/*

 * Copyright (C) 2019 Red Hat, Inc.

 *

 * Author: Daiki Ueno

 *

 * This file is part of GNUTLS.

 *

 * The GNUTLS library is free software; you can redistribute it and/or

 * modify it under the terms of the GNU Lesser General Public License

 * as published by the Free Software Foundation; either version 2.1 of

 * the License, or (at your option) any later version.

 *

 * This library is distributed in the hope that it will be useful, but

 * WITHOUT ANY WARRANTY; without even the implied warranty of

 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU

 * Lesser General Public License for more details.

 *

 * You should have received a copy of the GNU Lesser General Public License

 * along with this program.  If not, see <https://www.gnu.org/licenses/>

 *

 */

#if HAVE_CONFIG_H

# include "config.h"

#endif

#include "ecdsa-compute-k.h"

#include "dsa-compute-k.h"

#include "gnutls_int.h"

static inline int

_gnutls_ecc_curve_to_dsa_q(mpz_t * q, gnutls_ecc_curve_t curve)

{

  switch (curve) {

#ifdef ENABLE_NON_SUITEB_CURVES

  case GNUTLS_ECC_CURVE_SECP192R1:

    mpz_init_set_str(*q,

         "FFFFFFFFFFFFFFFFFFFFFFFF99DEF836"

         "146BC9B1B4D22831", 16);

    return 0;

  case GNUTLS_ECC_CURVE_SECP224R1:

    mpz_init_set_str(*q,

         "FFFFFFFFFFFFFFFFFFFFFFFFFFFF16A2"

         "E0B8F03E13DD29455C5C2A3D", 16);

    return 0;

#endif

  case GNUTLS_ECC_CURVE_SECP256R1:

    mpz_init_set_str(*q,

         "FFFFFFFF00000000FFFFFFFFFFFFFFFF"

         "BCE6FAADA7179E84F3B9CAC2FC632551", 16);

    return 0;

  case GNUTLS_ECC_CURVE_SECP384R1:

    mpz_init_set_str(*q,

         "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF"

         "FFFFFFFFFFFFFFFFC7634D81F4372DDF"

         "581A0DB248B0A77AECEC196ACCC52973", 16);

    return 0;

  case GNUTLS_ECC_CURVE_SECP521R1:

    mpz_init_set_str(*q,

         "1FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF"

         "FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF"

         "FFA51868783BF2F966B7FCC0148F709A"

         "5D03BB5C9B8899C47AEBB6FB71E91386" "409", 16);

    return 0;

  default:

    return

        gnutls_assert_val(GNUTLS_E_UNSUPPORTED_SIGNATURE_ALGORITHM);

  }

}

int

_gnutls_ecdsa_compute_k(mpz_t k,

      gnutls_ecc_curve_t curve,

      const mpz_t x,

      gnutls_mac_algorithm_t mac,

      const uint8_t * digest, size_t length)

{

  mpz_t q;

  int ret;

  ret = _gnutls_ecc_curve_to_dsa_q(&q, curve);

  if (ret < 0)

    return gnutls_assert_val(ret);

  ret = _gnutls_dsa_compute_k(k, q, x, mac, digest, length);

  mpz_clear(q);

  return ret;

}