You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
168 lines
5.3 KiB
168 lines
5.3 KiB
using System;
|
|
|
|
using Org.BouncyCastle.Math.Raw;
|
|
using Org.BouncyCastle.Security;
|
|
using Org.BouncyCastle.Utilities.Encoders;
|
|
|
|
namespace Org.BouncyCastle.Math.EC.Custom.Sec
|
|
{
|
|
internal class SecP192K1Curve
|
|
: AbstractFpCurve
|
|
{
|
|
public static readonly BigInteger q = SecP192K1FieldElement.Q;
|
|
|
|
private const int SECP192K1_DEFAULT_COORDS = COORD_JACOBIAN;
|
|
private const int SECP192K1_FE_INTS = 6;
|
|
private static readonly ECFieldElement[] SECP192K1_AFFINE_ZS = new ECFieldElement[] { new SecP192K1FieldElement(BigInteger.One) };
|
|
|
|
protected readonly SecP192K1Point m_infinity;
|
|
|
|
public SecP192K1Curve()
|
|
: base(q)
|
|
{
|
|
this.m_infinity = new SecP192K1Point(this, null, null);
|
|
|
|
this.m_a = FromBigInteger(BigInteger.Zero);
|
|
this.m_b = FromBigInteger(BigInteger.ValueOf(3));
|
|
this.m_order = new BigInteger(1, Hex.DecodeStrict("FFFFFFFFFFFFFFFFFFFFFFFE26F2FC170F69466A74DEFD8D"));
|
|
this.m_cofactor = BigInteger.One;
|
|
this.m_coord = SECP192K1_DEFAULT_COORDS;
|
|
}
|
|
|
|
protected override ECCurve CloneCurve()
|
|
{
|
|
return new SecP192K1Curve();
|
|
}
|
|
|
|
public override bool SupportsCoordinateSystem(int coord)
|
|
{
|
|
switch (coord)
|
|
{
|
|
case COORD_JACOBIAN:
|
|
return true;
|
|
default:
|
|
return false;
|
|
}
|
|
}
|
|
|
|
public virtual BigInteger Q
|
|
{
|
|
get { return q; }
|
|
}
|
|
|
|
public override ECPoint Infinity
|
|
{
|
|
get { return m_infinity; }
|
|
}
|
|
|
|
public override int FieldSize
|
|
{
|
|
get { return q.BitLength; }
|
|
}
|
|
|
|
public override ECFieldElement FromBigInteger(BigInteger x)
|
|
{
|
|
return new SecP192K1FieldElement(x);
|
|
}
|
|
|
|
protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, bool withCompression)
|
|
{
|
|
return new SecP192K1Point(this, x, y, withCompression);
|
|
}
|
|
|
|
protected internal override ECPoint CreateRawPoint(ECFieldElement x, ECFieldElement y, ECFieldElement[] zs, bool withCompression)
|
|
{
|
|
return new SecP192K1Point(this, x, y, zs, withCompression);
|
|
}
|
|
|
|
public override ECLookupTable CreateCacheSafeLookupTable(ECPoint[] points, int off, int len)
|
|
{
|
|
uint[] table = new uint[len * SECP192K1_FE_INTS * 2];
|
|
{
|
|
int pos = 0;
|
|
for (int i = 0; i < len; ++i)
|
|
{
|
|
ECPoint p = points[off + i];
|
|
Nat192.Copy(((SecP192K1FieldElement)p.RawXCoord).x, 0, table, pos); pos += SECP192K1_FE_INTS;
|
|
Nat192.Copy(((SecP192K1FieldElement)p.RawYCoord).x, 0, table, pos); pos += SECP192K1_FE_INTS;
|
|
}
|
|
}
|
|
|
|
return new SecP192K1LookupTable(this, table, len);
|
|
}
|
|
|
|
public override ECFieldElement RandomFieldElement(SecureRandom r)
|
|
{
|
|
uint[] x = Nat192.Create();
|
|
SecP192K1Field.Random(r, x);
|
|
return new SecP192K1FieldElement(x);
|
|
}
|
|
|
|
public override ECFieldElement RandomFieldElementMult(SecureRandom r)
|
|
{
|
|
uint[] x = Nat192.Create();
|
|
SecP192K1Field.RandomMult(r, x);
|
|
return new SecP192K1FieldElement(x);
|
|
}
|
|
|
|
private class SecP192K1LookupTable
|
|
: AbstractECLookupTable
|
|
{
|
|
private readonly SecP192K1Curve m_outer;
|
|
private readonly uint[] m_table;
|
|
private readonly int m_size;
|
|
|
|
internal SecP192K1LookupTable(SecP192K1Curve outer, uint[] table, int size)
|
|
{
|
|
this.m_outer = outer;
|
|
this.m_table = table;
|
|
this.m_size = size;
|
|
}
|
|
|
|
public override int Size
|
|
{
|
|
get { return m_size; }
|
|
}
|
|
|
|
public override ECPoint Lookup(int index)
|
|
{
|
|
uint[] x = Nat192.Create(), y = Nat192.Create();
|
|
int pos = 0;
|
|
|
|
for (int i = 0; i < m_size; ++i)
|
|
{
|
|
uint MASK = (uint)(((i ^ index) - 1) >> 31);
|
|
|
|
for (int j = 0; j < SECP192K1_FE_INTS; ++j)
|
|
{
|
|
x[j] ^= m_table[pos + j] & MASK;
|
|
y[j] ^= m_table[pos + SECP192K1_FE_INTS + j] & MASK;
|
|
}
|
|
|
|
pos += (SECP192K1_FE_INTS * 2);
|
|
}
|
|
|
|
return CreatePoint(x, y);
|
|
}
|
|
|
|
public override ECPoint LookupVar(int index)
|
|
{
|
|
uint[] x = Nat192.Create(), y = Nat192.Create();
|
|
int pos = index * SECP192K1_FE_INTS * 2;
|
|
|
|
for (int j = 0; j < SECP192K1_FE_INTS; ++j)
|
|
{
|
|
x[j] = m_table[pos + j];
|
|
y[j] = m_table[pos + SECP192K1_FE_INTS + j];
|
|
}
|
|
|
|
return CreatePoint(x, y);
|
|
}
|
|
|
|
private ECPoint CreatePoint(uint[] x, uint[] y)
|
|
{
|
|
return m_outer.CreateRawPoint(new SecP192K1FieldElement(x), new SecP192K1FieldElement(y), SECP192K1_AFFINE_ZS, false);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|