ecrdsa_defs.h 7.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225
  1. /* SPDX-License-Identifier: GPL-2.0+ */
  2. /*
  3. * Definitions of EC-RDSA Curve Parameters
  4. *
  5. * Copyright (c) 2019 Vitaly Chikunov <vt@altlinux.org>
  6. *
  7. * This program is free software; you can redistribute it and/or modify it
  8. * under the terms of the GNU General Public License as published by the Free
  9. * Software Foundation; either version 2 of the License, or (at your option)
  10. * any later version.
  11. */
  12. #ifndef _CRYTO_ECRDSA_DEFS_H
  13. #define _CRYTO_ECRDSA_DEFS_H
  14. #include "ecc.h"
  15. #define ECRDSA_MAX_SIG_SIZE (2 * 512 / 8)
  16. #define ECRDSA_MAX_DIGITS (512 / 64)
  17. /*
  18. * EC-RDSA uses its own set of curves.
  19. *
  20. * cp256{a,b,c} curves first defined for GOST R 34.10-2001 in RFC 4357 (as
  21. * 256-bit {A,B,C}-ParamSet), but inherited for GOST R 34.10-2012 and
  22. * proposed for use in R 50.1.114-2016 and RFC 7836 as the 256-bit curves.
  23. */
  24. /* OID_gostCPSignA 1.2.643.2.2.35.1 */
  25. static u64 cp256a_g_x[] = {
  26. 0x0000000000000001ull, 0x0000000000000000ull,
  27. 0x0000000000000000ull, 0x0000000000000000ull, };
  28. static u64 cp256a_g_y[] = {
  29. 0x22ACC99C9E9F1E14ull, 0x35294F2DDF23E3B1ull,
  30. 0x27DF505A453F2B76ull, 0x8D91E471E0989CDAull, };
  31. static u64 cp256a_p[] = { /* p = 2^256 - 617 */
  32. 0xFFFFFFFFFFFFFD97ull, 0xFFFFFFFFFFFFFFFFull,
  33. 0xFFFFFFFFFFFFFFFFull, 0xFFFFFFFFFFFFFFFFull };
  34. static u64 cp256a_n[] = {
  35. 0x45841B09B761B893ull, 0x6C611070995AD100ull,
  36. 0xFFFFFFFFFFFFFFFFull, 0xFFFFFFFFFFFFFFFFull };
  37. static u64 cp256a_a[] = { /* a = p - 3 */
  38. 0xFFFFFFFFFFFFFD94ull, 0xFFFFFFFFFFFFFFFFull,
  39. 0xFFFFFFFFFFFFFFFFull, 0xFFFFFFFFFFFFFFFFull };
  40. static u64 cp256a_b[] = {
  41. 0x00000000000000a6ull, 0x0000000000000000ull,
  42. 0x0000000000000000ull, 0x0000000000000000ull };
  43. static struct ecc_curve gost_cp256a = {
  44. .name = "cp256a",
  45. .g = {
  46. .x = cp256a_g_x,
  47. .y = cp256a_g_y,
  48. .ndigits = 256 / 64,
  49. },
  50. .p = cp256a_p,
  51. .n = cp256a_n,
  52. .a = cp256a_a,
  53. .b = cp256a_b
  54. };
  55. /* OID_gostCPSignB 1.2.643.2.2.35.2 */
  56. static u64 cp256b_g_x[] = {
  57. 0x0000000000000001ull, 0x0000000000000000ull,
  58. 0x0000000000000000ull, 0x0000000000000000ull, };
  59. static u64 cp256b_g_y[] = {
  60. 0x744BF8D717717EFCull, 0xC545C9858D03ECFBull,
  61. 0xB83D1C3EB2C070E5ull, 0x3FA8124359F96680ull, };
  62. static u64 cp256b_p[] = { /* p = 2^255 + 3225 */
  63. 0x0000000000000C99ull, 0x0000000000000000ull,
  64. 0x0000000000000000ull, 0x8000000000000000ull, };
  65. static u64 cp256b_n[] = {
  66. 0xE497161BCC8A198Full, 0x5F700CFFF1A624E5ull,
  67. 0x0000000000000001ull, 0x8000000000000000ull, };
  68. static u64 cp256b_a[] = { /* a = p - 3 */
  69. 0x0000000000000C96ull, 0x0000000000000000ull,
  70. 0x0000000000000000ull, 0x8000000000000000ull, };
  71. static u64 cp256b_b[] = {
  72. 0x2F49D4CE7E1BBC8Bull, 0xE979259373FF2B18ull,
  73. 0x66A7D3C25C3DF80Aull, 0x3E1AF419A269A5F8ull, };
  74. static struct ecc_curve gost_cp256b = {
  75. .name = "cp256b",
  76. .g = {
  77. .x = cp256b_g_x,
  78. .y = cp256b_g_y,
  79. .ndigits = 256 / 64,
  80. },
  81. .p = cp256b_p,
  82. .n = cp256b_n,
  83. .a = cp256b_a,
  84. .b = cp256b_b
  85. };
  86. /* OID_gostCPSignC 1.2.643.2.2.35.3 */
  87. static u64 cp256c_g_x[] = {
  88. 0x0000000000000000ull, 0x0000000000000000ull,
  89. 0x0000000000000000ull, 0x0000000000000000ull, };
  90. static u64 cp256c_g_y[] = {
  91. 0x366E550DFDB3BB67ull, 0x4D4DC440D4641A8Full,
  92. 0x3CBF3783CD08C0EEull, 0x41ECE55743711A8Cull, };
  93. static u64 cp256c_p[] = {
  94. 0x7998F7B9022D759Bull, 0xCF846E86789051D3ull,
  95. 0xAB1EC85E6B41C8AAull, 0x9B9F605F5A858107ull,
  96. /* pre-computed value for Barrett's reduction */
  97. 0xedc283cdd217b5a2ull, 0xbac48fc06398ae59ull,
  98. 0x405384d55f9f3b73ull, 0xa51f176161f1d734ull,
  99. 0x0000000000000001ull, };
  100. static u64 cp256c_n[] = {
  101. 0xF02F3A6598980BB9ull, 0x582CA3511EDDFB74ull,
  102. 0xAB1EC85E6B41C8AAull, 0x9B9F605F5A858107ull, };
  103. static u64 cp256c_a[] = { /* a = p - 3 */
  104. 0x7998F7B9022D7598ull, 0xCF846E86789051D3ull,
  105. 0xAB1EC85E6B41C8AAull, 0x9B9F605F5A858107ull, };
  106. static u64 cp256c_b[] = {
  107. 0x000000000000805aull, 0x0000000000000000ull,
  108. 0x0000000000000000ull, 0x0000000000000000ull, };
  109. static struct ecc_curve gost_cp256c = {
  110. .name = "cp256c",
  111. .g = {
  112. .x = cp256c_g_x,
  113. .y = cp256c_g_y,
  114. .ndigits = 256 / 64,
  115. },
  116. .p = cp256c_p,
  117. .n = cp256c_n,
  118. .a = cp256c_a,
  119. .b = cp256c_b
  120. };
  121. /* tc512{a,b} curves first recommended in 2013 and then standardized in
  122. * R 50.1.114-2016 and RFC 7836 for use with GOST R 34.10-2012 (as TC26
  123. * 512-bit ParamSet{A,B}).
  124. */
  125. /* OID_gostTC26Sign512A 1.2.643.7.1.2.1.2.1 */
  126. static u64 tc512a_g_x[] = {
  127. 0x0000000000000003ull, 0x0000000000000000ull,
  128. 0x0000000000000000ull, 0x0000000000000000ull,
  129. 0x0000000000000000ull, 0x0000000000000000ull,
  130. 0x0000000000000000ull, 0x0000000000000000ull, };
  131. static u64 tc512a_g_y[] = {
  132. 0x89A589CB5215F2A4ull, 0x8028FE5FC235F5B8ull,
  133. 0x3D75E6A50E3A41E9ull, 0xDF1626BE4FD036E9ull,
  134. 0x778064FDCBEFA921ull, 0xCE5E1C93ACF1ABC1ull,
  135. 0xA61B8816E25450E6ull, 0x7503CFE87A836AE3ull, };
  136. static u64 tc512a_p[] = { /* p = 2^512 - 569 */
  137. 0xFFFFFFFFFFFFFDC7ull, 0xFFFFFFFFFFFFFFFFull,
  138. 0xFFFFFFFFFFFFFFFFull, 0xFFFFFFFFFFFFFFFFull,
  139. 0xFFFFFFFFFFFFFFFFull, 0xFFFFFFFFFFFFFFFFull,
  140. 0xFFFFFFFFFFFFFFFFull, 0xFFFFFFFFFFFFFFFFull, };
  141. static u64 tc512a_n[] = {
  142. 0xCACDB1411F10B275ull, 0x9B4B38ABFAD2B85Dull,
  143. 0x6FF22B8D4E056060ull, 0x27E69532F48D8911ull,
  144. 0xFFFFFFFFFFFFFFFFull, 0xFFFFFFFFFFFFFFFFull,
  145. 0xFFFFFFFFFFFFFFFFull, 0xFFFFFFFFFFFFFFFFull, };
  146. static u64 tc512a_a[] = { /* a = p - 3 */
  147. 0xFFFFFFFFFFFFFDC4ull, 0xFFFFFFFFFFFFFFFFull,
  148. 0xFFFFFFFFFFFFFFFFull, 0xFFFFFFFFFFFFFFFFull,
  149. 0xFFFFFFFFFFFFFFFFull, 0xFFFFFFFFFFFFFFFFull,
  150. 0xFFFFFFFFFFFFFFFFull, 0xFFFFFFFFFFFFFFFFull, };
  151. static u64 tc512a_b[] = {
  152. 0x503190785A71C760ull, 0x862EF9D4EBEE4761ull,
  153. 0x4CB4574010DA90DDull, 0xEE3CB090F30D2761ull,
  154. 0x79BD081CFD0B6265ull, 0x34B82574761CB0E8ull,
  155. 0xC1BD0B2B6667F1DAull, 0xE8C2505DEDFC86DDull, };
  156. static struct ecc_curve gost_tc512a = {
  157. .name = "tc512a",
  158. .g = {
  159. .x = tc512a_g_x,
  160. .y = tc512a_g_y,
  161. .ndigits = 512 / 64,
  162. },
  163. .p = tc512a_p,
  164. .n = tc512a_n,
  165. .a = tc512a_a,
  166. .b = tc512a_b
  167. };
  168. /* OID_gostTC26Sign512B 1.2.643.7.1.2.1.2.2 */
  169. static u64 tc512b_g_x[] = {
  170. 0x0000000000000002ull, 0x0000000000000000ull,
  171. 0x0000000000000000ull, 0x0000000000000000ull,
  172. 0x0000000000000000ull, 0x0000000000000000ull,
  173. 0x0000000000000000ull, 0x0000000000000000ull, };
  174. static u64 tc512b_g_y[] = {
  175. 0x7E21340780FE41BDull, 0x28041055F94CEEECull,
  176. 0x152CBCAAF8C03988ull, 0xDCB228FD1EDF4A39ull,
  177. 0xBE6DD9E6C8EC7335ull, 0x3C123B697578C213ull,
  178. 0x2C071E3647A8940Full, 0x1A8F7EDA389B094Cull, };
  179. static u64 tc512b_p[] = { /* p = 2^511 + 111 */
  180. 0x000000000000006Full, 0x0000000000000000ull,
  181. 0x0000000000000000ull, 0x0000000000000000ull,
  182. 0x0000000000000000ull, 0x0000000000000000ull,
  183. 0x0000000000000000ull, 0x8000000000000000ull, };
  184. static u64 tc512b_n[] = {
  185. 0xC6346C54374F25BDull, 0x8B996712101BEA0Eull,
  186. 0xACFDB77BD9D40CFAull, 0x49A1EC142565A545ull,
  187. 0x0000000000000001ull, 0x0000000000000000ull,
  188. 0x0000000000000000ull, 0x8000000000000000ull, };
  189. static u64 tc512b_a[] = { /* a = p - 3 */
  190. 0x000000000000006Cull, 0x0000000000000000ull,
  191. 0x0000000000000000ull, 0x0000000000000000ull,
  192. 0x0000000000000000ull, 0x0000000000000000ull,
  193. 0x0000000000000000ull, 0x8000000000000000ull, };
  194. static u64 tc512b_b[] = {
  195. 0xFB8CCBC7C5140116ull, 0x50F78BEE1FA3106Eull,
  196. 0x7F8B276FAD1AB69Cull, 0x3E965D2DB1416D21ull,
  197. 0xBF85DC806C4B289Full, 0xB97C7D614AF138BCull,
  198. 0x7E3E06CF6F5E2517ull, 0x687D1B459DC84145ull, };
  199. static struct ecc_curve gost_tc512b = {
  200. .name = "tc512b",
  201. .g = {
  202. .x = tc512b_g_x,
  203. .y = tc512b_g_y,
  204. .ndigits = 512 / 64,
  205. },
  206. .p = tc512b_p,
  207. .n = tc512b_n,
  208. .a = tc512b_a,
  209. .b = tc512b_b
  210. };
  211. #endif