From: Daiki Ueno <du...@redhat.com>
In curve448, the bit size of the order is slightly smaller than the
one of p's. Adjust ecc_Bmodq_shifted accordingly.
Signed-off-by: Daiki Ueno <du...@redhat.com>
---
eccdata.c | 13 ++++++++-----
1 file changed, 8 insertions(+), 5 deletions(-)
diff --git a/eccdata.c b/eccdata.c
index 9533d783..9be9afb5 100644
--- a/eccdata.c
+++ b/eccdata.c
@@ -1014,16 +1014,19 @@ output_curve (const struct ecc_curve *ecc, unsigned
bits_per_limb)
exit (EXIT_FAILURE);
}
}
+ }
+ else
+ printf ("#define ecc_Bmodp_shifted ecc_Bmodp\n");
+
+ if (bits < limb_size * bits_per_limb)
+ {
mpz_set_ui (t, 0);
- mpz_setbit (t, ecc->bit_size);
+ mpz_setbit (t, bits);
mpz_sub (t, t, ecc->q);
output_bignum ("ecc_Bmodq_shifted", t, limb_size, bits_per_limb);
}
else
- {
- printf ("#define ecc_Bmodp_shifted ecc_Bmodp\n");
- printf ("#define ecc_Bmodq_shifted ecc_Bmodq\n");
- }
+ printf ("#define ecc_Bmodq_shifted ecc_Bmodq\n");
mpz_add_ui (t, ecc->p, 1);
mpz_fdiv_q_2exp (t, t, 1);
--
2.13.3
_______________________________________________
nettle-bugs mailing list
nettle-bugs@lists.lysator.liu.se
http://lists.lysator.liu.se/mailman/listinfo/nettle-bugs
