|
||||||
|
|
||||||
|
t[1] += t[0] >> 51;
|
||||||
|
t[0] &= mask;
|
||||||
|
t[2] += t[1] >> 51;
|
||||||
|
t[1] &= mask;
|
||||||
|
t[3] += t[2] >> 51;
|
||||||
|
t[2] &= mask;
|
||||||
|
t[4] += t[3] >> 51;
|
||||||
|
t[3] &= mask;
|
||||||
|
t[0] += 19 * (t[4] >> 51);
|
||||||
|
t[4] &= mask;
|
||||||
|
|
||||||
|
/* now t is between 0 and 2^255-1, properly carried. */
|
||||||
|
/* case 1: between 0 and 2^255-20. case 2: between 2^255-19 and 2^255-1. */
|
||||||
|
|
||||||
|
t[0] += 19ULL;
|
||||||
|
|
||||||
|
t[1] += t[0] >> 51;
|
||||||
|
t[0] &= mask;
|
||||||
|
t[2] += t[1] >> 51;
|
||||||
|
t[1] &= mask;
|
||||||
|
t[3] += t[2] >> 51;
|
||||||
|
t[2] &= mask;
|
||||||
|
t[4] += t[3] >> 51;
|
||||||
|
t[3] &= mask;
|
||||||
|
t[0] += 19ULL * (t[4] >> 51);
|
||||||
|
t[4] &= mask;
|
||||||
|
|
||||||
|
/* now between 19 and 2^255-1 in both cases, and offset by 19. */
|
||||||
|
|
||||||
|
t[0] += 0x8000000000000 - 19ULL;
|
||||||
|
t[1] += 0x8000000000000 - 1ULL;
|
||||||
|
t[2] += 0x8000000000000 - 1ULL;
|
||||||
|
t[3] += 0x8000000000000 - 1ULL;
|
||||||
|
t[4] += 0x8000000000000 - 1ULL;
|
||||||
|
|
||||||
|
/* now between 2^255 and 2^256-20, and offset by 2^255. */
|
||||||
|
|
||||||
|
t[1] += t[0] >> 51;
|
||||||
|
t[0] &= mask;
|
||||||
|
t[2] += t[1] >> 51;
|
||||||
|
t[1] &= mask;
|
||||||
|
t[3] += t[2] >> 51;
|
||||||
|
t[2] &= mask;
|
||||||
|
t[4] += t[3] >> 51;
|
||||||
|
t[3] &= mask;
|
||||||
|
t[4] &= mask;
|
||||||
|
|
||||||
|
h[0] = t[0];
|
||||||
|
h[1] = t[1];
|
||||||
|
h[2] = t[2];
|
||||||
|
h[3] = t[3];
|
||||||
|
h[4] = t[4];
|
||||||
|
}
|
||||||
|
|
||||||
|
void
|
||||||
|
fe_tobytes(unsigned char *s, const fe h)
|
||||||
|
{
|
||||||
|
fe t;
|
||||||
|
uint64_t t0, t1, t2, t3;
|
||||||
|
|
||||||
|
fe_reduce(t, h);
|
||||||
|
t0 = t[0] | (t[1] << 51);
|
||||||
|
t1 = (t[1] >> 13) | (t[2] << 38);
|
||||||
|
t2 = (t[2] >> 26) | (t[3] << 25);
|
||||||
|
t3 = (t[3] >> 39) | (t[4] << 12);
|
||||||
|
STORE64_LE(s + 0, t0);
|
||||||
|
STORE64_LE(s + 8, t1);
|
||||||
|
STORE64_LE(s + 16, t2);
|
||||||
|
STORE64_LE(s + 24, t3);
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
return 1 if f is in {1,3,5,...,q-2}
|
||||||
|
return 0 if f is in {0,2,4,...,q-1}
|
||||||
|
*/
|
||||||
|
|
||||||
|
static int
|
||||||
|
fe_isnegative(const fe f)
|
||||||
|
{
|
||||||
|
unsigned char s[32];
|
||||||
|
|
||||||
|
fe_tobytes(s, f);
|
||||||
|
|
||||||
|
return s[0] & 1;
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
return 1 if f == 0
|
||||||
|
return 0 if f != 0
|
||||||
|
*/
|
||||||
|
|
||||||
|
int
|
||||||
|
fe_iszero(const fe f)
|
||||||
|
{
|
||||||
|
unsigned char s[32];
|
||||||
|
|
||||||
|
fe_tobytes(s, f);
|
||||||
|
|
||||||
|
return sodium_is_zero(s, 32);
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
h = f * g
|
||||||
|
Can overlap h with f or g.
|
||||||
|
*/
|
||||||
|
|
||||||
|
void
|
||||||
|
fe_mul(fe h, const fe f, const fe g)
|
||||||
|
{
|
||||||
|
const uint64_t mask = 0x7ffffffffffffULL;
|
||||||
|
uint128_t r0, r1, r2, r3, r4, carry;
|
||||||
|
uint64_t f0, f1, f2, f3, f4;
|
||||||
|
uint64_t f1_19, f2_19, f3_19, f4_19;
|
||||||
|
uint64_t g0, g1, g2, g3, g4;
|
||||||
|
uint64_t r00, r01, r02, r03, r04;
|
||||||
|
|
||||||
|
f0 = f[0];
|
||||||
|
f1 = f[1];
|
||||||
|
f2 = f[2];
|
||||||
|
f3 = f[3];
|
||||||
|
f4 = f[4];
|
||||||
|
|
||||||
|
g0 = g[0];
|
||||||
|
g1 = g[1];
|
||||||
|
g2 = g[2];
|
||||||
|
g3 = g[3];
|
||||||
|
g4 = g[4];
|
||||||
|
|
||||||
|
f1_19 = 19ULL * f1;
|
||||||
|
f2_19 = 19ULL * f2;
|
||||||
|
f3_19 = 19ULL * f3;
|
||||||
|
f4_19 = 19ULL * f4;
|
||||||
|
|
||||||
|
r0 = ((uint128_t) f0 ) * ((uint128_t) g0);
|
||||||
|
r0 += ((uint128_t) f1_19) * ((uint128_t) g4);
|
||||||
|
r0 += ((uint128_t) f2_19) * ((uint128_t) g3);
|
||||||
|
r0 += ((uint128_t) f3_19) * ((uint128_t) g2);
|
||||||
|
r0 += ((uint128_t) f4_19) * ((uint128_t) g1);
|
||||||
|
|
||||||
|
r1 = ((uint128_t) f0 ) * ((uint128_t) g1);
|
||||||
|
r1 += ((uint128_t) f1 ) * ((uint128_t) g0);
|
||||||
|
r1 += ((uint128_t) f2_19) * ((uint128_t) g4);
|
||||||
|
r1 += ((uint128_t) f3_19) * ((uint128_t) g3);
|
||||||
|
r1 += ((uint128_t) f4_19) * ((uint128_t) g2);
|
||||||
|
|
||||||
|
r2 = ((uint128_t) f0 ) * ((uint128_t) g2);
|
||||||
|
r2 += ((uint128_t) f1 ) * ((uint128_t) g1);
|
||||||
|
r2 += ((uint128_t) f2 ) * ((uint128_t) g0);
|
||||||
|
r2 += ((uint128_t) f3_19) * ((uint128_t) g4);
|
||||||
|
r2 += ((uint128_t) f4_19) * ((uint128_t) g3);
|
||||||
|
|
||||||
|
r3 = ((uint128_t) f0 ) * ((uint128_t) g3);
|
||||||
|
r3 += ((uint128_t) f1 ) * ((uint128_t) g2);
|
||||||
|
r3 += ((uint128_t) f2 ) * ((uint128_t) g1);
|
||||||
|
r3 += ((uint128_t) f3 ) * ((uint128_t) g0);
|
||||||
|
r3 += ((uint128_t) f4_19) * ((uint128_t) g4);
|
||||||
|
|
||||||
|
r4 = ((uint128_t) f0 ) * ((uint128_t) g4);
|
||||||
|
r4 += ((uint128_t) f1 ) * ((uint128_t) g3);
|
||||||
|
r4 += ((uint128_t) f2 ) * ((uint128_t) g2);
|
||||||
|
r4 += ((uint128_t) f3 ) * ((uint128_t) g1);
|
||||||
|
r4 += ((uint128_t) f4 ) * ((uint128_t) g0);
|
||||||
|
|
||||||
|
r00 = ((uint64_t) r0) & mask;
|
||||||
|
carry = r0 >> 51;
|
||||||
|
r1 += carry;
|
||||||
|
r01 = ((uint64_t) r1) & mask;
|
||||||
|
carry = r1 >> 51;
|
||||||
|
r2 += carry;
|
||||||
|
r02 = ((uint64_t) r2) & mask;
|
||||||
|
carry = r2 >> 51;
|
||||||
|
r3 += carry;
|
||||||
|
r03 = ((uint64_t) r3) & mask;
|
||||||
|
carry = r3 >> 51;
|
||||||
|
r4 += carry;
|
||||||
|
r04 = ((uint64_t) r4) & mask;
|
||||||
|
carry = r4 >> 51;
|
||||||
|
r00 += 19ULL * (uint64_t) carry;
|
||||||
|
carry = r00 >> 51;
|
||||||
|
r00 &= mask;
|
||||||
|
r01 += (uint64_t) carry;
|
||||||
|
carry = r01 >> 51;
|
||||||
|
r01 &= mask;
|
||||||
|
r02 += (uint64_t) carry;
|
||||||
|
|
||||||
|
h[0] = r00;
|
||||||
|
h[1] = r01;
|
||||||
|
h[2] = r02;
|
||||||
|
h[3] = r03;
|
||||||
|
h[4] = r04;
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
h = f * f
|
||||||
|
Can overlap h with f.
|
||||||
|
*/
|
||||||
|
|
||||||
|
void
|
||||||
|
fe_sq(fe h, const fe f)
|
||||||
|
{
|
||||||
|
const uint64_t mask = 0x7ffffffffffffULL;
|
||||||
|
uint128_t r0, r1, r2, r3, r4, carry;
|
||||||
|
uint64_t f0, f1, f2, f3, f4;
|
||||||
|
uint64_t f0_2, f1_2, f1_38, f2_38, f3_38, f3_19, f4_19;
|
||||||
|
uint64_t r00, r01, r02, r03, r04;
|
||||||
|
|
||||||
|
f0 = f[0];
|
||||||
|
f1 = f[1];
|
||||||
|
f2 = f[2];
|
||||||
|
f3 = f[3];
|
||||||
|
f4 = f[4];
|
||||||
|
|
||||||
|
f0_2 = f0 << 1;
|
||||||
|
f1_2 = f1 << 1;
|
||||||
|
|
||||||
|
f1_38 = 38ULL * f1;
|
||||||
|
f2_38 = 38ULL * f2;
|
||||||
|
f3_38 = 38ULL * f3;
|
||||||
|
|
||||||
|
f3_19 = 19ULL * f3;
|
||||||
|
f4_19 = 19ULL * f4;
|
||||||
|
|
||||||
|
r0 = ((uint128_t) f0 ) * ((uint128_t) f0);
|
||||||
|
r0 += ((uint128_t) f1_38) * ((uint128_t) f4);
|
||||||
|
r0 += ((uint128_t) f2_38) * ((uint128_t) f3);
|
||||||
|
|
||||||
|
r1 = ((uint128_t) f0_2 ) * ((uint128_t) f1);
|
||||||
|
r1 += ((uint128_t) f2_38) * ((uint128_t) f4);
|
||||||
|
r1 += ((uint128_t) f3_19) * ((uint128_t) f3);
|
||||||
|
|
||||||
|
r2 = ((uint128_t) f0_2 ) * ((uint128_t) f2);
|
||||||
|
r2 += ((uint128_t) f1 ) * ((uint128_t) f1);
|
||||||
|
r2 += ((uint128_t) f3_38) * ((uint128_t) f4);
|
||||||
|
|
||||||
|
r3 = ((uint128_t) f0_2 ) * ((uint128_t) f3);
|
||||||
|
r3 += ((uint128_t) f1_2 ) * ((uint128_t) f2);
|
||||||
|
r3 += ((uint128_t) f4_19) * ((uint128_t) f4);
|
||||||
|
|
||||||
|
r4 = ((uint128_t) f0_2 ) * ((uint128_t) f4);
|
||||||
|
r4 += ((uint128_t) f1_2 ) * ((uint128_t) f3);
|
||||||
|
r4 += ((uint128_t) f2 ) * ((uint128_t) f2);
|
||||||
|
|
||||||
|
r00 = ((uint64_t) r0) & mask;
|
||||||
|
carry = r0 >> 51;
|
||||||
|
r1 += carry;
|
||||||
|
r01 = ((uint64_t) r1) & mask;
|
||||||
|
carry = r1 >> 51;
|
||||||
|
r2 += carry;
|
||||||
|
r02 = ((uint64_t) r2) & mask;
|
||||||
|
carry = r2 >> 51;
|
||||||
|
r3 += carry;
|
||||||
|
r03 = ((uint64_t) r3) & mask;
|
||||||
|
carry = r3 >> 51;
|
||||||
|
r4 += carry;
|
||||||
|
r04 = ((uint64_t) r4) & mask;
|
||||||
|
carry = r4 >> 51;
|
||||||
|
r00 += 19ULL * (uint64_t) carry;
|
||||||
|
carry = r00 >> 51;
|
||||||
|
r00 &= mask;
|
||||||
|
r01 += (uint64_t) carry;
|
||||||
|
carry = r01 >> 51;
|
||||||
|
r01 &= mask;
|
||||||
|
r02 += (uint64_t) carry;
|
||||||
|
|
||||||
|
h[0] = r00;
|
||||||
|
h[1] = r01;
|
||||||
|
h[2] = r02;
|
||||||
|
h[3] = r03;
|
||||||
|
h[4] = r04;
|
||||||
|
}
|
||||||
|
|
||||||
|
/*
|
||||||
|
h = 2 * f * f
|
||||||
|
Can overlap h with f.
|
||||||
|
*/
|
||||||
|
|
||||||
|
static void
|
||||||
|
fe_sq2(fe h, const fe f)
|
||||||
|
{
|
||||||
|
const uint64_t mask = 0x7ffffffffffffULL;
|
||||||
|
uint128_t r0, r1, r2, r3, r4, carry;
|
||||||
|
uint64_t f0, f1, f2, f3, f4;
|
||||||
|
uint64_t f0_2, f1_2, f1_38, f2_38, f3_38, f3_19, f4_19;
|
||||||
|
uint64_t r00, r01, r02, r03, r04;
|
||||||
|
|
||||||
|
f0 = f[0];
|
||||||
|
f1 = f[1];
|
||||||
|
f2 = f[2];
|
||||||
|
f3 = f[3];
|
||||||
|
f4 = f[4];
|
||||||
|
|
||||||
|
f0_2 = f0 << 1;
|
||||||
|
f1_2 = f1 << 1;
|
||||||
|
|
||||||
|
f1_38 = 38ULL * f1;
|
||||||
|
f2_38 = 38ULL * f2;
|
||||||
|
f3_38 = 38ULL * f3;
|
||||||
|
|
||||||
|
f3_19 = 19ULL * f3;
|
||||||
|
f4_19 = 19ULL * f4;
|
||||||
|
|
||||||
|
r0 = ((uint128_t) f0 ) * ((uint128_t) f0);
|
||||||
|
r0 += ((uint128_t) f1_38) * ((uint128_t) f4);
|
||||||
|
r0 += ((uint128_t) f2_38) * ((uint128_t) f3);
|
||||||
|
|
||||||
|
r1 = ((uint128_t) f0_2 ) * ((uint128_t) f1);
|
||||||
|
r1 += ((uint128_t) f2_38) * ((uint128_t) f4);
|
||||||
|
r1 += ((uint128_t) f3_19) * ((uint128_t) f3);
|
||||||
|
|
||||||
|
r2 = ((uint128_t) f0_2 ) * ((uint128_t) f2);
|
||||||
|
r2 += ((uint128_t) f1 ) * ((uint128_t) f1);
|
||||||
|
r2 += ((uint128_t) f3_38) * ((uint128_t) f4);
|
||||||
|
|
||||||
|
r3 = ((uint128_t) f0_2 ) * ((uint128_t) f3);
|
||||||
|
r3 += ((uint128_t) f1_2 ) * ((uint128_t) f2);
|
||||||
|
r3 += ((uint128_t) f4_19) * ((uint128_t) f4);
|
||||||
|
|
||||||
|
r4 = ((uint128_t) f0_2 ) * ((uint128_t) f4);
|
||||||
|
r4 += ((uint128_t) f1_2 ) * ((uint128_t) f3);
|
||||||
|
r4 += ((uint128_t) f2 ) * ((uint128_t) f2);
|
||||||
|
|
||||||
|
r0 <<= 1;
|
||||||
|
r1 <<= 1;
|
||||||
|
r2 <<= 1;
|
||||||
|
r3 <<= 1;
|
||||||
|
r4 <<= 1;
|
||||||
|
|
||||||
|
r00 = ((uint64_t) r0) & mask;
|
||||||
|
carry = r0 >> 51;
|
||||||
|
r1 += carry;
|
||||||
|
r01 = ((uint64_t) r1) & mask;
|
||||||
|
carry = r1 >> 51;
|
||||||
|
r2 += carry;
|
||||||
|
r02 = ((uint64_t) r2) & mask;
|
||||||
|
carry = r2 >> 51;
|
||||||
|
r3 += carry;
|
||||||
|
r03 = ((uint64_t) r3) & mask;
|
||||||
|
carry = r3 >> 51;
|
||||||
|
r4 += carry;
|
||||||
|
r04 = ((uint64_t) r4) & mask;
|
||||||
|
carry = r4 >> 51;
|
||||||
|
r00 += 19ULL * (uint64_t) carry;
|
||||||
|
carry = r00 >> 51;
|
||||||
|
r00 &= mask;
|
||||||
|
r01 += (uint64_t) carry;
|
||||||
|
carry = r01 >> 51;
|
||||||
|
r01 &= mask;
|
||||||
|
r02 += (uint64_t) carry;
|
||||||
|
|
||||||
|
h[0] = r00;
|
||||||
|
h[1] = r01;
|
||||||
|
h[2] = r02;
|
||||||
|
h[3] = r03;
|
||||||
|
h[4] = r04;
|
||||||
|
}
|
||||||
@ -5,7 +5,11 @@
|
|||||||
#include <stdint.h>
|
#include <stdint.h>
|
||||||
|
|
||||||
#define fe crypto_core_curve25519_ref10_fe
|
#define fe crypto_core_curve25519_ref10_fe
|
||||||
|
#ifdef HAVE_TI_MODE
|
||||||
|
typedef uint64_t fe[5];
|
||||||
|
#else
|
||||||
typedef int32_t fe[10];
|
typedef int32_t fe[10];
|
||||||
|
#endif
|
||||||
|
|
||||||
/*
|
/*
|
||||||
fe means field element.
|
fe means field element.
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user