Adjust various bignum functions to use BN_CTX for variables instead of

[openssl.git] / crypto / bn / bn_recp.c

diff --git a/crypto/bn/bn_recp.c b/crypto/bn/bn_recp.c
index a6d7900a3cc9710b2c4d53c3bd42e580846856c5..a08489e04a5532b40a7967b23ded0b3126f25a43 100644 (file)
--- a/crypto/bn/bn_recp.c
+++ b/crypto/bn/bn_recp.c
@@ -72,7 +72,7 @@ BN_RECP_CTX *BN_RECP_CTX_new(void)
        {
        BN_RECP_CTX *ret;
 
-       if ((ret=(BN_RECP_CTX *)Malloc(sizeof(BN_RECP_CTX))) == NULL)
+       if ((ret=(BN_RECP_CTX *)OPENSSL_malloc(sizeof(BN_RECP_CTX))) == NULL)
                return(NULL);
 
        BN_RECP_CTX_init(ret);
@@ -88,23 +88,24 @@ void BN_RECP_CTX_free(BN_RECP_CTX *recp)
        BN_free(&(recp->N));
        BN_free(&(recp->Nr));
        if (recp->flags & BN_FLG_MALLOCED)
-               Free(recp);
+               OPENSSL_free(recp);
        }
 
 int BN_RECP_CTX_set(BN_RECP_CTX *recp, const BIGNUM *d, BN_CTX *ctx)
        {
-       BN_copy(&(recp->N),d);
+       if (!BN_copy(&(recp->N),d)) return 0;
        BN_zero(&(recp->Nr));
        recp->num_bits=BN_num_bits(d);
        recp->shift=0;
        return(1);
        }
 
-int BN_mod_mul_reciprocal(BIGNUM *r, BIGNUM *x, BIGNUM *y, BN_RECP_CTX *recp,
-            BN_CTX *ctx)
+int BN_mod_mul_reciprocal(BIGNUM *r, const BIGNUM *x, const BIGNUM *y,
+       BN_RECP_CTX *recp, BN_CTX *ctx)
        {
        int ret=0;
        BIGNUM *a;
+       const BIGNUM *ca;
 
        BN_CTX_start(ctx);
        if ((a = BN_CTX_get(ctx)) == NULL) goto err;
@@ -114,19 +115,20 @@ int BN_mod_mul_reciprocal(BIGNUM *r, BIGNUM *x, BIGNUM *y, BN_RECP_CTX *recp,
                        { if (!BN_sqr(a,x,ctx)) goto err; }
                else
                        { if (!BN_mul(a,x,y,ctx)) goto err; }
+               ca = a;
                }
        else
-               a=x; /* Just do the mod */
+               ca=x; /* Just do the mod */
 
-       BN_div_recp(NULL,r,a,recp,ctx);
-       ret=1;
+       ret = BN_div_recp(NULL,r,ca,recp,ctx);
 err:
        BN_CTX_end(ctx);
+       bn_check_top(r);
        return(ret);
        }
 
-int BN_div_recp(BIGNUM *dv, BIGNUM *rem, BIGNUM *m, BN_RECP_CTX *recp,
-            BN_CTX *ctx)
+int BN_div_recp(BIGNUM *dv, BIGNUM *rem, const BIGNUM *m,
+       BN_RECP_CTX *recp, BN_CTX *ctx)
        {
        int i,j,ret=0;
        BIGNUM *a,*b,*d,*r;
@@ -147,7 +149,7 @@ int BN_div_recp(BIGNUM *dv, BIGNUM *rem, BIGNUM *m, BN_RECP_CTX *recp,
        if (BN_ucmp(m,&(recp->N)) < 0)
                {
                BN_zero(d);
-               BN_copy(r,m);
+               if (!BN_copy(r,m)) return 0;
                BN_CTX_end(ctx);
                return(1);
                }
@@ -157,20 +159,28 @@ int BN_div_recp(BIGNUM *dv, BIGNUM *rem, BIGNUM *m, BN_RECP_CTX *recp,
         * we need multiply ABCDEF by 3 digests of the reciprocal of ab
         *
         */
-       i=BN_num_bits(m);
 
+       /* i := max(BN_num_bits(m), 2*BN_num_bits(N)) */
+       i=BN_num_bits(m);
        j=recp->num_bits<<1;
        if (j>i) i=j;
-       j>>=1;
 
+       /* Nr := round(2^i / N) */
        if (i != recp->shift)
                recp->shift=BN_reciprocal(&(recp->Nr),&(recp->N),
-                       i,ctx);
+                       i,ctx); /* BN_reciprocal returns i, or -1 for an error */
+       if (recp->shift == -1) goto err;
 
-       if (!BN_rshift(a,m,j)) goto err;
+       /* d := |round(round(m / 2^BN_num_bits(N)) * recp->Nr / 2^(i - BN_num_bits(N)))|
+        *    = |round(round(m / 2^BN_num_bits(N)) * round(2^i / N) / 2^(i - BN_num_bits(N)))|
+        *   <= |(m / 2^BN_num_bits(N)) * (2^i / N) * (2^BN_num_bits(N) / 2^i)|
+        *    = |m/N|
+        */
+       if (!BN_rshift(a,m,recp->num_bits)) goto err;
        if (!BN_mul(b,a,&(recp->Nr),ctx)) goto err;
-       if (!BN_rshift(d,b,i-j)) goto err;
+       if (!BN_rshift(d,b,i-recp->num_bits)) goto err;
        d->neg=0;
+
        if (!BN_mul(b,&(recp->N),d,ctx)) goto err;
        if (!BN_usub(r,m,b)) goto err;
        r->neg=0;
@@ -181,16 +191,7 @@ int BN_div_recp(BIGNUM *dv, BIGNUM *rem, BIGNUM *m, BN_RECP_CTX *recp,
                {
                if (j++ > 2)
                        {
-#if 0
-                       /* work around some bug:
-                          -1CC0E177F93042B29D309839F8019DB93404D7A395F1E162
-                          5383BF622A20B17E1BAA999336988B82B93F5FB77B55B4B68
-                          9412000000000031 / 298EB5957DBFB8CBB2CC2A9F789D2B5
-                          fails, for example. */
-                       ret=BN_div(dv,rem,m,&(recp->N),ctx);
-#else
                        BNerr(BN_F_BN_MOD_MUL_RECIPROCAL,BN_R_BAD_RECIPROCAL);
-#endif
                        goto err;
                        }
                if (!BN_usub(r,r,&(recp->N))) goto err;
@@ -203,6 +204,8 @@ int BN_div_recp(BIGNUM *dv, BIGNUM *rem, BIGNUM *m, BN_RECP_CTX *recp,
        ret=1;
 err:
        BN_CTX_end(ctx);
+       if(dv) bn_check_top(dv);
+       if(rem) bn_check_top(rem);
        return(ret);
        } 
 
@@ -210,20 +213,22 @@ err:
  * We actually calculate with an extra word of precision, so
  * we can do faster division if the remainder is not required.
  */
-int BN_reciprocal(BIGNUM *r, BIGNUM *m, int len, BN_CTX *ctx)
+/* r := 2^len / m */
+int BN_reciprocal(BIGNUM *r, const BIGNUM *m, int len, BN_CTX *ctx)
        {
        int ret= -1;
-       BIGNUM t;
+       BIGNUM *t;
+
+       BN_CTX_start(ctx);
+       if((t = BN_CTX_get(ctx)) == NULL) goto err;
 
-       BN_init(&t);
+       if (!BN_set_bit(t,len)) goto err;
 
-       BN_zero(&t);
-       if (!BN_set_bit(&t,len)) goto err;
+       if (!BN_div(r,NULL,t,m,ctx)) goto err;
 
-       if (!BN_div(r,NULL,&t,m,ctx)) goto err;
        ret=len;
 err:
-       BN_free(&t);
+       bn_check_top(r);
+       BN_CTX_end(ctx);
        return(ret);
        }
-