void crm_async_ecdsa_generate_end(crm_pk_accel *req, crm_op *r,
      crm_op *s)

Finish asynchronous (non-blocking) ECDSA generation. Get the output operands of the ECDSA signature generation and release the reserved resources. The operation on the accelerator must be finished before calling this function.

None

int crm_ecdsa_generate(
        const struct crm_pk_ecurve *curve,
        const crm_op *d,
        const crm_op *k,
        const crm_op *h,
        crm_op *r,
        crm_op *s)

Generate an ECDSA signature on an elliptic curve

The signature generation has the following steps : 1. P(x1, y1) = k * G 2. r = x1 mod n 3. if r == 0 then report failure 4. w = k ^{-1 mod n 5. s = k} -1 * (h + d * r) mod n 6. if s == 0 then report failure 7. signature is the r and s

crm_async_ecdsa_generate_go(), crm_async_ecdsa_generate_end() for an asynchronous version

CRM_OK CRM_ERR_INVALID_PARAM CRM_ERR_NOT_INVERTIBLE CRM_ERR_INVALID_SIGNATURE CRM_ERR_OUT_OF_RANGE CRM_ERR_UNKNOWN_ERROR CRM_ERR_BUSY CRM_ERR_NOT_IMPLEMENTED CRM_ERR_OPERAND_TOO_LARGE CRM_ERR_PLATFORM_ERROR CRM_ERR_EXPIRED

struct crm_pk_dreq crm_async_ecdsa_verify_go(
      const struct crm_pk_ecurve *curve,
      const crm_op *qx,
      const crm_op *qy,
      const crm_op *r,
      const crm_op *s,
      const crm_op *h)

Asynchronous (non-blocking) ECDSA verification. Start an ECDSA signature verification on the accelerator and return immediately. When the operation finishes on the accelerator, call CRM_PK_RELEASE_REQ()

Acquired acceleration request for this application

int crm_ecdsa_verify(
        const struct crm_pk_ecurve *curve,
        const crm_op *qx,
        const crm_op *qy,
        const crm_op *r,
        const crm_op *s,
        const crm_op *h)

Verify ECDSA signature on an elliptic curve

The verification has the following steps: 1. check qx and qy are smaller than q from the domain 2. Check that Q lies on the elliptic curve from the domain 3. Check that r and s are smaller than n 4. w = s ^ -1 mod n 5. u1 = h * w mod n 6. u2 = r * w mod n 7. X(x1, y1) = u1 * G + u2 * Q 8. If X is invalid, then the signature is invalid 9. v = x1 mod n 10. Accept signature if and only if v == r

crm_async_ecdsa_verify_go() for an asynchronous version

CRM_OK CRM_ERR_INVALID_PARAM CRM_ERR_NOT_INVERTIBLE CRM_ERR_INVALID_SIGNATURE CRM_ERR_OUT_OF_RANGE CRM_ERR_UNKNOWN_ERROR CRM_ERR_BUSY CRM_ERR_NOT_IMPLEMENTED CRM_ERR_OPERAND_TOO_LARGE CRM_ERR_PLATFORM_ERROR CRM_ERR_EXPIRED

struct crm_pk_dreq crm_async_ecp_mult_go(
      const struct crm_pk_ecurve *curve,
      const crm_op *k,
      const crm_op *Px,
      const crm_op *Py)

AAsynchronous EC point multiplication.

Starts an EC point multiplication on the accelerator and return immediately. When the operation finishes on the accelerator, call crm_async_ecp_mult_end()

Acquired acceleration request for this application

void crm_async_ecp_mult_end(
      crm_pk_accel *req,
      crm_op *Rx,
      crm_op *Ry)

Finish asynchronous EC point multiplication.

Get the output operands of the EC point multiplication and release the reserved resources. The operation on the accelerator must be finished before calling this function.

None

int crm_ecp_ptmult(
        const struct crm_pk_ecurve *curve,
        const crm_op *k,
        const crm_op *Px,
        const crm_op *Py,
        crm_op *Rx,
        crm_op *Ry)

Compute point multiplication on an elliptic curve (Rx, Ry) = k * (Px, Py)

crm_async_ecp_mult_go(), crm_async_ecp_mult_end() for an asynchronous versions

CRM_OK CRM_ERR_NOT_INVERTIBLE CRM_ERR_OUT_OF_RANGE CRM_ERR_POINT_NOT_ON_CURVE CRM_ERR_INVALID_PARAM CRM_ERR_UNKNOWN_ERROR CRM_ERR_BUSY CRM_ERR_NOT_IMPLEMENTED CRM_ERR_OPERAND_TOO_LARGE CRM_ERR_PLATFORM_ERROR CRM_ERR_EXPIRED

struct crm_pk_dreq crm_async_ecp_double_go(
        const struct crm_pk_ecurve *curve,
        const crm_op *px,
        const crm_op *py)

Asynchronous EC point doubling. Starts an EC point doubling on the accelerator and return immediately. When the operation finishes on the accelerator, call crm_async_ecp_double_end()

Acquired acceleration request for this operation

void crm_async_ecp_double_end(
      crm_pk_accel *req,
      crm_op *rx,
      crm_op *ry)

Finish asynchronous EC point doubling. Get the output operands of the EC point doubling and release the reserved resources. The operation on the accelerator must be finished before calling this function

None

int crm_ecp_double(
        const struct crm_pk_ecurve *curve,
        const crm_op *px,
        const crm_op *py,
        crm_op *rx,
        crm_op *ry)

Compute point doubling on an elliptic curve

(Rx, Ry) = 2 * (Px, Py)

crm_async_ecp_double_go(), crm_async_ecp_double_end() for an asynchronous verion

CRM_OK CRM_ERR_NOT_INVERTIBLE CRM_ERR_OUT_OF_RANGE CRM_ERR_POINT_NOT_ON_CURVE CRM_ERR_INVALID_PARAM CRM_ERR_UNKNOWN_ERROR CRM_ERR_BUSY CRM_ERR_NOT_IMPLEMENTED CRM_ERR_OPERAND_TOO_LARGE CRM_ERR_PLATFORM_ERROR CRM_ERR_EXPIRED

struct crm_pk_dreq crm_async_ec_ptoncurve_go(
      const struct crm_pk_ecurve *curve,
      const crm_op *px,
      const crm_op *py)

Asynchronous (non-blocking) EC point on curve check. Starts an EC point on curve check on the accelerator and return immediately. When the operation finishes on the accelerator, call CRM_PK_RELEASE_REQ()

Acquired acceleration request for this operation

int crm_ec_ptoncurve(
        const struct crm_pk_ecurve *curve,
        const crm_op *px,
        const crm_op *py)

Check if the given point is on the given elliptic curve

It succeeds if the following checks pass: For GF(p):

1. px < p
2. py < p
3. py^{2 == px}3 + a * px + b mod p For GF(2^{m), where q = 2}m
4. px < q
5. py < q
6. py^{2 + px * py == px}3 + a * px^2 + b mod q

CRM_OK CRM_ERR_NOT_INVERTIBLE CRM_ERR_OUT_OF_RANGE CRM_ERR_POINT_NOT_ON_CURVE CRM_ERR_INVALID_PARAM CRM_ERR_UNKNOWN_ERROR CRM_ERR_BUSY CRM_ERR_NOT_IMPLEMENTED CRM_ERR_OPERAND_TOO_LARGE CRM_ERR_PLATFORM_ERROR CRM_ERR_EXPIRED

struct crm_pk_dreq crm_async_ec_pt_decompression_go(
      const struct crm_pk_ecurve *curve,
      const crm_op *x,
      const int y_lsb)

Asynchronous (non-blocking) EC point decompression.

Starts an EC point decompression on the accelerator and return immediately. When the operation finishes on the accelerator, call crm_async_ec_pt_decompression_end()

Acquired acceleration request for this operation

void crm_async_ec_pt_decompression_end(
      crm_pk_accel *req,
      crm_op *y)

Finish asynchronous (non-blocking) EC point decompression. Get the output operand of the EC point decompression and release the reserved resources. The operation on the accelerator must be finished before calling this function.

None

void crm_async_ec_pt_decompression_end(
      crm_pk_accel *req,
      crm_op *y)

Finish asynchronous (non-blocking) EC point decompression. Get the output operand of the EC point decompression and release the reserved resources. The operation on the accelerator must be finished before calling this function.

None

int crm_ec_pt_decompression(
        const struct crm_pk_ecurve *curve,
        const crm_op *x,
        const int y_lsb,
        crm_op *y)

ECC point decompression Recover the y coordinate of a point using x value and LSB of y: 1. y = sqrt(x^3 + a * x + b) 2. if (y & 1) != y_lsb then y = p - y with a and p the curve parameters 3. else return ::CRM_ERR_NOT_QUADRATIC_RESIDUE

Point decompression is supported for GF(p) only

CRM_OK CRM_ERR_NOT_QUADRATIC_RESIDUE CRM_ERR_INVALID_PARAM CRM_ERR_UNKNOWN_ERROR CRM_ERR_BUSY CRM_ERR_NOT_IMPLEMENTED CRM_ERR_OPERAND_TOO_LARGE CRM_ERR_PLATFORM_ERROR CRM_ERR_EXPIRED

struct crm_pk_dreq crm_async_ecp_add_go(
      const struct crm_pk_ecurve *curve,
      const crm_op *p1x,
      const crm_op *p1y,
      const crm_op *p2x,
      const crm_op *p2y)

Asynchronous (non-blocking) EC point addition. Start an EC point addition on the accelerator and return immediately. When the operation finishes on the accelerator, call crm_async_ecp_add_end()

Acquired acceleration request for this operation

void crm_async_ecp_add_end(
      crm_pk_accel *req,
      crm_op *rx,
      crm_op *ry)

Finish asynchronous (non-blocking) EC point addition.

Get the output operands of the EC point addition and release the reserved resources. The operation on the accelerator must be finished before calling this function.

None

int crm_ecp_ptadd(
        const struct crm_pk_ecurve *curve,
        const crm_op *p1x,
        const crm_op *p1y,
        const crm_op *p2x,
        const crm_op *p2y,
        crm_op *rx,
        crm_op *ry)

Compute point addition on an elliptic curve (Rx, Ry) = P1 + P2

If P1 == P2 returns an CRM_ERR_NOT_INVERTIBLE error Use point doubling operation for the addition of equal points

Use point doubling for the addition of equal points crm_ecp_double()

CRM_OK CRM_ERR_NOT_INVERTIBLE CRM_ERR_OUT_OF_RANGE CRM_ERR_POINT_NOT_ON_CURVE CRM_ERR_INVALID_PARAM CRM_ERR_UNKNOWN_ERROR CRM_ERR_BUSY CRM_ERR_NOT_IMPLEMENTED CRM_ERR_OPERAND_TOO_LARGE CRM_ERR_PLATFORM_ERROR CRM_ERR_EXPIRED