tommath/bn_mp_exptmod.c

111 lines
2.8 KiB
C
Raw Normal View History

#include "tommath_private.h"
2004-10-29 18:07:18 -04:00
#ifdef BN_MP_EXPTMOD_C
2003-02-28 11:08:34 -05:00
/* LibTomMath, multiple-precision integer library -- Tom St Denis
*
2003-08-04 21:24:44 -04:00
* LibTomMath is a library that provides multiple-precision
2003-02-28 11:08:34 -05:00
* integer arithmetic as well as number theoretic functionality.
*
2003-08-04 21:24:44 -04:00
* The library was designed directly after the MPI library by
2003-02-28 11:08:34 -05:00
* Michael Fromberger but has been written from scratch with
* additional optimizations in place.
*
* The library is free for all purposes without any express
* guarantee it works.
*/
2003-02-28 11:09:08 -05:00
/* this is a shell function that calls either the normal or Montgomery
2003-05-17 08:33:54 -04:00
* exptmod functions. Originally the call to the montgomery code was
2003-02-28 11:09:08 -05:00
* embedded in the normal function but that wasted alot of stack space
* for nothing (since 99% of the time the Montgomery code would be called)
*/
2017-09-20 10:59:43 -04:00
int mp_exptmod(const mp_int *G, const mp_int *X, const mp_int *P, mp_int *Y)
2003-02-28 11:08:34 -05:00
{
2017-08-29 16:23:48 -04:00
int dr;
2003-05-17 08:33:54 -04:00
2017-08-29 16:23:48 -04:00
/* modulus P must be positive */
if (P->sign == MP_NEG) {
return MP_VAL;
}
2003-05-17 08:33:54 -04:00
2017-08-29 16:23:48 -04:00
/* if exponent X is negative we have to recurse */
if (X->sign == MP_NEG) {
2004-10-29 18:07:18 -04:00
#ifdef BN_MP_INVMOD_C
2017-08-29 16:23:48 -04:00
mp_int tmpG, tmpX;
int err;
2003-05-17 08:33:54 -04:00
2017-08-29 16:23:48 -04:00
/* first compute 1/G mod P */
if ((err = mp_init(&tmpG)) != MP_OKAY) {
return err;
}
if ((err = mp_invmod(G, P, &tmpG)) != MP_OKAY) {
mp_clear(&tmpG);
return err;
}
2003-05-17 08:33:54 -04:00
2017-08-29 16:23:48 -04:00
/* now get |X| */
if ((err = mp_init(&tmpX)) != MP_OKAY) {
mp_clear(&tmpG);
return err;
}
if ((err = mp_abs(X, &tmpX)) != MP_OKAY) {
mp_clear_multi(&tmpG, &tmpX, NULL);
return err;
}
2003-05-17 08:33:54 -04:00
2017-08-29 16:23:48 -04:00
/* and now compute (1/G)**|X| instead of G**X [X < 0] */
err = mp_exptmod(&tmpG, &tmpX, P, Y);
mp_clear_multi(&tmpG, &tmpX, NULL);
return err;
2017-08-29 23:51:11 -04:00
#else
2017-08-29 16:23:48 -04:00
/* no invmod */
return MP_VAL;
2004-10-29 18:07:18 -04:00
#endif
2017-08-29 16:23:48 -04:00
}
2003-05-17 08:33:54 -04:00
2017-08-29 16:23:48 -04:00
/* modified diminished radix reduction */
2005-08-01 12:37:28 -04:00
#if defined(BN_MP_REDUCE_IS_2K_L_C) && defined(BN_MP_REDUCE_2K_L_C) && defined(BN_S_MP_EXPTMOD_C)
2017-08-29 16:23:48 -04:00
if (mp_reduce_is_2k_l(P) == MP_YES) {
return s_mp_exptmod(G, X, P, Y, 1);
}
2005-02-12 03:40:15 -05:00
#endif
2004-10-29 18:07:18 -04:00
#ifdef BN_MP_DR_IS_MODULUS_C
2017-08-29 16:23:48 -04:00
/* is it a DR modulus? */
dr = mp_dr_is_modulus(P);
2004-10-29 18:07:18 -04:00
#else
2017-08-29 16:23:48 -04:00
/* default to no */
dr = 0;
2004-10-29 18:07:18 -04:00
#endif
2003-08-04 21:24:44 -04:00
2004-10-29 18:07:18 -04:00
#ifdef BN_MP_REDUCE_IS_2K_C
2017-08-29 16:23:48 -04:00
/* if not, is it a unrestricted DR modulus? */
if (dr == 0) {
dr = mp_reduce_is_2k(P) << 1;
}
2004-10-29 18:07:18 -04:00
#endif
2017-08-29 23:51:11 -04:00
2017-08-29 16:23:48 -04:00
/* if the modulus is odd or dr != 0 use the montgomery method */
2004-10-29 18:07:18 -04:00
#ifdef BN_MP_EXPTMOD_FAST_C
2017-08-29 16:23:48 -04:00
if ((mp_isodd(P) == MP_YES) || (dr != 0)) {
return mp_exptmod_fast(G, X, P, Y, dr);
} else {
2004-10-29 18:07:18 -04:00
#endif
#ifdef BN_S_MP_EXPTMOD_C
2017-08-29 16:23:48 -04:00
/* otherwise use the generic Barrett reduction technique */
return s_mp_exptmod(G, X, P, Y, 0);
2004-10-29 18:07:18 -04:00
#else
2017-08-29 16:23:48 -04:00
/* no exptmod for evens */
return MP_VAL;
2004-10-29 18:07:18 -04:00
#endif
#ifdef BN_MP_EXPTMOD_FAST_C
2017-08-29 16:23:48 -04:00
}
2004-10-29 18:07:18 -04:00
#endif
2003-02-28 11:09:08 -05:00
}
2004-10-29 18:07:18 -04:00
#endif
2005-08-01 12:37:28 -04:00
2017-08-28 10:27:26 -04:00
/* ref: $Format:%D$ */
/* git commit: $Format:%H$ */
/* commit time: $Format:%ai$ */