/* $OpenBSD: ecs_ossl.c,v 1.6 2015/02/08 13:35:07 jsing Exp $ */

/*

 * Written by Nils Larsch for the OpenSSL project

 */

/* ====================================================================

 * Copyright (c) 1998-2004 The OpenSSL Project.  All rights reserved.

 *

 * Redistribution and use in source and binary forms, with or without

 * modification, are permitted provided that the following conditions

 * are met:

 *

 * 1. Redistributions of source code must retain the above copyright

 *    notice, this list of conditions and the following disclaimer.

 *

 * 2. Redistributions in binary form must reproduce the above copyright

 *    notice, this list of conditions and the following disclaimer in

 *    the documentation and/or other materials provided with the

 *    distribution.

 *

 * 3. All advertising materials mentioning features or use of this

 *    software must display the following acknowledgment:

 *    "This product includes software developed by the OpenSSL Project

 *    for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"

 *

 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to

 *    endorse or promote products derived from this software without

 *    prior written permission. For written permission, please contact

 *    openssl-core@OpenSSL.org.

 *

 * 5. Products derived from this software may not be called "OpenSSL"

 *    nor may "OpenSSL" appear in their names without prior written

 *    permission of the OpenSSL Project.

 *

 * 6. Redistributions of any form whatsoever must retain the following

 *    acknowledgment:

 *    "This product includes software developed by the OpenSSL Project

 *    for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"

 *

 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY

 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE

 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR

 * PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR

 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,

 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT

 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;

 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)

 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,

 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)

 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED

 * OF THE POSSIBILITY OF SUCH DAMAGE.

 * ====================================================================

 *

 * This product includes cryptographic software written by Eric Young

 * (eay@cryptsoft.com).  This product includes software written by Tim

 * Hudson (tjh@cryptsoft.com).

 *

 */

#include <openssl/opensslconf.h>

#include "ecs_locl.h"

#include <openssl/err.h>

#include <openssl/obj_mac.h>

#include <openssl/bn.h>

static ECDSA_SIG *ecdsa_do_sign(const unsigned char *dgst, int dlen,

    const BIGNUM *, const BIGNUM *, EC_KEY *eckey);

static int ecdsa_sign_setup(EC_KEY *eckey, BN_CTX *ctx_in, BIGNUM **kinvp,

    BIGNUM **rp);

static int ecdsa_do_verify(const unsigned char *dgst, int dgst_len,

    const ECDSA_SIG *sig, EC_KEY *eckey);

static ECDSA_METHOD openssl_ecdsa_meth = {

	.name = "OpenSSL ECDSA method",

	.ecdsa_do_sign = ecdsa_do_sign,

	.ecdsa_sign_setup = ecdsa_sign_setup,

	.ecdsa_do_verify = ecdsa_do_verify

};

const ECDSA_METHOD *

ECDSA_OpenSSL(void)

}

static int

ecdsa_sign_setup(EC_KEY *eckey, BN_CTX *ctx_in, BIGNUM **kinvp, BIGNUM **rp)

	const EC_GROUP *group;

	}

			    ERR_R_MALLOC_FAILURE);

		}

	} else

	}

	}

	}

	do {

		/* get random k */

		do

				    ECDSA_R_RANDOM_NUMBER_GENERATION_FAILED);

			}

		/* We do not want timing information to leak the length of k,

		 * so we compute G*k using an equivalent scalar of fixed

		 * bit-length. */

		/* compute r the x-coordinate of generator * k */

		}

		    NID_X9_62_prime_field) {

			    tmp_point, X, NULL, ctx)) {

				    ERR_R_EC_LIB);

			}

		}

#ifndef OPENSSL_NO_EC2M

		else /* NID_X9_62_characteristic_two_field */

		{

			    tmp_point, X, NULL, ctx)) {

				    ERR_R_EC_LIB);

			}

		}

#endif

		}

	/* compute the inverse of k */

	}

	/* clear old values if necessary */

	/* save the pre-computed values  */

	}

}

static ECDSA_SIG *

ecdsa_do_sign(const unsigned char *dgst, int dgst_len,

    const BIGNUM *in_kinv, const BIGNUM *in_r, EC_KEY *eckey)

	const BIGNUM *ckinv;

	const EC_GROUP   *group;

	ECDSA_SIG  *ret;

	ECDSA_DATA *ecdsa;

	const BIGNUM *priv_key;

	}

	}

	    (tmp = BN_new()) == NULL || (m = BN_new()) == NULL) {

	}

	}

	/* Need to truncate digest if it is too long: first truncate whole

	 * bytes.

	 */

	}

	/* If still too long truncate remaining bits with a shift */

	}

	do {

				    ERR_R_ECDSA_LIB);

			}

		} else {

				    ERR_R_MALLOC_FAILURE);

			}

		}

		}

		}

		}

			/* if kinv and r have been supplied by the caller

			 * don't to generate new kinv and r values */

				    ECDSA_R_NEED_NEW_SETUP_VALUES);

			}

		} else

			/* s != 0 => we have a valid signature */

	} while (1);

	}

}

static int

ecdsa_do_verify(const unsigned char *dgst, int dgst_len, const ECDSA_SIG *sig,

    EC_KEY *eckey)

	BN_CTX   *ctx;

	BIGNUM   *order, *u1, *u2, *m, *X;

	const EC_GROUP *group;

	const EC_POINT *pub_key;

	/* check input values */

	    (pub_key = EC_KEY_get0_public_key(eckey)) == NULL || sig == NULL) {

	}

	}

	}

	}

	    BN_ucmp(sig->r, order) >= 0 || BN_is_zero(sig->s)  ||

	    BN_is_negative(sig->s)      || BN_ucmp(sig->s, order) >= 0) {

	}

	/* calculate tmp1 = inv(S) mod order */

	}

	/* digest -> m */

	/* Need to truncate digest if it is too long: first truncate whole

	 * bytes.

	 */

	}

	/* If still too long truncate remaining bits with a shift */

	}

	/* u1 = m * tmp mod order */

	}

	/* u2 = r * w mod q */

	}

	}

	}

	    NID_X9_62_prime_field) {

		    point, X, NULL, ctx)) {

		}

	}

#ifndef OPENSSL_NO_EC2M

	else /* NID_X9_62_characteristic_two_field */

	{

		    point, X, NULL, ctx)) {

		}

	}

#endif

	}

	/*  if the signature is correct u1 is equal to sig->r */

}