bn_lib.c 17.0 KB
Newer Older
1
/* crypto/bn/bn_lib.c */
2
/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62
 * All rights reserved.
 *
 * This package is an SSL implementation written
 * by Eric Young (eay@cryptsoft.com).
 * The implementation was written so as to conform with Netscapes SSL.
 * 
 * This library is free for commercial and non-commercial use as long as
 * the following conditions are aheared to.  The following conditions
 * apply to all code found in this distribution, be it the RC4, RSA,
 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
 * included with this distribution is covered by the same copyright terms
 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
 * 
 * Copyright remains Eric Young's, and as such any Copyright notices in
 * the code are not to be removed.
 * If this package is used in a product, Eric Young should be given attribution
 * as the author of the parts of the library used.
 * This can be in the form of a textual message at program startup or
 * in documentation (online or textual) provided with the package.
 * 
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 * 3. All advertising materials mentioning features or use of this software
 *    must display the following acknowledgement:
 *    "This product includes cryptographic software written by
 *     Eric Young (eay@cryptsoft.com)"
 *    The word 'cryptographic' can be left out if the rouines from the library
 *    being used are not cryptographic related :-).
 * 4. If you include any Windows specific code (or a derivative thereof) from 
 *    the apps directory (application code) you must include an acknowledgement:
 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
 * 
 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 * SUCH DAMAGE.
 * 
 * The licence and distribution terms for any publically available version or
 * derivative of this code cannot be changed.  i.e. this code cannot simply be
 * copied and put under another distribution licence
 * [including the GNU Public Licence.]
 */

#include <stdio.h>
#include "cryptlib.h"
#include "bn_lcl.h"

B
Ben Laurie 已提交
63
const char *BN_version="Big Number" OPENSSL_VERSION_PTEXT;
64 65 66 67 68 69 70 71 72 73

/* For a 32 bit machine
 * 2 -   4 ==  128
 * 3 -   8 ==  256
 * 4 -  16 ==  512
 * 5 -  32 == 1024
 * 6 -  64 == 2048
 * 7 - 128 == 4096
 * 8 - 256 == 8192
 */
B
Bodo Möller 已提交
74 75 76 77 78 79 80 81
OPENSSL_GLOBAL int bn_limit_bits=0;
OPENSSL_GLOBAL int bn_limit_num=8;        /* (1<<bn_limit_bits) */
OPENSSL_GLOBAL int bn_limit_bits_low=0;
OPENSSL_GLOBAL int bn_limit_num_low=8;    /* (1<<bn_limit_bits_low) */
OPENSSL_GLOBAL int bn_limit_bits_high=0;
OPENSSL_GLOBAL int bn_limit_num_high=8;   /* (1<<bn_limit_bits_high) */
OPENSSL_GLOBAL int bn_limit_bits_mont=0;
OPENSSL_GLOBAL int bn_limit_num_mont=8;   /* (1<<bn_limit_bits_mont) */
82

U
Ulf Möller 已提交
83
void BN_set_params(int mult, int high, int low, int mont)
84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114
	{
	if (mult >= 0)
		{
		if (mult > (sizeof(int)*8)-1)
			mult=sizeof(int)*8-1;
		bn_limit_bits=mult;
		bn_limit_num=1<<mult;
		}
	if (high >= 0)
		{
		if (high > (sizeof(int)*8)-1)
			high=sizeof(int)*8-1;
		bn_limit_bits_high=high;
		bn_limit_num_high=1<<high;
		}
	if (low >= 0)
		{
		if (low > (sizeof(int)*8)-1)
			low=sizeof(int)*8-1;
		bn_limit_bits_low=low;
		bn_limit_num_low=1<<low;
		}
	if (mont >= 0)
		{
		if (mont > (sizeof(int)*8)-1)
			mont=sizeof(int)*8-1;
		bn_limit_bits_mont=mont;
		bn_limit_num_mont=1<<mont;
		}
	}

U
Ulf Möller 已提交
115
int BN_get_params(int which)
116 117 118 119 120 121 122
	{
	if      (which == 0) return(bn_limit_bits);
	else if (which == 1) return(bn_limit_bits_high);
	else if (which == 2) return(bn_limit_bits_low);
	else if (which == 3) return(bn_limit_bits_mont);
	else return(0);
	}
123

U
Ulf Möller 已提交
124
BIGNUM *BN_value_one(void)
125 126 127 128 129 130 131
	{
	static BN_ULONG data_one=1L;
	static BIGNUM const_one={&data_one,1,1,0};

	return(&const_one);
	}

U
Ulf Möller 已提交
132
char *BN_options(void)
133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150
	{
	static int init=0;
	static char data[16];

	if (!init)
		{
		init++;
#ifdef BN_LLONG
		sprintf(data,"bn(%d,%d)",(int)sizeof(BN_ULLONG)*8,
			(int)sizeof(BN_ULONG)*8);
#else
		sprintf(data,"bn(%d,%d)",(int)sizeof(BN_ULONG)*8,
			(int)sizeof(BN_ULONG)*8);
#endif
		}
	return(data);
	}

U
Ulf Möller 已提交
151
int BN_num_bits_word(BN_ULONG l)
152
	{
153
	static const char bits[256]={
154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171
		0,1,2,2,3,3,3,3,4,4,4,4,4,4,4,4,
		5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,
		6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,
		6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,6,
		7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,
		7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,
		7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,
		7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,7,
		8,8,8,8,8,8,8,8,8,8,8,8,8,8,8,8,
		8,8,8,8,8,8,8,8,8,8,8,8,8,8,8,8,
		8,8,8,8,8,8,8,8,8,8,8,8,8,8,8,8,
		8,8,8,8,8,8,8,8,8,8,8,8,8,8,8,8,
		8,8,8,8,8,8,8,8,8,8,8,8,8,8,8,8,
		8,8,8,8,8,8,8,8,8,8,8,8,8,8,8,8,
		8,8,8,8,8,8,8,8,8,8,8,8,8,8,8,8,
		8,8,8,8,8,8,8,8,8,8,8,8,8,8,8,8,
		};

172
#if defined(SIXTY_FOUR_BIT_LONG)
173 174 175 176 177 178
	if (l & 0xffffffff00000000L)
		{
		if (l & 0xffff000000000000L)
			{
			if (l & 0xff00000000000000L)
				{
179
				return(bits[(int)(l>>56)]+56);
180
				}
181
			else	return(bits[(int)(l>>48)]+48);
182 183 184 185 186
			}
		else
			{
			if (l & 0x0000ff0000000000L)
				{
187
				return(bits[(int)(l>>40)]+40);
188
				}
189
			else	return(bits[(int)(l>>32)]+32);
190 191 192 193 194 195 196 197 198 199 200
			}
		}
	else
#else
#ifdef SIXTY_FOUR_BIT
	if (l & 0xffffffff00000000LL)
		{
		if (l & 0xffff000000000000LL)
			{
			if (l & 0xff00000000000000LL)
				{
201
				return(bits[(int)(l>>56)]+56);
202
				}
203
			else	return(bits[(int)(l>>48)]+48);
204 205 206 207 208
			}
		else
			{
			if (l & 0x0000ff0000000000LL)
				{
209
				return(bits[(int)(l>>40)]+40);
210
				}
211
			else	return(bits[(int)(l>>32)]+32);
212 213 214 215 216 217 218 219 220 221
			}
		}
	else
#endif
#endif
		{
#if defined(THIRTY_TWO_BIT) || defined(SIXTY_FOUR_BIT) || defined(SIXTY_FOUR_BIT_LONG)
		if (l & 0xffff0000L)
			{
			if (l & 0xff000000L)
222 223
				return(bits[(int)(l>>24L)]+24);
			else	return(bits[(int)(l>>16L)]+16);
224 225 226 227 228 229
			}
		else
#endif
			{
#if defined(SIXTEEN_BIT) || defined(THIRTY_TWO_BIT) || defined(SIXTY_FOUR_BIT) || defined(SIXTY_FOUR_BIT_LONG)
			if (l & 0xff00L)
230
				return(bits[(int)(l>>8)]+8);
231 232
			else	
#endif
233
				return(bits[(int)(l   )]  );
234 235 236 237
			}
		}
	}

238
int BN_num_bits(const BIGNUM *a)
239 240 241 242
	{
	BN_ULONG l;
	int i;

243 244
	bn_check_top(a);

245 246 247 248 249
	if (a->top == 0) return(0);
	l=a->d[a->top-1];
	i=(a->top-1)*BN_BITS2;
	if (l == 0)
		{
250
#if !defined(NO_STDIO) && !defined(WIN16)
251 252 253 254 255 256 257
		fprintf(stderr,"BAD TOP VALUE\n");
#endif
		abort();
		}
	return(i+BN_num_bits_word(l));
	}

U
Ulf Möller 已提交
258
void BN_clear_free(BIGNUM *a)
259
	{
260 261
	int i;

262 263 264 265
	if (a == NULL) return;
	if (a->d != NULL)
		{
		memset(a->d,0,a->max*sizeof(a->d[0]));
266 267
		if (!(BN_get_flags(a,BN_FLG_STATIC_DATA)))
			Free(a->d);
268
		}
269
	i=BN_get_flags(a,BN_FLG_MALLOCED);
270
	memset(a,0,sizeof(BIGNUM));
271 272
	if (i)
		Free(a);
273 274
	}

U
Ulf Möller 已提交
275
void BN_free(BIGNUM *a)
276 277
	{
	if (a == NULL) return;
278 279 280 281 282 283 284
	if ((a->d != NULL) && !(BN_get_flags(a,BN_FLG_STATIC_DATA)))
		Free(a->d);
	a->flags|=BN_FLG_FREE; /* REMOVE? */
	if (a->flags & BN_FLG_MALLOCED)
		Free(a);
	}

U
Ulf Möller 已提交
285
void BN_init(BIGNUM *a)
286 287
	{
	memset(a,0,sizeof(BIGNUM));
288 289
	}

U
Ulf Möller 已提交
290
BIGNUM *BN_new(void)
291 292 293
	{
	BIGNUM *ret;

294 295 296 297 298 299
	if ((ret=(BIGNUM *)Malloc(sizeof(BIGNUM))) == NULL)
		{
		BNerr(BN_F_BN_NEW,ERR_R_MALLOC_FAILURE);
		return(NULL);
		}
	ret->flags=BN_FLG_MALLOCED;
300 301
	ret->top=0;
	ret->neg=0;
302 303
	ret->max=0;
	ret->d=NULL;
304 305 306
	return(ret);
	}

307

U
Ulf Möller 已提交
308
BN_CTX *BN_CTX_new(void)
309 310 311 312
	{
	BN_CTX *ret;

	ret=(BN_CTX *)Malloc(sizeof(BN_CTX));
313
	if (ret == NULL)
314
		{
315 316
		BNerr(BN_F_BN_CTX_NEW,ERR_R_MALLOC_FAILURE);
		return(NULL);
317 318
		}

319 320
	BN_CTX_init(ret);
	ret->flags=BN_FLG_MALLOCED;
321
	return(ret);
322 323
	}

U
Ulf Möller 已提交
324
void BN_CTX_init(BN_CTX *ctx)
325 326 327 328
	{
	memset(ctx,0,sizeof(BN_CTX));
	ctx->tos=0;
	ctx->flags=0;
329 330
	}

U
Ulf Möller 已提交
331
void BN_CTX_free(BN_CTX *c)
332 333 334
	{
	int i;

B
Ben Laurie 已提交
335 336 337
	if(c == NULL)
	    return;

338
	for (i=0; i<BN_CTX_NUM; i++)
339 340 341
		BN_clear_free(&(c->bn[i]));
	if (c->flags & BN_FLG_MALLOCED)
		Free(c);
342 343
	}

U
Ulf Möller 已提交
344 345 346 347 348
/* This is an internal function that should not be used in applications.
 * It ensures that 'b' has enough room for a 'bits' bit number.  It is
 * mostly used by the various BIGNUM routines.  If there is an error,
 * NULL is returned. if not, 'b' is returned.
 */
U
Ulf Möller 已提交
349
BIGNUM *bn_expand2(BIGNUM *b, int words)
350
	{
351 352 353
	BN_ULONG *A,*a;
	const BN_ULONG *B;
	int i;
354 355

	bn_check_top(b);
356

357
	if (words > b->max)
358
		{
359 360 361 362 363 364 365 366
		bn_check_top(b);	
		if (BN_get_flags(b,BN_FLG_STATIC_DATA))
			{
			BNerr(BN_F_BN_EXPAND2,BN_R_EXPAND_ON_STATIC_BIGNUM_DATA);
			return(NULL);
			}
		a=A=(BN_ULONG *)Malloc(sizeof(BN_ULONG)*(words+1));
		if (A == NULL)
367 368 369 370
			{
			BNerr(BN_F_BN_EXPAND2,ERR_R_MALLOC_FAILURE);
			return(NULL);
			}
371 372
#if 1
		B=b->d;
373
		/* Check if the previous number needs to be copied */
374 375
		if (B != NULL)
			{
376
#if 0
377 378 379
			/* This lot is an unrolled loop to copy b->top 
			 * BN_ULONGs from B to A
			 */
380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396
/*
 * I have nothing against unrolling but it's usually done for
 * several reasons, namely:
 * - minimize percentage of decision making code, i.e. branches;
 * - avoid cache trashing;
 * - make it possible to schedule loads earlier;
 * Now let's examine the code below. The cornerstone of C is
 * "programmer is always right" and that's what we love it for:-)
 * For this very reason C compilers have to be paranoid when it
 * comes to data aliasing and assume the worst. Yeah, but what
 * does it mean in real life? This means that loop body below will
 * be compiled to sequence of loads immediately followed by stores
 * as compiler assumes the worst, something in A==B+1 style. As a
 * result CPU pipeline is going to starve for incoming data. Secondly
 * if A and B happen to share same cache line such code is going to
 * cause severe cache trashing. Both factors have severe impact on
 * performance of modern CPUs and this is the reason why this
U
Ulf Möller 已提交
397
 * particular piece of code is #ifdefed away and replaced by more
398 399 400 401 402
 * "friendly" version found in #else section below. This comment
 * also applies to BN_copy function.
 *
 *					<appro@fy.chalmers.se>
 */
403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427
			for (i=b->top&(~7); i>0; i-=8)
				{
				A[0]=B[0]; A[1]=B[1]; A[2]=B[2]; A[3]=B[3];
				A[4]=B[4]; A[5]=B[5]; A[6]=B[6]; A[7]=B[7];
				A+=8;
				B+=8;
				}
			switch (b->top&7)
				{
			case 7:
				A[6]=B[6];
			case 6:
				A[5]=B[5];
			case 5:
				A[4]=B[4];
			case 4:
				A[3]=B[3];
			case 3:
				A[2]=B[2];
			case 2:
				A[1]=B[1];
			case 1:
				A[0]=B[0];
			case 0:
				/* I need the 'case 0' entry for utrix cc.
U
Ulf Möller 已提交
428
				 * If the optimizer is turned on, it does the
429 430 431 432 433 434 435 436 437 438
				 * switch table by doing
				 * a=top&7
				 * a--;
				 * goto jump_table[a];
				 * If top is 0, this makes us jump to 0xffffffc 
				 * which is rather bad :-(.
				 * eric 23-Apr-1998
				 */
				;
				}
439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462
#else
			for (i=b->top>>2; i>0; i--,A+=4,B+=4)
				{
				/*
				 * The fact that the loop is unrolled
				 * 4-wise is a tribute to Intel. It's
				 * the one that doesn't have enough
				 * registers to accomodate more data.
				 * I'd unroll it 8-wise otherwise:-)
				 *
				 *		<appro@fy.chalmers.se>
				 */
				BN_ULONG a0,a1,a2,a3;
				a0=B[0]; a1=B[1]; a2=B[2]; a3=B[3];
				A[0]=a0; A[1]=a1; A[2]=a2; A[3]=a3;
				}
			switch (b->top&3)
				{
				case 3:	A[2]=B[2];
				case 2:	A[1]=B[1];
				case 1:	A[0]=B[0];
				case 0:	; /* ultrix cc workaround, see above */
				}
#endif
463 464 465 466 467 468 469 470
			Free(b->d);
			}

		b->d=a;
		b->max=words;

		/* Now need to zero any data between b->top and b->max */

471 472
		A= &(b->d[b->top]);
		for (i=(b->max - b->top)>>3; i>0; i--,A+=8)
473
			{
474 475
			A[0]=0; A[1]=0; A[2]=0; A[3]=0;
			A[4]=0; A[5]=0; A[6]=0; A[7]=0;
476
			}
477 478
		for (i=(b->max - b->top)&7; i>0; i--,A++)
			A[0]=0;
479
#else
480 481 482 483
			memset(A,0,sizeof(BN_ULONG)*(words+1));
			memcpy(A,b->d,sizeof(b->d[0])*b->top);
			b->d=a;
			b->max=words;
484 485 486 487 488
#endif
		
/*		memset(&(p[b->max]),0,((words+1)-b->max)*sizeof(BN_ULONG)); */
/*	{ int i; for (i=b->max; i<words+1; i++) p[i]=i;} */

489 490 491 492
		}
	return(b);
	}

493
BIGNUM *BN_dup(const BIGNUM *a)
494 495 496
	{
	BIGNUM *r;

497 498
	if (a == NULL) return NULL;

499 500
	bn_check_top(a);

501 502 503 504 505
	r=BN_new();
	if (r == NULL) return(NULL);
	return((BIGNUM *)BN_copy(r,a));
	}

506
BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
507
	{
508
	int i;
509 510
	BN_ULONG *A;
	const BN_ULONG *B;
511

512 513
	bn_check_top(b);

514 515 516 517 518 519
	if (a == b) return(a);
	if (bn_wexpand(a,b->top) == NULL) return(NULL);

#if 1
	A=a->d;
	B=b->d;
520
	for (i=b->top>>2; i>0; i--,A+=4,B+=4)
521
		{
522 523 524
		BN_ULONG a0,a1,a2,a3;
		a0=B[0]; a1=B[1]; a2=B[2]; a3=B[3];
		A[0]=a0; A[1]=a1; A[2]=a2; A[3]=a3;
525
		}
526
	switch (b->top&3)
527
		{
528 529 530 531
		case 3: A[2]=B[2];
		case 2: A[1]=B[1];
		case 1: A[0]=B[0];
		case 0: ; /* ultrix cc workaround, see comments in bn_expand2 */
532 533
		}
#else
534
	memcpy(a->d,b->d,sizeof(b->d[0])*b->top);
535 536
#endif

537 538
/*	memset(&(a->d[b->top]),0,sizeof(a->d[0])*(a->max-b->top));*/
	a->top=b->top;
539
	if ((a->top == 0) && (a->d != NULL))
540
		a->d[0]=0;
541 542 543 544
	a->neg=b->neg;
	return(a);
	}

U
Ulf Möller 已提交
545
void BN_clear(BIGNUM *a)
546
	{
547 548
	if (a->d != NULL)
		memset(a->d,0,a->max*sizeof(a->d[0]));
549 550 551 552
	a->top=0;
	a->neg=0;
	}

U
Ulf Möller 已提交
553
BN_ULONG BN_get_word(BIGNUM *a)
554 555
	{
	int i,n;
556
	BN_ULONG ret=0;
557 558

	n=BN_num_bytes(a);
559
	if (n > sizeof(BN_ULONG))
560 561 562 563 564 565
		return(BN_MASK2);
	for (i=a->top-1; i>=0; i--)
		{
#ifndef SIXTY_FOUR_BIT /* the data item > unsigned long */
		ret<<=BN_BITS4; /* stops the compiler complaining */
		ret<<=BN_BITS4;
566 567
#else
		ret=0;
568 569 570 571 572 573
#endif
		ret|=a->d[i];
		}
	return(ret);
	}

U
Ulf Möller 已提交
574
int BN_set_word(BIGNUM *a, BN_ULONG w)
575 576
	{
	int i,n;
577
	if (bn_expand(a,sizeof(BN_ULONG)*8) == NULL) return(0);
578

579
	n=sizeof(BN_ULONG)/BN_BYTES;
580 581 582 583 584 585 586 587 588 589 590 591
	a->neg=0;
	a->top=0;
	a->d[0]=(BN_ULONG)w&BN_MASK2;
	if (a->d[0] != 0) a->top=1;
	for (i=1; i<n; i++)
		{
		/* the following is done instead of
		 * w>>=BN_BITS2 so compilers don't complain
		 * on builds where sizeof(long) == BN_TYPES */
#ifndef SIXTY_FOUR_BIT /* the data item > unsigned long */
		w>>=BN_BITS4;
		w>>=BN_BITS4;
592 593
#else
		w=0;
594 595 596 597 598 599 600 601
#endif
		a->d[i]=(BN_ULONG)w&BN_MASK2;
		if (a->d[i] != 0) a->top=i+1;
		}
	return(1);
	}

/* ignore negative */
B
Ben Laurie 已提交
602
BIGNUM *BN_bin2bn(const unsigned char *s, int len, BIGNUM *ret)
603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638
	{
	unsigned int i,m;
	unsigned int n;
	BN_ULONG l;

	if (ret == NULL) ret=BN_new();
	if (ret == NULL) return(NULL);
	l=0;
	n=len;
	if (n == 0)
		{
		ret->top=0;
		return(ret);
		}
	if (bn_expand(ret,(int)(n+2)*8) == NULL)
		return(NULL);
	i=((n-1)/BN_BYTES)+1;
	m=((n-1)%(BN_BYTES));
	ret->top=i;
	while (n-- > 0)
		{
		l=(l<<8L)| *(s++);
		if (m-- == 0)
			{
			ret->d[--i]=l;
			l=0;
			m=BN_BYTES-1;
			}
		}
	/* need to call this due to clear byte at top if avoiding
	 * having the top bit set (-ve number) */
	bn_fix_top(ret);
	return(ret);
	}

/* ignore negative */
639
int BN_bn2bin(const BIGNUM *a, unsigned char *to)
640 641 642 643 644 645 646 647 648 649 650 651 652
	{
	int n,i;
	BN_ULONG l;

	n=i=BN_num_bytes(a);
	while (i-- > 0)
		{
		l=a->d[i/BN_BYTES];
		*(to++)=(unsigned char)(l>>(8*(i%BN_BYTES)))&0xff;
		}
	return(n);
	}

653
int BN_ucmp(const BIGNUM *a, const BIGNUM *b)
654 655 656 657
	{
	int i;
	BN_ULONG t1,t2,*ap,*bp;

658 659 660
	bn_check_top(a);
	bn_check_top(b);

661 662 663 664 665 666 667 668 669 670 671 672 673 674
	i=a->top-b->top;
	if (i != 0) return(i);
	ap=a->d;
	bp=b->d;
	for (i=a->top-1; i>=0; i--)
		{
		t1= ap[i];
		t2= bp[i];
		if (t1 != t2)
			return(t1 > t2?1:-1);
		}
	return(0);
	}

675
int BN_cmp(const BIGNUM *a, const BIGNUM *b)
676 677 678 679 680 681 682 683 684 685 686 687 688 689
	{
	int i;
	int gt,lt;
	BN_ULONG t1,t2;

	if ((a == NULL) || (b == NULL))
		{
		if (a != NULL)
			return(-1);
		else if (b != NULL)
			return(1);
		else
			return(0);
		}
690 691 692 693

	bn_check_top(a);
	bn_check_top(b);

694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715
	if (a->neg != b->neg)
		{
		if (a->neg)
			return(-1);
		else	return(1);
		}
	if (a->neg == 0)
		{ gt=1; lt= -1; }
	else	{ gt= -1; lt=1; }

	if (a->top > b->top) return(gt);
	if (a->top < b->top) return(lt);
	for (i=a->top-1; i>=0; i--)
		{
		t1=a->d[i];
		t2=b->d[i];
		if (t1 > t2) return(gt);
		if (t1 < t2) return(lt);
		}
	return(0);
	}

U
Ulf Möller 已提交
716
int BN_set_bit(BIGNUM *a, int n)
717
	{
718
	int i,j,k;
719 720 721

	i=n/BN_BITS2;
	j=n%BN_BITS2;
722 723
	if (a->top <= i)
		{
724 725 726
		if (bn_wexpand(a,i+1) == NULL) return(0);
		for(k=a->top; k<i+1; k++)
			a->d[k]=0;
727 728
		a->top=i+1;
		}
729

730
	a->d[i]|=(((BN_ULONG)1)<<j);
731 732 733
	return(1);
	}

U
Ulf Möller 已提交
734
int BN_clear_bit(BIGNUM *a, int n)
735 736 737 738 739 740 741
	{
	int i,j;

	i=n/BN_BITS2;
	j=n%BN_BITS2;
	if (a->top <= i) return(0);

742
	a->d[i]&=(~(((BN_ULONG)1)<<j));
743
	bn_fix_top(a);
744 745 746
	return(1);
	}

747
int BN_is_bit_set(const BIGNUM *a, int n)
748 749 750 751 752 753 754 755 756 757
	{
	int i,j;

	if (n < 0) return(0);
	i=n/BN_BITS2;
	j=n%BN_BITS2;
	if (a->top <= i) return(0);
	return((a->d[i]&(((BN_ULONG)1)<<j))?1:0);
	}

U
Ulf Möller 已提交
758
int BN_mask_bits(BIGNUM *a, int n)
759 760 761 762 763 764 765 766 767 768 769 770 771
	{
	int b,w;

	w=n/BN_BITS2;
	b=n%BN_BITS2;
	if (w >= a->top) return(0);
	if (b == 0)
		a->top=w;
	else
		{
		a->top=w+1;
		a->d[w]&= ~(BN_MASK2<<b);
		}
772
	bn_fix_top(a);
773 774
	return(1);
	}
775

U
Ulf Möller 已提交
776
int bn_cmp_words(BN_ULONG *a, BN_ULONG *b, int n)
777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792
	{
	int i;
	BN_ULONG aa,bb;

	aa=a[n-1];
	bb=b[n-1];
	if (aa != bb) return((aa > bb)?1:-1);
	for (i=n-2; i>=0; i--)
		{
		aa=a[i];
		bb=b[i];
		if (aa != bb) return((aa > bb)?1:-1);
		}
	return(0);
	}