]> git.ipfire.org Git - thirdparty/openssl.git/blame - crypto/ec/ec.h
Typo.
[thirdparty/openssl.git] / crypto / ec / ec.h
CommitLineData
65e81670 1/* crypto/ec/ec.h */
35b73a1f
BM
2/*
3 * Originally written by Bodo Moeller for the OpenSSL project.
4 */
ba12070f
NL
5/**
6 * \file crypto/ec/ec.h Include file for the OpenSSL EC functions
7 * \author Originally written by Bodo Moeller for the OpenSSL project
8 */
65e81670 9/* ====================================================================
ba12070f 10 * Copyright (c) 1998-2005 The OpenSSL Project. All rights reserved.
6cc5e19d 11 *
65e81670
BM
12 * Redistribution and use in source and binary forms, with or without
13 * modification, are permitted provided that the following conditions
14 * are met:
6cc5e19d 15 *
65e81670
BM
16 * 1. Redistributions of source code must retain the above copyright
17 * notice, this list of conditions and the following disclaimer.
6cc5e19d 18 *
65e81670
BM
19 * 2. Redistributions in binary form must reproduce the above copyright
20 * notice, this list of conditions and the following disclaimer in
21 * the documentation and/or other materials provided with the
22 * distribution.
6cc5e19d 23 *
65e81670
BM
24 * 3. All advertising materials mentioning features or use of this
25 * software must display the following acknowledgment:
26 * "This product includes software developed by the OpenSSL Project
27 * for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
28 *
29 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
30 * endorse or promote products derived from this software without
31 * prior written permission. For written permission, please contact
32 * openssl-core@openssl.org.
33 *
34 * 5. Products derived from this software may not be called "OpenSSL"
35 * nor may "OpenSSL" appear in their names without prior written
36 * permission of the OpenSSL Project.
37 *
38 * 6. Redistributions of any form whatsoever must retain the following
39 * acknowledgment:
40 * "This product includes software developed by the OpenSSL Project
41 * for use in the OpenSSL Toolkit (http://www.openssl.org/)"
42 *
43 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
44 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
45 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
46 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
47 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
48 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
49 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
50 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
51 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
52 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
53 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
54 * OF THE POSSIBILITY OF SUCH DAMAGE.
55 * ====================================================================
56 *
57 * This product includes cryptographic software written by Eric Young
58 * (eay@cryptsoft.com). This product includes software written by Tim
59 * Hudson (tjh@cryptsoft.com).
6cc5e19d
BM
60 *
61 */
7793f30e
BM
62/* ====================================================================
63 * Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
64 *
65 * Portions of the attached software ("Contribution") are developed by
66 * SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.
67 *
68 * The Contribution is licensed pursuant to the OpenSSL open source
69 * license provided above.
70 *
7793f30e
BM
71 * The elliptic curve binary polynomial software is originally written by
72 * Sheueling Chang Shantz and Douglas Stebila of Sun Microsystems Laboratories.
73 *
74 */
6cc5e19d 75
6cc5e19d
BM
76#ifndef HEADER_EC_H
77#define HEADER_EC_H
78
87c9c659
RL
79#include <openssl/opensslconf.h>
80
bb62a8b0 81#ifdef OPENSSL_NO_EC
37da54b1 82#error EC is disabled.
bb62a8b0
BM
83#endif
84
458c2917 85#include <openssl/asn1.h>
0e995464 86#include <openssl/symhacks.h>
0f814687
GT
87#ifndef OPENSSL_NO_DEPRECATED
88#include <openssl/bn.h>
89#endif
6cc5e19d 90
65e81670
BM
91#ifdef __cplusplus
92extern "C" {
7f24b1c3
AP
93#elif defined(__SUNPRO_C)
94# if __SUNPRO_C >= 0x520
95# pragma error_messages (off,E_ARRAY_OF_INCOMPLETE_NONAME,E_ARRAY_OF_INCOMPLETE)
96# endif
65e81670 97#endif
6cc5e19d 98
ba12070f
NL
99/** Enum for the point conversion form as defined in X9.62 (ECDSA)
100 * for the encoding of a elliptic curve point (x,y) */
3a12ce01 101typedef enum {
ba12070f
NL
102 /** the point is encoded as z||x, where the octet z specifies
103 * which solution of the quadratic equation y is */
3a12ce01 104 POINT_CONVERSION_COMPRESSED = 2,
ba12070f 105 /** the point is encoded as z||x||y, where z is the octet 0x02 */
3a12ce01 106 POINT_CONVERSION_UNCOMPRESSED = 4,
ba12070f
NL
107 /** the point is encoded as z||x||y, where the octet z specifies
108 * which solution of the quadratic equation y is */
3a12ce01
BM
109 POINT_CONVERSION_HYBRID = 6
110} point_conversion_form_t;
111
112
113typedef struct ec_method_st EC_METHOD;
114
115typedef struct ec_group_st
116 /*
117 EC_METHOD *meth;
118 -- field definition
119 -- curve coefficients
120 -- optional generator with associated information (order, cofactor)
37c660ff 121 -- optional extra data (precomputed table for fast computation of multiples of generator)
5f3d6f70 122 -- ASN1 stuff
3a12ce01
BM
123 */
124 EC_GROUP;
125
126typedef struct ec_point_st EC_POINT;
127
128
ba12070f
NL
129/********************************************************************/
130/* EC_METHODs for curves over GF(p) */
131/********************************************************************/
132
133/** Returns the basic GFp ec methods which provides the basis for the
134 * optimized methods.
135 * \return EC_METHOD object
3a12ce01 136 */
3a12ce01 137const EC_METHOD *EC_GFp_simple_method(void);
ba12070f
NL
138
139/** Returns GFp methods using montgomery multiplication.
140 * \return EC_METHOD object
141 */
3a12ce01 142const EC_METHOD *EC_GFp_mont_method(void);
ba12070f
NL
143
144/** Returns GFp methods using optimized methods for NIST recommended curves
145 * \return EC_METHOD object
146 */
5c6bf031 147const EC_METHOD *EC_GFp_nist_method(void);
3a12ce01 148
ba12070f
NL
149
150/********************************************************************/
151/* EC_METHOD for curves over GF(2^m) */
152/********************************************************************/
153
154/** Returns the basic GF2m ec method
155 * \return EC_METHOD object
7793f30e
BM
156 */
157const EC_METHOD *EC_GF2m_simple_method(void);
158
3a12ce01 159
ba12070f
NL
160/********************************************************************/
161/* EC_GROUP functions */
162/********************************************************************/
163
164/** Creates a new EC_GROUP object
165 * \param meth EC_METHOD to use
166 * \return newly created EC_GROUP object or NULL in case of an error.
167 */
168EC_GROUP *EC_GROUP_new(const EC_METHOD *meth);
169
170/** Frees a EC_GROUP object
171 * \param group EC_GROUP object to be freed.
172 */
173void EC_GROUP_free(EC_GROUP *group);
174
175/** Clears and frees a EC_GROUP object
176 * \param group EC_GROUP object to be cleared and freed.
177 */
178void EC_GROUP_clear_free(EC_GROUP *group);
179
180/** Copies EC_GROUP objects. Note: both EC_GROUPs must use the same EC_METHOD.
181 * \param dst destination EC_GROUP object
182 * \param src source EC_GROUP object
183 * \return 1 on success and 0 if an error occurred.
184 */
185int EC_GROUP_copy(EC_GROUP *dst, const EC_GROUP *src);
186
187/** Creates a new EC_GROUP object and copies the copies the content
188 * form src to the newly created EC_KEY object
189 * \param src source EC_GROUP object
190 * \return newly created EC_GROUP object or NULL in case of an error.
191 */
192EC_GROUP *EC_GROUP_dup(const EC_GROUP *src);
193
194/** Returns the EC_METHOD of the EC_GROUP object.
195 * \param group EC_GROUP object
196 * \return EC_METHOD used in this EC_GROUP object.
197 */
198const EC_METHOD *EC_GROUP_method_of(const EC_GROUP *group);
199
200/** Returns the field type of the EC_METHOD.
201 * \param meth EC_METHOD object
202 * \return NID of the underlying field type OID.
203 */
204int EC_METHOD_get_field_type(const EC_METHOD *meth);
205
206/** Sets the generator and it's order/cofactor of a EC_GROUP object.
207 * \param group EC_GROUP object
208 * \param generator EC_POINT object with the generator.
209 * \param order the order of the group generated by the generator.
210 * \param cofactor the index of the sub-group generated by the generator
211 * in the group of all points on the elliptic curve.
212 * \return 1 on success and 0 if an error occured
213 */
214int EC_GROUP_set_generator(EC_GROUP *group, const EC_POINT *generator, const BIGNUM *order, const BIGNUM *cofactor);
215
216/** Returns the generator of a EC_GROUP object.
217 * \param group EC_GROUP object
218 * \return the currently used generator (possibly NULL).
219 */
220const EC_POINT *EC_GROUP_get0_generator(const EC_GROUP *group);
221
222/** Gets the order of a EC_GROUP
223 * \param group EC_GROUP object
224 * \param order BIGNUM to which the order is copied
225 * \param ctx BN_CTX object (optional)
226 * \return 1 on success and 0 if an error occured
227 */
228int EC_GROUP_get_order(const EC_GROUP *group, BIGNUM *order, BN_CTX *ctx);
48fe4d62 229
ba12070f
NL
230/** Gets the cofactor of a EC_GROUP
231 * \param group EC_GROUP object
232 * \param cofactor BIGNUM to which the cofactor is copied
233 * \param ctx BN_CTX object (optional)
234 * \return 1 on success and 0 if an error occured
235 */
236int EC_GROUP_get_cofactor(const EC_GROUP *group, BIGNUM *cofactor, BN_CTX *ctx);
b6db386f 237
ba12070f
NL
238/** Sets the name of a EC_GROUP object
239 * \param group EC_GROUP object
240 * \param nid NID of the curve name OID
241 */
242void EC_GROUP_set_curve_name(EC_GROUP *group, int nid);
b6db386f 243
ba12070f
NL
244/** Returns the curve name of a EC_GROUP object
245 * \param group EC_GROUP object
246 * \return NID of the curve name OID or 0 if not set.
247 */
248int EC_GROUP_get_curve_name(const EC_GROUP *group);
945e15a2 249
ba12070f
NL
250void EC_GROUP_set_asn1_flag(EC_GROUP *group, int flag);
251int EC_GROUP_get_asn1_flag(const EC_GROUP *group);
5f3d6f70
BM
252
253void EC_GROUP_set_point_conversion_form(EC_GROUP *, point_conversion_form_t);
254point_conversion_form_t EC_GROUP_get_point_conversion_form(const EC_GROUP *);
255
256unsigned char *EC_GROUP_get0_seed(const EC_GROUP *);
257size_t EC_GROUP_get_seed_len(const EC_GROUP *);
258size_t EC_GROUP_set_seed(EC_GROUP *, const unsigned char *, size_t len);
48fe4d62 259
ba12070f
NL
260/** Sets the parameter of a ec over GFp defined by y^2 = x^3 + a*x + b
261 * \param group EC_GROUP object
262 * \param p BIGNUM with the prime number
263 * \param a BIGNUM with parameter a of the equation
264 * \param b BIGNUM with parameter b of the equation
265 * \param ctx BN_CTX object (optional)
266 * \return 1 on success and 0 if an error occured
267 */
268int EC_GROUP_set_curve_GFp(EC_GROUP *group, const BIGNUM *p, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx);
269
270/** Gets the parameter of the ec over GFp defined by y^2 = x^3 + a*x + b
271 * \param group EC_GROUP object
272 * \param p BIGNUM for the prime number
273 * \param a BIGNUM for parameter a of the equation
274 * \param b BIGNUM for parameter b of the equation
275 * \param ctx BN_CTX object (optional)
276 * \return 1 on success and 0 if an error occured
277 */
278int EC_GROUP_get_curve_GFp(const EC_GROUP *group, BIGNUM *p, BIGNUM *a, BIGNUM *b, BN_CTX *ctx);
279
280/** Sets the parameter of a ec over GF2m defined by y^2 + x*y = x^3 + a*x^2 + b
281 * \param group EC_GROUP object
282 * \param p BIGNUM with the polynomial defining the underlying field
283 * \param a BIGNUM with parameter a of the equation
284 * \param b BIGNUM with parameter b of the equation
285 * \param ctx BN_CTX object (optional)
286 * \return 1 on success and 0 if an error occured
287 */
288int EC_GROUP_set_curve_GF2m(EC_GROUP *group, const BIGNUM *p, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx);
289
290/** Gets the parameter of the ec over GF2m defined by y^2 + x*y = x^3 + a*x^2 + b
291 * \param group EC_GROUP object
292 * \param p BIGNUM for the polynomial defining the underlying field
293 * \param a BIGNUM for parameter a of the equation
294 * \param b BIGNUM for parameter b of the equation
295 * \param ctx BN_CTX object (optional)
296 * \return 1 on success and 0 if an error occured
297 */
298int EC_GROUP_get_curve_GF2m(const EC_GROUP *group, BIGNUM *p, BIGNUM *a, BIGNUM *b, BN_CTX *ctx);
7793f30e 299
ba12070f
NL
300/** Returns the number of bits needed to represent a field element
301 * \param group EC_GROUP object
302 * \return number of bits needed to represent a field element
303 */
304int EC_GROUP_get_degree(const EC_GROUP *group);
3a12ce01 305
ba12070f
NL
306/** Checks whether the parameter in the EC_GROUP define a valid ec group
307 * \param group EC_GROUP object
308 * \param ctx BN_CTX object (optional)
309 * \return 1 if group is a valid ec group and 0 otherwise
310 */
af28dd6c 311int EC_GROUP_check(const EC_GROUP *group, BN_CTX *ctx);
945e15a2 312
ba12070f
NL
313/** Checks whether the discriminant of the elliptic curve is zero or not
314 * \param group EC_GROUP object
315 * \param ctx BN_CTX object (optional)
316 * \return 1 if the discriminant is not zero and 0 otherwise
317 */
318int EC_GROUP_check_discriminant(const EC_GROUP *group, BN_CTX *ctx);
319
320/** Compares two EC_GROUP objects
321 * \param a first EC_GROUP object
322 * \param b second EC_GROUP object
323 * \param ctx BN_CTX object (optional)
324 * \return 0 if both groups are equal and 1 otherwise
325 */
326int EC_GROUP_cmp(const EC_GROUP *a, const EC_GROUP *b, BN_CTX *ctx);
ada0e717 327
7793f30e 328/* EC_GROUP_new_GF*() calls EC_GROUP_new() and EC_GROUP_set_GF*()
945e15a2 329 * after choosing an appropriate EC_METHOD */
945e15a2 330
ba12070f
NL
331/** Creates a new EC_GROUP object with the specified parameters defined
332 * over GFp (defined by the equation y^2 = x^3 + a*x + b)
333 * \param p BIGNUM with the prime number
334 * \param a BIGNUM with the parameter a of the equation
335 * \param b BIGNUM with the parameter b of the equation
336 * \param ctx BN_CTX object (optional)
337 * \return newly created EC_GROUP object with the specified parameters
338 */
339EC_GROUP *EC_GROUP_new_curve_GFp(const BIGNUM *p, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx);
340
341/** Creates a new EC_GROUP object with the specified parameters defined
342 * over GF2m (defined by the equation y^2 + x*y = x^3 + a*x^2 + b)
343 * \param p BIGNUM with the polynomial defining the underlying field
344 * \param a BIGNUM with the parameter a of the equation
345 * \param b BIGNUM with the parameter b of the equation
346 * \param ctx BN_CTX object (optional)
347 * \return newly created EC_GROUP object with the specified parameters
348 */
349EC_GROUP *EC_GROUP_new_curve_GF2m(const BIGNUM *p, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx);
350
351/** Creates a EC_GROUP object with a curve specified by a NID
352 * \param nid NID of the OID of the curve name
353 * \return newly created EC_GROUP object with specified curve or NULL
354 * if an error occurred
355 */
8b15c740 356EC_GROUP *EC_GROUP_new_by_curve_name(int nid);
ba12070f
NL
357
358
359/********************************************************************/
360/* handling of internal curves */
361/********************************************************************/
362
65b1d31d
BM
363typedef struct {
364 int nid;
365 const char *comment;
366 } EC_builtin_curve;
ba12070f 367
65b1d31d
BM
368/* EC_builtin_curves(EC_builtin_curve *r, size_t size) returns number
369 * of all available curves or zero if a error occurred.
370 * In case r ist not zero nitems EC_builtin_curve structures
371 * are filled with the data of the first nitems internal groups */
372size_t EC_get_builtin_curves(EC_builtin_curve *r, size_t nitems);
7eb18f12 373
7e31164a 374
ba12070f
NL
375/********************************************************************/
376/* EC_POINT functions */
377/********************************************************************/
378
379/** Creates a new EC_POINT object for the specified EC_GROUP
380 * \param group EC_GROUP the underlying EC_GROUP object
381 * \return newly created EC_POINT object or NULL if an error occurred
382 */
383EC_POINT *EC_POINT_new(const EC_GROUP *group);
384
385/** Frees a EC_POINT object
386 * \param point EC_POINT object to be freed
387 */
388void EC_POINT_free(EC_POINT *point);
389
390/** Clears and frees a EC_POINT object
391 * \param point EC_POINT object to be cleared and freed
392 */
393void EC_POINT_clear_free(EC_POINT *point);
394
395/** Copies EC_POINT object
396 * \param dst destination EC_POINT object
397 * \param src source EC_POINT object
398 * \return 1 on success and 0 if an error occured
399 */
400int EC_POINT_copy(EC_POINT *dst, const EC_POINT *src);
945e15a2 401
ba12070f
NL
402/** Creates a new EC_POINT object and copies the content of the supplied
403 * EC_POINT
404 * \param src source EC_POINT object
405 * \param group underlying the EC_GROUP object
406 * \return newly created EC_POINT object or NULL if an error occurred
407 */
408EC_POINT *EC_POINT_dup(const EC_POINT *src, const EC_GROUP *group);
3a12ce01 409
ba12070f
NL
410/** Returns the EC_METHOD used in EC_POINT object
411 * \param point EC_POINT object
412 * \return the EC_METHOD used
413 */
414const EC_METHOD *EC_POINT_method_of(const EC_POINT *point);
415
416/** Sets a point to infinity (neutral element)
417 * \param group underlying EC_GROUP object
418 * \param point EC_POINT to set to infinity
419 * \return 1 on success and 0 if an error occured
420 */
421int EC_POINT_set_to_infinity(const EC_GROUP *group, EC_POINT *point);
422
423/** Sets the jacobian projective coordinates of a EC_POINT over GFp
424 * \param group underlying EC_GROUP object
425 * \param p EC_POINT object
426 * \param x BIGNUM with the x-coordinate
427 * \param y BIGNUM with the y-coordinate
428 * \param z BIGNUM with the z-coordinate
429 * \param ctx BN_CTX object (optional)
430 * \return 1 on success and 0 if an error occured
431 */
432int EC_POINT_set_Jprojective_coordinates_GFp(const EC_GROUP *group, EC_POINT *p,
433 const BIGNUM *x, const BIGNUM *y, const BIGNUM *z, BN_CTX *ctx);
434
435/** Gets the jacobian projective coordinates of a EC_POINT over GFp
436 * \param group underlying EC_GROUP object
437 * \param p EC_POINT object
438 * \param x BIGNUM for the x-coordinate
439 * \param y BIGNUM for the y-coordinate
440 * \param z BIGNUM for the z-coordinate
441 * \param ctx BN_CTX object (optional)
442 * \return 1 on success and 0 if an error occured
443 */
444int EC_POINT_get_Jprojective_coordinates_GFp(const EC_GROUP *group,
445 const EC_POINT *p, BIGNUM *x, BIGNUM *y, BIGNUM *z, BN_CTX *ctx);
446
447/** Sets the affine coordinates of a EC_POINT over GFp
448 * \param group underlying EC_GROUP object
449 * \param p EC_POINT object
450 * \param x BIGNUM with the x-coordinate
451 * \param y BIGNUM with the y-coordinate
452 * \param ctx BN_CTX object (optional)
453 * \return 1 on success and 0 if an error occured
454 */
455int EC_POINT_set_affine_coordinates_GFp(const EC_GROUP *group, EC_POINT *p,
456 const BIGNUM *x, const BIGNUM *y, BN_CTX *ctx);
457
458/** Gets the affine coordinates of a EC_POINT over GFp
459 * \param group underlying EC_GROUP object
460 * \param p EC_POINT object
461 * \param x BIGNUM for the x-coordinate
462 * \param y BIGNUM for the y-coordinate
463 * \param ctx BN_CTX object (optional)
464 * \return 1 on success and 0 if an error occured
465 */
466int EC_POINT_get_affine_coordinates_GFp(const EC_GROUP *group,
467 const EC_POINT *p, BIGNUM *x, BIGNUM *y, BN_CTX *ctx);
468
469/** Sets the x9.62 compressed coordinates of a EC_POINT over GFp
470 * \param group underlying EC_GROUP object
471 * \param p EC_POINT object
472 * \param x BIGNUM with x-coordinate
473 * \param y_bit integer with the y-Bit (either 0 or 1)
474 * \param ctx BN_CTX object (optional)
475 * \return 1 on success and 0 if an error occured
476 */
477int EC_POINT_set_compressed_coordinates_GFp(const EC_GROUP *group, EC_POINT *p,
478 const BIGNUM *x, int y_bit, BN_CTX *ctx);
479
480/** Sets the affine coordinates of a EC_POINT over GF2m
481 * \param group underlying EC_GROUP object
482 * \param p EC_POINT object
483 * \param x BIGNUM with the x-coordinate
484 * \param y BIGNUM with the y-coordinate
485 * \param ctx BN_CTX object (optional)
486 * \return 1 on success and 0 if an error occured
487 */
488int EC_POINT_set_affine_coordinates_GF2m(const EC_GROUP *group, EC_POINT *p,
489 const BIGNUM *x, const BIGNUM *y, BN_CTX *ctx);
490
491/** Gets the affine coordinates of a EC_POINT over GF2m
492 * \param group underlying EC_GROUP object
493 * \param p EC_POINT object
494 * \param x BIGNUM for the x-coordinate
495 * \param y BIGNUM for the y-coordinate
496 * \param ctx BN_CTX object (optional)
497 * \return 1 on success and 0 if an error occured
498 */
499int EC_POINT_get_affine_coordinates_GF2m(const EC_GROUP *group,
500 const EC_POINT *p, BIGNUM *x, BIGNUM *y, BN_CTX *ctx);
501
502/** Sets the x9.62 compressed coordinates of a EC_POINT over GF2m
503 * \param group underlying EC_GROUP object
504 * \param p EC_POINT object
505 * \param x BIGNUM with x-coordinate
506 * \param y_bit integer with the y-Bit (either 0 or 1)
507 * \param ctx BN_CTX object (optional)
508 * \return 1 on success and 0 if an error occured
509 */
510int EC_POINT_set_compressed_coordinates_GF2m(const EC_GROUP *group, EC_POINT *p,
511 const BIGNUM *x, int y_bit, BN_CTX *ctx);
512
513/** Encodes a EC_POINT object to a octet string
514 * \param group underlying EC_GROUP object
515 * \param p EC_POINT object
516 * \param form point conversion form
517 * \param buf memory buffer for the result. If NULL the function returns
518 * required buffer size.
519 * \param len length of the memory buffer
520 * \param ctx BN_CTX object (optional)
521 * \return the length of the encoded octet string or 0 if an error occurred
522 */
523size_t EC_POINT_point2oct(const EC_GROUP *group, const EC_POINT *p,
524 point_conversion_form_t form,
525 unsigned char *buf, size_t len, BN_CTX *ctx);
526
527/** Decodes a EC_POINT from a octet string
528 * \param group underlying EC_GROUP object
529 * \param p EC_POINT object
530 * \param buf memory buffer with the encoded ec point
531 * \param len length of the encoded ec point
532 * \param ctx BN_CTX object (optional)
533 * \return 1 on success and 0 if an error occured
534 */
535int EC_POINT_oct2point(const EC_GROUP *group, EC_POINT *p,
536 const unsigned char *buf, size_t len, BN_CTX *ctx);
7d7db13e 537
6cbe6382
BM
538/* other interfaces to point2oct/oct2point: */
539BIGNUM *EC_POINT_point2bn(const EC_GROUP *, const EC_POINT *,
540 point_conversion_form_t form, BIGNUM *, BN_CTX *);
541EC_POINT *EC_POINT_bn2point(const EC_GROUP *, const BIGNUM *,
542 EC_POINT *, BN_CTX *);
543char *EC_POINT_point2hex(const EC_GROUP *, const EC_POINT *,
544 point_conversion_form_t form, BN_CTX *);
545EC_POINT *EC_POINT_hex2point(const EC_GROUP *, const char *,
546 EC_POINT *, BN_CTX *);
547
3a12ce01 548
ba12070f
NL
549/********************************************************************/
550/* functions for doing EC_POINT arithmetic */
551/********************************************************************/
552
553/** Computes the sum of two EC_POINT
554 * \param group underlying EC_GROUP object
555 * \param r EC_POINT object for the result (r = a + b)
556 * \param a EC_POINT object with the first summand
557 * \param b EC_POINT object with the second summand
558 * \param ctx BN_CTX object (optional)
559 * \return 1 on success and 0 if an error occured
560 */
561int EC_POINT_add(const EC_GROUP *group, EC_POINT *r, const EC_POINT *a, const EC_POINT *b, BN_CTX *ctx);
562
563/** Computes the double of a EC_POINT
564 * \param group underlying EC_GROUP object
565 * \param r EC_POINT object for the result (r = 2 * a)
566 * \param a EC_POINT object
567 * \param ctx BN_CTX object (optional)
568 * \return 1 on success and 0 if an error occured
569 */
570int EC_POINT_dbl(const EC_GROUP *group, EC_POINT *r, const EC_POINT *a, BN_CTX *ctx);
571
572/** Computes the inverse of a EC_POINT
573 * \param group underlying EC_GROUP object
574 * \param a EC_POINT object to be inverted (it's used for the result as well)
575 * \param ctx BN_CTX object (optional)
576 * \return 1 on success and 0 if an error occured
577 */
578int EC_POINT_invert(const EC_GROUP *group, EC_POINT *a, BN_CTX *ctx);
579
580/** Checks whether the point is the neutral element of the group
581 * \param group the underlying EC_GROUP object
582 * \param p EC_POINT object
583 * \return 1 if the point is the neutral element and 0 otherwise
584 */
585int EC_POINT_is_at_infinity(const EC_GROUP *group, const EC_POINT *p);
586
587/** Checks whether the point is on the curve
588 * \param group underlying EC_GROUP object
589 * \param point EC_POINT object to check
590 * \param ctx BN_CTX object (optional)
591 * \return 1 if point if on the curve and 0 otherwise
592 */
593int EC_POINT_is_on_curve(const EC_GROUP *group, const EC_POINT *point, BN_CTX *ctx);
594
595/** Compares two EC_POINTs
596 * \param group underlying EC_GROUP object
597 * \param a first EC_POINT object
598 * \param b second EC_POINT object
599 * \param ctx BN_CTX object (optional)
600 * \return 0 if both points are equal and a value != 0 otherwise
601 */
602int EC_POINT_cmp(const EC_GROUP *group, const EC_POINT *a, const EC_POINT *b, BN_CTX *ctx);
fb171e53 603
e869d4bd 604int EC_POINT_make_affine(const EC_GROUP *, EC_POINT *, BN_CTX *);
48fe4d62 605int EC_POINTs_make_affine(const EC_GROUP *, size_t num, EC_POINT *[], BN_CTX *);
fb171e53 606
ba12070f
NL
607/** Computes r = generator * n sum_{i=0}^num p[i] * m[i]
608 * \param group underlying EC_GROUP object
609 * \param r EC_POINT object for the result
610 * \param n BIGNUM with the multiplier for the group generator (optional)
611 * \param num number futher summands
612 * \param p array of size num of EC_POINT objects
613 * \param m array of size num of BIGNUM objects
614 * \param ctx BN_CTX object (optional)
615 * \return 1 on success and 0 if an error occured
616 */
617int EC_POINTs_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *n, size_t num, const EC_POINT *p[], const BIGNUM *m[], BN_CTX *ctx);
618
619/** Computes r = generator * n + q * m
620 * \param group underlying EC_GROUP object
621 * \param r EC_POINT object for the result
622 * \param n BIGNUM with the multiplier for the group generator (optional)
623 * \param q EC_POINT object with the first factor of the second summand
624 * \param m BIGNUM with the second factor of the second summand
625 * \param ctx BN_CTX object (optional)
626 * \return 1 on success and 0 if an error occured
627 */
628int EC_POINT_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *n, const EC_POINT *q, const BIGNUM *m, BN_CTX *ctx);
3a12ce01 629
ba12070f
NL
630/** Stores multiples of generator for faster point multiplication
631 * \param group EC_GROUP object
632 * \param ctx BN_CTX object (optional)
633 * \return 1 on success and 0 if an error occured
634 */
635int EC_GROUP_precompute_mult(EC_GROUP *group, BN_CTX *ctx);
6cc5e19d 636
ba12070f
NL
637/** Reports whether a precomputation has been done
638 * \param group EC_GROUP object
639 * \return 1 if a pre-computation has been done and 0 otherwise
640 */
641int EC_GROUP_have_precompute_mult(const EC_GROUP *group);
6cc5e19d
BM
642
643
ba12070f
NL
644/********************************************************************/
645/* ASN1 stuff */
646/********************************************************************/
8aefe253
BM
647
648/* EC_GROUP_get_basis_type() returns the NID of the basis type
34f1f2a8
BM
649 * used to represent the field elements */
650int EC_GROUP_get_basis_type(const EC_GROUP *);
651int EC_GROUP_get_trinomial_basis(const EC_GROUP *, unsigned int *k);
652int EC_GROUP_get_pentanomial_basis(const EC_GROUP *, unsigned int *k1,
8aefe253
BM
653 unsigned int *k2, unsigned int *k3);
654
254ef80d 655#define OPENSSL_EC_NAMED_CURVE 0x001
458c2917 656
458c2917
BM
657typedef struct ecpk_parameters_st ECPKPARAMETERS;
658
458c2917
BM
659EC_GROUP *d2i_ECPKParameters(EC_GROUP **, const unsigned char **in, long len);
660int i2d_ECPKParameters(const EC_GROUP *, unsigned char **out);
661
41a15c4f
BL
662#define d2i_ECPKParameters_bio(bp,x) ASN1_d2i_bio_of(EC_GROUP,NULL,d2i_ECPKParameters,bp,x)
663#define i2d_ECPKParameters_bio(bp,x) ASN1_i2d_bio_of_const(EC_GROUP,i2d_ECPKParameters,bp,x)
5dbd3efc
BM
664#define d2i_ECPKParameters_fp(fp,x) (EC_GROUP *)ASN1_d2i_fp(NULL, \
665 (char *(*)())d2i_ECPKParameters,(fp),(unsigned char **)(x))
666#define i2d_ECPKParameters_fp(fp,x) ASN1_i2d_fp(i2d_ECPKParameters,(fp), \
667 (unsigned char *)(x))
458c2917 668
5f3d6f70
BM
669#ifndef OPENSSL_NO_BIO
670int ECPKParameters_print(BIO *bp, const EC_GROUP *x, int off);
671#endif
672#ifndef OPENSSL_NO_FP_API
673int ECPKParameters_print_fp(FILE *fp, const EC_GROUP *x, int off);
674#endif
675
ba12070f
NL
676
677/********************************************************************/
678/* EC_KEY functions */
679/********************************************************************/
680
14a7cfb3
BM
681typedef struct ec_key_st EC_KEY;
682
14a7cfb3
BM
683/* some values for the encoding_flag */
684#define EC_PKEY_NO_PARAMETERS 0x001
685#define EC_PKEY_NO_PUBKEY 0x002
686
ba12070f
NL
687/** Creates a new EC_KEY object.
688 * \return EC_KEY object or NULL if an error occurred.
689 */
14a7cfb3 690EC_KEY *EC_KEY_new(void);
ba12070f
NL
691
692/** Creates a new EC_KEY object using a named curve as underlying
693 * EC_GROUP object.
694 * \param nid NID of the named curve.
695 * \return EC_KEY object or NULL if an error occurred.
696 */
9dd84053 697EC_KEY *EC_KEY_new_by_curve_name(int nid);
ba12070f
NL
698
699/** Frees a EC_KEY object.
700 * \param key EC_KEY object to be freed.
701 */
702void EC_KEY_free(EC_KEY *key);
703
704/** Copies a EC_KEY object.
705 * \param dst destination EC_KEY object
706 * \param src src EC_KEY object
707 * \return dst or NULL if an error occurred.
708 */
709EC_KEY *EC_KEY_copy(EC_KEY *dst, const EC_KEY *src);
710
711/** Creates a new EC_KEY object and copies the content from src to it.
712 * \param src the source EC_KEY object
713 * \return newly created EC_KEY object or NULL if an error occurred.
714 */
715EC_KEY *EC_KEY_dup(const EC_KEY *src);
716
717/** Increases the internal reference count of a EC_KEY object.
718 * \param key EC_KEY object
719 * \return 1 on success and 0 if an error occurred.
720 */
721int EC_KEY_up_ref(EC_KEY *key);
722
723/** Returns the EC_GROUP object of a EC_KEY object
724 * \param key EC_KEY object
725 * \return the EC_GROUP object (possibly NULL).
726 */
727const EC_GROUP *EC_KEY_get0_group(const EC_KEY *key);
728
729/** Sets the EC_GROUP of a EC_KEY object.
730 * \param key EC_KEY object
731 * \param group EC_GROUP to use in the EC_KEY object (note: the EC_KEY
732 * object will use an own copy of the EC_GROUP).
733 * \return 1 on success and 0 if an error occurred.
734 */
735int EC_KEY_set_group(EC_KEY *key, const EC_GROUP *group);
736
737/** Returns the private key of a EC_KEY object.
738 * \param key EC_KEY object
739 * \return a BIGNUM with the private key (possibly NULL).
740 */
741const BIGNUM *EC_KEY_get0_private_key(const EC_KEY *key);
742
743/** Sets the private key of a EC_KEY object.
744 * \param key EC_KEY object
745 * \param prv BIGNUM with the private key (note: the EC_KEY object
746 * will use an own copy of the BIGNUM).
747 * \return 1 on success and 0 if an error occurred.
748 */
749int EC_KEY_set_private_key(EC_KEY *key, const BIGNUM *prv);
750
751/** Returns the public key of a EC_KEY object.
752 * \param key the EC_KEY object
753 * \return a EC_POINT object with the public key (possibly NULL)
754 */
755const EC_POINT *EC_KEY_get0_public_key(const EC_KEY *key);
756
757/** Sets the public key of a EC_KEY object.
758 * \param key EC_KEY object
759 * \param pub EC_POINT object with the public key (note: the EC_KEY object
760 * will use an own copy of the EC_POINT object).
761 * \return 1 on success and 0 if an error occurred.
762 */
763int EC_KEY_set_public_key(EC_KEY *key, const EC_POINT *pub);
764
765unsigned EC_KEY_get_enc_flags(const EC_KEY *key);
9dd84053
NL
766void EC_KEY_set_enc_flags(EC_KEY *, unsigned int);
767point_conversion_form_t EC_KEY_get_conv_form(const EC_KEY *);
768void EC_KEY_set_conv_form(EC_KEY *, point_conversion_form_t);
769/* functions to set/get method specific data */
770void *EC_KEY_get_key_method_data(EC_KEY *,
771 void *(*dup_func)(void *), void (*free_func)(void *), void (*clear_free_func)(void *));
772void EC_KEY_insert_key_method_data(EC_KEY *, void *data,
773 void *(*dup_func)(void *), void (*free_func)(void *), void (*clear_free_func)(void *));
774/* wrapper functions for the underlying EC_GROUP object */
775void EC_KEY_set_asn1_flag(EC_KEY *, int);
ba12070f
NL
776
777/** Creates a table of pre-computed multiples of the generator to
778 * accelerate further EC_KEY operations.
779 * \param key EC_KEY object
780 * \param ctx BN_CTX object (optional)
781 * \return 1 on success and 0 if an error occurred.
782 */
783int EC_KEY_precompute_mult(EC_KEY *key, BN_CTX *ctx);
784
785/** Creates a new ec private (and optional a new public) key.
786 * \param key EC_KEY object
787 * \return 1 on success and 0 if an error occurred.
788 */
789int EC_KEY_generate_key(EC_KEY *key);
790
791/** Verifies that a private and/or public key is valid.
792 * \param key the EC_KEY object
793 * \return 1 on success and 0 otherwise.
794 */
795int EC_KEY_check_key(const EC_KEY *key);
796
797
798/********************************************************************/
799/* de- and encoding functions for SEC1 ECPrivateKey */
800/********************************************************************/
801
802/** Decodes a private key from a memory buffer.
803 * \param key a pointer to a EC_KEY object which should be used (or NULL)
804 * \param in pointer to memory with the DER encoded private key
805 * \param len length of the DER encoded private key
806 * \return the decoded private key or NULL if an error occurred.
807 */
808EC_KEY *d2i_ECPrivateKey(EC_KEY **key, const unsigned char **in, long len);
809
810/** Encodes a private key object and stores the result in a buffer.
811 * \param key the EC_KEY object to encode
812 * \param out the buffer for the result (if NULL the function returns number
813 * of bytes needed).
814 * \return 1 on success and 0 if an error occurred.
815 */
816int i2d_ECPrivateKey(EC_KEY *key, unsigned char **out);
817
818
819/********************************************************************/
820/* de- and encoding functions for EC parameters */
821/********************************************************************/
822
823/** Decodes ec parameter from a memory buffer.
824 * \param key a pointer to a EC_KEY object which should be used (or NULL)
825 * \param in pointer to memory with the DER encoded ec parameters
826 * \param len length of the DER encoded ec parameters
827 * \return a EC_KEY object with the decoded parameters or NULL if an error
828 * occurred.
829 */
830EC_KEY *d2i_ECParameters(EC_KEY **key, const unsigned char **in, long len);
831
832/** Encodes ec parameter and stores the result in a buffer.
833 * \param key the EC_KEY object with ec paramters to encode
834 * \param out the buffer for the result (if NULL the function returns number
835 * of bytes needed).
836 * \return 1 on success and 0 if an error occurred.
837 */
838int i2d_ECParameters(EC_KEY *key, unsigned char **out);
839
840
841/********************************************************************/
842/* de- and encoding functions for EC public key */
843/* (octet string, not DER -- hence 'o2i' and 'i2o') */
844/********************************************************************/
845
846/** Decodes a ec public key from a octet string.
847 * \param key a pointer to a EC_KEY object which should be used
848 * \param in memory buffer with the encoded public key
849 * \param len length of the encoded public key
850 * \return EC_KEY object with decoded public key or NULL if an error
851 * occurred.
852 */
853EC_KEY *o2i_ECPublicKey(EC_KEY **key, const unsigned char **in, long len);
854
855/** Encodes a ec public key in an octet string.
856 * \param key the EC_KEY object with the public key
857 * \param out the buffer for the result (if NULL the function returns number
858 * of bytes needed).
859 * \return 1 on success and 0 if an error occurred
860 */
861int i2o_ECPublicKey(EC_KEY *key, unsigned char **out);
14a7cfb3
BM
862
863#ifndef OPENSSL_NO_BIO
ba12070f
NL
864/** Prints out the ec parameters on human readable form.
865 * \param bp BIO object to which the information is printed
866 * \param key EC_KEY object
867 * \return 1 on success and 0 if an error occurred
868 */
869int ECParameters_print(BIO *bp, const EC_KEY *key);
870
871/** Prints out the contents of a EC_KEY object
872 * \param bp BIO object to which the information is printed
873 * \param key EC_KEY object
874 * \param off line offset
875 * \return 1 on success and 0 if an error occurred
876 */
877int EC_KEY_print(BIO *bp, const EC_KEY *key, int off);
878
14a7cfb3
BM
879#endif
880#ifndef OPENSSL_NO_FP_API
ba12070f
NL
881/** Prints out the ec parameters on human readable form.
882 * \param fp file descriptor to which the information is printed
883 * \param key EC_KEY object
884 * \return 1 on success and 0 if an error occurred
885 */
886int ECParameters_print_fp(FILE *fp, const EC_KEY *key);
887
888/** Prints out the contents of a EC_KEY object
889 * \param fp file descriptor to which the information is printed
890 * \param key EC_KEY object
891 * \param off line offset
892 * \return 1 on success and 0 if an error occurred
893 */
894int EC_KEY_print_fp(FILE *fp, const EC_KEY *key, int off);
895
14a7cfb3 896#endif
0bee0e62 897
41a15c4f 898#define ECParameters_dup(x) ASN1_dup_of(EC_KEY,i2d_ECParameters,d2i_ECParameters,x)
458c2917 899
ad0db060
DSH
900#ifndef __cplusplus
901#if defined(__SUNPRO_C)
902# if __SUNPRO_C >= 0x520
903# pragma error_messages (default,E_ARRAY_OF_INCOMPLETE_NONAME,E_ARRAY_OF_INCOMPLETE)
904# endif
905# endif
906#endif
907
9ca7047d
DSH
908#define EVP_PKEY_CTX_set_ec_paramgen_curve_nid(ctx, nid) \
909 EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_EC, EVP_PKEY_OP_PARAMGEN, \
910 EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID, nid, NULL)
911
912
913#define EVP_PKEY_CTRL_EC_PARAMGEN_CURVE_NID (EVP_PKEY_ALG_CTRL + 1)
914
65e81670
BM
915/* BEGIN ERROR CODES */
916/* The following lines are auto generated by the script mkerr.pl. Any changes
917 * made after this point may be overwritten when the script is next run.
918 */
de10f690 919void ERR_load_EC_strings(void);
6cc5e19d 920
65e81670 921/* Error codes for the EC functions. */
6cc5e19d 922
65e81670 923/* Function codes. */
3ba1f111 924#define EC_F_COMPUTE_WNAF 143
7eb18f12
BM
925#define EC_F_D2I_ECPARAMETERS 144
926#define EC_F_D2I_ECPKPARAMETERS 145
927#define EC_F_D2I_ECPRIVATEKEY 146
448be743 928#define EC_F_ECKEY_PARAM2TYPE 211
3e4585c8 929#define EC_F_ECKEY_PARAM_DECODE 196
448be743
DSH
930#define EC_F_ECKEY_PRIV_DECODE 212
931#define EC_F_ECKEY_PRIV_ENCODE 213
932#define EC_F_ECKEY_PUB_DECODE 214
933#define EC_F_ECKEY_PUB_ENCODE 215
934#define EC_F_ECKEY_TYPE2PARAM 216
7eb18f12
BM
935#define EC_F_ECPARAMETERS_PRINT 147
936#define EC_F_ECPARAMETERS_PRINT_FP 148
937#define EC_F_ECPKPARAMETERS_PRINT 149
938#define EC_F_ECPKPARAMETERS_PRINT_FP 150
5c6bf031
BM
939#define EC_F_ECP_NIST_MOD_192 203
940#define EC_F_ECP_NIST_MOD_224 204
941#define EC_F_ECP_NIST_MOD_256 205
942#define EC_F_ECP_NIST_MOD_521 206
7eb18f12
BM
943#define EC_F_EC_ASN1_GROUP2CURVE 153
944#define EC_F_EC_ASN1_GROUP2FIELDID 154
945#define EC_F_EC_ASN1_GROUP2PARAMETERS 155
946#define EC_F_EC_ASN1_GROUP2PKPARAMETERS 156
458c2917 947#define EC_F_EC_ASN1_PARAMETERS2GROUP 157
7eb18f12 948#define EC_F_EC_ASN1_PKPARAMETERS2GROUP 158
739a543e 949#define EC_F_EC_EX_DATA_SET_DATA 211
aa4ce731 950#define EC_F_EC_GF2M_MONTGOMERY_POINT_MULTIPLY 208
7eb18f12 951#define EC_F_EC_GF2M_SIMPLE_GROUP_CHECK_DISCRIMINANT 159
34f1f2a8 952#define EC_F_EC_GF2M_SIMPLE_GROUP_SET_CURVE 195
7eb18f12
BM
953#define EC_F_EC_GF2M_SIMPLE_OCT2POINT 160
954#define EC_F_EC_GF2M_SIMPLE_POINT2OCT 161
955#define EC_F_EC_GF2M_SIMPLE_POINT_GET_AFFINE_COORDINATES 162
956#define EC_F_EC_GF2M_SIMPLE_POINT_SET_AFFINE_COORDINATES 163
957#define EC_F_EC_GF2M_SIMPLE_SET_COMPRESSED_COORDINATES 164
156e8557
BM
958#define EC_F_EC_GFP_MONT_FIELD_DECODE 133
959#define EC_F_EC_GFP_MONT_FIELD_ENCODE 134
960#define EC_F_EC_GFP_MONT_FIELD_MUL 131
aa4ce731 961#define EC_F_EC_GFP_MONT_FIELD_SET_TO_ONE 209
156e8557 962#define EC_F_EC_GFP_MONT_FIELD_SQR 132
aa4ce731
BM
963#define EC_F_EC_GFP_MONT_GROUP_SET_CURVE 189
964#define EC_F_EC_GFP_MONT_GROUP_SET_CURVE_GFP 135
5c6bf031
BM
965#define EC_F_EC_GFP_NIST_FIELD_MUL 200
966#define EC_F_EC_GFP_NIST_FIELD_SQR 201
aa4ce731 967#define EC_F_EC_GFP_NIST_GROUP_SET_CURVE 202
7eb18f12
BM
968#define EC_F_EC_GFP_SIMPLE_GROUP_CHECK_DISCRIMINANT 165
969#define EC_F_EC_GFP_SIMPLE_GROUP_SET_CURVE 166
970#define EC_F_EC_GFP_SIMPLE_GROUP_SET_CURVE_GFP 100
de10f690
BM
971#define EC_F_EC_GFP_SIMPLE_GROUP_SET_GENERATOR 101
972#define EC_F_EC_GFP_SIMPLE_MAKE_AFFINE 102
973#define EC_F_EC_GFP_SIMPLE_OCT2POINT 103
974#define EC_F_EC_GFP_SIMPLE_POINT2OCT 104
48fe4d62 975#define EC_F_EC_GFP_SIMPLE_POINTS_MAKE_AFFINE 137
7eb18f12
BM
976#define EC_F_EC_GFP_SIMPLE_POINT_GET_AFFINE_COORDINATES 167
977#define EC_F_EC_GFP_SIMPLE_POINT_GET_AFFINE_COORDINATES_GFP 105
978#define EC_F_EC_GFP_SIMPLE_POINT_SET_AFFINE_COORDINATES 168
979#define EC_F_EC_GFP_SIMPLE_POINT_SET_AFFINE_COORDINATES_GFP 128
980#define EC_F_EC_GFP_SIMPLE_SET_COMPRESSED_COORDINATES 169
981#define EC_F_EC_GFP_SIMPLE_SET_COMPRESSED_COORDINATES_GFP 129
982#define EC_F_EC_GROUP_CHECK 170
983#define EC_F_EC_GROUP_CHECK_DISCRIMINANT 171
de10f690 984#define EC_F_EC_GROUP_COPY 106
48fe4d62
BM
985#define EC_F_EC_GROUP_GET0_GENERATOR 139
986#define EC_F_EC_GROUP_GET_COFACTOR 140
7eb18f12 987#define EC_F_EC_GROUP_GET_CURVE_GF2M 172
bb62a8b0 988#define EC_F_EC_GROUP_GET_CURVE_GFP 130
7eb18f12 989#define EC_F_EC_GROUP_GET_DEGREE 173
48fe4d62 990#define EC_F_EC_GROUP_GET_ORDER 141
34f1f2a8
BM
991#define EC_F_EC_GROUP_GET_PENTANOMIAL_BASIS 193
992#define EC_F_EC_GROUP_GET_TRINOMIAL_BASIS 194
de10f690 993#define EC_F_EC_GROUP_NEW 108
8b15c740 994#define EC_F_EC_GROUP_NEW_BY_CURVE_NAME 174
7eb18f12 995#define EC_F_EC_GROUP_NEW_FROM_DATA 175
194dd046 996#define EC_F_EC_GROUP_PRECOMPUTE_MULT 142
7793f30e 997#define EC_F_EC_GROUP_SET_CURVE_GF2M 176
de10f690 998#define EC_F_EC_GROUP_SET_CURVE_GFP 109
739a543e 999#define EC_F_EC_GROUP_SET_EXTRA_DATA 110
de10f690 1000#define EC_F_EC_GROUP_SET_GENERATOR 111
7eb18f12
BM
1001#define EC_F_EC_KEY_CHECK_KEY 177
1002#define EC_F_EC_KEY_COPY 178
1003#define EC_F_EC_KEY_GENERATE_KEY 179
aa4ce731 1004#define EC_F_EC_KEY_NEW 182
7eb18f12
BM
1005#define EC_F_EC_KEY_PRINT 180
1006#define EC_F_EC_KEY_PRINT_FP 181
48fe4d62
BM
1007#define EC_F_EC_POINTS_MAKE_AFFINE 136
1008#define EC_F_EC_POINTS_MUL 138
de10f690
BM
1009#define EC_F_EC_POINT_ADD 112
1010#define EC_F_EC_POINT_CMP 113
1011#define EC_F_EC_POINT_COPY 114
1012#define EC_F_EC_POINT_DBL 115
7eb18f12 1013#define EC_F_EC_POINT_GET_AFFINE_COORDINATES_GF2M 183
de10f690
BM
1014#define EC_F_EC_POINT_GET_AFFINE_COORDINATES_GFP 116
1015#define EC_F_EC_POINT_GET_JPROJECTIVE_COORDINATES_GFP 117
aa4ce731 1016#define EC_F_EC_POINT_INVERT 210
de10f690
BM
1017#define EC_F_EC_POINT_IS_AT_INFINITY 118
1018#define EC_F_EC_POINT_IS_ON_CURVE 119
1019#define EC_F_EC_POINT_MAKE_AFFINE 120
7eb18f12 1020#define EC_F_EC_POINT_MUL 184
de10f690
BM
1021#define EC_F_EC_POINT_NEW 121
1022#define EC_F_EC_POINT_OCT2POINT 122
1023#define EC_F_EC_POINT_POINT2OCT 123
7eb18f12 1024#define EC_F_EC_POINT_SET_AFFINE_COORDINATES_GF2M 185
de10f690 1025#define EC_F_EC_POINT_SET_AFFINE_COORDINATES_GFP 124
7eb18f12 1026#define EC_F_EC_POINT_SET_COMPRESSED_COORDINATES_GF2M 186
1d5bd6cf
BM
1027#define EC_F_EC_POINT_SET_COMPRESSED_COORDINATES_GFP 125
1028#define EC_F_EC_POINT_SET_JPROJECTIVE_COORDINATES_GFP 126
de10f690 1029#define EC_F_EC_POINT_SET_TO_INFINITY 127
37c660ff 1030#define EC_F_EC_PRE_COMP_DUP 207
7eb18f12
BM
1031#define EC_F_EC_WNAF_MUL 187
1032#define EC_F_EC_WNAF_PRECOMPUTE_MULT 188
7eb18f12
BM
1033#define EC_F_I2D_ECPARAMETERS 190
1034#define EC_F_I2D_ECPKPARAMETERS 191
1035#define EC_F_I2D_ECPRIVATEKEY 192
62e3163b
BM
1036#define EC_F_I2O_ECPUBLICKEY 151
1037#define EC_F_O2I_ECPUBLICKEY 152
9ca7047d
DSH
1038#define EC_F_PKEY_EC_CTRL 197
1039#define EC_F_PKEY_EC_CTRL_STR 198
1040#define EC_F_PKEY_EC_DERIVE 217
1041#define EC_F_PKEY_EC_KEYGEN 199
1042#define EC_F_PKEY_EC_PARAMGEN 219
1043#define EC_F_PKEY_EC_SIGN 218
6cc5e19d 1044
65e81670 1045/* Reason codes. */
7eb18f12
BM
1046#define EC_R_ASN1_ERROR 115
1047#define EC_R_ASN1_UNKNOWN_FIELD 116
226cc7de 1048#define EC_R_BUFFER_TOO_SMALL 100
7eb18f12 1049#define EC_R_D2I_ECPKPARAMETERS_FAILURE 117
448be743 1050#define EC_R_DECODE_ERROR 137
af28dd6c 1051#define EC_R_DISCRIMINANT_IS_ZERO 118
7eb18f12
BM
1052#define EC_R_EC_GROUP_NEW_BY_NAME_FAILURE 119
1053#define EC_R_GROUP2PKPARAMETERS_FAILURE 120
1054#define EC_R_I2D_ECPKPARAMETERS_FAILURE 121
226cc7de 1055#define EC_R_INCOMPATIBLE_OBJECTS 101
48fe4d62 1056#define EC_R_INVALID_ARGUMENT 112
bb62a8b0
BM
1057#define EC_R_INVALID_COMPRESSED_POINT 110
1058#define EC_R_INVALID_COMPRESSION_BIT 109
9ca7047d
DSH
1059#define EC_R_INVALID_CURVE 132
1060#define EC_R_INVALID_DIGEST_TYPE 138
226cc7de 1061#define EC_R_INVALID_ENCODING 102
de10f690
BM
1062#define EC_R_INVALID_FIELD 103
1063#define EC_R_INVALID_FORM 104
7eb18f12
BM
1064#define EC_R_INVALID_GROUP_ORDER 122
1065#define EC_R_INVALID_PRIVATE_KEY 123
9ca7047d 1066#define EC_R_KEYS_NOT_SET 140
7eb18f12
BM
1067#define EC_R_MISSING_PARAMETERS 124
1068#define EC_R_MISSING_PRIVATE_KEY 125
37c660ff
BM
1069#define EC_R_NOT_A_NIST_PRIME 135
1070#define EC_R_NOT_A_SUPPORTED_NIST_PRIME 136
7eb18f12 1071#define EC_R_NOT_IMPLEMENTED 126
156e8557 1072#define EC_R_NOT_INITIALIZED 111
5c6bf031 1073#define EC_R_NO_FIELD_MOD 133
9ca7047d 1074#define EC_R_NO_PARAMETERS_SET 139
5c6bf031 1075#define EC_R_PASSED_NULL_PARAMETER 134
7eb18f12 1076#define EC_R_PKPARAMETERS2GROUP_FAILURE 127
de10f690
BM
1077#define EC_R_POINT_AT_INFINITY 106
1078#define EC_R_POINT_IS_NOT_ON_CURVE 107
1079#define EC_R_SLOT_FULL 108
6f8f4431 1080#define EC_R_UNDEFINED_GENERATOR 113
7eb18f12
BM
1081#define EC_R_UNDEFINED_ORDER 128
1082#define EC_R_UNKNOWN_GROUP 129
38374911 1083#define EC_R_UNKNOWN_ORDER 114
34f1f2a8 1084#define EC_R_UNSUPPORTED_FIELD 131
7eb18f12 1085#define EC_R_WRONG_ORDER 130
6cc5e19d 1086
65e81670
BM
1087#ifdef __cplusplus
1088}
1089#endif
5acaa495 1090#endif