ed25519/ed25519.h

   1 #define ED25519_SEEDBYTES      32
   2 #define ED25519_SECRETKEYBYTES 64
   3 #define ED25519_PUBLICKEYBYTES 32
   4
   5
   6 #ifdef ED25519_ref10
   7 #include "ref10/ed25519.h"
   8 #define ed25519_seckey        ed25519_ref10_seckey
   9 #define ed25519_seckey_expand ed25519_ref10_seckey_expand
  10 #define ed25519_pubkey        ed25519_ref10_pubkey
  11 #define ed25519_keygen        ed25519_ref10_keygen
  12 #include "ref10/ge.h"
  13
  14 #define GEZ(x) ((x).Z)
  15
  16 /* The basepoint multiplied by 8. */
  17 static const ge_cached ge_eightpoint = {
  18   /* YplusX */
  19   {
  20     48496028, -16430416, 15164263, 11885335, 60784617, -4866353, 46481863,
  21     -2771805, 9708580, 2387263
  22   },
  23   /* YmunusX */
  24   {
  25     -10173472, -5540046, 21277639, 4080693, 1932823, -14916249, -9515873,
  26     -21787995, -36575460, 29827857
  27   },
  28   /* Z */
  29   {
  30     25143927, -10256223, -3515585, 5715072, 19432778, -14905909, 22462083,
  31     -8862871, 13226552, 743677
  32   },
  33   /* T2d */
  34   {
  35     -784818, -8208065, -28479270, 5551579, 15746872, 4911053, 19117091,
  36     11267669, -24569594, 14624995
  37   }
  38 };
  39 inline static void ge_initeightpoint(void) {}
  40 #endif
  41
  42
  43 #ifdef ED25519_amd64_51_30k
  44 #define ED25519_amd64_common
  45 #else
  46 #ifdef ED25519_amd64_64_24k
  47 #define ED25519_amd64_common
  48 #endif
  49 #endif
  50
  51
  52 #ifdef ED25519_amd64_51_30k
  53 #include "amd64-51-30k/ed25519.h"
  54 #include "amd64-51-30k/ge25519.h"
  55 #define ed25519_seckey        ed25519_amd64_51_30k_seckey
  56 #define ed25519_seckey_expand ed25519_amd64_51_30k_seckey_expand
  57 #define ed25519_pubkey        ed25519_amd64_51_30k_pubkey
  58 #define ed25519_keygen        ed25519_amd64_51_30k_keygen
  59 #endif
  60
  61 #ifdef ED25519_amd64_64_24k
  62 #include "amd64-64-24k/ed25519.h"
  63 #include "amd64-64-24k/ge25519.h"
  64 #define ed25519_seckey        ed25519_amd64_64_seckey
  65 #define ed25519_seckey_expand ed25519_amd64_64_seckey_expand
  66 #define ed25519_pubkey        ed25519_amd64_64_pubkey
  67 #define ed25519_keygen        ed25519_amd64_64_keygen
  68 #endif
  69
  70
  71 // common
  72 #ifdef ED25519_amd64_common
  73 #define fe            fe25519
  74 #define ge_p1p1       ge25519_p1p1
  75 #define ge_p3         ge25519_p3
  76 #define ge_cached     ge25519_pniels
  77 #define ge_p1p1_to_p3 ge25519_p1p1_to_p3
  78 #define ge_p3_tobytes ge25519_pack
  79 #define ge_add        ge25519_pnielsadd_p1p1
  80
  81 #define ge_p3_batchtobytes_destructive_1      ge25519_batchpack_destructive_1
  82 #define ge_p3_batchtobytes_destructive_finish ge25519_batchpack_destructive_finish
  83
  84 #define GEZ(x) ((x).z)
  85 #endif
  86
  87
  88 #ifdef ED25519_amd64_51_30k
  89 static inline void ge_scalarmult_base(ge_p3 *gepk,const unsigned char *sk)
  90 {
  91         sc25519 scsk;
  92
  93         sc25519_from32bytes(&scsk,sk);
  94         ge25519_scalarmult_base(gepk,&scsk);
  95 }
  96
  97 /* The basepoint multiplied by 8. */
  98 static const ge25519_pniels ge_eightpoint = {
  99         // ysubx
 100         {{ 1880013609944032, 273850692840390, 1250787290086935, 789632210881694, 2001713562248987 }},
 101         // xaddy
 102         {{ 1149173309373852, 797611345273702, 1925224452816873, 2065787175387590, 160206517707811 }},
 103         // z
 104         {{ 1563516364368503, 383531986082622, 1251481213240650, 1657022631558786, 49907331879479 }},
 105         // t2d
 106         {{ 1700965895112270, 372560131616985, 329575203620664, 756160485635107, 981466775886086 }},
 107 };
 108 inline static void ge_initeightpoint(void) {}
 109 #endif
 110
 111
 112 #ifdef ED25519_amd64_64_24k
 113 static inline void ge_scalarmult_base(ge_p3 *gepk,const unsigned char *sk)
 114 {
 115         sc25519 scsk;
 116
 117         sc25519_from32bytes(&scsk,sk);
 118         ge25519_scalarmult_base(gepk,&scsk);
 119 }
 120
 121 /* The basepoint multiplied by 8. */
 122 static const ge25519_pniels ge_eightpoint = {
 123         // ysubx
 124         {{ 6788804652057281504U, 531290374162262565U, 6135835192563885415U, 8199018750971852188U }},
 125         // xaddy
 126         {{ 1960215011215539612U, 16708348392717346619U, 11897818088205565647U, 656205896531197613U }},
 127         // z
 128         {{ 15705615417005288055U, 5341641389565279826U, 1966574939768917451U, 204420431378348998U }},
 129         // t2d
 130         {{ 9713713562319586894U, 4328467261753610859U, 8262494979546083277U, 4020087914029409631U }},
 131 };
 132 inline static void ge_initeightpoint(void) {}
 133 #endif
 134
 135
 136 #ifdef ED25519_donna
 137 #define ED25519_CUSTOMRANDOM
 138 #define ED25519_CUSTOMHASH
 139 #include <sodium/crypto_hash_sha512.h>
 140 #include <sodium/randombytes.h>
 141 #include "ed25519-donna/ed25519-donna.h"
 142
 143 static int ed25519_seckey_expand(unsigned char *sk,const unsigned char *seed)
 144 {
 145         crypto_hash_sha512(sk,seed,32);
 146         sk[0] &= 248;
 147         sk[31] &= 127;
 148         sk[31] |= 64;
 149
 150         return 0;
 151 }
 152
 153 static int ed25519_seckey(unsigned char *sk)
 154 {
 155         unsigned char seed[32];
 156
 157         randombytes(seed,32);
 158         return ed25519_seckey_expand(sk,seed);
 159 }
 160
 161 static int ed25519_pubkey(unsigned char *pk,const unsigned char *sk)
 162 {
 163         bignum256modm a;
 164         ge25519 ALIGN(16) A;
 165
 166         expand256_modm(a,sk,32);
 167         ge25519_scalarmult_base_niels(&A,ge25519_niels_base_multiples,a);
 168         ge25519_pack(pk,&A);
 169
 170         return 0;
 171 }
 172
 173
 174 static int ed25519_keypair(unsigned char *pk,unsigned char *sk)
 175 {
 176         ed25519_seckey(sk);
 177         ed25519_pubkey(pk,sk);
 178
 179         return 0;
 180 }
 181 // hacky, but works for current stuff in main.c
 182 #define fe            bignum25519 ALIGN(16)
 183 #define ge_p1p1       ge25519_p1p1 ALIGN(16)
 184 #define ge_p3         ge25519 ALIGN(16)
 185 #define ge_cached     ge25519_pniels ALIGN(16)
 186
 187 #define ge_p1p1_to_p3 ge25519_p1p1_to_full
 188 #define ge_p3_tobytes ge25519_pack
 189
 190 #define ge_p3_batchtobytes_destructive_1      ge25519_batchpack_destructive_1
 191 #define ge_p3_batchtobytes_destructive_finish ge25519_batchpack_destructive_finish
 192
 193 #define GEZ(x) ((x).z)
 194
 195 DONNA_INLINE static void ge_add(ge25519_p1p1 *r,const ge25519 *p,const ge25519_pniels *q)
 196 {
 197         ge25519_pnielsadd_p1p1(r,p,q,0);
 198 }
 199
 200 DONNA_INLINE static void ge_scalarmult_base(ge25519 *A,const unsigned char *sk)
 201 {
 202         bignum256modm ALIGN(16) a;
 203         expand256_modm(a,sk,32);
 204         ge25519_scalarmult_base_niels(A,ge25519_niels_base_multiples,a);
 205 }
 206
 207 static ge25519_pniels ALIGN(16) ge_eightpoint;
 208 // portable representation of (basepoint * 8)
 209 static u8 fe_ysubx[32] = {
 210         0xE0,0xC3,0x64,0xC7,0xDC,0xAD,0x36,0x5E,
 211         0x25,0xAA,0x86,0xC8,0xC7,0x85,0x5F,0x07,
 212         0x67,0x65,0x1C,0x3D,0x99,0xDD,0x26,0x55,
 213         0x9C,0xB5,0x71,0x1E,0x1D,0xC4,0xC8,0x71,
 214 };
 215 static u8 fe_xaddy[32] = {
 216         0x9C,0xFD,0xE3,0xC2,0x2A,0x15,0x34,0x1B,
 217         0x3B,0xE7,0x62,0xAB,0x56,0xFA,0xDF,0xE7,
 218         0xCF,0xBE,0xB5,0x8D,0x83,0x8A,0x1D,0xA5,
 219         0xAD,0x3E,0x42,0x42,0xC9,0x4F,0x1B,0x09,
 220 };
 221 static u8 fe_z[32] = {
 222         0x77,0xAA,0x7F,0x85,0x02,0x8E,0xF5,0xD9,
 223         0x52,0xFE,0x8F,0xE6,0x8A,0x52,0x21,0x4A,
 224         0xCB,0x8D,0x1C,0x05,0x7D,0xAD,0x4A,0x1B,
 225         0xC6,0x7B,0x23,0x9D,0x4C,0x3F,0xD6,0x02,
 226 };
 227 static u8 fe_t2d[32] = {
 228         0x4E,0x06,0xF4,0xFB,0x04,0x0B,0xCE,0x86,
 229         0x6B,0x52,0xBB,0x96,0x0A,0xCE,0x11,0x3C,
 230         0xCD,0xEF,0x4A,0x46,0x68,0x47,0xAA,0x72,
 231         0x5F,0x65,0x90,0x91,0xA8,0x38,0xCA,0x37,
 232 };
 233
 234 // initialize from packed representation
 235 static void ge_initeightpoint(void)
 236 {
 237         memset(&ge_eightpoint,0,sizeof(ge_eightpoint));
 238         curve25519_expand(ge_eightpoint.ysubx,fe_ysubx);
 239         curve25519_expand(ge_eightpoint.xaddy,fe_xaddy);
 240         curve25519_expand(ge_eightpoint.z,fe_z);
 241         curve25519_expand(ge_eightpoint.t2d,fe_t2d);
 242 }
 243
 244 #endif