1 // SPDX-License-Identifier: BSD-2-Clause
3  * Copyright (c) 2019-2021 Huawei Technologies Co., Ltd
17 #include "sm2-dsa.h"
34 	mbedtls_mpi e = { };  in sm2_mbedtls_dsa_sign()  local
45 	mbedtls_mpi_init(&e);  in sm2_mbedtls_dsa_sign()
60 	 * Steps A1 and A2 are the generation of the hash value e from user  in sm2_mbedtls_dsa_sign()
62 	 * here since @msg is expected to be the hash value e already.  in sm2_mbedtls_dsa_sign()
80 		/* Step A5: compute r = (e + x1) mod n */  in sm2_mbedtls_dsa_sign()
82 		mbedtls_mpi_read_binary(&e, (unsigned char *)msg, msg_len);  in sm2_mbedtls_dsa_sign()
83 		mres = mbedtls_mpi_add_mpi(&r, &e, &x1y1p.X);  in sm2_mbedtls_dsa_sign()
98 	/* Step A6: compute s = ((1 + dA)^-1 * (k - r*dA)) mod n */  in sm2_mbedtls_dsa_sign()
100 	mres = mbedtls_mpi_add_int(&s, (mbedtls_mpi *)key->d, 1);  in sm2_mbedtls_dsa_sign()
106 	mres = mbedtls_mpi_mul_mpi(&tmp, &r, (mbedtls_mpi *)key->d);  in sm2_mbedtls_dsa_sign()
138 	mbedtls_mpi_free(&e);  in sm2_mbedtls_dsa_sign()
191 	/* Step B1: verify r' in [1, n - 1] */  in sm2_mbedtls_dsa_verify()
199 	/* Step B2: verify s' in [1, n - 1] */  in sm2_mbedtls_dsa_verify()
208 	 * Steps B3: M'bar = (ZA || M') and B4: e' = Hv(M'bar) are not done here  in sm2_mbedtls_dsa_verify()
209 	 * because @msg is supposed to contain the hash value e' already.  in sm2_mbedtls_dsa_verify()
227 	mres = mbedtls_mpi_copy(&PA.X, (mbedtls_mpi *)key->x);  in sm2_mbedtls_dsa_verify()
230 	mres = mbedtls_mpi_copy(&PA.Y, (mbedtls_mpi *)key->y);  in sm2_mbedtls_dsa_verify()
241 	/* Step B7: compute R = (e' + x1') mod n and verify R == r' */  in sm2_mbedtls_dsa_verify()