/*

* Blinding for public key operations

* (C) 1999-2010,2015 Jack Lloyd

*

* Botan is released under the Simplified BSD License (see license.txt)

*/

#include <botan/internal/blinding.h>

namespace Botan {

Blinder::Blinder(const Modular_Reducer& reducer,

                 RandomNumberGenerator& rng,

                 std::function<BigInt(const BigInt&)> fwd,

                 std::function<BigInt(const BigInt&)> inv) :

      m_reducer(reducer),

      m_rng(rng),

      m_fwd_fn(std::move(fwd)),

      m_inv_fn(std::move(inv)),

      m_modulus_bits(reducer.get_modulus().bits()),

      m_e{},

      m_d{},

      m_counter{} {

   const BigInt k = blinding_nonce();

   m_e = m_fwd_fn(k);

   m_d = m_inv_fn(k);

}

BigInt Blinder::blinding_nonce() const {

   return BigInt(m_rng, m_modulus_bits - 1);

}

BigInt Blinder::blind(const BigInt& i) const {

   ++m_counter;

   if((ReinitInterval > 0) && (m_counter > ReinitInterval)) {

      const BigInt k = blinding_nonce();

      m_e = m_fwd_fn(k);

      m_d = m_inv_fn(k);

      m_counter = 0;

   } else {

      m_e = m_reducer.square(m_e);

      m_d = m_reducer.square(m_d);

   }

   return m_reducer.multiply(i, m_e);

}

BigInt Blinder::unblind(const BigInt& i) const {

   return m_reducer.multiply(i, m_d);

}

}  // namespace Botan