tommath.h 29 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781
  1. /* LibTomMath, multiple-precision integer library -- Tom St Denis */
  2. /* SPDX-License-Identifier: Unlicense */
  3. #ifndef BN_H_
  4. #define BN_H_
  5. #include <stdint.h>
  6. #include <stddef.h>
  7. #include <limits.h>
  8. #ifdef LTM_NO_FILE
  9. # warning LTM_NO_FILE has been deprecated, use MP_NO_FILE.
  10. # define MP_NO_FILE
  11. #endif
  12. #ifndef MP_NO_FILE
  13. # include <stdio.h>
  14. #endif
  15. #ifdef MP_8BIT
  16. # ifdef _MSC_VER
  17. # pragma message("8-bit (MP_8BIT) support is deprecated and will be dropped completely in the next version.")
  18. # else
  19. # warning "8-bit (MP_8BIT) support is deprecated and will be dropped completely in the next version."
  20. # endif
  21. #endif
  22. #ifdef __cplusplus
  23. extern "C" {
  24. #endif
  25. /* MS Visual C++ doesn't have a 128bit type for words, so fall back to 32bit MPI's (where words are 64bit) */
  26. #if (defined(_MSC_VER) || defined(__LLP64__) || defined(__e2k__) || defined(__LCC__)) && !defined(MP_64BIT)
  27. # define MP_32BIT
  28. #endif
  29. /* detect 64-bit mode if possible */
  30. #if defined(__x86_64__) || defined(_M_X64) || defined(_M_AMD64) || \
  31. defined(__powerpc64__) || defined(__ppc64__) || defined(__PPC64__) || \
  32. defined(__s390x__) || defined(__arch64__) || defined(__aarch64__) || \
  33. defined(__sparcv9) || defined(__sparc_v9__) || defined(__sparc64__) || \
  34. defined(__ia64) || defined(__ia64__) || defined(__itanium__) || defined(_M_IA64) || \
  35. defined(__LP64__) || defined(_LP64) || defined(__64BIT__)
  36. # if !(defined(MP_64BIT) || defined(MP_32BIT) || defined(MP_16BIT) || defined(MP_8BIT))
  37. # if defined(__GNUC__) && !defined(__hppa)
  38. /* we support 128bit integers only via: __attribute__((mode(TI))) */
  39. # define MP_64BIT
  40. # else
  41. /* otherwise we fall back to MP_32BIT even on 64bit platforms */
  42. # define MP_32BIT
  43. # endif
  44. # endif
  45. #endif
  46. #ifdef MP_DIGIT_BIT
  47. # error Defining MP_DIGIT_BIT is disallowed, use MP_8/16/31/32/64BIT
  48. #endif
  49. /* some default configurations.
  50. *
  51. * A "mp_digit" must be able to hold MP_DIGIT_BIT + 1 bits
  52. * A "mp_word" must be able to hold 2*MP_DIGIT_BIT + 1 bits
  53. *
  54. * At the very least a mp_digit must be able to hold 7 bits
  55. * [any size beyond that is ok provided it doesn't overflow the data type]
  56. */
  57. #ifdef MP_8BIT
  58. typedef uint8_t mp_digit;
  59. typedef uint16_t private_mp_word;
  60. # define MP_DIGIT_BIT 7
  61. #elif defined(MP_16BIT)
  62. typedef uint16_t mp_digit;
  63. typedef uint32_t private_mp_word;
  64. # define MP_DIGIT_BIT 15
  65. #elif defined(MP_64BIT)
  66. /* for GCC only on supported platforms */
  67. typedef uint64_t mp_digit;
  68. #if defined(__GNUC__)
  69. typedef unsigned long private_mp_word __attribute__((mode(TI)));
  70. #endif
  71. # define MP_DIGIT_BIT 60
  72. #else
  73. typedef uint32_t mp_digit;
  74. typedef uint64_t private_mp_word;
  75. # ifdef MP_31BIT
  76. /*
  77. * This is an extension that uses 31-bit digits.
  78. * Please be aware that not all functions support this size, especially s_mp_mul_digs_fast
  79. * will be reduced to work on small numbers only:
  80. * Up to 8 limbs, 248 bits instead of up to 512 limbs, 15872 bits with MP_28BIT.
  81. */
  82. # define MP_DIGIT_BIT 31
  83. # else
  84. /* default case is 28-bit digits, defines MP_28BIT as a handy macro to test */
  85. # define MP_DIGIT_BIT 28
  86. # define MP_28BIT
  87. # endif
  88. #endif
  89. /* mp_word is a private type */
  90. #define mp_word MP_DEPRECATED_PRAGMA("mp_word has been made private") private_mp_word
  91. #define MP_SIZEOF_MP_DIGIT (MP_DEPRECATED_PRAGMA("MP_SIZEOF_MP_DIGIT has been deprecated, use sizeof (mp_digit)") sizeof (mp_digit))
  92. #define MP_MASK ((((mp_digit)1)<<((mp_digit)MP_DIGIT_BIT))-((mp_digit)1))
  93. #define MP_DIGIT_MAX MP_MASK
  94. /* Primality generation flags */
  95. #define MP_PRIME_BBS 0x0001 /* BBS style prime */
  96. #define MP_PRIME_SAFE 0x0002 /* Safe prime (p-1)/2 == prime */
  97. #define MP_PRIME_2MSB_ON 0x0008 /* force 2nd MSB to 1 */
  98. #define LTM_PRIME_BBS (MP_DEPRECATED_PRAGMA("LTM_PRIME_BBS has been deprecated, use MP_PRIME_BBS") MP_PRIME_BBS)
  99. #define LTM_PRIME_SAFE (MP_DEPRECATED_PRAGMA("LTM_PRIME_SAFE has been deprecated, use MP_PRIME_SAFE") MP_PRIME_SAFE)
  100. #define LTM_PRIME_2MSB_ON (MP_DEPRECATED_PRAGMA("LTM_PRIME_2MSB_ON has been deprecated, use MP_PRIME_2MSB_ON") MP_PRIME_2MSB_ON)
  101. #ifdef MP_USE_ENUMS
  102. typedef enum {
  103. MP_ZPOS = 0, /* positive */
  104. MP_NEG = 1 /* negative */
  105. } mp_sign;
  106. typedef enum {
  107. MP_LT = -1, /* less than */
  108. MP_EQ = 0, /* equal */
  109. MP_GT = 1 /* greater than */
  110. } mp_ord;
  111. typedef enum {
  112. MP_NO = 0,
  113. MP_YES = 1
  114. } mp_bool;
  115. typedef enum {
  116. MP_OKAY = 0, /* no error */
  117. MP_ERR = -1, /* unknown error */
  118. MP_MEM = -2, /* out of mem */
  119. MP_VAL = -3, /* invalid input */
  120. MP_ITER = -4, /* maximum iterations reached */
  121. MP_BUF = -5 /* buffer overflow, supplied buffer too small */
  122. } mp_err;
  123. typedef enum {
  124. MP_LSB_FIRST = -1,
  125. MP_MSB_FIRST = 1
  126. } mp_order;
  127. typedef enum {
  128. MP_LITTLE_ENDIAN = -1,
  129. MP_NATIVE_ENDIAN = 0,
  130. MP_BIG_ENDIAN = 1
  131. } mp_endian;
  132. #else
  133. typedef int mp_sign;
  134. #define MP_ZPOS 0 /* positive integer */
  135. #define MP_NEG 1 /* negative */
  136. typedef int mp_ord;
  137. #define MP_LT -1 /* less than */
  138. #define MP_EQ 0 /* equal to */
  139. #define MP_GT 1 /* greater than */
  140. typedef int mp_bool;
  141. #define MP_YES 1
  142. #define MP_NO 0
  143. typedef int mp_err;
  144. #define MP_OKAY 0 /* no error */
  145. #define MP_ERR -1 /* unknown error */
  146. #define MP_MEM -2 /* out of mem */
  147. #define MP_VAL -3 /* invalid input */
  148. #define MP_RANGE (MP_DEPRECATED_PRAGMA("MP_RANGE has been deprecated in favor of MP_VAL") MP_VAL)
  149. #define MP_ITER -4 /* maximum iterations reached */
  150. #define MP_BUF -5 /* buffer overflow, supplied buffer too small */
  151. typedef int mp_order;
  152. #define MP_LSB_FIRST -1
  153. #define MP_MSB_FIRST 1
  154. typedef int mp_endian;
  155. #define MP_LITTLE_ENDIAN -1
  156. #define MP_NATIVE_ENDIAN 0
  157. #define MP_BIG_ENDIAN 1
  158. #endif
  159. /* tunable cutoffs */
  160. #ifndef MP_FIXED_CUTOFFS
  161. extern int
  162. KARATSUBA_MUL_CUTOFF,
  163. KARATSUBA_SQR_CUTOFF,
  164. TOOM_MUL_CUTOFF,
  165. TOOM_SQR_CUTOFF;
  166. #endif
  167. /* define this to use lower memory usage routines (exptmods mostly) */
  168. /* #define MP_LOW_MEM */
  169. /* default precision */
  170. #ifndef MP_PREC
  171. # ifndef MP_LOW_MEM
  172. # define PRIVATE_MP_PREC 32 /* default digits of precision */
  173. # elif defined(MP_8BIT)
  174. # define PRIVATE_MP_PREC 16 /* default digits of precision */
  175. # else
  176. # define PRIVATE_MP_PREC 8 /* default digits of precision */
  177. # endif
  178. # define MP_PREC (MP_DEPRECATED_PRAGMA("MP_PREC is an internal macro") PRIVATE_MP_PREC)
  179. #endif
  180. /* size of comba arrays, should be at least 2 * 2**(BITS_PER_WORD - BITS_PER_DIGIT*2) */
  181. #define PRIVATE_MP_WARRAY (int)(1uLL << (((CHAR_BIT * sizeof(private_mp_word)) - (2 * MP_DIGIT_BIT)) + 1))
  182. #define MP_WARRAY (MP_DEPRECATED_PRAGMA("MP_WARRAY is an internal macro") PRIVATE_MP_WARRAY)
  183. #if defined(__GNUC__) && __GNUC__ >= 4
  184. # define MP_NULL_TERMINATED __attribute__((sentinel))
  185. #else
  186. # define MP_NULL_TERMINATED
  187. #endif
  188. /*
  189. * MP_WUR - warn unused result
  190. * ---------------------------
  191. *
  192. * The result of functions annotated with MP_WUR must be
  193. * checked and cannot be ignored.
  194. *
  195. * Most functions in libtommath return an error code.
  196. * This error code must be checked in order to prevent crashes or invalid
  197. * results.
  198. *
  199. * If you still want to avoid the error checks for quick and dirty programs
  200. * without robustness guarantees, you can `#define MP_WUR` before including
  201. * tommath.h, disabling the warnings.
  202. */
  203. #ifndef MP_WUR
  204. # if defined(__GNUC__) && __GNUC__ >= 4
  205. # define MP_WUR __attribute__((warn_unused_result))
  206. # else
  207. # define MP_WUR
  208. # endif
  209. #endif
  210. #if defined(__GNUC__) && (__GNUC__ * 100 + __GNUC_MINOR__ >= 405)
  211. # define MP_DEPRECATED(x) __attribute__((deprecated("replaced by " #x)))
  212. # define PRIVATE_MP_DEPRECATED_PRAGMA(s) _Pragma(#s)
  213. # define MP_DEPRECATED_PRAGMA(s) PRIVATE_MP_DEPRECATED_PRAGMA(GCC warning s)
  214. #elif defined(_MSC_VER) && _MSC_VER >= 1500
  215. # define MP_DEPRECATED(x) __declspec(deprecated("replaced by " #x))
  216. # define MP_DEPRECATED_PRAGMA(s) __pragma(message(s))
  217. #else
  218. # define MP_DEPRECATED(s)
  219. # define MP_DEPRECATED_PRAGMA(s)
  220. #endif
  221. #define DIGIT_BIT (MP_DEPRECATED_PRAGMA("DIGIT_BIT macro is deprecated, MP_DIGIT_BIT instead") MP_DIGIT_BIT)
  222. #define USED(m) (MP_DEPRECATED_PRAGMA("USED macro is deprecated, use z->used instead") (m)->used)
  223. #define DIGIT(m, k) (MP_DEPRECATED_PRAGMA("DIGIT macro is deprecated, use z->dp instead") (m)->dp[(k)])
  224. #define SIGN(m) (MP_DEPRECATED_PRAGMA("SIGN macro is deprecated, use z->sign instead") (m)->sign)
  225. /* the infamous mp_int structure */
  226. typedef struct {
  227. int used, alloc;
  228. mp_sign sign;
  229. mp_digit *dp;
  230. } mp_int;
  231. /* callback for mp_prime_random, should fill dst with random bytes and return how many read [upto len] */
  232. typedef int private_mp_prime_callback(unsigned char *dst, int len, void *dat);
  233. typedef private_mp_prime_callback MP_DEPRECATED(mp_rand_source) ltm_prime_callback;
  234. /* error code to char* string */
  235. const char *mp_error_to_string(mp_err code) MP_WUR;
  236. /* ---> init and deinit bignum functions <--- */
  237. /* init a bignum */
  238. mp_err mp_init(mp_int *a) MP_WUR;
  239. /* free a bignum */
  240. void mp_clear(mp_int *a);
  241. /* init a null terminated series of arguments */
  242. mp_err mp_init_multi(mp_int *mp, ...) MP_NULL_TERMINATED MP_WUR;
  243. /* clear a null terminated series of arguments */
  244. void mp_clear_multi(mp_int *mp, ...) MP_NULL_TERMINATED;
  245. /* exchange two ints */
  246. void mp_exch(mp_int *a, mp_int *b);
  247. /* shrink ram required for a bignum */
  248. mp_err mp_shrink(mp_int *a) MP_WUR;
  249. /* grow an int to a given size */
  250. mp_err mp_grow(mp_int *a, int size) MP_WUR;
  251. /* init to a given number of digits */
  252. mp_err mp_init_size(mp_int *a, int size) MP_WUR;
  253. /* ---> Basic Manipulations <--- */
  254. #define mp_iszero(a) (((a)->used == 0) ? MP_YES : MP_NO)
  255. mp_bool mp_iseven(const mp_int *a) MP_WUR;
  256. mp_bool mp_isodd(const mp_int *a) MP_WUR;
  257. #define mp_isneg(a) (((a)->sign != MP_ZPOS) ? MP_YES : MP_NO)
  258. /* set to zero */
  259. void mp_zero(mp_int *a);
  260. /* get and set doubles */
  261. double mp_get_double(const mp_int *a) MP_WUR;
  262. mp_err mp_set_double(mp_int *a, double b) MP_WUR;
  263. /* get integer, set integer and init with integer (int32_t) */
  264. int32_t mp_get_i32(const mp_int *a) MP_WUR;
  265. void mp_set_i32(mp_int *a, int32_t b);
  266. mp_err mp_init_i32(mp_int *a, int32_t b) MP_WUR;
  267. /* get integer, set integer and init with integer, behaves like two complement for negative numbers (uint32_t) */
  268. #define mp_get_u32(a) ((uint32_t)mp_get_i32(a))
  269. void mp_set_u32(mp_int *a, uint32_t b);
  270. mp_err mp_init_u32(mp_int *a, uint32_t b) MP_WUR;
  271. /* get integer, set integer and init with integer (int64_t) */
  272. int64_t mp_get_i64(const mp_int *a) MP_WUR;
  273. void mp_set_i64(mp_int *a, int64_t b);
  274. mp_err mp_init_i64(mp_int *a, int64_t b) MP_WUR;
  275. /* get integer, set integer and init with integer, behaves like two complement for negative numbers (uint64_t) */
  276. #define mp_get_u64(a) ((uint64_t)mp_get_i64(a))
  277. void mp_set_u64(mp_int *a, uint64_t b);
  278. mp_err mp_init_u64(mp_int *a, uint64_t b) MP_WUR;
  279. /* get magnitude */
  280. uint32_t mp_get_mag_u32(const mp_int *a) MP_WUR;
  281. uint64_t mp_get_mag_u64(const mp_int *a) MP_WUR;
  282. unsigned long mp_get_mag_ul(const mp_int *a) MP_WUR;
  283. unsigned long long mp_get_mag_ull(const mp_int *a) MP_WUR;
  284. /* get integer, set integer (long) */
  285. long mp_get_l(const mp_int *a) MP_WUR;
  286. void mp_set_l(mp_int *a, long b);
  287. mp_err mp_init_l(mp_int *a, long b) MP_WUR;
  288. /* get integer, set integer (unsigned long) */
  289. #define mp_get_ul(a) ((unsigned long)mp_get_l(a))
  290. void mp_set_ul(mp_int *a, unsigned long b);
  291. mp_err mp_init_ul(mp_int *a, unsigned long b) MP_WUR;
  292. /* get integer, set integer (long long) */
  293. long long mp_get_ll(const mp_int *a) MP_WUR;
  294. void mp_set_ll(mp_int *a, long long b);
  295. mp_err mp_init_ll(mp_int *a, long long b) MP_WUR;
  296. /* get integer, set integer (unsigned long long) */
  297. #define mp_get_ull(a) ((unsigned long long)mp_get_ll(a))
  298. void mp_set_ull(mp_int *a, unsigned long long b);
  299. mp_err mp_init_ull(mp_int *a, unsigned long long b) MP_WUR;
  300. /* set to single unsigned digit, up to MP_DIGIT_MAX */
  301. void mp_set(mp_int *a, mp_digit b);
  302. mp_err mp_init_set(mp_int *a, mp_digit b) MP_WUR;
  303. /* get integer, set integer and init with integer (deprecated) */
  304. MP_DEPRECATED(mp_get_mag_u32/mp_get_u32) unsigned long mp_get_int(const mp_int *a) MP_WUR;
  305. MP_DEPRECATED(mp_get_mag_ul/mp_get_ul) unsigned long mp_get_long(const mp_int *a) MP_WUR;
  306. MP_DEPRECATED(mp_get_mag_ull/mp_get_ull) unsigned long long mp_get_long_long(const mp_int *a) MP_WUR;
  307. MP_DEPRECATED(mp_set_ul) mp_err mp_set_int(mp_int *a, unsigned long b);
  308. MP_DEPRECATED(mp_set_ul) mp_err mp_set_long(mp_int *a, unsigned long b);
  309. MP_DEPRECATED(mp_set_ull) mp_err mp_set_long_long(mp_int *a, unsigned long long b);
  310. MP_DEPRECATED(mp_init_ul) mp_err mp_init_set_int(mp_int *a, unsigned long b) MP_WUR;
  311. /* copy, b = a */
  312. mp_err mp_copy(const mp_int *a, mp_int *b) MP_WUR;
  313. /* inits and copies, a = b */
  314. mp_err mp_init_copy(mp_int *a, const mp_int *b) MP_WUR;
  315. /* trim unused digits */
  316. void mp_clamp(mp_int *a);
  317. /* export binary data */
  318. MP_DEPRECATED(mp_pack) mp_err mp_export(void *rop, size_t *countp, int order, size_t size,
  319. int endian, size_t nails, const mp_int *op) MP_WUR;
  320. /* import binary data */
  321. MP_DEPRECATED(mp_unpack) mp_err mp_import(mp_int *rop, size_t count, int order,
  322. size_t size, int endian, size_t nails,
  323. const void *op) MP_WUR;
  324. /* unpack binary data */
  325. mp_err mp_unpack(mp_int *rop, size_t count, mp_order order, size_t size, mp_endian endian,
  326. size_t nails, const void *op) MP_WUR;
  327. /* pack binary data */
  328. size_t mp_pack_count(const mp_int *a, size_t nails, size_t size) MP_WUR;
  329. mp_err mp_pack(void *rop, size_t maxcount, size_t *written, mp_order order, size_t size,
  330. mp_endian endian, size_t nails, const mp_int *op) MP_WUR;
  331. /* ---> digit manipulation <--- */
  332. /* right shift by "b" digits */
  333. void mp_rshd(mp_int *a, int b);
  334. /* left shift by "b" digits */
  335. mp_err mp_lshd(mp_int *a, int b) MP_WUR;
  336. /* c = a / 2**b, implemented as c = a >> b */
  337. mp_err mp_div_2d(const mp_int *a, int b, mp_int *c, mp_int *d) MP_WUR;
  338. /* b = a/2 */
  339. mp_err mp_div_2(const mp_int *a, mp_int *b) MP_WUR;
  340. /* a/3 => 3c + d == a */
  341. mp_err mp_div_3(const mp_int *a, mp_int *c, mp_digit *d) MP_WUR;
  342. /* c = a * 2**b, implemented as c = a << b */
  343. mp_err mp_mul_2d(const mp_int *a, int b, mp_int *c) MP_WUR;
  344. /* b = a*2 */
  345. mp_err mp_mul_2(const mp_int *a, mp_int *b) MP_WUR;
  346. /* c = a mod 2**b */
  347. mp_err mp_mod_2d(const mp_int *a, int b, mp_int *c) MP_WUR;
  348. /* computes a = 2**b */
  349. mp_err mp_2expt(mp_int *a, int b) MP_WUR;
  350. /* Counts the number of lsbs which are zero before the first zero bit */
  351. int mp_cnt_lsb(const mp_int *a) MP_WUR;
  352. /* I Love Earth! */
  353. /* makes a pseudo-random mp_int of a given size */
  354. mp_err mp_rand(mp_int *a, int digits) MP_WUR;
  355. /* makes a pseudo-random small int of a given size */
  356. MP_DEPRECATED(mp_rand) mp_err mp_rand_digit(mp_digit *r) MP_WUR;
  357. /* use custom random data source instead of source provided the platform */
  358. void mp_rand_source(mp_err(*source)(void *out, size_t size));
  359. #ifdef MP_PRNG_ENABLE_LTM_RNG
  360. # warning MP_PRNG_ENABLE_LTM_RNG has been deprecated, use mp_rand_source instead.
  361. /* A last resort to provide random data on systems without any of the other
  362. * implemented ways to gather entropy.
  363. * It is compatible with `rng_get_bytes()` from libtomcrypt so you could
  364. * provide that one and then set `ltm_rng = rng_get_bytes;` */
  365. extern unsigned long (*ltm_rng)(unsigned char *out, unsigned long outlen, void (*callback)(void));
  366. extern void (*ltm_rng_callback)(void);
  367. #endif
  368. /* ---> binary operations <--- */
  369. /* Checks the bit at position b and returns MP_YES
  370. * if the bit is 1, MP_NO if it is 0 and MP_VAL
  371. * in case of error
  372. */
  373. MP_DEPRECATED(s_mp_get_bit) int mp_get_bit(const mp_int *a, int b) MP_WUR;
  374. /* c = a XOR b (two complement) */
  375. MP_DEPRECATED(mp_xor) mp_err mp_tc_xor(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  376. mp_err mp_xor(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  377. /* c = a OR b (two complement) */
  378. MP_DEPRECATED(mp_or) mp_err mp_tc_or(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  379. mp_err mp_or(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  380. /* c = a AND b (two complement) */
  381. MP_DEPRECATED(mp_and) mp_err mp_tc_and(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  382. mp_err mp_and(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  383. /* b = ~a (bitwise not, two complement) */
  384. mp_err mp_complement(const mp_int *a, mp_int *b) MP_WUR;
  385. /* right shift with sign extension */
  386. MP_DEPRECATED(mp_signed_rsh) mp_err mp_tc_div_2d(const mp_int *a, int b, mp_int *c) MP_WUR;
  387. mp_err mp_signed_rsh(const mp_int *a, int b, mp_int *c) MP_WUR;
  388. /* ---> Basic arithmetic <--- */
  389. /* b = -a */
  390. mp_err mp_neg(const mp_int *a, mp_int *b) MP_WUR;
  391. /* b = |a| */
  392. mp_err mp_abs(const mp_int *a, mp_int *b) MP_WUR;
  393. /* compare a to b */
  394. mp_ord mp_cmp(const mp_int *a, const mp_int *b) MP_WUR;
  395. /* compare |a| to |b| */
  396. mp_ord mp_cmp_mag(const mp_int *a, const mp_int *b) MP_WUR;
  397. /* c = a + b */
  398. mp_err mp_add(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  399. /* c = a - b */
  400. mp_err mp_sub(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  401. /* c = a * b */
  402. mp_err mp_mul(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  403. /* b = a*a */
  404. mp_err mp_sqr(const mp_int *a, mp_int *b) MP_WUR;
  405. /* a/b => cb + d == a */
  406. mp_err mp_div(const mp_int *a, const mp_int *b, mp_int *c, mp_int *d) MP_WUR;
  407. /* c = a mod b, 0 <= c < b */
  408. mp_err mp_mod(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  409. /* Increment "a" by one like "a++". Changes input! */
  410. mp_err mp_incr(mp_int *a) MP_WUR;
  411. /* Decrement "a" by one like "a--". Changes input! */
  412. mp_err mp_decr(mp_int *a) MP_WUR;
  413. /* ---> single digit functions <--- */
  414. /* compare against a single digit */
  415. mp_ord mp_cmp_d(const mp_int *a, mp_digit b) MP_WUR;
  416. /* c = a + b */
  417. mp_err mp_add_d(const mp_int *a, mp_digit b, mp_int *c) MP_WUR;
  418. /* c = a - b */
  419. mp_err mp_sub_d(const mp_int *a, mp_digit b, mp_int *c) MP_WUR;
  420. /* c = a * b */
  421. mp_err mp_mul_d(const mp_int *a, mp_digit b, mp_int *c) MP_WUR;
  422. /* a/b => cb + d == a */
  423. mp_err mp_div_d(const mp_int *a, mp_digit b, mp_int *c, mp_digit *d) MP_WUR;
  424. /* c = a mod b, 0 <= c < b */
  425. mp_err mp_mod_d(const mp_int *a, mp_digit b, mp_digit *c) MP_WUR;
  426. /* ---> number theory <--- */
  427. /* d = a + b (mod c) */
  428. mp_err mp_addmod(const mp_int *a, const mp_int *b, const mp_int *c, mp_int *d) MP_WUR;
  429. /* d = a - b (mod c) */
  430. mp_err mp_submod(const mp_int *a, const mp_int *b, const mp_int *c, mp_int *d) MP_WUR;
  431. /* d = a * b (mod c) */
  432. mp_err mp_mulmod(const mp_int *a, const mp_int *b, const mp_int *c, mp_int *d) MP_WUR;
  433. /* c = a * a (mod b) */
  434. mp_err mp_sqrmod(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  435. /* c = 1/a (mod b) */
  436. mp_err mp_invmod(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  437. /* c = (a, b) */
  438. mp_err mp_gcd(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  439. /* produces value such that U1*a + U2*b = U3 */
  440. mp_err mp_exteuclid(const mp_int *a, const mp_int *b, mp_int *U1, mp_int *U2, mp_int *U3) MP_WUR;
  441. /* c = [a, b] or (a*b)/(a, b) */
  442. mp_err mp_lcm(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  443. /* finds one of the b'th root of a, such that |c|**b <= |a|
  444. *
  445. * returns error if a < 0 and b is even
  446. */
  447. mp_err mp_root_u32(const mp_int *a, uint32_t b, mp_int *c) MP_WUR;
  448. MP_DEPRECATED(mp_root_u32) mp_err mp_n_root(const mp_int *a, mp_digit b, mp_int *c) MP_WUR;
  449. MP_DEPRECATED(mp_root_u32) mp_err mp_n_root_ex(const mp_int *a, mp_digit b, mp_int *c, int fast) MP_WUR;
  450. /* special sqrt algo */
  451. mp_err mp_sqrt(const mp_int *arg, mp_int *ret) MP_WUR;
  452. /* special sqrt (mod prime) */
  453. mp_err mp_sqrtmod_prime(const mp_int *n, const mp_int *prime, mp_int *ret) MP_WUR;
  454. /* is number a square? */
  455. mp_err mp_is_square(const mp_int *arg, mp_bool *ret) MP_WUR;
  456. /* computes the jacobi c = (a | n) (or Legendre if b is prime) */
  457. MP_DEPRECATED(mp_kronecker) mp_err mp_jacobi(const mp_int *a, const mp_int *n, int *c) MP_WUR;
  458. /* computes the Kronecker symbol c = (a | p) (like jacobi() but with {a,p} in Z */
  459. mp_err mp_kronecker(const mp_int *a, const mp_int *p, int *c) MP_WUR;
  460. /* used to setup the Barrett reduction for a given modulus b */
  461. mp_err mp_reduce_setup(mp_int *a, const mp_int *b) MP_WUR;
  462. /* Barrett Reduction, computes a (mod b) with a precomputed value c
  463. *
  464. * Assumes that 0 < x <= m*m, note if 0 > x > -(m*m) then you can merely
  465. * compute the reduction as -1 * mp_reduce(mp_abs(x)) [pseudo code].
  466. */
  467. mp_err mp_reduce(mp_int *x, const mp_int *m, const mp_int *mu) MP_WUR;
  468. /* setups the montgomery reduction */
  469. mp_err mp_montgomery_setup(const mp_int *n, mp_digit *rho) MP_WUR;
  470. /* computes a = B**n mod b without division or multiplication useful for
  471. * normalizing numbers in a Montgomery system.
  472. */
  473. mp_err mp_montgomery_calc_normalization(mp_int *a, const mp_int *b) MP_WUR;
  474. /* computes x/R == x (mod N) via Montgomery Reduction */
  475. mp_err mp_montgomery_reduce(mp_int *x, const mp_int *n, mp_digit rho) MP_WUR;
  476. /* returns 1 if a is a valid DR modulus */
  477. mp_bool mp_dr_is_modulus(const mp_int *a) MP_WUR;
  478. /* sets the value of "d" required for mp_dr_reduce */
  479. void mp_dr_setup(const mp_int *a, mp_digit *d);
  480. /* reduces a modulo n using the Diminished Radix method */
  481. mp_err mp_dr_reduce(mp_int *x, const mp_int *n, mp_digit k) MP_WUR;
  482. /* returns true if a can be reduced with mp_reduce_2k */
  483. mp_bool mp_reduce_is_2k(const mp_int *a) MP_WUR;
  484. /* determines k value for 2k reduction */
  485. mp_err mp_reduce_2k_setup(const mp_int *a, mp_digit *d) MP_WUR;
  486. /* reduces a modulo b where b is of the form 2**p - k [0 <= a] */
  487. mp_err mp_reduce_2k(mp_int *a, const mp_int *n, mp_digit d) MP_WUR;
  488. /* returns true if a can be reduced with mp_reduce_2k_l */
  489. mp_bool mp_reduce_is_2k_l(const mp_int *a) MP_WUR;
  490. /* determines k value for 2k reduction */
  491. mp_err mp_reduce_2k_setup_l(const mp_int *a, mp_int *d) MP_WUR;
  492. /* reduces a modulo b where b is of the form 2**p - k [0 <= a] */
  493. mp_err mp_reduce_2k_l(mp_int *a, const mp_int *n, const mp_int *d) MP_WUR;
  494. /* Y = G**X (mod P) */
  495. mp_err mp_exptmod(const mp_int *G, const mp_int *X, const mp_int *P, mp_int *Y) MP_WUR;
  496. /* ---> Primes <--- */
  497. /* number of primes */
  498. #ifdef MP_8BIT
  499. # define PRIVATE_MP_PRIME_TAB_SIZE 31
  500. #else
  501. # define PRIVATE_MP_PRIME_TAB_SIZE 256
  502. #endif
  503. #define PRIME_SIZE (MP_DEPRECATED_PRAGMA("PRIME_SIZE has been made internal") PRIVATE_MP_PRIME_TAB_SIZE)
  504. /* table of first PRIME_SIZE primes */
  505. MP_DEPRECATED(internal) extern const mp_digit ltm_prime_tab[PRIVATE_MP_PRIME_TAB_SIZE];
  506. /* result=1 if a is divisible by one of the first PRIME_SIZE primes */
  507. MP_DEPRECATED(mp_prime_is_prime) mp_err mp_prime_is_divisible(const mp_int *a, mp_bool *result) MP_WUR;
  508. /* performs one Fermat test of "a" using base "b".
  509. * Sets result to 0 if composite or 1 if probable prime
  510. */
  511. mp_err mp_prime_fermat(const mp_int *a, const mp_int *b, mp_bool *result) MP_WUR;
  512. /* performs one Miller-Rabin test of "a" using base "b".
  513. * Sets result to 0 if composite or 1 if probable prime
  514. */
  515. mp_err mp_prime_miller_rabin(const mp_int *a, const mp_int *b, mp_bool *result) MP_WUR;
  516. /* This gives [for a given bit size] the number of trials required
  517. * such that Miller-Rabin gives a prob of failure lower than 2^-96
  518. */
  519. int mp_prime_rabin_miller_trials(int size) MP_WUR;
  520. /* performs one strong Lucas-Selfridge test of "a".
  521. * Sets result to 0 if composite or 1 if probable prime
  522. */
  523. mp_err mp_prime_strong_lucas_selfridge(const mp_int *a, mp_bool *result) MP_WUR;
  524. /* performs one Frobenius test of "a" as described by Paul Underwood.
  525. * Sets result to 0 if composite or 1 if probable prime
  526. */
  527. mp_err mp_prime_frobenius_underwood(const mp_int *N, mp_bool *result) MP_WUR;
  528. /* performs t random rounds of Miller-Rabin on "a" additional to
  529. * bases 2 and 3. Also performs an initial sieve of trial
  530. * division. Determines if "a" is prime with probability
  531. * of error no more than (1/4)**t.
  532. * Both a strong Lucas-Selfridge to complete the BPSW test
  533. * and a separate Frobenius test are available at compile time.
  534. * With t<0 a deterministic test is run for primes up to
  535. * 318665857834031151167461. With t<13 (abs(t)-13) additional
  536. * tests with sequential small primes are run starting at 43.
  537. * Is Fips 186.4 compliant if called with t as computed by
  538. * mp_prime_rabin_miller_trials();
  539. *
  540. * Sets result to 1 if probably prime, 0 otherwise
  541. */
  542. mp_err mp_prime_is_prime(const mp_int *a, int t, mp_bool *result) MP_WUR;
  543. /* finds the next prime after the number "a" using "t" trials
  544. * of Miller-Rabin.
  545. *
  546. * bbs_style = 1 means the prime must be congruent to 3 mod 4
  547. */
  548. mp_err mp_prime_next_prime(mp_int *a, int t, int bbs_style) MP_WUR;
  549. /* makes a truly random prime of a given size (bytes),
  550. * call with bbs = 1 if you want it to be congruent to 3 mod 4
  551. *
  552. * You have to supply a callback which fills in a buffer with random bytes. "dat" is a parameter you can
  553. * have passed to the callback (e.g. a state or something). This function doesn't use "dat" itself
  554. * so it can be NULL
  555. *
  556. * The prime generated will be larger than 2^(8*size).
  557. */
  558. #define mp_prime_random(a, t, size, bbs, cb, dat) (MP_DEPRECATED_PRAGMA("mp_prime_random has been deprecated, use mp_prime_rand instead") mp_prime_random_ex(a, t, ((size) * 8) + 1, (bbs==1)?MP_PRIME_BBS:0, cb, dat))
  559. /* makes a truly random prime of a given size (bits),
  560. *
  561. * Flags are as follows:
  562. *
  563. * MP_PRIME_BBS - make prime congruent to 3 mod 4
  564. * MP_PRIME_SAFE - make sure (p-1)/2 is prime as well (implies MP_PRIME_BBS)
  565. * MP_PRIME_2MSB_ON - make the 2nd highest bit one
  566. *
  567. * You have to supply a callback which fills in a buffer with random bytes. "dat" is a parameter you can
  568. * have passed to the callback (e.g. a state or something). This function doesn't use "dat" itself
  569. * so it can be NULL
  570. *
  571. */
  572. MP_DEPRECATED(mp_prime_rand) mp_err mp_prime_random_ex(mp_int *a, int t, int size, int flags,
  573. private_mp_prime_callback cb, void *dat) MP_WUR;
  574. mp_err mp_prime_rand(mp_int *a, int t, int size, int flags) MP_WUR;
  575. /* Integer logarithm to integer base */
  576. mp_err mp_log_u32(const mp_int *a, uint32_t base, uint32_t *c) MP_WUR;
  577. /* c = a**b */
  578. mp_err mp_expt_u32(const mp_int *a, uint32_t b, mp_int *c) MP_WUR;
  579. MP_DEPRECATED(mp_expt_u32) mp_err mp_expt_d(const mp_int *a, mp_digit b, mp_int *c) MP_WUR;
  580. MP_DEPRECATED(mp_expt_u32) mp_err mp_expt_d_ex(const mp_int *a, mp_digit b, mp_int *c, int fast) MP_WUR;
  581. /* ---> radix conversion <--- */
  582. int mp_count_bits(const mp_int *a) MP_WUR;
  583. MP_DEPRECATED(mp_ubin_size) int mp_unsigned_bin_size(const mp_int *a) MP_WUR;
  584. MP_DEPRECATED(mp_from_ubin) mp_err mp_read_unsigned_bin(mp_int *a, const unsigned char *b, int c) MP_WUR;
  585. MP_DEPRECATED(mp_to_ubin) mp_err mp_to_unsigned_bin(const mp_int *a, unsigned char *b) MP_WUR;
  586. MP_DEPRECATED(mp_to_ubin) mp_err mp_to_unsigned_bin_n(const mp_int *a, unsigned char *b, unsigned long *outlen) MP_WUR;
  587. MP_DEPRECATED(mp_sbin_size) int mp_signed_bin_size(const mp_int *a) MP_WUR;
  588. MP_DEPRECATED(mp_from_sbin) mp_err mp_read_signed_bin(mp_int *a, const unsigned char *b, int c) MP_WUR;
  589. MP_DEPRECATED(mp_to_sbin) mp_err mp_to_signed_bin(const mp_int *a, unsigned char *b) MP_WUR;
  590. MP_DEPRECATED(mp_to_sbin) mp_err mp_to_signed_bin_n(const mp_int *a, unsigned char *b, unsigned long *outlen) MP_WUR;
  591. size_t mp_ubin_size(const mp_int *a) MP_WUR;
  592. mp_err mp_from_ubin(mp_int *a, const unsigned char *buf, size_t size) MP_WUR;
  593. mp_err mp_to_ubin(const mp_int *a, unsigned char *buf, size_t maxlen, size_t *written) MP_WUR;
  594. size_t mp_sbin_size(const mp_int *a) MP_WUR;
  595. mp_err mp_from_sbin(mp_int *a, const unsigned char *buf, size_t size) MP_WUR;
  596. mp_err mp_to_sbin(const mp_int *a, unsigned char *buf, size_t maxlen, size_t *written) MP_WUR;
  597. mp_err mp_read_radix(mp_int *a, const char *str, int radix) MP_WUR;
  598. MP_DEPRECATED(mp_to_radix) mp_err mp_toradix(const mp_int *a, char *str, int radix) MP_WUR;
  599. MP_DEPRECATED(mp_to_radix) mp_err mp_toradix_n(const mp_int *a, char *str, int radix, int maxlen) MP_WUR;
  600. mp_err mp_to_radix(const mp_int *a, char *str, size_t maxlen, size_t *written, int radix) MP_WUR;
  601. mp_err mp_radix_size(const mp_int *a, int radix, int *size) MP_WUR;
  602. #ifndef MP_NO_FILE
  603. mp_err mp_fread(mp_int *a, int radix, FILE *stream) MP_WUR;
  604. mp_err mp_fwrite(const mp_int *a, int radix, FILE *stream) MP_WUR;
  605. #endif
  606. #define mp_read_raw(mp, str, len) (MP_DEPRECATED_PRAGMA("replaced by mp_read_signed_bin") mp_read_signed_bin((mp), (str), (len)))
  607. #define mp_raw_size(mp) (MP_DEPRECATED_PRAGMA("replaced by mp_signed_bin_size") mp_signed_bin_size(mp))
  608. #define mp_toraw(mp, str) (MP_DEPRECATED_PRAGMA("replaced by mp_to_signed_bin") mp_to_signed_bin((mp), (str)))
  609. #define mp_read_mag(mp, str, len) (MP_DEPRECATED_PRAGMA("replaced by mp_read_unsigned_bin") mp_read_unsigned_bin((mp), (str), (len))
  610. #define mp_mag_size(mp) (MP_DEPRECATED_PRAGMA("replaced by mp_unsigned_bin_size") mp_unsigned_bin_size(mp))
  611. #define mp_tomag(mp, str) (MP_DEPRECATED_PRAGMA("replaced by mp_to_unsigned_bin") mp_to_unsigned_bin((mp), (str)))
  612. #define mp_tobinary(M, S) (MP_DEPRECATED_PRAGMA("replaced by mp_to_binary") mp_toradix((M), (S), 2))
  613. #define mp_tooctal(M, S) (MP_DEPRECATED_PRAGMA("replaced by mp_to_octal") mp_toradix((M), (S), 8))
  614. #define mp_todecimal(M, S) (MP_DEPRECATED_PRAGMA("replaced by mp_to_decimal") mp_toradix((M), (S), 10))
  615. #define mp_tohex(M, S) (MP_DEPRECATED_PRAGMA("replaced by mp_to_hex") mp_toradix((M), (S), 16))
  616. #define mp_to_binary(M, S, N) mp_to_radix((M), (S), (N), NULL, 2)
  617. #define mp_to_octal(M, S, N) mp_to_radix((M), (S), (N), NULL, 8)
  618. #define mp_to_decimal(M, S, N) mp_to_radix((M), (S), (N), NULL, 10)
  619. #define mp_to_hex(M, S, N) mp_to_radix((M), (S), (N), NULL, 16)
  620. #ifdef __cplusplus
  621. }
  622. #endif
  623. #endif