From: Daiki Ueno dueno@redhat.com
In curve448, the bit size of the order is slightly smaller than the one of p's. Adjust ecc_Bmodq_shifted accordingly.
Signed-off-by: Daiki Ueno dueno@redhat.com --- eccdata.c | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-)
diff --git a/eccdata.c b/eccdata.c index 9533d783..9be9afb5 100644 --- a/eccdata.c +++ b/eccdata.c @@ -1014,16 +1014,19 @@ output_curve (const struct ecc_curve *ecc, unsigned bits_per_limb) exit (EXIT_FAILURE); } } + } + else + printf ("#define ecc_Bmodp_shifted ecc_Bmodp\n"); + + if (bits < limb_size * bits_per_limb) + { mpz_set_ui (t, 0); - mpz_setbit (t, ecc->bit_size); + mpz_setbit (t, bits); mpz_sub (t, t, ecc->q); output_bignum ("ecc_Bmodq_shifted", t, limb_size, bits_per_limb); } else - { - printf ("#define ecc_Bmodp_shifted ecc_Bmodp\n"); - printf ("#define ecc_Bmodq_shifted ecc_Bmodq\n"); - } + printf ("#define ecc_Bmodq_shifted ecc_Bmodq\n");
mpz_add_ui (t, ecc->p, 1); mpz_fdiv_q_2exp (t, t, 1);