|
| 1 | +diff --git a/crypto/ec/ecp_sm2p256.c b/crypto/ec/ecp_sm2p256.c |
| 2 | +index 6ec4245..d47689a 100644 |
| 3 | +--- a/crypto/ec/ecp_sm2p256.c |
| 4 | ++++ b/crypto/ec/ecp_sm2p256.c |
| 5 | +@@ -40,28 +40,28 @@ typedef struct { |
| 6 | + |
| 7 | + #if !defined(OPENSSL_NO_SM2_PRECOMP) |
| 8 | + /* Coordinates of G, for which we have precomputed tables */ |
| 9 | +-static const BN_ULONG def_xG[P256_LIMBS] ALIGN32 = { |
| 10 | ++ALIGN32 static const BN_ULONG def_xG[P256_LIMBS] = { |
| 11 | + 0x715a4589334c74c7, 0x8fe30bbff2660be1, |
| 12 | + 0x5f9904466a39c994, 0x32c4ae2c1f198119 |
| 13 | + }; |
| 14 | + |
| 15 | +-static const BN_ULONG def_yG[P256_LIMBS] ALIGN32 = { |
| 16 | ++ALIGN32 static const BN_ULONG def_yG[P256_LIMBS] = { |
| 17 | + 0x02df32e52139f0a0, 0xd0a9877cc62a4740, |
| 18 | + 0x59bdcee36b692153, 0xbc3736a2f4f6779c, |
| 19 | + }; |
| 20 | + #endif |
| 21 | + |
| 22 | + /* p and order for SM2 according to GB/T 32918.5-2017 */ |
| 23 | +-static const BN_ULONG def_p[P256_LIMBS] ALIGN32 = { |
| 24 | ++ALIGN32 static const BN_ULONG def_p[P256_LIMBS] = { |
| 25 | + 0xffffffffffffffff, 0xffffffff00000000, |
| 26 | + 0xffffffffffffffff, 0xfffffffeffffffff |
| 27 | + }; |
| 28 | +-static const BN_ULONG def_ord[P256_LIMBS] ALIGN32 = { |
| 29 | ++ALIGN32 static const BN_ULONG def_ord[P256_LIMBS] = { |
| 30 | + 0x53bbf40939d54123, 0x7203df6b21c6052b, |
| 31 | + 0xffffffffffffffff, 0xfffffffeffffffff |
| 32 | + }; |
| 33 | + |
| 34 | +-static const BN_ULONG ONE[P256_LIMBS] ALIGN32 = {1, 0, 0, 0}; |
| 35 | ++ALIGN32 static const BN_ULONG ONE[P256_LIMBS] = {1, 0, 0, 0}; |
| 36 | + |
| 37 | + /* Functions implemented in assembly */ |
| 38 | + /* |
| 39 | +@@ -139,10 +139,10 @@ static ossl_inline int is_greater(const BN_ULONG *a, const BN_ULONG *b) |
| 40 | + /* Binary algorithm for inversion in Fp */ |
| 41 | + #define BN_MOD_INV(out, in, mod_div, mod_sub, mod) \ |
| 42 | + do { \ |
| 43 | +- BN_ULONG u[4] ALIGN32; \ |
| 44 | +- BN_ULONG v[4] ALIGN32; \ |
| 45 | +- BN_ULONG x1[4] ALIGN32 = {1, 0, 0, 0}; \ |
| 46 | +- BN_ULONG x2[4] ALIGN32 = {0}; \ |
| 47 | ++ ALIGN32 BN_ULONG u[4] ; \ |
| 48 | ++ ALIGN32 BN_ULONG v[4] ; \ |
| 49 | ++ ALIGN32 BN_ULONG x1[4] = {1, 0, 0, 0}; \ |
| 50 | ++ ALIGN32 BN_ULONG x2[4] = {0}; \ |
| 51 | + \ |
| 52 | + if (is_zeros(in)) \ |
| 53 | + return; \ |
| 54 | +@@ -188,9 +188,9 @@ static ossl_inline void ecp_sm2p256_mod_ord_inverse(BN_ULONG* out, |
| 55 | + static void ecp_sm2p256_point_double(P256_POINT *R, const P256_POINT *P) |
| 56 | + { |
| 57 | + unsigned int i; |
| 58 | +- BN_ULONG tmp0[P256_LIMBS] ALIGN32; |
| 59 | +- BN_ULONG tmp1[P256_LIMBS] ALIGN32; |
| 60 | +- BN_ULONG tmp2[P256_LIMBS] ALIGN32; |
| 61 | ++ ALIGN32 BN_ULONG tmp0[P256_LIMBS] ; |
| 62 | ++ ALIGN32 BN_ULONG tmp1[P256_LIMBS] ; |
| 63 | ++ ALIGN32 BN_ULONG tmp2[P256_LIMBS] ; |
| 64 | + |
| 65 | + /* zero-check P->Z */ |
| 66 | + if (is_zeros(P->Z)) { |
| 67 | +@@ -225,10 +225,10 @@ static void ecp_sm2p256_point_add_affine(P256_POINT *R, const P256_POINT *P, |
| 68 | + const P256_POINT_AFFINE *Q) |
| 69 | + { |
| 70 | + unsigned int i; |
| 71 | +- BN_ULONG tmp0[P256_LIMBS] ALIGN32 = {0}; |
| 72 | +- BN_ULONG tmp1[P256_LIMBS] ALIGN32 = {0}; |
| 73 | +- BN_ULONG tmp2[P256_LIMBS] ALIGN32 = {0}; |
| 74 | +- BN_ULONG tmp3[P256_LIMBS] ALIGN32 = {0}; |
| 75 | ++ ALIGN32 BN_ULONG tmp0[P256_LIMBS] = {0}; |
| 76 | ++ ALIGN32 BN_ULONG tmp1[P256_LIMBS] = {0}; |
| 77 | ++ ALIGN32 BN_ULONG tmp2[P256_LIMBS] = {0}; |
| 78 | ++ ALIGN32 BN_ULONG tmp3[P256_LIMBS] = {0}; |
| 79 | + |
| 80 | + /* zero-check P->Z */ |
| 81 | + if (is_zeros(P->Z)) { |
| 82 | +@@ -288,9 +288,9 @@ static void ecp_sm2p256_point_add(P256_POINT *R, const P256_POINT *P, |
| 83 | + const P256_POINT *Q) |
| 84 | + { |
| 85 | + unsigned int i; |
| 86 | +- BN_ULONG tmp0[P256_LIMBS] ALIGN32 = {0}; |
| 87 | +- BN_ULONG tmp1[P256_LIMBS] ALIGN32 = {0}; |
| 88 | +- BN_ULONG tmp2[P256_LIMBS] ALIGN32 = {0}; |
| 89 | ++ ALIGN32 BN_ULONG tmp0[P256_LIMBS] = {0}; |
| 90 | ++ ALIGN32 BN_ULONG tmp1[P256_LIMBS] = {0}; |
| 91 | ++ ALIGN32 BN_ULONG tmp2[P256_LIMBS] = {0}; |
| 92 | + |
| 93 | + /* zero-check P | Q ->Z */ |
| 94 | + if (is_zeros(P->Z)) { |
| 95 | +@@ -382,7 +382,7 @@ static void ecp_sm2p256_point_P_mul_by_scalar(P256_POINT *R, const BN_ULONG *k, |
| 96 | + { |
| 97 | + int i, init = 0; |
| 98 | + unsigned int index, mask = 0x0f; |
| 99 | +- P256_POINT precomputed[16] ALIGN64; |
| 100 | ++ ALIGN64 P256_POINT precomputed[16] ; |
| 101 | + |
| 102 | + memset(R, 0, sizeof(P256_POINT)); |
| 103 | + |
| 104 | +@@ -427,8 +427,8 @@ static void ecp_sm2p256_point_P_mul_by_scalar(P256_POINT *R, const BN_ULONG *k, |
| 105 | + static void ecp_sm2p256_point_get_affine(P256_POINT_AFFINE *R, |
| 106 | + const P256_POINT *P) |
| 107 | + { |
| 108 | +- BN_ULONG z_inv3[P256_LIMBS] ALIGN32 = {0}; |
| 109 | +- BN_ULONG z_inv2[P256_LIMBS] ALIGN32 = {0}; |
| 110 | ++ ALIGN32 BN_ULONG z_inv3[P256_LIMBS] = {0}; |
| 111 | ++ ALIGN32 BN_ULONG z_inv2[P256_LIMBS] = {0}; |
| 112 | + |
| 113 | + if (is_one(P->Z)) { |
| 114 | + memcpy(R->X, P->X, 32); |
| 115 | +@@ -461,13 +461,13 @@ static int ecp_sm2p256_get_affine(const EC_GROUP *group, |
| 116 | + const EC_POINT *point, |
| 117 | + BIGNUM *x, BIGNUM *y, BN_CTX *ctx) |
| 118 | + { |
| 119 | +- BN_ULONG z_inv2[P256_LIMBS] ALIGN32 = {0}; |
| 120 | +- BN_ULONG z_inv3[P256_LIMBS] ALIGN32 = {0}; |
| 121 | +- BN_ULONG x_aff[P256_LIMBS] ALIGN32 = {0}; |
| 122 | +- BN_ULONG y_aff[P256_LIMBS] ALIGN32 = {0}; |
| 123 | +- BN_ULONG point_x[P256_LIMBS] ALIGN32 = {0}; |
| 124 | +- BN_ULONG point_y[P256_LIMBS] ALIGN32 = {0}; |
| 125 | +- BN_ULONG point_z[P256_LIMBS] ALIGN32 = {0}; |
| 126 | ++ ALIGN32 BN_ULONG z_inv2[P256_LIMBS] = {0}; |
| 127 | ++ ALIGN32 BN_ULONG z_inv3[P256_LIMBS] = {0}; |
| 128 | ++ ALIGN32 BN_ULONG x_aff[P256_LIMBS] = {0}; |
| 129 | ++ ALIGN32 BN_ULONG y_aff[P256_LIMBS] = {0}; |
| 130 | ++ ALIGN32 BN_ULONG point_x[P256_LIMBS] = {0}; |
| 131 | ++ ALIGN32 BN_ULONG point_y[P256_LIMBS] = {0}; |
| 132 | ++ ALIGN32 BN_ULONG point_z[P256_LIMBS] = {0}; |
| 133 | + |
| 134 | + if (EC_POINT_is_at_infinity(group, point)) { |
| 135 | + ECerr(ERR_LIB_EC, EC_R_POINT_AT_INFINITY); |
| 136 | +@@ -510,7 +510,7 @@ static int ecp_sm2p256_windowed_mul(const EC_GROUP *group, |
| 137 | + unsigned int i; |
| 138 | + int ret = 0; |
| 139 | + const BIGNUM **scalars = NULL; |
| 140 | +- BN_ULONG k[P256_LIMBS] ALIGN32 = {0}; |
| 141 | ++ ALIGN32 BN_ULONG k[P256_LIMBS] = {0}; |
| 142 | + P256_POINT kP; |
| 143 | + ALIGN32 union { |
| 144 | + P256_POINT p; |
| 145 | +@@ -572,7 +572,7 @@ static int ecp_sm2p256_points_mul(const EC_GROUP *group, |
| 146 | + { |
| 147 | + int ret = 0, p_is_infinity = 0; |
| 148 | + const EC_POINT *generator = NULL; |
| 149 | +- BN_ULONG k[P256_LIMBS] ALIGN32 = {0}; |
| 150 | ++ ALIGN32 BN_ULONG k[P256_LIMBS] = {0}; |
| 151 | + ALIGN32 union { |
| 152 | + P256_POINT p; |
| 153 | + P256_POINT_AFFINE a; |
| 154 | +@@ -646,9 +646,9 @@ err: |
| 155 | + static int ecp_sm2p256_field_mul(const EC_GROUP *group, BIGNUM *r, |
| 156 | + const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx) |
| 157 | + { |
| 158 | +- BN_ULONG a_fe[P256_LIMBS] ALIGN32 = {0}; |
| 159 | +- BN_ULONG b_fe[P256_LIMBS] ALIGN32 = {0}; |
| 160 | +- BN_ULONG r_fe[P256_LIMBS] ALIGN32 = {0}; |
| 161 | ++ ALIGN32 BN_ULONG a_fe[P256_LIMBS] = {0}; |
| 162 | ++ ALIGN32 BN_ULONG b_fe[P256_LIMBS] = {0}; |
| 163 | ++ ALIGN32 BN_ULONG r_fe[P256_LIMBS] = {0}; |
| 164 | + |
| 165 | + if (a == NULL || b == NULL || r == NULL) |
| 166 | + return 0; |
| 167 | +@@ -670,8 +670,8 @@ static int ecp_sm2p256_field_mul(const EC_GROUP *group, BIGNUM *r, |
| 168 | + static int ecp_sm2p256_field_sqr(const EC_GROUP *group, BIGNUM *r, |
| 169 | + const BIGNUM *a, BN_CTX *ctx) |
| 170 | + { |
| 171 | +- BN_ULONG a_fe[P256_LIMBS] ALIGN32 = {0}; |
| 172 | +- BN_ULONG r_fe[P256_LIMBS] ALIGN32 = {0}; |
| 173 | ++ ALIGN32 BN_ULONG a_fe[P256_LIMBS] = {0}; |
| 174 | ++ ALIGN32 BN_ULONG r_fe[P256_LIMBS] = {0}; |
| 175 | + |
| 176 | + if (a == NULL || r == NULL) |
| 177 | + return 0; |
| 178 | +@@ -693,8 +693,8 @@ static int ecp_sm2p256_inv_mod_ord(const EC_GROUP *group, BIGNUM *r, |
| 179 | + const BIGNUM *x, BN_CTX *ctx) |
| 180 | + { |
| 181 | + int ret = 0; |
| 182 | +- BN_ULONG t[P256_LIMBS] ALIGN32 = {0}; |
| 183 | +- BN_ULONG out[P256_LIMBS] ALIGN32 = {0}; |
| 184 | ++ ALIGN32 BN_ULONG t[P256_LIMBS] = {0}; |
| 185 | ++ ALIGN32 BN_ULONG out[P256_LIMBS] = {0}; |
| 186 | + |
| 187 | + if (bn_wexpand(r, P256_LIMBS) == NULL) { |
| 188 | + ECerr(ERR_LIB_EC, ERR_R_BN_LIB); |
0 commit comments