OpenCoverage

eddsa.c

Absolute File Name:/home/opencoverage/opencoverage/guest-scripts/openssl/src/crypto/ec/curve448/eddsa.c
Source codeSwitch to Preprocessed file
LineSourceCount
1/*-
2 * Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.-
3 * Copyright 2015-2016 Cryptography Research, Inc.-
4 *-
5 * Licensed under the OpenSSL license (the "License"). You may not use-
6 * this file except in compliance with the License. You can obtain a copy-
7 * in the file LICENSE in the source distribution or at-
8 * https://www.openssl.org/source/license.html-
9 *-
10 * Originally written by Mike Hamburg-
11 */-
12#include <string.h>-
13#include <openssl/crypto.h>-
14#include <openssl/evp.h>-
15#include "curve448_lcl.h"-
16#include "word.h"-
17#include "ed448.h"-
18#include "internal/numbers.h"-
19-
20#define COFACTOR 4-
21-
22static c448_error_t oneshot_hash(uint8_t *out, size_t outlen,-
23 const uint8_t *in, size_t inlen)-
24{-
25 EVP_MD_CTX *hashctx = EVP_MD_CTX_new();-
26-
27 if (hashctx == NULL)
hashctx == ((void *)0)Description
TRUEnever evaluated
FALSEevaluated 63 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-63
28 return C448_FAILURE;
never executed: return C448_FAILURE;
0
29-
30 if (!EVP_DigestInit_ex(hashctx, EVP_shake256(), NULL)
!EVP_DigestIni... ((void *)0) )Description
TRUEnever evaluated
FALSEevaluated 63 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-63
31 || !EVP_DigestUpdate(hashctx, in, inlen)
!EVP_DigestUpd...tx, in, inlen)Description
TRUEnever evaluated
FALSEevaluated 63 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-63
32 || !EVP_DigestFinalXOF(hashctx, out, outlen)) {
!EVP_DigestFin..., out, outlen)Description
TRUEnever evaluated
FALSEevaluated 63 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-63
33 EVP_MD_CTX_free(hashctx);-
34 return C448_FAILURE;
never executed: return C448_FAILURE;
0
35 }-
36-
37 EVP_MD_CTX_free(hashctx);-
38 return C448_SUCCESS;
executed 63 times by 2 tests: return C448_SUCCESS;
Executed by:
  • curve448_internal_test
  • libcrypto.so.1.1
63
39}-
40-
41static void clamp(uint8_t secret_scalar_ser[EDDSA_448_PRIVATE_BYTES])-
42{-
43 secret_scalar_ser[0] &= -COFACTOR;-
44 secret_scalar_ser[EDDSA_448_PRIVATE_BYTES - 1] = 0;-
45 secret_scalar_ser[EDDSA_448_PRIVATE_BYTES - 2] |= 0x80;-
46}
executed 63 times by 2 tests: end of block
Executed by:
  • curve448_internal_test
  • libcrypto.so.1.1
63
47-
48static c448_error_t hash_init_with_dom(EVP_MD_CTX *hashctx, uint8_t prehashed,-
49 uint8_t for_prehash,-
50 const uint8_t *context,-
51 size_t context_len)-
52{-
53 const char *dom_s = "SigEd448";-
54 uint8_t dom[2];-
55-
56 if (context_len > UINT8_MAX)
context_len > (255)Description
TRUEnever evaluated
FALSEevaluated 59 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-59
57 return C448_FAILURE;
never executed: return C448_FAILURE;
0
58-
59 dom[0] = (uint8_t)(2 - (prehashed == 0 ? 1 : 0)
prehashed == 0Description
TRUEevaluated 55 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
FALSEevaluated 4 times by 1 test
Evaluated by:
  • curve448_internal_test
4-55
60 - (for_prehash == 0 ? 1 : 0));
for_prehash == 0Description
TRUEevaluated 59 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
FALSEnever evaluated
0-59
61 dom[1] = (uint8_t)context_len;-
62-
63 if (!EVP_DigestInit_ex(hashctx, EVP_shake256(), NULL)
!EVP_DigestIni... ((void *)0) )Description
TRUEnever evaluated
FALSEevaluated 59 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-59
64 || !EVP_DigestUpdate(hashctx, dom_s, strlen(dom_s))
!EVP_DigestUpd...strlen(dom_s))Description
TRUEnever evaluated
FALSEevaluated 59 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-59
65 || !EVP_DigestUpdate(hashctx, dom, sizeof(dom))
!EVP_DigestUpd..., sizeof(dom))Description
TRUEnever evaluated
FALSEevaluated 59 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-59
66 || !EVP_DigestUpdate(hashctx, context, context_len))
!EVP_DigestUpd..., context_len)Description
TRUEnever evaluated
FALSEevaluated 59 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-59
67 return C448_FAILURE;
never executed: return C448_FAILURE;
0
68-
69 return C448_SUCCESS;
executed 59 times by 2 tests: return C448_SUCCESS;
Executed by:
  • curve448_internal_test
  • libcrypto.so.1.1
59
70}-
71-
72/* In this file because it uses the hash */-
73c448_error_t c448_ed448_convert_private_key_to_x448(-
74 uint8_t x[X448_PRIVATE_BYTES],-
75 const uint8_t ed [EDDSA_448_PRIVATE_BYTES])-
76{-
77 /* pass the private key through oneshot_hash function */-
78 /* and keep the first X448_PRIVATE_BYTES bytes */-
79 return oneshot_hash(x, X448_PRIVATE_BYTES, ed,
never executed: return oneshot_hash(x, 56, ed, 57);
0
80 EDDSA_448_PRIVATE_BYTES);
never executed: return oneshot_hash(x, 56, ed, 57);
0
81}-
82-
83c448_error_t c448_ed448_derive_public_key(-
84 uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],-
85 const uint8_t privkey[EDDSA_448_PRIVATE_BYTES])-
86{-
87 /* only this much used for keygen */-
88 uint8_t secret_scalar_ser[EDDSA_448_PRIVATE_BYTES];-
89 curve448_scalar_t secret_scalar;-
90 unsigned int c;-
91 curve448_point_t p;-
92-
93 if (!oneshot_hash(secret_scalar_ser, sizeof(secret_scalar_ser), privkey,
!oneshot_hash(..., privkey, 57)Description
TRUEnever evaluated
FALSEevaluated 38 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-38
94 EDDSA_448_PRIVATE_BYTES))
!oneshot_hash(..., privkey, 57)Description
TRUEnever evaluated
FALSEevaluated 38 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-38
95 return C448_FAILURE;
never executed: return C448_FAILURE;
0
96-
97 clamp(secret_scalar_ser);-
98-
99 curve448_scalar_decode_long(secret_scalar, secret_scalar_ser,-
100 sizeof(secret_scalar_ser));-
101-
102 /*-
103 * Since we are going to mul_by_cofactor during encoding, divide by it-
104 * here. However, the EdDSA base point is not the same as the decaf base-
105 * point if the sigma isogeny is in use: the EdDSA base point is on-
106 * Etwist_d/(1-d) and the decaf base point is on Etwist_d, and when-
107 * converted it effectively picks up a factor of 2 from the isogenies. So-
108 * we might start at 2 instead of 1.-
109 */-
110 for (c = 1; c < C448_EDDSA_ENCODE_RATIO; c <<= 1)
c < 4Description
TRUEevaluated 76 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
FALSEevaluated 38 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
38-76
111 curve448_scalar_halve(secret_scalar, secret_scalar);
executed 76 times by 1 test: curve448_scalar_halve(secret_scalar, secret_scalar);
Executed by:
  • libcrypto.so.1.1
76
112-
113 curve448_precomputed_scalarmul(p, curve448_precomputed_base, secret_scalar);-
114-
115 curve448_point_mul_by_ratio_and_encode_like_eddsa(pubkey, p);-
116-
117 /* Cleanup */-
118 curve448_scalar_destroy(secret_scalar);-
119 curve448_point_destroy(p);-
120 OPENSSL_cleanse(secret_scalar_ser, sizeof(secret_scalar_ser));-
121-
122 return C448_SUCCESS;
executed 38 times by 1 test: return C448_SUCCESS;
Executed by:
  • libcrypto.so.1.1
38
123}-
124-
125c448_error_t c448_ed448_sign(-
126 uint8_t signature[EDDSA_448_SIGNATURE_BYTES],-
127 const uint8_t privkey[EDDSA_448_PRIVATE_BYTES],-
128 const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],-
129 const uint8_t *message, size_t message_len,-
130 uint8_t prehashed, const uint8_t *context,-
131 size_t context_len)-
132{-
133 curve448_scalar_t secret_scalar;-
134 EVP_MD_CTX *hashctx = EVP_MD_CTX_new();-
135 c448_error_t ret = C448_FAILURE;-
136 curve448_scalar_t nonce_scalar;-
137 uint8_t nonce_point[EDDSA_448_PUBLIC_BYTES] = { 0 };-
138 unsigned int c;-
139 curve448_scalar_t challenge_scalar;-
140-
141 if (hashctx == NULL)
hashctx == ((void *)0)Description
TRUEnever evaluated
FALSEevaluated 25 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-25
142 return C448_FAILURE;
never executed: return C448_FAILURE;
0
143-
144 {-
145 /*-
146 * Schedule the secret key, First EDDSA_448_PRIVATE_BYTES is serialised-
147 * secret scalar,next EDDSA_448_PRIVATE_BYTES bytes is the seed.-
148 */-
149 uint8_t expanded[EDDSA_448_PRIVATE_BYTES * 2];-
150-
151 if (!oneshot_hash(expanded, sizeof(expanded), privkey,
!oneshot_hash(..., privkey, 57)Description
TRUEnever evaluated
FALSEevaluated 25 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-25
152 EDDSA_448_PRIVATE_BYTES))
!oneshot_hash(..., privkey, 57)Description
TRUEnever evaluated
FALSEevaluated 25 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-25
153 goto err;
never executed: goto err;
0
154 clamp(expanded);-
155 curve448_scalar_decode_long(secret_scalar, expanded,-
156 EDDSA_448_PRIVATE_BYTES);-
157-
158 /* Hash to create the nonce */-
159 if (!hash_init_with_dom(hashctx, prehashed, 0, context, context_len)
!hash_init_wit..., context_len)Description
TRUEnever evaluated
FALSEevaluated 25 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-25
160 || !EVP_DigestUpdate(hashctx,
!EVP_DigestUpd...nded + 57, 57)Description
TRUEnever evaluated
FALSEevaluated 25 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-25
161 expanded + EDDSA_448_PRIVATE_BYTES,
!EVP_DigestUpd...nded + 57, 57)Description
TRUEnever evaluated
FALSEevaluated 25 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-25
162 EDDSA_448_PRIVATE_BYTES)
!EVP_DigestUpd...nded + 57, 57)Description
TRUEnever evaluated
FALSEevaluated 25 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-25
163 || !EVP_DigestUpdate(hashctx, message, message_len)) {
!EVP_DigestUpd..., message_len)Description
TRUEnever evaluated
FALSEevaluated 25 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-25
164 OPENSSL_cleanse(expanded, sizeof(expanded));-
165 goto err;
never executed: goto err;
0
166 }-
167 OPENSSL_cleanse(expanded, sizeof(expanded));-
168 }-
169-
170 /* Decode the nonce */-
171 {-
172 uint8_t nonce[2 * EDDSA_448_PRIVATE_BYTES];-
173-
174 if (!EVP_DigestFinalXOF(hashctx, nonce, sizeof(nonce)))
!EVP_DigestFin...sizeof(nonce))Description
TRUEnever evaluated
FALSEevaluated 25 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-25
175 goto err;
never executed: goto err;
0
176 curve448_scalar_decode_long(nonce_scalar, nonce, sizeof(nonce));-
177 OPENSSL_cleanse(nonce, sizeof(nonce));-
178 }-
179-
180 {-
181 /* Scalarmul to create the nonce-point */-
182 curve448_scalar_t nonce_scalar_2;-
183 curve448_point_t p;-
184-
185 curve448_scalar_halve(nonce_scalar_2, nonce_scalar);-
186 for (c = 2; c < C448_EDDSA_ENCODE_RATIO; c <<= 1)
c < 4Description
TRUEevaluated 25 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
FALSEevaluated 25 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
25
187 curve448_scalar_halve(nonce_scalar_2, nonce_scalar_2);
executed 25 times by 2 tests: curve448_scalar_halve(nonce_scalar_2, nonce_scalar_2);
Executed by:
  • curve448_internal_test
  • libcrypto.so.1.1
25
188-
189 curve448_precomputed_scalarmul(p, curve448_precomputed_base,-
190 nonce_scalar_2);-
191 curve448_point_mul_by_ratio_and_encode_like_eddsa(nonce_point, p);-
192 curve448_point_destroy(p);-
193 curve448_scalar_destroy(nonce_scalar_2);-
194 }-
195-
196 {-
197 uint8_t challenge[2 * EDDSA_448_PRIVATE_BYTES];-
198-
199 /* Compute the challenge */-
200 if (!hash_init_with_dom(hashctx, prehashed, 0, context, context_len)
!hash_init_wit..., context_len)Description
TRUEnever evaluated
FALSEevaluated 25 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-25
201 || !EVP_DigestUpdate(hashctx, nonce_point, sizeof(nonce_point))
!EVP_DigestUpd...(nonce_point))Description
TRUEnever evaluated
FALSEevaluated 25 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-25
202 || !EVP_DigestUpdate(hashctx, pubkey, EDDSA_448_PUBLIC_BYTES)
!EVP_DigestUpd...x, pubkey, 57)Description
TRUEnever evaluated
FALSEevaluated 25 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-25
203 || !EVP_DigestUpdate(hashctx, message, message_len)
!EVP_DigestUpd..., message_len)Description
TRUEnever evaluated
FALSEevaluated 25 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-25
204 || !EVP_DigestFinalXOF(hashctx, challenge, sizeof(challenge)))
!EVP_DigestFin...of(challenge))Description
TRUEnever evaluated
FALSEevaluated 25 times by 2 tests
Evaluated by:
  • curve448_internal_test
  • libcrypto.so.1.1
0-25
205 goto err;
never executed: goto err;
0
206-
207 curve448_scalar_decode_long(challenge_scalar, challenge,-
208 sizeof(challenge));-
209 OPENSSL_cleanse(challenge, sizeof(challenge));-
210 }-
211-
212 curve448_scalar_mul(challenge_scalar, challenge_scalar, secret_scalar);-
213 curve448_scalar_add(challenge_scalar, challenge_scalar, nonce_scalar);-
214-
215 OPENSSL_cleanse(signature, EDDSA_448_SIGNATURE_BYTES);-
216 memcpy(signature, nonce_point, sizeof(nonce_point));-
217 curve448_scalar_encode(&signature[EDDSA_448_PUBLIC_BYTES],-
218 challenge_scalar);-
219-
220 curve448_scalar_destroy(secret_scalar);-
221 curve448_scalar_destroy(nonce_scalar);-
222 curve448_scalar_destroy(challenge_scalar);-
223-
224 ret = C448_SUCCESS;-
225 err:
code before this statement executed 25 times by 2 tests: err:
Executed by:
  • curve448_internal_test
  • libcrypto.so.1.1
25
226 EVP_MD_CTX_free(hashctx);-
227 return ret;
executed 25 times by 2 tests: return ret;
Executed by:
  • curve448_internal_test
  • libcrypto.so.1.1
25
228}-
229-
230c448_error_t c448_ed448_sign_prehash(-
231 uint8_t signature[EDDSA_448_SIGNATURE_BYTES],-
232 const uint8_t privkey[EDDSA_448_PRIVATE_BYTES],-
233 const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],-
234 const uint8_t hash[64], const uint8_t *context,-
235 size_t context_len)-
236{-
237 return c448_ed448_sign(signature, privkey, pubkey, hash, 64, 1, context,
executed 2 times by 1 test: return c448_ed448_sign(signature, privkey, pubkey, hash, 64, 1, context, context_len);
Executed by:
  • curve448_internal_test
2
238 context_len);
executed 2 times by 1 test: return c448_ed448_sign(signature, privkey, pubkey, hash, 64, 1, context, context_len);
Executed by:
  • curve448_internal_test
2
239}-
240-
241c448_error_t c448_ed448_verify(-
242 const uint8_t signature[EDDSA_448_SIGNATURE_BYTES],-
243 const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],-
244 const uint8_t *message, size_t message_len,-
245 uint8_t prehashed, const uint8_t *context,-
246 uint8_t context_len)-
247{-
248 curve448_point_t pk_point, r_point;-
249 c448_error_t error =-
250 curve448_point_decode_like_eddsa_and_mul_by_ratio(pk_point, pubkey);-
251 curve448_scalar_t challenge_scalar;-
252 curve448_scalar_t response_scalar;-
253-
254 if (C448_SUCCESS != error)
C448_SUCCESS != errorDescription
TRUEnever evaluated
FALSEevaluated 9 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-9
255 return error;
never executed: return error;
0
256-
257 error =-
258 curve448_point_decode_like_eddsa_and_mul_by_ratio(r_point, signature);-
259 if (C448_SUCCESS != error)
C448_SUCCESS != errorDescription
TRUEnever evaluated
FALSEevaluated 9 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-9
260 return error;
never executed: return error;
0
261-
262 {-
263 /* Compute the challenge */-
264 EVP_MD_CTX *hashctx = EVP_MD_CTX_new();-
265 uint8_t challenge[2 * EDDSA_448_PRIVATE_BYTES];-
266-
267 if (hashctx == NULL
hashctx == ((void *)0)Description
TRUEnever evaluated
FALSEevaluated 9 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-9
268 || !hash_init_with_dom(hashctx, prehashed, 0, context,
!hash_init_wit..., context_len)Description
TRUEnever evaluated
FALSEevaluated 9 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-9
269 context_len)
!hash_init_wit..., context_len)Description
TRUEnever evaluated
FALSEevaluated 9 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-9
270 || !EVP_DigestUpdate(hashctx, signature, EDDSA_448_PUBLIC_BYTES)
!EVP_DigestUpd...signature, 57)Description
TRUEnever evaluated
FALSEevaluated 9 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-9
271 || !EVP_DigestUpdate(hashctx, pubkey, EDDSA_448_PUBLIC_BYTES)
!EVP_DigestUpd...x, pubkey, 57)Description
TRUEnever evaluated
FALSEevaluated 9 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-9
272 || !EVP_DigestUpdate(hashctx, message, message_len)
!EVP_DigestUpd..., message_len)Description
TRUEnever evaluated
FALSEevaluated 9 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-9
273 || !EVP_DigestFinalXOF(hashctx, challenge, sizeof(challenge))) {
!EVP_DigestFin...of(challenge))Description
TRUEnever evaluated
FALSEevaluated 9 times by 1 test
Evaluated by:
  • libcrypto.so.1.1
0-9
274 EVP_MD_CTX_free(hashctx);-
275 return C448_FAILURE;
never executed: return C448_FAILURE;
0
276 }-
277-
278 EVP_MD_CTX_free(hashctx);-
279 curve448_scalar_decode_long(challenge_scalar, challenge,-
280 sizeof(challenge));-
281 OPENSSL_cleanse(challenge, sizeof(challenge));-
282 }-
283 curve448_scalar_sub(challenge_scalar, curve448_scalar_zero,-
284 challenge_scalar);-
285-
286 curve448_scalar_decode_long(response_scalar,-
287 &signature[EDDSA_448_PUBLIC_BYTES],-
288 EDDSA_448_PRIVATE_BYTES);-
289-
290 /* pk_point = -c(x(P)) + (cx + k)G = kG */-
291 curve448_base_double_scalarmul_non_secret(pk_point,-
292 response_scalar,-
293 pk_point, challenge_scalar);-
294 return c448_succeed_if(curve448_point_eq(pk_point, r_point));
executed 9 times by 1 test: return c448_succeed_if(curve448_point_eq(pk_point, r_point));
Executed by:
  • libcrypto.so.1.1
9
295}-
296-
297c448_error_t c448_ed448_verify_prehash(-
298 const uint8_t signature[EDDSA_448_SIGNATURE_BYTES],-
299 const uint8_t pubkey[EDDSA_448_PUBLIC_BYTES],-
300 const uint8_t hash[64], const uint8_t *context,-
301 uint8_t context_len)-
302{-
303 return c448_ed448_verify(signature, pubkey, hash, 64, 1, context,
never executed: return c448_ed448_verify(signature, pubkey, hash, 64, 1, context, context_len);
0
304 context_len);
never executed: return c448_ed448_verify(signature, pubkey, hash, 64, 1, context, context_len);
0
305}-
306-
307int ED448_sign(uint8_t *out_sig, const uint8_t *message, size_t message_len,-
308 const uint8_t public_key[57], const uint8_t private_key[57],-
309 const uint8_t *context, size_t context_len)-
310{-
311 return c448_ed448_sign(out_sig, private_key, public_key, message,
executed 23 times by 2 tests: return c448_ed448_sign(out_sig, private_key, public_key, message, message_len, 0, context, context_len) == C448_SUCCESS;
Executed by:
  • curve448_internal_test
  • libcrypto.so.1.1
23
312 message_len, 0, context, context_len)
executed 23 times by 2 tests: return c448_ed448_sign(out_sig, private_key, public_key, message, message_len, 0, context, context_len) == C448_SUCCESS;
Executed by:
  • curve448_internal_test
  • libcrypto.so.1.1
23
313 == C448_SUCCESS;
executed 23 times by 2 tests: return c448_ed448_sign(out_sig, private_key, public_key, message, message_len, 0, context, context_len) == C448_SUCCESS;
Executed by:
  • curve448_internal_test
  • libcrypto.so.1.1
23
314}-
315-
316int ED448_verify(const uint8_t *message, size_t message_len,-
317 const uint8_t signature[114], const uint8_t public_key[57],-
318 const uint8_t *context, size_t context_len)-
319{-
320 return c448_ed448_verify(signature, public_key, message, message_len, 0,
executed 9 times by 1 test: return c448_ed448_verify(signature, public_key, message, message_len, 0, context, (uint8_t)context_len) == C448_SUCCESS;
Executed by:
  • libcrypto.so.1.1
9
321 context, (uint8_t)context_len) == C448_SUCCESS;
executed 9 times by 1 test: return c448_ed448_verify(signature, public_key, message, message_len, 0, context, (uint8_t)context_len) == C448_SUCCESS;
Executed by:
  • libcrypto.so.1.1
9
322}-
323-
324int ED448ph_sign(uint8_t *out_sig, const uint8_t hash[64],-
325 const uint8_t public_key[57], const uint8_t private_key[57],-
326 const uint8_t *context, size_t context_len)-
327{-
328 return c448_ed448_sign_prehash(out_sig, private_key, public_key, hash,
executed 2 times by 1 test: return c448_ed448_sign_prehash(out_sig, private_key, public_key, hash, context, context_len) == C448_SUCCESS;
Executed by:
  • curve448_internal_test
2
329 context, context_len) == C448_SUCCESS;
executed 2 times by 1 test: return c448_ed448_sign_prehash(out_sig, private_key, public_key, hash, context, context_len) == C448_SUCCESS;
Executed by:
  • curve448_internal_test
2
330-
331}-
332-
333int ED448ph_verify(const uint8_t hash[64], const uint8_t signature[114],-
334 const uint8_t public_key[57], const uint8_t *context,-
335 size_t context_len)-
336{-
337 return c448_ed448_verify_prehash(signature, public_key, hash, context,
never executed: return c448_ed448_verify_prehash(signature, public_key, hash, context, (uint8_t)context_len) == C448_SUCCESS;
0
338 (uint8_t)context_len) == C448_SUCCESS;
never executed: return c448_ed448_verify_prehash(signature, public_key, hash, context, (uint8_t)context_len) == C448_SUCCESS;
0
339}-
340-
341int ED448_public_from_private(uint8_t out_public_key[57],-
342 const uint8_t private_key[57])-
343{-
344 return c448_ed448_derive_public_key(out_public_key, private_key)
executed 38 times by 1 test: return c448_ed448_derive_public_key(out_public_key, private_key) == C448_SUCCESS;
Executed by:
  • libcrypto.so.1.1
38
345 == C448_SUCCESS;
executed 38 times by 1 test: return c448_ed448_derive_public_key(out_public_key, private_key) == C448_SUCCESS;
Executed by:
  • libcrypto.so.1.1
38
346}-
Source codeSwitch to Preprocessed file
Generated by Squish Coco 4.2.2