struct crm_pk_dreq crm_ecjpake_generate_zkp_go(
   const struct crm_pk_ecurve *curve,
   const crm_op *v,
   const crm_op *x,
   const crm_op *h)

Asynchronous EC J-PAKE proof generation

Start a EC J-PAKE proof generation operation on the accelerator and return immediately.

When the operation finishes on the accelerator, call crm_async_generate_zkp_end()

Truncation or padding should be done by user application

Acquired acceleration request for this operation

void crm_ecjpake_generate_zkp_end(
   crm_pk_accel *req,
   crm_op *r)

Finish asynchronous (non-blocking) EC J-PAKE proof generation.

Get the output operands of the EC J-PAKE proof generation and release the reserved resources.

The operation on the accelerator must be finished before calling this function.

None

int crm_ecjpake_generate_zkp(
   const struct crm_pk_ecurve *curve,
   const crm_op *v,
   const crm_op *x,
   const crm_op *h,
   crm_op *r
   )

Perform an EC J-PAKE proof generation

The proof generation has the following steps:

1. r = (v - (x * h)) % n

Truncation or padding should be done by user application

crm_async_ecjpake_generate_zkp_go(), crm_async_ecjpake_generate_zkp_end() for an asynchronous version

CRM_OK CRM_ERR_OUT_OF_RANGE CRM_ERR_POINT_NOT_ON_CURVE CRM_ERR_NOT_INVERTIBLE CRM_ERR_UNKNOWN_ERROR CRM_ERR_BUSY CRM_ERR_NOT_IMPLEMENTED CRM_ERR_OPERAND_TOO_LARGE CRM_ERR_PLATFORM_ERROR CRM_ERR_EXPIRED

struct crm_pk_dreq crm_ecjpake_verify_zkp_go(
   const struct crm_pk_ecurve *curve,
   const struct crm_pk_point *v,
   const struct crm_pk_point *x,
   const crm_op *r,
   const crm_op *h,
   const struct crm_pk_point *g)

Asynchronous EC J-PAKE proof verification

Start an EC J-PAKE proof verification operation on the accelerator and return immediately. When the operation finishes on the accelerator, call crm_ecjpake_verify_zkp_end()

Truncation or padding should be done by user application

crm_async_ecjpake_generate_zkp_go(), crm_async_ecjpake_generate_zkp_end() for an asynchronous version

Acquired acceleration request for this operation

void crm_ecjpake_verify_zkp_end(
   crm_pk_accel *req
   )

Finish asynchronous (non-blocking) EC J-PAKE proof verification

Finishes the EC J-PAKE proof verification and releases the reserved resources. The operation on the accelerator must be finished before calling this function.

None

int crm_ecjpake_verify_zkp(
   const struct crm_pk_ecurve *curve,
   const struct crm_pk_point *v,
   const struct crm_pk_point *x,
   const crm_op *r,
   const crm_op *h,
   const struct crm_pk_point *g
   )

Synchronous EC J-PAKE proof verification Start an EC J-PAKE proof verification operation on the accelerator and return immediately. The proof verification has the following steps:

1. ( (G * r) + (X * h) ) ?= V

In case of a comparison failure CRM_ERR_INVALID_SIGNATURE shall be returned. When the operation finishes on the accelerator, call crm_ecjpake_verify_zkp_end()

Truncation or padding should be done by user application

crm_async_ecjpake_verify_zkp_go(), crm_async_ecjpake_verify_zkp_end() for an asynchronous version

CRM_OK CRM_ERR_INVALID_SIGNATURE CRM_ERR_OUT_OF_RANGE CRM_ERR_POINT_NOT_ON_CURVE CRM_ERR_NOT_INVERTIBLE CRM_ERR_UNKNOWN_ERROR CRM_ERR_BUSY CRM_ERR_NOT_IMPLEMENTED CRM_ERR_OPERAND_TOO_LARGE CRM_ERR_PLATFORM_ERROR CRM_ERR_EXPIRED

struct crm_pk_dreq crm_ecjpake_3pt_add_go(
   const struct crm_pk_ecurve *curve,
   const struct crm_pk_point *a,
   const struct crm_pk_point *b,
   const struct crm_pk_point *c)

Start a EC J-PAKE 3 point addition operation on the accelerator and return immediately. When the operation finishes on the accelerator, call crm_ecjpake_3pt_add_end()

Acquired acceleration request for this operation

void crm_ecjpake_3pt_add_end(
   crm_pk_accel *req,
   struct crm_pk_point *gb
   )

Finish asynchronous (non-blocking) EC J-PAKE 3 point addition. Finishes the EC J-PAKE 3 point addition and releases the reserved resources. The operation on the accelerator must be finished before calling this function.

None

int crm_ecjpake_3pt_add(
   const struct crm_pk_ecurve *curve,
   const struct crm_pk_point *a,
   const struct crm_pk_point *b,
   const struct crm_pk_point *c,
   struct crm_pk_point *gb
   )

Synchronous EC J-PAKE 3 point addition Start a EC J-PAKE 3 point addition operation on the accelerator and return immediately. The 3 point addition operation has the following steps:

1. gb = a + b + c When the operation finishes on the accelerator, call crm_ecjpake_3pt_add_end()

Truncation or padding should be done by user application

crm_async_ecjpake_verify_zkp_go(), crm_async_ecjpake_verify_zkp_end() for an asynchronous version

CRM_OK CRM_ERR_INVALID_SIGNATURE CRM_ERR_OUT_OF_RANGE CRM_ERR_POINT_NOT_ON_CURVE CRM_ERR_NOT_INVERTIBLE CRM_ERR_UNKNOWN_ERROR CRM_ERR_BUSY CRM_ERR_NOT_IMPLEMENTED CRM_ERR_OPERAND_TOO_LARGE CRM_ERR_PLATFORM_ERROR CRM_ERR_EXPIRED

struct crm_pk_dreq crm_ecjpake_gen_sess_key_go(
   const struct crm_pk_ecurve *curve,
   const struct crm_pk_point *x4,
   const struct crm_pk_point *b,
   const crm_op *x2,
   const crm_op *x2s)

Asynchronous EC J-PAKE session key generation tart a EC J-PAKE session key generation operation on the accelerator and return immediately. When the operation finishes on the accelerator, call crm_ecjpake_gen_sess_key_end()

Truncation or padding should be done by user application

Acquired acceleration request for this operation

void crm_ecjpake_gen_sess_key_end(
   crm_pk_accel *req,
   struct crm_pk_point *t)

Finish asynchronous (non-blocking) EC J-PAKE session key generation Finishes the EC J-PAKE session key generation operation and releases the reserved resources. The operation on the accelerator must be finished before calling this function.

None

int crm_ecjpake_gen_sess_key(
   const struct crm_pk_ecurve *curve,
   const struct crm_pk_point *x4,
   const struct crm_pk_point *b,
   const crm_op *x2,
   const crm_op *x2s,
   struct crm_pk_point *t
   )

Synchronous EC J-PAKE session key generation Start a EC J-PAKE session key generation operation on the accelerator and return immediately. The session key generation has the following steps:

1. T = (b - (x4 * x2s)) * x2 When the operation finishes on the accelerator, call crm_ecjpake_gen_sess_key_end()

Truncation or padding should be done by user application

crm_async_ecjpake_gen_sess_key_go(), crm_async_ecjpake_gen_sess_key_end() for an asynchronous version

CRM_OK CRM_ERR_INVALID_SIGNATURE CRM_ERR_OUT_OF_RANGE CRM_ERR_POINT_NOT_ON_CURVE CRM_ERR_NOT_INVERTIBLE CRM_ERR_UNKNOWN_ERROR CRM_ERR_BUSY CRM_ERR_NOT_IMPLEMENTED CRM_ERR_OPERAND_TOO_LARGE CRM_ERR_PLATFORM_ERROR CRM_ERR_EXPIRED

struct crm_pk_dreq crm_ecjpake_gen_step_2_go(
   const struct crm_pk_ecurve *curve,
   const struct crm_pk_point *x4,
   const struct crm_pk_point *x3,
   const struct crm_pk_point *x1,
   const crm_op *x2s,
   const crm_op *s)

Asynchronous EC J-PAKE step 2 calculation Start an EC J-PAKE step 2 calculation operation on the accelerator and return immediately. When the operation finishes on the accelerator, call crm_ecjpake_gen_step_2_end()

Truncation or padding should be done by user application

Acquired acceleration request for this operation

void crm_ecjpake_gen_step_2_end(
   crm_pk_accel *req,
   struct crm_pk_point *a,
   crm_op *x2s,
   struct crm_pk_point *ga)

Finish an asynchronous (non-blocking) EC J-PAKE step 2 calculation Finishes the EC J-PAKE step 2 calculation operation and releases the reserved resources. The operation on the accelerator must be finished before calling this function.

None

int crm_ecjpake_gen_step_2(
   const struct crm_pk_ecurve *curve,
   const struct crm_pk_point *x4,
   const struct crm_pk_point *x3,
   const struct crm_pk_point *x1,
   const crm_op *x2s,
   const crm_op *s,
   struct crm_pk_point *a,
   crm_op *rx2s,
   struct crm_pk_point *ga
   )

Synchronous EC J-PAKE step 2 calculation Start an EC J-PAKE step 2 calculation operation on the accelerator and return immediately. The step 2 calculation has the following steps:

1. ga = x1 + x3 + x4
2. rx2s = (x2s * s) % curve.n
3. a = ga * rx2s

| Param | Description | |:----- |:----------- | PO | curve | Elliptic curve on which to perform the operation | | x4 | Point on the curve | | x3 | Point on the curve | | x1 | Point on the curve | | x2s | Generated random * password | | s | Password | | a | Point on the curve | | rx2s | Generated random * password | | ga | Point on the curve |

Truncation or padding should be done by user application

crm_async_ecjpake_gen_step_2_go(), crm_async_ecjpake_gen_step_2_end() for an asynchronous version

CRM_OK CRM_ERR_INVALID_SIGNATURE CRM_ERR_OUT_OF_RANGE CRM_ERR_POINT_NOT_ON_CURVE CRM_ERR_NOT_INVERTIBLE CRM_ERR_UNKNOWN_ERROR CRM_ERR_BUSY CRM_ERR_NOT_IMPLEMENTED CRM_ERR_OPERAND_TOO_LARGE CRM_ERR_PLATFORM_ERROR CRM_ERR_EXPIRED