ed25519/ed25519.h

   1 #define ED25519_SEEDBYTES      32
   2 #define ED25519_SECRETKEYBYTES 64
   3 #define ED25519_PUBLICKEYBYTES 32
   4
   5 #ifdef ED25519_ref10
   6 #include "ref10/ed25519.h"
   7 #define ed25519_seckey        ed25519_ref10_seckey
   8 #define ed25519_seckey_expand ed25519_ref10_seckey_expand
   9 #define ed25519_pubkey        ed25519_ref10_pubkey
  10 #define ed25519_keygen        ed25519_ref10_keygen
  11 #include "ref10/ge.h"
  12
  13 /* The basepoint multiplied by 8. */
  14 static const ge_cached ge_eightpoint = {
  15   /* YplusX */
  16   {
  17     48496028, -16430416, 15164263, 11885335, 60784617, -4866353, 46481863,
  18     -2771805, 9708580, 2387263
  19   },
  20   /* YmunusX */
  21   {
  22     -10173472, -5540046, 21277639, 4080693, 1932823, -14916249, -9515873,
  23     -21787995, -36575460, 29827857
  24   },
  25   /* Z */
  26   {
  27     25143927, -10256223, -3515585, 5715072, 19432778, -14905909, 22462083,
  28     -8862871, 13226552, 743677
  29   },
  30   /* T2d */
  31   {
  32     -784818, -8208065, -28479270, 5551579, 15746872, 4911053, 19117091,
  33     11267669, -24569594, 14624995
  34   }
  35 };
  36 inline static void ge_initeightpoint() {}
  37 #endif
  38
  39 #ifdef ED25519_amd64_51_30k
  40 #include "amd64-51-30k/ed25519.h"
  41 #define ed25519_seckey        ed25519_amd64_51_30k_seckey
  42 #define ed25519_seckey_expand ed25519_amd64_51_30k_seckey_expand
  43 #define ed25519_pubkey        ed25519_amd64_51_30k_pubkey
  44 #define ed25519_keygen        ed25519_amd64_51_30k_keygen
  45 #include "amd64-51-30k/ge25519.h"
  46 #define ge_p1p1       ge25519_p1p1
  47 #define ge_p3         ge25519_p3
  48 #define ge_cached     ge25519_pniels
  49 #define ge_p1p1_to_p3 ge25519_p1p1_to_p3
  50 #define ge_p3_tobytes ge25519_pack
  51 #define ge_add        ge25519_pnielsadd_p1p1
  52
  53 static inline void ge_scalarmult_base(ge_p3 *gepk,const unsigned char *sk)
  54 {
  55         sc25519 scsk;
  56
  57         sc25519_from32bytes(&scsk,sk);
  58         ge25519_scalarmult_base(gepk,&scsk);
  59 }
  60
  61 /* The basepoint multiplied by 8. */
  62 static const ge25519_pniels ge_eightpoint = {
  63         // ysubx
  64         {{ 1880013609944032, 273850692840390, 1250787290086935, 789632210881694, 2001713562248987 }},
  65         // xaddy
  66         {{ 1149173309373852, 797611345273702, 1925224452816873, 2065787175387590, 160206517707811 }},
  67         // z
  68         {{ 1563516364368503, 383531986082622, 1251481213240650, 1657022631558786, 49907331879479 }},
  69         // t2d
  70         {{ 1700965895112270, 372560131616985, 329575203620664, 756160485635107, 981466775886086 }},
  71 };
  72 inline static void ge_initeightpoint() {}
  73 #endif
  74
  75 #ifdef ED25519_amd64_64_24k
  76 #include "amd64-64-24k/ed25519.h"
  77 #define ed25519_seckey        ed25519_amd64_64_seckey
  78 #define ed25519_seckey_expand ed25519_amd64_64_seckey_expand
  79 #define ed25519_pubkey        ed25519_amd64_64_pubkey
  80 #define ed25519_keygen        ed25519_amd64_64_keygen
  81 #include "amd64-64-24k/ge25519.h"
  82 #define ge_p1p1       ge25519_p1p1
  83 #define ge_p3         ge25519_p3
  84 #define ge_cached     ge25519_pniels
  85 #define ge_p1p1_to_p3 ge25519_p1p1_to_p3
  86 #define ge_p3_tobytes ge25519_pack
  87 #define ge_add        ge25519_pnielsadd_p1p1
  88
  89 static inline void ge_scalarmult_base(ge_p3 *gepk,const unsigned char *sk)
  90 {
  91         sc25519 scsk;
  92
  93         sc25519_from32bytes(&scsk,sk);
  94         ge25519_scalarmult_base(gepk,&scsk);
  95 }
  96
  97 /* The basepoint multiplied by 8. */
  98 static const ge25519_pniels ge_eightpoint = {
  99         // ysubx
 100         {{ 6788804652057281504U, 531290374162262565U, 6135835192563885415U, 8199018750971852188U }},
 101         // xaddy
 102         {{ 1960215011215539612U, 16708348392717346619U, 11897818088205565647U, 656205896531197613U }},
 103         // z
 104         {{ 15705615417005288055U, 5341641389565279826U, 1966574939768917451U, 204420431378348998U }},
 105         // t2d
 106         {{ 9713713562319586894U, 4328467261753610859U, 8262494979546083277U, 4020087914029409631U }},
 107 };
 108 inline static void ge_initeightpoint() {}
 109 #endif
 110
 111 #ifdef ED25519_donna
 112 #define ED25519_CUSTOMRANDOM
 113 #define ED25519_CUSTOMHASH
 114 #include <sodium/crypto_hash_sha512.h>
 115 #include "ed25519-donna/ed25519-donna.h"
 116
 117 static int ed25519_seckey_expand(unsigned char *sk,const unsigned char *seed)
 118 {
 119         crypto_hash_sha512(sk,seed,32);
 120         sk[0] &= 248;
 121         sk[31] &= 127;
 122         sk[31] |= 64;
 123
 124         return 0;
 125 }
 126
 127 static int ed25519_seckey(unsigned char *sk)
 128 {
 129         unsigned char seed[32];
 130
 131         randombytes(seed,32);
 132         return ed25519_seckey_expand(sk,seed);
 133 }
 134
 135 static int ed25519_pubkey(unsigned char *pk,const unsigned char *sk)
 136 {
 137         bignum256modm a;
 138         ge25519 ALIGN(16) A;
 139
 140         expand256_modm(a,sk,32);
 141         ge25519_scalarmult_base_niels(&A,ge25519_niels_base_multiples,a);
 142         ge25519_pack(pk,&A);
 143
 144         return 0;
 145 }
 146
 147
 148 static int ed25519_keypair(unsigned char *pk,unsigned char *sk)
 149 {
 150         ed25519_seckey(sk);
 151         ed25519_pubkey(pk,sk);
 152
 153         return 0;
 154 }
 155 // hacky, but works for current stuff in main.c
 156 #define ge_p1p1       ge25519_p1p1 ALIGN(16)
 157 #define ge_p3         ge25519 ALIGN(16)
 158 #define ge_cached     ge25519_pniels ALIGN(16)
 159
 160 #define ge_p1p1_to_p3 ge25519_p1p1_to_full
 161 #define ge_p3_tobytes ge25519_pack
 162
 163 DONNA_INLINE static void ge_add(ge25519_p1p1 *r,const ge25519 *p,const ge25519_pniels *q)
 164 {
 165         ge25519_pnielsadd_p1p1(r,p,q,0);
 166 }
 167
 168 DONNA_INLINE static void ge_scalarmult_base(ge25519 *A,const unsigned char *sk)
 169 {
 170         bignum256modm ALIGN(16) a;
 171         expand256_modm(a,sk,32);
 172         ge25519_scalarmult_base_niels(A,ge25519_niels_base_multiples,a);
 173 }
 174
 175 static ge25519_pniels ALIGN(16) ge_eightpoint;
 176 // portable representation of (basepoint * 8)
 177 static u8 fe_ysubx[32] = {
 178         0xE0,0xC3,0x64,0xC7,0xDC,0xAD,0x36,0x5E,
 179         0x25,0xAA,0x86,0xC8,0xC7,0x85,0x5F,0x07,
 180         0x67,0x65,0x1C,0x3D,0x99,0xDD,0x26,0x55,
 181         0x9C,0xB5,0x71,0x1E,0x1D,0xC4,0xC8,0x71,
 182 };
 183 static u8 fe_xaddy[32] = {
 184         0x9C,0xFD,0xE3,0xC2,0x2A,0x15,0x34,0x1B,
 185         0x3B,0xE7,0x62,0xAB,0x56,0xFA,0xDF,0xE7,
 186         0xCF,0xBE,0xB5,0x8D,0x83,0x8A,0x1D,0xA5,
 187         0xAD,0x3E,0x42,0x42,0xC9,0x4F,0x1B,0x09,
 188 };
 189 static u8 fe_z[32] = {
 190         0x77,0xAA,0x7F,0x85,0x02,0x8E,0xF5,0xD9,
 191         0x52,0xFE,0x8F,0xE6,0x8A,0x52,0x21,0x4A,
 192         0xCB,0x8D,0x1C,0x05,0x7D,0xAD,0x4A,0x1B,
 193         0xC6,0x7B,0x23,0x9D,0x4C,0x3F,0xD6,0x02,
 194 };
 195 static u8 fe_t2d[32] = {
 196         0x4E,0x06,0xF4,0xFB,0x04,0x0B,0xCE,0x86,
 197         0x6B,0x52,0xBB,0x96,0x0A,0xCE,0x11,0x3C,
 198         0xCD,0xEF,0x4A,0x46,0x68,0x47,0xAA,0x72,
 199         0x5F,0x65,0x90,0x91,0xA8,0x38,0xCA,0x37,
 200 };
 201
 202 // initialize from packed representation
 203 static void ge_initeightpoint()
 204 {
 205         memset(&ge_eightpoint,0,sizeof(ge_eightpoint));
 206         curve25519_expand(ge_eightpoint.ysubx,fe_ysubx);
 207         curve25519_expand(ge_eightpoint.xaddy,fe_xaddy);
 208         curve25519_expand(ge_eightpoint.z,fe_z);
 209         curve25519_expand(ge_eightpoint.t2d,fe_t2d);
 210 }
 211
 212 #endif