X-Git-Url: https://bearssl.org/gitweb//home/git/?p=BearSSL;a=blobdiff_plain;f=src%2Fec%2Fec_prime_i31.c;h=0f2baa0f2e0d183eac34e6eabdc103079d0761d9;hp=440641e63b367c834b57cafa6313468e8896ebf9;hb=2f9c953af45299f8546df8984d5262e767a7d943;hpb=3210f38e0491b39aec1ef419cb4114e9483089fb

diff --git a/src/ec/ec_prime_i31.c b/src/ec/ec_prime_i31.c
index 440641e..0f2baa0 100644
--- a/src/ec/ec_prime_i31.c
+++ b/src/ec/ec_prime_i31.c
@@ -135,7 +135,7 @@ typedef struct {
 
 /*
  * We use a custom interpreter that uses a dozen registers, and
- * only four operations:
+ * only six operations:
  *    MSET(d, a)       copy a into d
  *    MADD(d, a)       d = d+a (modular)
  *    MSUB(d, a)       d = d-a (modular)
@@ -732,6 +732,19 @@ api_mul(unsigned char *G, size_t Glen,
 	return r;
 }
 
+static size_t
+api_mulgen(unsigned char *R,
+	const unsigned char *x, size_t xlen, int curve)
+{
+	const unsigned char *G;
+	size_t Glen;
+
+	G = api_generator(curve, &Glen);
+	memcpy(R, G, Glen);
+	api_mul(R, Glen, x, xlen, curve);
+	return Glen;
+}
+
 static uint32_t
 api_muladd(unsigned char *A, const unsigned char *B, size_t len,
 	const unsigned char *x, size_t xlen,
@@ -749,6 +762,11 @@ api_muladd(unsigned char *A, const unsigned char *B, size_t len,
 
 	cc = id_to_curve(curve);
 	r = point_decode(&P, A, len, cc);
+	if (B == NULL) {
+		size_t Glen;
+
+		B = api_generator(curve, &Glen);
+	}
 	r &= point_decode(&Q, B, len, cc);
 	point_mul(&P, x, xlen, cc);
 	point_mul(&Q, y, ylen, cc);
@@ -787,5 +805,6 @@ const br_ec_impl br_ec_prime_i31 = {
 	&api_generator,
 	&api_order,
 	&api_mul,
+	&api_mulgen,
 	&api_muladd
 };