arno/trezor-firmware
1
0
Fork 0
mirror of https://github.com/trezor/trezor-firmware.git synced 2024-11-21 23:18:13 +00:00
Code Issues Releases Wiki Activity

crypto/ecdsa: add compress_coords (#42)

Browse Source
This commit is contained in:
Kurotych Anatolii 2019-04-17 06:19:01 -04:00 committed by Pavol Rusnak
parent be76dcc96a
commit 23bfb31ad2
3 changed files with 50 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
crypto/ecdsa.c
View File

@ -936,6 +936,11 @@ int ecdsa_address_decode(const char *addr, uint32_t version,
address_check_prefix(out, version);
}
void compress_coords(const curve_point *cp, uint8_t *compressed) {
compressed[0] = bn_is_odd(&cp->y) ? 0x03 : 0x02;
bn_write_be(&cp->x, compressed + 1);
}
void uncompress_coords(const ecdsa_curve *curve, uint8_t odd,
const bignum256 *x, bignum256 *y) {
// y^2 = x^3 + a*x + b

1
crypto/ecdsa.h
View File

@ -75,6 +75,7 @@ void scalar_multiply(const ecdsa_curve *curve, const bignum256 *k,
curve_point *res);
int ecdh_multiply(const ecdsa_curve *curve, const uint8_t *priv_key,
const uint8_t *pub_key, uint8_t *session_key);
void compress_coords(const curve_point *cp, uint8_t *compressed);
void uncompress_coords(const ecdsa_curve *curve, uint8_t odd,
const bignum256 *x, bignum256 *y);
int ecdsa_uncompress_pubkey(const ecdsa_curve *curve, const uint8_t *pub_key,

44
crypto/tests/test_check.c
View File

@ -8307,6 +8307,46 @@ START_TEST(test_rc4_rfc6229) {
}
END_TEST
static void test_compress_coord(const char *k_raw) {
const ecdsa_curve *curve = &secp256k1;
curve_point expected_coords;
bignum256 k = {0};
bn_read_be(fromhex(k_raw), &k);
point_multiply(curve, &k, &curve->G, &expected_coords);
uint8_t compress[33] = {0};
compress_coords(&expected_coords, compress);
bignum256 x = {0}, y = {0};
bn_read_be(compress + 1, &x);
uncompress_coords(curve, compress[0], &x, &y);
ck_assert(bn_is_equal(&expected_coords.x, &x));
ck_assert(bn_is_equal(&expected_coords.y, &y));
}
START_TEST(test_compress_coords) {
static const char *k_raw[] = {
"dc05960ac673fd59554c98655e26722d007bb7ada0c8ff00883fdee70783d0be",
"41e41e0a218c980411108a0a58cf88f528c828b4d6f0d2c86234bc2504bdc3cd",
"1d963ddcb79f6028a32cadd2421ff7fff969bff5774f73063dab41519b3da175",
"2414141f96da0874dbc374b58861589935b7f940806ddf8d2e6b911f62e240f3",
"01cc1fb182e29f60fe43e22d250de34f2d3f956bbef2aa9b182d09e5d9176873",
"89b3d621d813682692fd61b2baea6b2ea696a44abc76925d29c4887fc4db9367",
"20c80c633e05a3a7dfac05fa0e0a7c7a6b708b02323e687735cff81ea5944f59",
"5a803c263aa93a4f74648066c03e63fb00641193bae93dfa254dabd634e8b49c",
"05efbcc87007797dca68315b9271ac8fb75bddbece53f4dcbfb83fc21cb91fc0",
"0bed78ef43474630bd646eef2d7ec19a1acb8e9eecf6a0a3ac7241ac40a7706f",
};
for (int i = 0; i < (int)(sizeof(k_raw) / sizeof(*k_raw)); i++)
test_compress_coord(k_raw[i]);
}
END_TEST
static int my_strncasecmp(const char *s1, const char *s2, size_t n) {
size_t i = 0;
while (i < n) {
@ -8580,6 +8620,10 @@ Suite *test_suite(void) {
tcase_add_test(tc, test_cashaddr);
suite_add_tcase(s, tc);
tc = tcase_create("compress_coords");
tcase_add_test(tc, test_compress_coords);
suite_add_tcase(s, tc);
#if USE_CARDANO
tc = tcase_create("bip32-cardano");