/*

 * Copyright 2017-2021 The OpenSSL Project Authors. All Rights Reserved.

 * Copyright 2014 Cryptography Research, Inc.

 *

 * Licensed under the Apache License 2.0 (the "License").  You may not use

 * this file except in compliance with the License.  You can obtain a copy

 * in the file LICENSE in the source distribution or at

 * https://www.openssl.org/source/license.html

 *

 * Originally written by Mike Hamburg

 */

#ifndef OSSL_CRYPTO_EC_CURVE448_WORD_H

#define OSSL_CRYPTO_EC_CURVE448_WORD_H

#include <string.h>

#include <assert.h>

#include <stdlib.h>

#include <openssl/e_os2.h>

#include "curve448utils.h"

#include "internal/constant_time.h"

#ifdef INT128_MAX

#include "arch_64/arch_intrinsics.h"

#else

#include "arch_32/arch_intrinsics.h"

#endif

#if (ARCH_WORD_BITS == 64)

typedef uint64_t word_t, mask_t;

typedef uint128_t dword_t;

typedef int32_t hsword_t;

typedef int64_t sword_t;

typedef int128_t dsword_t;

#elif (ARCH_WORD_BITS == 32)

typedef uint32_t word_t, mask_t;

typedef uint64_t dword_t;

typedef int16_t hsword_t;

typedef int32_t sword_t;

typedef int64_t dsword_t;

#else

#error "For now, we only support 32- and 64-bit architectures."

#endif

/*

 * Scalar limbs are keyed off of the API word size instead of the arch word

 * size.

 */

#if C448_WORD_BITS == 64

#define SC_LIMB(x) (x)

#elif C448_WORD_BITS == 32

#define SC_LIMB(x) ((uint32_t)(x)), ((x) >> 32)

#else

#error "For now we only support 32- and 64-bit architectures."

#endif

#if C448_WORD_BITS == 64

#define value_barrier_c448(x) value_barrier_64(x)

#elif C448_WORD_BITS == 32

#define value_barrier_c448(x) value_barrier_32(x)

#endif

/*

 * The plan on booleans: The external interface uses c448_bool_t, but this

 * might be a different size than our particular arch's word_t (and thus

 * mask_t).  Also, the caller isn't guaranteed to pass it as nonzero.  So

 * bool_to_mask converts word sizes and checks nonzero. On the flip side,

 * mask_t is always -1 or 0, but it might be a different size than

 * c448_bool_t. On the third hand, we have success vs boolean types, but

 * that's handled in common.h: it converts between c448_bool_t and

 * c448_error_t.

 */

static ossl_inline c448_bool_t mask_to_bool(mask_t m)

{

    return (c448_sword_t)(sword_t)m;

}

Unexecuted instantiation: curve448.c:mask_to_bool

Unexecuted instantiation: curve448_tables.c:mask_to_bool

Unexecuted instantiation: eddsa.c:mask_to_bool

Unexecuted instantiation: f_generic.c:mask_to_bool

Unexecuted instantiation: scalar.c:mask_to_bool

Unexecuted instantiation: f_impl64.c:mask_to_bool

static ossl_inline mask_t bool_to_mask(c448_bool_t m)

{

    /* On most arches this will be optimized to a simple cast. */

    mask_t ret = 0;

    unsigned int i;

    unsigned int limit = sizeof(c448_bool_t) / sizeof(mask_t);

    if (limit < 1)

        limit = 1;

    for (i = 0; i < limit; i++)

        ret |= ~word_is_zero(m >> (i * 8 * sizeof(word_t)));

    return ret;

}

Unexecuted instantiation: curve448.c:bool_to_mask

Unexecuted instantiation: curve448_tables.c:bool_to_mask

Unexecuted instantiation: eddsa.c:bool_to_mask

Unexecuted instantiation: f_generic.c:bool_to_mask

Unexecuted instantiation: scalar.c:bool_to_mask

Unexecuted instantiation: f_impl64.c:bool_to_mask

#endif /* OSSL_CRYPTO_EC_CURVE448_WORD_H */