96 	d.val = calloc(1, bytes);  in stm32_gen_keypair()
98 	if (!d.val)  in stm32_gen_keypair()
102 	res = crypto_rng_read(d.val, d.size);  in stm32_gen_keypair()
104 		free(d.val);  in stm32_gen_keypair()
108 	pk.x.val = calloc(1, bytes);  in stm32_gen_keypair()
110 	if (!pk.x.val) {  in stm32_gen_keypair()
111 		free(d.val);  in stm32_gen_keypair()
115 	pk.y.val = calloc(1, bytes);  in stm32_gen_keypair()
117 	if (!pk.y.val) {  in stm32_gen_keypair()
118 		free(pk.x.val);  in stm32_gen_keypair()
119 		free(d.val);  in stm32_gen_keypair()
127 	res = crypto_bignum_bin2bn(d.val, d.size, key->d);  in stm32_gen_keypair()
131 	res = crypto_bignum_bin2bn(pk.x.val, pk.x.size, key->x);  in stm32_gen_keypair()
135 	res = crypto_bignum_bin2bn(pk.y.val, pk.y.size, key->y);  in stm32_gen_keypair()
138 	free(pk.y.val);  in stm32_gen_keypair()
139 	free(pk.x.val);  in stm32_gen_keypair()
140 	free_wipe(d.val);  in stm32_gen_keypair()
176 	d.val = calloc(1, d.size);  in sign()
177 	if (!d.val)  in sign()
180 	crypto_bignum_bn2bin(key->d, d.val);  in sign()
182 	k.val = calloc(1, bytes);  in sign()
184 	if (!k.val) {  in sign()
185 		free_wipe(d.val);  in sign()
189 	res = crypto_rng_read(k.val, k.size);  in sign()
193 	sig_r.val = (void *)sig;  in sign()
195 	sig_s.val = (void *)(sig + bytes);  in sign()
201 	free_wipe(k.val);  in sign()
202 	free_wipe(d.val);  in sign()
248 	sig_r.val = (void *)sig;  in verify()
250 	sig_s.val = (void *)(sig + sig_size / 2);  in verify()
254 	pk.x.val = calloc(1, pk.x.size);  in verify()
255 	if (!pk.x.val)  in verify()
258 	crypto_bignum_bn2bin(key->x, pk.x.val);  in verify()
261 	pk.y.val = calloc(1, pk.y.size);  in verify()
262 	if (!pk.y.val) {  in verify()
263 		free(pk.x.val);  in verify()
267 	crypto_bignum_bn2bin(key->y, pk.y.val);  in verify()
271 	free(pk.y.val);  in verify()
272 	free(pk.x.val);  in verify()
371 	r2modn.val = calloc(1, r2modn.size);  in is_point_on_curve()
372 	if (!r2modn.val)  in is_point_on_curve()
381 	free(r2modn.val);  in is_point_on_curve()
410 	pk.x.val = calloc(1, pk.x.size);  in shared_secret()
411 	if (!pk.x.val)  in shared_secret()
414 	crypto_bignum_bn2bin(public_key->x, pk.x.val);  in shared_secret()
417 	pk.y.val = calloc(1, pk.y.size);  in shared_secret()
418 	if (!pk.y.val) {  in shared_secret()
423 	crypto_bignum_bn2bin(public_key->y, pk.y.val);  in shared_secret()
426 	d.val = calloc(1, d.size);  in shared_secret()
427 	if (!d.val) {  in shared_secret()
432 	crypto_bignum_bn2bin(private_key->d, d.val);  in shared_secret()
436 	result.x.val = calloc(1, result.x.size);  in shared_secret()
437 	if (!result.x.val) {  in shared_secret()
443 	result.y.val = calloc(1, result.y.size);  in shared_secret()
444 	if (!result.y.val) {  in shared_secret()
466 	memcpy(secret, result.x.val, result.x.size);  in shared_secret()
469 	free_wipe(result.y.val);  in shared_secret()
470 	free_wipe(result.x.val);  in shared_secret()
471 	free_wipe(d.val);  in shared_secret()
472 	free(pk.y.val);  in shared_secret()
473 	free(pk.x.val);  in shared_secret()