tclTomMath.h 30 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122
  1. /* LibTomMath, multiple-precision integer library -- Tom St Denis */
  2. /* SPDX-License-Identifier: Unlicense */
  3. #ifndef BN_H_
  4. #define BN_H_
  5. #ifndef MODULE_SCOPE
  6. #define MODULE_SCOPE extern
  7. #endif
  8. #ifdef __cplusplus
  9. extern "C" {
  10. #endif
  11. /* MS Visual C++ doesn't have a 128bit type for words, so fall back to 32bit MPI's (where words are 64bit) */
  12. #if (defined(_WIN32) || defined(__LLP64__) || defined(__e2k__) || defined(__LCC__)) && !defined(MP_64BIT)
  13. # define MP_32BIT
  14. #endif
  15. /* detect 64-bit mode if possible */
  16. #if defined(NEVER)
  17. # if !(defined(MP_32BIT) || defined(MP_16BIT) || defined(MP_8BIT))
  18. # if defined(__GNUC__)
  19. /* we support 128bit integers only via: __attribute__((mode(TI))) */
  20. # define MP_64BIT
  21. # else
  22. /* otherwise we fall back to MP_32BIT even on 64bit platforms */
  23. # define MP_32BIT
  24. # endif
  25. # endif
  26. #endif
  27. #ifdef MP_DIGIT_BIT
  28. # error Defining MP_DIGIT_BIT is disallowed, use MP_8/16/31/32/64BIT
  29. #endif
  30. /* some default configurations.
  31. *
  32. * A "mp_digit" must be able to hold MP_DIGIT_BIT + 1 bits
  33. * A "mp_word" must be able to hold 2*MP_DIGIT_BIT + 1 bits
  34. *
  35. * At the very least a mp_digit must be able to hold 7 bits
  36. * [any size beyond that is ok provided it doesn't overflow the data type]
  37. */
  38. #ifdef MP_8BIT
  39. #ifndef MP_DIGIT_DECLARED
  40. typedef unsigned char mp_digit;
  41. #define MP_DIGIT_DECLARED
  42. #endif
  43. #ifndef MP_WORD_DECLARED
  44. typedef unsigned short private_mp_word;
  45. #define MP_WORD_DECLARED
  46. #endif
  47. # define MP_SIZEOF_MP_DIGIT 1
  48. # ifdef MP_DIGIT_BIT
  49. # error You must not define MP_DIGIT_BIT when using MP_8BIT
  50. # endif
  51. #elif defined(MP_16BIT)
  52. #ifndef MP_DIGIT_DECLARED
  53. typedef unsigned short mp_digit;
  54. #define MP_DIGIT_DECLARED
  55. #endif
  56. #ifndef MP_WORD_DECLARED
  57. typedef unsigned int private_mp_word;
  58. #define MP_WORD_DECLARED
  59. #endif
  60. # define MP_SIZEOF_MP_DIGIT 2
  61. # ifdef MP_DIGIT_BIT
  62. # error You must not define MP_DIGIT_BIT when using MP_16BIT
  63. # endif
  64. #elif defined(MP_64BIT)
  65. /* for GCC only on supported platforms */
  66. #ifndef MP_DIGIT_DECLARED
  67. typedef unsigned long long mp_digit;
  68. #define MP_DIGIT_DECLARED
  69. #endif
  70. typedef unsigned long private_mp_word __attribute__((mode(TI)));
  71. # define MP_DIGIT_BIT 60
  72. #else
  73. /* this is the default case, 28-bit digits */
  74. /* this is to make porting into LibTomCrypt easier :-) */
  75. #ifndef MP_DIGIT_DECLARED
  76. typedef unsigned int mp_digit;
  77. #define MP_DIGIT_DECLARED
  78. #endif
  79. #ifndef MP_WORD_DECLARED
  80. #ifdef _WIN32
  81. typedef unsigned __int64 private_mp_word;
  82. #else
  83. typedef unsigned long long private_mp_word;
  84. #endif
  85. #define MP_WORD_DECLARED
  86. #endif
  87. # ifdef MP_31BIT
  88. /*
  89. * This is an extension that uses 31-bit digits.
  90. * Please be aware that not all functions support this size, especially s_mp_mul_digs_fast
  91. * will be reduced to work on small numbers only:
  92. * Up to 8 limbs, 248 bits instead of up to 512 limbs, 15872 bits with MP_28BIT.
  93. */
  94. # define MP_DIGIT_BIT 31
  95. # else
  96. /* default case is 28-bit digits, defines MP_28BIT as a handy macro to test */
  97. # define MP_DIGIT_BIT 28
  98. # define MP_28BIT
  99. # endif
  100. #endif
  101. /* otherwise the bits per digit is calculated automatically from the size of a mp_digit */
  102. #ifndef MP_DIGIT_BIT
  103. # define MP_DIGIT_BIT (((CHAR_BIT * MP_SIZEOF_MP_DIGIT) - 1)) /* bits per digit */
  104. #endif
  105. #define MP_MASK ((((mp_digit)1)<<((mp_digit)MP_DIGIT_BIT))-((mp_digit)1))
  106. #define MP_DIGIT_MAX MP_MASK
  107. /* Primality generation flags */
  108. #define MP_PRIME_BBS 0x0001 /* BBS style prime */
  109. #define MP_PRIME_SAFE 0x0002 /* Safe prime (p-1)/2 == prime */
  110. #define MP_PRIME_2MSB_ON 0x0008 /* force 2nd MSB to 1 */
  111. #define LTM_PRIME_BBS (MP_DEPRECATED_PRAGMA("LTM_PRIME_BBS has been deprecated, use MP_PRIME_BBS") MP_PRIME_BBS)
  112. #define LTM_PRIME_SAFE (MP_DEPRECATED_PRAGMA("LTM_PRIME_SAFE has been deprecated, use MP_PRIME_SAFE") MP_PRIME_SAFE)
  113. #define LTM_PRIME_2MSB_ON (MP_DEPRECATED_PRAGMA("LTM_PRIME_2MSB_ON has been deprecated, use MP_PRIME_2MSB_ON") MP_PRIME_2MSB_ON)
  114. #ifdef MP_USE_ENUMS
  115. typedef enum {
  116. MP_ZPOS = 0, /* positive */
  117. MP_NEG = 1 /* negative */
  118. } mp_sign;
  119. typedef enum {
  120. MP_LT = -1, /* less than */
  121. MP_EQ = 0, /* equal */
  122. MP_GT = 1 /* greater than */
  123. } mp_ord;
  124. typedef enum {
  125. MP_NO = 0,
  126. MP_YES = 1
  127. } mp_bool;
  128. typedef enum {
  129. MP_OKAY = 0, /* no error */
  130. MP_ERR = -1, /* unknown error */
  131. MP_MEM = -2, /* out of mem */
  132. MP_VAL = -3, /* invalid input */
  133. MP_ITER = -4, /* maximum iterations reached */
  134. MP_BUF = -5 /* buffer overflow, supplied buffer too small */
  135. } mp_err;
  136. typedef enum {
  137. MP_LSB_FIRST = -1,
  138. MP_MSB_FIRST = 1
  139. } mp_order;
  140. typedef enum {
  141. MP_LITTLE_ENDIAN = -1,
  142. MP_NATIVE_ENDIAN = 0,
  143. MP_BIG_ENDIAN = 1
  144. } mp_endian;
  145. #else
  146. typedef int mp_sign;
  147. #define MP_ZPOS 0 /* positive integer */
  148. #define MP_NEG 1 /* negative */
  149. typedef int mp_ord;
  150. #define MP_LT -1 /* less than */
  151. #define MP_EQ 0 /* equal to */
  152. #define MP_GT 1 /* greater than */
  153. typedef int mp_bool;
  154. #define MP_YES 1
  155. #define MP_NO 0
  156. typedef int mp_err;
  157. #define MP_OKAY 0 /* no error */
  158. #define MP_ERR -1 /* unknown error */
  159. #define MP_MEM -2 /* out of mem */
  160. #define MP_VAL -3 /* invalid input */
  161. #define MP_RANGE (MP_DEPRECATED_PRAGMA("MP_RANGE has been deprecated in favor of MP_VAL") MP_VAL)
  162. #define MP_ITER -4 /* maximum iterations reached */
  163. #define MP_BUF -5 /* buffer overflow, supplied buffer too small */
  164. typedef int mp_order;
  165. #define MP_LSB_FIRST -1
  166. #define MP_MSB_FIRST 1
  167. typedef int mp_endian;
  168. #define MP_LITTLE_ENDIAN -1
  169. #define MP_NATIVE_ENDIAN 0
  170. #define MP_BIG_ENDIAN 1
  171. #endif
  172. /* tunable cutoffs */
  173. #ifndef MP_FIXED_CUTOFFS
  174. extern int
  175. KARATSUBA_MUL_CUTOFF,
  176. KARATSUBA_SQR_CUTOFF,
  177. TOOM_MUL_CUTOFF,
  178. TOOM_SQR_CUTOFF;
  179. #endif
  180. /* define this to use lower memory usage routines (exptmods mostly) */
  181. /* #define MP_LOW_MEM */
  182. /* default precision */
  183. #ifndef MP_PREC
  184. # ifndef MP_LOW_MEM
  185. # define MP_PREC 32 /* default digits of precision */
  186. # elif defined(MP_8BIT)
  187. # define MP_PREC 16 /* default digits of precision */
  188. # else
  189. # define MP_PREC 8 /* default digits of precision */
  190. # endif
  191. #endif
  192. /* size of comba arrays, should be at least 2 * 2**(BITS_PER_WORD - BITS_PER_DIGIT*2) */
  193. #define PRIVATE_MP_WARRAY (int)(1 << (((CHAR_BIT * sizeof(private_mp_word)) - (2 * MP_DIGIT_BIT)) + 1))
  194. #if defined(__GNUC__) && __GNUC__ >= 4
  195. # define MP_NULL_TERMINATED __attribute__((sentinel))
  196. #else
  197. # define MP_NULL_TERMINATED
  198. #endif
  199. /*
  200. * MP_WUR - warn unused result
  201. * ---------------------------
  202. *
  203. * The result of functions annotated with MP_WUR must be
  204. * checked and cannot be ignored.
  205. *
  206. * Most functions in libtommath return an error code.
  207. * This error code must be checked in order to prevent crashes or invalid
  208. * results.
  209. *
  210. * If you still want to avoid the error checks for quick and dirty programs
  211. * without robustness guarantees, you can `#define MP_WUR` before including
  212. * tommath.h, disabling the warnings.
  213. */
  214. #ifndef MP_WUR
  215. # if defined(__GNUC__) && __GNUC__ >= 4
  216. # define MP_WUR __attribute__((warn_unused_result))
  217. # else
  218. # define MP_WUR
  219. # endif
  220. #endif
  221. #if defined(__GNUC__) && (__GNUC__ * 100 + __GNUC_MINOR__ >= 405)
  222. # define MP_DEPRECATED(x) __attribute__((deprecated("replaced by " #x)))
  223. # define PRIVATE_MP_DEPRECATED_PRAGMA(s) _Pragma(#s)
  224. # define MP_DEPRECATED_PRAGMA(s) PRIVATE_MP_DEPRECATED_PRAGMA(GCC warning s)
  225. #elif defined(_MSC_VER) && _MSC_VER >= 1500
  226. # define MP_DEPRECATED(x) __declspec(deprecated("replaced by " #x))
  227. # define MP_DEPRECATED_PRAGMA(s) __pragma(message(s))
  228. #else
  229. # define MP_DEPRECATED(s)
  230. # define MP_DEPRECATED_PRAGMA(s)
  231. #endif
  232. #define DIGIT_BIT MP_DIGIT_BIT
  233. #define USED(m) ((m)->used)
  234. #define DIGIT(m,k) ((m)->dp[(k)])
  235. #define SIGN(m) ((m)->sign)
  236. /* the infamous mp_int structure */
  237. #ifndef MP_INT_DECLARED
  238. #define MP_INT_DECLARED
  239. typedef struct mp_int mp_int;
  240. #endif
  241. struct mp_int {
  242. int used, alloc;
  243. mp_sign sign;
  244. mp_digit *dp;
  245. };
  246. /* callback for mp_prime_random, should fill dst with random bytes and return how many read [upto len] */
  247. typedef int private_mp_prime_callback(unsigned char *dst, int len, void *dat);
  248. typedef private_mp_prime_callback MP_DEPRECATED(mp_rand_source) ltm_prime_callback;
  249. /* error code to char* string */
  250. /*
  251. const char *mp_error_to_string(mp_err code) MP_WUR;
  252. */
  253. /* ---> init and deinit bignum functions <--- */
  254. /* init a bignum */
  255. /*
  256. mp_err mp_init(mp_int *a) MP_WUR;
  257. */
  258. /* free a bignum */
  259. /*
  260. void mp_clear(mp_int *a);
  261. */
  262. /* init a null terminated series of arguments */
  263. /*
  264. mp_err mp_init_multi(mp_int *mp, ...) MP_NULL_TERMINATED MP_WUR;
  265. */
  266. /* clear a null terminated series of arguments */
  267. /*
  268. void mp_clear_multi(mp_int *mp, ...) MP_NULL_TERMINATED;
  269. */
  270. /* exchange two ints */
  271. /*
  272. void mp_exch(mp_int *a, mp_int *b);
  273. */
  274. /* shrink ram required for a bignum */
  275. /*
  276. mp_err mp_shrink(mp_int *a) MP_WUR;
  277. */
  278. /* grow an int to a given size */
  279. /*
  280. mp_err mp_grow(mp_int *a, int size) MP_WUR;
  281. */
  282. /* init to a given number of digits */
  283. /*
  284. mp_err mp_init_size(mp_int *a, int size) MP_WUR;
  285. */
  286. /* ---> Basic Manipulations <--- */
  287. #define mp_iszero(a) (((a)->used == 0) ? MP_YES : MP_NO)
  288. #define mp_isodd(a) (((a)->used != 0 && (((a)->dp[0] & 1) == 1)) ? MP_YES : MP_NO)
  289. #define mp_iseven(a) (((a)->used == 0 || (((a)->dp[0] & 1) == 0)) ? MP_YES : MP_NO)
  290. #define mp_isneg(a) (((a)->sign != MP_ZPOS) ? MP_YES : MP_NO)
  291. /* set to zero */
  292. /*
  293. void mp_zero(mp_int *a);
  294. */
  295. /* get and set doubles */
  296. /*
  297. double mp_get_double(const mp_int *a) MP_WUR;
  298. */
  299. /*
  300. mp_err mp_set_double(mp_int *a, double b) MP_WUR;
  301. */
  302. /* get integer, set integer and init with integer (int32_t) */
  303. #ifndef MP_NO_STDINT
  304. /*
  305. int32_t mp_get_i32(const mp_int *a) MP_WUR;
  306. */
  307. /*
  308. void mp_set_i32(mp_int *a, int32_t b);
  309. */
  310. /*
  311. mp_err mp_init_i32(mp_int *a, int32_t b) MP_WUR;
  312. */
  313. /* get integer, set integer and init with integer, behaves like two complement for negative numbers (uint32_t) */
  314. #define mp_get_u32(a) ((uint32_t)mp_get_i32(a))
  315. /*
  316. void mp_set_u32(mp_int *a, uint32_t b);
  317. */
  318. /*
  319. mp_err mp_init_u32(mp_int *a, uint32_t b) MP_WUR;
  320. */
  321. /* get integer, set integer and init with integer (int64_t) */
  322. /*
  323. int64_t mp_get_i64(const mp_int *a) MP_WUR;
  324. */
  325. /*
  326. void mp_set_i64(mp_int *a, int64_t b);
  327. */
  328. /*
  329. mp_err mp_init_i64(mp_int *a, int64_t b) MP_WUR;
  330. */
  331. /* get integer, set integer and init with integer, behaves like two complement for negative numbers (uint64_t) */
  332. #define mp_get_u64(a) ((uint64_t)mp_get_i64(a))
  333. /*
  334. void mp_set_u64(mp_int *a, uint64_t b);
  335. */
  336. /*
  337. mp_err mp_init_u64(mp_int *a, uint64_t b) MP_WUR;
  338. */
  339. /* get magnitude */
  340. /*
  341. uint32_t mp_get_mag_u32(const mp_int *a) MP_WUR;
  342. */
  343. /*
  344. uint64_t mp_get_mag_u64(const mp_int *a) MP_WUR;
  345. */
  346. #endif
  347. /*
  348. unsigned long mp_get_mag_ul(const mp_int *a) MP_WUR;
  349. */
  350. /*
  351. Tcl_WideUInt mp_get_mag_ull(const mp_int *a) MP_WUR;
  352. */
  353. /* get integer, set integer (long) */
  354. /*
  355. long mp_get_l(const mp_int *a) MP_WUR;
  356. */
  357. /*
  358. void mp_set_l(mp_int *a, long b);
  359. */
  360. /*
  361. mp_err mp_init_l(mp_int *a, long b) MP_WUR;
  362. */
  363. /* get integer, set integer (unsigned long) */
  364. #define mp_get_ul(a) ((unsigned long)mp_get_l(a))
  365. /*
  366. void mp_set_ul(mp_int *a, unsigned long b);
  367. */
  368. /*
  369. mp_err mp_init_ul(mp_int *a, unsigned long b) MP_WUR;
  370. */
  371. /* get integer, set integer (Tcl_WideInt) */
  372. /*
  373. Tcl_WideInt mp_get_ll(const mp_int *a) MP_WUR;
  374. */
  375. /*
  376. void mp_set_ll(mp_int *a, Tcl_WideInt b);
  377. */
  378. /*
  379. mp_err mp_init_ll(mp_int *a, Tcl_WideInt b) MP_WUR;
  380. */
  381. /* get integer, set integer (Tcl_WideUInt) */
  382. #define mp_get_ull(a) ((Tcl_WideUInt)mp_get_ll(a))
  383. /*
  384. void mp_set_ull(mp_int *a, Tcl_WideUInt b);
  385. */
  386. /*
  387. mp_err mp_init_ull(mp_int *a, Tcl_WideUInt b) MP_WUR;
  388. */
  389. /* set to single unsigned digit, up to MP_DIGIT_MAX */
  390. /*
  391. void mp_set(mp_int *a, mp_digit b);
  392. */
  393. /*
  394. mp_err mp_init_set(mp_int *a, mp_digit b) MP_WUR;
  395. */
  396. /* get integer, set integer and init with integer (deprecated) */
  397. /*
  398. MP_DEPRECATED(mp_get_mag_u32/mp_get_u32) unsigned long mp_get_int(const mp_int *a) MP_WUR;
  399. */
  400. /*
  401. MP_DEPRECATED(mp_get_mag_ul/mp_get_ul) unsigned long mp_get_long(const mp_int *a) MP_WUR;
  402. */
  403. /*
  404. MP_DEPRECATED(mp_get_mag_ull/mp_get_ull) Tcl_WideUInt mp_get_long_long(const mp_int *a) MP_WUR;
  405. */
  406. /*
  407. MP_DEPRECATED(mp_set_ul) mp_err mp_set_int(mp_int *a, unsigned long b);
  408. */
  409. /*
  410. MP_DEPRECATED(mp_set_ul) mp_err mp_set_long(mp_int *a, unsigned long b);
  411. */
  412. /*
  413. MP_DEPRECATED(mp_set_ull) mp_err mp_set_long_long(mp_int *a, Tcl_WideUInt b);
  414. */
  415. /*
  416. MP_DEPRECATED(mp_init_ul) mp_err mp_init_set_int(mp_int *a, unsigned long b) MP_WUR;
  417. */
  418. /* copy, b = a */
  419. /*
  420. mp_err mp_copy(const mp_int *a, mp_int *b) MP_WUR;
  421. */
  422. /* inits and copies, a = b */
  423. /*
  424. mp_err mp_init_copy(mp_int *a, const mp_int *b) MP_WUR;
  425. */
  426. /* trim unused digits */
  427. /*
  428. void mp_clamp(mp_int *a);
  429. */
  430. /* export binary data */
  431. /*
  432. MP_DEPRECATED(mp_pack) mp_err mp_export(void *rop, size_t *countp, int order, size_t size,
  433. int endian, size_t nails, const mp_int *op) MP_WUR;
  434. */
  435. /* import binary data */
  436. /*
  437. MP_DEPRECATED(mp_unpack) mp_err mp_import(mp_int *rop, size_t count, int order,
  438. size_t size, int endian, size_t nails,
  439. const void *op) MP_WUR;
  440. */
  441. /* unpack binary data */
  442. /*
  443. mp_err mp_unpack(mp_int *rop, size_t count, mp_order order, size_t size, mp_endian endian,
  444. size_t nails, const void *op) MP_WUR;
  445. */
  446. /* pack binary data */
  447. /*
  448. size_t mp_pack_count(const mp_int *a, size_t nails, size_t size) MP_WUR;
  449. */
  450. /*
  451. mp_err mp_pack(void *rop, size_t maxcount, size_t *written, mp_order order, size_t size,
  452. mp_endian endian, size_t nails, const mp_int *op) MP_WUR;
  453. */
  454. /* ---> digit manipulation <--- */
  455. /* right shift by "b" digits */
  456. /*
  457. void mp_rshd(mp_int *a, int b);
  458. */
  459. /* left shift by "b" digits */
  460. /*
  461. mp_err mp_lshd(mp_int *a, int b) MP_WUR;
  462. */
  463. /* c = a / 2**b, implemented as c = a >> b */
  464. /*
  465. mp_err mp_div_2d(const mp_int *a, int b, mp_int *c, mp_int *d) MP_WUR;
  466. */
  467. /* b = a/2 */
  468. /*
  469. mp_err mp_div_2(const mp_int *a, mp_int *b) MP_WUR;
  470. */
  471. /* a/3 => 3c + d == a */
  472. /*
  473. mp_err mp_div_3(const mp_int *a, mp_int *c, mp_digit *d) MP_WUR;
  474. */
  475. /* c = a * 2**b, implemented as c = a << b */
  476. /*
  477. mp_err mp_mul_2d(const mp_int *a, int b, mp_int *c) MP_WUR;
  478. */
  479. /* b = a*2 */
  480. /*
  481. mp_err mp_mul_2(const mp_int *a, mp_int *b) MP_WUR;
  482. */
  483. /* c = a mod 2**b */
  484. /*
  485. mp_err mp_mod_2d(const mp_int *a, int b, mp_int *c) MP_WUR;
  486. */
  487. /* computes a = 2**b */
  488. /*
  489. mp_err mp_2expt(mp_int *a, int b) MP_WUR;
  490. */
  491. /* Counts the number of lsbs which are zero before the first zero bit */
  492. /*
  493. int mp_cnt_lsb(const mp_int *a) MP_WUR;
  494. */
  495. /* I Love Earth! */
  496. /* makes a pseudo-random mp_int of a given size */
  497. /*
  498. mp_err mp_rand(mp_int *a, int digits) MP_WUR;
  499. */
  500. /* makes a pseudo-random small int of a given size */
  501. /*
  502. MP_DEPRECATED(mp_rand) mp_err mp_rand_digit(mp_digit *r) MP_WUR;
  503. */
  504. /* use custom random data source instead of source provided the platform */
  505. /*
  506. void mp_rand_source(mp_err(*source)(void *out, size_t size));
  507. */
  508. #ifdef MP_PRNG_ENABLE_LTM_RNG
  509. /* A last resort to provide random data on systems without any of the other
  510. * implemented ways to gather entropy.
  511. * It is compatible with `rng_get_bytes()` from libtomcrypt so you could
  512. * provide that one and then set `ltm_rng = rng_get_bytes;` */
  513. extern unsigned long (*ltm_rng)(unsigned char *out, unsigned long outlen, void (*callback)(void));
  514. extern void (*ltm_rng_callback)(void);
  515. #endif
  516. /* ---> binary operations <--- */
  517. /* Checks the bit at position b and returns MP_YES
  518. * if the bit is 1, MP_NO if it is 0 and MP_VAL
  519. * in case of error
  520. */
  521. /*
  522. MP_DEPRECATED(s_mp_get_bit) int mp_get_bit(const mp_int *a, int b) MP_WUR;
  523. */
  524. /* c = a XOR b (two complement) */
  525. /*
  526. MP_DEPRECATED(mp_xor) mp_err mp_tc_xor(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  527. */
  528. /*
  529. mp_err mp_xor(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  530. */
  531. /* c = a OR b (two complement) */
  532. /*
  533. MP_DEPRECATED(mp_or) mp_err mp_tc_or(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  534. */
  535. /*
  536. mp_err mp_or(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  537. */
  538. /* c = a AND b (two complement) */
  539. /*
  540. MP_DEPRECATED(mp_and) mp_err mp_tc_and(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  541. */
  542. /*
  543. mp_err mp_and(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  544. */
  545. /* b = ~a (bitwise not, two complement) */
  546. /*
  547. mp_err mp_complement(const mp_int *a, mp_int *b) MP_WUR;
  548. */
  549. /* right shift with sign extension */
  550. /*
  551. MP_DEPRECATED(mp_signed_rsh) mp_err mp_tc_div_2d(const mp_int *a, int b, mp_int *c) MP_WUR;
  552. */
  553. /*
  554. mp_err mp_signed_rsh(const mp_int *a, int b, mp_int *c) MP_WUR;
  555. */
  556. /* ---> Basic arithmetic <--- */
  557. /* b = -a */
  558. /*
  559. mp_err mp_neg(const mp_int *a, mp_int *b) MP_WUR;
  560. */
  561. /* b = |a| */
  562. /*
  563. mp_err mp_abs(const mp_int *a, mp_int *b) MP_WUR;
  564. */
  565. /* compare a to b */
  566. /*
  567. mp_ord mp_cmp(const mp_int *a, const mp_int *b) MP_WUR;
  568. */
  569. /* compare |a| to |b| */
  570. /*
  571. mp_ord mp_cmp_mag(const mp_int *a, const mp_int *b) MP_WUR;
  572. */
  573. /* c = a + b */
  574. /*
  575. mp_err mp_add(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  576. */
  577. /* c = a - b */
  578. /*
  579. mp_err mp_sub(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  580. */
  581. /* c = a * b */
  582. /*
  583. mp_err mp_mul(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  584. */
  585. /* b = a*a */
  586. /*
  587. mp_err mp_sqr(const mp_int *a, mp_int *b) MP_WUR;
  588. */
  589. /* a/b => cb + d == a */
  590. /*
  591. mp_err mp_div(const mp_int *a, const mp_int *b, mp_int *c, mp_int *d) MP_WUR;
  592. */
  593. /* c = a mod b, 0 <= c < b */
  594. /*
  595. mp_err mp_mod(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  596. */
  597. /* Increment "a" by one like "a++". Changes input! */
  598. /*
  599. mp_err mp_incr(mp_int *a) MP_WUR;
  600. */
  601. /* Decrement "a" by one like "a--". Changes input! */
  602. /*
  603. mp_err mp_decr(mp_int *a) MP_WUR;
  604. */
  605. /* ---> single digit functions <--- */
  606. /* compare against a single digit */
  607. /*
  608. mp_ord mp_cmp_d(const mp_int *a, mp_digit b) MP_WUR;
  609. */
  610. /* c = a + b */
  611. /*
  612. mp_err mp_add_d(const mp_int *a, mp_digit b, mp_int *c) MP_WUR;
  613. */
  614. /* c = a - b */
  615. /*
  616. mp_err mp_sub_d(const mp_int *a, mp_digit b, mp_int *c) MP_WUR;
  617. */
  618. /* c = a * b */
  619. /*
  620. mp_err mp_mul_d(const mp_int *a, mp_digit b, mp_int *c) MP_WUR;
  621. */
  622. /* a/b => cb + d == a */
  623. /*
  624. mp_err mp_div_d(const mp_int *a, mp_digit b, mp_int *c, mp_digit *d) MP_WUR;
  625. */
  626. /* c = a mod b, 0 <= c < b */
  627. /*
  628. mp_err mp_mod_d(const mp_int *a, mp_digit b, mp_digit *c) MP_WUR;
  629. */
  630. /* ---> number theory <--- */
  631. /* d = a + b (mod c) */
  632. /*
  633. mp_err mp_addmod(const mp_int *a, const mp_int *b, const mp_int *c, mp_int *d) MP_WUR;
  634. */
  635. /* d = a - b (mod c) */
  636. /*
  637. mp_err mp_submod(const mp_int *a, const mp_int *b, const mp_int *c, mp_int *d) MP_WUR;
  638. */
  639. /* d = a * b (mod c) */
  640. /*
  641. mp_err mp_mulmod(const mp_int *a, const mp_int *b, const mp_int *c, mp_int *d) MP_WUR;
  642. */
  643. /* c = a * a (mod b) */
  644. /*
  645. mp_err mp_sqrmod(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  646. */
  647. /* c = 1/a (mod b) */
  648. /*
  649. mp_err mp_invmod(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  650. */
  651. /* c = (a, b) */
  652. /*
  653. mp_err mp_gcd(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  654. */
  655. /* produces value such that U1*a + U2*b = U3 */
  656. /*
  657. mp_err mp_exteuclid(const mp_int *a, const mp_int *b, mp_int *U1, mp_int *U2, mp_int *U3) MP_WUR;
  658. */
  659. /* c = [a, b] or (a*b)/(a, b) */
  660. /*
  661. mp_err mp_lcm(const mp_int *a, const mp_int *b, mp_int *c) MP_WUR;
  662. */
  663. /* finds one of the b'th root of a, such that |c|**b <= |a|
  664. *
  665. * returns error if a < 0 and b is even
  666. */
  667. /*
  668. mp_err mp_root_u32(const mp_int *a, unsigned int b, mp_int *c) MP_WUR;
  669. */
  670. /*
  671. MP_DEPRECATED(mp_root_u32) mp_err mp_n_root(const mp_int *a, mp_digit b, mp_int *c) MP_WUR;
  672. */
  673. /*
  674. MP_DEPRECATED(mp_root_u32) mp_err mp_n_root_ex(const mp_int *a, mp_digit b, mp_int *c, int fast) MP_WUR;
  675. */
  676. /* special sqrt algo */
  677. /*
  678. mp_err mp_sqrt(const mp_int *arg, mp_int *ret) MP_WUR;
  679. */
  680. /* special sqrt (mod prime) */
  681. /*
  682. mp_err mp_sqrtmod_prime(const mp_int *n, const mp_int *prime, mp_int *ret) MP_WUR;
  683. */
  684. /* is number a square? */
  685. /*
  686. mp_err mp_is_square(const mp_int *arg, mp_bool *ret) MP_WUR;
  687. */
  688. /* computes the jacobi c = (a | n) (or Legendre if b is prime) */
  689. /*
  690. MP_DEPRECATED(mp_kronecker) mp_err mp_jacobi(const mp_int *a, const mp_int *n, int *c) MP_WUR;
  691. */
  692. /* computes the Kronecker symbol c = (a | p) (like jacobi() but with {a,p} in Z */
  693. /*
  694. mp_err mp_kronecker(const mp_int *a, const mp_int *p, int *c) MP_WUR;
  695. */
  696. /* used to setup the Barrett reduction for a given modulus b */
  697. /*
  698. mp_err mp_reduce_setup(mp_int *a, const mp_int *b) MP_WUR;
  699. */
  700. /* Barrett Reduction, computes a (mod b) with a precomputed value c
  701. *
  702. * Assumes that 0 < x <= m*m, note if 0 > x > -(m*m) then you can merely
  703. * compute the reduction as -1 * mp_reduce(mp_abs(x)) [pseudo code].
  704. */
  705. /*
  706. mp_err mp_reduce(mp_int *x, const mp_int *m, const mp_int *mu) MP_WUR;
  707. */
  708. /* setups the montgomery reduction */
  709. /*
  710. mp_err mp_montgomery_setup(const mp_int *n, mp_digit *rho) MP_WUR;
  711. */
  712. /* computes a = B**n mod b without division or multiplication useful for
  713. * normalizing numbers in a Montgomery system.
  714. */
  715. /*
  716. mp_err mp_montgomery_calc_normalization(mp_int *a, const mp_int *b) MP_WUR;
  717. */
  718. /* computes x/R == x (mod N) via Montgomery Reduction */
  719. /*
  720. mp_err mp_montgomery_reduce(mp_int *x, const mp_int *n, mp_digit rho) MP_WUR;
  721. */
  722. /* returns 1 if a is a valid DR modulus */
  723. /*
  724. mp_bool mp_dr_is_modulus(const mp_int *a) MP_WUR;
  725. */
  726. /* sets the value of "d" required for mp_dr_reduce */
  727. /*
  728. void mp_dr_setup(const mp_int *a, mp_digit *d);
  729. */
  730. /* reduces a modulo n using the Diminished Radix method */
  731. /*
  732. mp_err mp_dr_reduce(mp_int *x, const mp_int *n, mp_digit k) MP_WUR;
  733. */
  734. /* returns true if a can be reduced with mp_reduce_2k */
  735. /*
  736. mp_bool mp_reduce_is_2k(const mp_int *a) MP_WUR;
  737. */
  738. /* determines k value for 2k reduction */
  739. /*
  740. mp_err mp_reduce_2k_setup(const mp_int *a, mp_digit *d) MP_WUR;
  741. */
  742. /* reduces a modulo b where b is of the form 2**p - k [0 <= a] */
  743. /*
  744. mp_err mp_reduce_2k(mp_int *a, const mp_int *n, mp_digit d) MP_WUR;
  745. */
  746. /* returns true if a can be reduced with mp_reduce_2k_l */
  747. /*
  748. mp_bool mp_reduce_is_2k_l(const mp_int *a) MP_WUR;
  749. */
  750. /* determines k value for 2k reduction */
  751. /*
  752. mp_err mp_reduce_2k_setup_l(const mp_int *a, mp_int *d) MP_WUR;
  753. */
  754. /* reduces a modulo b where b is of the form 2**p - k [0 <= a] */
  755. /*
  756. mp_err mp_reduce_2k_l(mp_int *a, const mp_int *n, const mp_int *d) MP_WUR;
  757. */
  758. /* Y = G**X (mod P) */
  759. /*
  760. mp_err mp_exptmod(const mp_int *G, const mp_int *X, const mp_int *P, mp_int *Y) MP_WUR;
  761. */
  762. /* ---> Primes <--- */
  763. /* number of primes */
  764. #ifdef MP_8BIT
  765. # define PRIVATE_MP_PRIME_TAB_SIZE 31
  766. #else
  767. # define PRIVATE_MP_PRIME_TAB_SIZE 256
  768. #endif
  769. #define PRIME_SIZE (MP_DEPRECATED_PRAGMA("PRIME_SIZE has been made internal") PRIVATE_MP_PRIME_TAB_SIZE)
  770. /* table of first PRIME_SIZE primes */
  771. #if defined(BUILD_tcl) || !defined(_WIN32)
  772. MODULE_SCOPE const mp_digit ltm_prime_tab[PRIVATE_MP_PRIME_TAB_SIZE];
  773. #endif
  774. /* result=1 if a is divisible by one of the first PRIME_SIZE primes */
  775. /*
  776. MP_DEPRECATED(mp_prime_is_prime) mp_err mp_prime_is_divisible(const mp_int *a, mp_bool *result) MP_WUR;
  777. */
  778. /* performs one Fermat test of "a" using base "b".
  779. * Sets result to 0 if composite or 1 if probable prime
  780. */
  781. /*
  782. mp_err mp_prime_fermat(const mp_int *a, const mp_int *b, mp_bool *result) MP_WUR;
  783. */
  784. /* performs one Miller-Rabin test of "a" using base "b".
  785. * Sets result to 0 if composite or 1 if probable prime
  786. */
  787. /*
  788. mp_err mp_prime_miller_rabin(const mp_int *a, const mp_int *b, mp_bool *result) MP_WUR;
  789. */
  790. /* This gives [for a given bit size] the number of trials required
  791. * such that Miller-Rabin gives a prob of failure lower than 2^-96
  792. */
  793. /*
  794. int mp_prime_rabin_miller_trials(int size) MP_WUR;
  795. */
  796. /* performs one strong Lucas-Selfridge test of "a".
  797. * Sets result to 0 if composite or 1 if probable prime
  798. */
  799. /*
  800. mp_err mp_prime_strong_lucas_selfridge(const mp_int *a, mp_bool *result) MP_WUR;
  801. */
  802. /* performs one Frobenius test of "a" as described by Paul Underwood.
  803. * Sets result to 0 if composite or 1 if probable prime
  804. */
  805. /*
  806. mp_err mp_prime_frobenius_underwood(const mp_int *N, mp_bool *result) MP_WUR;
  807. */
  808. /* performs t random rounds of Miller-Rabin on "a" additional to
  809. * bases 2 and 3. Also performs an initial sieve of trial
  810. * division. Determines if "a" is prime with probability
  811. * of error no more than (1/4)**t.
  812. * Both a strong Lucas-Selfridge to complete the BPSW test
  813. * and a separate Frobenius test are available at compile time.
  814. * With t<0 a deterministic test is run for primes up to
  815. * 318665857834031151167461. With t<13 (abs(t)-13) additional
  816. * tests with sequential small primes are run starting at 43.
  817. * Is Fips 186.4 compliant if called with t as computed by
  818. * mp_prime_rabin_miller_trials();
  819. *
  820. * Sets result to 1 if probably prime, 0 otherwise
  821. */
  822. /*
  823. mp_err mp_prime_is_prime(const mp_int *a, int t, mp_bool *result) MP_WUR;
  824. */
  825. /* finds the next prime after the number "a" using "t" trials
  826. * of Miller-Rabin.
  827. *
  828. * bbs_style = 1 means the prime must be congruent to 3 mod 4
  829. */
  830. /*
  831. mp_err mp_prime_next_prime(mp_int *a, int t, int bbs_style) MP_WUR;
  832. */
  833. /* makes a truly random prime of a given size (bytes),
  834. * call with bbs = 1 if you want it to be congruent to 3 mod 4
  835. *
  836. * You have to supply a callback which fills in a buffer with random bytes. "dat" is a parameter you can
  837. * have passed to the callback (e.g. a state or something). This function doesn't use "dat" itself
  838. * so it can be NULL
  839. *
  840. * The prime generated will be larger than 2^(8*size).
  841. */
  842. #define mp_prime_random(a, t, size, bbs, cb, dat) (MP_DEPRECATED_PRAGMA("mp_prime_random has been deprecated, use mp_prime_rand instead") mp_prime_random_ex(a, t, ((size) * 8) + 1, (bbs==1)?MP_PRIME_BBS:0, cb, dat))
  843. /* makes a truly random prime of a given size (bits),
  844. *
  845. * Flags are as follows:
  846. *
  847. * MP_PRIME_BBS - make prime congruent to 3 mod 4
  848. * MP_PRIME_SAFE - make sure (p-1)/2 is prime as well (implies MP_PRIME_BBS)
  849. * MP_PRIME_2MSB_ON - make the 2nd highest bit one
  850. *
  851. * You have to supply a callback which fills in a buffer with random bytes. "dat" is a parameter you can
  852. * have passed to the callback (e.g. a state or something). This function doesn't use "dat" itself
  853. * so it can be NULL
  854. *
  855. */
  856. /*
  857. MP_DEPRECATED(mp_prime_rand) mp_err mp_prime_random_ex(mp_int *a, int t, int size, int flags,
  858. private_mp_prime_callback cb, void *dat) MP_WUR;
  859. */
  860. /*
  861. mp_err mp_prime_rand(mp_int *a, int t, int size, int flags) MP_WUR;
  862. */
  863. /* Integer logarithm to integer base */
  864. /*
  865. mp_err mp_log_u32(const mp_int *a, unsigned int base, unsigned int *c) MP_WUR;
  866. */
  867. /* c = a**b */
  868. /*
  869. mp_err mp_expt_u32(const mp_int *a, unsigned int b, mp_int *c) MP_WUR;
  870. */
  871. /*
  872. MP_DEPRECATED(mp_expt_u32) mp_err mp_expt_d(const mp_int *a, mp_digit b, mp_int *c) MP_WUR;
  873. */
  874. /*
  875. MP_DEPRECATED(mp_expt_u32) mp_err mp_expt_d_ex(const mp_int *a, mp_digit b, mp_int *c, int fast) MP_WUR;
  876. */
  877. /* ---> radix conversion <--- */
  878. /*
  879. int mp_count_bits(const mp_int *a) MP_WUR;
  880. */
  881. /*
  882. MP_DEPRECATED(mp_ubin_size) int mp_unsigned_bin_size(const mp_int *a) MP_WUR;
  883. */
  884. /*
  885. MP_DEPRECATED(mp_from_ubin) mp_err mp_read_unsigned_bin(mp_int *a, const unsigned char *b, int c) MP_WUR;
  886. */
  887. /*
  888. MP_DEPRECATED(mp_to_ubin) mp_err mp_to_unsigned_bin(const mp_int *a, unsigned char *b) MP_WUR;
  889. */
  890. /*
  891. MP_DEPRECATED(mp_to_ubin) mp_err mp_to_unsigned_bin_n(const mp_int *a, unsigned char *b, unsigned long *outlen) MP_WUR;
  892. */
  893. /*
  894. MP_DEPRECATED(mp_sbin_size) int mp_signed_bin_size(const mp_int *a) MP_WUR;
  895. */
  896. /*
  897. MP_DEPRECATED(mp_from_sbin) mp_err mp_read_signed_bin(mp_int *a, const unsigned char *b, int c) MP_WUR;
  898. */
  899. /*
  900. MP_DEPRECATED(mp_to_sbin) mp_err mp_to_signed_bin(const mp_int *a, unsigned char *b) MP_WUR;
  901. */
  902. /*
  903. MP_DEPRECATED(mp_to_sbin) mp_err mp_to_signed_bin_n(const mp_int *a, unsigned char *b, unsigned long *outlen) MP_WUR;
  904. */
  905. /*
  906. size_t mp_ubin_size(const mp_int *a) MP_WUR;
  907. */
  908. /*
  909. mp_err mp_from_ubin(mp_int *a, const unsigned char *buf, size_t size) MP_WUR;
  910. */
  911. /*
  912. mp_err mp_to_ubin(const mp_int *a, unsigned char *buf, size_t maxlen, size_t *written) MP_WUR;
  913. */
  914. /*
  915. size_t mp_sbin_size(const mp_int *a) MP_WUR;
  916. */
  917. /*
  918. mp_err mp_from_sbin(mp_int *a, const unsigned char *buf, size_t size) MP_WUR;
  919. */
  920. /*
  921. mp_err mp_to_sbin(const mp_int *a, unsigned char *buf, size_t maxlen, size_t *written) MP_WUR;
  922. */
  923. /*
  924. mp_err mp_read_radix(mp_int *a, const char *str, int radix) MP_WUR;
  925. */
  926. /*
  927. MP_DEPRECATED(mp_to_radix) mp_err mp_toradix(const mp_int *a, char *str, int radix) MP_WUR;
  928. */
  929. /*
  930. MP_DEPRECATED(mp_to_radix) mp_err mp_toradix_n(const mp_int *a, char *str, int radix, int maxlen) MP_WUR;
  931. */
  932. /*
  933. mp_err mp_to_radix(const mp_int *a, char *str, size_t maxlen, size_t *written, int radix) MP_WUR;
  934. */
  935. /*
  936. mp_err mp_radix_size(const mp_int *a, int radix, int *size) MP_WUR;
  937. */
  938. #ifndef MP_NO_FILE
  939. /*
  940. mp_err mp_fread(mp_int *a, int radix, FILE *stream) MP_WUR;
  941. */
  942. /*
  943. mp_err mp_fwrite(const mp_int *a, int radix, FILE *stream) MP_WUR;
  944. */
  945. #endif
  946. #define mp_read_raw(mp, str, len) (MP_DEPRECATED_PRAGMA("replaced by mp_read_signed_bin") mp_read_signed_bin((mp), (str), (len)))
  947. #define mp_raw_size(mp) (MP_DEPRECATED_PRAGMA("replaced by mp_signed_bin_size") mp_signed_bin_size(mp))
  948. #define mp_toraw(mp, str) (MP_DEPRECATED_PRAGMA("replaced by mp_to_signed_bin") mp_to_signed_bin((mp), (str)))
  949. #define mp_read_mag(mp, str, len) (MP_DEPRECATED_PRAGMA("replaced by mp_read_unsigned_bin") mp_read_unsigned_bin((mp), (str), (len))
  950. #define mp_mag_size(mp) (MP_DEPRECATED_PRAGMA("replaced by mp_unsigned_bin_size") mp_unsigned_bin_size(mp))
  951. #define mp_tomag(mp, str) (MP_DEPRECATED_PRAGMA("replaced by mp_to_unsigned_bin") mp_to_unsigned_bin((mp), (str)))
  952. #define mp_tobinary(M, S) (MP_DEPRECATED_PRAGMA("replaced by mp_to_binary") mp_toradix((M), (S), 2))
  953. #define mp_tooctal(M, S) (MP_DEPRECATED_PRAGMA("replaced by mp_to_octal") mp_toradix((M), (S), 8))
  954. #define mp_todecimal(M, S) (MP_DEPRECATED_PRAGMA("replaced by mp_to_decimal") mp_toradix((M), (S), 10))
  955. #define mp_tohex(M, S) (MP_DEPRECATED_PRAGMA("replaced by mp_to_hex") mp_toradix((M), (S), 16))
  956. #define mp_to_binary(M, S, N) mp_to_radix((M), (S), (N), NULL, 2)
  957. #define mp_to_octal(M, S, N) mp_to_radix((M), (S), (N), NULL, 8)
  958. #define mp_to_decimal(M, S, N) mp_to_radix((M), (S), (N), NULL, 10)
  959. #define mp_to_hex(M, S, N) mp_to_radix((M), (S), (N), NULL, 16)
  960. #ifdef __cplusplus
  961. }
  962. #endif
  963. #include "tclTomMathDecls.h"
  964. #endif