BLS12443

Documentation

Index

• Constants
• Variables
• func Another(r []*FP12, P1 *ECP2, Q1 *ECP)
• func Another_pc(r []*FP12, T []*FP4, QV *ECP)
• func AuthDecap(config_id int, skR []byte, pkE []byte, pkR []byte, pkS []byte) []byte
• func AuthEncap(config_id int, skE []byte, skS []byte, pkE []byte, pkR []byte, pkS []byte) []byte
• func Comp(a *BIG, b *BIG) int
• func Core_Sign(SIG []byte, M []byte, S []byte) int
• func Core_Verify(SIG []byte, M []byte, W []byte) int
• func Decap(config_id int, skR []byte, pkE []byte, pkR []byte) []byte
• func DeriveKeyPair(config_id int, SK []byte, PK []byte, SEED []byte) bool
• func ECDH_ECIES_DECRYPT(sha int, P1 []byte, P2 []byte, V []byte, C []byte, T []byte, U []byte) []byte
• func ECDH_ECIES_ENCRYPT(sha int, P1 []byte, P2 []byte, RNG *core.RAND, W []byte, M []byte, V []byte, ...) []byte
• func ECDH_ECPSP_DSA(sha int, RNG *core.RAND, S []byte, F []byte, C []byte, D []byte) int
• func ECDH_ECPSVDP_DH(S []byte, WD []byte, Z []byte, typ int) int
• func ECDH_ECPVP_DSA(sha int, W []byte, F []byte, C []byte, D []byte) int
• func ECDH_IN_RANGE(S []byte) bool
• func ECDH_KEY_PAIR_GENERATE(RNG *core.RAND, S []byte, W []byte) int
• func ECDH_PUBLIC_KEY_VALIDATE(W []byte) int
• func Encap(config_id int, skE []byte, pkE []byte, pkR []byte) []byte
• func FP_tpo(i *FP, s *FP) int
• func G1member(P *ECP) bool
• func G2member(P *ECP2) bool
• func GTcyclotomic(m *FP12) bool
• func GTmember(m *FP12) bool
• func Init() int
• func KEY_PAIR_GENERATE(RNG *core.RAND, D []byte, Q []byte) int
• func KeyPairGenerate(IKM []byte, S []byte, W []byte) int
• func KeySchedule(config_id int, mode int, Z []byte, info []byte, psk []byte, pskID []byte) ([]byte, []byte, []byte)
• func MPIN_CLIENT_1(CID []byte, rng *core.RAND, X []byte, pin int, TOKEN []byte, SEC []byte, ...) int
• func MPIN_CLIENT_2(X []byte, Y []byte, SEC []byte) int
• func MPIN_ENCODE_TO_CURVE(DST []byte, ID []byte, HCID []byte)
• func MPIN_EXTRACT_PIN(CID []byte, pin int, TOKEN []byte) int
• func MPIN_GET_CLIENT_SECRET(S []byte, IDHTC []byte, CST []byte) int
• func MPIN_GET_SERVER_SECRET(S []byte, SST []byte) int
• func MPIN_HASH_ID(sha int, ID []byte) []byte
• func MPIN_RANDOM_GENERATE(rng *core.RAND, S []byte) int
• func MPIN_SERVER(HID []byte, Y []byte, SST []byte, xID []byte, mSEC []byte) int
• func RFC7748(r *BIG)
• func SIGNATURE(ph bool, D []byte, ctx []byte, M []byte, SIG []byte) int
• func VERIFY(ph bool, Q []byte, ctx []byte, M []byte, SIG []byte) bool
• type BIG
  • func BIG_frombytearray(b []byte, n int) *BIG
  • func FromBytes(b []byte) *BIG
  • func Modadd(a1, b1, m *BIG) *BIG
  • func Modmul(a1, b1, m *BIG) *BIG
  • func Modneg(a1, m *BIG) *BIG
  • func Modsqr(a1, m *BIG) *BIG
  • func NewBIG() *BIG
  • func NewBIGcopy(x *BIG) *BIG
  • func NewBIGdcopy(x *DBIG) *BIG
  • func NewBIGint(x int) *BIG
  • func NewBIGints(x [NLEN]Chunk) *BIG
  • func Random(rng *core.RAND) *BIG
  • func Randomnum(q *BIG, rng *core.RAND) *BIG
  • func Randtrunc(q *BIG, trunc int, rng *core.RAND) *BIG
  • func (r *BIG) Invmodp(p *BIG)
  • func (r *BIG) Jacobi(p *BIG) int
  • func (r *BIG) Minus(x *BIG) *BIG
  • func (r *BIG) Mod(m *BIG)
  • func (r *BIG) Nbits() int
  • func (r *BIG) Plus(x *BIG) *BIG
  • func (r *BIG) Powmod(e1 *BIG, m *BIG) *BIG
  • func (r *BIG) ToBytes(b []byte)
  • func (r *BIG) ToString() string
• type Chunk
• type DBIG
  • func DBIG_fromBytes(b []byte) *DBIG
  • func NewDBIG() *DBIG
  • func NewDBIGcopy(x *DBIG) *DBIG
  • func NewDBIGscopy(x *BIG) *DBIG
  • func (r *DBIG) Mod(m *BIG) *BIG
• type ECP
  • func ECP_fromBytes(b []byte) *ECP
  • func ECP_generator() *ECP
  • func ECP_hap2point(h *BIG) *ECP
  • func ECP_map2point(h *FP) *ECP
  • func ECP_mapit(h []byte) *ECP
  • func ECP_muln(n int, X []*ECP, e []*BIG) *ECP
  • func G1mul(P *ECP, e *BIG) *ECP
  • func NewECP() *ECP
  • func NewECPbig(ix *BIG) *ECP
  • func NewECPbigint(ix *BIG, s int) *ECP
  • func NewECPbigs(ix *BIG, iy *BIG) *ECP
  • func (E *ECP) Add(Q *ECP)
  • func (E *ECP) Affine()
  • func (E *ECP) Cfp()
  • func (E *ECP) Copy(P *ECP)
  • func (E *ECP) Equals(Q *ECP) bool
  • func (E *ECP) GetS() int
  • func (E *ECP) GetX() *BIG
  • func (E *ECP) GetY() *BIG
  • func (E *ECP) Is_infinity() bool
  • func (E *ECP) Mul(e *BIG) *ECP
  • func (E *ECP) Mul2(e *BIG, Q *ECP, f *BIG) *ECP
  • func (E *ECP) Neg()
  • func (E *ECP) Sub(Q *ECP)
  • func (E *ECP) ToBytes(b []byte, compress bool)
  • func (E *ECP) ToString() string
• type ECP2
  • func ECP2_fromBytes(b []byte) *ECP2
  • func ECP2_generator() *ECP2
  • func ECP2_hap2point(h *BIG) *ECP2
  • func ECP2_map2point(H *FP2) *ECP2
  • func ECP2_mapit(h []byte) *ECP2
  • func G2mul(P *ECP2, e *BIG) *ECP2
  • func NewECP2() *ECP2
  • func NewECP2fp2(ix *FP2, s int) *ECP2
  • func NewECP2fp2s(ix *FP2, iy *FP2) *ECP2
  • func (E *ECP2) Add(Q *ECP2) int
  • func (E *ECP2) Affine()
  • func (E *ECP2) Cfp()
  • func (E *ECP2) Copy(P *ECP2)
  • func (E *ECP2) Equals(Q *ECP2) bool
  • func (E *ECP2) GetX() *FP2
  • func (E *ECP2) GetY() *FP2
  • func (E *ECP2) Is_infinity() bool
  • func (E *ECP2) Mul(e *BIG) *ECP2
  • func (E *ECP2) Sub(Q *ECP2) int
  • func (E *ECP2) ToBytes(b []byte, compress bool)
  • func (E *ECP2) ToString() string
• type FP
  • func FP_fromBytes(b []byte) *FP
  • func NewFP() *FP
  • func NewFPbig(a *BIG) *FP
  • func NewFPcopy(a *FP) *FP
  • func NewFPint(a int) *FP
  • func NewFPrand(rng *core.RAND) *FP
  • func RHS(x *FP) *FP
  • func (F *FP) Equals(a *FP) bool
  • func (F *FP) ToBytes(b []byte)
  • func (F *FP) ToString() string
• type FP12
  • func Ate(P1 *ECP2, Q1 *ECP) *FP12
  • func Ate2(P1 *ECP2, Q1 *ECP, R1 *ECP2, S1 *ECP) *FP12
  • func FP12_fromBytes(w []byte) *FP12
  • func Fexp(m *FP12) *FP12
  • func GTpow(d *FP12, e *BIG) *FP12
  • func Initmp() []*FP12
  • func Miller(r []*FP12) *FP12
  • func NewFP12() *FP12
  • func NewFP12copy(x *FP12) *FP12
  • func NewFP12fp4(d *FP4) *FP12
  • func NewFP12fp4s(d *FP4, e *FP4, f *FP4) *FP12
  • func NewFP12int(d int) *FP12
  • func (F *FP12) Compow(e *BIG, r *BIG) *FP4
  • func (F *FP12) Copy(x *FP12)
  • func (F *FP12) Equals(x *FP12) bool
  • func (F *FP12) Inverse()
  • func (F *FP12) Isunity() bool
  • func (F *FP12) Mul(y *FP12)
  • func (F *FP12) Pow(e *BIG) *FP12
  • func (F *FP12) ToBytes(w []byte)
  • func (F *FP12) ToString() string
• type FP2
  • func FP2_fromBytes(bf []byte) *FP2
  • func NewFP2() *FP2
  • func NewFP2big(c *BIG) *FP2
  • func NewFP2bigs(c *BIG, d *BIG) *FP2
  • func NewFP2copy(x *FP2) *FP2
  • func NewFP2fp(c *FP) *FP2
  • func NewFP2fps(c *FP, d *FP) *FP2
  • func NewFP2int(a int) *FP2
  • func NewFP2ints(a int, b int) *FP2
  • func NewFP2rand(rng *core.RAND) *FP2
  • func RHS2(x *FP2) *FP2
  • func (F *FP2) Equals(x *FP2) bool
  • func (F *FP2) GetA() *BIG
  • func (F *FP2) GetB() *BIG
  • func (F *FP2) ToBytes(bf []byte)
  • func (F *FP2) ToString() string
• type FP4
  • func FP4_fromBytes(bf []byte) *FP4
  • func NewFP4() *FP4
  • func NewFP4copy(x *FP4) *FP4
  • func NewFP4fp(c *FP) *FP4
  • func NewFP4fp2(c *FP2) *FP4
  • func NewFP4fp2s(c *FP2, d *FP2) *FP4
  • func NewFP4int(a int) *FP4
  • func NewFP4ints(a int, b int) *FP4
  • func NewFP4rand(rng *core.RAND) *FP4
  • func (F *FP4) Equals(x *FP4) bool
  • func (F *FP4) ToBytes(bf []byte)

Constants

const AESKEY int = 16

const ALLOW_ALT_COMPRESS bool = false

const ATE_BITS int = 75

const BAD_PARAMS int = -11

const BAD_PIN int = -19

const BASEBITS uint = 60

const BFS int = int(MODBYTES)

const BGS int = int(MODBYTES)

const BIGBITS int = int(MODBYTES * 8)

const BIG_ENDIAN_SIGN bool = false

const BLS12 int = 2

const BLS24 int = 3

const BLS48 int = 4

const BLS_FAIL int = -1

const BLS_OK int = 0

const BN int = 1

const CHUNK int = 64 /* Set word size */

const CURVETYPE int = WEIERSTRASS

const CURVE_A int = 0

const CURVE_B_I int = 4

const CURVE_Cof_I int = 0

*** rom curve parameters ***** Ate Bits= 75 G2 Table size= 78

const CURVE_PAIRING_TYPE int = BLS12

const DNLEN int = 2 * NLEN

const D_TYPE int = 0

Pairing Twist type

const ECDH_ERROR int = -3

const ECDH_INVALID_PUBLIC_KEY int = -2

const EDDSA_INVALID_PUBLIC_KEY int = -2

const EDWARDS int = 1

const EFS int = int(MODBYTES)

const INVALID int = -4

const EGS int = int(MODBYTES)

const FEXCESS int32 = ((int32(1) << 30) - 1)

const FP_DENSE int = 5

const FP_ONE int = 1

const FP_SPARSE int = 4

const FP_SPARSER int = 3

const FP_SPARSEST int = 2

const FP_ZERO int = 0

Sparsity

const G2_TABLE int = 78

const GENERALISED_MERSENNE int = 3

const HASH_TYPE int = 32

const HBITS uint = (BASEBITS / 2)

const HTC_ISO int = 11

const HTC_ISO_G2 int = 3

const INVALID_POINT int = -14

const MAXPIN int32 = 10000 /* PIN less than this */

const MFS int = int(MODBYTES)

import "fmt"

const MGS int = int(MODBYTES)

const MODBITS uint = 443 /* Number of bits in Modulus */

Modulus details

const MODBYTES uint = 56

BIG length in bytes and number base

const MODTYPE int = NOT_SPECIAL //NOT_SPECIAL

const MONTGOMERY int = 2

const MONTGOMERY_FRIENDLY int = 2

const M_TYPE int = 1

const NEGATIVEX int = 1

const NEGATOWER int = 0

const NEXCESS int = (1 << (uint(CHUNK) - BASEBITS - 1))

const NLEN int = int((1 + ((8*MODBYTES - 1) / BASEBITS)))

BIG lengths and Masks

const NOT int = 0

Pairing Friendly?

const NOT_SPECIAL int = 0

Modulus types

const PBLEN int32 = 14 /* Number of bits in PIN */

const PM1D2 uint = 1 /* Modulus mod 8 */

const POSITIVEX int = 0

Pairing x parameter sign

const POSITOWER int = 1

const PSEUDO_MERSENNE int = 1

const QNRI int = 0 // Fp2 QNR

const RIADZ int = -7 /* hash-to-point Z */

const RIADZG2A int = 1 /* G2 hash-to-point Z */

const RIADZG2B int = 1 /* G2 hash-to-point Z */

const SEXTIC_TWIST int = M_TYPE

const SIGN_OF_X int = POSITIVEX

const TBITS uint = MODBITS % BASEBITS // Number of active bits in top word

const TOWER int = NEGATOWER // Tower type

const USE_GLV bool = true

const USE_GS_G2 bool = true

const USE_GS_GT bool = true

const WEIERSTRASS int = 0

Curve types

const WRONG_ORDER int = -18

Variables

var CRu = [...]Chunk{0xFEAAAAAC2AAAAA9, 0xEAB145552032AFF, 0xE6D162819938FE1, 0xA51F36592AC40E7, 0xE71AEDBDFA5AE98, 0xE2AB89302F9EF2A, 0xDCB20A9C8688E1B, 0x575A53}

var CURVE_Ad = [...]Chunk{0x2B7CF1B298E3466, 0x6C9FE584ADB58A, 0xAE618C4441D091D, 0x649C886E6D2CC2B, 0x7BDA1ECDF8CA78F, 0x9FC3FCD80DBBB27, 0x74D4F1F9729760C, 0x19EA0E}

var CURVE_Adi = [...]Chunk{0xF0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}

var CURVE_Adr = [...]Chunk{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}

var CURVE_B = [...]Chunk{0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}

var CURVE_Bd = [...]Chunk{0x1CCB86130F780D9, 0x2D5A7C07F4A51A0, 0x99A51B6FD01A1BB, 0xAE12B32E246480, 0x45C8B048B4D289, 0xAD74B1FED8D288B, 0x276B220D6B08F5B, 0x29D1A2}

var CURVE_Bdi = [...]Chunk{0x3F4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}

var CURVE_Bdr = [...]Chunk{0x3F4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}

var CURVE_Bnx = [...]Chunk{0xFF0000012000000, 0x403F, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}

var CURVE_Cof = [...]Chunk{0xFF0000011FFFFFF, 0x403F, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}

var CURVE_Gx = [...]Chunk{0xE6CA5B278ABC574, 0xFC6EC8ECBE2A6D2, 0x29BD7C18640BFDD, 0x8814D9BD1F29789, 0xABA282B7CE9049E, 0x43412B4E0DF13E7, 0xB62517BEDDB681E, 0x39E6C4}

var CURVE_Gy = [...]Chunk{0x994157597A9CE3F, 0xF905D6B69C431DC, 0x3476A5568900742, 0xB09E5F3D3F429D6, 0xFAD8CED72F5769D, 0xB19187E10D9FBDD, 0x87504385DD443B2, 0x12621F}

var CURVE_HTPC = [...]Chunk{0x14C40448911B6DF, 0xA05D73B4005575A, 0x19D3FFA0043A6A, 0x9DCBB950453AAB1, 0x8F188A39830074A, 0x886F6C1313A12B, 0x323F40FBC329680, 0x4F6592}

var CURVE_HTPC2 = [...]Chunk{0x933B490F52C1DFF, 0x832A3579E306168, 0x5C1DE6F2F44EC7F, 0xFBCE0273E65375, 0x60C4B0A24C57CDB, 0xFF3652096A927A1, 0x668298885C86BFA, 0xD802F}

var CURVE_Order = [...]Chunk{0xEBC000000000001, 0x81987F70023FFFF, 0x340905DC5A3E80, 0x94374F2CDDD3713, 0x10405F3D0D062F6, 0x0, 0x0, 0x0}

var CURVE_Pxa = [...]Chunk{0x65025557F3AF148, 0xAF4DBD1F46E75B8, 0x1730875544DD695, 0xE37A84E30576317, 0x2760C16CE339FC8, 0x258FB84649C73F2, 0x45DECE4C1502219, 0x2C5EC}

var CURVE_Pxb = [...]Chunk{0xC4F6E6BB36279B6, 0x530E32492D8015B, 0x3F16872759E2951, 0xDD4ACB43BA5202F, 0xFE06E165089BD13, 0xDA296B65CE7FAEA, 0x16EC13B532F64C9, 0xF64B9}

var CURVE_Pya = [...]Chunk{0xBFC0EA271C0B975, 0x971B0987719FB7D, 0x783587349A91EFB, 0x5B26E1E164C5BA2, 0x34AE6E2149122B6, 0x919E2C134F4019F, 0x46D510457BD2F, 0x45EA07}

var CURVE_Pyb = [...]Chunk{0x3EE1FF0082464AD, 0xF8557C8A8F0CF1B, 0x6062A50D0077B77, 0x806D6E17CEEF5EB, 0x8F95D948A372182, 0x1690DECDC940F93, 0xEB1BEA8F586B9E9, 0x34015D}

var Fra = [...]Chunk{0xD3B144FC49551C8, 0xB811B6AF7EB3463, 0xC145F9D97D38DC4, 0x75E17CAAF11AFC7, 0x300FB086DD029E2, 0x8C6E48295004F76, 0x31DFF2E447F979B, 0x440309}

var Frb = [...]Chunk{0x2BF965AEC1558E3, 0xBD1B1EA5E5D365C, 0x95DA4F26B6EBCFA, 0x7B69F569FDF5B99, 0xBC3F5A32814E7BD, 0x7E14132C823B8B6, 0xAAD217B83E8FA94, 0x13574A}

var G2_TAB []*FP4

var Modulus = [...]Chunk{0xFFAAAAAB0AAAAAB, 0x752CD5556486ABF, 0x572049003424ABF, 0xF14B7214EF10B61, 0xEC4F0AB95E5119F, 0xA825B55D24082C, 0xDCB20A9C8689230, 0x575A53}

Base bits= 60

var PC = [53][8]Chunk{{0xCA2E8BA3F34E48, 0x9C1F67AB89650A, 0x4FA71DA7BA330, 0xD104A18D275FFDC, 0xE98A8B61C21689C, 0xC03CB4E05961F09, 0xAB977EAB088A0C6, 0xF2910}, {0x8DAB6776604D319, 0x5E333A54FF1F29E, 0xB06B4CD9E4CBF06, 0xF8DAA9493D66B74, 0x26D3AB458B9CC61, 0xBACFA058DFB0295, 0x3F9DF9DF3EB0CB5, 0x3DFC8E}, {0xF5334873EA1F60A, 0x9549B6EC7E13A86, 0xA5D45908C4E2558, 0xE0D733926F79B73, 0xCDE1872F1991243, 0x8E00DEE03D4D2CA, 0xD168F4937C08D2C, 0x53D3D2}, {0x44C150037499741, 0x3BD7556E9D85B54, 0x70B485348521E19, 0x4DCEB44DF6F5242, 0x7F602EC95D38A81, 0xD3B6B4317C39525, 0xAB827397CF26EAB, 0xF40BE}, {0xD780C2EE8A9B7DD, 0x5BFD0A87BA123F6, 0xB704149A656E9B7, 0xFB3D8D8250169A7, 0xDBAFE384E1B5A80, 0xE33E6DB698822E2, 0x1ADFD5731D2D4D2, 0x27E3F5}, {0xEE18F93C41C4477, 0x8822B165E9F3BB5, 0xF81BCEAD751713B, 0xF3FD57505403933, 0x543A69376B6BAE1, 0x2E2C188E07B1B4A, 0xFA47058B97839A4, 0x129214}, {0xC46466ED0815090, 0x82A8477388286F6, 0x55415FA6E5B59C3, 0x4FCDBA32F596982, 0x3BEBA0B8B800647, 0x8067EDEC24FD2DC, 0x23735D491406F8D, 0x27031A}, {0x237171BD500BAD1, 0x54E5DABBDA52179, 0x39EED6D9840047, 0x9F62B3C5BBE70BB, 0x5B682935D460B68, 0xE37CCA944164133, 0xBAA9B754C8769C5, 0x4F71D5}, {0x48821C29E8081C0, 0x8B10F8432B1F73F, 0xF33341BDF35547E, 0x44D8A286F2D64E3, 0x7CF3F353E5AFD5, 0x77CBAA1A38E67B6, 0x474039CD79B26B0, 0x15F7E2}, {0xF92A02857226171, 0x670D84A4DB8412E, 0x4C07F33AC92190E, 0xFE7C239718D531F, 0x16FEB62FC918257, 0x551F5FA232DBF4C, 0xA2262B91DD663A6, 0x513BA6}, {0x139421007A91954, 0xC897089BCA8F8E1, 0xF39670B7F8E69E7, 0xECD5CC0FAC3C084, 0x4A62E46CB8D5D73, 0xD6958651AF783AE, 0x6214D7EAF10E794, 0x4A1CF5}, {0x5035F58B92801A5, 0x9DD21175856DFA0, 0x1C54471AC39F6E8, 0x4A4455B68F864, 0xCEBF3444F479330, 0xA1896ECB026AE8F, 0x13798A8AD8FBB10, 0x40036}, {0x12593C28F9D1C0A, 0x9E53BCD23503B31, 0x74FF15EBD437870, 0x814D22AAA5002D5, 0xE3CD6452AC2C033, 0xCEDA7682EAD8194, 0xCA8D948BF6077F1, 0x4B6163}, {0x695774ADF0A734C, 0x3A4F0FAF18848AE, 0xA329B8FFF150217, 0xCFA4BB81D32CB6C, 0x46753EE2A5BF898, 0x76FF71FFF34CE9C, 0xF985D613FEBD9A1, 0x4AE3B1}, {0xA6F72CFF1F37A8D, 0xC08952B61FB4664, 0x75F3020A8B74C59, 0xF837EF511EC585E, 0xACEE128F587CFCE, 0xC68B982093597FB, 0x11DBD5819E24045, 0x1305B0}, {0x8AD991A3124740B, 0xB1BA6424469E9C6, 0x6D0500D1A8B0336, 0x4697B3B665ECD64, 0x789128B282C2A24, 0x7C5FEA435E1E511, 0xBF4998179A5D89A, 0x370542}, {0x6EB49AAAD27D311, 0xC44B2B709A2C349, 0x97D96FEB98EEF0C, 0xEDFE38DCE8507CB, 0xD7302DB5F6B3FF9, 0xA8E476581D84921, 0xA51CC54C7152F5, 0x47A513}, {0xC2E3ACF1F1FC577, 0x819DC8582B977B, 0x2CAB1522882CAB8, 0xC8900CA9AF3D679, 0x479599396371CE7, 0xCDCE25F02C5B347, 0xA58D8B2A509BE1A, 0x2FCD0A}, {0x657289AE9150A48, 0x38C6B088F4220C0, 0x3483EB38D0F458, 0x589009EAF978350, 0x7EBB824407235B4, 0x56CA72A2CCB14E4, 0xEA66FC272BCDCCF, 0x439DC3}, {0x6623DEF9357D628, 0xFD7BA8E7DE31234, 0x99C040938DB9E8B, 0xB0FE406C9D3CDB6, 0xD38F65BE751A703, 0x7CA37104A247DEB, 0x7ECA5B210A36965, 0x3932D3}, {0xA23FE2FB17D6EEC, 0x7ABF374B72AAE7, 0x62C2BF1860877F7, 0x8C4635085D4226F, 0x295B0F5706768CC, 0x227C909C7AEB12F, 0x521176C4D8AEC4C, 0x2C87AB}, {0x6F88B2A580B7137, 0x6A01C7EC3DCBF40, 0x77A61FE541BC690, 0xC21EED75E09CBBE, 0xD546C64B66EF123, 0xE9BE54149BB92F4, 0x2737E7C402B1E3A, 0x2542AA}, {0x75832C6E05BEFD8, 0x5DFA5C39B3B092F, 0xE8C16C48839C904, 0xCD2EF769EC4E8B6, 0x2C80F565FA5F23C, 0x6E9127B74DF1A18, 0xF8539726D23B186, 0x160D2}, {0x419B4088ACA5AD9, 0x7306B8707C1ADC1, 0xACD61FFAF6099A0, 0xC51DEF3D128F489, 0x81B7085E8A76F4E, 0x2D3B39889E0FB08, 0xD61F1EA307C7E55, 0x4BF3DF}, {0xA8371AA52C72185, 0x8EB49A55D2D9E38, 0xC6C6736817932E9, 0x9DBF37057564284, 0x443A1CBA5B94394, 0xD87AF590E234AA5, 0x7D1FCAC035D89C, 0x2FC680}, {0xFEA149BAEFEE0EA, 0x3CF4640E446D388, 0x1E4CE07FE5EDC2C, 0x5F90A3F48CF058E, 0x9F19E019EED6342, 0xF4E2F3EB5891E98, 0x7D7EECC281EEE08, 0x4B2EE5}, {0x3F500EED6887410, 0x10F5106924F0215, 0x5AF361F0BCBCC51, 0xBA469C2DA94E589, 0xD831D9B3D39CDF1, 0xCB5839282F3E02D, 0x2DE045F7C285BD4, 0x3DFAA0}, {0xFEE121340DD0AA9, 0xC80E715435565F5, 0xC9BDDB418617757, 0x9008A702AC7A865, 0x7B352BC03C0F76A, 0xDB9BAD304E54DE7, 0x20262A2ADBD4C8F, 0x4B32FD}, {0x2DE43411E428BFD, 0xA41124E28EB7D81, 0xEFCAE1597CB7A3F, 0xD7659AAD7AD2D1, 0x44F775441C84B43, 0x53A8AE3DCFF23BD, 0x40645BA7F7D5EB, 0x285EEC}, {0x2727300D2540F1F, 0xFDECB15E09A345, 0x21DEA9022B44831, 0xBBB119161008E89, 0xECA756DE403AF19, 0xEED8A0E6D5E59C, 0x95A363EF5B040D0, 0x522411}, {0xA2C27EEF545BF96, 0xAA5B86F0E4960D7, 0x6AFF6F2F34CA0A0, 0x2D50D7FDB10F76C, 0xC47B4C01E25E74A, 0xCA748839AA13431, 0xB0C0E8C18582A96, 0x4E11DC}, {0xA3678E32C96D5DE, 0xF315422ACB1139C, 0x2AE44725AB3522D, 0xE862D8477DF1321, 0x8E709EED8BC73E4, 0xDAC20BC1126FA15, 0x248E008527C5F1A, 0x365008}, {0xDEAED787A433825, 0x3D4E69DE567CE3B, 0x2F8F7B0845854D8, 0xAECAE67C3C4F7CF, 0x210926FB5CF553C, 0x637AFBF8D84A492, 0x2CD7464BC2B8EBD, 0x19F380}, {0x12C16B5AF92004C, 0xB35CDE4958DDF53, 0xFE46B6BD7B008FF, 0x23AFFA28D733504, 0x4B1CFF42422BBD, 0x149A03F9D6D5E25, 0x30A3BB3DEC0E34E, 0x50A16D}, {0xCF5416E293FF538, 0xE30DE58F0F4B3AC, 0xEF46ECFBCACC622, 0xE9C2E6E58987C09, 0x63DC6C30073E6A1, 0xBFE3144AFF62008, 0x9C5A4805114B2B, 0x9F07F}, {0x56A7C6F9B349B02, 0xE2D5942C7B67A98, 0x3C554E3EEB67832, 0xE7639D982B6E742, 0xAEE771637673FA5, 0xB9542E2111157FD, 0xE709FFAF45FCE8E, 0x3DB8D6}, {0x8B181AFDE8BF419, 0x239F62BDFA32D68, 0x9508D18C21BA687, 0xCAC0B6357E22FA9, 0x2FB95688793946F, 0xF7099FD787682C3, 0x773503632E5DFEA, 0x179F05}, {0x2A7CE8235EA6770, 0x31EF18A9E5281EC, 0x68AE4235B272CD, 0xB1927ED87AEFA12, 0x1E383463BBD9F0A, 0x512707DEA5F069C, 0x5DFFD3541444C2F, 0x4EB5DD}, {0x9BDB2F926C0FF64, 0x7850C5E5EAFEE09, 0xD85E57E18A2E9E9, 0x50A841EB086F8DE, 0x69650BC2A3F0EAD, 0xABC5566E8E03A32, 0xD32254356A821BA, 0x19B7C1}, {0x2B6551A5AD61CD4, 0x6FE4521DBA27B6F, 0x50ADFEABFB234A1, 0xBCD0B26F910D08, 0x9AFEB2E0FE6FD7D, 0x9371E2A9C390092, 0xEB9184881B2B3B4, 0x12D473}, {0x7897C3733196AB7, 0xF21B825648CE28F, 0xD76AD798C5D1A5B, 0x7388E3C88241F04, 0x49D7E3F8163E32A, 0x8B92841F64393C1, 0x1C2C0C4D16C17B2, 0x1C957C}, {0x3E9EB28A64A98B, 0xAE65B5A242437A3, 0xF0322B721BDBE18, 0x5F9D50449E0DC99, 0x35E8044F649E204, 0x688E7AE47885472, 0x1F13C6506336B1A, 0x14DD21}, {0x4415C43C23F15E0, 0xF980455A0894215, 0x1A238B618073F6D, 0x6D5BFF0A9566BE7, 0x9D413901AC79DF9, 0xD04752571822093, 0x584F0D545A4D1AC, 0x1FC227}, {0x1C4F5A4CDEEFD29, 0xF8A5FF8474F1D92, 0xB62F43C17E99583, 0xD84446D082FAC19, 0xC088A58ADE003FC, 0x13EDDE0B794547E, 0x7DBDF380C345BDE, 0x2517C3}, {0xD6E6050AC6AA7A5, 0xA8A1431CD988F9A, 0x4D67940C0E16EF5, 0xE6681FA1B65737, 0xA03CDAA1D6CC34C, 0x981EEF164885152, 0x9ADFE5F7AE38D93, 0x293546}, {0x127C67528B3D97C, 0x5DA0CDE6396FB3B, 0x4AEAC3133994800, 0xEB317904F2AD0C6, 0x24A8084A1872E20, 0x3121DB9650F7831, 0xFA4B5873E9F0C7D, 0x12330B}, {0x95821E917E5B5CD, 0xD9EA97459349281, 0x3935F51383CAC1A, 0x4DCB99C3E56A413, 0xC08D7BD240E4F65, 0x1538AB00D38A250, 0x2758DAC36086F09, 0x17B030}, {0x79A6D86A20CBB48, 0x85251732747B32B, 0xABE02F14C6410B4, 0xAD5E4F4C6D03568, 0xC9BACE95CC25196, 0xC21B86FBE05E5A3, 0xDC7A226D57F4FA6, 0x425BA4}, {0x84103A0D20E7325, 0x6C014D3CC5E31C3, 0x517A9067D1A365, 0x5FFFF5040819E30, 0xE14DB63BC7E52B1, 0x15A0678BED4C4BE, 0x763DC12FF86D424, 0x48D2BE}, {0x64A5FC7E3BCD51F, 0xE432E954F3F184E, 0xE129D39AA351F9E, 0x62E8D1733DA85D5, 0x46AB8EE7998D6D6, 0x88A60C30C8D77F4, 0xD36A9E77F862614, 0x2C4F5E}, {0x5D7EC335F460AFF, 0x6328CF1408444B4, 0xC0245B9996301DF, 0xAC5C9DD5665483, 0x31D5641C2B06612, 0xC8AA9D9ABD4E10, 0xF8BE90010D86599, 0xB1C34}, {0x4C2725FD88381C1, 0x6FFAB752C1B48CE, 0xC2A854562C827C, 0xAA12FEBEC40B3D4, 0x1914AA8AA28F93E, 0x49BC342093BB17F, 0x55E55A9524271BE, 0x88AA9}, {0x5C79D23020F40C4, 0x3340CEDB83BCF90, 0xE82E097E6A3F7AA, 0xD9E9718667F06F8, 0x16681C12DD39A6, 0x3E02E7172BB6F21, 0x13D3F19EFD11728, 0x53A571}}

var PCI = [13][8]Chunk{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xFFE38E39038E38D, 0xD1B99C71CC2CE3F, 0x7260185566B6E3F, 0xA5C3D0B1A505920, 0xF96FAE3DCA1B08A, 0xAE2B73C7461580E, 0xF43B58DED7830BA, 0x1D1E1B}, {0xFFC71C72071C71A, 0xA37338E39859C7F, 0xE4C030AACD6DC7F, 0x4B87A1634A0B240, 0xF2DF5C7B9436115, 0x5C56E78E8C2B01D, 0xE876B1BDAF06175, 0x3A3C37}, {0x55425ED0AD097D6, 0x8BD112F6881DED5, 0xF6EABAE399CF42A, 0xC3D7E0766E03B6A, 0xA64A742931675B1, 0x1EC7A284D963AB4, 0xF82790948FACB27, 0x136967}, {0xFFAAAAAB0AAAA9F, 0x752CD5556486ABF, 0x572049003424ABF, 0xF14B7214EF10B61, 0xEC4F0AB95E5119F, 0xA825B55D24082C, 0xDCB20A9C8689230, 0x575A53}, {0xFFAAAAAB0AAAA63, 0x752CD5556486ABF, 0x572049003424ABF, 0xF14B7214EF10B61, 0xEC4F0AB95E5119F, 0xA825B55D24082C, 0xDCB20A9C8689230, 0x575A53}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xFFC71C72071C71C, 0xA37338E39859C7F, 0xE4C030AACD6DC7F, 0x4B87A1634A0B240, 0xF2DF5C7B9436115, 0x5C56E78E8C2B01D, 0xE876B1BDAF06175, 0x3A3C37}, {0xAA684BDA5DA12ED, 0xE95BC25EDC68BEA, 0x60358E1C9A55694, 0x2D73919E810CFF6, 0x460496902CE9BEE, 0xEBBAB8D0F8DCD78, 0xE48A7A07F6DC708, 0x43F0EB}, {0xC6D3C0CA974F017, 0x6D4C1E065F1D631, 0x7D921BDCD9A7F8, 0x6EBB871B506391A, 0xD2C8129DE80C329, 0x4B5299A7EBFE109, 0xE1ECFF8ED16B56B, 0x4A6963}, {0xFFAAAAAB0AAAA99, 0x752CD5556486ABF, 0x572049003424ABF, 0xF14B7214EF10B61, 0xEC4F0AB95E5119F, 0xA825B55D24082C, 0xDCB20A9C8689230, 0x575A53}, {0xFFAAAAAB0AAA9D3, 0x752CD5556486ABF, 0x572049003424ABF, 0xF14B7214EF10B61, 0xEC4F0AB95E5119F, 0xA825B55D24082C, 0xDCB20A9C8689230, 0x575A53}, {0xFFAAAAAB0AAA8FB, 0x752CD5556486ABF, 0x572049003424ABF, 0xF14B7214EF10B61, 0xEC4F0AB95E5119F, 0xA825B55D24082C, 0xDCB20A9C8689230, 0x575A53}}

var PCR = [13][8]Chunk{{0x55097B42B425ED1, 0x2F444BDA2077B55, 0xDBAAEB8E673D0AA, 0xF5F81D9B80EDAB, 0x9929D0A4C59D6C7, 0x7B1E8A13658EAD2, 0xE09E42523EB2C9C, 0x4DA59F}, {0xFFC71C72071C71E, 0xA37338E39859C7F, 0xE4C030AACD6DC7F, 0x4B87A1634A0B240, 0xF2DF5C7B9436115, 0x5C56E78E8C2B01D, 0xE876B1BDAF06175, 0x3A3C37}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x55425ED0AD097D6, 0x8BD112F6881DED5, 0xF6EABAE399CF42A, 0xC3D7E0766E03B6A, 0xA64A742931675B1, 0x1EC7A284D963AB4, 0xF82790948FACB27, 0x136967}, {0xC, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x7174F032EDD3C0D, 0xB334A781A32C59C, 0x834E7F2F9A8220D, 0x50A7775687656CF, 0x25ED4CB280BFE02, 0xDAB66AEA58AFE64, 0xDE00C7D91941AFE, 0x541E17}, {0xFFE38E39038E38F, 0xD1B99C71CC2CE3F, 0x7260185566B6E3F, 0xA5C3D0B1A505920, 0xF96FAE3DCA1B08A, 0xAE2B73C7461580E, 0xF43B58DED7830BA, 0x1D1E1B}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xC6D3C0CA974F017, 0x6D4C1E065F1D631, 0x7D921BDCD9A7F8, 0x6EBB871B506391A, 0xD2C8129DE80C329, 0x4B5299A7EBFE109, 0xE1ECFF8ED16B56B, 0x4A6963}, {0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xFFAAAAAB0AAA8FB, 0x752CD5556486ABF, 0x572049003424ABF, 0xF14B7214EF10B61, 0xEC4F0AB95E5119F, 0xA825B55D24082C, 0xDCB20A9C8689230, 0x575A53}}

var R2modp = [...]Chunk{0xF5CDA0EB0AD64E2, 0xDE66AA74FAE046B, 0x8B9229B598075AE, 0xDFAFBC5DB0E321E, 0x9AF61017ADA96A8, 0xFFAEA657DE81FE0, 0x1800170F84B9395, 0x8E3DD}

var ROI = [...]Chunk{0xFFAAAAAB0AAAAAA, 0x752CD5556486ABF, 0x572049003424ABF, 0xF14B7214EF10B61, 0xEC4F0AB95E5119F, 0xA825B55D24082C, 0xDCB20A9C8689230, 0x575A53}

var SQRTm3 = [...]Chunk{0xFDAAAAAD4AAAAA8, 0x6035B554DBDEB3F, 0x76827C02FE4D504, 0x58F2FA9D667766E, 0xE1E6D0C29664B91, 0xBAD4B70A8CFD628, 0xDCB20A9C8688A07, 0x575A53}

Functions

func Another

func Another(r []*FP12, P1 *ECP2, Q1 *ECP)

Accumulate another set of line functions for n-pairing

func Another_pc

func Another_pc(r []*FP12, T []*FP4, QV *ECP)

Accumulate another set of line functions for n-pairing, assuming precomputation on G2

func AuthDecap

func AuthDecap(config_id int, skR []byte, pkE []byte, pkR []byte, pkS []byte) []byte

func AuthEncap

func AuthEncap(config_id int, skE []byte, skS []byte, pkE []byte, pkR []byte, pkS []byte) []byte

func Comp

func Comp(a *BIG, b *BIG) int

Compare a and b, return 0 if a==b, -1 if a<b, +1 if a>b. Inputs must be normalised

func Core_Sign

func Core_Sign(SIG []byte, M []byte, S []byte) int

func Core_Verify

func Core_Verify(SIG []byte, M []byte, W []byte) int

func Decap

func Decap(config_id int, skR []byte, pkE []byte, pkR []byte) []byte

func DeriveKeyPair

func DeriveKeyPair(config_id int, SK []byte, PK []byte, SEED []byte) bool

func ECDH_ECIES_DECRYPT

func ECDH_ECIES_DECRYPT(sha int, P1 []byte, P2 []byte, V []byte, C []byte, T []byte, U []byte) []byte

IEEE1363 ECIES decryption. Decryption of ciphertext V,C,T using private key U outputs plaintext M

func ECDH_ECIES_ENCRYPT

func ECDH_ECIES_ENCRYPT(sha int, P1 []byte, P2 []byte, RNG *core.RAND, W []byte, M []byte, V []byte, T []byte) []byte

IEEE1363 ECIES encryption. Encryption of plaintext M uses public key W and produces ciphertext V,C,T

func ECDH_ECPSP_DSA

func ECDH_ECPSP_DSA(sha int, RNG *core.RAND, S []byte, F []byte, C []byte, D []byte) int

IEEE ECDSA Signature, C and D are signature on F using private key S

func ECDH_ECPSVDP_DH

func ECDH_ECPSVDP_DH(S []byte, WD []byte, Z []byte, typ int) int

IEEE-1363 Diffie-Hellman online calculation Z=S.WD

type = 0 is just x coordinate output type = 1 for standard compressed output type = 2 for standard uncompress output 04|x|y

func ECDH_ECPVP_DSA

func ECDH_ECPVP_DSA(sha int, W []byte, F []byte, C []byte, D []byte) int

IEEE1363 ECDSA Signature Verification. Signature C and D on F is verified using public key W

func ECDH_IN_RANGE

func ECDH_IN_RANGE(S []byte) bool

return true if S is in ranger 0 < S < order , else return false

func ECDH_KEY_PAIR_GENERATE

func ECDH_KEY_PAIR_GENERATE(RNG *core.RAND, S []byte, W []byte) int

Calculate a public/private EC GF(p) key pair W,S where W=S.G mod EC(p), * where S is the secret key and W is the public key * and G is fixed generator. * If RNG is NULL then the private key is provided externally in S * otherwise it is generated randomly internally

func ECDH_PUBLIC_KEY_VALIDATE

func ECDH_PUBLIC_KEY_VALIDATE(W []byte) int

validate public key

func Encap

func Encap(config_id int, skE []byte, pkE []byte, pkR []byte) []byte

func FP_tpo

func FP_tpo(i *FP, s *FP) int

Two for the price of one - See Hamburg https://eprint.iacr.org/2012/309.pdf Calculate inverse of i and square root of s, return QR

func G1member

func G1member(P *ECP) bool

test G1 group membership

func G2member

func G2member(P *ECP2) bool

test G2 group membership

func GTcyclotomic

func GTcyclotomic(m *FP12) bool

Check that m is in cyclotomic sub-group Check that m!=1, conj(m)*m==1, and m.m^{p^4}=m^{p^2}

func GTmember

func GTmember(m *FP12) bool

test for full GT membership

func Init

func Init() int

func KEY_PAIR_GENERATE

func KEY_PAIR_GENERATE(RNG *core.RAND, D []byte, Q []byte) int

Calculate a public/private EC GF(p) key pair. Q=D.G mod EC(p), * where D is the secret key and Q is the public key * and G is fixed generator. * RNG is a cryptographically strong RNG * If RNG==NULL, D is provided externally

func KeyPairGenerate

func KeyPairGenerate(IKM []byte, S []byte, W []byte) int

generate key pair, private key S, public key W

func KeySchedule

func KeySchedule(config_id int, mode int, Z []byte, info []byte, psk []byte, pskID []byte) ([]byte, []byte, []byte)

func MPIN_CLIENT_1

func MPIN_CLIENT_1(CID []byte, rng *core.RAND, X []byte, pin int, TOKEN []byte, SEC []byte, xID []byte) int

Implement step 1 on client side of MPin protocol

func MPIN_CLIENT_2

func MPIN_CLIENT_2(X []byte, Y []byte, SEC []byte) int

Implement step 2 on client side of MPin protocol

func MPIN_ENCODE_TO_CURVE

func MPIN_ENCODE_TO_CURVE(DST []byte, ID []byte, HCID []byte)

func MPIN_EXTRACT_PIN

func MPIN_EXTRACT_PIN(CID []byte, pin int, TOKEN []byte) int

func MPIN_GET_CLIENT_SECRET

func MPIN_GET_CLIENT_SECRET(S []byte, IDHTC []byte, CST []byte) int

func MPIN_GET_SERVER_SECRET

func MPIN_GET_SERVER_SECRET(S []byte, SST []byte) int

Extract Server Secret SST=S*Q where Q is fixed generator in G2 and S is master secret

func MPIN_HASH_ID

func MPIN_HASH_ID(sha int, ID []byte) []byte

func MPIN_RANDOM_GENERATE

func MPIN_RANDOM_GENERATE(rng *core.RAND, S []byte) int

create random secret S

func MPIN_SERVER

func MPIN_SERVER(HID []byte, Y []byte, SST []byte, xID []byte, mSEC []byte) int

Implement step 2 of MPin protocol on server side

func RFC7748

func RFC7748(r *BIG)

Transform a point multiplier to RFC7748 form

func SIGNATURE

func SIGNATURE(ph bool, D []byte, ctx []byte, M []byte, SIG []byte) int

Generate a signature using key pair (D,Q) on message M Set ph=true if message has already been pre-hashed if ph=false, then context should be NULL for ed25519. However RFC8032 mode ed25519ctx is supported by supplying a non-NULL or non-empty context

func VERIFY

func VERIFY(ph bool, Q []byte, ctx []byte, M []byte, SIG []byte) bool

Types

type BIG

type BIG struct {
	// contains filtered or unexported fields
}

func BIG_frombytearray

func BIG_frombytearray(b []byte, n int) *BIG

convert from byte array to BIG

func FromBytes

func FromBytes(b []byte) *BIG

func Modadd

func Modadd(a1, b1, m *BIG) *BIG

return a+b mod m

func Modmul

func Modmul(a1, b1, m *BIG) *BIG

return a*b mod m

func Modneg

func Modneg(a1, m *BIG) *BIG

return -a mod m

func Modsqr

func Modsqr(a1, m *BIG) *BIG

return a^2 mod m

func NewBIG

func NewBIG() *BIG

func NewBIGcopy

func NewBIGcopy(x *BIG) *BIG

func NewBIGdcopy

func NewBIGdcopy(x *DBIG) *BIG

func NewBIGint

func NewBIGint(x int) *BIG

func NewBIGints

func NewBIGints(x [NLEN]Chunk) *BIG

func Random

func Random(rng *core.RAND) *BIG

get 8*MODBYTES size random number

func Randomnum

func Randomnum(q *BIG, rng *core.RAND) *BIG

Create random BIG in portable way, one bit at a time

func Randtrunc

func Randtrunc(q *BIG, trunc int, rng *core.RAND) *BIG

func (*BIG) Invmodp

func (r *BIG) Invmodp(p *BIG)

this=1/this mod p. Binary method

func (*BIG) Jacobi

func (r *BIG) Jacobi(p *BIG) int

Jacobi Symbol (this/p). Returns 0, 1 or -1

func (*BIG) Minus

func (r *BIG) Minus(x *BIG) *BIG

return this-x

func (*BIG) Mod

func (r *BIG) Mod(m *BIG)

reduce this mod m

func (*BIG) Nbits

func (r *BIG) Nbits() int

func (*BIG) Plus

func (r *BIG) Plus(x *BIG) *BIG

return this+x

func (*BIG) Powmod

func (r *BIG) Powmod(e1 *BIG, m *BIG) *BIG

return this^e mod m

func (*BIG) ToBytes

func (r *BIG) ToBytes(b []byte)

func (*BIG) ToString

func (r *BIG) ToString() string

Convert to Hex String

type Chunk

type Chunk int64

const BMASK Chunk = ((Chunk(1) << BASEBITS) - 1)

const HMASK Chunk = ((Chunk(1) << HBITS) - 1)

const MConst Chunk = 0xC04000035FFFFFD

const OMASK Chunk = ((Chunk(-1)) << (MODBITS % BASEBITS))

Modulus Masks

const TMASK Chunk = (Chunk(1) << TBITS) - 1

type DBIG

type DBIG struct {
	// contains filtered or unexported fields
}

func DBIG_fromBytes

func DBIG_fromBytes(b []byte) *DBIG

convert from byte array to BIG

func NewDBIG

func NewDBIG() *DBIG

func NewDBIGcopy

func NewDBIGcopy(x *DBIG) *DBIG

func NewDBIGscopy

func NewDBIGscopy(x *BIG) *DBIG

func (*DBIG) Mod

func (r *DBIG) Mod(m *BIG) *BIG

reduces this DBIG mod a BIG, and returns the BIG

type ECP

type ECP struct {
	// contains filtered or unexported fields
}

func ECP_fromBytes

func ECP_fromBytes(b []byte) *ECP

convert from byte array to point

func ECP_generator

func ECP_generator() *ECP

func ECP_hap2point

func ECP_hap2point(h *BIG) *ECP

Hunt and Peck a BIG to a curve point

func ECP_map2point

func ECP_map2point(h *FP) *ECP

Constant time Map to Point

func ECP_mapit

func ECP_mapit(h []byte) *ECP

func ECP_muln

func ECP_muln(n int, X []*ECP, e []*BIG) *ECP

Generic multi-multiplication, fixed 4-bit window, P=Sigma e_i*X_i

func G1mul

func G1mul(P *ECP, e *BIG) *ECP

Multiply P by e in group G1

func NewECP

func NewECP() *ECP

Constructors

func NewECPbig

func NewECPbig(ix *BIG) *ECP

set from x - calculate y from curve equation

func NewECPbigint

func NewECPbigint(ix *BIG, s int) *ECP

set (x,y) from BIG and a bit

func NewECPbigs

func NewECPbigs(ix *BIG, iy *BIG) *ECP

set (x,y) from two BIGs

func (*ECP) Add

func (E *ECP) Add(Q *ECP)

this+=Q

func (*ECP) Affine

func (E *ECP) Affine()

set to affine - from (x,y,z) to (x,y)

func (*ECP) Cfp

func (E *ECP) Cfp()

func (*ECP) Copy

func (E *ECP) Copy(P *ECP)

this=P

func (*ECP) Equals

func (E *ECP) Equals(Q *ECP) bool

Test P == Q

func (*ECP) GetS

func (E *ECP) GetS() int

get sign of Y

func (*ECP) GetX

func (E *ECP) GetX() *BIG

extract x as a BIG

func (*ECP) GetY

func (E *ECP) GetY() *BIG

extract y as a BIG

func (*ECP) Is_infinity

func (E *ECP) Is_infinity() bool

test for O point-at-infinity

func (*ECP) Mul

func (E *ECP) Mul(e *BIG) *ECP

Public version

func (*ECP) Mul2

func (E *ECP) Mul2(e *BIG, Q *ECP, f *BIG) *ECP

func (*ECP) Neg

func (E *ECP) Neg()

this=-this

func (*ECP) Sub

func (E *ECP) Sub(Q *ECP)

this-=Q

func (*ECP) ToBytes

func (E *ECP) ToBytes(b []byte, compress bool)

convert to byte array

func (*ECP) ToString

func (E *ECP) ToString() string

convert to hex string

type ECP2

type ECP2 struct {
	// contains filtered or unexported fields
}

func ECP2_fromBytes

func ECP2_fromBytes(b []byte) *ECP2

convert from byte array to point

func ECP2_generator

func ECP2_generator() *ECP2

func ECP2_hap2point

func ECP2_hap2point(h *BIG) *ECP2

Hunt and Peck a BIG to a curve point

func ECP2_map2point

func ECP2_map2point(H *FP2) *ECP2

Constant time Map to Point

func ECP2_mapit

func ECP2_mapit(h []byte) *ECP2

Map octet string to curve point

func G2mul

func G2mul(P *ECP2, e *BIG) *ECP2

Multiply P by e in group G2

func NewECP2

func NewECP2() *ECP2

func NewECP2fp2

func NewECP2fp2(ix *FP2, s int) *ECP2

construct this from x - but set to O if not on curve

func NewECP2fp2s

func NewECP2fp2s(ix *FP2, iy *FP2) *ECP2

construct this from (x,y) - but set to O if not on curve

func (*ECP2) Add

func (E *ECP2) Add(Q *ECP2) int

this+=Q - return 0 for add, 1 for double, -1 for O

func (*ECP2) Affine

func (E *ECP2) Affine()

set to Affine - (x,y,z) to (x,y)

func (*ECP2) Cfp

func (E *ECP2) Cfp()

clear cofactor

func (*ECP2) Copy

func (E *ECP2) Copy(P *ECP2)

copy this=P

func (*ECP2) Equals

func (E *ECP2) Equals(Q *ECP2) bool

Test if P == Q

func (*ECP2) GetX

func (E *ECP2) GetX() *FP2

extract affine x as FP2

func (*ECP2) GetY

func (E *ECP2) GetY() *FP2

extract affine y as FP2

func (*ECP2) Is_infinity

func (E *ECP2) Is_infinity() bool

Test this=O?

func (*ECP2) Mul

func (E *ECP2) Mul(e *BIG) *ECP2

Public version

func (*ECP2) Sub

func (E *ECP2) Sub(Q *ECP2) int

set this-=Q

func (*ECP2) ToBytes

func (E *ECP2) ToBytes(b []byte, compress bool)

convert to byte array

func (*ECP2) ToString

func (E *ECP2) ToString() string

convert this to hex string

type FP

type FP struct {
	XES int32
	// contains filtered or unexported fields
}

func FP_fromBytes

func FP_fromBytes(b []byte) *FP

func NewFP

func NewFP() *FP

func NewFPbig

func NewFPbig(a *BIG) *FP

func NewFPcopy

func NewFPcopy(a *FP) *FP

func NewFPint

func NewFPint(a int) *FP

func NewFPrand

func NewFPrand(rng *core.RAND) *FP

func RHS

func RHS(x *FP) *FP

Calculate RHS of curve equation

func (*FP) Equals

func (F *FP) Equals(a *FP) bool

return TRUE if this==a

func (*FP) ToBytes

func (F *FP) ToBytes(b []byte)

func (*FP) ToString

func (F *FP) ToString() string

type FP12

type FP12 struct {
	// contains filtered or unexported fields
}

func Ate

func Ate(P1 *ECP2, Q1 *ECP) *FP12

Optimal R-ate pairing

func Ate2

func Ate2(P1 *ECP2, Q1 *ECP, R1 *ECP2, S1 *ECP) *FP12

Optimal R-ate double pairing e(P,Q).e(R,S)

func FP12_fromBytes

func FP12_fromBytes(w []byte) *FP12

convert from byte array to FP12

func Fexp

func Fexp(m *FP12) *FP12

final exponentiation - keep separate for multi-pairings and to avoid thrashing stack

func GTpow

func GTpow(d *FP12, e *BIG) *FP12

f=f^e Note that this method requires a lot of RAM! Better to use compressed XTR method, see FP4.java

func Initmp

func Initmp() []*FP12

prepare for multi-pairing

func Miller

func Miller(r []*FP12) *FP12

basic Miller loop

func NewFP12

func NewFP12() *FP12

func NewFP12copy

func NewFP12copy(x *FP12) *FP12

func NewFP12fp4

func NewFP12fp4(d *FP4) *FP12

Constructors

func NewFP12fp4s

func NewFP12fp4s(d *FP4, e *FP4, f *FP4) *FP12

func NewFP12int

func NewFP12int(d int) *FP12

func (*FP12) Compow

func (F *FP12) Compow(e *BIG, r *BIG) *FP4

Fast compressed FP4 power of unitary FP12

func (*FP12) Copy

func (F *FP12) Copy(x *FP12)

copy this=x

func (*FP12) Equals

func (F *FP12) Equals(x *FP12) bool

return 1 if x==y, else 0

func (*FP12) Inverse

func (F *FP12) Inverse()

this=1/this

func (*FP12) Isunity

func (F *FP12) Isunity() bool

test x==1 ?

func (*FP12) Mul

func (F *FP12) Mul(y *FP12)

FP12 full multiplication this=this*y

func (*FP12) Pow

func (F *FP12) Pow(e *BIG) *FP12

this=this^e

func (*FP12) ToBytes

func (F *FP12) ToBytes(w []byte)

convert this to byte array

func (*FP12) ToString

func (F *FP12) ToString() string

convert to hex string

type FP2

type FP2 struct {
	// contains filtered or unexported fields
}

func FP2_fromBytes

func FP2_fromBytes(bf []byte) *FP2

func NewFP2

func NewFP2() *FP2

func NewFP2big

func NewFP2big(c *BIG) *FP2

func NewFP2bigs

func NewFP2bigs(c *BIG, d *BIG) *FP2

func NewFP2copy

func NewFP2copy(x *FP2) *FP2

func NewFP2fp

func NewFP2fp(c *FP) *FP2

func NewFP2fps

func NewFP2fps(c *FP, d *FP) *FP2

func NewFP2int

func NewFP2int(a int) *FP2

Constructors

func NewFP2ints

func NewFP2ints(a int, b int) *FP2

func NewFP2rand

func NewFP2rand(rng *core.RAND) *FP2

func RHS2

func RHS2(x *FP2) *FP2

Calculate RHS of twisted curve equation x^3+B/i

func (*FP2) Equals

func (F *FP2) Equals(x *FP2) bool

test this=x

func (*FP2) GetA

func (F *FP2) GetA() *BIG

extract a

func (*FP2) GetB

func (F *FP2) GetB() *BIG

extract b

func (*FP2) ToBytes

func (F *FP2) ToBytes(bf []byte)

func (*FP2) ToString

func (F *FP2) ToString() string

output to hex string

type FP4

type FP4 struct {
	// contains filtered or unexported fields
}

func FP4_fromBytes

func FP4_fromBytes(bf []byte) *FP4

func NewFP4

func NewFP4() *FP4

func NewFP4copy

func NewFP4copy(x *FP4) *FP4

func NewFP4fp

func NewFP4fp(c *FP) *FP4

func NewFP4fp2

func NewFP4fp2(c *FP2) *FP4

func NewFP4fp2s

func NewFP4fp2s(c *FP2, d *FP2) *FP4

func NewFP4int

func NewFP4int(a int) *FP4

Constructors

func NewFP4ints

func NewFP4ints(a int, b int) *FP4

Constructors

func NewFP4rand

func NewFP4rand(rng *core.RAND) *FP4

func (*FP4) Equals

func (F *FP4) Equals(x *FP4) bool

test this=x?

func (*FP4) ToBytes

func (F *FP4) ToBytes(bf []byte)